codex-orchestrator 0.1.46 → 0.1.48

package/dist/src/runner/mission-evaluation.d.ts

@@ -0,0 +1,61 @@
+import type { ImplementationPublishabilityResult } from './local-execution-session.js';
+import { type ReworkBlockerKey, type RunnerBlocker, type RunnerBlockerSource } from './rework-policy.js';
+export type CandidateIdentity = {
+    kind: 'git-tree';
+    headSha: string;
+    treeSha: string;
+    changedFiles: string[];
+} | {
+    kind: 'worktree';
+    headSha: string;
+    changeSetHash: string;
+    changedFiles: string[];
+} | {
+    kind: 'legacy-unobserved';
+    headSha: string;
+    reason: 'promotion-before-change-set' | 'blocked-before-change-set';
+};
+export interface LegacyPublishabilityNormalizationInput {
+    issueNumber: number;
+    baseSha: string;
+    configHash: string;
+    candidateIdentity: CandidateIdentity;
+    result: ImplementationPublishabilityResult;
+}
+export interface EvaluationWarning {
+    reason: string;
+    evidenceRefs: string[];
+}
+export interface EvaluationSnapshot {
+    version: 1;
+    issueNumber: number;
+    baseSha: string;
+    configHash: string;
+    candidateIdentity: CandidateIdentity;
+    completionStatus: 'completed' | 'needs-promotion' | 'blocked';
+    blockers: RunnerBlocker[];
+    warnings: EvaluationWarning[];
+    promotionRequest?: {
+        reason: string;
+        criteria: string[];
+        evidence: string[];
+    };
+}
+export type FindingDisposition = 'safety-stop' | 'external-input' | 'scope-expansion' | 'diagnose' | 'residual-warning';
+export type FindingSource = RunnerBlockerSource | 'residual-risk' | 'promotion';
+export type FindingKey = ReworkBlockerKey | 'residual-warning' | 'scope-expansion' | 'finding-id-collision';
+export interface Finding {
+    id: string;
+    source: FindingSource;
+    key: FindingKey;
+    reason: string;
+    disposition: FindingDisposition;
+    evidenceRefs: string[];
+}
+export interface EvaluationResult {
+    findings: Finding[];
+    blockingDisposition: 'safety-stop' | 'external-input' | 'diagnose' | 'none';
+}
+export declare function normalizeLegacyPublishability(input: LegacyPublishabilityNormalizationInput): EvaluationSnapshot;
+export declare function evaluate(snapshot: EvaluationSnapshot): EvaluationResult;
+//# sourceMappingURL=mission-evaluation.d.ts.map

package/dist/src/runner/mission-evaluation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-evaluation.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-evaluation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,6BAA6B,GAAG,2BAA2B,CAAC;CACrE,CAAC;AAEN,MAAM,WAAW,sCAAsC;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,MAAM,EAAE,kCAAkC,CAAC;CAC5C;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAC9D,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;CACH;AAED,MAAM,MAAM,kBAAkB,GAC1B,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,UAAU,GACV,kBAAkB,CAAC;AAEvB,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,eAAe,GAAG,WAAW,CAAC;AAChF,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,sBAAsB,CAAC;AAE5G,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,UAAU,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,mBAAmB,EAAE,aAAa,GAAG,gBAAgB,GAAG,UAAU,GAAG,MAAM,CAAC;CAC7E;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,sCAAsC,GAC5C,kBAAkB,CAqDpB;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,gBAAgB,CA8BvE"}

