dorfl 0.14.2 → 0.15.0

package/dist/ci-phase-driver.js

@@ -0,0 +1,370 @@
+/**
+ * **The shared CI phase driver** (spec `ci-agent-job-without-write-token`, ADR
+ * `ci-agent-job-holds-no-write-token`, task `ci-split-build-path`).
+ *
+ * Every CI item runs as three jobs (`phase.ts`): lock, agent, apply. Each path
+ * split (`ci-phase-build.ts` first; intake, tasking and the tree-less rungs
+ * later) needs the same few steps around its own pipeline halves, and they live
+ * here so every split does them the same way:
+ *
+ *  - the lock phase reads `<arbiter>/main` as the base (never the run's own
+ *    commit), classifies the item in a throwaway worktree of that base, and
+ *    publishes its trusted facts to `$GITHUB_OUTPUT` (`ci-lock-outputs.ts`);
+ *  - the agent and apply phases read those facts back from
+ *    {@link LOCK_OUTPUTS_ENV} and check them;
+ *  - the lock-ownership rule (spec §8): the agent phase checks, read-only, that
+ *    the item's lock ref still equals `lockSha` before launching anything, and
+ *    the apply phase checks it before its FIRST write and writes nothing when
+ *    it does not; every later lock operation is leased on the sha last observed
+ *    ({@link releaseLockLeased});
+ *  - the agent phase bounds the free text it hands over to the handoff limits;
+ *  - the lock phase computes the agent job's timeout from the config at
+ *    `baseSha` ({@link agentTimeoutMinutesAt}), and the apply phase decides what
+ *    to do with the agent job's result before it reads any artifact
+ *    ({@link resolveAgentResult}, `ci-agent-result.ts`): only `success` reads
+ *    it (task `ci-split-agent-result-and-reruns`).
+ *
+ * **A handled outcome is green** (task `a-handled-surface-exits-green-in-ci`):
+ * the job's exit code is the only signal a CI run's colour carries, so every
+ * phase (build, tasking, tree-less, intake) exits 0 for an outcome it HANDLED
+ * and non-zero only for one it did not:
+ *
+ *  - exit 0: the item was surfaced to needs-attention (including a rejected
+ *    handoff whose surface landed: outcome `rejected` / `surfaced`); a lock
+ *    phase that backed off because another run holds the lock (`lost`,
+ *    `backed-off`); an agent or apply phase whose lock is no longer this run's
+ *    (`stale-lock`, e.g. a "Re-run failed jobs" of a finished run), which
+ *    writes nothing;
+ *  - non-zero: a surface that did not land (`surface-unmoved`), a refused or
+ *    failed publish or release (`stale-lease`, `publish-refused`,
+ *    `publish-failed`, `release-refused`, `land-failed`), an agent that failed
+ *    without a handoff (`agent-failed`), a usage or environment problem, and
+ *    any unexpected error.
+ */
+import { mkdtempSync, rmSync, appendFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { LOCK_OUTPUTS_ENV, readLockOutputsFromEnv, serializeLockOutputs, } from './ci-lock-outputs.js';
+import { HandoffRejected } from './ci-handoff-format.js';
+import { actionsRunRefFromEnv, decideAgentResult, detectAgentTimeout, githubTokenApiGet, } from './ci-agent-result.js';
+import { DEFAULT_CONFIG } from './config.js';
+import { git, run, runAsync } from './git.js';
+import { pushLfsObjects } from './ci-handoff-lfs.js';
+import { workItemRel } from './work-layout.js';
+import { REPO_CONFIG_FILENAME, REPO_CONFIG_FILENAME_LEGACY, loadRepoConfigFromContent, } from './repo-config.js';
+import { itemLockRef, lockEntryFor } from './item-lock.js';
+import { refWrite } from './ref-write.js';
+export { LOCK_OUTPUTS_ENV };
+/** A phase run that cannot go on: bad trusted inputs or a missing precondition. */
+export class PhaseDriverError extends Error {
+    name = 'PhaseDriverError';
+}
+/**
+ * The instruction a phase prints when it refuses to act for a lock it no longer
+ * owns (spec §8, "Re-runs"): "Re-run failed jobs" replays old lock outputs, and
+ * the way to retry an item is a new run, which takes a fresh lock.
