@cleocode/core 2026.6.19 → 2026.7.2

package/dist/resources/governor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governor.js","sourceRoot":"","sources":["../../src/resources/governor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,+BAA+B,GAKhC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,IAAI,IAAI,GAAwC,IAAI,CAAC;AACrD,SAAS,GAAG;IACV,IAAI,IAAI,KAAK,IAAI;QAAE,IAAI,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,IAAI,WAAW,GAAwB,IAAI,CAAC;AAC5C,IAAI,wBAAwB,GAAG,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,WAAW,GAAG,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACvF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,MAAc;IAC9C,IAAI,wBAAwB;QAAE,OAAO;IACrC,wBAAwB,GAAG,IAAI,CAAC;IAChC,GAAG,EAAE,CAAC,IAAI,CACR,kEAAkE,MAAM,KAAK;QAC3E,6DAA6D,CAChE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,WAAW,GAAG,IAAI,CAAC;IACnB,wBAAwB,GAAG,KAAK,CAAC;AACnC,CAAC;AAsBD,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvB,sEAAsE;AACtE,SAAS,SAAS,CAAC,MAAsB;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC;IACvE,OAAO,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAkB,EAClB,MAAsB,EACtB,OAAsB,EAAE;IAExB,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAE/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,IAAI,QAAQ,EAAE,CAAC;IACpD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,2EAA2E;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,IAAI,UAAU,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,IAAI,GAAG,KAAK,IAAI,SAAS,GAAG,EAAE,CAAC;IAE/C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;QACX,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,aAAa,CAAC,GAAG,WAAW,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QAC/B,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,KAAK;gBAAE,OAAO,CAAC,CAAC;YAC3B,IAAI,IAAI,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,KAAK,uBAAuB;YAC1B,OAAO,IAAI,GAAG,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,CAAS,EAAE,EAAU;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAkB;IAChD,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa;IACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,CAAC,CAAC;QACR,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;QACxB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAkB,EAAE,MAAc,EAAE,YAAoB;IACxE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAE7B;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAkB;IAC5C,oBAAoB,IAAI,CAAC,CAAC;IAC1B,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;AACzD,CAAC;AAwBD;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAkB,EAAE,OAAuB,EAAE;QACzD,wEAAwE;QACxE,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YAChD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,GAAG,oDAAoD,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAChG,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,8EAA8E;QAC9E,6EAA6E;QAC7E,wEAAwE;QACxE,mCAAmC;QACnC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,IAAI,aAAa,KAAK,IAAI;gBAAE,OAAO,aAAa,CAAC;QACnD,CAAC;QAED,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,GAAG,CAAC;YACF,wEAAwE;YACxE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;wBACxC,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,KAAK;qBAChB,CAAC,CAAC;oBACH,IAAI,QAAQ,GAAG,KAAK,CAAC;oBACrB,OAAO;wBACL,QAAQ,EAAE,KAAK;wBACf,KAAK,EAAE,GAAG;wBACV,IAAI,EAAE,GAAG;wBACT,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;wBACxB,OAAO,EAAE,KAAK,IAAI,EAAE;4BAClB,IAAI,QAAQ;gCAAE,OAAO;4BACrB,QAAQ,GAAG,IAAI,CAAC;4BAChB,IAAI,CAAC;gCACH,MAAM,OAAO,EAAE,CAAC;4BAClB,CAAC;4BAAC,MAAM,CAAC;gCACP,iEAAiE;4BACnE,CAAC;wBACH,CAAC;qBACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAM;YACrB,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE;QAE7C,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,GAAG,qBAAqB,MAAM,aAAa;YACnD,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,SAAS,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAChE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,+BAA+B,CAAC,CACtD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,oBAAoB,CAChC,GAAkB,EAClB,MAAc;QAEd,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;YAC3B,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,GAAG,oCAAoC,MAAM,GAAG,EAC1D,KAAK,CAAC,cAAc,IAAI,+BAA+B,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,CAAC;YACP,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC9D,sEAAsE;gBACxE,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,UAAU,CAAC,GAAkB,EAAE,OAAuB,EAAE;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,GAAkB,EAAE,OAAuB,EAAE;QAC3D,IAAI,mBAAmB,EAAE,KAAK,KAAK,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YACjE,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAC9D,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAkB,EAAE,MAAc;IAC9D,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5F,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,GAAkB;IAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7F,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC"}

package/dist/resources/supervisor-admit.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Supervisor-mode resource admission client (T12001 · Epic T11992).
