@namzu/sdk 0.1.7 → 0.2.0

package/dist/session/__tests__/integration/handoff-broadcast-e2e.test.js

@@ -0,0 +1,170 @@
+/**
+ * Integration — broadcast handoff atomic fan-out + rollback wired through
+ * the real stack.
+ *
+ * Covers roadmap §5 invariants: §5.4 (source → `awaiting_merge` after
+ * successful commit), §6.2 (broadcast atomic rollback — zero orphan
+ * sub-sessions/sessions after rollback via `deleteSubSession` +
+ * `deleteSession`), §10.2 (broadcast.rollback event carries accurate
+ * partialState counts).
+ */
+import { describe, expect, it, vi } from 'vitest';
+import { InMemorySessionStore } from '../../../store/session/memory.js';
+import { generateHandoffId } from '../../../utils/id.js';
+import { executeBroadcastHandoff } from '../../handoff/broadcast.js';
+import { DefaultCapacityValidator } from '../../handoff/capacity.js';
+import { GitWorktreeDriver } from '../../workspace/git-worktree.js';
+import { WorkspaceBackendRegistry } from '../../workspace/registry.js';
+import { DEFAULT_TENANT, okExec, stubLogger, userActor } from './_fixtures.js';
+function buildDeps(store, execOverride) {
+    const exec = execOverride ?? (async () => okExec());
+    const driver = new GitWorktreeDriver({
+        repoRoot: '/repo',
+        logger: stubLogger(),
+        execFile: exec,
+    });
+    const workspaceRegistry = new WorkspaceBackendRegistry();
+    workspaceRegistry.register(driver);
+    const onBroadcastRollback = vi.fn();
+    const sink = {
+        onLocked: vi.fn(),
+        onUnlocked: vi.fn(),
+        onCommitted: vi.fn(),
+        onBroadcastRollback,
+    };
+    return {
+        deps: {
+            store,
+            workspaceRegistry,
+            capacity: new DefaultCapacityValidator(store),
+            events: sink,
+        },
+        events: { ...sink, onBroadcastRollback },
+    };
+}
+function buildAssignments(sourceSessionId, projectId, recipients, broadcastId = 'bc_integration', expectedOwnerVersion = 0) {
+    return recipients.map((recipientActor) => ({
+        id: generateHandoffId(),
+        mode: 'broadcast',
+        sourceSessionId,
+        tenantId: DEFAULT_TENANT,
+        projectId,
+        sourceActor: userActor('usr_source'),
+        recipientActor,
+        expectedOwnerVersion,
+        broadcastId,
+        createdAt: new Date('2026-04-17'),
+    }));
+}
+describe('Integration — broadcast handoff E2E', () => {
+    it('happy: 3-recipient fan-out → each recipient has isolated worktree + source reaches awaiting_merge', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'bc-happy' }, DEFAULT_TENANT);
+        const source = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+        // Track each `worktree add` call so we can assert each recipient got a
+        // distinct worktree path (isolation).
+        const addCalls = [];
+        const exec = async (_file, args) => {
+            if (args.includes('add')) {
+                // args contains ['-C', ..., 'worktree', 'add', '-b', branch, path].
+                const path = args[args.length - 1];
+                if (typeof path === 'string')
+                    addCalls.push(path);
+            }
+            return okExec();
+        };
+        const { deps } = buildDeps(store, exec);
+        const recipients = [userActor('usr_bob'), userActor('usr_carol'), userActor('usr_dan')];
+        const assignments = buildAssignments(source.id, project.id, recipients);
+        const outcomes = await executeBroadcastHandoff(deps, assignments, DEFAULT_TENANT);
+        expect(outcomes).toHaveLength(3);
+        expect(new Set(outcomes.map((o) => o.newSessionId)).size).toBe(3);
+        expect(new Set(outcomes.map((o) => o.workspaceId)).size).toBe(3);
+        // Each recipient landed on a distinct worktree path — isolation holds.
+        expect(new Set(addCalls).size).toBe(3);
+        // §5.4: source transitions to awaiting_merge post-commit.
+        const reloaded = await store.getSession(source.id, DEFAULT_TENANT);
+        expect(reloaded?.status).toBe('awaiting_merge');
+        // Three children visible via getChildren.