+ */
+export const STALE_LOCK_RETRY_HINT = 'The lock was released, reaped or re-taken since the lock job ran (for ' +
+    'example a "Re-run failed jobs" of a finished run). Nothing was written. To ' +
+    'retry the item, start a NEW run (the next tick, or a dispatch), which takes ' +
+    'a fresh lock; do not re-run the old jobs.';
+/** Git environment for any checkout of hostile or unverified content: never smudge LFS. */
+export function noSmudgeEnv(env) {
+    return { ...(env ?? process.env), GIT_LFS_SKIP_SMUDGE: '1' };
+}
+/**
+ * Fetch the arbiter's `main` into `<arbiter>/main` and return its tip: the
+ * phase's `baseSha`. The lock phase classifies against THIS tip, never the
+ * run's `github.sha` (a queued run may start hours after its dispatch).
+ */
+export async function fetchArbiterMain(params) {
+    const { cwd, arbiter, env } = params;
+    await gitAsyncHard([
+        'fetch',
+        '--quiet',
+        '--no-tags',
+        arbiter,
+        `+refs/heads/main:refs/remotes/${arbiter}/main`,
+    ], cwd, env);
+    return (await gitAsyncHard(['rev-parse', '--verify', `refs/remotes/${arbiter}/main^{commit}`], cwd, env)).trim();
+}
+/**
+ * Run `fn` with a throwaway, detached worktree of `baseSha` (LFS smudging off),
+ * removed afterwards. The lock phase reads the ledger (the item's folder, its
+ * frontmatter, its sidecar) from here, so a checkout behind the arbiter cannot
+ * make it act on stale state. Only files are read: no repository code runs.
+ */
+export async function withBaseWorktree(params, fn) {
+    const { cwd, baseSha } = params;
+    const env = noSmudgeEnv(params.env);
+    const parent = mkdtempSync(join(tmpdir(), 'dorfl-base-'));
+    const dir = join(parent, 'tree');
+    await gitAsyncHard(['worktree', 'add', '--quiet', '--detach', dir, baseSha], cwd, env);
+    try {
+        return await fn(dir);
+    }
+    finally {
+        await runAsync('git', ['worktree', 'remove', '--force', dir], cwd, { env });
+        rmSync(parent, { recursive: true, force: true });
+        await runAsync('git', ['worktree', 'prune'], cwd, { env });
+    }
+}
+/** The sha of `ref` on the arbiter (`git ls-remote`, read-only), or `undefined`. */
+export async function arbiterRefSha(params) {
+    const out = await gitAsyncHard(['ls-remote', params.arbiter, params.ref], params.cwd, params.env);
+    for (const line of out.split('\n')) {
+        const [sha, name] = line.split('\t');
+        if (name === params.ref && sha !== undefined && sha !== '')
+            return sha;
+    }
+    return undefined;
+}
+/** The item's lock ref sha on the arbiter (read-only), or `undefined` when released. */
+export function arbiterLockSha(params) {
+    return arbiterRefSha({
+        ...params,
+        ref: itemLockRef(lockEntryFor(params.item)),
+    });
+}
+/**
+ * The lock-ownership rule (spec §8): does the item's lock ref on the arbiter
+ * still equal `lockSha`, the sha the lock job produced? Read-only. The lock
+ * `holder` is the same bot for every CI run, so the sha is what tells runs
+ * apart. When it does not match, the message carries the retry instruction.
+ */
+export async function checkLockOwnership(params) {
+    const current = await arbiterLockSha(params);
+    if (current === params.lockSha)
+        return { owned: true };
+    const now = current === undefined ? 'is released' : `now points at ${current}`;
+    return {
+        owned: false,
+        current,
+        message: `the lock of ${params.item} ${now}, not the lock job's ` +
+            `${params.lockSha}. ${STALE_LOCK_RETRY_HINT}`,
+    };
+}
+/**
+ * Release the item's lock with a LEASE on `expectedSha`, the sha this phase last
+ * observed, so a phase never releases a lock another run holds now. Returns
+ * whether the ref was deleted (a lost lease leaves it untouched).
