codex-orchestrator 0.1.47 → 0.1.48

package/dist/src/runner/mission-git-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-git-contracts.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-git-contracts.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,qBAAqB,CAAC;IACjC,MAAM,EAAE,wBAAwB,CAAC;CAClC,GAAG,kBAAkB,CAiBrB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAgC7E;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAGhF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAG1G;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAQ5F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAc9F"}

package/dist/src/runner/mission-git-contracts.js

@@ -0,0 +1,201 @@
+import { createHash } from 'node:crypto';
+export function createMissionApplyPermit(input) {
+    return validateMissionApplyPermit({
+        version: 1,
+        missionId: input.missionId,
+        actionKey: input.actionKey,
+        fencingEpoch: input.fencingEpoch,
+        expiresAt: input.expiresAt,
+        targetRef: input.targetRef,
+        auditReceiptSha256: input.auditReceiptSha256,
+        patchSha256: input.candidate.patchSha256,
+        expectedOldCommit: input.candidate.baseCommit,
+        expectedOldTree: input.candidate.baseTree,
+        expectedNewCommit: input.candidate.commitSha,
+        expectedNewTree: input.candidate.treeSha,
+        manifest: input.candidate.manifest,
+        commit: input.commit,
+    });
+}
+export function validateMissionApplyPermit(value) {
+    const permit = object(value, 'Mission apply permit');
+    exactKeys(permit, [
+        'version', 'missionId', 'actionKey', 'fencingEpoch', 'expiresAt', 'targetRef',
+        'auditReceiptSha256', 'patchSha256', 'expectedOldCommit', 'expectedOldTree',
+        'expectedNewCommit', 'expectedNewTree', 'manifest', 'commit',
+    ], 'Mission apply permit');
+    if (permit.version !== 1)
+        fail('version must be 1');
+    nonEmpty(permit.missionId, 'missionId');
+    nonEmpty(permit.actionKey, 'actionKey');
+    if (!Number.isInteger(permit.fencingEpoch) || permit.fencingEpoch <= 0)
+        fail('fencingEpoch must be positive');
+    timestamp(permit.expiresAt, 'expiresAt');
+    if (!/^refs\/(?:heads|codex-orchestrator)\/[A-Za-z0-9._\/-]+$/u.test(permit.targetRef)
+        || permit.targetRef.includes('..') || permit.targetRef.endsWith('/') || permit.targetRef.includes('//')
+        || permit.targetRef.split('/').some((segment) => segment.startsWith('.') || segment.endsWith('.lock'))) {
+        fail('targetRef must be an allowed full ref');
+    }
+    digest(permit.auditReceiptSha256, 'auditReceiptSha256');
+    digest(permit.patchSha256, 'patchSha256');
+    objectId(permit.expectedOldCommit, 'expectedOldCommit');
+    objectId(permit.expectedOldTree, 'expectedOldTree');
+    objectId(permit.expectedNewCommit, 'expectedNewCommit');
+    objectId(permit.expectedNewTree, 'expectedNewTree');
+    if (!Array.isArray(permit.manifest) || permit.manifest.length === 0)
+        fail('manifest must be non-empty');
+    const paths = new Set();
+    for (const [index, entry] of permit.manifest.entries()) {
+        validateManifestEntry(entry, `manifest[${index}]`);
+        if (paths.has(entry.path))
+            fail(`manifest contains duplicate path ${entry.path}`);
+        paths.add(entry.path);
+    }
+    validateCommitIdentity(permit.commit);
+    return structuredClone(permit);
+}
+export function missionApplyPermitFingerprint(permit) {
+    const valid = validateMissionApplyPermit(permit);
+    return `sha256:${createHash('sha256').update(canonicalJson(valid), 'utf8').digest('hex')}`;
+}
+export function validateMissionGitCommitIdentity(value) {
+    validateCommitIdentity(value);
+    return structuredClone(value);
+}
+export function assertMissionApplyIntent(value) {
+    const intent = object(value, 'Mission apply intent');
+    exactKeys(intent, ['version', 'permitFingerprint', 'permit', 'preparedAt'], 'Mission apply intent');
+    if (intent.version !== 1)
+        fail('apply intent version must be 1');
+    digest(intent.permitFingerprint, 'apply intent permitFingerprint');
+    const permit = validateMissionApplyPermit(intent.permit);
+    if (intent.permitFingerprint !== missionApplyPermitFingerprint(permit))
+        fail('apply intent fingerprint does not match permit');
+    timestamp(intent.preparedAt, 'apply intent preparedAt');
+}
+export function assertMissionApplyReceipt(value) {
+    const receipt = object(value, 'Mission apply receipt');
+    exactKeys(receipt, [
+        'version', 'permitFingerprint', 'targetRef', 'oldCommitSha', 'commitSha',
+        'treeSha', 'recovered', 'appliedAt',
+    ], 'Mission apply receipt');
+    if (receipt.version !== 1)
+        fail('apply receipt version must be 1');
+    digest(receipt.permitFingerprint, 'apply receipt permitFingerprint');
+    nonEmpty(receipt.targetRef, 'apply receipt targetRef');
+    objectId(receipt.oldCommitSha, 'apply receipt oldCommitSha');
+    objectId(receipt.commitSha, 'apply receipt commitSha');
+    objectId(receipt.treeSha, 'apply receipt treeSha');
