Bind action phases to source-derived capture window identities

Tools/windows/Invoke-MatchedActionSupplement.ps1

@@ -128,6 +128,18 @@ $dryRunLauncher=$null
 $dryRunProof=$null
 try {
     Assert-CapWorkerDeadline 'action entry'
+    $boundWindows=@(Assert-CapActionWindowContext)
+    $windowPreflight=@(foreach ($binding in $boundWindows) {
+        foreach ($scene in $binding.sceneNames) {
+            $identity=Get-CapWorkerWindowIdentity -Phase $binding.actionPhase -SceneName $scene
+            $geometry=Get-CapMatchedWindowGeometry -Phase $binding.actionPhase -SceneName $scene
+            [pscustomobject]@{
+                actionPhase=$binding.actionPhase;capturePhase=$binding.capturePhase
+                sceneName=$scene;actionIds=@($binding.actionIds);identity=$identity;geometry=$geometry
+                validation='NONNULL_SOURCE_BOUND_IDENTITY_BEFORE_LAUNCH'
+            }
+        }
+    })
     if ($DryRun) {
         # Exercise the real custody gate with a harmless child, never a product/provider image.
         $dryRunLauncher=Start-CapJobLauncher -Root $root -OutputDirectory $outputDirectory `
@@ -148,12 +160,15 @@ try {
             target=$target
             productLaunches=0L
             providerLaunches=0L
-            windowIdentityValidation='REQUIRES_PRODUCT_WINDOW_NOT_EXECUTED'
+            windowIdentityValidation='SOURCE_PHASE_BINDINGS_VALIDATED_BEFORE_LAUNCH_RUNTIME_WINDOW_NOT_EXECUTED'
+            windowBindings=$windowPreflight
+            toolingSourceHead=$head
+            captureSourceHead=$job.head
             geometry=$null
             preconditionsEvaluated=$true
         }
         if (-not (Test-CapMatchedDpiAdapter)) {throw 'Action dry run requires the production matched DPI contract.'}
-        $dryRunProof.geometry=Get-CapMatchedWindowGeometry -Phase 'after'
+        $dryRunProof.geometry=$windowPreflight[0].geometry
     } else {
         $matchedFixture=Get-Content $fixturePath -Raw | ConvertFrom-Json -DateKind String
         Initialize-CapMatchedWorktrees -Fixture $matchedFixture
@@ -276,7 +291,9 @@ $release=[ordered]@{
     schemaVersion=1L
     status=$(if ($manifest.status -ceq 'COMPLETE') {'RELEASED_ZERO_SURVIVORS'}
         elseif ($independent.Count -eq 0) {'FAILED_ZERO_SURVIVORS'} else {'CLEANUP_UNPROVEN'})
-    cleanupState=$(if ($independent.Count -eq 0 -and $cleanupFailures.Count -eq 0) {
+    cleanupState=$(if ($runs.Count -eq 0 -and $independent.Count -eq 0 -and $cleanupFailures.Count -eq 0) {
+        'NO_PROCESS_LAUNCHES'
+    } elseif ($independent.Count -eq 0 -and $cleanupFailures.Count -eq 0) {
         'HELD_EXIT_AND_EOF_PROVEN'
     } else {'UNPROVEN'})
     group=$plan.group

