codex-orchestrator 0.1.47 → 0.1.48

package/dist/src/runner/mission-resolution-loop.js

@@ -0,0 +1,318 @@
+import { createHash } from 'node:crypto';
+import { evaluate, } from './mission-evaluation.js';
+export async function runResolutionMission(input, dependencies) {
+    assertInput(input);
+    let snapshot = structuredClone(input.snapshot);
+    let scope = unique(input.scope);
+    let validationReceiptIds = unique(input.validationReceiptIds);
+    let acceptanceCoverage = unique(input.acceptanceCoverage);
+    const history = structuredClone(input.history ?? []);
+    let alternatives = latestAlternatives(history);
+    let resume = input.resume ? structuredClone(input.resume) : undefined;
+    for (let step = 0; step < input.maxSteps; step += 1) {
+        const evaluation = evaluate(snapshot);
+        const direct = directEvaluationOutcome(evaluation, history);
+        if (direct)
+            return direct;
+        if (evaluation.blockingDisposition === 'none') {
+            return {
+                kind: 'candidate-ready',
+                snapshot,
+                evaluation,
+                history,
+                scope,
+                validationReceiptIds,
+                acceptanceCoverage,
+            };
+        }
+        let proposal;
+        let strategyFingerprint;
+        let actionKey;
+        if (resume) {
+            ({ proposal, strategyFingerprint, actionKey } = resume);
+        }
+        else {
+            const suppressed = suppressedFingerprints(history);
+            proposal = await dependencies.diagnose({
+                missionId: input.missionId,
+                snapshot: structuredClone(snapshot),
+                evaluation: structuredClone(evaluation),
+                alternatives: [...alternatives],
+                suppressedStrategyFingerprints: suppressed,
+                history: structuredClone(history),
+            });
+            strategyFingerprint = missionStrategyFingerprint(proposal);
+            actionKey = missionActionKey(input.missionId, snapshot, strategyFingerprint);
+            if (suppressed.includes(strategyFingerprint)) {
+                history.push({
+                    actionKey,
+                    strategyFingerprint,
+                    outcome: 'proposal-suppressed',
+                    reason: 'strategy-already-completed-without-progress',
+                    alternatives: ['choose a materially different strategy'],
+                });
+                alternatives = ['choose a materially different strategy'];
+                continue;
+            }
+        }
+        if (resume && (strategyFingerprint !== missionStrategyFingerprint(proposal)
+            || actionKey !== missionActionKey(input.missionId, snapshot, strategyFingerprint))) {
+            return safety([actionKey], 'stale-resolution-resume', history);
+        }
+        let permit = resume?.permit;
+        if (!resume || resume.stage === 'authorizing') {
+            const authorization = await dependencies.authorize({
+                missionId: input.missionId,
+                snapshot: structuredClone(snapshot),
+                evaluation: structuredClone(evaluation),
+                proposal: structuredClone(proposal),
+                actionKey,
+                strategyFingerprint,
+            });
+            if (authorization.kind === 'rejected-recoverable') {
+                alternatives = unique(authorization.alternatives);
+                history.push({
+                    actionKey,
+                    strategyFingerprint,
+                    outcome: 'authorization-rejected',
+                    reason: authorization.reason,
+                    alternatives,
+                });
+                resume = undefined;
+                continue;
+            }
+            if (authorization.kind === 'temporary') {
+                return resumable('authorizing', authorization.reason, authorization.nextEligibleAt, history, {
+                    stage: 'authorizing', actionKey, strategyFingerprint, proposal,
+                });
+            }
+            if (authorization.kind === 'external-input-required') {
+                return external(authorization.evidence, authorization.resumePredicate, history);
+            }
+            if (authorization.kind === 'safety-stop') {
+                return safety(authorization.evidence, authorization.invariant, history);
+            }
+            if (proposal.kind === 'external-input' || proposal.kind === 'safety-stop') {
+                return safety([
+                    `proposal:${proposal.kind}`,
+                    `authorization:${authorization.kind}`,
+                ], 'terminal-boundary-not-runner-verified', history);
+            }
+            requireText(authorization.permit.id, 'permit.id');
+            permit = {
+                ...structuredClone(authorization.permit),
+                actionKey,
+                strategyFingerprint,
+                proposal: structuredClone(proposal),
