instar 0.28.52 → 0.28.53

package/dist/server/stopGate.d.ts

@@ -0,0 +1,77 @@
+/**
+ * stopGate.ts — UnjustifiedStopGate server infrastructure (PR0a).
+ *
+ * Provides the read-side API surface that the future stop-hook router
+ * consumes (PR3). State is in-memory for PR0a; PR3 migrates to SQLite.
+ *
+ * Spec: docs/specs/context-death-pitfall-prevention.md
+ *
+ * PR0a deliverables:
+ * - Hot-path batched state assembly: {mode, killSwitch, autonomousActive,
+ *   compactionInFlight, sessionStartTs}
+ * - Kill-switch local fast-path (set/clear/get)
+ * - Compaction probe (P0.6): /tmp/claude-session-<id>/compacting OR
+ *   compaction-recovery.sh mtime within 60s
+ * - Version contract constants for /health
+ *
+ * Threat model: drift-correction, NOT security boundary. See spec §
+ * "Threat model".
+ */
+export declare const GATE_ROUTE_VERSION = 1;
+export declare const GATE_ROUTE_MINIMUM_VERSION = 1;
+export type GateMode = 'off' | 'shadow' | 'enforce';
+export declare function getMode(): GateMode;
+export declare function setMode(mode: GateMode): void;
+export declare function getKillSwitch(): boolean;
+/**
+ * Set kill-switch state in-memory. Returns the prior value so the caller
+ * can detect no-op flips for telemetry.
+ *
+ * PR0a does NOT propagate to the machine registry — that fanout lands in
+ * PR4 alongside the CLI. The server can be killed via the local fast-path
+ * endpoint immediately; remote machines catch up later.
+ */
+export declare function setKillSwitch(value: boolean): boolean;
+/**
+ * Record the SessionStart timestamp for a session id. Idempotent:
+ * subsequent calls for the same id are no-ops (first SessionStart wins —
+ * we track the original session boundary, not later resumes).
+ *
+ * Called by the /hooks/events handler when a SessionStart event arrives.
+ */
+export declare function recordSessionStart(sessionId: string, timestampMs: number): void;
+export declare function getSessionStartTs(sessionId: string): number | null;
+/**
+ * Test-only reset. Production code must not call this.
+ */
+export declare function _resetForTests(): void;
+export interface CompactionProbeOptions {
+    /** Session id used to look up the per-session marker file. */
+    sessionId?: string;
+    /** Path to compaction-recovery.sh (for mtime heuristic). Defaults to
+     *  the agent-local hook path. Tests inject a tmp path. */
+    recoveryScriptPath?: string;
+    /** Override "now" for tests. */
+    now?: number;
+}
+export declare function compactionInFlight(opts?: CompactionProbeOptions): boolean;
+export interface HotPathState {
+    mode: GateMode;
+    killSwitch: boolean;
+    autonomousActive: boolean;
+    compactionInFlight: boolean;
+    sessionStartTs: number | null;
+    routeVersion: number;
+}
+export interface HotPathInputs {
+    sessionId?: string;
+    /** Whether the current agent is in autonomous mode. PR0a reads it from
+     *  the autonomous-state.local.md file convention; PR3 may use a
+     *  finer-grained source. Pass an explicit boolean to override (tests). */
+    autonomousActiveOverride?: boolean;
+    autonomousStateFile?: string;
+    recoveryScriptPath?: string;
+    now?: number;
+}
+export declare function getHotPathState(opts?: HotPathInputs): HotPathState;
+//# sourceMappingURL=stopGate.d.ts.map

package/dist/server/stopGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stopGate.d.ts","sourceRoot":"","sources":["../../src/server/stopGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAS5C,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;AAiBpD,wBAAgB,OAAO,IAAI,QAAQ,CAElC;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAE5C;AAED,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAIrD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAI/E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGlE;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAIrC;AAgBD,MAAM,WAAW,sBAAsB;IACrC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8DAC0D;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,sBAA2B,GAAG,OAAO,CA0B7E;AASD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;8EAE0E;IAC1E,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAoBD,wBAAgB,eAAe,CAAC,IAAI,GAAE,aAAkB,GAAG,YAAY,CAatE"}

