@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/ci/runs/schemas.js

@@ -0,0 +1,329 @@
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import * as z from 'zod/v4';
+import { CiEventSchema, CiStatusSchema } from "../schemas.js";
+/**
+ * Git object ids are immutable source authority. SHA-1 repositories use 40
+ * hexadecimal characters; SHA-256 repositories use 64.
+ */
+export const CiCommitShaSchema = z
+    .string()
+    .regex(/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i, 'expected a full Git object id');
+export const CiConfigHashSchema = z
+    .string()
+    .regex(/^[0-9a-f]{64}$/i, 'expected a SHA-256 descriptor hash');
+export const CiRunRequestKeySchema = z
+    .string()
+    .regex(/^[0-9a-f]{64}$/i, 'expected a SHA-256 CI request key');
+export const CiActorSchema = z.object({
+    kind: z.enum(['human', 'agent', 'system']),
+    id: z.string().min(1),
+    displayName: z.string().min(1).optional()
+});
+export const CiSourceRevisionSchema = z.object({
+    provider: z.string().min(1),
+    repository: z.string().min(1),
+    repositoryId: z.string().min(1).optional(),
+    sha: CiCommitShaSchema,
+    ref: z.string().min(1),
+    branch: z.string().min(1).optional(),
+    pullRequestNumber: z.number().int().positive().optional()
+});
+export const CiCancellationSchema = z.object({
+    requestedAt: z.iso.datetime(),
+    requestedBy: CiActorSchema,
+    reason: z.string().min(1).optional(),
+    /**
+     * Durable proof of whether execution had been claimed when cancellation won
+     * its lifecycle CAS. A queued origin with no lease can be acknowledged
+     * locally; every other origin requires positive executor stop evidence.
+     */
+    executionStateAtRequest: z.enum(['queued', 'provisioning', 'running']).optional(),
+    acknowledgedAt: z.iso.datetime().optional(),
+    executorCancellationRef: z.string().min(1).optional()
+});
+export const CiRunSchema = z.object({
+    id: z.string().uuid(),
+    requestKey: CiRunRequestKeySchema,
+    pipelineId: z.string().min(1),
+    configHash: CiConfigHashSchema,
+    source: CiSourceRevisionSchema,
+    event: CiEventSchema,
+    status: CiStatusSchema,
+    requiredContexts: z.array(z.string().min(1)).default([]),
+    requestedBy: CiActorSchema,
+    version: z.number().int().nonnegative(),
+    summary: z.string().min(1).optional(),
+    logsRef: z.string().min(1).optional(),
+    cancellation: CiCancellationSchema.optional(),
+    createdAt: z.iso.datetime(),
+    updatedAt: z.iso.datetime(),
+    startedAt: z.iso.datetime().optional(),
+    finishedAt: z.iso.datetime().optional()
+});
+export const CiPublicRunSchema = CiRunSchema.omit({ requestedBy: true });
+export const CiExecutionLeaseSchema = z
+    .object({
+    id: z.string().uuid(),
+    generation: z.number().int().positive(),
+    executorId: z.string().min(1),
+    claimedAt: z.iso.datetime(),
+    /** Short renewable liveness expiry; never the user-authored job deadline. */
+    expiresAt: z.iso.datetime(),
+    /** Immutable absolute whole-job deadline resolved from repository policy. */
+    deadlineAt: z.iso.datetime()
+})
+    .superRefine((lease, context) => {
+    const claimedAt = new Date(lease.claimedAt).getTime();
+    const expiresAt = new Date(lease.expiresAt).getTime();
+    const deadlineAt = new Date(lease.deadlineAt).getTime();
+    if (expiresAt <= claimedAt) {
+        context.addIssue({
+            code: 'custom',
+            path: ['expiresAt'],
+            message: 'CI execution lease must expire after it is claimed'
+        });
+    }
+    if (expiresAt > deadlineAt) {
+        context.addIssue({
+            code: 'custom',
+            path: ['expiresAt'],
+            message: 'CI execution lease expiry cannot exceed the immutable job deadline'
+        });
+    }
+});
+/**
+ * Read-side lease: `deadlineAt` is optional because attempts durably stored
+ * before that field existed have no value for it, and a stored row is a
+ * historical fact, not invalid input. Requiring it on the read path made every
+ * run with a pre-`deadlineAt` attempt unreadable through the run-detail route —
+ * `vibes ci logs` and `vibes ci show` failed with a bare "Validation error" on
+ * whole repositories, so a red pipeline could not be diagnosed at all.
