@canhta/dsh-autopilot 0.1.0-alpha.1

package/lib/admission/policy.js

@@ -0,0 +1,238 @@
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { SessionId as sessionId } from '@deepseek-ai/dsh-session';
+import { z } from 'zod';
+import { ID_PATTERN, MAX_OUTCOME_TEXT_BYTES, MAX_STATE_BYTES, MAX_SUMMARY_BYTES, textEncoder } from './constants.js';
+export function activePause(reason, requestedAt) {
+    return {
+        kind: 'active',
+        reason,
+        operatorHold: reason === 'operator',
+        continuationTarget: 'implementing',
+        requestedAt,
+        interruptedOperation: 'agent-turn',
+    };
+}
+export function isPausedActiveRun(run) {
+    return run?.state === 'paused' && run.pause.kind === 'active';
+}
+export function isPausedQueuedRun(run) {
+    return run?.state === 'paused' && run.pause.kind === 'queued';
+}
+export function validUsageSettlement(run, usage) {
+    return (usage.kind === 'known' &&
+        Number.isSafeInteger(usage.tokens) &&
+        usage.tokens >= 0 &&
+        usage.tokens <= run.budget.reservedTokens &&
+        run.budget.settledTokens + usage.tokens <= run.budget.capTokens);
+}
+export function usageUncertaintyReason(run, usage) {
+    return usage.kind === 'uncertain'
+        ? truncateUtf8(usage.reason, MAX_OUTCOME_TEXT_BYTES) || 'provider did not supply a usage uncertainty reason'
+        : `reported usage exceeded the reserved allowance of ${String(run.budget.reservedTokens)} tokens`;
+}
+export function boundedExternalRetry(retryAfterMs, attempts) {
+    const proposed = retryAfterMs ?? 1_000 * 2 ** Math.min(attempts, 8);
+    return Math.max(1_000, Math.min(proposed, 60 * 60 * 1_000));
+}
+export function validateActiveResumeFacts(run, observedGit, settings, authorization) {
+    if (authorization !== 'operator' && authorization !== 'scheduler') {
+        throw new TypeError('active resume authorization must be operator or scheduler');
+    }
+    if (authorization === 'scheduler' && run.pause.operatorHold) {
+        throw new Error(`run "${run.runId}" requires explicit operator resume`);
+    }
+    if (run.execution.recovery !== undefined)
+        throw new Error(`run "${run.runId}" requires explicit recovery`);
+    if (run.budget.usageUncertain)
+        throw new Error(`run "${run.runId}" has uncertain token usage`);
+    if (run.budget.settledTokens >= run.budget.capTokens) {
+        throw new Error(`run "${run.runId}" has no retained token capacity`);
+    }
+    if (run.execution.targetRepository !== settings.targetRepository ||
+        run.execution.baseBranch !== settings.targetBaseBranch ||
+        run.execution.worktreePath !== join(settings.managedWorktreeRoot, run.runId)) {
+        throw new Error(`run "${run.runId}" retained execution routing no longer matches current policy`);
+    }
+    const retainedGit = run.execution.git;
+    if (retainedGit === undefined ||
+        retainedGit.baseHead !== observedGit.baseHead ||
+        retainedGit.head !== observedGit.head ||
+        retainedGit.status !== observedGit.status) {
+        throw new Error(`run "${run.runId}" retained Git state changed and requires explicit recovery`);
+    }
+}
+export function evaluateIssue(issue, maxBriefBytes) {
+    if (textEncoder.encode(issue.summary).byteLength > MAX_SUMMARY_BYTES) {
+        return { displayKey: issue.displayKey, reason: 'summary-too-large' };
+    }
+    if (!issue.isReady)
+        return { displayKey: issue.displayKey, reason: 'not-ready' };
+    const designated = issue.comments.filter(isDesignatedBrief);
+    if (designated.length === 0)
+        return { displayKey: issue.displayKey, reason: 'missing-brief' };
+    if (designated.length > 1)
+        return { displayKey: issue.displayKey, reason: 'ambiguous-brief' };
+    const comment = designated[0];
+    if (comment === undefined)
+        return { displayKey: issue.displayKey, reason: 'missing-brief' };
+    if (textEncoder.encode(comment.body).byteLength > maxBriefBytes) {
+        return { displayKey: issue.displayKey, reason: 'brief-too-large' };
+    }
+    if (!hasRequiredBriefSections(comment.body)) {
+        return { displayKey: issue.displayKey, reason: 'invalid-brief' };
+    }
+    if (issue.dependencies.some((dependency) => dependency.state === 'unknown')) {
+        return { displayKey: issue.displayKey, reason: 'dependency-unknown' };
+    }
+    if (issue.dependencies.some((dependency) => dependency.state === 'not-completed')) {
+        return { displayKey: issue.displayKey, reason: 'dependencies-incomplete' };
+    }
+    if (issue.readiness.kind !== 'transition' || issue.readiness.actorKind !== 'human') {
+        return { displayKey: issue.displayKey, reason: 'human-readiness-required' };
+    }
+    if (Date.parse(issue.readiness.occurredAt) < Date.parse(comment.updatedAt)) {
+        return { displayKey: issue.displayKey, reason: 'human-readiness-required' };
+    }
+    return {
+        issue: issue,
+        brief: {
+            commentId: comment.id,
+            updatedAt: comment.updatedAt,
+            digest: createHash('sha256').update(comment.body).digest('hex'),
+            content: comment.body,
+        },
+    };
+}
+function isDesignatedBrief(comment) {
+    return /^#\s+Agent Brief\s*$/im.test(comment.body) && /^dsh-autopilot:brief:v1\s*$/im.test(comment.body);
+}
+function hasRequiredBriefSections(body) {
+    const matches = [...body.matchAll(/^##\s+(.+?)\s*$/gm)];
+    const sections = new Map();
+    for (const [index, match] of matches.entries()) {
