opensip-cli 0.1.8 → 0.1.9

package/dist/bootstrap/dispatch-fork-core.js

@@ -0,0 +1,214 @@
+/**
+ * dispatch-fork-core — the shared fork + IPC settle + host-RPC supervisor for the
+ * ADR-0054 out-of-process external-tool worker (increments M4-C / M4-D / M4-F).
+ *
+ * Both supervisors fork the SAME internal `__tool-command-worker` subcommand and
+ * settle on the SAME `ToolCommandResult` shape:
+ *   - `dispatch-external-tool-command.ts` runs an external tool's COMMAND;
+ *   - `dispatch-external-tool-hook.ts` (M4-F) runs an external tool's LIFECYCLE
+ *     HOOK (`collectReportData` / `sessionReplay`).
+ *
+ * They differ only in the {@link ToolCommandWorkerSpec} they marshal (a
+ * `commandName` vs a `hook`) and how they replay the result. This module owns the
+ * common machinery so neither duplicates it: marshal the spec to a temp file,
+ * fork the CLI binary as the worker subcommand (full bootstrap re-runs
+ * worker-local), enforce a wall-clock timeout, serve mid-run host-RPC upcalls
+ * against the REAL host `ToolCliContext`, and resolve the worker's
+ * {@link ToolCommandResult} (or reject with a structured {@link ToolError}).
+ *
+ * The host remains the ONLY process that performs the privileged effect; a worker
+ * fault (throw / `process.exit` / crash / timeout / fork failure) becomes a
+ * structured parent-side {@link ToolError} — the host never crashes and external
+ * runtime NEVER falls back to in-host execution (ADR-0054 trust tier).
+ */
+import { fork } from 'node:child_process';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { ConfigurationError, currentScope, SystemError, } from '@opensip-cli/core';
+import { BOOTSTRAP_MODULE } from './constants.js';
+import { handleHostRpc } from './dispatch-host-rpc-handler.js';
+import { IN_TOOL_WORKER_ENV } from './tool-provenance.js';
+/** Default supervisor wall-clock timeout for one forked worker run (ms). */
+export const DEFAULT_DISPATCH_TIMEOUT_MS = 120_000;
+/** The internal worker subcommand the supervisor forks the CLI binary into. */
+export const WORKER_SUBCOMMAND = '__tool-command-worker';
+/** Resolve the package dir for an external tool, or fail with a structured error. */
+export function requirePackageDir(provenance) {
+    const dir = provenance.resolvedPath;
+    if (dir === undefined || dir.length === 0) {
+        throw new SystemError(`external tool '${provenance.id}' has no resolved package path to dispatch from`, { code: 'SYSTEM.DISPATCH.NO_PACKAGE_DIR' });
+    }
+    return dir;
+}
+/**
+ * Marshal a worker spec to a temp file, fork the worker, enforce the timeout, and
+ * resolve the worker's {@link ToolCommandResult}. The temp dir is always cleaned
+ * up. `cliScript` defaults to the running CLI entry; tests point it at the dist
+ * entry. `cwd` defaults to the spec's `opts.cwd` (or `process.cwd()`).
+ */
+export async function runWorkerSpec(args) {
+    const dir = mkdtempSync(join(tmpdir(), 'opensip-tool-dispatch-'));
+    const specPath = join(dir, 'spec.json');
+    writeFileSync(specPath, JSON.stringify(args.spec), 'utf8');
+    const cliScript = args.cliScript ?? process.argv[1] ?? '';
+    const timeoutMs = args.timeoutMs ?? DEFAULT_DISPATCH_TIMEOUT_MS;
+    try {
+        return await forkAndAwait(cliScript, specPath, args.cwd, args.spec, timeoutMs, args.ctx);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+/**
+ * The low-level fork + IPC settle. Mirrors the shared subprocess transport's
+ * single-settle / kill-on-settle discipline, but adds a supervisor timeout, the
+ * M4-C host-RPC reply channel, and binds the COMMAND result/error shapes. Kept
+ * self-contained (not routed through `createSubprocessProgressRun`) because this
+ * path needs the rpc-reply direction (`child.send`) the fire-and-forget transport
+ * does not have, plus an owned timeout + correlation env injection symmetric to
+ * the transport.
+ *
+ * The wall-clock timeout is a HARD cap on the WHOLE run (resource control,
+ * ADR-0054 Consequences) — it is deliberately NOT reset on each RPC, so a runaway
+ * upcall loop is still SIGKILLed rather than extending the budget indefinitely.
+ */
+function forkAndAwait(cliScript, specPath, cwd, spec, timeoutMs, ctx) {
+    return new Promise((resolve, reject) => {
+        const runId = currentScope()?.runId;
+        // ADR-0054 M4-F: the child IS the isolation boundary. OPENSIP_CLI_IN_TOOL_WORKER
+        // tells the worker bootstrap to RUN the dispatched external tool's lifecycle
+        // hooks worker-local (the host-skip is disabled there). OPENSIP_RUN_ID stitches
+        // the worker's logs to the parent run. fork() with `env` set REPLACES the child
+        // env, so the parent env is spread in first to preserve PATH/HOME/etc.
+        // @fitness-ignore-next-line env-secret-exposure -- spreading process.env preserves PATH/HOME for the child; only OPENSIP_RUN_ID (no secret) + the OPENSIP_CLI_IN_TOOL_WORKER marker are added; this object is passed to fork, never logged (parity with subprocess-transport's childEnv).
+        const childEnv = { ...process.env, [IN_TOOL_WORKER_ENV]: '1' };
+        if (runId !== undefined && runId.length > 0)
+            childEnv.OPENSIP_RUN_ID = runId;
+        // Fork the CLI binary into the internal worker subcommand. The full bootstrap
+        // (preAction) re-builds the per-run scope in the worker before the worker
+        // handler runs.
+        //
+        // `cwd` is set on the CHILD PROCESS (not only passed as `--cwd`): the CLI
+        // bootstrap anchors TOOL DISCOVERY on `process.cwd()`, while the `--cwd` flag
+        // only steers later PROJECT resolution in the pre-action hook. Pinning the
+        // child cwd to the same project keeps discovery and project resolution
+        // coherent — the worker bootstraps exactly as an in-project invocation would.
