@zhin.js/workroom 0.0.0 → 0.0.1

package/lib/workroom/git-workspace-gateway.js

@@ -0,0 +1,257 @@
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
+export function createGitWorkspaceLease(input) {
+    const expectedBranch = `refs/heads/zhin/${required(input.runId, 'runId')}/${required(input.assignmentId, 'assignmentId')}/attempt-${positive(input.attempt, 'attempt')}`;
+    const repositoryId = required(input.repository?.id, 'repository id');
+    if (!/^github:[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/u.test(repositoryId)) {
+        throw new Error('Git Workspace canonical repository ID is invalid');
+    }
+    if (repositoryId.slice('github:'.length).split('/').some(part => part === '.' || part === '..')) {
+        throw new Error('Git Workspace canonical repository ID is invalid');
+    }
+    if (repositoryId !== repositoryId.toLowerCase()) {
+        throw new Error('Git Workspace canonical repository ID must be lowercase');
+    }
+    const targetRef = branchRef(input.targetRef, 'targetRef');
+    const attemptBranch = branchRef(input.attemptBranch, 'attemptBranch');
+    if (attemptBranch !== expectedBranch || attemptBranch === targetRef) {
+        throw new Error('Git Workspace attempt branch is not the exact per-attempt branch');
+    }
+    if (!Array.isArray(input.pathScopes) || input.pathScopes.length === 0) {
+        throw new Error('Git Workspace requires explicit path scope');
+    }
+    const pathScopes = Object.freeze(input.pathScopes.map(scope => canonicalPath(scope, 'path scope')).sort());
+    if (new Set(pathScopes).size !== pathScopes.length)
+        throw new Error('Git Workspace path scopes contain duplicates');
+    const body = deepFreeze({
+        version: 1,
+        leaseRef: required(input.leaseRef, 'leaseRef'),
+        projectId: required(input.projectId, 'projectId'),
+        runId: input.runId,
+        taskKey: required(input.taskKey, 'taskKey'),
+        taskRevision: positive(input.taskRevision, 'taskRevision'),
+        assignmentId: input.assignmentId,
+        attempt: input.attempt,
+        fence: positive(input.fence, 'fence'),
+        repository: deepFreeze({
+            id: repositoryId,
+            bindingRef: required(input.repository.bindingRef, 'repository bindingRef'),
+            bindingDigest: requiredDigest(input.repository.bindingDigest, 'repository bindingDigest'),
+        }),
+        baseSha: gitSha(input.baseSha, 'baseSha'),
+        ...(input.checkpointSha === undefined
+            ? {}
+            : { checkpointSha: gitSha(input.checkpointSha, 'checkpointSha') }),
+        targetRef,
+        attemptBranch,
+        pathScopes,
+        mode: enumValue(input.mode, ['branch_only', 'pull_request'], 'workspace mode'),
+        expiresAt: positive(input.expiresAt, 'expiresAt'),
+    });
+    return deepFreeze({ ...body, digest: digest(body) });
+}
+/** The only component that sees credentials; callers supply only an immutable lease. */
+export class GitWorkspaceGateway {
+    options;
+    #generation;
+    #now;
+    constructor(options) {
+        this.options = options;
+        this.#generation = positive(options.generation, 'generation');
+        this.#now = options.now ?? Date.now;
+    }
+    async push(input, signal) {
+        signal.throwIfAborted();
+        const lease = assertLease(input.lease);
+        this.#assertActive(lease);
+        assertFence(lease, input.fence);
+        if (input.ref === lease.targetRef)
+            throw new Error('Git Workspace Gateway forbids canonical target push');
+        if (input.ref !== lease.attemptBranch)
+            throw new Error('Git Workspace Gateway push ref is outside the lease');
+        if (input.force !== false)
+            throw new Error('Force push is forbidden');
+        assertChangedPaths(input.changedPaths, lease.pathScopes);
+        const headSha = gitSha(input.headSha, 'push headSha');
+        const credential = await this.#credential(lease, 'git_push', signal);
+        const request = deepFreeze({
+            operationId: required(input.operationId, 'operationId'),
+            repositoryId: lease.repository.id,
+            ref: lease.attemptBranch,
+            headSha,
+            force: false,
+            baseSha: lease.baseSha,
+            pathScopes: lease.pathScopes,
+            idempotencyKey: `git-push:${lease.digest}:${input.operationId}`,
+        });
+        const receipt = await this.options.transport.push(request, credential, signal);
+        signal.throwIfAborted();
+        return validatePushReceipt(receipt, request);
+    }
+    async openPullRequest(input, signal) {
+        signal.throwIfAborted();
+        const lease = assertLease(input.lease);
+        this.#assertActive(lease);
+        assertFence(lease, input.fence);
+        if (lease.mode !== 'pull_request')
+            throw new Error('Git Workspace lease does not allow Pull Requests');