+        const rawHeading = match[1];
+        if (rawHeading === undefined || match.index === undefined)
+            return false;
+        const heading = rawHeading.trim().toLocaleLowerCase('en-US');
+        const contentStart = match.index + match[0].length;
+        const contentEnd = matches[index + 1]?.index ?? body.length;
+        sections.set(heading, body.slice(contentStart, contentEnd).trim());
+    }
+    return ['objective', 'in scope', 'acceptance criteria', 'constraints', 'context'].every((heading) => (sections.get(heading)?.length ?? 0) > 0);
+}
+export function runIdentity(providerId, issue) {
+    if (issue.readiness.kind !== 'transition')
+        throw new Error('eligible issue lost readiness transition');
+    return JSON.stringify([providerId, issue.bindingId, issue.issueId, issue.readiness.generation]);
+}
+export function runIdentityFromRun(run) {
+    return JSON.stringify([run.providerId, run.bindingId, run.issueId, run.readinessGeneration]);
+}
+export function matchesRetainedIssue(run, providerId, evaluation) {
+    return (run.providerId === providerId &&
+        run.bindingId === evaluation.issue.bindingId &&
+        run.issueId === evaluation.issue.issueId &&
+        run.readinessGeneration === evaluation.issue.readiness.generation &&
+        sameBrief(run.brief, evaluation.brief));
+}
+export function sameRetainedRun(current, expected) {
+    return (current.runId === expected.runId &&
+        runIdentityFromRun(current) === runIdentityFromRun(expected) &&
+        sameBrief(current.brief, expected.brief));
+}
+function sameBrief(left, right) {
+    return (left.commentId === right.commentId &&
+        left.updatedAt === right.updatedAt &&
+        left.digest === right.digest &&
+        left.content === right.content);
+}
+export function runId(identity) {
+    return `run_${createHash('sha256').update(identity).digest('hex').slice(0, 32)}`;
+}
+function queueClassRank(queueClass) {
+    return queueClass === 'resumption' ? 0 : 1;
+}
+export function compareQueuedRuns(left, right) {
+    return queueClassRank(left.queueClass) - queueClassRank(right.queueClass) || compareRunFacts(left, right);
+}
+export function occupiesQueueCapacity(run) {
+    return run.state === 'queued' || (run.state === 'paused' && run.pause.kind === 'queued');
+}
+export function compareSnapshotRuns(left, right) {
+    return snapshotGroup(left) - snapshotGroup(right) || compareRunFacts(left, right);
+}
+function snapshotGroup(run) {
+    if (run.state === 'implementing' || run.state === 'pausing')
+        return 0;
+    if (run.state === 'queued')
+        return queueClassRank(run.queueClass) + 1;
+    return 3;
+}
+function compareRunFacts(left, right) {
+    return (left.priorityRank - right.priorityRank ||
+        left.queueSequence - right.queueSequence ||
+        left.displayKey.localeCompare(right.displayKey));
+}
+export function executionFor(run, settings, codeHost, agent) {
+    const stableId = run.runId.slice('run_'.length);
+    return {
+        attempt: 1,
+        sessionId: sessionId(`autopilot-${run.runId}`),
+        targetRepository: settings.targetRepository,
+        baseBranch: settings.targetBaseBranch,
+        worktreePath: join(settings.managedWorktreeRoot, run.runId),
+        branch: `dsh-autopilot/${stableId}`,
+        agent: structuredClone(agent),
+        codeHost: {
+            providerId: codeHost.providerId,
+            bindingId: codeHost.bindingId,
+            repositoryId: codeHost.repositoryId,
+            repository: codeHost.repository,
+            allowWorkflowChanges: settings.allowWorkflowChanges,
+        },
+        startedAt: new Date().toISOString(),
+    };
+}
+export function assertStateSize(state) {
+    if (textEncoder.encode(JSON.stringify(state)).byteLength > MAX_STATE_BYTES) {
+        throw new RangeError(`admission state exceeds ${String(MAX_STATE_BYTES)} bytes`);
+    }
+}
+export function boundedNonEmptyString(maxBytes, label) {
+    return z
+        .string()
+        .min(1)
+        .refine((value) => textEncoder.encode(value).byteLength <= maxBytes, {
+        error: `${label} must not exceed ${String(maxBytes)} UTF-8 bytes`,
+    });
+}
+export function truncateUtf8(value, maxBytes) {
+    if (textEncoder.encode(value).byteLength <= maxBytes)
+        return value;
+    let low = 0;
+    let high = value.length;
+    while (low < high) {
+        const middle = Math.ceil((low + high) / 2);
+        if (textEncoder.encode(value.slice(0, middle)).byteLength <= maxBytes)
+            low = middle;
+        else
+            high = middle - 1;
+    }
+    return value.slice(0, low);
+}
+export function validateRequest(request) {
+    if (!['manual', 'scheduled', 'startup', 'webhook'].includes(request.source)) {
+        throw new TypeError(`unsupported admission source "${String(request.source)}"`);
+    }
+    if (request.source === 'webhook' && request.deliveryId === undefined) {
+        throw new TypeError('webhook reconciliation requires a provider-qualified delivery id');
+    }
+    if (request.deliveryId !== undefined && (request.deliveryId.length > 512 || !ID_PATTERN.test(request.deliveryId))) {
+        throw new TypeError('delivery id must be provider-qualified and contain only stable id characters');
+    }
+    if (request.signal !== undefined && !(request.signal instanceof AbortSignal)) {
+        throw new TypeError('reconciliation signal must be an AbortSignal');
+    }
+}
+//# sourceMappingURL=policy.js.map