+        const children = await store.getChildren(source.id, DEFAULT_TENANT);
+        expect(children).toHaveLength(3);
+        expect(children.every((c) => c.kind === 'user_handoff')).toBe(true);
+    });
+    it('rollback on 2nd-recipient provisioning failure: zero orphan records, partialState accurate', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'bc-rb' }, DEFAULT_TENANT);
+        const source = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+        let addCount = 0;
+        const exec = async (_file, args) => {
+            if (args.includes('add')) {
+                addCount += 1;
+                if (addCount === 2)
+                    throw new Error('simulated fault on 2nd recipient');
+            }
+            return okExec();
+        };
+        const { deps, events } = buildDeps(store, exec);
+        const assignments = buildAssignments(source.id, project.id, [
+            userActor('usr_b'),
+            userActor('usr_c'),
+            userActor('usr_d'),
+        ]);
+        await expect(executeBroadcastHandoff(deps, assignments, DEFAULT_TENANT)).rejects.toThrow(/Workspace backend git-worktree failed on create/);
+        // Phase 8 closed the Known Delta: rollback now calls deleteSubSession +
+        // deleteSession rather than flipping to 'archived'. Zero orphan
+        // sub-session records remain.
+        const children = await store.getChildren(source.id, DEFAULT_TENANT);
+        expect(children).toHaveLength(0);
+        // Source reverted to idle with original ownerVersion.
+        const reloaded = await store.getSession(source.id, DEFAULT_TENANT);
+        expect(reloaded?.status).toBe('idle');
+        expect(reloaded?.ownerVersion).toBe(0);
+        // onBroadcastRollback emitted with accurate counts.
+        expect(events.onBroadcastRollback).toHaveBeenCalledTimes(1);
+        const rollbackCall = events.onBroadcastRollback.mock.calls[0]?.[0];
+        expect(rollbackCall?.partialState.worktreesProvisioned).toBe(1);
+        expect(rollbackCall?.partialState.subsessionsCreated).toBe(1);
+        expect(rollbackCall?.partialState.assignmentsWritten).toBe(1);
+    });
+    it('source transitions to awaiting_merge + retains currentActor as coordinator (§5.4)', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'coord' }, DEFAULT_TENANT);
+        const coordinator = userActor('usr_source');
+        const source = await store.createSession({ projectId: project.id, currentActor: coordinator }, DEFAULT_TENANT);
+        const { deps } = buildDeps(store);
+        const assignments = buildAssignments(source.id, project.id, [
+            userActor('usr_b'),
+            userActor('usr_c'),
+        ]);
+        await executeBroadcastHandoff(deps, assignments, DEFAULT_TENANT);
+        const reloaded = await store.getSession(source.id, DEFAULT_TENANT);
+        expect(reloaded?.status).toBe('awaiting_merge');
+        // Coordinator retained as current actor (§5.4).
+        expect(reloaded?.currentActor).toEqual(coordinator);
+        expect(reloaded?.ownerVersion).toBe(1);
+    });
+    it('all recipients get isolated worktrees — zero path collisions even under N=8', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'iso' }, DEFAULT_TENANT);
+        const source = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+        const seenPaths = new Set();
+        const exec = async (_file, args) => {
+            if (args.includes('add')) {
+                const path = args[args.length - 1];
+                if (typeof path === 'string') {
+                    if (seenPaths.has(path))
+                        throw new Error(`path collision: ${path}`);
+                    seenPaths.add(path);
+                }
+            }
+            return okExec();
+        };
+        const { deps } = buildDeps(store, exec);
+        const recipients = Array.from({ length: 8 }, (_, i) => userActor(`usr_${i}`));
+        const assignments = buildAssignments(source.id, project.id, recipients);
+        const outcomes = await executeBroadcastHandoff(deps, assignments, DEFAULT_TENANT);
+        expect(outcomes).toHaveLength(8);
+        expect(seenPaths.size).toBe(8);
+    });
+});
+//# sourceMappingURL=handoff-broadcast-e2e.test.js.map

package/dist/session/__tests__/integration/handoff-broadcast-e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-broadcast-e2e.test.js","sourceRoot":"","sources":["../../../../src/session/__tests__/integration/handoff-broadcast-e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAGvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,EAA6B,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAC/F,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAA;AAIpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE9E,SAAS,SAAS,CACjB,KAA2B,EAC3B,YAAuB;IAKvB,MAAM,IAAI,GAAa,YAAY,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;QACpC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,UAAU,EAAE;QACpB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,EAAE,CAAA;IACxD,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAElC,MAAM,mBAAmB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;IACnC,MAAM,IAAI,GAAqB;QAC9B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,mBAAmB;KACnB,CAAA;IAED,OAAO;QACN,IAAI,EAAE;YACL,KAAK;YACL,iBAAiB;YACjB,