@zaip-ai/cli 4.6.0 → 4.7.0

package/templates/.agents/runtime/bin/zaip.mjs

@@ -93,7 +93,7 @@ ${yaml}
 ${FRONTMATTER_BOUNDARY}
 
 ${body}
-`}var import_yaml3,FRONTMATTER_BOUNDARY,MAX_SAFE_ALIAS_COUNT2,MarkdownContractError;var init_markdown=__esm({"../core/src/markdown.ts"(){"use strict";import_yaml3=__toESM(require_dist(),1);FRONTMATTER_BOUNDARY="---";MAX_SAFE_ALIAS_COUNT2=10;MarkdownContractError=class extends Error{name="MarkdownContractError"}}});function parseRuleDocument(source){return parseMarkdown(source,ruleMetadataSchema)}function parseRequirementDocument(source){const document=parseMarkdown(source,requirementMetadataSchema);if(!/^## REQ-[A-Z0-9-]+\s/m.test(document.body)){throw new Error("Requirement document must declare at least one REQ section")}if(!/`?AC-[A-Z0-9-]+`?/m.test(document.body)){throw new Error("Requirement document must declare at least one Acceptance Criterion")}return document}function buildRequirementReferenceCatalog(sources){const requirementIds=new Set;const acceptanceIds=new Set;const requirementAliases=new Map;const acceptanceAliases=new Map;for(const source of sources){const document=parseRequirementDocument(source);if(document.metadata.status==="deprecated"){collectAliases(document.body,"REQ",requirementAliases);collectAliases(document.body,"AC",acceptanceAliases);continue}for(const match of document.body.matchAll(/^##\s+(REQ-[A-Z0-9-]+)(?:\s|$)/gm)){if(match[1]!==void 0)requirementIds.add(match[1])}for(const match of document.body.matchAll(/^\s*-\s+`?(AC-[A-Z0-9-]+)`?\s*:/gm)){if(match[1]!==void 0)acceptanceIds.add(match[1])}}const resolvedRequirementAliases=resolvedAliases(requirementAliases,requirementIds);const resolvedAcceptanceAliases=resolvedAliases(acceptanceAliases,acceptanceIds);return{requirement_ids:[...requirementIds].sort(),acceptance_ids:[...acceptanceIds].sort(),requirement_aliases:Object.fromEntries(resolvedRequirementAliases),acceptance_aliases:Object.fromEntries(resolvedAcceptanceAliases)}}function validateRequirementReferences(catalog,requirementIds,acceptanceIds){const knownRequirements=new Set(catalog.requirement_ids);const knownAcceptance=new Set(catalog.acceptance_ids);const findings=[];for(const id of[...new Set(requirementIds)].sort()){if(!knownRequirements.has(id)&&catalog.requirement_aliases[id]===void 0){findings.push({kind:"requirement",id,message:`Requirement does not resolve: ${id}`})}}for(const id of[...new Set(acceptanceIds)].sort()){if(!knownAcceptance.has(id)&&catalog.acceptance_aliases[id]===void 0){findings.push({kind:"acceptance",id,message:`Acceptance Criterion does not resolve: ${id}`})}}return findings}function collectAliases(body,prefix,aliases){const expression=new RegExp(`^\\s*-\\s+\\x60(${prefix}-[A-Z0-9-]+)\\x60\\s*->\\s*\\x60(${prefix}-[A-Z0-9-]+)\\x60`,"gm");for(const match of body.matchAll(expression)){const source=match[1];const target=match[2];if(source===void 0||target===void 0)continue;const existing=aliases.get(source);if(existing!==void 0&&existing!==target){throw new Error(`Divergent ${prefix} alias: ${source}`)}aliases.set(source,target)}}function resolvedAliases(aliases,canonicalIds){const resolved=[];for(const[source,target]of aliases){if(!canonicalIds.has(target)){throw new Error(`Alias target does not resolve: ${source} -> ${target}`)}resolved.push([source,target])}return resolved.sort(([left],[right])=>left.localeCompare(right))}var ruleMetadataSchema,requirementMetadataSchema;var init_governance=__esm({"../core/src/governance.ts"(){"use strict";init_zod();init_markdown();ruleMetadataSchema=external_exports.object({id:external_exports.string().regex(/^RULE-[A-Z0-9-]+$/),load:external_exports.enum(["always","auto","file_match","manual"]),globs:external_exports.array(external_exports.string().min(1)).default([]),priority:external_exports.enum(["critical","high","medium","low"]),max_context_tokens:external_exports.number().int().positive(),requires:external_exports.array(external_exports.string().regex(/^RULE-[A-Z0-9-]+$/)),triggers:external_exports.array(external_exports.string().min(1)).default([]),phases:external_exports.array(external_exports.enum(["conversation","definition","planning","execution","verification","evidence"])).default([]),domains:external_exports.array(external_exports.string().min(1)).default([])}).strict().superRefine((metadata2,context)=>{if(metadata2.load==="file_match"&&metadata2.globs.length===0){context.addIssue({code:"custom",path:["globs"],message:"file_match Rules require at least one glob"})}});requirementMetadataSchema=external_exports.object({schema_version:external_exports.literal(2),id:external_exports.string().regex(/^REQUIREMENTS-[A-Z0-9-]+$/),area:external_exports.string().regex(/^[a-z][a-z0-9-]*$/),title:external_exports.string().min(1),status:external_exports.enum(["proposed","active","deprecated"]),version:external_exports.number().int().positive(),source_change:external_exports.string().min(1).nullable(),source_release:external_exports.string().regex(/^\d+\.\d+\.\d+$/).optional()}).strict().superRefine((metadata2,context)=>{if(metadata2.source_change===null&&metadata2.source_release===void 0){context.addIssue({code:"custom",path:["source_release"],message:"released Requirements require source_release when source_change is null"})}if(metadata2.source_change!==null&&metadata2.source_release!==void 0){context.addIssue({code:"custom",path:["source_release"],message:"source_release is only valid when source_change is null"})}})}});function validateCodexFirstRoute(input){const profile=hostCapabilityProfileSchema.parse(input.profile);if(profile.default_mode!=="codex_host_native"||!input.host_authentication_available){return{status:"exception",code:"host_authentication_unavailable"}}if(input.requires_external_provider===true){return{status:"exception",code:"external_provider_required"}}if(input.requires_remote_operation===true){return{status:"exception",code:"remote_operation_required"}}return{status:"valid",authentication:"host",remote_provider_required:false}}async function loadHostCapabilityProfile(filesystem,path=".agents/config/models/codex-host.yaml"){return hostCapabilityProfileSchema.parse(parseYaml(await filesystem.readText(path)))}var HOST_EXECUTION_MODES,MODEL_CLASSES,CODEX_NATIVE_SURFACES,hostExecutionModeSchema,modelClassSchema,codexNativeSurfaceSchema,uniqueNativeSurfacesSchema,hostCapabilityEvidenceSchema,implementedHostCapabilityClaimSchema,nativeModeProfileSchema,subprocessModeProfileSchema,modelClassProfileSchema,hostCapabilityProfileSchema,providerSubprocessOptInSchema;var init_contracts2=__esm({"../core/src/host-capabilities/contracts.ts"(){"use strict";init_zod();init_yaml();HOST_EXECUTION_MODES=["codex_host_native","provider_subprocess"];MODEL_CLASSES=["frontier","balanced","fast_scan","review"];CODEX_NATIVE_SURFACES=["subagents","worktrees","sandbox","approvals","skills","mcp"];hostExecutionModeSchema=external_exports.enum(HOST_EXECUTION_MODES);modelClassSchema=external_exports.enum(MODEL_CLASSES);codexNativeSurfaceSchema=external_exports.enum(CODEX_NATIVE_SURFACES);uniqueNativeSurfacesSchema=external_exports.array(codexNativeSurfaceSchema).min(1).refine(surfaces=>new Set(surfaces).size===surfaces.length,{message:"native_surfaces must be unique"});hostCapabilityEvidenceSchema=external_exports.object({locator:external_exports.string().min(1),candidate_sha256:external_exports.string().regex(/^[a-f0-9]{64}$/)}).strict();implementedHostCapabilityClaimSchema=external_exports.object({capability_id:external_exports.string().regex(/^CAP-[A-Z0-9-]+$/),current_state:external_exports.literal("implemented"),previous_states:external_exports.tuple([external_exports.literal("declared")]),evidence:external_exports.array(hostCapabilityEvidenceSchema).length(0)}).strict();nativeModeProfileSchema=external_exports.object({tier:external_exports.literal(1),enabled:external_exports.literal(true),optional:external_exports.literal(false),invokes_provider_subprocess:external_exports.literal(false),authority:external_exports.literal("host"),native_surfaces:uniqueNativeSurfacesSchema,capability_bindings:external_exports.record(codexNativeSurfaceSchema,implementedHostCapabilityClaimSchema)}).strict().superRefine((mode,context)=>{const bindings=Object.keys(mode.capability_bindings).sort();const surfaces=[...mode.native_surfaces].sort();if(JSON.stringify(bindings)!==JSON.stringify(surfaces)){context.addIssue({code:"custom",path:["capability_bindings"],message:"every native surface requires exactly one conformance/maturity binding"})}});subprocessModeProfileSchema=external_exports.object({tier:external_exports.union([external_exports.literal(2),external_exports.literal(3)]),enabled:external_exports.boolean(),optional:external_exports.literal(true),invokes_provider_subprocess:external_exports.literal(true),authority:external_exports.literal("framework"),native_surfaces:external_exports.array(external_exports.never()).length(0),opt_in:external_exports.object({required:external_exports.literal(true),allowed_sources:external_exports.array(external_exports.enum(["project_config","human_decision"])).min(1).refine(sources=>new Set(sources).size===sources.length,{message:"opt-in sources must be unique"})}).strict()}).strict();modelClassProfileSchema=external_exports.object({selection:external_exports.enum(["host_available","inherit_host"]),reasoning:external_exports.enum(["low","medium","high"]),intent:external_exports.string().min(1)}).strict();hostCapabilityProfileSchema=external_exports.object({schema_version:external_exports.literal(1),host_id:external_exports.literal("codex"),candidate_sha256:external_exports.null(),default_mode:external_exports.literal("codex_host_native"),modes:external_exports.object({codex_host_native:nativeModeProfileSchema,provider_subprocess:subprocessModeProfileSchema}).strict(),model_classes:external_exports.object({frontier:modelClassProfileSchema,balanced:modelClassProfileSchema,fast_scan:modelClassProfileSchema,review:modelClassProfileSchema}).strict()}).strict();providerSubprocessOptInSchema=external_exports.object({enabled:external_exports.literal(true),source:external_exports.enum(["project_config","human_decision"]),provenance:external_exports.object({reference:external_exports.string().min(1),recorded_at:external_exports.string().datetime({offset:true})}).strict()}).strict()}});var init_host_capabilities=__esm({"../core/src/host-capabilities/index.ts"(){"use strict";init_contracts2()}});function lifecycleClaimPath(kind,digest7){return`${LIFECYCLE_CLAIMS_ROOT}/${kind}/${digest7}.json`}var LIFECYCLE_CLAIMS_ROOT;var init_lifecycle_claims=__esm({"../core/src/lifecycle-claims.ts"(){"use strict";LIFECYCLE_CLAIMS_ROOT=".local/claims"}});function parseZaipManifest(value){return zaipManifestSchema.parse(value)}var zaipManifestSchema,zaipManifestJsonSchema,ManifestRepository;var init_manifest=__esm({"../core/src/manifest.ts"(){"use strict";init_zod();init_yaml();zaipManifestSchema=external_exports.object({schema_version:external_exports.literal(1),project:external_exports.object({id:external_exports.string().min(1),name:external_exports.string().min(1),timezone:external_exports.string().min(1).default("America/Sao_Paulo")}),framework:external_exports.object({version:external_exports.string().min(1)}),layout:external_exports.object({version:external_exports.literal(1),managed_namespace:external_exports.string().min(1).default(".agents/managed"),project_namespace:external_exports.string().min(1).default(".agents/project")}).default({version:1,managed_namespace:".agents/managed",project_namespace:".agents/project"}),profile:external_exports.object({id:external_exports.string().min(1).default("zaip-aios-stack")}),paths:external_exports.object({specs:external_exports.string().min(1).default(".agents/specs"),changes:external_exports.string().min(1).default(".agents/changes"),tasks:external_exports.string().min(1).default(".agents/tasks"),decisions:external_exports.string().min(1).default(".agents/decisions"),runs:external_exports.string().min(1).default(".agents/runs")}).default({specs:".agents/specs",changes:".agents/changes",tasks:".agents/tasks",decisions:".agents/decisions",runs:".agents/runs"}),agents:external_exports.array(external_exports.enum(["codex","claude"])).default(["codex","claude"])}).strict();zaipManifestJsonSchema=external_exports.toJSONSchema(zaipManifestSchema);ManifestRepository=class{constructor(filesystem,path=".agents/manifest.yaml"){this.filesystem=filesystem;this.path=path}filesystem;path;async read(){return parseZaipManifest(parseYaml(await this.filesystem.readText(this.path)))}async write(manifest){await this.filesystem.writeTextAtomic(this.path,serializeYaml(zaipManifestSchema.parse(manifest)))}}}});function datedIdPartsWithDay(id){const match=id.match(/^([A-Z]+(?:-[A-Z]+)*)-(\d{4})-(\d{2})-(\d{2})-\d{2}-\d{2}-/);if(match?.[1]===void 0||match[2]===void 0||match[3]===void 0||match[4]===void 0){throw new TypeError(`ID does not contain the canonical date: ${id}`)}const[,prefix,year,month,day]=match;const date5=new Date(`${year}-${month}-${day}T00:00:00.000Z`);if(Number.isNaN(date5.getTime())||String(date5.getUTCFullYear()).padStart(4,"0")!==year||String(date5.getUTCMonth()+1).padStart(2,"0")!==month||String(date5.getUTCDate()).padStart(2,"0")!==day){throw new TypeError(`ID contains an invalid canonical date: ${id}`)}return{prefix,year,month,day}}function datedIdParts(id){const{year,month}=datedIdPartsWithDay(id);return{year,month}}function datedMarkdownPath(basePath,id){const{year,month}=datedIdParts(id);return`${basePath}/${year}/${month}/${id}.md`}function datedMonthDirectory(basePath,id){const{year,month}=datedIdParts(id);return`${basePath}/${year}/${month}`}function datedEntityDirectory(basePath,id){const{year,month,day}=datedIdPartsWithDay(id);return`${basePath}/${year}/${month}/${day}`}var init_paths=__esm({"../core/src/paths.ts"(){"use strict"}});function redactSensitive(value){return value.replace(/Bearer\s+[A-Za-z0-9._~+/-]+=*/g,"Bearer [REDACTED]").replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g,"[REDACTED]").replace(/\bgh[opsu]_[A-Za-z0-9_]{8,}\b/g,"[REDACTED]").replace(/-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/g,"[REDACTED PRIVATE KEY]")}var init_permissions=__esm({"../core/src/policy/permissions/permissions.ts"(){"use strict"}});var init_permissions2=__esm({"../core/src/policy/permissions/index.ts"(){"use strict";init_permissions()}});var init_routing=__esm({"../core/src/policy/routing/routing.ts"(){"use strict"}});var init_routing2=__esm({"../core/src/policy/routing/index.ts"(){"use strict";init_routing()}});function assertSafeRecordContent(value){const seen=new WeakSet;function visit(item,key=""){if(typeof item==="string"){if(item.length===0||placeholder.test(item))return;if(sensitiveKey.test(key)||unsafeText(item)){throw new Error("Sensitive content cannot be persisted; redact credentials and sensitive URL parameters first.")}return}if(item===null||typeof item!=="object"||seen.has(item))return;seen.add(item);for(const[childKey,child]of Object.entries(item)){visit(child,sensitiveKey.test(key)?key:childKey)}}visit(value)}function unsafeText(text){if(redactSensitive(text)!==text)return true;if(/\bbearer\s+[a-z0-9._~+/-]+=*/i.test(text))return true;for(const match of text.matchAll(/\bbasic\s+([a-z0-9+/]+={0,2})/gi)){if(Buffer.from(match[1]??"","base64").toString("utf8").includes(":"))return true}if(/-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/.test(text))return true;for(const match of text.matchAll(/[a-z][a-z0-9+.-]*:\/\/[^\s<>"']+/gi)){try{const url2=new URL(match[0]);if(url2.password||/^https?:$/.test(url2.protocol)&&url2.username)return true;for(const[key,value]of url2.searchParams){if(sensitiveKey.test(key)&&value&&!placeholder.test(value))return true}for(const[key,value]of new URLSearchParams(url2.hash.slice(1))){if(sensitiveKey.test(key)&&value&&!placeholder.test(value))return true}text=text.replace(match[0],"")}catch{}}for(const match of text.matchAll(assignment)){if(!placeholder.test((match[1]??"").replace(/^(?:bearer|basic)\s+/i,"")))return true}return false}var sensitiveKeyName,sensitiveKey,placeholder,assignment;var init_record_safety=__esm({"../core/src/record-safety.ts"(){"use strict";init_permissions();sensitiveKeyName="(?:access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|password|passwd|secret|client[_-]?secret|authorization|signature|sig)";sensitiveKey=new RegExp(`^${sensitiveKeyName}$`,"i");placeholder=/^(?:\[redacted(?: private key)?\]|<redacted>|\*{3,})$/i;assignment=new RegExp(String.raw`\b${sensitiveKeyName}["']?\s*[:=]\s*["']?((?:(?:bearer|basic)\s+)?(?:\[redacted(?: private key)?\]|<redacted>|\*{3,})|[^\s"',;]+)`,"gi")}});var init_result=__esm({"../core/src/result.ts"(){"use strict"}});var StateMachine,workItemStateMachine;var init_state_machine=__esm({"../core/src/state-machine.ts"(){"use strict";StateMachine=class{#transitions;constructor(transitions){const mutable=new Map;for(const transition2 of transitions){const targets=mutable.get(transition2.from)??new Set;targets.add(transition2.to);mutable.set(transition2.from,targets)}this.#transitions=mutable}canTransition(from,to){return this.#transitions.get(from)?.has(to)??false}assertTransition(from,to){if(!this.canTransition(from,to)){throw new Error(`Invalid state transition: ${from} -> ${to}`)}}nextStates(from){return[...this.#transitions.get(from)??[]]}};workItemStateMachine=new StateMachine([{from:"draft",to:"planned"},{from:"draft",to:"cancelled"},{from:"planned",to:"executing"},{from:"planned",to:"cancelled"},{from:"executing",to:"verifying"},{from:"executing",to:"blocked"},{from:"executing",to:"cancelled"},{from:"verifying",to:"completed"},{from:"verifying",to:"failed"},{from:"verifying",to:"blocked"},{from:"verifying",to:"cancelled"},{from:"blocked",to:"executing"},{from:"blocked",to:"cancelled"}])}});var stopTranscriptProofSchema,stopReceiptSchema;var init_stop_receipt_schema=__esm({"../core/src/stop-receipt-schema.ts"(){"use strict";init_zod();stopTranscriptProofSchema=external_exports.object({offset:external_exports.number().int().nonnegative(),length:external_exports.number().int().min(1).max(4194304),sha256:external_exports.string().regex(/^[a-f0-9]{64}$/)});stopReceiptSchema=external_exports.object({schema_version:external_exports.literal(1),session_id:external_exports.string().min(1),turn_id:external_exports.string().min(1),run_id:external_exports.string().startsWith("RUN-"),observed_at:external_exports.string().datetime(),cursor:external_exports.object({path:external_exports.string().min(1),dev:external_exports.number(),ino:external_exports.number(),birthtime_ms:external_exports.number(),size:external_exports.number().int().nonnegative(),offset:external_exports.number().int().nonnegative(),mtime_ms:external_exports.number(),ctime_ms:external_exports.number(),trusted:external_exports.literal(true),terminal_status:external_exports.enum(["completed","failed","cancelled"]),session_proof:stopTranscriptProofSchema,terminal_proof:stopTranscriptProofSchema,anchor:stopTranscriptProofSchema})})}});async function loadWorkspaceLayout(filesystem){const[hasProjectConfig,hasFrameworkLock]=await Promise.all([filesystem.exists(PROJECT_CONFIG_PATH),filesystem.exists(FRAMEWORK_LOCK_PATH)]);if(hasProjectConfig!==hasFrameworkLock){const missing=hasProjectConfig?FRAMEWORK_LOCK_PATH:PROJECT_CONFIG_PATH;throw new PartialWorkspaceConfigError(`Partial V2 configuration; missing ${missing}`)}if(hasProjectConfig&&hasFrameworkLock){const[projectConfig2,frameworkLock]=await Promise.all([new ProjectConfigRepository(filesystem).read(),new FrameworkLockRepository(filesystem).read()]);return createV2WorkspaceLayout(projectConfig2,frameworkLock)}if(await filesystem.exists(".agents/manifest.yaml")){return createLegacyWorkspaceLayout(await new ManifestRepository(filesystem).read())}throw new WorkspaceLayoutNotFoundError("Workspace has neither complete V2 config nor a legacy V1 manifest")}function createV2WorkspaceLayout(projectConfig2,frameworkLock){const version2=frameworkLock.layout.version;const activeDataRoot=version2===3?".agents/records":".agents/data";return{version:version2,source:"project-config",project:projectConfig2.project,projectConfig:projectConfig2,frameworkLock,legacyManifest:null,supports:()=>true,entityRoot:kind=>`${activeDataRoot}/${v2DirectoryNames[kind]}`,activePath(kind,id){assertDatedEntityId(kind,id);const root=this.entityRoot(kind);const directory2=version2===3?datedMonthDirectory(root,id):datedEntityDirectory(root,id);if(kind==="change")return`${directory2}/${id}/change.md`;if(kind==="execution")return`${directory2}/${id}/execution.md`;if(kind==="run")return`${directory2}/${id}.jsonl`;return`${directory2}/${id}.md`},legacyReadRoot(kind){if(version2===3)return`.agents/data/${v2DirectoryNames[kind]}`;return legacyRoot(defaultLegacyRoots,kind)},legacyReadCandidate(kind,id,options){if(version2===3){return{path:v2EntityPath(".agents/data",kind,id),readOnly:true}}return legacyCandidate(defaultLegacyRoots,kind,id,options)},legacyReadCandidates(kind,id,options){if(version2===3){return[{path:v2EntityPath(".agents/records",kind,id),readOnly:true},{path:v2EntityPath(".agents/data",kind,id),readOnly:true}]}const candidate=legacyCandidate(defaultLegacyRoots,kind,id,options);return candidate===null?[]:[candidate]}}}function v2EntityPath(root,kind,id){assertDatedEntityId(kind,id);const directory2=datedEntityDirectory(`${root}/${v2DirectoryNames[kind]}`,id);if(kind==="change")return`${directory2}/${id}/change.md`;if(kind==="execution")return`${directory2}/${id}/execution.md`;if(kind==="run")return`${directory2}/${id}.jsonl`;return`${directory2}/${id}.md`}function createLegacyWorkspaceLayout(manifest){const roots2={spec:canonicalRoot(`${manifest.paths.specs}/capabilities`),change:canonicalRoot(manifest.paths.changes),task:canonicalRoot(manifest.paths.tasks),run:canonicalRoot(manifest.paths.runs)};return{version:1,source:"legacy-manifest",project:manifest.project,projectConfig:null,frameworkLock:null,legacyManifest:manifest,supports:kind=>kind!=="prd"&&kind!=="execution",entityRoot(kind){const root=legacyRoot(roots2,kind);if(root===null)throw unsupported(kind,1);return root},activePath(kind,id,options){if(!this.supports(kind))throw unsupported(kind,1);return legacyEntityPath(roots2,kind,id,options)},legacyReadRoot:()=>null,legacyReadCandidate:()=>null,legacyReadCandidates:()=>[]}}async function inspectArtifactReadState(filesystem,layout,kind,id,options){const activePath=layout.activePath(kind,id,options);const candidates=layout.legacyReadCandidates(kind,id,options);const[hasActive,...candidateExists]=await Promise.all([filesystem.exists(activePath),...candidates.map(candidate=>filesystem.exists(candidate.path))]);const existingLegacyPaths=candidates.filter((_,index)=>candidateExists[index]).map(candidate=>candidate.path);const legacyPath=existingLegacyPaths[0]??candidates[0]?.path??null;const hasLegacy=existingLegacyPaths.length>0;if(!hasActive&&!hasLegacy)return{state:"missing",activePath,legacyPath};if(hasActive&&!hasLegacy)return{state:"active-only",activePath,legacyPath};const contents=await Promise.all([...hasActive?[filesystem.readText(activePath)]:[],...existingLegacyPaths.map(path=>filesystem.readText(path))]);if(!hasActive){const[first,...rest]=contents;return{state:rest.every(content=>content===first)?"legacy-only":"duplicate-divergent",activePath,legacyPath}}const[active,...legacyContents]=contents;return{state:legacyContents.every(content=>content===active)?"duplicate-identical":"duplicate-divergent",activePath,legacyPath}}async function resolveArtifactReadPath(filesystem,layout,kind,id,options){const inspection=await inspectArtifactReadState(filesystem,layout,kind,id,options);if(inspection.state==="duplicate-divergent"){throw new InactiveLayoutConflictError(`Divergent ${kind} ${id} exists in active and legacy layouts: ${inspection.activePath}, ${inspection.legacyPath}`)}if(inspection.state==="missing")return null;if(inspection.state==="legacy-only")return inspection.legacyPath;return inspection.activePath}function legacyCandidate(roots2,kind,id,options){if(kind==="prd"||kind==="execution")return null;if(kind==="spec"&&options?.legacyCapability===void 0)return null;return{path:legacyEntityPath(roots2,kind,id,options),readOnly:true}}function legacyEntityPath(roots2,kind,id,options){assertEntityPrefix(kind,id);if(kind==="prd"||kind==="execution")throw unsupported(kind,1);if(kind==="spec"){const capability=options?.legacyCapability;if(capability===void 0||!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(capability)){throw new WorkspaceLayoutError("Legacy spec lookup requires a canonical legacyCapability")}return`${roots2.spec}/${capability}/spec.md`}datedIdParts(id);if(kind==="change"){const{year,month}=datedIdParts(id);return`${roots2.change}/${year}/${month}/${id}/proposal.md`}if(kind==="task")return datedMarkdownPath(roots2.task,id);return datedMarkdownPath(roots2.run,id)}function legacyRoot(roots2,kind){if(kind==="prd"||kind==="execution")return null;return roots2[kind]}function assertDatedEntityId(kind,id){assertEntityPrefix(kind,id);datedIdPartsWithDay(id)}function assertEntityPrefix(kind,id){const prefix=expectedPrefixes[kind];if(!id.startsWith(`${prefix}-`)){throw new ArtifactKindMismatchError(`Expected ${kind} id to start with ${prefix}-: ${id}`)}}function canonicalRoot(path){if(path.length===0||path.includes("\\")||path.includes("\0")||path.startsWith("/")||path.startsWith("./")||path.endsWith("/")||/^[A-Za-z]:/.test(path)||path.split("/").some(segment2=>segment2.length===0||segment2==="."||segment2==="..")){throw new WorkspaceLayoutError(`Workspace layout path is not canonical: ${path}`)}return path}function unsupported(kind,version2){return new UnsupportedLayoutEntityError(`Layout V${version2} does not support ${kind}`)}var WorkspaceLayoutError,PartialWorkspaceConfigError,WorkspaceLayoutNotFoundError,UnsupportedLayoutEntityError,ArtifactKindMismatchError,InactiveLayoutConflictError,expectedPrefixes,v2DirectoryNames,defaultLegacyRoots;var init_workspace_layout=__esm({"../core/src/workspace-layout.ts"(){"use strict";init_config();init_manifest();init_paths();WorkspaceLayoutError=class extends Error{name="WorkspaceLayoutError"};PartialWorkspaceConfigError=class extends WorkspaceLayoutError{name="PartialWorkspaceConfigError"};WorkspaceLayoutNotFoundError=class extends WorkspaceLayoutError{name="WorkspaceLayoutNotFoundError"};UnsupportedLayoutEntityError=class extends WorkspaceLayoutError{name="UnsupportedLayoutEntityError"};ArtifactKindMismatchError=class extends WorkspaceLayoutError{name="ArtifactKindMismatchError"};InactiveLayoutConflictError=class extends WorkspaceLayoutError{name="InactiveLayoutConflictError"};expectedPrefixes={prd:"PRD",spec:"SPEC",change:"CHG",task:"TASK",execution:"EXEC",run:"RUN"};v2DirectoryNames={prd:"prds",spec:"specs",change:"changes",task:"tasks",execution:"executions",run:"runs"};defaultLegacyRoots={spec:".agents/specs/capabilities",change:".agents/changes",task:".agents/tasks",run:".agents/runs"}}});var CORE_VERSION;var init_src=__esm({"../core/src/index.ts"(){"use strict";init_agent_runtime();init_agents();init_autonomy_policy();init_autonomy_recovery();init_clock();init_config();init_filesystem();init_git();init_governance();init_host_capabilities();init_ids();init_lifecycle_claims();init_manifest();init_markdown();init_model_orchestration();init_paths();init_permissions2();init_routing2();init_record_safety();init_result();init_state_machine();init_stop_receipt_schema();init_workspace_layout();init_yaml();CORE_VERSION="4.6.0"}});function followsDispatchPolicy(agent){return agent.role==="orchestrator"||["builder","task-executor"].includes(agent.role)&&agent.execution_eligibility.includes("delivery")}function codexModelInstructions(agent){return followsDispatchPolicy(agent)?["Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator."]:[]}function codexModelConfig(agent){const model=agent.model.preferred[0];if(followsDispatchPolicy(agent)||agent.model.preferred.length!==1||model===void 0||model==="policy-selected"){return""}const effort=agent.model.reasoning_effort;return`model = ${JSON.stringify(model)}
+`}var import_yaml3,FRONTMATTER_BOUNDARY,MAX_SAFE_ALIAS_COUNT2,MarkdownContractError;var init_markdown=__esm({"../core/src/markdown.ts"(){"use strict";import_yaml3=__toESM(require_dist(),1);FRONTMATTER_BOUNDARY="---";MAX_SAFE_ALIAS_COUNT2=10;MarkdownContractError=class extends Error{name="MarkdownContractError"}}});function parseRuleDocument(source){return parseMarkdown(source,ruleMetadataSchema)}function parseRequirementDocument(source){const document=parseMarkdown(source,requirementMetadataSchema);if(!/^## REQ-[A-Z0-9-]+\s/m.test(document.body)){throw new Error("Requirement document must declare at least one REQ section")}if(!/`?AC-[A-Z0-9-]+`?/m.test(document.body)){throw new Error("Requirement document must declare at least one Acceptance Criterion")}return document}function buildRequirementReferenceCatalog(sources){const requirementIds=new Set;const acceptanceIds=new Set;const requirementAliases=new Map;const acceptanceAliases=new Map;for(const source of sources){const document=parseRequirementDocument(source);if(document.metadata.status==="deprecated"){collectAliases(document.body,"REQ",requirementAliases);collectAliases(document.body,"AC",acceptanceAliases);continue}for(const match of document.body.matchAll(/^##\s+(REQ-[A-Z0-9-]+)(?:\s|$)/gm)){if(match[1]!==void 0)requirementIds.add(match[1])}for(const match of document.body.matchAll(/^\s*-\s+`?(AC-[A-Z0-9-]+)`?\s*:/gm)){if(match[1]!==void 0)acceptanceIds.add(match[1])}}const resolvedRequirementAliases=resolvedAliases(requirementAliases,requirementIds);const resolvedAcceptanceAliases=resolvedAliases(acceptanceAliases,acceptanceIds);return{requirement_ids:[...requirementIds].sort(),acceptance_ids:[...acceptanceIds].sort(),requirement_aliases:Object.fromEntries(resolvedRequirementAliases),acceptance_aliases:Object.fromEntries(resolvedAcceptanceAliases)}}function validateRequirementReferences(catalog,requirementIds,acceptanceIds){const knownRequirements=new Set(catalog.requirement_ids);const knownAcceptance=new Set(catalog.acceptance_ids);const findings=[];for(const id of[...new Set(requirementIds)].sort()){if(!knownRequirements.has(id)&&catalog.requirement_aliases[id]===void 0){findings.push({kind:"requirement",id,message:`Requirement does not resolve: ${id}`})}}for(const id of[...new Set(acceptanceIds)].sort()){if(!knownAcceptance.has(id)&&catalog.acceptance_aliases[id]===void 0){findings.push({kind:"acceptance",id,message:`Acceptance Criterion does not resolve: ${id}`})}}return findings}function collectAliases(body,prefix,aliases){const expression=new RegExp(`^\\s*-\\s+\\x60(${prefix}-[A-Z0-9-]+)\\x60\\s*->\\s*\\x60(${prefix}-[A-Z0-9-]+)\\x60`,"gm");for(const match of body.matchAll(expression)){const source=match[1];const target=match[2];if(source===void 0||target===void 0)continue;const existing=aliases.get(source);if(existing!==void 0&&existing!==target){throw new Error(`Divergent ${prefix} alias: ${source}`)}aliases.set(source,target)}}function resolvedAliases(aliases,canonicalIds){const resolved=[];for(const[source,target]of aliases){if(!canonicalIds.has(target)){throw new Error(`Alias target does not resolve: ${source} -> ${target}`)}resolved.push([source,target])}return resolved.sort(([left],[right])=>left.localeCompare(right))}var ruleMetadataSchema,requirementMetadataSchema;var init_governance=__esm({"../core/src/governance.ts"(){"use strict";init_zod();init_markdown();ruleMetadataSchema=external_exports.object({id:external_exports.string().regex(/^RULE-[A-Z0-9-]+$/),load:external_exports.enum(["always","auto","file_match","manual"]),globs:external_exports.array(external_exports.string().min(1)).default([]),priority:external_exports.enum(["critical","high","medium","low"]),max_context_tokens:external_exports.number().int().positive(),requires:external_exports.array(external_exports.string().regex(/^RULE-[A-Z0-9-]+$/)),triggers:external_exports.array(external_exports.string().min(1)).default([]),phases:external_exports.array(external_exports.enum(["conversation","definition","planning","execution","verification","evidence"])).default([]),domains:external_exports.array(external_exports.string().min(1)).default([])}).strict().superRefine((metadata2,context)=>{if(metadata2.load==="file_match"&&metadata2.globs.length===0){context.addIssue({code:"custom",path:["globs"],message:"file_match Rules require at least one glob"})}});requirementMetadataSchema=external_exports.object({schema_version:external_exports.literal(2),id:external_exports.string().regex(/^REQUIREMENTS-[A-Z0-9-]+$/),area:external_exports.string().regex(/^[a-z][a-z0-9-]*$/),title:external_exports.string().min(1),status:external_exports.enum(["proposed","active","deprecated"]),version:external_exports.number().int().positive(),source_change:external_exports.string().min(1).nullable(),source_release:external_exports.string().regex(/^\d+\.\d+\.\d+$/).optional()}).strict().superRefine((metadata2,context)=>{if(metadata2.source_change===null&&metadata2.source_release===void 0){context.addIssue({code:"custom",path:["source_release"],message:"released Requirements require source_release when source_change is null"})}if(metadata2.source_change!==null&&metadata2.source_release!==void 0){context.addIssue({code:"custom",path:["source_release"],message:"source_release is only valid when source_change is null"})}})}});function validateCodexFirstRoute(input){const profile=hostCapabilityProfileSchema.parse(input.profile);if(profile.default_mode!=="codex_host_native"||!input.host_authentication_available){return{status:"exception",code:"host_authentication_unavailable"}}if(input.requires_external_provider===true){return{status:"exception",code:"external_provider_required"}}if(input.requires_remote_operation===true){return{status:"exception",code:"remote_operation_required"}}return{status:"valid",authentication:"host",remote_provider_required:false}}async function loadHostCapabilityProfile(filesystem,path=".agents/config/models/codex-host.yaml"){return hostCapabilityProfileSchema.parse(parseYaml(await filesystem.readText(path)))}var HOST_EXECUTION_MODES,MODEL_CLASSES,CODEX_NATIVE_SURFACES,hostExecutionModeSchema,modelClassSchema,codexNativeSurfaceSchema,uniqueNativeSurfacesSchema,hostCapabilityEvidenceSchema,implementedHostCapabilityClaimSchema,nativeModeProfileSchema,subprocessModeProfileSchema,modelClassProfileSchema,hostCapabilityProfileSchema,providerSubprocessOptInSchema;var init_contracts2=__esm({"../core/src/host-capabilities/contracts.ts"(){"use strict";init_zod();init_yaml();HOST_EXECUTION_MODES=["codex_host_native","provider_subprocess"];MODEL_CLASSES=["frontier","balanced","fast_scan","review"];CODEX_NATIVE_SURFACES=["subagents","worktrees","sandbox","approvals","skills","mcp"];hostExecutionModeSchema=external_exports.enum(HOST_EXECUTION_MODES);modelClassSchema=external_exports.enum(MODEL_CLASSES);codexNativeSurfaceSchema=external_exports.enum(CODEX_NATIVE_SURFACES);uniqueNativeSurfacesSchema=external_exports.array(codexNativeSurfaceSchema).min(1).refine(surfaces=>new Set(surfaces).size===surfaces.length,{message:"native_surfaces must be unique"});hostCapabilityEvidenceSchema=external_exports.object({locator:external_exports.string().min(1),candidate_sha256:external_exports.string().regex(/^[a-f0-9]{64}$/)}).strict();implementedHostCapabilityClaimSchema=external_exports.object({capability_id:external_exports.string().regex(/^CAP-[A-Z0-9-]+$/),current_state:external_exports.literal("implemented"),previous_states:external_exports.tuple([external_exports.literal("declared")]),evidence:external_exports.array(hostCapabilityEvidenceSchema).length(0)}).strict();nativeModeProfileSchema=external_exports.object({tier:external_exports.literal(1),enabled:external_exports.literal(true),optional:external_exports.literal(false),invokes_provider_subprocess:external_exports.literal(false),authority:external_exports.literal("host"),native_surfaces:uniqueNativeSurfacesSchema,capability_bindings:external_exports.record(codexNativeSurfaceSchema,implementedHostCapabilityClaimSchema)}).strict().superRefine((mode,context)=>{const bindings=Object.keys(mode.capability_bindings).sort();const surfaces=[...mode.native_surfaces].sort();if(JSON.stringify(bindings)!==JSON.stringify(surfaces)){context.addIssue({code:"custom",path:["capability_bindings"],message:"every native surface requires exactly one conformance/maturity binding"})}});subprocessModeProfileSchema=external_exports.object({tier:external_exports.union([external_exports.literal(2),external_exports.literal(3)]),enabled:external_exports.boolean(),optional:external_exports.literal(true),invokes_provider_subprocess:external_exports.literal(true),authority:external_exports.literal("framework"),native_surfaces:external_exports.array(external_exports.never()).length(0),opt_in:external_exports.object({required:external_exports.literal(true),allowed_sources:external_exports.array(external_exports.enum(["project_config","human_decision"])).min(1).refine(sources=>new Set(sources).size===sources.length,{message:"opt-in sources must be unique"})}).strict()}).strict();modelClassProfileSchema=external_exports.object({selection:external_exports.enum(["host_available","inherit_host"]),reasoning:external_exports.enum(["low","medium","high"]),intent:external_exports.string().min(1)}).strict();hostCapabilityProfileSchema=external_exports.object({schema_version:external_exports.literal(1),host_id:external_exports.literal("codex"),candidate_sha256:external_exports.null(),default_mode:external_exports.literal("codex_host_native"),modes:external_exports.object({codex_host_native:nativeModeProfileSchema,provider_subprocess:subprocessModeProfileSchema}).strict(),model_classes:external_exports.object({frontier:modelClassProfileSchema,balanced:modelClassProfileSchema,fast_scan:modelClassProfileSchema,review:modelClassProfileSchema}).strict()}).strict();providerSubprocessOptInSchema=external_exports.object({enabled:external_exports.literal(true),source:external_exports.enum(["project_config","human_decision"]),provenance:external_exports.object({reference:external_exports.string().min(1),recorded_at:external_exports.string().datetime({offset:true})}).strict()}).strict()}});var init_host_capabilities=__esm({"../core/src/host-capabilities/index.ts"(){"use strict";init_contracts2()}});function lifecycleClaimPath(kind,digest7){return`${LIFECYCLE_CLAIMS_ROOT}/${kind}/${digest7}.json`}var LIFECYCLE_CLAIMS_ROOT;var init_lifecycle_claims=__esm({"../core/src/lifecycle-claims.ts"(){"use strict";LIFECYCLE_CLAIMS_ROOT=".local/claims"}});function parseZaipManifest(value){return zaipManifestSchema.parse(value)}var zaipManifestSchema,zaipManifestJsonSchema,ManifestRepository;var init_manifest=__esm({"../core/src/manifest.ts"(){"use strict";init_zod();init_yaml();zaipManifestSchema=external_exports.object({schema_version:external_exports.literal(1),project:external_exports.object({id:external_exports.string().min(1),name:external_exports.string().min(1),timezone:external_exports.string().min(1).default("America/Sao_Paulo")}),framework:external_exports.object({version:external_exports.string().min(1)}),layout:external_exports.object({version:external_exports.literal(1),managed_namespace:external_exports.string().min(1).default(".agents/managed"),project_namespace:external_exports.string().min(1).default(".agents/project")}).default({version:1,managed_namespace:".agents/managed",project_namespace:".agents/project"}),profile:external_exports.object({id:external_exports.string().min(1).default("zaip-aios-stack")}),paths:external_exports.object({specs:external_exports.string().min(1).default(".agents/specs"),changes:external_exports.string().min(1).default(".agents/changes"),tasks:external_exports.string().min(1).default(".agents/tasks"),decisions:external_exports.string().min(1).default(".agents/decisions"),runs:external_exports.string().min(1).default(".agents/runs")}).default({specs:".agents/specs",changes:".agents/changes",tasks:".agents/tasks",decisions:".agents/decisions",runs:".agents/runs"}),agents:external_exports.array(external_exports.enum(["codex","claude"])).default(["codex","claude"])}).strict();zaipManifestJsonSchema=external_exports.toJSONSchema(zaipManifestSchema);ManifestRepository=class{constructor(filesystem,path=".agents/manifest.yaml"){this.filesystem=filesystem;this.path=path}filesystem;path;async read(){return parseZaipManifest(parseYaml(await this.filesystem.readText(this.path)))}async write(manifest){await this.filesystem.writeTextAtomic(this.path,serializeYaml(zaipManifestSchema.parse(manifest)))}}}});function datedIdPartsWithDay(id){const match=id.match(/^([A-Z]+(?:-[A-Z]+)*)-(\d{4})-(\d{2})-(\d{2})-\d{2}-\d{2}-/);if(match?.[1]===void 0||match[2]===void 0||match[3]===void 0||match[4]===void 0){throw new TypeError(`ID does not contain the canonical date: ${id}`)}const[,prefix,year,month,day]=match;const date5=new Date(`${year}-${month}-${day}T00:00:00.000Z`);if(Number.isNaN(date5.getTime())||String(date5.getUTCFullYear()).padStart(4,"0")!==year||String(date5.getUTCMonth()+1).padStart(2,"0")!==month||String(date5.getUTCDate()).padStart(2,"0")!==day){throw new TypeError(`ID contains an invalid canonical date: ${id}`)}return{prefix,year,month,day}}function datedIdParts(id){const{year,month}=datedIdPartsWithDay(id);return{year,month}}function datedMarkdownPath(basePath,id){const{year,month}=datedIdParts(id);return`${basePath}/${year}/${month}/${id}.md`}function datedMonthDirectory(basePath,id){const{year,month}=datedIdParts(id);return`${basePath}/${year}/${month}`}function datedEntityDirectory(basePath,id){const{year,month,day}=datedIdPartsWithDay(id);return`${basePath}/${year}/${month}/${day}`}var init_paths=__esm({"../core/src/paths.ts"(){"use strict"}});function redactSensitive(value){return value.replace(/Bearer\s+[A-Za-z0-9._~+/-]+=*/g,"Bearer [REDACTED]").replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g,"[REDACTED]").replace(/\bgh[opsu]_[A-Za-z0-9_]{8,}\b/g,"[REDACTED]").replace(/-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/g,"[REDACTED PRIVATE KEY]")}var init_permissions=__esm({"../core/src/policy/permissions/permissions.ts"(){"use strict"}});var init_permissions2=__esm({"../core/src/policy/permissions/index.ts"(){"use strict";init_permissions()}});var init_routing=__esm({"../core/src/policy/routing/routing.ts"(){"use strict"}});var init_routing2=__esm({"../core/src/policy/routing/index.ts"(){"use strict";init_routing()}});function assertSafeRecordContent(value){const seen=new WeakSet;function visit(item,key=""){if(typeof item==="string"){if(item.length===0||placeholder.test(item))return;if(sensitiveKey.test(key)||unsafeText(item)){throw new Error("Sensitive content cannot be persisted; redact credentials and sensitive URL parameters first.")}return}if(item===null||typeof item!=="object"||seen.has(item))return;seen.add(item);for(const[childKey,child]of Object.entries(item)){visit(child,sensitiveKey.test(key)?key:childKey)}}visit(value)}function unsafeText(text){if(redactSensitive(text)!==text)return true;if(/\bbearer\s+[a-z0-9._~+/-]+=*/i.test(text))return true;for(const match of text.matchAll(/\bbasic\s+([a-z0-9+/]+={0,2})/gi)){if(Buffer.from(match[1]??"","base64").toString("utf8").includes(":"))return true}if(/-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/.test(text))return true;for(const match of text.matchAll(/[a-z][a-z0-9+.-]*:\/\/[^\s<>"']+/gi)){try{const url2=new URL(match[0]);if(url2.password||/^https?:$/.test(url2.protocol)&&url2.username)return true;for(const[key,value]of url2.searchParams){if(sensitiveKey.test(key)&&value&&!placeholder.test(value))return true}for(const[key,value]of new URLSearchParams(url2.hash.slice(1))){if(sensitiveKey.test(key)&&value&&!placeholder.test(value))return true}text=text.replace(match[0],"")}catch{}}for(const match of text.matchAll(assignment)){if(!placeholder.test((match[1]??"").replace(/^(?:bearer|basic)\s+/i,"")))return true}return false}var sensitiveKeyName,sensitiveKey,placeholder,assignment;var init_record_safety=__esm({"../core/src/record-safety.ts"(){"use strict";init_permissions();sensitiveKeyName="(?:access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|password|passwd|secret|client[_-]?secret|authorization|signature|sig)";sensitiveKey=new RegExp(`^${sensitiveKeyName}$`,"i");placeholder=/^(?:\[redacted(?: private key)?\]|<redacted>|\*{3,})$/i;assignment=new RegExp(String.raw`\b${sensitiveKeyName}["']?\s*[:=]\s*["']?((?:(?:bearer|basic)\s+)?(?:\[redacted(?: private key)?\]|<redacted>|\*{3,})|[^\s"',;]+)`,"gi")}});var init_result=__esm({"../core/src/result.ts"(){"use strict"}});var StateMachine,workItemStateMachine;var init_state_machine=__esm({"../core/src/state-machine.ts"(){"use strict";StateMachine=class{#transitions;constructor(transitions){const mutable=new Map;for(const transition2 of transitions){const targets=mutable.get(transition2.from)??new Set;targets.add(transition2.to);mutable.set(transition2.from,targets)}this.#transitions=mutable}canTransition(from,to){return this.#transitions.get(from)?.has(to)??false}assertTransition(from,to){if(!this.canTransition(from,to)){throw new Error(`Invalid state transition: ${from} -> ${to}`)}}nextStates(from){return[...this.#transitions.get(from)??[]]}};workItemStateMachine=new StateMachine([{from:"draft",to:"planned"},{from:"draft",to:"cancelled"},{from:"planned",to:"executing"},{from:"planned",to:"cancelled"},{from:"executing",to:"verifying"},{from:"executing",to:"blocked"},{from:"executing",to:"cancelled"},{from:"verifying",to:"completed"},{from:"verifying",to:"failed"},{from:"verifying",to:"blocked"},{from:"verifying",to:"cancelled"},{from:"blocked",to:"executing"},{from:"blocked",to:"cancelled"}])}});var stopTranscriptProofSchema,stopReceiptSchema;var init_stop_receipt_schema=__esm({"../core/src/stop-receipt-schema.ts"(){"use strict";init_zod();stopTranscriptProofSchema=external_exports.object({offset:external_exports.number().int().nonnegative(),length:external_exports.number().int().min(1).max(4194304),sha256:external_exports.string().regex(/^[a-f0-9]{64}$/)});stopReceiptSchema=external_exports.object({schema_version:external_exports.literal(1),session_id:external_exports.string().min(1),turn_id:external_exports.string().min(1),run_id:external_exports.string().startsWith("RUN-"),observed_at:external_exports.string().datetime(),cursor:external_exports.object({path:external_exports.string().min(1),dev:external_exports.number(),ino:external_exports.number(),birthtime_ms:external_exports.number(),size:external_exports.number().int().nonnegative(),offset:external_exports.number().int().nonnegative(),mtime_ms:external_exports.number(),ctime_ms:external_exports.number(),trusted:external_exports.literal(true),terminal_status:external_exports.enum(["completed","failed","cancelled"]),session_proof:stopTranscriptProofSchema,terminal_proof:stopTranscriptProofSchema,anchor:stopTranscriptProofSchema})})}});async function loadWorkspaceLayout(filesystem){const[hasProjectConfig,hasFrameworkLock]=await Promise.all([filesystem.exists(PROJECT_CONFIG_PATH),filesystem.exists(FRAMEWORK_LOCK_PATH)]);if(hasProjectConfig!==hasFrameworkLock){const missing=hasProjectConfig?FRAMEWORK_LOCK_PATH:PROJECT_CONFIG_PATH;throw new PartialWorkspaceConfigError(`Partial V2 configuration; missing ${missing}`)}if(hasProjectConfig&&hasFrameworkLock){const[projectConfig2,frameworkLock]=await Promise.all([new ProjectConfigRepository(filesystem).read(),new FrameworkLockRepository(filesystem).read()]);return createV2WorkspaceLayout(projectConfig2,frameworkLock)}if(await filesystem.exists(".agents/manifest.yaml")){return createLegacyWorkspaceLayout(await new ManifestRepository(filesystem).read())}throw new WorkspaceLayoutNotFoundError("Workspace has neither complete V2 config nor a legacy V1 manifest")}function createV2WorkspaceLayout(projectConfig2,frameworkLock){const version2=frameworkLock.layout.version;const activeDataRoot=version2===3?".agents/records":".agents/data";return{version:version2,source:"project-config",project:projectConfig2.project,projectConfig:projectConfig2,frameworkLock,legacyManifest:null,supports:()=>true,entityRoot:kind=>`${activeDataRoot}/${v2DirectoryNames[kind]}`,activePath(kind,id){assertDatedEntityId(kind,id);const root=this.entityRoot(kind);const directory2=version2===3?datedMonthDirectory(root,id):datedEntityDirectory(root,id);if(kind==="change")return`${directory2}/${id}/change.md`;if(kind==="execution")return`${directory2}/${id}/execution.md`;if(kind==="run")return`${directory2}/${id}.jsonl`;return`${directory2}/${id}.md`},legacyReadRoot(kind){if(version2===3)return`.agents/data/${v2DirectoryNames[kind]}`;return legacyRoot(defaultLegacyRoots,kind)},legacyReadCandidate(kind,id,options){if(version2===3){return{path:v2EntityPath(".agents/data",kind,id),readOnly:true}}return legacyCandidate(defaultLegacyRoots,kind,id,options)},legacyReadCandidates(kind,id,options){if(version2===3){return[{path:v2EntityPath(".agents/records",kind,id),readOnly:true},{path:v2EntityPath(".agents/data",kind,id),readOnly:true}]}const candidate=legacyCandidate(defaultLegacyRoots,kind,id,options);return candidate===null?[]:[candidate]}}}function v2EntityPath(root,kind,id){assertDatedEntityId(kind,id);const directory2=datedEntityDirectory(`${root}/${v2DirectoryNames[kind]}`,id);if(kind==="change")return`${directory2}/${id}/change.md`;if(kind==="execution")return`${directory2}/${id}/execution.md`;if(kind==="run")return`${directory2}/${id}.jsonl`;return`${directory2}/${id}.md`}function createLegacyWorkspaceLayout(manifest){const roots2={spec:canonicalRoot(`${manifest.paths.specs}/capabilities`),change:canonicalRoot(manifest.paths.changes),task:canonicalRoot(manifest.paths.tasks),run:canonicalRoot(manifest.paths.runs)};return{version:1,source:"legacy-manifest",project:manifest.project,projectConfig:null,frameworkLock:null,legacyManifest:manifest,supports:kind=>kind!=="prd"&&kind!=="execution",entityRoot(kind){const root=legacyRoot(roots2,kind);if(root===null)throw unsupported(kind,1);return root},activePath(kind,id,options){if(!this.supports(kind))throw unsupported(kind,1);return legacyEntityPath(roots2,kind,id,options)},legacyReadRoot:()=>null,legacyReadCandidate:()=>null,legacyReadCandidates:()=>[]}}async function inspectArtifactReadState(filesystem,layout,kind,id,options){const activePath=layout.activePath(kind,id,options);const candidates=layout.legacyReadCandidates(kind,id,options);const[hasActive,...candidateExists]=await Promise.all([filesystem.exists(activePath),...candidates.map(candidate=>filesystem.exists(candidate.path))]);const existingLegacyPaths=candidates.filter((_,index)=>candidateExists[index]).map(candidate=>candidate.path);const legacyPath=existingLegacyPaths[0]??candidates[0]?.path??null;const hasLegacy=existingLegacyPaths.length>0;if(!hasActive&&!hasLegacy)return{state:"missing",activePath,legacyPath};if(hasActive&&!hasLegacy)return{state:"active-only",activePath,legacyPath};const contents=await Promise.all([...hasActive?[filesystem.readText(activePath)]:[],...existingLegacyPaths.map(path=>filesystem.readText(path))]);if(!hasActive){const[first,...rest]=contents;return{state:rest.every(content=>content===first)?"legacy-only":"duplicate-divergent",activePath,legacyPath}}const[active,...legacyContents]=contents;return{state:legacyContents.every(content=>content===active)?"duplicate-identical":"duplicate-divergent",activePath,legacyPath}}async function resolveArtifactReadPath(filesystem,layout,kind,id,options){const inspection=await inspectArtifactReadState(filesystem,layout,kind,id,options);if(inspection.state==="duplicate-divergent"){throw new InactiveLayoutConflictError(`Divergent ${kind} ${id} exists in active and legacy layouts: ${inspection.activePath}, ${inspection.legacyPath}`)}if(inspection.state==="missing")return null;if(inspection.state==="legacy-only")return inspection.legacyPath;return inspection.activePath}function legacyCandidate(roots2,kind,id,options){if(kind==="prd"||kind==="execution")return null;if(kind==="spec"&&options?.legacyCapability===void 0)return null;return{path:legacyEntityPath(roots2,kind,id,options),readOnly:true}}function legacyEntityPath(roots2,kind,id,options){assertEntityPrefix(kind,id);if(kind==="prd"||kind==="execution")throw unsupported(kind,1);if(kind==="spec"){const capability=options?.legacyCapability;if(capability===void 0||!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(capability)){throw new WorkspaceLayoutError("Legacy spec lookup requires a canonical legacyCapability")}return`${roots2.spec}/${capability}/spec.md`}datedIdParts(id);if(kind==="change"){const{year,month}=datedIdParts(id);return`${roots2.change}/${year}/${month}/${id}/proposal.md`}if(kind==="task")return datedMarkdownPath(roots2.task,id);return datedMarkdownPath(roots2.run,id)}function legacyRoot(roots2,kind){if(kind==="prd"||kind==="execution")return null;return roots2[kind]}function assertDatedEntityId(kind,id){assertEntityPrefix(kind,id);datedIdPartsWithDay(id)}function assertEntityPrefix(kind,id){const prefix=expectedPrefixes[kind];if(!id.startsWith(`${prefix}-`)){throw new ArtifactKindMismatchError(`Expected ${kind} id to start with ${prefix}-: ${id}`)}}function canonicalRoot(path){if(path.length===0||path.includes("\\")||path.includes("\0")||path.startsWith("/")||path.startsWith("./")||path.endsWith("/")||/^[A-Za-z]:/.test(path)||path.split("/").some(segment2=>segment2.length===0||segment2==="."||segment2==="..")){throw new WorkspaceLayoutError(`Workspace layout path is not canonical: ${path}`)}return path}function unsupported(kind,version2){return new UnsupportedLayoutEntityError(`Layout V${version2} does not support ${kind}`)}var WorkspaceLayoutError,PartialWorkspaceConfigError,WorkspaceLayoutNotFoundError,UnsupportedLayoutEntityError,ArtifactKindMismatchError,InactiveLayoutConflictError,expectedPrefixes,v2DirectoryNames,defaultLegacyRoots;var init_workspace_layout=__esm({"../core/src/workspace-layout.ts"(){"use strict";init_config();init_manifest();init_paths();WorkspaceLayoutError=class extends Error{name="WorkspaceLayoutError"};PartialWorkspaceConfigError=class extends WorkspaceLayoutError{name="PartialWorkspaceConfigError"};WorkspaceLayoutNotFoundError=class extends WorkspaceLayoutError{name="WorkspaceLayoutNotFoundError"};UnsupportedLayoutEntityError=class extends WorkspaceLayoutError{name="UnsupportedLayoutEntityError"};ArtifactKindMismatchError=class extends WorkspaceLayoutError{name="ArtifactKindMismatchError"};InactiveLayoutConflictError=class extends WorkspaceLayoutError{name="InactiveLayoutConflictError"};expectedPrefixes={prd:"PRD",spec:"SPEC",change:"CHG",task:"TASK",execution:"EXEC",run:"RUN"};v2DirectoryNames={prd:"prds",spec:"specs",change:"changes",task:"tasks",execution:"executions",run:"runs"};defaultLegacyRoots={spec:".agents/specs/capabilities",change:".agents/changes",task:".agents/tasks",run:".agents/runs"}}});var CORE_VERSION;var init_src=__esm({"../core/src/index.ts"(){"use strict";init_agent_runtime();init_agents();init_autonomy_policy();init_autonomy_recovery();init_clock();init_config();init_filesystem();init_git();init_governance();init_host_capabilities();init_ids();init_lifecycle_claims();init_manifest();init_markdown();init_model_orchestration();init_paths();init_permissions2();init_routing2();init_record_safety();init_result();init_state_machine();init_stop_receipt_schema();init_workspace_layout();init_yaml();CORE_VERSION="4.7.0"}});function followsDispatchPolicy(agent){return agent.role==="orchestrator"||["builder","task-executor"].includes(agent.role)&&agent.execution_eligibility.includes("delivery")}function codexModelInstructions(agent){return followsDispatchPolicy(agent)?["Model and reasoning effort are controlled by the authorized dispatch policy. Catalog preferences are dispatch defaults, not permanent native locks. Before dispatch, the authorized host must select and validate the model/effort allowed by the frozen Task policy and the host's manual selection. Record the requested configuration separately from the effective model/effort observed from the host; never silently inherit a parent configuration or claim a model switch from instructions. If the host cannot select or verify the required configuration, report the capability as unavailable and return the blocked dispatch to the orchestrator."]:[]}function codexModelConfig(agent){const model=agent.model.preferred[0];if(followsDispatchPolicy(agent)||agent.model.preferred.length!==1||model===void 0||model==="policy-selected"){return""}const effort=agent.model.reasoning_effort;return`model = ${JSON.stringify(model)}
 ${effort===void 0?"":`model_reasoning_effort = ${JSON.stringify(effort)}
 `}`}var init_codex_model_policy=__esm({"../adapters/src/guidance/codex-model-policy.ts"(){"use strict"}});import{createHash}from"node:crypto";function agentGuidanceFiles(catalog){validateGuidanceCatalog(catalog);const files=[];for(const agent of[...catalog.agents].sort(byId)){const payload=stableJson({kind:"agent",schema_version:1,definition:agent});const semanticHash=digest(payload);files.push({client:"codex",subject:agent.id,projection:"canonical",path:`.agents/config/clients/codex/agents/${agent.codex_name}.toml`,content:renderCodexAgent(agent,catalog,payload),semantic_hash:semanticHash});for(const alias of agent.compatibility?.aliases??[]){const shim=stableJson({kind:"agent-alias",schema_version:1,alias,canonical:{id:agent.id,codex_name:agent.codex_name,codex_task_name:agent.codex_task_name}});const subject2=`alias:${alias.kind}:${alias.value}`;if(alias.kind==="id"){files.push({client:"claude",subject:subject2,projection:"compatibility-shim",path:`.claude/agents/${alias.value}.md`,content:renderGuidance(alias.value,`Deprecated alias for ${agent.id}. Use ${agent.id}. Removal deadline: ${alias.remove_after}.`,shim),semantic_hash:digest(shim)})}if(alias.kind==="codex_name"){files.push({client:"codex",subject:subject2,projection:"compatibility-shim",path:`.agents/config/clients/codex/agents/${alias.value}.toml`,content:renderCodexAlias(agent,alias.value,alias.remove_after,shim),semantic_hash:digest(shim)})}}files.push({client:"claude",subject:agent.id,projection:"canonical",path:`.claude/agents/${agent.id}.md`,content:renderGuidance(agent.id,claudeAgentPurpose(agent),payload),semantic_hash:semanticHash})}for(const squad of[...catalog.squads].sort(byId)){const payload=stableJson({kind:"squad",schema_version:1,definition:squad});files.push(...clientFiles("squads",squad.id,renderGuidance(squad.id,squad.purpose,payload),digest(payload)))}return files}function compareAgentGuidance(files){const drifted=[];const paths=new Set;const bySubject=new Map;for(const file2 of files){if(paths.has(file2.path))drifted.push(`${file2.path}:duplicate-path`);paths.add(file2.path);if(file2.projection!=="canonical")continue;const entry2=bySubject.get(file2.subject)??{};if(entry2[file2.client]!==void 0)drifted.push(`${file2.subject}:${file2.client}:duplicate`);entry2[file2.client]=file2;bySubject.set(file2.subject,entry2)}for(const[subject2,entry2]of[...bySubject].sort(([left],[right])=>left.localeCompare(right))){if(entry2.codex===void 0||entry2.claude===void 0){drifted.push(`${subject2}:missing-client`);continue}if(entry2.codex.semantic_hash!==entry2.claude.semantic_hash){drifted.push(`${subject2}:semantic-drift`)}}const manifest=[...files].sort((left,right)=>left.path.localeCompare(right.path)).map(({client,subject:subject2,projection,semantic_hash})=>({client,subject:subject2,projection,semantic_hash}));return{valid:drifted.length===0,drifted,semantic_hash:digest(stableJson(manifest))}}async function buildAgentGuidance(filesystem,catalog){const files=agentGuidanceFiles(catalog);const parity=compareAgentGuidance(files);if(!parity.valid)throw new Error(`Agent guidance parity failed: ${parity.drifted.join(", ")}`);for(const file2 of files){if(await filesystem.exists(file2.path)){const current=await filesystem.readText(file2.path);if(!isManagedGuidance(current)){throw new Error(`Refusing to overwrite user-owned agent guidance: ${file2.path}`)}}}const expectedPaths=new Set(files.map(file2=>file2.path));for(const path of await staleManagedAgentGuidancePaths(filesystem,expectedPaths)){await filesystem.removeFile(path)}for(const file2 of files)await filesystem.writeTextAtomic(file2.path,file2.content);return parity}async function checkAgentGuidance(filesystem,catalog){const files=agentGuidanceFiles(catalog);const parity=compareAgentGuidance(files);const drifted=[...parity.drifted];const findings=[];for(const file2 of files){if(!await filesystem.exists(file2.path)){drifted.push(file2.path);findings.push({classification:"missing",path:file2.path});continue}if(await filesystem.readText(file2.path)!==file2.content){drifted.push(file2.path);findings.push({classification:"content-drift",path:file2.path})}}const inventory2=await agentGuidanceInventory(filesystem,new Set(files.map(file2=>file2.path)));for(const path of inventory2.staleManaged){drifted.push(path);findings.push({classification:"stale-managed",path})}for(const path of inventory2.unknownUnmanaged){findings.push({classification:"unknown-unmanaged",path})}return{...parity,valid:drifted.length===0,drifted:[...new Set(drifted)].sort(),findings:findings.sort((left,right)=>left.classification.localeCompare(right.classification)||left.path.localeCompare(right.path))}}function validateGuidanceCatalog(catalog){const agents=new Map(catalog.agents.map(agent=>[agent.id,agent]));if(agents.size!==catalog.agents.length)throw new Error("Agent ids must be unique");const squadIds=new Set(catalog.squads.map(squad=>squad.id));if(squadIds.size!==catalog.squads.length)throw new Error("Squad ids must be unique");for(const agent of catalog.agents){if(!agent.codex_name.startsWith("zaip-agent-")){throw new Error(`${agent.id} codex_name must start with zaip-agent-`)}const expectedTaskName=agent.nickname_candidates[0];if(agent.codex_task_name!==expectedTaskName){throw new Error(`${agent.id} codex_task_name must equal ${expectedTaskName}`)}const expectedNickname=`${agent.persona.nome}_${agent.persona.cargo}_zaip_agent`;if(agent.nickname_candidates.length!==1||agent.nickname_candidates[0]!==expectedNickname){throw new Error(`${agent.id} nickname_candidates must contain only the derived persona nickname`)}}for(const squad of catalog.squads){if(!squad.review_policy.independent)throw new Error(`${squad.id} requires independent review`);const unresolvedMembers=squad.members.map(id=>agents.get(id));if(unresolvedMembers.some(agent=>agent===void 0)){throw new Error(`${squad.id} has unknown members`)}const members=unresolvedMembers.filter(isDefined);const executorIds=new Set(members.filter(agent=>agent!==void 0&&squad.review_policy.executor_roles.includes(agent.role)).map(agent=>agent.id));const reviewerIds=new Set(members.filter(agent=>agent!==void 0&&squad.review_policy.reviewer_roles.includes(agent.role)).map(agent=>agent.id));if(executorIds.size===0||reviewerIds.size===0){throw new Error(`${squad.id} must contain executor and reviewer roles`)}if([...executorIds].some(id=>reviewerIds.has(id))){throw new Error(`${squad.id} cannot assign self-review`)}}}function clientFiles(group,subject2,content,semanticHash){return["codex","claude"].map(client=>({client,subject:subject2,projection:"canonical",path:`.${client}/${group}/${subject2}.md`,content,semantic_hash:semanticHash}))}function renderCodexAgent(agent,catalog,payload){const hash6=digest(payload);const name=agent.codex_name;const finalizer=catalog.agents.find(candidate=>candidate.id==="agent-finalizer");if(agent.role==="orchestrator"&&finalizer===void 0){throw new Error("Agent catalog must define agent-finalizer")}const instructions=[`Operate as Codex agent ${name} (ZAIP catalog id ${agent.id}) with role ${agent.role}.`,agent.purpose,`Capabilities: ${agent.capabilities.join(", ")}.`,`Allowed tools: ${agent.tools.join(", ")||"none"}.`,`Available skills: ${agent.skills.join(", ")||"none"}; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.`,"Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.",...codexModelInstructions(agent),`Write scopes: ${agent.write_scopes.join(", ")||"read-only"}.`,agent.write_scopes.length===0?"This role is read-only. Do not create, modify, move, or delete workspace files.":"The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.",`Inputs: ${agent.contract.inputs.join(", ")}.`,`Outputs: ${agent.contract.outputs.join(", ")}.`,`Evidence: ${agent.contract.evidence.join(", ")}.`,`Use when: ${agent.use_when.join("; ")}.`,`Do not use when: ${agent.do_not_use.join("; ")}.`,...remoteCloudBoundary(agent),...remoteAwsBoundary(agent),...specialistBoundaries(agent),...agent.role==="orchestrator"?["You are the dispatcher for your Task attempt. If the physical root already owns exactly this Task, it is the responsible orchestrator: it dispatches executors/reviewers and Gui directly, without an extra Dave child. A macro root dispatches one Task orchestrator per eligible Task and must not dispatch that Task's workers itself. Never create two responsible orchestrators or require two Guis for the same Task attempt. Never reassign your invocation to another Task.","Tool names in the catalog are capability labels, not literal host tool names. Native collaboration permits spawn_agent, send_input, wait_agent and close_agent for authorized descendants. Discover deferred native tools through the host tool registry before declaring them unavailable. Read-only filesystem permissions do not prohibit native delegation or waiting; do not use discovery to run persistence commands, bypass permissions or create independent chats.","Report child IDs and intermediate results as non-terminal progress, not a final response. Keep your native invocation open until the executor/reviewer and last Gui child have terminated. If you cannot remain active or complete that sequence, report an explicit blocked interruption; do not claim the attempt is finalized.","Identify the requested output and its domain. Under autonomy-v1, standalone Tasks prefer direct work with the user's selected principal model/effort; delegate only for a concrete specialist, isolation, review or finalization need. Before delegation disclose that ZAIP policy may select different child models/efforts. Otherwise preserve the legacy specialist routing contract. References and titles never select an executor or justify escalation.","Default to one domain executor per bounded result. Bring a secondary specialist only when its unresolved domain decision is necessary to the primary output; split independent outputs into sequential Tasks and preserve a true mixed-output conflict instead of codispatching.","Subagent lifecycle hooks are best-effort. You are read-only: relay observed session/thread/turn metadata and events to the authorized host; do not invoke CLI persistence. Canonical order is start -> actual Gui decision -> stop -> finish. The rich stop capture accepts the exact decision in task-outcome/summary/evidence/changed-files and persists it before Stop; Gui need not wait alive for a receipt. Never infer decisions from completed status. Preserve observed ancestry/model/effort; unavailable stays unavailable. UUID is not agent_path and cannot authorize path-only fallback.","Reviewer, auditor, and integrator Sub-Runs are permitted when their capabilities match the work.",`After all other descendants finish, delegate one real final direct Sub-Run to ${finalizer?.codex_name}. Use its cataloged agent_type; pass task_name ${finalizer?.codex_task_name} only when the native tool schema supports that argument. Do not finish the responsible Run or report a terminal Execution outcome before that Sub-Run has completed.`,"Give Gui the real responsible Run ID and exact candidate proof. It returns one immutable outcome, reason, evidence references and owned changed files. Do not require receipt polling or an active-turn handshake. The host persists the real decision through rich stop capture before closing the responsible Run. A terminal rich Gui with open parent is eligible; a closed parent without decision requires an authorized new attempt. Never invent approval or reuse another attempt's decision."]:[],...agent.role==="execution-finalizer"?["Evaluate closure evidence without writing product or lifecycle files. Return exactly one real terminal decision: outcome (completed, blocked, failed, cancelled), observed reason, evidence references, summary, owned changed files and responsible Run ID. Do not poll start/decision receipts or wait to stay active: the authorized host persists your actual decision with rich stop capture before closing the responsible Run. Capture latency is not a product defect or a reason to invent a blocked technical judgment. Missing proof remains blocked; cancelled requires explicit human intent. A native completed status is not persisted Task approval. Never invent metadata or convert UUID into agent_path."]:[],...agent.role==="orchestrator"?[]:["You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation."],`Escalate only to catalog identities: ${agent.escalation.map(id=>catalogCodexName(id)).join(", ")||"root agent"}.`,...agent.role==="orchestrator"?["Delegate only registered catalog identities: agent_type uses codex_name. Send task_name equal to codex_task_name only if the native tool schema exposes task_name; otherwise omit it. nickname_candidates belongs to the generated profile, not a substitute spawn argument. Do not require an exact nickname because the host may add a generated suffix.","Own exactly one Task attempt when Task-scoped. Dispatch executors and reviewers, then Gui as your last direct child; never ask a worker to spawn its own finalizer. Macro coordinators dispatch Task orchestrators and retain separate integration gates. Preserve actual native ancestry, depth and global budgets.",NATIVE_SUBAGENT_POLICY]:["Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims."],`When this agent is delegated, require the cataloged agent_type ${agent.codex_name}. If the native tool exposes task_name use ${agent.codex_task_name}; otherwise omit it and preserve the observed host identity.`,"Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.",agent.role==="execution-finalizer"?"You do not grant product approval; your sole approval-like action is the restricted terminal outcome above.":agent.review.can_approve?`You may approve only roles outside: ${agent.review.cannot_review_roles.join(", ")||"none"}.`:"You cannot approve your own work or issue final approval."].join("\n");const sandboxMode=agent.write_scopes.length===0?"read-only":"workspace-write";const modelConfig=codexModelConfig(agent);return`# zaip-managed generated-do-not-edit source=agent-catalog schema=1 sha256=${hash6}
 name = ${tomlString(name)}
@@ -2346,7 +2346,7 @@ Read \`.agents/config/project.yaml\` first. Apply ZAIP only for literal boolean
 - Use native \`spawn_agent\` only for Sub-Runs; the orchestrator records observed spawn and terminal events idempotently. Independent chats require an explicit user request.
 
 For delegation, use \`context agents\` to discover candidates and \`context agents --agent <id>\` for the selected canonical contract. The resolver validates the catalog and recomputes missing or stale discovery locally. A purpose never authorizes. Root starts \`zaip-agent-orchestrator\`, which selects an eligible executor; the mandatory last child is \`zaip-agent-finalizer\`. Follow core model rules.
