@zhin.js/agent 1.1.30 → 1.1.32

package/lib/workroom/git-workspace-gateway.js

@@ -1,257 +0,0 @@
-import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
-export function createGitWorkspaceLease(input) {
-    const expectedBranch = `refs/heads/zhin/${required(input.runId, 'runId')}/${required(input.assignmentId, 'assignmentId')}/attempt-${positive(input.attempt, 'attempt')}`;
-    const repositoryId = required(input.repository?.id, 'repository id');
-    if (!/^github:[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/u.test(repositoryId)) {
-        throw new Error('Git Workspace canonical repository ID is invalid');
-    }
-    if (repositoryId.slice('github:'.length).split('/').some(part => part === '.' || part === '..')) {
-        throw new Error('Git Workspace canonical repository ID is invalid');
-    }
-    if (repositoryId !== repositoryId.toLowerCase()) {
-        throw new Error('Git Workspace canonical repository ID must be lowercase');
-    }
-    const targetRef = branchRef(input.targetRef, 'targetRef');
-    const attemptBranch = branchRef(input.attemptBranch, 'attemptBranch');
-    if (attemptBranch !== expectedBranch || attemptBranch === targetRef) {
-        throw new Error('Git Workspace attempt branch is not the exact per-attempt branch');
-    }
-    if (!Array.isArray(input.pathScopes) || input.pathScopes.length === 0) {
-        throw new Error('Git Workspace requires explicit path scope');
-    }
-    const pathScopes = Object.freeze(input.pathScopes.map(scope => canonicalPath(scope, 'path scope')).sort());
-    if (new Set(pathScopes).size !== pathScopes.length)
-        throw new Error('Git Workspace path scopes contain duplicates');
-    const body = deepFreeze({
-        version: 1,
-        leaseRef: required(input.leaseRef, 'leaseRef'),
-        projectId: required(input.projectId, 'projectId'),
-        runId: input.runId,
-        taskKey: required(input.taskKey, 'taskKey'),
-        taskRevision: positive(input.taskRevision, 'taskRevision'),
-        assignmentId: input.assignmentId,
-        attempt: input.attempt,
-        fence: positive(input.fence, 'fence'),
-        repository: deepFreeze({
-            id: repositoryId,
-            bindingRef: required(input.repository.bindingRef, 'repository bindingRef'),
-            bindingDigest: requiredDigest(input.repository.bindingDigest, 'repository bindingDigest'),
-        }),
-        baseSha: gitSha(input.baseSha, 'baseSha'),
-        ...(input.checkpointSha === undefined
-            ? {}
-            : { checkpointSha: gitSha(input.checkpointSha, 'checkpointSha') }),
-        targetRef,
-        attemptBranch,
-        pathScopes,
-        mode: enumValue(input.mode, ['branch_only', 'pull_request'], 'workspace mode'),
-        expiresAt: positive(input.expiresAt, 'expiresAt'),
-    });
-    return deepFreeze({ ...body, digest: digest(body) });
-}
-/** The only component that sees credentials; callers supply only an immutable lease. */
-export class GitWorkspaceGateway {
-    options;
-    #generation;
-    #now;
-    constructor(options) {
-        this.options = options;
-        this.#generation = positive(options.generation, 'generation');
-        this.#now = options.now ?? Date.now;
-    }
-    async push(input, signal) {
-        signal.throwIfAborted();
-        const lease = assertLease(input.lease);
-        this.#assertActive(lease);
-        assertFence(lease, input.fence);
-        if (input.ref === lease.targetRef)
-            throw new Error('Git Workspace Gateway forbids canonical target push');
-        if (input.ref !== lease.attemptBranch)
-            throw new Error('Git Workspace Gateway push ref is outside the lease');
-        if (input.force !== false)
-            throw new Error('Force push is forbidden');
-        assertChangedPaths(input.changedPaths, lease.pathScopes);
-        const headSha = gitSha(input.headSha, 'push headSha');
-        const credential = await this.#credential(lease, 'git_push', signal);
-        const request = deepFreeze({
-            operationId: required(input.operationId, 'operationId'),
-            repositoryId: lease.repository.id,
-            ref: lease.attemptBranch,
-            headSha,
-            force: false,
-            baseSha: lease.baseSha,
-            pathScopes: lease.pathScopes,
-            idempotencyKey: `git-push:${lease.digest}:${input.operationId}`,
-        });
-        const receipt = await this.options.transport.push(request, credential, signal);
-        signal.throwIfAborted();
-        return validatePushReceipt(receipt, request);
-    }
-    async openPullRequest(input, signal) {
-        signal.throwIfAborted();
-        const lease = assertLease(input.lease);
-        this.#assertActive(lease);
-        assertFence(lease, input.fence);
-        if (lease.mode !== 'pull_request')
-            throw new Error('Git Workspace lease does not allow Pull Requests');
-        if (input.headRef !== lease.attemptBranch || input.baseRef !== lease.targetRef) {