QAAQ,EAAE,IAAI,wBAAwB,CAAC,KAAK,CAAC;YAC7C,MAAM,EAAE,IAAI;SACZ;QACD,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,mBAAmB,EAAE;KACxC,CAAA;AACF,CAAC;AAED,SAAS,gBAAgB,CACxB,eAA0B,EAC1B,SAAoB,EACpB,UAAsB,EACtB,WAAW,GAAG,gBAAgB,EAC9B,oBAAoB,GAAG,CAAC;IAExB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1C,EAAE,EAAE,iBAAiB,EAAE;QACvB,IAAI,EAAE,WAAoB;QAC1B,eAAe;QACf,QAAQ,EAAE,cAAc;QACxB,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,YAAY,CAAC;QACpC,cAAc;QACd,oBAAoB;QACpB,WAAW;QACX,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;KACjC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;QAClH,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,EAC9C,cAAc,CACd,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CACvC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;QAED,uEAAuE;QACvE,sCAAsC;QACtC,MAAM,QAAQ,GAAa,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAa,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBAClC,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,MAAM,EAAE,CAAA;QAChB,CAAC,CAAA;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAEvC,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QACvF,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAEvE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;QACjF,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjE,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEhE,uEAAuE;QACvE,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtC,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QAClE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAE/C,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,EAC3C,cAAc,CACd,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CACvC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;QAED,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,MAAM,IAAI,GAAa,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,QAAQ,IAAI,CAAC,CAAA;gBACb,IAAI,QAAQ,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACxE,CAAC;YACD,OAAO,MAAM,EAAE,CAAA;QAChB,CAAC,CAAA;QACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAE/C,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE;YAC3D,SAAS,CAAC,OAAO,CAAC;YAClB,SAAS,CAAC,OAAO,CAAC;YAClB,SAAS,CAAC,OAAO,CAAC;SAClB,CAAC,CAAA;QAEF,MAAM,MAAM,CAAC,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvF,iDAAiD,CACjD,CAAA;QAED,wEAAwE;QACxE,gEAAgE;QAChE,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAEhC,sDAAsD;QACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QAClE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtC,oDAAoD;QACpD,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAQrD,CAAA;QACZ,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/D,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,EAC3C,cAAc,CACd,CAAA;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CACvC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EACpD,cAAc,CACd,CAAA;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QACjC,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE;YAC3D,SAAS,CAAC,OAAO,CAAC;YAClB,SAAS,CAAC,OAAO,CAAC;SAClB,CAAC,CAAA;QAEF,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;QAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QAClE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC/C,gDAAgD;QAChD,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,EACzC,cAAc,CACd,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CACvC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;QACnC,MAAM,IAAI,GAAa,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAA;oBACnE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACpB,CAAC;YACF,CAAC;YACD,OAAO,MAAM,EAAE,CAAA;QAChB,CAAC,CAAA;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAEvC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7E,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAEvE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;QACjF,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/session/__tests__/integration/handoff-illegal-transition.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Integration — `active → locked` illegal-transition rejection matrix per
+ * pattern doc §5.1.
+ *
+ * A handoff request against a session whose current Run is `running`,
+ * `awaiting_hitl`, `awaiting_hitl_resolution`, or `awaiting_subsession`
+ * rejects with typed {@link HandoffLockRejected}. The reason enum maps:
+ *   - running              → 'active_run'
+ *   - awaiting_hitl        → 'pending_hitl'
+ *   - awaiting_hitl_resol. → 'pending_hitl'
+ *   - awaiting_subsession  → 'pending_subsession'
+ *
+ * This integration test wires the `RunStatusResolver` seam into a full
+ * single-handoff flow so the rejection triggers from the run-fan-in check
+ * (§5.1), not just from a status precondition.
+ */
+export {};
+//# sourceMappingURL=handoff-illegal-transition.test.d.ts.map

package/dist/session/__tests__/integration/handoff-illegal-transition.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-illegal-transition.test.d.ts","sourceRoot":"","sources":["../../../../src/session/__tests__/integration/handoff-illegal-transition.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/session/__tests__/integration/handoff-illegal-transition.test.js

@@ -0,0 +1,146 @@
+/**
+ * Integration — `active → locked` illegal-transition rejection matrix per
+ * pattern doc §5.1.
