@blxzer/pactile 0.5.0 → 0.6.0-beta.4

package/dist/pactile/capabilities/command.js

@@ -0,0 +1,253 @@
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import { StringDecoder } from "node:string_decoder";
+import path from "node:path";
+import { CapabilityNodeError, isInside, jsonBytes, operationDataBudget, sameFileIdentity, stopReason, stopResult, truncateUtf8, } from "./shared.js";
+import { realDirectory } from "./workspace.js";
+function fitRunOutput(data, maxOutputBytes) {
+    let stdout = data.stdout;
+    let stderr = data.stderr;
+    for (let attempt = 0; attempt < 64; attempt += 1) {
+        const wasReduced = stdout !== data.stdout || stderr !== data.stderr;
+        const candidate = {
+            ...data,
+            stdout,
+            stderr,
+            truncated: data.truncated || wasReduced,
+        };
+        if (jsonBytes(candidate) <= maxOutputBytes)
+            return candidate;
+        if (Buffer.byteLength(stdout, "utf8") >= Buffer.byteLength(stderr, "utf8")) {
+            stdout = truncateUtf8(stdout, Math.floor(Buffer.byteLength(stdout, "utf8") * 0.75));
+        }
+        else {
+            stderr = truncateUtf8(stderr, Math.floor(Buffer.byteLength(stderr, "utf8") * 0.75));
+        }
+    }
+    return { ...data, stdout: "", stderr: "", truncated: true };
+}
+async function executableSearchPath(root) {
+    const result = [];
+    const seen = new Set();
+    for (const entry of (process.env.PATH ?? "").split(path.delimiter)) {
+        if (!entry || !path.isAbsolute(entry))
+            continue;
+        const candidate = path.resolve(entry);
+        if (isInside(root, candidate))
+            continue;
+        try {
+            const resolved = await fsp.realpath(candidate);
+            if (!isInside(root, resolved) && !seen.has(resolved)) {
+                result.push(resolved);
+                seen.add(resolved);
+            }
+        }
+        catch {
+            // An unusable PATH entry cannot provide an approved executable.
+        }
+    }
+    return result;
+}
+async function resolveAllowedExecutable(root, commandId) {
+    const searchPath = await executableSearchPath(root);
+    if (/^node(?:\.exe)?$/iu.test(commandId)) {
+        const executable = await fsp.realpath(process.execPath);
+        if (!isInside(root, executable)) {
+            return { executable, path: searchPath.join(path.delimiter) };
+        }
+    }
+    const name = process.platform === "win32" && !/\.exe$/iu.test(commandId)
+        ? `${commandId}.exe`
+        : commandId;
+    if (process.platform === "win32" && !/\.exe$/iu.test(name)) {
+        throw new CapabilityNodeError("ADAPTER_UNAVAILABLE", "The approved command is unavailable.");
+    }
+    for (const directory of searchPath) {
+        const candidate = path.join(directory, name);
+        try {
+            const resolved = await fsp.realpath(candidate);
+            const stat = await fsp.stat(resolved);
+            if (!stat.isFile() || isInside(root, resolved))
+                continue;
+            if (process.platform !== "win32" &&
+                !(await fsp.access(resolved, fs.constants.X_OK).then(() => true, () => false))) {
+                continue;
+            }
+            return { executable: resolved, path: searchPath.join(path.delimiter) };
+        }
+        catch {
+            // Continue with the next trusted, absolute PATH directory.
+        }
+    }
+    throw new CapabilityNodeError("ADAPTER_UNAVAILABLE", "The approved command is unavailable.");
+}
+async function terminateProcessTree(child) {
+    if (!child.pid)
+        return;
+    if (process.platform === "win32") {
+        const systemRoot = process.env.SystemRoot;
+        const taskkill = systemRoot
+            ? path.join(systemRoot, "System32", "taskkill.exe")
+            : null;
+        if (taskkill && fs.existsSync(taskkill)) {
+            await new Promise((resolve) => {
+                const killer = spawn(taskkill, ["/PID", String(child.pid), "/T", "/F"], {
+                    shell: false,
+                    windowsHide: true,
+                    stdio: "ignore",
+                });
+                killer.once("error", () => resolve());
+                killer.once("close", () => resolve());
+            });
+        }
+        if (child.exitCode === null && child.signalCode === null)
+            child.kill();
+        return;
+    }
+    try {
+        process.kill(-child.pid, "SIGTERM");
+    }
+    catch {
+        child.kill("SIGTERM");
+    }
+    await new Promise((resolve) => setTimeout(resolve, 250));
+    try {
+        process.kill(-child.pid, "SIGKILL");
+    }
+    catch {
+        child.kill("SIGKILL");
+    }
+}
+export async function runCommand(root, request, signal) {
+    const stopped = stopReason(signal);
+    if (stopped)
+        return stopResult(stopped, null);
+    const cwd = await realDirectory(root, request.cwd);
