nawabari 0.7.1 → 0.9.2

package/dist/domain/doctor.js

@@ -4,13 +4,11 @@ import process from "node:process";
 import { defaultGit, resolveRepositoryContext } from "../git.js";
 import { isSessionRegistryError } from "../errors.js";
 import { SessionRegistry } from "../session-registry.js";
+import { projectSessionLifecycleActions } from "../session-lifecycle-actions.js";
+import { availableLifecycleOperations } from "../session-lifecycle-classification.js";
 import { success } from "./errors.js";
-function supportsRuntime(version) {
-    const [majorText, minorText] = version.split(".");
-    const major = Number(majorText);
-    const minor = Number(minorText);
-    return Number.isFinite(major) && Number.isFinite(minor) && (major > 22 || (major === 22 && minor >= 13));
-}
+import { supportsRuntime } from "./runtime.js";
+import { defaultSandboxProbe, sandboxDoctorReport } from "./sandbox.js";
 function check(name, status, code, message, details = {}) {
     return { name, status, code, message, details };
 }
@@ -50,7 +48,7 @@ async function inspectRegistry(repository, context) {
             const code = doctorErrorCode(error, "REGISTRY_UNREADABLE");
             return check("registry", "error", code, "The Nawabari registry failed authoritative validation.", {
                 path: repository.registry_path,
-                ...(isSessionRegistryError(error) ? { reason: error.code } : {}),
+                ...(isSessionRegistryError(error) ? { reason: error.code, ...error.details } : {}),
             });
         }
     }
@@ -82,6 +80,54 @@ async function inspectReconciliation(context) {
             : "Registry/Git ownership drift is present; no destructive repair was performed.", {
             clean: result.clean,
             sessions: result.sessions.length,
+            lifecycle_sessions: result.sessions.map((session) => ({
+                session_id: session.session.sessionId,
+                status: session.status,
+                physical_state: session.physicalState,
+                lifecycle_state: session.lifecycle?.state ?? null,
+                lifecycle: session.lifecycle === undefined
+                    ? null
+                    : {
+                        schema_version: session.lifecycle.schemaVersion,
+                        state: session.lifecycle.state,
+                        session_state: session.lifecycle.sessionState,
+                        physical_state: session.lifecycle.physicalState,
+                        close_readiness: session.lifecycle.closeReadiness,
+                        blockers: session.lifecycle.blockers.map((blocker) => ({
+                            code: blocker.code,
+                            ...(blocker.classification === undefined ? {} : { classification: blocker.classification }),
+                        })),
+                        recoverability: session.lifecycle.recoverability,
+                        age_suspicious: session.lifecycle.ageSuspicious,
+                        gc_authorized: session.lifecycle.gcAuthorized,
+                        destructive_cleanup_eligible: session.lifecycle.destructiveCleanupEligible,
+                        available_operations: [...availableLifecycleOperations(session.lifecycle)],
+                        transitions: session.lifecycle.transitions.map((transition) => ({ ...transition })),
+                        next_actions: projectSessionLifecycleActions({
+                            classification: session.lifecycle,
+                            sessionId: session.session.sessionId,
+                            blockers: session.blockers.map((blocker) => ({ code: blocker.code, details: blocker.details })),
+                        }).map((action) => ({
+                            schema_version: action.schemaVersion,
+                            action_id: action.actionId,
+                            kind: action.kind,
+                            command: action.command,
+                            ...(action.kind === "integrated-revision"
+                                ? { integrated_revision: action.integratedRevision }
+                                : action.kind === "bounded-integration-fetch"
+                                    ? {
+                                        integrated_revision: action.integratedRevision,
+                                        fetch_remote: action.fetchRemote,
+                                        fetch_branch: action.fetchBranch,
+                                    }
+                                    : action.kind === "explicit-discard"
+                                        ? { session_id: action.sessionId, requires_explicit_intent: action.requiresExplicitIntent }
+                                        : action.kind === "reconcile"
+                                            ? { session_id: action.sessionId, mutates: action.mutates }
+                                            : { reason: action.reason }),
+                        })),
+                    },
+            })),
             worktrees: result.worktrees.length,
             issues,
         });
@@ -90,15 +136,18 @@ async function inspectReconciliation(context) {
         return check("reconciliation", "error", doctorErrorCode(error, "REGISTRY_UNREADABLE"), "Authoritative registry/Git reconciliation could not be completed.", { ...(isSessionRegistryError(error) ? { reason: error.code, ...error.details } : {}) });
     }
 }
-export async function runDoctor(cwd = process.cwd()) {
+export async function runDoctor(cwd = process.cwd(), sandboxProbe = defaultSandboxProbe, runtimeVersion = process.versions.node) {
     const checks = [];
-    const runtimeOk = supportsRuntime(process.versions.node);
+    const sandbox = sandboxDoctorReport(sandboxProbe);
+    const runtimeOk = supportsRuntime(runtimeVersion);
     checks.push(runtimeOk
         ? check("runtime", "ok", null, "The Nawabari runtime meets the supported Node.js version.", {
-            node: process.versions.node,
+            node: runtimeVersion,
+            sandbox: sandbox,
         })
