@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/hosts/native-controls.js

@@ -0,0 +1,151 @@
+import { isRecord, isUnknownArray } from "../value-guards.js";
+import { summarizeClaudeEvents, parseClaudeEvents, } from "./claude-events.js";
+const MAX_CALLS = 128;
+function label(value, max) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= max &&
+        /^[A-Za-z0-9_.:-]+$/.test(value));
+}
+export function codexNativeControls(observation) {
+    const complete = observation.completeness === "complete" && inspectedExecCalls(observation);
+    return {
+        id: "sevro.host.native-controls",
+        completeness: controlCompleteness(observation.completeness, complete),
+        data: {
+            method: "native_control_calls",
+            calls: observation.data.toolCalls.map(({ ordinal, namespace, name }) => ({
+                ordinal,
+                namespace,
+                name,
+            })),
+            acceptedAgentCount: complete
+                ? observation.data.acceptedSpawns.length
+                : null,
+            directAcceptedAgentCount: observation.data.acceptedSpawns.length,
+            coverage: {
+                nativeCalls: observation.completeness,
+                execInspection: inspectedExecCalls(observation)
+                    ? "complete"
+                    : "partial",
+                acceptedAgents: "direct_native_calls",
+            },
+            ...nativeCounts(observation),
+            ...execEvidence(observation.data.execCalls),
+        },
+    };
+}
+function nativeCounts(observation) {
+    const complete = observation.completeness === "complete";
+    return {
+        submittedExecCalls: complete ? observation.data.submittedExecCalls : null,
+        truncated: complete ? false : null,
+    };
+}
+function controlCompleteness(source, complete) {
+    return source === "complete" && !complete ? "partial" : source;
+}
+function execEvidence(receipts) {
+    return receipts ? { execCalls: receipts } : {};
+}
+function inspectedExecCalls(observation) {
+    const receipts = observation.data.execCalls ?? [];
+    const submissions = observation.data.toolCalls.filter((call) => call.name === "exec");
+    if (submissions.length !== observation.data.submittedExecCalls ||
+        receipts.length !== submissions.length)
+        return false;
+    return receipts.every((receipt, index) => receipt.completeness === "complete" &&
+        receipt.ordinal === submissions[index]?.ordinal);
+}
+const MALFORMED = Symbol("malformed native control event");
+function assistantBlocks(event) {
+    if (event === MALFORMED)
+        return MALFORMED;
+    if (!assistantEvent(event))
+        return null;
+    const content = isRecord(event.message) ? event.message.content : null;
+    return isUnknownArray(content) ? content : MALFORMED;
+}
+function nativeBlock(value) {
+    const types = ["text", "thinking", "redacted_thinking", "tool_use"];
+    return isRecord(value) && types.includes(String(value.type)) ? value : null;
+}
+function toolIdentity(block, ids) {
+    if (!label(block.id, 128) || !label(block.name, 256) || ids.has(block.id))
+        return null;
+    return { id: block.id, name: block.name };
+}
+class ClaudeNativeControls {
+    calls = [];
+    ids = new Set();
+    malformed = false;
+    truncated = false;
+    parse(stream) {
+        for (const line of stream.lines) {
+            if (!this.observeEvent(line.parsed ? line.value : MALFORMED))
+                break;
+        }
+    }
+    observeEvent(event) {
+        const blocks = assistantBlocks(event);
+        if (blocks === null)
+            return true;
+        if (blocks === MALFORMED) {
+            this.malformed = true;
+            return true;
+        }
+        for (const block of blocks)
+            if (!this.observeBlock(block))
+                return false;
+        return true;
+    }
+    observeBlock(value) {
+        const block = nativeBlock(value);
+        if (!block) {
+            this.malformed = true;
+            return true;
+        }
+        if (block.type !== "tool_use")
+            return true;
+        const identity = toolIdentity(block, this.ids);
+        if (!identity) {
+            this.malformed = true;
+            return true;
+        }
+        this.ids.add(identity.id);
+        if (this.calls.length >= MAX_CALLS) {
+            this.truncated = true;
+            return false;
+        }
+        this.calls.push({
+            ordinal: this.calls.length,
+            namespace: "claude",
+            name: identity.name,
+        });
+        return true;
+    }
+}
+/** Observe all native labels without retaining arguments or interpreting policy. */
+export function claudeNativeControls(stream, exitCode) {
+    const events = parseClaudeEvents(stream);
+    const summary = summarizeClaudeEvents(events, exitCode);
+    const controls = new ClaudeNativeControls();
+    controls.parse(events);
+    return {
+        id: "sevro.host.native-controls",
+        completeness: summary.complete && !controls.malformed && !controls.truncated
+            ? "complete"
+            : "partial",
+        data: {
+            method: "native_control_calls",
+            calls: controls.calls,
+            acceptedAgentCount: null,
+            submittedExecCalls: null,
+            truncated: controls.truncated,
+        },
+    };
+}
+function assistantEvent(value) {
+    return isRecord(value) && value.type === "assistant";
+}
+//# sourceMappingURL=native-controls.js.map

package/dist/src/hosts/native-controls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-controls.js","sourceRoot":"","sources":["native-controls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,2BAAwB;AAC3D,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAElB,2BAAwB;AAIzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAuBtB,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW;IACxC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAAmE;IAEnE,MAAM,QAAQ,GACZ,WAAW,CAAC,YAAY,KAAK,UAAU,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC7E,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,YAAY,EAAE,mBAAmB,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC;QACrE,IAAI,EAAE;YACJ,MAAM,EAAE,sBAAsB;YAC9B,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBACvE,OAAO;gBACP,SAAS;gBACT,IAAI;aACL,CAAC,CAAC;YACH,kBAAkB,EAAE,QAAQ;gBAC1B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;gBACxC,CAAC,CAAC,IAAI;YACR,wBAAwB,EAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;YAChE,QAAQ,EAAE;gBACR,WAAW,EAAE,WAAW,CAAC,YAAY;gBACrC,cAAc,EAAE,kBAAkB,CAAC,WAAW,CAAC;oBAC7C,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,SAAS;gBACb,cAAc,EAAE,qBAAqB;aACtC;YACD,GAAG,YAAY,CAAC,WAAW,CAAC;YAC5B,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;SAC5C;KACF,CAAC;AACJ,CAAC;AACD,SAAS,YAAY,CACnB,WAAmE;IAEnE,