commandmate 0.49.0 → 0.49.2

package/.next/server/chunks/1501.js

@@ -2,8 +2,9 @@
 
 ## タスク
 ${a.goal}`}},49987:(a,b,c)=>{c.d(b,{H:()=>l,Iq:()=>i,M:()=>k,xL:()=>o});var d=c(29021),e=c(21820),f=c(33873),g=c(55511);let h=(0,c(72626).h)("lib/verification/machine-lock"),i="locks",j="owner";function k(a,b){return(0,f.join)(b,`${a}.lock`)}function l(a=process.env){let b=a.CM_VERIFY_LOCK_ROOT;return b&&""!==b.trim()?b:(0,f.join)((0,e.homedir)(),".commandmate",i)}function m(a){try{let b=JSON.parse((0,d.readFileSync)((0,f.join)(a,j),"utf8"));if("number"!=typeof b.pid||"string"!=typeof b.token)return null;return{pid:b.pid,host:"string"==typeof b.host?b.host:"",token:b.token,acquiredAt:"number"==typeof b.acquiredAt?b.acquiredAt:0}}catch{return null}}function n(a){return a?`pid ${a.pid} on ${a.host||"unknown host"}`:null}async function o(a,b){let c=b.root??l(),i=b.pollIntervalMs??250,o=k(a,c),p=Date.now(),q=p+Math.max(0,b.timeoutMs),r=(0,g.randomUUID)();(0,d.mkdirSync)(c,{recursive:!0});let s=new Set,t=!1;for(;;){if(b.shouldAbandon?.())return{acquired:!1,waitedMs:Date.now()-p,heldBy:n(m(o)),abandoned:!0};if(function(a,b){try{(0,d.mkdirSync)(a)}catch(a){if("EEXIST"===a.code)return!1;throw a}return(0,d.writeFileSync)((0,f.join)(a,j),JSON.stringify(b),{encoding:"utf8"}),!0}(o,{pid:process.pid,host:(0,e.hostname)(),token:r,acquiredAt:Date.now()}))return{acquired:!0,waitedMs:Date.now()-p,handle:{name:a,path:o,release:()=>{let a=m(o);if(!a||a.token===r)try{(0,d.rmSync)(o,{recursive:!0,force:!0})}catch(a){h.warn("machine-lock-release-failed",{lockPath:o,error:a instanceof Error?a.message:String(a)})}}}};let c=m(o);if(c&&!s.has(c.token)&&function(a){if(a.host!==(0,e.hostname)())return!1;try{return process.kill(a.pid,0),!1}catch(a){return"ESRCH"===a.code}}(c)){s.add(c.token);let a=m(o);if(a&&a.token===c.token)try{(0,d.rmSync)(o,{recursive:!0,force:!0}),h.warn("machine-lock-broken-stale",{lockPath:o,pid:c.pid})}catch{}continue}let g=Date.now();if(g>=q)return{acquired:!1,waitedMs:g-p,heldBy:n(c)};t||(t=!0,b.onWait?.()),await function(a){return new Promise(b=>setTimeout(b,a))}(Math.min(i,q-g))}}},53604:(a,b,c)=>{c.d(b,{Cr:()=>k,L8:()=>i});var d=c(55511),e=c(29021),f=c(21820),g=c(33873);let h=(0,c(72626).h)("lib/verification/worktree-index"),i="worktree-index";function j(a,b){try{return(0,e.readFileSync)((0,g.join)(a,b),"utf8").trim()}catch{return null}}function k(a,b={}){let c=b.root??function(a=process.env){let b=a.CM_VERIFY_WORKTREE_INDEX_ROOT;return b&&""!==b.trim()?b:(0,g.join)((0,f.homedir)(),".commandmate",i)}();try{(0,e.mkdirSync)(c,{recursive:!0});let b=new Set;for(let d of(0,e.readdirSync)(c))if(/^\d+$/.test(d)){if(j(c,d)===a)return Number(d);b.add(Number(d))}for(let d=0;d<1024;d++)if(!b.has(d)&&function(a,b,c){try{return(0,e.writeFileSync)((0,g.join)(a,String(b)),`${c}
-`,{encoding:"utf8",flag:"wx"}),!0}catch(d){if("EEXIST"!==d.code)throw d;return j(a,String(b))===c}}(c,d,a))return d;h.warn("worktree-index-exhausted",{worktreeId:a,root:c})}catch(b){h.warn("worktree-index-unavailable",{worktreeId:a,root:c,error:b instanceof Error?b.message:String(b)})}return Number.parseInt((0,d.createHash)("sha256").update(a).digest("hex").slice(0,8),16)%1024}},74985:(a,b,c)=>{c.d(b,{Uq:()=>n,uT:()=>G,vQ:()=>w});var d=c(79646),e=c(29021),f=c(33873),g=c(88807),h=c(73753),i=c(40964),j=c(15194),k=c(77142),l=c(90384);let m=`options.requireEnvClean (${l.aT})`;function n(a,b){let c=[];return b?.options.requireEnvClean&&c.push(m),a&&!0===a.success.requireEnvClean&&c.push("success.requireEnvClean (task contract)"),{required:c.length>0,sources:c}}function o(a,b){let c=(0,i.NN)(a);if(!c)return"unattributed";let d=c.rest;return d===b||d.startsWith(`${b}-`)?"self":"other"}function p(a,b){if(!a)return"unattributed";let c=(0,f.resolve)(b),d=(0,f.resolve)(a);if(d===c||d.startsWith(c+f.sep))return"self";let e=(0,f.dirname)(c);return d!==e&&d.startsWith(e+f.sep)?"other":"unattributed"}let q=a=>{try{process.kill(a,0)}catch(a){if("EPERM"!==a.code)return null}if("linux"===process.platform)try{return(0,e.readlinkSync)(`/proc/${a}/cwd`)}catch{return null}try{let b=(0,d.execFileSync)("lsof",["-a","-d","cwd","-p",String(a),"-F","n"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).split("\n").find(a=>a.startsWith("n"));return b?b.slice(1):null}catch{return null}},r=/^\.commandmate-demo-vitest-([1-9]\d*)$/,s=/^\.zcompdump(?:\.[A-Za-z0-9._-]+\.[1-9]\d*)?$/,t=a=>{try{return process.kill(a,0),!0}catch(a){return"EPERM"===a.code}};function u(a){let b=r.exec(a);if(!b)return null;let c=Number(b[1]);return Number.isSafeInteger(c)?c:null}function v(a,b,c,d){switch(a){case"tmux-sessions":return o(b.key,c.worktreeId);case"listeners":return p(b.anchor,c.worktreePath);case"home-entries":return function(a,b,c=q){let d=u(a);return null===d?"unattributed":"other"===p(c(d),b)?"other":"unattributed"}(b.key,c.worktreePath,d);default:return"unattributed"}}function w(a,b,c={namespace:(0,i.s4)(),legacyAliasOf:a=>{let b=(0,i.NN)(a);if(b)try{let c=(0,i.mf)(b.cliToolId,b.rest);return c!==a?c:void 0}catch{return}},repositoryOf:a=>{try{return(0,h.getWorktreeById)((0,g.getDbInstance)(),a)?.repositoryPath||null}catch{return null}}},d=t){return{...a,taskSession:function(a){if(!(0,j.hR)(a.cliToolId))return null;try{return(0,i.mf)(a.cliToolId,a.worktreeId,a.instanceId??void 0)}catch{return null}}(b),otherServerSessions:function(a,b){if(null===b.namespace)return null;let c=a.probes["tmux-sessions"];return c&&"ok"===c.status?c.entries.map(a=>a.key).filter(a=>x(a,b)):[]}(a,c),otherRepositorySessions:function(a,b,c){if(null===c.namespace||!c.repositoryOf)return null;let d=c.repositoryOf(b);if(!d)return null;let e=a.probes["tmux-sessions"];return e&&"ok"===e.status?e.entries.map(a=>a.key).filter(a=>{if("other"!