@polderlabs/bizar-omp 0.6.2 → 0.6.4

package/dist/src/storage/resources.js

@@ -0,0 +1,148 @@
+import { execFileSync } from "node:child_process";
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import { join, resolve } from "node:path";
+import { ContractError, OwnershipError } from "../core/errors.js";
+const now = () => new Date().toISOString();
+const git = (cwd, args, input) => execFileSync("git", args, { cwd, input, encoding: "utf8", stdio: [input === undefined ? "ignore" : "pipe", "pipe", "pipe"] });
+export function resourceRegistryPath(identity) { return join(identity.commonDir, "bizar", "resources-v1.json"); }
+function emptyRegistry(identity) { return { schemaVersion: 1, repositoryId: identity.id, commonDir: identity.commonDir, revision: 0, resources: [], updatedAt: now() }; }
+export function loadResourceRegistry(identity) {
+    const path = resourceRegistryPath(identity);
+    if (!existsSync(path))
+        return emptyRegistry(identity);
+    let value;
+    try {
+        value = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch (error) {
+        throw new ContractError("Resource registry is unreadable; automatic cleanup is disabled", { path, error: String(error) });
+    }
+    if (!value || typeof value !== "object" || value.schemaVersion !== 1 || value.repositoryId !== identity.id || !Array.isArray(value.resources))
+        throw new ContractError("Resource registry identity or schema is invalid", { path });
+    return value;
+}
+export function saveResourceRegistry(identity, registry, expectedRevision) {
+    const current = loadResourceRegistry(identity);
+    if (expectedRevision !== undefined && current.revision !== expectedRevision)
+        throw new OwnershipError("Resource registry revision changed", { expectedRevision, actualRevision: current.revision });
+    const next = { ...registry, revision: current.revision + 1, updatedAt: now() };
+    const path = resourceRegistryPath(identity);
+    mkdirSync(join(identity.commonDir, "bizar"), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+    const fd = openSync(temporary, "r");
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(temporary, path);
+    return next;
+}
+export function registerWorkspace(identity, input) {
+    const registry = loadResourceRegistry(identity);
+    const timestamp = now();
+    const resource = { ...input, resourceId: `resource_${randomUUID()}`, revision: 0, repositoryId: identity.id, commonDir: identity.commonDir, createdAt: timestamp, lastObservedAt: timestamp, state: "creation-intent", cleanupAttempts: 0 };
+    saveResourceRegistry(identity, { ...registry, resources: [...registry.resources, resource] }, registry.revision);
+    return resource;
+}
+export function updateWorkspace(identity, resourceId, update, expectedRevision) {
+    const registry = loadResourceRegistry(identity);
+    const current = registry.resources.find(resource => resource.resourceId === resourceId);
+    if (!current)
+        throw new ContractError("Unknown managed resource", { resourceId });
+    if (expectedRevision !== undefined && current.revision !== expectedRevision)
+        throw new OwnershipError("Managed resource revision changed", { resourceId, expectedRevision, actualRevision: current.revision });
+    const next = { ...current, ...update, revision: current.revision + 1, lastObservedAt: update.lastObservedAt ?? now() };
+    saveResourceRegistry(identity, { ...registry, resources: registry.resources.map(resource => resource.resourceId === resourceId ? next : resource) }, registry.revision);
+    return next;
+}
+function worktreeEntries(identity) {
+    const output = git(identity.root, ["worktree", "list", "--porcelain"]);
+    const entries = [];
+    let current;
+    for (const line of output.split("\n")) {
+        if (line.startsWith("worktree ")) {
+            if (current)
+                entries.push(current);
+            current = { path: resolve(line.slice("worktree ".length)) };
+        }
+        else if (current && line.startsWith("HEAD "))
+            current.head = line.slice("HEAD ".length).trim();
+    }
+    if (current)
+        entries.push(current);
+    return entries;
+}
+function statusFlags(resource) {
+    if (!existsSync(resource.path))
+        return { dirty: false, ignored: false };
+    const porcelain = git(resource.path, ["status", "--porcelain=v1", "--untracked-files=all", "-z"]);
+    const ignored = git(resource.path, ["status", "--porcelain=v1", "--ignored", "--untracked-files=all", "-z"]);
+    return { dirty: porcelain.length > 0, ignored: ignored.length > porcelain.length };
+}
+export function previewWorkspaceCleanup(identity, resourceId) {
+    const resource = loadResourceRegistry(identity).resources.find(candidate => candidate.resourceId === resourceId);
+    if (!resource)
+        throw new ContractError("Unknown managed resource", { resourceId });
+    const registered = worktreeEntries(identity).some(entry => entry.path === resolve(resource.path));
+    const observed = { exists: existsSync(resource.path), ...statusFlags(resource), registered };
+    const reasons = [];
+    if (!resource.disposable)
+        reasons.push("resource is not marked disposable");
+    if (resource.consumers.length)
+        reasons.push("active consumers remain");
+    if (resource.retentionPins.length)
+        reasons.push("retention pins remain");
+    if (observed.dirty)
+        reasons.push("tracked, staged, or untracked content remains");
+    if (observed.ignored)
+        reasons.push("ignored content remains");
+    if (resource.state === "ownership-unknown" || resource.state === "unavailable")
+        reasons.push(`resource state is ${resource.state}`);
+    if (resource.physicalKind === "git-worktree" && !observed.registered && observed.exists)
+        reasons.push("Git registration is missing; ownership is uncertain");
+    return { resourceId, allowed: reasons.length === 0, reasons, path: resource.path, state: resource.state, observed };
+}
+export function createDetachedWorkspace(identity, input) {
+    const path = resolve(input.path ?? join(identity.commonDir, "bizar", "workspaces", randomUUID()));
+    if (existsSync(path))
+        throw new ContractError("Managed workspace path already exists", { path });
+    const resource = registerWorkspace(identity, { ...input, path });
+    mkdirSync(join(path, ".."), { recursive: true, mode: 0o700 });
+    try {
+        git(identity.root, ["worktree", "add", "--detach", path, input.baseRef]);
+        const head = git(path, ["rev-parse", "HEAD"]).trim();
+        return updateWorkspace(identity, resource.resourceId, { state: "ready", observedHead: head });
+    }
+    catch (error) {
+        return updateWorkspace(identity, resource.resourceId, { state: "creation-incomplete", lastError: String(error) });
+    }
+}
+export function cleanupWorkspace(identity, resourceId, authorize = false) {
+    const preview = previewWorkspaceCleanup(identity, resourceId);
+    if (!authorize)
+        return { state: preview.allowed ? "reclaimable" : "retained", reasons: preview.reasons };
+    if (!preview.allowed) {
+        updateWorkspace(identity, resourceId, { state: "retained", retentionReason: preview.reasons.join("; ") });
+        return { state: "retained", reasons: preview.reasons };
+    }
+    const resource = loadResourceRegistry(identity).resources.find(candidate => candidate.resourceId === resourceId);
+    updateWorkspace(identity, resourceId, { state: "cleanup-intent", cleanupAttempts: resource.cleanupAttempts + 1 });
+    try {
+        if (resource.physicalKind === "git-worktree" && existsSync(resource.path))
+            git(identity.root, ["worktree", "remove", resource.path]);
+        if (existsSync(resource.path))
+            throw new ContractError("Targeted cleanup did not remove the workspace", { path: resource.path });
+        updateWorkspace(identity, resourceId, { state: "removed" });
+        return { state: "removed", reasons: [] };
+    }
+    catch (error) {
+        updateWorkspace(identity, resourceId, { state: "cleanup-failed", lastError: String(error) });
+        return { state: "cleanup-failed", reasons: [error instanceof Error ? error.message : String(error)] };
+    }
+}
+export function resourceDigest(resource) { return createHash("sha256").update(JSON.stringify(resource)).digest("hex"); }
+//# sourceMappingURL=resources.js.map

