@devflow-tools/delivery-line 0.18.8

package/dist/adapters/integration.js

@@ -0,0 +1,84 @@
+import { DeliveryLineError } from '../domain/types.js';
+import { execFileSync } from 'node:child_process';
+export function assertIntegrationTarget(input) {
+    if (!input.integrationRef || input.integrationRef === input.targetRef || !input.candidateRevision)
+        throw new DeliveryLineError('TARGET_REF_WRITE_FORBIDDEN', 'integration must target a candidate ref');
+}
+export function freezeIntegration(input) {
+    assertIntegrationTarget(input);
+    if (!input.baseRef || input.baseRef === input.integrationRef || input.baseRef === input.targetRef)
+        throw new DeliveryLineError('TARGET_REF_WRITE_FORBIDDEN', 'base and protected refs must remain distinct');
+    return { ...input, frozenAt: Date.now() };
+}
+export class GitIntegrationAdapter {
+    async resolveRevision(input) {
+        try {
+            return execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', `${input.revision}^{commit}`], { encoding: 'utf8' }).trim();
+        }
+        catch {
+            throw new DeliveryLineError('ARTIFACT_HASH_MISMATCH', 'base revision is not a valid commit');
+        }
+    }
+    async integrate(input) {
+        assertIntegrationTarget(input);
+        let candidate;
+        try {
+            candidate = execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', input.candidateRevision], { encoding: 'utf8' }).trim();
+        }
+        catch {
+            throw new DeliveryLineError('ARTIFACT_HASH_MISMATCH', 'candidate revision is not a valid commit');
+        }
+        let current;
+        try {
+            current = execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', input.integrationRef], { encoding: 'utf8' }).trim();
+        }
+        catch {
+            current = undefined;
+        }
+        let expectedCurrent;
+        if (input.expectedCurrentRevision !== null) {
+            try {
+                expectedCurrent = execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', input.expectedCurrentRevision], { encoding: 'utf8' }).trim();
+            }
+            catch {
+                throw new DeliveryLineError('STATE_VERSION_CONFLICT', 'expected current integration revision is not valid');
+            }
+        }
+        if (current !== expectedCurrent)
+            throw new DeliveryLineError('STATE_VERSION_CONFLICT', 'integration ref state differs from expected current revision');
+        let expectedBase;
+        try {
+            expectedBase = execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', input.expectedBaseRevision], { encoding: 'utf8' }).trim();
+        }
+        catch {
+            throw new DeliveryLineError('STATE_VERSION_CONFLICT', 'expected integration base revision is not valid');
+        }
+        try {
+            execFileSync('git', ['-C', input.repositoryPath, 'merge-base', '--is-ancestor', expectedBase, candidate], { encoding: 'utf8' });
+        }
+        catch {
+            throw new DeliveryLineError('STATE_VERSION_CONFLICT', 'candidate revision is not a descendant of the expected integration base');
+        }
+        if (current !== candidate) {
+            try {
+                const args = ['-C', input.repositoryPath, 'update-ref', input.integrationRef, candidate, expectedCurrent ?? ''];
+                execFileSync('git', args, { encoding: 'utf8' });
+            }
+            catch {
+                throw new DeliveryLineError('STATE_VERSION_CONFLICT', 'integration ref advanced during candidate publish');
+            }
+        }
+        return { candidateRevision: candidate };
+    }
+    async inspect(input) {
+        try {
+            const current = execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', `${input.integrationRef}^{commit}`], { encoding: 'utf8' }).trim();
+            const candidate = execFileSync('git', ['-C', input.repositoryPath, 'rev-parse', '--verify', `${input.candidateRevision}^{commit}`], { encoding: 'utf8' }).trim();
+            return current === candidate ? { candidateRevision: candidate } : null;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=integration.js.map

package/dist/adapters/integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.js","sourceRoot":"","sources":["../../src/adapters/integration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,EAAE,yCAAyC,CAAC,CAAC;AAC1M,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAA8C;IAC9E,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,EAAE,8CAA8C,CAAC,CAAC;IAC7M,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,eAAe,CAAC,KAAmD;QACvE,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,QAAQ,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QACrJ,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,qCAAqC,CAAC,CAAC;QAAC,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAsD;QACpE,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QACrJ,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,0CAA0C,CAAC,CAAC;QAAC,CAAC;QAC5G,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YAAC,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,SAAS,CAAC;QAAC,CAAC;QAC/K,IAAI,eAAmC,CAAC;QACxC,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC;gBAAC,eAAe,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,uBAAuB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;YACjK,MAAM,CAAC;gBAAC,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,oDAAoD,CAAC,CAAC;YAAC,CAAC;QACxH,CAAC;QACD,IAAI,OAAO,KAAK,eAAe;YAAE,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,8DAA8D,CAAC,CAAC;QACvJ,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YAAC,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAC3J,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,iDAAiD,CAAC,CAAC;QAAC,CAAC;QACnH,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QACxI,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,yEAAyE,CAAC,CAAC;QAAC,CAAC;QAC3I,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;gBAChH,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,mDAAmD,CAAC,CAAC;YAAC,CAAC;QACzH,CAAC;QACD,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAoF;QAChG,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,cAAc,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5J,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,iBAAiB,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjK,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/adapters/review.d.ts