package/dist/src/runner/mission-evaluation.js

@@ -0,0 +1,183 @@
+import { createHash } from 'node:crypto';
+import { blockersFromReasons, } from './rework-policy.js';
+export function normalizeLegacyPublishability(input) {
+    if (input.result.status === 'blocked') {
+        return {
+            version: 1,
+            issueNumber: input.issueNumber,
+            baseSha: input.baseSha,
+            configHash: input.configHash,
+            candidateIdentity: normalizeCandidateIdentity(input.candidateIdentity),
+            completionStatus: 'blocked',
+            blockers: mergeBlockers(input.result.blockers ?? [], blockersFromReasons(input.result.reasons)),
+            warnings: uniqueSorted(input.result.residualRisks).map((reason) => ({
+                reason,
+                evidenceRefs: [],
+            })),
+        };
+    }
+    if (input.result.status === 'promotion-requested') {
+        const promotion = input.result.report.promotion;
+        if (!promotion) {
+            throw new Error('Promotion-requested result is missing promotion evidence.');
+        }
+        return {
+            version: 1,
+            issueNumber: input.issueNumber,
+            baseSha: input.baseSha,
+            configHash: input.configHash,
+            candidateIdentity: normalizeCandidateIdentity(input.candidateIdentity),
+            completionStatus: 'needs-promotion',
+            blockers: [],
+            warnings: uniqueSorted(input.result.report.residualRisks).map((reason) => ({
+                reason,
+                evidenceRefs: [],
+            })),
+            promotionRequest: {
+                reason: promotion.reason,
+                criteria: uniqueSorted(promotion.criteria),
+                evidence: uniqueSorted(promotion.evidence),
+            },
+        };
+    }
+    return {
+        version: 1,
+        issueNumber: input.issueNumber,
+        baseSha: input.baseSha,
+        configHash: input.configHash,
+        candidateIdentity: normalizeCandidateIdentity(input.candidateIdentity),
+        completionStatus: input.result.report.status,
+        blockers: [],
+        warnings: uniqueSorted(input.result.residualRisks).map((reason) => ({
+            reason,
+            evidenceRefs: [],
+        })),
+    };
+}
+export function evaluate(snapshot) {
+    const findings = snapshot.blockers.map((blocker) => createFinding({
+        source: blocker.source,
+        key: blocker.key,
+        reason: blocker.reason,
+        disposition: blockerDisposition(blocker.key),
+        evidenceRefs: [],
+    }));
+    findings.push(...snapshot.warnings.map((warning) => createFinding({
+        source: 'residual-risk',
+        key: 'residual-warning',
+        reason: warning.reason,
+        disposition: 'residual-warning',
+        evidenceRefs: warning.evidenceRefs,
+    })));
+    if (snapshot.promotionRequest) {
+        findings.push(createFinding({
+            source: 'promotion',
+            key: 'scope-expansion',
+            reason: snapshot.promotionRequest.reason,
+            disposition: 'scope-expansion',
+            evidenceRefs: snapshot.promotionRequest.evidence,
+        }));
+    }
+    findings.sort(compareFindings);
+    return {
+        findings,
+        blockingDisposition: deriveBlockingDisposition(findings),
+    };
+}
+function blockerDisposition(key) {
+    if (key === 'denied-path' || key === 'publication-violation' || key === 'destructive-or-production-action') {
+        return 'safety-stop';
+    }
+    if (key === 'required-figma-mcp-failure') {
+        return 'external-input';
+    }
+    return 'diagnose';
+}
+function deriveBlockingDisposition(findings) {
+    if (findings.some((finding) => finding.disposition === 'safety-stop')) {
+        return 'safety-stop';
+    }
+    if (findings.some((finding) => finding.disposition === 'external-input')) {
+        return 'external-input';
+    }
+    if (findings.some((finding) => finding.disposition === 'diagnose' || finding.disposition === 'scope-expansion')) {
+        return 'diagnose';
+    }
+    return 'none';
+}
+function normalizeCandidateIdentity(identity) {
+    if (identity.kind === 'legacy-unobserved') {
+        return { ...identity };
+    }
+    return {
+        ...identity,
+        changedFiles: uniqueSorted(identity.changedFiles),
+    };
+}
+function mergeBlockers(typed, inferred) {
+    const merged = new Map();
+    for (const blocker of [...typed, ...inferred]) {
+        const reason = normalizeReason(blocker.reason);
+        const key = JSON.stringify([blocker.key, reason, blocker.source]);
+        if (!merged.has(key)) {
+            merged.set(key, { ...blocker, reason });
+        }
+    }
+    return Array.from(merged.values()).sort((left, right) => compareCodeUnits(left.source, right.source)
+        || compareCodeUnits(left.key, right.key)
+        || compareCodeUnits(left.reason, right.reason));
+}
+function createFinding(input) {
+    const reason = normalizeReason(input.reason);
+    const evidenceRefs = uniqueSorted(input.evidenceRefs);
+    const canonical = JSON.stringify({
+        version: 1,
+        source: input.source,
+        key: input.key,
+        normalizedReason: reason,
+        evidenceRefs,
+    });
+    const digest = createHash('sha256').update(Buffer.from(canonical, 'utf8')).digest('hex');
+    return {
+        id: `finding:v1:${digest}`,
+        source: input.source,
+        key: input.key,
+        reason,
+        disposition: input.disposition,
+        evidenceRefs,
+    };
+}
+function normalizeReason(value) {
+    const lines = value
+        .normalize('NFC')
+        .replace(/\r\n?/gu, '\n')
+        .split('\n')
+        .map((line) => line.trim().replace(/[\t ]+/gu, ' '));
+    while (lines[0] === '') {
+        lines.shift();
+    }
+    while (lines.at(-1) === '') {
+        lines.pop();
+    }
+    return lines.join('\n');
+}
+const dispositionRank = {
+    'safety-stop': 0,
+    'external-input': 1,
+    'scope-expansion': 2,
+    diagnose: 3,
+    'residual-warning': 4,
+};
+function compareFindings(left, right) {
+    return dispositionRank[left.disposition] - dispositionRank[right.disposition]
+        || compareCodeUnits(left.source, right.source)
+        || compareCodeUnits(left.key, right.key)
+        || compareCodeUnits(left.id, right.id);
+}
+function uniqueSorted(values) {
+    return Array.from(new Set(values)).sort(compareCodeUnits);
+}
+function compareCodeUnits(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+//# sourceMappingURL=mission-evaluation.js.map

