zelari-code 2.13.0 → 2.14.0

package/dist/cli/kraken/spawnRoi.js

@@ -0,0 +1,209 @@
+/**
+ * spawnRoi — t30 (hardening plan §17): orchestration ROI gate.
+ *
+ * Every tentacle spawn must have positive expected value. A node is worth
+ * starting only when its expected success gain outweighs what the spawn costs:
+ *
+ *   spawnScore = expectedSuccessGain / (cost + latency + duplicationRisk)
+ *
+ * PURE module — zero fs, zero env, zero clock reads: same input ⇒ same score.
+ * Wall-clock time never enters here; recency decay is already baked into the
+ * t29 reputation aggregate the executor feeds in (`now` is injected there).
+ * The executor owns the policy side: it scores each admitted node before the
+ * tentacle starts, vetoes (advisory-first v1) anything below the threshold by
+ * sending it back the deferred path — stays READY, never failed — and emits
+ * the `node_roi_vetoed` radio trail.
+ *
+ * Score formula (v1, deterministic):
+ *   gain  = verifiedRate * repairFactor * kindWeight
+ *     verifiedRate = clamp01(verifiedRate ?? DEFAULT_VERIFIED_RATE)
+ *       — unknown history is neither trusted nor punished: 0.7 says "a spawn
+ *         with no evidence is presumed useful".
+ *     repairFactor = max(REPAIR_FACTOR_FLOOR,
+ *                        1 + REPAIR_PENALTY * (avgRepairs ?? DEFAULT_AVG_REPAIRS))
+ *       — every historical repair round discounts the gain (rework is the
+ *         visible part of a low-quality spawn), floored so even a catastrophic
+ *         record keeps a positive gain.
+ *     kindWeight   = KIND_WEIGHTS[taskKind]
+ *   cost  = money + latency + duplicationRisk * COST_SCALE
+ *     money   = (estimatedTokens / 1000 * costUsdPer1k) / COST_NORM_USD when
+ *               both estimates exist, else DEFAULT_COST_NORM (unknown prices
+ *               like a ~$0.10 run — absence of data ≠ free).
+ *     latency = latencyMsEstimate / LATENCY_NORM_MS when known, else
+ *               DEFAULT_LATENCY_NORM (unknown ≈ a 5-minute run).
+ *   score = gain / max(cost, COST_FLOOR)
+ *
+ * Calibration (SPAWN_SCORE_THRESHOLD = 0.15): an all-null input scores
+ * 0.6475 / 2 ≈ 0.324 — comfortably above the threshold, so the gate SPAWNS on
+ * missing data. An advisor that vetoes everything on unknowns is worse than
+ * no advisor. The executor passes nulls whenever the reputation bucket has
+ * fewer than REPUTATION_MIN_SAMPLE records, so under the default threshold a
+ * veto can only happen on reputation-backed evidence (a bad verified-rate
+ * bucket) or extreme duplication — never on mere absence of data.
+ *
+ * Threshold override: the EXECUTOR reads ZELARI_KRAKEN_ROI_THRESHOLD and hands
+ * the raw string to {@link parseRoiThreshold}; this module stays env-free.
