@frankzhang2026/opencode-android-orchestrator 1.0.4 → 1.1.0

package/dist/queue/process-ownership.js

@@ -0,0 +1,58 @@
+import { spawnSync } from "node:child_process";
+import { invariant } from "./storage.js";
+/** Discard command/environment text immediately: only identities may enter evidence. */
+export function parseProcessTable(output, token) {
+    invariant(/^[a-f0-9]{64}$/.test(token), "Invalid Worker ownership token");
+    return output.split("\n").filter(line => line.trim()).map(line => {
+        const match = line.match(/^\s*(\d+)\s+(\d+)\s+(\d+)\s+(\S+\s+\S+\s+\d+\s+\S+\s+\d+)\s+(\S+)\s*(.*)$/);
+        invariant(match, "Cannot parse process ownership snapshot");
+        return { pid: Number(match[1]), ppid: Number(match[2]), pgid: Number(match[3]),
+            started: match[4].trim().replace(/\s+/g, " "), zombie: match[5].startsWith("Z"),
+            owned: (` ${match[6]} `).includes(` AUTOMATION_WORKER_TOKEN=${token} `) };
+    }).filter(row => !row.zombie).map(({ zombie: _zombie, ...row }) => row);
+}
+export function processSnapshot(token) {
+    const result = spawnSync("ps", ["axeww", "-o", "pid=,ppid=,pgid=,lstart=,stat=,command="], { encoding: "utf8", timeout: 10000, maxBuffer: 64 * 1024 * 1024 });
+    // Do not include ps stdout/stderr: it contains unrelated process environments.
+    invariant(result.status === 0 && !result.error && result.stdout.trim(), "Cannot obtain complete process ownership snapshot");
+    return parseProcessTable(result.stdout, token);
+}
+export function ownedTree(rows, worker, known = []) {
+    const root = rows.find(row => row.pid === worker.pid);
+    // macOS may stop exposing an exiting process's environment before it becomes
+    // a zombie. Previously witnessed identity is the same proof used for children.
+    const witnessedRoot = root && known.some(p => p.pid === root.pid && p.started === root.started && p.pgid === root.pgid);
+    invariant(!root || (root.started === worker.started && (root.owned || witnessedRoot)), "Worker identity changed; refusing termination");
+    const selected = new Set(rows.filter(row => row.owned || known.some(p => p.pid === row.pid && p.started === row.started && p.pgid === row.pgid)).map(row => row.pid));
+    if (root)
+        selected.add(worker.pid);
+    for (let changed = true; changed;) {
+        changed = false;
+        for (const row of rows)
+            if (selected.has(row.ppid) && !selected.has(row.pid)) {
+                selected.add(row.pid);
+                changed = true;
+            }
+    }
+    invariant(rows.filter(row => row.pgid === worker.pid).every(row => selected.has(row.pid)), "A Worker group member lacks ownership proof; retain execution slot");
+    const tree = rows.filter(row => selected.has(row.pid));
+    invariant(tree.length <= 256, "Worker process inventory exceeds the supervised limit");
+    return tree;
+}
+export function signalOwned(token, expected, signal, known = []) {
+    const current = processSnapshot(token).find(row => row.pid === expected.pid);
+    if (!current)
+        return false;
+    const witnessed = known.some(p => p.pid === current.pid && p.started === current.started && p.pgid === current.pgid);
+    invariant(current.started === expected.started && (current.owned || witnessed), "Process identity changed before signal; refusing termination");
+    try {
+        process.kill(expected.pid, signal);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ESRCH")
+            return false;
+        throw error;
+    }
+}
+//# sourceMappingURL=process-ownership.js.map

package/dist/queue/process-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-ownership.js","sourceRoot":"","sources":["../../src/queue/process-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAwB,MAAM,cAAc,CAAC;AAI/D,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,KAAa;IAC7D,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACtG,SAAS,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YACjF,KAAK,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,4BAA4B,KAAK,GAAG,CAAC,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,yCAAyC,CAAC,EACvF,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACrE,+EAA+E;IAC/E,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,mDAAmD,CAAC,CAAC;IAC7H,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,MAAuB,EAAE,QAAwB,EAAE;IACjG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,aAAa,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IACxH,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,EAAE,+CAA+C,CAAC,CAAC;IACxI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtK,IAAI,IAAI;QAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,KAAK,IAAI,OAAO,GAAG,IAAI,EAAE,OAAO,GAAG,CAAC;QAClC,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;IAC1H,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EACvF,oEAAoE,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,uDAAuD,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAyB,EAAE,MAAsB,EAAE,QAAwB,EAAE;IACtH,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrH,SAAS,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC,EAAE,8DAA8D,CAAC,CAAC;IAChJ,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACrG,CAAC"}

