openplanr 1.25.2 → 2.0.0

package/dist/services/operate/lock-service.d.ts

@@ -1,37 +0,0 @@
-import { type OperatingEventHead, type OperatingLockRecord } from './types.js';
-export interface OperatingLock {
-    readonly record: OperatingLockRecord;
-    readonly path: string;
-    assertEventHead(currentEventHead: OperatingEventHead): void;
-    advanceEventHead(currentEventHead: OperatingEventHead, nextEventHead: OperatingEventHead): Promise<void>;
-    heartbeat(currentEventHead: OperatingEventHead, now?: Date): Promise<void>;
-    release(): Promise<void>;
-}
-export interface AcquireLockOptions {
-    projectKey: string;
-    name?: string;
-    now?: Date;
-    leaseDurationMs?: number;
-    expectedEventHead: OperatingEventHead;
-    currentEventHead: OperatingEventHead;
-    localRoot?: string;
-}
-/**
- * Returns null where the platform offers no `ps` — notably Windows. Callers
- * treat a null identity as "cannot corroborate", so lock ownership falls back
- * to the lease and heartbeat rather than to a fabricated identity.
- */
-export declare function readProcessStartIdentity(pid: number): Promise<string | null>;
-export declare function readOperatingLock(lockPath: string): Promise<OperatingLockRecord>;
-export declare function acquireOperatingLock(projectRoot: string, options: AcquireLockOptions): Promise<OperatingLock>;
-export declare function recoverStaleOperatingLock(projectRoot: string, options: {
-    projectKey: string;
-    name?: string;
-    expectedNonce: string;
-    expectedProcessStartedAt?: string;
-    now?: Date;
-    localRoot?: string;
-    processIdentityReader?: (pid: number) => Promise<string | null>;
-}): Promise<void>;
-export declare function withOperatingLock<T>(projectRoot: string, options: AcquireLockOptions, operation: (lock: OperatingLock) => Promise<T>): Promise<T>;
-//# sourceMappingURL=lock-service.d.ts.map

package/dist/services/operate/lock-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lock-service.d.ts","sourceRoot":"","sources":["../../../src/services/operate/lock-service.ts"],"names":[],"mappings":"AASA,OAAO,EAAgB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAQ7F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5D,gBAAgB,CACd,gBAAgB,EAAE,kBAAkB,EACpC,aAAa,EAAE,kBAAkB,GAChC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,SAAS,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,gBAAgB,EAAE,kBAAkB,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA+BD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYlF;AAgBD,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmBtF;AAED,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAgGxB;AAED,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACjE,GACA,OAAO,CAAC,IAAI,CAAC,CAsDf;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC7C,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/dist/services/operate/lock-service.js

@@ -1,215 +0,0 @@
-import { execFile } from 'node:child_process';
-import { randomBytes } from 'node:crypto';
-import { mkdir, open, readFile, unlink } from 'node:fs/promises';
-import { hostname } from 'node:os';
-import path from 'node:path';
-import { promisify } from 'node:util';
-import { canonicalize } from './canonical.js';
-import { minimalSubprocessEnvironment } from './subprocess-env.js';
-import { OperateError } from './types.js';
-import { resolveOperatingPaths } from './workspace.js';
-const execFileAsync = promisify(execFile);
-const DEFAULT_LEASE_DURATION_MS = 30_000;
-const MINIMUM_LEASE_DURATION_MS = 5_000;
-const MAXIMUM_LEASE_DURATION_MS = 5 * 60_000;
-function assertLeaseDuration(value) {
-    if (!Number.isInteger(value) ||
-        value < MINIMUM_LEASE_DURATION_MS ||
-        value > MAXIMUM_LEASE_DURATION_MS) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', `Lock lease must be ${MINIMUM_LEASE_DURATION_MS}-${MAXIMUM_LEASE_DURATION_MS}ms.`);
-    }
-}
-async function writeRecord(handle, record) {
-    const bytes = Buffer.from(`${canonicalize(record)}\n`);
-    await handle.truncate(0);
-    await handle.write(bytes, 0, bytes.length, 0);
-    await handle.sync();
-}
-function processIsAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return error.code === 'EPERM';
-    }
-}
-/**
- * Returns null where the platform offers no `ps` — notably Windows. Callers
- * treat a null identity as "cannot corroborate", so lock ownership falls back
- * to the lease and heartbeat rather than to a fabricated identity.