+            };
+        }
+        if (!permit)
+            throw new Error('Mission resolution authorization produced no permit.');
+        let receipt = resume?.receipt;
+        if (!resume || resume.stage !== 'reconciling') {
+            const execution = await dependencies.execute({
+                missionId: input.missionId,
+                actionKey,
+                strategyFingerprint,
+                proposal: structuredClone(proposal),
+                permit: structuredClone(permit),
+            });
+            if (execution.kind === 'transient') {
+                return resumable('executing', execution.reason, execution.nextEligibleAt, history, {
+                    stage: 'executing', actionKey, strategyFingerprint, proposal, permit,
+                });
+            }
+            if (execution.kind === 'deterministic-failure') {
+                alternatives = unique(execution.alternatives);
+                history.push({
+                    actionKey,
+                    strategyFingerprint,
+                    outcome: 'deterministic-failure',
+                    reason: execution.reason,
+                    alternatives,
+                });
+                resume = undefined;
+                continue;
+            }
+            receipt = structuredClone(execution.receipt);
+            requireText(receipt.id, 'receipt.id');
+            if (receipt.actionKey !== actionKey) {
+                return safety([`expected:${actionKey}`, `received:${receipt.actionKey}`], 'execution-receipt-action-mismatch', history);
+            }
+        }
+        if (!receipt)
+            throw new Error('Mission resolution execution produced no receipt.');
+        const before = progressVector({
+            snapshot,
+            evaluation,
+            scope,
+            validationReceiptIds,
+            acceptanceCoverage,
+            strategyFingerprint,
+        });
+        const reconciliation = await dependencies.reconcile({
+            missionId: input.missionId,
+            snapshot: structuredClone(snapshot),
+            proposal: structuredClone(proposal),
+            permit: structuredClone(permit),
+            receipt: structuredClone(receipt),
+        });
+        if (reconciliation.kind === 'transient') {
+            return resumable('reconciling', reconciliation.reason, reconciliation.nextEligibleAt, history, {
+                stage: 'reconciling', actionKey, strategyFingerprint, proposal, permit, receipt,
+            });
+        }
+        if (reconciliation.kind === 'external-input-required') {
+            return external(reconciliation.evidence, reconciliation.resumePredicate, history);
+        }
+        if (reconciliation.kind === 'safety-stop') {
+            return safety(reconciliation.evidence, reconciliation.invariant, history);
+        }
+        if (reconciliation.snapshot.issueNumber !== snapshot.issueNumber
+            || reconciliation.snapshot.baseSha !== snapshot.baseSha
+            || reconciliation.snapshot.configHash !== snapshot.configHash) {
+            return safety([
+                `expected:${snapshot.issueNumber}:${snapshot.baseSha}:${snapshot.configHash}`,
+                `received:${reconciliation.snapshot.issueNumber}:${reconciliation.snapshot.baseSha}:${reconciliation.snapshot.configHash}`,
+            ], 'reconciliation-snapshot-identity-mismatch', history);
+        }
+        snapshot = structuredClone(reconciliation.snapshot);
+        scope = unique(reconciliation.scope);
+        validationReceiptIds = unique(reconciliation.validationReceiptIds);
+        acceptanceCoverage = unique(reconciliation.acceptanceCoverage);
+        const reevaluation = evaluate(snapshot);
+        const after = progressVector({
+            snapshot,
+            evaluation: reevaluation,
+            scope,
+            validationReceiptIds,
+            acceptanceCoverage,
+            strategyFingerprint,
+        });
+        history.push({
+            actionKey,
+            strategyFingerprint,
+            outcome: before === after ? 'strategy-stagnated' : 'progress',
+            ...(before === after ? {
+                reason: 'deterministic-action-left-progress-vector-unchanged',
+                alternatives: ['choose a materially different strategy'],
+            } : {}),
+        });
+        alternatives = before === after ? ['choose a materially different strategy'] : [];
+        resume = undefined;
+    }
+    return {
+        kind: 'resumable',
+        resumeTarget: 'diagnosing',
+        reason: 'resolution-step-budget-exhausted',
+        nextEligibleAt: dependencies.nextEligibleAt('resolution-step-budget-exhausted'),
+        history,
+    };
+}
+export function missionStrategyFingerprint(proposal) {
+    return digest(['mission-strategy-v1', canonicalize(proposal)]);
+}
+function missionActionKey(missionId, snapshot, strategyFingerprint) {
+    return `action:v1:${digest([missionId, progressSnapshotIdentity(snapshot), strategyFingerprint]).slice(7)}`;
