synorch 0.2.0 → 0.4.0-beta.0

package/dist/harness/orchestration/factories.d.ts

@@ -0,0 +1,13 @@
+import type { WorkerFactory } from "./coordinator.ts";
+import type { GitRunner } from "./git.ts";
+import { type WorkerManagerDependencies } from "./worker-manager.ts";
+export type SharedWorkerDependencies = Omit<WorkerManagerDependencies, "run" | "budget" | "isolation"> & {
+    /** Parent of `.synorch/worktrees`; defaults to the user's home directory. */
+    readonly home?: string;
+    /** Overrides `<home>/.synorch/worktrees`. */
+    readonly worktreesRoot?: string;
+    readonly git?: GitRunner;
+};
+/** Wires a per-run WorkerManager with its own IsolationProvider for the coordinator. */
+export declare function createWorkerFactory(shared: SharedWorkerDependencies): WorkerFactory;
+//# sourceMappingURL=factories.d.ts.map

package/dist/harness/orchestration/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/harness/orchestration/factories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,EAAuB,KAAK,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,yBAAyB,EAAE,KAAK,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG;IACvG,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;CAC1B,CAAC;AAEF,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,wBAAwB,GAAG,aAAa,CAgBnF"}

package/dist/harness/orchestration/factories.js

@@ -0,0 +1,20 @@
+import { createIsolationProvider } from "./isolation.js";
+import { createWorkerManager } from "./worker-manager.js";
+/** Wires a per-run WorkerManager with its own IsolationProvider for the coordinator. */
+export function createWorkerFactory(shared) {
+    return (scope, budget) => createWorkerManager({
+        ...shared,
+        run: scope,
+        budget,
+        isolation: createIsolationProvider({
+            workspaceRoot: scope.workspaceRoot,
+            projectId: scope.projectId,
+            blobs: shared.blobs,
+            ...(shared.home === undefined ? {} : { home: shared.home }),
+            ...(shared.worktreesRoot === undefined ? {} : { worktreesRoot: shared.worktreesRoot }),
+            ...(shared.git === undefined ? {} : { git: shared.git }),
+            ...(shared.platform === undefined ? {} : { platform: shared.platform }),
+        }),
+    });
+}
+//# sourceMappingURL=factories.js.map

package/dist/harness/orchestration/factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.js","sourceRoot":"","sources":["../../../src/harness/orchestration/factories.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAkC,MAAM,qBAAqB,CAAC;AAU1F,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,MAAgC;IAClE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CACvB,mBAAmB,CAAC;QAClB,GAAG,MAAM;QACT,GAAG,EAAE,KAAK;QACV,MAAM;QACN,SAAS,EAAE,uBAAuB,CAAC;YACjC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;YACtF,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SACxE,CAAC;KACH,CAAC,CAAC;AACP,CAAC"}

