@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/hosts/claude-login-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-login-store.js","sourceRoot":"","sources":["claude-login-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB;AACrD,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,EACJ,SAAS,GACV,yBAAyB;AAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAE1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAkBhD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAmB,EACnB,QAAyB;IAEzB,IAAI,UAAU;QAAE,OAAO,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAChE,KAAK,EAAE,KAAc,EAAE,EAAE;QACvB,wEAAwE;QACxE,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAC5D,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,yBAAyB,CAAC;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SACnC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,2BAA2B,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,QAAoC;IAEpC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO;QACL,MAAM,EAAE,wBAAwB,OAAO,GAAG;QAC1C,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,kBAAkB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,sDAAsD,EAC1D,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,IACE,UAAU,CAAC,UAAU,KAAK,CAAC;QAC3B,UAAU,CAAC,UAAU,GAAG,oBAAoB;QAC5C,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;QAEnC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,IAAI,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;QAC/B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,oBAAoB;YAChD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,EAAE;YAChE,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,gBAAgB,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n  readFile,\n  realpath,\n  rename,\n  rm,\n  stat,\n  writeFile,\n} from \"node:fs/promises\";\nimport { homedir, userInfo } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nexport const MAX_CREDENTIAL_BYTES = 1024 * 1024;\n\n/** The authoritative store that holds one saved Claude login. */\nexport interface ClaudeLoginStore {\n  /** Credential-free identity of the store, used in errors and recovery. */\n  origin: string;\n  /** Claude configuration directory whose refresh lock guards this store. */\n  lockRoot: string;\n  read(): Promise<Buffer>;\n  write(bytes: Buffer): Promise<void>;\n}\n\n/** Keychain operations; the macOS module supplies them only on Darwin. */\nexport interface ClaudeKeychain {\n  read(service: string, account: string): Promise<Buffer | undefined>;\n  write(service: string, account: string, bytes: Buffer): Promise<void>;\n}\n\n/** Resolve the store Claude Code itself uses for the selected login. */\nexport async function claudeLoginStore(\n  sourceFile?: string,\n  keychain?: ClaudeKeychain,\n): Promise<ClaudeLoginStore> {\n  if (sourceFile) return fileLoginStore(sourceFile, dirname(sourceFile));\n  const configRoot = claudeConfigRoot();\n  const file = join(configRoot, \".credentials.json\");\n  const saved = await keychainLoginStore(configRoot, keychain).catch(\n    async (cause: unknown) => {\n      // Claude falls back to its saved file when the Keychain cannot be read.\n      if (await savedFileExists(file)) return undefined;\n      throw cause;\n    },\n  );\n  if (saved) return saved;\n  await requireSavedFile(file);\n  return fileLoginStore(file, configRoot);\n}\n\nasync function savedFileExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction claudeConfigRoot(): string {\n  return (\n    process.env.CLAUDE_CONFIG_DIR || join(homedir(), \".claude\")\n  ).normalize(\"NFC\");\n}\n\n/** Claude keys a non-default configuration's Keychain item by its path. */\nexport function claudeKeychainService(): string {\n  const configured = process.env.CLAUDE_CONFIG_DIR;\n  if (!configured) return \"Claude Code-credentials\";\n  const digest = createHash(\"sha256\")\n    .update(configured.normalize(\"NFC\"))\n    .digest(\"hex\");\n  return `Claude Code-credentials-${digest.substring(0, 8)}`;\n}\n\nexport function claudeKeychainAccount(): string {\n  let account: string;\n  try {\n    account = process.env.USER || userInfo().username;\n  } catch {\n    return \"claude-code-user\";\n  }\n  return /^[a-zA-Z0-9._-]+$/.test(account) ? account : \"claude-code-user\";\n}\n\nasync function keychainLoginStore(\n  configRoot: string,\n  keychain: ClaudeKeychain | undefined,\n): Promise<ClaudeLoginStore | undefined> {\n  if (!keychain) return undefined;\n  const service = claudeKeychainService();\n  const account = claudeKeychainAccount();\n  if (!(await keychain.read(service, account))) return undefined;\n  return {\n    origin: `macOS Keychain item \"${service}\"`,\n    lockRoot: configRoot,\n    read: async () => requireStoredLogin(await keychain.read(service, account)),\n    write: (bytes) => keychain.write(service, account, bytes),\n  };\n}\n\nasync function requireSavedFile(path: string): Promise<void> {\n  try {\n    await stat(path);\n  } catch (cause) {\n    const code = (cause as NodeJS.ErrnoException).code;\n    throw new Error(\n      code === \"ENOENT\"\n        ? \"Claude saved login is unavailable; run claude and /login\"\n        : \"Claude saved credential is unreadable or unavailable\",\n      { cause },\n    );\n  }\n}\n\nfunction requireStoredLogin(bytes: Buffer | undefined): Buffer {\n  if (!bytes) throw new Error(\"Claude credential is unreadable or unavailable\");\n  return bytes;\n}\n\nexport function requireBoundedCredential(credential: Buffer): Buffer {\n  if (\n    credential.byteLength === 0 ||\n    credential.byteLength > MAX_CREDENTIAL_BYTES ||\n    !credential.toString(\"utf8\").trim()\n  )\n    throw new Error(\"Claude credential is empty or oversized\");\n  return credential;\n}\n\nfunction fileLoginStore(path: string, lockRoot: string): ClaudeLoginStore {\n  return {\n    origin: path,\n    lockRoot,\n    read: () => readLoginFile(path),\n    write: (bytes) => replaceLoginFile(path, bytes),\n  };\n}\n\nasync function readLoginFile(path: string): Promise<Buffer> {\n  try {\n    if ((await stat(path)).size > MAX_CREDENTIAL_BYTES)\n      throw new Error(\"oversized credential\");\n    return await readFile(path);\n  } catch (cause) {\n    throw new Error(\"Claude credential is unreadable or unavailable\", {\n      cause,\n    });\n  }\n}\n\n/** Replace atomically so concurrent Claude readers never see a partial login. */\nasync function replaceLoginFile(path: string, bytes: Buffer): Promise<void> {\n  const target = await realpath(path);\n  const temporary = join(dirname(target), `.sevro-login-${randomUUID()}.tmp`);\n  try {\n    await writeFile(temporary, bytes, { flag: \"wx\", mode: 0o600 });\n    await rename(temporary, target);\n  } finally {\n    await rm(temporary, { force: true });\n  }\n}\n"]}

package/dist/src/hosts/claude-login.js

@@ -0,0 +1,74 @@
+import { createHash } from "node:crypto";
+import { isRecord, isStringArray } from "../value-guards.js";
+/** Fields replaced by a rotation; every other stored field is preserved. */
+const ROTATED_FIELDS = [
+    "accessToken",
+    "refreshToken",
+    "expiresAt",
+    "scopes",
+    "refreshTokenExpiresAt",
+];
+/** Parse a stored login without echoing any of its bytes in errors. */
+export function parseClaudeLogin(bytes) {
+    const document = loginDocument(bytes);
+    const oauth = document.claudeAiOauth;
+    if (!isRecord(oauth) || !nonblank(oauth.accessToken))
+        throw new Error("Claude credential has no claude.ai login");
+    return {
+        document,
+        oauth,
+        accessToken: oauth.accessToken,
+        refreshToken: nonblank(oauth.refreshToken) ? oauth.refreshToken : undefined,
+        expiresAt: loginExpiry(oauth.expiresAt),
+        scopes: isStringArray(oauth.scopes) ? oauth.scopes : [],
+    };
+}
+function loginDocument(bytes) {
+    let value;
+    try {
+        value = JSON.parse(bytes.toString("utf8"));
+    }
+    catch {
+        // Parser messages quote input, so the cause is deliberately not retained.
+        throw new Error("Claude credential is not a JSON login document");
+    }
+    if (!isRecord(value))
+        throw new Error("Claude credential is not a JSON login document");
+    return value;
+}
+function nonblank(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+function loginExpiry(value) {
+    return typeof value === "number" && Number.isFinite(value)
+        ? value
+        : undefined;
+}
+/** A login without a recorded expiry is treated as not expiring. */
+export function coversLifetime(login, lifetimeMs, now = Date.now()) {
+    return login.expiresAt === undefined || login.expiresAt - now >= lifetimeMs;
+}
+/** Apply a rotated token pair to the latest stored document. */
+export function rotatedLoginBytes(latest, rotated) {
+    const oauth = { ...latest.oauth };
+    for (const field of ROTATED_FIELDS)
+        if (Object.hasOwn(rotated.oauth, field))
+            oauth[field] = rotated.oauth[field];
+    return Buffer.from(JSON.stringify({ ...latest.document, claudeAiOauth: oauth }));
+}
+/** Rotated token fields, as retained for recovery. */
+export function rotatedOAuth(login) {
+    return Object.fromEntries(ROTATED_FIELDS.filter((field) => Object.hasOwn(login.oauth, field)).map((field) => [field, login.oauth[field]]));
+}
+export function sameTokens(left, right) {
+    return (left.accessToken === right.accessToken &&
+        left.refreshToken === right.refreshToken &&
+        left.expiresAt === right.expiresAt);
+}
+/** Identify a refresh token without retaining its value. */
+export function tokenDigest(token) {
+    return createHash("sha256")
+        .update(token ?? "")
+        .digest("hex");
+}
+//# sourceMappingURL=claude-login.js.map

package/dist/src/hosts/claude-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-login.js","sourceRoot":"","sources":["claude-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,2BAAwB;AAY1D,4EAA4E;AAC5E,MAAM,cAAc,GAAG;IACrB,aAAa;IACb,cAAc;IACd,WAAW;IACX,QAAQ;IACR,uBAAuB;CACf,CAAC;AAEX,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,OAAO;QACL,QAAQ;QACR,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC3E,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;QACvC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAC5B,KAAkB,EAClB,UAAkB,EAClB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,IAAI,UAAU,CAAC;AAC9E,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAC/B,MAAmB,EACnB,OAAoB;IAEpB,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,cAAc;QAChC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,OAAO,MAAM,CAAC,WAAW,CACvB,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CACrE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACvC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAiB,EAAE,KAAkB;IAC9D,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QACxC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACnC,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACnB,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { isRecord, isStringArray } from \"../value-guards\";\n\n/** A claude.ai OAuth login in the document form Claude Code persists. */\nexport interface ClaudeLogin {\n  document: Record<string, unknown>;\n  oauth: Record<string, unknown>;\n  accessToken: string;\n  refreshToken: string | undefined;\n  expiresAt: number | undefined;\n  scopes: string[];\n}\n\n/** Fields replaced by a rotation; every other stored field is preserved. */\nconst ROTATED_FIELDS = [\n  \"accessToken\",\n  \"refreshToken\",\n  \"expiresAt\",\n  \"scopes\",\n  \"refreshTokenExpiresAt\",\n] as const;\n\n/** Parse a stored login without echoing any of its bytes in errors. */\nexport function parseClaudeLogin(bytes: Buffer): ClaudeLogin {\n  const document = loginDocument(bytes);\n  const oauth = document.claudeAiOauth;\n  if (!isRecord(oauth) || !nonblank(oauth.accessToken))\n    throw new Error(\"Claude credential has no claude.ai login\");\n  return {\n    document,\n    oauth,\n    accessToken: oauth.accessToken,\n    refreshToken: nonblank(oauth.refreshToken) ? oauth.refreshToken : undefined,\n    expiresAt: loginExpiry(oauth.expiresAt),\n    scopes: isStringArray(oauth.scopes) ? oauth.scopes : [],\n  };\n}\n\nfunction loginDocument(bytes: Buffer): Record<string, unknown> {\n  let value: unknown;\n  try {\n    value = JSON.parse(bytes.toString(\"utf8\"));\n  } catch {\n    // Parser messages quote input, so the cause is deliberately not retained.\n    throw new Error(\"Claude credential is not a JSON login document\");\n  }\n  if (!isRecord(value))\n    throw new Error(\"Claude credential is not a JSON login document\");\n  return value;\n}\n\nfunction nonblank(value: unknown): value is string {\n  return typeof value === \"string\" && value.trim().length > 0;\n}\n\nfunction loginExpiry(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isFinite(value)\n    ? value\n    : undefined;\n}\n\n/** A login without a recorded expiry is treated as not expiring. */\nexport function coversLifetime(\n  login: ClaudeLogin,\n  lifetimeMs: number,\n  now = Date.now(),\n): boolean {\n  return login.expiresAt === undefined || login.expiresAt - now >= lifetimeMs;\n}\n\n/** Apply a rotated token pair to the latest stored document. */\nexport function rotatedLoginBytes(\n  latest: ClaudeLogin,\n  rotated: ClaudeLogin,\n): Buffer {\n  const oauth = { ...latest.oauth };\n  for (const field of ROTATED_FIELDS)\n    if (Object.hasOwn(rotated.oauth, field))\n      oauth[field] = rotated.oauth[field];\n  return Buffer.from(\n    JSON.stringify({ ...latest.document, claudeAiOauth: oauth }),\n  );\n}\n\n/** Rotated token fields, as retained for recovery. */\nexport function rotatedOAuth(login: ClaudeLogin): Record<string, unknown> {\n  return Object.fromEntries(\n    ROTATED_FIELDS.filter((field) => Object.hasOwn(login.oauth, field)).map(\n      (field) => [field, login.oauth[field]],\n    ),\n  );\n}\n\nexport function sameTokens(left: ClaudeLogin, right: ClaudeLogin): boolean {\n  return (\n    left.accessToken === right.accessToken &&\n    left.refreshToken === right.refreshToken &&\n    left.expiresAt === right.expiresAt\n  );\n}\n\n/** Identify a refresh token without retaining its value. */\nexport function tokenDigest(token: string | undefined): string {\n  return createHash(\"sha256\")\n    .update(token ?? \"\")\n    .digest(\"hex\");\n}\n"]}

package/dist/src/hosts/claude-native-goal.js

@@ -0,0 +1,138 @@
+import { parseClaudeEvents } from "./claude-events.js";
+import { lstat, readdir, readFile } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { requireRecord } from "../value-guards.js";
+function record(value) {
+    return requireRecord(value, "Malformed native session record");
+}
+function records(text) {
+    return parseClaudeEvents(text).lines.map((line) => {
+        if (!line.parsed)
+            throw line.error;
+        return record(line.value);
+    });
+}
+function goalAttachment(event) {
+    if (event.isSidechain === true || event.type !== "attachment")
+        return [];
+    const attachment = record(event.attachment);
+    if (attachment.type !== "goal_status")
+        return [];
+    const characters = goalCharacters(attachment);
+    return [
+        {
+            status: attachmentStatus(attachment),
+            characters,
+            ...(typeof event.timestamp === "string" ? { at: event.timestamp } : {}),
+        },
+    ];
+}
+function goalCharacters(attachment) {
+    const characters = typeof attachment.condition === "string"
+        ? Array.from(attachment.condition).length
+        : 0;
+    if (!characters || characters > 4000 || typeof attachment.met !== "boolean")
+        throw new Error("Malformed native goal attachment");
+    return characters;
+}
+function attachmentStatus(attachment) {
+    if (attachment.failed === true)
+        return "blocked";
+    if (!attachment.met)
+        return "active";
+    return attachment.sentinel === true ? "cleared" : "complete";
+}
+function requireSuccessfulResult(stream, sessionId) {
+    const result = records(stream)
+        .filter((event) => event.type === "result")
+        .at(-1);
+    if (!result ||
+        result.session_id !== sessionId ||
+        result.subtype !== "success" ||
+        result.is_error !== false)
+        throw new Error("Native session did not finish successfully");
+}
