forgebadger 0.1.1 → 0.1.2

package/dist/gateway/src/services/development/project-git-status.js

@@ -0,0 +1,232 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import fs from 'node:fs';
+import path from 'node:path';
+import { tmpdir } from 'node:os';
+import { validateProjectRoot } from '../../lib/safe-resolve.js';
+import { assertGitRoot } from './project-diff.js';
+const exec = promisify(execFile);
+const MAX_STATUS_BYTES = 8 * 1024 * 1024;
+const CONFLICTS = new Set(['DD', 'AU', 'UD', 'UA', 'DU', 'AA', 'UU']);
+const SAFE_CORE = ['repositoryformatversion', 'filemode', 'ignorecase', 'symlinks', 'precomposeunicode',
+    'autocrlf', 'eol', 'checkstat', 'trustctime', 'excludesfile', 'attributesfile', 'protectntfs', 'protecthfs'];
+const CONFIG_PATTERN = `^(core\\.(${SAFE_CORE.join('|')}|sparsecheckout)|extensions\\.objectformat|filter\\..*\\.(clean|process|required))$`;
+const fixedArgs = ['--no-pager', '-c', 'core.fsmonitor=false', '-c', 'core.hooksPath=/dev/null',
+    '-c', 'diff.external=', '-c', 'submodule.recurse=false', '-c', 'protocol.allow=never', '-c', 'credential.helper='];
+/** Parse byte-framed paths without UTF-8 normalization or filename disclosure. */
+function* statusEntries(data) {
+    if (data.length > MAX_STATUS_BYTES)
+        throw new Error('COPILOT_GIT_STATUS_LIMIT');
+    let cursor = 0;
+    while (cursor < data.length) {
+        const end = data.indexOf(0, cursor);
+        if (end < cursor + 4 || data[cursor + 2] !== 32)
+            throw new Error('COPILOT_GIT_STATUS_INVALID');
+        const code = data.subarray(cursor, cursor + 2).toString('ascii');
+        const identity = data.subarray(cursor + 3, end).toString('base64');
+        cursor = end + 1;
+        if (!CONFLICTS.has(code) && code !== '??' && (!/^[ MTADRC]{2}$/.test(code) || code === '  '))
+            throw new Error('COPILOT_GIT_STATUS_INVALID');
+        if (code.includes('R') || code.includes('C')) {
+            const sourceEnd = data.indexOf(0, cursor);
+            if (sourceEnd <= cursor)
+                throw new Error('COPILOT_GIT_STATUS_INVALID');
+            cursor = sourceEnd + 1;
+        }
+        yield { code, identity };
+    }
+}
+/** Parse the complete status stream. Categories overlap; total is unique paths. */
+export function summarizeGitStatus(data) {
+    const counts = { total: 0, staged: 0, unstaged: 0, untracked: 0, conflicted: 0, stagedAndUnstaged: 0 };
+    const byStatus = {};
+    const paths = new Set(), entries = new Set();
+    for (const { code, identity } of statusEntries(data)) {
+        if (entries.has(code + identity))
+            continue;
+        entries.add(code + identity);
+        paths.add(identity);
+        counts.total = paths.size;
+        byStatus[code] = (byStatus[code] ?? 0) + 1;
+        if (code === '??') {
+            counts.untracked++;
+            continue;
+        }
+        if (CONFLICTS.has(code)) {
+            counts.conflicted++;
+            continue;
+        }
+        if (code[0] !== ' ')
+            counts.staged++;
+        if (code[1] !== ' ')
+            counts.unstaged++;
+        if (code[0] !== ' ' && code[1] !== ' ')
+            counts.stagedAndUnstaged++;
+    }
+    return { counts, byStatus, clean: counts.total === 0, complete: true };
+}
+/** --ignore-submodules=all hides staged gitlinks too; recover those from index/HEAD only. */
+function stagedGitlinks(data, status) {
+    const knownPaths = new Set([...statusEntries(status)].map(entry => entry.identity));
+    const records = [];
+    let cursor = 0;
+    const field = () => {
+        const end = data.indexOf(0, cursor);
+        if (end <= cursor)
+            throw new Error('COPILOT_GIT_STATUS_INVALID');
+        const result = data.subarray(cursor, end);
+        cursor = end + 1;
+        return result;
+    };
+    while (cursor < data.length) {
+        const header = field().toString('ascii');
+        const match = /^:([0-7]{6}) ([0-7]{6}) [0-9a-f]+ [0-9a-f]+ ([A-Z])(?:[0-9]+)?$/.exec(header);
+        if (!match)
+            throw new Error('COPILOT_GIT_STATUS_INVALID');
+        const source = field(), renamed = match[3] === 'R' || match[3] === 'C';
+        const target = renamed ? field() : source;
+        if (match[1] !== '160000' && match[2] !== '160000')
+            continue;
+        if (knownPaths.has(target.toString('base64')))
+            continue;
+        if (match[3] === 'U')
+            throw new Error('COPILOT_GIT_STATUS_INVALID');
+        records.push(Buffer.from(`${match[3]}  `), target, Buffer.from([0]));
+        if (renamed)
+            records.push(source, Buffer.from([0]));
+    }
+    return Buffer.concat(records);
+}
+function safeEnvironment() {
+    const env = { PATH: process.env.PATH, LANG: 'C', LC_ALL: 'C', GIT_OPTIONAL_LOCKS: '0',
+        GIT_TERMINAL_PROMPT: '0', GIT_NO_REPLACE_OBJECTS: '1', GIT_NO_LAZY_FETCH: '1', GIT_ALLOW_PROTOCOL: '', GIT_PROTOCOL_FROM_USER: '0' };
+    for (const key of ['HOME', 'XDG_CONFIG_HOME', 'USERPROFILE', 'SYSTEMROOT', 'GIT_CONFIG_GLOBAL', 'GIT_CONFIG_SYSTEM']) {
+        if (process.env[key] !== undefined)
+            env[key] = process.env[key];
+    }
+    return env;
+}
+/** No helper/filter configuration is copied. Paths/config may never become error messages. */
+function snapshotConfig(data) {
+    const entries = new Map();
+    for (const record of data.toString('utf8').split('\0').filter(Boolean)) {
+        const split = record.indexOf('\n');
+        if (split < 0)
+            entries.set(record, 'true'); // Git's implicit boolean value.
+        else
+            entries.set(record.slice(0, split), record.slice(split + 1));
+    }
+    for (const [key, value] of entries) {
+        if (/^filter\..*\.(clean|process)$/.test(key) && value.trim())
+            throw new Error('COPILOT_GIT_STATUS_FILTER_UNSUPPORTED');
+        if (/^filter\..*\.required$/.test(key) && /^(true|yes|on|1)$/i.test(value))
+            throw new Error('COPILOT_GIT_STATUS_FILTER_UNSUPPORTED');
+        if (key === 'core.sparsecheckout' && /^(true|yes|on|1)$/i.test(value))
+            throw new Error('COPILOT_GIT_STATUS_SPARSE_UNSUPPORTED');