-            throw new Error('Pull Request refs are outside the exact Git Workspace lease');
-        }
-        const headSha = gitSha(input.headSha, 'Pull Request headSha');
-        const credential = await this.#credential(lease, 'git_open_pr', signal);
-        const request = deepFreeze({
-            operationId: required(input.operationId, 'operationId'),
-            repositoryId: lease.repository.id,
-            headRef: lease.attemptBranch,
-            baseRef: lease.targetRef,
-            baseSha: lease.baseSha,
-            pathScopes: lease.pathScopes,
-            headSha,
-            idempotencyKey: `git-pr:${lease.digest}:${input.operationId}`,
-        });
-        const receipt = await this.options.transport.openPullRequest(request, credential, signal);
-        signal.throwIfAborted();
-        return validatePullRequestReceipt(receipt, request);
-    }
-    async cancel(input, signal) {
-        signal.throwIfAborted();
-        const lease = assertLease(input.lease);
-        this.#assertActive(lease);
-        assertFence(lease, input.fence);
-        const operationId = required(input.operationId, 'operationId');
-        const remoteOperationId = required(input.remoteOperationId, 'remoteOperationId');
-        const credential = await this.#credential(lease, 'git_cancel_remote', signal);
-        const receipt = await this.options.transport.cancel(deepFreeze({
-            operationId,
-            repositoryId: lease.repository.id,
-            remoteOperationId,
-            idempotencyKey: `git-cancel:${lease.digest}:${operationId}`,
-        }), credential, signal);
-        signal.throwIfAborted();
-        validateProvider(receipt.provider);
-        if (receipt.repositoryId !== lease.repository.id
-            || receipt.remoteOperationId !== remoteOperationId) {
-            throw new Error('Git cancel receipt binding drift');
-        }
-        required(receipt.receiptRef, 'cancel receiptRef');
-        requiredDigest(receipt.receiptDigest, 'cancel receiptDigest');
-        return deepFreeze({
-            provider: receipt.provider,
-            repositoryId: lease.repository.id,
-            remoteOperationId,
-            acknowledged: receipt.acknowledged === true,
-            externalReceiptRef: receipt.receiptRef,
-            externalReceiptDigest: receipt.receiptDigest,
-        });
-    }
-    async #credential(lease, operation, signal) {
-        const credential = await this.options.credentials.resolve({
-            generation: this.#generation,
-            leaseDigest: lease.digest,
-            repositoryId: lease.repository.id,
-            bindingRef: lease.repository.bindingRef,
-            bindingDigest: lease.repository.bindingDigest,
-            operation,
-        }, signal);
-        required(credential?.credentialId, 'credentialId');
-        required(credential?.secret, 'credential secret');
-        positive(credential?.expiresAt, 'credential expiresAt');
-        if (credential.expiresAt <= this.#now())
-            throw new Error('Git Workspace credential is expired');
-        signal.throwIfAborted();
-        this.#assertActive(lease);
-        return credential;
-    }
-    #assertActive(lease) {
-        if (lease.expiresAt <= this.#now())
-            throw new Error('Git Workspace Lease is expired');
-    }
-}
-function validatePushReceipt(receipt, input) {
-    validateProvider(receipt.provider);
-    if (receipt.repositoryId !== input.repositoryId || receipt.ref !== input.ref
-        || receipt.headSha !== input.headSha) {
-        throw new Error('Git push receipt binding drift');
-    }
-    required(receipt.externalReceiptRef, 'push externalReceiptRef');
-    requiredDigest(receipt.externalReceiptDigest, 'push externalReceiptDigest');
-    return deepFreeze(receipt);
-}
-function validatePullRequestReceipt(receipt, input) {
-    validateProvider(receipt.provider);
-    if (receipt.repositoryId !== input.repositoryId || receipt.headRef !== input.headRef
-        || receipt.baseRef !== input.baseRef || receipt.prHeadSha !== input.headSha) {
-        throw new Error('Pull Request receipt head SHA or ref binding drift');
-    }
-    required(receipt.prRef, 'Pull Request ref');
-    requiredDigest(receipt.externalReceiptDigest, 'Pull Request externalReceiptDigest');
-    return deepFreeze(receipt);
-}
-function validateProvider(value) {
-    required(value?.id, 'provider id');
-    requiredDigest(value?.digest, 'provider digest');
-}
-function assertLease(value) {
-    const canonical = createGitWorkspaceLease(value);
-    if (value.digest !== canonical.digest
-        || canonicalWorkroomJson(value) !== canonicalWorkroomJson(canonical)) {
-        throw new Error('Git Workspace Lease digest drift');
-    }
-    return canonical;
-}
-function assertFence(lease, fence) {
-    if (fence !== lease.fence)
-        throw new Error('Git Workspace fence is stale');
-}
-function assertChangedPaths(paths, scopes) {