package/lib/admission/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/admission/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,IAAI,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AA0BpH,MAAM,UAAU,WAAW,CAAC,MAAyB,EAAE,WAAmB;IACxE,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,YAAY,EAAE,MAAM,KAAK,UAAU;QACnC,kBAAkB,EAAE,cAAc;QAClC,WAAW;QACX,oBAAoB,EAAE,YAAY;KACnC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAA6B;IAC7D,OAAO,GAAG,EAAE,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAA6B;IAC7D,OAAO,GAAG,EAAE,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAiC,EACjC,KAAyB;IAEzB,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,KAAK,CAAC,MAAM,IAAI,CAAC;QACjB,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc;QACzC,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAChE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAiC,EAAE,KAAyB;IACjG,OAAO,KAAK,CAAC,IAAI,KAAK,WAAW;QAC/B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,IAAI,oDAAoD;QAC5G,CAAC,CAAC,qDAAqD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAA;AACrG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAgC,EAAE,QAAgB;IACrF,MAAM,QAAQ,GAAG,YAAY,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACnE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,GAAoB,EACpB,WAAiC,EACjC,QAA2B,EAC3B,aAAwC;IAExC,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,aAAa,KAAK,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,qCAAqC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,8BAA8B,CAAC,CAAA;IAC1G,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,6BAA6B,CAAC,CAAA;IAC9F,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,kCAAkC,CAAC,CAAA;IACtE,CAAC;IACD,IACE,GAAG,CAAC,SAAS,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;QAC5D,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,gBAAgB;QACtD,GAAG,CAAC,SAAS,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,+DAA+D,CAAC,CAAA;IACnG,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAA;IACrC,IACE,WAAW,KAAK,SAAS;QACzB,WAAW,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;QAC7C,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;QACrC,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EACzC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,6DAA6D,CAAC,CAAA;IACjG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAA2B,EAC3B,aAAqB;IAErB,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACrE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAChF,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC7F,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IAC7F,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IAC7B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC3F,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,aAAa,EAAE,CAAC;QAChE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACpE,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvE,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,eAAe,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAA;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACnF,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;IAC7E,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAA+B;QACtC,KAAK,EAAE;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB;KACF,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAuB;IAChD,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAC1G,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACvE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAA;QAC3D,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,qBAAqB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,KAAK,CACrF,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CACtD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAA6B,EAAE,KAA6B;IACtF,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IACtG,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAuF;IAEvF,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAA;AAC9F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAiG,EACjG,UAA6B,EAC7B,UAAyB;IAEzB,OAAO,CACL,GAAG,CAAC,UAAU,KAAK,UAAU;QAC7B,GAAG,CAAC,SAAS,KAAK,UAAU,CAAC,KAAK,CAAC,SAAS;QAC5C,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,KAAK,CAAC,OAAO;QACxC,GAAG,CAAC,mBAAmB,KAAK,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU;QACjE,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CACvC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAwB,EAAE,QAAyB;IACjF,OAAO,CACL,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAChC,kBAAkB,CAAC,OAAO,CAAC,KAAK,kBAAkB,CAAC,QAAQ,CAAC;QAC5D,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CACzC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB,EAAE,KAAyB;IACpE,OAAO,CACL,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAC/B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,QAAgB;IACpC,OAAO,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAW,CAAA;AAC3F,CAAC;AAED,SAAS,cAAc,CAAC,UAAmC;IACzD,OAAO,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAe,EAAE,KAAgB;IACjE,OAAO,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC3G,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAiB;IACrD,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAkB,EAAE,KAAmB;IACzE,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACnF,CAAC;AAED,SAAS,aAAa,CAAC,GAAiB;IACtC,IAAI,GAAG,CAAC,KAAK,KAAK,cAAc,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAA;IACrE,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IACrE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,eAAe,CAAC,IAAkB,EAAE,KAAmB;IAC9D,OAAO,CACL,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY;QACtC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa;QACxC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAc,EACd,QAA2B,EAC3B,QAAyB,EACzB,KAAgC;IAEhC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/C,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,SAAS,CAAC,aAAa,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,UAAU,EAAE,QAAQ,CAAC,gBAAgB;QACrC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC;QAC3D,MAAM,EAAE,iBAAiB,QAAQ,EAAE;QACnC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;QAC7B,QAAQ,EAAE;YACR,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;SACpD;QACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,2BAA2B,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;IAClF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAa;IACnE,OAAO,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,QAAQ,EAAE;QACnE,KAAK,EAAE,GAAG,KAAK,oBAAoB,MAAM,CAAC,QAAQ,CAAC,cAAc;KAClE,CAAC,CAAA;AACN,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,QAAgB;IAC1D,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAA;IAClE,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAA;IACvB,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,QAAQ;YAAE,GAAG,GAAG,MAAM,CAAA;;YAC9E,IAAI,GAAG,MAAM,GAAG,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,iCAAiC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,SAAS,CAAC,8EAA8E,CAAC,CAAA;IACrG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;IACrE,CAAC;AACH,CAAC"}

