@bjoernrochel/sevro 1.0.0 → 1.1.0

package/dist/src/native-transcripts.js

@@ -0,0 +1,208 @@
+import { lstat, readdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { gzipSync } from "node:zlib";
+import { sha256 } from "./identity.js";
+import { HostExecutionFailure } from "./evaluation/types.js";
+import { isRecord } from "./value-guards.js";
+import { rethrowDiagnosticPersistenceError, } from "./host-diagnostics.js";
+export function candidateTranscriptRoots(root) {
+    return root ? [root] : [];
+}
+export function candidateTranscriptEnvironment(root) {
+    return root ? { SEVRO_CANDIDATE_TRANSCRIPTS: root } : {};
+}
+export async function retainEnabledNativeTranscripts(result, policy, root, host, role, rootSessionId) {
+    if (policy?.nativeTranscripts === true)
+        await retainNativeTranscripts(result, root, host, role, rootSessionId ?? observedRootSession(result));
+}
+function observedRootSession(result) {
+    const observation = result.observations?.find((item) => item.id === "sevro.host.native-goal");
+    const session = observation?.data.threadId;
+    return typeof session === "string" ? session : undefined;
+}
+export async function failedNativeTranscripts(cause, policy, root, host, role, diagnostics) {
+    rethrowDiagnosticPersistenceError(cause);
+    requireFailureCapture(cause, policy, diagnostics);
+    const result = cause instanceof HostExecutionFailure
+        ? cause.result
+        : {
+            finalMessage: null,
+            complete: false,
+            executionFailed: true,
+            actualCondition: "passive",
+        };
+    await diagnostics.retain(result, cause);
+    await retainEnabledNativeTranscripts(result, policy, root, host, role);
+    return result;
+}
+function requireFailureCapture(cause, policy, diagnostics) {
+    if (policy?.nativeTranscripts !== true && !diagnostics.enabled)
+        throw cause;
+}
+const MAX_FILES = 4096;
+const MAX_BYTES = 5 * 1024 * 1024;
+const MAX_ENCODED_FILES_BYTES = 7 * 1024 * 1024;
+/** Capture only a fresh role's transcript tree; never follow native source links. */
+export async function retainNativeTranscripts(result, root, host, role = "candidate", rootSessionId = null) {
+    const capture = {
+        files: [],
+        bytes: 0,
+        entries: 0,
+        encodedBytes: 0,
+        issues: [],
+    };
+    try {
+        await captureDirectory(root, "", capture);
+    }
+    catch {
+        capture.issues.push("source_unavailable");
+    }
+    observeCaptureRoot(capture, rootSessionId, host);
+    const completeness = captureCompleteness(capture, result);
+    const bundle = {
+        format: "sevro.native-transcripts.v2",
+        host,
+        role,
+        rootSessionId,
+        completeness,
+        issues: capture.issues,
+        files: capture.files,
+    };
+    const lists = nativeResultLists(result);
+    lists.artifacts.push({
+        id: "sevro.native-transcripts.bundle",
+        bytes: Buffer.from(JSON.stringify(bundle)),
+    });
+    lists.observations.push({
+        id: "sevro.host.native-transcripts",
+        completeness,
+        data: {
+            method: "native_files",
+            host,
+            role,
+            rootSessionId,
+            artifactId: "sevro.native-transcripts.bundle",
+            issues: capture.issues,
+            files: capture.files.map(({ path, sha256 }) => ({ path, sha256 })),
+        },
+    });
+}
+function nativeResultLists(result) {
+    result.artifacts ??= [];
+    result.observations ??= [];
+    return { artifacts: result.artifacts, observations: result.observations };
+}
+function observeCaptureRoot(capture, session, host) {
+    if (session === null) {
+        capture.issues.push("root_session_unknown");
+        return;
+    }
+    const suffix = host === "codex" ? `-${session}.jsonl` : `/${session}.jsonl`;
+    if (!capture.files.some((file) => file.path.endsWith(suffix)))
+        capture.issues.push("root_session_missing");
+}
+function captureCompleteness(capture, result) {
+    if (!capture.files.some((file) => file.path.endsWith(".jsonl")))
+        return "unavailable";
+    if (capture.issues.length || !result.complete || result.executionFailed)
+        return "partial";
+    return "complete";
+}
+async function captureDirectory(root, path, capture) {
+    const directory = join(root, path);
+    if (!(await lstat(directory)).isDirectory())
+        throw new Error("invalid source directory");
+    for (const name of (await readdir(directory)).sort()) {
+        capture.entries++;
+        if (capture.entries > MAX_FILES) {
+            capture.issues.push("entry_limit");
+            return;
+        }
+        await captureEntry(root, join(path, name), capture);
+    }
+}
+async function captureEntry(root, path, capture) {
+    try {
+        const info = await lstat(join(root, path));
+        if (info.isDirectory()) {
+            await captureDirectory(root, path, capture);
+            return;
+        }
+        if (!info.isFile()) {
+            capture.issues.push("unsafe_entry");
+            return;
+        }