package/dist/src/storage/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/storage/resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAoClE,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC3C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,KAAc,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAE3L,MAAM,UAAU,oBAAoB,CAAC,QAA4B,IAAY,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;AAE7I,SAAS,aAAa,CAAC,QAA4B,IAAgC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AAEzN,MAAM,UAAU,oBAAoB,CAAC,QAA4B;IAC/D,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,gEAAgE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACpM,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAqC,CAAC,aAAa,KAAK,CAAC,IAAK,KAAoC,CAAC,YAAY,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,iDAAiD,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClU,OAAO,KAAmC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA4B,EAAE,QAAoC,EAAE,gBAAyB;IAChI,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB;QAAE,MAAM,IAAI,cAAc,CAAC,oCAAoC,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpM,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5H,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACjD,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA4B,EAAE,KAAqJ;IACnN,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAoB,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,YAAY,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAC7P,oBAAoB,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAA4B,EAAE,UAAkB,EAAE,MAAwL,EAAE,gBAAyB;IACnS,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IACzI,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAClF,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB;QAAE,MAAM,IAAI,cAAc,CAAC,mCAAmC,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/M,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE,CAAC;IACvH,oBAAoB,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxK,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACvE,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,IAAI,OAAoD,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAAC,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aACjI,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,QAAyB;IAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxE,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7G,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,UAAkB;IACtF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IACjH,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,KAAK,KAAK,mBAAmB,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACpI,IAAI,QAAQ,CAAC,YAAY,KAAK,cAAc,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAC7J,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,KAAkL;IACtP,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA4B,EAAE,UAAkB,EAAE,SAAS,GAAG,KAAK;IAClG,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACzG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAC5L,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU,CAAE,CAAC;IAClH,eAAe,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,YAAY,KAAK,cAAc,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACrI,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,+CAA+C,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACjI,eAAe,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACxG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAyB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/src/tools/evidence.d.ts

