codexgpt 1.0.0

package/dist/worktrees/verificationReceipts.js

@@ -0,0 +1,215 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { DurableOpaqueRecordStoreV4 } from "../git/opaqueRecordStore.js";
+function receiptError() {
+    return new Error("VERIFICATION_RECEIPT_INVALID");
+}
+function digest(value) {
+    return /^(?:sha256:)?[a-f0-9]{64}$/u.test(value);
+}
+function validateFacts(facts, now) {
+    if (!/^merge_[a-f0-9]{32}$/u.test(facts.mergePlanId) ||
+        !/^[a-z][a-z0-9_-]{0,31}$/u.test(facts.category) ||
+        !/^repo_[a-f0-9]{32}$/u.test(facts.repositoryId) ||
+        !digest(facts.repositoryIdentityFingerprint) ||
+        !/^task_[a-f0-9]{32}$/u.test(facts.taskWorktreeId) ||
+        !Number.isSafeInteger(facts.taskGeneration) ||
+        facts.taskGeneration < 1 ||
+        !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(facts.candidateOid) ||
+        !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(facts.candidateTreeOid) ||
+        !/^ws_[a-f0-9]{32}$/u.test(facts.integrationWorkspaceId) ||
+        !digest(facts.workspaceRootIdentity) ||
+        !digest(facts.cleanStateDigest) ||
+        !digest(facts.ownerFingerprint) ||
+        !digest(facts.contextFingerprint) ||
+        !digest(facts.commandDigest) ||
+        !digest(facts.commandResourceFingerprint) ||
+        !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/u.test(facts.backendId) ||
+        !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/u.test(facts.backendVersion) ||
+        !digest(facts.executableIdentity) ||
+        !digest(facts.effectiveEnvironmentDigest) ||
+        !digest(facts.cwdIdentity) ||
+        !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/u.test(facts.policyRevision) ||
+        !digest(facts.capabilityRevision) ||
+        !/^event_[a-f0-9]{32}$/u.test(facts.terminalAuditEventId) ||
+        facts.exitCode !== 0 ||
+        !Number.isFinite(Date.parse(facts.issuedAt)) ||
+        !Number.isFinite(Date.parse(facts.expiresAt)) ||
+        Date.parse(facts.issuedAt) > now ||
+        Date.parse(facts.expiresAt) <= now ||
+        Date.parse(facts.expiresAt) > now + 30 * 60_000)
+        throw receiptError();
+    return Object.freeze({ ...facts });
+}
+export class VerificationReceiptServiceV4 {
+    key;
+    now;
+    #records = new Map();
+    #reservations = new Map();
+    #durable;
+    constructor(key, now = Date.now, options = {}) {
+        this.key = key;
+        this.now = now;
+        if (key.length < 32)
+            throw receiptError();
+        this.#durable = options.stateRoot && options.masterKey
+            ? new DurableOpaqueRecordStoreV4({
+                stateRoot: options.stateRoot,
+                masterKey: options.masterKey,
+                namespace: "verification-receipts",
+                now
+            })
+            : null;
+    }
+    issueFromTerminalEvidence(evidence) {
+        const now = this.now();
+        if (evidence.exitCode !== 0)
+            throw receiptError();
+        const facts = validateFacts({
+            ...evidence,
+            exitCode: 0,
+            issuedAt: new Date(now).toISOString()
+        }, now);
+        if (this.#activeCount(now) >= 256)
+            throw new Error("GIT_SCAN_LIMIT");
+        const nonce = randomBytes(32);
+        const mac = createHmac("sha256", this.key)
+            .update("codexgpt.verification.v4\0")
+            .update(nonce)
+            .digest();
+        const token = `verify_${Buffer.concat([nonce, mac]).toString("base64url")}`;
+        if (this.#durable) {
+            this.#durable.put({
+                recordId: token,
+                kind: "verification_receipt",
+                value: facts,
+                expiresAt: Date.parse(facts.expiresAt)
+            });
+        }
+        else {
+            this.#records.set(token, facts);
+        }
+        return token;
+    }
+    verify(token, expected) {
+        this.#verifyTokenMac(token);
+        const facts = this.#durable
+            ? this.#durable.get(token, "verification_receipt")
+            : this.#records.get(token);
+        if (!facts)
+            throw receiptError();
+        const validated = validateFacts(facts, this.now());
+        for (const [key, value] of Object.entries(expected)) {
+            if (validated[key] !== value)
+                throw receiptError();
+        }
+        return validated;
+    }
+    reserveForMerge(input) {
+        if (input.tokens.length !== input.requiredCategories.length ||
+            new Set(input.tokens).size !== input.tokens.length ||
+            new Set(input.requiredCategories).size !== input.requiredCategories.length)
+            throw new Error("MERGE_CHECKS_REQUIRED");
+        const required = [...input.requiredCategories].sort();
+        const reservationId = randomBytes(16).toString("hex");
+        const reserved = [];
+        try {
+            const facts = input.tokens.map((token) => {
+                if (this.#reservations.has(token))
+                    throw receiptError();
+                const value = this.verify(token, input.expected);
+                this.#reservations.set(token, reservationId);
+                reserved.push(token);
+                return value;
+            });
+            if (JSON.stringify(facts.map((item) => item.category).sort()) !== JSON.stringify(required)) {
+                throw new Error("MERGE_CHECKS_REQUIRED");
+            }
+            let state = "active";
+            return Object.freeze({
+                facts: Object.freeze(facts),
+                consume: () => {
+                    if (state !== "active")
+                        throw receiptError();
+                    for (const token of reserved) {
+                        if (this.#reservations.get(token) !== reservationId)
+                            throw receiptError();
+                    }
+                    for (const token of reserved) {
+                        if (this.#durable)
+                            this.#durable.consume(token, "verification_receipt");
+                        else
+                            this.#records.delete(token);
+                        this.#reservations.delete(token);
+                    }
+                    state = "consumed";
+                },
+                release: () => {
+                    if (state !== "active")
+                        return;
+                    for (const token of reserved) {
+                        if (this.#reservations.get(token) === reservationId)
+                            this.#reservations.delete(token);
+                    }
+                    state = "released";
+                }
+            });
+        }
+        catch (error) {
+            for (const token of reserved) {
+                if (this.#reservations.get(token) === reservationId)
+                    this.#reservations.delete(token);
+            }
+            throw error;
+        }
+    }
+    revokeForPlan(mergePlanId) {
+        if (!/^merge_[a-f0-9]{32}$/u.test(mergePlanId))
+            throw receiptError();
+        if (this.#durable) {
+            for (const item of this.#durable.list("verification_receipt", { includeExpired: true })) {
+                if (item.value.mergePlanId !== mergePlanId)
+                    continue;
+                this.#reservations.delete(item.recordId);
+                this.#durable.revoke(item.recordId);
+            }
+            return;
+        }
+        for (const [token, facts] of this.#records) {
+            if (facts.mergePlanId !== mergePlanId)
+                continue;
+            this.#records.delete(token);
+            this.#reservations.delete(token);
+        }
+    }
+    dispose() {
+        this.#records.clear();
+        this.#reservations.clear();
+        this.#durable?.dispose();
+        this.key.fill(0);
+    }
+    #verifyTokenMac(token) {
+        if (!/^verify_[A-Za-z0-9_-]+$/u.test(token))
+            throw receiptError();
+        const bytes = Buffer.from(token.slice(7), "base64url");
+        if (bytes.length !== 64)
+            throw receiptError();
+        const mac = createHmac("sha256", this.key)
+            .update("codexgpt.verification.v4\0")
+            .update(bytes.subarray(0, 32))
+            .digest();
+        if (!timingSafeEqual(mac, bytes.subarray(32)))
+            throw receiptError();
+    }
+    #activeCount(now) {
+        if (this.#durable)
+            return this.#durable.list("verification_receipt").length;
+        for (const [token, facts] of this.#records) {
+            if (Date.parse(facts.expiresAt) <= now) {
+                this.#records.delete(token);
+                this.#reservations.delete(token);
+            }
+        }
+        return this.#records.size;
+    }
+}
+//# sourceMappingURL=verificationReceipts.js.map