package/dist/queue/queue.d.ts

@@ -1,9 +1,10 @@
+import { type Supervision } from "./supervision.js";
 import type { ApprovalProof } from "./approvals.js";
 import { QueueStorage, type ProcessIdentity } from "./storage.js";
 import { type QueuePolicy } from "../config/queue-policy.js";
 export type WorkspaceStrategy = "inPlaceExclusive" | "isolatedWorktree";
 export type CommitPolicy = "humanApproval" | "autoCommit";
-export type JobKind = "execute" | "integrate" | "revalidate" | "resume" | "resume-review" | "abort" | "recover";
+export type JobKind = "execute" | "integrate" | "revalidate" | "resume" | "resume-review" | "abort" | "recover" | "retry-baseline";
 export interface QueueConfiguration {
     schemaVersion: number;
     enabled: boolean;
@@ -21,9 +22,11 @@ export interface QueueConfiguration {
         fullUnitTestTasks: string[];
         focusedTestTasks: string[];
         assembleTasks: string[];
+        deviceTestTasks?: string[];
     };
 }
 export interface Draft {
+    planningInputsSha256?: string;
     proposalApproval?: ApprovalProof;
     key: string;
     taskId: string;
@@ -71,6 +74,16 @@ export interface QueueItem extends Draft {
     sealedRunId: string | null;
     candidateId: string | null;
     completedCommit: string | null;
+    baselineRecovery?: {
+        sha256: string;
+        nextRunAt: number | null;
+        deadline: number;
+        failure: Record<string, unknown> | null;
+        waitingReason: string | null;
+    };
+    stageRecovery?: Record<string, {
+        sha256: string;
+    }>;
 }
 export interface QueueRun {
     id: string;
@@ -83,7 +96,9 @@ export interface QueueRun {
         state: string;
         error: string | null;
     } | null;
+    supervision?: Supervision;
 }
+export declare function publicRun(run: QueueRun | null): unknown;
 export interface QueueNotification {
     id: string;
     key: string;
@@ -141,6 +156,15 @@ export declare function now(): string;
 export declare function matchesPath(pattern: string, path: string): boolean;
 export declare function validateContract(contract: Record<string, unknown>, config: QueueConfiguration): void;
 export declare function draftFromItem(item: QueueItem): Draft;
+export interface ContinuityPolicy {
+    version: 1;
+    isolatedAutoIntegration: boolean;
+    planningRefresh: "reject" | "completedQueueTasks";
+    planningInputs: string[];
+}
+export declare function continuityPolicy(contract: Record<string, unknown>): ContinuityPolicy | undefined;
+export declare function isolatedAutoIntegrationAuthorized(item: Pick<Draft, "contract" | "workspaceStrategy" | "commitPolicy">): boolean;
+export declare function planningInputsDigest(root: string, head: string, patterns: string[]): string;
 export declare function assertAuthorized(item: QueueItem): void;
 export declare class TaskQueue {
     readonly storage: QueueStorage<QueueDocument>;

package/dist/queue/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../src/queue/queue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAKpD,OAAO,EAEG,YAAY,EAAE,KAAK,eAAe,EAC3C,MAAM,cAAc,CAAC;AACtB,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE1E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,kBAAkB,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;AAC1D,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,eAAe,GAAG,OAAO,GAAG,SAAS,CAAC;AAChH,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mBAAmB,EAAE,KAAK,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE;QAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1G;AACD,MAAM,WAAW,KAAK;IACpB,gBAAgB,CAAC,EAAE,aAAa,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,SAAU,SAAQ,KAAK;IACtC,yBAAyB,EAAE,iBAAiB,CAAC;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,YAAY,CAAC;QAAC,mBAAmB,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC;IAC/J,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AACD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACzD;AACD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IACpE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;CACxF;AACD,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,aAAa,EAAE,iBAAiB,EAAE,CAAC;CACpC;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAC5F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC7D;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAeD,eAAO,MAAM,OAAO,QAAsB,CAAC;AAC3C,wBAAgB,GAAG,IAAI,MAAM,CAAqC;AAWlE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKlE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,GAAG,IAAI,CA6BpG;AAOD,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,KAAK,CAMpD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAOtD;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC;gBAClC,SAAS,EAAE,MAAM;IAG7B,MAAM,IAAI,kBAAkB;IAU5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,gBAAgB;IAQjD,OAAO,CAAC,SAAS;IAGjB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAShD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,EAAE,KAAK,SAAK,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,SAA8B,GAAG,gBAAgB;IAoC3H,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB;IAgCjF,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,oBAAoB;IAI5B,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,gBAAgB,CAAC,EAAE,aAAa,GAAG,KAAK;IAiCjE,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM;IAKlC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,SAAS;IAuBxF,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS;IAK5B,OAAO,CAAC,QAAQ;IAGhB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ5C,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,GAAG,IAAI;IAejF,gBAAgB,IAAI,IAAI;IAoBxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS7C,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvE,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,aAAa;IAyBtH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAoB3H,OAAO,IAAI,QAAQ,GAAG,IAAI;IAuD1B,SAAS,IAAI,IAAI;CAkClB"}
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../src/queue/queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,KAAK,WAAW,EAAwB,MAAM,kBAAkB,CAAC;AAEnH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAMpD,OAAO,EAEG,YAAY,EAAE,KAAK,eAAe,EAC3C,MAAM,cAAc,CAAC;AACtB,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE1E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,kBAAkB,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;AAC1D,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,CAAC;AACnI,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mBAAmB,EAAE,KAAK,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE;QAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACtI;AACD,MAAM,WAAW,KAAK;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,aAAa,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,SAAU,SAAQ,KAAK;IACtC,yBAAyB,EAAE,iBAAiB,CAAC;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,YAAY,CAAC;QAAC,mBAAmB,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC;IAC/J,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACzJ,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AACD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AACD,wBAAgB,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAEvD;AACD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IACpE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;CACxF;AACD,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,aAAa,EAAE,iBAAiB,EAAE,CAAC;CACpC;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAC5F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC7D;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAeD,eAAO,MAAM,OAAO,QAAsB,CAAC;AAC3C,wBAAgB,GAAG,IAAI,MAAM,CAAqC;AAWlE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKlE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,GAAG,IAAI,CA4FpG;AAOD,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,KAAK,CAOpD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,uBAAuB,EAAE,OAAO,CAAC;IACjC,eAAe,EAAE,QAAQ,GAAG,qBAAqB,CAAC;IAClD,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,GAAG,SAAS,CAEhG;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,mBAAmB,GAAG,cAAc,CAAC,GAAG,OAAO,CAG/H;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAO3F;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAStD;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC;gBAClC,SAAS,EAAE,MAAM;IAG7B,MAAM,IAAI,kBAAkB;IAU5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,gBAAgB;IAQjD,OAAO,CAAC,SAAS;IAGjB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAShD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,EAAE,KAAK,SAAK,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,SAA8B,GAAG,gBAAgB;IAoC3H,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB;IAgCjF,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,oBAAoB;IAI5B,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,gBAAgB,CAAC,EAAE,aAAa,GAAG,KAAK;IAuCjE,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM;IAQlC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,SAAS;IAuBxF,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS;IAK5B,OAAO,CAAC,QAAQ;IAGhB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ5C,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,GAAG,IAAI;IAejF,gBAAgB,IAAI,IAAI;IAyBxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAmB7C,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvE,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,aAAa;IAyBtH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAqB3H,OAAO,IAAI,QAAQ,GAAG,IAAI;IAyE1B,SAAS,IAAI,IAAI;CAmClB"}

package/dist/queue/queue.js

@@ -1,9 +1,15 @@
