wabachi 0.2.1 → 0.3.0

package/dist/runtime/repository.js

@@ -1,13 +1,78 @@
-import { execFile } from "node:child_process";
+import { execFile, spawn } from "node:child_process";
 import { mkdir } from "node:fs/promises";
 import { promisify } from "node:util";
 const execFileAsync = promisify(execFile);
+const MAX_EXTERNAL_PROCESS_STDERR_LENGTH = 1024;
+function processErrorLike(error) {
+    if (error === null || typeof error !== "object")
+        return undefined;
+    return error;
+}
+export function isExternalProcessError(error) {
+    const processError = processErrorLike(error);
+    return (processError !== undefined &&
+        (processError.stderr !== undefined ||
+            processError.cmd !== undefined ||
+            processError.signal !== undefined ||
+            typeof processError.code === "number"));
+}
+function boundedText(value) {
+    const normalized = value.replace(/\s+/gu, " ").trim();
+    if (normalized.length <= MAX_EXTERNAL_PROCESS_STDERR_LENGTH)
+        return normalized;
+    return `${normalized.slice(0, MAX_EXTERNAL_PROCESS_STDERR_LENGTH - 1)}…`;
+}
+function processStatus(processError) {
+    if (typeof processError?.code === "number")
+        return `exit ${processError.code}`;
+    if (processError?.signal)
+        return `signal ${processError.signal}`;
+    if (processError?.code !== undefined && processError.code !== null)
+        return `error ${processError.code}`;
+    return "failed to start";
+}
+function processCommand(processError, fallbackCommand) {
+    return processError?.cmd ?? fallbackCommand ?? "external process";
+}
+/** Formats process failures for both runtime exceptions and provider records. */
+export function formatExternalProcessError(error, stage, fallbackCommand) {
+    const processError = processErrorLike(error);
+    const stderr = processError?.stderr === undefined ? "" : String(processError.stderr);
+    const detail = boundedText(stderr || (error instanceof Error ? error.message : String(error)));
+    const suffix = detail.length === 0 ? "" : ` stderr: ${detail}`;
+    return `${stage} failed: ${processCommand(processError, fallbackCommand)} (${processStatus(processError)})${suffix}`;
+}
+function captureStderr(stream) {
+    let value = "";
+    let truncated = false;
+    stream.setEncoding("utf8");
+    stream.on("data", (chunk) => {
+        if (value.length >= MAX_EXTERNAL_PROCESS_STDERR_LENGTH) {
+            truncated = true;
+            return;
+        }
+        const next = `${value}${chunk}`;
+        if (next.length > MAX_EXTERNAL_PROCESS_STDERR_LENGTH) {
+            value = next.slice(0, MAX_EXTERNAL_PROCESS_STDERR_LENGTH);
+            truncated = true;
+        }
+        else {
+            value = next;
+        }
+    });
+    return () => (truncated ? boundedText(`${value}…`) : boundedText(value));
+}
 function isRemoteUrl(source) {
     return /^[a-z][a-z0-9+.-]*:\/\//iu.test(source) || /^[^/]+@[^:]+:/u.test(source);
 }
 async function git(args, cwd) {
-    const { stdout } = await execFileAsync("git", args, { cwd });
-    return stdout.trim();
+    try {
+        const { stdout } = await execFileAsync("git", args, { cwd });
+        return stdout.trim();
+    }
+    catch (error) {
+        throw new Error(formatExternalProcessError(error, "git", ["git", ...args].join(" ")), { cause: error });
+    }
 }
 /**
  * Resolves a local repository path or a Git URL, plus an optional revision,
@@ -19,7 +84,7 @@ async function git(args, cwd) {
 export async function resolveRepository(source, revision, bareRepoDir) {
     if (isRemoteUrl(source)) {
         await mkdir(bareRepoDir, { recursive: true });
-        await execFileAsync("git", ["init", "--bare", "-q", bareRepoDir]);
+        await git(["init", "--bare", "-q", bareRepoDir], bareRepoDir);
         await git(["fetch", "-q", "--depth", "1", source, revision ?? "HEAD"], bareRepoDir);
         const commitSha = await git(["rev-parse", "FETCH_HEAD"], bareRepoDir);
         return { resolved: { source, commitSha }, archiveDir: bareRepoDir };
@@ -35,20 +100,79 @@ export async function resolveRepository(source, revision, bareRepoDir) {
 export async function createIsolatedWorkspace(resolution, workspaceRoot) {