==o(a,b)||x(a,c))return!1;let e=(0,i.NN)(a);if(!e)return!1;let f=function(a,b){let c=b.repositoryOf;if(!c)return null;let d=new Set,e=a.indexOf("-");for(;;){let b=c(-1===e?a:a.slice(0,e));if(b&&d.add(b),-1===e)break;e=a.indexOf("-",e+1)}return 1===d.size?[...d][0]:null}(e.rest,c);return null!==f&&f!==d}):[]}(a,b.worktreeId,c),deadDemoVitestEntries:function(a,b=t){let c=a.probes["home-entries"];return c&&"ok"===c.status?c.entries.map(a=>a.key).filter(a=>{let c=u(a);return null!==c&&!b(c)}):[]}(a,d)}}function x(a,b){let c;if(null===b.namespace)return!1;let d=(0,i.NN)(a);if(!d)return!1;if(null!==d.namespace)return d.namespace!==b.namespace;try{c=(0,i.Ze)(b.namespace,d.cliToolId,d.rest)}catch{return!0}return b.legacyAliasOf(c)!==a}function y(a,b){return{key:a.key,detail:a.detail,owner:b}}function z(a,b){let c=b.slice(0,25),d=b.length-c.length,e=c.map(b=>{let c=b.detail?` ${b.detail}`:"";return`    ${a} ${b.key}${c} [${b.owner}]`});return d>0&&e.push(`    ... and ${d} more`),e}function A(a){return a.map(a=>{let b=a.detail?` ${a.detail}`:"";return`    + ${a.key}${b} [task session, excused]`})}function B(a){return a.map(a=>`    \xb7 - ${a.key} (ignored: another CommandMate server's session, recorded at task start)`)}function C(a){return a.map(a=>`    \xb7 - ${a.key} (ignored: a worktree of another repository on this server, recorded at task start)`)}function D(a){return a.map(a=>`    \xb7 - ${a.key} (ignored: its pid was already dead at task start — a leftover swept by the demo-video tests)`)}function E(a){if(0===a.length)return[];let b=a.map(a=>a.key).join(", ");return[`    ignored (options.envCleanIgnoreHomeEntries): ${b}`]}function F(a){if(0===a.length)return[];let b=a.map(a=>a.key).join(", ");return[`    ignored (built-in): ${b}`]}async function G(a){var b;let c,d=Date.now(),e=(a,b,c)=>({status:a,exitCode:c,startedAt:d,durationMs:Date.now()-d,logTail:b});if(!a.baseline)return e("error",function(a,b){let c=a?`task ${a}`:"this run",d=b.length>0?b.join(" and "):"nothing";return`${l.Q5}: UNKNOWN — no baseline snapshot exists for ${c}, so nothing can be compared. This is NOT "the environment is unchanged": no measurement was taken. A baseline is recorded when the task is created (\`send --contract\`) and only while the gate is switched on (currently: ${d}). Switch it on, then re-send the task.`+(a?"":" To re-verify this worktree's contract task (this run is not attached to a task), run `commandmate verify <worktree> --task <id>`.")}(a.taskId,a.sources),null);let f=a.capture??(()=>(0,k._8)({worktreeId:a.worktreeId}));try{c=await f()}catch(a){return e("error",`${l.Q5}: UNKNOWN — the current snapshot could not be taken: ${a instanceof Error?a.message:String(a)}`,null)}let g=function(a,b,c,d={}){let e=function(a){if(!("taskSession"in a))return;let b=a.taskSession;return"string"==typeof b&&""!==b?b:null}(a),f=function(a){let b=a.otherServerSessions;return Array.isArray(b)?new Set(b.filter(a=>"string"==typeof a)):new Set}(a),g=function(a){let b=a.otherRepositorySessions;return Array.isArray(b)?new Set(b.filter(a=>"string"==typeof a)):new Set}(a),h=function(a){let b=a.deadDemoVitestEntries;return Array.isArray(b)?new Set(b.filter(a=>"string"==typeof a&&null!==u(a))):new Set}(a),i=new Set(d.ignoreHomeEntries??[]),j=d.resolvePidCwd??q,l=k.I1.map(d=>{let k=a.probes[d],l=b.probes[d];if(!k||"ok"!==k.status)return{probeId:d,status:"unknown",reason:`baseline probe unavailable: ${k?.reason??"not recorded"}`,added:[],ignoredAdded:[],taskSessionAdded:[],removed:[],removedByOtherServer:[],removedByOtherRepository:[],removedStaleDemoVitest:[],ignoredByConfig:[],ignoredBuiltIn:[]};if(!l||"ok"!==l.status)return{probeId:d,status:"unknown",reason:`current probe unavailable: ${l?.reason??"not recorded"}`,added:[],ignoredAdded:[],taskSessionAdded:[],removed:[],removedByOtherServer:[],removedByOtherRepository:[],removedStaleDemoVitest:[],ignoredByConfig:[],ignoredBuiltIn:[]};let m=new Set(k.entries.map(a=>a.key)),n=new Set(l.entries.map(a=>a.key)),o=a=>"home-entries"===d&&i.has(a.key),p=a=>{var b;return"home-entries"===d&&(b=a.key,s.test(b))},q=[],r=[],t=[],u=[],w=[];for(let a of l.entries){if(m.has(a.key))continue;let b=v(d,a,c,j);if(o(a)){u.push(y(a,b));continue}if(p(a)){w.push(y(a,b));continue}if("tmux-sessions"===d&&e&&a.key===e){t.push(y(a,b));continue}("other"===b?r:q).push(y(a,b))}let x="tmux-sessions"===d&&l.entries.some(a=>m.has(a.key)||null!==e&&a.key===e),z=[],A=[],B=[],C=[];for(let a of k.entries){if(n.has(a.key))continue;let b=y(a,v(d,a,c,j));o(a)?u.push(b):p(a)?w.push(b):x&&"self"!==b.owner&&f.has(a.key)?A.push(b):x&&"other"===b.owner&&g.has(a.key)?B.push(b):"home-entries"===d&&h.has(a.key)?C.push(b):z.push(b)}return{probeId:d,status:q.length+z.length>0?"violated":"clean",reason:null,added:q,ignoredAdded:r,taskSessionAdded:t,removed:z,removedByOtherServer:A,removedByOtherRepository:B,removedStaleDemoVitest:C,ignoredByConfig:u,ignoredBuiltIn:w}});return{status:l.some(a=>"violated"===a.status)?"violated":l.some(a=>"unknown"===a.status)?"unknown":"clean",taskSession:e,probes:l}}(a.baseline,c,a,{ignoreHomeEntries:a.ignoreHomeEntries,resolvePidCwd:a.resolvePidCwd}),h=`${l.Q5}: baseline=${new Date(a.baseline.capturedAt).toISOString()} status=${g.status} task-session=${void 0===(b=g.taskSession)?"unrecorded (baseline predates #2472; nothing excused)":null===b?"unresolved (nothing excused)":b}`,i=`${h}
