codex-orchestrator 0.1.46 → 0.1.48

package/dist/src/runner/mission-safe-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-safe-executor.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-safe-executor.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AAOrC,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAE5E,eAAO,MAAM,wBAAwB,gHAK3B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,GAAG,WAAW,CAAC;CAC1C;AAED,MAAM,WAAW,yBAA0B,SAAQ,6BAA6B;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,uCAAuC;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,6BAA6B,CAAA;CAAE,GACpE;IACE,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,mDAAmD,CAAC;IAC5D,SAAS,EAAE,8CAA8C,CAAC;CAC3D,CAAC;AAEN,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,0BAA0B,CAAC;CAC7C;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,0BAA0B,CAAC;CACrC;AAED,MAAM,WAAW,+BAA+B;IAC9C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3E,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoD;gBAE7D,WAAW,EAAE,6BAA6B,EAAE;IAUxD,SAAS,CAAC,OAAO,EAAE,uCAAuC,GAAG,yBAAyB;IAoCtF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,iCAAiC;IAenF,KAAK,IAAI,uBAAuB,EAAE;IAIlC,cAAc,CACnB,MAAM,EAAE,yBAAyB,EACjC,GAAG,EAAE,IAAI,GACR,yBAAyB;CA0B7B;AAED,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgE;IAC3F,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAGd,QAAQ,EAAE,2BAA2B,EACrC,OAAO,EAAE,0BAA0B,EACpD,YAAY,GAAE,+BAAoC;IAavC,OAAO,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;CA4C5F;AAED,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CAY9F"}

