@ccdd/project 2.0.1

package/dist/src/definitions.d.ts

@@ -0,0 +1,53 @@
+/** The definition package has no dependency on persistence or review execution. */
+export interface AgentProfile {
+    kind: 'agent';
+    provider: string;
+    model: string;
+    reasoning: string;
+    timeoutMs?: number;
+}
+export interface HumanProfile {
+    kind: 'human';
+}
+export interface RuntimeProfile {
+    kind: 'runtime';
+    command: string;
+    args: string[];
+    timeoutMs?: number;
+}
+export type CriticProfile = AgentProfile | HumanProfile | RuntimeProfile;
+export interface ReviewPayload {
+    instruction: string;
+    [key: string]: unknown;
+}
+export interface CriticDefinition {
+    id: string;
+    title: string;
+    target: string;
+    deps: string[];
+    profile: CriticProfile;
+    payload: ReviewPayload;
+}
+export type StaleStrategy = {
+    kind: 'file-hash';
+    paths?: string[];
+} | {
+    kind: 'always';
+};
+export interface ArtifactDefinition {
+    type: string;
+    path: string;
+    basis?: boolean;
+    stale?: StaleStrategy;
+}
+export interface ArtifactGroupDefinition {
+    kind: 'group';
+    members: string[];
+    basis?: boolean;
+    stale?: StaleStrategy;
+}
+export type ArtifactEntryDefinition = ArtifactDefinition | ArtifactGroupDefinition;
+export interface ArtifactGroupReference {
+    id: string;
+    members: string[];
+}

package/dist/src/definitions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=definitions.js.map

package/dist/src/definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":""}

package/dist/src/doctor/index.d.ts

@@ -0,0 +1,41 @@
+import type { ExecutorRegistry, ExecutionEvent, WorkspaceMode } from '../contracts.js';
+export type DiagnosticScope = {
+    kind: 'graph';
+} | {
+    kind: 'critic';
+    criticId: string;
+};
+export interface DiagnosticCheck {
+    id: string;
+    status: 'PASS' | 'FAIL' | 'SKIP';
+    kind?: string;
+    provider?: string;
+    model?: string;
+    reasoning?: string;
+    criticIds?: string[];
+    message: string;
+    remedy?: string;
+    details?: Record<string, unknown>;
+}
+export interface DiagnosticReport {
+    ok: boolean;
+    status: 'READY' | 'NOT_READY';
+    repoId: string;
+    mode: WorkspaceMode;
+    snapshotHash?: string;
+    scope: DiagnosticScope;
+    checkedAt: string;
+    checks: DiagnosticCheck[];
+}
+export interface DiagnoseProjectOptions {
+    repoPath: string;
+    repoId?: string;
+    mode?: WorkspaceMode;
+    stateDir?: string;
+    criticId?: string;
+    executors: Pick<ExecutorRegistry, 'probe' | 'validateWorkspace'>;
+    signal?: AbortSignal;
+    onEvent?: (event: ExecutionEvent) => void | Promise<void>;
+}
+/** Ephemeral diagnostics: no broker, review history, verdict, test or notification. */
+export declare function diagnoseProject({ repoPath, repoId, mode, stateDir, criticId, executors, signal, onEvent }: DiagnoseProjectOptions): Promise<DiagnosticReport>;

package/dist/src/doctor/index.js

@@ -0,0 +1,189 @@
+import { mkdtemp, realpath } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { prepareReviewRequests } from '../requester/index.js';
+import { prepareWorkspace, removeOwnedWorkspaceTree } from '../workspaces/index.js';
+import { createArtifactViewer, createArtifactTools } from '../artifacts/index.js';
+import { createHumanArtifactTools } from '../artifacts/human.js';
+import { createReviewTools } from '../tools/runner.js';
+import { errorCode, errorMessage } from '../executors/errors.js';
+const canonical = (value) => Array.isArray(value) ? value.map(canonical) : value && typeof value === 'object' ? Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, entry]) => [key, canonical(entry)])) : value;
+const scopeFor = (criticId) => criticId === undefined ? { kind: 'graph' } : { kind: 'critic', criticId };
+const bounded = (value) => String(value).slice(0, 2_000);
+const remedyFor = (value) => value && typeof value === 'object' && 'remedy' in value && typeof value.remedy === 'string' ? value.remedy : undefined;
+async function inspectViewers(request, worktreePath, signal, runDir) {
+    if (request.configManifest) {
+        // Runtime has its own path/startup contract and requires no Agent/Human tools.
