codex-workflow-v2 2.0.0-beta.13.8 → 2.0.0-beta.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +27 -388
- package/dist/reviewer-runtime-build.json +96 -32
- package/dist/src/alpha6/adoption.d.ts +2 -0
- package/dist/src/alpha6/adoption.js +22 -0
- package/dist/src/alpha6/adoption.js.map +1 -1
- package/dist/src/alpha6/captured-check-evidence.d.ts +51 -0
- package/dist/src/alpha6/captured-check-evidence.js +152 -0
- package/dist/src/alpha6/captured-check-evidence.js.map +1 -0
- package/dist/src/alpha6/component-owner.d.ts +15 -1
- package/dist/src/alpha6/component-owner.js +44 -2
- package/dist/src/alpha6/component-owner.js.map +1 -1
- package/dist/src/alpha6/corrective-decision-boundary.d.ts +4 -0
- package/dist/src/alpha6/corrective-decision-boundary.js +47 -0
- package/dist/src/alpha6/corrective-decision-boundary.js.map +1 -0
- package/dist/src/alpha6/downstream-proof.d.ts +1 -25
- package/dist/src/alpha6/downstream-proof.js +0 -171
- package/dist/src/alpha6/downstream-proof.js.map +1 -1
- package/dist/src/alpha6/failed-step-planning-recovery.d.ts +10 -0
- package/dist/src/alpha6/failed-step-planning-recovery.js +93 -0
- package/dist/src/alpha6/failed-step-planning-recovery.js.map +1 -0
- package/dist/src/alpha6/literal-test-invocation.d.ts +2 -0
- package/dist/src/alpha6/literal-test-invocation.js +106 -0
- package/dist/src/alpha6/literal-test-invocation.js.map +1 -0
- package/dist/src/alpha6/milestone.d.ts +2 -0
- package/dist/src/alpha6/milestone.js +10 -1
- package/dist/src/alpha6/milestone.js.map +1 -1
- package/dist/src/alpha6/navigation-dirty-carryover.d.ts +11 -0
- package/dist/src/alpha6/navigation-dirty-carryover.js +130 -0
- package/dist/src/alpha6/navigation-dirty-carryover.js.map +1 -0
- package/dist/src/alpha6/plan-integrity.js +7 -5
- package/dist/src/alpha6/plan-integrity.js.map +1 -1
- package/dist/src/alpha6/plan-risk.d.ts +2 -0
- package/dist/src/alpha6/plan-risk.js +10 -3
- package/dist/src/alpha6/plan-risk.js.map +1 -1
- package/dist/src/alpha6/remediation.d.ts +6 -21
- package/dist/src/alpha6/remediation.js +161 -476
- package/dist/src/alpha6/remediation.js.map +1 -1
- package/dist/src/alpha6/root-cause-replan-carryover.d.ts +4 -1
- package/dist/src/alpha6/root-cause-replan-carryover.js +29 -5
- package/dist/src/alpha6/root-cause-replan-carryover.js.map +1 -1
- package/dist/src/beta1/project-transaction.d.ts +3 -1
- package/dist/src/beta1/project-transaction.js +6 -2
- package/dist/src/beta1/project-transaction.js.map +1 -1
- package/dist/src/checks/runner.d.ts +26 -0
- package/dist/src/checks/runner.js +223 -0
- package/dist/src/checks/runner.js.map +1 -0
- package/dist/src/checks/task-sync.d.ts +10 -0
- package/dist/src/checks/task-sync.js +41 -0
- package/dist/src/checks/task-sync.js.map +1 -0
- package/dist/src/checks/worker.d.ts +1 -0
- package/dist/src/checks/worker.js +154 -0
- package/dist/src/checks/worker.js.map +1 -0
- package/dist/src/cli-actions.d.ts +2 -2
- package/dist/src/cli-actions.js +3 -15
- package/dist/src/cli-actions.js.map +1 -1
- package/dist/src/cli.js +14 -98
- package/dist/src/cli.js.map +1 -1
- package/dist/src/contracts.d.ts +35 -32
- package/dist/src/dependency-provenance.d.ts +2 -2
- package/dist/src/dependency-provenance.js +12 -69
- package/dist/src/dependency-provenance.js.map +1 -1
- package/dist/src/domain/base-sync-conflict.d.ts +13 -0
- package/dist/src/domain/base-sync-conflict.js +32 -0
- package/dist/src/domain/base-sync-conflict.js.map +1 -0
- package/dist/src/domain/step-start-admission.d.ts +4 -0
- package/dist/src/domain/step-start-admission.js +9 -0
- package/dist/src/domain/step-start-admission.js.map +1 -0
- package/dist/src/domain/virgin-registration.d.ts +3 -0
- package/dist/src/domain/virgin-registration.js +65 -0
- package/dist/src/domain/virgin-registration.js.map +1 -0
- package/dist/src/errors.d.ts +1 -1
- package/dist/src/errors.js.map +1 -1
- package/dist/src/gateway-handshake.js +0 -8
- package/dist/src/gateway-handshake.js.map +1 -1
- package/dist/src/git.d.ts +3 -1
- package/dist/src/git.js +41 -14
- package/dist/src/git.js.map +1 -1
- package/dist/src/graph.js +25 -3
- package/dist/src/graph.js.map +1 -1
- package/dist/src/index.d.ts +1 -0
- package/dist/src/lifecycle/corrective-replan.js +3 -3
- package/dist/src/lifecycle/corrective-replan.js.map +1 -1
- package/dist/src/navigation-actions.d.ts +9 -0
- package/dist/src/navigation-actions.js +72 -0
- package/dist/src/navigation-actions.js.map +1 -0
- package/dist/src/navigation-update-artifact.d.ts +5 -0
- package/dist/src/navigation-update-artifact.js +227 -0
- package/dist/src/navigation-update-artifact.js.map +1 -0
- package/dist/src/navigation-update.d.ts +39 -0
- package/dist/src/navigation-update.js +82 -0
- package/dist/src/navigation-update.js.map +1 -0
- package/dist/src/observation.js +52 -29
- package/dist/src/observation.js.map +1 -1
- package/dist/src/observed-routes.js +5 -6
- package/dist/src/observed-routes.js.map +1 -1
- package/dist/src/pending-review-update.d.ts +0 -13
- package/dist/src/pending-review-update.js +1 -6
- package/dist/src/pending-review-update.js.map +1 -1
- package/dist/src/reviewer.d.ts +1 -1
- package/dist/src/reviewer.js +20 -17
- package/dist/src/reviewer.js.map +1 -1
- package/dist/src/runtime.d.ts +3 -0
- package/dist/src/runtime.js +6 -0
- package/dist/src/runtime.js.map +1 -0
- package/dist/src/state/corrective-replan-executor.d.ts +10 -0
- package/dist/src/state/corrective-replan-executor.js +37 -1
- package/dist/src/state/corrective-replan-executor.js.map +1 -1
- package/dist/src/state/corrective-replan-public-schema.js +15 -2
- package/dist/src/state/corrective-replan-public-schema.js.map +1 -1
- package/dist/src/state/corrective-replan-public.js +6 -5
- package/dist/src/state/corrective-replan-public.js.map +1 -1
- package/dist/src/state/corrective-replan-transaction.d.ts +1 -0
- package/dist/src/state/corrective-replan-transaction.js +12 -11
- package/dist/src/state/corrective-replan-transaction.js.map +1 -1
- package/dist/src/state/corrective-yield-executor.js +2 -2
- package/dist/src/state/corrective-yield-executor.js.map +1 -1
- package/dist/src/state/corrective-yield-transaction.d.ts +1 -0
- package/dist/src/state/corrective-yield-transaction.js +11 -10
- package/dist/src/state/corrective-yield-transaction.js.map +1 -1
- package/dist/src/state/lock.d.ts +4 -0
- package/dist/src/state/lock.js +21 -0
- package/dist/src/state/lock.js.map +1 -1
- package/dist/src/version.d.ts +1 -1
- package/dist/src/version.js +1 -1
- package/dist/src/version.js.map +1 -1
- package/dist/src/workflow-blocker-route.d.ts +8 -0
- package/dist/src/workflow-blocker-route.js +106 -0
- package/dist/src/workflow-blocker-route.js.map +1 -0
- package/dist/src/workflow.d.ts +48 -63
- package/dist/src/workflow.js +698 -1470
- package/dist/src/workflow.js.map +1 -1
- package/docs/autonomy-guardrails.md +26 -304
- package/docs/decisions.md +14 -112
- package/docs/development-flow.md +35 -238
- package/docs/project-memory.md +31 -50
- package/docs/release-app-evidence.md +190 -0
- package/docs/release.md +95 -363
- package/docs/updating-existing-project.md +19 -717
- package/package.json +11 -13
- package/plugins/codex-workflow-gateway/.codex-plugin/plugin.json +2 -2
- package/plugins/codex-workflow-gateway/references/chat-dispatch.md +73 -197
- package/plugins/codex-workflow-gateway/references/codebase-memory-routing.md +57 -0
- package/plugins/codex-workflow-gateway/references/protocol.md +42 -445
- package/plugins/codex-workflow-gateway/scripts/chat-dispatch.mjs +7 -1
- package/plugins/codex-workflow-gateway/scripts/chat-model-policy.mjs +10 -8
- package/plugins/codex-workflow-gateway/scripts/chat-registry.mjs +23 -5
