@deksden-com/dd-flow-cli 0.9.0-beta.120 → 0.9.0-beta.122

package/dist/services/hooks.js

@@ -481,8 +481,8 @@ function codexNativeParentId(payload, childId) {
         return null;
     }
 }
-/** ACP is asynchronous evidence. Only an explicitly issued invocation may use
- * it as the receipt that its CLI waits for; this is not a PreToolUse hook. */
+/** Qualified ACP admission binds public commands to an exact issued assignment.
+ * Its provenance is an observation, never a synchronous PreToolUse assertion. */
 export function handleZcodeEvent(context, input) {
     const notification = parseJsonObject(input.stdin || "{}", "zcode ACP notification");
     const params = objectRecord(notification.params), update = objectRecord(params.update);
@@ -494,8 +494,10 @@ export function handleZcodeEvent(context, input) {
         return { ok: true, observed: false, reason: "non_bash_tool" };
     const command = stringValue(rawInput.command) ?? stringValue(rawInput.cmd);
     const parsed = command ? parseLifecycleCommand(command) : { kind: "none" };
-    if (parsed.kind === "none")
+    if (parsed.kind === "none" && !parsed.unresolved)
         return { ok: true, observed: false, reason: "acp_evidence_only" };
+    if (parsed.kind === "none")
+        throw new AppError("lifecycle_shell_syntax_invalid", "Shell participation could not be proven", 1, { reason: parsed.reason, effect: "unknown", recoverable: false });
     const controlled = objectRecord(objectRecord(notification._meta).ddZcode);
     const providerSessionId = stringValue(native.childSessionId) ?? stringValue(controlled.rootProviderSessionId);
     return recordZcodeLifecycle(context, { projectRoot: input.projectRoot, stdin: JSON.stringify({
@@ -557,7 +559,7 @@ function recordZcodeLifecycle(context, input, invocationId, nativePreTool = fals
     const observedProfile = objectRecord(ddZcode.observedProfile);
     const observedCwd = stringValue(hook.cwd) && path.isAbsolute(String(hook.cwd)) ? resolveProjectRoot(String(hook.cwd)) : null;
     let matchKey = lifecycle ? lifecycleMatchKey(lifecycle, expectedRoot) : null;
-    const eventNameForReceipt = invocationId ? "ToolCallObserved" : "PreToolUse";
+    const eventNameForReceipt = nativePreTool ? "PreToolUse" : "ToolCallObserved";
     const persist = (scope) => {
         if (scope)
             matchKey = lifecycleMatchKey(lifecycleFacts(scope.command), expectedRoot, scope);
@@ -583,6 +585,24 @@ function recordZcodeLifecycle(context, input, invocationId, nativePreTool = fals
         identity: { daemonId, rootSessionId: rootProviderSessionId, sessionId: providerSessionId, parentSessionId: parentProviderSessionId ?? null, toolCallId: toolUseId },
         recordReceipt: scope => { persistedResult = persist(scope); return eventKey; }
     });
+    if (receipt.duplicate) {
+        // Keep first admission immutable. A second transport is independently
+        // retained corroboration, never another claim or an invented ACP cwd.