+ *
+ * A handoff request against a session whose current Run is `running`,
+ * `awaiting_hitl`, `awaiting_hitl_resolution`, or `awaiting_subsession`
+ * rejects with typed {@link HandoffLockRejected}. The reason enum maps:
+ *   - running              → 'active_run'
+ *   - awaiting_hitl        → 'pending_hitl'
+ *   - awaiting_hitl_resol. → 'pending_hitl'
+ *   - awaiting_subsession  → 'pending_subsession'
+ *
+ * This integration test wires the `RunStatusResolver` seam into a full
+ * single-handoff flow so the rejection triggers from the run-fan-in check
+ * (§5.1), not just from a status precondition.
+ */
+import { describe, expect, it } from 'vitest';
+import { InMemorySessionStore } from '../../../store/session/memory.js';
+import { generateHandoffId } from '../../../utils/id.js';
+import { DefaultCapacityValidator } from '../../handoff/capacity.js';
+import { executeSingleHandoff, } from '../../handoff/single.js';
+import { HandoffLockRejected } from '../../handoff/version.js';
+import { GitWorktreeDriver } from '../../workspace/git-worktree.js';
+import { WorkspaceBackendRegistry } from '../../workspace/registry.js';
+import { DEFAULT_TENANT, okExec, stubLogger, userActor } from './_fixtures.js';
+function buildDeps(store, runStatus) {
+    const driver = new GitWorktreeDriver({
+        repoRoot: '/repo',
+        logger: stubLogger(),
+        execFile: async () => okExec(),
+    });
+    const workspaceRegistry = new WorkspaceBackendRegistry();
+    workspaceRegistry.register(driver);
+    const events = {};
+    return {
+        store,
+        workspaceRegistry,
+        capacity: new DefaultCapacityValidator(store),
+        events,
+        ...(runStatus !== undefined && { runStatus }),
+    };
+}
+async function seedIdleSession(store) {
+    const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'illegal' }, DEFAULT_TENANT);
+    const session = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+    return { project, session };
+}
+function buildAssignment(sourceSessionId, projectId) {
+    return {
+        id: generateHandoffId(),
+        mode: 'single',
+        sourceSessionId,
+        tenantId: DEFAULT_TENANT,
+        projectId,
+        sourceActor: userActor('usr_source'),
+        recipientActor: userActor('usr_target'),
+        expectedOwnerVersion: 0,
+        createdAt: new Date('2026-04-17'),
+    };
+}
+describe('Integration — illegal handoff transitions (§5.1)', () => {
+    it('running Run → HandoffLockRejected { reason: active_run }', async () => {
+        const store = new InMemorySessionStore();
+        const { project, session } = await seedIdleSession(store);
+        const deps = buildDeps(store, {
+            async blockingRun() {
+                return { reason: 'active_run' };
+            },
+        });
+        const assignment = buildAssignment(session.id, project.id);
+        try {
+            await executeSingleHandoff(deps, assignment, DEFAULT_TENANT);
+            expect.fail('expected HandoffLockRejected');
+        }
+        catch (err) {
+            expect(err).toBeInstanceOf(HandoffLockRejected);
+            expect(err.details.reason).toBe('active_run');
+        }
+        // Source never locked — still idle with original version.
+        const reloaded = await store.getSession(session.id, DEFAULT_TENANT);
+        expect(reloaded?.status).toBe('idle');
+        expect(reloaded?.ownerVersion).toBe(0);
+    });
+    it('awaiting_hitl → HandoffLockRejected { reason: pending_hitl }', async () => {
+        const store = new InMemorySessionStore();
+        const { project, session } = await seedIdleSession(store);
+        const deps = buildDeps(store, {
+            async blockingRun() {
+                return { reason: 'pending_hitl' };
+            },
+        });
+        try {
+            await executeSingleHandoff(deps, buildAssignment(session.id, project.id), DEFAULT_TENANT);
+            expect.fail('expected HandoffLockRejected');
+        }
+        catch (err) {
+            expect(err).toBeInstanceOf(HandoffLockRejected);
+            expect(err.details.reason).toBe('pending_hitl');
+        }
+    });
+    it('awaiting_hitl_resolution collapses into pending_hitl reason (timeout variant)', async () => {
+        // §5.2 treats `awaiting_hitl_resolution` as the same non-terminal class
+        // that forces the source into `awaiting_hitl` — the resolver surfaces
+        // `pending_hitl` for both. This keeps the lock-rejection enum
+        // conservative (no new reason variant for a sub-state).
