@canhta/dsh-autopilot 0.1.0-alpha.1

package/lib/operations/inspection.js

@@ -0,0 +1,183 @@
+import { createHash } from 'node:crypto';
+import { access, lstat, opendir, realpath } from 'node:fs/promises';
+import { join, relative, resolve, sep } from 'node:path';
+import { gitCommand } from '../dispatch/git.js';
+export function cleanupRejections(input) {
+    const reasons = [];
+    switch (input.run.state) {
+        case 'queued':
+        case 'implementing':
+        case 'pausing':
+            reasons.push('run-active');
+            break;
+        case 'paused':
+            reasons.push('run-paused');
+            break;
+        case 'publishing':
+            reasons.push('run-publishing');
+            break;
+        case 'blocked':
+            reasons.push('run-blocked');
+            break;
+        case 'failed':
+            reasons.push('run-failed');
+            break;
+        case 'completed':
+            if (hasUnresolvedExternalIntent(input.run, true)) {
+                reasons.push('external-intent-unresolved');
+            }
+            break;
+        case 'cancelled':
+            if (hasUnresolvedExternalIntent(input.run, false))
+                reasons.push('external-intent-unresolved');
+            break;
+        default:
+            input.run;
+    }
+    if (input.run.execution.recovery !== undefined)
+        reasons.push('recovery-required');
+    if (!input.ownership)
+        reasons.push(input.missing ? 'worktree-missing' : 'ownership-unproven');
+    if (input.dirtyFiles.length > 0)
+        reasons.push('dirty-files');
+    if (input.untrackedFiles.length > 0)
+        reasons.push('untracked-files');
+    if (input.unpushedCommits === 'unknown' || input.unpushedCommits > 0)
+        reasons.push('unpushed-commits');
+    if (input.disposition.state === 'open')
+        reasons.push('pr-open');
+    else if (input.disposition.state === 'unknown')
+        reasons.push('pr-unknown');
+    else if (input.disposition.state === 'closed-unmerged')
+        reasons.push('pr-closed-unmerged');
+    if (input.retentionEligibleAt === undefined || Date.parse(input.retentionEligibleAt) > input.now) {
+        reasons.push('retention-not-met');
+    }
+    return [...new Set(reasons)];
+}
+function hasUnresolvedExternalIntent(run, publicationRequired) {
+    const publication = 'publication' in run ? run.publication : undefined;
+    return ((publicationRequired && publication === undefined) ||
+        (publication !== undefined && (publication.status !== 'succeeded' || publication.receipt === undefined)) ||
+        run.deliveries.some((delivery) => ['pending', 'in-flight', 'uncertain', 'retryable-failure', 'exhausted'].includes(delivery.status)));
+}
+export async function inspectOwnership(ctx, run, managedRoot) {
+    const expected = resolve(managedRoot, run.runId);
+    if (resolve(run.execution.worktreePath) !== expected)
+        throw new Error('recorded path is not the configured run-owned path');
+    const [root, worktree, repository, observedRoot, common, targetCommon] = await Promise.all([
+        canonicalExistingPath(managedRoot),
+        canonicalExistingPath(run.execution.worktreePath),
+        canonicalExistingPath(run.execution.targetRepository),
+        gitCommand(ctx.subprocess, run.execution.worktreePath, ['rev-parse', '--show-toplevel']),
+        gitCommand(ctx.subprocess, run.execution.worktreePath, ['rev-parse', '--path-format=absolute', '--git-common-dir']),
+        gitCommand(ctx.subprocess, run.execution.targetRepository, [
+            'rev-parse',
+            '--path-format=absolute',
+            '--git-common-dir',
+        ]),
+    ]);
+    if (!inside(root, worktree) || resolve(root, run.runId) !== worktree)
+        throw new Error('worktree escaped its managed root');
+    if ((await canonicalExistingPath(observedRoot.trim())) !== worktree)
+        throw new Error('Git top level differs from recorded path');
+    if ((await canonicalExistingPath(common.trim())) !== (await canonicalExistingPath(targetCommon.trim()))) {
+        throw new Error('worktree does not belong to the recorded target repository');
+    }
+    const branch = (await gitCommand(ctx.subprocess, worktree, ['rev-parse', '--abbrev-ref', 'HEAD'])).trim();
+    if (branch !== run.execution.branch)
+        throw new Error('worktree branch differs from durable ownership');
+    const registered = await listWorktrees(ctx, repository);
+    if (!registered.some((entry) => resolve(entry.path) === worktree))
+        throw new Error('Git does not register the worktree');
+}
+export async function listWorktrees(ctx, repository) {
+    if (repository === '')
+        return [];
+    const output = await gitCommand(ctx.subprocess, repository, ['worktree', 'list', '--porcelain', '-z']);
+    const result = [];
+    let current;
+    for (const field of output.split('\0')) {
+        if (field === '') {
+            if (current !== undefined)
+                result.push(current);
+            current = undefined;
+        }
+        else if (field.startsWith('worktree ')) {
+            if (current !== undefined)
+                result.push(current);
+            current = { path: field.slice('worktree '.length) };
+        }
+        else if (field.startsWith('branch ') && current !== undefined) {
+            current.branch = field.slice('branch refs/heads/'.length);
+        }
+    }
+    if (current !== undefined)
+        result.push(current);
+    return result;
+}
+export function parseStatus(status) {
+    const dirtyFiles = [];
+    const untrackedFiles = [];
+    for (const entry of status.split('\0')) {
+        if (entry.length < 4 || entry[2] !== ' ')
+            continue;
+        const path = entry.slice(3);
+        if (entry.startsWith('?? '))
+            untrackedFiles.push(path);
+        else
+            dirtyFiles.push(path);
+    }
+    return { dirtyFiles, untrackedFiles };
+}
+export async function directoryBytes(path) {
+    const metadata = await lstat(path);
+    if (!metadata.isDirectory())
+        return metadata.size;
+    let total = metadata.size;
+    const directory = await opendir(path);
+    for await (const entry of directory) {
+        const child = join(path, entry.name);
+        const childMetadata = await lstat(child);
+        total +=
+            childMetadata.isDirectory() && !childMetadata.isSymbolicLink() ? await directoryBytes(child) : childMetadata.size;
+    }
+    return total;
+}
+export function allocatedRun(snapshot, runId) {
+    const run = snapshot.runs.find((candidate) => candidate.runId === runId);
+    if (run === undefined)
+        throw new Error(`run "${runId}" does not exist`);
+    if (!hasExecution(run))
+        throw new Error(`run "${runId}" has no allocated worktree`);
+    return run;
+}
+export function hasExecution(run) {
+    return 'execution' in run;
+}
+export function fingerprint(value) {
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+export async function canonicalExistingPath(path) {
+    return resolve(await realpath(path));
+}
+export function inside(root, candidate) {
+    const child = relative(root, candidate);
+    return child !== '' && child !== '..' && !child.startsWith(`..${sep}`) && !child.startsWith(sep);
+}
+export async function pathExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+export function boundedError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.length <= 4096 ? message : message.slice(0, 4096);
+}
+//# sourceMappingURL=inspection.js.map

