wicked-crew 0.7.28 → 0.7.29

package/dist/core/deliver.js

@@ -11,6 +11,15 @@
  *      to the current branch when that ref does not exist;
  *  (b) the script REFUSES to push `main`/`master` (or an empty/detached branch name) — the
  *      deliver phase only ever pushes run branches;
+ *  (b2) with the engine's `WICKED_DELIVER_VERIFIED_BASE` pin set (wicked-core#431 / #433: the
+ *      remote-tip commit the engine lifted the work onto and re-verified against), it REFUSES —
+ *      before staging anything — when origin's default branch no longer resolves to that commit
+ *      after its own fetch ({@link DELIVER_BASE_MOVED_MARKER}): a base that moved past the verified
+ *      one is re-verified by the engine's retry, never rebased past by this script;
+ *  (b3) the crew#426 preflight (lockfile re-sync + codegen) runs AFTER the engine's verification;
+ *      when it changes the worktree, an engine-driven delivery REFUSES and names the files
+ *      ({@link DELIVER_PREFLIGHT_CHANGED_MARKER}) — a post-hoc lift ({@link DELIVER_POSTHOC_ENV})
+ *      keeps the regeneration and says so;
  *  (c) it STAGES AND COMMITS the run's work, then rebases onto origin's default branch before
  *      pushing. A conflict whose conflicted paths are ALL `CHANGELOG.md` is union-merged (both
  *      sides' additive lines kept) and the rebase continues — the crew#418 collision magnet, made
@@ -19,8 +28,15 @@
  *      pushed conflicted tree;
  *  (d) `git push -u origin <branch>` — every rejected push carries the recovery marker. The run
  *      work is already committed locally, so an operator can repair auth/transport and retry;
- *  (e) `gh pr create --head <branch> --fill`, with gh's output and exit status captured
- *      SEPARATELY so a gh failure fails the phase carrying gh's own message;
+ *  (e) `gh pr create --head <branch> --title … --body-file …`, with gh's output and exit status
+ *      captured SEPARATELY so a gh failure fails the phase carrying gh's own message. The title
+ *      and body are COMPOSED FROM THE RUN (crew#524 / F-3R2-014, `core/deliver-text.ts`): the
+ *      script asks the daemon that launched it (`GET /runs/:id/deliver-text`) for the text derived
+ *      from the persisted run record — intent, `Fixes #N`, run link, phases + seats + gate
+ *      outcomes, repo checks with exit codes, the evaluator verdict — and falls back to the same
+ *      composer's launch-time text (embedded in the script) when the daemon cannot answer. The
+ *      commit the phase makes for uncommitted work carries that same text (`git commit -F`), so
+ *      ITS subject is the PR title; a run that committed incrementally keeps its own commits;
  *  (f) the PR URL is the last line of the phase output.
  *
  * One deliberate change from the field version: NO gh account is baked into crew code (the
@@ -58,6 +74,7 @@
  *     nothing re-derived what it claimed. It now declares `verified_evidence: true` — see
  *     {@link deliverPrPhase}.
  */
+import { composeEmbeddedDeliverText, factsFromWorkflow, framedDeliverText, runUrlFor, urlPathSegment, } from './deliver-text.js';
 /**
  * The content-address of wicked-core's built-in evidence floor (`builtin_floors::EVIDENCE_FLOOR_PIN`,
  * criterion "the run left a change in its worktree (done is re-derived from the diff, never
@@ -88,27 +105,84 @@ export const DELIVER_PHASE_ID = 'deliver';
  * terminal run failures exactly as before (the crew#400 refusal-vs-infra posture).
  */
 export const DELIVER_LIFT_CONFLICT_MARKER = 'deliver: LIFT-CONFLICT';
-/** How much of the run's intent rides in the commit subject before it is truncated. */
-const INTENT_SUBJECT_CAP = 72;
 /**
- * The run's intent, reduced to something safe to embed in a single-quoted shell assignment and
- * to use as a one-line commit subject.
- *
- * The intent is caller-supplied free text off `POST /runs`, and it is being spliced into a bash
- * script — so this is a containment boundary, not cosmetics. Control characters (newlines
- * included) and the single quote are REMOVED: with no `'` left, the value cannot escape the
- * single-quoted assignment the script wraps it in, and with no control characters it cannot add
- * a line. Everything else (unicode, `$`, backticks, backslashes) is inert inside single quotes
- * and is kept, so the subject still reads like the intent it came from.
+ * The env var the engine hands the deliver command with the remote-tip commit it VERIFIED the
+ * run's work against (wicked-core#431 / #433, `deliver_lift.rs` `VERIFIED_BASE_ENV`): set on a
+ * lift outcome of `unchanged` or `lifted`, absent when the lift was skipped (no remote, no default
+ * ref, a branch carrying its own commits) — and never set on a post-hoc `POST /runs/:id/deliver`,
+ * which has no engine verification to pin to (`api/post-hoc-deliver.ts` strips it).
+ */
+export const DELIVER_VERIFIED_BASE_ENV = 'WICKED_DELIVER_VERIFIED_BASE';
+/**
+ * The sentinel the deliver script prints when `origin/<default>` no longer resolves to
+ * {@link DELIVER_VERIFIED_BASE_ENV} after the script's own fetch: the remote advanced between the
+ * engine's re-verify and the push window, so the rebase below would carry the base PAST what was
+ * verified. The script refuses BEFORE staging anything. Deliberately NOT a
+ * {@link DELIVER_LIFT_CONFLICT_MARKER}: a moved base is not a recoverable strand — a post-hoc lift
+ * would push a tree nobody verified on the new base; the remedy is the engine's own retry (approve
+ * the deliver gate: it lifts onto the new tip and re-runs the repository's checks first).
+ */
+export const DELIVER_BASE_MOVED_MARKER = 'deliver: BASE MOVED since verification';
+/**
+ * The env var the daemon sets on a POST-HOC lift (`POST /runs/:id/deliver`, `api/post-hoc-deliver.ts`)
+ * and the engine never does. A post-hoc lift has no engine verification to protect, so the
+ * crew#426 preflight may regenerate tracked files and deliver them (disclosed); an engine-driven
+ * deliver Tool unit — the variable absent — refuses instead ({@link DELIVER_PREFLIGHT_CHANGED_MARKER}).
+ */
+export const DELIVER_POSTHOC_ENV = 'WICKED_DELIVER_POSTHOC';
+/**
+ * The sentinel the deliver script prints when the crew#426 preflight (`npm install` + the
+ * `manifest:endpoints` / `generate:api-tests` codegen) CHANGED the worktree AFTER the engine had
+ * verified it (wicked-core#433 review addendum): the tree that would ship is then not the tree the
+ * repository's checks certified, and the script refuses before staging anything, leaving the
+ * regenerated files in the worktree. Not a {@link DELIVER_LIFT_CONFLICT_MARKER}: the remedy is to
+ * approve the retry — the engine re-verifies the changed tree first, and the retry's preflight
+ * regenerates nothing more.
+ */
+export const DELIVER_PREFLIGHT_CHANGED_MARKER = 'deliver: PREFLIGHT CHANGED the verified tree';
+/**
+ * The BASE heredoc delimiter the script writes its fallback text through. A QUOTED heredoc expands
+ * nothing — `$`, backticks, quotes and backslashes in the intent are inert — so the only way the
+ * caller-supplied text could break out is a line equal to the delimiter. That line is never
+ * removed or altered (it may be the title itself — Copilot on #525): {@link heredocDelimiter}
+ * picks a delimiter no line of the text equals, so the text rides verbatim and the heredoc still
+ * ends exactly where the script says it ends.