+    if (typeof receipt.recovered !== 'boolean')
+        fail('apply receipt recovered must be boolean');
+    timestamp(receipt.appliedAt, 'apply receipt appliedAt');
+}
+function validateManifestEntry(entry, path) {
+    const record = object(entry, path);
+    exactKeys(record, [
+        'path', 'operation', 'oldMode', 'newMode', 'beforeBlob', 'afterBlob',
+        'beforeSha256', 'afterSha256',
+    ], path);
+    nonEmpty(entry.path, `${path}.path`);
+    if (entry.path.startsWith('/') || entry.path.split('/').includes('..') || entry.path === '.git' || entry.path.startsWith('.git/')) {
+        fail(`${path}.path is not a repository-relative path`);
+    }
+    if (/[\0\r\n\\]/u.test(entry.path))
+        fail(`${path}.path contains forbidden characters`);
+    if (!['add', 'delete', 'modify'].includes(entry.operation))
+        fail(`${path}.operation is invalid`);
+    nullableMode(entry.oldMode, `${path}.oldMode`);
+    nullableMode(entry.newMode, `${path}.newMode`);
+    nullableObjectId(entry.beforeBlob, `${path}.beforeBlob`);
+    nullableObjectId(entry.afterBlob, `${path}.afterBlob`);
+    nullableDigest(entry.beforeSha256, `${path}.beforeSha256`);
+    nullableDigest(entry.afterSha256, `${path}.afterSha256`);
+    if (entry.operation === 'add' && (entry.oldMode !== null || entry.beforeBlob !== null || entry.beforeSha256 !== null
+        || entry.newMode === null || entry.afterBlob === null || entry.afterSha256 === null))
+        fail(`${path} add must have only a complete new side`);
+    if (entry.operation === 'delete' && (entry.newMode !== null || entry.afterBlob !== null || entry.afterSha256 !== null
+        || entry.oldMode === null || entry.beforeBlob === null || entry.beforeSha256 === null))
+        fail(`${path} delete must have only a complete old side`);
+    if (entry.operation === 'modify' && (entry.oldMode === null || entry.newMode === null
+        || entry.beforeBlob === null || entry.afterBlob === null
+        || entry.beforeSha256 === null || entry.afterSha256 === null))
+        fail(`${path} modify must have both complete sides`);
+}
+function validateCommitIdentity(value) {
+    const identity = object(value, 'Mission commit identity');
+    exactKeys(identity, [
+        'message', 'authorName', 'authorEmail', 'authoredAt', 'committerName',
+        'committerEmail', 'committedAt',
+    ], 'Mission commit identity');
+    for (const field of ['message', 'authorName', 'authorEmail', 'committerName', 'committerEmail']) {
+        nonEmpty(value[field], `commit.${field}`);
+        if (value[field].includes('\0') || value[field].includes('\r'))
+            fail(`commit.${field} contains forbidden characters`);
+    }
+    for (const field of ['authorName', 'authorEmail', 'committerName', 'committerEmail']) {
+        if (value[field].includes('\n'))
+            fail(`commit.${field} contains forbidden characters`);
+    }
+    timestamp(value.authoredAt, 'commit.authoredAt');
+    timestamp(value.committedAt, 'commit.committedAt');
+}
+function canonicalJson(value) {
+    return JSON.stringify(canonicalValue(value));
+}
+function canonicalValue(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalValue);
+    if (typeof value === 'object' && value !== null) {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, child]) => [key, canonicalValue(child)]));
+    }
+    return value;
+}
+function object(value, label) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new Error(`${label} must be an object.`);
+    return value;
+}
+function exactKeys(value, allowed, label) {
+    const allowedSet = new Set(allowed);
+    for (const key of Object.keys(value))
+        if (!allowedSet.has(key))
+            throw new Error(`${label} has unexpected field ${key}.`);
+    for (const key of allowed)
+        if (!(key in value))
+            throw new Error(`${label} is missing field ${key}.`);
+}
+function nonEmpty(value, label) {
+    if (typeof value !== 'string' || value.length === 0)
+        fail(`${label} must be non-empty`);
+}
+function timestamp(value, label) {
+    nonEmpty(value, label);
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u.test(value) || Number.isNaN(Date.parse(value)))
+        fail(`${label} must be an ISO timestamp`);
+}
+function digest(value, label) {
+    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
+        fail(`${label} must be sha256 hex`);
+}
+function nullableDigest(value, label) {
+    if (value !== null)
+        digest(value, label);
+}
+function objectId(value, label) {
+    if (typeof value !== 'string' || !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(value))
+        fail(`${label} must be a Git object ID`);
+}
+function nullableObjectId(value, label) {
+    if (value !== null)
+        objectId(value, label);
+}
+function nullableMode(value, label) {
+    if (value !== null && value !== '100644')
+        fail(`${label} must be 100644 or null`);
+}
+function fail(message) {
+    throw new Error(`Invalid Mission apply contract: ${message}.`);
+}
+//# sourceMappingURL=mission-git-contracts.js.map