     await mkdir(workspaceRoot, { recursive: true });
     await new Promise((resolve, reject) => {
-        const gitArchive = execFile("git", ["archive", resolution.resolved.commitSha], { cwd: resolution.archiveDir, maxBuffer: 1024 * 1024 * 1024 }, (error) => {
-            if (error)
-                reject(error);
+        const gitCommand = ["git", "archive", resolution.resolved.commitSha];
+        const tarCommand = ["tar", "-x", "-C", workspaceRoot];
+        const gitArchive = spawn(gitCommand[0], gitCommand.slice(1), {
+            cwd: resolution.archiveDir,
         });
-        const tar = execFile("tar", ["-x", "-C", workspaceRoot], (error) => {
-            if (error)
-                reject(error);
-            else
-                resolve();
+        const tar = spawn(tarCommand[0], tarCommand.slice(1));
+        const gitArchiveStderr = captureStderr(gitArchive.stderr);
+        const tarStderr = captureStderr(tar.stderr);
+        let gitArchiveExit;
+        let tarExit;
+        let pipeError;
+        let settled = false;
+        const stopOtherProcess = (process) => {
+            if (!process.killed)
+                process.kill();
+        };
+        const rejectWithProcessError = (error, stage, command, sibling) => {
+            if (settled)
+                return;
+            settled = true;
+            stopOtherProcess(sibling);
+            reject(new Error(formatExternalProcessError(error, stage, command.join(" ")), { cause: error }));
+        };
+        const finish = () => {
+            if (settled || gitArchiveExit === undefined || tarExit === undefined)
+                return;
+            // A malformed/empty stream caused by git archive failing should retain
+            // git's actionable stderr instead of replacing it with tar's secondary
+            // "not an archive" diagnostic. A tar failure takes precedence when the
+            // archive side was terminated by the pipe closing (SIGPIPE).
+            if (gitArchiveExit.code !== null && gitArchiveExit.code !== 0) {
+                settled = true;
+                reject(new Error(formatExternalProcessError({ code: gitArchiveExit.code, signal: gitArchiveExit.signal, stderr: gitArchiveStderr() }, "git archive", gitCommand.join(" "))));
+                return;
+            }
+            if (tarExit.code !== 0 || tarExit.signal !== null) {
+                settled = true;
+                reject(new Error(formatExternalProcessError({ code: tarExit.code, signal: tarExit.signal, stderr: tarStderr() }, "tar extraction", tarCommand.join(" "))));
+                return;
+            }
+            if (gitArchiveExit.signal !== null) {
+                settled = true;
+                reject(new Error(formatExternalProcessError({ code: gitArchiveExit.code, signal: gitArchiveExit.signal, stderr: gitArchiveStderr() }, "git archive", gitCommand.join(" "))));
+                return;
+            }
+            if (pipeError !== undefined) {
+                settled = true;
+                reject(new Error(`archive pipe failed: ${boundedText(String(pipeError))}`, { cause: pipeError }));
+                return;
+            }
+            settled = true;
+            resolve();
+        };
+        gitArchive.once("error", (error) => {
+            rejectWithProcessError(error, "git archive", gitCommand, tar);
+        });
+        tar.once("error", (error) => {
+            rejectWithProcessError(error, "tar extraction", tarCommand, gitArchive);
+        });
+        gitArchive.once("close", (code, signal) => {
+            gitArchiveExit = { code, signal };
+            finish();
+        });
+        tar.once("close", (code, signal) => {
+            tarExit = { code, signal };
+            finish();
+        });
+        gitArchive.stdout.once("error", (error) => {
+            pipeError ??= error;
+        });
+        tar.stdin.once("error", (error) => {
+            pipeError ??= error;
         });
-        if (!gitArchive.stdout || !tar.stdin) {
-            reject(new Error("failed to pipe git archive into tar"));
-            return;
-        }
         gitArchive.stdout.pipe(tar.stdin);
     });
 }

