@a5c-ai/babysitter-sdk 5.0.1-staging.d73033a7 → 5.0.1-staging.ddee3ed9

package/README.md

@@ -0,0 +1,68 @@
+# @a5c-ai/babysitter-sdk
+
+Core runtime, storage, task, plugin, MCP, and CLI primitives for Babysitter.
+
+## Install
+
+```bash
+npm install @a5c-ai/babysitter-sdk
+```
+
+Optional breakpoint routing support:
+
+```bash
+npm install @a5c-ai/breakpoints-mux
+```
+
+This package ships the built runtime in `dist/`, bundled command/skill templates in `skills/`, and this package README for npm auditability.
+
+## CLI Surface
+
+The package exposes three binaries:
+
+```bash
+npx @a5c-ai/babysitter-sdk babysitter --help
+npx @a5c-ai/babysitter-sdk babysitter-sdk --help
+npx @a5c-ai/babysitter-sdk babysitter-mcp-server --help
+```
+
+`babysitter` and `babysitter-sdk` point at the same CLI entrypoint. The public command groups currently include:
+
+- `run:*`, `task:*`, and `session:*` for run orchestration and task result posting
+- `skill:*`, `harness:*`, and `plugin:*` for discovery, installation, and registry flows
+- `process-library:*`, `profile:*`, and `instructions:*` for library/profile management and generated guidance
+- `tokens:*`, `compression:*`, `log`, `hook:*`, `health`, `configure`, and `version` for operator workflows
+
+The optional interactive runtime commands such as `create-run`, `resume-run`, `plan`, `yolo`, `observe`, and `tui` live in the separate `@a5c-ai/babysitter-agent` package.
+
+## API Surface
+
+```ts
+import {
+  createRun,
+  defineTask,
+  createBabysitterMcpServer,
+} from "@a5c-ai/babysitter-sdk";
+```
+
+The root export surface currently re-exports these modules:
+
+- runtime, runtime types, storage, storage types, tasks, testing
+- CLI arg parsing helpers and command entrypoint helpers
+- hooks, harness, breakpoints, MCP, plugins, prompts, logging, cost, config, profiles
+- session helpers, process-library helpers, and compression utilities
+
+## Validation
+
+```bash
+npm run lint --workspace=@a5c-ai/babysitter-sdk
+npm run build --workspace=@a5c-ai/babysitter-sdk
+npm run test --workspace=@a5c-ai/babysitter-sdk
+npm run smoke:cli --workspace=@a5c-ai/babysitter-sdk
+npm run verify:metadata
+npm pack --json --dry-run --workspace=@a5c-ai/babysitter-sdk
+```
+
+## Release Expectations
+
+`@a5c-ai/babysitter-sdk` is a centrally released public package. Keep this README aligned with the actual CLI/API surface, keep `package.json#files` aligned with what ships, and verify the dry-run tarball before changing release-facing behavior.

package/dist/breakpoints/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/breakpoints/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAI1D,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,yFAAyF;IACzF,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,uEAAuE;IACvE,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,kBAAkB,CA8H7F"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/breakpoints/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAmC1D,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,yFAAyF;IACzF,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,uEAAuE;IACvE,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,kBAAkB,CA8H7F"}