package/lib/admission/ports.d.ts

@@ -0,0 +1,13 @@
+import type { KvTable } from '@deepseek-ai/dsh-storage-domain';
+import type { CodeHost } from '../code-host.js';
+import type { AutopilotSettings } from '../config.js';
+import type { Tracker } from '../tracker.js';
+import type { STATE_KEY } from './constants.js';
+import type { AdmissionState } from './state.js';
+export interface AdmissionDependencies {
+    readonly codeHost?: CodeHost;
+    readonly tracker: Tracker;
+    readonly settings: () => AutopilotSettings;
+    readonly state: () => AdmissionState;
+    readonly table: () => KvTable<typeof STATE_KEY, AdmissionState>;
+}

package/lib/admission/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/lib/admission/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/admission/ports.ts"],"names":[],"mappings":""}

package/lib/admission/publication-control.d.ts

@@ -0,0 +1,16 @@
+import type { PullRequestReceipt } from '../code-host.js';
+import type { RunId, TerminalRun } from './model.js';
+import type { AdmissionDependencies } from './ports.js';
+export declare class PublicationControl {
+    private readonly dependencies;
+    constructor(dependencies: AdmissionDependencies);
+    claim(runId: RunId): Promise<{
+        run: TerminalRun;
+        owner: string;
+    }>;
+    assertOwner(runId: RunId, owner: string): void;
+    recordBranch(runId: RunId, owner: string, remoteHead: string): Promise<TerminalRun>;
+    complete(runId: RunId, owner: string, receipt: PullRequestReceipt): Promise<TerminalRun>;
+    fail(runId: RunId, owner: string, error: unknown, status: 'uncertain' | 'retryable-failure' | 'failed', retryAfterMs?: number): Promise<TerminalRun>;
+    private updateOwned;
+}

