@sema-agent/server 1.185.0

package/dist/leader/repair-wire.js

@@ -0,0 +1,90 @@
+import { runRepairLoop, delimitUntrusted, } from "@sema-agent/core";
+import { mkRepairOracle } from "./repair-oracle.js";
+function statusForTerminal(t) {
+    return t === "fixed" || t === "candidate_only" ? "completed" : "failed";
+}
+export async function runRepairLoopForLeader(solo, implSpec, cfg) {
+    try {
+        return await runRepairLoopForLeaderInner(solo, implSpec, cfg);
+    }
+    finally {
+        if (cfg.graderDestroy)
+            await cfg.graderDestroy().catch(() => { });
+    }
+}
+async function runRepairLoopForLeaderInner(solo, implSpec, cfg) {
+    const base = { workerId: solo.workerId, sessionId: solo.sessionId, branch: solo.branch, baseSha: solo.baseSha };
+    let graded;
+    const oracle = mkRepairOracle({
+        pullWorkerDiff: cfg.pullWorkerDiff,
+        graderWriteFile: cfg.grader.writeFile,
+        graderRepoDir: cfg.grader.repoDir,
+        integBase: cfg.grader.integBase,
+        oracleSteps: cfg.oracleSteps,
+        passTier: cfg.passTier,
+        ...(cfg.oraclePaths ? { oraclePaths: cfg.oraclePaths } : {}),
+        onGraded: (info) => { graded = { diff: info.diff, hash: info.hash }; },
+        ...(cfg.flakyK !== undefined ? { flakyK: cfg.flakyK } : {}),
+        ...(cfg.l3 ? { l3: cfg.l3 } : {}),
+        ...(cfg.log ? { log: cfg.log } : {}),
+    });
+    let result;
+    try {
+        result = await runRepairLoop(cfg.runner, implSpec, {
+            oracle,
+            graderEnv: cfg.grader.env,
+            ...(cfg.workerEnv ? { workerEnv: cfg.workerEnv } : {}),
+            maxAttempts: cfg.maxAttempts,
+            ...(cfg.resumeBundle ? { resumeBundle: cfg.resumeBundle } : {}),
+            ...(cfg.costCeilingMicroUsd !== undefined ? { costCeilingMicroUsd: cfg.costCeilingMicroUsd } : {}),
+            ...(cfg.totalTimeoutMs !== undefined ? { totalTimeoutMs: cfg.totalTimeoutMs } : {}),
+            ...(cfg.onAttempt
+                ? { onAttempt: (i) => cfg.onAttempt({ attempt: i.attempt, terminal: i.terminal, oracleTier: i.oracle.tier, passed: i.oracle.passed, flaky: i.oracle.flaky }) }
+                : {}),
+            onWarn: (e) => cfg.log?.("repair_loop_warn", { warning: e.message }),
+        });
+    }
+    catch (e) {
+        cfg.log?.("repair_loop_threw", { error: e instanceof Error ? e.message : String(e) });
+        return { report: { ...base, status: "failed", error: e instanceof Error ? e.message : String(e) }, result: undefined };
+    }
+    const terminal = result.terminal;
+    const report = {
+        ...base,
+        status: statusForTerminal(terminal),
+        repairTerminal: terminal,
+        ...(result.stats ? { stats: result.stats } : {}),
+        ...(result.errorMessage ? { error: result.errorMessage } : {}),
+    };
+    let candidatePatch;
+    if (terminal !== "oracle.unprotected" && terminal !== "fixed") {
+        const g = graded ??