+        if (request.profile.kind === 'runtime')
+            return { toolNames: [], toolsExecuted: false, artifactPathsVerified: true };
+        const registry = await createReviewTools({ worktreePath, artifacts: request.artifacts, artifactGroups: request.artifactGroups, artifactTypes: request.artifactTypes, configManifest: request.configManifest, criticId: request.criticId, audience: request.profile.kind, signal, runDir });
+        try {
+            const checks = await registry.preflight();
+            const failed = checks.filter(check => !check.ok);
+            if (failed.length)
+                throw new Error(failed.map(check => `${check.toolName}: ${check.message}`).join('; '));
+            return { toolNames: registry.tools.map(tool => tool.name), checks, toolsExecuted: false, programsLaunched: false };
+        }
+        finally {
+            await registry.close();
+        }
+    }
+    if (request.profile.kind === 'human') {
+        const registry = await createHumanArtifactTools({ worktreePath, artifacts: request.artifacts, artifactTypes: request.artifactTypes, signal });
+        const checks = await registry.preflight();
+        const failed = checks.filter(check => !check.ok);
+        if (failed.length)
+            throw new Error(failed.map(check => `${check.toolName}: ${check.message}`).join('; '));
+        return { toolNames: registry.tools.map(tool => tool.name), checks, programsLaunched: false };
+    }
+    const viewer = await createArtifactViewer({ worktreePath, artifacts: request.artifacts, artifactTypes: request.artifactTypes, signal });
+    const registry = createArtifactTools(viewer, { audience: request.profile.kind === 'runtime' ? 'viewer' : 'agent' });
+    const hasTool = (name) => registry.tools.some(tool => tool.name === name);
+    let inspectedFiles = 0;
+    const inspectFile = async (artifactId, path) => {
+        if (!hasTool(`read_${artifactId}`))
+            return;
+        if (++inspectedFiles > 10_000)
+            throw new Error('Artifact viewer readiness check exceeds 10000 files; narrow the Critic artifact scope.');
+        await registry.call(`read_${artifactId}`, { ...(path ? { path } : {}), startLine: 1, lineCount: 80 });
+    };
+    const inspectDirectory = async (artifactId, path = '') => {
+        let offset = 0;
+        do {
+            const listing = hasTool(`list_${artifactId}`)
+                ? await registry.call(`list_${artifactId}`, { path, offset })
+                : await viewer.list({ artifactId, path, offset });
+            for (const entry of listing.entries) {
+                if (entry.kind === 'directory')
+                    await inspectDirectory(artifactId, entry.path);
+                else if (entry.kind === 'file')
+                    await inspectFile(artifactId, entry.path);
+                else
+                    throw new Error(`Unsupported artifact entry: ${entry.path}`);
+            }
+            offset = listing.nextOffset;
+        } while (offset !== null);
+    };
+    for (const artifact of viewer.listArtifacts()) {
+        if (artifact.directory)
+            await inspectDirectory(artifact.id);
+        else
+            await inspectFile(artifact.id);
+    }
+    return { toolNames: registry.tools.map(tool => tool.name), inspectedFiles, readLimitLinesPerFile: 80, readLimitBytesPerFile: 65_536 };
+}
+/** Ephemeral diagnostics: no broker, review history, verdict, test or notification. */
+export async function diagnoseProject({ repoPath, repoId = 'demo', mode = 'copy', stateDir, criticId, executors, signal, onEvent = () => { } }) {
+    const report = { ok: false, status: 'NOT_READY', repoId, mode, scope: scopeFor(criticId), checkedAt: new Date().toISOString(), checks: [] };