+ *
+ * The `supervisor`-mode counterpart of the {@link ResourceGovernor}'s local slot
+ * engine. Where local mode arbitrates heavy-op concurrency through cross-process
+ * lockfiles, supervisor mode routes the `resource_admit` / `resource_release`
+ * lease-ipc verbs to the Rust `cleo-supervisor` so a single in-memory counter is
+ * the machine-wide source of truth.
+ *
+ * A dead/absent supervisor must NEVER deadlock work: every send degrades to
+ * `{ unavailable }` on any transport error, and the governor falls back to the
+ * local slot engine. Mirrors the `llm-queue-admit.ts` transport (core cannot
+ * import `@cleocode/runtime` — a cycle — so it speaks the NDJSON codec directly
+ * through the shared `@cleocode/contracts` lease-ipc Zod schemas).
+ *
+ * @task T12001
+ * @epic T11992
+ */
+import { type ResourceAdmitResultResponse, type ResourceReleaseResultResponse } from '@cleocode/contracts';
+/** A transport-unavailable sentinel — the caller degrades to the local engine. */
+export interface SupervisorUnavailable {
+    readonly unavailable: true;
+    readonly reason: string;
+}
+/**
+ * Resolve the supervisor socket path: `$CLEO_SUPERVISOR_SOCKET` overrides,
+ * otherwise `<cleoHome>/cleo-supervisor.sock`.
+ */
+export declare function resolveSupervisorSocketPath(): string;
+/**
+ * Admit (or defer) a heavy op of `cls` for `holderId` against `budget` through
+ * the supervisor's central arbiter. Resolves the `resource_admit_result` reply,
+ * or `{ unavailable }` when the supervisor cannot arbitrate (degrade to local).
+ */
+export declare function sendResourceAdmit(socketPath: string, cls: string, holderId: string, budget: number): Promise<ResourceAdmitResultResponse | SupervisorUnavailable>;
+/**
+ * Release a previously-admitted slot of `cls` for `holderId`. Resolves the
+ * `resource_release_result` reply, or `{ unavailable }` on transport failure
+ * (the slot self-heals via the arbiter's process-death reclaim / stale recovery).
+ */
+export declare function sendResourceRelease(socketPath: string, cls: string, holderId: string): Promise<ResourceReleaseResultResponse | SupervisorUnavailable>;
+//# sourceMappingURL=supervisor-admit.d.ts.map

package/dist/resources/supervisor-admit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-admit.d.ts","sourceRoot":"","sources":["../../src/resources/supervisor-admit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAKL,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EACnC,MAAM,qBAAqB,CAAC;AAY7B,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,GAAG,qBAAqB,CAAC,CAS9D;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAAC,CAShE"}

package/dist/resources/supervisor-admit.js

@@ -0,0 +1,136 @@
+/**
+ * Supervisor-mode resource admission client (T12001 · Epic T11992).
+ *
+ * The `supervisor`-mode counterpart of the {@link ResourceGovernor}'s local slot
+ * engine. Where local mode arbitrates heavy-op concurrency through cross-process
+ * lockfiles, supervisor mode routes the `resource_admit` / `resource_release`
+ * lease-ipc verbs to the Rust `cleo-supervisor` so a single in-memory counter is
+ * the machine-wide source of truth.
+ *
+ * A dead/absent supervisor must NEVER deadlock work: every send degrades to
+ * `{ unavailable }` on any transport error, and the governor falls back to the
+ * local slot engine. Mirrors the `llm-queue-admit.ts` transport (core cannot
+ * import `@cleocode/runtime` — a cycle — so it speaks the NDJSON codec directly
+ * through the shared `@cleocode/contracts` lease-ipc Zod schemas).
+ *
+ * @task T12001
+ * @epic T11992
+ */
+import { connect } from 'node:net';
+import { join } from 'node:path';
+import { LEASE_IPC_PROTOCOL_VERSION, LeaseIpcRequestEnvelopeSchema, LeaseIpcResponseEnvelopeSchema, } from '@cleocode/contracts';
+import { getCleoHome } from '@cleocode/paths';
+/** The supervisor IPC socket filename — MUST equal `SOCKET_NAME` in `crates/cleo-supervisor/src/paths.rs`. */
+const SUPERVISOR_SOCKET_NAME = 'cleo-supervisor.sock';
+/** Connect timeout (ms). A slow/absent socket degrades fast — never a deadlock. */
+const CONNECT_TIMEOUT_MS = 250;
+/** Per-request read timeout for a result frame (ms). */
+const REQUEST_TIMEOUT_MS = 2_000;
+/**
+ * Resolve the supervisor socket path: `$CLEO_SUPERVISOR_SOCKET` overrides,
+ * otherwise `<cleoHome>/cleo-supervisor.sock`.