@@ -0,0 +1,8 @@
+import type { SessionBinding } from "../omp/lifecycle.js";
+import type { EvidenceRecord } from "../core/types.js";
+export declare function listEvidence(binding: SessionBinding, query?: {
+    id?: string;
+    type?: string;
+    freshFor?: string;
+    required?: string[];
+}): EvidenceRecord[];

package/dist/src/tools/evidence.js

@@ -0,0 +1,9 @@
+import { invalidateEvidence, requireFreshEvidence } from "../core/evidence.js";
+import { workingTreeDigest } from "../storage/repository-identity.js";
+export function listEvidence(binding, query) {
+    const records = invalidateEvidence(binding.journal.snapshot().evidence, workingTreeDigest(binding.cwd)).filter(record => (!query?.id || record.id === query.id) && (!query?.type || record.type === query.type));
+    if (query?.freshFor && query.required)
+        return requireFreshEvidence(records, query.required, query.freshFor);
+    return records;
+}
+//# sourceMappingURL=evidence.js.map

package/dist/src/tools/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/tools/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE,KAA8E;IAClI,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjN,IAAI,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5G,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/tools/integrate.d.ts

@@ -0,0 +1,13 @@
+import type { IntegrationAttempt } from "../core/types.js";
+import type { SessionBinding } from "../omp/lifecycle.js";
+export interface IntegrationRequest {
+    workItemId: string;
+    patch: string;
+    changedPaths?: string[];
+    evidenceIds: string[];
+    apply?: (patch: string) => Promise<{
+        resultingDigest: string;
+    }>;
+    signal?: AbortSignal;
+}
+export declare function integrate(binding: SessionBinding, request: IntegrationRequest): Promise<IntegrationAttempt>;