         : check("runtime", "error", "UNSUPPORTED_RUNTIME", "The Node.js runtime is below the supported version.", {
-            node: process.versions.node,
+            node: runtimeVersion,
+            sandbox: sandbox,
         }));
     try {
         const version = defaultGit.run(["--version"], cwd);
@@ -111,7 +160,7 @@ export async function runDoctor(cwd = process.cwd()) {
         }));
         checks.push(check("repository", "not_applicable", null, "Repository resolution was skipped because Git is unavailable."));
         checks.push(check("registry", "not_applicable", null, "Registry inspection was skipped because Git is unavailable."));
-        return success({ ok: false, checks, repository: null });
+        return success({ ok: false, checks, repository: null, sandbox });
     }
     let repository = null;
     try {
@@ -134,7 +183,7 @@ export async function runDoctor(cwd = process.cwd()) {
         checks.push(check("registry", "not_applicable", null, "Registry inspection was skipped outside a Git repository."));
     }
     const hasError = checks.some((item) => item.status === "error");
-    return success({ ok: !hasError, checks, repository });
+    return success({ ok: !hasError, checks, repository, sandbox });
 }
 function doctorErrorCode(error, fallback) {
     if (!isSessionRegistryError(error))
@@ -158,6 +207,8 @@ function doctorErrorCode(error, fallback) {
         return "GIT_STATE_AMBIGUOUS";
     if (code === "REGISTRY_CORRUPT" || code === "UNSUPPORTED_SCHEMA_VERSION")
         return "REGISTRY_CORRUPT";
+    if (code === "UNSUPPORTED_CLAIM_SCHEMA_VERSION")
+        return "UNSUPPORTED_CLAIM_SCHEMA_VERSION";
     if (code === "REGISTRY_REPOSITORY_MISMATCH")
         return "INVALID_REGISTRY";
     if (code === "INVALID_BRANCH_ID")

package/dist/domain/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/domain/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAA0B,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAsD,MAAM,aAAa,CAAC;AAwB1F,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,KAAK,CACZ,IAAyB,EACzB,MAAyB,EACzB,IAAsB,EACtB,OAAe,EACf,UAAsB,EAAE;IAExB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,OAA0B;IAChD,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,YAAY;QAC/B,UAAU,EAAE,OAAO,CAAC,kBAAkB;QACtC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,UAAU,EAAE,uBAAuB,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,UAA0B,EAAE,OAA0B;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,0CAA0C,EAAE;gBAChG,IAAI,EAAE,UAAU,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,mDAAmD,EAAE;gBACzG,IAAI,EAAE,UAAU,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,8CAA8C,EAAE;gBACnF,IAAI,EAAE,UAAU,CAAC,aAAa;gBAC9B,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,QAAQ,EAAE,QAAQ,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,wDAAwD,EAAE;gBAChG,IAAI,EAAE,UAAU,CAAC,aAAa;gBAC9B,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,mDAAmD,EAAE;gBACpG,IAAI,EAAE,UAAU,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE,uCAAuC,EAAE;YAChG,IAAI,EAAE,UAAU,CAAC,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,OAA0B;IAC7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,YAAY;YAC5B,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE;YAC7B,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;SACzC,CAAC,CAAC,CAAC;QACJ,OAAO,KAAK,CACV,gBAAgB,EAChB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,EAC5C,MAAM,CAAC,KAAK;YACV,CAAC,CAAC,qEAAqE;YACvE,CAAC,CAAC,+EAA+E,EACnF;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YAClC,MAAM;SACP,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,KAAK,CACV,gBAAgB,EAChB,OAAO,EACP,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAC7C,mEAAmE,EACnE,EAAE,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACjD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,CACT,SAAS;QACP,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,2DAA2D,EAAE;YACxF,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;SAC5B,CAAC;QACJ,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,qDAAqD,EAAE;YACtG,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;SAC5B,CAAC,CACP,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,wCAAwC,EAAE;YACzG,OAAO,EAAE,eAAe;YACxB,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,+DAA+D,CAAC,CAC7G,CAAC;QACF,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,6DAA6D,CAAC,CACzG,CAAC;QACF,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,UAAU,GAA0B,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,+CAA+C,EAAE;YAC/E,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC,CAAC,CACH,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,MAAM,KAAK,IAAI;YAC3B,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC;YACtC,CAAC,CAAC,KAAK,CACH,gBAAgB,EAChB,gBAAgB,EAChB,IAAI,EACJ,6DAA6D,CAC9D,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CACT,KAAK,CACH,YAAY,EACZ,OAAO,EACP,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAC5C,8DAA8D,EAC9D;YACE,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CACF,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,2DAA2D,CAAC,CAAC,CAAC;IACtH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAmB;IAC1D,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IACjD,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IAC/D,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,oBAAoB,CAAC;IACjE,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,kCAAkC;QAAE,OAAO,kCAAkC,CAAC;IAC3F,IAAI,IAAI,KAAK,+BAA+B;QAAE,OAAO,qBAAqB,CAAC;IAC3E,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,4BAA4B;QAAE,OAAO,kBAAkB,CAAC;IACpG,IAAI,IAAI,KAAK,8BAA8B;QAAE,OAAO,kBAAkB,CAAC;IACvE,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,gBAAgB,CAAC;IAC1D,IAAI,IAAI,KAAK,uBAAuB;QAAE,OAAO,kBAAkB,CAAC;IAChE,IAAI,IAAI,KAAK,6BAA6B;QAAE,OAAO,qBAAqB,CAAC;IACzE,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,sBAAsB,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/domain/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAA0B,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,OAAO,EAAsD,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAA+C,MAAM,cAAc,CAAC;AA0BrH,SAAS,KAAK,CACZ,IAAyB,EACzB,MAAyB,EACzB,IAAsB,EACtB,OAAe,EACf,UAAsB,EAAE;IAExB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,OAA0B;IAChD,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,YAAY;QAC/B,UAAU,EAAE,OAAO,CAAC,kBAAkB;QACtC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,UAAU,EAAE,uBAAuB,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,UAA0B,EAAE,OAA0B;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,0CAA0C,EAAE;gBAChG,IAAI,EAAE,UAAU,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,mDAAmD,EAAE;gBACzG,IAAI,EAAE,UAAU,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,8CAA8C,EAAE;gBACnF,IAAI,EAAE,UAAU,CAAC,aAAa;gBAC9B,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,QAAQ,EAAE,QAAQ,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,wDAAwD,EAAE;gBAChG,IAAI,EAAE,UAAU,CAAC,aAAa;gBAC9B,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,mDAAmD,EAAE;gBACpG,IAAI,EAAE,UAAU,CAAC,aAAa;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE,uCAAuC,EAAE;YAChG,IAAI,EAAE,UAAU,CAAC,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,OAA0B;IAC7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,YAAY;YAC5B,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE;YAC7B,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;SACzC,CAAC,CAAC,CAAC;QACJ,OAAO,KAAK,CACV,gBAAgB,EAChB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,EAC5C,MAAM,CAAC,KAAK;YACV,CAAC,CAAC,qEAAqE;YACvE,CAAC,CAAC,+EAA+E,EACnF;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpD,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,OAAO,CAAC,aAAa;gBACrC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI;gBACjD,SAAS,EACP,OAAO,CAAC,SAAS,KAAK,SAAS;oBAC7B,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC;wBACE,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa;wBAC/C,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;wBAC9B,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;wBAC7C,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa;wBAC/C,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,cAAc;wBACjD,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;4BACrD,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;yBAC5F,CAAC,CAAC;wBACH,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,cAAc;wBAChD,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa;wBAC/C,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;wBAC7C,4BAA4B,EAAE,OAAO,CAAC,SAAS,CAAC,0BAA0B;wBAC1E,oBAAoB,EAAE,CAAC,GAAG,4BAA4B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;wBAC1E,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;wBACnF,YAAY,EAAE,8BAA8B,CAAC;4BAC3C,cAAc,EAAE,OAAO,CAAC,SAAS;4BACjC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;4BACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;yBAChG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BAClB,cAAc,EAAE,MAAM,CAAC,aAAa;4BACpC,SAAS,EAAE,MAAM,CAAC,QAAQ;4BAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,qBAAqB;gCACvC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE;gCACpD,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B;oCAC3C,CAAC,CAAC;wCACE,mBAAmB,EAAE,MAAM,CAAC,kBAAkB;wCAC9C,YAAY,EAAE,MAAM,CAAC,WAAW;wCAChC,YAAY,EAAE,MAAM,CAAC,WAAW;qCACjC;oCACH,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;wCAClC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,wBAAwB,EAAE,MAAM,CAAC,sBAAsB,EAAE;wCAC3F,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;4CAC3B,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;4CAC3D,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;yBACrC,CAAC,CAAC;qBACJ;aACR,CAAC,CAAC;YACH,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YAClC,MAAM;SACP,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,KAAK,CACV,gBAAgB,EAChB,OAAO,EACP,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAC7C,mEAAmE,EACnE,EAAE,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,eAA6B,mBAAmB,EAChD,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI;IAEtC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,CACT,SAAS;QACP,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,2DAA2D,EAAE;YACxF,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAgC;SAC1C,CAAC;QACJ,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,qDAAqD,EAAE;YACtG,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAgC;SAC1C,CAAC,CACP,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,wCAAwC,EAAE;YACzG,OAAO,EAAE,eAAe;YACxB,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,+DAA+D,CAAC,CAC7G,CAAC;QACF,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,6DAA6D,CAAC,CACzG,CAAC;QACF,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,UAAU,GAA0B,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,+CAA+C,EAAE;YAC/E,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC,CAAC,CACH,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,MAAM,KAAK,IAAI;YAC3B,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC;YACtC,CAAC,CAAC,KAAK,CACH,gBAAgB,EAChB,gBAAgB,EAChB,IAAI,EACJ,6DAA6D,CAC9D,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CACT,KAAK,CACH,YAAY,EACZ,OAAO,EACP,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAC5C,8DAA8D,EAC9D;YACE,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CACF,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,2DAA2D,CAAC,CAAC,CAAC;IACtH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAmB;IAC1D,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IACjD,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IAC/D,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,oBAAoB,CAAC;IACjE,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,IAAI,KAAK,kCAAkC;QAAE,OAAO,kCAAkC,CAAC;IAC3F,IAAI,IAAI,KAAK,+BAA+B;QAAE,OAAO,qBAAqB,CAAC;IAC3E,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,4BAA4B;QAAE,OAAO,kBAAkB,CAAC;IACpG,IAAI,IAAI,KAAK,kCAAkC;QAAE,OAAO,kCAAkC,CAAC;IAC3F,IAAI,IAAI,KAAK,8BAA8B;QAAE,OAAO,kBAAkB,CAAC;IACvE,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,gBAAgB,CAAC;IAC1D,IAAI,IAAI,KAAK,uBAAuB;QAAE,OAAO,kBAAkB,CAAC;IAChE,IAAI,IAAI,KAAK,6BAA6B;QAAE,OAAO,qBAAqB,CAAC;IACzE,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,sBAAsB,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC"}