+ */
+export async function releaseLockLeased(params) {
+    const ref = itemLockRef(lockEntryFor(params.item));
+    const del = await refWrite.deleteLockRef({
+        arbiter: params.arbiter,
+        ref,
+        expectedSha: params.expectedSha,
+        cwd: params.cwd,
+        env: params.env,
+    });
+    if (del.status === 0) {
+        await runAsync('git', ['update-ref', '-d', ref], params.cwd, {
+            env: params.env,
+        });
+        return { released: true, message: `released ${ref}` };
+    }
+    return {
+        released: false,
+        message: `the leased release of ${ref} was rejected: ${del.stderr.trim()}`,
+    };
+}
+/**
+ * Publish the lock phase's facts: append them to the `$GITHUB_OUTPUT` file when
+ * one is given, else print them (a local replay). The serializer refuses any
+ * value that is not a sha, an enum, a boolean, a bounded integer or a
+ * dorfl-derived name.
+ */
+export function emitLockOutputs(facts, params) {
+    const lines = serializeLockOutputs(facts);
+    if (params.githubOutput !== undefined && params.githubOutput !== '') {
+        appendFileSync(params.githubOutput, lines);
+    }
+    else {
+        params.note(`lock outputs:\n${lines}`);
+    }
+}
+/**
+ * Read the lock outputs (given, or from {@link LOCK_OUTPUTS_ENV}) and require
+ * what an agent or apply phase needs: the lock was acquired, on `rung`, with a
+ * base and a lock sha. Throws {@link PhaseDriverError} otherwise.
+ */
+export function requireHeldLock(params) {
+    const facts = params.lockOutputs ?? readLockOutputsFromEnv(params.env);
+    if (facts.acquired !== true) {
+        throw new PhaseDriverError('the lock job did not acquire the item (acquired != true); nothing to do');
+    }
+    if (facts.rung !== params.rung) {
+        throw new PhaseDriverError(`the lock job classified the rung ${String(facts.rung)}, not ${params.rung}`);
+    }
+    if (facts.baseSha === undefined || facts.lockSha === undefined) {
+        throw new PhaseDriverError('the lock outputs carry no baseSha or no lockSha');
+    }
+    return {
+        baseSha: facts.baseSha,
+        lockSha: facts.lockSha,
+        rung: facts.rung,
+        continueTip: facts.continueTip,
+        handoffName: facts.handoffName,
+        needsAgent: facts.needsAgent,
+        agentTimeoutMinutes: facts.agentTimeoutMinutes,
+    };
+}
+/** Control characters the handoff record refuses (all but tab, LF, CR). */
+// eslint-disable-next-line no-control-regex
+const HANDOFF_TEXT_CONTROL_RE = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g;
+/**
+ * Bound one free-text product for the handoff record: drop the control
+ * characters the record refuses (an agent's output may carry terminal escapes)
+ * and cut it to `maxChars`, marking the cut. The apply phase re-validates it;
+ * this only keeps a long but honest summary from failing the whole handoff.
+ */
+export function boundHandoffText(text, maxChars) {
+    const clean = text.replace(HANDOFF_TEXT_CONTROL_RE, '');
+    if (clean.length <= maxChars)
+        return clean;
+    const marker = '\n\n[truncated by dorfl for the CI handoff]';
+    return clean.slice(0, Math.max(0, maxChars - marker.length)) + marker;
+}
+/**
+ * The `$RUNNER_TEMP` the apply phase reads the artifact under (the handoff
+ * reader refuses a directory outside it).
+ */
+export function runnerTempFrom(given, env) {
+    const dir = given ?? env.RUNNER_TEMP;
+    if (dir === undefined || dir === '') {
+        throw new PhaseDriverError('RUNNER_TEMP is not set (the apply phase reads the handoff only from under it)');
+    }
+    return dir;
+}
+/**
+ * The repository config committed at `baseSha` (`dorfl.json`, else the legacy
+ * dotfile): the trusted config a phase acts on, never the checkout's or a
+ * bundle's. `undefined` when neither file exists or the first one found does
+ * not parse.
+ */
+export function repoConfigAt(cwd, baseSha, env) {
+    for (const name of [REPO_CONFIG_FILENAME, REPO_CONFIG_FILENAME_LEGACY]) {
+        const r = run('git', ['cat-file', 'blob', `${baseSha}:${name}`], cwd, {
+            env,
+        });
+        if (r.status !== 0)
+            continue;
+        try {
+            return loadRepoConfigFromContent(r.stdout, `${baseSha}:${name}`).config;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+/**
+ * The agent job's timeout in minutes, as the lock phase publishes it
+ * (`agentTimeoutMinutes`): today's `agentDeadlineMinutes +
+ * checkpointHeadroomMinutes`, each read from the config at `baseSha` and falling
+ * back to its default (60 and 30) when absent or outside its valid range
+ * ([1, 240] and [10, 60]).
