codex-orchestrator 0.1.46 → 0.1.48

package/dist/src/runner/mission-process-executor.d.ts

@@ -0,0 +1,25 @@
+export interface MissionProcessInput {
+    file: string;
+    args: string[];
+    cwd?: string;
+    timeoutMs: number;
+    sourceEnv: NodeJS.ProcessEnv;
+    allowedEnvKeys: string[];
+    stdin?: string;
+    maxOutputBytes?: number;
+    signal?: AbortSignal;
+    onSpawn?: (pid: number | undefined) => void;
+}
+export interface MissionProcessResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    timedOut: boolean;
+    termination: 'exited' | 'timeout' | 'output-limit' | 'stdin-error' | 'cancelled';
+}
+export interface MissionProcessDependencies {
+    terminateProcessGroup?: (pid: number | undefined, signal: NodeJS.Signals) => void;
+    terminateChild?: (signal: NodeJS.Signals) => void;
+}
+export declare function runMissionProcess(input: MissionProcessInput, dependencies?: MissionProcessDependencies): Promise<MissionProcessResult>;
+//# sourceMappingURL=mission-process-executor.d.ts.map

package/dist/src/runner/mission-process-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-process-executor.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-process-executor.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,GAAG,WAAW,CAAC;CAClF;AAED,MAAM,WAAW,0BAA0B;IACzC,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IAClF,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;CACnD;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,mBAAmB,EAC1B,YAAY,GAAE,0BAA+B,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAoJ/B"}