+ */
+export function resolveSupervisorSocketPath() {
+    return process.env.CLEO_SUPERVISOR_SOCKET ?? join(getCleoHome(), SUPERVISOR_SOCKET_NAME);
+}
+/**
+ * Admit (or defer) a heavy op of `cls` for `holderId` against `budget` through
+ * the supervisor's central arbiter. Resolves the `resource_admit_result` reply,
+ * or `{ unavailable }` when the supervisor cannot arbitrate (degrade to local).
+ */
+export async function sendResourceAdmit(socketPath, cls, holderId, budget) {
+    const result = await sendLeaseRequest(socketPath, { kind: 'resource_admit', class: cls, holder_id: holderId, budget }, 'resource_admit_result');
+    if ('unavailable' in result)
+        return result;
+    if (result.kind === 'resource_admit_result')
+        return result;
+    return { unavailable: true, reason: `unexpected response kind: ${result.kind}` };
+}
+/**
+ * Release a previously-admitted slot of `cls` for `holderId`. Resolves the
+ * `resource_release_result` reply, or `{ unavailable }` on transport failure
+ * (the slot self-heals via the arbiter's process-death reclaim / stale recovery).
+ */
+export async function sendResourceRelease(socketPath, cls, holderId) {
+    const result = await sendLeaseRequest(socketPath, { kind: 'resource_release', class: cls, holder_id: holderId }, 'resource_release_result');
+    if ('unavailable' in result)
+        return result;
+    if (result.kind === 'resource_release_result')
+        return result;
+    return { unavailable: true, reason: `unexpected response kind: ${result.kind}` };
+}
+/**
+ * One-shot NDJSON lease-ipc round-trip over a fresh Unix socket. Connection per
+ * request (the verbs are stateless); the socket is closed before resolution.
+ * Any transport error resolves to `{ unavailable }` — never throws, never
+ * deadlocks. `expectedKind` is the result `kind` the caller correlates.
+ */
+function sendLeaseRequest(socketPath, request, expectedKind) {
+    return new Promise((resolve) => {
+        const id = `ra-${process.pid}-${request.kind}`;
+        const envelope = LeaseIpcRequestEnvelopeSchema.parse({
+            protocol_version: LEASE_IPC_PROTOCOL_VERSION,
+            id,
+            direction: 'request',
+            request,
+        });
+        const line = `${JSON.stringify(envelope)}\n`;
+        let settled = false;
+        let buffer = '';
+        const socket = connect(socketPath);
+        const done = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.removeAllListeners();
+            socket.destroy();
+            resolve(value);
+        };
+        const degrade = (reason) => done({ unavailable: true, reason });
+        socket.setTimeout(REQUEST_TIMEOUT_MS);
+        const connectTimer = setTimeout(() => degrade('supervisor connect timeout'), CONNECT_TIMEOUT_MS);
+        socket.on('connect', () => {
+            clearTimeout(connectTimer);
+            socket.write(line);
+        });
+        socket.on('timeout', () => degrade('supervisor request timeout'));
+        socket.on('error', (err) => {
+            clearTimeout(connectTimer);
+            degrade(err.message);
+        });
+        socket.on('close', () => {
+            if (!settled)
+                degrade('supervisor closed the connection before responding');
+        });
+        socket.on('data', (chunk) => {
+            buffer += chunk.toString('utf8');
+            const nl = buffer.indexOf('\n');
+            if (nl < 0)
+                return; // wait for a full NDJSON line
+            let json;
+            try {
+                json = JSON.parse(buffer.slice(0, nl));
+            }
+            catch (cause) {
+                degrade(`malformed lease-ipc frame: ${cause instanceof Error ? cause.message : cause}`);
+                return;
+            }
+            const parsed = LeaseIpcResponseEnvelopeSchema.safeParse(json);
+            if (!parsed.success) {
+                degrade(`off-contract lease-ipc response: ${parsed.error.message}`);
+                return;
+            }
+            const { response } = parsed.data;
+            if (response.kind === expectedKind) {
+                done(response);
+                return;
+            }
+            if (response.kind === 'error') {
+                degrade(`${response.code}: ${response.message}`);