-`}});import{createHash as createHash7}from"node:crypto";import{resolve as resolve3}from"node:path";function windowsHookCommand(hookFile,workspaceRoot){const search=workspaceRoot===void 0?"(Get-Location)":`'${resolve3(workspaceRoot).replaceAll("'","''")}'`;const script=`$ProgressPreference = 'SilentlyContinue'; $search = ${search}; $git = $null; while ($search) { $candidate = Join-Path $search '.local/git/cmd/git.exe'; if (Test-Path -LiteralPath $candidate -PathType Leaf) { $git = $candidate; break }; $parent = Split-Path -Path $search -Parent; if (!$parent -or $parent -eq $search) { break }; $search = $parent }; if (!$git) { $git = (Get-Command git -ErrorAction SilentlyContinue).Source }; if (!$git) { exit 0 }; $root = & $git rev-parse --show-toplevel 2>$null; if ($LASTEXITCODE -ne 0 -or !$root) { exit 0 }; $hook = Join-Path $root '.codex/hooks/${hookFile}'; if (!(Test-Path -LiteralPath $hook -PathType Leaf)) { exit 0 }; & node $hook; exit $LASTEXITCODE`;return`powershell -NoProfile -NonInteractive -EncodedCommand ${Buffer.from(script,"utf16le").toString("base64")}`}function adapterFiles(workspaceRoot,catalog,windowsWorkspaceRoot){const codexConfig=CODEX_CONFIG.replaceAll(CODEX_WORKSPACE_ROOT_PLACEHOLDER,JSON.stringify(resolve3(workspaceRoot))).replaceAll("__ZAIP_WINDOWS_PRE_TOOL_HOOK__",windowsHookCommand("zaip-pre-tool-use.mjs",windowsWorkspaceRoot)).replaceAll("__ZAIP_WINDOWS_CONVERSATION_HOOK__",windowsHookCommand("zaip-conversation-lifecycle.mjs",windowsWorkspaceRoot)).replaceAll("__ZAIP_WINDOWS_SUBAGENT_HOOK__",windowsHookCommand("zaip-subagent-lifecycle.mjs",windowsWorkspaceRoot));return[...catalog===void 0?[]:[agentDiscoveryFile(catalog,ADAPTERS_VERSION)],managedAdapterFile(ADAPTERS_VERSION,"AGENTS.md",renderRootGuidance(catalog),"root-guidance"),managedAdapterFile(ADAPTERS_VERSION,".codex/skills/zaip-aios/SKILL.md",DISCOVERY_SKILL,"discovery-skill"),managedAdapterFile(ADAPTERS_VERSION,".claude/skills/zaip-aios/SKILL.md",DISCOVERY_SKILL,"discovery-skill"),managedAdapterFile(ADAPTERS_VERSION,".codex/skills/zaip-aios/agents/openai.yaml",DISCOVERY_SKILL_OPENAI_METADATA,"discovery-skill-openai-metadata"),managedAdapterFile(ADAPTERS_VERSION,".claude/skills/zaip-aios/agents/openai.yaml",DISCOVERY_SKILL_OPENAI_METADATA,"discovery-skill-openai-metadata"),managedAdapterFile(ADAPTERS_VERSION,".codex/config.toml",renderCodexConfig(codexConfig,catalog),"codex-config"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-hook-activation.mjs",CODEX_HOOK_ACTIVATION,"codex-hook-activation"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-pre-tool-use.mjs",CODEX_PRE_TOOL_HOOK,"codex-safety-hook"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-pre-tool-support.mjs",CODEX_PRE_TOOL_SUPPORT_HOOK,"codex-safety-support"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-native-tool-authority.mjs",CODEX_NATIVE_TOOL_AUTHORITY_HOOK,"codex-native-tool-authority"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-conversation-lifecycle.mjs",CODEX_CONVERSATION_LIFECYCLE_HOOK,"codex-conversation-lifecycle-hook"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-subagent-lifecycle.mjs",CODEX_SUBAGENT_LIFECYCLE_HOOK,"codex-subagent-lifecycle-hook"),managedAdapterFile(ADAPTERS_VERSION,".codex/rules/zaip-github-deploy.rules",CODEX_GITHUB_DEPLOY_RULES,"codex-github-deploy-rules"),managedAdapterFile(ADAPTERS_VERSION,".codex/rules/zaip-security.rules",CODEX_SECURITY_RULES,"codex-security-rules"),managedAdapterFile(ADAPTERS_VERSION,".claude/settings.json",CLAUDE_SETTINGS,"claude-settings")]}async function buildAdapters(filesystem){const catalog=await filesystem.exists(AGENT_CATALOG_PATH)?await loadGuidanceCatalog(filesystem):void 0;const files=adapterFiles(filesystem.root,catalog);for(const file2 of files){if(await filesystem.exists(file2.path)){const current=await filesystem.readText(file2.path);if(isPreservedUserOverlay(file2.path,current)){reconcileCodexConfig(current,file2.content,catalog!==void 0);continue}if(!isManagedAdapterFile(current,file2.path)){throw new Error(`Refusing to overwrite user-owned adapter: ${file2.path}`)}}}for(const file2 of files){if(await filesystem.exists(file2.path)){const current=await filesystem.readText(file2.path);if(isPreservedUserOverlay(file2.path,current)){if(file2.path===".codex/config.toml"){await filesystem.writeTextAtomic(file2.path,reconcileCodexConfig(current,file2.content,catalog!==void 0))}continue}}await filesystem.writeTextAtomic(file2.path,file2.content)}for(const path of RETIRED_MANAGED_ADAPTERS){if(!await filesystem.exists(path))continue;const current=await filesystem.readText(path);if(isUnchangedManagedAdapter(path,current)){await filesystem.removeFileIfContentMatches(path,current)}}if(catalog!==void 0)await buildAgentGuidance(filesystem,catalog)}async function checkAdapters(filesystem){const catalog=await filesystem.exists(AGENT_CATALOG_PATH)?await loadGuidanceCatalog(filesystem):void 0;const codexVariants=[void 0,filesystem.root].map(hookRoot=>adapterFiles(filesystem.root,catalog,hookRoot).find(file2=>file2.path===".codex/config.toml")?.content??"");const result2=await checkAdapterFiles(filesystem,AGENT_CATALOG_PATH,loadGuidanceCatalog,catalog2=>adapterFiles(filesystem.root,catalog2),(path,content)=>path===".codex/config.toml"&&codexVariants.some(expected=>content===expected||isPreservedUserOverlay(path,content)&&isReconciledCodexConfig(content,expected,catalog!==void 0)));return result2}function isPreservedUserOverlay(path,content){return USER_OWNED_ADAPTER_OVERLAYS.has(path)&&!isUnchangedCodexConfig(content)}function isUnchangedManagedAdapter(path,content){if(!isManagedAdapterFile(content,path))return false;const marker=content.match(/^<!-- zaip-managed [^\r\n]* sha256=([a-f0-9]{64}) -->\r?\n/);if(marker?.[1]===void 0)return false;return createHash7("sha256").update(content.slice(marker[0].length)).digest("hex")===marker[1]}var ADAPTERS_VERSION,USER_OWNED_ADAPTER_OVERLAYS,RETIRED_MANAGED_ADAPTERS,CLAUDE_SETTINGS,DISCOVERY_SKILL,DISCOVERY_SKILL_OPENAI_METADATA,CODEX_WORKSPACE_ROOT_PLACEHOLDER,CODEX_CONFIG;var init_src2=__esm({"../adapters/src/index.ts"(){"use strict";init_adapter_check();init_adapter_file_rendering();init_codex_conversation_lifecycle_hook();init_codex_hook_activation();init_codex_hook_activation();init_codex_config_overlay();init_codex_native_tool_authority_template();init_codex_pre_tool_hook_template();init_codex_pre_tool_support_template();init_codex_rules();init_codex_subagent_lifecycle_hook();init_agent_discovery();init_catalog_guidance();init_guidance_catalog();init_agent_runtime2();init_codex_host2();init_guidance();init_mcp();init_profiles2();init_root_guidance();ADAPTERS_VERSION="4.6.0";USER_OWNED_ADAPTER_OVERLAYS=new Set([".codex/config.toml"]);RETIRED_MANAGED_ADAPTERS=["CLAUDE.md"];CLAUDE_SETTINGS=`{
+`}});import{createHash as createHash7}from"node:crypto";import{resolve as resolve3}from"node:path";function windowsHookCommand(hookFile,workspaceRoot){const search=workspaceRoot===void 0?"(Get-Location)":`'${resolve3(workspaceRoot).replaceAll("'","''")}'`;const script=`$ProgressPreference = 'SilentlyContinue'; $search = ${search}; $git = $null; while ($search) { $candidate = Join-Path $search '.local/git/cmd/git.exe'; if (Test-Path -LiteralPath $candidate -PathType Leaf) { $git = $candidate; break }; $parent = Split-Path -Path $search -Parent; if (!$parent -or $parent -eq $search) { break }; $search = $parent }; if (!$git) { $git = (Get-Command git -ErrorAction SilentlyContinue).Source }; if (!$git) { exit 0 }; $root = & $git rev-parse --show-toplevel 2>$null; if ($LASTEXITCODE -ne 0 -or !$root) { exit 0 }; $hook = Join-Path $root '.codex/hooks/${hookFile}'; if (!(Test-Path -LiteralPath $hook -PathType Leaf)) { exit 0 }; & node $hook; exit $LASTEXITCODE`;return`powershell -NoProfile -NonInteractive -EncodedCommand ${Buffer.from(script,"utf16le").toString("base64")}`}function adapterFiles(workspaceRoot,catalog,windowsWorkspaceRoot){const codexConfig=CODEX_CONFIG.replaceAll(CODEX_WORKSPACE_ROOT_PLACEHOLDER,JSON.stringify(resolve3(workspaceRoot))).replaceAll("__ZAIP_WINDOWS_PRE_TOOL_HOOK__",windowsHookCommand("zaip-pre-tool-use.mjs",windowsWorkspaceRoot)).replaceAll("__ZAIP_WINDOWS_CONVERSATION_HOOK__",windowsHookCommand("zaip-conversation-lifecycle.mjs",windowsWorkspaceRoot)).replaceAll("__ZAIP_WINDOWS_SUBAGENT_HOOK__",windowsHookCommand("zaip-subagent-lifecycle.mjs",windowsWorkspaceRoot));return[...catalog===void 0?[]:[agentDiscoveryFile(catalog,ADAPTERS_VERSION)],managedAdapterFile(ADAPTERS_VERSION,"AGENTS.md",renderRootGuidance(catalog),"root-guidance"),managedAdapterFile(ADAPTERS_VERSION,".codex/skills/zaip-aios/SKILL.md",DISCOVERY_SKILL,"discovery-skill"),managedAdapterFile(ADAPTERS_VERSION,".claude/skills/zaip-aios/SKILL.md",DISCOVERY_SKILL,"discovery-skill"),managedAdapterFile(ADAPTERS_VERSION,".codex/skills/zaip-aios/agents/openai.yaml",DISCOVERY_SKILL_OPENAI_METADATA,"discovery-skill-openai-metadata"),managedAdapterFile(ADAPTERS_VERSION,".claude/skills/zaip-aios/agents/openai.yaml",DISCOVERY_SKILL_OPENAI_METADATA,"discovery-skill-openai-metadata"),managedAdapterFile(ADAPTERS_VERSION,".codex/config.toml",renderCodexConfig(codexConfig,catalog),"codex-config"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-hook-activation.mjs",CODEX_HOOK_ACTIVATION,"codex-hook-activation"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-pre-tool-use.mjs",CODEX_PRE_TOOL_HOOK,"codex-safety-hook"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-pre-tool-support.mjs",CODEX_PRE_TOOL_SUPPORT_HOOK,"codex-safety-support"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-native-tool-authority.mjs",CODEX_NATIVE_TOOL_AUTHORITY_HOOK,"codex-native-tool-authority"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-conversation-lifecycle.mjs",CODEX_CONVERSATION_LIFECYCLE_HOOK,"codex-conversation-lifecycle-hook"),managedAdapterFile(ADAPTERS_VERSION,".codex/hooks/zaip-subagent-lifecycle.mjs",CODEX_SUBAGENT_LIFECYCLE_HOOK,"codex-subagent-lifecycle-hook"),managedAdapterFile(ADAPTERS_VERSION,".codex/rules/zaip-github-deploy.rules",CODEX_GITHUB_DEPLOY_RULES,"codex-github-deploy-rules"),managedAdapterFile(ADAPTERS_VERSION,".codex/rules/zaip-security.rules",CODEX_SECURITY_RULES,"codex-security-rules"),managedAdapterFile(ADAPTERS_VERSION,".claude/settings.json",CLAUDE_SETTINGS,"claude-settings")]}async function buildAdapters(filesystem){const catalog=await filesystem.exists(AGENT_CATALOG_PATH)?await loadGuidanceCatalog(filesystem):void 0;const files=adapterFiles(filesystem.root,catalog);for(const file2 of files){if(await filesystem.exists(file2.path)){const current=await filesystem.readText(file2.path);if(isPreservedUserOverlay(file2.path,current)){reconcileCodexConfig(current,file2.content,catalog!==void 0);continue}if(!isManagedAdapterFile(current,file2.path)){throw new Error(`Refusing to overwrite user-owned adapter: ${file2.path}`)}}}for(const file2 of files){if(await filesystem.exists(file2.path)){const current=await filesystem.readText(file2.path);if(isPreservedUserOverlay(file2.path,current)){if(file2.path===".codex/config.toml"){await filesystem.writeTextAtomic(file2.path,reconcileCodexConfig(current,file2.content,catalog!==void 0))}continue}}await filesystem.writeTextAtomic(file2.path,file2.content)}for(const path of RETIRED_MANAGED_ADAPTERS){if(!await filesystem.exists(path))continue;const current=await filesystem.readText(path);if(isUnchangedManagedAdapter(path,current)){await filesystem.removeFileIfContentMatches(path,current)}}if(catalog!==void 0)await buildAgentGuidance(filesystem,catalog)}async function checkAdapters(filesystem){const catalog=await filesystem.exists(AGENT_CATALOG_PATH)?await loadGuidanceCatalog(filesystem):void 0;const codexVariants=[void 0,filesystem.root].map(hookRoot=>adapterFiles(filesystem.root,catalog,hookRoot).find(file2=>file2.path===".codex/config.toml")?.content??"");const result2=await checkAdapterFiles(filesystem,AGENT_CATALOG_PATH,loadGuidanceCatalog,catalog2=>adapterFiles(filesystem.root,catalog2),(path,content)=>path===".codex/config.toml"&&codexVariants.some(expected=>content===expected||isPreservedUserOverlay(path,content)&&isReconciledCodexConfig(content,expected,catalog!==void 0)));return result2}function isPreservedUserOverlay(path,content){return USER_OWNED_ADAPTER_OVERLAYS.has(path)&&!isUnchangedCodexConfig(content)}function isUnchangedManagedAdapter(path,content){if(!isManagedAdapterFile(content,path))return false;const marker=content.match(/^<!-- zaip-managed [^\r\n]* sha256=([a-f0-9]{64}) -->\r?\n/);if(marker?.[1]===void 0)return false;return createHash7("sha256").update(content.slice(marker[0].length)).digest("hex")===marker[1]}var ADAPTERS_VERSION,USER_OWNED_ADAPTER_OVERLAYS,RETIRED_MANAGED_ADAPTERS,CLAUDE_SETTINGS,DISCOVERY_SKILL,DISCOVERY_SKILL_OPENAI_METADATA,CODEX_WORKSPACE_ROOT_PLACEHOLDER,CODEX_CONFIG;var init_src2=__esm({"../adapters/src/index.ts"(){"use strict";init_adapter_check();init_adapter_file_rendering();init_codex_conversation_lifecycle_hook();init_codex_hook_activation();init_codex_hook_activation();init_codex_config_overlay();init_codex_native_tool_authority_template();init_codex_pre_tool_hook_template();init_codex_pre_tool_support_template();init_codex_rules();init_codex_subagent_lifecycle_hook();init_agent_discovery();init_catalog_guidance();init_guidance_catalog();init_agent_runtime2();init_codex_host2();init_guidance();init_mcp();init_profiles2();init_root_guidance();ADAPTERS_VERSION="4.7.0";USER_OWNED_ADAPTER_OVERLAYS=new Set([".codex/config.toml"]);RETIRED_MANAGED_ADAPTERS=["CLAUDE.md"];CLAUDE_SETTINGS=`{
   "permissions": {
     "allow": [],
     "deny": []
@@ -2536,13 +2536,12 @@ ${consequences}`}function isNodeError3(error51){return error51 instanceof Error&
 `);return validated}catch(error51){if(!isNodeError4(error51)||error51.code!=="EEXIST")throw error51}const existing=codexTelemetryCorrelationV1Schema.parse(JSON.parse(await filesystem.readText(path)));if(isCompatibleCorrelationEnrichment(existing,validated)){await filesystem.writeTextAtomic(path,`${JSON.stringify(validated)}
 `);return validated}if(JSON.stringify(existing)!==JSON.stringify(validated))throw new Error(`Codex telemetry correlation is already owned by ${existing.agent_invocation_id}`);return existing}function isCompatibleCorrelationEnrichment(existing,candidate){const stableKeys=["run_id","agent_invocation_id","root_agent_invocation_id","parent_agent_invocation_id","invocation_kind","delegation_depth","client","thread_id","turn_id","agent_path"];if(stableKeys.some(key=>existing[key]!==candidate[key]))return false;const enrichableKeys=["execution_id","task_id","spec_id","prd_id","change_id","zaip_agent","phase","purpose"];return enrichableKeys.every(key=>existing[key]===null||existing[key]===candidate[key])}async function listCodexTelemetryCorrelations(filesystem){const paths=await filesystem.listFiles(`${ROOT}/correlations`,".json");const correlations=await mapInBatches(paths,path=>readListedJson(filesystem,path));return correlations.filter(value=>value!==null).map(value=>codexTelemetryCorrelationV1Schema.parse(value)).sort((left,right)=>left.agent_invocation_id.localeCompare(right.agent_invocation_id)||left.run_id.localeCompare(right.run_id))}async function appendCodexTelemetrySpoolEvent(filesystem,input){const event=codexTelemetrySpoolEventInputV1Schema.parse(input);await persistCodexTelemetryCorrelation(filesystem,event.correlation);const sourceDigest=digest3(event.source_event_key);const path=`${ROOT}/events/${sourceDigest.slice(0,2)}/${sourceDigest}.json`;const unsigned={schema_version:1,event_id:`CEVT-${sourceDigest}`,compaction:{status:"pending",compacted_at:null},event};const envelope=codexTelemetrySpoolEnvelopeV1Schema.parse({...unsigned,checksum_sha256:digest3(JSON.stringify(unsigned))});const serialized=`${JSON.stringify(envelope)}
 `;if(Buffer.byteLength(serialized,"utf8")>MAX_ENVELOPE_BYTES)throw new Error("Codex telemetry spool envelope exceeds the 64 KiB sanitized limit");try{await filesystem.writeTextAtomicExclusive(path,serialized);return{...envelope,spool_path:path}}catch(error51){if(!isNodeError4(error51)||error51.code!=="EEXIST")throw error51}const existing=await readCodexTelemetrySpoolEvent(filesystem,path);const sameOwner=existing.event.correlation.agent_invocation_id===event.correlation.agent_invocation_id&&existing.event.correlation.run_id===event.correlation.run_id;if(sameOwner&&sameStableSpoolEvent(existing.event,event))return existing;if(!sameStableSpoolEvent(existing.event,event))throw new Error(`Codex telemetry source event is already owned by ${existing.event.correlation.agent_invocation_id}`);return existing}function sameStableSpoolEvent(left,right){const{captured_at:_leftCapturedAt,historical_cost:_leftCost,...stableLeft}=left;const{captured_at:_rightCapturedAt,historical_cost:_rightCost,...stableRight}=right;return JSON.stringify(stableLeft)===JSON.stringify(stableRight)}async function readCodexTelemetrySpoolEvent(filesystem,path){if(!path.startsWith(`${ROOT}/events/`)||!path.endsWith(".json"))throw new Error(`Invalid Codex telemetry spool event path: ${path}`);const envelope=codexTelemetrySpoolEnvelopeV1Schema.parse(JSON.parse(await filesystem.readText(path)));const{checksum_sha256:checksum,...unsigned}=envelope;if(digest3(JSON.stringify(unsigned))!==checksum)throw new Error(`Codex telemetry spool checksum mismatch: ${envelope.event_id}`);return{...envelope,spool_path:path}}async function listCodexTelemetrySpoolEvents(filesystem,status){const indexed=await readIndexedEvents(filesystem);if(indexed!==null)return filterAndSort(indexed,status);const paths=await filesystem.listFiles(`${ROOT}/events`,".json");const events=await mapInBatches(paths,async path=>{try{return await readCodexTelemetrySpoolEvent(filesystem,path)}catch(error51){if(isNodeError4(error51)&&error51.code==="ENOENT")return null;throw error51}});return filterAndSort(events.filter(event=>event!==null),status)}async function readIndexedEvents(filesystem){const index=await readSpoolIndex(filesystem);if(index===null)return null;const paths=await filesystem.listFiles(EVENT_ROOT,".json");const known2=new Map(index.events.map(entry2=>[entry2.path,entry2]));const containment=createContainment(filesystem);const events=await mapInBatches(paths,async path=>{try{const entry2=known2.get(path);const metadata2=await eventStat(filesystem,path,containment);const cached2=entry2!==void 0&&sameStat(entry2.stat,metadata2)?tryVerifiedEnvelope(entry2.envelope,path):null;if(cached2!==null)return{...cached2,spool_path:path};return await readCodexTelemetrySpoolEvent(filesystem,path)}catch(error51){if(isNodeError4(error51)&&error51.code==="ENOENT")return null;throw error51}});return events.filter(event=>event!==null)}async function readSpoolIndex(filesystem){try{const target=filesystem.resolve(INDEX_PATH);const[root,parent]=await Promise.all([realpath6(filesystem.root),realpath6(dirname3(target))]);const fromRoot=relative5(root,parent);if(fromRoot===".."||fromRoot.startsWith(`..${sep3}`)||isAbsolute5(fromRoot))return null;const metadata2=await lstat4(target,{bigint:true});if(!metadata2.isFile()||metadata2.isSymbolicLink()||metadata2.size>BigInt(MAX_INDEX_BYTES))return null;const bytes=await filesystem.readBytes(INDEX_PATH);if(bytes.byteLength>MAX_INDEX_BYTES)return null;const index=spoolIndexSchema.parse(JSON.parse(bytes.toString("utf8")));const{checksum_sha256,...unsigned}=index;return digest3(JSON.stringify(unsigned))===checksum_sha256?index:null}catch(error51){if(isNodeError4(error51)&&error51.code==="ENOENT")return null;return null}}function filterAndSort(events,status){return events.filter(event=>status===void 0||event.compaction.status===status).sort(compareCodexTelemetrySpoolEvents)}function withoutPath(event){const{spool_path:_path,...envelope}=event;return envelope}function verifiedEnvelope(value){const envelope=codexTelemetrySpoolEnvelopeV1Schema.parse(value);const{checksum_sha256,...unsigned}=envelope;if(digest3(JSON.stringify(unsigned))!==checksum_sha256)throw new Error(`Codex telemetry spool checksum mismatch: ${envelope.event_id}`);return envelope}function tryVerifiedEnvelope(value,path){try{const envelope=verifiedEnvelope(value);const sourceDigest=digest3(envelope.event.source_event_key);const expectedPath=`${EVENT_ROOT}/${sourceDigest.slice(0,2)}/${sourceDigest}.json`;return path===expectedPath&&envelope.event_id===`CEVT-${sourceDigest}`?envelope:null}catch{return null}}function createContainment(filesystem){return{root:realpath6(filesystem.root),parents:new Map}}async function eventStat(filesystem,path,containment){const target=filesystem.resolve(path);const parentPath=filesystem.resolve(`${EVENT_ROOT}/${path.split("/").at(-2)??""}`);const parent=containment.parents.get(parentPath)??realpath6(parentPath);containment.parents.set(parentPath,parent);const[physicalRoot,physicalParent]=await Promise.all([containment.root,parent]);const fromRoot=relative5(physicalRoot,physicalParent);if(fromRoot===".."||fromRoot.startsWith(`..${sep3}`)||isAbsolute5(fromRoot))throw new Error(`Codex telemetry spool path escapes workspace: ${path}`);const metadata2=await lstat4(target,{bigint:true});if(!metadata2.isFile()||metadata2.isSymbolicLink())throw new Error(`Invalid Codex telemetry spool event path: ${path}`);return{dev:metadata2.dev.toString(),ino:metadata2.ino.toString(),size:metadata2.size.toString(),mtime_ns:metadata2.mtimeNs.toString(),ctime_ns:metadata2.ctimeNs.toString()}}function sameStat(left,right){return left.dev===right.dev&&left.ino===right.ino&&left.size===right.size&&left.mtime_ns===right.mtime_ns&&left.ctime_ns===right.ctime_ns}function samePaths(left,right){return left.length===right.length&&left.every((path,index)=>path===right[index])}async function mapInBatches(values,transform2){const results=[];for(let offset=0;offset<values.length;offset+=LIST_READ_CONCURRENCY){results.push(...await Promise.all(values.slice(offset,offset+LIST_READ_CONCURRENCY).map(transform2)))}return results}function compareCodexTelemetrySpoolEvents(left,right){const leftOccurredAt=left.event.source_occurred_at;const rightOccurredAt=right.event.source_occurred_at;if(leftOccurredAt===null&&rightOccurredAt!==null)return 1;if(leftOccurredAt!==null&&rightOccurredAt===null)return-1;if(leftOccurredAt!==null&&rightOccurredAt!==null){const order2=leftOccurredAt.localeCompare(rightOccurredAt);if(order2!==0)return order2}return left.event_id.localeCompare(right.event_id)}async function readListedJson(filesystem,path){try{return JSON.parse(await filesystem.readText(path))}catch(error51){if(isNodeError4(error51)&&error51.code==="ENOENT")return null;throw error51}}function isNodeError4(error51){return error51 instanceof Error&&"code"in error51}var ROOT,EVENT_ROOT,INDEX_PATH,LIST_READ_CONCURRENCY,MAX_ENVELOPE_BYTES,MAX_INDEX_BYTES,digest3,indexedEventSchema,spoolIndexSchema;var init_codex_telemetry_spool=__esm({"../decisions/src/codex-telemetry-spool.ts"(){"use strict";init_zod();init_run_v2_types();ROOT=".local/codex-telemetry-spool/v1";EVENT_ROOT=`${ROOT}/events`;INDEX_PATH=`${ROOT}/events.index.json`;LIST_READ_CONCURRENCY=32;MAX_ENVELOPE_BYTES=64*1024;MAX_INDEX_BYTES=64*1024*1024;digest3=value=>createHash13("sha256").update(value).digest("hex");indexedEventSchema=external_exports.object({path:external_exports.string().startsWith(`${EVENT_ROOT}/`).endsWith(".json"),stat:external_exports.object({dev:external_exports.string(),ino:external_exports.string(),size:external_exports.string(),mtime_ns:external_exports.string(),ctime_ns:external_exports.string()}).strict(),envelope:codexTelemetrySpoolEnvelopeV1Schema}).strict();spoolIndexSchema=external_exports.object({schema_version:external_exports.literal(1),events:external_exports.array(indexedEventSchema),checksum_sha256:external_exports.string().regex(/^[a-f0-9]{64}$/)}).strict()}});var sourceStreamSchema,unsignedManifestSchema,historicalDeveloperAttributionManifestSchema;var init_historical_developer_attribution2=__esm({"../decisions/src/historical-developer-attribution.ts"(){"use strict";init_zod();init_run_v2_types();sourceStreamSchema=external_exports.object({run_id:external_exports.string().startsWith("RUN-"),path:external_exports.string().startsWith(".agents/records/runs/"),content_sha256:external_exports.string().regex(/^[a-f0-9]{64}$/)}).strict();unsignedManifestSchema=external_exports.object({schema_version:external_exports.literal(1),manifest_id:external_exports.string().min(1),created_at:external_exports.string().datetime({offset:true}),kind:external_exports.literal("historical_developer_attribution"),assignment:developerIdentityV1Schema.extend({attribution_source:external_exports.literal("human_assigned")}),source_streams:external_exports.array(sourceStreamSchema).min(1)}).strict().superRefine((value,context)=>{const ids=new Set;const paths=new Set;for(const[index,source]of value.source_streams.entries()){if(ids.has(source.run_id))context.addIssue({code:"custom",path:["source_streams",index,"run_id"],message:"Duplicate historical Run"});if(paths.has(source.path))context.addIssue({code:"custom",path:["source_streams",index,"path"],message:"Duplicate historical Run path"});ids.add(source.run_id);paths.add(source.path)}});historicalDeveloperAttributionManifestSchema=unsignedManifestSchema.extend({manifest_hash:external_exports.string().regex(/^[a-f0-9]{64}$/)}).strict()}});async function readDeveloperIdentityCache(filesystem){try{return developerIdentityV1Schema.parse(JSON.parse(await filesystem.readText(DEVELOPER_IDENTITY_CACHE_PATH)))}catch(error51){if(isMissing(error51))return null;throw new DeveloperIdentityBootstrapRequiredError("Developer identity cache is invalid; run `developer identity bootstrap`",{cause:error51})}}async function requireDeveloperIdentityCache(filesystem){const identity2=await readDeveloperIdentityCache(filesystem);if(identity2===null)throw new DeveloperIdentityBootstrapRequiredError("Developer identity is not configured; run `developer identity bootstrap`");return identity2}async function writeDeveloperIdentityCache(filesystem,identity2){const validated=developerIdentityV1Schema.parse({...identity2,expires_at:identity2.expires_at??null,last_verified_at:identity2.last_verified_at??identity2.verified_at});await filesystem.writeTextAtomic(DEVELOPER_IDENTITY_CACHE_PATH,`${JSON.stringify(validated)}
-`);return validated}function developerIdentityNeedsRevalidation(identity2,now=new Date){if(identity2.expires_at===null||identity2.expires_at===void 0)return true;const expiresAt=Date.parse(identity2.expires_at);return!Number.isFinite(expiresAt)||expiresAt<=now.getTime()}function verifiedDeveloperIdentity(account,now=new Date){const verifiedAt=now.toISOString();return developerIdentityV1Schema.parse({schema_version:1,provider:"github",account_id:account.id,login_snapshot:account.login,attribution_source:"verified_local_account",verified_at:verifiedAt,last_verified_at:verifiedAt,expires_at:new Date(now.getTime()+DEVELOPER_IDENTITY_CACHE_TTL_MS).toISOString()})}function cachedFallbackDeveloperIdentity(identity2){return developerIdentityV1Schema.parse({...identity2,attribution_source:"cached_fallback",last_verified_at:identity2.last_verified_at??identity2.verified_at})}function isMissing(error51){return typeof error51==="object"&&error51!==null&&"code"in error51&&error51.code==="ENOENT"}var DEVELOPER_IDENTITY_CACHE_PATH,DEVELOPER_IDENTITY_CACHE_TTL_MS,DeveloperIdentityBootstrapRequiredError;var init_developer_identity_cache=__esm({"../decisions/src/developer-identity-cache.ts"(){"use strict";init_run_v2_types();DEVELOPER_IDENTITY_CACHE_PATH=".local/developer-identity.json";DEVELOPER_IDENTITY_CACHE_TTL_MS=24*60*60*1e3;DeveloperIdentityBootstrapRequiredError=class extends Error{name="DeveloperIdentityBootstrapRequiredError"}}});import{createHash as createHash14,randomUUID}from"node:crypto";async function withUsageAttributionLock(filesystem,lockPath,operation){const deadline=Date.now()+12e4;const ownerNonce=randomUUID();let lastRetryError=null;while(true){if(lastRetryError!==null&&Date.now()>=deadline)throw lastRetryError;try{await filesystem.writeTextExclusive(lockPath,`${JSON.stringify(lock(ownerNonce))}
+`);return validated}function developerIdentityNeedsRevalidation(identity2,now=new Date){if(identity2.expires_at===null||identity2.expires_at===void 0)return true;const expiresAt=Date.parse(identity2.expires_at);return!Number.isFinite(expiresAt)||expiresAt<=now.getTime()}function verifiedDeveloperIdentity(account,now=new Date){const verifiedAt=now.toISOString();return developerIdentityV1Schema.parse({schema_version:1,provider:"github",account_id:account.id,login_snapshot:account.login,attribution_source:"verified_local_account",verified_at:verifiedAt,last_verified_at:verifiedAt,expires_at:new Date(now.getTime()+DEVELOPER_IDENTITY_CACHE_TTL_MS).toISOString()})}function cachedFallbackDeveloperIdentity(identity2){return developerIdentityV1Schema.parse({...identity2,attribution_source:"cached_fallback",last_verified_at:identity2.last_verified_at??identity2.verified_at})}function isMissing(error51){return typeof error51==="object"&&error51!==null&&"code"in error51&&error51.code==="ENOENT"}var DEVELOPER_IDENTITY_CACHE_PATH,DEVELOPER_IDENTITY_CACHE_TTL_MS,DeveloperIdentityBootstrapRequiredError;var init_developer_identity_cache=__esm({"../decisions/src/developer-identity-cache.ts"(){"use strict";init_run_v2_types();DEVELOPER_IDENTITY_CACHE_PATH=".local/developer-identity.json";DEVELOPER_IDENTITY_CACHE_TTL_MS=24*60*60*1e3;DeveloperIdentityBootstrapRequiredError=class extends Error{name="DeveloperIdentityBootstrapRequiredError"}}});function isExistingLock(error51){return error51 instanceof Error&&"code"in error51&&error51.code==="EEXIST"}async function withRunAppendLock(filesystem,path,runId,recoverOrphan,append){const lockPath=`${path}.lock`;const claim=()=>filesystem.writeTextExclusive(lockPath,`${JSON.stringify({run_id:runId,pid:process.pid})}
+`);try{await claim()}catch(error51){if(!isExistingLock(error51))throw error51;if(!await recoverOrphan())throw new Error(`Run V2 is being updated concurrently: ${runId}`);try{await claim()}catch(retryError){if(isExistingLock(retryError))throw new Error(`Run V2 is being updated concurrently: ${runId}`);throw retryError}}try{await append()}finally{await filesystem.removeFile(lockPath)}}var init_run_v2_append_lock=__esm({"../decisions/src/run-v2-append-lock.ts"(){"use strict"}});import{createHash as createHash14,randomUUID}from"node:crypto";async function withUsageAttributionLock(filesystem,lockPath,operation){const deadline=Date.now()+12e4;const ownerNonce=randomUUID();let lastRetryError=null;while(true){if(lastRetryError!==null&&Date.now()>=deadline)throw lastRetryError;try{await filesystem.writeTextExclusive(lockPath,`${JSON.stringify(lock(ownerNonce))}
 `);if(Date.now()>=deadline){await removeIfOwned(filesystem,lockPath,ownerNonce);throw new Error("Usage attribution lock acquisition exceeded deadline")}break}catch(error51){if((!isNodeError5(error51)||error51.code!=="EEXIST")&&!isTransient(error51))throw error51;lastRetryError=error51;if(isNodeError5(error51)&&error51.code==="EEXIST"){const incumbent=await readLockAfterTransientFailure(filesystem,lockPath,deadline);if(incumbent===null){await retry(error51,deadline);continue}if(incumbent.purpose!==PURPOSE)throw new Error("Usage attribution lock has an incompatible purpose");if(!recoverable(incumbent)){await retry(error51,deadline);continue}if(Date.now()>=deadline)throw error51;const recoveryPath=await acquireRecovery(filesystem,lockPath,incumbent.owner_nonce,ownerNonce);if(recoveryPath!==null)try{if(Date.now()>=deadline)throw error51;const current=await readLock(filesystem,lockPath);if(current!==null&&current.owner_nonce===incumbent.owner_nonce&&current.content===incumbent.content&&recoverable(current)){if(Date.now()>=deadline)throw error51;await filesystem.removeFileIfContentMatches(lockPath,current.content)}}finally{await removeRecovery(filesystem,recoveryPath,ownerNonce)}}await retry(error51,deadline)}}try{return await operation()}finally{await removeIfOwned(filesystem,lockPath,ownerNonce)}}function lock(owner_nonce){const now=Date.now();return{schema_version:1,purpose:PURPOSE,pid:process.pid,owner_nonce,acquired_at:new Date(now).toISOString(),lease_expires_at:new Date(now+LEASE_MS).toISOString()}}async function readLock(fs,path){try{const content=await fs.readText(path);const value=JSON.parse(content);if(valid(value))return{...value,content};if(legacy(value))return{schema_version:1,purpose:PURPOSE,pid:value.pid,owner_nonce:`legacy-${createHash14("sha256").update(content).digest("hex")}`,acquired_at:new Date(0).toISOString(),lease_expires_at:new Date(0).toISOString(),legacy:true,content};throw new Error(`Usage attribution lock is malformed: ${path}`)}catch(error51){if(isNodeError5(error51)&&error51.code==="ENOENT")return null;throw error51}}async function readLockAfterTransientFailure(fs,path,deadline){let attempts=0;while(true){try{return await readLock(fs,path)}catch(error51){if(!isTransientReadFailure(error51))throw error51;attempts+=1;if(attempts>=MAX_TRANSIENT_READ_ATTEMPTS||Date.now()>=deadline)throw error51;await retry(error51,deadline);if(Date.now()>=deadline)throw error51}}}function legacy(value){return typeof value==="object"&&value!==null&&value.purpose===PURPOSE&&Number.isSafeInteger(value.pid)&&value.pid>0}function valid(value){if(typeof value!=="object"||value===null)return false;const x=value;return x.schema_version===1&&(x.purpose===PURPOSE||x.purpose===RECOVERY_PURPOSE)&&Number.isSafeInteger(x.pid)&&(x.pid??0)>0&&typeof x.owner_nonce==="string"&&x.owner_nonce.length>=16&&typeof x.acquired_at==="string"&&Number.isFinite(Date.parse(x.acquired_at))&&typeof x.lease_expires_at==="string"&&Number.isFinite(Date.parse(x.lease_expires_at))&&(x.target_nonce===void 0||typeof x.target_nonce==="string")}function recoverable(value){return value!==null&&value.purpose===PURPOSE&&(value.legacy===true||Date.parse(value.lease_expires_at)<=Date.now())&&!alive(value.pid)}function alive(pid){try{process.kill(pid,0);return true}catch(error51){return!(isNodeError5(error51)&&error51.code==="ESRCH")}}async function acquireRecovery(fs,path,target,owner){const recovery=`${path}.recovery-${target}`;try{await fs.writeTextExclusive(recovery,`${JSON.stringify({...lock(owner),purpose:RECOVERY_PURPOSE,target_nonce:target})}
 `);return recovery}catch(error51){if(!isNodeError5(error51)||error51.code!=="EEXIST")throw error51;const existing=await readLock(fs,recovery);if(existing!==null&&existing.purpose===RECOVERY_PURPOSE&&existing.target_nonce===target&&Date.parse(existing.lease_expires_at)<=Date.now()&&!alive(existing.pid)){await removeRecovery(fs,recovery,existing.owner_nonce)}return null}}async function removeIfOwned(fs,path,owner){const current=await readLock(fs,path);if(current?.purpose===PURPOSE&&current.owner_nonce===owner)await fs.removeFileIfContentMatches(path,current.content)}async function removeRecovery(fs,path,owner){const current=await readLock(fs,path);if(current?.purpose===RECOVERY_PURPOSE&&current.owner_nonce===owner)await fs.removeFileIfContentMatches(path,current.content)}async function retry(error51,deadline){if(Date.now()>=deadline)throw error51;await new Promise(resolve25=>setTimeout(resolve25,25))}function isNodeError5(error51){return error51 instanceof Error&&"code"in error51}function isTransient(error51){return isNodeError5(error51)&&(error51.code==="ENOENT"||error51.code==="EBADF")||error51 instanceof WorkspacePathError&&(isNodeError5(error51.cause)&&(error51.cause.code==="ENOENT"||error51.cause.code==="EBADF")||error51.message.startsWith("Physical path escapes workspace root:"))}function isTransientReadFailure(error51){const cause=error51 instanceof WorkspacePathError?error51.cause:error51;return isNodeError5(cause)&&(cause.code==="EBADF"||process.platform==="win32"&&cause.code==="EPERM")}var PURPOSE,RECOVERY_PURPOSE,LEASE_MS,MAX_TRANSIENT_READ_ATTEMPTS;var init_run_v2_usage_attribution_lock=__esm({"../decisions/src/run-v2-usage-attribution-lock.ts"(){"use strict";init_src();PURPOSE="usage-attribution";RECOVERY_PURPOSE="usage-attribution-recovery";LEASE_MS=3e4;MAX_TRANSIENT_READ_ATTEMPTS=3}});import{createHash as createHash15,randomUUID as randomUUID2}from"node:crypto";function isTransientMissingWorkspacePath(error51){return isNodeError6(error51)&&error51.code==="ENOENT"||error51 instanceof WorkspacePathError&&isNodeError6(error51.cause)&&error51.cause.code==="ENOENT"}function isTransientAtomicWorkspacePath(error51){return isTransientMissingWorkspacePath(error51)||isNodeError6(error51)&&error51.code==="EBADF"||error51 instanceof WorkspacePathError&&(isNodeError6(error51.cause)&&error51.cause.code==="EBADF"||error51.message.startsWith("Physical path escapes workspace root:"))}function assertCanonicalBasePath(path){if(path.length===0||path.includes("\\")||path.includes("\0")||path.startsWith("/")||path.startsWith("./")||path.endsWith("/")||/^[A-Za-z]:/.test(path)||path.split("/").some(segment2=>segment2.length===0||segment2==="."||segment2==="..")){throw new Error(`local_only Run basePath must be canonical and explicit: ${path}`)}}function isNodeError6(error51){return error51 instanceof Error&&"code"in error51}async function delay2(milliseconds){await new Promise(resolveDelay=>setTimeout(resolveDelay,milliseconds))}function invocationClaim(identity2,ownerNonce){const now=Date.now();return{schema_version:2,identity:identity2,run_id:null,owner_pid:process.pid,owner_nonce:ownerNonce,claimed_at:new Date(now).toISOString(),lease_expires_at:new Date(now+3e4).toISOString()}}async function readInvocationClaim(filesystem,path,identity2,digest7){let text=null;const maxAttempts=5;for(let attempt=0;attempt<maxAttempts;attempt+=1){try{text=await filesystem.readText(path);break}catch(error51){if(!isTransientAtomicWorkspacePath(error51)||attempt===maxAttempts-1)throw error51;await delay2(5*(attempt+1))}}if(text===null)throw new Error(`Subagent invocation claim disappeared: ${digest7}`);const claim=JSON.parse(text);if(claim.identity!==identity2){throw new Error(`Subagent invocation claim is incompatible: ${digest7}`)}return claim}function claimIsStale(claim){const expiry=Date.parse(claim.lease_expires_at);return!Number.isFinite(expiry)||expiry<=Date.now()}async function acquireRecoveryLease(filesystem,claimPath,staleOwnerNonce,ownerNonce){let recoveryPath=`${claimPath}.recovery-${staleOwnerNonce}.json`;for(let generation=0;generation<8;generation+=1){const lease=invocationClaim(`recovery:${staleOwnerNonce}`,ownerNonce);try{await filesystem.writeTextExclusive(recoveryPath,`${JSON.stringify(lease)}
 `);return recoveryPath}catch(error51){if(!isNodeError6(error51)||error51.code!=="EEXIST")throw error51;let existing;try{existing=JSON.parse(await filesystem.readText(recoveryPath))}catch(readError){if(isTransientMissingWorkspacePath(readError))continue;throw readError}if(!claimIsStale(existing))return null;recoveryPath=`${recoveryPath}.${existing.owner_nonce}.json`}}throw new Error("Subagent invocation recovery lease chain exceeded")}async function commitInvocationClaim(filesystem,claimPath,identity2,digest7,ownerNonce,runId){const claim=await readInvocationClaim(filesystem,claimPath,identity2,digest7);if(claim.owner_nonce!==ownerNonce){if(claim.run_id===runId)return;throw new Error(`Subagent invocation claim ownership changed: ${digest7}`)}await filesystem.writeTextAtomic(claimPath,`${JSON.stringify({...claim,run_id:runId,lease_expires_at:new Date().toISOString()})}
-`)}function processIsAlive(pid){try{process.kill(pid,0);return true}catch(error51){return!(isNodeError6(error51)&&error51.code==="ESRCH")}}var RunV2Repository;var init_run_v2_repository=__esm({"../decisions/src/run-v2-repository.ts"(){"use strict";init_src();init_codex_telemetry_spool();init_developer_identity_cache();init_run_v2_usage_attribution_lock();init_v22();init_codex_telemetry_spool();RunV2Repository=class{constructor(filesystem,storage){this.filesystem=filesystem;this.storage=storage;if(storage.storageMode==="tracked_sanitized"&&storage.layout.version===1){throw new Error("tracked_sanitized Run V2 storage requires a modern WorkspaceLayout")}if(storage.storageMode==="local_only")assertCanonicalBasePath(storage.localBasePath)}filesystem;storage;activeWriters=new Set;async start(input){const clock=input.clock??new SystemClock;const id=input.id??createId("RUN",input.shortName,{clock,...input.collisionCode===void 0?{}:{collisionCode:input.collisionCode},...input.timeZone===void 0?{}:{timeZone:input.timeZone}});const parent=input.parentRunId===void 0||input.parentRunId===null?null:await this.read(input.parentRunId).catch(()=>null);const agentInvocationId=`AINV-${id.slice("RUN-".length)}`;const parentAgentInvocationId=parent===null?input.parentRunId===void 0||input.parentRunId===null?null:`AINV-${input.parentRunId.slice("RUN-".length)}`:parent.run.agent_invocation_id??`AINV-${parent.run.run_id.slice("RUN-".length)}`;const rootAgentInvocationId=parent===null?parentAgentInvocationId??agentInvocationId:parent.run.root_agent_invocation_id??parentAgentInvocationId;const delegationDepth=parentAgentInvocationId===null?0:(parent?.run.delegation_depth??0)+1;const developerIdentity=parent!==null?parent.run.developer_identity:input.developerIdentity??(this.storage.storageMode==="local_only"?null:await requireDeveloperIdentityCache(this.filesystem));const started=runStartedV2Schema.parse({schema_version:2,event_id:eventId(id,1),run_id:id,sequence:1,occurred_at:clock.now().toISOString(),type:"run.started",attribution_status:"attributed",developer_identity:developerIdentity,phase:input.phase,run_role:input.runRole??(input.phase!=="execution"?"intake":input.parentRunId!==void 0&&input.parentRunId!==null?"subagent":"orchestrator"),run_purpose:input.runPurpose??(input.phase!=="execution"?"intake":input.agent==="agent-finalizer"?"finalization":input.agent==="agent-reviewer"?"review":input.agent==="agent-auditor"?"audit":input.parentRunId===void 0||input.parentRunId===null?"orchestration":"execution"),requires_finalizer:input.requiresFinalizer??(input.phase==="execution"&&(input.parentRunId===void 0||input.parentRunId===null)&&input.executionId!==void 0&&input.executionId!==null),execution_kind:input.executionKind,execution_eligibility:[...input.executionEligibility??[]],...input.directExecutionAuthorization===void 0?{}:{direct_execution_authorization:input.directExecutionAuthorization},entrypoint:input.entrypoint,work_type:input.workType,storage_mode:this.storage.storageMode,client:input.client,agent:input.agent,agent_name:input.agentName??null,...input.agentIdentityWarning===void 0?{}:{agent_identity_warning:input.agentIdentityWarning},provider:input.provider,model:input.model,reasoning_effort:input.reasoningEffort??null,client_thread_id:input.clientThreadId??null,client_turn_id:input.clientTurnId??null,conversation_id:input.conversationId,execution_id:input.executionId??null,task_id:input.taskId??null,spec_id:input.specId??null,prd_id:input.prdId??null,change_id:input.changeId??null,parent_run_id:input.parentRunId??null,...input.agentInvocationId===void 0?{}:{agent_invocation_id:input.agentInvocationId,root_agent_invocation_id:input.rootAgentInvocationId,parent_agent_invocation_id:input.parentAgentInvocationId,invocation_kind:input.invocationKind,delegation_depth:input.delegationDepth},continuation_of_run_id:input.continuationOfRunId??null,retry_of_run_id:input.retryOfRunId??null,agent_invocation_id:agentInvocationId,root_agent_invocation_id:rootAgentInvocationId,parent_agent_invocation_id:parentAgentInvocationId,invocation_kind:parentAgentInvocationId===null?"orchestrator":"delegated",delegation_depth:delegationDepth,intake:input.intake??null});const path=this.path(id);if(this.activeWriters.has(id)){throw new Error(`Run V2 already has a writer or persisted stream: ${id}`)}try{await this.filesystem.writeTextExclusive(path,serializeRecord(started))}catch(error51){if(!isNodeError6(error51)||error51.code!=="EEXIST")throw error51;throw new Error(`Run V2 already has a writer or persisted stream: ${id}`)}try{const correlation=codexTelemetryCorrelationFromRun(started);if(correlation!==null){await persistCodexTelemetryCorrelation(this.filesystem,correlation)}}catch(error51){await this.filesystem.removeFile(path);throw error51}this.activeWriters.add(id);return new RunV2Writer(this.filesystem,path,started,clock,()=>{this.activeWriters.delete(id)})}async read(id){const path=await this.readPath(id);if(path===null)throw new Error(`Run V2 not found: ${id}`);return foldRunV2Records(parseRunV2JsonLines(await this.filesystem.readText(path)))}async list(){const paths=await this.filesystem.listFiles(this.basePath(),".jsonl");const entries=await Promise.all(paths.map(async path=>{const run=foldRunV2Records(parseRunV2JsonLines(await this.filesystem.readText(path)));if(!this.candidatePaths(run.run.run_id).includes(path)){throw new Error(`Run V2 id does not match storage path: ${path}`)}return{path,run}}));const byId2=new Map;for(const entry2 of entries){const existing=byId2.get(entry2.run.run.run_id);if(existing===void 0){byId2.set(entry2.run.run.run_id,entry2);continue}if(JSON.stringify(existing.run.records)!==JSON.stringify(entry2.run.records)){throw new Error(`Run V2 has divergent monthly and legacy streams: ${entry2.run.run.run_id}`)}if(entry2.path===this.path(entry2.run.run.run_id)){byId2.set(entry2.run.run.run_id,entry2)}}const runs=[...byId2.values()].map(entry2=>entry2.run);return runs.sort((left,right)=>right.run.occurred_at.localeCompare(left.run.occurred_at)||right.run.run_id.localeCompare(left.run.run_id))}async appendRecord(record3){const validated=runV2RecordSchema.parse(record3);const path=this.path(validated.run_id);const lockPath=`${path}.lock`;try{await this.filesystem.writeTextExclusive(lockPath,`${JSON.stringify({run_id:validated.run_id,pid:process.pid})}
-`)}catch(error51){if(isNodeError6(error51)&&error51.code==="EEXIST"){if(!await this.recoverOrphanedAppendLock(lockPath,validated.run_id))throw new Error(`Run V2 is being updated concurrently: ${validated.run_id}`);try{await this.filesystem.writeTextExclusive(lockPath,`${JSON.stringify({run_id:validated.run_id,pid:process.pid})}
-`)}catch(retryError){if(isNodeError6(retryError)&&retryError.code==="EEXIST")throw new Error(`Run V2 is being updated concurrently: ${validated.run_id}`);throw retryError}}else throw error51}try{const persistedPath=await this.readPath(validated.run_id);if(persistedPath!==path){throw new Error(`Run V2 ${validated.run_id} is stored in a legacy daily path; migrate it before append`)}const current=await this.read(validated.run_id);const expectedSequence=current.records.length+1;if(validated.sequence!==expectedSequence){throw new Error(`Run V2 compare-and-append failed: expected sequence ${expectedSequence}, received ${validated.sequence}`)}foldRunV2Records([...current.records,validated]);await this.filesystem.appendText(path,serializeRecord(validated))}finally{await this.filesystem.removeFile(lockPath)}}async withUsageAttributionLock(operation){return withUsageAttributionLock(this.filesystem,`${this.basePath()}/.usage-attribution.lock`,operation)}async recoverOrphanedAppendLock(lockPath,runId){let content;try{content=await this.filesystem.readText(lockPath)}catch{return false}let owner;try{owner=JSON.parse(content)}catch{return false}if(owner.run_id!==runId||typeof owner.pid!=="number"||!Number.isSafeInteger(owner.pid)||owner.pid<=0)return false;if(processIsAlive(owner.pid))return false;try{if(await this.filesystem.readText(lockPath)!==content)return false;await this.filesystem.removeFile(lockPath);return true}catch{return false}}async withSubagentInvocationClaim(identity2,resolveExisting,create,findExisting){const digest7=createHash15("sha256").update(identity2).digest("hex");const claimPath=this.subagentInvocationClaimPath(digest7);await this.migrateLegacySubagentInvocationClaim(claimPath,digest7,identity2);const ownerNonce=randomUUID2();const pending=invocationClaim(identity2,ownerNonce);let ownsClaim=false;try{await this.filesystem.writeTextExclusive(claimPath,`${JSON.stringify(pending)}
+`)}function processIsAlive(pid){try{process.kill(pid,0);return true}catch(error51){return!(isNodeError6(error51)&&error51.code==="ESRCH")}}var RunV2Repository;var init_run_v2_repository=__esm({"../decisions/src/run-v2-repository.ts"(){"use strict";init_src();init_codex_telemetry_spool();init_developer_identity_cache();init_run_v2_append_lock();init_run_v2_usage_attribution_lock();init_v22();init_codex_telemetry_spool();RunV2Repository=class{constructor(filesystem,storage){this.filesystem=filesystem;this.storage=storage;if(storage.storageMode==="tracked_sanitized"&&storage.layout.version===1){throw new Error("tracked_sanitized Run V2 storage requires a modern WorkspaceLayout")}if(storage.storageMode==="local_only")assertCanonicalBasePath(storage.localBasePath)}filesystem;storage;activeWriters=new Set;async start(input){const clock=input.clock??new SystemClock;const id=input.id??createId("RUN",input.shortName,{clock,...input.collisionCode===void 0?{}:{collisionCode:input.collisionCode},...input.timeZone===void 0?{}:{timeZone:input.timeZone}});const parent=input.parentRunId===void 0||input.parentRunId===null?null:await this.read(input.parentRunId).catch(()=>null);const agentInvocationId=`AINV-${id.slice("RUN-".length)}`;const parentAgentInvocationId=parent===null?input.parentRunId===void 0||input.parentRunId===null?null:`AINV-${input.parentRunId.slice("RUN-".length)}`:parent.run.agent_invocation_id??`AINV-${parent.run.run_id.slice("RUN-".length)}`;const rootAgentInvocationId=parent===null?parentAgentInvocationId??agentInvocationId:parent.run.root_agent_invocation_id??parentAgentInvocationId;const delegationDepth=parentAgentInvocationId===null?0:(parent?.run.delegation_depth??0)+1;const developerIdentity=parent!==null?parent.run.developer_identity:input.developerIdentity??(this.storage.storageMode==="local_only"?null:await requireDeveloperIdentityCache(this.filesystem));const started=runStartedV2Schema.parse({schema_version:2,event_id:eventId(id,1),run_id:id,sequence:1,occurred_at:clock.now().toISOString(),type:"run.started",attribution_status:"attributed",developer_identity:developerIdentity,phase:input.phase,run_role:input.runRole??(input.phase!=="execution"?"intake":input.parentRunId!==void 0&&input.parentRunId!==null?"subagent":"orchestrator"),run_purpose:input.runPurpose??(input.phase!=="execution"?"intake":input.agent==="agent-finalizer"?"finalization":input.agent==="agent-reviewer"?"review":input.agent==="agent-auditor"?"audit":input.parentRunId===void 0||input.parentRunId===null?"orchestration":"execution"),requires_finalizer:input.requiresFinalizer??(input.phase==="execution"&&(input.parentRunId===void 0||input.parentRunId===null)&&input.executionId!==void 0&&input.executionId!==null),execution_kind:input.executionKind,execution_eligibility:[...input.executionEligibility??[]],...input.directExecutionAuthorization===void 0?{}:{direct_execution_authorization:input.directExecutionAuthorization},entrypoint:input.entrypoint,work_type:input.workType,storage_mode:this.storage.storageMode,client:input.client,agent:input.agent,agent_name:input.agentName??null,...input.agentIdentityWarning===void 0?{}:{agent_identity_warning:input.agentIdentityWarning},provider:input.provider,model:input.model,reasoning_effort:input.reasoningEffort??null,client_thread_id:input.clientThreadId??null,client_turn_id:input.clientTurnId??null,conversation_id:input.conversationId,execution_id:input.executionId??null,task_id:input.taskId??null,spec_id:input.specId??null,prd_id:input.prdId??null,change_id:input.changeId??null,parent_run_id:input.parentRunId??null,...input.agentInvocationId===void 0?{}:{agent_invocation_id:input.agentInvocationId,root_agent_invocation_id:input.rootAgentInvocationId,parent_agent_invocation_id:input.parentAgentInvocationId,invocation_kind:input.invocationKind,delegation_depth:input.delegationDepth},continuation_of_run_id:input.continuationOfRunId??null,retry_of_run_id:input.retryOfRunId??null,agent_invocation_id:agentInvocationId,root_agent_invocation_id:rootAgentInvocationId,parent_agent_invocation_id:parentAgentInvocationId,invocation_kind:parentAgentInvocationId===null?"orchestrator":"delegated",delegation_depth:delegationDepth,intake:input.intake??null});const path=this.path(id);if(this.activeWriters.has(id)){throw new Error(`Run V2 already has a writer or persisted stream: ${id}`)}try{await this.filesystem.writeTextExclusive(path,serializeRecord(started))}catch(error51){if(!isNodeError6(error51)||error51.code!=="EEXIST")throw error51;throw new Error(`Run V2 already has a writer or persisted stream: ${id}`)}try{const correlation=codexTelemetryCorrelationFromRun(started);if(correlation!==null){await persistCodexTelemetryCorrelation(this.filesystem,correlation)}}catch(error51){await this.filesystem.removeFile(path);throw error51}this.activeWriters.add(id);return new RunV2Writer(this.filesystem,path,started,clock,()=>{this.activeWriters.delete(id)})}async read(id){const path=await this.readPath(id);if(path===null)throw new Error(`Run V2 not found: ${id}`);return foldRunV2Records(parseRunV2JsonLines(await this.filesystem.readText(path)))}async list(){const paths=await this.filesystem.listFiles(this.basePath(),".jsonl");const entries=await Promise.all(paths.map(async path=>{const run=foldRunV2Records(parseRunV2JsonLines(await this.filesystem.readText(path)));if(!this.candidatePaths(run.run.run_id).includes(path)){throw new Error(`Run V2 id does not match storage path: ${path}`)}return{path,run}}));const byId2=new Map;for(const entry2 of entries){const existing=byId2.get(entry2.run.run.run_id);if(existing===void 0){byId2.set(entry2.run.run.run_id,entry2);continue}if(JSON.stringify(existing.run.records)!==JSON.stringify(entry2.run.records)){throw new Error(`Run V2 has divergent monthly and legacy streams: ${entry2.run.run.run_id}`)}if(entry2.path===this.path(entry2.run.run.run_id)){byId2.set(entry2.run.run.run_id,entry2)}}const runs=[...byId2.values()].map(entry2=>entry2.run);return runs.sort((left,right)=>right.run.occurred_at.localeCompare(left.run.occurred_at)||right.run.run_id.localeCompare(left.run.run_id))}async appendRecord(record3){await this.appendRecords([record3])}async appendRecords(records){const validated=records.map(record3=>runV2RecordSchema.parse(record3));const[first]=validated;if(first===void 0)return;const runId=first.run_id;if(validated.some(record3=>record3.run_id!==runId))throw new Error("Run V2 batch must contain one Run id");const path=this.path(runId);await withRunAppendLock(this.filesystem,path,runId,()=>this.recoverOrphanedAppendLock(`${path}.lock`,runId),async()=>{const persistedPath=await this.readPath(runId);if(persistedPath!==path){throw new Error(`Run V2 ${runId} is stored in a legacy daily path; migrate it before append`)}const current=await this.read(runId);const expectedSequence=current.records.length+1;for(const[index,record3]of validated.entries())if(record3.sequence!==expectedSequence+index)throw new Error(`Run V2 compare-and-append failed: expected sequence ${expectedSequence+index}, received ${record3.sequence}`);foldRunV2Records([...current.records,...validated]);await this.filesystem.appendText(path,validated.map(serializeRecord).join(""))})}async withUsageAttributionLock(operation){return withUsageAttributionLock(this.filesystem,`${this.basePath()}/.usage-attribution.lock`,operation)}async recoverOrphanedAppendLock(lockPath,runId){let content;try{content=await this.filesystem.readText(lockPath)}catch{return false}let owner;try{owner=JSON.parse(content)}catch{return false}if(owner.run_id!==runId||typeof owner.pid!=="number"||!Number.isSafeInteger(owner.pid)||owner.pid<=0)return false;if(processIsAlive(owner.pid))return false;try{if(await this.filesystem.readText(lockPath)!==content)return false;await this.filesystem.removeFile(lockPath);return true}catch{return false}}async withSubagentInvocationClaim(identity2,resolveExisting,create,findExisting){const digest7=createHash15("sha256").update(identity2).digest("hex");const claimPath=this.subagentInvocationClaimPath(digest7);await this.migrateLegacySubagentInvocationClaim(claimPath,digest7,identity2);const ownerNonce=randomUUID2();const pending=invocationClaim(identity2,ownerNonce);let ownsClaim=false;try{await this.filesystem.writeTextExclusive(claimPath,`${JSON.stringify(pending)}
 `);ownsClaim=true}catch(error51){if(!isNodeError6(error51)||error51.code!=="EEXIST")throw error51}const deadline=Date.now()+5e3;while(!ownsClaim){const claim=await readInvocationClaim(this.filesystem,claimPath,identity2,digest7);if(typeof claim.run_id==="string")return resolveExisting(claim.run_id);if(!claimIsStale(claim)){if(Date.now()>=deadline){throw new Error(`Subagent invocation claim remained pending: ${digest7}`)}await delay2(25);continue}const recoveryPath=await acquireRecoveryLease(this.filesystem,claimPath,claim.owner_nonce,ownerNonce);if(recoveryPath===null){if(Date.now()>=deadline){throw new Error(`Subagent invocation claim recovery timed out: ${digest7}`)}await delay2(25);continue}try{const current=await readInvocationClaim(this.filesystem,claimPath,identity2,digest7);if(typeof current.run_id==="string")return resolveExisting(current.run_id);if(!claimIsStale(current))continue;await this.filesystem.writeTextAtomic(claimPath,`${JSON.stringify(pending)}
 `);ownsClaim=true}finally{await this.filesystem.removeFile(recoveryPath)}}try{const adopted=await findExisting?.();if(adopted!==void 0&&adopted!==null){await commitInvocationClaim(this.filesystem,claimPath,identity2,digest7,ownerNonce,adopted.runId);return adopted.value}const created=await create();await commitInvocationClaim(this.filesystem,claimPath,identity2,digest7,ownerNonce,created.runId);return created.value}catch(error51){const claim=await readInvocationClaim(this.filesystem,claimPath,identity2,digest7);if(claim.owner_nonce===ownerNonce&&claim.run_id===null){await this.filesystem.removeFile(claimPath)}throw error51}}path(id){if(this.storage.storageMode==="tracked_sanitized"){return this.storage.layout.activePath("run",id)}const{year,month}=datedIdParts(id);return`${this.storage.localBasePath}/${year}/${month}/${id}.jsonl`}candidatePaths(id){if(this.storage.storageMode==="tracked_sanitized"){return[this.path(id),...this.storage.layout.legacyReadCandidates("run",id).map(candidate=>candidate.path)]}const{year,month,day}=datedIdPartsWithDay(id);return[this.path(id),`${this.storage.localBasePath}/${year}/${month}/${day}/${id}.jsonl`]}async readPath(id){if(this.storage.storageMode==="tracked_sanitized"){return resolveArtifactReadPath(this.filesystem,this.storage.layout,"run",id)}for(const path of this.candidatePaths(id)){if(await this.filesystem.exists(path))return path}return null}basePath(){return this.storage.storageMode==="tracked_sanitized"?this.storage.layout.entityRoot("run"):this.storage.localBasePath}subagentInvocationClaimPath(digest7){return this.storage.storageMode==="tracked_sanitized"?lifecycleClaimPath("subagent-invocation",digest7):`${this.basePath()}/.claims/subagent-invocation/${digest7}.json`}async migrateLegacySubagentInvocationClaim(claimPath,digest7,identity2){const legacyPath=`${this.basePath()}/.subagent-invocation-claims/${digest7}.json`;if(!await this.filesystem.exists(legacyPath))return;const legacy2=await readInvocationClaim(this.filesystem,legacyPath,identity2,digest7);try{await this.filesystem.writeTextExclusive(claimPath,`${JSON.stringify(legacy2)}
 `)}catch(error51){if(!isNodeError6(error51)||error51.code!=="EEXIST")throw error51}}}}});function deduplicateSourceSegments(records){const collected=new Map;const effective=[];for(const record3 of records){if(record3.source_segment_key===null){effective.push(record3);continue}const existing=collected.get(record3.source_segment_key);if(existing===void 0){collected.set(record3.source_segment_key,record3);effective.push(record3);continue}if(!sameCollectedUsage(record3,existing)){throw new Error(`Divergent duplicate source segment: ${record3.source_segment_key}`)}}return effective}function sameCollectedUsage(left,right){return JSON.stringify(usageIdentity(left))===JSON.stringify(usageIdentity(right))}function usageIdentity(record3){return{phase:record3.phase,activity_kind:record3.activity_kind,classification_source:record3.classification_source,tokens:record3.tokens,cost:record3.cost,provider:record3.provider,model:record3.model,source_segment_key:record3.source_segment_key,model_call_id:record3.model_call_id??null}}var init_run_v2_usage_deduplication=__esm({"../decisions/src/run-v2-usage-deduplication.ts"(){"use strict"}});function parseRunV2JsonLines2(content,expandDeltaRecord2){const records=[];let runId=null;for(const line of content.split(/\r?\n/).map(item=>item.trim()).filter(Boolean)){const raw=JSON.parse(line);const record3=runV2RecordSchema.parse(Array.isArray(raw)?expandDeltaRecord2(raw,runId):raw);runId??=record3.run_id;records.push(record3)}return records}var init_run_v2_json_lines=__esm({"../decisions/src/source-size-decisions/run-v2-json-lines.ts"(){"use strict";init_run_v2_types()}});function assertRunModelSelection(started,records,input){if(started.model!=="unknown"&&input.requested.model!==started.model){throw new Error(`Agent Run model is immutable: expected ${started.model}, received ${input.requested.model}`)}if(started.reasoning_effort!=null&&input.requested.reasoning_effort!==started.reasoning_effort){throw new Error(`Agent Run reasoning effort is immutable: expected ${started.reasoning_effort}, received ${input.requested.reasoning_effort}`)}const first=records.find(record3=>record3.type==="model.selection.recorded");if(first===void 0)return;if(JSON.stringify(first.requested)!==JSON.stringify(input.requested)){throw new Error(`Agent Run calls must inherit one model configuration: ${started.run_id}`)}if(JSON.stringify(first.selection)!==JSON.stringify(input.selection)){throw new Error(`Agent Run calls must inherit one selection decision: ${started.run_id}`)}}var init_run_v2_model_selection=__esm({"../decisions/src/source-size-decisions/run-v2-model-selection.ts"(){"use strict"}});function eventId(runId,sequence){return`${runId}:${String(sequence).padStart(6,"0")}`}function serializeRecord(record3){assertSafeRecordContent(record3);if(record3.type==="run.started")return`${JSON.stringify(record3)}
@@ -2786,7 +2785,7 @@ A preencher.`}var timestamp9,taskSchema2,TaskRepository;var init_src7=__esm({"..
 `);await collectSubsumedChunks(filesystem,base,chunkPath,values)}async function collectSubsumedChunks(filesystem,base,activeChunkPath,activeSummaries){const activeHashes=new Map(activeSummaries.map(summary=>[summary.agent_invocation_id,summary.summary_hash]));const chunkPaths=await filesystem.listFiles(`${base}/chunks`,".jsonl");for(const chunkPath of chunkPaths){if(chunkPath===activeChunkPath)continue;const content=await filesystem.readText(chunkPath);try{const filenameDigest=chunkPath.slice(chunkPath.lastIndexOf("/")+1,-".jsonl".length);if(!/^[a-f0-9]{64}$/.test(filenameDigest)||digest4(content)!==filenameDigest){continue}const summaries=content.split(/\r?\n/).filter(Boolean).map(line=>JSON.parse(line));if(summaries.length===0||!summaries.every(summary=>isCanonicalInvocationSummary(summary)&&activeHashes.get(summary.agent_invocation_id)===summary.summary_hash)){continue}}catch{continue}await filesystem.removeFile(chunkPath)}}async function withWorkspaceCompactionLock(filesystem,operation){const deadline=Date.now()+COMPACTION_LOCK_TIMEOUT_MS;const ownerNonce=randomUUID7();const path=`${COMPACTION_LOCK_ROOT}/${ownerNonce}.json`;const owner=compactionLock(ownerNonce,path);let participantText=`${JSON.stringify({...owner,choosing:true,ticket:0})}
 `;await filesystem.writeTextExclusive(path,participantText);try{const participants=await bakeryParticipants(filesystem);const ticket=Math.max(0,...participants.map(entry2=>entry2.ticket))+1;participantText=`${JSON.stringify({...owner,choosing:false,ticket})}
 `;await filesystem.writeTextAtomic(path,participantText);while(true){const others=await bakeryParticipants(filesystem);const blocked2=others.some(entry2=>entry2.owner_nonce!==owner.owner_nonce&&(entry2.choosing||entry2.ticket>0&&(entry2.ticket<ticket||entry2.ticket===ticket&&entry2.owner_nonce<owner.owner_nonce)));if(!blocked2)break;if(Date.now()>=deadline)throw new Error(`Telemetry compaction bakery lock remained held: ${COMPACTION_LOCK_ROOT}. Verify participant files before manual removal.`);await delay5(COMPACTION_LOCK_WAIT_MS)}return await operation()}finally{await releaseCompactionParticipant(filesystem,path,participantText)}}async function bakeryParticipants(filesystem){const paths=await filesystem.listFiles(COMPACTION_LOCK_ROOT,".json");const values=[];for(const path of paths){const text=await readCompactionParticipant(filesystem,path);if(text===null)continue;try{const value=JSON.parse(text);if(!isCompactionParticipant(value,path)){values.push(invalidParticipant(path));continue}if(!compactionParticipantIsAlive(value.pid)){const removed=await filesystem.removeFileIfContentMatches(path,text);if(!removed){const replacement=await readCompactionParticipant(filesystem,path);if(replacement===null)continue;try{const replacementValue=JSON.parse(replacement);values.push(isCompactionParticipant(replacementValue,path)?replacementValue:invalidParticipant(path))}catch{values.push(invalidParticipant(path))}}continue}values.push(value)}catch{values.push(invalidParticipant(path))}}return values}function compactionParticipantIsAlive(pid){try{process.kill(pid,0);return true}catch(error51){return!(isNodeError9(error51)&&error51.code==="ESRCH")}}async function readCompactionParticipant(filesystem,path){for(let attempt=0;attempt<2;attempt+=1){try{return await filesystem.readText(path)}catch(error51){if(isNodeError9(error51)&&error51.code==="ENOENT")return null;if(isConcurrentParticipantRemoval(error51))return null;if(isNodeError9(error51)&&(error51.code==="EPERM"||error51.code==="EBADF")&&attempt===0){await delay5(COMPACTION_LOCK_WAIT_MS);if(!await filesystem.exists(path))return null;continue}throw error51}}return null}function isConcurrentParticipantRemoval(error51){return error51 instanceof WorkspacePathError&&isNodeError9(error51.cause)&&error51.cause.code==="ENOENT"}function isCompactionParticipant(value,path){if(typeof value!=="object"||value===null)return false;const participant=value;return participant.schema_version===1&&participant.purpose==="telemetry-compaction"&&Number.isSafeInteger(participant.pid)&&participant.pid>=1&&typeof participant.owner_nonce==="string"&&participant.owner_nonce.length>0&&participant.path===path&&participant.path===`${COMPACTION_LOCK_ROOT}/${participant.owner_nonce}.json`&&typeof participant.acquired_at==="string"&&!Number.isNaN(Date.parse(participant.acquired_at))&&typeof participant.choosing==="boolean"&&Number.isSafeInteger(participant.ticket)&&participant.ticket>=0}function invalidParticipant(path){return{...compactionLock(`invalid-${path}`,path),choosing:true,ticket:1}}async function releaseCompactionParticipant(filesystem,path,expected){try{if(await filesystem.readText(path)!==expected)return}catch(error51){if(isNodeError9(error51)&&error51.code==="ENOENT")return;throw error51}await filesystem.removeFile(path)}function compactionLock(owner_nonce,path){return{schema_version:1,purpose:"telemetry-compaction",pid:process.pid,owner_nonce,path,acquired_at:new Date().toISOString()}}function unique(values){return[...new Set(values)].sort()}function digest4(value){return createHash37("sha256").update(value).digest("hex")}async function delay5(milliseconds){await new Promise(resolveDelay=>setTimeout(resolveDelay,milliseconds))}var workspaceCompactionQueues,COMPACTION_LOCK_ROOT,COMPACTION_LOCK_WAIT_MS,COMPACTION_LOCK_TIMEOUT_MS;var init_codex_telemetry_compaction=__esm({"src/codex-telemetry-compaction.ts"(){"use strict";init_src();init_src4();init_src5();init_codex_telemetry_writer_id();workspaceCompactionQueues=new Map;COMPACTION_LOCK_ROOT=".local/telemetry-compaction-locks";COMPACTION_LOCK_WAIT_MS=25;COMPACTION_LOCK_TIMEOUT_MS=12e4}});function isCodexTelemetryClient(client){return["codex","codex-desktop","codex-subagent"].includes(client)}function telemetrySourceThreadId(current,allRuns){const runsById=new Map(allRuns.map(fold=>[fold.run.run_id,fold]));let run=current.run;const visited=new Set;while(run.parent_run_id!==null&&!visited.has(run.run_id)){visited.add(run.run_id);const parent=runsById.get(run.parent_run_id);if(parent===void 0)break;run=parent.run}return run.client_thread_id??current.run.client_thread_id??null}function telemetrySource(current,allRuns){const rootThreadId=telemetrySourceThreadId(current,allRuns);if(current.run.client==="codex-subagent"){const identity2=current.run.client_thread_id??null;const nativeThread=identity2!==null&&/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(identity2);return{agentPath:nativeThread?null:identity2,parentThreadId:null,threadId:nativeThread?identity2:null,turnId:current.run.client_turn_id??null}}return{agentPath:null,parentThreadId:null,threadId:rootThreadId,turnId:current.run.client_turn_id??null}}var init_codex_telemetry_source=__esm({"src/codex-telemetry-source.ts"(){"use strict"}});import{createHash as createHash38}from"node:crypto";async function recordUnavailableCodexTelemetryToSpool(current,filesystem,status,capturedAt=new Date().toISOString()){if(!isCodexTelemetryClient(current.run.client))return null;const correlation=codexTelemetryCorrelationFromRun(current.run);if(correlation===null)return null;return appendCodexTelemetrySpoolEvent(filesystem,{correlation,event_kind:"terminal",source:"unavailable",source_event_key:`run:${current.run.run_id}:terminal:unavailable`,source_occurred_at:null,captured_at:capturedAt,coverage:"unavailable",tokens:{input:null,cached_input:null,cache_write_input:null,output:null,reasoning:null,total:null,source:"unavailable"},provider:null,model:null,runtime:{reasoning_effort:null,service_tier:null},status,latency_ms:null,context_stats:null,discarded_counts:{prompt:0,response_text:0,reasoning:0,secrets:0}})}function sumObservedUsage(values){const observed=values.filter(value=>value!==null);const sum=component=>{let total=0;for(const usage of observed){const value=usage[component];if(value===null||value===void 0)return null;total+=value}return total};return{input:sum("input"),cached_input:sum("cached_input"),cache_write_input:sum("cache_write_input"),output:sum("output"),reasoning:sum("reasoning"),total:sum("total"),source:"provider_reported"}}function commonObservedValue(values){const observed=[...new Set(values.filter(value=>value!==null))];return observed.length===1?observed[0]??null:null}function latestSourceTimestamp(events){return events.map(event=>event.event.source_occurred_at).filter(value=>value!==null).sort().at(-1)??null}function modelCallId(sourceCallKey){return`MCALL-${digest5(sourceCallKey)}`}function providerInvocationId(sourceCallKey){return`INV-CODEX-${digest5(sourceCallKey)}`}function elapsedMilliseconds(startedAt,finishedAt){const started=Date.parse(startedAt??"");const finished=Date.parse(finishedAt??"");return Number.isFinite(started)&&Number.isFinite(finished)?Math.max(0,finished-started):null}function hasObservedUsage(current){return current.effective_usage_records.some(record3=>record3.tokens.source!=="unavailable")}function unavailableUsageEventId(current){return current.effective_usage_records.findLast(record3=>record3.tokens.source==="unavailable")?.event_id??null}function observedUsageDelta(cumulative,previous){const previousTotal=component=>{let total=0;for(const usage of previous){const value=usage[component];if(value===null||value===void 0)return null;total+=value}return total};const delta=component=>{const observed=cumulative[component];if(observed===null||observed===void 0)return null;const attributed=previousTotal(component);return attributed===null?null:Math.max(0,observed-attributed)};return{input:delta("input"),cached_input:delta("cached_input"),cache_write_input:delta("cache_write_input"),output:delta("output"),reasoning:delta("reasoning"),total:delta("total"),source:cumulative.source}}function latestPhase(current){const latest=current.records.findLast(record3=>"phase"in record3);return latest?.phase??"conversation"}function digest5(sourceCallKey){return createHash38("sha256").update(sourceCallKey).digest("hex").slice(0,32)}var init_codex_telemetry_runtime=__esm({"src/codex-telemetry-runtime.ts"(){"use strict";init_src5();init_codex_telemetry_source()}});function shouldAppendFallbackModelCall(records,sourceCallKey){const callId=modelCallId(sourceCallKey);return!records.some(record3=>record3.source_call_key===sourceCallKey||record3.call_id===callId)}async function collectAvailableNativeUsage(current,composition,filesystem,recordNative){return withPreparedCodexTelemetry(filesystem,async(snapshot,compact)=>{const recorded=await collectNativeUsageFromSnapshot(current,composition,snapshot,recordNative);if(recorded!==null)await compact();return recorded})}async function collectNativeUsageFromSnapshot(current,composition,snapshot,recordNative){const events=snapshot.filter(event=>event.event.source==="codex_app_server"&&event.event.correlation.run_id===current.run.run_id);return events.some(event=>["response_completed","usage_updated","error","turn_completed"].includes(event.event.stream_boundary??""))?recordNative(current,composition,events):null}async function exactTelemetrySource(current,composition){const ancestors=[current];if(current.run.client!=="codex-subagent"){const visited=new Set([current.run.run_id]);let parentId=current.run.parent_run_id;while(parentId!==null&&!visited.has(parentId)){visited.add(parentId);let parent;try{parent=await composition.runs.read(parentId)}catch(error51){if(error51 instanceof Error&&error51.message.startsWith("Run V2 not found:"))break;throw error51}ancestors.push(parent);parentId=parent.run.parent_run_id}}return telemetrySource(current,ancestors)}function rootCorrelationCandidates(correlations,threadId){const roots2=correlations.filter(item=>item.client!=="codex-subagent");const exact=roots2.filter(item=>item.thread_id===threadId);return exact.length>0?exact:roots2.filter(item=>item.thread_id===null)}function parseCodexAppServerNotificationStream(content){const normalized=content.trim();if(normalized.length===0)return[];if(normalized.startsWith("[")){const parsed=JSON.parse(normalized);if(!Array.isArray(parsed))throw new Error("Codex app-server event stream must be an array");return parsed}return normalized.split(/\r?\n/).map(line=>line.trim()).filter(Boolean).map(line=>JSON.parse(line))}var init_codex_telemetry_preparation=__esm({"src/codex-telemetry-preparation.ts"(){"use strict";init_codex_telemetry_compaction();init_codex_telemetry_runtime();init_codex_telemetry_source()}});import{createHash as createHash39}from"node:crypto";async function ingestCodexAppServerNotifications(filesystem,notifications,capturedAt=new Date().toISOString()){const persisted=[];for(const notification of notifications){const event=await ingestCodexAppServerNotification(filesystem,notification,capturedAt);if(event!==null)persisted.push(event)}await compactPendingCodexTelemetry(filesystem);return persisted}async function ingestCodexAppServerNotification(filesystem,notification,capturedAt=new Date().toISOString()){const sanitized=sanitizeAppServerNotification(notification,capturedAt);if(sanitized===null)return null;const correlations=await listCodexTelemetryCorrelations(filesystem);const sameTurn=correlations.filter(item=>item.turn_id===sanitized.turnId);const candidates=sanitized.agentPath===null?rootCorrelationCandidates(sameTurn,sanitized.threadId):sameTurn.filter(item=>item.client==="codex-subagent"&&item.agent_path===sanitized.agentPath);if(candidates.length>1){throw new Error(`Ambiguous Codex app-server correlation for turn ${sanitized.turnId}`)}if(candidates[0]===void 0){await quarantineCodexAppServerNotification(filesystem,sanitized);return null}return appendCodexTelemetrySpoolEvent(filesystem,{correlation:candidates[0],...sanitized.event})}async function quarantineCodexAppServerNotification(filesystem,input){const digest7=hostDigest(input.event.source_event_key);const unsigned={schema_version:1,event_id:`QEVT-${digest7}`,thread_id:input.threadId,turn_id:input.turnId,agent_path:input.agentPath,event:input.event};const serialized=`${JSON.stringify({...unsigned,checksum_sha256:hostDigest(JSON.stringify(unsigned))})}
-`;if(Buffer.byteLength(serialized,"utf8")>64*1024)throw new Error("Unmatched Codex telemetry envelope exceeds the 64 KiB sanitized limit");try{await filesystem.writeTextAtomicExclusive(`.local/codex-telemetry-spool/v1/unmatched/${digest7.slice(0,2)}/${digest7}.json`,serialized)}catch(error51){if(!(error51 instanceof Error&&"code"in error51&&error51.code==="EEXIST"))throw error51}}function sanitizeAppServerNotification(input,capturedAt){const notification=hostObject(input,"Codex app-server notification");const method=String(notification.method);if(!["item/completed","rawResponse/completed","thread/tokenUsage/updated","error","turn/completed"].includes(method))return null;const params=hostObject(notification.params,`${method} params`);const threadId=hostString(params.threadId,`${method} threadId`);const rawAgentPath=params.agentPath??params.agent_path;const agentPath=rawAgentPath===void 0?null:hostString(rawAgentPath,`${method} agentPath`);const occurredAt=hostTimestamp(notification.emittedAtMs);const wrap=(turnId2,event)=>({threadId,turnId:turnId2,agentPath,event:{source:"codex_app_server",source_occurred_at:occurredAt,captured_at:capturedAt,coverage:"complete",provider:null,model:null,runtime:{reasoning_effort:null,service_tier:null},latency_ms:null,context_stats:null,...event}});if(method==="item/completed"){const turnId2=hostString(params.turnId,`${method} turnId`);const item=hostObject(params.item,`${method} item`);return wrap(turnId2,{event_kind:"response",source_method:method,stream_boundary:"item_completed",source_event_key:hostSourceKey(`${threadId}:${turnId2}:item:${hostString(item.id,`${method} item id`)}`,"item"),source_occurred_at:hostTimestamp(params.completedAtMs)??occurredAt,tokens:null,status:null,discarded_counts:discardedItem(String(item.type??""),item)})}if(method==="rawResponse/completed"){const turnId2=hostString(params.turnId,`${method} turnId`);return wrap(turnId2,{event_kind:"response",source_method:method,stream_boundary:"response_completed",source_event_key:hostSourceKey(`${threadId}:${turnId2}:raw-response:${hostString(params.responseId,`${method} responseId`)}`,"response"),tokens:params.usage===null?null:hostTokens(params.usage,method),status:null,discarded_counts:{...emptyDiscarded(),response_text:Number(typeof params.output==="string")}})}if(method==="thread/tokenUsage/updated"){const turnId2=hostString(params.turnId,`${method} turnId`);const tokens2=hostTokens(hostObject(params.tokenUsage,`${method} tokenUsage`).total,method);const suffix=notification.emittedAtMs===void 0?hostDigest(JSON.stringify(tokens2)).slice(0,24):String(notification.emittedAtMs);return wrap(turnId2,{event_kind:"usage",source_method:method,stream_boundary:"usage_updated",source_event_key:hostSourceKey(`${threadId}:${turnId2}:token-usage:${suffix}`,"usage"),tokens:tokens2,status:null,discarded_counts:emptyDiscarded()})}if(method==="error"){const turnId2=hostString(params.turnId,`${method} turnId`);const error52=isHostObject(params.error)?params.error:{};const suffix=notification.emittedAtMs===void 0?hostDigest(JSON.stringify([params.willRetry===true,error52.codexErrorInfo??null])).slice(0,24):String(notification.emittedAtMs);return wrap(turnId2,{event_kind:"error",source_method:method,stream_boundary:"error",source_event_key:hostSourceKey(`${threadId}:${turnId2}:error:${suffix}`,"error"),tokens:null,status:params.willRetry===true?null:"failed",will_retry:params.willRetry===true,discarded_counts:{...emptyDiscarded(),secrets:Number(typeof error52.message==="string")+Number(typeof error52.additionalDetails==="string")}})}const turn=hostObject(params.turn,"turn/completed turn");const turnId=hostString(turn.id,"turn/completed turn id");if(!["completed","failed","interrupted"].includes(String(turn.status)))throw new Error(`turn/completed has non-terminal status: ${String(turn.status)}`);const discarded=(Array.isArray(turn.items)?turn.items.filter(isHostObject):[]).map(item=>discardedItem(String(item.type??""),item)).reduce(addDiscarded,emptyDiscarded());const error51=isHostObject(turn.error)?turn.error:{};return wrap(turnId,{event_kind:"terminal",source_method:"turn/completed",stream_boundary:"turn_completed",source_event_key:hostSourceKey(`${threadId}:${turnId}:terminal`,"terminal"),source_occurred_at:hostTimestamp(typeof turn.completedAt==="number"?turn.completedAt*1e3:turn.completedAt)??occurredAt,tokens:null,status:turn.status==="interrupted"?"cancelled":turn.status,latency_ms:Number.isSafeInteger(turn.durationMs)&&Number(turn.durationMs)>=0?Number(turn.durationMs):null,discarded_counts:{...discarded,secrets:discarded.secrets+Number(typeof error51.message==="string")+Number(typeof error51.additionalDetails==="string")}})}function hostObject(value,label){if(!isHostObject(value))throw new Error(`${label} must be an object`);return value}function hostString(value,label){if(typeof value!=="string"||value.length===0)throw new Error(`${label} must be a non-empty string`);return value}function hostCount(value,label){if(!Number.isSafeInteger(value)||Number(value)<0)throw new Error(`${label} must be a non-negative safe integer`);return Number(value)}function hostTokens(value,label){const usage=hostObject(value,`${label} usage`);const input=hostCount(usage.inputTokens,`${label} inputTokens`);const cacheWriteInput=usage.cacheWriteInputTokens===void 0?null:hostCount(usage.cacheWriteInputTokens,`${label} cacheWriteInputTokens`);if(cacheWriteInput!==null&&cacheWriteInput>input){throw new Error(`${label} cacheWriteInputTokens cannot exceed inputTokens`)}return{input,cached_input:hostCount(usage.cachedInputTokens,`${label} cachedInputTokens`),cache_write_input:cacheWriteInput,output:hostCount(usage.outputTokens,`${label} outputTokens`),reasoning:hostCount(usage.reasoningOutputTokens,`${label} reasoningOutputTokens`),total:hostCount(usage.totalTokens,`${label} totalTokens`),source:"provider_reported"}}var emptyDiscarded,addDiscarded,discardedItem,isHostObject,hostTimestamp,hostDigest,hostSourceKey;var init_codex_app_server_notifications=__esm({"src/codex-app-server-notifications.ts"(){"use strict";init_src5();init_codex_telemetry_compaction();init_codex_telemetry_preparation();emptyDiscarded=()=>({prompt:0,response_text:0,reasoning:0,secrets:0});addDiscarded=(left,right)=>({prompt:left.prompt+right.prompt,response_text:left.response_text+right.response_text,reasoning:left.reasoning+right.reasoning,secrets:left.secrets+right.secrets});discardedItem=(type,item)=>({prompt:Number(["userMessage","hookPrompt","function_call","custom_tool_call"].includes(type)),response_text:Number(["agentMessage","plan","message","agent_message"].includes(type)),reasoning:Number(type==="reasoning"),secrets:Number(typeof item.encrypted_content==="string")+Number(item.internal_chat_message_metadata_passthrough!==void 0)});isHostObject=value=>typeof value==="object"&&value!==null&&!Array.isArray(value);hostTimestamp=value=>typeof value==="number"&&Number.isFinite(value)&&value>=0?new Date(value).toISOString():null;hostDigest=value=>createHash39("sha256").update(value).digest("hex");hostSourceKey=(value,prefix)=>value.length<=500?value:`${prefix}:${hostDigest(value)}`}});function aggregateEstimatedCallCosts(estimates,fxRate){const sum=values=>{const known2=values.filter(value=>value!==null);if(known2.length!==values.length)return null;return Math.round(known2.reduce((total,value)=>total+value,0)*1e6)/1e6};const usd=sum(estimates.map(estimate=>estimate.estimated_usd));return{usd,brl:usd===null||fxRate===null?null:Math.round(usd*fxRate.rate*1e6)/1e6,fx_rate:fxRate?.rate??null}}var init_codex_telemetry_call_costs=__esm({"src/codex-telemetry-call-costs.ts"(){"use strict"}});function fallbackUsageLoops(candidate,loops,previous){if(previous.length===0)return loops;const attributed=sumObservedUsage(previous);for(let index=0;index<=loops.length;index+=1){if(sameUsage(aggregateSegmentUsage({...candidate,loops:loops.slice(0,index)}),attributed))return loops.slice(index)}return[]}function sameUsage(left,right){return left.input===right.input&&left.cached_input===right.cached_input&&left.cache_write_input===right.cache_write_input&&left.output===right.output&&left.reasoning===right.reasoning&&left.total===right.total}function validatedTranscriptEnvironmentPath(){const value=process.env.CODEX_TRANSCRIPT_PATH;if(typeof value!=="string")return null;const normalized=value.trim();return normalized.length>0&&normalized.length<=4096?normalized:null}var init_codex_telemetry_fallback_usage=__esm({"src/codex-telemetry-fallback-usage.ts"(){"use strict";init_src4();init_codex_telemetry_runtime()}});async function recordNativeCodexUsage(current,composition,events){const exactCalls=events.filter(event=>event.event.stream_boundary==="response_completed"&&event.event.tokens!==null);const latestCumulative=events.findLast(event=>event.event.stream_boundary==="usage_updated"&&event.event.tokens!==null);const terminal=events.findLast(event=>event.event.stream_boundary==="turn_completed"||event.event.stream_boundary==="error"&&event.event.will_retry!==true);const usageEvents=exactCalls.length>0?exactCalls:latestCumulative?[latestCumulative]:[];if(usageEvents.length===0&&terminal===void 0)return current;let fresh=current;let sequence=current.records.length+1;const agentInvocationId=current.run.agent_invocation_id??`AINV-${current.run.run_id.slice("RUN-".length)}`;for(const call of exactCalls){const event=call.event;if(event.tokens===null)continue;const coverage2=terminal===void 0?"partial":"complete";const existing=fresh.model_call_records.find(record3=>record3.source_call_key===event.source_event_key);if(existing===void 0||existing.coverage==="partial"&&coverage2==="complete"){await composition.runs.appendRecord(modelCallObservedV3Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:event.captured_at,type:"model.call.observed",call_id:modelCallId(event.source_event_key),agent_invocation_id:agentInvocationId,coverage:coverage2,tokens:event.tokens,cost:{usd:null,brl:null},provider:event.provider,model:event.model,source_call_key:event.source_event_key,...event.source_occurred_at===null?{}:{source_occurred_at:event.source_occurred_at},runtime:event.runtime}));fresh=await composition.runs.read(current.run.run_id)}}const sourceSegmentKey=`codex-app-server:${current.run.run_id}`;if(usageEvents.length>0&&!fresh.effective_usage_records.some(record3=>record3.source_segment_key===sourceSegmentKey)){const tokens2=sumObservedUsage(usageEvents.map(event=>event.event.tokens));await composition.runs.appendRecord(usageRecordedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:latestPhase(current),activity_kind:"implementation",classification_source:"current_context",tokens:tokens2,cost:{usd:null,brl:null},provider:commonObservedValue(usageEvents.map(event=>event.event.provider)),model:commonObservedValue(usageEvents.map(event=>event.event.model)),source_segment_key:sourceSegmentKey,runtime:{reasoning_effort:commonObservedValue(usageEvents.map(event=>event.event.runtime.reasoning_effort)),service_tier:commonObservedValue(usageEvents.map(event=>event.event.runtime.service_tier))},supersedes_event_id:unavailableUsageEventId(current),...latestSourceTimestamp(usageEvents)===null?{}:{source_occurred_at:latestSourceTimestamp(usageEvents)}}));fresh=await composition.runs.read(current.run.run_id)}if(terminal===void 0||terminal.event.status===null)return fresh;const callKeys=exactCalls.length>0?exactCalls.map(call=>call.event.source_event_key):[terminal.event.source_event_key];for(const callKey of callKeys){const invocationId2=providerInvocationId(callKey);if(!fresh.model_selection_records.some(record3=>record3.invocation_id===invocationId2)){await composition.runs.appendRecord(modelSelectionRecordedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:terminal.event.captured_at,type:"model.selection.recorded",invocation_id:invocationId2,requested:{model:current.run.model,reasoning_effort:current.run.reasoning_effort??null,velocity:"standard"},selection:{source:"execution-override",policy_version:1,reasons:["host-run-header"]}}));fresh=await composition.runs.read(current.run.run_id)}if(!fresh.provider_invocation_records.some(record3=>record3.invocation_id===invocationId2)){await composition.runs.appendRecord(providerInvocationFinishedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:terminal.event.captured_at,type:"provider.invocation.finished",invocation_id:invocationId2,status:terminal.event.status,effective:{provider:terminal.event.provider,model:terminal.event.model,reasoning_effort:terminal.event.runtime.reasoning_effort,service_tier:terminal.event.runtime.service_tier},latency_ms:terminal.event.latency_ms}));fresh=await composition.runs.read(current.run.run_id)}}return fresh}var init_codex_telemetry_native=__esm({"src/codex-telemetry-native.ts"(){"use strict";init_src5();init_codex_telemetry_runtime()}});import{AsyncLocalStorage}from"node:async_hooks";function fallbackCallIdentity(sourceCallKey){return[sourceCallKey,modelCallId(sourceCallKey)]}function hasNoObservedTokenDelta(tokens2){return tokens2.total===0&&[tokens2.input,tokens2.cached_input,tokens2.cache_write_input,tokens2.output,tokens2.reasoning].every(value=>value==null||value===0)}async function recordCodexTelemetryBatch(folds,composition,filesystem,finder=findLatestCodexSegment){if(folds.length===0)return[];const proposals=new Map;const transcriptPath=validatedTranscriptEnvironmentPath();for(const fold of folds){if(fold.finished!==null&&unavailableUsageEventId(fold)===null)continue;const source=await exactTelemetrySource(fold,composition);const key=JSON.stringify(source);if(source.turnId!==null&&!proposals.has(key))proposals.set(key,await finder(filesystem.root,new Set,{...source,startedAfter:fold.run.occurred_at,...transcriptPath===null?{}:{transcriptPath,requireTaskComplete:true}}))}return composition.runs.withUsageAttributionLock(async()=>{const native=await withPreparedCodexTelemetry(filesystem,async events=>events);const pass={runs:composition.runs,filesystem,native,compact:false};return capturePass.run(pass,async()=>{const results=[];try{for(const fold of folds){const current=await recordCodexTelemetryIfAvailable(fold,composition,filesystem,null,[],async(_root,_keys,source)=>proposals.get(JSON.stringify({agentPath:source?.agentPath??null,parentThreadId:source?.parentThreadId??null,threadId:source?.threadId??null,turnId:source?.turnId??null}))??null);results.push(current);if(pass.owners!==void 0)pass.owners=pass.owners.map(owner=>owner.run.run_id===current.run.run_id?current:owner)}return results}finally{if(pass.compact)await compactPendingCodexTelemetry(filesystem)}})})}async function recordCodexTelemetryIfAvailable(current,composition,filesystem,sourceOverride=null,appServerNotifications=[],fallbackSegmentFinder=findLatestCodexSegment){if(!isCodexTelemetryClient(current.run.client)||current.run.client_thread_id===null&&current.run.client_turn_id===null){return current}const transcriptPath=validatedTranscriptEnvironmentPath();const pass=capturePass.getStore();const batch=pass?.runs===composition.runs&&pass.filesystem===filesystem?pass:void 0;const lock2=operation=>batch===void 0?composition.runs.withUsageAttributionLock(operation):operation();const collect=fresh=>batch===void 0?collectAvailableNativeUsage(fresh,composition,filesystem,recordNativeCodexUsage):collectNativeUsageFromSnapshot(fresh,composition,batch.native,recordNativeCodexUsage);const preparation=await lock2(async()=>{const fresh=await composition.runs.read(current.run.run_id);if(appServerNotifications.length>0){await ingestCodexAppServerNotifications(filesystem,appServerNotifications)}const observed=await collect(fresh);if(batch!==void 0&&observed!==null)batch.compact=true;if(observed!==null)return{kind:"done",fold:observed};if(fresh.finished!==null&&unavailableUsageEventId(fresh)===null)return{kind:"done",fold:fresh};if(sourceOverride===null&&fresh.run.client_turn_id===null)return{kind:"done",fold:fresh};const source=sourceOverride??await exactTelemetrySource(fresh,composition);if(source.turnId===null)return{kind:"done",fold:fresh};return{kind:"fallback",fold:fresh,source}});if(preparation.kind==="done")return preparation.fold;const candidate=await fallbackSegmentFinder(filesystem.root,new Set,{startedAfter:preparation.fold.run.occurred_at,...preparation.source,...transcriptPath===null?{}:{transcriptPath,requireTaskComplete:true}});return lock2(async()=>{const freshCurrent=await composition.runs.read(current.run.run_id);const observed=await collect(freshCurrent);if(batch!==void 0&&observed!==null)batch.compact=true;if(observed!==null)return observed;const source=sourceOverride??await exactTelemetrySource(freshCurrent,composition);const exactTurn=source.turnId;const timestamp12=Date.parse(candidate?.finishedAt??candidate?.loops.at(-1)?.timestamp??"");if(candidate===null||!Number.isFinite(timestamp12)||exactTurn===null||candidate.turnId!==exactTurn||JSON.stringify(source)!==JSON.stringify(preparation.source))return freshCurrent;const postTerminalPhase=freshCurrent.finished?.phase??null;const postTerminal=postTerminalPhase!==null;const supersededUnavailableUsageId=unavailableUsageEventId(freshCurrent);if(postTerminal&&supersededUnavailableUsageId===null)return freshCurrent;const candidateLoops=Array.from(new Map(candidate.loops.map(loop=>[`${candidate.segmentKey}:loop:${loop.cycleIndex}`,loop])).values());const newCandidateLoops=candidateLoops.filter(loop=>shouldAppendFallbackModelCall(freshCurrent.model_call_records,`${candidate.segmentKey}:loop:${loop.cycleIndex}`));const localPrevious=freshCurrent.effective_usage_records.filter(record3=>record3.source_segment_key===candidate.segmentKey||record3.source_segment_key?.startsWith(`${candidate.segmentKey}@`)===true);if(localPrevious.some(record3=>record3.source_segment_key===candidate.segmentKey))return freshCurrent;const localDelta=observedUsageDelta(aggregateSegmentUsage({...candidate,loops:candidateLoops}),localPrevious.map(record3=>record3.tokens));if(candidate.finishedAt===null&&newCandidateLoops.length===0&&hasNoObservedTokenDelta(localDelta))return freshCurrent;const allRuns=batch?.owners??await composition.runs.list();if(batch!==void 0)batch.owners=allRuns;const existingOwner=allRuns.find(fold=>fold.run.run_id!==freshCurrent.run.run_id&&fold.effective_usage_records.some(record3=>record3.source_segment_key===candidate.segmentKey||record3.source_segment_key?.startsWith(`${candidate.segmentKey}@`)===true));if(existingOwner!==void 0)return freshCurrent;const model=candidate.model??freshCurrent.run.model;const provider=inferProvider(model,freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent);const correlation=codexTelemetryCorrelationFromRun(freshCurrent.run);if(correlation===null)return freshCurrent;const capturedAt=new Date().toISOString();const pricing=new PricingRepository(filesystem);const catalog=await pricing.readCatalog();const fxRate=await pricing.readLatestFxRate();const spooledLoops=[];if(batch!==void 0&&(newCandidateLoops.length>0||candidate.finishedAt!==null))batch.compact=true;for(const loop of candidateLoops){if(!shouldAppendFallbackModelCall(freshCurrent.model_call_records,`${candidate.segmentKey}:loop:${loop.cycleIndex}`))continue;const loopModel=loop.model??model;const loopProvider=inferProvider(loopModel,freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent);const historical_cost=estimateUsageCost({provider:loopProvider,model:loopModel,usage:loop.usage,catalog,fxRate,serviceTier:candidate.serviceTier??null});spooledLoops.push(await appendCodexTelemetrySpoolEvent(filesystem,{correlation,event_kind:"usage",source:"codex_session_fallback",source_event_key:`${candidate.segmentKey}:loop:${loop.cycleIndex}`,source_occurred_at:loop.timestamp,captured_at:capturedAt,coverage:"partial",tokens:loop.usage,provider:loopProvider,model:loopModel,runtime:{reasoning_effort:candidate.reasoningEffort??null,service_tier:candidate.serviceTier??null},status:null,latency_ms:null,historical_cost,context_stats:null,discarded_counts:{prompt:0,response_text:0,reasoning:0,secrets:0}}))}if(candidate.finishedAt!==null){await appendCodexTelemetrySpoolEvent(filesystem,{correlation,event_kind:"terminal",source:"codex_session_fallback",source_event_key:`${candidate.segmentKey}:terminal`,source_occurred_at:candidate.finishedAt,captured_at:capturedAt,coverage:"partial",tokens:null,provider,model,runtime:{reasoning_effort:candidate.reasoningEffort??null,service_tier:candidate.serviceTier??null},status:"completed",latency_ms:elapsedMilliseconds(candidate.startedAt,candidate.finishedAt),context_stats:null,discarded_counts:{prompt:0,response_text:0,reasoning:0,secrets:0}})}const cumulative=aggregateSegmentUsage({...candidate,loops:candidateLoops});const previous=allRuns.filter(fold=>fold.run.run_id===freshCurrent.run.run_id||exactTurn!==null&&fold.run.client_turn_id===exactTurn).flatMap(fold=>fold.effective_usage_records).filter(record3=>record3.source_segment_key===candidate.segmentKey||record3.source_segment_key?.startsWith(`${candidate.segmentKey}@`)===true);const usageLoops=fallbackUsageLoops(candidate,candidateLoops,previous.map(record3=>record3.tokens));if(candidate.finishedAt!==null&&previous.some(record3=>record3.source_segment_key===candidate.segmentKey))return freshCurrent;const tokens2=observedUsageDelta(cumulative,previous.map(record3=>record3.tokens));const usageSourceSegmentKey=candidate.finishedAt===null?`${candidate.segmentKey}@active:${hostDigest(JSON.stringify(cumulative))}`:candidate.segmentKey;const zeroTokenDelta=hasNoObservedTokenDelta(tokens2);const activeUsageToClose=candidate.finishedAt===null||!zeroTokenDelta?null:previous.findLast(record3=>record3.source_segment_key?.startsWith(`${candidate.segmentKey}@active:`)===true)??null;if(zeroTokenDelta&&activeUsageToClose===null){return freshCurrent}if(candidate.finishedAt===null&&usageLoops.length===0)return freshCurrent;const estimated=aggregateEstimatedCallCosts(usageLoops.map(loop=>{const loopModel=loop.model??model;return estimateUsageCost({provider:inferProvider(loopModel,freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent),model:loopModel,usage:loop.usage,catalog,fxRate,serviceTier:candidate.serviceTier??null})}),fxRate);const agentInvocationId=freshCurrent.run.agent_invocation_id??`AINV-${freshCurrent.run.run_id.slice("RUN-".length)}`;let sequence=freshCurrent.records.length+1;const fallbackCallIdentities=new Set(freshCurrent.model_call_records.flatMap(record3=>[record3.source_call_key,record3.call_id].filter(value=>typeof value==="string")));for(const spooled of spooledLoops){const loop=spooled.event;if(loop.tokens===null)continue;const loopModel=loop.model??freshCurrent.run.model;const loopProvider=inferProvider(loopModel,loop.provider??freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent);const loopEstimated=estimateUsageCost({provider:loopProvider,model:loopModel,usage:loop.tokens,catalog,fxRate,serviceTier:candidate.serviceTier??null});const sourceCallKey=loop.source_event_key;const identities=fallbackCallIdentity(sourceCallKey);if(postTerminal||!shouldAppendFallbackModelCall(freshCurrent.model_call_records,sourceCallKey)||identities.some(identity2=>fallbackCallIdentities.has(identity2))){continue}await composition.runs.appendRecord(modelCallObservedV3Schema.parse({schema_version:2,event_id:`${freshCurrent.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:freshCurrent.run.run_id,sequence:sequence++,occurred_at:new Date().toISOString(),type:"model.call.observed",call_id:modelCallId(sourceCallKey),agent_invocation_id:agentInvocationId,coverage:"partial",tokens:loop.tokens,cost:{usd:loopEstimated.estimated_usd,brl:loopEstimated.estimated_brl,fx_rate:loopEstimated.fx_rate},provider:loopProvider,model:loopModel,source_call_key:sourceCallKey,...loop.source_occurred_at===null?{}:{source_occurred_at:loop.source_occurred_at},runtime:loop.runtime}));for(const identity2 of identities)fallbackCallIdentities.add(identity2)}const usage=usageRecordedV2Schema.parse({schema_version:2,event_id:`${freshCurrent.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:freshCurrent.run.run_id,sequence,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:postTerminal?postTerminalPhase:latestPhase(freshCurrent),activity_kind:postTerminal?"retrospective_local_remeasurement":"implementation",classification_source:"current_context",tokens:activeUsageToClose?.tokens??tokens2,cost:activeUsageToClose!==null?activeUsageToClose.cost:{usd:estimated.usd,brl:estimated.brl,fx_rate:estimated.fx_rate},provider,model,source_segment_key:usageSourceSegmentKey,runtime:{reasoning_effort:candidate.reasoningEffort??null,service_tier:candidate.serviceTier??null},supersedes_event_id:activeUsageToClose?.event_id??supersededUnavailableUsageId,...postTerminal?{retrospective_correction:true}:{},source_occurred_at:candidate.finishedAt??candidate.startedAt??void 0,source_started_at:candidate.startedAt??void 0,source_finished_at:candidate.finishedAt??void 0});await composition.runs.appendRecord(usage);if(batch===void 0)await compactPendingCodexTelemetry(filesystem);else batch.compact=true;return composition.runs.read(freshCurrent.run.run_id)})}var capturePass;var init_record_codex_telemetry=__esm({"src/record-codex-telemetry.ts"(){"use strict";init_src4();init_src5();init_codex_app_server_notifications();init_codex_telemetry_call_costs();init_codex_telemetry_compaction();init_codex_telemetry_fallback_usage();init_codex_app_server_notifications();init_codex_telemetry_native();init_codex_telemetry_preparation();init_codex_telemetry_runtime();init_codex_telemetry_source();init_codex_telemetry_preparation();init_codex_telemetry_runtime();init_codex_telemetry_source();capturePass=new AsyncLocalStorage}});async function openThreadIntakes(composition,client,clientThreadId,currentTurnId,candidates){if(clientThreadId===null)return[];const availableRuns=candidates??await composition.runs.list();return availableRuns.filter(fold=>fold.finished===null&&fold.run.client===client&&fold.run.client_thread_id===clientThreadId&&fold.run.parent_run_id===null&&fold.run.intake!=null&&!runV2RequiresFinalizer(fold.run)&&descendantRuns(fold.run.run_id,availableRuns).length===0&&fold.run.client_turn_id!==currentTurnId)}async function finishOpenThreadIntakes(openIntakes2,composition,filesystem,parsed,lifecycle){const settled=[];for(const intake2 of openIntakes2){const candidateRuns=await composition.runs.list();if(descendantRuns(intake2.run.run_id,candidateRuns).length>0||activeDescendantRuns(intake2.run.run_id,candidateRuns).length>0){continue}let current=intake2;current=await recordCodexTelemetryIfAvailable(current,composition,filesystem,null,await codexAppServerNotifications(parsed,filesystem));if(current.effective_usage_records.length===0){await recordUnavailableCodexTelemetryToSpool(current,filesystem,"completed");await composition.runs.appendRecord(unavailableUsageRecord(current,parsed,current.records.length+1));current=await composition.runs.read(current.run.run_id)}await composition.runs.appendRecord(runFinishedV2Schema.parse({schema_version:2,event_id:runV2EventId(current.run.run_id,current.records.length+1),run_id:current.run.run_id,sequence:current.records.length+1,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status:"completed"}));const run=await composition.runs.read(current.run.run_id);settled.push({run,reconciliation:await reconcileFinishedRunLifecycle(run,composition,lifecycle,{candidateRuns})})}return settled}function settledIntakesForView(settled,view){if(view==="full")return settled;return settled.map(({run,reconciliation})=>({run_id:run.run.run_id,status:run.status,phase:latestRunV2Phase(run.records),execution_id:run.run.execution_id,task_id:run.run.task_id,change_id:run.run.change_id,record_count:run.records.length,usage_record_count:run.effective_usage_records.length,model_call_count:run.model_call_records.length,reconciliation:{status:reconciliation.status,outcome:reconciliation.outcome,task_count:reconciliation.tasks.length,change_count:reconciliation.changes.length,execution_count:reconciliation.executions.length,spec_count:reconciliation.specs.length,prd_count:reconciliation.prds.length}}))}async function codexAppServerNotifications(parsed,filesystem){const path=parsed.options["codex-app-server-events"];return path===void 0?