+/** Claude's native persisted goal attachments; sentinel clearance is not success. */
+export function claudeNativeGoalEvidence(stream, transcript, sessionId) {
+    const events = records(transcript);
+    requireBoundSession(events, sessionId);
+    requireSuccessfulResult(stream, sessionId);
+    const goals = events.flatMap(goalAttachment);
+    return {
+        method: "native_session",
+        threadId: sessionId,
+        goals,
+        goalStatus: goals.at(-1)?.status ?? null,
+    };
+}
+function requireBoundSession(events, sessionId) {
+    for (const event of events) {
+        if (event.sessionId && event.sessionId !== sessionId)
+            throw new Error("Foreign native session record");
+    }
+    if (!events.some((event) => event.sessionId === sessionId))
+        throw new Error("Original native session not retained");
+}
+async function sessionPaths(path, sessionId, bound = { entries: 0 }) {
+    const entries = await readdir(path, { withFileTypes: true });
+    bound.entries += entries.length;
+    if (bound.entries > 1024)
+        throw new Error("Native transcript tree exceeds limit");
+    if (entries.some((entry) => entry.isSymbolicLink()))
+        throw new Error("Native transcript tree contains a symlink");
+    return (await Promise.all(entries.map(async (entry) => entry.isDirectory()
+        ? sessionPaths(join(path, entry.name), sessionId, bound)
+        : basename(entry.name) === `${sessionId}.jsonl`
+            ? [join(path, entry.name)]
+            : []))).flat();
+}
+/** Read only this trial's original native session; never manufacture a goal. */
+export async function observeClaudeNativeGoal(configRoot, stream) {
+    try {
+        const id = originalSessionId(stream);
+        const bytes = await nativeTranscript(configRoot, id);
+        return {
+            id: "sevro.host.native-goal",
+            completeness: "complete",
+            data: claudeNativeGoalEvidence(stream, new TextDecoder("utf-8", { fatal: true }).decode(bytes), id),
+        };
+    }
+    catch (error) {
+        return {
+            id: "sevro.host.native-goal",
+            completeness: "unavailable",
+            data: {
+                method: "native_session",
+                failure: error instanceof Error
+                    ? error.message
+                    : "Native observation unavailable",
+            },
+        };
+    }
+}
+function originalSessionId(stream) {
+    const initializations = records(stream).filter((event) => event.type === "system" && event.subtype === "init");
+    const ids = new Set(initializations.map((event) => event.session_id));
+    const [id] = ids;
+    if (ids.size !== 1 || typeof id !== "string" || !/^[a-f0-9-]{36}$/i.test(id))
+        throw new Error("Missing or ambiguous original Claude session");
+    return id;
+}
+async function nativeTranscript(configRoot, id) {
+    const paths = await sessionPaths(join(configRoot, "projects"), id);
+    const path = uniqueTranscriptPath(paths);
+    const entry = await lstat(path);
+    if (!entry.isFile() || entry.size > 8 * 1024 * 1024)
+        throw new Error("Native transcript is unsafe or oversized");
+    const bytes = await readFile(path);
+    if (bytes.length > 8 * 1024 * 1024)
+        throw new Error("Native transcript exceeds limit");
+    return bytes;
+}
+function uniqueTranscriptPath(paths) {
+    const [path] = paths;
+    if (paths.length !== 1 || path === undefined)
+        throw new Error("Missing or ambiguous native transcript");
+    return path;
+}
+//# sourceMappingURL=claude-native-goal.js.map

package/dist/src/hosts/claude-native-goal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-goal.js","sourceRoot":"","sources":["claude-native-goal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAqB,2BAAwB;AACvE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AAC5D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB;AAC3C,OAAO,EAAE,aAAa,EAAE,2BAAwB;AAGhD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;AACjE,CAAC;AACD,SAAS,OAAO,CAAC,IAA2B;IAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC;QACnC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB;IACxC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO;QACL;YACE,MAAM,EAAE,gBAAgB,CAAC,UAAU,CAAC;YACpC,UAAU;YACV,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAuB;IAC7C,MAAM,UAAU,GACd,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;QACtC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM;QACzC,CAAC,CAAC,CAAC,CAAC;IACR,IAAI,CAAC,UAAU,IAAI,UAAU,GAAG,IAAI,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,SAAS;QACzE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAuB;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA6B,EAC7B,SAAiB;IAEjB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;SAC3B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;SAC1C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACV,IACE,CAAC,MAAM;QACP,MAAM,CAAC,UAAU,KAAK,SAAS;QAC/B,MAAM,CAAC,OAAO,KAAK,SAAS;QAC5B,MAAM,CAAC,QAAQ,KAAK,KAAK;QAEzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CACtC,MAA6B,EAC7B,UAAkB,EAClB,SAAiB;IAEjB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,SAAS;QACnB,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAqB,EAAE,SAAiB;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAClD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,SAAiB,EACjB,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE;IAEtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,OAAO,CACL,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC1B,KAAK,CAAC,WAAW,EAAE;QACjB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;QACxD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,QAAQ;YAC7C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC,CAAC,EAAE,CACT,CACF,CACF,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,MAA6B;IAM7B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,wBAAwB;YAC5B,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE,wBAAwB,CAC5B,MAAM,EACN,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACvD,EAAE,CACH;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,wBAAwB;YAC5B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE;gBACJ,MAAM,EAAE,gBAAgB;gBACxB,OAAO,EACL,KAAK,YAAY,KAAK;oBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,gCAAgC;aACvC;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA6B;IACtD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC5C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAC/D,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;IACjB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,UAAkB,EAClB,EAAU;IAEV,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAe;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS;QAC1C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { parseClaudeEvents, type ClaudeEvents } from \"./claude-events\";\nimport { lstat, readdir, readFile } from \"node:fs/promises\";\nimport { basename, join } from \"node:path\";\nimport { requireRecord } from \"../value-guards\";\n\ntype RecordValue = Record<string, unknown>;\nfunction record(value: unknown): RecordValue {\n  return requireRecord(value, \"Malformed native session record\");\n}\nfunction records(text: string | ClaudeEvents): RecordValue[] {\n  return parseClaudeEvents(text).lines.map((line) => {\n    if (!line.parsed) throw line.error;\n    return record(line.value);\n  });\n}\n\nfunction goalAttachment(event: RecordValue) {\n  if (event.isSidechain === true || event.type !== \"attachment\") return [];\n  const attachment = record(event.attachment);\n  if (attachment.type !== \"goal_status\") return [];\n  const characters = goalCharacters(attachment);\n  return [\n    {\n      status: attachmentStatus(attachment),\n      characters,\n      ...(typeof event.timestamp === \"string\" ? { at: event.timestamp } : {}),\n    },\n  ];\n}\n\nfunction goalCharacters(attachment: RecordValue): number {\n  const characters =\n    typeof attachment.condition === \"string\"\n      ? Array.from(attachment.condition).length\n      : 0;\n  if (!characters || characters > 4000 || typeof attachment.met !== \"boolean\")\n    throw new Error(\"Malformed native goal attachment\");\n  return characters;\n}\n\nfunction attachmentStatus(attachment: RecordValue): string {\n  if (attachment.failed === true) return \"blocked\";\n  if (!attachment.met) return \"active\";\n  return attachment.sentinel === true ? \"cleared\" : \"complete\";\n}\n\nfunction requireSuccessfulResult(\n  stream: string | ClaudeEvents,\n  sessionId: string,\n): void {\n  const result = records(stream)\n    .filter((event) => event.type === \"result\")\n    .at(-1);\n  if (\n    !result ||\n    result.session_id !== sessionId ||\n    result.subtype !== \"success\" ||\n    result.is_error !== false\n  )\n    throw new Error(\"Native session did not finish successfully\");\n}\n\n/** Claude's native persisted goal attachments; sentinel clearance is not success. */\nexport function claudeNativeGoalEvidence(\n  stream: string | ClaudeEvents,\n  transcript: string,\n  sessionId: string,\n) {\n  const events = records(transcript);\n  requireBoundSession(events, sessionId);\n  requireSuccessfulResult(stream, sessionId);\n  const goals = events.flatMap(goalAttachment);\n  return {\n    method: \"native_session\",\n    threadId: sessionId,\n    goals,\n    goalStatus: goals.at(-1)?.status ?? null,\n  };\n}\n\nfunction requireBoundSession(events: RecordValue[], sessionId: string): void {\n  for (const event of events) {\n    if (event.sessionId && event.sessionId !== sessionId)\n      throw new Error(\"Foreign native session record\");\n  }\n  if (!events.some((event) => event.sessionId === sessionId))\n    throw new Error(\"Original native session not retained\");\n}\n\nasync function sessionPaths(\n  path: string,\n  sessionId: string,\n  bound = { entries: 0 },\n): Promise<string[]> {\n  const entries = await readdir(path, { withFileTypes: true });\n  bound.entries += entries.length;\n  if (bound.entries > 1024)\n    throw new Error(\"Native transcript tree exceeds limit\");\n  if (entries.some((entry) => entry.isSymbolicLink()))\n    throw new Error(\"Native transcript tree contains a symlink\");\n  return (\n    await Promise.all(\n      entries.map(async (entry) =>\n        entry.isDirectory()\n          ? sessionPaths(join(path, entry.name), sessionId, bound)\n          : basename(entry.name) === `${sessionId}.jsonl`\n            ? [join(path, entry.name)]\n            : [],\n      ),\n    )\n  ).flat();\n}\n\n/** Read only this trial's original native session; never manufacture a goal. */\nexport async function observeClaudeNativeGoal(\n  configRoot: string,\n  stream: string | ClaudeEvents,\n): Promise<{\n  id: string;\n  completeness: \"complete\" | \"unavailable\";\n  data: Record<string, unknown>;\n}> {\n  try {\n    const id = originalSessionId(stream);\n    const bytes = await nativeTranscript(configRoot, id);\n    