+                return;
+            }
+            degrade(`unexpected lease-ipc response kind for ${request.kind}: ${response.kind}`);
+        });
+    });
+}
+//# sourceMappingURL=supervisor-admit.js.map

package/dist/resources/supervisor-admit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-admit.js","sourceRoot":"","sources":["../../src/resources/supervisor-admit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,0BAA0B,EAE1B,6BAA6B,EAC7B,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,8GAA8G;AAC9G,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAEtD,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,wDAAwD;AACxD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,GAAW,EACX,QAAgB,EAChB,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,UAAU,EACV,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EACnE,uBAAuB,CACxB,CAAC;IACF,IAAI,aAAa,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAuB;QAAE,OAAO,MAAM,CAAC;IAC3D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,GAAW,EACX,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,UAAU,EACV,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC7D,yBAAyB,CAC1B,CAAC;IACF,IAAI,aAAa,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAyB;QAAE,OAAO,MAAM,CAAC;IAC7D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,UAAkB,EAClB,OAAwB,EACxB,YAAiE;IAEjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,CAAC;YACnD,gBAAgB,EAAE,0BAA0B;YAC5C,EAAE;YACF,SAAS,EAAE,SAAkB;YAC7B,OAAO;SACR,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAW,OAAO,CAAC,UAAU,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAG,CACX,KAA0F,EACpF,EAAE;YACR,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE9E,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,YAAY,GAAG,UAAU,CAC7B,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAC3C,kBAAkB,CACnB,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,8BAA8B;YAClD,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,QAAuE,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,0CAA0C,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/selfimprove/draft-pr.d.ts

@@ -5,7 +5,7 @@
  * PR against the cleocode repo (ADR-065 — PRs target `main` via the Merge Queue;
  * NEVER a direct push to `main`, NEVER an auto-merge, NEVER a publish). This module
  * is the egress primitive, modeled on `propose-patch.ts` (the closest "agent
- * proposes a fix PR" exemplar) with three self-dogfooding hardenings:
+ * proposes a fix PR" exemplar) with four self-dogfooding hardenings:
  *
  *   1. **`--draft` is ALWAYS appended** to `gh pr create` — the PR is never
  *      ready-for-merge; a human reviews and undrafts it.
@@ -14,6 +14,13 @@
  *      side-effect-free at egress by default.
  *   3. **Branch `feat/T11889-selfimprove-<scenario>-<ts>`** — a feature branch
  *      (ADR-065); no main mutation path exists in this module.
+ *   4. **Workspace isolation (T12007).** The patch is applied inside an
+ *      *ephemeral transient worktree* cut fresh off `origin/main` — NEVER the
+ *      invoking checkout — and ONLY the paths the patch names are staged
+ *      (`git add -- <paths>`, never `git add -A`). This closes a P1 data-safety
+ *      defect where the egress swept the orchestrator's entire dirty working
+ *      tree (untracked owner scratch notes, uncommitted edits) into the public
+ *      branch and deleted them locally. The invoking repo is never mutated.
  *
  * The live path wraps the git/gh shell-out in
  * {@link "../sentient/skill-provenance.js".withProvenance}`('pr-generator', …)`
@@ -26,21 +33,56 @@
  * @module @cleocode/core/selfimprove/draft-pr
  * @epic T11889
  * @task T11913
+ * @task T12007
  */
 /**
  * Pluggable command runner. Returns stdout as UTF-8 text or throws on non-zero
  * exit. Production default wraps `child_process.execFileSync` with piped stdio.
+ *
+ * The optional `cwd` is REQUIRED for workspace isolation (T12007): every git
+ * mutation runs inside the ephemeral worktree, never `process.cwd()` (which
+ * would be the invoking checkout). The default runner threads it into
+ * `execFileSync`; test doubles capture it to assert the isolation boundary.
+ */
+export type CommandRunner = (file: string, args: readonly string[], cwd?: string) => string;
+/**
+ * Provision arguments for the isolated worktree hook (T12007).