+        await captureFile(root, path, info.size, capture);
+    }
+    catch {
+        capture.issues.push("entry_unavailable");
+    }
+}
+async function captureFile(root, path, size, capture) {
+    if (capture.bytes + size > MAX_BYTES) {
+        capture.issues.push("byte_limit");
+        return;
+    }
+    const bytes = await readFile(join(root, path));
+    if (bytes.length !== size) {
+        capture.issues.push("source_changed");
+        return;
+    }
+    const file = {
+        path,
+        sha256: sha256(bytes),
+        gzipBase64: gzipSync(bytes).toString("base64"),
+    };
+    const issue = nativeFileIssue(path, bytes);
+    if (issue && !capture.issues.includes(issue))
+        capture.issues.push(issue);
+    retainCaptureFile(file, bytes.length, capture);
+}
+function nativeFileIssue(path, bytes) {
+    if (path.endsWith(".json"))
+        return nativeSidecarIssue(bytes);
+    if (!path.endsWith(".jsonl"))
+        return null;
+    return nativeTranscriptIssue(bytes);
+}
+function nativeTranscriptIssue(bytes) {
+    try {
+        const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+        if (!text.trim())
+            return "empty_transcript";
+        const records = text.replace(/\r?\n$/, "").split("\n");
+        if (!records.every(validNativeRecord))
+            return "malformed_transcript";
+        return null;
+    }
+    catch {
+        return "malformed_transcript";
+    }
+}
+function nativeSidecarIssue(bytes) {
+    try {
+        JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+        return null;
+    }
+    catch {
+        return "malformed_sidecar";
+    }
+}
+function validNativeRecord(line) {
+    const record = JSON.parse(line);
+    return isRecord(record) && nativeRecordType(record.type);
+}
+function nativeRecordType(type) {
+    return typeof type === "string" && type.trim().length > 0;
+}
+function retainCaptureFile(file, size, capture) {
+    const encoded = Buffer.byteLength(JSON.stringify(file));
+    if (capture.encodedBytes + encoded > MAX_ENCODED_FILES_BYTES) {
+        capture.issues.push("bundle_limit");
+        return;
+    }
+    capture.bytes += size;
+    capture.encodedBytes += encoded;
+    capture.files.push(file);
+}
+//# sourceMappingURL=native-transcripts.js.map

package/dist/src/native-transcripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-transcripts.js","sourceRoot":"","sources":["native-transcripts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAC5D,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,QAAQ,EAAE,kBAAkB;AACrC,OAAO,EAAE,MAAM,EAAE,sBAAmB;AACpC,OAAO,EAAE,oBAAoB,EAAmB,8BAA2B;AAG3E,OAAO,EAAE,QAAQ,EAAE,0BAAuB;AAC1C,OAAO,EACL,iCAAiC,GAElC,8BAA2B;AAE5B,MAAM,UAAU,wBAAwB,CAAC,IAAwB;IAC/D,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAAwB;IAExB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAkB,EAClB,MAAiC,EACjC,IAAY,EACZ,IAAwB,EACxB,IAAkB,EAClB,aAAsB;IAEtB,IAAI,MAAM,EAAE,iBAAiB,KAAK,IAAI;QACpC,MAAM,uBAAuB,CAC3B,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,aAAa,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAC7C,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,wBAAwB,CAC/C,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC;IAC3C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAc,EACd,MAAiC,EACjC,IAAY,EACZ,IAAwB,EACxB,IAA6B,EAC7B,WAA4B;IAE5B,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACzC,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,MAAM,GACV,KAAK,YAAY,oBAAoB;QACnC,CAAC,CAAC,KAAK,CAAC,MAAM;QACd,CAAC,CAAC;YACE,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,SAAS;SAC3B,CAAC;IACR,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,MAAiC,EACjC,WAA4B;IAE5B,IAAI,MAAM,EAAE,iBAAiB,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO;QAAE,MAAM,KAAK,CAAC;AAC9E,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAUhD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAkB,EAClB,IAAY,EACZ,IAAwB,EACxB,OAAoB,WAAW,EAC/B,gBAA+B,IAAI;IAEnC,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,CAAC;QACf,MAAM,EAAE,EAAE;KACX,CAAC;IACF,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IACD,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,6BAA6B;QACrC,IAAI;QACJ,IAAI;QACJ,aAAa;QACb,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;IACF,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QACnB,EAAE,EAAE,iCAAiC;QACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;QACtB,EAAE,EAAE,+BAA+B;QACnC,YAAY;QACZ,IAAI,EAAE;YACJ,MAAM,EAAE,cAAc;YACtB,IAAI;YACJ,IAAI;YACJ,aAAa;YACb,UAAU,EAAE,iCAAiC;YAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;SACnE;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;IACxB,MAAM,CAAC,YAAY,KAAK,EAAE,CAAC;IAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAgB,EAChB,OAAsB,EACtB,IAAY;IAEZ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,QAAQ,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB,EAAE,MAAkB;IAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,OAAO,aAAsB,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe;QACrE,OAAO,SAAkB,CAAC;IAC5B,OAAO,UAAmB,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,IAAY,EACZ,OAAgB;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,IAAY,EACZ,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,IAAY,EACZ,IAAY,EACZ,OAAgB;IAEhB,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC/C,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,kBAAkB,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAAE,OAAO,sBAAsB,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAgB,EAChB,IAAY,EACZ,OAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,YAAY,GAAG,OAAO,GAAG,uBAAuB,EAAE,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACtB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import { lstat, readdir, readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { gzipSync } from \"node:zlib\";\nimport { sha256 } from \"./identity\";\nimport { HostExecutionFailure, type HostResult } from \"./evaluation/types\";\nimport type { RuntimeRole } from \"./runtime/state\";\nimport type { RuntimePolicy } from \"./runtime/config\";\nimport { isRecord } from \"./value-guards\";\nimport {\n  rethrowDiagnosticPersistenceError,\n  type HostDiagnostics,\n} from \"./host-diagnostics\";\n\nexport function candidateTranscriptRoots(root: string | undefined): string[] {\n  return root ? [root] : [];\n}\n\nexport function candidateTranscriptEnvironment(\n  root: string | undefined,\n): Record<string, string> {\n  return root ? { SEVRO_CANDIDATE_TRANSCRIPTS: root } : {};\n}\n\nexport async function retainEnabledNativeTranscripts(\n  result: HostResult,\n  policy: RuntimePolicy | undefined,\n  root: string,\n  host: \"codex\" | \"claude\",\n  role?: RuntimeRole,\n  rootSessionId?: string,\n): Promise<void> {\n  if (policy?.nativeTranscripts === true)\n    await retainNativeTranscripts(\n      result,\n      root,\n      host,\n      role,\n      rootSessionId ?? observedRootSession(result),\n    );\n}\n\nfunction observedRootSession(result: HostResult): string | undefined {\n  const observation = result.observations?.find(\n    (item) => item.id === \"sevro.host.native-goal\",\n  );\n  const session = observation?.data.threadId;\n  return typeof session === \"string\" ? session : undefined;\n}\n\nexport async function failedNativeTranscripts(\n  cause: unknown,\n  policy: RuntimePolicy | undefined,\n  root: string,\n  host: \"codex\" | \"claude\",\n  role: RuntimeRole | undefined,\n  diagnostics: HostDiagnostics,\n): Promise<HostResult> {\n  rethrowDiagnosticPersistenceError(cause);\n  requireFailureCapture(cause, policy, diagnostics);\n  const result: HostResult =\n    cause instanceof HostExecutionFailure\n      ? cause.result\n      : {\n          finalMessage: null,\n          complete: false,\n          executionFailed: true,\n          actualCondition: \"passive\",\n        };\n  await diagnostics.retain(result, cause);\n  await retainEnabledNativeTranscripts(result, policy, root, host, role);\n  return result;\n}\n\nfunction requireFailureCapture(\n  cause: unknown,\n  policy: RuntimePolicy | undefined,\n  diagnostics: HostDiagnostics,\n): void {\n  if (policy?.nativeTranscripts !== true && !diagnostics.enabled) throw cause;\n}\n\nconst MAX_FILES = 4096;\nconst MAX_BYTES = 5 * 1024 * 1024;\nconst MAX_ENCODED_FILES_BYTES = 7 * 1024 * 1024;\ntype NativeFile = { path: string; sha256: string; gzipBase64: string };\ntype Capture = {\n  files: NativeFile[];\n  bytes: number;\n  entries: number;\n  encodedBytes: number;\n  issues: string[];\n};\n\n/** Capture only a fresh role's transcript tree; never follow native source links. */\nexport async function retainNativeTranscripts(\n  result: HostResult,\n  root: string,\n  host: \"codex\" | \"claude\",\n  role: RuntimeRole = \"candidate\",\n  rootSessionId: string | null = null,\n): Promise<void> {\n  const capture: Capture = {\n    files: [],\n    bytes: 0,\n    entries: 0,\n    encodedBytes: 0,\n    issues: [],\n  };\n  try {\n    await captureDirectory(root, \"\", capture);\n  } catch {\n    capture.issues.push(\"source_unavailable\");\n  }\n  observeCaptureRoot(capture, rootSessionId, host);\n  const completeness = captureCompleteness(capture, result);\n  const bundle = {\n    format: \"sevro.native-transcripts.v2\",\n    host,\n    role,\n    rootSessionId,\n    completeness,\n    issues: capture.issues,\n    files: capture.files,\n  };\n  const lists = nativeResultLists(result);\n  lists.artifacts.push({\n    id: \"sevro.native-transcripts.bundle\",\n    bytes: Buffer.from(JSON.stringify(bundle)),\n  });\n  lists.observations.push({\n    id: \"sevro.host.native-transcripts\",\n    completeness,\n    data: {\n      method: \"native_files\",\n      host,\n      role,\n      rootSessionId,\n      artifactId: \"sevro.native-transcripts.bundle\",\n      issues: capture.issues,\n      files: capture.files.map(({ path, sha256 }) => ({ path, sha256 })),\n    },\n  });\n}\n\nfunction nativeResultLists(result: HostResult) {\n  result.artifacts ??= [];\n  result.observations ??