@agentbelt/core 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright
+      owner or by an individual or Legal Entity authorized to submit on behalf
+      of the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

package/dist/audit.d.ts

@@ -0,0 +1,19 @@
+export type Isolation = 'policy-only' | 'os-sandbox' | 'none';
+export interface AuditEntry {
+    ts: string;
+    kind: 'tool' | 'exec' | 'file' | 'denied' | 'model';
+    client?: string;
+    plugin: string;
+    tool?: string;
+    detail: string;
+    ok: boolean;
+    isolation?: Isolation;
+    ms?: number;
+}
+export declare class AuditLog {
+    private readonly client;
+    readonly file: string;
+    constructor(workspace: string, client?: () => string);
+    write(entry: Omit<AuditEntry, 'ts' | 'client'>): void;
+    tail(n?: number): AuditEntry[];
+}

package/dist/audit.js

@@ -0,0 +1,40 @@
+// Audit log: one JSON line per tool call, command and denial, in <workspace>/.agentbelt/audit.jsonl.
+// Arguments and output are redacted and truncated. `isolation` says honestly how an action ran:
+// "policy-only" means it passed the permission and command checks but ran without an OS sandbox.
+import { appendFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { redact } from './redact.js';
+export class AuditLog {
+    client;
+    file;
+    constructor(workspace, client = () => 'unknown') {
+        this.client = client;
+        this.file = join(workspace, '.agentbelt', 'audit.jsonl');
+    }
+    write(entry) {
+        const line = {
+            ts: new Date().toISOString(),
+            client: this.client(),
+            ...entry,
+            detail: redact(entry.detail).slice(0, 1000),
+        };
+        try {
+            mkdirSync(join(this.file, '..'), { recursive: true });
+            appendFileSync(this.file, `${JSON.stringify(line)}\n`);
+        }
+        catch {
+            // A read-only workspace must not break the tool call; the call itself still reports.
+        }
+    }
+    tail(n = 50) {
+        if (!existsSync(this.file))
+            return [];
+        return readFileSync(this.file, 'utf8')
+            .trim()
+            .split('\n')
+            .filter(Boolean)
+            .slice(-n)
+            .map((l) => JSON.parse(l));
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,gGAAgG;AAChG,iGAAiG;AACjG,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgBrC,MAAM,OAAO,QAAQ;IAIA;IAHV,IAAI,CAAS;IACtB,YACE,SAAiB,EACA,SAAS,GAAG,EAAE,CAAC,SAAS;QAAxB,WAAM,GAAN,MAAM,CAAkB;QAEzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,KAAwC;QAC5C,MAAM,IAAI,GAAe;YACvB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YACrB,GAAG,KAAK;YACR,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;SAC5C,CAAC;QACF,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,EAAE;QACT,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;aACnC,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,CAAC,CAAC,CAAC;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/broker.d.ts

@@ -0,0 +1,16 @@
+import type { AuditLog, Isolation } from './audit.js';
+import type { ModelClient } from './model.js';
+import type { Plugin, PluginContext, ToolResult } from './plugin.js';
+export declare class BrokerDenied extends Error {
+}
+export interface BrokerDeps {
+    workspace: string;
+    audit: AuditLog;
+    /** Runs another plugin's tool by its client-facing id. */
+    callTool: (id: string, args: Record<string, unknown>, via: string) => Promise<ToolResult>;
+    listTools: () => string[];
+    isolation?: Isolation;
+    /** The user's configured model, if any (optional coding agent). */
+    model?: ModelClient | null;
+}
+export declare function createContext(plugin: Plugin, deps: BrokerDeps): PluginContext;

