codex-orchestrator 2.0.2 → 2.0.3

package/dist/src/v2/immutable-workflow-publisher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"immutable-workflow-publisher.d.ts","sourceRoot":"","sources":["../../../src/v2/immutable-workflow-publisher.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,4BAA4B,GACpC,mBAAmB,GAAG,kBAAkB,GACxC,qBAAqB,GAAG,0BAA0B,GAClD,4BAA4B,GAAG,2BAA2B,GAC1D,mBAAmB,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;AAEzE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,YAAY,CAAC,MAAM,SAAS,WAAW;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,SAAS,sBAAsB,EACrC,MAAM,SAAS,WAAW,EAC1B,QAAQ,EACR,OAAO,EACP,KAAK,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,EAAE,oBAAoB,EAAE,MAAM,KAAK,MAAM,CAAC;IAClF,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACvC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAC;IAC1D,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACvC,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,4BAA4B,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxH,eAAe,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,EAAE,QAAQ,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClG,0BAA0B,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACpE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,4BAA4B,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACvE,GAAG,OAAO,CAAC,OAAO,CAAC,CAsEnB"}

package/dist/src/v2/immutable-workflow-publisher.js

@@ -0,0 +1,218 @@
+import { execFile } from 'node:child_process';
+import { link, lstat, mkdir, open, readFile, readdir, rm, writeFile, chmod } from 'node:fs/promises';
+import { platform } from 'node:os';
+import { join } from 'node:path';
+const WAIT_MS = 5_000;
+const POLL_MS = 25;
+export async function publishImmutableWorkflow(input) {
+    const claimPath = join(input.parent, `${input.identity}.claim`);
+    const readyPath = join(input.parent, `${input.identity}.ready`);
+    const started = Date.now();
+    const processStartIdentity = await readProcessStartIdentity(process.pid);
+    if (!processStartIdentity)
+        throw new Error('publisher process identity is unavailable');
+    let owner;
+    while (true) {
+        if (await exists(readyPath))
+            return resultFromReady(input, readyPath, true);
+        if (!await exists(claimPath)) {
+            owner = input.createOwner(null, processStartIdentity);
+            if (await tryLinkRecord(input, `.claim-candidate-${owner.token}`, claimPath, owner)) {
+                activeOwnerTokens.add(owner.token);
+                break;
+            }
+            continue;
+        }
+        const leaf = await leafOwner(input);
+        const sameLiveProcess = leaf.bootId === input.bootId
+            && await processIdentityMatches(leaf.pid, leaf.processStartIdentity);
+        if (sameLiveProcess && !(leaf.pid === process.pid && !activeOwnerTokens.has(leaf.token))) {
+            if (Date.now() - started > WAIT_MS)
+                throw new Error(input.activePublisherError);
+            await delay(POLL_MS);
+            continue;
+        }
+        owner = input.createOwner(leaf.token, processStartIdentity);
+        const recoveryPath = join(input.parent, `${input.identity}.recovery.${leaf.token}`);
+        if (await tryLinkRecord(input, `.recovery-candidate-${owner.token}`, recoveryPath, owner)) {
+            activeOwnerTokens.add(owner.token);
+            break;
+        }
+    }
+    const contentRoot = join(input.parent, `${input.identity}.content.${owner.token}`);
+    try {
+        await input.assertContentPathAvailable?.(contentRoot);
+        await mkdir(contentRoot, { mode: 0o700 });
+        await input.onStep?.('after-content-mkdir');
+        const content = await input.writeContent(contentRoot, async (step) => { await input.onStep?.(step); });
+        await input.onStep?.('before-content-parent-sync');
+        await syncDirectory(input.parent);
+        await input.onStep?.('after-content-parent-sync');
+        const ready = input.createReady(owner, content);
+        const readyBytes = input.serializeRecord(ready);
+        const candidate = join(input.parent, `.ready-candidate-${owner.token}`);
+        await input.onStep?.('before-ready-link');
+        await writeSynced(candidate, readyBytes, 0o600);
+        try {
+            await link(candidate, readyPath);
+            await rm(candidate, { force: true });
+            await input.onStep?.('after-ready-link');
+            await syncDirectory(input.parent);
+            await input.onStep?.('after-ready-parent-sync');
+        }
+        catch (error) {
+            if (!isCode(error, 'EEXIST'))
+                throw error;
+            if (input.verifyReadyCollision)
+                input.verifyReadyCollision(await input.readControl(readyPath), readyBytes);
+        }
+        finally {
+            await rm(candidate, { force: true });
+        }