+        const retained = context.db.get("SELECT event_name, match_key, harness, provider_session_id, parent_session_id, daemon_id FROM hook_events WHERE project_id = ? AND event_key = ?", [project.id, receipt.eventKey]);
+        if (retained && retained.event_name !== eventNameForReceipt) {
+            if (retained.harness !== "zcode-acp" || retained.provider_session_id !== providerSessionId || retained.parent_session_id !== parentSessionId || retained.daemon_id !== daemonId) {
+                throw new AppError("hook_event_replay_mismatch", "Corroborating transport has different native ownership", 1, { event_key: receipt.eventKey });
+            }
+            context.db.writeTransaction(() => recordHookEvent(context, { projectId: project.id, protocolId: null, harness: "zcode-acp", providerSessionId, parentSessionId,
+                daemonId, sessionId, agentId: stringValue(hook.agent_id) ?? null, turnId: null, eventName: eventNameForReceipt, toolName: toolName ?? "Bash", status: "corroborating",
+                payload: { ...hook, command, corroborates_event_key: receipt.eventKey, admission_transport: nativePreTool ? "native_pre_tool" : "acp_observation" },
+                eventKey: `${receipt.eventKey}:${eventNameForReceipt}`, matchKey: null, transcriptPath: stringValue(hook.transcript_path) ?? null, cwd: observedCwd }));
+        }
+        else if (retained) {
+            assertHookEventReplay(context, { projectId: project.id, eventKey: receipt.eventKey, harness: "zcode-acp", providerSessionId, parentSessionId, daemonId,
+                sessionId, turnId: null, eventName: eventNameForReceipt, toolName: toolName ?? "Bash", matchKey: retained.match_key, cwd: observedCwd });
+        }
+    }
     const admittedInvocationId = receipt.invocationId ?? invocationId;
     if (admittedInvocationId)
         return { ok: true, observed: !receipt.duplicate, duplicate: receipt.duplicate, event_key: receipt.eventKey, invocation_id: admittedInvocationId };
@@ -706,8 +726,9 @@ function controlledLifecycleCwd(context, projectRoot, facts, providerSessionId,
     if (work) {
         // PROTOCOLIZE provisions the feature checkout after its coordinator
         // Session has launched in the stable project root. Its transition Work
-        // must keep that physical route until the Stage is complete.
-        if (context.db.get("SELECT 1 FROM sqlite_schema WHERE type = 'table' AND name = 'stage_work_memberships'")
+        // must keep that physical route until the Stage is complete. Child Works
+        // share stage membership, not the root coordinator's execution directory.
+        if (work.parent_work_id === null && context.db.get("SELECT 1 FROM sqlite_schema WHERE type = 'table' AND name = 'stage_work_memberships'")
             && context.db.get("SELECT 1 FROM stage_work_memberships WHERE project_id = ? AND run_id = ? AND work_id = ? AND stage IN ('specify','protocolize') LIMIT 1", [project.id, run.id, work.work_id]))
             return projectRoot;
         const merge = context.db.get("SELECT target_workspace FROM merge_requests WHERE executor_work_id = ? AND run_id = ?", [work.work_id, run.id]);
@@ -785,14 +806,24 @@ function handleControlledToolEvent(context, input, event, harness) {
     const auxiliary = continuationCommand(command);
     if (!lifecycle && !auxiliary)
         return { ok: true, observed: false, reason: "event_not_participating" };
+    // Syntax refusal precedes assignment/cwd lookup: an unsupported AST cannot
+    // supply a route or execution authority, including a short public Stage call.
+    const shellRefusal = lifecycle?.analysis.supported === false;
     const issuedRunId = lifecycle && !lifecycle.runId && !lifecycle.workId && !lifecycle.bootstrapStageStart
         ? observedLifecycleInvocation(context, command, daemonId)?.scope.runId : null;
-    const expectedCwd = controlledLifecycleCwd(context, expectedRoot, lifecycle, providerSessionId, auxiliary, issuedRunId);
-    if (observedCwd !== expectedCwd) {