@@ -0,0 +1,12 @@
+import { type ReviewReceipt } from '../domain/types.js';
+import type { ReviewPort } from '../ports/index.js';
+export declare function assertReviewPasses(receipts: ReviewReceipt[], artifactHash: string): void;
+export declare class StaticReviewAdapter implements ReviewPort {
+    private readonly receipts;
+    constructor(receipts: ReviewReceipt[]);
+    review(input: unknown): Promise<ReviewReceipt>;
+}
+export declare class UnavailableReviewAdapter implements ReviewPort {
+    review(_input: unknown): Promise<ReviewReceipt>;
+}
+//# sourceMappingURL=review.d.ts.map

package/dist/adapters/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/adapters/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAOxF;AAED,qBAAa,mBAAoB,YAAW,UAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa,EAAE;IAChD,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;CAUrD;AAED,qBAAa,wBAAyB,YAAW,UAAU;IACnD,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;CACtD"}

package/dist/adapters/review.js

@@ -0,0 +1,33 @@
+import { DeliveryLineError } from '../domain/types.js';
+export function assertReviewPasses(receipts, artifactHash) {
+    for (const kind of ['bugs', 'security', 'compliance']) {
+        const receipt = receipts.find(item => item.kind === kind && item.artifactHash === artifactHash);
+        if (!receipt || !receipt.passed || receipt.findings.some(finding => finding.severity === 'blocker' || finding.severity === 'major')) {
+            throw new DeliveryLineError('REVIEW_RECEIPT_MISSING', `review gate failed: ${kind}`);
+        }
+    }
+}
+export class StaticReviewAdapter {
+    receipts;
+    constructor(receipts) {
+        this.receipts = receipts;
+    }
+    async review(input) {
+        const request = input;
+        const kind = request.kind;
+        const receipt = this.receipts.find(item => item.kind === kind);
+        if (!receipt)
+            throw new DeliveryLineError('MISSING_PREREQUISITE', `review receipt missing: ${String(kind)}`);
+        if (request.artifactHash && receipt.artifactHash !== request.artifactHash)
+            throw new DeliveryLineError('ARTIFACT_HASH_MISMATCH', `review receipt does not match artifact: ${String(kind)}`);
+        if (!receipt.id || !receipt.createdAt)
+            throw new DeliveryLineError('MISSING_PREREQUISITE', `review receipt metadata missing: ${String(kind)}`);
+        if (receipt.findings.some(finding => !finding.ruleVersion || finding.evidenceRefs.some(ref => !ref)))
+            throw new DeliveryLineError('MISSING_PREREQUISITE', `review finding evidence missing: ${String(kind)}`);
+        return structuredClone(receipt);
+    }
+}
+export class UnavailableReviewAdapter {
+    async review(_input) { throw new DeliveryLineError('MISSING_PREREQUISITE', 'review adapter is unavailable in this environment'); }
+}
+//# sourceMappingURL=review.js.map

package/dist/adapters/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/adapters/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAsB,MAAM,oBAAoB,CAAC;AAG3E,MAAM,UAAU,kBAAkB,CAAC,QAAyB,EAAE,YAAoB;IAChF,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAU,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;YACpI,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAC1D,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,OAAO,GAAG,KAAgE,CAAC;QACjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,2BAA2B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7G,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;YAAE,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,2CAA2C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5L,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,oCAAoC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/I,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,oCAAoC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9M,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,MAAM,CAAC,MAAe,IAA4B,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,mDAAmD,CAAC,CAAC,CAAC,CAAC;CACpK"}

package/dist/adapters/verification.d.ts

@@ -0,0 +1,25 @@
+import { type VerificationReceipt } from '../domain/types.js';
+export interface VerificationCommand {
+    command: string;
+    args: string[];
+    timeoutMs?: number;
+}
+export interface VerificationInput {
+    taskId?: string;
+    projectRoot: string;
+    commit: string;
+    commands: VerificationCommand[];
+    lockfileHash?: string;
+    runtime?: string;
+    toolVersion?: string;
+    environment?: string;
+}
+export declare class VerificationAdapter {
+    verifyRevision(input: Omit<VerificationInput, 'projectRoot'> & {
+        repositoryPath: string;
+        revision: string;
+    }): Promise<VerificationReceipt>;
+    verify(input: VerificationInput): Promise<VerificationReceipt>;
+    private run;
+}
+//# sourceMappingURL=verification.d.ts.map