package/lib/operations/inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspection.js","sourceRoot":"","sources":["../../src/operations/inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAM/C,MAAM,UAAU,iBAAiB,CAAC,KAUjC;IACC,MAAM,OAAO,GAAuB,EAAE,CAAA;IACtC,QAAQ,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC;QACd,KAAK,cAAc,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,MAAK;QACP,KAAK,QAAQ;YACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,MAAK;QACP,KAAK,YAAY;YACf,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC9B,MAAK;QACP,KAAK,SAAS;YACZ,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC3B,MAAK;QACP,KAAK,QAAQ;YACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,MAAK;QACP,KAAK,WAAW;YACd,IAAI,2BAA2B,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;YAC5C,CAAC;YACD,MAAK;QACP,KAAK,WAAW;YACd,IAAI,2BAA2B,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;YAC7F,MAAK;QACP;YACE,KAAK,CAAC,GAAmB,CAAA;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACjF,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;IAC7F,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC5D,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACpE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACtG,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;SAC1D,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;SACrE,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC1F,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAiB,EAAE,mBAA4B;IAClF,MAAM,WAAW,GAAG,aAAa,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACtE,OAAO,CACL,CAAC,mBAAmB,IAAI,WAAW,KAAK,SAAS,CAAC;QAClD,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QACxG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/B,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClG,CACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAiB,EAAE,WAAmB;IACzF,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,QAAQ;QAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzF,qBAAqB,CAAC,WAAW,CAAC;QAClC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;QACjD,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;QACrD,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACxF,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;QACnH,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE;YACzD,WAAW;YACX,wBAAwB;YACxB,kBAAkB;SACnB,CAAC;KACH,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;QAClE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,IAAI,CAAC,MAAM,qBAAqB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,QAAQ;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,qBAAqB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACzG,IAAI,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACtG,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,UAAkB;IAClE,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAA;IACtG,MAAM,MAAM,GAAwC,EAAE,CAAA;IACtD,IAAI,OAAsD,CAAA;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC/C,OAAO,GAAG,SAAS,CAAA;QACrB,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC/C,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAA;QACrD,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAChE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/C,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,SAAQ;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;;YACjD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAA;IACjD,IAAI,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,KAAK;YACH,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAA;IACrH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA2B,EAAE,KAAY;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;IACxE,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAA;IACvE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,6BAA6B,CAAC,CAAA;IACnF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAiB;IAC5C,OAAO,WAAW,IAAI,GAAG,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,OAAO,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,SAAiB;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACvC,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;AAClG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;AAClE,CAAC"}

