forgebadger 0.1.1 → 0.1.2

package/dist/gateway/src/db/repositories/copilot-model-response-repository.js

@@ -0,0 +1,151 @@
+import { z } from 'zod';
+import { decryptSecret, encryptSecret } from '../../crypto/secret-box.js';
+import { AgentError } from '../../services/agent/types.js';
+import { redactAgentText } from '../../services/agent/redaction.js';
+const assistantSchema = z.object({
+    role: z.literal('assistant'), content: z.string(),
+    toolCalls: z.array(z.object({ id: z.string(), name: z.string(), arguments: z.string() })).optional(),
+    providerReplay: z.object({ format: z.enum(['openai', 'anthropic']), identity: z.string().optional(),
+        reasoningContent: z.string().optional(), reasoningDetails: z.array(z.record(z.unknown())).optional(),
+        blocks: z.array(z.record(z.unknown())).optional() }).strict().optional(),
+}).strict();
+const payloadSchema = z.object({ version: z.literal(1), userId: z.string(), conversationId: z.string(),
+    runId: z.string(), stepId: z.string(), assistant: assistantSchema }).strict();
+const envelopeSchema = z.object({ type: z.literal('model_response'), version: z.literal(1),
+    usage: z.object({ inputTokens: z.number().int().nonnegative().optional(), outputTokens: z.number().int().nonnegative().optional(), totalTokens: z.number().int().nonnegative().optional() }).optional(),
+    finishReason: z.string().nullable(), toolCallCount: z.number().int().nonnegative(),
+    replay: z.object({ algorithm: z.literal('aes-256-gcm'), iv: z.string(), ciphertext: z.string(), authTag: z.string() }).strict(),
+}).strict();
+/** Private model replay lives in the existing model-step receipt, not the public transcript. */
+export class CopilotModelResponseRepository {
+    db;
+    userId;
+    masterKey;
+    constructor(db, userId, masterKey) {
+        this.db = db;
+        this.userId = userId;
+        this.masterKey = masterKey;
+    }
+    encode(conversationId, runId, stepId, response) {
+        if (!response.assistant)
+            return response.message; // Legacy/custom clients have no native replay state.
+        const assistant = assistantSchema.parse(response.assistant);
+        return JSON.stringify({ type: 'model_response', version: 1, finishReason: response.finishReason ?? null,
+            toolCallCount: assistant.toolCalls?.length ?? 0, ...(response.usage ? { usage: response.usage } : {}),
+            replay: encryptSecret(JSON.stringify({ version: 1, userId: this.userId, conversationId, runId, stepId, assistant }), { key: this.masterKey }) });
+    }
+    complete(conversationId, runId, stepId, response) {
+        // Called inside the lease-fenced model/tool-plan transaction. Do not run a
+        // text redactor over authenticated ciphertext or signed provider blocks.
+        const result = this.encode(conversationId, runId, stepId, response);
+        this.db.prepare(`UPDATE copilot_run_steps SET status='completed',result_json=?,completed_at=?
+      WHERE user_id=? AND run_id=? AND id=? AND kind='model' AND status='running'
+      AND EXISTS (SELECT 1 FROM copilot_runs WHERE user_id=? AND id=? AND conversation_id=?)`)
+            .run(result, Date.now(), this.userId, runId, stepId, this.userId, runId, conversationId);
+    }
+    recordInvalidResponse(runId, message) {
+        // Parser failures contain fixed diagnostics, never response bodies or reasoning.
+        this.db.prepare(`UPDATE copilot_run_steps SET result_json=? WHERE user_id=? AND run_id=?
+      AND kind='model' AND status='running'`).run(JSON.stringify({ type: 'model_response_error', version: 1,
+            code: 'AGENT_LLM_INVALID_RESPONSE', reason: redactAgentText(message) }), this.userId, runId);
+    }
+    /** Called only inside the orchestrator's lease-fenced transaction. No raw network errors. */
+    recordConnectionError(runId, stepId, error) {
+        this.db.prepare(`UPDATE copilot_run_steps SET result_json=? WHERE user_id=? AND run_id=? AND id=?
+      AND kind='model' AND status='running'`).run(JSON.stringify({ type: 'model_connection_error', version: 1,
+            code: error.code, reason: error.message, diagnostic: error.diagnostic }), this.userId, runId, stepId);
+    }
+    list(conversationId) {
+        const steps = this.db.prepare(`SELECT s.id,s.run_id,s.ordinal,s.kind,s.result_json FROM copilot_run_steps s
+      JOIN copilot_runs r ON r.id=s.run_id AND r.user_id=s.user_id
+      WHERE s.user_id=? AND r.conversation_id=? ORDER BY s.run_id,s.ordinal`).all(this.userId, conversationId);
+        const rows = this.db.prepare(`SELECT id,step_id,run_id,kind,content,tool_call_id,tool_name,tool_input_json
+      FROM copilot_messages WHERE user_id=? AND conversation_id=? ORDER BY sequence`).all(this.userId, conversationId);
+        const result = new Map();
+        const parent = new Map();
+        let model;
+        for (const step of steps) {
+            if (model?.run_id !== step.run_id)
+                model = undefined;
+            if (step.kind === 'model')
+                model = step;
+            if (model)
+                parent.set(step.id, model);
+        }
+        for (const step of steps.filter(s => s.kind === 'model')) {
+            const messages = rows.filter(row => row.step_id && parent.get(row.step_id)?.id === step.id
+                && row.run_id === step.run_id && ['text', 'tool_call'].includes(row.kind));
+            if (!messages.length)
+                continue; // Edited/truncated history must not resurrect old execution evidence.
+            const assistant = this.decode(conversationId, step);
+            if (!assistant)
+                continue;
+            if (!matchesTranscript(assistant, messages))
+                throw replayError();
+            for (const row of messages)
+                result.set(row.id, assistant);
+        }
+        return result;
+    }
+    decode(conversationId, step) {
+        let value;
+        try {
+            value = JSON.parse(step.result_json ?? 'null');
+        }
+        catch {
+            return undefined;
+        }
+        if (!value || typeof value !== 'object' || !('type' in value) || value.type !== 'model_response')
+            return undefined;
+        try {
+            const envelope = envelopeSchema.parse(value);
+            const payload = payloadSchema.parse(JSON.parse(decryptSecret(envelope.replay, { key: this.masterKey })));
+            if (payload.userId !== this.userId || payload.conversationId !== conversationId
+                || payload.runId !== step.run_id || payload.stepId !== step.id
+                || envelope.toolCallCount !== (payload.assistant.toolCalls?.length ?? 0))
+                throw replayError();
+            return payload.assistant; // Parsed JSON cannot contain undefined optional fields.
+        }
+        catch {
+            throw replayError();
+        }
+    }
+}
+function matchesTranscript(assistant, rows) {
+    const text = rows.filter(row => row.kind === 'text');
+    const calls = rows.filter(row => row.kind === 'tool_call');
+    const expected = assistant.toolCalls ?? [];
+    if (text.length > 1 || (text[0]?.content ?? '') !== redactAgentText(assistant.content) || calls.length !== expected.length)
+        return false;
+    return calls.every((row, index) => {
+        const call = expected[index];
+        try {
+            return row.tool_call_id === call.id && row.tool_name === call.name
+                && row.tool_input_json === JSON.stringify(JSON.parse(call.arguments));
+        }
+        catch {
+            return false;
+        }
+    });
+}
+function replayError() {
+    return new AgentError('COPILOT_REPLAY_INVALID', 'Stored model response failed identity or transcript validation');
+}
+/** The run inspector gets termination diagnostics, never the encrypted replay blob. */
+export function publicModelResponse(result) {
+    let value;
+    try {
+        value = JSON.parse(result ?? 'null');
+    }
+    catch {
+        return result;
+    }
+    if (!value || typeof value !== 'object' || !('type' in value) || value.type !== 'model_response')
+        return result;
+    const parsed = envelopeSchema.safeParse(value);
+    if (!parsed.success)
+        return null;
+    const { replay: _private, ...diagnostic } = parsed.data;
+    return JSON.stringify(diagnostic);
+}
+//# sourceMappingURL=copilot-model-response-repository.js.map