+ *
+ * New claims stay strict: `CiExecutionClaimRequestSchema` keeps
+ * `CiExecutionLeaseSchema`, so no lease can be *written* without its immutable
+ * deadline, and the expiry-vs-deadline invariant is still enforced whenever a
+ * deadline is present.
+ */
+export const CiStoredExecutionLeaseSchema = z
+    .object({
+    id: z.string().uuid(),
+    generation: z.number().int().positive(),
+    executorId: z.string().min(1),
+    claimedAt: z.iso.datetime(),
+    expiresAt: z.iso.datetime(),
+    deadlineAt: z.iso.datetime().optional()
+})
+    .superRefine((lease, context) => {
+    const claimedAt = new Date(lease.claimedAt).getTime();
+    const expiresAt = new Date(lease.expiresAt).getTime();
+    if (expiresAt <= claimedAt) {
+        context.addIssue({
+            code: 'custom',
+            path: ['expiresAt'],
+            message: 'CI execution lease must expire after it is claimed'
+        });
+    }
+    if (lease.deadlineAt !== undefined && expiresAt > new Date(lease.deadlineAt).getTime()) {
+        context.addIssue({
+            code: 'custom',
+            path: ['expiresAt'],
+            message: 'CI execution lease expiry cannot exceed the immutable job deadline'
+        });
+    }
+});
+/**
+ * Immutable, provider-addressed input needed to dispatch a planned attempt.
+ *
+ * The CI package owns the durable envelope while the named executor owns and
+ * validates its JSON payload. Credentials are deliberately not part of this
+ * contract; executors materialize them just-in-time.
+ */
+export const CiAttemptDispatchSchema = z.object({
+    kind: z.string().min(1),
+    payload: z.record(z.string(), JsonValueSchema)
+});
+export const CiExecutionClaimRequestSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    lease: CiExecutionLeaseSchema
+});
+/**
+ * Compare-and-swap input for extending only the short liveness expiry. The
+ * immutable deadline is deliberately absent and cannot be renewed.
+ */
+export const CiExecutionLeaseRenewalRequestSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    leaseId: z.string().uuid(),
+    executorId: z.string().min(1),
+    expectedGeneration: z.number().int().positive(),
+    renewedAt: z.iso.datetime(),
+    expiresAt: z.iso.datetime()
+});
+export const CiAttemptSchema = z
+    .object({
+    id: z.string().uuid(),
+    runId: z.string().uuid(),
+    suiteId: z.string().min(1),
+    context: z.string().min(1),
+    runnerId: z.string().min(1),
+    executorId: z.string().min(1),
+    needs: z.array(z.string().min(1)).default([]),
+    dispatch: CiAttemptDispatchSchema.optional(),
+    ordinal: z.number().int().positive(),
+    sha: CiCommitShaSchema,
+    status: CiStatusSchema,
+    version: z.number().int().nonnegative(),
+    /**
+     * Last lifecycle version durably projected to the external status-check
+     * surface. Undefined means the current version still needs projection.
+     */
+    checkProjectionVersion: z.number().int().nonnegative().optional(),
+    lease: CiStoredExecutionLeaseSchema.optional(),
+    exitCode: z.number().int().optional(),
+    failureSummary: z.string().min(1).optional(),
+    logsRef: z.string().min(1).optional(),
+    artifactsRef: z.string().min(1).optional(),
+    cancellation: CiCancellationSchema.optional(),
+    createdAt: z.iso.datetime(),
+    updatedAt: z.iso.datetime(),
+    startedAt: z.iso.datetime().optional(),
+    finishedAt: z.iso.datetime().optional()
+})
+    .superRefine((attempt, context) => {
+    if (attempt.checkProjectionVersion !== undefined &&
+        attempt.checkProjectionVersion > attempt.version) {
+        context.addIssue({
+            code: 'custom',
+            path: ['checkProjectionVersion'],
+            message: 'check projection version cannot exceed lifecycle version'
+        });
+    }
+});
+export const CiRunDetailSchema = z.object({
+    run: CiRunSchema,
+    attempts: z.array(CiAttemptSchema)
+});
+export const CiPublicRunDetailSchema = z.object({
+    run: CiPublicRunSchema,
+    attempts: z.array(CiAttemptSchema)
+});
+export const CiPlannedAttemptSchema = z.object({
+    suiteId: z.string().min(1),
+    context: z.string().min(1),
+    runnerId: z.string().min(1),
+    executorId: z.string().min(1),
+    needs: z.array(z.string().min(1)).optional(),
+    dispatch: CiAttemptDispatchSchema.optional(),
+    ordinal: z.number().int().positive().optional()
+});
+/**
+ * Immutable output of descriptor compilation and trigger matching. Control
+ * planes persist this plan before dispatching any repository code.