+ */
+export const DELIVER_TEXT_HEREDOC = 'WICKED_CREW_DELIVER_TEXT_EOF';
+/**
+ * The framed PR/commit text as heredoc body lines. This is a containment boundary, not cosmetics:
+ * the intent is caller-supplied free text off `POST /runs` and it is being spliced into a bash
+ * script. CR and every control character other than tab and newline are removed (a bare CR could
+ * split a line in the CLI's eyes); nothing else is touched.
+ */
+export function heredocLines(framed) {
+    return framed
+        .replace(/\r/g, '')
+        .replace(/[\u0000-\u0008\u000b-\u001f\u007f]/g, '')
+        .replace(/\n$/, '')
+        .split('\n');
+}
+/**
+ * A heredoc delimiter none of `lines` equals: the base, or the base with a numeric suffix
+ * (`…_EOF_1`, `…_EOF_2`, …) when the text happens to carry the base as a whole line. The framing
+ * (line 1 = title) is therefore never disturbed by containment.
+ */
+export function heredocDelimiter(lines) {
+    let delimiter = DELIVER_TEXT_HEREDOC;
+    for (let n = 1; lines.includes(delimiter); n += 1)
+        delimiter = `${DELIVER_TEXT_HEREDOC}_${n}`;
+    return delimiter;
+}
+/**
+ * The daemon origin as a single-quoted shell literal, or `''` when it is not a plain http(s)
+ * origin. Same containment logic as the heredoc: nothing that is not `scheme://host[:port]` is
+ * ever spliced into the script, so a hostile value can only cost the callback, never a line.
  */
-function commitSubjectIntent(intent) {
-    return (intent ?? '')
-        .replace(/[\u0000-\u001f\u007f]+/g, ' ')
-        .replace(/'/g, '')
-        .replace(/\s+/g, ' ')
-        .trim()
-        .slice(0, INTENT_SUBJECT_CAP)
-        .trim();
+function apiOriginLiteral(origin) {
+    if (origin === null || origin === undefined)
+        return '';
+    const trimmed = origin.replace(/\/+$/, '');
+    return /^https?:\/\/[A-Za-z0-9.\-[\]:]+$/.test(trimmed) ? trimmed : '';
 }
 /**
  * The hardened deliver script, run as `bash -lc <script>` (login shell so the operator's PATH —
@@ -119,10 +193,34 @@ function commitSubjectIntent(intent) {
  * `StepStatus::Failed`. It is no longer the ONLY thing standing between a failed `gh` and a green
  * phase, though — the gh result is captured explicitly and success is re-derived from evidence.
  *
- * `intent` (the run's problem statement) rides in the commit subject; it is sanitised by
- * {@link commitSubjectIntent} before it is spliced in.
+ * `intent` (the run's problem statement) is what the PR title and the commit subject are composed
+ * from (`core/deliver-text.ts`); `opts` carries the rest of the launch-time facts and the daemon
+ * origin the script asks for the run-derived text (crew#524).
  */
-export function deliverPrScript(intent) {
+export function deliverPrScript(intent, opts = {}) {
+    const runId = opts.runId ?? opts.facts?.runId ?? '';
+    const facts = opts.facts ??
+        factsFromWorkflow({
+            runId,
+            intent,
+            workflowId: null,
+            repoRef: null,
+            phases: [],
+            runUrl: null,
+        });
+    // The EMBEDDED fallback is bounded (`EMBEDDED_INTENT_CAP`): this script is one argv entry, and an
+    // unbounded intent could exceed the platform's single-argument limit and E2BIG the phase before
+    // it runs (Copilot on #525). The daemon-fetched text is never bounded this way. The issue
+    // references (`Fixes #N` / `Refs:`) are derived from the FULL intent before the cut, so a closing
+    // reference written past the cap still reaches the PR body (wave-3 isolation review).
+    const fallback = composeEmbeddedDeliverText(facts);
+    const api = apiOriginLiteral(opts.apiOrigin);
+    const fallbackLines = heredocLines(framedDeliverText(fallback));
+    const heredoc = heredocDelimiter(fallbackLines);
+    // The run id for the daemon URL: the LAUNCH id when the composer knows it, pre-encoded as one
+    // strict path segment (only `[A-Za-z0-9._~%-]` survive, so the single-quoted literal is safe);
+    // otherwise derived from the branch at run time and percent-encoded byte-wise by the script.
+    const runIdSegment = runId === '' ? '' : urlPathSegment(runId);
     return [
         'set -euo pipefail',
         // The engine concatenates the child's stdout and THEN its stderr, so anything git writes to
@@ -141,7 +239,12 @@ export function deliverPrScript(intent) {
         // Derive origin's default branch FIRST — the refusal below must cover a repo whose
         // default is trunk/develop/anything, not just main/master (Copilot on #303).
         'git fetch origin',
-        'D=$(git symbolic-ref -q --short refs/remotes/origin/HEAD || echo origin/main)',
+        // …the way the ENGINE derives it (wicked-core `deliver_lift.rs`, review F-527-003): origin/HEAD
+        // when it resolves to a commit — a DANGLING origin/HEAD (the remote's default branch renamed or
+        // deleted since the clone) is tolerated — else origin/main, else origin/master, else origin/main
+        // for the refusal texts. A repo whose base is origin/master must never read as a moved base.
+        'D=$(git symbolic-ref -q --short refs/remotes/origin/HEAD || true)',
+        'if [ -z "$D" ] || ! git rev-parse --verify -q "$D^{commit}" >/dev/null; then if git rev-parse --verify -q origin/main^{commit} >/dev/null; then D=origin/main; elif git rev-parse --verify -q origin/master^{commit} >/dev/null; then D=origin/master; else D=origin/main; fi; fi',
         'DEF="${D#origin/}"',
         // (b) Refuse the repo's own default branch (by derived name), the classic names, and an
         // empty name (detached HEAD), which would otherwise turn the push into a garbage ref.
@@ -151,6 +254,26 @@ export function deliverPrScript(intent) {
         // would put one branch's work on another and push a branch that never saw it. Refuse instead.
         'C=$(git branch --show-current)',
         '[ "$C" = "$B" ] || { echo "deliver: the worktree is on \'$C\' but the run branch is \'$B\' — refusing to commit one branch\'s work onto another; nothing was pushed"; exit 1; }',
+        // (a2) VERIFIED-BASE PIN (wicked-core#431 / #433). Before this script runs, the engine LIFTED the
+        // run's work onto the remote default branch's tip and re-ran the repository's checks when the
+        // lift changed the tree; it hands the tip it verified against as WICKED_DELIVER_VERIFIED_BASE
+        // (absent when its lift was skipped — no remote, no default ref, a branch carrying its own
+        // commits — and on a post-hoc `POST /runs/:id/deliver`, which has no engine verification to pin
+        // to). The engine's fetch and this script's fetch are two moments: a remote that advances in
+        // between would make the rebase below carry the base PAST what was verified — F-3R2-013's
+        // verified≠delivered gap, one window later. So when the pin is set and origin/<default> no
+        // longer resolves to it, REFUSE, here, before anything is staged or committed: the worktree
+        // stays exactly as the engine left it, so an approved retry re-lifts onto the new tip and
+        // re-verifies from scratch. Deliberately NO LIFT-CONFLICT marker (see
+        // DELIVER_BASE_MOVED_MARKER). An unresolvable default ref with the pin set refuses the same way
+        // (fail closed): the script cannot prove the base it is about to rebase onto. The MARKER TRAILS
+        // the line (review F-527-001): the engine keeps head-150 + tail-250 chars of the WHOLE output, and
+        // this line follows the fetch's chatter, so a marker at its head would be elided while a trailing
+        // one always lands in the tail — as the LIFT-CONFLICT push-failure line below already does.