package/lib/operations/model.d.ts

@@ -0,0 +1,77 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { AdmissionSnapshot, RunId } from '../admission.js';
+import type { PullRequestDisposition } from './disposition.js';
+export type CleanupRejection = 'run-active' | 'run-paused' | 'run-publishing' | 'run-blocked' | 'run-failed' | 'external-intent-unresolved' | 'recovery-required' | 'ownership-unproven' | 'worktree-missing' | 'dirty-files' | 'untracked-files' | 'unpushed-commits' | 'pr-open' | 'pr-unknown' | 'pr-closed-unmerged' | 'retention-not-met';
+export interface CleanupPreview {
+    readonly previewId: string;
+    readonly runId: RunId;
+    readonly admissionRevision: number;
+    readonly worktreePath: string;
+    readonly branch: string;
+    readonly head?: string;
+    readonly dirtyFiles: readonly string[];
+    readonly untrackedFiles: readonly string[];
+    readonly unpushedCommits: number | 'unknown';
+    readonly disposition: PullRequestDisposition;
+    readonly retentionReference?: string;
+    readonly retentionEligibleAt?: string;
+    readonly removableBytes: number | 'unknown';
+    readonly retainedData: readonly ['run', 'session', 'audit'];
+    readonly eligible: boolean;
+    readonly rejections: readonly CleanupRejection[];
+}
+export interface RetainedWorktreeFact {
+    readonly runId: RunId;
+    readonly path: string;
+    readonly state: 'managed' | 'missing' | 'unsafe';
+    readonly detail?: string;
+}
+export interface OrphanWorktreeFact {
+    readonly path: string;
+    readonly branch?: string;
+    readonly state: 'orphan-reconciliation-required';
+}
+export interface MaintenanceAudit {
+    readonly id: string;
+    readonly operationId?: string | undefined;
+    readonly at: string;
+    readonly kind: 'merge-observed' | 'cleanup-started' | 'cleanup-removed' | 'cleanup-rejected' | 'cleanup-recovered';
+    readonly runId: RunId;
+    readonly worktreePath: string;
+    readonly outcome?: 'completed' | 'retry-required' | undefined;
+    readonly detail: string;
+}
+export interface RecoveryParticipant {
+    /** Reconcile this participant's durable unfinished effects; nonzero pending work keeps dispatch fenced. */
+    reconcile(signal: AbortSignal): Promise<RecoveryParticipantFact>;
+}
+export interface RecoveryParticipantFact {
+    readonly pending: number;
+    readonly failure?: string;
+}
+export interface OperationsHealth {
+    readonly process: {
+        status: 'alive';
+        owner: ReturnType<Context['runtimeOwner']['snapshot']>;
+    };
+    readonly persistence: {
+        status: 'ready' | 'unconfigured' | 'failed';
+        failure?: string;
+    };
+    readonly recovery: {
+        status: 'complete' | 'required' | 'failed';
+        runIds: readonly RunId[];
+        pendingCleanup: boolean;
+        participants: Readonly<Record<string, RecoveryParticipantFact>>;
+    };
+    readonly integrations: {
+        codeHost: {
+            status: 'available' | 'unavailable' | 'failed';
+            failure?: string;
+        };
+    };
+    readonly admission: {
+        status: 'permitted' | 'paused' | 'blocked';
+        mode: AdmissionSnapshot['scheduler']['mode'];
+    };
+}

