@basou/core 0.16.0 → 0.17.0

package/dist/index.d.ts

@@ -3161,6 +3161,71 @@ type SanitizeRelatedFilesResult = {
  */
 declare function sanitizeRelatedFiles(paths: ReadonlyArray<string>, opts: SanitizePathOptions): SanitizeRelatedFilesResult;
 
+/**
+ * Cross-project boundary classification: split a session's `related_files`
+ * into those that resolve INSIDE the project's declared `source_roots` and
+ * those that confidently resolve OUTSIDE all of them.
+ *
+ * Why this exists: the claude-code adapter records every file a transcript
+ * edited, regardless of where the file lives. A session is attributed to a
+ * project by its recorded cwd (the import-time cwd guard), but a session that
+ * legitimately belongs to project A can still have edited files under an
+ * unrelated repo B. Those B paths then surface in `basou orient`'s "recent
+ * files" and can mislead a resuming agent into continuing the wrong project's
+ * work. This helper is the read-only primitive both the import warning and the
+ * orientation advisory use to flag that boundary crossing — it never mutates
+ * the trail.
+ *
+ * Resolution is realpath-aware so a file recorded through a workspace-view
+ * symlink (e.g. `~/projects/foo-workspace/foo -> ../foo`) is NOT mis-flagged as
+ * out-of-root. The bias is deliberately toward NOT crying wolf: a path is only
+ * reported out-of-root when it confidently resolves outside every source root.
+ * Anything that cannot be resolved with confidence stays classified in-root.
+ */
+/**
+ * The agent's / basou's own tooling directories. Edits here (plans, memory,
+ * the trail store itself) are routine infrastructure, not another project's
+ * work, so callers pass these as `extraInRoot` to keep them out of the
+ * cross-project out-of-root flag.
+ */
+declare const AGENT_INFRA_DIRS: readonly string[];
+/** Result of {@link classifyFilesBySourceRoot}: a partition of the input. */
+type SourceRootScope = {
+    /** Entries (verbatim, as passed in) that resolve under a source root, or that could not be resolved with confidence. */
+    inRoot: string[];
+    /** Entries (verbatim) that confidently resolve outside every source root. */
+    outOfRoot: string[];
+};
+/**
+ * Partition `files` into in-root / out-of-root against the project's
+ * `source_roots`.
+ *
+ * - `sourceRoots` are the manifest's `import.source_roots` (relative to
+ *   `masterRoot`). An absent/empty list means "the whole repo root" — matching
+ *   the effective-source-roots rule elsewhere — so a solo project never reports
+ *   anything out-of-root.
+ * - `masterRoot` is the absolute repository root the source roots resolve
+ *   against (the parent of `.basou`).
+ *
+ * Returns `{ inRoot, outOfRoot }` preserving the original entry strings. Empty
+ * input or zero resolvable roots yields everything in-root (no false alarms).
+ */
+declare function classifyFilesBySourceRoot(input: {
+    files: readonly string[];
+    workingDirectory: string;
+    sourceRoots: readonly string[] | null | undefined;
+    masterRoot: string;
+    /**
+     * Extra directories (absolute or `~`-prefixed) that also count as in-root.
+     * Callers pass the agent's own tooling dirs (`~/.claude`, `~/.codex`,
+     * `~/.basou`) so routine plan / memory / store edits are NOT flagged as
+     * another project's work — they are infrastructure, not a cross-project
+     * crossing. Resolved against the home directory, not `masterRoot`.
+     */
+    extraInRoot?: readonly string[];
+    homedir?: string;
+}): Promise<SourceRootScope>;
+
 /** Input contract for {@link renderOrientation} and {@link summarizeOrientation}. */
 type OrientationRendererInput = {
     paths: BasouPaths;
@@ -3288,10 +3353,19 @@ type OrientationSummary = {
      * step / handoff ("次の起点") surfaced in the forward section; null when none.
      */
     latestNote: NoteRecord | null;
-    /** related_files of the latest session, deduped + sorted + capped at the display limit. */
+    /**
+     * related_files of the latest session, deduped + sorted + capped at the
+     * display limit. `outOfRoot` lists the entries (over the FULL deduped set,
+     * not just `displayed`) that resolve OUTSIDE the project's `source_roots` — a
+     * cross-project boundary crossing worth flagging so a resuming agent does not
+     * mistake another repo's edits for this project's work. Empty unless the
+     * latest session is local (a federated host's source_roots are not loaded
+     * here) and confidently has out-of-root edits.