package/dist/breakpoints/evaluator.js

@@ -14,17 +14,45 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.evaluateAutoApproval = evaluateAutoApproval;
 const patterns_1 = require("./patterns");
-const postures_1 = require("./postures");
+// ---------------------------------------------------------------------------
+// Inlined posture helpers (canonical implementation moved to babysitter-harness)
+// ---------------------------------------------------------------------------
+const DEFAULT_POSTURES = {
+    read: { name: 'permissive', allowAutoApprove: true, minConsecutiveApprovalsForAutoN: 0, requireExplicitRule: false, requiredApproverLevel: 'any' },
+    write: { name: 'cautious', allowAutoApprove: true, minConsecutiveApprovalsForAutoN: 3, requireExplicitRule: false, requiredApproverLevel: 'any' },
+    execute: { name: 'guarded', allowAutoApprove: true, minConsecutiveApprovalsForAutoN: 5, requireExplicitRule: true, requiredApproverLevel: 'any' },
+    destroy: { name: 'locked', allowAutoApprove: false, minConsecutiveApprovalsForAutoN: -1, requireExplicitRule: true, requiredApproverLevel: 'owner' },
+    network: { name: 'cautious', allowAutoApprove: true, minConsecutiveApprovalsForAutoN: 3, requireExplicitRule: false, requiredApproverLevel: 'any' },
+    auth: { name: 'locked', allowAutoApprove: false, minConsecutiveApprovalsForAutoN: -1, requireExplicitRule: true, requiredApproverLevel: 'owner' },
+};
+const PREFIX_TO_CATEGORY = {
+    'read': 'read', 'write': 'write', 'exec': 'execute', 'execute': 'execute',
+    'destroy': 'destroy', 'delete': 'destroy', 'net': 'network', 'network': 'network',
+    'auth': 'auth', 'cred': 'auth',
+};
+function getPostureForCategory(category, overrides) {
+    const base = DEFAULT_POSTURES[category];
+    if (!overrides)
+        return base;
+    return { ...base, ...overrides };
+}
+function resolvePostureFromBreakpointId(breakpointId) {
+    const dotIndex = breakpointId.indexOf('.');
+    if (dotIndex === -1)
+        return undefined;
+    const prefix = breakpointId.substring(0, dotIndex);
+    return PREFIX_TO_CATEGORY[prefix];
+}
 function evaluateAutoApproval(options) {
     const { breakpointId, tags, expert, rules, profileConfig, consecutiveApprovals = 0, skipPostureEnforcement = false, } = options;
     let { autoApproveAfterN = -1 } = options;
     const attributes = { tags, expert };
     // Resolve posture
-    const effectiveCategory = options.actionCategory ?? (0, postures_1.resolvePostureFromBreakpointId)(breakpointId);
+    const effectiveCategory = options.actionCategory ?? resolvePostureFromBreakpointId(breakpointId);
     let posture;
     if (!skipPostureEnforcement && effectiveCategory) {
         const profileOverrides = profileConfig?.postureOverrides?.[effectiveCategory];
-        posture = options.postureOverride ?? (0, postures_1.getPostureForCategory)(effectiveCategory, profileOverrides);
+        posture = options.postureOverride ?? getPostureForCategory(effectiveCategory, profileOverrides);
     }
     // Check if profile disables posture enforcement globally
     if (profileConfig?.disablePostureEnforcement) {

package/dist/breakpoints/index.d.ts

@@ -4,9 +4,6 @@ export { parsePattern, matchPattern } from "./patterns";
 export { readRules, writeRules, addRule, removeRule, listRules } from "./rules";
 export { evaluateAutoApproval } from "./evaluator";
 export type { EvaluateAutoApprovalOptions } from "./evaluator";
-export { DEFAULT_POSTURES, getPostureForCategory, resolvePostureFromBreakpointId, } from "./postures";
-export { evaluateDelegation, sendDelegationWebhook, addDelegationRule, removeDelegationRule, listDelegationRules, delegateBreakpoint, } from "./delegation";
-export type { DelegationRule, DelegationRulesFile, DelegationPayload, DelegationSendOptions, DelegationResponse, } from "./delegationTypes";
-export { DELEGATION_RULES_SCHEMA_VERSION, DEFAULT_DELEGATION_TIMEOUT_MS } from "./delegationTypes";
-export { evaluateApprovalChain, advanceChainStep, initChainState, resolveEscalationPath, type ApprovalChainStep, type ApprovalChainDefinition, type QuorumConfig, type ApprovalChainState, type CompletedChainStep, type ChainEvaluationResult, } from "./approvalChains";
+export { verifyBreakpointResult, hasSignatureFields } from "./proven-verification";
+export type { BreakpointVerificationConfig, BreakpointVerificationResult, } from "./proven-verification";
 //# sourceMappingURL=index.d.ts.map

package/dist/breakpoints/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/breakpoints/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/breakpoints/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACnF,YAAY,EACV,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC"}