+ *
+ * @since v0.10.x — Kraken hardening §17 (P2.F / t30)
+ */
+import { globsOverlap, normalizeGlob } from './fileOwnership.js';
+import { REPUTATION_MIN_SAMPLE } from './modelReputation.js';
+/** Verified rate presumed when history is unknown/too thin to trust. */
+export const DEFAULT_VERIFIED_RATE = 0.7;
+/** Gain discount per historical repair round (negative: rework discounts). */
+export const REPAIR_PENALTY = -0.15;
+/** Floor for the repair factor — a terrible record still has nonzero gain. */
+export const REPAIR_FACTOR_FLOOR = 0.3;
+/** Average repair rounds presumed when unknown. */
+export const DEFAULT_AVG_REPAIRS = 0.5;
+/** Marginal value of one spawn by task kind (advisory v1 calibration). */
+export const KIND_WEIGHTS = {
+    explore: 1.0, // unique information, cheap — never presumptively vetoed
+    implement: 1.0, // the task's actual output
+    verify: 0.9, // guards quality; a skipped verify can be re-run later
+    review: 0.85, // advisory review, least unique output
+};
+/** An estimated $0.10 run contributes 1.0 cost unit. */
+export const COST_NORM_USD = 0.1;
+/** Cost-unit contribution of UNKNOWN money (≈ a $0.10 run: unknown ≠ free). */
+export const DEFAULT_COST_NORM = 1.0;
+/** An estimated 5-minute run contributes 1.0 cost unit. */
+export const LATENCY_NORM_MS = 300_000;
+/** Cost-unit contribution of UNKNOWN latency (≈ a 5-minute run). */
+export const DEFAULT_LATENCY_NORM = 1.0;
+/** A fully duplicated spawn (risk 1) adds one full cost unit. */
+export const COST_SCALE = 1.0;
+/** Denominator floor — a zero-cost spawn cannot divide by zero. */
+export const COST_FLOOR = 1e-6;
+/**
+ * Default spawn threshold: score ≥ threshold spawns. 0.15 keeps the default
+ * verdict "spawn" for every unknown-input shape (see the header calibration
+ * note). Lower it to gate harder; raise it only once reputation coverage
+ * exists, or the gate will veto on missing data.
+ */
+export const SPAWN_SCORE_THRESHOLD = 0.15;
+/** Treat non-finite garbage as "unknown" — NaN must never reach the score. */
+function finiteOrNull(v) {
+    return typeof v === 'number' && Number.isFinite(v) ? v : null;
+}
+function clamp01(v) {
+    return Math.min(1, Math.max(0, v));
+}
+/** Snap an arbitrary number onto the {@link DuplicationRisk} lattice (nearest point). */
+function toDuplicationRisk(v) {
+    if (v === null || v <= 0.125)
+        return 0;
+    if (v < 0.375)
+        return 0.25;
+    if (v < 0.75)
+        return 0.5;
+    return 1;
+}
+/**
+ * Deterministic ROI score for one would-be spawn. All-null inputs produce the
+ * sane default score (≈ 0.324, see header) — never NaN: every numeric field
+ * is sanitized to "unknown" and unknowns have documented defaults.
+ */
+export function computeSpawnScore(input) {
+    const verified = clamp01(finiteOrNull(input.verifiedRate) ?? DEFAULT_VERIFIED_RATE);
+    const repairs = Math.max(0, finiteOrNull(input.historicalAvgRepairs) ?? DEFAULT_AVG_REPAIRS);
+    const repairFactor = Math.max(REPAIR_FACTOR_FLOOR, 1 + REPAIR_PENALTY * repairs);
+    const kindWeight = KIND_WEIGHTS[input.taskKind] ?? 1;
+    const gain = verified * repairFactor * kindWeight;
+    const tokens = finiteOrNull(input.estimatedTokens);
+    const price = finiteOrNull(input.costUsdPer1k);
+    const money = tokens !== null && price !== null
+        ? Math.max(0, (tokens / 1000) * price) / COST_NORM_USD
+        : DEFAULT_COST_NORM;
+    const latency = finiteOrNull(input.latencyMsEstimate);
+    const latencyNorm = latency !== null ? Math.max(0, latency) / LATENCY_NORM_MS : DEFAULT_LATENCY_NORM;
+    const dup = toDuplicationRisk(finiteOrNull(input.duplicationRisk));
+    const cost = money + latencyNorm + dup * COST_SCALE;
+    return {
+        score: gain / Math.max(cost, COST_FLOOR),
+        components: { gain, cost },
+        rationaleCode: (finiteOrNull(input.reputationSample) ?? 0) >= REPUTATION_MIN_SAMPLE
+            ? 'roi-reputation-backed'
+            : 'roi-defaults',
+    };
+}
+/**
+ * The gate verdict: spawn at-or-above the threshold (ties spawn — the
+ * fail-open direction). A non-finite threshold spawns too: garbage input
+ * must never veto work.