+     */
     relatedFiles: {
         displayed: string[];
         overflow: number;
+        outOfRoot: string[];
     };
     /** Tasks whose status is `planned` or `in_progress`. */
     inFlightTasks: InFlightTask[];
@@ -5380,4 +5454,4 @@ declare function overwriteYamlFile(filePath: string, value: unknown): Promise<vo
  */
 declare const BASOU_CORE_VERSION = "0.1.0";
 
-export { ACTIVE_GAP_CAP_MS, type ActiveTimeBasis, type AdapterOutputEvent, type AdoptCandidate, type AdoptCandidateKind, type AppendBasouGitignoreOptions, type AppendBasouGitignoreResult, type AppendEventToExistingInput, type AppendEventToExistingResult, type Approval, type ApprovalApprovedEvent, type ApprovalExpiredEvent, ApprovalIdSchema, type ApprovalLocation, type ApprovalRejectedEvent, type ApprovalRequestedEvent, ApprovalSchema, type ApprovalStatus, ApprovalStatusSchema, type ArchivePlan, type ArchiveTaskInput, type ArchiveTaskResult, type AttachTaskInput, type AttachUpdateTaskStatusInput, type AttachableStatus, BASOU_CORE_VERSION, type BasouPaths, type BulkChainResult, CLAUDE_IMPORT_SOURCE, CODEX_IMPORT_SOURCE, type CaptureMode, type ChainBreakReason, type ChainTailState, type ChainVerdict, type ChainVerdictStatus, type ChainedEvents, ChildProcessRunner, type CitedReview, type ClaudeTranscriptRecord, type ClaudeTranscriptToPayloadOptions, type CodexRolloutRecord, type CodexRolloutToPayloadOptions, type CommandExecutedEvent, type CommandLookup, type CreateAdHocSessionInput, type CreateAdHocSessionResult, type CreateAdHocTaskInput, type CreateManifestInput, type CreateTaskInput, type CreateTaskResult, type DayWorkStats, DecisionIdSchema, type DecisionRecordedEvent, type DecisionsRendererInput, type DecisionsRendererResult, type DeleteTaskInput, type DeleteTaskResult, type DiffResult, type EditTaskInput, type EditTaskResult, type Event, EventIdSchema, EventSchema, EventSourceSchema, type ExistingViewLink, FailedToFinalizeError, type FederatedRoot, type FileChange, type FileChangeStatus, type FileChangedEvent, GENERATED_END, GENERATED_START, type GitSnapshot, type GitSnapshotEvent, type GitignorePlanSummary, type HandoffRendererInput, type HandoffRendererResult, ID_PREFIXES, type IdPrefix, type ImportSessionOptions, type ImportSessionResult, type InstructionFileFact, type InstructionSymlinkFact, type InstructionSymlinkState, IsoTimestampSchema, JSON_SCHEMA_VERSION, type JsonSchemaArtifact, type LoadFederatedOptions, type LoadSessionEntriesOptions, type LoadTaskEntriesOptions, type LoadedApproval, type LockHandle, type LockScope, type Manifest, ManifestSchema, type MarkerSection, type Markers, type MeasureAvailability, type NoteAddedEvent, type OrientationRendererInput, type OrientationRendererResult, type OrientationSummary, PROTOCOL_END, PROTOCOL_START, type PrefixedId, type PresetAction, type PresetCollision, type PresetMarkerConflict, type PresetMarkerKind, type PresetPlanSummary, type PresetRepo, type ProcessRunner, type PublishKind, type PublishTarget, type RechainOptions, type RechainResult, type ReconcileAllResult, type ReconcileAllTasksInput, type ReconcileAllTasksOptions, type ReconcileFailure, type ReconcileResult, type ReconcileTaskInput, type RefreshLinkageInput, type RefreshLinkageResult, type ReimportOptions, type ReimportResult, type RenamePlan, type ReplayOptions, type ReplayWarning, type RepoEntry, type RepoGitignoreFacts, type RepoGitignorePlan, type RepoLanguage, type RepoPresetFacts, type RepoPresetPlan, type RepoSymlinkFacts, type RepoSymlinkPlan, type RepoVisibility, type RepoWiringFacts, type ReportApprovalItem, type ReportData, type ReportDecisionItem, type ReportRendererInput, type ReportRendererResult, type ReportSessionItem, type ReportTaskItem, type ReviewGapRepoSummary, type ReviewGapUnit, type ReviewGapVerdict, type ReviewGapsInput, type ReviewGapsSummary, type RiskLevel, RiskLevelSchema, type RosterAdoptionPlan, type RosterDriftSummary, type RunOptions, type RunResult, STUCK_THRESHOLD_MS, type SanitizePathOptions, type SanitizeRelatedFilesResult, SchemaVersionSchema, type Session, type SessionEndedEvent, type SessionEntry, SessionIdSchema, type SessionImportPayload, SessionImportPayloadSchema, type SessionInnerImportInput, SessionInnerImportSchema, type SessionIntegrity, SessionIntegritySchema, type SessionMetrics, SessionMetricsSchema, SessionSchema, type SessionSkipReason, type SessionSourceKind, SessionSourceKindSchema, type SessionStartedEvent, type SessionStatus, type SessionStatusChangedEvent, SessionStatusSchema, type SessionWorkStats, type SourceRootsReconcile, type SourceWorkStats, type StatusCount, StatusSchema, type StatusSnapshot, type SuspectReason, type SymlinkCollision, type SymlinkConflict, type SymlinkPlanSummary, type Task, type TaskArchivedEvent, type TaskCreatedEvent, type TaskDeletedEvent, type