package/dist/gateway/src/db/repositories/copilot-model-response-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-model-response-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/copilot-model-response-repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG1E,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpG,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjG,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpG,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3E,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvM,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CAChI,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,gGAAgG;AAChG,MAAM,OAAO,8BAA8B;IACZ;IAA+B;IAAiC;IAA7F,YAA6B,EAAY,EAAmB,MAAc,EAAmB,SAAiB;QAAjF,OAAE,GAAF,EAAE,CAAU;QAAmB,WAAM,GAAN,MAAM,CAAQ;QAAmB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElH,MAAM,CAAC,cAAsB,EAAE,KAAa,EAAE,MAAc,EAAE,QAAmB;QAC/E,IAAI,CAAC,QAAQ,CAAC,SAAS;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,qDAAqD;QACvG,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,IAAI;YACrG,aAAa,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACrJ,CAAC;IAED,QAAQ,CAAC,cAAsB,EAAE,KAAa,EAAE,MAAc,EAAE,QAAmB;QACjF,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;6FAEyE,CAAC;aACvF,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC7F,CAAC;IAED,qBAAqB,CAAC,KAAa,EAAE,OAAe;QAClD,iFAAiF;QACjF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;4CACwB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC;YACrG,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjG,CAAC;IAED,6FAA6F;IAC7F,qBAAqB,CAAC,KAAa,EAAE,MAAc,EAAE,KAAyB;QAC5E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;4CACwB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC;YACvG,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,CAAC,cAAsB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;4EAE0C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAc,CAAC;QACxH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;oFACmD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAiB,CAAC;QACnI,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC1C,IAAI,KAA0B,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC,MAAM;gBAAE,KAAK,GAAG,SAAS,CAAC;YACrD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;gBAAE,KAAK,GAAG,IAAI,CAAC;YACxC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE;mBACrF,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,SAAS,CAAC,sEAAsE;YACtG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;YACjE,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,cAAsB,EAAE,IAAa;QAClD,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QACnF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO,SAAS,CAAC;QACnH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YACzG,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc;mBAC1E,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;mBAC3D,QAAQ,CAAC,aAAa,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;YAChG,OAAO,OAAO,CAAC,SAA6B,CAAC,CAAC,wDAAwD;QACxG,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;IAClC,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,SAA2B,EAAE,IAAkB;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,KAAK,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACzI,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;QAC9B,IAAI,CAAC;YAAC,OAAO,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI;mBACnE,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,UAAU,CAAC,wBAAwB,EAAE,gEAAgE,CAAC,CAAC;AACpH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAC;IAChH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACxD,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC"}

package/dist/gateway/src/db/repositories/copilot-preferences-repository.d.ts

@@ -0,0 +1,43 @@
+import type { Database } from "../types.js";
+export type ThinkingEffort = "off" | "low" | "medium" | "high";
+export interface CopilotPreferences {
+    modelId: string | null;
+    thinkingEffort: ThinkingEffort;
+}
+/**
+ * Per-user Copilot model + thinking-strength preferences, persisted in
+ * user_settings (model_id + copilot_thinking_effort) so every entry point —
+ * the web console, chat bots, automations — resolves the same model and
+ * thinking strength the user picked. The LLM client falls back to these when
+ * a request carries no explicit modelId.
+ */
+export declare class CopilotPreferencesRepository {
+    private readonly db;
+    private readonly userId;
+    /**
+     * Master key for the model-provider repository used to validate the
+     * preferred profile. Optional (defaults to "") because profile lookup is
+     * read-only and never decrypts credentials — but callers with the key
+     * should pass it so no future code path can silently use an empty key.
+     */
+    private readonly masterKey;
+    constructor(db: Database, userId: string, 
+    /**
+     * Master key for the model-provider repository used to validate the
+     * preferred profile. Optional (defaults to "") because profile lookup is
+     * read-only and never decrypts credentials — but callers with the key
+     * should pass it so no future code path can silently use an empty key.
+     */
+    masterKey?: string);
+    get(): CopilotPreferences;
+    /**
+     * Partial update. modelId: null clears the preference; any other value must
+     * be one of the user's active model profiles. Returns the full updated
+     * preference.
+     */
+    set(patch: {
+        modelId?: string | null;
+        thinkingEffort?: ThinkingEffort;
+    }): CopilotPreferences;
+    private assertActiveModelProfile;
+}