package/dist/breakpoints/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveEscalationPath = exports.initChainState = exports.advanceChainStep = exports.evaluateApprovalChain = exports.DEFAULT_DELEGATION_TIMEOUT_MS = exports.DELEGATION_RULES_SCHEMA_VERSION = exports.delegateBreakpoint = exports.listDelegationRules = exports.removeDelegationRule = exports.addDelegationRule = exports.sendDelegationWebhook = exports.evaluateDelegation = exports.resolvePostureFromBreakpointId = exports.getPostureForCategory = exports.DEFAULT_POSTURES = exports.evaluateAutoApproval = exports.listRules = exports.removeRule = exports.addRule = exports.writeRules = exports.readRules = exports.matchPattern = exports.parsePattern = exports.BREAKPOINT_RULES_SCHEMA_VERSION = void 0;
+exports.hasSignatureFields = exports.verifyBreakpointResult = exports.evaluateAutoApproval = exports.listRules = exports.removeRule = exports.addRule = exports.writeRules = exports.readRules = exports.matchPattern = exports.parsePattern = exports.BREAKPOINT_RULES_SCHEMA_VERSION = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "BREAKPOINT_RULES_SCHEMA_VERSION", { enumerable: true, get: function () { return types_1.BREAKPOINT_RULES_SCHEMA_VERSION; } });
 var patterns_1 = require("./patterns");
@@ -14,22 +14,6 @@ Object.defineProperty(exports, "removeRule", { enumerable: true, get: function (
 Object.defineProperty(exports, "listRules", { enumerable: true, get: function () { return rules_1.listRules; } });
 var evaluator_1 = require("./evaluator");
 Object.defineProperty(exports, "evaluateAutoApproval", { enumerable: true, get: function () { return evaluator_1.evaluateAutoApproval; } });
-var postures_1 = require("./postures");
-Object.defineProperty(exports, "DEFAULT_POSTURES", { enumerable: true, get: function () { return postures_1.DEFAULT_POSTURES; } });
-Object.defineProperty(exports, "getPostureForCategory", { enumerable: true, get: function () { return postures_1.getPostureForCategory; } });
-Object.defineProperty(exports, "resolvePostureFromBreakpointId", { enumerable: true, get: function () { return postures_1.resolvePostureFromBreakpointId; } });
-var delegation_1 = require("./delegation");
-Object.defineProperty(exports, "evaluateDelegation", { enumerable: true, get: function () { return delegation_1.evaluateDelegation; } });
-Object.defineProperty(exports, "sendDelegationWebhook", { enumerable: true, get: function () { return delegation_1.sendDelegationWebhook; } });
-Object.defineProperty(exports, "addDelegationRule", { enumerable: true, get: function () { return delegation_1.addDelegationRule; } });
-Object.defineProperty(exports, "removeDelegationRule", { enumerable: true, get: function () { return delegation_1.removeDelegationRule; } });
-Object.defineProperty(exports, "listDelegationRules", { enumerable: true, get: function () { return delegation_1.listDelegationRules; } });
-Object.defineProperty(exports, "delegateBreakpoint", { enumerable: true, get: function () { return delegation_1.delegateBreakpoint; } });
-var delegationTypes_1 = require("./delegationTypes");
-Object.defineProperty(exports, "DELEGATION_RULES_SCHEMA_VERSION", { enumerable: true, get: function () { return delegationTypes_1.DELEGATION_RULES_SCHEMA_VERSION; } });
-Object.defineProperty(exports, "DEFAULT_DELEGATION_TIMEOUT_MS", { enumerable: true, get: function () { return delegationTypes_1.DEFAULT_DELEGATION_TIMEOUT_MS; } });
-var approvalChains_1 = require("./approvalChains");
-Object.defineProperty(exports, "evaluateApprovalChain", { enumerable: true, get: function () { return approvalChains_1.evaluateApprovalChain; } });
-Object.defineProperty(exports, "advanceChainStep", { enumerable: true, get: function () { return approvalChains_1.advanceChainStep; } });
-Object.defineProperty(exports, "initChainState", { enumerable: true, get: function () { return approvalChains_1.initChainState; } });
-Object.defineProperty(exports, "resolveEscalationPath", { enumerable: true, get: function () { return approvalChains_1.resolveEscalationPath; } });
+var proven_verification_1 = require("./proven-verification");
+Object.defineProperty(exports, "verifyBreakpointResult", { enumerable: true, get: function () { return proven_verification_1.verifyBreakpointResult; } });
+Object.defineProperty(exports, "hasSignatureFields", { enumerable: true, get: function () { return proven_verification_1.hasSignatureFields; } });