+        'if [ -n "${WICKED_DELIVER_VERIFIED_BASE:-}" ]; then',
+        '  T=$(git rev-parse --verify -q "$D^{commit}" || true)',
+        `  [ "$T" = "$WICKED_DELIVER_VERIFIED_BASE" ] || { echo "deliver: the engine verified this work against $WICKED_DELIVER_VERIFIED_BASE but $D is now \${T:-unresolvable} — refusing to rebase past the verified base; approve to retry the deliver phase (the engine lifts onto the new tip and re-runs the repository checks before pushing). Nothing was staged, committed or pushed; ${DELIVER_BASE_MOVED_MARKER} ($D now \${T:-unresolvable}, verified $WICKED_DELIVER_VERIFIED_BASE)"; exit 1; }`,
+        'fi',
         // A failed PUSH happens after the product was committed. Keep its worktree from being reaped
         // by leaving this reserved, untracked recovery sentinel; it is removed HERE (before staging)
         // so a normal delivery never sees it, and a retry removes it before another attempt (crew#432).
@@ -163,8 +286,53 @@ export function deliverPrScript(intent) {
         // pushing nothing, if that config is missing). Staging is two passes (see below): tracked
         // changes always ride; untracked paths ride UNLESS a scratch/key-material classifier excludes
         // them — and every exclusion is reported loudly (crew#434).
-        `I='${commitSubjectIntent(intent)}'`,
-        'if [ -n "$I" ]; then M="wicked-crew run $R: $I"; else M="wicked-crew run $R"; fi',
+        //
+        // (c1-text) THE PR TITLE + BODY AND THE COMMIT MESSAGE (crew#524 / F-3R2-014). `--fill` gave
+        // wicked-studio#249 a title cut mid-word and an EMPTY body. The text now comes from the run:
+        // the script asks the daemon that launched it for `GET /runs/<id>/deliver-text` — composed from
+        // the persisted run record (phases + seats + gate outcomes, repo checks with exit codes, the
+        // evaluator verdict, the run link) — and falls back to the launch-time composition embedded
+        // below (intent, `Fixes #N`, run id, phase list) when the daemon cannot answer: no origin
+        // known, no `curl`, an auth-required daemon (401), a daemon that went away. Either way the text
+        // is FRAMED the same (line 1 title, line 2 blank, then the body), it is the commit message
+        // verbatim (`git commit -F`: git takes the first paragraph as the subject), and the PR is
+        // opened with `--title` + `--body-file` from it. WHICH text was used is always said in the
+        // output — every branch below prints its reason (Copilot on #525): no origin known, no curl,
+        // the daemon did not answer, or the run record was fetched.
+        'TD=$(mktemp -d)',
+        "trap 'rm -rf \"$TD\"' EXIT",
+        // One URL path segment, RFC 3986: unreserved bytes verbatim, everything else `%XX` (byte-wise
+        // under LC_ALL=C so multibyte characters encode per byte, as a URL requires). Used only when
+        // the composer did not bake the launch id in (Copilot on #525: `/`, `#`, `?` in an id must
+        // not change the request path).
+        "_urlenc() { local LC_ALL=C s=\"$1\" out=\"\" i c; for ((i=0; i<${#s}; i++)); do c=\"${s:i:1}\"; case \"$c\" in [A-Za-z0-9._~-]) out+=\"$c\";; *) out+=$(printf '%%%02X' \"'$c\");; esac; done; printf '%s' \"$out\"; }",
+        `RUNID='${runIdSegment}'`,
+        '[ -n "$RUNID" ] || RUNID=$(_urlenc "${B#wicked/}")',
+        // Is the fetched text FRAMED as promised — non-empty title line, blank line 2, a non-empty body?
+        // Anything else (a proxy page, a stale endpoint's JSON, a bare title) is not the run record
+        // and must not become the PR text (Copilot on #525).
+        "_framed() { [ -s \"$1\" ] && [ -n \"$(sed -n 1p \"$1\")\" ] && [ -z \"$(sed -n 2p \"$1\")\" ] && [ -n \"$(sed -n '3,$p' \"$1\" | tr -d '[:space:]' | head -c 1)\" ]; }",
+        `API='${api}'`,
+        'if [ -z "$API" ]; then',
+        '  echo "deliver: no daemon origin was known when this run launched — using the launch-time PR text"',
+        'elif ! command -v curl >/dev/null 2>&1; then',
+        '  echo "deliver: curl is not available in this shell — using the launch-time PR text"',
+        // `--noproxy "*"`: the daemon is loopback; an operator shell's http_proxy must not swallow it.
+        'elif curl -fsS -m 20 --noproxy "*" -H "Accept: text/plain" "$API/api/v1/runs/$RUNID/deliver-text" -o "$TD/text" 2>/dev/null && _framed "$TD/text"; then',
+        '  echo "deliver: PR text composed from the run record ($API)"',
+        'else',
+        '  rm -f "$TD/text"',
+        '  echo "deliver: the daemon at $API did not answer with the run record — using the launch-time PR text"',
+        'fi',
+        'if [ ! -s "$TD/text" ]; then',
+        // The delimiter is chosen so no line of the text equals it (heredocDelimiter) — the text,
+        // title line included, is never filtered.
+        `  cat > "$TD/text" <<'${heredoc}'`,
+        ...fallbackLines,
+        heredoc,
+        'fi',
+        'TITLE=$(sed -n 1p "$TD/text")',
+        "sed '1,2d' \"$TD/text\" > \"$TD/body\"",
         // (c0) DELIVER PREFLIGHT (crew#426) — a governed run that bumps an internal WORKSPACE package's
         // version (e.g. packages/crew-api-types) leaves its version-derived codegen AND the lockfile
         // stale. A per-run worktree is provisioned with `git worktree add` alone — no `node_modules` —
@@ -191,10 +359,37 @@ export function deliverPrScript(intent) {
         // for a workspace-internal bump (no new tarball to fetch), so a restricted network does not fail
         // delivery. A genuine failure of a step that DID apply stays LOUD (no LIFT-CONFLICT marker →
         // terminal run failure), preserving the phase's refusal posture — the preflight adds no new strand.
+        //
+        // (c0-guard) THE PREFLIGHT MUST NOT WEAKEN THE VERIFIED TREE (wicked-core#433 review addendum).
+        // The engine verified the worktree BEFORE this script runs; the re-sync above runs AFTER it. If
+        // the regeneration changes any file, the tree that would ship is no longer the tree the
+        // repository's checks certified. So the worktree CONTENT is snapshotted as a tree id before and
+        // after (through a scratch index — the real index is untouched) and compared. An engine-driven
+        // delivery (a Tool unit; WICKED_DELIVER_POSTHOC unset) REFUSES on a change and names the files.
+        // The regenerated files stay in the worktree, so the remedy is simply to approve the retry: the
+        // engine re-verifies the changed tree (tree ≠ recorded verified tree ⇒ the checks run) before
+        // this script runs again, and the retry's preflight regenerates nothing. The crew#426 repair
+        // thus costs one gate approval on an engine-driven run and ships verified. A post-hoc lift
+        // (WICKED_DELIVER_POSTHOC=1, `POST /runs/:id/deliver`) has no engine verification to protect and
+        // keeps the crew#426 behaviour — but SAYS which tracked files it regenerated, so the PR reviewer
+        // sees it. Deliberately NO LIFT-CONFLICT marker: a regenerated tree is not a recoverable strand.