package/dist/src/runner/mission-process-executor.js

@@ -0,0 +1,182 @@
+import { spawn } from 'node:child_process';
+import { scrubMissionExecutorEnv } from './mission-capability-kernel.js';
+export function runMissionProcess(input, dependencies = {}) {
+    if (!Number.isSafeInteger(input.timeoutMs) || input.timeoutMs <= 0) {
+        throw new Error('Mission process timeoutMs must be a positive integer.');
+    }
+    if (input.file.trim().length === 0 || input.args.some((arg) => arg.includes('\0'))) {
+        throw new Error('Mission process requires a valid argv command.');
+    }
+    const maxOutputBytes = input.maxOutputBytes ?? 4 * 1024 * 1024;
+    if (!Number.isSafeInteger(maxOutputBytes) || maxOutputBytes <= 0) {
+        throw new Error('Mission process maxOutputBytes must be a positive integer.');
+    }
+    if (input.signal?.aborted) {
+        return Promise.resolve({
+            stdout: '',
+            stderr: '',
+            exitCode: 130,
+            timedOut: false,
+            termination: 'cancelled',
+        });
+    }
+    return new Promise((resolve, reject) => {
+        let stdout = '';
+        let stderr = '';
+        let termination;
+        let outputBytes = 0;
+        let settled = false;
+        let terminationError;
+        let inputError;
+        let closeExitCode;
+        let escalationComplete = false;
+        let settlementTimeout;
+        const child = spawn(input.file, input.args, {
+            cwd: input.cwd,
+            env: scrubMissionExecutorEnv(input.sourceEnv, input.allowedEnvKeys),
+            shell: false,
+            detached: process.platform !== 'win32',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const onAbort = () => beginTermination('cancelled');
+        input.signal?.addEventListener('abort', onAbort, { once: true });
+        child.stdout.on('data', (chunk) => { collectOutput('stdout', chunk); });
+        child.stderr.on('data', (chunk) => { collectOutput('stderr', chunk); });
+        const timeout = setTimeout(() => {
+            beginTermination('timeout');
+        }, input.timeoutMs);
+        timeout.unref();
+        try {
+            input.onSpawn?.(child.pid);
+        }
+        catch (error) {
+            inputError = error instanceof Error ? error : new Error(String(error));
+            beginTermination('stdin-error');
+        }
+        if (input.signal?.aborted)
+            beginTermination('cancelled');
+        function beginTermination(reason) {
+            if (termination || settled)
+                return;
+            termination = reason;
+            clearTimeout(timeout);
+            requestTermination(child.pid, 'SIGTERM');
+            setTimeout(() => {
+                if (settled)
+                    return;
+                requestTermination(child.pid, 'SIGKILL');
+                escalationComplete = true;
+                if (closeExitCode !== undefined) {
+                    finishClose(closeExitCode);
+                }
+                else {
+                    settlementTimeout = setTimeout(() => {
+                        if (settled)
+                            return;
+                        settled = true;
+                        input.signal?.removeEventListener('abort', onAbort);
+                        reject(terminationError ?? inputError
+                            ?? new Error('Mission process did not terminate after SIGKILL reconciliation.'));
+                    }, 500);
+                }