package/dist/harness/orchestration/git.d.ts

@@ -0,0 +1,77 @@
+/**
+ * The narrow git surface isolation needs. It runs git with an argv array (never a shell), no
+ * terminal prompts and a bounded buffer; a failure rejects with the command's stderr. Every
+ * command runs with `core.longpaths=true` (ADR-19): a worktree under `<home>/.synorch/worktrees`
+ * adds to every path's length, and Git for Windows otherwise fails on paths past MAX_PATH.
+ */
+export interface GitResult {
+    readonly stdout: Buffer;
+    readonly stderr: string;
+}
+export interface GitRunOptions {
+    /** Written to the command's standard input (batch commands such as `hash-object --stdin-paths`). */
+    readonly input?: Buffer | string;
+}
+export type GitRunner = (args: readonly string[], cwd: string, signal?: AbortSignal, options?: GitRunOptions) => Promise<GitResult>;
+export declare class GitCommandError extends Error {
+    readonly args: readonly string[];
+    readonly exitCode: number | undefined;
+    /** The spawn error code (`ENOENT` when git is not installed), when git never ran. */
+    readonly spawnCode: string | undefined;
+    constructor(args: readonly string[], exitCode: number | undefined, stderr: string, spawnCode?: string);
+}
+/** Options every git invocation carries. */
+export declare const GIT_BASE_OPTIONS: readonly ["-c", "core.longpaths=true"];
+export declare const runGit: GitRunner;
+export declare function gitText(git: GitRunner, args: readonly string[], cwd: string, signal?: AbortSignal): Promise<string>;
+/** True when a git executable can be started at all. */
+export declare function gitAvailable(git: GitRunner, cwd: string): Promise<boolean>;
+/** The repository top level, or undefined when `cwd` is not inside a git work tree. */
+export declare function gitTopLevel(git: GitRunner, cwd: string): Promise<string | undefined>;
+export declare function gitHead(git: GitRunner, cwd: string): Promise<string | undefined>;
+/** Paths git considers changed or untracked (ignored files excluded), POSIX separators, as named on disk. */
+export declare function gitDirtyPaths(git: GitRunner, cwd: string, signal?: AbortSignal): Promise<string[]>;
+/** Raw blob bytes at `HEAD`, or undefined when the path does not exist there. */
+export declare function gitShowHead(git: GitRunner, cwd: string, relative: string): Promise<Buffer | undefined>;
+/**
+ * The bytes a checkout of `<rev>:<relative>` writes in the work tree at `cwd`: the blob through
+ * that tree's smudge filter and EOL conversion (`cat-file --filters`). Undefined when absent.
+ */
+export declare function gitShowFiltered(git: GitRunner, cwd: string, rev: string, relative: string, signal?: AbortSignal): Promise<Buffer | undefined>;
+/** The work-tree bytes of blob `oid` checked out at `relative` in the tree at `cwd` (smudge + EOL). */
+export declare function gitSmudgeBlob(git: GitRunner, cwd: string, oid: string, relative: string, signal?: AbortSignal): Promise<Buffer>;
+export interface GitTreeEntry {
+    readonly mode: string;
+    readonly type: string;
+    readonly oid: string;
+}
+/** Tree entries of `rev` for exactly `paths` (literal pathspecs); a path absent from `rev` is missing from the map. */
+export declare function gitTreeEntries(git: GitRunner, cwd: string, rev: string, paths: readonly string[], signal?: AbortSignal): Promise<Map<string, GitTreeEntry>>;
+/** Paths recorded in the index, POSIX separators. */
+export declare function gitTrackedPaths(git: GitRunner, cwd: string, signal?: AbortSignal): Promise<string[]>;
+/** Gitlink (submodule, mode 160000) paths recorded in the index. */
+export declare function gitSubmodulePaths(git: GitRunner, cwd: string, signal?: AbortSignal): Promise<string[]>;
+/**
+ * Blob ids git would store for the files at `paths` in the tree at `cwd` (clean filter and EOL
+ * conversion of that tree). With `write`, the blobs are also written to the object database.
+ */
+export declare function gitHashObjects(git: GitRunner, cwd: string, paths: readonly string[], options?: {
+    readonly write?: boolean;
+    readonly signal?: AbortSignal;
+}): Promise<Map<string, string>>;
+/** The blob id of `bytes` as if stored at `relative` in the tree at `cwd` (never written). */
+export declare function gitHashBytes(git: GitRunner, cwd: string, relative: string, bytes: Buffer, signal?: AbortSignal): Promise<string>;
+/**
+ * The subset of `paths` git ignores in the tree at `cwd`, honouring the index: a tracked file is
+ * never ignored. The paths need not exist.
+ */
+export declare function gitIgnoredSubset(git: GitRunner, cwd: string, paths: readonly string[], signal?: AbortSignal): Promise<Set<string>>;
+/**
+ * Ignored, untracked entries (files, or whole directories collapsed with a trailing `/`), POSIX
+ * separators. Used to see which ignored paths a changed `.gitignore` would expose, which ignored
+ * directories a scoped snapshot skips and which dependency directories a worktree links.
+ */
+export declare function gitIgnoredEntries(git: GitRunner, cwd: string, signal?: AbortSignal): Promise<string[]>;
+/** The subset of `paths` the ignore rules under `cwd` match (`--no-index`: the paths need not be tracked or exist). */
+export declare function gitCheckIgnored(git: GitRunner, cwd: string, paths: readonly string[], signal?: AbortSignal): Promise<Set<string>>;
+//# sourceMappingURL=git.d.ts.map

package/dist/harness/orchestration/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/harness/orchestration/git.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,oGAAoG;IACpG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;AAEpI,qBAAa,eAAgB,SAAQ,KAAK;IACxC,SAAgB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,SAAgB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,qFAAqF;IACrF,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE3B,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAO7G;AAED,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,wCAAyC,CAAC;AAEvE,eAAO,MAAM,MAAM,EAAE,SA8BjB,CAAC;AAEL,wBAAsB,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAEzH;AAED,wDAAwD;AACxD,wBAAsB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOhF;AAED,uFAAuF;AACvF,wBAAsB,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ1F;AAED,wBAAsB,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMtF;AAED,6GAA6G;AAC7G,wBAAsB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQxG;AAED,iFAAiF;AACjF,wBAAsB,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAM5G;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMnJ;AAED,uGAAuG;AACvG,wBAAsB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAErI;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAID,uHAAuH;AACvH,wBAAsB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAajK;AAED,qDAAqD;AACrD,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1G;AAED,oEAAoE;AACpE,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAS5G;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgBnM;AAED,8FAA8F;AAC9F,wBAAsB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtI;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CASxI;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAG5G;AAED,uHAAuH;AACvH,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAUvI"}