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,KAAK,UAAU,CAAC;IACzD,OAAO;QACL,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;QACzE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACnC,CAAC;AACJ,CAAC;AACD,SAAS,mBAAmB,CAC1B,MAAgD,EAChD,QAAiB;IAEjB,OAAO,MAAM,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACjE,CAAC;AACD,SAAS,YAAY,CAAC,QAAuC;IAC3D,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CACzB,WAAmE;IAEnE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CACnD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAC/B,CAAC;IACF,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,CAAC,kBAAkB;QAC1D,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAEtC,OAAO,KAAK,CAAC;IACf,OAAO,QAAQ,CAAC,KAAK,CACnB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACjB,OAAO,CAAC,YAAY,KAAK,UAAU;QACnC,OAAO,CAAC,OAAO,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAE3D,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CACnB,KAAY,EACZ,GAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,oBAAoB;IACf,KAAK,GAAW,EAAE,CAAC;IACnB,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,SAAS,GAAG,KAAK,CAAC;IAClB,SAAS,GAAG,KAAK,CAAC;IAElB,KAAK,CAAC,MAAoB;QACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAE,MAAM;QACtE,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC1B,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAClC,MAA6B,EAC7B,QAAgB;IAEhB,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO;QACL,EAAE,EAAE,4BAA4B;QAChC,YAAY,EACV,OAAO,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS;YAC5D,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,SAAS;QACf,IAAI,EAAE;YACJ,MAAM,EAAE,sBAAsB;YAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,kBAAkB,EAAE,IAAI;YACxB,kBAAkB,EAAE,IAAI;YACxB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;AACvD,CAAC","sourcesContent":["import { isRecord, isUnknownArray } from \"../value-guards\";\nimport {\n  summarizeClaudeEvents,\n  parseClaudeEvents,\n  type ClaudeEvents,\n} from \"./claude-events\";\nimport type { codexNativeCallObservation } from \"./codex-native-calls\";\nimport type { ExecCallReceipt } from \"./codex-exec-controls\";\n\nconst MAX_CALLS = 128;\ntype Call = { ordinal: number; namespace: string; name: string };\ntype Entry = Record<string, unknown>;\n\nexport interface NativeControlObservation {\n  id: \"sevro.host.native-controls\";\n  completeness: \"complete\" | \"partial\" | \"unavailable\";\n  data: {\n    method: \"native_control_calls\";\n    calls: Call[];\n    acceptedAgentCount: number | null;\n    directAcceptedAgentCount?: number;\n    coverage?: {\n      nativeCalls: NativeControlObservation[\"completeness\"];\n      execInspection: \"complete\" | \"partial\";\n      acceptedAgents: \"direct_native_calls\";\n    };\n    submittedExecCalls: number | null;\n    execCalls?: ExecCallReceipt[];\n    truncated: boolean | null;\n  };\n}\n\nfunction label(value: unknown, max: number): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= max &&\n    /^[A-Za-z0-9_.:-]+$/.test(value)\n  );\n}\n\nexport function codexNativeControls(\n  observation: Awaited<ReturnType<typeof codexNativeCallObservation>>,\n): NativeControlObservation {\n  const complete =\n    observation.completeness === \"complete\" && inspectedExecCalls(observation);\n  return {\n    id: \"sevro.host.native-controls\",\n    completeness: controlCompleteness(observation.completeness, complete),\n    data: {\n      method: \"native_control_calls\",\n      calls: observation.data.toolCalls.map(({ ordinal, namespace, name }) => ({\n        ordinal,\n        namespace,\n        name,\n      })),\n      acceptedAgentCount: complete\n        ? observation.data.acceptedSpawns.length\n        : null,\n      directAcceptedAgentCount: observation.data.acceptedSpawns.length,\n      coverage: {\n        nativeCalls: observation.completeness,\n        execInspection: inspectedExecCalls(observation)\n          ? \"complete\"\n          : \"partial\",\n        acceptedAgents: \"direct_native_calls\",\n      },\n      ...nativeCounts(observation),\n      ...execEvidence(observation.data.execCalls),\n    },\n  };\n}\nfunction nativeCounts(\n  observation: Awaited<ReturnType<typeof codexNativeCallObservation>>,\n) {\n  const complete = observation.completeness === \"complete\";\n  return {\n    submittedExecCalls: complete ? observation.data.submittedExecCalls : null,\n    truncated: complete ? false : null,\n  };\n}\nfunction controlCompleteness(\n  source: NativeControlObservation[\"completeness\"],\n  complete: boolean,\n): NativeControlObservation[\"completeness\"] {\n  return source === \"complete\" && !complete ? \"partial\" : source;\n}\nfunction execEvidence(receipts: ExecCallReceipt[] | undefined) {\n  return receipts ? { execCalls: receipts } : {};\n}\n\nfunction inspectedExecCalls(\n  observation: Awaited<ReturnType<typeof codexNativeCallObservation>>,\n): boolean {\n  const receipts = observation.data.execCalls ?? [];\n  const submissions = observation.data.toolCalls.filter(\n    (call) => call.name === \"exec\",\n  );\n  if (\n    submissions.length !== observation.data.submittedExecCalls ||\n    receipts.length !== submissions.length\n  )\n    return false;\n  return receipts.every(\n    (receipt, index) =>\n      receipt.completeness === \"complete\" &&\n      receipt.ordinal === submissions[index]?.ordinal,\n  );\n}\n\nconst MALFORMED = Symbol(\"malformed native control event\");\n\nfunction assistantBlocks(event: unknown): unknown[] | null | typeof MALFORMED {\n  if (event === MALFORMED) return MALFORMED;\n  if (!assistantEvent(event)) return null;\n  const content = isRecord(event.message) ? event.message.content : null;\n  return isUnknownArray(content) ? content : MALFORMED;\n}\n\nfunction nativeBlock(value: unknown): Entry | null {\n  const types = [\"text\", \"thinking\", \"redacted_thinking\", \"tool_use\"];\n  return isRecord(value) && types.includes(String(value.type)) ? value : null;\n}\n\nfunction toolIdentity(\n  block: Entry,\n  ids: Set<string>,\n): { id: string; name: string } | null {\n  if (!label(block.id, 128) || !label(block.name, 256) || ids.has(block.id))\n    return null;\n  return { id: block.id, name: block.name };\n}\n\nclass ClaudeNativeControls {\n  readonly calls: Call[] = [];\n  readonly ids = new Set<string>();\n  malformed = false;\n  truncated = false;\n\n  parse(stream: ClaudeEvents): void {\n    for (const line of stream.lines) {\n      if (!this.observeEvent(line.parsed ? line.value : MALFORMED)) break;\n    }\n  }\n\n  private observeEvent(event: unknown): boolean {\n    const blocks = assistantBlocks(event);\n    if (blocks === null) return true;\n    if (blocks === MALFORMED) {\n      this.malformed = true;\n      return true;\n    }\n    for (const block of blocks) if (!this.observeBlock(block)) return false;\n    return true;\n  }\n\n  private observeBlock(value: unknown): boolean {\n    const block = nativeBlock(value);\n    if (!block) {\n      this.malformed = true;\n      return true;\n    }\n    if (block.type !