+}
+function progressVector(input) {
+    return canonicalize({
+        findingIds: input.evaluation.findings.map((finding) => `${finding.disposition}:${finding.id}`),
+        candidate: normalizedCandidateIdentity(input.snapshot.candidateIdentity),
+        scope: unique(input.scope),
+        validationReceiptIds: unique(input.validationReceiptIds),
+        acceptanceCoverage: unique(input.acceptanceCoverage),
+        strategyFingerprint: input.strategyFingerprint,
+    });
+}
+function progressSnapshotIdentity(snapshot) {
+    return digest([
+        snapshot.issueNumber,
+        snapshot.baseSha,
+        snapshot.configHash,
+        normalizedCandidateIdentity(snapshot.candidateIdentity),
+    ]);
+}
+function directEvaluationOutcome(evaluation, history) {
+    if (evaluation.blockingDisposition === 'safety-stop') {
+        const findings = evaluation.findings.filter((finding) => finding.disposition === 'safety-stop');
+        return safety(findings.flatMap((finding) => [finding.id, ...finding.evidenceRefs]), findings.map((finding) => finding.key).join(',') || 'evaluation-safety-stop', history);
+    }
+    if (evaluation.blockingDisposition === 'external-input') {
+        const findings = evaluation.findings.filter((finding) => finding.disposition === 'external-input');
+        return external(findings.flatMap((finding) => [finding.id, ...finding.evidenceRefs]), findings.map((finding) => finding.reason).join('\n'), history);
+    }
+    return undefined;
+}
+function resumable(resumeTarget, reason, nextEligibleAt, history, resume) {
+    return { kind: 'resumable', resumeTarget, reason, nextEligibleAt, resume, history };
+}
+function external(evidence, resumePredicate, history) {
+    assertEvidence(evidence, 'external-input');
+    requireText(resumePredicate, 'resumePredicate');
+    return {
+        kind: 'external-input-required',
+        evidence: unique(evidence),
+        resumePredicate,
+        history,
+    };
+}
+function safety(evidence, invariant, history) {
+    assertEvidence(evidence, 'safety-stop');
+    requireText(invariant, 'invariant');
+    return { kind: 'safety-stop', evidence: unique(evidence), invariant, history };
+}
+function latestAlternatives(history) {
+    return unique(history.at(-1)?.alternatives ?? []);
+}
+function suppressedFingerprints(history) {
+    return unique(history
+        .filter((entry) => entry.outcome === 'authorization-rejected'
+        || entry.outcome === 'deterministic-failure'
+        || entry.outcome === 'strategy-stagnated'
+        || entry.outcome === 'proposal-suppressed')
+        .map((entry) => entry.strategyFingerprint));
+}
+function canonicalize(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalize).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.entries(value)
+            .filter(([, item]) => item !== undefined)
+            .sort(([left], [right]) => compareCodeUnits(left, right))
+            .map(([key, item]) => `${JSON.stringify(key)}:${canonicalize(item)}`)
+            .join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function digest(value) {
+    return `sha256:${createHash('sha256').update(canonicalize(value)).digest('hex')}`;
+}
+function normalizedCandidateIdentity(candidate) {
+    return candidate.kind === 'legacy-unobserved'
+        ? { ...candidate }
+        : { ...candidate, changedFiles: unique(candidate.changedFiles) };
+}
+function compareCodeUnits(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function unique(values) {
+    return Array.from(new Set(values.map((value) => value.trim()).filter(Boolean))).sort();
+}
+function assertInput(input) {
+    requireText(input.missionId, 'missionId');
+    if (!Number.isSafeInteger(input.maxSteps) || input.maxSteps <= 0) {
+        throw new Error('Mission resolution maxSteps must be a positive integer.');
+    }
+}
+function assertEvidence(evidence, kind) {
+    if (unique(evidence).length === 0) {
+        throw new Error(`Mission resolution ${kind} requires evidence.`);
+    }
+}
+function requireText(value, field) {
+    if (value.trim().length === 0) {
+        throw new Error(`Mission resolution ${field} must be non-empty.`);
+    }
+}
+//# sourceMappingURL=mission-resolution-loop.js.map

package/dist/src/runner/mission-resolution-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-resolution-loop.js","sourceRoot":"","sources":["../../../src/runner/mission-resolution-loop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,QAAQ,GAGT,MAAM,yBAAyB,CAAC;AAkKjC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA6B,EAC7B,YAA2C;IAE3C,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,UAAU,CAAC,mBAAmB,KAAK,MAAM,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,QAAQ;gBACR,UAAU;gBACV,OAAO;gBACP,KAAK;gBACL,oBAAoB;gBACpB,kBAAkB;aACnB,CAAC;QACJ,CAAC;QAED,IAAI,QAAmC,CAAC;QACxC,IAAI,mBAA2B,CAAC;QAChC,IAAI,SAAiB,CAAC;QACtB,IAAI,MAAM,EAAE,CAAC;YACX,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACnD,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC;gBACrC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;gBACnC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC;gBACvC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;gBAC/B,8BAA8B,EAAE,UAAU;gBAC1C,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;aAClC,CAAC,CAAC;YACH,mBAAmB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;YAC3D,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAC7E,IAAI,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS;oBACT,mBAAmB;oBACnB,OAAO,EAAE,qBAAqB;oBAC9B,MAAM,EAAE,6CAA6C;oBACrD,YAAY,EAAE,CAAC,wCAAwC,CAAC;iBACzD,CAAC,CAAC;gBACH,YAAY,GAAG,CAAC,wCAAwC,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,mBAAmB,KAAK,0BAA0B,CAAC,QAAQ,CAAC;eACtE,SAAS,KAAK,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAC9C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC;gBACjD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;gBACnC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC;gBACvC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;gBACnC,SAAS;gBACT,mBAAmB;aACpB,CAAC,CAAC;YACH,IAAI,aAAa,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAClD,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS;oBACT,mBAAmB;oBACnB,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,YAAY;iBACb,CAAC,CAAC;gBACH,MAAM,GAAG,SAAS,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACvC,OAAO,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,cAAc,EAAE,OAAO,EAAE;oBAC3F,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ;iBAC/D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACrD,OAAO,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC1E,OAAO,MAAM,CAAC;oBACZ,YAAY,QAAQ,CAAC,IAAI,EAAE;oBAC3B,iBAAiB,aAAa,CAAC,IAAI,EAAE;iBACtC,EAAE,uCAAuC,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAClD,MAAM,GAAG;gBACP,GAAG,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC;gBACxC,SAAS;gBACT,mBAAmB;gBACnB,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;aACpC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAErF,IAAI,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC;gBAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS;gBACT,mBAAmB;gBACnB,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;gBACnC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;aAChC,CAAC,CAAC;YACH,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE;oBACjF,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC/C,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC;oBACX,SAAS;oBACT,mBAAmB;oBACnB,OAAO,EAAE,uBAAuB;oBAChC,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,YAAY;iBACb,CAAC,CAAC;gBACH,MAAM,GAAG,SAAS,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7C,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,MAAM,CAAC,CAAC,YAAY,SAAS,EAAE,EAAE,YAAY,OAAO,CAAC,SAAS,EAAE,CAAC,EACtE,mCAAmC,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,QAAQ;YACR,UAAU;YACV,KAAK;YACL,oBAAoB;YACpB,kBAAkB;YAClB,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC;YAClD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;YACnC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;YACnC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;YAC/B,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,cAAc,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE;gBAC7F,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;aAChF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YACtD,OAAO,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;eAC3D,cAAc,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;eACpD,cAAc,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC;gBACZ,YAAY,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE;gBAC7E,YAAY,cAAc,CAAC,QAAQ,CAAC,WAAW,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,IAAI,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE;aAC3H,EAAE,2CAA2C,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpD,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACnE,kBAAkB,GAAG,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,cAAc,CAAC;YAC3B,QAAQ;YACR,UAAU,EAAE,YAAY;YACxB,KAAK;YACL,oBAAoB;YACpB,kBAAkB;YAClB,mBAAmB;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,SAAS;YACT,mBAAmB;YACnB,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU;YAC7D,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC;gBACrB,MAAM,EAAE,qDAAqD;gBAC7D,YAAY,EAAE,CAAC,wCAAwC,CAAC;aACzD,CAAC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,YAAY,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,YAAY;QAC1B,MAAM,EAAE,kCAAkC;QAC1C,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,kCAAkC,CAAC;QAC/E,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAmC;IAC5E,OAAO,MAAM,CAAC,CAAC,qBAAqB,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CACvB,SAAiB,EACjB,QAA4B,EAC5B,mBAA2B;IAE3B,OAAO,aAAa,MAAM,CAAC,CAAC,SAAS,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,cAAc,CAAC,KAOvB;IACC,OAAO,YAAY,CAAC;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QAC9F,SAAS,EAAE,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACxE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC;QACxD,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACpD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA4B;IAC5D,OAAO,MAAM,CAAC;QACZ,QAAQ,CAAC,WAAW;QACpB,QAAQ,CAAC,OAAO;QAChB,QAAQ,CAAC,UAAU;QACnB,2BAA2B,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAA4B,EAC5B,OAAiC;IAEjC,IAAI,UAAU,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAChF,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,wBAAwB,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,UAAU,CAAC,mBAAmB,KAAK,gBAAgB,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,gBAAgB,CAAC,CAAC;QACnG,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAClF,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAChB,YAAyD,EACzD,MAAc,EACd,cAAsB,EACtB,OAAiC,EACjC,MAA+B;IAE/B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,QAAQ,CACf,QAAkB,EAClB,eAAuB,EACvB,OAAiC;IAEjC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC3C,WAAW,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC1B,eAAe;QACf,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CACb,QAAkB,EAClB,SAAiB,EACjB,OAAiC;IAEjC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAiC;IAC3D,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAiC;IAC/D,OAAO,MAAM,CAAC,OAAO;SAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,wBAAwB;WACxD,KAAK,CAAC,OAAO,KAAK,uBAAuB;WACzC,KAAK,CAAC,OAAO,KAAK,oBAAoB;WACtC,KAAK,CAAC,OAAO,KAAK,qBAAqB,CAAC;SAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;aACpE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,2BAA2B,CAClC,SAAkD;IAElD,OAAO,SAAS,CAAC,IAAI,KAAK,mBAAmB;QAC3C,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE;QAClB,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,WAAW,CAAC,KAA6B;IAChD,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB,EAAE,IAAY;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,qBAAqB,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,qBAAqB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC"}

package/dist/src/runner/mission-runtime-owner.d.ts

@@ -0,0 +1,36 @@
+import type { MissionDeploymentRecord } from './mission-deployment.js';
+export interface RuntimeOwnerRecord {
+    version: 1;
+    repository: string;
+    deploymentId: string;
+    githubAppInstallationId: string;
+    credentialGeneration: string;
+    compatibilityEpoch: number;
+    deploymentRecordHash: string;
+    approvedByCommit: string;
+    fencingEpoch: number;
+}
+export interface RuntimeOwnerObservation {
+    sha: string;
+    record: RuntimeOwnerRecord;
+}
+export interface RuntimeOwnerRefAdapter {
+    read(): Promise<RuntimeOwnerObservation | undefined>;
+    compareAndSwap(expectedSha: string | undefined, record: RuntimeOwnerRecord): Promise<RuntimeOwnerObservation>;
+}
+export declare function canonicalRuntimeOwnerRecord(record: RuntimeOwnerRecord): string;
+export declare function parseRuntimeOwnerRecord(content: string): RuntimeOwnerRecord;
+export declare function assertRuntimeOwnerRecord(value: unknown): asserts value is RuntimeOwnerRecord;
+export declare class RuntimeOwnerConflictError extends Error {
+    constructor(message: string);
+}
+export declare class MissionRuntimeOwnership {
+    private readonly adapter;
+    constructor(adapter: RuntimeOwnerRefAdapter);
+    acquireInitial(deployment: MissionDeploymentRecord): Promise<RuntimeOwnerObservation>;
+    transfer(deployment: MissionDeploymentRecord, githubServerTime: string): Promise<RuntimeOwnerObservation>;
+    assertMutationFence(deployment: MissionDeploymentRecord, expectedFencingEpoch: number): Promise<RuntimeOwnerObservation>;
+    runFencedMutation<T>(deployment: MissionDeploymentRecord, expectedFencingEpoch: number, mutation: (fence: RuntimeOwnerObservation) => Promise<T>): Promise<T>;
+}
+export declare function ownerRecord(deployment: MissionDeploymentRecord, fencingEpoch: number): RuntimeOwnerRecord;
+//# sourceMappingURL=mission-runtime-owner.d.ts.map

package/dist/src/runner/mission-runtime-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-runtime-owner.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-runtime-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGvE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,IAAI,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACrD,cAAc,CACZ,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAcD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAG9E;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAY3E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAwC5F;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAInC;AAED,qBAAa,uBAAuB;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,sBAAsB;IAEtD,cAAc,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAQrF,QAAQ,CACnB,UAAU,EAAE,uBAAuB,EACnC,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,uBAAuB,CAAC;IA+BtB,mBAAmB,CAC9B,UAAU,EAAE,uBAAuB,EACnC,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,uBAAuB,CAAC;IA8BtB,iBAAiB,CAAC,CAAC,EAC9B,UAAU,EAAE,uBAAuB,EACnC,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,CAAC,CAAC,GACvD,OAAO,CAAC,CAAC,CAAC;CAId;AAED,wBAAgB,WAAW,CACzB,UAAU,EAAE,uBAAuB,EACnC,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAepB"}