-    if (!Array.isArray(paths) || paths.length === 0)
-        throw new Error('Git push requires changed paths');
-    for (const path of paths) {
-        const canonical = canonicalPath(path, 'changed path');
-        if (!scopes.some(scope => canonical === scope
-            || (scope.endsWith('/') && canonical.startsWith(scope)))) {
-            throw new Error(`Git changed path is outside lease path scope: ${canonical}`);
-        }
-    }
-}
-function canonicalPath(value, label) {
-    const path = required(value, label);
-    if (path.startsWith('/') || path.includes('\\') || path.split('/').some(part => part === '..' || part === '.')) {
-        throw new Error(`${label} is not a canonical repository path`);
-    }
-    return path;
-}
-function branchRef(value, label) {
-    const ref = required(value, label);
-    if (!/^refs\/heads\/[A-Za-z0-9._/-]+$/u.test(ref) || ref.includes('..')
-        || ref.includes('//') || ref.endsWith('/')) {
-        throw new Error(`${label} is not a canonical branch ref`);
-    }
-    return ref;
-}
-function gitSha(value, label) {
-    if (typeof value !== 'string' || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(value))
-        throw new Error(`${label} is invalid`);
-    return value;
-}
-function requiredDigest(value, label) {
-    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
-        throw new Error(`${label} is invalid`);
-    return value;
-}
-function required(value, label) {
-    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
-        throw new Error(`${label} is invalid`);
-    return value;
-}
-function positive(value, label) {
-    if (!Number.isSafeInteger(value) || Number(value) < 1)
-        throw new Error(`${label} is invalid`);
-    return Number(value);
-}
-function enumValue(value, allowed, label) {
-    if (!allowed.includes(value))
-        throw new Error(`${label} is invalid`);
-    return value;
-}
-//# sourceMappingURL=git-workspace-gateway.js.map

package/lib/workroom/git-workspace-gateway.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-workspace-gateway.js","sourceRoot":"","sources":["../../src/workroom/git-workspace-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,sBAAsB,CAAC;AAkH9B,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,MAAM,cAAc,GAAG,mBAAmB,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,YAAY,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IACzK,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,YAAY,KAAK,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,aAAa,KAAK,cAAc,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3G,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,CAAU;QACnB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACjD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACrC,UAAU,EAAE,UAAU,CAAC;YACrB,EAAE,EAAE,YAAY;YAChB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,uBAAuB,CAAC;YAC1E,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,0BAA0B,CAAC;SAC1F,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,SAAS;QACT,aAAa;QACb,UAAU;QACV,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,gBAAgB,CAAC;QAC9E,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC;AASD,wFAAwF;AACxF,MAAM,OAAO,mBAAmB;IAIT;IAHZ,WAAW,CAAS;IACpB,IAAI,CAAe;IAE5B,YAAqB,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QACtD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAQT,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC1G,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC9G,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtE,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,UAAU,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;YACvD,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,GAAG,EAAE,KAAK,CAAC,aAAa;YACxB,OAAO;YACP,KAAK,EAAE,KAAc;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,cAAc,EAAE,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/E,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAOpB,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACvG,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,UAAU,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;YACvD,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,OAAO,EAAE,KAAK,CAAC,aAAa;YAC5B,OAAO,EAAE,KAAK,CAAC,SAAS;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO;YACP,cAAc,EAAE,UAAU,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAKX,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;YAC7D,WAAW;YACX,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,iBAAiB;YACjB,cAAc,EAAE,cAAc,KAAK,CAAC,MAAM,IAAI,WAAW,EAAE;SAC5D,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE;eAC3C,OAAO,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAClD,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC9D,OAAO,UAAU,CAAC;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,iBAAiB;YACjB,YAAY,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI;YAC3C,kBAAkB,EAAE,OAAO,CAAC,UAAU;YACtC,qBAAqB,EAAE,OAAO,CAAC,aAAa;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAwB,EACxB,SAA2D,EAC3D,MAAmB;QAEnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;YACvC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC7C,SAAS;SACV,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAChG,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,aAAa,CAAC,KAAwB;QACpC,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxF,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,OAAuB,EAAE,KAA4B;IAChF,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACvE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;IAChE,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,0BAA0B,CACjC,OAA8B,EAC9B,KAAmC;IAEnC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC/E,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC5C,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;IACpF,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA+C;IACvE,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACnC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB;IAC3C,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;WAChC,qBAAqB,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB,EAAE,KAAa;IAC1D,IAAI,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB,EAAE,MAAyB;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK;eACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;WAClE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAmB,KAAc,EAAE,OAAqB,EAAE,KAAa;IACvF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC1E,OAAO,KAAU,CAAC;AACpB,CAAC"}

package/lib/workroom/github-workspace-transport.d.ts

@@ -1,30 +0,0 @@
-import type { GitWorkspaceCredential, GitWorkspaceTransportPort, GitPushTransportInput, GitPullRequestTransportInput, GitPushReceipt, GitPullRequestReceipt } from './git-workspace-gateway.js';
-export interface GitHubWorkspaceTransportOptions {
-    /** Trusted host configuration, never a URL supplied by a task or tool. */
-    readonly apiBaseUrl?: string;
-    readonly fetch?: typeof globalThis.fetch;
-}
-/** A failed/ambiguous write must be reconciled by reads; this transport never retries writes. */
-export declare class GitHubWorkspaceHttpError extends Error {
-    readonly status: number;
-    constructor(status: number);
-}
-/**
- * Publishes refs to commits already present on GitHub; does not upload local Git objects.
- * Instantiate per generation and place behind GitWorkspaceGateway, never expose it as a tool.
- * REST does not provide compare-and-swap PR creation: verify returned refs/SHA and fail closed.
- */
-export declare class GitHubWorkspaceTransport implements GitWorkspaceTransportPort {
-    #private;
-    readonly provider: Readonly<{
-        id: string;
-        digest: string;
-    }>;
-    constructor(options?: GitHubWorkspaceTransportOptions);
-    push(input: GitPushTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPushReceipt>;
-    queryPush(input: GitPushTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPushReceipt | undefined>;
-    openPullRequest(input: GitPullRequestTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPullRequestReceipt>;
-    queryPullRequest(input: GitPullRequestTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPullRequestReceipt | undefined>;
-    cancel(_input: Parameters<GitWorkspaceTransportPort['cancel']>[0], _credential: GitWorkspaceCredential, signal: AbortSignal): Promise<Awaited<ReturnType<GitWorkspaceTransportPort['cancel']>>>;
-}
-//# sourceMappingURL=github-workspace-transport.d.ts.map

package/lib/workroom/github-workspace-transport.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"github-workspace-transport.d.ts","sourceRoot":"","sources":["../../src/workroom/github-workspace-transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EACxE,4BAA4B,EAAE,cAAc,EAAE,qBAAqB,EACpE,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,iGAAiG;AACjG,qBAAa,wBAAyB,SAAQ,KAAK;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAID;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,yBAAyB;;IACxE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAIhD,OAAO,GAAE,+BAAoC;IAUnD,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAepH,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAUrI,eAAe,CAAC,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgB7I,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;IA2B1J,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CAsFtM"}

package/lib/workroom/github-workspace-transport.js

@@ -1,224 +0,0 @@
-import { digestCanonicalWorkroomValue as digest, deepFreezeWorkroomValue as freeze } from './canonical-value.js';
-/** A failed/ambiguous write must be reconciled by reads; this transport never retries writes. */
-export class GitHubWorkspaceHttpError extends Error {
-    status;
-    constructor(status) {
-        super(`GitHub Workspace HTTP ${status}; reconcile before retrying a write`);
-        this.status = status;
-        this.name = 'GitHubWorkspaceHttpError';
-    }
-}
-/**
- * Publishes refs to commits already present on GitHub; does not upload local Git objects.