package/dist/harness/orchestration/git.js

@@ -0,0 +1,214 @@
+import { execFile } from "node:child_process";
+export class GitCommandError extends Error {
+    args;
+    exitCode;
+    /** The spawn error code (`ENOENT` when git is not installed), when git never ran. */
+    spawnCode;
+    constructor(args, exitCode, stderr, spawnCode) {
+        super(`git ${args.join(" ")} failed${exitCode === undefined ? "" : ` (${exitCode})`}: ${stderr.trim()}`);
+        this.name = "GitCommandError";
+        this.args = args;
+        this.exitCode = exitCode;
+        this.spawnCode = spawnCode;
+    }
+}
+/** Options every git invocation carries. */
+export const GIT_BASE_OPTIONS = ["-c", "core.longpaths=true"];
+export const runGit = (args, cwd, signal, options) => new Promise((resolve, reject) => {
+    const child = execFile("git", [...GIT_BASE_OPTIONS, ...args], {
+        cwd,
+        encoding: "buffer",
+        maxBuffer: 256 * 1024 * 1024,
+        windowsHide: true,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_OPTIONAL_LOCKS: "0" },
+        ...(signal === undefined ? {} : { signal }),
+    }, (error, stdout, stderr) => {
+        const stderrText = Buffer.isBuffer(stderr) ? stderr.toString("utf8") : String(stderr);
+        if (error !== null) {
+            const rawCode = error.code;
+            const code = typeof rawCode === "number" ? rawCode : undefined;
+            reject(new GitCommandError(args, code, stderrText || error.message, typeof rawCode === "string" ? rawCode : undefined));
+            return;
+        }
+        resolve({ stdout: Buffer.isBuffer(stdout) ? stdout : Buffer.from(String(stdout)), stderr: stderrText });
+    });
+    if (options?.input !== undefined) {
+        child.stdin?.on("error", () => undefined);
+        child.stdin?.end(options.input);
+    }
+    else {
+        child.stdin?.end();
+    }
+});
+export async function gitText(git, args, cwd, signal) {
+    return (await git(args, cwd, signal)).stdout.toString("utf8").trim();
+}
+/** True when a git executable can be started at all. */
+export async function gitAvailable(git, cwd) {
+    try {
+        await git(["--version"], cwd);
+        return true;
+    }
+    catch (error) {
+        return !(error instanceof GitCommandError && error.spawnCode !== undefined);
+    }
+}
+/** The repository top level, or undefined when `cwd` is not inside a git work tree. */
+export async function gitTopLevel(git, cwd) {
+    try {
+        const inside = await gitText(git, ["rev-parse", "--is-inside-work-tree"], cwd);
+        if (inside !== "true")
+            return undefined;
+        return await gitText(git, ["rev-parse", "--show-toplevel"], cwd);
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function gitHead(git, cwd) {
+    try {
+        return await gitText(git, ["rev-parse", "--verify", "HEAD"], cwd);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Paths git considers changed or untracked (ignored files excluded), POSIX separators, as named on disk. */
+export async function gitDirtyPaths(git, cwd, signal) {
+    const output = (await git(["status", "--porcelain=v1", "-z", "--untracked-files=all", "--no-renames"], cwd, signal)).stdout.toString("utf8");
+    const paths = [];
+    for (const entry of output.split("\0")) {
+        if (entry.length < 4)
+            continue;
+        paths.push(entry.slice(3));
+    }
+    return paths;
+}
+/** Raw blob bytes at `HEAD`, or undefined when the path does not exist there. */
+export async function gitShowHead(git, cwd, relative) {
+    try {
+        return (await git(["cat-file", "blob", `HEAD:${relative}`], cwd)).stdout;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The bytes a checkout of `<rev>:<relative>` writes in the work tree at `cwd`: the blob through
+ * that tree's smudge filter and EOL conversion (`cat-file --filters`). Undefined when absent.
+ */
+export async function gitShowFiltered(git, cwd, rev, relative, signal) {
+    try {
+        return (await git(["cat-file", "--filters", `${rev}:${relative}`], cwd, signal)).stdout;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The work-tree bytes of blob `oid` checked out at `relative` in the tree at `cwd` (smudge + EOL). */
+export async function gitSmudgeBlob(git, cwd, oid, relative, signal) {
+    return (await git(["cat-file", "--filters", `--path=${relative}`, oid], cwd, signal)).stdout;
+}
+const PATHSPEC_CHUNK = 100;
+/** Tree entries of `rev` for exactly `paths` (literal pathspecs); a path absent from `rev` is missing from the map. */
+export async function gitTreeEntries(git, cwd, rev, paths, signal) {
+    const entries = new Map();
+    for (let index = 0; index < paths.length; index += PATHSPEC_CHUNK) {
+        const chunk = paths.slice(index, index + PATHSPEC_CHUNK);
+        const output = (await git(["--literal-pathspecs", "ls-tree", "-r", "-z", "--full-tree", rev, "--", ...chunk], cwd, signal)).stdout.toString("utf8");
+        for (const record of output.split("\0")) {
+            const tab = record.indexOf("\t");
+            if (tab === -1)
+                continue;
+            const [mode = "", type = "", oid = ""] = record.slice(0, tab).split(" ");
+            entries.set(record.slice(tab + 1), { mode, type, oid });
+        }
+    }
+    return entries;
+}
+/** Paths recorded in the index, POSIX separators. */
+export async function gitTrackedPaths(git, cwd, signal) {
+    const output = (await git(["ls-files", "-z"], cwd, signal)).stdout.toString("utf8");
+    return output.split("\0").filter((entry) => entry.length > 0);
+}
+/** Gitlink (submodule, mode 160000) paths recorded in the index. */
+export async function gitSubmodulePaths(git, cwd, signal) {
+    const output = (await git(["ls-files", "--stage", "-z"], cwd, signal)).stdout.toString("utf8");
+    const paths = [];
+    for (const record of output.split("\0")) {
+        if (!record.startsWith("160000 "))
+            continue;
+        const tab = record.indexOf("\t");
+        if (tab !== -1)
+            paths.push(record.slice(tab + 1));
+    }
+    return paths;
+}
+/**
+ * Blob ids git would store for the files at `paths` in the tree at `cwd` (clean filter and EOL
+ * conversion of that tree). With `write`, the blobs are also written to the object database.
+ */
+export async function gitHashObjects(git, cwd, paths, options = {}) {
+    const result = new Map();
+    const write = options.write === true ? ["-w"] : [];
+    const batch = paths.filter((relative) => !relative.includes("\n") && !relative.includes("\r"));