package/dist/src/runner/mission-runtime-owner.js

@@ -0,0 +1,174 @@
+import { missionDeploymentRecordHash } from './mission-deployment.js';
+const runtimeOwnerFields = [
+    'version',
+    'repository',
+    'deploymentId',
+    'githubAppInstallationId',
+    'credentialGeneration',
+    'compatibilityEpoch',
+    'deploymentRecordHash',
+    'approvedByCommit',
+    'fencingEpoch',
+];
+export function canonicalRuntimeOwnerRecord(record) {
+    assertRuntimeOwnerRecord(record);
+    return JSON.stringify(Object.fromEntries(runtimeOwnerFields.map((field) => [field, record[field]])));
+}
+export function parseRuntimeOwnerRecord(content) {
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        throw new Error('Invalid Mission runtime owner record: expected JSON.');
+    }
+    assertRuntimeOwnerRecord(parsed);
+    if (content !== canonicalRuntimeOwnerRecord(parsed)) {
+        throw new Error('Invalid Mission runtime owner record: expected canonical JSON.');
+    }
+    return parsed;
+}
+export function assertRuntimeOwnerRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new Error('Invalid Mission runtime owner record: root must be an object.');
+    }
+    const record = value;
+    const allowed = new Set(runtimeOwnerFields);
+    for (const key of Object.keys(record)) {
+        if (!allowed.has(key)) {
+            throw new Error(`Invalid Mission runtime owner record: unexpected field ${key}.`);
+        }
+    }
+    if (Object.keys(record).length !== runtimeOwnerFields.length
+        || runtimeOwnerFields.some((field) => !(field in record))) {
+        throw new Error('Invalid Mission runtime owner record: exact fields are required.');
+    }
+    if (record.version !== 1) {
+        throw new Error('Invalid Mission runtime owner record: version must be 1.');
+    }
+    for (const field of [
+        'repository',
+        'deploymentId',
+        'githubAppInstallationId',
+        'credentialGeneration',
+    ]) {
+        if (typeof record[field] !== 'string' || record[field].trim().length === 0) {
+            throw new Error(`Invalid Mission runtime owner record: ${field} must be non-empty.`);
+        }
+    }
+    if (!Number.isSafeInteger(record.compatibilityEpoch) || record.compatibilityEpoch <= 0
+        || !Number.isSafeInteger(record.fencingEpoch) || record.fencingEpoch <= 0) {
+        throw new Error('Invalid Mission runtime owner record: epochs must be positive integers.');
+    }
+    if (typeof record.deploymentRecordHash !== 'string'
+        || !/^sha256:[a-f0-9]{64}$/u.test(record.deploymentRecordHash)) {
+        throw new Error('Invalid Mission runtime owner record: deploymentRecordHash must be SHA-256.');
+    }
+    if (typeof record.approvedByCommit !== 'string'
+        || !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(record.approvedByCommit)) {
+        throw new Error('Invalid Mission runtime owner record: approvedByCommit must be a Git object ID.');
+    }
+}
+export class RuntimeOwnerConflictError extends Error {
+    constructor(message) {
+        super(`Mission runtime owner conflict: ${message}`);
+        this.name = 'RuntimeOwnerConflictError';
+    }
+}
+export class MissionRuntimeOwnership {
+    adapter;
+    constructor(adapter) {
+        this.adapter = adapter;
+    }
+    async acquireInitial(deployment) {
+        const observed = await this.adapter.read();
+        if (observed) {
+            throw new RuntimeOwnerConflictError(`already owned by ${observed.record.deploymentId}`);
+        }
+        return this.adapter.compareAndSwap(undefined, ownerRecord(deployment, 1));
+    }
+    async transfer(deployment, githubServerTime) {
+        const observed = await this.adapter.read();
+        if (!observed) {
+            throw new RuntimeOwnerConflictError('cannot transfer an absent owner; use initial acquisition');
+        }
+        if (deployment.repository !== observed.record.repository) {
+            throw new RuntimeOwnerConflictError('repository does not match current owner');
+        }
+        if (deployment.deploymentId === observed.record.deploymentId) {
+            throw new RuntimeOwnerConflictError('transfer requires a different deployment ID');
+        }
+        const now = exactTimestamp(githubServerTime, 'GitHub server time');
+        const notBefore = exactTimestamp(deployment.takeoverNotBefore, 'takeoverNotBefore');
+        if (now < notBefore) {
+            throw new RuntimeOwnerConflictError(`takeoverNotBefore is ${deployment.takeoverNotBefore}`);
+        }
+        if (exactTimestamp(deployment.priorCredentialRevokedAt, 'priorCredentialRevokedAt') > now) {
+            throw new RuntimeOwnerConflictError('prior credential revocation is not yet observed');
+        }
+        if (deployment.credentialGeneration === observed.record.credentialGeneration) {
+            throw new RuntimeOwnerConflictError('transfer requires a new credential generation');