+        const store = new InMemorySessionStore();
+        const { project, session } = await seedIdleSession(store);
+        const deps = buildDeps(store, {
+            async blockingRun() {
+                return { reason: 'pending_hitl' };
+            },
+        });
+        await expect(executeSingleHandoff(deps, buildAssignment(session.id, project.id), DEFAULT_TENANT)).rejects.toBeInstanceOf(HandoffLockRejected);
+    });
+    it('awaiting_subsession → HandoffLockRejected { reason: pending_subsession }', async () => {
+        const store = new InMemorySessionStore();
+        const { project, session } = await seedIdleSession(store);
+        const deps = buildDeps(store, {
+            async blockingRun() {
+                return { reason: 'pending_subsession' };
+            },
+        });
+        try {
+            await executeSingleHandoff(deps, buildAssignment(session.id, project.id), DEFAULT_TENANT);
+            expect.fail('expected HandoffLockRejected');
+        }
+        catch (err) {
+            expect(err).toBeInstanceOf(HandoffLockRejected);
+            expect(err.details.reason).toBe('pending_subsession');
+        }
+    });
+    it('session status precondition: active-status session rejects before resolver fires', async () => {
+        // When the session itself is already non-idle (e.g. `active`), the lock
+        // rejection fires from the status check — no RunStatusResolver invoked.
+        const store = new InMemorySessionStore();
+        const { project, session } = await seedIdleSession(store);
+        await store.updateSession({ ...session, status: 'active' }, DEFAULT_TENANT);
+        const deps = buildDeps(store, {
+            async blockingRun() {
+                return null; // resolver would allow, but status guard trips first
+            },
+        });
+        await expect(executeSingleHandoff(deps, buildAssignment(session.id, project.id), DEFAULT_TENANT)).rejects.toBeInstanceOf(HandoffLockRejected);
+    });
+});
+//# sourceMappingURL=handoff-illegal-transition.test.js.map

package/dist/session/__tests__/integration/handoff-illegal-transition.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-illegal-transition.test.js","sourceRoot":"","sources":["../../../../src/session/__tests__/integration/handoff-illegal-transition.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAA;AAEpE,OAAO,EAGN,oBAAoB,GACpB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE9E,SAAS,SAAS,CAAC,KAA2B,EAAE,SAA6B;IAC5E,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;QACpC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,UAAU,EAAE;QACpB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE;KAC9B,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,EAAE,CAAA;IACxD,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAElC,MAAM,MAAM,GAAqB,EAAE,CAAA;IAEnC,OAAO;QACN,KAAK;QACL,iBAAiB;QACjB,QAAQ,EAAE,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAC7C,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;KAC7C,CAAA;AACF,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAA2B;IACzD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,EAC7C,cAAc,CACd,CAAA;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,eAAe,CACvB,eAAiF,EACjF,SAA2E;IAE3E,OAAO;QACN,EAAE,EAAE,iBAAiB,EAAE;QACvB,IAAI,EAAE,QAAQ;QACd,eAAe;QACf,QAAQ,EAAE,cAAc;QACxB,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,YAAY,CAAC;QACpC,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC;QACvC,oBAAoB,EAAE,CAAC;QACvB,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;KACjC,CAAA;AACF,CAAC;AAED,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE;YAC7B,KAAK,CAAC,WAAW;gBAChB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;YAChC,CAAC;SACD,CAAC,CAAA;QACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QAE1D,IAAI,CAAC;YACJ,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAA;YAC5D,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;YAC/C,MAAM,CAAE,GAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACvE,CAAC;QAED,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QACnE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE;YAC7B,KAAK,CAAC,WAAW;gBAChB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;YAClC,CAAC;SACD,CAAC,CAAA;QAEF,IAAI,CAAC;YACJ,MAAM,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAA;YACzF,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;YAC/C,MAAM,CAAE,GAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACzE,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC9F,wEAAwE;QACxE,sEAAsE;QACtE,8DAA8D;QAC9D,wDAAwD;QACxD,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE;YAC7B,KAAK,CAAC,WAAW;gBAChB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;YAClC,CAAC;SACD,CAAC,CAAA;QAEF,MAAM,MAAM,CACX,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CACnF,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE;YAC7B,KAAK,CAAC,WAAW;gBAChB,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;YACxC,CAAC;SACD,CAAC,CAAA;QAEF,IAAI,CAAC;YACJ,MAAM,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAA;YACzF,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;YAC/C,MAAM,CAAE,GAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC/E,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QACjG,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAA;QAE3E,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE;YAC7B,KAAK,CAAC,WAAW;gBAChB,OAAO,IAAI,CAAA,CAAC,qDAAqD;YAClE,CAAC;SACD,CAAC,CAAA;QAEF,MAAM,MAAM,CACX,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CACnF,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/session/__tests__/integration/handoff-single-e2e.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Integration — single-recipient handoff wired through the full stack.