+    const add = async (check) => { report.checks.push(check); await onEvent({ type: 'doctor.check', check }); };
+    let scratch, workspace;
+    try {
+        if (signal?.aborted)
+            throw Object.assign(new Error('진단이 취소되었습니다.'), { code: 'ABORTED' });
+        try {
+            await executors.validateWorkspace?.(repoPath);
+        }
+        catch (error) {
+            await add({ id: 'workspace-preflight', status: 'FAIL', kind: 'workspace', message: errorCode(error) ? bounded(errorMessage(error)) : '진단 입력의 사전 조건을 확인하지 못했습니다.', remedy: remedyFor(error) ?? '인증 파일과 실행 상태의 경로가 리뷰 workspace 밖에 있는지 확인하세요.', details: { code: errorCode(error) ?? 'WORKSPACE_PREFLIGHT_FAILED' } });
+            return report;
+        }
+        scratch = await realpath(await mkdtemp(join(tmpdir(), 'ccdd-doctor-')));
+        try {
+            workspace = await prepareWorkspace({ repoPath, stateDir: stateDir ?? join(scratch, 'state'), mode, signal });
+            report.snapshotHash = workspace.descriptor.hash;
+            await add({ id: 'workspace-input', status: 'PASS', kind: 'workspace', message: mode === 'copy' ? '현재 repo 전체의 불변 복사본을 진단 입력으로 준비했습니다.' : '현재 workspace 전체의 변경 감시를 시작했습니다.', details: { mode, snapshotHash: report.snapshotHash } });
+        }
+        catch (error) {
+            await add({ id: 'workspace-input', status: 'FAIL', kind: 'workspace', message: bounded(errorMessage(error)), remedy: '현재 repo의 읽기 권한과 repo 밖의 CCDD 저장 경로를 확인하세요. 복사 도중에는 입력을 변경하지 마세요.', details: { code: signal?.aborted ? 'ABORTED' : errorCode(error) ?? 'WORKSPACE_UNAVAILABLE' } });
+            return report;
+        }
+        const worktreePath = workspace.descriptor.path;
+        let requests;
+        try {
+            requests = await prepareReviewRequests({ repoPath: worktreePath, repoId, snapshotHash: workspace.descriptor.hash, criticId });
+            await workspace.assertUnchanged();
+            await add({ id: 'workspace-config', status: 'PASS', kind: 'workspace', criticIds: requests.map(x => x.criticId), message: '현재 workspace의 설정과 Artifact 정의를 확인했습니다.' });
+        }
+        catch (error) {
+            await add({ id: 'workspace-config', status: 'FAIL', kind: 'workspace', message: bounded(errorMessage(error)), remedy: '현재 ccdd.config.ts 또는 legacy ccdd.config.json, Artifact 경로와 Critic 식별자를 확인하세요.', details: { code: errorCode(error) ?? 'WORKSPACE_CONFIG_INVALID' } });
+            return report;
+        }
+        const readyViewers = new Set();
+        for (const request of requests) {
+            if (workspace.signal.aborted)
+                break;
+            try {
+                const details = await inspectViewers(request, worktreePath, workspace.signal, resolve(scratch, `tools-${request.criticId}`));
+                readyViewers.add(request.criticId);
+                await add({ id: `artifacts:${request.criticId}`, status: 'PASS', kind: 'artifacts', criticIds: [request.criticId], message: request.configManifest ? '등록된 Artifact 도구의 명세와 실행 준비를 확인했습니다. 실제 도구 실행은 tools check --execute로 별도 확인할 수 있습니다.' : request.profile.kind === 'human' ? 'Human Artifact 도구의 등록과 실행 준비를 확인했습니다. 프로그램은 실행하지 않았습니다.' : '스냅샷의 Artifact Viewer 목록·읽기 진입점을 확인했습니다.', details });
+            }
+            catch (error) {
+                await add({ id: `artifacts:${request.criticId}`, status: 'FAIL', kind: 'artifacts', criticIds: [request.criticId], message: bounded(errorMessage(error)), remedy: 'Artifact 경로·유형·내용과 읽기 권한을 확인하세요.', details: { code: 'ARTIFACT_VIEWER_UNAVAILABLE' } });
+            }
+        }
+        const groups = new Map();
+        for (const request of requests) {
+            // Provider probes are profile-wide; runtime path readiness is per Critic
+            // because identical commands can have different declared artifact scopes.