package/dist/gateway/src/db/repositories/copilot-preferences-repository.js

@@ -0,0 +1,74 @@
+import { AgentError } from "../../services/agent/types.js";
+import { ModelProviderRepository } from "./model-provider-repository.js";
+const THINKING_EFFORTS = new Set(["off", "low", "medium", "high"]);
+/**
+ * Per-user Copilot model + thinking-strength preferences, persisted in
+ * user_settings (model_id + copilot_thinking_effort) so every entry point —
+ * the web console, chat bots, automations — resolves the same model and
+ * thinking strength the user picked. The LLM client falls back to these when
+ * a request carries no explicit modelId.
+ */
+export class CopilotPreferencesRepository {
+    db;
+    userId;
+    masterKey;
+    constructor(db, userId, 
+    /**
+     * Master key for the model-provider repository used to validate the
+     * preferred profile. Optional (defaults to "") because profile lookup is
+     * read-only and never decrypts credentials — but callers with the key
+     * should pass it so no future code path can silently use an empty key.
+     */
+    masterKey = "") {
+        this.db = db;
+        this.userId = userId;
+        this.masterKey = masterKey;
+    }
+    get() {
+        const row = this.db.prepare(`
+      SELECT model_id, copilot_thinking_effort
+      FROM user_settings
+      WHERE user_id = ?
+    `).get(this.userId);
+        return {
+            modelId: row?.model_id ?? null,
+            thinkingEffort: normalizeThinkingEffort(row?.copilot_thinking_effort)
+        };
+    }
+    /**
+     * Partial update. modelId: null clears the preference; any other value must
+     * be one of the user's active model profiles. Returns the full updated
+     * preference.
+     */
+    set(patch) {
+        if (patch.modelId === undefined && patch.thinkingEffort === undefined)
+            return this.get();
+        if (patch.modelId !== undefined && patch.modelId !== null)
+            this.assertActiveModelProfile(patch.modelId);
+        const current = this.get();
+        const modelId = patch.modelId !== undefined ? patch.modelId : current.modelId;
+        const thinkingEffort = patch.thinkingEffort !== undefined ? patch.thinkingEffort : current.thinkingEffort;
+        const now = Date.now();
+        this.db.prepare(`
+      INSERT INTO user_settings (user_id, model_id, copilot_thinking_effort, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?)
+      ON CONFLICT(user_id) DO UPDATE SET
+        model_id = excluded.model_id,
+        copilot_thinking_effort = excluded.copilot_thinking_effort,
+        updated_at = excluded.updated_at
+    `).run(this.userId, modelId, thinkingEffort, now, now);
+        return this.get();
+    }
+    assertActiveModelProfile(modelId) {
+        const profile = new ModelProviderRepository(this.db, this.userId, this.masterKey).getModelProfile(modelId);
+        if (!profile || profile.status !== "active") {
+            throw new AgentError("COPILOT_MODEL_INVALID", "Model profile is not available for the Copilot preference");
+        }
+    }
+}
+function normalizeThinkingEffort(value) {
+    if (value !== null && value !== undefined && THINKING_EFFORTS.has(value))
+        return value;
+    return "off";
+}
+//# sourceMappingURL=copilot-preferences-repository.js.map

package/dist/gateway/src/db/repositories/copilot-preferences-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-preferences-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/copilot-preferences-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAE3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AASzE,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAOxG;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IAEpB;IACA;IAOA;IATnB,YACmB,EAAY,EACZ,MAAc;IAC/B;;;;;OAKG;IACc,YAAoB,EAAE;QARtB,OAAE,GAAF,EAAE,CAAU;QACZ,WAAM,GAAN,MAAM,CAAQ;QAOd,cAAS,GAAT,SAAS,CAAa;IACtC,CAAC;IAEJ,GAAG;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI3B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAA+B,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;YAC9B,cAAc,EAAE,uBAAuB,CAAC,GAAG,EAAE,uBAAuB,CAAC;SACtE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,KAAmE;QACrE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACzF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9E,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC1G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;KAOf,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAEO,wBAAwB,CAAC,OAAe;QAC9C,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3G,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAE,2DAA2D,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,KAAgC;IAC/D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAuB,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/gateway/src/db/repositories/copilot-skill-revision-repository.d.ts

@@ -13,6 +13,7 @@ export interface CopilotSkillSnapshot {
     description: string;
     version: string;
     content: string;
+    reviewedBuiltinVersion?: string;
     files: CopilotSkillFile[];
     source: CopilotSkillSource;
     requiredTools: string[];