+ *
+ * Orthogonal to `handoff/__tests__/single.test.ts` (unit-level): this
+ * exercises the real `InMemorySessionStore` + real `GitWorktreeDriver` (with
+ * stubbed `execFile`) + real {@link DefaultCapacityValidator} so the commit
+ * ordering + workspace provisioning side-effects are verifiable from the
+ * outside.
+ *
+ * Covers roadmap §5 invariants: §4.8 (handoff has no accepted field — commit
+ * is atomic), §6.1 (single-recipient flow: lock → commit), §5.1 (source
+ * transitions back to idle with bumped ownerVersion + appended previousActors).
+ */
+export {};
+//# sourceMappingURL=handoff-single-e2e.test.d.ts.map

package/dist/session/__tests__/integration/handoff-single-e2e.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-single-e2e.test.d.ts","sourceRoot":"","sources":["../../../../src/session/__tests__/integration/handoff-single-e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/session/__tests__/integration/handoff-single-e2e.test.js

@@ -0,0 +1,163 @@
+/**
+ * Integration — single-recipient handoff wired through the full stack.
+ *
+ * Orthogonal to `handoff/__tests__/single.test.ts` (unit-level): this
+ * exercises the real `InMemorySessionStore` + real `GitWorktreeDriver` (with
+ * stubbed `execFile`) + real {@link DefaultCapacityValidator} so the commit
+ * ordering + workspace provisioning side-effects are verifiable from the
+ * outside.
+ *
+ * Covers roadmap §5 invariants: §4.8 (handoff has no accepted field — commit
+ * is atomic), §6.1 (single-recipient flow: lock → commit), §5.1 (source
+ * transitions back to idle with bumped ownerVersion + appended previousActors).
+ */
+import { describe, expect, it, vi } from 'vitest';
+import { InMemorySessionStore } from '../../../store/session/memory.js';
+import { generateHandoffId } from '../../../utils/id.js';
+import { TenantIsolationError } from '../../errors.js';
+import { DefaultCapacityValidator } from '../../handoff/capacity.js';
+import { executeSingleHandoff } from '../../handoff/single.js';
+import { GitWorktreeDriver } from '../../workspace/git-worktree.js';
+import { WorkspaceBackendRegistry } from '../../workspace/registry.js';
+import { DEFAULT_TENANT, OTHER_TENANT, okExec, stubLogger, userActor } from './_fixtures.js';
+function buildHandoffDeps(store) {
+    const driver = new GitWorktreeDriver({
+        repoRoot: '/repo',
+        logger: stubLogger(),
+        execFile: async () => okExec(),
+    });
+    const workspaceRegistry = new WorkspaceBackendRegistry();
+    workspaceRegistry.register(driver);
+    const sink = {
+        onLocked: vi.fn(),
+        onUnlocked: vi.fn(),
+        onCommitted: vi.fn(),
+        onBroadcastRollback: vi.fn(),
+    };
+    const updateCalls = [];
+    const originalUpdate = store.updateSession.bind(store);
+    store.updateSession = async (session, tenantId) => {
+        updateCalls.push({ status: session.status, ownerVersion: session.ownerVersion });
+        return originalUpdate(session, tenantId);
+    };
+    return {
+        deps: {
+            store,
+            workspaceRegistry,
+            capacity: new DefaultCapacityValidator(store),
+            events: sink,
+        },
+        updateCalls,
+    };
+}
+describe('Integration — single-recipient handoff E2E', () => {
+    it('idle → locked → commit: source previousActors grew + ownerVersion bumped atomically', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'ho' }, DEFAULT_TENANT);
+        const sourceActor = userActor('usr_source');
+        const recipientActor = userActor('usr_target');
+        const session = await store.createSession({ projectId: project.id, currentActor: sourceActor }, DEFAULT_TENANT);
+        const { deps, updateCalls } = buildHandoffDeps(store);
+        const assignment = {
+            id: generateHandoffId(),
+            mode: 'single',
+            sourceSessionId: session.id,
+            tenantId: DEFAULT_TENANT,
+            projectId: project.id,
+            sourceActor,
+            recipientActor,
+            expectedOwnerVersion: 0,
+            createdAt: new Date('2026-04-17'),
+        };
+        const outcome = await executeSingleHandoff(deps, assignment, DEFAULT_TENANT);
+        expect(outcome.committedOwnerVersion).toBe(1);
+        const reloaded = await store.getSession(session.id, DEFAULT_TENANT);
+        expect(reloaded?.status).toBe('idle');
+        expect(reloaded?.ownerVersion).toBe(1);
+        expect(reloaded?.currentActor).toEqual(recipientActor);
+        expect(reloaded?.previousActors).toHaveLength(1);
+        expect(reloaded?.previousActors[0]).toEqual(sourceActor);
+        // Wired assertion: updateSession was invoked at least with the lock
+        // transition + the final commit. That sequence is what makes the
+        // handoff "atomic at the store layer".
