@claudexor/control-api 3.20.1 → 3.23.0

package/dist/daemon-server.js

@@ -1,5 +1,7 @@
+import { readThreadCommands } from "./command-reads.js";
 import { recoverInterruptedOutput } from "./retained-output.js";
 import { recordedExecutionRoot } from "./run-delivery-state.js";
+import * as exactPatch from "./run-exact-patch.js";
 import { readTextArtifact, readRawTextArtifact, readStructured, safeReadStructuredArtifact, } from "./run-artifact-read.js";
 import { controlRunResult, readDeliveryState, markRunApplyState } from "./run-delivery-state.js";
 import { timingSafeEqual } from "node:crypto";
@@ -7,10 +9,13 @@ import { existsSync, lstatSync, mkdirSync, readdirSync, writeFileSync } from "no
 import { createServer } from "node:http";
 import { basename, extname, join } from "node:path";
 import { deriveApplyEligibility, revertInPlaceFromAnchor, validateApplyGate, verifyAndDeliver, } from "@claudexor/delivery";
-import { appendRunEvent, lastSeqInFile } from "@claudexor/event-log";
+import { lastSeqInFile } from "@claudexor/event-log";
 import { isVanishedErrno, safeArtifactPath, safeArtifactRoot } from "./artifact-paths.js";
 import { TERMINAL_STATES } from "./sse-shared.js";
 import { readFilesWorkProduct } from "./files-work-product.js";
+import { appendRunAuditEvent } from "./run-audit.js";
+import { discardRunResult } from "./run-discard.js";
+import { continuationSummary } from "./run-continuation-projection.js";
 import { applyFilesResult } from "./files-apply-route.js";
 import { deliverableWorkspaceChanges } from "@claudexor/workspace";
 import { streamRunEvents } from "./run-events-stream.js";
@@ -21,6 +26,7 @@ import { projectTurnRunCards } from "./thread-projection.js";
 import { projectSession, projectThread, projectTurn } from "./thread-projection.js";
 import { handleThreadTurnCreate, handleThreadTurnRetry, } from "./thread-turn-routes.js";
 import { chainIdleRunMutation, chainThreadMutation } from "./thread-mutation.js";
+import { handleThreadCreate } from "./thread-create-route.js";
 import { handleThreadLifecycleRoutes, } from "./thread-lifecycle-routes.js";
 import * as runStart from "./run-start.js";
 import { cancelDelegationFamily } from "./delegation-control.js";
@@ -37,10 +43,12 @@ import { writeBinaryResponse } from "./binary-response.js";
 export { inlineContentDisposition } from "./binary-response.js";
 import { handleRecoveryRoute } from "./recovery-routes.js";
 import { handleJournalEventRoute } from "./journal-event-routes.js";
+import { handleDaemonStatusRoute } from "./daemon-status-routes.js";
 import { handleMaintenanceRoute } from "./maintenance-routes.js";
 import { handleResourceRoute } from "./resource-routes.js";
 import { handleModelRoute } from "./model-routes.js";
 import { handleArtifactServeRoute, listArtifacts, resolveProjectRoot, } from "./artifact-serve-routes.js";
+import { runExecutionRoot, runExecutionWorkspaceRoot } from "./run-execution-root.js";
 import { requiredGateSpecsFromTaskArtifact } from "./task-contract-gates.js";
 import { bearerCredential } from "./authorization.js";
 import { assertOnlyQueryParams, singleQuery } from "./query.js";
@@ -51,10 +59,10 @@ export { resetRunListFingerprintProbeCountForTests, runListFingerprintProbeCount
 import { controlProblemError, normalizeRequestValidationError, revertRefusedProblem, thrownProblemCode, } from "./problem-response.js";
 import { handleSecurityRoute } from "./security-routes.js";
 import { effectiveTerminalFacts, expectedRunFacts, projectRunFactsForDetail, } from "./run-facts-projection.js";
-import { PlanQuestionsArtifact, CouncilProjection, derivePlanReadiness, directDelegatedChildrenFromRecords, ControlAuthReadinessRefreshRequest, ControlAuthReadinessRefreshResponse, ControlProblem, AccessProfile, ControlApplyRequest, AgentCapabilityCatalog, ControlHarnessListResponse, ControlHarnessModelsQueryResponse, ControlSetupJob, ControlSetupJobCreateRequest, ControlSetupJobInputRequest, ControlSetupJobEvent, ControlSetupJobSnapshot, isTerminalControlSetupJobState, ControlSetupJobListFilter, ControlSetupJobListResponse, ControlRunStartInfo, ControlRunControlRequest, ControlRunControlResponse, ControlReviewerPanelEntry, ControlRunDetail, ControlRunListResponse, ControlRunSummary, ControlBudgetSnapshot, PaidBudget, ControlSettingsSnapshot, ControlSettingsUpdateRequest, ControlQuotaRefreshRequest, ControlQuotaResponse, ControlAccountPoolsResponse, ControlAccountsMigrationRollbackRequest, ControlAccountsMigrationRollbackResponse, ControlCredentialProfileCreateRequest, ControlCredentialProfileCreateResponse, ControlCredentialProfileUpdateRequest, ControlCredentialProfileUpdateResponse, ControlCredentialProfileDeleteResponse, ControlInteractionAnswerRequest, ControlInteractionAnswerResponse, ControlRunDecisionRequest, ControlRunDecisionResponse, ControlRunApplicabilityResponse, ControlThreadCreateRequest, ControlThreadTurnRequest, ControlThreadUpdateRequest, ControlThreadDetail, ControlThreadListResponse, DecisionRecord, Id, ModeKind, RoutingGoal, ReviewFinding, RunFailure, RunTelemetry, StructuredOutputConformance, TaskContract, ProtectedPathApproval, isEphemeralRunScope, isTerminalLifecycle, needsDecision, needsOperatorAttention, outcomeBanner, outcomeFactsFromFailure, TestCommandInvocation, WorkProduct, } from "@claudexor/schema";