+        if (input.resultFromPublished) {
+            return input.resultFromPublished({ ready, readyPath, contentRoot, content, reused: false });
+        }
+        return resultFromReady(input, readyPath, false);
+    }
+    catch (error) {
+        if (!await exists(readyPath))
+            await removeOwnedContent(contentRoot);
+        throw error;
+    }
+    finally {
+        activeOwnerTokens.delete(owner.token);
+    }
+}
+async function resultFromReady(input, readyPath, reused) {
+    const ready = input.parseReady(JSON.parse((await input.readControl(readyPath)).toString('utf8')));
+    const leaf = await leafOwner(input);
+    if (leaf.token !== ready.token)
+        throw new Error(input.recoveryChainError);
+    return input.resultFromReady({
+        ready,
+        readyPath,
+        contentRoot: join(input.parent, `${input.identity}.content.${ready.token}`),
+        reused,
+    });
+}
+async function leafOwner(input) {
+    let owner = input.parseOwner(JSON.parse((await input.readControl(join(input.parent, `${input.identity}.claim`))).toString('utf8')));
+    const seen = new Set([owner.token]);
+    while (await exists(join(input.parent, `${input.identity}.recovery.${owner.token}`))) {
+        const next = input.parseOwner(JSON.parse((await input.readControl(join(input.parent, `${input.identity}.recovery.${owner.token}`))).toString('utf8')));
+        if (next.parentToken !== owner.token || seen.has(next.token))
+            throw new Error(input.recoveryChainError);
+        owner = next;
+        seen.add(owner.token);
+    }
+    return owner;
+}
+async function tryLinkRecord(input, candidateName, destination, owner) {
+    const candidate = join(input.parent, candidateName);
+    await input.onStep?.('before-claim-link');
+    await writeSynced(candidate, input.serializeRecord(owner), 0o600);
+    activeOwnerTokens.add(owner.token);
+    try {
+        await link(candidate, destination);
+        await syncDirectory(input.parent);
+        await rm(candidate, { force: true });
+        await input.onStep?.('after-claim-link');
+        return true;
+    }
+    catch (error) {
+        if (isCode(error, 'EEXIST')) {
+            activeOwnerTokens.delete(owner.token);
+            return false;
+        }
+        activeOwnerTokens.delete(owner.token);
+        throw error;
+    }
+    finally {
+        await rm(candidate, { force: true });
+    }
+}
+async function writeSynced(path, bytes, mode) {
+    await writeFile(path, bytes, { mode });
+    await chmod(path, mode);
+    const handle = await open(path, 'r');
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function syncDirectory(path) {
+    const handle = await open(path, 'r');
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+const activeOwnerTokens = new Set();
+async function processIdentityMatches(pid, expected) {
+    return await readProcessStartIdentity(pid) === expected;
+}
+async function readProcessStartIdentity(pid) {
+    if (!Number.isSafeInteger(pid) || pid <= 0)
+        return undefined;
+    if (platform() === 'linux') {
+        try {
+            const text = await readFile(`/proc/${pid}/stat`, 'utf8');
+            const close = text.lastIndexOf(') ');
+            const fields = close < 0 ? [] : text.slice(close + 2).trim().split(/\s+/u);
+            return fields[19] ? `linux:${fields[19]}` : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return await new Promise((resolveIdentity) => {
+        execFile('/bin/ps', ['-o', 'lstart=', '-p', String(pid)], { encoding: 'utf8' }, (error, stdout) => {
+            const value = error ? '' : stdout.trim().replace(/\s+/gu, ' ');
+            resolveIdentity(value ? `${platform()}:${value}` : undefined);
+        });
+    });
+}
+async function removeOwnedContent(root) {
+    if (!await exists(root))
+        return;
+    const visit = async (path) => {
+        const info = await lstat(path);
+        if (info.isSymbolicLink())
+            throw new Error('publisher content cleanup encountered a symbolic link');
+        if (info.isDirectory()) {
+            await chmod(path, 0o700);
+            for (const entry of await readdir(path))
+                await visit(join(path, entry));
+        }
+        else if (info.isFile()) {
+            await chmod(path, 0o600);
+        }
+        else {
+            throw new Error('publisher content cleanup encountered a special entry');
+        }
+    };
+    await visit(root);
+    await rm(root, { recursive: true, force: true });
+}
+function isCode(error, code) {
+    return typeof error === 'object' && error !== null && error.code === code;
+}
+async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (isCode(error, 'ENOENT'))
+            return false;
+        throw error;
+    }
+}
+function delay(ms) {
+    return new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
+}
+//# sourceMappingURL=immutable-workflow-publisher.js.map