package/dist/gateway/src/db/repositories/copilot-skill-revision-repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-skill-revision-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/copilot-skill-revision-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBrD,2FAA2F;AAC3F,MAAM,OAAO,8BAA8B;IACrB;IAAsB;IAA1C,YAAoB,EAAY,EAAU,MAAc;QAApC,OAAE,GAAF,EAAE,CAAU;QAAU,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAC5D,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAA0B,CAAC;IAChJ,CAAC;IACD,GAAG,CAAC,OAAe,EAAE,UAAkB;QACrC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAoC,CAAC;IACnL,CAAC;IACD,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAA0B,CAAC;IAClM,CAAC;IACD,UAAU,CAAC,OAAe,EAAE,MAAgC,EAAE,QAA8B;QAC1F,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACnG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oGAAoG,CAAC;iBAClH,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,MAAM,CAAC,OAAe,EAAE,kBAA0B,EAAE,MAAsB,EAAE,QAA8B;QACxG,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9H,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+GAA+G,CAAC;iBAC5I,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC1F,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACO,MAAM,CAAC,OAAe,EAAE,MAAqB,EAAE,MAAsB,EAAE,QAA8B;QAC3G,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qJAAqJ,CAAC;aACnK,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChI,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAE,CAAC;IAChC,CAAC;CACF"}
+{"version":3,"file":"copilot-skill-revision-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/copilot-skill-revision-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBrD,2FAA2F;AAC3F,MAAM,OAAO,8BAA8B;IACrB;IAAsB;IAA1C,YAAoB,EAAY,EAAU,MAAc;QAApC,OAAE,GAAF,EAAE,CAAU;QAAU,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAC5D,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAA0B,CAAC;IAChJ,CAAC;IACD,GAAG,CAAC,OAAe,EAAE,UAAkB;QACrC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAoC,CAAC;IACnL,CAAC;IACD,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAA0B,CAAC;IAClM,CAAC;IACD,UAAU,CAAC,OAAe,EAAE,MAAgC,EAAE,QAA8B;QAC1F,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACnG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oGAAoG,CAAC;iBAClH,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,MAAM,CAAC,OAAe,EAAE,kBAA0B,EAAE,MAAsB,EAAE,QAA8B;QACxG,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9H,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+GAA+G,CAAC;iBAC5I,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC1F,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACO,MAAM,CAAC,OAAe,EAAE,MAAqB,EAAE,MAAsB,EAAE,QAA8B;QAC3G,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qJAAqJ,CAAC;aACnK,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChI,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAE,CAAC;IAChC,CAAC;CACF"}

package/dist/gateway/src/db/repositories/copilot-tool-artifact-repository.d.ts

@@ -0,0 +1,30 @@
+import type { Database } from '../types.js';
+import type { ToolResultSource } from './copilot-tool-result-repository.js';
+export interface ArtifactManifest {
+    status: 'available' | 'too_large' | 'quota' | 'unavailable';
+    bytes?: number;
+    sha256?: string;
+    expiresAt?: number;
+}
+interface Identity {
+    conversationId: string;
+    runId: string;
+    stepId: string;
+    toolName: string;
+    inputJson: string;
+}
+/** Full redacted snapshots are private; callers must first authorize the original message/receipt chain. */
+export declare class CopilotToolArtifactRepository {
+    private db;
+    private userId;
+    private masterKey;
+    constructor(db: Database, userId: string, masterKey: string);
+    store(identity: Identity, content: string): ArtifactManifest;
+    read(conversationId: string, source: ToolResultSource): {
+        content?: string;
+        status: string;
+    };
+    cleanup(): void;
+    private validateScope;
+}
+export {};

