@jinn-network/client 0.1.9 → 0.2.0-canary.0b79cd5d

package/dist/solver-types/jinn-repo-live-auto.d.ts

@@ -0,0 +1,206 @@
+/**
+ * jinn-repo.v1 LIVE-ISSUE generator (issue #1893, Stage 1 Part 4 of
+ * spec/2026-07-20-autopilot-marketplace-execution.md §"Generator").
+ *
+ * Polls Jinn-Network/mono issues carrying the `engine:marketplace` label
+ * (applied host-side by Autopilot —
+ * `packages/autopilot/src/dispatcher/marketplace-route.ts`) and turns each
+ * into a `source: 'live-issue'` jinn-repo.v1 Task. The handoff between
+ * Autopilot and this generator is entirely GitHub state — the label
+ * (readiness signal) plus ONE hidden JSON-in-a-fenced-code-block "marker"
+ * comment carrying the frozen snapshot (title, body, base_commit, effort).
+ * This module never talks to Autopilot directly; it only reads what
+ * Autopilot wrote, via plain (optionally-authenticated) GitHub REST calls.
+ *
+ * ── WIRE FORMAT (must track marketplace-route.ts byte-for-byte) ──────────
+ *
+ * A marker comment body starts with `<!-- jinn-marketplace-snapshot:v1` and
+ * contains exactly one fenced ```json code block whose content parses as
+ * `{schemaVersion: "jinn-marketplace-snapshot.v1", issueNumber,
+ * snapshotHash, baseCommit, effort, title, body}`. There is deliberately NO
+ * shared code between `packages/autopilot` and `client` (the client package
+ * must not depend on `@jinn-network/autopilot`, and autopilot must not
+ * depend on `@jinn-network/client` — see `delivery-pr-bridge.ts`'s module
+ * doc for the identical trade elsewhere in this codebase); the coupling is
+ * the documented wire format only, re-parsed independently here.
+ *
+ * ── Marker authorship trust (issue #1893 Finding 1 — CRITICAL) ────────────
+ *
+ * `Jinn-Network/mono` is a public repo: ANY GitHub account can comment on a
+ * labeled issue with a body that *looks* like a marker (same
+ * `<!-- jinn-marketplace-snapshot:v1` prefix, same fenced JSON shape) but
+ * carries attacker-chosen `base_commit`/`problem_statement`/`effort`. Left
+ * unchecked, this generator would mint a FUNDED, claimable on-chain task from
+ * ANY such forgery — the daemon is the wallet-holder, so this is the one
+ * place the trust boundary actually matters. `parseMarketplaceMarker` alone
+ * only validates *shape*; it says nothing about *authorship*.
+ *
+ * Every comment is therefore filtered through `isTrustedMarkerAuthor` BEFORE
+ * `parseMarketplaceMarker` is even attempted (see the per-issue loop below).
+ * Trust is established one of two ways, both configured on
+ * `JinnRepoLiveGeneratorConfig`:
+ *
+ *  - `markerAuthorLogin` — an exact GitHub login (case-insensitive) the
+ *    comment's `user.login` (REST field) must match.
+ *  - `markerTrustedAssociations` — a set of REST `author_association` values
+ *    (`OWNER`, `MEMBER`, `COLLABORATOR`, ...) one of which the comment must
+ *    carry. This MUST mirror the set
+ *    `packages/autopilot/src/dispatcher/marketplace-route.ts` trusts
+ *    autopilot-side (currently hardcoded there to `OWNER`/`MEMBER`/
+ *    `COLLABORATOR` — see that module's "Marker authorship trust" doc) or a
+ *    legitimate marker will be silently rejected. There is deliberately no
+ *    shared import between the two packages (see below); the two constant
+ *    sets must be kept in agreement by hand.
+ *
+ * **Fail closed.** If NEITHER `markerAuthorLogin` nor
+ * `markerTrustedAssociations` is configured, `isTrustedMarkerAuthor` trusts
+ * NOTHING — every comment is treated as untrusted, so no marker is ever
+ * found and no task is ever posted. A missing/misconfigured trust gate must
+ * never silently degrade to "trust everyone"; it degrades to "trust no one,"
+ * which is loudly visible (labeled issues pile up with a
+ * "no valid snapshot marker" warning) rather than silently exploitable.
+ *
+ * ── Dedup / re-post (the daemon-side half of "cancel + re-post on edit") ─
+ *
+ * This generator's own state file (mirrors `jinn-repo-auto.ts`'s `posted`
+ * counters) tracks the last-posted snapshot hash PER ISSUE NUMBER. A tick
+ * emits a fresh Task for an issue only when its CURRENT marker hash differs
+ * from the last one this generator posted for that issue — a material edit
+ * (new hash) naturally produces a new Task; an unchanged snapshot is a
+ * no-op. `<issueNumber>:<snapshotHash>` is also carried on
+ * `task.eligibility` (mirrors `eligibility.instance_id` on the retrospective
+ * generator) as the intended bucket key for the posting layer's own
+ * once-per-bucket dedup — see `client/src/main.ts`'s `bucketKeyForTask`.