return {\n      id: \"sevro.host.native-goal\",\n      completeness: \"complete\",\n      data: claudeNativeGoalEvidence(\n        stream,\n        new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes),\n        id,\n      ),\n    };\n  } catch (error) {\n    return {\n      id: \"sevro.host.native-goal\",\n      completeness: \"unavailable\",\n      data: {\n        method: \"native_session\",\n        failure:\n          error instanceof Error\n            ? error.message\n            : \"Native observation unavailable\",\n      },\n    };\n  }\n}\n\nfunction originalSessionId(stream: string | ClaudeEvents): string {\n  const initializations = records(stream).filter(\n    (event) => event.type === \"system\" && event.subtype === \"init\",\n  );\n  const ids = new Set(initializations.map((event) => event.session_id));\n  const [id] = ids;\n  if (ids.size !== 1 || typeof id !== \"string\" || !/^[a-f0-9-]{36}$/i.test(id))\n    throw new Error(\"Missing or ambiguous original Claude session\");\n  return id;\n}\n\nasync function nativeTranscript(\n  configRoot: string,\n  id: string,\n): Promise<Buffer> {\n  const paths = await sessionPaths(join(configRoot, \"projects\"), id);\n  const path = uniqueTranscriptPath(paths);\n  const entry = await lstat(path);\n  if (!entry.isFile() || entry.size > 8 * 1024 * 1024)\n    throw new Error(\"Native transcript is unsafe or oversized\");\n  const bytes = await readFile(path);\n  if (bytes.length > 8 * 1024 * 1024)\n    throw new Error(\"Native transcript exceeds limit\");\n  return bytes;\n}\n\nfunction uniqueTranscriptPath(paths: string[]): string {\n  const [path] = paths;\n  if (paths.length !== 1 || path === undefined)\n    throw new Error(\"Missing or ambiguous native transcript\");\n  return path;\n}\n"]}

package/dist/src/hosts/claude-process.js

@@ -0,0 +1,10 @@
+import { runHostProcess } from "./process-lifecycle.js";
+export async function runClaudeProcess(options) {
+    const result = await runHostProcess({ ...options, host: "Claude" });
+    return {
+        code: result.code,
+        out: result.out,
+        err: Buffer.from(result.stderr).toString("utf8"),
+    };
+}
+//# sourceMappingURL=claude-process.js.map

package/dist/src/hosts/claude-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-process.js","sourceRoot":"","sources":["claude-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA2B,+BAA4B;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA6D;IAE7D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;KACjD,CAAC;AACJ,CAAC","sourcesContent":["import { runHostProcess, type HostProcessOptions } from \"./process-lifecycle\";\n\nexport async function runClaudeProcess(\n  options: Omit<HostProcessOptions, \"host\" | \"input\" | \"phase\">,\n) {\n  const result = await runHostProcess({ ...options, host: \"Claude\" });\n  return {\n    code: result.code,\n    out: result.out,\n    err: Buffer.from(result.stderr).toString(\"utf8\"),\n  };\n}\n"]}

package/dist/src/hosts/claude-refresh-lock.js

@@ -0,0 +1,76 @@
+import { setTimeout as sleep } from "node:timers/promises";
+import { mkdir, rmdir, stat, utimes } from "node:fs/promises";
+import { join } from "node:path";
+/**
+ * Claude Code serializes OAuth refresh through this directory lock in the
+ * configuration directory. These values match its lockfile settings, observed
+ * in Claude Code 2.1.284 and 2.1.309: stale after 60s, refreshed every 5s.
+ */
+const LOCK_NAME = ".oauth_refresh.lock";
+const STALE_MS = 60_000;
+const UPDATE_MS = 5_000;
+const RETRY_MS = 250;
+const DEFAULT_WAIT_MS = 120_000;
+/** Run an action while holding the refresh lock Claude Code also honors. */
+export async function withClaudeRefreshLock(root, action, { waitMs = DEFAULT_WAIT_MS, updateMs = UPDATE_MS } = {}) {
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    const lock = join(root, LOCK_NAME);
+    await acquireLock(lock, Date.now() + waitMs);
+    const heartbeat = setInterval(() => {
+        void touchLock(lock);
+    }, updateMs);
+    try {
+        return await action();
+    }
+    finally {
+        clearInterval(heartbeat);
+        await releaseLock(lock);
+    }
+}
+async function acquireLock(lock, deadline) {
+    while (!(await createLock(lock))) {
+        if (Date.now() >= deadline)
+            throw new Error("Timed out waiting for another process to refresh the Claude login");
+        await sleep(RETRY_MS);
+    }
+}
+async function createLock(lock) {
+    try {
+        await mkdir(lock);
+        return true;
+    }
+    catch (cause) {
+        if (cause.code !== "EEXIST")
+            throw new Error("Claude refresh lock is unavailable", { cause });
+    }
+    await removeStaleLock(lock);
+    return false;
+}
+/** An abandoned holder stops touching the lock; reclaim it as Claude does. */
+async function removeStaleLock(lock) {
+    try {
+        if (Date.now() - (await stat(lock)).mtimeMs > STALE_MS)
+            await rmdir(lock);
+    }
+    catch {
+        // Another contender released or reclaimed it first.
+    }
+}
+async function touchLock(lock) {
+    const now = new Date();
+    try {
+        await utimes(lock, now, now);
+    }
+    catch {
+        // Release or reclamation races are resolved by the post-lock re-read.
+    }
+}
+async function releaseLock(lock) {
+    try {
+        await rmdir(lock);
+    }
+    catch {
+        // Already removed; the heartbeat keeps a live holder from being reclaimed.