-        throw new AppError(`${errorPrefix}_directory_mismatch`, `${label} ${agy ? "launch route" : "Session directory"} does not match the assigned execution workspace`, 1, { expected: expectedCwd, actual: observedCwd, ...(agy ? { actual_provenance: stringValue(event.cwd_provenance) ?? "unknown" } : {}) });
+    if (!shellRefusal && lifecycle && lifecycle.invocation.operation.startsWith("stage_") && !lifecycle.bootstrapStageStart && !lifecycle.runId && !issuedRunId) {
+        throw new AppError("invocation_assignment_missing", "Short lifecycle call has no unique issued RUN assignment; its workspace cannot be inferred", 1, { effect: "no_effect", recoverable: false });
     }
-    const bootstrapStageStart = lifecycle?.bootstrapStageStart;
-    let matchKey = lifecycle ? lifecycleMatchKey(lifecycle, expectedRoot) : null;
+    const expectedCwd = shellRefusal ? observedCwd : controlledLifecycleCwd(context, expectedRoot, lifecycle, providerSessionId, auxiliary, issuedRunId);
+    const executionRoute = shellRefusal ? undefined : lifecycle?.invocation.expectedCwd;
+    if (executionRoute && resolveProjectRoot(executionRoute) !== expectedCwd) {
+        throw new AppError(`${errorPrefix}_directory_mismatch`, "Literal shell cd route does not match the assigned lifecycle workspace", 1, { expected: expectedCwd, actual: executionRoute, actual_provenance: "shell_literal_route", effect: "no_effect", recoverable: false });
+    }
+    if (!executionRoute && observedCwd !== expectedCwd) {
+        throw new AppError(`${errorPrefix}_directory_mismatch`, `${label} ${agy ? "launch route" : "Session directory"} does not match the assigned execution workspace`, 1, { expected: expectedCwd, actual: observedCwd, effect: "no_effect", recoverable: false, ...(agy ? { actual_provenance: stringValue(event.cwd_provenance) ?? "unknown" } : {}) });
+    }
+    const bootstrapStageStart = !shellRefusal && lifecycle?.bootstrapStageStart;
+    let matchKey = lifecycle && !shellRefusal ? lifecycleMatchKey(lifecycle, expectedRoot) : null;
     if (bootstrapStageStart)
         registerProject(context, { root: expectedRoot });
     const project = requireProjectByRoot(context, expectedRoot);
@@ -810,6 +841,7 @@ function handleControlledToolEvent(context, input, event, harness) {
         const payload = {
             session_id: providerSessionId, agent_id: agentId, cwd: observedCwd, tool_name: toolName, tool_input: rawInput, command,
             ...(agy ? { cwd_provenance: stringValue(event.cwd_provenance) ?? "unknown" } : {}),
+            ...(executionRoute ? { lifecycle_execution_cwd: expectedCwd, lifecycle_execution_cwd_provenance: "literal_cd_intent_requires_cli_confirmation" } : {}),
             provider: stringValue(profile.provider), model: stringValue(profile.model), reasoning: stringValue(droid ? profile.reasoning : profile.variant),
             mode: stringValue(droid ? profile.mode : profile.agent), agent_type: stringValue(droid ? profile.agent_type : profile.agent)
         };
@@ -822,10 +854,10 @@ function handleControlledToolEvent(context, input, event, harness) {
         return inserted;
     };
     const result = (inserted) => ({ ok: true, observed: inserted, duplicate: !inserted, event_key: baseKey, phase, harness, session: nativeSessionIdentity(harness, providerSessionId), ...(nativeParentId ? { parent_session: nativeSessionIdentity(harness, nativeParentId) } : {}), daemon_id: daemonId });
-    if (agy && lifecycle) {
+    if ((agy || shellRefusal) && lifecycle) {
         let inserted = false;
         const receipt = observeLifecycleInvocation(context, {
-            command, harness, projectId: project.id, identity: { daemonId, rootSessionId: nativeParentId ?? providerSessionId, sessionId: providerSessionId, parentSessionId: nativeParentId ?? null, toolCallId: toolCallId },
+            command, harness, projectId: project.id, ...(!shellRefusal && (agy || executionRoute) ? { executionCwd: expectedCwd } : {}), identity: { daemonId, rootSessionId: nativeParentId ?? providerSessionId, sessionId: providerSessionId, parentSessionId: nativeParentId ?? null, toolCallId: toolCallId },
             recordReceipt: scope => { inserted = persist(scope); return baseKey; }
         });