package/dist/runtime/repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/runtime/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,GAAW;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,QAA4B,EAC5B,WAAmB;IAEnB,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;QACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,IAAI,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAgC,EAAE,aAAqB;IACnG,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,UAAU,GAAG,QAAQ,CACzB,KAAK,EACL,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC1C,EAAE,GAAG,EAAE,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,EAC7D,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CACF,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;YACjE,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/runtime/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAShD,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,KAAyB,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,CACL,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS;YAChC,YAAY,CAAC,GAAG,KAAK,SAAS;YAC9B,YAAY,CAAC,MAAM,KAAK,SAAS;YACjC,OAAO,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,IAAI,kCAAkC;QAAE,OAAO,UAAU,CAAC;IAC/E,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,kCAAkC,GAAG,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,YAA0C;IAC/D,IAAI,OAAO,YAAY,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,YAAY,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,YAAY,EAAE,MAAM;QAAE,OAAO,UAAU,YAAY,CAAC,MAAM,EAAE,CAAC;IACjE,IAAI,YAAY,EAAE,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,YAAY,CAAC,IAAI,EAAE,CAAC;IACxG,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,YAA0C,EAAE,eAAwB;IAC1F,OAAO,YAAY,EAAE,GAAG,IAAI,eAAe,IAAI,kBAAkB,CAAC;AACpE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,KAAa,EAAE,eAAwB;IAChG,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,YAAY,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC;IAC/D,OAAO,GAAG,KAAK,YAAY,cAAc,CAAC,YAAY,EAAE,eAAe,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC,IAAI,MAAM,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,aAAa,CAAC,MAA6B;IAClD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,MAAM,IAAI,kCAAkC,EAAE,CAAC;YACvD,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;YACrD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;YAC1D,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,QAA4B,EAC5B,WAAmB;IAEnB,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;QACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,IAAI,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAgC,EAAE,aAAqB;IACnG,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAW,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACrE,GAAG,EAAE,UAAU,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAW,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhE,MAAM,gBAAgB,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,cAAoG,CAAC;QACzG,IAAI,OAA6F,CAAC;QAClG,IAAI,SAAkB,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,gBAAgB,GAAG,CAAC,OAAuC,EAAQ,EAAE;YACzE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC,CAAC;QACF,MAAM,sBAAsB,GAAG,CAC7B,KAAc,EACd,KAAa,EACb,OAA0B,EAC1B,OAAuC,EACjC,EAAE;YACR,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnG,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,OAAO,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAE7E,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,6DAA6D;YAC7D,IAAI,cAAc,CAAC,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC9D,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,CACxB,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EACxF,aAAa,EACb,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CACrB,CACF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,CACxB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EACnE,gBAAgB,EAChB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CACrB,CACF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,cAAc,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACnC,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,CACxB,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EACxF,aAAa,EACb,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CACrB,CACF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAClG,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,sBAAsB,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACxC,cAAc,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAClC,MAAM,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC3B,MAAM,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACxC,SAAS,KAAK,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,SAAS,KAAK,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/run.js

@@ -2,7 +2,7 @@ import { randomUUID } from "node:crypto";
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import { collectToolchainVersions, writeManifest } from "./manifest.js";
-import { createIsolatedWorkspace, resolveRepository } from "./repository.js";
+import { createIsolatedWorkspace, formatExternalProcessError, isExternalProcessError, resolveRepository, } from "./repository.js";
 /**
  * Resolves the input repository to an immutable commit, materializes it
  * into an isolated workspace, executes each provider through the common
@@ -75,6 +75,8 @@ async function executeProvider(provider, context) {
     }
 }
 function toErrorMessage(error) {
+    if (isExternalProcessError(error))
+        return formatExternalProcessError(error, "provider process");
     return error instanceof Error ? error.message : String(error);
 }
 //# sourceMappingURL=run.js.map