package/dist/domain/errors.d.ts

@@ -3,7 +3,7 @@ export type JsonValue = JsonPrimitive | JsonObject | JsonValue[];
 export interface JsonObject {
     [key: string]: JsonValue;
 }
-export type ErrorCode = "BACKEND_UNAVAILABLE" | "BRANCH_OWNED_BY_OTHER_SESSION" | "BRANCH_ALREADY_EXISTS" | "DOCTOR_FAILED" | "DIRTY_WORKTREE" | "NESTED_REPOSITORY" | "GIT_COMMAND_FAILED" | "GIT_OPERATION_FAILED" | "GIT_SPAWN_FAILED" | "GIT_TIMEOUT" | "GIT_OUTPUT_LIMIT" | "GIT_UNAVAILABLE" | "INVALID_ARGUMENT" | "INVALID_BRANCH" | "INVALID_BASE_REF" | "INVALID_REGISTRY" | "INVALID_SESSION_ID" | "INVALID_WORKTREE" | "DETACHED_HEAD" | "MISSING_WORKTREE" | "REPOSITORY_MISMATCH" | "WORKTREE_MISMATCH" | "BRANCH_MISMATCH" | "STALE_REGISTRY" | "STALE_CLAIM_SET" | "GIT_STATE_AMBIGUOUS" | "PHYSICAL_OBSERVATION_UNAVAILABLE" | "LOCK_CONTENTION" | "MISSING_ARGUMENT" | "NO_COMMAND" | "NO_CURRENT_SESSION" | "NOT_GIT_REPOSITORY" | "OPERATION_REJECTED" | "OWNERSHIP_MISMATCH" | "PROTECTED_BRANCH" | "PROTECTED_WORKTREE" | "RECOVERABLE_COMMITS" | "RECOVERABLE_STASHES" | "RECONCILIATION_DRIFT" | "REGISTRY_CORRUPT" | "REGISTRY_UNREADABLE" | "REGISTRY_DURABILITY_UNCERTAIN" | "SANDBOX_UNSUPPORTED_PLATFORM" | "SANDBOX_CAPABILITY_UNAVAILABLE" | "SANDBOX_TOPOLOGY_INVALID" | "SANDBOX_EXECUTION_FAILED" | "SANDBOX_EXECUTION_TIMEOUT" | "SANDBOX_OUTPUT_LIMIT" | "SESSION_NOT_FOUND" | "STALE_SESSION" | "UNSUPPORTED_RUNTIME" | "UNKNOWN_COMMAND" | "WORKTREE_OWNED_BY_OTHER_SESSION" | "WORKTREE_ALREADY_EXISTS" | "INVALID_CLAIM" | "INVALID_OPERATION" | "INVALID_RESOURCE" | "MISSING_RESOURCE_CLAIM" | "INSUFFICIENT_CLAIM_MODE" | "INVALID_CLAIM_RESOURCE" | "CLAIM_PATH_TRAVERSAL" | "CLAIM_SYMLINK_ESCAPE" | "CLAIM_AMBIGUOUS_PATH" | "UNSUPPORTED_CLAIM_GLOB" | "CLAIM_REPOSITORY_MISMATCH" | "CLAIM_SESSION_MISMATCH" | "DUPLICATE_CLAIM" | "CONTRADICTORY_CLAIM" | "RESOURCE_CLAIM_CONFLICT" | "CLAIM_NOT_FOUND" | "SESSION_NOT_ACTIVE" | "UNSUPPORTED_CLAIM_SCHEMA_VERSION" | "INVALID_COMMIT_MESSAGE" | "COMMIT_EMPTY_DIFF" | "UNEXPECTED_CHANGED_PATHS" | "COMMIT_STAGING_FAILED" | "COMMIT_FAILED" | "COMMIT_RESULT_UNAVAILABLE" | "COMMIT_RESULT_DIVERGED" | "INVALID_REMOTE" | "INVALID_REMOTE_BRANCH" | "PUSH_TARGET_MISMATCH" | "PUSH_REMOTE_INSPECTION_FAILED" | "INTEGRATION_FETCH_FAILED" | "PUSH_NO_UPSTREAM" | "PUSH_BEHIND" | "PUSH_DIVERGED" | "PUSH_DIRTY_WORKTREE" | "PUSH_FAILED" | "INTERNAL_ERROR";
+export type ErrorCode = "BACKEND_UNAVAILABLE" | "BRANCH_OWNED_BY_OTHER_SESSION" | "BRANCH_ALREADY_EXISTS" | "DOCTOR_FAILED" | "DIRTY_WORKTREE" | "NESTED_REPOSITORY" | "GIT_COMMAND_FAILED" | "GIT_OPERATION_FAILED" | "GIT_SPAWN_FAILED" | "GIT_TIMEOUT" | "GIT_OUTPUT_LIMIT" | "GIT_UNAVAILABLE" | "INVALID_ARGUMENT" | "INVALID_BRANCH" | "INVALID_BASE_REF" | "INVALID_REGISTRY" | "INVALID_SESSION_ID" | "INVALID_WORKTREE" | "DETACHED_HEAD" | "MISSING_WORKTREE" | "REPOSITORY_MISMATCH" | "WORKTREE_MISMATCH" | "BRANCH_MISMATCH" | "STALE_REGISTRY" | "STALE_CLAIM_SET" | "GIT_STATE_AMBIGUOUS" | "PHYSICAL_OBSERVATION_UNAVAILABLE" | "LOCK_CONTENTION" | "MISSING_ARGUMENT" | "NO_COMMAND" | "NO_CURRENT_SESSION" | "NOT_GIT_REPOSITORY" | "OPERATION_REJECTED" | "OWNERSHIP_MISMATCH" | "PROTECTED_BRANCH" | "PROTECTED_WORKTREE" | "RECOVERABLE_COMMITS" | "RECOVERABLE_STASHES" | "RECONCILIATION_DRIFT" | "REGISTRY_CORRUPT" | "REGISTRY_UNREADABLE" | "REGISTRY_DURABILITY_UNCERTAIN" | "SANDBOX_UNSUPPORTED_PLATFORM" | "SANDBOX_CAPABILITY_UNAVAILABLE" | "SANDBOX_TOPOLOGY_INVALID" | "SANDBOX_EXECUTION_FAILED" | "SANDBOX_EXECUTION_TIMEOUT" | "SANDBOX_OUTPUT_LIMIT" | "SANDBOX_CGROUP_SCOPE_CONFLICT" | "SANDBOX_CGROUP_SETUP_FAILED" | "SANDBOX_CGROUP_CLEANUP_FAILED" | "SANDBOX_CGROUP_LIMIT" | "SESSION_NOT_FOUND" | "STALE_SESSION" | "UNSUPPORTED_RUNTIME" | "UNKNOWN_COMMAND" | "WORKTREE_OWNED_BY_OTHER_SESSION" | "WORKTREE_ALREADY_EXISTS" | "INVALID_CLAIM" | "INVALID_OPERATION" | "INVALID_RESOURCE" | "MISSING_RESOURCE_CLAIM" | "INSUFFICIENT_CLAIM_MODE" | "INVALID_CLAIM_RESOURCE" | "CLAIM_PATH_TRAVERSAL" | "CLAIM_SYMLINK_ESCAPE" | "CLAIM_AMBIGUOUS_PATH" | "UNSUPPORTED_CLAIM_GLOB" | "CLAIM_REPOSITORY_MISMATCH" | "CLAIM_SESSION_MISMATCH" | "DUPLICATE_CLAIM" | "CONTRADICTORY_CLAIM" | "RESOURCE_CLAIM_CONFLICT" | "CLAIM_NOT_FOUND" | "SESSION_NOT_ACTIVE" | "UNSUPPORTED_CLAIM_SCHEMA_VERSION" | "INVALID_COMMIT_MESSAGE" | "COMMIT_EMPTY_DIFF" | "UNEXPECTED_CHANGED_PATHS" | "COMMIT_STAGING_FAILED" | "COMMIT_FAILED" | "COMMIT_RESULT_UNAVAILABLE" | "COMMIT_RESULT_DIVERGED" | "INVALID_REMOTE" | "INVALID_REMOTE_BRANCH" | "PUSH_TARGET_MISMATCH" | "PUSH_REMOTE_INSPECTION_FAILED" | "INTEGRATION_FETCH_FAILED" | "PUSH_NO_UPSTREAM" | "PUSH_BEHIND" | "PUSH_DIVERGED" | "PUSH_DIRTY_WORKTREE" | "PUSH_FAILED" | "INTERNAL_ERROR";
 /**
  * Implementation-owned stable failures reachable from the public resource
  * claim lifecycle.  Contract discovery consumes this vocabulary rather than

package/dist/domain/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAoGA;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,2BAA2B;IAC3B,wBAAwB;IACxB,iBAAiB;IACjB,qBAAqB;IACrB,yBAAyB;IACzB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,kCAAkC;IAClC,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,iCAAiC;IACjC,+BAA+B;IAC/B,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;IACrB,+BAA+B;IAC/B,iBAAiB;CACsB,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,EAAE;CACb,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,IAAe;IACtC,IACE,IAAI,KAAK,qBAAqB;QAC9B,IAAI,KAAK,8BAA8B;QACvC,IAAI,KAAK,gCAAgC,EACzC,CAAC;QACD,OAAO,UAAU,CAAC,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC;IACvD,IACE,IAAI,KAAK,iBAAiB;QAC1B,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,mBAAmB;QAC5B,IAAI,KAAK,wBAAwB;QACjC,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,uBAAuB,EAChC,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC;AAC7B,CAAC;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAY;IAChB,QAAQ,CAAS;IACjB,OAAO,CAAoB;IAEpC,YACE,IAAe,EACf,OAAe,EACf,UAA6B,IAAI,EACjC,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,EAChC,KAAe;QAEf,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAID,MAAM,UAAU,OAAO,CAAI,KAAQ;IACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,OAAO,CAAY,KAAkB;IACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAwGA;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,wBAAwB;IACxB,2BAA2B;IAC3B,wBAAwB;IACxB,iBAAiB;IACjB,qBAAqB;IACrB,yBAAyB;IACzB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,kCAAkC;IAClC,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,iCAAiC;IACjC,+BAA+B;IAC/B,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;IACrB,+BAA+B;IAC/B,iBAAiB;CACsB,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,EAAE;CACb,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,IAAe;IACtC,IACE,IAAI,KAAK,qBAAqB;QAC9B,IAAI,KAAK,8BAA8B;QACvC,IAAI,KAAK,gCAAgC,EACzC,CAAC;QACD,OAAO,UAAU,CAAC,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC;IACvD,IACE,IAAI,KAAK,iBAAiB;QAC1B,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,mBAAmB;QAC5B,IAAI,KAAK,wBAAwB;QACjC,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,uBAAuB,EAChC,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC;AAC7B,CAAC;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAY;IAChB,QAAQ,CAAS;IACjB,OAAO,CAAoB;IAEpC,YACE,IAAe,EACf,OAAe,EACf,UAA6B,IAAI,EACjC,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,EAChC,KAAe;QAEf,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAID,MAAM,UAAU,OAAO,CAAI,KAAQ;IACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,OAAO,CAAY,KAAkB;IACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC"}

package/dist/domain/landlock.d.ts

@@ -0,0 +1,55 @@
+import type { SandboxFilesystemTopology } from "./sandbox.js";
+/**
+ * Landlock is an optional second filesystem boundary.  The bubblewrap
+ * topology remains authoritative: this module only compiles that topology
+ * into a fixed set of namespace paths and never accepts source/destination
+ * grants from a caller.
+ */
+export declare const LANDLOCK_ABI_MINIMUM: 1;
+export declare const LANDLOCK_CREATE_RULESET_VERSION: 1;
+export declare const LANDLOCK_RULE_TYPE_PATH_BENEATH: 1;
+export declare const LANDLOCK_ACCESS_FS: Readonly<{
+    execute: number;
+    write_file: number;
+    read_file: number;
+    read_dir: number;
+    remove_dir: number;
+    remove_file: number;
+    make_char: number;
+    make_dir: number;
+    make_reg: number;
+    make_sock: number;
+    make_fifo: number;
+    make_block: number;
+    make_sym: number;
+    refer: number;
+    truncate: number;
+}>;
+export declare const LANDLOCK_ACCESS_FS_ABI1: number;
+export type LandlockRule = {
+    readonly path: string;
+    readonly allowed_access: number;
+};
+/** State before/after applying the optional defense-in-depth policy. */
+export type LandlockEffectiveState = "available" | "enforced" | "reduced-defense" | "incompatible" | "error" | "not-applicable";
+export type LandlockCapability = {
+    readonly abi: number | null;
+    readonly supported: boolean;
+    readonly effective_state: LandlockEffectiveState;
+};
+/** Marker kept short so setup diagnostics remain bounded at every boundary. */
+export declare const LANDLOCK_SETUP_FAILURE_PREFIX = "nawabari-landlock: ";
+/**
+ * Compile only namespace-visible paths from the canonical topology.  Host
+ * paths that are mounted at a fixed destination are translated to that
+ * destination; the host HOME, sibling worktrees, and arbitrary grants never
+ * become Landlock rules.
+ */
+export declare function deriveLandlockRules(topology: SandboxFilesystemTopology): readonly LandlockRule[];
+/**
+ * Small in-namespace adapter.  It is passed through argv to the selected
+ * runtime executable, never through a shell.  Any setup failure exits before
+ * the requested command is exec'd and emits only a bounded marker/diagnostic.
+ */
+export declare const LANDLOCK_TRAMPOLINE: string;
+export declare function landlockHandledAccessForAbi(abi: number): number;

package/dist/domain/landlock.js

@@ -0,0 +1,279 @@
+import path from "node:path";
+/**
+ * Landlock is an optional second filesystem boundary.  The bubblewrap
+ * topology remains authoritative: this module only compiles that topology
+ * into a fixed set of namespace paths and never accepts source/destination
+ * grants from a caller.
+ */
+export const LANDLOCK_ABI_MINIMUM = 1;
+export const LANDLOCK_CREATE_RULESET_VERSION = 1;
+export const LANDLOCK_RULE_TYPE_PATH_BENEATH = 1;
+export const LANDLOCK_ACCESS_FS = Object.freeze({
+    execute: 1 << 0,
+    write_file: 1 << 1,
+    read_file: 1 << 2,
+    read_dir: 1 << 3,
+    remove_dir: 1 << 4,
+    remove_file: 1 << 5,
+    make_char: 1 << 6,
+    make_dir: 1 << 7,
+    make_reg: 1 << 8,
+    make_sock: 1 << 9,
+    make_fifo: 1 << 10,
+    make_block: 1 << 11,
+    make_sym: 1 << 12,
+    refer: 1 << 13,
+    truncate: 1 << 14,
+});
+export const LANDLOCK_ACCESS_FS_ABI1 = LANDLOCK_ACCESS_FS.execute |
+    LANDLOCK_ACCESS_FS.write_file |
+    LANDLOCK_ACCESS_FS.read_file |
+    LANDLOCK_ACCESS_FS.read_dir |
+    LANDLOCK_ACCESS_FS.remove_dir |
+    LANDLOCK_ACCESS_FS.remove_file |
+    LANDLOCK_ACCESS_FS.make_char |
+    LANDLOCK_ACCESS_FS.make_dir |
+    LANDLOCK_ACCESS_FS.make_reg |
+    LANDLOCK_ACCESS_FS.make_sock |
+    LANDLOCK_ACCESS_FS.make_fifo |
+    LANDLOCK_ACCESS_FS.make_block |
+    LANDLOCK_ACCESS_FS.make_sym;
+const LANDLOCK_ACCESS_FS_ABI2 = LANDLOCK_ACCESS_FS_ABI1 | LANDLOCK_ACCESS_FS.refer;
+const LANDLOCK_ACCESS_FS_ABI3 = LANDLOCK_ACCESS_FS_ABI2 | LANDLOCK_ACCESS_FS.truncate;
+const READ_ACCESS = LANDLOCK_ACCESS_FS.execute | LANDLOCK_ACCESS_FS.read_file | LANDLOCK_ACCESS_FS.read_dir;
+const WRITE_ACCESS = LANDLOCK_ACCESS_FS_ABI3;
+/** Marker kept short so setup diagnostics remain bounded at every boundary. */
+export const LANDLOCK_SETUP_FAILURE_PREFIX = "nawabari-landlock: ";
+function addRule(rules, candidate, allowedAccess) {
+    if (!path.isAbsolute(candidate) || candidate.includes("\0"))
+        return;
+    const normalized = path.posix.normalize(candidate);
+    // A root rule would turn this into a second broad policy authority.  The
+    // canonical profile always supplies narrower mounted paths instead.