-${function(a){let b=[];for(let c of a.probes){let a=k.J6[c.probeId];if("unknown"===c.status){b.push(`  ${c.probeId} UNKNOWN (${a}): ${c.reason??"no reason recorded"}`);continue}if("clean"===c.status){let d=c.ignoredAdded.length>0?` (${c.ignoredAdded.length} addition(s) attributed to another worktree)`:"";b.push(`  ${c.probeId} clean (${a})${d}`),b.push(...A(c.taskSessionAdded)),b.push(...B(c.removedByOtherServer)),b.push(...C(c.removedByOtherRepository)),b.push(...D(c.removedStaleDemoVitest)),b.push(...E(c.ignoredByConfig)),b.push(...F(c.ignoredBuiltIn)),b.push(...function(a){if(0===a.length)return[];let b=a.map(a=>a.key).join(", ");return[`    ignored (attributed to another worktree): ${b}`]}(c.ignoredAdded));continue}for(let d of(b.push(`  ${c.probeId} VIOLATED (${a}): +${c.added.length} -${c.removed.length}`),b.push(...z("+",c.added)),b.push(...z("-",c.removed)),b.push(...A(c.taskSessionAdded)),b.push(...B(c.removedByOtherServer)),b.push(...C(c.removedByOtherRepository)),b.push(...D(c.removedStaleDemoVitest)),b.push(...E(c.ignoredByConfig)),b.push(...F(c.ignoredBuiltIn)),c.ignoredAdded))b.push(`    \xb7 ${d.key} (ignored: belongs to another worktree)`)}return b.join("\n")}(g)}`;return"clean"===g.status?e("passed",i,0):"unknown"===g.status?e("error",`${i}
-UNKNOWN is not a pass: at least one probe could not be compared, so the environment was not measured.`,null):e("failed",`${i}
-Anything listed under "+" was started or created during this task and left behind — stop it by PID and remove it. The one exception is a "+" line marked "task session, excused": that is the agent session this delegation itself started, it is not counted, and it must be left running. Anything under "-" existed when the task started and is now gone — it was killed or deleted; restart or restore it. Never stop a process by pattern (\`pkill -f\`): it takes every process whose command line matches, which is how the production server was stopped in #1739.`,1)}},77142:(a,b,c)=>{c.d(b,{I1:()=>m,J6:()=>n,_8:()=>B,dV:()=>F,g9:()=>G});var d=c(79646),e=c(29021),f=c(21820),g=c(33873),h=c(87447),i=c(72626),j=c(49987),k=c(53604);let l=(0,i.h)("lib/verification/env-snapshot"),m=["listeners","tmux-sessions","home-entries","commandmate-entries"],n={listeners:"CommandMate TCP listeners","tmux-sessions":"mcbd-* tmux sessions","home-entries":"$HOME entries","commandmate-entries":"~/.commandmate entries"},o={run:function(a,b){return new Promise(c=>{(0,d.execFile)(a,b,{timeout:5e3,maxBuffer:4194304,encoding:"utf8"},(b,d,e)=>b?"number"!=typeof b.code||b.killed?void c({code:null,stdout:d,stderr:e,failure:b.killed?`${a} exceeded 5000ms and was terminated`:`${a} could not be run: ${b.message}`}):void c({code:b.code,stdout:d,stderr:e,failure:null}):void c({code:0,stdout:d,stderr:e,failure:null}))})},readDir:a=>(0,e.readdirSync)(a),homeDir:()=>(0,f.homedir)()},p=/commandmate|dist\/server\/server\.js|next-server|next (dev|start)|server\.ts/i,q=new Set(["node","nodejs","bun","tsx","ts-node","npx","next"]),r=/^(commandmate(\.js)?|next-server)$/i;function s(a){let b=[],c=null;for(let d of a.split("\n")){if(""===d)continue;let a=d[0],e=d.slice(1);if("p"===a){let a=Number(e);if(!Number.isInteger(a)){c=null;continue}c={pid:a,fields:new Map},b.push(c);continue}if(!c)continue;let f=c.fields.get(a);f?f.push(e):c.fields.set(a,[e])}return b}function t(a){return{status:"unavailable",entries:[],reason:a}}function u(a){let b=new Map;for(let c of a)b.has(c.key)||b.set(c.key,c);return{status:"ok",entries:[...b.values()].sort((a,b)=>a.key<b.key?-1:+(a.key>b.key)),reason:null}}async function v(a){let b=await a.run("lsof",["-nP","-iTCP","-sTCP:LISTEN","-F","pcn"]);if(null!==b.failure)return t(b.failure);if(0!==b.code&&1!==b.code)return t(`lsof exited ${b.code}: ${b.stderr.trim()||"no diagnostic output"}`);let c=s(b.stdout);if(0===c.length)return u([]);let d=await a.run("ps",["-A","-o","pid=,command="]);if(null!==d.failure||0!==d.code)return t(d.failure??`ps exited ${d.code}: ${d.stderr.trim()||"no diagnostic output"}`);let e=function(a){let b=new Map;for(let c of a.split("\n")){let a=/^\s*(\d+)\s+(.*)$/.exec(c);a&&b.set(Number(a[1]),a[2].trim())}return b}(d.stdout),f=c.filter(a=>{let b=e.get(a.pid);return void 0!==b&&function(a){if(!p.test(a))return!1;let[b,...c]=a.trim().split(/\s+/);if(!b)return!1;let d=(0,g.basename)(b);if(r.test(d))return!0;if(!q.has(d.toLowerCase()))return!1;let e=[d,...c.filter(a=>!a.startsWith("-"))];return e.some((a,b)=>!!(b>0&&function(a){let b=(0,g.basename)(a);return/(^|\/)dist\/server\/server\.js$/.test(a)||"server.ts"===b||/^commandmate(\.js)?$/i.test(b)}(a))||"next"===(0,g.basename)(a)&&/^(dev|start)$/.test(e[b+1]??""))}(b)});if(0===f.length)return u([]);let h=new Map,i=f.map(a=>String(a.pid)),j=await a.run("lsof",["-a","-d","cwd","-p",i.join(","),"-F","pn"]);if(null===j.failure&&(0===j.code||1===j.code))for(let a of s(j.stdout)){let[b]=a.fields.get("n")??[];b&&h.set(a.pid,b)}let k=[];for(let a of f){let b=a.fields.get("c")?.[0]??"unknown";for(let c of a.fields.get("n")??[]){let d=function(a){let b=a.lastIndexOf(":");if(b<0)return null;let c=a.slice(b+1);return/^\d+$/.test(c)?c:null}(c);d&&k.push({key:`tcp/${d}`,detail:`${b} pid=${a.pid}`,anchor:h.get(a.pid)??null})}}return u(k)}async function w(a){let b=await a.run("tmux",["list-sessions","-F","#{session_name}"]);return null!==b.failure?t(b.failure):0!==b.code?