TaskDocument, TaskIdSchema, type TaskLinkageRefreshedEvent, type TaskReconciledEvent, TaskSchema, type TaskSkipReason, type TaskStatus, type TaskStatusChangedEvent, type TaskStatusCount, TaskStatusSchema, TaskWriteAfterEventError, type TaskWriteAfterEventPhase, type TokenTotals, type UpdateAdHocTaskStatusInput, type UpdateTaskStatusInput, type UpdateTaskStatusResult, type ViewCollision, type ViewConflict, type ViewLinkState, type ViewRepoFact, type ViewStrayUnknown, type WiringRisk, type WiringSummary, type WorkStatsInput, type WorkStatsResult, type WorkStatsTotals, WorkspaceIdSchema, type WorkspaceViewPlan, type WriteEventsBulkOptions, type WriteTaskFileMode, acquireLock, appendBasouGitignore, appendChainedEvent, appendChainedEventLocked, appendEvent, appendEventToExistingSession, archiveTask, assertBasouRootSafe, basouPaths, buildJsonSchemas, buildStatusSnapshot, chainEvents, chainRawJsonLines, classifySuspect, claudeCodeAdapterMetadata, claudeTranscriptToImportPayload, codexRolloutToImportPayload, computeWorkStats, createAdHocSessionWithEvent, createManifest, createTaskWithEvent, deleteTask, editTask, ensureBasouDirectory, enumerateApprovals, enumerateArchivedTaskIds, enumerateSessionDirs, enumerateTaskIds, finalizeSessionYaml, findErrorCode, findReviewGaps, formatDurationMs, genesisHash, getDiff, getSnapshot, importSessionFromJson, inspectChainTail, isGitNotFound, isImportDerivedSource, isLazyExpired, isRenderable, isValidPrefixedId, lineHash, linkYamlFile, loadApproval, loadFederatedSessionEntries, loadSessionEntries, loadTaskEntries, normalizeRepoKey, normalizeRepoPath, overwriteYamlFile, parseDuration, parseMarkers, pathBasename, planArchive, planGitignore, planRename, planRosterAdoption, planWorkspaceView, prefixedUlid, readAllEvents, readManifest, readMarkdownFile, readSessionYaml, readStatus, readTaskFile, readTaskFileWithArchiveFallback, readYamlFile, rechainSessionInPlace, reconcileAllTasks, reconcileSourceRoots, reconcileTask, refreshTaskLinkedSessions, reimportPreservingId, removeMarkerSection, renderDecisions, renderHandoff, renderOrientation, renderPresetBlock, renderReport, renderWithMarkers, replayEvents, resolveBasouRepositoryRoot, resolveClaudeCodeCommand, resolveRepositoryRoot, resolveSessionId, resolveTaskId, safeSimpleGit, sanitizePath, sanitizeRelatedFiles, sanitizeWorkingDirectory, serializeEventLine, serializeJsonSchema, sessionWorkStatsFromEvents, summarizeAdapterOutput, summarizeOrientation, summarizePresetPlan, summarizeRosterDrift, summarizeSymlinkPlan, summarizeWiring, tryRemoteUrl, ulid, unknownManifestKeys, updateTaskStatusWithEvent, verifyEventsChain, writeEventsBulk, writeManifest, writeMarkdownFile, writeStatus, writeTaskFile, writeYamlFile };
+export { ACTIVE_GAP_CAP_MS, AGENT_INFRA_DIRS, type ActiveTimeBasis, type AdapterOutputEvent, type AdoptCandidate, type AdoptCandidateKind, type AppendBasouGitignoreOptions, type AppendBasouGitignoreResult, type AppendEventToExistingInput, type AppendEventToExistingResult, type Approval, type ApprovalApprovedEvent, type ApprovalExpiredEvent, ApprovalIdSchema, type ApprovalLocation, type ApprovalRejectedEvent, type ApprovalRequestedEvent, ApprovalSchema, type ApprovalStatus, ApprovalStatusSchema, type ArchivePlan, type ArchiveTaskInput, type ArchiveTaskResult, type AttachTaskInput, type AttachUpdateTaskStatusInput, type AttachableStatus, BASOU_CORE_VERSION, type BasouPaths, type BulkChainResult, CLAUDE_IMPORT_SOURCE, CODEX_IMPORT_SOURCE, type CaptureMode, type ChainBreakReason, type ChainTailState, type ChainVerdict, type ChainVerdictStatus, type ChainedEvents, ChildProcessRunner, type CitedReview, type ClaudeTranscriptRecord, type ClaudeTranscriptToPayloadOptions, type CodexRolloutRecord, type CodexRolloutToPayloadOptions, type CommandExecutedEvent, type CommandLookup, type CreateAdHocSessionInput, type CreateAdHocSessionResult, type CreateAdHocTaskInput, type CreateManifestInput, type CreateTaskInput, type CreateTaskResult, type DayWorkStats, DecisionIdSchema, type DecisionRecordedEvent, type DecisionsRendererInput, type DecisionsRendererResult, type DeleteTaskInput, type DeleteTaskResult, type DiffResult, type EditTaskInput, type EditTaskResult, type Event, EventIdSchema, EventSchema, EventSourceSchema, type ExistingViewLink, FailedToFinalizeError, type FederatedRoot, type FileChange, type FileChangeStatus, type FileChangedEvent, GENERATED_END, GENERATED_START, type GitSnapshot, type GitSnapshotEvent, type GitignorePlanSummary, type HandoffRendererInput, type HandoffRendererResult, ID_PREFIXES, type IdPrefix, type ImportSessionOptions, type ImportSessionResult, type InstructionFileFact, type InstructionSymlinkFact, type InstructionSymlinkState, IsoTimestampSchema, JSON_SCHEMA_VERSION, type JsonSchemaArtifact, type LoadFederatedOptions, type