package/dist/src/runner/mission-git-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-git-contracts.js","sourceRoot":"","sources":["../../../src/runner/mission-git-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmEzC,MAAM,UAAU,wBAAwB,CAAC,KASxC;IACC,OAAO,0BAA0B,CAAC;QAChC,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;QACxC,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU;QAC7C,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;QACzC,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS;QAC5C,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO;QACxC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAkC,CAAC;IACtF,SAAS,CAAC,MAA4C,EAAE;QACtD,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW;QAC7E,oBAAoB,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB;QAC3E,mBAAmB,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ;KAC7D,EAAE,sBAAsB,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC9G,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,0DAA0D,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;WACjF,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;WACpG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzG,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACxD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,qBAAqB,CAAC,KAAK,EAAE,YAAY,KAAK,GAAG,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,oCAAoC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA0B;IACtE,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA+B;IAC9E,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACrD,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACpG,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,iBAAiB,KAAK,6BAA6B,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC/H,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACvD,SAAS,CAAC,OAAO,EAAE;QACjB,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW;QACxE,SAAS,EAAE,WAAW,EAAE,WAAW;KACpC,EAAE,uBAAuB,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACnE,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACvD,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACvD,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACnD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC5F,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B,EAAE,IAAY;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,SAAS,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW;QACpE,cAAc,EAAE,aAAa;KAC9B,EAAE,IAAI,CAAC,CAAC;IACT,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClI,IAAI,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IACjG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;IAC/C,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;IAC/C,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IACzD,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;IACvD,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IAC3D,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;WAC/G,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IAC/I,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;WAChH,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;IACpJ,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;WAChF,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;WACrD,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA+B;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IAC1D,SAAS,CAAC,QAAQ,EAAE;QAClB,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe;QACrE,gBAAgB,EAAE,aAAa;KAChC,EAAE,yBAAyB,CAAC,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACzG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,KAAK,gCAAgC,CAAC,CAAC;IACxH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,CAAU,EAAE,CAAC;QAC9F,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,KAAK,gCAAgC,CAAC,CAAC;IACzF,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjD,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACxH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,OAAiB,EAAE,KAAa;IACjF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,GAAG,GAAG,CAAC,CAAC;IACzH,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,GAAG,GAAG,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;AAClJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC;AACjE,CAAC"}