package/dist/server/stopGate.js

@@ -0,0 +1,161 @@
+/**
+ * stopGate.ts — UnjustifiedStopGate server infrastructure (PR0a).
+ *
+ * Provides the read-side API surface that the future stop-hook router
+ * consumes (PR3). State is in-memory for PR0a; PR3 migrates to SQLite.
+ *
+ * Spec: docs/specs/context-death-pitfall-prevention.md
+ *
+ * PR0a deliverables:
+ * - Hot-path batched state assembly: {mode, killSwitch, autonomousActive,
+ *   compactionInFlight, sessionStartTs}
+ * - Kill-switch local fast-path (set/clear/get)
+ * - Compaction probe (P0.6): /tmp/claude-session-<id>/compacting OR
+ *   compaction-recovery.sh mtime within 60s
+ * - Version contract constants for /health
+ *
+ * Threat model: drift-correction, NOT security boundary. See spec §
+ * "Threat model".
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Version contract (P0.7) ─────────────────────────────────────────────
+//
+// `GATE_ROUTE_VERSION` is the protocol version this server speaks on
+// the /internal/stop-gate/* routes. Hook-lib reads it from /health and
+// emits a one-time DegradationReport if its required minimum is greater
+// than what the server exposes.
+//
+// `GATE_ROUTE_MINIMUM_VERSION` is the lowest hook-lib version this
+// server will accept without degraded-mode warnings. Bump in lockstep
+// with breaking changes to the hot-path schema.
+export const GATE_ROUTE_VERSION = 1;
+export const GATE_ROUTE_MINIMUM_VERSION = 1;
+const state = {
+    mode: 'off',
+    killSwitch: false,
+    sessionStartTs: new Map(),
+};
+export function getMode() {
+    return state.mode;
+}
+export function setMode(mode) {
+    state.mode = mode;
+}
+export function getKillSwitch() {
+    return state.killSwitch;
+}
+/**
+ * Set kill-switch state in-memory. Returns the prior value so the caller
+ * can detect no-op flips for telemetry.
+ *
+ * PR0a does NOT propagate to the machine registry — that fanout lands in
+ * PR4 alongside the CLI. The server can be killed via the local fast-path
+ * endpoint immediately; remote machines catch up later.
+ */
+export function setKillSwitch(value) {
+    const prior = state.killSwitch;
+    state.killSwitch = value;
+    return prior;
+}
+/**
+ * Record the SessionStart timestamp for a session id. Idempotent:
+ * subsequent calls for the same id are no-ops (first SessionStart wins —
+ * we track the original session boundary, not later resumes).
+ *
+ * Called by the /hooks/events handler when a SessionStart event arrives.
+ */
+export function recordSessionStart(sessionId, timestampMs) {
+    if (!sessionId)
+        return;
+    if (state.sessionStartTs.has(sessionId))
+        return;
+    state.sessionStartTs.set(sessionId, timestampMs);
+}
+export function getSessionStartTs(sessionId) {
+    if (!sessionId)
+        return null;
+    return state.sessionStartTs.get(sessionId) ?? null;
+}
+/**
+ * Test-only reset. Production code must not call this.
+ */
+export function _resetForTests() {
+    state.mode = 'off';
+    state.killSwitch = false;
+    state.sessionStartTs.clear();
+}
+// ── Compaction probe (P0.6) ─────────────────────────────────────────────
+//
+// Best-effort signal that compaction is currently in flight. Two sources:
+//
+//   1. If Claude Code exposes `/tmp/claude-session-<id>/compacting`, the
+//      file's existence is authoritative.
+//   2. Heuristic fallback: `compaction-recovery.sh` mtime within last 60s.
+//      Beyond 60s the signal is stale and ignored.
+//
+// Returning false on any error (fail-open) — drift-correction model, the
+// gate's hot-path treats compactionInFlight as a routing hint, not a
+// safety-critical assertion.
+const COMPACTION_HEURISTIC_WINDOW_MS = 60_000;
+export function compactionInFlight(opts = {}) {
+    const now = opts.now ?? Date.now();
+    // Source 1: authoritative marker file (if present).
+    if (opts.sessionId) {
+        const marker = `/tmp/claude-session-${opts.sessionId}/compacting`;
+        try {
+            if (fs.existsSync(marker))
+                return true;
+        }
+        catch {
+            // fail-open
+        }
+    }
+    // Source 2: recovery script mtime heuristic.
+    const recoveryPath = opts.recoveryScriptPath
+        ?? path.resolve(process.cwd(), '.instar/hooks/instar/compaction-recovery.sh');
+    try {
+        const st = fs.statSync(recoveryPath);
+        const ageMs = now - st.mtimeMs;
+        if (ageMs >= 0 && ageMs <= COMPACTION_HEURISTIC_WINDOW_MS)
+            return true;
+    }
+    catch {
+        // fail-open: missing recovery script is reported separately by
+        // health probes, not by this gate.
+    }
+    return false;
+}
+/**
+ * Heuristic for autonomousActive: existence of `.claude/autonomous-state
+ * .local.md` is the existing convention agents use to signal autonomous
+ * intent. Tests may override.
+ */
+function readAutonomousActive(opts) {
+    if (typeof opts.autonomousActiveOverride === 'boolean') {
+        return opts.autonomousActiveOverride;
+    }
+    const file = opts.autonomousStateFile
+        ?? path.resolve(process.cwd(), '.claude/autonomous-state.local.md');
+    try {
+        return fs.existsSync(file);
+    }
+    catch {
+        return false;
+    }
+}
+export function getHotPathState(opts = {}) {
+    return {
+        mode: state.mode,
+        killSwitch: state.killSwitch,
+        autonomousActive: readAutonomousActive(opts),
+        compactionInFlight: compactionInFlight({
+            sessionId: opts.sessionId,
+            recoveryScriptPath: opts.recoveryScriptPath,
+            now: opts.now,
+        }),
+        sessionStartTs: opts.sessionId ? getSessionStartTs(opts.sessionId) : null,
+        routeVersion: GATE_ROUTE_VERSION,
+    };
+}
+//# sourceMappingURL=stopGate.js.map