+            }, 250);
+        }
+        child.on('error', (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            input.signal?.removeEventListener('abort', onAbort);
+            if (settlementTimeout)
+                clearTimeout(settlementTimeout);
+            reject(error);
+        });
+        child.on('close', (exitCode) => {
+            if (settled)
+                return;
+            clearTimeout(timeout);
+            closeExitCode = exitCode;
+            if (termination && !escalationComplete)
+                return;
+            finishClose(exitCode);
+        });
+        child.stdin.on('error', (error) => {
+            if (settled)
+                return;
+            inputError ??= new Error(`Mission process stdin failed: ${error.message}`, { cause: error });
+            beginTermination('stdin-error');
+        });
+        child.stdin.end(input.stdin);
+        function finishClose(exitCode) {
+            if (settled)
+                return;
+            settled = true;
+            input.signal?.removeEventListener('abort', onAbort);
+            if (settlementTimeout)
+                clearTimeout(settlementTimeout);
+            if (terminationError) {
+                reject(terminationError);
+                return;
+            }
+            if (inputError) {
+                reject(inputError);
+                return;
+            }
+            resolve({
+                stdout,
+                stderr,
+                exitCode: termination === 'timeout' ? 124
+                    : termination === 'output-limit' ? 125
+                        : termination === 'cancelled' ? 130 : (exitCode ?? 1),
+                timedOut: termination === 'timeout',
+                termination: termination ?? 'exited',
+            });
+        }
+        function collectOutput(target, chunk) {
+            const remaining = Math.max(0, maxOutputBytes - outputBytes);
+            const accepted = chunk.subarray(0, remaining);
+            if (accepted.byteLength > 0) {
+                if (target === 'stdout')
+                    stdout += accepted.toString('utf8');
+                else
+                    stderr += accepted.toString('utf8');
+                outputBytes += accepted.byteLength;
+            }
+            if (chunk.byteLength > remaining)
+                beginTermination('output-limit');
+        }
+        function requestTermination(pid, signal) {
+            try {
+                (dependencies.terminateProcessGroup ?? terminateProcessGroup)(pid, signal);
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                terminationError ??= new Error(`Mission process failed to terminate process group: ${message}`);
+                try {
+                    (dependencies.terminateChild ?? ((childSignal) => { child.kill(childSignal); }))(signal);
+                }
+                catch {
+                    // The stored termination error is reported when the child closes.
+                }
+            }
+        }
+    });
+}
+function terminateProcessGroup(pid, signal) {
+    if (pid === undefined)
+        return;
+    try {
+        if (process.platform === 'win32') {
+            process.kill(pid, signal);
+        }
+        else {
+            process.kill(-pid, signal);
+        }
+    }
+    catch (error) {
+        if (!(error instanceof Error && 'code' in error && error.code === 'ESRCH')) {
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=mission-process-executor.js.map