LoadSessionEntriesOptions, type LoadTaskEntriesOptions, type LoadedApproval, type LockHandle, type LockScope, type Manifest, ManifestSchema, type MarkerSection, type Markers, type MeasureAvailability, type NoteAddedEvent, type OrientationRendererInput, type OrientationRendererResult, type OrientationSummary, PROTOCOL_END, PROTOCOL_START, type PrefixedId, type PresetAction, type PresetCollision, type PresetMarkerConflict, type PresetMarkerKind, type PresetPlanSummary, type PresetRepo, type ProcessRunner, type PublishKind, type PublishTarget, type RechainOptions, type RechainResult, type ReconcileAllResult, type ReconcileAllTasksInput, type ReconcileAllTasksOptions, type ReconcileFailure, type ReconcileResult, type ReconcileTaskInput, type RefreshLinkageInput, type RefreshLinkageResult, type ReimportOptions, type ReimportResult, type RenamePlan, type ReplayOptions, type ReplayWarning, type RepoEntry, type RepoGitignoreFacts, type RepoGitignorePlan, type RepoLanguage, type RepoPresetFacts, type RepoPresetPlan, type RepoSymlinkFacts, type RepoSymlinkPlan, type RepoVisibility, type RepoWiringFacts, type ReportApprovalItem, type ReportData, type ReportDecisionItem, type ReportRendererInput, type ReportRendererResult, type ReportSessionItem, type ReportTaskItem, type ReviewGapRepoSummary, type ReviewGapUnit, type ReviewGapVerdict, type ReviewGapsInput, type ReviewGapsSummary, type RiskLevel, RiskLevelSchema, type RosterAdoptionPlan, type RosterDriftSummary, type RunOptions, type RunResult, STUCK_THRESHOLD_MS, type SanitizePathOptions, type SanitizeRelatedFilesResult, SchemaVersionSchema, type Session, type SessionEndedEvent, type SessionEntry, SessionIdSchema, type SessionImportPayload, SessionImportPayloadSchema, type SessionInnerImportInput, SessionInnerImportSchema, type SessionIntegrity, SessionIntegritySchema, type SessionMetrics, SessionMetricsSchema, SessionSchema, type SessionSkipReason, type SessionSourceKind, SessionSourceKindSchema, type SessionStartedEvent, type SessionStatus, type SessionStatusChangedEvent, SessionStatusSchema, type SessionWorkStats, type SourceRootScope, type SourceRootsReconcile, type SourceWorkStats, type StatusCount, StatusSchema, type StatusSnapshot, type SuspectReason, type SymlinkCollision, type SymlinkConflict, type SymlinkPlanSummary, type Task, type TaskArchivedEvent, type TaskCreatedEvent, type TaskDeletedEvent, type TaskDocument, TaskIdSchema, type TaskLinkageRefreshedEvent, type TaskReconciledEvent, TaskSchema, type TaskSkipReason, type TaskStatus, type TaskStatusChangedEvent, type TaskStatusCount, TaskStatusSchema, TaskWriteAfterEventError, type TaskWriteAfterEventPhase, type TokenTotals, type UpdateAdHocTaskStatusInput, type UpdateTaskStatusInput, type UpdateTaskStatusResult, type ViewCollision, type ViewConflict, type ViewLinkState, type ViewRepoFact, type ViewStrayUnknown, type WiringRisk, type WiringSummary, type WorkStatsInput, type WorkStatsResult, type WorkStatsTotals, WorkspaceIdSchema, type WorkspaceViewPlan, type WriteEventsBulkOptions, type WriteTaskFileMode, acquireLock, appendBasouGitignore, appendChainedEvent, appendChainedEventLocked, appendEvent, appendEventToExistingSession, archiveTask, assertBasouRootSafe, basouPaths, buildJsonSchemas, buildStatusSnapshot, chainEvents, chainRawJsonLines, classifyFilesBySourceRoot, classifySuspect, claudeCodeAdapterMetadata, claudeTranscriptToImportPayload, codexRolloutToImportPayload, computeWorkStats, createAdHocSessionWithEvent, createManifest, createTaskWithEvent, deleteTask, editTask, ensureBasouDirectory, enumerateApprovals, enumerateArchivedTaskIds, enumerateSessionDirs, enumerateTaskIds, finalizeSessionYaml, findErrorCode, findReviewGaps, formatDurationMs, genesisHash, getDiff, getSnapshot, importSessionFromJson, inspectChainTail, isGitNotFound, isImportDerivedSource, isLazyExpired, isRenderable, isValidPrefixedId, lineHash, linkYamlFile, loadApproval, loadFederatedSessionEntries, loadSessionEntries, loadTaskEntries, normalizeRepoKey, normalizeRepoPath, overwriteYamlFile, parseDuration, parseMarkers, pathBasename, planArchive, planGitignore, planRename, planRosterAdoption, planWorkspaceView, prefixedUlid, readAllEvents, readManifest, readMarkdownFile, readSessionYaml, readStatus, readTaskFile, readTaskFileWithArchiveFallback, readYamlFile, rechainSessionInPlace, reconcileAllTasks, reconcileSourceRoots, reconcileTask, refreshTaskLinkedSessions, reimportPreservingId, removeMarkerSection, renderDecisions, renderHandoff, renderOrientation, renderPresetBlock, renderReport, renderWithMarkers, replayEvents, resolveBasouRepositoryRoot, resolveClaudeCodeCommand, resolveRepositoryRoot, resolveSessionId, resolveTaskId, safeSimpleGit, sanitizePath, sanitizeRelatedFiles, sanitizeWorkingDirectory, serializeEventLine, serializeJsonSchema, sessionWorkStatsFromEvents, summarizeAdapterOutput, summarizeOrientation, summarizePresetPlan, summarizeRosterDrift, summarizeSymlinkPlan, summarizeWiring, tryRemoteUrl, ulid, unknownManifestKeys, updateTaskStatusWithEvent, verifyEventsChain, writeEventsBulk, writeManifest, writeMarkdownFile, writeStatus, writeTaskFile, writeYamlFile };