package/dist/src/tools/integrate.js

@@ -0,0 +1,90 @@
+import { createHash, randomUUID } from "node:crypto";
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, unlinkSync, writeSync } from "node:fs";
+import { join } from "node:path";
+import { ContractError, OwnershipError } from "../core/errors.js";
+import { requireFreshEvidence } from "../core/evidence.js";
+import { assertOwner } from "../core/recovery.js";
+import { repositoryIdentity, workingTreeDigest, isDirty } from "../storage/repository-identity.js";
+import { materializeCandidate, observeWorkingTreeTree } from "../services/candidates.js";
+function inScope(path, scopes) { return scopes.some(scope => path === scope || path.startsWith(`${scope.replace(/\/$/, "")}/`)); }
+export async function integrate(binding, request) {
+    let state = binding.journal.snapshot();
+    if (!state.run)
+        throw new ContractError("Cannot integrate without a run");
+    assertOwner(state.run.nativeSessionId, binding.owner);
+    request.signal?.throwIfAborted();
+    if (state.run.cancellation.requested || state.run.phase === "cancelled")
+        throw new ContractError("Integration is blocked by the acknowledged cancellation fence");
+    const item = state.run.workItems.find(candidate => candidate.id === request.workItemId);
+    if (!item)
+        throw new ContractError(`Unknown work item: ${request.workItemId}`);
+    if (isDirty(binding.cwd))
+        throw new ContractError("Target worktree is dirty; integration is blocked until unrelated changes are reconciled");
+    const candidate = materializeCandidate(binding.cwd, request.patch);
+    const patchPaths = candidate.operations.map(operation => operation.path);
+    if (!patchPaths.every(path => inScope(path, item.scope)))
+        throw new ContractError("Patch changes exceed the admitted work-item scope", { changedPaths: patchPaths, scope: item.scope });
+    if (request.changedPaths && JSON.stringify([...new Set(request.changedPaths)].sort()) !== JSON.stringify([...patchPaths].sort()))
+        throw new ContractError("Declared paths do not match the patch");
+    const identity = repositoryIdentity(binding.cwd);
+    const targetDigest = workingTreeDigest(binding.cwd);
+    requireFreshEvidence(state.evidence, request.evidenceIds, targetDigest, { candidateTree: candidate.candidateTree });
+    const patchDigest = createHash("sha256").update(request.patch).digest("hex");
+    const lockDir = join(identity.gitDir, "bizar", "omp-v1");
+    mkdirSync(lockDir, { recursive: true, mode: 0o700 });
+    const lockPath = join(lockDir, "integration.lock");
+    let fd;
+    const lockOwner = randomUUID();
+    try {
+        try {
+            fd = openSync(lockPath, "wx", 0o600);
+        }
+        catch {
+            throw new OwnershipError("Another run owns the serialized integration path");
+        }
+        writeSync(fd, lockOwner, undefined, "utf8");
+        fsyncSync(fd);
+        state = binding.journal.snapshot();
+        if (!state.run)
+            throw new ContractError("Cannot integrate without a run");
+        assertOwner(state.run.nativeSessionId, binding.owner);
+        if (state.run.cancellation.requested || state.run.phase === "cancelled")
+            throw new ContractError("Integration is blocked by the acknowledged cancellation fence");
+        const lockedItem = state.run.workItems.find(candidate => candidate.id === request.workItemId);
+        if (!lockedItem || !patchPaths.every(path => inScope(path, lockedItem.scope)))
+            throw new ContractError("Work-item scope changed before integration");
+        if (isDirty(binding.cwd))
+            throw new ContractError("Target worktree is dirty; integration is blocked until unrelated changes are reconciled");
+        const lockedCandidate = materializeCandidate(binding.cwd, request.patch);
+        if (lockedCandidate.baseTree !== candidate.baseTree || lockedCandidate.candidateTree !== candidate.candidateTree)
+            throw new ContractError("Candidate changed while waiting for integration ownership");
+        const lockedDigest = workingTreeDigest(binding.cwd);
+        requireFreshEvidence(state.evidence, request.evidenceIds, lockedDigest, { candidateTree: lockedCandidate.candidateTree });
+        const attempt = { id: `integration_${randomUUID()}`, runId: state.run.runId, workItemId: lockedItem.id, baseDigest: lockedDigest, patchDigest, changedPaths: patchPaths, eligibleEvidenceIds: request.evidenceIds, lockOwner: binding.owner, outcome: request.apply ? "unknown-outcome" : "eligible", attemptedAt: new Date().toISOString(), candidateId: candidate.id, baseTree: candidate.baseTree, candidateTree: candidate.candidateTree };
+        binding.journal.append({ type: "integration.recorded", runId: attempt.runId, attempt }, `integration-intent:${attempt.id}`, state.revision);
+        if (request.apply) {
+            request.signal?.throwIfAborted();
+            await request.apply(request.patch);
+            attempt.resultingDigest = workingTreeDigest(binding.cwd);
+            const observedTree = observeWorkingTreeTree(binding.cwd);
+            if (observedTree === candidate.candidateTree)
+                attempt.outcome = "applied";
+            else {
+                attempt.outcome = "unknown-outcome";
+                attempt.recovery = `Applied content does not match candidate tree ${candidate.candidateTree}; observed ${observedTree}`;
+            }
+            binding.journal.append({ type: "integration.recorded", runId: attempt.runId, attempt }, `integration-outcome:${attempt.id}`);
+        }
+        return attempt;
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+        try {
+            if (existsSync(lockPath) && readFileSync(lockPath, "utf8") === lockOwner)
+                unlinkSync(lockPath);
+        }
+        catch { /* A replacement lock belongs to another owner. */ }
+    }
+}
+//# sourceMappingURL=integrate.js.map

package/dist/src/tools/integrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrate.js","sourceRoot":"","sources":["../../../src/tools/integrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACrH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAMzF,SAAS,OAAO,CAAC,IAAY,EAAE,MAAgB,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpJ,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAuB,EAAE,OAA2B;IAClF,IAAI,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;IAC1E,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW;QAAE,MAAM,IAAI,aAAa,CAAC,+DAA+D,CAAC,CAAC;IAClK,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,yFAAyF,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,mDAAmD,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACxL,IAAI,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;IACnM,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;IACpH,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAAC,IAAI,EAAsB,CAAC;IAC/E,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,CAAC;YAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,cAAc,CAAC,kDAAkD,CAAC,CAAC;QAAC,CAAC;QACrI,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;QAC1E,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,aAAa,CAAC,+DAA+D,CAAC,CAAC;QAClK,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9F,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;QACrJ,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,yFAAyF,CAAC,CAAC;QAC7I,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,eAAe,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,IAAI,eAAe,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa;YAAE,MAAM,IAAI,aAAa,CAAC,2DAA2D,CAAC,CAAC;QACvM,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,CAAC,CAAC;QAC1H,MAAM,OAAO,GAAuB,EAAE,EAAE,EAAE,eAAe,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;QACnc,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,sBAAsB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5I,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,CAAC,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,YAAY,KAAK,SAAS,CAAC,aAAa;gBAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;iBACrE,CAAC;gBACJ,OAAO,CAAC,OAAO,GAAG,iBAAiB,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,iDAAiD,SAAS,CAAC,aAAa,cAAc,YAAY,EAAE,CAAC;YAC1H,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,uBAAuB,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,SAAS;gBAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IACtK,CAAC;AACH,CAAC"}