package/dist/worktrees/verificationReceipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationReceipts.js","sourceRoot":"","sources":["../../src/worktrees/verificationReceipts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AA4CzE,SAAS,YAAY;IACnB,OAAO,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,KAAiC,EAAE,GAAW;IACnE,IACE,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAChD,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChD,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC;QAC5C,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAClD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3C,KAAK,CAAC,cAAc,GAAG,CAAC;QACxB,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5D,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAChE,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;QACxD,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC;QACpC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC/B,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC/B,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;QAC5B,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC;QACzC,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7D,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAClE,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjC,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC;QACzC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1B,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAClE,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;QACzD,KAAK,CAAC,QAAQ,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG;QAChC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG;QAClC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,MAAM;QAC/C,MAAM,YAAY,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,4BAA4B;IAMpB;IACA;IANV,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IACzD,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,QAAQ,CAAoC;IAErD,YACmB,GAAW,EACX,MAAoB,IAAI,CAAC,GAAG,EAC7C,UAAsD,EAAE;QAFvC,QAAG,GAAH,GAAG,CAAQ;QACX,QAAG,GAAH,GAAG,CAAyB;QAG7C,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,YAAY,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;YACpD,CAAC,CAAC,IAAI,0BAA0B,CAAC;gBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,uBAAuB;gBAClC,GAAG;aACJ,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,yBAAyB,CAAC,QAAwC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,GAAG,QAAQ;YACX,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACtC,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aACvC,MAAM,CAAC,4BAA4B,CAAC;aACpC,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAChB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,QAA6C;QACjE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;YACzB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAA6B,KAAK,EAAE,sBAAsB,CAAC;YAC9E,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,SAAS,CAAC,GAAuC,CAAC,KAAK,KAAK;gBAAE,MAAM,YAAY,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,eAAe,CAAC,KAIf;QACC,IACE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,kBAAkB,CAAC,MAAM;YACvD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;YAClD,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,kBAAkB,CAAC,MAAM;YAC1E,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,MAAM,YAAY,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAC7C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,KAAK,GAAuC,QAAQ,CAAC;YACzD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC3B,OAAO,EAAE,GAAG,EAAE;oBACZ,IAAI,KAAK,KAAK,QAAQ;wBAAE,MAAM,YAAY,EAAE,CAAC;oBAC7C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;wBAC7B,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,aAAa;4BAAE,MAAM,YAAY,EAAE,CAAC;oBAC5E,CAAC;oBACD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;wBAC7B,IAAI,IAAI,CAAC,QAAQ;4BAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAA6B,KAAK,EAAE,sBAAsB,CAAC,CAAC;;4BAC/F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACnC,CAAC;oBACD,KAAK,GAAG,UAAU,CAAC;gBACrB,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE;oBACZ,IAAI,KAAK,KAAK,QAAQ;wBAAE,OAAO;oBAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;wBAC7B,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,aAAa;4BAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxF,CAAC;oBACD,KAAK,GAAG,UAAU,CAAC;gBACrB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,aAAa;oBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,aAAa,CAAC,WAAmB;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CACnC,sBAAsB,EACtB,EAAE,cAAc,EAAE,IAAI,EAAE,CACzB,EAAE,CAAC;gBACF,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW;oBAAE,SAAS;gBACrD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW;gBAAE,SAAS;YAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,eAAe,CAAC,KAAa;QAC3B,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,YAAY,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aACvC,MAAM,CAAC,4BAA4B,CAAC;aACpC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aAC7B,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;IACtE,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAA6B,sBAAsB,CAAC,CAAC,MAAM,CAAC;QACxG,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}