package/lib/admission/publication-control.js

@@ -0,0 +1,153 @@
+import { MAX_AUTOMATIC_EXTERNAL_ATTEMPTS, STATE_KEY } from './constants.js';
+import { appendLifecycleDeliveries, sanitizeDeliveryError } from './deliveries.js';
+import { boundedExternalRetry } from './policy.js';
+import { runIdSchema, stateSchema } from './state.js';
+export class PublicationControl {
+    dependencies;
+    constructor(dependencies) {
+        this.dependencies = dependencies;
+    }
+    async claim(runId) {
+        const parsedRunId = runIdSchema.parse(runId);
+        const owner = crypto.randomUUID();
+        let claimed;
+        await this.dependencies.table().update(STATE_KEY, (current) => {
+            const index = current.runs.findIndex((run) => run.runId === parsedRunId);
+            const run = current.runs[index];
+            if (run?.state !== 'publishing' || run.publication === undefined) {
+                throw new Error(`run "${parsedRunId}" is not awaiting publication`);
+            }
+            if (['failed', 'exhausted', 'succeeded'].includes(run.publication.status)) {
+                throw new Error(`run "${parsedRunId}" publication is not automatically retryable`);
+            }
+            if (run.publication.status === 'in-flight')
+                throw new Error(`run "${parsedRunId}" publication already has an owner`);
+            if (run.publication.nextRetryAt !== undefined && Date.parse(run.publication.nextRetryAt) > Date.now()) {
+                throw new Error(`run "${parsedRunId}" publication retry is not due`);
+            }
+            const next = structuredClone(current);
+            claimed = {
+                ...run,
+                publication: {
+                    ...run.publication,
+                    revision: run.publication.revision + 1,
+                    status: 'in-flight',
+                    attempts: run.publication.attempts + 1,
+                    owner,
+                    nextRetryAt: undefined,
+                    exhaustedFrom: undefined,
+                    lastError: undefined,
+                },
+            };
+            next.runs[index] = claimed;
+            next.revision += 1;
+            return stateSchema.parse(next);
+        });
+        if (claimed === undefined)
+            throw new Error(`run "${parsedRunId}" publication was not claimed`);
+        return { run: structuredClone(claimed), owner };
+    }
+    assertOwner(runId, owner) {
+        const run = this.dependencies.state().runs.find((candidate) => candidate.runId === runId);
+        if (run?.state !== 'publishing' || run.publication?.status !== 'in-flight' || run.publication.owner !== owner) {
+            throw new Error(`run "${runId}" publication owner is retired`);
+        }
+    }
+    async recordBranch(runId, owner, remoteHead) {
+        return await this.updateOwned(runId, owner, (run) => ({
+            ...run,
+            publication: {
+                ...requiredPublication(run),
+                revision: requiredPublication(run).revision + 1,
+                branchReceipt: { remoteHead, receivedAt: new Date().toISOString() },
+            },
+        }));
+    }
+    async complete(runId, owner, receipt) {
+        return await this.updateOwned(runId, owner, (run, aggregateRevision) => {
+            const completedAt = new Date().toISOString();
+            const completed = {
+                ...run,
+                state: 'completed',
+                completedAt,
+                publication: {
+                    ...requiredPublication(run),
+                    revision: requiredPublication(run).revision + 1,
+                    status: 'succeeded',
+                    owner: undefined,
+                    lastError: undefined,
+                    receipt: structuredClone(receipt),
+                },
+            };
+            return {
+                ...completed,
+                deliveries: appendLifecycleDeliveries(completed, this.dependencies.settings(), 'completed', aggregateRevision + 1, completedAt),
+            };
+        });
+    }
+    async fail(runId, owner, error, status, retryAfterMs) {
+        return await this.updateOwned(runId, owner, (run, aggregateRevision) => {
+            const publication = requiredPublication(run);
+            const exhausted = status !== 'failed' && publication.attempts >= MAX_AUTOMATIC_EXTERNAL_ATTEMPTS;
+            const nextStatus = exhausted ? 'exhausted' : status;
+            const lastError = sanitizeDeliveryError(error);
+            const failedPublication = {
+                ...publication,
+                revision: publication.revision + 1,
+                status: nextStatus,
+                owner: undefined,
+                nextRetryAt: !exhausted && status === 'retryable-failure'
+                    ? new Date(Date.now() + boundedExternalRetry(retryAfterMs, publication.attempts)).toISOString()
+                    : undefined,
+                exhaustedFrom: exhausted ? status : undefined,
+                lastError,
+            };
+            if (nextStatus !== 'failed' && nextStatus !== 'exhausted') {
+                return {
+                    ...run,
+                    publication: failedPublication,
+                };
+            }
+            const failedAt = new Date().toISOString();
+            const failed = {
+                ...run,
+                state: 'failed',
+                completedAt: failedAt,
+                outcome: {
+                    kind: 'failed',
+                    summary: 'Pull-request publication could not be completed.',
+                    evidence: [...run.outcome.evidence.slice(0, 99), lastError],
+                },
+                publication: failedPublication,
+            };
+            return {
+                ...failed,
+                deliveries: appendLifecycleDeliveries(failed, this.dependencies.settings(), 'failed', aggregateRevision + 1, failedAt),
+            };
+        });
+    }
+    async updateOwned(runId, owner, mutate) {
+        let updated;
+        await this.dependencies.table().update(STATE_KEY, (current) => {
+            const next = structuredClone(current);
+            const index = next.runs.findIndex((run) => run.runId === runId);
+            const run = next.runs[index];
+            if (run?.state !== 'publishing' || run.publication?.status !== 'in-flight' || run.publication.owner !== owner) {
+                throw new Error(`run "${runId}" publication owner is retired`);
+            }
+            updated = mutate(run, current.revision);
+            next.runs[index] = updated;
+            next.revision += 1;
+            return stateSchema.parse(next);
+        });
+        if (updated === undefined)
+            throw new Error(`run "${runId}" publication update was not committed`);
+        return structuredClone(updated);
+    }
+}
+function requiredPublication(run) {
+    if (run.publication === undefined)
+        throw new Error(`run "${run.runId}" has no publication intent`);
+    return run.publication;
+}
+//# sourceMappingURL=publication-control.js.map