[]:parseCodexAppServerNotificationStream(await filesystem.readText(path))}function runMatchesTarget(fold,target){return target.taskId!==void 0&&fold.run.task_id===target.taskId||target.specId!==void 0&&fold.run.spec_id===target.specId||target.prdId!==void 0&&fold.run.prd_id===target.prdId}async function recordContextPackUsage(runId,initialPackTokens,composition){const current=await composition.runs.read(runId);if(current.finished!==null)throw new UsageError(`Run V2 is already finished: ${runId}`);const sequence=current.records.length+1;await composition.runs.appendRecord(usageRecordedV2Schema.parse({schema_version:2,event_id:runV2EventId(runId,sequence),run_id:runId,sequence,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:latestRunV2Phase(current.records),activity_kind:"context_build",classification_source:"current_context",tokens:{input:null,cached_input:null,output:null,reasoning:null,total:null,source:"unavailable"},cost:{usd:null,brl:null},provider:current.run.provider,model:current.run.model,source_segment_key:`context-pack:${runId}:${sequence}`,supersedes_event_id:null,source_occurred_at:new Date().toISOString(),context_stats:{initial_pack_tokens:initialPackTokens,tool_output_tokens:null,files_opened:null,snippets_opened:null}}))}function unavailableUsageRecord(current,parsed,sequence){const occurredAt=new Date().toISOString();return usageRecordedV2Schema.parse({schema_version:2,event_id:runV2EventId(current.run.run_id,sequence),run_id:current.run.run_id,sequence,occurred_at:occurredAt,type:"usage.recorded",phase:latestRunV2Phase(current.records),activity_kind:"run_finalize",classification_source:"current_context",tokens:{input:null,cached_input:null,output:null,reasoning:null,total:null,source:"unavailable"},cost:{usd:null,brl:null},provider:current.run.provider,model:current.run.model,source_segment_key:null,supersedes_event_id:null,...runUsageMetadataOptions(parsed.options,occurredAt)})}function latestRunV2Phase(records){const latest=records.findLast(record3=>"phase"in record3);return latest?.phase??"conversation"}function runV2EventId(runId,sequence){return`${runId}:${String(sequence).padStart(6,"0")}`}var init_conversation_intake_settlement=__esm({"src/conversation-intake-settlement.ts"(){"use strict";init_src5();init_cli_arguments();init_record_codex_telemetry();init_run_hierarchy();init_run_lifecycle_reconciliation()}});import{createHash as createHash40,randomUUID as randomUUID8}from"node:crypto";import{lstat as lstat6,readFile as readFile7,realpath as realpath7,rename as rename5,unlink}from"node:fs/promises";import{homedir as homedir3}from"node:os";import{resolve as resolve9}from"node:path";async function resolveRunClientInvocation(filesystem,client,options={}){if(!new Set(["codex","codex-desktop"]).has(client)){return{clientThreadId:null,clientTurnId:null,userMessage:null,observedModel:null,observedReasoningEffort:null,observedServiceTier:null}}const argv=options.argv??process.argv.slice(2);const hookFlags=argv.filter(value=>value.startsWith("--codex-hook-"));const hooked=hookFlags.length>0;const hookThreads=hookFlags.filter(value=>value.startsWith("--codex-hook-thread="));const hookThread=hookThreads[0]?.slice("--codex-hook-thread=".length);const explicitThread=normalizedId(options.threadId??process.env.CODEX_THREAD_ID);if(hooked&&(hookFlags.length!==2||hookThreads.length!==1||!hookThread||!/^[A-Za-z0-9_-]{1,256}$/.test(hookThread)||explicitThread!==null&&explicitThread!==hookThread)){throw new Error("Codex hook identity is incomplete or conflicts with the active thread.")}const threadId=explicitThread??hookThread??null;const explicitTurn=normalizedId(options.turnId??process.env.CODEX_TURN_ID);const hookTurn=hooked&&threadId!==null?await observedHookTurn(filesystem.root,threadId,argv,options.now??new Date):null;if(hooked&&(hookTurn===null||explicitTurn!==null&&explicitTurn!==hookTurn)){throw new Error("Codex hook turn receipt is missing, consumed, expired or conflicts with the active turn.")}const turnId=hooked?hookTurn:explicitTurn;const transcriptPath=transcriptPathFromEnvironment();const active=await findActiveCodexInvocation(filesystem.root,{threadId,...transcriptPath===null?{}:{transcriptPath},...options.sessionsRoot===void 0?{}:{sessionsRoot:options.sessionsRoot},...options.now===void 0?{}:{now:options.now}});return{clientThreadId:threadId??active?.sessionId??null,clientTurnId:turnId??active?.turnId??null,userMessage:active?.userMessage??null,observedModel:active?.model??null,observedReasoningEffort:active?.reasoningEffort??null,observedServiceTier:active?.serviceTier??null,transcriptPath:transcriptPath??(active?resolve9(options.sessionsRoot??resolve9(homedir3(),".codex"),active.sessionPath):null)}}async function observedHookTurn(root,threadId,argv,now){const hookIds=argv.filter(value=>value.startsWith("--codex-hook-id="));if(hookIds.length!==1)return null;const hookId=hookIds[0]?.slice("--codex-hook-id=".length);if(!hookId||!/^[a-f0-9]{64}$/.test(hookId))return null;const originalArgv=argv.filter(value=>!value.startsWith("--codex-hook-"));const argvSha256=createHash40("sha256").update(JSON.stringify(originalArgv)).digest("hex");const path=resolve9(root,".local/codex-hook-turn/v1",`${hookId}.json`);const claimed=`${path}.${randomUUID8()}.consumed`;try{await rename5(path,claimed);const info=await lstat6(claimed);if(!info.isFile()||info.isSymbolicLink()||info.size>2048)return null;if((await realpath7(claimed)).toLowerCase()!==claimed.toLowerCase())return null;const receipt=JSON.parse(await readFile7(claimed,"utf8"));const age=now.getTime()-Number(receipt.observed_at_ms);if(receipt.schema_version!==1||receipt.thread_id!==threadId||typeof receipt.turn_id!=="string"||!receipt.turn_id||receipt.turn_id.length>256||receipt.tool_use_sha256!==hookId||receipt.argv_sha256!==argvSha256||!Number.isFinite(age)||age<-5e3||age>6e4)return null;return receipt.turn_id}catch{return null}finally{await unlink(claimed).catch(()=>void 0)}}function transcriptPathFromEnvironment(){const value=process.env.CODEX_TRANSCRIPT_PATH?.trim();return value===void 0||value.length===0||value.length>4096?null:value}function normalizedId(value){const normalized=value?.trim();return normalized===void 0||normalized.length===0?null:normalized}var init_run_client_invocation=__esm({"src/run-client-invocation.ts"(){"use strict";init_src4()}});async function resolveConversationContinuation(parsed,composition,filesystem){if(parsed.options.intent!==void 0&&parsed.options.intent!=="continue"){throw new UsageError("conversation resolve supports --intent continue only")}if(parsed.options.definition!==void 0){throw new UsageError("conversation resolve does not authorize definition creation")}const client=parsed.options.client??"codex";const invocation2=await resolveRunClientInvocation(filesystem,client);const context=await latestThreadContext(composition,client,invocation2.clientThreadId);const target=explicitIntakeTarget(parsed)??context.implicitTarget;const existing=await findRootRunForExactTurn(composition,client,invocation2);const base={read_only:true,intent:"continue",target,current_run_id:existing?.run.run_id??null,current_execution_id:existing?.run.execution_id??null,start_args:null};if(target===null){return{...base,status:"unresolved",reason:"No root delivery focus in this client thread"}}const id=target.taskId??target.specId??target.prdId;if(id===void 0)throw new UsageError("Continuation target has no canonical ID");const options={...parsed.options,intent:"continue",client,[target.entrypoint]:id};const startArgs=["conversation","start",...Object.entries(options).flatMap(([key,value])=>[`--${key}`,value]),...Array.from(parsed.flags,flag=>`--${flag}`)];if(existing!==null){try{assertExactIntakeRequestCompatible(existing,{...parsed,options},"continue")}catch(error51){if(!(error51 instanceof UsageError))throw error51;return{...base,status:"conflict",reason:error51.message}}if(existing.finished!==null){return{...base,status:"closed",reason:"The matching Run is already terminal; do not dispatch new children"}}}if(target.taskId!==void 0){const task=(await composition.tasks.read(target.taskId)).task;if(["completed","cancelled","failed"].includes(task.status)){return{...base,status:"blocked",task_status:task.status,reason:"This Task cannot continue; completed/cancelled are immutable and failed requires explicit rework"}}return{...base,status:"resolved",task_status:task.status,execution_id:task.plan_ref?.execution_id??task.prepared_plan?.execution_id??null,reused:existing!==null,start_args:startArgs}}const execution=await resolveCanonicalMacroExecution(target,composition,parsed.options.execution);return{...base,status:"resolved",execution_id:execution.id,execution_status:execution.status,task_ids:execution.dag.nodes.map(node=>node.task_id),reused:existing!==null,start_args:startArgs}}var init_conversation_resolution=__esm({"src/conversation-resolution.ts"(){"use strict";init_cli_arguments();init_conversation_intake();init_run_client_invocation();init_run_conversation_v2()}});function activeCaptureRunIds(area,parsed,result2){return area==="run"&&parsed.positionals[1]==="usage"&&(parsed.flags.has("active")||parsed.flags.has("recent"))?changedActiveCaptureRunIds(result2):null}function changedActiveCaptureRunIds(result2){const telemetry=result2?.telemetry;if(typeof telemetry!=="object"||telemetry===null||!("mode"in telemetry)||!["active_exact_session","recent_exact_session"].includes(String(telemetry.mode))||!("captured"in telemetry)||!Array.isArray(telemetry.captured))throw new UsageError("Active telemetry capture returned an invalid projection result");const ids=[];for(const item of telemetry.captured){if(typeof item!=="object"||item===null||typeof item.run_id!=="string"||typeof item.captured!=="boolean"){throw new UsageError("Active telemetry capture returned an invalid Run result")}if(item.captured)ids.push(item.run_id)}return ids}var init_lifecycle_manifest_active_capture=__esm({"src/lifecycle-manifest-active-capture.ts"(){"use strict";init_cli_arguments()}});function effectiveRunFinishedAt(fold){const recordedFinish=fold.finished?.occurred_at??null;if(recordedFinish===null)return null;const startedAtMs=Date.parse(fold.run.occurred_at);const recordedFinishMs=Date.parse(recordedFinish);const reconciledFinishMs=fold.records.filter(record3=>"activity_kind"in record3&&record3.activity_kind==="retrospective_local_reconciliation").map(record3=>"source_occurred_at"in record3?record3.source_occurred_at??null:null).map(value=>value===null?Number.NaN:Date.parse(value)).filter(value=>Number.isFinite(value)&&value>=startedAtMs&&value<=recordedFinishMs);if(reconciledFinishMs.length===0)return recordedFinish;return new Date(Math.max(...reconciledFinishMs)).toISOString()}function projectedSourceTiming(runStartedAt,effectiveRecords,allRecords){const startedAtMs=Date.parse(runStartedAt);const timestampOf=value=>{const timestamp12=value===null||value===void 0?Number.NaN:Date.parse(value);return Number.isFinite(timestamp12)?timestamp12:null};const candidates=[];for(const record4 of[...effectiveRecords,...allRecords]){const sourceStartedAt2=record4.source_started_at;const sourceFinishedAt2=record4.source_finished_at;const startMs=timestampOf(sourceStartedAt2);const finishMs=timestampOf(sourceFinishedAt2);if(startMs!==null&&finishMs!==null&&finishMs>=startMs&&finishMs>=startedAtMs){candidates.push(record4);continue}const sourceOccurredAt=timestampOf(record4.source_occurred_at);if(record4.activity_kind==="retrospective_local_reconciliation"&&sourceOccurredAt!==null&&sourceOccurredAt>=startedAtMs)candidates.push({...record4,source_started_at:runStartedAt,source_finished_at:record4.source_occurred_at??void 0})}candidates.sort((left,right)=>Date.parse(left.occurred_at)-Date.parse(right.occurred_at));const record3=candidates.at(-1);const sourceStartedAt=record3?.source_started_at??null;const sourceFinishedAt=record3?.source_finished_at??record3?.source_occurred_at??null;return{source_started_at:sourceStartedAt,source_finished_at:sourceFinishedAt,source_duration_ms:timestampDelta(sourceStartedAt,sourceFinishedAt),capture_lag_ms:timestampDelta(sourceFinishedAt,record3?.occurred_at??null)}}function timestampDelta(start,finish){if(start===null||finish===null)return null;const startMs=Date.parse(start);const finishMs=Date.parse(finish);return Number.isFinite(startMs)&&Number.isFinite(finishMs)?Math.max(0,finishMs-startMs):null}var init_lifecycle_manifest_run_projection=__esm({"src/lifecycle-manifest-run-projection.ts"(){"use strict"}});function modelCallCoverage(fold){if(fold.model_call_records.length===0)return"unavailable";return fold.model_call_records.every(record3=>record3.coverage==="complete")?"complete":"partial"}function runCostInput(fold){return{run:{run_id:fold.run.run_id,attribution_status:fold.run.attribution_status,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,work_type:fold.run.work_type},records:fold.records,effective_usage_records:fold.effective_usage_records}}var init_lifecycle_manifest_run_usage=__esm({"src/lifecycle-manifest-run-usage.ts"(){"use strict"}});function summarizeRunObservedTiming(fold){return summarizeObservedSourceTiming(fold.effective_usage_records.map(record3=>({phase:record3.phase,source_started_at:record3.source_started_at??null,source_finished_at:record3.source_finished_at??null})))}var init_observed_run_timing=__esm({"src/observed-run-timing.ts"(){"use strict";init_src4()}});async function runLifecycleManifestMaintenance(action,parsed,filesystem,composition){const store=new LifecycleManifestStore(filesystem);if(["neighbors","path","explain","gaps"].includes(action??"")){return runManifestGraphQuery(action,parsed,store)}if(action==="rebuild"){if(!parsed.flags.has("confirm-full-scan")){throw new UsageError("manifest rebuild requires --confirm-full-scan")}const events=await lifecycleManifestBootstrapEvents(composition,filesystem);return{snapshot:await store.replace(events),indexed:events.length}}if(action==="refresh")return store.refresh();if(action==="reconcile"){const id=parsed.options.id??parsed.positionals[2];if(id===void 0)throw new UsageError("manifest reconcile requires --id ID");const event=await lifecycleManifestEventForId(id,composition,filesystem);return{snapshot:await store.appendMany([event]),reconciled:[id]}}if(action==="show"){return parsed.flags.has("active")?store.readActiveWork():store.readSummary()}throw new UsageError("manifest requires rebuild, refresh, reconcile, show, neighbors, path, explain, or gaps")}async function runManifestGraphQuery(action,parsed,store){const entities=await store.readEntities();const byId2=new Map(entities.map(entity=>[entity.id,entity]));const id=parsed.options.id??parsed.positionals[2];if(action==="path"){const from=parsed.options.from??id;const to2=parsed.options.to??parsed.positionals[3];if(from===void 0||to2===void 0)throw new UsageError("manifest path requires --from ID --to ID");const queue=[[from]];const visited=new Set([from]);while(queue.length>0&&visited.size<=GRAPH_VISIT_LIMIT){const route=queue.shift();const current=route.at(-1);if(current===to2)return{path:route,bounded:true,limit:GRAPH_VISIT_LIMIT};for(const neighbor of graphNeighbors(entities,current)){if(!visited.has(neighbor.entity.id)){visited.add(neighbor.entity.id);queue.push([...route,neighbor.entity.id])}}}return{path:null,bounded:true,limit:GRAPH_VISIT_LIMIT}}if(id===void 0||!byId2.has(id))throw new UsageError("manifest graph query requires an existing --id ID");if(action==="neighbors"){const neighbors=graphNeighbors(entities,id);return{id,neighbors:neighbors.slice(0,GRAPH_RESULT_LIMIT),bounded:true,limit:GRAPH_RESULT_LIMIT,truncated:neighbors.length>GRAPH_RESULT_LIMIT}}if(action==="gaps"){const entity=byId2.get(id);if(entity===void 0)throw new UsageError("manifest graph query requires an existing --id ID");const gaps=relationEdgesFor(entity).filter(edge2=>!byId2.has(edge2.target_id));return{id,gaps:gaps.slice(0,GRAPH_RESULT_LIMIT),bounded:true,limit:GRAPH_RESULT_LIMIT,truncated:gaps.length>GRAPH_RESULT_LIMIT}}const to=parsed.options.to??parsed.positionals[3];if(to===void 0)throw new UsageError("manifest explain requires --id ID --to ID");const edge=graphNeighbors(entities,id).find(neighbor=>neighbor.entity.id===to)?.edge;return{id,to,relation:edge??null,bounded:true,limit:GRAPH_RESULT_LIMIT}}async function manifestList(area,parsed,filesystem){if(!["prd","spec","change","task","execution","run","decision"].includes(area)){throw new UsageError(`Lifecycle manifest does not support list area: ${area}`)}const store=new LifecycleManifestStore(filesystem);let entities=await store.readEntities(area);if(entities.length===0&&await store.readSummary()===null&&!await filesystem.exists(".agents/records/lifecycle/.gitkeep")){throw new UsageError("Lifecycle manifest is not initialized; run `zaip manifest rebuild --confirm-full-scan` once")}const statuses=new Set(csvOption(parsed.options.status));const from=dateBoundary(parsed.options.from,false);const to=dateBoundary(parsed.options.to,true);entities=entities.filter(entity=>statuses.size===0||entity.status!==null&&statuses.has(entity.status)).filter(entity=>parsed.options.prd===void 0||entity.relations.includes(parsed.options.prd)).filter(entity=>parsed.options.spec===void 0||entity.relations.includes(parsed.options.spec)).filter(entity=>parsed.options.change===void 0||entity.relations.includes(parsed.options.change)).filter(entity=>parsed.options.task===void 0||entity.relations.includes(parsed.options.task)).filter(entity=>parsed.options.execution===void 0||entity.relations.includes(parsed.options.execution)).filter(entity=>from===null||Date.parse(entity.updated_at)>=from).filter(entity=>to===null||Date.parse(entity.updated_at)<=to).sort((left,right)=>right.updated_at.localeCompare(left.updated_at)||right.id.localeCompare(left.id));const after=parsed.options.after;const start=after===void 0?0:entities.findIndex(entity=>entity.id===after)+1;if(after!==void 0&&start===0)throw new UsageError(`--after id not found: ${after}`);const limit=parsed.flags.has("all")?entities.length:numberOption(parsed.options.limit,20);if(limit>200&&!parsed.flags.has("all")){throw new UsageError("--limit must be at most 200; use --all explicitly")}const view=parsed.options.view??"index";if(view!=="index"&&view!=="summary"&&view!=="full")throw new UsageError("--view must be index, summary, or full");const page=entities.slice(start,start+limit);if(view==="full")return page;if(view==="summary"){return page.map(({data:_data,...entity})=>entity)}return{schema:["id","title","status","risk","priority","updated_at","work_relations"],rows:page.map(entity=>[entity.id,entity.title,entity.status,entity.risk,entity.priority,entity.updated_at,entity.relations.filter(relation=>/^(?:PRD|SPEC|CHG|TASK|EXEC|RUN)-/.test(relation)).slice(0,2)]),next_after:page.length===limit?page.at(-1)?.id??null:null}}function isLifecycleManifestMutation(action){if(action===void 0||action==="ready-next")return false;return!["list","show","next","validate","aggregate","inspect-local"].includes(action)}async function syncLifecycleManifestResult(result2,area,parsed,composition,filesystem){const store=new LifecycleManifestStore(filesystem);if(area==="decision"){const decision=findDecision(result2);if(decision!==void 0)await store.append(lifecycleManifestEventFromDecision(decision));return}if(area==="run"||area==="subagent"){const capturedIds=activeCaptureRunIds(area,parsed,result2);const candidate=area==="run"&&capturedIds===null?findRunId(result2)??parsed.options.id??parsed.positionals[2]:void 0;const events2=collectLifecycleEntities(result2).map(lifecycleManifestEventFromEntity);const runIds=new Set(capturedIds??collectRunIds(result2));if(candidate!==void 0)runIds.add(candidate);for(const runId of runIds){events2.push(lifecycleManifestEventFromRun(await composition.runs.read(runId)))}if(events2.length>0)await store.appendMany(events2);return}if(area==="conversation"){const events2=collectLifecycleEntities(result2).map(lifecycleManifestEventFromEntity);for(const runId of collectRunIds(result2)){events2.push(lifecycleManifestEventFromRun(await composition.runs.read(runId)))}if(events2.length>0)await store.appendMany(events2);return}if(area==="validation"||area==="evidence"){const artifact=findArtifact(result2,area);if(artifact!==void 0)await store.append(lifecycleManifestEventFromEntity(artifact));return}const events=collectLifecycleEntities(result2).map(lifecycleManifestEventFromEntity);for(const runId of collectRunIds(result2)){events.push(lifecycleManifestEventFromRun(await composition.runs.read(runId)))}if(events.length>0)await store.appendMany(events)}function findArtifact(result2,area){if(typeof result2!=="object"||result2===null)return void 0;const artifact=result2[area];if(typeof artifact!=="object"||artifact===null)return void 0;const record3=artifact;const observedAt=area==="validation"?record3.executed_at:record3.observed_at;if(typeof record3.id!=="string"||typeof observedAt!=="string"||typeof record3.status!=="string"){return void 0}return{...record3,updated_at:observedAt}}async function lifecycleManifestEventForId(id,composition,filesystem){if(id.startsWith("PRD-"))return lifecycleManifestEventFromEntity((await composition.prds.read(id)).prd);if(id.startsWith("SPEC-"))return lifecycleManifestEventFromEntity((await composition.specs.read(id)).spec);if(id.startsWith("CHG-"))return lifecycleManifestEventFromEntity((await composition.changes.read(id)).change);if(id.startsWith("TASK-"))return lifecycleManifestEventFromEntity((await composition.tasks.read(id)).task);if(id.startsWith("EXEC-"))return lifecycleManifestEventFromEntity((await composition.executions.read(id)).execution);if(id.startsWith("RUN-"))return lifecycleManifestEventFromRun(await composition.runs.read(id));if(/^(?:TEST|EVAL|CHECK|REVIEW|MUT|INT|E2E)-/.test(id)||id.startsWith("EVD-")){const artifact=(await lifecycleAssuranceBootstrapEvents(filesystem)).find(event=>event.entity.id===id);if(artifact!==void 0)return artifact;throw new UsageError(`Typed assurance artifact not found: ${id}`)}throw new UsageError(`Unsupported lifecycle manifest reconciliation id: ${id}`)}function collectLifecycleEntities(value){const found=[];const seen=new Set;const visit=candidate=>{if(Array.isArray(candidate)){candidate.forEach(visit);return}if(typeof candidate!=="object"||candidate===null)return;const record3=candidate;if(typeof record3.id==="string"&&typeof record3.status==="string"&&typeof record3.updated_at==="string"&&/^(PRD|SPEC|CHG|TASK|EXEC)-/.test(record3.id)&&!seen.has(record3.id)){seen.add(record3.id);found.push(record3)}Object.values(record3).forEach(visit)};visit(value);return found}function lifecycleManifestEventFromEntity(entity){const id=entity.id;const kind=id.startsWith("PRD-")?"prd":id.startsWith("SPEC-")?"spec":id.startsWith("CHG-")?"change":id.startsWith("TASK-")?"task":id.startsWith("EVD-")?"evidence":id.startsWith("TEST-")||id.startsWith("EVAL-")||id.startsWith("CHECK-")||id.startsWith("REVIEW-")||id.startsWith("MUT-")||id.startsWith("INT-")||id.startsWith("E2E-")?"validation":"execution";const relations=new Set;collectRelationIds(entity,relations,id);for(const[key,value]of Object.entries(entity)){if(key.endsWith("_id")&&typeof value==="string")relations.add(value);if(key.endsWith("_ids")&&Array.isArray(value))value.filter(item=>typeof item==="string").forEach(item=>{relations.add(item)})}return{schema_version:1,event_id:`${id}:${String(entity.updated_at)}:${String(entity.status)}`,occurred_at:entity.updated_at,operation:"upsert",entity:{kind,id,title:typeof entity.title==="string"?entity.title:null,status:entity.status,risk:typeof entity.risk==="string"?entity.risk:null,priority:typeof entity.priority==="string"?entity.priority:null,updated_at:entity.updated_at,relations:[...relations],relation_edges:relationEdgesFromEntity(entity,[...relations]),usage:null,data:Object.fromEntries(Object.entries(entity).filter(([key])=>key!=="prepared_plan"))}}}function collectRelationIds(value,relations,ownId){if(typeof value==="string"){if(/^(?:PRD|SPEC|CHG|TASK|EXEC|RUN|REQ|AC)-/.test(value)&&value!==ownId){relations.add(value)}return}if(Array.isArray(value)){value.forEach(item=>{collectRelationIds(item,relations,ownId)});return}if(typeof value==="object"&&value!==null){Object.values(value).forEach(item=>{collectRelationIds(item,relations,ownId)})}}function lifecycleManifestEventFromRun(fold){const costInput=runCostInput(fold);const aggregate=aggregateRunV2Usage([costInput],fold.run.run_id);const usage=aggregate.total;const runtime=fold.effective_usage_records.findLast(record3=>record3.runtime)?.runtime;const observedRuntime=fold.effective_usage_records.at(-1);const sourceTiming=projectedSourceTiming(fold.run.occurred_at,fold.effective_usage_records,fold.records);return{schema_version:1,event_id:`${fold.run.run_id}:${fold.records.length}:${fold.status}`,occurred_at:fold.records.at(-1)?.occurred_at??fold.run.occurred_at,operation:"upsert",entity:{kind:"run",id:fold.run.run_id,title:null,status:fold.status,risk:null,priority:null,updated_at:fold.records.at(-1)?.occurred_at??fold.run.occurred_at,relations:[fold.run.parent_run_id,fold.run.prd_id,fold.run.spec_id,fold.run.change_id,fold.run.task_id,fold.run.execution_id].filter(item=>item!==null),relation_edges:[fold.run.parent_run_id,fold.run.prd_id,fold.run.spec_id,fold.run.change_id,fold.run.task_id,fold.run.execution_id].filter(item=>item!==null).map(target_id=>({target_id,type:target_id===fold.run.parent_run_id?"parent":"references",direction:"outbound",provenance:"explicit",source_locator:`run:${fold.run.run_id}`})),usage:{input_tokens:usage.tokens.input,output_tokens:usage.tokens.output,cached_input_tokens:usage.tokens.cached_input,total_tokens:usage.tokens.total,cost:usage.cost.brl??usage.cost.usd,currency:usage.cost.brl!==null?"BRL":usage.cost.usd!==null?"USD":null},data:{attribution_status:fold.run.attribution_status,phase:fold.records.findLast(record3=>"phase"in record3)?.phase??fold.run.phase,run_role:effectiveRunV2Role(fold.run),run_kind:effectiveRunV2Kind(fold.run),run_purpose:effectiveRunV2Purpose(fold.run),requires_finalizer:runV2RequiresFinalizer(fold.run),parent_run_id:fold.run.parent_run_id,entrypoint:fold.run.entrypoint,work_type:fold.run.work_type,client:fold.run.client,agent:fold.run.agent,agent_name:fold.run.agent==="codex"?"codex":fold.run.agent_name??canonicalAgentName(fold.run.agent),provider:observedRuntime?.provider??fold.run.provider,model:fold.run.model,reasoning_effort:fold.run.reasoning_effort??fold.model_selection_records[0]?.requested.reasoning_effort??null,...effectiveConfiguration(fold),...callSummary(fold),cli_agent_name:fold.run.agent_name??null,call_coverage:modelCallCoverage(fold),service_tier:runtime?.service_tier??null,client_thread_id:fold.run.client_thread_id??null,client_turn_id:fold.run.client_turn_id??null,zaip_execution_id:fold.run.execution_id,agent_invocation_id:fold.run.agent_invocation_id??`AINV-${fold.run.run_id.slice("RUN-".length)}`,root_agent_invocation_id:fold.run.root_agent_invocation_id??`AINV-${fold.run.run_id.slice("RUN-".length)}`,parent_agent_invocation_id:fold.run.parent_agent_invocation_id??null,agent_invocation_kind:fold.run.invocation_kind??(fold.run.parent_run_id===null?"orchestrator":"delegated"),delegation_depth:fold.run.delegation_depth??(fold.run.parent_run_id===null?0:null),conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,intake:fold.run.intake??null,started_at:fold.run.occurred_at,terminal_finished_at:fold.finished?.occurred_at??null,finished_at:effectiveRunFinishedAt(fold),...sourceTiming,observed_source_timing:summarizeRunObservedTiming(fold),pricing_segments:fold.effective_usage_records.map(record3=>({event_id:record3.event_id,attributed_spec_id:record3.attributed_spec_id??null,phase:record3.phase,provider:record3.provider,model:record3.model,service_tier:record3.runtime?.service_tier??runtime?.service_tier??null,input_tokens:record3.tokens.input,cached_input_tokens:record3.tokens.cached_input,output_tokens:record3.tokens.output,reasoning_tokens:record3.tokens.reasoning,total_tokens:record3.tokens.total,recorded_usd:record3.cost.usd,recorded_brl:record3.cost.brl,recorded_fx_rate:record3.cost.fx_rate??null,source_started_at:record3.source_started_at??null,source_finished_at:record3.source_finished_at??null,duration_ms:record3.source_started_at&&record3.source_finished_at?Math.max(0,Date.parse(record3.source_finished_at)-Date.parse(record3.source_started_at)):null})),entrypoint_usage:{conversation:aggregate.conversation,planning:aggregate.planning,execution:aggregate.execution,total:usage}}}}}function canonicalAgentName(agent){return agent.startsWith("agent-")?`zaip-agent-${agent.slice("agent-".length)}`:agent}function effectiveConfiguration(fold){const models=new Set([...fold.provider_invocation_records.map(record3=>record3.effective.model),...fold.model_call_records.map(record3=>record3.model),...fold.effective_usage_records.map(record3=>record3.model)].filter(value=>value!==null));const efforts=new Set([...fold.provider_invocation_records.map(record3=>record3.effective.reasoning_effort),...fold.effective_usage_records.map(record3=>record3.runtime?.reasoning_effort??null),...fold.model_call_records.map(record3=>record3.runtime?.reasoning_effort??null)].filter(value=>value!==null));return{effective_model:models.size===1?[...models][0]??null:null,effective_reasoning_effort:efforts.size===1?[...efforts][0]??null:null,effective_config_mixed:models.size>1||efforts.size>1}}function callSummary(fold){const ids=new Set([...fold.model_selection_records.map(record3=>record3.invocation_id),...fold.provider_invocation_records.map(record3=>record3.invocation_id)]);const base={cli_call_count:ids.size===0?null:ids.size,call_count:null,terminal_call_count:null,failed_call_count:null,cancelled_call_count:null};if(fold.model_call_records.length>0)return{...base,call_count:fold.model_call_records.length};if(ids.size===0)return base;return{...base,call_count:ids.size,terminal_call_count:fold.provider_invocation_records.length,failed_call_count:fold.provider_invocation_records.filter(record3=>record3.status==="failed").length,cancelled_call_count:fold.provider_invocation_records.filter(record3=>record3.status==="cancelled").length}}function lifecycleManifestEventFromDecision(decision){return{schema_version:1,event_id:`${decision.id}:${decision.created_at}`,occurred_at:decision.created_at,operation:"upsert",entity:{kind:"decision",id:decision.id,title:decision.title,status:null,risk:null,priority:null,updated_at:decision.created_at,relations:[decision.scope_id],relation_edges:[{target_id:decision.scope_id,type:"references",direction:"outbound",provenance:"explicit",source_locator:`decision:${decision.id}`}],usage:null,data:{origin:decision.origin,scope_type:decision.scope_type,scope_id:decision.scope_id,category:decision.category,created_at:decision.created_at}}}}function relationEdgesFromEntity(entity,relations){return relations.map(target_id=>{const explicit=Object.entries(entity).some(([key,value])=>key.endsWith("_id")&&value===target_id||key.endsWith("_ids")&&Array.isArray(value)&&value.includes(target_id));return{target_id,type:target_id.startsWith("REQ-")||target_id.startsWith("AC-")?"requirement":"references",direction:"outbound",provenance:explicit?"explicit":"derived",source_locator:`record:${String(entity.id)}`}})}function findRunId(value){if(typeof value!=="object"||value===null)return void 0;const record3=value;if(typeof record3.run_id==="string")return record3.run_id;for(const child of Object.values(record3)){const result2=findRunId(child);if(result2!==void 0)return result2}return void 0}function collectRunIds(value){const found=new Set;const visit=candidate=>{if(Array.isArray(candidate)){candidate.forEach(visit);return}if(typeof candidate!=="object"||candidate===null)return;const record3=candidate;if(typeof record3.run_id==="string"&&record3.run_id.startsWith("RUN-")){found.add(record3.run_id)}Object.values(record3).forEach(visit)};visit(value);return[...found]}function findDecision(value){if(typeof value!=="object"||value===null)return void 0;const record3=value;if(typeof record3.id==="string"&&record3.id.startsWith("DEC-")&&typeof record3.created_at==="string"){return record3}for(const child of Object.values(record3)){const result2=findDecision(child);if(result2!==void 0)return result2}return void 0}async function lifecycleManifestBootstrapEvents(composition,filesystem){const[prds,specs,changes,tasks,executions,runs,decisions,assurance]=await Promise.all([composition.prds.list(),composition.specs.list(),composition.changes.list(),composition.tasks.list(),composition.executions.list(),composition.runs.list(),composition.decisions.list(),lifecycleAssuranceBootstrapEvents(filesystem)]);return[...[...prds,...specs,...changes,...tasks,...executions].map(entity=>lifecycleManifestEventFromEntity(entity)),...runs.map(lifecycleManifestEventFromRun),...decisions.map(lifecycleManifestEventFromDecision),...assurance]}async function lifecycleAssuranceBootstrapEvents(filesystem){const paths=await filesystem.listFiles(".agents/records/changes",".md");const events=[];for(const path of paths){const isEvidence=path.includes("/artifacts/evidence/");const isValidation=/\/artifacts\/(?:tests|evals|checks)\//.test(path);if(!isEvidence&&!isValidation)continue;try{const content=await filesystem.readText(path);const artifact=isEvidence?parseMarkdown(content,evidenceArtifactV2Schema).metadata:parseMarkdown(content,validationArtifactV2Schema).metadata;const timestamp12="observed_at"in artifact?artifact.observed_at:artifact.executed_at;events.push(lifecycleManifestEventFromEntity({...artifact,updated_at:timestamp12}))}catch{}}return events}var GRAPH_RESULT_LIMIT,GRAPH_VISIT_LIMIT;var init_lifecycle_manifest_commands=__esm({"src/lifecycle-manifest-commands.ts"(){"use strict";init_src();init_src4();init_src5();init_src8();init_src8();init_src6();init_cli_arguments();init_lifecycle_manifest_active_capture();init_lifecycle_manifest_run_projection();init_lifecycle_manifest_run_usage();init_observed_run_timing();GRAPH_RESULT_LIMIT=50;GRAPH_VISIT_LIMIT=200}});import{execFile as execFile8}from"node:child_process";import{createHash as createHash41}from"node:crypto";import{lstat as lstat7,open as open5,realpath as realpath8}from"node:fs/promises";import{isAbsolute as isAbsolute7,resolve as resolve10,toNamespacedPath}from"node:path";import{promisify as promisify8}from"node:util";function stopReceiptPath(session,turn){return`.local/hooks/stop-${hash3(JSON.stringify([session,turn]))}.json`}async function replayStopReceipt(filesystem,session,turn,options={}){const path=stopReceiptPath(session,turn);const source=JSON.parse(await filesystem.readText(path));if(source.schema_version!==1||source.session_id!==session||source.turn_id!==turn||source.event?.session_id!==session||source.event?.turn_id!==turn)throw new Error("Stop replay identity mismatch");const hook=filesystem.resolve(".codex/hooks/zaip-conversation-lifecycle.mjs");const child=promisify8(execFile8)(process.execPath,[hook,options.automatic?"--recover-previous-turn":"--replay-receipt"],{cwd:filesystem.root,windowsHide:true,timeout:options.automatic?9e3:5e4,maxBuffer:262144});child.child.stdin?.end(JSON.stringify({...source.event,stop_hook_active:true}));await child;const result2=JSON.parse(await filesystem.readText(path));return{session_id:session,turn_id:turn,state:result2.state,error:result2.error??null}}async function assertTrustedStopReceipt(filesystem,session,turn){const receipt=stopReceiptSchema.parse(JSON.parse(await filesystem.readText(stopReceiptPath(session,turn))));if(receipt.session_id!==session||receipt.turn_id!==turn)throw new Error("Stop receipt session/turn mismatch");const age=Date.now()-Date.parse(receipt.observed_at);if(age<-5e3||age>7*864e5)throw new Error("Stop receipt requires a fresh transcript observation");const cursor=receipt.cursor;if(!isAbsolute7(cursor.path))throw new Error("Stop transcript path must be absolute");if(/^(?:\\\\|\/\/)/.test(cursor.path)&&!/^\\\\\?\\[a-z]:\\/i.test(cursor.path))throw new Error("Stop transcript cannot use network or device paths");const identity2=path=>process.platform==="win32"?toNamespacedPath(resolve10(path)).toLowerCase():resolve10(path);const info=await lstat7(cursor.path);if(!info.isFile()||info.isSymbolicLink()||identity2(await realpath8(cursor.path))!==identity2(cursor.path))throw new Error("Stop transcript cannot follow links");const handle=await open5(cursor.path,"r");try{const stat5=await handle.stat();if(stat5.dev!==cursor.dev||stat5.ino!==cursor.ino||stat5.birthtimeMs!==cursor.birthtime_ms||stat5.size<cursor.size||cursor.offset>cursor.size||stat5.size===cursor.size&&(stat5.mtimeMs!==cursor.mtime_ms||stat5.ctimeMs!==cursor.ctime_ms))throw new Error("Stop transcript replaced or truncated after observation");const readProof=async proof=>{if(proof.offset+proof.length>cursor.offset)throw new Error("Stop proof exceeds observed transcript");const buffer=Buffer.alloc(proof.length);const read=await handle.read(buffer,0,buffer.length,proof.offset);if(read.bytesRead!==buffer.length||hash3(buffer)!==proof.sha256)throw new Error("Stop transcript proof mismatch");return buffer};const header=await readProof(cursor.session_proof);const terminal=await readProof(cursor.terminal_proof);await readProof(cursor.anchor);if(cursor.session_proof.offset!==0||header.at(-1)!==10||terminal.at(-1)!==10||cursor.terminal_proof.offset<cursor.session_proof.length)throw new Error("Stop proof must identify complete ordered JSONL records");const first=JSON.parse(header.toString("utf8"));const sessionId=first.type==="session_meta"?first.payload?.id??first.payload?.session_id:first.payload?.type==="session_meta"?first.payload.id??first.payload.session_id:null;const last=JSON.parse(terminal.toString("utf8")).payload;if(sessionId!==session||last?.type!=="task_complete"||last.turn_id!==turn)throw new Error("Stop terminal evidence belongs to another session or turn");const status=last.status==="cancelled"?"cancelled":last.status==="failed"||last.error!=null?"failed":"completed";if(status!==cursor.terminal_status)throw new Error("Stop outcome differs from observed terminal event");const after=await handle.stat();if(stat5.size!==after.size||stat5.mtimeMs!==after.mtimeMs||stat5.ctimeMs!==after.ctimeMs)throw new Error("Stop transcript changed during proof verification");return{run_id:receipt.run_id,status}}finally{await handle.close()}}async function reconcileVerifiedStop(parsed,filesystem,composition,lifecycle,reconcile){requireOptions(parsed.options,["session","turn"]);const session=String(parsed.options.session).trim();const turn=String(parsed.options.turn).trim();const proof=await assertTrustedStopReceipt(filesystem,session,turn);const key=createHash41("sha256").update(JSON.stringify(["codex",session,turn,null,null])).digest("hex");const correlation=JSON.parse(await filesystem.readText(`.local/codex-telemetry-spool/v1/correlations/${key}.json`));if(correlation.schema_version!==1||correlation.agent_path!==null||correlation.thread_id!==session||correlation.turn_id!==turn||correlation.run_id!==proof.run_id)throw new UsageError("Stop correlation does not match exact terminal evidence");const root=await composition.runs.read(proof.run_id);if(root.run.parent_run_id!==null||root.run.client_thread_id!==session||root.run.client_turn_id!==turn||root.run.agent!=="agent-orchestrator"||root.run.run_role!=="orchestrator")throw new UsageError("reconcile-stop requires the exact canonical orchestrator root");if(root.run.task_id===null){return runConversationV2Command("finish",{...parsed,options:{...parsed.options,run:root.run.run_id,status:proof.status,summary:"Codex host turn completed"}},composition,filesystem,lifecycle)}return reconcile(root,composition,lifecycle,proof.status)}var hash3;var init_stop_receipt=__esm({"src/stop-receipt.ts"(){"use strict";init_src();init_cli_arguments();init_run_conversation_v2();hash3=value=>createHash41("sha256").update(value).digest("hex")}});import{createHash as createHash42}from"node:crypto";import{lstat as lstat8,open as open6,realpath as realpath9}from"node:fs/promises";import{isAbsolute as isAbsolute8,resolve as resolve11,toNamespacedPath as toNamespacedPath2}from"node:path";async function verifyStopPersistence(filesystem,composition,session,turn,runId){const proof=await assertTrustedStopReceipt(filesystem,session,turn).catch(()=>{throw new Error("previous_stop_proof_invalid")});const fold=await composition.runs.read(runId);if(proof.run_id!==runId||fold.finished===null||fold.finished.status!==proof.status||fold.run.client_thread_id!==session||fold.run.client_turn_id!==turn||fold.run.parent_run_id!==null||fold.run.run_role!=="orchestrator"||fold.run.agent!=="agent-orchestrator")throw new Error("previous_stop_canonical_not_terminal");if(fold.run.task_id!==null){const task=(await composition.tasks.read(fold.run.task_id)).task;if(!["completed","blocked","failed","cancelled"].includes(task.status))throw new Error("previous_stop_task_not_terminal")}}async function regular(path,limit){if(!isAbsolute8(path)||/^(?:\\\\|\/\/)/.test(path)&&!/^\\\\\?\\[a-z]:\\/i.test(path))throw new Error("previous_stop_unsafe_path");const stat5=await lstat8(path);if(!stat5.isFile()||stat5.isSymbolicLink()||identity(await realpath9(path))!==identity(path)||limit!==void 0&&stat5.size>limit)throw new Error("previous_stop_unsafe_file");return stat5}async function precedingTurn(path,session,current){await regular(path);const handle=await open6(path,"r");try{const stat5=await handle.stat();const read=async(offset,length)=>{const buffer=Buffer.alloc(length);const{bytesRead}=await handle.read(buffer,0,length,offset);if(bytesRead!==length)throw new Error("previous_stop_transcript_changed");return buffer};const header=await read(0,Math.min(stat5.size,1024*1024));const end=header.indexOf(10);if(end<0)throw new Error("previous_stop_header_unavailable");const first=JSON.parse(header.subarray(0,end).toString("utf8"));if(first.type!=="session_meta"||(first.payload?.id??first.payload?.session_id)!==session)throw new Error("previous_stop_session_mismatch");const start=Math.max(0,stat5.size-16*1024*1024);const tail=await read(start,stat5.size-start);const aligned=start===0?tail:tail.subarray(tail.indexOf(10)+1);if(start>0&&tail.indexOf(10)<0)throw new Error("previous_stop_tail_unavailable");const lines2=aligned.toString("utf8").split("\n");lines2.pop();const turns=[];let terminal=false;for(const line of lines2){if(!line.trim())continue;if(Buffer.byteLength(line)>8*1024*1024)throw new Error("previous_stop_line_too_large");const row=JSON.parse(line),payload=row.payload;if((row.type==="turn_context"||payload?.type==="task_started")&&typeof payload?.turn_id==="string"&&payload.turn_id!==turns.at(-1)){turns.push(payload.turn_id);if(turns.length>2)turns.shift();terminal=false}if(["task_complete","turn_aborted"].includes(payload?.type)&&payload.turn_id===current)terminal=true}const after=await handle.stat();if(stat5.size!==after.size||stat5.mtimeMs!==after.mtimeMs||stat5.ctimeMs!==after.ctimeMs)throw new Error("previous_stop_transcript_changed");if(turns.length!==2||turns[1]!==current||terminal)throw new Error("previous_stop_live_turn_unverified");return turns[0]}finally{await handle.close()}}async function recoverPreviousStop(filesystem,invocation2,composition){const session=invocation2.clientThreadId,current=invocation2.clientTurnId,path=invocation2.transcriptPath;if(!session||!current||!path)return{state:"skipped",reason:"previous_stop_identity_unavailable"};let previous,runId;try{previous=await precedingTurn(path,session,current);const receiptFile=filesystem.resolve(stopReceiptPath(session,previous));if(!await filesystem.exists(stopReceiptPath(session,previous)))return{state:"skipped",reason:"previous_stop_receipt_missing",previous_turn_id:previous};await regular(receiptFile,1024*1024);const source=JSON.parse(await filesystem.readText(stopReceiptPath(session,previous)));if(source.schema_version!==1||source.session_id!==session||source.turn_id!==previous||!["pending","persisted"].includes(source.state)||source.event?.hook_event_name!=="Stop"||source.event.session_id!==session||source.event.turn_id!==previous||typeof source.event.cwd!=="string"||identity(source.event.cwd)!==identity(filesystem.root)||typeof source.event.transcript_path!=="string"||identity(source.event.transcript_path)!==identity(path))throw new Error("previous_stop_receipt_invalid");const key=hash4(JSON.stringify(["codex",session,previous,null,null]));const correlationPath=`.local/codex-telemetry-spool/v1/correlations/${key}.json`;await regular(filesystem.resolve(correlationPath),16384);const correlation=JSON.parse(await filesystem.readText(correlationPath));if(correlation.schema_version!==1||correlation.thread_id!==session||correlation.turn_id!==previous||correlation.agent_path!==null||typeof correlation.run_id!=="string")throw new Error("previous_stop_correlation_invalid");const root=(await composition.runs.read(correlation.run_id)).run;if(root.parent_run_id!==null||root.run_role!=="orchestrator"||root.agent!=="agent-orchestrator"||root.client_thread_id!==session||root.client_turn_id!==previous||root.task_id!==correlation.task_id||source.run_id!==void 0&&source.run_id!==root.run_id)throw new Error("previous_stop_root_mismatch");runId=root.run_id;if(source.state==="persisted"){await verifyStopPersistence(filesystem,composition,session,previous,runId);return{state:"persisted",reason:null,previous_turn_id:previous,run_id:runId}}await regular(filesystem.resolve(".codex/hooks/zaip-conversation-lifecycle.mjs"),2*1024*1024);const result2=await replayStopReceipt(filesystem,session,previous,{automatic:true});if(result2.state==="persisted")await verifyStopPersistence(filesystem,composition,session,previous,runId);return{state:result2.state==="persisted"?"persisted":"pending",reason:result2.error,previous_turn_id:previous,run_id:runId}}catch(error51){return{state:"pending",reason:error51 instanceof Error?error51.message:"previous_stop_unavailable",...previous===void 0?{}:{previous_turn_id:previous},...runId===void 0?{}:{run_id:runId}}}}var identity,hash4;var init_previous_stop_recovery=__esm({"src/previous-stop-recovery.ts"(){"use strict";init_stop_receipt();identity=path=>process.platform==="win32"?toNamespacedPath2(resolve11(path)).toLowerCase():resolve11(path);hash4=value=>createHash42("sha256").update(value).digest("hex")}});function preview(parsed,filesystem,layout){return resolveConversationContinuation(parsed,createV2Composition(filesystem,layout),filesystem)}async function capture(parsed,filesystem,layout,write){const invocation2=await resolveRunClientInvocation(filesystem,parsed.options.client??"codex");const recovery=await recoverPreviousStop(filesystem,invocation2,createV2Composition(filesystem,layout));const result2=await withLifecycleCanonicalMutationLock(filesystem,()=>write({invocation:invocation2,recovery}),{timeout_ms:15e3});return{...result2,stop_recovery:recovery}}function command(action,parsed,composition,filesystem,lifecycle,captured){const pending=captured?.recovery.state==="pending"?captured.recovery:void 0;return runConversationV2Command(action,parsed,composition,filesystem,lifecycle,captured===void 0?void 0:{invocation:captured.invocation,pendingRun:pending?.run_id,pendingTurn:pending?.previous_turn_id})}async function invocation(filesystem,client,intake2){return intake2?.invocation??await resolveRunClientInvocation(filesystem,client)}async function openIntakes(composition,client,thread,turn,snapshot,intake2){return(await openThreadIntakes(composition,client,thread,turn,snapshot)).filter(fold=>fold.run.run_id!==intake2?.pendingRun&&fold.run.client_turn_id!==intake2?.pendingTurn)}var init_conversation_stop_intake=__esm({"src/conversation-stop-intake.ts"(){"use strict";init_v2_router();init_conversation_intake_settlement();init_conversation_resolution();init_lifecycle_manifest_commands();init_previous_stop_recovery();init_run_client_invocation();init_run_conversation_v2()}});import{execFile as execFileCallback}from"node:child_process";import{promisify as promisify9}from"node:util";async function runDeveloperIdentityCommand(action,parsed,filesystem){if(action==="identity")action=parsed.positionals[2];if(action==="show")return{identity:await readDeveloperIdentityCache(filesystem)};if(action==="set")action="bootstrap";if(action!=="bootstrap")throw new UsageError("developer identity requires show or bootstrap");return{identity:await resolveDeveloperIdentityForRoot(filesystem,{force:true})}}async function resolveDeveloperIdentityForRoot(filesystem,options={}){const now=options.now??new Date;const cached2=await readDeveloperIdentityCache(filesystem);if(cached2!==null&&!options.force&&!developerIdentityNeedsRevalidation(cached2,now)){return cached2}try{const account=await(options.lookup??authenticatedGithubAccount)();return writeDeveloperIdentityCache(filesystem,verifiedDeveloperIdentity(account,now))}catch(error51){if(cached2!==null)return cachedFallbackDeveloperIdentity(cached2);throw new UsageError(`GitHub bootstrap failed; authenticate with gh and retry (${error51 instanceof Error?error51.message:String(error51)})`)}}async function authenticatedGithubAccount(){try{const{stdout}=await execFile9("gh",["api","user"],{encoding:"utf8"});const parsed=JSON.parse(stdout);if(typeof parsed.id!=="number"||!Number.isSafeInteger(parsed.id)||typeof parsed.login!=="string"||parsed.login.length===0)throw new Error("GitHub user response lacks id/login");return{id:String(parsed.id),login:parsed.login}}catch(error51){throw new Error(`GitHub account lookup failed (${error51 instanceof Error?error51.message:String(error51)})`)}}var execFile9;var init_developer_identity_command=__esm({"src/developer-identity-command.ts"(){"use strict";init_src5();init_cli_arguments();execFile9=promisify9(execFileCallback)}});function validatedDirectAuthorization(parsed,clientInvocation,model){const authorization=parsed.options["direct-authorization"];if(authorization===void 0)return void 0;if(!authorization.trim()||clientInvocation.clientThreadId===null||clientInvocation.clientTurnId===null||clientInvocation.clientTurnId.startsWith("local-")||["unknown","unavailable","manual"].includes(model)){throw new UsageError("Direct execution requires an observed Task-scoped delivery root and explicit authorization")}return authorization}var init_direct_authorization=__esm({"src/direct-authorization.ts"(){"use strict";init_cli_arguments()}});import{execFile as execFile10}from"node:child_process";import{promisify as promisify10}from"node:util";async function assertGitDeliveryReady(root){const git6=async(...args)=>(await exec2("git",args,{cwd:root,windowsHide:true,encoding:"utf8",timeout:1e4})).stdout.trim();await git6("--version").catch(()=>{throw new Error("git-unavailable: Install Git before starting delivery.")});const inside=await git6("rev-parse","--is-inside-work-tree").catch(()=>"");if(inside!=="true")throw new Error("git-repository-required: Initialize or open the selected Git repository before starting delivery.");const head=await git6("rev-parse","--verify","HEAD").catch(()=>"");if(!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(head))throw new Error("git-head-required: Create the initial repository commit before starting delivery.");await git6("var","GIT_AUTHOR_IDENT").catch(()=>{throw new Error("git-identity-required: Configure your Git commit name and email before starting delivery.")})}var exec2;var init_git_delivery_preflight=__esm({"src/git-delivery-preflight.ts"(){"use strict";exec2=promisify10(execFile10)}});async function executionForTask(task,repositories){const canonicalExecutionId=task.plan_ref?.execution_id??task.prepared_plan?.execution_id??null;if(canonicalExecutionId!==null){const{execution}=await repositories.executions.read(canonicalExecutionId);if(!execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id)){throw new LifecycleGateError(`Execution ${canonicalExecutionId} does not contain Task/Change ${task.id}/${task.change_id}`)}return execution}const executions=(await repositories.executions.list()).filter(execution=>execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id));if(executions.length!==1){throw new LifecycleGateError(`Task ${task.id} must resolve to exactly one Execution; found ${executions.length}`)}return executions[0]}async function executionForCompletionRun(task,canonicalExecution,run,repositories){if(run.run.execution_id===canonicalExecution.id)return canonicalExecution;if(run.run.continuation_of_run_id===null||run.run.execution_id===null){return canonicalExecution}const{execution}=await repositories.executions.read(run.run.execution_id);const ownsTask=execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id);if(execution.kind!=="delivery"||execution.origin.type!=="task"||execution.origin.task_id!==task.id||!ownsTask){throw new LifecycleGateError(`Continuation Run ${run.run.run_id} Execution ${execution.id} does not own Task/Change ${task.id}/${task.change_id}`)}return execution}function assertCompletedRunAttribution(run,task,executionId){if(run.finished?.status!=="completed"){throw new LifecycleGateError(`Run ${run.run.run_id} must be completed`)}assertRunAttribution(run,task,executionId)}function assertRunAttribution(run,task,executionId){const mismatches=[(run.records?.findLast(record3=>"phase"in record3)?.phase??run.run.phase)==="execution"||run.run.phase==="planning"&&run.run.work_type==="rework"?null:"phase",run.run.execution_id===executionId?null:"execution_id",run.run.task_id===task.id?null:"task_id",run.run.change_id===task.change_id?null:"change_id"].filter(value=>value!==null);if(mismatches.length>0){throw new LifecycleGateError(`Run ${run.run.run_id} attribution mismatch: ${mismatches.join(", ")}`)}}var init_lifecycle_run_attribution=__esm({"src/lifecycle-run-attribution.ts"(){"use strict";init_lifecycle_assurance_v2()}});async function readReleaseCycle(filesystem){if(!await filesystem.exists(RELEASE_CYCLE_PATH))return null;let value;try{value=JSON.parse(await filesystem.readText(RELEASE_CYCLE_PATH))}catch{throw new UsageError("Release cycle configuration is invalid")}if(value.schema_version!==1||!releaseId.test(value.current_release??"")||!["open","frozen"].includes(value.state??""))throw new UsageError("Release cycle configuration must define schema 1, current_release and state");return value}async function assertCurrentReleaseForExecution(filesystem,targetRelease,label){const cycle=await readReleaseCycle(filesystem);if(cycle===null){if(targetRelease)throw new UsageError("Named release requires configured current release");return}if(cycle.state!=="open")throw new UsageError(`Current release ${cycle.current_release} is frozen; ${label} cannot start`);if(targetRelease===null||targetRelease===void 0)throw new UsageError(`${label} has no target release; assign the current release before execution`);if(targetRelease!==cycle.current_release)throw new UsageError(`${label} targets release ${targetRelease}; only current release ${cycle.current_release} may become ready or execute`)}async function releaseTargetForDraft(filesystem,requested){const cycle=await readReleaseCycle(filesystem);if(requested!==void 0&&!releaseId.test(requested))throw new UsageError("Target release must use major.minor, for example 4.6");if(requested!==void 0&&cycle!==null){const[major=0,minor=0]=requested.split(".").map(Number);const[currentMajor=0,currentMinor=0]=cycle.current_release.split(".").map(Number);if(major<currentMajor||major===currentMajor&&minor<currentMinor)throw new UsageError("A new draft cannot target a release older than the current release")}return requested??cycle?.current_release??null}async function taskFirstRelease(filesystem,requested){const target=await releaseTargetForDraft(filesystem,requested);await assertCurrentReleaseForExecution(filesystem,target,"Task-first work");return target}async function assertTaskStartRelease(filesystem,repositories,id){const{task}=await repositories.tasks.read(id);if(["executing","verifying"].includes(task.status))return;const execution=await executionForTask(task,repositories);const target=task.target_release??(execution.origin.type==="prd"?(await repositories.prds.read(execution.origin.prd_id)).prd.target_release:execution.origin.type==="spec"?(await repositories.specs.read(execution.origin.spec_id)).spec.target_release:null);await assertCurrentReleaseForExecution(filesystem,target,"Task")}var RELEASE_CYCLE_PATH,releaseId;var init_release_cycle=__esm({"src/release-cycle.ts"(){"use strict";init_cli_arguments();init_lifecycle_run_attribution();RELEASE_CYCLE_PATH=".agents/config/release-cycle.json";releaseId=/^(?:[1-9]\d*)\.(?:0|[1-9]\d*)$/}});function taskAssuranceRiskSignalsOption(value){if(value===void 0)return void 0;try{if(Buffer.byteLength(value,"utf8")>4096)throw new Error("size");return assuranceRiskSignalsSchema.parse(JSON.parse(value))}catch{throw new UsageError("--assurance-risk-signals requires a valid risk-signals JSON object (max 4 KiB)")}}var init_task_assurance_options=__esm({"src/task-assurance-options.ts"(){"use strict";init_src7();init_cli_arguments()}});async function createTaskAndChangeAtomically(filesystem,composition,taskInput){const created=new Map;try{const task=await composition.tasks.createDraft(taskInput);created.set(composition.tasks.path(task.id),composition.tasks.serialize(task));const change=await composition.changes.createDraft({id:task.change_id,title:task.title,risk:task.risk,taskId:task.id,requirementIds:task.requirement_ids,acceptanceIds:task.acceptance_ids});return{task,change}}catch(error51){await rollbackTaskChangeCreation(filesystem,created);throw error51}}async function rollbackTaskChangeCreation(filesystem,created){for(const[path,content]of[...created].reverse()){await filesystem.removeFileIfContentMatches(path,content)}}var init_task_change_creation=__esm({"src/task-change-creation.ts"(){"use strict"}});function compactRunAggregate(aggregate){const bucket=value=>({usage_event_count:value.usage_event_count,tokens:value.tokens,cost:value.cost,coverage:value.coverage});return{scope_id:aggregate.scope_id,run_count:aggregate.run_count,run_coverage:aggregate.run_coverage,attribution:aggregate.attribution,conversation:bucket(aggregate.conversation),planning:bucket(aggregate.planning),execution:bucket(aggregate.execution),total:bucket(aggregate.total),work_types:{new:bucket(aggregate.work_types.new),rework:bucket(aggregate.work_types.rework)}}}function runV2CostInput(fold){return{run:{run_id:fold.run.run_id,attribution_status:fold.run.attribution_status,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,work_type:fold.run.work_type},records:fold.records,effective_usage_records:fold.effective_usage_records}}function runV2Summary(fold,composition){const usage=aggregateRunV2Usage([runV2CostInput(fold)],fold.run.run_id).total;const callIds=new Set([...fold.model_selection_records.map(record3=>record3.invocation_id),...fold.provider_invocation_records.map(record3=>record3.invocation_id)]);return{id:fold.run.run_id,status:fold.status,created_at:fold.run.occurred_at,finished_at:fold.finished?.occurred_at??null,phase:latestRunV2Phase(fold.records),run_role:effectiveRunV2Role(fold.run),parent_run_id:fold.run.parent_run_id,entrypoint:fold.run.entrypoint,work_type:fold.run.work_type,intake:fold.run.intake??null,agent:fold.run.agent,agent_name:fold.run.agent_name??(fold.run.agent.startsWith("agent-")?`zaip-agent-${fold.run.agent.slice("agent-".length)}`:fold.run.agent),model:fold.run.model,reasoning_effort:fold.run.reasoning_effort??fold.model_selection_records[0]?.requested.reasoning_effort??null,call_count:callIds.size===0?null:callIds.size,client_thread_id:fold.run.client_thread_id??null,client_turn_id:fold.run.client_turn_id??null,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,usage:{event_count:usage.usage_event_count,tokens:usage.tokens,cost:usage.cost,coverage:usage.coverage},artifact_path:composition.runs.path(fold.run.run_id)}}var init_run_conversation_summary=__esm({"src/run-conversation-summary.ts"(){"use strict";init_src4();init_src5();init_conversation_intake_settlement()}});import{execFile as execFile11}from"node:child_process";import{promisify as promisify11}from"node:util";function reconciledHistoricalScope(commit,path){return commit==="967ca013240808b727bc7df3fa968213df1d16d8"&&path==="pnpm-workspace.yaml"}async function policyGit(root,...args){return(await exec3("git",["--literal-pathspecs",...args],{cwd:root,encoding:"utf8",windowsHide:true,timeout:15e3,maxBuffer:16*1024*1024})).stdout}function requiresTaskIdentity(path){return!path.startsWith(".agents/records/")&&!path.startsWith(".local/")}function trailers(message){const result2=new Map;const block2=message.replace(/\r\n/g,"\n").trimEnd().split(/\n\s*\n/).at(-1)??"";for(const line of block2.split("\n")){const match=/^(ZAIP-[A-Za-z-]+): (\S+)$/.exec(line);if(line.startsWith("ZAIP-")&&(!match||!allowedTrailers.has(match[1]??"")))throw new Error("Unknown or malformed ZAIP trailer");if(!match)continue;const key=match[1];if(result2.has(key))throw new Error(`Duplicate commit trailer: ${key}`);result2.set(key,match[2])}if(message.split(/\r?\n/).filter(line=>line.startsWith("ZAIP-")).length!==result2.size)throw new Error("ZAIP identity must occur exactly once in the final trailer block");return result2}async function readCanonicalTaskCommit(filesystem,taskId,executionId,agent){const layout=await loadWorkspaceLayout(filesystem);const{task}=await new TaskV2Repository(filesystem,layout).read(taskId);const{change}=await new ChangeV2Repository(filesystem,layout).read(task.change_id);const{execution}=await new ExecutionV2Repository(filesystem,layout).read(executionId);if(task.id!==taskId||change.id!==task.change_id||execution.id!==executionId)throw new Error("Commit record ID does not match its requested canonical path");if(task.plan_hash===null||!["executing","verifying","completed"].includes(task.status))throw new Error("Product commit requires a materialized Task delivery");if(!change.task_ids.includes(task.id)||!execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===change.id))throw new Error("Commit Task, Change and delivery Execution are not causally linked");const source=change.source;if(source.type==="task"&&source.task_id!==task.id)throw new Error("Standalone Change belongs to a different Task");const specId=source.type==="task"?null:source.spec_id;let prdId=source.type==="prd"?source.prd_id:null;if(specId!==null){const{spec}=await new DeliverySpecV2Repository(filesystem,layout).read(specId);if(spec.id!==specId)throw new Error("Commit SPEC does not match its canonical path");if(source.type==="prd"&&spec.prd_id!==prdId)throw new Error("SPEC and PRD do not match");prdId=spec.prd_id}if(prdId!==null){const{prd}=await new PrdV2Repository(filesystem,layout).read(prdId);if(prd.id!==prdId)throw new Error("Commit PRD does not match its canonical path")}const identity2={agent,title:task.title,task_id:task.id,change_id:change.id,execution_id:execution.id,prd_id:prdId,spec_id:specId};const recordPaths=[layout.activePath("task",task.id),layout.activePath("change",change.id),layout.activePath("execution",execution.id)];if(specId)recordPaths.push(layout.activePath("spec",specId));if(prdId)recordPaths.push(layout.activePath("prd",prdId));return{identity:identity2,recordPaths,writeScopes:task.write_scopes}}async function validateTaskCommit(input){const paths=input.paths.filter(requiresTaskIdentity);if(paths.length===0)return{valid:true,kind:"records-only"};const refs=trailers(input.message);const taskId=refs.get("ZAIP-Task");const executionId=refs.get("ZAIP-Execution");const agent=refs.get("ZAIP-Agent");if(!taskId||!executionId||!["CODEX","CLAUDE"].includes(agent??""))throw new Error("Product commit requires a real Task, Execution and CODEX/CLAUDE agent. Use task commit TASK --run RUN --files PATHS; never select the latest global Task.");const filesystem=input.filesystem??new CommitTreeFileSystem(input.root,input.tree??"");const canonical=await readCanonicalTaskCommit(filesystem,taskId,executionId,agent);const expected=formatAutonomousTaskCommit(canonical.identity);if(input.message.split(/\r?\n/)[0]!==expected.split("\n")[0])throw new Error(`Commit subject must be: ${expected.split("\n")[0]}`);const expectedRefs=trailers(expected);const productCommit=refs.get("ZAIP-Product-Commit");if(productCommit!==void 0){if(!/^[a-f0-9]{40}$/.test(productCommit))throw new Error("Invalid ZAIP-Product-Commit");const productRefs=trailers(await policyGit(input.root,"show","-s","--format=%B",productCommit));if(productRefs.get("ZAIP-Task")!==taskId)throw new Error("Product commit belongs to a different Task")}for(const key of["ZAIP-Task","ZAIP-Change","ZAIP-Execution","ZAIP-Agent","ZAIP-PRD","ZAIP-SPEC"])if(refs.get(key)!==expectedRefs.get(key))throw new Error(`Commit trailer does not match canonical records: ${key}`);const outside2=paths.filter(path=>!canonical.writeScopes.some(scope=>workspaceScopeMatches(scope,path))&&!reconciledHistoricalScope(input.tree,path));if(outside2.length)throw new Error(`Commit paths outside Task write scopes: ${outside2.join(", ")}`);return{valid:true,kind:"task",task_id:canonical.identity.task_id}}async function stagedCommitPaths(root){return(await policyGit(root,"diff","--cached","--name-only","--no-renames","-z","--")).split("\0").filter(Boolean)}async function validateCommitRange(root,base,head){const resolveCommit=async ref=>(await policyGit(root,"rev-parse","--verify",`${ref}^{commit}`)).trim();const[start,end]=await Promise.all([resolveCommit(base),resolveCommit(head)]);await policyGit(root,"merge-base","--is-ancestor",start,end);const commits=(await policyGit(root,"rev-list","--reverse",`${start}..${end}`)).trim().split("\n").filter(Boolean);for(const commit of commits){const parents=(await policyGit(root,"show","-s","--format=%P",commit)).trim().split(" ").filter(Boolean);const paths=parents.length?(await policyGit(root,"diff","--name-only","--no-renames","-z",parents[0],commit,"--")).split("\0").filter(Boolean):(await policyGit(root,"diff-tree","--root","--no-commit-id","--name-only","--no-renames","-r","-z",commit)).split("\0").filter(Boolean);await validateTaskCommit({root,tree:commit,paths,message:await policyGit(root,"show","-s","--format=%B",commit)})}return{valid:true,checked:commits.length}}var exec3,allowedTrailers,CommitTreeFileSystem;var init_commit_policy=__esm({"src/commit-policy.ts"(){"use strict";init_src();init_src6();init_src7();init_lifecycle_gate_helpers();exec3=promisify11(execFile11);allowedTrailers=new Set(["ZAIP-Task","ZAIP-Change","ZAIP-Execution","ZAIP-Agent","ZAIP-PRD","ZAIP-SPEC","ZAIP-Product-Commit"]);CommitTreeFileSystem=class extends WorkspaceFileSystem{constructor(root,tree){super(root);this.tree=tree}tree;async readText(path){this.resolve(path);return policyGit(this.root,"show",`${this.tree}:${path}`)}async exists(path){this.resolve(path);try{await policyGit(this.root,"cat-file","-e",`${this.tree}:${path}`);return true}catch{return false}}}}});function assertChangedFilesInScope(task,changedFiles){const outside2=changedFilesOutsideTaskScopes(task.write_scopes,changedFiles);if(outside2.length>0){throw new LifecycleGateError(`Task ${task.id} changed files outside write scopes: ${outside2.join(", ")}`)}}async function assertChangedFilesInScopeOrCausalRecords(task,changedFiles,filesystem,executionId){const isLifecycleRecord=path=>path.startsWith(".agents/records/")||path.startsWith(".agents/data/");const outside2=changedFilesOutsideTaskScopes(task.write_scopes,changedFiles);const outsideProduct=outside2.filter(path=>!isLifecycleRecord(path));if(outsideProduct.length>0){throw new LifecycleGateError(`Task ${task.id} changed files outside write scopes: ${outsideProduct.join(", ")}`)}const records=outside2.filter(isLifecycleRecord);if(records.length===0)return;let causalRecords;try{const canonical=await readCanonicalTaskCommit(filesystem,task.id,executionId,"CODEX");causalRecords=new Set(canonical.recordPaths)}catch{throw new LifecycleGateError(`Task ${task.id} has no validated causal commit records`)}const unrelated=records.filter(path=>!causalRecords.has(path));if(unrelated.length>0){throw new LifecycleGateError(`Task ${task.id} changed files outside causal records: ${unrelated.join(", ")}`)}}var init_lifecycle_changed_files=__esm({"src/lifecycle-changed-files.ts"(){"use strict";init_commit_policy();init_lifecycle_assurance_v2();init_lifecycle_gate_helpers()}});async function assertFinalizationCandidatePreflight(parent,outcome,evidenceIds,changedFiles,composition){if(parent.run.execution_kind!=="delivery")return;const taskId=parent.run.task_id;if(taskId===null)return;const executionId=parent.run.execution_id;if(executionId===null)throw new LifecycleGateError("Gui Task decision requires a delivery Execution");const{task}=await composition.tasks.read(taskId).catch(()=>{throw new LifecycleGateError(`Gui responsible Task is unavailable: ${taskId}`)});await assertChangedFilesInScopeOrCausalRecords(task,changedFiles,composition.filesystem,executionId);if(outcome!=="completed")return;if(!await hasPassedTypedEvidenceForRun(parent,evidenceIds,composition,await composition.runs.list())){throw new LifecycleGateError("finalization-evidence: completed Gui decision requires passed typed Evidence linked to the same Task, Change, Execution, and Run and one candidate")}const configured=composition.layout.projectConfig?.assurance;const config2=configured?.version===1?configured:{standard_depth:"auto",require_final_commit:false};if(!effectiveTaskAssurance(task,config2).require_final_commit)return;const bundle=await readAssuranceBundle(composition.filesystem,composition.layout,[task],evidenceIds);await requireFinalProductCandidate(composition.filesystem.root,bundle.validations,bundle.evidences,task.write_scopes,task.id,changedFiles)}var init_finalization_candidate_preflight=__esm({"src/finalization-candidate-preflight.ts"(){"use strict";init_lifecycle_assurance_v2();init_lifecycle_changed_files();init_run_finalization_evidence_v2()}});function assertFinalizationEvidenceInput(ids){if(ids.some(id=>!/^EVD-[A-Z0-9-]+$/.test(id))){throw new UsageError("Finalization --evidence accepts comma-separated EVD IDs only, not JSON, Decision IDs or file paths")}return ids}var init_finalization_evidence_input=__esm({"src/finalization-evidence-input.ts"(){"use strict";init_cli_arguments()}});function activeRunIds(value){if(typeof value!=="object"||value===null||value.schema_version!==1||!Array.isArray(value.items))return[];return value.items.flatMap(item=>{if(typeof item!=="object"||item===null)return[];const candidate=item;return candidate.kind==="run"&&candidate.status==="running"&&typeof candidate.id==="string"?[candidate.id]:[]})}function activeRunWindow(ids,now=Date.now(),limit=32){if(!Number.isSafeInteger(limit)||limit<1||limit>32)throw new Error("Active telemetry limit must be an integer between 1 and 32");if(ids.length===0)return ids;const minute=Math.floor(now/6e4);const start=minute*(ids.length<=limit?1:limit)%ids.length;return Array.from({length:Math.min(limit,ids.length)},(_value,index)=>ids[(start+index)%ids.length])}var init_v2_run_active_window=__esm({"src/source-size-cli/v2-run-active-window.ts"(){"use strict"}});function recentTelemetrySegmentFinder(list=listRecentCodexSegments){const sessions=new Map;return async(root,keys2,options={})=>{const key=JSON.stringify([root,options.threadId??null,options.agentPath??null,options.parentThreadId??null,options.transcriptPath??null]);let pending=sessions.get(key);if(pending===void 0){pending=list(root,new Set,{...options,turnId:null,startedAfter:null});sessions.set(key,pending)}return[...await pending].filter(segment2=>!keys2.has(segment2.segmentKey)&&segment2.turnId===options.turnId&&(!options.requireTaskComplete||segment2.terminalType==="task_complete")).sort((left,right)=>(left.finishedAt??left.startedAt??"").localeCompare(right.finishedAt??right.startedAt??"")).at(-1)??null}}async function captureActiveRunTelemetry(parsed,composition,filesystem){if(!parsed.flags.has("disable-codex-raw"))throw new UsageError("run usage --active requires --disable-codex-raw");const activeIds=activeRunIds(await new LifecycleManifestStore(filesystem).readActiveWork());const captured=[];for(const id of activeRunWindow(activeIds,Date.now(),numberOption(parsed.options.limit,32))){const fold=await composition.runs.read(id);if(fold.finished===null&&isCodexTelemetryClient(fold.run.client)&&fold.run.client_turn_id!==null){const current=await recordCodexTelemetryIfAvailable(fold,composition,filesystem);captured.push({run_id:id,captured:current.records.length>fold.records.length})}}return{telemetry:{mode:"active_exact_session",captured},artifact_path:null}}function recentTelemetryRunIds(entities,now=Date.now()){const cutoff=now-72*60*60*1e3;return entities.filter(entity=>{const data2=entity.data;return entity.kind==="run"&&data2!==null&&Date.parse(entity.updated_at)>=cutoff&&typeof data2.client==="string"&&isCodexTelemetryClient(data2.client)&&typeof data2.client_thread_id==="string"&&data2.client_thread_id.length>0&&typeof data2.client_turn_id==="string"&&data2.client_turn_id.length>0&&(entity.status==="running"||entity.usage?.total_tokens==null||data2.call_coverage==="unavailable")}).map(entity=>entity.id).sort()}async function captureRecentRunTelemetry(parsed,composition,filesystem,capture2=recordCodexTelemetryIfAvailable){if(!parsed.flags.has("disable-codex-raw"))throw new UsageError("run usage --recent requires --disable-codex-raw");if(parsed.flags.has("active"))throw new UsageError("Choose only one telemetry window: --active or --recent");const ids=recentTelemetryRunIds(await new LifecycleManifestStore(filesystem).readEntities("run"));const limit=numberOption(parsed.options.limit,32);const window=activeRunWindow(ids,Date.now(),limit);if(ids.length>512)throw new UsageError("Recent telemetry backlog exceeds 512 Runs; capture is incomplete");const selected=parsed.flags.has("drain")?ids:window;const captured=[];if(capture2===recordCodexTelemetryIfAvailable){const folds=[];for(const id of selected)folds.push(await composition.runs.read(id));const eligible=folds.filter(fold=>isCodexTelemetryClient(fold.run.client)&&fold.run.client_turn_id!==null&&fold.run.client_thread_id!==null);const current=await recordCodexTelemetryBatch(eligible,composition,filesystem,recentTelemetrySegmentFinder());for(const[index,fold]of eligible.entries())captured.push({run_id:fold.run.run_id,captured:(current[index]?.records.length??0)>fold.records.length})}else{for(let offset=0;offset<selected.length;offset+=limit){for(const id of selected.slice(offset,offset+limit)){const fold=await composition.runs.read(id);if(!isCodexTelemetryClient(fold.run.client)||fold.run.client_turn_id===null||fold.run.client_thread_id===null)continue;const current=await capture2(fold,composition,filesystem);captured.push({run_id:id,captured:current.records.length>fold.records.length})}}}return{telemetry:{mode:"recent_exact_session",captured,candidate_count:ids.length,complete:selected.length===ids.length},artifact_path:null}}var init_recent_run_telemetry=__esm({"src/recent-run-telemetry.ts"(){"use strict";init_src4();init_src8();init_cli_arguments();init_record_codex_telemetry();init_v2_run_active_window()}});async function settleInteractionExecutionForRun(run,composition,finalizationBlockReason){if(run.run.execution_id===null)return null;let execution=(await composition.executions.read(run.run.execution_id)).execution;if(execution.kind!=="interaction")return null;if(run.finished?.status==="cancelled"){return["running","paused","verifying"].includes(execution.status)?composition.executions.transition(execution.id,"cancelled","Run explicitly cancelled"):execution}if(finalizationBlockReason!==null){return["running","paused","verifying"].includes(execution.status)?composition.executions.transition(execution.id,"blocked",null,void 0,finalizationBlockReason):execution}if(execution.status==="running"){execution=await composition.executions.transition(execution.id,"verifying")}return execution.status==="verifying"?composition.executions.transition(execution.id,"completed","Interaction finalized"):execution}var init_v2_run_interaction_execution=__esm({"src/source-size-cli/v2-run-interaction-execution.ts"(){"use strict"}});async function cancelTaskRunsForHuman(taskId,composition,parsed){return composition.runs.withUsageAttributionLock(async()=>{const candidates=await composition.runs.list();const roots2=candidates.filter(fold=>fold.finished===null&&fold.run.parent_run_id===null&&fold.run.task_id===taskId);for(const root of roots2){await cancelActiveDescendantRuns(activeDescendantRuns(root.run.run_id,candidates),composition,parsed);await cancelActiveDescendantRuns([root],composition,parsed)}return roots2.map(root=>root.run.run_id)})}async function cancelActiveDescendantRuns(descendants,composition,parsed){for(const descendant of[...descendants].reverse()){let current=await composition.runs.read(descendant.run.run_id);if(current.finished!==null)continue;if(current.effective_usage_records.length===0){const usage=unavailableUsageRecord(current,parsed,current.records.length+1);await composition.runs.appendRecord(usage);current=foldRunV2Records([...current.records,usage])}const record3=runFinishedV2Schema.parse({schema_version:2,event_id:runV2EventId(current.run.run_id,current.records.length+1),run_id:current.run.run_id,sequence:current.records.length+1,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status:"cancelled"});foldRunV2Records([...current.records,record3]);await composition.runs.appendRecord(record3)}}var init_v2_run_cancellation_and_aggregate=__esm({"src/source-size-cli/v2-run-cancellation-and-aggregate.ts"(){"use strict";init_src4();init_src5();init_run_conversation_v2();init_run_hierarchy()}});function rootRunStartConflicts(existing,input,explicitConversationId,explicitRunId){const actual=existing.run;const candidates=[["phase",actual.phase,input.phase],["entrypoint",actual.entrypoint,input.entrypoint],["work-type",actual.work_type,input.workType],["agent",actual.agent,input.agent],["provider",actual.provider,input.provider],["model",actual.model,input.model],["reasoning-effort",actual.reasoning_effort??null,input.reasoningEffort??null],["execution",actual.execution_id,input.executionId??null],["task",actual.task_id,input.taskId??null],["spec",actual.spec_id,input.specId??null],["prd",actual.prd_id,input.prdId??null],["change",actual.change_id,input.changeId??null],["continuation",actual.continuation_of_run_id,input.continuationOfRunId??null],["retry",actual.retry_of_run_id,input.retryOfRunId??null],["purpose",actual.run_purpose??null,input.runPurpose??null],["execution-kind",actual.execution_kind??null,input.executionKind??null],["direct-authorization",actual.direct_execution_authorization??null,input.directExecutionAuthorization??null],["run-role",effectiveRunV2Role(actual),input.runRole??(input.phase==="execution"?"orchestrator":"intake")]];if(existing.finished!==null)candidates.push(["terminal",existing.finished.status,"running"]);if(explicitRunId!==void 0)candidates.push(["id",actual.run_id,explicitRunId]);if(explicitConversationId!==void 0){candidates.push(["conversation",actual.conversation_id,input.conversationId])}return candidates.filter(([,left,right])=>left!==right).map(([field])=>field)}async function assertTaskExecutionIntakeCompatibleBeforeMutation(filesystem,composition,taskId,executionId){const invocation2=await resolveRunClientInvocation(filesystem,"codex");const intake2=await findIntakeForExactTurn(composition,"codex",invocation2);if(intake2===null)return;if(intake2.run.task_id===taskId&&intake2.run.execution_id===executionId)return;throw new UsageError(`Exact client turn is already captured by intake Run ${intake2.run.run_id} (Task ${intake2.run.task_id??"none"}, Execution ${intake2.run.execution_id??"none"}); it cannot start delivery for Task ${taskId} and Execution ${executionId}. Start delivery from a new observed client turn.`)}var init_execution_intake_compatibility=__esm({"src/execution-intake-compatibility.ts"(){"use strict";init_src5();init_cli_arguments();init_conversation_intake();init_run_client_invocation()}});import{posix as posix4}from"node:path";async function assertTaskEvidenceCoverage(context,task,result2){if(result2.evidence_ids.length===0){throw new LifecycleGateError(`Task ${task.id} requires at least one Evidence`)}const changeDirectory=posix4.dirname(context.layout.activePath("change",task.change_id));const mainDocuments=[await context.filesystem.readText(context.layout.activePath("change",task.change_id))];const executions=(await context.repositories.executions.list()).filter(execution=>execution.dag.nodes.some(node=>node.task_id===task.id));for(const execution of executions){mainDocuments.push(await context.filesystem.readText(context.layout.activePath("execution",execution.id)))}const documents=[];for(const evidenceId2 of result2.evidence_ids){const path=`${changeDirectory}/artifacts/evidence/${evidenceId2}.md`;const candidates=mainDocuments.filter(document=>containsIdentifier(document,evidenceId2)&&containsIdentifier(document,task.id));if(await context.filesystem.exists(path)){candidates.push(`${evidenceId2}
+`;if(Buffer.byteLength(serialized,"utf8")>64*1024)throw new Error("Unmatched Codex telemetry envelope exceeds the 64 KiB sanitized limit");try{await filesystem.writeTextAtomicExclusive(`.local/codex-telemetry-spool/v1/unmatched/${digest7.slice(0,2)}/${digest7}.json`,serialized)}catch(error51){if(!(error51 instanceof Error&&"code"in error51&&error51.code==="EEXIST"))throw error51}}function sanitizeAppServerNotification(input,capturedAt){const notification=hostObject(input,"Codex app-server notification");const method=String(notification.method);if(!["item/completed","rawResponse/completed","thread/tokenUsage/updated","error","turn/completed"].includes(method))return null;const params=hostObject(notification.params,`${method} params`);const threadId=hostString(params.threadId,`${method} threadId`);const rawAgentPath=params.agentPath??params.agent_path;const agentPath=rawAgentPath===void 0?null:hostString(rawAgentPath,`${method} agentPath`);const occurredAt=hostTimestamp(notification.emittedAtMs);const wrap=(turnId2,event)=>({threadId,turnId:turnId2,agentPath,event:{source:"codex_app_server",source_occurred_at:occurredAt,captured_at:capturedAt,coverage:"complete",provider:null,model:null,runtime:{reasoning_effort:null,service_tier:null},latency_ms:null,context_stats:null,...event}});if(method==="item/completed"){const turnId2=hostString(params.turnId,`${method} turnId`);const item=hostObject(params.item,`${method} item`);return wrap(turnId2,{event_kind:"response",source_method:method,stream_boundary:"item_completed",source_event_key:hostSourceKey(`${threadId}:${turnId2}:item:${hostString(item.id,`${method} item id`)}`,"item"),source_occurred_at:hostTimestamp(params.completedAtMs)??occurredAt,tokens:null,status:null,discarded_counts:discardedItem(String(item.type??""),item)})}if(method==="rawResponse/completed"){const turnId2=hostString(params.turnId,`${method} turnId`);return wrap(turnId2,{event_kind:"response",source_method:method,stream_boundary:"response_completed",source_event_key:hostSourceKey(`${threadId}:${turnId2}:raw-response:${hostString(params.responseId,`${method} responseId`)}`,"response"),tokens:params.usage===null?null:hostTokens(params.usage,method),status:null,discarded_counts:{...emptyDiscarded(),response_text:Number(typeof params.output==="string")}})}if(method==="thread/tokenUsage/updated"){const turnId2=hostString(params.turnId,`${method} turnId`);const tokens2=hostTokens(hostObject(params.tokenUsage,`${method} tokenUsage`).total,method);const suffix=notification.emittedAtMs===void 0?hostDigest(JSON.stringify(tokens2)).slice(0,24):String(notification.emittedAtMs);return wrap(turnId2,{event_kind:"usage",source_method:method,stream_boundary:"usage_updated",source_event_key:hostSourceKey(`${threadId}:${turnId2}:token-usage:${suffix}`,"usage"),tokens:tokens2,status:null,discarded_counts:emptyDiscarded()})}if(method==="error"){const turnId2=hostString(params.turnId,`${method} turnId`);const error52=isHostObject(params.error)?params.error:{};const suffix=notification.emittedAtMs===void 0?hostDigest(JSON.stringify([params.willRetry===true,error52.codexErrorInfo??null])).slice(0,24):String(notification.emittedAtMs);return wrap(turnId2,{event_kind:"error",source_method:method,stream_boundary:"error",source_event_key:hostSourceKey(`${threadId}:${turnId2}:error:${suffix}`,"error"),tokens:null,status:params.willRetry===true?null:"failed",will_retry:params.willRetry===true,discarded_counts:{...emptyDiscarded(),secrets:Number(typeof error52.message==="string")+Number(typeof error52.additionalDetails==="string")}})}const turn=hostObject(params.turn,"turn/completed turn");const turnId=hostString(turn.id,"turn/completed turn id");if(!["completed","failed","interrupted"].includes(String(turn.status)))throw new Error(`turn/completed has non-terminal status: ${String(turn.status)}`);const discarded=(Array.isArray(turn.items)?turn.items.filter(isHostObject):[]).map(item=>discardedItem(String(item.type??""),item)).reduce(addDiscarded,emptyDiscarded());const error51=isHostObject(turn.error)?turn.error:{};return wrap(turnId,{event_kind:"terminal",source_method:"turn/completed",stream_boundary:"turn_completed",source_event_key:hostSourceKey(`${threadId}:${turnId}:terminal`,"terminal"),source_occurred_at:hostTimestamp(typeof turn.completedAt==="number"?turn.completedAt*1e3:turn.completedAt)??occurredAt,tokens:null,status:turn.status==="interrupted"?"cancelled":turn.status,latency_ms:Number.isSafeInteger(turn.durationMs)&&Number(turn.durationMs)>=0?Number(turn.durationMs):null,discarded_counts:{...discarded,secrets:discarded.secrets+Number(typeof error51.message==="string")+Number(typeof error51.additionalDetails==="string")}})}function hostObject(value,label){if(!isHostObject(value))throw new Error(`${label} must be an object`);return value}function hostString(value,label){if(typeof value!=="string"||value.length===0)throw new Error(`${label} must be a non-empty string`);return value}function hostCount(value,label){if(!Number.isSafeInteger(value)||Number(value)<0)throw new Error(`${label} must be a non-negative safe integer`);return Number(value)}function hostTokens(value,label){const usage=hostObject(value,`${label} usage`);const input=hostCount(usage.inputTokens,`${label} inputTokens`);const cacheWriteInput=usage.cacheWriteInputTokens===void 0?null:hostCount(usage.cacheWriteInputTokens,`${label} cacheWriteInputTokens`);if(cacheWriteInput!==null&&cacheWriteInput>input){throw new Error(`${label} cacheWriteInputTokens cannot exceed inputTokens`)}return{input,cached_input:hostCount(usage.cachedInputTokens,`${label} cachedInputTokens`),cache_write_input:cacheWriteInput,output:hostCount(usage.outputTokens,`${label} outputTokens`),reasoning:hostCount(usage.reasoningOutputTokens,`${label} reasoningOutputTokens`),total:hostCount(usage.totalTokens,`${label} totalTokens`),source:"provider_reported"}}var emptyDiscarded,addDiscarded,discardedItem,isHostObject,hostTimestamp,hostDigest,hostSourceKey;var init_codex_app_server_notifications=__esm({"src/codex-app-server-notifications.ts"(){"use strict";init_src5();init_codex_telemetry_compaction();init_codex_telemetry_preparation();emptyDiscarded=()=>({prompt:0,response_text:0,reasoning:0,secrets:0});addDiscarded=(left,right)=>({prompt:left.prompt+right.prompt,response_text:left.response_text+right.response_text,reasoning:left.reasoning+right.reasoning,secrets:left.secrets+right.secrets});discardedItem=(type,item)=>({prompt:Number(["userMessage","hookPrompt","function_call","custom_tool_call"].includes(type)),response_text:Number(["agentMessage","plan","message","agent_message"].includes(type)),reasoning:Number(type==="reasoning"),secrets:Number(typeof item.encrypted_content==="string")+Number(item.internal_chat_message_metadata_passthrough!==void 0)});isHostObject=value=>typeof value==="object"&&value!==null&&!Array.isArray(value);hostTimestamp=value=>typeof value==="number"&&Number.isFinite(value)&&value>=0?new Date(value).toISOString():null;hostDigest=value=>createHash39("sha256").update(value).digest("hex");hostSourceKey=(value,prefix)=>value.length<=500?value:`${prefix}:${hostDigest(value)}`}});function aggregateEstimatedCallCosts(estimates,fxRate){const sum=values=>{const known2=values.filter(value=>value!==null);if(known2.length!==values.length)return null;return Math.round(known2.reduce((total,value)=>total+value,0)*1e6)/1e6};const usd=sum(estimates.map(estimate=>estimate.estimated_usd));return{usd,brl:usd===null||fxRate===null?null:Math.round(usd*fxRate.rate*1e6)/1e6,fx_rate:fxRate?.rate??null}}var init_codex_telemetry_call_costs=__esm({"src/codex-telemetry-call-costs.ts"(){"use strict"}});function fallbackUsageLoops(candidate,loops,previous){if(previous.length===0)return loops;const attributed=sumObservedUsage(previous);for(let index=0;index<=loops.length;index+=1){if(sameUsage(aggregateSegmentUsage({...candidate,loops:loops.slice(0,index)}),attributed))return loops.slice(index)}return[]}function sameUsage(left,right){return left.input===right.input&&left.cached_input===right.cached_input&&left.cache_write_input===right.cache_write_input&&left.output===right.output&&left.reasoning===right.reasoning&&left.total===right.total}function validatedTranscriptEnvironmentPath(){const value=process.env.CODEX_TRANSCRIPT_PATH;if(typeof value!=="string")return null;const normalized=value.trim();return normalized.length>0&&normalized.length<=4096?normalized:null}var init_codex_telemetry_fallback_usage=__esm({"src/codex-telemetry-fallback-usage.ts"(){"use strict";init_src4();init_codex_telemetry_runtime()}});async function recordNativeCodexUsage(current,composition,events){const exactCalls=events.filter(event=>event.event.stream_boundary==="response_completed"&&event.event.tokens!==null);const latestCumulative=events.findLast(event=>event.event.stream_boundary==="usage_updated"&&event.event.tokens!==null);const terminal=events.findLast(event=>event.event.stream_boundary==="turn_completed"||event.event.stream_boundary==="error"&&event.event.will_retry!==true);const usageEvents=exactCalls.length>0?exactCalls:latestCumulative?[latestCumulative]:[];if(usageEvents.length===0&&terminal===void 0)return current;let fresh=current;let sequence=current.records.length+1;const agentInvocationId=current.run.agent_invocation_id??`AINV-${current.run.run_id.slice("RUN-".length)}`;for(const call of exactCalls){const event=call.event;if(event.tokens===null)continue;const coverage2=terminal===void 0?"partial":"complete";const existing=fresh.model_call_records.find(record3=>record3.source_call_key===event.source_event_key);if(existing===void 0||existing.coverage==="partial"&&coverage2==="complete"){await composition.runs.appendRecord(modelCallObservedV3Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:event.captured_at,type:"model.call.observed",call_id:modelCallId(event.source_event_key),agent_invocation_id:agentInvocationId,coverage:coverage2,tokens:event.tokens,cost:{usd:null,brl:null},provider:event.provider,model:event.model,source_call_key:event.source_event_key,...event.source_occurred_at===null?{}:{source_occurred_at:event.source_occurred_at},runtime:event.runtime}));fresh=await composition.runs.read(current.run.run_id)}}const sourceSegmentKey=`codex-app-server:${current.run.run_id}`;if(usageEvents.length>0&&!fresh.effective_usage_records.some(record3=>record3.source_segment_key===sourceSegmentKey)){const tokens2=sumObservedUsage(usageEvents.map(event=>event.event.tokens));await composition.runs.appendRecord(usageRecordedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:latestPhase(current),activity_kind:"implementation",classification_source:"current_context",tokens:tokens2,cost:{usd:null,brl:null},provider:commonObservedValue(usageEvents.map(event=>event.event.provider)),model:commonObservedValue(usageEvents.map(event=>event.event.model)),source_segment_key:sourceSegmentKey,runtime:{reasoning_effort:commonObservedValue(usageEvents.map(event=>event.event.runtime.reasoning_effort)),service_tier:commonObservedValue(usageEvents.map(event=>event.event.runtime.service_tier))},supersedes_event_id:unavailableUsageEventId(current),...latestSourceTimestamp(usageEvents)===null?{}:{source_occurred_at:latestSourceTimestamp(usageEvents)}}));fresh=await composition.runs.read(current.run.run_id)}if(terminal===void 0||terminal.event.status===null)return fresh;const callKeys=exactCalls.length>0?exactCalls.map(call=>call.event.source_event_key):[terminal.event.source_event_key];for(const callKey of callKeys){const invocationId2=providerInvocationId(callKey);if(!fresh.model_selection_records.some(record3=>record3.invocation_id===invocationId2)){await composition.runs.appendRecord(modelSelectionRecordedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:terminal.event.captured_at,type:"model.selection.recorded",invocation_id:invocationId2,requested:{model:current.run.model,reasoning_effort:current.run.reasoning_effort??null,velocity:"standard"},selection:{source:"execution-override",policy_version:1,reasons:["host-run-header"]}}));fresh=await composition.runs.read(current.run.run_id)}if(!fresh.provider_invocation_records.some(record3=>record3.invocation_id===invocationId2)){await composition.runs.appendRecord(providerInvocationFinishedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:current.run.run_id,sequence:sequence++,occurred_at:terminal.event.captured_at,type:"provider.invocation.finished",invocation_id:invocationId2,status:terminal.event.status,effective:{provider:terminal.event.provider,model:terminal.event.model,reasoning_effort:terminal.event.runtime.reasoning_effort,service_tier:terminal.event.runtime.service_tier},latency_ms:terminal.event.latency_ms}));fresh=await composition.runs.read(current.run.run_id)}}return fresh}var init_codex_telemetry_native=__esm({"src/codex-telemetry-native.ts"(){"use strict";init_src5();init_codex_telemetry_runtime()}});import{AsyncLocalStorage}from"node:async_hooks";function fallbackCallIdentity(sourceCallKey){return[sourceCallKey,modelCallId(sourceCallKey)]}function hasNoObservedTokenDelta(tokens2){return tokens2.total===0&&[tokens2.input,tokens2.cached_input,tokens2.cache_write_input,tokens2.output,tokens2.reasoning].every(value=>value==null||value===0)}async function recordCodexTelemetryBatch(folds,composition,filesystem,finder=findLatestCodexSegment){if(folds.length===0)return[];const proposals=new Map;const transcriptPath=validatedTranscriptEnvironmentPath();for(const fold of folds){if(fold.finished!==null&&unavailableUsageEventId(fold)===null)continue;const source=await exactTelemetrySource(fold,composition);const key=JSON.stringify(source);if(source.turnId!==null&&!proposals.has(key))proposals.set(key,await finder(filesystem.root,new Set,{...source,startedAfter:fold.run.occurred_at,...transcriptPath===null?{}:{transcriptPath,requireTaskComplete:true}}))}return composition.runs.withUsageAttributionLock(async()=>{const native=await withPreparedCodexTelemetry(filesystem,async events=>events);const pass={runs:composition.runs,filesystem,native,compact:false};return capturePass.run(pass,async()=>{const results=[];try{for(const fold of folds){const current=await recordCodexTelemetryIfAvailable(fold,composition,filesystem,null,[],async(_root,_keys,source)=>proposals.get(JSON.stringify({agentPath:source?.agentPath??null,parentThreadId:source?.parentThreadId??null,threadId:source?.threadId??null,turnId:source?.turnId??null}))??null);results.push(current);if(pass.owners!==void 0)pass.owners=pass.owners.map(owner=>owner.run.run_id===current.run.run_id?current:owner)}return results}finally{if(pass.compact)await compactPendingCodexTelemetry(filesystem)}})})}async function recordCodexTelemetryIfAvailable(current,composition,filesystem,sourceOverride=null,appServerNotifications=[],fallbackSegmentFinder=findLatestCodexSegment){if(!isCodexTelemetryClient(current.run.client)||current.run.client_thread_id===null&&current.run.client_turn_id===null){return current}const transcriptPath=validatedTranscriptEnvironmentPath();const pass=capturePass.getStore();const batch=pass?.runs===composition.runs&&pass.filesystem===filesystem?pass:void 0;const lock2=operation=>batch===void 0?composition.runs.withUsageAttributionLock(operation):operation();const collect=fresh=>batch===void 0?collectAvailableNativeUsage(fresh,composition,filesystem,recordNativeCodexUsage):collectNativeUsageFromSnapshot(fresh,composition,batch.native,recordNativeCodexUsage);const preparation=await lock2(async()=>{const fresh=await composition.runs.read(current.run.run_id);if(appServerNotifications.length>0){await ingestCodexAppServerNotifications(filesystem,appServerNotifications)}const observed=await collect(fresh);if(batch!==void 0&&observed!==null)batch.compact=true;if(observed!==null)return{kind:"done",fold:observed};if(fresh.finished!==null&&unavailableUsageEventId(fresh)===null)return{kind:"done",fold:fresh};if(sourceOverride===null&&fresh.run.client_turn_id===null)return{kind:"done",fold:fresh};const source=sourceOverride??await exactTelemetrySource(fresh,composition);if(source.turnId===null)return{kind:"done",fold:fresh};return{kind:"fallback",fold:fresh,source}});if(preparation.kind==="done")return preparation.fold;const candidate=await fallbackSegmentFinder(filesystem.root,new Set,{startedAfter:preparation.fold.run.occurred_at,...preparation.source,...transcriptPath===null?{}:{transcriptPath,requireTaskComplete:true}});return lock2(async()=>{const freshCurrent=await composition.runs.read(current.run.run_id);const observed=await collect(freshCurrent);if(batch!==void 0&&observed!==null)batch.compact=true;if(observed!==null)return observed;const source=sourceOverride??await exactTelemetrySource(freshCurrent,composition);const exactTurn=source.turnId;const timestamp12=Date.parse(candidate?.finishedAt??candidate?.loops.at(-1)?.timestamp??"");if(candidate===null||!Number.isFinite(timestamp12)||exactTurn===null||candidate.turnId!==exactTurn||JSON.stringify(source)!==JSON.stringify(preparation.source))return freshCurrent;const postTerminalPhase=freshCurrent.finished?.phase??null;const postTerminal=postTerminalPhase!==null;const supersededUnavailableUsageId=unavailableUsageEventId(freshCurrent);if(postTerminal&&supersededUnavailableUsageId===null)return freshCurrent;const candidateLoops=Array.from(new Map(candidate.loops.map(loop=>[`${candidate.segmentKey}:loop:${loop.cycleIndex}`,loop])).values());const newCandidateLoops=candidateLoops.filter(loop=>shouldAppendFallbackModelCall(freshCurrent.model_call_records,`${candidate.segmentKey}:loop:${loop.cycleIndex}`));const localPrevious=freshCurrent.effective_usage_records.filter(record3=>record3.source_segment_key===candidate.segmentKey||record3.source_segment_key?.startsWith(`${candidate.segmentKey}@`)===true);if(localPrevious.some(record3=>record3.source_segment_key===candidate.segmentKey))return freshCurrent;const localDelta=observedUsageDelta(aggregateSegmentUsage({...candidate,loops:candidateLoops}),localPrevious.map(record3=>record3.tokens));if(candidate.finishedAt===null&&newCandidateLoops.length===0&&hasNoObservedTokenDelta(localDelta))return freshCurrent;const allRuns=batch?.owners??await composition.runs.list();if(batch!==void 0)batch.owners=allRuns;const existingOwner=allRuns.find(fold=>fold.run.run_id!==freshCurrent.run.run_id&&fold.effective_usage_records.some(record3=>record3.source_segment_key===candidate.segmentKey||record3.source_segment_key?.startsWith(`${candidate.segmentKey}@`)===true));if(existingOwner!==void 0)return freshCurrent;const model=candidate.model??freshCurrent.run.model;const provider=inferProvider(model,freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent);const correlation=codexTelemetryCorrelationFromRun(freshCurrent.run);if(correlation===null)return freshCurrent;const capturedAt=new Date().toISOString();const pricing=new PricingRepository(filesystem);const catalog=await pricing.readCatalog();const fxRate=await pricing.readLatestFxRate();const spooledLoops=[];if(batch!==void 0&&(newCandidateLoops.length>0||candidate.finishedAt!==null))batch.compact=true;for(const loop of candidateLoops){if(!shouldAppendFallbackModelCall(freshCurrent.model_call_records,`${candidate.segmentKey}:loop:${loop.cycleIndex}`))continue;const loopModel=loop.model??model;const loopProvider=inferProvider(loopModel,freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent);const historical_cost=estimateUsageCost({provider:loopProvider,model:loopModel,usage:loop.usage,catalog,fxRate,serviceTier:candidate.serviceTier??null});spooledLoops.push(await appendCodexTelemetrySpoolEvent(filesystem,{correlation,event_kind:"usage",source:"codex_session_fallback",source_event_key:`${candidate.segmentKey}:loop:${loop.cycleIndex}`,source_occurred_at:loop.timestamp,captured_at:capturedAt,coverage:"partial",tokens:loop.usage,provider:loopProvider,model:loopModel,runtime:{reasoning_effort:candidate.reasoningEffort??null,service_tier:candidate.serviceTier??null},status:null,latency_ms:null,historical_cost,context_stats:null,discarded_counts:{prompt:0,response_text:0,reasoning:0,secrets:0}}))}if(candidate.finishedAt!==null){await appendCodexTelemetrySpoolEvent(filesystem,{correlation,event_kind:"terminal",source:"codex_session_fallback",source_event_key:`${candidate.segmentKey}:terminal`,source_occurred_at:candidate.finishedAt,captured_at:capturedAt,coverage:"partial",tokens:null,provider,model,runtime:{reasoning_effort:candidate.reasoningEffort??null,service_tier:candidate.serviceTier??null},status:"completed",latency_ms:elapsedMilliseconds(candidate.startedAt,candidate.finishedAt),context_stats:null,discarded_counts:{prompt:0,response_text:0,reasoning:0,secrets:0}})}const cumulative=aggregateSegmentUsage({...candidate,loops:candidateLoops});const previous=allRuns.filter(fold=>fold.run.run_id===freshCurrent.run.run_id||exactTurn!==null&&fold.run.client_turn_id===exactTurn).flatMap(fold=>fold.effective_usage_records).filter(record3=>record3.source_segment_key===candidate.segmentKey||record3.source_segment_key?.startsWith(`${candidate.segmentKey}@`)===true);const usageLoops=fallbackUsageLoops(candidate,candidateLoops,previous.map(record3=>record3.tokens));if(candidate.finishedAt!==null&&previous.some(record3=>record3.source_segment_key===candidate.segmentKey))return freshCurrent;const tokens2=observedUsageDelta(cumulative,previous.map(record3=>record3.tokens));const usageSourceSegmentKey=candidate.finishedAt===null?`${candidate.segmentKey}@active:${hostDigest(JSON.stringify(cumulative))}`:candidate.segmentKey;const zeroTokenDelta=hasNoObservedTokenDelta(tokens2);const activeUsageToClose=candidate.finishedAt===null||!zeroTokenDelta?null:previous.findLast(record3=>record3.source_segment_key?.startsWith(`${candidate.segmentKey}@active:`)===true)??null;if(zeroTokenDelta&&activeUsageToClose===null){return freshCurrent}if(candidate.finishedAt===null&&usageLoops.length===0)return freshCurrent;const estimated=aggregateEstimatedCallCosts(usageLoops.map(loop=>{const loopModel=loop.model??model;return estimateUsageCost({provider:inferProvider(loopModel,freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent),model:loopModel,usage:loop.usage,catalog,fxRate,serviceTier:candidate.serviceTier??null})}),fxRate);const agentInvocationId=freshCurrent.run.agent_invocation_id??