package/dist/runtime/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/runtime/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAe7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1F,MAAM,uBAAuB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEzD,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAoB;YAC/B,aAAa;YACb,YAAY;YACZ,UAAU,EAAE,UAAU,CAAC,QAAQ;SAChC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,eAAe,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAgB;QAC5B,KAAK;QACL,UAAU,EAAE,UAAU,CAAC,QAAQ;QAC/B,SAAS;QACT,UAAU;QACV,SAAS,EAAE,MAAM,wBAAwB,EAAE;QAC3C,SAAS,EAAE,eAAe;KAC3B,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,OAAwB;IACzE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACnG,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;YACb,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/runtime/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAezB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1F,MAAM,uBAAuB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEzD,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAoB;YAC/B,aAAa;YACb,YAAY;YACZ,UAAU,EAAE,UAAU,CAAC,QAAQ;SAChC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,eAAe,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAgB;QAC5B,KAAK;QACL,UAAU,EAAE,UAAU,CAAC,QAAQ;QAC/B,SAAS;QACT,UAAU;QACV,SAAS,EAAE,MAAM,wBAAwB,EAAE;QAC3C,SAAS,EAAE,eAAe;KAC3B,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,OAAwB;IACzE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACnG,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;YACb,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,sBAAsB,CAAC,KAAK,CAAC;QAAE,OAAO,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAChG,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/working-set/codec.d.ts

@@ -0,0 +1,7 @@
+import { type CandidateWorkingSet, type CandidateWorkingSetInput } from "./model.js";
+/** Deterministic JSON serialization of the canonical artifact shape. */
+export declare function serializeCandidateWorkingSet(input: CandidateWorkingSetInput | CandidateWorkingSet): string;
+/** Parses JSON and rejects malformed or unsupported artifacts before semantic use. */
+export declare function parseCandidateWorkingSet(serialized: string): CandidateWorkingSet;
+/** Alias for callers that need validation without parsing a JSON string. */
+export declare const decodeCandidateWorkingSet: typeof parseCandidateWorkingSet;

package/dist/working-set/codec.js

@@ -0,0 +1,53 @@
+import { CANDIDATE_WORKING_SET_KIND, createCandidateWorkingSet, validateCandidateWorkingSet, } from "./model.js";
+function canonicalDocument(workingSet) {
+    return {
+        kind: CANDIDATE_WORKING_SET_KIND,
+        schemaVersion: workingSet.schemaVersion,
+        workingSetId: workingSet.workingSetId,
+        repository: {
+            repositoryHost: workingSet.repository.repositoryHost,
+            repositoryId: workingSet.repository.repositoryId,
+            repository: workingSet.repository.repository,
+        },
+        revision: workingSet.revision,
+        entries: workingSet.entries.map((entry) => ({
+            state: entry.state,
+            target: {
+                kind: entry.target.kind,
+                locator: entry.target.locator,
+            },
+            reason: {
+                id: entry.reason.id,
+                summary: entry.reason.summary,
+            },
+            evidence: entry.evidence.map((reference) => ({
+                artifact: reference.artifact,
+                reference: reference.reference,
+            })),
+        })),
+    };
+}
+/** Deterministic JSON serialization of the canonical artifact shape. */
+export function serializeCandidateWorkingSet(input) {
+    const workingSet = validateCandidateWorkingSet({
+        ...createCandidateWorkingSet(input),
+        schemaVersion: 1,
+    });
+    return JSON.stringify(canonicalDocument(workingSet));
+}
+/** Parses JSON and rejects malformed or unsupported artifacts before semantic use. */
+export function parseCandidateWorkingSet(serialized) {
+    if (typeof serialized !== "string")
+        throw new TypeError("candidate working set serialization must be a string");
+    let parsed;
+    try {
+        parsed = JSON.parse(serialized);
+    }
+    catch {
+        throw new TypeError("candidate working set serialization is malformed");
+    }
+    return validateCandidateWorkingSet(parsed);
+}
+/** Alias for callers that need validation without parsing a JSON string. */
+export const decodeCandidateWorkingSet = parseCandidateWorkingSet;
+//# sourceMappingURL=codec.js.map