+ */
+export function shouldSpawn(scoreResult, threshold = SPAWN_SCORE_THRESHOLD) {
+    if (!Number.isFinite(threshold))
+        return true;
+    return scoreResult.score >= threshold;
+}
+/**
+ * Parse the ZELARI_KRAKEN_ROI_THRESHOLD override. Empty/undefined/invalid or
+ * negative values fall back to SPAWN_SCORE_THRESHOLD; anything parseFloat
+ * accepts and is finite and ≥ 0 is honored ('0' disables the veto outright).
+ */
+export function parseRoiThreshold(raw) {
+    if (raw === undefined || raw === null)
+        return SPAWN_SCORE_THRESHOLD;
+    const s = raw.trim();
+    if (s.length === 0)
+        return SPAWN_SCORE_THRESHOLD;
+    const n = Number.parseFloat(s);
+    if (!Number.isFinite(n) || n < 0)
+        return SPAWN_SCORE_THRESHOLD;
+    return n;
+}
+/** Kinds that never mutate the workspace (fileOwnership READ_ONLY_KINDS parity). */
+const READ_ONLY_KINDS = ['explore', 'verify', 'spec', 'conformance'];
+/**
+ * The scope globs a node works on — for duplication (unlike write ownership)
+ * this applies to readers too: a missing/empty scope claims the whole tree.
+ */
+function workScopeOf(node) {
+    const scope = node.scope;
+    if (!scope || scope.length === 0)
+        return ['**'];
+    return scope;
+}
+function isWriterKind(kind) {
+    return !READ_ONLY_KINDS.includes(kind);
+}
+/**
+ * Duplication-risk heuristic: the chance this spawn repeats work a
+ * concurrently-racing node is already doing, from task class + scope overlap.
+ * Reuses fileOwnership's globsOverlap/normalizeGlob so both layers agree on
+ * what a scope claims (case-folded first, mirroring globsOverlap's default):
+ *   0    — no racing node touches this scope;
+ *   0.25 — read-only overlap (two readers may duplicate conclusions, but
+ *          nothing conflicts);
+ *   0.5  — at least one writer is involved on an overlapping (non-identical)
+ *          claim;
+ *   1    — an identical normalized glob claim (same tree, same kind of work:
+ *          near-certain duplicate).
+ * Deterministic; the node itself (same id) is excluded from the race set.
+ */
+export function duplicationRiskFor(node, racing) {
+    let risk = 0;
+    // Fold case before normalizing — globsOverlap folds internally, so the
+    // identical-claim check must see the same folded form to agree with it.
+    const scopeA = workScopeOf(node).map((g) => normalizeGlob(g.toLowerCase()));
+    const nodeWrites = isWriterKind(node.kind);
+    for (const other of racing) {
+        if (!other || other.id === node.id)
+            continue;
+        const scopeB = workScopeOf(other).map((g) => normalizeGlob(g.toLowerCase()));
+        const overlaps = scopeA.some((a) => scopeB.some((b) => globsOverlap(a, b)));
+        if (!overlaps)
+            continue;
+        const identical = scopeA.some((a) => scopeB.some((b) => a === b));
+        const candidate = identical
+            ? 1
+            : nodeWrites || isWriterKind(other.kind)
+                ? 0.5
+                : 0.25;
+        if (candidate > risk)
+            risk = candidate;
+    }
+    return risk;
+}
+//# sourceMappingURL=spawnRoi.js.map

package/dist/cli/kraken/spawnRoi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawnRoi.js","sourceRoot":"","sources":["../../../src/cli/kraken/spawnRoi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAwC7D,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC;AACpC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,mDAAmD;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAA+C;IACtE,OAAO,EAAE,GAAG,EAAE,yDAAyD;IACvE,SAAS,EAAE,GAAG,EAAE,2BAA2B;IAC3C,MAAM,EAAE,GAAG,EAAE,uDAAuD;IACpE,MAAM,EAAE,IAAI,EAAE,uCAAuC;CACtD,CAAC;AACF,wDAAwD;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,oEAAoE;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAC9B,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C,8EAA8E;AAC9E,SAAS,YAAY,CAAC,CAA4B;IAChD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