package/dist/src/runner/mission-process-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-process-executor.js","sourceRoot":"","sources":["../../../src/runner/mission-process-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AA4BzE,MAAM,UAAU,iBAAiB,CAC/B,KAA0B,EAC1B,eAA2C,EAAE;IAE7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,WAAiF,CAAC;QACtF,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAAmC,CAAC;QACxC,IAAI,UAA6B,CAAC;QAClC,IAAI,aAAwC,CAAC;QAC7C,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,IAAI,iBAA6C,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YAC1C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC;YACnE,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpD,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpB,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,IAAI,CAAC;YACH,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvE,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAEzD,SAAS,gBAAgB,CAAC,MAAgE;YACxF,IAAI,WAAW,IAAI,OAAO;gBAAE,OAAO;YACnC,WAAW,GAAG,MAAM,CAAC;YACrB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,OAAO;oBAAE,OAAO;gBACpB,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACzC,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,WAAW,CAAC,aAAa,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,iBAAiB,GAAG,UAAU,CAAC,GAAG,EAAE;wBAClC,IAAI,OAAO;4BAAE,OAAO;wBACpB,OAAO,GAAG,IAAI,CAAC;wBACf,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBACpD,MAAM,CAAC,gBAAgB,IAAI,UAAU;+BAChC,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC,CAAC;oBACrF,CAAC,EAAE,GAAG,CAAC,CAAC;gBACV,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,iBAAiB;gBAAE,YAAY,CAAC,iBAAiB,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,aAAa,GAAG,QAAQ,CAAC;YACzB,IAAI,WAAW,IAAI,CAAC,kBAAkB;gBAAE,OAAO;YAC/C,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,UAAU,KAAK,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7F,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7B,SAAS,WAAW,CAAC,QAAuB;YAC1C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,iBAAiB;gBAAE,YAAY,CAAC,iBAAiB,CAAC,CAAC;YACvD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,OAAO,CAAC;gBACN,MAAM;gBACN,MAAM;gBACN,QAAQ,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG;oBACvC,CAAC,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG;wBACpC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACzD,QAAQ,EAAE,WAAW,KAAK,SAAS;gBACnC,WAAW,EAAE,WAAW,IAAI,QAAQ;aACrC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,aAAa,CAAC,MAA2B,EAAE,KAAa;YAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,MAAM,KAAK,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;;oBACxD,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzC,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,GAAG,SAAS;gBAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACrE,CAAC;QAED,SAAS,kBAAkB,CAAC,GAAuB,EAAE,MAAsB;YACzE,IAAI,CAAC;gBACH,CAAC,YAAY,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,gBAAgB,KAAK,IAAI,KAAK,CAAC,sDAAsD,OAAO,EAAE,CAAC,CAAC;gBAChG,IAAI,CAAC;oBACH,CAAC,YAAY,CAAC,cAAc,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC3F,CAAC;gBAAC,MAAM,CAAC;oBACP,kEAAkE;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAuB,EAAE,MAAsB;IAC5E,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YAC3E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/runner/mission-quarantine-patch-executor.d.ts

@@ -0,0 +1,29 @@
+import type { MissionSandboxBackend } from './mission-capability-kernel.js';
+import type { MissionProcessInput, MissionProcessResult } from './mission-process-executor.js';
+export interface MissionPatchReceipt {
+    version: 1;
+    sha256: string;
+    size: number;
+    storage: 'mission-state-blob';
+}
+export interface MissionQuarantinePatchExecutorOptions {
+    backend: MissionSandboxBackend;
+    workspaceRoot: string;
+    quarantineRoot: string;
+    deniedReadPaths: string[];
+    sourceEnv: NodeJS.ProcessEnv;
+    allowedEnvKeys: string[];
+    timeoutMs: number;
+    maxPatchBytes: number;
+}
+export declare class MissionQuarantinePatchExecutor {
+    private readonly options;
+    private readonly runProcess;
+    constructor(options: MissionQuarantinePatchExecutorOptions, runProcess: (input: MissionProcessInput) => Promise<MissionProcessResult>);
+    materialize(patch: string): Promise<{
+        receipt: MissionPatchReceipt;
+        content: string;
+        discard: () => Promise<void>;
+    }>;
+}
+//# sourceMappingURL=mission-quarantine-patch-executor.d.ts.map

