@zhin.js/agent 1.1.23 → 1.1.27

package/lib/workroom/coding-assignment-executor.d.ts

@@ -0,0 +1,90 @@
+import { type AssignmentExecutionEnvelope, type AssignmentExecutionObservation, type AssignmentExecutorPort } from './assignment-executor.js';
+export interface CodingFile {
+    readonly path: string;
+    readonly content: string;
+    readonly mode: '100644' | '100755';
+}
+export interface CodingEdit {
+    readonly path: string;
+    /** null deletes an existing file. Only regular UTF-8 files are supported. */
+    readonly content: string | null;
+}
+export interface CodingAssignmentSnapshot {
+    readonly envelopeDigest: string;
+    readonly baseCommit: string;
+    readonly baseTree: string;
+    readonly files: readonly CodingFile[];
+    readonly writablePaths: readonly string[];
+    readonly instruction: string;
+    /** Pinned, locally provisioned image implementing stdin request / stdout edits JSON. */
+    readonly image: string;
+    readonly command: readonly string[];
+    readonly timeoutMs: number;
+    readonly maxBytes: number;
+    readonly memoryMiB: number;
+    readonly workspaceMiB: number;
+    readonly cpus: number;
+}
+export interface CodingAssignmentSnapshotPort {
+    /** Resolve the operation's pinned generation, not a latest-value configuration. */
+    resolve(envelope: AssignmentExecutionEnvelope, signal: AbortSignal): Promise<CodingAssignmentSnapshot>;
+    /** Must verify current lease, attempt, fence and cancellation against authoritative state. */
+    assertCurrent(envelope: AssignmentExecutionEnvelope, signal: AbortSignal): Promise<void>;
+    /** Atomically persist dispatch ownership in the existing assignment store; duplicates fail closed.
+     * A crash without a report requires explicit reconciliation, never automatic redispatch. */
+    claimExecution(envelope: AssignmentExecutionEnvelope, signal: AbortSignal): Promise<void>;
+    /** Release only this successful dispatch claim's resources; never clear its durable dispatch fact. */
+    release(envelope: AssignmentExecutionEnvelope): Promise<void>;
+}
+export interface CodingObjectsPort {
+    /** Trusted gateway owns credentials; these methods never update a ref or create a PR. */
+    createBlob(content: string, signal: AbortSignal): Promise<string>;
+    createTree(baseTree: string, entries: readonly {
+        path: string;
+        mode: '100644' | '100755';
+        type: 'blob';
+        sha: string | null;
+    }[], signal: AbortSignal): Promise<string>;
+    createCommit(tree: string, parent: string, message: string, signal: AbortSignal): Promise<string>;
+}
+export interface CodingReportPort {
+    /** Lookup is keyed by envelope digest and returns only durable, trusted records. */
+    find(envelopeDigest: string, signal: AbortSignal): Promise<{
+        ref: string;
+        digest: string;
+        report: Readonly<Record<string, unknown>>;
+    } | undefined>;
+    /** Durable immutable storage, addressed by content digest and indexed by envelope digest. */
+    save(report: Readonly<Record<string, unknown>>, signal: AbortSignal): Promise<{
+        ref: string;
+        digest: string;
+    }>;
+}
+/** Fixed Docker transport: no bind mounts, inherited environment or networking in the guest. */
+export declare class DockerCodingAssignmentExecutor implements AssignmentExecutorPort {
+    private readonly snapshots;
+    private readonly objects;
+    private readonly reports;
+    private readonly dockerBinary;
+    constructor(snapshots: CodingAssignmentSnapshotPort, objects: CodingObjectsPort, reports: CodingReportPort, dockerBinary?: string);
+    execute(envelope: AssignmentExecutionEnvelope, signal: AbortSignal): AsyncIterable<AssignmentExecutionObservation>;
+    private removeContainer;
+}
+export declare function codingDockerArgs(snapshot: CodingAssignmentSnapshot, name: string): string[];
+export declare function validateCodingEdits(value: unknown, snapshot: CodingAssignmentSnapshot): CodingEdit[];
+/** Upload unreachable objects only. Ref/PR mutation must still pass the existing Git Gateway. */
+export declare function uploadCodingObjects(snapshot: CodingAssignmentSnapshot, edits: readonly CodingEdit[], objects: CodingObjectsPort, signal: AbortSignal): Promise<string>;
+/** No shell; bounded stdout/stderr; cancellation kills the attached process and waits for exit.
+ * Strict UTF-8 mode validates raw stdout bytes before any lossy decoding. */
+export declare function runCodingProcess(binary: string, args: readonly string[], input: string, signal: AbortSignal, maxBytes: number, cwd?: string, strictUtf8?: boolean): Promise<string>;
+/** Read-only infrastructure check; image availability does not prove a model/backend integration. */
+export declare function inspectCodingDockerReadiness(image: string, signal: AbortSignal, dockerBinary?: string): Promise<{
+    ready: boolean;
+    blockers: string[];
+}>;
+/** Reconcile daemon leftovers using current assignment authority, without redispatching work. */
+export declare function reconcileCodingContainers(isStale: (envelopeDigest: string, signal: AbortSignal) => Promise<boolean>, signal: AbortSignal, dockerBinary?: string): Promise<{
+    inspected: number;
+    removed: string[];
+}>;
+//# sourceMappingURL=coding-assignment-executor.d.ts.map