- package/plugins/codex-workflow-gateway/skills/codex-workflow-gateway/SKILL.md +66 -740
- package/references/state-machine.md +4 -4
- package/roles/technical-planner.md +1 -1
- package/schemas/corrective-decision-event.schema.json +3 -1
- package/schemas/project-knowledge-map.schema.json +3 -1
- package/schemas/remediation-event.schema.json +10 -1
- package/schemas/task.schema.json +46 -2
- package/schemas/transition-payloads.schema.json +16 -1
- package/src/alpha6/adoption.ts +1123 -0
- package/src/alpha6/captured-check-evidence.ts +132 -0
- package/src/alpha6/check-support-anchor.ts +128 -0
- package/src/alpha6/component-owner.ts +168 -0
- package/src/alpha6/corrective-decision-boundary.ts +39 -0
- package/src/alpha6/downstream-proof.ts +520 -0
- package/src/alpha6/failed-step-planning-recovery.ts +88 -0
- package/src/alpha6/handoff.ts +1443 -0
- package/src/alpha6/journal.ts +473 -0
- package/src/alpha6/literal-test-invocation.ts +84 -0
- package/src/alpha6/mechanical-feasibility.ts +488 -0
- package/src/alpha6/milestone.ts +2192 -0
- package/src/alpha6/navigation-dirty-carryover.ts +154 -0
- package/src/alpha6/npm-check-contract.ts +47 -0
- package/src/alpha6/plan-integrity.ts +298 -0
- package/src/alpha6/plan-risk.ts +1480 -0
- package/src/alpha6/preexecution-replan.ts +187 -0
- package/src/alpha6/remediation-cause.ts +98 -0
- package/src/alpha6/remediation.ts +2438 -0
- package/src/alpha6/review.ts +1198 -0
- package/src/alpha6/root-cause-replan-carryover.ts +491 -0
- package/src/alpha6/store-sidecars.ts +335 -0
- package/src/alpha7/autonomy.ts +411 -0
- package/src/alpha7/corrective-recovery.ts +1332 -0
- package/src/artifacts.ts +130 -0
- package/src/beta1/project-transaction.ts +355 -0
- package/src/change-explanation.ts +153 -0
- package/src/checks/runner.ts +245 -0
- package/src/checks/task-sync.ts +41 -0
- package/src/checks/worker.ts +149 -0
- package/src/cli-actions.ts +107 -0
- package/src/cli.ts +1457 -0
- package/src/contracts.ts +1494 -0
- package/src/credential-output.ts +89 -0
- package/src/credential-transport.ts +215 -0
- package/src/delegation.ts +190 -0
- package/src/dependency-provenance.ts +472 -0
- package/src/diagnostics.ts +93 -0
- package/src/domain/base-sync-conflict.ts +35 -0
- package/src/domain/completed-step-carryover.ts +76 -0
- package/src/domain/discovery.ts +27 -0
- package/src/domain/plan-semantics.ts +58 -0
- package/src/domain/step-start-admission.ts +10 -0
- package/src/domain/validation.ts +177 -0
- package/src/domain/virgin-registration.ts +46 -0
- package/src/errors.ts +24 -0
- package/src/fs-utils.ts +61 -0
- package/src/gateway-handshake.ts +95 -0
- package/src/git.ts +183 -0
- package/src/graph.ts +342 -0
- package/src/historical-step-provenance.ts +136 -0
- package/src/index.ts +23 -0
- package/src/lifecycle/canonical-hash.ts +28 -0
- package/src/lifecycle/catalog.ts +202 -0
- package/src/lifecycle/compiler-inspection.ts +29 -0
- package/src/lifecycle/core-static-readiness.ts +132 -0
- package/src/lifecycle/corrective-replan-authority.ts +136 -0
- package/src/lifecycle/corrective-replan-binding-manifest.ts +51 -0
- package/src/lifecycle/corrective-replan-credential-core.ts +408 -0
- package/src/lifecycle/corrective-replan-credential-schema.ts +54 -0
- package/src/lifecycle/corrective-replan-credentials.ts +48 -0
- package/src/lifecycle/corrective-replan.ts +843 -0
- package/src/lifecycle/evaluator.ts +48 -0
- package/src/lifecycle/fingerprint.ts +488 -0
- package/src/lifecycle/immutable.ts +8 -0
- package/src/lifecycle/implementation-table.ts +118 -0
- package/src/lifecycle/index.ts +8 -0
- package/src/lifecycle/schema-artifact.ts +263 -0
- package/src/lifecycle/semantic-registry.ts +572 -0
- package/src/lifecycle/types.ts +838 -0
- package/src/memory.ts +273 -0
- package/src/migration.ts +161 -0
- package/src/navigation-actions.ts +70 -0
- package/src/navigation-update-artifact.ts +198 -0
- package/src/navigation-update.ts +121 -0
- package/src/observation.ts +225 -0
- package/src/observed-routes.ts +660 -0
- package/src/operational-contract.ts +125 -0
- package/src/pending-review-update.ts +175 -0
- package/src/repository.ts +99 -0
- package/src/reviewer.ts +1879 -0
- package/src/runtime.ts +6 -0
- package/src/state/corrective-replan-executor.ts +818 -0
- package/src/state/corrective-replan-public-schema.ts +83 -0
- package/src/state/corrective-replan-public.ts +908 -0
- package/src/state/corrective-replan-transaction.ts +949 -0
- package/src/state/corrective-yield-executor.ts +327 -0
- package/src/state/corrective-yield-transaction.ts +730 -0
- package/src/state/lock.ts +902 -0
- package/src/state/store.ts +567 -0
- package/src/transition-core.ts +330 -0
- package/src/ulid.ts +24 -0
- package/src/version.ts +2 -0
- package/src/workflow-blocker-route.ts +109 -0
- package/src/workflow.ts +10172 -0
- package/docs/alpha7.1-implementation-brief.md +0 -268
- package/docs/alpha7.2-corrective-context-refresh-brief.md +0 -484
- package/docs/alpha7.2.1-remediation-recovery-brief.md +0 -86
- package/docs/beta1-stabilization-brief.md +0 -165
- package/docs/beta11-plan-integrity-recovery-brief.md +0 -38
- package/docs/beta13.2-signal-review-recovery.md +0 -38
- package/docs/beta2-initial-assembly-navigation-brief.md +0 -616
- package/docs/change-model.md +0 -118
- package/docs/delegated-approval.md +0 -254
- package/docs/lifecycle/state-machine-stabilization.md +0 -641
- package/docs/pdf/README.md +0 -24
- package/docs/pdf/codex-workflow-v2-architecture-ru.pdf +0 -0
- package/docs/pdf/codex-workflow-v2-chat-only-guide-ru.pdf +0 -0
- package/docs/pdf/codex-workflow-v2-technical-reference-ru.pdf +0 -0
- package/docs/pdf/requirements.txt +0 -1
- package/docs/pdf/sources/codex-workflow-v2-architecture-ru.md +0 -478
- package/docs/pdf/sources/codex-workflow-v2-chat-only-guide-ru.md +0 -508
- package/docs/pdf/sources/codex-workflow-v2-technical-reference-ru.md +0 -778
- package/docs/pending-review-update.md +0 -15
- package/docs/problem-briefs/01-pre-implementation-integrity.md +0 -482
- package/docs/problem-briefs/02-minimal-step-integrity.md +0 -411
- package/docs/problem-briefs/03-minimal-agent-context-integrity.md +0 -358
- package/docs/problem-briefs/04-task-dependency-and-structural-replacement-integrity.md +0 -573
- package/docs/problem-briefs/BRIEF-TEMPLATE.md +0 -56
- package/docs/problem-briefs/README.md +0 -120
- package/docs/problem-briefs/evidence/p01-mechanical-feasibility-corpus.md +0 -90
- package/docs/problem-briefs/evidence/signal-v4-pre-m3-replay.md +0 -246
- package/docs/split-required-recovery.md +0 -47
- package/docs/stable-release-defect-register.md +0 -730
- package/docs/validation-report.md +0 -182
- package/scripts/generate-pdf-docs.py +0 -524
- package/scripts/run-pdf-docs.mjs +0 -62
|
@@ -0,0 +1,227 @@
|
|
|
1
|
+
import { execFileSync } from 'node:child_process';
|
|
2
|
+
import { createHash } from 'node:crypto';
|
|
3
|
+
import { closeSync, constants, fstatSync, lstatSync, openSync, readSync, realpathSync } from 'node:fs';
|
|
4
|
+
import path from 'node:path';
|
|
5
|
+
import { fileURLToPath } from 'node:url';
|
|
6
|
+
import { pendingReviewRunnerFingerprint } from './pending-review-update.js';
|
|
7
|
+
import { PACKAGE_NAME, PACKAGE_VERSION } from './version.js';
|
|
8
|
+
const MAX_COMPRESSED = 32 * 1024 * 1024;
|
|
9
|
+
const MAX_EXPANDED = 128 * 1024 * 1024;
|
|
10
|
+
const MAX_FILE = 32 * 1024 * 1024;
|
|
11
|
+
const MAX_ENTRIES = 10_000;
|
|
12
|
+
const BLOCK = 512;
|
|
13
|
+
const decoder = new TextDecoder('utf-8', { fatal: true });
|
|
14
|
+
function reject(message) {
|
|
15
|
+
throw new Error(`NAVIGATION_UPDATE_ARTIFACT_INVALID: ${message}`);
