Function applyRequestLockPolicy

src/daemon/request-lock-policy.ts:19–66

(
  req: DaemonRequest,
  existingSession?: SessionState,
)

type NormalizedLockPlatform = NonNullable<PlatformSelector>;

export function applyRequestLockPolicy(
  req: DaemonRequest,
  existingSession?: SessionState,
): DaemonRequest {
  const lockPolicy = req.meta?.lockPolicy;
  if (!lockPolicy) {
    return req;
  }

  const nextFlags: CommandFlags = { ...(req.flags ?? {}) };
  const canOverrideSelector = canOverrideLockPolicySelector(req.command);
  const conflicts = canOverrideSelector
    ? []
    : existingSession
      ? listSessionSelectorConflicts(existingSession, nextFlags)
      : listFreshSessionConflicts(nextFlags, req.meta?.lockPlatform);
  const lockPlatform = req.meta?.lockPlatform;

  if (conflicts.length === 0) {
    if (
      shouldApplyLockPlatformDefault(canOverrideSelector, existingSession, nextFlags, lockPlatform)
    ) {
      nextFlags.platform = lockPlatform;
    }
    return {
      ...req,
      flags: nextFlags,
    };
  }

  if (lockPolicy === 'strip') {
    applyStripLockPolicy(nextFlags, conflicts, lockPlatform, existingSession);
    return {
      ...req,
      flags: nextFlags,
    };
  }

  throw new AppError(
    'INVALID_ARGS',
    buildLockPolicyConflictMessage(req, conflicts, existingSession),
    {
      session: req.session,
      conflicts: conflicts.map(formatSessionSelectorConflict),
      hint: buildLockPolicyConflictHint(req, existingSession),
    },
  );
}

function buildLockPolicyConflictMessage(
  req: DaemonRequest,