package/dist/working-set/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/working-set/codec.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,GAG5B,MAAM,YAAY,CAAC;AAEpB,SAAS,iBAAiB,CAAC,UAA+B;IACxD,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE;YACV,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC,cAAc;YACpD,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,YAAY;YAChD,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,UAAU;SAC7C;QACD,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE;gBACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;gBACvB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;aAC9B;YACD,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;aAC9B;YACD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC3C,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,4BAA4B,CAAC,KAAqD;IAChG,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,GAAG,yBAAyB,CAAC,KAAK,CAAC;QACnC,aAAa,EAAE,CAAC;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAChH,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,CAAC"}

package/dist/working-set/conflicts.d.ts

@@ -0,0 +1,46 @@
+import { type CandidateWorkingSetEntry, type RepositoryIdentity, type WorkingSetEvidenceReference, type WorkingSetTarget } from "./model.js";
+/** V1 diagnostics that must remain visible instead of being resolved implicitly. */
+export declare const WORKING_SET_CONFLICT_KINDS: readonly ["ambiguity", "disagreement", "stale-evidence", "mapping-gap", "required-but-unauthorized", "insufficient-evidence"];
+export type WorkingSetConflictKind = (typeof WORKING_SET_CONFLICT_KINDS)[number];
+export interface WorkingSetConflict {
+    readonly kind: WorkingSetConflictKind;
+    /** Unresolved target used to preserve the conflict in the Candidate Working Set artifact. */
+    readonly target: WorkingSetTarget;
+    readonly reason: {
+        readonly id: string;
+        readonly summary: string;
+    };
+    readonly evidence: readonly WorkingSetEvidenceReference[];
+}
+export interface WorkingSetAuthorizationEntry {
+    readonly target: WorkingSetTarget;
+    readonly evidence?: readonly WorkingSetEvidenceReference[];
+}
+/**
+ * External authorization is intentionally only an input to comparison. It is
+ * never copied into the Candidate Working Set as authority and never widened
+ * by Wabachi.
+ */
+export interface WorkingSetAuthorizationInput {
+    readonly repository?: RepositoryIdentity;
+    readonly revision?: string;
+    readonly targets?: readonly (WorkingSetTarget | WorkingSetAuthorizationEntry)[];
+    readonly entries?: readonly WorkingSetAuthorizationEntry[];
+    readonly authorizedTargets?: readonly (WorkingSetTarget | WorkingSetAuthorizationEntry)[];
+}
+export interface WorkingSetConflictInput {
+    readonly kind: WorkingSetConflictKind;
+    /** Stable conflict-local locator, not provider payload. */
+    readonly locator: string;
+    readonly evidence?: readonly WorkingSetEvidenceReference[];
+}
+/** Creates one deterministic, unresolved conflict record from bounded evidence. */
+export declare function createWorkingSetConflict(input: WorkingSetConflictInput): WorkingSetConflict;
+/** Converts the semantic conflict record into the existing artifact entry shape. */
+export declare function conflictToWorkingSetEntry(conflict: WorkingSetConflict): CandidateWorkingSetEntry;
+/** Returns the machine-readable conflict class carried by an unresolved entry. */
+export declare function getWorkingSetConflictKind(entry: CandidateWorkingSetEntry): WorkingSetConflictKind | undefined;
+/** Canonicalizes the supported authorization comparison shapes without issuing authority. */
+export declare function authorizationEntries(input: WorkingSetAuthorizationInput): readonly WorkingSetAuthorizationEntry[];
+export declare function workingSetTargetKey(target: WorkingSetTarget): string;
+export declare function conflictSummary(kind: WorkingSetConflictKind): string;