+            (await (async () => {
+                const d = await cfg.pullWorkerDiff().catch((e) => ({ ok: false, error: e instanceof Error ? e.message : String(e) }));
+                return d.ok && d.patch.trim() !== "" ? { diff: d.patch, hash: "" } : undefined;
+            })());
+        if (g && g.diff.trim() !== "") {
+            const reason = result.verification?.findings?.[0] ?? `repair loop terminal: ${terminal}`;
+            candidatePatch = {
+                patch: delimitUntrusted("CANDIDATE PATCH (untrusted worker code)", g.diff),
+                tier: cfg.passTier,
+                reason,
+                ...(g.hash ? { gradedHash: g.hash } : {}),
+            };
+        }
+    }
+    cfg.log?.("repair_loop_outcome", { terminal, status: report.status, hasCandidate: candidatePatch !== undefined });
+    return { report, result, ...(candidatePatch ? { candidatePatch } : {}) };
+}
+export function attachRepairLoopDeps(deps, resolve) {
+    if (!resolve)
+        return;
+    deps.repairLoop = {
+        run: async (solo, sub) => {
+            const cfg = await resolve(solo, sub);
+            const implSpec = { ...sub.spec, sessionId: solo.sessionId };
+            return runRepairLoopForLeader(solo, implSpec, cfg);
+        },
+    };
+}
+//# sourceMappingURL=repair-wire.js.map

package/dist/leader/repair-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-wire.js","sourceRoot":"","sources":["../../src/leader/repair-wire.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,aAAa,EACb,gBAAgB,GASjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAmB,MAAM,oBAAoB,CAAC;AAmErE,SAAS,iBAAiB,CAAC,CAAiB;IAC1C,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1E,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAuB,EAAE,QAAkB,EAAE,GAAkB;IAC1G,IAAI,CAAC;QACH,OAAO,MAAM,2BAA2B,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QAIT,IAAI,GAAG,CAAC,aAAa;YAAE,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,IAAuB,EAAE,QAAkB,EAAE,GAAkB;IACxG,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAIhH,IAAI,MAAkD,CAAC;IACvD,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;QACrC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;QACjC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;QAC/B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAC,CAAC;IAEH,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE;YACjD,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;YAMzB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,GAAG,CAAC,SAAS;gBACf,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE;gBAC/J,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACrE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,SAAoC,EAAE,CAAC;IACpJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,MAAM,MAAM,GAAiB;QAC3B,GAAG,IAAI;QACP,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACnC,cAAc,EAAE,QAAQ;QACxB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;IAMF,IAAI,cAAmD,CAAC;IACxD,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAI9D,MAAM,CAAC,GACL,MAAM;YACN,CAAC,MAAM,CAAC,KAAK,IAAyD,EAAE;gBACtE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAc,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClI,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,CAAC,CAAC,EAAE,CAAC,CAAC;QACR,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,yBAAyB,QAAQ,EAAE,CAAC;YACzF,cAAc,GAAG;gBACf,KAAK,EAAE,gBAAgB,CAAC,yCAAyC,EAAE,CAAC,CAAC,IAAI,CAAC;gBAC1E,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,MAAM;gBACN,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,EAAE,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC,CAAC;IAClH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAaD,MAAM,UAAU,oBAAoB,CAClC,IAAgB,EAChB,OAA4F;IAE5F,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC,UAAU,GAAG;QAChB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAIvB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAa,EAAE,GAAI,GAAG,CAAC,IAA+C,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAc,CAAC;YAC9H,OAAO,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/leader/wire.d.ts

@@ -0,0 +1,66 @@
+import { type Brain, type Model, type ModelRoles, type ModelPricing, type TaskSpec, type ExecutionEnvFactory, type RemoteExecutionEnv, type ToolResultStore, type SessionStore } from "@sema-agent/core";
+import type { CheckpointStoreFull } from "../plugins/store-backend.js";
+import { type LeaderResult } from "./leader.js";
+import type { LeaderRequestBody } from "./endpoint.js";
+export interface LeaderWireConfig {
+    e2bApiKey?: string;
+    envFactory?: ExecutionEnvFactory;
+    durable?: {
+        checkpointStore: CheckpointStoreFull;
+        requireApproval: string[];
+        deny?: string[];
+        ttlMs?: number;
+        autoBudget?: number;
+        neverAuto?: string[];
+    };
+    toolResultStore?: ToolResultStore;
+    sessionStore?: SessionStore;
+    brain: Brain;
+    models: Record<string, Model>;
+    roles: ModelRoles;
+    pricing: Record<string, ModelPricing>;
+    workspace?: string;
+    git?: {
+        name: string;
+        email: string;
+    };
+    fanoutEnabled?: boolean;
+    routerModel?: string;
+    repairRounds?: number;
+    conflictRounds?: number;