- */
-export async function readProcessStartIdentity(pid) {
-    try {
-        const { stdout } = await execFileAsync('ps', ['-o', 'lstart=', '-p', String(pid)], {
-            env: minimalSubprocessEnvironment({ LANG: 'C', LC_ALL: 'C' }),
-            timeout: 2_000,
-            maxBuffer: 4096,
-        });
-        const identity = stdout.trim().replace(/\s+/g, ' ');
-        return identity || null;
-    }
-    catch {
-        return null;
-    }
-}
-function headsEqual(left, right) {
-    return left.sequence === right.sequence && left.hash === right.hash;
-}
-function assertHead(expected, current) {
-    if (!headsEqual(expected, current)) {
-        throw new OperateError('E_OPERATE_ROUTE_DRIFT', 'The operating event head changed after preview.', { expected, actual: current });
-    }
-}
-export async function readOperatingLock(lockPath) {
-    const record = JSON.parse(await readFile(lockPath, 'utf8'));
-    if (typeof record.projectKey !== 'string' ||
-        typeof record.nonce !== 'string' ||
-        record.nonce.length < 32 ||
-        !Number.isInteger(record.pid) ||
-        typeof record.host !== 'string' ||
-        typeof record.processStartedAt !== 'string' ||
-        typeof record.heartbeatAt !== 'string' ||
-        !Number.isFinite(Date.parse(record.leaseExpiresAt)) ||
-        !Number.isInteger(record.leaseDurationMs) ||
-        !record.expectedEventHead ||
-        !Number.isInteger(record.expectedEventHead.sequence)) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', 'Operating lock is malformed.');
-    }
-    assertLeaseDuration(record.leaseDurationMs);
-    return record;
-}
-export async function acquireOperatingLock(projectRoot, options) {
-    assertHead(options.expectedEventHead, options.currentEventHead);
-    const paths = resolveOperatingPaths(projectRoot, { localRoot: options.localRoot });
-    await mkdir(paths.locks, { recursive: true, mode: 0o700 });
-    const lockPath = path.join(paths.locks, `${options.name ?? 'project'}.lock`);
-    const now = options.now ?? new Date();
-    const leaseDurationMs = options.leaseDurationMs ?? DEFAULT_LEASE_DURATION_MS;
-    assertLeaseDuration(leaseDurationMs);
-    const processIdentity = (await readProcessStartIdentity(process.pid)) ??
-        `unverified-self:${new Date(now.getTime() - process.uptime() * 1000).toISOString()}`;
-    const record = {
-        projectKey: options.projectKey,
-        nonce: randomBytes(32).toString('base64url'),
-        pid: process.pid,
-        host: hostname(),
-        processStartedAt: processIdentity,
-        createdAt: now.toISOString(),
-        heartbeatAt: now.toISOString(),
-        leaseDurationMs,
-        leaseExpiresAt: new Date(now.getTime() + leaseDurationMs).toISOString(),
-        expectedEventHead: structuredClone(options.expectedEventHead),
-    };
-    let handle;
-    try {
-        handle = await open(lockPath, 'wx', 0o600);
-    }
-    catch (error) {
-        if (error.code !== 'EEXIST')
-            throw error;
-        const owner = await readOperatingLock(lockPath).catch(() => undefined);
-        throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Another operating run owns the project.', {
-            owner,
-        });
-    }
-    try {
-        await writeRecord(handle, record);
-    }
-    catch (error) {
-        await handle.close().catch(() => undefined);
-        await unlink(lockPath).catch(() => undefined);
-        throw error;
-    }
-    let released = false;
-    const verifyOwnership = async () => {
-        const current = await readOperatingLock(lockPath);
-        if (current.nonce !== record.nonce ||
-            current.pid !== record.pid ||
-            current.host !== record.host ||
-            current.processStartedAt !== record.processStartedAt) {
-            throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Operating lock ownership changed.');
-        }
-    };
-    return {
-        record,
-        path: lockPath,
-        assertEventHead(currentEventHead) {
-            assertHead(record.expectedEventHead, currentEventHead);
-        },
-        async advanceEventHead(currentEventHead, nextEventHead) {
-            if (released) {
-                throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Cannot advance a released lock.');
-            }
-            assertHead(record.expectedEventHead, currentEventHead);
-            await verifyOwnership();
-            record.expectedEventHead = structuredClone(nextEventHead);
-            await writeRecord(handle, record);
-        },
-        async heartbeat(currentEventHead, heartbeatNow = new Date()) {
-            if (released) {
-                throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Cannot heartbeat a released lock.');
-            }
-            assertHead(record.expectedEventHead, currentEventHead);
-            await verifyOwnership();
-            if (heartbeatNow.getTime() > Date.parse(record.leaseExpiresAt)) {
-                throw new OperateError('E_OPERATE_CYCLE_ACTIVE', 'Operating lock lease expired before heartbeat.');
-            }
-            record.heartbeatAt = heartbeatNow.toISOString();
-            record.leaseExpiresAt = new Date(heartbeatNow.getTime() + record.leaseDurationMs).toISOString();
-            await writeRecord(handle, record);
-        },
-        async release() {
-            if (released)
-                return;