`AINV-${freshCurrent.run.run_id.slice("RUN-".length)}`;let sequence=freshCurrent.records.length+1;const fallbackCallIdentities=new Set(freshCurrent.model_call_records.flatMap(record3=>[record3.source_call_key,record3.call_id].filter(value=>typeof value==="string")));const pendingRecords=[];for(const spooled of spooledLoops){const loop=spooled.event;if(loop.tokens===null)continue;const loopModel=loop.model??freshCurrent.run.model;const loopProvider=inferProvider(loopModel,loop.provider??freshCurrent.run.provider??freshCurrent.run.client,freshCurrent.run.agent);const loopEstimated=estimateUsageCost({provider:loopProvider,model:loopModel,usage:loop.tokens,catalog,fxRate,serviceTier:candidate.serviceTier??null});const sourceCallKey=loop.source_event_key;const identities=fallbackCallIdentity(sourceCallKey);if(postTerminal||!shouldAppendFallbackModelCall(freshCurrent.model_call_records,sourceCallKey)||identities.some(identity2=>fallbackCallIdentities.has(identity2))){continue}pendingRecords.push(modelCallObservedV3Schema.parse({schema_version:2,event_id:`${freshCurrent.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:freshCurrent.run.run_id,sequence:sequence++,occurred_at:new Date().toISOString(),type:"model.call.observed",call_id:modelCallId(sourceCallKey),agent_invocation_id:agentInvocationId,coverage:"partial",tokens:loop.tokens,cost:{usd:loopEstimated.estimated_usd,brl:loopEstimated.estimated_brl,fx_rate:loopEstimated.fx_rate},provider:loopProvider,model:loopModel,source_call_key:sourceCallKey,...loop.source_occurred_at===null?{}:{source_occurred_at:loop.source_occurred_at},runtime:loop.runtime}));for(const identity2 of identities)fallbackCallIdentities.add(identity2)}const usage=usageRecordedV2Schema.parse({schema_version:2,event_id:`${freshCurrent.run.run_id}:${String(sequence).padStart(6,"0")}`,run_id:freshCurrent.run.run_id,sequence,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:postTerminal?postTerminalPhase:latestPhase(freshCurrent),activity_kind:postTerminal?"retrospective_local_remeasurement":"implementation",classification_source:"current_context",tokens:activeUsageToClose?.tokens??tokens2,cost:activeUsageToClose!==null?activeUsageToClose.cost:{usd:estimated.usd,brl:estimated.brl,fx_rate:estimated.fx_rate},provider,model,source_segment_key:usageSourceSegmentKey,runtime:{reasoning_effort:candidate.reasoningEffort??null,service_tier:candidate.serviceTier??null},supersedes_event_id:activeUsageToClose?.event_id??supersededUnavailableUsageId,...postTerminal?{retrospective_correction:true}:{},source_occurred_at:candidate.finishedAt??candidate.startedAt??void 0,source_started_at:candidate.startedAt??void 0,source_finished_at:candidate.finishedAt??void 0});pendingRecords.push(usage);await composition.runs.appendRecords(pendingRecords);if(batch===void 0)await compactPendingCodexTelemetry(filesystem);else batch.compact=true;return composition.runs.read(freshCurrent.run.run_id)})}var capturePass;var init_record_codex_telemetry=__esm({"src/record-codex-telemetry.ts"(){"use strict";init_src4();init_src5();init_codex_app_server_notifications();init_codex_telemetry_call_costs();init_codex_telemetry_compaction();init_codex_telemetry_fallback_usage();init_codex_app_server_notifications();init_codex_telemetry_native();init_codex_telemetry_preparation();init_codex_telemetry_runtime();init_codex_telemetry_source();init_codex_telemetry_preparation();init_codex_telemetry_runtime();init_codex_telemetry_source();capturePass=new AsyncLocalStorage}});async function openThreadIntakes(composition,client,clientThreadId,currentTurnId,candidates){if(clientThreadId===null)return[];const availableRuns=candidates??await composition.runs.list();return availableRuns.filter(fold=>fold.finished===null&&fold.run.client===client&&fold.run.client_thread_id===clientThreadId&&fold.run.parent_run_id===null&&fold.run.intake!=null&&!runV2RequiresFinalizer(fold.run)&&descendantRuns(fold.run.run_id,availableRuns).length===0&&fold.run.client_turn_id!==currentTurnId)}async function finishOpenThreadIntakes(openIntakes2,composition,filesystem,parsed,lifecycle){const settled=[];for(const intake2 of openIntakes2){const candidateRuns=await composition.runs.list();if(descendantRuns(intake2.run.run_id,candidateRuns).length>0||activeDescendantRuns(intake2.run.run_id,candidateRuns).length>0){continue}let current=intake2;current=await recordCodexTelemetryIfAvailable(current,composition,filesystem,null,await codexAppServerNotifications(parsed,filesystem));if(current.effective_usage_records.length===0){await recordUnavailableCodexTelemetryToSpool(current,filesystem,"completed");await composition.runs.appendRecord(unavailableUsageRecord(current,parsed,current.records.length+1));current=await composition.runs.read(current.run.run_id)}await composition.runs.appendRecord(runFinishedV2Schema.parse({schema_version:2,event_id:runV2EventId(current.run.run_id,current.records.length+1),run_id:current.run.run_id,sequence:current.records.length+1,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status:"completed"}));const run=await composition.runs.read(current.run.run_id);settled.push({run,reconciliation:await reconcileFinishedRunLifecycle(run,composition,lifecycle,{candidateRuns})})}return settled}function settledIntakesForView(settled,view){if(view==="full")return settled;return settled.map(({run,reconciliation})=>({run_id:run.run.run_id,status:run.status,phase:latestRunV2Phase(run.records),execution_id:run.run.execution_id,task_id:run.run.task_id,change_id:run.run.change_id,record_count:run.records.length,usage_record_count:run.effective_usage_records.length,model_call_count:run.model_call_records.length,reconciliation:{status:reconciliation.status,outcome:reconciliation.outcome,task_count:reconciliation.tasks.length,change_count:reconciliation.changes.length,execution_count:reconciliation.executions.length,spec_count:reconciliation.specs.length,prd_count:reconciliation.prds.length}}))}async function codexAppServerNotifications(parsed,filesystem){const path=parsed.options["codex-app-server-events"];return path===void 0?[]:parseCodexAppServerNotificationStream(await filesystem.readText(path))}function runMatchesTarget(fold,target){return target.taskId!==void 0&&fold.run.task_id===target.taskId||target.specId!==void 0&&fold.run.spec_id===target.specId||target.prdId!==void 0&&fold.run.prd_id===target.prdId}async function recordContextPackUsage(runId,initialPackTokens,composition){const current=await composition.runs.read(runId);if(current.finished!==null)throw new UsageError(`Run V2 is already finished: ${runId}`);const sequence=current.records.length+1;await composition.runs.appendRecord(usageRecordedV2Schema.parse({schema_version:2,event_id:runV2EventId(runId,sequence),run_id:runId,sequence,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:latestRunV2Phase(current.records),activity_kind:"context_build",classification_source:"current_context",tokens:{input:null,cached_input:null,output:null,reasoning:null,total:null,source:"unavailable"},cost:{usd:null,brl:null},provider:current.run.provider,model:current.run.model,source_segment_key:`context-pack:${runId}:${sequence}`,supersedes_event_id:null,source_occurred_at:new Date().toISOString(),context_stats:{initial_pack_tokens:initialPackTokens,tool_output_tokens:null,files_opened:null,snippets_opened:null}}))}function unavailableUsageRecord(current,parsed,sequence){const occurredAt=new Date().toISOString();return usageRecordedV2Schema.parse({schema_version:2,event_id:runV2EventId(current.run.run_id,sequence),run_id:current.run.run_id,sequence,occurred_at:occurredAt,type:"usage.recorded",phase:latestRunV2Phase(current.records),activity_kind:"run_finalize",classification_source:"current_context",tokens:{input:null,cached_input:null,output:null,reasoning:null,total:null,source:"unavailable"},cost:{usd:null,brl:null},provider:current.run.provider,model:current.run.model,source_segment_key:null,supersedes_event_id:null,...runUsageMetadataOptions(parsed.options,occurredAt)})}function latestRunV2Phase(records){const latest=records.findLast(record3=>"phase"in record3);return latest?.phase??"conversation"}function runV2EventId(runId,sequence){return`${runId}:${String(sequence).padStart(6,"0")}`}var init_conversation_intake_settlement=__esm({"src/conversation-intake-settlement.ts"(){"use strict";init_src5();init_cli_arguments();init_record_codex_telemetry();init_run_hierarchy();init_run_lifecycle_reconciliation()}});import{createHash as createHash40,randomUUID as randomUUID8}from"node:crypto";import{lstat as lstat6,readFile as readFile7,realpath as realpath7,rename as rename5,unlink}from"node:fs/promises";import{homedir as homedir3}from"node:os";import{resolve as resolve9}from"node:path";async function resolveRunClientInvocation(filesystem,client,options={}){if(!new Set(["codex","codex-desktop"]).has(client)){return{clientThreadId:null,clientTurnId:null,userMessage:null,observedModel:null,observedReasoningEffort:null,observedServiceTier:null}}const argv=options.argv??process.argv.slice(2);const hookFlags=argv.filter(value=>value.startsWith("--codex-hook-"));const hooked=hookFlags.length>0;const hookThreads=hookFlags.filter(value=>value.startsWith("--codex-hook-thread="));const hookThread=hookThreads[0]?.slice("--codex-hook-thread=".length);const explicitThread=normalizedId(options.threadId??process.env.CODEX_THREAD_ID);if(hooked&&(hookFlags.length!==2||hookThreads.length!==1||!hookThread||!/^[A-Za-z0-9_-]{1,256}$/.test(hookThread)||explicitThread!==null&&explicitThread!==hookThread)){throw new Error("Codex hook identity is incomplete or conflicts with the active thread.")}const threadId=explicitThread??hookThread??null;const explicitTurn=normalizedId(options.turnId??process.env.CODEX_TURN_ID);const hookTurn=hooked&&threadId!==null?await observedHookTurn(filesystem.root,threadId,argv,options.now??new Date):null;if(hooked&&(hookTurn===null||explicitTurn!==null&&explicitTurn!==hookTurn)){throw new Error("Codex hook turn receipt is missing, consumed, expired or conflicts with the active turn.")}const turnId=hooked?hookTurn:explicitTurn;const transcriptPath=transcriptPathFromEnvironment();const active=await findActiveCodexInvocation(filesystem.root,{threadId,...transcriptPath===null?{}:{transcriptPath},...options.sessionsRoot===void 0?{}:{sessionsRoot:options.sessionsRoot},...options.now===void 0?{}:{now:options.now}});return{clientThreadId:threadId??active?.sessionId??null,clientTurnId:turnId??active?.turnId??null,userMessage:active?.userMessage??null,observedModel:active?.model??null,observedReasoningEffort:active?.reasoningEffort??null,observedServiceTier:active?.serviceTier??null,transcriptPath:transcriptPath??(active?resolve9(options.sessionsRoot??resolve9(homedir3(),".codex"),active.sessionPath):null)}}async function observedHookTurn(root,threadId,argv,now){const hookIds=argv.filter(value=>value.startsWith("--codex-hook-id="));if(hookIds.length!==1)return null;const hookId=hookIds[0]?.slice("--codex-hook-id=".length);if(!hookId||!/^[a-f0-9]{64}$/.test(hookId))return null;const originalArgv=argv.filter(value=>!value.startsWith("--codex-hook-"));const argvSha256=createHash40("sha256").update(JSON.stringify(originalArgv)).digest("hex");const path=resolve9(root,".local/codex-hook-turn/v1",`${hookId}.json`);const claimed=`${path}.${randomUUID8()}.consumed`;try{await rename5(path,claimed);const info=await lstat6(claimed);if(!info.isFile()||info.isSymbolicLink()||info.size>2048)return null;if((await realpath7(claimed)).toLowerCase()!==claimed.toLowerCase())return null;const receipt=JSON.parse(await readFile7(claimed,"utf8"));const age=now.getTime()-Number(receipt.observed_at_ms);if(receipt.schema_version!==1||receipt.thread_id!==threadId||typeof receipt.turn_id!=="string"||!receipt.turn_id||receipt.turn_id.length>256||receipt.tool_use_sha256!==hookId||receipt.argv_sha256!==argvSha256||!Number.isFinite(age)||age<-5e3||age>6e4)return null;return receipt.turn_id}catch{return null}finally{await unlink(claimed).catch(()=>void 0)}}function transcriptPathFromEnvironment(){const value=process.env.CODEX_TRANSCRIPT_PATH?.trim();return value===void 0||value.length===0||value.length>4096?null:value}function normalizedId(value){const normalized=value?.trim();return normalized===void 0||normalized.length===0?null:normalized}var init_run_client_invocation=__esm({"src/run-client-invocation.ts"(){"use strict";init_src4()}});async function resolveConversationContinuation(parsed,composition,filesystem){if(parsed.options.intent!==void 0&&parsed.options.intent!=="continue"){throw new UsageError("conversation resolve supports --intent continue only")}if(parsed.options.definition!==void 0){throw new UsageError("conversation resolve does not authorize definition creation")}const client=parsed.options.client??"codex";const invocation2=await resolveRunClientInvocation(filesystem,client);const context=await latestThreadContext(composition,client,invocation2.clientThreadId);const target=explicitIntakeTarget(parsed)??context.implicitTarget;const existing=await findRootRunForExactTurn(composition,client,invocation2);const base={read_only:true,intent:"continue",target,current_run_id:existing?.run.run_id??null,current_execution_id:existing?.run.execution_id??null,start_args:null};if(target===null){return{...base,status:"unresolved",reason:"No root delivery focus in this client thread"}}const id=target.taskId??target.specId??target.prdId;if(id===void 0)throw new UsageError("Continuation target has no canonical ID");const options={...parsed.options,intent:"continue",client,[target.entrypoint]:id};const startArgs=["conversation","start",...Object.entries(options).flatMap(([key,value])=>[`--${key}`,value]),...Array.from(parsed.flags,flag=>`--${flag}`)];if(existing!==null){try{assertExactIntakeRequestCompatible(existing,{...parsed,options},"continue")}catch(error51){if(!(error51 instanceof UsageError))throw error51;return{...base,status:"conflict",reason:error51.message}}if(existing.finished!==null){return{...base,status:"closed",reason:"The matching Run is already terminal; do not dispatch new children"}}}if(target.taskId!==void 0){const task=(await composition.tasks.read(target.taskId)).task;if(["completed","cancelled","failed"].includes(task.status)){return{...base,status:"blocked",task_status:task.status,reason:"This Task cannot continue; completed/cancelled are immutable and failed requires explicit rework"}}return{...base,status:"resolved",task_status:task.status,execution_id:task.plan_ref?.execution_id??task.prepared_plan?.execution_id??null,reused:existing!==null,start_args:startArgs}}const execution=await resolveCanonicalMacroExecution(target,composition,parsed.options.execution);return{...base,status:"resolved",execution_id:execution.id,execution_status:execution.status,task_ids:execution.dag.nodes.map(node=>node.task_id),reused:existing!==null,start_args:startArgs}}var init_conversation_resolution=__esm({"src/conversation-resolution.ts"(){"use strict";init_cli_arguments();init_conversation_intake();init_run_client_invocation();init_run_conversation_v2()}});function activeCaptureRunIds(area,parsed,result2){return area==="run"&&parsed.positionals[1]==="usage"&&(parsed.flags.has("active")||parsed.flags.has("recent"))?changedActiveCaptureRunIds(result2):null}function changedActiveCaptureRunIds(result2){const telemetry=result2?.telemetry;if(typeof telemetry!=="object"||telemetry===null||!("mode"in telemetry)||!["active_exact_session","recent_exact_session"].includes(String(telemetry.mode))||!("captured"in telemetry)||!Array.isArray(telemetry.captured))throw new UsageError("Active telemetry capture returned an invalid projection result");const ids=[];for(const item of telemetry.captured){if(typeof item!=="object"||item===null||typeof item.run_id!=="string"||typeof item.captured!=="boolean"){throw new UsageError("Active telemetry capture returned an invalid Run result")}if(item.captured)ids.push(item.run_id)}return ids}var init_lifecycle_manifest_active_capture=__esm({"src/lifecycle-manifest-active-capture.ts"(){"use strict";init_cli_arguments()}});function effectiveRunFinishedAt(fold){const recordedFinish=fold.finished?.occurred_at??null;if(recordedFinish===null)return null;const startedAtMs=Date.parse(fold.run.occurred_at);const recordedFinishMs=Date.parse(recordedFinish);const reconciledFinishMs=fold.records.filter(record3=>"activity_kind"in record3&&record3.activity_kind==="retrospective_local_reconciliation").map(record3=>"source_occurred_at"in record3?record3.source_occurred_at??null:null).map(value=>value===null?Number.NaN:Date.parse(value)).filter(value=>Number.isFinite(value)&&value>=startedAtMs&&value<=recordedFinishMs);if(reconciledFinishMs.length===0)return recordedFinish;return new Date(Math.max(...reconciledFinishMs)).toISOString()}function projectedSourceTiming(runStartedAt,effectiveRecords,allRecords){const startedAtMs=Date.parse(runStartedAt);const timestampOf=value=>{const timestamp12=value===null||value===void 0?Number.NaN:Date.parse(value);return Number.isFinite(timestamp12)?timestamp12:null};const candidates=[];for(const record4 of[...effectiveRecords,...allRecords]){const sourceStartedAt2=record4.source_started_at;const sourceFinishedAt2=record4.source_finished_at;const startMs=timestampOf(sourceStartedAt2);const finishMs=timestampOf(sourceFinishedAt2);if(startMs!==null&&finishMs!==null&&finishMs>=startMs&&finishMs>=startedAtMs){candidates.push(record4);continue}const sourceOccurredAt=timestampOf(record4.source_occurred_at);if(record4.activity_kind==="retrospective_local_reconciliation"&&sourceOccurredAt!==null&&sourceOccurredAt>=startedAtMs)candidates.push({...record4,source_started_at:runStartedAt,source_finished_at:record4.source_occurred_at??void 0})}candidates.sort((left,right)=>Date.parse(left.occurred_at)-Date.parse(right.occurred_at));const record3=candidates.at(-1);const sourceStartedAt=record3?.source_started_at??null;const sourceFinishedAt=record3?.source_finished_at??record3?.source_occurred_at??null;return{source_started_at:sourceStartedAt,source_finished_at:sourceFinishedAt,source_duration_ms:timestampDelta(sourceStartedAt,sourceFinishedAt),capture_lag_ms:timestampDelta(sourceFinishedAt,record3?.occurred_at??null)}}function timestampDelta(start,finish){if(start===null||finish===null)return null;const startMs=Date.parse(start);const finishMs=Date.parse(finish);return Number.isFinite(startMs)&&Number.isFinite(finishMs)?Math.max(0,finishMs-startMs):null}var init_lifecycle_manifest_run_projection=__esm({"src/lifecycle-manifest-run-projection.ts"(){"use strict"}});function modelCallCoverage(fold){if(fold.model_call_records.length===0)return"unavailable";return fold.model_call_records.every(record3=>record3.coverage==="complete")?"complete":"partial"}function runCostInput(fold){return{run:{run_id:fold.run.run_id,attribution_status:fold.run.attribution_status,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,work_type:fold.run.work_type},records:fold.records,effective_usage_records:fold.effective_usage_records}}var init_lifecycle_manifest_run_usage=__esm({"src/lifecycle-manifest-run-usage.ts"(){"use strict"}});function summarizeRunObservedTiming(fold){return summarizeObservedSourceTiming(fold.effective_usage_records.map(record3=>({phase:record3.phase,source_started_at:record3.source_started_at??null,source_finished_at:record3.source_finished_at??null})))}var init_observed_run_timing=__esm({"src/observed-run-timing.ts"(){"use strict";init_src4()}});async function runLifecycleManifestMaintenance(action,parsed,filesystem,composition){const store=new LifecycleManifestStore(filesystem);if(["neighbors","path","explain","gaps"].includes(action??"")){return runManifestGraphQuery(action,parsed,store)}if(action==="rebuild"){if(!parsed.flags.has("confirm-full-scan")){throw new UsageError("manifest rebuild requires --confirm-full-scan")}const events=await lifecycleManifestBootstrapEvents(composition,filesystem);return{snapshot:await store.replace(events),indexed:events.length}}if(action==="refresh")return store.refresh();if(action==="reconcile"){const id=parsed.options.id??parsed.positionals[2];if(id===void 0)throw new UsageError("manifest reconcile requires --id ID");const event=await lifecycleManifestEventForId(id,composition,filesystem);return{snapshot:await store.appendMany([event]),reconciled:[id]}}if(action==="show"){return parsed.flags.has("active")?store.readActiveWork():store.readSummary()}throw new UsageError("manifest requires rebuild, refresh, reconcile, show, neighbors, path, explain, or gaps")}async function runManifestGraphQuery(action,parsed,store){const entities=await store.readEntities();const byId2=new Map(entities.map(entity=>[entity.id,entity]));const id=parsed.options.id??parsed.positionals[2];if(action==="path"){const from=parsed.options.from??id;const to2=parsed.options.to??parsed.positionals[3];if(from===void 0||to2===void 0)throw new UsageError("manifest path requires --from ID --to ID");const queue=[[from]];const visited=new Set([from]);while(queue.length>0&&visited.size<=GRAPH_VISIT_LIMIT){const route=queue.shift();const current=route.at(-1);if(current===to2)return{path:route,bounded:true,limit:GRAPH_VISIT_LIMIT};for(const neighbor of graphNeighbors(entities,current)){if(!visited.has(neighbor.entity.id)){visited.add(neighbor.entity.id);queue.push([...route,neighbor.entity.id])}}}return{path:null,bounded:true,limit:GRAPH_VISIT_LIMIT}}if(id===void 0||!byId2.has(id))throw new UsageError("manifest graph query requires an existing --id ID");if(action==="neighbors"){const neighbors=graphNeighbors(entities,id);return{id,neighbors:neighbors.slice(0,GRAPH_RESULT_LIMIT),bounded:true,limit:GRAPH_RESULT_LIMIT,truncated:neighbors.length>GRAPH_RESULT_LIMIT}}if(action==="gaps"){const entity=byId2.get(id);if(entity===void 0)throw new UsageError("manifest graph query requires an existing --id ID");const gaps=relationEdgesFor(entity).filter(edge2=>!byId2.has(edge2.target_id));return{id,gaps:gaps.slice(0,GRAPH_RESULT_LIMIT),bounded:true,limit:GRAPH_RESULT_LIMIT,truncated:gaps.length>GRAPH_RESULT_LIMIT}}const to=parsed.options.to??parsed.positionals[3];if(to===void 0)throw new UsageError("manifest explain requires --id ID --to ID");const edge=graphNeighbors(entities,id).find(neighbor=>neighbor.entity.id===to)?.edge;return{id,to,relation:edge??null,bounded:true,limit:GRAPH_RESULT_LIMIT}}async function manifestList(area,parsed,filesystem){if(!["prd","spec","change","task","execution","run","decision"].includes(area)){throw new UsageError(`Lifecycle manifest does not support list area: ${area}`)}const store=new LifecycleManifestStore(filesystem);let entities=await store.readEntities(area);if(entities.length===0&&await store.readSummary()===null&&!await filesystem.exists(".agents/records/lifecycle/.gitkeep")){throw new UsageError("Lifecycle manifest is not initialized; run `zaip manifest rebuild --confirm-full-scan` once")}const statuses=new Set(csvOption(parsed.options.status));const from=dateBoundary(parsed.options.from,false);const to=dateBoundary(parsed.options.to,true);entities=entities.filter(entity=>statuses.size===0||entity.status!==null&&statuses.has(entity.status)).filter(entity=>parsed.options.prd===void 0||entity.relations.includes(parsed.options.prd)).filter(entity=>parsed.options.spec===void 0||entity.relations.includes(parsed.options.spec)).filter(entity=>parsed.options.change===void 0||entity.relations.includes(parsed.options.change)).filter(entity=>parsed.options.task===void 0||entity.relations.includes(parsed.options.task)).filter(entity=>parsed.options.execution===void 0||entity.relations.includes(parsed.options.execution)).filter(entity=>from===null||Date.parse(entity.updated_at)>=from).filter(entity=>to===null||Date.parse(entity.updated_at)<=to).sort((left,right)=>right.updated_at.localeCompare(left.updated_at)||right.id.localeCompare(left.id));const after=parsed.options.after;const start=after===void 0?0:entities.findIndex(entity=>entity.id===after)+1;if(after!==void 0&&start===0)throw new UsageError(`--after id not found: ${after}`);const limit=parsed.flags.has("all")?entities.length:numberOption(parsed.options.limit,20);if(limit>200&&!parsed.flags.has("all")){throw new UsageError("--limit must be at most 200; use --all explicitly")}const view=parsed.options.view??"index";if(view!=="index"&&view!=="summary"&&view!=="full")throw new UsageError("--view must be index, summary, or full");const page=entities.slice(start,start+limit);if(view==="full")return page;if(view==="summary"){return page.map(({data:_data,...entity})=>entity)}return{schema:["id","title","status","risk","priority","updated_at","work_relations"],rows:page.map(entity=>[entity.id,entity.title,entity.status,entity.risk,entity.priority,entity.updated_at,entity.relations.filter(relation=>/^(?:PRD|SPEC|CHG|TASK|EXEC|RUN)-/.test(relation)).slice(0,2)]),next_after:page.length===limit?page.at(-1)?.id??null:null}}function isLifecycleManifestMutation(action){if(action===void 0||action==="ready-next")return false;return!["list","show","next","validate","aggregate","inspect-local"].includes(action)}async function syncLifecycleManifestResult(result2,area,parsed,composition,filesystem){const store=new LifecycleManifestStore(filesystem);if(area==="decision"){const decision=findDecision(result2);if(decision!==void 0)await store.append(lifecycleManifestEventFromDecision(decision));return}if(area==="run"||area==="subagent"){const capturedIds=activeCaptureRunIds(area,parsed,result2);const candidate=area==="run"&&capturedIds===null?findRunId(result2)??parsed.options.id??parsed.positionals[2]:void 0;const events2=collectLifecycleEntities(result2).map(lifecycleManifestEventFromEntity);const runIds=new Set(capturedIds??collectRunIds(result2));if(candidate!==void 0)runIds.add(candidate);for(const runId of runIds){events2.push(lifecycleManifestEventFromRun(await composition.runs.read(runId)))}if(events2.length>0)await store.appendMany(events2);return}if(area==="conversation"){const events2=collectLifecycleEntities(result2).map(lifecycleManifestEventFromEntity);for(const runId of collectRunIds(result2)){events2.push(lifecycleManifestEventFromRun(await composition.runs.read(runId)))}if(events2.length>0)await store.appendMany(events2);return}if(area==="validation"||area==="evidence"){const artifact=findArtifact(result2,area);if(artifact!==void 0)await store.append(lifecycleManifestEventFromEntity(artifact));return}const events=collectLifecycleEntities(result2).map(lifecycleManifestEventFromEntity);for(const runId of collectRunIds(result2)){events.push(lifecycleManifestEventFromRun(await composition.runs.read(runId)))}if(events.length>0)await store.appendMany(events)}function findArtifact(result2,area){if(typeof result2!=="object"||result2===null)return void 0;const artifact=result2[area];if(typeof artifact!=="object"||artifact===null)return void 0;const record3=artifact;const observedAt=area==="validation"?record3.executed_at:record3.observed_at;if(typeof record3.id!=="string"||typeof observedAt!=="string"||typeof record3.status!=="string"){return void 0}return{...record3,updated_at:observedAt}}async function lifecycleManifestEventForId(id,composition,filesystem){if(id.startsWith("PRD-"))return lifecycleManifestEventFromEntity((await composition.prds.read(id)).prd);if(id.startsWith("SPEC-"))return lifecycleManifestEventFromEntity((await composition.specs.read(id)).spec);if(id.startsWith("CHG-"))return lifecycleManifestEventFromEntity((await composition.changes.read(id)).change);if(id.startsWith("TASK-"))return lifecycleManifestEventFromEntity((await composition.tasks.read(id)).task);if(id.startsWith("EXEC-"))return lifecycleManifestEventFromEntity((await composition.executions.read(id)).execution);if(id.startsWith("RUN-"))return lifecycleManifestEventFromRun(await composition.runs.read(id));if(/^(?:TEST|EVAL|CHECK|REVIEW|MUT|INT|E2E)-/.test(id)||id.startsWith("EVD-")){const artifact=(await lifecycleAssuranceBootstrapEvents(filesystem)).find(event=>event.entity.id===id);if(artifact!==void 0)return artifact;throw new UsageError(`Typed assurance artifact not found: ${id}`)}throw new UsageError(`Unsupported lifecycle manifest reconciliation id: ${id}`)}function collectLifecycleEntities(value){const found=[];const seen=new Set;const visit=candidate=>{if(Array.isArray(candidate)){candidate.forEach(visit);return}if(typeof candidate!=="object"||candidate===null)return;const record3=candidate;if(typeof record3.id==="string"&&typeof record3.status==="string"&&typeof record3.updated_at==="string"&&/^(PRD|SPEC|CHG|TASK|EXEC)-/.test(record3.id)&&!seen.has(record3.id)){seen.add(record3.id);found.push(record3)}Object.values(record3).forEach(visit)};visit(value);return found}function lifecycleManifestEventFromEntity(entity){const id=entity.id;const kind=id.startsWith("PRD-")?"prd":id.startsWith("SPEC-")?"spec":id.startsWith("CHG-")?"change":id.startsWith("TASK-")?"task":id.startsWith("EVD-")?"evidence":id.startsWith("TEST-")||id.startsWith("EVAL-")||id.startsWith("CHECK-")||id.startsWith("REVIEW-")||id.startsWith("MUT-")||id.startsWith("INT-")||id.startsWith("E2E-")?"validation":"execution";const relations=new Set;collectRelationIds(entity,relations,id);for(const[key,value]of Object.entries(entity)){if(key.endsWith("_id")&&typeof value==="string")relations.add(value);if(key.endsWith("_ids")&&Array.isArray(value))value.filter(item=>typeof item==="string").forEach(item=>{relations.add(item)})}return{schema_version:1,event_id:`${id}:${String(entity.updated_at)}:${String(entity.status)}`,occurred_at:entity.updated_at,operation:"upsert",entity:{kind,id,title:typeof entity.title==="string"?entity.title:null,status:entity.status,risk:typeof entity.risk==="string"?entity.risk:null,priority:typeof entity.priority==="string"?entity.priority:null,updated_at:entity.updated_at,relations:[...relations],relation_edges:relationEdgesFromEntity(entity,[...relations]),usage:null,data:Object.fromEntries(Object.entries(entity).filter(([key])=>key!=="prepared_plan"))}}}function collectRelationIds(value,relations,ownId){if(typeof value==="string"){if(/^(?:PRD|SPEC|CHG|TASK|EXEC|RUN|REQ|AC)-/.test(value)&&value!==ownId){relations.add(value)}return}if(Array.isArray(value)){value.forEach(item=>{collectRelationIds(item,relations,ownId)});return}if(typeof value==="object"&&value!==null){Object.values(value).forEach(item=>{collectRelationIds(item,relations,ownId)})}}function lifecycleManifestEventFromRun(fold){const costInput=runCostInput(fold);const aggregate=aggregateRunV2Usage([costInput],fold.run.run_id);const usage=aggregate.total;const runtime=fold.effective_usage_records.findLast(record3=>record3.runtime)?.runtime;const observedRuntime=fold.effective_usage_records.at(-1);const sourceTiming=projectedSourceTiming(fold.run.occurred_at,fold.effective_usage_records,fold.records);return{schema_version:1,event_id:`${fold.run.run_id}:${fold.records.length}:${fold.status}`,occurred_at:fold.records.at(-1)?.occurred_at??fold.run.occurred_at,operation:"upsert",entity:{kind:"run",id:fold.run.run_id,title:null,status:fold.status,risk:null,priority:null,updated_at:fold.records.at(-1)?.occurred_at??fold.run.occurred_at,relations:[fold.run.parent_run_id,fold.run.prd_id,fold.run.spec_id,fold.run.change_id,fold.run.task_id,fold.run.execution_id].filter(item=>item!==null),relation_edges:[fold.run.parent_run_id,fold.run.prd_id,fold.run.spec_id,fold.run.change_id,fold.run.task_id,fold.run.execution_id].filter(item=>item!==null).map(target_id=>({target_id,type:target_id===fold.run.parent_run_id?"parent":"references",direction:"outbound",provenance:"explicit",source_locator:`run:${fold.run.run_id}`})),usage:{input_tokens:usage.tokens.input,output_tokens:usage.tokens.output,cached_input_tokens:usage.tokens.cached_input,total_tokens:usage.tokens.total,cost:usage.cost.brl??usage.cost.usd,currency:usage.cost.brl!==null?"BRL":usage.cost.usd!==null?"USD":null},data:{attribution_status:fold.run.attribution_status,phase:fold.records.findLast(record3=>"phase"in record3)?.phase??fold.run.phase,run_role:effectiveRunV2Role(fold.run),run_kind:effectiveRunV2Kind(fold.run),run_purpose:effectiveRunV2Purpose(fold.run),requires_finalizer:runV2RequiresFinalizer(fold.run),parent_run_id:fold.run.parent_run_id,entrypoint:fold.run.entrypoint,work_type:fold.run.work_type,client:fold.run.client,agent:fold.run.agent,agent_name:fold.run.agent==="codex"?"codex":fold.run.agent_name??canonicalAgentName(fold.run.agent),provider:observedRuntime?.provider??fold.run.provider,model:fold.run.model,reasoning_effort:fold.run.reasoning_effort??fold.model_selection_records[0]?.requested.reasoning_effort??null,...effectiveConfiguration(fold),...callSummary(fold),cli_agent_name:fold.run.agent_name??null,call_coverage:modelCallCoverage(fold),service_tier:runtime?.service_tier??null,client_thread_id:fold.run.client_thread_id??null,client_turn_id:fold.run.client_turn_id??null,zaip_execution_id:fold.run.execution_id,agent_invocation_id:fold.run.agent_invocation_id??`AINV-${fold.run.run_id.slice("RUN-".length)}`,root_agent_invocation_id:fold.run.root_agent_invocation_id??`AINV-${fold.run.run_id.slice("RUN-".length)}`,parent_agent_invocation_id:fold.run.parent_agent_invocation_id??null,agent_invocation_kind:fold.run.invocation_kind??(fold.run.parent_run_id===null?"orchestrator":"delegated"),delegation_depth:fold.run.delegation_depth??(fold.run.parent_run_id===null?0:null),conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,intake:fold.run.intake??null,started_at:fold.run.occurred_at,terminal_finished_at:fold.finished?.occurred_at??null,finished_at:effectiveRunFinishedAt(fold),...sourceTiming,observed_source_timing:summarizeRunObservedTiming(fold),pricing_segments:fold.effective_usage_records.map(record3=>({event_id:record3.event_id,attributed_spec_id:record3.attributed_spec_id??null,phase:record3.phase,provider:record3.provider,model:record3.model,service_tier:record3.runtime?.service_tier??runtime?.service_tier??null,input_tokens:record3.tokens.input,cached_input_tokens:record3.tokens.cached_input,output_tokens:record3.tokens.output,reasoning_tokens:record3.tokens.reasoning,total_tokens:record3.tokens.total,recorded_usd:record3.cost.usd,recorded_brl:record3.cost.brl,recorded_fx_rate:record3.cost.fx_rate??null,source_started_at:record3.source_started_at??null,source_finished_at:record3.source_finished_at??null,duration_ms:record3.source_started_at&&record3.source_finished_at?Math.max(0,Date.parse(record3.source_finished_at)-Date.parse(record3.source_started_at)):null})),entrypoint_usage:{conversation:aggregate.conversation,planning:aggregate.planning,execution:aggregate.execution,total:usage}}}}}function canonicalAgentName(agent){return agent.startsWith("agent-")?`zaip-agent-${agent.slice("agent-".length)}`:agent}function effectiveConfiguration(fold){const models=new Set([...fold.provider_invocation_records.map(record3=>record3.effective.model),...fold.model_call_records.map(record3=>record3.model),...fold.effective_usage_records.map(record3=>record3.model)].filter(value=>value!==null));const efforts=new Set([...fold.provider_invocation_records.map(record3=>record3.effective.reasoning_effort),...fold.effective_usage_records.map(record3=>record3.runtime?.reasoning_effort??null),...fold.model_call_records.map(record3=>record3.runtime?.reasoning_effort??null)].filter(value=>value!==null));return{effective_model:models.size===1?[...models][0]??null:null,effective_reasoning_effort:efforts.size===1?[...efforts][0]??null:null,effective_config_mixed:models.size>1||efforts.size>1}}function callSummary(fold){const ids=new Set([...fold.model_selection_records.map(record3=>record3.invocation_id),...fold.provider_invocation_records.map(record3=>record3.invocation_id)]);const base={cli_call_count:ids.size===0?null:ids.size,call_count:null,terminal_call_count:null,failed_call_count:null,cancelled_call_count:null};if(fold.model_call_records.length>0)return{...base,call_count:fold.model_call_records.length};if(ids.size===0)return base;return{...base,call_count:ids.size,terminal_call_count:fold.provider_invocation_records.length,failed_call_count:fold.provider_invocation_records.filter(record3=>record3.status==="failed").length,cancelled_call_count:fold.provider_invocation_records.filter(record3=>record3.status==="cancelled").length}}function lifecycleManifestEventFromDecision(decision){return{schema_version:1,event_id:`${decision.id}:${decision.created_at}`,occurred_at:decision.created_at,operation:"upsert",entity:{kind:"decision",id:decision.id,title:decision.title,status:null,risk:null,priority:null,updated_at:decision.created_at,relations:[decision.scope_id],relation_edges:[{target_id:decision.scope_id,type:"references",direction:"outbound",provenance:"explicit",source_locator:`decision:${decision.id}`}],usage:null,data:{origin:decision.origin,scope_type:decision.scope_type,scope_id:decision.scope_id,category:decision.category,created_at:decision.created_at}}}}function relationEdgesFromEntity(entity,relations){return relations.map(target_id=>{const explicit=Object.entries(entity).some(([key,value])=>key.endsWith("_id")&&value===target_id||key.endsWith("_ids")&&Array.isArray(value)&&value.includes(target_id));return{target_id,type:target_id.startsWith("REQ-")||target_id.startsWith("AC-")?"requirement":"references",direction:"outbound",provenance:explicit?"explicit":"derived",source_locator:`record:${String(entity.id)}`}})}function findRunId(value){if(typeof value!=="object"||value===null)return void 0;const record3=value;if(typeof record3.run_id==="string")return record3.run_id;for(const child of Object.values(record3)){const result2=findRunId(child);if(result2!==void 0)return result2}return void 0}function collectRunIds(value){const found=new Set;const visit=candidate=>{if(Array.isArray(candidate)){candidate.forEach(visit);return}if(typeof candidate!=="object"||candidate===null)return;const record3=candidate;if(typeof record3.run_id==="string"&&record3.run_id.startsWith("RUN-")){found.add(record3.run_id)}Object.values(record3).forEach(visit)};visit(value);return[...found]}function findDecision(value){if(typeof value!=="object"||value===null)return void 0;const record3=value;if(typeof record3.id==="string"&&record3.id.startsWith("DEC-")&&typeof record3.created_at==="string"){return record3}for(const child of Object.values(record3)){const result2=findDecision(child);if(result2!==void 0)return result2}return void 0}async function lifecycleManifestBootstrapEvents(composition,filesystem){const[prds,specs,changes,tasks,executions,runs,decisions,assurance]=await Promise.all([composition.prds.list(),composition.specs.list(),composition.changes.list(),composition.tasks.list(),composition.executions.list(),composition.runs.list(),composition.decisions.list(),lifecycleAssuranceBootstrapEvents(filesystem)]);return[...[...prds,...specs,...changes,...tasks,...executions].map(entity=>lifecycleManifestEventFromEntity(entity)),...runs.map(lifecycleManifestEventFromRun),...decisions.map(lifecycleManifestEventFromDecision),...assurance]}async function lifecycleAssuranceBootstrapEvents(filesystem){const paths=await filesystem.listFiles(".agents/records/changes",".md");const events=[];for(const path of paths){const isEvidence=path.includes("/artifacts/evidence/");const isValidation=/\/artifacts\/(?:tests|evals|checks)\//.test(path);if(!isEvidence&&!isValidation)continue;try{const content=await filesystem.readText(path);const artifact=isEvidence?parseMarkdown(content,evidenceArtifactV2Schema).metadata:parseMarkdown(content,validationArtifactV2Schema).metadata;const timestamp12="observed_at"in artifact?artifact.observed_at:artifact.executed_at;events.push(lifecycleManifestEventFromEntity({...artifact,updated_at:timestamp12}))}catch{}}return events}var GRAPH_RESULT_LIMIT,GRAPH_VISIT_LIMIT;var init_lifecycle_manifest_commands=__esm({"src/lifecycle-manifest-commands.ts"(){"use strict";init_src();init_src4();init_src5();init_src8();init_src8();init_src6();init_cli_arguments();init_lifecycle_manifest_active_capture();init_lifecycle_manifest_run_projection();init_lifecycle_manifest_run_usage();init_observed_run_timing();GRAPH_RESULT_LIMIT=50;GRAPH_VISIT_LIMIT=200}});import{execFile as execFile8}from"node:child_process";import{createHash as createHash41}from"node:crypto";import{lstat as lstat7,open as open5,realpath as realpath8}from"node:fs/promises";import{isAbsolute as isAbsolute7,resolve as resolve10,toNamespacedPath}from"node:path";import{promisify as promisify8}from"node:util";function stopReceiptPath(session,turn){return`.local/hooks/stop-${hash3(JSON.stringify([session,turn]))}.json`}async function replayStopReceipt(filesystem,session,turn,options={}){const path=stopReceiptPath(session,turn);const source=JSON.parse(await filesystem.readText(path));if(source.schema_version!==1||source.session_id!==session||source.turn_id!==turn||source.event?.session_id!==session||source.event?.turn_id!==turn)throw new Error("Stop replay identity mismatch");const hook=filesystem.resolve(".codex/hooks/zaip-conversation-lifecycle.mjs");const child=promisify8(execFile8)(process.execPath,[hook,options.automatic?"--recover-previous-turn":"--replay-receipt"],{cwd:filesystem.root,windowsHide:true,timeout:options.automatic?9e3:5e4,maxBuffer:262144});child.child.stdin?.end(JSON.stringify({...source.event,stop_hook_active:true}));await child;const result2=JSON.parse(await filesystem.readText(path));return{session_id:session,turn_id:turn,state:result2.state,error:result2.error??null}}async function assertTrustedStopReceipt(filesystem,session,turn){const receipt=stopReceiptSchema.parse(JSON.parse(await filesystem.readText(stopReceiptPath(session,turn))));if(receipt.session_id!==session||receipt.turn_id!==turn)throw new Error("Stop receipt session/turn mismatch");const age=Date.now()-Date.parse(receipt.observed_at);if(age<-5e3||age>7*864e5)throw new Error("Stop receipt requires a fresh transcript observation");const cursor=receipt.cursor;if(!isAbsolute7(cursor.path))throw new Error("Stop transcript path must be absolute");if(/^(?:\\\\|\/\/)/.test(cursor.path)&&!/^\\\\\?\\[a-z]:\\/i.test(cursor.path))throw new Error("Stop transcript cannot use network or device paths");const identity2=path=>process.platform==="win32"?toNamespacedPath(resolve10(path)).toLowerCase():resolve10(path);const info=await lstat7(cursor.path);if(!info.isFile()||info.isSymbolicLink()||identity2(await realpath8(cursor.path))!==identity2(cursor.path))throw new Error("Stop transcript cannot follow links");const handle=await open5(cursor.path,"r");try{const stat5=await handle.stat();if(stat5.dev!==cursor.dev||stat5.ino!==cursor.ino||stat5.birthtimeMs!==cursor.birthtime_ms||stat5.size<cursor.size||cursor.offset>cursor.size||stat5.size===cursor.size&&(stat5.mtimeMs!==cursor.mtime_ms||stat5.ctimeMs!==cursor.ctime_ms))throw new Error("Stop transcript replaced or truncated after observation");const readProof=async proof=>{if(proof.offset+proof.length>cursor.offset)throw new Error("Stop proof exceeds observed transcript");const buffer=Buffer.alloc(proof.length);const read=await handle.read(buffer,0,buffer.length,proof.offset);if(read.bytesRead!==buffer.length||hash3(buffer)!==proof.sha256)throw new Error("Stop transcript proof mismatch");return buffer};const header=await readProof(cursor.session_proof);const terminal=await readProof(cursor.terminal_proof);await readProof(cursor.anchor);if(cursor.session_proof.offset!==0||header.at(-1)!==10||terminal.at(-1)!==10||cursor.terminal_proof.offset<cursor.session_proof.length)throw new Error("Stop proof must identify complete ordered JSONL records");const first=JSON.parse(header.toString("utf8"));const sessionId=first.type==="session_meta"?first.payload?.id??first.payload?.session_id:first.payload?.type==="session_meta"?first.payload.id??first.payload.session_id:null;const last=JSON.parse(terminal.toString("utf8")).payload;if(sessionId!==session||last?.type!=="task_complete"||last.turn_id!==turn)throw new Error("Stop terminal evidence belongs to another session or turn");const status=last.status==="cancelled"?"cancelled":last.status==="failed"||last.error!=null?"failed":"completed";if(status!==cursor.terminal_status)throw new Error("Stop outcome differs from observed terminal event");const after=await handle.stat();if(stat5.size!==after.size||stat5.mtimeMs!==after.mtimeMs||stat5.ctimeMs!==after.ctimeMs)throw new Error("Stop transcript changed during proof verification");return{run_id:receipt.run_id,status}}finally{await handle.close()}}async function reconcileVerifiedStop(parsed,filesystem,composition,lifecycle,reconcile){requireOptions(parsed.options,["session","turn"]);const session=String(parsed.options.session).trim();const turn=String(parsed.options.turn).trim();const proof=await assertTrustedStopReceipt(filesystem,session,turn);const key=createHash41("sha256").update(JSON.stringify(["codex",session,turn,null,null])).digest("hex");const correlation=JSON.parse(await filesystem.readText(`.local/codex-telemetry-spool/v1/correlations/${key}.json`));if(correlation.schema_version!==1||correlation.agent_path!==null||correlation.thread_id!==session||correlation.turn_id!==turn||correlation.run_id!==proof.run_id)throw new UsageError("Stop correlation does not match exact terminal evidence");const root=await composition.runs.read(proof.run_id);if(root.run.parent_run_id!==null||root.run.client_thread_id!==session||root.run.client_turn_id!==turn||root.run.agent!=="agent-orchestrator"||root.run.run_role!=="orchestrator")throw new UsageError("reconcile-stop requires the exact canonical orchestrator root");if(root.run.task_id===null){return runConversationV2Command("finish",{...parsed,options:{...parsed.options,run:root.run.run_id,status:proof.status,summary:"Codex host turn completed"}},composition,filesystem,lifecycle)}return reconcile(root,composition,lifecycle,proof.status)}var hash3;var init_stop_receipt=__esm({"src/stop-receipt.ts"(){"use strict";init_src();init_cli_arguments();init_run_conversation_v2();hash3=value=>createHash41("sha256").update(value).digest("hex")}});import{createHash as createHash42}from"node:crypto";import{lstat as lstat8,open as open6,realpath as realpath9}from"node:fs/promises";import{isAbsolute as isAbsolute8,resolve as resolve11,toNamespacedPath as toNamespacedPath2}from"node:path";async function verifyStopPersistence(filesystem,composition,session,turn,runId){const proof=await assertTrustedStopReceipt(filesystem,session,turn).catch(()=>{throw new Error("previous_stop_proof_invalid")});const fold=await composition.runs.read(runId);if(proof.run_id!==runId||fold.finished===null||fold.finished.status!==proof.status||fold.run.client_thread_id!==session||fold.run.client_turn_id!==turn||fold.run.parent_run_id!==null||fold.run.run_role!=="orchestrator"||fold.run.agent!=="agent-orchestrator")throw new Error("previous_stop_canonical_not_terminal");if(fold.run.task_id!==null){const task=(await composition.tasks.read(fold.run.task_id)).task;if(!["completed","blocked","failed","cancelled"].includes(task.status))throw new Error("previous_stop_task_not_terminal")}}async function regular(path,limit){if(!isAbsolute8(path)||/^(?:\\\\|\/\/)/.test(path)&&!/^\\\\\?\\[a-z]:\\/i.test(path))throw new Error("previous_stop_unsafe_path");const stat5=await lstat8(path);if(!stat5.isFile()||stat5.isSymbolicLink()||identity(await realpath9(path))!==identity(path)||limit!==void 0&&stat5.size>limit)throw new Error("previous_stop_unsafe_file");return stat5}async function precedingTurn(path,session,current){await regular(path);const handle=await open6(path,"r");try{const stat5=await handle.stat();const read=async(offset,length)=>{const buffer=Buffer.alloc(length);const{bytesRead}=await handle.read(buffer,0,length,offset);if(bytesRead!==length)throw new Error("previous_stop_transcript_changed");return buffer};const header=await read(0,Math.min(stat5.size,1024*1024));const end=header.indexOf(10);if(end<0)throw new Error("previous_stop_header_unavailable");const first=JSON.parse(header.subarray(0,end).toString("utf8"));if(first.type!=="session_meta"||(first.payload?.id??first.payload?.session_id)!==session)throw new Error("previous_stop_session_mismatch");const start=Math.max(0,stat5.size-16*1024*1024);const tail=await read(start,stat5.size-start);const aligned=start===0?tail:tail.subarray(tail.indexOf(10)+1);if(start>0&&tail.indexOf(10)<0)throw new Error("previous_stop_tail_unavailable");const lines2=aligned.toString("utf8").split("\n");lines2.pop();const turns=[];let terminal=false;for(const line of lines2){if(!line.trim())continue;if(Buffer.byteLength(line)>8*1024*1024)throw new Error("previous_stop_line_too_large");const row=JSON.parse(line),payload=row.payload;if((row.type==="turn_context"||payload?.type==="task_started")&&typeof payload?.turn_id==="string"&&payload.turn_id!==turns.at(-1)){turns.push(payload.turn_id);if(turns.length>2)turns.shift();terminal=false}if(["task_complete","turn_aborted"].includes(payload?.type)&&payload.turn_id===current)terminal=true}const after=await handle.stat();if(stat5.size!==after.size||stat5.mtimeMs!==after.mtimeMs||stat5.ctimeMs!==after.ctimeMs)throw new Error("previous_stop_transcript_changed");if(turns.length!==2||turns[1]!==current||terminal)throw new Error("previous_stop_live_turn_unverified");return turns[0]}finally{await handle.close()}}async function recoverPreviousStop(filesystem,invocation2,composition){const session=invocation2.clientThreadId,current=invocation2.clientTurnId,path=invocation2.transcriptPath;if(!session||!current||!path)return{state:"skipped",reason:"previous_stop_identity_unavailable"};let previous,runId;try{previous=await precedingTurn(path,session,current);const receiptFile=filesystem.resolve(stopReceiptPath(session,previous));if(!await filesystem.exists(stopReceiptPath(session,previous)))return{state:"skipped",reason:"previous_stop_receipt_missing",previous_turn_id:previous};await regular(receiptFile,1024*1024);const source=JSON.parse(await filesystem.readText(stopReceiptPath(session,previous)));if(source.schema_version!==1||source.session_id!==session||source.turn_id!==previous||!["pending","persisted"].includes(source.state)||source.event?.hook_event_name!=="Stop"||source.event.session_id!==session||source.event.turn_id!==previous||typeof source.event.cwd!=="string"||identity(source.event.cwd)!==identity(filesystem.root)||typeof source.event.transcript_path!=="string"||identity(source.event.transcript_path)!==identity(path))throw new Error("previous_stop_receipt_invalid");const key=hash4(JSON.stringify(["codex",session,previous,null,null]));const correlationPath=`.local/codex-telemetry-spool/v1/correlations/${key}.json`;await regular(filesystem.resolve(correlationPath),16384);const correlation=JSON.parse(await filesystem.readText(correlationPath));if(correlation.schema_version!==1||correlation.thread_id!==session||correlation.turn_id!==previous||correlation.agent_path!==null||typeof correlation.run_id!=="string")throw new Error("previous_stop_correlation_invalid");const root=(await composition.runs.read(correlation.run_id)).run;if(root.parent_run_id!==null||root.run_role!=="orchestrator"||root.agent!=="agent-orchestrator"||root.client_thread_id!==session||root.client_turn_id!==previous||root.task_id!==correlation.task_id||source.run_id!==void 0&&source.run_id!==root.run_id)throw new Error("previous_stop_root_mismatch");runId=root.run_id;if(source.state==="persisted"){await verifyStopPersistence(filesystem,composition,session,previous,runId);return{state:"persisted",reason:null,previous_turn_id:previous,run_id:runId}}await regular(filesystem.resolve(".codex/hooks/zaip-conversation-lifecycle.mjs"),2*1024*1024);const result2=await replayStopReceipt(filesystem,session,previous,{automatic:true});if(result2.state==="persisted")await verifyStopPersistence(filesystem,composition,session,previous,runId);return{state:result2.state==="persisted"?"persisted":"pending",reason:result2.error,previous_turn_id:previous,run_id:runId}}catch(error51){return{state:"pending",reason:error51 instanceof Error?error51.message:"previous_stop_unavailable",...previous===void 0?{}:{previous_turn_id:previous},...runId===void 0?{}:{run_id:runId}}}}var identity,hash4;var init_previous_stop_recovery=__esm({"src/previous-stop-recovery.ts"(){"use strict";init_stop_receipt();identity=path=>process.platform==="win32"?toNamespacedPath2(resolve11(path)).toLowerCase():resolve11(path);hash4=value=>createHash42("sha256").update(value).digest("hex")}});function preview(parsed,filesystem,layout){return resolveConversationContinuation(parsed,createV2Composition(filesystem,layout),filesystem)}async function capture(parsed,filesystem,layout,write){const invocation2=await resolveRunClientInvocation(filesystem,parsed.options.client??"codex");const recovery=await recoverPreviousStop(filesystem,invocation2,createV2Composition(filesystem,layout));const result2=await withLifecycleCanonicalMutationLock(filesystem,()=>write({invocation:invocation2,recovery}),{timeout_ms:15e3});return{...result2,stop_recovery:recovery}}function command(action,parsed,composition,filesystem,lifecycle,captured){const pending=captured?.recovery.state==="pending"?captured.recovery:void 0;return runConversationV2Command(action,parsed,composition,filesystem,lifecycle,captured===void 0?void 0:{invocation:captured.invocation,pendingRun:pending?.run_id,pendingTurn:pending?.previous_turn_id})}async function invocation(filesystem,client,intake2){return intake2?.invocation??await resolveRunClientInvocation(filesystem,client)}async function openIntakes(composition,client,thread,turn,snapshot,intake2){return(await openThreadIntakes(composition,client,thread,turn,snapshot)).filter(fold=>fold.run.run_id!==intake2?.pendingRun&&fold.run.client_turn_id!==intake2?.pendingTurn)}var init_conversation_stop_intake=__esm({"src/conversation-stop-intake.ts"(){"use strict";init_v2_router();init_conversation_intake_settlement();init_conversation_resolution();init_lifecycle_manifest_commands();init_previous_stop_recovery();init_run_client_invocation();init_run_conversation_v2()}});import{execFile as execFileCallback}from"node:child_process";import{promisify as promisify9}from"node:util";async function runDeveloperIdentityCommand(action,parsed,filesystem){if(action==="identity")action=parsed.positionals[2];if(action==="show")return{identity:await readDeveloperIdentityCache(filesystem)};if(action==="set")action="bootstrap";if(action!=="bootstrap")throw new UsageError("developer identity requires show or bootstrap");return{identity:await resolveDeveloperIdentityForRoot(filesystem,{force:true})}}async function resolveDeveloperIdentityForRoot(filesystem,options={}){const now=options.now??new Date;const cached2=await readDeveloperIdentityCache(filesystem);if(cached2!==null&&!options.force&&!developerIdentityNeedsRevalidation(cached2,now)){return cached2}try{const account=await(options.lookup??authenticatedGithubAccount)();return writeDeveloperIdentityCache(filesystem,verifiedDeveloperIdentity(account,now))}catch(error51){if(cached2!==null)return cachedFallbackDeveloperIdentity(cached2);throw new UsageError(`GitHub bootstrap failed; authenticate with gh and retry (${error51 instanceof Error?error51.message:String(error51)})`)}}async function authenticatedGithubAccount(){try{const{stdout}=await execFile9("gh",["api","user"],{encoding:"utf8"});const parsed=JSON.parse(stdout);if(typeof parsed.id!=="number"||!Number.isSafeInteger(parsed.id)||typeof parsed.login!=="string"||parsed.login.length===0)throw new Error("GitHub user response lacks id/login");return{id:String(parsed.id),login:parsed.login}}catch(error51){throw new Error(`GitHub account lookup failed (${error51 instanceof Error?error51.message:String(error51)})`)}}var execFile9;var init_developer_identity_command=__esm({"src/developer-identity-command.ts"(){"use strict";init_src5();init_cli_arguments();execFile9=promisify9(execFileCallback)}});function validatedDirectAuthorization(parsed,clientInvocation,model){const authorization=parsed.options["direct-authorization"];if(authorization===void 0)return void 0;if(!authorization.trim()||clientInvocation.clientThreadId===null||clientInvocation.clientTurnId===null||clientInvocation.clientTurnId.startsWith("local-")||["unknown","unavailable","manual"].includes(model)){throw new UsageError("Direct execution requires an observed Task-scoped delivery root and explicit authorization")}return authorization}var init_direct_authorization=__esm({"src/direct-authorization.ts"(){"use strict";init_cli_arguments()}});import{execFile as execFile10}from"node:child_process";import{promisify as promisify10}from"node:util";async function assertGitDeliveryReady(root){const git6=async(...args)=>(await exec2("git",args,{cwd:root,windowsHide:true,encoding:"utf8",timeout:1e4})).stdout.trim();await git6("--version").catch(()=>{throw new Error("git-unavailable: Install Git before starting delivery.")});const inside=await git6("rev-parse","--is-inside-work-tree").catch(()=>"");if(inside!=="true")throw new Error("git-repository-required: Initialize or open the selected Git repository before starting delivery.");const head=await git6("rev-parse","--verify","HEAD").catch(()=>"");if(!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(head))throw new Error("git-head-required: Create the initial repository commit before starting delivery.");await git6("var","GIT_AUTHOR_IDENT").catch(()=>{throw new Error("git-identity-required: Configure your Git commit name and email before starting delivery.")})}var exec2;var init_git_delivery_preflight=__esm({"src/git-delivery-preflight.ts"(){"use strict";exec2=promisify10(execFile10)}});async function executionForTask(task,repositories){const canonicalExecutionId=task.plan_ref?.execution_id??task.prepared_plan?.execution_id??null;if(canonicalExecutionId!==null){const{execution}=await repositories.executions.read(canonicalExecutionId);if(!execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id)){throw new LifecycleGateError(`Execution ${canonicalExecutionId} does not contain Task/Change ${task.id}/${task.change_id}`)}return execution}const executions=(await repositories.executions.list()).filter(execution=>execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id));if(executions.length!==1){throw new LifecycleGateError(`Task ${task.id} must resolve to exactly one Execution; found ${executions.length}`)}return executions[0]}async function executionForCompletionRun(task,canonicalExecution,run,repositories){if(run.run.execution_id===canonicalExecution.id)return canonicalExecution;if(run.run.continuation_of_run_id===null||run.run.execution_id===null){return canonicalExecution}const{execution}=await repositories.executions.read(run.run.execution_id);const ownsTask=execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id);if(execution.kind!=="delivery"||execution.origin.type!=="task"||execution.origin.task_id!==task.id||!ownsTask){throw new LifecycleGateError(`Continuation Run ${run.run.run_id} Execution ${execution.id} does not own Task/Change ${task.id}/${task.change_id}`)}return execution}function assertCompletedRunAttribution(run,task,executionId){if(run.finished?.status!=="completed"){throw new LifecycleGateError(`Run ${run.run.run_id} must be completed`)}assertRunAttribution(run,task,executionId)}function assertRunAttribution(run,task,executionId){const mismatches=[(run.records?.findLast(record3=>"phase"in record3)?.phase??run.run.phase)==="execution"||run.run.phase==="planning"&&run.run.work_type==="rework"?null:"phase",run.run.execution_id===executionId?null:"execution_id",run.run.task_id===task.id?null:"task_id",run.run.change_id===task.change_id?null:"change_id"].filter(value=>value!==null);if(mismatches.length>0){throw new LifecycleGateError(`Run ${run.run.run_id} attribution mismatch: ${mismatches.join(", ")}`)}}var init_lifecycle_run_attribution=__esm({"src/lifecycle-run-attribution.ts"(){"use strict";init_lifecycle_assurance_v2()}});async function readReleaseCycle(filesystem){if(!await filesystem.exists(RELEASE_CYCLE_PATH))return null;let value;try{value=JSON.parse(await filesystem.readText(RELEASE_CYCLE_PATH))}catch{throw new UsageError("Release cycle configuration is invalid")}if(value.schema_version!==1||!releaseId.test(value.current_release??"")||!["open","frozen"].includes(value.state??""))throw new UsageError("Release cycle configuration must define schema 1, current_release and state");return value}async function assertCurrentReleaseForExecution(filesystem,targetRelease,label){const cycle=await readReleaseCycle(filesystem);if(cycle===null){if(targetRelease)throw new UsageError("Named release requires configured current release");return}if(cycle.state!=="open")throw new UsageError(`Current release ${cycle.current_release} is frozen; ${label} cannot start`);if(targetRelease===null||targetRelease===void 0)throw new UsageError(`${label} has no target release; assign the current release before execution`);if(targetRelease!==cycle.current_release)throw new UsageError(`${label} targets release ${targetRelease}; only current release ${cycle.current_release} may become ready or execute`)}async function releaseTargetForDraft(filesystem,requested){const cycle=await readReleaseCycle(filesystem);if(requested!==void 0&&!releaseId.test(requested))throw new UsageError("Target release must use major.minor, for example 4.6");if(requested!==void 0&&cycle!==null){const[major=0,minor=0]=requested.split(".").map(Number);const[currentMajor=0,currentMinor=0]=cycle.current_release.split(".").map(Number);if(major<currentMajor||major===currentMajor&&minor<currentMinor)throw new UsageError("A new draft cannot target a release older than the current release")}return requested??cycle?.current_release??null}async function taskFirstRelease(filesystem,requested){const target=await releaseTargetForDraft(filesystem,requested);await assertCurrentReleaseForExecution(filesystem,target,"Task-first work");return target}async function assertTaskStartRelease(filesystem,repositories,id){const{task}=await repositories.tasks.read(id);if(["executing","verifying"].includes(task.status))return;const execution=await executionForTask(task,repositories);const target=task.target_release??(execution.origin.type==="prd"?(await repositories.prds.read(execution.origin.prd_id)).prd.target_release:execution.origin.type==="spec"?(await repositories.specs.read(execution.origin.spec_id)).spec.target_release:null);await assertCurrentReleaseForExecution(filesystem,target,"Task")}var RELEASE_CYCLE_PATH,releaseId;var init_release_cycle=__esm({"src/release-cycle.ts"(){"use strict";init_cli_arguments();init_lifecycle_run_attribution();RELEASE_CYCLE_PATH=".agents/config/release-cycle.json";releaseId=/^(?:[1-9]\d*)\.(?:0|[1-9]\d*)$/}});function taskAssuranceRiskSignalsOption(value){if(value===void 0)return void 0;try{if(Buffer.byteLength(value,"utf8")>4096)throw new Error("size");return assuranceRiskSignalsSchema.parse(JSON.parse(value))}catch{throw new UsageError("--assurance-risk-signals requires a valid risk-signals JSON object (max 4 KiB)")}}var init_task_assurance_options=__esm({"src/task-assurance-options.ts"(){"use strict";init_src7();init_cli_arguments()}});async function createTaskAndChangeAtomically(filesystem,composition,taskInput){const created=new Map;try{const task=await composition.tasks.createDraft(taskInput);created.set(composition.tasks.path(task.id),composition.tasks.serialize(task));const change=await composition.changes.createDraft({id:task.change_id,title:task.title,risk:task.risk,taskId:task.id,requirementIds:task.requirement_ids,acceptanceIds:task.acceptance_ids});return{task,change}}catch(error51){await rollbackTaskChangeCreation(filesystem,created);throw error51}}async function rollbackTaskChangeCreation(filesystem,created){for(const[path,content]of[...created].reverse()){await filesystem.removeFileIfContentMatches(path,content)}}var init_task_change_creation=__esm({"src/task-change-creation.ts"(){"use strict"}});function compactRunAggregate(aggregate){const bucket=value=>({usage_event_count:value.usage_event_count,tokens:value.tokens,cost:value.cost,coverage:value.coverage});return{scope_id:aggregate.scope_id,run_count:aggregate.run_count,run_coverage:aggregate.run_coverage,attribution:aggregate.attribution,conversation:bucket(aggregate.conversation),planning:bucket(aggregate.planning),execution:bucket(aggregate.execution),total:bucket(aggregate.total),work_types:{new:bucket(aggregate.work_types.new),rework:bucket(aggregate.work_types.rework)}}}function runV2CostInput(fold){return{run:{run_id:fold.run.run_id,attribution_status:fold.run.attribution_status,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,work_type:fold.run.work_type},records:fold.records,effective_usage_records:fold.effective_usage_records}}function runV2Summary(fold,composition){const usage=aggregateRunV2Usage([runV2CostInput(fold)],fold.run.run_id).total;const callIds=new Set([...fold.model_selection_records.map(record3=>record3.invocation_id),...fold.provider_invocation_records.map(record3=>record3.invocation_id)]);return{id:fold.run.run_id,status:fold.status,created_at:fold.run.occurred_at,finished_at:fold.finished?.occurred_at??null,phase:latestRunV2Phase(fold.records),run_role:effectiveRunV2Role(fold.run),parent_run_id:fold.run.parent_run_id,entrypoint:fold.run.entrypoint,work_type:fold.run.work_type,intake:fold.run.intake??null,agent:fold.run.agent,agent_name:fold.run.agent_name??(fold.run.agent.startsWith("agent-")?`zaip-agent-${fold.run.agent.slice("agent-".length)}`:fold.run.agent),model:fold.run.model,reasoning_effort:fold.run.reasoning_effort??fold.model_selection_records[0]?.requested.reasoning_effort??null,call_count:callIds.size===0?null:callIds.size,client_thread_id:fold.run.client_thread_id??null,client_turn_id:fold.run.client_turn_id??null,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id,usage:{event_count:usage.usage_event_count,tokens:usage.tokens,cost:usage.cost,coverage:usage.coverage},artifact_path:composition.runs.path(fold.run.run_id)}}var init_run_conversation_summary=__esm({"src/run-conversation-summary.ts"(){"use strict";init_src4();init_src5();init_conversation_intake_settlement()}});import{execFile as execFile11}from"node:child_process";import{promisify as promisify11}from"node:util";function reconciledHistoricalScope(commit,path){return commit==="967ca013240808b727bc7df3fa968213df1d16d8"&&path==="pnpm-workspace.yaml"}async function policyGit(root,...args){return(await exec3("git",["--literal-pathspecs",...args],{cwd:root,encoding:"utf8",windowsHide:true,timeout:15e3,maxBuffer:16*1024*1024})).stdout}function requiresTaskIdentity(path){return!path.startsWith(".agents/records/")&&!path.startsWith(".local/")}function trailers(message){const result2=new Map;const block2=message.replace(/\r\n/g,"\n").trimEnd().split(/\n\s*\n/).at(-1)??"";for(const line of block2.split("\n")){const match=/^(ZAIP-[A-Za-z-]+): (\S+)$/.exec(line);if(line.startsWith("ZAIP-")&&(!match||!allowedTrailers.has(match[1]??"")))throw new Error("Unknown or malformed ZAIP trailer");if(!match)continue;const key=match[1];if(result2.has(key))throw new Error(`Duplicate commit trailer: ${key}`);result2.set(key,match[2])}if(message.split(/\r?\n/).filter(line=>line.startsWith("ZAIP-")).length!==result2.size)throw new Error("ZAIP identity must occur exactly once in the final trailer block");return result2}async function readCanonicalTaskCommit(filesystem,taskId,executionId,agent){const layout=await loadWorkspaceLayout(filesystem);const{task}=await new TaskV2Repository(filesystem,layout).read(taskId);const{change}=await new ChangeV2Repository(filesystem,layout).read(task.change_id);const{execution}=await new ExecutionV2Repository(filesystem,layout).read(executionId);if(task.id!==taskId||change.id!==task.change_id||execution.id!==executionId)throw new Error("Commit record ID does not match its requested canonical path");if(task.plan_hash===null||!["executing","verifying","completed"].includes(task.status))throw new Error("Product commit requires a materialized Task delivery");if(!change.task_ids.includes(task.id)||!execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===change.id))throw new Error("Commit Task, Change and delivery Execution are not causally linked");const source=change.source;if(source.type==="task"&&source.task_id!==task.id)throw new Error("Standalone Change belongs to a different Task");const specId=source.type==="task"?null:source.spec_id;let prdId=source.type==="prd"?source.prd_id:null;if(specId!==null){const{spec}=await new DeliverySpecV2Repository(filesystem,layout).read(specId);if(spec.id!==specId)throw new Error("Commit SPEC does not match its canonical path");if(source.type==="prd"&&spec.prd_id!==prdId)throw new Error("SPEC and PRD do not match");prdId=spec.prd_id}if(prdId!==null){const{prd}=await new PrdV2Repository(filesystem,layout).read(prdId);if(prd.id!==prdId)throw new Error("Commit PRD does not match its canonical path")}const identity2={agent,title:task.title,task_id:task.id,change_id:change.id,execution_id:execution.id,prd_id:prdId,spec_id:specId};const recordPaths=[layout.activePath("task",task.id),layout.activePath("change",change.id),layout.activePath("execution",execution.id)];if(specId)recordPaths.push(layout.activePath("spec",specId));if(prdId)recordPaths.push(layout.activePath("prd",prdId));return{identity:identity2,recordPaths,writeScopes:task.write_scopes}}async function validateTaskCommit(input){const paths=input.paths.filter(requiresTaskIdentity);if(paths.length===0)return{valid:true,kind:"records-only"};const refs=trailers(input.message);const taskId=refs.get("ZAIP-Task");const executionId=refs.get("ZAIP-Execution");const agent=refs.get("ZAIP-Agent");if(!taskId||!executionId||!["CODEX","CLAUDE"].includes(agent??""))throw new Error("Product commit requires a real Task, Execution and CODEX/CLAUDE agent. Use task commit TASK --run RUN --files PATHS; never select the latest global Task.");const filesystem=input.filesystem??new CommitTreeFileSystem(input.root,input.tree??"");const canonical=await readCanonicalTaskCommit(filesystem,taskId,executionId,agent);const expected=formatAutonomousTaskCommit(canonical.identity);if(input.message.split(/\r?\n/)[0]!==expected.split("\n")[0])throw new Error(`Commit subject must be: ${expected.split("\n")[0]}`);const expectedRefs=trailers(expected);const productCommit=refs.get("ZAIP-Product-Commit");if(productCommit!==void 0){if(!/^[a-f0-9]{40}$/.test(productCommit))throw new Error("Invalid ZAIP-Product-Commit");const productRefs=trailers(await policyGit(input.root,"show","-s","--format=%B",productCommit));if(productRefs.get("ZAIP-Task")!==taskId)throw new Error("Product commit belongs to a different Task")}for(const key of["ZAIP-Task","ZAIP-Change","ZAIP-Execution","ZAIP-Agent","ZAIP-PRD","ZAIP-SPEC"])if(refs.get(key)!==expectedRefs.get(key))throw new Error(`Commit trailer does not match canonical records: ${key}`);const outside2=paths.filter(path=>!canonical.writeScopes.some(scope=>workspaceScopeMatches(scope,path))&&!reconciledHistoricalScope(input.tree,path));if(outside2.length)throw new Error(`Commit paths outside Task write scopes: ${outside2.join(", ")}`);return{valid:true,kind:"task",task_id:canonical.identity.task_id}}async function stagedCommitPaths(root){return(await policyGit(root,"diff","--cached","--name-only","--no-renames","-z","--")).split("\0").filter(Boolean)}async function validateCommitRange(root,base,head){const resolveCommit=async ref=>(await policyGit(root,"rev-parse","--verify",`${ref}^{commit}`)).trim();const[start,end]=await Promise.all([resolveCommit(base),resolveCommit(head)]);await policyGit(root,"merge-base","--is-ancestor",start,end);const commits=(await policyGit(root,"rev-list","--reverse",`${start}..${end}`)).trim().split("\n").filter(Boolean);for(const commit of commits){const parents=(await policyGit(root,"show","-s","--format=%P",commit)).trim().split(" ").filter(Boolean);const paths=parents.length?(await policyGit(root,"diff","--name-only","--no-renames","-z",parents[0],commit,"--")).split("\0").filter(Boolean):(await policyGit(root,"diff-tree","--root","--no-commit-id","--name-only","--no-renames","-r","-z",commit)).split("\0").filter(Boolean);await validateTaskCommit({root,tree:commit,paths,message:await policyGit(root,"show","-s","--format=%B",commit)})}return{valid:true,checked:commits.length}}var exec3,allowedTrailers,CommitTreeFileSystem;var init_commit_policy=__esm({"src/commit-policy.ts"(){"use strict";init_src();init_src6();init_src7();init_lifecycle_gate_helpers();exec3=promisify11(execFile11);allowedTrailers=new Set(["ZAIP-Task","ZAIP-Change","ZAIP-Execution","ZAIP-Agent","ZAIP-PRD","ZAIP-SPEC","ZAIP-Product-Commit"]);CommitTreeFileSystem=class extends WorkspaceFileSystem{constructor(root,tree){super(root);this.tree=tree}tree;async readText(path){this.resolve(path);return policyGit(this.root,"show",`${this.tree}:${path}`)}async exists(path){this.resolve(path);try{await policyGit(this.root,"cat-file","-e",`${this.tree}:${path}`);return true}catch{return false}}}}});function assertChangedFilesInScope(task,changedFiles){const outside2=changedFilesOutsideTaskScopes(task.write_scopes,changedFiles);if(outside2.length>0){throw new LifecycleGateError(`Task ${task.id} changed files outside write scopes: ${outside2.join(", ")}`)}}async function assertChangedFilesInScopeOrCausalRecords(task,changedFiles,filesystem,executionId){const isLifecycleRecord=path=>path.startsWith(".agents/records/")||path.startsWith(".agents/data/");const outside2=changedFilesOutsideTaskScopes(task.write_scopes,changedFiles);const outsideProduct=outside2.filter(path=>!isLifecycleRecord(path));if(outsideProduct.length>0){throw new LifecycleGateError(`Task ${task.id} changed files outside write scopes: ${outsideProduct.join(", ")}`)}const records=outside2.filter(isLifecycleRecord);if(records.length===0)return;let causalRecords;try{const canonical=await readCanonicalTaskCommit(filesystem,task.id,executionId,"CODEX");causalRecords=new Set(canonical.recordPaths)}catch{throw new LifecycleGateError(`Task ${task.id} has no validated causal commit records`)}const unrelated=records.filter(path=>!causalRecords.has(path));if(unrelated.length>0){throw new LifecycleGateError(`Task ${task.id} changed files outside causal records: ${unrelated.join(", ")}`)}}var init_lifecycle_changed_files=__esm({"src/lifecycle-changed-files.ts"(){"use strict";init_commit_policy();init_lifecycle_assurance_v2();init_lifecycle_gate_helpers()}});async function assertFinalizationCandidatePreflight(parent,outcome,evidenceIds,changedFiles,composition){if(parent.run.execution_kind!=="delivery")return;const taskId=parent.run.task_id;if(taskId===null)return;const executionId=parent.run.execution_id;if(executionId===null)throw new LifecycleGateError("Gui Task decision requires a delivery Execution");const{task}=await composition.tasks.read(taskId).catch(()=>{throw new LifecycleGateError(`Gui responsible Task is unavailable: ${taskId}`)});await assertChangedFilesInScopeOrCausalRecords(task,changedFiles,composition.filesystem,executionId);if(outcome!=="completed")return;if(!await hasPassedTypedEvidenceForRun(parent,evidenceIds,composition,await composition.runs.list())){throw new LifecycleGateError("finalization-evidence: completed Gui decision requires passed typed Evidence linked to the same Task, Change, Execution, and Run and one candidate")}const configured=composition.layout.projectConfig?.assurance;const config2=configured?.version===1?configured:{standard_depth:"auto",require_final_commit:false};if(!effectiveTaskAssurance(task,config2).require_final_commit)return;const bundle=await readAssuranceBundle(composition.filesystem,composition.layout,[task],evidenceIds);await requireFinalProductCandidate(composition.filesystem.root,bundle.validations,bundle.evidences,task.write_scopes,task.id,changedFiles)}var init_finalization_candidate_preflight=__esm({"src/finalization-candidate-preflight.ts"(){"use strict";init_lifecycle_assurance_v2();init_lifecycle_changed_files();init_run_finalization_evidence_v2()}});function assertFinalizationEvidenceInput(ids){if(ids.some(id=>!/^EVD-[A-Z0-9-]+$/.test(id))){throw new UsageError("Finalization --evidence accepts comma-separated EVD IDs only, not JSON, Decision IDs or file paths")}return ids}var init_finalization_evidence_input=__esm({"src/finalization-evidence-input.ts"(){"use strict";init_cli_arguments()}});function activeRunIds(value){if(typeof value!=="object"||value===null||value.schema_version!==1||!Array.isArray(value.items))return[];return value.items.flatMap(item=>{if(typeof item!=="object"||item===null)return[];const candidate=item;return candidate.kind==="run"&&candidate.status==="running"&&typeof candidate.id==="string"?[candidate.id]:[]})}function activeRunWindow(ids,now=Date.now(),limit=32){if(!Number.isSafeInteger(limit)||limit<1||limit>32)throw new Error("Active telemetry limit must be an integer between 1 and 32");if(ids.length===0)return ids;const minute=Math.floor(now/6e4);const start=minute*(ids.length<=limit?1:limit)%ids.length;return Array.from({length:Math.min(limit,ids.length)},(_value,index)=>ids[(start+index)%ids.length])}var init_v2_run_active_window=__esm({"src/source-size-cli/v2-run-active-window.ts"(){"use strict"}});function recentTelemetrySegmentFinder(list=listRecentCodexSegments){const sessions=new Map;return async(root,keys2,options={})=>{const key=JSON.stringify([root,options.threadId??null,options.agentPath??null,options.parentThreadId??null,options.transcriptPath??null]);let pending=sessions.get(key);if(pending===void 0){pending=list(root,new Set,{...options,turnId:null,startedAfter:null});sessions.set(key,pending)}return[...await pending].filter(segment2=>!keys2.has(segment2.segmentKey)&&segment2.turnId===options.turnId&&(!options.requireTaskComplete||segment2.terminalType==="task_complete")).sort((left,right)=>(left.finishedAt??left.startedAt??"").localeCompare(right.finishedAt??right.startedAt??"")).at(-1)??null}}async function captureActiveRunTelemetry(parsed,composition,filesystem){if(!parsed.flags.has("disable-codex-raw"))throw new UsageError("run usage --active requires --disable-codex-raw");const activeIds=activeRunIds(await new LifecycleManifestStore(filesystem).readActiveWork());const captured=[];for(const id of activeRunWindow(activeIds,Date.now(),numberOption(parsed.options.limit,32))){const fold=await composition.runs.read(id);if(fold.finished===null&&isCodexTelemetryClient(fold.run.client)&&fold.run.client_turn_id!==null){const current=await recordCodexTelemetryIfAvailable(fold,composition,filesystem);captured.push({run_id:id,captured:current.records.length>fold.records.length})}}return{telemetry:{mode:"active_exact_session",captured},artifact_path:null}}function recentTelemetryRunIds(entities,now=Date.now()){const cutoff=now-72*60*60*1e3;return entities.filter(entity=>{const data2=entity.data;const terminalSourceMeasured=typeof data2?.source_finished_at==="string"&&Number.isFinite(Date.parse(data2.source_finished_at))&&entity.usage?.total_tokens!=null;return entity.kind==="run"&&data2!==null&&!terminalSourceMeasured&&Date.parse(entity.updated_at)>=cutoff&&typeof data2.client==="string"&&isCodexTelemetryClient(data2.client)&&typeof data2.client_thread_id==="string"&&data2.client_thread_id.length>0&&typeof data2.client_turn_id==="string"&&data2.client_turn_id.length>0&&(entity.status==="running"||entity.usage?.total_tokens==null||data2.call_coverage==="unavailable")}).map(entity=>entity.id).sort()}async function captureRecentRunTelemetry(parsed,composition,filesystem,capture2=recordCodexTelemetryIfAvailable){if(!parsed.flags.has("disable-codex-raw"))throw new UsageError("run usage --recent requires --disable-codex-raw");if(parsed.flags.has("active"))throw new UsageError("Choose only one telemetry window: --active or --recent");const ids=recentTelemetryRunIds(await new LifecycleManifestStore(filesystem).readEntities("run"));const limit=numberOption(parsed.options.limit,32);const window=activeRunWindow(ids,Date.now(),limit);if(ids.length>512)throw new UsageError("Recent telemetry backlog exceeds 512 Runs; capture is incomplete");const selected=parsed.flags.has("drain")?ids:window;const captured=[];if(capture2===recordCodexTelemetryIfAvailable){const folds=[];for(const id of selected)folds.push(await composition.runs.read(id));const eligible=folds.filter(fold=>isCodexTelemetryClient(fold.run.client)&&fold.run.client_turn_id!==null&&fold.run.client_thread_id!==null);const current=await recordCodexTelemetryBatch(eligible,composition,filesystem,recentTelemetrySegmentFinder());for(const[index,fold]of eligible.entries())captured.push({run_id:fold.run.run_id,captured:(current[index]?.records.length??0)>fold.records.length})}else{for(let offset=0;offset<selected.length;offset+=limit){for(const id of selected.slice(offset,offset+limit)){const fold=await composition.runs.read(id);if(!isCodexTelemetryClient(fold.run.client)||fold.run.client_turn_id===null||fold.run.client_thread_id===null)continue;const current=await capture2(fold,composition,filesystem);captured.push({run_id:id,captured:current.records.length>fold.records.length})}}}return{telemetry:{mode:"recent_exact_session",captured,candidate_count:ids.length,complete:selected.length===ids.length},artifact_path:null}}var init_recent_run_telemetry=__esm({"src/recent-run-telemetry.ts"(){"use strict";init_src4();init_src8();init_cli_arguments();init_record_codex_telemetry();init_v2_run_active_window()}});async function settleInteractionExecutionForRun(run,composition,finalizationBlockReason){if(run.run.execution_id===null)return null;let execution=(await composition.executions.read(run.run.execution_id)).execution;if(execution.kind!=="interaction")return null;if(run.finished?.status==="cancelled"){return["running","paused","verifying"].includes(execution.status)?composition.executions.transition(execution.id,"cancelled","Run explicitly cancelled"):execution}if(finalizationBlockReason!==null){return["running","paused","verifying"].includes(execution.status)?composition.executions.transition(execution.id,"blocked",null,void 0,finalizationBlockReason):execution}if(execution.status==="running"){execution=await composition.executions.transition(execution.id,"verifying")}return execution.status==="verifying"?composition.executions.transition(execution.id,"completed","Interaction finalized"):execution}var init_v2_run_interaction_execution=__esm({"src/source-size-cli/v2-run-interaction-execution.ts"(){"use strict"}});async function cancelTaskRunsForHuman(taskId,composition,parsed){return composition.runs.withUsageAttributionLock(async()=>{const candidates=await composition.runs.list();const roots2=candidates.filter(fold=>fold.finished===null&&fold.run.parent_run_id===null&&fold.run.task_id===taskId);for(const root of roots2){await cancelActiveDescendantRuns(activeDescendantRuns(root.run.run_id,candidates),composition,parsed);await cancelActiveDescendantRuns([root],composition,parsed)}return roots2.map(root=>root.run.run_id)})}async function cancelActiveDescendantRuns(descendants,composition,parsed){for(const descendant of[...descendants].reverse()){let current=await composition.runs.read(descendant.run.run_id);if(current.finished!==null)continue;if(current.effective_usage_records.length===0){const usage=unavailableUsageRecord(current,parsed,current.records.length+1);await composition.runs.appendRecord(usage);current=foldRunV2Records([...current.records,usage])}const record3=runFinishedV2Schema.parse({schema_version:2,event_id:runV2EventId(current.run.run_id,current.records.length+1),run_id:current.run.run_id,sequence:current.records.length+1,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status:"cancelled"});foldRunV2Records([...current.records,record3]);await composition.runs.appendRecord(record3)}}var init_v2_run_cancellation_and_aggregate=__esm({"src/source-size-cli/v2-run-cancellation-and-aggregate.ts"(){"use strict";init_src4();init_src5();init_run_conversation_v2();init_run_hierarchy()}});function rootRunStartConflicts(existing,input,explicitConversationId,explicitRunId){const actual=existing.run;const candidates=[["phase",actual.phase,input.phase],["entrypoint",actual.entrypoint,input.entrypoint],["work-type",actual.work_type,input.workType],["agent",actual.agent,input.agent],["provider",actual.provider,input.provider],["model",actual.model,input.model],["reasoning-effort",actual.reasoning_effort??null,input.reasoningEffort??null],["execution",actual.execution_id,input.executionId??null],["task",actual.task_id,input.taskId??null],["spec",actual.spec_id,input.specId??null],["prd",actual.prd_id,input.prdId??null],["change",actual.change_id,input.changeId??null],["continuation",actual.continuation_of_run_id,input.continuationOfRunId??null],["retry",actual.retry_of_run_id,input.retryOfRunId??null],["purpose",actual.run_purpose??null,input.runPurpose??null],["execution-kind",actual.execution_kind??null,input.executionKind??null],["direct-authorization",actual.direct_execution_authorization??null,input.directExecutionAuthorization??null],["run-role",effectiveRunV2Role(actual),input.runRole??(input.phase==="execution"?"orchestrator":"intake")]];if(existing.finished!==null)candidates.push(["terminal",existing.finished.status,"running"]);if(explicitRunId!==void 0)candidates.push(["id",actual.run_id,explicitRunId]);if(explicitConversationId!==void 0){candidates.push(["conversation",actual.conversation_id,input.conversationId])}return candidates.filter(([,left,right])=>left!==right).map(([field])=>field)}async function assertTaskExecutionIntakeCompatibleBeforeMutation(filesystem,composition,taskId,executionId){const invocation2=await resolveRunClientInvocation(filesystem,"codex");const intake2=await findIntakeForExactTurn(composition,"codex",invocation2);if(intake2===null)return;if(intake2.run.task_id===taskId&&intake2.run.execution_id===executionId)return;throw new UsageError(`Exact client turn is already captured by intake Run ${intake2.run.run_id} (Task ${intake2.run.task_id??"none"}, Execution ${intake2.run.execution_id??"none"}); it cannot start delivery for Task ${taskId} and Execution ${executionId}. Start delivery from a new observed client turn.`)}var init_execution_intake_compatibility=__esm({"src/execution-intake-compatibility.ts"(){"use strict";init_src5();init_cli_arguments();init_conversation_intake();init_run_client_invocation()}});import{posix as posix4}from"node:path";async function assertTaskEvidenceCoverage(context,task,result2){if(result2.evidence_ids.length===0){throw new LifecycleGateError(`Task ${task.id} requires at least one Evidence`)}const changeDirectory=posix4.dirname(context.layout.activePath("change",task.change_id));const mainDocuments=[await context.filesystem.readText(context.layout.activePath("change",task.change_id))];const executions=(await context.repositories.executions.list()).filter(execution=>execution.dag.nodes.some(node=>node.task_id===task.id));for(const execution of executions){mainDocuments.push(await context.filesystem.readText(context.layout.activePath("execution",execution.id)))}const documents=[];for(const evidenceId2 of result2.evidence_ids){const path=`${changeDirectory}/artifacts/evidence/${evidenceId2}.md`;const candidates=mainDocuments.filter(document=>containsIdentifier(document,evidenceId2)&&containsIdentifier(document,task.id));if(await context.filesystem.exists(path)){candidates.push(`${evidenceId2}
 ${await context.filesystem.readText(path)}`)}const resolved=candidates.find(document=>containsIdentifier(document,task.id));if(resolved===void 0){throw new LifecycleGateError(`Evidence does not resolve for Task ${task.id}: ${evidenceId2}`)}documents.push(resolved)}const evidence=documents.join("\n");const missing=task.acceptance_ids.filter(id=>!containsIdentifier(evidence,id));if(missing.length>0){throw new LifecycleGateError(`Task ${task.id} Evidence does not cover Acceptance Criteria: ${missing.join(", ")}`)}}async function assertTaskSixStageCoverage(context,task,result2,executionId,enforceLegacyRiskCounts=true,requireDecision=true){const decisions=[...await context.repositories.decisions.list({type:"change",id:task.change_id}),...await context.repositories.decisions.list({type:"execution",id:executionId})];if(requireDecision&&decisions.length===0){throw new LifecycleGateError(`Task ${task.id} requires at least one Decision for six-stage coverage`)}const changeDirectory=posix4.dirname(context.layout.activePath("change",task.change_id));const verificationPaths=(await Promise.all(["tests","evals","checks"].map(kind=>context.filesystem.listFiles(`${changeDirectory}/artifacts/${kind}`)))).flat();const relatedVerificationPaths=[];for(const path of verificationPaths){const content=await context.filesystem.readText(path);if(containsIdentifier(content,task.id)&&containsIsoTimestamp(content)){relatedVerificationPaths.push(path)}}if(relatedVerificationPaths.length===0){throw new LifecycleGateError(`Task ${task.id} requires at least one Test, Eval, or Check for six-stage coverage`)}const timestampedEvidence=[];for(const evidenceId2 of result2.evidence_ids){const path=`${changeDirectory}/artifacts/evidence/${evidenceId2}.md`;if(!await context.filesystem.exists(path))continue;const content=await context.filesystem.readText(path);if(containsIdentifier(content,task.id)&&containsIsoTimestamp(content)){timestampedEvidence.push(path)}}if(timestampedEvidence.length===0){throw new LifecycleGateError(`Task ${task.id} requires an Evidence file with the Task id and an ISO date-time for six-stage coverage`)}if(enforceLegacyRiskCounts){assertRiskScaledArtifactCounts(task.id,task.risk,relatedVerificationPaths.length,result2.evidence_ids.length)}}var init_lifecycle_evidence_v2=__esm({"src/lifecycle-evidence-v2.ts"(){"use strict";init_lifecycle_assurance_v2();init_lifecycle_gate_helpers()}});async function activateTaskMacroParents(change,repositories){const specs=[];const prds=[];const specId=change.source.type==="task"?null:change.source.spec_id;const prdId=change.source.type==="prd"?change.source.prd_id:null;if(specId!==null){let{spec}=await repositories.specs.read(specId);if(spec.status==="ready"||spec.status==="blocked"){spec=await repositories.specs.transition(spec.id,"active")}else if(spec.status!=="active"){throw new LifecycleGateError(`SPEC ${spec.id} must be ready, active, or blocked before Task start`)}specs.push(spec)}if(prdId!==null){let{prd}=await repositories.prds.read(prdId);if(prd.status==="ready"||prd.status==="blocked"){prd=await repositories.prds.transition(prd.id,"active")}else if(prd.status!=="active"){throw new LifecycleGateError(`PRD ${prd.id} must be ready, active, or blocked before Task start`)}prds.push(prd)}return{specs,prds}}var init_lifecycle_parent_activation_v2=__esm({"src/lifecycle-parent-activation-v2.ts"(){"use strict";init_lifecycle_assurance_v2()}});async function startTaskWithSnapshot(id,mode,repositories,filesystem,requireGit){await assertTaskStartRelease(filesystem,repositories,id);const{task}=await repositories.tasks.read(id);if(requireGit)await assertGitDeliveryReady(filesystem.root);const expected=mode==="resume"?"blocked":mode==="rework"?"failed":"planned";if(task.status!==expected){throw new LifecycleGateError(`Task ${id} must be ${expected} before ${mode}`)}for(const dependencyId of task.depends_on){const dependency=await repositories.tasks.read(dependencyId).catch(()=>null);if(dependency===null||dependency.task.status!=="completed"){throw new LifecycleGateError(`Task dependency is not completed: ${dependencyId}`)}}let{change}=await repositories.changes.read(task.change_id);let execution=await executionForTask(task,repositories);if(mode!=="start"){if(change.status==="blocked"||change.status==="failed"){change=await repositories.changes.transition(change.id,"executing")}if(execution.status==="blocked"||execution.status==="failed"){execution=await repositories.executions.transition(execution.id,"running")}}if(change.status!=="executing"){throw new LifecycleGateError(`Change ${change.id} must be executing before Task start`)}if(execution.status!=="running"){throw new LifecycleGateError(`Execution ${execution.id} must be running before Task start`)}const parents=await activateTaskMacroParents(change,repositories);const activeTask=await repositories.tasks.transition(id,"executing");return{task:activeTask,changes:[change],execution,...parents}}var init_lifecycle_task_start=__esm({"src/lifecycle-task-start.ts"(){"use strict";init_git_delivery_preflight();init_lifecycle_assurance_v2();init_lifecycle_parent_activation_v2();init_lifecycle_run_attribution();init_release_cycle()}});function assertAllTerminal(entities,label,terminal="completed"){const incomplete2=entities.filter(entity=>entity.status!==terminal);if(incomplete2.length>0){throw new LifecycleGateError(`${label} is not ${terminal}: ${incomplete2.map(formatLifecycleState).join(", ")}`)}}var init_lifecycle_terminal_state=__esm({"src/lifecycle-terminal-state.ts"(){"use strict";init_lifecycle_assurance_v2();init_lifecycle_gate_helpers()}});async function assertExecutionDescendantsComplete(repositories,executionId,nodes){for(const node of nodes){const{task}=await repositories.tasks.read(node.task_id);if(task.change_id!==node.change_id){throw new LifecycleGateError(`Execution ${executionId} DAG ownership mismatch for ${task.id}`)}if(task.status!=="completed"){throw new LifecycleGateError(`Execution Task must be completed: ${formatLifecycleState(task)}`)}}}async function assertSixStageDeliveryCoverage(filesystem,layout,repositories,task,result2,executionId,enforceLegacyRiskCounts,assurance){const signals=effectiveTaskRiskSignals(task);if(task.assurance_risk_signals_source==="explicit"&&task.assurance_risk_signals?.editorial_delivery===true&&assurance===null)throw new LifecycleGateError("Editorial delivery requires assurance.version: 1");await assertTaskSixStageCoverage({filesystem,layout,repositories},task,result2,executionId,enforceLegacyRiskCounts,assurance===null||!assertEditorialDeliveryEligibility(task,signals))}async function deliveryCandidateProofs(filesystem,layout,tasks,config2){const bundle=await readAssuranceBundle(filesystem,layout,tasks);const expected=config2.require_final_commit?await resolveFinalProductCandidate(filesystem.root,bundle.validations,bundle.evidences):null;const validations=expected===null?bundle.validations:bundle.validations.filter(artifact=>artifact.commit_sha===expected);const evidences=expected===null?bundle.evidences:bundle.evidences.filter(artifact=>artifact.commit_sha===expected);return{bundle,expected,validations,evidences}}var init_lifecycle_v2_delivery_assurance=__esm({"src/lifecycle-v2-delivery-assurance.ts"(){"use strict";init_editorial_delivery_assurance();init_lifecycle_assurance_v2();init_lifecycle_evidence_v2();init_lifecycle_gate_helpers()}});var LifecycleV2Gate;var init_lifecycle_v2=__esm({"src/lifecycle-v2.ts"(){"use strict";init_src6();init_editorial_delivery_assurance();init_lifecycle_assurance_v2();init_lifecycle_changed_files();init_lifecycle_evidence_v2();init_lifecycle_gate_helpers();init_lifecycle_run_attribution();init_lifecycle_task_start();init_lifecycle_terminal_state();init_lifecycle_v2_delivery_assurance();init_lifecycle_assurance_v2();init_lifecycle_gate_helpers();LifecycleV2Gate=class{constructor(filesystem,layout,repositories){this.filesystem=filesystem;this.layout=layout;this.repositories=repositories;if(layout.version===1)throw new TypeError("LifecycleV2Gate requires a modern layout")}filesystem;layout;repositories;async completeTask(id,result2){const{task}=await this.repositories.tasks.read(id);if(task.status!=="verifying"){throw new LifecycleGateError(`Task ${id} must be verifying before completion`)}try{return await this.completeVerifyingTask(task,result2)}catch(error51){if(error51 instanceof LifecycleGateError){await this.repositories.tasks.transition(id,"executing")}throw error51}}async verifyTask(id,evidenceIds){const{task}=await this.repositories.tasks.read(id);if(task.status!=="executing"&&task.status!=="verifying"){throw new LifecycleGateError(`Task ${id} must be executing or verifying before verification`)}const execution=await executionForTask(task,this.repositories);const result2=taskAssurancePreflightResult(evidenceIds);await this.assertEvidenceCoverage(task,result2);const assurance=this.assuranceConfig();await this.assertSixStageCoverage(task,result2,execution.id,assurance===null);if(assurance!==null){await assertTaskAssurancePreflightV1({filesystem:this.filesystem,layout:this.layout,task,evidence_ids:result2.evidence_ids,config:assurance})}return task.status==="verifying"?task:this.repositories.tasks.transition(id,"verifying")}async completeVerifyingTask(task,result2){for(const dependencyId of task.depends_on){const{task:dependency}=await this.repositories.tasks.read(dependencyId).catch(()=>{throw new LifecycleGateError(`Task dependency does not resolve: ${dependencyId}`)});if(dependency.status!=="completed"){throw new LifecycleGateError(`Task dependency must be completed: ${dependencyId} is ${dependency.status}`)}}const{change}=await this.repositories.changes.read(task.change_id);if(!change.task_ids.includes(task.id)){throw new LifecycleGateError(`Change ${change.id} does not own Task ${task.id}`)}if(!new Set(["executing","verifying"]).has(change.status)){throw new LifecycleGateError(`Change ${change.id} is not executing or verifying`)}if(result2.completed_run_id===null){throw new LifecycleGateError(`Completed Task ${task.id} requires a completed Run`)}const run=await this.readRequiredRun(result2.completed_run_id);const canonicalExecution=await executionForTask(task,this.repositories);if(!new Set(["running","verifying"]).has(canonicalExecution.status)){throw new LifecycleGateError(`Execution ${canonicalExecution.id} is not running or verifying`)}const execution=await executionForCompletionRun(task,canonicalExecution,run,this.repositories);if(!new Set(["running","verifying"]).has(execution.status)){throw new LifecycleGateError(`Execution ${execution.id} is not running or verifying`)}assertCompletedRunAttribution(run,task,execution.id);await this.assertEvidenceCoverage(task,result2);const assurance=this.assuranceConfig();await this.assertSixStageCoverage(task,result2,execution.id,assurance===null);if(assurance!==null){const bundle=await readAssuranceBundle(this.filesystem,this.layout,[task],result2.evidence_ids);const effectiveAssurance=effectiveTaskAssurance(task,assurance);const expectedCommit=effectiveAssurance.require_final_commit?await requireFinalProductCandidate(this.filesystem.root,bundle.validations,bundle.evidences,task.write_scopes,task.id,result2.changed_files):null;if(expectedCommit!==null){await assertEditorialCandidateDiff({root:this.filesystem.root,task,signals:effectiveTaskRiskSignals(task),commit:expectedCommit,changedFiles:result2.changed_files})}assertTaskAssuranceV1({config:assurance,task,risk:task.risk,risk_signals:effectiveTaskRiskSignals(task),write_scopes:task.write_scopes,acceptance_ids:task.acceptance_ids,validations:bundle.validations,evidences:bundle.evidences,verifier:verifierFrom(bundle.validations,run.run.agent,run.run.run_id),mutation:mutationFrom(bundle.metadata,task.id),rollback_evidence_id:bundle.evidences.find(evidence=>evidence.id.includes("ROLLBACK"))?.id??null,expected_commit_sha:expectedCommit})}await assertChangedFilesInScopeOrCausalRecords(task,result2.changed_files,this.filesystem,execution.id);return this.repositories.tasks.transition(task.id,"completed",result2)}async startTask(id,mode="start"){return(await this.startTaskWithSnapshot(id,mode)).task}async startTaskWithSnapshot(id,mode="start"){return startTaskWithSnapshot(id,mode,this.repositories,this.filesystem,this.assuranceConfig()?.require_final_commit===true)}async failTask(id,result2){const{task}=await this.repositories.tasks.read(id);if(!new Set(["executing","verifying"]).has(task.status)){throw new LifecycleGateError(`Task ${id} must be executing or verifying before failure`)}if(result2.completed_run_id===null){throw new LifecycleGateError(`Failed Task ${id} requires a failed Run`)}const execution=await executionForTask(task,this.repositories);const run=await this.readRequiredRun(result2.completed_run_id);if(run.finished?.status!=="failed"){throw new LifecycleGateError(`Run ${result2.completed_run_id} must be failed`)}assertRunAttribution(run,task,execution.id);await assertChangedFilesInScopeOrCausalRecords(task,result2.changed_files,this.filesystem,execution.id);return this.repositories.tasks.transition(id,"failed",result2)}async verifyChange(id){const{change}=await this.repositories.changes.read(id);if(change.status!=="executing"){throw new LifecycleGateError(`Change ${id} must be executing before verification`)}const tasks=await this.tasksForChange(change.id,change.task_ids);const incomplete2=tasks.filter(task=>task.status!=="completed");if(incomplete2.length>0){throw new LifecycleGateError(`Change ${id} has incomplete Tasks: ${incomplete2.map(formatLifecycleState).join(", ")}`)}return this.repositories.changes.transition(id,"verifying")}async completeChange(id,result2){const{change}=await this.repositories.changes.read(id);if(change.status!=="verifying"){throw new LifecycleGateError(`Change ${id} must be verifying before completion`)}const tasks=await this.tasksForChange(change.id,change.task_ids);const incomplete2=tasks.filter(task=>task.status!=="completed");if(incomplete2.length>0){throw new LifecycleGateError(`Change ${id} has incomplete Tasks: ${incomplete2.map(formatLifecycleState).join(", ")}`)}const covered=new Set(tasks.flatMap(task=>task.acceptance_ids));const missing=change.acceptance_ids.filter(acceptanceId=>!covered.has(acceptanceId));if(missing.length>0){throw new LifecycleGateError(`Change ${id} has uncovered Acceptance Criteria: ${missing.join(", ")}`)}for(const task of tasks){if(task.result===null)throw new LifecycleGateError(`Task ${task.id} has no terminal result`);await this.assertEvidenceCoverage(task,task.result)}return this.repositories.changes.transition(id,"completed",result2)}async verifyExecution(id){const{execution}=await this.repositories.executions.read(id);if(execution.status!=="running"){throw new LifecycleGateError(`Execution ${id} must be running before verification`)}await assertExecutionDescendantsComplete(this.repositories,execution.id,execution.dag.nodes);return this.repositories.executions.transition(id,"verifying")}async completeExecution(id,result2){const{execution}=await this.repositories.executions.read(id);let completedExecution;if(execution.status==="verifying"){await assertExecutionDescendantsComplete(this.repositories,execution.id,execution.dag.nodes);const changeIds=[...new Set(execution.dag.nodes.map(node=>node.change_id))];for(const changeId of changeIds){const{change}=await this.repositories.changes.read(changeId);if(change.status!=="completed"){throw new LifecycleGateError(`Execution Change must be completed: ${formatLifecycleState(change)}`)}}completedExecution=await this.repositories.executions.transition(id,"completed",result2)}else if(execution.status==="completed"){completedExecution=execution}else{throw new LifecycleGateError(`Execution ${id} must be verifying before completion`)}await this.reconcileCompletedExecutionOrigin(completedExecution);return completedExecution}async reconcileCompletedExecutionOrigin(execution){if(execution.origin.type==="prd"){const{prd}=await this.repositories.prds.read(execution.origin.prd_id);if(prd.status==="active")await this.deliverPrd(prd.id);else if(prd.status!=="delivered"){throw new LifecycleGateError(`Completed Execution ${execution.id} has non-deliverable PRD ${prd.id}: ${prd.status}`)}}else if(execution.origin.type==="spec"){const{spec}=await this.repositories.specs.read(execution.origin.spec_id);if(spec.status==="active")await this.deliverSpec(spec.id);else if(spec.status!=="delivered"){throw new LifecycleGateError(`Completed Execution ${execution.id} has non-deliverable SPEC ${spec.id}: ${spec.status}`)}}}async deliverSpec(id){const{spec}=await this.repositories.specs.read(id);if(spec.status!=="active"){throw new LifecycleGateError(`SPEC ${id} must be active before delivery`)}const[changes,executions]=await Promise.all([this.repositories.changes.list(),this.repositories.executions.list()]);const descendants=changes.filter(change=>change.source.type==="spec"&&change.source.spec_id===id||change.source.type==="prd"&&change.source.spec_id===id);const descendantChangeIds=new Set(descendants.map(change=>change.id));const relatedExecutions=executions.filter(execution=>execution.origin.type==="spec"&&execution.origin.spec_id===id||execution.dag.nodes.some(node=>descendantChangeIds.has(node.change_id)));if(descendants.length===0||relatedExecutions.length===0){throw new LifecycleGateError(`SPEC ${id} has no materialized Change and Execution`)}assertAllTerminal(descendants,"SPEC Change");assertAllTerminal(relatedExecutions,"SPEC Execution");const assurance=this.assuranceConfig();if(assurance!