@zhin.js/workroom 0.0.0 → 0.0.2

package/lib/workroom-runtime/database-overlay-pack-promotion-repository.js

@@ -0,0 +1,203 @@
+import { createHash } from 'node:crypto';
+import { compareCanonicalWorkroomText, canonicalWorkroomJson } from '../workroom/canonical-value.js';
+import { canonicalOverlayPackPromotionRecord, preparedOverlayPackPromotionRecord, } from './workroom-overlay-pack-promotion.js';
+export class ActivatableOverlayPackPromotionRepository {
+    #delegate;
+    async activate(delegate, promotionIds, source) {
+        if (this.#delegate)
+            throw new Error('Overlay Pack Promotion storage is already active');
+        const ids = canonicalIds(promotionIds);
+        for (const promotionId of ids) {
+            const sourceRecord = source ? await source.read(promotionId) : undefined;
+            let targetRecord = await delegate.read(promotionId);
+            if (!sourceRecord)
+                continue;
+            if (sourceRecord && targetRecord && !isPromotionPrefix(sourceRecord, targetRecord)
+                && !(sourceRecord.status === 'published' && targetRecord.status === 'prepared'
+                    && sourceRecord.commandDigest === targetRecord.commandDigest)) {
+                throw new Error('Overlay Pack Promotion File/Database handoff diverged');
+            }
+            if (sourceRecord && !targetRecord) {
+                targetRecord = await delegate.prepare(sourceRecord.status === 'published'
+                    ? preparedOverlayPackPromotionRecord(sourceRecord)
+                    : sourceRecord);
+            }
+            if (sourceRecord?.status === 'published' && targetRecord?.status === 'prepared') {
+                targetRecord = await delegate.markPublished(sourceRecord);
+            }
+            targetRecord = await delegate.read(promotionId);
+            if (!targetRecord || !isPromotionPrefix(sourceRecord, targetRecord)) {
+                throw new Error('Overlay Pack Promotion target did not durably replay the File source');
+            }
+        }
+        if (this.#delegate)
+            throw new Error('Overlay Pack Promotion storage is already active');
+        this.#delegate = delegate;
+    }
+    read(promotionId) {
+        return this.#require().read(promotionId);
+    }
+    prepare(record) {
+        return this.#require().prepare(record);
+    }
+    markPublished(record) {
+        return this.#require().markPublished(record);
+    }
+    list(projectId) {
+        return this.#require().list(projectId);
+    }
+    #require() {
+        if (!this.#delegate)
+            throw new Error('Overlay Pack Promotion storage is not active');
+        return this.#delegate;
+    }
+}
+export class DatabaseOverlayPackPromotionRepository {
+    database;
+    model;
+    constructor(database, model) {
+        this.database = database;
+        this.model = model;
+    }
+    async read(promotionId) {
+        const records = parseRows(await this.model.select().where({ promotion_id: required(promotionId, 'promotionId') }));
+        return records.at(-1);
+    }
+    async prepare(record) {
+        const canonical = canonicalOverlayPackPromotionRecord(record);
+        return await this.#insert(canonical, 0);
+    }
+    async markPublished(record) {
+        const canonical = canonicalOverlayPackPromotionRecord(record);
+        return await this.#insert(canonical, 1);
+    }
+    async list(projectId) {
+        const rows = await this.model.select().where({ project_id: required(projectId, 'projectId') });
+        const byPromotion = new Map();
+        for (const row of rows) {
+            const promotionId = required(row.promotion_id, 'promotionId');
+            byPromotion.set(promotionId, [...(byPromotion.get(promotionId) ?? []), row]);
+        }
+        return Object.freeze([...byPromotion.values()].map(group => parseRows(group).at(-1))
+            .sort((left, right) => compareCanonicalWorkroomText(left.promotionId, right.promotionId)));
+    }
+    async #insert(record, stage) {
+        try {
+            return await this.database.transaction(async (transaction) => {
+                const current = parseRows(await transaction.select('workroom_overlay_pack_promotions')
+                    .where({ promotion_id: record.promotionId }));
+                const latest = current.at(-1);
+                if (latest?.status === 'published') {
+                    if (latest.digest !== record.digest && latest.commandDigest !== record.commandDigest) {
+                        throw new Error('Overlay Pack promotion publication drift');
+                    }
+                    return latest;
+                }
+                if (latest && stage === 0) {
+                    if (latest.digest !== record.digest)
+                        throw new Error('Overlay Pack promotion identity drift');
+                    return latest;
+                }
+                if (stage === 1) {
+                    if (!latest || latest.status !== 'prepared'
+                        || latest.commandDigest !== record.commandDigest) {
+                        throw new Error('Overlay Pack promotion prepared record is unavailable or stale');
+                    }
+                }
+                await transaction.insertMany('workroom_overlay_pack_promotions', [toRow(record, stage)]);
+                return record;
+            }, { isolationLevel: 'SERIALIZABLE' });