package/dist/src/runner/mission-quarantine-patch-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-quarantine-patch-executor.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-quarantine-patch-executor.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG/F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,8BAA8B;IAEvC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,OAAO,EAAE,qCAAqC,EAC9C,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC;IAG/E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAC/C,OAAO,EAAE,mBAAmB,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9B,CAAC;CAqEH"}

package/dist/src/runner/mission-quarantine-patch-executor.js

@@ -0,0 +1,121 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, mkdir, open, realpath, unlink } from 'node:fs/promises';
+import { join } from 'node:path';
+import { buildMissionSandboxInvocation } from './mission-sandbox.js';
+export class MissionQuarantinePatchExecutor {
+    options;
+    runProcess;
+    constructor(options, runProcess) {
+        this.options = options;
+        this.runProcess = runProcess;
+    }
+    async materialize(patch) {
+        const bytes = Buffer.from(patch, 'utf8');
+        if (bytes.byteLength > this.options.maxPatchBytes) {
+            throw new Error(`Mission quarantine patch size limit exceeded: ${bytes.byteLength}.`);
+        }
+        const quarantineRoot = await realpath(this.options.quarantineRoot);
+        const receiptDirectory = join(quarantineRoot, 'patch-receipts');
+        await mkdir(receiptDirectory, { recursive: true, mode: 0o700 });
+        const temporaryPath = join(receiptDirectory, `.incoming.${process.pid}.${randomUUID()}.patch`);
+        const invocation = buildMissionSandboxInvocation({
+            backend: this.options.backend,
+            workspaceRoot: this.options.workspaceRoot,
+            quarantineRoot,
+            mode: 'quarantine-write',
+            command: '/usr/bin/tee',
+            args: [temporaryPath],
+            deniedReadPaths: this.options.deniedReadPaths,
+        });
+        try {
+            const result = await this.runProcess({
+                ...invocation,
+                cwd: this.options.workspaceRoot,
+                timeoutMs: this.options.timeoutMs,
+                sourceEnv: this.options.sourceEnv,
+                allowedEnvKeys: this.options.allowedEnvKeys,
+                stdin: patch,
+            });
+            if (result.exitCode !== 0 || result.timedOut) {
+                throw new Error(`Mission quarantine patch producer failed with exit ${result.exitCode}.`);
+            }
+            const produced = await readRegularNoFollow(temporaryPath, true);
+            if (!produced.equals(bytes)) {
+                throw new Error('Mission quarantine patch producer output differs from the authorized proposal.');
+            }
+            const sha256 = createHash('sha256').update(produced).digest('hex');
+            const receiptPath = join(receiptDirectory, `${sha256}.patch`);
+            try {
+                await link(temporaryPath, receiptPath);
+            }
+            catch (error) {
+                if (!(error instanceof Error && 'code' in error && error.code === 'EEXIST'))
+                    throw error;
+            }
+            await unlink(temporaryPath);
+            const immutable = await readRegularNoFollow(receiptPath);
+            if (immutable.byteLength !== produced.byteLength
+                || createHash('sha256').update(immutable).digest('hex') !== sha256) {
+                throw new Error('Mission quarantine content-addressed receipt is corrupted.');
+            }
+            const directory = await open(receiptDirectory, 'r');
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+            return {
+                receipt: {
+                    version: 1,
+                    sha256,
+                    size: immutable.byteLength,
+                    storage: 'mission-state-blob',
+                },
+                content: immutable.toString('utf8'),
+                discard: async () => {
+                    await unlink(receiptPath).catch((error) => {
+                        if (!(error instanceof Error && 'code' in error && error.code === 'ENOENT'))
+                            throw error;
+                    });
+                    const directory = await open(receiptDirectory, 'r');
+                    try {
+                        await directory.sync();
+                    }
+                    finally {
+                        await directory.close();
+                    }
+                },
+            };
+        }
+        finally {
+            await unlink(temporaryPath).catch(() => undefined);
+        }
+    }
+}
+async function readRegularNoFollow(path, seal = false) {
+    const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const before = await handle.stat({ bigint: true });
+        if (!before.isFile() || before.nlink !== 1n) {
+            throw new Error('Mission quarantine receipt must be a single-link regular file.');
+        }
+        if (seal)
+            await handle.chmod(0o400);
+        const content = await handle.readFile();
+        const after = await handle.stat({ bigint: true });
+        if (before.dev !== after.dev || before.ino !== after.ino || before.size !== after.size
+            || before.mtimeNs !== after.mtimeNs || after.size !== BigInt(content.byteLength)
+            || after.nlink !== 1n) {
+            throw new Error('Mission quarantine receipt changed during read.');
+        }
+        if (seal)
+            await handle.sync();
+        return content;
+    }
+    finally {
+        await handle.close();
+    }
+}
+//# sourceMappingURL=mission-quarantine-patch-executor.js.map