+        if (input.headRef !== lease.attemptBranch || input.baseRef !== lease.targetRef) {
+            throw new Error('Pull Request refs are outside the exact Git Workspace lease');
+        }
+        const headSha = gitSha(input.headSha, 'Pull Request headSha');
+        const credential = await this.#credential(lease, 'git_open_pr', signal);
+        const request = deepFreeze({
+            operationId: required(input.operationId, 'operationId'),
+            repositoryId: lease.repository.id,
+            headRef: lease.attemptBranch,
+            baseRef: lease.targetRef,
+            baseSha: lease.baseSha,
+            pathScopes: lease.pathScopes,
+            headSha,
+            idempotencyKey: `git-pr:${lease.digest}:${input.operationId}`,
+        });
+        const receipt = await this.options.transport.openPullRequest(request, credential, signal);
+        signal.throwIfAborted();
+        return validatePullRequestReceipt(receipt, request);
+    }
+    async cancel(input, signal) {
+        signal.throwIfAborted();
+        const lease = assertLease(input.lease);
+        this.#assertActive(lease);
+        assertFence(lease, input.fence);
+        const operationId = required(input.operationId, 'operationId');
+        const remoteOperationId = required(input.remoteOperationId, 'remoteOperationId');
+        const credential = await this.#credential(lease, 'git_cancel_remote', signal);
+        const receipt = await this.options.transport.cancel(deepFreeze({
+            operationId,
+            repositoryId: lease.repository.id,
+            remoteOperationId,
+            idempotencyKey: `git-cancel:${lease.digest}:${operationId}`,
+        }), credential, signal);
+        signal.throwIfAborted();
+        validateProvider(receipt.provider);
+        if (receipt.repositoryId !== lease.repository.id
+            || receipt.remoteOperationId !== remoteOperationId) {
+            throw new Error('Git cancel receipt binding drift');
+        }
+        required(receipt.receiptRef, 'cancel receiptRef');
+        requiredDigest(receipt.receiptDigest, 'cancel receiptDigest');
+        return deepFreeze({
+            provider: receipt.provider,
+            repositoryId: lease.repository.id,
+            remoteOperationId,
+            acknowledged: receipt.acknowledged === true,
+            externalReceiptRef: receipt.receiptRef,
+            externalReceiptDigest: receipt.receiptDigest,
+        });
+    }
+    async #credential(lease, operation, signal) {
+        const credential = await this.options.credentials.resolve({
+            generation: this.#generation,
+            leaseDigest: lease.digest,
+            repositoryId: lease.repository.id,
+            bindingRef: lease.repository.bindingRef,
+            bindingDigest: lease.repository.bindingDigest,
+            operation,
+        }, signal);
+        required(credential?.credentialId, 'credentialId');
+        required(credential?.secret, 'credential secret');
+        positive(credential?.expiresAt, 'credential expiresAt');
+        if (credential.expiresAt <= this.#now())
+            throw new Error('Git Workspace credential is expired');
+        signal.throwIfAborted();
+        this.#assertActive(lease);
+        return credential;
+    }
+    #assertActive(lease) {
+        if (lease.expiresAt <= this.#now())
+            throw new Error('Git Workspace Lease is expired');
+    }
+}
+function validatePushReceipt(receipt, input) {
+    validateProvider(receipt.provider);
+    if (receipt.repositoryId !== input.repositoryId || receipt.ref !== input.ref
+        || receipt.headSha !== input.headSha) {
+        throw new Error('Git push receipt binding drift');
+    }
+    required(receipt.externalReceiptRef, 'push externalReceiptRef');
+    requiredDigest(receipt.externalReceiptDigest, 'push externalReceiptDigest');
+    return deepFreeze(receipt);
+}
+function validatePullRequestReceipt(receipt, input) {
+    validateProvider(receipt.provider);
+    if (receipt.repositoryId !== input.repositoryId || receipt.headRef !== input.headRef
+        || receipt.baseRef !== input.baseRef || receipt.prHeadSha !== input.headSha) {
+        throw new Error('Pull Request receipt head SHA or ref binding drift');
+    }
+    required(receipt.prRef, 'Pull Request ref');
+    requiredDigest(receipt.externalReceiptDigest, 'Pull Request externalReceiptDigest');
+    return deepFreeze(receipt);
+}
+function validateProvider(value) {
+    required(value?.id, 'provider id');
+    requiredDigest(value?.digest, 'provider digest');
+}
+function assertLease(value) {
+    const canonical = createGitWorkspaceLease(value);
+    if (value.digest !== canonical.digest
+        || canonicalWorkroomJson(value) !== canonicalWorkroomJson(canonical)) {
+        throw new Error('Git Workspace Lease digest drift');
+    }
+    return canonical;
+}
+function assertFence(lease, fence) {