==null){const tasks=await this.readTasks(relatedExecutions.flatMap(item=>item.dag.nodes.map(node=>node.task_id)));await this.assertDeliveryAssurance("spec",spec.acceptance_ids,[],tasks,assurance)}return this.repositories.specs.transition(id,"delivered")}async deliverPrd(id){const{prd}=await this.repositories.prds.read(id);if(prd.status!=="active"){throw new LifecycleGateError(`PRD ${id} must be active before delivery`)}const[specs,changes,executions]=await Promise.all([this.repositories.specs.list(),this.repositories.changes.list(),this.repositories.executions.list()]);const executionId=prd.prepared_plan?.execution_id??prd.plan_ref?.execution_id;if(executionId===void 0){throw new LifecycleGateError(`PRD ${id} has no prepared plan or plan reference`)}const selectedExecution=executions.find(execution=>execution.id===executionId&&execution.origin.type==="prd"&&execution.origin.prd_id===id);if(selectedExecution===void 0){throw new LifecycleGateError(`PRD ${id} plan Execution does not resolve: ${executionId}`)}const selectedChangeIds=new Set(selectedExecution.dag.nodes.map(node=>node.change_id));const directChanges=changes.filter(change=>selectedChangeIds.has(change.id));const selectedSpecIds=prd.prepared_plan===null?new Set(directChanges.flatMap(change=>change.source.type==="prd"&&change.source.prd_id===id?[change.source.spec_id]:[])):new Set(specIdsForPrdPlanV2(prd.prepared_plan,id));const childSpecs=specs.filter(spec=>spec.prd_id===id&&selectedSpecIds.has(spec.id));const directExecutions=[selectedExecution];if(childSpecs.length===0){throw new LifecycleGateError(`PRD ${id} requires at least one SPEC`)}for(const spec of childSpecs){if(spec.status==="active")await this.deliverSpec(spec.id)}const refreshedSpecs=(await this.repositories.specs.list()).filter(spec=>spec.prd_id===id&&selectedSpecIds.has(spec.id));assertAllTerminal(refreshedSpecs,"PRD SPEC","delivered");assertAllTerminal(directChanges,"PRD Change");assertAllTerminal(directExecutions,"PRD Execution");const assurance=this.assuranceConfig();if(assurance!==null){const tasks=await this.readTasks(selectedExecution.dag.nodes.map(node=>node.task_id));const metadata2=prd;await this.assertDeliveryAssurance("prd",metadata2.acceptance_ids??refreshedSpecs.flatMap(spec=>spec.acceptance_ids),prd.outcome_ids,tasks,assurance)}return this.repositories.prds.transition(id,"delivered")}async cancelTask(id,summary,completedRunId=null){const{task}=await this.repositories.tasks.read(id);this.assertCancellable([task],["draft","planned","executing","verifying","blocked"],"Task");const changes=(await this.repositories.changes.list()).filter(change=>change.id===task.change_id&&change.source.type==="task"&&change.source.task_id===id);const executions=(await this.repositories.executions.list()).filter(execution=>execution.origin.type==="task"&&execution.origin.task_id===id||execution.dag.nodes.some(node=>node.task_id===id&&node.change_id===task.change_id));const cascade=await this.cancelDescendants([],changes,executions,`Task ${id} was cancelled: ${summary}`,completedRunId);const cancelledTask=(await this.repositories.tasks.read(id)).task;return{task:cancelledTask,cascade}}async cancelPrd(id){const{prd}=await this.repositories.prds.read(id);this.assertCancellable([prd],["draft","ready","active","blocked"],"PRD");const specs=(await this.repositories.specs.list()).filter(spec=>spec.prd_id===id);const specIds=new Set(specs.map(spec=>spec.id));const changes=(await this.repositories.changes.list()).filter(change=>change.source.type==="prd"&&change.source.prd_id===id||change.source.type==="spec"&&specIds.has(change.source.spec_id));const cascade=await this.cancelDescendants(specs,changes,(await this.repositories.executions.list()).filter(execution=>execution.origin.type==="prd"&&execution.origin.prd_id===id||execution.origin.type==="spec"&&specIds.has(execution.origin.spec_id)),`PRD ${id}`);const cancelledPrd=prd.status==="cancelled"?prd:await this.repositories.prds.transition(id,"cancelled");return{prd:cancelledPrd,cascade}}async cancelSpec(id){const{spec}=await this.repositories.specs.read(id);this.assertCancellable([spec],["draft","ready","active","blocked"],"SPEC");const changes=(await this.repositories.changes.list()).filter(change=>change.source.type==="spec"&&change.source.spec_id===id||change.source.type==="prd"&&change.source.spec_id===id);const cascade=await this.cancelDescendants([],changes,(await this.repositories.executions.list()).filter(execution=>execution.origin.type==="spec"&&execution.origin.spec_id===id),`SPEC ${id}`);const cancelledSpec=spec.status==="cancelled"?spec:await this.repositories.specs.transition(id,"cancelled");return{spec:cancelledSpec,cascade}}async cancelDescendants(specs,changes,originExecutions,parent,completedRunId=null){const changeIds=new Set(changes.map(change=>change.id));const allExecutions=await this.repositories.executions.list();const executions=[...new Map([...originExecutions,...allExecutions.filter(execution=>execution.dag.nodes.some(node=>changeIds.has(node.change_id)))].map(execution=>[execution.id,execution])).values()];const taskIds=new Set([...changes.flatMap(change=>change.task_ids),...executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id))]);const tasks=(await this.repositories.tasks.list()).filter(task=>taskIds.has(task.id));const reason=`Cancelled automatically because ${parent} was cancelled.`;this.assertCancellable(tasks.filter(task=>!isTerminalLifecycleStatus(task.status)),["draft","planned","executing","verifying","blocked"],"Task");this.assertCancellable(changes.filter(change=>!isTerminalLifecycleStatus(change.status)),["draft","planned","executing","verifying","blocked"],"Change");this.assertCancellable(executions.filter(execution=>!isTerminalLifecycleStatus(execution.status)),["planned","running","paused","verifying","blocked"],"Execution");this.assertCancellable(specs.filter(spec=>!isTerminalLifecycleStatus(spec.status)),["draft","ready","active","blocked"],"SPEC");const cancelledTasks=await Promise.all(tasks.filter(task=>!isTerminalLifecycleStatus(task.status)).map(task=>this.repositories.tasks.transition(task.id,"cancelled",{summary:reason,changed_files:[],evidence_ids:[],completed_run_id:completedRunId})));const cancelledChanges=await Promise.all(changes.filter(change=>!isTerminalLifecycleStatus(change.status)).map(change=>this.repositories.changes.transition(change.id,"cancelled",reason)));const cancelledExecutions=await Promise.all(executions.filter(execution=>!isTerminalLifecycleStatus(execution.status)).map(execution=>this.repositories.executions.transition(execution.id,"cancelled",reason)));const cancelledSpecs=await Promise.all(specs.filter(spec=>!isTerminalLifecycleStatus(spec.status)).map(spec=>this.repositories.specs.transition(spec.id,"cancelled")));return{specs:cancelledSpecs,tasks:cancelledTasks,changes:cancelledChanges,executions:cancelledExecutions}}assertCancellable(entities,cancellable,entity){for(const item of entities){if(item.status==="cancelled"||cancellable.includes(item.status))continue;throw new LifecycleGateError(`${entity} ${item.id} cannot be cancelled from status ${item.status}`)}}assuranceConfig(){const config2=this.layout.projectConfig?.assurance;return config2?.version===1?config2:null}async readTasks(ids){return Promise.all([...new Set(ids)].map(async id=>(await this.repositories.tasks.read(id)).task))}async assertDeliveryAssurance(origin,acceptanceIds,outcomeIds,tasks,config2){const{bundle,expected,validations,evidences}=await deliveryCandidateProofs(this.filesystem,this.layout,tasks,config2);const verifier=await this.deliveryVerifier(validations,tasks);assertDeliveryAssuranceV1({origin,config:config2,acceptance_ids:acceptanceIds,outcome_ids:outcomeIds,validations,evidences,verifier,mutation:deliveryMutationFrom(bundle.metadata,tasks.map(task=>task.id)),rollback_evidence_id:evidences.find(evidence=>evidence.id.includes("ROLLBACK"))?.id??null,expected_commit_sha:expected})}async deliveryVerifier(validations,tasks){for(const review of validations.filter(item=>isReviewKind(item.kind))){const task=tasks.find(item=>item.id===review.task_id);if(task?.result?.completed_run_id==null)continue;const run=await this.readRequiredRun(task.result.completed_run_id);const approval=verifierFrom([review],run.run.agent,run.run.run_id);if(approval!==null)return approval}return null}async tasksForChange(changeId,expectedIds){const tasks=await Promise.all(expectedIds.map(taskId=>this.repositories.tasks.read(taskId)));for(const{task}of tasks){if(task.change_id!==changeId){throw new LifecycleGateError(`Task ${task.id} does not belong to Change ${changeId}`)}}return tasks.map(({task})=>task)}async readRequiredRun(id){try{return await this.repositories.runs.read(id)}catch(error51){throw new LifecycleGateError(`Run ${id} does not resolve: ${error51 instanceof Error?error51.message:String(error51)}`)}}async assertEvidenceCoverage(task,result2){await assertTaskEvidenceCoverage({filesystem:this.filesystem,layout:this.layout,repositories:this.repositories},task,result2)}async assertSixStageCoverage(task,result2,executionId,enforceLegacyRiskCounts=true){await assertSixStageDeliveryCoverage(this.filesystem,this.layout,this.repositories,task,result2,executionId,enforceLegacyRiskCounts,this.assuranceConfig())}}}});function inferredOrphanFailureTask(fold,tasks){if(fold.finished?.status!=="failed"||fold.run.client_thread_id!==null||fold.run.client_turn_id!==null||fold.finalization_decision!=null||effectiveRunV2Role(fold.run)!=="orchestrator")return void 0;return tasks.find(task=>{const result2=task.result;return task.id===fold.run.task_id&&task.status==="failed"&&result2!=null&&result2.completed_run_id===fold.run.run_id&&result2.changed_files.length===0&&result2.evidence_ids.length===0&&task.status_reason===`Run ${fold.run.run_id} failed and closed its operational lifecycle.`})}var init_inferred_orphan_failure=__esm({"src/inferred-orphan-failure.ts"(){"use strict";init_src5()}});async function hostTerminalOnlyPreflight(composition,filesystem){let active;try{active=await new LifecycleManifestStore(filesystem).readActiveWork()}catch{return{kind:"full"}}const items=activeWorkItems(active);if(items===null)return{kind:"full"};const activeRuns=items.filter(item=>item.kind==="run"&&item.status==="running");const operationalOwners=items.filter(isOperationalOwner);if(operationalOwners.some(owner=>!activeRuns.some(run=>run.relations.includes(owner.id)))){return{kind:"full"}}let current;try{current=await Promise.all(activeRuns.map(item=>composition.runs.read(item.id)))}catch{return{kind:"full"}}const observedTerminalRunIds=current.filter(fold=>fold.finished!==null).map(fold=>fold.run.run_id);if(observedTerminalRunIds.length>0){return{kind:"full",observed_terminal_run_ids:observedTerminalRunIds,observed_terminal_runs:current.filter(fold=>fold.finished!==null)}}const codex=current.filter(fold=>isCodexTelemetryClient(fold.run.client));if(codex.some(fold=>fold.run.client_thread_id===null||fold.run.client_turn_id===null)){return{kind:"full"}}if(codex.length>0){const activity=await listCodexInvocationReconciliationActivity(filesystem.root,{threadIds:codex.map(fold=>fold.run.client_thread_id),invocations:codex.map(fold=>({threadId:fold.run.client_thread_id,turnId:fold.run.client_turn_id}))});const terminal=new Set(activity.lifecycles.filter(item=>item.finishedAt!==null&&item.status!=="active").map(item=>`${item.sessionId}:${item.turnId}`));if(codex.some(fold=>terminal.has(`${fold.run.client_thread_id}:${fold.run.client_turn_id}`))){return{kind:"full"}}}return{kind:"no-op",result:{runs:[],orphaned_executions:[],orphaned_interaction_executions:[],orphaned_tasks:[],orphaned_execution_entities:[],orphaned_owner_entities:[],reconciliations:[],reconciliation_errors:[],unresolved_running_run_ids:current.map(fold=>fold.run.run_id)}}}function activeWorkItems(value){if(typeof value!=="object"||value===null||value.schema_version!==1||typeof value.updated_at!=="string"||!Number.isFinite(Date.parse(value.updated_at))||!Array.isArray(value.items))return null;const items=value.items;const parsed=[];for(const item of items){if(typeof item!=="object"||item===null)return null;const candidate=item;if(typeof candidate.kind!=="string"||candidate.kind.length===0||typeof candidate.id!=="string"||candidate.id.length===0||typeof candidate.status!=="string"||candidate.status.length===0||candidate.relations!==void 0&&(!Array.isArray(candidate.relations)||candidate.relations.some(id=>typeof id!=="string")))return null;parsed.push({kind:candidate.kind,id:candidate.id,status:candidate.status,relations:candidate.relations??[]})}return parsed}function isOperationalOwner(item){return item.kind==="task"&&["executing","verifying"].includes(item.status)||item.kind==="change"&&["executing","verifying"].includes(item.status)||item.kind==="execution"&&["running","paused","verifying"].includes(item.status)||item.kind==="spec"&&item.status==="active"||item.kind==="prd"&&item.status==="active"}var init_open_work_host_preflight=__esm({"src/open-work-host-preflight.ts"(){"use strict";init_src4();init_src8();init_record_codex_telemetry()}});function runDepth(fold,runs){const parentById=new Map(runs.map(candidate=>[candidate.run.run_id,candidate.run.parent_run_id]));let depth=0;let parent=fold.run.parent_run_id;const seen=new Set([fold.run.run_id]);while(parent!==null&&!seen.has(parent)){seen.add(parent);depth+=1;parent=parentById.get(parent)??null}return depth}function terminalSubjectIds(fold){const role=effectiveRunV2Role(fold.run);if(role==="orchestrator"&&fold.run.entrypoint==="task"){return fold.run.task_id===null?[]:[fold.run.task_id]}if(role==="orchestrator"){return[fold.run.spec_id,fold.run.prd_id].filter(id=>id!==null)}return[]}var init_open_work_run_topology=__esm({"src/open-work-run-topology.ts"(){"use strict";init_src5()}});function recoveryReason(id){return`Macro Execution ${id} has no unfinished Run or active descendant after the reconciliation grace period; terminal incomplete DAG work requires explicit recovery.`}async function reconcileExplicitOrphanedMacroExecution(catalog,runs,composition,now,executionId){if(executionId===void 0)return void 0;const execution=catalog.executions.find(candidate=>candidate.id===executionId);if(!isEligibleMacro(execution,catalog,runs,now))return void 0;const reason=recoveryReason(execution.id);const clock=new SystemClock;if(execution.status!=="blocked")await composition.executions.transition(execution.id,"blocked",null,clock,reason);const ancestors=await blockMacroAncestors(execution,catalog,composition,clock,reason);return{execution:(await composition.executions.read(execution.id)).execution,ancestors}}function isEligibleMacro(execution,catalog,runs,now){if(execution===void 0||execution.kind!=="delivery"||execution.origin.type==="task"||!(["running","verifying"].includes(execution.status)||execution.status==="blocked"&&execution.status_reason===recoveryReason(execution.id))||!overdue(execution,now))return false;const origin=execution.origin;if(origin.type==="prd"&&!catalog.prds.some(prd=>prd.id===origin.prd_id))return false;if(origin.type==="spec"&&!catalog.specs.some(spec=>spec.id===origin.spec_id))return false;const tasks=execution.dag.nodes.map(node=>catalog.tasks.find(task=>task.id===node.task_id));if(!tasks.every(task=>task!==void 0&&TERMINAL_TASK_STATUSES.has(task.status)))return false;if(!tasks.some(task=>task!==void 0&&["blocked","failed","cancelled"].includes(task.status)))return false;const taskIds=new Set(execution.dag.nodes.map(node=>node.task_id));const relatedRoots=runs.filter(run=>run.run.execution_id===execution.id||run.run.task_id!==null&&taskIds.has(run.run.task_id));return!relatedRoots.some(run=>run.finished===null||activeDescendantRuns(run.run.run_id,runs).length>0)}function overdue(execution,now){const startedAt=Date.parse(execution.started_at??execution.updated_at??execution.created_at);return Number.isFinite(startedAt)&&now.getTime()-startedAt>=ORPHANED_EXECUTION_GRACE_MS}async function blockMacroAncestors(execution,catalog,composition,clock,reason){const ancestors=[];const specIds=macroSpecIds(execution,catalog);for(const specId of specIds){const spec=catalog.specs.find(candidate=>candidate.id===specId);if(spec===void 0||ancestorHasOtherWork(execution,catalog,spec.id,void 0))continue;if(spec.status==="active")ancestors.push(await composition.specs.transition(spec.id,"blocked",clock,reason));else if(spec.status==="blocked"&&spec.status_reason===reason)ancestors.push(spec)}const prdId=macroPrdId(execution,catalog,specIds);const prd=prdId===void 0?void 0:catalog.prds.find(candidate=>candidate.id===prdId);if(prd!==void 0&&!ancestorHasOtherWork(execution,catalog,void 0,prd.id)){if(prd.status==="active")ancestors.push(await composition.prds.transition(prd.id,"blocked",clock,reason));else if(prd.status==="blocked"&&prd.status_reason===reason)ancestors.push(prd)}return ancestors}function ancestorHasOtherWork(selected,catalog,specId,prdId){const selectedTasks=new Set(selected.dag.nodes.map(node=>node.task_id));const linkedSpec=id=>specId===id||prdId!==void 0&&catalog.specs.some(spec=>spec.id===id&&spec.prd_id===prdId);const changes=catalog.changes.filter(change=>{const source=change.source;return(source.type==="spec"||source.type==="prd")&&(source.spec_id!==null?linkedSpec(source.spec_id):source.type==="prd"&&prdId!==void 0&&source.prd_id===prdId)});if(changes.some(change=>change.task_ids.some(id=>{const task=catalog.tasks.find(item=>item.id===id);return!selectedTasks.has(id)&&(task===void 0||!TERMINAL_TASK_STATUSES.has(task.status))})))return true;return catalog.executions.some(other=>{if(other.id===selected.id||!OPEN_EXECUTION_STATUSES.has(other.status))return false;const specs=macroSpecIds(other,catalog);if(specId!==void 0)return specs.includes(specId);return macroPrdId(other,catalog,specs)===prdId||other.dag.nodes.some(node=>changes.some(change=>change.id===node.change_id))})}function macroSpecIds(execution,catalog){const origin=execution.origin;if(origin.type==="spec")return[origin.spec_id];if(origin.type!=="prd")return[];const changes=new Map(catalog.changes.map(change=>[change.id,change]));const ids=execution.dag.nodes.flatMap(node=>{const source=node.change_id===void 0?void 0:changes.get(node.change_id)?.source;if(source===void 0||source.type!=="spec"&&source.type!=="prd"||source.spec_id===null)return[];return[source.spec_id]});return[...new Set(ids)].filter(id=>catalog.specs.some(spec=>spec.id===id&&spec.prd_id===origin.prd_id))}function macroPrdId(execution,catalog,specIds){if(execution.origin.type==="prd")return execution.origin.prd_id;if(execution.origin.type!=="spec")return void 0;const spec=catalog.specs.find(candidate=>candidate.id===specIds[0]);return spec?.prd_id??void 0}async function blockOrphanedStandaloneExecutions(catalog,runs,composition,now,scope){const ids=new Set(orphanedStandaloneExecutionIds(catalog,runs,now).filter(id=>{const execution=catalog.executions.find(candidate=>candidate.id===id);return execution!==void 0&&(scope===void 0||scope.matchesExecution(execution))}));if(ids.size===0)return[];const clock=new SystemClock;const taskById=new Map(catalog.tasks.map(task=>[task.id,task]));const changeById=new Map(catalog.changes.map(change=>[change.id,change]));const blocked2=[];for(const id of ids){const execution=catalog.executions.find(item=>item.id===id);if(execution===void 0)continue;const reason=`Execution ${id} has no active orchestrator agent call after the reconciliation grace period.`;for(const node of execution.dag.nodes){const task=taskById.get(node.task_id);if(task!==void 0&&(scope===void 0||scope.matchesTask(task.id))&&["executing","verifying"].includes(task.status)){await composition.tasks.transition(task.id,"blocked",null,clock,reason)}const change=changeById.get(node.change_id);if(change!==void 0&&["executing","verifying"].includes(change.status)){const latestTasks=await Promise.all(change.task_ids.map(async taskId=>(await composition.tasks.read(taskId)).task));if(latestTasks.every(candidate=>["blocked","completed","failed","cancelled"].includes(candidate.status)))await composition.changes.transition(change.id,"blocked",null,clock,reason)}}if(execution.status!=="blocked")await composition.executions.transition(id,"blocked",null,clock,reason);blocked2.push((await composition.executions.read(id)).execution)}return blocked2}function orphanedStandaloneExecutionIds(catalog,runs,now=new Date,includePlanned=false){return catalog.executions.flatMap(execution=>{if(execution.origin.type!=="task"||!["running","verifying",...includePlanned?["planned"]:[]].includes(execution.status)){return[]}const startedAt=Date.parse(execution.started_at??execution.updated_at??execution.created_at);if(!Number.isFinite(startedAt)||now.getTime()-startedAt<ORPHANED_EXECUTION_GRACE_MS){return[]}const taskIds=new Set(execution.dag.nodes.map(node=>node.task_id));const hasActiveOrchestratorRun=runs.some(run=>{const required2=[run.finished===null,effectiveRunV2Role(run.run)==="orchestrator",run.run.parent_run_id===null,run.run.entrypoint==="task"];if(!required2.every(Boolean))return false;return run.run.execution_id===execution.id||run.run.task_id!==null&&taskIds.has(run.run.task_id)});return hasActiveOrchestratorRun?[]:[execution.id]})}var ORPHANED_EXECUTION_GRACE_MS,TERMINAL_TASK_STATUSES,OPEN_EXECUTION_STATUSES;var init_orphaned_macro_reconciliation=__esm({"src/orphaned-macro-reconciliation.ts"(){"use strict";init_src();init_src5();init_run_hierarchy();ORPHANED_EXECUTION_GRACE_MS=10*60*1e3;TERMINAL_TASK_STATUSES=new Set(["blocked","completed","failed","cancelled"]);OPEN_EXECUTION_STATUSES=new Set(["planned","running","paused","verifying"])}});async function reconcileOpenWork(parsed,composition,lifecycle,filesystem){const hostTerminalOnly=parsed.flags?.has("host-terminal-only")??false;let observedTerminalRunIds=[];let observedTerminalRuns=[];if(hostTerminalOnly){const preflight=await hostTerminalOnlyPreflight(composition,filesystem);if(preflight.kind==="no-op")return preflight.result;observedTerminalRunIds=preflight.observed_terminal_run_ids??[];observedTerminalRuns=preflight.observed_terminal_runs??[];if(observedTerminalRunIds.length>0){await Promise.all(observedTerminalRunIds.map(async runId=>{const current=await composition.runs.read(runId);if(isReconcilableCodexClient(current.run.client,false)&&current.run.client_thread_id!==null&&current.run.client_turn_id!==null)await recordCodexTelemetryIfAvailable(current,composition,filesystem)}))}}let runs=hostTerminalOnly&&observedTerminalRuns.length>0?[...observedTerminalRuns]:await composition.runs.list();const orphanScope=authorizedOrphanScope(parsed);if(!hostTerminalOnly&&orphanScope?.exactExecutionId!==void 0){const executions2=await composition.executions.list();const selected=executions2.find(item=>item.id===orphanScope.exactExecutionId);if(selected?.kind==="delivery"&&selected.origin.type!=="task"){const[tasks2,changes2,specs2,prds2]=await Promise.all([composition.tasks.list(),composition.changes.list(),composition.specs.list(),composition.prds.list()]);const recovered=await reconcileExplicitOrphanedMacroExecution({tasks:tasks2,changes:changes2,executions:executions2,specs:specs2,prds:prds2},runs,composition,new Date,selected.id);return{runs:[],observed_terminal_runs:[],orphaned_interaction_executions:[],orphaned_tasks:[],reconciliations:[],reconciliation_errors:[],orphaned_executions:recovered===void 0?[]:[recovered.execution.id],orphaned_execution_entities:recovered===void 0?[]:[recovered.execution],orphaned_owner_entities:recovered?.ancestors??[],unresolved_running_run_ids:runs.filter(run=>run.finished===null&&run.run.execution_id===selected.id).map(run=>run.run.run_id)}}}const runningCodex=runs.filter(fold=>[fold.finished===null,isReconcilableCodexClient(fold.run.client,orphanScope!==void 0),orphanScope===void 0?fold.run.client_thread_id!==null:orphanScope.matchesRun(fold)].every(Boolean)).sort((left,right)=>runDepth(right,runs)-runDepth(left,runs));const threadIds=runningCodex.flatMap(fold=>typeof fold.run.client_thread_id==="string"?[fold.run.client_thread_id]:[]);const invocations=runningCodex.flatMap(fold=>{const threadId=fold.run.client_thread_id;const turnId=fold.run.client_turn_id;return typeof threadId==="string"&&typeof turnId==="string"?[{threadId,turnId}]:[]});const{lifecycles:localLifecycles,activeInvocations}=threadIds.length===0?{lifecycles:[],activeInvocations:[]}:await listCodexInvocationReconciliationActivity(filesystem.root,{threadIds,invocations});const localByInvocation=new Map(localLifecycles.map(item=>[`${item.sessionId}:${item.turnId}`,item]));const closedRuns=[];const orphanedRootRunIds=new Set;const reconciliationStartedAt=new Date;for(const fold of runningCodex){if((await composition.runs.read(fold.run.run_id)).finished!==null)continue;const local=localByInvocation.get(`${fold.run.client_thread_id??""}:${fold.run.client_turn_id??""}`);const completedLocally=(local?.status==="completed"||local?.status==="cancelled"||local?.status==="interrupted"||local?.status==="failed")&&local.finishedAt!==null;const orphaned=!hostTerminalOnly&&(isOrphanedCodexRun(fold,activeInvocations,reconciliationStartedAt)||orphanScope!==void 0&&isExplicitLegacyNoHostOrphan(fold,reconciliationStartedAt));if(!completedLocally&&!orphaned)continue;if(orphaned)orphanedRootRunIds.add(fold.run.run_id);const role=effectiveRunV2Role(fold.run);const activeChildren=activeDescendantRuns(fold.run.run_id,runs);if(role==="orchestrator"&&activeChildren.length>0){if(local?.status!=="cancelled")continue;await cancelActiveDescendantRuns2(activeChildren,composition,parsed);runs=await composition.runs.list()}let current=completedLocally?await recordCodexTelemetryIfAvailable(fold,composition,filesystem):fold;if(current.effective_usage_records.length===0){await composition.runs.appendRecord(unavailableUsageRecord(current,parsed,current.records.length+1));current=await composition.runs.read(current.run.run_id)}const finished=runFinishedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(current.records.length+1).padStart(6,"0")}`,run_id:current.run.run_id,sequence:current.records.length+1,occurred_at:completedLocally?local.finishedAt:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status:completedLocally&&local?.status==="cancelled"?"cancelled":completedLocally&&local?.status==="failed"?"failed":completedLocally?"completed":"failed"});foldRunV2Records([...current.records,finished]);await composition.runs.appendRecord(finished);const refreshed=await composition.runs.read(current.run.run_id);closedRuns.push(refreshed);runs=replaceRunSnapshot(runs,refreshed)}let[tasks,changes,executions,specs,prds]=await Promise.all([composition.tasks.list(),composition.changes.list(),composition.executions.list(),composition.specs.list(),composition.prds.list()]);let catalog={tasks,changes,executions,specs,prds};const explicitlyCancelled=hostTerminalOnly?[]:await closeExplicitlyCancelledTaskRoots(runs,catalog,composition,parsed,orphanScope);if(explicitlyCancelled.length>0){closedRuns.push(...explicitlyCancelled);runs=await composition.runs.list()}const activeSubjectIds=activeLifecycleSubjectIds(runs.filter(item=>item.finished===null&&!(!hostTerminalOnly&&orphanScope?.matchesRun(item)&&isOrphanedCodexRun(item,activeInvocations,reconciliationStartedAt))),catalog);const operationalSubjectIds=terminalReconciliationSubjectIds(catalog);const inferredRepairIds=new Set;if(!hostTerminalOnly&&orphanScope!==void 0){for(const fold of runs){const task=inferredOrphanFailureTask(fold,catalog.tasks);if(task===void 0||!orphanScope.matchesRun(fold)||activeSubjectIds.has(task.id)||activeDescendantRuns(fold.run.run_id,runs).length>0)continue;inferredRepairIds.add(fold.run.run_id);orphanedRootRunIds.add(fold.run.run_id);operationalSubjectIds.add(task.id)}}const reconciliations=[];const reconciliationErrors=[];const reconciledSubjectIds=new Set;const terminal=runs.filter(fold=>fold.finished!==null&&(!hostTerminalOnly||observedTerminalRunIds.includes(fold.run.run_id))&&terminalSubjectIds(fold).some(id=>operationalSubjectIds.has(id))&&(orphanScope===void 0||orphanScope.matchesRun(fold))).sort((left,right)=>(right.finished?.occurred_at??right.run.occurred_at).localeCompare(left.finished?.occurred_at??left.run.occurred_at));for(const fold of terminal){const subjects=terminalSubjectIds(fold);if(subjects.length===0||subjects.some(id=>activeSubjectIds.has(id))||subjects.every(id=>reconciledSubjectIds.has(id))){continue}try{if(inferredRepairIds.has(fold.run.run_id)){const task=inferredOrphanFailureTask(fold,catalog.tasks);if(task!==void 0)await lifecycle.startTask(task.id,"rework")}const reconciliation=hostTerminalOnly&&observedTerminalRunIds.includes(fold.run.run_id)&&effectiveRunV2Role(fold.run)==="orchestrator"?await reconcileTerminalOrchestratorRoot(fold,runs,composition,lifecycle):await reconcileFinishedRunLifecycle(fold,composition,lifecycle,{...inferredRepairIds.has(fold.run.run_id)?{}:{catalog},candidateRuns:runs,...orphanedRootRunIds.has(fold.run.run_id)?{requestedOutcome:"blocked",forceRequestedOutcome:true,summary:"Explicit orphan reconciliation found no active host invocation or terminal work outcome; repair is required before resuming"}:{}});reconciliations.push("reconciliation"in reconciliation?reconciliation.reconciliation:reconciliation)}catch(error51){const message=error51 instanceof Error?error51.message:String(error51);reconciliations.push({...await snapshotRunLifecycle(fold,composition,catalog),status:"deferred",error:message});reconciliationErrors.push({run_id:fold.run.run_id,error:message})}subjects.forEach(id=>{reconciledSubjectIds.add(id)})}[tasks,changes,executions,specs,prds]=await Promise.all([composition.tasks.list(),composition.changes.list(),composition.executions.list(),composition.specs.list(),composition.prds.list()]);catalog={tasks,changes,executions,specs,prds};const orphanedExecutions=hostTerminalOnly?[]:await blockOrphanedStandaloneExecutions(catalog,runs,composition,reconciliationStartedAt,orphanScope);const orphanedInteractionExecutions=hostTerminalOnly?[]:await blockOrphanedInteractionExecutions(catalog,runs,composition,reconciliationStartedAt,orphanScope);const orphanedMacro=hostTerminalOnly?void 0:await reconcileExplicitOrphanedMacroExecution(catalog,runs,composition,reconciliationStartedAt,orphanScope?.exactExecutionId);const orphanedOwnerEntities=await readOrphanedExecutionOwners([...orphanedExecutions,...orphanedInteractionExecutions],composition);return{runs:closedRuns,observed_terminal_runs:observedTerminalRunIds.map(run_id=>({run_id})),orphaned_executions:[...orphanedExecutions.map(execution=>execution.id),...orphanedMacro===void 0?[]:[orphanedMacro.execution.id]],orphaned_interaction_executions:orphanedInteractionExecutions.map(execution=>execution.id),orphaned_tasks:[],orphaned_execution_entities:[...orphanedExecutions,...orphanedInteractionExecutions,...orphanedMacro===void 0?[]:[orphanedMacro.execution]],orphaned_owner_entities:[...orphanedOwnerEntities,...orphanedMacro?.ancestors??[]],reconciliations,reconciliation_errors:reconciliationErrors,unresolved_running_run_ids:runs.filter(fold=>fold.finished===null).map(fold=>fold.run.run_id)}}function replaceRunSnapshot(runs,refreshed){return runs.map(fold=>fold.run.run_id===refreshed.run.run_id?refreshed:fold)}async function readOrphanedExecutionOwners(executions,composition){const taskIds=new Set;const changeIds=new Set;for(const execution of executions){for(const node of execution.dag.nodes){taskIds.add(node.task_id);if(node.change_id!==void 0)changeIds.add(node.change_id)}}return Promise.all([...[...taskIds].map(async id=>(await composition.tasks.read(id)).task),...[...changeIds].map(async id=>(await composition.changes.read(id)).change)])}async function closeExplicitlyCancelledTaskRoots(runs,catalog,composition,parsed,scope){const cancelledTaskIds=new Set(catalog.tasks.filter(task=>task.status==="cancelled").map(task=>task.id));const closed=[];for(const fold of runs){if(fold.finished!==null||effectiveRunV2Role(fold.run)!=="orchestrator"||fold.run.parent_run_id!==null||fold.run.entrypoint!=="task"||fold.run.task_id===null||!cancelledTaskIds.has(fold.run.task_id)||scope!==void 0&&!scope.matchesRun(fold)){continue}const current=await composition.runs.read(fold.run.run_id);if(current.finished!==null)continue;const activeChildren=activeDescendantRuns(current.run.run_id,runs);if(activeChildren.length>0)await cancelActiveDescendantRuns2(activeChildren,composition,parsed);let attributable=await composition.runs.read(current.run.run_id);if(attributable.effective_usage_records.length===0){await composition.runs.appendRecord(unavailableUsageRecord(attributable,parsed,attributable.records.length+1));attributable=await composition.runs.read(current.run.run_id)}await composition.runs.appendRecord(runFinishedV2Schema.parse({schema_version:2,event_id:`${attributable.run.run_id}:${String(attributable.records.length+1).padStart(6,"0")}`,run_id:attributable.run.run_id,sequence:attributable.records.length+1,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(attributable.records),status:"cancelled"}));closed.push(await composition.runs.read(current.run.run_id))}return closed}async function cancelActiveDescendantRuns2(descendants,composition,parsed){for(const descendant of[...descendants].reverse()){let current=await composition.runs.read(descendant.run.run_id);if(current.finished!==null)continue;if(current.effective_usage_records.length===0){await composition.runs.appendRecord(unavailableUsageRecord(current,parsed,current.records.length+1));current=await composition.runs.read(current.run.run_id)}await composition.runs.appendRecord(runFinishedV2Schema.parse({schema_version:2,event_id:`${current.run.run_id}:${String(current.records.length+1).padStart(6,"0")}`,run_id:current.run.run_id,sequence:current.records.length+1,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status:"cancelled"}))}}async function blockOrphanedInteractionExecutions(catalog,runs,composition,now,scope){const ids=orphanedInteractionExecutionIds(catalog,runs,now).filter(id=>{const execution=catalog.executions.find(candidate=>candidate.id===id);return execution!==void 0&&(scope===void 0||scope.matchesExecution(execution))});if(ids.length===0)return[];const clock=new SystemClock;const blocked2=[];for(const id of ids){await composition.executions.transition(id,"blocked",null,clock,`Interaction Execution ${id} has no active orchestrator Run after the reconciliation grace period.`);blocked2.push((await composition.executions.read(id)).execution)}return blocked2}function orphanedInteractionExecutionIds(catalog,runs,now=new Date){return catalog.executions.flatMap(execution=>{if(execution.kind!=="interaction"||!["running","verifying"].includes(execution.status)){return[]}const startedAt=Date.parse(execution.started_at??execution.updated_at??execution.created_at);if(!Number.isFinite(startedAt)||now.getTime()-startedAt<ORPHANED_EXECUTION_GRACE_MS2){return[]}const hasActiveRoot=runs.some(run=>run.finished===null&&effectiveRunV2Role(run.run)==="orchestrator"&&run.run.parent_run_id===null&&run.run.execution_id===execution.id);return hasActiveRoot?[]:[execution.id]})}function terminalReconciliationSubjectIds(catalog){const ids=new Set;const unsettledTaskIds=new Set(catalog.tasks.filter(task=>["executing","verifying"].includes(task.status)).map(task=>task.id));unsettledTaskIds.forEach(id=>{ids.add(id)});for(const change of catalog.changes){const unsettled=["planned","executing","verifying"].includes(change.status);const hasUnsettledTask=change.task_ids.some(id=>unsettledTaskIds.has(id));if(!unsettled&&!hasUnsettledTask)continue;change.task_ids.forEach(id=>{ids.add(id)});if(change.source.type==="spec")ids.add(change.source.spec_id);if(change.source.type==="prd"){ids.add(change.source.prd_id);if(change.source.spec_id!==null)ids.add(change.source.spec_id)}}for(const execution of catalog.executions){if(!["planned","running","paused","verifying"].includes(execution.status))continue;execution.dag.nodes.forEach(node=>{ids.add(node.task_id)})}catalog.specs.filter(spec=>spec.status==="active").forEach(spec=>{ids.add(spec.id)});catalog.prds.filter(prd=>prd.status==="active").forEach(prd=>{ids.add(prd.id)});return ids}function authorizedOrphanScope(parsed){const reason=parsed.options["orphan-reason"];const scope=parsed.options["orphan-scope"];if(reason===void 0&&scope===void 0)return void 0;if(reason!=="inactive_terminal_without_host_identity"){throw new Error("--orphan-reason must be inactive_terminal_without_host_identity for explicit orphan reconciliation")}if(scope===void 0||scope.trim().length===0){throw new Error("Explicit orphan reconciliation requires --orphan-scope all or comma-separated Run/Task/Execution IDs")}const ids=new Set(scope.split(",").map(value=>value.trim()).filter(Boolean));if(ids.size===0)throw new Error("--orphan-scope must name all or at least one canonical ID");const[onlyId]=[...ids];const exactExecutionId=ids.size===1&&onlyId?.startsWith("EXEC-")?onlyId:void 0;return{...exactExecutionId===void 0?{}:{exactExecutionId},matchesRun(fold){return ids.has("all")||ids.has(fold.run.run_id)||fold.run.task_id!==null&&ids.has(fold.run.task_id)||fold.run.execution_id!==null&&ids.has(fold.run.execution_id)},matchesTask(taskId){return ids.has("all")||ids.has(taskId)},matchesExecution(execution){return ids.has("all")||ids.has(execution.id)||execution.origin.type==="task"&&ids.has(execution.origin.task_id)||execution.dag.nodes.some(node=>ids.has(node.task_id))}}}function isOrphanedCodexRun(fold,activeInvocations,now=new Date){if(fold.finished!==null||!isCodexTelemetryClient(fold.run.client))return false;const startedAt=Date.parse(fold.run.occurred_at);if(!Number.isFinite(startedAt)||now.getTime()-startedAt<ORPHANED_RUN_GRACE_MS){return false}return!activeInvocations.some(active=>{if(active.sessionId!==fold.run.client_thread_id)return false;const activeObservedAt=Date.parse(active.observedAt??active.startedAt??"");if(!Number.isFinite(activeObservedAt)||now.getTime()-activeObservedAt>ORPHANED_RUN_GRACE_MS){return false}if(active.turnId===fold.run.client_turn_id)return true;const activeStartedAt=active.startedAt===null?Number.NaN:Date.parse(active.startedAt);return Number.isFinite(activeStartedAt)&&Math.abs(activeStartedAt-startedAt)<=ACTIVE_INVOCATION_START_TOLERANCE_MS})}function isReconcilableCodexClient(client,explicitScope){return isCodexTelemetryClient(client)||explicitScope&&EXPLICIT_LEGACY_CODEX_CLIENTS.has(client)}function isExplicitLegacyNoHostOrphan(fold,now){if(fold.finished!==null||!EXPLICIT_LEGACY_CODEX_CLIENTS.has(fold.run.client)||fold.run.client_thread_id!==null){return false}const startedAt=Date.parse(fold.run.occurred_at);return Number.isFinite(startedAt)&&now.getTime()-startedAt>=ORPHANED_RUN_GRACE_MS}function activeLifecycleSubjectIds(activeRuns,catalog){const ids=new Set;const taskById=new Map(catalog.tasks.map(task=>[task.id,task]));const changeById=new Map(catalog.changes.map(change=>[change.id,change]));const specById=new Map(catalog.specs.map(spec=>[spec.id,spec]));for(const fold of activeRuns){relatedWorkIds(fold).forEach(id=>{ids.add(id)});const task=fold.run.task_id===null?void 0:taskById.get(fold.run.task_id);const change=task===void 0?void 0:changeById.get(task.change_id);const specId=fold.run.spec_id??(change?.source.type==="spec"||change?.source.type==="prd"?change.source.spec_id:null);const prdId=fold.run.prd_id??(change?.source.type==="prd"?change.source.prd_id:null)??(specId===null?null:specById.get(specId)?.prd_id??null);if(change!==void 0)ids.add(change.id);if(specId!==null)ids.add(specId);if(prdId!==null)ids.add(prdId);for(const candidate of catalog.changes){const belongsToSpec=specId!==null&&candidate.source.type!=="task"&&candidate.source.spec_id===specId;const belongsToPrd=candidate.source.type==="prd"&&candidate.source.prd_id===prdId;if(!belongsToSpec&&!belongsToPrd)continue;ids.add(candidate.id);candidate.task_ids.forEach(id=>{ids.add(id)})}for(const execution of catalog.executions){if(execution.origin.type==="prd"&&execution.origin.prd_id===prdId||execution.origin.type==="spec"&&execution.origin.spec_id===specId){ids.add(execution.id);execution.dag.nodes.forEach(node=>{ids.add(node.task_id)})}}}return ids}function relatedWorkIds(fold){return[fold.run.task_id,fold.run.spec_id,fold.run.prd_id].filter(id=>id!==null)}var ORPHANED_RUN_GRACE_MS,ORPHANED_EXECUTION_GRACE_MS2,ACTIVE_INVOCATION_START_TOLERANCE_MS,EXPLICIT_LEGACY_CODEX_CLIENTS;var init_open_work_reconciliation=__esm({"src/open-work-reconciliation.ts"(){"use strict";init_src();init_src4();init_src5();init_inferred_orphan_failure();init_open_work_host_preflight();init_open_work_run_topology();init_orchestrator_stop_reconciliation();init_orphaned_macro_reconciliation();init_record_codex_telemetry();init_run_conversation_v2();init_run_hierarchy();init_run_lifecycle_reconciliation();init_orphaned_macro_reconciliation();ORPHANED_RUN_GRACE_MS=10*60*1e3;ORPHANED_EXECUTION_GRACE_MS2=10*60*1e3;ACTIVE_INVOCATION_START_TOLERANCE_MS=2*60*1e3;EXPLICIT_LEGACY_CODEX_CLIENTS=new Set(["codex-prd-authoring","codex-prd-composite-authoring"])}});async function loadAgentCatalog(filesystem){if(!await filesystem.exists(AGENT_CATALOG_PATH2)){throw new UsageError(`Agent catalog not found at ${AGENT_CATALOG_PATH2}`)}const catalog=parseAgentCatalog(parseYaml(await filesystem.readText(AGENT_CATALOG_PATH2)));const findings=validateAgentCatalog(catalog);if(findings.length>0){throw new Error(`Invalid Agent catalog: ${findings[0]?.message??"unknown finding"}`)}return catalog}async function resolveRunAgentIdentityResult(filesystem,input){const client=input.client.trim();if(client.length===0)throw new UsageError("--client must not be empty");const fallback=client==="codex"||client.startsWith("codex-")?"codex":client;const requested=input.agent?.trim();if(requested===void 0||requested.length===0||requested===client||requested===fallback){return{agent_id:fallback,warning:null}}const catalog=await loadAgentCatalog(filesystem).catch(error51=>{if(error51 instanceof UsageError){throw new UsageError(`${error51.message}; omit --agent to use fallback "${fallback}"`)}throw error51});try{const selected=resolveAgentIdentity(catalog,requested);return{agent_id:selected.canonical_id,warning:selected.warning}}catch(error51){if(!(error51 instanceof Error)||!error51.message.startsWith("Unknown Agent identity:")){throw new UsageError(error51 instanceof Error?error51.message:String(error51))}}const available=catalog.agents.flatMap(agent=>[agent.id,agent.codex_name]).sort().join(", ");throw new UsageError(`Unknown Agent "${requested}". Use one of: ${available}; omit --agent to use fallback "${fallback}"`)}async function resolveRunAgentName(filesystem,agentId2){if(agentId2==="codex")return"codex";if(!agentId2.startsWith("agent-"))return agentId2;const catalog=await loadAgentCatalog(filesystem);return catalog.agents.find(agent=>agent.id===agentId2)?.codex_name??null}var AGENT_CATALOG_PATH2;var init_run_agent_identity=__esm({"src/run-agent-identity.ts"(){"use strict";init_src();init_cli_arguments();AGENT_CATALOG_PATH2=".agents/config/agents/catalog.yaml"}});function defaultExecutionPolicy(risk2,signals={}){const independentBranches=signals.independent_branches===true;return{failure_policy:"stop_on_terminal_failure",max_parallelism:risk2==="lite"?1:independentBranches?risk2==="critical"?3:2:1,max_operational_retries:risk2==="lite"?0:1,max_repair_cycles_per_task:risk2==="lite"?0:2,soft_model_cycle_budget:risk2==="lite"?4:risk2==="standard"?24:40,context_refresh_after_cycles:risk2==="lite"?4:8,verification_mode:risk2==="critical"?"full":"scoped",max_cost_usd:signals.max_cost_usd??null}}function completeObservedCostUsd(costs){if(costs.length===0||costs.some(cost3=>cost3===null))return null;return costs.reduce((sum,cost3)=>sum+cost3,0)}async function evaluateRunBudget(run,composition,filesystem){if(run.run.execution_id===null)return null;const execution=(await composition.executions.read(run.run.execution_id)).execution;const cycles=run.effective_usage_records.length;const providerInputTokens=run.effective_usage_records.reduce((sum,event)=>sum+Math.max(0,(event.tokens.input??0)-(event.tokens.cached_input??0)),0);const observedContextTokens=run.effective_usage_records.reduce((sum,event)=>sum+(event.context_stats?.initial_pack_tokens??0)+(event.context_stats?.tool_output_tokens??0),0);const measuredInputTokens=providerInputTokens>0?providerInputTokens:observedContextTokens;const cycleBudget=execution.policy.soft_model_cycle_budget??null;const refreshAfter=execution.policy.context_refresh_after_cycles??null;const checkpointRequired=cycleBudget!==null&&cycles>=cycleBudget;const contextRefreshRequired=refreshAfter!==null&&cycles>0&&cycles%refreshAfter===0;const costCapUsd=execution.policy.max_cost_usd??null;const observedCostUsd=completeObservedCostUsd(run.effective_usage_records.map(event=>event.cost.usd));const hasCompleteObservedCost=observedCostUsd!==null;const budget={schema_version:1,run_id:run.run.run_id,execution_id:execution.id,measured_at:new Date().toISOString(),cycles,provider_uncached_input_tokens:providerInputTokens,observed_context_tokens:observedContextTokens,measured_input_tokens:measuredInputTokens,measurement_source:providerInputTokens>0?"provider_uncached":"context_stats",soft_model_cycle_budget:cycleBudget,context_refresh_after_cycles:refreshAfter,max_cost_usd:costCapUsd,observed_cost_usd:observedCostUsd,cost_measurement_source:hasCompleteObservedCost?"observed":"unavailable",cost_checkpoint_required:costCapUsd!==null&&observedCostUsd!==null&&observedCostUsd>=costCapUsd,checkpoint_required:checkpointRequired,context_refresh_required:contextRefreshRequired};if(checkpointRequired||contextRefreshRequired||budget.cost_checkpoint_required){await filesystem.writeTextAtomic(`.local/checkpoints/${run.run.run_id}.json`,`${JSON.stringify(budget,null,2)}
 `)}return budget}var init_run_budget=__esm({"src/run-budget.ts"(){"use strict"}});function runClosureView(repository2,current,prospective){const next=prospective.records.at(-1);if(current.finished!==null||prospective.run.run_id!==current.run.run_id||JSON.stringify(prospective.run)!==JSON.stringify(current.run)||prospective.records.length!==current.records.length+1||next?.type!=="run.finished"||next.sequence!==current.records.length+1||current.records.some((record3,index)=>JSON.stringify(record3)!==JSON.stringify(prospective.records[index])))throw new Error("Closure view requires the exact next terminal event for the locked Run");return new Proxy(repository2,{get(target,key){if(["start","appendRecord"].includes(String(key)))return()=>{throw new Error("Closure view cannot persist Run events")};if(key==="read")return id=>id===current.run.run_id?Promise.resolve(prospective):target.read(id);if(key==="list")return async()=>(await target.list()).map(run=>run.run.run_id===current.run.run_id?prospective:run);const value=Reflect.get(target,key,target);return typeof value==="function"?value.bind(target):value}})}var init_run_closure_view=__esm({"src/run-closure-view.ts"(){"use strict"}});async function reconcileHistoricalCodexTiming(parsed,composition,filesystem,fallbackSegmentFinder=findLatestCodexSegment){return composition.runs.withUsageAttributionLock(async()=>{requireOptions(parsed.options,["id","session","turn"]);const id=parsed.options.id;const turnId=parsed.options.turn;const sessionPath=parsed.options.session;const current=await composition.runs.read(id);if(current.run.client_turn_id!==turnId){throw new UsageError(`Run ${id} is not correlated with the requested turn`)}const candidate=await fallbackSegmentFinder(filesystem.root,new Set,{turnId,sessionPaths:[sessionPath],...current.run.client_thread_id==null?{}:{threadId:current.run.client_thread_id}});if(candidate===null||candidate.startedAt===null||candidate.finishedAt===null||candidate.turnId!==turnId){throw new UsageError("No completed observed interval exists for the requested Run/session/turn")}const sourceSegmentKey=candidate.segmentKey;const sourceUsage=current.effective_usage_records.find(record3=>record3.source_segment_key===sourceSegmentKey);const timingOnly=sourceUsage===void 0;const remeasurement=sourceUsage===void 0?null:await remeasureObservedCalls(candidate,sourceUsage,filesystem);const sourceFinishedAt=remeasurement?.source_finished_at??candidate.finishedAt;const existing=current.records.find(record3=>record3.type==="usage.recorded"&&record3.source_segment_key===sourceSegmentKey&&"source_started_at"in record3&&record3.source_started_at===candidate.startedAt&&"source_finished_at"in record3&&record3.source_finished_at===sourceFinishedAt);const timing={run_id:id,session:sessionPath,turn_id:turnId,source_started_at:candidate.startedAt,source_finished_at:sourceFinishedAt,source_duration_ms:Date.parse(sourceFinishedAt)-Date.parse(candidate.startedAt),source_segment_key:sourceSegmentKey,supersedes_event_id:sourceUsage?.event_id??null,usage:timingOnly?"unavailable":"preserved",...remeasurement===null?{}:{remeasurement}};const enrichesUsage=sourceUsage!==void 0&&remeasurement!==null&&(sourceUsage.tokens.cache_write_input==null&&remeasurement.tokens.cache_write_input!=null||sourceUsage.cost.usd===null&&remeasurement.cost.usd!==null||sourceUsage.cost.brl===null&&remeasurement.cost.brl!==null);if(existing!==void 0&&!enrichesUsage)return{applied:false,reason:"already-reconciled",timing};const existingOwner=(await composition.runs.list()).find(fold=>fold.run.run_id!==id&&fold.effective_usage_records.some(record3=>record3.source_segment_key===sourceSegmentKey||record3.source_segment_key?.startsWith(`${sourceSegmentKey}@`)===true));if(existingOwner!==void 0){throw new UsageError(`Observed source segment is already attributed to ${existingOwner.run.run_id}`)}if(parsed.flags.has("dry-run"))return{applied:false,reason:"dry-run",timing};const sequence=current.records.length+1;await composition.runs.appendRecord(usageRecordedV2Schema.parse({schema_version:2,event_id:runV2EventId(id,sequence),run_id:id,sequence,occurred_at:new Date().toISOString(),type:"usage.recorded",phase:latestRunV2Phase(current.records),activity_kind:timingOnly?"retrospective_observed_timing":"retrospective_local_remeasurement",classification_source:sourceUsage?.classification_source??"current_context",tokens:remeasurement?.tokens??sourceUsage?.tokens??{input:null,cached_input:null,cache_write_input:null,output:null,reasoning:null,total:null,source:"unavailable"},cost:remeasurement?.cost??sourceUsage?.cost??{usd:null,brl:null,fx_rate:null},provider:sourceUsage?.provider??null,model:sourceUsage?.model??null,source_segment_key:sourceSegmentKey,supersedes_event_id:sourceUsage?.event_id??null,retrospective_correction:true,source_occurred_at:sourceFinishedAt,source_started_at:candidate.startedAt,source_finished_at:sourceFinishedAt}));return{applied:true,timing,artifact_path:composition.runs.path(id)}})}async function remeasureObservedCalls(candidate,sourceUsage,filesystem){const matchingLoops=observedCallPrefix(candidate,sourceUsage.tokens);if(matchingLoops===null){throw new UsageError("Observed Model Calls do not match the canonical usage record")}const observed=aggregateSegmentUsage({...candidate,loops:matchingLoops});if(observed.input!==sourceUsage.tokens.input||observed.cached_input!==sourceUsage.tokens.cached_input||observed.output!==sourceUsage.tokens.output||observed.reasoning!==sourceUsage.tokens.reasoning||observed.total!==sourceUsage.tokens.total){throw new UsageError("Observed Model Calls do not match the canonical usage record")}const pricing=new PricingRepository(filesystem);const[catalog,fxRate]=await Promise.all([pricing.readCatalog(),pricing.readLatestFxRate()]);const estimates=matchingLoops.map(loop=>{const model=loop.model??candidate.model??sourceUsage.model;const provider=inferProvider(model??"",sourceUsage.provider??"","");return estimateUsageCost({provider,model:model??"",usage:loop.usage,catalog,fxRate,serviceTier:candidate.serviceTier??null})});if(estimates.some(estimate=>estimate.estimated_usd===null)){throw new UsageError("Observed Model Calls cannot be priced by the current catalog")}const usd=estimates.reduce((total,estimate)=>total+(estimate.estimated_usd??0),0);return{source_call_count:matchingLoops.length,source_finished_at:matchingLoops.at(-1)?.timestamp??candidate.finishedAt,tokens:observed,cost:{usd,brl:fxRate===null?null:usd*fxRate.rate,fx_rate:fxRate?.rate??null}}}function observedCallPrefix(candidate,expected){for(let count=1;count<=candidate.loops.length;count+=1){const loops=candidate.loops.slice(0,count);const usage=aggregateSegmentUsage({...candidate,loops});if(usage.input===expected.input&&usage.cached_input===expected.cached_input&&usage.output===expected.output&&usage.reasoning===expected.reasoning&&usage.total===expected.total){return loops}}return null}var init_v2_run_historical_codex_timing=__esm({"src/source-size-cli/v2-run-historical-codex-timing.ts"(){"use strict";init_src4();init_src5();init_cli_arguments();init_run_conversation_v2()}});async function snapshotRuns(filesystem){const store=new LifecycleManifestStore(filesystem);const entities=await store.readEntities("run");if(entities.length===0&&await store.readSummary()===null)throw incomplete("run","snapshot");return entities.map(fromEntity)}function filterSnapshotRuns(runs,parsed){const statuses=new Set(csvOption(parsed.options.status));const from=dateBoundary(parsed.options.from,false);const to=dateBoundary(parsed.options.to,true);const phase2=parsed.options.phase===void 0?void 0:runV2PhaseOption(parsed.options.phase);const entry2=parsed.options.entrypoint===void 0?void 0:runV2EntrypointOption(parsed.options.entrypoint);const work2=parsed.options["work-type"]===void 0?void 0:runV2WorkTypeOption(parsed.options["work-type"]);return runs.filter(run=>{const at=Date.parse(run.created_at);if(statuses.size&&!statuses.has(run.status)||from!==null&&at<from||to!==null&&at>to||parsed.options.agent!==void 0&&parsed.options.agent!==run.agent&&parsed.options.agent!==run.agent_name)return false;return[[parsed.positionals[2],run.id],[parsed.options.id,run.id],[phase2,run.phase],[entry2,run.entrypoint],[work2,run.work_type],[parsed.options.conversation,run.conversation_id],[parsed.options.execution,run.execution_id],[parsed.options.task,run.task_id],[parsed.options.spec,run.spec_id],[parsed.options.prd,run.prd_id],[parsed.options.change,run.change_id]].every(([wanted,actual])=>wanted===void 0||wanted===actual)}).sort((a,b)=>b.created_at.localeCompare(a.created_at)||b.id.localeCompare(a.id))}function snapshotCostInput(run){return{run:{run_id:run.id,attribution_status:run.attribution_status,conversation_id:run.conversation_id,execution_id:run.execution_id,task_id:run.task_id,spec_id:run.spec_id,prd_id:run.prd_id,change_id:run.change_id,work_type:run.work_type},records:run.pricing_segments,effective_usage_records:run.pricing_segments}}function aggregateSnapshotRunsByAgent(runs){const groups=new Map;for(const run of runs){const key=run.agent_name??run.agent;groups.set(key,[...groups.get(key)??[],run])}return[...groups.entries()].sort(([a],[b])=>a.localeCompare(b)).map(([name,group])=>{const durations=group.flatMap(run=>run.terminal_finished_at===null?[]:duration3(run.created_at,run.terminal_finished_at));const aggregate=aggregateRunV2Usage(group.map(snapshotCostInput),name);const cycles=group.map(run=>run.pricing_segments.length);return{agent:group[0]?.agent??name,agent_name:name,run_count:group.length,rework_runs:group.filter(run=>run.work_type==="rework").length,duration:{known_runs:durations.length,unknown_runs:group.length-durations.length,total_ms:durations.reduce((a,b)=>a+b,0),average_ms:durations.length?Math.round(durations.reduce((a,b)=>a+b,0)/durations.length):null},observed_usage_cycles:{total:cycles.reduce((a,b)=>a+b,0),average:cycles.length?Number((cycles.reduce((a,b)=>a+b,0)/cycles.length).toFixed(2)):null},tokens:aggregate.total.tokens,cost:aggregate.total.cost,coverage:aggregate.run_coverage}})}function snapshotObservedSourceTiming(runs){return summarizeObservedSourceTiming(runs.flatMap(run=>run.pricing_segments).map(segment2=>({phase:segment2.phase,source_started_at:segment2.source_started_at,source_finished_at:segment2.source_finished_at})))}function filterRunV2Folds(runs,parsed){const snapshots=runs.map(fold=>({id:fold.run.run_id,status:fold.status,created_at:fold.run.occurred_at,phase:fold.records.findLast(record3=>"phase"in record3)?.phase??fold.run.phase,entrypoint:fold.run.entrypoint,work_type:fold.run.work_type,agent:fold.run.agent,agent_name:fold.run.agent_name??null,conversation_id:fold.run.conversation_id,execution_id:fold.run.execution_id,task_id:fold.run.task_id,spec_id:fold.run.spec_id,prd_id:fold.run.prd_id,change_id:fold.run.change_id}));const ids=new Set(filterSnapshotRuns(snapshots,parsed).map(run=>run.id));return runs.filter(run=>ids.has(run.run.run_id))}function fromEntity(entity){const d=data(entity);return{id:entity.id,status:string4(entity.status,"status"),created_at:string4(d.started_at,"started_at"),terminal_finished_at:nullable2(d.terminal_finished_at),effective_finished_at:nullable2(d.finished_at),phase:phase(d.phase),run_role:string4(d.run_role,"run_role"),parent_run_id:nullable2(d.parent_run_id),entrypoint:entry(d.entrypoint),work_type:work(d.work_type),intake:intake(d.intake),agent:string4(d.agent,"agent"),agent_name:nullable2(d.cli_agent_name),model:string4(d.model,"model"),reasoning_effort:nullable2(d.reasoning_effort),call_count:nullableNumber(d.cli_call_count,"cli_call_count"),client_thread_id:nullable2(d.client_thread_id),client_turn_id:nullable2(d.client_turn_id),conversation_id:string4(d.conversation_id,"conversation_id"),execution_id:nullable2(d.execution_id),task_id:nullable2(d.task_id),spec_id:nullable2(d.spec_id),prd_id:nullable2(d.prd_id),change_id:nullable2(d.change_id),attribution_status:attribution(d.attribution_status),pricing_segments:segments(d.pricing_segments)}}function data(entity){if(entity.data===null)throw incomplete(entity.id,"data");return entity.data}function string4(v,f){if(typeof v!=="string"||!v)throw incomplete("run",f);return v}function nullable2(v){if(v===null)return null;if(typeof v==="string")return v;throw incomplete("run","nullable")}function nullableNumber(v,f){if(v===null)return null;if(typeof v==="number"&&Number.isInteger(v)&&v>=0)return v;throw incomplete("run",f)}function phase(v){if(v==="conversation"||v==="planning"||v==="execution")return v;throw incomplete("run","phase")}function entry(v){if(v==="conversation"||v==="task"||v==="spec"||v==="prd")return v;throw incomplete("run","entrypoint")}function work(v){if(v==="new"||v==="rework")return v;throw incomplete("run","work_type")}function attribution(v){if(v==="attributed"||v==="legacy_unattributed")return v;throw incomplete("run","attribution_status")}function intake(v){if(v===null)return null;if(typeof v!=="object"||v===null)throw incomplete("run","intake");const x=v;if(typeof x.intent!=="string"||typeof x.classification_source!=="string"||typeof x.confidence!=="number"||!Array.isArray(x.reason_codes)||!x.reason_codes.every(item=>typeof item==="string"))throw incomplete("run","intake");return{intent:x.intent,classification_source:x.classification_source,confidence:x.confidence,reason_codes:x.reason_codes}}function segments(v){if(!Array.isArray(v))throw incomplete("run","pricing_segments");return v.map(item=>{if(typeof item!=="object"||item===null)throw incomplete("run","pricing_segments");const x=item;return{event_id:string4(x.event_id,"pricing_segments.event_id"),phase:phase(x.phase),tokens:tokens(x),cost:cost2(x),source_started_at:nullable2(x.source_started_at),source_finished_at:nullable2(x.source_finished_at),attributed_spec_id:nullable2(x.attributed_spec_id)}})}function tokens(x){return{input:metric4(x.input_tokens,"input_tokens"),cached_input:metric4(x.cached_input_tokens,"cached_input_tokens"),output:metric4(x.output_tokens,"output_tokens"),reasoning:metric4(x.reasoning_tokens,"reasoning_tokens"),total:metric4(x.total_tokens,"total_tokens")}}function cost2(x){return{usd:metric4(x.recorded_usd,"recorded_usd"),brl:metric4(x.recorded_brl,"recorded_brl")}}function metric4(v,f){if(v===null)return null;if(typeof v==="number"&&Number.isFinite(v)&&v>=0)return v;throw incomplete("run",f)}function duration3(a,b){const n=Date.parse(b)-Date.parse(a);return Number.isFinite(n)&&n>=0?[n]:[]}function incomplete(id,field){return new Error(`Run snapshot is incomplete (${id}: ${field}); run \`zaip manifest rebuild --confirm-full-scan\``)}var init_v2_run_snapshot=__esm({"src/commands/v2-run-snapshot.ts"(){"use strict";init_src4();init_src8();init_cli_arguments()}});function sameStringSet(left,right){return left.length===right.length&&left.every(value=>right.includes(value))}function runV2ScopeOption(parsed){return parsed.positionals[2]??parsed.options.id??parsed.options.conversation??parsed.options.execution??parsed.options.task??parsed.options.spec??parsed.options.prd??parsed.options.change??null}var init_v2_run_support=__esm({"src/commands/v2-run-support.ts"(){"use strict"}});var v2_run_exports={};__export(v2_run_exports,{activeRunWindow:()=>activeRunWindow,cancelTaskRunsForHuman:()=>cancelTaskRunsForHuman,filterRunV2Folds:()=>filterRunV2Folds,runRunV2Command:()=>runRunV2Command});async function runRunV2Command(action,parsed,composition,filesystem,lifecycle){if(action==="start"){requireOptions(parsed.options,["short-name","phase","entrypoint","work-type","client","model"]);const client=parsed.options.client;const phase2=runV2PhaseOption(parsed.options.phase);const parentRunId=parsed.options.parent??null;const clientInvocation=await resolveRunClientInvocation(filesystem,client);const agentResolution=await resolveRunAgentIdentityResult(filesystem,{agent:parsed.options.agent,client});const agent=agentResolution.agent_id;const runPurpose=parsed.options["run-purpose"]===void 0?phase2!=="execution"?"intake":agent==="agent-finalizer"?"finalization":agent==="agent-reviewer"?"review":agent==="agent-auditor"?"audit":parentRunId===null?"orchestration":"execution":runV2PurposeSchema.parse(parsed.options["run-purpose"]);const catalog=await loadAgentCatalog(filesystem).catch(()=>null);const catalogAgent=catalog?.agents.find(candidate=>candidate.id===agent);const parent=parentRunId===null?null:await composition.runs.read(parentRunId);const execution=parent===null&&parsed.options.execution!==void 0?await composition.executions.read(parsed.options.execution).catch(()=>null):null;const executionKind=parent?.run.execution_kind??execution?.execution.kind??void 0;const rootDeveloperIdentity=parentRunId===null?await resolveDeveloperIdentityForRoot(filesystem):void 0;const input={...parsed.options.id===void 0?{}:{id:parsed.options.id},shortName:parsed.options["short-name"],phase:phase2,...parsed.options["run-role"]===void 0?{}:{runRole:runV2RoleSchema.parse(parsed.options["run-role"])},runPurpose,...executionKind===void 0?{}:{executionKind},executionEligibility:catalogAgent?.execution_eligibility??[],...parsed.options["direct-authorization"]===void 0?{}:{directExecutionAuthorization:parsed.options["direct-authorization"]},entrypoint:runV2EntrypointOption(parsed.options.entrypoint),workType:runV2WorkTypeOption(parsed.options["work-type"]),client,agent,agentName:await resolveRunAgentName(filesystem,agent),...agentResolution.warning===null?{}:{agentIdentityWarning:agentResolution.warning},provider:parsed.options.provider??null,model:parsed.options.model,reasoningEffort:parsed.options["reasoning-effort"]===void 0?null:runV2ReasoningEffortSchema.parse(parsed.options["reasoning-effort"]),...clientInvocation,conversationId:parsed.options.conversation??createConversationId(parsed.options["short-name"]),executionId:parsed.options.execution??null,taskId:parsed.options.task??null,specId:parsed.options.spec??null,prdId:parsed.options.prd??null,changeId:parsed.options.change??null,parentRunId,continuationOfRunId:parsed.options.continuation??null,retryOfRunId:parsed.options.retry??null,...rootDeveloperIdentity===void 0?{}:{developerIdentity:rootDeveloperIdentity}};await validateRunV2Attribution(input,composition);if(parentRunId===null){const existing=await findRootRunForExactTurn(composition,client,clientInvocation);if(existing!==null){const conflicts=rootRunStartConflicts(existing,input,parsed.options.conversation,parsed.options.id);if(conflicts.length>0){throw new UsageError(`Exact client turn is already captured by root Run ${existing.run.run_id}; requested root Run conflicts on ${conflicts.join(", ")}. Reuse matching metadata or start the delivery from a new observed client turn.`)}return{run:existing.run,artifact_path:composition.runs.path(existing.run.run_id),warnings:agentResolution.warning===null?[]:[agentResolution.warning],reused:true}}}const start=async()=>{if(parentRunId!==null){const freshParent=await composition.runs.read(parentRunId);const candidates=await composition.runs.list();assertChildRunMayStart(freshParent,runPurpose,agent,candidates,catalogAgent?.execution_eligibility??[])}const writer=await composition.runs.start(input);return{run:writer.started,artifact_path:composition.runs.path(writer.started.run_id),warnings:agentResolution.warning===null?[]:[agentResolution.warning]}};return parentRunId===null?start():composition.runs.withUsageAttributionLock(start)}if(action==="list"||action==="aggregate"){const runs=filterSnapshotRuns(await snapshotRuns(filesystem),parsed);if(action==="aggregate"){const aggregate=aggregateRunV2Usage(runs.map(snapshotCostInput),runV2ScopeOption(parsed));const agents=aggregateSnapshotRunsByAgent(runs);const observed_source_timing=snapshotObservedSourceTiming(runs);return parsed.options.view==="full"?{...aggregate,agents,observed_source_timing}:{...compactRunAggregate(aggregate),agents,observed_source_timing}}const summaries=runs.map(run=>({id:run.id,status:run.status,created_at:run.created_at,finished_at:run.terminal_finished_at,phase:run.phase,run_role:run.run_role,parent_run_id:run.parent_run_id,entrypoint:run.entrypoint,work_type:run.work_type,intake:run.intake,agent:run.agent,agent_name:run.agent_name??(run.agent.startsWith("agent-")?`zaip-agent-${run.agent.slice("agent-".length)}`:run.agent),model:run.model,reasoning_effort:run.reasoning_effort,call_count:run.call_count,client_thread_id:run.client_thread_id,client_turn_id:run.client_turn_id,conversation_id:run.conversation_id,execution_id:run.execution_id,task_id:run.task_id,spec_id:run.spec_id,prd_id:run.prd_id,change_id:run.change_id,usage:(()=>{const usage=aggregateRunV2Usage([snapshotCostInput(run)],run.id).total;return{event_count:usage.usage_event_count,tokens:usage.tokens,cost:usage.cost,coverage:usage.coverage}})(),artifact_path:composition.runs.path(run.id)}));return listLifecyclePage(summaries,parsed)}if(action==="reconcile"){if(parsed.flags.has("open"))return reconcileOpenWork(parsed,composition,lifecycle,filesystem);return reconcileHistoricalCodexTiming(parsed,composition,filesystem)}if(action==="usage"&&parsed.flags.has("recent"))return captureRecentRunTelemetry(parsed,composition,filesystem);if(action==="usage"&&parsed.flags.has("active"))return captureActiveRunTelemetry(parsed,composition,filesystem);const id=requiredEntityId(parsed,2,"Run V2 id");if(action==="show"){const run=await composition.runs.read(id);const includeEvents=parsed.flags.has("events")||parsed.options["event-id"]!==void 0||parsed.options["from-sequence"]!==void 0;return includeEvents?{run:{...run,records:run.records.filter(record3=>(parsed.options["event-id"]===void 0||record3.event_id===parsed.options["event-id"])&&(parsed.options["from-sequence"]===void 0||record3.sequence>=numberOption(parsed.options["from-sequence"],1)))},artifact_path:composition.runs.path(id)}:runV2Summary(run,composition)}if(action==="recover-attribution"){return composition.runs.withUsageAttributionLock(async()=>{const current=await composition.runs.read(id);const started=current.records[0];if(current.finished!==null)throw new UsageError(`Run V2 is already finished: ${id}`);if(started?.type!=="run.started")throw new UsageError(`Run V2 has no start record: ${id}`);if(current.attribution_recovery!==null){throw new UsageError(`Run V2 already has an attribution recovery: ${id}`)}if(current.run.entrypoint!=="task"||current.run.execution_id===null||current.run.task_id===null||current.run.change_id!==null){throw new UsageError(`Run ${id} is not an active task Run with an unclaimed Change attribution`)}const task=await composition.tasks.read(current.run.task_id);const changeId=task.task.change_id;if(changeId===null)throw new UsageError(`Task ${task.task.id} has no materialized Change`);await validateRunV2Attribution({shortName:current.run.run_id,phase:"execution",entrypoint:"task",workType:current.run.work_type,client:current.run.client,agent:current.run.agent,provider:current.run.provider,model:current.run.model,conversationId:current.run.conversation_id,executionId:current.run.execution_id,taskId:current.run.task_id,changeId,parentRunId:current.run.parent_run_id,continuationOfRunId:current.run.continuation_of_run_id,retryOfRunId:current.run.retry_of_run_id},composition);const record3=runAttributionRecoveredV2Schema.parse({schema_version:2,event_id:runV2EventId(id,current.records.length+1),run_id:id,sequence:current.records.length+1,occurred_at:new Date().toISOString(),type:"run.attribution.recovered",phase:"execution",execution_id:current.run.execution_id,task_id:current.run.task_id,change_id:changeId});await composition.runs.appendRecord(record3);return{recovery:record3,run:runV2Summary(await composition.runs.read(id),composition),artifact_path:composition.runs.path(id)}})}if(action==="closure"){const current=await composition.runs.read(id);if(current.finished===null)throw new UsageError(`Run V2 is still running: ${id}`);const closure=await assessRunLifecycleClosure(current,composition);if(closure.status==="action_required"){throw new UsageError(`Run ${id} left related work open: ${closure.open_subject_ids.join(", ")}. ${closure.guidance}`)}return{closure,artifact_path:composition.runs.path(id)}}if(action==="usage"){let current=await composition.runs.read(id);const appServerEventsPath=parsed.options["codex-app-server-events"];const rawCaptureDisabled=parsed.flags.has("disable-codex-raw");if(appServerEventsPath!==void 0&&!rawCaptureDisabled){const notifications=parseCodexAppServerNotificationStream(await filesystem.readText(appServerEventsPath));const persisted=await ingestCodexAppServerNotifications(filesystem,notifications);current=await recordCodexTelemetryIfAvailable(current,composition,filesystem);return{telemetry:{received_notifications:notifications.length,persisted_event_ids:persisted.map(event=>event.event_id)},run:runV2Summary(current,composition),artifact_path:composition.runs.path(id)}}if(rawCaptureDisabled){current=await recordCodexTelemetryIfAvailable(current,composition,filesystem);return{telemetry:{raw_capture:"disabled",fallback:"codex_session_fallback"},run:runV2Summary(current,composition),artifact_path:composition.runs.path(id)}}if(current.finished!==null)throw new UsageError(`Run V2 is already finished: ${id}`);const sequence=current.records.length+1;const input=nullableNumberOption(parsed.options["input-tokens"]);const cachedInput=nullableNumberOption(parsed.options["cached-input-tokens"]);const outputTokens=nullableNumberOption(parsed.options["output-tokens"]);const reasoning=nullableNumberOption(parsed.options["reasoning-tokens"]);const explicitTotal=nullableNumberOption(parsed.options["total-tokens"]);const occurredAt=new Date().toISOString();const tokens2={input,cached_input:cachedInput,output:outputTokens,reasoning,total:explicitTotal??(input===null||outputTokens===null?null:input+outputTokens),source:tokenSourceOption(parsed.options["token-source"])};const provider=inferProvider(parsed.options.model??current.run.model,parsed.options.provider??current.run.provider??current.run.client,current.run.agent);const pricing=new PricingRepository(filesystem);const estimated=estimateUsageCost({provider,model:parsed.options.model??current.run.model,usage:tokens2,catalog:await pricing.readCatalog(),fxRate:await pricing.readLatestFxRate()});const record3=usageRecordedV2Schema.parse({schema_version:2,event_id:parsed.options["event-id"]??runV2EventId(id,sequence),run_id:id,sequence,occurred_at:occurredAt,type:"usage.recorded",phase:runV2PhaseOption(parsed.options.phase??latestRunV2Phase(current.records)),activity_kind:parsed.options.activity??"implementation",classification_source:runV2ClassificationOption(parsed.options.classification),tokens:tokens2,cost:{usd:nullableCurrencyOption(parsed.options["cost-usd"])??estimated.estimated_usd,brl:nullableCurrencyOption(parsed.options["cost-brl"])??estimated.estimated_brl,fx_rate:parsed.options["cost-brl"]===void 0?estimated.fx_rate:null},provider,model:parsed.options.model??current.run.model,source_segment_key:parsed.options["source-segment"]??null,supersedes_event_id:parsed.options.supersedes??null,...runUsageMetadataOptions(parsed.options,occurredAt)});const folded=foldRunV2Records([...current.records,record3]);await composition.runs.appendRecord(record3);const budget=await evaluateRunBudget(folded,composition,filesystem);return{usage:record3,budget,artifact_path:composition.runs.path(id)}}if(action==="finish"){const telemetryCandidate=await composition.runs.read(id);await recordCodexTelemetryIfAvailable(telemetryCandidate,composition,filesystem);return composition.runs.withUsageAttributionLock(async()=>{let current=await composition.runs.read(id);const status=runV2FinishStatusOption(parsed.options.status);const candidateRuns=await composition.runs.list();const suppliedEvidenceIds=csvOption(parsed.options.evidence);const finalizationDecision=current.finalization_decision??null;if(finalizationDecision!==null&&suppliedEvidenceIds.length>0&&!sameStringSet(suppliedEvidenceIds,finalizationDecision.evidence_ids)){throw new UsageError("--evidence must match the persisted Gui finalization decision")}const evidenceIds=finalizationDecision?.evidence_ids??suppliedEvidenceIds;const suppliedChangedFiles=csvOption(parsed.options["changed-files"]);if(finalizationDecision!==null&&suppliedChangedFiles.length>0&&!sameStringSet(suppliedChangedFiles,finalizationDecision.changed_files)){throw new UsageError("--changed-files must match the persisted Gui finalization decision")}const changedFiles=finalizationDecision?.changed_files??suppliedChangedFiles;const finalizationBarrier=assessRunFinalizationBarrier(current,candidateRuns,await hasPassedTypedEvidenceForRun(current,evidenceIds,composition,candidateRuns));const barrierBlockReason=finalizationBarrierBlockReason(finalizationBarrier);const finalizationBlockReason=finalizationDecision!==null&&finalizationDecision.outcome!=="completed"?null:barrierBlockReason;const suppliedOutcome=lifecycleOutcomeOption(parsed.options);const missingFinalizationDecision=ownsLifecycleAttempt(current)&&finalizationBarrier.required&&finalizationDecision===null;if(finalizationDecision!==null&&suppliedOutcome!==void 0&&suppliedOutcome!==finalizationDecision.outcome){throw new UsageError(`--task-outcome must match the persisted Gui decision (${finalizationDecision.outcome})`)}if(finalizationDecision!==null&&parsed.options.summary!==void 0&&parsed.options.summary!==finalizationDecision.summary){throw new UsageError("--summary must match the persisted Gui finalization decision")}const mustFailClosed=finalizationBlockReason!==null||missingFinalizationDecision;const requestedOutcome=mustFailClosed?"blocked":finalizationDecision?.outcome??suppliedOutcome;const reconciliationSummary=finalizationBlockReason??(missingFinalizationDecision?"Orchestrator stopped without a persisted Gui finalization decision; lifecycle was fail-closed as blocked.":finalizationDecision?.summary??parsed.options.summary);if(current.finished===null&&ownsLifecycleAttempt(current)){const activeChildren=activeDescendantRuns(id,candidateRuns);if(activeChildren.length>0){throw new UsageError(`Run ${id} cannot finish while descendant Runs are active: ${activeChildren.map(child=>child.run.run_id).join(", ")}`)}}if(!mustFailClosed&&parsed.flags.has("defer-orchestrator-closure")&&ownsLifecycleAttempt(current)){throw new UsageError(`Orchestrator Run closure cannot be deferred for Run ${id}`)}const deferClosure=!mustFailClosed&&parsed.flags.has("defer-orchestrator-closure");if(current.finished!==null){if(current.finished.status!==status){throw new UsageError(`Run V2 is already ${current.finished.status}: ${id}`)}const reconciliation2=await reconcileFinishedRunLifecycle(current,composition,lifecycle,{requestedOutcome,forceRequestedOutcome:mustFailClosed,summary:reconciliationSummary,changedFiles,evidenceIds,defer:deferClosure,candidateRuns});const interactionExecution2=await settleInteractionExecutionForRun(current,composition,mustFailClosed?reconciliationSummary??null:finalizationBlockReason);return{run:parsed.flags.has("events")||parsed.options.view==="full"?current:runV2Summary(current,composition),reconciliation:reconciliation2,execution:interactionExecution2,finalization_barrier:finalizationBarrier,closure:await assessRunLifecycleClosure(current,composition,candidateRuns),artifact_path:composition.runs.path(id)}}if(current.effective_usage_records.length===0){const usage=unavailableUsageRecord(current,parsed,current.records.length+1);await composition.runs.appendRecord(usage);current=foldRunV2Records([...current.records,usage])}const sequence=current.records.length+1;const record3=runFinishedV2Schema.parse({schema_version:2,event_id:runV2EventId(id,sequence),run_id:id,sequence,occurred_at:new Date().toISOString(),type:"run.finished",phase:latestRunV2Phase(current.records),status});const prospectiveRun=foldRunV2Records([...current.records,record3]);const closureGate=new LifecycleV2Gate(filesystem,composition.layout,{...composition,runs:runClosureView(composition.runs,current,prospectiveRun)});const reconciliation=await reconcileFinishedRunLifecycle(prospectiveRun,composition,closureGate,{requestedOutcome,forceRequestedOutcome:mustFailClosed,summary:reconciliationSummary,changedFiles,evidenceIds,defer:deferClosure,candidateRuns});const interactionExecution=await settleInteractionExecutionForRun(prospectiveRun,composition,mustFailClosed?reconciliationSummary??null:finalizationBlockReason);await syncLifecycleManifestResult({reconciliation,execution:interactionExecution},"execution",parsed,composition,filesystem);await composition.runs.appendRecord(record3);const run=await composition.runs.read(id);const closure=await assessRunLifecycleClosure(run,composition,candidateRuns);return{run:parsed.flags.has("events")||parsed.options.view==="full"?run:runV2Summary(run,composition),reconciliation,execution:interactionExecution,finalization_barrier:finalizationBarrier,closure,artifact_path:composition.runs.path(id)}})}if(action==="finalization"){const current=await composition.runs.read(id);if(!ownsLifecycleAttempt(current)){throw new UsageError(`Run ${id} is not an orchestrator Run`)}const outcome=lifecycleOutcomeOption(parsed.options);if(outcome===void 0)throw new UsageError("Missing options: --task-outcome");const summary=parsed.options.summary?.trim();if(summary===void 0||summary.length===0)throw new UsageError("Missing options: --summary");const evidenceIds=csvOption(parsed.options.evidence);assertFinalizationEvidenceInput(evidenceIds);const changedFiles=csvOption(parsed.options["changed-files"]);const requestedFinalizerRunId=parsed.options["finalizer-run-id"]?.trim();return composition.runs.withUsageAttributionLock(async()=>{const fresh=await composition.runs.read(id);const existing=fresh.finalization_decision??null;if(existing!==null){if(requestedFinalizerRunId!==void 0&&requestedFinalizerRunId.length>0&&existing.finalizer_run_id!==requestedFinalizerRunId||existing.outcome!==outcome||existing.summary!==summary||!sameStringSet(existing.evidence_ids,evidenceIds)||!sameStringSet(existing.changed_files,changedFiles)){throw new UsageError(`Run ${id} already has a different Gui finalization decision`)}return{finalization:existing,reused:true,artifact_path:composition.runs.path(id)}}const lockedCandidates=await composition.runs.list();const finalizers=lockedCandidates.filter(candidate=>candidate.run.parent_run_id===id&&effectiveRunV2Purpose(candidate.run)==="finalization"&&candidate.run.agent==="agent-finalizer");const activeFinalizers=finalizers.filter(candidate=>candidate.finished===null);const terminalFallbackFinalizers=finalizers.filter(candidate=>candidate.finished!==null&&candidate.run.client==="codex-subagent"&&candidate.run.client_turn_id===null&&candidate.run.provider===null&&candidate.run.model==="unavailable");const candidatesForDecision=fresh.finished===null?activeFinalizers:terminalFallbackFinalizers;const lockedFinalizer=requestedFinalizerRunId===void 0||requestedFinalizerRunId.length===0?candidatesForDecision.length===1?candidatesForDecision[0]:void 0:candidatesForDecision.find(candidate=>candidate.run.run_id===requestedFinalizerRunId);if(lockedFinalizer===void 0){if(fresh.finished!==null){throw new UsageError(`Run ${id} requires its exact terminal fallback Gui finalizer to record a post-close decision`)}throw new UsageError(`Run ${id} requires an active Gui finalizer to record its decision`)}if(fresh.finished!==null&&fresh.finished.status!=="completed"){throw new UsageError(`Run V2 is already ${fresh.finished.status}: ${id}`)}const lockedActiveElsewhere=activeDescendantRuns(id,lockedCandidates).filter(candidate=>candidate.run.run_id!==lockedFinalizer.run.run_id);if(lockedActiveElsewhere.length>0){throw new UsageError(`Gui finalization for Run ${id} requires every other descendant to be terminal: ${lockedActiveElsewhere.map(run=>run.run.run_id).join(", ")}`)}await assertFinalizationCandidatePreflight(fresh,outcome,evidenceIds,changedFiles,composition);const record3=runFinalizationDecidedV2Schema.parse({schema_version:2,event_id:runV2EventId(id,fresh.records.length+1),run_id:id,sequence:fresh.records.length+1,occurred_at:new Date().toISOString(),type:"run.finalization.decided",finalizer_run_id:lockedFinalizer.run.run_id,outcome,summary,evidence_ids:evidenceIds,changed_files:changedFiles});await composition.runs.appendRecord(record3);return{finalization:record3,reused:false,artifact_path:composition.runs.path(id)}})}throw new UsageError(`Unknown Run V2 action: ${action??""}`)}var init_v2_run=__esm({"src/commands/v2-run.ts"(){"use strict";init_src4();init_finalization_candidate_preflight();init_finalization_evidence_input();init_task_attempt();init_recent_run_telemetry();init_v2_run_interaction_execution();init_v2_run_cancellation_and_aggregate();init_src5();init_attribution_v2();init_cli_arguments();init_conversation_intake();init_developer_identity_command();init_execution_intake_compatibility();init_lifecycle_manifest_commands();init_lifecycle_v2();init_open_work_reconciliation();init_record_codex_telemetry();init_run_agent_identity();init_run_budget();init_run_client_invocation();init_run_closure_view();init_run_conversation_v2();init_run_finalization_barrier();init_run_finalization_evidence_v2();init_run_hierarchy();init_run_lifecycle_closure();init_run_lifecycle_reconciliation();init_v2_run_historical_codex_timing();init_v2_run_snapshot();init_v2_run_support();init_v2_run_active_window();init_v2_run_snapshot()}});async function runConversationV2Command(action,parsed,composition,filesystem,lifecycle,intake2){if(action==="start"){const client=parsed.options.client??"codex";const clientInvocation=await invocation(filesystem,client,intake2);const requestedIntent=resolveConversationIntent(parsed,clientInvocation.userMessage);assertDefinitionConversationIntake(parsed,requestedIntent);if(requestedIntent==="git_only"||isImplicitConversationCapture(parsed)&&isGitOnlyPublicationRequest(clientInvocation.userMessage)){return{skipped:true,reason:"git-only-publication",message:"Explicit deploy, push, and publication requests do not create ZAIP lifecycle records"}}const request=conversationRequestOptions(clientInvocation.userMessage);const intakeSnapshot=await composition.runs.list();const threadContext=await latestThreadContext(composition,client,clientInvocation.clientThreadId,intakeSnapshot);let intent=requestedIntent;const newWorkMetadata=intent==="new_work"?requireSemanticNewWorkMetadata(parsed):null;let target=intent==="continue"||intent==="refine"||intent==="rework"?explicitIntakeTarget(parsed)??threadContext.implicitTarget:null;let decision=intakeDecision(parsed,intent,clientInvocation.userMessage);if(intent==="new_work"&&newWorkMetadata!==null&&decision.classification_source!=="explicit"&&threadContext.implicitTarget?.taskId!==void 0){const focusedTask=(await composition.tasks.read(threadContext.implicitTarget.taskId)).task;if((focusedTask.status==="draft"||focusedTask.status==="planned")&&focusedTask.started_at===null&&describesEquivalentWork(newWorkMetadata,focusedTask)){intent="continue";target=threadContext.implicitTarget;decision={intent:"continue",classification_source:"fallback",confidence:1,reason_codes:["equivalent-thread-work-reused"]}}}if((intent==="continue"||intent==="refine"||intent==="rework")&&target===null){intent="conversation";target=null;decision={intent:"conversation",classification_source:"fallback",confidence:0,reason_codes:["target-not-resolved"]}}const existing=await findIntakeForExactTurn(composition,client,clientInvocation,intakeSnapshot);if(existing!==null){assertExactIntakeRequestCompatible(existing,parsed,intent);const task2=existing.run.task_id===null?null:(await composition.tasks.read(existing.run.task_id)).task;assertConversationProfileReplay(parsed.options,task2?.model_profile);return{task:task2,run:existing.run,task_path:task2===null?null:composition.tasks.path(task2.id),run_path:composition.runs.path(existing.run.run_id),reused:true}}const model=resolveConversationModel(parsed.options.model,clientInvocation.observedModel);const reasoningEffort=resolveConversationReasoningEffort(parsed.options["reasoning-effort"],clientInvocation.observedReasoningEffort);const timeZone=composition.layout.project.timezone;const conversationId2=parsed.options.conversation??threadContext.conversationId??createConversationId(intent==="new_work"?"new-work":"conversation");const clientTurnId=clientInvocation.clientTurnId??`local-${Date.now()}-${createCollisionCode(16)}`;const executionPolicy={failure_policy:"stop_on_terminal_failure",max_parallelism:1,max_operational_retries:1,max_repair_cycles_per_task:0,verification_mode:"scoped"};let activeTaskContinuation=false;const directAuthorization=validatedDirectAuthorization(parsed,clientInvocation,model);const commonInput=(executionId,executionKind)=>({...parsed.options.run===void 0?{}:{id:parsed.options.run},phase:conversationCapturePhase(intent,activeTaskContinuation),workType:runV2WorkTypeOption(intent==="rework"?"rework":parsed.options["work-type"]??"new"),client,runRole:"orchestrator",runPurpose:"orchestration",requiresFinalizer:executionKind==="delivery",executionKind,executionEligibility:[],...directAuthorization===void 0||executionKind!=="delivery"?{}:{directExecutionAuthorization:directAuthorization},agent:"agent-orchestrator",agentName:"zaip-agent-orchestrator",provider:parsed.options.provider??null,model,reasoningEffort,clientThreadId:clientInvocation.clientThreadId,clientTurnId,conversationId:conversationId2,executionId,intake:decision});if(intent==="new_work"&&composition.layout.projectConfig?.assurance?.require_final_commit===true)await assertGitDeliveryReady(filesystem.root);const rootDeveloperIdentity=await resolveDeveloperIdentityForRoot(filesystem);const openIntakes2=await openIntakes(composition,client,clientInvocation.clientThreadId,clientInvocation.clientTurnId,intakeSnapshot,intake2);const continuationOfRunId=target===null?null:openIntakes2.find(fold=>runMatchesTarget(fold,target))?.run.run_id??null;if(intent!=="new_work"){if(intent==="continue"&&target?.taskId!==void 0){const targetedTask=(await composition.tasks.read(target.taskId)).task;if(targetedTask.status==="blocked"){await lifecycle.startTask(targetedTask.id,"resume")}}const canonicalTaskExecution=target?.taskId===void 0?null:await activeCanonicalTaskExecution(target.taskId,composition);const canonicalMacroExecution=intent==="continue"&&target?.taskId===void 0&&(target?.specId!==void 0||target?.prdId!==void 0)?await resolveCanonicalMacroExecution(target,composition,parsed.options.execution):null;let execution=target===null?await composition.executions.createInteraction({id:parsed.options.execution??createId("EXEC",`interaction-${intent}`,{timeZone}),clientTurnId,conversationId:conversationId2,policy:executionPolicy}):canonicalTaskExecution??canonicalMacroExecution??await composition.executions.createDeliveryIntake({id:parsed.options.execution??createId("EXEC",`delivery-${intent}`,{timeZone}),clientTurnId,origin:target.taskId!==void 0?{type:"task",task_id:target.taskId}:target.specId!==void 0?{type:"spec",spec_id:target.specId}:{type:"prd",prd_id:target.prdId},policy:executionPolicy});const targetTask=target?.taskId===void 0?null:(await composition.tasks.read(target.taskId)).task;activeTaskContinuation=intent==="continue"&&(canonicalTaskExecution!==null&&targetTask!==null&&(targetTask.status==="executing"||targetTask.status==="verifying")||canonicalMacroExecution!==null);if(canonicalMacroExecution?.status==="planned"){execution=await composition.executions.transition(canonicalMacroExecution.id,"running")}const input={...commonInput(execution.id,execution.kind??"delivery"),developerIdentity:rootDeveloperIdentity,shortName:parsed.options["short-name"]??intent.replaceAll("_","-"),entrypoint:target?.entrypoint??"conversation",...target?.taskId===void 0?{}:{taskId:target.taskId},...targetTask===null?{}:{changeId:targetTask.change_id},...target?.specId===void 0?{}:{specId:target.specId},...target?.prdId===void 0?{}:{prdId:target.prdId},continuationOfRunId};await validateRunV2Attribution(input,composition);const writer=await composition.runs.start(input);const settledIntakes=await finishOpenThreadIntakes(openIntakes2,composition,filesystem,parsed,lifecycle);const task2=input.taskId==null?null:(await composition.tasks.read(input.taskId)).task;return{task:task2,run:writer.started,settled_intakes:settledIntakesForView(settledIntakes,parsed.options.view),task_path:task2===null?null:composition.tasks.path(task2.id),run_path:composition.runs.path(writer.started.run_id)}}const metadata2=newWorkMetadata??requireSemanticNewWorkMetadata(parsed);const modelProfile=conversationTaskModelProfile(parsed.options);const taskId=parsed.options.task??createId("TASK",metadata2.shortName,{timeZone});const changeId=parsed.options.change??createId("CHG",metadata2.shortName,{timeZone});const{task,change}=await createTaskAndChangeAtomically(filesystem,composition,{id:taskId,changeId,title:metadata2.title,shortName:metadata2.shortName,objective:metadata2.objective,risk:modelProfile?.risk??riskOption(parsed.options.risk??request.risk),modelProfile,priority:priorityOption(parsed.options.priority),targetRelease:await taskFirstRelease(filesystem,parsed.options["target-release"]),owner:parsed.options.owner??null,requirementIds:csvOption(parsed.options.requirements??"REQ-WORK-001"),acceptanceIds:csvOption(parsed.options.acceptance??"AC-WORK-001-09"),dependsOn:[],writeScopes:csvOption(parsed.options["write-scopes"]),assuranceRiskSignals:taskAssuranceRiskSignalsOption(parsed.options["assurance-risk-signals"])});const createdArtifacts=new Map([[composition.tasks.path(task.id),composition.tasks.serialize(task)],[composition.changes.path(change.id),composition.changes.serialize(change)]]);let deliveryExecution;try{deliveryExecution=await composition.executions.createDeliveryIntake({id:parsed.options.execution??createId("EXEC",`delivery-${intent}`,{timeZone}),clientTurnId,origin:{type:"task",task_id:task.id},policy:executionPolicy})}catch(error51){await rollbackTaskChangeCreation(filesystem,createdArtifacts);throw error51}try{const plan=createTaskFirstPreparedPlan({task,executionId:deliveryExecution.id,preparedAt:new Date().toISOString(),policy:executionPolicy});await composition.tasks.setPreparedPlan(task.id,plan);await composition.materializer.execute(plan);await composition.executions.transition(deliveryExecution.id,"running");await composition.changes.transition(changeId,"executing");const activeTask=await lifecycle.startTask(task.id);const input={...commonInput(deliveryExecution.id,"delivery"),developerIdentity:rootDeveloperIdentity,shortName:metadata2.shortName,entrypoint:"task",taskId,changeId};await validateRunV2Attribution(input,composition);const writer=await composition.runs.start(input);const settledIntakes=await finishOpenThreadIntakes(openIntakes2,composition,filesystem,parsed,lifecycle);return{task:activeTask,run:writer.started,settled_intakes:settledIntakesForView(settledIntakes,parsed.options.view),task_path:composition.tasks.path(task.id),run_path:composition.runs.path(writer.started.run_id)}}catch(error51){const message=error51 instanceof Error?error51.message:String(error51);await composition.tasks.transition(taskId,"cancelled",{summary:`Conversation Run was not created: ${message}`,changed_files:[],evidence_ids:[],completed_run_id:null});await composition.changes.transition(changeId,"cancelled",`Conversation Run was not created: ${message}`);const currentExecution=(await composition.executions.read(deliveryExecution.id)).execution;if(currentExecution.status==="planned"||currentExecution.status==="running"){await composition.executions.transition(deliveryExecution.id,"cancelled",`Conversation Run was not created: ${message}`)}throw error51}}if(action==="finish"){requireOptions(parsed.options,["run","summary"]);const runId=parsed.options.run;const current=await composition.runs.read(runId);if(parsed.options.task!==void 0&&current.run.task_id!==parsed.options.task)throw new UsageError(`Run ${runId} is not attributed to Task ${parsed.options.task}`);if(parsed.flags.has("cancel-task"))throw new UsageError("--cancel-task cannot bypass Gui; finish the delivery Run after Gui finalization");const{runRunV2Command:runRunV2Command2}=await Promise.resolve().then(()=>(init_v2_run(),v2_run_exports));const result2=await runRunV2Command2("finish",{...parsed,positionals:["run","finish",runId]},composition,filesystem,lifecycle);const task=current.run.task_id===null?null:(await composition.tasks.read(current.run.task_id)).task;return{...result2,task,summary:parsed.options.summary,task_path:task===null?null:composition.tasks.path(task.id),run_path:composition.runs.path(runId)}}throw new UsageError(`Unknown Conversation action: ${action??""}`)}async function activeCanonicalTaskExecution(taskId,composition){const task=(await composition.tasks.read(taskId)).task;if(task.status==="draft"||task.status==="planned")return null;const executionId=task.plan_ref?.execution_id??task.prepared_plan?.execution_id??null;if(executionId===null)return null;const execution=(await composition.executions.read(executionId)).execution;const terminal=new Set(["completed","failed","cancelled"]);return!terminal.has(execution.status)&&execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id)?execution:null}async function resolveCanonicalMacroExecution(target,composition,explicitExecutionId){const scope=target.specId===void 0?target.prdId===void 0?null:{type:"prd",id:target.prdId}:target.prdId===void 0?{type:"spec",id:target.specId}:null;if(scope===null){throw new UsageError("Macro continuation requires exactly one of SPEC or PRD")}const entity=scope.type==="spec"?(await composition.specs.read(scope.id)).spec:(await composition.prds.read(scope.id)).prd;const executionIds=[entity.prepared_plan?.execution_id,entity.plan_ref?.execution_id].filter(id=>typeof id==="string");const distinctExecutionIds=[...new Set(executionIds)];if(distinctExecutionIds.length!==1){throw new UsageError(distinctExecutionIds.length===0?`${scope.type.toUpperCase()} ${scope.id} has no prepared Execution for continuation`:`${scope.type.toUpperCase()} ${scope.id} has ambiguous prepared Executions`)}const executionId=distinctExecutionIds[0];if(executionId===void 0){throw new UsageError(`Prepared Execution cannot be resolved for ${scope.type.toUpperCase()} ${scope.id}`)}const execution=(await composition.executions.read(executionId)).execution;if(explicitExecutionId!==void 0&&explicitExecutionId!==execution.id){throw new UsageError(`Explicit Execution ${explicitExecutionId} conflicts with prepared Execution ${execution.id}`)}const originMatches=scope.type==="spec"?execution.origin.type==="spec"&&execution.origin.spec_id===scope.id:execution.origin.type==="prd"&&execution.origin.prd_id===scope.id;if(execution.kind!=="delivery"||execution.plan_hash===null||execution.dag.nodes.length===0||!originMatches){throw new UsageError(`Prepared Execution ${execution.id} is incompatible with ${scope.type.toUpperCase()} ${scope.id}`)}if(!new Set(["planned","running","verifying"]).has(execution.status)){throw new UsageError(`Prepared Execution ${execution.id} cannot continue from status ${execution.status}`)}return execution}function conversationCapturePhase(intent,isActiveTaskContinuation=false){if(intent==="new_work"||intent==="continue"&&isActiveTaskContinuation)return"execution";return intent==="refine"||intent==="rework"?"planning":"conversation"}var init_run_conversation_v2=__esm({"src/run-conversation-v2.ts"(){"use strict";init_src();init_src5();init_attribution_v2();init_conversation_model_observation();init_cli_arguments();init_conversation_intake();init_conversation_intake_settlement();init_conversation_stop_intake();init_developer_identity_command();init_direct_authorization();init_git_delivery_preflight();init_prepared_plan_v22();init_release_cycle();init_task_assurance_options();init_task_change_creation();init_run_conversation_summary();init_conversation_intake_settlement()}});import{createHash as createHash43}from"node:crypto";function closureReceiptPath(runId){return`.local/lifecycle-closure/${createHash43("sha256").update(runId).digest("hex")}.json`}async function reconcilePendingAncestorStops(child,composition,lifecycle){let parentId=child.run.parent_run_id;const seen=new Set;while(parentId!==null&&!seen.has(parentId)){seen.add(parentId);const parent=await composition.runs.read(parentId);const path=closureReceiptPath(parentId);if(await composition.filesystem.exists(path)){const receipt=JSON.parse(await composition.filesystem.readText(path));if(receipt.schema_version===1&&receipt.run_id===parentId&&receipt.task_id===parent.run.task_id&&receipt.execution_id===parent.run.execution_id&&receipt.state==="pending"&&["completed","failed","cancelled"].includes(receipt.terminal_status))await reconcileOrchestratorStop(parent,composition,lifecycle,receipt.terminal_status)}parentId=parent.run.parent_run_id}}async function reconcileOrchestratorStop(current,composition,lifecycle,terminalStatus2="completed"){return composition.runs.withUsageAttributionLock(async()=>{const fresh=await composition.runs.read(current.run.run_id);const candidates=await composition.runs.list();if(candidates.some(candidate=>candidate.run.run_id!==fresh.run.run_id&&ownsLifecycleAttempt(candidate)&&candidate.run.task_id===fresh.run.task_id&&(fresh.run.task_id!==null||fresh.run.execution_id!==null&&candidate.run.execution_id===fresh.run.execution_id)&&Date.parse(candidate.run.occurred_at)>Date.parse(fresh.run.occurred_at)))return{status:"pending_newer_attempt",parent_run_id:fresh.run.run_id};const receiptPath=closureReceiptPath(fresh.run.run_id);const receipt={schema_version:1,run_id:fresh.run.run_id,task_id:fresh.run.task_id,execution_id:fresh.run.execution_id,terminal_status:fresh.finished?.status??terminalStatus2,state:"pending",recovery:"Replay the exact observed subagent stop; never reconcile unrelated open work"};await composition.filesystem.writeTextAtomic(receiptPath,`${JSON.stringify(receipt)}
 `);const active=activeDescendantRuns(fresh.run.run_id,candidates);if(active.length>0){return{status:"pending_descendants",parent_run_id:fresh.run.run_id,active_run_ids:active.map(candidate=>candidate.run.run_id)}}const settle=async(finished,all)=>{const result2=await reconcileTerminalOrchestratorRoot(finished,all,composition,lifecycle);await composition.filesystem.writeTextAtomic(receiptPath,`${JSON.stringify({...receipt,state:"reconciled"})}
@@ -2822,7 +2821,7 @@ ${attempt.run.run_id}`).digest("hex")}});for(const delegation of delegations){co