+ */
+export const CiExecutionPlanSchema = z
+    .object({
+    requestKey: CiRunRequestKeySchema,
+    pipelineId: z.string().min(1),
+    configHash: CiConfigHashSchema,
+    source: CiSourceRevisionSchema,
+    event: CiEventSchema,
+    requestedBy: CiActorSchema,
+    attempts: z.array(CiPlannedAttemptSchema).min(1)
+})
+    .superRefine((plan, context) => {
+    const suiteIds = new Set();
+    const contexts = new Set();
+    for (const attempt of plan.attempts) {
+        if (suiteIds.has(attempt.suiteId)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['attempts'],
+                message: `duplicate suite id '${attempt.suiteId}'`
+            });
+        }
+        if (contexts.has(attempt.context)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['attempts'],
+                message: `duplicate required context '${attempt.context}'`
+            });
+        }
+        suiteIds.add(attempt.suiteId);
+        contexts.add(attempt.context);
+    }
+    for (const [index, attempt] of plan.attempts.entries()) {
+        const uniqueNeeds = new Set();
+        for (const need of attempt.needs ?? []) {
+            if (uniqueNeeds.has(need)) {
+                context.addIssue({
+                    code: 'custom',
+                    path: ['attempts', index, 'needs'],
+                    message: `suite '${attempt.suiteId}' declares duplicate need '${need}'`
+                });
+            }
+            if (need === attempt.suiteId) {
+                context.addIssue({
+                    code: 'custom',
+                    path: ['attempts', index, 'needs'],
+                    message: `suite '${attempt.suiteId}' cannot depend on itself`
+                });
+            }
+            if (!suiteIds.has(need)) {
+                context.addIssue({
+                    code: 'custom',
+                    path: ['attempts', index, 'needs'],
+                    message: `suite '${attempt.suiteId}' needs unknown suite '${need}'`
+                });
+            }
+            uniqueNeeds.add(need);
+        }
+    }
+    const needsBySuite = new Map(plan.attempts.map((attempt) => [attempt.suiteId, attempt.needs ?? []]));
+    const visiting = new Set();
+    const visited = new Set();
+    const reportedCycles = new Set();
+    function visit(suiteId, path) {
+        if (visited.has(suiteId))
+            return;
+        if (visiting.has(suiteId)) {
+            const cycleStart = path.indexOf(suiteId);
+            const cycle = [...path.slice(cycleStart), suiteId];
+            const identity = [...new Set(cycle)].sort().join('\0');
+            if (!reportedCycles.has(identity)) {
+                reportedCycles.add(identity);
+                context.addIssue({
+                    code: 'custom',
+                    path: ['attempts'],
+                    message: `dependency cycle: ${cycle.join(' -> ')}`
+                });
+            }
+            return;
+        }
+        visiting.add(suiteId);
+        for (const need of needsBySuite.get(suiteId) ?? []) {
+            if (needsBySuite.has(need))
+                visit(need, [...path, suiteId]);
+        }
+        visiting.delete(suiteId);
+        visited.add(suiteId);
+    }
+    for (const suiteId of suiteIds)
+        visit(suiteId, []);
+});
+export const CiTransitionRequestSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    nextStatus: CiStatusSchema,
+    at: z.iso.datetime(),
+    summary: z.string().min(1).optional()
+});
+export const CiCancellationRequestSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    requestedAt: z.iso.datetime(),
+    requestedBy: CiActorSchema,
+    reason: z.string().min(1).optional()
+});
+export const CiCancellationAcknowledgementSchema = z.object({
+    expectedVersion: z.number().int().nonnegative(),
+    acknowledgedAt: z.iso.datetime(),
+    executorCancellationRef: z.string().min(1)
+});
+//# sourceMappingURL=schemas.js.map