+import { initialSupervision, supervisionEvidence } from "./supervision.js";
+import { ownedTree, processSnapshot } from "./process-ownership.js";
 import { randomUUID } from "node:crypto";
 import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { atomicJson, fileLock, git, gitBuffer, invariant, isAlive, processGroupAlive, processIdentity, readJson, sha256, QueueStorage, } from "./storage.js";
 import { queuePolicy } from "../config/queue-policy.js";
+export function publicRun(run) {
+    return run ? { ...run, ...(run.supervision ? { supervision: supervisionEvidence(run.supervision) } : {}) } : null;
+}
 const TERMINAL = new Set(["COMPLETED", "CANCELLED", "ABORTED", "SUPERSEDED"]);
 const STOPPED = new Set(["AWAITING_HUMAN", "READY_TO_COMMIT", "BLOCKED", "TEST_FAILED", "NEEDS_HUMAN", "INTEGRATION_BLOCKED", "BASELINE_REVIEW"]);
 const SNAPSHOT_RESPONSE_MAX_BYTES = 16 * 1024;
@@ -30,6 +36,11 @@ export function matchesPath(pattern, path) {
     return new RegExp(`^${expression}${pattern.endsWith("/") ? ".*" : ""}$`).test(path);
 }
 export function validateContract(contract, config) {
+    if ([4, 5, 6, 7, 8].includes(Number(contract.schemaVersion))) {
+        const validator = createRequire(import.meta.url)("../../templates/automation/verification/contract.cjs");
+        validator.validateContract(contract, config);
+        return;
+    }
     invariant(TASK_ID.test(String(contract.id)), "Invalid task ID");
     invariant([1, 2, 3].includes(Number(contract.schemaVersion)), "Unsupported contract schema");
     invariant(contract.designApproved === true && contract.ambiguityPolicy === "BLOCKED", "An approved, bounded design is required");
@@ -56,8 +67,65 @@ export function validateContract(contract, config) {
         invariant(target && typeof target === "object" && typeof target.gradleTask === "string" && config.gradleVerification.focusedTestTasks.includes(target.gradleTask), "Focused test task is not configured");
         invariant(typeof target.filter === "string" && /^[A-Za-z0-9_.#$*-]+$/.test(target.filter), "Unsafe test filter");
     }
+    const targetKeys = contract.targetTests.map(target => `${target.gradleTask}\u0000${target.filter}`);
+    invariant(new Set(targetKeys).size === targetKeys.length, "Focused test targets must be unique");
     invariant(typeof contract.deviceTestsRequired === "boolean", "Missing device-test policy");
+    invariant(!contract.deviceTestsRequired || (config.gradleVerification.deviceTestTasks?.length ?? 0) > 0, "Device tests are required by this contract but no device test tasks are available");
     invariant(contract.testPolicy === "required" || (contract.testPolicy === "not-required" && typeof contract.testPolicyReason === "string" && contract.testPolicyReason.length >= 20), "Missing test policy");
+    if (Number(contract.schemaVersion) === 3) {
+        const verification = contract.verification;
+        invariant(verification && typeof verification === "object" && !Array.isArray(verification), "Schema V3 requires structured verification");
+        const value = verification;
+        invariant(Object.keys(value).sort().join(",") === "cases,maxPreparationFixes,version", "Invalid verification fields");
+        invariant(value.version === 1 && Number.isInteger(value.maxPreparationFixes) && Number(value.maxPreparationFixes) >= 0 && Number(value.maxPreparationFixes) <= 1, "Invalid verification policy");
+        invariant(Array.isArray(value.cases) && value.cases.length > 0, "Verification cases are required");
+        const caseIds = new Set();
+        const testIds = new Set();
+        let changedBehavior = 0;
+        for (const rawCase of value.cases) {
+            invariant(rawCase && typeof rawCase === "object" && !Array.isArray(rawCase), "Invalid verification case");
+            const testCase = rawCase;
+            const allowedFields = new Set(["id", "criterion", "intent", "before", "after", "source", "test", "expectedFailure"]);
+            invariant(Object.keys(testCase).every(key => allowedFields.has(key)), "Invalid verification case fields");
+            invariant(typeof testCase.id === "string" && /^[A-Z][A-Z0-9-]{2,63}$/.test(testCase.id) && !caseIds.has(testCase.id), "Verification case IDs must be unique and stable");
+            caseIds.add(testCase.id);
+            invariant(Number.isInteger(testCase.criterion) && Number(testCase.criterion) >= 1 && Number(testCase.criterion) <= contract.acceptanceCriteria.length, "Verification criterion reference is invalid");
+            invariant(testCase.after === "pass", "Every verification case must pass after implementation");
+            const intent = testCase.intent;
+            const before = testCase.before;
+            const source = testCase.source;
+            invariant(["preserve", "change", "observe"].includes(String(intent)), "Invalid verification intent");
+            invariant(["pass", "fail", "observe"].includes(String(before)), "Invalid pre-change expectation");