/no server running|error connecting to|no sessions/i.test(b.stderr)?u([]):t(`tmux list-sessions exited ${b.code}: ${b.stderr.trim()||"no diagnostic output"}`):u(b.stdout.split("\n").map(a=>a.trim()).filter(a=>a.startsWith("mcbd-")).map(a=>({key:a,detail:null,anchor:null})))}let x=[/-wal$/,/-shm$/,/-journal$/,/^\.DS_Store$/],y="env-snapshots",z=[j.Iq,k.L8];function A(a,b,{missingIsEmpty:c,alsoIgnored:d=[]}){let e;try{e=a.readDir(b)}catch(d){let a=d.code;if(c&&"ENOENT"===a)return u([]);return t(`could not list ${b}: ${d.message}`)}return u(e.filter(a=>!(a===y||x.some(b=>b.test(a)))&&!d.includes(a)).map(a=>({key:a,detail:null,anchor:null})))}async function B(a){let b=a.deps??o,[c,d]=await Promise.all([v(b).catch(a=>t(`listeners probe threw: ${a.message}`)),w(b).catch(a=>t(`tmux probe threw: ${a.message}`))]);return{version:1,capturedAt:a.now??Date.now(),worktreeId:a.worktreeId,probes:{listeners:c,"tmux-sessions":d,"home-entries":A(b,b.homeDir(),{missingIsEmpty:!1}),"commandmate-entries":A(b,(0,g.join)(b.homeDir(),".commandmate"),{missingIsEmpty:!0,alsoIgnored:z})}}}function C(){return(0,g.join)((0,g.dirname)((0,h._$)().CM_DB_PATH),y)}let D=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function E(a,b){return D.test(b)?(0,g.join)(a,`${b}.json`):null}function F(a,b,c=C()){let d=E(c,a);if(!d)return l.warn("env-snapshot-rejected-task-id",{taskId:a}),!1;try{return(0,e.mkdirSync)(c,{recursive:!0,mode:448}),(0,e.writeFileSync)(d,JSON.stringify(b),{encoding:"utf8",mode:384}),!function(a,b){let c;try{c=(0,e.readdirSync)(a)}catch{return}for(let d of c){if(!d.endsWith(".json"))continue;let c=(0,g.join)(a,d);try{b-(0,e.statSync)(c).mtimeMs>2592e6&&(0,e.rmSync)(c,{force:!0})}catch{}}}(c,b.capturedAt),!0}catch(b){return l.warn("env-snapshot-write-failed",{taskId:a,error:b instanceof Error?b.message:String(b)}),!1}}function G(a,b=C()){let c=E(b,a);if(!c)return null;try{let a=JSON.parse((0,e.readFileSync)(c,"utf8"));if(!function(a){if("object"!=typeof a||null===a||1!==a.version||"number"!=typeof a.capturedAt)return!1;let b=a.probes;return"object"==typeof b&&null!==b&&m.every(a=>{var c;return"object"==typeof(c=b[a])&&null!==c&&("ok"===c.status||"unavailable"===c.status)&&Array.isArray(c.entries)})}(a))return null;return a}catch{return null}}},90384:(a,b,c)=>{c.d(b,{D:()=>n,Q5:()=>i,Tc:()=>l,UL:()=>y,Yp:()=>s,aT:()=>k,iE:()=>j,le:()=>h,sN:()=>m,uz:()=>g,yR:()=>z});var d=c(29021),e=c(33873),f=c(4689);let g="work-evidence",h="scope",i="env-clean",j=[g,h,i],k=".commandmate/verify.yaml";function l(a,b=[]){return[g,h,...a.options.requireEnvClean?[i]:[],...a.gates.map(a=>a.id),...b.map(a=>a.id)]}let m=600,n=/^[a-z0-9][a-z0-9-]{0,31}$/,o=/^[A-Za-z0-9_.-]+$/,p=["version","gates","options"],q=["id","command","timeoutSec","mutex","retryOnFail","flakyIsPass"],r=["baseRef","skipInPrimaryCheckout","maxLogTailBytes","requireCommit","requireEnvClean","envCleanIgnoreHomeEntries"];class s extends Error{constructor(a){super(`invalid verify config:
+`,{encoding:"utf8",flag:"wx"}),!0}catch(d){if("EEXIST"!==d.code)throw d;return j(a,String(b))===c}}(c,d,a))return d;h.warn("worktree-index-exhausted",{worktreeId:a,root:c})}catch(b){h.warn("worktree-index-unavailable",{worktreeId:a,root:c,error:b instanceof Error?b.message:String(b)})}return Number.parseInt((0,d.createHash)("sha256").update(a).digest("hex").slice(0,8),16)%1024}},72389:(a,b,c)=>{c.d(b,{E8:()=>n,_L:()=>g,lf:()=>h,pz:()=>p});var d=c(29021),e=c(21820),f=c(33873);let g="session-kills",h=1,i=/^(\d{4}-\d{2}-\d{2})\.jsonl$/,j=["kill-session","session-cleanup"],k=["cli","browser","http","server"];function l(a=process.env){let b=a.CM_SESSION_KILL_LEDGER_ROOT;return b&&""!==b.trim()?b:(0,f.join)((0,e.homedir)(),".commandmate",g)}function m(a){return new Date(a).toISOString().slice(0,10)}function n(a,b=l()){try{return(0,d.mkdirSync)(b,{recursive:!0,mode:448}),(0,d.appendFileSync)((0,f.join)(b,`${m(a.at)}.jsonl`),`${JSON.stringify(a)}
+`,{encoding:"utf8",mode:384}),!function(a,b){let c,e=m(b-2592e6);try{c=(0,d.readdirSync)(a)}catch{return}for(let b of c){let c=i.exec(b)?.[1];if(void 0!==c&&!(c>=e))try{(0,d.rmSync)((0,f.join)(a,b),{force:!0})}catch{}}}(b,a.at),!0}catch{return!1}}function o(a){return null===a||"string"==typeof a}function p(a,b,c=l()){if(!(a<=b))return[];a=Math.max(a,b-2592e6-864e5);let e=[];for(let i=Date.parse(`${m(a)}T00:00:00.000Z`);i<=b;i+=864e5){let l;try{l=(0,d.readFileSync)((0,f.join)(c,`${m(i)}.jsonl`),"utf8")}catch{continue}for(let c of l.split("\n")){let d;if(""!==c.trim()){var g;try{d=JSON.parse(c)}catch{continue}"object"==typeof(g=d)&&null!==g&&g.version===h&&"number"==typeof g.at&&"string"==typeof g.api&&j.includes(g.api)&&"string"==typeof g.origin&&k.includes(g.origin)&&"string"==typeof g.worktreeId&&""!==g.worktreeId&&o(g.instanceId)&&Array.isArray(g.sessionNames)&&g.sessionNames.every(a=>"string"==typeof a)&&o(g.callerCwd)&&o(g.callerSession)&&d.at>=a&&d.at<=b&&e.push(d)}}}return e}},74985:(a,b,c)=>{c.d(b,{Uq:()=>o,uT:()=>J,vQ:()=>x});var d=c(79646),e=c(29021),f=c(33873),g=c(88807),h=c(73753),i=c(40964),j=c(15194),k=c(77142),l=c(90384),m=c(72389);let n=`options.requireEnvClean (${l.aT})`;function o(a,b){let c=[];return b?.options.requireEnvClean&&c.push(n),a&&!0===a.success.requireEnvClean&&c.push("success.requireEnvClean (task contract)"),{required:c.length>0,sources:c}}function p(a,b){let c=(0,i.NN)(a);if(!c)return"unattributed";let d=c.rest;return d===b||d.startsWith(`${b}-`)?"self":"other"}function q(a,b){if(!a)return"unattributed";let c=(0,f.resolve)(b),d=(0,f.resolve)(a);if(d===c||d.startsWith(c+f.sep))return"self";let e=(0,f.dirname)(c);return d!==e&&d.startsWith(e+f.sep)?"other":"unattributed"}let r=a=>{try{process.kill(a,0)}catch(a){if("EPERM"!