== \"tool_use\") return true;\n    const identity = toolIdentity(block, this.ids);\n    if (!identity) {\n      this.malformed = true;\n      return true;\n    }\n    this.ids.add(identity.id);\n    if (this.calls.length >= MAX_CALLS) {\n      this.truncated = true;\n      return false;\n    }\n    this.calls.push({\n      ordinal: this.calls.length,\n      namespace: \"claude\",\n      name: identity.name,\n    });\n    return true;\n  }\n}\n\n/** Observe all native labels without retaining arguments or interpreting policy. */\nexport function claudeNativeControls(\n  stream: string | ClaudeEvents,\n  exitCode: number,\n): NativeControlObservation {\n  const events = parseClaudeEvents(stream);\n  const summary = summarizeClaudeEvents(events, exitCode);\n  const controls = new ClaudeNativeControls();\n  controls.parse(events);\n  return {\n    id: \"sevro.host.native-controls\",\n    completeness:\n      summary.complete && !controls.malformed && !controls.truncated\n        ? \"complete\"\n        : \"partial\",\n    data: {\n      method: \"native_control_calls\",\n      calls: controls.calls,\n      acceptedAgentCount: null,\n      submittedExecCalls: null,\n      truncated: controls.truncated,\n    },\n  };\n}\n\nfunction assistantEvent(value: unknown): value is Entry {\n  return isRecord(value) && value.type === \"assistant\";\n}\n"]}

package/dist/src/hosts/native-request.js

@@ -0,0 +1,33 @@
+import { join } from "node:path";
+import { requireCandidateRuntime, requireCandidateArtifactRoots, } from "../candidate-artifacts.js";
+import { requireNativeTranscriptView } from "../native-transcript-state.js";
+import { isOptionalNonblankString } from "../value-guards.js";
+export const MAX_HOST_TIMEOUT_MS = 30 * 60_000;
+export function validHostTimeout(timeoutMs) {
+    return (Number.isSafeInteger(timeoutMs) &&
+        timeoutMs >= 1 &&
+        timeoutMs <= MAX_HOST_TIMEOUT_MS);
+}
+/** Common admission checks run before native state or processes are allocated. */
+export async function validateNativeHostRequest(request, host) {
+    requireFollowUp(request.followUpPrompt, host);
+    await requireNativeTranscriptView(request.candidateTranscriptRoot);
+    await requireCandidateRuntime(request.candidateRuntimeRoot, request.runtimeRole);
+    await requireCandidateArtifactRoots(request.candidateArtifactRoots);
+    requireFixtureBin(request);
+    requirePassiveRequest(request, host);
+}
+function requireFollowUp(prompt, host) {
+    if (!isOptionalNonblankString(prompt))
+        throw new Error(`${host} follow-up prompt must be nonempty`);
+}
+function requireFixtureBin(request) {
+    if (request.fixtureBinDir !== undefined &&
+        request.fixtureBinDir !== join(request.workspace, ".git", "fixture-bin"))
+        throw new Error("fixture binary path is outside the workspace");
+}
+function requirePassiveRequest(request, host) {
+    if (request.instrumentation?.length || request.condition !== "passive")
+        throw new Error(`${host} enforcement instrumentation is unavailable`);
+}
+//# sourceMappingURL=native-request.js.map

package/dist/src/hosts/native-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-request.js","sourceRoot":"","sources":["native-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAEjC,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,kCAA+B;AAChC,OAAO,EAAE,2BAA2B,EAAE,sCAAmC;AACzE,OAAO,EAAE,wBAAwB,EAAE,2BAAwB;AAE3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE/C,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,CACL,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAC/B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,mBAAmB,CACjC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA0C,EAC1C,IAAwB;IAExB,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,2BAA2B,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACnE,MAAM,uBAAuB,CAC3B,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,WAAW,CACpB,CAAC;IACF,MAAM,6BAA6B,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B,EAAE,IAAY;IAC/D,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0C;IACnE,IACE,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC;QAExE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA0C,EAC1C,IAAY;IAEZ,IAAI,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAC;AAC1E,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport type { HostAdapter } from \"../engine\";\nimport {\n  requireCandidateRuntime,\n  requireCandidateArtifactRoots,\n} from \"../candidate-artifacts\";\nimport { requireNativeTranscriptView } from \"../native-transcript-state\";\nimport { isOptionalNonblankString } from \"../value-guards\";\n\nexport const MAX_HOST_TIMEOUT_MS = 30 * 60_000;\n\nexport function validHostTimeout(timeoutMs: number): boolean {\n  return (\n    Number.isSafeInteger(timeoutMs) &&\n    timeoutMs >= 1 &&\n    timeoutMs <= MAX_HOST_TIMEOUT_MS\n  );\n}\n\n/** Common admission checks run before native state or processes are allocated. */\nexport async function validateNativeHostRequest(\n  request: Parameters<HostAdapter[\"run\"]>[0],\n  host: \"Codex\" | \"Claude\",\n): Promise<void> {\n  requireFollowUp(request.followUpPrompt, host);\n  await requireNativeTranscriptView(request.candidateTranscriptRoot);\n  await requireCandidateRuntime(\n    request.candidateRuntimeRoot,\n    request.runtimeRole,\n  );\n  await requireCandidateArtifactRoots(request.candidateArtifactRoots);\n  requireFixtureBin(request);\n  requirePassiveRequest(request, host);\n}\n\nfunction requireFollowUp(prompt: string | undefined, host: string): void {\n  if (!isOptionalNonblankString(prompt))\n    throw new Error(`${host} follow-up prompt must be nonempty`);\n}\n\nfunction requireFixtureBin(request: Parameters<HostAdapter[\"run\"]>[0]): void {\n  if (\n    request.fixtureBinDir !== undefined &&\n    request.fixtureBinDir !== join(request.workspace, \".git\", \"fixture-bin\")\n  )\n    throw new Error(\"fixture binary path is outside the workspace\");\n}\n\nfunction requirePassiveRequest(\n  request: Parameters<HostAdapter[\"run\"]>[0],\n  host: string,\n): void {\n  if (request.instrumentation?.length || request.condition !== \"passive\")\n    throw new Error(`${host} enforcement instrumentation is unavailable`);\n}\n"]}

package/dist/src/hosts/process-lifecycle.js

@@ -0,0 +1,167 @@
+import { spawn } from "../runtime-process.js";
+import { validHostTimeout } from "./native-request.js";
+import { ProcessDeadline } from "../process-lifecycle.js";
+import { captureBoundedBytes, captureBoundedText, terminateOwnedProcessGroup, } from "../process-lifecycle.js";
+import { HostExecutionFailure } from "../evaluation/types.js";
+import { HostProcessDiagnostics, } from "../host-diagnostics.js";
+export const MAX_STDERR_BYTES = 64 * 1024;
+export const MAX_EVENT_BYTES = 8 * 1024 * 1024;