package/dist/src/runner/mission-git-runtime-owner-ref.d.ts

@@ -0,0 +1,13 @@
+import type { ProcessExecutor } from '../process/command.js';
+import { type RuntimeOwnerObservation, type RuntimeOwnerRecord, type RuntimeOwnerRefAdapter } from './mission-runtime-owner.js';
+export declare class GitRuntimeOwnerRefAdapter implements RuntimeOwnerRefAdapter {
+    private readonly targetRoot;
+    private readonly execute;
+    private readonly remote;
+    private readonly ownerRef;
+    constructor(targetRoot: string, execute?: ProcessExecutor, remote?: string, ownerRef?: string);
+    read(): Promise<RuntimeOwnerObservation | undefined>;
+    compareAndSwap(expectedSha: string | undefined, record: RuntimeOwnerRecord): Promise<RuntimeOwnerObservation>;
+    private git;
+}
+//# sourceMappingURL=mission-git-runtime-owner-ref.d.ts.map

package/dist/src/runner/mission-git-runtime-owner-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-git-runtime-owner-ref.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-git-runtime-owner-ref.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAIL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,4BAA4B,CAAC;AAKpC,qBAAa,yBAA0B,YAAW,sBAAsB;IAEpE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAHR,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAwC,EACjD,MAAM,SAAW,EACjB,QAAQ,SAAkB;IAGhC,IAAI,IAAI,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAiCpD,cAAc,CACzB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,uBAAuB,CAAC;YAyCrB,GAAG;CAelB"}