package/dist/working-set/conflicts.js

@@ -0,0 +1,97 @@
+import { CANDIDATE_WORKING_SET_LIMITS, } from "./model.js";
+/** V1 diagnostics that must remain visible instead of being resolved implicitly. */
+export const WORKING_SET_CONFLICT_KINDS = [
+    "ambiguity",
+    "disagreement",
+    "stale-evidence",
+    "mapping-gap",
+    "required-but-unauthorized",
+    "insufficient-evidence",
+];
+const CONFLICT_SUMMARIES = Object.freeze({
+    ambiguity: "candidate evidence has multiple possible interpretations",
+    disagreement: "provider evidence disagrees about the candidate context",
+    "stale-evidence": "evidence is not pinned to the current repository revision",
+    "mapping-gap": "required evidence has no unique Canon repository mapping",
+    "required-but-unauthorized": "required context is outside the supplied authorization comparison",
+    "insufficient-evidence": "available evidence is insufficient for a current derivation",
+});
+function compareText(left, right) {
+    if (left < right)
+        return -1;
+    if (left > right)
+        return 1;
+    return 0;
+}
+function evidenceKey(reference) {
+    return `${reference.artifact}\u0000${reference.reference}`;
+}
+function boundedEvidence(references) {
+    const unique = new Map();
+    for (const reference of references)
+        unique.set(evidenceKey(reference), reference);
+    return [...unique.values()]
+        .sort((left, right) => compareText(left.artifact, right.artifact) || compareText(left.reference, right.reference))
+        .slice(0, CANDIDATE_WORKING_SET_LIMITS.maxEvidenceReferencesPerEntry);
+}
+function boundedLocator(value) {
+    const normalized = value.normalize("NFC");
+    return normalized.length === 0 ? "unknown" : normalized.slice(0, CANDIDATE_WORKING_SET_LIMITS.maxTargetLocatorLength);
+}
+/** Creates one deterministic, unresolved conflict record from bounded evidence. */
+export function createWorkingSetConflict(input) {
+    const locator = boundedLocator(input.locator);
+    const kind = input.kind;
+    return Object.freeze({
+        kind,
+        target: Object.freeze({ kind: "unresolved", locator: boundedLocator(`conflict:${kind}:${locator}`) }),
+        reason: Object.freeze({ id: `conflict:${kind}`, summary: CONFLICT_SUMMARIES[kind] }),
+        evidence: Object.freeze(boundedEvidence(input.evidence ?? [])),
+    });
+}
+/** Converts the semantic conflict record into the existing artifact entry shape. */
+export function conflictToWorkingSetEntry(conflict) {
+    return {
+        state: "unresolved",
+        target: conflict.target,
+        reason: conflict.reason,
+        evidence: conflict.evidence,
+    };
+}
+/** Returns the machine-readable conflict class carried by an unresolved entry. */
+export function getWorkingSetConflictKind(entry) {
+    if (entry.state !== "unresolved" || entry.target.kind !== "unresolved")
+        return undefined;
+    const kind = entry.reason.id.startsWith("conflict:") ? entry.reason.id.slice("conflict:".length) : undefined;
+    return WORKING_SET_CONFLICT_KINDS.includes(kind)
+        ? kind
+        : undefined;
+}
+function isAuthorizationEntry(value) {
+    return "target" in value;
+}
+/** Canonicalizes the supported authorization comparison shapes without issuing authority. */
+export function authorizationEntries(input) {
+    const values = [...(input.targets ?? []), ...(input.entries ?? []), ...(input.authorizedTargets ?? [])].map((value) => (isAuthorizationEntry(value) ? value : { target: value }));
+    const unique = new Map();
+    for (const value of values) {
+        const key = `${value.target.kind}\u0000${value.target.locator}`;
+        const existing = unique.get(key);
+        if (existing === undefined) {
+            unique.set(key, value);
+            continue;
+        }
+        unique.set(key, {
+            target: existing.target,
+            evidence: boundedEvidence([...(existing.evidence ?? []), ...(value.evidence ?? [])]),
+        });
+    }
+    return [...unique.values()].sort((left, right) => compareText(left.target.kind, right.target.kind) || compareText(left.target.locator, right.target.locator));
+}
+export function workingSetTargetKey(target) {
+    return `${target.kind}\u0000${target.locator}`;
+}
+export function conflictSummary(kind) {
+    return CONFLICT_SUMMARIES[kind];
+}
+//# sourceMappingURL=conflicts.js.map