+    if (normalized === "/")
+        return;
+    rules.set(normalized, (rules.get(normalized) ?? 0) | allowedAccess);
+}
+function addParentRules(rules, candidate) {
+    let parent = path.posix.dirname(candidate);
+    while (parent !== "/" && parent !== ".") {
+        addRule(rules, parent, LANDLOCK_ACCESS_FS.execute | LANDLOCK_ACCESS_FS.read_dir);
+        parent = path.posix.dirname(parent);
+    }
+}
+function addDirectoryRule(rules, candidate, allowedAccess) {
+    if (!path.isAbsolute(candidate) || candidate.includes("\0"))
+        return;
+    addParentRules(rules, candidate);
+    addRule(rules, candidate, allowedAccess);
+}
+function addFileRule(rules, candidate) {
+    if (!path.isAbsolute(candidate) || candidate.includes("\0"))
+        return;
+    addParentRules(rules, candidate);
+    addRule(rules, candidate, LANDLOCK_ACCESS_FS.execute | LANDLOCK_ACCESS_FS.read_file);
+}
+function isKnownFile(candidate) {
+    return new Set(["/etc/passwd", "/etc/group", "/etc/nsswitch.conf", "/etc/hosts", "/etc/resolv.conf"]).has(path.posix.normalize(candidate));
+}
+function isKnownDirectory(candidate) {
+    const normalized = path.posix.normalize(candidate);
+    return (normalized === "/dev" ||
+        normalized === "/proc" ||
+        normalized === "/tmp" ||
+        normalized === "/usr" ||
+        normalized === "/bin" ||
+        normalized === "/lib" ||
+        normalized === "/lib64" ||
+        normalized === "/nix/store" ||
+        normalized === "/run/current-system" ||
+        normalized === "/run/wrappers" ||
+        normalized === "/etc/profiles" ||
+        normalized === "/etc/alternatives" ||
+        normalized === "/etc/ssl" ||
+        normalized === "/etc/pki" ||
+        normalized === "/etc/ca-certificates" ||
+        normalized === "/run/systemd/resolve" ||
+        normalized === "/run/NetworkManager" ||
+        normalized === "/mnt/wsl" ||
+        normalized.startsWith("/usr/") ||
+        normalized.startsWith("/bin/") ||
+        normalized.startsWith("/lib/") ||
+        normalized.startsWith("/lib64/") ||
+        normalized.startsWith("/nix/store/") ||
+        normalized.startsWith("/run/current-system/") ||
+        normalized.startsWith("/run/wrappers/") ||
+        normalized.startsWith("/etc/profiles/") ||
+        normalized.startsWith("/etc/alternatives/") ||
+        normalized.startsWith("/etc/ssl/") ||
+        normalized.startsWith("/etc/pki/") ||
+        normalized.startsWith("/etc/ca-certificates/") ||
+        normalized.startsWith("/run/systemd/resolve/") ||
+        normalized.startsWith("/run/NetworkManager/") ||
+        normalized.startsWith("/mnt/wsl/"));
+}
+function isCanonicalSystemPath(candidate) {
+    const normalized = path.posix.normalize(candidate);
+    return isKnownFile(normalized) || isKnownDirectory(normalized);
+}
+function userToolDestination(source, userHome) {
+    if (userHome === null || userHome === undefined || !path.isAbsolute(userHome) || userHome.includes("\0")) {
+        return null;
+    }
+    const normalizedSource = path.posix.normalize(source);
+    const normalizedHome = path.posix.normalize(userHome);
+    const localBin = path.posix.join(normalizedHome, ".local", "bin");
+    const localLib = path.posix.join(normalizedHome, ".local", "lib");
+    const pnpmBin = path.posix.join(normalizedHome, ".local", "share", "pnpm");
+    if (normalizedSource === localBin || normalizedSource.startsWith(`${localBin}/`))
+        return "/home/nawabari/.local/bin";
+    if (normalizedSource === localLib || normalizedSource.startsWith(`${localLib}/`))
+        return "/home/nawabari/.local/lib";
+    if (normalizedSource === pnpmBin || normalizedSource.startsWith(`${pnpmBin}/`)) {
+        return "/home/nawabari/.local/share/pnpm";
+    }
+    return null;
+}
+/**
+ * Compile only namespace-visible paths from the canonical topology.  Host
+ * paths that are mounted at a fixed destination are translated to that
+ * destination; the host HOME, sibling worktrees, and arbitrary grants never
+ * become Landlock rules.
+ */
+export function deriveLandlockRules(topology) {
+    const rules = new Map();
+    addDirectoryRule(rules, topology.owned_worktree, WRITE_ACCESS);
+    addDirectoryRule(rules, "/home/nawabari", WRITE_ACCESS);
+    addDirectoryRule(rules, "/home/nawabari/.cache", WRITE_ACCESS);
+    addDirectoryRule(rules, "/home/nawabari/.nawabari", WRITE_ACCESS);
+    addDirectoryRule(rules, "/nawabari/git", WRITE_ACCESS);
+    addDirectoryRule(rules, "/nawabari/git/objects", READ_ACCESS);
+    // `/dev` already grants execute/read_file/read_dir.  Only write_file is
+    // needed for subprocesses that open the canonical null device for output.