+    if (fence !== lease.fence)
+        throw new Error('Git Workspace fence is stale');
+}
+function assertChangedPaths(paths, scopes) {
+    if (!Array.isArray(paths) || paths.length === 0)
+        throw new Error('Git push requires changed paths');
+    for (const path of paths) {
+        const canonical = canonicalPath(path, 'changed path');
+        if (!scopes.some(scope => canonical === scope
+            || (scope.endsWith('/') && canonical.startsWith(scope)))) {
+            throw new Error(`Git changed path is outside lease path scope: ${canonical}`);
+        }
+    }
+}
+function canonicalPath(value, label) {
+    const path = required(value, label);
+    if (path.startsWith('/') || path.includes('\\') || path.split('/').some(part => part === '..' || part === '.')) {
+        throw new Error(`${label} is not a canonical repository path`);
+    }
+    return path;
+}
+function branchRef(value, label) {
+    const ref = required(value, label);
+    if (!/^refs\/heads\/[A-Za-z0-9._/-]+$/u.test(ref) || ref.includes('..')
+        || ref.includes('//') || ref.endsWith('/')) {
+        throw new Error(`${label} is not a canonical branch ref`);
+    }
+    return ref;
+}
+function gitSha(value, label) {
+    if (typeof value !== 'string' || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function requiredDigest(value, label) {
+    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function positive(value, label) {
+    if (!Number.isSafeInteger(value) || Number(value) < 1)
+        throw new Error(`${label} is invalid`);
+    return Number(value);
+}
+function enumValue(value, allowed, label) {
+    if (!allowed.includes(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+//# sourceMappingURL=git-workspace-gateway.js.map

package/lib/workroom/git-workspace-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-workspace-gateway.js","sourceRoot":"","sources":["../../src/workroom/git-workspace-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,sBAAsB,CAAC;AAkH9B,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,MAAM,cAAc,GAAG,mBAAmB,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,YAAY,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IACzK,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,YAAY,KAAK,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,aAAa,KAAK,cAAc,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3G,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,CAAU;QACnB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACjD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QACrC,UAAU,EAAE,UAAU,CAAC;YACrB,EAAE,EAAE,YAAY;YAChB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,uBAAuB,CAAC;YAC1E,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,0BAA0B,CAAC;SAC1F,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QACpE,SAAS;QACT,aAAa;QACb,UAAU;QACV,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,gBAAgB,CAAC;QAC9E,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC;AASD,wFAAwF;AACxF,MAAM,OAAO,mBAAmB;IAIT;IAHZ,WAAW,CAAS;IACpB,IAAI,CAAe;IAE5B,YAAqB,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QACtD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAQT,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC1G,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC9G,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtE,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,UAAU,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;YACvD,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,GAAG,EAAE,KAAK,CAAC,aAAa;YACxB,OAAO;YACP,KAAK,EAAE,KAAc;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,cAAc,EAAE,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/E,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAOpB,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACvG,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,UAAU,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;YACvD,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,OAAO,EAAE,KAAK,CAAC,aAAa;YAC5B,OAAO,EAAE,KAAK,CAAC,SAAS;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO;YACP,cAAc,EAAE,UAAU,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAKX,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;YAC7D,WAAW;YACX,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,iBAAiB;YACjB,cAAc,EAAE,cAAc,KAAK,CAAC,MAAM,IAAI,WAAW,EAAE;SAC5D,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE;eAC3C,OAAO,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAClD,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC9D,OAAO,UAAU,CAAC;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,iBAAiB;YACjB,YAAY,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI;YAC3C,kBAAkB,EAAE,OAAO,CAAC,UAAU;YACtC,qBAAqB,EAAE,OAAO,CAAC,aAAa;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAwB,EACxB,SAA2D,EAC3D,MAAmB;QAEnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACjC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;YACvC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC7C,SAAS;SACV,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAChG,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,aAAa,CAAC,KAAwB;QACpC,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxF,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,OAAuB,EAAE,KAA4B;IAChF,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACvE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;IAChE,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,0BAA0B,CACjC,OAA8B,EAC9B,KAAmC;IAEnC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC/E,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC5C,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;IACpF,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA+C;IACvE,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACnC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB;IAC3C,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;WAChC,qBAAqB,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB,EAAE,KAAa;IAC1D,IAAI,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB,EAAE,MAAyB;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK;eACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;WAClE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAmB,KAAc,EAAE,OAAqB,EAAE,KAAa;IACvF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC1E,OAAO,KAAU,CAAC;AACpB,CAAC"}

package/lib/workroom/github-workspace-transport.d.ts

@@ -0,0 +1,30 @@
+import type { GitWorkspaceCredential, GitWorkspaceTransportPort, GitPushTransportInput, GitPullRequestTransportInput, GitPushReceipt, GitPullRequestReceipt } from './git-workspace-gateway.js';
+export interface GitHubWorkspaceTransportOptions {
+    /** Trusted host configuration, never a URL supplied by a task or tool. */
+    readonly apiBaseUrl?: string;
+    readonly fetch?: typeof globalThis.fetch;
+}
+/** A failed/ambiguous write must be reconciled by reads; this transport never retries writes. */
+export declare class GitHubWorkspaceHttpError extends Error {
+    readonly status: number;
+    constructor(status: number);
+}
+/**
+ * Publishes refs to commits already present on GitHub; does not upload local Git objects.
+ * Instantiate per generation and place behind GitWorkspaceGateway, never expose it as a tool.
+ * REST does not provide compare-and-swap PR creation: verify returned refs/SHA and fail closed.
+ */
+export declare class GitHubWorkspaceTransport implements GitWorkspaceTransportPort {
+    #private;
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    constructor(options?: GitHubWorkspaceTransportOptions);
+    push(input: GitPushTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPushReceipt>;
+    queryPush(input: GitPushTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPushReceipt | undefined>;
+    openPullRequest(input: GitPullRequestTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPullRequestReceipt>;
+    queryPullRequest(input: GitPullRequestTransportInput, credential: GitWorkspaceCredential, signal: AbortSignal): Promise<GitPullRequestReceipt | undefined>;
+    cancel(_input: Parameters<GitWorkspaceTransportPort['cancel']>[0], _credential: GitWorkspaceCredential, signal: AbortSignal): Promise<Awaited<ReturnType<GitWorkspaceTransportPort['cancel']>>>;
+}
+//# sourceMappingURL=github-workspace-transport.d.ts.map

package/lib/workroom/github-workspace-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workspace-transport.d.ts","sourceRoot":"","sources":["../../src/workroom/github-workspace-transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EACxE,4BAA4B,EAAE,cAAc,EAAE,qBAAqB,EACpE,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,iGAAiG;AACjG,qBAAa,wBAAyB,SAAQ,KAAK;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAID;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,yBAAyB;;IACxE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAIhD,OAAO,GAAE,+BAAoC;IAUnD,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAepH,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAUrI,eAAe,CAAC,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgB7I,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;IA2B1J,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CAsFtM"}

package/lib/workroom/github-workspace-transport.js

@@ -0,0 +1,224 @@
+import { digestCanonicalWorkroomValue as digest, deepFreezeWorkroomValue as freeze } from './canonical-value.js';
+/** A failed/ambiguous write must be reconciled by reads; this transport never retries writes. */
+export class GitHubWorkspaceHttpError extends Error {
+    status;
+    constructor(status) {
+        super(`GitHub Workspace HTTP ${status}; reconcile before retrying a write`);
+        this.status = status;
+        this.name = 'GitHubWorkspaceHttpError';
+    }
+}
+/**
+ * Publishes refs to commits already present on GitHub; does not upload local Git objects.