+        // The scratch index is SEEDED from HEAD before `add -A` (review F-527-007), so a tracked path a
+        // `.gitignore` also matches is still in both snapshots and its regeneration is seen; a git failure
+        // is loud (no swallowed stderr — a partial snapshot on both sides would compare equal).
+        '_tree() { rm -f "$TD/preidx"; GIT_INDEX_FILE="$TD/preidx" git read-tree HEAD && GIT_INDEX_FILE="$TD/preidx" git add -A -- . && GIT_INDEX_FILE="$TD/preidx" git write-tree; }',
         'if [ -f package.json ] && [ -f package-lock.json ] && [ -f packages/crew/package.json ] && [ -f packages/crew-api-types/package.json ]; then',
+        '  T0=$(_tree) || { echo "deliver: could not snapshot the worktree before the preflight; nothing was staged, committed or pushed"; exit 1; }',
         '  npm install --prefer-offline --no-audit --no-fund',
         '  npm run manifest:endpoints -w packages/crew',
         '  npm run generate:api-tests -w packages/crew',
+        '  T1=$(_tree) || { echo "deliver: could not snapshot the worktree after the preflight; nothing was staged, committed or pushed"; exit 1; }',
+        '  if [ "$T0" != "$T1" ]; then',
+        '    CH=$(git diff-tree -r --name-only "$T0" "$T1" | tr "\\n" " ")',
+        // The marker TRAILS the line, followed by the file list, so both survive the engine's tail-250
+        // excerpt after the install/codegen chatter (review F-527-001).
+        `    if [ -z "\${WICKED_DELIVER_POSTHOC:-}" ]; then echo "deliver: the crew#426 lockfile/codegen re-sync CHANGED the worktree after the engine verified it — refusing to push a tree the engine did not verify. The regenerated files are left in the worktree (unstaged); approve to retry the deliver phase: the engine re-verifies the changed tree first and this script then delivers it (a second regeneration changes nothing). Nothing was staged, committed or pushed; ${DELIVER_PREFLIGHT_CHANGED_MARKER}: \${CH}"; exit 1; fi`,
+        '    echo "deliver: preflight regenerated tracked files on a post-hoc lift (no engine verification to protect): $CH"',
+        '  fi',
         'fi',
         // (c1a) TRACKED CHANGES ALWAYS RIDE. `git add -u` stages every modification/deletion to an
         // already-tracked path (the run's product for that class), including the crew#426 preflight's
@@ -237,7 +432,10 @@ export function deliverPrScript(intent) {
         'done < <(git ls-files --others --exclude-standard -z)',
         // Only commit when something is staged — a run that committed incrementally (core#280's
         // liveness contract) leaves a clean tree and must not gain an empty commit here.
-        'git diff --cached --quiet || git commit -q -m "$M"',
+        // `--cleanup=whitespace`, NOT git's default for `-F`: an operator/repo `commit.cleanup=strip`
+        // would otherwise treat every `## Intent` / `## Run` / `## Phases` heading as a `#` comment and
+        // strip it from the commit body (review W3-K1).
+        'git diff --cached --quiet || git commit -q --cleanup=whitespace -F "$TD/text"',
         // (c2) NOTHING TO DELIVER — no staged work AND no commits of its own. Fail LOUDLY before the
         // remote is touched: an empty ref pushed under a run id is worse than a failed phase.
         'A=$(git rev-list --count "$D..$B")',
@@ -311,7 +509,8 @@ export function deliverPrScript(intent) {
         // (e) Open the PR with gh's OUTPUT and EXIT STATUS captured separately (crew#317). The old
         // `| tail -1` threw away everything gh said but one line and made the phase's verdict a
         // property of a shell option; a gh failure now fails the phase carrying gh's own message.
-        'if ! OUT=$(gh pr create --head "$B" --fill 2>&1); then echo "$OUT"; echo "deliver: gh pr create failed for $B — no PR was opened"; exit 1; fi',
+        // Title and body are the composed text (c1-text) — never `--fill` (crew#524).
+        'if ! OUT=$(gh pr create --head "$B" --title "$TITLE" --body-file "$TD/body" 2>&1); then echo "$OUT"; echo "deliver: gh pr create failed for $B — no PR was opened"; exit 1; fi',
         'echo "$OUT"',
         // (f) DONE IS RE-DERIVED, NOT ASSERTED — twice, from two independent facts, before the phase
         // is allowed to report a delivery:
@@ -355,11 +554,11 @@ export function deliverPrScript(intent) {
  * deterministic and costs no LLM call. The PR-URL and branch-ahead assertions stay in the script
  * because no vaulted floor can see the remote.
  */
-export function deliverPrPhase(dependsOn = [], intent) {
+export function deliverPrPhase(dependsOn = [], intent, opts = {}) {
     return {
         id: DELIVER_PHASE_ID,
         kind: 'build',
-        executor: { type: 'tool', cmd: ['bash', '-lc', deliverPrScript(intent)] },
+        executor: { type: 'tool', cmd: ['bash', '-lc', deliverPrScript(intent, opts)] },
         gate_type: null,
         gate: 'auto',
         executes_code: false,
@@ -372,20 +571,7 @@ export function deliverPrPhase(dependsOn = [], intent) {
         validator_pin: EVIDENCE_FLOOR_PIN,
     };
 }
-/**
- * Compose a PER-RUN workflow def: `base`'s phases (untouched — the shared def is never mutated)
- * plus the deliver phase appended last, under a run-scoped id. The caller registers the result
- * with the engine for THIS run only; nothing is written to the overlay dir and the composed id
- * never enters the user-workflow registry, so the catalog (`GET /workflows`) stays clean.
- *
- * `intent` is the run's problem statement — it names WHAT was delivered in the commit subject
- * (`wicked-crew run <run-id>: <intent>`); omit it and the subject carries the run id alone.
- *
- * Throws when `base` already carries a `deliver` phase — appending a second phase with the same
- * id would be ambiguous at best; the caller launches such a def as-is instead (see
- * `CoreAdapter.launchRun`).
- */
-export function composeDeliverWorkflow(base, runId, intent) {
+export function composeDeliverWorkflow(base, runId, intent, launch = {}) {
     if (base.phases.some((p) => p.id === DELIVER_PHASE_ID)) {
         throw new Error(`workflow '${base.id}' already has a '${DELIVER_PHASE_ID}' phase — launch it without deliver: "pr"`);
     }
@@ -396,11 +582,23 @@ export function composeDeliverWorkflow(base, runId, intent) {
     // registerWorkflow enforces id.length <= 128; a caller-supplied CLI session id can be long.