package/dist/breakpoints/proven-verification.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Optional integration with @a5c-ai/breakpoints-mux proven subsystem.
+ *
+ * Provides cryptographic verification of breakpoint answers when the
+ * breakpoints-mux package is available as an optional peer dependency.
+ * Never throws -- always returns a graceful result.
+ */
+/**
+ * Configuration for breakpoint answer verification.
+ */
+export interface BreakpointVerificationConfig {
+    /** Whether verification is enabled. When false, verification is skipped. */
+    enabled: boolean;
+    /** Directory containing trusted public keys. Passed to breakpoints-mux verifyAnswer. */
+    trustedKeysDir?: string;
+}
+/**
+ * Result of a breakpoint answer verification attempt.
+ */
+export interface BreakpointVerificationResult {
+    /** Whether the answer was successfully verified as authentic. */
+    verified: boolean;
+    /** Detailed verification result from breakpoints-mux (when available). */
+    verificationResult?: {
+        valid: boolean;
+        publicKeyFingerprint?: string;
+        responderName?: string;
+        reason?: string;
+        verifiedAt: string;
+    };
+    /** Reason verification was skipped or failed (when verified is false). */
+    reason?: string;
+}
+/**
+ * Check whether a breakpoint result carries signature fields,
+ * indicating it was cryptographically signed via the proven subsystem.
+ */
+export declare function hasSignatureFields(result: Record<string, unknown>): boolean;
+/**
+ * Verify a breakpoint result's cryptographic signature using the
+ * breakpoints-mux proven subsystem.
+ *
+ * This function never throws. If breakpoints-mux is not installed,
+ * verification is disabled, or the result is unsigned, it returns
+ * a graceful { verified: false } result with an explanatory reason.
+ *
+ * @param result - The breakpoint result (may or may not contain signature fields).
+ * @param config - Verification configuration. If omitted, defaults to { enabled: true }.
+ */
+export declare function verifyBreakpointResult(result: Record<string, unknown>, config?: BreakpointVerificationConfig): Promise<BreakpointVerificationResult>;
+//# sourceMappingURL=proven-verification.d.ts.map

package/dist/breakpoints/proven-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proven-verification.d.ts","sourceRoot":"","sources":["../../src/breakpoints/proven-verification.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;IACjB,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,iEAAiE;IACjE,QAAQ,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE;QACnB,KAAK,EAAE,OAAO,CAAC;QACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAaD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAI3E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC,4BAA4B,CAAC,CAuEvC"}

package/dist/breakpoints/proven-verification.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * Optional integration with @a5c-ai/breakpoints-mux proven subsystem.
+ *
+ * Provides cryptographic verification of breakpoint answers when the
+ * breakpoints-mux package is available as an optional peer dependency.
+ * Never throws -- always returns a graceful result.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasSignatureFields = hasSignatureFields;
+exports.verifyBreakpointResult = verifyBreakpointResult;
+/**
+ * Signature fields expected on a proven breakpoint result.
+ * If all four are present, the result is considered signed.
+ */
+const SIGNATURE_FIELDS = [
+    "signature",
+    "publicKeyFingerprint",
+    "signedAt",
+    "signedFields",
+];
+/**
+ * Check whether a breakpoint result carries signature fields,
+ * indicating it was cryptographically signed via the proven subsystem.
+ */
+function hasSignatureFields(result) {
+    return SIGNATURE_FIELDS.every((field) => result[field] !== undefined && result[field] !== null);
+}
+/**
+ * Verify a breakpoint result's cryptographic signature using the
+ * breakpoints-mux proven subsystem.
+ *
+ * This function never throws. If breakpoints-mux is not installed,
+ * verification is disabled, or the result is unsigned, it returns
+ * a graceful { verified: false } result with an explanatory reason.
+ *
+ * @param result - The breakpoint result (may or may not contain signature fields).
+ * @param config - Verification configuration. If omitted, defaults to { enabled: true }.
+ */
+async function verifyBreakpointResult(result, config) {
+    const effectiveConfig = config ?? { enabled: true };
+    // Short-circuit if verification is disabled
+    if (!effectiveConfig.enabled) {
+        return { verified: false, reason: "verification disabled" };
+    }
+    // Short-circuit if result does not carry signature fields
+    if (!hasSignatureFields(result)) {
+        return { verified: false, reason: "result is not signed" };
+    }
+    // Attempt to dynamically import breakpoints-mux proven subsystem.
+    // The module is an optional peer dependency -- the import may fail at runtime.
+    // We use a string variable to prevent TypeScript from statically resolving the import.
+    try {
+        const modulePath = "@a5c-ai/breakpoints-mux/proven";
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const proven = await Promise.resolve(`${modulePath}`).then(s => __importStar(require(s)));
+        const { verifyAnswer } = proven;
+        if (typeof verifyAnswer !== "function") {
+            return {
+                verified: false,
+                reason: "breakpoints-mux/proven does not export verifyAnswer",
+            };
+        }
+        const verificationResult = await verifyAnswer(result, effectiveConfig.trustedKeysDir);
+        return {
+            verified: verificationResult.valid === true,
+            verificationResult,
+        };
+    }
+    catch (err) {
+        // Dynamic import failed -- breakpoints-mux is not installed or broken
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("Cannot find module") ||
+            message.includes("MODULE_NOT_FOUND") ||
+            message.includes("ERR_MODULE_NOT_FOUND") ||
+            message.includes("Could not resolve")) {
+            return {
+                verified: false,
+                reason: "breakpoints-mux not installed",
+            };
+        }
+        return {
+            verified: false,
+            reason: `verification failed: ${message}`,
+        };
+    }
+}