+    if (batch.length > 0) {
+        const output = (await git(["hash-object", ...write, "--stdin-paths"], cwd, options.signal, { input: `${batch.join("\n")}\n` })).stdout.toString("utf8");
+        const oids = output.split("\n").filter((line) => line.length > 0);
+        batch.forEach((relative, index) => {
+            const oid = oids[index];
+            if (oid !== undefined)
+                result.set(relative, oid.trim());
+        });
+    }
+    for (const relative of paths.filter((candidate) => !batch.includes(candidate))) {
+        result.set(relative, (await gitText(git, ["hash-object", ...write, `--path=${relative}`, "--", relative], cwd, options.signal)));
+    }
+    return result;
+}
+/** The blob id of `bytes` as if stored at `relative` in the tree at `cwd` (never written). */
+export async function gitHashBytes(git, cwd, relative, bytes, signal) {
+    return (await git(["hash-object", "--stdin", `--path=${relative}`], cwd, signal, { input: bytes })).stdout.toString("utf8").trim();
+}
+/**
+ * The subset of `paths` git ignores in the tree at `cwd`, honouring the index: a tracked file is
+ * never ignored. The paths need not exist.
+ */
+export async function gitIgnoredSubset(git, cwd, paths, signal) {
+    if (paths.length === 0)
+        return new Set();
+    try {
+        const output = (await git(["check-ignore", "--stdin", "-z"], cwd, signal, { input: `${paths.join("\0")}\0` })).stdout.toString("utf8");
+        return new Set(output.split("\0").filter((entry) => entry.length > 0));
+    }
+    catch (error) {
+        if (error instanceof GitCommandError && error.exitCode === 1)
+            return new Set();
+        throw error;
+    }
+}
+/**
+ * Ignored, untracked entries (files, or whole directories collapsed with a trailing `/`), POSIX
+ * separators. Used to see which ignored paths a changed `.gitignore` would expose, which ignored
+ * directories a scoped snapshot skips and which dependency directories a worktree links.
+ */
+export async function gitIgnoredEntries(git, cwd, signal) {
+    const output = (await git(["ls-files", "--others", "--ignored", "--exclude-standard", "--directory", "-z"], cwd, signal)).stdout.toString("utf8");
+    return output.split("\0").filter((entry) => entry.length > 0);
+}
+/** The subset of `paths` the ignore rules under `cwd` match (`--no-index`: the paths need not be tracked or exist). */
+export async function gitCheckIgnored(git, cwd, paths, signal) {
+    if (paths.length === 0)
+        return new Set();
+    try {
+        const output = (await git(["check-ignore", "--no-index", "--stdin", "-z"], cwd, signal, { input: `${paths.join("\0")}\0` })).stdout.toString("utf8");
+        return new Set(output.split("\0").filter((entry) => entry.length > 0));
+    }
+    catch (error) {
+        // Exit code 1 means that none of the paths is ignored.
+        if (error instanceof GitCommandError && error.exitCode === 1)
+            return new Set();
+        throw error;
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/harness/orchestration/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/harness/orchestration/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAqB9C,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxB,IAAI,CAAoB;IACxB,QAAQ,CAAqB;IAC7C,qFAAqF;IACrE,SAAS,CAAqB;IAE9C,YAAmB,IAAuB,EAAE,QAA4B,EAAE,MAAc,EAAE,SAAkB;QAC1G,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAU,CAAC;AAEvE,MAAM,CAAC,MAAM,MAAM,GAAc,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAC9D,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,QAAQ,CACpB,KAAK,EACL,CAAC,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC,EAC9B;QACE,GAAG;QACH,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC5B,WAAW,EAAE,IAAI;QACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE;QAC1E,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,OAAO,GAAI,KAA4B,CAAC,IAAI,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACxH,OAAO;QACT,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1G,CAAC,CACF,CAAC;IACF,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAc,EAAE,IAAuB,EAAE,GAAW,EAAE,MAAoB;IACtG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAc,EAAE,GAAW;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAc,EAAE,GAAW;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAc,EAAE,GAAW;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAc,EAAE,GAAW,EAAE,MAAoB;IACnF,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7I,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAc,EAAE,GAAW,EAAE,QAAgB;IAC7E,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB,EAAE,MAAoB;IACpH,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAc,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB,EAAE,MAAoB;IAClH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,QAAQ,EAAE,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/F,CAAC;AAQD,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAc,EAAE,GAAW,EAAE,GAAW,EAAE,KAAwB,EAAE,MAAoB;IAC3H,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,cAAc,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpJ,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,SAAS;YACzB,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc,EAAE,GAAW,EAAE,MAAoB;IACrF,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAc,EAAE,GAAW,EAAE,MAAoB;IACvF,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAc,EAAE,GAAW,EAAE,KAAwB,EAAE,UAAuE,EAAE;IACnK,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,EAAE,GAAG,KAAK,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxJ,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,GAAG,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,GAAG,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAc,EAAE,GAAW,EAAE,QAAgB,EAAE,KAAa,EAAE,MAAoB;IACnH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACrI,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAc,EAAE,GAAW,EAAE,KAAwB,EAAE,MAAoB;IAChH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvI,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC/E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAc,EAAE,GAAW,EAAE,MAAoB;IACvF,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClJ,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc,EAAE,GAAW,EAAE,KAAwB,EAAE,MAAoB;IAC/G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrJ,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,uDAAuD;QACvD,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC/E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/harness/orchestration/index.d.ts