package/dist/worktrees/verificationTerminal.js

@@ -0,0 +1,23 @@
+const PENDING_VERIFICATION_RECEIPT = Symbol("codexgpt.pending-verification-receipt.v4");
+export function attachPendingVerificationReceipt(value, pending) {
+    Object.defineProperty(value, PENDING_VERIFICATION_RECEIPT, {
+        value: pending,
+        enumerable: false,
+        configurable: false,
+        writable: false
+    });
+    return value;
+}
+export function pendingVerificationReceipt(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const direct = value[PENDING_VERIFICATION_RECEIPT];
+    if (direct && typeof direct === "object")
+        return direct;
+    const structured = value.structuredContent;
+    if (!structured || typeof structured !== "object")
+        return null;
+    const nested = structured[PENDING_VERIFICATION_RECEIPT];
+    return nested && typeof nested === "object" ? nested : null;
+}
+//# sourceMappingURL=verificationTerminal.js.map

package/dist/worktrees/verificationTerminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationTerminal.js","sourceRoot":"","sources":["../../src/worktrees/verificationTerminal.ts"],"names":[],"mappings":"AAUA,MAAM,4BAA4B,GAAG,MAAM,CAAC,0CAA0C,CAAC,CAAC;AAExF,MAAM,UAAU,gCAAgC,CAC9C,KAAQ,EACR,OAAqC;IAErC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,4BAA4B,EAAE;QACzD,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,MAAM,GAAI,KAAiC,CAAC,4BAA4B,CAAC,CAAC;IAChF,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAsC,CAAC;IACxF,MAAM,UAAU,GAAI,KAAyC,CAAC,iBAAiB,CAAC;IAChF,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAI,UAAsC,CAAC,4BAA4B,CAAC,CAAC;IACrF,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAsC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC"}

