codex-orchestrator 0.1.51 → 2.0.1

package/dist/src/runner/mission-cancellation.d.ts

@@ -1,77 +0,0 @@
-import { type MissionProcessHandle, type MissionRecord } from './mission-state-machine.js';
-import { type MissionApplyReceipt } from './mission-git-contracts.js';
-import type { MissionStateStore } from './mission-state-store.js';
-export type MissionProcessTerminationResult = {
-    kind: 'terminated';
-} | {
-    kind: 'already-exited';
-} | {
-    kind: 'transient-failure';
-    reason: string;
-};
-export interface MissionCancellationDependencies {
-    terminate(process: MissionProcessHandle): Promise<MissionProcessTerminationResult>;
-    reconcileApply(mission: MissionRecord): Promise<MissionCancellationApplyReconciliation>;
-    nextEligibleAt(reason: string): string;
-}
-export type MissionCancellationApplyReconciliation = {
-    kind: 'old-identity';
-} | {
-    kind: 'new-identity';
-    receipt: MissionApplyReceipt;
-} | {
-    kind: 'transient-failure';
-    reason: string;
-} | {
-    kind: 'safety-stop';
-    reason: string;
-};
-export type MissionObservedProcessIdentity = 'matching' | 'missing' | 'different';
-export interface MissionProcessGroupTerminatorOptions {
-    hostId: string;
-    bootNonce: string;
-    graceMs: number;
-}
-export interface MissionProcessGroupTerminatorDependencies {
-    observe(process: MissionProcessHandle): Promise<MissionObservedProcessIdentity>;
-    signalProcessGroup(pid: number, signal: NodeJS.Signals): void;
-    wait(milliseconds: number): Promise<void>;
-}
-export declare class MissionProcessGroupTerminator {
-    private readonly options;
-    private readonly dependencies;
-    constructor(options: MissionProcessGroupTerminatorOptions, dependencies: MissionProcessGroupTerminatorDependencies);
-    terminate(process: MissionProcessHandle): Promise<MissionProcessTerminationResult>;
-}
-export type MissionCancellationOutcome = {
-    kind: 'cancelled';
-    missionId: string;
-    state: 'cancelled';
-} | {
-    kind: 'safety-stop';
-    missionId: string;
-    state: 'safety-stop';
-    reason: string;
-} | {
-    kind: 'resumable';
-    missionId: string;
-    state: 'cancelling';
-    reason: string;
-    nextEligibleAt: string;
-};
-export declare class MissionCancellationCoordinator {
-    private readonly store;
-    private readonly dependencies;
-    constructor(store: MissionStateStore, dependencies: MissionCancellationDependencies);
-    cancel(input: {
-        expectedGeneration: number;
-        missionId: string;
-        expectedRevision: number;
-        requestedAt: string;
-        requestedBy: string;
-    }): Promise<MissionCancellationOutcome>;
-    private completeCancellation;
-    private deferCancellation;
-    private persistSafetyStop;
-}
-//# sourceMappingURL=mission-cancellation.d.ts.map

package/dist/src/runner/mission-cancellation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-cancellation.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-cancellation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,MAAM,+BAA+B,GACvC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACnF,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACxF,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACxC;AAED,MAAM,MAAM,sCAAsC,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAElF,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yCAAyC;IACxD,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAChF,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,qBAAa,6BAA6B;IAEtC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,OAAO,EAAE,oCAAoC,EAC7C,YAAY,EAAE,yCAAyC;IAS7D,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,+BAA+B,CAAC;CAsBhG;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChF;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN,qBAAa,8BAA8B;IAEvC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,KAAK,EAAE,iBAAiB,EACxB,YAAY,EAAE,+BAA+B;IAGnD,MAAM,CAAC,KAAK,EAAE;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA2DvC,OAAO,CAAC,oBAAoB;YAuBd,iBAAiB;YA2BjB,iBAAiB;CAoBhC"}