+    addRule(rules, "/dev/null", LANDLOCK_ACCESS_FS.write_file);
+    addDirectoryRule(rules, "/tmp", WRITE_ACCESS);
+    for (const source of topology.user_tool_paths) {
+        const destination = userToolDestination(source, topology.user_tool_home);
+        if (destination !== null)
+            addDirectoryRule(rules, destination, READ_ACCESS);
+    }
+    for (const source of topology.runtime_paths) {
+        if (isKnownFile(source))
+            addFileRule(rules, source);
+        else if (isKnownDirectory(source))
+            addDirectoryRule(rules, source, READ_ACCESS);
+    }
+    for (const source of topology.system_paths) {
+        if (!isCanonicalSystemPath(source))
+            continue;
+        if (isKnownFile(source))
+            addFileRule(rules, source);
+        else
+            addDirectoryRule(rules, source, READ_ACCESS);
+    }
+    return [...rules.entries()]
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([rulePath, allowedAccess]) => ({ path: rulePath, allowed_access: allowedAccess }));
+}
+/**
+ * Small in-namespace adapter.  It is passed through argv to the selected
+ * runtime executable, never through a shell.  Any setup failure exits before
+ * the requested command is exec'd and emits only a bounded marker/diagnostic.
+ */
+export const LANDLOCK_TRAMPOLINE = String.raw `
+import ctypes, json, os, sys
+
+SYS_LANDLOCK_CREATE_RULESET = 444
+SYS_LANDLOCK_ADD_RULE = 445
+SYS_LANDLOCK_RESTRICT_SELF = 446
+LANDLOCK_CREATE_RULESET_VERSION = 1
+LANDLOCK_RULE_TYPE_PATH_BENEATH = 1
+PR_SET_NO_NEW_PRIVS = 38
+O_PATH = getattr(os, "O_PATH", 0o10000000)
+O_CLOEXEC = getattr(os, "O_CLOEXEC", 0o2000000)
+LANDLOCK_ACCESS_FS_ABI1 = (1 << 13) - 1
+LANDLOCK_ACCESS_FS_ABI2 = LANDLOCK_ACCESS_FS_ABI1 | (1 << 13)
+LANDLOCK_ACCESS_FS_ABI3 = LANDLOCK_ACCESS_FS_ABI2 | (1 << 14)
+
+class RulesetAttr(ctypes.Structure):
+    _fields_ = [("handled_access_fs", ctypes.c_uint64)]
+
+class PathBeneath(ctypes.Structure):
+    _fields_ = [("allowed_access", ctypes.c_uint64), ("parent_fd", ctypes.c_int32)]
+
+def fail(message):
+    bounded = str(message).replace("\n", " ")[:240]
+    sys.stderr.write("nawabari-landlock: " + bounded + "\n")
+    raise SystemExit(125)
+
+def main():
+    if len(sys.argv) < 4 or sys.argv[2] != "--":
+        fail("invalid trampoline arguments")
+    try:
+        rules = json.loads(sys.argv[1])
+    except Exception as error:
+        fail("invalid derived rules: " + str(error))
+    if not isinstance(rules, list):
+        fail("invalid derived rules")
+    command = sys.argv[3:]
+    if not command or any("\x00" in item for item in command):
+        fail("invalid command arguments")
+
+    try:
+        libc = ctypes.CDLL(None, use_errno=True)
+        libc.syscall.restype = ctypes.c_long
+        version = libc.syscall(SYS_LANDLOCK_CREATE_RULESET, None, 0, LANDLOCK_CREATE_RULESET_VERSION)
+        if version < 1:
+            fail("Landlock ABI is unavailable")
+        abi = int(version)
+        handled = LANDLOCK_ACCESS_FS_ABI3 if abi >= 3 else LANDLOCK_ACCESS_FS_ABI2 if abi >= 2 else LANDLOCK_ACCESS_FS_ABI1
+        ruleset = RulesetAttr(handled_access_fs=handled)
+        ruleset_fd = libc.syscall(SYS_LANDLOCK_CREATE_RULESET, ctypes.byref(ruleset), ctypes.sizeof(ruleset), 0)
+        if ruleset_fd < 0:
+            fail("landlock_create_ruleset failed: " + os.strerror(ctypes.get_errno()))
+        opened = []
+        try:
+            for item in rules:
+                if not isinstance(item, dict) or not isinstance(item.get("path"), str):
+                    fail("invalid derived rule")
+                rule_path = item["path"]
+                if not rule_path.startswith("/"):
+                    fail("derived rule path is not absolute")
+                fd = os.open(rule_path, O_PATH | O_CLOEXEC)
+                opened.append(fd)
+                rule = PathBeneath(allowed_access=int(item.get("allowed_access", 0)) & handled, parent_fd=fd)
+                if libc.syscall(SYS_LANDLOCK_ADD_RULE, ruleset_fd, LANDLOCK_RULE_TYPE_PATH_BENEATH, ctypes.byref(rule), 0) < 0:
+                    fail("landlock_add_rule failed: " + os.strerror(ctypes.get_errno()))
+            if libc.prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) < 0:
+                fail("PR_SET_NO_NEW_PRIVS failed: " + os.strerror(ctypes.get_errno()))
+            if libc.syscall(SYS_LANDLOCK_RESTRICT_SELF, ruleset_fd, 0) < 0:
+                fail("landlock_restrict_self failed: " + os.strerror(ctypes.get_errno()))
+        finally:
+            for fd in opened:
+                try:
+                    os.close(fd)
+                except OSError:
+                    pass
+            os.close(ruleset_fd)
+    except SystemExit:
+        raise
+    except Exception as error:
+        fail("Landlock setup failed: " + str(error))
+
+    try:
+        os.execvp(command[0], command)
+    except Exception as error:
+        fail("command execution failed: " + str(error))
+
+main()
+`;
+export function landlockHandledAccessForAbi(abi) {
+    if (!Number.isSafeInteger(abi) || abi < LANDLOCK_ABI_MINIMUM)
+        return 0;
+    if (abi >= 3)
+        return LANDLOCK_ACCESS_FS_ABI3;
+    if (abi >= 2)
+        return LANDLOCK_ACCESS_FS_ABI2;
+    return LANDLOCK_ACCESS_FS_ABI1;
+}
+//# sourceMappingURL=landlock.js.map

package/dist/domain/landlock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"landlock.js","sourceRoot":"","sources":["../../src/domain/landlock.