+    }
+    const quoted = (value) => {
+        if (/[\x00-\x07\x0b-\x1f\x7f]/.test(value))
+            throw new Error('COPILOT_GIT_STATUS_CONFIG_UNSUPPORTED');
+        return '"' + value.replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\n/g, '\\n').replace(/\t/g, '\\t').replace(/\x08/g, '\\b') + '"';
+    };
+    const core = SAFE_CORE.filter(key => entries.has(`core.${key}`)).map(key => `\t${key} = ${quoted(entries.get(`core.${key}`))}`);
+    const format = entries.get('extensions.objectformat');
+    return `[core]\n${core.join('\n')}\n\tbare = false\n` + (format ? `[extensions]\n\tobjectFormat = ${quoted(format)}\n` : '');
+}
+function copyMetadata(source, destination, maxBytes) {
+    let fd;
+    try {
+        fd = fs.openSync(source, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return 0;
+        throw new Error('COPILOT_GIT_ROOT_UNSUPPORTED');
+    }
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > maxBytes)
+            throw new Error('COPILOT_GIT_STATUS_LIMIT');
+        const data = Buffer.alloc(stat.size + 1);
+        let size = 0;
+        while (size < data.length) {
+            const n = fs.readSync(fd, data, size, data.length - size, null);
+            if (!n)
+                break;
+            size += n;
+        }
+        if (size !== stat.size)
+            throw new Error('COPILOT_GIT_STATUS_CHANGED');
+        fs.writeFileSync(destination, data.subarray(0, size), { mode: 0o600, flag: 'wx' });
+        return size;
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** Stable config/index snapshots prevent status from executing mutable repo/global filter drivers. */
+export async function readProjectGitStatus(root, signal) {
+    signal?.throwIfAborted();
+    const canonical = fs.realpathSync(root);
+    validateProjectRoot(canonical);
+    assertGitRoot(canonical);
+    const sourceGit = path.join(canonical, '.git');
+    const controller = new AbortController();
+    const abort = () => controller.abort(signal?.reason);
+    signal?.addEventListener('abort', abort, { once: true });
+    const timeout = setTimeout(() => controller.abort(new Error('COPILOT_GIT_STATUS_TIMEOUT')), 10_000);
+    const env = safeEnvironment();
+    let temporary;
+    const git = async (gitDir, args, environment = env, allowMissing = false, maxBuffer = MAX_STATUS_BYTES) => {
+        controller.signal.throwIfAborted();
+        assertGitRoot(canonical);
+        try {
+            const result = await exec('git', [...fixedArgs, `--git-dir=${gitDir}`, `--work-tree=${canonical}`, ...args], { cwd: canonical, env: environment, signal: controller.signal, timeout: 10000, maxBuffer, encoding: 'buffer', windowsHide: true });
+            assertGitRoot(canonical);
+            return result.stdout;
+        }
+        catch (error) {
+            controller.signal.throwIfAborted();
+            const code = error.code;
+            if (allowMissing && error.code === 1)
+                return Buffer.alloc(0);
+            if (code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER')
+                throw new Error('COPILOT_GIT_STATUS_LIMIT');
+            throw new Error('COPILOT_GIT_STATUS_FAILED');
+        }
+    };
+    try {
+        const values = await git(sourceGit, ['config', '--includes', '--null', '--get-regexp', CONFIG_PATTERN], env, true, 256 * 1024);
+        const booleans = await git(sourceGit, ['config', '--includes', '--null', '--type=bool', '--get-regexp', '^(core\\.sparsecheckout|filter\\..*\\.required)$'], env, true, 256 * 1024);
+        const config = snapshotConfig(Buffer.concat([values, booleans]));
+        const head = (await git(sourceGit, ['rev-parse', '--revs-only', 'HEAD'], env, false, 1024)).toString('ascii').trim();
+        if (head && !/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/.test(head))
+            throw new Error('COPILOT_GIT_STATUS_INVALID');
+        temporary = fs.mkdtempSync(path.join(tmpdir(), 'fb-git-status-'));
+        fs.mkdirSync(path.join(temporary, 'refs'));
+        fs.mkdirSync(path.join(temporary, 'info'));
+        fs.writeFileSync(path.join(temporary, 'HEAD'), head ? `${head}\n` : 'ref: refs/heads/unborn\n', { mode: 0o600 });
+        fs.writeFileSync(path.join(temporary, 'config'), config, { mode: 0o600 });
+        let remaining = 64 * 1024 * 1024;
+        for (const file of ['index', ...fs.readdirSync(sourceGit).filter(name => /^sharedindex\.[0-9a-f]+$/.test(name))]) {
+            remaining -= copyMetadata(path.join(sourceGit, file), path.join(temporary, file), remaining);
+        }
+        for (const file of ['attributes', 'exclude'])
+            copyMetadata(path.join(sourceGit, 'info', file), path.join(temporary, 'info', file), 1024 * 1024);
+        const isolatedEnv = { ...env, GIT_CONFIG_NOSYSTEM: '1', GIT_CONFIG_GLOBAL: '/dev/null', GIT_CONFIG_SYSTEM: '/dev/null',
+            GIT_OBJECT_DIRECTORY: path.join(sourceGit, 'objects') };
+        const status = await git(temporary, ['status', '--porcelain=v1', '-z', '--untracked-files=all', '--ignore-submodules=all', '--renames'], isolatedEnv);
+        const gitlinks = stagedGitlinks(await git(temporary, ['diff', '--cached', '--raw', '-z', '--no-ext-diff', '--no-textconv', '--ignore-submodules=none', '--find-renames'], isolatedEnv), status);
+        const result = summarizeGitStatus(Buffer.concat([status, gitlinks]));
+        return { ...result, observedAt: new Date().toISOString(), unit: 'unique_git_status_paths',
+            scope: 'superproject; ignored files and submodule worktree changes excluded; nested untracked repositories count as one entry',
+            note: 'Counts cover the complete status output, not a diff page. Categories can overlap; use total for unique paths. Conflicts count separately. Staged gitlinks count; submodule worktrees are not inspected. Concurrent edits can change the snapshot.', readOnly: true };
+    }
+    finally {
+        clearTimeout(timeout);
+        signal?.removeEventListener('abort', abort);
+        if (temporary)
+            fs.rmSync(temporary, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=project-git-status.js.map