         return { ...result(inserted), ...(receipt.invocationId ? { invocation_id: receipt.invocationId } : {}) };
@@ -908,50 +940,19 @@ export function isolatedDdFlowHomeFromHookStdin(stdin) {
  */
 export function commandWithHookEvent(command, eventKey) {
     const analysis = parseLifecycleCommand(command);
-    if (analysis.kind !== "standalone")
+    if (analysis.kind === "none" || analysis.supported === false)
         return command;
     if (commandHasOption(analysis.invocation, "hook-event-id")) {
         return command;
     }
     const option = `--hook-event-id '${eventKey.replaceAll("'", "'\\''")}'`;
     if (analysis.invocation.rewriteSafe) {
-        const index = shellSuffixOffset(command);
-        return `${command.slice(0, index).trimEnd()} ${option} ${command.slice(index)}`.trimEnd();
-    }
-    if (!analysis.invocation.wrapped && analysis.invocation.heredoc && allowsStdinLifecycleCompound(lifecycleFacts(command))) {
-        const index = firstHeredoc(command);
-        if (index >= 0)
-            return `${command.slice(0, index).trimEnd()} ${option} ${command.slice(index)}`;
+        const index = analysis.invocation.sourceRange?.end ?? shellSuffixOffset(command);
+        const suffix = command.slice(index);
+        return `${command.slice(0, index)} ${option}${suffix ? /^\s/.test(suffix) ? suffix : ` ${suffix}` : ""}`;
     }
     return command;
 }
-function firstHeredoc(command) {
-    let quoteState = null;
-    let escaped = false;
-    for (let index = 0; index < command.length - 1; index += 1) {
-        const char = command[index];
-        if (escaped) {
-            escaped = false;
-            continue;
-        }
-        if (char === "\\" && quoteState !== "'") {
-            escaped = true;
-            continue;
-        }
-        if (quoteState) {
-            if (char === quoteState)
-                quoteState = null;
-            continue;
-        }
-        if (char === "'" || char === '"') {
-            quoteState = char;
-            continue;
-        }
-        if (char === "<" && command[index + 1] === "<" && command[index + 2] !== "<")
-            return index;
-    }
-    return -1;
-}
 /**
  * Recognise the small shell surface used by generated dd-flow lifecycle
  * commands. This intentionally does not evaluate Bash: ambiguous composition
@@ -967,6 +968,8 @@ export function analyzeLifecycleShellCommand(command, includeSessionRegister = f
 }
 function lifecycleFacts(command) {
     const analysis = parseLifecycleCommand(command);
+    if (analysis.kind === "none" && analysis.unresolved)
+        throw new AppError("lifecycle_shell_syntax_invalid", "Shell participation could not be proven; use a literal issued command", 1, { phase: "prepare", effect: "no_effect", recoverable: true, disposition: "pre_cli_shell_refusal", reason: analysis.reason });
     if (analysis.kind === "none")
         return null;
     const invocation = analysis.invocation;
@@ -993,17 +996,6 @@ function lifecycleFacts(command) {
         contextSha256: commandOption(invocation, "context-sha256")
     };
 }
-// Worker completion and the two HITL commands intentionally take their
-// payload from stdin. Their generated pipe/heredoc is one lifecycle command,
-// not a second authority. Everything else remains standalone-only.
-function allowsStdinLifecycleCompound(facts) {
-    const operation = facts.invocation.operation;
-    return facts.analysis.kind === "standalone" && facts.invocation.heredoc && !facts.invocation.wrapped
-        && ((operation === "work_finish" && commandHasOption(facts.invocation, "result-stdin"))
-            || (operation === "stage_start" && commandHasOption(facts.invocation, "intake-stdin"))
-            || (operation === "stage_pause" && commandHasOption(facts.invocation, "question-stdin"))
-            || (operation === "stage_resume" && commandHasOption(facts.invocation, "answer-stdin")));
-}
 function lifecycleMatchKey(facts, projectRoot, scope) {
     // Observe the actual argument without validating it. A mistyped project
     // must not leave a receipt matching a later, corrected non-rewriting call.