+ */
+export function agentTimeoutMinutesAt(cwd, baseSha, env) {
+    const config = repoConfigAt(cwd, baseSha, env) ?? {};
+    const pick = (v, min, max, fallback) => typeof v === 'number' && Number.isInteger(v) && v >= min && v <= max
+        ? v
+        : fallback;
+    return (pick(config.agentDeadlineMinutes, 1, 240, DEFAULT_CONFIG.agentDeadlineMinutes) +
+        pick(config.checkpointHeadroomMinutes, 10, 60, DEFAULT_CONFIG.checkpointHeadroomMinutes));
+}
+/**
+ * Decide what the apply phase does with the agent job's result (decision 5),
+ * BEFORE any artifact is read. For `cancelled` it reads the agent job from the
+ * Actions API with `GITHUB_TOKEN` (or the injected `api`) to tell a timeout from
+ * a real cancel. `agentTimeoutMinutes` is the trusted lock output
+ * (`--agent-timeout-minutes`, else the lock outputs), never the artifact's.
+ * Nothing it reads from the API is ever printed.
+ */
+export function resolveAgentResult(params) {
+    return decideAgentResult({
+        result: params.result,
+        needsAgent: params.held.needsAgent,
+        detectTimeout: () => detectAgentTimeout({
+            get: params.api ?? githubTokenApiGet(params.env),
+            run: actionsRunRefFromEnv(params.env),
+            agentTimeoutMinutes: params.agentTimeoutMinutes ?? params.held.agentTimeoutMinutes,
+        }),
+    });
+}
+/**
+ * Run a shared lock acquire whose refusal is BOTH noted and returned as its
+ * `message`, which the phase returns as its result line and the CLI prints:
+ * its notes are held back until it returns, then every one is passed on except
+ * a refusal's own message, so that line appears once in the job log (task
+ * `ci-phase-logs-each-line-once`). An acquire is one short arbiter round trip,
+ * so holding its notes back does not delay the log noticeably.
+ */
+export async function acquireNotingOnce(note, acquire) {
+    const held = [];
+    const result = await acquire((m) => held.push(m));
+    for (const m of held) {
+        if (result.exitCode === 0 || m !== result.message)
+            note(m);
+    }
+    return result;
+}
+/**
+ * Push the validated handoff's Git LFS objects to the arbiter (decision 6),
+ * the apply phase's FIRST write: before any ref of any intent (a continue push,
+ * the land's pushes, a WIP branch save), so a ref never lands pointing at a
+ * missing object. Pushed from the apply checkout of the trusted base, so
+ * `.lfsconfig` and the endpoint come from main. The caller surfaces the item on
+ * a failure (`rejected` when an object broke a handoff rule).
+ */
+export async function pushHandoffLfs(params) {
+    const { cwd, arbiter, objects, env, note } = params;
+    if (objects.length === 0)
+        return { ok: true };
+    let pushed;
+    try {
+        pushed = await pushLfsObjects({ cwd, arbiter, objects, env });
+    }
+    catch (err) {
+        if (!(err instanceof HandoffRejected))
+            throw err;
+        note(err.message);
+        return { ok: false, rejected: true, reason: err.message };
+    }
+    if (pushed.status !== 0) {
+        const reason = `the ${objects.length} Git LFS object(s) of the handoff ` +
+            `could not be pushed to ${arbiter} (${pushed.stderr.trim().slice(0, 500)}), ` +
+            'so no branch of the work was pushed';
+        note(reason);
+        return { ok: false, rejected: false, reason };
+    }
+    note(`pushed ${objects.length} Git LFS object(s) to ${arbiter}`);
+    return { ok: true };
+}
+/**
+ * The done-move source folder of the task AT `baseSha` (trusted), which picks
+ * the land half's ledger reconcile arms exactly as the agent's `complete` did.