+        }
+        catch (error) {
+            if (isDomainError(error))
+                throw error;
+            const winner = await this.read(record.promotionId);
+            if (winner?.digest === record.digest)
+                return winner;
+            if (winner && stage === 0 && winner.commandDigest === record.commandDigest)
+                return winner;
+            throw error;
+        }
+    }
+}
+export const WORKROOM_OVERLAY_PACK_PROMOTIONS_MODEL = {
+    id: { type: 'text', primary: true, nullable: false },
+    promotion_id: { type: 'text', nullable: false },
+    project_id: { type: 'text', nullable: false },
+    stage: { type: 'integer', nullable: false },
+    command_digest: { type: 'text', nullable: false },
+    record_digest: { type: 'text', nullable: false },
+    record_json: { type: 'text', nullable: false },
+};
+export function defineOverlayPackPromotionDatabaseModel(database) {
+    database.define('workroom_overlay_pack_promotions', WORKROOM_OVERLAY_PACK_PROMOTIONS_MODEL);
+}
+function parseRows(rows) {
+    const sorted = [...rows].sort((left, right) => integer(left.stage, 'stage') - integer(right.stage, 'stage'));
+    if (sorted.length > 2)
+        throw new Error('Overlay Pack Promotion database stage overflow');
+    const records = sorted.map((row, stage) => {
+        exactRow(row);
+        if (integer(row.stage, 'stage') !== stage || typeof row.record_json !== 'string') {
+            throw new Error('Overlay Pack Promotion database row binding drift');
+        }
+        const record = canonicalOverlayPackPromotionRecord(JSON.parse(row.record_json));
+        if (row.promotion_id !== record.promotionId || row.project_id !== record.projectId
+            || row.command_digest !== record.commandDigest || row.record_digest !== record.digest
+            || canonicalWorkroomJson(record) !== row.record_json
+            || (stage === 0) !== (record.status === 'prepared')) {
+            throw new Error('Overlay Pack Promotion database record drift');
+        }
+        return record;
+    });
+    if (records.length === 2) {
+        const [prepared, published] = records;
+        if (prepared?.status !== 'prepared' || published?.status !== 'published'
+            || prepared.commandDigest !== published.commandDigest) {
+            throw new Error('Overlay Pack Promotion database two-stage chain drift');
+        }
+    }
+    return Object.freeze(records);
+}
+function toRow(record, stage) {
+    return {
+        id: `${createHash('sha256').update(record.promotionId).digest('hex')}:${stage}`,
+        promotion_id: record.promotionId,
+        project_id: record.projectId,
+        stage,
+        command_digest: record.commandDigest,
+        record_digest: record.digest,
+        record_json: canonicalWorkroomJson(record),
+    };
+}
+function exactRow(row) {
+    const keys = ['id', 'promotion_id', 'project_id', 'stage', 'command_digest', 'record_digest', 'record_json'];
+    if (Object.keys(row).length !== keys.length || keys.some(key => !Object.hasOwn(row, key))) {
+        throw new Error('Overlay Pack Promotion database row exact schema drift');
+    }
+}
+function canonicalIds(values) {
+    const ids = values.map(value => required(value, 'promotionId')).sort();
+    if (new Set(ids).size !== ids.length)
+        throw new Error('Overlay Pack Promotion activation contains duplicate ids');
+    return ids;
+}
+function isPromotionPrefix(source, target) {
+    return canonicalWorkroomJson(source) === canonicalWorkroomJson(target)
+        || (source.status === 'prepared' && target.status === 'published'
+            && source.commandDigest === target.commandDigest);
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function integer(value, label) {
+    if (!Number.isSafeInteger(value) || Number(value) < 0)
+        throw new Error(`${label} is invalid`);
+    return Number(value);
+}
+function isDomainError(error) {
+    return error instanceof Error && /Overlay Pack promotion/u.test(error.message);
+}
+//# sourceMappingURL=database-overlay-pack-promotion-repository.js.map

package/lib/workroom-runtime/database-overlay-pack-promotion-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-overlay-pack-promotion-repository.js","sourceRoot":"","sources":["../../src/workroom-runtime/database-overlay-pack-promotion-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACrG,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GAKnC,MAAM,sCAAsC,CAAC;AAkB9C,MAAM,OAAO,yCAAyC;IACpD,SAAS,CAAkC;IAE3C,KAAK,CAAC,QAAQ,CACZ,QAAwC,EACxC,YAA+B,EAC/B,MAAuC;QAEvC,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACvC,KAAK,MAAM,WAAW,IAAI,GAAG,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,IAAI,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,YAAY;gBAAE,SAAS;YAC5B,IAAI,YAAY,IAAI,YAAY,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC;mBAC7E,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,WAAW,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU;uBACzE,YAAY,CAAC,aAAa,KAAK,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClC,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,WAAW;oBACvE,CAAC,CAAC,kCAAkC,CAAC,YAAY,CAAC;oBAClD,CAAC,CAAC,YAAY,CAAC,CAAC;YACpB,CAAC;YACD,IAAI,YAAY,EAAE,MAAM,KAAK,WAAW,IAAI,YAAY,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBAChF,YAAY,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5D,CAAC;YACD,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,CAAC,