package/dist/gateway/src/db/repositories/copilot-tool-artifact-repository.js

@@ -0,0 +1,103 @@
+import { assertGitRoot } from '../../services/development/project-diff.js';
+import { createHash } from 'node:crypto';
+import { realpathSync } from 'node:fs';
+import { z } from 'zod';
+import { encryptSecret, decryptSecret } from '../../crypto/secret-box.js';
+import { ProjectRepository } from './project-repository.js';
+import { sourcePath } from '../../services/development/workspace.js';
+import { validateProjectRoot } from '../../lib/safe-resolve.js';
+import { redactAgentValue } from '../../services/agent/redaction.js';
+import { ARCHIVABLE_TOOLS, FILE_ARTIFACT_TOOLS, MAX_ARTIFACT_BYTES, MAX_RUN_ARTIFACT_BYTES, MAX_USER_ARTIFACT_BYTES, ARTIFACT_RETENTION_MS } from '../../services/agent/tool-artifact-policy.js';
+const digest = (text) => createHash('sha256').update(text).digest('hex');
+const payloadSchema = z.object({ userId: z.string(), conversationId: z.string(), runId: z.string(), stepId: z.string(),
+    toolName: z.string(), inputDigest: z.string(), projectPath: z.string().nullable(), canonicalRoot: z.string().nullable(), content: z.string() }).strict();
+/** Full redacted snapshots are private; callers must first authorize the original message/receipt chain. */
+export class CopilotToolArtifactRepository {
+    db;
+    userId;
+    masterKey;
+    constructor(db, userId, masterKey) {
+        this.db = db;
+        this.userId = userId;
+        this.masterKey = masterKey;
+    }
+    store(identity, content) {
+        if (!ARCHIVABLE_TOOLS.has(identity.toolName))
+            return { status: 'unavailable' };
+        const redacted = JSON.stringify(redactAgentValue(JSON.parse(content)));
+        const bytes = Buffer.byteLength(redacted);
+        if (bytes > MAX_ARTIFACT_BYTES)
+            return { status: 'too_large', bytes };
+        return this.db.transaction(() => {
+            const current = this.db.prepare(`SELECT 1 FROM copilot_run_steps s JOIN copilot_runs r ON r.user_id=s.user_id AND r.id=s.run_id
+        WHERE s.user_id=? AND s.run_id=? AND s.id=? AND r.conversation_id=? AND s.tool_name=? AND s.input_json=?
+        AND s.kind='tool' AND s.effect='read' AND s.status='running' AND r.status='running' AND s.fence=r.fence AND r.lease_expires_at>?`)
+                .get(this.userId, identity.runId, identity.stepId, identity.conversationId, identity.toolName, identity.inputJson, Date.now());
+            if (!current)
+                return { status: 'unavailable' };
+            this.cleanup();
+            // Expired bytes count until deleted, so physical retained content remains bounded.
+            const quota = this.db.prepare(`SELECT COALESCE(SUM(content_bytes),0) AS total,
+        COALESCE(SUM(CASE WHEN run_id=? THEN content_bytes ELSE 0 END),0) AS run FROM copilot_tool_artifacts WHERE user_id=?`)
+                .get(identity.runId, this.userId);
+            if (quota.total + bytes > MAX_USER_ARTIFACT_BYTES || quota.run + bytes > MAX_RUN_ARTIFACT_BYTES)
+                return { status: 'quota', bytes };
+            const raw = JSON.parse(identity.inputJson);
+            const project = raw.projectId ? new ProjectRepository(this.db, this.userId).getById(raw.projectId) : undefined;
+            if (!project)
+                return { status: 'unavailable' };
+            const canonicalRoot = project && FILE_ARTIFACT_TOOLS.has(identity.toolName) ? realpathSync(project.path) : null;
+            const payload = { userId: this.userId, ...identity, inputDigest: digest(identity.inputJson), projectPath: project?.path ?? null, canonicalRoot, content: redacted };
+            const { inputJson: _inputJson, ...stored } = payload;
+            const expiresAt = Date.now() + ARTIFACT_RETENTION_MS;
+            this.db.prepare('INSERT INTO copilot_tool_artifacts(step_id,user_id,run_id,conversation_id,payload_json,content_bytes,content_sha256,created_at,expires_at) VALUES(?,?,?,?,?,?,?,?,?)')
+                .run(identity.stepId, this.userId, identity.runId, identity.conversationId, JSON.stringify(encryptSecret(JSON.stringify(stored), { key: this.masterKey })), bytes, digest(redacted), Date.now(), expiresAt);
+            return { status: 'available', bytes, sha256: digest(redacted), expiresAt };
+        })();
+    }
+    read(conversationId, source) {
+        if (!ARCHIVABLE_TOOLS.has(source.toolName))
+            throw new Error('COPILOT_TOOL_RESULT_UNAVAILABLE');
+        const row = this.db.prepare('SELECT payload_json,content_bytes,content_sha256,expires_at FROM copilot_tool_artifacts WHERE user_id=? AND conversation_id=? AND run_id=? AND step_id=?')
+            .get(this.userId, conversationId, source.runId, source.stepId);
+        if (!row)
+            return { status: 'missing' };
+        if (row.expires_at <= Date.now())
+            return { status: 'expired' };
+        try {
+            const payload = payloadSchema.parse(JSON.parse(decryptSecret(JSON.parse(row.payload_json), { key: this.masterKey })));
+            if (payload.userId !== this.userId || payload.conversationId !== conversationId || payload.runId !== source.runId
+                || payload.stepId !== source.stepId || payload.toolName !== source.toolName || payload.inputDigest !== digest(source.inputJson)
+                || Buffer.byteLength(payload.content) !== row.content_bytes || digest(payload.content) !== row.content_sha256)
+                throw new Error('identity');
+            this.validateScope(source, payload);
+            return { content: payload.content, status: 'available' };
+        }
+        catch {
+            throw new Error('COPILOT_TOOL_RESULT_UNAVAILABLE');
+        }
+    }
+    cleanup() {
+        this.db.prepare('DELETE FROM copilot_tool_artifacts WHERE user_id=? AND step_id IN (SELECT step_id FROM copilot_tool_artifacts WHERE user_id=? AND expires_at<=? ORDER BY expires_at LIMIT 100)')
+            .run(this.userId, this.userId, Date.now());
+    }
+    validateScope(source, payload) {
+        const raw = JSON.parse(source.inputJson);
+        const project = raw.projectId ? new ProjectRepository(this.db, this.userId).getById(raw.projectId) : undefined;
+        if (!project || project.path !== payload.projectPath)
+            throw new Error('scope');
+        if (!FILE_ARTIFACT_TOOLS.has(source.toolName))
+            return;
+        if (!project || realpathSync(project.path) !== payload.canonicalRoot)
+            throw new Error('root');
+        validateProjectRoot(payload.canonicalRoot);
+        if (source.toolName === 'read_project_diff')
+            assertGitRoot(payload.canonicalRoot);
+        const output = JSON.parse(payload.content);
+        const paths = [raw.path, output.path, ...(output.files ?? []).map(file => typeof file === 'string' ? file : file.path), ...(output.matches ?? []).map(match => match.path)];
+        for (const path of paths)
+            if (path)
+                sourcePath(project.path, path, false);
+    }
+}
+//# sourceMappingURL=copilot-tool-artifact-repository.js.map

package/dist/gateway/src/db/repositories/copilot-tool-artifact-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-tool-artifact-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/copilot-tool-artifact-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAEjM,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IACpH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAK3J,4GAA4G;AAC5G,MAAM,OAAO,6BAA6B;IACpB;IAAsB;IAAwB;IAAlE,YAAoB,EAAY,EAAU,MAAc,EAAU,SAAiB;QAA/D,OAAE,GAAF,EAAE,CAAU;QAAU,WAAM,GAAN,MAAM,CAAQ;QAAU,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAEvF,KAAK,CAAC,QAAkB,EAAE,OAAe;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,kBAAkB;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;yIAEmG,CAAC;iBACjI,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjI,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,CAAC;YACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,mFAAmF;YACnF,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;6HACyF,CAAC;iBACrH,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAmC,CAAC;YACtE,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,GAAG,uBAAuB,IAAI,KAAK,CAAC,GAAG,GAAG,KAAK,GAAG,sBAAsB;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC;YAC5I,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAA2B,CAAC;YACrE,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/G,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,CAAC;YACxD,MAAM,aAAa,GAAG,OAAO,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChH,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YACpK,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sKAAsK,CAAC;iBACpL,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9M,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;QACtF,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,IAAI,CAAC,cAAsB,EAAE,MAAwB;QACnD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0JAA0J,CAAC;aACpL,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAA4B,CAAC;QAC5F,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YACtH,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;mBAC5G,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;mBAC5H,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7I,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gLAAgL,CAAC;aAC9L,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,aAAa,CAAC,MAAwB,EAAE,OAAsC;QACpF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAA0C,CAAC;QAClF,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/G,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/E,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO;QACtD,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9F,mBAAmB,CAAC,OAAO,CAAC,aAAc,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,mBAAmB;YAAE,aAAa,CAAC,OAAO,CAAC,aAAc,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAmG,CAAC;QAC7I,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5K,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,IAAI;gBAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;CACF"}