+class HostProcessInterruption extends Error {
+    reason;
+    constructor(host, reason) {
+        super(`${host} run ${reason === "timeout" ? "timed out" : "cancelled"}`);
+        this.reason = reason;
+    }
+}
+/** Race completion against the host deadline and cancellation, then release listeners. */
+async function awaitHostProcess(proc, completed, options) {
+    const deadline = new ProcessDeadline({
+        ...options,
+        interruption: (reason) => new HostProcessInterruption(options.host, reason),
+    });
+    try {
+        return await deadline.wait(completed);
+    }
+    catch (error) {
+        terminateOwnedProcessGroup(proc);
+        await proc.exited;
+        throw error;
+    }
+    finally {
+        deadline.dispose();
+    }
+}
+export function hostFailureMessage(result, host) {
+    const failure = result.processFailure;
+    if (!failure)
+        return undefined;
+    const labels = {
+        "isolation-preflight": `${host} isolation preflight`,
+        "executable-preflight": `${host} executable preflight`,
+        execution: `${host} run`,
+    };
+    if (!Object.hasOwn(labels, failure.phase))
+        return undefined;
+    return `${labels[failure.phase]} ${failureSuffix(failure)}`;
+}
+function failureSuffix(failure) {
+    if (failure.reason === "timeout" && validHostTimeout(failure.timeoutMs))
+        return `timed out after ${failure.timeoutMs / 1000} s`;
+    return failure.reason === "cancelled" ? "cancelled" : "failed";
+}
+export class HostProcessFailure extends HostExecutionFailure {
+    constructor(host, phase, process, reason = "exit", timeoutMs = 60_000) {
+        const failure = { phase, reason, timeoutMs };
+        const result = {
+            finalMessage: null,
+            complete: false,
+            executionFailed: true,
+            actualCondition: "passive",
+            processFailure: failure,
+            artifacts: [
+                {
+                    id: `${host.toLowerCase()}.process`,
+                    bytes: Buffer.from(JSON.stringify({
+                        ...failure,
+                        code: process.code,
+                        signal: process.signal,
+                        durationMs: process.durationMs,
+                        stderrTruncated: process.stderrTruncated,
+                    })),
+                },
+                { id: `${host.toLowerCase()}.stderr`, bytes: process.stderr },
+            ],
+        };
+        super(hostFailureMessage(result, host), result);
+    }
+}
+async function writeHostInput(proc, input) {
+    if (input === undefined)
+        return;
+    if (!proc.stdin || typeof proc.stdin === "number")
+        throw new Error("Codex input pipe unavailable");
+    await proc.stdin.write(input);
+    await proc.stdin.end();
+}
+function spawnHostProcess(options, capture) {
+    try {
+        return spawn(options.argv, {
+            cwd: options.cwd,
+            env: options.env,
+            detached: process.platform !== "win32",
+            stdin: options.input === undefined ? "ignore" : "pipe",
+            stdout: "pipe",
+            stderr: "pipe",
+        });
+    }
+    catch (cause) {
+        capture.recordUnstarted();
+        throw cause;
+    }
+}
+function processPhase(options) {
+    return options.phase ?? "execution";
+}
+function requireHostProcess(options) {
+    if (options.signal?.aborted)
+        throw new Error(`${options.host} run cancelled`);
+}
+function hostCompletion(proc, options, capture) {
+    const started = performance.now();
+    const stdout = captureBoundedText(proc.stdout, {
+        limit: MAX_EVENT_BYTES,
+        overflow: "reject",
+        exceeded: () => new Error(`${options.host} event stream exceeds the size limit`),
+        observe: (bytes) => {
+            capture.stdout.add(bytes);
+        },
+    });
+    const stderr = captureBoundedBytes(proc.stderr, {
+        limit: MAX_STDERR_BYTES,
+        overflow: "truncate",
+        cancelOnError: true,
+        observe: (bytes) => {
+            capture.stderr.add(bytes);
+        },
+    });
+    const input = writeHostInput(proc, options.input);
+    const completed = Promise.all([stdout, proc.exited, stderr, input]).then(([out, code, err]) => ({
+        out,
+        code,
+        stderr: err.bytes,
+        stderrTruncated: err.truncated,
+        signal: proc.signalCode ?? null,
+        durationMs: performance.now() - started,
+    }));
+    return { completed, drains: [stdout, stderr, input], started };
+}
+export async function runHostProcess(options) {
+    requireHostProcess(options);
+    const capture = new HostProcessDiagnostics(options.diagnostics);
+    const proc = spawnHostProcess(options, capture);
+    const { completed, drains, started } = hostCompletion(proc, options, capture);
+    try {
+        const result = await awaitHostProcess(proc, completed, {
+            ...options,
+        });
+        await capture.record(proc);
+        return result;
+    }
+    catch (cause) {
+        await Promise.allSettled(drains);
+        if (!(cause instanceof HostProcessInterruption)) {
+            await capture.record(proc, "error");
+            throw cause;
+        }
+        await capture.record(proc, cause.reason);
+        throw new HostProcessFailure(options.host, processPhase(options), {
+            code: await proc.exited,
+            out: capture.stdout.bytes().toString("utf8"),
+            stderr: capture.stderr.bytes(),
+            stderrTruncated: capture.stderr.truncated,
+            signal: proc.signalCode ?? null,
+            durationMs: performance.now() - started,
+        }, cause.reason, options.timeoutMs);
+    }
+}
+//# sourceMappingURL=process-lifecycle.js.map

package/dist/src/hosts/process-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-lifecycle.js","sourceRoot":"","sources":["process-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAmB,8BAA2B;AAC5D,OAAO,EAAE,gBAAgB,EAAE,4BAAyB;AACpD,OAAO,EAAE,eAAe,EAAE,gCAA6B;AACvD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,GAC3B,gCAA6B;AAC9B,OAAO,EAAE,oBAAoB,EAAmB,+BAA4B;AAC5E,OAAO,EACL,sBAAsB,GAEvB,+BAA4B;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,uBAAwB,SAAQ,KAAK;IAG9B;IAFX,YACE,IAAY,EACH,MAA+B;QAExC,KAAK,CAAC,GAAG,IAAI,QAAQ,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAFhE,WAAM,GAAN,MAAM,CAAyB;IAG1C,CAAC;CACF;AAED,0FAA0F;AAC1F,KAAK,UAAU,gBAAgB,CAC7B,IAAgB,EAChB,SAAqB,EACrB,OAA2B;IAE3B,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;QACnC,GAAG,OAAO;QACV,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KAC5E,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC;QAClB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAYD,MAAM,UAAU,kBAAkB,CAChC,MAAkB,EAClB,IAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG;QACb,qBAAqB,EAAE,GAAG,IAAI,sBAAsB;QACpD,sBAAsB,EAAE,GAAG,IAAI,uBAAuB;QACtD,SAAS