+        const child = fork(cliScript, [WORKER_SUBCOMMAND, specPath, '--cwd', cwd], {
+            cwd,
+            stdio: ['ignore', 'ignore', 'inherit', 'ipc'],
+            serialization: 'advanced',
+            env: childEnv,
+        });
+        let settled = false;
+        const done = (apply) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            apply();
+            child.kill();
+        };
+        const timer = setTimeout(() => {
+            done(() => {
+                child.kill('SIGKILL');
+                reject(dispatchError(spec, `worker timed out after ${String(timeoutMs)}ms`, 'timeout'));
+            });
+        }, timeoutMs);
+        timer.unref?.();
+        // M4-C: serve one host-RPC upcall against the REAL host ctx and reply. A
+        // host-side fault is folded into a structured `{ ok: false }` reply by
+        // handleHostRpc — never an unhandled host crash. If the child has already
+        // settled (raced a result/exit), the reply is dropped (the worker is gone).
+        const serveRpc = (request) => {
+            void handleHostRpc(request, ctx).then((reply) => {
+                if (!settled)
+                    sendRpcReply(child, reply, spec);
+            });
+        };
+        child.on('message', (msg) => {
+            if (msg.kind === 'progress') {
+                serveRpc(msg.event);
+            }
+            else if (msg.kind === 'result') {
+                done(() => {
+                    resolve(msg.value);
+                });
+            }
+            else {
+                done(() => {
+                    reject(workerErrorToToolError(spec, msg));
+                });
+            }
+        });
+        /* v8 ignore next 16 -- defensive isolation-safety arm: `child.on('error')` fires only on a node-executable SPAWN failure (ENOENT on the runtime, EACCES), which is only reachable via impractical fault injection — node always exists in a normal run, so a bad worker entry surfaces via `child.on('exit')` (the covered sibling arm) instead. ADR-0054 trust tier: an external tool that cannot fork is a HARD error, NEVER an in-host fallback (that would run untrusted code in the kernel process). A future explicitly-named developer override (OPENSIP_CLI_DANGEROUSLY_RUN_EXTERNAL_IN_HOST) is reserved, not built. */
+        child.on('error', (err) => {
+            done(() => {
+                reject(dispatchError(spec, `cannot isolate external tool '${spec.toolId}' (worker fork failed: ${err.message}); ` +
+                    'refusing to run it in-process', 'spawn'));
+            });
+        });
+        child.on('exit', (code) => {
+            done(() => {
+                reject(dispatchError(spec, `worker exited (code ${code ?? 'null'}) before producing a result`, 'exit_nonzero'));
+            });
+        });
+    });
+}
+/**
+ * Post one host-RPC {@link RpcReply} back to the worker, only while the child is
+ * still attached: a settle (result/exit/timeout) kills it, after which
+ * `child.send` would write to a closed channel. The send callback swallows a
+ * racing EPIPE so a reply to a departing worker never surfaces as a spurious
+ * dispatch failure — a dropped reply is logged at debug and otherwise ignored.
+ */
+function sendRpcReply(child, reply, spec) {
+    if (!child.connected)
+        return;
+    child.send(reply, (err) => {
+        if (err === null)
+            return;
+        /* v8 ignore next 6 -- defensive race arm: the channel can close between the `connected` check and the async `child.send` write (the child settled/exited concurrently). The dropped-reply debug log is only reachable via that microtask-level race, not deterministically testable; a dropped reply to a departing worker is harmless (the worker is gone). */
+        currentScope()?.logger.debug({
+            evt: 'cli.tool.dispatch_rpc_reply_dropped',
+            module: BOOTSTRAP_MODULE,
+            toolId: spec.toolId,
+            command: spec.commandName ?? spec.hook ?? 'unknown',
+        });
+    });
+}
+/**
+ * The human label for the dispatched unit — the command name, or (hook mode) the
+ * hook name. A valid spec always names one; the final fallback is defensive.
+ */
+function specLabel(spec) {
+    /* v8 ignore next -- defensive: a valid spec always carries a commandName OR a hook (the worker entry rejects one that has neither as bad-spec); the 'unknown' fallback is structurally unreachable. */
+    return spec.commandName ?? spec.hook ?? 'unknown';
+}
+/** Build a structured supervisor-side dispatch error, logged with its failure class. */
+export function dispatchError(spec, message, failureClass) {
+    const label = specLabel(spec);
+    currentScope()?.logger.error({
+        evt: 'cli.tool.dispatch_failed',
+        module: BOOTSTRAP_MODULE,
+        toolId: spec.toolId,
+        command: label,
+        failureClass,
+    });
+    // ADR-0054 M4-E single config-error contract: a worker DEEP-pass config failure
+    // (`config-invalid`) maps to the SAME typed error + exit code (ConfigurationError
+    // → CONFIGURATION_ERROR, exit 2) the host COARSE pass throws, so the user sees a
+    // consistent "Invalid configuration …" regardless of which pass caught it.
+    if (failureClass === 'config-invalid') {
+        return new ConfigurationError(message, { code: 'CONFIGURATION_ERROR', failureClass });
+    }
+    return new SystemError(`external tool '${spec.toolId}' ${label} failed: ${message}`, {
+        code: 'SYSTEM.DISPATCH.WORKER_FAILED',
+        failureClass,
+    });
+}
+/** Convert a worker `error` IPC message into a logged, structured {@link ToolError}. */
+function workerErrorToToolError(spec, msg) {
+    return dispatchError(spec, msg.message, msg.failureClass ?? 'ipc_error');
+}
+//# sourceMappingURL=dispatch-fork-core.js.map