package/lib/admission/publication-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-control.js","sourceRoot":"","sources":["../../src/admission/publication-control.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC3E,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAElF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAErD,MAAM,OAAO,kBAAkB;IACA,YAAY;IAAzC,YAA6B,YAAmC;4BAAnC,YAAY;IAA0B,CAAC;IAEpE,KAAK,CAAC,KAAK,CAAC,KAAY;QACtB,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QACjC,IAAI,OAAgC,CAAA;QACpC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,CAAA;YACxE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,GAAG,EAAE,KAAK,KAAK,YAAY,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CAAC,QAAQ,WAAW,+BAA+B,CAAC,CAAA;YACrE,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,QAAQ,WAAW,8CAA8C,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW;gBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,WAAW,oCAAoC,CAAC,CAAA;YAC1E,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACtG,MAAM,IAAI,KAAK,CAAC,QAAQ,WAAW,gCAAgC,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YACrC,OAAO,GAAG;gBACR,GAAG,GAAG;gBACN,WAAW,EAAE;oBACX,GAAG,GAAG,CAAC,WAAW;oBAClB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC;oBACtC,MAAM,EAAE,WAAW;oBACnB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC;oBACtC,KAAK;oBACL,WAAW,EAAE,SAAS;oBACtB,aAAa,EAAE,SAAS;oBACxB,SAAS,EAAE,SAAS;iBACrB;aACF,CAAA;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,CAAA;YAC1B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;YAClB,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,WAAW,+BAA+B,CAAC,CAAA;QAC9F,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAA;IACjD,CAAC;IAED,WAAW,CAAC,KAAY,EAAE,KAAa;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;QACzF,IAAI,GAAG,EAAE,KAAK,KAAK,YAAY,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC9G,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,gCAAgC,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAY,EAAE,KAAa,EAAE,UAAkB;QAChE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpD,GAAG,GAAG;YACN,WAAW,EAAE;gBACX,GAAG,mBAAmB,CAAC,GAAG,CAAC;gBAC3B,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC;gBAC/C,aAAa,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;aACpE;SACF,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,KAAa,EAAE,OAA2B;QACrE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,iBAAiB,EAAE,EAAE;YACrE,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC5C,MAAM,SAAS,GAAgB;gBAC7B,GAAG,GAAG;gBACN,KAAK,EAAE,WAAW;gBAClB,WAAW;gBACX,WAAW,EAAE;oBACX,GAAG,mBAAmB,CAAC,GAAG,CAAC;oBAC3B,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC;oBAC/C,MAAM,EAAE,WAAW;oBACnB,KAAK,EAAE,SAAS;oBAChB,SAAS,EAAE,SAAS;oBACpB,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;iBAClC;aACF,CAAA;YACD,OAAO;gBACL,GAAG,SAAS;gBACZ,UAAU,EAAE,yBAAyB,CACnC,SAAS,EACT,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAC5B,WAAW,EACX,iBAAiB,GAAG,CAAC,EACrB,WAAW,CACZ;aACF,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAY,EACZ,KAAa,EACb,KAAc,EACd,MAAoD,EACpD,YAAqB;QAErB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,iBAAiB,EAAE,EAAE;YACrE,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YAC5C,MAAM,SAAS,GAAG,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,IAAI,+BAA+B,CAAA;YAChG,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;YACnD,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC9C,MAAM,iBAAiB,GAAG;gBACxB,GAAG,WAAW;gBACd,QAAQ,EAAE,WAAW,CAAC,QAAQ,GAAG,CAAC;gBAClC,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,SAAS;gBAChB,WAAW,EACT,CAAC,SAAS,IAAI,MAAM,KAAK,mBAAmB;oBAC1C,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE;oBAC/F,CAAC,CAAC,SAAS;gBACf,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC7C,SAAS;aACD,CAAA;YACV,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC1D,OAAO;oBACL,GAAG,GAAG;oBACN,WAAW,EAAE,iBAAiB;iBAC/B,CAAA;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YACzC,MAAM,MAAM,GAAgB;gBAC1B,GAAG,GAAG;gBACN,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,kDAAkD;oBAC3D,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC;iBAC5D;gBACD,WAAW,EAAE,iBAAiB;aAC/B,CAAA;YACD,OAAO;gBACL,GAAG,MAAM;gBACT,UAAU,EAAE,yBAAyB,CACnC,MAAM,EACN,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAC5B,QAAQ,EACR,iBAAiB,GAAG,CAAC,EACrB,QAAQ,CACT;aACF,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAY,EACZ,KAAa,EACb,MAAoE;QAEpE,IAAI,OAAgC,CAAA;QACpC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;YAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC5B,IAAI,GAAG,EAAE,KAAK,KAAK,YAAY,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC9G,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,gCAAgC,CAAC,CAAA;YAChE,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;YACvC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,CAAA;YAC1B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;YAClB,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,wCAAwC,CAAC,CAAA;QACjG,OAAO,eAAe,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,GAAgB;IAC3C,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,6BAA6B,CAAC,CAAA;IAClG,OAAO,GAAG,CAAC,WAAW,CAAA;AACxB,CAAC"}

package/lib/admission/reconciler.d.ts

@@ -0,0 +1,7 @@
+import { type TrackerIngressRequest } from '../tracker.js';
+import { type ReconcileRequest, type ReconcileResult } from './model.js';
+import type { AdmissionDependencies } from './ports.js';
+/** Read the selected provider and atomically admit every currently eligible issue. */
+export declare function reconcile(dependencies: AdmissionDependencies, request: ReconcileRequest): Promise<ReconcileResult>;
+/** Authenticate ingress and retain its provider generation through the durable commit. */
+export declare function reconcileIngress(dependencies: AdmissionDependencies, request: TrackerIngressRequest, signal?: AbortSignal): Promise<ReconcileResult>;