+            const test = testCase.test;
+            invariant(test && typeof test === "object" && !Array.isArray(test), "Verification test identity is required");
+            const testIdentity = test;
+            invariant(Object.keys(testIdentity).sort().join(",") === "className,name,target", "Invalid verification test fields");
+            invariant(Number.isInteger(testIdentity.target) && Number(testIdentity.target) >= 0 && Number(testIdentity.target) < contract.targetTests.length, "Verification target index is invalid");
+            invariant(typeof testIdentity.className === "string" && testIdentity.className.length > 0 && typeof testIdentity.name === "string" && testIdentity.name.length > 0, "Verification test identity is incomplete");
+            const testKey = `${testIdentity.target}\u0000${testIdentity.className}\u0000${testIdentity.name}`;
+            invariant(!testIds.has(testKey), "Verification test identities must be unique");
+            testIds.add(testKey);
+            const failure = testCase.expectedFailure;
+            if (intent === "preserve") {
+                invariant(before === "pass" && ["existingTest", "baselineCapture", "measuredFact"].includes(String(source)) && failure === undefined, "Preserved behavior must pass on a measured baseline");
+            }
+            else if (intent === "change") {
+                changedBehavior += 1;
+                invariant(before === "fail" && source === "userRequirement", "Changed behavior must fail before implementation and originate in the approved requirement");
+                invariant(failure && typeof failure === "object" && !Array.isArray(failure), "Changed behavior requires an expected failure");
+            }
+            else {
+                invariant(before === "observe" && ["userRequirement", "existingTest", "baselineCapture", "measuredFact"].includes(String(source)), "Observed behavior must declare an admissible source");
+            }
+            if (failure !== undefined) {
+                const expected = failure;
+                invariant(Object.keys(expected).every(key => ["type", "messageIncludes", "origin"].includes(key)), "Invalid expected failure fields");
+                invariant(typeof expected.type === "string" && expected.type.length > 0 && typeof expected.origin === "string" && expected.origin.length >= 12, "Expected failure type and origin are required");
+                invariant(expected.messageIncludes === undefined || (typeof expected.messageIncludes === "string" && expected.messageIncludes.length >= 3), "Expected failure message fragment is invalid");
+            }
+        }
+        invariant(changedBehavior > 0, "At least one changed behavior must provide genuine RED");
+    }
     invariant(!/replace with|TASK-EXAMPLE|\btodo\b|\btbd\b|placeholder/i.test(JSON.stringify(contract)), "Contract contains placeholders");
 }
 function draftDigest(draft) {
@@ -65,16 +133,32 @@ function draftDigest(draft) {
     return sha256(JSON.stringify(sealed));
 }
 export function draftFromItem(item) {
-    const { sequence: _sequence, approvedAt: _approvedAt, authorization: _authorization, state: _state, waitingReason: _waitingReason, runId: _runId, taskRoot: _taskRoot, request: _request, sealedDiff: _sealedDiff, sealedRunId: _sealedRunId, candidateId: _candidateId, completedCommit: _commit, approvedWorkspaceStrategy, queuePriority: _priority, ...draft } = item;
+    const { sequence: _sequence, approvedAt: _approvedAt, authorization: _authorization, state: _state, waitingReason: _waitingReason, runId: _runId, taskRoot: _taskRoot, request: _request, sealedDiff: _sealedDiff, sealedRunId: _sealedRunId, candidateId: _candidateId, completedCommit: _commit, baselineRecovery: _baselineRecovery, stageRecovery: _stageRecovery, approvedWorkspaceStrategy, queuePriority: _priority, ...draft } = item;
     return { ...draft, workspaceStrategy: approvedWorkspaceStrategy };
 }
+export function continuityPolicy(contract) {
+    return contract.schemaVersion === 8 ? contract.continuity : undefined;
+}
+export function isolatedAutoIntegrationAuthorized(item) {
+    return item.workspaceStrategy === "isolatedWorktree" && item.commitPolicy === "autoCommit" &&
+        continuityPolicy(item.contract)?.isolatedAutoIntegration === true;
+}
+export function planningInputsDigest(root, head, patterns) {
+    const entries = gitBuffer(root, ["ls-tree", "-r", "-z", head]).toString("utf8").split("\0").filter(Boolean)
+        .filter(entry => patterns.some(pattern => matchesPath(pattern, entry.slice(entry.indexOf("\t") + 1))));
+    invariant(entries.every(entry => /^100(?:644|755) blob /.test(entry)), "Planning inputs must be regular tracked files, not symlinks or submodules");
+    // Paths, modes, object IDs and the selectors themselves bind additions,
+    // deletions and previously absent files without reading the Coder worktree.