,yFAAyF;AACzF,SAAS,iBAAiB,CAAC,CAAgB;IACzC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAoB;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,qBAAqB,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,GAAG,cAAc,GAAG,OAAO,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;IAElD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,KAAK,GACT,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,aAAa;QACtD,CAAC,CAAC,iBAAiB,CAAC;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,WAAW,GACf,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACnF,MAAM,GAAG,GAAG,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,KAAK,GAAG,WAAW,GAAG,GAAG,GAAG,UAAU,CAAC;IAEpD,OAAO;QACL,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1B,aAAa,EACX,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,qBAAqB;YAClE,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,cAAc;KACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,WAA6B,EAC7B,YAAoB,qBAAqB;IAEzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,WAAW,CAAC,KAAK,IAAI,SAAS,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA8B;IAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,qBAAqB,CAAC;IACpE,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC/D,OAAO,CAAC,CAAC;AACX,CAAC;AASD,oFAAoF;AACpF,MAAM,eAAe,GAAsB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAExF;;;GAGG;AACH,SAAS,WAAW,CAAC,IAA0B;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA0B,EAC1B,MAAuC;IAEvC,IAAI,IAAI,GAAoB,CAAC,CAAC;IAC9B,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;YAAE,SAAS;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,SAAS,GAAoB,SAAS;YAC1C,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,UAAU,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBACtC,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,SAAS,GAAG,IAAI;YAAE,IAAI,GAAG,SAAS,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/kraken/transactional.js

@@ -0,0 +1,104 @@
+/**
+ * transactional — checkpoint → run → keep-or-rollback wrapper (P2.D).
+ *
+ * Wraps one unit of work (a writer tentacle run) in a workspace transaction:
+ *   1. checkpoint the working tree via `checkpointManager` (git plumbing only
+ *      — HEAD, branch, index and stash are never touched);
+ *   2. run the work;
+ *   3. PASS    → keep the checkpoint as a recovery point, correlated to the
+ *                task/node through the checkpoint label;
+ *      FAIL    → restore the tree to the checkpoint and drop the ref, so a
+ *                failed subagent never leaves a dirty workspace (a retry then
+ *                starts from clean state);
+ *      restore failure → surfaced honestly: the outcome is still `rolledback`
+ *                but the error says the workspace may be dirty. Never swallowed.
+ *
+ * When no transaction is possible — not a git repo, or the checkpoint itself
+ * fails to create — the work still runs (`passthrough`) with an honest `note`.
+ * A passthrough run does NOT swallow errors: there is nothing to roll back,
+ * so a throwing work rejects all the way out to the caller's ordinary error
+ * handling.
+ *
+ * Concurrency note: the checkpoint/restore covers the WHOLE working tree, not
+ * one node's write scope. Concurrent in-place writers sharing a tree (i.e.
+ * worktree isolation off) can have a sibling's post-checkpoint writes reverted
+ * by a rollback. Part of why this stays opt-in (default OFF) for v1.
+ *
+ * @since P2.D — transactional agent execution
+ */
+import { isGitRepo, createCheckpoint, restoreCheckpoint, dropCheckpoint, } from '../checkpoint/checkpointManager.js';
+/**
+ * Correlated checkpoint label: `task=<id> node=<id> · <label>`.
+ *
+ * `Checkpoint` has no metadata slot — the git commit subject is the only
+ * persisted annotation — so the correlation rides in the label: it survives
+ * in the ref's commit message and comes back verbatim from
+ * `listCheckpoints(...)[i].label`.