package/lib/operations/model.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=model.js.map

package/lib/operations/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/operations/model.ts"],"names":[],"mappings":""}

package/lib/operations/recovery.d.ts

@@ -0,0 +1,11 @@
+import type { RecoveryParticipant, RecoveryParticipantFact } from './model.js';
+export declare const REQUIRED_RECOVERY_PARTICIPANTS: readonly ['publication-delivery'];
+export declare class RecoveryParticipants {
+    private readonly generations;
+    private readonly facts;
+    register(id: string, participant: RecoveryParticipant): () => Promise<void>;
+    reconcileAll(): Promise<void>;
+    snapshot(): Readonly<Record<string, RecoveryParticipantFact>>;
+    dispose(): Promise<void>;
+    private reconcile;
+}

package/lib/operations/recovery.js

@@ -0,0 +1,101 @@
+export const REQUIRED_RECOVERY_PARTICIPANTS = ['publication-delivery'];
+export class RecoveryParticipants {
+    generations = new Map();
+    facts = new Map();
+    register(id, participant) {
+        if (!/^[a-z][a-z0-9-]{0,63}$/.test(id))
+            throw new TypeError(`invalid recovery participant id "${id}"`);
+        if (this.generations.has(id))
+            throw new Error(`recovery participant "${id}" is already registered`);
+        const generation = {
+            participant,
+            controller: new AbortController(),
+            active: new Set(),
+            accepting: true,
+        };
+        this.generations.set(id, generation);
+        this.facts.set(id, { pending: 1 });
+        return async () => {
+            if (this.generations.get(id) !== generation)
+                return;
+            generation.accepting = false;
+            generation.controller.abort(new Error(`recovery participant "${id}" was withdrawn`));
+            await Promise.allSettled(generation.active);
+            if (this.generations.get(id) === generation) {
+                this.generations.delete(id);
+                this.facts.delete(id);
+            }
+        };
+    }
+    async reconcileAll() {
+        for (const id of REQUIRED_RECOVERY_PARTICIPANTS) {
+            if (!this.generations.get(id)?.accepting) {
+                throw new Error(`required recovery participant "${id}" is unavailable`);
+            }
+        }
+        for (const [id, generation] of [...this.generations])
+            await this.reconcile(id, generation);
+    }
+    snapshot() {
+        const facts = new Map(this.facts);
+        for (const id of REQUIRED_RECOVERY_PARTICIPANTS) {
+            if (!this.generations.get(id)?.accepting) {
+                facts.set(id, { pending: 1, failure: `required recovery participant "${id}" is unavailable` });
+            }
+        }
+        return Object.fromEntries(facts);
+    }
+    async dispose() {
+        const generations = [...this.generations.entries()];
+        this.generations.clear();
+        for (const [id, generation] of generations) {
+            generation.accepting = false;
+            generation.controller.abort(new Error(`recovery participant "${id}" registry was disposed`));
+        }
+        await Promise.allSettled(generations.flatMap(([, generation]) => [...generation.active]));
+        this.facts.clear();
+    }
+    async reconcile(id, generation) {
+        const operation = Promise.resolve()
+            .then(() => generation.participant.reconcile(generation.controller.signal))
+            .then(validateRecoveryFact);
+        generation.active.add(operation);
+        try {
+            const fact = await operation;
+            if (!generation.accepting || generation.controller.signal.aborted)
+                throw generation.controller.signal.reason;
+            if (this.generations.get(id) !== generation) {
+                throw new Error(`recovery participant "${id}" changed during reconciliation`);
+            }
+            this.facts.set(id, fact);
+        }
+        catch (error) {
+            if (this.generations.get(id) !== generation || !generation.accepting)
+                throw error;
+            this.facts.set(id, { pending: 1, failure: boundedError(error) });
+        }
+        finally {
+            generation.active.delete(operation);
+        }
+    }
+}
+function validateRecoveryFact(value) {
+    if (typeof value !== 'object' || value === null || !('pending' in value)) {
+        throw new TypeError('recovery participant returned an invalid result');
+    }
+    const fact = value;
+    if (!Number.isSafeInteger(fact.pending) || fact.pending < 0) {
+        throw new TypeError('recovery participant returned an invalid pending count');
+    }
+    if (fact.failure !== undefined &&
+        (typeof fact.failure !== 'string' || fact.failure.length === 0 || fact.failure.length > 4096)) {
+        throw new TypeError('recovery participant returned an invalid failure');
+    }
+    const pending = fact.pending;
+    return fact.failure === undefined ? { pending } : { pending, failure: fact.failure };
+}
+function boundedError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.length <= 4096 ? message : message.slice(0, 4096);
+}
+//# sourceMappingURL=recovery.js.map