+    const cwdStat = await fsp.stat(cwd);
+    const beforeResolveStop = stopReason(signal);
+    if (beforeResolveStop)
+        return stopResult(beforeResolveStop, null);
+    const rawLimit = operationDataBudget(request);
+    const outDecoder = new StringDecoder("utf8");
+    const errDecoder = new StringDecoder("utf8");
+    let stdout = "";
+    let stderr = "";
+    let bytesCaptured = 0;
+    let truncated = false;
+    let exitCode = null;
+    let exitSignal = null;
+    const args = [...request.args];
+    const { executable, path: safePath } = await resolveAllowedExecutable(root, request.command);
+    const beforeSpawnStop = stopReason(signal);
+    if (beforeSpawnStop)
+        return stopResult(beforeSpawnStop, null);
+    // Executable resolution awaits filesystem work. Recheck the directory just
+    // before spawn so a replaced workspace path cannot redirect the command.
+    const spawnCwd = await realDirectory(root, request.cwd);
+    const spawnCwdStat = await fsp.stat(spawnCwd);
+    if (spawnCwd !== cwd || !sameFileIdentity(cwdStat, spawnCwdStat)) {
+        throw new CapabilityNodeError("OUT_OF_SCOPE", "The command working directory changed before launch.");
+    }
+    const atSpawnStop = stopReason(signal);
+    if (atSpawnStop)
+        return stopResult(atSpawnStop, null);
+    const child = spawn(executable, args, {
+        cwd: spawnCwd,
+        env: {
+            PATH: safePath,
+            ...(process.env.SystemRoot ? { SystemRoot: process.env.SystemRoot } : {}),
+            ...(process.env.TMP ? { TMP: process.env.TMP } : {}),
+            ...(process.env.TEMP ? { TEMP: process.env.TEMP } : {}),
+        },
+        shell: false,
+        windowsHide: true,
+        ...(process.platform !== "win32" ? { detached: true } : {}),
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    let termination = null;
+    const terminate = () => {
+        termination ??= terminateProcessTree(child);
+    };
+    const onAbort = () => terminate();
+    signal.addEventListener("abort", onAbort, { once: true });
+    if (signal.aborted)
+        terminate();
+    const capture = (chunk, stream) => {
+        const available = Math.max(0, rawLimit - bytesCaptured);
+        const accepted = chunk.subarray(0, available);
+        bytesCaptured += accepted.length;
+        if (stream === "stdout")
+            stdout += outDecoder.write(accepted);
+        else
+            stderr += errDecoder.write(accepted);
+        if (accepted.length < chunk.length) {
+            truncated = true;
+            terminate();
+        }
+    };
+    child.stdout.on("data", (chunk) => capture(chunk, "stdout"));
+    child.stderr.on("data", (chunk) => capture(chunk, "stderr"));
+    let launchError;
+    child.once("error", (error) => {
+        launchError = error;
+    });
+    await new Promise((resolve) => {
+        child.once("close", (code, closeSignal) => {
+            exitCode = code;
+            exitSignal = closeSignal;
+            resolve();
+        });
+    });
+    if (termination)
+        await termination;
+    signal.removeEventListener("abort", onAbort);
+    stdout += outDecoder.end();
+    stderr += errDecoder.end();
+    if (launchError) {
+        const code = launchError && typeof launchError === "object" && "code" in launchError
+            ? String(launchError.code)
+            : "";
+        if (code === "ENOENT")
+            throw new CapabilityNodeError("ADAPTER_UNAVAILABLE", "The approved command is unavailable.");
+        if (code === "EACCES" || code === "EPERM")
+            throw new CapabilityNodeError("PERMISSION_DENIED", "The approved command could not be launched.");
+        throw new CapabilityNodeError("EXECUTION_FAILED", "The approved command could not be launched.");
+    }
+    const completed = fitRunOutput({
+        command: request.command,
+        exitCode,
+        signal: exitSignal,
+        stdout,
+        stderr,
+        bytesCaptured,
+        truncated,
+    }, operationDataBudget(request));
+    const stop = stopReason(signal);
+    if (stop)
+        return stopResult(stop, completed);
+    if (truncated || completed.truncated) {
+        return {
+            data: completed,
+            outcome: "partial",
+            partial: true,
+            error: {
+                code: "OUTPUT_LIMIT",
+                message: "The command output reached its byte limit.",
+            },
+        };
+    }
+    if (exitCode !== 0) {
+        return {
+            data: completed,
+            outcome: "failed",
+            partial: false,
+            error: {
+                code: "EXECUTION_FAILED",
+                message: "The command exited with a non-zero status.",
+            },
+        };
+    }
+    return { data: completed, outcome: "complete", partial: false, error: null };
+}
+//# sourceMappingURL=command.js.map