package/dist/working-set/conflicts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflicts.js","sourceRoot":"","sources":["../../src/working-set/conflicts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,GAK7B,MAAM,YAAY,CAAC;AAEpB,oFAAoF;AACpF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,2BAA2B;IAC3B,uBAAuB;CACf,CAAC;AAGX,MAAM,kBAAkB,GAAqD,MAAM,CAAC,MAAM,CAAC;IACzF,SAAS,EAAE,0DAA0D;IACrE,YAAY,EAAE,yDAAyD;IACvE,gBAAgB,EAAE,2DAA2D;IAC7E,aAAa,EAAE,0DAA0D;IACzE,2BAA2B,EAAE,mEAAmE;IAChG,uBAAuB,EAAE,6DAA6D;CACvF,CAAC,CAAC;AAsCH,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,SAAsC;IACzD,OAAO,GAAG,SAAS,CAAC,QAAQ,SAAS,SAAS,CAAC,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,UAAkD;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,UAAU;QAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;SACxB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACjH,KAAK,CAAC,CAAC,EAAE,4BAA4B,CAAC,6BAA6B,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,4BAA4B,CAAC,sBAAsB,CAAC,CAAC;AACxH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAC,KAA8B;IACrE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,OAAO,EAAE,cAAc,CAAC,YAAY,IAAI,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9G,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CAAC,QAA4B;IACpE,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,yBAAyB,CAAC,KAA+B;IACvE,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IACzF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,OAAO,0BAA0B,CAAC,QAAQ,CAAC,IAA8B,CAAC;QACxE,CAAC,CAAE,IAA+B;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAsD;IAEtD,OAAO,QAAQ,IAAI,KAAK,CAAC;AAC3B,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,KAAmC;IACtE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CACzG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACrE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,SAAS,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YACd,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAC7G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,OAAO,GAAG,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA4B;IAC1D,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC"}

package/dist/working-set/derive.d.ts

@@ -0,0 +1,34 @@
+import { type FactNormalizationResult } from "../runtime/facts.js";
+import type { ArchitectureDocumentV1 } from "../architecture/canon/document.js";
+import { type CandidateWorkingSet } from "./model.js";
+import { type WorkingSetAuthorizationInput } from "./conflicts.js";
+import type { WorkingSetSeedResolutionResult } from "./seeds.js";
+/** Canon relationship classes admitted by the V1 derivation boundary. */
+export declare const CANON_V1_RELATIONSHIP_CLASSES: readonly ["depends-on", "calls", "uses", "data", "control"];
+export type CanonV1RelationshipClass = (typeof CANON_V1_RELATIONSHIP_CLASSES)[number];
+/** Provider predicates admitted by the V1 derivation boundary. */
+export declare const PROVIDER_V1_RELATIONSHIP_CLASSES: readonly ["depends-on", "imports", "calls", "references"];
+export type ProviderV1RelationshipClass = (typeof PROVIDER_V1_RELATIONSHIP_CLASSES)[number];
+export interface CandidateWorkingSetDerivationInput {
+    /** Seed resolutions are already bound to the task repository and revision. */
+    readonly seeds: WorkingSetSeedResolutionResult;
+    /** Existing normalized provider evidence and its correlation projection. */
+    readonly providerEvidence: FactNormalizationResult;
+    /** Existing read-only Architecture Canon. */
+    readonly canon: ArchitectureDocumentV1;
+    /** Optional artifact identity; the task identity is used when omitted. */
+    readonly workingSetId?: string;
+    /** Optional external authorization boundary used only as comparison evidence. */
+    readonly authorization?: WorkingSetAuthorizationInput;
+}
+/**
+ * Derives one authorization-neutral Candidate Working Set from bounded seed
+ * resolutions, normalized provider evidence, and the read-only Canon.
+ *
+ * The algorithm has two deliberate traversal boundaries: Canon `depends-on`
+ * may recurse only while the source and target retain the same non-empty
+ * boundary membership, and provider relationships are consumed only as a
+ * single evidence hop. Other admitted relationship classes add context but
+ * never create a transitive provider/repository graph.
+ */
+export declare function deriveCandidateWorkingSet(input: CandidateWorkingSetDerivationInput): CandidateWorkingSet;