package/dist/src/tools/result.d.ts

@@ -0,0 +1,9 @@
+export interface ToolResult {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    details?: Record<string, unknown>;
+    isError?: boolean;
+}
+export declare const result: (value: unknown, isError?: boolean) => ToolResult;

package/dist/src/tools/result.js

@@ -0,0 +1,2 @@
+export const result = (value, isError = false) => ({ content: [{ type: "text", text: typeof value === "string" ? value : JSON.stringify(value, null, 2) }], details: typeof value === "object" && value !== null ? value : undefined, isError: isError || undefined });
+//# sourceMappingURL=result.js.map

package/dist/src/tools/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../src/tools/result.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,OAAO,GAAG,KAAK,EAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC"}

package/dist/src/tools/verify.d.ts

@@ -0,0 +1,13 @@
+import type { SessionBinding } from "../omp/lifecycle.js";
+export interface CheckResult {
+    checkId: string;
+    command: string[];
+    cwd: string;
+    result: "passed" | "failed" | "unknown" | "cancelled";
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    targetDigest: string;
+    evidenceId: string;
+}
+export declare function runVerification(binding: SessionBinding, checkId: string, command: string[], cwd?: string, signal?: AbortSignal): Promise<CheckResult>;

package/dist/src/tools/verify.js

@@ -0,0 +1,61 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { randomUUID } from "node:crypto";
+import { createEvidence } from "../core/evidence.js";
+import { repositoryIdentity, workingTreeDigest } from "../storage/repository-identity.js";
+import { ContractError } from "../core/errors.js";
+const execFileAsync = promisify(execFile);
+const SECRET_NAME = /(?:authorization|api[-_]?key|access[-_]?key|token|secret|password|credential|private[-_]?key)/i;
+const SAFE_ENVIRONMENT = new Set([
+    "CI", "FORCE_COLOR", "HOME", "LANG", "LC_ALL", "LC_CTYPE", "NO_COLOR", "PATH", "SHELL", "TERM", "TMP", "TEMP", "TMPDIR", "TZ"
+]);
+const MAX_OUTPUT = 100_000;
+const redact = (value) => value
+    .replace(/(authorization|api[-_]?key|access[-_]?key|token|secret|password|credential|private[-_]?key)\s*[:=]\s*[^\s,;]+/gi, "$1=[REDACTED]")
+    .replace(/([?&](?:token|secret|api[-_]?key|password|key)=)[^&\s]+/gi, "$1[REDACTED]")
+    .replace(/Bearer\s+[A-Za-z0-9._~-]+/gi, "Bearer [REDACTED]")
+    .replace(/-----BEGIN ([A-Z ]+ KEY)-----[\s\S]*?-----END \1-----/g, "-----BEGIN $1-----[REDACTED]-----END $1-----");
+const bounded = (value) => {
+    const safe = redact(value ?? "");
+    return safe.length > MAX_OUTPUT ? `[TRUNCATED]\n${safe.slice(-MAX_OUTPUT)}` : safe;
+};
+const safeCommand = (command) => command.map((part, index) => {
+    if (index > 0 && (SECRET_NAME.test(command[index - 1] ?? "") || SECRET_NAME.test(part.split("=", 1)[0] ?? "")))
+        return "[REDACTED]";
+    return redact(part);
+});
+const safeEnvironment = (environment) => Object.fromEntries(Object.entries(environment).filter(([name]) => SAFE_ENVIRONMENT.has(name)).map(([name, value]) => [name, value ?? ""]));
+export async function runVerification(binding, checkId, command, cwd = binding.cwd, signal) {
+    if (!checkId.trim() || !command.length || command.some(part => typeof part !== "string" || part.includes("\0")) || !command[0].trim())
+        throw new ContractError("A check ID and nonempty command argv are required");
+    if (repositoryIdentity(cwd).root !== repositoryIdentity(binding.cwd).root)
+        throw new ContractError("Verification cwd must be inside the bound worktree");
+    signal?.throwIfAborted();
+    const run = binding.journal.snapshot().run;
+    if (!run)
+        throw new ContractError("Start a workflow before recording verification");
+    if (run.nativeSessionId !== binding.owner)
+        throw new ContractError("Only the run owner may record verification");
+    if (run.cancellation.requested || run.phase === "cancelled")
+        throw new ContractError("Verification is blocked by the acknowledged cancellation fence");
+    const runId = run.runId;
+    const before = workingTreeDigest(cwd);
+    const persistedCommand = safeCommand(command);
+    try {
+        const output = await execFileAsync(command[0], command.slice(1), { cwd, signal, timeout: 10 * 60 * 1000, maxBuffer: 512 * 1024, env: { ...safeEnvironment(process.env), CI: "1" } });