YAAY,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxF,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,WAAmB;QACtB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,MAA0C;QAChD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,aAAa,CAAC,MAA2C;QACvD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,SAAiB;QACpB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,MAAM,OAAO,sCAAsC;IAEtC;IACA;IAFX,YACW,QAAsC,EACtC,KAAwC;QADxC,aAAQ,GAAR,QAAQ,CAA8B;QACtC,UAAK,GAAL,KAAK,CAAmC;IAChD,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QACnH,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA0C;QACtD,MAAM,SAAS,GAAG,mCAAmC,CAAC,MAAM,CAAuC,CAAC;QACpG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2C;QAC7D,MAAM,SAAS,GAAG,mCAAmC,CAAC,MAAM,CAAwC,CAAC;QACrG,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAwC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAC9D,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;aAClF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAkC,EAAE,KAAY;QAC5D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE;gBACzD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CAAC;qBACnF,KAAK,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,MAAM,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;oBACnC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;wBACrF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBAC9D,CAAC;oBACD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,IAAI,MAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;oBAC9F,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;2BACtC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;wBACnD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;gBACD,MAAM,WAAW,CAAC,UAAU,CAAC,kCAAkC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzF,OAAO,MAAM,CAAC;YAChB,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC;YACpD,IAAI,MAAM,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;gBAAE,OAAO,MAAM,CAAC;YAC1F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,EAAE,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7D,YAAY,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpD,cAAc,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1D,aAAa,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;CACxD,CAAC;AAEF,MAAM,UAAU,uCAAuC,CACrD,QAAuE;IAEvE,QAAQ,CAAC,MAAM,CAAC,kCAAkC,EAAE,sCAAsC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,SAAS,CAAC,IAAwC;IACzD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACxC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA+B,CAAC,CAAC;QAC9G,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS;eAC7E,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM;eAClF,qBAAqB,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,WAAW;eACjD,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC;QACtC,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU,IAAI,SAAS,EAAE,MAAM,KAAK,WAAW;eACnE,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,KAAK,CAAC,MAAkC,EAAE,KAAY;IAC7D,OAAO;QACL,EAAE,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE;QAC/E,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,KAAK;QACL,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,WAAW,EAAE,qBAAqB,CAAC,MAAM,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAClH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAkC,EAClC,MAAkC;IAElC,OAAO,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC;WACjE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;eAC5D,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACjF,CAAC"}

package/lib/workroom-runtime/github-actions-delivery-provider.d.ts

@@ -0,0 +1,44 @@
+import type { WorkroomDeliveryDispatch, WorkroomDeliveryObservation, WorkroomDeliveryProviderPort, WorkroomDeliveryReadiness, WorkroomDeliveryRequest } from './workroom-delivery-gateway.js';
+/** Registered by the trusted control plane after a candidate build, never supplied by an Agent tool. */
+export interface GitHubActionsCandidateBinding {
+    readonly runId: number;
+    readonly runAttempt: number;
+    readonly artifactId: number;
+    readonly artifactName: string;
+}
+export interface GitHubActionsDeliveryOptions {
+    readonly repository: string;
+    readonly repositoryId: number;
+    readonly workflowId: number;
+    readonly workflowPath: string;
+    /** A protected, immutable tag; GitHub dispatch takes a branch/tag, not an arbitrary commit. */
+    readonly workflowRef: string;
+    readonly workflowSha: string;
+    readonly actorIds: readonly number[];
+    readonly requiredBuildJobs: readonly string[];
+    readonly requiredSmokeJobs: readonly string[];
+    readonly claimDirectory: string;
+    readonly token: () => Promise<string>;
+    readonly resolveCandidate: (request: WorkroomDeliveryRequest) => Promise<GitHubActionsCandidateBinding>;
+    readonly fetch?: typeof fetch;
+    readonly now?: () => number;
+    readonly maxArtifactBytes?: number;
+}
+/** Single-host durable dispatch claims. A claim is never deleted or retried, including on response loss. */
+export declare class GitHubActionsDeliveryProvider implements WorkroomDeliveryProviderPort {
+    #private;
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    constructor(options: GitHubActionsDeliveryOptions);
+    /** Read-only connectivity check. This does not prove write permissions or a real candidate smoke. */
+    verifyConfiguration(signal: AbortSignal): Promise<void>;