package/dist/gateway/src/db/repositories/development-task-repository.d.ts

@@ -1,5 +1,6 @@
 import type { Database } from '../types.js';
-import type { DevelopmentTaskRow, DevelopmentStatus, DevelopmentEvidence } from '../../services/development/contracts.js';
+import type { DevelopmentTaskRow, DevelopmentStatus, DevelopmentEvidence, DevelopmentReconciliation } from '../../services/development/contracts.js';
+import type { ExecutionReservation, ExecutionIdentity } from '../../services/development/execution-identity.js';
 export declare class DevelopmentTaskRepository {
     private db;
     readonly userId: string;
@@ -11,6 +12,9 @@ export declare class DevelopmentTaskRepository {
     owns(id: string, owner: string): boolean;
     renew(id: string, owner: string, leaseMs?: number): boolean;
     setWorkspace(id: string, owner: string, directory: string): void;
+    setExecutionIdentity(id: string, owner: string, identity: ExecutionReservation | ExecutionIdentity): void;
+    reconcile(row: DevelopmentTaskRow, evidence: DevelopmentReconciliation): DevelopmentTaskRow;
+    interrupt(id: string, owner: string): boolean;
     finish(id: string, owner: string, status: DevelopmentStatus, evidence?: DevelopmentEvidence, error?: string): boolean;
     cancel(id: string, projectId: string): DevelopmentTaskRow;
     accept(id: string, projectId: string, digest: string): DevelopmentTaskRow;

package/dist/gateway/src/db/repositories/development-task-repository.js

@@ -46,6 +46,31 @@ export class DevelopmentTaskRepository {
     renew(id, owner, leaseMs = 15000) { return this.db.prepare("UPDATE copilot_development_tasks SET lease_expires_at=? WHERE user_id=? AND id=? AND owner=? AND status='running' AND cancel_requested=0 AND lease_expires_at>?").run(Date.now() + leaseMs, this.userId, id, owner, Date.now()).changes === 1; }
     setWorkspace(id, owner, directory) { if (!this.owns(id, owner))
         throw new Error('DEVELOPMENT_LEASE_LOST'); this.db.prepare('UPDATE copilot_development_tasks SET workspace_path=? WHERE user_id=? AND id=? AND owner=?').run(directory, this.userId, id, owner); }
+    setExecutionIdentity(id, owner, identity) {
+        if (identity.userId !== this.userId || identity.taskId !== id || identity.owner !== owner)
+            throw new Error('DEVELOPMENT_EXECUTION_IDENTITY_MISMATCH');
+        if (!this.db.prepare("UPDATE copilot_development_tasks SET execution_identity_json=?,reconciliation_json=NULL,revision=revision+1,updated_at=? WHERE user_id=? AND id=? AND owner=? AND status='running' AND cancel_requested=0 AND lease_expires_at>?").run(JSON.stringify(identity), Date.now(), this.userId, id, owner, Date.now()).changes)
+            throw new Error('DEVELOPMENT_LEASE_LOST');
+    }
+    reconcile(row, evidence) {
+        return this.db.transaction(() => {
+            const changed = this.db.prepare("UPDATE copilot_development_tasks SET status='failed',reconciliation_json=?,error='Execution ended; final task outcome unknown. Automatic replay prohibited',owner=NULL,lease_expires_at=NULL,revision=revision+1,updated_at=? WHERE user_id=? AND id=? AND project_id=? AND status='indeterminate' AND revision=? AND owner IS ? AND execution_identity_json IS ? AND reconciliation_json IS NULL")
+                .run(JSON.stringify(evidence), Date.now(), this.userId, row.id, row.project_id, row.revision, row.owner, row.execution_identity_json).changes;
+            if (changed !== 1)
+                throw new Error('DEVELOPMENT_RECONCILIATION_STALE');
+            const next = this.get(row.id);
+            this.event(next);
+            return next;
+        }).immediate();
+    }
+    interrupt(id, owner) {
+        return this.db.transaction(() => {
+            const changed = this.db.prepare("UPDATE copilot_development_tasks SET status='indeterminate',error='Execution stop was not independently confirmed; automatic replay prohibited',revision=revision+1,updated_at=? WHERE user_id=? AND id=? AND owner=? AND status='running'").run(Date.now(), this.userId, id, owner).changes;
+            if (changed)
+                this.event(this.get(id));
+            return changed === 1;
+        }).immediate();
+    }
     finish(id, owner, status, evidence, error) {
         return this.db.transaction(() => {
             const row = this.get(id);