package/lib/workroom/coding-assignment-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-assignment-executor.d.ts","sourceRoot":"","sources":["../../src/workroom/coding-assignment-executor.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACpC;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AACD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,4BAA4B;IAC3C,mFAAmF;IACnF,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACvG,8FAA8F;IAC9F,aAAa,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF;gGAC4F;IAC5F,cAAc,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,sGAAsG;IACtG,OAAO,CAAC,QAAQ,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D;AACD,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtK,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnG;AACD,MAAM,WAAW,gBAAgB;IAC/B,oFAAoF;IACpF,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IACnJ,6FAA6F;IAC7F,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChH;AAED,gGAAgG;AAChG,qBAAa,8BAA+B,YAAW,sBAAsB;IAEzE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAHZ,SAAS,EAAE,4BAA4B,EACvC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,gBAAgB,EACzB,YAAY,SAAW;IAGnC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC,8BAA8B,CAAC;YA2C3G,eAAe;CAO9B;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,GAAG,UAAU,EAAE,CAgBpG;AAED,iGAAiG;AACjG,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB5K;AAyBD;6EAC6E;AAC7E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BvL;AAED,qGAAqG;AACrG,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,SAAW,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAc/J;AAED,iGAAiG;AACjG,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,EAC1E,MAAM,EAAE,WAAW,EACnB,YAAY,SAAW,GACtB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAanD"}