package/dist/adapters/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/adapters/verification.ts"],"names":[],"mappings":"AAKA,OAAO,EAAqB,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEjF,MAAM,WAAW,mBAAmB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5F,MAAM,WAAW,iBAAiB;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAEjN,qBAAa,mBAAmB;IACxB,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,GAAG;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmB1I,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAWpE,OAAO,CAAC,GAAG;CAWZ"}

package/dist/adapters/verification.js

@@ -0,0 +1,57 @@
+import { createHash } from 'node:crypto';
+import { execFileSync, spawn } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { DeliveryLineError } from '../domain/types.js';
+export class VerificationAdapter {
+    async verifyRevision(input) {
+        const root = mkdtempSync(join(tmpdir(), 'delivery-revision-verification-'));
+        const worktreePath = join(root, 'worktree');
+        let registered = false;
+        try {
+            execFileSync('git', ['-C', input.repositoryPath, 'worktree', 'add', '--detach', worktreePath, input.revision], { stdio: 'ignore' });
+            registered = true;
+            return await this.verify({ ...input, projectRoot: worktreePath });
+        }
+        catch (error) {
+            if (error instanceof DeliveryLineError)
+                throw error;
+            throw new DeliveryLineError('MISSING_PREREQUISITE', 'integration revision verification worktree could not be created');
+        }
+        finally {
+            if (registered) {
+                try {
+                    execFileSync('git', ['-C', input.repositoryPath, 'worktree', 'remove', '--force', worktreePath], { stdio: 'ignore' });
+                }
+                catch { /* cleanup is retried by git worktree prune */ }
+            }
+            rmSync(root, { recursive: true, force: true });
+        }
+    }
+    async verify(input) {
+        if (!input.commands.length)
+            throw new DeliveryLineError('MISSING_PREREQUISITE', 'verification commands are required');
+        const results = [];
+        for (const command of input.commands) {
+            if (!command.command.trim() || command.command.includes('\0') || command.args.some(arg => arg.includes('\0')))
+                throw new DeliveryLineError('MISSING_PREREQUISITE', 'invalid verification command');
+            const result = await this.run(input.projectRoot, command);
+            results.push({ command: command.command, args: [...command.args], exitCode: result.exitCode, outputHash: result.outputHash });
+        }
+        return { id: `verification:${input.taskId ?? 'plan'}:${input.commit}`, taskId: input.taskId, commit: input.commit, lockfileHash: input.lockfileHash ?? 'unknown', runtime: input.runtime ?? process.version, toolVersion: input.toolVersion ?? 'delivery-line', environment: input.environment ?? process.env.NODE_ENV ?? 'unknown', commands: results, passed: results.every(result => result.exitCode === 0), createdAt: Date.now() };
+    }
+    run(cwd, command) {
+        return new Promise(resolve => {
+            const hash = createHash('sha256');
+            const child = spawn(command.command, command.args, { cwd, shell: false, stdio: ['ignore', 'pipe', 'pipe'] });
+            child.stdout.on('data', chunk => hash.update(chunk));
+            child.stderr.on('data', chunk => hash.update(chunk));
+            const timer = setTimeout(() => child.kill('SIGTERM'), Math.min(Math.max(command.timeoutMs ?? 120_000, 100), 600_000));
+            timer.unref();
+            child.on('error', () => { clearTimeout(timer); resolve({ exitCode: -1, outputHash: hash.digest('hex') }); });
+            child.on('close', code => { clearTimeout(timer); resolve({ exitCode: code ?? -1, outputHash: hash.digest('hex') }); });
+        });
+    }
+}
+//# sourceMappingURL=verification.js.map

package/dist/adapters/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/adapters/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAA4B,MAAM,oBAAoB,CAAC;AAKjF,MAAM,OAAO,mBAAmB;IAC9B,KAAK,CAAC,cAAc,CAAC,KAA4F;QAC/G,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpI,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,iEAAiE,CAAC,CAAC;QACzH,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;YACzL,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAwB;QACnC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;QACtH,MAAM,OAAO,GAAoC,EAAE,CAAC;QACpD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC;YACnM,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAChI,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,gBAAgB,KAAK,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,eAAe,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1a,CAAC;IAEO,GAAG,CAAC,GAAW,EAAE,OAA4B;QACnD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7G,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACtH,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/adapters/workflow-execution.d.ts