package/dist/index.js

@@ -11,10 +11,10 @@ async function resolveClaudeCodeCommand(lookup = isOnPath) {
   throw new Error("Claude Code CLI not found in PATH. Install claude-code (or claude) first.");
 }
 async function isOnPath(command) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const child = spawn("which", [command], { stdio: "ignore" });
-    child.on("error", () => resolve2(false));
-    child.on("exit", (code) => resolve2(code === 0));
+    child.on("error", () => resolve3(false));
+    child.on("exit", (code) => resolve3(code === 0));
   });
 }
 function summarizeAdapterOutput(_stream, _raw) {
@@ -4231,8 +4231,82 @@ async function resolveIdInternal(paths, input, kind, options = {}) {
   return matches[0];
 }
 
+// src/lib/source-root-scope.ts
+import { promises as fs } from "fs";
+import { homedir as osHomedir } from "os";
+import { basename as basename2, dirname as dirname3, isAbsolute, join as join14, normalize, relative, resolve as resolve2 } from "path";
+var AGENT_INFRA_DIRS = ["~/.claude", "~/.codex", "~/.basou"];
+async function realpathBestEffort(absPath) {
+  let current = normalize(absPath);
+  const tail = [];
+  for (let guard = 0; guard < 4096; guard += 1) {
+    try {
+      const real = await fs.realpath(current);
+      return tail.length > 0 ? join14(real, ...tail.reverse()) : real;
+    } catch (error) {
+      const code = error?.code;
+      if (code !== "ENOENT" && code !== "ENOTDIR") {
+        return normalize(absPath);
+      }
+      const parent = dirname3(current);
+      if (parent === current) return normalize(absPath);
+      tail.push(basename2(current));
+      current = parent;
+    }
+  }
+  return normalize(absPath);
+}
+function expandTilde(p, homedir4) {
+  if (p === "~") return homedir4;
+  if (p.startsWith("~/")) return join14(homedir4, p.slice(2));
+  return p;
+}
+function toAbsolute(p, workingDirAbs, homedir4) {
+  const expanded = expandTilde(p, homedir4);
+  if (isAbsolute(expanded)) return normalize(expanded);
+  return normalize(resolve2(workingDirAbs, expanded));
+}
+function isUnder(child, parent) {
+  if (child === parent) return true;
+  const rel = relative(parent, child);
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+}
+async function classifyFilesBySourceRoot(input) {
+  const inRoot = [];
+  const outOfRoot = [];
+  if (input.files.length === 0) return { inRoot, outOfRoot };
+  const homedir4 = input.homedir ?? osHomedir();
+  const workingDirAbs = toAbsolute(input.workingDirectory, homedir4, homedir4);
+  const declared = input.sourceRoots && input.sourceRoots.length > 0 ? [...input.sourceRoots] : ["."];
+  const rootsAbs = [];
+  for (const r of declared) {
+    const expanded = expandTilde(r, homedir4);
+    const abs = isAbsolute(expanded) ? normalize(expanded) : normalize(resolve2(input.masterRoot, expanded));
+    rootsAbs.push(await realpathBestEffort(abs));
+  }
+  for (const e of input.extraInRoot ?? []) {
+    const expanded = expandTilde(e, homedir4);
+    const abs = isAbsolute(expanded) ? normalize(expanded) : normalize(resolve2(homedir4, expanded));
+    rootsAbs.push(await realpathBestEffort(abs));
+  }
+  if (rootsAbs.length === 0) {
+    return { inRoot: [...input.files], outOfRoot };
+  }
+  for (const file of input.files) {
+    try {
+      const abs = toAbsolute(file, workingDirAbs, homedir4);
+      const real = await realpathBestEffort(abs);
+      const within = rootsAbs.some((root) => isUnder(real, root));
+      (within ? inRoot : outOfRoot).push(file);
+    } catch {
+      inRoot.push(file);
+    }
+  }
+  return { inRoot, outOfRoot };
+}
+
 // src/orientation/orientation-renderer.ts
-import { join as join14 } from "path";
+import { dirname as dirname4, join as join15 } from "path";
 
 // src/storage/manifest.ts
 import { lstat as lstat3 } from "fs/promises";
@@ -4401,7 +4475,7 @@ async function summarizeOrientation(input) {
     }
   };
   for (const entry of entries) {
-    const sessionDir = join14(entry.sourceRoot.sessions, entry.sessionId);
+    const sessionDir = join15(entry.sourceRoot.sessions, entry.sessionId);
     const counted = entry.session.session.status !== "archived";
     if (counted) noteActivity(entry.session.session.ended_at ?? entry.session.session.started_at);
     try {
@@ -4499,8 +4573,24 @@ async function summarizeOrientation(input) {
   }
   const latestFiles = latestEntry?.session.session.related_files ?? [];
   const uniqueFiles = new Set(latestFiles);
-  const displayed = [...uniqueFiles].sort().slice(0, limit);