     // Truncate the run-id TAIL, keeping the base+marker prefix intact (Copilot on #303).
     const composedId = `${base.id}-deliver-${safeRunId}`.slice(0, 128);
+    const apiOrigin = launch.apiOrigin ?? null;
+    const facts = factsFromWorkflow({
+        runId,
+        intent,
+        workflowId: base.id,
+        repoRef: launch.repoRef ?? null,
+        phases: base.phases,
+        runUrl: runUrlFor(apiOrigin, runId),
+    });
     return {
         // No `is_system` on purpose: core's overlay/register schema rejects unknown fields, and the
         // composed def is engine-input, not catalog data.
         id: composedId,
-        phases: [...base.phases, deliverPrPhase(last !== undefined ? [last.id] : [], intent)],
+        phases: [
+            ...base.phases,
+            deliverPrPhase(last !== undefined ? [last.id] : [], intent, { runId, facts, apiOrigin }),
+        ],
     };
 }
 //# sourceMappingURL=deliver.js.map

package/dist/core/deliver.js.map

@@ -1 +1 @@
-{"version":3,"file":"deliver.js","sourceRoot":"","sources":["../../src/core/deliver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAIH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAErD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAErE,uFAAuF;AACvF,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,MAA0B;IACrD,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;SAClB,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC;SACvC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC5B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,OAAO;QACL,mBAAmB;QACnB,4FAA4F;QAC5F,8FAA8F;QAC9F,6FAA6F;QAC7F,sCAAsC;QACtC,WAAW;QACX,0FAA0F;QAC1F,kCAAkC;QAClC,yJAAyJ;QACzJ,6FAA6F;QAC7F,iFAAiF;QACjF,sBAAsB;QACtB,eAAe;QACf,+EAA+E;QAC/E,mFAAmF;QACnF,6EAA6E;QAC7E,kBAAkB;QAClB,+EAA+E;QAC/E,oBAAoB;QACpB,wFAAwF;QACxF,sFAAsF;QACtF,0KAA0K;QAC1K,0FAA0F;QAC1F,4FAA4F;QAC5F,8FAA8F;QAC9F,gCAAgC;QAChC,iLAAiL;QACjL,6FAA6F;QAC7F,6FAA6F;QAC7F,gGAAgG;QAChG,kCAAkC;QAClC,eAAe;QACf,2FAA2F;QAC3F,8FAA8F;QAC9F,2FAA2F;QAC3F,8FAA8F;QAC9F,0FAA0F;QAC1F,8FAA8F;QAC9F,4DAA4D;QAC5D,MAAM,mBAAmB,CAAC,MAAM,CAAC,GAAG;QACpC,kFAAkF;QAClF,gGAAgG;QAChG,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,8FAA8F;QAC9F,iGAAiG;QACjG,2FAA2F;QAC3F,kGAAkG;QAClG,mGAAmG;QACnG,yFAAyF;QACzF,8FAA8F;QAC9F,EAAE;QACF,8FAA8F;QAC9F,iGAAiG;QACjG,kGAAkG;QAClG,iGAAiG;QACjG,yFAAyF;QACzF,iGAAiG;QACjG,mGAAmG;QACnG,gGAAgG;QAChG,8FAA8F;QAC9F,4FAA4F;QAC5F,+CAA+C;QAC/C,iGAAiG;QACjG,6FAA6F;QAC7F,oGAAoG;QACpG,8IAA8I;QAC9I,qDAAqD;QACrD,+CAA+C;QAC/C,+CAA+C;QAC/C,IAAI;QACJ,2FAA2F;QAC3F,8FAA8F;QAC9F,gEAAgE;QAChE,YAAY;QACZ,wFAAwF;QACxF,wFAAwF;QACxF,8FAA8F;QAC9F,+FAA+F;QAC/F,2FAA2F;QAC3F,6FAA6F;QAC7F,sFAAsF;QACtF,yFAAyF;QACzF,sEAAsE;QACtE,uDAAuD;QACvD,2FAA2F;QAC3F,2FAA2F;QAC3F,qBAAqB;QACrB,4FAA4F;QAC5F,6FAA6F;QAC7F,2FAA2F;QAC3F,4FAA4F;QAC5F,uFAAuF;QACvF,0FAA0F;QAC1F,2BAA2B;QAC3B,gCAAgC;QAChC,2BAA2B;QAC3B,sBAAsB;QACtB,yFAAyF;QACzF,mCAAmC;QACnC,yDAAyD;QACzD,kBAAkB;QAClB,oNAAoN;QACpN,QAAQ;QACR,oEAAoE;QACpE,4DAA4D;QAC5D,+GAA+G;QAC/G,wHAAwH;QACxH,sFAAsF;QACtF,uDAAuD;QACvD,wFAAwF;QACxF,iFAAiF;QACjF,oDAAoD;QACpD,6FAA6F;QAC7F,sFAAsF;QACtF,oCAAoC;QACpC,sJAAsJ;QACtJ,sEAAsE;QACtE,EAAE;QACF,wFAAwF;QACxF,2FAA2F;QAC3F,uFAAuF;QACvF,uFAAuF;QACvF,6FAA6F;QAC7F,0FAA0F;QAC1F,oFAAoF;QACpF,EAAE;QACF,4FAA4F;QAC5F,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,iJAAiJ;QACjJ,iCAAiC;QACjC,2FAA2F;QAC3F,8FAA8F;QAC9F,+DAA+D;QAC/D,4IAA4I;QAC5I,uBAAuB;QACvB,wDAAwD;QACxD,2BAA2B;QAC3B,gGAAgG;QAChG,gFAAgF;QAChF,4FAA4F;QAC5F,uFAAuF;QACvF,yFAAyF;QACzF,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,qEAAqE;QACrE,0DAA0D;QAC1D,oCAAoC;QACpC,qDAAqD;QACrD,4DAA4D;QAC5D,wFAAwF;QACxF,wFAAwF;QACxF,kFAAkF;QAClF,iEAAiE;QACjE,4EAA4E;QAC5E,gGAAgG;QAChG,sEAAsE;QACtE,8BAA8B;QAC9B,yFAAyF;QACzF,QAAQ;QACR,0EAA0E,4BAA4B,gIAAgI;QACtO,IAAI;QACJ,8FAA8F;QAC9F,uEAAuE;QACvE,oCAAoC;QACpC,wLAAwL;QACxL,4FAA4F;QAC5F,2FAA2F;QAC3F,4FAA4F;QAC5F,0FAA0F;QAC1F,wEAAwE;QACxE,mBAAmB;QACnB,sBAAsB;QACtB,oGAAoG,4BAA4B,iIAAiI;QACjQ,oNAAoN,4BAA4B,aAAa;QAC7P,QAAQ;QACR,IAAI;QACJ,2FAA2F;QAC3F,wFAAwF;QACxF,0FAA0F;QAC1F,+IAA+I;QAC/I,aAAa;QACb,6FAA6F;QAC7F,mCAAmC;QACnC,oFAAoF;QACpF,yFAAyF;QACzF,iGAAiG;QACjG,6JAA6J;QAC7J,2CAA2C;QAC3C,mJAAmJ;QACnJ,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,cAAc,CAAC,YAAsB,EAAE,EAAE,MAAe;IACtE,OAAO;QACL,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE;QACzE,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,IAAI;QACvB,qBAAqB,EAAE,EAAE;QACzB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,kBAAkB;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAiB,EACjB,KAAa,EACb,MAAe;IAEf,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,EAAE,oBAAoB,gBAAgB,2CAA2C,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,4FAA4F;IAC5F,sFAAsF;IACtF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACzD,4FAA4F;IAC5F,qFAAqF;IACrF,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,EAAE,YAAY,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO;QACL,4FAA4F;QAC5F,kDAAkD;QAClD,EAAE,EAAE,UAAU;QACd,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;KACtF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"deliver.js","sourceRoot":"","sources":["../../src/core/deliver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAGH,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAErD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAerE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AAExE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAElF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,8CAA8C,CAAC;AAE/F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM;SACV,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,IAAI,SAAS,GAAG,oBAAoB,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC;QAAE,SAAS,GAAG,GAAG,oBAAoB,IAAI,CAAC,EAAE,CAAC;IAC9F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAiC;IACzD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,OAA6B,EAAE;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;QACV,iBAAiB,CAAC;YAChB,KAAK;YACL,MAAM;YACN,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,kGAAkG;IAClG,gGAAgG;IAChG,0FAA0F;IAC1F,kGAAkG;IAClG,sFAAsF;IACtF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAChD,8FAA8F;IAC9F,+FAA+F;IAC/F,6FAA6F;IAC7F,MAAM,YAAY,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO;QACL,mBAAmB;QACnB,4FAA4F;QAC5F,8FAA8F;QAC9F,6FAA6F;QAC7F,sCAAsC;QACtC,WAAW;QACX,0FAA0F;QAC1F,kCAAkC;QAClC,yJAAyJ;QACzJ,6FAA6F;QAC7F,iFAAiF;QACjF,sBAAsB;QACtB,eAAe;QACf,+EAA+E;QAC/E,mFAAmF;QACnF,6EAA6E;QAC7E,kBAAkB;QAClB,gGAAgG;QAChG,gGAAgG;QAChG,iGAAiG;QACjG,6FAA6F;QAC7F,mEAAmE;QACnE,mRAAmR;QACnR,oBAAoB;QACpB,wFAAwF;QACxF,sFAAsF;QACtF,0KAA0K;QAC1K,0FAA0F;QAC1F,4FAA4F;QAC5F,