package/lib/workroom/coding-assignment-executor.js

@@ -0,0 +1,250 @@
+import { spawn } from 'node:child_process';
+import { digestCanonicalWorkroomValue as digest } from './canonical-value.js';
+import { assertAssignmentExecutionEnvelope, } from './assignment-executor.js';
+/** Fixed Docker transport: no bind mounts, inherited environment or networking in the guest. */
+export class DockerCodingAssignmentExecutor {
+    snapshots;
+    objects;
+    reports;
+    dockerBinary;
+    constructor(snapshots, objects, reports, dockerBinary = 'docker') {
+        this.snapshots = snapshots;
+        this.objects = objects;
+        this.reports = reports;
+        this.dockerBinary = dockerBinary;
+    }
+    async *execute(envelope, signal) {
+        assertAssignmentExecutionEnvelope(envelope);
+        signal.throwIfAborted();
+        const snapshot = structuredClone(await this.snapshots.resolve(envelope, signal));
+        const name = `zhin-coding-${envelope.digest.slice(7)}`;
+        let ownsDispatch = false;
+        try {
+            validateSnapshot(snapshot, envelope);
+            const boundedSignal = AbortSignal.any([signal, AbortSignal.timeout(snapshot.timeoutMs)]);
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            const prior = await this.reports.find(envelope.digest, boundedSignal);
+            if (prior) {
+                if (prior.digest !== digest(prior.report) || prior.report.envelopeDigest !== envelope.digest || prior.report.baseCommit !== snapshot.baseCommit || typeof prior.report.commit !== 'string')
+                    throw new Error('Coding recovered report authority mismatch');
+                assertSha(prior.report.commit);
+                await this.snapshots.assertCurrent(envelope, boundedSignal);
+                boundedSignal.throwIfAborted();
+                yield { version: 1, type: 'execution_completed', observationId: `${name}/completed`, envelopeDigest: envelope.digest, completion: { report: { ref: prior.ref, digest: prior.digest }, candidate: { ref: `git:${prior.report.commit}`, hash: digest({ baseCommit: snapshot.baseCommit, commit: prior.report.commit }) } } };
+                return;
+            }
+            await this.snapshots.claimExecution(envelope, boundedSignal);
+            ownsDispatch = true;
+            yield { version: 1, type: 'progress', observationId: `${name}/started`, envelopeDigest: envelope.digest, progress: { summary: 'Running pinned coding image in isolated Docker workspace' } };
+            const input = JSON.stringify({ version: 1, envelopeDigest: envelope.digest, baseCommit: snapshot.baseCommit, instruction: snapshot.instruction, files: snapshot.files });
+            if (Buffer.byteLength(input) > snapshot.maxBytes)
+                throw new Error('Coding input exceeds byte budget');
+            const output = await runCodingProcess(this.dockerBinary, codingDockerArgs(snapshot, name), input, boundedSignal, snapshot.maxBytes);
+            // Stop the entire guest before interpreting candidate-controlled output.
+            await this.removeContainer(name);
+            boundedSignal.throwIfAborted();
+            const edits = validateCodingEdits(JSON.parse(output), snapshot);
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            const commit = await uploadCodingObjects(snapshot, edits, this.objects, boundedSignal);
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            const report = { version: 1, envelopeDigest: envelope.digest, baseCommit: snapshot.baseCommit, commit, editsDigest: digest(edits), paths: edits.map(edit => edit.path), image: snapshot.image };
+            const stored = await this.reports.save(report, boundedSignal);
+            if (stored.digest !== digest(report))
+                throw new Error('Coding report storage digest mismatch');
+            await this.snapshots.assertCurrent(envelope, boundedSignal);
+            boundedSignal.throwIfAborted();
+            yield { version: 1, type: 'execution_completed', observationId: `${name}/completed`, envelopeDigest: envelope.digest, completion: { report: stored, candidate: { ref: `git:${commit}`, hash: digest({ baseCommit: snapshot.baseCommit, commit }) } } };
+        }
+        finally {
+            try {
+                if (ownsDispatch)
+                    await this.removeContainer(name);
+            }
+            finally {
+                if (ownsDispatch)
+                    await this.snapshots.release(envelope);
+            }
+        }
+    }
+    async removeContainer(name) {
+        // rm -f addresses the daemon-side container even when the attached CLI was killed.
+        try {
+            await runCodingProcess(this.dockerBinary, ['rm', '-f', name], '', AbortSignal.timeout(10_000), 16_384);
+        }
+        catch (error) {
+            if (!(error instanceof Error) || !error.message.includes('No such container'))
+                throw error;
+        }
+    }
+}
+export function codingDockerArgs(snapshot, name) {
+    return ['run', '--rm', '--pull=never', '--name', name, '--label=dev.zhin.coding-executor=1', `--label=dev.zhin.envelope=${snapshot.envelopeDigest}`, '--network=none', '--read-only', '--cap-drop=ALL', '--security-opt=no-new-privileges', '--pids-limit=128', `--memory=${snapshot.memoryMiB}m`, `--memory-swap=${snapshot.memoryMiB}m`, `--cpus=${snapshot.cpus}`, '--user=65534:65534', '--workdir=/workspace', `--tmpfs=/workspace:rw,nosuid,nodev,size=${snapshot.workspaceMiB}m,mode=1777`, '--tmpfs=/tmp:rw,nosuid,nodev,size=32m,mode=1777', '--entrypoint', snapshot.command[0], '-i', snapshot.image, ...snapshot.command.slice(1)];
+}
+export function validateCodingEdits(value, snapshot) {
+    if (!value || typeof value !== 'object' || Object.keys(value).join() !== 'edits' || !Array.isArray(value.edits))
+        throw new Error('Coding output requires only edits');
+    const edits = value.edits;
+    if (!edits.length || edits.length > 256 || Buffer.byteLength(JSON.stringify(value)) > snapshot.maxBytes)
+        throw new Error('Coding output exceeds change budget or has no edits');
+    const seen = new Set();
+    return edits.map(value => {
+        if (!value || typeof value !== 'object')
+            throw new Error('Invalid coding edit');
+        const edit = value;
+        if (Object.keys(edit).sort().join() !== 'content,path' || typeof edit.path !== 'string' || (edit.content !== null && typeof edit.content !== 'string'))
+            throw new Error('Invalid coding edit');
+        assertPath(edit.path);
+        if (!snapshot.writablePaths.some(path => edit.path === path || (path.endsWith('/') && edit.path.startsWith(path))))
+            throw new Error(`Coding path outside authorized scope: ${edit.path}`);
+        if (seen.has(edit.path))
+            throw new Error('Duplicate coding path');
+        seen.add(edit.path);
+        if (edit.content === null && !snapshot.files.some(file => file.path === edit.path))
+            throw new Error('Cannot delete unknown coding file');
+        return { path: edit.path, content: edit.content };
+    });
+}
+/** Upload unreachable objects only. Ref/PR mutation must still pass the existing Git Gateway. */
+export async function uploadCodingObjects(snapshot, edits, objects, signal) {
+    assertSha(snapshot.baseCommit);
+    assertSha(snapshot.baseTree);
+    const checked = validateCodingEdits({ edits }, snapshot);