package/dist/bootstrap/dispatch-fork-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-fork-core.js","sourceRoot":"","sources":["../../src/bootstrap/dispatch-fork-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,WAAW,GAIZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAS1D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAEnD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAQzD,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,UAA0B;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC;IACpC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,WAAW,CACnB,kBAAkB,UAAU,CAAC,EAAE,iDAAiD,EAChF,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAMnC;IACC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACxC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,2BAA2B,CAAC;IAEhE,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CACnB,SAAiB,EACjB,QAAgB,EAChB,GAAW,EACX,IAA2B,EAC3B,SAAiB,EACjB,GAAoB;IAEpB,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,YAAY,EAAE,EAAE,KAAK,CAAC;QACpC,iFAAiF;QACjF,6EAA6E;QAC7E,gFAAgF;QAChF,gFAAgF;QAChF,uEAAuE;QACvE,0RAA0R;QAC1R,MAAM,QAAQ,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC;QAClF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC;QAE7E,8EAA8E;QAC9E,0EAA0E;QAC1E,gBAAgB;QAChB,EAAE;QACF,0EAA0E;QAC1E,8EAA8E;QAC9E,2EAA2E;QAC3E,uEAAuE;QACvE,8EAA8E;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;YACzE,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;YAC7C,aAAa,EAAE,UAAU;YACzB,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAiB,EAAQ,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,GAAG,EAAE;gBACR,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,0BAA0B,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1F,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,CAAC,OAAuB,EAAQ,EAAE;YACjD,KAAK,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAe,EAAE,EAAE;gBACxD,IAAI,CAAC,OAAO;oBAAE,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAA0B,EAAE,EAAE;YACjD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,GAAG,EAAE;oBACR,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,EAAE;oBACR,MAAM,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QACH,imBAAimB;QACjmB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,CACJ,aAAa,CACX,IAAI,EACJ,iCAAiC,IAAI,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAO,KAAK;oBACpF,+BAA+B,EACjC,OAAO,CACR,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAmB,EAAE,EAAE;YACvC,IAAI,CAAC,GAAG,EAAE;gBACR,MAAM,CACJ,aAAa,CACX,IAAI,EACJ,uBAAuB,IAAI,IAAI,MAAM,6BAA6B,EAClE,cAAc,CACf,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAmB,EAAE,KAAe,EAAE,IAA2B;IACrF,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO;IAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO;QACzB,gWAAgW;QAChW,YAAY,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;YAC3B,GAAG,EAAE,qCAAqC;YAC1C,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAA2B;IAC5C,uMAAuM;IACvM,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAC3B,IAA2B,EAC3B,OAAe,EACf,YAAoB;IAEpB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,YAAY,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;QAC3B,GAAG,EAAE,0BAA0B;QAC/B,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,KAAK;QACd,YAAY;KACb,CAAC,CAAC;IACH,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,2EAA2E;IAC3E,IAAI,YAAY,KAAK,gBAAgB,EAAE,CAAC;QACtC,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,kBAAkB,IAAI,CAAC,MAAM,KAAK,KAAK,YAAY,OAAO,EAAE,EAAE;QACnF,IAAI,EAAE,+BAA+B;QACrC,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,SAAS,sBAAsB,CAAC,IAA2B,EAAE,GAAwB;IACnF,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;AAC3E,CAAC"}