package/lib/operations/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/operations/recovery.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,sBAAsB,CAAU,CAAA;AAS/E,MAAM,OAAO,oBAAoB;IACd,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAA;IACtD,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAA;IAEnE,QAAQ,CAAC,EAAU,EAAE,WAAgC;QACnD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAA;QACtG,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAA;QACnG,MAAM,UAAU,GAA0B;YACxC,WAAW;YACX,UAAU,EAAE,IAAI,eAAe,EAAE;YACjC,MAAM,EAAE,IAAI,GAAG,EAAE;YACjB,SAAS,EAAE,IAAI;SAChB,CAAA;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;QAClC,OAAO,KAAK,IAAI,EAAE;YAChB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,UAAU;gBAAE,OAAM;YACnD,UAAU,CAAC,SAAS,GAAG,KAAK,CAAA;YAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,CAAC,CAAA;YACpF,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACvB,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IAC5F,CAAC;IAED,QAAQ;QACN,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjC,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;gBACzC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAChG,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;QACxB,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC;YAC3C,UAAU,CAAC,SAAS,GAAG,KAAK,CAAA;YAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,UAAiC;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE;aAChC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aAC1E,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC7B,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAA;YAC5B,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;YAC5G,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,iCAAiC,CAAC,CAAA;YAC/E,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,SAAS;gBAAE,MAAM,KAAK,CAAA;YACjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClE,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,KAAgD,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAK,IAAI,CAAC,OAAkB,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAA;IAC/E,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,EAC7F,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiB,CAAA;IACtC,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAiB,EAAE,CAAA;AAChG,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;AAClE,CAAC"}

package/lib/operations/retention.d.ts

@@ -0,0 +1,28 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { CleanupOperations } from './cleanup.js';
+import type { MaintenanceAudit, OrphanWorktreeFact, RetainedWorktreeFact } from './model.js';
+import type { MaintenanceStateStore } from './store.js';
+export declare class RetentionMaintenance {
+    private readonly ctx;
+    private readonly store;
+    private readonly cleanup;
+    private readonly ensureReady;
+    private timer;
+    private attempt;
+    private stopping;
+    constructor(ctx: Context, store: MaintenanceStateStore, cleanup: CleanupOperations, ensureReady: () => Promise<void>);
+    run(): Promise<{
+        inspected: number;
+        removed: number;
+        attention: number;
+    }>;
+    inspectWorktrees(): Promise<{
+        retained: readonly RetainedWorktreeFact[];
+        orphans: readonly OrphanWorktreeFact[];
+        audit: readonly MaintenanceAudit[];
+    }>;
+    schedule(delay?: number): void;
+    reschedule(): void;
+    stop(): Promise<void>;
+    private clearTimer;
+}