package/dist/src/runner/mission-git-runtime-owner-ref.js

@@ -0,0 +1,111 @@
+import { randomUUID } from 'node:crypto';
+import { defaultProcessExecutor } from '../process/command.js';
+import { canonicalRuntimeOwnerRecord, parseRuntimeOwnerRecord, RuntimeOwnerConflictError, } from './mission-runtime-owner.js';
+const defaultOwnerRef = 'refs/codex-orchestrator/runtime-owner-v1';
+const ownerFile = 'codex-orchestrator-runtime-owner-v1.json';
+export class GitRuntimeOwnerRefAdapter {
+    targetRoot;
+    execute;
+    remote;
+    ownerRef;
+    constructor(targetRoot, execute = defaultProcessExecutor, remote = 'origin', ownerRef = defaultOwnerRef) {
+        this.targetRoot = targetRoot;
+        this.execute = execute;
+        this.remote = remote;
+        this.ownerRef = ownerRef;
+    }
+    async read() {
+        const listed = await this.git(['ls-remote', '--refs', this.remote, this.ownerRef]);
+        const lines = listed.stdout.trim().length === 0
+            ? []
+            : listed.stdout.trim().split(/\r?\n/u);
+        if (lines.length === 0) {
+            return undefined;
+        }
+        if (lines.length !== 1) {
+            throw new RuntimeOwnerConflictError('remote owner ref is ambiguous');
+        }
+        const match = /^([a-f0-9]{40}(?:[a-f0-9]{24})?)\s+(.+)$/u.exec(lines[0] ?? '');
+        if (!match || match[2] !== this.ownerRef) {
+            throw new RuntimeOwnerConflictError('remote owner ref response is malformed');
+        }
+        const sha = match[1];
+        const observedRef = `refs/codex-orchestrator/observed/${process.pid}-${randomUUID()}`;
+        await this.git(['fetch', '--no-tags', this.remote, `+${this.ownerRef}:${observedRef}`]);
+        try {
+            const fetchedSha = objectId(await this.git(['rev-parse', observedRef]), 'observed owner');
+            if (fetchedSha !== sha) {
+                throw new RuntimeOwnerConflictError('owner ref moved between listing and fetch');
+            }
+            const shown = await this.git(['show', `${observedRef}:${ownerFile}`]);
+            return {
+                sha,
+                record: parseRuntimeOwnerRecord(shown.stdout.replace(/\r?\n$/u, '')),
+            };
+        }
+        finally {
+            await this.git(['update-ref', '-d', observedRef]);
+        }
+    }
+    async compareAndSwap(expectedSha, record) {
+        const canonical = canonicalRuntimeOwnerRecord(record);
+        const blob = objectId(await this.git(['hash-object', '-w', '--stdin'], canonical), 'blob');
+        const tree = objectId(await this.git(['mktree'], `100644 blob ${blob}\t${ownerFile}\n`), 'tree');
+        const commit = objectId(await this.git(['commit-tree', tree, '-m', `codex-orchestrator runtime owner epoch ${record.fencingEpoch}`], undefined, fixedGitIdentityEnv()), 'commit');
+        const lease = `--force-with-lease=${this.ownerRef}:${expectedSha ?? ''}`;
+        const pushed = await this.execute('git', [
+            'push',
+            lease,
+            this.remote,
+            `${commit}:${this.ownerRef}`,
+        ], { cwd: this.targetRoot });
+        if (pushed.exitCode !== 0) {
+            try {
+                const reconciled = await this.read();
+                if (reconciled?.sha === commit
+                    && canonicalRuntimeOwnerRecord(reconciled.record) === canonical) {
+                    return reconciled;
+                }
+            }
+            catch {
+                // Preserve the compare-and-swap failure below when reconciliation is unavailable.
+            }
+            throw new RuntimeOwnerConflictError(`compare-and-swap failed${pushed.stderr.trim() ? `: ${pushed.stderr.trim()}` : ''}`);
+        }
+        const observed = await this.read();
+        if (!observed || observed.sha !== commit
+            || canonicalRuntimeOwnerRecord(observed.record) !== canonical) {
+            throw new RuntimeOwnerConflictError('post-push owner ref does not match the requested record');
+        }
+        return observed;
+    }
+    async git(args, stdin, env) {
+        const result = await this.execute('git', args, {
+            cwd: this.targetRoot,
+            ...(stdin === undefined ? {} : { stdin }),
+            ...(env === undefined ? {} : { env }),
+        });
+        if (result.exitCode !== 0) {
+            throw new Error(`Git runtime-owner command failed: git ${args.join(' ')}: ${result.stderr.trim()}`);
+        }
+        return result;
+    }
+}
+function objectId(result, kind) {
+    const id = result.stdout.trim();
+    if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(id)) {
+        throw new Error(`Git runtime-owner ${kind} command returned an invalid object ID.`);
+    }
+    return id;
+}
+function fixedGitIdentityEnv() {
+    return {
+        ...(process.env.PATH ? { PATH: process.env.PATH } : {}),
+        ...(process.env.HOME ? { HOME: process.env.HOME } : {}),
+        GIT_AUTHOR_NAME: 'codex-orchestrator',
+        GIT_AUTHOR_EMAIL: 'codex-orchestrator@localhost',
+        GIT_COMMITTER_NAME: 'codex-orchestrator',
+        GIT_COMMITTER_EMAIL: 'codex-orchestrator@localhost',
+    };
+}
+//# sourceMappingURL=mission-git-runtime-owner-ref.js.map