8FAA8F;QAC9F,gCAAgC;QAChC,iLAAiL;QACjL,kGAAkG;QAClG,8FAA8F;QAC9F,8FAA8F;QAC9F,2FAA2F;QAC3F,gGAAgG;QAChG,6FAA6F;QAC7F,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,0FAA0F;QAC1F,sEAAsE;QACtE,gGAAgG;QAChG,gGAAgG;QAChG,mGAAmG;QACnG,kGAAkG;QAClG,4FAA4F;QAC5F,qDAAqD;QACrD,wDAAwD;QACxD,yXAAyX,yBAAyB,mFAAmF;QACre,IAAI;QACJ,6FAA6F;QAC7F,6FAA6F;QAC7F,gGAAgG;QAChG,kCAAkC;QAClC,eAAe;QACf,2FAA2F;QAC3F,8FAA8F;QAC9F,2FAA2F;QAC3F,8FAA8F;QAC9F,0FAA0F;QAC1F,8FAA8F;QAC9F,4DAA4D;QAC5D,EAAE;QACF,6FAA6F;QAC7F,6FAA6F;QAC7F,gGAAgG;QAChG,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,gGAAgG;QAChG,2FAA2F;QAC3F,0FAA0F;QAC1F,2FAA2F;QAC3F,6FAA6F;QAC7F,4DAA4D;QAC5D,iBAAiB;QACjB,4BAA4B;QAC5B,8FAA8F;QAC9F,6FAA6F;QAC7F,2FAA2F;QAC3F,gCAAgC;QAChC,wNAAwN;QACxN,UAAU,YAAY,GAAG;QACzB,oDAAoD;QACpD,iGAAiG;QACjG,4FAA4F;QAC5F,qDAAqD;QACrD,wKAAwK;QACxK,QAAQ,GAAG,GAAG;QACd,wBAAwB;QACxB,qGAAqG;QACrG,8CAA8C;QAC9C,uFAAuF;QACvF,+FAA+F;QAC/F,yJAAyJ;QACzJ,+DAA+D;QAC/D,MAAM;QACN,oBAAoB;QACpB,yGAAyG;QACzG,IAAI;QACJ,8BAA8B;QAC9B,0FAA0F;QAC1F,0CAA0C;QAC1C,yBAAyB,OAAO,GAAG;QACnC,GAAG,aAAa;QAChB,OAAO;QACP,IAAI;QACJ,+BAA+B;QAC/B,wCAAwC;QACxC,gGAAgG;QAChG,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,8FAA8F;QAC9F,iGAAiG;QACjG,2FAA2F;QAC3F,kGAAkG;QAClG,mGAAmG;QACnG,yFAAyF;QACzF,8FAA8F;QAC9F,EAAE;QACF,8FAA8F;QAC9F,iGAAiG;QACjG,kGAAkG;QAClG,iGAAiG;QACjG,yFAAyF;QACzF,iGAAiG;QACjG,mGAAmG;QACnG,gGAAgG;QAChG,8FAA8F;QAC9F,4FAA4F;QAC5F,+CAA+C;QAC/C,iGAAiG;QACjG,6FAA6F;QAC7F,oGAAoG;QACpG,EAAE;QACF,gGAAgG;QAChG,gGAAgG;QAChG,wFAAwF;QACxF,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,gGAAgG;QAChG,8FAA8F;QAC9F,6FAA6F;QAC7F,2FAA2F;QAC3F,iGAAiG;QACjG,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,mGAAmG;QACnG,wFAAwF;QACxF,8KAA8K;QAC9K,8IAA8I;QAC9I,6IAA6I;QAC7I,qDAAqD;QACrD,+CAA+C;QAC/C,+CAA+C;QAC/C,4IAA4I;QAC5I,+BAA+B;QAC/B,mEAAmE;QACnE,+FAA+F;QAC/F,gEAAgE;QAChE,kdAAkd,gCAAgC,uBAAuB;QACzgB,qHAAqH;QACrH,MAAM;QACN,IAAI;QACJ,2FAA2F;QAC3F,8FAA8F;QAC9F,gEAAgE;QAChE,YAAY;QACZ,wFAAwF;QACxF,wFAAwF;QACxF,8FAA8F;QAC9F,+FAA+F;QAC/F,2FAA2F;QAC3F,6FAA6F;QAC7F,sFAAsF;QACtF,yFAAyF;QACzF,sEAAsE;QACtE,uDAAuD;QACvD,2FAA2F;QAC3F,2FAA2F;QAC3F,qBAAqB;QACrB,4FAA4F;QAC5F,6FAA6F;QAC7F,2FAA2F;QAC3F,4FAA4F;QAC5F,uFAAuF;QACvF,0FAA0F;QAC1F,2BAA2B;QAC3B,gCAAgC;QAChC,2BAA2B;QAC3B,sBAAsB;QACtB,yFAAyF;QACzF,mCAAmC;QACnC,yDAAyD;QACzD,kBAAkB;QAClB,oNAAoN;QACpN,QAAQ;QACR,oEAAoE;QACpE,4DAA4D;QAC5D,+GAA+G;QAC/G,wHAAwH;QACxH,sFAAsF;QACtF,uDAAuD;QACvD,wFAAwF;QACxF,iFAAiF;QACjF,8FAA8F;QAC9F,gGAAgG;QAChG,gDAAgD;QAChD,+EAA+E;QAC/E,6FAA6F;QAC7F,sFAAsF;QACtF,oCAAoC;QACpC,sJAAsJ;QACtJ,sEAAsE;QACtE,EAAE;QACF,wFAAwF;QACxF,2FAA2F;QAC3F,uFAAuF;QACvF,uFAAuF;QACvF,6FAA6F;QAC7F,0FAA0F;QAC1F,oFAAoF;QACpF,EAAE;QACF,4FAA4F;QAC5F,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,iJAAiJ;QACjJ,iCAAiC;QACjC,2FAA2F;QAC3F,8FAA8F;QAC9F,+DAA+D;QAC/D,4IAA4I;QAC5I,uBAAuB;QACvB,wDAAwD;QACxD,2BAA2B;QAC3B,gGAAgG;QAChG,gFAAgF;QAChF,4FAA4F;QAC5F,uFAAuF;QACvF,yFAAyF;QACzF,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,qEAAqE;QACrE,0DAA0D;QAC1D,oCAAoC;QACpC,qDAAqD;QACrD,4DAA4D;QAC5D,wFAAwF;QACxF,wFAAwF;QACxF,kFAAkF;QAClF,iEAAiE;QACjE,4EAA4E;QAC5E,gGAAgG;QAChG,sEAAsE;QACtE,8BAA8B;QAC9B,yFAAyF;QACzF,QAAQ;QACR,0EAA0E,4BAA4B,gIAAgI;QACtO,IAAI;QACJ,8FAA8F;QAC9F,uEAAuE;QACvE,oCAAoC;QACpC,wLAAwL;QACxL,4FAA4F;QAC5F,2FAA2F;QAC3F,4FAA4F;QAC5F,0FAA0F;QAC1F,wEAAwE;QACxE,mBAAmB;QACnB,sBAAsB;QACtB,oGAAoG,4BAA4B,iIAAiI;QACjQ,oNAAoN,4BAA4B,aAAa;QAC7P,QAAQ;QACR,IAAI;QACJ,2FAA2F;QAC3F,wFAAwF;QACxF,0FAA0F;QAC1F,8EAA8E;QAC9E,gLAAgL;QAChL,aAAa;QACb,6FAA6F;QAC7F,mCAAmC;QACnC,oFAAoF;QACpF,yFAAyF;QACzF,iGAAiG;QACjG,6JAA6J;QAC7J,2CAA2C;QAC3C,mJAAmJ;QACnJ,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAsB,EAAE,EACxB,MAAe,EACf,OAA6B,EAAE;IAE/B,OAAO;QACL,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE;QAC/E,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,IAAI;QACvB,qBAAqB,EAAE,EAAE;QACzB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,kBAAkB;KAClC,CAAC;AACJ,CAAC;AAuBD,MAAM,UAAU,sBAAsB,CACpC,IAAiB,EACjB,KAAa,EACb,MAAe,EACf,SAA+B,EAAE;IAEjC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,EAAE,oBAAoB,gBAAgB,2CAA2C,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,4FAA4F;IAC5F,sFAAsF;IACtF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACzD,4FAA4F;IAC5F,qFAAqF;IACrF,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,EAAE,YAAY,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAC9B,KAAK;QACL,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC;KACpC,CAAC,CAAC;IACH,OAAO;QACL,4FAA4F;QAC5F,kDAAkD;QAClD,EAAE,EAAE,UAAU;QACd,MAAM,EAAE;YACN,GAAG,IAAI,CAAC,MAAM;YACd,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SACzF;KACF,CAAC;AACJ,CAAC"}

package/dist/core/estate-mcp-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"estate-mcp-client.d.ts","sourceRoot":"","sources":["../../src/core/estate-mcp-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAM3E,sGAAsG;AACtG,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAMxD;;0EAE0E;AAC1E,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAgBpD;;sGAEsG;AACtG,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAK3C;AAED,4GAA4G;AAC5G,MAAM,WAAW,WAAW;IAC1B;uEACmE;IACnE,KAAK,CAAC,EAAE,MAAM,YAAY,CAAC;IAC3B,+GAA+G;IAC/G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;iEACiE;AACjE,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGzE;AAED,kHAAkH;AAClH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAMhF;AA6DD;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,EAAE,GAAE,WAAgB,GACnB,OAAO,CAAC,OAAO,CAAC,CA4GlB"}
+{"version":3,"file":"estate-mcp-client.d.ts","sourceRoot":"","sources":["../../src/core/estate-mcp-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQ3E,sGAAsG;AACtG,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAMxD;;0EAE0E;AAC1E,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAgBpD;;sGAEsG;AACtG,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAK3C;AAED,4GAA4G;AAC5G,MAAM,WAAW,WAAW;IAC1B;uEACmE;IACnE,KAAK,CAAC,EAAE,MAAM,YAAY,CAAC;IAC3B,+GAA+G;IAC/G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;iEACiE;AACjE,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGzE;AAED,kHAAkH;AAClH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAMhF;AAiED;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,EAAE,GAAE,WAAgB,GACnB,OAAO,CAAC,OAAO,CAAC,CA4GlB"}

package/dist/core/estate-mcp-client.js

@@ -36,6 +36,7 @@ import { readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { childEnvWithBootEstateDb } from './governance-store.js';
 /** The MCP protocol version crew declares in the handshake (the version the estate server speaks). */
 export const ESTATE_MCP_PROTOCOL_VERSION = '2024-11-05';