+            const key = request.profile.kind === 'runtime' ? `runtime:${request.criticId}` : JSON.stringify(canonical(request.profile));
+            const group = groups.get(key) ?? [];
+            group.push(request);
+            groups.set(key, group);
+        }
+        let index = 0;
+        for (const group of groups.values()) {
+            index++;
+            const request = group.find(x => readyViewers.has(x.criticId)) ?? group[0];
+            const base = { id: `executor:${index}`, kind: request.profile.kind, ...(request.profile.kind === 'agent' ? { provider: request.profile.provider, model: request.profile.model, reasoning: request.profile.reasoning } : {}), criticIds: group.map(x => x.criticId) };
+            if (workspace.signal.aborted) {
+                await add({ ...base, status: 'FAIL', message: '진단이 취소되었습니다.', remedy: '필요하면 doctor를 다시 실행하세요.', details: { code: 'ABORTED' } });
+                continue;
+            }
+            if (!readyViewers.has(request.criticId)) {
+                await add({ ...base, status: 'SKIP', message: 'Artifact Viewer 준비 실패로 실행기 실사용 진단을 수행하지 않았습니다.' });
+                continue;
+            }
+            try {
+                if (typeof executors?.probe !== 'function')
+                    throw Object.assign(new Error('실행기에 실사용 진단 기능이 없습니다.'), { code: 'PROBE_UNSUPPORTED', remedy: 'probe를 제공하는 실행기를 등록하세요.' });
+                const result = await executors.probe(request, { worktreePath, workspacePath: worktreePath, runDir: resolve(scratch, `probe-${index}`), signal: workspace.signal, onEvent });
+                if (result?.ok !== true)
+                    throw Object.assign(new Error(result?.message ?? '실행기 준비 상태를 확인하지 못했습니다.'), { code: 'PROBE_FAILED', remedy: result?.remedy });
+                await add({ ...base, status: 'PASS', message: result.message, details: result.details });
+            }
+            catch (error) {
+                // Unknown adapter failures get a safe generic diagnostic, not raw output.
+                await add({ ...base, status: 'FAIL', message: errorCode(error) ? bounded(errorMessage(error)) : '실행기의 실사용 진단을 완료하지 못했습니다.', remedy: remedyFor(error) ?? 'Provider 설정·연결과 실행 환경을 확인한 뒤 다시 진단하세요.', details: { code: errorCode(error) ?? 'PROBE_FAILED' } });
+            }
+        }
+        await workspace.assertUnchanged();
+    }
+    catch (error) {
+        const code = errorCode(error) ?? (signal?.aborted ? 'ABORTED' : 'DIAGNOSTIC_FAILED');
+        const changed = ['WORKSPACE_CHANGED', 'WORKSPACE_CACHE_TAMPERED'].includes(code);
+        await add({ id: changed ? 'workspace-unchanged' : 'diagnostic', status: 'FAIL', kind: 'workspace', message: changed ? '진단 도중 리뷰 입력이 변경되었습니다.' : code === 'ABORTED' ? '진단이 취소되었습니다.' : '진단을 완료하지 못했습니다.', remedy: changed ? '진단 입력을 변경하지 않은 상태에서 doctor를 다시 실행하세요.' : '로컬 실행 환경과 권한을 확인한 뒤 다시 진단하세요.', details: { code } });
+    }
+    finally {
+        if (workspace) {
+            try {
+                await workspace.close();
+            }
+            catch (error) {
+                await add({ id: 'workspace-cleanup', status: 'FAIL', message: '진단용 workspace 감시를 정리하지 못했습니다.', remedy: 'CCDD 저장 경로의 권한을 확인하세요.', details: { code: errorCode(error) ?? 'CLEANUP_FAILED' } });
+            }
+        }
+        if (scratch) {
+            try {
+                await removeOwnedWorkspaceTree(scratch);
+            }
+            catch {
+                await add({ id: 'temporary-cleanup', status: 'FAIL', message: '진단 임시 파일을 정리하지 못했습니다.', remedy: '임시 디렉터리의 쓰기 권한을 확인하세요.', details: { code: 'CLEANUP_FAILED' } });
+            }
+        }
+        report.ok = report.checks.length > 0 && report.checks.every(check => check.status === 'PASS');
+        report.status = report.ok ? 'READY' : 'NOT_READY';
+        report.checkedAt = new Date().toISOString();
+    }
+    return report;
+}
+//# sourceMappingURL=index.js.map

