@dsh-enhanced/plugin-control-plane 0.1.32 → 0.1.35

package/lib/source-context.d.ts

@@ -0,0 +1,24 @@
+export interface SourceInspection {
+    name: string;
+    baseCommit: string;
+    files: readonly {
+        path: string;
+        bytes: number;
+    }[];
+    contents: readonly {
+        path: string;
+        content: string;
+    }[];
+}
+/** Bound caller-supplied async fences; cancellation suppresses every late result. */
+export declare function awaitSourceSignal<T>(signal: AbortSignal, operation: () => T | Promise<T>): Promise<T>;
+export declare function inspectSourceContext(input: {
+    repository: string;
+    name: string;
+    paths: readonly string[];
+    baseCommit?: string;
+    environment: NodeJS.ProcessEnv;
+    signal: AbortSignal;
+    assertCurrent: () => Promise<void>;
+}): Promise<SourceInspection>;
+//# sourceMappingURL=source-context.d.ts.map

package/lib/source-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-context.d.ts","sourceRoot":"","sources":["../src/source-context.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,QAAQ,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE;AAEjL,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAUrG;AAmBD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAA;IAC/G,MAAM,EAAE,WAAW,CAAC;IAAC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6C5B"}

package/lib/source-context.js

@@ -0,0 +1,99 @@
+import { realpath } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { ControlPlaneCliError } from './errors.js';
+import { assertPluginModificationAllowed, runLocalBuffer, runLocalCommand } from './source-workspace.js';
+const NAME = /^(?=.{1,64}$)[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
+const TEXT = /(?:\.(?:ts|tsx|jsx|js|mjs|cjs|json|ya?ml|md|txt|css|html|sh)|^LICENSE)$/u;
+const OMIT = /(?:^|\/)(?:node_modules|lib|dist|coverage)(?:\/|$)|(?:^|\/)\./u;
+const MAX_FILES = 1024;
+const MAX_READ_FILES = 64;
+const MAX_FILE_BYTES = 65_536;
+const MAX_TOTAL_BYTES = 262_144;
+/** Bound caller-supplied async fences; cancellation suppresses every late result. */
+export function awaitSourceSignal(signal, operation) {
+    signal.throwIfAborted();
+    return new Promise((resolvePromise, reject) => {
+        const cancel = () => { reject(signal.reason); };
+        signal.addEventListener('abort', cancel, { once: true });
+        Promise.resolve().then(() => { signal.throwIfAborted(); return operation(); }).then(value => { signal.removeEventListener('abort', cancel); if (signal.aborted)
+            reject(signal.reason);
+        else
+            resolvePromise(value); }, error => { signal.removeEventListener('abort', cancel); reject(error); });
+    });
+}
+function assertPath(path) {
+    if (path === '' || path.length > 512 || [...path].some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) || path.includes('\\') || path.startsWith('/') || path.split('/').some(part => part === '' || part === '.' || part === '..')) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source context path escapes the plugin tree');
+    }
+}
+function parseTree(value, root) {
+    const entries = new Map();
+    for (const record of value.split('\0').filter(Boolean)) {
+        const match = /^(\d+) ([a-z]+) ([a-f0-9]{40}) +([0-9]+|-)\t(.+)$/u.exec(record);
+        if (!match || !match[5].startsWith(`${root}/`))
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'Git tree entry is invalid');
+        const path = match[5].slice(root.length + 1);
+        assertPath(path);
+        if (!OMIT.test(path))
+            entries.set(path, { mode: match[1], type: match[2], hash: match[3], bytes: match[4] === '-' ? 0 : Number(match[4]) });
+    }
+    return entries;
+}
+export async function inspectSourceContext(input) {
+    const signal = AbortSignal.any([input.signal, AbortSignal.timeout(15_000)]);