==a.code)return null}if("linux"===process.platform)try{return(0,e.readlinkSync)(`/proc/${a}/cwd`)}catch{return null}try{let b=(0,d.execFileSync)("lsof",["-a","-d","cwd","-p",String(a),"-F","n"],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).split("\n").find(a=>a.startsWith("n"));return b?b.slice(1):null}catch{return null}},s=/^\.commandmate-demo-vitest-([1-9]\d*)$/,t=/^\.zcompdump(?:\.[A-Za-z0-9._-]+\.[1-9]\d*)?$/,u=a=>{try{return process.kill(a,0),!0}catch(a){return"EPERM"===a.code}};function v(a){let b=s.exec(a);if(!b)return null;let c=Number(b[1]);return Number.isSafeInteger(c)?c:null}function w(a,b,c,d){switch(a){case"tmux-sessions":return p(b.key,c.worktreeId);case"listeners":return q(b.anchor,c.worktreePath);case"home-entries":return function(a,b,c=r){let d=v(a);return null===d?"unattributed":"other"===q(c(d),b)?"other":"unattributed"}(b.key,c.worktreePath,d);default:return"unattributed"}}function x(a,b,c={namespace:(0,i.s4)(),legacyAliasOf:a=>{let b=(0,i.NN)(a);if(b)try{let c=(0,i.mf)(b.cliToolId,b.rest);return c!==a?c:void 0}catch{return}},repositoryOf:a=>{try{return(0,h.getWorktreeById)((0,g.getDbInstance)(),a)?.repositoryPath||null}catch{return null}}},d=u){return{...a,taskSession:function(a){if(!(0,j.hR)(a.cliToolId))return null;try{return(0,i.mf)(a.cliToolId,a.worktreeId,a.instanceId??void 0)}catch{return null}}(b),otherServerSessions:function(a,b){if(null===b.namespace)return null;let c=a.probes["tmux-sessions"];return c&&"ok"===c.status?c.entries.map(a=>a.key).filter(a=>y(a,b)):[]}(a,c),otherRepositorySessions:function(a,b,c){if(null===c.namespace||!c.repositoryOf)return null;let d=c.repositoryOf(b);if(!d)return null;let e=a.probes["tmux-sessions"];return e&&"ok"===e.status?e.entries.map(a=>a.key).filter(a=>{if("other"!==p(a,b)||y(a,c))return!1;let e=(0,i.NN)(a);if(!e)return!1;let f=function(a,b){let c=b.repositoryOf;if(!c)return null;let d=new Set,e=a.indexOf("-");for(;;){let b=c(-1===e?a:a.slice(0,e));if(b&&d.add(b),-1===e)break;e=a.indexOf("-",e+1)}return 1===d.size?[...d][0]:null}(e.rest,c);return null!==f&&f!==d}):[]}(a,b.worktreeId,c),deadDemoVitestEntries:function(a,b=u){let c=a.probes["home-entries"];return c&&"ok"===c.status?c.entries.map(a=>a.key).filter(a=>{let c=v(a);return null!==c&&!b(c)}):[]}(a,d)}}function y(a,b){let c;if(null===b.namespace)return!1;let d=(0,i.NN)(a);if(!d)return!1;if(null!==d.namespace)return d.namespace!==b.namespace;try{c=(0,i.Ze)(b.namespace,d.cliToolId,d.rest)}catch{return!0}return b.legacyAliasOf(c)!==a}function z(a,b){return{key:a.key,detail:a.detail,owner:b}}function A(a,b){let c=b.slice(0,25),d=b.length-c.length,e=c.map(b=>{let c=b.detail?` ${b.detail}`:"";return`    ${a} ${b.key}${c} [${b.owner}]`});return d>0&&e.push(`    ... and ${d} more`),e}function B(a){return a.map(a=>{let b=a.detail?` ${a.detail}`:"";return`    + ${a.key}${b} [task session, excused]`})}function C(a){return a.map(a=>`    \xb7 - ${a.key} (ignored: another CommandMate server's session, recorded at task start)`)}function D(a){return a.map(a=>`    \xb7 - ${a.key} (ignored: a worktree of another repository on this server, recorded at task start)`)}function E(a){return a.map(({key:a,killedBy:b})=>`    \xb7 - ${a} [external] (not counted: ${F(b)}, not this task)`)}function F(a){let b=a.instanceId?`${a.worktreeId} instance ${a.instanceId}`:a.worktreeId,c="browser"===a.origin?"the UI":"server"===a.origin?"the server":"http"===a.origin?"an HTTP request with no caller":a.callerSession?`${a.callerCwd??"an unknown cwd"} in ${a.callerSession}`:a.callerCwd??"an unknown cwd";return`${a.api} for ${b} at ${new Date(a.at).toISOString()} from ${c}`}function G(a){return a.map(a=>`    \xb7 - ${a.key} (ignored: its pid was already dead at task start — a leftover swept by the demo-video tests)`)}function H(a){if(0===a.length)return[];let b=a.map(a=>a.key).join(", ");return[`    ignored (options.envCleanIgnoreHomeEntries): ${b}`]}function I(a){if(0===a.length)return[];let b=a.map(a=>a.key).join(", ");return[`    ignored (built-in): ${b}`]}async function J(a){var b;let c,d,e=Date.now(),f=(a,b,c)=>({status:a,exitCode:c,startedAt:e,durationMs:Date.now()-e,logTail:b});if(!a.baseline)return f("error",function(a,b){let c=a?`task ${a}`:"this run",d=b.length>0?b.join(" and "):"nothing";return`${l.Q5}: UNKNOWN — no baseline snapshot exists for ${c}, so nothing can be compared. This is NOT "the environment is unchanged": no measurement was taken. A baseline is recorded when the task is created (\`send --contract\`) and only while the gate is switched on (currently: ${d}). Switch it on, then re-send the task.`+(a?"":" To re-verify this worktree's contract task (this run is not attached to a task), run `commandmate verify <worktree> --task <id>`.")}(a.taskId,a.sources),null);let g=a.capture??(()=>(0,k._8)({worktreeId:a.worktreeId}));try{c=await g()}catch(a){return f("error",`${l.Q5}: UNKNOWN — the current snapshot could not be taken: ${a instanceof Error?a.message:String(a)}`,null)}let h=a.readSessionKills??((a,b)=>(0,m.pz)(a,b));try{d=h(a.baseline.capturedAt,c.capturedAt)}catch{d=[]}let i=function(a,b,c,d={}){let e=function(a){if(!("taskSession"in a))return;let b=a.taskSession;return"string"==typeof b&&""!==b?b:null}(a),f=function(a){let b=a.otherServerSessions;return Array.isArray(b)?new Set(b.filter(a=>"string"==typeof a)):new Set}(a),g=function(a){let b=a.otherRepositorySessions;return Array.isArray(b)?new Set(b.filter(a=>"string"==typeof a)):new Set}(a),h=function(a){let b=a.deadDemoVitestEntries;return Array.isArray(b)?new Set(b.filter(a=>"string"==typeof a&&null!==v(a))):new Set}(a),i=new Set(d.ignoreHomeEntries??[]),j=d.resolvePidCwd??r,l=(d.sessionKills??[]).filter(c=>c.at>=a.capturedAt&&c.at<=b.capturedAt),m=k.I1.map(d=>{let k=a.probes[d],m=b.probes[d];if(!k||"ok"!