openplanr 1.13.2 → 1.14.0

package/dist/services/operate/lock-service.js

@@ -0,0 +1,208 @@
+import { execFile } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { mkdir, open, readFile, unlink } from 'node:fs/promises';
+import { hostname } from 'node:os';
+import path from 'node:path';
+import { promisify } from 'node:util';
+import { canonicalize } from './canonical.js';
+import { minimalSubprocessEnvironment } from './subprocess-env.js';
+import { OperateError } from './types.js';
+import { resolveOperatingPaths } from './workspace.js';
+const execFileAsync = promisify(execFile);
+const DEFAULT_LEASE_DURATION_MS = 30_000;
+const MINIMUM_LEASE_DURATION_MS = 5_000;
+const MAXIMUM_LEASE_DURATION_MS = 5 * 60_000;
+function assertLeaseDuration(value) {
+    if (!Number.isInteger(value) ||
+        value < MINIMUM_LEASE_DURATION_MS ||
+        value > MAXIMUM_LEASE_DURATION_MS) {
+        throw new OperateError('E_OPERATE_STATE_INVALID', `Lock lease must be ${MINIMUM_LEASE_DURATION_MS}-${MAXIMUM_LEASE_DURATION_MS}ms.`);
+    }
+}
+async function writeRecord(handle, record) {
+    const bytes = Buffer.from(`${canonicalize(record)}\n`);
+    await handle.truncate(0);
+    await handle.write(bytes, 0, bytes.length, 0);
+    await handle.sync();
+}
+function processIsAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+/**
+ * Returns null where the platform offers no `ps` — notably Windows. Callers
+ * treat a null identity as "cannot corroborate", so lock ownership falls back
+ * to the lease and heartbeat rather than to a fabricated identity.
+ */
+export async function readProcessStartIdentity(pid) {
+    try {
+        const { stdout } = await execFileAsync('ps', ['-o', 'lstart=', '-p', String(pid)], {
+            env: minimalSubprocessEnvironment({ LANG: 'C', LC_ALL: 'C' }),
+            timeout: 2_000,
+            maxBuffer: 4096,
+        });
+        const identity = stdout.trim().replace(/\s+/g, ' ');
+        return identity || null;
+    }
+    catch {
+        return null;
+    }
+}
+function headsEqual(left, right) {
+    return left.sequence === right.sequence && left.hash === right.hash;
+}
+function assertHead(expected, current) {
+    if (!headsEqual(expected, current)) {
+        throw new OperateError('E_OPERATE_ROUTE_DRIFT', 'The operating event head changed after preview.', { expected, actual: current });
+    }
+}
+export async function readOperatingLock(lockPath) {
+    const record = JSON.parse(await readFile(lockPath, 'utf8'));
+    if (typeof record.projectKey !== 'string' ||
+        typeof record.nonce !== 'string' ||
+        record.nonce.length < 32 ||
+        !Number.isInteger(record.pid) ||
+        typeof record.host !== 'string' ||
+        typeof record.processStartedAt !== 'string' ||
+        typeof record.heartbeatAt !== 'string' ||
+        !Number.isFinite(Date.parse(record.leaseExpiresAt)) ||
+        !Number.isInteger(record.leaseDurationMs) ||
+        !record.expectedEventHead ||
+        !Number.isInteger(record.expectedEventHead.sequence)) {
+        throw new OperateError('E_OPERATE_STATE_INVALID', 'Operating lock is malformed.');
+    }
+    assertLeaseDuration(record.leaseDurationMs);
+    return record;
+}
+export async function acquireOperatingLock(projectRoot, options) {
+    assertHead(options.expectedEventHead, options.currentEventHead);
+    const paths = resolveOperatingPaths(projectRoot, { localRoot: options.localRoot });
+    await mkdir(paths.locks, { recursive: true, mode: 0o700 });
+    const lockPath = path.join(paths.locks, `${options.name ?? 'project'}.lock`);
+    const now = options.now ?? new Date();
+    const leaseDurationMs = options.leaseDurationMs ?? DEFAULT_LEASE_DURATION_MS;
+    assertLeaseDuration(leaseDurationMs);
+    const processIdentity = (await readProcessStartIdentity(process.pid)) ??
+        `unverified-self:${new Date(now.getTime() - process.uptime() * 1000).toISOString()}`;
+    const record = {
+        projectKey: options.projectKey,
+        nonce: randomBytes(32).toString('base64url'),
+        pid: process.pid,
+        host: hostname(),
+        processStartedAt: processIdentity,
+        createdAt: now.toISOString(),
+        heartbeatAt: now.toISOString(),
+        leaseDurationMs,
+        leaseExpiresAt: new Date(now.getTime() + leaseDurationMs).toISOString(),
+        expectedEventHead: structuredClone(options.expectedEventHead),
+    };
+    let handle;
+    try {
+        handle = await open(lockPath, 'wx', 0o600);
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        const owner = await readOperatingLock(lockPath).catch(() => undefined);