+ */
+export function correlatedLabel(opts) {
+    const parts = [];
+    if (opts.taskId)
+        parts.push(`task=${opts.taskId}`);
+    if (opts.nodeId)
+        parts.push(`node=${opts.nodeId}`);
+    return parts.length > 0 ? `${parts.join(' ')} · ${opts.label}` : opts.label;
+}
+/**
+ * Run `fn` inside a workspace transaction: checkpoint → run → PASS keep /
+ * FAIL rollback. Failure means `fn` threw (or rejected) — a resolved result
+ * is a success by definition here; callers that get a failure *value* from
+ * their work should map it to a throw before handing it over.
+ */
+export async function runTransactional(opts, fn) {
+    // No git, no transaction — but the work must still happen. Errors propagate.
+    if (!(await isGitRepo(opts.cwd))) {
+        const value = await fn();
+        return {
+            outcome: 'passthrough',
+            value,
+            note: 'not a git repository — ran without a transaction (no checkpoint, no rollback)',
+        };
+    }
+    const created = await createCheckpoint(opts.cwd, correlatedLabel(opts));
+    if (!created.ok) {
+        const value = await fn();
+        return {
+            outcome: 'passthrough',
+            value,
+            note: `checkpoint failed (${created.error}) — ran without a transaction`,
+        };
+    }
+    const checkpointId = created.value.id;
+    let value;
+    try {
+        value = await fn();
+    }
+    catch (err) {
+        const cause = err instanceof Error ? err.message : String(err);
+        const restored = await restoreCheckpoint(opts.cwd, checkpointId);
+        if (!restored.ok) {
+            // Never swallow a failed restore: the caller must know the workspace
+            // may be dirty. The checkpoint ref stays — it is the only way back.
+            return {
+                outcome: 'rolledback',
+                error: `${cause} — RESTORE FAILED (${restored.error}); workspace may be dirty`,
+                checkpointId,
+            };
+        }
+        // Rollback done; drop the spent recovery point (best-effort — a stale ref
+        // is clutter, not corruption).
+        await dropCheckpoint(opts.cwd, checkpointId);
+        const removed = restored.value.deleted.length;
+        return {
+            outcome: 'rolledback',
+            error: `${cause} — rolled back to checkpoint ${checkpointId}` +
+                (removed > 0
+                    ? ` (${removed} file${removed === 1 ? '' : 's'} created after the snapshot removed)`
+                    : ''),
+            checkpointId,
+        };
+    }
+    // PASS: keep the checkpoint as the recovery point for this task/node.
+    return { outcome: 'success', value, checkpointId };
+}
+//# sourceMappingURL=transactional.js.map

package/dist/cli/kraken/transactional.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactional.js","sourceRoot":"","sources":["../../../src/cli/kraken/transactional.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,oCAAoC,CAAC;AA4B5C;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAA0B;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA0B,EAC1B,EAAoB;IAEpB,6EAA6E;IAC7E,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,KAAK;YACL,IAAI,EAAE,+EAA+E;SACtF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,KAAK;YACL,IAAI,EAAE,sBAAsB,OAAO,CAAC,KAAK,+BAA+B;SACzE,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAEtC,IAAI,KAAQ,CAAC;IACb,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,qEAAqE;YACrE,oEAAoE;YACpE,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,GAAG,KAAK,sBAAsB,QAAQ,CAAC,KAAK,2BAA2B;gBAC9E,YAAY;aACb,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,+BAA+B;QAC/B,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,KAAK,EACH,GAAG,KAAK,gCAAgC,YAAY,EAAE;gBACtD,CAAC,OAAO,GAAG,CAAC;oBACV,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,sCAAsC;oBACpF,CAAC,CAAC,EAAE,CAAC;YACT,YAAY;SACb,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACrD,CAAC"}

package/dist/cli/kraken/verificationAdapters/dotnet.js

@@ -0,0 +1,49 @@
+/**
+ * verificationAdapters/dotnet — .NET solutions and projects (P1.A2 / t24).
+ *
+ * Ecosystem ownership: a root containing any `*.sln` / `*.slnx` (score 4) or
+ * `*.csproj` / `*.fsproj` (score 3). The scan is depth-1 ONLY — the honest,
+ * cheap, deterministic boundary for v1. Nested-only layouts (a project file
+ * under src/ with nothing at the root) are deliberately NOT claimed:
+ * `dotnet` verbs would run against a directory with no buildable input and
+ * misreport as `fail` instead of an honest not-applicable.