 `);await store.update(id,ledger.preset,ledger.legacy_attempts,current=>{if(JSON.stringify(current)!==JSON.stringify(ledger))throw new UsageError("Recovery ledger changed before repair");return next});await composition.tasks.write(repaired);return{task:repaired,repair_path:path,recovery_attempt_id:attemptId,reused:false}}async function settleVerificationRepair(parsed,composition){requireOptions(parsed.options,["run","validation","commit","repair","rerun-of"]);const id=parsed.positionals[2];if(!id)throw new UsageError("task settle-repair requires a Task id");const{task}=await composition.tasks.read(id);const root=await composition.runs.read(parsed.options.run);if(root.status!=="running"||root.finalization_decision!=null||root.run.task_id!==id||root.run.agent!=="agent-orchestrator"||root.run.change_id!==task.change_id)throw new UsageError("Settlement requires this Task's active delivery orchestrator before Gui");if(["codex","codex-desktop"].includes(root.run.client)){const observed=await resolveRunClientInvocation(composition.filesystem,root.run.client);if(!observed.clientThreadId||!observed.clientTurnId||observed.clientThreadId!==root.run.client_thread_id||observed.clientTurnId!==root.run.client_turn_id)throw new UsageError("Settlement requires the exact observed Codex thread/turn correlation")}if(!/^[a-f0-9]{24}$/.test(parsed.options.repair)||!/^(?:TEST|CHECK|INT|EVAL|MUT|E2E|REVIEW)-[A-Z0-9-]+$/.test(parsed.options.validation))throw new UsageError("Invalid repair or validation identity");const fs=composition.filesystem;const directory2=composition.changes.path(task.change_id).replace(/\/change\.md$/,"");const receipt=JSON.parse(await fs.readText(`${directory2}/artifacts/rework/verification-${parsed.options.repair}.json`));const validation=parseMarkdown(await fs.readText(`${directory2}/artifacts/tests/${parsed.options.validation}.md`),validationArtifactV2Schema).metadata;if(parsed.options["rerun-of"]!==receipt.validation_id||!/^(?:TEST|CHECK|INT|EVAL|MUT|E2E|REVIEW)-[A-Z0-9-]+$/.test(receipt.validation_id))throw new UsageError("Settlement must identify the exact failed gate being rerun");const failedGate=parseMarkdown(await fs.readText(`${directory2}/artifacts/tests/${receipt.validation_id}.md`),validationArtifactV2Schema).metadata;const runs=await composition.runs.list();assertChildRunMayStart(root,"execution","agent-task-executor",runs,["delivery"]);const owners2=new Set([root.run.run_id,...descendantRuns(root.run.run_id,runs).map(r=>r.run.run_id)]);if(receipt.task_id!==id||receipt.run_id!==root.run.run_id||receipt.execution_id!==root.run.execution_id||!Number.isSafeInteger(receipt.next_revision)||task.revision<receipt.next_revision||!["executing","verifying"].includes(task.status)||validation.task_id!==id||validation.change_id!==task.change_id||validation.execution_id!==root.run.execution_id||!owners2.has(validation.run_id)||validation.commit_sha!==parsed.options.commit||validation.kind!==failedGate.kind||validation.command!==failedGate.command||!failedGate.acceptance_ids.every(ac=>validation.acceptance_ids.includes(ac))||!validation.acceptance_ids.every(ac=>task.acceptance_ids.includes(ac))||validation.status==="not_applicable"||Date.parse(validation.executed_at)<Date.parse(receipt.occurred_at)||activeDescendantRuns(root.run.run_id,runs).length)throw new UsageError("Settlement requires an observed post-repair validation of this Task and candidate");const store=new FileRecoveryLedger(fs);const ledger=await store.read(id);if(!ledger)throw new UsageError("Missing recovery ledger");const settled=await store.update(id,ledger.preset,ledger.legacy_attempts,current=>settleRecovery(current,receipt.recovery_attempt_id,validation.status==="passed"?"completed":"failed",validation.id));return{task,repair_path:`${directory2}/artifacts/rework/verification-${parsed.options.repair}.json`,progress:recoveryProgress(settled)}}var init_task_verification_repair=__esm({"src/task-verification-repair.ts"(){"use strict";init_src();init_src6();init_src7();init_cli_arguments();init_run_client_invocation();init_run_finalization_barrier();init_run_hierarchy()}});import{execFile as execFile19}from"node:child_process";import{createHash as createHash53}from"node:crypto";import{constants as constants2}from"node:fs";import{copyFile,lstat as lstat12,mkdir as mkdir8,mkdtemp as mkdtemp3,readFile as readFile10,realpath as realpath13,rm as rm8}from"node:fs/promises";import{dirname as dirname13,isAbsolute as isAbsolute12,join as join7,relative as relative13,resolve as resolve18,sep as sep6}from"node:path";import{promisify as promisify19}from"node:util";async function maybeCloseTerminalTaskWorkspace(filesystem,composition,runId,result2){if(!runId)return result2;const folded=await composition.runs.read(runId);const taskId=folded.run.task_id;if(folded.finished===null||folded.run.parent_run_id!==null||!taskId||!await filesystem.exists(`.local/task-workspaces/claims/${taskId}.json`))return result2;const cleanup=await closeTaskWorkspace(filesystem,composition,taskId,runId);return{...result2,workspace_cleanup:cleanup}}async function closeTaskWorkspace(filesystem,composition,taskId,runId,operations={}){if(!/^TASK-[A-Z0-9-]+$/.test(taskId)||!/^RUN-[A-Z0-9-]+$/.test(runId))throw new UsageError("Closing a Task workspace requires exact Task and Run ids");return withLifecycleCanonicalMutationLock(filesystem,async()=>{const root=resolve18(filesystem.root);const primary=resolve18(await git4(root,["rev-parse","--show-toplevel"]));const common=resolve18(await git4(root,["rev-parse","--path-format=absolute","--git-common-dir"]));if(root!==primary||common!==resolve18(root,".git"))throw new UsageError("Close the Task workspace from its primary Git checkout");const{task}=await composition.tasks.read(taskId);const{run,finished}=await composition.runs.read(runId);if(!["completed","failed","blocked","cancelled"].includes(task.status)||finished===null||run.task_id!==taskId||!run.execution_id||activeDescendantRuns(runId,await composition.runs.list()).length)throw new UsageError("Workspace closure requires a terminal exact Task Run with no active descendants");const claim=await readReadyTaskWorkspaceClaim(filesystem,taskId,run.execution_id,runId);if(!claim?.path||!claim.branch||claim.mode==="shared")throw new UsageError("No isolated Task workspace is ready to close");const expected=new GitAutonomousWorktreePort(root,".local/task-workspaces/trees").describeTaskWorkspace(run.execution_id,taskId);if(resolve18(claim.path)!==resolve18(expected.path)||claim.branch!==expected.branch)throw new UsageError("Isolated workspace claim differs from the registered Task front");const branchTip=await git4(root,["rev-parse",claim.branch]);const worktreeTip=await git4(claim.path,["rev-parse","HEAD"]);if(branchTip!==worktreeTip)throw new UsageError("Task branch moved away from its workspace");if(task.status==="completed"){const merged=await git4(root,["merge-base","--is-ancestor",branchTip,"HEAD"]).then(()=>true,()=>false);if(!merged)throw new UsageError("Completed Task branch must be integrated before closure")}const ignored=(await git4(claim.path,["ls-files","-o","-i","--exclude-standard","-z"])).split("\0").filter(Boolean).sort();const unknownIgnored=ignored.filter(path=>!discardableIgnored(path));if(unknownIgnored.length)throw new UsageError("Workspace has ignored files outside known disposable caches; inspect them before archival cleanup");const branchRelative=`.local/backup-branchs/${taskId}/${runId}.bundle`;const worktreeRelative=`.local/backup-worktrees/${taskId}/${runId}`;const bundle=resolve18(root,branchRelative);const backup=resolve18(root,worktreeRelative);assertChild(resolve18(root,".local/backup-branchs"),bundle);assertChild(resolve18(root,".local/backup-worktrees"),backup);const receiptPath=`${worktreeRelative}/manifest.json`;if(await filesystem.exists(receiptPath))throw new UsageError("Existing backup receipt requires manual inspection before retry");if(await filesystem.exists(branchRelative)||await filesystem.exists(worktreeRelative))throw new UsageError("Partial Task backup already exists; inspect it before retry");await mkdir8(dirname13(bundle),{recursive:true});await mkdir8(join7(backup,"files"),{recursive:true});for(const directory2 of[dirname13(bundle),backup,join7(backup,"files")]){const info=await lstat12(directory2);if(!info.isDirectory()||info.isSymbolicLink()||resolve18(await realpath13(directory2))!==directory2)throw new UsageError("Task backup directory is not a verified physical directory")}await git4(root,["bundle","create",bundle,claim.branch]);await git4(root,["bundle","verify",bundle]);const bundleSha=digest6(await readFile10(bundle));const entries=(await git4(claim.path,["ls-files","-c","-o","--exclude-standard","-z"])).split("\0").filter(Boolean).sort();const files=[];for(const path of entries){const source=resolve18(claim.path,path);const target=resolve18(backup,"files",path);assertChild(claim.path,source);assertChild(resolve18(backup,"files"),target);const info=await lstat12(source);if(!info.isFile()||info.isSymbolicLink()||info.nlink!==1)throw new UsageError(`Workspace snapshot contains an unsafe file: ${path}`);await mkdir8(dirname13(target),{recursive:true});if(resolve18(await realpath13(dirname13(target)))!==dirname13(target))throw new UsageError("Task backup destination traverses a link");await copyFile(source,target,constants2.COPYFILE_EXCL);const sha2566=digest6(await readFile10(source));if(digest6(await readFile10(target))!==sha2566)throw new UsageError(`Workspace snapshot verification failed: ${path}`);files.push({path:path.replaceAll("\\","/"),sha256:sha2566})}const receipt={schema_version:1,task_id:taskId,execution_id:run.execution_id,run_id:runId,branch:claim.branch,branch_tip:branchTip,bundle_sha256:bundleSha,source_status:await git4(claim.path,["status","--porcelain","-z"]),discarded_ignored:ignored.map(path=>path.replaceAll("\\","/")),files};const probeParent=resolve18(root,".local/backup-worktrees");const probe=await mkdtemp3(join7(probeParent,"restore-probe-"));assertChild(probeParent,probe);try{await git4(root,["clone","--quiet","--no-checkout",branchRelative,relative13(root,probe)]);await git4(probe,["cat-file","-e",`${branchTip}^{commit}`]);for(const entry2 of files){if(digest6(await readFile10(resolve18(backup,"files",entry2.path)))!==entry2.sha256)throw new UsageError(`Workspace restore probe failed: ${entry2.path}`)}}finally{await rm8(probe,{recursive:true,force:true})}await filesystem.writeTextAtomicExclusive(receiptPath,`${JSON.stringify(receipt,null,2)}
 `);await operations.beforeRemove?.();const currentTask=(await composition.tasks.read(taskId)).task;const currentRun=await composition.runs.read(runId);if(currentTask.status!==task.status||currentRun.finished===null||currentRun.run.task_id!==taskId||currentRun.run.execution_id!==run.execution_id||activeDescendantRuns(runId,await composition.runs.list()).length)throw new UsageError("Task ownership or terminal state changed after backup");const currentClaim=await readReadyTaskWorkspaceClaim(filesystem,taskId,run.execution_id,runId);if(JSON.stringify(currentClaim)!==JSON.stringify(claim))throw new UsageError("Task workspace ownership changed after backup");const claimedPath=claim.path;const registered=await git4(root,["worktree","list","--porcelain"]);if(!registered.split(/\r?\n\r?\n/).some(block2=>{const lines2=block2.split(/\r?\n/);return lines2.some(line=>line.startsWith("worktree ")&&resolve18(line.slice(9))===resolve18(claimedPath))&&lines2.includes(`branch refs/heads/${claim.branch}`)&&lines2.includes(`HEAD ${branchTip}`)})||await git4(claim.path,["branch","--show-current"])!==claim.branch||await git4(claim.path,["rev-parse","HEAD"])!==branchTip||await git4(root,["rev-parse",claim.branch])!==branchTip||digest6(await readFile10(bundle))!==bundleSha)throw new UsageError("Task branch, worktree or bundle changed after backup");const currentEntries=(await git4(claim.path,["ls-files","-c","-o","--exclude-standard","-z"])).split("\0").filter(Boolean).sort();const currentIgnored=(await git4(claim.path,["ls-files","-o","-i","--exclude-standard","-z"])).split("\0").filter(Boolean).sort();const currentStatus=await git4(claim.path,["status","--porcelain","-z"]);if(JSON.stringify(currentEntries)!==JSON.stringify(entries)||JSON.stringify(currentIgnored)!==JSON.stringify(ignored)||currentStatus!==receipt.source_status)throw new UsageError("Task worktree contents changed after backup");for(const entry2 of files){const source=resolve18(claim.path,entry2.path);const info=await lstat12(source);if(!info.isFile()||info.isSymbolicLink()||info.nlink!==1||digest6(await readFile10(source))!==entry2.sha256||digest6(await readFile10(resolve18(backup,"files",entry2.path)))!==entry2.sha256)throw new UsageError(`Task snapshot changed after backup: ${entry2.path}`)}await git4(root,["worktree","remove",...currentStatus||ignored.length?["--force"]:[],claim.path]);await git4(root,["branch",task.status==="completed"?"-d":"-D",claim.branch]);await filesystem.writeTextAtomic(`.local/task-workspaces/closed/${taskId}.json`,`${JSON.stringify({...receipt,backup_branch:branchRelative,backup_worktree:worktreeRelative})}
 `);await filesystem.removeFileIfContentMatches(`.local/task-workspaces/claims/${taskId}.json`,`${JSON.stringify(claim,null,2)}
-`);return{status:"closed",backup_branch:branchRelative,backup_worktree:worktreeRelative}})}function discardableIgnored(path){const parts=path.replaceAll("\\","/").split("/");if(parts.some(part=>part===".."||part===""))return false;return parts.some(part=>["node_modules",".turbo",".cache","coverage","dist","build",".vite",".next"].includes(part))||parts.at(-1)?.endsWith(".tsbuildinfo")===true}function assertChild(root,path){const scoped=relative13(root,path);if(!scoped||scoped===".."||scoped.startsWith(`..${sep6}`)||isAbsolute12(scoped))throw new UsageError("Backup path escapes its dedicated local directory")}function digest6(content){return createHash53("sha256").update(content).digest("hex")}async function git4(cwd,args){return(await exec7("git",args,{cwd,shell:false,windowsHide:true,encoding:"utf8",maxBuffer:64*1024*1024,timeout:3e5,env:Object.fromEntries(Object.entries(process.env).filter(([key])=>!/^(GIT_|NODE_OPTIONS$)/i.test(key)))})).stdout.trim()}var exec7;var init_task_workspace_closure=__esm({"src/task-workspace-closure.ts"(){"use strict";init_cli_arguments();init_git_autonomous_worktree();init_lifecycle_manifest_commands();init_run_hierarchy();init_task_workspace_command();exec7=promisify19(execFile19)}});function runTaskWorkspaceAction(parsed,filesystem,composition){if(!parsed.flags.has("close"))return runTaskWorkspaceCommand(parsed,filesystem,composition);return closeTaskWorkspace(filesystem,composition,parsed.positionals[2]??parsed.options.task??"",parsed.options.run??"")}var init_task_workspace_routing=__esm({"src/task-workspace-routing.ts"(){"use strict";init_task_workspace_closure();init_task_workspace_command()}});async function assertActiveDefinitionRun(input){const{area,runId,filesystem,composition}=input;const catalog=await loadAgentCatalog(filesystem);const expected=selectAgent(catalog,{role:area==="prd"?"analyst":"builder",capability:area==="prd"?"prd-creation":"spec-creation"}).agent;if(runId===null){throw new UsageError(`${area.toUpperCase()} definition requires an observed --run or exact-turn Run`)}const observed=await composition.runs.read(runId);const parent=observed.run.parent_run_id===null?null:await composition.runs.read(observed.run.parent_run_id);const invocation2=await resolveRunClientInvocation(filesystem,"codex");const isStandaloneAuthoring=parent===null;const reworkAuthoring=input.reworkAuthoring===true||input.reworkSuccessorPrdId!==void 0;const authorizationRun=parent?.run??observed.run;const definitionAuthorized=authorizationRun.intake?.reason_codes.includes(`definition-${area}-authorized`)??false;if(!reworkAuthoring&&!definitionAuthorized){throw new UsageError(`${area.toUpperCase()} definition requires root intake authorization --definition ${area}`)}if(!reworkAuthoring&&authorizationRun.execution_kind!=="interaction"){throw new UsageError(`${area.toUpperCase()} definition requires a root interaction, not a delivery execution`)}if(!reworkAuthoring&&(authorizationRun.intake?.intent!=="conversation"||authorizationRun.intake.classification_source!=="explicit")){throw new UsageError(`${area.toUpperCase()} definition requires an explicit conversation root intake`)}const expectedAgent=reworkAuthoring&&area==="prd"?[expected.id,"agent-builder"]:[expected.id];const currentInvocationMatches=invocation2.clientThreadId!==null&&invocation2.clientTurnId!==null&&[observed.run,...parent===null?[]:[parent.run]].some(run=>run.client_thread_id===invocation2.clientThreadId&&run.client_turn_id===invocation2.clientTurnId);if(!expectedAgent.includes(observed.run.agent)||observed.run.agent===expected.id&&observed.run.agent_name!==expected.codex_name||observed.run.agent==="agent-builder"&&observed.run.agent_name!=="zaip-agent-builder"||observed.status!=="running"||observed.run.client!=="codex-subagent"||reworkAuthoring&&observed.run.work_type!=="rework"||input.reworkSuccessorPrdId!==void 0&&observed.run.prd_id!==input.reworkSuccessorPrdId||!isStandaloneAuthoring&&(observed.run.invocation_kind!=="delegated"||observed.run.run_purpose!=="execution")||!isStandaloneAuthoring&&(parent.status!=="running"||parent.run.parent_run_id!==null||parent.run.invocation_kind!=="orchestrator"||parent.run.agent!=="agent-orchestrator"||parent.run.agent_name!=="zaip-agent-orchestrator"||parent.run.execution_id!==observed.run.execution_id||parent.run.conversation_id!==observed.run.conversation_id||!currentInvocationMatches)){throw new UsageError(`${area.toUpperCase()} definition requires an active delegated ${expected.codex_name} Run linked to the root orchestration`)}return observed.run.run_id}var init_definition_run_gate=__esm({"src/commands/definition-run-gate.ts"(){"use strict";init_src();init_cli_arguments();init_run_agent_identity();init_run_client_invocation()}});async function retargetOwnerSpecRelease(filesystem,composition,input){const cycle=await readReleaseCycle(filesystem);if(cycle?.state!=="open"||cycle.current_release!==input.to)throw new UsageError("SPEC retarget requires the adopted open release cycle");const raw=JSON.parse(await filesystem.readText(".agents/config/release-cycle.json"));const adoption=raw.history?.at(-1);if(adoption?.mode!=="published-legacy-adoption"||adoption.from!==input.from||adoption.to!==input.to||adoption.owner_spec_id!==input.specId||adoption.actor_run_id!==input.actorRunId||!/^[a-f0-9]{40}$/i.test(adoption.main_sha??"")||!Number.isFinite(Date.parse(adoption.adopted_at??"")))throw new UsageError("SPEC retarget does not match the canonical adoption record");const{spec}=await composition.specs.read(input.specId);const{execution}=await composition.executions.read(adoption.owner_execution_id);const{task:releaseTask}=await composition.tasks.read(adoption.release_task_id);const actor=await composition.runs.read(input.actorRunId);const macro=await composition.runs.read(adoption.owner_run_id);const actorTaskId=actor.run.task_id;if(spec.status!=="active"||spec.target_release!==input.from||spec.plan_ref?.execution_id!==execution.id||spec.plan_ref?.hash!==execution.plan_hash||execution.status!=="running"||execution.origin.type!=="spec"||execution.origin.spec_id!==spec.id||!execution.dag.nodes.some(node=>node.task_id===actorTaskId)||!execution.dag.nodes.some(node=>node.task_id===releaseTask.id)||releaseTask.status!=="planned"||actor.status!=="running"||actor.run.entrypoint!=="task"||actor.run.agent!=="agent-orchestrator"||actor.run.run_role!=="subagent"||actor.run.parent_run_id!==macro.run.run_id||actor.run.spec_id!==spec.id||actor.run.execution_id!==execution.id||macro.status!=="running"||macro.run.entrypoint!=="spec"||macro.run.agent!=="agent-orchestrator"||macro.run.parent_run_id!==null||macro.run.spec_id!==spec.id||macro.run.execution_id!==execution.id)throw new UsageError("SPEC retarget actor, macro Run and DAG lineage do not match");const specAfter=await composition.specs.retargetPublishedRelease(spec.id,{from:input.from,to:input.to,adoptionMainSha:adoption.main_sha,actorRunId:input.actorRunId,adoptedAt:adoption.adopted_at});return{spec:specAfter,artifact_path:composition.specs.path(spec.id)}}var init_spec_release_retarget=__esm({"src/spec-release-retarget.ts"(){"use strict";init_cli_arguments();init_release_cycle()}});import{createHash as createHash54,randomBytes as randomBytes2}from"node:crypto";function lifecycleActionAlias(area,action){if(action===void 0)return action;const normalized=action.normalize("NFKD").replace(/[\u0300-\u036f]/g,"").toLocaleLowerCase();if(area==="prd"||area==="spec"){if(["pronto","pronto-para-executar","ready-to-execute"].includes(normalized))return"ready";if(["finalizar","finalize","concluir","conclude"].includes(normalized))return"finalize"}return normalized}function resolveMacroFinalizeAction(status){if(status==="draft"||status==="ready")return"ready";if(status==="active"||status==="verifying")return"continue";return null}function maxCostUsdOption(value){if(value===void 0)return null;const parsed=Number(value);if(!Number.isFinite(parsed)||parsed<0){throw new UsageError("--max-cost-usd must be a non-negative number")}return parsed}async function finalizeMacro(area,parsed,composition,makeReady){const id=requiredEntityId(parsed,2,`${area.toUpperCase()} id`);const entity=area==="prd"?(await composition.prds.read(id)).prd:(await composition.specs.read(id)).spec;const resolution=resolveMacroFinalizeAction(entity.status);if(resolution==="ready")return makeReady();if(resolution==="continue"){return{[area]:entity,next_action:"continue",message:`${area.toUpperCase()} ${id} remains active; finish its Tasks and parent gates before deliver`}}throw new UsageError(`${area.toUpperCase()} ${id} cannot finalize from status ${entity.status}`)}async function createPrdWithOptionalPlan(input){const{parsed,filesystem,composition,creationRunId}=input;requireOptions(parsed.options,["title","short-name","problem"]);const plan=parsed.options.plan===void 0?null:await readPreparedPlan(filesystem,parsed);if(plan!==null&&plan.blueprints.specs===void 0){throw new UsageError("Composite PRD creation requires technical SPEC blueprints; create canonical SPECs first, then use prd prepare for legacy plans")}if(plan!==null&&parsed.options.id===void 0){throw new UsageError("Composite PRD creation requires --id matching the PreparedPlan source")}if(plan!==null&&(plan.source.type!=="prd"||plan.source.prd_id!==parsed.options.id)){throw new UsageError(`Composite PRD plan must have source prd ${parsed.options.id}`)}const specIds=plan===null?[]:specIdsForPrdPlanV2(plan,parsed.options.id);const specCreationRunId=plan===null?null:await assertActiveDefinitionRun({area:"spec",runId:parsed.options["spec-run"]??null,filesystem,composition});if(plan!==null){await assertPreparedPlanReferences(filesystem,plan);await Promise.all((plan.blueprints.specs??[]).map(blueprint=>assertSpecImplementationMatchesProject(blueprint.implementation,filesystem,composition.layout)));const occupied=await Promise.all([filesystem.exists(composition.prds.path(parsed.options.id)),...specIds.map(id=>filesystem.exists(composition.specs.path(id)))]);if(occupied.some(Boolean)){throw new UsageError("Composite PRD creation requires unused PRD and SPEC artifact ids")}}const prd=await composition.prds.create({...parsed.options.id===void 0?{}:{id:parsed.options.id},title:parsed.options.title,targetRelease:await releaseTargetForDraft(filesystem,parsed.options["target-release"]),shortName:parsed.options["short-name"],problem:parsed.options.problem,audiences:csvOption(parsed.options.audiences),outcomes:csvOption(parsed.options.outcomes),constraints:csvOption(parsed.options.constraints),nonGoals:csvOption(parsed.options["non-goals"]),creationRunId});if(plan===null)return{prd,artifact_path:composition.prds.path(prd.id)};const createdFiles=new Map([[composition.prds.path(prd.id),await filesystem.readText(composition.prds.path(prd.id))]]);const specBlueprints=new Map((plan.blueprints.specs??[]).map(blueprint=>[blueprint.id,blueprint]));try{const specs=[];for(const specId of specIds){const blueprint=specBlueprints.get(specId);if(blueprint===void 0){throw new UsageError(`Composite PRD plan lacks technical SPEC blueprint ${specId}`)}const spec=await composition.specs.create({id:specId,prdId:prd.id,title:blueprint.title,targetRelease:prd.target_release,shortName:blueprint.short_name,objective:blueprint.objective,includedScope:blueprint.included_scope,excludedScope:blueprint.excluded_scope,requirementIds:blueprint.requirement_ids,acceptanceIds:blueprint.acceptance_ids,implementation:blueprint.implementation,creationRunId:specCreationRunId});specs.push(spec);const path=composition.specs.path(spec.id);createdFiles.set(path,await filesystem.readText(path))}const prepared=await composition.prds.setPreparedPlan(prd.id,plan);return{prd:prepared,specs,artifact_path:composition.prds.path(prepared.id),plan_hash:plan.hash,spec_blueprints:plan.blueprints.specs,materialized:false}}catch(error51){const recovered=await rollbackCompositeCreation(filesystem,createdFiles);if(recovered.length>0){throw new AggregateError([error51],`Composite PRD creation rolled back; concurrent edits were preserved at ${recovered.join(", ")}`)}throw error51}}async function createPrdRework(input){const{parsed,composition,creationRunId}=input;requireOptions(parsed.options,["title","short-name","problem"]);const sourceId=requiredPosition(parsed.positionals,2,"Cancelled PRD id");const prd=await composition.prds.createReworkSuccessor(sourceId,{...parsed.options.id===void 0?{}:{id:parsed.options.id},title:parsed.options.title,...parsed.options["target-release"]===void 0?{}:{targetRelease:parsed.options["target-release"]},shortName:parsed.options["short-name"],problem:parsed.options.problem,audiences:csvOption(parsed.options.audiences),outcomes:csvOption(parsed.options.outcomes),constraints:csvOption(parsed.options.constraints),nonGoals:csvOption(parsed.options["non-goals"]),creationRunId});return{prd,artifact_path:composition.prds.path(prd.id),rework_of_prd_id:sourceId}}async function createSpecWithOptionalPlan(input){const{parsed,filesystem,composition,creationRunId}=input;requireOptions(parsed.options,["title","short-name","objective"]);const plan=parsed.options.plan===void 0?null:await readPreparedPlan(filesystem,parsed);if(plan!==null&&parsed.options.id===void 0){throw new UsageError("Composite SPEC creation requires --id matching the PreparedPlan source")}if(plan!==null&&(plan.source.type!=="spec"||plan.source.spec_id!==parsed.options.id)){throw new UsageError(`Composite SPEC plan must have source spec ${parsed.options.id}`)}const sourceSpecId=plan?.source.type==="spec"?plan.source.spec_id:null;const blueprint=plan===null||sourceSpecId===null?null:(plan.blueprints.specs??[]).find(candidate=>candidate.id===sourceSpecId);if(plan!==null){if(blueprint===void 0||blueprint===null){throw new UsageError(`Composite SPEC plan lacks technical SPEC blueprint ${sourceSpecId}`)}await assertPreparedPlanReferences(filesystem,plan);await assertSpecImplementationMatchesProject(blueprint.implementation,filesystem,composition.layout);if(await filesystem.exists(composition.specs.path(parsed.options.id))){throw new UsageError("Composite SPEC creation requires an unused SPEC artifact id")}}const parentRelease=parsed.options.prd===void 0?null:(await composition.prds.read(parsed.options.prd)).prd.target_release;const requestedRelease=parsed.options["target-release"]??parentRelease??void 0;if(parentRelease!==null&&parsed.options["target-release"]!==void 0&&parsed.options["target-release"]!==parentRelease)throw new UsageError("SPEC target release must match its parent PRD");const spec=await composition.specs.create({...parsed.options.id===void 0?{}:{id:parsed.options.id},...parsed.options.prd===void 0?{}:{prdId:parsed.options.prd},title:blueprint?.title??parsed.options.title,targetRelease:await releaseTargetForDraft(filesystem,requestedRelease),shortName:blueprint?.short_name??parsed.options["short-name"],objective:blueprint?.objective??parsed.options.objective,includedScope:blueprint?.included_scope??csvOption(parsed.options.scope),excludedScope:blueprint?.excluded_scope??csvOption(parsed.options["out-of-scope"]),requirementIds:blueprint?.requirement_ids??csvOption(parsed.options.requirements),acceptanceIds:blueprint?.acceptance_ids??csvOption(parsed.options.acceptance),...blueprint===null||blueprint===void 0?{}:{implementation:blueprint.implementation},creationRunId});if(plan===null)return{spec,artifact_path:composition.specs.path(spec.id)};const path=composition.specs.path(spec.id);const original=await filesystem.readText(path);try{const prepared=await composition.specs.setPreparedPlan(spec.id,plan);return{spec:prepared,artifact_path:composition.specs.path(prepared.id),plan_hash:plan.hash,materialized:false}}catch(error51){const recovered=await rollbackCompositeCreation(filesystem,new Map([[path,original]]));if(recovered.length>0){throw new AggregateError([error51],`Composite SPEC creation rolled back; concurrent edits were preserved at ${recovered.join(", ")}`)}throw error51}}async function rollbackCompositeCreation(filesystem,createdFiles){const recovered=[];for(const[path,original]of createdFiles){if(!await filesystem.exists(path))continue;const digest7=createHash54("sha256").update(`${path}\0${randomBytes2(16).toString("hex")}`).digest("hex").slice(0,24);const recoveryPath=`.local/recovery/composite-create/${digest7}.md`;await filesystem.moveFileAtomic(path,recoveryPath);if(await filesystem.readText(recoveryPath)===original){await filesystem.removeFile(recoveryPath)}else recovered.push(recoveryPath)}return recovered}var init_v2_lifecycle_support=__esm({"src/commands/v2-lifecycle-support.ts"(){"use strict";init_src6();init_cli_arguments();init_prepared_plan_v22();init_release_cycle();init_definition_run_gate()}});function taskFirstCommandPlan(task,parsed,executionId,timeZone){return createTaskFirstPreparedPlan({task,modelSignals:taskModelSignalsOption(parsed.options["model-signals"]),executionId:executionId??createId("RUN",task.short_name,{timeZone}).replace(/^RUN-/,"EXEC-"),preparedAt:new Date().toISOString(),policy:defaultExecutionPolicy(task.risk,{independent_branches:parsed.flags.has("independent-branches"),max_cost_usd:maxCostUsdOption(parsed.options["max-cost-usd"])}),...parsed.options["requirement-impact"]===void 0?{}:{requirementImpactReason:parsed.options["requirement-impact"]}})}var init_task_first_command_plan=__esm({"src/task-first-command-plan.ts"(){"use strict";init_src();init_v2_lifecycle_support();init_prepared_plan_v22();init_run_budget()}});async function runTaskStartCommand(id,mode,composition,lifecycle){const snapshot=await lifecycle.startTaskWithSnapshot(id,mode);return{...snapshot,artifact_path:composition.tasks.path(id)}}var init_task_start_command=__esm({"src/task-start-command.ts"(){"use strict"}});function macroExecutionContinuation(executionId){return{required:true,execution_id:executionId,implementation_started:false,user_confirmation_required:false,instruction:"Continue execution now using the configured runtime or native DAG orchestration. Materialization and activation do not implement the product. Do not end the turn or ask the user to continue after preparation; run eligible Tasks and then parental verification and finalization. Recover from eligible failures automatically under the frozen Task autonomy profile and ledger, without resetting counters or requesting renewed permission. Wait for active work instead of ending the flow. Stop only for a real blocker, human cancellation, or a terminal failure after permitted recovery; preserve scope, authority and the DAG failure policy."}}var init_macro_execution_continuation=__esm({"src/macro-execution-continuation.ts"(){"use strict"}});async function resolveTaskFirstExecutionId(explicitExecutionId,taskId,listExecutions){if(explicitExecutionId!==void 0)return explicitExecutionId;const deliveryIntake=(await listExecutions()).find(execution=>execution.kind==="delivery"&&execution.plan_hash===null&&execution.origin.type==="task"&&execution.origin.task_id===taskId);return deliveryIntake?.id}function assertTaskFirstExecutable(status,kind,id){if(status==="planned"||status==="executing"||status==="running")return;const guidance=status==="blocked"?"resume the Task before starting a new orchestrator agent call":status==="failed"?"rework the Task before starting a new orchestrator agent call":"terminal work is immutable";throw new UsageError(`${kind} ${id} cannot execute from status ${status}; ${guidance}`)}async function existingTaskFirstMaterialization(plan,composition){if(plan.source.type!=="task")return null;const existing=await Promise.all([composition.tasks.read(plan.source.task_id).catch(()=>null),composition.executions.read(plan.execution_id).catch(()=>null)]);const task=existing[0]?.task;const execution=existing[1]?.execution;if(task===void 0||execution===void 0||task.plan_hash!==plan.hash||execution.plan_hash!==plan.hash||!execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id)){return null}const change=await composition.changes.read(task.change_id).catch(()=>null);if(change===null||change.change.plan_hash!==plan.hash)return null;const reusedPaths=[composition.executions.path(execution.id),composition.changes.path(change.change.id),composition.tasks.path(task.id)];return{execution,changes:[change.change],tasks:[task],created_paths:[],reused_paths:reusedPaths}}async function ensureTaskOrchestratorRun(task,changeId,executionId,parsed,filesystem,composition){const runs=await composition.runs.list();const existing=runs.filter(candidate=>candidate.finished===null&&effectiveRunV2Role(candidate.run)==="orchestrator"&&candidate.run.parent_run_id===null&&candidate.run.task_id===task.id&&candidate.run.execution_id===executionId).sort((left,right)=>right.run.occurred_at.localeCompare(left.run.occurred_at))[0];if(existing!==void 0)return existing.run;const invocation2=await resolveRunClientInvocation(filesystem,"codex");const intake2=await findIntakeForExactTurn(composition,"codex",invocation2);if(invocation2.clientTurnId!==null){await composition.executions.claimClientTurn(executionId,invocation2.clientTurnId)}const source=intake2?.run;const developerIdentity=await resolveDeveloperIdentityForRoot(filesystem);const writer=await composition.runs.start({...parsed.options.run===void 0?{}:{id:parsed.options.run},shortName:task.short_name,phase:"execution",runRole:"orchestrator",runPurpose:"orchestration",requiresFinalizer:true,executionKind:"delivery",executionEligibility:[],entrypoint:"task",workType:source?.work_type??"new",client:"codex",agent:"agent-orchestrator",agentName:"zaip-agent-orchestrator",provider:source?.provider??null,model:parsed.options.model??source?.model??"unknown",reasoningEffort:source?.reasoning_effort??null,...invocation2,conversationId:source?.conversation_id??createConversationId(task.short_name),executionId,taskId:task.id,changeId,developerIdentity});return writer.started}async function ensureTaskDraftChange(composition,task){const existing=await composition.changes.read(task.change_id).catch(()=>null);if(existing!==null)return existing.change;return composition.changes.createDraft({id:task.change_id,title:task.title,risk:task.risk,taskId:task.id,requirementIds:task.requirement_ids,acceptanceIds:task.acceptance_ids})}function plannedChangeFromBlueprint(blueprint,plan,taskId){return{schema_version:2,id:blueprint.id,revision:1,title:blueprint.title,status:"planned",risk:blueprint.risk,source:blueprint.source,requirement_ids:[...blueprint.requirement_ids],acceptance_ids:[...blueprint.acceptance_ids],requirement_impact:blueprint.requirement_impact,task_ids:[taskId],plan_revision:plan.revision,plan_hash:plan.hash,created_at:plan.prepared_at,updated_at:plan.prepared_at,started_at:null,finished_at:null,result:null}}function materializationOutput(result2,composition,continueExecution=false){return{execution:result2.execution,...continueExecution?{continuation:macroExecutionContinuation(result2.execution.id)}:{},changes:result2.changes,tasks:result2.tasks,artifact_path:composition.executions.path(result2.execution.id),change_paths:result2.changes.map(change=>composition.changes.path(change.id)),task_paths:result2.tasks.map(task=>composition.tasks.path(task.id)),created_paths:result2.created_paths,reused_paths:result2.reused_paths}}async function preparedPlanForReadyOrExecute(entity,kind,id,materializer){if(entity.prepared_plan!==null)return entity.prepared_plan;if(entity.plan_ref!==null)return materializer.readPreparedPlan(entity.plan_ref.execution_id);throw new UsageError(`${kind} is not prepared: ${id}`)}function executionOutput(result2,composition){return materializationOutput(result2,composition,true)}var init_v2_lifecycle_materialization=__esm({"src/commands/v2-lifecycle-materialization.ts"(){"use strict";init_src5();init_cli_arguments();init_conversation_intake();init_developer_identity_command();init_macro_execution_continuation();init_run_client_invocation()}});function selectReadyQueueItem(input){const order2=manualPriority(input.priority);const materialized=new Set(input.executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id)));const completed=new Set(input.tasks.filter(task2=>task2.status==="completed").map(task2=>task2.id));const changes=new Map(input.changes.map(change=>[change.id,change]));const byOrder=(left,right)=>{const leftRank=order2.get(left.id);const rightRank=order2.get(right.id);if(leftRank!==void 0||rightRank!==void 0){if(leftRank===void 0)return 1;if(rightRank===void 0)return-1;if(leftRank!==rightRank)return leftRank-rightRank}return left.created_at.localeCompare(right.created_at)||left.id.localeCompare(right.id)};const prd=input.prds.filter(item=>item.status==="ready").sort(byOrder)[0];if(prd!==void 0)return{kind:"prd",id:prd.id};const spec=input.specs.filter(item=>item.status==="ready"&&item.prd_id===null).sort(byOrder)[0];if(spec!==void 0)return{kind:"spec",id:spec.id};const task=input.tasks.filter(item=>{const change=changes.get(item.change_id);return item.status==="planned"&&item.started_at===null&&(item.attempt_count??0)===0&&!materialized.has(item.id)&&item.prepared_plan===void 0!==(item.plan_ref===void 0)&&item.depends_on.every(id=>completed.has(id))&&change?.source.type==="task"&&change.source.task_id===item.id&&change.task_ids.includes(item.id)}).sort(byOrder)[0];return task===void 0?null:{kind:"task",id:task.id}}function manualPriority(value){if(typeof value!=="object"||value===null||!("schema_version"in value))return new Map;const priority2=value;if(priority2.schema_version!==1||!Array.isArray(priority2.item_ids)||!priority2.item_ids.every(id=>typeof id==="string"&&/^(PRD|SPEC|TASK)-[A-Z0-9-]+$/.test(id))||new Set(priority2.item_ids).size!==priority2.item_ids.length)return new Map;return new Map(priority2.item_ids.map((id,index)=>[id,index]))}var init_ready_queue_selection=__esm({"src/ready-queue-selection.ts"(){"use strict"}});async function readyNextItem(filesystem,composition){const priorityPath=".agents/dashboard/work-priority.json";const priorityText=await filesystem.exists(priorityPath)?await filesystem.readText(priorityPath):"null";const[prds,specs,tasks,changes,executions]=await Promise.all([composition.prds.list(),composition.specs.list(),composition.tasks.list(),composition.changes.list(),composition.executions.list()]);let priority2=null;try{priority2=JSON.parse(priorityText)}catch{}const selected=selectReadyQueueItem({prds,specs,tasks,changes,executions,priority:priority2});if(selected===null)return{selected:null,reason:"no_eligible_work"};if(selected.kind==="task"){const task=tasks.find(item=>item.id===selected.id);if(task===void 0)throw new UsageError(`Ready Task disappeared: ${selected.id}`);const plan=task.prepared_plan??(task.plan_ref===void 0?null:await composition.materializer.readPreparedPlan(task.plan_ref.execution_id));if(plan===null||plan.source.type!=="task"||plan.source.task_id!==task.id||plan.hash!==task.plan_hash)throw new UsageError(`Ready Task has an inconsistent PreparedPlan: ${task.id}`);await assertPreparedPlanReferences(filesystem,plan)}else{const entity=selected.kind==="prd"?prds.find(item=>item.id===selected.id):specs.find(item=>item.id===selected.id);if(entity===void 0)throw new UsageError(`Ready item disappeared: ${selected.id}`);const plan=await preparedPlanForReadyOrExecute(entity,selected.kind==="prd"?"PRD":"SPEC",selected.id,composition.materializer);if(selected.kind==="prd"&&(plan.source.type!=="prd"||plan.source.prd_id!==selected.id)||selected.kind==="spec"&&(plan.source.type!=="spec"||plan.source.spec_id!==selected.id))throw new UsageError(`Ready ${selected.kind.toUpperCase()} has an inconsistent PreparedPlan: ${selected.id}`);await assertPreparedPlanReferences(filesystem,plan)}return{selected}}var init_v2_ready_queue=__esm({"src/commands/v2-ready-queue.ts"(){"use strict";init_cli_arguments();init_prepared_plan_v22();init_ready_queue_selection();init_v2_lifecycle_materialization()}});async function runTaskV2Command(action,parsed,filesystem,composition,lifecycle){if(action==="ready-next")return readyNextItem(filesystem,composition);if(action==="amend-scopes")return amendTaskScopes(parsed,filesystem,composition);if(action==="create"){requireOptions(parsed.options,["title","short-name","objective","requirements","acceptance"]);const timeZone=composition.layout.project.timezone;const taskId=parsed.options.id??createId("TASK",parsed.options["short-name"],{timeZone});const changeId=parsed.options.change??createId("CHG",parsed.options["short-name"],{timeZone});const requirementIds=csvOption(parsed.options.requirements);const acceptanceIds=csvOption(parsed.options.acceptance);const risk2=riskOption(parsed.options.risk);const shortName=parsed.options["short-name"];const{task,change}=await createTaskAndChangeAtomically(filesystem,composition,{id:taskId,changeId,title:parsed.options.title,shortName,objective:parsed.options.objective,targetRelease:await releaseTargetForDraft(filesystem,parsed.options["target-release"]),risk:risk2,priority:priorityOption(parsed.options.priority),owner:parsed.options.owner??null,requirementIds,acceptanceIds,dependsOn:csvOption(parsed.options["depends-on"]),writeScopes:csvOption(parsed.options["write-scopes"]),assuranceRiskSignals:taskAssuranceRiskSignalsOption(parsed.options["assurance-risk-signals"])});return{task,change,artifact_path:composition.tasks.path(task.id),change_path:composition.changes.path(change.id)}}if(action==="prepare"){const id2=requiredEntityId(parsed,2,"Task id");const current=await composition.tasks.read(id2);if(current.task.status==="planned"&&current.task.prepared_plan!==void 0){await assertPreparedPlanReferences(filesystem,current.task.prepared_plan);return{task:current.task,artifact_path:composition.tasks.path(id2),plan_hash:current.task.prepared_plan.hash}}if(parsed.options.plan===void 0&&current.task.depends_on.length>0){throw new UsageError("task prepare with dependencies requires --plan containing the complete DAG")}const timeZone=composition.layout.project.timezone;const executionId=await resolveTaskFirstExecutionId(parsed.options.execution,current.task.id,()=>composition.executions.list());const plan=parsed.options.plan===void 0?taskFirstCommandPlan(current.task,parsed,executionId,timeZone):await readPreparedPlan(filesystem,parsed);await assertPreparedPlanReferences(filesystem,plan);const task=await composition.tasks.setPreparedPlan(id2,plan);const change=plan.blueprints.changes.find(candidate=>candidate.id===task.change_id);if(change===void 0)throw new UsageError(`Prepared plan does not contain Change ${task.change_id}`);await ensureTaskDraftChange(composition,task);await composition.changes.promoteDraft(task.change_id,plannedChangeFromBlueprint(change,plan,task.id));return{task,artifact_path:composition.tasks.path(id2),plan_hash:plan.hash}}if(action==="recover-intake"){requireOptions(parsed.options,["execution"]);const taskId=requiredEntityId(parsed,2,"Task id");const{task}=await composition.tasks.read(taskId);if(task.status!=="executing"||task.plan_ref===void 0)throw new UsageError(`Task has no active canonical plan reference: ${taskId}`);const plan=await composition.materializer.readPreparedPlan(task.plan_ref.execution_id);if(plan.hash!==task.plan_ref.hash||plan.source.type!=="task"||plan.source.task_id!==task.id)throw new UsageError(`Task plan reference cannot be resolved canonically: ${taskId}`);const intake2=(await composition.executions.read(parsed.options.execution)).execution;if(intake2.kind!=="delivery"||intake2.origin.type!=="task"||intake2.origin.task_id!==task.id)throw new UsageError(`Delivery intake does not belong to Task: ${intake2.id}`);const current=intake2;const nodes=plan.dag.nodes.map(node=>{const blueprint=plan.blueprints.tasks.find(candidate=>candidate.id===node.task_id);if(blueprint===void 0)throw new UsageError(`Prepared plan DAG lacks Task blueprint: ${node.task_id}`);return{task_id:node.task_id,change_id:blueprint.change_id,depends_on:node.depends_on}});const planned={...current,kind:"delivery",status:"planned",status_reason:null,plan_revision:plan.revision,plan_hash:plan.hash,policy:plan.policy,dag:{nodes,topological_order:plan.dag.topological_order}};const execution=await composition.executions.promoteDeliveryIntake(current.id,planned);return{task,execution,artifact_path:composition.executions.path(execution.id),recovered:true}}if(action==="execute"){const requestedTaskId=parsed.positionals[2];const plan=parsed.options.plan!==void 0?await readPreparedPlan(filesystem,parsed):await preparedTaskPlan(composition.tasks,composition.materializer,requiredEntityId(parsed,2,"Task id"));await assertPreparedPlanReferences(filesystem,plan);if(plan.source.type!=="task"){throw new UsageError("task execute requires a task-first prepared plan")}if(requestedTaskId!==void 0&&requestedTaskId!==plan.source.task_id)throw new UsageError("Requested Task does not match the prepared plan source");const currentTask=await composition.tasks.read(plan.source.task_id);await assertCurrentReleaseForExecution(filesystem,currentTask.task.target_release,"Task");if(composition.layout.projectConfig?.assurance?.require_final_commit===true)await assertGitDeliveryReady(filesystem.root);await assertTaskExecutionIntakeCompatibleBeforeMutation(filesystem,composition,plan.source.task_id,plan.execution_id);const materialized=await existingTaskFirstMaterialization(plan,composition)??await composition.materializer.execute(plan);const taskId=plan.source.task_id;const task=materialized.tasks.find(candidate=>candidate.id===taskId);if(task===void 0){throw new UsageError(`Task-first plan did not materialize its source Task ${taskId}`)}const change=materialized.changes.find(candidate=>candidate.id===task.change_id);if(change===void 0){throw new UsageError(`Task-first plan did not materialize Change ${task.change_id}`)}assertTaskFirstExecutable(task.status,"Task",task.id);assertTaskFirstExecutable(materialized.execution.status,"Execution",materialized.execution.id);assertTaskFirstExecutable(change.status,"Change",change.id);const run=await ensureTaskOrchestratorRun(task,change.id,materialized.execution.id,parsed,filesystem,composition);let execution=(await composition.executions.read(materialized.execution.id)).execution;if(execution.status==="planned"){execution=await composition.executions.transition(execution.id,"running")}let activeChange=(await composition.changes.read(change.id)).change;if(activeChange.status==="planned"){activeChange=await composition.changes.transition(activeChange.id,"executing")}let activeTask=(await composition.tasks.read(task.id)).task;if(activeTask.status==="planned"){activeTask=await lifecycle.startTask(activeTask.id)}return{...materializationOutput(materialized,composition),execution,changes:[activeChange],tasks:[activeTask],run,run_path:composition.runs.path(run.run_id)}}if(action==="list"){const[tasks,changes]=await Promise.all([composition.tasks.list(),parsed.options.prd===void 0&&parsed.options.spec===void 0?Promise.resolve([]):composition.changes.list()]);const relatedChangeIds=new Set(changes.filter(change=>(parsed.options.prd===void 0||change.source.type==="prd"&&change.source.prd_id===parsed.options.prd)&&(parsed.options.spec===void 0||change.source.type==="spec"&&change.source.spec_id===parsed.options.spec||change.source.type==="prd"&&change.source.spec_id===parsed.options.spec)).map(change=>change.id));const filtered=tasks.filter(task=>parsed.options.prd===void 0&&parsed.options.spec===void 0||relatedChangeIds.has(task.change_id));return listLifecyclePage(filtered,parsed).map(task=>({task:compactPreparedEntity(task),artifact_path:composition.tasks.path(task.id)}))}if(action==="next"){const[tasks,executions]=await Promise.all([composition.tasks.list(),composition.executions.list()]);const completed=new Set(tasks.filter(task=>task.status==="completed").map(task=>task.id));const materialized=new Set(executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id)));return tasks.filter(task=>task.status==="planned"&&materialized.has(task.id)&&task.depends_on.every(dependency=>completed.has(dependency))).map(task=>({task,artifact_path:composition.tasks.path(task.id)}))}const id=requiredEntityId(parsed,2,"Task id");if(action==="show"){return{...await composition.tasks.read(id),artifact_path:composition.tasks.path(id)}}if(action==="start"||action==="resume"||action==="rework"){return runTaskStartCommand(id,action,composition,lifecycle)}if(action==="verify"){const task=await lifecycle.verifyTask(id,csvOption(parsed.options.evidence));return{task,artifact_path:composition.tasks.path(id)}}if(["block","complete","fail"].includes(action??"")){throw new UsageError("Task terminal status is applied only by Gui through run finish")}if(action==="cancel"){const cancelled_run_ids=await cancelTaskRunsForHuman(id,composition,parsed);const result2=await lifecycle.cancelTask(id,"Explicit human cancellation",null);return{...result2,cancelled_run_ids,artifact_path:composition.tasks.path(id)}}throw new UsageError(`Unknown V2 Task action: ${action??""}`)}var init_v2_lifecycle_task=__esm({"src/commands/v2-lifecycle-task.ts"(){"use strict";init_src();init_cli_arguments();init_execution_intake_compatibility();init_git_delivery_preflight();init_prepared_plan_v22();init_release_cycle();init_v2_run_cancellation_and_aggregate();init_task_assurance_options();init_task_change_creation();init_task_first_command_plan();init_task_scope_amendment();init_task_start_command();init_v2_lifecycle_materialization();init_v2_ready_queue()}});async function runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle){action=lifecycleActionAlias(area,action);if(area==="prd")return runPrdV2Command(action,parsed,filesystem,composition,lifecycle);if(area==="spec")return runSpecV2Command(action,parsed,filesystem,composition,lifecycle);return runTaskV2Command(action,parsed,filesystem,composition,lifecycle)}async function runPrdV2Command(action,parsed,filesystem,composition,lifecycle){if(action==="finalize"){return finalizeMacro("prd",parsed,composition,()=>runLifecycleV2Command("prd","ready",parsed,filesystem,composition,lifecycle))}if(action==="create"){const creationRunId=await creationRunIdForCurrentTurn(parsed,filesystem,composition);return createPrdWithOptionalPlan({parsed,filesystem,composition,creationRunId})}if(action==="rework"){return createPrdRework({parsed,composition,creationRunId:await creationRunIdForCurrentTurn(parsed,filesystem,composition)})}if(action==="list"){return listLifecyclePage(await composition.prds.list(),parsed).map(prd=>({prd:compactPreparedEntity(prd),artifact_path:composition.prds.path(prd.id)}))}const id=requiredEntityId(parsed,2,"PRD id");if(action==="show"){return{...await composition.prds.read(id),artifact_path:composition.prds.path(id)}}if(action==="prepare"){const plan=await readPreparedPlan(filesystem,parsed);await assertPreparedPlanReferences(filesystem,plan);const prd=await composition.prds.setPreparedPlan(id,plan);const specs=await Promise.all(specIdsForPrdPlanV2(plan,id).map(async specId=>(await composition.specs.read(specId)).spec));return{prd,specs,artifact_path:composition.prds.path(id),plan_hash:plan.hash}}if(action==="ready"){const current=await composition.prds.read(id);await assertCurrentReleaseForExecution(filesystem,current.prd.target_release,"PRD");const plan=await preparedPlanForReadyOrExecute(current.prd,"PRD",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.prd.status)){throw new UsageError(`PRD cannot move to ready from status ${current.prd.status}: ${id}`)}const selectedSpecs=await Promise.all(specIdsForPrdPlanV2(plan,id).map(async specId=>(await composition.specs.read(specId)).spec));for(const spec of selectedSpecs){await assertCurrentReleaseForExecution(filesystem,spec.target_release,"SPEC");if(!new Set(["draft","ready"]).has(spec.status)){throw new UsageError(`SPEC cannot move to ready from status ${spec.status}: ${spec.id}`)}await assertSpecImplementationMatchesProject(spec.implementation,filesystem,composition.layout)}const materialized=materializationOutput(await composition.materializer.execute(plan),composition);const prd=current.prd.status==="draft"?await composition.prds.transition(id,"ready"):current.prd;const specs=await Promise.all(selectedSpecs.map(spec=>spec.status==="draft"?composition.specs.transition(spec.id,"ready"):spec));return{...materialized,prd,specs,artifact_path:composition.prds.path(id)}}if(action==="execute"){const current=await composition.prds.read(id);await assertCurrentReleaseForExecution(filesystem,current.prd.target_release,"PRD");const plan=await preparedPlanForReadyOrExecute(current.prd,"PRD",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.prd.status)){throw new UsageError(`PRD cannot execute from status ${current.prd.status}: ${id}`)}const selectedSpecs=await Promise.all(specIdsForPrdPlanV2(plan,id).map(async specId=>(await composition.specs.read(specId)).spec));for(const spec of selectedSpecs){await assertCurrentReleaseForExecution(filesystem,spec.target_release,"SPEC");if(!new Set(["draft","ready"]).has(spec.status)){throw new UsageError(`SPEC cannot execute from status ${spec.status}: ${spec.id}`)}await assertSpecImplementationMatchesProject(spec.implementation,filesystem,composition.layout)}const output2=executionOutput(await composition.materializer.execute(plan),composition);const specs=await Promise.all(selectedSpecs.map(async selectedSpec=>{let spec=selectedSpec;if(spec.status==="draft")spec=await composition.specs.transition(spec.id,"ready");return spec.status==="ready"?composition.specs.transition(spec.id,"active"):spec}));if(current.prd.status==="draft")await composition.prds.transition(id,"ready");const preparedPrd=(await composition.prds.read(id)).prd;if(preparedPrd.status==="ready")await composition.prds.transition(id,"active");return{...output2,specs}}if(action==="deliver"){throw new UsageError("PRD terminal status is applied only by Gui through run finish")}if(action==="block"||action==="fail"){throw new UsageError("PRD terminal status is applied only by Gui through run finish")}if(action==="cancel"){throw new UsageError("PRD terminal status is applied only by Gui through run finish")}if(action==="activate"){const prd=await composition.prds.transition(id,"active");return{prd,artifact_path:composition.prds.path(id)}}throw new UsageError(`Unknown V2 PRD action: ${action??""}`)}async function runSpecV2Command(action,parsed,filesystem,composition,lifecycle){if(action==="finalize"){return finalizeMacro("spec",parsed,composition,()=>runLifecycleV2Command("spec","ready",parsed,filesystem,composition,lifecycle))}if(action==="create"){const creationRunId=await creationRunIdForCurrentTurn(parsed,filesystem,composition);return createSpecWithOptionalPlan({parsed,filesystem,composition,creationRunId})}if(action==="list"){const specs=(await composition.specs.list()).filter(spec=>parsed.options.prd===void 0||spec.prd_id===parsed.options.prd);return listLifecyclePage(specs,parsed).map(spec=>({spec:compactPreparedEntity(spec),artifact_path:composition.specs.path(spec.id)}))}const id=requiredEntityId(parsed,2,"SPEC id");if(action==="show"){return{...await composition.specs.read(id),artifact_path:composition.specs.path(id)}}if(action==="retarget-release"){requireOptions(parsed.options,["from","to","run"]);return retargetOwnerSpecRelease(filesystem,composition,{specId:id,from:parsed.options.from,to:parsed.options.to,actorRunId:parsed.options.run})}if(action==="prepare"){const plan=await readPreparedPlan(filesystem,parsed);await assertPreparedPlanReferences(filesystem,plan);const spec=await composition.specs.setPreparedPlan(id,plan);return{spec,artifact_path:composition.specs.path(id),plan_hash:plan.hash}}if(action==="ready"){const current=await composition.specs.read(id);await assertCurrentReleaseForExecution(filesystem,current.spec.target_release,"SPEC");const plan=await preparedPlanForReadyOrExecute(current.spec,"SPEC",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.spec.status)){throw new UsageError(`SPEC cannot move to ready from status ${current.spec.status}: ${id}`)}await assertSpecImplementationMatchesProject(current.spec.implementation,filesystem,composition.layout);const materialized=materializationOutput(await composition.materializer.execute(plan),composition);const spec=current.spec.status==="draft"?await composition.specs.transition(id,"ready"):current.spec;return{...materialized,spec,artifact_path:composition.specs.path(id)}}if(action==="execute"){const current=await composition.specs.read(id);await assertCurrentReleaseForExecution(filesystem,current.spec.target_release,"SPEC");const plan=await preparedPlanForReadyOrExecute(current.spec,"SPEC",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.spec.status)){throw new UsageError(`SPEC cannot execute from status ${current.spec.status}: ${id}`)}await assertSpecImplementationMatchesProject(current.spec.implementation,filesystem,composition.layout);const output2=executionOutput(await composition.materializer.execute(plan),composition);if(current.spec.status==="draft")await composition.specs.transition(id,"ready");const preparedSpec=(await composition.specs.read(id)).spec;if(preparedSpec.status==="ready")await composition.specs.transition(id,"active");return output2}if(action==="deliver"){throw new UsageError("SPEC terminal status is applied only by Gui through run finish")}if(action==="block"||action==="fail"){throw new UsageError("SPEC terminal status is applied only by Gui through run finish")}if(action==="cancel"){const changes=(await composition.changes.list()).filter(change=>change.source.type==="spec"&&change.source.spec_id===id||change.source.type==="prd"&&change.source.spec_id===id);const executions=(await composition.executions.list()).filter(execution=>execution.origin.type==="spec"&&execution.origin.spec_id===id);const taskIds=new Set([...changes.flatMap(change=>change.task_ids),...executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id))]);const cancelled_run_ids=(await Promise.all([...taskIds].map(taskId=>cancelTaskRunsForHuman(taskId,composition,parsed)))).flat();const result2=await lifecycle.cancelSpec(id);return{...result2,cancelled_run_ids,artifact_path:composition.specs.path(id)}}if(action==="activate"){const spec=await composition.specs.transition(id,"active");return{spec,artifact_path:composition.specs.path(id)}}throw new UsageError(`Unknown V2 SPEC action: ${action??""}`)}async function creationRunIdForCurrentTurn(parsed,filesystem,composition){if(parsed.options.run!==void 0){return(await composition.runs.read(parsed.options.run)).run.run_id}const invocation2=await resolveRunClientInvocation(filesystem,"codex");const intake2=await findIntakeForExactTurn(composition,"codex",invocation2);return intake2?.run.run_id??null}var init_v2_lifecycle=__esm({"src/commands/v2-lifecycle.ts"(){"use strict";init_src();init_src6();init_cli_arguments();init_conversation_intake();init_execution_intake_compatibility();init_git_delivery_preflight();init_prepared_plan_v22();init_release_cycle();init_run_budget();init_run_client_invocation();init_v2_run_cancellation_and_aggregate();init_spec_release_retarget();init_task_assurance_options();init_task_change_creation();init_task_first_command_plan();init_task_scope_amendment();init_task_start_command();init_v2_lifecycle_materialization();init_v2_lifecycle_support();init_v2_lifecycle_task();init_v2_ready_queue();init_v2_lifecycle_materialization()}});var V2_COMMAND_AREAS;var init_v2_command_areas=__esm({"src/commands/v2-command-areas.ts"(){"use strict";V2_COMMAND_AREAS=new Set(["plan","prd","spec","change","task","execution","decision","evidence","validation","run","run-v2","conversation","developer","subagent"])}});function createV2Composition(filesystem,layout){const storageMode=layout.projectConfig?.tracking.storage_mode??"tracked_sanitized";return{filesystem,layout,prds:new PrdV2Repository(filesystem,layout),specs:new DeliverySpecV2Repository(filesystem,layout),changes:new ChangeV2Repository(filesystem,layout),tasks:new TaskV2Repository(filesystem,layout),executions:new ExecutionV2Repository(filesystem,layout),materializer:new PreparedPlanV2Materializer(filesystem,layout),decisions:new DecisionV2Repository(filesystem,layout),runs:new RunV2Repository(filesystem,storageMode==="local_only"?{storageMode:"local_only",localBasePath:".local/runs"}:{storageMode:"tracked_sanitized",layout})}}async function runV2Command(area,action,parsed,filesystem,layout){if(area==="conversation"&&action==="resolve"){return preview(parsed,filesystem,layout)}if(isHostTerminalOnlyOpenReconciliation(area,action,parsed)){return runHostTerminalOnlyReconcile(parsed,filesystem,layout)}if(area==="conversation"&&action==="start"){return capture(parsed,filesystem,layout,intake2=>runV2CommandUnlocked(area,action,parsed,filesystem,layout,intake2))}if(area==="task"&&action==="migrate-autonomy"&&parsed.flags.has("confirm"))return withLifecycleCanonicalMutationLock(filesystem,()=>runV2CommandUnlocked(area,action,parsed,filesystem,layout));if(!isLifecycleManifestMutation(action)||area==="validation"&&["execute","batch"].includes(action??"")||area==="task"&&["commit","workspace","assurance","recovery-status"].includes(action??"")||isNarrowSubagentTerminalCapture(area,action)||isNarrowRunFinish(area,action)||isBoundedActiveTelemetryCapture(area,action,parsed)){return runV2CommandUnlocked(area,action,parsed,filesystem,layout)}return withLifecycleCanonicalMutationLock(filesystem,()=>runV2CommandUnlocked(area,action,parsed,filesystem,layout),area==="conversation"&&action==="start"?{timeout_ms:15e3}:{})}async function runHostTerminalOnlyReconcile(parsed,filesystem,layout,dependencies={}){const createComposition=dependencies.createComposition??(()=>createV2Composition(filesystem,layout));const preflight=dependencies.preflight??hostTerminalOnlyPreflight;const withLock=dependencies.withLock??(operation=>withLifecycleCanonicalMutationLock(filesystem,operation));const execute2=dependencies.execute??(()=>runV2CommandUnlocked("run","reconcile",parsed,filesystem,layout));const initial=await preflight(createComposition(),filesystem);if(initial.kind==="no-op")return initial.result;return withLock(execute2)}function isHostTerminalOnlyOpenReconciliation(area,action,parsed){return(area==="run"||area==="run-v2")&&action==="reconcile"&&parsed.flags.has("open")&&parsed.flags.has("host-terminal-only")}function isBoundedActiveTelemetryCapture(area,action,parsed){return(area==="run"||area==="run-v2")&&action==="usage"&&(parsed.flags.has("active")||parsed.flags.has("recent"))&&parsed.flags.has("disable-codex-raw")}async function runV2CommandUnlocked(area,action,parsed,filesystem,layout,intake2){const composition=createV2Composition(filesystem,layout);if(area==="task"&&action==="recovery-status")return taskRecoveryStatus(parsed.positionals[2]??parsed.options.id??"",composition);if(area==="task"&&action==="assurance")return runTaskAssuranceCommand(parsed,filesystem,composition);if(area==="task"&&action==="workspace")return runTaskWorkspaceAction(parsed,filesystem,composition);if(area==="validation"&&action==="batch")return runValidationBatchCommand(parsed,filesystem,composition);if(action==="list"&&parsed.options.view!=="full"){return manifestList(area==="run-v2"?"run":area,parsed,filesystem)}const lifecycle=new LifecycleV2Gate(filesystem,layout,composition);let result2;let manifestSyncedDuringMutation=false;if(area==="plan")return runPlanV2Command(action,parsed,filesystem,layout);if(area==="developer")return runDeveloperIdentityCommand(action,parsed,filesystem);if(area==="prd")result2=await runDefinitionLifecycleCommand(area,action,parsed,filesystem,composition,lifecycle);else if(area==="spec")result2=await runDefinitionLifecycleCommand(area,action,parsed,filesystem,composition,lifecycle);else if(area==="change")result2=await runChangeV2Command(action,parsed,composition,lifecycle);if(area==="conversation"){result2=await command(action,parsed,composition,filesystem,lifecycle,intake2)}else if(area==="subagent"){result2=await runSubagentV2Command(action,parsed,composition,filesystem,lifecycle,async captured=>{await syncLifecycleManifestResult(captured,"subagent",parsed,composition,filesystem);manifestSyncedDuringMutation=true})}else if(area==="task"){if(action==="migrate-autonomy")return migrateTaskAutonomy(parsed.positionals[2]??parsed.options.id??"",parsed,composition);result2=["repair-verification","settle-repair"].includes(action??"")?await runTaskVerificationRepairCommand(parsed,composition):action==="commit"?await runTaskCommitCommand(parsed,filesystem,composition):await runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle)}else if(area==="execution")result2=await runExecutionV2Command(action,parsed,composition,lifecycle,async(id,options)=>{const source=(await composition.executions.read(id)).execution.origin.type;const config2=layout.projectConfig;const managed=config2!==null&&!options.flags.has("materialize-only")&&resolveExecutionRuntime(config2,void 0,source).runtime==="autonomous";return runAutonomousExecutionCommand(id,options,composition,managed?createAutonomousProductionDriver(filesystem,config2,source):void 0,await loadAgentCatalog(filesystem))});else if(area==="decision")result2=await runDecisionV2Command(action,parsed,filesystem,composition);else if(area==="evidence")result2=await runEvidenceV2Command(action,parsed,filesystem,composition);else if(area==="validation")result2=await runValidationV2Command(action,parsed,filesystem,composition);else if(area==="run"||area==="run-v2"){result2=await runRunV2Command(action,parsed,composition,filesystem,lifecycle)}else if(!["prd","spec","change","task","conversation","subagent","evidence","validation"].includes(area)){throw new UsageError(`Unknown V2 command: ${area} ${action??""}`.trim())}if(isLifecycleManifestMutation(action)&&!manifestSyncedDuringMutation&&!isIdempotentLifecycleReplay(area,action,result2)){if(area==="validation"&&action==="execute"){return syncValidationProjection(result2,parsed.options.id,()=>syncLifecycleManifestResult(result2,area,parsed,composition,filesystem))}await syncLifecycleManifestResult(result2,area==="run-v2"?"run":area,parsed,composition,filesystem)}if((area==="run"||area==="run-v2")&&action==="finish")return maybeCloseTerminalTaskWorkspace(filesystem,composition,parsed.positionals[2]??parsed.options.id,result2);return result2}function isIdempotentLifecycleReplay(area,action,result2){if(!((area==="run"||area==="run-v2"||area==="conversation")&&action==="start")){return false}return typeof result2==="object"&&result2!==null&&"reused"in result2&&result2.reused===true}function isNarrowSubagentTerminalCapture(area,action){return area==="subagent"&&(action==="capture-terminal"||action==="reconcile-stop")}function isNarrowRunFinish(area,action){return(area==="run"||area==="run-v2")&&action==="finish"}async function runDefinitionLifecycleCommand(area,action,parsed,filesystem,composition,lifecycle){const definitionActions=new Set(["create","rework","prepare"]);if(!definitionActions.has(action??"")){return runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle)}const runId=await creationRunIdForCurrentTurn(parsed,filesystem,composition);await assertActiveDefinitionRun({area,runId,filesystem,composition,reworkAuthoring:action==="rework"});return runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle)}var init_v2_router=__esm({"src/commands/v2-router.ts"(){"use strict";init_src5();init_src6();init_src7();init_autonomous_execution_command();init_autonomous_production_driver();init_candidate_commit_command();init_candidate_validation_batch_command();init_cli_arguments();init_conversation_stop_intake();init_developer_identity_command();init_evidence_commands_v2();init_execution_commands_v2();init_execution_runtime_config();init_governance_commands_v2();init_lifecycle_manifest_commands();init_lifecycle_v2();init_open_work_host_preflight();init_prepared_plan_v22();init_run_agent_identity();init_subagent_command_v2();init_task_assurance_command();init_task_autonomy_migration();init_task_recovery_status();init_task_verification_repair();init_task_workspace_closure();init_task_workspace_routing();init_validation_commands_v2();init_validation_projection();init_definition_run_gate();init_v2_lifecycle();init_v2_run();init_v2_command_areas()}});init_src2();import{basename as basename7,dirname as dirname18,resolve as resolve24}from"node:path";import{pathToFileURL}from"node:url";var import_parser=__toESM(require_lib(),1);function resolveSupabaseProfile(value){if(!isRecord(value)||value.id!==SUPABASE_EDGE_PROFILE.id){return unsupported2("explicit supabase-edge-functions profile is required")}if(value.workspaces!==void 0||value.scopes!==void 0||value.importMap!==void 0){return unsupported2("unsupported workspace, scope, or importMap configuration")}const map2=parseDenoImportMap(value.deno_json??value.deno_import_map);return map2===null?unsupported2("missing or malformed deno.json or deno_import_map"):{profile:{...SUPABASE_EDGE_PROFILE,denoImportMap:map2},diagnostics:[]}}function supabaseEntrypointFindings(units,profile){if(profile.id!==SUPABASE_EDGE_PROFILE.id)return[];const endpoints=new Set(units.map(unit=>normalizePath(unit.path).match(/^supabase\/functions\/([^/]+)\//)?.[1]).filter(name=>name!==void 0&&name!=="_shared"));return[...endpoints].flatMap(endpoint=>{const entrypoint=profile.functionEntrypoints?.[endpoint]??"index.ts";return units.some(unit=>normalizePath(unit.path)===`supabase/functions/${endpoint}/${entrypoint}`)?[]:[finding("supabase-function-missing-entrypoint",`supabase/functions/${endpoint}`,1,`Function ${endpoint} has no ${entrypoint}`)]})}function isSupabasePrivateFunctionImport(source,target){const sourceFunction=source.match(/^supabase\/functions\/([^/]+)\//)?.[1];const targetFunction=target.match(/^supabase\/functions\/([^/]+)\//)?.[1];if(sourceFunction===void 0||targetFunction===void 0)return false;if(sourceFunction==="_shared"&&targetFunction==="_shared")return false;if(targetFunction==="_shared")return!/^supabase\/functions\/_shared\/index\.(?:[cm]?ts|[cm]?js)$/.test(target);return sourceFunction!==targetFunction}function aliasesForSource(profile,sourcePath){const imports=profile.denoImportMap;if(imports===void 0)return profile.importAliases??[];const functionName=sourcePath.match(/^supabase\/functions\/([^/]+)\//)?.[1];const scoped=functionName===void 0?void 0:imports.functionImports?.[functionName];return[...toImportAliases(scoped??{},`supabase/functions/${functionName??""}`),...toImportAliases(imports.imports,"supabase/functions")]}function unsupported2(reason){return{profile:{...SUPABASE_EDGE_PROFILE,supported:false,notApplicableReason:reason},diagnostics:[`supabase-profile: ${reason}`]}}function toImportAliases(entries,basePath){return Object.entries(entries).map(([prefix,target])=>({prefix,target:normalizeImportTarget(target,basePath)}))}function normalizeImportTarget(target,basePath){const trailingSlash=target.endsWith("/");const normalized=target.startsWith(".")?normalizePath(`${basePath}/${target}`):target;return trailingSlash&&!normalized.endsWith("/")?`${normalized}/`:normalized}function parseDenoImportMap(value){if(!isRecord(value)||!isStringMap(value.imports))return null;if(value.scopes!==void 0||value.workspace!==void 0||value.workspaces!==void 0||value.importMap!==void 0)return null;if(value.function_imports===void 0)return{imports:value.imports};if(!isRecord(value.function_imports))return null;const functionImports={};for(const[functionName,imports]of Object.entries(value.function_imports)){if(!isStringMap(imports))return null;functionImports[functionName]=imports}return{imports:value.imports,functionImports}}function isStringMap(value){return isRecord(value)&&Object.entries(value).every(([prefix,target])=>typeof target==="string"&&prefix.length>0&&target.length>0&&prefix.endsWith("/")===target.endsWith("/"))}function isRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function normalizePath(path){const segments2=[];for(const segment2 of path.replace(/\\/g,"/").split("/")){if(segment2===""||segment2===".")continue;if(segment2==="..")segments2.pop();else segments2.push(segment2)}return segments2.join("/")}function finding(rule,path,line,message){return{rule,path,line,message}}function resolvedImports(unit,resolveImport){const imports=[];const add=(source,line,unverifiedDynamic=false)=>{const specifier=staticModuleSpecifier(source);if(specifier===void 0){if(unverifiedDynamic)imports.push({module:"<dynamic import>",resolvedModule:null,line:typeof line==="number"?line:1,unverified:true});return}const module=specifier.replace(/\\/g,"/");imports.push({module,resolvedModule:resolveImport(unit.path,module),line:typeof line==="number"?line:1})};const visit=node=>{if(!isRecord2(node))return;const line=sourceLine(node);if(["ImportDeclaration","ExportNamedDeclaration","ExportAllDeclaration","ImportExpression","TSImportType"].includes(String(node.type))){add(node.type==="TSImportType"?node.argument:node.source,line,node.type==="ImportExpression")}else if(node.type==="CallExpression"&&isRecord2(node.callee)&&node.callee.type==="Import"){add(Array.isArray(node.arguments)?node.arguments[0]:void 0,line,true)}else if(node.type==="CallExpression"&&isRecord2(node.callee)&&node.callee.type==="Identifier"&&node.callee.name==="require"){add(Array.isArray(node.arguments)?node.arguments[0]:void 0,line,true)}else if(node.type==="TSImportEqualsDeclaration"&&isRecord2(node.moduleReference)){add(node.moduleReference.expression,line)}for(const value of Object.values(node)){if(Array.isArray(value))for(const child of value)visit(child);else if(value!==node.loc)visit(value)}};visit((0,import_parser.parse)(unit.content,{sourceType:"unambiguous",plugins:unit.path.endsWith(".tsx")||unit.path.endsWith(".jsx")?["typescript","jsx"]:["typescript"]}));return imports}function importResolver(units,profile){const knownPaths=new Set(units.map(unit=>normalizePath2(unit.path)));const sourceAliases=new Map(units.map(unit=>[normalizePath2(unit.path),unit.importAliases??[]]));return(sourcePath,specifier)=>{const candidates=importCandidates(normalizePath2(sourcePath),specifier.replace(/\\/g,"/"),[...sourceAliases.get(normalizePath2(sourcePath))??[],...aliasesForSource(profile,normalizePath2(sourcePath))]);for(const candidate of candidates){const resolved=resolveKnownPath(candidate,knownPaths);if(resolved!==null)return resolved}return candidates[0]??null}}function normalizePath2(path){const segments2=[];for(const segment2 of path.replace(/\\/g,"/").split("/")){if(segment2===""||segment2===".")continue;if(segment2==="..")segments2.pop();else segments2.push(segment2)}return segments2.join("/")}function importCandidates(sourcePath,specifier,aliases){if(specifier.startsWith("."))return[normalizePath2(`${dirname2(sourcePath)}/${specifier}`)];return aliases.filter(alias=>specifier===alias.prefix||alias.prefix.endsWith("/")&&specifier.startsWith(alias.prefix)).sort((left,right)=>right.prefix.length-left.prefix.length).map(alias=>normalizePath2(`${alias.target}${specifier.slice(alias.prefix.length)}`))}function resolveKnownPath(candidate,knownPaths){const extensions=[".ts",".tsx",".mts",".cts",".js",".jsx",".mjs",".cjs"];const sourceExtension=/\.(?:[cm]?[jt]sx?)$/.test(candidate)?candidate.replace(/\.(?:[cm]?[jt]sx?)$/,""):candidate;const options=[candidate,sourceExtension,...extensions.map(extension=>`${candidate}${extension}`),...extensions.map(extension=>`${candidate}/index${extension}`),...extensions.map(extension=>`${sourceExtension}${extension}`),...extensions.map(extension=>`${sourceExtension}/index${extension}`)];return options.find(option=>knownPaths.has(option))??null}function staticModuleSpecifier(source){if(!isRecord2(source))return void 0;if(typeof source.value==="string")return source.value;if(source.type!=="TemplateLiteral"||!Array.isArray(source.expressions)||source.expressions.length!==0||!Array.isArray(source.quasis))return void 0;const quasi=source.quasis[0];return isRecord2(quasi)&&isRecord2(quasi.value)&&typeof quasi.value.cooked==="string"?quasi.value.cooked:void 0}function sourceLine(node){const location=node.loc;return isRecord2(location)&&isRecord2(location.start)&&typeof location.start.line==="number"?location.start.line:void 0}function dirname2(path){return path.slice(0,Math.max(0,path.lastIndexOf("/")))}function isRecord2(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}var import_parser2=__toESM(require_lib(),1);function workspaceImportAliases(manifests){const documents=new Map(manifests.map(({path,content})=>[normalizePath2(path),parseDocument3(path,content)]));const packages=[];for(const[path,document]of documents){if(!path.endsWith("package.json")||typeof document.name!=="string")continue;const entries=document.exports;if(isRecord3(entries)&&Object.keys(entries).some(key=>key.startsWith("."))){for(const[subpath,target]of Object.entries(entries)){addTargets(packages,document.name+(subpath==="."?"":subpath.slice(1)),target,directory(path))}}else{addTargets(packages,document.name,entries??document.module??document.main??"./index.ts",directory(path))}}const resolved=new Map;function configOptions(path,chain=[]){const cached2=resolved.get(path);if(cached2)return cached2;if(chain.includes(path))throw new Error(`Cyclic architecture tsconfig inheritance: ${path}`);const document=documents.get(path);if(!document)throw new Error(`Architecture tsconfig is unavailable: ${path}`);let inherited={};const parents=document.extends===void 0?[]:Array.isArray(document.extends)?document.extends:[document.extends];for(const parent of parents){if(typeof parent!=="string"||!parent.startsWith(".")){throw new Error(`Architecture cannot verify external tsconfig inheritance: ${path}`)}const candidate=normalizePath2(`${directory(path)}/${parent}`);inherited={...inherited,...configOptions(documents.has(candidate)||candidate.endsWith(".json")?candidate:`${candidate}.json`,[...chain,path])}}const options=isRecord3(document.compilerOptions)?document.compilerOptions:{};const result2={...inherited};if(options.baseUrl!==void 0){if(typeof options.baseUrl!=="string")throw new Error(`Invalid architecture tsconfig baseUrl: ${path}`);result2.baseUrl=normalizePath2(`${directory(path)}/${options.baseUrl}`)}if(options.paths!==void 0){if(!isRecord3(options.paths))throw new Error(`Invalid architecture tsconfig paths: ${path}`);result2.paths=options.paths;result2.pathsBase=directory(path)}resolved.set(path,result2);return result2}function configAliases(path){const options=configOptions(path);const base=options.baseUrl??options.pathsBase??directory(path);const aliases=[];for(const[prefix,targets]of Object.entries(options.paths??{})){if(!Array.isArray(targets)||targets.length===0||!targets.every(target=>typeof target==="string")){throw new Error(`Invalid architecture tsconfig path targets: ${path}`)}for(const target of targets)addAlias(aliases,prefix,String(target),base)}return aliases}return sourcePath=>{const nearest=[...documents.keys()].filter(path=>path.endsWith("tsconfig.json")&&(directory(path)===""||sourcePath.startsWith(`${directory(path)}/`))).sort((a,b)=>b.length-a.length)[0];return[...nearest?configAliases(nearest):[],...packages]}}function addTargets(aliases,prefix,target,base){if(typeof target==="string")addAlias(aliases,prefix,target,base);else if(Array.isArray(target))for(const entry2 of target)addTargets(aliases,prefix,entry2,base);else if(isRecord3(target))for(const entry2 of Object.values(target))addTargets(aliases,prefix,entry2,base)}function addAlias(aliases,prefix,target,base){const stars=(prefix.match(/\*/g)??[]).length;if(stars>1||stars===1&&(!prefix.endsWith("*")||!target.endsWith("*"))){throw new Error(`Architecture cannot verify non-prefix import mapping: ${prefix}`)}if(/^(?:[A-Za-z][A-Za-z0-9+.-]*:|\/|\\)/.test(target)){throw new Error(`Architecture import mapping escapes the workspace: ${prefix}`)}const source=stars?prefix.slice(0,-1):prefix;const destination=stars?target.slice(0,-1):target;const joined=`${base}/${destination}`;let depth=0;for(const segment2 of joined.split("/")){if(segment2==="..")depth-=1;else if(segment2&&segment2!==".")depth+=1;if(depth<0)throw new Error(`Architecture import mapping escapes the workspace: ${prefix}`)}aliases.push({prefix:source,target:normalizePath2(joined)+(destination.endsWith("/")?"/":"")})}function parseDocument3(path,content){const value=literal2((0,import_parser2.parseExpression)(content));if(!isRecord3(value))throw new Error(`Architecture manifest must be an object: ${path}`);return value}function literal2(node){if(!isRecord3(node))throw new Error("Invalid architecture manifest");if(["StringLiteral","NumericLiteral","BooleanLiteral"].includes(String(node.type)))return node.value;if(node.type==="NullLiteral")return null;if(node.type==="ArrayExpression"&&Array.isArray(node.elements))return node.elements.map(literal2);if(node.type==="ObjectExpression"&&Array.isArray(node.properties)){const entries=node.properties.map(property=>{if(!isRecord3(property)||property.type!=="ObjectProperty"||property.computed||!isRecord3(property.key)||property.key.type!=="StringLiteral"){throw new Error("Architecture manifests must contain literal JSON properties")}return[String(property.key.value),literal2(property.value)]});return Object.fromEntries(entries)}if(node.type==="UnaryExpression"&&node.operator==="-"&&isRecord3(node.argument)&&node.argument.type==="NumericLiteral")return-Number(node.argument.value);throw new Error("Architecture manifests must contain only JSON literals")}function directory(path){return path.slice(0,Math.max(0,path.lastIndexOf("/")))}function isRecord3(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}var TYPESCRIPT_PROFILE={id:"zaip-aios-stack",extensions:[".ts",".tsx"],frameworkPackages:["hono","react","kysely","drizzle-orm","express","fastify"],queryPatterns:["/queries/",".query.","QueryHandler"],writePortPatterns:["WritePort","CommandRepository","UnitOfWork"],supported:true};var SUPABASE_EDGE_PROFILE={...TYPESCRIPT_PROFILE,id:"supabase-edge-functions",frameworkPackages:[...TYPESCRIPT_PROFILE.frameworkPackages,"@supabase/supabase-js"],supported:true};function validateArchitecture(units,profile=TYPESCRIPT_PROFILE){if(!profile.supported&&!profile.notApplicableReason){throw new Error(`Unsupported profile ${profile.id} requires a notApplicableReason`)}return[...validateAll(units,profile),...supabaseEntrypointFindings(units,profile)].filter(item=>["domain-framework-dependency","application-concrete-adapter","adapter-inward-dependency","frontend-server-dependency","backend-ui-dependency","dashboard-backend-app","inner-layer-app-dependency","site-dashboard-dependency","package-module-dependency","supabase-private-function-import","supabase-function-missing-entrypoint","unresolved-dynamic-import"].includes(item.rule))}function validateCqrs(units,profile=TYPESCRIPT_PROFILE){return validateAll(units,profile).filter(item=>["query-write-port","query-side-effect","route-direct-database","database-row-leak","command-missing-idempotency","query-missing-account-context"].includes(item.rule))}function validateModules(units,profile=TYPESCRIPT_PROFILE){const findings=validateAll(units,profile).filter(item=>item.rule==="cross-module-storage");const modules=new Set(units.map(unit=>moduleName(unit.path)).filter(name=>name!==null));for(const module of modules){if(!units.some(unit=>isCompositionRoot(unit.path,module))){findings.push(finding2("module-missing-composition-root",`modules/${module}`,1,`Module ${module} has no composition-root.ts`))}}return findings}function validateProfileContract(value){if(typeof value!=="object"||value===null)return[{field:"$",message:"Profile must be an object"}];const profile=value;const findings=[];if(typeof profile.id!=="string"||profile.id.length===0)findings.push({field:"id",message:"Profile id is required"});if(profile.status!=="supported"&&profile.status!=="experimental")findings.push({field:"status",message:"Profile status must be supported or experimental"});if(!Array.isArray(profile.extensions)||profile.extensions.length===0)findings.push({field:"extensions",message:"At least one extension is required"});if(!Array.isArray(profile.invariants)||profile.invariants.length===0)findings.push({field:"invariants",message:"Profile invariants are required"});if(profile.status==="supported"){const conventions=profile.conventions;const apps=conventions?.apps;const sourceLimits=conventions?.source_limits;if(!conventions||!apps||apps.frontend!=="apps/frontend"||apps.backend!=="apps/backend"||apps.site!=="apps/site"||conventions.modules!=="modules"||conventions.packages!=="packages"||conventions.e2e!=="tests/e2e"){findings.push({field:"conventions",message:"Supported profiles require canonical apps/frontend, apps/backend, apps/site, modules, packages and tests/e2e paths"})}if(!sourceLimits||!Number.isInteger(sourceLimits.warning_lines)||!Number.isInteger(sourceLimits.error_lines)||Number(sourceLimits.warning_lines)!==400||Number(sourceLimits.error_lines)!==800){findings.push({field:"conventions.source_limits",message:"Supported profiles require source-size limits of 400 warning and 800 error lines"})}const commands=profile.commands;if(!commands||typeof commands.test!=="string"||typeof commands.typecheck!=="string"){findings.push({field:"commands",message:"Supported profiles require test and typecheck commands"})}}return findings}function validateAll(units,profile){const findings=[];const resolveImport=importResolver(units,profile);for(const unit of units){const normalizedPath=unit.path.replace(/\\/g,"/");const layer=detectLayer(normalizedPath);const imports=resolvedImports(unit,resolveImport);if(isDashboardBackendApp(normalizedPath)){findings.push(finding2("dashboard-backend-app",unit.path,1,"The local dashboard is frontend-only; move loopback projection runtime code to .agents/dashboard/packages/local-runtime"))}for(const imported of imports){const resolved=imported.resolvedModule??imported.module;const targetLayer=detectLayer(resolved);if(imported.unverified&&isArchitecturalSource(normalizedPath)){findings.push(finding2("unresolved-dynamic-import",unit.path,imported.line,"Dynamic import cannot be resolved statically; use an explicit import or an approved boundary adapter"))}if(isFrontendRuntimeSource(normalizedPath)&&(isServerOnlyDependency(imported.module)||isBackendApp(resolved))){findings.push(finding2("frontend-server-dependency",unit.path,imported.line,`Frontend imports server-only dependency ${imported.module}`))}if(isBackendApp(normalizedPath)&&isUiRuntimeDependency(imported.module)){findings.push(finding2("backend-ui-dependency",unit.path,imported.line,`Backend imports UI runtime dependency ${imported.module}`))}if(isInnerLibrary(normalizedPath)&&importsApplication(imported.module)){findings.push(finding2("inner-layer-app-dependency",unit.path,imported.line,`Inner module/package imports application ${imported.module}`))}if(isPublicSite(normalizedPath)&&importsDashboardOrAgentState(imported.module)){findings.push(finding2("site-dashboard-dependency",unit.path,imported.line,`Public site imports private dashboard or agent state ${imported.module}`))}if(layer==="domain"&&(isFramework(resolved,profile)||resolved.startsWith("node:")||targetLayer!==null&&targetLayer!=="domain")){findings.push(finding2("domain-framework-dependency",unit.path,imported.line,`Domain imports ${imported.module}`))}if(layer==="application"&&["adapters","infrastructure"].includes(targetLayer??"")){findings.push(finding2("application-concrete-adapter",unit.path,imported.line,`Application imports concrete ${targetLayer}`))}if(["domain","application"].includes(layer??"")&&targetLayer==="adapters"){findings.push(finding2("adapter-inward-dependency",unit.path,imported.line,`Inner layer imports adapter ${imported.module}`))}const sourceModule=moduleName(normalizedPath);const targetModule=moduleName(resolved);if(isPackage(normalizedPath)&&targetModule!==null&&!isDashboardRuntimePublicBoundary(normalizedPath,resolved)){findings.push(finding2("package-module-dependency",unit.path,imported.line,`Package imports module ${targetModule}`))}if(sourceModule&&targetModule&&sourceModule!==targetModule&&isPrivateModuleImplementation(resolved)){findings.push(finding2("cross-module-storage",unit.path,imported.line,`Module ${sourceModule} reaches private storage of ${targetModule}`))}if(isSupabasePrivateFunctionImport(normalizedPath,resolved)){findings.push(finding2("supabase-private-function-import",unit.path,imported.line,`Function imports private source of another function ${imported.module}`))}}if(isPublicSite(normalizedPath)&&/\.agents\/(?:config|data|rules|requirements)/.test(unit.content)){findings.push(finding2("site-dashboard-dependency",unit.path,lineOf(unit.content,".agents/"),"Public site reads private .agents state"))}if(isQuery(normalizedPath,unit.content,profile)){for(const pattern of profile.writePortPatterns){if(unit.content.includes(pattern)){findings.push(finding2("query-write-port",unit.path,lineOf(unit.content,pattern),`Query references write capability ${pattern}`))}}const mutation=unit.content.match(/\.(?:insert|update|delete|save|commit|rollback)\s*\(|\.rpc\s*\(\s*["'`](?:delete|remove|update|insert|create|write)/i);if(mutation?.index!==void 0){findings.push(finding2("query-side-effect",unit.path,lineAt(unit.content,mutation.index),`Query contains mutation ${mutation[0].trim()}`))}if(/\b(?:tenant|account)_?id\b/i.test(unit.content)&&!unit.content.includes("AccountContext")){findings.push(finding2("query-missing-account-context",unit.path,lineOf(unit.content,"account"),"Multi-tenant query does not require AccountContext"))}}if(/\/(?:routes?|http)\//.test(normalizedPath)&&/\b(?:db|kysely|prisma|supabase|client)\s*\.\s*(?:from|selectFrom|insertInto|updateTable|deleteFrom|query)\s*\(/i.test(unit.content)){findings.push(finding2("route-direct-database",unit.path,1,"Inbound adapter accesses database directly"))}if(/\/(?:routes?|http)\//.test(normalizedPath)&&unit.content.includes("DatabaseRow")){findings.push(finding2("database-row-leak",unit.path,lineOf(unit.content,"DatabaseRow"),"DatabaseRow leaks through inbound boundary"))}if(/\/commands\//.test(normalizedPath)&&/critical\s*[:=]\s*true/i.test(unit.content)&&!/Idempotenc|idempotency_key/.test(unit.content)){findings.push(finding2("command-missing-idempotency",unit.path,1,"Critical command has no idempotency policy"))}}return[...deduplicate(findings)]}function isFrontendApp(path){return/(?:^|\/)apps\/frontend\//.test(path)}function isDashboardRuntimePublicBoundary(source,target){return source.startsWith(".agents/dashboard/packages/local-runtime/")&&/^\.agents\/dashboard\/modules\/(?:operations|cost-monitor|traceability)\/(?:composition-root\.ts|src\/(?:contracts\.ts|work-board-model\.ts|server\/index\.ts))$/.test(target)}function isFrontendRuntimeSource(path){return isFrontendApp(path)&&/\/src\/.+\.[cm]?[jt]sx?$/.test(path)&&!/\.(?:test|spec)\.[cm]?[jt]sx?$/.test(path)&&!/(?:^|\/)(?:__tests__|test|tests)\//.test(path)}function isBackendApp(path){return/(?:^|\/)apps\/backend\//.test(path)}function isDashboardBackendApp(path){return/(?:^|\/)\.agents\/dashboard\/apps\/backend(?:\/|$)/.test(path)}function isPublicSite(path){return/(?:^|\/)apps\/site\//.test(path)}function isInnerLibrary(path){return/(?:^|\/)(?:modules|packages)\/[^/]+\//.test(path)}function isArchitecturalSource(path){return/(?:^|\/)(?:apps|modules|packages|supabase\/functions)\//.test(path)}function isServerOnlyDependency(module){return module.startsWith("node:")||/^(?:assert|async_hooks|buffer|child_process|cluster|console|constants|crypto|dgram|diagnostics_channel|dns|domain|events|fs|http|http2|https|module|net|os|path|perf_hooks|process|punycode|querystring|readline|repl|stream|string_decoder|sys|timers|tls|trace_events|tty|url|util|v8|vm|wasi|worker_threads|zlib)(?:\/|$)/.test(module)||module==="pg"||module.startsWith("pg/")||module==="hono"||module.startsWith("hono/")||module.startsWith("@hono/")||/^@zaip-ai\/dashboard-(?:operations|cost-monitor|traceability)\/server(?:\/|$)/.test(module)||/^@zaip-ai\/dashboard-local-runtime(?:\/|$)/.test(module)||/^@zaip-ai\/(?:adapters|architecture|cli|context|core|costs|decisions|distribution|eval|specs|tasks|testing)(?:\/|$)/.test(module)}function isUiRuntimeDependency(module){return module==="react"||module.startsWith("react/")||module.startsWith("react-dom")||module==="@zaip-ai/dashboard-ui"||/^@zaip-ai\/dashboard-(?:operations|cost-monitor|traceability)\/react(?:\/|$)/.test(module)}function importsApplication(module){return/(?:^|\/)apps\/(?:frontend|backend|site)(?:\/|$)/.test(module.replace(/\\/g,"/"))||/^@zaip-ai\/dashboard-frontend(?:\/|$)/.test(module)}function importsDashboardOrAgentState(module){const normalized=module.replace(/\\/g,"/");return normalized.includes(".agents/")||/(?:^|\/)\.agents\/dashboard(?:\/|$)/.test(normalized)||/^@zaip-ai\/dashboard-(?:frontend|local-runtime|operations|cost-monitor|traceability)(?:\/|$)/.test(module)}function detectLayer(path){return path.match(/\/(domain|application|adapters|infrastructure)\//)?.[1]??null}function isFramework(module,profile){const packageName=normalizeNpmSpecifier(module);return profile.frameworkPackages.some(name=>packageName===name||packageName.startsWith(`${name}/`))}function normalizeNpmSpecifier(module){const match=module.match(/^npm:((?:@[^/@]+\/)?[^/@]+)(?:@[^/]+)?(\/.*)?$/);return match===null?module:`${match[1]}${match[2]??""}`}function isQuery(path,content,profile){return profile.queryPatterns.some(pattern=>{if(pattern.startsWith("/")||pattern.startsWith("."))return path.includes(pattern);return new RegExp(`\\bclass\\s+[A-Za-z0-9_]*${escapeRegExp(pattern)}\\b`).test(content)})}function escapeRegExp(value){return value.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function moduleName(path){return path.match(/(?:^|\/)modules\/([^/]+)/)?.[1]??null}function isCompositionRoot(path,module){const normalized=normalizePath2(path);return normalized===`modules/${module}/composition-root.ts`||normalized.endsWith(`/modules/${module}/composition-root.ts`)}function isPackage(path){return/(?:^|\/)packages\/[^/]+\//.test(path)}function isPrivateModuleImplementation(path){return/(?:^|\/)modules\/[^/]+\/(?:adapters|application|domain|infrastructure|persistence|repositories|storage)(?:\/|$)/.test(path)}function lineOf(content,value){return lineAt(content,Math.max(0,content.indexOf(value)))}function lineAt(content,index){return content.slice(0,index).split("\n").length}function finding2(rule,path,line,message){return{rule,path,line,message}}function deduplicate(findings){const seen=new Set;return findings.filter(item=>{const key=`${item.rule}:${item.path}:${item.line}`;if(seen.has(key))return false;seen.add(key);return true})}init_src3();init_src();init_src4();init_src5();init_src2();init_src3();init_src();var EVAL_VERSION="4.6.0";async function persistEvalReport(filesystem,report,shortName="offline-suite"){const id=createId("EVAL",shortName);const{year,month}=datedIdParts(id);const path=`.agents/evals/results/${year}/${month}/${id}.json`;const persisted={id,version:EVAL_VERSION,generated_at:new Date().toISOString(),report};await filesystem.writeTextAtomic(path,`${JSON.stringify(persisted,null,2)}