package/dist/broker.js

@@ -0,0 +1,153 @@
+// The broker builds each plugin's context. Every action is checked when it happens:
+//   exec       → the program must be in the plugin's permissions AND pass the core command policy
+//   read/write → the permission must be granted AND the path must stay inside the workspace
+//                (no .git, no .agentbelt, no symlink escapes)
+//   callTool   → the permission must be granted; the called tool runs with its own plugin's rules
+// Denials throw a BrokerDenied error (shown to the model as a tool error) and are audited.
+import { mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, writeFileSync, } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { childEnv } from './env.js';
+import { checkCommand, checkPath, DEFAULT_COMMAND_TIMEOUT_MS, runCommand } from './policy.js';
+import { redact } from './redact.js';
+export class BrokerDenied extends Error {
+}
+const KEY = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,120}$/;
+export function createContext(plugin, deps) {
+    const { audit } = deps;
+    // Path checks compare real (symlink-resolved) paths, so the workspace must be one too.
+    const workspace = realpathSync(deps.workspace);
+    const isolation = deps.isolation ?? 'policy-only';
+    const perms = plugin.permissions;
+    const deny = (detail) => {
+        audit.write({ kind: 'denied', plugin: plugin.name, detail, ok: false });
+        throw new BrokerDenied(`denied: ${detail}`);
+    };
+    const filePath = (path, write) => {
+        if (write ? !perms.write : !perms.read)
+            deny(`${plugin.name} has no ${write ? 'write' : 'read'} permission (${path})`);
+        const reason = checkPath(workspace, workspace, path);
+        if (reason)
+            deny(reason);
+        return resolve(workspace, path);
+    };
+    const stateDir = join(workspace, '.agentbelt', 'state', plugin.name);
+    const stateFile = (key) => {
+        if (!KEY.test(key))
+            throw new Error(`invalid state key "${key}"`);
+        return join(stateDir, `${key}.json`);
+    };
+    return {
+        workspace,
+        async exec(program, args, options = {}) {
+            if (!(perms.exec ?? []).includes(program))
+                deny(`${plugin.name} may not run ${program} (allowed: ${(perms.exec ?? []).join(', ') || 'none'})`);
+            const cwd = resolve(workspace, options.cwd ?? '.');
+            const reason = checkCommand(workspace, cwd, program, args);
+            if (reason)
+                deny(`${program} ${args.join(' ')}: ${reason}`);
+            const result = await runCommand(program, args, cwd, options.timeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS, childEnv());
+            audit.write({
+                kind: 'exec',
+                plugin: plugin.name,
+                detail: `${program} ${args.join(' ')} → exit ${result.exitCode}`,
+                ok: result.exitCode === 0,
+                isolation,
+                ms: result.durationMs,
+            });
+            return { ...result, stdout: redact(result.stdout), stderr: redact(result.stderr) };
+        },
+        async readFile(path) {
+            const full = filePath(path, false);
+            return readFileSync(full, 'utf8');
+        },
+        async listFiles(dir) {
+            const full = filePath(dir, false);
+            try {
+                return readdirSync(full).sort();
+            }
+            catch {
+                return [];
+            }
+        },
+        async writeFile(path, text) {
+            const full = filePath(path, true);
+            mkdirSync(dirname(full), { recursive: true });
+            const tmp = `${full}.${process.pid}.tmp`;
+            writeFileSync(tmp, text);
+            renameSync(tmp, full);
+            audit.write({
+                kind: 'file',
+                plugin: plugin.name,
+                detail: `wrote ${path}`,
+                ok: true,
+                isolation,
+            });
+        },
+        state: {
+            get(key) {
+                try {
+                    return JSON.parse(readFileSync(stateFile(key), 'utf8'));
+                }
+                catch {
+                    return undefined;
+                }
+            },
+            set(key, value) {
+                const file = stateFile(key);
+                mkdirSync(stateDir, { recursive: true });
+                writeFileSync(`${file}.tmp`, JSON.stringify(value, null, 2));
+                renameSync(`${file}.tmp`, file);
+            },
+            list() {
+                try {
+                    return readdirSync(stateDir)
+                        .filter((f) => f.endsWith('.json'))
+                        .map((f) => f.slice(0, -5))
+                        .sort();
+                }
+                catch {
+                    return [];
+                }
+            },
+        },
+        async callTool(id, args) {
+            if (!perms.callTools)
+                deny(`${plugin.name} may not call other tools (${id})`);
+            return deps.callTool(id, args, plugin.name);
+        },
+        listTools: deps.listTools,
+        model: deps.model
+            ? {
+                name: deps.model.model,
+                endpoint: deps.model.endpoint,
+                async chat(request) {
+                    if (!perms.model)
+                        deny(`${plugin.name} has no model permission`);
+                    const started = Date.now();
+                    try {
+                        const r = await deps.model.chat(request);
+                        audit.write({
+                            kind: 'model',
+                            plugin: plugin.name,
+                            detail: `${deps.model.model} @ ${deps.model.endpoint}: ${r.toolCalls.length} tool call(s), finish ${r.finishReason}, tokens ${r.usage.inputTokens ?? '?'}/${r.usage.outputTokens ?? '?'}`,
+                            ok: true,
+                            ms: Date.now() - started,
+                        });
+                        return r;
+                    }
+                    catch (error) {
+                        audit.write({
+                            kind: 'model',
+                            plugin: plugin.name,
+                            detail: `${deps.model.model} @ ${deps.model.endpoint}: ${redact(error.message)}`,
+                            ok: false,
+                            ms: Date.now() - started,
+                        });
+                        throw error;
+                    }
+                },
+            }
+            : null,
+    };
+}
+//# sourceMappingURL=broker.js.map