+    return sha256(JSON.stringify({ version: 1, patterns, entries }));
+}
 export function assertAuthorized(item) {
     invariant(!item.authorization.revoked, "Contract authorization was revoked");
     invariant(item.digest === draftDigest(draftFromItem(item)) && item.digest === item.authorization.digest, "Approved contract or scheduling policy changed; fresh approval required");
     invariant(item.authorization.commitPolicy === item.commitPolicy && item.authorization.pushAfterAcceptance === false, "Invalid sealed commit or no-push authorization");
     invariant(sha256(item.contractText) === item.contractSha256 && sha256(item.plan) === item.planSha256, "Approved artifacts changed");
     invariant(JSON.stringify(JSON.parse(item.contractText)) === JSON.stringify(item.contract), "Contract text and metadata disagree");
-    invariant(item.workspaceStrategy !== "isolatedWorktree" || item.commitPolicy === "humanApproval", "isolatedWorktree + autoCommit is unsupported");
+    invariant(item.workspaceStrategy !== "isolatedWorktree" || item.commitPolicy === "humanApproval" ||
+        (item.approvedWorkspaceStrategy === "isolatedWorktree" && isolatedAutoIntegrationAuthorized(item)), "isolatedWorktree + autoCommit is unsupported without explicit V8 approval");
 }
 export class TaskQueue {
     storage;
@@ -205,7 +289,11 @@ export class TaskQueue {
         const commitPolicy = input.commitPolicy ?? config.commitPolicy ?? "humanApproval";
         invariant(["inPlaceExclusive", "isolatedWorktree"].includes(workspaceStrategy), "Invalid workspace strategy");
         invariant(["humanApproval", "autoCommit"].includes(commitPolicy), "Invalid commit policy");
-        invariant(workspaceStrategy === "inPlaceExclusive" || commitPolicy === "humanApproval", "isolatedWorktree + autoCommit is unsupported");
+        invariant(workspaceStrategy === "inPlaceExclusive" || commitPolicy === "humanApproval" ||
+            isolatedAutoIntegrationAuthorized({ contract: input.contract, workspaceStrategy, commitPolicy }), "isolatedWorktree + autoCommit is unsupported without explicit V8 approval");
+        const continuity = continuityPolicy(input.contract);
+        invariant(!continuity?.isolatedAutoIntegration || (workspaceStrategy === "isolatedWorktree" && commitPolicy === "autoCommit"), "Isolated auto integration requires matching workspace and commit policies");
+        const planningInputsSha256 = continuity ? planningInputsDigest(this.storage.root, input.planningHead, continuity.planningInputs) : undefined;
         const dependencies = input.dependsOn ?? [];
         invariant(dependencies.every(id => TASK_ID.test(id) && id !== input.contract.id) && new Set(dependencies).size === dependencies.length, "Invalid task dependencies");
         const priority = input.priority ?? 0;
@@ -216,7 +304,7 @@ export class TaskQueue {
         return this.storage.transaction(document => {
             const taskId = String(input.contract.id);
             const version = Math.max(0, ...document.drafts.filter(draft => draft.taskId === taskId).map(draft => draft.version)) + 1;
-            const sealed = { ...(proposalApproval ? { proposalApproval } : {}), key: `${taskId}@${version}`, taskId, version, contract: input.contract, contractText,
+            const sealed = { ...(proposalApproval ? { proposalApproval } : {}), ...(planningInputsSha256 ? { planningInputsSha256 } : {}), key: `${taskId}@${version}`, taskId, version, contract: input.contract, contractText,
                 plan: input.plan, contractSha256: sha256(contractText), planSha256: sha256(input.plan),
                 planningHead: input.planningHead, targetBranch: input.targetBranch, sourceRoot: this.storage.root,
                 workspaceStrategy, commitPolicy, notBefore, dependsOn: dependencies, priority, createdAt: now() };
@@ -226,9 +314,12 @@ export class TaskQueue {
         });
     }
     approvalText(draft) {
-        return draft.commitPolicy === "autoCommit"
+        const text = draft.commitPolicy === "autoCommit"
             ? `批准入队 ${draft.key}：通过构建、全量单测和独立 Review 后自动本地提交并集成，不推送远程。`
             : `批准入队 ${draft.key}：执行后等待人工确认提交，不推送远程。`;
+        const policy = continuityPolicy(draft.contract);
+        return policy ? text + (policy.isolatedAutoIntegration ? "隔离工作区自动集成已授权。" : "") +