package/dist/bootstrap/dispatch-host-rpc-handler.d.ts

@@ -0,0 +1,27 @@
+/**
+ * dispatch-host-rpc-handler — the HOST side of the ADR-0054 host-RPC upcall
+ * channel (increment M4-C).
+ *
+ * The supervisor (`dispatch-external-tool-command.ts`) receives a worker-streamed
+ * {@link HostRpcRequest} (on the transport's `progress` arm) and calls
+ * {@link handleHostRpc}. This module performs the requested privileged effect
+ * through the REAL host {@link ToolCliContext} — the SAME context the in-process
+ * path uses (datastore via the host scope, cloud egress, FS, BaselineRepo,
+ * ToolStateRepo, host planes) — and returns an {@link RpcReply} the supervisor
+ * posts back to the worker via `child.send`.
+ *
+ * The host remains the ONLY process that performs the privileged effect. A
+ * host-side fault is CAUGHT and crosses back as a structured `{ ok: false }`
+ * reply (the worker shim re-throws it into the handler) — never an unhandled
+ * host crash, never a silent no-op.
+ */
+import type { HostRpcRequest, RpcReply } from './tool-command-dispatch-types.js';
+import type { ToolCliContext } from '@opensip-cli/core';
+/**
+ * Handle one worker-streamed {@link HostRpcRequest} against the real host
+ * {@link ToolCliContext} and produce the {@link RpcReply} to send back. A
+ * host-side fault is caught and returned as a structured `{ ok: false }` reply
+ * (the supervisor sends it; the worker shim re-throws it into the handler).
+ */
+export declare function handleHostRpc(request: HostRpcRequest, ctx: ToolCliContext): Promise<RpcReply>;
+//# sourceMappingURL=dispatch-host-rpc-handler.d.ts.map

package/dist/bootstrap/dispatch-host-rpc-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-host-rpc-handler.d.ts","sourceRoot":"","sources":["../../src/bootstrap/dispatch-host-rpc-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAIV,cAAc,EACd,QAAQ,EACT,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA6IxD;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,CAAC,CAwBnB"}