+    }
+}
+//# sourceMappingURL=claude-refresh-lock.js.map

package/dist/src/hosts/claude-refresh-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-refresh-lock.js","sourceRoot":"","sources":["claude-refresh-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,6BAA6B;AAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB;AAC9D,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAEjC;;;;GAIG;AACH,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,MAAwB,EACxB,EAAE,MAAM,GAAG,eAAe,EAAE,QAAQ,GAAG,SAAS,EAAE,GAAG,EAAE;IAEvD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB;IACvD,OAAO,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YACxB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,QAAQ;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;AACH,CAAC","sourcesContent":["import { setTimeout as sleep } from \"node:timers/promises\";\nimport { mkdir, rmdir, stat, utimes } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\n/**\n * Claude Code serializes OAuth refresh through this directory lock in the\n * configuration directory. These values match its lockfile settings, observed\n * in Claude Code 2.1.284 and 2.1.309: stale after 60s, refreshed every 5s.\n */\nconst LOCK_NAME = \".oauth_refresh.lock\";\nconst STALE_MS = 60_000;\nconst UPDATE_MS = 5_000;\nconst RETRY_MS = 250;\nconst DEFAULT_WAIT_MS = 120_000;\n\n/** Run an action while holding the refresh lock Claude Code also honors. */\nexport async function withClaudeRefreshLock<T>(\n  root: string,\n  action: () => Promise<T>,\n  { waitMs = DEFAULT_WAIT_MS, updateMs = UPDATE_MS } = {},\n): Promise<T> {\n  await mkdir(root, { recursive: true, mode: 0o700 });\n  const lock = join(root, LOCK_NAME);\n  await acquireLock(lock, Date.now() + waitMs);\n  const heartbeat = setInterval(() => {\n    void touchLock(lock);\n  }, updateMs);\n  try {\n    return await action();\n  } finally {\n    clearInterval(heartbeat);\n    await releaseLock(lock);\n  }\n}\n\nasync function acquireLock(lock: string, deadline: number): Promise<void> {\n  while (!(await createLock(lock))) {\n    if (Date.now() >= deadline)\n      throw new Error(\n        \"Timed out waiting for another process to refresh the Claude login\",\n      );\n    await sleep(RETRY_MS);\n  }\n}\n\nasync function createLock(lock: string): Promise<boolean> {\n  try {\n    await mkdir(lock);\n    return true;\n  } catch (cause) {\n    if ((cause as NodeJS.ErrnoException).code !== \"EEXIST\")\n      throw new Error(\"Claude refresh lock is unavailable\", { cause });\n  }\n  await removeStaleLock(lock);\n  return false;\n}\n\n/** An abandoned holder stops touching the lock; reclaim it as Claude does. */\nasync function removeStaleLock(lock: string): Promise<void> {\n  try {\n    if (Date.now() - (await stat(lock)).mtimeMs > STALE_MS) await rmdir(lock);\n  } catch {\n    // Another contender released or reclaimed it first.\n  }\n}\n\nasync function touchLock(lock: string): Promise<void> {\n  const now = new Date();\n  try {\n    await utimes(lock, now, now);\n  } catch {\n    // Release or reclamation races are resolved by the post-lock re-read.\n  }\n}\n\nasync function releaseLock(lock: string): Promise<void> {\n  try {\n    await rmdir(lock);\n  } catch {\n    // Already removed; the heartbeat keeps a live holder from being reclaimed.\n  }\n}\n"]}

package/dist/src/hosts/claude-repository-invocation.js

@@ -0,0 +1,229 @@
+import { lstat, readFile, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { isRecord } from "../value-guards.js";
+import { parseClaudeEvents } from "./claude-events.js";
+function entries(text) {
+    return parseClaudeEvents(text).lines.map((line) => {
+        if (!line.parsed)
+            throw line.error;
+        if (!isRecord(line.value))
+            throw new Error("invalid Claude session entry");
+        return line.value;
+    });
+}
+function content(entry) {
+    const blocks = isRecord(entry.message) ? entry.message.content : null;
+    if (typeof blocks === "string")
+        return blocks;
+    if (!Array.isArray(blocks))
+        return "";
+    return blocks
+        .filter(isRecord)
+        .filter((block) => block.type === "text")
+        .map((block) => (typeof block.text === "string" ? block.text : ""))
+        .join("\n");
+}
+/** Validate the native project mount before candidate execution. */
+export async function verifyClaudeRepositoryInvocation(request) {
+    const selected = request.explicitSkillInvocation;
+    requireRepositorySelection(selected);
+    const { skillName, token } = selected;
+    if (!validRepositoryDeclaration(skillName, token, request.prompt))
+        throw new Error("invalid Claude repository skill invocation");
+    let path = await realpath(request.workspace);
+    for (const [index, part] of [
+        ".claude",
+        "skills",
+        skillName,
+        "SKILL.md",
+    ].entries()) {
+        path = join(path, part);
+        const entry = await lstat(path).catch(() => null);
+        if (!safeSkillEntry(entry, index))
+            throw new Error("invoked Claude repository skill is unavailable or unsafe");
+    }
+    return {
+        skillName,
+        skillDir: join(path, ".."),
+        skillText: await readFile(path, "utf8"),
+        prompt: request.prompt,
+    };
+}
+function requireRepositorySelection(selected) {
+    if (!selected || selected.scope !== "repository")
+        throw new Error("Claude repository invocation is not declared");
+}
+function validRepositoryDeclaration(skillName, token, prompt) {
+    return (validRepositorySkillName(skillName) &&
+        token === `/${skillName}` &&
+        prompt.split(token).length - 1 === 1 &&
+        repositoryPromptMatches(prompt, token));
+}
+function validRepositorySkillName(name) {
+    return /^[A-Za-z0-9._-]+$/.test(name) && ![".", ".."].includes(name);
+}
+function repositoryPromptMatches(prompt, token) {
+    return (prompt === token ||
+        prompt.startsWith(token + " ") ||
+        prompt.startsWith(token + "\n"));
+}
+function safeSkillEntry(entry, index) {
+    if (!entry || entry.isSymbolicLink())
+        return false;
+    return index === 3
+        ? entry.isFile() && entry.size <= 1024 * 1024
+        : entry.isDirectory();
+}