package/dist/src/runner/mission-cancellation.js

@@ -1,180 +0,0 @@
-import { transitionMission, } from './mission-state-machine.js';
-import { assertMissionApplyReceipt, missionApplyPermitFingerprint, } from './mission-git-contracts.js';
-export class MissionProcessGroupTerminator {
-    options;
-    dependencies;
-    constructor(options, dependencies) {
-        this.options = options;
-        this.dependencies = dependencies;
-        requireText(options.hostId, 'terminator hostId');
-        requireText(options.bootNonce, 'terminator bootNonce');
-        if (!Number.isSafeInteger(options.graceMs) || options.graceMs < 0) {
-            throw new Error('Mission cancellation terminator graceMs must be a non-negative integer.');
-        }
-    }
-    async terminate(process) {
-        if (process.hostId !== this.options.hostId) {
-            return { kind: 'transient-failure', reason: 'process-owned-by-different-host' };
-        }
-        if (process.bootNonce !== this.options.bootNonce) {
-            return { kind: 'already-exited' };
-        }
-        if (await this.dependencies.observe(process) !== 'matching') {
-            return { kind: 'already-exited' };
-        }
-        this.dependencies.signalProcessGroup(process.pid, 'SIGTERM');
-        await this.dependencies.wait(this.options.graceMs);
-        if (await this.dependencies.observe(process) !== 'matching') {
-            return { kind: 'terminated' };
-        }
-        this.dependencies.signalProcessGroup(process.pid, 'SIGKILL');
-        await this.dependencies.wait(this.options.graceMs);
-        if (await this.dependencies.observe(process) !== 'matching') {
-            return { kind: 'terminated' };
-        }
-        return { kind: 'transient-failure', reason: 'process-group-still-live-after-sigkill' };
-    }
-}
-export class MissionCancellationCoordinator {
-    store;
-    dependencies;
-    constructor(store, dependencies) {
-        this.store = store;
-        this.dependencies = dependencies;
-    }
-    async cancel(input) {
-        assertTimestamp(input.requestedAt, 'requestedAt');
-        requireText(input.requestedBy, 'requestedBy');
-        const cancelling = await this.store.mutate(input.expectedGeneration, (draft) => {
-            const current = draft.missions[input.missionId];
-            if (!current)
-                throw new Error(`Mission cancellation cannot find ${input.missionId}.`);
-            if (current.revision !== input.expectedRevision) {
-                throw new Error(`Mission cancellation revision conflict for ${input.missionId}.`);
-            }
-            const next = current.state === 'cancelling'
-                ? { ...current, revision: current.revision + 1 }
-                : transitionMission(current, { type: 'cancel-requested' });
-            draft.missions[input.missionId] = {
-                ...next,
-                cancellation: {
-                    requestedAt: current.cancellation?.requestedAt ?? input.requestedAt,
-                    requestedBy: current.cancellation?.requestedBy ?? input.requestedBy,
-                },
-            };
-        });
-        const mission = cancelling.missions[input.missionId];
-        for (const process of mission.claim?.processes ?? []) {
-            const termination = await this.dependencies.terminate(process);
-            if (termination.kind === 'transient-failure') {
-                return this.deferCancellation(cancelling.generation, input.missionId, mission.revision, termination.reason);
-            }
-        }
-        let reconciledReceipt;
-        if (mission.applyIntent || mission.applyReceipt) {
-            const reconciliation = await this.dependencies.reconcileApply(structuredClone(mission));
-            if (reconciliation.kind === 'transient-failure') {
-                return this.deferCancellation(cancelling.generation, input.missionId, mission.revision, reconciliation.reason);
-            }
-            if (reconciliation.kind === 'safety-stop') {
-                return this.persistSafetyStop(cancelling.generation, input.missionId, mission.revision, reconciliation.reason);
-            }
-            if (reconciliation.kind === 'old-identity') {
-                if (mission.applyReceipt) {
-                    return this.persistSafetyStop(cancelling.generation, input.missionId, mission.revision, 'receipt-ref-mismatch');
-                }
-            }
-            else if (!validReconciledReceipt(mission, reconciliation.receipt)) {