+ */
+export function taskSourceAtBase(cwd, baseSha, slug, env) {
+    const folders = ['tasks-ready', 'tasks-backlog', 'done'];
+    for (const folder of folders) {
+        const spec = `${baseSha}:${workItemRel(folder, `${slug}.md`)}`;
+        try {
+            git(['cat-file', '-e', spec], cwd, { env });
+            return folder;
+        }
+        catch {
+            // not in this folder
+        }
+    }
+    return 'tasks-ready';
+}
+async function gitAsyncHard(args, cwd, env) {
+    const r = await runAsync('git', args, cwd, { env });
+    if (r.status !== 0) {
+        throw new Error(`git ${args.join(' ')} failed (exit ${r.status}): ${r.stderr.trim()}`);
+    }
+    return r.stdout;
+}
+//# sourceMappingURL=ci-phase-driver.js.map

package/dist/ci-phase-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-phase-driver.js","sourceRoot":"","sources":["../src/ci-phase-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAC,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EACN,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,GAEpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,eAAe,EAAmB,MAAM,wBAAwB,CAAC;AACzE,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAIjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,cAAc,EAAc,MAAM,aAAa,CAAC;AACxD,OAAO,EAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAC,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EAAC,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACN,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,WAAW,EAAE,YAAY,EAAC,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAC,QAAQ,EAAC,MAAM,gBAAgB,CAAC;AAExC,OAAO,EAAC,gBAAgB,EAAC,CAAC;AAE1B,mFAAmF;AACnF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACxB,IAAI,GAAG,kBAAkB,CAAC;CAC5C;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GACjC,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,2CAA2C,CAAC;AAE7C,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAC1B,GAAkC;IAElC,OAAO,EAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAItC;IACA,MAAM,EAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAC,GAAG,MAAM,CAAC;IACnC,MAAM,YAAY,CACjB;QACC,OAAO;QACP,SAAS;QACT,WAAW;QACX,OAAO;QACP,iCAAiC,OAAO,OAAO;KAC/C,EACD,GAAG,EACH,GAAG,CACH,CAAC;IACF,OAAO,CACN,MAAM,YAAY,CACjB,CAAC,WAAW,EAAE,UAAU,EAAE,gBAAgB,OAAO,gBAAgB,CAAC,EAClE,GAAG,EACH,GAAG,CACH,CACD,CAAC,IAAI,EAAE,CAAC;AACV,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,MAA+D,EAC/D,EAA+B;IAE/B,MAAM,EAAC,GAAG,EAAE,OAAO,EAAC,GAAG,MAAM,CAAC;IAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,YAAY,CACjB,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,EACxD,GAAG,EACH,GAAG,CACH,CAAC;IACF,IAAI,CAAC;QACJ,OAAO,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;YAAS,CAAC;QACV,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAKnC;IACA,MAAM,GAAG,GAAG,MAAM,YAAY,CAC7B,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACzC,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,GAAG,CACV,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,MAAM,CAAC,GAAG,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,MAK9B;IACA,OAAO,aAAa,CAAC;QACpB,GAAG,MAAM;QACT,GAAG,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KAC3C,CAAC,CAAC;AACJ,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAMxC;IACA,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC;IACrD,MAAM,GAAG,GACR,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,OAAO,EAAE,CAAC;IACpE,OAAO;QACN,KAAK,EAAE,KAAK;QACZ,OAAO;QACP,OAAO,EACN,eAAe,MAAM,CAAC,IAAI,IAAI,GAAG,uBAAuB;YACxD,GAAG,MAAM,CAAC,OAAO,KAAK,qBAAqB,EAAE;KAC9C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAMvC;IACA,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG;QACH,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KACf,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE;YAC5D,GAAG,EAAE,MAAM,CAAC,GAAG;SACf,CAAC,CAAC;QACH,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,GAAG,EAAE,EAAC,CAAC;IACrD,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;KAC1E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC9B,KAAkB,EAClB,MAAgE;IAEhE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QACrE,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;AACF,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAI/B;IACA,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACzB,yEAAyE,CACzE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CACzB,oCAAoC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,EAAE,CAC5E,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,gBAAgB,CACzB,iDAAiD,CACjD,CAAC;IACH,CAAC;IACD,OAAO;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC9C,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,4CAA4C;AAC5C,MAAM,uBAAuB,GAC5B,iDAAiD,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,MAAM,GAAG,6CAA6C,CAAC;IAC7D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC7B,KAAyB,EACzB,GAAsB;IAEtB,MAAM,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