package/dist/ci/runs/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/ci/runs/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,kCAAkC,EAAE,+BAA+B,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;AAGhE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC;;;;OAIG;IACH,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,UAAU,EAAE,qBAAqB;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,kBAAkB;IAC9B,MAAM,EAAE,sBAAsB;IAC9B,KAAK,EAAE,aAAa;IACpB,MAAM,EAAE,cAAc;IACtB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAGzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,6EAA6E;IAC7E,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,6EAA6E;IAC7E,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,oDAAoD;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,oEAAoE;SAC7E,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAGJ;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,oDAAoD;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxF,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,oEAAoE;SAC7E,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAGJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,KAAK,EAAE,sBAAsB;CAC7B,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC9B,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,iBAAiB;IACtB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC;;;OAGG;IACH,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjE,KAAK,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IACjC,IACC,OAAO,CAAC,sBAAsB,KAAK,SAAS;QAC5C,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,OAAO,EAC/C,CAAC;QACF,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,wBAAwB,CAAC;YAChC,OAAO,EAAE,0DAA0D;SACnE,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAIJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,WAAW;IAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,iBAAiB;IACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,UAAU,EAAE,qBAAqB;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,kBAAkB;IAC9B,MAAM,EAAE,sBAAsB;IAC9B,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChD,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,uBAAuB,OAAO,CAAC,OAAO,GAAG;aAClD,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,+BAA+B,OAAO,CAAC,OAAO,GAAG;aAC1D,CAAC,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,QAAQ,CAAC;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC;oBAClC,OAAO,EAAE,UAAU,OAAO,CAAC,OAAO,8BAA8B,IAAI,GAAG;iBACvE,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,QAAQ,CAAC;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC;oBAClC,OAAO,EAAE,UAAU,OAAO,CAAC,OAAO,2BAA2B;iBAC7D,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,QAAQ,CAAC;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC;oBAClC,OAAO,EAAE,UAAU,OAAO,CAAC,OAAO,0BAA0B,IAAI,GAAG;iBACnE,CAAC,CAAC;YACJ,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,SAAS,KAAK,CAAC,OAAe,EAAE,IAAc;QAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,CAAC,QAAQ,CAAC;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,UAAU,CAAC;oBAClB,OAAO,EAAE,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;iBAClD,CAAC,CAAC;YACJ,CAAC;YACD,OAAO;QACR,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAGJ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,UAAU,EAAE,cAAc;IAC1B,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAChC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1C,CAAC,CAAC"}

package/dist/ci/runs/state-machine.d.ts

@@ -0,0 +1,33 @@
+import type { CiStatus } from '../schemas.ts';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { type CiAttempt, type CiCancellationAcknowledgement, type CiCancellationRequest, type CiExecutionClaimRequest, type CiExecutionLeaseRenewalRequest, type CiRun, type CiTransitionRequest } from './schemas.ts';
+export declare const CI_TERMINAL_STATUSES: readonly CiStatus[];
+export declare class CiStateConflictError extends CapabilityError {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function isTerminalCiStatus(status: CiStatus): boolean;
+export declare function canTransitionCiStatus(current: CiStatus, next: CiStatus): boolean;
+export declare function assertCiStatusTransition(current: CiStatus, next: CiStatus): void;
+export declare function transitionCiRun(run: CiRun, input: CiTransitionRequest): CiRun;
+export declare function transitionCiAttempt(attempt: CiAttempt, input: CiTransitionRequest): CiAttempt;
+/**
+ * Atomically claim one queued attempt for an executor. `running` therefore
+ * means repository execution has an acknowledged owner, never merely that a
+ * control plane tried to enqueue work. Repeating the same stable lease id is
+ * idempotent so a lost claim response can be recovered; the executor's own
+ * atomic journal decides which duplicate delivery may run commands.
+ */
+export declare function claimCiAttemptExecution(attempt: CiAttempt, input: CiExecutionClaimRequest): CiAttempt;
+/**
+ * Renew one live executor lease without changing lifecycle version or the
+ * immutable job deadline. Lease generation is its own CAS domain so heartbeats
+ * do not create status-check projection churn or stale an otherwise valid
+ * completion callback.