+    const entries = [];
+    for (const edit of checked) {
+        signal.throwIfAborted();
+        const sha = edit.content === null ? null : await objects.createBlob(edit.content, signal);
+        if (sha !== null)
+            assertSha(sha);
+        entries.push({ path: edit.path, mode: snapshot.files.find(file => file.path === edit.path)?.mode ?? '100644', type: 'blob', sha });
+    }
+    signal.throwIfAborted();
+    const tree = await objects.createTree(snapshot.baseTree, entries, signal);
+    assertSha(tree);
+    signal.throwIfAborted();
+    const commit = await objects.createCommit(tree, snapshot.baseCommit, `Workroom candidate ${snapshot.envelopeDigest}`, signal);
+    assertSha(commit);
+    return commit;
+}
+function validateSnapshot(snapshot, envelope) {
+    if (snapshot.envelopeDigest !== envelope.digest || snapshot.baseCommit !== envelope.workspace.baseRevision.replace(/^git:/u, ''))
+        throw new Error('Coding snapshot authority mismatch');
+    assertSha(snapshot.baseCommit);
+    assertSha(snapshot.baseTree);
+    if (!/^[a-z0-9][a-z0-9./:_-]*@sha256:[a-f0-9]{64}$/u.test(snapshot.image))
+        throw new Error('Coding image requires immutable digest');
+    if (!snapshot.command.length || snapshot.command.some(arg => !arg || arg.includes('\0')))
+        throw new Error('Coding command is invalid');
+    for (const n of [snapshot.timeoutMs, snapshot.maxBytes, snapshot.memoryMiB, snapshot.workspaceMiB])
+        if (!Number.isSafeInteger(n) || n <= 0)
+            throw new Error('Coding budget must be positive');
+    // Node timers above signed 32-bit delay overflow to 1ms, even where the
+    // AbortSignal API accepts an unsigned 32-bit value. Reject before dispatch.
+    if (snapshot.timeoutMs > 2_147_483_647)
+        throw new Error('Coding timeout exceeds platform timer upper bound');
+    if (!Number.isFinite(snapshot.cpus) || snapshot.cpus <= 0)
+        throw new Error('Coding CPU budget must be positive');
+    for (const path of snapshot.writablePaths)
+        assertPath(path.endsWith('/') ? path.slice(0, -1) : path);
+    const seen = new Set();
+    for (const file of snapshot.files) {
+        assertPath(file.path);
+        if (seen.has(file.path) || !['100644', '100755'].includes(file.mode) || typeof file.content !== 'string')
+            throw new Error('Invalid coding base file');
+        seen.add(file.path);
+    }
+}
+function assertSha(value) { if (!/^[a-f0-9]{40}$/u.test(value))
+    throw new Error('Coding Git object requires exact SHA-1'); }
+function assertPath(path) {
+    if (!path || path.startsWith('/') || path.includes('\\') || path.includes(':') || Array.from(path).some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) || path.split('/').some(part => !part || part === '.' || part === '..' || part.toLowerCase() === '.git') || (path.toLowerCase() === '.github' || path.toLowerCase().startsWith('.github/')))
+        throw new Error(`Unsafe coding path: ${path}`);
+}
+/** No shell; bounded stdout/stderr; cancellation kills the attached process and waits for exit.
+ * Strict UTF-8 mode validates raw stdout bytes before any lossy decoding. */
+export async function runCodingProcess(binary, args, input, signal, maxBytes, cwd, strictUtf8 = false) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(binary, [...args], { cwd, env: { PATH: process.env.PATH, HOME: '/nonexistent', GIT_CONFIG_NOSYSTEM: '1', GIT_CONFIG_GLOBAL: '/dev/null', GIT_TERMINAL_PROMPT: '0' }, stdio: 'pipe' });
+        const output = [];
+        const errors = [];
+        let bytes = 0;
+        let failure;
+        const stop = () => { failure ??= new Error('Coding process aborted'); child.kill('SIGKILL'); };
+        const collect = (target) => (chunk) => { bytes += chunk.length; if (bytes > maxBytes) {
+            failure = new Error('Coding process exceeds output budget');
+            child.kill('SIGKILL');
+        }
+        else
+            target.push(chunk); };
+        child.stdout.on('data', collect(output));
+        child.stderr.on('data', collect(errors));
+        child.stdin.on('error', () => { });
+        signal.addEventListener('abort', stop, { once: true });
+        if (signal.aborted)
+            stop();
+        child.once('error', error => { signal.removeEventListener('abort', stop); reject(error); });
+        child.once('close', code => {
+            signal.removeEventListener('abort', stop);
+            if (failure) {
+                reject(failure);
+                return;
+            }
+            if (code !== 0) {
+                reject(new Error(`Coding process exited ${code}: ${Buffer.concat(errors).toString('utf8').slice(0, 1024)}`));
+                return;
+            }
+            try {
+                const bytes = Buffer.concat(output);
+                resolve(strictUtf8 ? new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes) : bytes.toString('utf8'));
+            }
+            catch {
+                reject(new Error('Coding process output requires valid UTF-8'));
+            }
+        });
+        child.stdin.end(input);
+    });
+}
+/** Read-only infrastructure check; image availability does not prove a model/backend integration. */
+export async function inspectCodingDockerReadiness(image, signal, dockerBinary = 'docker') {
+    signal.throwIfAborted();
+    if (!/^[a-z0-9][a-z0-9./:_-]*@sha256:[a-f0-9]{64}$/u.test(image))
+        return { ready: false, blockers: ['coding_image_digest_required'] };
+    try {
+        await runCodingProcess(dockerBinary, ['info', '--format', '{{.ServerVersion}}'], '', signal, 16_384);
+        signal.throwIfAborted();
+    }
+    catch {
+        signal.throwIfAborted();
+        return { ready: false, blockers: ['docker_daemon_unavailable'] };
+    }
+    try {
+        const output = await runCodingProcess(dockerBinary, ['image', 'inspect', '--format', '{{json .RepoDigests}}', image], '', signal, 16_384);
+        signal.throwIfAborted();
+        const digests = JSON.parse(output);
+        if (!Array.isArray(digests) || !digests.includes(image))
+            return { ready: false, blockers: ['coding_image_digest_mismatch'] };
+        return { ready: true, blockers: [] };
+    }
+    catch {
+        signal.throwIfAborted();
+        return { ready: false, blockers: ['coding_image_not_provisioned'] };
+    }
+}
+/** Reconcile daemon leftovers using current assignment authority, without redispatching work. */
+export async function reconcileCodingContainers(isStale, signal, dockerBinary = 'docker') {
+    const output = await runCodingProcess(dockerBinary, ['ps', '-a', '--filter', 'label=dev.zhin.coding-executor=1', '--format', '{{.Names}}'], '', signal, 65_536);
+    const names = output.split('\n').filter(Boolean);
+    const removed = [];
+    for (const name of names) {
+        if (!/^zhin-coding-[a-f0-9]{64}$/u.test(name))
+            throw new Error('Unexpected coding container identity');
+        const envelopeDigest = `sha256:${name.slice('zhin-coding-'.length)}`;
+        if (!await isStale(envelopeDigest, signal))
+            continue;
+        signal.throwIfAborted();
+        await runCodingProcess(dockerBinary, ['rm', '-f', name], '', signal, 16_384);
+        removed.push(name);
+    }
+    return { inspected: names.length, removed };
+}
+//# sourceMappingURL=coding-assignment-executor.js.map