+        const result = workingTreeDigest(cwd) === before ? "passed" : "unknown";
+        const base = createEvidence({ id: `evidence_${randomUUID()}`, runId, type: "test", checkId, command: persistedCommand, cwd, result, exitCode: result === "passed" ? 0 : undefined, targetDigest: before, inputDigests: {}, stdout: bounded(output.stdout), stderr: bounded(output.stderr), artifactHashes: [], provenance: { producer: "bizar-omp-host", observedAt: new Date().toISOString() } });
+        const evidence = result === "unknown" ? { ...base, staleReason: "verification command changed the target tree" } : base;
+        binding.journal.append({ type: "evidence.recorded", runId: evidence.runId, evidence }, `evidence:${evidence.id}`);
+        return { checkId, command: persistedCommand, cwd, result, exitCode: result === "passed" ? 0 : 1, stdout: evidence.stdout ?? "", stderr: evidence.stderr ?? "", targetDigest: before, evidenceId: evidence.id };
+    }
+    catch (error) {
+        const e = error;
+        const cancelled = e.name === "AbortError" || e.code === "ABORT_ERR";
+        const result = cancelled ? "cancelled" : "failed";
+        const evidence = createEvidence({ id: `evidence_${randomUUID()}`, runId, type: "test", checkId, command: persistedCommand, cwd, result, exitCode: cancelled ? 130 : (typeof e.code === "number" ? e.code : 1), targetDigest: before, inputDigests: {}, stdout: bounded(e.stdout), stderr: bounded(e.stderr ?? String(error)), artifactHashes: [], provenance: { producer: "bizar-omp-host", observedAt: new Date().toISOString() } });
+        binding.journal.append({ type: "evidence.recorded", runId: evidence.runId, evidence }, `evidence:${evidence.id}`);
+        return { checkId, command: persistedCommand, cwd, result, exitCode: evidence.exitCode ?? 1, stdout: evidence.stdout ?? "", stderr: evidence.stderr ?? "", targetDigest: before, evidenceId: evidence.id };
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/src/tools/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/tools/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,WAAW,GAAG,gGAAgG,CAAC;AACrH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI;CAC9H,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;KACpC,OAAO,CAAC,iHAAiH,EAAE,eAAe,CAAC;KAC3I,OAAO,CAAC,2DAA2D,EAAE,cAAc,CAAC;KACpF,OAAO,CAAC,6BAA6B,EAAE,mBAAmB,CAAC;KAC3D,OAAO,CAAC,wDAAwD,EAAE,8CAA8C,CAAC,CAAC;AAErH,MAAM,OAAO,GAAG,CAAC,KAAyB,EAAE,EAAE;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;IACrE,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IACpI,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,WAA8B,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAC5E,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CACvH,CAAC;AAIF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,OAAe,EAAE,OAAiB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,MAAoB;IACxI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,mDAAmD,CAAC,CAAC;IACpN,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,oDAAoD,CAAC,CAAC;IACzJ,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACjH,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW;QAAE,MAAM,IAAI,aAAa,CAAC,gEAAgE,CAAC,CAAC;IACvJ,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACrL,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,YAAY,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACnY,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxH,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IACjN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,KAAoF,CAAC;QAC/F,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACpE,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,YAAY,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACta,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC5M,CAAC;AACH,CAAC"}

package/dist/src/tools/workflow.d.ts

@@ -0,0 +1,8 @@
+import type { WorkItem } from "../core/types.js";
+import type { SessionBinding } from "../omp/lifecycle.js";
+export type WorkflowAction = "start" | "status" | "transition" | "add-work" | "accept-work" | "complete" | "cancel" | "next";
+export declare function runWorkflow(binding: SessionBinding, action: WorkflowAction, params: Record<string, unknown>): import("../core/types.js").StateSnapshot | WorkItem | import("../core/types.js").WorkflowRun | {
+    action: "start";
+    run: import("../core/types.js").WorkflowRun;
+    decision: import("../core/types.js").RouteDecision;
+} | null | undefined;