@@ -0,0 +1,25 @@
+/** I4 — coordinator, plan/DAG scheduler, WorkerManager, IsolationProvider, review gate. */
+export type { Coordinator, IsolationProvider, WorkerManager } from "../contracts/index.ts";
+export { approvePlan, decisionAnswers, isAllowing, isHumanOnlySubject, summarizePlan, type PlanApprovalOutcome } from "./approval.ts";
+export { BUDGET_METRICS, CANCEL_THRESHOLD, createBudgetGateSlot, createBudgetTracker, isHumanBudgetGrant, requestBudgetIncrease, type AdmitOptions, type BudgetAdmission, type BudgetExceeded, type BudgetGateSlot, type BudgetLimits, type BudgetTracker, type UsageObservation, } from "./budget.ts";
+export { buildAttemptLog, latestReport, type AttemptLog, type RecordedReportCall, type RecordedToolCall } from "./attempt-log.ts";
+export { actionableFindings, artifactReviewGoal, artifactReviewRecordSchema, compileArtifactReviewPacket, describeReviewTarget, fixFollowUpMessage, isGeneratedPath, mapReviewVerdict, parseReviewArgument, renderArtifactReviewBrief, renderReviewCard, reviewSessionIds, REVIEW_CRITERIA, runArtifactReview, verdictDecision, type ArtifactReviewRequest, type ArtifactReviewResult, type ArtifactReviewStatus, type ParsedReviewArgument, type ReviewCardGlyphs, type ReviewTarget, type ReviewVerdict, } from "./artifact-review.ts";
+export { commandMentioned, roleCapabilityIssues } from "./capabilities.ts";
+export { extractJsonBlock, parseClaim, readClaim, reviewerClaimSchema, workerClaimSchema } from "./claims.ts";
+export { createControlPlaneWriter, type ControlPlaneWriter } from "./control-plane.ts";
+export { createCoordinator, criterionEvidence, DEFAULT_COORDINATOR_LIMITS, failedRunExitCode, resolveBudgets, retryNotes, scopeLimitedReview, type CoordinatorDependencies, type CoordinatorLimits, type OrchestrationCoordinator, type WorkerFactory, } from "./coordinator.ts";
+export { createDelegationSlot, createReportSlot, delegationCallbacks, REPORT_RECORDED, reportCallbacks, type ReportCheck, type ReportSlot, type DelegationCaller, type DelegationPort, type DelegationResult, type DelegationSlot, type TriageDecision, } from "./delegation.ts";
+export { commandArgv, commandsFromLog, evidenceCandidates, firstPathToken, harnessCanSubstitute, isPlanCausedVerification, INDEPENDENT_EVIDENCE_HINT, isIndependentReviewEvidence, mayComplete, provingVerification, resolveCompletionEvidence, resolveEvidence, resolvePointer, reviewRequired, verifyCompletion, verifyReview, type CompletionEvidence, type CompletionVerification, type EvidenceIndex, type ReviewVerification, } from "./evidence.ts";
+export { createWorkerFactory, type SharedWorkerDependencies } from "./factories.ts";
+export { runGit, type GitRunner } from "./git.ts";
+export { ARTIFACT_FORMAT, createIsolationProvider, decodeArtifact, isAttemptOwnerLive, pruneOrphanedAttempts, resolveLinkSafeTarget, SCOPED_SNAPSHOT_LIMITS, type AttemptOwner, type ChangeSet, type PruneOrphansOptions, type PruneReport, type IsolationProviderDependencies, type OrchestratedWorkspace, type OrchestrationIsolationProvider, } from "./isolation.ts";
+export { findScopeViolations, isControlPlanePath, matchesAny, matchesPattern } from "./paths.ts";
+export { applyDelta, compileReviewerPacket, compileTaskPacket, createDeltaPacket, DEFAULT_STEP_FLOORS, MIN_REVIEWER_STEPS, MIN_TASK_STEPS, isIntegrationReview, perTaskStepLimit, placeCrossTaskCriteria, WORKSPACE_READ_EXCLUSIONS, workspaceReadScope, refreshPacketSources, reviewerStepLimit, runStepLimit, validatePlan, type PersonaResolver, type PlanValidation, type StepFloors, } from "./plan.ts";
+export { createModelPlanner, renderConsultPrompt, renderWorkerMessages, renderPlanningPrompt, renderTriagePrompt, type ConsultInput, type Planner, type PlannerInput, type TriageInput, } from "./planner.ts";
+export { createWorkspaceSourceReader, type SourceDigestReader } from "./recorder.ts";
+export { createDagScheduler, DEFAULT_CONCURRENCY, findDependencyCycle, SchedulerError, type ConcurrencyLimits, type DagScheduler, type SchedulableTask, } from "./scheduler.ts";
+export { classifyAttemptFailure, DEFAULT_FINISH_WARNING, renderFinishNowMessage, renderReportOnlyMessage, createWorkerManager, renderRepairMessage, renderIntegrationReviewBrief, renderReviewBrief, type IntegratedDependency, type IntegrationReviewHandle, type IntegrationReviewOutcome, type ArtifactReviewHandle, type ArtifactReviewOutcome, type PinnedReviewArtifact, type AttemptFailure, renderWorkerMessage, type AttemptRecord, type VerificationRequest, type VerificationResult, type VerificationRunner, type WorkerDispatchOptions, type OrchestrationWorkerManager, type RunScope, type WorkerManagerDependencies, } from "./worker-manager.ts";
+export { WorkerStreamHub, type WorkerControlResult, type WorkerDirectory, type WorkerSummary } from "./worker-control.ts";
+export { formatVerificationRefusal, preflightVerification, type VerificationPreflight, type VerificationPreflightContext, type VerificationRefusal } from "./verification-preflight.ts";
+export { contentIdentities, contentIdentity, createWorkspaceDigestReader, resolveOnDiskPath, type ContentIdentityOptions, type WorkspaceDigestOptions } from "./workspace-digest.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/harness/orchestration/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/harness/orchestration/index.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACtI,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClI,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,KAAK,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAC1B,KAAK,8BAA8B,GACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,UAAU,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,2BAA2B,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,QAAQ,EACb,KAAK,yBAAyB,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1H,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,KAAK,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACxL,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/harness/orchestration/index.js