package/lib/workroom/coding-assignment-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-assignment-executor.js","sourceRoot":"","sources":["../../src/workroom/coding-assignment-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,4BAA4B,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EACL,iCAAiC,GAIlC,MAAM,0BAA0B,CAAC;AAoDlC,gGAAgG;AAChG,MAAM,OAAO,8BAA8B;IAEtB;IACA;IACA;IACA;IAJnB,YACmB,SAAuC,EACvC,OAA0B,EAC1B,OAAyB,EACzB,eAAe,QAAQ;QAHvB,cAAS,GAAT,SAAS,CAA8B;QACvC,YAAO,GAAP,OAAO,CAAmB;QAC1B,YAAO,GAAP,OAAO,CAAkB;QACzB,iBAAY,GAAZ,YAAY,CAAW;IACvC,CAAC;IAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAqC,EAAE,MAAmB;QACvE,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,eAAe,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YACtE,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC1P,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBAC5D,aAAa,CAAC,cAAc,EAAE,CAAC;gBAC/B,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,IAAI,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;gBAC3T,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC7D,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,EAAE,CAAC;YAC7L,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACzK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpI,yEAAyE;YACzE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACjC,aAAa,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChE,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChM,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC/F,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5D,aAAa,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,IAAI,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QACzP,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,IAAI,YAAY;oBAAE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,YAAY;oBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;QACnI,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,mFAAmF;QACnF,IAAI,CAAC;YAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC/G,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC7F,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkC,EAAE,IAAY;IAC/E,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,oCAAoC,EAAE,6BAA6B,QAAQ,CAAC,cAAc,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,kBAAkB,EAAE,YAAY,QAAQ,CAAC,SAAS,GAAG,EAAE,iBAAiB,QAAQ,CAAC,SAAS,GAAG,EAAE,UAAU,QAAQ,CAAC,IAAI,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2CAA2C,QAAQ,CAAC,YAAY,aAAa,EAAE,iDAAiD,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,QAAkC;IACpF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,KAA6B,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/L,MAAM,KAAK,GAAI,KAA8B,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAChL,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,KAAmB,CAAC;QACjC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,cAAc,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/L,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1L,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAkC,EAAE,KAA4B,EAAE,OAA0B,EAAE,MAAmB;IACzJ,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1F,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,QAAiB,EAAE,IAAI,EAAE,MAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1E,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,sBAAsB,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9H,SAAS,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkC,EAAE,QAAqC;IACjG,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxL,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACvI,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC9L,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,SAAS,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC7G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa;QAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAAa,IAAU,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC;AAC1I,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;AACrZ,CAAC;AAED;6EAC6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAuB,EAAE,KAAa,EAAE,MAAmB,EAAE,QAAgB,EAAE,GAAY,EAAE,UAAU,GAAG,KAAK;IACpK,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1M,MAAM,MAAM,GAAa,EAAE,CAAC;QAAC,MAAM,MAAM,GAAa,EAAE,CAAC;QACzD,IAAI,KAAK,GAAG,CAAC,CAAC;QAAC,IAAI,OAA0B,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAS,EAAE,GAAG,OAAO,KAAK,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,CAAC,KAAa,EAAQ,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;;YAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA6C,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7G,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;YAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAAa,EAAE,MAAmB,EAAE,YAAY,GAAG,QAAQ;IAC5G,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;IACtI,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrG,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC;IAAC,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1I,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;QAC7H,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;IAAC,CAAC;AAC3G,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA0E,EAC1E,MAAmB,EACnB,YAAY,GAAG,QAAQ;IAEvB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,kCAAkC,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACvG,MAAM,cAAc,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAAE,SAAS;QACrD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,gBAAgB,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC"}