package/dist/services/lifecycle-command.js

@@ -1,383 +1 @@
-import path from "node:path";
-import { parse, quote } from "shell-quote";
-import { lifecycleOperationForArgv } from "./lifecycle-contract.js";
-/** Native hooks and the lightweight ingress must recognize the same shell. */
-export function lifecycleCommandFromPayload(payload) {
-    const input = payload.tool_input && typeof payload.tool_input === "object" ? payload.tool_input : {};
-    const command = [payload.command, input.command, input.cmd].find(value => typeof value === "string" && value.length > 0);
-    return typeof command === "string" ? unwrapShellCommand(command) : undefined;
-}
-const controlOperators = new Set(["&&", "||", ";", "|", "|&", "&", "(", ")", "<(", ">("]);
-const redirectionOperators = new Set(["<", ">", ">>", ">|", "<&", ">&", "<<<"]);
-/** Parse the deliberately small direct-command surface accepted by lifecycle hooks. */
-export function parseLifecycleCommand(command) {
-    return parseLifecycleCommandInner(command, false);
-}
-/** Exact diagnostic routes; these deliberately confer no lifecycle authority. */
-export function continuationCommand(command) {
-    let entries;
-    try {
-        entries = parse(command, name => `$${name}`);
-    }
-    catch {
-        return null;
-    }
-    if (!entries.every(entry => typeof entry === "string"))
-        return null;
-    const words = entries;
-    const start = words.findIndex(word => ["stage", "work"].includes(word));
-    if (start < 1)
-        return null;
-    const launcher = words.slice(0, start);
-    while (launcher[0] && /^[A-Za-z_][A-Za-z0-9_]*=/.test(launcher[0]))
-        launcher.shift();
-    const direct = launcher.length === 1 && (path.basename(launcher[0]) === "dd-flow" || launcher[0] === "$DD_FLOW_BIN");
-    const node = launcher.length === 2 && path.basename(launcher[0]) === "node" && (path.basename(launcher[1]) === "cli.js" || launcher[1] === "$DD_FLOW_BIN");
-    if (!direct && !node)
-        return null;
-    const args = parseCommandArgs(words.slice(start));
-    const route = args.positional.slice(0, 3).join(" ");
-    const operation = route === "work repair add" ? "work_repair_add" : args.positional[0] === "stage" && args.positional[1] === "block" ? "stage_block" : null;
-    return operation ? { operation, args } : null;
-}
-/** Preserve the historical Desktop contract: execute the payload, not its one-command shell wrapper. */
-export function unwrapShellCommand(command) {
-    let entries;
-    try {
-        entries = parse(command, (name) => `$${name}`);
-    }
-    catch {
-        return command;
-    }
-    if (!entries.every((entry) => typeof entry === "string"))
-        return command;
-    const words = entries;
-    let index = 0;
-    while (index < words.length && assignment(words[index]))
-        index += 1;
-    const executable = path.basename(words[index] ?? "");
-    if (!new Set(["bash", "sh", "zsh"]).has(executable))
-        return command;
-    if (!new Set(["-c", "-lc", "-cl"]).has(words[index + 1] ?? "") || words.length !== index + 3)
-        return command;
-    return words[index + 2] ?? command;
-}
-function parseLifecycleCommandInner(command, wrapped) {
-    const heredoc = stripHeredocBodies(command);
-    let entries;
-    try {
-        entries = parse(withoutFileDescriptors(heredoc.command), (name) => `$${name}`);
-    }
-    catch {
-        // A command that cannot be tokenized cannot create a trusted claim. The
-        // real lifecycle CLI will consequently fail its binding requirement.