+    inspect(request: WorkroomDeliveryRequest, signal: AbortSignal): Promise<WorkroomDeliveryReadiness>;
+    dispatch(request: WorkroomDeliveryDispatch & {
+        evidenceRef: string;
+        evidenceDigest: string;
+    }, signal: AbortSignal): Promise<WorkroomDeliveryObservation>;
+    query(request: WorkroomDeliveryDispatch, signal: AbortSignal): Promise<WorkroomDeliveryObservation>;
+}
+//# sourceMappingURL=github-actions-delivery-provider.d.ts.map

package/lib/workroom-runtime/github-actions-delivery-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-actions-delivery-provider.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/github-actions-delivery-provider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9L,wGAAwG;AACxG,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AACD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+FAA+F;IAC/F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACxG,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAYD,4GAA4G;AAC5G,qBAAa,6BAA8B,YAAW,4BAA4B;;IAChF,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAEhD,OAAO,EAAE,4BAA4B;IA0BjD,qGAAqG;IAC/F,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA6DvD,OAAO,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgClG,QAAQ,CAAC,OAAO,EAAE,wBAAwB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAwBxJ,KAAK,CAAC,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC;CA2B1G"}

package/lib/workroom-runtime/github-actions-delivery-provider.js

@@ -0,0 +1,246 @@
+import { createHash } from 'node:crypto';
+import { mkdir, open, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { digestCanonicalWorkroomValue as digest } from '../workroom/canonical-value.js';
+/** Single-host durable dispatch claims. A claim is never deleted or retried, including on response loss. */
+export class GitHubActionsDeliveryProvider {
+    provider;
+    #options;
+    constructor(options) {
+        if (!/^[\w.-]+\/[\w.-]+$/.test(options.repository) || !/^[a-f0-9]{40}$/.test(options.workflowSha)
+            || !options.workflowRef.startsWith('refs/tags/') || !options.workflowPath.startsWith('.github/workflows/')
+            || !Number.isSafeInteger(options.repositoryId) || !Number.isSafeInteger(options.workflowId)
+            || options.actorIds.length === 0 || options.requiredBuildJobs.length === 0 || options.requiredSmokeJobs.length === 0
+            || new Set(options.requiredBuildJobs).size !== options.requiredBuildJobs.length
+            || new Set(options.requiredSmokeJobs).size !== options.requiredSmokeJobs.length)
+            throw new Error('Invalid trusted Actions profile');
+        this.#options = { ...options, actorIds: [...options.actorIds], requiredBuildJobs: [...options.requiredBuildJobs], requiredSmokeJobs: [...options.requiredSmokeJobs] };
+        const { repository, repositoryId, workflowId, workflowPath, workflowRef, workflowSha, actorIds, requiredBuildJobs, requiredSmokeJobs } = this.#options;
+        this.provider = Object.freeze({ id: `github-actions:${repositoryId}:${workflowId}`, digest: digest({ repository, repositoryId, workflowId, workflowPath, workflowRef, workflowSha, actorIds, requiredBuildJobs, requiredSmokeJobs }) });
+    }
+    #now() { return (this.#options.now ?? Date.now)(); }
+    #base() { return `https://api.github.com/repos/${this.#options.repository}`; }
+    async #api(path, signal, body, beforeSend) {
+        const token = await this.#options.token();
+        signal.throwIfAborted();
+        beforeSend?.();
+        const response = await (this.#options.fetch ?? fetch)(this.#base() + path, {
+            method: body === undefined ? 'GET' : 'POST', redirect: 'error',
+            signal: AbortSignal.any([signal, AbortSignal.timeout(30_000)]),
+            headers: { Accept: 'application/vnd.github+json', Authorization: `Bearer ${token}`, 'X-GitHub-Api-Version': '2022-11-28', ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+        });
+        if (!response.ok)
+            throw new Error(`GitHub Actions API returned ${response.status}`);
+        return response.status === 204 ? undefined : await response.json();
+    }
+    /** Read-only connectivity check. This does not prove write permissions or a real candidate smoke. */
+    async verifyConfiguration(signal) {
+        const repository = await this.#api('', signal);
+        const workflow = await this.#api(`/actions/workflows/${this.#options.workflowId}`, signal);
+        const ref = await this.#api(`/commits/${encodeURIComponent(this.#options.workflowRef)}`, signal);
+        if (repository.id !== this.#options.repositoryId || workflow.id !== this.#options.workflowId
+            || workflow.path !== this.#options.workflowPath || workflow.state !== 'active' || ref.sha !== this.#options.workflowSha)
+            throw new Error('Actions configuration not ready');
+    }
+    #target(request) {
+        if (request.target.repositoryId !== String(this.#options.repositoryId)
+            || request.target.environment !== 'github-actions-smoke'
+            || request.target.pipelineRef !== `${this.#options.workflowPath}@${this.#options.workflowSha}`
+            || !/^[a-f0-9]{40}$/.test(request.target.headSha)
+            || !/^sha256:[a-f0-9]{64}$/.test(request.target.artifactDigest))
+            throw new Error('Actions delivery target binding mismatch');
+    }
+    #run(run, title) {
+        if (run.workflow_id !== this.#options.workflowId || run.path.split('@')[0] !== this.#options.workflowPath