package/dist/src/runner/mission-safe-executor.js

@@ -0,0 +1,288 @@
+import { createHash } from 'node:crypto';
+import { lstat, readdir } from 'node:fs/promises';
+import { basename, isAbsolute, join } from 'node:path';
+import { globMatches, normalizePath, uniqueSortedPaths } from '../path-policy.js';
+import { inspectCanonicalFile } from './mission-canonical-path.js';
+import { missionExecutorRequiredChecks, } from './mission-executor-probe.js';
+import { assertMissionPathPattern, missionDefaultDeniedRepositoryPaths, missionPathPatternsOverlap, scopePatternContainedBy, } from './mission-path-language.js';
+import { runMissionProcess, } from './mission-process-executor.js';
+import { buildMissionSandboxInvocation } from './mission-sandbox.js';
+export const missionSafeExecutorKinds = [
+    'completion-report-repair',
+    'review-evidence-repair',
+    'acceptance-proof-repair',
+    'configured-check',
+];
+export class MissionSafeExecutorRegistry {
+    descriptors = new Map();
+    constructor(descriptors) {
+        for (const input of descriptors) {
+            const descriptor = normalizeDescriptor(input);
+            if (this.descriptors.has(descriptor.id)) {
+                throw new Error(`Mission safe executor id is duplicated: ${descriptor.id}.`);
+            }
+            this.descriptors.set(descriptor.id, descriptor);
+        }
+    }
+    authorize(request) {
+        requireText(request.missionId, 'missionId');
+        requireText(request.actionKey, 'actionKey');
+        requireText(request.inputSnapshot, 'inputSnapshot');
+        if (!Number.isSafeInteger(request.fencingEpoch) || request.fencingEpoch <= 0) {
+            throw new Error('Mission safe executor fencingEpoch must be a positive integer.');
+        }
+        if (!Number.isFinite(Date.parse(request.expiresAt))) {
+            throw new Error('Mission safe executor expiresAt must be an ISO timestamp.');
+        }
+        const descriptor = this.descriptors.get(request.executorId);
+        if (!descriptor) {
+            throw new Error(`Mission safe executor is not registered: ${request.executorId}.`);
+        }
+        const grantedPaths = uniqueSortedPaths(request.grantedPaths);
+        if (grantedPaths.length === 0) {
+            throw new Error('Mission safe executor granted scope must not be empty.');
+        }
+        for (const path of descriptor.readPaths) {
+            if (!grantedPaths.some((grant) => scopePatternContainedBy(path, grant))) {
+                throw new Error(`Mission safe executor path is outside granted scope: ${path}.`);
+            }
+        }
+        return {
+            ...structuredClone(descriptor),
+            missionId: request.missionId,
+            actionKey: request.actionKey,
+            executorId: descriptor.id,
+            grantedPaths,
+            inputSnapshot: request.inputSnapshot,
+            fencingEpoch: request.fencingEpoch,
+            expiresAt: request.expiresAt,
+            descriptorFingerprint: descriptorFingerprint(descriptor),
+        };
+    }
+    classify(input) {
+        if (typeof input === 'string') {
+            return {
+                kind: 'external-input-required',
+                reason: 'legacy-shell-executor-unavailable-in-mission-mode',
+                migration: 'register an exact argv Mission safe executor',
+            };
+        }
+        const descriptor = this.descriptors.get(input.executorId);
+        if (!descriptor) {
+            throw new Error(`Mission safe executor is not registered: ${input.executorId}.`);
+        }
+        return { kind: 'safe-executor', descriptor: structuredClone(descriptor) };
+    }
+    kinds() {
+        return Array.from(new Set([...this.descriptors.values()].map((descriptor) => descriptor.kind))).sort();
+    }
+    validatePermit(permit, now) {
+        const receivedDescriptor = normalizeDescriptor(permit);
+        const registered = this.descriptors.get(permit.executorId);
+        if (!registered
+            || descriptorFingerprint(receivedDescriptor) !== permit.descriptorFingerprint
+            || descriptorFingerprint(registered) !== permit.descriptorFingerprint) {
+            throw new Error('Mission safe executor permit descriptor was modified or unregistered.');
+        }
+        if (Date.parse(permit.expiresAt) <= now.getTime()) {
+            throw new Error('Mission safe executor permit has expired.');
+        }
+        const authorized = this.authorize({
+            missionId: permit.missionId,
+            actionKey: permit.actionKey,
+            executorId: permit.executorId,
+            grantedPaths: permit.grantedPaths,
+            inputSnapshot: permit.inputSnapshot,
+            fencingEpoch: permit.fencingEpoch,
+            expiresAt: permit.expiresAt,
+        });
+        if (missionSafeExecutorPermitFingerprint(authorized)
+            !== missionSafeExecutorPermitFingerprint(permit)) {
+            throw new Error('Mission safe executor permit identity was modified.');
+        }
+        return authorized;
+    }
+}
+export class MissionSafeExecutor {
+    registry;
+    options;
+    runProcess;
+    now;
+    constructor(registry, options, dependencies = {}) {
+        this.registry = registry;
+        this.options = options;
+        const checks = new Set(options.capabilityProof.checks);
+        if (!options.capabilityProof.supported
+            || options.capabilityProof.backend !== options.backend
+            || options.capabilityProof.failures.length > 0
+            || missionExecutorRequiredChecks.some((check) => !checks.has(check))) {
+            throw new Error('Mission safe executor requires a successful active capability proof.');
+        }
+        this.runProcess = dependencies.runProcess ?? runMissionProcess;
+        this.now = dependencies.now ?? (() => new Date());
+    }
+    async execute(permit) {
+        const authorized = this.registry.validatePermit(permit, this.now());
+        const existingOutputs = await inspectQuarantineOutputs(this.options.quarantineRoot);
+        if (existingOutputs.length > 0) {
+            throw new Error('Mission safe executor requires a fresh empty quarantine.');
+        }
+        const invocation = buildMissionSandboxInvocation({