package/dist/server/stopGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stopGate.js","sourceRoot":"","sources":["../../src/server/stopGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,2EAA2E;AAC3E,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,gCAAgC;AAChC,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAoB5C,MAAM,KAAK,GAAc;IACvB,IAAI,EAAE,KAAK;IACX,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,IAAI,GAAG,EAAE;CAC1B,CAAC;AAEF,MAAM,UAAU,OAAO;IACrB,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAc;IACpC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC;IAC/B,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,WAAmB;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO;IAChD,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;IACnB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;IACzB,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,yEAAyE;AACzE,0CAA0C;AAC1C,2EAA2E;AAC3E,mDAAmD;AACnD,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,6BAA6B;AAC7B,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAY9C,MAAM,UAAU,kBAAkB,CAAC,OAA+B,EAAE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnC,oDAAoD;IACpD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,uBAAuB,IAAI,CAAC,SAAS,aAAa,CAAC;QAClE,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB;WACvC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,6CAA6C,CAAC,CAAC;IAChF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;QAC/B,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,8BAA8B;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,mCAAmC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AA6BD;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAmB;IAC/C,IAAI,OAAO,IAAI,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB;WAChC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mCAAmC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAsB,EAAE;IACtD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC;QAC5C,kBAAkB,EAAE,kBAAkB,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QACF,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QACzE,YAAY,EAAE,kBAAkB;KACjC,CAAC;AACJ,CAAC"}

package/dist/server/worktreeRoutes.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Worktree HTTP routes.
+ *
+ * Standard auth (bearer token) endpoints:
+ *   POST /worktrees/resolve    — atomic create+bind+lock; spawned by SessionManager
+ *   POST /worktrees/release    — release lock (sessionId+fencingToken)
+ *   POST /worktrees/heartbeat  — server-stamped heartbeat
+ *   POST /worktrees/force-take — forcible takeover (audit-logged)
+ *   GET  /worktrees            — list bindings
+ *   GET  /worktrees/reconcile  — state reconciliation matrix snapshot
+ *
+ * POST /commits/preflight  — pre-commit hook checks cwd vs binding, lock owner, foreign-WIP
+ * POST /commits/sign-trailer — commit-msg hook gets the 9 trailer lines (server signs)
+ *
+ * OIDC-only endpoint (mounted before auth middleware):
+ *   POST /gh-check/verify-nonce — called by GitHub Actions runner; OIDC-authenticated;
+ *                                 rate-limited; oracle-protected (uniform error response).
+ */
+import { Router } from 'express';
+import type { WorktreeManager } from '../core/WorktreeManager.js';
+export declare function createWorktreeRoutes(deps: {
+    worktreeManager: WorktreeManager;
+    projectDir: string;
+}): Router;
+export interface OidcVerifyOptions {
+    /**
+     * Allowed (owner, repo) tuples. e.g. {owner: 'instar', repo: 'instar'}.
+     * Empty list means all callers rejected.
+     */
+    enrolledRepos: Array<{
+        owner: string;
+        repo: string;
+    }>;
+    /**
+     * Verify a GitHub OIDC token and return claims, or throw.
+     * Injected so we can unit-test without real OIDC traffic.
+     */
+    verifyOidcToken: (token: string) => Promise<{
+        repository: string;
+        workflow_ref: string;
+        ref: string;
+    }>;
+}
+export declare function createOidcWorktreeRoutes(deps: {
+    worktreeManager: WorktreeManager;
+    oidc: OidcVerifyOptions;
+}): Router;
+//# sourceMappingURL=worktreeRoutes.d.ts.map