-        return { kind: "none" };
-    }
-    const { segments, composed } = commandSegments(entries);
-    const found = [];
-    const exportedEnv = {};
-    for (const segment of segments) {
-        Object.assign(exportedEnv, exportedAssignments(segment));
-        const direct = invocationFromSegment(segment, heredoc.present, wrapped, exportedEnv);
-        if (direct) {
-            found.push({ invocation: direct, nestedCompound: segment.dynamic });
-            continue;
-        }
-        const nested = wrappedInvocationFromSegment(segment);
-        if (nested && nested.kind !== "none")
-            found.push({ invocation: { ...nested.invocation, heredoc: nested.invocation.heredoc || heredoc.present, rewriteSafe: false, wrapped: true }, nestedCompound: nested.kind === "compound" });
-    }
-    if (!found.length)
-        return { kind: "none" };
-    const first = found[0];
-    if (found.length !== 1 || composed || first.nestedCompound || (heredoc.present && !heredoc.safe)) {
-        return {
-            kind: "compound",
-            invocation: { ...first.invocation, rewriteSafe: false },
-            reason: found.length !== 1 ? "multiple_lifecycle_invocations" : first.nestedCompound ? "nested_compound_invocation" : heredoc.present && !heredoc.safe ? "unsafe_heredoc" : "shell_composition"
-        };
-    }
-    return { kind: "standalone", invocation: first.invocation };
-}
-function commandSegments(entries) {
-    const segments = [];
-    let words = [];
-    let dynamic = false;
-    let composed = false;
-    const flush = () => {
-        if (words.length || dynamic)
-            segments.push({ words, dynamic });
-        words = [];
-        dynamic = false;
-    };
-    for (let index = 0; index < entries.length; index += 1) {
-        const entry = entries[index];
-        if (typeof entry === "string") {
-            words.push(entry);
-            continue;
-        }
-        if ("comment" in entry)
-            break;
-        if (!("op" in entry) || typeof entry.op !== "string") {
-            dynamic = true;
-            continue;
-        }
-        const operator = entry.op;
-        if (operator === "glob") {
-            dynamic = true;
-            words.push("pattern" in entry && typeof entry.pattern === "string" ? entry.pattern : "");
-            continue;
-        }
-        if (controlOperators.has(operator)) {
-            composed = true;
-            flush();
-            continue;
-        }
-        if (redirectionOperators.has(operator)) {
-            const target = entries[index + 1];
-            if (typeof target === "string" || (target && typeof target === "object" && "op" in target && target.op === "glob"))
-                index += 1;
-            continue;
-        }
-        dynamic = true;
-    }
-    flush();
-    return { segments, composed };
-}
-function invocationFromSegment(segment, heredoc, wrapped, inheritedEnv) {
-    let index = 0;
-    const env = { ...inheritedEnv };
-    while (index < segment.words.length && assignment(segment.words[index])) {
-        addAssignment(env, segment.words[index]);
-        index += 1;
-    }
-    if (path.basename(segment.words[index] ?? "") === "env") {
-        index += 1;
-        if (segment.words[index]?.startsWith("-"))
-            return null;
-        while (index < segment.words.length && assignment(segment.words[index])) {
-            addAssignment(env, segment.words[index]);
-            index += 1;
-        }
-    }
-    let executable = segment.words[index];
-    let nodeLauncher = false;
-    let launcher;
-    if (executable && path.basename(executable) === "node"
-        && (path.basename(segment.words[index + 1] ?? "") === "cli.js" || segment.words[index + 1] === "$DD_FLOW_BIN")) {
-        launcher = executable;
-        executable = segment.words[++index];
-        nodeLauncher = true;
-    }
-    if (!executable || path.basename(executable) !== "dd-flow" && executable !== "$DD_FLOW_BIN" && !(nodeLauncher && path.basename(executable) === "cli.js"))
-        return null;
-    const argv = segment.words.slice(index + 1);
-    const operation = lifecycleOperation(argv);
-    if (!operation)
-        return null;
-    return {
-        operation,
-        executable,
-        ...(launcher ? { launcher } : {}),
-        argv,
-        env,