+    s3?: {
+        endpoint: string;
+        bucket: string;
+        accessKey: string;
+        secretKey: string;
+        region?: string;
+        keyPrefix?: string;
+    };
+    logger?: {
+        warn?: (m: string, x?: Record<string, unknown>) => void;
+        info?: (m: string, x?: Record<string, unknown>) => void;
+    };
+}
+type WireEnv = Pick<RemoteExecutionEnv, "exec" | "writeFile">;
+export declare function stageWorkerEnv(env: WireEnv, opts: {
+    seedCmd: string;
+    repo: string;
+    branch: string;
+    uploadScriptPath: string;
+    uploadScript: string;
+}): Promise<void>;
+export declare function leaderResourceConfig(env?: NodeJS.ProcessEnv): {
+    leaderTimeoutMs: number;
+    workerMaxTurns: number;
+    workerBudgetUsd: number;
+    workerLimits: Partial<TaskSpec>;
+    presignTtlSec: number;
+    resourceSuspend?: {
+        totalBudgetUsd: number;
+        sliceMaxCostUsd: number;
+        maxSuspends: number;
+    };
+};
+export declare function buildLeaderRunner(cfg: LeaderWireConfig): (body: LeaderRequestBody) => Promise<LeaderResult>;
+export {};
+//# sourceMappingURL=wire.d.ts.map

package/dist/leader/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/leader/wire.ts"],"names":[],"mappings":"AAiBA,OAAO,EAEL,KAAK,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,QAAQ,EAAE,KAAK,mBAAmB,EAAE,KAAK,kBAAkB,EAC5H,KAAK,eAAe,EAAE,KAAK,YAAY,EACxC,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIvE,OAAO,EAA4E,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAK1H,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAYvD,MAAM,WAAW,gBAAgB;IAE/B,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAKjC,OAAO,CAAC,EAAE;QAAE,eAAe,EAAE,mBAAmB,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAK1J,eAAe,CAAC,EAAE,eAAe,CAAC;IAIlC,YAAY,CAAC,EAAE,YAAY,CAAC;IAE5B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAEtC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAEtC,aAAa,CAAC,EAAE,OAAO,CAAC;IAMxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,YAAY,CAAC,EAAE,MAAM,CAAC;IAKtB,cAAc,CAAC,EAAE,MAAM,CAAC;IAKxB,EAAE,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrH,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,CAAC;CAC/H;AA4BD,KAAK,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;AA6C9D,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACtG,OAAO,CAAC,IAAI,CAAC,CAoBf;AAUD,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG;IAC1E,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IAMtB,eAAe,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5F,CAwBA;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAkhB3G"}

package/dist/leader/wire.js

@@ -0,0 +1,452 @@
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { Runner, combinePolicies, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, delimitUntrusted, } from "@sema-agent/core";
+import { RemoteContainerExecutionEnv } from "../plugins/remote-env-e2b.js";
+import { createDurableAskPolicy } from "../approval.js";
+import { presignS3Url } from "../plugins/s3-presign.js";
+import { buildUploadScript, uploadStepSuffix, fetchUploadedDiff, withStaging } from "./diffup.js";
+import { pullDiff, safeRev } from "./diffout.js";
+import { runLeaderTask } from "./leader.js";
+import { attachRepairLoopDeps } from "./repair-wire.js";
+import { routePlanWithFallback, validateSubtasks } from "./planner.js";
+const REPAIR_LOOP_WIRED = true;
+const sh = (env) => async (cmd) => {
+    const r = await env.exec(`bash -lc ${JSON.stringify(cmd)}`);
+    if (!r.ok)
+        throw new Error(`exec transport: ${r.error.message}`);
+    if (r.value.exitCode !== 0)
+        throw new Error(`exit ${r.value.exitCode}: ${r.value.stderr}`);
+    return r.value.stdout.trim();
+};
+const asIntegrationEnv = (env) => ({
+    exec: async (cmd, opts) => {
+        const r = await env.exec(cmd, opts?.cwd ? { cwd: opts.cwd } : undefined);
+        return r.ok ? r.value : { exitCode: -1, stdout: "", stderr: r.error.message };
+    },
+    writeFile: async (p, c) => { const r = await env.writeFile(p, c); if (!r.ok)
+        throw r.error; },
+});
+export async function stageWorkerEnv(env, opts) {
+    const { seedCmd, repo, branch, uploadScriptPath, uploadScript } = opts;
+    const probe = await env.exec(`bash -lc ${JSON.stringify(`if [ -f ${uploadScriptPath} ]; then exit 0; fi; ` +
+        `cd ${repo} 2>/dev/null && git rev-parse --verify --quiet refs/heads/${branch} >/dev/null && exit 0; ` +
+        `exit 1`)}`);
+    if (probe.ok && probe.value.exitCode === 0)
+        return;
+    await sh(env)(`${seedCmd}; cd ${repo}; git checkout -q -b ${branch}`);
+    const wr = await env.writeFile(uploadScriptPath, uploadScript);
+    if (!wr.ok)
+        throw new Error(`upload-script staging failed: ${wr.error.message}`);
+}
+export function leaderResourceConfig(env = process.env) {
+    const leaderTimeoutMs = Math.max(600_000, Math.floor(Number(env.LEADER_TIMEOUT_MS ?? "0")) || 86_400_000);
+    const workerMaxTurns = Math.floor(Number(env.LEADER_WORKER_MAX_TURNS ?? "0")) || 10_000;
+    const workerBudgetUsd = Number(env.LEADER_WORKER_BUDGET_USD ?? "0") || 100;
+    const resourceSuspendOn = String(env.LEADER_RESOURCE_SUSPEND ?? "").toLowerCase() === "true";