@@ -0,0 +1,130 @@
+import type { DeliveryTask, TaskEnvelope } from '../domain/types.js';
+import type { ExecutionPort, ExecutionResult } from '../ports/index.js';
+import { type WorkerHandoff } from '@devflow-tools/workflow-engine';
+import type { HostAdapter } from '@devflow-tools/sdk';
+export interface ManagedWorktree {
+    path: string;
+    baseRevision: string;
+}
+export interface WorkerRuntime {
+    createWorktree(input: {
+        caseId: string;
+        taskId: string;
+        baseRevision: string;
+    }): Promise<ManagedWorktree>;
+    enqueueAndMerge(input: {
+        task: DeliveryTask;
+        projectRoot: string;
+        worktreePath: string;
+        baseRevision: string;
+        verification: unknown;
+    }): Promise<{
+        state: 'merged' | 'conflict';
+        mergeCommit?: string;
+        reason?: string;
+    }>;
+}
+export interface SerializedWorkerMergeQueueLike {
+    enqueueAndMerge(input: {
+        workerId: string;
+        projectRoot: string;
+        baseRevision: string;
+        verification: unknown;
+        message: string;
+    }): Promise<{
+        state: 'merged' | 'conflict';
+        mergeCommit?: string;
+        reason?: string;
+    }>;
+}
+export declare class SerializedQueueRuntime implements WorkerRuntime {
+    private readonly queue;
+    private readonly create;
+    constructor(queue: SerializedWorkerMergeQueueLike, create: WorkerRuntime['createWorktree']);
+    createWorktree(input: {
+        caseId: string;
+        taskId: string;
+        baseRevision: string;
+    }): Promise<ManagedWorktree>;
+    enqueueAndMerge(input: {
+        task: DeliveryTask;
+        projectRoot: string;
+        worktreePath: string;
+        baseRevision: string;
+        verification: unknown;
+    }): Promise<{
+        state: 'merged' | 'conflict';
+        mergeCommit?: string;
+        reason?: string;
+    }>;
+}
+export declare class ManagedWorktreeRuntime extends SerializedQueueRuntime {
+    private readonly canonicalHome?;
+    private readonly canonicalProjectRoot;
+    constructor(queue: SerializedWorkerMergeQueueLike, projectRoot: string, homeDir?: string);
+    cleanup(input: {
+        worktreePath: string;
+        branch: string;
+        handoffDurable: boolean;
+    }): Promise<{
+        cleaned: boolean;
+        reason?: string;
+    }>;
+}
+export declare class WorkflowExecutionAdapter {
+    private readonly execution;
+    constructor(execution: ExecutionPort);
+    start(task: DeliveryTask): Promise<{
+        taskId: string;
+        status: string;
+        worktreePath?: string;
+        commit?: string;
+    }>;
+    enqueueMerge(input: {
+        task: DeliveryTask;
+        projectRoot: string;
+        baseRevision: string;
+        verification: unknown;
+        message: string;
+    }): Promise<{
+        state: 'merged' | 'conflict';
+        mergeCommit?: string;
+        reason?: string;
+    }>;
+    startIsolated(task: DeliveryTask, projectRoot: string, contextReceipt: string, runtime: WorkerRuntime): Promise<{
+        envelope: TaskEnvelope;
+        worktree: ManagedWorktree;
+    }>;
+    mergeIsolated(task: DeliveryTask, projectRoot: string, worktree: ManagedWorktree, verification: unknown, runtime: WorkerRuntime): Promise<{
+        state: 'merged' | 'conflict';
+        mergeCommit?: string;
+        reason?: string;
+    }>;
+    private toEnvelope;
+}
+/** Process-backed adapter used by the default composition when a host worker is available. */
+export declare class HostWorkerExecutionAdapter implements ExecutionPort {
+    private readonly host;
+    private readonly active;
+    private readonly completed;
+    private readonly canonicalProjectRoot;
+    private readonly canonicalHome?;
+    constructor(host: HostAdapter, projectRoot: string, homeDir?: string);
+    startTask(input: TaskEnvelope): Promise<ExecutionResult>;
+    cancelTask(input: {
+        taskId: string;
+    }): Promise<void>;
+    getTaskExecution(taskId: string): {
+        handoff: WorkerHandoff;
+        worktreePath: string;
+        branch: string;
+    } | undefined;
+    cleanupTaskWorktree(input: {
+        taskId: string;
+        handoffDurable: boolean;
+    }): Promise<{
+        cleaned: boolean;
+        reason?: string;
+    }>;
+}
+//# sourceMappingURL=workflow-execution.d.ts.map