|
|
16
|
+
}
|
|
17
|
+
function digest(bytes) {
|
|
18
|
+
return createHash('sha256').update(bytes).digest('hex');
|
|
19
|
+
}
|
|
20
|
+
function readRegular(file, maximum) {
|
|
21
|
+
let descriptor;
|
|
22
|
+
try {
|
|
23
|
+
descriptor = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
|
|
24
|
+
const before = fstatSync(descriptor);
|
|
25
|
+
if (!before.isFile() || before.size > maximum)
|
|
26
|
+
reject('A required file is nonregular or exceeds its size limit.');
|
|
27
|
+
const bounded = Buffer.alloc(before.size + 1);
|
|
28
|
+
let length = 0;
|
|
29
|
+
while (length < bounded.length) {
|
|
30
|
+
const read = readSync(descriptor, bounded, length, bounded.length - length, null);
|
|
31
|
+
if (read === 0)
|
|
32
|
+
break;
|
|
33
|
+
length += read;
|
|
34
|
+
}
|
|
35
|
+
const bytes = bounded.subarray(0, length);
|
|
36
|
+
const after = fstatSync(descriptor);
|
|
37
|
+
if (bytes.length !== before.size || after.size !== before.size || after.mtimeMs !== before.mtimeMs
|
|
38
|
+
|| after.ctimeMs !== before.ctimeMs)
|
|
39
|
+
reject('A required file changed while being inspected.');
|
|
40
|
+
return bytes;
|
|
41
|
+
}
|
|
42
|
+
finally {
|
|
43
|
+
if (descriptor !== undefined)
|
|
44
|
+
closeSync(descriptor);
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
function textField(field) {
|
|
48
|
+
const nul = field.indexOf(0);
|
|
49
|
+
if (nul >= 0 && field.subarray(nul).some(byte => byte !== 0))
|
|
50
|
+
reject('Noncanonical tar string field.');
|
|
51
|
+
return decoder.decode(nul < 0 ? field : field.subarray(0, nul));
|
|
52
|
+
}
|
|
53
|
+
function octal(field) {
|
|
54
|
+
const value = field.toString('ascii').replace(/[\0 ]+$/g, '').trim();
|
|
55
|
+
if (value && !/^[0-7]+$/.test(value))
|
|
56
|
+
reject('Unsupported or invalid tar numeric field.');
|
|
57
|
+
const number = value ? Number.parseInt(value, 8) : 0;
|
|
58
|
+
if (!Number.isSafeInteger(number) || number < 0)
|
|
59
|
+
reject('Tar numeric field exceeds the supported range.');
|
|
60
|
+
return number;
|
|
61
|
+
}
|
|
62
|
+
function safeName(name, directory) {
|
|
63
|
+
const normalized = directory && name.endsWith('/') ? name.slice(0, -1) : name;
|
|
64
|
+
if (!normalized || normalized.length > 4096 || normalized.startsWith('/')
|
|
65
|
+
|| /[\\\x00-\x1f\x7f]/.test(normalized)
|
|
66
|
+
|| normalized.split('/').some(part => !part || part === '.' || part === '..')) {
|
|
67
|
+
reject('Tar entry has an unsafe or noncanonical path.');
|
|
68
|
+
}
|
|
69
|
+
return normalized;
|
|
70
|
+
}
|
|
71
|
+
function paxFields(bytes) {
|
|
72
|
+
if (bytes.length > 64 * 1024)
|
|
73
|
+
reject('PAX metadata exceeds its size limit.');
|
|
74
|
+
const result = Object.create(null);
|
|
75
|
+
let offset = 0;
|
|
76
|
+
while (offset < bytes.length) {
|
|
77
|
+
const space = bytes.indexOf(32, offset);
|
|
78
|
+
if (space < 0 || space - offset > 8)
|
|
79
|
+
reject('Malformed PAX record length.');
|
|
80
|
+
const digits = bytes.subarray(offset, space).toString('ascii');
|
|
81
|
+
if (!/^[1-9][0-9]*$/.test(digits))
|
|
82
|
+
reject('Malformed PAX record length.');
|
|
83
|
+
const length = Number(digits);
|
|
84
|
+
const end = offset + length;
|
|
85
|
+
if (end > bytes.length || end <= space + 2 || bytes[end - 1] !== 10)
|
|
86
|
+
reject('Truncated PAX record.');
|
|
87
|
+
const record = decoder.decode(bytes.subarray(space + 1, end - 1));
|
|
88
|
+
const separator = record.indexOf('=');
|
|
89
|
+
const key = record.slice(0, separator);
|
|
90
|
+
if (separator < 1 || !['path', 'size', 'mtime', 'atime', 'ctime', 'uid', 'gid', 'uname', 'gname', 'charset'].includes(key)
|
|
91
|
+
|| Object.hasOwn(result, key))
|
|
92
|
+
reject('Unsupported or duplicate PAX metadata.');
|
|
93
|
+
result[key] = record.slice(separator + 1);
|
|
94
|
+
offset = end;
|
|
95
|
+
}
|
|
96
|
+
return result;
|
|
97
|
+
}
|
|
98
|
+
function unpack(bytes) {
|
|
99
|
+
const files = new Map();
|
|
100
|
+
const names = new Set();
|
|
101
|
+
let offset = 0;
|
|
102
|
+
let count = 0;
|
|
103
|
+
let pendingPax = null;
|
|
104
|
+
while (offset + BLOCK <= bytes.length) {
|
|
105
|
+
const header = bytes.subarray(offset, offset + BLOCK);
|
|
106
|
+
if (header.every(byte => byte === 0)) {
|
|
107
|
+
if (pendingPax || offset + 2 * BLOCK > bytes.length || bytes.subarray(offset).some(byte => byte !== 0)) {
|
|
108
|
+
reject('Tar end marker is incomplete or followed by unexpected data.');
|
|
109
|
+
}
|
|
110
|
+
return files;
|
|
111
|
+
}
|
|
112
|
+
if (++count > MAX_ENTRIES)
|
|
113
|
+
reject('Tar entry count exceeds its limit.');
|
|
114
|
+
const expectedChecksum = octal(header.subarray(148, 156));
|
|
115
|
+
const checksum = header.reduce((sum, byte, index) => sum + (index >= 148 && index < 156 ? 32 : byte), 0);
|
|
116
|
+
if (checksum !== expectedChecksum)
|
|
117
|
+
reject('Tar header checksum does not match.');
|
|
118
|
+
if (textField(header.subarray(257, 263)).trim() !== 'ustar')
|
|
119
|
+
reject('Only USTAR/PAX package archives are supported.');
|
|
120
|
+
const type = header[156];
|
|
121
|
+
if (![0, 48, 53, 120].includes(type))
|
|
122
|
+
reject('Tar links, special files and unsupported metadata are forbidden.');
|
|
123
|
+
if (textField(header.subarray(157, 257)))
|
|
124
|
+
reject('Tar link targets are forbidden.');
|
|
125
|
+
const prefix = textField(header.subarray(345, 500));
|
|
126
|
+
const baseName = textField(header.subarray(0, 100));
|
|
127
|
+
const headerName = safeName(prefix ? `${prefix}/${baseName}` : baseName, type === 53);
|
|
128
|
+
const size = octal(header.subarray(124, 136));
|
|
129
|
+
if (size > MAX_FILE)
|
|
130
|
+
reject('Tar entry exceeds its size limit.');
|
|
131
|
+
const start = offset + BLOCK;
|
|
132
|
+
const end = start + size;
|
|
133
|
+
const paddedEnd = start + Math.ceil(size / BLOCK) * BLOCK;
|
|
134
|
+
if (paddedEnd > bytes.length)
|
|
135
|
+
reject('Tar entry data is truncated.');
|
|
136
|
+
if (bytes.subarray(end, paddedEnd).some(byte => byte !== 0))
|
|
137
|
+
reject('Tar entry padding is not zero.');
|
|
138
|
+
offset = paddedEnd;
|
|
139
|
+
if (type === 120) {
|
|
140
|
+
if (pendingPax)
|
|
141
|
+
reject('Consecutive PAX headers are ambiguous.');
|
|
142
|
+
pendingPax = paxFields(bytes.subarray(start, end));
|
|
143
|
+
continue;
|
|
144
|
+
}
|
|
145
|
+
const name = safeName(pendingPax?.path ?? headerName, type === 53);
|
|
146
|
+
if (pendingPax?.size !== undefined && (!/^(0|[1-9][0-9]*)$/.test(pendingPax.size)
|
|
147
|
+
|| Number(pendingPax.size) !== size))
|
|
148
|
+
reject('PAX size does not match the bounded tar entry.');
|
|
149
|
+
pendingPax = null;
|
|
150
|
+
if (name !== 'package' && !name.startsWith('package/'))
|
|
151
|
+
reject('Tar entries must stay under package/.');
|
|
152
|
+
if (names.has(name))
|
|
153
|
+
reject('Duplicate tar paths are forbidden.');
|
|
154
|
+
names.add(name);
|
|
155
|
+
if (type === 53) {
|
|
156
|
+
if (size !== 0)
|
|
157
|
+
reject('Tar directory entries cannot contain data.');
|
|
158
|
+
}
|
|
159
|
+
else {
|
|
160
|
+
if (name === 'package')
|
|
161
|
+
reject('The package root must be a directory.');
|
|
162
|
+
files.set(name.slice('package/'.length), bytes.subarray(start, end));
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
reject('Tar archive is missing its complete end marker.');
|
|
166
|
+
}
|
|
167
|
+
/** Inspect an exact local package; no install, extraction, network or authority mutation. */
|
|
168
|
+
export function verifyNavigationUpdateArtifact(tarball, installedPackageRoot) {
|
|
169
|
+
try {
|
|
170
|
+
if (!tarball.trim())
|
|
171
|
+
reject('An explicit local tarball path is required.');