package/dist/src/tools/workflow.js

@@ -0,0 +1,65 @@
+import { acceptWorkItem, addWorkItem, completeRun, transition } from "../core/transitions.js";
+import { requireFreshEvidence } from "../core/evidence.js";
+import { classifyRoute } from "../core/policies.js";
+import { ContractError } from "../core/errors.js";
+import { assertOwner } from "../core/recovery.js";
+import { startObjective } from "../omp/lifecycle.js";
+import { workingTreeDigest } from "../storage/repository-identity.js";
+export function runWorkflow(binding, action, params) {
+    let state = binding.journal.snapshot();
+    if (action === "start") {
+        const objective = params.objective;
+        const run = startObjective(binding, objective);
+        return { action, run, decision: classifyRoute({ text: objective.objective }) };
+    }
+    if (!state.run)
+        throw new ContractError("No workflow run exists; start one first");
+    if (action === "status")
+        return state;
+    if (action !== "next")
+        assertOwner(state.run.nativeSessionId, binding.owner);
+    if (action === "transition") {
+        const to = params.to;
+        if (to === "complete")
+            throw new ContractError("Use the complete action");
+        const result = transition(state.run, to, String(params.reason ?? "operator request"));
+        binding.journal.append(result.event, `transition:${state.run.runId}:${state.run.revision}:${to}`, state.revision);
+        return result.run;
+    }
+    if (action === "cancel") {
+        const reason = String(params.reason ?? "operator cancellation");
+        binding.journal.append({ type: "run.cancelled", runId: state.run.runId, reason }, `cancel:${state.run.runId}:${state.run.revision}`, state.revision);
+        return binding.journal.snapshot().run;
+    }
+    if (action === "add-work") {
+        const item = addWorkItem(state.run, params.item);
+        const added = item.workItems[item.workItems.length - 1];
+        binding.journal.append({ type: "work-item.upserted", runId: item.runId, item: added }, `work:${item.runId}:${added.id}`, state.revision);
+        return added;
+    }
+    if (action === "accept-work") {
+        const workItemId = String(params.workItemId ?? "");
+        const evidenceIds = params.evidenceIds;
+        if (!Array.isArray(evidenceIds))
+            throw new ContractError("Evidence IDs are required to accept work");
+        requireFreshEvidence(state.evidence, evidenceIds, workingTreeDigest(binding.cwd));
+        const next = acceptWorkItem(state.run, workItemId);
+        const item = next.workItems.find(candidate => candidate.id === workItemId);
+        binding.journal.append({ type: "work-item.upserted", runId: next.runId, item }, `work-accepted:${next.runId}:${item.id}:${item.revision}`, state.revision);
+        return item;
+    }
+    if (action === "complete") {
+        if (state.integrations.some(attempt => attempt.outcome === "unknown-outcome") || state.dispatches.some(intent => !["settled", "rejected"].includes(intent.status)))
+            throw new ContractError("Unresolved integrations or dispatches block completion");
+        const requiredChecks = params.requiredChecks;
+        if (!Array.isArray(requiredChecks) || requiredChecks.length === 0)
+            throw new ContractError("At least one required check is required for completion");
+        const result = completeRun(state.run, requiredChecks, state.evidence, workingTreeDigest(binding.cwd));
+        binding.journal.append(result.event, `complete:${state.run.runId}:${state.run.revision}`, state.revision);
+        return result.run;
+    }
+    if (action === "next")
+        return state.run.workItems.find(item => item.lifecycle === "pending") ?? null;
+    throw new ContractError(`Unknown workflow action: ${action}`);
+}
+//# sourceMappingURL=workflow.js.map

package/dist/src/tools/workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../../src/tools/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAMtE,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE,MAAsB,EAAE,MAA+B;IAC1G,IAAI,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACvC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,CAAC,SAA8B,CAAC;QACxD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,MAAM,KAAK,MAAM;QAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAsC,CAAC;QACzD,IAAI,EAAE,KAAK,UAAU;YAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC;QAChE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrJ,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAmE,CAAC,CAAC;QAChH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzI,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAuB,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,0CAA0C,CAAC,CAAC;QACrG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,UAAU,CAAE,CAAC;QAC5E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,iBAAiB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3J,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,wDAAwD,CAAC,CAAC;QACtP,MAAM,cAAc,GAAG,MAAM,CAAC,cAA0B,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,wDAAwD,CAAC,CAAC;QACrJ,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACtG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1G,OAAO,MAAM,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC;IACrG,MAAM,IAAI,aAAa,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/workflows/direct.d.ts