+ * Instantiate per generation and place behind GitWorkspaceGateway, never expose it as a tool.
+ * REST does not provide compare-and-swap PR creation: verify returned refs/SHA and fail closed.
+ */
+export class GitHubWorkspaceTransport {
+    provider;
+    #base;
+    #fetch;
+    constructor(options = {}) {
+        const url = new URL(options.apiBaseUrl ?? 'https://api.github.com');
+        if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash) {
+            throw new Error('GitHub Workspace API base must be a trusted HTTPS URL');
+        }
+        this.#base = url.href.replace(/\/$/u, '');
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.provider = freeze({ id: 'github', digest: digest({ transport: 'github-rest-workspace-v1', apiBaseUrl: this.#base }) });
+    }
+    async push(input, credential, signal) {
+        const path = repositoryPath(input.repositoryId);
+        refName(input.ref);
+        sha(input.headSha);
+        sha(input.baseSha);
+        if (input.force !== false)
+            throw new Error('Force push is forbidden');
+        await this.#verifyDiff(input, credential, signal);
+        const current = await this.#readRef(input.repositoryId, input.ref, credential, signal);
+        if (current && object(current.object).sha === input.headSha)
+            return this.#pushReceipt(input, current);
+        const response = current
+            ? await this.#request(`${path}/git/refs/${encodeRef(input.ref)}`, credential, signal, 'PATCH', { sha: input.headSha, force: false })
+            : await this.#request(`${path}/git/refs`, credential, signal, 'POST', { ref: input.ref, sha: input.headSha });
+        return this.#pushReceipt(input, object(response));
+    }
+    async queryPush(input, credential, signal) {
+        sha(input.headSha);
+        const current = await this.#readRef(input.repositoryId, input.ref, credential, signal);
+        // Absence or a moved ref does not prove that an earlier write did not commit.
+        if (!current || object(current.object).sha !== input.headSha)
+            return undefined;
+        // Recovery may run after the durable attempt but before execution ever verified the diff.
+        await this.#verifyDiff(input, credential, signal);
+        return this.#pushReceipt(input, current);
+    }
+    async openPullRequest(input, credential, signal) {
+        const existing = await this.queryPullRequest(input, credential, signal);
+        if (existing)
+            return existing;
+        await this.#verifyDiff(input, credential, signal);
+        const head = await this.#readRef(input.repositoryId, input.headRef, credential, signal);
+        if (!head || object(head.object).sha !== input.headSha)
+            throw new Error('GitHub PR head SHA drift before creation');
+        const response = await this.#request(`${repositoryPath(input.repositoryId)}/pulls`, credential, signal, 'POST', {
+            title: `Workroom: ${refName(input.headRef)}`,
+            body: marker(input),
+            head: refName(input.headRef),
+            base: refName(input.baseRef),
+            draft: true,
+        });
+        return this.#pullRequestReceipt(input, object(response));
+    }
+    async queryPullRequest(input, credential, signal) {
+        const path = repositoryPath(input.repositoryId);
+        sha(input.headSha);
+        const owner = input.repositoryId.slice('github:'.length).split('/')[0];
+        const search = new URLSearchParams({ state: 'all', head: `${owner}:${refName(input.headRef)}`, base: refName(input.baseRef), per_page: '100' });
+        // Explicit page traversal rather than following provider-supplied URLs with credentials.
+        for (let page = 1; page <= 100; page += 1) {
+            search.set('page', String(page));
+            const rows = await this.#request(`${path}/pulls?${search}`, credential, signal);
+            if (!Array.isArray(rows))
+                throw new Error('GitHub PR list response is invalid');
+            for (const raw of rows) {
+                const row = object(raw);
+                if (typeof row.body === 'string' && row.body.includes(marker(input))) {
+                    const receipt = this.#pullRequestReceipt(input, row);
+                    await this.#verifyDiff(input, credential, signal);
+                    return receipt;
+                }
+                // Another operation owns this branch pair. Do not silently adopt or duplicate it.
+                if (object(row.head).ref === refName(input.headRef) && object(row.base).ref === refName(input.baseRef)) {
+                    throw new Error('GitHub PR already exists with a different operation binding');
+                }
+            }
+            if (rows.length < 100)
+                return undefined;
+        }
+        throw new Error('GitHub PR lookup pagination limit reached; outcome remains unknown');
+    }
+    async cancel(_input, _credential, signal) {
+        signal.throwIfAborted();
+        // Closing a PR or deleting a branch is compensation, not cancellation of an HTTP write.