package/dist/src/runner/mission-git-runtime-owner-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-git-runtime-owner-ref.js","sourceRoot":"","sources":["../../../src/runner/mission-git-runtime-owner-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,GAI1B,MAAM,4BAA4B,CAAC;AAEpC,MAAM,eAAe,GAAG,0CAA0C,CAAC;AACnE,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAE7D,MAAM,OAAO,yBAAyB;IAEjB;IACA;IACA;IACA;IAJnB,YACmB,UAAkB,EAClB,UAA2B,sBAAsB,EACjD,SAAS,QAAQ,EACjB,WAAW,eAAe;QAH1B,eAAU,GAAV,UAAU,CAAQ;QAClB,YAAO,GAAP,OAAO,CAA0C;QACjD,WAAM,GAAN,MAAM,CAAW;QACjB,aAAQ,GAAR,QAAQ,CAAkB;IAC1C,CAAC;IAEG,KAAK,CAAC,IAAI;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,yBAAyB,CAAC,wCAAwC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,oCAAoC,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC;QACtF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAC1F,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,yBAAyB,CAAC,2CAA2C,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO;gBACL,GAAG;gBACH,MAAM,EAAE,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;aACrE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,WAA+B,EAC/B,MAA0B;QAE1B,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAClC,CAAC,QAAQ,CAAC,EACV,eAAe,IAAI,KAAK,SAAS,IAAI,CACtC,EAAE,MAAM,CAAC,CAAC;QACX,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CACpC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,MAAM,CAAC,YAAY,EAAE,CAAC,EAC5F,SAAS,EACT,mBAAmB,EAAE,CACtB,EAAE,QAAQ,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,sBAAsB,IAAI,CAAC,QAAQ,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YACvC,MAAM;YACN,KAAK;YACL,IAAI,CAAC,MAAM;YACX,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE;SAC7B,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,UAAU,EAAE,GAAG,KAAK,MAAM;uBACzB,2BAA2B,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClE,OAAO,UAAU,CAAC;gBACpB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kFAAkF;YACpF,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,0BAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM;eACnC,2BAA2B,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,IAAI,yBAAyB,CAAC,yDAAyD,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,IAAc,EACd,KAAc,EACd,GAA4B;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE;YAC7C,GAAG,EAAE,IAAI,CAAC,UAAU;YACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,MAA0B,EAAE,IAAY;IACxD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,yCAAyC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,eAAe,EAAE,oBAAoB;QACrC,gBAAgB,EAAE,8BAA8B;QAChD,kBAAkB,EAAE,oBAAoB;QACxC,mBAAmB,EAAE,8BAA8B;KACpD,CAAC;AACJ,CAAC"}