package/dist/adapters/workflow-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution.d.ts","sourceRoot":"","sources":["../../src/adapters/workflow-execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGxE,OAAO,EAAyL,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC3P,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1G,eAAe,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1N;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnN;AAED,qBAAa,sBAAuB,YAAW,aAAa;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAkC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAA9D,KAAK,EAAE,8BAA8B,EAAmB,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC;IAC5H,cAAc,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC;IACzG,eAAe,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGzN;AAED,qBAAa,sBAAuB,SAAQ,sBAAsB;IAChE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAClC,KAAK,EAAE,8BAA8B,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAWlF,OAAO,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGxI;AAED,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,aAAa;IACrD,KAAK,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAKxG,YAAY,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhN,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAA;KAAE,CAAC;IAStK,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAIxN,OAAO,CAAC,UAAU;CAGnB;AAED,8FAA8F;AAC9F,qBAAa,0BAA2B,YAAW,aAAa;IAKlD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmF;IAC1G,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuF;IACjH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;gBACX,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAK/E,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;IA+CxD,UAAU,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1D,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,aAAa,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAExG,mBAAmB,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAK9H"}

package/dist/adapters/workflow-execution.js

@@ -0,0 +1,135 @@
+import { mkdirSync, writeFileSync, realpathSync } from 'node:fs';
+import { join } from 'node:path';
+import { cleanupManagedWorktree, createManagedWorktree, createWorkerArtifacts, launchWorker, verifyWorkerOutput, workerCoordinationRoot } from '@devflow-tools/workflow-engine';
+export class SerializedQueueRuntime {
+    queue;
+    create;
+    constructor(queue, create) {
+        this.queue = queue;
+        this.create = create;
+    }
+    createWorktree(input) { return this.create(input); }
+    enqueueAndMerge(input) {
+        return this.queue.enqueueAndMerge({ workerId: input.task.id, projectRoot: input.worktreePath, baseRevision: input.baseRevision, verification: input.verification, message: `delivery task ${input.task.id}` });
+    }
+}
+export class ManagedWorktreeRuntime extends SerializedQueueRuntime {
+    canonicalHome;
+    canonicalProjectRoot;
+    constructor(queue, projectRoot, homeDir) {
+        const canonicalHome = homeDir ? realpathSync(homeDir) : undefined;
+        const canonicalProjectRoot = realpathSync(projectRoot);
+        super(queue, async (input) => {
+            const descriptor = await createManagedWorktree({ projectRoot: canonicalProjectRoot, runId: input.caseId, stepId: input.taskId, baseRevision: input.baseRevision, homeDir: canonicalHome, registered: true });
+            return { path: descriptor.worktreePath, baseRevision: descriptor.baseRevision };
+        });
+        this.canonicalHome = canonicalHome;
+        this.canonicalProjectRoot = canonicalProjectRoot;
+    }
+    async cleanup(input) {
+        return cleanupManagedWorktree({ repositoryRoot: this.canonicalProjectRoot, worktreePath: input.worktreePath, branch: input.branch, homeDir: this.canonicalHome, registered: true, handoffDurable: input.handoffDurable });
+    }
+}
+export class WorkflowExecutionAdapter {
+    execution;
+    constructor(execution) {
+        this.execution = execution;
+    }
+    start(task) {
+        const envelope = { caseId: task.caseId, taskId: task.id, objective: task.title, inputArtifacts: [], allowedFiles: task.allowedFiles, dependencies: task.dependsOn, implementationSteps: task.expectedChanges, verification: { commands: task.verificationCommands.map(({ command, args }) => ({ command, args })), acceptanceCriteria: task.expectedChanges }, constraints: { testFirst: true, cannotEditTests: true, recursiveWorkers: false } };
+        return this.execution.startTask(envelope);
+    }
+    async enqueueMerge(input) {
+        const queue = this.execution;
+        if (!queue.enqueueAndMerge)
+            throw new Error('MERGE_QUEUE_ADAPTER_REQUIRED');
+        return queue.enqueueAndMerge({ workerId: input.task.id, projectRoot: input.projectRoot, baseRevision: input.baseRevision, verification: input.verification, message: input.message });
+    }
+    async startIsolated(task, projectRoot, contextReceipt, runtime) {
+        const worktree = await runtime.createWorktree({ caseId: task.caseId, taskId: task.id, baseRevision: task.baseRevision });
+        const envelope = this.toEnvelope(task, contextReceipt);
+        const handoffDir = join(worktree.path, '.devflow', 'delivery-line');
+        mkdirSync(handoffDir, { recursive: true });
+        writeFileSync(join(handoffDir, `${task.id.replace(/[^a-zA-Z0-9._-]/g, '_')}.task.json`), `${JSON.stringify(envelope, null, 2)}\n`, { mode: 0o600 });
+        return { envelope, worktree };
+    }
+    async mergeIsolated(task, projectRoot, worktree, verification, runtime) {
+        return runtime.enqueueAndMerge({ task, projectRoot, worktreePath: worktree.path, baseRevision: worktree.baseRevision, verification });