+  const sortedFiles = [...uniqueFiles].sort();
+  const displayed = sortedFiles.slice(0, limit);
   const overflow = Math.max(0, uniqueFiles.size - limit);
+  let outOfRoot = [];
+  if (latestEntry !== void 0 && latestEntry.host === null && sortedFiles.length > 0 && sourceRoots !== null && sourceRoots.length > 0) {
+    try {
+      const scope = await classifyFilesBySourceRoot({
+        files: sortedFiles,
+        workingDirectory: latestEntry.session.session.working_directory,
+        sourceRoots,
+        masterRoot: dirname4(input.paths.root),
+        extraInRoot: AGENT_INFRA_DIRS
+      });
+      outOfRoot = scope.outOfRoot;
+    } catch {
+      outOfRoot = [];
+    }
+  }
   const hosts = [
     ...new Set(entries.map((e) => e.host).filter((h) => h !== null))
   ].sort();
@@ -4511,7 +4601,7 @@ async function summarizeOrientation(input) {
     latestDecision: latestDecision ?? null,
     decisionCount: decisions.length,
     latestNote,
-    relatedFiles: { displayed, overflow },
+    relatedFiles: { displayed, overflow, outOfRoot },
     inFlightTasks,
     plannedTasks,
     pendingApprovals,
@@ -4594,6 +4684,15 @@ function formatOrientationBody(summary, opts) {
     const shown = summary.relatedFiles.displayed.join(", ");
     const more = summary.relatedFiles.overflow > 0 ? ` (... +${summary.relatedFiles.overflow} more)` : "";
     lines.push(`- \u76F4\u8FD1\u306E\u5909\u66F4\u30D5\u30A1\u30A4\u30EB: ${shown}${more}`);
+    if (summary.relatedFiles.outOfRoot.length > 0) {
+      const OUT_OF_ROOT_DISPLAY = 10;
+      const out = summary.relatedFiles.outOfRoot;
+      const shownOut = out.slice(0, OUT_OF_ROOT_DISPLAY).join(", ");
+      const outMore = out.length > OUT_OF_ROOT_DISPLAY ? ` (... +${out.length - OUT_OF_ROOT_DISPLAY} more)` : "";
+      lines.push(
+        `  - \u26A0 source_roots \u5916 ${out.length} \u4EF6 (\u5225\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u306E\u53EF\u80FD\u6027): ${shownOut}${outMore}`
+      );
+    }
   } else {
     lines.push("- \u76F4\u8FD1\u306E\u5909\u66F4\u30D5\u30A1\u30A4\u30EB: (none recorded)");
   }
@@ -5375,10 +5474,10 @@ function planWorkspaceView(facts, existing = [], rosterNames = []) {
 }
 
 // src/report/report-renderer.ts
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 
 // src/stats/work-stats.ts
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 function resolveTimeZone(timeZone) {
   if (timeZone !== void 0 && timeZone.length > 0) return timeZone;
   return Intl.DateTimeFormat().resolvedOptions().timeZone;
@@ -5409,7 +5508,7 @@ async function computeWorkStats(input) {
     const events = [];
     let eventsUnreadable = false;
     try {
-      for await (const ev of replayEvents(join15(input.paths.sessions, entry.sessionId), {
+      for await (const ev of replayEvents(join16(input.paths.sessions, entry.sessionId), {
         onWarning: (w) => input.onWarning?.(w, entry.sessionId)
       })) {
         events.push(ev);
@@ -5696,7 +5795,7 @@ async function renderReport(input) {
   const statsBySession = new Map(stats.sessions.map((s) => [s.sessionId, s]));
   const decisions = [];
   for (const entry of entries) {
-    const sessionDir = join16(input.paths.sessions, entry.sessionId);
+    const sessionDir = join17(input.paths.sessions, entry.sessionId);
     try {
       for await (const ev of replayEvents(sessionDir, {
         onWarning: (w) => input.onWarning?.(w, entry.sessionId)
@@ -5977,7 +6076,7 @@ function formatInt(n) {
 // src/review/review-gaps.ts
 import { existsSync, realpathSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename as basename2, isAbsolute, join as join17 } from "path";
+import { basename as basename3, isAbsolute as isAbsolute2, join as join18 } from "path";
 function stripQuotes(s) {
   if (s.length >= 2 && (s[0] === '"' && s.at(-1) === '"' || s[0] === "'" && s.at(-1) === "'")) {
     return s.slice(1, -1);
@@ -6001,7 +6100,7 @@ var repoRootCache = /* @__PURE__ */ new Map();
 function isRepoRoot(realPath) {
   const cached = repoRootCache.get(realPath);
   if (cached !== void 0) return cached;
-  const result = existsSync(join17(realPath, ".git"));
+  const result = existsSync(join18(realPath, ".git"));
   repoRootCache.set(realPath, result);
   return result;
 }
@@ -6010,7 +6109,7 @@ function normalizeRepoPath(p) {
   let s = stripQuotes(p.trim()).replace(/\/+$/, "");
   if (s.length === 0 || s === "~") return null;
   if (s.startsWith("~/")) s = homedir2() + s.slice(1);
-  if (isAbsolute(s)) {
+  if (isAbsolute2(s)) {
     const real = resolveRealpath(s);
     if (real !== null) {
       return isRepoRoot(real) ? real : null;
@@ -6024,7 +6123,7 @@ function normalizeRepoPath(p) {
 }
 function normalizeRepoKey(p) {
   const full = normalizeRepoPath(p);