= [];\n  return { artifacts: result.artifacts, observations: result.observations };\n}\n\nfunction observeCaptureRoot(\n  capture: Capture,\n  session: string | null,\n  host: string,\n): void {\n  if (session === null) {\n    capture.issues.push(\"root_session_unknown\");\n    return;\n  }\n  const suffix = host === \"codex\" ? `-${session}.jsonl` : `/${session}.jsonl`;\n  if (!capture.files.some((file) => file.path.endsWith(suffix)))\n    capture.issues.push(\"root_session_missing\");\n}\n\nfunction captureCompleteness(capture: Capture, result: HostResult) {\n  if (!capture.files.some((file) => file.path.endsWith(\".jsonl\")))\n    return \"unavailable\" as const;\n  if (capture.issues.length || !result.complete || result.executionFailed)\n    return \"partial\" as const;\n  return \"complete\" as const;\n}\n\nasync function captureDirectory(\n  root: string,\n  path: string,\n  capture: Capture,\n): Promise<void> {\n  const directory = join(root, path);\n  if (!(await lstat(directory)).isDirectory())\n    throw new Error(\"invalid source directory\");\n  for (const name of (await readdir(directory)).sort()) {\n    capture.entries++;\n    if (capture.entries > MAX_FILES) {\n      capture.issues.push(\"entry_limit\");\n      return;\n    }\n    await captureEntry(root, join(path, name), capture);\n  }\n}\n\nasync function captureEntry(\n  root: string,\n  path: string,\n  capture: Capture,\n): Promise<void> {\n  try {\n    const info = await lstat(join(root, path));\n    if (info.isDirectory()) {\n      await captureDirectory(root, path, capture);\n      return;\n    }\n    if (!info.isFile()) {\n      capture.issues.push(\"unsafe_entry\");\n      return;\n    }\n    await captureFile(root, path, info.size, capture);\n  } catch {\n    capture.issues.push(\"entry_unavailable\");\n  }\n}\n\nasync function captureFile(\n  root: string,\n  path: string,\n  size: number,\n  capture: Capture,\n): Promise<void> {\n  if (capture.bytes + size > MAX_BYTES) {\n    capture.issues.push(\"byte_limit\");\n    return;\n  }\n  const bytes = await readFile(join(root, path));\n  if (bytes.length !== size) {\n    capture.issues.push(\"source_changed\");\n    return;\n  }\n  const file = {\n    path,\n    sha256: sha256(bytes),\n    gzipBase64: gzipSync(bytes).toString(\"base64\"),\n  };\n  const issue = nativeFileIssue(path, bytes);\n  if (issue && !capture.issues.includes(issue)) capture.issues.push(issue);\n  retainCaptureFile(file, bytes.length, capture);\n}\n\nfunction nativeFileIssue(path: string, bytes: Buffer): string | null {\n  if (path.endsWith(\".json\")) return nativeSidecarIssue(bytes);\n  if (!path.endsWith(\".jsonl\")) return null;\n  return nativeTranscriptIssue(bytes);\n}\n\nfunction nativeTranscriptIssue(bytes: Buffer): string | null {\n  try {\n    const text = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n    if (!text.trim()) return \"empty_transcript\";\n    const records = text.replace(/\\r?\\n$/, \"\").split(\"\\n\");\n    if (!records.every(validNativeRecord)) return \"malformed_transcript\";\n    return null;\n  } catch {\n    return \"malformed_transcript\";\n  }\n}\n\nfunction nativeSidecarIssue(bytes: Buffer): string | null {\n  try {\n    JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes));\n    return null;\n  } catch {\n    return \"malformed_sidecar\";\n  }\n}\n\nfunction validNativeRecord(line: string): boolean {\n  const record: unknown = JSON.parse(line);\n  return isRecord(record) && nativeRecordType(record.type);\n}\n\nfunction nativeRecordType(type: unknown): boolean {\n  return typeof type === \"string\" && type.trim().length > 0;\n}\n\nfunction retainCaptureFile(\n  file: NativeFile,\n  size: number,\n  capture: Capture,\n): void {\n  const encoded = Buffer.byteLength(JSON.stringify(file));\n  if (capture.encodedBytes + encoded > MAX_ENCODED_FILES_BYTES) {\n    capture.issues.push(\"bundle_limit\");\n    return;\n  }\n  capture.bytes += size;\n  capture.encodedBytes += encoded;\n  capture.files.push(file);\n}\n"]}

package/dist/src/paths.js

@@ -0,0 +1,13 @@
+import { isAbsolute, relative, sep } from "node:path";
+/** Lexical containment includes the root itself; callers resolve symlinks first. */
+export function insideRoot(root, path) {
+    const child = relative(root, path);
+    return (child === "" ||
+        (child !== ".." && !child.startsWith(`..${sep}`) && !isAbsolute(child)));
+}
+/** Keep outermost roots in input order, retaining the first equivalent spelling. */
+export function minimalRoots(roots) {
+    return roots.filter((root, index) => !roots.some((other, otherIndex) => insideRoot(other, root) &&
+        (!insideRoot(root, other) || otherIndex < index)));
+}
+//# sourceMappingURL=paths.js.map