package/dist/pactile/capabilities/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/pactile/capabilities/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,OAAO,EACL,mBAAmB,EACnB,QAAQ,EACR,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,YAAY,GAEb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,SAAS,YAAY,CACnB,IAAyB,EACzB,cAAsB;IAEtB,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;QACpE,MAAM,SAAS,GAAG;YAChB,GAAG,IAAI;YACP,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,UAAU;SACxC,CAAC;QACF,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,cAAc;YAAE,OAAO,SAAS,CAAC;QAC7D,IACE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EACtE,CAAC;YACD,MAAM,GAAG,YAAY,CACnB,MAAM,EACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CACrD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,YAAY,CACnB,MAAM,EACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAY,EACZ,SAAiB;IAEjB,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QACzD,CAAC,CAAC,GAAG,SAAS,MAAM;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAAE,SAAS;YACzD,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC5B,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAClD,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC,EACF,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,sCAAsC,CACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO;IACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,MAAM,QAAQ,GAAG,UAAU;YACzB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,MAAM,GAAG,KAAK,CAClB,QAAQ,EACR,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EACvC;oBACE,KAAK,EAAE,KAAK;oBACZ,WAAW,EAAE,IAAI;oBACjB,KAAK,EAAE,QAAQ;iBAChB,CACF,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACvE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,OAAkE,EAClE,MAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,iBAAiB;QAAE,OAAO,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,UAAU,GAA0B,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,wBAAwB,CACnE,IAAI,EACJ,OAAO,CAAC,OAAO,CAChB,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,eAAe;QAAE,OAAO,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC9D,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,WAAW;QAAE,OAAO,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE;QACpC,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;QACD,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,IAAI;QACjB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,WAAW,GAAyB,IAAI,CAAC;IAC7C,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,WAAW,KAAK,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,OAAO;QAAE,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,MAA2B,EAAQ,EAAE;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9C,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;QACjC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;;YACzD,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrE,IAAI,WAAoB,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5B,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE;YACxC,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,GAAG,WAAW,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,WAAW;QAAE,MAAM,WAAW,CAAC;IACnC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GACR,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,IAAI,WAAW;YACrE,CAAC,CAAC,MAAM,CAAE,WAAkC,CAAC,IAAI,CAAC;YAClD,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,IAAI,KAAK,QAAQ;YACnB,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,sCAAsC,CACvC,CAAC;QACJ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;YACvC,MAAM,IAAI,mBAAmB,CAC3B,mBAAmB,EACnB,6CAA6C,CAC9C,CAAC;QACJ,MAAM,IAAI,mBAAmB,CAC3B,kBAAkB,EAClB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAC5B;QACE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,MAAM,EAAE,UAAU;QAClB,MAAM;QACN,MAAM;QACN,aAAa;QACb,SAAS;KACV,EACD,mBAAmB,CAAC,OAAO,CAAC,CAC7B,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,SAAS,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,4CAA4C;aACtD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,4CAA4C;aACtD;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC"}