-  return full === null ? null : basename2(full);
+  return full === null ? null : basename3(full);
 }
 function inspectCommand(args) {
   const a = args.join(" ");
@@ -6038,7 +6137,7 @@ function inspectCommand(args) {
     let m;
     while ((m = re.exec(a)) !== null) {
       const f = m[1];
-      if (f !== void 0) files.add(basename2(f));
+      if (f !== void 0) files.add(basename3(f));
     }
   }
   return { files: [...files], examinedDiff };
@@ -6055,7 +6154,7 @@ function commitFiles(args) {
   const a = args.join(" ");
   const add = a.match(/git add\s+([^&|;]+)/);
   if (!add?.[1]) return [];
-  return add[1].split(/\s+/).filter((t) => /\.[A-Za-z]/.test(t) && !t.startsWith("-")).map((t) => basename2(t));
+  return add[1].split(/\s+/).filter((t) => /\.[A-Za-z]/.test(t) && !t.startsWith("-")).map((t) => basename3(t));
 }
 var REVIEW_SOURCE = "codex-import";
 var DEFAULT_WINDOW_HOURS = 24;
@@ -6071,7 +6170,7 @@ async function findReviewGaps(input) {
   const workUnits = /* @__PURE__ */ new Map();
   const unknownCommits = /* @__PURE__ */ new Map();
   for (const entry of entries) {
-    const sessionDir = join17(input.paths.sessions, entry.sessionId);
+    const sessionDir = join18(input.paths.sessions, entry.sessionId);
     const isReview = entry.session.session.source.kind === REVIEW_SOURCE;
     const reviewRepos = /* @__PURE__ */ new Map();
     let reviewEnd = null;
@@ -6120,7 +6219,7 @@ async function findReviewGaps(input) {
   let newestCommit = null;
   for (const [sessionId, byRepo] of workUnits) {
     for (const [repoPath, commits] of byRepo) {
-      const label = basename2(repoPath);
+      const label = basename3(repoPath);
       if (scope !== null && !scope.includes(label)) continue;
       const times = commits.map((c) => c.at).sort((a, b) => a - b);
       const first = times[0] ?? null;
@@ -6279,7 +6378,7 @@ var ChildProcessRunner = class {
       if (killTimer !== null) clearTimeout(killTimer);
       options.signal?.removeEventListener("abort", onAbort);
     };
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       child.once("error", (error) => {
         if (settled) return;
         settled = true;
@@ -6291,7 +6390,7 @@ var ChildProcessRunner = class {
         settled = true;
         cleanup();
         const ended_at = /* @__PURE__ */ new Date();
-        resolve2({
+        resolve3({
           command: snapshotCommand,
           args: snapshotArgs,
           cwd: snapshotCwd,
@@ -6446,28 +6545,28 @@ function serializeJsonSchema(schema) {
 
 // src/storage/basou-dir.ts
 import { lstat as lstat4, mkdir as mkdir4 } from "fs/promises";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 function basouPaths(repositoryRoot) {
-  const root = join18(repositoryRoot, ".basou");
-  const approvalsBase = join18(root, "approvals");
+  const root = join19(repositoryRoot, ".basou");
+  const approvalsBase = join19(root, "approvals");
   return {
     root,
-    sessions: join18(root, "sessions"),
-    tasks: join18(root, "tasks"),
+    sessions: join19(root, "sessions"),
+    tasks: join19(root, "tasks"),
     approvals: {
-      pending: join18(approvalsBase, "pending"),
-      resolved: join18(approvalsBase, "resolved")
+      pending: join19(approvalsBase, "pending"),
+      resolved: join19(approvalsBase, "resolved")
     },
-    locks: join18(root, "locks"),
-    logs: join18(root, "logs"),
-    raw: join18(root, "raw"),
-    tmp: join18(root, "tmp"),
+    locks: join19(root, "locks"),
+    logs: join19(root, "logs"),
+    raw: join19(root, "raw"),
+    tmp: join19(root, "tmp"),
     files: {
-      manifest: join18(root, "manifest.yaml"),
-      status: join18(root, "status.json"),
-      handoff: join18(root, "handoff.md"),
-      decisions: join18(root, "decisions.md"),
-      orientation: join18(root, "orientation.md")
+      manifest: join19(root, "manifest.yaml"),
+      status: join19(root, "status.json"),
+      handoff: join19(root, "handoff.md"),
+      decisions: join19(root, "decisions.md"),
+      orientation: join19(root, "orientation.md")
     }
   };
 }
@@ -6524,12 +6623,12 @@ function hasErrorCode4(error) {
 
 // src/storage/gitignore.ts
 import { readFile as readFile8, writeFile as writeFile2 } from "fs/promises";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 var MARKER = "# Basou - default ignore";
 var BASOU_GITIGNORE_BLOCK = "# Basou - default ignore\n.basou/logs/\n.basou/raw/\n.basou/tmp/\n.basou/locks/\n.basou/status.json\n.basou/orientation.md\n.basou/sessions/*/events.jsonl\n.basou/sessions/*/artifacts/\n.basou/approvals/pending/\n.basou/approvals/resolved/\n\n# Basou - default commit\n# .basou/manifest.yaml\n# .basou/handoff.md\n# .basou/decisions.md\n# .basou/tasks/\n# .basou/sessions/*/session.yaml\n# .basou/sessions/*/transcript.md\n# .basou/sessions/*/changed-files.json\n";