 /** JSON-RPC ids for the two request frames (the notification carries none). */
@@ -85,11 +86,15 @@ export function resolveMemoryDbPath(env = process.env) {
     const base = home !== undefined && home !== '' ? home : join(homedir(), '.wicked');
     return join(base, 'memory.db');
 }
-/** The default spawn: `wicked-estate-mcp` with no `--readonly` flag and WICKED_MEMORY_DB pinned. */
+/** The default spawn: `wicked-estate-mcp` with no `--readonly` flag and WICKED_MEMORY_DB pinned.
+ *  The server resolves its GRAPH store from `WICKED_ESTATE_DB`, which the daemon exports as its
+ *  own governance store (crew#495) — the child gets the process's BOOT-TIME value back instead
+ *  (`childEnvWithBootEstateDb`): the daemon's sidecar is the engine's business, and a newer estate
+ *  binary must never migrate that file's schema past what the engine's vendored store opens. */
 function defaultSpawn(env) {
     return nodeSpawn(estateMcpExe(env), [], {
         stdio: ['pipe', 'pipe', 'pipe'],
-        env: { ...env, WICKED_MEMORY_DB: resolveMemoryDbPath(env) },
+        env: { ...childEnvWithBootEstateDb(env), WICKED_MEMORY_DB: resolveMemoryDbPath(env) },
         windowsHide: true,
     });
 }

package/dist/core/estate-mcp-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"estate-mcp-client.js","sourceRoot":"","sources":["../../src/core/estate-mcp-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,sGAAsG;AACtG,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAExD,+EAA+E;AAC/E,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC;;gGAEgG;AAChG,MAAM,cAAc,GAAW,CAAC,GAAW,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChG,OAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC,OAAO,IAAI,OAAO,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL;;sGAEsG;AACtG,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAU;IACvB,YAAY,OAAe,EAAE,IAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3C,CAAC;CACF;AAWD;iEACiE;AACjE,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACpF,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,GAAsB;IAC1C,OAAO,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE;QACtC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE;QAC3D,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;8DAE8D;AAC9D,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAC5F,OAAO,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AAClH,CAAC;AAED;;4CAE4C;AAC5C,SAAS,gBAAgB,CAAC,GAA4B;IACpD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,kGAAkG;IAClG,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,6CAA6C,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;YACzD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAA6B,EAC7B,KAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,IAAI,6BAA6B,CAAC;IAEhE,OAAO,IAAI,OAAO,CAAU,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAQ,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CAAC,IAAI,cAAc,CAAC,oCAAoC,IAAI,WAAW,SAAS,IAAI,CAAC,CAAC,CACpG,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAE1B,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,SAAS,IAAI,KAAK,CAAC;YACnB,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,IAAI,KAAK,EAAE;oBAAE,SAAS;gBAC1B,IAAI,GAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,8DAA8D;gBAC1E,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,EAAE;wBACV,IAAI,CAAC;4BACH,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;wBACxC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,aAAa,CAAC,GAAG,CAAC,CAAC;wBACrB,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,sFAAsF;gBACtF,iFAAiF;gBACjF,IAAI,CAAC,EAAE,KAAK,aAAa,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAA4B,CAAC,CAAC,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACpC,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,sCAAsC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CACX,IAAI,cAAc,CAChB,6CAA6C,IAAI,EAAE;gBACjD,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CACF,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,wFAAwF;QACxF,MAAM,KAAK,GAAG,CAAC,GAAY,EAAQ,EAAE;YACnC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,KAAK,CAAC;YACJ,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,aAAa;YACjB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACN,eAAe,EAAE,2BAA2B;gBAC5C,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE;aAC3D;SACF,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"estate-mcp-client.js","sourceRoot":"","sources":["../../src/core/estate-mcp-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,sGAAsG;AACtG,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAExD,+EAA+E;AAC/E,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC;;gGAEgG;AAChG,MAAM,cAAc,GAAW,CAAC,GAAW,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChG,OAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC,OAAO,IAAI,OAAO,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL;;sGAEsG;AACtG,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAU;IACvB,YAAY,OAAe,EAAE,IAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3C,CAAC;CACF;AAWD;iEACiE;AACjE,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACpF,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED;;;;gGAIgG;AAChG,SAAS,YAAY,CAAC,GAAsB;IAC1C,OAAO,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE;QACtC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,wBAAwB,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE;QACrF,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;8DAE8D;AAC9D,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAC5F,OAAO,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AAClH,CAAC;AAED;;4CAE4C;AAC5C,SAAS,gBAAgB,CAAC,GAA4B;IACpD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,kGAAkG;IAClG,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,6CAA6C,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;YACzD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAA6B,EAC7B,KAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,IAAI,6BAA6B,CAAC;IAEhE,OAAO,IAAI,OAAO,CAAU,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAQ,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CAAC,IAAI,cAAc,CAAC,oCAAoC,IAAI,WAAW,SAAS,IAAI,CAAC,CAAC,CACpG,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAE1B,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,SAAS,IAAI,KAAK,CAAC;YACnB,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,IAAI,KAAK,EAAE;oBAAE,SAAS;gBAC1B,IAAI,GAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,8DAA8D;gBAC1E,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,EAAE;wBACV,IAAI,CAAC;4BACH,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;wBACxC