package/dist/bootstrap/dispatch-host-rpc-handler.js

@@ -0,0 +1,175 @@
+/**
+ * dispatch-host-rpc-handler — the HOST side of the ADR-0054 host-RPC upcall
+ * channel (increment M4-C).
+ *
+ * The supervisor (`dispatch-external-tool-command.ts`) receives a worker-streamed
+ * {@link HostRpcRequest} (on the transport's `progress` arm) and calls
+ * {@link handleHostRpc}. This module performs the requested privileged effect
+ * through the REAL host {@link ToolCliContext} — the SAME context the in-process
+ * path uses (datastore via the host scope, cloud egress, FS, BaselineRepo,
+ * ToolStateRepo, host planes) — and returns an {@link RpcReply} the supervisor
+ * posts back to the worker via `child.send`.
+ *
+ * The host remains the ONLY process that performs the privileged effect. A
+ * host-side fault is CAUGHT and crosses back as a structured `{ ok: false }`
+ * reply (the worker shim re-throws it into the handler) — never an unhandled
+ * host crash, never a silent no-op.
+ */
+/**
+ * The closed set of seam names the host will dispatch. The IPC `request` crosses
+ * a trust boundary (it arrives over the worker's IPC channel), so the host
+ * validates it against this allowlist BEFORE dispatching — an unrecognized seam
+ * (e.g. a version-skewed worker) fails loud rather than silently no-op'ing. Kept
+ * in sync with the {@link HostRpcCall} union by the `satisfies` assertion below.
+ */
+const RECOGNIZED_SEAMS = new Set([
+    'deliverSignals',
+    'writeSarif',
+    'saveBaseline',
+    'compareBaseline',
+    'exportBaselineSarif',
+    'exportBaselineFingerprints',
+    'toolState.get',
+    'toolState.put',
+    'toolState.delete',
+    'toolState.list',
+    'maybeOpenReport',
+    'getExitCode',
+    'hostPlane',
+]);
+/**
+ * Validate an inbound IPC {@link HostRpcRequest} against the recognized-seam
+ * allowlist before it is dispatched.
+ *
+ * @throws {TypeError} when the request shape is malformed or names a seam the
+ *   host does not recognize — the host fails loud (the structured error crosses
+ *   back to the worker) instead of silently ignoring an unknown upcall.
+ */
+function validateHostRpcRequest(request) {
+    if (typeof request !== 'object' || typeof request.rpcId !== 'number') {
+        throw new TypeError('host-RPC: malformed request (missing numeric rpcId)');
+    }
+    if (!RECOGNIZED_SEAMS.has(request.seam)) {
+        throw new TypeError(`host-RPC: unrecognized seam '${String(request.seam)}'`);
+    }
+}
+/**
+ * Resolve the named host plane from the context's `hostPlanes` bag. A plane
+ * absent on an OSS host is an explicit, structured failure — not a silent no-op.
+ *
+ * @throws {Error} when the host provides no impl for the requested plane (the
+ *   worker re-throws it into the handler as a normal thrown error).
+ */
+function resolvePlane(ctx, plane) {
+    const impl = ctx.hostPlanes?.[plane];
+    if (impl === undefined) {
+        throw new Error(`host-RPC: hostPlanes.${plane} is not provided by this host`);
+    }
+    return impl;
+}
+/**
+ * Invoke `hostPlanes.<plane>.<method>(...args)`.
+ *
+ * @throws {Error} when the requested plane is not provided by the host
+ *   (via {@link resolvePlane}).
+ * @throws {TypeError} when the named method is absent on the resolved plane —
+ *   the worker re-throws it into the handler as a normal thrown error.
+ */
+function callHostPlane(ctx, plane, method, args) {
+    const impl = resolvePlane(ctx, plane);
+    const fn = impl[method];
+    if (typeof fn !== 'function') {
+        throw new TypeError(`host-RPC: hostPlanes.${plane}.${method} is not a function on this host`);
+    }
+    return fn(...args);
+}
+/** Narrow the serializable wire opts to the real `deliverSignals` opts shape. */
+function deliverOpts(opts) {
+    return {
+        cwd: opts.cwd,
+        ...(opts.reportTo === undefined ? {} : { reportTo: opts.reportTo }),
+        ...(opts.apiKey === undefined ? {} : { apiKey: opts.apiKey }),
+        ...(opts.runFailed === undefined ? {} : { runFailed: opts.runFailed }),
+    };
+}
+/**
+ * Perform ONE host-RPC request through the real `ctx` and return its value.
+ * Pure dispatch — validation + the try/catch + reply wrapping live in
+ * {@link handleHostRpc}.
+ */
+async function performHostRpc(request, ctx) {
+    switch (request.seam) {
+        case 'deliverSignals': {
+            return ctx.deliverSignals(request.envelope, deliverOpts(request.opts));
+        }
+        case 'writeSarif': {
+            return ctx.writeSarif(request.envelope, request.path);
+        }
+        case 'saveBaseline': {
+            return ctx.saveBaseline(request.tool, request.envelope);
+        }
+        case 'compareBaseline': {
+            return ctx.compareBaseline(request.tool, request.envelope);
+        }
+        case 'exportBaselineSarif': {
+            return ctx.exportBaselineSarif(request.tool, request.path);
+        }
+        case 'exportBaselineFingerprints': {
+            return ctx.exportBaselineFingerprints(request.tool, request.path);
+        }
+        case 'toolState.get': {
+            return ctx.toolState.get(request.tool, request.key);
+        }
+        case 'toolState.put': {
+            return ctx.toolState.put(request.tool, request.key, request.payload);
+        }
+        case 'toolState.delete': {
+            return ctx.toolState.delete(request.tool, request.key);
+        }
+        case 'toolState.list': {
+            return ctx.toolState.list(request.tool);
+        }
+        case 'maybeOpenReport': {
+            return ctx.maybeOpenReport(request.opts);
+        }
+        case 'getExitCode': {
+            return ctx.getExitCode?.();
+        }
+        case 'hostPlane': {
+            return callHostPlane(ctx, request.plane, request.method, request.args);
+        }
+    }
+}
+/**
+ * Handle one worker-streamed {@link HostRpcRequest} against the real host
+ * {@link ToolCliContext} and produce the {@link RpcReply} to send back. A
+ * host-side fault is caught and returned as a structured `{ ok: false }` reply
+ * (the supervisor sends it; the worker shim re-throws it into the handler).
+ */
+export async function handleHostRpc(request, ctx) {
+    try {
+        // Validate the inbound IPC request against the recognized-seam allowlist
+        // before dispatching (defense-in-depth for the trust boundary; fail loud on
+        // a malformed or version-skewed upcall rather than silently no-op'ing).
+        // @fitness-ignore-next-line detached-promises -- validateHostRpcRequest is a synchronous void validator (it throws or returns); the name-based heuristic misfires on a bare call statement.
+        validateHostRpcRequest(request);
+        const value = await performHostRpc(request, ctx);
+        return { kind: 'rpc-reply', rpcId: request.rpcId, ok: true, value };
+    }
+    catch (error) {
+        return {
+            kind: 'rpc-reply',
+            rpcId: request.rpcId,
+            ok: false,
+            error: {
+                message: error instanceof Error ? error.message : String(error),
+                ...(error.code !== undefined &&
+                    typeof error.code === 'string'
+                    ? { code: error.code }
+                    : {}),
+                ...(error instanceof Error && error.stack !== undefined ? { stack: error.stack } : {}),
+            },
+        };
+    }
+}
+//# sourceMappingURL=dispatch-host-rpc-handler.js.map