,EAAE,GAAG,IAAI,MAAM;KACzB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CACpB,OAAkD;IAElD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC;QACrE,OAAO,mBAAmB,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC;IACzD,OAAO,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjE,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,oBAAoB;IAC1D,YACE,IAAwB,EACxB,KAAY,EACZ,OAA0B,EAC1B,SAA8D,MAAM,EACpE,SAAS,GAAG,MAAM;QAElB,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAe;YACzB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,SAAS;YAC1B,cAAc,EAAE,OAAO;YACvB,SAAS,EAAE;gBACT;oBACE,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU;oBACnC,KAAK,EAAE,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;wBACb,GAAG,OAAO;wBACV,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;qBACzC,CAAC,CACH;iBACF;gBACD,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;aAC9D;SACF,CAAC;QACF,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;CACF;AAcD,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,KAAc;IAC5D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC/C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA2B,EAC3B,OAA+B;IAE/B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YACtD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,OAAO,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;AACtC,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,gBAAgB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CACrB,IAAyC,EACzC,OAA2B,EAC3B,OAA+B;IAE/B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE;QAC7C,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,GAAG,EAAE,CACb,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,sCAAsC,CAAC;QAClE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE;QAC9C,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CACtE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACrB,GAAG;QACH,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,KAAK;QACjB,eAAe,EAAE,GAAG,CAAC,SAAS;QAC9B,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;QAC/B,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO;KACxC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B;IAE3B,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE;YACrD,GAAG,OAAO;SACX,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAC1B,OAAO,CAAC,IAAI,EACZ,YAAY,CAAC,OAAO,CAAC,EACrB;YACE,IAAI,EAAE,MAAM,IAAI,CAAC,MAAM;YACvB,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE;YAC9B,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;YACzC,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YAC/B,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO;SACxC,EACD,KAAK,CAAC,MAAM,EACZ,OAAO,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { spawn, type Subprocess } from \"../runtime-process\";\nimport { validHostTimeout } from \"./native-request\";\nimport { ProcessDeadline } from \"../process-lifecycle\";\nimport {\n  captureBoundedBytes,\n  captureBoundedText,\n  terminateOwnedProcessGroup,\n} from \"../process-lifecycle\";\nimport { HostExecutionFailure, type HostResult } from \"../evaluation/types\";\nimport {\n  HostProcessDiagnostics,\n  type HostDiagnostics,\n} from \"../host-diagnostics\";\n\nexport const MAX_STDERR_BYTES = 64 * 1024;\nexport const MAX_EVENT_BYTES = 8 * 1024 * 1024;\nclass HostProcessInterruption extends Error {\n  constructor(\n    host: string,\n    readonly reason: \"timeout\" | \"cancelled\",\n  ) {\n    super(`${host} run ${reason === \"timeout\" ? \"timed out\" : \"cancelled\"}`);\n  }\n}\n\n/** Race completion against the host deadline and cancellation, then release listeners. */\nasync function awaitHostProcess<T>(\n  proc: Subprocess,\n  completed: Promise<T>,\n  options: HostProcessOptions,\n): Promise<T> {\n  const deadline = new ProcessDeadline({\n    ...options,\n    interruption: (reason) => new HostProcessInterruption(options.host, reason),\n  });\n  try {\n    return await deadline.wait(completed);\n  } catch (error) {\n    terminateOwnedProcessGroup(proc);\n    await proc.exited;\n    throw error;\n  } finally {\n    deadline.dispose();\n  }\n}\n\nexport type Phase = NonNullable<HostResult[\"processFailure\"]>[\"phase\"];\nexport type HostProcessResult = {\n  code: number;\n  out: string;\n  stderr: Uint8Array;\n  stderrTruncated: boolean;\n  signal: string | null;\n  durationMs: number;\n};\n\nexport function hostFailureMessage(\n  result: HostResult,\n  host: string,\n): string | undefined {\n  const failure = result.processFailure;\n  if (!failure) return undefined;\n  const labels = {\n    \"isolation-preflight\": `${host} isolation preflight`,\n    \"executable-preflight\": `${host} executable preflight`,\n    execution: `${host} run`,\n  };\n  if (!Object.hasOwn(labels, failure.phase)) return undefined;\n  return `${labels[failure.phase]} ${failureSuffix(failure)}`;\n}\n\nfunction failureSuffix(\n  failure: NonNullable<HostResult[\"processFailure\"]>,\n): string {\n  if (failure.reason === \"timeout\" && validHostTimeout(failure.timeoutMs))\n    return `timed out after ${failure.timeoutMs / 1000} s`;\n  return failure.reason === \"cancelled\" ? \"cancelled\" : \"failed\";\n}\n\nexport class HostProcessFailure extends HostExecutionFailure {\n  constructor(\n    host: \"Codex\" | \"Claude\",\n    phase: Phase,\n    process: HostProcessResult,\n    reason: NonNullable<HostResult[\"processFailure\"]>[\"reason\"] = \"exit\",\n    timeoutMs = 60_000,\n  ) {\n    const failure = { phase, reason, timeoutMs };\n    const result: HostResult = {\n      finalMessage: null,\n      complete: false,\n      executionFailed: true,\n      actualCondition: \"passive\",\n      processFailure: failure,\n      artifacts: [\n        {\n          id: `${host.toLowerCase()}.process`,\n          bytes: Buffer.from(\n            JSON.stringify({\n              ...failure,\n              code: process.code,\n              signal: process.signal,\n              durationMs: process.durationMs,\n              stderrTruncated: process.stderrTruncated,\n            }),\n          ),\n        },\n        { id: `${host.toLowerCase()}.stderr`, bytes: process.stderr },\n      ],\n    };\n    super(hostFailureMessage(result, host), result);\n  }\n}\n\nexport interface HostProcessOptions {\n  host: \"Codex\" | \"Claude\";\n  diagnostics: HostDiagnostics;\n  argv: string[];\n  cwd: string;\n  env: Record<string, string>;\n  input?: string;\n  timeoutMs: number;\n  signal?: AbortSignal;\n  phase?: Phase;\n}\n\nasync function writeHostInput(proc: Subprocess, input?: string): Promise<void> {\n  if (input === undefined) return;\n  if (!proc.stdin || typeof proc.stdin === \"number\")\n    throw new Error(\"Codex input pipe unavailable\");\n  await proc.stdin.write(input);\n  await proc.stdin.end();\n}\n\nfunction spawnHostProcess(\n  options: HostProcessOptions,\n  capture: HostProcessDiagnostics,\n) {\n  try {\n    return spawn(options.argv, {\n      cwd: options.cwd,\n      env: options.env,\n      detached: process.platform !