+import { PlanQuestionsArtifact, CouncilProjection, derivePlanReadiness, directDelegatedChildrenFromRecords, ControlAuthReadinessRefreshRequest, ControlAuthReadinessRefreshResponse, ControlProblem, AccessProfile, ControlApplyRequest, AgentCapabilityCatalog, ControlHarnessListResponse, ControlHarnessModelsQueryResponse, ControlSetupJob, ControlSetupJobCreateRequest, ControlSetupJobInputRequest, ControlSetupJobEvent, ControlSetupJobSnapshot, isTerminalControlSetupJobState, ControlSetupJobListFilter, ControlSetupJobListResponse, ControlRunStartInfo, ControlRunControlRequest, ControlRunControlResponse, ControlReviewerPanelEntry, ControlRunDetail, ControlRunListResponse, ControlRunSummary, ControlBudgetSnapshot, PaidBudget, ControlSettingsSnapshot, ControlSettingsUpdateRequest, ControlQuotaRefreshRequest, ControlQuotaResponse, ControlAccountPoolsResponse, ControlAccountsMigrationRollbackRequest, ControlAccountsMigrationRollbackResponse, ControlCredentialProfileCreateRequest, ControlCredentialProfileCreateResponse, ControlCredentialProfileUpdateRequest, ControlCredentialProfileUpdateResponse, ControlCredentialProfileDeleteResponse, ControlInteractionAnswerRequest, ControlInteractionAnswerResponse, ControlRunDecisionRequest, ControlRunDecisionResponse, ControlRunApplicabilityResponse, ControlThreadTurnRequest, ControlThreadUpdateRequest, ControlThreadDetail, ControlThreadListResponse, DecisionRecord, Id, ModeKind, RoutingGoal, ReviewFinding, RunFailure, RunTelemetry, StructuredOutputConformance, TaskContract, ProtectedPathApproval, isTerminalLifecycle, needsDecision, needsOperatorAttention, outcomeBanner, outcomeFactsFromFailure, TestCommandInvocation, WorkProduct, } from "@claudexor/schema";
 import { resolveControlProtocol } from "./control-protocol.js";
 import { readControlRequestBody } from "./request-body.js";
-import { assertNoInlineSecretValues, containsSecretLikeToken, errorCode, noProjectRepoRoot, redactSecrets, safeProblemContext, safeProblemRequiredActions, sha256, } from "@claudexor/util";
+import { assertNoInlineSecretValues, errorCode, noProjectRepoRoot, redactSecrets, safeProblemContext, safeProblemRequiredActions, sha256, } from "@claudexor/util";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
 const NO_PROJECT_ROOT = noProjectRepoRoot();
@@ -358,12 +366,18 @@ export class DaemonControlApiServer {
         }
         const path = protocol.path;
         const dataRoutes = {
+            daemon: this.opts.daemon,
             services: this.opts.services,
             readBody: (request) => this.readBody(request),
             json: (response, status, body) => this.json(response, status, body),
             requestError: (response, error, fallback) => this.requestError(response, error, fallback),
         };
-        for (const route of [handleResourceRoute, handleModelRoute, handleMaintenanceRoute]) {
+        for (const route of [
+            handleResourceRoute,
+            handleModelRoute,
+            handleMaintenanceRoute,
+            handleDaemonStatusRoute,
+        ]) {
             if (await route(dataRoutes, method, path, req, res))
                 return;
         }
@@ -373,13 +387,14 @@ export class DaemonControlApiServer {
             json: (response, status, body) => this.json(response, status, body),
             requestError: (response, error, fallback) => this.requestError(response, error, fallback),
             binary: writeBinaryResponse,
+            findRun: (id) => this.findRun(id),
         }, method, path, req, res))
             return;
         if (method === "POST" && path === "/runs") {
             return runStart.handleRunCreate({
                 daemon: this.opts.daemon,
                 readBody: (request) => this.readBody(request),
-                requestError: (response, error) => this.requestError(response, error),
+                requestError: (response, error, fallback) => this.requestError(response, error, fallback),
                 json: (response, status, body) => this.json(response, status, body),