package/dist/bootstrap/dispatch-host-rpc-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-host-rpc-handler.js","sourceRoot":"","sources":["../../src/bootstrap/dispatch-host-rpc-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAsB;IACpD,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,qBAAqB;IACrB,4BAA4B;IAC5B,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,aAAa;IACb,WAAW;CACoB,CAAC,CAAC;AAEnC;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,OAAuB;IACrD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,gCAAgC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAmB,EAAE,KAAoB;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAA8B,CAAC;IAClE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,+BAA+B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,GAAmB,EACnB,KAAoB,EACpB,MAAc,EACd,IAAwB;IAExB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,IAAI,MAAM,iCAAiC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAAC,IAAwB;IAC3C,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,OAAuB,EAAE,GAAmB;IACxE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,OAAO,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,GAAG,CAAC,0BAA0B,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,OAAO,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,OAAO,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,GAAmB;IAEnB,IAAI,CAAC;QACH,yEAAyE;QACzE,4EAA4E;QAC5E,wEAAwE;QACxE,4LAA4L;QAC5L,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/D,GAAG,CAAE,KAA4B,CAAC,IAAI,KAAK,SAAS;oBACpD,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;oBACpD,CAAC,CAAC,EAAE,IAAI,EAAG,KAA0B,CAAC,IAAI,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF;SACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/bootstrap/dispatch-replay-result.d.ts

@@ -0,0 +1,51 @@
+/**
+ * dispatch-replay-result — replay one worker {@link ToolCommandResult} through the
+ * REAL host {@link ToolCliContext} seams (ADR-0054 dispatch plane).
+ *
+ * Split out of `dispatch-external-tool-command.ts` (the fork/IPC supervisor) so
+ * the replay concern — turning the slim serialized result the worker posted back
+ * into host-side output + persistence — lives on its own seam. The host is the
+ * only process that performs the privileged effect (render / stdout / exit code /
+ * session persist).
+ */
+import { type ToolCliContext } from '@opensip-cli/core';
+import { type RunActionHooks } from './run-plane.js';
+import type { ToolCommandResult } from './tool-command-dispatch-types.js';
+/**
+ * The host context the supervisor replays through: the full `ToolCliContext` plus
+ * the run-action hooks (`completeRun` persists the worker's returned session —
+ * host-owned-run-timing). `completeRun` is optional (a lean context carries no run
+ * plane), so a test ctx without it is still valid.
+ */
+export type DispatchHostCtx = ToolCliContext & Partial<RunActionHooks>;
+/** The invocation context {@link replayResult} needs to route the handler's return. */
+export interface ReplayContext {
+    readonly commandName: string;
+    /** Parsed opts (with `_args`) — carries `--json`, which `dispatchOutput` reads. */
+    readonly opts: Record<string, unknown>;
+    readonly positionals: readonly unknown[];
+}
+/**
+ * Replay the worker's slim {@link ToolCommandResult} through the REAL host
+ * {@link ToolCliContext} seams. Two output channels are replayed, exactly
+ * mirroring the in-process path:
+ *
+ *   - The handler's RETURN value (`result.returned`) for the return-valued modes
+ *     (`command-result` / `signal-envelope`) is routed through the SAME
+ *     {@link dispatchOutput} seam the in-process action uses, so the `--json`
+ *     short-circuit vs. human `render` decision is byte-identical regardless of
+ *     whether the command ran in-process or in the worker (ADR-0027 parity). This
+ *     is the fix for the worker-by-default flip silently dropping a
+ *     `command-result` handler's output (e.g. `fit list`): the FRR seam replay
+ *     below never captured it, because those handlers RETURN, they do not `ctx.*`.
+ *   - The FRR seam fields (`render`/`envelope`/`json`/`raw`/`error`) capture
+ *     EXPLICIT `ctx.*` emitter calls a handler made; replayed through their host
+ *     counterparts. Populated only for handlers that emit via seams (e.g. an
+ *     envelope handler calling `ctx.emitEnvelope`), never together with `returned`
+ *     for the same payload.
+ *
+ * The exit code is applied LAST so it is the final word (matching the in-process
+ * `setExitCode` semantics).
+ */
+export declare function replayResult(result: ToolCommandResult, ctx: DispatchHostCtx, invocation: ReplayContext): Promise<void>;
+//# sourceMappingURL=dispatch-replay-result.d.ts.map

package/dist/bootstrap/dispatch-replay-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-replay-result.d.ts","sourceRoot":"","sources":["../../src/bootstrap/dispatch-replay-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAI1E,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAEvE,uFAAuF;AACvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,eAAe,EACpB,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,IAAI,CAAC,CAyCf"}