-                return this.persistSafetyStop(cancelling.generation, input.missionId, mission.revision, 'apply-reconciliation-receipt-mismatch');
-            }
-            else {
-                reconciledReceipt = reconciliation.receipt;
-            }
-        }
-        const completed = await this.completeCancellation(cancelling.generation, input.missionId, mission.revision, reconciledReceipt);
-        if (completed.missions[input.missionId]?.state !== 'cancelled') {
-            throw new Error('Mission cancellation did not reach cancelled state.');
-        }
-        return { kind: 'cancelled', missionId: input.missionId, state: 'cancelled' };
-    }
-    completeCancellation(expectedGeneration, missionId, expectedRevision, receipt) {
-        return this.store.mutate(expectedGeneration, (draft) => {
-            const current = draft.missions[missionId];
-            if (!current || current.revision !== expectedRevision || current.state !== 'cancelling') {
-                throw new Error(`Mission cancellation reconciliation conflict for ${missionId}.`);
-            }
-            if (receipt && !current.applyHistory?.some((entry) => entry.permitFingerprint === receipt.permitFingerprint)) {
-                current.applyHistory = [...(current.applyHistory ?? []), structuredClone(receipt)];
-            }
-            draft.missions[missionId] = transitionMission(current, {
-                type: 'cancellation-reconciled',
-            });
-            delete draft.nextEligibleAt[missionId];
-            delete draft.reservations[missionId];
-        });
-    }
-    async deferCancellation(expectedGeneration, missionId, expectedRevision, reason) {
-        const nextEligibleAt = this.dependencies.nextEligibleAt(reason);
-        assertTimestamp(nextEligibleAt, 'nextEligibleAt');
-        await this.store.mutate(expectedGeneration, (draft) => {
-            const current = draft.missions[missionId];
-            if (!current || current.revision !== expectedRevision || current.state !== 'cancelling'
-                || !current.claim) {
-                throw new Error(`Mission cancellation retry cannot fence ${missionId}.`);
-            }
-            current.claim.leaseUntil = nextEligibleAt;
-            current.revision += 1;
-            draft.nextEligibleAt[missionId] = nextEligibleAt;
-        });
-        return {
-            kind: 'resumable',
-            missionId,
-            state: 'cancelling',
-            reason,
-            nextEligibleAt,
-        };
-    }
-    async persistSafetyStop(expectedGeneration, missionId, expectedRevision, reason) {
-        requireText(reason, 'safety-stop reason');
-        await this.store.mutate(expectedGeneration, (draft) => {
-            const current = draft.missions[missionId];
-            if (!current || current.revision !== expectedRevision || current.state !== 'cancelling') {
-                throw new Error(`Mission cancellation safety-stop cannot fence ${missionId}.`);
-            }
-            draft.missions[missionId] = transitionMission(current, {
-                type: 'apply-reconciled-third-identity',
-            });
-            delete draft.nextEligibleAt[missionId];
-            delete draft.reservations[missionId];
-        });
-        return { kind: 'safety-stop', missionId, state: 'safety-stop', reason };
-    }
-}
-function validReconciledReceipt(mission, receipt) {
-    try {
-        assertMissionApplyReceipt(receipt);
-    }
-    catch {
-        return false;
-    }
-    const permit = mission.applyPermit;
-    const intent = mission.applyIntent;
-    return Boolean(permit && intent
-        && intent.permitFingerprint === missionApplyPermitFingerprint(permit)
-        && receipt.permitFingerprint === intent.permitFingerprint
-        && receipt.targetRef === permit.targetRef
-        && receipt.oldCommitSha === permit.expectedOldCommit
-        && receipt.commitSha === permit.expectedNewCommit
-        && receipt.treeSha === permit.expectedNewTree);
-}
-function assertTimestamp(value, field) {
-    const milliseconds = Date.parse(value);
-    if (!Number.isFinite(milliseconds) || new Date(milliseconds).toISOString() !== value) {
-        throw new Error(`Mission cancellation ${field} must be an exact UTC ISO timestamp.`);
-    }
-}
-function requireText(value, field) {
-    if (value.trim().length === 0)
-        throw new Error(`Mission cancellation ${field} must be non-empty.`);
-}
-//# sourceMappingURL=mission-cancellation.js.map