+ *
+ * ── Retraction (soft cancel only) ─────────────────────────────────────────
+ *
+ * There is no daemon-side "cancel" logic at all: retraction is Autopilot
+ * removing the label. Once removed, the issue is simply absent from the
+ * next poll — no new Task is ever built for it again (unless re-labeled with
+ * a fresh marker). A Task already posted before retraction is NOT withdrawn
+ * — there is no on-chain cancel path (`TaskCoordinator`'s `Cancelled` enum
+ * has zero transitions) — it stays open, bounded by `claimPolicy.maxClaims
+ * = 1`, until claimed or its window lapses.
+ *
+ * `claimPolicy.maxClaims = 1`: no racing claims for a live issue (spec Open
+ * Decisions: "Leaning maxClaims=1 + re-post while the fleet is closed") —
+ * deliberately narrower than the retrospective generator's parallel-racing
+ * default (`JINN_REPO_V1_SOLVER_NET_CONTRACT.claimPolicyDefaults`).
+ */
+import { z } from 'zod/v3';
+import type { TaskGenerator } from '../tasks/sources.js';
+import type { LaunchedSolverNetRecord } from '../solvernets/store.js';
+declare const MarkerPayloadSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"jinn-marketplace-snapshot.v1">;
+    issueNumber: z.ZodNumber;
+    snapshotHash: z.ZodString;
+    baseCommit: z.ZodString;
+    effort: z.ZodNullable<z.ZodString>;
+    title: z.ZodString;
+    body: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    schemaVersion: "jinn-marketplace-snapshot.v1";
+    title: string;
+    body: string;
+    baseCommit: string;
+    effort: string | null;
+    issueNumber: number;
+    snapshotHash: string;
+}, {
+    schemaVersion: "jinn-marketplace-snapshot.v1";
+    title: string;
+    body: string;
+    baseCommit: string;
+    effort: string | null;
+    issueNumber: number;
+    snapshotHash: string;
+}>;
+export type MarketplaceMarkerPayload = z.infer<typeof MarkerPayloadSchema>;
+/**
+ * Parse a marker comment body; returns null for anything that is not ours,
+ * malformed, or carries a `base_commit` this generator cannot use (never
+ * throws — a bad/foreign comment is just not a marker, never a hard error).
+ */
+export declare function parseMarketplaceMarker(commentBody: string): MarketplaceMarkerPayload | null;
+export type GitHubFetch = (input: string, init?: {
+    headers?: Record<string, string>;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+interface GhComment {
+    body?: string;
+    /** REST field: `GET /repos/{repo}/issues/{n}/comments` returns `user.login`. */
+    user?: {
+        login?: string;
+    };
+    /** REST field: the commenter's GitHub-computed relationship to the repo
+     *  (`OWNER`, `MEMBER`, `COLLABORATOR`, `CONTRIBUTOR`, `NONE`, ...). See
+     *  module doc "Marker authorship trust". */
+    author_association?: string;
+}
+/**
+ * Trust gate for "is this comment's author allowed to author a marker" —
+ * see module doc "Marker authorship trust" (issue #1893 Finding 1). Fails
+ * closed: with neither `markerAuthorLogin` nor `markerTrustedAssociations`
+ * configured, nothing is trusted.
+ */
+export declare function isTrustedMarkerAuthor(comment: GhComment, markerAuthorLogin: string | undefined, markerTrustedAssociations: readonly string[] | undefined): boolean;
+export interface JinnRepoLiveGeneratorConfig {
+    stateDir: string;
+    solverNetManifestCid?: string;
+    /** The opt-in label Autopilot applies. Default `engine:marketplace`. */
+    label?: string;
+    /** Default `Jinn-Network/mono`. */
+    repo?: string;
+    /** Max tasks emitted per tick (default 5). */
+    maxPerTick?: number;
+    /** Injectable for tests — never real network in a test process. */
+    fetchImpl?: GitHubFetch;
+    /** Optional GitHub token — public reads work unauthenticated, but a token
+     *  raises the REST rate-limit ceiling for a long-lived poller. */
+    token?: string;
+    claimLeaseTtlSeconds?: number;
+    /**
+     * Exact GitHub login (case-insensitive) a marker comment's author must
+     * match. Takes precedence over `markerTrustedAssociations` when both are
+     * set. See module doc "Marker authorship trust" (issue #1893 Finding 1) —
+     * with NEITHER this nor `markerTrustedAssociations` configured, every
+     * comment is untrusted and no task is ever posted (fail closed).
+     */
+    markerAuthorLogin?: string;
+    /**
+     * Allowed `author_association` values (GitHub REST enum: `OWNER`,
+     * `MEMBER`, `COLLABORATOR`, `CONTRIBUTOR`, `NONE`, ...) for a marker
+     * comment's author. MUST mirror the set
+     * `packages/autopilot/src/dispatcher/marketplace-route.ts` trusts
+     * autopilot-side (currently `OWNER`/`MEMBER`/`COLLABORATOR`) or a
+     * legitimate marker will be silently rejected. See module doc "Marker
+     * authorship trust".