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,aAAa,CAAC,GAAG,CAAC,CAAC;wBACrB,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,sFAAsF;gBACtF,iFAAiF;gBACjF,IAAI,CAAC,EAAE,KAAK,aAAa,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAA4B,CAAC,CAAC,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACpC,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,sCAAsC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,GAAG,EAAE,CACV,aAAa,CACX,IAAI,cAAc,CAChB,6CAA6C,IAAI,EAAE;gBACjD,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpE,CACF,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,wFAAwF;QACxF,MAAM,KAAK,GAAG,CAAC,GAAY,EAAQ,EAAE;YACnC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,KAAK,CAAC;YACJ,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,aAAa;YACjB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACN,eAAe,EAAE,2BAA2B;gBAC5C,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE;aAC3D;SACF,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AA+BA;;sFAEsF;AACtF,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAUtD;;;;oDAIoD;AACpD,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM;gBADlB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM;CAS9B;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAMtD;AAED,KAAK,QAAQ,GAAG;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;+FAC2F;IAC3F,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF;;kFAEkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEvD;AAED;;kEAEkE;AAClE,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB7C"}
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAgCA;;sFAEsF;AACtF,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAUtD;;;;oDAIoD;AACpD,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM;gBADlB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM;CAS9B;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAMtD;AAED,KAAK,QAAQ,GAAG;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;+FAC2F;IAC3F,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF;;kFAEkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEvD;AAED;;kEAEkE;AAClE,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6B7C"}

package/dist/core/exec.js

@@ -25,6 +25,7 @@
 // silent kill and an OOM.
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
+import { childEnvWithBootEstateDb } from './governance-store.js';
 const execFileAsync = promisify(execFile);
 /** 64 MiB. Chosen to clear the largest `blast-radius` output observed in the corpus by a wide
  *  margin while still bounding the daemon's heap. Raise it deliberately, not reflexively — if a
@@ -86,7 +87,16 @@ export async function execCapped(file, args, opts = {}) {
     // overridable by ACCIDENT, only on purpose.
     const maxBuffer = resolveMaxBuffer(opts);
     try {
-        return await execFileAsync(file, args, { ...opts, maxBuffer });
+        // Every crew child gets the process env with the engine-only store variables restored to their
+        // BOOT values (`childEnvWithBootEstateDb`): the daemon exports its governance store as
+        // WICKED_ESTATE_DB for the in-process engine, and that is nobody else's business — not git's,
+        // uv's, the estate CLI's or a version probe's. An explicit `opts.env` is scrubbed the same way,
+        // so a caller that spreads `process.env` is covered too.
+        return await execFileAsync(file, args, {
+            ...opts,
+            maxBuffer,
+            env: childEnvWithBootEstateDb(opts.env ?? process.env),
+        });
     }
     catch (err) {
         if (isMaxBufferError(err))

package/dist/core/exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,eAAe;AACf,EAAE;AACF,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,2FAA2F;AAC3F,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,qCAAqC;AACrC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,mGAAmG;AACnG,0EAA0E;AAC1E,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,0BAA0B;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;sFAEsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;kFACkF;AAClF,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IACpE,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,OAAO,GAAG,CAAC,QAAQ,CAAC;AACtB,CAAC;AAED;;;;oDAIoD;AACpD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC;IACA;IAFX,YACW,IAAY,EACZ,UAAkB;QAE3B,KAAK,CACH,GAAG,IAAI,uBAAuB,UAAU,CAAC,UAAU,CAAC,wCAAwC;YAC1F,0CAA0C,IAAI,8CAA8C;YAC5F,wDAAwD,CAC3D,CAAC;QAPO,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAO3B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAA0B,CAAC,IAAI,KAAK,mCAAmC,CACzE,CAAC;AACJ,CAAC;AAaD;;kFAEkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,OAAO,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;AACjD,CAAC;AAED;;kEAEkE;AAClE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,IAAc,EACd,OAAiB,EAAE;IAEnB,gGAAgG;IAChG,6FAA6F;IAC7F,2FAA2F;IAC3F,iCAAiC;IACjC,EAAE;IACF,sFAAsF;IACtF,6EAA6E;IAC7E,8DAA8D;IAC9D,EAAE;IACF,8FAA8F;IAC9F,uFAAuF;IACvF,4CAA4C;IAC5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,eAAe;AACf,EAAE;AACF,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,2FAA2F;AAC3F,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,qCAAqC;AACrC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,mGAAmG;AACnG,0EAA0E;AAC1E,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,0BAA0B;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;sFAEsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;kFACkF;AAClF,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IACpE,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,OAAO,GAAG,CAAC,QAAQ,CAAC;AACtB,CAAC;AAED;;;;oDAIoD;AACpD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC;IACA;IAFX,YACW,IAAY,EACZ,UAAkB;QAE3B,KAAK,CACH,GAAG,IAAI,uBAAuB,UAAU,CAAC,UAAU,CAAC,wCAAwC;YAC1F,0CAA0C,IAAI,8CAA8C;YAC5F,wDAAwD,CAC3D,CAAC;QAPO,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAQ;QAO3B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAA0B,CAAC,IAAI,KAAK,mCAAmC,CACzE,CAAC;AACJ,CAAC;AAaD;;kFAEkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,OAAO,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;AACjD,CAAC;AAED;;kEAEkE;AAClE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,IAAc,EACd,OAAiB,EAAE;IAEnB,gGAAgG;IAChG,6FAA6F;IAC7F,2FAA2F;IAC3F,iCAAiC;IACjC,EAAE;IACF,sFAAsF;IACtF,6EAA6E;IAC7E,8DAA8D;IAC9D,EAAE;IACF,8FAA8F;IAC9F,uFAAuF;IACvF,4CAA4C;IAC5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,+FAA+F;QAC/F,uFAAuF;QACvF,8FAA8F;QAC9F,gGAAgG;QAChG,yDAAyD;QACzD,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE;YACrC,GAAG,IAAI;YACP,SAAS;YACT,GAAG,EAAE,wBAAwB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}