+ *
+ * Honest-unknown rule: .NET has no typecheck verb separate from compilation
+ * (`dotnet build` compiles AND validates), so typecheck stays null. test and
+ * build bind unconditionally: `dotnet test` / `dotnet build` natively target
+ * the solution or the project in the working directory.
+ */
+import { readdir } from 'node:fs/promises';
+const SOLUTION_EXTENSIONS = ['.sln', '.slnx'];
+const PROJECT_EXTENSIONS = ['.csproj', '.fsproj'];
+/**
+ * Whether any root-level FILE ends with one of `extensions`
+ * (case-insensitive — Windows-authored trees commonly uppercase them).
+ * An unreadable root → false (honest absence, never a guess).
+ */
+async function hasRootFileWithExtension(root, extensions) {
+    let entries;
+    try {
+        entries = await readdir(root, { withFileTypes: true });
+    }
+    catch {
+        return false;
+    }
+    return entries.some((entry) => entry.isFile() && extensions.some((ext) => entry.name.toLowerCase().endsWith(ext)));
+}
+export const dotnetAdapter = {
+    async detect(root) {
+        if (await hasRootFileWithExtension(root, SOLUTION_EXTENSIONS))
+            return 4;
+        return (await hasRootFileWithExtension(root, PROJECT_EXTENSIONS)) ? 3 : 0;
+    },
+    async buildPlan(_root) {
+        void _root; // dotnet verbs resolve the sln/project in the working dir themselves
+        return {
+            typecheckCommand: null, // compilation IS the check — see header
+            testCommand: 'dotnet test',
+            buildCommand: 'dotnet build',
+        };
+    },
+};
+//# sourceMappingURL=dotnet.js.map

package/dist/cli/kraken/verificationAdapters/dotnet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotnet.js","sourceRoot":"","sources":["../../../../src/cli/kraken/verificationAdapters/dotnet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAI3C,MAAM,mBAAmB,GAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACjE,MAAM,kBAAkB,GAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAErE;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,UAA6B;IACjF,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACrF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,MAAM,wBAAwB,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAE,OAAO,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,KAAK,KAAK,CAAC,CAAC,qEAAqE;QACjF,OAAO;YACL,gBAAgB,EAAE,IAAI,EAAE,wCAAwC;YAChE,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,cAAc;SAC7B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/cli/kraken/verificationAdapters/go.js

@@ -0,0 +1,36 @@
+/**
+ * verificationAdapters/go — Go modules (t19 §P1.A).
+ *
+ * Slot-mapping decision (documented per task brief): Go has NO separate
+ * typecheck verb — compilation IS the typecheck — and the canonical static
+ * gate is `go vet ./...`. Vet is therefore mapped onto the TYPECHECK slot:
+ * it is the semantic equivalent of what `tsc --noEmit` enforces on Node
+ * repos (compile errors + suspicious constructs, no artifacts emitted),
+ * keeping strict-mode meaning aligned across ecosystems.
+ *
+ * `./...` patterns cover every package in the module and its subpackages —
+ * matching how Go teams gate CI.