package/dist/src/runner/mission-cancellation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-cancellation.js","sourceRoot":"","sources":["../../../src/runner/mission-cancellation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAGlB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAE9B,MAAM,4BAA4B,CAAC;AAkCpC,MAAM,OAAO,6BAA6B;IAErB;IACA;IAFnB,YACmB,OAA6C,EAC7C,YAAuD;QADvD,YAAO,GAAP,OAAO,CAAsC;QAC7C,iBAAY,GAAZ,YAAY,CAA2C;QAExE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,OAA6B;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzF,CAAC;CACF;AAaD,MAAM,OAAO,8BAA8B;IAEtB;IACA;IAFnB,YACmB,KAAwB,EACxB,YAA6C;QAD7C,UAAK,GAAL,KAAK,CAAmB;QACxB,iBAAY,GAAZ,YAAY,CAAiC;IAC7D,CAAC;IAEG,KAAK,CAAC,MAAM,CAAC,KAMnB;QACC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAClD,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACtF,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,YAAY;gBACzC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE;gBAChD,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7D,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG;gBAChC,GAAG,IAAI;gBACP,YAAY,EAAE;oBACZ,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW;oBACnE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW;iBACpE;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,WAAW,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,iBAAkD,CAAC;QACvD,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YACxF,IAAI,cAAc,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAClE,OAAO,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EACtF,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC/E,CAAC;IAEO,oBAAoB,CAC1B,kBAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,OAA6B;QAE7B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YACrD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACzD,OAAO,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE;gBACrD,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,kBAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,MAAc;QAEd,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChE,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;mBAClF,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,cAAc,CAAC;YAC1C,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YACtB,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,KAAK,EAAE,YAAY;YACnB,MAAM;YACN,cAAc;SACf,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,kBAA0B,EAC1B,SAAiB,EACjB,gBAAwB,EACxB,MAAc;QAEd,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,GAAG,CAAC,CAAC;YACjF,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE;gBACrD,IAAI,EAAE,iCAAiC;aACxC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAC1E,CAAC;CACF;AAED,SAAS,sBAAsB,CAAC,OAAsB,EAAE,OAA4B;IAClF,IAAI,CAAC;QACH,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,IAAI,MAAM;WAC1B,MAAM,CAAC,iBAAiB,KAAK,6BAA6B,CAAC,MAAM,CAAC;WAClE,OAAO,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB;WACtD,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;WACtC,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,iBAAiB;WACjD,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,iBAAiB;WAC9C,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,sCAAsC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,qBAAqB,CAAC,CAAC;AACrG,CAAC"}