+    const sliceMaxCostUsd = Number(env.LEADER_WORKER_SLICE_BUDGET_USD ?? "0") || Math.max(1, workerBudgetUsd / 4);
+    return {
+        leaderTimeoutMs,
+        workerMaxTurns,
+        workerBudgetUsd,
+        workerLimits: { limits: { maxTurns: workerMaxTurns, timeoutSec: Math.floor(leaderTimeoutMs / 1000) }, maxCostUsd: workerBudgetUsd },
+        presignTtlSec: Math.ceil(leaderTimeoutMs / 1000) + 600,
+        ...(resourceSuspendOn
+            ? {
+                resourceSuspend: {
+                    totalBudgetUsd: workerBudgetUsd,
+                    sliceMaxCostUsd,
+                    maxSuspends: Math.max(20, Math.ceil(workerBudgetUsd / sliceMaxCostUsd) * 2 + 10),
+                },
+            }
+            : {}),
+    };
+}
+export function buildLeaderRunner(cfg) {
+    const W = cfg.workspace ?? "/home/user";
+    const repo = `${W}/repo`;
+    const ident = cfg.git ?? { name: "leader", email: "leader@local" };
+    const { leaderTimeoutMs, workerLimits, presignTtlSec, resourceSuspend: resourceCfg } = leaderResourceConfig();
+    const repairRounds = Math.max(0, Math.floor(Number(process.env.LEADER_REPAIR_ROUNDS ?? cfg.repairRounds ?? 0)) || 0);
+    const repairBudgetUsd = Number(process.env.LEADER_REPAIR_BUDGET_USD ?? "4") || 4;
+    const conflictRounds = Math.max(0, Math.floor(Number(process.env.LEADER_CONFLICT_ROUNDS ?? cfg.conflictRounds ?? 0)) || 0);
+    const repairLoopOn = String(process.env.LEADER_REPAIR_LOOP ?? "").toLowerCase() === "true";
+    const measureGatesOn = String(process.env.LEADER_MEASURE_GATES ?? "").toLowerCase() === "true";
+    const repairLoopAttempts = Math.min(3, Math.max(2, Math.floor(Number(process.env.LEADER_REPAIR_LOOP_ATTEMPTS ?? "2")) || 2));
+    const oracleFlakyK = Math.max(1, Math.floor(Number(process.env.LEADER_ORACLE_FLAKY_K ?? "2")) || 2);
+    const mkRepair = (rawEnv, repoDir, oracleFiles) => {
+        if (repairRounds <= 0)
+            return undefined;
+        return {
+            maxRounds: repairRounds,
+            run: async ({ round, errorText, testCmd }) => {
+                for (const f of oracleFiles) {
+                    await rawEnv.remove(f.path).catch(() => { });
+                    const ex = await rawEnv.exists(f.path);
+                    if (ex.ok && ex.value)
+                        throw new Error(`oracle still present after remove (${f.path}) — refusing repair (measurement integrity)`);
+                }
+                try {
+                    const runner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, executionEnv: rawEnv, rootPath: repoDir });
+                    const objective = [
+                        `The integrated project at ${repoDir} fails its build/test. Make the MINIMAL change to the working tree so this command exits 0 (cd into the repo and run it yourself to confirm):`,
+                        `  ${testCmd}`,
+                        `Several agents each ported a DISJOINT module group; the failure is almost certainly a cross-module integration mismatch (a shared interface, a missing/renamed symbol, a type/signature disagreement between two groups). Read the failing files, fix the smallest set of files, and re-run the command to verify it passes.`,
+                        `HARD RULES: do NOT git commit or git push; do NOT modify build configuration (gradle.properties / AGP / dependency versions / settings); do NOT add build-tooling files; do NOT call AskUserQuestion — decide autonomously. Preserve the ported semantics — fix the integration, never delete behavior just to make it pass.`,
+                        ``,
+                        delimitUntrusted("FAILING OUTPUT (untrusted)", errorText),
+                    ].join("\n");
+                    const res = await runner
+                        .runTaskStream({
+                        objective,
+                        sessionId: `leader-repair-${Date.now()}-${round}`,
+                        maxCostUsd: repairBudgetUsd,
+                        limits: { timeoutSec: Math.max(300, Math.floor(leaderTimeoutMs / 1000 / 2)) },
+                    })
+                        .result();
+                    if (res.status !== "completed")
+                        throw new Error(`repair round ${round} did not complete (status=${res.status})`);
+                    return { costUsd: res.stats?.costUsd, note: res.result?.slice(0, 200) };
+                }
+                finally {
+                    for (const f of oracleFiles) {
+                        const wr = await rawEnv.writeFile(f.path, f.content);
+                        if (!wr.ok)
+                            throw wr.error;
+                    }
+                }
+            },
+        };
+    };
+    const mkConflictResolver = (rawEnv, repoDir, oracleFiles) => {
+        if (conflictRounds <= 0)
+            return undefined;
+        return {
+            maxRounds: conflictRounds,
+            run: async ({ round, workerId, conflictText, patch }) => {
+                for (const f of oracleFiles) {
+                    await rawEnv.remove(f.path).catch(() => { });
+                    const ex = await rawEnv.exists(f.path);