+/** Match one exact command and complete body before the assistant starts. */
+export function matchClaudeRepositoryInvocation(input) {
+    let native;
+    try {
+        native = entries(input.transcript);
+    }
+    catch {
+        return { accepted: null, reason: "malformed native session" };
+    }
+    const boundary = assistantBoundary(native, input.sessionId);
+    if ("receipt" in boundary)
+        return boundary.receipt;
+    return matchCommandAndBody(boundary.before, input);
+}
+function assistantBoundary(native, sessionId) {
+    const firstAssistant = native.findIndex((entry) => entry.type === "assistant");
+    const assistant = native.at(firstAssistant);
+    if (firstAssistant < 0 || assistant === undefined)
+        return { receipt: { accepted: null, reason: "missing assistant turn" } };
+    if (assistant.sessionId !== sessionId || assistant.isSidechain === true)
+        return {
+            receipt: { accepted: false, reason: "assistant session differs" },
+        };
+    return { before: native.slice(0, firstAssistant) };
+}
+function nativeCommand(input, token) {
+    const args = input.prompt.slice(token.length).trim();
+    return (`<command-message>${input.skillName}</command-message>\n<command-name>${token}</command-name>` +
+        (args ? `\n<command-args>${args}</command-args>` : ""));
+}
+function matchCommandAndBody(before, input) {
+    const token = `/${input.skillName}`;
+    if (!repositoryPromptMatches(input.prompt, token))
+        return { accepted: false, reason: "prompt differs from mounted command" };
+    const command = commandBoundary(before, input, token);
+    if ("receipt" in command)
+        return command.receipt;
+    return mountedBodyReceipt(before, input, command.called);
+}
+function commandBoundary(before, input, token) {
+    const commands = before.filter((entry) => entry.type === "user" &&
+        content(entry).includes(`<command-name>${token}</command-name>`));
+    const [called] = commands;
+    if (commands.length !== 1 || called === undefined)
+        return {
+            receipt: {
+                accepted: false,
+                reason: "missing or duplicate native command",
+            },
+        };
+    if (!commandCorrelated(called, input, nativeCommand(input, token)))
+        return {
+            receipt: {
+                accepted: false,
+                reason: "command session or arguments differ",
+            },
+        };
+    return { called };
+}
+function commandCorrelated(called, input, command) {
+    return (called.sessionId === input.sessionId &&
+        called.isMeta !== true &&
+        called.isSidechain !== true &&
+        content(called) === command);
+}
+function mountedBodyReceipt(before, input, called) {
+    const body = input.skillText
+        .replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n/, "")
+        .trim();
+    if (!body)
+        return { accepted: null, reason: "empty mounted body" };
+    const prefix = `Base directory for this skill: ${input.skillDir}\n\n${body}`;
+    const expanded = before.filter((entry) => mountedBodyMatches(entry, prefix));
+    const [loaded] = expanded;
+    if (expanded.length !== 1 || loaded === undefined)
+        return {
+            accepted: false,
+            reason: "missing, partial, or duplicate mounted body",
+        };
+    if (!bodyCorrelated(loaded, input.sessionId, before, called))
+        return { accepted: false, reason: "mounted body is uncorrelated" };
+    return {
+        accepted: true,
+        reason: "native command and complete mounted body matched",
+    };
+}
+function mountedBodyMatches(entry, prefix) {
+    return (entry.type === "user" &&
+        (content(entry) === prefix || content(entry).startsWith(prefix + "\n")));
+}
+function bodyCorrelated(loaded, sessionId, before, called) {
+    return (loaded.sessionId === sessionId &&
+        loaded.isMeta === true &&
+        loaded.isSidechain !== true &&
+        before.indexOf(loaded) > before.indexOf(called));
+}
+/** Read only the completed bound native session; retain no arguments or body. */
+export async function claudeRepositoryInvocationObservation(input) {
+    let receipt = {
+        accepted: null,
+        reason: "native session evidence unavailable",
+    };
+    try {
+        receipt = await repositoryReceipt(input);
+    }
+    catch {
+        /* Unavailable or malformed native evidence stays partial. */
+    }
+    return {
+        id: "sevro.claude.repository-invocation",
+        completeness: receipt.accepted === true && input.tools.completeness === "complete"
+            ? "complete"
+            : "partial",
+        data: {
+            method: "native_repository_command",
+            ...receipt,
+            skill: input.invocation.skillName,
+        },
+    };
+}
+function repositorySessionId(stream) {
+    const sessions = [
+        ...new Set(entries(stream)
+            .filter((entry) => entry.type === "result" ||
+            (entry.type === "system" && entry.subtype === "init"))
+            .map((entry) => entry.session_id)),
+    ];
+    const [id] = sessions;
+    if (sessions.length !== 1 ||
+        typeof id !== "string" ||
+        !/^[A-Za-z0-9_-]{1,128}$/.test(id))
+        return null;
+    return id;
+}
+async function repositoryReceipt(input) {
+    const sessionId = repositorySessionId(input.stream);
+    if (sessionId === null)
+        return { accepted: null, reason: "native session evidence unavailable" };
+    const workspace = await realpath(input.workspace);
+    const path = join(await realpath(input.configRoot), "projects", workspace.replace(/[^A-Za-z0-9]/g, "-"), `${sessionId}.jsonl`);
+    const entry = await lstat(path);
+    if (!regularTranscript(entry) || (await realpath(path)) !== path)
+        return { accepted: null, reason: "native session evidence unavailable" };
+    return matchClaudeRepositoryInvocation({
+        ...input.invocation,
+        sessionId,
+        transcript: await readFile(path, "utf8"),
+    });
+}
+function regularTranscript(entry) {
+    return (entry.isFile() && !entry.isSymbolicLink() && entry.size <= 8 * 1024 * 1024);
+}
+//# sourceMappingURL=claude-repository-invocation.js.map