+        throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Another operating run owns the project.', {
+            owner,
+        });
+    }
+    await writeRecord(handle, record);
+    let released = false;
+    const verifyOwnership = async () => {
+        const current = await readOperatingLock(lockPath);
+        if (current.nonce !== record.nonce ||
+            current.pid !== record.pid ||
+            current.host !== record.host ||
+            current.processStartedAt !== record.processStartedAt) {
+            throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Operating lock ownership changed.');
+        }
+    };
+    return {
+        record,
+        path: lockPath,
+        assertEventHead(currentEventHead) {
+            assertHead(record.expectedEventHead, currentEventHead);
+        },
+        async advanceEventHead(currentEventHead, nextEventHead) {
+            if (released) {
+                throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Cannot advance a released lock.');
+            }
+            assertHead(record.expectedEventHead, currentEventHead);
+            await verifyOwnership();
+            record.expectedEventHead = structuredClone(nextEventHead);
+            await writeRecord(handle, record);
+        },
+        async heartbeat(currentEventHead, heartbeatNow = new Date()) {
+            if (released) {
+                throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Cannot heartbeat a released lock.');
+            }
+            assertHead(record.expectedEventHead, currentEventHead);
+            await verifyOwnership();
+            if (heartbeatNow.getTime() > Date.parse(record.leaseExpiresAt)) {
+                throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Operating lock lease expired before heartbeat.');
+            }
+            record.heartbeatAt = heartbeatNow.toISOString();
+            record.leaseExpiresAt = new Date(heartbeatNow.getTime() + record.leaseDurationMs).toISOString();
+            await writeRecord(handle, record);
+        },
+        async release() {
+            if (released)
+                return;
+            await verifyOwnership();
+            released = true;
+            await handle.close();
+            await unlink(lockPath);
+        },
+    };
+}
+export async function recoverStaleOperatingLock(projectRoot, options) {
+    const lockPath = path.join(resolveOperatingPaths(projectRoot, { localRoot: options.localRoot }).locks, `${options.name ?? 'project'}.lock`);
+    const record = await readOperatingLock(lockPath);
+    const now = options.now ?? new Date();
+    if (record.projectKey !== options.projectKey ||
+        record.nonce !== options.expectedNonce ||
+        (options.expectedProcessStartedAt &&
+            record.processStartedAt !== options.expectedProcessStartedAt)) {
+        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'The lock changed after stale-lock preview.');
+    }
+    if (record.host !== hostname()) {
+        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'Cross-host locks require manual owner verification and are never auto-removed.');
+    }
+    if (now.getTime() <= Date.parse(record.leaseExpiresAt)) {
+        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'The operating lease is active.');
+    }
+    if (processIsAlive(record.pid)) {
+        const liveIdentity = await (options.processIdentityReader ?? readProcessStartIdentity)(record.pid);
+        if (!liveIdentity || liveIdentity === record.processStartedAt) {
+            throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', liveIdentity
+                ? 'The lock owner process is still alive.'
+                : 'The live process start identity cannot be proven; refusing automatic recovery.');
+        }
+        // A different start identity proves PID reuse; the expired lease is stale.
+    }
+    const rechecked = await readOperatingLock(lockPath);
+    if (rechecked.nonce !== options.expectedNonce ||
+        rechecked.processStartedAt !== record.processStartedAt ||
+        rechecked.heartbeatAt !== record.heartbeatAt ||
+        rechecked.leaseExpiresAt !== record.leaseExpiresAt) {
+        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'The lock changed immediately before recovery.');
+    }
+    await unlink(lockPath);
+}
+export async function withOperatingLock(projectRoot, options, operation) {
+    const lock = await acquireOperatingLock(projectRoot, options);
+    try {
+        return await operation(lock);
+    }
+    finally {
+        await lock.release();
+    }
+}
+//# sourceMappingURL=lock-service.js.map