,WAAW,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,gBAAgB,CACzB,+EAA+E,CAC/E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC3B,GAAW,EACX,OAAe,EACf,GAAkC;IAElC,KAAK,MAAM,IAAI,IAAI,CAAC,oBAAoB,EAAE,2BAA2B,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE;YACrE,GAAG;SACH,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACJ,OAAO,yBAAyB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACpC,GAAW,EACX,OAAe,EACf,GAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB,EAAE,EAAE,CACvE,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;QACnE,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,CACN,IAAI,CACH,MAAM,CAAC,oBAAoB,EAC3B,CAAC,EACD,GAAG,EACH,cAAc,CAAC,oBAAoB,CACnC;QACD,IAAI,CACH,MAAM,CAAC,yBAAyB,EAChC,EAAE,EACF,EAAE,EACF,cAAc,CAAC,yBAAyB,CACxC,CACD,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAMlC;IACA,OAAO,iBAAiB,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAClC,aAAa,EAAE,GAAG,EAAE,CACnB,kBAAkB,CAAC;YAClB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC;YAChD,GAAG,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC;YACrC,mBAAmB,EAClB,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB;SAC9D,CAAC;KACH,CAAC,CAAC;AACJ,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAGtC,IAA+B,EAC/B,OAAwD;IAExD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAMpC;IACA,MAAM,EAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAC,GAAG,MAAM,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC;IAC5C,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,cAAc,CAAC,EAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;YAAE,MAAM,GAAG,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GACX,OAAO,OAAO,CAAC,MAAM,oCAAoC;YACzD,0BAA0B,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;YAC7E,qCAAqC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACjE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC/B,GAAW,EACX,OAAe,EACf,IAAY,EACZ,GAAsB;IAEtB,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,MAAM,CAAU,CAAC;IAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC;YACJ,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACR,qBAAqB;QACtB,CAAC;IACF,CAAC;IACD,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,IAAc,EACd,GAAW,EACX,GAAkC;IAElC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACd,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CACrE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AACjB,CAAC"}

package/dist/ci-phase-intake.d.ts

@@ -0,0 +1,172 @@
+/**
+ * **The intake path split into the three CI phases** (spec
+ * `ci-agent-job-without-write-token` §3 intake row, ADR
+ * `ci-agent-job-holds-no-write-token`, task `ci-split-intake`).
+ *
+ * `intake <N> --phase` runs ONE of three halves of the one intake pipeline
+ * (`intake.ts`: {@link decideIntake} is the agent half, {@link applyIntakeDecision}
+ * / {@link emitIntakeDocument} the write half), never a second implementation.
+ * The item is `issue:<N>`; its lock is the `processing` LABEL, not a lock ref.
+ *
+ *  - **lock** ({@link performIntakeLockPhase}): fetch `<arbiter>/main` (its tip
+ *    is `baseSha`); read the issue, its comments and its labels; take the
+ *    `processing` label (the provider creates it on a fresh repository); run
+ *    the deterministic triage (a skip needs no agent: `needsAgent: false`);
+ *    derive the origin trust from the event (`comment.author_association`, else
+ *    `issue.author_association`, as `intake.yml` does) and the document mode
+ *    (`intakeIntegration ?? integration` from the config at `baseSha`); publish
+ *    them with `seenCommentIds`, every comment id it read. No agent, no
+ *    repository code.
+ *  - **agent** ({@link performIntakeAgentPhase}): read the issue with the read
+ *    token, but give the decision agent ONLY the comments whose ids are in
+ *    `seenCommentIds` (a comment posted after the lock is neither read nor
+ *    marked seen); run the decision agent and the lone-task review rounds; hand
+ *    over the verdict (`intake-ask`, `intake-bounce`, `intake-task`,
+ *    `intake-spec`) carrying only the record fields the intent table allows. Any
+ *    failure writes no handoff and fails the job.
+ *  - **apply** ({@link performIntakeApplyPhase}): refuse to write when the label
+ *    is gone (a re-run of a finished run); act on the agent job's result first
+ *    (anything but `success` never reads the handoff: remove the label, post
+ *    nothing); validate the handoff as hostile; for a document, RECOMPUTE the
+ *    slug (`slug-safety.ts`), the placement, the origin-trust stamp and the mode
+ *    from trusted inputs, render the document with the title YAML-quoted and
+ *    re-parse it to prove the stamp survived, then integrate
+ *    (`performIntegration`, PR or merge with the CAS loop) and post the
+ *    completion comment. The marker's `seen=` is `seenCommentIds`. The label is
+ *    ALWAYS removed.