+ *
+ * @see {@link WorktreeProvisioner}
+ */
+export interface ProvisionWorktreeArgs {
+    /** Absolute invoking project root the worktree is registered against. */
+    readonly projectRoot: string;
+    /** Absolute path where the ephemeral worktree directory is created (tmpdir). */
+    readonly worktreePath: string;
+    /** The feature branch created inside the worktree. */
+    readonly branch: string;
+    /** The base ref the worktree (and its branch) is cut from — `origin/main`. */
+    readonly baseRef: string;
+}
+/**
+ * Inject hook that provisions the ephemeral isolation worktree. Production
+ * leaves it undefined and the module routes through `@cleocode/worktree`'s
+ * `addTransientWorktree` (the sanctioned escape hatch for tmpdir worktrees —
+ * keeps the raw `git worktree` shell-out out of `packages/core/` per the
+ * T9984 lint gate). Tests inject a double to avoid a real git remote.
  */
-export type CommandRunner = (file: string, args: readonly string[]) => string;
+export type WorktreeProvisioner = (args: ProvisionWorktreeArgs) => Promise<void> | void;
+/**
+ * Inject hook that removes the ephemeral isolation worktree. Production leaves
+ * it undefined and the module routes through `@cleocode/worktree`'s
+ * `removeTransientWorktree`.
+ */
+export type WorktreeRemover = (projectRoot: string, worktreePath: string) => Promise<void> | void;
 /** Failure codes from {@link openDraftPr}. */
 export type DraftPrErrorCode = 
 /** Patch file does not exist on disk. */
 'E_NOT_FOUND'
-/** Patch file exists but is empty. */
+/** Patch file exists but is empty (or names no files). */
  | 'E_PATCH_EMPTY'
 /** `gh` CLI missing / not authenticated. */
  | 'E_GH_UNAVAILABLE'
-/** Shell-out failure during the live PR cut. */
+/** Shell-out failure during the live PR cut (incl. worktree provisioning). */
  | 'E_DRAFT_PR_FAILED';
 /** Args for {@link openDraftPr}. */
 export interface OpenDraftPrArgs {
@@ -60,12 +102,25 @@ export interface OpenDraftPrArgs {
      * @defaultValue false
      */
     readonly execute?: boolean;
-    /** Working directory for path resolution + git ops. Defaults to {@link process.cwd}. */
+    /**
+     * The INVOKING checkout / project root. Used to (a) resolve {@link diffPath}
+     * and (b) register the ephemeral worktree against — it is NEVER mutated
+     * (T12007). Defaults to {@link process.cwd}.
+     */
     readonly cwd?: string;
     /** Injectable command runner (tests capture the shell-out). Defaults to {@link execFileSync}. */
     readonly run?: CommandRunner;
     /** Injectable timestamp source for the branch suffix (tests pin it). Defaults to now. */
     readonly timestamp?: () => string;
+    /**
+     * Explicit path for the ephemeral isolation worktree (T12007). Defaults to a
+     * unique `os.tmpdir()` directory. Overridable for deterministic tests.
+     */
+    readonly worktreeDir?: string;
+    /** Injectable worktree provisioner (tests avoid a real remote). Defaults to `addTransientWorktree`. */
+    readonly provisionWorktree?: WorktreeProvisioner;
+    /** Injectable worktree remover. Defaults to `removeTransientWorktree`. */
+    readonly removeWorktree?: WorktreeRemover;
 }
 /** Dry-run result — the planned steps, no side effects. */
 export interface DraftPrDryRun {
@@ -74,6 +129,8 @@ export interface DraftPrDryRun {
     readonly branchName: string;
     /** The planned shell steps; the `gh pr create` step includes `--draft`. */
     readonly steps: readonly string[];
+    /** The repo-relative paths the patch touches — the ONLY paths that will be staged. */
+    readonly patchPaths: readonly string[];
 }
 /** Live result — the opened draft PR. */
 export interface DraftPrOk {
@@ -82,6 +139,8 @@ export interface DraftPrOk {
     readonly branchName: string;
     /** The draft PR URL emitted by `gh pr create --draft`. */
     readonly prUrl: string;
+    /** The repo-relative paths the patch touched (the PR's complete file set). */
+    readonly patchPaths: readonly string[];
 }
 /** Failure result. */
 export interface DraftPrFailure {
@@ -101,15 +160,40 @@ export type DraftPrResult = DraftPrDryRun | DraftPrOk | DraftPrFailure;
  * @returns The branch name.