package/dist/src/runner/mission-evaluation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-evaluation.js","sourceRoot":"","sources":["../../../src/runner/mission-evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,mBAAmB,GAIpB,MAAM,oBAAoB,CAAC;AA0E5B,MAAM,UAAU,6BAA6B,CAC3C,KAA6C;IAE7C,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,iBAAiB,EAAE,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACtE,gBAAgB,EAAE,SAAS;YAC3B,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/F,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAClE,MAAM;gBACN,YAAY,EAAE,EAAE;aACjB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,iBAAiB,EAAE,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACtE,gBAAgB,EAAE,iBAAiB;YACnC,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACzE,MAAM;gBACN,YAAY,EAAE,EAAE;aACjB,CAAC,CAAC;YACH,gBAAgB,EAAE;gBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC1C,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtE,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAC5C,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM;YACN,YAAY,EAAE,EAAE;SACjB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAA4B;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC;QAChE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;QAC5C,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC,CAAC;IACJ,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC;QAChE,MAAM,EAAE,eAAe;QACvB,GAAG,EAAE,kBAAkB;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,kBAAkB;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1B,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,iBAAiB;YACtB,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;YACxC,WAAW,EAAE,iBAAiB;YAC9B,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC,QAAQ;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,OAAO;QACL,QAAQ;QACR,mBAAmB,EAAE,yBAAyB,CAAC,QAAQ,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,uBAAuB,IAAI,GAAG,KAAK,kCAAkC,EAAE,CAAC;QAC3G,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,GAAG,KAAK,4BAA4B,EAAE,CAAC;QACzC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAmB;IACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa,CAAC,EAAE,CAAC;QACtE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,gBAAgB,CAAC,EAAE,CAAC;QACzE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,OAAO,CAAC,WAAW,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW,KAAK,iBAAiB,CAAC,EAAE,CAAC;QACnF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CAAC,QAA2B;IAC7D,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC1C,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,OAAO;QACL,GAAG,QAAQ;QACX,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB,EAAE,QAAyB;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtD,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;WACxC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;WACrC,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,KAA0B;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,gBAAgB,EAAE,MAAM;QACxB,YAAY;KACb,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzF,OAAO;QACL,EAAE,EAAE,cAAc,MAAM,EAAE;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,KAAK,GAAG,KAAK;SAChB,SAAS,CAAC,KAAK,CAAC;SAChB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,eAAe,GAAuC;IAC1D,aAAa,EAAE,CAAC;IAChB,gBAAgB,EAAE,CAAC;IACnB,iBAAiB,EAAE,CAAC;IACpB,QAAQ,EAAE,CAAC;IACX,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEF,SAAS,eAAe,CAAC,IAAa,EAAE,KAAc;IACpD,OAAO,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC;WACxE,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;WAC3C,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;WACrC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/runner/mission-executor-probe.d.ts