package/dist/services/operate/lock-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-service.js","sourceRoot":"","sources":["../../../src/services/operate/lock-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAqD,MAAM,YAAY,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAwB7C,SAAS,mBAAmB,CAAC,KAAa;IACxC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,GAAG,yBAAyB;QACjC,KAAK,GAAG,yBAAyB,EACjC,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,sBAAsB,yBAAyB,IAAI,yBAAyB,KAAK,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,MAA2B;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;YACjF,GAAG,EAAE,4BAA4B,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC7D,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,QAAQ,IAAI,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,KAAyB;IACrE,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,QAA4B,EAAE,OAA2B;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,iDAAiD,EACjD,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAC;IACnF,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;QACxB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QAC3C,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC;QACzC,CAAC,MAAM,CAAC,iBAAiB;QACzB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;IACpF,CAAC;IACD,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,OAA2B;IAE3B,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,OAAO,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAC7E,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,eAAe,GACnB,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,mBAAmB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACvF,MAAM,MAAM,GAAwB;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,QAAQ,EAAE;QAChB,gBAAgB,EAAE,eAAe;QACjC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,eAAe;QACf,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,WAAW,EAAE;QACvE,iBAAiB,EAAE,eAAe,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC9D,CAAC;IAEF,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,yCAAyC,EAAE;YAC1F,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,eAAe,GAAG,KAAK,IAAmB,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClD,IACE,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAC9B,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC5B,OAAO,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,EACpD,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,IAAI,EAAE,QAAQ;QACd,eAAe,CAAC,gBAAgB;YAC9B,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,aAAa;YACpD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,iCAAiC,CAAC,CAAC;YACtF,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YACvD,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,CAAC,iBAAiB,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,YAAY,GAAG,IAAI,IAAI,EAAE;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;YACxF,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YACvD,MAAM,eAAe,EAAE,CAAC;YACxB,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,gDAAgD,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,CAAC,cAAc,GAAG,IAAI,IAAI,CAC9B,YAAY,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,eAAe,CAChD,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,OAAO;YACX,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,eAAe,EAAE,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,OAQC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAC1E,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,OAAO,CACpC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,IACE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;QACxC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa;QACtC,CAAC,OAAO,CAAC,wBAAwB;YAC/B,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,wBAAwB,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,wBAAwB,CAAC,CACpF,MAAM,CAAC,GAAG,CACX,CAAC;QACF,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC9D,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,YAAY;gBACV,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,gFAAgF,CACrF,CAAC;QACJ,CAAC;QACD,2EAA2E;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACpD,IACE,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa;QACzC,SAAS,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;QACtD,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QAC5C,SAAS,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAClD,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,OAA2B,EAC3B,SAA8C;IAE9C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/services/operate/maintenance.d.ts

@@ -0,0 +1,38 @@
+export declare function operatingCacheAction(input: {
+    projectRoot: string;
+    action: 'status' | 'purge';
+    confirmed?: boolean;
+    localRoot?: string;
+}): Promise<unknown>;
+export declare function operatingIntegrityAction(input: {
+    projectRoot: string;
+    action: 'status' | 'enable';
+    confirmed?: boolean;
+    localRoot?: string;
+}): Promise<unknown>;
+export declare function exportOperatingDiagnostics(input: {
+    projectRoot: string;
+    output?: string;
+    localRoot?: string;
+}): Promise<{
+    path: string;
+    digest: `sha256:${string}`;
+}>;
+export declare function repairOperatingSecurity(input: {
+    projectRoot: string;
+    confirmed: boolean;
+    localRoot?: string;
+    faultInjector?: (boundary: 'project-quarantined') => void | Promise<void>;
+}): Promise<unknown>;
+export declare function operateAdapterLifecycle(input: {
+    projectRoot: string;
+    action: 'prepare' | 'record' | 'resume' | 'finalize' | 'cancel';
+    cycleId?: string;
+    evidenceDigest?: string;
+    lease?: string;
+    idempotencyKey?: string;
+    role?: string;
+    stdin?: string;
+    localRoot?: string;
+}): Promise<unknown>;
+//# sourceMappingURL=maintenance.d.ts.map

package/dist/services/operate/maintenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../../src/services/operate/maintenance.ts"],"names":[],"mappings":"AA0GA,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBnB;AA2BD,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,OAAO,CAAC,CAqEnB;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAA;CAAE,CAAC,CAiCxD;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,GAAG,OAAO,CAAC,OAAO,CAAC,CA4RnB;AAkGD,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,OAAO,CAAC,CA8SnB"}