+                    if (ex.ok && ex.value)
+                        throw new Error(`oracle still present after remove (${f.path}) — refusing conflict-resolve (measurement integrity)`);
+                }
+                try {
+                    const runner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, executionEnv: rawEnv, rootPath: repoDir });
+                    const objective = [
+                        `A parallel worker '${workerId}' ported a module on its own branch, but applying its patch onto the already-integrated tree at ${repoDir} produced a MERGE CONFLICT (git apply --3way). The OTHER workers' patches already applied cleanly — integrate THIS worker's changes too, resolving the overlap.`,
+                        `Resolve EVERY conflict in the working tree: open each file containing conflict markers (<<<<<<< / ======= / >>>>>>>) and merge BOTH sides' real intent (keep both workers' behaviour — never drop one side just to make it apply). Then apply any rejected hunks recorded in *.rej files by hand, and DELETE every *.rej and *.orig file.`,
+                        `When done, NO conflict markers and NO *.rej files may remain under ${repoDir}. Verify yourself before finishing: grep -rIlE '^(<<<<<<<|>>>>>>>)' . ; find . -name '*.rej'  — BOTH must print nothing.`,
+                        `HARD RULES: do NOT git commit / git add / git push (the coordinator squashes at the end); do NOT modify build configuration; do NOT call AskUserQuestion — decide autonomously. Preserve both sides' ported semantics.`,
+                        ``,
+                        delimitUntrusted("CONFLICTING WORKER PATCH (untrusted)", patch.slice(0, 6000)),
+                        delimitUntrusted("CONFLICT DETAILS (untrusted)", conflictText),
+                    ].join("\n");
+                    const res = await runner
+                        .runTaskStream({
+                        objective,
+                        sessionId: `leader-conflict-${Date.now()}-${round}`,
+                        maxCostUsd: repairBudgetUsd,
+                        limits: { timeoutSec: Math.max(300, Math.floor(leaderTimeoutMs / 1000 / 2)) },
+                    })
+                        .result();
+                    if (res.status !== "completed")
+                        throw new Error(`conflict-resolve round ${round} did not complete (status=${res.status})`);
+                    return { costUsd: res.stats?.costUsd, note: res.result?.slice(0, 200) };
+                }
+                finally {
+                    for (const f of oracleFiles) {
+                        const wr = await rawEnv.writeFile(f.path, f.content);
+                        if (!wr.ok)
+                            throw wr.error;
+                    }
+                }
+            },
+        };
+    };
+    return async (raw) => {
+        const body = raw;
+        if (!body.objective || !body.durableRemote || !body.testCmd || !body.seedCmd || !body.baseSha) {
+            return { ok: false, reports: [], cancelled: false, error: "request must provide objective, durableRemote, baseSha, testCmd, seedCmd" };
+        }
+        if (!/^(?:https?|git|ssh):\/\/[^\s]+$/i.test(body.durableRemote) && !/^[\w.-]+@[\w.-]+:[^\s]+$/.test(body.durableRemote)) {
+            return { ok: false, reports: [], cancelled: false, error: "durableRemote must be an http(s)/git/ssh URL or user@host:path (no ext::/file:// transport helpers)" };
+        }
+        if (!safeRev(body.baseSha)) {
+            return { ok: false, reports: [], cancelled: false, error: "baseSha must be a plain git rev (sha/branch token)" };
+        }
+        const injectOracles = async (env) => {
+            const ofs = body.oracleFiles ?? [];
+            if (ofs.length === 0)
+                return;
+            for (const f of ofs) {
+                const wr = await env.writeFile(f.path, f.content);
+                if (!wr.ok)
+                    throw wr.error;
+            }
+            const anchor = (p) => "/" + (/^[#!]/.test(p) ? "\\" + p : p);
+            const rel = ofs.map((f) => anchor(f.path.startsWith(`${repo}/`) ? f.path.slice(repo.length + 1) : f.path)).join("\n");
+            const cur = await env.exec(`bash -lc ${JSON.stringify(`cat ${repo}/.git/info/exclude 2>/dev/null || true`)}`);
+            const existing = cur.ok ? cur.value.stdout.replace(/\n*$/, "") : "";
+            const ex = await env.writeFile(`${repo}/.git/info/exclude`, `${existing}\n${rel}\n`);
+            if (!ex.ok)
+                throw ex.error;
+        };
+        const deps = {
+            plan: async () => {
+                if (Array.isArray(body.subtasks) && body.subtasks.length > 0) {
+                    return validateSubtasks(body.subtasks);
+                }
+                const planRunner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing });
+                const runRoute = async (prompt) => {
+                    const res = await planRunner.runTaskStream({
+                        objective: prompt,
+                        sessionId: `leader-route-${Date.now()}`,
+                        ...(cfg.routerModel ? { model: cfg.routerModel } : {}),