package/dist/server/worktreeRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktreeRoutes.d.ts","sourceRoot":"","sources":["../../src/server/worktreeRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,4BAA4B,CAAC;AA4EhF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,eAAe,EAAE,eAAe,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAoHT;AAID,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,aAAa,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD;;;OAGG;IACH,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxG;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,eAAe,EAAE,eAAe,CAAC;IACjC,IAAI,EAAE,iBAAiB,CAAC;CACzB,GAAG,MAAM,CA4CT"}

package/dist/server/worktreeRoutes.js

@@ -0,0 +1,247 @@
+/**
+ * Worktree HTTP routes.
+ *
+ * Standard auth (bearer token) endpoints:
+ *   POST /worktrees/resolve    — atomic create+bind+lock; spawned by SessionManager
+ *   POST /worktrees/release    — release lock (sessionId+fencingToken)
+ *   POST /worktrees/heartbeat  — server-stamped heartbeat
+ *   POST /worktrees/force-take — forcible takeover (audit-logged)
+ *   GET  /worktrees            — list bindings
+ *   GET  /worktrees/reconcile  — state reconciliation matrix snapshot
+ *
+ * POST /commits/preflight  — pre-commit hook checks cwd vs binding, lock owner, foreign-WIP
+ * POST /commits/sign-trailer — commit-msg hook gets the 9 trailer lines (server signs)
+ *
+ * OIDC-only endpoint (mounted before auth middleware):
+ *   POST /gh-check/verify-nonce — called by GitHub Actions runner; OIDC-authenticated;
+ *                                 rate-limited; oracle-protected (uniform error response).
+ */
+import { Router } from 'express';
+import path from 'node:path';
+import fs from 'node:fs';
+import { z } from 'zod';
+// ── Validation schemas ───────────────────────────────────────────────
+const ModeSchema = z.enum(['dev', 'read-only', 'doc-fix', 'platform']);
+const TopicIdSchema = z.union([z.number().int().positive(), z.literal('platform')]);
+const ResolveBody = z.object({
+    topicId: TopicIdSchema,
+    mode: ModeSchema,
+    sessionId: z.string().min(1).max(128),
+    pid: z.number().int().positive(),
+    processStartTime: z.number().int().nonnegative().optional(),
+    slug: z.string().max(80).optional(),
+});
+const ReleaseBody = z.object({
+    sessionId: z.string().min(1).max(128),
+    fencingToken: z.string().min(1).max(256),
+});
+const HeartbeatBody = ReleaseBody;
+const ForceTakeBody = z.object({
+    topicId: TopicIdSchema,
+    mode: ModeSchema,
+    bySessionId: z.string().min(1).max(128),
+    pid: z.number().int().positive(),
+    processStartTime: z.number().int().nonnegative().optional(),
+    reason: z.string().max(500).optional(),
+});
+const PreflightBody = z.object({
+    cwd: z.string().min(1).max(4096),
+    fencingToken: z.string().min(1).max(256),
+    stagedFiles: z.array(z.string().max(4096)).max(10_000).optional(),
+});
+const SignTrailerBody = z.object({
+    sessionId: z.string().min(1).max(128),
+    fencingToken: z.string().min(1).max(256),
+    treeHash: z.string().regex(/^[0-9a-f]{40,64}$/),
+    parents: z.array(z.string().regex(/^[0-9a-f]{40,64}$|^0{40}$/)).max(8),
+});
+const VerifyNonceBody = z.object({
+    commitSha: z.string().regex(/^[0-9a-f]{40,64}$/),
+    nonce: z.string().min(1).max(256),
+    binding: z.object({
+        topicId: TopicIdSchema,
+        sessionId: z.string().min(1).max(128),
+    }),
+    treeHash: z.string().regex(/^[0-9a-f]{40,64}$/),
+    parents: z.array(z.string().regex(/^[0-9a-f]{40,64}$|^0{40}$/)).max(8),
+});
+function makeRateLimiter(maxPerMinute) {
+    const buckets = new Map();
+    return function check(key) {
+        const now = Date.now();
+        let e = buckets.get(key);
+        if (!e || e.resetAt < now) {
+            e = { count: 0, resetAt: now + 60_000 };
+            buckets.set(key, e);
+        }
+        e.count++;
+        return e.count <= maxPerMinute;
+    };
+}
+// ── Auth-required route factory ──────────────────────────────────────
+export function createWorktreeRoutes(deps) {
+    const router = Router();
+    const { worktreeManager: wm } = deps;
+    router.post('/worktrees/resolve', async (req, res) => {
+        const parsed = ResolveBody.safeParse(req.body);
+        if (!parsed.success)
+            return res.status(400).json({ error: 'invalid request', issues: parsed.error.issues });
+        try {