package/lib/operations/retention.js

@@ -0,0 +1,105 @@
+import { resolve } from 'node:path';
+import { boundedError, canonicalExistingPath, hasExecution, inside, inspectOwnership, listWorktrees, pathExists, } from './inspection.js';
+export class RetentionMaintenance {
+    ctx;
+    store;
+    cleanup;
+    ensureReady;
+    timer;
+    attempt;
+    stopping = false;
+    constructor(ctx, store, cleanup, ensureReady) {
+        this.ctx = ctx;
+        this.store = store;
+        this.cleanup = cleanup;
+        this.ensureReady = ensureReady;
+    }
+    async run() {
+        await this.ensureReady();
+        const runs = this.ctx.admission.snapshot().runs.filter(hasExecution);
+        let removed = 0;
+        let attention = 0;
+        for (const run of runs) {
+            const preview = await this.cleanup.preview(run.runId);
+            if (!preview.eligible) {
+                this.cleanup.discardPreview(preview.previewId);
+                attention += 1;
+                continue;
+            }
+            await this.cleanup.remove(preview.previewId);
+            removed += 1;
+        }
+        return { inspected: runs.length, removed, attention };
+    }
+    async inspectWorktrees() {
+        await this.ensureReady();
+        const settings = this.ctx.autopilotConfig.get();
+        const allocated = this.ctx.admission.snapshot().runs.filter(hasExecution);
+        const retained = await Promise.all(allocated.map(async (run) => {
+            try {
+                await inspectOwnership(this.ctx, run, settings.managedWorktreeRoot);
+                return { runId: run.runId, path: run.execution.worktreePath, state: 'managed' };
+            }
+            catch (error) {
+                return {
+                    runId: run.runId,
+                    path: run.execution.worktreePath,
+                    state: (await pathExists(run.execution.worktreePath)) ? 'unsafe' : 'missing',
+                    detail: boundedError(error),
+                };
+            }
+        }));
+        const registered = await listWorktrees(this.ctx, settings.targetRepository);
+        const managedRoot = await canonicalExistingPath(settings.managedWorktreeRoot);
+        const ownedPaths = new Set(await Promise.all(allocated.map(async (run) => {
+            try {
+                return await canonicalExistingPath(run.execution.worktreePath);
+            }
+            catch {
+                return resolve(run.execution.worktreePath);
+            }
+        })));
+        const orphans = registered
+            .filter((worktree) => inside(managedRoot, resolve(worktree.path)) && !ownedPaths.has(resolve(worktree.path)))
+            .map((worktree) => ({
+            path: worktree.path,
+            ...(worktree.branch === undefined ? {} : { branch: worktree.branch }),
+            state: 'orphan-reconciliation-required',
+        }));
+        return { retained, orphans, audit: structuredClone(this.store.current().audit) };
+    }
+    schedule(delay) {
+        const settings = this.ctx.autopilotConfig.get();
+        if (this.stopping || this.timer !== undefined || !settings.autoCleanupEnabled) {
+            return;
+        }
+        this.timer = setTimeout(() => {
+            this.timer = undefined;
+            const attempt = this.run()
+                .then(() => undefined)
+                .catch(() => this.ctx.logger.warn('autopilot retention maintenance failed'))
+                .finally(() => {
+                if (this.attempt === attempt)
+                    this.attempt = undefined;
+                this.schedule();
+            });
+            this.attempt = attempt;
+        }, delay ?? settings.reconcileIntervalSeconds * 1000);
+    }
+    reschedule() {
+        this.clearTimer();
+        if (this.attempt === undefined)
+            this.schedule();
+    }
+    async stop() {
+        this.stopping = true;
+        this.clearTimer();
+        await Promise.all([this.attempt, this.cleanup.activeAttempt()]);
+    }
+    clearTimer() {
+        if (this.timer !== undefined)
+            clearTimeout(this.timer);
+        this.timer = undefined;
+    }
+}
+//# sourceMappingURL=retention.js.map