package/dist/pactile/capabilities/discover.d.ts

@@ -0,0 +1,6 @@
+import type { BoundedCapabilityRequestV1 } from "../../core/index.js";
+import { type OperationResult } from "./shared.js";
+export declare function discover(root: string, request: Extract<BoundedCapabilityRequestV1, {
+    operation: "discover";
+}>, signal: AbortSignal, excludedPaths: readonly string[]): Promise<OperationResult>;
+//# sourceMappingURL=discover.d.ts.map

package/dist/pactile/capabilities/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/pactile/capabilities/discover.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAGrB,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,CAAC,0BAA0B,EAAE;IAAE,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,EACvE,MAAM,EAAE,WAAW,EACnB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,OAAO,CAAC,eAAe,CAAC,CA0D1B"}

package/dist/pactile/capabilities/discover.js

@@ -0,0 +1,48 @@
+import { jsonBytes, operationDataBudget, stopResult, } from "./shared.js";
+import { collectFiles } from "./workspace.js";
+export async function discover(root, request, signal, excludedPaths) {
+    const scan = await collectFiles(root, request.directory, request.limits, signal, request.limits.maxFilesScanned + 1, excludedPaths);
+    const stopped = scan.stopped;
+    if (stopped) {
+        const data = scan.files.length
+            ? { files: scan.files, entriesScanned: scan.entriesScanned }
+            : null;
+        return stopResult(stopped, data);
+    }
+    const orderedFiles = [...scan.files].sort((left, right) => left < right ? -1 : left > right ? 1 : 0);
+    const pageFiles = orderedFiles.slice(request.offset, request.offset + request.limits.maxResults);
+    const hasMore = !scan.partial && request.offset + pageFiles.length < orderedFiles.length;
+    const files = [];
+    let outputLimited = false;
+    const dataBudget = operationDataBudget(request);
+    for (const file of pageFiles) {
+        const candidate = {
+            files: [...files, file],
+            entriesScanned: scan.entriesScanned,
+        };
+        if (jsonBytes(candidate) > dataBudget) {
+            outputLimited = true;
+            break;
+        }
+        files.push(file);
+    }
+    const partial = scan.partial || outputLimited || pageFiles.length > files.length || hasMore;
+    const data = {
+        files,
+        entriesScanned: scan.entriesScanned,
+    };
+    const error = outputLimited
+        ? {
+            code: "OUTPUT_LIMIT",
+            message: "The response reached its output-byte limit.",
+        }
+        : scan.error;
+    return {
+        data,
+        outcome: partial ? "partial" : files.length === 0 ? "empty" : "complete",
+        partial,
+        error,
+        nextPage: hasMore && !outputLimited ? request.offset + files.length : null,
+    };
+}
+//# sourceMappingURL=discover.js.map

package/dist/pactile/capabilities/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/pactile/capabilities/discover.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,UAAU,GAEX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,OAAuE,EACvE,MAAmB,EACnB,aAAgC;IAEhC,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,IAAI,EACJ,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,EACd,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,EAClC,aAAa,CACd,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAoC,IAAI,CAAC,KAAK,CAAC,MAAM;YAC7D,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;YAC5D,CAAC,CAAC,IAAI,CAAC;QACT,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxD,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAClC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAC3C,CAAC;IACF,MAAM,OAAO,GACX,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG;YAChB,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,IAAI,SAAS,CAAC,SAAS,CAAC,GAAG,UAAU,EAAE,CAAC;YACtC,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,aAAa,IAAI,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;IAC9E,MAAM,IAAI,GAA6B;QACrC,KAAK;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;IACF,MAAM,KAAK,GAAG,aAAa;QACzB,CAAC,CAAC;YACE,IAAI,EAAE,cAAuB;YAC7B,OAAO,EAAE,6CAA6C;SACvD;QACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACf,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;QACxE,OAAO;QACP,KAAK;QACL,QAAQ,EAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KAC3E,CAAC;AACJ,CAAC"}