package/dist/gateway/src/services/development/project-git-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-git-status.js","sourceRoot":"","sources":["../../../../src/services/development/project-git-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACtE,MAAM,SAAS,GAAG,CAAC,yBAAyB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB;IACrG,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAC/G,MAAM,cAAc,GAAG,aAAa,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,qFAAqF,CAAC;AAC7I,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,0BAA0B;IAC7F,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAErH,kFAAkF;AAClF,QAAQ,CAAC,CAAC,aAAa,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5I,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,SAAS,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACvE,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IACvG,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7D,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;YAAE,SAAS;QAC3C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACpD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC;AAClF,CAAC;AAED,6FAA6F;AAC7F,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAC7E,CAAC,CAAC;IACF,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,iEAAiE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,EAAE,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QACvE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC7D,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,SAAS;QACxD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,GAAG,GAAsB,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG;QACtG,mBAAmB,EAAE,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC;IACvI,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrH,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8FAA8F;AAC9F,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,gCAAgC;;YACvE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACxH,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACrI,IAAI,GAAG,KAAK,qBAAqB,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;QAC/B,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACrG,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC;IAC3I,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAE,CAAC,EAAE,CAAC,CAAC;IACjI,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtD,OAAO,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,kCAAkC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,WAAmB,EAAE,QAAgB;IACzE,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAC5G,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAAC,CAAC;IACpI,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,MAAM;YAAC,IAAI,IAAI,CAAC,CAAC;QAAC,CAAC;QACzH,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAAoB;IAC3E,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpG,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,IAAI,SAA6B,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,EAAE,MAAc,EAAE,IAAc,EAAE,WAAW,GAAG,GAAG,EAAE,YAAY,GAAG,KAAK,EAAE,SAAS,GAAG,gBAAgB,EAAE,EAAE;QAC1H,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,EAAE,aAAa,MAAM,EAAE,EAAE,eAAe,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,EACzG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,aAAa,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC,MAAM,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,YAAY,IAAK,KAA4B,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,IAAI,KAAK,mCAAmC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;QAC/H,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,kDAAkD,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;QACpL,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACrH,IAAI,IAAI,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACzG,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAClE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjH,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QAChJ,MAAM,WAAW,GAAG,EAAE,GAAG,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW;YACpH,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACtJ,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,0BAA0B,EAAE,gBAAgB,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAChM,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,yBAAyB;YACvF,KAAK,EAAE,uHAAuH;YAC9H,IAAI,EAAE,mPAAmP,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChR,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnE,IAAI,SAAS;YAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}