+    }
+    toEnvelope(task, contextReceipt) {
+        return { caseId: task.caseId, taskId: task.id, objective: task.title, inputArtifacts: [contextReceipt], allowedFiles: task.allowedFiles, dependencies: task.dependsOn, implementationSteps: task.expectedChanges, verification: { commands: task.verificationCommands.map(({ command, args }) => ({ command, args })), acceptanceCriteria: task.expectedChanges }, constraints: { testFirst: true, cannotEditTests: true, recursiveWorkers: false } };
+    }
+}
+/** Process-backed adapter used by the default composition when a host worker is available. */
+export class HostWorkerExecutionAdapter {
+    host;
+    active = new Map();
+    completed = new Map();
+    canonicalProjectRoot;
+    canonicalHome;
+    constructor(host, projectRoot, homeDir) {
+        this.host = host;
+        this.canonicalProjectRoot = realpathSync(projectRoot);
+        this.canonicalHome = homeDir ? realpathSync(homeDir) : undefined;
+    }
+    async startTask(input) {
+        if (!this.host.workers)
+            throw new Error('WORKER_HOST_UNAVAILABLE');
+        const managed = await createManagedWorktree({ projectRoot: this.canonicalProjectRoot, runId: input.caseId, stepId: input.taskId, baseRevision: input.baseRevision ?? 'HEAD', homeDir: this.canonicalHome, registered: true });
+        const root = workerCoordinationRoot(`${input.caseId}-${input.taskId}`, this.canonicalHome);
+        const paths = { root, taskFile: join(root, 'task.json'), handoffFile: join(root, 'handoff.json'), statusFile: join(root, 'status.json'), stdoutFile: join(root, 'stdout.log'), stderrFile: join(root, 'stderr.log') };
+        const envelope = { workerId: input.taskId, runId: input.caseId, stepId: input.taskId, projectRoot: this.canonicalProjectRoot, worktreePath: managed.worktreePath, baseRevision: managed.baseRevision, contextReceipt: input.inputArtifacts[0] ?? '', allowedFiles: input.allowedFiles, requiredTools: [], task: { objective: input.objective, implementationSteps: input.implementationSteps }, verification: { commands: input.verification.commands, graders: [] }, constraints: { recursiveWorkers: false, maxContextCycles: 3 } };
+        createWorkerArtifacts(paths, envelope);
+        const launched = launchWorker(this.host, { workerId: input.taskId, runId: input.caseId, stepId: input.taskId, host: this.host.id === 'codex' ? 'codex' : this.host.id === 'claude-code' ? 'claude-code' : 'custom', worktreePath: managed.worktreePath, taskFile: paths.taskFile, handoffFile: paths.handoffFile, statusFile: paths.statusFile, sessionId: input.caseId, executionId: input.taskId, contextReceipt: envelope.contextReceipt, timeoutMs: 30 * 60_000 }, paths);
+        this.active.set(input.taskId, { cancel: launched.cancel, worktreePath: managed.worktreePath, branch: managed.branch });
+        const result = await launched.completion;
+        this.active.delete(input.taskId);
+        if (result.timedOut || result.cancelled || !result.handoff)
+            throw new Error(result.timedOut ? 'WORKER_TIMED_OUT' : 'WORKER_HANDOFF_REQUIRED');
+        if (result.handoff.hostStatus !== 'completed')
+            throw new Error(`WORKER_${result.handoff.hostStatus.toUpperCase()}`);
+        const verified = await verifyWorkerOutput({
+            workerId: input.taskId,
+            projectRoot: this.canonicalProjectRoot,
+            worktreePath: managed.worktreePath,
+            baseRevision: managed.baseRevision,
+            parentRevision: managed.baseRevision,
+            contextReceipt: envelope.contextReceipt,
+            allowedFiles: input.allowedFiles,
+            handoff: result.handoff,
+            hostAction: { state: 'reported', report: { exitCode: result.exitCode, signal: result.signal } },
+            verificationCommands: input.verification.commands,
+        });
+        if (!verified.passed)
+            throw new Error(`WORKER_VERIFICATION_${verified.state.toUpperCase()}:${verified.reason ?? 'unknown'}`);
+        if (verified.state !== 'merge_ready' || !verified.finalRevision || !verified.simulationHash)
+            throw new Error('WORKER_VERIFICATION_RECEIPT_INCOMPLETE');
+        this.completed.set(input.taskId, { handoff: result.handoff, worktreePath: managed.worktreePath, branch: managed.branch });
+        return {
+            taskId: input.taskId,
+            status: result.handoff.hostStatus,
+            worktreePath: managed.worktreePath,
+            commit: result.handoff.finalRevision,
+            handoff: result.handoff,
+            branch: managed.branch,
+            workerVerification: {
+                passed: true,
+                state: 'merge_ready',
+                finalRevision: verified.finalRevision,
+                changedFiles: verified.changedFiles,
+                graderReceipts: verified.graderReceipts,
+                simulationHash: verified.simulationHash,
+                parentRevision: verified.parentRevision,
+            },
+        };
+    }
+    async cancelTask(input) { this.active.get(input.taskId)?.cancel(); }
+    getTaskExecution(taskId) { return this.completed.get(taskId); }
+    async cleanupTaskWorktree(input) {
+        const completed = this.completed.get(input.taskId);
+        if (!completed)
+            return { cleaned: false, reason: 'execution_not_found' };
+        return cleanupManagedWorktree({ repositoryRoot: this.canonicalProjectRoot, worktreePath: completed.worktreePath, branch: completed.branch, homeDir: this.canonicalHome, registered: true, handoffDurable: input.handoffDurable });
+    }
+}
+//# sourceMappingURL=workflow-execution.js.map