package/dist/pactile/capabilities/node.d.ts

@@ -0,0 +1,15 @@
+import { type BoundedCapabilityPolicyV1, type BoundedCapabilityRequestV1, type BoundedCapabilityResultV1 } from "../../core/index.js";
+export interface ExecuteBoundedCapabilityOptionsV1 {
+    readonly root: string;
+    readonly policy: BoundedCapabilityPolicyV1;
+    readonly signal?: AbortSignal;
+    readonly adapterId?: string;
+    /** Additional workspace-relative control files omitted from discover/search. */
+    readonly excludedPaths?: readonly string[];
+}
+/** Execute a validated, workspace-relative request with the built-in Node adapter. */
+export declare function executeNodeCapabilityRequestV1(input: unknown, options: ExecuteBoundedCapabilityOptionsV1): Promise<BoundedCapabilityResultV1>;
+export declare function createDefaultCapabilityPolicyV1(allowedCommands?: readonly string[]): BoundedCapabilityPolicyV1;
+export declare function defaultCapabilityLimitsV1(): BoundedCapabilityRequestV1["limits"];
+export declare function createCapabilityRequestIdV1(): string;
+//# sourceMappingURL=node.d.ts.map

package/dist/pactile/capabilities/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../src/pactile/capabilities/node.ts"],"names":[],"mappings":"AAGA,OAAO,EAOL,KAAK,yBAAyB,EAE9B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC/B,MAAM,qBAAqB,CAAC;AA8F7B,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,sFAAsF;AACtF,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,yBAAyB,CAAC,CA8BpC;AA2OD,wBAAgB,+BAA+B,CAC7C,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,yBAAyB,CAK3B;AAED,wBAAgB,yBAAyB,IAAI,0BAA0B,CAAC,QAAQ,CAAC,CAShF;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD"}