-        args: parseCommandArgs(argv.slice(operation === "recovery_accept" ? 3 : 2)),
-        command: quote(segment.words),
-        rewriteSafe: !heredoc && !wrapped && !segment.dynamic,
-        wrapped,
-        heredoc
-    };
-}
-function exportedAssignments(segment) {
-    const result = {};
-    if (segment.words[0] !== "export")
-        return result;
-    for (const word of segment.words.slice(1)) {
-        if (!assignment(word))
-            return {};
-        addAssignment(result, word);
-    }
-    return result;
-}
-function wrappedInvocationFromSegment(segment) {
-    let index = 0;
-    while (index < segment.words.length && assignment(segment.words[index]))
-        index += 1;
-    const executable = path.basename(segment.words[index] ?? "");
-    if (!new Set(["bash", "sh", "zsh"]).has(executable))
-        return null;
-    const flag = segment.words[index + 1];
-    const payload = segment.words[index + 2];
-    if (!payload || !new Set(["-c", "-lc", "-cl"]).has(flag ?? "") || segment.words.length !== index + 3)
-        return null;
-    return parseLifecycleCommandInner(payload, true);
-}
-function lifecycleOperation(argv) {
-    return lifecycleOperationForArgv(argv);
-}
-export function parseCommandArgs(argv) {
-    const positional = [];
-    const options = new Map();
-    for (let index = 0; index < argv.length; index += 1) {
-        const value = argv[index];
-        if (value?.startsWith("--")) {
-            const equals = value.indexOf("=");
-            if (equals > 2) {
-                const key = value.slice(2, equals);
-                options.set(key, [...(options.get(key) ?? []), value.slice(equals + 1)]);
-                continue;
-            }
-            const key = value.slice(2);
-            const next = argv[index + 1];
-            const optionValue = !next || next.startsWith("--") ? "__dd_flow_flag__" : next;
-            options.set(key, [...(options.get(key) ?? []), optionValue]);
-            if (optionValue !== "__dd_flow_flag__")
-                index += 1;
-        }
-        else if (value)
-            positional.push(value);
-    }
-    return { positional, options };
-}
-export function commandOption(invocation, name) {
-    const values = invocation.args.options.get(name);
-    const value = values?.[values.length - 1];
-    return value === "__dd_flow_flag__" ? undefined : value;
-}
-export function commandHasOption(invocation, name) {
-    return invocation.args.options.has(name);
-}
-export function commandPosition(invocation, index) {
-    return invocation.args.positional[index];
-}
-function assignment(word) {
-    return /^[A-Za-z_][A-Za-z0-9_]*=/.test(word);
-}
-/** Source offsets matter: shell-quote loses the difference between `2>&1`
- * and the literal argument `2 >&1`. Only inspect unquoted shell syntax. */
-function shellSyntaxOffsets(command) {
-    const offsets = [];
-    let quoted = null, escaped = false;
-    for (let i = 0; i < command.length; i++) {
-        const char = command[i];
-        if (escaped) {
-            escaped = false;
-            continue;
-        }
-        if (char === "\\" && quoted !== "'") {
-            escaped = true;
-            continue;
-        }
-        if (quoted) {
-            if (char === quoted)
-                quoted = null;
-            continue;
-        }
-        if (char === "'" || char === '"') {
-            quoted = char;
-            continue;
-        }
-        if (char === "#" && (i === 0 || /\s/.test(command[i - 1]))) {
-            offsets.push(i);
-            break;
-        }
-        if (char === "<" || char === ">")
-            offsets.push(i);
-    }
-    return offsets;
-}
-function descriptorStart(command, index) {
-    let start = index;
-    while (start > 0 && /[0-9]/.test(command[start - 1]))
-        start--;
-    return start === 0 || /[\s;&|]/.test(command[start - 1]) ? start : index;
-}
-export function shellSuffixOffset(command) {
-    const offset = shellSyntaxOffsets(command)[0];
-    return offset === undefined ? command.length : descriptorStart(command, offset);
-}
-function withoutFileDescriptors(command) {
-    for (const index of shellSyntaxOffsets(command).reverse()) {
-        if (command[index] === "#")
-            continue;
-        const start = descriptorStart(command, index);