==k.status)return{probeId:d,status:"unknown",reason:`baseline probe unavailable: ${k?.reason??"not recorded"}`,added:[],ignoredAdded:[],taskSessionAdded:[],removed:[],removedByOtherServer:[],removedByOtherRepository:[],removedExternal:[],removedKillNotExcused:[],removedStaleDemoVitest:[],ignoredByConfig:[],ignoredBuiltIn:[]};if(!m||"ok"!==m.status)return{probeId:d,status:"unknown",reason:`current probe unavailable: ${m?.reason??"not recorded"}`,added:[],ignoredAdded:[],taskSessionAdded:[],removed:[],removedByOtherServer:[],removedByOtherRepository:[],removedExternal:[],removedKillNotExcused:[],removedStaleDemoVitest:[],ignoredByConfig:[],ignoredBuiltIn:[]};let n=new Set(k.entries.map(a=>a.key)),o=new Set(m.entries.map(a=>a.key)),r=a=>"home-entries"===d&&i.has(a.key),s=a=>{var b;return"home-entries"===d&&(b=a.key,t.test(b))},u=[],v=[],x=[],y=[],A=[];for(let a of m.entries){if(n.has(a.key))continue;let b=w(d,a,c,j);if(r(a)){y.push(z(a,b));continue}if(s(a)){A.push(z(a,b));continue}if("tmux-sessions"===d&&e&&a.key===e){x.push(z(a,b));continue}("other"===b?v:u).push(z(a,b))}let B="tmux-sessions"===d&&m.entries.some(a=>n.has(a.key)||null!==e&&a.key===e),C=[],D=[],E=[],F=[],G=[],H=[];for(let a of k.entries){if(o.has(a.key))continue;let b=z(a,w(d,a,c,j));if(r(a))y.push(b);else if(s(a))A.push(b);else if(B&&"self"!==b.owner&&f.has(a.key))D.push(b);else if(B&&"other"===b.owner&&g.has(a.key))E.push(b);else if("tmux-sessions"===d&&B&&"other"===b.owner){let d=function(a,b,c,d){return b.find(b=>b.sessionNames.includes(a)&&function(a,b,c){if("cli"!==a.origin)return!1;let d=null===a.callerSession?"unattributed":c&&a.callerSession===c?"self":p(a.callerSession,b.worktreeId),e=q(a.callerCwd,b.worktreePath);return"self"!==d&&"self"!==e&&("other"===d||"other"===e)}(b,c,d))}(a.key,l,c,e);if(d)F.push({...b,killedBy:d});else{C.push(b);let c=function(a,b){return b.find(b=>b.sessionNames.includes(a))}(a.key,l);c&&G.push({...b,killedBy:c})}}else"home-entries"===d&&h.has(a.key)?H.push(b):C.push(b)}return{probeId:d,status:u.length+C.length>0?"violated":"clean",reason:null,added:u,ignoredAdded:v,taskSessionAdded:x,removed:C,removedByOtherServer:D,removedByOtherRepository:E,removedExternal:F,removedKillNotExcused:G,removedStaleDemoVitest:H,ignoredByConfig:y,ignoredBuiltIn:A}});return{status:m.some(a=>"violated"===a.status)?"violated":m.some(a=>"unknown"===a.status)?"unknown":"clean",taskSession:e,probes:m}}(a.baseline,c,a,{ignoreHomeEntries:a.ignoreHomeEntries,resolvePidCwd:a.resolvePidCwd,sessionKills:d}),j=`${l.Q5}: baseline=${new Date(a.baseline.capturedAt).toISOString()} status=${i.status} task-session=${void 0===(b=i.taskSession)?"unrecorded (baseline predates #2472; nothing excused)":null===b?"unresolved (nothing excused)":b}`,n=`${j}
+${function(a){let b=[];for(let c of a.probes){let a=k.J6[c.probeId];if("unknown"===c.status){b.push(`  ${c.probeId} UNKNOWN (${a}): ${c.reason??"no reason recorded"}`);continue}if("clean"===c.status){let d=c.ignoredAdded.length>0?` (${c.ignoredAdded.length} addition(s) attributed to another worktree)`:"";b.push(`  ${c.probeId} clean (${a})${d}`),b.push(...B(c.taskSessionAdded)),b.push(...C(c.removedByOtherServer)),b.push(...D(c.removedByOtherRepository)),b.push(...E(c.removedExternal)),b.push(...G(c.removedStaleDemoVitest)),b.push(...H(c.ignoredByConfig)),b.push(...I(c.ignoredBuiltIn)),b.push(...function(a){if(0===a.length)return[];let b=a.map(a=>a.key).join(", ");return[`    ignored (attributed to another worktree): ${b}`]}(c.ignoredAdded));continue}for(let d of(b.push(`  ${c.probeId} VIOLATED (${a}): +${c.added.length} -${c.removed.length}`),b.push(...A("+",c.added)),b.push(...A("-",c.removed)),b.push(...c.removedKillNotExcused.map(({key:a,killedBy:b})=>{let c="browser"===b.origin||"server"===b.origin?`a ${b.origin} kill a worker can also cause`:"the caller is not known to be someone else";return`    \xb7 ${a}: kill recorded but counted (${F(b)}; not excused: ${c})`})),b.push(...B(c.taskSessionAdded)),b.push(...C(c.removedByOtherServer)),b.push(...D(c.removedByOtherRepository)),b.push(...E(c.removedExternal)),b.push(...G(c.removedStaleDemoVitest)),b.push(...H(c.ignoredByConfig)),b.push(...I(c.ignoredBuiltIn)),c.ignoredAdded))b.push(`    \xb7 ${d.key} (ignored: belongs to another worktree)`)}return b.join("\n")}(i)}`;return"clean"===i.status?f("passed",n,0):"unknown"===i.status?f("error",`${n}
+UNKNOWN is not a pass: at least one probe could not be compared, so the environment was not measured.`,null):f("failed",`${n}
+Anything listed under "+" was started or created during this task and left behind — stop it by PID and remove it. The one exception is a "+" line marked "task session, excused": that is the agent session this delegation itself started, it is not counted, and it must be left running. Anything under "-" existed when the task started and is now gone — it was killed or deleted; restart or restore it. Never stop a process by pattern (\`pkill -f\`): it takes every process whose command line matches, which is how the production server was stopped in #1739.`,1)}},77142:(a,b,c)=>{c.d(b,{I1:()=>n,J6:()=>o,_8:()=>C,dV:()=>G,g9:()=>H});var d=c(79646),e=c(29021),f=c(21820),g=c(33873),h=c(87447),i=c(72626),j=c(49987),k=c(72389),l=c(53604);let m=(0,i.h)("lib/verification/env-snapshot"),n=["listeners","tmux-sessions","home-entries","commandmate-entries"],o={listeners:"CommandMate TCP listeners","tmux-sessions":"mcbd-* tmux sessions","home-entries":"$HOME entries","commandmate-entries":"~/.commandmate entries"},p={run:function(a,b){return new Promise(c=>{(0,d.execFile)(a,b,{timeout:5e3,maxBuffer:4194304,encoding:"utf8"},(b,d,e)=>b?"number"!