+            || run.head_sha !== this.#options.workflowSha || run.event !== 'workflow_dispatch'
+            || run.repository.id !== this.#options.repositoryId || run.head_repository.id !== this.#options.repositoryId
+            || !this.#options.actorIds.includes(run.actor.id) || run.display_title !== title
+            || !Number.isSafeInteger(run.run_attempt) || run.run_attempt < 1)
+            throw new Error('Untrusted Actions run provenance');
+    }
+    async #jobs(run, required, signal) {
+        const jobs = [];
+        for (let page = 1; page <= 20; page++) {
+            const result = await this.#api(`/actions/runs/${run.id}/attempts/${run.run_attempt}/jobs?per_page=100&page=${page}`, signal);
+            jobs.push(...result.jobs);
+            if (jobs.length >= result.total_count)
+                break;
+            if (page === 20 || result.jobs.length === 0)
+                throw new Error('Actions job list incomplete');
+        }
+        return required.map(name => {
+            const matches = jobs.filter(job => job.name === name);
+            if (matches.length !== 1)
+                throw new Error(`Missing or duplicate required Actions job: ${name}`);
+            const job = matches[0];
+            if (job.run_id !== run.id || job.run_attempt !== run.run_attempt || job.head_sha !== run.head_sha)
+                throw new Error('Actions job provenance mismatch');
+            return { id: `${run.id}:${run.run_attempt}:${name}`, status: job.status !== 'completed' ? 'pending' : job.conclusion === 'success' ? 'passed' : 'failed' };
+        });
+    }
+    async #artifact(binding, request, signal) {
+        const artifact = await this.#api(`/actions/artifacts/${binding.artifactId}`, signal);
+        if (artifact.id !== binding.artifactId || artifact.name !== binding.artifactName || artifact.expired
+            || artifact.digest !== request.target.artifactDigest || artifact.workflow_run.id !== binding.runId
+            || artifact.workflow_run.repository_id !== this.#options.repositoryId || artifact.workflow_run.head_repository_id !== this.#options.repositoryId
+            || artifact.workflow_run.head_sha !== this.#options.workflowSha)
+            throw new Error('Candidate artifact provenance or digest mismatch');
+        const maximum = this.#options.maxArtifactBytes ?? 256 * 1024 * 1024;
+        if (!Number.isSafeInteger(artifact.size_in_bytes) || artifact.size_in_bytes < 1 || artifact.size_in_bytes > maximum)
+            throw new Error('Candidate artifact exceeds download budget');
+        const transport = this.#options.fetch ?? fetch;
+        const downloadSignal = AbortSignal.any([signal, AbortSignal.timeout(60_000)]);
+        const redirect = await transport(this.#base() + `/actions/artifacts/${artifact.id}/zip`, { redirect: 'manual', signal: downloadSignal, headers: { Authorization: `Bearer ${await this.#options.token()}`, 'X-GitHub-Api-Version': '2022-11-28' } });
+        if (redirect.status !== 302)
+            throw new Error('Expected GitHub artifact download redirect');
+        const location = new URL(redirect.headers.get('location') ?? '');
+        if (location.protocol !== 'https:' || location.username || location.password)
+            throw new Error('Invalid artifact download URL');
+        // Signed storage URL receives no GitHub credentials; never follow a second redirect.
+        const response = await transport(location, { redirect: 'error', signal: downloadSignal });
+        if (!response.ok || !response.body)
+            throw new Error('Artifact download failed');
+        const hash = createHash('sha256');
+        let size = 0;
+        const reader = response.body.getReader();
+        try {
+            for (;;) {
+                const chunk = await reader.read();
+                if (chunk.done)
+                    break;
+                size += chunk.value.byteLength;
+                if (size > maximum)
+                    throw new Error('Artifact stream exceeds download budget');
+                hash.update(chunk.value);
+            }
+        }
+        finally {
+            await reader.cancel();
+        }
+        if (`sha256:${hash.digest('hex')}` !== artifact.digest)
+            throw new Error('Downloaded artifact digest mismatch');
+        return artifact;
+    }
+    async inspect(request, signal) {
+        this.#target(request);
+        const binding = await this.#options.resolveCandidate(request);
+        if (binding.artifactName !== `candidate-${request.target.headSha}-${binding.runAttempt}`)
+            throw new Error('Artifact name does not bind the build attempt');
+        const run = await this.#api(`/actions/runs/${binding.runId}`, signal);
+        this.#run(run, `self-delivery:build:${request.target.headSha}`);
+        if (run.id !== binding.runId || run.run_attempt !== binding.runAttempt || run.status !== 'completed' || run.conclusion !== 'success')
+            throw new Error('Candidate build attempt is stale or unsuccessful');
+        const checks = await this.#jobs(run, this.#options.requiredBuildJobs, signal);
+        const artifact = await this.#artifact(binding, request, signal);
+        const evidence = { runId: run.id, runAttempt: run.run_attempt, workflowSha: run.head_sha, candidateHash: request.candidateHash, target: request.target, checks, artifactId: artifact.id, artifactDigest: artifact.digest };