package/dist/src/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doctor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAA2B,MAAM,uBAAuB,CAAC;AAC3G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAsCjE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAoB,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7R,MAAM,QAAQ,GAAG,CAAC,QAAiB,EAAmB,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACnI,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1E,MAAM,SAAS,GAAG,CAAC,KAAc,EAAsB,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEjL,KAAK,UAAU,cAAc,CAAC,OAAuB,EAAE,YAAoB,EAAE,MAAoB,EAAE,MAAe;IAChH,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,+EAA+E;QAC/E,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3R,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1G,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QACrH,CAAC;gBAAS,CAAC;YAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9I,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1G,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IACxI,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACpH,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClF,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,KAAK,EAAE,UAAkB,EAAE,IAAa,EAAiB,EAAE;QAC7E,IAAI,CAAC,OAAO,CAAC,QAAQ,UAAU,EAAE,CAAC;YAAE,OAAO;QAC3C,IAAI,EAAE,cAAc,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;QACzI,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,EAAE,UAAkB,EAAE,IAAI,GAAG,EAAE,EAAiB,EAAE;QAC9E,IAAI,MAAM,GAAkB,CAAC,CAAC;QAC9B,GAAG,CAAC;YACF,MAAM,OAAO,GAAuB,OAAO,CAAC,QAAQ,UAAU,EAAE,CAAC;gBAC/D,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC7D,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,MAAM,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;qBAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;;oBACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;QAC9B,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAE;IAC5B,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,SAAS;YAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;;YACvD,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,qBAAqB,EAAE,EAAE,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;AACxI,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,EAA0B;IACnK,MAAM,MAAM,GAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9J,MAAM,GAAG,GAAG,KAAK,EAAE,KAAsB,EAAiB,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5I,IAAI,OAA2B,EAAE,SAAsC,CAAC;IACxE,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QACtD,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,8CAA8C,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,4BAA4B,EAAE,EAAE,CAAC,CAAC;YACrT,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7G,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;YAChD,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,iCAAiC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACtO,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,kEAAkE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,uBAAuB,EAAE,EAAE,CAAC,CAAC;YACzR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;QAC/C,IAAI,QAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9H,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;QACxK,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,+EAA+E,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,0BAA0B,EAAE,EAAE,CAAC,CAAC;YAC5Q,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC7H,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,aAAa,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,qFAAqF,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,yCAAyC,EAAE,OAAO,EAAE,CAAC,CAAC;YACpY,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,aAAa,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,CAAC,CAAC;YAC5P,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5H,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,KAAK,EAAE,CAAC;YACR,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,YAAY,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrQ,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBAChI,SAAS;YACX,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;gBAClG,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,OAAO,SAAS,EAAE,KAAK,KAAK,UAAU;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBACtK,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5K,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,wBAAwB,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvJ,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0EAA0E;gBAC1E,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,wCAAwC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,cAAc,EAAE,EAAE,CAAC,CAAC;YAC7P,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAC,eAAe,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,+BAA+B,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7T,CAAC;YAAS,CAAC;QACT,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAChC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC;QAChN,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAChD,MAAM,CAAC;gBAAC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC;QAC5K,CAAC;QACD,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QAClD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/executors/auth.d.ts

@@ -0,0 +1,16 @@
+import type { CredentialStore } from '@earendil-works/pi-ai';
+/** Paths only: credentials are resolved in the worker and never stored in review state. */
+export interface PiOptions {
+    authFile?: string;
+    codexAuthFile?: string;
+}
+export declare class PiAuthError extends Error {
+    readonly code: string;
+    readonly remedy: string;
+    constructor(code: string, message: string, remedy: string);
+}
+export declare function validatePiOptions(options?: PiOptions): void;
+/** Call before snapshot creation as well as at execution: credentials must never be copied as review input. */
+export declare function assertPiAuthFilesOutsideWorkspace(options: PiOptions, workspacePath: string): Promise<void>;
+/** Explicit credential adapters are read-only; even an expired token never enters Pi's refresh path. */
+export declare function createPiCredentialStore(options: PiOptions, workspacePath: string): Promise<CredentialStore>;

package/dist/src/executors/auth.js

@@ -0,0 +1,150 @@
+import { readFile, realpath, stat } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, join, relative, sep } from 'node:path';
+export class PiAuthError extends Error {
+    code;
+    remedy;
+    constructor(code, message, remedy) {
+        super(message);
+        this.name = 'PiAuthError';
+        this.code = code;
+        this.remedy = remedy;
+    }
+}
+const unavailable = () => new PiAuthError('AUTHENTICATION_UNAVAILABLE', '명시한 인증 파일을 읽을 수 없습니다.', '인증 파일 경로와 읽기 권한을 확인하세요. 인증 파일은 리뷰 workspace 밖에 두세요.');
+const invalid = () => new PiAuthError('AUTHENTICATION_INVALID', '명시한 인증 파일의 형식이 올바르지 않습니다.', 'Pi provider별 api_key 또는 oauth 형식의 인증 파일을 지정하세요.');
+const expired = () => new PiAuthError('AUTHENTICATION_EXPIRED', '인증 토큰이 만료되었거나 곧 만료됩니다.', '해당 로그인 도구로 인증을 갱신한 뒤 다시 실행하세요. CCDD는 인증 파일과 공유 Codex 토큰을 갱신하지 않습니다.');
+const readonly = () => new PiAuthError('AUTHENTICATION_READ_ONLY', 'CCDD 인증 파일 연결은 읽기 전용입니다.', '해당 로그인 도구로 인증을 갱신한 뒤 다시 실행하세요.');
+const inWorkspace = () => new PiAuthError('AUTHENTICATION_IN_WORKSPACE', '인증 파일을 리뷰 workspace 안에 둘 수 없습니다.', '인증 파일을 원본 repo와 복사된 workspace 밖에 두고 경로를 다시 지정하세요.');
+function object(value) { return !!value && typeof value === 'object' && !Array.isArray(value); }
+export function validatePiOptions(options = {}) {
+    for (const value of [options.authFile, options.codexAuthFile]) {
+        if (value !== undefined && (typeof value !== 'string' || !value.trim() || value.length > 4_096 || value.includes('\0') || !isAbsolute(value))) {
+            throw new PiAuthError('AUTHENTICATION_PATH_INVALID', '인증 파일은 절대경로로 지정해야 합니다.', '--pi-auth-file 또는 --codex-auth-file에 workspace 밖 인증 파일의 절대경로를 지정하세요.');
+        }
+    }
+}
+function isWithin(root, candidate) {
+    const sub = relative(root, candidate);
+    return sub === '' || (!isAbsolute(sub) && sub !== '..' && !sub.startsWith(`..${sep}`));
+}
+async function canonicalPath(path) {
+    let ancestor = path;
+    const missing = [];
+    for (;;) {
+        try {
+            return join(await realpath(ancestor), ...missing);
+        }
+        catch (error) {