+        }
+        if (deployment.compatibilityEpoch < observed.record.compatibilityEpoch) {
+            throw new RuntimeOwnerConflictError('compatibility epoch cannot move backward');
+        }
+        return this.adapter.compareAndSwap(observed.sha, ownerRecord(deployment, observed.record.fencingEpoch + 1));
+    }
+    async assertMutationFence(deployment, expectedFencingEpoch) {
+        if (!Number.isSafeInteger(expectedFencingEpoch) || expectedFencingEpoch <= 0) {
+            throw new RuntimeOwnerConflictError('fencing epoch must be a positive integer');
+        }
+        const observed = await this.adapter.read();
+        if (!observed) {
+            throw new RuntimeOwnerConflictError('owner ref is absent');
+        }
+        const expected = ownerRecord(deployment, expectedFencingEpoch);
+        if (observed.record.credentialGeneration !== expected.credentialGeneration) {
+            throw new RuntimeOwnerConflictError('credential generation does not match current owner');
+        }
+        for (const field of [
+            'repository',
+            'deploymentId',
+            'githubAppInstallationId',
+            'compatibilityEpoch',
+            'deploymentRecordHash',
+            'approvedByCommit',
+        ]) {
+            if (observed.record[field] !== expected[field]) {
+                throw new RuntimeOwnerConflictError(`${field} does not match the protected deployment record`);
+            }
+        }
+        if (observed.record.fencingEpoch !== expectedFencingEpoch) {
+            throw new RuntimeOwnerConflictError('fencing epoch does not match current owner');
+        }
+        return observed;
+    }
+    async runFencedMutation(deployment, expectedFencingEpoch, mutation) {
+        const fence = await this.assertMutationFence(deployment, expectedFencingEpoch);
+        return mutation(fence);
+    }
+}
+export function ownerRecord(deployment, fencingEpoch) {
+    if (!Number.isSafeInteger(fencingEpoch) || fencingEpoch <= 0) {
+        throw new Error('Mission runtime owner fencingEpoch must be a positive integer.');
+    }
+    return {
+        version: 1,
+        repository: deployment.repository,
+        deploymentId: deployment.deploymentId,
+        githubAppInstallationId: deployment.githubAppInstallationId,
+        credentialGeneration: deployment.credentialGeneration,
+        compatibilityEpoch: deployment.compatibilityEpoch,
+        deploymentRecordHash: missionDeploymentRecordHash(deployment),
+        approvedByCommit: deployment.approvedByCommit,
+        fencingEpoch,
+    };
+}
+function exactTimestamp(value, field) {
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed) || new Date(parsed).toISOString() !== value) {
+        throw new RuntimeOwnerConflictError(`${field} is not an exact UTC ISO timestamp`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=mission-runtime-owner.js.map

package/dist/src/runner/mission-runtime-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-runtime-owner.js","sourceRoot":"","sources":["../../../src/runner/mission-runtime-owner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AA2BtE,MAAM,kBAAkB,GAA4C;IAClE,SAAS;IACT,YAAY;IACZ,cAAc;IACd,yBAAyB;IACzB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,kBAAkB;IAClB,cAAc;CACf,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,MAA0B;IACpE,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,2BAA2B,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,GAAG,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM;WACvD,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,KAAK,IAAI;QAClB,YAAY;QACZ,cAAc;QACd,yBAAyB;QACzB,sBAAsB;KACvB,EAAE,CAAC;QACF,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,MAAM,CAAC,KAAK,CAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,qBAAqB,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAK,MAAM,CAAC,kBAA6B,IAAI,CAAC;WAC7F,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAK,MAAM,CAAC,YAAuB,IAAI,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;WAC9C,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;WAC1C,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAmB,OAAe;QAChC,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,uBAAuB;IACE;IAApC,YAAoC,OAA+B;QAA/B,YAAO,GAAP,OAAO,CAAwB;IAAG,CAAC;IAEhE,KAAK,CAAC,cAAc,CAAC,UAAmC;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,UAAmC,EACnC,gBAAwB;QAExB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,yBAAyB,CAAC,0DAA0D,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzD,MAAM,IAAI,yBAAyB,CAAC,yCAAyC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,UAAU,CAAC,YAAY,KAAK,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7D,MAAM,IAAI,yBAAyB,CAAC,6CAA6C,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACpF,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,yBAAyB,CAAC,wBAAwB,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,cAAc,CAAC,UAAU,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,GAAG,GAAG,EAAE,CAAC;YAC1F,MAAM,IAAI,yBAAyB