+    const check = async () => { signal.throwIfAborted(); await awaitSourceSignal(signal, input.assertCurrent); signal.throwIfAborted(); };
+    await check();
+    const name = input.name.normalize('NFC').trim();
+    if (!NAME.test(name))
+        throw new ControlPlaneCliError('INVALID_ARGUMENT', 'plugin name is invalid');
+    assertPluginModificationAllowed(name);
+    if (input.paths.length > MAX_READ_FILES || input.paths.length !== new Set(input.paths).size)
+        throw new ControlPlaneCliError('INVALID_ARGUMENT', 'too many or duplicate source context paths');
+    for (const path of input.paths)
+        assertPath(path);
+    const repository = await realpath(resolve(input.repository));
+    if (repository !== resolve(input.repository))
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'repository path must be canonical');
+    const top = (await runLocalCommand('git', ['rev-parse', '--show-toplevel'], repository, input.environment, { capture: true, timeoutMs: 15_000, signal })).trim();
+    if (top !== repository)
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'repository must be the canonical Git top-level');
+    const head = (await runLocalCommand('git', ['rev-parse', 'HEAD'], repository, input.environment, { capture: true, timeoutMs: 15_000, signal })).trim();
+    if (!/^[a-f0-9]{40}$/u.test(head) || (input.baseCommit !== undefined && input.baseCommit !== head)) {
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'source context base commit is stale or invalid');
+    }
+    await check();
+    const root = `plugins/${name}`;
+    const listed = await runLocalCommand('git', ['--literal-pathspecs', 'ls-tree', '-r', '-l', '-z', head, '--', root], repository, input.environment, { capture: true, maximumOutput: 1_048_576, timeoutMs: 15_000, signal });
+    const tree = parseTree(listed, root);
+    if (tree.size === 0 || tree.size > MAX_FILES)
+        throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'plugin source manifest is unavailable or exceeds its bound');
+    const files = [...tree.entries()].filter(([path, entry]) => entry.type === 'blob' && (entry.mode === '100644' || entry.mode === '100755') && TEXT.test(path))
+        .map(([path, entry]) => ({ path, bytes: entry.bytes, hash: entry.hash })).sort((a, b) => a.path.localeCompare(b.path));
+    const requested = input.paths.length === 0 ? [] : input.paths;
+    let total = 0;
+    const contents = [];
+    for (const path of requested) {
+        const entry = tree.get(path);
+        if (!entry || entry.type !== 'blob' || (entry.mode !== '100644' && entry.mode !== '100755') || !TEXT.test(path))
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', `requested source path is unavailable: ${JSON.stringify(path)}`);
+        if (entry.bytes > MAX_FILE_BYTES || total + entry.bytes > MAX_TOTAL_BYTES)
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'requested source content exceeds its bound');
+        await check();
+        const raw = await runLocalBuffer('git', ['cat-file', 'blob', entry.hash], repository, input.environment, { maximumOutput: MAX_FILE_BYTES, timeoutMs: 15_000, signal });
+        let content;
+        try {
+            content = new TextDecoder('utf-8', { fatal: true }).decode(raw);
+        }
+        catch {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'requested source content is not strict UTF-8');
+        }
+        const bytes = raw.length;
+        if (bytes > MAX_FILE_BYTES || raw.includes(0) || (total += bytes) > MAX_TOTAL_BYTES) {
+            throw new ControlPlaneCliError('SOURCE_BOUNDARY', 'requested source content is binary or exceeds its bound');
+        }
+        contents.push(Object.freeze({ path, content }));
+    }
+    await check();
+    return Object.freeze({ name, baseCommit: head, files: Object.freeze(files.map(({ path, bytes }) => Object.freeze({ path, bytes }))), contents: Object.freeze(contents) });
+}
+//# sourceMappingURL=source-context.js.map