package/dist/gateway/src/services/development/reconciliation.d.ts

@@ -0,0 +1,11 @@
+import type { Database } from '../../db/types.js';
+import { type ExecutionObserver } from './execution-identity.js';
+import type { DevelopmentTaskRow } from './contracts.js';
+export interface ReconcileInput {
+    projectId: string;
+    taskId: string;
+    expectedRevision: number;
+}
+/** OS observation is independent of lease expiry and never sends signals or requeues work. */
+export declare function reconcileDevelopmentTask(db: Database, userId: string, input: ReconcileInput, observer?: ExecutionObserver): DevelopmentTaskRow;
+export declare function reconciliationRemedy(codeName: string): string;

package/dist/gateway/src/services/development/reconciliation.js

@@ -0,0 +1,93 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { z } from 'zod';
+import { DevelopmentTaskRepository } from '../../db/repositories/development-task-repository.js';
+import { ProjectRepository } from '../../db/repositories/project-repository.js';
+import { canonical } from '../platform-commands/actions.js';
+import { executionIdentitySchema, executionReservationSchema, systemExecutionObserver } from './execution-identity.js';
+import { evidenceDirectory } from './state-directory.js';
+import { hashText } from './workspace.js';
+const code = (suffix) => new Error('DEVELOPMENT_RECONCILIATION_' + suffix);
+const recordedExecutionSchema = z.discriminatedUnion('phase', [executionReservationSchema, executionIdentitySchema]);
+function recordedIdentity(db, row) {
+    if (!row.execution_identity_json)
+        throw code('IDENTITY_MISSING');
+    let parsed;
+    try {
+        parsed = JSON.parse(row.execution_identity_json);
+    }
+    catch {
+        throw code('IDENTITY_MISSING');
+    }
+    const checked = recordedExecutionSchema.safeParse(parsed);
+    if (!checked.success)
+        throw code('IDENTITY_MISSING');
+    const identity = checked.data;
+    if (identity.taskId !== row.id || identity.userId !== row.user_id || identity.owner !== row.owner || (identity.phase === 'ready' && identity.supervisorPid !== identity.processGroup)
+        || identity.evidencePath !== path.join(evidenceDirectory(db), identity.nonce + '.json'))
+        throw code('IDENTITY_MISMATCH');
+    return identity;
+}
+function assertStoppedEvidence(identity) {
+    let fd;
+    try {
+        fd = fs.openSync(identity.evidencePath, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > 16384 || stat.size < 2 || (stat.mode & 0o777) !== 0o600 || process.getuid && stat.uid !== process.getuid())
+            throw code('EVIDENCE_INVALID');
+        if (fs.realpathSync(identity.evidencePath) !== identity.evidencePath)
+            throw code('EVIDENCE_INVALID');
+        const evidence = JSON.parse(fs.readFileSync(fd, 'utf8'));
+        if (evidence.version !== 1 || evidence.stopped !== true || canonical(evidence.identity) !== canonical(identity)
+            || typeof evidence.finishedAt !== 'number' || !Number.isSafeInteger(evidence.finishedAt) || evidence.finishedAt <= 0 || evidence.finishedAt > Date.now() + 5000)
+            throw code('EVIDENCE_INVALID');
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.startsWith('DEVELOPMENT_RECONCILIATION_'))
+            throw error;
+        throw code('EVIDENCE_UNAVAILABLE');
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+    }
+}
+/** OS observation is independent of lease expiry and never sends signals or requeues work. */
+export function reconcileDevelopmentTask(db, userId, input, observer = systemExecutionObserver) {
+    const repo = new DevelopmentTaskRepository(db, userId), row = repo.get(input.taskId, input.projectId);
+    if (!row || !new ProjectRepository(db, userId).getById(input.projectId))
+        throw code('NOT_FOUND');
+    const actor = db.prepare('SELECT status FROM users WHERE id=?').get(userId);
+    if (actor?.status !== 'active')
+        throw code('ACTOR_REVOKED');
+    if (row.status !== 'indeterminate' || row.revision !== input.expectedRevision)
+        throw code('STALE');
+    const identity = recordedIdentity(db, row), observedBoot = z.string().uuid().safeParse(observer.bootIdentity());
+    if (!observedBoot.success)
+        throw code('BOOT_IDENTITY_UNAVAILABLE');
+    const boot = observedBoot.data.toLowerCase();
+    let basis = 'host_reboot';
+    if (boot === identity.bootIdentity.toLowerCase()) {
+        if (identity.phase === 'reserved')
+            throw code('RESERVATION_UNCONFIRMED');
+        assertStoppedEvidence(identity);
+        if (observer.groupHasProcesses(identity.processGroup))
+            throw code('STILL_ACTIVE');
+        basis = 'supervisor_stopped';
+    }
+    return repo.reconcile(row, { version: 1, outcome: 'unknown', basis, identityDigest: hashText(canonical(identity)), observedAt: Date.now() });
+}
+export function reconciliationRemedy(codeName) {
+    if (codeName === 'DEVELOPMENT_RECONCILIATION_RESERVATION_UNCONFIRMED')
+        return 'The execution startup handshake was interrupted on this host boot. Keep it fenced; reboot the host before reconciling the recorded reservation.';
+    if (codeName === 'DEVELOPMENT_RECONCILIATION_BOOT_IDENTITY_UNAVAILABLE')
+        return 'The current host boot identity is unavailable. Keep the execution fenced until a trustworthy host boot can be observed.';
+    if (codeName === 'DEVELOPMENT_RECONCILIATION_IDENTITY_MISSING')
+        return 'Legacy execution has no trustworthy process identity. Keep it fenced; use a verified host reset and administrator recovery. Lease expiry or a missing PID is insufficient.';
+    if (codeName === 'DEVELOPMENT_RECONCILIATION_STALE')
+        return 'Refresh the task and submit its current revision; only indeterminate tasks can be reconciled.';
+    if (codeName === 'DEVELOPMENT_RECONCILIATION_STILL_ACTIVE')
+        return 'The recorded private process group still has live processes. Wait for the supervisor to finish; reconciliation never kills them.';
+    return 'No trustworthy independent stop evidence is available. Keep the task fenced and verify supervisor shutdown, or reboot the host before retrying the recorded execution identity.';
+}
+//# sourceMappingURL=reconciliation.js.map