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAU,CAAC;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAU,CAAC;AAE1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,IAAI,CAAC;IACf,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,UAAU,EAAE,CAAC,IAAI,CAAC;IAClB,WAAW,EAAE,CAAC,IAAI,CAAC;IACnB,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,QAAQ,EAAE,CAAC,IAAI,CAAC;IAChB,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,SAAS,EAAE,CAAC,IAAI,EAAE;IAClB,UAAU,EAAE,CAAC,IAAI,EAAE;IACnB,QAAQ,EAAE,CAAC,IAAI,EAAE;IACjB,KAAK,EAAE,CAAC,IAAI,EAAE;IACd,QAAQ,EAAE,CAAC,IAAI,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAClC,kBAAkB,CAAC,OAAO;IAC1B,kBAAkB,CAAC,UAAU;IAC7B,kBAAkB,CAAC,SAAS;IAC5B,kBAAkB,CAAC,QAAQ;IAC3B,kBAAkB,CAAC,UAAU;IAC7B,kBAAkB,CAAC,WAAW;IAC9B,kBAAkB,CAAC,SAAS;IAC5B,kBAAkB,CAAC,QAAQ;IAC3B,kBAAkB,CAAC,QAAQ;IAC3B,kBAAkB,CAAC,SAAS;IAC5B,kBAAkB,CAAC,SAAS;IAC5B,kBAAkB,CAAC,UAAU;IAC7B,kBAAkB,CAAC,QAAQ,CAAC;AAE9B,MAAM,uBAAuB,GAAG,uBAAuB,GAAG,kBAAkB,CAAC,KAAK,CAAC;AACnF,MAAM,uBAAuB,GAAG,uBAAuB,GAAG,kBAAkB,CAAC,QAAQ,CAAC;AAEtF,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,GAAG,kBAAkB,CAAC,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC;AAC5G,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAiB7C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AAEnE,SAAS,OAAO,CAAC,KAA0B,EAAE,SAAiB,EAAE,aAAqB;IACnF,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO;IAC/B,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAA0B,EAAE,SAAiB;IACnE,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA0B,EAAE,SAAiB,EAAE,aAAqB;IAC5F,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACpE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAA0B,EAAE,SAAiB;IAChE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACpE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,CACvG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,OAAO,CACL,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,OAAO;QACtB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,QAAQ;QACvB,UAAU,KAAK,YAAY;QAC3B,UAAU,KAAK,qBAAqB;QACpC,UAAU,KAAK,eAAe;QAC9B,UAAU,KAAK,eAAe;QAC9B,UAAU,KAAK,mBAAmB;QAClC,UAAU,KAAK,UAAU;QACzB,UAAU,KAAK,UAAU;QACzB,UAAU,KAAK,sBAAsB;QACrC,UAAU,KAAK,sBAAsB;QACrC,UAAU,KAAK,qBAAqB;QACpC,UAAU,KAAK,UAAU;QACzB,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;QACpC,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAC;QAC7C,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACvC,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACvC,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAC3C,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QAClC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QAClC,UAAU,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAC9C,UAAU,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAC9C,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAC;QAC7C,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,QAAmC;IAC9E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC;QAAE,OAAO,2BAA2B,CAAC;IACrH,IAAI,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC;QAAE,OAAO,2BAA2B,CAAC;IACrH,IAAI,gBAAgB,KAAK,OAAO,IAAI,gBAAgB,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAmC;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC/D,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACxD,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC;IAC/D,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,EAAE,YAAY,CAAC,CAAC;IAClE,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACvD,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,EAAE,WAAW,CAAC,CAAC;IAC9D,wEAAwE;IACxE,0EAA0E;IAC1E,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAE9C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QACzE,IAAI,WAAW,KAAK,IAAI;YAAE,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;aAC/C,IAAI,gBAAgB,CAAC,MAAM,CAAC;YAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3C,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7C,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;;YAC/C,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACxB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsF5C,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,oBAAoB;QAAE,OAAO,CAAC,CAAC;IACvE,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC7C,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC7C,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/dist/domain/runtime.d.ts

@@ -0,0 +1,12 @@
+type NodeVersion = {
+    major: number;
+    minor: number;
+    patch: number;
+};
+/** The package manifest is the sole authority for the supported Node.js baseline. */
+export declare const NODE_RUNTIME_POLICY: Readonly<{
+    engine: string;
+    minimum: Readonly<NodeVersion>;
+}>;
+export declare function supportsRuntime(version: string): boolean;
+export {};

package/dist/domain/runtime.js

@@ -0,0 +1,50 @@
+import { createRequire } from "node:module";
+const packageMetadata = createRequire(import.meta.url)("../../package.json");
+const nodeEngine = readNodeEngine(packageMetadata);
+const minimumNodeVersion = parseNodeEngine(nodeEngine);
+/** The package manifest is the sole authority for the supported Node.js baseline. */
+export const NODE_RUNTIME_POLICY = Object.freeze({
+    engine: nodeEngine,
+    minimum: Object.freeze(minimumNodeVersion),
+});
+export function supportsRuntime(version) {
+    const parsedVersion = parseNodeVersion(version);
+    if (parsedVersion === null)
+        return false;
+    return compareVersions(parsedVersion, minimumNodeVersion) >= 0;
+}
+function readNodeEngine(metadata) {
+    if (typeof metadata.engines?.node !== "string") {
+        throw new Error("package.json must define engines.node as a string");
+    }
+    return metadata.engines.node;
+}
+function parseNodeEngine(engine) {
+    const match = engine.match(/^>=(\d+)(?:\.(\d+))?(?:\.(\d+))?$/u);
+    if (match === null) {
+        throw new Error(`package.json engines.node must be a lower-bound-only range, got ${engine}`);
+    }
+    return {
+        major: Number(match[1]),
+        minor: Number(match[2] ?? 0),
+        patch: Number(match[3] ?? 0),
+    };
+}
+function parseNodeVersion(version) {
+    const match = version.match(/^(\d+)\.(\d+)\.(\d+)$/u);
+    if (match === null)
+        return null;
+    return {
+        major: Number(match[1]),
+        minor: Number(match[2]),
+        patch: Number(match[3]),
+    };
+}
+function compareVersions(left, right) {
+    if (left.major !== right.major)
+        return left.major - right.major;
+    if (left.minor !== right.minor)
+        return left.minor - right.minor;
+    return left.patch - right.patch;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/domain/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/domain/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAc5C,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAoB,CAAC;AAChG,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;AACnD,MAAM,kBAAkB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;AAEvD,qFAAqF;AACrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,QAAyB;IAC/C,IAAI,OAAO,QAAQ,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mEAAmE,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAiB,EAAE,KAAkB;IAC5D,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAChE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;AAClC,CAAC"}