+        throw new Error('GitHub synchronous writes cannot be cancelled; reconcile the original operation');
+    }
+    async #verifyDiff(input, credential, signal) {
+        const path = repositoryPath(input.repositoryId);
+        sha(input.baseSha);
+        sha(input.headSha);
+        // Read the actual immutable Git diff; the worker-supplied changedPaths is not evidence.
+        const comparison = object(await this.#request(`${path}/compare/${input.baseSha}...${input.headSha}`, credential, signal));
+        if (comparison.status !== 'ahead' || object(comparison.base_commit).sha !== input.baseSha
+            || object(comparison.merge_base_commit).sha !== input.baseSha) {
+            throw new Error('GitHub candidate must descend from the exact workspace base SHA');
+        }
+        if (!Array.isArray(comparison.files) || comparison.files.length === 0 || comparison.files.length >= 300) {
+            // GitHub caps compare files at 300, even with pagination. Never authorize a truncated diff.
+            throw new Error('GitHub candidate diff is empty or may be truncated');
+        }
+        for (const raw of comparison.files) {
+            const file = object(raw);
+            assertPathScope(file.filename, input.pathScopes);
+            if (file.status === 'renamed')
+                assertPathScope(file.previous_filename, input.pathScopes);
+        }
+    }
+    #pushReceipt(input, response) {
+        if (response.ref !== input.ref || object(response.object).sha !== input.headSha || object(response.object).type !== 'commit') {
+            throw new Error('GitHub push receipt SHA or ref binding drift');
+        }
+        return freeze({ provider: this.provider, repositoryId: input.repositoryId, ref: input.ref, headSha: input.headSha,
+            externalReceiptRef: `${this.#base}${repositoryPath(input.repositoryId)}/git/ref/${encodeRef(input.ref)}`,
+            externalReceiptDigest: digest({ operationId: input.operationId, idempotencyKey: input.idempotencyKey, repositoryId: input.repositoryId, response }),
+        });
+    }
+    #pullRequestReceipt(input, response) {
+        const head = object(response.head);
+        const base = object(response.base);
+        const repo = input.repositoryId.slice('github:'.length);
+        if (head.sha !== input.headSha || head.ref !== refName(input.headRef) || base.ref !== refName(input.baseRef)
+            || String(object(head.repo).full_name).toLowerCase() !== repo || String(object(base.repo).full_name).toLowerCase() !== repo
+            || typeof response.body !== 'string' || !response.body.includes(marker(input))
+            || !Number.isSafeInteger(response.number) || Number(response.number) < 1) {
+            throw new Error('GitHub PR receipt repository, SHA, ref, or operation binding drift');
+        }
+        return freeze({ provider: this.provider, repositoryId: input.repositoryId,
+            prRef: `${this.#base}${repositoryPath(input.repositoryId)}/pulls/${response.number}`,
+            headRef: input.headRef, baseRef: input.baseRef, prHeadSha: input.headSha,
+            externalReceiptDigest: digest({ operationId: input.operationId, idempotencyKey: input.idempotencyKey, response }),
+        });
+    }
+    async #readRef(repositoryId, ref, credential, signal) {
+        const response = await this.#request(`${repositoryPath(repositoryId)}/git/ref/${encodeRef(ref)}`, credential, signal, 'GET', undefined, true);
+        if (response === undefined)
+            return undefined;
+        const result = object(response);
+        if (result.ref !== ref || object(result.object).type !== 'commit')
+            throw new Error('GitHub ref response binding drift');
+        return result;
+    }
+    async #request(path, credential, signal, method = 'GET', body, allowMissing = false) {
+        signal.throwIfAborted();
+        let response;
+        try {
+            response = await this.#fetch(`${this.#base}${path}`, {
+                method, signal, redirect: 'error', headers: {
+                    accept: 'application/vnd.github+json', authorization: `Bearer ${credential.secret}`,
+                    'X-GitHub-Api-Version': '2022-11-28', 'content-type': 'application/json',
+                }, ...(body ? { body: JSON.stringify(body) } : {}),
+            });
+        }
+        catch {
+            signal.throwIfAborted();
+            // Do not leak fetch error bodies, URLs or credential-bearing host diagnostics.