+ */
+export declare function renewCiAttemptExecutionLease(attempt: CiAttempt, input: CiExecutionLeaseRenewalRequest): CiAttempt;
+export declare function requestCiRunCancellation(run: CiRun, input: CiCancellationRequest): CiRun;
+export declare function requestCiAttemptCancellation(attempt: CiAttempt, input: CiCancellationRequest): CiAttempt;
+export declare function acknowledgeCiAttemptCancellation(attempt: CiAttempt, input: CiCancellationAcknowledgement): CiAttempt;
+//# sourceMappingURL=state-machine.d.ts.map

package/dist/ci/runs/state-machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-machine.d.ts","sourceRoot":"","sources":["../../../src/ci/runs/state-machine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAQN,KAAK,SAAS,EACd,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,KAAK,EACV,KAAK,mBAAmB,EACxB,MAAM,cAAc,CAAC;AAEtB,eAAO,MAAM,oBAAoB,EAAE,SAAS,QAAQ,EAKnD,CAAC;AAmBF,qBAAa,oBAAqB,SAAQ,eAAe;gBAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO1D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAE5D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAEhF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAIhF;AAoBD,wBAAgB,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,GAAG,KAAK,CAgB7E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,CA0B7F;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACtC,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,uBAAuB,GAC5B,SAAS,CAkDX;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,8BAA8B,GACnC,SAAS,CAkEX;AAkCD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,GAAG,KAAK,CAExF;AAED,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,qBAAqB,GAC1B,SAAS,CAEX;AAED,wBAAgB,gCAAgC,CAC/C,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,6BAA6B,GAClC,SAAS,CAwBX"}

package/dist/ci/runs/state-machine.js

@@ -0,0 +1,262 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { CiAttemptSchema, CiCancellationAcknowledgementSchema, CiCancellationRequestSchema, CiExecutionClaimRequestSchema, CiExecutionLeaseRenewalRequestSchema, CiRunSchema, CiTransitionRequestSchema } from "./schemas.js";
+export const CI_TERMINAL_STATUSES = [
+    'succeeded',
+    'failed',
+    'cancelled',
+    'error'
+];
+const EMPTY_STATUSES = [];
+const CI_STATUS_TRANSITIONS = {
+    queued: ['provisioning', 'running', 'cancelling', 'error'],
+    provisioning: ['running', 'cancelling', 'error'],
+    running: ['cancelling', 'succeeded', 'failed', 'error'],
+    cancelling: ['succeeded', 'failed', 'cancelled', 'error'],
+    succeeded: EMPTY_STATUSES,
+    failed: EMPTY_STATUSES,
+    cancelled: EMPTY_STATUSES,
+    error: EMPTY_STATUSES
+};
+export class CiStateConflictError extends CapabilityError {
+    constructor(message, options) {
+        super(message, 'CONFLICT', {
+            reason: 'ci-state-conflict',
+            cause: options?.cause
+        });
+        this.name = 'CiStateConflictError';
+    }
+}
+export function isTerminalCiStatus(status) {
+    return CI_TERMINAL_STATUSES.includes(status);
+}
+export function canTransitionCiStatus(current, next) {
+    return CI_STATUS_TRANSITIONS[current].includes(next);
+}
+export function assertCiStatusTransition(current, next) {
+    if (!canTransitionCiStatus(current, next)) {
+        throw new CiStateConflictError(`invalid CI status transition: ${current} -> ${next}`);
+    }
+}
+function assertExpectedVersion(actual, expected) {
+    if (actual !== expected) {
+        throw new CiStateConflictError(`stale CI state version: expected ${expected}, current ${actual}`);
+    }
+}
+function transitionTimestamps(record, request) {
+    return {
+        startedAt: record.startedAt ?? (request.nextStatus === 'running' ? request.at : undefined),
+        finishedAt: isTerminalCiStatus(request.nextStatus) ? request.at : undefined
+    };
+}
+export function transitionCiRun(run, input) {
+    const request = CiTransitionRequestSchema.parse(input);
+    assertExpectedVersion(run.version, request.expectedVersion);
+    assertCiStatusTransition(run.status, request.nextStatus);
+    if (request.nextStatus === 'cancelling' && !run.cancellation) {
+        throw new CiStateConflictError('entering cancelling requires requestCiRunCancellation()');
+    }
+    return CiRunSchema.parse({
+        ...run,
+        ...transitionTimestamps(run, request),
+        status: request.nextStatus,
+        version: run.version + 1,
+        summary: request.summary ?? run.summary,
+        updatedAt: request.at
+    });
+}
+export function transitionCiAttempt(attempt, input) {
+    const request = CiTransitionRequestSchema.parse(input);
+    if (request.nextStatus === 'running') {
+        throw new CiStateConflictError('CI attempts enter running only through claimCiAttemptExecution()');
+    }
+    if (request.nextStatus === 'cancelled') {
+        throw new CiStateConflictError('CI attempts enter cancelled only through acknowledgeCiAttemptCancellation()');
+    }
+    assertExpectedVersion(attempt.version, request.expectedVersion);
+    assertCiStatusTransition(attempt.status, request.nextStatus);
+    if (request.nextStatus === 'cancelling' && !attempt.cancellation) {
+        throw new CiStateConflictError('entering cancelling requires requestCiAttemptCancellation()');
+    }
+    return CiAttemptSchema.parse({
+        ...attempt,
+        ...transitionTimestamps(attempt, request),
+        status: request.nextStatus,
+        version: attempt.version + 1,
+        failureSummary: request.summary ?? attempt.failureSummary,
+        updatedAt: request.at
+    });
+}
+/**
+ * Atomically claim one queued attempt for an executor. `running` therefore
+ * means repository execution has an acknowledged owner, never merely that a
+ * control plane tried to enqueue work. Repeating the same stable lease id is
+ * idempotent so a lost claim response can be recovered; the executor's own
+ * atomic journal decides which duplicate delivery may run commands.