package/dist/gateway/src/db/repositories/development-task-repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"development-task-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/development-task-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAC,UAAU,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,QAAQ,GAAC,CAAC,KAAY,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhF,MAAM,OAAO,yBAAyB;IACjB;IAAqB;IAAzC,YAAoB,EAAW,EAAU,MAAa;QAAlC,OAAE,GAAF,EAAE,CAAS;QAAU,WAAM,GAAN,MAAM,CAAO;IAAE,CAAC;IACzD,GAAG,CAAC,EAAS,EAAC,SAAiB;QAC9B,MAAM,GAAG,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAiC,CAAC;QAClJ,OAAO,GAAG,IAAE,CAAC,CAAC,SAAS,IAAE,GAAG,CAAC,UAAU,KAAG,SAAS,CAAC,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,SAAS,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,SAAgB,EAAC,KAAK,GAAC,EAAE,IAAuB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2GAA2G,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,SAAS,EAAC,KAAK,CAAyB,CAAC,CAAA,CAAC;IACnP,MAAM,CAAC,KAA0K;QAChL,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAgB,CAAC,CAAC,IAAE,GAAG;YAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC9K,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sPAAsP,CAAC,CAAC,GAAG,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,IAAI,EAAC,KAAK,CAAC,SAAS,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,SAAS,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,cAAc,EAAC,KAAK,CAAC,YAAY,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC;QACxd,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAA,OAAO,GAAG,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,KAAY,EAAC,OAAO,GAAC,KAAK;QAC/B,IAAI,CAAC;YAAA,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;gBACnC,MAAM,GAAG,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yGAAyG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAiC,CAAC;gBACtL,IAAG,CAAC,GAAG;oBAAC,OAAO,SAAS,CAAC;gBAAA,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gKAAgK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,GAAC,OAAO,EAAC,GAAG,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;gBACtP,IAAG,CAAC,OAAO;oBAAC,OAAO,SAAS,CAAC;gBAAA,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;gBAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,OAAO,IAAI,CAAC;YACxF,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAAwB,CAAC,IAAI,KAAG,0BAA0B;gBAAC,OAAO,SAAS,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IAC3H,CAAC;IACD,IAAI,CAAC,EAAS,EAAC,KAAY,IAAE,MAAM,CAAC,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,MAAM,KAAG,SAAS,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK,IAAE,CAAC,CAAC,CAAC,gBAAgB,IAAE,CAAC,CAAC,GAAC,IAAI,CAAC,GAAG,EAAE,IAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA,CAAC;IAC9J,KAAK,CAAC,EAAS,EAAC,KAAY,EAAC,OAAO,GAAC,KAAK,IAAE,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iKAAiK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAC,OAAO,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,KAAG,CAAC,CAAC,CAAA,CAAC;IAC3S,YAAY,CAAC,EAAS,EAAC,KAAY,EAAC,SAAgB,IAAE,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAC,KAAK,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4FAA4F,CAAC,CAAC,GAAG,CAAC,SAAS,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAC3Q,MAAM,CAAC,EAAS,EAAC,KAAY,EAAC,MAAwB,EAAC,QAA6B,EAAC,KAAa;QACjG,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC9B,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG,IAAE,GAAG,CAAC,MAAM,KAAG,SAAS,IAAE,GAAG,CAAC,KAAK,KAAG,KAAK,IAAE,CAAC,GAAG,CAAC,gBAAgB,IAAE,CAAC,CAAC,IAAE,IAAI,CAAC,GAAG,EAAE;gBAAC,OAAO,KAAK,CAAC;YAC9H,MAAM,IAAI,GAAC,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;YAClD,MAAM,KAAK,GAAC,GAAG,CAAC,gBAAgB,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,MAAM,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gMAAgM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,IAAI,CAAA,CAAC,CAAA,QAAQ,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,IAAE,IAAI,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC;YACvS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QACvC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,EAAS,EAAC,SAAgB;QAChC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAAC,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG;gBAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACtH,IAAG,GAAG,CAAC,MAAM,KAAG,SAAS,EAAC,CAAC;gBAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mHAAmH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;YAAA,CAAC;iBAC3L,IAAG,GAAG,CAAC,MAAM,KAAG,QAAQ,EAAC,CAAC;gBAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sIAAsI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;YAAA,CAAC;iBAClN,IAAG,GAAG,CAAC,MAAM,KAAG,eAAe;gBAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAChD,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,EAAS,EAAC,SAAgB,EAAC,MAAa;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC/E,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG,IAAE,GAAG,CAAC,MAAM,KAAG,eAAe,IAAE,GAAG,CAAC,eAAe,KAAG,MAAM;gBAAC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACrJ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6IAA6I,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAC9O,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAAA,CAAC;IAChB,OAAO,CAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;QAAG,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YACvD,MAAM,IAAI,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAkB,CAAC;YAC1K,KAAI,MAAM,GAAG,IAAI,IAAI,EAAC,CAAC;gBAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uMAAuM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,CAAC;YAAA,OAAO,IAAI,CAAC,MAAM,CAAC;QAC/T,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAAA,CAAC;IACR,KAAK,CAAC,GAAsB,IAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sHAAsH,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,EAAC,GAAG,CAAC,QAAQ,EAAC,GAAG,CAAC,MAAM,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,CAAC;IACvP,aAAa,KAAG,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0IAA0I,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAA+D,CAAC,CAAA,CAAC;IACnQ,SAAS,CAAC,EAAS,IAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC,CAAA,CAAC;CAC/K"}