package/lib/source-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-context.js","sourceRoot":"","sources":["../src/source-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,+BAA+B,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAExG,MAAM,IAAI,GAAG,8CAA8C,CAAA;AAC3D,MAAM,IAAI,GAAG,0EAA0E,CAAA;AACvF,MAAM,IAAI,GAAG,gEAAgE,CAAA;AAC7E,MAAM,SAAS,GAAG,IAAI,CAAC;AAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAAC,MAAM,eAAe,GAAG,OAAO,CAAA;AAIjH,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAI,MAAmB,EAAE,SAA+B;IACvF,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,IAAI,OAAO,CAAI,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAA;QACpD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,SAAS,EAAE,CAAA,CAAC,CAAC,CAAC,CAAC,IAAI,CAChF,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;YAAM,cAAc,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,EAC/H,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CACxE,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACnP,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuE,CAAA;IAC9F,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,oDAAoD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/E,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QAC/H,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAG1C;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA,CAAC,CAAC,CAAA;IACnJ,MAAM,KAAK,EAAE,CAAA;IACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAA;IAClG,+BAA+B,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAA;IAC7L,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IAC5D,IAAI,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAA;IACpI,MAAM,GAAG,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAChK,IAAI,GAAG,KAAK,UAAU;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAA;IAC3H,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACtJ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAA;IACrG,CAAC;IACD,MAAM,KAAK,EAAE,CAAA;IACb,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAA;IAC9B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAC/I,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACpC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;QAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,4DAA4D,CAAC,CAAA;IAC7J,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1J,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IACxH,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IAAC,MAAM,QAAQ,GAAwC,EAAE,CAAA;IACvE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,yCAAyC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnO,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,eAAe;YAAE,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAA;QAC1K,MAAM,KAAK,EAAE,CAAA;QACb,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EACrG,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/D,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAAC,CAAC;QACvE,MAAM,CAAC;YAAC,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAA;QAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAA;QACxB,IAAI,KAAK,GAAG,cAAc,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,eAAe,EAAE,CAAC;YACpF,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAA;QAC9G,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,KAAK,EAAE,CAAA;IACb,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAC3K,CAAC"}

package/lib/source-job-types.d.ts

@@ -0,0 +1,87 @@
+import type { SourceBuildConfig } from './source-build.js';
+import type { ScopedPluginFile } from './source-workspace.js';
+/** Owner-configured authority for background checks, separate from an Agent wake. */
+export interface SourceJobsConfig {
+    authorityId: string;
+    expiresAt: number;
+    maxSubmissions: number;
+    repository: string;
+    ownerRouteId: string;
+    principalId: string;
+    workspace: string;
+    preset: string;
+    budgetId: string;
+    budgetAmount: number;
+}
+/** Structural Delivery v2 receipt; no runtime dependency on the optional peer. */
+export interface SourceJobOwnerReceipt {
+    receiptVersion: 2;
+    authorityId: string;
+    authorityHash: string;
+    principalId: string;
+    principalRecordId: string;
+    principalVersion: number;
+    workspace: string;
+    agentPreset: string;
+    bindingVersion: number;
+    generation: number;
+}
+export interface SourceJobAuthority {
+    id: string;
+    digest: string;
+    expiresAt: number;
+    maxSubmissions: number;
+}
+/** Private immutable payload. Never return files, paths or receipts to model tools. */
+export interface SourceJobIntent {
+    authority: SourceJobAuthority;
+    owner: SourceJobOwnerReceipt;
+    ownerDigest: string;
+    trustDigest: string;
+    repository: string;
+    name: string;
+    gapId: string;
+    gapRevision: number;
+    gapDigest: string;
+    baseCommit: string;
+    files: readonly ScopedPluginFile[];
+    ttlMs: number;
+    build: SourceBuildConfig;
+    worktree: string;
+    containerName: string;
+}
+export type SourceJobStatus = 'queued' | 'running' | 'prepared' | 'failed' | 'unknown';
+export interface SourceJobRecord {
+    id: string;
+    automationId: string;
+    idempotencyKey: string;
+    intent: SourceJobIntent;
+    intentDigest: string;
+    status: SourceJobStatus;
+    revision: number;
+    createdAt: number;
+    expiresAt: number;
+    updatedAt: number;
+    definitionHash?: string;
+    occurrenceId?: string;
+    planId?: string;
+    failureCode?: string;
+}
+export interface SourceJobCompletion {
+    jobId: string;
+    jobRevision: number;
+    occurrenceId: string;
+}
+/** Content-free projection, scoped by the current owner before returning it. */
+export interface SourceJobProjection {
+    id: string;
+    name: string;
+    gapId: string;
+    baseCommit: string;
+    status: SourceJobStatus;
+    createdAt: number;
+    expiresAt: number;
+    planId?: string;
+    failureCode?: string;
+}
+//# sourceMappingURL=source-job-types.d.ts.map