package/dist/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../src/broker.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kGAAkG;AAClG,4FAA4F;AAC5F,8DAA8D;AAC9D,kGAAkG;AAClG,2FAA2F;AAC3F,OAAO,EACL,SAAS,EACT,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,0BAA0B,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C,MAAM,GAAG,GAAG,oCAAoC,CAAC;AAajD,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAgB;IAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,uFAAuF;IACvF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAS,EAAE;QACrC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,YAAY,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAc,EAAU,EAAE;QACxD,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;YACpC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,WAAW,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,gBAAgB,IAAI,GAAG,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,OAAO;QACL,SAAS;QACT,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE;YACpC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvC,IAAI,CACF,GAAG,MAAM,CAAC,IAAI,gBAAgB,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAC9F,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM;gBAAE,IAAI,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,OAAO,EACP,IAAI,EACJ,GAAG,EACH,OAAO,CAAC,SAAS,IAAI,0BAA0B,EAC/C,QAAQ,EAAE,CACX,CAAC;YACF,KAAK,CAAC,KAAK,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,MAAM,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,QAAQ,EAAE;gBAChE,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;gBACzB,SAAS;gBACT,EAAE,EAAE,MAAM,CAAC,UAAU;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG;YACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtB,KAAK,CAAC,KAAK,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,MAAM,EAAE,SAAS,IAAI,EAAE;gBACvB,EAAE,EAAE,IAAI;gBACR,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QACD,KAAK,EAAE;YACL,GAAG,CAAI,GAAW;gBAChB,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAM,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,GAAG,CAAC,GAAW,EAAE,KAAc;gBAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC5B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,aAAa,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7D,UAAU,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,IAAI;gBACF,IAAI,CAAC;oBACH,OAAO,WAAW,CAAC,QAAQ,CAAC;yBACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;yBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;yBAC1B,IAAI,EAAE,CAAC;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;SACF;QACD,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI;YACrB,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACf,CAAC,CAAC;gBACE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBACtB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAC7B,KAAK,CAAC,IAAI,CAAC,OAAO;oBAChB,IAAI,CAAC,KAAK,CAAC,KAAK;wBAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,0BAA0B,CAAC,CAAC;oBACjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC1C,KAAK,CAAC,KAAK,CAAC;4BACV,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,MAAM,CAAC,IAAI;4BACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAM,CAAC,KAAK,MAAM,IAAI,CAAC,KAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,yBAAyB,CAAC,CAAC,YAAY,YAAY,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE;4BAC3L,EAAE,EAAE,IAAI;4BACR,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;yBACzB,CAAC,CAAC;wBACH,OAAO,CAAC,CAAC;oBACX,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,KAAK,CAAC,KAAK,CAAC;4BACV,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,MAAM,CAAC,IAAI;4BACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAM,CAAC,KAAK,MAAM,IAAI,CAAC,KAAM,CAAC,QAAQ,KAAK,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE;4BAC7F,EAAE,EAAE,KAAK;4BACT,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;yBACzB,CAAC,CAAC;wBACH,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,43 @@
+export declare const WARN_AT = 0.8;
+export interface ContextStatus {
+    client: string;
+    model: string | null;
+    limit: number | null;
+    used: number | null;
+    /** Where the numbers came from, e.g. "claude-code statusline (context_window)". */
+    source: string;
+    at: string;
+}
+export declare function contextView(c: ContextStatus | null): {
+    client: string;
+    model: string;
+    limit: string | number;
+    used: string | number;
+    remaining: string | number;
+    remainingPercent: string;
+    warning: boolean;
+    source: string;
+    at: string | null;
+};
+export declare function readContext(root: string): ContextStatus | null;
+/**
+ * Records reported usage. Returns the view; when it crosses the warning threshold, saves a
+ * checkpoint and refreshes HANDOFF.md so a new session or compaction loses nothing.
+ */
+export declare function recordContext(root: string, c: Omit<ContextStatus, 'at'>): {
+    client: string;
+    model: string;
+    limit: string | number;
+    used: string | number;
+    remaining: string | number;
+    remainingPercent: string;
+    warning: boolean;
+    source: string;
+    at: string | null;
+};
+/**
+ * Reads the JSON Claude Code passes to a status-line command. Uses only the context fields if the
+ * installed Claude Code version provides them; otherwise the usage stays UNKNOWN.
+ */
+export declare function fromClaudeStatusline(json: unknown): Omit<ContextStatus, 'at'>;
+export declare const contextFileExists: (root: string) => boolean;