+{"version":3,"file":"development-task-repository.js","sourceRoot":"","sources":["../../../../src/db/repositories/development-task-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAC,UAAU,EAAE,MAAM,aAAa,CAAC;AAIpD,MAAM,QAAQ,GAAC,CAAC,KAAY,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhF,MAAM,OAAO,yBAAyB;IACjB;IAAqB;IAAzC,YAAoB,EAAW,EAAU,MAAa;QAAlC,OAAE,GAAF,EAAE,CAAS;QAAU,WAAM,GAAN,MAAM,CAAO;IAAE,CAAC;IACzD,GAAG,CAAC,EAAS,EAAC,SAAiB;QAC9B,MAAM,GAAG,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAiC,CAAC;QAClJ,OAAO,GAAG,IAAE,CAAC,CAAC,SAAS,IAAE,GAAG,CAAC,UAAU,KAAG,SAAS,CAAC,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,SAAS,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,SAAgB,EAAC,KAAK,GAAC,EAAE,IAAuB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2GAA2G,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,SAAS,EAAC,KAAK,CAAyB,CAAC,CAAA,CAAC;IACnP,MAAM,CAAC,KAA0K;QAChL,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAgB,CAAC,CAAC,IAAE,GAAG;YAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC9K,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sPAAsP,CAAC,CAAC,GAAG,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,IAAI,EAAC,KAAK,CAAC,SAAS,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,SAAS,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,cAAc,EAAC,KAAK,CAAC,YAAY,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC;QACxd,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAA,OAAO,GAAG,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,KAAY,EAAC,OAAO,GAAC,KAAK;QAC/B,IAAI,CAAC;YAAA,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;gBACnC,MAAM,GAAG,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yGAAyG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAiC,CAAC;gBACtL,IAAG,CAAC,GAAG;oBAAC,OAAO,SAAS,CAAC;gBAAA,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gKAAgK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,GAAC,OAAO,EAAC,GAAG,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;gBACtP,IAAG,CAAC,OAAO;oBAAC,OAAO,SAAS,CAAC;gBAAA,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;gBAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,OAAO,IAAI,CAAC;YACxF,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAAwB,CAAC,IAAI,KAAG,0BAA0B;gBAAC,OAAO,SAAS,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IAC3H,CAAC;IACD,IAAI,CAAC,EAAS,EAAC,KAAY,IAAE,MAAM,CAAC,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,MAAM,KAAG,SAAS,IAAE,CAAC,CAAC,KAAK,KAAG,KAAK,IAAE,CAAC,CAAC,CAAC,gBAAgB,IAAE,CAAC,CAAC,GAAC,IAAI,CAAC,GAAG,EAAE,IAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA,CAAC;IAC9J,KAAK,CAAC,EAAS,EAAC,KAAY,EAAC,OAAO,GAAC,KAAK,IAAE,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iKAAiK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAC,OAAO,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,KAAG,CAAC,CAAC,CAAA,CAAC;IAC3S,YAAY,CAAC,EAAS,EAAC,KAAY,EAAC,SAAgB,IAAE,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAC,KAAK,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4FAA4F,CAAC,CAAC,GAAG,CAAC,SAAS,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAC3Q,oBAAoB,CAAC,EAAS,EAAC,KAAY,EAAC,QAA+C;QAC1F,IAAG,QAAQ,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,QAAQ,CAAC,MAAM,KAAG,EAAE,IAAE,QAAQ,CAAC,KAAK,KAAG,KAAK;YAAC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC1I,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kOAAkO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO;YAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpX,CAAC;IACD,SAAS,CAAC,GAAsB,EAAC,QAAkC;QAClE,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC9B,MAAM,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mYAAmY,CAAC;iBACha,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,EAAC,GAAG,CAAC,UAAU,EAAC,GAAG,CAAC,QAAQ,EAAC,GAAG,CAAC,KAAK,EAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC;YACxI,IAAG,OAAO,KAAG,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACnE,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAC3D,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IACD,SAAS,CAAC,EAAS,EAAC,KAAY;QAC/B,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC9B,MAAM,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4OAA4O,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACzT,IAAG,OAAO;gBAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,OAAO,KAAG,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,EAAS,EAAC,KAAY,EAAC,MAAwB,EAAC,QAA6B,EAAC,KAAa;QACjG,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC9B,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG,IAAE,GAAG,CAAC,MAAM,KAAG,SAAS,IAAE,GAAG,CAAC,KAAK,KAAG,KAAK,IAAE,CAAC,GAAG,CAAC,gBAAgB,IAAE,CAAC,CAAC,IAAE,IAAI,CAAC,GAAG,EAAE;gBAAC,OAAO,KAAK,CAAC;YAC9H,MAAM,IAAI,GAAC,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;YAClD,MAAM,KAAK,GAAC,GAAG,CAAC,gBAAgB,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,MAAM,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gMAAgM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,IAAI,CAAA,CAAC,CAAA,QAAQ,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,IAAE,IAAI,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC;YACvS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QACvC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,EAAS,EAAC,SAAgB;QAChC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAAC,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG;gBAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACtH,IAAG,GAAG,CAAC,MAAM,KAAG,SAAS,EAAC,CAAC;gBAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mHAAmH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;YAAA,CAAC;iBAC3L,IAAG,GAAG,CAAC,MAAM,KAAG,QAAQ,EAAC,CAAC;gBAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sIAAsI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;YAAA,CAAC;iBAClN,IAAG,GAAG,CAAC,MAAM,KAAG,eAAe;gBAAC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAChD,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,EAAS,EAAC,SAAgB,EAAC,MAAa;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC/E,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG,IAAE,GAAG,CAAC,MAAM,KAAG,eAAe,IAAE,GAAG,CAAC,eAAe,KAAG,MAAM;gBAAC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACrJ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6IAA6I,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAC9O,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAAA,CAAC;IAChB,OAAO,CAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;QAAG,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YACvD,MAAM,IAAI,GAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAkB,CAAC;YAC1K,KAAI,MAAM,GAAG,IAAI,IAAI,EAAC,CAAC;gBAAA,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uMAAuM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAAA,CAAC;YAAA,OAAO,IAAI,CAAC,MAAM,CAAC;QAC/T,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAAA,CAAC;IACR,KAAK,CAAC,GAAsB,IAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sHAAsH,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,GAAG,CAAC,EAAE,EAAC,GAAG,CAAC,QAAQ,EAAC,GAAG,CAAC,MAAM,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,CAAC;IACvP,aAAa,KAAG,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0IAA0I,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAA+D,CAAC,CAAA,CAAC;IACnQ,SAAS,CAAC,EAAS,IAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC,CAAA,CAAC;CAC/K"}

package/dist/gateway/src/db/repositories/feishu-channel-repository.js

@@ -13,6 +13,10 @@ export class FeishuChannelRepository {
         const existing = this.getAccountRow();
         if (!existing && !input.appSecret)
             throw new Error("FEISHU_APP_SECRET_REQUIRED");
+        const sameSecret = existing && (!input.appSecret || input.appSecret === decryptSecret(JSON.parse(existing.app_secret_encrypted), { key: this.masterKey }));
+        if (existing && sameSecret && existing.enabled === Number(input.enabled) && existing.app_id === input.appId.trim()) {
+            return this.getAccount(existing.id);
+        }
         const encrypted = input.appSecret
             ? JSON.stringify(encryptSecret(input.appSecret, { key: this.masterKey }))
             : existing.app_secret_encrypted;