+            (policy.planningRefresh === "completedQueueTasks" ? "仅允许已完成队列提交且声明的规划输入未变化时刷新基线。" : "规划基线变化须重新审批。") : text;
     }
     enqueue(key, digest, approval, proof) {
         this.config();
@@ -292,6 +383,11 @@ export class TaskQueue {
         this.storage.transaction(document => {
             const run = document.active;
             invariant(run, "No active execution to recover");
+            if (run.supervision) {
+                invariant(!run.supervision.owner || !isAlive(run.supervision.owner), "Worker supervisor is still alive");
+                invariant(run.worker, "Supervised Worker launch is ambiguous; preserve reservation");
+                invariant(ownedTree(processSnapshot(run.supervision.token), run.worker, run.supervision.known).length === 0, "Supervised descendants are still alive");
+            }
             if (run.worker) {
                 invariant(!isAlive(run.worker) && !processGroupAlive(run.worker.pid), "Executor or its children are still alive; preserve the execution slot");
             }
@@ -312,11 +408,24 @@ export class TaskQueue {
     details(key) {
         const item = this.item(key);
         const evidence = {};
-        for (const name of ["acceptance-report", "review", "full-test-verification", "commit-transaction", "integration", "planning-baseline"]) {
+        for (const name of ["acceptance-report", "review", "full-test-verification", "commit-transaction", "integration", "planning-baseline",
+            "baseline-inventory", "baseline-recovery", "test-preflight", "test-manifest", "green-inventory", "inventory-status"]) {
             const path = join(this.storage.runtime, "evidence", item.taskId, `${name}.json`);
             if (existsSync(path))
                 evidence[name] = readJson(path);
         }
+        const document = this.storage.read();
+        const run = document.active?.key === item.key ? document.active : [...document.runs].reverse().find(candidate => candidate.key === item.key);
+        if (run?.supervision)
+            evidence.workerSupervision = supervisionEvidence(run.supervision);
+        const stages = {};
+        for (const phase of ["red", "green", "review"]) {
+            const file = join(this.storage.runtime, "evidence", item.taskId, "stage-recovery", `${phase}.json`);
+            if (existsSync(file))
+                stages[phase] = readJson(file);
+        }
+        if (Object.keys(stages).length)
+            evidence.stageRecovery = stages;
         return { ...item, currentTargetHead: git(item.sourceRoot, ["rev-parse", `refs/heads/${item.targetBranch}`]), evidence };
     }
     notify(document, item, message) {
@@ -353,6 +462,7 @@ export class TaskQueue {
         });
     }
     request(key, kind, approval, candidate, proof) {
+        invariant(kind !== "retry-baseline", "Automatic baseline recovery is reserved for the approved scheduler policy");
         const config = this.config();
         this.storage.transaction(document => {
             const item = this.findItem(document, key);
@@ -405,15 +515,38 @@ export class TaskQueue {
                 return null;
             }
             const requests = document.items.filter(item => item.request).sort((a, b) => a.sequence - b.sequence);
+            const retries = document.items.filter(item => !item.request && item.state === "BLOCKED" && Number(item.contract.schemaVersion) >= 5 && item.baselineRecovery?.nextRunAt != null)
+                .sort((a, b) => a.sequence - b.sequence);
             const pending = document.items.filter(item => item.state === "QUEUED").sort((a, b) => b.queuePriority - a.queuePriority || a.sequence - b.sequence);
-            for (const item of [...requests, ...pending]) {
+            for (const item of [...requests, ...retries, ...pending]) {
                 item.waitingReason = null;
+                const retry = !item.request && item.state === "BLOCKED" ? item.baselineRecovery : null;
+                if (retry) {
+                    if (Date.now() >= retry.deadline) {
+                        item.waitingReason = "Baseline recovery elapsed-time budget exhausted";
+                        retry.nextRunAt = null;
+                        continue;
+                    }