package/dist/gateway/src/services/development/reconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.js","sourceRoot":"","sources":["../../../../src/services/development/reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAC,0BAA0B,EAAC,uBAAuB,EAA0E,MAAM,yBAAyB,CAAC;AAC7L,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI1C,MAAM,IAAI,GAAC,CAAC,MAAa,EAAC,EAAE,CAAA,IAAI,KAAK,CAAC,6BAA6B,GAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,uBAAuB,GAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAC,CAAC,0BAA0B,EAAC,uBAAuB,CAAC,CAAC,CAAC;AACjH,SAAS,gBAAgB,CAAC,EAAW,EAAC,GAAsB;IAC3D,IAAG,CAAC,GAAG,CAAC,uBAAuB;QAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/D,IAAI,MAAc,CAAC;IAAA,IAAG,CAAC;QAAA,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAAA,CAAC;IAC7G,MAAM,OAAO,GAAC,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAAA,IAAG,CAAC,OAAO,CAAC,OAAO;QAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAC,OAAO,CAAC,IAAI,CAAC;IAC5B,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,CAAC,EAAE,IAAE,QAAQ,CAAC,MAAM,KAAG,GAAG,CAAC,OAAO,IAAE,QAAQ,CAAC,KAAK,KAAG,GAAG,CAAC,KAAK,IAAE,CAAC,QAAQ,CAAC,KAAK,KAAG,OAAO,IAAE,QAAQ,CAAC,aAAa,KAAG,QAAQ,CAAC,YAAY,CAAC;WAC9J,QAAQ,CAAC,YAAY,KAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAC,QAAQ,CAAC,KAAK,GAAC,OAAO,CAAC;QAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpH,OAAO,QAAQ,CAAC;AACjB,CAAC;AACD,SAAS,qBAAqB,CAAC,QAA0B;IACxD,IAAI,EAAmB,CAAC;IACxB,IAAI,CAAC;QACJ,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpF,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,KAAK,IAAE,IAAI,CAAC,IAAI,GAAC,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,GAAC,KAAK,CAAC,KAAG,KAAK,IAAE,OAAO,CAAC,MAAM,IAAE,IAAI,CAAC,GAAG,KAAG,OAAO,CAAC,MAAM,EAAE;YAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvJ,IAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAG,QAAQ,CAAC,YAAY;YAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAC,MAAM,CAAC,CAA8E,CAAC;QACnI,IAAG,QAAQ,CAAC,OAAO,KAAG,CAAC,IAAE,QAAQ,CAAC,OAAO,KAAG,IAAI,IAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAG,SAAS,CAAC,QAAQ,CAAC;eACjG,OAAO,QAAQ,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAE,QAAQ,CAAC,UAAU,IAAE,CAAC,IAAE,QAAQ,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,IAAI;YAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClL,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAG,KAAK,YAAY,KAAK,IAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,6BAA6B,CAAC;YAAC,MAAM,KAAK,CAAC;QAAA,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAAA,CAAC;YAC1I,CAAC;QAAA,IAAG,EAAE,KAAG,SAAS;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAA,CAAC;AAC7C,CAAC;AACD,8FAA8F;AAC9F,MAAM,UAAU,wBAAwB,CAAC,EAAW,EAAC,MAAa,EAAC,KAAoB,EAAC,WAA2B,uBAAuB;IACzI,MAAM,IAAI,GAAC,IAAI,yBAAyB,CAAC,EAAE,EAAC,MAAM,CAAC,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAG,CAAC,GAAG,IAAE,CAAC,IAAI,iBAAiB,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,MAAM,CAA8B,CAAC;IACvG,IAAG,KAAK,EAAE,MAAM,KAAG,QAAQ;QAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,IAAG,GAAG,CAAC,MAAM,KAAG,eAAe,IAAE,GAAG,CAAC,QAAQ,KAAG,KAAK,CAAC,gBAAgB;QAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAC,gBAAgB,CAAC,EAAE,EAAC,GAAG,CAAC,EAAC,YAAY,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAC1G,IAAG,CAAC,YAAY,CAAC,OAAO;QAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACjE,MAAM,IAAI,GAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,KAAK,GAAoC,aAAa,CAAC;IAC3D,IAAG,IAAI,KAAG,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,EAAC,CAAC;QAC9C,IAAG,QAAQ,CAAC,KAAK,KAAG,UAAU;YAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACrE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAG,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAC,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC;QAChF,KAAK,GAAC,oBAAoB,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,cAAc,EAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAC,UAAU,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,CAAC,CAAC;AACnI,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,QAAe;IACnD,IAAG,QAAQ,KAAG,oDAAoD;QAAC,OAAO,iJAAiJ,CAAC;IAC5N,IAAG,QAAQ,KAAG,sDAAsD;QAAC,OAAO,yHAAyH,CAAC;IACtM,IAAG,QAAQ,KAAG,6CAA6C;QAAC,OAAO,4KAA4K,CAAC;IAChP,IAAG,QAAQ,KAAG,kCAAkC;QAAC,OAAO,+FAA+F,CAAC;IACxJ,IAAG,QAAQ,KAAG,yCAAyC;QAAC,OAAO,kIAAkI,CAAC;IAClM,OAAO,iLAAiL,CAAC;AAC1L,CAAC"}

package/dist/gateway/src/services/development/repair-scope.d.ts

@@ -0,0 +1,43 @@
+import type { Database } from '../../db/types.js';
+import type { TurnInput } from '../agent/run-ledger.js';
+export interface RepairJob {
+    id: string;
+    user_id: string;
+    root_task_id: string;
+    failed_task_id: string;
+    origin_run_id: string;
+    child_run_id: string;
+    attempt: number;
+    evidence_digest: string;
+    submission_step_id: string | null;
+    submitted_task_id: string | null;
+    report_message_id: string | null;
+}
+export declare function repairJob(db: Database, userId: string, runId: string): RepairJob | undefined;
+export declare function validateRepairJob(db: Database, userId: string, job: RepairJob): {
+    root: import("./contracts.js").DevelopmentTaskRow;
+    failed: import("./contracts.js").DevelopmentTaskRow;
+    origin: TurnInput;
+    parent: {
+        input_json: string;
+        status: string;
+        conversation_id: string;
+        repair_revoked_at: number | null;
+    };
+    plan: {
+        projectId: string;
+        goal: string;
+        checks: {
+            path: string;
+            sha256: string;
+        }[];
+        sourceFiles: string[];
+        changes: {
+            path: string;
+            content: string | null;
+            beforeSha256: string | null;
+        }[];
+    };
+};
+export declare function assertRepairPlan(db: Database, userId: string, runId: string, stepId: string, raw: unknown): RepairJob | undefined;
+export declare function reserveRepairSubmission(db: Database, userId: string, runId: string, stepId: string, raw: unknown): void;