package/lib/workroom/coding-git-objects.d.ts

@@ -0,0 +1,17 @@
+import { type CodingFile, type CodingObjectsPort } from './coding-assignment-executor.js';
+/** Reads committed regular UTF-8 files without checking out or running repository code. */
+export declare function readCodingGitSnapshot(repository: string, commit: string, paths: readonly string[], signal: AbortSignal, maxBytes?: number): Promise<{
+    baseCommit: string;
+    baseTree: string;
+    files: CodingFile[];
+}>;
+export interface CodingGitHubObjectsOptions {
+    readonly owner: string;
+    readonly repository: string;
+    /** Must return a short-lived service credential; never sent to the coding image. */
+    readonly token: (signal: AbortSignal) => Promise<string>;
+    readonly fetch?: typeof globalThis.fetch;
+}
+/** Unreachable object creation only; no branches, merges or protection administration. */
+export declare function createCodingGitHubObjectsPort(options: CodingGitHubObjectsOptions): CodingObjectsPort;
+//# sourceMappingURL=coding-git-objects.d.ts.map

package/lib/workroom/coding-git-objects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-git-objects.d.ts","sourceRoot":"","sources":["../../src/workroom/coding-git-objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAE5G,2FAA2F;AAC3F,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,SAAkB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAsBjO;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,0FAA0F;AAC1F,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,0BAA0B,GAAG,iBAAiB,CAqBpG"}

package/lib/workroom/coding-git-objects.js

@@ -0,0 +1,68 @@
+import { runCodingProcess } from './coding-assignment-executor.js';
+/** Reads committed regular UTF-8 files without checking out or running repository code. */
+export async function readCodingGitSnapshot(repository, commit, paths, signal, maxBytes = 4 * 1024 * 1024) {
+    if (!/^[a-f0-9]{40}$/u.test(commit))
+        throw new Error('Coding base requires exact SHA-1');
+    if (!paths.length)
+        throw new Error('Coding context paths required');
+    for (const path of paths)
+        assertContextPath(path);
+    const git = (args) => runCodingProcess('git', ['--literal-pathspecs', '--no-replace-objects', '-c', 'core.fsmonitor=false', ...args], '', signal, maxBytes, repository, true);
+    const baseCommit = (await git(['rev-parse', '--verify', `${commit}^{commit}`])).trim();
+    if (baseCommit !== commit)
+        throw new Error('Coding base commit mismatch');
+    const baseTree = (await git(['rev-parse', `${commit}^{tree}`])).trim();
+    const entries = (await git(['ls-tree', '-rz', '--full-tree', commit, '--', ...paths])).split('\0').filter(Boolean);
+    const files = [];
+    let total = 0;
+    for (const entry of entries) {
+        const match = /^(100644|100755) blob ([a-f0-9]{40})\t(.+)$/u.exec(entry);
+        if (!match)
+            throw new Error('Coding context forbids symlinks and submodules');
+        const content = await git(['cat-file', 'blob', match[2]]);
+        // Binary files need a separate, explicit artifact channel.
+        if (content.includes('\0'))
+            throw new Error('Coding context requires UTF-8 text');
+        total += Buffer.byteLength(content);
+        if (total > maxBytes)
+            throw new Error('Coding context exceeds byte budget');
+        files.push({ path: match[3], content, mode: match[1] });
+    }
+    return { baseCommit, baseTree, files };
+}
+/** Unreachable object creation only; no branches, merges or protection administration. */
+export function createCodingGitHubObjectsPort(options) {
+    if (![options.owner, options.repository].every(value => /^[A-Za-z0-9_.-]+$/u.test(value)))
+        throw new Error('Invalid Coding GitHub repository');
+    const request = async (resource, body, signal) => {
+        signal.throwIfAborted();
+        const token = await options.token(signal);
+        signal.throwIfAborted();
+        const response = await (options.fetch ?? globalThis.fetch)(`https://api.github.com/repos/${options.owner}/${options.repository}/git/${resource}`, {
+            method: 'POST', redirect: 'error', signal,
+            headers: { Authorization: `Bearer ${token}`, Accept: 'application/vnd.github+json', 'Content-Type': 'application/json', 'X-GitHub-Api-Version': '2022-11-28' },
+            body: JSON.stringify(body),
+        });
+        if (!response.ok)
+            throw new Error(`Coding GitHub objects ${resource} failed (${response.status})`);
+        const value = await response.json();
+        if (typeof value.sha !== 'string' || !/^[a-f0-9]{40}$/u.test(value.sha))
+            throw new Error('Coding GitHub objects returned invalid SHA');
+        return value.sha;
+    };
+    return {
+        createBlob: (content, signal) => request('blobs', { content, encoding: 'utf-8' }, signal),
+        createTree: (baseTree, tree, signal) => request('trees', { base_tree: baseTree, tree }, signal),
+        createCommit: (tree, parent, message, signal) => request('commits', { tree, parents: [parent], message }, signal),
+    };
+}
+function assertContextPath(path) {
+    if (typeof path !== 'string' || !path || path.startsWith('/') || path.startsWith('-') || path.includes(':') || path.includes('\\')
+        || Array.from(path).some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+        throw new Error('Coding context requires canonical relative paths');
+    const canonical = path.endsWith('/') ? path.slice(0, -1) : path;
+    if (canonical.split('/').some(part => !part || part === '.' || part === '..' || part.toLowerCase() === '.git')
+        || canonical.split('/')[0].toLowerCase() === '.github')
+        throw new Error('Coding context requires canonical relative paths outside protected .github');
+}
+//# sourceMappingURL=coding-git-objects.js.map

package/lib/workroom/coding-git-objects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-git-objects.js","sourceRoot":"","sources":["../../src/workroom/coding-git-objects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA2C,MAAM,iCAAiC,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,MAAc,EAAE,KAAwB,EAAE,MAAmB,EAAE,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;IACvJ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzF,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxL,MAAM,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,IAAI,UAAU,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnH,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC3D,2DAA2D;QAC3D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClF,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAuB,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAUD,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B,CAAC,OAAmC;IAC/E,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAa,EAAE,MAAmB,EAAmB,EAAE;QAC9F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,gCAAgC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,QAAQ,QAAQ,EAAE,EAAE;YAChJ,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,EAAE;YAC9J,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,YAAY,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuB,CAAC;QACzD,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACvI,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC,CAAC;IACF,OAAO;QACL,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC;QACzF,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC;QAC/F,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC7H,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/J,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;WACzG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;AAC3J,CAAC"}