+     */
+    markerTrustedAssociations?: string[];
+    /** Solve / posting window duration in ms (default: six hours). */
+    postingWindowMs?: number;
+}
+export declare function makeJinnRepoLiveGenerator(config: JinnRepoLiveGeneratorConfig): TaskGenerator;
+export interface MakeJinnRepoLiveGeneratorForLaunchedRecordOpts {
+    recordRef: {
+        current: LaunchedSolverNetRecord;
+    };
+    staticConfig?: {
+        stateDir?: string;
+        label?: string;
+        repo?: string;
+        maxPerTick?: number;
+        fetchImpl?: GitHubFetch;
+        token?: string;
+        /** See `JinnRepoLiveGeneratorConfig.markerAuthorLogin` — issue #1893 Finding 1. */
+        markerAuthorLogin?: string;
+        /** See `JinnRepoLiveGeneratorConfig.markerTrustedAssociations` — issue #1893 Finding 1. */
+        markerTrustedAssociations?: string[];
+        postingWindowMs?: number;
+    };
+}
+export declare function makeJinnRepoLiveGeneratorForLaunchedRecord(opts: MakeJinnRepoLiveGeneratorForLaunchedRecordOpts): TaskGenerator;
+export {};

package/dist/solver-types/jinn-repo-live-auto.js

@@ -0,0 +1,351 @@
+/**
+ * jinn-repo.v1 LIVE-ISSUE generator (issue #1893, Stage 1 Part 4 of
+ * spec/2026-07-20-autopilot-marketplace-execution.md §"Generator").
+ *
+ * Polls Jinn-Network/mono issues carrying the `engine:marketplace` label
+ * (applied host-side by Autopilot —
+ * `packages/autopilot/src/dispatcher/marketplace-route.ts`) and turns each
+ * into a `source: 'live-issue'` jinn-repo.v1 Task. The handoff between
+ * Autopilot and this generator is entirely GitHub state — the label
+ * (readiness signal) plus ONE hidden JSON-in-a-fenced-code-block "marker"
+ * comment carrying the frozen snapshot (title, body, base_commit, effort).
+ * This module never talks to Autopilot directly; it only reads what
+ * Autopilot wrote, via plain (optionally-authenticated) GitHub REST calls.
+ *
+ * ── WIRE FORMAT (must track marketplace-route.ts byte-for-byte) ──────────
+ *
+ * A marker comment body starts with `<!-- jinn-marketplace-snapshot:v1` and
+ * contains exactly one fenced ```json code block whose content parses as
+ * `{schemaVersion: "jinn-marketplace-snapshot.v1", issueNumber,
+ * snapshotHash, baseCommit, effort, title, body}`. There is deliberately NO
+ * shared code between `packages/autopilot` and `client` (the client package
+ * must not depend on `@jinn-network/autopilot`, and autopilot must not
+ * depend on `@jinn-network/client` — see `delivery-pr-bridge.ts`'s module
+ * doc for the identical trade elsewhere in this codebase); the coupling is
+ * the documented wire format only, re-parsed independently here.
+ *
+ * ── Marker authorship trust (issue #1893 Finding 1 — CRITICAL) ────────────
+ *
+ * `Jinn-Network/mono` is a public repo: ANY GitHub account can comment on a
+ * labeled issue with a body that *looks* like a marker (same
+ * `<!-- jinn-marketplace-snapshot:v1` prefix, same fenced JSON shape) but
+ * carries attacker-chosen `base_commit`/`problem_statement`/`effort`. Left
+ * unchecked, this generator would mint a FUNDED, claimable on-chain task from
+ * ANY such forgery — the daemon is the wallet-holder, so this is the one
+ * place the trust boundary actually matters. `parseMarketplaceMarker` alone
+ * only validates *shape*; it says nothing about *authorship*.
+ *
+ * Every comment is therefore filtered through `isTrustedMarkerAuthor` BEFORE
+ * `parseMarketplaceMarker` is even attempted (see the per-issue loop below).
+ * Trust is established one of two ways, both configured on
+ * `JinnRepoLiveGeneratorConfig`:
+ *
+ *  - `markerAuthorLogin` — an exact GitHub login (case-insensitive) the
+ *    comment's `user.login` (REST field) must match.
+ *  - `markerTrustedAssociations` — a set of REST `author_association` values
+ *    (`OWNER`, `MEMBER`, `COLLABORATOR`, ...) one of which the comment must
+ *    carry. This MUST mirror the set
+ *    `packages/autopilot/src/dispatcher/marketplace-route.ts` trusts
+ *    autopilot-side (currently hardcoded there to `OWNER`/`MEMBER`/
+ *    `COLLABORATOR` — see that module's "Marker authorship trust" doc) or a
+ *    legitimate marker will be silently rejected. There is deliberately no
+ *    shared import between the two packages (see below); the two constant
+ *    sets must be kept in agreement by hand.