+            const result = await wm.resolve({
+                topicId: parsed.data.topicId,
+                mode: parsed.data.mode,
+                sessionId: parsed.data.sessionId,
+                pid: parsed.data.pid,
+                processStartTime: parsed.data.processStartTime ?? Math.floor(Date.now() / 1000),
+                slug: parsed.data.slug,
+            });
+            return res.json(result);
+        }
+        catch (err) {
+            if (err.code === 'LOCK_HELD') {
+                return res.status(409).json({ error: 'LockHeld', holder: err.holder });
+            }
+            return res.status(500).json({ error: err.message ?? 'unknown' });
+        }
+    });
+    router.post('/worktrees/release', (req, res) => {
+        const parsed = ReleaseBody.safeParse(req.body);
+        if (!parsed.success)
+            return res.status(400).json({ error: 'invalid request' });
+        const result = wm.release(parsed.data);
+        return res.json(result);
+    });
+    router.post('/worktrees/heartbeat', (req, res) => {
+        const parsed = HeartbeatBody.safeParse(req.body);
+        if (!parsed.success)
+            return res.status(400).json({ error: 'invalid request' });
+        const result = wm.heartbeat(parsed.data);
+        return res.json(result);
+    });
+    router.post('/worktrees/force-take', async (req, res) => {
+        const parsed = ForceTakeBody.safeParse(req.body);
+        if (!parsed.success)
+            return res.status(400).json({ error: 'invalid request' });
+        try {
+            const result = await wm.forceTake({
+                topicId: parsed.data.topicId,
+                mode: parsed.data.mode,
+                bySessionId: parsed.data.bySessionId,
+                pid: parsed.data.pid,
+                processStartTime: parsed.data.processStartTime ?? Math.floor(Date.now() / 1000),
+            });
+            return res.json(result);
+        }
+        catch (err) {
+            return res.status(500).json({ error: err.message ?? 'unknown' });
+        }
+    });
+    router.get('/worktrees', (_req, res) => {
+        res.json({ bindings: wm.listBindings() });
+    });
+    router.get('/worktrees/reconcile', (_req, res) => {
+        try {
+            const rows = wm.reconcile();
+            res.json({ rows });
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // ── Pre-commit gate ──────────────────────────────────────────────
+    router.post('/commits/preflight', (req, res) => {
+        const parsed = PreflightBody.safeParse(req.body);
+        if (!parsed.success)
+            return res.status(400).json({ error: 'invalid request' });
+        // Find binding whose worktreePath is a prefix of cwd
+        const bindings = wm.listBindings();
+        const cwdReal = (() => {
+            try {
+                return fs.realpathSync(parsed.data.cwd);
+            }
+            catch {
+                return parsed.data.cwd;
+            }
+        })();
+        const binding = bindings.find(b => {
+            try {
+                const bReal = fs.realpathSync(b.worktreePath);
+                return cwdReal === bReal || cwdReal.startsWith(bReal + path.sep);
+            }
+            catch {
+                return false;
+            }
+        });
+        if (!binding) {
+            return res.json({ ok: false, code: 'cwd-not-in-binding', message: 'commit cwd is not a registered worktree' });
+        }
+        const lock = wm.getLock(binding.worktreePath);
+        if (!lock) {
+            return res.json({ ok: false, code: 'no-lock', message: 'no active lock on this worktree' });
+        }
+        if (lock.fencingToken !== parsed.data.fencingToken) {
+            return res.json({ ok: false, code: 'fencing-token-mismatch', message: 'session fencing token superseded' });
+        }
+        if (binding.mode === 'read-only') {
+            return res.json({ ok: false, code: 'read-only', message: 'read-only worktree; commits blocked' });
+        }
+        return res.json({ ok: true, binding });
+    });
+    // ── commit-msg trailer issuance ──────────────────────────────────
+    router.post('/commits/sign-trailer', (req, res) => {
+        const parsed = SignTrailerBody.safeParse(req.body);
+        if (!parsed.success)
+            return res.status(400).json({ error: 'invalid request' });
+        try {