- * Instantiate per generation and place behind GitWorkspaceGateway, never expose it as a tool.
- * REST does not provide compare-and-swap PR creation: verify returned refs/SHA and fail closed.
- */
-export class GitHubWorkspaceTransport {
-    provider;
-    #base;
-    #fetch;
-    constructor(options = {}) {
-        const url = new URL(options.apiBaseUrl ?? 'https://api.github.com');
-        if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash) {
-            throw new Error('GitHub Workspace API base must be a trusted HTTPS URL');
-        }
-        this.#base = url.href.replace(/\/$/u, '');
-        this.#fetch = options.fetch ?? globalThis.fetch;
-        this.provider = freeze({ id: 'github', digest: digest({ transport: 'github-rest-workspace-v1', apiBaseUrl: this.#base }) });
-    }
-    async push(input, credential, signal) {
-        const path = repositoryPath(input.repositoryId);
-        refName(input.ref);
-        sha(input.headSha);
-        sha(input.baseSha);
-        if (input.force !== false)
-            throw new Error('Force push is forbidden');
-        await this.#verifyDiff(input, credential, signal);
-        const current = await this.#readRef(input.repositoryId, input.ref, credential, signal);
-        if (current && object(current.object).sha === input.headSha)
-            return this.#pushReceipt(input, current);
-        const response = current
-            ? await this.#request(`${path}/git/refs/${encodeRef(input.ref)}`, credential, signal, 'PATCH', { sha: input.headSha, force: false })
-            : await this.#request(`${path}/git/refs`, credential, signal, 'POST', { ref: input.ref, sha: input.headSha });
-        return this.#pushReceipt(input, object(response));
-    }
-    async queryPush(input, credential, signal) {
-        sha(input.headSha);
-        const current = await this.#readRef(input.repositoryId, input.ref, credential, signal);
-        // Absence or a moved ref does not prove that an earlier write did not commit.
-        if (!current || object(current.object).sha !== input.headSha)
-            return undefined;
-        // Recovery may run after the durable attempt but before execution ever verified the diff.
-        await this.#verifyDiff(input, credential, signal);
-        return this.#pushReceipt(input, current);
-    }
-    async openPullRequest(input, credential, signal) {
-        const existing = await this.queryPullRequest(input, credential, signal);
-        if (existing)
-            return existing;
-        await this.#verifyDiff(input, credential, signal);
-        const head = await this.#readRef(input.repositoryId, input.headRef, credential, signal);
-        if (!head || object(head.object).sha !== input.headSha)
-            throw new Error('GitHub PR head SHA drift before creation');
-        const response = await this.#request(`${repositoryPath(input.repositoryId)}/pulls`, credential, signal, 'POST', {
-            title: `Workroom: ${refName(input.headRef)}`,
-            body: marker(input),
-            head: refName(input.headRef),
-            base: refName(input.baseRef),
-            draft: true,
-        });
-        return this.#pullRequestReceipt(input, object(response));
-    }
-    async queryPullRequest(input, credential, signal) {
-        const path = repositoryPath(input.repositoryId);
-        sha(input.headSha);
-        const owner = input.repositoryId.slice('github:'.length).split('/')[0];
-        const search = new URLSearchParams({ state: 'all', head: `${owner}:${refName(input.headRef)}`, base: refName(input.baseRef), per_page: '100' });
-        // Explicit page traversal rather than following provider-supplied URLs with credentials.
-        for (let page = 1; page <= 100; page += 1) {
-            search.set('page', String(page));
-            const rows = await this.#request(`${path}/pulls?${search}`, credential, signal);
-            if (!Array.isArray(rows))
-                throw new Error('GitHub PR list response is invalid');
-            for (const raw of rows) {
-                const row = object(raw);
-                if (typeof row.body === 'string' && row.body.includes(marker(input))) {
-                    const receipt = this.#pullRequestReceipt(input, row);
-                    await this.#verifyDiff(input, credential, signal);
-                    return receipt;
-                }
-                // Another operation owns this branch pair. Do not silently adopt or duplicate it.