package/dist/src/runner/mission-canonical-path.d.ts

@@ -1,34 +0,0 @@
-export interface CanonicalFileIdentity {
-    repositoryPath: string;
-    canonicalPath: string;
-    dev: number;
-    ino: number;
-    mode: number;
-    size: number;
-    mtimeMs: number;
-    sha256: string;
-}
-export interface CanonicalFileInspectionDependencies {
-    beforeRead?: () => Promise<void>;
-}
-export declare function readCanonicalText(input: {
-    root: string;
-    path: string;
-    grantedPaths: string[];
-    deniedPaths: string[];
-    maxBytes: number;
-}): Promise<{
-    text: string;
-    identity: CanonicalFileIdentity;
-}>;
-export declare function inspectCanonicalFile(input: {
-    root: string;
-    path: string;
-    deniedPaths: string[];
-    maxBytes?: number;
-    missing?: 'allow' | 'reject';
-}, dependencies?: CanonicalFileInspectionDependencies): Promise<{
-    identity: CanonicalFileIdentity;
-    content: Buffer;
-} | undefined>;
-//# sourceMappingURL=mission-canonical-path.d.ts.map

package/dist/src/runner/mission-canonical-path.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-canonical-path.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-canonical-path.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mCAAmC;IAClD,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAiB7D;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC9B,EAAE,YAAY,GAAE,mCAAwC,GAAG,OAAO,CAAC;IAClE,QAAQ,EAAE,qBAAqB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,SAAS,CAAC,CAkEb"}