package/dist/src/v2/immutable-workflow-publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"immutable-workflow-publisher.js","sourceRoot":"","sources":["../../../src/v2/immutable-workflow-publisher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrG,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,MAAM,OAAO,GAAG,EAAE,CAAC;AA2BnB,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAK5C,KAkBD;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,oBAAoB,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,oBAAoB;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxF,IAAI,KAAa,CAAC;IAElB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YACtD,IAAI,MAAM,aAAa,CAAC,KAAK,EAAE,oBAAoB,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBACpF,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM;YACR,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;eAC/C,MAAM,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvE,IAAI,eAAe,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAChF,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,KAAK,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1F,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,0BAA0B,EAAE,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,qBAAqB,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,4BAA4B,CAAC,CAAC;QACnD,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAC1C,MAAM,WAAW,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACjC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC;YACzC,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,yBAAyB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC1C,IAAI,KAAK,CAAC,oBAAoB;gBAAE,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;QAC7G,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC;YAAE,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAwF,EACxF,SAAiB,EACjB,MAAe;IAEf,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,eAAe,CAAC;QAC3B,KAAK;QACL,SAAS;QACT,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3E,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAwF;IAExF,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,aAAa,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,aAAa,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvJ,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxG,KAAK,GAAG,IAAI,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAwF,EACxF,aAAqB,EACrB,WAAmB,EACnB,KAAa;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC1C,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnC,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5B,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY;IAClE,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAChE,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5C,KAAK,UAAU,sBAAsB,CAAC,GAAW,EAAE,QAAgB;IACjE,OAAO,MAAM,wBAAwB,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,eAAe,EAAE,EAAE;QAC3C,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChG,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC/D,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IAChC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACpG,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA+B,CAAC,IAAI,KAAK,IAAI,CAAC;AACvG,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/src/v2/implementation-reviewer.d.ts

@@ -0,0 +1,81 @@
+import type { ContainedReportOperation, ReportOnlyWorktreeSnapshot } from './contained-report-operation.js';
+import type { CodeReviewDefectV1, CodeReviewReportV1, ReviewMode, ReviewOperation } from './code-review-report.js';
+import type { WorkflowGenerationReceipt } from './workflow-assets.js';
+export interface ImplementationReviewInvocation {
+    attemptId: string;
+    operation: ReviewOperation;
+    mode: ReviewMode;
+    reviewerSessionId: string;
+    targetRevision: number;
+    targetFingerprint: string;
+    closureRequestSha256: string | null;
+}
+export interface ImplementationReviewerInput {
+    runId: string;
+    worktreePath: string;
+    operation: ReviewOperation;
+    mode: ReviewMode;
+    reviewerSessionId: string;
+    implementationAttemptId: string;
+    targetRevision: number;
+    targetFingerprint: string;
+    closureRequestSha256: string | null;
+    issue: unknown;
+    frozenCriteria: unknown[];
+    routeReceipt: unknown;
+    defects: CodeReviewDefectV1[];
+    affectedDefectIds: string[];
+    fixedRepairFindings: Array<{
+        id: string;
+        affectedContracts: string[];
+    }>;
+    mandatoryCoverage: string[];
+    workflowGeneration: WorkflowGenerationReceipt;
+    repairOnly: boolean;
+    originalReportSha256: string | null;
+    validationDiagnostic: string | null;
+    originalReportBytes: Buffer | null;
+    signal: AbortSignal;
+    onPrepared(invocation: ImplementationReviewInvocation): Promise<void>;
+    onLaunched(invocation: ImplementationReviewInvocation & {
+        pid: number;
+        processGroupId: number;
+    }): Promise<void>;
+}
+export type ImplementationReviewerResult = {
+    kind: 'completed';
+    attemptId: string;
+    report: CodeReviewReportV1;
+    artifactSha256: string;
+} | {
+    kind: 'transport-failed';
+    resumable: true;
+} | {
+    kind: 'report-invalid';
+    diagnostic: string;
+    originalReportSha256: string;
+    originalReportBytes: Buffer;
+} | {
+    kind: 'safe-halt';
+    process: {
+        pid: number;
+        processGroupId: number;
+        startedAt: string;
+        baseline: ReportOnlyWorktreeSnapshot;
+    };
+    waitForAbsence(): Promise<void>;
+} | {
+    kind: 'cancelled';
+} | {
+    kind: 'internal-error';
+    code: string;
+};
+export declare class ContainedImplementationReviewer {
+    private readonly dependencies;
+    constructor(dependencies: {
+        operation: ContainedReportOperation;
+        createAttemptId?: () => string;
+    });
+    run(input: ImplementationReviewerInput): Promise<ImplementationReviewerResult>;
+}
+//# sourceMappingURL=implementation-reviewer.d.ts.map