package/dist/src/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB;AAEtD,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,CACL,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,KAAe;IAC1C,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,CAAC,KAAK,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CACpB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC;QACvB,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,GAAG,KAAK,CAAC,CACnD,CACJ,CAAC;AACJ,CAAC","sourcesContent":["import { isAbsolute, relative, sep } from \"node:path\";\n\n/** Lexical containment includes the root itself; callers resolve symlinks first. */\nexport function insideRoot(root: string, path: string): boolean {\n  const child = relative(root, path);\n  return (\n    child === \"\" ||\n    (child !== \"..\" && !child.startsWith(`..${sep}`) && !isAbsolute(child))\n  );\n}\n\n/** Keep outermost roots in input order, retaining the first equivalent spelling. */\nexport function minimalRoots(roots: string[]): string[] {\n  return roots.filter(\n    (root, index) =>\n      !roots.some(\n        (other, otherIndex) =>\n          insideRoot(other, root) &&\n          (!insideRoot(root, other) || otherIndex < index),\n      ),\n  );\n}\n"]}

package/dist/src/process-lifecycle.js

@@ -0,0 +1,101 @@
+/** Keep the deadline active until the caller has finished failure cleanup. */
+export class ProcessDeadline {
+    options;
+    timer;
+    cancel;
+    constructor(options) {
+        this.options = options;
+    }
+    wait(completed) {
+        const timeout = this.timeout();
+        const aborted = this.aborted();
+        const completion = typeof completed === "function" ? completed() : completed;
+        return Promise.race([completion, timeout, aborted]);
+    }
+    timeout() {
+        return new Promise((_resolve, reject) => {
+            this.timer = setTimeout(() => {
+                reject(this.options.interruption("timeout"));
+            }, this.options.timeoutMs);
+        });
+    }
+    aborted() {
+        return new Promise((_resolve, reject) => {
+            const signal = this.options.signal;
+            if (!signal)
+                return;
+            this.cancel = () => {
+                reject(this.options.interruption("cancelled"));
+            };
+            if (signal.aborted)
+                this.cancel();
+            else
+                signal.addEventListener("abort", this.cancel, { once: true });
+        });
+    }
+    dispose() {
+        if (this.timer)
+            clearTimeout(this.timer);
+        if (this.cancel)
+            this.options.signal?.removeEventListener("abort", this.cancel);
+    }
+}
+function killGroup(pid) {
+    try {
+        process.kill(-pid, "SIGKILL");
+        return true;
+    }
+    catch {
+        // The owned process group may already be gone.
+        return false;
+    }
+}
+function useProcessGroup(options) {
+    return options.alwaysGroup === true || process.platform !== "win32";
+}
+function killOwnedProcess(proc, options) {
+    if (options.fallbackError === "propagate") {
+        proc.kill("SIGKILL");
+        return;
+    }
+    try {
+        proc.kill("SIGKILL");
+    }
+    catch {
+        // The owned process may already have exited.
+    }
+}
+/** Only use for children spawned in a new, runner-owned process group. */
+export function terminateOwnedProcessGroup(proc, options = {}) {
+    if (useProcessGroup(options) && killGroup(proc.pid))
+        return;
+    killOwnedProcess(proc, options);
+}
+function retainedChunk(bytes, size, options) {
+    if (options.overflow === "reject" && size + bytes.byteLength > options.limit)
+        throw options.exceeded();
+    return bytes.subarray(0, Math.max(0, options.limit - size));
+}
+/** Truncation retains a byte prefix while still draining the entire stream. */
+export async function captureBoundedBytes(stream, options) {
+    const chunks = [];
+    let size = 0;
+    let truncated = false;
+    for await (const bytes of stream.values({
+        preventCancel: !options.cancelOnError,
+    })) {
+        options.observe?.(bytes);
+        const retained = retainedChunk(bytes, size, options);
+        if (retained.byteLength)
+            chunks.push(retained);
+        size += retained.byteLength;
+        truncated ||= retained.byteLength !== bytes.byteLength;
+    }
+    return { bytes: Buffer.concat(chunks), truncated };
+}
+/** Reject oversize output before strictly decoding the complete UTF-8 stream. */
+export async function captureBoundedText(stream, options) {
+    const { bytes } = await captureBoundedBytes(stream, options);
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+}
+//# sourceMappingURL=process-lifecycle.js.map

package/dist/src/process-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-lifecycle.js","sourceRoot":"","sources":["process-lifecycle.ts"],"names":[],"mappings":"AAQA,8EAA8E;AAC9E,MAAM,OAAO,eAAe;IAIG;IAHrB,KAAK,CAA4C;IACjD,MAAM,CAA2B;IAEzC,YAA6B,OAAwB;QAAxB,YAAO,GAAP,OAAO,CAAiB;IAAG,CAAC;IAEzD,IAAI,CAAI,SAA0C;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,UAAU,GACd,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/C,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;gBACjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;YACjD,CAAC,CAAC;YACF,IAAI,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;;gBAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;CACF;AAYD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,OAAO,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAkB,EAClB,OAA2B;IAE3B,IAAI,OAAO,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,0BAA0B,CACxC,IAAkB,EAClB,UAA8B,EAAE;IAEhC,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5D,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAgBD,SAAS,aAAa,CACpB,KAAiB,EACjB,IAAY,EACZ,OAA2B;IAE3B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK;QAC1E,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC3B,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAkC,EAClC,OAA2B;IAE3B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;QACtC,aAAa,EAAE,CAAC,OAAO,CAAC,aAAa;KACtC,CAAC,EAAE,CAAC;QACH,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC5B,SAAS,KAAK,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAkC,EAClC,OAAyC;IAEzC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC","sourcesContent":["export