-                if (object(row.head).ref === refName(input.headRef) && object(row.base).ref === refName(input.baseRef)) {
-                    throw new Error('GitHub PR already exists with a different operation binding');
-                }
-            }
-            if (rows.length < 100)
-                return undefined;
-        }
-        throw new Error('GitHub PR lookup pagination limit reached; outcome remains unknown');
-    }
-    async cancel(_input, _credential, signal) {
-        signal.throwIfAborted();
-        // Closing a PR or deleting a branch is compensation, not cancellation of an HTTP write.
-        throw new Error('GitHub synchronous writes cannot be cancelled; reconcile the original operation');
-    }
-    async #verifyDiff(input, credential, signal) {
-        const path = repositoryPath(input.repositoryId);
-        sha(input.baseSha);
-        sha(input.headSha);
-        // Read the actual immutable Git diff; the worker-supplied changedPaths is not evidence.
-        const comparison = object(await this.#request(`${path}/compare/${input.baseSha}...${input.headSha}`, credential, signal));
-        if (comparison.status !== 'ahead' || object(comparison.base_commit).sha !== input.baseSha
-            || object(comparison.merge_base_commit).sha !== input.baseSha) {
-            throw new Error('GitHub candidate must descend from the exact workspace base SHA');
-        }
-        if (!Array.isArray(comparison.files) || comparison.files.length === 0 || comparison.files.length >= 300) {
-            // GitHub caps compare files at 300, even with pagination. Never authorize a truncated diff.
-            throw new Error('GitHub candidate diff is empty or may be truncated');
-        }
-        for (const raw of comparison.files) {
-            const file = object(raw);
-            assertPathScope(file.filename, input.pathScopes);
-            if (file.status === 'renamed')
-                assertPathScope(file.previous_filename, input.pathScopes);
-        }
-    }
-    #pushReceipt(input, response) {
-        if (response.ref !== input.ref || object(response.object).sha !== input.headSha || object(response.object).type !== 'commit') {
-            throw new Error('GitHub push receipt SHA or ref binding drift');
-        }
-        return freeze({ provider: this.provider, repositoryId: input.repositoryId, ref: input.ref, headSha: input.headSha,
-            externalReceiptRef: `${this.#base}${repositoryPath(input.repositoryId)}/git/ref/${encodeRef(input.ref)}`,
-            externalReceiptDigest: digest({ operationId: input.operationId, idempotencyKey: input.idempotencyKey, repositoryId: input.repositoryId, response }),
-        });
-    }
-    #pullRequestReceipt(input, response) {
-        const head = object(response.head);
-        const base = object(response.base);
-        const repo = input.repositoryId.slice('github:'.length);
-        if (head.sha !== input.headSha || head.ref !== refName(input.headRef) || base.ref !== refName(input.baseRef)
-            || String(object(head.repo).full_name).toLowerCase() !== repo || String(object(base.repo).full_name).toLowerCase() !== repo
-            || typeof response.body !== 'string' || !response.body.includes(marker(input))
-            || !Number.isSafeInteger(response.number) || Number(response.number) < 1) {
-            throw new Error('GitHub PR receipt repository, SHA, ref, or operation binding drift');
-        }
-        return freeze({ provider: this.provider, repositoryId: input.repositoryId,
-            prRef: `${this.#base}${repositoryPath(input.repositoryId)}/pulls/${response.number}`,
-            headRef: input.headRef, baseRef: input.baseRef, prHeadSha: input.headSha,
-            externalReceiptDigest: digest({ operationId: input.operationId, idempotencyKey: input.idempotencyKey, response }),
-        });
-    }
-    async #readRef(repositoryId, ref, credential, signal) {
-        const response = await this.#request(`${repositoryPath(repositoryId)}/git/ref/${encodeRef(ref)}`, credential, signal, 'GET', undefined, true);
-        if (response === undefined)
-            return undefined;
-        const result = object(response);
-        if (result.ref !== ref || object(result.object).type !== 'commit')
-            throw new Error('GitHub ref response binding drift');
-        return result;
-    }
-    async #request(path, credential, signal, method = 'GET', body, allowMissing = false) {
-        signal.throwIfAborted();
-        let response;
-        try {
-            response = await this.#fetch(`${this.#base}${path}`, {
-                method, signal, redirect: 'error', headers: {
-                    accept: 'application/vnd.github+json', authorization: `Bearer ${credential.secret}`,
-                    'X-GitHub-Api-Version': '2022-11-28', 'content-type': 'application/json',
-                }, ...(body ? { body: JSON.stringify(body) } : {}),
-            });
-        }
-        catch {
-            signal.throwIfAborted();
-            // Do not leak fetch error bodies, URLs or credential-bearing host diagnostics.