+ */
+export function claimCiAttemptExecution(attempt, input) {
+    const request = CiExecutionClaimRequestSchema.parse(input);
+    if (request.lease.generation !== 1) {
+        throw new CiStateConflictError('initial CI execution lease generation must be 1');
+    }
+    if (attempt.lease?.id === request.lease.id) {
+        // Re-presenting a lease id this attempt already holds is one executor
+        // recovering, not two executors colliding: the id is minted per attempt
+        // and never travels. What must match is WHO holds it.
+        //
+        // Requiring an identical `claimedAt` made that recovery impossible, and
+        // the cost was not theoretical. A redelivered bootstrap retry — the path
+        // a cold container takes — computes a fresh claimedAt, so its claim was
+        // refused, the consumer returned without starting a heartbeat, and the
+        // sweeper terminalized a job that was about to run:
+        // `executor lease expired before completion`, with no log, on most of a
+        // 42-repository fleet whenever the sandbox pool was saturated.
+        if (attempt.lease.deadlineAt !== request.lease.deadlineAt) {
+            throw new CiStateConflictError('CI execution lease identity conflicts');
+        }
+        if (attempt.lease.executorId !== request.lease.executorId) {
+            throw new CiStateConflictError('CI execution lease is held by a different executor');
+        }
+        if (attempt.status !== 'running') {
+            throw new CiStateConflictError(`cannot re-claim a CI attempt in '${attempt.status}' state`);
+        }
+        return attempt;
+    }
+    assertExpectedVersion(attempt.version, request.expectedVersion);
+    if (attempt.status !== 'queued') {
+        throw new CiStateConflictError(`cannot claim CI attempt in '${attempt.status}' state`);
+    }
+    if (attempt.lease) {
+        throw new CiStateConflictError('CI attempt already has an execution lease');
+    }
+    if (attempt.executorId !== request.lease.executorId) {
+        throw new CiStateConflictError(`CI executor mismatch: planned '${attempt.executorId}', claimed '${request.lease.executorId}'`);
+    }
+    return CiAttemptSchema.parse({
+        ...attempt,
+        status: 'running',
+        lease: request.lease,
+        version: attempt.version + 1,
+        updatedAt: request.lease.claimedAt,
+        startedAt: request.lease.claimedAt
+    });
+}
+/**
+ * Renew one live executor lease without changing lifecycle version or the
+ * immutable job deadline. Lease generation is its own CAS domain so heartbeats
+ * do not create status-check projection churn or stale an otherwise valid
+ * completion callback.
+ */
+export function renewCiAttemptExecutionLease(attempt, input) {
+    const request = CiExecutionLeaseRenewalRequestSchema.parse(input);
+    assertExpectedVersion(attempt.version, request.expectedVersion);
+    if (attempt.status !== 'running') {
+        throw new CiStateConflictError(`cannot renew CI attempt in '${attempt.status}' state`);
+    }
+    const lease = attempt.lease;
+    if (!lease) {
+        throw new CiStateConflictError('cannot renew CI attempt without an execution lease');
+    }
+    if (lease.id !== request.leaseId) {
+        throw new CiStateConflictError('CI execution lease id mismatch');
+    }
+    if (lease.executorId !== request.executorId) {
+        throw new CiStateConflictError('CI execution lease executor mismatch');
+    }
+    if (lease.generation !== request.expectedGeneration) {
+        throw new CiStateConflictError(`stale CI execution lease generation: expected ${request.expectedGeneration}, current ${lease.generation}`);
+    }
+    const renewedAt = new Date(request.renewedAt).getTime();
+    const claimedAt = new Date(lease.claimedAt).getTime();
+    const currentExpiry = new Date(lease.expiresAt).getTime();
+    const nextExpiry = new Date(request.expiresAt).getTime();
+    // A lease stored before `deadlineAt` existed has no recorded bound. Reject the
+    // renewal rather than comparing against NaN: every `>` test against NaN is
+    // false, so the checks below would silently pass and grant an unbounded
+    // extension — the exact opposite of the immutable-deadline invariant.