package/dist/bootstrap/dispatch-replay-result.js

@@ -0,0 +1,76 @@
+/**
+ * dispatch-replay-result — replay one worker {@link ToolCommandResult} through the
+ * REAL host {@link ToolCliContext} seams (ADR-0054 dispatch plane).
+ *
+ * Split out of `dispatch-external-tool-command.ts` (the fork/IPC supervisor) so
+ * the replay concern — turning the slim serialized result the worker posted back
+ * into host-side output + persistence — lives on its own seam. The host is the
+ * only process that performs the privileged effect (render / stdout / exit code /
+ * session persist).
+ */
+import { dispatchOutput } from '../commands/mount-command-spec.js';
+/**
+ * Replay the worker's slim {@link ToolCommandResult} through the REAL host
+ * {@link ToolCliContext} seams. Two output channels are replayed, exactly
+ * mirroring the in-process path:
+ *
+ *   - The handler's RETURN value (`result.returned`) for the return-valued modes
+ *     (`command-result` / `signal-envelope`) is routed through the SAME
+ *     {@link dispatchOutput} seam the in-process action uses, so the `--json`
+ *     short-circuit vs. human `render` decision is byte-identical regardless of
+ *     whether the command ran in-process or in the worker (ADR-0027 parity). This
+ *     is the fix for the worker-by-default flip silently dropping a
+ *     `command-result` handler's output (e.g. `fit list`): the FRR seam replay
+ *     below never captured it, because those handlers RETURN, they do not `ctx.*`.
+ *   - The FRR seam fields (`render`/`envelope`/`json`/`raw`/`error`) capture
+ *     EXPLICIT `ctx.*` emitter calls a handler made; replayed through their host
+ *     counterparts. Populated only for handlers that emit via seams (e.g. an
+ *     envelope handler calling `ctx.emitEnvelope`), never together with `returned`
+ *     for the same payload.
+ *
+ * The exit code is applied LAST so it is the final word (matching the in-process
+ * `setExitCode` semantics).
+ */
+export async function replayResult(result, ctx, invocation) {
+    if (result.error !== undefined) {
+        ctx.emitError(result.error);
+    }
+    // Return-valued modes: route the raw return through the shared dispatch seam so
+    // the host applies the identical `--json`/render routing the in-process path
+    // would. A synthetic spec carries just what `dispatchOutput` reads (name +
+    // output mode).
+    if (result.returned !== undefined) {
+        const replaySpec = {
+            name: invocation.commandName,
+            output: result.output,
+        };
+        // Replay is the OUTPUT leg of dispatch; the lifecycle events (dispatch start +
+        // worker-resolved) are emitted by the caller (dispatchExternalToolCommand), so
+        // a duplicate emit here would be noise.
+        await dispatchOutput(result.returned, replaySpec, invocation.opts, invocation.positionals, ctx); // observability-ok
+    }
+    if (result.render !== undefined) {
+        await ctx.render(result.render);
+    }
+    if (result.envelope !== undefined) {
+        ctx.emitEnvelope(result.envelope);
+    }
+    if (result.json !== undefined) {
+        ctx.emitJson(result.json);
+    }
+    if (result.raw !== undefined) {
+        ctx.emitRaw(result.raw);
+    }
+    if (result.exitCode !== undefined) {
+        ctx.setExitCode(result.exitCode);
+    }
+    // host-owned-run-timing: the worker handler RETURNED a session contribution;
+    // the HOST persists it (the host owns the generic row + its timing). The mount
+    // action took the early-return dispatch branch, so it did NOT call completeRun —
+    // the supervisor drives it here with the worker's session.
+    if (result.session !== undefined) {
+        // @fitness-ignore-next-line detached-promises -- RunActionHooks.completeRun returns void (run-plane.ts:95; freezes + persists synchronously); the name-based heuristic misfires on the optional-chain call.
+        ctx.completeRun?.({ session: result.session });
+    }
+}
+//# sourceMappingURL=dispatch-replay-result.js.map

package/dist/bootstrap/dispatch-replay-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-replay-result.js","sourceRoot":"","sources":["../../src/bootstrap/dispatch-replay-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAsBnE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAyB,EACzB,GAAoB,EACpB,UAAyB;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,gFAAgF;IAChF,6EAA6E;IAC7E,2EAA2E;IAC3E,gBAAgB;IAChB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE,UAAU,CAAC,WAAW;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;SACmB,CAAC;QAC3C,+EAA+E;QAC/E,+EAA+E;QAC/E,wCAAwC;QACxC,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB;IACtH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,6EAA6E;IAC7E,+EAA+E;IAC/E,iFAAiF;IACjF,2DAA2D;IAC3D,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,4MAA4M;QAC5M,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/bootstrap/execute-post-bailout-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute-post-bailout-bootstrap.d.ts","sourceRoot":"","sources":["../../src/bootstrap/execute-post-bailout-bootstrap.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EAEf,UAAU,EAGV,KAAK,MAAM,EACX,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAmB,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAShE,qDAAqD;AACrD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAEpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,eAAe,CAAC;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IAChD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACtE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;CACvD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA2BD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,yBAAyB,EAChC,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CA4GrC"}
+{"version":3,"file":"execute-post-bailout-bootstrap.d.ts","sourceRoot":"","sources":["../../src/bootstrap/execute-post-bailout-bootstrap.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EAEf,UAAU,EAGV,KAAK,MAAM,EACX,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAmB,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAShE,qDAAqD;AACrD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAEpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,eAAe,CAAC;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IAChD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACtE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;CACvD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA2BD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,yBAAyB,EAChC,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CA8GrC"}