+ */
+import { stat } from 'node:fs/promises';
+import path from 'node:path';
+async function fileExists(candidate) {
+    try {
+        return (await stat(candidate)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+export const goAdapter = {
+    async detect(root) {
+        return (await fileExists(path.join(root, 'go.mod'))) ? 10 : 0;
+    },
+    async buildPlan(_root) {
+        return {
+            typecheckCommand: 'go vet ./...', // mapped slot — see rationale above
+            testCommand: 'go test ./...',
+            buildCommand: 'go build ./...',
+        };
+    },
+};
+//# sourceMappingURL=go.js.map

package/dist/cli/kraken/verificationAdapters/go.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../../../src/cli/kraken/verificationAdapters/go.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAwB;IAC5C,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,OAAO;YACL,gBAAgB,EAAE,cAAc,EAAE,oCAAoC;YACtE,WAAW,EAAE,eAAe;YAC5B,YAAY,EAAE,gBAAgB;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/cli/kraken/verificationAdapters/index.js

@@ -0,0 +1,47 @@
+import { nodeAdapter } from './node.js';
+import { pythonAdapter } from './python.js';
+import { rustAdapter } from './rust.js';
+import { goAdapter } from './go.js';
+import { javaAdapter } from './java.js';
+import { dotnetAdapter } from './dotnet.js';
+export { nodeAdapter } from './node.js';
+export { pythonAdapter } from './python.js';
+export { rustAdapter } from './rust.js';
+export { goAdapter } from './go.js';
+export { javaAdapter } from './java.js';
+export { dotnetAdapter } from './dotnet.js';
+/** Ordered ecosystem adapters; see header for the tie-break contract. */
+export const VERIFICATION_ADAPTERS = [
+    nodeAdapter,
+    pythonAdapter,
+    rustAdapter,
+    goAdapter,
+    javaAdapter,
+    dotnetAdapter,
+];
+/**
+ * Highest-scoring adapter for `root` (ties → earlier registration), or null
+ * when no adapter applies (score ≤ 0 everywhere — e.g. an empty directory;
+ * env overrides alone still work then, see
+ * nativeVerification.resolvePackCommandsForRoot). A throwing `detect`
+ * (filesystem race) counts as not-applicable rather than aborting resolution.
+ */
+export async function resolveAdapterForRoot(root) {
+    let best = null;
+    let bestScore = 0;
+    for (const adapter of VERIFICATION_ADAPTERS) {
+        let score;
+        try {
+            score = await adapter.detect(root);
+        }
+        catch {
+            continue;
+        }
+        if (score > bestScore) {
+            best = adapter;
+            bestScore = score;
+        }
+    }
+    return best;
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/kraken/verificationAdapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/kraken/verificationAdapters/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACnE,WAAW;IACX,aAAa;IACb,WAAW;IACX,SAAS;IACT,WAAW;IACX,aAAa;CACd,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,IAAI,IAAI,GAA+B,IAAI,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,OAAO,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/kraken/verificationAdapters/java.js

@@ -0,0 +1,102 @@
+/**
+ * verificationAdapters/java — JVM builds: Gradle and Maven (P1.A2 / t24).
+ *
+ * Ecosystem ownership: Gradle roots (wrapper script, build.gradle[.kts],
+ * settings.gradle[.kts]) and Maven roots (pom.xml). Gradle WINS over Maven
+ * when markers coexist: the wrapper scores above pom.xml, and the remaining
+ * tie (build.gradle 3 vs pom.xml 3) is resolved gradle-first inside
+ * buildPlan — detect's single score cannot express within-root precedence.
+ *
+ * Detect scores (highest present marker wins): gradlew / gradlew.bat = 4
+ * (a project-local toolchain is the strongest evidence), build.gradle /
+ * build.gradle.kts = 3, pom.xml = 3, settings.gradle[.kts] = 2. No markers
+ * → 0.
+ *
+ * Honest-unknown rule: Java has NO standalone typecheck verb — compilation
+ * is inlined into `gradle build` / the Maven lifecycle — so the typecheck
+ * slot binds null (dropped downstream) instead of a fabricated command that
+ * would misreport a missing tool as `fail`.
+ *
+ * Wrapper resolution: `./gradlew <verb>` on non-win32 when the `gradlew`
+ * file exists, `gradlew.bat <verb>` on win32 when the wrapper batch file
+ * exists, else bare `gradle <verb>` (PATH invocation). `platform` is
+ * injectable in gradleCommand (default process.platform) so both namings
+ * stay deterministically testable on any host.