package/dist/gateway/src/services/development/repair-scope.js

@@ -0,0 +1,81 @@
+import { DevelopmentTaskRepository } from '../../db/repositories/development-task-repository.js';
+import { ProjectRepository } from '../../db/repositories/project-repository.js';
+import { assertChannelConversationAuthority } from '../channels/channel-run-authority.js';
+import { assertDevelopmentAuthority } from './authority.js';
+import { developmentPlanSchema } from './contracts.js';
+import { prepareSource, hashText } from './workspace.js';
+import { assertChannelRunScope } from '../channels/channel-run-scope.js';
+export function repairJob(db, userId, runId) {
+    return db.prepare('SELECT * FROM copilot_repair_jobs WHERE user_id=? AND child_run_id=?').get(userId, runId);
+}
+export function validateRepairJob(db, userId, job) {
+    const tasks = new DevelopmentTaskRepository(db, userId), root = tasks.get(job.root_task_id), failed = tasks.get(job.failed_task_id);
+    const parent = db.prepare('SELECT input_json,status,conversation_id,repair_revoked_at FROM copilot_runs WHERE user_id=? AND id=?').get(userId, job.origin_run_id);
+    const origin = parent ? JSON.parse(parent.input_json) : undefined;
+    if (!root || !failed || !parent || parent.repair_revoked_at || !origin?.repairFailedChecks || origin.executionMode || origin.source && origin.source !== 'user'
+        || !['running', 'completed', 'awaiting_approval'].includes(parent.status) || root.origin_run_id !== job.origin_run_id
+        || root.project_id !== failed.project_id || origin.projectId && origin.projectId !== root.project_id
+        || job.attempt < 1 || job.attempt > 2)
+        throw new Error('COPILOT_REPAIR_ORIGIN_REVOKED');
+    const authorization = db.prepare(`SELECT m.id FROM copilot_messages m
+    JOIN copilot_conversations c ON c.id=m.conversation_id AND c.user_id=m.user_id
+    WHERE m.user_id=? AND m.conversation_id=? AND c.status='active' AND m.role='user' AND m.kind='text'
+      AND m.content=? AND (m.run_id=? OR m.id=?) LIMIT 1`)
+        .get(userId, parent.conversation_id, origin.userText, job.origin_run_id, origin.editMessageId ?? null);
+    if (!authorization)
+        throw new Error('COPILOT_REPAIR_ORIGIN_REVOKED');
+    assertChannelConversationAuthority(db, userId, parent.conversation_id);
+    assertChannelRunScope(db, userId, origin, { projectIds: [root.project_id], rootPaths: [root.project_root] });
+    if (!new ProjectRepository(db, userId).getCopilotAutonomy(root.project_id))
+        throw new Error('COPILOT_REPAIR_AUTONOMY_OFF');
+    if (job.attempt === 1 && root.id !== failed.id)
+        throw new Error('COPILOT_REPAIR_CHAIN_MISMATCH');
+    if (job.attempt === 2) {
+        const previous = failed.origin_run_id ? repairJob(db, userId, failed.origin_run_id) : undefined;
+        if (!previous || previous.attempt !== 1 || previous.root_task_id !== root.id || previous.submitted_task_id !== failed.id)
+            throw new Error('COPILOT_REPAIR_CHAIN_MISMATCH');
+    }
+    assertDevelopmentAuthority(db, root);
+    if (failed.id !== root.id)
+        assertDevelopmentAuthority(db, failed);
+    if (failed.status !== 'checks_failed' || !failed.evidence_json || hashText(failed.evidence_json) !== failed.artifact_digest
+        || failed.artifact_digest !== job.evidence_digest)
+        throw new Error('COPILOT_REPAIR_EVIDENCE_CHANGED');
+    const evidence = JSON.parse(failed.evidence_json), plan = developmentPlanSchema.parse(JSON.parse(root.plan_json));
+    if (evidence.sourceDigest !== failed.source_digest || evidence.outputDigest !== failed.output_digest || evidence.recipeDigest !== failed.recipe_digest
+        || !evidence.checks.length || evidence.checks.length > plan.checks.length
+        || evidence.checks.some((check, index) => check.path !== plan.checks[index]?.path || check.cancelled || check.timedOut)
+        || !evidence.checks.some(check => check.exitCode !== null && check.exitCode !== 0))
+        throw new Error('COPILOT_REPAIR_NO_FAILED_CHECK');
+    return { root, failed, origin, parent, plan };
+}
+export function assertRepairPlan(db, userId, runId, stepId, raw) {
+    const job = repairJob(db, userId, runId);
+    if (!job)
+        return undefined;
+    const { root, plan } = validateRepairJob(db, userId, job), next = developmentPlanSchema.parse(raw);
+    if (job.submission_step_id && job.submission_step_id !== stepId)
+        throw new Error('COPILOT_REPAIR_SUBMISSION_LIMIT');
+    if (next.projectId !== root.project_id || JSON.stringify(next.sourceFiles) !== JSON.stringify(plan.sourceFiles)
+        || JSON.stringify(next.checks) !== JSON.stringify(plan.checks)
+        || next.changes.some(change => !plan.changes.some(original => original.path === change.path)))
+        throw new Error('COPILOT_REPAIR_SCOPE_CHANGED');
+    for (const check of plan.checks) {
+        const expected = plan.changes.find(change => change.path === check.path), actual = next.changes.find(change => change.path === check.path);
+        if (JSON.stringify(actual) !== JSON.stringify(expected))
+            throw new Error('COPILOT_REPAIR_TEST_CHANGED');
+    }
+    const prepared = prepareSource(root.project_root, next);
+    if (prepared.root !== root.project_root || prepared.sourceDigest !== root.source_digest)
+        throw new Error('COPILOT_REPAIR_SOURCE_DRIFT');
+    return job;
+}
+export function reserveRepairSubmission(db, userId, runId, stepId, raw) {
+    db.transaction(() => {
+        const job = assertRepairPlan(db, userId, runId, stepId, raw);
+        if (!job)
+            throw new Error('COPILOT_REPAIR_ORIGIN_MISSING');
+        db.prepare('UPDATE copilot_repair_jobs SET submission_step_id=? WHERE user_id=? AND id=? AND submission_step_id IS NULL').run(stepId, userId, job.id);
+    }).immediate();
+}
+//# sourceMappingURL=repair-scope.js.map