package/dist/cli/commands/breakpointRules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"breakpointRules.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/breakpointRules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB1F"}
+{"version":3,"file":"breakpointRules.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/breakpointRules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB1F"}

package/dist/cli/commands/breakpointRules.js

@@ -45,6 +45,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleBreakpointCommand = handleBreakpointCommand;
 const crypto = __importStar(require("node:crypto"));
+const config_1 = require("../../config");
 const rules_1 = require("../../breakpoints/rules");
 const evaluator_1 = require("../../breakpoints/evaluator");
 async function handleBreakpointCommand(args) {
@@ -159,41 +160,43 @@ async function handleHistory(args) {
     // Scan journal directories for breakpoint EFFECT_RESOLVED events
     const { promises: fs } = await Promise.resolve().then(() => __importStar(require("node:fs")));
     const path = await Promise.resolve().then(() => __importStar(require("node:path")));
-    const runsDir = args.runsDir ?? ".a5c/runs";
+    const runsDir = args.runsDir ?? (0, config_1.resolveRunsDir)();
     const limit = args.limit ?? 50;
     const entries = [];
     try {
-        const runDirs = await fs.readdir(runsDir);
-        for (const runId of runDirs.slice(-limit * 2)) {
-            const journalDir = path.join(runsDir, runId, "journal");
-            let journalFiles;
-            try {
-                journalFiles = await fs.readdir(journalDir);
-            }
-            catch {
-                continue;
-            }
-            for (const jf of journalFiles) {
+        for (const candidateRunsDir of (0, config_1.getReadableRunsDirs)({ override: runsDir })) {
+            const runDirs = await fs.readdir(candidateRunsDir).catch(() => []);
+            for (const runId of runDirs.slice(-limit * 2)) {
+                const journalDir = path.join(candidateRunsDir, runId, "journal");
+                let journalFiles;
                 try {
-                    const raw = await fs.readFile(path.join(journalDir, jf), "utf-8");
-                    const event = JSON.parse(raw);
-                    const data = event.data;
-                    if (event.type === "EFFECT_RESOLVED" && data?.breakpointId) {
-                        const bpId = data.breakpointId;
-                        if (args.breakpointId && bpId !== args.breakpointId)
-                            continue;
-                        entries.push({
-                            runId,
-                            breakpointId: bpId,
-                            effectId: data.effectId,
-                            status: data.status,
-                            resolvedAt: event.recordedAt,
-                        });
-                    }
+                    journalFiles = await fs.readdir(journalDir);
                 }
                 catch {
                     continue;
                 }
+                for (const jf of journalFiles) {
+                    try {
+                        const raw = await fs.readFile(path.join(journalDir, jf), "utf-8");
+                        const event = JSON.parse(raw);
+                        const data = event.data;
+                        if (event.type === "EFFECT_RESOLVED" && data?.breakpointId) {
+                            const bpId = data.breakpointId;
+                            if (args.breakpointId && bpId !== args.breakpointId)
+                                continue;
+                            entries.push({
+                                runId,
+                                breakpointId: bpId,
+                                effectId: data.effectId,
+                                status: data.status,
+                                resolvedAt: event.recordedAt,
+                            });
+                        }
+                    }
+                    catch {
+                        continue;
+                    }
+                }
             }
         }
     }

package/dist/cli/commands/compressOutput.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compressOutput.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/compressOutput.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA0VD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAoCxE"}
+{"version":3,"file":"compressOutput.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/compressOutput.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkBH,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAsCD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAoCxE"}