package/dist/src/runner/mission-canonical-path.js

@@ -1,121 +0,0 @@
-import { createHash } from 'node:crypto';
-import { constants } from 'node:fs';
-import { lstat, open, realpath, stat } from 'node:fs/promises';
-import { isAbsolute, join, relative } from 'node:path';
-import { globMatches, normalizePath } from '../path-policy.js';
-import { missionPathDenied } from './mission-path-language.js';
-export async function readCanonicalText(input) {
-    const normalized = assertRepositoryRelativePath(input.path);
-    if (!input.grantedPaths.some((pattern) => globMatches(pattern, normalized))) {
-        throw new Error(`Mission observation path is outside granted scope: ${input.path}.`);
-    }
-    const inspected = await inspectCanonicalFile({
-        root: input.root,
-        path: input.path,
-        deniedPaths: input.deniedPaths,
-        maxBytes: input.maxBytes,
-        missing: 'reject',
-    });
-    if (!inspected)
-        throw new Error(`Mission observation file is missing: ${input.path}.`);
-    if (inspected.content.includes(0)) {
-        throw new Error(`Mission observation refuses binary file: ${input.path}.`);
-    }
-    return { text: inspected.content.toString('utf8'), identity: inspected.identity };
-}
-export async function inspectCanonicalFile(input, dependencies = {}) {
-    const normalized = assertRepositoryRelativePath(input.path);
-    if (missionPathDenied(normalized, input.deniedPaths)) {
-        throw new Error(`Mission canonical path is denied: ${normalized}.`);
-    }
-    const canonicalRoot = await realpath(input.root);
-    let current = canonicalRoot;
-    for (const segment of normalized.split('/')) {
-        current = join(current, segment);
-        let info;
-        try {
-            info = await lstat(current);
-        }
-        catch (error) {
-            if (error instanceof Error && 'code' in error && error.code === 'ENOENT'
-                && input.missing !== 'reject')
-                return undefined;
-            throw error;
-        }
-        if (info.isSymbolicLink()) {
-            throw new Error(`Mission canonical path refuses symbolic link: ${normalized}.`);
-        }
-    }
-    const canonicalTarget = await realpath(current);
-    const canonicalRelative = normalizePath(relative(canonicalRoot, canonicalTarget));
-    if (canonicalRelative.startsWith('../') || canonicalRelative === '..' || isAbsolute(canonicalRelative)) {
-        throw new Error(`Mission canonical path escapes repository root: ${normalized}.`);
-    }
-    if (missionPathDenied(canonicalRelative, input.deniedPaths)) {
-        throw new Error(`Mission canonical path is denied: ${canonicalRelative}.`);
-    }
-    const expected = await stat(canonicalTarget, { bigint: true });
-    assertRegularSingleLink(expected, normalized);
-    const handle = await open(current, constants.O_RDONLY | constants.O_NOFOLLOW);
-    try {
-        const opened = await handle.stat({ bigint: true });
-        assertSameIdentity(expected, opened, normalized);
-        assertStableMetadata(expected, opened, normalized);
-        assertRegularSingleLink(opened, normalized);
-        const maxBytes = input.maxBytes ?? 64 * 1024 * 1024;
-        if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0 || opened.size > BigInt(maxBytes)) {
-            throw new Error(`Mission canonical path size limit exceeded: ${opened.size} > ${maxBytes}.`);
-        }
-        await dependencies.beforeRead?.();
-        const content = await handle.readFile();
-        const after = await handle.stat({ bigint: true });
-        assertSameIdentity(opened, after, normalized);
-        assertStableMetadata(opened, after, normalized);
-        assertRegularSingleLink(after, normalized);
-        if (after.size !== BigInt(content.byteLength)) {
-            throw new Error(`Mission canonical path changed length during read: ${normalized}.`);
-        }
-        return {
-            content,
-            identity: {
-                repositoryPath: canonicalRelative,
-                canonicalPath: canonicalTarget,
-                dev: Number(after.dev),
-                ino: Number(after.ino),
-                mode: Number(after.mode),
-                size: Number(after.size),
-                mtimeMs: Number(after.mtimeNs) / 1_000_000,
-                sha256: createHash('sha256').update(content).digest('hex'),
-            },
-        };
-    }
-    finally {
-        await handle.close();
-    }
-}
-function assertRepositoryRelativePath(path) {
-    const normalized = normalizePath(path);
-    if (isAbsolute(path) || normalized.length === 0
-        || normalized.split('/').some((segment) => segment.length === 0 || segment === '..')) {
-        throw new Error('Mission canonical path must be repository-relative without empty segments.');
-    }
-    return normalized;
-}
-function assertRegularSingleLink(info, path) {
-    if (!info.isFile() || (typeof info.nlink === 'bigint' ? info.nlink !== 1n : info.nlink !== 1)) {
-        throw new Error(`Mission canonical path refuses non-regular or hard-linked file: ${path}.`);
-    }
-}
-function assertSameIdentity(expected, actual, path) {
-    if (expected.dev !== actual.dev || expected.ino !== actual.ino) {
-        throw new Error(`Mission canonical path changed during authorization: ${path}.`);
-    }
-}
-function assertStableMetadata(expected, actual, path) {
-    if (expected.mode !== actual.mode || expected.nlink !== actual.nlink
-        || expected.size !== actual.size || expected.mtimeNs !== actual.mtimeNs
-        || expected.ctimeNs !== actual.ctimeNs) {
-        throw new Error(`Mission canonical path changed during read: ${path}.`);
-    }
-}
-//# sourceMappingURL=mission-canonical-path.js.map