package/dist/worktrees/workspaceAuthority.js

@@ -0,0 +1,64 @@
+import { randomBytes } from "node:crypto";
+import { admitManagedTaskGitRepository } from "../git/repositoryIdentity.js";
+export class TaskWorktreeWorkspaceAuthorityV4 {
+    options;
+    #records = new Map();
+    constructor(options) {
+        this.options = options;
+    }
+    async issue(taskWorktreeId) {
+        const item = await this.options.manager.revalidate(taskWorktreeId, this.options.ownerFingerprint());
+        const workspace = {
+            id: `ws_${randomBytes(16).toString("hex")}`,
+            root: item.privateState.worktreePath,
+            openedAt: new Date(this.options.now?.() ?? Date.now()).toISOString(),
+            accessClass: "task_worktree",
+            access: "read_write"
+        };
+        this.#records.set(workspace.id, { workspace, taskWorktreeId });
+        return { ...workspace };
+    }
+    getWorkspace(id) {
+        const record = this.#records.get(id);
+        if (!record)
+            throw new Error("TASK_WORKTREE_NOT_FOUND");
+        return { ...record.workspace };
+    }
+    async admitGitWorkspace(workspace) {
+        const record = this.#records.get(workspace.id);
+        if (!record ||
+            record.workspace.root !== workspace.root ||
+            workspace.accessClass !== "task_worktree" ||
+            record.workspace.accessClass !== "task_worktree")
+            throw new Error("TASK_WORKTREE_NOT_FOUND");
+        const task = await this.options.manager.revalidate(record.taskWorktreeId, this.options.ownerFingerprint());
+        if (!task.privateState.adminDir || task.privateState.worktreePath !== workspace.root) {
+            throw new Error("TASK_WORKTREE_NOT_FOUND");
+        }
+        return admitManagedTaskGitRepository({
+            workspaceRoot: workspace.root,
+            expectedAdminDir: task.privateState.adminDir,
+            expectedRepositoryId: task.record.repositoryId,
+            executor: this.options.manager.options.context.options.executor
+        });
+    }
+    listWorkspaces() {
+        return [...this.#records.values()].map((record) => ({ ...record.workspace }));
+    }
+    closeWorkspace(id) {
+        if (!this.#records.delete(id))
+            return null;
+        return {
+            workspaceId: id,
+            closedAt: new Date(this.options.now?.() ?? Date.now()).toISOString(),
+            state: "closed"
+        };
+    }
+    revokeTask(taskWorktreeId) {
+        for (const [id, record] of this.#records) {
+            if (record.taskWorktreeId === taskWorktreeId)
+                this.#records.delete(id);
+        }
+    }
+}
+//# sourceMappingURL=workspaceAuthority.js.map

package/dist/worktrees/workspaceAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceAuthority.js","sourceRoot":"","sources":["../../src/worktrees/workspaceAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,6BAA6B,EAA8B,MAAM,8BAA8B,CAAC;AAOzG,MAAM,OAAO,gCAAgC;IAGd;IAFpB,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE3D,YAA6B,OAI5B;QAJ4B,YAAO,GAAP,OAAO,CAInC;IAAG,CAAC;IAEL,KAAK,CAAC,KAAK,CAAC,cAAsB;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpG,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAC3C,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY;YACpC,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YACpE,WAAW,EAAE,eAAe;YAC5B,MAAM,EAAE,YAAY;SACrB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,YAAY,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAoB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/C,IACE,CAAC,MAAM;YACP,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;YACxC,SAAS,CAAC,WAAW,KAAK,eAAe;YACzC,MAAM,CAAC,SAAS,CAAC,WAAW,KAAK,eAAe;YAChD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAChD,MAAM,CAAC,cAAc,EACrB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,6BAA6B,CAAC;YACnC,aAAa,EAAE,SAAS,CAAC,IAAI;YAC7B,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ;YAC5C,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YAC9C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ;SAChE,CAAC,CAAC;IACL,CAAC;IAED,cAAc;QACZ,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO;YACL,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YACpE,KAAK,EAAE,QAAQ;SAChB,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,cAAsB;QAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;CACF"}

package/docs/favicon.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64" role="img" aria-label="CodexGPT mark">
+  <rect width="64" height="64" rx="14" fill="#0b1220"/>
+  <path d="M20 19h24v7H27v12h17v7H20V19Z" fill="#67e8f9"/>
+  <path d="M32 26h12v12H32v-6h6v-1h-6v-5Z" fill="#34d399"/>
+</svg>