=typeof b.code||b.killed?void c({code:null,stdout:d,stderr:e,failure:b.killed?`${a} exceeded 5000ms and was terminated`:`${a} could not be run: ${b.message}`}):void c({code:b.code,stdout:d,stderr:e,failure:null}):void c({code:0,stdout:d,stderr:e,failure:null}))})},readDir:a=>(0,e.readdirSync)(a),homeDir:()=>(0,f.homedir)()},q=/commandmate|dist\/server\/server\.js|next-server|next (dev|start)|server\.ts/i,r=new Set(["node","nodejs","bun","tsx","ts-node","npx","next"]),s=/^(commandmate(\.js)?|next-server)$/i;function t(a){let b=[],c=null;for(let d of a.split("\n")){if(""===d)continue;let a=d[0],e=d.slice(1);if("p"===a){let a=Number(e);if(!Number.isInteger(a)){c=null;continue}c={pid:a,fields:new Map},b.push(c);continue}if(!c)continue;let f=c.fields.get(a);f?f.push(e):c.fields.set(a,[e])}return b}function u(a){return{status:"unavailable",entries:[],reason:a}}function v(a){let b=new Map;for(let c of a)b.has(c.key)||b.set(c.key,c);return{status:"ok",entries:[...b.values()].sort((a,b)=>a.key<b.key?-1:+(a.key>b.key)),reason:null}}async function w(a){let b=await a.run("lsof",["-nP","-iTCP","-sTCP:LISTEN","-F","pcn"]);if(null!==b.failure)return u(b.failure);if(0!==b.code&&1!==b.code)return u(`lsof exited ${b.code}: ${b.stderr.trim()||"no diagnostic output"}`);let c=t(b.stdout);if(0===c.length)return v([]);let d=await a.run("ps",["-A","-o","pid=,command="]);if(null!==d.failure||0!==d.code)return u(d.failure??`ps exited ${d.code}: ${d.stderr.trim()||"no diagnostic output"}`);let e=function(a){let b=new Map;for(let c of a.split("\n")){let a=/^\s*(\d+)\s+(.*)$/.exec(c);a&&b.set(Number(a[1]),a[2].trim())}return b}(d.stdout),f=c.filter(a=>{let b=e.get(a.pid);return void 0!==b&&function(a){if(!q.test(a))return!1;let[b,...c]=a.trim().split(/\s+/);if(!b)return!1;let d=(0,g.basename)(b);if(s.test(d))return!0;if(!r.has(d.toLowerCase()))return!1;let e=[d,...c.filter(a=>!a.startsWith("-"))];return e.some((a,b)=>!!(b>0&&function(a){let b=(0,g.basename)(a);return/(^|\/)dist\/server\/server\.js$/.test(a)||"server.ts"===b||/^commandmate(\.js)?$/i.test(b)}(a))||"next"===(0,g.basename)(a)&&/^(dev|start)$/.test(e[b+1]??""))}(b)});if(0===f.length)return v([]);let h=new Map,i=f.map(a=>String(a.pid)),j=await a.run("lsof",["-a","-d","cwd","-p",i.join(","),"-F","pn"]);if(null===j.failure&&(0===j.code||1===j.code))for(let a of t(j.stdout)){let[b]=a.fields.get("n")??[];b&&h.set(a.pid,b)}let k=[];for(let a of f){let b=a.fields.get("c")?.[0]??"unknown";for(let c of a.fields.get("n")??[]){let d=function(a){let b=a.lastIndexOf(":");if(b<0)return null;let c=a.slice(b+1);return/^\d+$/.test(c)?c:null}(c);d&&k.push({key:`tcp/${d}`,detail:`${b} pid=${a.pid}`,anchor:h.get(a.pid)??null})}}return v(k)}async function x(a){let b=await a.run("tmux",["list-sessions","-F","#{session_name}"]);return null!==b.failure?u(b.failure):0!==b.code?/no server running|error connecting to|no sessions/i.test(b.stderr)?v([]):u(`tmux list-sessions exited ${b.code}: ${b.stderr.trim()||"no diagnostic output"}`):v(b.stdout.split("\n").map(a=>a.trim()).filter(a=>a.startsWith("mcbd-")).map(a=>({key:a,detail:null,anchor:null})))}let y=[/-wal$/,/-shm$/,/-journal$/,/^\.DS_Store$/],z="env-snapshots",A=[j.Iq,l.L8,k._L];function B(a,b,{missingIsEmpty:c,alsoIgnored:d=[]}){let e;try{e=a.readDir(b)}catch(d){let a=d.code;if(c&&"ENOENT"===a)return v([]);return u(`could not list ${b}: ${d.message}`)}return v(e.filter(a=>!(a===z||y.some(b=>b.test(a)))&&!d.includes(a)).map(a=>({key:a,detail:null,anchor:null})))}async function C(a){let b=a.deps??p,[c,d]=await Promise.all([w(b).catch(a=>u(`listeners probe threw: ${a.message}`)),x(b).catch(a=>u(`tmux probe threw: ${a.message}`))]);return{version:1,capturedAt:a.now??Date.now(),worktreeId:a.worktreeId,probes:{listeners:c,"tmux-sessions":d,"home-entries":B(b,b.homeDir(),{missingIsEmpty:!1}),"commandmate-entries":B(b,(0,g.join)(b.homeDir(),".commandmate"),{missingIsEmpty:!0,alsoIgnored:A})}}}function D(){return(0,g.join)((0,g.dirname)((0,h._$)().CM_DB_PATH),z)}let E=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function F(a,b){return E.test(b)?(0,g.join)(a,`${b}.json`):null}function G(a,b,c=D()){let d=F(c,a);if(!d)return m.warn("env-snapshot-rejected-task-id",{taskId:a}),!1;try{return(0,e.mkdirSync)(c,{recursive:!0,mode:448}),(0,e.writeFileSync)(d,JSON.stringify(b),{encoding:"utf8",mode:384}),!function(a,b){let c;try{c=(0,e.readdirSync)(a)}catch{return}for(let d of c){if(!d.endsWith(".json"))continue;let c=(0,g.join)(a,d);try{b-(0,e.statSync)(c).mtimeMs>2592e6&&(0,e.rmSync)(c,{force:!0})}catch{}}}(c,b.capturedAt),!0}catch(b){return m.warn("env-snapshot-write-failed",{taskId:a,error:b instanceof Error?b.message:String(b)}),!1}}function H(a,b=D()){let c=F(b,a);if(!c)return null;try{let a=JSON.parse((0,e.readFileSync)(c,"utf8"));if(!function(a){if("object"!=typeof a||null===a||1!==a.version||"number"!=typeof a.capturedAt)return!1;let b=a.probes;return"object"==typeof b&&null!==b&&n.every(a=>{var c;return"object"==typeof(c=b[a])&&null!==c&&("ok"===c.status||"unavailable"===c.status)&&Array.isArray(c.entries)})}(a))return null;return a}catch{return null}}},90384:(a,b,c)=>{c.d(b,{D:()=>n,Q5:()=>i,Tc:()=>l,UL:()=>y,Yp:()=>s,aT:()=>k,iE:()=>j,le:()=>h,sN:()=>m,uz:()=>g,yR:()=>z});var d=c(29021),e=c(33873),f=c(4689);let g="work-evidence",h="scope",i="env-clean",j=[g,h,i],k=".commandmate/verify.yaml";function l(a,b=[]){return[g,h,...a.options.requireEnvClean?[i]:[],...a.gates.map(a=>a.id),...b.map(a=>a.id)]}let m=600,n=/^[a-z0-9][a-z0-9-]{0,31}$/,o=/^[A-Za-z0-9_.-]+$/,p=["version","gates","options"],q=["id","command","timeoutSec","mutex","retryOnFail","flakyIsPass"],r=["baseRef","skipInPrimaryCheckout","maxLogTailBytes","requireCommit","requireEnvClean","envCleanIgnoreHomeEntries"];class s extends Error{constructor(a){super(`invalid verify config:
 ${a.map(a=>`  - ${a}`).join("\n")}`),this.name="VerifyConfigError",this.issues=a}}function t(a){return"object"==typeof a&&null!==a&&!Array.isArray(a)}function u(a){return"number"==typeof a?Number.isInteger(a)?a:null:"string"==typeof a&&/^-?\d+$/.test(a)?Number(a):null}function v(a){return"boolean"==typeof a?a:"true"===a||"false"!==a&&null}function w(a){return void 0===a?"nothing":null===a?"null":"string"==typeof a?JSON.stringify(a):Array.isArray(a)?"a list":"object"==typeof a?"a mapping":String(a)}function x(a,b,c,d){for(let e of Object.keys(a))b.includes(e)||d.push(`${c}: unknown key "${e}" (v1 is a closed set)`)}function y(a,b,c){if(!Array.isArray(a))return c.push(`${b}: must be a list (got ${w(a)})`),[];let d=[],e=new Set;return a.forEach((a,f)=>{!function(a,b,c,d,e){let f,g,h,i=e.length;if(!t(a))return e.push(`${b}: must be a mapping (got ${w(a)})`);x(a,q,b,e),"string"!=typeof a.id||""===a.id?e.push(`${b}.id: required, must be a non-empty string (got ${w(a.id)})`):n.test(a.id)?j.includes(a.id)?e.push(`${b}.id: "${a.id}" is reserved for a built-in gate`):c.has(a.id)?e.push(`${b}.id: duplicate gate id "${a.id}"`):c.add(a.id):e.push(`${b}.id: "${a.id}" must match ${n.source}`),("string"!=typeof a.command||""===a.command.trim())&&e.push(`${b}.command: required, must be a non-empty string (got ${w(a.command)})`);let k=m;if(void 0!==a.timeoutSec){let c=u(a.timeoutSec);null===c?e.push(`${b}.timeoutSec: must be an integer (got ${w(a.timeoutSec)})`):c<1||c>7200?e.push(`${b}.timeoutSec: must be 1..7200 (got ${c})`):k=c}if(void 0!==a.mutex&&("string"!=typeof a.mutex||""===a.mutex?e.push(`${b}.mutex: must be a non-empty string (got ${w(a.mutex)})`):a.mutex.length>64?e.push(`${b}.mutex: must be at most 64 characters (got ${a.mutex.length})`):o.test(a.mutex)?f=a.mutex:e.push(`${b}.mutex: "${a.mutex}" must match ${o.source}`)),void 0!==a.retryOnFail){let c=u(a.retryOnFail);null===c?e.push(`${b}.retryOnFail: must be an integer (got ${w(a.retryOnFail)})`):c<0||c>1?e.push(`${b}.retryOnFail: must be 0 or 1 (got ${c})`):g=c}if(void 0!==a.flakyIsPass){let c=v(a.flakyIsPass);null===c?e.push(`${b}.flakyIsPass: must be true or false (got ${w(a.flakyIsPass)})`):c&&1!==g?e.push(`${b}.flakyIsPass: true requires retryOnFail: 1 (without a retry a gate can never be FLAKY)`):h=c}if(e.length===i){let b={id:a.id,command:a.command,timeoutSec:k};void 0!==f&&(b.mutex=f),void 0!==g&&(b.retryOnFail=g),void 0!==h&&(b.flakyIsPass=h),d.push(b)}}(a,`${b}[${f}]`,e,d,c)}),d}function z(a){let b,c=(0,e.join)(a,k);try{b=(0,d.readFileSync)(c,"utf8")}catch(a){if("ENOENT"===a.code)return null;throw new s([`${c}: ${a.message}`])}return function(a,b){var c;let d;try{d=(0,f.qg)(a)}catch(a){throw new s([`${b}: YAML parse error: ${a.message}`])}if(!t(d))throw new s([`${b}: expected a YAML mapping at the top level (got ${w(d)})`]);let e=[];x(d,p,"top level",e),"version"in d?1!==u(d.version)&&e.push(`version: must be 1 (got ${w(d.version)})`):e.push('version: required, v1 configs must declare "version: 1"');let g=(c=d.gates,null==c?(e.push("gates: required, at least one gate must be defined"),[]):Array.isArray(c)&&0===c.length?(e.push("gates: at least one gate must be defined"),[]):y(c,"gates",e)),h=function(a,b){let c={baseRef:null,skipInPrimaryCheckout:!0,maxLogTailBytes:8192,requireCommit:!1,requireEnvClean:!1,envCleanIgnoreHomeEntries:[]};if(null==a)return c;if(!t(a))return b.push(`options: must be a mapping (got ${w(a)})`),c;if(x(a,r,"options",b),void 0!==a.baseRef&&("string"!=typeof a.baseRef||""===a.baseRef.trim()?b.push(`options.baseRef: must be a non-empty string (got ${w(a.baseRef)})`):c.baseRef=a.baseRef),void 0!==a.skipInPrimaryCheckout){let d=v(a.skipInPrimaryCheckout);null===d?b.push(`options.skipInPrimaryCheckout: must be true or false (got ${w(a.skipInPrimaryCheckout)})`):c.skipInPrimaryCheckout=d}if(void 0!==a.requireCommit){let d=v(a.requireCommit);null===d?b.push(`options.requireCommit: must be true or false (got ${w(a.requireCommit)})`):c.requireCommit=d}if(void 0!==a.requireEnvClean){let d=v(a.requireEnvClean);null===d?b.push(`options.requireEnvClean: must be true or false (got ${w(a.requireEnvClean)})`):c.requireEnvClean=d}if(void 0!==a.envCleanIgnoreHomeEntries){let d=function(a,b){let c="options.envCleanIgnoreHomeEntries";if(!Array.isArray(a))return b.push(`${c}: must be a list of $HOME entry names (got ${w(a)})`),null;let d=b.length;a.length>32&&b.push(`${c}: at most 32 entries (got ${a.length})`);let e=[];return a.forEach((a,d)=>{let f=`${c}[${d}]`;"string"!=typeof a?b.push(`${f}: must be a string (got ${w(a)})`):""===a?b.push(`${f}: must not be empty`):"."===a||".."===a?b.push(`${f}: must be an entry name, not ${JSON.stringify(a)}`):a.includes("/")||a.includes("\0")?b.push(`${f}: must be a single $HOME entry name without "/" or NUL (got ${w(a)})`):e.push(a)}),b.length===d?e:null}(a.envCleanIgnoreHomeEntries,b);d&&(c.envCleanIgnoreHomeEntries=d)}if(void 0!==a.maxLogTailBytes){let d=u(a.maxLogTailBytes);null===d?b.push(`options.maxLogTailBytes: must be an integer (got ${w(a.maxLogTailBytes)})`):d<0||d>1048576?b.push(`options.maxLogTailBytes: must be 0..1048576 (got ${d})`):c.maxLogTailBytes=d}return c}(d.options,e);if(e.length>0)throw new s(e);return{version:1,gates:g,options:h}}(b,c)}}};