                 respondToAcceptedJob: (response, jobId) => this.respondToAcceptedJob(response, jobId),
                 validateResources: this.opts.services?.validateResources,
@@ -469,51 +484,19 @@ export class DaemonControlApiServer {
         }, method, path, req, res))
             return;
         if (method === "POST" && path === "/threads") {
-            const svc = this.opts.services?.createThread;
-            if (!svc)
-                return this.json(res, 501, { error: "threads are not supported by this engine build" });
-            try {
-                const body = await this.readBody(req);
-                assertNoInlineSecretValues(body);
-                const parsed = ControlThreadCreateRequest.parse(body);
-                const idempotencyKey = runStart.requiredIdempotencyKey(req);
-                let repoRoot = null;
-                if (parsed.scope.kind === "project") {
-                    repoRoot = runStart.normalizeExistingProjectRoot(parsed.scope.root);
-                }
-                const thread = await svc({
-                    title: parsed.title,
-                    folder: parsed.folder,
-                    repoRoot,
-                    // Carried explicitly through the SAME predicate the run route and the
-                    // partition router use: dropping it here would register a root the
-                    // wire contract promises never to register.
-                    ephemeral: isEphemeralRunScope(parsed.scope),
-                    mode: parsed.mode,
-                    workspace: parsed.workspace,
-                    authPreference: parsed.authPreference,
-                    credentialProfileId: parsed.credentialProfileId ?? null,
-                    access: parsed.access,
-                    primaryHarness: parsed.primaryHarness ?? null,
-                    eligibleHarnesses: parsed.eligibleHarnesses,
-                    idempotency: {
-                        key: idempotencyKey,
-                        client: "control-api",
-                        request: parsed,
-                    },
-                });
-                return this.json(res, 200, projectThread(thread, false));
-            }
-            catch (err) {
-                return this.requestError(res, err);
-            }
+            return handleThreadCreate({
+                services: this.opts.services,
+                readBody: (request) => this.readBody(request),
+                json: (response, status, body) => this.json(response, status, body),
+                requestError: (response, error) => this.requestError(response, error),
+            }, req, res);
         }
         if (method === "GET" && path === "/threads") {
             const svc = this.opts.services?.listThreads;
             if (!svc)
                 return this.json(res, 501, { error: "threads are not supported by this engine build" });
             const { threads, problems } = await svc();
-            const runs = await this.opts.daemon.list();
+            const runs = await readThreadCommands(this.opts.daemon, threads);
             const blocked = new Set(runs.filter((r) => this.runNeedsAttention(r)).map((r) => r.runId ?? r.id));
             return this.json(res, 200, ControlThreadListResponse.parse({
                 threads: threads.map((t) => projectThread(t, blocked.has(t.head_run_id ?? ""))),
@@ -527,7 +510,9 @@ export class DaemonControlApiServer {
                 return this.json(res, 501, { error: "threads are not supported by this engine build" });
             try {
                 const detail = await svc(decodeURIComponent(threadDetailMatch[1]));
-                const runs = await this.opts.daemon.list();
+                const runs = await this.opts.daemon.list({
+                    threadId: decodeURIComponent(threadDetailMatch[1]),
+                });
                 const byRun = new Map(runs.map((r) => [r.runId ?? r.id, r]));
                 const thread = detail.thread;
                 const cards = projectTurnRunCards(detail.turns, runs, (record) => this.summarizeRunOrDiagnostic(record));
@@ -653,7 +638,11 @@ export class DaemonControlApiServer {
                             if (!result.revertable || !result.revertAnchorId) {
                                 throw Object.assign(new Error("this run produced no revertable in-place change"), { status: 409 });
                             }
-                            const repoRoot = recordedExecutionRoot(rec) ?? applyTargetRoot({ kind: "original_project" }, rec);
+                            // A delegated run's live tree is its recorded caller-owned
+                            // address; it never falls back to the stable project identity.