+ *
+ * **Fail closed.** If NEITHER `markerAuthorLogin` nor
+ * `markerTrustedAssociations` is configured, `isTrustedMarkerAuthor` trusts
+ * NOTHING — every comment is treated as untrusted, so no marker is ever
+ * found and no task is ever posted. A missing/misconfigured trust gate must
+ * never silently degrade to "trust everyone"; it degrades to "trust no one,"
+ * which is loudly visible (labeled issues pile up with a
+ * "no valid snapshot marker" warning) rather than silently exploitable.
+ *
+ * ── Dedup / re-post (the daemon-side half of "cancel + re-post on edit") ─
+ *
+ * This generator's own state file (mirrors `jinn-repo-auto.ts`'s `posted`
+ * counters) tracks the last-posted snapshot hash PER ISSUE NUMBER. A tick
+ * emits a fresh Task for an issue only when its CURRENT marker hash differs
+ * from the last one this generator posted for that issue — a material edit
+ * (new hash) naturally produces a new Task; an unchanged snapshot is a
+ * no-op. `<issueNumber>:<snapshotHash>` is also carried on
+ * `task.eligibility` (mirrors `eligibility.instance_id` on the retrospective
+ * generator) as the intended bucket key for the posting layer's own
+ * once-per-bucket dedup — see `client/src/main.ts`'s `bucketKeyForTask`.
+ *
+ * ── Retraction (soft cancel only) ─────────────────────────────────────────
+ *
+ * There is no daemon-side "cancel" logic at all: retraction is Autopilot
+ * removing the label. Once removed, the issue is simply absent from the
+ * next poll — no new Task is ever built for it again (unless re-labeled with
+ * a fresh marker). A Task already posted before retraction is NOT withdrawn
+ * — there is no on-chain cancel path (`TaskCoordinator`'s `Cancelled` enum
+ * has zero transitions) — it stays open, bounded by `claimPolicy.maxClaims
+ * = 1`, until claimed or its window lapses.
+ *
+ * `claimPolicy.maxClaims = 1`: no racing claims for a live issue (spec Open
+ * Decisions: "Leaning maxClaims=1 + re-post while the fleet is closed") —
+ * deliberately narrower than the retrospective generator's parallel-racing
+ * default (`JINN_REPO_V1_SOLVER_NET_CONTRACT.claimPolicyDefaults`).
+ */
+import { randomUUID } from 'node:crypto';
+import { readFile, writeFile, mkdir, rename } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod/v3';
+import { JinnRepoLiveIssueTaskSchema } from './jinn-repo.js';
+import { resolvePostingWindowMs } from './_jinn-repo-posting-window.js';
+const SOLVER_TYPE = 'jinn-repo.v1';
+const CONTRACT_ID = 'jinn-repo';
+const CONTRACT_VERSION = 'v1';
+const DEFAULT_LABEL = 'engine:marketplace';
+const DEFAULT_REPO = 'Jinn-Network/mono';
+const DEFAULT_MAX_PER_TICK = 5;
+/** Claim lease, mirrors the jinn-repo contract default (coding tasks need more time). */
+const DEFAULT_CLAIM_LEASE_TTL_SECONDS = 60 * 60;
+const STATE_SCHEMA_VERSION = 'jinn-repo-live-generator-state.v1';
+// ── Marker wire format (mirrors marketplace-route.ts — see module doc) ────
+const MARKER_SCHEMA_VERSION = 'jinn-marketplace-snapshot.v1';
+const MARKER_PREFIX = '<!-- jinn-marketplace-snapshot:v1';
+const JSON_FENCE_RE = /```json\n([\s\S]*?)\n```/;
+const MarkerPayloadSchema = z.object({
+    schemaVersion: z.literal(MARKER_SCHEMA_VERSION),
+    issueNumber: z.number().int().positive(),
+    snapshotHash: z.string().min(1),
+    baseCommit: z.string().regex(/^[0-9a-f]{40}$/, 'base_commit must be a 40-char hex SHA'),
+    effort: z.string().nullable(),
+    title: z.string(),
+    body: z.string(),
+});
+/**
+ * Parse a marker comment body; returns null for anything that is not ours,
+ * malformed, or carries a `base_commit` this generator cannot use (never
+ * throws — a bad/foreign comment is just not a marker, never a hard error).
+ */
+export function parseMarketplaceMarker(commentBody) {
+    if (!commentBody.startsWith(MARKER_PREFIX))
+        return null;
+    const m = JSON_FENCE_RE.exec(commentBody);
+    if (!m)
+        return null;
+    let raw;
+    try {
+        raw = JSON.parse(m[1]);
+    }
+    catch {
+        return null;
+    }
+    const parsed = MarkerPayloadSchema.safeParse(raw);
+    return parsed.success ? parsed.data : null;
+}
+/**
+ * Trust gate for "is this comment's author allowed to author a marker" —
+ * see module doc "Marker authorship trust" (issue #1893 Finding 1). Fails
+ * closed: with neither `markerAuthorLogin` nor `markerTrustedAssociations`
+ * configured, nothing is trusted.