type ProcessInterruptionReason = \"timeout\" | \"cancelled\";\n\ninterface DeadlineOptions {\n  timeoutMs: number;\n  signal?: AbortSignal;\n  interruption: (reason: ProcessInterruptionReason) => Error;\n}\n\n/** Keep the deadline active until the caller has finished failure cleanup. */\nexport class ProcessDeadline {\n  private timer: ReturnType<typeof setTimeout> | undefined;\n  private cancel: (() => void) | undefined;\n\n  constructor(private readonly options: DeadlineOptions) {}\n\n  wait<T>(completed: Promise<T> | (() => Promise<T>)): Promise<T> {\n    const timeout = this.timeout();\n    const aborted = this.aborted();\n    const completion =\n      typeof completed === \"function\" ? completed() : completed;\n    return Promise.race([completion, timeout, aborted]);\n  }\n\n  private timeout(): Promise<never> {\n    return new Promise((_resolve, reject) => {\n      this.timer = setTimeout(() => {\n        reject(this.options.interruption(\"timeout\"));\n      }, this.options.timeoutMs);\n    });\n  }\n\n  private aborted(): Promise<never> {\n    return new Promise((_resolve, reject) => {\n      const signal = this.options.signal;\n      if (!signal) return;\n      this.cancel = () => {\n        reject(this.options.interruption(\"cancelled\"));\n      };\n      if (signal.aborted) this.cancel();\n      else signal.addEventListener(\"abort\", this.cancel, { once: true });\n    });\n  }\n\n  dispose(): void {\n    if (this.timer) clearTimeout(this.timer);\n    if (this.cancel)\n      this.options.signal?.removeEventListener(\"abort\", this.cancel);\n  }\n}\n\ninterface OwnedProcess {\n  pid: number;\n  kill: (signal: \"SIGKILL\") => unknown;\n}\n\ninterface TerminationOptions {\n  alwaysGroup?: boolean;\n  fallbackError?: \"ignore\" | \"propagate\";\n}\n\nfunction killGroup(pid: number): boolean {\n  try {\n    process.kill(-pid, \"SIGKILL\");\n    return true;\n  } catch {\n    // The owned process group may already be gone.\n    return false;\n  }\n}\n\nfunction useProcessGroup(options: TerminationOptions): boolean {\n  return options.alwaysGroup === true || process.platform !== \"win32\";\n}\n\nfunction killOwnedProcess(\n  proc: OwnedProcess,\n  options: TerminationOptions,\n): void {\n  if (options.fallbackError === \"propagate\") {\n    proc.kill(\"SIGKILL\");\n    return;\n  }\n  try {\n    proc.kill(\"SIGKILL\");\n  } catch {\n    // The owned process may already have exited.\n  }\n}\n\n/** Only use for children spawned in a new, runner-owned process group. */\nexport function terminateOwnedProcessGroup(\n  proc: OwnedProcess,\n  options: TerminationOptions = {},\n): void {\n  if (useProcessGroup(options) && killGroup(proc.pid)) return;\n  killOwnedProcess(proc, options);\n}\n\ntype RejectedCapture = {\n  overflow: \"reject\";\n  exceeded: () => Error;\n};\n\ninterface CaptureOptions {\n  limit: number;\n  observe?: (bytes: Uint8Array) => void;\n  cancelOnError?: boolean;\n}\n\ntype ByteCaptureOptions = CaptureOptions &\n  (RejectedCapture | { overflow: \"truncate\" });\n\nfunction retainedChunk(\n  bytes: Uint8Array,\n  size: number,\n  options: ByteCaptureOptions,\n): Uint8Array {\n  if (options.overflow === \"reject\" && size + bytes.byteLength > options.limit)\n    throw options.exceeded();\n  return bytes.subarray(0, Math.max(0, options.limit - size));\n}\n\n/** Truncation retains a byte prefix while still draining the entire stream. */\nexport async function captureBoundedBytes(\n  stream: ReadableStream<Uint8Array>,\n  options: ByteCaptureOptions,\n): Promise<{ bytes: Uint8Array; truncated: boolean }> {\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let truncated = false;\n  for await (const bytes of stream.values({\n    preventCancel: !options.cancelOnError,\n  })) {\n    options.observe?.(bytes);\n    const retained = retainedChunk(bytes, size, options);\n    if (retained.byteLength) chunks.push(retained);\n    size += retained.byteLength;\n    truncated ||= retained.byteLength !== bytes.byteLength;\n  }\n  return { bytes: Buffer.concat(chunks), truncated };\n}\n\n/** Reject oversize output before strictly decoding the complete UTF-8 stream. */\nexport async function captureBoundedText(\n  stream: ReadableStream<Uint8Array>,\n  options: CaptureOptions & RejectedCapture,\n): Promise<string> {\n  const { bytes } = await captureBoundedBytes(stream, options);\n  return new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n}\n"]}