package/dist/adapters/workflow-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution.js","sourceRoot":"","sources":["../../src/adapters/workflow-execution.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAW,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAA6E,MAAM,gCAAgC,CAAC;AAiB3P,MAAM,OAAO,sBAAsB;IACJ;IAAwD;IAArF,YAA6B,KAAqC,EAAmB,MAAuC;QAA/F,UAAK,GAAL,KAAK,CAAgC;QAAmB,WAAM,GAAN,MAAM,CAAiC;IAAG,CAAC;IAChI,cAAc,CAAC,KAA+D,IAA8B,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxI,eAAe,CAAC,KAAqH;QACnI,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,iBAAiB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjN,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,sBAAsB;IAC/C,aAAa,CAAU;IACvB,oBAAoB,CAAS;IAC9C,YAAY,KAAqC,EAAE,WAAmB,EAAE,OAAgB;QACtF,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,MAAM,oBAAoB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACvD,KAAK,CAAC,KAAK,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACzB,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7M,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC;QAClF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAwE;QACpF,OAAO,sBAAsB,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5N,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,SAAwB;QAAxB,cAAS,GAAT,SAAS,CAAe;IAAG,CAAC;IACzD,KAAK,CAAC,IAAkB;QACtB,MAAM,QAAQ,GAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,CAAC;QAChc,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAgH;QACjI,MAAM,KAAK,GAAG,IAAI,CAAC,SAAuJ,CAAC;QAC3K,IAAI,CAAC,KAAK,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAkB,EAAE,WAAmB,EAAE,cAAsB,EAAE,OAAsB;QACzG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzH,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QACpE,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpJ,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAkB,EAAE,WAAmB,EAAE,QAAyB,EAAE,YAAqB,EAAE,OAAsB;QACnI,OAAO,OAAO,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;IACxI,CAAC;IAEO,UAAU,CAAC,IAAkB,EAAE,cAAsB;QAC3D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,CAAC;IACxb,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,OAAO,0BAA0B;IAKR;IAJZ,MAAM,GAAG,IAAI,GAAG,EAAwE,CAAC;IACzF,SAAS,GAAG,IAAI,GAAG,EAA4E,CAAC;IAChG,oBAAoB,CAAS;IAC7B,aAAa,CAAU;IACxC,YAA6B,IAAiB,EAAE,WAAmB,EAAE,OAAgB;QAAxD,SAAI,GAAJ,IAAI,CAAa;QAC5C,IAAI,CAAC,oBAAoB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAmB;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9N,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3F,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/O,MAAM,QAAQ,GAAuB,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1hB,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9c,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC9I,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACxC,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,WAAW,EAAE,IAAI,CAAC,oBAAoB;YACtC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,cAAc,EAAE,OAAO,CAAC,YAAY;YACpC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE;YAC/F,oBAAoB,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAC7H,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvJ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1H,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,kBAAkB,EAAE;gBAClB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,aAAa;gBACpB,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAyB,IAAmB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEvG,gBAAgB,CAAC,MAAc,IAAkF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAErJ,KAAK,CAAC,mBAAmB,CAAC,KAAkD;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACzE,OAAO,sBAAsB,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACpO,CAAC;CACF"}

package/dist/artifact-generation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifact-generation.test.d.ts.map

package/dist/artifact-generation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-generation.test.d.ts","sourceRoot":"","sources":["../src/artifact-generation.test.ts"],"names":[],"mappings":""}