+                    if (retry.nextRunAt === null || Date.now() < retry.nextRunAt) {
+                        item.waitingReason = `Baseline recovery backoff until ${new Date(retry.nextRunAt).toISOString()}`;
+                        continue;
+                    }
+                    if (item.sealedRunId !== item.runId || !item.sealedDiff) {
+                        item.waitingReason = "Baseline candidate was not sealed; explicit recovery required";
+                        continue;
+                    }
+                }
                 if (fixed && fixed.key !== item.key) {
                     item.waitingReason = `Waiting for ${fixed.taskId}: ${fixed.state}`;
                     continue;
                 }
-                if (item.commitPolicy === "autoCommit" && config.workspaceStrategy === "isolatedWorktree") {
-                    item.waitingReason = "isolatedWorktree + autoCommit is unsupported; fresh contract approval is required";
+                if (item.commitPolicy === "autoCommit" && config.workspaceStrategy === "isolatedWorktree" &&
+                    !(item.approvedWorkspaceStrategy === "isolatedWorktree" && isolatedAutoIntegrationAuthorized(item))) {
+                    item.waitingReason = "isolatedWorktree + autoCommit is unsupported without explicit V8 approval; fresh contract approval is required";
+                    continue;
+                }
+                if (continuityPolicy(item.contract) && item.approvedWorkspaceStrategy !== config.workspaceStrategy) {
+                    item.waitingReason = "V8 workspace strategy changed; restore the approved policy or approve a revised contract";
                     continue;
                 }
                 if (!item.request && item.notBefore && Date.parse(item.notBefore) > Date.now()) {
@@ -425,7 +558,7 @@ export class TaskQueue {
                     item.waitingReason = `Waiting for dependency ${dependency} to complete local integration`;
                     continue;
                 }
-                if (!item.request && config.workspaceStrategy === "isolatedWorktree" && (retained.length >= (config.queue?.maxWorkspaces ?? 3) || workspaceBytes >= (config.queue?.maxWorkspaceBytes ?? 20 * 1024 ** 3))) {
+                if (!item.request && !retry && config.workspaceStrategy === "isolatedWorktree" && (retained.length >= (config.queue?.maxWorkspaces ?? 3) || workspaceBytes >= (config.queue?.maxWorkspaceBytes ?? 20 * 1024 ** 3))) {
                     item.waitingReason = "Isolated workspace capacity or disk limit reached";
                     continue;
                 }
@@ -448,7 +581,13 @@ export class TaskQueue {
                 }
                 const launcher = processIdentity(process.pid);
                 invariant(launcher, "Cannot establish execution launcher identity");
-                const run = { id: randomUUID(), key: item.key, kind: item.request?.kind ?? "execute", createdAt: now(), launcher, worker: null, outcome: null };
+                const run = { id: randomUUID(), key: item.key, kind: item.request?.kind ?? (retry ? "retry-baseline" : "execute"), createdAt: now(), launcher, worker: null, outcome: null };
+                // Consume the scheduled wake before launch. A crash or rejected input
+                // must not replay it indefinitely without a new durable failed attempt.
+                if (item.baselineRecovery && (run.kind === "retry-baseline" || run.kind === "resume"))
+                    item.baselineRecovery.nextRunAt = null;
+                if (Number(item.contract.schemaVersion) >= 6)
+                    run.supervision = initialSupervision(item.contract.execution, Date.now());
                 document.active = run;
                 document.strategy = config.workspaceStrategy;
                 item.runId = run.id;
@@ -469,6 +608,8 @@ export class TaskQueue {
                 return;
             const item = document.items.find(item => item.key === run.key);
             invariant(item, "Active execution has no contract");
+            if (run.supervision && run.supervision.state !== "EXITED")
+                return;
             if (!run.worker) {
                 // A crash between reservation and spawn is ambiguous, never requeue it.
                 if (Date.now() - Date.parse(run.createdAt) > 30000)