-            await verifyOwnership();
-            released = true;
-            await handle.close();
-            await unlink(lockPath);
-        },
-    };
-}
-export async function recoverStaleOperatingLock(projectRoot, options) {
-    const lockPath = path.join(resolveOperatingPaths(projectRoot, { localRoot: options.localRoot }).locks, `${options.name ?? 'project'}.lock`);
-    const record = await readOperatingLock(lockPath);
-    const now = options.now ?? new Date();
-    if (record.projectKey !== options.projectKey ||
-        record.nonce !== options.expectedNonce ||
-        (options.expectedProcessStartedAt &&
-            record.processStartedAt !== options.expectedProcessStartedAt)) {
-        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'The lock changed after stale-lock preview.');
-    }
-    if (record.host !== hostname()) {
-        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'Cross-host locks require manual owner verification and are never auto-removed.');
-    }
-    if (now.getTime() <= Date.parse(record.leaseExpiresAt)) {
-        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'The operating lease is active.');
-    }
-    if (processIsAlive(record.pid)) {
-        const liveIdentity = await (options.processIdentityReader ?? readProcessStartIdentity)(record.pid);
-        if (!liveIdentity || liveIdentity === record.processStartedAt) {
-            throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', liveIdentity
-                ? 'The lock owner process is still alive.'
-                : 'The live process start identity cannot be proven; refusing automatic recovery.');
-        }
-        // A different start identity proves PID reuse; the expired lease is stale.
-    }
-    const rechecked = await readOperatingLock(lockPath);
-    if (rechecked.nonce !== options.expectedNonce ||
-        rechecked.processStartedAt !== record.processStartedAt ||
-        rechecked.heartbeatAt !== record.heartbeatAt ||
-        rechecked.leaseExpiresAt !== record.leaseExpiresAt) {
-        throw new OperateError('E_OPERATE_STALE_LOCK_UNSAFE', 'The lock changed immediately before recovery.');
-    }
-    await unlink(lockPath);
-}
-export async function withOperatingLock(projectRoot, options, operation) {
-    const lock = await acquireOperatingLock(projectRoot, options);
-    try {
-        return await operation(lock);
-    }
-    finally {
-        await lock.release();
-    }
-}
-//# sourceMappingURL=lock-service.js.map

package/dist/services/operate/lock-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lock-service.js","sourceRoot":"","sources":["../../../src/services/operate/lock-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAqD,MAAM,YAAY,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAwB7C,SAAS,mBAAmB,CAAC,KAAa;IACxC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,GAAG,yBAAyB;QACjC,KAAK,GAAG,yBAAyB,EACjC,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,sBAAsB,yBAAyB,IAAI,yBAAyB,KAAK,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,MAA2B;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;YACjF,GAAG,EAAE,4BAA4B,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC7D,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,QAAQ,IAAI,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,KAAyB;IACrE,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,QAA4B,EAAE,OAA2B;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,iDAAiD,EACjD,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAC;IACnF,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;QACxB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QAC3C,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC;QACzC,CAAC,MAAM,CAAC,iBAAiB;QACzB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;IACpF,CAAC;IACD,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,OAA2B;IAE3B,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,OAAO,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAC7E,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,eAAe,GACnB,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,mBAAmB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACvF,MAAM,MAAM,GAAwB;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,QAAQ,EAAE;QAChB,gBAAgB,EAAE,eAAe;QACjC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,eAAe;QACf,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,WAAW,EAAE;QACvE,iBAAiB,EAAE,eAAe,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC9D,CAAC;IAEF,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,yCAAyC,EAAE;YAC1F,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,eAAe,GAAG,KAAK,IAAmB,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClD,IACE,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAC9B,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC5B,OAAO,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,EACpD,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,IAAI,EAAE,QAAQ;QACd,eAAe,CAAC,gBAAgB;YAC9B,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,aAAa;YACpD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,iCAAiC,CAAC,CAAC;YACtF,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YACvD,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,CAAC,iBAAiB,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,YAAY,GAAG,IAAI,IAAI,EAAE;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;YACxF,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