@@ -0,0 +1,9 @@
+import type { ObjectiveContract } from "../core/types.js";
+export declare function directWorkflow(objective: ObjectiveContract): {
+    kind: string;
+    objective: ObjectiveContract;
+    requiresIsolation: boolean;
+    apply: string;
+    verification: string[];
+    bounded: boolean;
+};

package/dist/src/workflows/direct.js

@@ -0,0 +1,2 @@
+export function directWorkflow(objective) { return { kind: "direct", objective, requiresIsolation: false, apply: "host-native", verification: objective.verificationPlan, bounded: true }; }
+//# sourceMappingURL=direct.js.map

package/dist/src/workflows/direct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct.js","sourceRoot":"","sources":["../../../src/workflows/direct.ts"],"names":[],"mappings":"AACA,MAAM,UAAU,cAAc,CAAC,SAA4B,IAAI,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC"}

package/dist/src/workflows/implement.d.ts

@@ -0,0 +1,2 @@
+import type { TrustPreset, WorkItem, WorkflowRun } from "../core/types.js";
+export declare function implementationDispatch(run: WorkflowRun, item: WorkItem, preset: TrustPreset): import("../core/types.js").DispatchIntent;

package/dist/src/workflows/implement.js

@@ -0,0 +1,4 @@
+import { admitDispatch } from "../omp/dispatch-admission.js";
+import { classifyRoute } from "../core/policies.js";
+export function implementationDispatch(run, item, preset) { return admitDispatch(run, item, classifyRoute({ text: item.title, role: item.role, files: item.scope }), preset, run.nativeSessionId); }
+//# sourceMappingURL=implement.js.map

package/dist/src/workflows/implement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"implement.js","sourceRoot":"","sources":["../../../src/workflows/implement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,sBAAsB,CAAC,GAAgB,EAAE,IAAc,EAAE,MAAmB,IAAI,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC"}

package/dist/src/workflows/plan.d.ts

@@ -0,0 +1,17 @@
+import type { ObjectiveContract, RouteDecision } from "../core/types.js";
+export interface Plan {
+    schemaVersion: 1;
+    objective: ObjectiveContract;
+    route: RouteDecision;
+    workItems: Array<{
+        title: string;
+        role: string;
+        scope: string[];
+        acceptanceCriteria: string[];
+        verificationPlan: string[];
+    }>;
+    risks: string[];
+    stopConditions: string[];
+    readOnly: true;
+}
+export declare function makePlan(objective: ObjectiveContract): Plan;

package/dist/src/workflows/plan.js

@@ -0,0 +1,6 @@
+import { classifyRoute } from "../core/policies.js";
+export function makePlan(objective) {
+    const route = classifyRoute({ text: objective.objective, files: [] });
+    return { schemaVersion: 1, objective, route, workItems: [{ title: "Orient and define acceptance", role: "bizar-planner", scope: [], acceptanceCriteria: objective.acceptanceCriteria, verificationPlan: objective.verificationPlan }], risks: ["External provider/model behavior remains an observed dependency"], stopConditions: objective.stopConditions, readOnly: true };
+}
+//# sourceMappingURL=plan.js.map

package/dist/src/workflows/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/workflows/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAKpD,MAAM,UAAU,QAAQ,CAAC,SAA4B;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,iEAAiE,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAChX,CAAC"}

package/dist/src/workflows/research.d.ts

@@ -0,0 +1,15 @@
+import type { RouteIntent } from "../core/types.js";
+export interface ResearchFinding {
+    claim: string;
+    kind: "repository-fact" | "external-fact" | "inference" | "unknown";
+    source?: string;
+    location?: string;
+    retrievedAt?: string;
+}
+export interface ResearchWorkflow {
+    objective: string;
+    intent: RouteIntent;
+    findings: ResearchFinding[];
+    readOnly: true;
+}
+export declare function createResearch(objective: string, findings?: ResearchFinding[]): ResearchWorkflow;

package/dist/src/workflows/research.js

@@ -0,0 +1,2 @@
+export function createResearch(objective, findings = []) { return { objective, intent: "general", findings, readOnly: true }; }
+//# sourceMappingURL=research.js.map

package/dist/src/workflows/research.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"research.js","sourceRoot":"","sources":["../../../src/workflows/research.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,QAAQ,GAAsB,EAAE,IAAsB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC"}

package/dist/src/workflows/review.d.ts

@@ -0,0 +1,15 @@
+export interface ReviewFinding {
+    id: string;
+    targetDigest: string;
+    file: string;
+    line?: number;
+    severity: "low" | "medium" | "high" | "critical";
+    scenario: string;
+    evidence: string[];
+}
+export declare function reviewContract(targetDigest: string, findings: ReviewFinding[]): {
+    targetDigest: string;
+    findings: ReviewFinding[];
+    staleFindings: ReviewFinding[];
+    refutationRequires: string[];
+};