,CAAC,iDAAiD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,UAAU,CAAC,oBAAoB,KAAK,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAC7E,MAAM,IAAI,yBAAyB,CAAC,+CAA+C,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACvE,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAChC,QAAQ,CAAC,GAAG,EACZ,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAC9B,UAAmC,EACnC,oBAA4B;QAE5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YAC3E,MAAM,IAAI,yBAAyB,CAAC,oDAAoD,CAAC,CAAC;QAC5F,CAAC;QACD,KAAK,MAAM,KAAK,IAAI;YAClB,YAAY;YACZ,cAAc;YACd,yBAAyB;YACzB,oBAAoB;YACpB,sBAAsB;YACtB,kBAAkB;SACV,EAAE,CAAC;YACX,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,oBAAoB,EAAE,CAAC;YAC1D,MAAM,IAAI,yBAAyB,CAAC,4CAA4C,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC5B,UAAmC,EACnC,oBAA4B,EAC5B,QAAwD;QAExD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC/E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CACzB,UAAmC,EACnC,YAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,uBAAuB,EAAE,UAAU,CAAC,uBAAuB;QAC3D,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;QACrD,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,oBAAoB,EAAE,2BAA2B,CAAC,UAAU,CAAC;QAC7D,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACzE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/runner/mission-safe-executor.d.ts

@@ -0,0 +1,96 @@
+import { type MissionExecutorProbeResult } from './mission-executor-probe.js';
+import { type MissionProcessInput, type MissionProcessResult } from './mission-process-executor.js';
+import type { MissionSandboxBackend } from './mission-capability-kernel.js';
+export declare const missionSafeExecutorKinds: readonly ["completion-report-repair", "review-evidence-repair", "acceptance-proof-repair", "configured-check"];
+export type MissionSafeExecutorKind = (typeof missionSafeExecutorKinds)[number];
+export interface MissionSafeExecutorDescriptor {
+    id: string;
+    kind: MissionSafeExecutorKind;
+    executable: string;
+    args: string[];
+    readPaths: string[];
+    writePaths: string[];
+    network: 'deny';
+    idempotency: 'repeat-safe' | 'reconcile';
+}
+export interface MissionSafeExecutorPermit extends MissionSafeExecutorDescriptor {
+    missionId: string;
+    actionKey: string;
+    executorId: string;
+    grantedPaths: string[];
+    inputSnapshot: string;
+    fencingEpoch: number;
+    expiresAt: string;
+    descriptorFingerprint: string;
+}
+export interface MissionSafeExecutorAuthorizationRequest {
+    missionId: string;
+    actionKey: string;
+    executorId: string;
+    grantedPaths: string[];
+    inputSnapshot: string;
+    fencingEpoch: number;
+    expiresAt: string;
+}
+export type MissionSafeExecutorClassification = {
+    kind: 'safe-executor';
+    descriptor: MissionSafeExecutorDescriptor;
+} | {
+    kind: 'external-input-required';
+    reason: 'legacy-shell-executor-unavailable-in-mission-mode';
+    migration: 'register an exact argv Mission safe executor';
+};
+export interface MissionSafeExecutorOptions {
+    backend: MissionSandboxBackend;
+    workspaceRoot: string;
+    quarantineRoot: string;
+    deniedReadPaths: string[];
+    sourceEnv: NodeJS.ProcessEnv;
+    allowedEnvKeys: string[];
+    timeoutMs: number;
+    capabilityProof: MissionExecutorProbeResult;
+}
+export interface MissionSafeExecutorReceipt {
+    version: 1;
+    missionId: string;
+    actionKey: string;
+    executorId: string;
+    descriptorFingerprint: string;
+    exitCode: number;
+    termination: MissionProcessResult['termination'];
+    stdoutSha256: string;
+    stderrSha256: string;
+    outputs: Array<{
+        path: string;
+        size: number;
+        sha256: string;
+    }>;
+}
+export interface MissionSafeExecutorResult {
+    process: MissionProcessResult;
+    receipt: MissionSafeExecutorReceipt;
+}
+export interface MissionSafeExecutorDependencies {
+    runProcess?: (input: MissionProcessInput) => Promise<MissionProcessResult>;
+    now?: () => Date;
+}
+export declare class MissionSafeExecutorRegistry {
+    private readonly descriptors;
+    constructor(descriptors: MissionSafeExecutorDescriptor[]);
+    authorize(request: MissionSafeExecutorAuthorizationRequest): MissionSafeExecutorPermit;
+    classify(input: string | {
+        executorId: string;
+    }): MissionSafeExecutorClassification;
+    kinds(): MissionSafeExecutorKind[];
+    validatePermit(permit: MissionSafeExecutorPermit, now: Date): MissionSafeExecutorPermit;
+}
+export declare class MissionSafeExecutor {
+    private readonly registry;
+    private readonly options;
+    private readonly runProcess;
+    private readonly now;
+    constructor(registry: MissionSafeExecutorRegistry, options: MissionSafeExecutorOptions, dependencies?: MissionSafeExecutorDependencies);
+    execute(permit: MissionSafeExecutorPermit): Promise<MissionSafeExecutorResult>;
+}
+export declare function missionSafeExecutorPermitFingerprint(permit: MissionSafeExecutorPermit): string;
+//# sourceMappingURL=mission-safe-executor.d.ts.map