package/lib/admission/reconciler.js

@@ -0,0 +1,121 @@
+import { trackerProviderId } from '../tracker.js';
+import { readEveryCandidate } from './candidates.js';
+import { MAX_INGRESS_RECEIPTS, STATE_KEY } from './constants.js';
+import { AdmissionIngressError, } from './model.js';
+import { assertStateSize, evaluateIssue, occupiesQueueCapacity, runId, runIdentity, runIdentityFromRun, validateRequest, } from './policy.js';
+import { stateSchema } from './state.js';
+import { snapshotOf } from './state-domain.js';
+/** Read the selected provider and atomically admit every currently eligible issue. */
+export async function reconcile(dependencies, request) {
+    validateRequest(request);
+    request.signal?.throwIfAborted();
+    const settings = dependencies.settings();
+    const providerId = trackerProviderId(settings.trackerProvider);
+    if (request.deliveryId !== undefined && !request.deliveryId.startsWith(`${providerId}:`)) {
+        throw new TypeError(`delivery id must be qualified by tracker provider "${providerId}"`);
+    }
+    const beforeRead = dependencies.state();
+    if (beforeRead.scheduler.mode !== 'enabled') {
+        return { ...snapshotOf(beforeRead), decisions: [] };
+    }
+    if (request.deliveryId !== undefined && beforeRead.acceptedIngress.includes(request.deliveryId)) {
+        return { ...snapshotOf(beforeRead), decisions: [] };
+    }
+    return dependencies.tracker.withProvider(providerId, async (reader) => {
+        const candidates = await readEveryCandidate(reader, providerId, request.signal);
+        request.signal?.throwIfAborted();
+        const evaluated = candidates.map((issue) => evaluateIssue(issue, settings.maxBriefBytes));
+        const eligible = evaluated
+            .map((evaluation, index) => ({ evaluation, index }))
+            .filter((entry) => !('reason' in entry.evaluation))
+            .sort((left, right) => left.evaluation.issue.priorityRank - right.evaluation.issue.priorityRank ||
+            runIdentity(providerId, left.evaluation.issue).localeCompare(runIdentity(providerId, right.evaluation.issue)));
+        let decisions = [];
+        const committed = await dependencies.table().update(STATE_KEY, (current) => {
+            request.signal?.throwIfAborted();
+            if (current.scheduler.mode !== 'enabled') {
+                decisions = [];
+                return current;
+            }
+            if (request.deliveryId !== undefined && current.acceptedIngress.includes(request.deliveryId)) {
+                decisions = [];
+                return current;
+            }
+            const next = structuredClone(current);
+            const indexedDecisions = evaluated.map((evaluation) => {
+                if ('reason' in evaluation) {
+                    return { displayKey: evaluation.displayKey, outcome: 'rejected', reason: evaluation.reason };
+                }
+                return undefined;
+            });
+            let queuedCount = next.runs.filter(occupiesQueueCapacity).length;
+            for (const { evaluation, index } of eligible) {
+                const issue = evaluation.issue;
+                const identity = runIdentity(providerId, issue);
+                if (next.runs.some((run) => runIdentityFromRun(run) === identity)) {
+                    indexedDecisions[index] = { displayKey: issue.displayKey, outcome: 'duplicate' };
+                    continue;
+                }
+                if (queuedCount >= settings.maxQueued) {
+                    indexedDecisions[index] = { displayKey: issue.displayKey, outcome: 'deferred', reason: 'queue-capacity' };
+                    continue;
+                }
+                const run = {
+                    runId: runId(identity),
+                    providerId,
+                    bindingId: issue.bindingId,
+                    issueId: issue.issueId,
+                    displayKey: issue.displayKey,
+                    summary: issue.summary,
+                    priorityRank: issue.priorityRank,
+                    readinessGeneration: issue.readiness.generation,
+                    brief: evaluation.brief,
+                    deliveries: [],
+                    state: 'queued',
+                    queueClass: 'new',
+                    queuedAt: new Date().toISOString(),
+                    queueSequence: next.nextSequence,
+                };
+                next.runs.push(run);
+                queuedCount += 1;
+                next.nextSequence += 1;
+                indexedDecisions[index] = { displayKey: issue.displayKey, outcome: 'queued' };
+            }
+            decisions = indexedDecisions.filter((decision) => decision !== undefined);
+            const capacityDeferred = decisions.some((decision) => decision.outcome === 'deferred');
+            if (request.deliveryId !== undefined && !capacityDeferred) {
+                next.acceptedIngress.push(request.deliveryId);
+                if (next.acceptedIngress.length > MAX_INGRESS_RECEIPTS)
+                    next.acceptedIngress.shift();
+            }
+            next.revision += 1;
+            const parsed = stateSchema.parse(next);
+            assertStateSize(parsed);
+            return parsed;
+        });
+        const result = { ...snapshotOf(committed), decisions };
+        if (request.deliveryId !== undefined && decisions.some((decision) => decision.outcome === 'deferred')) {
+            throw new AdmissionIngressError('queue-capacity');
+        }
+        return result;
+    });
+}
+/** Authenticate ingress and retain its provider generation through the durable commit. */
+export async function reconcileIngress(dependencies, request, signal) {
+    signal?.throwIfAborted();
+    const providerId = trackerProviderId(dependencies.settings().trackerProvider);
+    return dependencies.tracker.withProvider(providerId, async (reader) => {
+        const delivery = await reader.verifyIngress(request, signal);
+        signal?.throwIfAborted();
+        const result = await reconcile(dependencies, {
+            source: 'webhook',
+            deliveryId: delivery.deliveryId,
+            ...(signal === undefined ? {} : { signal }),
+        });
+        if (!result.acceptedIngress.includes(delivery.deliveryId)) {
+            throw new AdmissionIngressError('not-accepting');
+        }
+        return result;
+    });
+}
+//# sourceMappingURL=reconciler.js.map