package/dist/src/runner/mission-quarantine-patch-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-quarantine-patch-executor.js","sourceRoot":"","sources":["../../../src/runner/mission-quarantine-patch-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAoBrE,MAAM,OAAO,8BAA8B;IAEtB;IACA;IAFnB,YACmB,OAA8C,EAC9C,UAAyE;QADzE,YAAO,GAAP,OAAO,CAAuC;QAC9C,eAAU,GAAV,UAAU,CAA+D;IACzF,CAAC;IAEG,KAAK,CAAC,WAAW,CAAC,KAAa;QAKpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,aAAa,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,6BAA6B,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,cAAc;YACd,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;gBACnC,GAAG,UAAU;gBACb,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBAC3C,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC3F,CAAC;YACD,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;mBAC3C,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,CAAC;oBACV,MAAM;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU;oBAC1B,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBACjD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;4BAAE,MAAM,KAAK,CAAC;oBAC3F,CAAC,CAAC,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;oBACpD,IAAI,CAAC;wBAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;oBAAC,CAAC;4BAAS,CAAC;wBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;gBACtE,CAAC;aACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK;IAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,IAAI;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eACjF,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;eAC7E,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,IAAI;YAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/src/runner/mission-repository-executor.d.ts

@@ -0,0 +1,54 @@
+import { type MissionCapabilityPermit, type MissionCapabilityRequest, type MissionSandboxBackend } from './mission-capability-kernel.js';
+import { type CanonicalFileIdentity } from './mission-canonical-path.js';
+import { type MissionPatchAuditResult } from './mission-patch-audit.js';
+import { type MissionExecutorProbeResult } from './mission-executor-probe.js';
+import { type MissionProcessInput, type MissionProcessResult } from './mission-process-executor.js';
+import type { MissionPermitAuthority } from './mission-permit-authority.js';
+import type { MissionInputSnapshotVerifier } from './mission-input-snapshot.js';
+import { type MissionPatchReceipt } from './mission-quarantine-patch-executor.js';
+export type MissionRepositoryPatchAuditResult = Extract<MissionPatchAuditResult, {
+    accepted: false;
+}> | {
+    accepted: true;
+    files: Extract<MissionPatchAuditResult, {
+        accepted: true;
+    }>['files'];
+    preconditions: Record<string, CanonicalFileIdentity | null>;
+};
+export type MissionPatchExecutionResult = MissionRepositoryPatchAuditResult & {
+    receipt: MissionPatchReceipt;
+};
+export interface MissionRepositoryExecutorOptions {
+    backend: MissionSandboxBackend;
+    workspaceRoot: string;
+    quarantineRoot: string;
+    deniedReadPaths: string[];
+    sourceEnv: NodeJS.ProcessEnv;
+    allowedEnvKeys: string[];
+    timeoutMs: number;
+    deniedRepositoryPaths?: string[];
+    maxPatchBytes?: number;
+    capabilityProof: MissionExecutorProbeResult;
+}
+export interface MissionRepositoryExecutorDependencies {
+    runProcess?: (input: MissionProcessInput) => Promise<MissionProcessResult>;
+    permitAuthority: MissionPermitAuthority;
+    snapshotVerifier: MissionInputSnapshotVerifier;
+}
+export declare class MissionRepositoryExecutor {
+    private readonly options;
+    private readonly runProcess;
+    private readonly permitAuthority;
+    private readonly snapshotVerifier;
+    private readonly quarantinePatchExecutor;
+    constructor(options: MissionRepositoryExecutorOptions, dependencies: MissionRepositoryExecutorDependencies);
+    authorize(request: MissionCapabilityRequest): MissionCapabilityPermit;
+    observeGitStatus(permit: MissionCapabilityPermit): Promise<MissionProcessResult>;
+    readText(permit: MissionCapabilityPermit): Promise<string>;
+    executePatch(permit: MissionCapabilityPermit, patch: string): Promise<MissionPatchExecutionResult>;
+    private validatePermit;
+    private beginPermit;
+    private deniedRepositoryPaths;
+    private completePermit;
+}
+//# sourceMappingURL=mission-repository-executor.d.ts.map

package/dist/src/runner/mission-repository-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-repository-executor.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-repository-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAqB,KAAK,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,wCAAwC,CAAC;AAOhD,MAAM,MAAM,iCAAiC,GACzC,OAAO,CAAC,uBAAuB,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC,GACrD;IACE,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACrE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC,CAAC;CAC7D,CAAC;AAEN,MAAM,MAAM,2BAA2B,GAAG,iCAAiC,GAAG;IAC5E,OAAO,EAAE,mBAAmB,CAAC;CAC9B,CAAC;AAEF,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,0BAA0B,CAAC;CAC7C;AAED,MAAM,WAAW,qCAAqC;IACpD,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3E,eAAe,EAAE,sBAAsB,CAAC;IACxC,gBAAgB,EAAE,4BAA4B,CAAC;CAChD;AAED,qBAAa,yBAAyB;IAOlC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgE;IAC3F,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyB;IACzD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA+B;IAChE,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiC;gBAGtD,OAAO,EAAE,gCAAgC,EAC1D,YAAY,EAAE,qCAAqC;IAwB9C,SAAS,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB;IAI/D,gBAAgB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAyBhF,QAAQ,CACnB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,MAAM,CAAC;IAuBL,YAAY,CACvB,MAAM,EAAE,uBAAuB,EAC/B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,2BAA2B,CAAC;IAgEvC,OAAO,CAAC,cAAc;YAWR,WAAW;IASzB,OAAO,CAAC,qBAAqB;YAIf,cAAc;CAU7B"}