-            throw new Error('GitHub Workspace request interrupted; reconcile before retrying a write');
-        }
-        signal.throwIfAborted();
-        if (allowMissing && response.status === 404)
-            return undefined;
-        if (!response.ok)
-            throw new GitHubWorkspaceHttpError(response.status);
-        try {
-            const value = await response.json();
-            signal.throwIfAborted();
-            return value;
-        }
-        catch {
-            signal.throwIfAborted();
-            throw new Error('GitHub Workspace response is invalid JSON; reconcile before retrying a write');
-        }
-    }
-}
-function object(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        throw new Error('GitHub Workspace response object is invalid');
-    return value;
-}
-function repositoryPath(repositoryId) {
-    if (!/^github:[a-z0-9_.-]+\/[a-z0-9_.-]+$/u.test(repositoryId))
-        throw new Error('GitHub repository ID is invalid');
-    if (repositoryId.slice('github:'.length).split('/').some(part => part === '.' || part === '..'))
-        throw new Error('GitHub repository ID is invalid');
-    return `/repos/${repositoryId.slice('github:'.length).split('/').map(encodeURIComponent).join('/')}`;
-}
-function refName(ref) {
-    if (!/^refs\/heads\/[A-Za-z0-9._/-]+$/u.test(ref) || ref.includes('..') || ref.includes('//') || ref.endsWith('/'))
-        throw new Error('GitHub branch ref is invalid');
-    return ref.slice('refs/heads/'.length);
-}
-function encodeRef(ref) { return `heads/${refName(ref).split('/').map(encodeURIComponent).join('/')}`; }
-function sha(value) {
-    if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(value))
-        throw new Error('GitHub exact commit SHA is invalid');
-}
-function marker(input) {
-    return `<!-- zhin-workroom:${digest(input)} -->`;
-}
-function assertPathScope(value, scopes) {
-    if (typeof value !== 'string' || !value || value.startsWith('/') || value.includes('\\')
-        || value.split('/').some(part => !part || part === '.' || part === '..')
-        || !scopes.some(scope => value === scope || (scope.endsWith('/') && value.startsWith(scope)))) {
-        throw new Error('GitHub actual changed path is outside the workspace lease');
-    }
-}
-//# sourceMappingURL=github-workspace-transport.js.map

package/lib/workroom/github-workspace-transport.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"github-workspace-transport.js","sourceRoot":"","sources":["../../src/workroom/github-workspace-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,IAAI,MAAM,EAAE,uBAAuB,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAYjH,iGAAiG;AACjG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B;IAArB,YAAqB,MAAc;QACjC,KAAK,CAAC,yBAAyB,MAAM,qCAAqC,CAAC,CAAC;QADzD,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAID;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAC1B,QAAQ,CAA2C;IACnD,KAAK,CAAS;IACd,MAAM,CAA0B;IAEzC,YAAY,UAA2C,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC,CAAC;QACpE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA4B,EAAE,UAAkC,EAAE,MAAmB;QAC9F,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,OAAO;YACtB,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAa,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACpI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA4B,EAAE,UAAkC,EAAE,MAAmB;QACnG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvF,8EAA8E;QAC9E,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/E,0FAA0F;QAC1F,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAmC,EAAE,UAAkC,EAAE,MAAmB;QAChH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;YAC9G,KAAK,EAAE,aAAa,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YAC5C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;YACnB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAmC,EAAE,UAAkC,EAAE,MAAmB;QACjH,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAChJ,yFAAyF;QACzF,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,UAAU,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrE,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBACrD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;oBAClD,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,kFAAkF;gBAClF,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;gBAAE,OAAO,SAAS,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0D,EAAE,WAAmC,EAAE,MAAmB;QAC/H,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,wFAAwF;QACxF,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA0G,EAAE,UAAkC,EAAE,MAAmB;QACnL,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,wFAAwF;QACxF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,YAAY,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1H,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;eACpF,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACxG,4FAA4F;YAC5F,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,YAAY,CAAC,KAA4B,EAAE,QAAoB;QAC7D,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7H,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC/G,kBAAkB,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACxG,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;SACpJ,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,KAAmC,EAAE,QAAoB;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;eACvG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI;eACxH,