@@ -0,0 +1,23 @@
+export { approvePlan, decisionAnswers, isAllowing, isHumanOnlySubject, summarizePlan } from "./approval.js";
+export { BUDGET_METRICS, CANCEL_THRESHOLD, createBudgetGateSlot, createBudgetTracker, isHumanBudgetGrant, requestBudgetIncrease, } from "./budget.js";
+export { buildAttemptLog, latestReport } from "./attempt-log.js";
+export { actionableFindings, artifactReviewGoal, artifactReviewRecordSchema, compileArtifactReviewPacket, describeReviewTarget, fixFollowUpMessage, isGeneratedPath, mapReviewVerdict, parseReviewArgument, renderArtifactReviewBrief, renderReviewCard, reviewSessionIds, REVIEW_CRITERIA, runArtifactReview, verdictDecision, } from "./artifact-review.js";
+export { commandMentioned, roleCapabilityIssues } from "./capabilities.js";
+export { extractJsonBlock, parseClaim, readClaim, reviewerClaimSchema, workerClaimSchema } from "./claims.js";
+export { createControlPlaneWriter } from "./control-plane.js";
+export { createCoordinator, criterionEvidence, DEFAULT_COORDINATOR_LIMITS, failedRunExitCode, resolveBudgets, retryNotes, scopeLimitedReview, } from "./coordinator.js";
+export { createDelegationSlot, createReportSlot, delegationCallbacks, REPORT_RECORDED, reportCallbacks, } from "./delegation.js";
+export { commandArgv, commandsFromLog, evidenceCandidates, firstPathToken, harnessCanSubstitute, isPlanCausedVerification, INDEPENDENT_EVIDENCE_HINT, isIndependentReviewEvidence, mayComplete, provingVerification, resolveCompletionEvidence, resolveEvidence, resolvePointer, reviewRequired, verifyCompletion, verifyReview, } from "./evidence.js";
+export { createWorkerFactory } from "./factories.js";
+export { runGit } from "./git.js";
+export { ARTIFACT_FORMAT, createIsolationProvider, decodeArtifact, isAttemptOwnerLive, pruneOrphanedAttempts, resolveLinkSafeTarget, SCOPED_SNAPSHOT_LIMITS, } from "./isolation.js";
+export { findScopeViolations, isControlPlanePath, matchesAny, matchesPattern } from "./paths.js";
+export { applyDelta, compileReviewerPacket, compileTaskPacket, createDeltaPacket, DEFAULT_STEP_FLOORS, MIN_REVIEWER_STEPS, MIN_TASK_STEPS, isIntegrationReview, perTaskStepLimit, placeCrossTaskCriteria, WORKSPACE_READ_EXCLUSIONS, workspaceReadScope, refreshPacketSources, reviewerStepLimit, runStepLimit, validatePlan, } from "./plan.js";
+export { createModelPlanner, renderConsultPrompt, renderWorkerMessages, renderPlanningPrompt, renderTriagePrompt, } from "./planner.js";
+export { createWorkspaceSourceReader } from "./recorder.js";
+export { createDagScheduler, DEFAULT_CONCURRENCY, findDependencyCycle, SchedulerError, } from "./scheduler.js";
+export { classifyAttemptFailure, DEFAULT_FINISH_WARNING, renderFinishNowMessage, renderReportOnlyMessage, createWorkerManager, renderRepairMessage, renderIntegrationReviewBrief, renderReviewBrief, renderWorkerMessage, } from "./worker-manager.js";
+export { WorkerStreamHub } from "./worker-control.js";
+export { formatVerificationRefusal, preflightVerification } from "./verification-preflight.js";
+export { contentIdentities, contentIdentity, createWorkspaceDigestReader, resolveOnDiskPath } from "./workspace-digest.js";
+//# sourceMappingURL=index.js.map