+            backend: this.options.backend,
+            workspaceRoot: this.options.workspaceRoot,
+            quarantineRoot: this.options.quarantineRoot,
+            mode: authorized.writePaths.length > 0 ? 'quarantine-write' : 'read-only',
+            command: authorized.executable,
+            args: authorized.args,
+            deniedReadPaths: this.options.deniedReadPaths,
+        });
+        const process = await this.runProcess({
+            ...invocation,
+            cwd: this.options.workspaceRoot,
+            timeoutMs: this.options.timeoutMs,
+            sourceEnv: this.options.sourceEnv,
+            allowedEnvKeys: this.options.allowedEnvKeys,
+        });
+        const outputs = await inspectQuarantineOutputs(this.options.quarantineRoot);
+        const undeclared = outputs.filter((output) => !authorized.writePaths.some((pattern) => globMatches(pattern, output.path)));
+        if (undeclared.length > 0) {
+            throw new Error(`Mission safe executor produced undeclared quarantine output: ${undeclared[0].path}.`);
+        }
+        return {
+            process,
+            receipt: {
+                version: 1,
+                missionId: authorized.missionId,
+                actionKey: authorized.actionKey,
+                executorId: authorized.executorId,
+                descriptorFingerprint: authorized.descriptorFingerprint,
+                exitCode: process.exitCode,
+                termination: process.termination,
+                stdoutSha256: hash(process.stdout),
+                stderrSha256: hash(process.stderr),
+                outputs,
+            },
+        };
+    }
+}
+export function missionSafeExecutorPermitFingerprint(permit) {
+    return hash(JSON.stringify([
+        'mission-safe-executor-permit-v1',
+        permit.missionId,
+        permit.actionKey,
+        permit.executorId,
+        permit.descriptorFingerprint,
+        permit.grantedPaths,
+        permit.inputSnapshot,
+        permit.fencingEpoch,
+        permit.expiresAt,
+    ]));
+}
+function normalizeDescriptor(input) {
+    const id = requireText(input.id, 'id');
+    if (!missionSafeExecutorKinds.includes(input.kind)) {
+        throw new Error(`Mission safe executor kind is invalid: ${String(input.kind)}.`);
+    }
+    if (!isAbsolute(input.executable)) {
+        throw new Error('Mission safe executor executable must be absolute.');
+    }
+    if (['sh', 'bash', 'zsh', 'fish', 'dash', 'env'].includes(basename(input.executable))) {
+        throw new Error('Mission safe executor forbids shell executables.');
+    }
+    if (input.args.some((arg) => arg.includes('\0') || /\$\(|`|\|\||&&|[<>;]/u.test(arg))) {
+        throw new Error('Mission safe executor arguments contain shell-control syntax.');
+    }
+    if (input.network !== 'deny') {
+        throw new Error('Mission safe executor network must be denied.');
+    }
+    if (input.idempotency !== 'repeat-safe' && input.idempotency !== 'reconcile') {
+        throw new Error('Mission safe executor idempotency is invalid.');
+    }
+    const readPaths = uniqueSortedPaths(input.readPaths);
+    const writePaths = uniqueSortedPaths(input.writePaths);
+    if (readPaths.length === 0) {
+        throw new Error('Mission safe executor requires finite read scope.');
+    }
+    for (const path of [...readPaths, ...writePaths]) {
+        assertMissionPathPattern(path, 'Mission safe executor path');
+        if (missionDefaultDeniedRepositoryPaths.some((denied) => missionPathPatternsOverlap(path, denied))) {
+            throw new Error(`Mission safe executor path overlaps a denied repository path: ${path}.`);
+        }
+    }
+    return {
+        id,
+        kind: input.kind,
+        executable: input.executable,
+        args: [...input.args],
+        readPaths,
+        writePaths,
+        network: 'deny',
+        idempotency: input.idempotency,
+    };
+}
+function descriptorFingerprint(descriptor) {
+    return hash(JSON.stringify([
+        'mission-safe-executor-descriptor-v1',
+        descriptor.id,
+        descriptor.kind,
+        descriptor.executable,
+        descriptor.args,
+        descriptor.readPaths,
+        descriptor.writePaths,
+        descriptor.network,
+        descriptor.idempotency,
+    ]));
+}
+function hash(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+async function inspectQuarantineOutputs(root) {
+    const paths = [];
+    await walk('');
+    const outputs = [];
+    for (const path of paths.sort()) {
+        const inspected = await inspectCanonicalFile({
+            root,
+            path,
+            deniedPaths: [],
+            missing: 'reject',
+        });
+        if (!inspected)
+            throw new Error(`Mission safe executor quarantine output disappeared: ${path}.`);
+        outputs.push({
+            path,
+            size: inspected.identity.size,
+            sha256: `sha256:${inspected.identity.sha256}`,
+        });
+    }
+    return outputs;
+    async function walk(relativeDirectory) {
+        const directory = relativeDirectory ? join(root, relativeDirectory) : root;
+        const entries = await readdir(directory);
+        for (const entry of entries) {
+            const relativePath = normalizePath(relativeDirectory
+                ? `${relativeDirectory}/${entry}` : entry);
+            const info = await lstat(join(root, relativePath));
+            if (info.isSymbolicLink()) {
+                throw new Error(`Mission safe executor refuses symbolic quarantine output: ${relativePath}.`);
+            }
+            if (info.isDirectory()) {
+                await walk(relativePath);
+            }
+            else if (info.isFile()) {
+                paths.push(relativePath);
+            }
+            else {
+                throw new Error(`Mission safe executor refuses non-regular quarantine output: ${relativePath}.`);
+            }
+        }
+    }
+}
+function requireText(value, field) {
+    const normalized = value.trim();
+    if (normalized.length === 0) {
+        throw new Error(`Mission safe executor ${field} must be non-empty.`);
+    }
+    return normalized;
+}
+//# sourceMappingURL=mission-safe-executor.js.map