|
|
172
|
+
const compressed = readRegular(path.resolve(tarball), MAX_COMPRESSED);
|
|
173
|
+
if (compressed[0] !== 0x1f || compressed[1] !== 0x8b)
|
|
174
|
+
reject('The artifact must be a gzip tarball.');
|
|
175
|
+
// Isolate synchronous decompression so a corrupt archive has an enforced deadline.
|
|
176
|
+
const expanded = execFileSync(process.execPath, ['--input-type=module', '--eval',
|
|
177
|
+
`import{readFileSync}from'node:fs';import{gunzipSync}from'node:zlib';process.stdout.write(gunzipSync(readFileSync(0),{maxOutputLength:${MAX_EXPANDED}}));`], {
|
|
178
|
+
input: compressed, timeout: 10_000, killSignal: 'SIGKILL', maxBuffer: MAX_EXPANDED + 1024,
|
|
179
|
+
stdio: ['pipe', 'pipe', 'pipe'], env: { ...process.env, NODE_OPTIONS: '' },
|
|
180
|
+
});
|
|
181
|
+
if (expanded.length > MAX_EXPANDED)
|
|
182
|
+
reject('Expanded tarball exceeds its size limit.');
|
|
183
|
+
const files = unpack(expanded);
|
|
184
|
+
const manifestBytes = files.get('package.json');
|
|
185
|
+
const buildBytes = files.get('dist/reviewer-runtime-build.json');
|
|
186
|
+
if (!manifestBytes || !buildBytes)
|
|
187
|
+
reject('Package identity or runtime build evidence is missing.');
|
|
188
|
+
const pkg = JSON.parse(manifestBytes.toString('utf8'));
|
|
189
|
+
if (pkg.name !== PACKAGE_NAME || pkg.version !== PACKAGE_VERSION)
|
|
190
|
+
reject('Tarball package/version differs from the running Workflow.');
|
|
191
|
+
const build = JSON.parse(buildBytes.toString('utf8'));
|
|
192
|
+
if (!Array.isArray(build.files) || build.files.length === 0
|
|
193
|
+
|| build.files.some(entry => typeof entry.path !== 'string' || !files.has(entry.path))
|
|
194
|
+
|| !files.has('dist/src/navigation-update-artifact.js'))
|
|
195
|
+
reject('The tarball omits required runtime files.');
|
|
196
|
+
const packageRoot = realpathSync(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../..'));
|
|
197
|
+
if (installedPackageRoot !== undefined && !installedPackageRoot.trim())
|
|
198
|
+
reject('Installed package root must be explicit and nonempty.');
|
|
199
|
+
const roots = [
|
|
200
|
+
{ root: packageRoot, label: 'running' },
|
|
201
|
+
...(installedPackageRoot === undefined ? [] : [{ root: realpathSync(installedPackageRoot), label: 'installed' }]),
|
|
202
|
+
];
|
|
203
|
+
for (const { root, label } of roots) {
|
|
204
|
+
for (const [relative, content] of files) {
|
|
205
|
+
let current = root;
|
|
206
|
+
const parts = relative.split('/');
|
|
207
|
+
for (let index = 0; index < parts.length; index++) {
|
|
208
|
+
current = path.join(current, parts[index]);
|
|
209
|
+
const stat = lstatSync(current);
|
|
210
|
+
if (stat.isSymbolicLink() || (index < parts.length - 1 && !stat.isDirectory())) {
|
|
211
|
+
reject(`The ${label} package path is not a regular confined path: ${relative}`);
|
|
212
|
+
}
|
|
213
|
+
}
|
|
214
|
+
if (!readRegular(current, MAX_FILE).equals(content))
|
|
215
|
+
reject(`Tarball bytes differ from the ${label} package: ${relative}`);
|
|
216
|
+
}
|
|
217
|
+
}
|
|
218
|
+
const runtimeHash = pendingReviewRunnerFingerprint();
|
|
219
|
+
return { sha256: digest(compressed), runtimeHash };
|
|
220
|
+
}
|
|
221
|
+
catch (error) {
|
|
222
|
+
if (error instanceof Error && error.message.startsWith('NAVIGATION_UPDATE_ARTIFACT_INVALID:'))
|
|
223
|
+
throw error;
|
|
224
|
+
reject(error instanceof Error ? error.message : 'Artifact inspection failed.');
|
|
225
|
+
}
|
|
226
|
+
}
|
|
227
|
+
//# sourceMappingURL=navigation-update-artifact.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"navigation-update-artifact.js","sourceRoot":"","sources":["../../src/navigation-update-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE7D,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE1D,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,OAAO;YAAE,MAAM,CAAC,0DAA0D,CAAC,CAAC;QAClH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YAClF,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM;YACtB,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;eAC7F,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,gDAAgD,CAAC,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;QAAE,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACvG,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,gDAAgD,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAkB;IAChD,MAAM,UAAU,GAAG,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;WACpE,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;WACpC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,+CAA+C,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;QAAE,MAAM,CAAC,sCAAsC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IACrF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;QAC5B,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;eACrH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,CAAC,wCAAwC,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAkC,IAAI,CAAC;IACrD,OAAO,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,UAAU,IAAI,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvG,MAAM,CAAC,8DAA8D,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,WAAW;YAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACxE,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzG,IAAI,QAAQ,KAAK,gBAAgB;YAAE,MAAM,CAAC,qCAAqC,CAAC,CAAC;QACjF,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO;YAAE,MAAM,CAAC,gDAAgD,CAAC,CAAC;QACtH,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC;YAAE,MAAM,CAAC,kEAAkE,CAAC,CAAC;QAClH,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,GAAG,QAAQ;YAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;QAC1D,IAAI,SAAS,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;YAAE,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACtG,MAAM,GAAG,SAAS,CAAC;QACnB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,UAAU;gBAAE,MAAM,CAAC,wCAAwC,CAAC,CAAC;YACjE,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;QACnE,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;eAC5E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,MAAM,CAAC,gDAAgD,CAAC,CAAC;QACjG,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACxG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,4CAA4C,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;YACxE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,MAAM,CAAC,iDAAiD,CAAC,CAAC;AAC5D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,8BAA8B,CAAC,OAAe,EAAE,oBAA6B;IAC3F,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACrG,mFAAmF;QACnF,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,qBAAqB,EAAE,QAAQ;YAC9E,wIAAwI,YAAY,MAAM,CAAC,EAAE;YAC7J,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,GAAG,IAAI;YACzF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE;SAC3E,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY;YAAE,MAAM,CAAC,0CAA0C,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,wDAAwD,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA0C,CAAC;QAChG,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe;YAAE,MAAM,CAAC,4DAA4D,CAAC,CAAC;QACvI,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA0C,CAAC;QAC/F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;eACtD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;eACnF,CAAC,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC;YAAE,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC/G,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACtG,IAAI,oBAAoB,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,uDAAuD,CAAC,CAAC;QACxI,MAAM,KAAK,GAAG;YACZ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;YACvC,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;SAClH,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;gBACxC,IAAI,OAAO,GAAG,IAAI,CAAC;gBACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;oBAClD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;oBAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBAC/E,MAAM,CAAC,OAAO,KAAK,iDAAiD,QAAQ,EAAE,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAAE,MAAM,CAAC,iCAAiC,KAAK,aAAa,QAAQ,EAAE,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,8BAA8B,EAAE,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,qCAAqC,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3G,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