+            const result = wm.signTrailer(parsed.data);
+            return res.json(result);
+        }
+        catch (err) {
+            return res.status(403).json({ error: err.message });
+        }
+    });
+    return router;
+}
+export function createOidcWorktreeRoutes(deps) {
+    const router = Router();
+    const { worktreeManager: wm, oidc } = deps;
+    const rateCheck = makeRateLimiter(60);
+    router.post('/gh-check/verify-nonce', async (req, res) => {
+        // Uniform response shape for oracle protection
+        const denyUniform = (status = 200) => res.status(status).json({ verifier_says_no: true });
+        const auth = req.header('authorization') ?? '';
+        const m = auth.match(/^Bearer (.+)$/);
+        if (!m)
+            return denyUniform(401);
+        const token = m[1];
+        let claims;
+        try {
+            claims = await oidc.verifyOidcToken(token);
+        }
+        catch {
+            return denyUniform(401);
+        }
+        const [owner, repo] = (claims.repository ?? '').split('/');
+        if (!owner || !repo)
+            return denyUniform(401);
+        const allowed = oidc.enrolledRepos.some(r => r.owner === owner && r.repo === repo);
+        if (!allowed)
+            return denyUniform(403);
+        if (!rateCheck(claims.repository)) {
+            return res.status(429).json({ verifier_says_no: true, retry_after_seconds: 60 });
+        }
+        const parsed = VerifyNonceBody.safeParse(req.body);
+        if (!parsed.success)
+            return denyUniform();
+        // Idempotent nonce check
+        const status = wm.checkNonceUnique({ nonce: parsed.data.nonce, commitSha: parsed.data.commitSha });
+        if (status === 'seen-for-different-commit')
+            return denyUniform();
+        if (status === 'unseen') {
+            wm.recordCommitForNonce({ nonce: parsed.data.nonce, commitSha: parsed.data.commitSha });
+        }
+        return res.json({ verifier_says_yes: true });
+    });
+    return router;
+}
+//# sourceMappingURL=worktreeRoutes.js.map

package/dist/server/worktreeRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktreeRoutes.js","sourceRoot":"","sources":["../../src/server/worktreeRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,wEAAwE;AAExE,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,UAAU;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACtC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACvE,CAAC,CAAC;AAKH,SAAS,eAAe,CAAC,YAAoB;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,OAAO,SAAS,KAAK,CAAC,GAAW;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC1B,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,MAAM,UAAU,oBAAoB,CAAC,IAGpC;IACC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAErC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACtE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC9B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;gBAChC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAC/E,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;aACvB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAClE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC;gBAChC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aAChF,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACxD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oEAAoE;IAEpE,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAE/E,qDAAqD;QACrD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACpB,IAAI,CAAC;gBAAC,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAAC,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAChC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC9C,OAAO,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,oEAAoE;IAEpE,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAiBD,MAAM,UAAU,wBAAwB,CAAC,IAGxC;IACC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAEtC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1E,+CAA+C;QAC/C,MAAM,WAAW,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1F,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnB,IAAI,MAAiE,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QAE1C,yBAAyB;QACzB,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,IAAI,MAAM,KAAK,2BAA2B;YAAE,OAAO,WAAW,EAAE,CAAC;QAEjE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.28.52",
+  "version": "0.28.53",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",