package/lib/source-job-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-job-types.d.ts","sourceRoot":"","sources":["../src/source-job-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,CAAC,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,uFAAuF;AACvF,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,kBAAkB,CAAA;IAC7B,KAAK,EAAE,qBAAqB,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,iBAAiB,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEtF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,eAAe,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB"}

package/lib/source-job-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=source-job-types.js.map

package/lib/source-job-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-job-types.js","sourceRoot":"","sources":["../src/source-job-types.ts"],"names":[],"mappings":""}

package/lib/source-jobs.d.ts

@@ -0,0 +1,113 @@
+import type { AssistantAutomationsService } from '@dsh-enhanced/assistant-automations';
+import { type ControlPlaneStore } from './store.js';
+import { type ScopedPluginFile } from './source-workspace.js';
+import { type SourceBuildConfig } from './source-build.js';
+import { type loadTrustConfig } from './trust.js';
+import type { PluginSourcePlan } from './types.js';
+import type { SourceJobOwnerReceipt, SourceJobProjection, SourceJobRecord, SourceJobsConfig } from './source-job-types.js';
+export declare const SOURCE_JOB_OWNER = "plugin-control-plane-source";
+export interface SourceJobCaller {
+    ownerRouteId: string;
+    principalId: string;
+    principalRecordId: string;
+    principalVersion: number;
+    workspace: string;
+    preset: string;
+}
+export interface EnqueueSourceJobInput {
+    gapId: string;
+    name: string;
+    repository: string;
+    files: readonly ScopedPluginFile[];
+    idempotencyKey: string;
+    expectedBaseCommit: string;
+    ttlMs: number;
+    owner: SourceJobCaller;
+    signal: AbortSignal;
+    assertCurrent: () => void | Promise<void>;
+}
+export interface SourceJobPorts {
+    automations: Pick<AssistantAutomationsService, 'registerHostExecutor' | 'reconcileSystem' | 'inspectSystemOwnedActivation' | 'inspectSystemOwned'>;
+    delivery: {
+        validateOwnerRoute(input: {
+            authorityId: string;
+            principalId: string;
+            workspace: string;
+            agentPreset: string;
+        }): SourceJobOwnerReceipt;
+    };
+}
+type Trust = Awaited<ReturnType<typeof loadTrustConfig>>;
+export declare function validateSourceJobsConfig(value: SourceJobsConfig, build?: SourceBuildConfig): void;
+/** Persisted intent + native Automations execution. This class owns no scheduler. */
+export declare class SourceJobRuntime {
+    private readonly options;
+    private readonly abort;
+    private readonly flights;
+    private readonly authorityDigest;
+    private unregister?;
+    private unregisterContinuation?;
+    private closing?;
+    private active;
+    private readonly generation;
+    private readonly continuationNonce;
+    private readonly continuing;
+    private continuationCursor;
+    private continuationStatus;
+    private continuationTransition;
+    constructor(options: {
+        config: SourceJobsConfig;
+        build: SourceBuildConfig;
+        statePath: string;
+        store: ControlPlaneStore;
+        ports: SourceJobPorts;
+        withGapSourceFence?: <T>(gapId: string, owner: SourceJobOwnerReceipt, callback: () => T) => T;
+        trust: () => Promise<Trust>;
+        approvePrepared?: (job: SourceJobRecord, signal: AbortSignal) => Promise<void>;
+        releasePrepared?: (job: SourceJobRecord, signal: AbortSignal) => Promise<void>;
+        advanceReleased?: (job: SourceJobRecord, signal: AbortSignal) => Promise<void>;
+        releaseTimeoutMs?: number;
+        adoptReleased?: (job: SourceJobRecord, signal: AbortSignal, assertCurrent: () => Promise<void>) => Promise<void>;
+        adoptionTimeoutMs?: number;
+        prepare: (job: SourceJobRecord, signal: AbortSignal, assertCurrent: () => Promise<void>) => Promise<PluginSourcePlan>;
+    });
+    start(): void;
+    private continuePrepared;
+    private continuePreparedLocked;
+    available(): boolean;
+    close(): Promise<void>;
+    private track;
+    private receipt;
+    private assertCaller;
+    private withGapSource;
+    private assertOwner;
+    enqueue(input: EnqueueSourceJobInput): Promise<SourceJobProjection>;
+    private enqueueOwned;
+    inspect(input: {
+        id: string;
+        owner: SourceJobCaller;
+    }): SourceJobProjection;
+    /** Native runner admission can fail before our executor is invoked. */
+    private refreshQueued;
+    private definition;
+    private schedule;
+    private hasContinuations;
+    private continuationJobs;
+    /** Admission reads durable state and validates the current owner; it never invokes continuation approval or release hooks. */
+    private eligibleContinuation;
+    private continuationTimeoutMs;
+    private continuationSignalTimeoutMs;
+    private continuationDefinition;
+    /** Reconciliation only changes native activation; it never calls an authority. */
+    private reconcileContinuations;
+    private executeContinuations;
+    private scheduleOrFail;
+    private execute;
+    /** Explicit Host action. Unknown keeps its capacity until exact cleanup succeeds. */
+    reconcileUnknown(input: {
+        id: string;
+        owner: SourceJobCaller;
+    }): Promise<SourceJobProjection>;
+}
+export {};
+//# sourceMappingURL=source-jobs.d.ts.map