-        command = command.slice(0, start) + command.slice(index);
-    }
-    return command;
-}
-function addAssignment(env, word) {
-    const separator = word.indexOf("=");
-    env[word.slice(0, separator)] = word.slice(separator + 1);
-}
-function stripHeredocBodies(command) {
-    const lines = command.split(/\r?\n/);
-    const output = [];
-    const pending = [];
-    let active;
-    let present = false;
-    let count = 0, quoted = true;
-    for (const line of lines) {
-        if (active) {
-            const candidate = active.stripTabs ? line.replace(/^\t+/, "") : line;
-            if (candidate === active.delimiter)
-                active = pending.shift();
-            continue;
-        }
-        if (line.trim())
-            output.push(line);
-        const found = heredocDelimiters(line);
-        count += found.length;
-        quoted &&= found.every(item => item.quoted);
-        if (found.length) {
-            present = true;
-            active = found[0];
-            pending.push(...found.slice(1));
-        }
-    }
-    return { command: output.join(" ; "), present, safe: count === 1 && quoted && !active && pending.length === 0 };
-}
-function heredocDelimiters(line) {
-    const result = [];
-    let quoteState = null;
-    let escaped = false;
-    for (let index = 0; index < line.length - 1; index += 1) {
-        const char = line[index];
-        if (escaped) {
-            escaped = false;
-            continue;
-        }
-        if (char === "\\" && quoteState !== "'") {
-            escaped = true;
-            continue;
-        }
-        if (quoteState) {
-            if (char === quoteState)
-                quoteState = null;
-            continue;
-        }
-        if (char === "'" || char === '"') {
-            quoteState = char;
-            continue;
-        }
-        if (char !== "<" || line[index + 1] !== "<" || line[index + 2] === "<")
-            continue;
-        index += 2;
-        const stripTabs = line[index] === "-";
-        if (stripTabs)
-            index += 1;
-        while (/\s/.test(line[index] ?? ""))
-            index += 1;
-        const delimiterQuote = line[index] === "'" || line[index] === '"' ? line[index++] : null;
-        const start = index;
-        if (delimiterQuote)
-            while (index < line.length && line[index] !== delimiterQuote)
-                index += 1;
-        else
-            while (index < line.length && !/[\s;&|<>]/.test(line[index]))
-                index += 1;
-        const delimiter = line.slice(start, index);
-        if (delimiter)
-            result.push({ delimiter, stripTabs, quoted: delimiterQuote !== null });
-    }
-    return result;
-}
+export { lifecycleCommandFromPayload, parseLifecycleCommand, continuationCommand, unwrapShellCommand, parseCommandArgs, commandOption, commandHasOption, commandPosition, shellSuffixOffset } from "../harness-runtime/lib/lifecycle-command.mjs";

package/dist/services/lifecycle-contract.js

@@ -1,30 +1 @@
-export const lifecycleRoutes = {
-    "session register": "session_register",
-    "stage start": "stage_start",
-    "stage finish": "stage_finish",
-    "stage pause": "stage_pause",
-    "stage resume": "stage_resume",
-    "work start": "work_start",
-    "work finish": "work_finish",
-    "work fail": "work_fail",
-    "merge apply": "merge_apply",
-    "merge repair": "merge_repair",
-    "run recovery accept": "recovery_accept"
-};
-export const lifecycleInternalOptions = ["invocation-id", "hook-event-id"];
-export function lifecycleOperationForArgv(argv) {
-    if (argv.some(arg => arg === "--help" || arg === "-h"))
-        return null;
-    for (const [route, operation] of Object.entries(lifecycleRoutes)) {
-        const parts = route.split(" ");
-        if (parts.every((part, index) => argv[index] === part))
-            return operation;
-    }
-    return null;
-}
-export function lifecycleRouteForOperation(operation) {
-    const entry = Object.entries(lifecycleRoutes).find(([, value]) => value === operation);
-    if (!entry)
-        throw new Error(`Unknown lifecycle operation: ${operation}`);
-    return entry[0];
-}
+export { lifecycleRoutes, lifecycleInternalOptions, lifecycleOperationForArgv, lifecycleRouteForOperation } from "../harness-runtime/lib/lifecycle-contract.mjs";