+                            const repoRoot = recordedExecutionRoot(rec) ??
+                                runExecutionWorkspaceRoot(rec) ??
+                                applyTargetRoot({ kind: "original_project" }, rec);
                             if (!repoRoot) {
                                 throw Object.assign(new Error("cannot resolve the in-place project root to revert"), { status: 400 });
                             }
@@ -707,25 +696,7 @@ export class DaemonControlApiServer {
                         key: decisionKey,
                         operation: "run.decision.discard",
                         request: { runId: rec.runId ?? rec.id, body },
-                        work: async () => {
-                            const files = readFilesWorkProduct(rec);
-                            const state = controlRunResult(rec).applyState;
-                            if (!TERMINAL_STATES.has(rec.state) ||
-                                !files ||
-                                files.manifest.isolation !== "envelope" ||
-                                (state !== "not_applied" && state !== "discarded"))
-                                throw Object.assign(new Error("Only an unapplied copied files result can be discarded; direct effects remain in place"), { status: 409 });
-                            markRunApplyState(rec, "discarded", undefined, true);
-                            appendRunAuditEvent(rec, "control.applied", {
-                                decision: "discard",
-                                manifest_sha256: files.manifestSha256,
-                            });
-                            return ControlRunDecisionResponse.parse({
-                                accepted: true,
-                                status: "discarded",
-                                message: "Pending file application discarded; retained result follows normal retention.",
-                            });
-                        },
+                        work: () => discardRunResult(rec),
                     }));
                     return this.json(res, 200, response);
                 }
@@ -751,18 +722,16 @@ export class DaemonControlApiServer {
                         return this.requestError(res, error);
                     }
                 }
-                const patch = readPatch(rec);
-                if (patch === null)
-                    return this.json(res, 404, { error: "no patch artifact for this run" });
-                if (containsSecretLikeToken(patch))
-                    return this.json(res, 409, { error: "patch contains secret-like token; refusing apply" });
-                const repoRoot = applyTargetRoot(body.target ?? { kind: "original_project" }, rec);
-                if (!repoRoot)
-                    return this.json(res, 400, { error: "project root is required for apply" });
-                const absoluteRepoError = runStart.validateAbsoluteRepoRoot(repoRoot);
-                if (absoluteRepoError)
-                    return this.json(res, 400, { error: absoluteRepoError });
                 try {
+                    const patch = readPatch(rec); // typed 409 when the exact bytes are unavailable
+                    if (patch === null)
+                        return this.json(res, 404, { error: "no patch artifact for this run" });
+                    const repoRoot = applyTargetRoot(body.target ?? { kind: "original_project" }, rec);
+                    if (!repoRoot)
+                        return this.json(res, 400, { error: "project root is required for apply" });
+                    const absoluteRepoError = runStart.validateAbsoluteRepoRoot(repoRoot);
+                    if (absoluteRepoError)
+                        return this.json(res, 400, { error: absoluteRepoError });
                     const response = await this.chainRunMutation(rec, () => runIdempotentDelivery(this.opts.services, {
                         params: rec.params,
                         key: decisionKey,
@@ -774,7 +743,10 @@ export class DaemonControlApiServer {
                             repoRoot,
                         },
                         work: async () => {
-                            const delivered = await verifyAndDeliver(repoRoot, patch, { mode: body.applyMode ?? "apply" }, gateSpecsForRun(rec), (freshVerify) => applyGateError(rec, patch, repoRoot, this.operatorDecisionFor(rec), freshVerify));