+`);return{status:"closed",backup_branch:branchRelative,backup_worktree:worktreeRelative}})}function discardableIgnored(path){const parts=path.replaceAll("\\","/").split("/");if(parts.some(part=>part===".."||part===""))return false;return parts.some(part=>["node_modules",".turbo",".cache","coverage","dist","build",".vite",".next"].includes(part))||parts.at(-1)?.endsWith(".tsbuildinfo")===true}function assertChild(root,path){const scoped=relative13(root,path);if(!scoped||scoped===".."||scoped.startsWith(`..${sep6}`)||isAbsolute12(scoped))throw new UsageError("Backup path escapes its dedicated local directory")}function digest6(content){return createHash53("sha256").update(content).digest("hex")}async function git4(cwd,args){return(await exec7("git",args,{cwd,shell:false,windowsHide:true,encoding:"utf8",maxBuffer:64*1024*1024,timeout:3e5,env:Object.fromEntries(Object.entries(process.env).filter(([key])=>!/^(GIT_|NODE_OPTIONS$)/i.test(key)))})).stdout.trim()}var exec7;var init_task_workspace_closure=__esm({"src/task-workspace-closure.ts"(){"use strict";init_cli_arguments();init_git_autonomous_worktree();init_lifecycle_manifest_commands();init_run_hierarchy();init_task_workspace_command();exec7=promisify19(execFile19)}});function runTaskWorkspaceAction(parsed,filesystem,composition){if(!parsed.flags.has("close"))return runTaskWorkspaceCommand(parsed,filesystem,composition);return closeTaskWorkspace(filesystem,composition,parsed.positionals[2]??parsed.options.task??"",parsed.options.run??"")}var init_task_workspace_routing=__esm({"src/task-workspace-routing.ts"(){"use strict";init_task_workspace_closure();init_task_workspace_command()}});async function assertActiveDefinitionRun(input){const{area,runId,filesystem,composition}=input;const catalog=await loadAgentCatalog(filesystem);const expected=selectAgent(catalog,{role:area==="prd"?"analyst":"builder",capability:area==="prd"?"prd-creation":"spec-creation"}).agent;if(runId===null){throw new UsageError(`${area.toUpperCase()} definition requires an observed --run or exact-turn Run`)}const observed=await composition.runs.read(runId);const parent=observed.run.parent_run_id===null?null:await composition.runs.read(observed.run.parent_run_id);const invocation2=await resolveRunClientInvocation(filesystem,"codex");const isStandaloneAuthoring=parent===null;const reworkAuthoring=input.reworkAuthoring===true||input.reworkSuccessorPrdId!==void 0;const authorizationRun=parent?.run??observed.run;const definitionAuthorized=authorizationRun.intake?.reason_codes.includes(`definition-${area}-authorized`)??false;if(!reworkAuthoring&&!definitionAuthorized){throw new UsageError(`${area.toUpperCase()} definition requires root intake authorization --definition ${area}`)}if(!reworkAuthoring&&authorizationRun.execution_kind!=="interaction"){throw new UsageError(`${area.toUpperCase()} definition requires a root interaction, not a delivery execution`)}if(!reworkAuthoring&&(authorizationRun.intake?.intent!=="conversation"||authorizationRun.intake.classification_source!=="explicit")){throw new UsageError(`${area.toUpperCase()} definition requires an explicit conversation root intake`)}const expectedAgent=reworkAuthoring&&area==="prd"?[expected.id,"agent-builder"]:[expected.id];const currentInvocationMatches=invocation2.clientThreadId!==null&&invocation2.clientTurnId!==null&&[observed.run,...parent===null?[]:[parent.run]].some(run=>run.client_thread_id===invocation2.clientThreadId&&run.client_turn_id===invocation2.clientTurnId);if(!expectedAgent.includes(observed.run.agent)||observed.run.agent===expected.id&&observed.run.agent_name!==expected.codex_name||observed.run.agent==="agent-builder"&&observed.run.agent_name!=="zaip-agent-builder"||observed.status!=="running"||observed.run.client!=="codex-subagent"||reworkAuthoring&&observed.run.work_type!=="rework"||input.reworkSuccessorPrdId!==void 0&&observed.run.prd_id!==input.reworkSuccessorPrdId||!isStandaloneAuthoring&&(observed.run.invocation_kind!=="delegated"||observed.run.run_purpose!=="execution")||!isStandaloneAuthoring&&(parent.status!=="running"||parent.run.parent_run_id!==null||parent.run.invocation_kind!=="orchestrator"||parent.run.agent!=="agent-orchestrator"||parent.run.agent_name!=="zaip-agent-orchestrator"||parent.run.execution_id!==observed.run.execution_id||parent.run.conversation_id!==observed.run.conversation_id||!currentInvocationMatches)){throw new UsageError(`${area.toUpperCase()} definition requires an active delegated ${expected.codex_name} Run linked to the root orchestration`)}return observed.run.run_id}var init_definition_run_gate=__esm({"src/commands/definition-run-gate.ts"(){"use strict";init_src();init_cli_arguments();init_run_agent_identity();init_run_client_invocation()}});async function retargetOwnerSpecRelease(filesystem,composition,input){const cycle=await readReleaseCycle(filesystem);if(cycle?.state!=="open"||cycle.current_release!==input.to)throw new UsageError("SPEC retarget requires the adopted open release cycle");const raw=JSON.parse(await filesystem.readText(".agents/config/release-cycle.json"));const adoption=raw.history?.at(-1);if(adoption?.mode!=="published-legacy-adoption"||adoption.from!==input.from||adoption.to!==input.to||adoption.owner_spec_id!==input.specId||adoption.actor_run_id!==input.actorRunId||!/^[a-f0-9]{40}$/i.test(adoption.main_sha??"")||!Number.isFinite(Date.parse(adoption.adopted_at??"")))throw new UsageError("SPEC retarget does not match the canonical adoption record");const{spec}=await composition.specs.read(input.specId);const{execution}=await composition.executions.read(adoption.owner_execution_id);const{task:releaseTask}=await composition.tasks.read(adoption.release_task_id);const actor=await composition.runs.read(input.actorRunId);const macro=await composition.runs.read(adoption.owner_run_id);const actorTaskId=actor.run.task_id;if(spec.status!=="active"||spec.target_release!==input.from||spec.plan_ref?.execution_id!==execution.id||spec.plan_ref?.hash!==execution.plan_hash||execution.status!=="running"||execution.origin.type!=="spec"||execution.origin.spec_id!==spec.id||!execution.dag.nodes.some(node=>node.task_id===actorTaskId)||!execution.dag.nodes.some(node=>node.task_id===releaseTask.id)||releaseTask.status!=="planned"||actor.status!=="running"||actor.run.entrypoint!=="task"||actor.run.agent!=="agent-orchestrator"||actor.run.run_role!=="subagent"||actor.run.parent_run_id!==macro.run.run_id||actor.run.spec_id!==spec.id||actor.run.execution_id!==execution.id||macro.status!=="running"||macro.run.entrypoint!=="spec"||macro.run.agent!=="agent-orchestrator"||macro.run.parent_run_id!==null||macro.run.spec_id!==spec.id||macro.run.execution_id!==execution.id)throw new UsageError("SPEC retarget actor, macro Run and DAG lineage do not match");const specAfter=await composition.specs.retargetPublishedRelease(spec.id,{from:input.from,to:input.to,adoptionMainSha:adoption.main_sha,actorRunId:input.actorRunId,adoptedAt:adoption.adopted_at});return{spec:specAfter,artifact_path:composition.specs.path(spec.id)}}var init_spec_release_retarget=__esm({"src/spec-release-retarget.ts"(){"use strict";init_cli_arguments();init_release_cycle()}});import{createHash as createHash54,randomBytes as randomBytes2}from"node:crypto";function lifecycleActionAlias(area,action){if(action===void 0)return action;const normalized=action.normalize("NFKD").replace(/[\u0300-\u036f]/g,"").toLocaleLowerCase();if(area==="prd"||area==="spec"){if(["pronto","pronto-para-executar","ready-to-execute"].includes(normalized))return"ready";if(["finalizar","finalize","concluir","conclude"].includes(normalized))return"finalize"}return normalized}function resolveMacroFinalizeAction(status){if(status==="draft"||status==="ready")return"ready";if(status==="active"||status==="verifying")return"continue";return null}function maxCostUsdOption(value){if(value===void 0)return null;const parsed=Number(value);if(!Number.isFinite(parsed)||parsed<0){throw new UsageError("--max-cost-usd must be a non-negative number")}return parsed}async function finalizeMacro(area,parsed,composition,makeReady){const id=requiredEntityId(parsed,2,`${area.toUpperCase()} id`);const entity=area==="prd"?(await composition.prds.read(id)).prd:(await composition.specs.read(id)).spec;const resolution=resolveMacroFinalizeAction(entity.status);if(resolution==="ready")return makeReady();if(resolution==="continue"){return{[area]:entity,next_action:"continue",message:`${area.toUpperCase()} ${id} remains active; finish its Tasks and parent gates before deliver`}}throw new UsageError(`${area.toUpperCase()} ${id} cannot finalize from status ${entity.status}`)}async function createPrdWithOptionalPlan(input){const{parsed,filesystem,composition,creationRunId}=input;requireOptions(parsed.options,["title","short-name","problem"]);const plan=parsed.options.plan===void 0?null:await readPreparedPlan(filesystem,parsed);if(plan!==null&&plan.blueprints.specs===void 0){throw new UsageError("Composite PRD creation requires technical SPEC blueprints; create canonical SPECs first, then use prd prepare for legacy plans")}if(plan!==null&&parsed.options.id===void 0){throw new UsageError("Composite PRD creation requires --id matching the PreparedPlan source")}if(plan!==null&&(plan.source.type!=="prd"||plan.source.prd_id!==parsed.options.id)){throw new UsageError(`Composite PRD plan must have source prd ${parsed.options.id}`)}const specIds=plan===null?[]:specIdsForPrdPlanV2(plan,parsed.options.id);const specCreationRunId=plan===null?null:await assertActiveDefinitionRun({area:"spec",runId:parsed.options["spec-run"]??null,filesystem,composition});if(plan!==null){await assertPreparedPlanReferences(filesystem,plan);await Promise.all((plan.blueprints.specs??[]).map(blueprint=>assertSpecImplementationMatchesProject(blueprint.implementation,filesystem,composition.layout)));const occupied=await Promise.all([filesystem.exists(composition.prds.path(parsed.options.id)),...specIds.map(id=>filesystem.exists(composition.specs.path(id)))]);if(occupied.some(Boolean)){throw new UsageError("Composite PRD creation requires unused PRD and SPEC artifact ids")}}const prd=await composition.prds.create({...parsed.options.id===void 0?{}:{id:parsed.options.id},title:parsed.options.title,targetRelease:await releaseTargetForDraft(filesystem,parsed.options["target-release"]),shortName:parsed.options["short-name"],problem:parsed.options.problem,audiences:csvOption(parsed.options.audiences),outcomes:csvOption(parsed.options.outcomes),constraints:csvOption(parsed.options.constraints),nonGoals:csvOption(parsed.options["non-goals"]),creationRunId});if(plan===null)return{prd,artifact_path:composition.prds.path(prd.id)};const createdFiles=new Map([[composition.prds.path(prd.id),await filesystem.readText(composition.prds.path(prd.id))]]);const specBlueprints=new Map((plan.blueprints.specs??[]).map(blueprint=>[blueprint.id,blueprint]));try{const specs=[];for(const specId of specIds){const blueprint=specBlueprints.get(specId);if(blueprint===void 0){throw new UsageError(`Composite PRD plan lacks technical SPEC blueprint ${specId}`)}const spec=await composition.specs.create({id:specId,prdId:prd.id,title:blueprint.title,targetRelease:prd.target_release,shortName:blueprint.short_name,objective:blueprint.objective,includedScope:blueprint.included_scope,excludedScope:blueprint.excluded_scope,requirementIds:blueprint.requirement_ids,acceptanceIds:blueprint.acceptance_ids,implementation:blueprint.implementation,creationRunId:specCreationRunId});specs.push(spec);const path=composition.specs.path(spec.id);createdFiles.set(path,await filesystem.readText(path))}const prepared=await composition.prds.setPreparedPlan(prd.id,plan);return{prd:prepared,specs,artifact_path:composition.prds.path(prepared.id),plan_hash:plan.hash,spec_blueprints:plan.blueprints.specs,materialized:false}}catch(error51){const recovered=await rollbackCompositeCreation(filesystem,createdFiles);if(recovered.length>0){throw new AggregateError([error51],`Composite PRD creation rolled back; concurrent edits were preserved at ${recovered.join(", ")}`)}throw error51}}async function createPrdRework(input){const{parsed,composition,creationRunId}=input;requireOptions(parsed.options,["title","short-name","problem"]);const sourceId=requiredPosition(parsed.positionals,2,"Cancelled PRD id");const prd=await composition.prds.createReworkSuccessor(sourceId,{...parsed.options.id===void 0?{}:{id:parsed.options.id},title:parsed.options.title,...parsed.options["target-release"]===void 0?{}:{targetRelease:parsed.options["target-release"]},shortName:parsed.options["short-name"],problem:parsed.options.problem,audiences:csvOption(parsed.options.audiences),outcomes:csvOption(parsed.options.outcomes),constraints:csvOption(parsed.options.constraints),nonGoals:csvOption(parsed.options["non-goals"]),creationRunId});return{prd,artifact_path:composition.prds.path(prd.id),rework_of_prd_id:sourceId}}async function createSpecWithOptionalPlan(input){const{parsed,filesystem,composition,creationRunId}=input;requireOptions(parsed.options,["title","short-name","objective"]);const plan=parsed.options.plan===void 0?null:await readPreparedPlan(filesystem,parsed);if(plan!==null&&parsed.options.id===void 0){throw new UsageError("Composite SPEC creation requires --id matching the PreparedPlan source")}if(plan!==null&&(plan.source.type!=="spec"||plan.source.spec_id!==parsed.options.id)){throw new UsageError(`Composite SPEC plan must have source spec ${parsed.options.id}`)}const sourceSpecId=plan?.source.type==="spec"?plan.source.spec_id:null;const blueprint=plan===null||sourceSpecId===null?null:(plan.blueprints.specs??[]).find(candidate=>candidate.id===sourceSpecId);if(plan!==null){if(blueprint===void 0||blueprint===null){throw new UsageError(`Composite SPEC plan lacks technical SPEC blueprint ${sourceSpecId}`)}await assertPreparedPlanReferences(filesystem,plan);await assertSpecImplementationMatchesProject(blueprint.implementation,filesystem,composition.layout);if(await filesystem.exists(composition.specs.path(parsed.options.id))){throw new UsageError("Composite SPEC creation requires an unused SPEC artifact id")}}const parentRelease=parsed.options.prd===void 0?null:(await composition.prds.read(parsed.options.prd)).prd.target_release;const requestedRelease=parsed.options["target-release"]??parentRelease??void 0;if(parentRelease!==null&&parsed.options["target-release"]!==void 0&&parsed.options["target-release"]!==parentRelease)throw new UsageError("SPEC target release must match its parent PRD");const spec=await composition.specs.create({...parsed.options.id===void 0?{}:{id:parsed.options.id},...parsed.options.prd===void 0?{}:{prdId:parsed.options.prd},title:blueprint?.title??parsed.options.title,targetRelease:await releaseTargetForDraft(filesystem,requestedRelease),shortName:blueprint?.short_name??parsed.options["short-name"],objective:blueprint?.objective??parsed.options.objective,includedScope:blueprint?.included_scope??csvOption(parsed.options.scope),excludedScope:blueprint?.excluded_scope??csvOption(parsed.options["out-of-scope"]),requirementIds:blueprint?.requirement_ids??csvOption(parsed.options.requirements),acceptanceIds:blueprint?.acceptance_ids??csvOption(parsed.options.acceptance),...blueprint===null||blueprint===void 0?{}:{implementation:blueprint.implementation},creationRunId});if(plan===null)return{spec,artifact_path:composition.specs.path(spec.id)};const path=composition.specs.path(spec.id);const original=await filesystem.readText(path);try{const prepared=await composition.specs.setPreparedPlan(spec.id,plan);return{spec:prepared,artifact_path:composition.specs.path(prepared.id),plan_hash:plan.hash,materialized:false}}catch(error51){const recovered=await rollbackCompositeCreation(filesystem,new Map([[path,original]]));if(recovered.length>0){throw new AggregateError([error51],`Composite SPEC creation rolled back; concurrent edits were preserved at ${recovered.join(", ")}`)}throw error51}}async function rollbackCompositeCreation(filesystem,createdFiles){const recovered=[];for(const[path,original]of createdFiles){if(!await filesystem.exists(path))continue;const digest7=createHash54("sha256").update(`${path}\0${randomBytes2(16).toString("hex")}`).digest("hex").slice(0,24);const recoveryPath=`.local/recovery/composite-create/${digest7}.md`;await filesystem.moveFileAtomic(path,recoveryPath);if(await filesystem.readText(recoveryPath)===original){await filesystem.removeFile(recoveryPath)}else recovered.push(recoveryPath)}return recovered}var init_v2_lifecycle_support=__esm({"src/commands/v2-lifecycle-support.ts"(){"use strict";init_src6();init_cli_arguments();init_prepared_plan_v22();init_release_cycle();init_definition_run_gate()}});function taskFirstCommandPlan(task,parsed,executionId,timeZone){return createTaskFirstPreparedPlan({task,modelSignals:taskModelSignalsOption(parsed.options["model-signals"]),executionId:executionId??createId("RUN",task.short_name,{timeZone}).replace(/^RUN-/,"EXEC-"),preparedAt:new Date().toISOString(),policy:defaultExecutionPolicy(task.risk,{independent_branches:parsed.flags.has("independent-branches"),max_cost_usd:maxCostUsdOption(parsed.options["max-cost-usd"])}),...parsed.options["requirement-impact"]===void 0?{}:{requirementImpactReason:parsed.options["requirement-impact"]}})}var init_task_first_command_plan=__esm({"src/task-first-command-plan.ts"(){"use strict";init_src();init_v2_lifecycle_support();init_prepared_plan_v22();init_run_budget()}});async function runTaskStartCommand(id,mode,composition,lifecycle){const snapshot=await lifecycle.startTaskWithSnapshot(id,mode);return{...snapshot,artifact_path:composition.tasks.path(id)}}var init_task_start_command=__esm({"src/task-start-command.ts"(){"use strict"}});function macroExecutionContinuation(executionId){return{required:true,execution_id:executionId,implementation_started:false,user_confirmation_required:false,instruction:"Continue execution now using the configured runtime or native DAG orchestration. Materialization and activation do not implement the product. Do not end the turn or ask the user to continue after preparation; run eligible Tasks and then parental verification and finalization. Recover from eligible failures automatically under the frozen Task autonomy profile and ledger, without resetting counters or requesting renewed permission. Wait for active work instead of ending the flow. Stop only for a real blocker, human cancellation, or a terminal failure after permitted recovery; preserve scope, authority and the DAG failure policy."}}var init_macro_execution_continuation=__esm({"src/macro-execution-continuation.ts"(){"use strict"}});async function resolveTaskFirstExecutionId(explicitExecutionId,taskId,listExecutions){if(explicitExecutionId!==void 0)return explicitExecutionId;const deliveryIntake=(await listExecutions()).find(execution=>execution.kind==="delivery"&&execution.plan_hash===null&&execution.origin.type==="task"&&execution.origin.task_id===taskId);return deliveryIntake?.id}function assertTaskFirstExecutable(status,kind,id){if(status==="planned"||status==="executing"||status==="running")return;const guidance=status==="blocked"?"resume the Task before starting a new orchestrator agent call":status==="failed"?"rework the Task before starting a new orchestrator agent call":"terminal work is immutable";throw new UsageError(`${kind} ${id} cannot execute from status ${status}; ${guidance}`)}async function existingTaskFirstMaterialization(plan,composition){if(plan.source.type!=="task")return null;const existing=await Promise.all([composition.tasks.read(plan.source.task_id).catch(()=>null),composition.executions.read(plan.execution_id).catch(()=>null)]);const task=existing[0]?.task;const execution=existing[1]?.execution;if(task===void 0||execution===void 0||task.plan_hash!==plan.hash||execution.plan_hash!==plan.hash||!execution.dag.nodes.some(node=>node.task_id===task.id&&node.change_id===task.change_id)){return null}const change=await composition.changes.read(task.change_id).catch(()=>null);if(change===null||change.change.plan_hash!==plan.hash)return null;const reusedPaths=[composition.executions.path(execution.id),composition.changes.path(change.change.id),composition.tasks.path(task.id)];return{execution,changes:[change.change],tasks:[task],created_paths:[],reused_paths:reusedPaths}}async function ensureTaskOrchestratorRun(task,changeId,executionId,parsed,filesystem,composition){const runs=await composition.runs.list();const existing=runs.filter(candidate=>candidate.finished===null&&effectiveRunV2Role(candidate.run)==="orchestrator"&&candidate.run.parent_run_id===null&&candidate.run.task_id===task.id&&candidate.run.execution_id===executionId).sort((left,right)=>right.run.occurred_at.localeCompare(left.run.occurred_at))[0];if(existing!==void 0)return existing.run;const invocation2=await resolveRunClientInvocation(filesystem,"codex");const intake2=await findIntakeForExactTurn(composition,"codex",invocation2);if(invocation2.clientTurnId!==null){await composition.executions.claimClientTurn(executionId,invocation2.clientTurnId)}const source=intake2?.run;const developerIdentity=await resolveDeveloperIdentityForRoot(filesystem);const writer=await composition.runs.start({...parsed.options.run===void 0?{}:{id:parsed.options.run},shortName:task.short_name,phase:"execution",runRole:"orchestrator",runPurpose:"orchestration",requiresFinalizer:true,executionKind:"delivery",executionEligibility:[],entrypoint:"task",workType:source?.work_type??"new",client:"codex",agent:"agent-orchestrator",agentName:"zaip-agent-orchestrator",provider:source?.provider??null,model:parsed.options.model??source?.model??"unknown",reasoningEffort:source?.reasoning_effort??null,...invocation2,conversationId:source?.conversation_id??createConversationId(task.short_name),executionId,taskId:task.id,changeId,developerIdentity});return writer.started}async function ensureTaskDraftChange(composition,task){const existing=await composition.changes.read(task.change_id).catch(()=>null);if(existing!==null)return existing.change;return composition.changes.createDraft({id:task.change_id,title:task.title,risk:task.risk,taskId:task.id,requirementIds:task.requirement_ids,acceptanceIds:task.acceptance_ids})}function plannedChangeFromBlueprint(blueprint,plan,taskId){return{schema_version:2,id:blueprint.id,revision:1,title:blueprint.title,status:"planned",risk:blueprint.risk,source:blueprint.source,requirement_ids:[...blueprint.requirement_ids],acceptance_ids:[...blueprint.acceptance_ids],requirement_impact:blueprint.requirement_impact,task_ids:[taskId],plan_revision:plan.revision,plan_hash:plan.hash,created_at:plan.prepared_at,updated_at:plan.prepared_at,started_at:null,finished_at:null,result:null}}function materializationOutput(result2,composition,continueExecution=false){return{execution:result2.execution,...continueExecution?{continuation:macroExecutionContinuation(result2.execution.id)}:{},changes:result2.changes,tasks:result2.tasks,artifact_path:composition.executions.path(result2.execution.id),change_paths:result2.changes.map(change=>composition.changes.path(change.id)),task_paths:result2.tasks.map(task=>composition.tasks.path(task.id)),created_paths:result2.created_paths,reused_paths:result2.reused_paths}}async function preparedPlanForReadyOrExecute(entity,kind,id,materializer){if(entity.prepared_plan!==null)return entity.prepared_plan;if(entity.plan_ref!==null)return materializer.readPreparedPlan(entity.plan_ref.execution_id);throw new UsageError(`${kind} is not prepared: ${id}`)}function executionOutput(result2,composition){return materializationOutput(result2,composition,true)}var init_v2_lifecycle_materialization=__esm({"src/commands/v2-lifecycle-materialization.ts"(){"use strict";init_src5();init_cli_arguments();init_conversation_intake();init_developer_identity_command();init_macro_execution_continuation();init_run_client_invocation()}});function selectReadyQueueItem(input){const order2=manualPriority(input.priority);const materialized=new Set(input.executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id)));const completed=new Set(input.tasks.filter(task2=>task2.status==="completed").map(task2=>task2.id));const changes=new Map(input.changes.map(change=>[change.id,change]));const byOrder=(left,right)=>{const leftRank=order2.get(left.id);const rightRank=order2.get(right.id);if(leftRank!==void 0||rightRank!==void 0){if(leftRank===void 0)return 1;if(rightRank===void 0)return-1;if(leftRank!==rightRank)return leftRank-rightRank}return left.created_at.localeCompare(right.created_at)||left.id.localeCompare(right.id)};const prd=input.prds.filter(item=>item.status==="ready").sort(byOrder)[0];if(prd!==void 0)return{kind:"prd",id:prd.id};const spec=input.specs.filter(item=>item.status==="ready"&&item.prd_id===null).sort(byOrder)[0];if(spec!==void 0)return{kind:"spec",id:spec.id};const task=input.tasks.filter(item=>{const change=changes.get(item.change_id);return item.status==="planned"&&item.started_at===null&&(item.attempt_count??0)===0&&!materialized.has(item.id)&&item.prepared_plan===void 0!==(item.plan_ref===void 0)&&item.depends_on.every(id=>completed.has(id))&&change?.source.type==="task"&&change.source.task_id===item.id&&change.task_ids.includes(item.id)}).sort(byOrder)[0];return task===void 0?null:{kind:"task",id:task.id}}function manualPriority(value){if(typeof value!=="object"||value===null||!("schema_version"in value))return new Map;const priority2=value;if(priority2.schema_version!==1||!Array.isArray(priority2.item_ids)||!priority2.item_ids.every(id=>typeof id==="string"&&/^(PRD|SPEC|TASK)-[A-Z0-9-]+$/.test(id))||new Set(priority2.item_ids).size!==priority2.item_ids.length)return new Map;return new Map(priority2.item_ids.map((id,index)=>[id,index]))}var init_ready_queue_selection=__esm({"src/ready-queue-selection.ts"(){"use strict"}});async function readyNextItem(filesystem,composition){const priorityPath=".agents/dashboard/work-priority.json";const priorityText=await filesystem.exists(priorityPath)?await filesystem.readText(priorityPath):"null";const[prds,specs,tasks,changes,executions]=await Promise.all([composition.prds.list(),composition.specs.list(),composition.tasks.list(),composition.changes.list(),composition.executions.list()]);let priority2=null;try{priority2=JSON.parse(priorityText)}catch{}const selected=selectReadyQueueItem({prds,specs,tasks,changes,executions,priority:priority2});if(selected===null)return{selected:null,reason:"no_eligible_work"};if(selected.kind==="task"){const task=tasks.find(item=>item.id===selected.id);if(task===void 0)throw new UsageError(`Ready Task disappeared: ${selected.id}`);const plan=task.prepared_plan??(task.plan_ref===void 0?null:await composition.materializer.readPreparedPlan(task.plan_ref.execution_id));if(plan===null||plan.source.type!=="task"||plan.source.task_id!==task.id||plan.hash!==task.plan_hash)throw new UsageError(`Ready Task has an inconsistent PreparedPlan: ${task.id}`);await assertPreparedPlanReferences(filesystem,plan)}else{const entity=selected.kind==="prd"?prds.find(item=>item.id===selected.id):specs.find(item=>item.id===selected.id);if(entity===void 0)throw new UsageError(`Ready item disappeared: ${selected.id}`);const plan=await preparedPlanForReadyOrExecute(entity,selected.kind==="prd"?"PRD":"SPEC",selected.id,composition.materializer);if(selected.kind==="prd"&&(plan.source.type!=="prd"||plan.source.prd_id!==selected.id)||selected.kind==="spec"&&(plan.source.type!=="spec"||plan.source.spec_id!==selected.id))throw new UsageError(`Ready ${selected.kind.toUpperCase()} has an inconsistent PreparedPlan: ${selected.id}`);await assertPreparedPlanReferences(filesystem,plan)}return{selected}}var init_v2_ready_queue=__esm({"src/commands/v2-ready-queue.ts"(){"use strict";init_cli_arguments();init_prepared_plan_v22();init_ready_queue_selection();init_v2_lifecycle_materialization()}});async function runTaskV2Command(action,parsed,filesystem,composition,lifecycle){if(action==="ready-next")return readyNextItem(filesystem,composition);if(action==="amend-scopes")return amendTaskScopes(parsed,filesystem,composition);if(action==="create"){requireOptions(parsed.options,["title","short-name","objective","requirements","acceptance"]);const timeZone=composition.layout.project.timezone;const taskId=parsed.options.id??createId("TASK",parsed.options["short-name"],{timeZone});const changeId=parsed.options.change??createId("CHG",parsed.options["short-name"],{timeZone});const requirementIds=csvOption(parsed.options.requirements);const acceptanceIds=csvOption(parsed.options.acceptance);const risk2=riskOption(parsed.options.risk);const shortName=parsed.options["short-name"];const{task,change}=await createTaskAndChangeAtomically(filesystem,composition,{id:taskId,changeId,title:parsed.options.title,shortName,objective:parsed.options.objective,targetRelease:await releaseTargetForDraft(filesystem,parsed.options["target-release"]),risk:risk2,priority:priorityOption(parsed.options.priority),owner:parsed.options.owner??null,requirementIds,acceptanceIds,dependsOn:csvOption(parsed.options["depends-on"]),writeScopes:csvOption(parsed.options["write-scopes"]),assuranceRiskSignals:taskAssuranceRiskSignalsOption(parsed.options["assurance-risk-signals"])});return{task,change,artifact_path:composition.tasks.path(task.id),change_path:composition.changes.path(change.id)}}if(action==="prepare"){const id2=requiredEntityId(parsed,2,"Task id");const current=await composition.tasks.read(id2);if(current.task.status==="planned"&&current.task.prepared_plan!==void 0){await assertPreparedPlanReferences(filesystem,current.task.prepared_plan);return{task:current.task,artifact_path:composition.tasks.path(id2),plan_hash:current.task.prepared_plan.hash}}if(parsed.options.plan===void 0&&current.task.depends_on.length>0){throw new UsageError("task prepare with dependencies requires --plan containing the complete DAG")}const timeZone=composition.layout.project.timezone;const executionId=await resolveTaskFirstExecutionId(parsed.options.execution,current.task.id,()=>composition.executions.list());const plan=parsed.options.plan===void 0?taskFirstCommandPlan(current.task,parsed,executionId,timeZone):await readPreparedPlan(filesystem,parsed);await assertPreparedPlanReferences(filesystem,plan);const task=await composition.tasks.setPreparedPlan(id2,plan);const change=plan.blueprints.changes.find(candidate=>candidate.id===task.change_id);if(change===void 0)throw new UsageError(`Prepared plan does not contain Change ${task.change_id}`);await ensureTaskDraftChange(composition,task);await composition.changes.promoteDraft(task.change_id,plannedChangeFromBlueprint(change,plan,task.id));return{task,artifact_path:composition.tasks.path(id2),plan_hash:plan.hash}}if(action==="recover-intake"){requireOptions(parsed.options,["execution"]);const taskId=requiredEntityId(parsed,2,"Task id");const{task}=await composition.tasks.read(taskId);if(task.status!=="executing"||task.plan_ref===void 0)throw new UsageError(`Task has no active canonical plan reference: ${taskId}`);const plan=await composition.materializer.readPreparedPlan(task.plan_ref.execution_id);if(plan.hash!==task.plan_ref.hash||plan.source.type!=="task"||plan.source.task_id!==task.id)throw new UsageError(`Task plan reference cannot be resolved canonically: ${taskId}`);const intake2=(await composition.executions.read(parsed.options.execution)).execution;if(intake2.kind!=="delivery"||intake2.origin.type!=="task"||intake2.origin.task_id!==task.id)throw new UsageError(`Delivery intake does not belong to Task: ${intake2.id}`);const current=intake2;const nodes=plan.dag.nodes.map(node=>{const blueprint=plan.blueprints.tasks.find(candidate=>candidate.id===node.task_id);if(blueprint===void 0)throw new UsageError(`Prepared plan DAG lacks Task blueprint: ${node.task_id}`);return{task_id:node.task_id,change_id:blueprint.change_id,depends_on:node.depends_on}});const planned={...current,kind:"delivery",status:"planned",status_reason:null,plan_revision:plan.revision,plan_hash:plan.hash,policy:plan.policy,dag:{nodes,topological_order:plan.dag.topological_order}};const execution=await composition.executions.promoteDeliveryIntake(current.id,planned);return{task,execution,artifact_path:composition.executions.path(execution.id),recovered:true}}if(action==="execute"){const requestedTaskId=parsed.positionals[2];const plan=parsed.options.plan!==void 0?await readPreparedPlan(filesystem,parsed):await preparedTaskPlan(composition.tasks,composition.materializer,requiredEntityId(parsed,2,"Task id"));await assertPreparedPlanReferences(filesystem,plan);if(plan.source.type!=="task"){throw new UsageError("task execute requires a task-first prepared plan")}if(requestedTaskId!==void 0&&requestedTaskId!==plan.source.task_id)throw new UsageError("Requested Task does not match the prepared plan source");const currentTask=await composition.tasks.read(plan.source.task_id);await assertCurrentReleaseForExecution(filesystem,currentTask.task.target_release,"Task");if(composition.layout.projectConfig?.assurance?.require_final_commit===true)await assertGitDeliveryReady(filesystem.root);await assertTaskExecutionIntakeCompatibleBeforeMutation(filesystem,composition,plan.source.task_id,plan.execution_id);const materialized=await existingTaskFirstMaterialization(plan,composition)??await composition.materializer.execute(plan);const taskId=plan.source.task_id;const task=materialized.tasks.find(candidate=>candidate.id===taskId);if(task===void 0){throw new UsageError(`Task-first plan did not materialize its source Task ${taskId}`)}const change=materialized.changes.find(candidate=>candidate.id===task.change_id);if(change===void 0){throw new UsageError(`Task-first plan did not materialize Change ${task.change_id}`)}assertTaskFirstExecutable(task.status,"Task",task.id);assertTaskFirstExecutable(materialized.execution.status,"Execution",materialized.execution.id);assertTaskFirstExecutable(change.status,"Change",change.id);const run=await ensureTaskOrchestratorRun(task,change.id,materialized.execution.id,parsed,filesystem,composition);let execution=(await composition.executions.read(materialized.execution.id)).execution;if(execution.status==="planned"){execution=await composition.executions.transition(execution.id,"running")}let activeChange=(await composition.changes.read(change.id)).change;if(activeChange.status==="planned"){activeChange=await composition.changes.transition(activeChange.id,"executing")}let activeTask=(await composition.tasks.read(task.id)).task;if(activeTask.status==="planned"){activeTask=await lifecycle.startTask(activeTask.id)}return{...materializationOutput(materialized,composition),execution,changes:[activeChange],tasks:[activeTask],run,run_path:composition.runs.path(run.run_id)}}if(action==="list"){const[tasks,changes]=await Promise.all([composition.tasks.list(),parsed.options.prd===void 0&&parsed.options.spec===void 0?Promise.resolve([]):composition.changes.list()]);const relatedChangeIds=new Set(changes.filter(change=>(parsed.options.prd===void 0||change.source.type==="prd"&&change.source.prd_id===parsed.options.prd)&&(parsed.options.spec===void 0||change.source.type==="spec"&&change.source.spec_id===parsed.options.spec||change.source.type==="prd"&&change.source.spec_id===parsed.options.spec)).map(change=>change.id));const filtered=tasks.filter(task=>parsed.options.prd===void 0&&parsed.options.spec===void 0||relatedChangeIds.has(task.change_id));return listLifecyclePage(filtered,parsed).map(task=>({task:compactPreparedEntity(task),artifact_path:composition.tasks.path(task.id)}))}if(action==="next"){const[tasks,executions]=await Promise.all([composition.tasks.list(),composition.executions.list()]);const completed=new Set(tasks.filter(task=>task.status==="completed").map(task=>task.id));const materialized=new Set(executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id)));return tasks.filter(task=>task.status==="planned"&&materialized.has(task.id)&&task.depends_on.every(dependency=>completed.has(dependency))).map(task=>({task,artifact_path:composition.tasks.path(task.id)}))}const id=requiredEntityId(parsed,2,"Task id");if(action==="show"){return{...await composition.tasks.read(id),artifact_path:composition.tasks.path(id)}}if(action==="start"||action==="resume"||action==="rework"){return runTaskStartCommand(id,action,composition,lifecycle)}if(action==="verify"){const task=await lifecycle.verifyTask(id,csvOption(parsed.options.evidence));return{task,artifact_path:composition.tasks.path(id)}}if(["block","complete","fail"].includes(action??"")){throw new UsageError("Task terminal status is applied only by Gui through run finish")}if(action==="cancel"){const cancelled_run_ids=await cancelTaskRunsForHuman(id,composition,parsed);const result2=await lifecycle.cancelTask(id,"Explicit human cancellation",null);return{...result2,cancelled_run_ids,artifact_path:composition.tasks.path(id)}}throw new UsageError(`Unknown V2 Task action: ${action??""}`)}var init_v2_lifecycle_task=__esm({"src/commands/v2-lifecycle-task.ts"(){"use strict";init_src();init_cli_arguments();init_execution_intake_compatibility();init_git_delivery_preflight();init_prepared_plan_v22();init_release_cycle();init_v2_run_cancellation_and_aggregate();init_task_assurance_options();init_task_change_creation();init_task_first_command_plan();init_task_scope_amendment();init_task_start_command();init_v2_lifecycle_materialization();init_v2_ready_queue()}});async function runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle){action=lifecycleActionAlias(area,action);if(area==="prd")return runPrdV2Command(action,parsed,filesystem,composition,lifecycle);if(area==="spec")return runSpecV2Command(action,parsed,filesystem,composition,lifecycle);return runTaskV2Command(action,parsed,filesystem,composition,lifecycle)}async function runPrdV2Command(action,parsed,filesystem,composition,lifecycle){if(action==="finalize"){return finalizeMacro("prd",parsed,composition,()=>runLifecycleV2Command("prd","ready",parsed,filesystem,composition,lifecycle))}if(action==="create"){const creationRunId=await creationRunIdForCurrentTurn(parsed,filesystem,composition);return createPrdWithOptionalPlan({parsed,filesystem,composition,creationRunId})}if(action==="rework"){return createPrdRework({parsed,composition,creationRunId:await creationRunIdForCurrentTurn(parsed,filesystem,composition)})}if(action==="list"){return listLifecyclePage(await composition.prds.list(),parsed).map(prd=>({prd:compactPreparedEntity(prd),artifact_path:composition.prds.path(prd.id)}))}const id=requiredEntityId(parsed,2,"PRD id");if(action==="show"){return{...await composition.prds.read(id),artifact_path:composition.prds.path(id)}}if(action==="prepare"){const plan=await readPreparedPlan(filesystem,parsed);await assertPreparedPlanReferences(filesystem,plan);const prd=await composition.prds.setPreparedPlan(id,plan);const specs=await Promise.all(specIdsForPrdPlanV2(plan,id).map(async specId=>(await composition.specs.read(specId)).spec));return{prd,specs,artifact_path:composition.prds.path(id),plan_hash:plan.hash}}if(action==="ready"){const current=await composition.prds.read(id);await assertCurrentReleaseForExecution(filesystem,current.prd.target_release,"PRD");const plan=await preparedPlanForReadyOrExecute(current.prd,"PRD",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.prd.status)){throw new UsageError(`PRD cannot move to ready from status ${current.prd.status}: ${id}`)}const selectedSpecs=await Promise.all(specIdsForPrdPlanV2(plan,id).map(async specId=>(await composition.specs.read(specId)).spec));for(const spec of selectedSpecs){await assertCurrentReleaseForExecution(filesystem,spec.target_release,"SPEC");if(!new Set(["draft","ready"]).has(spec.status)){throw new UsageError(`SPEC cannot move to ready from status ${spec.status}: ${spec.id}`)}await assertSpecImplementationMatchesProject(spec.implementation,filesystem,composition.layout)}const materialized=materializationOutput(await composition.materializer.execute(plan),composition);const prd=current.prd.status==="draft"?await composition.prds.transition(id,"ready"):current.prd;const specs=await Promise.all(selectedSpecs.map(spec=>spec.status==="draft"?composition.specs.transition(spec.id,"ready"):spec));return{...materialized,prd,specs,artifact_path:composition.prds.path(id)}}if(action==="execute"){const current=await composition.prds.read(id);await assertCurrentReleaseForExecution(filesystem,current.prd.target_release,"PRD");const plan=await preparedPlanForReadyOrExecute(current.prd,"PRD",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.prd.status)){throw new UsageError(`PRD cannot execute from status ${current.prd.status}: ${id}`)}const selectedSpecs=await Promise.all(specIdsForPrdPlanV2(plan,id).map(async specId=>(await composition.specs.read(specId)).spec));for(const spec of selectedSpecs){await assertCurrentReleaseForExecution(filesystem,spec.target_release,"SPEC");if(!new Set(["draft","ready"]).has(spec.status)){throw new UsageError(`SPEC cannot execute from status ${spec.status}: ${spec.id}`)}await assertSpecImplementationMatchesProject(spec.implementation,filesystem,composition.layout)}const output2=executionOutput(await composition.materializer.execute(plan),composition);const specs=await Promise.all(selectedSpecs.map(async selectedSpec=>{let spec=selectedSpec;if(spec.status==="draft")spec=await composition.specs.transition(spec.id,"ready");return spec.status==="ready"?composition.specs.transition(spec.id,"active"):spec}));if(current.prd.status==="draft")await composition.prds.transition(id,"ready");const preparedPrd=(await composition.prds.read(id)).prd;if(preparedPrd.status==="ready")await composition.prds.transition(id,"active");return{...output2,specs}}if(action==="deliver"){throw new UsageError("PRD terminal status is applied only by Gui through run finish")}if(action==="block"||action==="fail"){throw new UsageError("PRD terminal status is applied only by Gui through run finish")}if(action==="cancel"){throw new UsageError("PRD terminal status is applied only by Gui through run finish")}if(action==="activate"){const prd=await composition.prds.transition(id,"active");return{prd,artifact_path:composition.prds.path(id)}}throw new UsageError(`Unknown V2 PRD action: ${action??""}`)}async function runSpecV2Command(action,parsed,filesystem,composition,lifecycle){if(action==="finalize"){return finalizeMacro("spec",parsed,composition,()=>runLifecycleV2Command("spec","ready",parsed,filesystem,composition,lifecycle))}if(action==="create"){const creationRunId=await creationRunIdForCurrentTurn(parsed,filesystem,composition);return createSpecWithOptionalPlan({parsed,filesystem,composition,creationRunId})}if(action==="list"){const specs=(await composition.specs.list()).filter(spec=>parsed.options.prd===void 0||spec.prd_id===parsed.options.prd);return listLifecyclePage(specs,parsed).map(spec=>({spec:compactPreparedEntity(spec),artifact_path:composition.specs.path(spec.id)}))}const id=requiredEntityId(parsed,2,"SPEC id");if(action==="show"){return{...await composition.specs.read(id),artifact_path:composition.specs.path(id)}}if(action==="retarget-release"){requireOptions(parsed.options,["from","to","run"]);return retargetOwnerSpecRelease(filesystem,composition,{specId:id,from:parsed.options.from,to:parsed.options.to,actorRunId:parsed.options.run})}if(action==="prepare"){const plan=await readPreparedPlan(filesystem,parsed);await assertPreparedPlanReferences(filesystem,plan);const spec=await composition.specs.setPreparedPlan(id,plan);return{spec,artifact_path:composition.specs.path(id),plan_hash:plan.hash}}if(action==="ready"){const current=await composition.specs.read(id);await assertCurrentReleaseForExecution(filesystem,current.spec.target_release,"SPEC");const plan=await preparedPlanForReadyOrExecute(current.spec,"SPEC",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.spec.status)){throw new UsageError(`SPEC cannot move to ready from status ${current.spec.status}: ${id}`)}await assertSpecImplementationMatchesProject(current.spec.implementation,filesystem,composition.layout);const materialized=materializationOutput(await composition.materializer.execute(plan),composition);const spec=current.spec.status==="draft"?await composition.specs.transition(id,"ready"):current.spec;return{...materialized,spec,artifact_path:composition.specs.path(id)}}if(action==="execute"){const current=await composition.specs.read(id);await assertCurrentReleaseForExecution(filesystem,current.spec.target_release,"SPEC");const plan=await preparedPlanForReadyOrExecute(current.spec,"SPEC",id,composition.materializer);await assertPreparedPlanReferences(filesystem,plan);if(!new Set(["draft","ready"]).has(current.spec.status)){throw new UsageError(`SPEC cannot execute from status ${current.spec.status}: ${id}`)}await assertSpecImplementationMatchesProject(current.spec.implementation,filesystem,composition.layout);const output2=executionOutput(await composition.materializer.execute(plan),composition);if(current.spec.status==="draft")await composition.specs.transition(id,"ready");const preparedSpec=(await composition.specs.read(id)).spec;if(preparedSpec.status==="ready")await composition.specs.transition(id,"active");return output2}if(action==="deliver"){throw new UsageError("SPEC terminal status is applied only by Gui through run finish")}if(action==="block"||action==="fail"){throw new UsageError("SPEC terminal status is applied only by Gui through run finish")}if(action==="cancel"){const changes=(await composition.changes.list()).filter(change=>change.source.type==="spec"&&change.source.spec_id===id||change.source.type==="prd"&&change.source.spec_id===id);const executions=(await composition.executions.list()).filter(execution=>execution.origin.type==="spec"&&execution.origin.spec_id===id);const taskIds=new Set([...changes.flatMap(change=>change.task_ids),...executions.flatMap(execution=>execution.dag.nodes.map(node=>node.task_id))]);const cancelled_run_ids=(await Promise.all([...taskIds].map(taskId=>cancelTaskRunsForHuman(taskId,composition,parsed)))).flat();const result2=await lifecycle.cancelSpec(id);return{...result2,cancelled_run_ids,artifact_path:composition.specs.path(id)}}if(action==="activate"){const spec=await composition.specs.transition(id,"active");return{spec,artifact_path:composition.specs.path(id)}}throw new UsageError(`Unknown V2 SPEC action: ${action??""}`)}async function creationRunIdForCurrentTurn(parsed,filesystem,composition){if(parsed.options.run!==void 0){return(await composition.runs.read(parsed.options.run)).run.run_id}const invocation2=await resolveRunClientInvocation(filesystem,"codex");const intake2=await findIntakeForExactTurn(composition,"codex",invocation2);return intake2?.run.run_id??null}var init_v2_lifecycle=__esm({"src/commands/v2-lifecycle.ts"(){"use strict";init_src();init_src6();init_cli_arguments();init_conversation_intake();init_execution_intake_compatibility();init_git_delivery_preflight();init_prepared_plan_v22();init_release_cycle();init_run_budget();init_run_client_invocation();init_v2_run_cancellation_and_aggregate();init_spec_release_retarget();init_task_assurance_options();init_task_change_creation();init_task_first_command_plan();init_task_scope_amendment();init_task_start_command();init_v2_lifecycle_materialization();init_v2_lifecycle_support();init_v2_lifecycle_task();init_v2_ready_queue();init_v2_lifecycle_materialization()}});var V2_COMMAND_AREAS;var init_v2_command_areas=__esm({"src/commands/v2-command-areas.ts"(){"use strict";V2_COMMAND_AREAS=new Set(["plan","prd","spec","change","task","execution","decision","evidence","validation","run","run-v2","conversation","developer","subagent"])}});function createV2Composition(filesystem,layout){const storageMode=layout.projectConfig?.tracking.storage_mode??"tracked_sanitized";return{filesystem,layout,prds:new PrdV2Repository(filesystem,layout),specs:new DeliverySpecV2Repository(filesystem,layout),changes:new ChangeV2Repository(filesystem,layout),tasks:new TaskV2Repository(filesystem,layout),executions:new ExecutionV2Repository(filesystem,layout),materializer:new PreparedPlanV2Materializer(filesystem,layout),decisions:new DecisionV2Repository(filesystem,layout),runs:new RunV2Repository(filesystem,storageMode==="local_only"?{storageMode:"local_only",localBasePath:".local/runs"}:{storageMode:"tracked_sanitized",layout})}}async function runV2Command(area,action,parsed,filesystem,layout){if(area==="conversation"&&action==="resolve"){return preview(parsed,filesystem,layout)}if(isHostTerminalOnlyOpenReconciliation(area,action,parsed)){return runHostTerminalOnlyReconcile(parsed,filesystem,layout)}if(area==="conversation"&&action==="start"){return capture(parsed,filesystem,layout,intake2=>runV2CommandUnlocked(area,action,parsed,filesystem,layout,intake2))}if(area==="task"&&action==="migrate-autonomy"&&parsed.flags.has("confirm"))return withLifecycleCanonicalMutationLock(filesystem,()=>runV2CommandUnlocked(area,action,parsed,filesystem,layout));if(!isLifecycleManifestMutation(action)||area==="validation"&&["execute","batch"].includes(action??"")||area==="task"&&["commit","workspace","assurance","recovery-status"].includes(action??"")||isNarrowSubagentTerminalCapture(area,action)||isNarrowRunFinish(area,action)||isBoundedActiveTelemetryCapture(area,action,parsed)){return runV2CommandUnlocked(area,action,parsed,filesystem,layout)}return withLifecycleCanonicalMutationLock(filesystem,()=>runV2CommandUnlocked(area,action,parsed,filesystem,layout),area==="conversation"&&action==="start"?{timeout_ms:15e3}:{})}async function runHostTerminalOnlyReconcile(parsed,filesystem,layout,dependencies={}){const createComposition=dependencies.createComposition??(()=>createV2Composition(filesystem,layout));const preflight=dependencies.preflight??hostTerminalOnlyPreflight;const withLock=dependencies.withLock??(operation=>withLifecycleCanonicalMutationLock(filesystem,operation));const execute2=dependencies.execute??(()=>runV2CommandUnlocked("run","reconcile",parsed,filesystem,layout));const initial=await preflight(createComposition(),filesystem);if(initial.kind==="no-op")return initial.result;return withLock(execute2)}function isHostTerminalOnlyOpenReconciliation(area,action,parsed){return(area==="run"||area==="run-v2")&&action==="reconcile"&&parsed.flags.has("open")&&parsed.flags.has("host-terminal-only")}function isBoundedActiveTelemetryCapture(area,action,parsed){return(area==="run"||area==="run-v2")&&action==="usage"&&(parsed.flags.has("active")||parsed.flags.has("recent"))&&parsed.flags.has("disable-codex-raw")}async function runV2CommandUnlocked(area,action,parsed,filesystem,layout,intake2){const composition=createV2Composition(filesystem,layout);if(area==="task"&&action==="recovery-status")return taskRecoveryStatus(parsed.positionals[2]??parsed.options.id??"",composition);if(area==="task"&&action==="assurance")return runTaskAssuranceCommand(parsed,filesystem,composition);if(area==="task"&&action==="workspace")return runTaskWorkspaceAction(parsed,filesystem,composition);if(area==="validation"&&action==="batch")return runValidationBatchCommand(parsed,filesystem,composition);if(action==="list"&&parsed.options.view!=="full"){return manifestList(area==="run-v2"?"run":area,parsed,filesystem)}const lifecycle=new LifecycleV2Gate(filesystem,layout,composition);let result2;let manifestSyncedDuringMutation=false;if(area==="plan")return runPlanV2Command(action,parsed,filesystem,layout);if(area==="developer")return runDeveloperIdentityCommand(action,parsed,filesystem);if(area==="prd")result2=await runDefinitionLifecycleCommand(area,action,parsed,filesystem,composition,lifecycle);else if(area==="spec")result2=await runDefinitionLifecycleCommand(area,action,parsed,filesystem,composition,lifecycle);else if(area==="change")result2=await runChangeV2Command(action,parsed,composition,lifecycle);if(area==="conversation"){result2=await command(action,parsed,composition,filesystem,lifecycle,intake2)}else if(area==="subagent"){result2=await runSubagentV2Command(action,parsed,composition,filesystem,lifecycle,async captured=>{await syncLifecycleManifestResult(captured,"subagent",parsed,composition,filesystem);manifestSyncedDuringMutation=true})}else if(area==="task"){if(action==="migrate-autonomy")return migrateTaskAutonomy(parsed.positionals[2]??parsed.options.id??"",parsed,composition);result2=["repair-verification","settle-repair"].includes(action??"")?await runTaskVerificationRepairCommand(parsed,composition):action==="commit"?await runTaskCommitCommand(parsed,filesystem,composition):await runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle)}else if(area==="execution")result2=await runExecutionV2Command(action,parsed,composition,lifecycle,async(id,options)=>{const source=(await composition.executions.read(id)).execution.origin.type;const config2=layout.projectConfig;const managed=config2!==null&&!options.flags.has("materialize-only")&&resolveExecutionRuntime(config2,void 0,source).runtime==="autonomous";return runAutonomousExecutionCommand(id,options,composition,managed?createAutonomousProductionDriver(filesystem,config2,source):void 0,await loadAgentCatalog(filesystem))});else if(area==="decision")result2=await runDecisionV2Command(action,parsed,filesystem,composition);else if(area==="evidence")result2=await runEvidenceV2Command(action,parsed,filesystem,composition);else if(area==="validation")result2=await runValidationV2Command(action,parsed,filesystem,composition);else if(area==="run"||area==="run-v2"){result2=await runRunV2Command(action,parsed,composition,filesystem,lifecycle)}else if(!["prd","spec","change","task","conversation","subagent","evidence","validation"].includes(area)){throw new UsageError(`Unknown V2 command: ${area} ${action??""}`.trim())}if(isLifecycleManifestMutation(action)&&!manifestSyncedDuringMutation&&!isIdempotentLifecycleReplay(area,action,result2)){if(area==="validation"&&action==="execute"){return syncValidationProjection(result2,parsed.options.id,()=>syncLifecycleManifestResult(result2,area,parsed,composition,filesystem))}await syncLifecycleManifestResult(result2,area==="run-v2"?"run":area,parsed,composition,filesystem)}if((area==="run"||area==="run-v2")&&action==="finish")return maybeCloseTerminalTaskWorkspace(filesystem,composition,parsed.positionals[2]??parsed.options.id,result2);return result2}function isIdempotentLifecycleReplay(area,action,result2){if(!((area==="run"||area==="run-v2"||area==="conversation")&&action==="start")){return false}return typeof result2==="object"&&result2!==null&&"reused"in result2&&result2.reused===true}function isNarrowSubagentTerminalCapture(area,action){return area==="subagent"&&(action==="capture-terminal"||action==="reconcile-stop")}function isNarrowRunFinish(area,action){return(area==="run"||area==="run-v2")&&action==="finish"}async function runDefinitionLifecycleCommand(area,action,parsed,filesystem,composition,lifecycle){const definitionActions=new Set(["create","rework","prepare"]);if(!definitionActions.has(action??"")){return runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle)}const runId=await creationRunIdForCurrentTurn(parsed,filesystem,composition);await assertActiveDefinitionRun({area,runId,filesystem,composition,reworkAuthoring:action==="rework"});return runLifecycleV2Command(area,action,parsed,filesystem,composition,lifecycle)}var init_v2_router=__esm({"src/commands/v2-router.ts"(){"use strict";init_src5();init_src6();init_src7();init_autonomous_execution_command();init_autonomous_production_driver();init_candidate_commit_command();init_candidate_validation_batch_command();init_cli_arguments();init_conversation_stop_intake();init_developer_identity_command();init_evidence_commands_v2();init_execution_commands_v2();init_execution_runtime_config();init_governance_commands_v2();init_lifecycle_manifest_commands();init_lifecycle_v2();init_open_work_host_preflight();init_prepared_plan_v22();init_run_agent_identity();init_subagent_command_v2();init_task_assurance_command();init_task_autonomy_migration();init_task_recovery_status();init_task_verification_repair();init_task_workspace_closure();init_task_workspace_routing();init_validation_commands_v2();init_validation_projection();init_definition_run_gate();init_v2_lifecycle();init_v2_run();init_v2_command_areas()}});init_src2();import{basename as basename7,dirname as dirname18,resolve as resolve24}from"node:path";import{pathToFileURL}from"node:url";var import_parser=__toESM(require_lib(),1);function resolveSupabaseProfile(value){if(!isRecord(value)||value.id!==SUPABASE_EDGE_PROFILE.id){return unsupported2("explicit supabase-edge-functions profile is required")}if(value.workspaces!==void 0||value.scopes!==void 0||value.importMap!==void 0){return unsupported2("unsupported workspace, scope, or importMap configuration")}const map2=parseDenoImportMap(value.deno_json??value.deno_import_map);return map2===null?unsupported2("missing or malformed deno.json or deno_import_map"):{profile:{...SUPABASE_EDGE_PROFILE,denoImportMap:map2},diagnostics:[]}}function supabaseEntrypointFindings(units,profile){if(profile.id!==SUPABASE_EDGE_PROFILE.id)return[];const endpoints=new Set(units.map(unit=>normalizePath(unit.path).match(/^supabase\/functions\/([^/]+)\//)?.[1]).filter(name=>name!==void 0&&name!=="_shared"));return[...endpoints].flatMap(endpoint=>{const entrypoint=profile.functionEntrypoints?.[endpoint]??"index.ts";return units.some(unit=>normalizePath(unit.path)===`supabase/functions/${endpoint}/${entrypoint}`)?[]:[finding("supabase-function-missing-entrypoint",`supabase/functions/${endpoint}`,1,`Function ${endpoint} has no ${entrypoint}`)]})}function isSupabasePrivateFunctionImport(source,target){const sourceFunction=source.match(/^supabase\/functions\/([^/]+)\//)?.[1];const targetFunction=target.match(/^supabase\/functions\/([^/]+)\//)?.[1];if(sourceFunction===void 0||targetFunction===void 0)return false;if(sourceFunction==="_shared"&&targetFunction==="_shared")return false;if(targetFunction==="_shared")return!/^supabase\/functions\/_shared\/index\.(?:[cm]?ts|[cm]?js)$/.test(target);return sourceFunction!==targetFunction}function aliasesForSource(profile,sourcePath){const imports=profile.denoImportMap;if(imports===void 0)return profile.importAliases??[];const functionName=sourcePath.match(/^supabase\/functions\/([^/]+)\//)?.[1];const scoped=functionName===void 0?void 0:imports.functionImports?.[functionName];return[...toImportAliases(scoped??{},`supabase/functions/${functionName??""}`),...toImportAliases(imports.imports,"supabase/functions")]}function unsupported2(reason){return{profile:{...SUPABASE_EDGE_PROFILE,supported:false,notApplicableReason:reason},diagnostics:[`supabase-profile: ${reason}`]}}function toImportAliases(entries,basePath){return Object.entries(entries).map(([prefix,target])=>({prefix,target:normalizeImportTarget(target,basePath)}))}function normalizeImportTarget(target,basePath){const trailingSlash=target.endsWith("/");const normalized=target.startsWith(".")?normalizePath(`${basePath}/${target}`):target;return trailingSlash&&!normalized.endsWith("/")?`${normalized}/`:normalized}function parseDenoImportMap(value){if(!isRecord(value)||!isStringMap(value.imports))return null;if(value.scopes!==void 0||value.workspace!==void 0||value.workspaces!==void 0||value.importMap!==void 0)return null;if(value.function_imports===void 0)return{imports:value.imports};if(!isRecord(value.function_imports))return null;const functionImports={};for(const[functionName,imports]of Object.entries(value.function_imports)){if(!isStringMap(imports))return null;functionImports[functionName]=imports}return{imports:value.imports,functionImports}}function isStringMap(value){return isRecord(value)&&Object.entries(value).every(([prefix,target])=>typeof target==="string"&&prefix.length>0&&target.length>0&&prefix.endsWith("/")===target.endsWith("/"))}function isRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function normalizePath(path){const segments2=[];for(const segment2 of path.replace(/\\/g,"/").split("/")){if(segment2===""||segment2===".")continue;if(segment2==="..")segments2.pop();else segments2.push(segment2)}return segments2.join("/")}function finding(rule,path,line,message){return{rule,path,line,message}}function resolvedImports(unit,resolveImport){const imports=[];const add=(source,line,unverifiedDynamic=false)=>{const specifier=staticModuleSpecifier(source);if(specifier===void 0){if(unverifiedDynamic)imports.push({module:"<dynamic import>",resolvedModule:null,line:typeof line==="number"?line:1,unverified:true});return}const module=specifier.replace(/\\/g,"/");imports.push({module,resolvedModule:resolveImport(unit.path,module),line:typeof line==="number"?line:1})};const visit=node=>{if(!isRecord2(node))return;const line=sourceLine(node);if(["ImportDeclaration","ExportNamedDeclaration","ExportAllDeclaration","ImportExpression","TSImportType"].includes(String(node.type))){add(node.type==="TSImportType"?node.argument:node.source,line,node.type==="ImportExpression")}else if(node.type==="CallExpression"&&isRecord2(node.callee)&&node.callee.type==="Import"){add(Array.isArray(node.arguments)?node.arguments[0]:void 0,line,true)}else if(node.type==="CallExpression"&&isRecord2(node.callee)&&node.callee.type==="Identifier"&&node.callee.name==="require"){add(Array.isArray(node.arguments)?node.arguments[0]:void 0,line,true)}else if(node.type==="TSImportEqualsDeclaration"&&isRecord2(node.moduleReference)){add(node.moduleReference.expression,line)}for(const value of Object.values(node)){if(Array.isArray(value))for(const child of value)visit(child);else if(value!==node.loc)visit(value)}};visit((0,import_parser.parse)(unit.content,{sourceType:"unambiguous",plugins:unit.path.endsWith(".tsx")||unit.path.endsWith(".jsx")?["typescript","jsx"]:["typescript"]}));return imports}function importResolver(units,profile){const knownPaths=new Set(units.map(unit=>normalizePath2(unit.path)));const sourceAliases=new Map(units.map(unit=>[normalizePath2(unit.path),unit.importAliases??[]]));return(sourcePath,specifier)=>{const candidates=importCandidates(normalizePath2(sourcePath),specifier.replace(/\\/g,"/"),[...sourceAliases.get(normalizePath2(sourcePath))??[],...aliasesForSource(profile,normalizePath2(sourcePath))]);for(const candidate of candidates){const resolved=resolveKnownPath(candidate,knownPaths);if(resolved!==null)return resolved}return candidates[0]??null}}function normalizePath2(path){const segments2=[];for(const segment2 of path.replace(/\\/g,"/").split("/")){if(segment2===""||segment2===".")continue;if(segment2==="..")segments2.pop();else segments2.push(segment2)}return segments2.join("/")}function importCandidates(sourcePath,specifier,aliases){if(specifier.startsWith("."))return[normalizePath2(`${dirname2(sourcePath)}/${specifier}`)];return aliases.filter(alias=>specifier===alias.prefix||alias.prefix.endsWith("/")&&specifier.startsWith(alias.prefix)).sort((left,right)=>right.prefix.length-left.prefix.length).map(alias=>normalizePath2(`${alias.target}${specifier.slice(alias.prefix.length)}`))}function resolveKnownPath(candidate,knownPaths){const extensions=[".ts",".tsx",".mts",".cts",".js",".jsx",".mjs",".cjs"];const sourceExtension=/\.(?:[cm]?[jt]sx?)$/.test(candidate)?candidate.replace(/\.(?:[cm]?[jt]sx?)$/,""):candidate;const options=[candidate,sourceExtension,...extensions.map(extension=>`${candidate}${extension}`),...extensions.map(extension=>`${candidate}/index${extension}`),...extensions.map(extension=>`${sourceExtension}${extension}`),...extensions.map(extension=>`${sourceExtension}/index${extension}`)];return options.find(option=>knownPaths.has(option))??null}function staticModuleSpecifier(source){if(!isRecord2(source))return void 0;if(typeof source.value==="string")return source.value;if(source.type!=="TemplateLiteral"||!Array.isArray(source.expressions)||source.expressions.length!==0||!Array.isArray(source.quasis))return void 0;const quasi=source.quasis[0];return isRecord2(quasi)&&isRecord2(quasi.value)&&typeof quasi.value.cooked==="string"?quasi.value.cooked:void 0}function sourceLine(node){const location=node.loc;return isRecord2(location)&&isRecord2(location.start)&&typeof location.start.line==="number"?location.start.line:void 0}function dirname2(path){return path.slice(0,Math.max(0,path.lastIndexOf("/")))}function isRecord2(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}var import_parser2=__toESM(require_lib(),1);function workspaceImportAliases(manifests){const documents=new Map(manifests.map(({path,content})=>[normalizePath2(path),parseDocument3(path,content)]));const packages=[];for(const[path,document]of documents){if(!path.endsWith("package.json")||typeof document.name!=="string")continue;const entries=document.exports;if(isRecord3(entries)&&Object.keys(entries).some(key=>key.startsWith("."))){for(const[subpath,target]of Object.entries(entries)){addTargets(packages,document.name+(subpath==="."?"":subpath.slice(1)),target,directory(path))}}else{addTargets(packages,document.name,entries??document.module??document.main??"./index.ts",directory(path))}}const resolved=new Map;function configOptions(path,chain=[]){const cached2=resolved.get(path);if(cached2)return cached2;if(chain.includes(path))throw new Error(`Cyclic architecture tsconfig inheritance: ${path}`);const document=documents.get(path);if(!document)throw new Error(`Architecture tsconfig is unavailable: ${path}`);let inherited={};const parents=document.extends===void 0?[]:Array.isArray(document.extends)?document.extends:[document.extends];for(const parent of parents){if(typeof parent!=="string"||!parent.startsWith(".")){throw new Error(`Architecture cannot verify external tsconfig inheritance: ${path}`)}const candidate=normalizePath2(`${directory(path)}/${parent}`);inherited={...inherited,...configOptions(documents.has(candidate)||candidate.endsWith(".json")?candidate:`${candidate}.json`,[...chain,path])}}const options=isRecord3(document.compilerOptions)?document.compilerOptions:{};const result2={...inherited};if(options.baseUrl!==void 0){if(typeof options.baseUrl!=="string")throw new Error(`Invalid architecture tsconfig baseUrl: ${path}`);result2.baseUrl=normalizePath2(`${directory(path)}/${options.baseUrl}`)}if(options.paths!==void 0){if(!isRecord3(options.paths))throw new Error(`Invalid architecture tsconfig paths: ${path}`);result2.paths=options.paths;result2.pathsBase=directory(path)}resolved.set(path,result2);return result2}function configAliases(path){const options=configOptions(path);const base=options.baseUrl??options.pathsBase??directory(path);const aliases=[];for(const[prefix,targets]of Object.entries(options.paths??{})){if(!Array.isArray(targets)||targets.length===0||!targets.every(target=>typeof target==="string")){throw new Error(`Invalid architecture tsconfig path targets: ${path}`)}for(const target of targets)addAlias(aliases,prefix,String(target),base)}return aliases}return sourcePath=>{const nearest=[...documents.keys()].filter(path=>path.endsWith("tsconfig.json")&&(directory(path)===""||sourcePath.startsWith(`${directory(path)}/`))).sort((a,b)=>b.length-a.length)[0];return[...nearest?configAliases(nearest):[],...packages]}}function addTargets(aliases,prefix,target,base){if(typeof target==="string")addAlias(aliases,prefix,target,base);else if(Array.isArray(target))for(const entry2 of target)addTargets(aliases,prefix,entry2,base);else if(isRecord3(target))for(const entry2 of Object.values(target))addTargets(aliases,prefix,entry2,base)}function addAlias(aliases,prefix,target,base){const stars=(prefix.match(/\*/g)??[]).length;if(stars>1||stars===1&&(!prefix.endsWith("*")||!target.endsWith("*"))){throw new Error(`Architecture cannot verify non-prefix import mapping: ${prefix}`)}if(/^(?:[A-Za-z][A-Za-z0-9+.-]*:|\/|\\)/.test(target)){throw new Error(`Architecture import mapping escapes the workspace: ${prefix}`)}const source=stars?prefix.slice(0,-1):prefix;const destination=stars?target.slice(0,-1):target;const joined=`${base}/${destination}`;let depth=0;for(const segment2 of joined.split("/")){if(segment2==="..")depth-=1;else if(segment2&&segment2!==".")depth+=1;if(depth<0)throw new Error(`Architecture import mapping escapes the workspace: ${prefix}`)}aliases.push({prefix:source,target:normalizePath2(joined)+(destination.endsWith("/")?"/":"")})}function parseDocument3(path,content){const value=literal2((0,import_parser2.parseExpression)(content));if(!isRecord3(value))throw new Error(`Architecture manifest must be an object: ${path}`);return value}function literal2(node){if(!isRecord3(node))throw new Error("Invalid architecture manifest");if(["StringLiteral","NumericLiteral","BooleanLiteral"].includes(String(node.type)))return node.value;if(node.type==="NullLiteral")return null;if(node.type==="ArrayExpression"&&Array.isArray(node.elements))return node.elements.map(literal2);if(node.type==="ObjectExpression"&&Array.isArray(node.properties)){const entries=node.properties.map(property=>{if(!isRecord3(property)||property.type!=="ObjectProperty"||property.computed||!isRecord3(property.key)||property.key.type!=="StringLiteral"){throw new Error("Architecture manifests must contain literal JSON properties")}return[String(property.key.value),literal2(property.value)]});return Object.fromEntries(entries)}if(node.type==="UnaryExpression"&&node.operator==="-"&&isRecord3(node.argument)&&node.argument.type==="NumericLiteral")return-Number(node.argument.value);throw new Error("Architecture manifests must contain only JSON literals")}function directory(path){return path.slice(0,Math.max(0,path.lastIndexOf("/")))}function isRecord3(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}var TYPESCRIPT_PROFILE={id:"zaip-aios-stack",extensions:[".ts",".tsx"],frameworkPackages:["hono","react","kysely","drizzle-orm","express","fastify"],queryPatterns:["/queries/",".query.","QueryHandler"],writePortPatterns:["WritePort","CommandRepository","UnitOfWork"],supported:true};var SUPABASE_EDGE_PROFILE={...TYPESCRIPT_PROFILE,id:"supabase-edge-functions",frameworkPackages:[...TYPESCRIPT_PROFILE.frameworkPackages,"@supabase/supabase-js"],supported:true};function validateArchitecture(units,profile=TYPESCRIPT_PROFILE){if(!profile.supported&&!profile.notApplicableReason){throw new Error(`Unsupported profile ${profile.id} requires a notApplicableReason`)}return[...validateAll(units,profile),...supabaseEntrypointFindings(units,profile)].filter(item=>["domain-framework-dependency","application-concrete-adapter","adapter-inward-dependency","frontend-server-dependency","backend-ui-dependency","dashboard-backend-app","inner-layer-app-dependency","site-dashboard-dependency","package-module-dependency","supabase-private-function-import","supabase-function-missing-entrypoint","unresolved-dynamic-import"].includes(item.rule))}function validateCqrs(units,profile=TYPESCRIPT_PROFILE){return validateAll(units,profile).filter(item=>["query-write-port","query-side-effect","route-direct-database","database-row-leak","command-missing-idempotency","query-missing-account-context"].includes(item.rule))}function validateModules(units,profile=TYPESCRIPT_PROFILE){const findings=validateAll(units,profile).filter(item=>item.rule==="cross-module-storage");const modules=new Set(units.map(unit=>moduleName(unit.path)).filter(name=>name!==null));for(const module of modules){if(!units.some(unit=>isCompositionRoot(unit.path,module))){findings.push(finding2("module-missing-composition-root",`modules/${module}`,1,`Module ${module} has no composition-root.ts`))}}return findings}function validateProfileContract(value){if(typeof value!=="object"||value===null)return[{field:"$",message:"Profile must be an object"}];const profile=value;const findings=[];if(typeof profile.id!=="string"||profile.id.length===0)findings.push({field:"id",message:"Profile id is required"});if(profile.status!=="supported"&&profile.status!=="experimental")findings.push({field:"status",message:"Profile status must be supported or experimental"});if(!Array.isArray(profile.extensions)||profile.extensions.length===0)findings.push({field:"extensions",message:"At least one extension is required"});if(!Array.isArray(profile.invariants)||profile.invariants.length===0)findings.push({field:"invariants",message:"Profile invariants are required"});if(profile.status==="supported"){const conventions=profile.conventions;const apps=conventions?.apps;const sourceLimits=conventions?.source_limits;if(!conventions||!apps||apps.frontend!=="apps/frontend"||apps.backend!=="apps/backend"||apps.site!=="apps/site"||conventions.modules!=="modules"||conventions.packages!=="packages"||conventions.e2e!=="tests/e2e"){findings.push({field:"conventions",message:"Supported profiles require canonical apps/frontend, apps/backend, apps/site, modules, packages and tests/e2e paths"})}if(!sourceLimits||!Number.isInteger(sourceLimits.warning_lines)||!Number.isInteger(sourceLimits.error_lines)||Number(sourceLimits.warning_lines)!==400||Number(sourceLimits.error_lines)!==800){findings.push({field:"conventions.source_limits",message:"Supported profiles require source-size limits of 400 warning and 800 error lines"})}const commands=profile.commands;if(!commands||typeof commands.test!=="string"||typeof commands.typecheck!=="string"){findings.push({field:"commands",message:"Supported profiles require test and typecheck commands"})}}return findings}function validateAll(units,profile){const findings=[];const resolveImport=importResolver(units,profile);for(const unit of units){const normalizedPath=unit.path.replace(/\\/g,"/");const layer=detectLayer(normalizedPath);const imports=resolvedImports(unit,resolveImport);if(isDashboardBackendApp(normalizedPath)){findings.push(finding2("dashboard-backend-app",unit.path,1,"The local dashboard is frontend-only; move loopback projection runtime code to .agents/dashboard/packages/local-runtime"))}for(const imported of imports){const resolved=imported.resolvedModule??imported.module;const targetLayer=detectLayer(resolved);if(imported.unverified&&isArchitecturalSource(normalizedPath)){findings.push(finding2("unresolved-dynamic-import",unit.path,imported.line,"Dynamic import cannot be resolved statically; use an explicit import or an approved boundary adapter"))}if(isFrontendRuntimeSource(normalizedPath)&&(isServerOnlyDependency(imported.module)||isBackendApp(resolved))){findings.push(finding2("frontend-server-dependency",unit.path,imported.line,`Frontend imports server-only dependency ${imported.module}`))}if(isBackendApp(normalizedPath)&&isUiRuntimeDependency(imported.module)){findings.push(finding2("backend-ui-dependency",unit.path,imported.line,`Backend imports UI runtime dependency ${imported.module}`))}if(isInnerLibrary(normalizedPath)&&importsApplication(imported.module)){findings.push(finding2("inner-layer-app-dependency",unit.path,imported.line,`Inner module/package imports application ${imported.module}`))}if(isPublicSite(normalizedPath)&&importsDashboardOrAgentState(imported.module)){findings.push(finding2("site-dashboard-dependency",unit.path,imported.line,`Public site imports private dashboard or agent state ${imported.module}`))}if(layer==="domain"&&(isFramework(resolved,profile)||resolved.startsWith("node:")||targetLayer!==null&&targetLayer!=="domain")){findings.push(finding2("domain-framework-dependency",unit.path,imported.line,`Domain imports ${imported.module}`))}if(layer==="application"&&["adapters","infrastructure"].includes(targetLayer??"")){findings.push(finding2("application-concrete-adapter",unit.path,imported.line,`Application imports concrete ${targetLayer}`))}if(["domain","application"].includes(layer??"")&&targetLayer==="adapters"){findings.push(finding2("adapter-inward-dependency",unit.path,imported.line,`Inner layer imports adapter ${imported.module}`))}const sourceModule=moduleName(normalizedPath);const targetModule=moduleName(resolved);if(isPackage(normalizedPath)&&targetModule!==null&&!isDashboardRuntimePublicBoundary(normalizedPath,resolved)){findings.push(finding2("package-module-dependency",unit.path,imported.line,`Package imports module ${targetModule}`))}if(sourceModule&&targetModule&&sourceModule!==targetModule&&isPrivateModuleImplementation(resolved)){findings.push(finding2("cross-module-storage",unit.path,imported.line,`Module ${sourceModule} reaches private storage of ${targetModule}`))}if(isSupabasePrivateFunctionImport(normalizedPath,resolved)){findings.push(finding2("supabase-private-function-import",unit.path,imported.line,`Function imports private source of another function ${imported.module}`))}}if(isPublicSite(normalizedPath)&&/\.agents\/(?:config|data|rules|requirements)/.test(unit.content)){findings.push(finding2("site-dashboard-dependency",unit.path,lineOf(unit.content,".agents/"),"Public site reads private .agents state"))}if(isQuery(normalizedPath,unit.content,profile)){for(const pattern of profile.writePortPatterns){if(unit.content.includes(pattern)){findings.push(finding2("query-write-port",unit.path,lineOf(unit.content,pattern),`Query references write capability ${pattern}`))}}const mutation=unit.content.match(/\.(?:insert|update|delete|save|commit|rollback)\s*\(|\.rpc\s*\(\s*["'`](?:delete|remove|update|insert|create|write)/i);if(mutation?.index!==void 0){findings.push(finding2("query-side-effect",unit.path,lineAt(unit.content,mutation.index),`Query contains mutation ${mutation[0].trim()}`))}if(/\b(?:tenant|account)_?id\b/i.test(unit.content)&&!unit.content.includes("AccountContext")){findings.push(finding2("query-missing-account-context",unit.path,lineOf(unit.content,"account"),"Multi-tenant query does not require AccountContext"))}}if(/\/(?:routes?|http)\//.test(normalizedPath)&&/\b(?:db|kysely|prisma|supabase|client)\s*\.\s*(?:from|selectFrom|insertInto|updateTable|deleteFrom|query)\s*\(/i.test(unit.content)){findings.push(finding2("route-direct-database",unit.path,1,"Inbound adapter accesses database directly"))}if(/\/(?:routes?|http)\//.test(normalizedPath)&&unit.content.includes("DatabaseRow")){findings.push(finding2("database-row-leak",unit.path,lineOf(unit.content,"DatabaseRow"),"DatabaseRow leaks through inbound boundary"))}if(/\/commands\//.test(normalizedPath)&&/critical\s*[:=]\s*true/i.test(unit.content)&&!/Idempotenc|idempotency_key/.test(unit.content)){findings.push(finding2("command-missing-idempotency",unit.path,1,"Critical command has no idempotency policy"))}}return[...deduplicate(findings)]}function isFrontendApp(path){return/(?:^|\/)apps\/frontend\//.test(path)}function isDashboardRuntimePublicBoundary(source,target){return source.startsWith(".agents/dashboard/packages/local-runtime/")&&/^\.agents\/dashboard\/modules\/(?:operations|cost-monitor|traceability)\/(?:composition-root\.ts|src\/(?:contracts\.ts|work-board-model\.ts|server\/index\.ts))$/.test(target)}function isFrontendRuntimeSource(path){return isFrontendApp(path)&&/\/src\/.+\.[cm]?[jt]sx?$/.test(path)&&!/\.(?:test|spec)\.[cm]?[jt]sx?$/.test(path)&&!/(?:^|\/)(?:__tests__|test|tests)\//.test(path)}function isBackendApp(path){return/(?:^|\/)apps\/backend\//.test(path)}function isDashboardBackendApp(path){return/(?:^|\/)\.agents\/dashboard\/apps\/backend(?:\/|$)/.test(path)}function isPublicSite(path){return/(?:^|\/)apps\/site\//.test(path)}function isInnerLibrary(path){return/(?:^|\/)(?:modules|packages)\/[^/]+\//.test(path)}function isArchitecturalSource(path){return/(?:^|\/)(?:apps|modules|packages|supabase\/functions)\//.test(path)}function isServerOnlyDependency(module){return module.startsWith("node:")||/^(?:assert|async_hooks|buffer|child_process|cluster|console|constants|crypto|dgram|diagnostics_channel|dns|domain|events|fs|http|http2|https|module|net|os|path|perf_hooks|process|punycode|querystring|readline|repl|stream|string_decoder|sys|timers|tls|trace_events|tty|url|util|v8|vm|wasi|worker_threads|zlib)(?:\/|$)/.test(module)||module==="pg"||module.startsWith("pg/")||module==="hono"||module.startsWith("hono/")||module.startsWith("@hono/")||/^@zaip-ai\/dashboard-(?:operations|cost-monitor|traceability)\/server(?:\/|$)/.test(module)||/^@zaip-ai\/dashboard-local-runtime(?:\/|$)/.test(module)||/^@zaip-ai\/(?:adapters|architecture|cli|context|core|costs|decisions|distribution|eval|specs|tasks|testing)(?:\/|$)/.test(module)}function isUiRuntimeDependency(module){return module==="react"||module.startsWith("react/")||module.startsWith("react-dom")||module==="@zaip-ai/dashboard-ui"||/^@zaip-ai\/dashboard-(?:operations|cost-monitor|traceability)\/react(?:\/|$)/.test(module)}function importsApplication(module){return/(?:^|\/)apps\/(?:frontend|backend|site)(?:\/|$)/.test(module.replace(/\\/g,"/"))||/^@zaip-ai\/dashboard-frontend(?:\/|$)/.test(module)}function importsDashboardOrAgentState(module){const normalized=module.replace(/\\/g,"/");return normalized.includes(".agents/")||/(?:^|\/)\.agents\/dashboard(?:\/|$)/.test(normalized)||/^@zaip-ai\/dashboard-(?:frontend|local-runtime|operations|cost-monitor|traceability)(?:\/|$)/.test(module)}function detectLayer(path){return path.match(/\/(domain|application|adapters|infrastructure)\//)?.[1]??null}function isFramework(module,profile){const packageName=normalizeNpmSpecifier(module);return profile.frameworkPackages.some(name=>packageName===name||packageName.startsWith(`${name}/`))}function normalizeNpmSpecifier(module){const match=module.match(/^npm:((?:@[^/@]+\/)?[^/@]+)(?:@[^/]+)?(\/.*)?$/);return match===null?module:`${match[1]}${match[2]??""}`}function isQuery(path,content,profile){return profile.queryPatterns.some(pattern=>{if(pattern.startsWith("/")||pattern.startsWith("."))return path.includes(pattern);return new RegExp(`\\bclass\\s+[A-Za-z0-9_]*${escapeRegExp(pattern)}\\b`).test(content)})}function escapeRegExp(value){return value.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function moduleName(path){return path.match(/(?:^|\/)modules\/([^/]+)/)?.[1]??null}function isCompositionRoot(path,module){const normalized=normalizePath2(path);return normalized===`modules/${module}/composition-root.ts`||normalized.endsWith(`/modules/${module}/composition-root.ts`)}function isPackage(path){return/(?:^|\/)packages\/[^/]+\//.test(path)}function isPrivateModuleImplementation(path){return/(?:^|\/)modules\/[^/]+\/(?:adapters|application|domain|infrastructure|persistence|repositories|storage)(?:\/|$)/.test(path)}function lineOf(content,value){return lineAt(content,Math.max(0,content.indexOf(value)))}function lineAt(content,index){return content.slice(0,index).split("\n").length}function finding2(rule,path,line,message){return{rule,path,line,message}}function deduplicate(findings){const seen=new Set;return findings.filter(item=>{const key=`${item.rule}:${item.path}:${item.line}`;if(seen.has(key))return false;seen.add(key);return true})}init_src3();init_src();init_src4();init_src5();init_src2();init_src3();init_src();var EVAL_VERSION="4.7.0";async function persistEvalReport(filesystem,report,shortName="offline-suite"){const id=createId("EVAL",shortName);const{year,month}=datedIdParts(id);const path=`.agents/evals/results/${year}/${month}/${id}.json`;const persisted={id,version:EVAL_VERSION,generated_at:new Date().toISOString(),report};await filesystem.writeTextAtomic(path,`${JSON.stringify(persisted,null,2)}
 `);return{id,path}}function runEvalSuite(cases,profile){const results=cases.map(testCase=>{const startedAt=performance.now();const findings=testCase.validator==="cqrs"?validateCqrs(testCase.units,profile):validateArchitecture(testCase.units,profile);const actualRules=[...new Set(findings.map(item=>item.rule))].sort();const expectedRules=[...testCase.expectedRules].sort();return{id:testCase.id,passed:JSON.stringify(actualRules)===JSON.stringify(expectedRules),expectedRules,actualRules,durationMs:Math.max(0,performance.now()-startedAt)}});return{passed:results.every(result2=>result2.passed),offline:true,cases:results}}function guardDiff(changedFiles,ledgerFiles){const canonicalChanges=changedFiles.filter(path=>!path.startsWith(".agents/"));return canonicalChanges.filter(path=>!ledgerFiles.includes(path)).map(path=>({rule:"untracked-diff",message:`${path} is not present in the active task ledger`}))}var BUILTIN_EVAL_CASES=[{id:"domain-rejects-framework",units:[{path:"src/modules/a/domain/entity.ts",content:'import { Hono } from "hono";'}],expectedRules:["domain-framework-dependency"]},{id:"query-rejects-write",units:[{path:"src/modules/a/application/queries/get.query.ts",content:"export const get = (port: WritePort) => port.save({});"}],expectedRules:["query-side-effect","query-write-port"],validator:"cqrs"},{id:"pure-query-passes",units:[{path:"src/modules/a/application/queries/get.query.ts",content:"export const get = (port: ReadPort) => port.find();"}],expectedRules:[],validator:"cqrs"}];function scanInfrastructureSecurity(path,content){const findings=[];if(/\.ya?ml$/.test(path)&&/(?:privileged:\s*true|network_mode:\s*["']?host)/i.test(content)){findings.push({rule:"docker-unsafe-isolation",path})}if(/\.tf$/.test(path)&&/(?:cidr_blocks|source_ranges)\s*=\s*\[[^\]]*["']0\.0\.0\.0\/0/i.test(content)){findings.push({rule:"terraform-public-ingress",path})}if(/\.sql$/.test(path)&&/GRANT\s+ALL(?:\s+PRIVILEGES)?[\s\S]*\sTO\s+(?:PUBLIC|\w+)/i.test(content)){findings.push({rule:"sql-overprivileged-grant",path})}return findings}function runCategoryEval(category){if(category==="architecture"){return runEvalSuite(BUILTIN_EVAL_CASES.filter(item=>item.id.includes("domain")))}if(category==="cqrs"){return runEvalSuite(BUILTIN_EVAL_CASES.filter(item=>!item.id.includes("domain")))}const startedAt=performance.now();let passed=false;let actualRules=[];let expectedRules=[];if(category==="specs"){expectedRules=["untracked-diff"];actualRules=guardDiff(["src/new.ts"],[]).map(item=>item.rule);passed=expectedRules.every(rule=>actualRules.includes(rule))}else if(category==="security"){expectedRules=["generic-secret"];actualRules=scanSecrets("fixture.ts",'const token = "definitely-not-a-real-secret"').map(item=>item.kind);passed=expectedRules.every(rule=>actualRules.includes(rule))}else if(category==="infrastructure"){expectedRules=["docker-unsafe-isolation","terraform-public-ingress","sql-overprivileged-grant"];actualRules=[...scanInfrastructureSecurity("compose.yaml","services:\n  app:\n    privileged: true"),...scanInfrastructureSecurity("main.tf",'ingress { cidr_blocks = ["0.0.0.0/0"] }'),...scanInfrastructureSecurity("grant.sql","GRANT ALL PRIVILEGES ON app TO PUBLIC;")].map(item=>item.rule);passed=expectedRules.every(rule=>actualRules.includes(rule))}else if(category==="adapters"){const files=adapterFiles(process.cwd());actualRules=files.map(file2=>file2.path);expectedRules=[...actualRules];passed=files.length>0&&new Set(files.map(file2=>file2.path)).size===files.length&&files.every(file2=>file2.content.includes("zaip-managed"))}else if(category==="context"){actualRules=[String(estimateTokens("12345678"))];expectedRules=[...actualRules];passed=Number(actualRules[0])>0}return{passed,offline:true,cases:[{id:`${category}-builtin`,passed,expectedRules,actualRules,durationMs:performance.now()-startedAt}]}}function runAllCategoryEvals(){const categories=["specs","architecture","cqrs","security","infrastructure","adapters","context"];const reports=categories.map(runCategoryEval);return{passed:reports.every(report=>report.passed),offline:true,cases:reports.flatMap(report=>report.cases)}}init_src6();init_src7();init_src();function output(value,json2,error51=false){const text=json2||typeof value!=="string"?`${JSON.stringify(value,null,2)}
 `:`${value}
 `;(error51?process.stderr:process.stdout).write(text)}var ACTIVATION_COMMANDS=new Set(["enable","disable","status"]);var DISABLED_MAINTENANCE_COMMANDS=new Set(["setup","upgrade","doctor","adapters","architecture","cqrs","modules","profile","migrate","version"]);function isActivationCommand(area){return ACTIVATION_COMMANDS.has(area)}async function runActivationCommand(area,filesystem,json2){if(!await filesystem.exists(PROJECT_CONFIG_PATH)){const result2={installed:false,enabled:null,config_path:PROJECT_CONFIG_PATH,message:"ZAIP-AIOS project configuration was not found."};output(result2,json2,area!=="status");return area==="status"?0:6}const repository2=new ProjectConfigRepository(filesystem);const config2=await repository2.read();if(area==="status"){output({installed:true,enabled:isZaipEnabled(config2),configured:config2.zaip?.enabled??null,config_path:PROJECT_CONFIG_PATH},json2);return 0}const enabled=area==="enable";await repository2.write({...config2,zaip:{enabled}});output({installed:true,enabled,config_path:PROJECT_CONFIG_PATH,message:enabled?"ZAIP-AIOS enabled.":"ZAIP-AIOS disabled."},json2);return 0}async function isZaipCliDisabled(filesystem){if(!await filesystem.exists(PROJECT_CONFIG_PATH))return false;return!isZaipEnabled(await new ProjectConfigRepository(filesystem).read())}function isDisabledMaintenanceCommand(area){return DISABLED_MAINTENANCE_COMMANDS.has(area)}async function handleZaipActivation(area,filesystem,json2){if(isActivationCommand(area))return runActivationCommand(area,filesystem,json2);if(isDisabledMaintenanceCommand(area)||!await isZaipCliDisabled(filesystem))return null;output({enabled:false,error:"ZAIP-AIOS is disabled for this project. Run `zaip enable` to reactivate it."},json2,true);return 6}init_cli_arguments();init_src3();async function sourceUnits(filesystem){const frameworkSource=await filesystem.exists("package.json")&&JSON.parse(await filesystem.readText("package.json")).name==="@zaip-ai/aios";const entries=(await inventory(filesystem)).filter(({path})=>frameworkSource||!/^\.agents\/(?:dashboard|design)\//.test(path));const aliasesForSource2=workspaceImportAliases(await Promise.all(entries.filter(({path})=>/(?:^|\/)(?:package|tsconfig(?:\.[^/]+)?)\.json$/.test(path)&&!isGeneratedSourcePath(path)).map(async({path})=>({path,content:await filesystem.readText(path)}))));const files=entries.filter(entry2=>/\.[cm]?[jt]sx?$/.test(entry2.path));const productionFiles=files.filter(entry2=>!/(?:^|\/)(?:tests?|__tests__)(?:\/|$)|\.(?:test|spec)(?:-support)?\.[cm]?[jt]sx?$/.test(entry2.path)&&!/(?:^|\/)scripts\/test-[^/]+\.[cm]?[jt]s$/.test(entry2.path)&&!isGeneratedSourcePath(entry2.path));return Promise.all(productionFiles.map(async({path})=>{const aliases=aliasesForSource2(path);return{path,content:await filesystem.readText(path),...aliases.length>0?{importAliases:aliases}:{}}}))}function configuredArchitectureProfile(projectConfig2){const architecture=projectConfig2?.stack.overrides.architecture;const aliases=isRecord5(architecture)?architecture.import_aliases:void 0;if(aliases!==void 0&&!Array.isArray(aliases))throw new Error("Invalid architecture import_aliases: expected an array");const configured=(aliases??[]).map((value,index)=>parseImportAlias(value,index));for(const[index,{prefix}]of configured.entries()){if(configured.some((alias,other)=>other!==index&&alias.prefix.startsWith(prefix))){throw new Error(`Invalid architecture import_aliases: ambiguous prefix ${prefix}`)}}if(projectConfig2?.stack.id!==SUPABASE_EDGE_PROFILE.id)return{...TYPESCRIPT_PROFILE,importAliases:configured};const resolution=resolveSupabaseProfile({id:SUPABASE_EDGE_PROFILE.id,...isRecord5(architecture)&&architecture.deno_json!==void 0?{deno_json:architecture.deno_json}:isRecord5(architecture)&&architecture.deno_import_map!==void 0?{deno_import_map:architecture.deno_import_map}:{}});if(!resolution.profile.supported){throw new Error(`Invalid Supabase architecture profile: ${resolution.diagnostics.join("; ")}`)}return{...resolution.profile,importAliases:configured}}function parseImportAlias(value,index){if(!isRecord5(value)||typeof value.prefix!=="string"||typeof value.target!=="string"){throw new Error(`Invalid architecture import_aliases[${index}]: expected prefix and target strings`)}if(value.prefix.length===0||value.target.length===0){throw new Error(`Invalid architecture import_aliases[${index}]: prefix and target must not be empty`)}if(!value.prefix.endsWith("/")||!value.target.endsWith("/")){throw new Error(`Invalid architecture import_aliases[${index}]: prefix and target must end with /`)}if(/\s/.test(value.prefix)||/\s/.test(value.target)){throw new Error(`Invalid architecture import_aliases[${index}]: prefix and target must not contain whitespace`)}if(value.target.startsWith("/")||value.target.startsWith("\\")||/^[A-Za-z]:/.test(value.target)||/^[A-Za-z][A-Za-z0-9+.-]*:/.test(value.target)||value.target.split(/[\\/]/).includes("..")){throw new Error(`Invalid architecture import_aliases[${index}]: target must be a workspace-relative path`)}return{prefix:value.prefix,target:value.target}}function isGeneratedSourcePath(path){return/(?:^|\/)dist\//.test(path)||path.startsWith(".agents/runtime/bin/")||path.startsWith("public-cli/")||path===".agents/dashboard/packages/local-runtime/server.mjs"}function isRecord5(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function generateBoard(tasks){const states=["planned","executing","verifying","blocked","completed"];return`# Task board
@@ -2883,7 +2882,7 @@ V1 state converted to V2 with source fingerprint \`${fingerprint.sha256}\`.`})),
 `));let archivedCapabilities=0;let promotedSpecs=0;for(const capability of capabilities){const legacyId=requiredString2(capability.metadata.id,`${capability.path}:id`);const promotion=promotions.find(candidate=>candidate.legacy_spec_id===legacyId);if(promotion===void 0){archivedCapabilities+=1;const relative16=capability.path.replace(/^\.agents\/specs\/capabilities\//,"");operations.push(bytesOperation("archive","capability",capability.path,capability.sha256,`${executionDirectory}/${migrationExecutionId}/artifacts/legacy/capabilities/${relative16}`,capability.bytes));findings.push({severity:"info",code:"capability-archived-not-promoted",path:capability.path,message:`${legacyId} remains legacy evidence; no DeliverySpec was created.`});continue}promotedSpecs+=1;const promotedRequirementIds=requirementIdsFromCapability(capability.body);const promotedStatus=deliverySpecStatus(capability.metadata.status);const promoted={schema_version:2,id:promotion.delivery_spec_id,prd_id:null,revision:1,title:stringOr(capability.metadata.title,legacyId),status:promotedStatus,objective:bodySection(capability.body,"Purpose")||bodySection(capability.body,"Prop\xF3sito")||stringOr(capability.metadata.title,legacyId),included_scope:[],excluded_scope:[],requirement_ids:promotedRequirementIds,acceptance_ids:promotedRequirementIds.map(id=>`AC-${id.replace(/^REQ-/,"")}`),prepared_plan:null,created_at:migrationTimestamp,updated_at:migrationTimestamp};operations.push(textOperation("convert","spec",capability.path,capability.sha256,v2EntityPath2("specs",promotion.delivery_spec_id,`${promotion.delivery_spec_id}.md`),serializeMarkdown({metadata:promoted,body:`${provenanceBody(capability.body,capability.path,capability.sha256)}
 - Promotion authorized by: \`${promotion.authorized_by}\``})))}const project=asRecord2(manifest.project,"manifest.project");const profile=asRecord2(manifest.profile,"manifest.profile");const agents=Array.isArray(manifest.agents)?manifest.agents:[];const managedEmptyPaths=[".agents/requirements/.gitkeep",".agents/skills/.gitkeep",".agents/data/prds/.gitkeep",".agents/data/specs/.gitkeep",".agents/data/changes/.gitkeep",".agents/data/tasks/.gitkeep",".agents/data/executions/.gitkeep",".agents/data/runs/.gitkeep"];const legacyManagedPaths=await readLegacyManagedPaths(filesystem);const v2RuleIds=new Set(DEFAULT_V2_MANAGED_FILES.filter(file2=>file2.path.startsWith(".agents/rules/")).map(file2=>parseRuleDocument(file2.content).metadata.id));for(const source of fingerprint.files.filter(file2=>/^\.agents\/rules\/[^/]+\.md$/.test(file2.path))){if(legacyManagedPaths.has(source.path))continue;const content=await filesystem.readText(source.path);const rule=parseRuleDocument(content);if(v2RuleIds.has(rule.metadata.id)){throw new Error(`Project Rule id collides with a ZAIP Rule during migration: ${rule.metadata.id}`)}v2RuleIds.add(rule.metadata.id)}const existingManagedFiles=await readManagedFiles(filesystem);const managedFiles={...Object.fromEntries(Object.entries(existingManagedFiles).filter(([path])=>!path.startsWith(".agents/rules/"))),...Object.fromEntries(managedEmptyPaths.map(path=>[path,sha2562("")]))};for(const file2 of DEFAULT_V2_MANAGED_FILES){if(await filesystem.exists(file2.path)){const current=await filesystem.readText(file2.path);try{if(file2.path.startsWith(".agents/rules/"))parseRuleDocument(current);else parseRequirementDocument(current);continue}catch{const source=fingerprint.files.find(candidate=>candidate.path===file2.path);if(source===void 0)throw new Error(`Governance source missing: ${file2.path}`);managedFiles[file2.path]=sha2562(file2.content);operations.push(textOperation("convert","config",file2.path,source.sha256,file2.path,file2.content));continue}}managedFiles[file2.path]=sha2562(file2.content);operations.push(textOperation("convert","config",null,null,file2.path,file2.content))}for(const path of managedEmptyPaths){operations.push(textOperation("convert","config",null,null,path,""))}const cleanupPaths=fingerprint.files.map(file2=>file2.path).filter(path=>!path.startsWith(".agents/rules/")&&!path.startsWith(".agents/rules/project/")&&!path.startsWith(".agents/requirements/")&&!path.startsWith(".agents/skills/")).sort();const cleanupRoots=[".agents/specs",".agents/changes",".agents/tasks",".agents/decisions",".agents/runs",".agents/telemetry",".agents/evidence",".agents/generated",".agents/context",".agents/managed",".agents/project",".agents/evals",".agents/profiles",".agents/files"];const handledPaths=new Set(operations.filter(operation=>operation.source_path!==null).map(operation=>operation.source_path));for(const path of consumedTelemetryPaths)handledPaths.add(path);for(const path of cleanupPaths){if(handledPaths.has(path)||path.startsWith(".agents/generated/")||path.startsWith(".agents/context/")){continue}const source=fingerprint.files.find(file2=>file2.path===path);if(source===void 0)throw new Error(`Source disappeared while planning: ${path}`);const bytes=await readFile4(filesystem.resolve(path));operations.push(bytesOperation("archive","legacy",path,source.sha256,`${executionDirectory}/${migrationExecutionId}/artifacts/legacy/${sha2562(path).slice(0,24)}.archive`,bytes))}operations.push(textOperation("activate-config","config",".agents/manifest.yaml",manifestFile.sha256,".agents/config/project.yaml",serializeYaml({schema_version:1,zaip:{enabled:true},project:{id:requiredString2(project.id,"manifest.project.id"),name:requiredString2(project.name,"manifest.project.name"),timezone:stringOr(project.timezone,"America/Sao_Paulo")},stack:{id:stringOr(profile.id,"zaip-aios-stack"),overrides:{}},clients:{codex:agents.includes("codex"),claude:agents.includes("claude")},tracking:{enabled:true,currency:"BRL",storage_mode:"tracked_sanitized"}})),textOperation("activate-config","config",".agents/managed/files.json",fingerprint.files.find(file2=>file2.path===".agents/managed/files.json")?.sha256??null,".agents/config/framework.lock.yaml",serializeYaml({lock_version:2,framework:{version:stringOr(asRecord2(manifest.framework,"manifest.framework").version,"0.1.0"),distribution_sha256:null},layout:{version:2},resolved_profile:{id:stringOr(profile.id,"zaip-aios-stack"),sha256:null},managed_files:managedFiles})));const orderedOperations=operations.sort(operationOrder);const duplicateTarget=firstDuplicate(orderedOperations.map(operation=>operation.target_path));if(duplicateTarget!==null){throw new Error(`Migration plan contains duplicate target: ${duplicateTarget}`)}const withoutHash={schema_version:1,migration_id:migrationId,from_layout:1,to_layout:2,source_fingerprint:fingerprint,promotions,operations:orderedOperations,cleanup_paths:cleanupPaths,cleanup_roots:cleanupRoots,counts:{source_files:fingerprint.files.length,operations:orderedOperations.length,converted_changes:convertedChangeCount,converted_tasks:convertedTaskIds.size,converted_decisions:convertedDecisions,relocated_evidence:relocatedEvidence,converted_runs:convertedRuns,usage_records:usageRecords,archived_capabilities:archivedCapabilities,promoted_specs:promotedSpecs},findings};return{...withoutHash,plan_sha256:hashCanonical(withoutHash)}}import{createHash as createHash31}from"node:crypto";import{mkdir as mkdir2,readFile as readFile5,rename as rename2,rm as rm2,writeFile as writeFile2}from"node:fs/promises";import{dirname as dirname4}from"node:path";var MigrationPlanHashError=class extends Error{name="MigrationPlanHashError"};var MigrationSourceDivergenceError=class extends Error{name="MigrationSourceDivergenceError"};var MigrationCollisionError=class extends Error{name="MigrationCollisionError"};async function applyV1ToV2Migration(filesystem,plan,expectedHash){assertPlanHash(plan,expectedHash);const stateRoot=`.local/migrations/${plan.migration_id}`;const journalPath=`${stateRoot}/journal.json`;const inspected=await inspectTargets(filesystem,plan.operations);const journal=await readJournal(filesystem,journalPath);if(inspected.missing.length===0&&journal?.state==="completed"&&!await anyPathExists(filesystem,[...plan.cleanup_paths,...plan.cleanup_roots])){await persistMigrationPlan(filesystem,stateRoot,plan);return{migration_id:plan.migration_id,status:"noop",created:[],reused:inspected.identical,journal_path:journalPath}}if(journal?.state==="cleanup"||journal?.state==="completed"){await assertBackups(filesystem,stateRoot,plan.source_fingerprint);if(inspected.missing.length>0){throw new MigrationCollisionError(`Migration ${plan.migration_id} reached cleanup with missing V2 targets`)}for(const path of plan.cleanup_paths){await rm2(filesystem.resolve(path),{force:true})}for(const path of plan.cleanup_roots){await rm2(filesystem.resolve(path),{recursive:true,force:true})}await writeJournal(filesystem,journalPath,plan,"completed",journal.created,journal.reused);return{migration_id:plan.migration_id,status:"applied",created:[],reused:inspected.identical,journal_path:journalPath}}else{await assertSourceFingerprint(filesystem,plan.source_fingerprint)}const ownedCreated=journal===null?inspected.missing:[...journal.created];const ownedReused=journal===null?inspected.identical:[...journal.reused];await persistMigrationPlan(filesystem,stateRoot,plan);await writeJournal(filesystem,journalPath,plan,"backing_up",ownedCreated,ownedReused);for(const source of plan.source_fingerprint.files){const sourceBytes=await readFile5(filesystem.resolve(source.path));const backupPath=`${stateRoot}/backup/${source.path}`;if(await filesystem.exists(backupPath)){const backupBytes=await readFile5(filesystem.resolve(backupPath));if(sha2565(backupBytes)!==source.sha256){throw new MigrationCollisionError(`Divergent migration backup: ${backupPath}`)}}else{await writeBytesAtomic(filesystem,backupPath,sourceBytes)}}await writeJournal(filesystem,journalPath,plan,"staging",ownedCreated,ownedReused);for(const operation of plan.operations){const stagePath=`${stateRoot}/staging/${operation.target_path}`;const bytes=Buffer.from(operation.content_base64,"base64");if(sha2565(bytes)!==operation.target_sha256){throw new MigrationPlanHashError(`Operation content hash does not match: ${operation.target_path}`)}if(await filesystem.exists(stagePath)){const staged=await readFile5(filesystem.resolve(stagePath));if(sha2565(staged)!==operation.target_sha256){throw new MigrationCollisionError(`Divergent staged target: ${stagePath}`)}}else{await writeBytesAtomic(filesystem,stagePath,bytes)}}await writeJournal(filesystem,journalPath,plan,"staged",ownedCreated,ownedReused);const created=[];const reused=new Set(inspected.identical);const ordinary=plan.operations.filter(operation=>operation.kind!=="activate-config");for(const operation of ordinary){const result2=await commitOperation(filesystem,stateRoot,operation);if(result2==="created")created.push(operation.target_path);else reused.add(operation.target_path)}await writeJournal(filesystem,journalPath,plan,"commit_started",ownedCreated,ownedReused);const configs=plan.operations.filter(operation=>operation.kind==="activate-config").sort((left,right)=>configOrder2(left.target_path)-configOrder2(right.target_path));if(configs.map(operation=>operation.target_path).join("|")!==".agents/config/project.yaml|.agents/config/framework.lock.yaml"){throw new MigrationPlanHashError("Migration activation must contain exactly both V2 config files")}for(const operation of configs){const result2=await commitOperation(filesystem,stateRoot,operation);if(result2==="created")created.push(operation.target_path);else reused.add(operation.target_path)}await writeJournal(filesystem,journalPath,plan,"cleanup",ownedCreated,ownedReused);for(const path of plan.cleanup_paths){await rm2(filesystem.resolve(path),{force:true})}for(const path of plan.cleanup_roots){await rm2(filesystem.resolve(path),{recursive:true,force:true})}await writeJournal(filesystem,journalPath,plan,"completed",ownedCreated,ownedReused);return{migration_id:plan.migration_id,status:created.length===0?"noop":"applied",created:created.sort(),reused:[...reused].sort(),journal_path:journalPath}}async function readPersistedMigrationPlan(filesystem,migrationId){if(!/^MIG-[A-Z0-9]+$/.test(migrationId))throw new Error(`Invalid migration id: ${migrationId}`);const path=`.local/migrations/${migrationId}/plan.json`;if(!await filesystem.exists(path))return null;const parsed=JSON.parse(await filesystem.readText(path));if(parsed.migration_id!==migrationId){throw new MigrationPlanHashError(`Persisted migration id does not match ${migrationId}`)}assertPlanHash(parsed,parsed.plan_sha256);return parsed}async function inspectV1ToV2Migration(filesystem,plan){assertPlanHash(plan,plan.plan_sha256);const stateRoot=`.local/migrations/${plan.migration_id}`;const journalPath=`${stateRoot}/journal.json`;const[journal,targets]=await Promise.all([readJournal(filesystem,journalPath),inspectTargets(filesystem,plan.operations,true)]);let presentBackups=0;for(const source of plan.source_fingerprint.files){if(await filesystem.exists(`${stateRoot}/backup/${source.path}`))presentBackups+=1}let cleanupRemaining=0;for(const path of[...plan.cleanup_paths,...plan.cleanup_roots]){if(await filesystem.exists(path))cleanupRemaining+=1}return{migration_id:plan.migration_id,state:journal?.state??"not_started",journal_path:journalPath,targets:{identical:targets.identical.length,missing:targets.missing.length},backups:{present:presentBackups,expected:plan.source_fingerprint.files.length},cleanup_remaining:cleanupRemaining}}async function rollbackV1ToV2Migration(filesystem,plan,expectedHash=plan.plan_sha256){assertPlanHash(plan,expectedHash);const stateRoot=`.local/migrations/${plan.migration_id}`;const journalPath=`${stateRoot}/journal.json`;const journal=await readJournal(filesystem,journalPath);if(journal===null)throw new Error(`Migration journal not found: ${journalPath}`);const targetInspection=await inspectTargets(filesystem,plan.operations,true);const backups=new Map;for(const source of plan.source_fingerprint.files){const backupPath=`${stateRoot}/backup/${source.path}`;if(!await filesystem.exists(backupPath))throw new Error(`Migration backup is missing: ${backupPath}`);const backup=await readFile5(filesystem.resolve(backupPath));if(sha2565(backup)!==source.sha256){throw new MigrationSourceDivergenceError(`Migration backup diverged: ${backupPath}`)}if(plan.cleanup_paths.includes(source.path)&&await filesystem.exists(source.path)){const current=await readFile5(filesystem.resolve(source.path));if(sha2565(current)!==source.sha256){throw new MigrationSourceDivergenceError(`V1 source changed after migration: ${source.path}`)}}backups.set(source.path,backup)}if(targetInspection.identical.length===0&&journal.state==="rolled_back"){return{migration_id:plan.migration_id,status:"noop",removed:[],restored:[],journal_path:journalPath}}await writeJournal(filesystem,journalPath,plan,"rolling_back",journal.created,journal.reused);const removed=[];const createdTargets=new Set(journal.created);for(const operation of[...plan.operations].sort((left,right)=>{const leftConfig=left.kind==="activate-config"?0:1;const rightConfig=right.kind==="activate-config"?0:1;return leftConfig-rightConfig||right.target_path.localeCompare(left.target_path)})){if(createdTargets.has(operation.target_path)&&await filesystem.exists(operation.target_path)){await rm2(filesystem.resolve(operation.target_path),{force:true});removed.push(operation.target_path)}}const restored=[];for(const[path,backup]of backups){if(plan.cleanup_paths.includes(path)&&!await filesystem.exists(path)){await writeBytesAtomic(filesystem,path,backup);restored.push(path)}}await writeJournal(filesystem,journalPath,plan,"rolled_back",journal.created,journal.reused);return{migration_id:plan.migration_id,status:"rolled-back",removed:removed.sort(),restored:restored.sort(),journal_path:journalPath}}async function fingerprintV1Source2(filesystem){const paths=(await filesystem.listFiles(".agents")).filter(path=>!path.startsWith(".agents/config/")&&!path.startsWith(".agents/data/")).sort();const files=[];for(const path of paths){const bytes=await readFile5(filesystem.resolve(path));files.push({path,sha256:sha2565(bytes),size:bytes.byteLength})}return{sha256:hashCanonical3(files),files}}async function assertSourceFingerprint(filesystem,expected){const actual=await fingerprintV1Source2(filesystem);if(actual.sha256!==expected.sha256||JSON.stringify(actual.files)!==JSON.stringify(expected.files)){throw new MigrationSourceDivergenceError(`V1 source fingerprint changed: expected ${expected.sha256}, received ${actual.sha256}`)}}async function persistMigrationPlan(filesystem,stateRoot,plan){const path=`${stateRoot}/plan.json`;const existing=await readPersistedMigrationPlan(filesystem,plan.migration_id);if(existing!==null){if(existing.plan_sha256!==plan.plan_sha256||JSON.stringify(canonicalize4(existing))!==JSON.stringify(canonicalize4(plan))){throw new MigrationPlanHashError(`Persisted migration plan diverges: ${path}`)}return}await writeBytesAtomic(filesystem,path,Buffer.from(`${JSON.stringify(plan,null,2)}
 `,"utf8"))}function assertPlanHash(plan,expectedHash){const{plan_sha256:actualHash,...withoutHash}=plan;const calculated=hashCanonical3(withoutHash);if(actualHash!==calculated||actualHash!==expectedHash){throw new MigrationPlanHashError(`Migration plan hash mismatch: expected ${expectedHash}, calculated ${calculated}`)}}async function inspectTargets(filesystem,operations,allowMissing=false){const identical=[];const missing=[];for(const operation of operations){if(!await filesystem.exists(operation.target_path)){missing.push(operation.target_path);continue}const target=await readFile5(filesystem.resolve(operation.target_path));const targetHash=sha2565(target);if(targetHash!==operation.target_sha256&&operation.source_path===operation.target_path&&targetHash===operation.source_sha256){missing.push(operation.target_path);continue}if(targetHash!==operation.target_sha256){throw new MigrationCollisionError(`Divergent migration target: ${operation.target_path}`)}identical.push(operation.target_path)}if(!allowMissing&&identical.length+missing.length!==operations.length){throw new MigrationCollisionError("Unable to inspect every migration target")}return{identical:identical.sort(),missing:missing.sort()}}async function commitOperation(filesystem,stateRoot,operation){const stagePath=`${stateRoot}/staging/${operation.target_path}`;if(await filesystem.exists(operation.target_path)){const existing=await readFile5(filesystem.resolve(operation.target_path));const existingHash=sha2565(existing);if(existingHash===operation.target_sha256){await rm2(filesystem.resolve(stagePath),{force:true});return"reused"}if(operation.source_path===operation.target_path&&existingHash===operation.source_sha256){const staged2=await readFile5(filesystem.resolve(stagePath));if(sha2565(staged2)!==operation.target_sha256){throw new MigrationCollisionError(`Divergent staged target: ${stagePath}`)}await rm2(filesystem.resolve(operation.target_path),{force:true});await rename2(filesystem.resolve(stagePath),filesystem.resolve(operation.target_path));return"created"}if(existingHash!==operation.target_sha256){throw new MigrationCollisionError(`Divergent migration target: ${operation.target_path}`)}}const staged=await readFile5(filesystem.resolve(stagePath));if(sha2565(staged)!==operation.target_sha256){throw new MigrationCollisionError(`Divergent staged target: ${stagePath}`)}const target=filesystem.resolve(operation.target_path);await mkdir2(dirname4(target),{recursive:true});if(await filesystem.exists(operation.target_path)){throw new MigrationCollisionError(`Migration target appeared during commit: ${operation.target_path}`)}await rename2(filesystem.resolve(stagePath),target);return"created"}async function readJournal(filesystem,path){if(!await filesystem.exists(path))return null;const parsed=JSON.parse(await filesystem.readText(path));return{...parsed,created:parsed.created??[],reused:parsed.reused??[]}}async function writeJournal(filesystem,path,plan,state,created=[],reused=[]){const journal={schema_version:1,migration_id:plan.migration_id,plan_sha256:plan.plan_sha256,source_sha256:plan.source_fingerprint.sha256,state,created:[...created].sort(),reused:[...reused].sort()};await writeBytesAtomic(filesystem,path,Buffer.from(`${JSON.stringify(journal,null,2)}