package/dist/context.js

@@ -0,0 +1,88 @@
+// Context-window status, recorded only from data a client or provider actually reports.
+// Nothing here estimates: if a value isn't reported it is shown as UNKNOWN. Context window
+// (tokens in the current conversation) is a different thing from rate limits or account quotas,
+// and this file only tracks the context window.
+// At 80% used (20% left) a warning is raised and the project state is checkpointed with a handoff.
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { clean, ProjectState } from './project-state.js';
+export const WARN_AT = 0.8;
+export function contextView(c) {
+    const known = c && c.limit && c.used !== null && c.limit > 0;
+    const remaining = known ? c.limit - c.used : null;
+    const ratio = known ? c.used / c.limit : null;
+    return {
+        client: c?.client ?? 'UNKNOWN',
+        model: c?.model ?? 'UNKNOWN',
+        limit: c?.limit ?? 'UNKNOWN',
+        used: c?.used ?? 'UNKNOWN',
+        remaining: remaining ?? 'UNKNOWN',
+        remainingPercent: ratio === null ? 'UNKNOWN' : `${Math.round((1 - ratio) * 100)}%`,
+        warning: ratio !== null && ratio >= WARN_AT,
+        source: c?.source ?? 'no client has reported usage',
+        at: c?.at ?? null,
+    };
+}
+export function readContext(root) {
+    try {
+        return JSON.parse(readFileSync(join(root, '.agentbelt', 'CONTEXT_STATUS.json'), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Records reported usage. Returns the view; when it crosses the warning threshold, saves a
+ * checkpoint and refreshes HANDOFF.md so a new session or compaction loses nothing.
+ */
+export function recordContext(root, c) {
+    const entry = {
+        ...c,
+        client: clean(c.client),
+        model: c.model && clean(c.model),
+        at: new Date().toISOString(),
+    };
+    for (const [k, v] of Object.entries({ limit: entry.limit, used: entry.used }))
+        if (v !== null && (!Number.isFinite(v) || v < 0))
+            throw new Error(`invalid ${k}: ${v}`);
+    const dir = join(root, '.agentbelt');
+    mkdirSync(dir, { recursive: true });
+    const file = join(dir, 'CONTEXT_STATUS.json');
+    const before = readContext(root);
+    writeFileSync(`${file}.tmp`, `${JSON.stringify(entry, null, 2)}\n`);
+    renameSync(`${file}.tmp`, file);
+    const view = contextView(entry);
+    const wasWarning = before ? contextView(before).warning && before.client === entry.client : false;
+    if (view.warning && !wasWarning) {
+        const state = new ProjectState(root);
+        if (state.exists())
+            state.checkpoint(`context ${view.remainingPercent} left in ${entry.client} — saved state and handoff; compact or start a new session, then run \`agentbelt resume\``, undefined, entry.client);
+    }
+    return view;
+}
+/**
+ * Reads the JSON Claude Code passes to a status-line command. Uses only the context fields if the
+ * installed Claude Code version provides them; otherwise the usage stays UNKNOWN.
+ */
+export function fromClaudeStatusline(json) {
+    const j = (json ?? {});
+    const cw = j.context_window ?? {};
+    const limit = num(cw.context_window_size);
+    let used = num(cw.total_input_tokens ?? cw.used_tokens);
+    if (used === null && limit !== null && num(cw.used_percentage) !== null)
+        used = Math.round((num(cw.used_percentage) / 100) * limit);
+    return {
+        client: 'claude-code',
+        model: j.model?.id ?? j.model?.display_name ?? null,
+        limit,
+        used,
+        source: limit !== null && used !== null
+            ? 'claude-code statusline (context_window)'
+            : 'claude-code statusline (no context data in this version)',
+    };
+}
+function num(v) {
+    return typeof v === 'number' && Number.isFinite(v) ? v : null;
+}
+export const contextFileExists = (root) => existsSync(join(root, '.agentbelt', 'CONTEXT_STATUS.json'));
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,2FAA2F;AAC3F,gGAAgG;AAChG,gDAAgD;AAChD,mGAAmG;AACnG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC;AAY3B,MAAM,UAAU,WAAW,CAAC,CAAuB;IACjD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,KAAM,GAAG,CAAE,CAAC,IAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,IAAK,GAAG,CAAE,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,SAAS;QAC9B,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,SAAS;QAC5B,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,SAAS;QAC5B,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,SAAS;QAC1B,SAAS,EAAE,SAAS,IAAI,SAAS;QACjC,gBAAgB,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG;QAClF,OAAO,EAAE,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,OAAO;QAC3C,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,8BAA8B;QACnD,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,CAA4B;IACtE,MAAM,KAAK,GAAkB;QAC3B,GAAG,CAAC;QACJ,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAChC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,aAAa,CAAC,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,UAAU,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAClG,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,EAAE;YAChB,KAAK,CAAC,UAAU,CACd,WAAW,IAAI,CAAC,gBAAgB,YAAY,KAAK,CAAC,MAAM,2FAA2F,EACnJ,SAAS,EACT,KAAK,CAAC,MAAM,CACb,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;IAC9C,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC1C,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,kBAAkB,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,IAAI;QACrE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAE,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC9D,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI;QACnD,KAAK;QACL,IAAI;QACJ,MAAM,EACJ,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAC7B,CAAC,CAAC,yCAAyC;YAC3C,CAAC,CAAC,0DAA0D;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,EAAE,CAChD,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC"}