+                            const delivered = await verifyAndDeliver(repoRoot, patch, {
+                                mode: body.applyMode ?? "apply",
+                                secretLikeBinary: exactPatch.runPatchHasSecretLikeBinary(rec),
+                            }, gateSpecsForRun(rec), (freshVerify) => applyGateError(rec, patch, repoRoot, this.operatorDecisionFor(rec), freshVerify));
                             if (delivered.refused) {
                                 throw Object.assign(new Error(delivered.detail ?? "delivery refused"), {
                                     status: 409,
@@ -1370,7 +1342,7 @@ export class DaemonControlApiServer {
     /** Persisted Delegate-only descendant graph. `parentRunId` alone is broader
      * thread/retry lineage and deliberately does not participate. */
     async delegatedDescendants(parentRunId) {
-        return delegatedDescendantsFromRecords(parentRunId, await this.opts.daemon.list());
+        return delegatedDescendantsFromRecords(parentRunId, await this.opts.daemon.list({ delegatedDescendantsOf: parentRunId }));
     }
     /**
      * GET /v2/runs (QA-052): a bounded, newest-first, keyset-paginated page of run
@@ -1391,7 +1363,7 @@ export class DaemonControlApiServer {
         catch (error) {
             return this.requestError(res, error);
         }
-        const { page, hasMore, nextCursor } = selectRunListPage(await this.opts.daemon.list(), query);
+        const { page, hasMore, nextCursor } = selectRunListPage(await this.opts.daemon.list({ page: query }), query);
         return this.json(res, 200, ControlRunListResponse.parse({
             runs: page.map((r) => this.summarizeRunOrDiagnostic(r)),
             nextCursor,
@@ -1415,10 +1387,9 @@ export class DaemonControlApiServer {
         const ws = thread?.workspace;
         if (!ws)
             return null;
-        return {
-            mode: ws.mode === "isolated" ? "isolated" : "in_place",
-            worktreePath: typeof ws.worktree_path === "string" && ws.worktree_path.trim() ? ws.worktree_path : null,
-        };
+        const mode = ws.mode === "isolated" || ws.mode === "delegated" ? ws.mode : "in_place";
+        const tree = mode === "delegated" ? ws.workspace_root : ws.worktree_path;
+        return { mode, worktreePath: typeof tree === "string" && tree.trim() ? tree : null };
     }
     operatorDecisionFor(rec) {
         return this.opts.services?.operatorDecision?.(rec.runId ?? rec.id, rec.params) ?? null;
@@ -1427,8 +1398,10 @@ export class DaemonControlApiServer {
         const decision = this.operatorDecisionFor(rec);
         if (!decision)
             return null;
-        const patch = readTextArtifact(rec, "final/patch.diff", false);
-        return patch !== null && decision.patchSha256 === sha256(patch) ? decision : null;
+        // INV-062: the decision binds to the EXACT patch, never to a redacted copy.
+        return decision.patchSha256 === exactPatch.runPatchDigest(rec, runRepoRoot(rec))
+            ? decision
+            : null;
     }
     /** The RISK-OVERRIDABLE needs-decision signal: a terminal run whose review is
      * blocked or checks failed, with no valid operator decision recorded. This is
@@ -1515,7 +1488,7 @@ export class DaemonControlApiServer {
         return {
             turnCtx: this.threadTurnRouteCtx(),
             services: this.opts.services,
-            listRuns: () => this.opts.daemon.list(),
+            listRuns: (query) => this.opts.daemon.list(query),
             readBody: (req) => this.readBody(req),
             json: (res, status, body) => this.json(res, status, body),
             requestError: (res, error) => this.requestError(res, error),
@@ -1692,20 +1665,6 @@ function readFailure(rec) {
         runDir: rec.runDir ?? null,
     });
 }
-function appendRunAuditEvent(rec, type, payload) {
-    if (!rec.runDir)
-        return;
-    try {
-        // Single-counter invariant: while the run is active its EventLog owns the
-        // seq space, so audit records MUST route through it (appendRunEvent does;
-        // file-tail stamping only applies once the run is terminal). A tail-read
-        // here would duplicate ids and break SSE Last-Event-ID resume.