package/dist/harness/orchestration/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/harness/orchestration/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAA4B,MAAM,eAAe,CAAC;AACtI,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GAQtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAmE,MAAM,kBAAkB,CAAC;AAClI,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,GAQhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAA2B,MAAM,oBAAoB,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,kBAAkB,GAKnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,eAAe,GAQhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,YAAY,GAKb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAiC,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAkB,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GAQvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GAIb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,GAKnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,2BAA2B,EAA2B,MAAM,eAAe,CAAC;AACrF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,GAIf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EAQjB,mBAAmB,GASpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAsE,MAAM,qBAAqB,CAAC;AAC1H,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAA2F,MAAM,6BAA6B,CAAC;AACxL,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,2BAA2B,EAAE,iBAAiB,EAA4D,MAAM,uBAAuB,CAAC"}

package/dist/harness/orchestration/isolation.d.ts

@@ -0,0 +1,181 @@
+import { type AttemptId, type BlobStore, type Digest, type IsolatedWorkspace, type IsolationCreateOptions, type IsolationProvider, type ProjectId, type TaskContextPacket } from "../contracts/index.ts";
+import { type GitRunner } from "./git.ts";
+/**
+ * Per-attempt isolation (ADR-07, ADR-19).
+ *
+ * - `worktree`: a detached git worktree at `<worktrees>/<project-hash>/<attempt-hash>` on `HEAD`
+ *   (short hashed names keep Windows paths short; git runs with `core.longpaths=true`). The main
+ *   workspace is untouched until `integrate`. Dirty or untracked read inputs are overlaid from the
+ *   main tree and ignored dependency directories (`DEPENDENCY_LINK_DIRECTORIES`) are linked in
+ *   (junction on Windows); neither is ever integrated back. A retry of the same task reuses the
+ *   worktree (`IsolationCreateOptions.reuse`): it is reset to its base instead of recreated. When
+ *   creating the worktree fails, a non-high-risk task falls back to `scoped-dir` with a recorded
+ *   reason, and nothing is left behind.
+ * - `scoped-dir`: writes happen in place, limited by policy to `owned_paths`. A snapshot of the
+ *   tree (ignored files included, but not ignored directories outside the owned paths; bounded by
+ *   `SCOPED_SNAPSHOT_LIMITS`) is taken first and persisted under `<worktrees>/<project-hash>/
+ *   <attempt-hash>.scoped`, so every change is seen (changed ⊆ owned), a failed attempt can be
+ *   reverted, and crash recovery can revert a crashed attempt's partial writes
+ *   (`pruneOrphanedAttempts`). Scoped-dir attempts of different tasks run one at a time.
+ * - `shared-read-only`: explorers and reviewers; nothing may change.
+ *
+ * Every workspace can pin its changes as an artifact: a canonical JSON document of
+ * `{path, before, after, content}` entries whose sha256 is the artifact digest a review binds to.
+ * `before`/`after` are `workspaceDigest`s in the attempt's own workspace (ADR-19). Integrate
+ * compares the main tree by `ContentIdentity` (filtered git blob id) and writes content in the main
+ * tree's representation (smudge filter, EOL), so autocrlf, `.gitattributes eol`, clean/smudge
+ * filters and Git LFS never produce a false conflict.
+ *
+ * Link safety (SEC-H4): integrate, seed and revert resolve every target segment by segment and
+ * refuse any path that traverses a symbolic link or junction, resolves elsewhere or is a
+ * multiply linked file; they never follow a link out of the workspace. Integrate also refuses a
+ * `.gitignore` change that would expose an ignored link unless the link is owned and stays inside.
+ * A worktree is always removed with its dependency links unlinked first and with Node's `rm`,
+ * which never descends into a link (`git worktree remove` would empty a junction's target).
+ */
+export declare const ARTIFACT_FORMAT = "synorch.artifact/v1";
+export declare const ARTIFACT_MEDIA_TYPE = "application/vnd.synorch.artifact+json";
+export declare const SCOPED_BASELINE_FORMAT = "synorch.scoped-baseline/v1";
+export declare const ATTEMPT_OWNER_FORMAT = "synorch.attempt-owner/v1";
+/** Bounds of the scoped-dir snapshot. More entries than `maxEntries` refuses scoped-dir (fail closed). */
+export declare const SCOPED_SNAPSHOT_LIMITS: {
+    readonly maxEntries: 200000;
+    /** Files up to this size are compared by content hash; larger ones by size and mtime. */
+    readonly hashFileBytes: number;
+    /** Content hashed while taking one snapshot; files beyond it are compared by size and mtime. */
+    readonly hashTotalBytes: number;
+    /** Pre-attempt content kept on disk for revert; changes to files beyond it are detected but reported unrestorable. */
+    readonly keepTotalBytes: number;
+};
+/** Length of the hashed project and attempt directory names under the worktrees root. */
+export declare const WORKSPACE_NAME_LENGTH = 12;
+/**
+ * Generated output directories (P0-A): dependency installs, build output and tool caches. Outside a
+ * git root (where `git check-ignore` cannot answer) a scoped snapshot never walks them, so they never
+ * enter an artifact, its digest, the changed ⊆ owned check, a review or an integration; inside a git
+ * root the ignore rules decide instead (a tracked `build/` stays visible).
+ */
+export declare const GENERATED_DIRECTORY_NAMES: ReadonlySet<string>;
+/** True when `relative` lies inside a generated directory (`GENERATED_DIRECTORY_NAMES`) that no owned path names. */
+export declare function inGeneratedDirectory(relative: string, ownedPaths: readonly string[], platform: NodeJS.Platform): boolean;
+export interface ArtifactChange {
+    readonly path: string;
+    readonly before: Digest | null;
+    readonly after: Digest | null;
+}
+export interface ChangeSet {
+    readonly artifactDigest: Digest;
+    readonly artifactBytes: Uint8Array;
+    readonly changes: readonly ArtifactChange[];