+        // Expect at minimum locked (v0) followed by committed (v1).
+        expect(updateCalls).toEqual(expect.arrayContaining([
+            { status: 'locked', ownerVersion: 0 },
+            { status: 'idle', ownerVersion: 1 },
+        ]));
+    });
+    it('cross-tenant assignment rejects at entry (TenantIsolationError)', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'ct' }, DEFAULT_TENANT);
+        const session = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+        const { deps } = buildHandoffDeps(store);
+        const assignment = {
+            id: generateHandoffId(),
+            mode: 'single',
+            sourceSessionId: session.id,
+            tenantId: OTHER_TENANT,
+            projectId: project.id,
+            sourceActor: userActor('usr_source', OTHER_TENANT),
+            recipientActor: userActor('usr_target', OTHER_TENANT),
+            expectedOwnerVersion: 0,
+            createdAt: new Date('2026-04-17'),
+        };
+        await expect(executeSingleHandoff(deps, assignment, OTHER_TENANT)).rejects.toBeInstanceOf(TenantIsolationError);
+    });
+    it('source-owned workspace provisioned for recipient', async () => {
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'wsp' }, DEFAULT_TENANT);
+        const source = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+        const { deps } = buildHandoffDeps(store);
+        const assignment = {
+            id: generateHandoffId(),
+            mode: 'single',
+            sourceSessionId: source.id,
+            tenantId: DEFAULT_TENANT,
+            projectId: project.id,
+            sourceActor: userActor('usr_source'),
+            recipientActor: userActor('usr_target'),
+            expectedOwnerVersion: 0,
+            createdAt: new Date('2026-04-17'),
+        };
+        const outcome = await executeSingleHandoff(deps, assignment, DEFAULT_TENANT);
+        expect(outcome.workspaceId.startsWith('wsp_')).toBe(true);
+        expect(outcome.newSessionId.startsWith('ses_')).toBe(true);
+        // Recipient session exists under the same tenant/project.
+        const recipient = await store.getSession(outcome.newSessionId, DEFAULT_TENANT);
+        expect(recipient).not.toBeNull();
+        expect(recipient?.projectId).toBe(project.id);
+        expect(recipient?.tenantId).toBe(DEFAULT_TENANT);
+        expect(recipient?.currentActor).toEqual(userActor('usr_target'));
+        // A sub-session edge links the source to the recipient.
+        const children = await store.getChildren(source.id, DEFAULT_TENANT);
+        expect(children).toHaveLength(1);
+        expect(children[0]?.kind).toBe('user_handoff');
+        expect(children[0]?.childSessionId).toBe(outcome.newSessionId);
+    });
+    // Tenant-denormalization-on-record assertion — every persisted entity
+    // carries the tenantId explicitly, which matters for §12 isolation.
+    it('denormalized tenantId stamped on Session + SubSession records', async () => {
+        const _tenantType = DEFAULT_TENANT;
+        const store = new InMemorySessionStore();
+        const project = await store.createProject({ tenantId: DEFAULT_TENANT, name: 'denorm' }, DEFAULT_TENANT);
+        const source = await store.createSession({ projectId: project.id, currentActor: userActor('usr_source') }, DEFAULT_TENANT);
+        const { deps } = buildHandoffDeps(store);
+        const assignment = {
+            id: generateHandoffId(),
+            mode: 'single',
+            sourceSessionId: source.id,
+            tenantId: DEFAULT_TENANT,
+            projectId: project.id,
+            sourceActor: userActor('usr_source'),
+            recipientActor: userActor('usr_target'),
+            expectedOwnerVersion: 0,
+            createdAt: new Date(),
+        };
+        const outcome = await executeSingleHandoff(deps, assignment, DEFAULT_TENANT);
+        // Recipient's Session stores tenantId explicitly (not inferred).