== \"win32\",\n      stdin: options.input === undefined ? \"ignore\" : \"pipe\",\n      stdout: \"pipe\",\n      stderr: \"pipe\",\n    });\n  } catch (cause) {\n    capture.recordUnstarted();\n    throw cause;\n  }\n}\n\nfunction processPhase(options: HostProcessOptions): Phase {\n  return options.phase ?? \"execution\";\n}\n\nfunction requireHostProcess(options: HostProcessOptions): void {\n  if (options.signal?.aborted) throw new Error(`${options.host} run cancelled`);\n}\n\nfunction hostCompletion(\n  proc: ReturnType<typeof spawnHostProcess>,\n  options: HostProcessOptions,\n  capture: HostProcessDiagnostics,\n) {\n  const started = performance.now();\n  const stdout = captureBoundedText(proc.stdout, {\n    limit: MAX_EVENT_BYTES,\n    overflow: \"reject\",\n    exceeded: () =>\n      new Error(`${options.host} event stream exceeds the size limit`),\n    observe: (bytes) => {\n      capture.stdout.add(bytes);\n    },\n  });\n  const stderr = captureBoundedBytes(proc.stderr, {\n    limit: MAX_STDERR_BYTES,\n    overflow: \"truncate\",\n    cancelOnError: true,\n    observe: (bytes) => {\n      capture.stderr.add(bytes);\n    },\n  });\n  const input = writeHostInput(proc, options.input);\n  const completed = Promise.all([stdout, proc.exited, stderr, input]).then(\n    ([out, code, err]) => ({\n      out,\n      code,\n      stderr: err.bytes,\n      stderrTruncated: err.truncated,\n      signal: proc.signalCode ?? null,\n      durationMs: performance.now() - started,\n    }),\n  );\n  return { completed, drains: [stdout, stderr, input], started };\n}\n\nexport async function runHostProcess(\n  options: HostProcessOptions,\n): Promise<HostProcessResult> {\n  requireHostProcess(options);\n  const capture = new HostProcessDiagnostics(options.diagnostics);\n  const proc = spawnHostProcess(options, capture);\n  const { completed, drains, started } = hostCompletion(proc, options, capture);\n  try {\n    const result = await awaitHostProcess(proc, completed, {\n      ...options,\n    });\n    await capture.record(proc);\n    return result;\n  } catch (cause) {\n    await Promise.allSettled(drains);\n    if (!(cause instanceof HostProcessInterruption)) {\n      await capture.record(proc, \"error\");\n      throw cause;\n    }\n    await capture.record(proc, cause.reason);\n    throw new HostProcessFailure(\n      options.host,\n      processPhase(options),\n      {\n        code: await proc.exited,\n        out: capture.stdout.bytes().toString(\"utf8\"),\n        stderr: capture.stderr.bytes(),\n        stderrTruncated: capture.stderr.truncated,\n        signal: proc.signalCode ?? null,\n        durationMs: performance.now() - started,\n      },\n      cause.reason,\n      options.timeoutMs,\n    );\n  }\n}\n"]}

package/dist/src/hosts/protected-worktrees.js

@@ -0,0 +1,81 @@
+import { spawnSync } from "../runtime-process.js";
+import { isMissingFile } from "../fixtures/tools.js";
+import { lstat, readdir, realpath, stat } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, isAbsolute, join } from "node:path";
+async function containingRepository(root) {
+    let directory = (await stat(root)).isDirectory() ? root : dirname(root);
+    for (;;) {
+        if (await hasRepositoryMetadata(directory))
+            return directory;
+        const parent = dirname(directory);
+        if (parent === directory)
+            return null;
+        directory = parent;
+    }
+}
+async function hasRepositoryMetadata(directory) {
+    try {
+        const path = join(directory, ".git");
+        const metadata = await lstat(path);
+        return !(await emptyTemporaryGitPlaceholder(directory, path, metadata));
+    }
+    catch (cause) {
+        if (isMissingFile(cause))
+            return false;
+        throw new Error("protected repository metadata is unreadable", { cause });
+    }
+}
+async function emptyTemporaryGitPlaceholder(directory, path, metadata) {
+    // Codex's Linux sandbox can leave an empty mount placeholder at /tmp/.git.
+    return (process.platform === "linux" &&
+        (directory === "/tmp" || directory === tmpdir()) &&
+        metadata.isDirectory() &&
+        (await readdir(path)).length === 0);
+}
+/** Protect the primary checkout and linked worktrees without requiring Git. */
+export async function protectedWorktrees(root) {
+    const repository = await containingRepository(root);
+    if (!repository)
+        return [];
+    const paths = listWorktreePaths(repository);
+    const existing = [];
+    for (const path of paths) {
+        try {
+            existing.push(await realpath(path));
+        }
+        catch (error) {
+            if (!isMissingFile(error))
+                throw new Error("protected repository worktree is unreadable", {
+                    cause: error,
+                });
+        }
+    }
+    return existing;
+}
+function listWorktreePaths(repository) {
+    const result = spawnSync(["git", "-C", repository, "worktree", "list", "--porcelain", "-z"], {
+        env: {
+            PATH: process.env.PATH ?? "/usr/bin:/bin",
+            LC_ALL: "C",
+            GIT_CONFIG_NOSYSTEM: "1",
+            GIT_CONFIG_GLOBAL: "/dev/null",
+        },
+        stdout: "pipe",
+        stderr: "ignore",
+    });
+    if (result.exitCode !== 0 || result.stdout.byteLength > 1024 * 1024)
+        throw new Error("protected repository worktrees are unavailable");
+    const paths = result.stdout
+        .toString()
+        .split("\0")
+        .filter((field) => field.startsWith("worktree "))
+        .map((field) => field.slice(9));
+    validateWorktreePaths(paths);
+    return paths;
+}
+function validateWorktreePaths(paths) {
+    if (!paths.length || paths.some((path) => !isAbsolute(path)))
+        throw new Error("protected repository worktree paths are invalid");
+}
+//# sourceMappingURL=protected-worktrees.js.map