package/dist/env.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Builds a child environment from `source`: the allowlist plus `extra` names the caller opted
+ * into, then the fixed settings. NODE_OPTIONS and similar injection points are never passed.
+ */
+export declare function childEnv(source?: NodeJS.ProcessEnv, extra?: readonly string[]): NodeJS.ProcessEnv;

package/dist/env.js

@@ -0,0 +1,48 @@
+// The environment a child command sees. Only variables that tools need to work (paths, locale,
+// toolchain locations, git identity) pass through; tokens and keys in the user's shell do not.
+const PASSTHROUGH = [
+    'PATH',
+    'HOME',
+    'USER',
+    'LOGNAME',
+    'SHELL',
+    'TMPDIR',
+    'LANG',
+    'LC_ALL',
+    'LC_CTYPE',
+    'TERM',
+    'TZ',
+    'DEVELOPER_DIR',
+    'SDKROOT',
+    'XDG_CONFIG_HOME',
+    'XDG_CACHE_HOME',
+    'JAVA_HOME',
+    'GOPATH',
+    'CARGO_HOME',
+    'RUSTUP_HOME',
+    'GIT_AUTHOR_NAME',
+    'GIT_AUTHOR_EMAIL',
+    'GIT_COMMITTER_NAME',
+    'GIT_COMMITTER_EMAIL',
+];
+/** Fixed settings so nothing waits for input or opens an editor or pager. */
+const FIXED = {
+    CI: '1',
+    GIT_EDITOR: 'true',
+    GIT_PAGER: 'cat',
+    PAGER: 'cat',
+    GIT_TERMINAL_PROMPT: '0',
+    NO_COLOR: '1',
+};
+/**
+ * Builds a child environment from `source`: the allowlist plus `extra` names the caller opted
+ * into, then the fixed settings. NODE_OPTIONS and similar injection points are never passed.
+ */
+export function childEnv(source = process.env, extra = []) {
+    const env = {};
+    for (const name of [...PASSTHROUGH, ...extra])
+        if (source[name] !== undefined)
+            env[name] = source[name];
+    return { ...env, ...FIXED };
+}
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,+FAA+F;AAC/F,MAAM,WAAW,GAAG;IAClB,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,UAAU;IACV,MAAM;IACN,IAAI;IACJ,eAAe;IACf,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,KAAK,GAAG;IACZ,EAAE,EAAE,GAAG;IACP,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,KAAK,EAAE,KAAK;IACZ,mBAAmB,EAAE,GAAG;IACxB,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,SAA4B,OAAO,CAAC,GAAG,EACvC,QAA2B,EAAE;IAE7B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AAC9B,CAAC"}