+                    }).result();
+                    return res.result ?? "";
+                };
+                const { subs, collapsed, rawSample } = await routePlanWithFallback(body.objective, runRoute, {
+                    ...(body.planContext ? { context: body.planContext } : {}),
+                    ...(cfg.fanoutEnabled === false ? { fanoutEnabled: false } : {}),
+                });
+                if (collapsed)
+                    cfg.logger?.warn?.("plan_collapsed_to_single", { reason: collapsed, ...(rawSample ? { rawSample } : {}) });
+                return subs;
+            },
+            provisionWorker: async (sub) => {
+                const sessionId = `leader-${sub.workerId}-${Date.now()}`;
+                let durableSpec = {};
+                if (cfg.durable) {
+                    const d = cfg.durable;
+                    durableSpec = {
+                        toolPolicy: combinePolicies(createDurableQuestionPolicy(), createDurableAskPolicy({ requireApproval: d.requireApproval, ...(d.deny ? { deny: d.deny } : {}), ...(d.autoBudget ? { autoBudget: d.autoBudget } : {}), ...(d.neverAuto ? { neverAuto: d.neverAuto } : {}) })),
+                        checkpointStore: d.checkpointStore,
+                        durableApproval: { scope: "_leader", ...(d.ttlMs ? { ttlMs: d.ttlMs } : {}) },
+                        onQuestion: QUESTION_AWAITS_RESUME,
+                    };
+                    await d.checkpointStore.putCtx(sessionId, { body: { objective: sub.spec.objective } }).catch((e) => {
+                        cfg.logger?.warn?.("leader_putctx_failed", { workerId: sub.workerId, err: String(e) });
+                    });
+                }
+                let resourceSpec = {};
+                const repairLoopActive = repairLoopOn && REPAIR_LOOP_WIRED;
+                if (repairLoopActive && resourceCfg) {
+                    cfg.logger?.warn?.("leader_resource_suspend_disabled_for_repair_loop", { workerId: sub.workerId, reason: "LEADER_REPAIR_LOOP active — resource-suspend mutually exclusive with the repair loop (§10.5)" });
+                }
+                if (resourceCfg && !repairLoopActive && cfg.durable && cfg.toolResultStore && cfg.sessionStore) {
+                    resourceSpec = {
+                        checkpointStore: cfg.durable.checkpointStore,
+                        resourceSuspend: { scope: `_leader-resource-${sub.workerId}`, totalBudgetUsd: resourceCfg.totalBudgetUsd },
+                        maxCostUsd: resourceCfg.sliceMaxCostUsd,
+                        maxSuspends: resourceCfg.maxSuspends,
+                    };
+                }
+                else if (resourceCfg && !repairLoopActive) {
+                    cfg.logger?.warn?.("leader_resource_suspend_inactive", {
+                        workerId: sub.workerId,
+                        reason: !cfg.durable
+                            ? "no durable checkpoint store"
+                            : !cfg.toolResultStore
+                                ? "no durable tool-result store"
+                                : "no durable session store",
+                    });
+                }
+                const keepCtxWarm = (runner) => {
+                    const d = cfg.durable;
+                    if (!d)
+                        return runner;
+                    const orig = runner.runTaskStream.bind(runner);
+                    runner.runTaskStream = (spec, resume) => {
+                        const stream = orig(spec, resume);
+                        const iv = setInterval(() => {
+                            void d.checkpointStore.putCtx(sessionId, { body: { objective: sub.spec.objective } }).catch(() => { });
+                        }, 45_000);
+                        iv.unref?.();
+                        void stream.result().then(() => clearInterval(iv), () => clearInterval(iv));
+                        return stream;
+                    };
+                    return runner;
+                };
+                if (cfg.s3 && cfg.envFactory) {
+                    const s3 = cfg.s3;
+                    const envFactory = cfg.envFactory;
+                    const baseSha = body.baseSha;
+                    const seedCmd = body.seedCmd;
+                    const key = `${s3.keyPrefix ?? "leader-diff"}/${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}/${sub.workerId}.patch`;
+                    const ttl = presignTtlSec;
+                    const base = { endpoint: s3.endpoint, bucket: s3.bucket, accessKey: s3.accessKey, secretKey: s3.secretKey, ...(s3.region ? { region: s3.region } : {}), key, expiresSec: ttl };
+                    const putUrl = presignS3Url({ ...base, method: "PUT" });
+                    const getUrl = presignS3Url({ ...base, method: "GET" });
+                    const script = buildUploadScript({ repoDir: repo, baseSha, putUrl, workDir: W });
+                    const stage = async (env) => {
+                        await stageWorkerEnv(env, { seedCmd, repo, branch: sub.branch, uploadScriptPath: `${W}/.leader-upload.sh`, uploadScript: script });