-        appendRunEvent(join(rec.runDir, "events.jsonl"), rec.runId ?? rec.id, rec.taskId ?? "unknown", type, payload);
-    }
-    catch {
-        /* audit append must not change control behavior */
-    }
-}
 /** v0.9 strategy flags projected back so surfaces can tell a race from a repair loop. */
 function strategyFromParams(p) {
     if (p["untilClean"] === true)
@@ -1778,6 +1737,7 @@ function winnerWorkStateFor(rec) {
 }
 function summarizeRun(rec, eventsSnapshot) {
     const p = paramsRecord(rec);
+    const project = projectMetadata(rec);
     // safeParse everywhere: one malformed job record (e.g. an old/foreign mode id)
     // must degrade to an unknown field, never 500 the whole run list forever.
     const parsedMode = ModeKind.safeParse(p["mode"]);
@@ -1828,15 +1788,18 @@ function summarizeRun(rec, eventsSnapshot) {
             task?.run_lineage.delegated_from_run_id ??
             null,
         delegation: telemetry?.delegation ?? null,
+        ...continuationSummary(rec, eventsSnapshot),
         taskId: rec.taskId,
         state: rec.state,
         runDir: rec.runDir,
         error: rec.error,
         failure,
-        project: projectMetadata(rec),
+        project,
+        executionRoot: runExecutionRoot(rec, project.root),
         mode: parsedMode.success ? parsedMode.data : undefined,
         strategy: strategyFromParams(p),
-        prompt: typeof p["prompt"] === "string" ? redactPrompt(p["prompt"]) : undefined,
+        prompt: rec.promptPreview ??
+            (typeof p["prompt"] === "string" ? redactPrompt(p["prompt"]) : undefined),
         harnesses: Array.isArray(p["harnesses"])
             ? p["harnesses"].filter((x) => typeof x === "string")
             : undefined,
@@ -2125,7 +2088,7 @@ function budgetSnapshot(rec, decision, eventsSnapshot, integrity) {
     });
 }
 function readPatch(rec) {
-    return readRawTextArtifact(rec, "final/patch.diff");
+    return exactPatch.readExactRunPatch(rec, runRepoRoot(rec));
 }
 function runRepoRoot(rec) {
     const p = paramsRecord(rec);
@@ -2159,7 +2122,7 @@ function runRepoRoot(rec) {
 function applyTargetRoot(target, rec) {
     if (target.kind === "project")
         return target.root;
-    return runRepoRoot(rec);
+    return runExecutionRoot(rec, runRepoRoot(rec));
 }
 /** Project the run record into the delivery package's single-owner apply gate. */
 function applyGateError(rec, patch, targetRepoRoot, operatorDecision, finalVerify) {
@@ -2178,7 +2141,7 @@ function applyGateInputFor(rec, patch, targetRepoRoot, operatorDecision) {
         workProduct: safeReadStructuredArtifact(rec, "final/work_product.yaml", WorkProduct),
         patch,
         ...(files ? { filesManifest: files.manifest, manifestSha256: files.manifestSha256 } : {}),
-        originalRepoRoot: runRepoRoot(rec),
+        originalRepoRoot: runExecutionRoot(rec, runRepoRoot(rec)),
         targetRepoRoot,
         operatorDecision: operatorDecision
             ? {
@@ -2202,7 +2165,7 @@ function applyGateInputFor(rec, patch, targetRepoRoot, operatorDecision) {
 /**
  * The GET /runs/:id projection of the apply gate: null when the run has no
  * patch artifact (nothing to apply); otherwise the derived verdict against
- * the run's own original project root.
+ * the run's recorded delivery target.
  */
 /** Readiness AND open questions of a plan run, from ONE read of the same
  * final/questions.json artifact (D17) — no plan-text re-parse, no double read. */
@@ -2222,14 +2185,17 @@ function councilFor(rec, mode) {
     return safeReadStructuredArtifact(rec, "council/membership.yaml", CouncilProjection);
 }
 function applyEligibilityFor(rec, operatorDecision) {
-    const patch = readPatch(rec);
+    const root = runExecutionRoot(rec, runRepoRoot(rec));
+    const { patch, unavailable } = exactPatch.resolveRunPatch(rec, runRepoRoot(rec));
     const files = readFilesWorkProduct(rec);
     if (!files && (patch === null || patch.trim() === ""))
         return null;
-    const root = runRepoRoot(rec);
     if (!root)
         return null;
-    return deriveApplyEligibility(applyGateInputFor(rec, patch ?? "", root, operatorDecision));
+    return deriveApplyEligibility({
+        ...applyGateInputFor(rec, patch ?? "", root, operatorDecision),
+        exactPatchUnavailable: unavailable,
+    });
 }
 /** Compatibility projection for artifact-only CLI reads; the journal record is authority. */
 function writeOperatorDecisionProjection(rec, record) {