Tools/windows/Invoke-UiCaptureWorker.ps1

@@ -122,11 +122,55 @@ function Open-CapActionAuthorization {
     }
 }
 
+function Assert-CapActionWindowContext {
+    $held=Open-CapActionAuthorization -Path $authorizationPath -Sha256 $authorizationSha256 `
+        -Expected $authorization -DryRun:($authorization.status -ceq 'DRY_RUN_NO_AUTHORITY')
+    try {
+        if ($runDirectory -cne $held.Record.runDirectory -or
+            $plan.group -cne $held.Record.group -or
+            $plan.sourceHead -cne $held.Record.sourceHead -or
+            $plan.sourceTree -cne $held.Record.sourceTree -or
+            ($held.Record.status -ceq 'AUTHORIZED' -and $job.head -cne $plan.sourceHead)) {
+            throw 'Action window binding run/authority/source/plan/job differs.'
+        }
+        foreach ($inputBinding in @(
+            @($planPath,$held.Record.actionPlanSha256,$plan),
+            @($plan.jobPath,$held.Record.jobSha256,$job)
+        )) {
+            $record=Read-CapBoundJson -Root $root -Reference ([pscustomobject]@{
+                path=$inputBinding[0];sha256=$inputBinding[1]})
+            if (-not [Text.Json.Nodes.JsonNode]::DeepEquals(
+                [Text.Json.Nodes.JsonNode]::Parse(($record|ConvertTo-Json -Depth 50 -Compress)),
+                [Text.Json.Nodes.JsonNode]::Parse(($inputBinding[2]|ConvertTo-Json -Depth 50 -Compress)))) {
+                throw 'Action window binding in-memory plan/job differs from bound bytes.'
+            }
+        }
+        return @(Assert-CapActionWindowBindings -Job $job -Plan $plan)
+    } finally {$held.Pin.Dispose()}
+}
+
+function Get-CapWorkerWindowIdentity {
+    param([Parameter(Mandatory)][string]$Phase,[string]$SceneName='')
+    if ($actionSupplementMode) {
+        $bindings=@(Assert-CapActionWindowContext)
+        $matches=@($bindings | Where-Object {
+            $_.actionPhase -ceq $Phase -and $SceneName -cin $_.sceneNames
+        })
+        if ($matches.Count -ne 1) {throw "Unknown or foreign action phase/scene window binding: $Phase/$SceneName"}
+        return $matches[0].identity
+    }
+    if ($Phase -cnotin @('before','after')) {throw "Unknown capture window identity phase: $Phase"}
+    $contract=$job.captureContract
+    $identity=$contract.windowIdentities.$Phase
+    if ($null -eq $identity) {throw "Capture window identity is missing: $Phase"}
+    return $identity
+}
+
 function Get-CapMatchedWindowGeometry {
-    param([Parameter(Mandatory)][string]$Phase)
+    param([Parameter(Mandatory)][string]$Phase,[string]$SceneName='')
+    $identity=Get-CapWorkerWindowIdentity -Phase $Phase -SceneName $SceneName
     $area=Get-CapPrimaryPhysicalWorkArea
     $contract = $job.captureContract
-    $identity = $contract.windowIdentities.$Phase
     return Get-CapDpiGeometry -LogicalClientWH @($contract.logicalClientWH) `
         -ExpectedDpi ([uint32]$contract.expectedWindowDpi) `
         -WindowStyle ([long]$identity.windowStyleForAdjustment) `
@@ -1322,10 +1366,15 @@ function Start-CapGraphCodeApp {
         [Parameter(Mandatory)][string]$Phase,
         [Parameter(Mandatory)][string]$PipeName,
         [Parameter(Mandatory)][string]$SessionPrefix,
+        [string]$SceneName='',
         [switch]$ActionsFixture
     )
     Write-CapTrace -Command $MyInvocation.MyCommand.Name -Parameters $PSBoundParameters
 