import type { TaskState } from './contracts.js';
|
|
2
|
+
import type { FileStateStore } from './state/store.js';
|
|
3
|
+
export interface NavigationUpdateReceipt {
|
|
4
|
+
protocol: 'navigation-update-source-v1';
|
|
5
|
+
issuedAt: string;
|
|
6
|
+
projectId: string;
|
|
7
|
+
taskId: string;
|
|
8
|
+
revision: number;
|
|
9
|
+
taskHash: string;
|
|
10
|
+
artifactsHash: string;
|
|
11
|
+
knowledgeHash: string;
|
|
12
|
+
milestoneHash: string | null;
|
|
13
|
+
taskBranch: string;
|
|
14
|
+
baseBranch: string;
|
|
15
|
+
sourceHead: string;
|
|
16
|
+
sourceBaseHead: string;
|
|
17
|
+
sourceVersion: string;
|
|
18
|
+
targetVersion: string;
|
|
19
|
+
artifact: {
|
|
20
|
+
sha256: string;
|
|
21
|
+
runtimeHash: string;
|
|
22
|
+
};
|
|
23
|
+
actor: string;
|
|
24
|
+
dirtyHash: string;
|
|
25
|
+
}
|
|
26
|
+
/** Recompute source proof even after transport. The virtual record classifies Git only;
|
|
27
|
+
* it neither writes state nor manufactures execution authority. */
|
|
28
|
+
export declare function navigationUpdateSource(repository: string, store: FileStateStore, task: TaskState, artifact: NavigationUpdateReceipt['artifact'], issuedAt: string, sourceHead?: string, sourceBaseHead?: string): NavigationUpdateReceipt;
|
|
29
|
+
export declare function assertNavigationSourceInstalled(repository: string, task: TaskState): void;
|
|
30
|
+
export declare function inspectNavigationTransport(repository: string, store: FileStateStore, task: TaskState, receipt: NavigationUpdateReceipt, artifact: NavigationUpdateReceipt['artifact'], _now: Date): {
|
|
31
|
+
receipt: NavigationUpdateReceipt;
|
|
32
|
+
commits: {
|
|
33
|
+
commitSha: string;
|
|
34
|
+
parentCommitSha: string;
|
|
35
|
+
packageVersion: string;
|
|
36
|
+
}[];
|
|
37
|
+
baseTransport: string;
|
|
38
|
+
targetHead: string;
|
|
39
|
+
};
|
|
@@ -0,0 +1,82 @@
|
|
|
1
|
+
import { lstatSync, readFileSync, readdirSync } from 'node:fs';
|
|
2
|
+
import path from 'node:path';
|
|
3
|
+
import { assessNavigationDirtyCarryover } from './alpha6/navigation-dirty-carryover.js';
|
|
4
|
+
import { canonicalJsonStringify, sha256Hex } from './alpha6/store-sidecars.js';
|
|
5
|
+
import { inspectBoundedWorkflowDependencyCommit } from './dependency-provenance.js';
|
|
6
|
+
import { inspectWorkflowVersions } from './diagnostics.js';
|
|
7
|
+
import { currentBranch, headCommit, runGit } from './repository.js';
|
|
8
|
+
import { PACKAGE_VERSION } from './version.js';
|
|
9
|
+
const SOURCE_VERSION = '2.0.0-beta.13.16';
|
|
10
|
+
function require(condition, message) {
|
|
11
|
+
if (!condition)
|
|
12
|
+
throw new Error(`NAVIGATION_UPDATE_BLOCKED: ${message}`);
|
|
13
|
+
}
|
|
14
|
+
const hash = (value) => sha256Hex(canonicalJsonStringify(value));
|
|
15
|
+
function hashFiles(root) {
|
|
16
|
+
const visit = (directory) => readdirSync(directory).sort().flatMap(name => {
|
|
17
|
+
const file = path.join(directory, name);
|
|
18
|
+
const info = lstatSync(file);
|
|
19
|
+
require(!info.isSymbolicLink(), 'Task artifacts must not contain symlinks.');
|
|
20
|
+
require(info.isDirectory() || info.isFile(), 'Task artifacts must be regular files or directories.');
|
|
21
|
+
return info.isDirectory() ? visit(file) : [[path.relative(root, file), sha256Hex(readFileSync(file))]];
|
|
22
|
+
});
|
|
23
|
+
return hash(visit(root));
|
|
24
|
+
}
|
|
25
|
+
function sourcePin(repository, commit) {
|
|
26
|
+
const manifest = JSON.parse(runGit(repository, ['show', `${commit}:package.json`]));
|
|
27
|
+
const lock = JSON.parse(runGit(repository, ['show', `${commit}:package-lock.json`]));
|
|
28
|
+
require(manifest.devDependencies?.['codex-workflow-v2'] === SOURCE_VERSION
|
|
29
|
+
&& !manifest.dependencies?.['codex-workflow-v2']
|
|
30
|
+
&& lock.packages?.['']?.devDependencies?.['codex-workflow-v2'] === SOURCE_VERSION
|
|
31
|
+
&& !lock.packages?.['']?.dependencies?.['codex-workflow-v2']
|
|
32
|
+
&& lock.packages?.['node_modules/codex-workflow-v2']?.version === SOURCE_VERSION, 'Source manifest and lock must bind the exact supported source version.');
|
|
33
|
+
}
|
|
34
|
+
/** Recompute source proof even after transport. The virtual record classifies Git only;
|
|
35
|
+
* it neither writes state nor manufactures execution authority. */
|
|
36
|
+
export function navigationUpdateSource(repository, store, task, artifact, issuedAt, sourceHead = headCommit(repository), sourceBaseHead = runGit(repository, ['rev-parse', task.baseBranch])) {
|
|
37
|
+
require(PACKAGE_VERSION !== SOURCE_VERSION, 'Target must differ from source.');
|
|
38
|
+
require(issuedAt === task.updatedAt && Number.isFinite(Date.parse(issuedAt)), 'Receipt timestamp must bind the stored Task update.');
|
|
39
|
+
require(task.taskBranch && currentBranch(repository) === task.taskBranch, 'Expected owned Task branch.');
|
|
40
|
+
sourcePin(repository, sourceHead);
|
|
41
|
+
sourcePin(repository, sourceBaseHead);
|
|
42
|
+
const dependency = inspectBoundedWorkflowDependencyCommit(repository, sourceHead);
|
|
43
|
+
require(dependency?.packageVersion === SOURCE_VERSION && !task.systemCommits.includes(sourceHead), 'Source HEAD must be the one unregistered source dependency commit.');
|
|
44
|
+
require(runGit(repository, ['rev-list', '--parents', '-n', '1', sourceHead]).split(' ').length === 2, 'Source dependency commit must have one parent.');
|
|
45
|
+
const virtual = { ...task, systemCommits: [...task.systemCommits, sourceHead],
|
|
46
|
+
dependencyProvenanceRecoveries: [...(task.dependencyProvenanceRecoveries ?? []), {
|
|
47
|
+
...dependency, packageName: 'codex-workflow-v2', files: ['package-lock.json', 'package.json'],
|
|
48
|
+
actor: 'source-proof', reason: 'Read-only Git classification.', recordedAt: issuedAt,
|
|
49
|
+
}] };
|
|
50
|
+
const proof = assessNavigationDirtyCarryover(store, repository, virtual, undefined, sourceHead, sourceHead);
|
|
51
|
+
require(proof.eligible && proof.compatibility && proof.requiredActor, proof.blockers.join(' '));
|
|
52
|
+
return { protocol: 'navigation-update-source-v1', issuedAt, projectId: task.projectId, taskId: task.id,
|
|
53
|
+
revision: task.revision, taskHash: hash(task), artifactsHash: hashFiles(store.taskRoot(task.projectId, task.id)),
|
|
54
|
+
knowledgeHash: hash(store.readKnowledgeMap(task.projectId)),
|
|
55
|
+
milestoneHash: task.milestoneId ? hash(store.readMilestone(task.projectId, task.milestoneId)) : null,
|
|
56
|
+
taskBranch: task.taskBranch, baseBranch: task.baseBranch, sourceHead, sourceBaseHead,
|
|
57
|
+
sourceVersion: SOURCE_VERSION, targetVersion: PACKAGE_VERSION, artifact,
|
|
58
|
+
actor: proof.requiredActor, dirtyHash: proof.compatibility.dirtyWorktreeHash };
|
|
59
|
+
}
|
|
60
|
+
export function assertNavigationSourceInstalled(repository, task) {
|
|
61
|
+
const versions = inspectWorkflowVersions(repository, [task.baseBranch]);
|
|
62
|
+
require([versions.declared, versions.locked, versions.installed, versions.currentBranch,
|
|
63
|
+
...versions.milestoneBases.map(base => base.version)].every(version => version === SOURCE_VERSION), 'All source version surfaces must agree before transport.');