@@ -0,0 +1,10 @@
+import { type MissionCapabilityProbeInput, type MissionSandboxBackend } from './mission-capability-kernel.js';
+export interface MissionExecutorProbeResult {
+    supported: boolean;
+    backend?: MissionSandboxBackend;
+    checks: string[];
+    failures: string[];
+}
+export declare const missionExecutorRequiredChecks: readonly ["canonical-write-denied", "credential-env-stripped", "denied-read-path-blocked", "descendant-process-terminated", "network-denied", "quarantine-write-allowed"];
+export declare function probeMissionExecutorCapabilities(input: MissionCapabilityProbeInput): Promise<MissionExecutorProbeResult>;
+//# sourceMappingURL=mission-executor-probe.d.ts.map

package/dist/src/runner/mission-executor-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-executor-probe.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-executor-probe.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC3B,MAAM,gCAAgC,CAAC;AAIxC,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,eAAO,MAAM,6BAA6B,2KAOhC,CAAC;AAEX,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,0BAA0B,CAAC,CAqJrC"}

package/dist/src/runner/mission-executor-probe.js

@@ -0,0 +1,180 @@
+import { access, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { discoverMissionExecutorPrerequisites, } from './mission-capability-kernel.js';
+import { runMissionProcess } from './mission-process-executor.js';
+import { buildMissionSandboxInvocation } from './mission-sandbox.js';
+export const missionExecutorRequiredChecks = [
+    'canonical-write-denied',
+    'credential-env-stripped',
+    'denied-read-path-blocked',
+    'descendant-process-terminated',
+    'network-denied',
+    'quarantine-write-allowed',
+];
+export async function probeMissionExecutorCapabilities(input) {
+    const prerequisites = discoverMissionExecutorPrerequisites(input);
+    if (!prerequisites.prerequisitesAvailable || !prerequisites.backend) {
+        return { supported: false, checks: [], failures: prerequisites.missing };
+    }
+    if (prerequisites.backend !== 'macos-sandbox') {
+        return {
+            supported: false,
+            backend: prerequisites.backend,
+            checks: [],
+            failures: ['active-probe-not-implemented:linux-bwrap'],
+        };
+    }
+    const workspace = await mkdtemp(join(tmpdir(), 'mission-probe-workspace-'));
+    const quarantine = await mkdtemp(join(tmpdir(), 'mission-probe-quarantine-'));
+    const checks = [];
+    const failures = [];
+    try {
+        const quarantinePath = join(quarantine, 'allowed.txt');
+        const canonicalPath = join(workspace, 'blocked.txt');
+        const secretPath = join(workspace, '.env');
+        await writeFile(secretPath, 'filesystem-credential-canary', 'utf8');
+        const sandboxInput = {
+            backend: prerequisites.backend,
+            workspaceRoot: workspace,
+            quarantineRoot: quarantine,
+            mode: 'quarantine-write',
+        };
+        const processInput = {
+            cwd: workspace,
+            timeoutMs: 5_000,
+            sourceEnv: { PATH: process.env.PATH, MISSION_SECRET_CANARY: 'credential-env-canary' },
+            allowedEnvKeys: ['PATH', 'MISSION_SECRET_CANARY'],
+        };
+        const quarantineWrite = await runMissionProcess({
+            ...buildMissionSandboxInvocation({
+                ...sandboxInput,
+                command: '/usr/bin/tee',
+                args: [quarantinePath],
+            }),
+            ...processInput,
+            stdin: 'ok',
+        });
+        if (quarantineWrite.exitCode === 0 && (await readFile(quarantinePath, 'utf8').catch(() => '')) === 'ok') {
+            checks.push('quarantine-write-allowed');
+        }
+        else {
+            failures.push('quarantine-write-not-observed');
+        }
+        const canonicalWrite = await runMissionProcess({
+            ...buildMissionSandboxInvocation({
+                ...sandboxInput,
+                command: '/usr/bin/tee',
+                args: [canonicalPath],
+            }),
+            ...processInput,
+            stdin: 'bad',
+        });
+        if (canonicalWrite.exitCode !== 0 && !(await exists(canonicalPath)))