package/dist/gateway/src/services/development/repair-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-scope.js","sourceRoot":"","sources":["../../../../src/services/development/repair-scope.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAIzE,MAAM,UAAU,SAAS,CAAC,EAAW,EAAC,MAAa,EAAC,KAAY;IAC9D,OAAO,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAC,KAAK,CAAwB,CAAC;AACrI,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,EAAW,EAAC,MAAa,EAAC,GAAa;IACvE,MAAM,KAAK,GAAC,IAAI,yBAAyB,CAAC,EAAE,EAAC,MAAM,CAAC,EAAC,IAAI,GAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAC,MAAM,GAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAC,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAC,GAAG,CAAC,aAAa,CAAqG,CAAC;IACnQ,MAAM,MAAM,GAAqB,MAAM,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;IAChF,IAAG,CAAC,IAAI,IAAE,CAAC,MAAM,IAAE,CAAC,MAAM,IAAE,MAAM,CAAC,iBAAiB,IAAE,CAAC,MAAM,EAAE,kBAAkB,IAAE,MAAM,CAAC,aAAa,IAAE,MAAM,CAAC,MAAM,IAAE,MAAM,CAAC,MAAM,KAAG,MAAM;WAC1I,CAAC,CAAC,SAAS,EAAC,WAAW,EAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAE,IAAI,CAAC,aAAa,KAAG,GAAG,CAAC,aAAa;WAC5G,IAAI,CAAC,UAAU,KAAG,MAAM,CAAC,UAAU,IAAE,MAAM,CAAC,SAAS,IAAE,MAAM,CAAC,SAAS,KAAG,IAAI,CAAC,UAAU;WACzF,GAAG,CAAC,OAAO,GAAC,CAAC,IAAE,GAAG,CAAC,OAAO,GAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnF,MAAM,aAAa,GAAC,EAAE,CAAC,OAAO,CAAC;;;yDAGwB,CAAC;SACrD,GAAG,CAAC,MAAM,EAAC,MAAM,CAAC,eAAe,EAAC,MAAM,CAAC,QAAQ,EAAC,GAAG,CAAC,aAAa,EAAC,MAAM,CAAC,aAAa,IAAE,IAAI,CAAC,CAAC;IACnG,IAAG,CAAC,aAAa;QAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnE,kCAAkC,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACrE,qBAAqB,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAC,SAAS,EAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAC,CAAC,CAAC;IACrG,IAAG,CAAC,IAAI,iBAAiB,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACzH,IAAG,GAAG,CAAC,OAAO,KAAG,CAAC,IAAI,IAAI,CAAC,EAAE,KAAG,MAAM,CAAC,EAAE;QAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3F,IAAG,GAAG,CAAC,OAAO,KAAG,CAAC,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAC,MAAM,CAAC,aAAa,CAAA,CAAC,CAAA,SAAS,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,CAAC,aAAa,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;QACxF,IAAG,CAAC,QAAQ,IAAE,QAAQ,CAAC,OAAO,KAAG,CAAC,IAAE,QAAQ,CAAC,YAAY,KAAG,IAAI,CAAC,EAAE,IAAE,QAAQ,CAAC,iBAAiB,KAAG,MAAM,CAAC,EAAE;YAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/J,CAAC;IACD,0BAA0B,CAAC,EAAE,EAAC,IAAI,CAAC,CAAC;IACpC,IAAG,MAAM,CAAC,EAAE,KAAG,IAAI,CAAC,EAAE;QAAC,0BAA0B,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;IAC7D,IAAG,MAAM,CAAC,MAAM,KAAG,eAAe,IAAE,CAAC,MAAM,CAAC,aAAa,IAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAG,MAAM,CAAC,eAAe;WAC9G,MAAM,CAAC,eAAe,KAAG,GAAG,CAAC,eAAe;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAwB,EAAC,IAAI,GAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACpI,IAAG,QAAQ,CAAC,YAAY,KAAG,MAAM,CAAC,aAAa,IAAE,QAAQ,CAAC,YAAY,KAAG,MAAM,CAAC,aAAa,IAAE,QAAQ,CAAC,YAAY,KAAG,MAAM,CAAC,aAAa;WACvI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAC,IAAI,CAAC,MAAM,CAAC,MAAM;WAClE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAA,KAAK,CAAC,IAAI,KAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,IAAE,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,QAAQ,CAAC;WAC3G,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,QAAQ,KAAG,IAAI,IAAE,KAAK,CAAC,QAAQ,KAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/H,OAAO,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAW,EAAC,MAAa,EAAC,KAAY,EAAC,MAAa,EAAC,GAAW;IAC/F,MAAM,GAAG,GAAC,SAAS,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,CAAC,CAAC;IAAA,IAAG,CAAC,GAAG;QAAC,OAAO,SAAS,CAAC;IAC9D,MAAM,EAAC,IAAI,EAAC,IAAI,EAAC,GAAC,iBAAiB,CAAC,EAAE,EAAC,MAAM,EAAC,GAAG,CAAC,EAAC,IAAI,GAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzF,IAAG,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,KAAG,MAAM;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChH,IAAG,IAAI,CAAC,SAAS,KAAG,IAAI,CAAC,UAAU,IAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;WACpG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;WACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,CAAA,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAA,EAAE,CAAA,QAAQ,CAAC,IAAI,KAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1I,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,IAAI,KAAG,KAAK,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,IAAI,KAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9H,IAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,QAAQ,GAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAC,IAAI,CAAC,CAAC;IACrD,IAAG,QAAQ,CAAC,IAAI,KAAG,IAAI,CAAC,YAAY,IAAE,QAAQ,CAAC,YAAY,KAAG,IAAI,CAAC,aAAa;QAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAW,EAAC,MAAa,EAAC,KAAY,EAAC,MAAa,EAAC,GAAW;IACtG,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;QACjB,MAAM,GAAG,GAAC,gBAAgB,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,CAAC;QACvD,IAAG,CAAC,GAAG;YAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzD,EAAE,CAAC,OAAO,CAAC,6GAA6G,CAAC,CAAC,GAAG,CAAC,MAAM,EAAC,MAAM,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtJ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACjB,CAAC"}

package/dist/gateway/src/services/development/runtime.js

@@ -1,26 +1,13 @@
-import fs from 'node:fs';
 import path from 'node:path';
-import os from 'node:os';
 import { randomUUID } from 'node:crypto';
 import { DevelopmentTaskRepository } from '../../db/repositories/development-task-repository.js';
 import { redactAgentErrorMessage, redactAgentValue } from '../agent/redaction.js';
-import { assertDevelopmentAuthority } from './authority.js';
+import { assertDevelopmentAuthority, assertDevelopmentAuthorityCheap } from './authority.js';
 import { prepareSource, writeWorkspace, assertWorkspace, sourceDiff, hashText } from './workspace.js';
 import { runSandboxChecks } from './sandbox.js';
+import { workspaceBase } from './state-directory.js';
+import { executionReservation } from './execution-identity.js';
 const liveWorkers = new WeakMap();
-const bases = new WeakMap();
-function workspaceBase(db) {
-    let base = bases.get(db);
-    if (base)
-        return base;
-    base = db.name && db.name !== ':memory:' ? path.join(fs.realpathSync(path.dirname(path.resolve(db.name))), 'development-workspaces') : fs.mkdtempSync(path.join(os.tmpdir(), 'forgebadger-development-'));
-    fs.mkdirSync(base, { recursive: true, mode: 0o700 });
-    if (fs.lstatSync(base).isSymbolicLink())
-        throw new Error('DEVELOPMENT_ROOT_SYMLINK');
-    fs.chmodSync(base, 0o700);
-    bases.set(db, base);
-    return base;
-}
 export function startDevelopmentRuntime(deps) {
     const workers = liveWorkers.get(deps.db) ?? new Map();
     liveWorkers.set(deps.db, workers);
@@ -75,8 +62,12 @@ async function executeTask(deps, row, controller) {
     let error;
     const authorize = () => { if (!deps.db.open || !repo.owns(row.id, owner))
         throw new Error('DEVELOPMENT_EXECUTION_CANCELLED'); assertDevelopmentAuthority(deps.db, row, false); };
+    // The 500ms tick probes only cheap liveness/revocation; full authority validation runs at the
+    // check boundaries (authorize) and before finish/acceptance, where a false result has consequences.
     const timer = setInterval(() => { try {
-        authorize();
+        if (!deps.db.open || !repo.owns(row.id, owner))
+            throw new Error('DEVELOPMENT_EXECUTION_CANCELLED');
+        assertDevelopmentAuthorityCheap(deps.db, row);
         if (!repo.renew(row.id, owner))
             throw new Error('DEVELOPMENT_LEASE_LOST');
     }
@@ -101,7 +92,14 @@ async function executeTask(deps, row, controller) {
             const remaining = 60000 - (Date.now() - evidence.startedAt);
             if (remaining <= 0)
                 throw new Error('DEVELOPMENT_DEADLINE');
-            const result = await runSandboxChecks({ workspace: directory, checks: [check.path], signal: controller.signal, timeoutMs: remaining });
+            const reservation = executionReservation(deps.db, row.user_id, row.id, owner);
+            repo.setExecutionIdentity(row.id, owner, reservation);
+            const result = await runSandboxChecks({ workspace: directory, checks: [check.path], signal: controller.signal, timeoutMs: remaining,
+                execution: { reservation, onReady(identity) { authorize(); repo.setExecutionIdentity(row.id, owner, identity); } } });
+            if (result.executionUncertain) {
+                repo.interrupt(row.id, owner);
+                return;
+            }
             evidence.checks.push({ path: check.path, ...result });
             if (result.exitCode !== 0 || result.cancelled || result.timedOut)
                 break;