|
|
64
|
+
}
|
|
65
|
+
export function inspectNavigationTransport(repository, store, task, receipt, artifact, _now) {
|
|
66
|
+
require(receipt?.protocol === 'navigation-update-source-v1', 'Missing or foreign source receipt.');
|
|
67
|
+
const head = headCommit(repository);
|
|
68
|
+
const base = runGit(repository, ['rev-parse', task.baseBranch]);
|
|
69
|
+
const target = inspectBoundedWorkflowDependencyCommit(repository, head);
|
|
70
|
+
const baseTransport = inspectBoundedWorkflowDependencyCommit(repository, base);
|
|
71
|
+
require([head, base].every(commit => runGit(repository, ['rev-list', '--parents', '-n', '1', commit]).split(' ').length === 2), 'Transport commits must have one parent.');
|
|
72
|
+
require(target?.parentCommitSha === receipt.sourceHead && target?.packageVersion === PACKAGE_VERSION, 'Expected exactly one target dependency transport on the source HEAD.');
|
|
73
|
+
require(baseTransport?.parentCommitSha === receipt.sourceBaseHead && baseTransport?.packageVersion === PACKAGE_VERSION, 'Expected exactly one target dependency transport on the source base HEAD.');
|
|
74
|
+
const recomputed = navigationUpdateSource(repository, store, task, artifact, receipt.issuedAt, target.parentCommitSha, baseTransport.parentCommitSha);
|
|
75
|
+
require(canonicalJsonStringify(receipt) === canonicalJsonStringify(recomputed), 'Receipt does not match independently recomputed source evidence, state or target artifact.');
|
|
76
|
+
const versions = inspectWorkflowVersions(repository, [task.baseBranch]);
|
|
77
|
+
require([versions.declared, versions.locked, versions.installed, versions.currentBranch,
|
|
78
|
+
...versions.milestoneBases.map(item => item.version)].every(version => version === PACKAGE_VERSION), 'All installed target version surfaces must agree.');
|
|
79
|
+
const source = inspectBoundedWorkflowDependencyCommit(repository, receipt.sourceHead);
|
|
80
|
+
return { receipt: recomputed, commits: [source, target], baseTransport: base, targetHead: head };
|
|
81
|
+
}
|
|
82
|
+
//# sourceMappingURL=navigation-update.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"navigation-update.js","sourceRoot":"","sources":["../../src/navigation-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,cAAc,GAAW,kBAAkB,CAAC;AAqBlD,SAAS,OAAO,CAAC,SAAkB,EAAE,OAAe;IAClD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1E,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,CAAC,SAAiB,EAA2B,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACzG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,2CAA2C,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,SAAS,CAAC,UAAkB,EAAE,MAAc;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,mBAAmB,CAAC,KAAK,cAAc;WACrE,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,mBAAmB,CAAC;WAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,mBAAmB,CAAC,KAAK,cAAc;WAC9E,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,mBAAmB,CAAC;WACzD,IAAI,CAAC,QAAQ,EAAE,CAAC,gCAAgC,CAAC,EAAE,OAAO,KAAK,cAAc,EAClF,wEAAwE,CAAC,CAAC;AAC5E,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAAE,KAAqB,EAAE,IAAe,EAC1D,QAA6C,EAAE,QAAgB,EAC/D,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAExG,OAAO,CAAC,eAAe,KAAK,cAAc,EAAE,iCAAiC,CAAC,CAAC;IAC/E,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,qDAAqD,CAAC,CAAC;IACrI,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;IACzG,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,sCAAsC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAClF,OAAO,CAAC,UAAU,EAAE,cAAc,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC/F,oEAAoE,CAAC,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAClG,gDAAgD,CAAC,CAAC;IACpD,MAAM,OAAO,GAAc,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC;QACtF,8BAA8B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,IAAI,EAAE,CAAC,EAAE;gBAC/E,GAAG,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,mBAAmB,EAAE,cAAc,CAAC;gBAC7F,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,+BAA+B,EAAE,UAAU,EAAE,QAAQ;aACrF,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAG,8BAA8B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC5G,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,OAAO,EAAE,QAAQ,EAAE,6BAA6B,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACpG,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACpG,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc;QACpF,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ;QACvE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,UAAkB,EAAE,IAAe;IACjF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa;QACrF,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,cAAc,CAAC,EACpG,0DAA0D,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAAE,KAAqB,EAAE,IAAe,EAAE,OAAgC,EAC5F,QAA6C,EAAE,IAAU;IAEzD,OAAO,CAAC,OAAO,EAAE,QAAQ,KAAK,6BAA6B,EAAE,oCAAoC,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,sCAAsC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,sCAAsC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAC5H,yCAAyC,CAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,UAAU,IAAI,MAAM,EAAE,cAAc,KAAK,eAAe,EAClG,sEAAsE,CAAC,CAAC;IAC1E,OAAO,CAAC,aAAa,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,IAAI,aAAa,EAAE,cAAc,KAAK,eAAe,EACpH,2EAA2E,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAC3F,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IACzD,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,sBAAsB,CAAC,UAAU,CAAC,EAC5E,4FAA4F,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa;QACrF,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,eAAe,CAAC,EACrG,mDAAmD,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,sCAAsC,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAE,CAAC;IACvF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACnG,CAAC"}
|
package/dist/src/observation.js
CHANGED
|
@@ -25,18 +25,31 @@ export function inspectWorkflowObservationBoundary(options) {
|
|
|
25
25
|
const pendingMilestoneTransactions = observeMilestoneTransactions(store, identity.projectId);
|
|
26
26
|
const replanTransactions = inspectCorrectiveReplanTaskTransactions(projectRoot, store.root);
|
|
27
27
|
const yieldTransactions = inspectCorrectiveYieldTaskTransactions(projectRoot, store.root);
|
|
28
|
+
const leases = listWriterLeases(lockRoot);
|
|
29
|
+
const coreTaskOperations = listCoreTaskOperationMutexes(lockRoot, store.root)
|
|
30
|
+
.map((mutex) => toPublicCoreTaskOperation(mutex, now));
|
|
31
|
+
const completedTaskTransactions = [...replanTransactions.completed, ...yieldTransactions.completed];
|
|
32
|
+
const retainedCompletedWithMutex = completedTaskTransactions
|
|
33
|
+
.filter(transaction => coreTaskOperations.some(operation => operation.entityId === transaction.taskId && operation.operationId === transaction.transactionId
|
|
34
|
+
&& operation.transitionId === transaction.transitionId));
|
|
28
35
|
const taskTransactions = {
|
|
29
|
-
pending: [...replanTransactions.pending, ...yieldTransactions.pending]
|
|
36
|
+
pending: [...replanTransactions.pending, ...yieldTransactions.pending, ...retainedCompletedWithMutex]
|
|
30
37
|
.sort((left, right) => left.taskId.localeCompare(right.taskId) || left.transactionId.localeCompare(right.transactionId)),
|
|
31
38
|
corrupt: [...replanTransactions.corrupt, ...yieldTransactions.corrupt]
|
|
32
39
|
.sort((left, right) => left.taskId.localeCompare(right.taskId) || left.transactionId.localeCompare(right.transactionId)),
|
|
33
40
|
};
|
|
34
|
-
|
|
35
|
-
const
|
|
36
|
-
const
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
41
|
+
// Recover one exact journal at a time; independent Tasks can interrupt different families.