package/dist/src/provenance.js

@@ -0,0 +1,263 @@
+import { runnerRoot, sourceRuntime } from "./runner-paths.js";
+import { spawnSync } from "./runtime-process.js";
+import { lstat, readFile, readdir, readlink, realpath } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { insideRoot } from "./paths.js";
+import { pathToFileURL } from "node:url";
+import packageJson from "../../package.json" with { type: "json" };
+import { hashJson, sha256 } from "./identity.js";
+import { insideRuntimeRoot } from "./runtime/paths.js";
+const MAX_DIRTY_BYTES = 32 * 1024 * 1024;
+const MAX_BUILD_BYTES = 64 * 1024 * 1024;
+const MAX_BUILD_FILES = 4096;
+function fileOrder(left, right) {
+    return left.path < right.path ? -1 : left.path > right.path ? 1 : 0;
+}
+class BuildSnapshot {
+    root;
+    files = [];
+    bytes = 0;
+    constructor(root) {
+        this.root = root;
+    }
+    async collect(path) {
+        const absolute = join(this.root, path), info = await lstat(absolute);
+        if (info.isSymbolicLink())
+            throw new Error("package build contains a symbolic link");
+        if (info.isDirectory()) {
+            for (const entry of (await readdir(absolute)).sort())
+                await this.collect(join(path, entry));
+            return;
+        }
+        await this.collectFile(path, absolute, info);
+    }
+    async collectFile(path, absolute, info) {
+        if (!info.isFile())
+            throw new Error("package build contains a non-file");
+        const bytes = await readFile(absolute);
+        this.bytes += bytes.byteLength;
+        if (this.files.length >= MAX_BUILD_FILES || this.bytes > MAX_BUILD_BYTES)
+            throw new Error("package build exceeds the size limit");
+        this.files.push({ path: path.split(sep).join("/"), sha256: sha256(bytes) });
+    }
+}
+/** Digest the packaged runtime and public contract files in path order. */
+export async function packageBuildDigest(root = runnerRoot) {
+    const snapshot = new BuildSnapshot(await realpath(root));
+    for (const path of [
+        "package.json",
+        "README.md",
+        "docs",
+        "examples",
+        "schemas",
+        "src",
+        ...(!sourceRuntime ? ["dist"] : []),
+    ])
+        await snapshot.collect(path);
+    return hashJson({
+        format: "sevro.build.v1",
+        files: snapshot.files.sort(fileOrder),
+    });
+}
+class ProjectSnapshot {
+    root;
+    excluded;
+    files = [];
+    bytes = 0;
+    constructor(root, excluded) {
+        this.root = root;
+        this.excluded = excluded;
+    }
+    isExcluded(path) {
+        return path === ".git" || this.excluded.has(path);
+    }
+    async collect(path) {
+        if (this.isExcluded(path))
+            return;
+        const absolute = join(this.root, path), info = await lstat(absolute);
+        if (info.isSymbolicLink())
+            throw new Error("project snapshot contains a symbolic link");
+        if (info.isDirectory()) {
+            await this.collectDirectory(path, absolute);
+            return;
+        }
+        await this.collectFile(path, absolute, info);
+    }
+    async collectDirectory(path, absolute) {
+        for (const entry of (await readdir(absolute)).sort())
+            await this.collect(path === "" ? entry : join(path, entry));
+    }
+    async collectFile(path, absolute, info) {
+        if (!info.isFile())
+            throw new Error("project snapshot contains a non-file");
+        const bytes = await readFile(absolute);
+        this.bytes += bytes.byteLength;
+        if (this.files.length >= MAX_BUILD_FILES || this.bytes > MAX_BUILD_BYTES)
+            throw new Error("project snapshot exceeds the size limit");
+        this.files.push({
+            path: path.split(sep).join("/"),
+            sha256: sha256(bytes),
+            executable: Boolean(info.mode & 0o111),
+        });
+    }
+}
+export async function projectIdentityDigest(root, provenance, excludedRoots = []) {
+    if (provenance.revision)
+        return hashJson({
+            format: "sevro.project.v1",
+            revision: provenance.revision,
+            dirtyPatchDigest: provenance.dirtyPatchDigest,
+        });
+    const projectRoot = resolve(root), excluded = new Set(excludedRoots.map((path) => relative(projectRoot, resolve(path))));
+    const snapshot = new ProjectSnapshot(projectRoot, excluded);
+    await snapshot.collect("");
+    return hashJson({
+        format: "sevro.project.v1",
+        files: snapshot.files.sort(fileOrder),
+    });
+}
+function git(root, ...arguments_) {
+    const result = spawnSync(["git", "-C", root, ...arguments_], {
+        env: { PATH: process.env.PATH ?? "/usr/bin:/bin", LC_ALL: "C" },
+        stdout: "pipe",
+        stderr: "ignore",
+    });
+    if (result.exitCode !== 0)
+        throw new Error("Git identity is unavailable");
+    if (result.stdout.byteLength > MAX_DIRTY_BYTES)
+        throw new Error("Git identity exceeds the size limit");
+    return Buffer.from(result.stdout);
+}
+async function dirtyPatchDigest(gitRoot, excludedRoots) {