+            checks.push('canonical-write-denied');
+        else
+            failures.push('canonical-write-succeeded');
+        const deniedRead = await runMissionProcess({
+            ...buildMissionSandboxInvocation({
+                ...sandboxInput,
+                mode: 'read-only',
+                command: '/bin/cat',
+                args: [secretPath],
+                deniedReadPaths: [secretPath],
+            }),
+            ...processInput,
+        });
+        if (deniedRead.exitCode !== 0 && !deniedRead.stdout.includes('filesystem-credential-canary'))
+            checks.push('denied-read-path-blocked');
+        else
+            failures.push('denied-read-path-readable');
+        const environment = await runMissionProcess({
+            ...buildMissionSandboxInvocation({
+                ...sandboxInput,
+                mode: 'read-only',
+                command: '/usr/bin/env',
+                args: [],
+            }),
+            ...processInput,
+        });
+        if (!environment.stdout.includes('credential-env-canary'))
+            checks.push('credential-env-stripped');
+        else
+            failures.push('credential-env-visible');
+        const networkInvocation = buildMissionSandboxInvocation({
+            backend: prerequisites.backend,
+            workspaceRoot: workspace,
+            quarantineRoot: quarantine,
+            mode: 'read-only',
+            command: '/usr/bin/perl',
+            args: [
+                '-MSocket',
+                '-MErrno=EPERM',
+                '-e',
+                'socket(my $s, PF_INET, SOCK_STREAM, 0) or die $!; connect($s, sockaddr_in(9, inet_aton("127.0.0.1"))); exit($! == EPERM ? 0 : 30)',
+            ],
+        });
+        const network = await runMissionProcess({
+            ...networkInvocation,
+            cwd: workspace,
+            timeoutMs: 5_000,
+            sourceEnv: { PATH: process.env.PATH },
+            allowedEnvKeys: ['PATH'],
+        });
+        if (network.exitCode === 0)
+            checks.push('network-denied');
+        else
+            failures.push(`network-canary:${network.exitCode}`);
+        const daemonInvocation = buildMissionSandboxInvocation({
+            backend: prerequisites.backend,
+            workspaceRoot: workspace,
+            quarantineRoot: quarantine,
+            mode: 'read-only',
+            command: '/usr/bin/perl',
+            args: [
+                '-MPOSIX=setsid',
+                '-e',
+                'my $pid=fork(); if(!defined $pid){print "fork-denied"; exit 0} if($pid==0){setsid(); exec "/bin/sleep","60"; exit 50} print $pid; waitpid($pid,0); exit 40',
+            ],
+        });
+        const daemon = await runMissionProcess({
+            ...daemonInvocation,
+            cwd: workspace,
+            timeoutMs: 1_000,
+            sourceEnv: { PATH: process.env.PATH },
+            allowedEnvKeys: ['PATH'],
+        });
+        if (!daemon.timedOut && daemon.exitCode === 0 && daemon.stdout.trim() === 'fork-denied') {
+            checks.push('descendant-process-terminated');
+        }
+        else {
+            const descendantPid = Number(daemon.stdout.trim());
+            if (Number.isSafeInteger(descendantPid) && descendantPid > 0) {
+                try {
+                    process.kill(descendantPid, 'SIGKILL');
+                }
+                catch { /* already contained */ }
+            }
+            failures.push(`descendant-fork-not-denied:${daemon.exitCode}`);
+        }
+    }
+    catch (error) {
+        failures.push(`active-probe:${error instanceof Error ? error.message : String(error)}`);
+    }
+    finally {
+        await Promise.all([workspace, quarantine]
+            .map((path) => rm(path, { recursive: true, force: true })));
+    }
+    checks.sort();
+    failures.sort();
+    return {
+        supported: failures.length === 0,
+        backend: prerequisites.backend,
+        checks,
+        failures,
+    };
+}
+async function exists(path) {
+    return access(path).then(() => true, () => false);
+}
+//# sourceMappingURL=mission-executor-probe.js.map