  */
 export declare function draftPrBranchName(scenario: string, ts: string): string;
+/**
+ * Extract the set of repo-relative paths a unified diff touches — the SSoT for
+ * "which paths may be staged" (T12007).
+ *
+ * Parses the `diff --git a/<old> b/<new>` header (the authoritative per-file
+ * boundary in a git-format diff), collecting BOTH the pre-image (`a/`) and
+ * post-image (`b/`) paths so renames stage their old path too and deletions
+ * stage the removed path. `/dev/null` sentinels (pure add / pure delete) are
+ * skipped. Also parses bare `--- ` / `+++ ` headers as a fallback for
+ * non-`diff --git` unified diffs. The result is de-duplicated and stable
+ * ordered by first appearance.
+ *
+ * The egress stages ONLY these paths (`git add -- <paths>`), so the isolated
+ * worktree can never sweep anything the patch did not name.
+ *
+ * @param diffText - The unified-diff text.
+ * @returns The de-duplicated repo-relative paths the diff touches.
+ */
+export declare function parseUnifiedDiffPaths(diffText: string): string[];
 /**
  * Open ONE DRAFT PR carrying a proposed self-improvement fix.
  *
  * DRY-RUN by default ({@link OpenDraftPrArgs.execute} falsey): returns the planned
  * `steps[]` (the `gh pr create` step ALWAYS carries `--draft`) WITHOUT touching
  * git/gh — so the loop is egress-side-effect-free unless `--execute` is threaded
- * through. The live path (`execute: true`) cuts the feature branch, applies the
- * diff, commits, pushes the FEATURE branch (NEVER `main`), and runs
- * `gh pr create --base main --head <branch> --draft`, returning the PR URL.
+ * through.
+ *
+ * The live path (`execute: true`) never mutates the invoking checkout (T12007).
+ * It cuts an EPHEMERAL transient worktree fresh off `origin/main`, applies the
+ * diff there, stages ONLY the paths the patch names (`git add -- <paths>` — NEVER
+ * `git add -A`), commits, pushes the FEATURE branch (NEVER `main`), runs
+ * `gh pr create --base main --head <branch> --draft`, and tears the worktree
+ * down in a `finally`. The orchestrator's untracked/uncommitted files are never
+ * staged, pushed, or deleted.
  *
  * NEVER pushes `main`, NEVER auto-merges, NEVER publishes — the only egress is a
  * draft PR against a feature branch.
@@ -121,7 +205,7 @@ export declare function draftPrBranchName(scenario: string, ts: string): string;
  * ```ts
  * // dry-run (default): no side effects, steps include `--draft`
  * const plan = await openDraftPr({ scenario: 'x', diffPath: 'fix.patch', title, body });
- * // live: cuts branch + opens draft PR
+ * // live: cuts an isolated worktree + opens draft PR (invoking repo untouched)
  * const res = await openDraftPr({ scenario: 'x', diffPath: 'fix.patch', title, body, execute: true });
  * ```
  */

package/dist/selfimprove/draft-pr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"draft-pr.d.ts","sourceRoot":"","sources":["../../src/selfimprove/draft-pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAeH;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAM9E,8CAA8C;AAC9C,MAAM,MAAM,gBAAgB;AAC1B,yCAAyC;AACvC,aAAa;AACf,sCAAsC;GACpC,eAAe;AACjB,4CAA4C;GAC1C,kBAAkB;AACpB,gDAAgD;GAC9C,mBAAmB,CAAC;AAExB,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,iGAAiG;IACjG,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;CACnC;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,yCAAyC;AACzC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,sBAAsB;AACtB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,cAAc,CAAC;AAEvE;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAItE;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CAgF/E"}
+{"version":3,"file":"draft-pr.d.ts","sourceRoot":"","sources":["../../src/selfimprove/draft-pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAkBH;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AAM5F;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAExF;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElG,8CAA8C;AAC9C,MAAM,MAAM,gBAAgB;AAC1B,yCAAyC;AACvC,aAAa;AACf,0DAA0D;GACxD,eAAe;AACjB,4CAA4C;GAC1C,kBAAkB;AACpB,8EAA8E;GAC5E,mBAAmB,CAAC;AAExB,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gBAAgB;IAChB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,iGAAiG;IACjG,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uGAAuG;IACvG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACjD,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sFAAsF;IACtF,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,yCAAyC;AACzC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,sBAAsB;AACtB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,cAAc,CAAC;AAWvE;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAItE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAkChE;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CA6I/E"}