package/dist/src/runner/mission-repository-executor.js

@@ -0,0 +1,192 @@
+import { globMatches } from '../path-policy.js';
+import { authorizeMissionCapability, missionGitStatusArgv, } from './mission-capability-kernel.js';
+import { inspectCanonicalFile, } from './mission-canonical-path.js';
+import { auditMissionPatch } from './mission-patch-audit.js';
+import { missionExecutorRequiredChecks, } from './mission-executor-probe.js';
+import { runMissionProcess, } from './mission-process-executor.js';
+import { MissionRepositoryObserver } from './mission-repository-observer.js';
+import { MissionQuarantinePatchExecutor, } from './mission-quarantine-patch-executor.js';
+import { buildMissionSandboxInvocation } from './mission-sandbox.js';
+import { missionDefaultDeniedRepositoryPaths, missionPathDenied, } from './mission-path-language.js';
+export class MissionRepositoryExecutor {
+    options;
+    runProcess;
+    permitAuthority;
+    snapshotVerifier;
+    quarantinePatchExecutor;
+    constructor(options, dependencies) {
+        this.options = options;
+        const proofChecks = new Set(options.capabilityProof.checks);
+        if (!options.capabilityProof.supported
+            || options.capabilityProof.backend !== options.backend
+            || options.capabilityProof.failures.length > 0
+            || missionExecutorRequiredChecks.some((check) => !proofChecks.has(check))) {
+            throw new Error('Mission repository executor requires a successful active capability proof.');
+        }
+        this.runProcess = dependencies.runProcess ?? runMissionProcess;
+        this.permitAuthority = dependencies.permitAuthority;
+        this.snapshotVerifier = dependencies.snapshotVerifier;
+        this.quarantinePatchExecutor = new MissionQuarantinePatchExecutor({
+            backend: options.backend,
+            workspaceRoot: options.workspaceRoot,
+            quarantineRoot: options.quarantineRoot,
+            deniedReadPaths: options.deniedReadPaths,
+            sourceEnv: options.sourceEnv,
+            allowedEnvKeys: options.allowedEnvKeys,
+            timeoutMs: options.timeoutMs,
+            maxPatchBytes: options.maxPatchBytes ?? 4 * 1024 * 1024,
+        }, this.runProcess);
+    }
+    authorize(request) {
+        return authorizeMissionCapability(request);
+    }
+    async observeGitStatus(permit) {
+        const authorized = this.validatePermit(permit, 'git-status');
+        const replay = await this.beginPermit(authorized);
+        if (replay)
+            return decodeActionReceipt(replay, 'process-result');
+        const [command, ...args] = missionGitStatusArgv;
+        const invocation = buildMissionSandboxInvocation({
+            backend: this.options.backend,
+            workspaceRoot: this.options.workspaceRoot,
+            quarantineRoot: this.options.quarantineRoot,
+            mode: 'read-only',
+            command,
+            args,
+            deniedReadPaths: this.options.deniedReadPaths,
+        });
+        const result = await this.runProcess({
+            ...invocation,
+            cwd: this.options.workspaceRoot,
+            timeoutMs: this.options.timeoutMs,
+            sourceEnv: this.options.sourceEnv,
+            allowedEnvKeys: this.options.allowedEnvKeys,
+        });
+        await this.completePermit(authorized, 'process-result', result);
+        return result;
+    }
+    async readText(permit) {
+        const authorized = this.validatePermit(permit, 'read-file');
+        const path = authorized.readPath;
+        const maxBytes = authorized.maxReadBytes;
+        if (!authorized.requestedPaths.some((pattern) => globMatches(pattern, path))) {
+            throw new Error(`Mission repository read is outside permitted scope: ${path}.`);
+        }
+        const deniedPaths = this.deniedRepositoryPaths();
+        if (missionPathDenied(path, deniedPaths)) {
+            throw new Error(`Mission repository read path is denied: ${path}.`);
+        }
+        const replay = await this.beginPermit(authorized);
+        if (replay)
+            return decodeActionReceipt(replay, 'text-result');
+        const observer = new MissionRepositoryObserver(this.options.workspaceRoot, authorized.requestedPaths, deniedPaths);
+        const text = await observer.readText(path, maxBytes);
+        await this.completePermit(authorized, 'text-result', text);
+        return text;
+    }
+    async executePatch(permit, patch) {
+        const authorized = this.validatePermit(permit, 'validate-patch');
+        const preliminary = auditMissionPatch({
+            patch,