+                        void sh(env)(`nohup sh -c 'while true; do sleep 90; sh ${W}/.leader-upload.sh >/dev/null 2>&1 || true; done' </dev/null >/dev/null 2>&1 &`).catch(() => { });
+                    };
+                    return {
+                        workerId: sub.workerId, sessionId, branch: sub.branch,
+                        baseSha,
+                        runner: keepCtxWarm(new Runner({
+                            brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing,
+                            ...(cfg.toolResultStore ? { toolResultStore: cfg.toolResultStore } : {}),
+                            ...(cfg.sessionStore ? { sessionStore: cfg.sessionStore } : {}),
+                            executionEnvFactory: (ctx) => withStaging(envFactory(ctx), stage, async (e) => {
+                                await sh(e)(`cd ${repo} && git add -A && git -c user.name='leader-belt' -c user.email='belt@leader' commit -qm 'belt: auto-commit uncommitted worker output' || true; sh ${W}/.leader-upload.sh`);
+                            }),
+                        })),
+                        fetchDiff: () => fetchUploadedDiff(getUrl),
+                        spec: { ...workerLimits, ...sub.spec, ...durableSpec, ...resourceSpec, objective: `${sub.spec.objective}${uploadStepSuffix(W)}` },
+                    };
+                }
+                if (!cfg.e2bApiKey)
+                    throw new Error("leader wire: no envFactory+s3 (factory mode) and no e2bApiKey (static mode)");
+                const env = new RemoteContainerExecutionEnv({ apiKey: cfg.e2bApiKey, timeoutMs: leaderTimeoutMs });
+                if (!(await env.connect()).ok)
+                    throw new Error(`connect failed for ${sub.workerId}`);
+                await sh(env)(`${body.seedCmd}; cd ${repo}; git checkout -q -b ${sub.branch}`);
+                const baseSha = await sh(env)(`cd ${repo} && git rev-parse HEAD`);
+                return {
+                    workerId: sub.workerId, sessionId, branch: sub.branch, baseSha,
+                    runner: keepCtxWarm(new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...(cfg.toolResultStore ? { toolResultStore: cfg.toolResultStore } : {}), ...(cfg.sessionStore ? { sessionStore: cfg.sessionStore } : {}), executionEnv: env })),
+                    diffEnv: env,
+                    destroy: () => env.destroy().then(() => { }),
+                    spec: { ...workerLimits, ...sub.spec, ...durableSpec, ...resourceSpec },
+                };
+            },
+            provisionIntegrationSandbox: async () => {
+                if (cfg.envFactory) {
+                    const env = cfg.envFactory({ sessionId: `leader-integ-${Date.now()}` });
+                    try {
+                        await sh(env)(body.seedCmd);
+                        await injectOracles(env);
+                    }
+                    catch (e) {
+                        await Promise.resolve(env.destroy()).catch(() => { });
+                        throw e;
+                    }
+                    return { env: asIntegrationEnv(env), destroy: () => Promise.resolve(env.destroy()).then(() => { }), ...(mkRepair(env, repo, body.oracleFiles ?? []) ? { repair: mkRepair(env, repo, body.oracleFiles ?? []) } : {}), ...(mkConflictResolver(env, repo, body.oracleFiles ?? []) ? { conflictResolver: mkConflictResolver(env, repo, body.oracleFiles ?? []) } : {}) };
+                }
+                if (!cfg.e2bApiKey)
+                    throw new Error("leader wire: no envFactory and no e2bApiKey");
+                const env = new RemoteContainerExecutionEnv({ apiKey: cfg.e2bApiKey, timeoutMs: leaderTimeoutMs });
+                if (!(await env.connect()).ok) {
+                    await env.destroy().catch(() => { });
+                    throw new Error("integ connect failed");
+                }
+                try {
+                    await sh(env)(body.seedCmd);
+                    await injectOracles(env);
+                }
+                catch (e) {
+                    await env.destroy().catch(() => { });
+                    throw e;
+                }
+                return { env: asIntegrationEnv(env), destroy: () => env.destroy().then(() => { }), ...(mkRepair(env, repo, body.oracleFiles ?? []) ? { repair: mkRepair(env, repo, body.oracleFiles ?? []) } : {}), ...(mkConflictResolver(env, repo, body.oracleFiles ?? []) ? { conflictResolver: mkConflictResolver(env, repo, body.oracleFiles ?? []) } : {}) };
+            },
+            push: async (integratedPatch, baseSha) => {
+                const dir = mkdtempSync(join(tmpdir(), "leader-coord-"));
+                const gitEnv = { ...process.env, LC_ALL: "C" };
+                try {
+                    execFileSync("git", ["clone", "-q", body.durableRemote, dir], { env: gitEnv });
+                    execFileSync("git", ["-C", dir, "config", "user.name", ident.name]);
+                    execFileSync("git", ["-C", dir, "config", "user.email", ident.email]);
+                    writeFileSync(join(dir, ".leader.patch"), integratedPatch);
+                    execFileSync("git", ["-C", dir, "am", "--3way", ".leader.patch"], { env: gitEnv });
+                    rmSync(join(dir, ".leader.patch"));