+ */
+export function isTrustedMarkerAuthor(comment, markerAuthorLogin, markerTrustedAssociations) {
+    if (markerAuthorLogin) {
+        return (comment.user?.login ?? '').toLowerCase() === markerAuthorLogin.toLowerCase();
+    }
+    if (markerTrustedAssociations && markerTrustedAssociations.length > 0) {
+        return comment.author_association != null && markerTrustedAssociations.includes(comment.author_association);
+    }
+    return false; // fail closed — no trust config configured ⇒ trust nothing
+}
+async function fetchJson(fetchImpl, url, headers, resource) {
+    let response;
+    try {
+        response = await fetchImpl(url, { headers });
+    }
+    catch (err) {
+        throw new Error(`GitHub ${resource} request failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!response || !response.ok) {
+        throw new Error(`GitHub ${resource} request failed (status ${String(response?.status)})`);
+    }
+    try {
+        return await response.json();
+    }
+    catch (err) {
+        throw new Error(`malformed GitHub ${resource} response: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+function stateFilePath(stateDir) {
+    return join(stateDir, 'jinn-repo-live-generator-state.json');
+}
+async function readState(stateDir) {
+    try {
+        const raw = await readFile(stateFilePath(stateDir), 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object' && parsed.issues)
+            return parsed;
+    }
+    catch {
+        // absent or unreadable — start empty
+    }
+    return { schemaVersion: STATE_SCHEMA_VERSION, issues: {} };
+}
+async function writeStateAtomic(stateDir, state) {
+    await mkdir(stateDir, { recursive: true });
+    const target = stateFilePath(stateDir);
+    const tmp = `${target}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(tmp, JSON.stringify(state, null, 2));
+    await rename(tmp, target);
+}
+// ── Task assembly ──────────────────────────────────────────────────────────
+const EFFORT_ENUM = ['low', 'medium', 'high', 'xhigh', 'max'];
+/** Board Effort ('Low'|'XHigh'|...) or an already-lowercase marker value → the schema enum. */
+function normalizeEffort(effort) {
+    if (effort == null)
+        return undefined;
+    const lowered = effort.toLowerCase();
+    return EFFORT_ENUM.includes(lowered) ? lowered : undefined;
+}
+function instanceIdFor(repo, issueNumber, hash) {
+    const repoSlug = repo.replace('/', '__');
+    return `${repoSlug}-issue-${issueNumber}-${hash.slice(0, 12)}`;
+}
+function jinnRepoLiveClaimPolicy(claimLeaseTtlSeconds) {
+    return {
+        mode: 'exclusive',
+        maxClaims: 1,
+        maxClaimsPerOperator: 1,
+        claimLeaseTtlSeconds,
+    };
+}
+export function makeJinnRepoLiveGenerator(config) {
+    const label = config.label ?? DEFAULT_LABEL;
+    const repo = config.repo ?? DEFAULT_REPO;
+    const maxPerTick = config.maxPerTick ?? DEFAULT_MAX_PER_TICK;
+    const postingWindowMs = resolvePostingWindowMs(config.postingWindowMs);
+    const fetchImpl = config.fetchImpl ?? fetch;
+    const claimPolicy = jinnRepoLiveClaimPolicy(config.claimLeaseTtlSeconds ?? DEFAULT_CLAIM_LEASE_TTL_SECONDS);
+    const markerAuthorLogin = config.markerAuthorLogin;
+    const markerTrustedAssociations = config.markerTrustedAssociations;
+    const headers = {
+        Accept: 'application/vnd.github+json',
+        ...(config.token ? { Authorization: `Bearer ${config.token}` } : {}),
+    };
+    return async () => {
+        const state = await readState(config.stateDir);
+        let labeled;
+        try {
+            const url = `https://api.github.com/repos/${repo}/issues?labels=${encodeURIComponent(label)}` +
+                '&state=open&per_page=100';
+            const raw = await fetchJson(fetchImpl, url, headers, 'labeled issues');
+            labeled = Array.isArray(raw) ? raw : [];
+        }
+        catch (err) {
+            console.warn(`[jinn-repo-live-gen] labeled-issue poll failed (skipping this tick): ${err instanceof Error ? err.message : String(err)}`);
+            return null;
+        }
+        const now = Date.now();
+        const windowEndTs = now + postingWindowMs;
+        const tasks = [];
+        for (const entry of labeled) {
+            if (tasks.length >= maxPerTick)
+                break;
+            let comments;
+            try {
+                const commentsUrl = `https://api.github.com/repos/${repo}/issues/${entry.number}/comments?per_page=100`;
+                const raw = await fetchJson(fetchImpl, commentsUrl, headers, `comments for #${entry.number}`);
+                comments = Array.isArray(raw) ? raw : [];
+            }
+            catch (err) {
+                console.warn(`[jinn-repo-live-gen] comment fetch failed for #${entry.number} (skipping this tick): ` +
+                    `${err instanceof Error ? err.message : String(err)}`);
+                continue;
+            }
+            // Trust gate BEFORE shape parsing (issue #1893 Finding 1): an untrusted
+            // comment is never even offered to parseMarketplaceMarker, no matter
+            // how marker-shaped its body is.