+    if (lease.deadlineAt === undefined) {
+        throw new CiStateConflictError('CI execution lease has no recorded immutable job deadline and cannot be renewed');
+    }
+    const deadline = new Date(lease.deadlineAt).getTime();
+    if (renewedAt < claimedAt) {
+        throw new CiStateConflictError('CI execution lease cannot be renewed before it is claimed');
+    }
+    if (renewedAt >= currentExpiry) {
+        throw new CiStateConflictError('cannot renew an expired CI execution lease');
+    }
+    if (nextExpiry <= renewedAt) {
+        throw new CiStateConflictError('renewed CI execution lease must expire after renewal');
+    }
+    if (nextExpiry < currentExpiry) {
+        throw new CiStateConflictError('renewed CI execution lease must extend liveness expiry');
+    }
+    if (nextExpiry === currentExpiry && currentExpiry !== deadline) {
+        throw new CiStateConflictError('renewed CI execution lease must extend liveness expiry');
+    }
+    if (nextExpiry > deadline) {
+        throw new CiStateConflictError('renewed CI execution lease cannot exceed the immutable job deadline');
+    }
+    return CiAttemptSchema.parse({
+        ...attempt,
+        lease: {
+            ...lease,
+            generation: lease.generation + 1,
+            expiresAt: request.expiresAt
+        },
+        updatedAt: request.renewedAt
+    });
+}
+function requestCancellation(record, input, parse) {
+    const request = CiCancellationRequestSchema.parse(input);
+    assertExpectedVersion(record.version, request.expectedVersion);
+    if (isTerminalCiStatus(record.status)) {
+        throw new CiStateConflictError(`cannot cancel terminal CI state '${record.status}'`);
+    }
+    if (record.status === 'cancelling') {
+        if (!record.cancellation) {
+            throw new CiStateConflictError('cancelling CI state has no cancellation request');
+        }
+        return record;
+    }
+    assertCiStatusTransition(record.status, 'cancelling');
+    return parse({
+        ...record,
+        status: 'cancelling',
+        version: record.version + 1,
+        updatedAt: request.requestedAt,
+        cancellation: {
+            requestedAt: request.requestedAt,
+            requestedBy: request.requestedBy,
+            reason: request.reason,
+            executionStateAtRequest: record.status
+        }
+    });
+}
+export function requestCiRunCancellation(run, input) {
+    return requestCancellation(run, input, (value) => CiRunSchema.parse(value));
+}
+export function requestCiAttemptCancellation(attempt, input) {
+    return requestCancellation(attempt, input, (value) => CiAttemptSchema.parse(value));
+}
+export function acknowledgeCiAttemptCancellation(attempt, input) {
+    const acknowledgement = CiCancellationAcknowledgementSchema.parse(input);
+    assertExpectedVersion(attempt.version, acknowledgement.expectedVersion);
+    if (attempt.status !== 'cancelling' || !attempt.cancellation) {
+        throw new CiStateConflictError('only a cancelling CI attempt can acknowledge cancellation');
+    }
+    if (!attempt.cancellation.executionStateAtRequest) {
+        throw new CiStateConflictError('cancellation acknowledgement requires recorded execution state evidence');
+    }
+    return CiAttemptSchema.parse({
+        ...attempt,
+        status: 'cancelled',
+        version: attempt.version + 1,
+        updatedAt: acknowledgement.acknowledgedAt,
+        finishedAt: acknowledgement.acknowledgedAt,
+        cancellation: {
+            ...attempt.cancellation,
+            acknowledgedAt: acknowledgement.acknowledgedAt,
+            executorCancellationRef: acknowledgement.executorCancellationRef
+        }
+    });
+}
+//# sourceMappingURL=state-machine.js.map