+        const now = this.#now();
+        return { target: request.target, candidateHash: request.candidateHash, targetDigest: request.targetDigest, evidenceRef: `github-actions:${run.id}:${run.run_attempt}:${artifact.id}`, evidenceDigest: digest(evidence), checks, observedAt: now, expiresAt: now + 60_000 };
+    }
+    #key(request) { return digest({ projectId: request.projectId, idempotencyKey: request.idempotencyKey }).replace(/[^a-zA-Z0-9]/g, ''); }
+    #claimValue(request) { return JSON.stringify({ provider: this.provider, projectId: request.projectId, effectId: request.effectId, intentDigest: request.intentDigest, candidateHash: request.candidateHash, target: request.target, idempotencyKey: request.idempotencyKey }); }
+    async #claim(request) {
+        await mkdir(this.#options.claimDirectory, { recursive: true, mode: 0o700 });
+        const path = join(this.#options.claimDirectory, this.#key(request) + '.json');
+        let handle;
+        try {
+            handle = await open(path, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            if (await readFile(path, 'utf8') !== this.#claimValue(request))
+                throw new Error('Actions claim collision or incomplete durable claim', { cause: error });
+            return false;
+        }
+        try {
+            await handle.writeFile(this.#claimValue(request));
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        if (process.platform !== 'win32') {
+            const directory = await open(this.#options.claimDirectory, 'r');
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+        }
+        return true;
+    }
+    async dispatch(request, signal) {
+        this.#target(request);
+        // An existing claim always goes directly to read-only reconciliation, even after authorization expires.
+        try {
+            const existing = await readFile(join(this.#options.claimDirectory, this.#key(request) + '.json'), 'utf8');
+            if (existing !== this.#claimValue(request))
+                throw new Error('Actions claim collision');
+            return this.query(request, signal);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const evidence = await this.inspect(request, signal);
+        if (evidence.evidenceRef !== request.evidenceRef || evidence.evidenceDigest !== request.evidenceDigest || evidence.checks.some(item => item.status !== 'passed') || request.authorizationExpiresAt <= this.#now())
+            throw new Error('Actions dispatch evidence or authorization changed');
+        const ref = await this.#api(`/commits/${encodeURIComponent(this.#options.workflowRef)}`, signal);
+        if (ref.sha !== this.#options.workflowSha)
+            throw new Error('Trusted workflow ref moved');
+        if (!await this.#claim(request))
+            return this.query(request, signal);
+        const binding = await this.#options.resolveCandidate(request);
+        if (`github-actions:${binding.runId}:${binding.runAttempt}:${binding.artifactId}` !== evidence.evidenceRef
+            || binding.artifactName !== `candidate-${request.target.headSha}-${binding.runAttempt}`)
+            throw new Error('Candidate artifact binding changed before dispatch');
+        // Any error after the durable claim is intentionally query-only. Dispatch has no native idempotency.
+        try {
+            await this.#api(`/actions/workflows/${this.#options.workflowId}/dispatches`, signal, { ref: this.#options.workflowRef, inputs: { mode: 'smoke', candidate_sha: request.target.headSha, operation_key: this.#key(request), artifact_id: String(binding.artifactId), artifact_digest: request.target.artifactDigest } }, () => {
+                if (request.authorizationExpiresAt <= this.#now())
+                    throw new Error('Actions authorization expired before dispatch');
+            });
+        }
+        catch {
+            return this.#observation(request, undefined, 'unknown', 'unknown');
+        }
+        return this.query(request, signal);
+    }
+    async query(request, signal) {
+        this.#target(request);
+        const claim = await readFile(join(this.#options.claimDirectory, this.#key(request) + '.json'), 'utf8');
+        if (claim !== this.#claimValue(request))
+            throw new Error('Actions query requires the original durable claim');
+        const title = `self-delivery:smoke:${this.#key(request)}:${request.target.headSha}:${request.target.artifactDigest}`;
+        const matches = [];
+        for (let page = 1; page <= 10; page++) {
+            const result = await this.#api(`/actions/workflows/${this.#options.workflowId}/runs?event=workflow_dispatch&head_sha=${this.#options.workflowSha}&per_page=100&page=${page}`, signal);
+            matches.push(...result.workflow_runs.filter(run => run.display_title === title));
+            if (page * 100 >= result.total_count)
+                break;
+            if (page === 10)
+                throw new Error('Actions reconciliation window incomplete; operator investigation required');
+        }
+        if (matches.length > 1)
+            throw new Error('Duplicate Actions operation runs; operator investigation required');
+        const run = matches[0];
+        if (!run)
+            return this.#observation(request, undefined, 'unknown', 'unknown');
+        this.#run(run, title);
+        // A manual rerun is a separate execution and is never silently accepted under the original dispatch.