package/dist/src/hosts/protected-worktrees.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-worktrees.js","sourceRoot":"","sources":["protected-worktrees.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,8BAA2B;AAC/C,OAAO,EAAE,aAAa,EAAE,6BAA0B;AAClD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB;AAClE,OAAO,EAAE,MAAM,EAAE,gBAAgB;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB;AAEtD,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,IAAI,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,SAAS,CAAC;QACR,IAAI,MAAM,qBAAqB,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC,MAAM,4BAA4B,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,SAAiB,EACjB,IAAY,EACZ,QAA2C;IAE3C,2EAA2E;IAC3E,OAAO,CACL,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChD,QAAQ,CAAC,WAAW,EAAE;QACtB,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,EAAE;oBAC7D,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,MAAM,GAAG,SAAS,CACtB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAClE;QACE,GAAG,EAAE;YACH,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,eAAe;YACzC,MAAM,EAAE,GAAG;YACX,mBAAmB,EAAE,GAAG;YACxB,iBAAiB,EAAE,WAAW;SAC/B;QACD,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;KACjB,CACF,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,IAAI;QACjE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM;SACxB,QAAQ,EAAE;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAe;IAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC","sourcesContent":["import { spawnSync } from \"../runtime-process\";\nimport { isMissingFile } from \"../fixtures/tools\";\nimport { lstat, readdir, realpath, stat } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, isAbsolute, join } from \"node:path\";\n\nasync function containingRepository(root: string): Promise<string | null> {\n  let directory = (await stat(root)).isDirectory() ? root : dirname(root);\n  for (;;) {\n    if (await hasRepositoryMetadata(directory)) return directory;\n    const parent = dirname(directory);\n    if (parent === directory) return null;\n    directory = parent;\n  }\n}\n\nasync function hasRepositoryMetadata(directory: string): Promise<boolean> {\n  try {\n    const path = join(directory, \".git\");\n    const metadata = await lstat(path);\n    return !(await emptyTemporaryGitPlaceholder(directory, path, metadata));\n  } catch (cause) {\n    if (isMissingFile(cause)) return false;\n    throw new Error(\"protected repository metadata is unreadable\", { cause });\n  }\n}\n\nasync function emptyTemporaryGitPlaceholder(\n  directory: string,\n  path: string,\n  metadata: Awaited<ReturnType<typeof lstat>>,\n): Promise<boolean> {\n  // Codex's Linux sandbox can leave an empty mount placeholder at /tmp/.git.\n  return (\n    process.platform === \"linux\" &&\n    (directory === \"/tmp\" || directory === tmpdir()) &&\n    metadata.isDirectory() &&\n    (await readdir(path)).length === 0\n  );\n}\n\n/** Protect the primary checkout and linked worktrees without requiring Git. */\nexport async function protectedWorktrees(root: string): Promise<string[]> {\n  const repository = await containingRepository(root);\n  if (!repository) return [];\n  const paths = listWorktreePaths(repository);\n  const existing: string[] = [];\n  for (const path of paths) {\n    try {\n      existing.push(await realpath(path));\n    } catch (error) {\n      if (!isMissingFile(error))\n        throw new Error(\"protected repository worktree is unreadable\", {\n          cause: error,\n        });\n    }\n  }\n  return existing;\n}\n\nfunction listWorktreePaths(repository: string): string[] {\n  const result = spawnSync(\n    [\"git\", \"-C\", repository, \"worktree\", \"list\", \"--porcelain\", \"-z\"],\n    {\n      env: {\n        PATH: process.env.PATH ?? \"/usr/bin:/bin\",\n        LC_ALL: \"C\",\n        GIT_CONFIG_NOSYSTEM: \"1\",\n        GIT_CONFIG_GLOBAL: \"/dev/null\",\n      },\n      stdout: \"pipe\",\n      stderr: \"ignore\",\n    },\n  );\n  if (result.exitCode !== 0 || result.stdout.byteLength > 1024 * 1024)\n    throw new Error(\"protected repository worktrees are unavailable\");\n  const paths = result.stdout\n    .toString()\n    .split(\"\\0\")\n    .filter((field) => field.startsWith(\"worktree \"))\n    .map((field) => field.slice(9));\n  validateWorktreePaths(paths);\n  return paths;\n}\n\nfunction validateWorktreePaths(paths: string[]): void {\n  if (!paths.length || paths.some((path) => !isAbsolute(path)))\n    throw new Error(\"protected repository worktree paths are invalid\");\n}\n"]}

package/dist/src/hosts/skill-hook-catalog.js

@@ -0,0 +1,100 @@
+import { createHash } from "node:crypto";
+import { lstat, readFile, readdir, realpath } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
+import { isRecord } from "../value-guards.js";
+const MAX_SKILLS = 128;
+const MAX_SKILL_BYTES = 1024 * 1024;
+const MAX_CATALOG_BYTES = 8 * 1024 * 1024;
+export async function codexSkillCatalogRoots(workspace, pluginRoots, nativeSkillRoots) {
+    const roots = [
+        { directory: join(workspace, ".agents/skills"), boundary: workspace },
+        ...nativeSkillRoots,
+    ];
+    for (const root of pluginRoots) {
+        const manifest = JSON.parse(await readFile(join(root, ".claude-plugin/plugin.json"), "utf8"));
+        if (!isRecord(manifest) || typeof manifest.name !== "string")
+            throw new Error("invalid skill catalog plugin manifest");
+        roots.push({
+            directory: join(root, "skills"),
+            boundary: root,
+            namespace: manifest.name,
+        });
+    }
+    return roots;
+}
+/** Snapshot only known skill mounts; shell syntax does not enter discovery. */
+export async function skillHookCatalog(roots) {
+    const catalog = { skills: [], complete: true, bytes: 0 };
+    for (const root of roots)
+        await readRoot(root, catalog);
+    return { skills: catalog.skills, catalogComplete: catalog.complete };
+}
+async function readRoot(root, catalog) {
+    try {
+        await requireCatalogRoot(root);
+        const entries = await readdir(root.directory, { withFileTypes: true });
+        const directories = catalogDirectories(entries, catalog);
+        for (const entry of directories.sort((a, b) => a.name.localeCompare(b.name))) {
+            await readSkill(root, entry.name, catalog);
+        }
+    }
+    catch (cause) {
+        if (!missing(cause))
+            catalog.complete = false;
+    }
+}
+function catalogDirectories(entries, catalog) {
+    const directories = [];
+    for (const entry of entries) {
+        if (entry.isSymbolicLink())
+            catalog.complete = false;
+        if (entry.isDirectory() && /^[A-Za-z0-9._-]+$/.test(entry.name))
+            directories.push(entry);
+    }
+    return directories;
+}
+async function requireCatalogRoot(root) {
+    const expected = resolve(await realpath(root.boundary), relative(root.boundary, root.directory));
+    if ((await realpath(root.directory)) !== expected)
+        throw new Error("redirected skill catalog root");
+}
+function missing(cause) {
+    return cause instanceof Error && "code" in cause && cause.code === "ENOENT";
+}
+async function readSkill(root, name, catalog) {
+    try {
+        const path = join(root.directory, name, "SKILL.md");
+        const file = await lstat(path);
+        if (!readableSkill(file)) {
+            catalog.complete = false;
+            return;
+        }
+        const bytes = await readFile(path);
+        if (bytes.length > MAX_SKILL_BYTES)
+            throw new Error("skill changed during catalog read");
+        addSkill(bytes, [root.namespace, name].filter(Boolean).join(":"), catalog);
+    }
+    catch (cause) {
+        if (!missing(cause))
+            catalog.complete = false;
+    }
+}
+function readableSkill(file) {
+    return file.isFile() && file.size <= MAX_SKILL_BYTES;