+        const recipient = await store.getSession(outcome.newSessionId, DEFAULT_TENANT);
+        expect(recipient?.tenantId).toBe(_tenantType);
+    });
+});
+//# sourceMappingURL=handoff-single-e2e.test.js.map

package/dist/session/__tests__/integration/handoff-single-e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-single-e2e.test.js","sourceRoot":"","sources":["../../../../src/session/__tests__/integration/handoff-single-e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAA;AAEpE,OAAO,EAA0B,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAEtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE5F,SAAS,gBAAgB,CAAC,KAA2B;IAIpD,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;QACpC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,UAAU,EAAE;QACpB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE;KAC9B,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,EAAE,CAAA;IACxD,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAElC,MAAM,IAAI,GAAqB;QAC9B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;KAC5B,CAAA;IAED,MAAM,WAAW,GAAsD,EAAE,CAAA;IACzE,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,KAAK,CAAC,aAAa,GAAG,KAAK,EAAE,OAAgB,EAAE,QAAQ,EAAE,EAAE;QAC1D,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;QAChF,OAAO,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACzC,CAAC,CAAA;IAED,OAAO;QACN,IAAI,EAAE;YACL,KAAK;YACL,iBAAiB;YACjB,QAAQ,EAAE,IAAI,wBAAwB,CAAC,KAAK,CAAC;YAC7C,MAAM,EAAE,IAAI;SACZ;QACD,WAAW;KACX,CAAA;AACF,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EACxC,cAAc,CACd,CAAA;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC,CAAA;QAC9C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EACpD,cAAc,CACd,CAAA;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,UAAU,GAAsB;YACrC,EAAE,EAAE,iBAAiB,EAAE;YACvB,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,OAAO,CAAC,EAAE;YAC3B,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW;YACX,cAAc;YACd,oBAAoB,EAAE,CAAC;YACvB,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;SACjC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAA;QAE5E,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAE7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QACnE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACtD,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAExD,oEAAoE;QACpE,iEAAiE;QACjE,uCAAuC;QACvC,4DAA4D;QAC5D,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAC1B,MAAM,CAAC,eAAe,CAAC;YACtB,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE;YACrC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE;SACnC,CAAC,CACF,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EACxC,cAAc,CACd,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,UAAU,GAAsB;YACrC,EAAE,EAAE,iBAAiB,EAAE;YACvB,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,OAAO,CAAC,EAAE;YAC3B,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;YAClD,cAAc,EAAE,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;YACrD,oBAAoB,EAAE,CAAC;YACvB,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;SACjC,CAAA;QAED,MAAM,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CACxF,oBAAoB,CACpB,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,EACzC,cAAc,CACd,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CACvC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,UAAU,GAAsB;YACrC,EAAE,EAAE,iBAAiB,EAAE;YACvB,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,MAAM,CAAC,EAAE;YAC1B,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,SAAS,CAAC,YAAY,CAAC;YACpC,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC;YACvC,oBAAoB,EAAE,CAAC;YACvB,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;SACjC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAA;QAE5E,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE1D,0DAA0D;QAC1D,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAC9E,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAChD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;QAEhE,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,oEAAoE;IACpE,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,WAAW,GAAa,cAAc,CAAA;QAC5C,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC5C,cAAc,CACd,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CACvC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAChE,cAAc,CACd,CAAA;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAExC,MAAM,UAAU,GAAsB;YACrC,EAAE,EAAE,iBAAiB,EAAE;YACvB,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,MAAM,CAAC,EAAE;YAC1B,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,SAAS,CAAC,YAAY,CAAC;YACpC,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC;YACvC,oBAAoB,EAAE,CAAC;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAA;QAE5E,iEAAiE;QACjE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAC9E,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/session/__tests__/integration/hierarchy-lifecycle.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Integration — Tenant → Project → Session → SubSession → Run hierarchy
+ * lifecycle against a real {@link InMemorySessionStore}.
+ *
+ * Covers roadmap §5 invariants §4 (branded IDs), §4.3 (currentActor
+ * immutability), §4.4 (sub-session status fan-in to drill), plus the
+ * `drill()` navigation primitive (§14.3). Orthogonal to `e2e-spawn.test.ts`
+ * (which exercises the full AgentManager spawn path); this file asserts the
+ * raw store contract under direct construction.
+ */
+export {};
+//# sourceMappingURL=hierarchy-lifecycle.test.d.ts.map

package/dist/session/__tests__/integration/hierarchy-lifecycle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hierarchy-lifecycle.test.d.ts","sourceRoot":"","sources":["../../../../src/session/__tests__/integration/hierarchy-lifecycle.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}