+            throw new Error('GitHub Workspace request interrupted; reconcile before retrying a write');
+        }
+        signal.throwIfAborted();
+        if (allowMissing && response.status === 404)
+            return undefined;
+        if (!response.ok)
+            throw new GitHubWorkspaceHttpError(response.status);
+        try {
+            const value = await response.json();
+            signal.throwIfAborted();
+            return value;
+        }
+        catch {
+            signal.throwIfAborted();
+            throw new Error('GitHub Workspace response is invalid JSON; reconcile before retrying a write');
+        }
+    }
+}
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('GitHub Workspace response object is invalid');
+    return value;
+}
+function repositoryPath(repositoryId) {
+    if (!/^github:[a-z0-9_.-]+\/[a-z0-9_.-]+$/u.test(repositoryId))
+        throw new Error('GitHub repository ID is invalid');
+    if (repositoryId.slice('github:'.length).split('/').some(part => part === '.' || part === '..'))
+        throw new Error('GitHub repository ID is invalid');
+    return `/repos/${repositoryId.slice('github:'.length).split('/').map(encodeURIComponent).join('/')}`;
+}
+function refName(ref) {
+    if (!/^refs\/heads\/[A-Za-z0-9._/-]+$/u.test(ref) || ref.includes('..') || ref.includes('//') || ref.endsWith('/'))
+        throw new Error('GitHub branch ref is invalid');
+    return ref.slice('refs/heads/'.length);
+}
+function encodeRef(ref) { return `heads/${refName(ref).split('/').map(encodeURIComponent).join('/')}`; }
+function sha(value) {
+    if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(value))
+        throw new Error('GitHub exact commit SHA is invalid');
+}
+function marker(input) {
+    return `<!-- zhin-workroom:${digest(input)} -->`;
+}
+function assertPathScope(value, scopes) {
+    if (typeof value !== 'string' || !value || value.startsWith('/') || value.includes('\\')
+        || value.split('/').some(part => !part || part === '.' || part === '..')
+        || !scopes.some(scope => value === scope || (scope.endsWith('/') && value.startsWith(scope)))) {
+        throw new Error('GitHub actual changed path is outside the workspace lease');
+    }
+}
+//# sourceMappingURL=github-workspace-transport.js.map

package/lib/workroom/github-workspace-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workspace-transport.js","sourceRoot":"","sources":["../../src/workroom/github-workspace-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,IAAI,MAAM,EAAE,uBAAuB,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAYjH,iGAAiG;AACjG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B;IAArB,YAAqB,MAAc;QACjC,KAAK,CAAC,yBAAyB,MAAM,qCAAqC,CAAC,CAAC;QADzD,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAID;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAC1B,QAAQ,CAA2C;IACnD,KAAK,CAAS;IACd,MAAM,CAA0B;IAEzC,YAAY,UAA2C,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC,CAAC;QACpE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA4B,EAAE,UAAkC,EAAE,MAAmB;QAC9F,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,OAAO;YACtB,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAa,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACpI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA4B,EAAE,UAAkC,EAAE,MAAmB;QACnG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvF,8EAA8E;QAC9E,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/E,0FAA0F;QAC1F,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAmC,EAAE,UAAkC,EAAE,MAAmB;QAChH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;YAC9G,KAAK,EAAE,aAAa,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YAC5C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;YACnB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAmC,EAAE,UAAkC,EAAE,MAAmB;QACjH,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAChJ,yFAAyF;QACzF,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,UAAU,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrE,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBACrD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;oBAClD,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,kFAAkF;gBAClF,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;gBAAE,OAAO,SAAS,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0D,EAAE,WAAmC,EAAE,MAAmB;QAC/H,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,wFAAwF;QACxF,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA0G,EAAE,UAAkC,EAAE,MAAmB;QACnL,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,wFAAwF;QACxF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,YAAY,KAAK,CAAC,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1H,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO;eACpF,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACxG,4FAA4F;YAC5F,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,YAAY,CAAC,KAA4B,EAAE,QAAoB;QAC7D,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7H,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC/G,kBAAkB,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACxG,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;SACpJ,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,KAAmC,EAAE,QAAoB;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;eACvG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI;eACxH,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