package/lib/admission/reconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciler.js","sourceRoot":"","sources":["../../src/admission/reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAEL,qBAAqB,GAItB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,eAAe,EAEf,aAAa,EACb,qBAAqB,EACrB,KAAK,EACL,WAAW,EACX,kBAAkB,EAClB,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAmC,EACnC,OAAyB;IAEzB,eAAe,CAAC,OAAO,CAAC,CAAA;IACxB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAA;IACxC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC9D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,sDAAsD,UAAU,GAAG,CAAC,CAAA;IAC1F,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAA;IACvC,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpE,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC/E,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;QACzF,MAAM,QAAQ,GAAG,SAAS;aACvB,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;aACnD,MAAM,CAAC,CAAC,KAAK,EAAyD,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;aACzG,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY;YACxE,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAChH,CAAA;QACH,IAAI,SAAS,GAAwB,EAAE,CAAA;QACvC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACzE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzC,SAAS,GAAG,EAAE,CAAA;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7F,SAAS,GAAG,EAAE,CAAA;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YACrC,MAAM,gBAAgB,GAAyC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBAC1F,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;oBAC3B,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAA;gBAC9F,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;YACF,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAA;YAChE,KAAK,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;gBAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;gBAC/C,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBAClE,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;oBAChF,SAAQ;gBACV,CAAC;gBACD,IAAI,WAAW,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACtC,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;oBACzG,SAAQ;gBACV,CAAC;gBAED,MAAM,GAAG,GAAc;oBACrB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;oBACtB,UAAU;oBACV,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,mBAAmB,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU;oBAC/C,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,QAAQ;oBACf,UAAU,EAAE,KAAK;oBACjB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAClC,aAAa,EAAE,IAAI,CAAC,YAAY;iBACjC,CAAA;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACnB,WAAW,IAAI,CAAC,CAAA;gBAChB,IAAI,CAAC,YAAY,IAAI,CAAC,CAAA;gBACtB,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;YAC/E,CAAC;YACD,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAA;YAEzE,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,CAAA;YACtF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gBAC7C,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,oBAAoB;oBAAE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;YACtF,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;YAClB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACtC,eAAe,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAA;QACtD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAAmC,EACnC,OAA8B,EAC9B,MAAoB;IAEpB,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,CAAA;IAC7E,OAAO,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5D,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,CAAA;QAClD,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/admission/resume-control.d.ts

@@ -0,0 +1,27 @@
+import type { ActiveRecoveryReason, ActiveResumeAuthorization, GitExecutionSnapshot, ImplementingRun, PausedActiveRun, QueuedRun, RunId } from './model.js';
+import type { AdmissionDependencies } from './ports.js';
+export declare class ResumeControl {
+    private readonly dependencies;
+    constructor(dependencies: AdmissionDependencies);
+    /**
+     * Revalidate an operator-held queued run against the current tracker issue and return it to the resumption queue.
+     * Requires an enabled scheduler, certain deployment usage, the selected tracker provider, one currently eligible issue,
+     * and an unchanged readiness generation and Agent Brief. Provider/read/validation failures or a concurrent durable
+     * state change preserve the hold. Success clears only the hold, keeps the run identity, and allocates no Session or
+     * worktree. Provider withdrawal owns cancellation of its read; callers cannot independently cancel this operation.
+     */
+    resumeRun(runId: RunId): Promise<QueuedRun>;
+    /**
+     * Revalidate an allocated pause against the current tracker and execution policy, then atomically reserve the retained
+     * run's remaining token cap and return it to `implementing`. The caller must first prove the retained Session readable
+     * and supply exact current Git facts. Scheduler authorization cannot clear an operator hold; explicit operator
+     * authorization can. Any failed or concurrent check leaves the pause unchanged.
+     */
+    resumeActiveRun(runId: RunId, observedGit: GitExecutionSnapshot, authorization: ActiveResumeAuthorization): Promise<ImplementingRun>;
+    /**
+     * Persist a definite retained-resource incompatibility discovered before an allocated pause can resume. The run must
+     * still be the same durable active pause; an identical recovery reason is idempotent. This operation starts no Agent,
+     * releases no retained identity, and accepts no caller cancellation signal.
+     */
+    requireActiveRecovery(runId: RunId, reason: ActiveRecoveryReason): Promise<PausedActiveRun>;
+}