+                    const ref = body.targetRef ?? "refs/heads/main";
+                    const ls = execFileSync("git", ["-C", dir, "ls-remote", "--refs", "origin", ref], { encoding: "utf8", env: gitEnv });
+                    const exists = ls.split("\n").some((l) => l.split("\t")[1] === ref);
+                    if (exists) {
+                        execFileSync("git", ["-C", dir, "push", `--force-with-lease=${ref}:${baseSha}`, "origin", `HEAD:${ref}`], { env: gitEnv });
+                    }
+                    else {
+                        execFileSync("git", ["-C", dir, "push", `--force-with-lease=${ref}:`, "origin", `HEAD:${ref}`], { env: gitEnv });
+                    }
+                    return { ok: true, ref };
+                }
+                catch (e) {
+                    const msg = e instanceof Error ? e.message : String(e);
+                    return { ok: false, raced: /stale info|force-with-lease|\[rejected\]|non-fast-forward/.test(msg), error: msg };
+                }
+                finally {
+                    rmSync(dir, { recursive: true, force: true });
+                }
+            },
+            testCmd: body.testCmd,
+            repoDir: repo, workerRepoDir: repo,
+            timeoutMs: leaderTimeoutMs, maxConcurrency: 4,
+            replan: { ...(process.env.LEADER_BUDGET_USD ? { budgetUsd: Number(process.env.LEADER_BUDGET_USD) } : {}) },
+            ...(measureGatesOn
+                ? { mergeGates: { measureGates: true, ...((body.oracleFiles?.length ?? 0) > 0 ? { strongOracleSeeded: true } : {}) } }
+                : {}),
+            ...(cfg.logger ? { logger: cfg.logger } : {}),
+        };
+        const resolveRepair = async (solo, _sub) => {
+            let env;
+            if (cfg.envFactory) {
+                env = cfg.envFactory({ sessionId: `leader-grader-${Date.now()}` });
+            }
+            else {
+                if (!cfg.e2bApiKey)
+                    throw new Error("leader wire: repair-loop grader needs an envFactory or e2bApiKey");
+                const e2b = new RemoteContainerExecutionEnv({ apiKey: cfg.e2bApiKey, timeoutMs: leaderTimeoutMs });
+                if (!(await e2b.connect()).ok) {
+                    await e2b.destroy().catch(() => { });
+                    throw new Error("repair-loop grader connect failed");
+                }
+                env = e2b;
+            }
+            let integBase;
+            try {
+                await sh(env)(body.seedCmd);
+                await injectOracles(env);
+                integBase = await sh(env)(`cd ${repo} && git rev-parse HEAD`);
+            }
+            catch (e) {
+                await Promise.resolve(env.destroy()).catch(() => { });
+                throw e;
+            }
+            const grader = {
+                env: env,
+                writeFile: async (p, c) => { const r = await env.writeFile(p, c); if (!r.ok)
+                    throw r.error; },
+                repoDir: repo,
+                integBase,
+            };
+            const workerRepoDir = repo;
+            const pullWorkerDiff = solo.fetchDiff
+                ?
+                    solo.fetchDiff
+                : async () => {
+                    const wenv = solo.diffEnv;
+                    await wenv
+                        .exec(`bash -lc ${JSON.stringify(`cd ${repo} && git add -A && (git diff --cached --quiet || git -c user.email=w@w.co -c user.name=worker commit -q -m repair-wip)`)}`)
+                        .catch(() => { });
+                    return pullDiff(solo.diffEnv, solo.baseSha, { ref: solo.branch, ...(workerRepoDir ? { cwd: workerRepoDir } : {}) });
+                };
+            const oracleSteps = [{ command: body.testCmd, cwd: repo, label: "oracle-test" }];
+            const oracleFiles = body.oracleFiles ?? [];
+            const passTier = oracleFiles.length > 0 ? "trusted_hidden" : "property_harness_weak";
+            if (solo.fetchDiff)
+                cfg.logger?.info?.("repair_loop_factory_lane_isolation", { workerId: solo.workerId, reason: "identity check intentionally skipped — isolation by independent grader sandbox construction (§10.2)" });
+            return {
+                runner: solo.runner,
+                grader,
+                graderDestroy: () => Promise.resolve(env.destroy()).then(() => { }),
+                pullWorkerDiff,
+                oracleSteps,
+                passTier,
+                ...(oracleFiles.length > 0 ? { oracleFiles, oraclePaths: oracleFiles.map((f) => f.path) } : {}),
+                maxAttempts: repairLoopAttempts,
+                flakyK: oracleFlakyK,
+                ...(!solo.fetchDiff && solo.diffEnv ? { workerEnv: solo.diffEnv } : {}),
+                log: (event, x) => event.includes("fail") || event.includes("warn") || event.includes("threw")
+                    ? cfg.logger?.warn?.(event, x)
+                    : cfg.logger?.info?.(event, x),
+            };
+        };
+        attachRepairLoopDeps(deps, repairLoopOn ? resolveRepair : undefined);
+        return runLeaderTask(body.objective, body.baseSha, deps);
+    };
+}
+//# sourceMappingURL=wire.js.map