+            const trustedComments = comments.filter((c) => isTrustedMarkerAuthor(c, markerAuthorLogin, markerTrustedAssociations));
+            const marker = trustedComments
+                .map((c) => (c.body != null ? parseMarketplaceMarker(c.body) : null))
+                .find((m) => m != null) ?? null;
+            if (marker == null) {
+                const forged = comments.some((c) => !isTrustedMarkerAuthor(c, markerAuthorLogin, markerTrustedAssociations) &&
+                    c.body != null &&
+                    parseMarketplaceMarker(c.body) != null);
+                if (forged) {
+                    // A marker-shaped comment exists but its author is untrusted —
+                    // never throws, but distinct from "no marker yet" for observability.
+                    console.warn(`[jinn-repo-live-gen] #${entry.number} carries a marker-shaped comment from an untrusted author — ignored`);
+                }
+                else {
+                    // Labeled but no valid marker yet (label/comment race, or a foreign
+                    // label reuse) — never throws, just skipped with a log; the next
+                    // tick re-checks.
+                    console.warn(`[jinn-repo-live-gen] #${entry.number} carries "${label}" but no valid snapshot marker — skipped`);
+                }
+                continue;
+            }
+            const stateKey = String(marker.issueNumber);
+            if (state.issues[stateKey]?.lastPostedHash === marker.snapshotHash)
+                continue; // already posted this exact snapshot
+            const instanceId = instanceIdFor(repo, marker.issueNumber, marker.snapshotHash);
+            const effort = normalizeEffort(marker.effort);
+            const specDoc = JinnRepoLiveIssueTaskSchema.parse({
+                schemaVersion: 'jinn-repo.v1',
+                source: 'live-issue',
+                instance_id: instanceId,
+                repo,
+                base_commit: marker.baseCommit,
+                language: 'typescript',
+                problem_statement: `${marker.title}\n\n${marker.body}`,
+                issue_number: marker.issueNumber,
+                ...(effort ? { effort } : {}),
+            });
+            tasks.push({
+                id: randomUUID(),
+                description: `Jinn repo live issue #${marker.issueNumber}: ${marker.title}`,
+                solverType: SOLVER_TYPE,
+                contractId: CONTRACT_ID,
+                contractVersion: CONTRACT_VERSION,
+                ...(config.solverNetManifestCid ? { solverNetManifestCid: config.solverNetManifestCid } : {}),
+                role: 'restoration',
+                window: { startTs: now, endTs: windowEndTs },
+                claimPolicy,
+                spec: specDoc,
+                eligibility: { issue_number: marker.issueNumber, snapshot_hash: marker.snapshotHash },
+            });
+            state.issues[stateKey] = { lastPostedHash: marker.snapshotHash };
+        }
+        if (tasks.length === 0)
+            return null;
+        await writeStateAtomic(config.stateDir, state);
+        return tasks;
+    };
+}
+function defaultStateDir() {
+    const stateRoot = process.env['JINN_STATE_DIR'];
+    if (stateRoot)
+        return join(stateRoot, 'jinn-repo-live');
+    return join(process.env['HOME'] ?? '', '.jinn-client', 'jinn-repo-live');
+}
+export function makeJinnRepoLiveGeneratorForLaunchedRecord(opts) {
+    const { recordRef, staticConfig = {} } = opts;
+    const stateDir = staticConfig.stateDir ?? process.env['JINN_JINN_REPO_LIVE_STATE_DIR'] ?? defaultStateDir();
+    const postingWindowMs = resolvePostingWindowMs(staticConfig.postingWindowMs ??