package/dist/bootstrap/execute-post-bailout-bootstrap.js

@@ -104,7 +104,9 @@ export async function executePostBailoutBootstrap(input, deps = {}) {
     }
     d.startProfiling(scope, plan.commandName);
     record(PRE_ACTION_PHASES.toolPreflight);
-    await d.maybeInitializeOwningTool(tools, plan.commandName, plan.runId);
+    // ADR-0054 M4-F: pass provenance so an EXTERNAL owning tool's initialize is
+    // skipped in-host (it runs worker-side under dispatch); bundled runs in-host.
+    await d.maybeInitializeOwningTool(tools, plan.commandName, plan.runId, provenance);
     const driven = await d.loadOwningToolCapabilities({
         owningTool: d.resolveOwningTool(tools, plan.commandName),
         projectDir: plan.project.projectRoot,

package/dist/bootstrap/execute-post-bailout-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute-post-bailout-bootstrap.js","sourceRoot":"","sources":["../../src/bootstrap/execute-post-bailout-bootstrap.ts"],"names":[],"mappings":"AAAA,qLAAqL;AACrL;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,WAAW,GAGZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,SAAS,eAAe;IACtB,gEAAgE;AAClE,CAAC;AA+BD,MAAM,WAAW,GAab;IACF,eAAe;IACf,gBAAgB;IAChB,UAAU;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,KAAK,SAAS;IAClD,cAAc;IACd,cAAc;IACd,yBAAyB;IACzB,0BAA0B;IAC1B,iBAAiB;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAgC,EAChC,OAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC;IACnD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAE5D,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE3D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAErC,6EAA6E;IAC7E,8EAA8E;IAC9E,qEAAqE;IACrE,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC;IACzE,MAAM,UAAU,GAAG,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAQ,CAAC,EAAE,IAAI,aAAa,CAAC;IAE1D,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,aAAa;QACb,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAChC,SAAS;QACT,UAAU;QACV,MAAM;QACN,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;KACxB,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,sHAAsH;IAE3I,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,+CAA+C,EAAE;YACrE,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAE3C,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;IAClF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;IAE/D,QAAQ,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;QAC3E,OAAO,EAAE,IAAI,CAAC,WAAW;KAC1B,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,UAAU,EACV,OAAO,EACP,mCAAmC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CACzD,CAAC;IAEF,SAAS,CAAC,IAAI,CAAC;QACb,GAAG,EAAE,eAAe;QACpB,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACrC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,wBAAwB;YAC7B,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;SAChC,CAAC,CAAC;IACL,CAAC;IAED,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAExC,MAAM,CAAC,CAAC,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,0BAA0B,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;QACxD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACpC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,IAAI,EAAE;KACnD,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,MAAM,EACN,OAAO,EACP,SAAS,MAAM,CAAC,MAAM,CAAC,oHAAoH,CAC5I,CAAC;QACF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"execute-post-bailout-bootstrap.js","sourceRoot":"","sources":["../../src/bootstrap/execute-post-bailout-bootstrap.ts"],"names":[],"mappings":"AAAA,qLAAqL;AACrL;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,WAAW,GAGZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,SAAS,eAAe;IACtB,gEAAgE;AAClE,CAAC;AA+BD,MAAM,WAAW,GAab;IACF,eAAe;IACf,gBAAgB;IAChB,UAAU;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,KAAK,SAAS;IAClD,cAAc;IACd,cAAc;IACd,yBAAyB;IACzB,0BAA0B;IAC1B,iBAAiB;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAgC,EAChC,OAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC;IACnD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAE5D,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE3D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAErC,6EAA6E;IAC7E,8EAA8E;IAC9E,qEAAqE;IACrE,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC;IACzE,MAAM,UAAU,GAAG,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAQ,CAAC,EAAE,IAAI,aAAa,CAAC;IAE1D,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,aAAa;QACb,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAChC,SAAS;QACT,UAAU;QACV,MAAM;QACN,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;KACxB,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,sHAAsH;IAE3I,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,+CAA+C,EAAE;YACrE,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAE3C,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;IAClF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;IAE/D,QAAQ,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;QAC3E,OAAO,EAAE,IAAI,CAAC,WAAW;KAC1B,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,UAAU,EACV,OAAO,EACP,mCAAmC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CACzD,CAAC;IAEF,SAAS,CAAC,IAAI,CAAC;QACb,GAAG,EAAE,eAAe;QACpB,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACrC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,wBAAwB;YAC7B,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;SAChC,CAAC,CAAC;IACL,CAAC;IAED,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAExC,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,CAAC,CAAC,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,0BAA0B,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;QACxD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACpC,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,IAAI,EAAE;KACnD,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,MAAM,EACN,OAAO,EACP,SAAS,MAAM,CAAC,MAAM,CAAC,oHAAoH,CAC5I,CAAC;QACF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}