package/lib/source-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-jobs.d.ts","sourceRoot":"","sources":["../src/source-jobs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,2BAA2B,EAA+G,MAAM,qCAAqC,CAAA;AACnM,OAAO,EAA6C,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9F,OAAO,EAAuF,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAElJ,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACpF,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAA;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,KAAK,EAAmB,qBAAqB,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE3I,eAAO,MAAM,gBAAgB,gCAAgC,CAAA;AAO7D,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAClI;AACD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;IAC3G,kBAAkB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,aAAa,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClI;AACD,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,sBAAsB,GAAG,iBAAiB,GAAG,8BAA8B,GAAG,oBAAoB,CAAC,CAAA;IAClJ,QAAQ,EAAE;QAAE,kBAAkB,CAAC,KAAK,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,GAAG,qBAAqB,CAAA;KAAE,CAAA;CACrJ;AACD,KAAK,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAA;AAExD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAajG;AAQD,qFAAqF;AACrF,qBAAa,gBAAgB;IAcf,OAAO,CAAC,QAAQ,CAAC,OAAO;IAbpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,OAAO,CAAC,sBAAsB,CAAC,CAAY;IAC3C,OAAO,CAAC,OAAO,CAAC,CAAe;IAC/B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;IAC1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,kBAAkB,CAAI;IAC9B,OAAO,CAAC,kBAAkB,CAAiC;IAC3D,OAAO,CAAC,sBAAsB,CAAI;gBACL,OAAO,EAAE;QACpC,MAAM,EAAE,gBAAgB,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAC;QAAC,KAAK,EAAE,cAAc,CAAA;QACtH,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7F,KAAK,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3B,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9E,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9E,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QAChH,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;KACtH;IAMD,KAAK,IAAI,IAAI;YAsCC,gBAAgB;YAOhB,sBAAsB;IAsCpC,SAAS,IAAI,OAAO;IAEpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBtB,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;YAMrD,YAAY;IA2C1B,OAAO,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,eAAe,CAAA;KAAE,GAAG,mBAAmB;IAY3E,uEAAuE;IACvE,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,QAAQ;IAehB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,gBAAgB;IAMxB,8HAA8H;IAC9H,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,2BAA2B;IAQnC,OAAO,CAAC,sBAAsB;IAU9B,kFAAkF;IAClF,OAAO,CAAC,sBAAsB;YAShB,oBAAoB;IA6BlC,OAAO,CAAC,cAAc;YAOR,OAAO;IA2CrB,qFAAqF;IACrF,gBAAgB,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAa9F"}