;YACvD,MAAM,eAAe,EAAE,CAAC;YACxB,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,gDAAgD,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,CAAC,cAAc,GAAG,IAAI,IAAI,CAC9B,YAAY,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,eAAe,CAChD,CAAC,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,OAAO;YACX,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,eAAe,EAAE,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,OAQC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAC1E,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,OAAO,CACpC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,IACE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;QACxC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa;QACtC,CAAC,OAAO,CAAC,wBAAwB;YAC/B,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,wBAAwB,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,wBAAwB,CAAC,CACpF,MAAM,CAAC,GAAG,CACX,CAAC;QACF,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC9D,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,YAAY;gBACV,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,gFAAgF,CACrF,CAAC;QACJ,CAAC;QACD,2EAA2E;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACpD,IACE,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa;QACzC,SAAS,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;QACtD,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QAC5C,SAAS,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAClD,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,OAA2B,EAC3B,SAA8C;IAE9C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/services/operate/maintenance.d.ts

@@ -1,139 +0,0 @@
-import { type AgentNativeAdvisorResponse } from './advisors.js';
-import { OperatingEventStore } from './event-store.js';
-import { type OperatingAdapterHandoff, type OperatingRoleResult } from './types.js';
-/**
- * FR4: purge the board's machine-local advisor sessions (`<localRoot>/advisors/`)
- * and incremental evidence baselines (`<localRoot>/evidence/incremental/`). A
- * committed `operate init` apply calls this so a board re-inited at the same path
- * never inherits a prior generation's sessions or cached baselines, and
- * `operate cache purge` calls it so the doctor's staleness diagnostics have a
- * scoped fix command. Both surfaces are rebuildable machine-local caches, never
- * committed protocol artifacts.
- */
-export declare function purgeBoardMachineLocalCaches(input: {
-    projectRoot: string;
-    localRoot?: string;
-}): Promise<{
-    removedAdvisorSessions: number;
-    removedIncrementalBaselines: number;
-}>;
-/**
- * FR7 (T-006): sibling machine-local cleanup for OpenPlanr-owned scratch left
- * behind by a session that never finalized. Deliberately NOT folded into
- * `purgeBoardMachineLocalCaches` — scratch has its own narrower per-cycle
- * lifecycle. Removes ONLY scratch a valid `openplanr-operate-scratch` manifest
- * confirms this project wrote and whose lease window has lapsed; it never touches
- * an unowned file found under the scratch root, nor any other machine-local
- * cache. This is the owned-only removal the doctor's abandoned-scratch diagnostic
- * points at, and the sibling `operate cache purge` invokes.
- */
-export declare function purgeAbandonedOperatingScratch(input: {
-    projectRoot: string;
-    localRoot?: string;
-    now?: () => Date;
-}): Promise<{
-    removed: number;
-    cycles: string[];
-}>;
-export declare function operatingCacheAction(input: {
-    projectRoot: string;
-    action: 'status' | 'purge';
-    confirmed?: boolean;
-    localRoot?: string;
-}): Promise<unknown>;
-export declare function operatingIntegrityAction(input: {
-    projectRoot: string;
-    action: 'status' | 'enable';
-    confirmed?: boolean;
-    localRoot?: string;
-}): Promise<unknown>;
-export declare function exportOperatingDiagnostics(input: {
-    projectRoot: string;
-    output?: string;
-    localRoot?: string;
-}): Promise<{
-    path: string;
-    digest: `sha256:${string}`;
-}>;
-export declare function repairOperatingSecurity(input: {
-    projectRoot: string;
-    confirmed: boolean;
-    localRoot?: string;
-    faultInjector?: (boundary: 'project-quarantined') => void | Promise<void>;
-}): Promise<unknown>;
-export declare function readPersistedOperatingRoleResults(store: OperatingEventStore, cycleId: string): Promise<OperatingRoleResult[]>;
-/** Read the rich Protocol v1.4 analysis sidecars associated with advisor events. */
-export declare function readPersistedOperatingAdvisorReports(store: OperatingEventStore, cycleId: string): Promise<Map<string, AgentNativeAdvisorResponse>>;
-export declare function createOperatingAdapterStartHandoff(input: {
-    projectRoot: string;
-    cycleId: string;
-    evidenceDigest: `sha256:${string}`;
-    runtime: string;
-    phase: 'advisors' | 'chair';
-    roles: string[];
-    localRoot?: string;
-}): Promise<OperatingAdapterHandoff>;
-export declare function operateAdapterLifecycle(input: {
-    projectRoot: string;
-    action: 'prepare' | 'record' | 'validate' | 'resume' | 'finalize' | 'cancel' | 'heartbeat' | 'abandon';
-    cycleId?: string;
-    evidenceDigest?: string;
-    lease?: string;
-    idempotencyKey?: string;
-    role?: string;
-    stdin?: string;
-    /**
-     * SPEC-005 T-020: the governed reason a lens is abandoned terminal
-     * `not_evaluated`. Required for `action: 'abandon'`; unused otherwise.