package/dist/src/runner/mission-git-transaction.d.ts

@@ -0,0 +1,97 @@
+import type { ProcessExecutor } from '../process/command.js';
+import type { MissionPatchFile } from './mission-patch-audit.js';
+import { type MissionApplyPermit, type MissionApplyReceipt, type MissionGitCommitIdentity, type MissionGitManifestEntry, type MissionPatchCandidate } from './mission-git-contracts.js';
+import { MissionStateStore } from './mission-state-store.js';
+export { createMissionApplyPermit, missionApplyPermitFingerprint, type MissionApplyPermit, type MissionApplyReceipt, type MissionGitCommitIdentity, type MissionGitManifestEntry, type MissionPatchCandidate, } from './mission-git-contracts.js';
+export declare const missionGitBoundaries: readonly ["base-verified", "isolated-index-created", "patch-applied", "tree-written", "manifest-proved", "commit-created", "intent-persisted", "ref-updated", "receipt-persisted"];
+export type MissionGitBoundary = (typeof missionGitBoundaries)[number];
+export interface MissionBinaryProcessResult {
+    stdout: Buffer;
+    stderr: Buffer;
+    exitCode: number;
+}
+export type MissionBinaryProcessExecutor = (file: string, args: string[], options: {
+    cwd: string;
+    env: Record<string, string>;
+    timeoutMs: number;
+    maxOutputBytes: number;
+}) => Promise<MissionBinaryProcessResult>;
+export declare const defaultMissionBinaryProcessExecutor: MissionBinaryProcessExecutor;
+export declare class MissionGitSafetyStopError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare class MissionGitIntegrationConflictError extends Error {
+    readonly paths: string[];
+    constructor(paths: string[]);
+}
+export declare class MissionGitReauthorizationRequiredError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export interface MissionTreeIntegrationCandidate {
+    baseCommit: string;
+    parentCommit: string;
+    childCommit: string;
+    parentTree: string;
+    treeSha: string;
+    commitSha: string;
+    manifest: MissionGitManifestEntry[];
+}
+export interface BuildMissionPatchCandidateInput {
+    targetRoot: string;
+    baseCommit: string;
+    patch: string;
+    auditedFiles: MissionPatchFile[];
+    commit: MissionGitCommitIdentity;
+    execute?: ProcessExecutor;
+    executeBinary?: MissionBinaryProcessExecutor;
+    onBoundary?: (boundary: MissionGitBoundary) => void | Promise<void>;
+    temporaryRoot?: string;
+}
+export declare function buildMissionPatchCandidate(input: BuildMissionPatchCandidateInput): Promise<MissionPatchCandidate>;
+export declare function buildMissionTreeIntegrationCandidate(input: {
+    targetRoot: string;
+    baseCommit: string;
+    parentCommit: string;
+    childCommit: string;
+    commit: MissionGitCommitIdentity;
+    execute?: ProcessExecutor;
+    executeBinary?: MissionBinaryProcessExecutor;
+}): Promise<MissionTreeIntegrationCandidate>;
+export declare function applyMissionTreeIntegration(input: {
+    targetRoot: string;
+    targetRef: string;
+    baseCommit: string;
+    parentCommit: string;
+    childCommit: string;
+    commit: MissionGitCommitIdentity;
+    fencingEpoch: number;
+    assertOwnership: (fencingEpoch: number) => void | Promise<void>;
+    execute?: ProcessExecutor;
+    executeBinary?: MissionBinaryProcessExecutor;
+}): Promise<MissionTreeIntegrationCandidate>;
+export interface MissionGitTransactionOptions {
+    targetRoot: string;
+    stateStore: MissionStateStore;
+    assertOwnership: (fencingEpoch: number) => void | Promise<void>;
+    execute?: ProcessExecutor;
+    executeBinary?: MissionBinaryProcessExecutor;
+    now?: () => Date;
+    onBoundary?: (boundary: MissionGitBoundary) => void | Promise<void>;
+}
+export declare class MissionGitTransaction {
+    private readonly options;
+    private readonly execute;
+    private readonly now;
+    constructor(options: MissionGitTransactionOptions);
+    apply(permitValue: MissionApplyPermit, patch: string): Promise<MissionApplyReceipt>;
+    recover(permitValue: MissionApplyPermit): Promise<MissionApplyReceipt>;
+    private prepareIntent;
+    private persistReceipt;
+    private readTargetIdentity;
+    private isOldIdentity;
+    private persistReauthorization;
+    private persistSafetyStop;
+}
+//# sourceMappingURL=mission-git-transaction.d.ts.map

package/dist/src/runner/mission-git-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-git-transaction.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-git-transaction.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAI7D,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,eAAO,MAAM,oBAAoB,oLAUvB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAOvE,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG,CACzC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,KACE,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAEzC,eAAO,MAAM,mCAAmC,EAAE,4BAqDhD,CAAC;AAEH,qBAAa,yBAA0B,SAAQ,KAAK;aACf,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIjE;AAED,qBAAa,kCAAmC,SAAQ,KAAK;aACxB,KAAK,EAAE,MAAM,EAAE;gBAAf,KAAK,EAAE,MAAM,EAAE;CAInD;AAED,qBAAa,sCAAuC,SAAQ,KAAK;aAC5B,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIjE;AAED,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,qBAAqB,CAAC,CAiEhC;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,aAAa,CAAC,EAAE,4BAA4B,CAAC;CAC9C,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA6E3C;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,wBAAwB,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,aAAa,CAAC,EAAE,4BAA4B,CAAC;CAC9C,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAgE3C;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,qBAAa,qBAAqB;IAIb,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAEG,OAAO,EAAE,4BAA4B;IAK5D,KAAK,CAAC,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4FnF,OAAO,CAAC,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;YAoCrE,aAAa;YA4Cb,cAAc;YAsCd,kBAAkB;IAwBhC,OAAO,CAAC,aAAa;YAOP,sBAAsB;YAiBtB,iBAAiB;CAgBhC"}