package/lib/workroom/durable-file-store.d.ts

@@ -5,6 +5,8 @@ export interface DurableFileHandle {
 }
 /** The intentionally narrow filesystem seam used by immutable Workroom facts. */
 export interface DurableFileSystem {
+    /** False when the platform cannot open and flush directory handles (Windows). */
+    readonly supportsDirectorySync?: boolean;
     mkdir(path: string): Promise<void>;
     open(path: string, flags: 'wx' | 'r'): Promise<DurableFileHandle>;
     link(existingPath: string, newPath: string): Promise<void>;
@@ -24,6 +26,8 @@ export type CreateOnlyPublishResult<Created, Replayed> = Readonly<{
     status: 'replayed';
     value: Replayed;
 }>;
+/** Recognizes only the staging suffix produced by publishCreateOnly, for a domain-valid target. */
+export declare function isDurableFileStagingName(name: string, targetPattern: RegExp): boolean;
 /**
  * Crash-durable filesystem operations shared by Workroom file repositories.
  *

package/lib/workroom/durable-file-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable-file-store.d.ts","sourceRoot":"","sources":["../../src/workroom/durable-file-store.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,eAAO,MAAM,qBAAqB,EAAE,iBAOlC,CAAC;AAEH,MAAM,WAAW,wBAAwB,CAAC,OAAO,EAAE,QAAQ;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,IACjD,QAAQ,CAAC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,GAC/C,QAAQ,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,qBAAa,gBAAgB;;IAEzB,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB;gBAD7B,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,iBAAyC;IAG1D,iBAAiB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBzD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASrC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKxC;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EACvC,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,GACnD,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAiChD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAc9E"}
+{"version":3,"file":"durable-file-store.d.ts","sourceRoot":"","sources":["../../src/workroom/durable-file-store.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,eAAO,MAAM,qBAAqB,EAAE,iBAQlC,CAAC;AAEH,MAAM,WAAW,wBAAwB,CAAC,OAAO,EAAE,QAAQ;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,IACjD,QAAQ,CAAC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,GAC/C,QAAQ,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC;AAEtD,mGAAmG;AACnG,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAGrF;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;;IAEzB,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB;gBAD7B,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,iBAAyC;IAG1D,iBAAiB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBzD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKxC;;;;;;OAMG;IACG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EACvC,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,GACnD,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAiChD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAc9E"}

package/lib/workroom/durable-file-store.js

@@ -2,11 +2,17 @@ import { randomUUID } from 'node:crypto';
 import { link as nodeLink, mkdir as nodeMkdir, open as nodeOpen, unlink as nodeUnlink, } from 'node:fs/promises';
 import { dirname } from 'node:path';
 export const nodeDurableFileSystem = Object.freeze({
+    supportsDirectorySync: process.platform !== 'win32',
     mkdir: async (path) => { await nodeMkdir(path); },
     open: async (path, flags) => await nodeOpen(path, flags),
     link: async (existingPath, newPath) => await nodeLink(existingPath, newPath),
     unlink: async (path) => { await nodeUnlink(path); },
 });
+/** Recognizes only the staging suffix produced by publishCreateOnly, for a domain-valid target. */
+export function isDurableFileStagingName(name, targetPattern) {
+    const match = /^(.+)\.[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}\.tmp$/u.exec(name);
+    return Boolean(match && targetPattern.test(match[1]));
+}
 /**
  * Crash-durable filesystem operations shared by Workroom file repositories.
  *
@@ -36,6 +42,8 @@ export class DurableFileStore {
         await this.syncPath(dirname(this.directory));
     }
     async syncPath(path) {
+        if (this.fileSystem.supportsDirectorySync === false)
+            return;
         const handle = await this.fileSystem.open(path, 'r');
         try {
             await handle.sync();