package/lib/operations/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/operations/retention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGnC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,YAAY,EACZ,MAAM,EACN,gBAAgB,EAChB,aAAa,EACb,UAAU,GACX,MAAM,iBAAiB,CAAA;AAIxB,MAAM,OAAO,oBAAoB;IAMZ,GAAG;IACH,KAAK;IACL,OAAO;IACP,WAAW;IARtB,KAAK,CAA2C;IAChD,OAAO,CAA2B;IAClC,QAAQ,GAAG,KAAK,CAAA;IAExB,YACmB,GAAY,EACZ,KAA4B,EAC5B,OAA0B,EAC1B,WAAgC;mBAHhC,GAAG;qBACH,KAAK;uBACL,OAAO;2BACP,WAAW;IAC3B,CAAC;IAEJ,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACpE,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;gBAC9C,SAAS,IAAI,CAAC,CAAA;gBACd,SAAQ;YACV,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC5C,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,gBAAgB;QAKpB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,CAAA;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACzE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAiC,EAAE;YACzD,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA;gBACnE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY;oBAChC,KAAK,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBAC5E,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC5B,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CACH,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAC3E,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,IAAI,CAAC;gBACH,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC,CAAC,CACH,CACF,CAAA;QACD,MAAM,OAAO,GAAG,UAAU;aACvB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;aAC5G,GAAG,CACF,CAAC,QAAQ,EAAsB,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrE,KAAK,EAAE,gCAAgC;SACxC,CAAC,CACH,CAAA;QACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;IAClF,CAAC;IAED,QAAQ,CAAC,KAAc;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,CAAA;QAC/C,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YAC9E,OAAM;QACR,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,UAAU,CACrB,GAAG,EAAE;YACH,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;iBACvB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACrB,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;iBAC3E,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;oBAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;gBACtD,IAAI,CAAC,QAAQ,EAAE,CAAA;YACjB,CAAC,CAAC,CAAA;YACJ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACxB,CAAC,EACD,KAAK,IAAI,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAClD,CAAA;IACH,CAAC;IAED,UAAU;QACR,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;IACjE,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACxB,CAAC;CACF"}

package/lib/operations/runtime-owner.d.ts

@@ -0,0 +1,54 @@
+import { type Context, Service } from '@deepseek-ai/cordis';
+import { type RuntimeOwnerOptions } from './storage-composition.js';
+interface OwnerRecord {
+    readonly version: 1;
+    readonly pid: number;
+    readonly nonce: string;
+    readonly acquiredAt: string;
+    readonly bootId?: string;
+    readonly processStart?: string;
+}
+export declare class RuntimeStoreOwnedError extends Error {
+    readonly owner: Pick<OwnerRecord, 'pid' | 'acquiredAt'> | undefined;
+    constructor(owner: Pick<OwnerRecord, 'pid' | 'acquiredAt'> | undefined);
+}
+export declare class RuntimeStoreConfigurationError extends Error {
+    constructor(configured: string, authoritative: string);
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        runtimeOwner: RuntimeOwner;
+    }
+}
+/** Hold the one-VPS fence for the authoritative DSH storage medium before Autopilot opens durable state. */
+export declare class RuntimeOwner extends Service {
+    private readonly options;
+    static readonly inject: string[];
+    private owned;
+    private holders;
+    private closing;
+    private waitForHolders;
+    constructor(ctx: Context, options?: RuntimeOwnerOptions);
+    [Service.init](): AsyncGenerator<() => Promise<void>, void, void>;
+    /**
+     * Acquire the authoritative DSH storage-medium fence, or prove this service already owns that exact canonical
+     * medium. An optional runtimeStorePath is only a configuration assertion. Unprovable or changed media,
+     * unsafe/incomplete targets and a live owner reject; stale local-process ownership is reclaimed atomically.
+     */
+    ensureOwned(): Promise<string>;
+    /**
+     * Keep the owner fence alive through a dependent service's complete asynchronous shutdown. Rejects during owner
+     * shutdown; the returned idempotent release callback performs no I/O.
+     */
+    hold(): () => void;
+    /** Return detached owner/fence facts without touching the filesystem; available until this service is disposed. */
+    snapshot(): {
+        status: 'held';
+        storePath: string;
+        acquiredAt: string;
+    } | {
+        status: 'unconfigured';
+    };
+    private release;
+}
+export default RuntimeOwner;