package/dist/src/runner/mission-safe-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-safe-executor.js","sourceRoot":"","sources":["../../../src/runner/mission-safe-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,6BAA6B,GAE9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,GAGlB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAGrE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,0BAA0B;IAC1B,wBAAwB;IACxB,yBAAyB;IACzB,kBAAkB;CACV,CAAC;AAkFX,MAAM,OAAO,2BAA2B;IACrB,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEhF,YAAmB,WAA4C;QAC7D,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEM,SAAS,CAAC,OAAgD;QAC/D,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,GAAG,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO;YACL,GAAG,eAAe,CAAC,UAAU,CAAC;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,UAAU,CAAC,EAAE;YACzB,YAAY;YACZ,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,qBAAqB,EAAE,qBAAqB,CAAC,UAAU,CAAC;SACzD,CAAC;IACJ,CAAC;IAEM,QAAQ,CAAC,KAAsC;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,mDAAmD;gBAC3D,SAAS,EAAE,8CAA8C;aAC1D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5E,CAAC;IAEM,KAAK;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzG,CAAC;IAEM,cAAc,CACnB,MAAiC,EACjC,GAAS;QAET,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU;eACV,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAC,qBAAqB;eAC1E,qBAAqB,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,IAAI,oCAAoC,CAAC,UAAU,CAAC;gBAC9C,oCAAoC,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IAKX;IACA;IALF,UAAU,CAAgE;IAC1E,GAAG,CAAa;IAEjC,YACmB,QAAqC,EACrC,OAAmC,EACpD,eAAgD,EAAE;QAFjC,aAAQ,GAAR,QAAQ,CAA6B;QACrC,YAAO,GAAP,OAAO,CAA4B;QAGpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS;eACjC,OAAO,CAAC,eAAe,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;eACnD,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;eAC3C,6BAA6B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,MAAiC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,UAAU,GAAG,6BAA6B,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW;YACzE,OAAO,EAAE,UAAU,CAAC,UAAU;YAC9B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;SAC9C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACpC,GAAG,UAAU;YACb,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;SAC5C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,gEAAgE,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO;YACL,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;gBACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClC,OAAO;aACR;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,oCAAoC,CAAC,MAAiC;IACpF,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,iCAAiC;QACjC,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,qBAAqB;QAC5B,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,aAAa;QACpB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,SAAS;KACjB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoC;IAC/D,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,aAAa,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACjD,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC7D,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACtD,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,iEAAiE,IAAI,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE;QACF,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,SAAS;QACT,UAAU;QACV,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAyC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,qCAAqC;QACrC,UAAU,CAAC,EAAE;QACb,UAAU,CAAC,IAAI;QACf,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,IAAI;QACf,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,OAAO;QAClB,UAAU,CAAC,WAAW;KACvB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC;YAC3C,IAAI;YACJ,IAAI;YACJ,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,GAAG,CAAC,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI;YAC7B,MAAM,EAAE,UAAU,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;IAEf,KAAK,UAAU,IAAI,CAAC,iBAAyB;QAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,aAAa,CAAC,iBAAiB;gBAClD,CAAC,CAAC,GAAG,iBAAiB,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,YAAY,GAAG,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,gEAAgE,YAAY,GAAG,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,qBAAqB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/src/runner/mission-sandbox.d.ts