package/lib/workroom/durable-file-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"durable-file-store.js","sourceRoot":"","sources":["../../src/workroom/durable-file-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,IAAI,IAAI,QAAQ,EAChB,KAAK,IAAI,SAAS,EAClB,IAAI,IAAI,QAAQ,EAChB,MAAM,IAAI,UAAU,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,MAAM,CAAC,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACpE,KAAK,EAAE,KAAK,EAAE,IAAY,EAAiB,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,EAAE,KAAK,EAAE,IAAY,EAAE,KAAiB,EAA8B,EAAE,CAC1E,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,YAAoB,EAAE,OAAe,EAAiB,EAAE,CACnE,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IACvC,MAAM,EAAE,KAAK,EAAE,IAAY,EAAiB,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CAC3E,CAAC,CAAC;AAaH;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAEhB;IACA;IAFX,YACW,SAAiB,EACjB,aAAgC,qBAAqB;QADrD,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAA2C;IAC7D,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CAAC,eAAuB;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CACb,GAAG,eAAe,qDAAqD;0BACrE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EACzB,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAoD;QAEpD,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;QAC1D,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC3D,eAAe,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC3C,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACvC,eAAe,GAAG,KAAK,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACvC,eAAe,GAAG,KAAK,CAAC;YACxB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,IAAI,eAAe;gBAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,kBAAkB,GAAG,KAAK;QAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,IAAI,kBAAkB;YAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;WAC9D,KAA4B,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"durable-file-store.js","sourceRoot":"","sources":["../../src/workroom/durable-file-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,IAAI,IAAI,QAAQ,EAChB,KAAK,IAAI,SAAS,EAClB,IAAI,IAAI,QAAQ,EAChB,MAAM,IAAI,UAAU,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,MAAM,CAAC,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACpE,qBAAqB,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;IACnD,KAAK,EAAE,KAAK,EAAE,IAAY,EAAiB,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,EAAE,KAAK,EAAE,IAAY,EAAE,KAAiB,EAA8B,EAAE,CAC1E,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE,YAAoB,EAAE,OAAe,EAAiB,EAAE,CACnE,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IACvC,MAAM,EAAE,KAAK,EAAE,IAAY,EAAiB,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CAC3E,CAAC,CAAC;AAaH,mGAAmG;AACnG,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,aAAqB;IAC1E,MAAM,KAAK,GAAG,mFAAmF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7G,OAAO,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAEhB;IACA;IAFX,YACW,SAAiB,EACjB,aAAgC,qBAAqB;QADrD,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAA2C;IAC7D,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CAAC,eAAuB;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CACb,GAAG,eAAe,qDAAqD;0BACrE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EACzB,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,qBAAqB,KAAK,KAAK;YAAE,OAAO;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAoD;QAEpD,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;QAC1D,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC3D,eAAe,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC3C,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACvC,eAAe,GAAG,KAAK,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACvC,eAAe,GAAG,KAAK,CAAC;YACxB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,IAAI,eAAe;gBAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,kBAAkB,GAAG,KAAK;QAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,IAAI,kBAAkB;YAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;WAC9D,KAA4B,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/lib/workroom/effect-blocker-repository.d.ts

@@ -1,4 +1,20 @@
-import type { WorkroomEffectBlockerControlPort, WorkroomEffectBlockerInput } from '../plugin-runtime/workroom-effect-runtime.js';
+export interface WorkroomEffectBlockerInput {
+    readonly projectId: string;
+    readonly effectId: string;
+    readonly owner: string;
+    readonly policy: Readonly<{
+        kind: 'pinned_profile' | 'root_emergency_fallback';
+        ref: string;
+        digest: string;
+    }>;
+    readonly reason: string;
+    readonly deadline: number;
+    readonly allowedSuccessors: readonly ('retry' | 'reconcile' | 'cancel')[];
+}
+export interface WorkroomEffectBlockerControlPort {
+    block(input: WorkroomEffectBlockerInput): Promise<void>;
+    recover(projectId: string, effectId: string): Promise<void>;
+}
 export interface WorkroomEffectBlockerRecord {
     readonly version: 1;
     readonly projectId: string;

package/lib/workroom/effect-blocker-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"effect-blocker-repository.d.ts","sourceRoot":"","sources":["../../src/workroom/effect-blocker-repository.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AAEtD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IAC5F,MAAM,CACJ,KAAK,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,QAAQ,CAAC,EAC9F,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,2BAA2B,CAAC,CAAC;CACzC;AAED,qBAAa,mCAAoC,YAAW,+BAA+B;;IAG7E,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;IAIhC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC;IAyB3F,MAAM,CACV,KAAK,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,QAAQ,CAAC,EAC9F,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,2BAA2B,CAAC;CAmCxC;AAED,qBAAa,mCAAoC,YAAW,gCAAgC;IAExF,QAAQ,CAAC,UAAU,EAAE,+BAA+B;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;gBADjB,UAAU,EAAE,+BAA+B,EAC3C,GAAG,GAAE,MAAM,MAAiB;IAGjC,KAAK,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAelE"}
+{"version":3,"file":"effect-blocker-repository.d.ts","sourceRoot":"","sources":["../../src/workroom/effect-blocker-repository.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,IAAI,EAAE,gBAAgB,GAAG,yBAAyB,CAAC;QACnD,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC,EAAE,CAAC;CAC3E;AAED,MAAM,WAAW,gCAAgC;IAC/C,KAAK,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IAC5F,MAAM,CACJ,KAAK,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,QAAQ,CAAC,EAC9F,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,2BAA2B,CAAC,CAAC;CACzC;AAED,qBAAa,mCAAoC,YAAW,+BAA+B;;IAG7E,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;IAIhC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC;IAyB3F,MAAM,CACV,KAAK,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,QAAQ,CAAC,EAC9F,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,2BAA2B,CAAC;CAmCxC;AAED,qBAAa,mCAAoC,YAAW,gCAAgC;IAExF,QAAQ,CAAC,UAAU,EAAE,+BAA+B;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;gBADjB,UAAU,EAAE,+BAA+B,EAC3C,GAAG,GAAE,MAAM,MAAiB;IAGjC,KAAK,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAelE"}