+ */
+import { type HandoffIntentKind, type HandoffRecord } from './ci-handoff-format.js';
+import { type LockOutputs } from './ci-lock-outputs.js';
+import type { AgentJobResult } from './ci-agent-result.js';
+import type { IntegrationMode } from './config.js';
+import { type OriginTrust } from './frontmatter.js';
+import { type IntakeDecision, type IntakeDocumentDecision, type PerformIntakeOptions } from './intake.js';
+import type { Phase } from './phase.js';
+/** Options of an intake phase run: the `intake` options plus the phase inputs. */
+export interface IntakePhaseOptions extends PerformIntakeOptions {
+    /** Which of the three jobs this process is. */
+    phase: Phase;
+    /**
+     * The handoff directory: the agent phase writes the artifact here (empty or
+     * absent); the apply phase reads it (under {@link runnerTemp}).
+     */
+    handoffDir?: string;
+    /** `$RUNNER_TEMP` (the apply phase); defaults to the env's. */
+    runnerTemp?: string;
+    /** The lock job's outputs (agent / apply); defaults to `DORFL_LOCK_OUTPUTS`. */
+    lockOutputs?: LockOutputs;
+    /** `github.run_attempt` (names the artifact); default the env's, else 1. */
+    runAttempt?: string;
+    /** The `$GITHUB_OUTPUT` file the lock phase appends to; default the env's. */
+    githubOutput?: string;
+    /**
+     * lock: the event payload file (`$GITHUB_EVENT_PATH`) the origin trust is
+     * read from; default the env's. A called workflow sees its caller's event.
+     */
+    eventPath?: string;
+    /**
+     * apply: `needs.agent.result` (`--agent-result`), REQUIRED. Only `success`
+     * reads the handoff.
+     */
+    agentResult?: AgentJobResult;
+    /** The merge-mode CAS-loop jitter (tests pass 0). */
+    mergeJitterMs?: number;
+}
+/** How an intake phase run ended. */
+export type IntakePhaseOutcome = 
+/** lock: the label is taken and the agent runs next. */
+'locked'
+/** lock: the triage skipped (label taken, `needsAgent: false`). */
+ | 'no-new-input' | 'already-terminal'
+/** lock: another run holds the label; nothing was written. */
+ | 'backed-off'
+/** lock: the label could not be read or taken. */
+ | 'lock-failed'
+/** agent: the handoff was written (see `intent`). */
+ | 'handed-over'
+/** agent / apply: nothing to do (the lock job's triage skipped). */
+ | 'no-op'
+/** apply: the label is gone (a finished run re-run); nothing was written. */
+ | 'stale-lock'
+/** apply: the agent job did not succeed; the label was removed, nothing posted. */
+ | 'released'
+/** apply: the handoff broke a rule; the label was removed, nothing posted. */
+ | 'rejected'
+/** apply: the write half's outcomes (as the laptop `intake`). */
+ | 'asked' | 'bounced' | 'tasked' | 'spec-written' | 'stale'
+/** agent: the decision or the review failed (no handoff; the job fails). */
+ | 'agent-failed'
+/** A usage or environment problem. */
+ | 'usage-error';
+/** The result of one intake phase run. */
+export interface IntakePhaseResult {
+    /** See "A handled outcome is green" in `ci-phase-driver.ts`. */
+    exitCode: 0 | 1 | 4;
+    outcome: IntakePhaseOutcome;
+    issueNumber: number;
+    /**
+     * The result line: the CLI prints it (`>> ` or `error: `), so the phase does
+     * NOT also `note` it (each line appears once in the job log).
+     */
+    message: string;
+    /** lock: the facts published. */
+    lockOutputs?: LockOutputs;
+    /** agent: the handed-over intent kind. */
+    intent?: HandoffIntentKind;
+    /** apply: the emitted document (task / spec). */
+    emitted?: string;
+    emittedSlug?: string;
+}
+/**
+ * Run one phase of the intake path. The CLI calls this for `intake <N> --phase`.
+ */
+export declare function performIntakePhase(options: IntakePhaseOptions): Promise<IntakePhaseResult>;
+/**
+ * The origin trust from the event payload at `eventPath`: the COMMENT's
+ * `author_association` on an `issue_comment` event, else the ISSUE's (the rule
+ * `intake.yml` applies), classified by {@link isAuthorTrusted}. A payload that
+ * is missing, unreadable, or about another issue gives `untrusted` (the
+ * fail-safe side of a public front door).