;eAC3E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;YACvE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE;YACpF,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO;YACxE,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;SAClH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,GAAW,EAAE,UAAkC,EAAE,MAAmB;QACvG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,YAAY,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9I,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,UAAkC,EAAE,MAAmB,EAAE,MAAM,GAAG,KAAK,EAAE,IAAiB,EAAE,YAAY,GAAG,KAAK;QAC3I,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,EAAE;gBACnD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;oBAC1C,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,UAAU,UAAU,CAAC,MAAM,EAAE;oBACnF,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB;iBACzE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,+EAA+E;YAC/E,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,YAAY,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAAC,CAAC;IACvI,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChI,OAAO,KAAmB,CAAC;AAC7B,CAAC;AACD,SAAS,cAAc,CAAC,YAAoB;IAC1C,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnH,IAAI,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpJ,OAAO,UAAU,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvG,CAAC;AACD,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpK,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AACD,SAAS,SAAS,CAAC,GAAW,IAAY,OAAO,SAAS,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACxH,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAC7G,CAAC;AACD,SAAS,MAAM,CAAC,KAAmC;IACjD,OAAO,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;AACnD,CAAC;AACD,SAAS,eAAe,CAAC,KAAc,EAAE,MAAyB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;WACnF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;WACrE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/lib/workroom/governed-dispatch-reasons.d.ts

@@ -0,0 +1,10 @@
+import type { GovernedDisclosureBlockReason } from '../data-governance/disclosure-authority.js';
+export type WorkroomGovernedDispatchRecoveryAction = 'rematerialize' | 'operator_repair' | 'authority_repair' | 'new_generation';
+export interface WorkroomGovernedDispatchReason {
+    readonly version: 1;
+    readonly code: GovernedDisclosureBlockReason;
+    readonly retryable: boolean;
+    readonly action: WorkroomGovernedDispatchRecoveryAction;
+}
+export declare function createWorkroomGovernedDispatchReason(value: string): WorkroomGovernedDispatchReason;
+//# sourceMappingURL=governed-dispatch-reasons.d.ts.map

package/lib/workroom/governed-dispatch-reasons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-dispatch-reasons.d.ts","sourceRoot":"","sources":["../../src/workroom/governed-dispatch-reasons.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAEhG,MAAM,MAAM,sCAAsC,GAC9C,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAC;CACzD;AAkBD,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,MAAM,GACZ,8BAA8B,CAMhC"}

package/lib/workroom/governed-dispatch-reasons.js

@@ -0,0 +1,20 @@
+const reasons = Object.freeze({
+    project_authority_unavailable: { retryable: true, action: 'authority_repair' },
+    payload_vault_key_unavailable: { retryable: true, action: 'operator_repair' },
+    source_classification_quarantined: { retryable: false, action: 'authority_repair' },
+    source_authority_conflict: { retryable: false, action: 'rematerialize' },
+    disclosure_denied: { retryable: false, action: 'authority_repair' },
+    disclosure_approval_required: { retryable: false, action: 'rematerialize' },
+    disclosure_manifest_stale: { retryable: false, action: 'rematerialize' },
+    disclosure_manifest_expired: { retryable: false, action: 'rematerialize' },
+    disclosure_recipient_revoked: { retryable: false, action: 'rematerialize' },
+    generation_retired: { retryable: false, action: 'new_generation' },
+});
+export function createWorkroomGovernedDispatchReason(value) {
+    if (!Object.hasOwn(reasons, value)) {
+        throw new Error('Workroom governed dispatch reason is unknown');
+    }
+    const code = value;
+    return Object.freeze({ version: 1, code, ...reasons[code] });
+}
+//# sourceMappingURL=governed-dispatch-reasons.js.map

package/lib/workroom/governed-dispatch-reasons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-dispatch-reasons.js","sourceRoot":"","sources":["../../src/workroom/governed-dispatch-reasons.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAGxB;IACH,6BAA6B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9E,6BAA6B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE;IAC7E,iCAAiC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnF,yBAAyB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IACxE,iBAAiB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnE,4BAA4B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IAC3E,yBAAyB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IACxE,2BAA2B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IAC1E,4BAA4B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IAC3E,kBAAkB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE;CACnE,CAAC,CAAC;AAEH,MAAM,UAAU,oCAAoC,CAClD,KAAa;IAEb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,KAAsC,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC"}