+    if ($actionSupplementMode) {
+        $null=Get-CapWorkerWindowIdentity -Phase $Phase -SceneName $SceneName
+        $null=Get-CapMatchedWindowGeometry -Phase $Phase -SceneName $SceneName
+    }
     $binaryKey = if ($Phase -eq 'before') { 'graphcode-before.exe' } else { 'graphcode-after.exe' }
     $binaryPath = if ($rehearsal) { Assert-CapOwnedPath $job.rehearsalTarget.path }
         else { Join-Path $root "inputs\$binaryKey" }
@@ -1399,9 +1448,9 @@ function Start-CapGraphCodeApp {
     } elseif (Test-CapMatchedDpiAdapter) {
         $beforeMetrics=Get-CapWindowMetrics -Window $window -ProcessIdentity $run.Identity
         $contract=$job.captureContract
-        $identity=$contract.windowIdentities.$Phase
+        $identity=Get-CapWorkerWindowIdentity -Phase $Phase -SceneName $SceneName
         $null=Assert-CapDpiWindowIdentity -Metrics $beforeMetrics -Identity $identity -Initial
-        $geometry=Get-CapMatchedWindowGeometry -Phase $Phase
+        $geometry=Get-CapMatchedWindowGeometry -Phase $Phase -SceneName $SceneName
         Set-CapWindowPosition -Window $window -ProcessIdentity $run.Identity `
             -X $geometry.OuterBounds[0] -Y $geometry.OuterBounds[1] `
             -Width $geometry.OuterWH[0] -Height $geometry.OuterWH[1]
@@ -1412,7 +1461,7 @@ function Start-CapGraphCodeApp {
     $metrics = Get-CapWindowMetrics -Window $window -ProcessIdentity $run.Identity
     if (Test-CapMatchedDpiAdapter) {
         $geometry=$appRun.Placement
-        $identity=$job.captureContract.windowIdentities.$Phase
+        $identity=Get-CapWorkerWindowIdentity -Phase $Phase -SceneName $SceneName
         $null=Assert-CapDpiWindowIdentity -Metrics $metrics -Identity $identity `
             -ExpectedOuterBounds @($geometry.OuterBounds)
     } elseif ($metrics.Dpi -ne 96) {
@@ -2397,6 +2446,7 @@ function Invoke-CapMatchedTerminalSceneSupplement {
 function Invoke-CapWireCompletionSupplement {
     param([Parameter(Mandatory)][string]$StubDaemonPath)
     $phase='wire-completion'
+    $null=Get-CapWorkerWindowIdentity -Phase $phase -SceneName 's-goal-unwired-unselected'
     $roots=Initialize-CapPhaseRoot -PhaseRoot (Join-Path $runDirectory $phase)
     $projectRoot=Join-Path $root 'fixtures\wire-project'
     $null=New-Item -ItemType Directory -Path $projectRoot -Force
@@ -2414,7 +2464,8 @@ function Invoke-CapWireCompletionSupplement {
             '-ApplyGraphCommands','-StubProjectPath',$projectRoot
         ) -WorkingDirectory $roots.Peer -Role 'wire-supplement-stub'
         $runs.Add($stub)
-        $app=Start-CapGraphCodeApp -Roots $roots -Phase $phase -PipeName $pipe -SessionPrefix 'wire-supplement'
+        $app=Start-CapGraphCodeApp -Roots $roots -Phase $phase -PipeName $pipe -SessionPrefix 'wire-supplement' `
+            -SceneName 's-goal-unwired-unselected'
         $app | Add-Member -NotePropertyMembers @{
             SActions=[Collections.Generic.List[object]]::new()
             SObservation=$null
@@ -2770,6 +2821,11 @@ function Invoke-CapMatchedScenes {
     $tabExpectedDpi=if ($expectedDpiProperty) {[long]$expectedDpiProperty.Value} else {[long]$job.captureContract.dpi}
     $tabDpiBase=if ($dpiBaseProperty) {[long]$dpiBaseProperty.Value} else {96L}
     foreach ($scene in $SceneNames) {
+        $sceneBinding=@{}
+        if ($ActionSupplement) {
+            $null=Get-CapWorkerWindowIdentity -Phase $Phase -SceneName $scene
+            $sceneBinding.SceneName=$scene
+        }
         Assert-CapWorkerDeadline "matched scene $scene"
         if ([DateTime]::UtcNow -ge $leaseDeadlineUtc.AddSeconds(-90)) {throw 'Matched scenes reached the required cleanup reserve.'}
         $roots=Initialize-CapPhaseRoot -PhaseRoot (Join-Path $runDirectory "phases\$Phase\$scene")
@@ -2802,7 +2858,7 @@ function Invoke-CapMatchedScenes {
                     Start-CapOfflineSeed -Roots $roots -Phase "$Phase-$scene" -SessionName "graphcode-$($node.id)"
                 }
             }
-            $app=Start-CapGraphCodeApp -Roots $roots -Phase $Phase -PipeName $pipe -SessionPrefix "s-$Phase"
+            $app=Start-CapGraphCodeApp -Roots $roots -Phase $Phase -PipeName $pipe -SessionPrefix "s-$Phase" @sceneBinding
             $app | Add-Member -NotePropertyMembers @{SActions=[Collections.Generic.List[object]]::new();SObservation=$null}
             $null=Invoke-CapSceneAction -AppRun $app -Action 'open-project' -Name 'Matched'
             if (-not $workspace) {

Tools/windows/Prepare-MatchedActionSupplement.ps1

@@ -161,6 +161,12 @@ foreach ($scene in $expectedScenes) {
 }
 $stubPath=Join-Path $repositoryRoot 'Tools\windows\Stub-Daemon.ps1'
 $actionRunnerPath=Join-Path $repositoryRoot 'Tools\windows\Invoke-MatchedActionSupplement.ps1'
+Import-Module (Join-Path $repositoryRoot 'Tools\windows\UiCaptureDriver.psm1') -Force -WarningAction SilentlyContinue
+if ((Get-FileHash -LiteralPath $focused.jobPath -Algorithm SHA256).Hash -cne $focused.jobSha256) {
+    throw 'Action window binding job hash mismatch.'
+}
+$actionJob=Get-Content -LiteralPath $focused.jobPath -Raw | ConvertFrom-Json -DateKind String
+$actionWindowBindings=@(Get-CapActionWindowBindings -Job $actionJob -Group $Group)
 $plan=[ordered]@{
     schemaVersion=1L
     status='PREPARED_NO_AUTHORITY'
@@ -189,6 +195,7 @@ $plan=[ordered]@{
     existingSceneManifestPath=$sceneManifestPath
     existingSceneManifestSha256=$ExistingSceneManifestSha256.ToUpperInvariant()
     expectedScenes=$expectedScenes
+    actionWindowBindings=$actionWindowBindings
     imageBindings=$bindings
     expectedReceiptCount=[long]$expectedScenes.Count
     qualifiedAuthority=$(if ($Group -ceq 'FinalBoundedActions') {