package/dist/src/runner/mission-canonical-path.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-canonical-path.js","sourceRoot":"","sources":["../../../src/runner/mission-canonical-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAiB/D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAMvC;IACC,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAM1C,EAAE,eAAoD,EAAE;IAIvD,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,OAAO,GAAG,aAAa,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;mBACnE,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,GAAG,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IAClF,IAAI,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,iBAAiB,KAAK,IAAI,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,qCAAqC,iBAAiB,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,uBAAuB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACjD,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9C,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAChD,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;YACL,OAAO;YACP,QAAQ,EAAE;gBACR,cAAc,EAAE,iBAAiB;gBACjC,aAAa,EAAE,eAAe;gBAC9B,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;gBACtB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,SAAS;gBAC1C,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC3D;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;WAC1C,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAmD,EACnD,IAAY;IAEZ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,mEAAmE,IAAI,GAAG,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAwD,EACxD,MAAsD,EACtD,IAAY;IAEZ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAMC,EACD,MAMC,EACD,IAAY;IAEZ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;WAC/D,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;WACpE,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,GAAG,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/src/runner/mission-capability-kernel.d.ts

@@ -1,34 +0,0 @@
-export type MissionSandboxBackend = 'macos-sandbox' | 'linux-bwrap';
-export type MissionCapability = 'git-status' | 'read-file' | 'validate-patch';
-export declare const missionGitStatusArgv: readonly ["/usr/bin/git", "-c", "core.fsmonitor=false", "-c", "core.untrackedCache=false", "-c", "core.hooksPath=/dev/null", "status", "--porcelain=v1", "--untracked-files=all"];
-export interface MissionCapabilityProbeInput {
-    platform: NodeJS.Platform;
-    commands: ReadonlySet<string>;
-}
-export interface MissionCapabilityProbeResult {
-    prerequisitesAvailable: boolean;
-    backend?: MissionSandboxBackend;
-    missing: string[];
-}
-export interface MissionCapabilityRequest {
-    missionId: string;
-    actionKey: string;
-    capability: MissionCapability;
-    argv: string[];
-    requestedPaths: string[];
-    grantedPaths: string[];
-    inputSnapshot: string;
-    fencingEpoch: number;
-    expiresAt: string;
-    readPath?: string;
-    maxReadBytes?: number;
-}
-export interface MissionCapabilityPermit extends MissionCapabilityRequest {
-    network: 'deny';
-    workspace: 'read-only';
-}
-export declare function missionCapabilityPermitFingerprint(permit: MissionCapabilityPermit): string;
-export declare function discoverMissionExecutorPrerequisites(input: MissionCapabilityProbeInput): MissionCapabilityProbeResult;
-export declare function authorizeMissionCapability(request: MissionCapabilityRequest): MissionCapabilityPermit;
-export declare function scrubMissionExecutorEnv(source: NodeJS.ProcessEnv, allowedKeys: string[]): Record<string, string>;
-//# sourceMappingURL=mission-capability-kernel.d.ts.map