-`,"utf8"))}async function assertBackups(filesystem,stateRoot,fingerprint){for(const source of fingerprint.files){const path=`${stateRoot}/backup/${source.path}`;if(!await filesystem.exists(path)){throw new MigrationSourceDivergenceError(`Migration backup is missing: ${path}`)}const bytes=await readFile5(filesystem.resolve(path));if(sha2565(bytes)!==source.sha256){throw new MigrationSourceDivergenceError(`Migration backup diverged: ${path}`)}}}async function anyPathExists(filesystem,paths){for(const path of paths)if(await filesystem.exists(path))return true;return false}async function writeBytesAtomic(filesystem,path,bytes){const target=filesystem.resolve(path);await mkdir2(dirname4(target),{recursive:true});const temporary=`${target}.${process.pid}.${sha2565(bytes).slice(0,12)}.tmp`;await rm2(temporary,{force:true});await writeFile2(temporary,bytes,{flag:"wx"});if(await filesystem.exists(path))await rm2(target,{force:true});await rename2(temporary,target)}function configOrder2(path){if(path===".agents/config/project.yaml")return 0;if(path===".agents/config/framework.lock.yaml")return 1;return 2}function sha2565(value){return createHash31("sha256").update(value).digest("hex")}function hashCanonical3(value){return sha2565(JSON.stringify(canonicalize4(value)))}function canonicalize4(value){if(Array.isArray(value))return value.map(canonicalize4);if(value!==null&&typeof value==="object"){return Object.fromEntries(Object.entries(value).sort(([left],[right])=>left.localeCompare(right)).map(([key,nested])=>[key,canonicalize4(nested)]))}return value}var DISTRIBUTION_VERSION="4.6.0";async function verifyDistribution(filesystem){const checksumPath="checksums.sha256";if(!await filesystem.exists(checksumPath)){return{valid:false,invalid:[checksumPath]}}const lines2=(await filesystem.readText(checksumPath)).split(/\r?\n/).filter(Boolean);const invalid=[];for(const line of lines2){const match=line.match(/^([a-f0-9]{64}) {2}(.+)$/);if(!match?.[1]||!match[2]||!await filesystem.exists(match[2])){invalid.push(match?.[2]??line);continue}const actual=createHash32("sha256").update(await filesystem.readBytes(match[2])).digest("hex");if(actual!==match[1])invalid.push(match[2])}return{valid:invalid.length===0,invalid}}async function migrateProject(filesystem,dryRun=false){const path=".agents/manifest.yaml";const raw=parseYaml(await filesystem.readText(path));if(typeof raw==="object"&&raw!==null&&"schema_version"in raw){await new ManifestRepository(filesystem).read();return{from:1,to:1,changed:[],dryRun}}if(typeof raw!=="object"||raw===null||!("version"in raw)||!("project"in raw)){throw new Error("Unsupported legacy manifest; automatic migration is unsafe")}const legacy2=raw;if(legacy2.version!==1||typeof legacy2.project.name!=="string"){throw new Error("Unsupported legacy manifest version")}const migrated={schema_version:1,project:{id:typeof legacy2.project.id==="string"?legacy2.project.id:normalizeShortName(legacy2.project.name).toLowerCase(),name:legacy2.project.name,timezone:"America/Sao_Paulo"},framework:{version:DISTRIBUTION_VERSION},layout:{version:1,managed_namespace:".agents/managed",project_namespace:".agents/project"},profile:{id:"zaip-aios-stack"},agents:["codex","claude"],paths:{specs:".agents/specs",changes:".agents/changes",tasks:".agents/tasks",decisions:".agents/decisions",runs:".agents/runs"}};if(!dryRun)await filesystem.writeTextAtomic(path,serializeYaml(migrated));return{from:0,to:1,changed:[path],dryRun}}async function upgradeDistribution(workspaceRoot,sourcePath,dryRun=false){const root=resolve6(workspaceRoot);const source=resolve6(root,sourcePath);const target=resolve6(root,".agents/runtime");const backup=resolve6(root,".local/rollback/runtime");const fromRoot=relative6(root,source);if(fromRoot===".."||fromRoot.startsWith("../")||fromRoot.startsWith("..\\")||isAbsolute6(fromRoot)){throw new Error("Upgrade source escapes workspace")}if(source===target||source.startsWith(`${target}\\`)||source.startsWith(`${target}/`)){throw new Error("Upgrade source must not be inside the active distribution")}const verification=await verifyDistribution(new WorkspaceFileSystem(source));if(!verification.valid){throw new Error(`Upgrade source checksum failed: ${verification.invalid.join(", ")}`)}if(dryRun)return{changed:[".agents/runtime"],backup:".local/rollback/runtime",dryRun:true};await mkdir3(resolve6(root,".local/rollback"),{recursive:true});await rm3(backup,{recursive:true,force:true});const hadTarget=await new WorkspaceFileSystem(root).exists(".agents/runtime");if(hadTarget)await rename3(target,backup);try{await cp(source,target,{recursive:true,force:false,errorOnExist:true})}catch(error51){await rm3(target,{recursive:true,force:true});if(hadTarget)await rename3(backup,target);throw error51}return{changed:[".agents/runtime"],backup:".local/rollback/runtime",dryRun:false}}async function rollbackDistribution(workspaceRoot){const root=resolve6(workspaceRoot);const target=resolve6(root,".agents/runtime");const backup=resolve6(root,".local/rollback/runtime");await rm3(target,{recursive:true,force:true});await rename3(backup,target)}async function doctorProject(filesystem){const findings=[];for(const path of[".agents/manifest.yaml",".agents/constitution.md","AGENTS.md"]){if(!await filesystem.exists(path)){findings.push({severity:"error",path,message:"Required ZAIP-AIOS file is missing"})}}if(!await filesystem.exists(".git")){findings.push({severity:"warning",path:".git",message:"Git-native audit requires a Git repository"})}return findings}init_cli_arguments();import{createHash as createHash33}from"node:crypto";import{cp as cp2,lstat as lstat5,mkdir as mkdir4,readdir as readdir2,readFile as readFile6,rename as rename4,rm as rm4}from"node:fs/promises";import{dirname as dirname5,relative as relative7,resolve as resolve7,sep as sep4}from"node:path";var MANIFEST=".zaip-managed.json";async function planManagedAssetInstalls(distributionRoot,workspaceRoot){const[dashboard,design]=await Promise.all([planDashboardInstall(distributionRoot,workspaceRoot),planDesignInstall(distributionRoot,workspaceRoot)]);return{dashboard,design}}async function applyManagedAssetInstalls(plans){const[dashboard,design]=await Promise.all([applyDashboardInstall(plans.dashboard),applyDesignInstall(plans.design)]);return{dashboard,design}}async function planDashboardInstall(distributionRoot,workspaceRoot){return planManagedAssetInstall(distributionRoot,workspaceRoot,"dashboard")}async function planDesignInstall(distributionRoot,workspaceRoot){return planManagedAssetInstall(distributionRoot,workspaceRoot,"design")}async function planManagedAssetInstall(distributionRoot,workspaceRoot,asset){const source=resolve7(distributionRoot,asset);const destination=resolve7(workspaceRoot,`.agents/${asset}`);const sourceManifest=await readAndValidateManifest(source,asset);await assertManifestFiles(source,sourceManifest,asset);const sourceFiles=new Map(sourceManifest.files.map(file2=>[file2.path,file2.sha256]));const sourcePaths=[...sourceFiles.keys(),MANIFEST].sort();if(!await exists(destination)){return result(asset,source,destination,sourcePaths.map(path=>`.agents/${asset}/${path}`),[],[],[],false)}const currentManifestPath=resolve7(destination,MANIFEST);if(!await exists(currentManifestPath)){return result(asset,source,destination,[],[],[],[`.agents/${asset}`],false)}let currentManifest;try{currentManifest=await readAndValidateManifest(destination,asset)}catch{return result(asset,source,destination,[],[],[],[`.agents/${asset}/${MANIFEST}`],false)}const currentFiles=new Map(currentManifest.files.map(file2=>[file2.path,file2.sha256]));const conflicts=[];const actual=await relativeFiles(destination);const known2=new Set([...currentFiles.keys(),MANIFEST]);for(const path of actual){if(!known2.has(path))conflicts.push(`.agents/${asset}/${path}`)}for(const[path,expected]of currentFiles){const absolute=safeResolve(destination,path);if(!await exists(absolute)||await hashFile(absolute)!==expected){conflicts.push(`.agents/${asset}/${path}`)}}if(conflicts.length>0){return result(asset,source,destination,[],[],[],[...new Set(conflicts)].sort(),false)}const created=[];const updated=[];const existing=[];for(const[path,expected]of sourceFiles){const portable=`.agents/${asset}/${path}`;const current=currentFiles.get(path);if(current===void 0)created.push(portable);else if(current===expected)existing.push(portable);else updated.push(portable)}for(const path of currentFiles.keys()){if(!sourceFiles.has(path))updated.push(`.agents/${asset}/${path}`)}updated.push(`.agents/${asset}/${MANIFEST}`);return result(asset,source,destination,created,updated,existing,[],false)}async function applyDashboardInstall(plan){return applyManagedAssetInstall(plan)}async function applyDesignInstall(plan){return applyManagedAssetInstall(plan)}async function applyManagedAssetInstall(plan){if(plan.conflicts.length>0)throw new Error(`${plan.asset} install has unresolved conflicts`);const parent=dirname5(plan.destination);const nonce=`${process.pid}-${Date.now()}`;const staging=resolve7(parent,`.${plan.asset}.zaip-new-${nonce}`);const backup=resolve7(parent,`.${plan.asset}.zaip-old-${nonce}`);await mkdir4(parent,{recursive:true});await cp2(plan.source,staging,{recursive:true,errorOnExist:true,force:false});const hadDestination=await exists(plan.destination);try{if(hadDestination)await rename4(plan.destination,backup);await rename4(staging,plan.destination);if(hadDestination)await rm4(backup,{recursive:true,force:true})}catch(error51){await rm4(staging,{recursive:true,force:true});if(hadDestination&&await exists(backup)&&!await exists(plan.destination)){await rename4(backup,plan.destination)}throw error51}return{...plan,applied:true}}async function validateInstalledDashboard(workspaceRoot){return validateInstalledManagedAsset(workspaceRoot,"dashboard")}async function validateInstalledDesign(workspaceRoot){return validateInstalledManagedAsset(workspaceRoot,"design")}async function validateInstalledManagedAsset(workspaceRoot,asset){const root=resolve7(workspaceRoot,`.agents/${asset}`);if(!await exists(root)){return[{path:`.agents/${asset}`,message:`Managed ZAIP ${asset} is missing`}]}let manifest;try{manifest=await readAndValidateManifest(root,asset)}catch(error51){return[{path:`.agents/${asset}/${MANIFEST}`,message:error51 instanceof Error?error51.message:String(error51)}]}const findings=[];for(const file2 of manifest.files){const absolute=safeResolve(root,file2.path);if(!await exists(absolute)){findings.push({path:`.agents/${asset}/${file2.path}`,message:"Managed file is missing"})}else if(await hashFile(absolute)!==file2.sha256){findings.push({path:`.agents/${asset}/${file2.path}`,message:"Managed file checksum drift"})}}return findings}async function readAndValidateManifest(root,asset){const parsed=JSON.parse(await readFile6(resolve7(root,MANIFEST),"utf8"));if(typeof parsed!=="object"||parsed===null)throw new Error(`Invalid ${asset} manifest`);const value=parsed;if(value.schemaVersion!==1||typeof value.version!=="string"||!Array.isArray(value.files)){throw new Error(`Invalid ${asset} manifest fields`)}const seen=new Set;const files=value.files.map(entry2=>{if(typeof entry2!=="object"||entry2===null)throw new Error(`Invalid ${asset} file`);const file2=entry2;if(typeof file2.path!=="string"||typeof file2.sha256!=="string"||!/^[a-f0-9]{64}$/.test(file2.sha256)){throw new Error(`Invalid ${asset} file fields`)}safeResolve(root,file2.path);if(seen.has(file2.path))throw new Error(`Duplicate ${asset} path: ${file2.path}`);seen.add(file2.path);return{path:file2.path,sha256:file2.sha256}});return{schemaVersion:1,version:value.version,files}}async function assertManifestFiles(root,manifest,asset){const actual=await relativeFiles(root);const expected=new Set([...manifest.files.map(file2=>file2.path),MANIFEST]);const extra=actual.filter(path=>!expected.has(path));if(extra.length>0)throw new Error(`Unmanaged ${asset} release files: ${extra.join(", ")}`);for(const file2 of manifest.files){const absolute=safeResolve(root,file2.path);if(!await exists(absolute))throw new Error(`${asset} release file missing: ${file2.path}`);if(await hashFile(absolute)!==file2.sha256){throw new Error(`${asset} release checksum mismatch: ${file2.path}`)}}}async function relativeFiles(root){const entries=await readdir2(root,{recursive:true,withFileTypes:true});return entries.filter(entry2=>entry2.isFile()).map(entry2=>relative7(root,resolve7(entry2.parentPath,entry2.name)).replaceAll("\\","/")).sort()}function safeResolve(root,portable){if(portable.length===0||portable.includes("\\")||portable.includes("\0")||portable.startsWith("/")||/^[A-Za-z]:/.test(portable)||portable.split("/").some(part=>part.length===0||part==="."||part==="..")){throw new Error(`Unsafe managed asset path: ${portable}`)}const destination=resolve7(root,portable);if(!destination.startsWith(`${resolve7(root)}${sep4}`)){throw new Error(`Managed asset path escapes root: ${portable}`)}return destination}async function hashFile(path){return createHash33("sha256").update(await readFile6(path)).digest("hex")}async function exists(path){return lstat5(path).then(()=>true,error51=>{if(error51 instanceof Error&&"code"in error51&&error51.code==="ENOENT")return false;throw error51})}function result(asset,source,destination,created,updated,existing,conflicts,applied){return{asset,source,destination,created:[...created].sort(),updated:[...new Set(updated)].sort(),existing:[...existing].sort(),conflicts:[...conflicts].sort(),applied}}import{basename,dirname as dirname6,resolve as resolve8}from"node:path";async function dashboardDoctorFindings(executable,workspaceRoot){if(executable===void 0)return[];const executableRoot=resolve8(dirname6(executable),"..");const distributionRoot=basename(executableRoot)===".agents"?executableRoot:resolve8(executableRoot,"..");if(basename(distributionRoot)!==".agents")return[];return(await validateInstalledDashboard(workspaceRoot)).map(finding3=>({severity:"error",code:"dashboard-drift",...finding3,state:"active"}))}async function designDoctorFindings(executable,workspaceRoot){if(executable===void 0)return[];const executableRoot=resolve8(dirname6(executable),"..");const distributionRoot=basename(executableRoot)===".agents"?executableRoot:resolve8(executableRoot,"..");if(basename(distributionRoot)!==".agents")return[];return(await validateInstalledDesign(workspaceRoot)).map(finding3=>({severity:"error",code:"design-drift",...finding3,state:"active"}))}async function managedAssetDoctorFindings(executable,workspaceRoot,filesystem){if(executable!==void 0&&filesystem!==void 0){const executableRoot=resolve8(dirname6(executable),"..");const distributionRoot=basename(executableRoot)===".agents"?executableRoot:resolve8(executableRoot,"..");if(await isFrameworkSourceWorkspace(filesystem,workspaceRoot,distributionRoot))return[]}return(await Promise.all([dashboardDoctorFindings(executable,workspaceRoot),designDoctorFindings(executable,workspaceRoot)])).flat()}async function isFrameworkSourceWorkspace(filesystem,root,distributionRoot){if(resolve8(root,".agents")!==distributionRoot||!await filesystem.exists("package.json")){return false}try{const manifest=JSON.parse(await filesystem.readText("package.json"));return manifest.name==="@zaip-ai/aios"}catch{return false}}async function frameworkSourceTemplateFiles(filesystem){const packagedAgentsRoot=basename(filesystem.root)===".agents";const roots2=packagedAgentsRoot?["config/agents","rules","requirements","skills","zaip-aios","tools"]:[".agents/rules",".agents/requirements",".agents/skills",".agents/zaip-aios",".agents/tools"];const paths=(await Promise.all(roots2.map(path=>filesystem.listFiles(path)))).flat().filter(path=>!path.endsWith("/.gitkeep")).sort();return Promise.all(paths.map(async path=>({path:packagedAgentsRoot?`.agents/${path}`:path,content:await filesystem.readText(path)})))}init_src2();init_src();init_v2_router();init_previous_stop_recovery();import{createHash as createHash55}from"node:crypto";import{lstat as lstat13,readFile as readFile11}from"node:fs/promises";import{resolve as resolve19}from"node:path";var hash5=value=>createHash55("sha256").update(value).digest("hex");async function boundedFile(path){const info=await lstat13(path);if(!info.isFile()||info.isSymbolicLink()||info.size>2097152)throw new Error("Unsafe hook readiness file");return readFile11(path)}async function hookReadiness(root,session=process.env.CODEX_THREAD_ID){let fingerprint;try{const files=await Promise.all(HOOK_ACTIVATION_FILES.map(async file2=>[file2,hash5(await boundedFile(resolve19(root,file2)))]));fingerprint=hash5(JSON.stringify(files))}catch{return{state:"installation_incomplete",full_integration:false,trust:"unknown",events:[]}}const events=await Promise.all(HOOK_ACTIVATION_EVENTS.map(async event=>{try{const receipt=JSON.parse((await boundedFile(resolve19(root,`.local/hooks/activation/${event}.json`))).toString("utf8"));const current=receipt.schema_version===1&&receipt.event===event&&receipt.fingerprint===fingerprint&&typeof receipt.session_id==="string"&&receipt.session_id.length>0&&typeof receipt.turn_id==="string"&&receipt.turn_id.length>0&&(!session||receipt.session_id===session)&&Number.isFinite(Date.parse(receipt.observed_at));let closure=null;if(current&&event==="Stop"){const key=hash5(JSON.stringify([receipt.session_id,receipt.turn_id]));closure="pending";try{const stop=JSON.parse((await boundedFile(resolve19(root,`.local/hooks/stop-${key}.json`))).toString("utf8"));if(stop.session_id===receipt.session_id&&stop.turn_id===receipt.turn_id&&stop.state==="persisted"&&typeof stop.run_id==="string"){const filesystem=new WorkspaceFileSystem(root);await verifyStopPersistence(filesystem,createV2Composition(filesystem,await loadWorkspaceLayout(filesystem)),receipt.session_id,receipt.turn_id,stop.run_id);closure="confirmed"}}catch{}}return{event,state:current?"observed":"unverified",outcome:current?receipt.outcome:null,observed_at:current?receipt.observed_at:null,session_id:current?receipt.session_id:null,closure}}catch{return{event,state:"unverified",outcome:null,observed_at:null}}}));const sessions=new Set(events.filter(event=>event.state==="observed").map(event=>event.session_id));const full=events.every(event=>event.state==="observed")&&sessions.size===1;const closed=events.some(event=>event.event==="Stop"&&event.closure==="confirmed");const partial2=events.some(event=>event.state==="observed");return{state:full&&closed?"validated":full?"closure_pending":partial2?"activation_partial":"activation_unverified",full_integration:full&&closed,trust:"not_read_from_host",fingerprint,events,limitations:["Local event receipts prove invocation, not permission persistence or successful canonical closure.","Stop is observed only after the preceding answer ends; verify its closure separately in the next interaction."],instructions:full?null:partial2?'H\xE1 execu\xE7\xE3o observada. Valide os eventos reais ainda n\xE3o observados em um fluxo nativo pequeno; confirme Stop na intera\xE7\xE3o seguinte. Quando houver o aviso "precisam de revis\xE3o", abra a revis\xE3o dos hooks ZAIP pelo \xEDcone de hooks (\xE2ncora) na \xE1rea de digita\xE7\xE3o do chat do Codex e clique em Permitir tudo. Se houver terceiros, selecione somente ZAIP. Interruptor ligado n\xE3o comprova revis\xE3o nem aprova\xE7\xE3o. Aus\xEAncia de evid\xEAncia n\xE3o prova recusa. N\xE3o repita a aprova\xE7\xE3o se a integra\xE7\xE3o atual j\xE1 estiver validada.':'Abra o \xEDcone de hooks (\xE2ncora) na \xE1rea de digita\xE7\xE3o do chat do Codex. Quando houver o aviso "precisam de revis\xE3o", abra a revis\xE3o dos hooks ZAIP e clique em Permitir tudo. Se houver terceiros, selecione somente ZAIP. Interruptor ligado n\xE3o comprova revis\xE3o nem aprova\xE7\xE3o. Aus\xEAncia de evid\xEAncia n\xE3o prova recusa. N\xE3o repita a aprova\xE7\xE3o se a integra\xE7\xE3o atual j\xE1 estiver validada. Avise para validar eventos reais; confirme Stop na intera\xE7\xE3o seguinte. N\xE3o basta executar os scripts diretamente.'}}init_lifecycle_manifest_commands();init_cli_arguments();async function readMigrationOptions(filesystem,parsed){const path=parsed.options.promotions;if(path===void 0)return{};const decoded=JSON.parse(await filesystem.readText(path));const promotions=Array.isArray(decoded)?decoded:typeof decoded==="object"&&decoded!==null&&"promotions"in decoded?decoded.promotions:void 0;if(!Array.isArray(promotions)){throw new UsageError("--promotions must point to a JSON array or an object containing a promotions array")}return{promotions}}function migrationPlanOutput(plan,verbose){const operationCounts=Object.fromEntries([...new Set(plan.operations.map(operation=>operation.category))].sort().map(category=>[category,plan.operations.filter(operation=>operation.category===category).length]));return{schema_version:plan.schema_version,migration_id:plan.migration_id,from_layout:plan.from_layout,to_layout:plan.to_layout,source_fingerprint:{sha256:plan.source_fingerprint.sha256,file_count:plan.source_fingerprint.files.length,total_bytes:plan.source_fingerprint.files.reduce((total,file2)=>total+file2.size,0)},promotions:plan.promotions,counts:plan.counts,operation_counts:operationCounts,findings:plan.findings,cleanup:{path_count:plan.cleanup_paths.length,roots:plan.cleanup_roots},plan_sha256:plan.plan_sha256,...verbose?{operations:plan.operations.map(({content_base64:_,...operation})=>operation),source_files:plan.source_fingerprint.files,cleanup_paths:plan.cleanup_paths}:{}}}init_v2_router();var EXIT={success:0,error:1,conformity:3,security:5,prerequisite:6};async function runDistributionCommand(context){const{area,action,parsed,filesystem,root,json:json2}=context;if(area==="setup"){const executable=process.argv[1];let templateFiles=[];let assetPlans=null;if(executable!==void 0){const executableRoot=resolve20(dirname14(executable),"..");const distributionRoot=basename5(executableRoot)===".agents"?executableRoot:resolve20(executableRoot,"..");if(basename5(distributionRoot)===".agents"){const distributionFilesystem=new WorkspaceFileSystem(distributionRoot);const runtimeFilesystem=new WorkspaceFileSystem(basename5(executableRoot)===".agents"?distributionRoot:executableRoot);const verification=await verifyDistribution(runtimeFilesystem);if(!verification.valid){output(verification,json2,true);return EXIT.security}const frameworkSource=await isFrameworkSourceWorkspace(filesystem,root,distributionRoot);templateFiles=frameworkSource?await frameworkSourceTemplateFiles(filesystem):await frameworkSourceTemplateFiles(distributionFilesystem);if(!frameworkSource)assetPlans=await planManagedAssetInstalls(distributionRoot,root)}}const hasLegacyManifest=await filesystem.exists(".agents/manifest.yaml");const hasV2Config=await filesystem.exists(".agents/config/project.yaml")||await filesystem.exists(".agents/config/framework.lock.yaml");if(hasLegacyManifest&&!hasV2Config){throw new UsageError("V1 workspace is read-only: review `migrate plan`, then run `migrate apply`")}const options={projectName:parsed.options.name??basename5(root),bootstrapTask:parsed.flags.has("bootstrap-task"),templateFiles:templateFiles.filter(file2=>/^(?:\.agents\/config\/agents\/catalog\.yaml|\.agents\/(?:rules|requirements|skills)\/)/.test(file2.path))};const dryRun=parsed.flags.has("dry-run");if(assetPlans!==null){const preflight=await setupProjectV2(filesystem,{...options,dryRun:true});const conflicts=[...preflight.conflicts,...Object.values(assetPlans).flatMap(plan=>plan.conflicts)].sort();if(dryRun||conflicts.length>0){const result3={...preflight,conflicts,...assetPlans};output(result3,json2);return conflicts.length>0?EXIT.conformity:EXIT.success}}const setup=await setupProjectV2(filesystem,{...options,dryRun});const installedAssets=assetPlans!==null&&setup.applied?await applyManagedAssetInstalls(assetPlans):assetPlans;const result2=installedAssets===null?setup:{...setup,...installedAssets};if(!dryRun&&setup.applied&&setup.conflicts.length===0&&!await filesystem.exists(".agents/records/lifecycle/manifest.json")){const composition=createV2Composition(filesystem,await loadWorkspaceLayout(filesystem));await runLifecycleManifestMaintenance("rebuild",{...parsed,flags:new Set([...parsed.flags,"confirm-full-scan"])},filesystem,composition)}output(result2,json2);return setup.conflicts.length>0||!setup.dryRun&&!setup.applied?EXIT.conformity:EXIT.success}if(area==="doctor"){const hasV2Config=await filesystem.exists(".agents/config/project.yaml")||await filesystem.exists(".agents/config/framework.lock.yaml");const findings=hasV2Config?await doctorProjectV2(filesystem):await doctorProject(filesystem);const assetFindings=await managedAssetDoctorFindings(process.argv[1],root,filesystem);const combinedFindings=[...findings,...assetFindings];output({valid:combinedFindings.every(item=>item.severity!=="error"),findings:combinedFindings,hooks:await hookReadiness(root)},json2);return combinedFindings.some(item=>item.severity==="error")?EXIT.prerequisite:EXIT.success}if(area==="migrate"){if(action==="legacy-manifest"){if(await filesystem.exists(".agents/config/project.yaml")||await filesystem.exists(".agents/config/framework.lock.yaml")){throw new UsageError("legacy-manifest is disabled after V2 activation")}output(await migrateProject(filesystem,parsed.flags.has("dry-run")),json2);return EXIT.success}const migrationOptions=await readMigrationOptions(filesystem,parsed);if(action==="plan"||action===void 0&&parsed.flags.has("dry-run")){const plan=await planV1ToV2Migration(filesystem,migrationOptions);output(migrationPlanOutput(plan,parsed.flags.has("verbose")),json2);return EXIT.success}if(action==="apply"){requireOptions(parsed.options,["plan-hash"]);const plan=parsed.options.migration===void 0?await planV1ToV2Migration(filesystem,migrationOptions):await readPersistedMigrationPlan(filesystem,parsed.options.migration);if(plan===null){throw new UsageError(`Migration plan not found: ${parsed.options.migration}`)}output(await applyV1ToV2Migration(filesystem,plan,parsed.options["plan-hash"]),json2);return EXIT.success}if(action==="status"||action==="rollback"){requireOptions(parsed.options,["migration"]);const migrationId=parsed.options.migration;const plan=await readPersistedMigrationPlan(filesystem,migrationId);if(plan===null)throw new UsageError(`Migration plan not found: ${migrationId}`);if(action==="rollback"){output(await rollbackV1ToV2Migration(filesystem,plan,parsed.options["plan-hash"]??plan.plan_sha256),json2)}else{output({migration_id:migrationId,plan_hash:plan.plan_sha256,status:await inspectV1ToV2Migration(filesystem,plan),plan:migrationPlanOutput(plan,parsed.flags.has("verbose"))},json2)}return EXIT.success}throw new UsageError("migrate requires plan, apply --plan-hash HASH, status --migration ID, or rollback --migration ID")}if(area==="upgrade"){if(parsed.flags.has("rollback")){await rollbackDistribution(root);output({rolledBack:true},json2);return EXIT.success}const source=parsed.options.from;if(source===void 0)throw new UsageError("upgrade requires --from PATH or --rollback");output(await upgradeDistribution(root,source,parsed.flags.has("dry-run")),json2);return EXIT.success}return null}init_src();init_cli_arguments();import{dirname as dirname15}from"node:path";async function persistEvalReportV2(filesystem,layout,report,shortName,parsed){const scope=decisionV2ScopeOption(parsed);if(scope===void 0){throw new UsageError("V2 eval persistence requires --change or --execution (or use --no-write)")}const ownerPath=layout.activePath(scope.type,scope.id);if(!await filesystem.exists(ownerPath)){throw new UsageError(`${scope.type} not found for eval evidence: ${scope.id}`)}const id=createId("EVAL",shortName,{timeZone:layout.project.timezone});const path=`${dirname15(ownerPath)}/artifacts/evals/${id}.json`;await filesystem.writeTextExclusive(path,`${JSON.stringify({schema_version:2,id,generated_at:new Date().toISOString(),report},null,2)}
+`,"utf8"))}async function assertBackups(filesystem,stateRoot,fingerprint){for(const source of fingerprint.files){const path=`${stateRoot}/backup/${source.path}`;if(!await filesystem.exists(path)){throw new MigrationSourceDivergenceError(`Migration backup is missing: ${path}`)}const bytes=await readFile5(filesystem.resolve(path));if(sha2565(bytes)!==source.sha256){throw new MigrationSourceDivergenceError(`Migration backup diverged: ${path}`)}}}async function anyPathExists(filesystem,paths){for(const path of paths)if(await filesystem.exists(path))return true;return false}async function writeBytesAtomic(filesystem,path,bytes){const target=filesystem.resolve(path);await mkdir2(dirname4(target),{recursive:true});const temporary=`${target}.${process.pid}.${sha2565(bytes).slice(0,12)}.tmp`;await rm2(temporary,{force:true});await writeFile2(temporary,bytes,{flag:"wx"});if(await filesystem.exists(path))await rm2(target,{force:true});await rename2(temporary,target)}function configOrder2(path){if(path===".agents/config/project.yaml")return 0;if(path===".agents/config/framework.lock.yaml")return 1;return 2}function sha2565(value){return createHash31("sha256").update(value).digest("hex")}function hashCanonical3(value){return sha2565(JSON.stringify(canonicalize4(value)))}function canonicalize4(value){if(Array.isArray(value))return value.map(canonicalize4);if(value!==null&&typeof value==="object"){return Object.fromEntries(Object.entries(value).sort(([left],[right])=>left.localeCompare(right)).map(([key,nested])=>[key,canonicalize4(nested)]))}return value}var DISTRIBUTION_VERSION="4.7.0";async function verifyDistribution(filesystem){const checksumPath="checksums.sha256";if(!await filesystem.exists(checksumPath)){return{valid:false,invalid:[checksumPath]}}const lines2=(await filesystem.readText(checksumPath)).split(/\r?\n/).filter(Boolean);const invalid=[];for(const line of lines2){const match=line.match(/^([a-f0-9]{64}) {2}(.+)$/);if(!match?.[1]||!match[2]||!await filesystem.exists(match[2])){invalid.push(match?.[2]??line);continue}const actual=createHash32("sha256").update(await filesystem.readBytes(match[2])).digest("hex");if(actual!==match[1])invalid.push(match[2])}return{valid:invalid.length===0,invalid}}async function migrateProject(filesystem,dryRun=false){const path=".agents/manifest.yaml";const raw=parseYaml(await filesystem.readText(path));if(typeof raw==="object"&&raw!==null&&"schema_version"in raw){await new ManifestRepository(filesystem).read();return{from:1,to:1,changed:[],dryRun}}if(typeof raw!=="object"||raw===null||!("version"in raw)||!("project"in raw)){throw new Error("Unsupported legacy manifest; automatic migration is unsafe")}const legacy2=raw;if(legacy2.version!==1||typeof legacy2.project.name!=="string"){throw new Error("Unsupported legacy manifest version")}const migrated={schema_version:1,project:{id:typeof legacy2.project.id==="string"?legacy2.project.id:normalizeShortName(legacy2.project.name).toLowerCase(),name:legacy2.project.name,timezone:"America/Sao_Paulo"},framework:{version:DISTRIBUTION_VERSION},layout:{version:1,managed_namespace:".agents/managed",project_namespace:".agents/project"},profile:{id:"zaip-aios-stack"},agents:["codex","claude"],paths:{specs:".agents/specs",changes:".agents/changes",tasks:".agents/tasks",decisions:".agents/decisions",runs:".agents/runs"}};if(!dryRun)await filesystem.writeTextAtomic(path,serializeYaml(migrated));return{from:0,to:1,changed:[path],dryRun}}async function upgradeDistribution(workspaceRoot,sourcePath,dryRun=false){const root=resolve6(workspaceRoot);const source=resolve6(root,sourcePath);const target=resolve6(root,".agents/runtime");const backup=resolve6(root,".local/rollback/runtime");const fromRoot=relative6(root,source);if(fromRoot===".."||fromRoot.startsWith("../")||fromRoot.startsWith("..\\")||isAbsolute6(fromRoot)){throw new Error("Upgrade source escapes workspace")}if(source===target||source.startsWith(`${target}\\`)||source.startsWith(`${target}/`)){throw new Error("Upgrade source must not be inside the active distribution")}const verification=await verifyDistribution(new WorkspaceFileSystem(source));if(!verification.valid){throw new Error(`Upgrade source checksum failed: ${verification.invalid.join(", ")}`)}if(dryRun)return{changed:[".agents/runtime"],backup:".local/rollback/runtime",dryRun:true};await mkdir3(resolve6(root,".local/rollback"),{recursive:true});await rm3(backup,{recursive:true,force:true});const hadTarget=await new WorkspaceFileSystem(root).exists(".agents/runtime");if(hadTarget)await rename3(target,backup);try{await cp(source,target,{recursive:true,force:false,errorOnExist:true})}catch(error51){await rm3(target,{recursive:true,force:true});if(hadTarget)await rename3(backup,target);throw error51}return{changed:[".agents/runtime"],backup:".local/rollback/runtime",dryRun:false}}async function rollbackDistribution(workspaceRoot){const root=resolve6(workspaceRoot);const target=resolve6(root,".agents/runtime");const backup=resolve6(root,".local/rollback/runtime");await rm3(target,{recursive:true,force:true});await rename3(backup,target)}async function doctorProject(filesystem){const findings=[];for(const path of[".agents/manifest.yaml",".agents/constitution.md","AGENTS.md"]){if(!await filesystem.exists(path)){findings.push({severity:"error",path,message:"Required ZAIP-AIOS file is missing"})}}if(!await filesystem.exists(".git")){findings.push({severity:"warning",path:".git",message:"Git-native audit requires a Git repository"})}return findings}init_cli_arguments();import{createHash as createHash33}from"node:crypto";import{cp as cp2,lstat as lstat5,mkdir as mkdir4,readdir as readdir2,readFile as readFile6,rename as rename4,rm as rm4}from"node:fs/promises";import{dirname as dirname5,relative as relative7,resolve as resolve7,sep as sep4}from"node:path";var MANIFEST=".zaip-managed.json";async function planManagedAssetInstalls(distributionRoot,workspaceRoot){const[dashboard,design]=await Promise.all([planDashboardInstall(distributionRoot,workspaceRoot),planDesignInstall(distributionRoot,workspaceRoot)]);return{dashboard,design}}async function applyManagedAssetInstalls(plans){const[dashboard,design]=await Promise.all([applyDashboardInstall(plans.dashboard),applyDesignInstall(plans.design)]);return{dashboard,design}}async function planDashboardInstall(distributionRoot,workspaceRoot){return planManagedAssetInstall(distributionRoot,workspaceRoot,"dashboard")}async function planDesignInstall(distributionRoot,workspaceRoot){return planManagedAssetInstall(distributionRoot,workspaceRoot,"design")}async function planManagedAssetInstall(distributionRoot,workspaceRoot,asset){const source=resolve7(distributionRoot,asset);const destination=resolve7(workspaceRoot,`.agents/${asset}`);const sourceManifest=await readAndValidateManifest(source,asset);await assertManifestFiles(source,sourceManifest,asset);const sourceFiles=new Map(sourceManifest.files.map(file2=>[file2.path,file2.sha256]));const sourcePaths=[...sourceFiles.keys(),MANIFEST].sort();if(!await exists(destination)){return result(asset,source,destination,sourcePaths.map(path=>`.agents/${asset}/${path}`),[],[],[],false)}const currentManifestPath=resolve7(destination,MANIFEST);if(!await exists(currentManifestPath)){return result(asset,source,destination,[],[],[],[`.agents/${asset}`],false)}let currentManifest;try{currentManifest=await readAndValidateManifest(destination,asset)}catch{return result(asset,source,destination,[],[],[],[`.agents/${asset}/${MANIFEST}`],false)}const currentFiles=new Map(currentManifest.files.map(file2=>[file2.path,file2.sha256]));const conflicts=[];const actual=await relativeFiles(destination);const known2=new Set([...currentFiles.keys(),MANIFEST]);for(const path of actual){if(!known2.has(path))conflicts.push(`.agents/${asset}/${path}`)}for(const[path,expected]of currentFiles){const absolute=safeResolve(destination,path);if(!await exists(absolute)||await hashFile(absolute)!==expected){conflicts.push(`.agents/${asset}/${path}`)}}if(conflicts.length>0){return result(asset,source,destination,[],[],[],[...new Set(conflicts)].sort(),false)}const created=[];const updated=[];const existing=[];for(const[path,expected]of sourceFiles){const portable=`.agents/${asset}/${path}`;const current=currentFiles.get(path);if(current===void 0)created.push(portable);else if(current===expected)existing.push(portable);else updated.push(portable)}for(const path of currentFiles.keys()){if(!sourceFiles.has(path))updated.push(`.agents/${asset}/${path}`)}updated.push(`.agents/${asset}/${MANIFEST}`);return result(asset,source,destination,created,updated,existing,[],false)}async function applyDashboardInstall(plan){return applyManagedAssetInstall(plan)}async function applyDesignInstall(plan){return applyManagedAssetInstall(plan)}async function applyManagedAssetInstall(plan){if(plan.conflicts.length>0)throw new Error(`${plan.asset} install has unresolved conflicts`);const parent=dirname5(plan.destination);const nonce=`${process.pid}-${Date.now()}`;const staging=resolve7(parent,`.${plan.asset}.zaip-new-${nonce}`);const backup=resolve7(parent,`.${plan.asset}.zaip-old-${nonce}`);await mkdir4(parent,{recursive:true});await cp2(plan.source,staging,{recursive:true,errorOnExist:true,force:false});const hadDestination=await exists(plan.destination);try{if(hadDestination)await rename4(plan.destination,backup);await rename4(staging,plan.destination);if(hadDestination)await rm4(backup,{recursive:true,force:true})}catch(error51){await rm4(staging,{recursive:true,force:true});if(hadDestination&&await exists(backup)&&!await exists(plan.destination)){await rename4(backup,plan.destination)}throw error51}return{...plan,applied:true}}async function validateInstalledDashboard(workspaceRoot){return validateInstalledManagedAsset(workspaceRoot,"dashboard")}async function validateInstalledDesign(workspaceRoot){return validateInstalledManagedAsset(workspaceRoot,"design")}async function validateInstalledManagedAsset(workspaceRoot,asset){const root=resolve7(workspaceRoot,`.agents/${asset}`);if(!await exists(root)){return[{path:`.agents/${asset}`,message:`Managed ZAIP ${asset} is missing`}]}let manifest;try{manifest=await readAndValidateManifest(root,asset)}catch(error51){return[{path:`.agents/${asset}/${MANIFEST}`,message:error51 instanceof Error?error51.message:String(error51)}]}const findings=[];for(const file2 of manifest.files){const absolute=safeResolve(root,file2.path);if(!await exists(absolute)){findings.push({path:`.agents/${asset}/${file2.path}`,message:"Managed file is missing"})}else if(await hashFile(absolute)!==file2.sha256){findings.push({path:`.agents/${asset}/${file2.path}`,message:"Managed file checksum drift"})}}return findings}async function readAndValidateManifest(root,asset){const parsed=JSON.parse(await readFile6(resolve7(root,MANIFEST),"utf8"));if(typeof parsed!=="object"||parsed===null)throw new Error(`Invalid ${asset} manifest`);const value=parsed;if(value.schemaVersion!==1||typeof value.version!=="string"||!Array.isArray(value.files)){throw new Error(`Invalid ${asset} manifest fields`)}const seen=new Set;const files=value.files.map(entry2=>{if(typeof entry2!=="object"||entry2===null)throw new Error(`Invalid ${asset} file`);const file2=entry2;if(typeof file2.path!=="string"||typeof file2.sha256!=="string"||!/^[a-f0-9]{64}$/.test(file2.sha256)){throw new Error(`Invalid ${asset} file fields`)}safeResolve(root,file2.path);if(seen.has(file2.path))throw new Error(`Duplicate ${asset} path: ${file2.path}`);seen.add(file2.path);return{path:file2.path,sha256:file2.sha256}});return{schemaVersion:1,version:value.version,files}}async function assertManifestFiles(root,manifest,asset){const actual=await relativeFiles(root);const expected=new Set([...manifest.files.map(file2=>file2.path),MANIFEST]);const extra=actual.filter(path=>!expected.has(path));if(extra.length>0)throw new Error(`Unmanaged ${asset} release files: ${extra.join(", ")}`);for(const file2 of manifest.files){const absolute=safeResolve(root,file2.path);if(!await exists(absolute))throw new Error(`${asset} release file missing: ${file2.path}`);if(await hashFile(absolute)!==file2.sha256){throw new Error(`${asset} release checksum mismatch: ${file2.path}`)}}}async function relativeFiles(root){const entries=await readdir2(root,{recursive:true,withFileTypes:true});return entries.filter(entry2=>entry2.isFile()).map(entry2=>relative7(root,resolve7(entry2.parentPath,entry2.name)).replaceAll("\\","/")).sort()}function safeResolve(root,portable){if(portable.length===0||portable.includes("\\")||portable.includes("\0")||portable.startsWith("/")||/^[A-Za-z]:/.test(portable)||portable.split("/").some(part=>part.length===0||part==="."||part==="..")){throw new Error(`Unsafe managed asset path: ${portable}`)}const destination=resolve7(root,portable);if(!destination.startsWith(`${resolve7(root)}${sep4}`)){throw new Error(`Managed asset path escapes root: ${portable}`)}return destination}async function hashFile(path){return createHash33("sha256").update(await readFile6(path)).digest("hex")}async function exists(path){return lstat5(path).then(()=>true,error51=>{if(error51 instanceof Error&&"code"in error51&&error51.code==="ENOENT")return false;throw error51})}function result(asset,source,destination,created,updated,existing,conflicts,applied){return{asset,source,destination,created:[...created].sort(),updated:[...new Set(updated)].sort(),existing:[...existing].sort(),conflicts:[...conflicts].sort(),applied}}import{basename,dirname as dirname6,resolve as resolve8}from"node:path";async function dashboardDoctorFindings(executable,workspaceRoot){if(executable===void 0)return[];const executableRoot=resolve8(dirname6(executable),"..");const distributionRoot=basename(executableRoot)===".agents"?executableRoot:resolve8(executableRoot,"..");if(basename(distributionRoot)!==".agents")return[];return(await validateInstalledDashboard(workspaceRoot)).map(finding3=>({severity:"error",code:"dashboard-drift",...finding3,state:"active"}))}async function designDoctorFindings(executable,workspaceRoot){if(executable===void 0)return[];const executableRoot=resolve8(dirname6(executable),"..");const distributionRoot=basename(executableRoot)===".agents"?executableRoot:resolve8(executableRoot,"..");if(basename(distributionRoot)!==".agents")return[];return(await validateInstalledDesign(workspaceRoot)).map(finding3=>({severity:"error",code:"design-drift",...finding3,state:"active"}))}async function managedAssetDoctorFindings(executable,workspaceRoot,filesystem){if(executable!==void 0&&filesystem!==void 0){const executableRoot=resolve8(dirname6(executable),"..");const distributionRoot=basename(executableRoot)===".agents"?executableRoot:resolve8(executableRoot,"..");if(await isFrameworkSourceWorkspace(filesystem,workspaceRoot,distributionRoot))return[]}return(await Promise.all([dashboardDoctorFindings(executable,workspaceRoot),designDoctorFindings(executable,workspaceRoot)])).flat()}async function isFrameworkSourceWorkspace(filesystem,root,distributionRoot){if(resolve8(root,".agents")!==distributionRoot||!await filesystem.exists("package.json")){return false}try{const manifest=JSON.parse(await filesystem.readText("package.json"));return manifest.name==="@zaip-ai/aios"}catch{return false}}async function frameworkSourceTemplateFiles(filesystem){const packagedAgentsRoot=basename(filesystem.root)===".agents";const roots2=packagedAgentsRoot?["config/agents","rules","requirements","skills","zaip-aios","tools"]:[".agents/rules",".agents/requirements",".agents/skills",".agents/zaip-aios",".agents/tools"];const paths=(await Promise.all(roots2.map(path=>filesystem.listFiles(path)))).flat().filter(path=>!path.endsWith("/.gitkeep")).sort();return Promise.all(paths.map(async path=>({path:packagedAgentsRoot?`.agents/${path}`:path,content:await filesystem.readText(path)})))}init_src2();init_src();init_v2_router();init_previous_stop_recovery();import{createHash as createHash55}from"node:crypto";import{lstat as lstat13,readFile as readFile11}from"node:fs/promises";import{resolve as resolve19}from"node:path";var hash5=value=>createHash55("sha256").update(value).digest("hex");async function boundedFile(path){const info=await lstat13(path);if(!info.isFile()||info.isSymbolicLink()||info.size>2097152)throw new Error("Unsafe hook readiness file");return readFile11(path)}async function hookReadiness(root,session=process.env.CODEX_THREAD_ID){let fingerprint;try{const files=await Promise.all(HOOK_ACTIVATION_FILES.map(async file2=>[file2,hash5(await boundedFile(resolve19(root,file2)))]));fingerprint=hash5(JSON.stringify(files))}catch{return{state:"installation_incomplete",full_integration:false,trust:"unknown",events:[]}}const events=await Promise.all(HOOK_ACTIVATION_EVENTS.map(async event=>{try{const receipt=JSON.parse((await boundedFile(resolve19(root,`.local/hooks/activation/${event}.json`))).toString("utf8"));const current=receipt.schema_version===1&&receipt.event===event&&receipt.fingerprint===fingerprint&&typeof receipt.session_id==="string"&&receipt.session_id.length>0&&typeof receipt.turn_id==="string"&&receipt.turn_id.length>0&&(!session||receipt.session_id===session)&&Number.isFinite(Date.parse(receipt.observed_at));let closure=null;if(current&&event==="Stop"){const key=hash5(JSON.stringify([receipt.session_id,receipt.turn_id]));closure="pending";try{const stop=JSON.parse((await boundedFile(resolve19(root,`.local/hooks/stop-${key}.json`))).toString("utf8"));if(stop.session_id===receipt.session_id&&stop.turn_id===receipt.turn_id&&stop.state==="persisted"&&typeof stop.run_id==="string"){const filesystem=new WorkspaceFileSystem(root);await verifyStopPersistence(filesystem,createV2Composition(filesystem,await loadWorkspaceLayout(filesystem)),receipt.session_id,receipt.turn_id,stop.run_id);closure="confirmed"}}catch{}}return{event,state:current?"observed":"unverified",outcome:current?receipt.outcome:null,observed_at:current?receipt.observed_at:null,session_id:current?receipt.session_id:null,closure}}catch{return{event,state:"unverified",outcome:null,observed_at:null}}}));const sessions=new Set(events.filter(event=>event.state==="observed").map(event=>event.session_id));const full=events.every(event=>event.state==="observed")&&sessions.size===1;const closed=events.some(event=>event.event==="Stop"&&event.closure==="confirmed");const partial2=events.some(event=>event.state==="observed");return{state:full&&closed?"validated":full?"closure_pending":partial2?"activation_partial":"activation_unverified",full_integration:full&&closed,trust:"not_read_from_host",fingerprint,events,limitations:["Local event receipts prove invocation, not permission persistence or successful canonical closure.","Stop is observed only after the preceding answer ends; verify its closure separately in the next interaction."],instructions:full?null:partial2?'H\xE1 execu\xE7\xE3o observada. Valide os eventos reais ainda n\xE3o observados em um fluxo nativo pequeno; confirme Stop na intera\xE7\xE3o seguinte. Quando houver o aviso "precisam de revis\xE3o", abra a revis\xE3o dos hooks ZAIP pelo \xEDcone de hooks (\xE2ncora) na \xE1rea de digita\xE7\xE3o do chat do Codex e clique em Permitir tudo. Se houver terceiros, selecione somente ZAIP. Interruptor ligado n\xE3o comprova revis\xE3o nem aprova\xE7\xE3o. Aus\xEAncia de evid\xEAncia n\xE3o prova recusa. N\xE3o repita a aprova\xE7\xE3o se a integra\xE7\xE3o atual j\xE1 estiver validada.':'Abra o \xEDcone de hooks (\xE2ncora) na \xE1rea de digita\xE7\xE3o do chat do Codex. Quando houver o aviso "precisam de revis\xE3o", abra a revis\xE3o dos hooks ZAIP e clique em Permitir tudo. Se houver terceiros, selecione somente ZAIP. Interruptor ligado n\xE3o comprova revis\xE3o nem aprova\xE7\xE3o. Aus\xEAncia de evid\xEAncia n\xE3o prova recusa. N\xE3o repita a aprova\xE7\xE3o se a integra\xE7\xE3o atual j\xE1 estiver validada. Avise para validar eventos reais; confirme Stop na intera\xE7\xE3o seguinte. N\xE3o basta executar os scripts diretamente.'}}init_lifecycle_manifest_commands();init_cli_arguments();async function readMigrationOptions(filesystem,parsed){const path=parsed.options.promotions;if(path===void 0)return{};const decoded=JSON.parse(await filesystem.readText(path));const promotions=Array.isArray(decoded)?decoded:typeof decoded==="object"&&decoded!==null&&"promotions"in decoded?decoded.promotions:void 0;if(!Array.isArray(promotions)){throw new UsageError("--promotions must point to a JSON array or an object containing a promotions array")}return{promotions}}function migrationPlanOutput(plan,verbose){const operationCounts=Object.fromEntries([...new Set(plan.operations.map(operation=>operation.category))].sort().map(category=>[category,plan.operations.filter(operation=>operation.category===category).length]));return{schema_version:plan.schema_version,migration_id:plan.migration_id,from_layout:plan.from_layout,to_layout:plan.to_layout,source_fingerprint:{sha256:plan.source_fingerprint.sha256,file_count:plan.source_fingerprint.files.length,total_bytes:plan.source_fingerprint.files.reduce((total,file2)=>total+file2.size,0)},promotions:plan.promotions,counts:plan.counts,operation_counts:operationCounts,findings:plan.findings,cleanup:{path_count:plan.cleanup_paths.length,roots:plan.cleanup_roots},plan_sha256:plan.plan_sha256,...verbose?{operations:plan.operations.map(({content_base64:_,...operation})=>operation),source_files:plan.source_fingerprint.files,cleanup_paths:plan.cleanup_paths}:{}}}init_v2_router();var EXIT={success:0,error:1,conformity:3,security:5,prerequisite:6};async function runDistributionCommand(context){const{area,action,parsed,filesystem,root,json:json2}=context;if(area==="setup"){const executable=process.argv[1];let templateFiles=[];let assetPlans=null;if(executable!==void 0){const executableRoot=resolve20(dirname14(executable),"..");const distributionRoot=basename5(executableRoot)===".agents"?executableRoot:resolve20(executableRoot,"..");if(basename5(distributionRoot)===".agents"){const distributionFilesystem=new WorkspaceFileSystem(distributionRoot);const runtimeFilesystem=new WorkspaceFileSystem(basename5(executableRoot)===".agents"?distributionRoot:executableRoot);const verification=await verifyDistribution(runtimeFilesystem);if(!verification.valid){output(verification,json2,true);return EXIT.security}const frameworkSource=await isFrameworkSourceWorkspace(filesystem,root,distributionRoot);templateFiles=frameworkSource?await frameworkSourceTemplateFiles(filesystem):await frameworkSourceTemplateFiles(distributionFilesystem);if(!frameworkSource)assetPlans=await planManagedAssetInstalls(distributionRoot,root)}}const hasLegacyManifest=await filesystem.exists(".agents/manifest.yaml");const hasV2Config=await filesystem.exists(".agents/config/project.yaml")||await filesystem.exists(".agents/config/framework.lock.yaml");if(hasLegacyManifest&&!hasV2Config){throw new UsageError("V1 workspace is read-only: review `migrate plan`, then run `migrate apply`")}const options={projectName:parsed.options.name??basename5(root),bootstrapTask:parsed.flags.has("bootstrap-task"),templateFiles:templateFiles.filter(file2=>/^(?:\.agents\/config\/agents\/catalog\.yaml|\.agents\/(?:rules|requirements|skills)\/)/.test(file2.path))};const dryRun=parsed.flags.has("dry-run");if(assetPlans!==null){const preflight=await setupProjectV2(filesystem,{...options,dryRun:true});const conflicts=[...preflight.conflicts,...Object.values(assetPlans).flatMap(plan=>plan.conflicts)].sort();if(dryRun||conflicts.length>0){const result3={...preflight,conflicts,...assetPlans};output(result3,json2);return conflicts.length>0?EXIT.conformity:EXIT.success}}const setup=await setupProjectV2(filesystem,{...options,dryRun});const installedAssets=assetPlans!==null&&setup.applied?await applyManagedAssetInstalls(assetPlans):assetPlans;const result2=installedAssets===null?setup:{...setup,...installedAssets};if(!dryRun&&setup.applied&&setup.conflicts.length===0&&!await filesystem.exists(".agents/records/lifecycle/manifest.json")){const composition=createV2Composition(filesystem,await loadWorkspaceLayout(filesystem));await runLifecycleManifestMaintenance("rebuild",{...parsed,flags:new Set([...parsed.flags,"confirm-full-scan"])},filesystem,composition)}output(result2,json2);return setup.conflicts.length>0||!setup.dryRun&&!setup.applied?EXIT.conformity:EXIT.success}if(area==="doctor"){const hasV2Config=await filesystem.exists(".agents/config/project.yaml")||await filesystem.exists(".agents/config/framework.lock.yaml");const findings=hasV2Config?await doctorProjectV2(filesystem):await doctorProject(filesystem);const assetFindings=await managedAssetDoctorFindings(process.argv[1],root,filesystem);const combinedFindings=[...findings,...assetFindings];output({valid:combinedFindings.every(item=>item.severity!=="error"),findings:combinedFindings,hooks:await hookReadiness(root)},json2);return combinedFindings.some(item=>item.severity==="error")?EXIT.prerequisite:EXIT.success}if(area==="migrate"){if(action==="legacy-manifest"){if(await filesystem.exists(".agents/config/project.yaml")||await filesystem.exists(".agents/config/framework.lock.yaml")){throw new UsageError("legacy-manifest is disabled after V2 activation")}output(await migrateProject(filesystem,parsed.flags.has("dry-run")),json2);return EXIT.success}const migrationOptions=await readMigrationOptions(filesystem,parsed);if(action==="plan"||action===void 0&&parsed.flags.has("dry-run")){const plan=await planV1ToV2Migration(filesystem,migrationOptions);output(migrationPlanOutput(plan,parsed.flags.has("verbose")),json2);return EXIT.success}if(action==="apply"){requireOptions(parsed.options,["plan-hash"]);const plan=parsed.options.migration===void 0?await planV1ToV2Migration(filesystem,migrationOptions):await readPersistedMigrationPlan(filesystem,parsed.options.migration);if(plan===null){throw new UsageError(`Migration plan not found: ${parsed.options.migration}`)}output(await applyV1ToV2Migration(filesystem,plan,parsed.options["plan-hash"]),json2);return EXIT.success}if(action==="status"||action==="rollback"){requireOptions(parsed.options,["migration"]);const migrationId=parsed.options.migration;const plan=await readPersistedMigrationPlan(filesystem,migrationId);if(plan===null)throw new UsageError(`Migration plan not found: ${migrationId}`);if(action==="rollback"){output(await rollbackV1ToV2Migration(filesystem,plan,parsed.options["plan-hash"]??plan.plan_sha256),json2)}else{output({migration_id:migrationId,plan_hash:plan.plan_sha256,status:await inspectV1ToV2Migration(filesystem,plan),plan:migrationPlanOutput(plan,parsed.flags.has("verbose"))},json2)}return EXIT.success}throw new UsageError("migrate requires plan, apply --plan-hash HASH, status --migration ID, or rollback --migration ID")}if(area==="upgrade"){if(parsed.flags.has("rollback")){await rollbackDistribution(root);output({rolledBack:true},json2);return EXIT.success}const source=parsed.options.from;if(source===void 0)throw new UsageError("upgrade requires --from PATH or --rollback");output(await upgradeDistribution(root,source,parsed.flags.has("dry-run")),json2);return EXIT.success}return null}init_src();init_cli_arguments();import{dirname as dirname15}from"node:path";async function persistEvalReportV2(filesystem,layout,report,shortName,parsed){const scope=decisionV2ScopeOption(parsed);if(scope===void 0){throw new UsageError("V2 eval persistence requires --change or --execution (or use --no-write)")}const ownerPath=layout.activePath(scope.type,scope.id);if(!await filesystem.exists(ownerPath)){throw new UsageError(`${scope.type} not found for eval evidence: ${scope.id}`)}const id=createId("EVAL",shortName,{timeZone:layout.project.timezone});const path=`${dirname15(ownerPath)}/artifacts/evals/${id}.json`;await filesystem.writeTextExclusive(path,`${JSON.stringify({schema_version:2,id,generated_at:new Date().toISOString(),report},null,2)}
 `);return{id,path}}init_v2_router();init_src();init_src4();init_src6();init_cli_arguments();async function hasVerifiedEvidenceRecord(filesystem,evidenceId2,taskId){if(typeof evidenceId2!=="string"||evidenceId2.trim().length===0)return false;const expectedId=evidenceId2.trim();const expectedSuffix=`/artifacts/evidence/${expectedId}.md`;const paths=await filesystem.listFiles(".agents/records/changes",".md");let matches=0;for(const candidate of paths){if(!candidate.endsWith(expectedSuffix))continue;try{const evidence=parseMarkdown(await filesystem.readText(candidate),evidenceArtifactV2Schema).metadata;if(evidence.id===expectedId&&evidence.task_id===taskId&&evidence.status==="passed"){matches+=1}}catch{}}return matches===1}async function readCostCohortInput(filesystem,path){let decoded;try{decoded=JSON.parse(await filesystem.readText(path))}catch(error51){throw new UsageError(`Unable to read cost cohort input: ${error51 instanceof Error?error51.message:String(error51)}`)}try{const input=parseCompletedTaskCostCohortCollectionInputV2(decoded);const tasks=await Promise.all(input.tasks.map(async task=>({...task,equivalence_evidence_verified:await hasVerifiedEvidenceRecord(filesystem,task.equivalence_evidence_id,task.task_id),baseline_equivalence_evidence_verified:await hasVerifiedEvidenceRecord(filesystem,task.baseline_equivalence_evidence_id,task.baseline_task_id??"")})));return collectCompletedTaskCostCohortV2({...input,tasks})}catch(error51){throw new UsageError(`Invalid cost cohort input: ${error51 instanceof Error?error51.message:String(error51)}`)}}import{execFile as execFile23}from"node:child_process";import{createHash as createHash57}from"node:crypto";import{promisify as promisify23}from"node:util";init_cli_arguments();init_commit_policy();import{chmod,mkdir as mkdir9,readFile as readFile12,writeFile as writeFile5}from"node:fs/promises";import{dirname as dirname16,resolve as resolve21}from"node:path";var taskCommitHook=`#!/bin/sh
 # zaip-managed task-commit-policy v1
 # Git passes its proposed index, including commit --only's alternate index.
@@ -2946,4 +2945,4 @@ Autonomous execution: execution run ID [--materialize-only] [--continue-independ
 Direct delivery: conversation start or run start --direct-authorization HUMAN-REFERENCE; only an observed Task-scoped root, no fake executor; Gui and Evidence still required
 Explicit migration: task migrate-autonomy TASK --execution EXEC --expected-revision N --legacy-attempts N --legacy-replans N|unknown [--future-replans N|unlimited] --reason TEXT [--confirm]; unknown requires an explicit future grant; preview by default, preserves history and quota`}init_cli_arguments();init_stop_receipt();async function hookCommand(filesystem,parsed){if(parsed.positionals[1]==="status")return{result:await hookReadiness(filesystem.root,parsed.options.session),success:true};if(parsed.positionals[1]!=="recover-stop")throw new Error("Unknown hook action");requireOptions(parsed.options,["session","turn"]);const result2=await replayStopReceipt(filesystem,parsed.options.session,parsed.options.turn);return{result:result2,success:result2.state==="persisted"}}init_lifecycle_v2();import{spawn as spawn2}from"node:child_process";import{dirname as dirname17}from"node:path";async function taskLedger(repository2){const allTasks=await repository2.list();const activeChangeIds=new Set(allTasks.filter(task=>["executing","verifying"].includes(task.status)).map(task=>task.change));const tasks=allTasks.filter(task=>activeChangeIds.has(task.change)&&task.status!=="planned");const paths=new Set;for(const task of tasks){const{body}=await repository2.read(task.id);const section=body.match(/## Arquivos alterados\s+([\s\S]*?)(?=\n## |$)/)?.[1]??"";for(const match of section.matchAll(/^\s*-\s+`?([^`\n]+?)`?\s*$/gm)){if(match[1])paths.add(match[1].replace(/\\/g,"/"))}}return[...paths].sort()}async function taskLedgerV2(repository2,changed){const allTasks=await repository2.list();const activeChangeIds=new Set(allTasks.filter(task=>["executing","verifying","blocked"].includes(task.status)).map(task=>task.change_id));const changeTasks=allTasks.filter(task=>activeChangeIds.has(task.change_id)&&!["draft","planned","cancelled"].includes(task.status));const completedTasks=allTasks.filter(task=>task.result!==null);const paths=new Set([...changeTasks,...completedTasks].flatMap(task=>task.result?.changed_files??[]));const authorizedScopes=[...changeTasks.filter(task=>["executing","verifying","blocked"].includes(task.status)).flatMap(task=>task.write_scopes),...completedTasks.flatMap(task=>task.result?.changed_files??[])];for(const path of changed){if(authorizedScopes.some(scope=>workspaceScopeMatches(scope,path)))paths.add(path)}return[...paths].sort()}function runUiServer(serverPath,workspace){const child=spawn2(process.execPath,[serverPath],{cwd:dirname17(serverPath),env:{...process.env,ZAIP_WORKSPACE:workspace},stdio:"inherit",windowsHide:true});return new Promise((resolveExit,reject)=>{child.once("error",reject);child.once("exit",code=>resolveExit(code??1))})}init_lifecycle_manifest_commands();init_run_conversation_v2();init_cli_arguments();import{execFile as execFile22}from"node:child_process";import{lstat as lstat14,realpath as realpath14}from"node:fs/promises";import{basename as basename6,isAbsolute as isAbsolute13,relative as relative14,resolve as resolve22,sep as sep7}from"node:path";import{promisify as promisify22}from"node:util";var execFileAsync11=promisify22(execFile22);var shaPattern=/^[a-f0-9]{40}$/i;var canonicalMigrationPath=/^supabase\/migrations\/[A-Za-z0-9][A-Za-z0-9_.-]*\.sql$/;async function runSupabaseMigrationCommand(input){if(input.action!=="plan"&&input.action!=="validate"){throw new UsageError("supabase migration requires plan or validate")}const target=input.config?.supabase_migrations;if(target===void 0){throw new UsageError("supabase migration requires supabase_migrations in .agents/config/project.yaml")}const findings=await validateTarget(target.repository);const plan={repository_id:target.repository.id,configured_path:target.repository.path,required_branch:target.repository.branch,required_origin:target.repository.origin,hosted_applicator:target.hosted_applicator,applies_hosted_schema:false,required_evidence:["migration catalog entry","candidate SHA on beta","passed candidate checks","Supabase migration-history observation showing the same migration applied"]};if(input.action==="plan")return{valid:findings.length===0,mode:"plan",target:plan,findings};const evidencePath=input.parsed.options.evidence;if(evidencePath===void 0)throw new UsageError("supabase migration validate requires --evidence PATH");let evidence=null;try{evidence=parseEvidence(JSON.parse(await input.filesystem.readText(evidencePath)))}catch(error51){findings.push({code:"evidence-invalid",message:error51 instanceof Error?error51.message:"Migration evidence is invalid"})}if(evidence!==null&&findings.length===0){findings.push(...await validateEvidence(target.repository.path,evidence))}return{valid:findings.length===0,mode:"validate",target:plan,findings}}async function validateTarget(repository2){const findings=[];if(!isAbsolute13(repository2.path)||repository2.path.includes("\0")){return[{code:"target-path-invalid",message:"Migration target path must be absolute"}]}let target;try{target=await realpath14(repository2.path)}catch{return[{code:"target-path-unavailable",message:"Configured migration target is unavailable"}]}if(target.split(/[\\/]/).at(-1)!==repository2.id){findings.push({code:"target-identity-mismatch",message:"Target path basename does not match the configured repository id"})}const[branch,origin]=await Promise.all([git5(target,["branch","--show-current"]),git5(target,["remote","get-url","origin"])]);if(branch!==repository2.branch){findings.push({code:"target-branch-mismatch",message:"Migration target must be on branch beta"})}if(origin!==repository2.origin){findings.push({code:"target-origin-mismatch",message:"Migration target origin does not match configuration"})}return findings}async function validateEvidence(targetPath,evidence){const findings=[];if(!canonicalMigrationPath.test(evidence.migration.path)){return[{code:"migration-path-invalid",message:"Migration path must be a canonical supabase/migrations/*.sql path"}]}if(!basename6(evidence.migration.path).startsWith(evidence.migration.id)){findings.push({code:"migration-id-filename-mismatch",message:"Migration id must be the filename prefix"})}if(!shaPattern.test(evidence.candidate.sha)){findings.push({code:"candidate-sha-invalid",message:"Candidate SHA must be a full Git commit SHA"})}if(evidence.candidate.checks.length===0||evidence.candidate.checks.some(check2=>check2.status!=="passed")){findings.push({code:"candidate-checks-missing",message:"Candidate evidence requires one or more passed checks"})}if(evidence.applied.migration_id!==evidence.migration.id){findings.push({code:"applied-migration-mismatch",message:"Applied migration evidence must name the catalogued migration id"})}if(!Number.isFinite(Date.parse(evidence.applied.observed_at))){findings.push({code:"applied-observation-invalid",message:"Applied migration observation requires an ISO timestamp"})}if(findings.length>0)return findings;const target=await realpath14(targetPath);const migrationFile=resolve22(target,evidence.migration.path);if(!within(target,migrationFile)){return[{code:"migration-path-escape",message:"Migration path escapes the configured target"}]}try{const physicalMigrationFile=await realpath14(migrationFile);const status=await lstat14(migrationFile);if(status.isSymbolicLink()||!status.isFile()||!within(target,physicalMigrationFile)){findings.push({code:"migration-file-unsafe",message:"Migration file must be a regular non-symlink file inside the target"})}await git5(target,["ls-files","--error-unmatch","--",evidence.migration.path])}catch{findings.push({code:"migration-not-catalogued",message:"Migration file is absent from the target catalog"})}const head=await git5(target,["rev-parse","HEAD"]);if(head!==evidence.candidate.sha){findings.push({code:"candidate-sha-mismatch",message:"Candidate SHA must equal the current beta HEAD"})}try{const observedOriginBeta=await git5(target,["rev-parse","refs/remotes/origin/beta"]);if(observedOriginBeta!==evidence.candidate.sha){findings.push({code:"origin-beta-sha-mismatch",message:"Observed refs/remotes/origin/beta does not match the candidate SHA"})}else{findings.push({code:"origin-beta-unverified",message:"Observed origin/beta is local ref evidence only; fetch freshness and remote publication remain unverified"})}}catch{findings.push({code:"origin-beta-ref-unavailable",message:"refs/remotes/origin/beta is unavailable; remote publication is pending"})}try{const type=await git5(target,["cat-file","-t",`${evidence.candidate.sha}:${evidence.migration.path}`]);if(type!=="blob")throw new Error("candidate object is not a blob");await git5(target,["diff","--quiet","--",evidence.migration.path]);await git5(target,["diff","--cached","--quiet","--",evidence.migration.path])}catch{findings.push({code:"candidate-migration-unverified",message:"Candidate migration must be a tracked clean blob at the candidate SHA"})}return findings}function parseEvidence(value){if(typeof value!=="object"||value===null)throw new Error("Migration evidence must be an object");const record3=value;const migration=record3.migration;const candidate=record3.candidate;const applied=record3.applied;if(record3.schema_version!==1||migration===void 0||candidate===void 0||applied===void 0){throw new Error("Migration evidence must use schema_version 1 with migration, candidate and applied sections")}if(typeof migration.id!=="string"||typeof migration.path!=="string"||typeof candidate.sha!=="string"||!Array.isArray(candidate.checks)||typeof applied.migration_id!=="string"||applied.status!=="applied"||applied.source!=="supabase-migration-history"||applied.trust!=="unverified"||typeof applied.observed_at!=="string"){throw new Error("Migration evidence fields are incomplete or invalid; local observations are unverified")}if(!candidate.checks.every(check2=>typeof check2==="object"&&check2!==null&&typeof check2.id==="string"&&["passed","failed"].includes(String(check2.status)))){throw new Error("Candidate checks must each have id and passed or failed status")}return value}async function git5(cwd,args){const result2=await execFileAsync11("git",[...args],{cwd,windowsHide:true,encoding:"utf8"});return result2.stdout.trim()}function within(root,candidate){const path=relative14(root,candidate);return path===""||!path.startsWith(`..${sep7}`)&&path!==".."&&!isAbsolute13(path)}init_task_execution_resolution_v2();init_cli_arguments();import{lstat as lstat15,realpath as realpath15}from"node:fs/promises";import{isAbsolute as isAbsolute14,relative as relative15,resolve as resolve23,sep as sep8}from"node:path";async function assertToolWriteScope(root,scopes,requestedPath){if(!isCanonicalRelativePath(requestedPath)){throw new UsageError("Tool write path must be canonical and workspace-relative")}if(scopes.length===0||!scopes.some(scope=>scopeMatches2(scope,requestedPath))){throw new UsageError(`Tool write path is outside declared write scopes: ${requestedPath}`)}const physicalRoot=await realpath15(root);const target=resolve23(root,requestedPath);if(!within2(physicalRoot,target))throw new UsageError("Tool write path escapes workspace root");let ancestor=target;while(true){try{const status=await lstat15(ancestor);const physicalAncestor=await realpath15(ancestor);if(status.isSymbolicLink()||!within2(physicalRoot,physicalAncestor)){throw new UsageError("Tool write path escapes workspace through a symlink")}return}catch(error51){if(error51 instanceof UsageError)throw error51;if(!(error51 instanceof Error&&"code"in error51&&error51.code==="ENOENT"))throw error51;const parent=resolve23(ancestor,"..");if(parent===ancestor||!within2(resolve23(root),parent)){throw new UsageError("Tool write path has no contained existing ancestor")}ancestor=parent}}}async function copyWithinToolWriteScope(input){await assertToolWriteScope(input.root,input.scopes,input.to);await input.filesystem.writeTextAtomic(input.to,await input.filesystem.readText(input.from))}function isCanonicalRelativePath(value){return value.length>0&&!value.includes("\\")&&!value.includes(":")&&!value.includes("\0")&&!isAbsolute14(value)&&!value.startsWith("./")&&value.split("/").every(part=>part!==""&&part!=="."&&part!==".."&&!/^(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(?:\..*)?$/i.test(part))}function scopeMatches2(scope,path){if(!isCanonicalRelativePath(scope.replace(/\*+$/g,"placeholder")))return false;const normalized=scope.replace(/\/+$/,"");if(!normalized.includes("*"))return path===normalized||path.startsWith(`${normalized}/`);const expression=normalized.split("**").map(part=>part.replace(/[.+^${}()|[\]\\]/g,"\\$&").replace(/\*/g,"[^/]*")).join(".*");return new RegExp(`^${expression}$`).test(path)}function within2(root,candidate){const fromRoot=relative15(root,candidate);return fromRoot===""||!fromRoot.startsWith(`..${sep8}`)&&fromRoot!==".."&&!isAbsolute14(fromRoot)}init_src();import{spawn as spawn3}from"node:child_process";async function runScopedVerification(filesystem,risk2){const changed=await new ShellGit(filesystem.root).status();const packageRoots=new Set;for(const entry2 of changed){const path=entry2.path.replace(/\\/g,"/");const match=path.match(/^(packages\/[^/]+|\.agents\/dashboard\/(?:apps|modules|packages|tests)\/[^/]+)/);if(match?.[1]!==void 0)packageRoots.add(`./${match[1]}`)}const commands=[];if(risk2==="critical")commands.push({name:"full-verify",command:"pnpm",args:["verify"]});else if(risk2==="standard"){commands.push({name:"encoding",command:"node",args:["scripts/validate-text-encoding.mjs"]},{name:"source-size",command:"node",args:["scripts/validate-source-size.mjs"]});for(const root of[...packageRoots].sort()){commands.push({name:`${root}:typecheck`,command:"pnpm",args:["--filter",root,"typecheck"]});commands.push({name:`${root}:test`,command:"pnpm",args:["--filter",root,"test"]})}}const lines2=[];const checks=risk2==="lite"?[{name:"diff-only",passed:true,exit_code:0}]:[];const expectedChecks=checks.length+commands.length;for(const check2 of commands){const outcome=await runProcess2(check2.command,check2.args,filesystem.root);lines2.push(`$ ${check2.command} ${check2.args.join(" ")}
 ${outcome.output}`);checks.push({name:check2.name,passed:outcome.code===0,exit_code:outcome.code});if(outcome.code!==0)break}const logPath=`.local/verify/${new Date().toISOString().replace(/[:.]/g,"-")}.log`;await filesystem.writeTextAtomic(logPath,`${lines2.join("\n\n")}
-`);return{passed:checks.length===expectedChecks&&checks.every(check2=>check2.passed),risk:risk2,changed_files:changed.length,checks,log_path:logPath}}async function runProcess2(command2,args,cwd){return new Promise((resolveProcess,reject)=>{const executable=process.platform==="win32"&&command2==="pnpm"?"pnpm.cmd":command2;const child=spawn3(executable,args,{cwd,shell:process.platform==="win32",windowsHide:true});let output2="";child.stdout?.on("data",chunk=>output2+=String(chunk));child.stderr?.on("data",chunk=>output2+=String(chunk));child.once("error",reject);child.once("close",code=>resolveProcess({code:code??1,output:output2}))})}var CLI_VERSION="4.6.0";var CLI_DISPLAY_VERSION=CLI_VERSION.replace(/\.0$/,"");var EXIT2={success:0,error:1,usage:2,conformity:3,lifecycle:4,security:5,prerequisite:6};var execFileAsync12=promisify23(execFile23);async function runCli(arguments_,cwd=process.cwd()){const parsed=parseArguments(arguments_);const requestedRoot=resolve24(parsed.options.workspace??cwd);const root=parsed.options.workspace===void 0?await new ShellGit(requestedRoot).repositoryRoot()??requestedRoot:requestedRoot;const filesystem=new WorkspaceFileSystem(root);const json2=parsed.flags.has("json");try{const[area,action]=parsed.positionals;if(area==="hook"){const{result:result2,success:success2}=await hookCommand(filesystem,parsed);output(result2,json2);return success2?EXIT2.success:EXIT2.lifecycle}if(area==="commit"){output(await runCommitPolicyCommand(root,parsed),json2);return EXIT2.success}if(area==="version"||parsed.flags.has("version")){output(json2?{version:CLI_VERSION}:CLI_DISPLAY_VERSION,json2);return EXIT2.success}if(area===void 0||area==="help"||parsed.flags.has("help")){output(HELP,json2);return area===void 0&&!parsed.flags.has("help")?EXIT2.usage:EXIT2.success}const activationExit=await handleZaipActivation(area,filesystem,json2);if(activationExit!==null)return activationExit;const distributionExit=await runDistributionCommand({area,action,parsed,filesystem,root,json:json2});if(distributionExit!==null)return distributionExit;if(area==="supabase"&&action==="migration"){const result2=await runSupabaseMigrationCommand({action:parsed.positionals[2],parsed,filesystem,config:(await loadWorkspaceLayout(filesystem)).projectConfig});output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="database"&&action==="migration"){const mode=parsed.positionals[2];if(mode!=="prepare"&&mode!=="submit")throw new UsageError("database migration requires prepare or submit");requireOptions(parsed.options,["database-repository","migration-path","description","tests","risk"]);if(!["compatible","destructive","permissions","incompatible"].includes(parsed.options.risk??""))throw new UsageError("--risk must be compatible, destructive, permissions, or incompatible");const migrationPath=parsed.options["migration-path"];const[source,sql,layout]=await Promise.all([verifiedMigrationSource(root),filesystem.readText(migrationPath),loadWorkspaceLayout(filesystem)]);const actualHash=createHash57("sha256").update(sql,"utf8").digest("hex");if(parsed.options["migration-sha256"]!==void 0&&parsed.options["migration-sha256"].toLowerCase()!==actualHash)throw new UsageError("--migration-sha256 does not match the migration file");const request=prepareMigrationRequest(layout.projectConfig,{source_repository:source.repository,source_sha:source.sha,source_identity_verified:true,database_repository:parsed.options["database-repository"],migration_path:migrationPath,migration_content_sha256:actualHash,description:parsed.options.description,sql,tests:parsed.options.tests.split(",").filter(Boolean),risk:parsed.options.risk});if(mode==="submit"){requireOptions(parsed.options,["request-head","database-worktree"]);const databaseWorktree=parsed.options["database-worktree"];const requestHead=parsed.options["request-head"];const[dbOrigin,headCommit]=await Promise.all([execFileAsync12("git",["remote","get-url","origin"],{cwd:databaseWorktree,encoding:"utf8",windowsHide:true}),execFileAsync12("git",["rev-parse",requestHead],{cwd:databaseWorktree,encoding:"utf8",windowsHide:true})]);const capturedHeadSha=headCommit.stdout.trim();if(!/^[a-f0-9]{40,64}$/i.test(capturedHeadSha))throw new UsageError("request head must resolve to a commit SHA");const blob=await execFileAsync12("git",["cat-file","blob",`${capturedHeadSha}:${migrationPath}`],{cwd:databaseWorktree,encoding:"buffer",windowsHide:true});const expectedDatabase=parsed.options["database-repository"];const originMatch=/^(?:git@github\.com:|https:\/\/github\.com\/)([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?\s*$/i.exec(dbOrigin.stdout.toString());if(originMatch?.[1]?.toLowerCase()!==expectedDatabase.toLowerCase())throw new UsageError("Database worktree origin does not exactly match --database-repository");if(createHash57("sha256").update(blob.stdout).digest("hex")!==actualHash)throw new UsageError("Request head migration blob does not match local migration SQL");const migrationConfig=layout.projectConfig?.supabase_migrations;if(migrationConfig===void 0)throw new UsageError("submit requires persisted supabase_migrations configuration");if(migrationConfig.repository.id!==expectedDatabase||migrationConfig.repository.path!==databaseWorktree||migrationConfig.repository.origin!==dbOrigin.stdout.trim())throw new UsageError("submit target and database worktree must exactly match persisted supabase_migrations.repository");assertMigrationRemoteSubmission({beta_integration_verified:migrationConfig.beta_integration_verified??false,paid_beta_provisioning_confirmed:migrationConfig.paid_beta_provisioning_confirmed??false,preview_policy:migrationConfig.preview_policy??"disabled"});const submission=await submitMigrationRequest(new GhMigrationPullRequestAdapter(databaseWorktree,requestHead,capturedHeadSha),expectedDatabase,request);output({mode,request,submission,hosted_migrator:"supabase-github-integration"},json2);return EXIT2.success}output({mode,request,remote_submitted:false,hosted_migrator:"supabase-github-integration"},json2);return EXIT2.success}if(area==="adapters"&&action==="build"){await buildAdapters(filesystem);output({built:true},json2);return EXIT2.success}if(area==="adapters"&&action==="check"){const result2=await checkAdapters(filesystem);output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="context"&&action==="inventory"){output(await inventory(filesystem),json2);return EXIT2.success}if(area==="context"&&["build","inspect"].includes(action??"")){const pack=await buildContextForCommand(filesystem,parsed,contextQuery(parsed,parsed.options.query??parsed.positionals.slice(2).join(" ")),numberOption(parsed.options.budget,8e3));if(parsed.options.run!==void 0){const layout=await loadWorkspaceLayout(filesystem);if(layout.version===1)throw new UsageError("context --run requires a modern workspace");await recordContextPackUsage(parsed.options.run,pack.estimatedTokens,createV2Composition(filesystem,layout))}output(contextPackView(parsed)==="compact"?compactContextPack(pack):pack,json2);return EXIT2.success}if(area==="context"&&action==="map"){output(await buildRepositoryMap(filesystem),json2);return EXIT2.success}if(area==="context"&&action==="agents"){try{const discovery=await resolveAgentDiscovery(filesystem,{...parsed.options.agent===void 0?{}:{agentId:parsed.options.agent}});output(parsed.options.agent===void 0?discovery:{source:discovery.source,provenance:discovery.provenance,selected:discovery.selected},json2);return EXIT2.success}catch(error51){if(error51 instanceof Error&&/agent/i.test(error51.message))throw new UsageError(error51.message);throw error51}}if(area==="context"&&action==="handoff"){output(contextHandoffForCommand(parsed),json2);return EXIT2.success}if(area==="context"&&action==="validate"){const pack=await buildContextForCommand(filesystem,parsed,contextQuery(parsed,parsed.options.query??"active task"),numberOption(parsed.options.budget,8e3));const findings=validateContextPack(pack);output({valid:findings.length===0,estimatedTokens:pack.estimatedTokens,budget:pack.budget,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="manifest"){const layout=await loadWorkspaceLayout(filesystem);if(layout.version===1)throw new UsageError("lifecycle manifests require a modern workspace");output(await runLifecycleManifestMaintenance(action,parsed,filesystem,createV2Composition(filesystem,layout)),json2);return EXIT2.success}if(area==="cost"&&action==="cohort"){requireOptions(parsed.options,["input"]);output(await readCostCohortInput(filesystem,parsed.options.input),json2);return EXIT2.success}if(area==="verify"){if(!parsed.flags.has("changed")&&riskOption(parsed.options.risk)!=="critical"){throw new UsageError("verify requires --changed or --risk critical")}const result2=await runScopedVerification(filesystem,riskOption(parsed.options.risk));output(result2,json2);return result2.passed?EXIT2.success:EXIT2.conformity}if(area==="supabase"&&action==="migration"){const result2=await runSupabaseMigrationCommand({action:parsed.positionals[2],parsed,filesystem,config:(await loadWorkspaceLayout(filesystem)).projectConfig});output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="tool"&&action==="copy"){if(parsed.options.task===void 0||parsed.options.run===void 0){throw new UsageError("tool copy requires --task TASK --run RUN")}const layout=await loadWorkspaceLayout(filesystem);if(layout.version===1)throw new UsageError("tool copy requires a V2 workspace");const composition=createV2Composition(filesystem,layout);const{task}=await composition.tasks.read(parsed.options.task);const{run,status}=await composition.runs.read(parsed.options.run);const executionId=resolveTaskExecutionIdV2(task,await composition.executions.list());if(!["executing","verifying"].includes(task.status)||status!=="running"||run.task_id!==task.id||run.change_id!==task.change_id||run.execution_id!==executionId){throw new UsageError("tool copy requires an active Run linked to the declared Task")}const scopes=task.write_scopes;if(parsed.options.from===void 0||parsed.options.to===void 0||scopes.length===0){throw new UsageError("tool copy requires --from PATH --to PATH and Task write scopes")}await copyWithinToolWriteScope({filesystem,root,scopes,from:parsed.options.from,to:parsed.options.to});output({copied:true,to:parsed.options.to,scopes},json2);return EXIT2.success}if(["architecture","cqrs","modules"].includes(area)&&action==="validate"){const layout=await loadWorkspaceLayout(filesystem);const profile=configuredArchitectureProfile(layout.projectConfig);const units=await sourceUnits(filesystem);const findings=area==="cqrs"?validateCqrs(units,profile):area==="modules"?validateModules(units,profile):validateArchitecture(units,profile);output({valid:findings.length===0,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="profile"&&action==="validate"){if(parsed.options.path!==void 0){throw new UsageError("profile validate reads the configured stack in .agents/config/project.yaml; --path is no longer supported")}const configured=await loadWorkspaceLayout(filesystem);const projectConfig2=configured.projectConfig;const stack=projectConfig2?.stack;if(projectConfig2===null||stack===void 0){throw new UsageError("profile validate requires .agents/config/project.yaml")}const profile={id:stack.id,status:"supported",extensions:stack.extensions??[],defaults:{language:stack.language,api:stack.api,queryBuilder:stack.query_builder},workspaceLayout:2,conventions:{apps:stack.layout===void 0?void 0:{frontend:stack.layout.frontend,backend:stack.layout.backend,site:stack.layout.site},modules:stack.layout?.modules,packages:stack.layout?.packages,e2e:stack.layout?.e2e,source_limits:stack.source_limits},invariants:stack.invariants??[],commands:stack.commands};configuredArchitectureProfile(projectConfig2);const findings=[...validateProfileContract(profile)];const clientCatalog=parseYaml(await filesystem.readText(".agents/config/clients.yaml"));const clientPaths=await validateConfiguredProfileAgentPaths(clientCatalog,projectConfig2.clients,filesystem);findings.push(...clientPaths.findings.map(message=>({field:"clients",message})));output({valid:findings.length===0,profile:PROJECT_CONFIG_PATH,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="eval"&&["run","specs","architecture","cqrs","security","infrastructure","adapters","context"].includes(action??"")){const report=action==="run"?runAllCategoryEvals():runCategoryEval(action);const layout=await loadWorkspaceLayout(filesystem);const persisted=parsed.flags.has("no-write")?null:layout.version!==1?await persistEvalReportV2(filesystem,layout,report,action??"run",parsed):await persistEvalReport(filesystem,report,action??"run");output({...report,persisted},json2);return report.passed?EXIT2.success:EXIT2.conformity}if(V2_COMMAND_AREAS.has(area)){const layout=await loadWorkspaceLayout(filesystem);if(layout.version!==1){output(await runV2Command(area,action,parsed,filesystem,layout),json2);return EXIT2.success}if(["prd","execution","run-v2","plan"].includes(area)){throw new UsageError(`${area} requires a V2 workspace`)}if(!isLegacyReadOnlyCommand(area,action)){throw new UsageError("V1 lifecycle is read-only; use `migrate plan` and `migrate apply` before mutation")}}if(area==="change"&&action==="show"){output(await new ChangeRepository(filesystem).read(requiredPosition(parsed.positionals,2,"change id")),json2);return EXIT2.success}if(area==="change"&&action==="validate"){const result2=await new ChangeRepository(filesystem).validate(requiredPosition(parsed.positionals,2,"change id"));output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="spec"&&action==="show"){output(await new LegacyCapabilitySpecRepository(filesystem).read(requiredPosition(parsed.positionals,2,"capability")),json2);return EXIT2.success}if(area==="spec"&&action==="validate"){const result2=await new LegacyCapabilitySpecRepository(filesystem).read(requiredPosition(parsed.positionals,2,"capability"));output({valid:true,spec:result2.spec},json2);return EXIT2.success}if(area==="task"&&action==="list"){output(await new TaskRepository(filesystem).list(),json2);return EXIT2.success}if(area==="task"&&action==="next"){output(nextExecutableTasks(await new TaskRepository(filesystem).list()),json2);return EXIT2.success}if(area==="task"&&action==="show"){output(await new TaskRepository(filesystem).read(requiredEntityId(parsed,2,"task id")),json2);return EXIT2.success}if(area==="decision"&&action==="list"){output(await new DecisionRepository(filesystem).list(),json2);return EXIT2.success}if(area==="decision"&&action==="show"){const id=requiredPosition(parsed.positionals,2,"decision id");output(await new DecisionRepository(filesystem).read(id,id.startsWith("DEC-HUMAN-")?"human":"agent"),json2);return EXIT2.success}if(area==="run"&&action==="show"){output(await new RunRepository(filesystem).read(requiredPosition(parsed.positionals,2,"run id")),json2);return EXIT2.success}if(area==="generate"){const layout=await loadWorkspaceLayout(filesystem);if(layout.version!==1){const tasks2=await new TaskV2Repository(filesystem,layout).list();output({generated:null,storage:"stdout",board:tasks2.map(task=>({id:task.id,title:task.title,status:task.status,priority:task.priority,artifact_path:layout.activePath("task",task.id)}))},json2);return EXIT2.success}const tasks=await new TaskRepository(filesystem).list();const board=generateBoard(tasks);output({generated:null,storage:"stdout",board},json2);return EXIT2.success}if(area==="guard"&&action==="diff"){const changed=await new ShellGit(root).changedFiles();const layout=await loadWorkspaceLayout(filesystem);const ledger=layout.version!==1?await taskLedgerV2(new TaskV2Repository(filesystem,layout),changed):await taskLedger(new TaskRepository(filesystem));const findings=guardDiff(changed,ledger);output({valid:findings.length===0,changed,ledger,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="ui"){const executable=process.argv[1];if(executable!==void 0){const executableRoot=resolve24(dirname18(executable),"..");const distributionRoot=basename7(executableRoot)===".agents"?executableRoot:resolve24(executableRoot,"..");const _distributionFilesystem=new WorkspaceFileSystem(distributionRoot);if(basename7(distributionRoot)===".agents"&&await new WorkspaceFileSystem(root).exists(".agents/dashboard/packages/local-runtime/start-dashboard.mjs")){output({url:"http://127.0.0.1:4317",security:"loopback-only"},json2);const code=await runUiServer(resolve24(root,".agents/dashboard/packages/local-runtime/start-dashboard.mjs"),root);return code}}output({command:"corepack pnpm dashboard:dev",sourceMode:true},json2);return EXIT2.success}throw new UsageError(`Unknown command: ${parsed.positionals.join(" ")}`)}catch(error51){const message=error51 instanceof Error?error51.message:String(error51);output({error:message},json2,true);return error51 instanceof UsageError?EXIT2.usage:EXIT2.error}}function isLegacyReadOnlyCommand(area,action){const actions={spec:["show","validate"],change:["show","validate"],task:["list","next","show"],decision:["list","show"],run:["show"]};return actions[area]?.includes(action)??false}var HELP=helpText(CLI_DISPLAY_VERSION);var isMain=process.argv[1]!==void 0&&pathToFileURL(resolve24(process.argv[1])).href===import.meta.url;if(isMain)process.exitCode=await runCli(process.argv.slice(2));export{CLI_DISPLAY_VERSION,CLI_VERSION,EXIT2 as EXIT,runCli};
+`);return{passed:checks.length===expectedChecks&&checks.every(check2=>check2.passed),risk:risk2,changed_files:changed.length,checks,log_path:logPath}}async function runProcess2(command2,args,cwd){return new Promise((resolveProcess,reject)=>{const executable=process.platform==="win32"&&command2==="pnpm"?"pnpm.cmd":command2;const child=spawn3(executable,args,{cwd,shell:process.platform==="win32",windowsHide:true});let output2="";child.stdout?.on("data",chunk=>output2+=String(chunk));child.stderr?.on("data",chunk=>output2+=String(chunk));child.once("error",reject);child.once("close",code=>resolveProcess({code:code??1,output:output2}))})}var CLI_VERSION="4.7.0";var CLI_DISPLAY_VERSION=CLI_VERSION.replace(/\.0$/,"");var EXIT2={success:0,error:1,usage:2,conformity:3,lifecycle:4,security:5,prerequisite:6};var execFileAsync12=promisify23(execFile23);async function runCli(arguments_,cwd=process.cwd()){const parsed=parseArguments(arguments_);const requestedRoot=resolve24(parsed.options.workspace??cwd);const root=parsed.options.workspace===void 0?await new ShellGit(requestedRoot).repositoryRoot()??requestedRoot:requestedRoot;const filesystem=new WorkspaceFileSystem(root);const json2=parsed.flags.has("json");try{const[area,action]=parsed.positionals;if(area==="hook"){const{result:result2,success:success2}=await hookCommand(filesystem,parsed);output(result2,json2);return success2?EXIT2.success:EXIT2.lifecycle}if(area==="commit"){output(await runCommitPolicyCommand(root,parsed),json2);return EXIT2.success}if(area==="version"||parsed.flags.has("version")){output(json2?{version:CLI_VERSION}:CLI_DISPLAY_VERSION,json2);return EXIT2.success}if(area===void 0||area==="help"||parsed.flags.has("help")){output(HELP,json2);return area===void 0&&!parsed.flags.has("help")?EXIT2.usage:EXIT2.success}const activationExit=await handleZaipActivation(area,filesystem,json2);if(activationExit!==null)return activationExit;const distributionExit=await runDistributionCommand({area,action,parsed,filesystem,root,json:json2});if(distributionExit!==null)return distributionExit;if(area==="supabase"&&action==="migration"){const result2=await runSupabaseMigrationCommand({action:parsed.positionals[2],parsed,filesystem,config:(await loadWorkspaceLayout(filesystem)).projectConfig});output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="database"&&action==="migration"){const mode=parsed.positionals[2];if(mode!=="prepare"&&mode!=="submit")throw new UsageError("database migration requires prepare or submit");requireOptions(parsed.options,["database-repository","migration-path","description","tests","risk"]);if(!["compatible","destructive","permissions","incompatible"].includes(parsed.options.risk??""))throw new UsageError("--risk must be compatible, destructive, permissions, or incompatible");const migrationPath=parsed.options["migration-path"];const[source,sql,layout]=await Promise.all([verifiedMigrationSource(root),filesystem.readText(migrationPath),loadWorkspaceLayout(filesystem)]);const actualHash=createHash57("sha256").update(sql,"utf8").digest("hex");if(parsed.options["migration-sha256"]!==void 0&&parsed.options["migration-sha256"].toLowerCase()!==actualHash)throw new UsageError("--migration-sha256 does not match the migration file");const request=prepareMigrationRequest(layout.projectConfig,{source_repository:source.repository,source_sha:source.sha,source_identity_verified:true,database_repository:parsed.options["database-repository"],migration_path:migrationPath,migration_content_sha256:actualHash,description:parsed.options.description,sql,tests:parsed.options.tests.split(",").filter(Boolean),risk:parsed.options.risk});if(mode==="submit"){requireOptions(parsed.options,["request-head","database-worktree"]);const databaseWorktree=parsed.options["database-worktree"];const requestHead=parsed.options["request-head"];const[dbOrigin,headCommit]=await Promise.all([execFileAsync12("git",["remote","get-url","origin"],{cwd:databaseWorktree,encoding:"utf8",windowsHide:true}),execFileAsync12("git",["rev-parse",requestHead],{cwd:databaseWorktree,encoding:"utf8",windowsHide:true})]);const capturedHeadSha=headCommit.stdout.trim();if(!/^[a-f0-9]{40,64}$/i.test(capturedHeadSha))throw new UsageError("request head must resolve to a commit SHA");const blob=await execFileAsync12("git",["cat-file","blob",`${capturedHeadSha}:${migrationPath}`],{cwd:databaseWorktree,encoding:"buffer",windowsHide:true});const expectedDatabase=parsed.options["database-repository"];const originMatch=/^(?:git@github\.com:|https:\/\/github\.com\/)([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?\s*$/i.exec(dbOrigin.stdout.toString());if(originMatch?.[1]?.toLowerCase()!==expectedDatabase.toLowerCase())throw new UsageError("Database worktree origin does not exactly match --database-repository");if(createHash57("sha256").update(blob.stdout).digest("hex")!==actualHash)throw new UsageError("Request head migration blob does not match local migration SQL");const migrationConfig=layout.projectConfig?.supabase_migrations;if(migrationConfig===void 0)throw new UsageError("submit requires persisted supabase_migrations configuration");if(migrationConfig.repository.id!==expectedDatabase||migrationConfig.repository.path!==databaseWorktree||migrationConfig.repository.origin!==dbOrigin.stdout.trim())throw new UsageError("submit target and database worktree must exactly match persisted supabase_migrations.repository");assertMigrationRemoteSubmission({beta_integration_verified:migrationConfig.beta_integration_verified??false,paid_beta_provisioning_confirmed:migrationConfig.paid_beta_provisioning_confirmed??false,preview_policy:migrationConfig.preview_policy??"disabled"});const submission=await submitMigrationRequest(new GhMigrationPullRequestAdapter(databaseWorktree,requestHead,capturedHeadSha),expectedDatabase,request);output({mode,request,submission,hosted_migrator:"supabase-github-integration"},json2);return EXIT2.success}output({mode,request,remote_submitted:false,hosted_migrator:"supabase-github-integration"},json2);return EXIT2.success}if(area==="adapters"&&action==="build"){await buildAdapters(filesystem);output({built:true},json2);return EXIT2.success}if(area==="adapters"&&action==="check"){const result2=await checkAdapters(filesystem);output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="context"&&action==="inventory"){output(await inventory(filesystem),json2);return EXIT2.success}if(area==="context"&&["build","inspect"].includes(action??"")){const pack=await buildContextForCommand(filesystem,parsed,contextQuery(parsed,parsed.options.query??parsed.positionals.slice(2).join(" ")),numberOption(parsed.options.budget,8e3));if(parsed.options.run!==void 0){const layout=await loadWorkspaceLayout(filesystem);if(layout.version===1)throw new UsageError("context --run requires a modern workspace");await recordContextPackUsage(parsed.options.run,pack.estimatedTokens,createV2Composition(filesystem,layout))}output(contextPackView(parsed)==="compact"?compactContextPack(pack):pack,json2);return EXIT2.success}if(area==="context"&&action==="map"){output(await buildRepositoryMap(filesystem),json2);return EXIT2.success}if(area==="context"&&action==="agents"){try{const discovery=await resolveAgentDiscovery(filesystem,{...parsed.options.agent===void 0?{}:{agentId:parsed.options.agent}});output(parsed.options.agent===void 0?discovery:{source:discovery.source,provenance:discovery.provenance,selected:discovery.selected},json2);return EXIT2.success}catch(error51){if(error51 instanceof Error&&/agent/i.test(error51.message))throw new UsageError(error51.message);throw error51}}if(area==="context"&&action==="handoff"){output(contextHandoffForCommand(parsed),json2);return EXIT2.success}if(area==="context"&&action==="validate"){const pack=await buildContextForCommand(filesystem,parsed,contextQuery(parsed,parsed.options.query??"active task"),numberOption(parsed.options.budget,8e3));const findings=validateContextPack(pack);output({valid:findings.length===0,estimatedTokens:pack.estimatedTokens,budget:pack.budget,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="manifest"){const layout=await loadWorkspaceLayout(filesystem);if(layout.version===1)throw new UsageError("lifecycle manifests require a modern workspace");output(await runLifecycleManifestMaintenance(action,parsed,filesystem,createV2Composition(filesystem,layout)),json2);return EXIT2.success}if(area==="cost"&&action==="cohort"){requireOptions(parsed.options,["input"]);output(await readCostCohortInput(filesystem,parsed.options.input),json2);return EXIT2.success}if(area==="verify"){if(!parsed.flags.has("changed")&&riskOption(parsed.options.risk)!=="critical"){throw new UsageError("verify requires --changed or --risk critical")}const result2=await runScopedVerification(filesystem,riskOption(parsed.options.risk));output(result2,json2);return result2.passed?EXIT2.success:EXIT2.conformity}if(area==="supabase"&&action==="migration"){const result2=await runSupabaseMigrationCommand({action:parsed.positionals[2],parsed,filesystem,config:(await loadWorkspaceLayout(filesystem)).projectConfig});output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="tool"&&action==="copy"){if(parsed.options.task===void 0||parsed.options.run===void 0){throw new UsageError("tool copy requires --task TASK --run RUN")}const layout=await loadWorkspaceLayout(filesystem);if(layout.version===1)throw new UsageError("tool copy requires a V2 workspace");const composition=createV2Composition(filesystem,layout);const{task}=await composition.tasks.read(parsed.options.task);const{run,status}=await composition.runs.read(parsed.options.run);const executionId=resolveTaskExecutionIdV2(task,await composition.executions.list());if(!["executing","verifying"].includes(task.status)||status!=="running"||run.task_id!==task.id||run.change_id!==task.change_id||run.execution_id!==executionId){throw new UsageError("tool copy requires an active Run linked to the declared Task")}const scopes=task.write_scopes;if(parsed.options.from===void 0||parsed.options.to===void 0||scopes.length===0){throw new UsageError("tool copy requires --from PATH --to PATH and Task write scopes")}await copyWithinToolWriteScope({filesystem,root,scopes,from:parsed.options.from,to:parsed.options.to});output({copied:true,to:parsed.options.to,scopes},json2);return EXIT2.success}if(["architecture","cqrs","modules"].includes(area)&&action==="validate"){const layout=await loadWorkspaceLayout(filesystem);const profile=configuredArchitectureProfile(layout.projectConfig);const units=await sourceUnits(filesystem);const findings=area==="cqrs"?validateCqrs(units,profile):area==="modules"?validateModules(units,profile):validateArchitecture(units,profile);output({valid:findings.length===0,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="profile"&&action==="validate"){if(parsed.options.path!==void 0){throw new UsageError("profile validate reads the configured stack in .agents/config/project.yaml; --path is no longer supported")}const configured=await loadWorkspaceLayout(filesystem);const projectConfig2=configured.projectConfig;const stack=projectConfig2?.stack;if(projectConfig2===null||stack===void 0){throw new UsageError("profile validate requires .agents/config/project.yaml")}const profile={id:stack.id,status:"supported",extensions:stack.extensions??[],defaults:{language:stack.language,api:stack.api,queryBuilder:stack.query_builder},workspaceLayout:2,conventions:{apps:stack.layout===void 0?void 0:{frontend:stack.layout.frontend,backend:stack.layout.backend,site:stack.layout.site},modules:stack.layout?.modules,packages:stack.layout?.packages,e2e:stack.layout?.e2e,source_limits:stack.source_limits},invariants:stack.invariants??[],commands:stack.commands};configuredArchitectureProfile(projectConfig2);const findings=[...validateProfileContract(profile)];const clientCatalog=parseYaml(await filesystem.readText(".agents/config/clients.yaml"));const clientPaths=await validateConfiguredProfileAgentPaths(clientCatalog,projectConfig2.clients,filesystem);findings.push(...clientPaths.findings.map(message=>({field:"clients",message})));output({valid:findings.length===0,profile:PROJECT_CONFIG_PATH,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="eval"&&["run","specs","architecture","cqrs","security","infrastructure","adapters","context"].includes(action??"")){const report=action==="run"?runAllCategoryEvals():runCategoryEval(action);const layout=await loadWorkspaceLayout(filesystem);const persisted=parsed.flags.has("no-write")?null:layout.version!==1?await persistEvalReportV2(filesystem,layout,report,action??"run",parsed):await persistEvalReport(filesystem,report,action??"run");output({...report,persisted},json2);return report.passed?EXIT2.success:EXIT2.conformity}if(V2_COMMAND_AREAS.has(area)){const layout=await loadWorkspaceLayout(filesystem);if(layout.version!==1){output(await runV2Command(area,action,parsed,filesystem,layout),json2);return EXIT2.success}if(["prd","execution","run-v2","plan"].includes(area)){throw new UsageError(`${area} requires a V2 workspace`)}if(!isLegacyReadOnlyCommand(area,action)){throw new UsageError("V1 lifecycle is read-only; use `migrate plan` and `migrate apply` before mutation")}}if(area==="change"&&action==="show"){output(await new ChangeRepository(filesystem).read(requiredPosition(parsed.positionals,2,"change id")),json2);return EXIT2.success}if(area==="change"&&action==="validate"){const result2=await new ChangeRepository(filesystem).validate(requiredPosition(parsed.positionals,2,"change id"));output(result2,json2);return result2.valid?EXIT2.success:EXIT2.conformity}if(area==="spec"&&action==="show"){output(await new LegacyCapabilitySpecRepository(filesystem).read(requiredPosition(parsed.positionals,2,"capability")),json2);return EXIT2.success}if(area==="spec"&&action==="validate"){const result2=await new LegacyCapabilitySpecRepository(filesystem).read(requiredPosition(parsed.positionals,2,"capability"));output({valid:true,spec:result2.spec},json2);return EXIT2.success}if(area==="task"&&action==="list"){output(await new TaskRepository(filesystem).list(),json2);return EXIT2.success}if(area==="task"&&action==="next"){output(nextExecutableTasks(await new TaskRepository(filesystem).list()),json2);return EXIT2.success}if(area==="task"&&action==="show"){output(await new TaskRepository(filesystem).read(requiredEntityId(parsed,2,"task id")),json2);return EXIT2.success}if(area==="decision"&&action==="list"){output(await new DecisionRepository(filesystem).list(),json2);return EXIT2.success}if(area==="decision"&&action==="show"){const id=requiredPosition(parsed.positionals,2,"decision id");output(await new DecisionRepository(filesystem).read(id,id.startsWith("DEC-HUMAN-")?"human":"agent"),json2);return EXIT2.success}if(area==="run"&&action==="show"){output(await new RunRepository(filesystem).read(requiredPosition(parsed.positionals,2,"run id")),json2);return EXIT2.success}if(area==="generate"){const layout=await loadWorkspaceLayout(filesystem);if(layout.version!==1){const tasks2=await new TaskV2Repository(filesystem,layout).list();output({generated:null,storage:"stdout",board:tasks2.map(task=>({id:task.id,title:task.title,status:task.status,priority:task.priority,artifact_path:layout.activePath("task",task.id)}))},json2);return EXIT2.success}const tasks=await new TaskRepository(filesystem).list();const board=generateBoard(tasks);output({generated:null,storage:"stdout",board},json2);return EXIT2.success}if(area==="guard"&&action==="diff"){const changed=await new ShellGit(root).changedFiles();const layout=await loadWorkspaceLayout(filesystem);const ledger=layout.version!==1?await taskLedgerV2(new TaskV2Repository(filesystem,layout),changed):await taskLedger(new TaskRepository(filesystem));const findings=guardDiff(changed,ledger);output({valid:findings.length===0,changed,ledger,findings},json2);return findings.length===0?EXIT2.success:EXIT2.conformity}if(area==="ui"){const executable=process.argv[1];if(executable!==void 0){const executableRoot=resolve24(dirname18(executable),"..");const distributionRoot=basename7(executableRoot)===".agents"?executableRoot:resolve24(executableRoot,"..");const _distributionFilesystem=new WorkspaceFileSystem(distributionRoot);if(basename7(distributionRoot)===".agents"&&await new WorkspaceFileSystem(root).exists(".agents/dashboard/packages/local-runtime/start-dashboard.mjs")){output({url:"http://127.0.0.1:4317",security:"loopback-only"},json2);const code=await runUiServer(resolve24(root,".agents/dashboard/packages/local-runtime/start-dashboard.mjs"),root);return code}}output({command:"corepack pnpm dashboard:dev",sourceMode:true},json2);return EXIT2.success}throw new UsageError(`Unknown command: ${parsed.positionals.join(" ")}`)}catch(error51){const message=error51 instanceof Error?error51.message:String(error51);output({error:message},json2,true);return error51 instanceof UsageError?EXIT2.usage:EXIT2.error}}function isLegacyReadOnlyCommand(area,action){const actions={spec:["show","validate"],change:["show","validate"],task:["list","next","show"],decision:["list","show"],run:["show"]};return actions[area]?.includes(action)??false}var HELP=helpText(CLI_DISPLAY_VERSION);var isMain=process.argv[1]!==void 0&&pathToFileURL(resolve24(process.argv[1])).href===import.meta.url;if(isMain)process.exitCode=await runCli(process.argv.slice(2));export{CLI_DISPLAY_VERSION,CLI_VERSION,EXIT2 as EXIT,runCli};