+        recordRef.current.generatorConfig?.['posting_window_ms']);
+    const generator = makeJinnRepoLiveGenerator({
+        stateDir,
+        solverNetManifestCid: recordRef.current.manifestCid,
+        label: staticConfig.label,
+        repo: staticConfig.repo,
+        maxPerTick: staticConfig.maxPerTick,
+        fetchImpl: staticConfig.fetchImpl,
+        token: staticConfig.token,
+        markerAuthorLogin: staticConfig.markerAuthorLogin,
+        markerTrustedAssociations: staticConfig.markerTrustedAssociations,
+        postingWindowMs,
+    });
+    return async () => {
+        const record = recordRef.current;
+        if (record.status !== 'launched')
+            return null;
+        if (!record.generatorEnabled)
+            return null;
+        return generator();
+    };
+}
+//# sourceMappingURL=jinn-repo-live-auto.js.map

package/dist/solver-types/jinn-repo-live-auto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jinn-repo-live-auto.js","sourceRoot":"","sources":["../../src/solver-types/jinn-repo-live-auto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,yFAAyF;AACzF,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,CAAC;AAEhD,MAAM,oBAAoB,GAAG,mCAA4C,CAAC;AAE1E,6EAA6E;AAE7E,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAC7D,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAEjD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAuBD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAkB,EAClB,iBAAqC,EACrC,yBAAwD;IAExD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,WAAW,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,yBAAyB,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,kBAAkB,IAAI,IAAI,IAAI,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,2DAA2D;AAC3E,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,SAAsB,EACtB,GAAW,EACX,OAA+B,EAC/B,QAAgB;IAEhB,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,2BAA2B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,cAAc,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AASD,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,IAAI,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC5C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAgB;IAChE,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACzD,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAGvE,+FAA+F;AAC/F,SAAS,eAAe,CAAC,MAAqB;IAC5C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACrC,OAAQ,WAAiC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,WAAmB,EAAE,IAAY;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,OAAO,GAAG,QAAQ,UAAU,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,uBAAuB,CAAC,oBAA4B;IAC3D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,CAAC;QACZ,oBAAoB,EAAE,CAAC;QACvB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAuCD,MAAM,UAAU,yBAAyB,CAAC,MAAmC;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC7D,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC5C,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,oBAAoB,IAAI,+BAA+B,CAAC,CAAC;IAC5G,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnD,MAAM,yBAAyB,GAAG,MAAM,CAAC,yBAAyB,CAAC;IACnE,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,6BAA6B;QACrC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IAEF,OAAO,KAAK,IAA4B,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GACP,gCAAgC,IAAI,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE;gBACjF,0BAA0B,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACvE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,wEAAwE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3H,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,eAAe,CAAC;QAC1C,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM;YAEtC,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,gCAAgC,IAAI,WAAW,KAAK,CAAC,MAAM,wBAAwB,CAAC;gBACxG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9F,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CACV,kDAAkD,KAAK,CAAC,MAAM,yBAAyB;oBACrF,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;gBACF,SAAS;YACX,CAAC;YAED,wEAAwE;YACxE,qEAAqE;YACrE,iCAAiC;YACjC,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,CAAC;YACvH,MAAM,MAAM,GAAG,eAAe;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACpE,IAAI,CAAC,CAAC,CAAC,EAAiC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YAEjE,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,qBAAqB,CAAC,CAAC,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;oBACvE,CAAC,CAAC,IAAI,IAAI,IAAI;oBACd,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CACzC,CAAC;gBACF,IAAI,MAAM,EAAE,CAAC;oBACX,+DAA+D;oBAC/D,qEAAqE;oBACrE,OAAO,CAAC,IAAI,CACV,yBAAyB,KAAK,CAAC,MAAM,qEAAqE,CAC3G,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,iEAAiE;oBACjE,kBAAkB;oBAClB,OAAO,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,MAAM,aAAa,KAAK,0CAA0C,CAAC,CAAC;gBAClH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,cAAc,KAAK,MAAM,CAAC,YAAY;gBAAE,SAAS,CAAC,qCAAqC;YAEnH,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC;gBAChD,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,UAAU;gBACvB,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,QAAQ,EAAE,YAAY;gBACtB,iBAAiB,EAAE,GAAG,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,IAAI,EAAE;gBACtD,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,UAAU,EAAE;gBAChB,WAAW,EAAE,yBAAyB,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE;gBAC3E,UAAU,EAAE,WAAW;gBACvB,UAAU,EAAE,WAAW;gBACvB,eAAe,EAAE,gBAAgB;gBACjC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7F,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE;gBAC5C,WAAW;gBACX,IAAI,EAAE,OAA6C;gBACnD,WAAW,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE;aACtF,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAqBD,SAAS,eAAe;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,IAAoD;IAEpD,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAC9C,MAAM,QAAQ,GACZ,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,IAAI,eAAe,EAAE,CAAC;IAE7F,MAAM,eAAe,GAAG,sBAAsB,CAC5C,YAAY,CAAC,eAAe;QAC1B,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,mBAAmB,CAAC,CAC3D,CAAC;IAEF,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC1C,QAAQ;QACR,oBAAoB,EAAE,SAAS,CAAC,OAAO,CAAC,WAAW;QACnD,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;QACjD,yBAAyB,EAAE,YAAY,CAAC,yBAAyB;QACjE,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO,KAAK,IAAmC,EAAE;QAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/solver-types/jinn-repo.d.ts

@@ -0,0 +1,42 @@
+/**
+ * jinn-repo SolverType task schema — thin re-export of the SDK's schema.
+ *
+ * The SDK copy (`packages/sdk/src/jinn-repo.ts`, exported via
+ * `@jinn-network/sdk/solvernets/jinn-repo`) is the load-bearing schema at
+ * claim time: `client/src/harnesses/engine/engine.ts`
+ * `manifestBackedValidation` resolves the SolverNet contract via
+ * `getSolverNetContract` → `packages/sdk/src/contracts.ts`
+ * `JINN_REPO_V1_SOLVER_NET_CONTRACT.schemas.task.zod`, which is the SDK
+ * schema, and safeParses every claimed task spec against it. This module
+ * used to hand-mirror that schema (zod v4 vs. the SDK's zod/v3); the two
+ * copies could silently diverge in `z.preprocess` + `z.discriminatedUnion`
+ * + `z.never().optional()` behavior between zod major-version APIs. See PR
+ * #1898 review (issue #1889): collapsed to a single source of truth,
+ * following the `swe-rebench-v2` sibling pattern.