 var BASOU_GITIGNORE_BLOCK_LOCAL_ONLY = "# Basou - default ignore\n# Local-only: basou's trail is never committed (personal/local state,\n# regenerable by re-importing from the agents' own logs). Recommended for\n# monitored repos and any workspace kept out of version control.\n.basou/\n";
 async function appendBasouGitignore(repositoryRoot, options = {}) {
-  const gitignorePath = join19(repositoryRoot, ".gitignore");
+  const gitignorePath = join20(repositoryRoot, ".gitignore");
   let body;
   let existed;
   try {
@@ -6702,7 +6801,7 @@ function hasErrorCode6(error) {
 // src/storage/session-import.ts
 import { mkdir as mkdir5, readFile as readFile10, rm as rm2 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 async function importSessionFromJson(paths, manifest, payload, options) {
   if (options.taskIdOverride !== void 0 && !TaskIdSchema.safeParse(options.taskIdOverride).success) {
     throw new Error(`Invalid task_id: ${options.taskIdOverride}`);
@@ -6727,7 +6826,7 @@ async function importSessionFromJson(paths, manifest, payload, options) {
       pathSanitizeReport
     };
   }
-  const sessionDir = join20(paths.sessions, newSessionId);
+  const sessionDir = join21(paths.sessions, newSessionId);
   try {
     await mkdir5(sessionDir, { recursive: true });
   } catch (error) {
@@ -6741,7 +6840,7 @@ async function importSessionFromJson(paths, manifest, payload, options) {
     throw error;
   }
   try {
-    const sessionYamlPath = join20(sessionDir, "session.yaml");
+    const sessionYamlPath = join21(sessionDir, "session.yaml");
     await linkYamlFile(sessionYamlPath, withIntegrity(sessionRecord, chainResult));
   } catch (error) {
     await rm2(sessionDir, { recursive: true, force: true }).catch(() => void 0);
@@ -6909,7 +7008,7 @@ function reuseDerivedIds(priorDerived, freshDerived, sessionId) {
 async function reimportPreservingId(paths, manifest, priorSessionId, freshPayload, options = {}) {
   const sessionId = priorSessionId;
   const importSource = freshPayload.session.source.kind;
-  const sessionDir = join20(paths.sessions, priorSessionId);
+  const sessionDir = join21(paths.sessions, priorSessionId);
   const lock = options.dryRun === true ? null : await acquireLock(paths, "session", priorSessionId);
   try {
     const priorVerdict = await verifyEventsChain(paths, priorSessionId);
@@ -6951,7 +7050,7 @@ async function reimportPreservingId(paths, manifest, priorSessionId, freshPayloa
     };
     const updatedRecord = { schema_version: "0.1.0", session: preservedInner };
     if (options.dryRun !== true) {
-      const eventsPath = join20(sessionDir, "events.jsonl");
+      const eventsPath = join21(sessionDir, "events.jsonl");
       let priorEventsRaw = null;
       try {
         priorEventsRaw = await readFile10(eventsPath);
@@ -6963,7 +7062,7 @@ async function reimportPreservingId(paths, manifest, priorSessionId, freshPayloa
       const chainResult = await writeEventsBulk(sessionDir, mergedEvents, { chain: true });
       try {
         await overwriteYamlFile(
-          join20(sessionDir, "session.yaml"),
+          join21(sessionDir, "session.yaml"),
           withIntegrity(updatedRecord, chainResult)
         );
       } catch (error) {
@@ -6987,7 +7086,7 @@ async function reimportPreservingId(paths, manifest, priorSessionId, freshPayloa
   }
 }
 async function rechainSessionInPlace(paths, sessionId, options = {}) {
-  const sessionDir = join20(paths.sessions, sessionId);
+  const sessionDir = join21(paths.sessions, sessionId);
   let lock;
   try {
     lock = await acquireLock(paths, "session", sessionId);
@@ -7020,7 +7119,7 @@ async function rechainSessionInPlace(paths, sessionId, options = {}) {
     if (verdict.status !== "unchained") {
       return { status: "skipped", reason: "tampered" };
     }
-    const eventsPath = join20(sessionDir, "events.jsonl");
+    const eventsPath = join21(sessionDir, "events.jsonl");
     let priorRaw;
     try {
       priorRaw = await readFile10(eventsPath);
@@ -7068,7 +7167,7 @@ async function rechainSessionInPlace(paths, sessionId, options = {}) {
     }
     try {
       await overwriteYamlFile(
-        join20(sessionDir, "session.yaml"),
+        join21(sessionDir, "session.yaml"),
         withIntegrity(record, { headHash: chainResult.headHash, count: chainResult.count })
       );
     } catch (error) {
@@ -7085,6 +7184,7 @@ async function rechainSessionInPlace(paths, sessionId, options = {}) {
 var BASOU_CORE_VERSION = "0.1.0";
 export {
   ACTIVE_GAP_CAP_MS,
+  AGENT_INFRA_DIRS,
   ApprovalIdSchema,
   ApprovalSchema,
   ApprovalStatusSchema,
@@ -7135,6 +7235,7 @@ export {
   buildStatusSnapshot,
   chainEvents,
   chainRawJsonLines,
+  classifyFilesBySourceRoot,
   classifySuspect,
   claudeCodeAdapterMetadata,
   claudeTranscriptToImportPayload,