package/dist/pactile/capabilities/node.js

@@ -0,0 +1,292 @@
+import { randomUUID } from "node:crypto";
+import fsp from "node:fs/promises";
+import path from "node:path";
+import { authorizeBoundedCapabilityRequestV1, BoundedCapabilityRequestValidationError, fingerprintPactileContractV1, parseBoundedCapabilityRequestV1, } from "../../core/index.js";
+import { CapabilityNodeError, RECEIPT_ROOT, jsonBytes, mapFilesystemError, stopReason, stopResult, } from "./shared.js";
+import { runCommand } from "./command.js";
+import { discover } from "./discover.js";
+import { readFileCapability } from "./read.js";
+import { search } from "./search.js";
+import { claimRequestId } from "./claim.js";
+import { ensureReceiptDirectory, writeReceipt, } from "./receipts.js";
+function publicFailure(error) {
+    if (error instanceof CapabilityNodeError) {
+        return { code: error.code, message: error.message };
+    }
+    return {
+        code: "EXECUTION_FAILED",
+        message: "The capability operation failed.",
+    };
+}
+function failureResult(error) {
+    const failure = publicFailure(error);
+    return {
+        data: null,
+        outcome: failure.code === "OUT_OF_SCOPE"
+            ? "out_of_scope"
+            : failure.code === "TIMEOUT"
+                ? "timed_out"
+                : failure.code === "CANCELLED"
+                    ? "cancelled"
+                    : "failed",
+        partial: false,
+        error: failure,
+    };
+}
+function resultEntries(data) {
+    if (!data)
+        return 0;
+    if ("files" in data)
+        return data.files.length;
+    if ("matches" in data)
+        return data.matches.length;
+    return 1;
+}
+function makeResult(request, operation, receipt) {
+    const fallbackError = operation.error ?? null;
+    const outcome = operation.outcome ?? (operation.data ? "complete" : "empty");
+    return {
+        schemaVersion: 1,
+        requestId: request.requestId,
+        operation: request.operation,
+        outcome,
+        partial: operation.partial ?? outcome === "partial",
+        nextPage: operation.nextPage ?? null,
+        data: operation.data,
+        error: fallbackError,
+        receipt,
+    };
+}
+function requestIdConflict(request) {
+    return makeResult(request, {
+        data: null,
+        outcome: "failed",
+        partial: false,
+        error: {
+            code: "REQUEST_ID_REUSED",
+            message: "This request id is in progress or has already been used.",
+        },
+    }, null);
+}
+/** Execute a validated, workspace-relative request with the built-in Node adapter. */
+export async function executeNodeCapabilityRequestV1(input, options) {
+    const parsed = parseBoundedCapabilityRequestV1(input);
+    if (!parsed.success) {
+        throw new BoundedCapabilityRequestValidationError(parsed.issues);
+    }
+    const request = parsed.data;
+    const startedAt = new Date();
+    const started = performance.now();
+    const controller = new AbortController();
+    const abortFromCaller = () => controller.abort("CANCELLED");
+    if (options.signal?.aborted)
+        abortFromCaller();
+    else
+        options.signal?.addEventListener("abort", abortFromCaller, { once: true });
+    const timer = setTimeout(() => controller.abort("TIMEOUT"), request.limits.timeoutMs);
+    try {
+        return await executeClaimedRequestV1(request, parsed.fingerprint, options, controller.signal, startedAt, started);
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener("abort", abortFromCaller);
+    }
+}
+async function executeClaimedRequestV1(request, requestFingerprint, options, signal, startedAt, started) {
+    let root;
+    try {
+        root = await fsp.realpath(path.resolve(options.root));
+    }
+    catch (error) {
+        const stopped = stopReason(signal);
+        return makeResult(request, stopped
+            ? stopResult(stopped, null)
+            : failureResult(mapFilesystemError(error)), null);
+    }
+    const beforeClaimStop = stopReason(signal);
+    if (beforeClaimStop)
+        return makeResult(request, stopResult(beforeClaimStop, null), null);
+    // Establish the receipt boundary and claim this id before any capability can
+    // run. A pre-existing symlinked receipt directory must never permit an
+    // operation to execute before we discover that the audit write is unsafe.
+    let receiptDirectory;
+    try {
+        receiptDirectory = await ensureReceiptDirectory(root);
+    }
+    catch (error) {
+        const stopped = stopReason(signal);
+        return makeResult(request, stopped ? stopResult(stopped, null) : failureResult(error), null);
+    }
+    const afterReceiptPreflightStop = stopReason(signal);
+    if (afterReceiptPreflightStop)
+        return makeResult(request, stopResult(afterReceiptPreflightStop, null), null);
+    let receiptClaim;
+    try {
+        receiptClaim = await claimRequestId(root, receiptDirectory, request.requestId, signal);
+    }
+    catch (error) {
+        const stopped = stopReason(signal);
+        if (stopped &&
+            !(error instanceof CapabilityNodeError &&
+                error.code === "REQUEST_CLAIM_RETAINED"))
+            return makeResult(request, stopResult(stopped, null), null);
+        if (error instanceof CapabilityNodeError &&
+            error.code === "REQUEST_ID_REUSED") {
+            return requestIdConflict(request);
+        }
+        if (error &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "EEXIST") {
+            return requestIdConflict(request);
+        }
+        if (error instanceof CapabilityNodeError &&