@@ -0,0 +1,16 @@
+import type { MissionSandboxBackend } from './mission-capability-kernel.js';
+export interface MissionSandboxInput {
+    backend: MissionSandboxBackend;
+    workspaceRoot: string;
+    quarantineRoot: string;
+    mode: 'read-only' | 'quarantine-write';
+    command: string;
+    args: string[];
+    deniedReadPaths?: string[];
+}
+export interface MissionSandboxInvocation {
+    file: string;
+    args: string[];
+}
+export declare function buildMissionSandboxInvocation(input: MissionSandboxInput): MissionSandboxInvocation;
+//# sourceMappingURL=mission-sandbox.d.ts.map

package/dist/src/runner/mission-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-sandbox.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,WAAW,GAAG,kBAAkB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,mBAAmB,GAAG,wBAAwB,CAuDlG"}

package/dist/src/runner/mission-sandbox.js

@@ -0,0 +1,91 @@
+import { realpathSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
+export function buildMissionSandboxInvocation(input) {
+    assertAbsolute(input.workspaceRoot, 'workspaceRoot');
+    assertAbsolute(input.quarantineRoot, 'quarantineRoot');
+    assertAbsolute(input.command, 'command');
+    const workspaceRoot = canonicalExistingPath(input.workspaceRoot);
+    const quarantineRoot = canonicalExistingPath(input.quarantineRoot);
+    if (input.backend === 'macos-sandbox') {
+        const deniedUserRoots = [...new Set([
+                '/Users', homedir(), tmpdir(), '/private/tmp', '/tmp', '/Volumes',
+            ].flatMap((path) => {
+                const canonical = canonicalPathIfPresent(path);
+                return canonical === undefined ? [] : [canonical];
+            }))];
+        const profile = [
+            '(version 1)',
+            '(deny default)',
+            '(deny network*)',
+            '(allow process-exec)',
+            '(allow signal (target self))',
+            '(allow sysctl-read)',
+            '(allow file-read*)',
+            '(allow file-write* (literal "/dev/null"))',
+            `(deny file-read-data ${deniedUserRoots.map((path) => `(subpath ${quoted(path)})`).join(' ')})`,
+            `(allow file-read-data (subpath ${quoted(workspaceRoot)}) (subpath ${quoted(quarantineRoot)}))`,
+            ...(input.deniedReadPaths ?? []).map((path) => {
+                assertAbsolute(path, 'deniedReadPaths entry');
+                const canonical = canonicalExistingPath(path);
+                return `(deny file-read-data (literal ${quoted(canonical)}) (subpath ${quoted(canonical)}))`;
+            }),
+            ...(input.mode === 'quarantine-write'
+                ? [`(allow file-write* (subpath ${quoted(quarantineRoot)}))`]
+                : []),
+        ].join('');
+        return {
+            file: '/usr/bin/sandbox-exec',
+            args: ['-p', profile, input.command, ...input.args],
+        };
+    }
+    const args = [
+        '--die-with-parent',
+        '--new-session',
+        '--unshare-net',
+        '--proc', '/proc',
+        '--dev', '/dev',
+        '--ro-bind', '/usr', '/usr',
+        '--ro-bind', '/bin', '/bin',
+        '--ro-bind', workspaceRoot, workspaceRoot,
+    ];
+    if (input.mode === 'quarantine-write') {
+        args.push('--bind', quarantineRoot, quarantineRoot);
+    }
+    else {
+        args.push('--ro-bind', quarantineRoot, quarantineRoot);
+    }
+    args.push('--chdir', workspaceRoot, input.command, ...input.args);
+    return { file: '/usr/bin/bwrap', args };
+}
+function canonicalExistingPath(value) {
+    try {
+        return realpathSync.native(value);
+    }
+    catch (error) {
+        throw new Error(`Mission sandbox path must resolve to an existing canonical path: ${value}.`, {
+            cause: error,
+        });
+    }
+}
+function canonicalPathIfPresent(value) {
+    try {
+        return realpathSync.native(value);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === 'ENOENT' || code === 'ENOTDIR')
+            return undefined;
+        throw new Error(`Mission sandbox system path could not be canonicalized: ${value}.`, {
+            cause: error,
+        });
+    }
+}
+function quoted(value) {
+    return `"${value.replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
+}
+function assertAbsolute(value, field) {
+    if (!value.startsWith('/')) {
+        throw new Error(`Mission sandbox ${field} must be absolute.`);
+    }
+}
+//# sourceMappingURL=mission-sandbox.js.map