+    readonly contents: ReadonlyMap<string, Buffer | null>;
+    /** Changed paths that are links, special files, inside a submodule, ambiguous or not expressible as workspace paths; integrate refuses them. */
+    readonly unsafe: readonly string[];
+    /** Why an `unsafe` entry cannot be integrated, when more specific than "link or special file". */
+    readonly unsafeReasons?: ReadonlyMap<string, string>;
+    /** On-disk spelling of a changed path when it differs from its NFC workspace path (an NFD-created name). */
+    readonly diskPaths?: ReadonlyMap<string, string>;
+}
+export interface OrchestratedWorkspace extends IsolatedWorkspace {
+    readonly attemptId: AttemptId;
+    readonly ownedPaths: readonly string[];
+    readonly forbiddenPaths: readonly string[];
+    changeSet(signal: AbortSignal): Promise<ChangeSet>;
+    /** Restores the pre-attempt content of every changed path; returns the paths it restored. */
+    revert(signal: AbortSignal): Promise<readonly string[]>;
+}
+export interface IsolationProviderDependencies {
+    readonly workspaceRoot: string;
+    readonly projectId: ProjectId;
+    /** Parent of `.synorch`; defaults to the user's home directory. */
+    readonly home?: string;
+    /** Overrides `<home>/.synorch/worktrees` (the composition root passes `<SYNORCH_HOME>/worktrees`). */
+    readonly worktreesRoot?: string;
+    readonly git?: GitRunner;
+    readonly blobs?: BlobStore;
+    readonly platform?: NodeJS.Platform;
+}
+export interface OrchestrationIsolationProvider extends IsolationProvider {
+    create(packet: TaskContextPacket, attemptId: AttemptId, signal: AbortSignal, options?: IsolationCreateOptions): Promise<OrchestratedWorkspace>;
+    /** Writes a previously pinned artifact into a fresh workspace (a revise attempt continues from it). */
+    seed(workspace: OrchestratedWorkspace, artifactBytes: Uint8Array, signal: AbortSignal): Promise<void>;
+    worktreePath(attemptId: AttemptId): string;
+}
+interface ArtifactDocument {
+    readonly format: typeof ARTIFACT_FORMAT;
+    readonly mode: IsolatedWorkspace["mode"];
+    readonly base_commit: string | null;
+    readonly changes: readonly {
+        readonly path: string;
+        readonly before: string | null;
+        readonly after: string | null;
+        readonly content: string | null;
+    }[];
+}
+/** Who created an attempt workspace; recovery prunes it only when this process is gone. */
+export interface AttemptOwner {
+    readonly format: typeof ATTEMPT_OWNER_FORMAT;
+    readonly attempt_id: string;
+    readonly mode: "worktree" | "scoped-dir";
+    readonly pid: number;
+    readonly host: string;
+    readonly workspace_root: string;
+    readonly created_at: string;
+    /** Dependency links inside the worktree, unlinked before the worktree is removed. */
+    readonly dependency_links?: readonly string[];
+}
+/** Short, stable directory name for a project or attempt id (keeps worktree paths short on Windows). */
+export declare function workspaceDirectoryName(id: string): string;
+/** `<worktreesRoot>/<project-hash>`: where one project's attempt workspaces live. */
+export declare function projectWorkspacesDirectory(worktreesRoot: string, projectId: string): string;
+interface TargetOptions {
+    /** Revert and recovery restore reserved paths (`.git/hooks`, `.synorch`) too; integrate and seed never write them. */
+    readonly allowReserved?: boolean;
+    /** Removal may unlink a link itself (never what it points to). */
+    readonly allowFinalLink?: boolean;
+}
+/**
+ * The absolute path for writing `relative` under `root`. Each existing segment is checked with
+ * `lstat` and `realpath`: a symbolic link, junction or other reparse point, a non-directory
+ * parent, a directory target or a multiply linked file is refused, so the write can never land
+ * outside `root`. The on-disk spelling is kept (an NFD-created name is written as it is on disk).
+ */
+export declare function resolveLinkSafeTarget(root: string, relative: string, platform: NodeJS.Platform, options?: TargetOptions): Promise<string>;
+export declare function decodeArtifact(bytes: Uint8Array): ArtifactDocument;
+export declare function createIsolationProvider(deps: IsolationProviderDependencies): OrchestrationIsolationProvider;
+export interface PruneOrphansOptions {
+    readonly worktreesRoot: string;
+    readonly projectId: ProjectId;
+    readonly workspaceRoot: string;
+    readonly git?: GitRunner;
+    readonly platform?: NodeJS.Platform;
+    /** Whether the process that created an attempt workspace may still use it. */
+    readonly isLive?: (owner: AttemptOwner) => boolean;
+}
+export interface PruneReport {
+    /** Worktree directories removed (their attempt's process is gone), by attempt id. */
+    readonly removedWorktrees: readonly string[];
+    /** Crashed scoped-dir attempts: owned paths restored, other changes left in place, and paths no copy existed for. */
+    readonly revertedScoped: readonly {
+        readonly attemptId: string;
+        readonly restored: readonly string[];
+        readonly leftInPlace: readonly string[];
+        readonly unrestorable: readonly string[];
+    }[];
+    /** Attempt workspaces whose owner process is still alive (or on another host). */
+    readonly live: readonly string[];
+    /** Directories without an owner record; left alone. */
+    readonly unknown: readonly string[];
+}
+/** The default liveness test: same host, and the owner process still runs (this process counts as live). */
+export declare function isAttemptOwnerLive(owner: AttemptOwner): boolean;
+/**
+ * Removes attempt workspaces a crashed process left under the project's worktrees directory (the
+ * hashed one, and the pre-ADR-19 `<worktrees>/<project-id>`): git worktrees are removed with their
+ * dependency links unlinked first, and a scoped-dir attempt's partial writes inside its owned
+ * paths are reverted from the persisted snapshot (changes elsewhere are reported, not reverted,
+ * because the user may have edited those files since). Nothing whose owner is live is touched.
+ * Integrated scoped-dir attempts are only cleaned up.
+ */
+export declare function pruneOrphanedAttempts(options: PruneOrphansOptions): Promise<PruneReport>;
+export {};
+//# sourceMappingURL=isolation.d.ts.map