package/dist/src/v2/implementation-reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation-reviewer.d.ts","sourceRoot":"","sources":["../../../src/v2/implementation-reviewer.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,wBAAwB,EAAkC,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC5I,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAKtE,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,mBAAmB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACxE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,UAAU,EAAE,OAAO,CAAC;IACpB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,CAAC,UAAU,EAAE,8BAA8B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,UAAU,CAAC,UAAU,EAAE,8BAA8B,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjH;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC5F;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,0BAA0B,CAAA;KAAE,CAAC;IAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GACjK;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,qBAAa,+BAA+B;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE;QAAE,SAAS,EAAE,wBAAwB,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE;IAE5G,GAAG,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAqDrF"}

package/dist/src/v2/implementation-reviewer.js

@@ -0,0 +1,157 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { canonicalJson, containsCredentialEvidence } from './containment.js';
+const SHA256 = /^[0-9a-f]{64}$/u;
+const MAX_CAPSULE_BYTES = 1024 * 1024;
+export class ContainedImplementationReviewer {
+    dependencies;
+    constructor(dependencies) {
+        this.dependencies = dependencies;
+    }
+    async run(input) {
+        let attemptId;
+        let promptFacts;
+        try {
+            attemptId = (this.dependencies.createAttemptId ?? randomUUID)();
+            assertText(attemptId, 'review attempt ID');
+            assertText(input.reviewerSessionId, 'reviewer session ID');
+            assertText(input.implementationAttemptId, 'implementation attempt ID');
+            if (attemptId === input.implementationAttemptId || input.reviewerSessionId === input.implementationAttemptId) {
+                throw new Error('reviewer identity is not independent');
+            }
+            assertPositiveInteger(input.targetRevision, 'target revision');
+            assertSha256(input.targetFingerprint, 'target fingerprint');
+            if (input.closureRequestSha256 !== null)
+                assertSha256(input.closureRequestSha256, 'Closure request hash');
+            if ((input.mode === 'full') !== (input.closureRequestSha256 === null))
+                throw new Error('review mode/Closure hash mismatch');
+            promptFacts = [buildCapsule(input)];
+        }
+        catch (error) {
+            return {
+                kind: 'internal-error',
+                code: safeCode(error, input.repairOnly ? 'review-report-repair-input-invalid' : 'review-input-invalid'),
+            };
+        }
+        const invocation = {
+            attemptId, operation: input.operation, mode: input.mode, reviewerSessionId: input.reviewerSessionId,
+            targetRevision: input.targetRevision, targetFingerprint: input.targetFingerprint,
+            closureRequestSha256: input.closureRequestSha256,
+        };
+        let result;
+        try {
+            result = await this.dependencies.operation.run({
+                operation: input.operation,
+                attemptId,
+                runId: input.runId,
+                worktreePath: input.worktreePath,
+                workflowGeneration: structuredClone(input.workflowGeneration),
+                promptFacts,
+                signal: input.signal,
+                reviewContext: {
+                    operation: input.operation, mode: input.mode, targetRevision: input.targetRevision,
+                    targetFingerprint: input.targetFingerprint, reviewerSessionId: input.reviewerSessionId,
+                    closureRequestSha256: input.closureRequestSha256,
+                    fixedRepairFindingIds: input.fixedRepairFindings.map((finding) => finding.id).sort(),
+                    mandatoryCoverage: [...input.mandatoryCoverage].sort(),
+                },
+                onPrepared: () => input.onPrepared(structuredClone(invocation)),
+                onLaunched: ({ pid, processGroupId }) => input.onLaunched({ ...structuredClone(invocation), pid, processGroupId }),
+            });
+        }
+        catch {
+            return { kind: 'internal-error', code: 'review-operation-threw' };
+        }
+        return mapResult(result);
+    }
+}
+function buildCapsule(input) {