|
|
42
|
+
const pendingTaskTransaction = taskTransactions.pending[0];
|
|
43
|
+
const orphanCoreTaskOperations = coreTaskOperations.filter((operation) => !taskTransactions.pending.some((transaction) => transaction.taskId === operation.entityId && transaction.transactionId === operation.operationId
|
|
44
|
+
&& transaction.transitionId === operation.transitionId));
|
|
45
|
+
const activeTaskRecoveryOwner = coreTaskOperations.some(operation => !operation.stale)
|
|
46
|
+
|| taskTransactions.pending.some(transaction => leases.some(lease => lease.entityId === transaction.taskId && Date.parse(lease.expiresAt) > now.getTime()));
|
|
47
|
+
const staleOrphanCoreOperations = orphanCoreTaskOperations.filter(operation => operation.stale);
|
|
48
|
+
const conflictsWithRetainedJournal = (operation) => taskTransactions.pending.some(transaction => transaction.taskId === operation.entityId)
|
|
49
|
+
|| completedTaskTransactions.some(transaction => transaction.taskId === operation.entityId
|
|
50
|
+
&& transaction.transactionId === operation.operationId);
|
|
51
|
+
const conflictingOrphanCoreOperations = staleOrphanCoreOperations.filter(conflictsWithRetainedJournal);
|
|
52
|
+
const repairableOrphanCoreOperation = staleOrphanCoreOperations.find(operation => !conflictsWithRetainedJournal(operation));
|
|
40
53
|
const project = !missingRegistration && pendingProjectTransactions.length === 0
|
|
41
54
|
? store.readProject(identity.projectId)
|
|
42
55
|
: null;
|
|
@@ -66,7 +79,7 @@ export function inspectWorkflowObservationBoundary(options) {
|
|
|
66
79
|
reasonCodes.push('TASK_RECOVERY_REQUIRED');
|
|
67
80
|
if (taskTransactions.corrupt.length > 0)
|
|
68
81
|
reasonCodes.push('TASK_TRANSACTION_INTEGRITY_FAILED');
|
|
69
|
-
if (
|
|
82
|
+
if (activeTaskRecoveryOwner)
|
|
70
83
|
reasonCodes.push('TASK_OPERATION_IN_PROGRESS');
|
|
71
84
|
if (orphanCoreTaskOperations.some((operation) => operation.stale))
|
|
72
85
|
reasonCodes.push('STALE_TASK_OPERATION');
|
|
@@ -78,40 +91,50 @@ export function inspectWorkflowObservationBoundary(options) {
|
|
|
78
91
|
reasonCodes.push('ADOPTION_MISSING');
|
|
79
92
|
const blocked = missingRegistration
|
|
80
93
|
|| (project !== null && !repositoryRootBound)
|
|
81
|
-
|| pendingProjectTransactions.
|
|
94
|
+
|| pendingProjectTransactions.some(transaction => transaction.ownerActive)
|
|
82
95
|
|| taskTransactions.corrupt.length > 0
|
|
83
|
-
||
|
|
84
|
-
||
|
|
85
|
-
const repairable =
|
|
96
|
+
|| activeTaskRecoveryOwner
|
|
97
|
+
|| conflictingOrphanCoreOperations.length > 0;
|
|
98
|
+
const repairable = repairableOrphanCoreOperation !== undefined
|
|
99
|
+
|| pendingProjectTransactions.length > 0
|
|
100
|
+
|| taskTransactions.pending.length > 0
|
|
86
101
|
|| pendingMilestoneTransactions.length > 0;
|
|
87
102
|
const kind = blocked ? 'blocked' : repairable ? 'repair' : 'assessment';
|
|
88
103
|
const repair = kind !== 'repair'
|
|
89
104
|
? null
|
|
90
|
-
:
|
|
105
|
+
: repairableOrphanCoreOperation
|
|
91
106
|
? {
|
|
92
|
-
command:
|
|
93
|
-
? 'task corrective-yield-recover'
|
|
94
|
-
: 'task corrective-replan-recover',
|
|
107
|
+
command: 'locks repair',
|
|
95
108
|
cataloged: false,
|
|
96
|
-
available: true,
|
|
97
109
|
projectId: identity.projectId,
|
|
98
|
-
|
|
99
|
-
transactionIds: taskTransactions.pending.map((transaction) => transaction.transactionId).sort(),
|
|
110
|
+
entityIds: [repairableOrphanCoreOperation.entityId],
|
|
100
111
|
}
|
|
101
|
-
:
|
|
112
|
+
: taskTransactions.pending.length > 0
|
|
102
113
|
? {
|
|
103
|
-
command:
|
|
114
|
+
command: pendingTaskTransaction.transitionId === 'task.coordination.corrective-yield'
|
|
115
|
+
? 'task corrective-yield-recover'
|
|
116
|
+
: 'task corrective-replan-recover',
|
|
104
117
|
cataloged: false,
|
|
118
|
+
available: true,
|
|
105
119
|
projectId: identity.projectId,
|
|
106
|
-
|
|
107
|
-
transactionIds:
|
|
120
|
+
taskIds: [pendingTaskTransaction.taskId],
|
|
121
|
+
transactionIds: [pendingTaskTransaction.transactionId],
|
|
108
122
|
}
|
|
109
|
-
:
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
123
|
+
: pendingMilestoneTransactions.length > 0 || pendingProjectTransactions.length > 0
|
|
124
|
+
? {
|
|
125
|
+
command: 'milestone recover',
|
|
126
|
+
cataloged: false,
|
|
127
|
+
projectId: identity.projectId,
|
|
128
|
+
milestoneIds: [...new Set(pendingMilestoneTransactions.map((transaction) => transaction.milestoneId))].sort(),
|
|
129
|
+
transactionIds: [...pendingProjectTransactions, ...pendingMilestoneTransactions]
|
|
130
|
+
.map((transaction) => transaction.transactionId).sort(),
|
|
131
|
+
}
|
|
132
|
+
: {
|
|
133
|
+
command: 'locks repair',
|
|
134
|
+
cataloged: false,
|
|
135
|
+
projectId: identity.projectId,
|
|
136
|
+
entityIds: staleLeases.map((lease) => lease.entityId).sort(),
|
|
137
|
+
};
|
|
115
138
|
return {
|
|
116
139
|
identity,
|
|
117
140
|
project,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"observation.js","sourceRoot":"","sources":["../../src/observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,sCAAsC,EAAE,MAAM,yCAAyC,CAAC;AAWjG;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAAC,OAIlD;IACC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,0BAA0B,GAAG,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/F,MAAM,4BAA4B,GAAG,4BAA4B,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,kBAAkB,GAAG,uCAAuC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,iBAAiB,GAAG,sCAAsC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG;QACvB,OAAO,EAAE,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"observation.js","sourceRoot":"","sources":["../../src/observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,sCAAsC,EAAE,MAAM,yCAAyC,CAAC;AAWjG;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAAC,OAIlD;IACC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,0BAA0B,GAAG,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/F,MAAM,4BAA4B,GAAG,4BAA4B,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,kBAAkB,GAAG,uCAAuC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,iBAAiB,GAAG,sCAAsC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;SAC1E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,yBAAyB,GAAG,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACpG,MAAM,0BAA0B,GAAG,yBAAyB;SACzD,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CACzD,SAAS,CAAC,QAAQ,KAAK,WAAW,CAAC,MAAM,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,CAAC,aAAa;WAC7F,SAAS,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG;QACvB,OAAO,EAAE,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,0BAA0B,CAAC;aAClG,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1H,OAAO,EAAE,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;KAC3H,CAAC;IACF,2FAA2F;IAC3F,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CACtG,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,QAAQ,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS,CAAC,WAAW;WAC5G,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,CACzD,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;WACjF,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAClE,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,yBAAyB,GAAG,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChG,MAAM,4BAA4B,GAAG,CAAC,SAA4C,EAAE,EAAE,CACpF,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,QAAQ,CAAC;WACpF,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,QAAQ;eACrF,WAAW,CAAC,aAAa,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,+BAA+B,GAAG,yBAAyB,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACvG,MAAM,6BAA6B,GAAG,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC;IAE5H,MAAM,OAAO,GAAG,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,MAAM,KAAK,CAAC;QAC7E,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,mBAAmB,GAAG,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;IAChG,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,MAAM,KAAK,CAAC;WAC3D,4BAA4B,CAAC,MAAM,KAAK,CAAC;WACzC,gBAAgB,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;WACrC,gBAAgB,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;WACrC,wBAAwB,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3C,MAAM,sBAAsB,GAAG,gBAAgB,IAAI,gBAAgB;QACjE,CAAC,CAAC,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,eAAe,GAAG,gBAAgB,IAAI,sBAAsB,KAAK,IAAI,CAAC;IAC5E,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAElE,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,IAAI,mBAAmB;QAAE,WAAW,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC1E,IAAI,OAAO,IAAI,CAAC,mBAAmB;QAAE,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACzF,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzF,IAAI,4BAA4B,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7F,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACpF,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC/F,IAAI,uBAAuB;QAAE,WAAW,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5E,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC5G,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnE,IAAI,eAAe;QAAE,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,mBAAmB;WAC9B,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC;WAC1C,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC;WACvE,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;WACnC,uBAAuB;WACvB,+BAA+B,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,6BAA6B,KAAK,SAAS;WACzD,0BAA0B,CAAC,MAAM,GAAG,CAAC;WACrC,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;WACnC,4BAA4B,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAgC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IACrG,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,6BAA6B;YAC7B,CAAC,CAAC;gBACE,OAAO,EAAE,cAAuB;gBAChC,SAAS,EAAE,KAAc;gBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC;aACpD;YACL,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC;oBACE,OAAO,EAAE,sBAAuB,CAAC,YAAY,KAAK,oCAAoC;wBACpF,CAAC,CAAC,+BAAwC;wBAC1C,CAAC,CAAC,gCAAyC;oBAC7C,SAAS,EAAE,KAAc;oBACzB,SAAS,EAAE,IAAa;oBACxB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,OAAO,EAAE,CAAC,sBAAuB,CAAC,MAAM,CAAC;oBACzC,cAAc,EAAE,CAAC,sBAAuB,CAAC,aAAa,CAAC;iBACxD;gBACH,CAAC,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC;oBAClF,CAAC,CAAC;wBACE,OAAO,EAAE,mBAA4B;wBACrC,SAAS,EAAE,KAAc;wBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;wBAC7G,cAAc,EAAE,CAAC,GAAG,0BAA0B,EAAE,GAAG,4BAA4B,CAAC;6BAC7E,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE;qBAC1D;oBACH,CAAC,CAAC;wBACE,OAAO,EAAE,cAAuB;wBAChC,SAAS,EAAE,KAAc;wBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;qBAC7D,CAAC;IAER,OAAO;QACL,QAAQ;QACR,OAAO;QACP,sBAAsB;QACtB,MAAM;QACN,WAAW,EAAE;YACX,IAAI;YACJ,WAAW;YACX,gBAAgB;YAChB,kBAAkB;YAClB,eAAe;YACf,mBAAmB;YACnB,mBAAmB;YACnB,gBAAgB;YAChB,eAAe;YACf,0BAA0B;YAC1B,4BAA4B;YAC5B,uBAAuB,EAAE,gBAAgB,CAAC,OAAO;YACjD,uBAAuB,EAAE,gBAAgB,CAAC,OAAO;YACjD,kBAAkB;YAClB,MAAM,EAAE,cAAc;YACtB,2BAA2B,EAAE,IAAI;YACjC,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAmB,EAAE,SAAiB;IACxE,OAAO,uBAAuB,CAAC,WAAW,EAAE,SAAS,CAAC;SACnD,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;SAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;WACjE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAqB,EACrB,SAAiB;IAEjB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,6BAA6B,CAAC,cAAc,EAAE;QAC5C,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,KAAK,CAAC,IAAI;KACxB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACxD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;QACxG,mBAAmB,EAAE,KAAK,CAAC,IAAI;KAChC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC,CAAC;SACH,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;WACjE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;AAChE,CAAC"}
|
|
@@ -43,13 +43,13 @@ const OBSERVED_ROUTE_INVENTORY = [
|
|
|
43
43
|
routeId: 'observed.dependency-recovery', priority: 1000,
|
|
44
44
|
predicateRef: 'WorkflowService.next/dependency recovery preflights',
|
|
45
45
|
actions: [
|
|
46
|
+
diagnostic('update navigation-source-preflight'),
|
|
47
|
+
diagnostic('update navigation-transport-preflight'),
|
|
48
|
+
executable('update navigation-recover', 'recoverNavigationUpdate'),
|
|
46
49
|
executable('task historical-step-provenance-recover', 'recoverHistoricalStepProvenance'),
|
|
47
|
-
executable('update pending-review-dependency-recover', 'recoverPendingReviewDependency'),
|
|
48
50
|
executable('update historical-step-dependency-recover', 'recoverHistoricalStepDependencyProvenance'),
|
|
49
|
-
executable('update plan-integrity-dependency-recover', 'recoverPlanIntegrityDependencyProvenance'),
|
|
50
51
|
executable('update dependency-provenance-recover', 'recoverDependencyProvenance'),
|
|
51
52
|
executable('update downstream-proof-dependency-recover', 'recoverActiveDownstreamProofDependencyProvenance'),
|
|
52
|
-
executable('update downstream-proof-replan-dependency-recover', 'recoverDownstreamProofReplanDependencyProvenance'),
|
|
53
53
|
],
|
|
54
54
|
successorWitness: {
|
|
55
55
|
kind: 'reachable', routeIds: ['observed.corrective-continuation'],
|
|
@@ -60,15 +60,12 @@ const OBSERVED_ROUTE_INVENTORY = [
|
|
|
60
60
|
routeId: 'observed.corrective-continuation', priority: 900,
|
|
61
61
|
predicateRef: 'WorkflowService.nextForTaskWithDelegation/corrective overlays',
|
|
62
62
|
actions: [
|
|
63
|
-
executable('task downstream-proof-replan-recover', 'recoverDownstreamProofReplan'),
|
|
64
63
|
executable('task plan-integrity-recover', 'recoverPlanIntegrity'),
|
|
65
|
-
executable('task remediation-mode-recover', 'recoverRemediationMode'),
|
|
66
64
|
executable('task corrective-decision-recover', 'recoverStepCorrectiveDecision'),
|
|
67
65
|
executable('task downstream-proof-recover', 'recoverDownstreamProof'),
|
|
68
66
|
executable('task corrective-decision', 'recordStepCorrectiveDecision'),
|
|
69
67
|
executable('task corrective-yield', 'executeCorrectiveYield'),
|
|
70
68
|
executable('task corrective-replan-prepare', 'prepareCorrectiveReplan'),
|
|
71
|
-
executable('task stop-override-prepare', 'prepareTaskStopOverride'),
|
|
72
69
|
],
|
|
73
70
|
successorWitness: {
|
|
74
71
|
kind: 'reachable', routeIds: ['observed.task-lifecycle'],
|
|
@@ -164,6 +161,8 @@ const OBSERVED_ROUTE_INVENTORY = [
|
|
|
164
161
|
predicateRef: 'WorkflowService.next/active Milestone status',
|
|
165
162
|
actions: [
|
|
166
163
|
executable('milestone plan-set', 'setMilestonePlan'),
|
|
164
|
+
executable('milestone scope-change-prepare', 'prepareMilestoneScopeChange'),
|
|
165
|
+
executable('milestone autonomy-evolve', 'evolveMilestonePlanAutonomously'),
|
|
167
166
|
executable('milestone authorize', 'authorizeMilestone'),
|
|
168
167
|
executable('milestone validate', 'validateMilestone'),
|
|
169
168
|
],
|