+        if (run.run_attempt !== 1)
+            throw new Error('Actions operation was rerun; fresh authorization required');
+        if (run.status !== 'completed')
+            return this.#observation(request, run, 'running', 'pending');
+        const checks = await this.#jobs(run, this.#options.requiredSmokeJobs, signal);
+        const passed = run.conclusion === 'success' && checks.every(check => check.status === 'passed');
+        return this.#observation(request, run, passed ? 'succeeded' : 'failed', passed ? 'passed' : 'failed');
+    }
+    #observation(request, run, status, health) {
+        const ref = run ? `https://github.com/${this.#options.repository}/actions/runs/${run.id}/attempts/${run.run_attempt}` : `github-actions-operation:${this.#key(request)}`;
+        return { effectId: request.effectId, intentDigest: request.intentDigest, idempotencyKey: request.idempotencyKey, target: request.target, candidateHash: request.candidateHash, deploymentRef: ref, receiptRef: ref, status, health, observedAt: this.#now(), authenticatedBy: this.provider.id };
+    }
+}
+//# sourceMappingURL=github-actions-delivery-provider.js.map

package/lib/workroom-runtime/github-actions-delivery-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-actions-delivery-provider.js","sourceRoot":"","sources":["../../src/workroom-runtime/github-actions-delivery-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,4BAA4B,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAuCxF,4GAA4G;AAC5G,MAAM,OAAO,6BAA6B;IAC/B,QAAQ,CAA2C;IACnD,QAAQ,CAA+B;IAChD,YAAY,OAAqC;QAC/C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;eAC5F,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,oBAAoB,CAAC;eACvG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;eACxF,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;eACjH,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,iBAAiB,CAAC,MAAM;eAC5E,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,iBAAiB,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACtI,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtK,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvJ,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,kBAAkB,YAAY,IAAI,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1O,CAAC;IACD,IAAI,KAAa,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,KAAK,KAAa,OAAO,gCAAgC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,MAAmB,EAAE,IAAc,EAAE,UAAuB;QACtF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,UAAU,EAAE,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE;YACzE,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO;YAC9D,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9D,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,sBAAsB,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,EAAE;YACjM,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAc,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAC;IAC/E,CAAC;IACD,qGAAqG;IACrG,KAAK,CAAC,mBAAmB,CAAC,MAAmB;QAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAA8C,sBAAsB,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QACxI,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkB,YAAY,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClH,IAAI,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU;eACvF,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChL,CAAC;IACD,OAAO,CAAC,OAAgC;QACtC,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;eACjE,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,sBAAsB;eACrD,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;eAC3F,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;eAC9C,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,CAAC,GAAQ,EAAE,KAAa;QAC1B,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;eACpG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,mBAAmB;eAC/E,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;eACzG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK;eAC7E,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1H,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,GAAQ,EAAE,QAA2B,EAAE,MAAmB;QACpE,MAAM,IAAI,GAAU,EAAE,CAAC;QACvB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAuC,iBAAiB,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,WAAW,2BAA2B,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YACnK,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;gBAAE,MAAM;YAC7C,IAAI,IAAI,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;YAChG,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACtJ,OAAO,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7J,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAAsC,EAAE,OAAgC,EAAE,MAAmB;QAC3G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAW,sBAAsB,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO;eAC/F,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK;eAC/F,QAAQ,CAAC,YAAY,CAAC,aAAa,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;eAC7I,QAAQ,CAAC,YAAY,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACvI,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,IAAI,QAAQ,CAAC,aAAa,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACnL,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;QAC/C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,sBAAsB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,sBAAsB,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QACpP,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/H,qFAAqF;QACrF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC;YAAC,SAAS,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,KAAK,CAAC,IAAI;oBAAE,MAAM;gBAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAC,IAAI,IAAI,GAAG,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QAAC,CAAC;gBAChN,CAAC;YAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAClC,IAAI,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAgC,EAAE,MAAmB;QACjE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,YAAY,KAAK,aAAa,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC3J,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAM,iBAAiB,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC1M,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3N,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,kBAAkB,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,WAAW,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;IAC7Q,CAAC;IACD,IAAI,CAAC,OAAgC,IAAY,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxK,WAAW,CAAC,OAAgC,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACjT,KAAK,CAAC,MAAM,CAAC,OAAgC;QAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAC/C,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACzJ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACjH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAmF,EAAE,MAAmB;QACrH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,wGAAwG;QACxG,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1G,IAAI,QAAQ,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkB,YAAY,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClH,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,kBAAkB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,KAAK,QAAQ,CAAC,WAAW;eACrG,OAAO,CAAC,YAAY,KAAK,aAAa,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACjK,qGAAqG;QACrG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,UAAU,aAAa,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE;gBAC1T,IAAI,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACtH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAiC,EAAE,MAAmB;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACvG,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC9G,MAAM,KAAK,GAAG,uBAAuB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACrH,MAAM,OAAO,GAAU,EAAE,CAAC;QAC1B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgD,sBAAsB,IAAI,CAAC,QAAQ,CAAC,UAAU,0CAA0C,IAAI,CAAC,QAAQ,CAAC,WAAW,sBAAsB,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YACrO,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC;YACjF,IAAI,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC,WAAW;gBAAE,MAAM;YAC5C,IAAI,IAAI,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC7G,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,qGAAqG;QACrG,IAAI,GAAG,CAAC,WAAW,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACxG,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxG,CAAC;IACD,YAAY,CAAC,OAAiC,EAAE,GAAoB,EAAE,MAA6C,EAAE,MAA6C;QAChK,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,UAAU,iBAAiB,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,4BAA4B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzK,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;IACnS,CAAC;CACF"}

package/lib/workroom-runtime/github-exact-merge-gateway.d.ts

@@ -0,0 +1,62 @@
+import type { WorkroomEffectState, WorkroomEffectGatewayReceipt, WorkroomEffectIntentInput } from '../workroom/effect-ledger.js';
+import type { WorkroomEffectGatewayPort } from './workroom-effect-runtime.js';
+export type GitHubExactMergeTarget = Extract<WorkroomEffectIntentInput['operation'], {
+    kind: 'git_merge_pr';
+}>['parameters'];
+export interface GitHubExactMergeInspection {
+    readonly target: GitHubExactMergeTarget;
+    readonly blockers: readonly string[];
+    readonly observedAt: number;
+}
+export interface GitHubExactMergeInspectorPort {
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    inspect(target: GitHubExactMergeTarget, signal: AbortSignal): Promise<GitHubExactMergeInspection>;
+}
+export declare const workroomExactMergeInspectorToken: import("@zhin.js/plugin-runtime").Token<GitHubExactMergeInspectorPort>;
+/**
+ * GitHub REST merge accepts a head SHA CAS, but no expected base SHA.
+ * https://docs.github.com/en/rest/pulls/pulls#merge-a-pull-request
+ * A read-before-write check cannot implement our exact-base authorization contract.
+ * This adapter intentionally exposes no PUT transport and always returns a blocker.
+ */
+export declare class GitHubExactMergeInspector implements GitHubExactMergeInspectorPort {
+    #private;
+    readonly options: Readonly<{
+        repository: string;
+        repositoryId: number;
+        token: () => Promise<string>;
+        fetch?: typeof fetch;
+        now?: () => number;
+    }>;
+    readonly provider: Readonly<{
+        id: string;
+        digest: string;
+    }>;
+    constructor(options: Readonly<{
+        repository: string;
+        repositoryId: number;
+        token: () => Promise<string>;
+        fetch?: typeof fetch;
+        now?: () => number;
+    }>);
+    inspect(target: GitHubExactMergeTarget, signal: AbortSignal): Promise<GitHubExactMergeInspection>;
+}
+/** Routes through the existing Effect journal/blocker system; never silently weakens an exact-base Gate. */
+export declare class WorkroomExactMergeGateway implements WorkroomEffectGatewayPort {
+    #private;
+    readonly options: Readonly<{
+        resolveInspector: () => GitHubExactMergeInspectorPort | undefined;
+        fallback: WorkroomEffectGatewayPort;
+    }>;
+    constructor(options: Readonly<{
+        resolveInspector: () => GitHubExactMergeInspectorPort | undefined;
+        fallback: WorkroomEffectGatewayPort;
+    }>);
+    prepare(state: WorkroomEffectState, signal: AbortSignal): Promise<void>;
+    execute(state: WorkroomEffectState, signal: AbortSignal): Promise<WorkroomEffectGatewayReceipt>;
+    reconcile(state: WorkroomEffectState, signal: AbortSignal): Promise<WorkroomEffectGatewayReceipt>;
+}
+//# sourceMappingURL=github-exact-merge-gateway.d.ts.map

package/lib/workroom-runtime/github-exact-merge-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-exact-merge-gateway.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/github-exact-merge-gateway.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACjI,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC,yBAAyB,CAAC,WAAW,CAAC,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,CAAC,YAAY,CAAC,CAAC;AAC7H,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACnG;AACD,eAAO,MAAM,gCAAgC,wEAE5C,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,yBAA0B,YAAW,6BAA6B;;IAEjE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE,CAAC;IAD5J,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBACvC,OAAO,EAAE,QAAQ,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE,CAAC;IAStJ,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAcxG;AAED,4GAA4G;AAC5G,qBAAa,yBAA0B,YAAW,yBAAyB;;IAC7D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,gBAAgB,EAAE,MAAM,6BAA6B,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,yBAAyB,CAAA;KAAE,CAAC;gBAA7H,OAAO,EAAE,QAAQ,CAAC;QAAE,gBAAgB,EAAE,MAAM,6BAA6B,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,yBAAyB,CAAA;KAAE,CAAC;IAW5I,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAG/F,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAIlG"}