+    const repair = input.repairOnly
+        ? validateRepairInput(input.originalReportSha256, input.validationDiagnostic, input.originalReportBytes)
+        : rejectUnexpectedRepairInput(input.originalReportSha256, input.validationDiagnostic, input.originalReportBytes);
+    const text = canonicalJson({
+        version: 1, operation: input.operation, mode: input.mode, reviewerSessionId: input.reviewerSessionId,
+        targetRevision: input.targetRevision, targetFingerprint: input.targetFingerprint,
+        closureRequestSha256: input.closureRequestSha256, issue: input.issue, frozenCriteria: input.frozenCriteria,
+        routeReceipt: input.routeReceipt, defects: input.defects,
+        affectedDefectIds: sortedUnique(input.affectedDefectIds, 'affected defect IDs'),
+        fixedRepairFindings: input.fixedRepairFindings.map((finding) => ({
+            id: finding.id,
+            affectedContracts: sortedUnique(finding.affectedContracts, 'fixed repair finding contracts'),
+        })).sort((left, right) => left.id.localeCompare(right.id)),
+        mandatoryCoverage: sortedUnique(input.mandatoryCoverage, 'mandatory coverage'),
+        repairOnly: input.repairOnly, repair,
+    });
+    if (Buffer.byteLength(text, 'utf8') > MAX_CAPSULE_BYTES || containsCredentialEvidence(text)) {
+        throw new Error('review capsule is unsafe or oversized');
+    }
+    return text;
+}
+function validateRepairInput(hash, diagnostic, bytes) {
+    if (hash === null || diagnostic === null || bytes === null)
+        throw new Error('report repair input is incomplete');
+    assertSha256(hash, 'original report hash');
+    assertText(diagnostic, 'validation diagnostic');
+    if (bytes.length > MAX_CAPSULE_BYTES || createHash('sha256').update(bytes).digest('hex') !== hash) {
+        throw new Error('original report bytes do not match repair hash');
+    }
+    const text = bytes.toString('utf8');
+    if (!Buffer.from(text, 'utf8').equals(bytes) || containsCredentialEvidence(text))
+        throw new Error('original report bytes are unsafe');
+    return { originalReportSha256: hash, validationDiagnostic: diagnostic, originalReport: text };
+}
+function rejectUnexpectedRepairInput(hash, diagnostic, bytes) {
+    if (hash !== null || diagnostic !== null || bytes !== null)
+        throw new Error('Full/Closure review cannot carry report repair bytes');
+    return null;
+}
+function mapResult(result) {
+    if (result.status === 'completed')
+        return {
+            kind: 'completed', attemptId: result.attemptId, report: result.validatedPayload,
+            artifactSha256: result.artifactSha256,
+        };
+    if (result.status === 'retryable')
+        return { kind: 'transport-failed', resumable: true };
+    if (result.status === 'safe-halt')
+        return { kind: 'safe-halt', process: result.process, waitForAbsence: result.waitForAbsence };
+    if (result.status === 'cancelled')
+        return { kind: 'cancelled' };
+    if (result.status === 'invalid' && result.repairInput)
+        return {
+            kind: 'report-invalid',
+            diagnostic: result.findings[0] ?? 'review report is invalid',
+            originalReportSha256: result.repairInput.originalReportSha256,
+            originalReportBytes: Buffer.from(result.repairInput.originalReportBytes),
+        };
+    return { kind: 'internal-error', code: result.status === 'invalid' ? 'review-report-invalid' : result.code };
+}
+function sortedUnique(value, field) {
+    if (!Array.isArray(value) || value.length > 256 || value.some((item) => typeof item !== 'string' || item.length === 0))
+        throw new Error(`${field} is invalid`);
+    const sorted = [...value].sort();
+    if (sorted.some((item, index) => index > 0 && item === sorted[index - 1]))
+        throw new Error(`${field} has duplicates`);
+    return sorted;
+}
+function assertText(value, field) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 16 * 1024)
+        throw new Error(`${field} is invalid`);
+}
+function assertSha256(value, field) {
+    if (typeof value !== 'string' || !SHA256.test(value))
+        throw new Error(`${field} is invalid`);
+}
+function assertPositiveInteger(value, field) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error(`${field} is invalid`);
+}
+function safeCode(error, fallback) {
+    if (!(error instanceof Error))
+        return fallback;
+    if (/independent/u.test(error.message))
+        return 'reviewer-identity-not-independent';
+    if (/repair/u.test(error.message))
+        return 'review-report-repair-input-invalid';
+    return fallback;
+}
+//# sourceMappingURL=implementation-reviewer.js.map