package/dist/src/runner/mission-executor-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-executor-probe.js","sourceRoot":"","sources":["../../../src/runner/mission-executor-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,oCAAoC,GAGrC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AASrE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,wBAAwB;IACxB,yBAAyB;IACzB,0BAA0B;IAC1B,+BAA+B;IAC/B,gBAAgB;IAChB,0BAA0B;CAClB,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAAkC;IAElC,MAAM,aAAa,GAAG,oCAAoC,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,aAAa,CAAC,sBAAsB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QACpE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QAC9C,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC,0CAA0C,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,UAAU,EAAE,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG;YACnB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,IAAI,EAAE,kBAAkB;SAChB,CAAC;QACX,MAAM,YAAY,GAAG;YACnB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,EAAE,uBAAuB,EAAE;YACrF,cAAc,EAAE,CAAC,MAAM,EAAE,uBAAuB,CAAC;SAClD,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC;YAC9C,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,CAAC,cAAc,CAAC;aACvB,CAAC;YACF,GAAG,YAAY;YACf,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxG,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC;YAC7C,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,CAAC,aAAa,CAAC;aACtB,CAAC;YACF,GAAG,YAAY;YACf,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,IAAI,cAAc,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;;YACtG,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;YACzC,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,eAAe,EAAE,CAAC,UAAU,CAAC;aAC9B,CAAC;YACF,GAAG,YAAY;SAChB,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;;YACjI,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC;YAC1C,GAAG,6BAA6B,CAAC;gBAC/B,GAAG,YAAY;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,EAAE;aACT,CAAC;YACF,GAAG,YAAY;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;;YAC7F,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAE7C,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;YACtD,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE;gBACJ,UAAU;gBACV,eAAe;gBACf,IAAI;gBACJ,mIAAmI;aACpI;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;YACtC,GAAG,iBAAiB;YACpB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YACrC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;;YACrD,QAAQ,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEzD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;YACrD,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,4JAA4J;aAC7J;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,GAAG,gBAAgB;YACnB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YACrC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACnF,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC;aACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAChC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC"}

package/dist/src/runner/mission-git-contracts.d.ts

@@ -0,0 +1,75 @@
+export interface MissionGitCommitIdentity {
+    message: string;
+    authorName: string;
+    authorEmail: string;
+    authoredAt: string;
+    committerName: string;
+    committerEmail: string;
+    committedAt: string;
+}
+export interface MissionGitManifestEntry {
+    path: string;
+    operation: 'add' | 'delete' | 'modify';
+    oldMode: string | null;
+    newMode: string | null;
+    beforeBlob: string | null;
+    afterBlob: string | null;
+    beforeSha256: string | null;
+    afterSha256: string | null;
+}
+export interface MissionPatchCandidate {
+    baseCommit: string;
+    baseTree: string;
+    patchSha256: string;
+    treeSha: string;
+    commitSha: string;
+    manifest: MissionGitManifestEntry[];
+}
+export interface MissionApplyPermit {
+    version: 1;
+    missionId: string;
+    actionKey: string;
+    fencingEpoch: number;
+    expiresAt: string;
+    targetRef: string;
+    auditReceiptSha256: string;
+    patchSha256: string;
+    expectedOldCommit: string;
+    expectedOldTree: string;
+    expectedNewCommit: string;
+    expectedNewTree: string;
+    manifest: MissionGitManifestEntry[];
+    commit: MissionGitCommitIdentity;
+}
+export interface MissionApplyIntent {
+    version: 1;
+    permitFingerprint: string;
+    permit: MissionApplyPermit;
+    preparedAt: string;
+}
+export interface MissionApplyReceipt {
+    version: 1;
+    permitFingerprint: string;
+    targetRef: string;
+    oldCommitSha: string;
+    commitSha: string;
+    treeSha: string;
+    recovered: boolean;
+    appliedAt: string;
+}
+export declare function createMissionApplyPermit(input: {
+    missionId: string;
+    actionKey: string;
+    fencingEpoch: number;
+    expiresAt: string;
+    targetRef: string;
+    auditReceiptSha256: string;
+    candidate: MissionPatchCandidate;
+    commit: MissionGitCommitIdentity;
+}): MissionApplyPermit;
+export declare function validateMissionApplyPermit(value: unknown): MissionApplyPermit;
+export declare function missionApplyPermitFingerprint(permit: MissionApplyPermit): string;
+export declare function validateMissionGitCommitIdentity(value: MissionGitCommitIdentity): MissionGitCommitIdentity;
+export declare function assertMissionApplyIntent(value: unknown): asserts value is MissionApplyIntent;
+export declare function assertMissionApplyReceipt(value: unknown): asserts value is MissionApplyReceipt;
+//# sourceMappingURL=mission-git-contracts.d.ts.map

package/dist/src/runner/mission-git-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-git-contracts.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-git-contracts.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,qBAAqB,CAAC;IACjC,MAAM,EAAE,wBAAwB,CAAC;CAClC,GAAG,kBAAkB,CAiBrB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAgC7E;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAGhF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAG1G;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAQ5F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAc9F"}