package/dist/src/runner/mission-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-sandbox.js","sourceRoot":"","sources":["../../../src/runner/mission-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAmB1C,MAAM,UAAU,6BAA6B,CAAC,KAA0B;IACtE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACrD,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACvD,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBAClC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU;aAClE,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC/C,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC,CAAC,CAAC;QACL,MAAM,OAAO,GAAG;YACd,aAAa;YACb,gBAAgB;YAChB,iBAAiB;YACjB,sBAAsB;YACtB,8BAA8B;YAC9B,qBAAqB;YACrB,oBAAoB;YACpB,2CAA2C;YAC3C,wBAAwB,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAC/F,kCAAkC,MAAM,CAAC,aAAa,CAAC,cAAc,MAAM,CAAC,cAAc,CAAC,IAAI;YAC/F,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC5C,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC9C,OAAO,iCAAiC,MAAM,CAAC,SAAS,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAC/F,CAAC,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB;gBACnC,CAAC,CAAC,CAAC,+BAA+B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;gBAC7D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,mBAAmB;QACnB,eAAe;QACf,eAAe;QACf,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,MAAM,EAAE,MAAM;QAC3B,WAAW,EAAE,MAAM,EAAE,MAAM;QAC3B,WAAW,EAAE,aAAa,EAAE,aAAa;KAC1C,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,oEAAoE,KAAK,GAAG,EAAE;YAC5F,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,2DAA2D,KAAK,GAAG,EAAE;YACnF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,oBAAoB,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/src/runner/mission-scheduler.d.ts

@@ -0,0 +1,57 @@
+import type { MissionEvent, MissionProcessHandle, MissionRecord } from './mission-state-machine.js';
+import type { MissionStateSnapshot, MissionStateStore } from './mission-state-store.js';
+type MissionDeferralEvent = Extract<MissionEvent, {
+    actionKey: string;
+    nextEligibleAt: string;
+}>;
+export interface EligibleMission {
+    missionId: string;
+    revision: number;
+    state: MissionRecord['state'];
+    nextEligibleAt: string;
+    actionKey?: string;
+    recovery: boolean;
+}
+export declare class MissionScheduler {
+    private readonly store;
+    constructor(store: MissionStateStore);
+    defer(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        event: MissionDeferralEvent;
+        reason: string;
+        requiredPredicate: string;
+    }): Promise<MissionStateSnapshot>;
+    claim(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        now: string;
+        claim: NonNullable<MissionRecord['claim']>;
+    }): Promise<MissionStateSnapshot>;
+    registerProcess(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        claimToken: string;
+        process: MissionProcessHandle;
+    }): Promise<MissionStateSnapshot>;
+    completeProcess(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        claimToken: string;
+        actionKey: string;
+        pid: number;
+    }): Promise<MissionStateSnapshot>;
+    compactTerminal(input: {
+        expectedGeneration: number;
+        missionId: string;
+        expectedRevision: number;
+        retainedAt: string;
+    }): Promise<MissionStateSnapshot>;
+}
+export declare function listEligibleMissions(snapshot: MissionStateSnapshot, now: string, limit?: number): EligibleMission[];
+export {};
+//# sourceMappingURL=mission-scheduler.d.ts.map

package/dist/src/runner/mission-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-scheduler.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEpG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAExF,KAAK,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,gBAAgB;IACR,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,iBAAiB;IAErD,KAAK,CAAC,KAAK,EAAE;QAClB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,oBAAoB,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuB1B,KAAK,CAAC,KAAK,EAAE;QAClB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;KAC5C,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2C1B,eAAe,CAAC,KAAK,EAAE;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,oBAAoB,CAAC;KAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAe1B,eAAe,CAAC,KAAK,EAAE;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoB1B,eAAe,CAAC,KAAK,EAAE;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAiBlC;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,oBAAoB,EAC9B,GAAG,EAAE,MAAM,EACX,KAAK,SAAM,GACV,eAAe,EAAE,CA6BnB"}