+}
+function addSkill(bytes, invocation, catalog) {
+    if (!bytes.length)
+        return;
+    catalog.bytes += bytes.length;
+    if (catalog.skills.length >= MAX_SKILLS ||
+        catalog.bytes > MAX_CATALOG_BYTES) {
+        catalog.complete = false;
+        return;
+    }
+    catalog.skills.push({
+        invocation,
+        sha256: createHash("sha256").update(bytes).digest("hex"),
+        body: bytes.toString("utf8"),
+    });
+}
+//# sourceMappingURL=skill-hook-catalog.js.map

package/dist/src/hosts/skill-hook-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-hook-catalog.js","sourceRoot":"","sources":["skill-hook-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB;AACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB;AAGpD,OAAO,EAAE,QAAQ,EAAE,2BAAwB;AAE3C,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAY1C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,WAAqB,EACrB,gBAAoC;IAEpC,MAAM,KAAK,GAAuB;QAChC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE;QACrE,GAAG,gBAAgB;KACpB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAClC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,EAAE,MAAM,CAAC,CACjE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAC1D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC/B,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,QAAQ,CAAC,IAAI;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAyB;IAC9D,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClE,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAsB,EAAE,OAAgB;IAC9D,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7B,EAAE,CAAC;YACF,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAiB,EAAE,OAAgB;IAC7D,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrD,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7D,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAsB;IACtD,MAAM,QAAQ,GAAG,OAAO,CACtB,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7B,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CACxC,CAAC;IACF,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,QAAQ;QAC/C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAsB,EACtB,IAAY,EACZ,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;YAChC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAuC;IAC5D,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,UAAkB,EAAE,OAAgB;IACnE,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IAC9B,IACE,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,UAAU;QACnC,OAAO,CAAC,KAAK,GAAG,iBAAiB,EACjC,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;QACzB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAClB,UAAU;QACV,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACxD,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { lstat, readFile, readdir, realpath } from \"node:fs/promises\";\nimport { join, relative, resolve } from \"node:path\";\nimport type { Dirent } from \"node:fs\";\nimport type { HookSkill } from \"./skill-hook-handler\";\nimport { isRecord } from \"../value-guards\";\n\nconst MAX_SKILLS = 128;\nconst MAX_SKILL_BYTES = 1024 * 1024;\nconst MAX_CATALOG_BYTES = 8 * 1024 * 1024;\ninterface Catalog {\n  skills: HookSkill[];\n  complete: boolean;\n  bytes: number;\n}\nexport interface SkillCatalogRoot {\n  directory: string;\n  boundary: string;\n  namespace?: string;\n}\n\nexport async function codexSkillCatalogRoots(\n  workspace: string,\n  pluginRoots: string[],\n  nativeSkillRoots: SkillCatalogRoot[],\n): Promise<SkillCatalogRoot[]> {\n  const roots: SkillCatalogRoot[] = [\n    { directory: join(workspace, \".agents/skills\"), boundary: workspace },\n    ...nativeSkillRoots,\n  ];\n  for (const root of pluginRoots) {\n    const manifest: unknown = JSON.parse(\n      await readFile(join(root, \".claude-plugin/plugin.json\"), \"utf8\"),\n    );\n    if (!isRecord(manifest) || typeof manifest.name !== \"string\")\n      throw new Error(\"invalid skill catalog plugin manifest\");\n    roots.push({\n      directory: join(root, \"skills\"),\n      boundary: root,\n      namespace: manifest.name,\n    });\n  }\n  return roots;\n}\n\n/** Snapshot only known skill mounts; shell syntax does not enter discovery. */\nexport async function skillHookCatalog(roots: SkillCatalogRoot[]) {\n  const catalog: Catalog = { skills: [], complete: true, bytes: 0 };\n  for (const root of roots) await readRoot(root, catalog);\n  return { skills: catalog.skills, catalogComplete: catalog.complete };\n}\n\nasync function readRoot(root: SkillCatalogRoot, catalog: Catalog) {\n  try {\n    await requireCatalogRoot(root);\n    const entries = await readdir(root.directory, { withFileTypes: true });\n    const directories = catalogDirectories(entries, catalog);\n    for (const entry of directories.sort((a, b) =>\n      a.name.localeCompare(b.name),\n    )) {\n      await readSkill(root, entry.name, catalog);\n    }\n  } catch (cause) {\n    if (!missing(cause)) catalog.complete = false;\n  }\n}\n\nfunction catalogDirectories(entries: Dirent[], catalog: Catalog): Dirent[] {\n  const directories: Dirent[] = [];\n  for (const entry of entries) {\n    if (entry.isSymbolicLink()) catalog.complete = false;\n    if (entry.isDirectory() && /^[A-Za-z0-9._-]+$/.test(entry.name))\n      directories.push(entry);\n  }\n  return directories;\n}\n\nasync function requireCatalogRoot(root: SkillCatalogRoot) {\n  const expected = resolve(\n    await realpath(root.boundary),\n    relative(root.boundary, root.directory),\n  );\n  if ((await realpath(root.directory)) !== expected)\n    throw new Error(\"redirected skill catalog root\");\n}\n\nfunction missing(cause: unknown): boolean {\n  return cause instanceof Error && \"code\" in cause && cause.code === \"ENOENT\";\n}\n\nasync function readSkill(\n  root: SkillCatalogRoot,\n  name: string,\n  catalog: Catalog,\n) {\n  try {\n    const path = join(root.directory, name, \"SKILL.md\");\n    const file = await lstat(path);\n    if (!readableSkill(file)) {\n      catalog.complete = false;\n      return;\n    }\n    const bytes = await readFile(path);\n    if (bytes.length > MAX_SKILL_BYTES)\n      throw new Error(\"skill changed during catalog read\");\n    addSkill(bytes, [root.namespace, name].filter(Boolean).join(\":\"), catalog);\n  } catch (cause) {\n    if (!missing(cause)) catalog.complete = false;\n  }\n}\n\nfunction readableSkill(file: Awaited<ReturnType<typeof lstat>>): boolean {\n  return file.isFile() && file.size <= MAX_SKILL_BYTES;\n}\n\nfunction addSkill(bytes: Buffer, invocation: string, catalog: Catalog) {\n  if (!bytes.length) return;\n  catalog.bytes += bytes.length;\n  if (\n    catalog.skills.length >= MAX_SKILLS ||\n    catalog.bytes > MAX_CATALOG_BYTES\n  ) {\n    catalog.complete = false;\n    return;\n  }\n  catalog.skills.push({\n    invocation,\n    sha256: createHash(\"sha256\").update(bytes).digest(\"hex\"),\n    body: bytes.toString(\"utf8\"),\n  });\n}\n"]}