+ */
+import { stat } from 'node:fs/promises';
+import path from 'node:path';
+/** Tiny fs helpers stay LOCAL per adapter (shared utils would couple sibling adapters). */
+async function fileExists(candidate) {
+    try {
+        return (await stat(candidate)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** Gradle markers, strongest first (see header). */
+const GRADLE_MARKERS = [
+    ['gradlew', 4],
+    ['gradlew.bat', 4],
+    ['build.gradle', 3],
+    ['build.gradle.kts', 3],
+    ['settings.gradle', 2],
+    ['settings.gradle.kts', 2],
+];
+/** Full detection set: every gradle marker plus Maven's pom.xml (3). */
+const DETECT_MARKERS = [
+    ...GRADLE_MARKERS,
+    ['pom.xml', 3],
+];
+async function hasGradleMarker(root) {
+    for (const [marker] of GRADLE_MARKERS) {
+        if (await fileExists(path.join(root, marker)))
+            return true;
+    }
+    return false;
+}
+/**
+ * Gradle invocation for `verb` at `root`: the platform-appropriate wrapper
+ * when its file exists, else bare `gradle` (PATH). Exported (unlike sibling
+ * helpers) so tests can drive BOTH platform branches deterministically;
+ * buildPlan passes process.platform.
+ */
+export async function gradleCommand(root, verb, platform = process.platform) {
+    const wrapper = platform === 'win32' ? 'gradlew.bat' : 'gradlew';
+    if (await fileExists(path.join(root, wrapper))) {
+        return platform === 'win32' ? `gradlew.bat ${verb}` : `./gradlew ${verb}`;
+    }
+    return `gradle ${verb}`;
+}
+export const javaAdapter = {
+    async detect(root) {
+        let best = 0;
+        for (const [marker, score] of DETECT_MARKERS) {
+            if (score > best && (await fileExists(path.join(root, marker))))
+                best = score;
+        }
+        return best;
+    },
+    async buildPlan(root) {
+        // Gradle-first precedence — see header. detect cannot encode the
+        // build.gradle(3) vs pom.xml(3) tie, so buildPlan decides.
+        if (await hasGradleMarker(root)) {
+            return {
+                typecheckCommand: null, // no standalone verb — honest absence
+                testCommand: await gradleCommand(root, 'test'),
+                buildCommand: await gradleCommand(root, 'build'),
+            };
+        }
+        if (await fileExists(path.join(root, 'pom.xml'))) {
+            return {
+                typecheckCommand: null, // compilation rides the test/package lifecycle
+                testCommand: 'mvn test',
+                buildCommand: 'mvn package',
+            };
+        }
+        // Defensive (the registry never calls buildPlan on a 0-score root):
+        // all-null, never fabricated.
+        return { typecheckCommand: null, testCommand: null, buildCommand: null };
+    },
+};
+//# sourceMappingURL=java.js.map

package/dist/cli/kraken/verificationAdapters/java.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"java.js","sourceRoot":"","sources":["../../../../src/cli/kraken/verificationAdapters/java.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,cAAc,GAA4D;IAC9E,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,aAAa,EAAE,CAAC,CAAC;IAClB,CAAC,cAAc,EAAE,CAAC,CAAC;IACnB,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACvB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACtB,CAAC,qBAAqB,EAAE,CAAC,CAAC;CAC3B,CAAC;AAEF,wEAAwE;AACxE,MAAM,cAAc,GAA4D;IAC9E,GAAG,cAAc;IACjB,CAAC,SAAS,EAAE,CAAC,CAAC;CACf,CAAC;AAEF,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QACtC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,IAAsB,EACtB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,UAAU,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAwB;IAC9C,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YAC7C,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAE,IAAI,GAAG,KAAK,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,gBAAgB,EAAE,IAAI,EAAE,sCAAsC;gBAC9D,WAAW,EAAE,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;gBAC9C,YAAY,EAAE,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO;gBACL,gBAAgB,EAAE,IAAI,EAAE,+CAA+C;gBACvE,WAAW,EAAE,UAAU;gBACvB,YAAY,EAAE,aAAa;aAC5B,CAAC;QACJ,CAAC;QACD,oEAAoE;QACpE,8BAA8B;QAC9B,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3E,CAAC;CACF,CAAC"}