+            grantedPaths: authorized.requestedPaths,
+            deniedPaths: this.deniedRepositoryPaths(),
+            maxBytes: this.options.maxPatchBytes ?? 4 * 1024 * 1024,
+        });
+        if (!preliminary.accepted) {
+            throw new Error(`Mission patch proposal rejected before execution: ${preliminary.reason}.`);
+        }
+        const replay = await this.beginPermit(authorized);
+        if (replay)
+            return decodeActionReceipt(replay, 'patch-result');
+        const produced = await this.quarantinePatchExecutor.materialize(patch);
+        let durablyCompleted = false;
+        try {
+            const audited = auditMissionPatch({
+                patch: produced.content,
+                grantedPaths: authorized.requestedPaths,
+                deniedPaths: this.deniedRepositoryPaths(),
+                maxBytes: this.options.maxPatchBytes ?? 4 * 1024 * 1024,
+            });
+            if (!audited.accepted) {
+                const result = { ...audited, receipt: produced.receipt };
+                await this.completePermit(authorized, 'patch-result', result, [Buffer.from(produced.content, 'utf8')]);
+                durablyCompleted = true;
+                return result;
+            }
+            const preconditions = {};
+            for (const file of audited.files) {
+                try {
+                    const inspected = await inspectCanonicalFile({
+                        root: this.options.workspaceRoot,
+                        path: file.path,
+                        deniedPaths: this.deniedRepositoryPaths(),
+                    });
+                    preconditions[file.path] = inspected?.identity ?? null;
+                }
+                catch (error) {
+                    const result = {
+                        accepted: false,
+                        reason: error instanceof Error && /hard-linked|non-regular/u.test(error.message)
+                            ? 'canonical-non-regular-or-hard-linked-file-forbidden'
+                            : 'canonical-path-precondition-rejected',
+                        receipt: produced.receipt,
+                    };
+                    await this.completePermit(authorized, 'patch-result', result, [Buffer.from(produced.content, 'utf8')]);
+                    durablyCompleted = true;
+                    return result;
+                }
+            }
+            const result = { ...audited, preconditions, receipt: produced.receipt };
+            await this.completePermit(authorized, 'patch-result', result, [Buffer.from(produced.content, 'utf8')]);
+            durablyCompleted = true;
+            return result;
+        }
+        finally {
+            if (durablyCompleted)
+                await produced.discard();
+        }
+    }
+    validatePermit(permit, capability) {
+        if (permit.capability !== capability || permit.network !== 'deny'
+            || permit.workspace !== 'read-only') {
+            throw new Error(`Mission repository executor received an invalid ${capability} permit.`);
+        }
+        return authorizeMissionCapability(permit);
+    }
+    async beginPermit(authorized) {
+        await this.snapshotVerifier.verify(authorized.inputSnapshot);
+        const result = await this.permitAuthority.begin(authorized);
+        if (result.kind === 'completed') {
+            return this.permitAuthority.readReceipt(result.receiptSha256);
+        }
+        return undefined;
+    }
+    deniedRepositoryPaths() {
+        return [...missionDefaultDeniedRepositoryPaths, ...(this.options.deniedRepositoryPaths ?? [])];
+    }
+    async completePermit(permit, kind, value, artifacts = []) {
+        await this.snapshotVerifier.verify(permit.inputSnapshot);
+        await this.permitAuthority.complete(permit, encodeActionReceipt(kind, value), artifacts);
+    }
+}
+function encodeActionReceipt(kind, value) {
+    return Buffer.from(JSON.stringify({ version: 1, kind, value }), 'utf8');
+}
+function decodeActionReceipt(payload, expectedKind) {
+    let parsed;
+    try {
+        parsed = JSON.parse(payload.toString('utf8'));
+    }
+    catch {
+        parsed = undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new Error('Mission action receipt payload is invalid.');
+    }
+    const record = parsed;
+    if (record.version !== 1 || record.kind !== expectedKind || !('value' in record)) {
+        throw new Error(`Mission action receipt kind does not match ${expectedKind}.`);
+    }
+    return record.value;
+}
+//# sourceMappingURL=mission-repository-executor.js.map