package/dist/src/v2/implementation-reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation-reviewer.js","sourceRoot":"","sources":["../../../src/v2/implementation-reviewer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAK7E,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AA+CtC,MAAM,OAAO,+BAA+B;IACb;IAA7B,YAA6B,YAAqF;QAArF,iBAAY,GAAZ,YAAY,CAAyE;IAAG,CAAC;IAEtH,KAAK,CAAC,GAAG,CAAC,KAAkC;QAC1C,IAAI,SAAiB,CAAC;QACtB,IAAI,WAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,UAAU,CAAC,EAAE,CAAC;YAChE,UAAU,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAC3C,UAAU,CAAC,KAAK,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;YAC3D,UAAU,CAAC,KAAK,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;YACvE,IAAI,SAAS,KAAK,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBAC7G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,qBAAqB,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YAC/D,YAAY,CAAC,KAAK,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI;gBAAE,YAAY,CAAC,KAAK,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;YAC1G,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC5H,WAAW,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,sBAAsB,CAAC;aACxG,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAmC;YACjD,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YACnG,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAChF,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC;QACF,IAAI,MAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC;gBAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,kBAAkB,EAAE,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBAC7D,WAAW;gBACX,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa,EAAE;oBACb,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;oBAClF,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBACtF,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;oBAChD,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;oBACpF,iBAAiB,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;iBACvD;gBACD,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC/D,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;aACnH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAkC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU;QAC7B,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QACxG,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,aAAa,CAAC;QACzB,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QACpG,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAChF,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;QAC1G,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;QACxD,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;QAC/E,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/D,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,iBAAiB,EAAE,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;SAC7F,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1D,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;QAC9E,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM;KACrC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,iBAAiB,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAmB,EAAE,UAAyB,EAAE,KAAoB;IAC/F,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjH,YAAY,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAC3C,UAAU,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtI,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAmB,EAAE,UAAyB,EAAE,KAAoB;IACvG,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACpI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,MAAsC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO;YACxC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAsC;YACrG,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;IAChI,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO;YAC5D,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,0BAA0B;YAC5D,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,oBAAoB;YAC7D,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC;SACzE,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/G,CAAC;AAED,SAAS,YAAY,CAAC,KAAe,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/J,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IACtH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;AAC1H,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB;IAChD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,mCAAmC,CAAC;IACnF,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,oCAAoC,CAAC;IAC/E,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/v2/owner-control-lock.d.ts

@@ -0,0 +1,41 @@
+interface OwnerControlRecordV1 {
+    version: 1;
+    token: string;
+    canonicalRepository: string;
+    host: string;
+    bootId: string;
+    pid: number;
+    acquiredAt: string;
+}
+export declare function inspectOwnerControlLock(input: {
+    orchestratorHome: string;
+    canonicalRepository: string;
+    bootId: string;
+    host: string;
+    processAlive(pid: number): boolean;
+}): Promise<{
+    status: 'absent' | 'active' | 'ambiguous';
+    reason?: string;
+}>;
+export declare class OwnerControlLockBlockedError extends Error {
+    readonly kind: 'live-contention' | 'safety';
+    constructor(message?: string, kind?: 'live-contention' | 'safety');
+}
+export interface OwnerControlLockInput {
+    orchestratorHome: string;
+    canonicalRepository: string;
+    bootId: string;
+    host: string;
+    pid: number;
+    now(): string;
+    createToken(): string;
+    processAlive(pid: number): boolean;
+    waitMs?: number;
+    pollMs?: number;
+    afterObservedOwner?(owner: Readonly<OwnerControlRecordV1>): Promise<void>;
+}
+export declare function acquireOwnerControlLock(input: OwnerControlLockInput): Promise<{
+    release(): Promise<void>;
+}>;
+export {};
+//# sourceMappingURL=owner-control-lock.d.ts.map

package/dist/src/v2/owner-control-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-control-lock.d.ts","sourceRoot":"","sources":["../../../src/v2/owner-control-lock.ts"],"names":[],"mappings":"AAQA,UAAU,oBAAoB;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACpC,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB1E;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IACY,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,QAAQ;gBAAhG,OAAO,SAA4C,EAAW,IAAI,GAAE,iBAAiB,GAAG,QAAmB;CAIxH;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,IAAI,MAAM,CAAC;IACd,WAAW,IAAI,MAAM,CAAC;IACtB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAyCjH"}