+            (error.code === "REQUEST_CLAIM_RETAINED" ||
+                error.code === "REQUEST_CLAIM_LIMIT")) {
+            return makeResult(request, {
+                data: null,
+                outcome: "failed",
+                partial: false,
+                error: { code: error.code, message: error.message },
+            }, null);
+        }
+        const failure = error instanceof CapabilityNodeError ? error : mapFilesystemError(error);
+        return makeResult(request, failureResult(failure), null);
+    }
+    let operation;
+    const decision = authorizeBoundedCapabilityRequestV1(request, options.policy);
+    const beforeOperationStop = stopReason(signal);
+    if (beforeOperationStop) {
+        operation = stopResult(beforeOperationStop, null);
+    }
+    else if (!decision.allowed) {
+        operation = {
+            data: null,
+            outcome: "out_of_scope",
+            partial: false,
+            error: {
+                code: "OUT_OF_SCOPE",
+                message: decision.message ?? "The request is outside the caller policy.",
+            },
+        };
+    }
+    else {
+        try {
+            const stopped = stopReason(signal);
+            if (stopped) {
+                operation = stopResult(stopped, null);
+            }
+            else {
+                switch (request.operation) {
+                    case "discover":
+                        operation = await discover(root, request, signal, options.excludedPaths ?? []);
+                        break;
+                    case "read":
+                        operation = await readFileCapability(root, request, signal);
+                        break;
+                    case "search":
+                        operation = await search(root, request, signal, options.excludedPaths ?? []);
+                        break;
+                    case "run":
+                        operation = await runCommand(root, request, signal);
+                        break;
+                }
+            }
+        }
+        catch (error) {
+            operation = failureResult(error);
+        }
+    }
+    const afterOperationStop = stopReason(signal);
+    if (decision.allowed &&
+        afterOperationStop &&
+        operation.outcome !== "timed_out" &&
+        operation.outcome !== "cancelled")
+        operation = stopResult(afterOperationStop, operation.data);
+    const completedAt = new Date();
+    const dataBytes = operation.data === null ? 0 : jsonBytes(operation.data);
+    const receiptRef = path.posix.join(RECEIPT_ROOT, `${request.requestId}.json`);
+    const receipt = {
+        schemaVersion: 1,
+        requestId: request.requestId,
+        operation: request.operation,
+        adapterId: options.adapterId &&
+            /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(options.adapterId)
+            ? options.adapterId
+            : "node",
+        requestFingerprint,
+        resultFingerprint: operation.data === null
+            ? null
+            : fingerprintPactileContractV1(operation.data),
+        outcome: operation.outcome ?? (operation.data ? "complete" : "empty"),
+        errorCode: operation.error?.code ?? null,
+        entriesReturned: resultEntries(operation.data),
+        bytesReturned: dataBytes,
+        startedAt: startedAt.toISOString(),
+        completedAt: completedAt.toISOString(),
+        durationMs: Math.max(0, Math.round(performance.now() - started)),
+        receiptRef,
+    };
+    let boundedReceipt = receipt;
+    let result = makeResult(request, operation, boundedReceipt);
+    if (jsonBytes(result) + 1 > request.limits.maxOutputBytes) {
+        operation = {
+            data: null,
+            outcome: "partial",
+            partial: true,
+            nextPage: null,
+            error: {
+                code: "OUTPUT_LIMIT",
+                message: "The complete response reached its output-byte limit.",
+            },
+        };
+        boundedReceipt = {
+            ...receipt,
+            resultFingerprint: null,
+            outcome: "partial",
+            errorCode: "OUTPUT_LIMIT",
+            entriesReturned: 0,
+            bytesReturned: 0,
+        };
+        result = makeResult(request, operation, boundedReceipt);
+    }
+    if (jsonBytes(result) + 1 > request.limits.maxOutputBytes) {
+        await receiptClaim.handle.close();
+        throw new CapabilityNodeError("OUTPUT_LIMIT", "The request output budget is too small for its bounded receipt envelope.");
+    }
+    try {
+        await writeReceipt(root, receiptDirectory, receiptClaim, boundedReceipt);
+    }
+    catch {
+        return makeResult(request, {
+            data: null,
+            outcome: "failed",
+            partial: false,
+            error: {
+                code: "RECEIPT_UNAVAILABLE",
+                message: "The operation may have run, but its receipt could not be persisted. Do not retry automatically.",
+            },
+        }, null);
+    }
+    return result;
+}
+export function createDefaultCapabilityPolicyV1(allowedCommands = []) {
+    return {
+        allowedOperations: ["discover", "read", "search", "run"],
+        allowedCommands: [...new Set(allowedCommands)],
+    };
+}
+export function defaultCapabilityLimitsV1() {
+    return {
+        timeoutMs: 30_000,
+        maxOutputBytes: 128 * 1024,
+        maxFilesScanned: 1_000,
+        maxResults: 100,
+        maxFileBytes: 256 * 1024,
+        maxBytesRead: 2 * 1024 * 1024,
+    };
+}
+export function createCapabilityRequestIdV1() {
+    return randomUUID();
+}
+//# sourceMappingURL=node.js.map