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;eAC3E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;YACvE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE;YACpF,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO;YACxE,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;SAClH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,GAAW,EAAE,UAAkC,EAAE,MAAmB;QACvG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,YAAY,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9I,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,UAAkC,EAAE,MAAmB,EAAE,MAAM,GAAG,KAAK,EAAE,IAAiB,EAAE,YAAY,GAAG,KAAK;QAC3I,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,EAAE;gBACnD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;oBAC1C,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,UAAU,UAAU,CAAC,MAAM,EAAE;oBACnF,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB;iBACzE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,+EAA+E;YAC/E,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,YAAY,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAAC,CAAC;IACvI,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChI,OAAO,KAAmB,CAAC;AAC7B,CAAC;AACD,SAAS,cAAc,CAAC,YAAoB;IAC1C,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnH,IAAI,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpJ,OAAO,UAAU,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvG,CAAC;AACD,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpK,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AACD,SAAS,SAAS,CAAC,GAAW,IAAY,OAAO,SAAS,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACxH,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAC7G,CAAC;AACD,SAAS,MAAM,CAAC,KAAmC;IACjD,OAAO,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;AACnD,CAAC;AACD,SAAS,eAAe,CAAC,KAAc,EAAE,MAAyB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;WACnF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;WACrE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/lib/workroom/governed-dispatch-reasons.d.ts

@@ -1,10 +0,0 @@
-import type { GovernedDisclosureBlockReason } from '../data-governance/disclosure-authority.js';
-export type WorkroomGovernedDispatchRecoveryAction = 'rematerialize' | 'operator_repair' | 'authority_repair' | 'new_generation';
-export interface WorkroomGovernedDispatchReason {
-    readonly version: 1;
-    readonly code: GovernedDisclosureBlockReason;
-    readonly retryable: boolean;
-    readonly action: WorkroomGovernedDispatchRecoveryAction;
-}
-export declare function createWorkroomGovernedDispatchReason(value: string): WorkroomGovernedDispatchReason;
-//# sourceMappingURL=governed-dispatch-reasons.d.ts.map

package/lib/workroom/governed-dispatch-reasons.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"governed-dispatch-reasons.d.ts","sourceRoot":"","sources":["../../src/workroom/governed-dispatch-reasons.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAEhG,MAAM,MAAM,sCAAsC,GAC9C,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAC;CACzD;AAkBD,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,MAAM,GACZ,8BAA8B,CAMhC"}

package/lib/workroom/governed-dispatch-reasons.js

@@ -1,20 +0,0 @@
-const reasons = Object.freeze({
-    project_authority_unavailable: { retryable: true, action: 'authority_repair' },
-    payload_vault_key_unavailable: { retryable: true, action: 'operator_repair' },
-    source_classification_quarantined: { retryable: false, action: 'authority_repair' },
-    source_authority_conflict: { retryable: false, action: 'rematerialize' },
-    disclosure_denied: { retryable: false, action: 'authority_repair' },
-    disclosure_approval_required: { retryable: false, action: 'rematerialize' },
-    disclosure_manifest_stale: { retryable: false, action: 'rematerialize' },
-    disclosure_manifest_expired: { retryable: false, action: 'rematerialize' },
-    disclosure_recipient_revoked: { retryable: false, action: 'rematerialize' },
-    generation_retired: { retryable: false, action: 'new_generation' },
-});
-export function createWorkroomGovernedDispatchReason(value) {
-    if (!Object.hasOwn(reasons, value)) {
-        throw new Error('Workroom governed dispatch reason is unknown');
-    }
-    const code = value;
-    return Object.freeze({ version: 1, code, ...reasons[code] });
-}
-//# sourceMappingURL=governed-dispatch-reasons.js.map

package/lib/workroom/governed-dispatch-reasons.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"governed-dispatch-reasons.js","sourceRoot":"","sources":["../../src/workroom/governed-dispatch-reasons.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAGxB;IACH,6BAA6B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9E,6BAA6B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE;IAC7E,iCAAiC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnF,yBAAyB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IACxE,iBAAiB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnE,4BAA4B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IAC3E,yBAAyB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IACxE,2BAA2B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IAC1E,4BAA4B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IAC3E,kBAAkB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE;CACnE,CAAC,CAAC;AAEH,MAAM,UAAU,oCAAoC,CAClD,KAAa;IAEb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,KAAsC,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC"}