+ *
+ * A discriminated union on `source`:
+ *   - `merged-pr` (retrospective): a real merged GitHub PR from the
+ *     Jinn-Network/mono repo. The instance is defined by the PR that
+ *     introduced the fix; the FAIL_TO_PASS gold is the PR's own test files.
+ *   - `live-issue` (prospective): an open GitHub issue on Jinn-Network/mono,
+ *     posted before a fix exists. No gold tests — grading is Stage 1's thin
+ *     mechanical evaluator (patch applies, typecheck, policy-scoped tests),
+ *     not FAIL_TO_PASS exact-match. See
+ *     spec/2026-07-20-autopilot-marketplace-execution.md
+ *     §"No new SolverType: a live variant of jinn-repo".
+ *
+ * `schemaVersion` stays `'jinn-repo.v1'` on both branches and the solverType
+ * string is unchanged — corpus knowledge autoload keys on solverType, so
+ * merged-PR-mined knowledge continues to autoload into live solves.
+ *
+ * Backward compatibility: a raw document with no `source` field is legacy
+ * data and is treated as `source: 'merged-pr'` (the only branch that existed
+ * before this union).
+ *
+ * Export surface is byte-compatible with the pre-collapse module: other
+ * client modules (`jinn-repo-definition.ts`, `_jinn-repo-pool.ts`, the
+ * jinn-repo evaluator harness) import from this path by name — do not
+ * rename or drop exports here without updating those call sites.
+ */
+export { JINN_REPO_SCHEMA_VERSION, JinnRepoTaskSchema, JinnRepoMergedPrTaskSchema, JinnRepoLiveIssueTaskSchema, isMergedPrTask, isLiveIssueTask, } from '../vendor/@jinn-network/sdk/dist/solvernets/jinn-repo.js';
+export type { JinnRepoTask, JinnRepoMergedPrTask, JinnRepoLiveIssueTask, } from '../vendor/@jinn-network/sdk/dist/solvernets/jinn-repo.js';

package/dist/solver-types/jinn-repo.js

@@ -0,0 +1,42 @@
+/**
+ * jinn-repo SolverType task schema — thin re-export of the SDK's schema.
+ *
+ * The SDK copy (`packages/sdk/src/jinn-repo.ts`, exported via
+ * `@jinn-network/sdk/solvernets/jinn-repo`) is the load-bearing schema at
+ * claim time: `client/src/harnesses/engine/engine.ts`
+ * `manifestBackedValidation` resolves the SolverNet contract via
+ * `getSolverNetContract` → `packages/sdk/src/contracts.ts`
+ * `JINN_REPO_V1_SOLVER_NET_CONTRACT.schemas.task.zod`, which is the SDK
+ * schema, and safeParses every claimed task spec against it. This module
+ * used to hand-mirror that schema (zod v4 vs. the SDK's zod/v3); the two
+ * copies could silently diverge in `z.preprocess` + `z.discriminatedUnion`
+ * + `z.never().optional()` behavior between zod major-version APIs. See PR
+ * #1898 review (issue #1889): collapsed to a single source of truth,
+ * following the `swe-rebench-v2` sibling pattern.
+ *
+ * A discriminated union on `source`:
+ *   - `merged-pr` (retrospective): a real merged GitHub PR from the
+ *     Jinn-Network/mono repo. The instance is defined by the PR that
+ *     introduced the fix; the FAIL_TO_PASS gold is the PR's own test files.
+ *   - `live-issue` (prospective): an open GitHub issue on Jinn-Network/mono,
+ *     posted before a fix exists. No gold tests — grading is Stage 1's thin
+ *     mechanical evaluator (patch applies, typecheck, policy-scoped tests),
+ *     not FAIL_TO_PASS exact-match. See
+ *     spec/2026-07-20-autopilot-marketplace-execution.md
+ *     §"No new SolverType: a live variant of jinn-repo".
+ *
+ * `schemaVersion` stays `'jinn-repo.v1'` on both branches and the solverType
+ * string is unchanged — corpus knowledge autoload keys on solverType, so
+ * merged-PR-mined knowledge continues to autoload into live solves.
+ *
+ * Backward compatibility: a raw document with no `source` field is legacy
+ * data and is treated as `source: 'merged-pr'` (the only branch that existed
+ * before this union).
+ *
+ * Export surface is byte-compatible with the pre-collapse module: other
+ * client modules (`jinn-repo-definition.ts`, `_jinn-repo-pool.ts`, the
+ * jinn-repo evaluator harness) import from this path by name — do not
+ * rename or drop exports here without updating those call sites.
+ */
+export { JINN_REPO_SCHEMA_VERSION, JinnRepoTaskSchema, JinnRepoMergedPrTaskSchema, JinnRepoLiveIssueTaskSchema, isMergedPrTask, isLiveIssueTask, } from '../vendor/@jinn-network/sdk/dist/solvernets/jinn-repo.js';
+//# sourceMappingURL=jinn-repo.js.map