package/dist/gateway/src/services/development/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/services/development/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AAEjG,OAAO,EAAE,uBAAuB,EAAC,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAC,cAAc,EAAC,eAAe,EAAC,UAAU,EAAC,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIhD,MAAM,WAAW,GAAC,IAAI,OAAO,EAA2E,CAAC;AACzG,MAAM,KAAK,GAAC,IAAI,OAAO,EAAmB,CAAC;AAC3C,SAAS,aAAa,CAAC,EAAW;IACjC,IAAI,IAAI,GAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAA,IAAG,IAAI;QAAC,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAC,EAAE,CAAC,IAAI,IAAE,EAAE,CAAC,IAAI,KAAG,UAAU,CAAA,CAAC,CAAA,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,wBAAwB,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9L,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,IAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;QAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAAA,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;IAAA,KAAK,CAAC,GAAG,CAAC,EAAE,EAAC,IAAI,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AAC3L,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,IAAiB;IACxD,MAAM,OAAO,GAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAE,IAAI,GAAG,EAAE,CAAC;IAAA,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;IAAA,IAAI,OAAO,GAAC,KAAK,CAAC;IACrG,SAAS,IAAI;QACZ,IAAG,OAAO,IAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;YAAC,OAAO;QACjC,MAAM,KAAK,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,EAAmB,CAAC;QAC3E,KAAI,MAAM,IAAI,IAAI,KAAK,EAAC,CAAC;YAAA,MAAM,IAAI,GAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,EAAE,CAAC;YACjG,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBAAA,IAAI,CAAC;oBAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAC,IAAI,EAAC,6BAA6B,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,CAAC,CAAC;oBAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,iDAAiD,CAAA,CAAC;YAAA,CAAC;YACjS,IAAG,OAAO,CAAC,IAAI;gBAAC,SAAS;YACzB,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG;gBAAC,SAAS;YACpD,MAAM,UAAU,GAAC,IAAI,eAAe,EAAE,CAAC;YAAA,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,WAAW,CAAC,IAAI,EAAC,GAAG,EAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA,aAAa,CAAC,QAAQ,EAAC,KAAK,EAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5N,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,UAAU,EAAC,OAAO,EAAC,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IACD,SAAS,IAAI;QACZ,IAAI,CAAC;YAAA,IAAI,EAAE,CAAC;QAAA,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAC3B,KAAI,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC/D,aAAa,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAC,WAAW,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IAAA,KAAK,CAAC,KAAK,EAAE,CAAC;IAAA,MAAM,KAAK,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,KAAK,UAAU,IAAI,KAAG,OAAO,GAAC,IAAI,CAAC,CAAA,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA,KAAI,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;QAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA,CAAC;IAChL,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC;AAC1B,CAAC;AACD,SAAS,aAAa,CAAC,MAAa,EAAC,KAAa,EAAC,GAAuB;IACzE,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,GAAG,EAAE,OAAO,EAAC,MAAM,EAAC,GAAG,EAAE,EAAE,EAAC,SAAS,EAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,KAAK,EAAC,uBAAuB,CAAC,KAAK,YAAY,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,CAAA,CAAC,CAAA,iCAAiC,CAAC,EAAC,CAAC,CAAC;AAC7N,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,IAAiB,EAAC,GAAsB,EAAC,UAA0B;IAC7F,MAAM,IAAI,GAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAAA,MAAM,KAAK,GAAC,GAAG,CAAC,KAAM,CAAC;IAAA,IAAI,KAAsB,CAAC;IAChH,MAAM,SAAS,GAAC,GAAE,EAAE,GAAC,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAA,0BAA0B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;IACnK,MAAM,KAAK,GAAC,WAAW,CAAC,GAAE,EAAE,GAAC,IAAI,CAAC;QAAA,SAAS,EAAE,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAAA,CAAC;IAAA,OAAM,CAAC,EAAC,CAAC;QAAA,KAAK,GAAC,uBAAuB,CAAC,CAAC,YAAY,KAAK,CAAA,CAAC,CAAA,CAAC,CAAC,OAAO,CAAA,CAAC,CAAA,mCAAmC,CAAC,CAAC;QAAA,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC,CAAA,CAAC,EAAC,GAAG,CAAC,CAAC;IAAA,KAAK,CAAC,KAAK,EAAE,CAAC;IACxQ,IAAI,CAAC;QACJ,SAAS,EAAE,CAAC;QAAA,0BAA0B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;QAAA,MAAM,QAAQ,GAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7H,MAAM,SAAS,GAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,GAAC,GAAG,GAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/F,cAAc,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;QAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,CAAC;QAAA,eAAe,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;QACjH,MAAM,QAAQ,GAAqB,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,KAAK,EAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,WAAW,EAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAE,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,CAAC,CAAC,EAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,EAAC,MAAM,EAAC,EAAE,EAAC,SAAS,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC;QAC1W,KAAI,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,SAAS,EAAE,CAAC;YAAA,IAAG,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC5F,MAAM,SAAS,GAAC,KAAK,GAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAA,IAAG,SAAS,IAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC9G,MAAM,MAAM,GAAC,MAAM,gBAAgB,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,SAAS,EAAC,SAAS,EAAC,CAAC,CAAC;YAC5H,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,GAAG,MAAM,EAAC,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,QAAQ,KAAG,CAAC,IAAE,MAAM,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ;gBAAC,MAAM;QACnH,CAAC;QACD,SAAS,EAAE,CAAC;QAAA,0BAA0B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;QAAA,eAAe,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;QAAA,QAAQ,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACvH,MAAM,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,CAAC,IAAE,CAAC,CAAC,CAAC,SAAS,IAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,MAAM,CAAA,CAAC,CAAA,eAAe,CAAA,CAAC,CAAA,eAAe,EAAC,gBAAgB,CAAC,QAAQ,CAAwB,CAAC,CAAC;IACpH,CAAC;IAAC,OAAM,CAAC,EAAE,CAAC;QACX,IAAG,IAAI,CAAC,EAAE,CAAC,IAAI;YAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAE,CAAC,KAAK,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,EAAC,SAAS,EAAC,KAAK,IAAE,uBAAuB,CAAC,CAAC,YAAY,KAAK,CAAA,CAAC,CAAA,CAAC,CAAC,OAAO,CAAA,CAAC,CAAA,8BAA8B,CAAC,CAAC,CAAC;IACxM,CAAC;YAAS,CAAC;QAAA,aAAa,CAAC,KAAK,CAAC,CAAC;IAAA,CAAC;AAClC,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/services/development/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AAEjG,OAAO,EAAE,uBAAuB,EAAC,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAC,+BAA+B,EAAE,MAAM,gBAAgB,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAC,cAAc,EAAC,eAAe,EAAC,UAAU,EAAC,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,MAAM,WAAW,GAAC,IAAI,OAAO,EAA2E,CAAC;AACzG,MAAM,UAAU,uBAAuB,CAAC,IAAiB;IACxD,MAAM,OAAO,GAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAE,IAAI,GAAG,EAAE,CAAC;IAAA,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;IAAA,IAAI,OAAO,GAAC,KAAK,CAAC;IACrG,SAAS,IAAI;QACZ,IAAG,OAAO,IAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;YAAC,OAAO;QACjC,MAAM,KAAK,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,EAAmB,CAAC;QAC3E,KAAI,MAAM,IAAI,IAAI,KAAK,EAAC,CAAC;YAAA,MAAM,IAAI,GAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,EAAE,CAAC;YACjG,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBAAA,IAAI,CAAC;oBAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAC,IAAI,EAAC,6BAA6B,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,CAAC,CAAC;oBAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,iDAAiD,CAAA,CAAC;YAAA,CAAC;YACjS,IAAG,OAAO,CAAC,IAAI;gBAAC,SAAS;YACzB,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG;gBAAC,SAAS;YACpD,MAAM,UAAU,GAAC,IAAI,eAAe,EAAE,CAAC;YAAA,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,WAAW,CAAC,IAAI,EAAC,GAAG,EAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA,aAAa,CAAC,QAAQ,EAAC,KAAK,EAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5N,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,UAAU,EAAC,OAAO,EAAC,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IACD,SAAS,IAAI;QACZ,IAAI,CAAC;YAAA,IAAI,EAAE,CAAC;QAAA,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAC3B,KAAI,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC/D,aAAa,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAC,WAAW,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IAAA,KAAK,CAAC,KAAK,EAAE,CAAC;IAAA,MAAM,KAAK,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,KAAK,UAAU,IAAI,KAAG,OAAO,GAAC,IAAI,CAAC,CAAA,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA,KAAI,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;QAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA,CAAC;IAChL,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC;AAC1B,CAAC;AACD,SAAS,aAAa,CAAC,MAAa,EAAC,KAAa,EAAC,GAAuB;IACzE,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,GAAG,EAAE,OAAO,EAAC,MAAM,EAAC,GAAG,EAAE,EAAE,EAAC,SAAS,EAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,KAAK,EAAC,uBAAuB,CAAC,KAAK,YAAY,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,CAAA,CAAC,CAAA,iCAAiC,CAAC,EAAC,CAAC,CAAC;AAC7N,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,IAAiB,EAAC,GAAsB,EAAC,UAA0B;IAC7F,MAAM,IAAI,GAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAAA,MAAM,KAAK,GAAC,GAAG,CAAC,KAAM,CAAC;IAAA,IAAI,KAAsB,CAAC;IAChH,MAAM,SAAS,GAAC,GAAE,EAAE,GAAC,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAA,0BAA0B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;IACnK,8FAA8F;IAC9F,oGAAoG;IACpG,MAAM,KAAK,GAAC,WAAW,CAAC,GAAE,EAAE,GAAC,IAAI,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAA,+BAA+B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAAA,CAAC;IAAA,OAAM,CAAC,EAAC,CAAC;QAAA,KAAK,GAAC,uBAAuB,CAAC,CAAC,YAAY,KAAK,CAAA,CAAC,CAAA,CAAC,CAAC,OAAO,CAAA,CAAC,CAAA,mCAAmC,CAAC,CAAC;QAAA,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC,CAAA,CAAC,EAAC,GAAG,CAAC,CAAC;IAAA,KAAK,CAAC,KAAK,EAAE,CAAC;IACvY,IAAI,CAAC;QACJ,SAAS,EAAE,CAAC;QAAA,0BAA0B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;QAAA,MAAM,QAAQ,GAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7H,MAAM,SAAS,GAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,GAAC,GAAG,GAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/F,cAAc,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;QAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,CAAC;QAAA,eAAe,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;QACjH,MAAM,QAAQ,GAAqB,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,KAAK,EAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,WAAW,EAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAE,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,CAAC,CAAC,EAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,EAAC,MAAM,EAAC,EAAE,EAAC,SAAS,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC;QAC1W,KAAI,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,SAAS,EAAE,CAAC;YAAA,IAAG,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC5F,MAAM,SAAS,GAAC,KAAK,GAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAA,IAAG,SAAS,IAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC9G,MAAM,WAAW,GAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,OAAO,EAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,WAAW,CAAC,CAAC;YAC7H,MAAM,MAAM,GAAC,MAAM,gBAAgB,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,SAAS,EAAC,SAAS;gBACxH,SAAS,EAAC,EAAC,WAAW,EAAC,OAAO,CAAC,QAAQ,IAAE,SAAS,EAAE,CAAC,CAAA,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,QAAQ,CAAC,CAAC,CAAA,CAAC,EAAC,EAAC,CAAC,CAAC;YAC5G,IAAG,MAAM,CAAC,kBAAkB,EAAC,CAAC;gBAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACnE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,GAAG,MAAM,EAAC,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,QAAQ,KAAG,CAAC,IAAE,MAAM,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ;gBAAC,MAAM;QACnH,CAAC;QACD,SAAS,EAAE,CAAC;QAAA,0BAA0B,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,CAAC,CAAC;QAAA,eAAe,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC;QAAA,QAAQ,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACvH,MAAM,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,CAAC,IAAE,CAAC,CAAC,CAAC,SAAS,IAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,MAAM,CAAA,CAAC,CAAA,eAAe,CAAA,CAAC,CAAA,eAAe,EAAC,gBAAgB,CAAC,QAAQ,CAAwB,CAAC,CAAC;IACpH,CAAC;IAAC,OAAM,CAAC,EAAE,CAAC;QACX,IAAG,IAAI,CAAC,EAAE,CAAC,IAAI;YAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAE,CAAC,KAAK,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,EAAC,SAAS,EAAC,KAAK,IAAE,uBAAuB,CAAC,CAAC,YAAY,KAAK,CAAA,CAAC,CAAA,CAAC,CAAC,OAAO,CAAA,CAAC,CAAA,8BAA8B,CAAC,CAAC,CAAC;IACxM,CAAC;YAAS,CAAC;QAAA,aAAa,CAAC,KAAK,CAAC,CAAC;IAAA,CAAC;AAClC,CAAC"}