-     */
-    reason?: string;
-    localRoot?: string;
-    /**
-     * Injectable clock (FR10 / T-008). Defaults to wall-clock. Tests supply a
-     * deterministic clock to prove the lease refreshes forward on `record` and that
-     * expiry is still enforced once the refreshed window lapses.
-     */
-    now?: () => Date;
-}): Promise<unknown>;
-/**
- * SPEC-005 T-020 (FR13) — the OPERATOR escape, independent of a well-behaved
- * runtime. When a runtime dispatched a lens and then reported nothing at all — it
- * crashed, or does not implement `harness abandon` — the cycle is stranded at
- * `phase: advisors` on every continuation: the stalled lens is never recorded, so
- * it stays runnable-and-required and Chair is never assembled. The only prior
- * recourse was `cycles cancel`, which discards the whole cycle including the
- * siblings that DID record.
- *
- * This governed escape reaches a reviewable cycle without discarding it. It is
- * gated on a LAPSED lease — the legitimate signal that no runtime is actively
- * working the session — and an explicit operator confirmation. It never touches
- * the runtime lifecycle (`harness abandon`/`record`/`finalize`), so it works when
- * the runtime is gone. For each still-unrecorded advisor lens it commits the SAME
- * governed terminal `not_evaluated` gap the runtime path commits
- * (`governTerminalNotEvaluated`), so the next `run` continuation reconstructs the
- * lens `not_evaluated` from committed state and consolidation proceeds. Recorded
- * siblings are never read, re-dispatched, or altered. It fabricates nothing.
- *
- * It does not itself run consolidation — the operator reaches `reviewable` with a
- * following `planr operate run` (offline when no runtime is available), so the
- * choice of a real or offline Chair stays the operator's.
- */
-export declare function reapStalledOperatingRoles(input: {
-    projectRoot: string;
-    cycleId: string;
-    role?: string;
-    reason?: string;
-    confirmed?: boolean;
-    localRoot?: string;
-    now?: () => Date;
-}): Promise<{
-    cycleId: string;
-    reaped: Array<{
-        roleId: string;
-        reason: string;
-        gapId: string;
-    }>;
-    alreadyRecorded: string[];
-    next: string[];
-}>;
-//# sourceMappingURL=maintenance.d.ts.map

package/dist/services/operate/maintenance.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../../src/services/operate/maintenance.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,KAAK,0BAA0B,EAUhC,MAAM,eAAe,CAAC;AAMvB,OAAO,EAAE,mBAAmB,EAAsB,MAAM,kBAAkB,CAAC;AAa3E,OAAO,EAKL,KAAK,uBAAuB,EAM5B,KAAK,mBAAmB,EAEzB,MAAM,YAAY,CAAC;AAqJpB;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,sBAAsB,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,CAAA;CAAE,CAAC,CAOnF;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAWjD;AAmjBD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyDnB;AAmCD,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,OAAO,CAAC,CAqEnB;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAA;CAAE,CAAC,CAiCxD;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,GAAG,OAAO,CAAC,OAAO,CAAC,CA4RnB;AAsCD,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAyBhC;AAED,oFAAoF;AACpF,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CA2BlD;AA4MD,wBAAsB,kCAAkC,CAAC,KAAK,EAAE;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,UAAU,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAiDnC;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EACF,SAAS,GACT,QAAQ,GACR,UAAU,GACV,QAAQ,GACR,UAAU,GACV,QAAQ,GACR,WAAW,GACX,SAAS,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAqkCnB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC,CAwGD"}