package/dist/src/runner/mission-capability-kernel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-capability-kernel.d.ts","sourceRoot":"","sources":["../../../src/runner/mission-capability-kernel.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,aAAa,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAE9E,eAAO,MAAM,oBAAoB,mLAMvB,CAAC;AAEX,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,sBAAsB,EAAE,OAAO,CAAC;IAChC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAkB1F;AAOD,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,2BAA2B,GACjC,4BAA4B,CA4B9B;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,wBAAwB,GAChC,uBAAuB,CAoDzB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,UAAU,EACzB,WAAW,EAAE,MAAM,EAAE,GACpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB"}

package/dist/src/runner/mission-capability-kernel.js

@@ -1,158 +0,0 @@
-import { basename } from 'node:path';
-import { createHash } from 'node:crypto';
-import { uniqueSortedPaths } from '../path-policy.js';
-import { assertMissionPathPattern, scopePatternContainedBy } from './mission-path-language.js';
-export const missionGitStatusArgv = [
-    '/usr/bin/git',
-    '-c', 'core.fsmonitor=false',
-    '-c', 'core.untrackedCache=false',
-    '-c', 'core.hooksPath=/dev/null',
-    'status', '--porcelain=v1', '--untracked-files=all',
-];
-export function missionCapabilityPermitFingerprint(permit) {
-    const canonical = JSON.stringify([
-        'mission-capability-permit-v1',
-        permit.missionId,
-        permit.actionKey,
-        permit.capability,
-        permit.argv,
-        permit.requestedPaths,
-        permit.grantedPaths,
-        permit.inputSnapshot,
-        permit.fencingEpoch,
-        permit.expiresAt,
-        permit.readPath ?? null,
-        permit.maxReadBytes ?? null,
-        permit.network,
-        permit.workspace,
-    ]);
-    return `sha256:${createHash('sha256').update(canonical).digest('hex')}`;
-}
-const secretPath = /(^|\/)(?:\.env(?:\..*)?|\.git(?:\/|$)|id_(?:rsa|ed25519)(?:\.pub)?$)/iu;
-const safeEnvironmentKeys = new Set([
-    'CI', 'LANG', 'LC_ALL', 'LC_CTYPE', 'NO_COLOR', 'PATH', 'TERM', 'TZ',
-]);
-export function discoverMissionExecutorPrerequisites(input) {
-    if (input.platform === 'darwin') {
-        const missing = [
-            input.commands.has('/usr/bin/sandbox-exec') ? undefined : 'sandbox-exec',
-            input.commands.has('/usr/bin/git') ? undefined : 'git',
-        ].filter((value) => value !== undefined);
-        return {
-            prerequisitesAvailable: missing.length === 0,
-            backend: missing.length === 0 ? 'macos-sandbox' : undefined,
-            missing,
-        };
-    }
-    if (input.platform === 'linux') {
-        const hasBwrap = [...input.commands].some((command) => basename(command) === 'bwrap');
-        const hasGit = [...input.commands].some((command) => basename(command) === 'git');
-        const missing = [hasBwrap ? undefined : 'bwrap', hasGit ? undefined : 'git']
-            .filter((value) => value !== undefined);
-        return {
-            prerequisitesAvailable: missing.length === 0,
-            backend: missing.length === 0 ? 'linux-bwrap' : undefined,
-            missing,
-        };
-    }
-    return {
-        prerequisitesAvailable: false,
-        backend: undefined,
-        missing: [`unsupported-platform:${input.platform}`],
-    };
-}
-export function authorizeMissionCapability(request) {
-    requireText(request.missionId, 'missionId');
-    requireText(request.actionKey, 'actionKey');
-    requireText(request.inputSnapshot, 'inputSnapshot');
-    if (!Number.isSafeInteger(request.fencingEpoch) || request.fencingEpoch <= 0) {
-        throw new Error('Mission capability fencingEpoch must be a positive integer.');
-    }
-    if (!Number.isFinite(Date.parse(request.expiresAt))) {
-        throw new Error('Mission capability expiresAt must be an ISO timestamp.');
-    }
-    assertAllowedArgv(request.capability, request.argv);
-    const grantedPaths = normalizeScope(request.grantedPaths, 'granted');
-    const requestedPaths = normalizeScope(request.requestedPaths, 'requested');
-    if (request.capability === 'read-file') {
-        if (typeof request.readPath !== 'string' || request.readPath.includes('*')
-            || requestedPaths.length !== 1 || requestedPaths[0] !== request.readPath
-            || !Number.isSafeInteger(request.maxReadBytes) || request.maxReadBytes <= 0
-            || request.maxReadBytes > 1024 * 1024) {
-            throw new Error('Mission read-file requires one concrete readPath and maxReadBytes up to 1048576.');
-        }
-    }
-    else if (request.readPath !== undefined || request.maxReadBytes !== undefined) {
-        throw new Error(`Mission capability ${request.capability} forbids read-file inputs.`);
-    }
-    if (request.capability === 'git-status'
-        && (requestedPaths.length !== 1 || requestedPaths[0] !== '**')) {
-        throw new Error('Mission capability git-status requires explicit whole-repository scope.');
-    }
-    for (const path of requestedPaths) {
-        if (secretPath.test(path)) {
-            throw new Error(`Mission capability requested secret path: ${path}.`);
-        }
-        if (!grantedPaths.some((grant) => scopePatternContainedBy(path, grant))) {
-            throw new Error(`Mission capability path is outside granted scope: ${path}.`);
-        }
-    }
-    return {
-        missionId: request.missionId,
-        actionKey: request.actionKey,
-        capability: request.capability,
-        argv: [...request.argv],
-        requestedPaths,
-        grantedPaths,
-        inputSnapshot: request.inputSnapshot,
-        fencingEpoch: request.fencingEpoch,
-        expiresAt: request.expiresAt,
-        ...(request.capability === 'read-file' ? {
-            readPath: request.readPath,
-            maxReadBytes: request.maxReadBytes,
-        } : {}),
-        network: 'deny',
-        workspace: 'read-only',
-    };
-}
-export function scrubMissionExecutorEnv(source, allowedKeys) {
-    const result = {};
-    for (const key of [...new Set(allowedKeys)].sort()) {
-        if (!safeEnvironmentKeys.has(key)) {
-            continue;
-        }
-        const value = source[key];
-        if (value !== undefined) {
-            result[key] = value;
-        }
-    }
-    return result;
-}
-function assertAllowedArgv(capability, argv) {
-    const expected = {
-        'git-status': [[]],
-        'read-file': [[]],
-        'validate-patch': [[]],
-    };
-    const normalized = argv.map((value, index) => index === 0 ? basename(value) : value);
-    if (!expected[capability].some((candidate) => arraysEqual(candidate, normalized))) {
-        throw new Error(`Mission capability ${capability} requires allowlisted argv.`);
-    }
-}
-function normalizeScope(paths, kind) {
-    const normalized = uniqueSortedPaths(paths);
-    if (normalized.length === 0) {
-        throw new Error(`Mission capability ${kind} scope must contain repository-relative globs.`);
-    }
-    normalized.forEach((path) => assertMissionPathPattern(path, `Mission capability ${kind} scope`));
-    return normalized;
-}
-function arraysEqual(left, right) {
-    return left.length === right.length && left.every((value, index) => value === right[index]);
-}
-function requireText(value, field) {
-    if (value.trim().length === 0) {
-        throw new Error(`Mission capability ${field} must be non-empty.`);
-    }
-}
-//# sourceMappingURL=mission-capability-kernel.js.map