package/dist/artifact-generation.test.js

@@ -0,0 +1,11 @@
+import { describe, expect, it } from 'vitest';
+import { validateArtifactGeneration } from './artifacts/generation-guard.js';
+const context = { id: 'ctx', caseId: 'case', receipt: 'receipt', refs: [{ path: 'src/a.ts', hash: 'hash', classification: 'internal', untrusted: true }], omitted: [], compressed: false };
+const base = { type: 'spec', parentHash: 'parent', context, generator: { id: 'agent', kind: 'agent', role: 'designer' }, content: '# spec' };
+describe('artifact generation guard', () => {
+    it('accepts a bounded artifact and rejects secret-like content', () => {
+        expect(() => validateArtifactGeneration(base)).not.toThrow();
+        expect(() => validateArtifactGeneration({ ...base, content: 'api_key: leaked' })).toThrow('secret-like');
+    });
+});
+//# sourceMappingURL=artifact-generation.test.js.map

package/dist/artifact-generation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-generation.test.js","sourceRoot":"","sources":["../src/artifact-generation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,UAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACpM,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAE/J,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/artifacts/context-manifest.d.ts

@@ -0,0 +1,20 @@
+import { type ArtifactRef } from '../domain/types.js';
+export interface ContextManifest {
+    id: string;
+    caseId: string;
+    receipt: string;
+    refs: Array<{
+        path: string;
+        hash: string;
+        classification: 'public' | 'internal' | 'confidential';
+        untrusted: boolean;
+    }>;
+    artifactRefs?: Array<Pick<ArtifactRef, 'id' | 'ref' | 'commit' | 'path' | 'blobHash' | 'contentHash'>>;
+    omitted: string[];
+    compressed: boolean;
+    compactionMarker?: string;
+    retainedSourceHashes?: string[];
+}
+export declare function validateContextManifest(manifest: ContextManifest): void;
+export declare function assertContextArtifactBinding(manifest: ContextManifest, artifact: Pick<ArtifactRef, 'id' | 'ref' | 'commit' | 'path' | 'blobHash' | 'contentHash'>): void;
+//# sourceMappingURL=context-manifest.d.ts.map

package/dist/artifacts/context-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-manifest.d.ts","sourceRoot":"","sources":["../../src/artifacts/context-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxH,YAAY,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC;IACvG,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAYvE;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC,GAAG,IAAI,CAGxK"}

package/dist/artifacts/context-manifest.js

@@ -0,0 +1,24 @@
+import { DeliveryLineError } from '../domain/types.js';
+export function validateContextManifest(manifest) {
+    if (!manifest.id || !manifest.caseId || !manifest.receipt)
+        throw new DeliveryLineError('MISSING_PREREQUISITE', 'context manifest identity required');
+    for (const ref of manifest.refs) {
+        if (!ref.path || ref.path.startsWith('/') || ref.path.split('/').includes('..') || !ref.hash) {
+            throw new DeliveryLineError('MISSING_PREREQUISITE', `invalid context ref: ${ref.path}`);
+        }
+    }
+    for (const artifact of manifest.artifactRefs ?? []) {
+        if (!artifact.id || !artifact.ref || !artifact.commit || !artifact.path || !artifact.blobHash || !artifact.contentHash)
+            throw new DeliveryLineError('MISSING_PREREQUISITE', 'artifact context binding is incomplete');
+        if (artifact.path.startsWith('/') || artifact.path.split('/').includes('..'))
+            throw new DeliveryLineError('MISSING_PREREQUISITE', `invalid artifact path: ${artifact.path}`);
+    }
+    if (manifest.compressed && (!manifest.compactionMarker || !manifest.retainedSourceHashes?.length))
+        throw new DeliveryLineError('MISSING_PREREQUISITE', 'compressed context must retain source hashes');
+}
+export function assertContextArtifactBinding(manifest, artifact) {
+    validateContextManifest(manifest);
+    if (!(manifest.artifactRefs ?? []).some(ref => ref.id === artifact.id && ref.ref === artifact.ref && ref.commit === artifact.commit && ref.blobHash === artifact.blobHash && ref.contentHash === artifact.contentHash))
+        throw new DeliveryLineError('ARTIFACT_HASH_MISMATCH', 'context manifest is not bound to artifact');
+}
+//# sourceMappingURL=context-manifest.js.map

package/dist/artifacts/context-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-manifest.js","sourceRoot":"","sources":["../../src/artifacts/context-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,oBAAoB,CAAC;AAczE,MAAM,UAAU,uBAAuB,CAAC,QAAyB;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;IACrJ,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7F,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,wBAAwB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;QACtN,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,0BAA0B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/K,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,8CAA8C,CAAC,CAAC;AACzM,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAyB,EAAE,QAA0F;IAChK,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,2CAA2C,CAAC,CAAC;AAC7T,CAAC"}