+ */
+export declare function originTrustFromEvent(eventPath: string | undefined, issueNumber: number): OriginTrust;
+/**
+ * The intake document mode from the repository config AT `baseSha`:
+ * `intakeIntegration ?? integration`, else `propose` (the conservative
+ * default). Never read from the agent job.
+ */
+export declare function intakeDocumentModeAt(cwd: string, baseSha: string, env: NodeJS.ProcessEnv | undefined): IntegrationMode;
+/**
+ * The lock phase: read the issue, its thread and its labels, take the
+ * `processing` label, run the deterministic triage and publish the trusted
+ * facts. Runs no agent and no repository code. Every fact is checked BEFORE the
+ * label is taken, so a refused output never leaves the label behind.
+ */
+export declare function performIntakeLockPhase(options: IntakePhaseOptions): Promise<IntakePhaseResult>;
+/**
+ * The handoff record of a decision: only the fields the intent table allows,
+ * each bounded to its limit. A task / spec carries its title and body (and a
+ * spec its two gate booleans), never a slug, a path, a stamp or a mode.
+ */
+export declare function intakeHandoffRecord(issueNumber: number, decision: IntakeDecision): HandoffRecord;
+/**
+ * The agent phase: read the issue (read token) and ONLY the comments the lock
+ * job read, run the decision agent and the lone-task review, and write the
+ * handoff. Writes nothing anywhere else. Any failure writes no handoff and
+ * fails the job, so the apply job removes the label and posts nothing.
+ */
+export declare function performIntakeAgentPhase(options: IntakePhaseOptions): Promise<IntakePhaseResult>;
+/**
+ * The document a `intake-task` / `intake-spec` record describes, with the slug
+ * RECOMPUTED from its title (`paramCase`, then `slug-safety.ts`). Throws
+ * {@link HandoffRejected} for a title that is not one line or holds a control
+ * character, or that leaves no safe slug.
+ */
+export declare function intakeDocumentFromRecord(record: HandoffRecord): IntakeDocumentDecision;
+/**
+ * The apply phase: check the label is still held, act on the agent job's
+ * result, validate the handoff as hostile, then resume at the write half with
+ * every target, stamp and mode from trusted inputs. Runs no agent and no
+ * repository code. The label is ALWAYS removed once the check passed.
+ */
+export declare function performIntakeApplyPhase(options: IntakePhaseOptions): Promise<IntakePhaseResult>;
+//# sourceMappingURL=ci-phase-intake.d.ts.map

package/dist/ci-phase-intake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-phase-intake.d.ts","sourceRoot":"","sources":["../src/ci-phase-intake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAIH,OAAO,EAIN,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAKlB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAIN,KAAK,WAAW,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAWzD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AACjD,OAAO,EAA0B,KAAK,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAQN,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAG3B,KAAK,oBAAoB,EACzB,MAAM,aAAa,CAAC;AAUrB,OAAO,KAAK,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AAKtC,kFAAkF;AAClF,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC/D,+CAA+C;IAC/C,KAAK,EAAE,KAAK,CAAC;IACb;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qCAAqC;AACrC,MAAM,MAAM,kBAAkB;AAC7B,wDAAwD;AACtD,QAAQ;AACV,mEAAmE;GACjE,cAAc,GACd,kBAAkB;AACpB,8DAA8D;GAC5D,YAAY;AACd,kDAAkD;GAChD,aAAa;AACf,qDAAqD;GACnD,aAAa;AACf,oEAAoE;GAClE,OAAO;AACT,6EAA6E;GAC3E,YAAY;AACd,mFAAmF;GACjF,UAAU;AACZ,8EAA8E;GAC5E,UAAU;AACZ,iEAAiE;GAC/D,OAAO,GACP,SAAS,GACT,QAAQ,GACR,cAAc,GACd,OAAO;AACT,4EAA4E;GAC1E,cAAc;AAChB,sCAAsC;GACpC,aAAa,CAAC;AAEjB,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IACjC,gEAAgE;IAChE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,0CAA0C;IAC1C,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACvC,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAqB5B;AAiBD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,GACjB,WAAW,CAsBb;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,GAChC,eAAe,CAIjB;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC3C,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CA8I5B;AA+CD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,cAAc,GACtB,aAAa,CAiDf;AAOD;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CA4E5B;AAMD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACvC,MAAM,EAAE,aAAa,GACnB,sBAAsB,CAmCxB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAqL5B"}