+    const trackedPatch = git(gitRoot, "diff", "--binary", "HEAD", "--");
+    const untrackedPaths = git(gitRoot, "ls-files", "--others", "--exclude-standard", "-z")
+        .toString("utf8")
+        .split("\0")
+        .filter(Boolean)
+        .filter((path) => !excludedRoots.some((root) => insideRuntimeRoot(root, resolve(gitRoot, path))))
+        .sort();
+    let dirtyBytes = trackedPatch.byteLength;
+    const untracked = [];
+    for (const path of untrackedPaths) {
+        const bytes = await untrackedIdentityBytes(gitRoot, path);
+        dirtyBytes += bytes.byteLength;
+        if (dirtyBytes > MAX_DIRTY_BYTES)
+            throw new Error("Git identity exceeds the size limit");
+        untracked.push({ path, sha256: sha256(bytes) });
+    }
+    return trackedPatch.byteLength || untracked.length
+        ? hashJson({ trackedPatch: sha256(trackedPatch), untracked })
+        : null;
+}
+function requireSafeUntrackedPath(root, absolute) {
+    if (!insideRoot(root, absolute))
+        throw new Error("Git checkout has an unsafe untracked path");
+}
+async function untrackedIdentityBytes(root, path) {
+    const absolute = resolve(root, path);
+    requireSafeUntrackedPath(root, absolute);
+    const info = await lstat(absolute);
+    if (info.isSymbolicLink())
+        return Buffer.from(await readlink(absolute), "utf8");
+    if (info.isFile())
+        return readFile(absolute);
+    throw new Error("Git checkout has an unsupported untracked entry");
+}
+/** Local development identity; packaged use never calls Git. */
+export async function checkoutProvenance(root, buildDigest) {
+    const canonicalRoot = await realpath(root);
+    const gitRoot = await realpath(git(canonicalRoot, "rev-parse", "--show-toplevel").toString().trim());
+    if (gitRoot !== canonicalRoot)
+        throw new Error("local Sevro checkout root does not match its Git repository");
+    const revision = git(canonicalRoot, "rev-parse", "HEAD").toString().trim();
+    if (!/^[a-f0-9]{40,64}$/.test(revision))
+        throw new Error("local Sevro checkout revision is invalid");
+    return {
+        source: "checkout",
+        root: pathToFileURL(canonicalRoot).href,
+        revision,
+        dirtyPatchDigest: await dirtyPatchDigest(canonicalRoot, []),
+        buildDigest,
+    };
+}
+async function enclosingGitRoot(root) {
+    let path = root;
+    for (;;) {
+        if (await gitMetadataAt(path))
+            return path;
+        const parent = dirname(path);
+        if (parent === path)
+            return null;
+        path = parent;
+    }
+}
+async function gitMetadataAt(path) {
+    try {
+        const metadataPath = join(path, ".git");
+        const metadata = await lstat(metadataPath);
+        return !(await emptyTemporaryGitPlaceholder(path, metadataPath, metadata));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+async function emptyTemporaryGitPlaceholder(directory, metadataPath, metadata) {
+    // Codex's Linux sandbox can leave an empty mount placeholder at /tmp/.git.
+    return (process.platform === "linux" &&
+        (directory === "/tmp" || directory === tmpdir()) &&
+        metadata.isDirectory() &&
+        (await readdir(metadataPath)).length === 0);
+}
+export async function projectProvenance(root, excludedRoots) {
+    const canonicalRoot = await realpath(root);
+    const gitEntryRoot = await enclosingGitRoot(canonicalRoot);
+    if (!gitEntryRoot)
+        return {
+            root: pathToFileURL(canonicalRoot).href,
+            revision: null,
+            dirtyPatchDigest: null,
+        };
+    const gitRoot = await realpath(git(canonicalRoot, "rev-parse", "--show-toplevel").toString().trim());
+    if (gitRoot !== gitEntryRoot)
+        throw new Error("project Git root does not match its repository entry");
+    let revision;
+    try {
+        revision = git(gitRoot, "rev-parse", "HEAD").toString().trim();
+    }
+    catch {
+        git(gitRoot, "status", "--porcelain");
+        return {
+            root: pathToFileURL(canonicalRoot).href,
+            revision: null,
+            dirtyPatchDigest: null,
+        };
+    }
+    if (!/^[a-f0-9]{40,64}$/.test(revision))
+        throw new Error("project Git revision is invalid");
+    return {
+        root: pathToFileURL(canonicalRoot).href,
+        revision,
+        dirtyPatchDigest: await projectDirtyDigest(gitRoot, excludedRoots),
+    };
+}
+async function projectDirtyDigest(root, excludedRoots) {
+    return dirtyPatchDigest(root, excludedRoots ?? []);
+}
+export async function runnerProvenance(buildDigest, checkoutRoot) {
+    if (checkoutRoot) {
+        const actualRoot = await realpath(runnerRoot);
+        if ((await realpath(checkoutRoot)) !== actualRoot)
+            throw new Error("local Sevro checkout root does not match the running package");
+        return checkoutProvenance(actualRoot, buildDigest);
+    }
+    return {
+        source: "package",
+        packageName: packageJson.name,
+        version: packageJson.version,
+        buildDigest,
+    };
+}
+//# sourceMappingURL=provenance.js.map