+            if (!error || typeof error !== 'object' || !('code' in error) || error.code !== 'ENOENT' || dirname(ancestor) === ancestor)
+                throw unavailable();
+            missing.unshift(basename(ancestor));
+            ancestor = dirname(ancestor);
+        }
+    }
+}
+/** Call before snapshot creation as well as at execution: credentials must never be copied as review input. */
+export async function assertPiAuthFilesOutsideWorkspace(options, workspacePath) {
+    validatePiOptions(options);
+    if (!options.authFile && !options.codexAuthFile)
+        return;
+    const root = await canonicalPath(workspacePath);
+    for (const path of [options.authFile, options.codexAuthFile]) {
+        if (path && isWithin(root, await canonicalPath(path)))
+            throw inWorkspace();
+    }
+}
+function credential(value) {
+    if (!object(value))
+        throw invalid();
+    if (value.type === 'api_key') {
+        if (value.key !== undefined && (typeof value.key !== 'string' || !value.key))
+            throw invalid();
+        if (value.env !== undefined && (!object(value.env) || Object.values(value.env).some(item => typeof item !== 'string')))
+            throw invalid();
+        if (value.key === undefined && value.env === undefined)
+            throw invalid();
+        return { type: 'api_key', ...(value.key === undefined ? {} : { key: value.key }), ...(value.env === undefined ? {} : { env: value.env }) };
+    }
+    if (value.type === 'oauth') {
+        if (typeof value.access !== 'string' || !value.access || typeof value.refresh !== 'string' || !value.refresh || typeof value.expires !== 'number' || !Number.isFinite(value.expires))
+            throw invalid();
+        if (value.expires <= Date.now() + 300_000)
+            throw expired();
+        return { ...value, type: 'oauth', access: value.access, refresh: value.refresh, expires: value.expires };
+    }
+    throw invalid();
+}
+/** Explicit credential adapters are read-only; even an expired token never enters Pi's refresh path. */
+export async function createPiCredentialStore(options, workspacePath) {
+    validatePiOptions(options);
+    const root = await realpath(workspacePath);
+    async function load(path, signal) {
+        signal?.throwIfAborted();
+        try {
+            const target = await realpath(path);
+            if (isWithin(root, target))
+                throw inWorkspace();
+            const info = await stat(target);
+            if (!info.isFile() || info.size > 1_048_576)
+                throw invalid();
+            const data = JSON.parse(await readFile(target, { encoding: 'utf8', signal }));
+            if (!object(data))
+                throw invalid();
+            return data;
+        }
+        catch (error) {
+            if (error instanceof PiAuthError)
+                throw error;
+            signal?.throwIfAborted();
+            throw unavailable();
+        }
+    }
+    async function codex(signal) {
+        if (!options.codexAuthFile)
+            return undefined;
+        const data = await load(options.codexAuthFile, signal);
+        if (!object(data.tokens) || typeof data.tokens.access_token !== 'string' || !data.tokens.access_token)
+            throw invalid();
+        let claims;
+        try {
+            claims = JSON.parse(Buffer.from(data.tokens.access_token.split('.')[1] ?? '', 'base64url').toString('utf8'));
+        }
+        catch {
+            throw invalid();
+        }
+        if (!object(claims) || typeof claims.exp !== 'number' || !Number.isFinite(claims.exp))
+            throw invalid();
+        const expires = claims.exp * 1_000;
+        if (expires <= Date.now() + 300_000)
+            throw expired();
+        // Pi receives only access, never the shared refresh token. Refresh is rejected by this store.
+        return { type: 'oauth', access: data.tokens.access_token, refresh: '', expires };
+    }
+    return {
+        async read(providerId, operation = {}) {
+            operation.signal?.throwIfAborted();
+            const values = options.authFile ? await load(options.authFile, operation.signal) : {};
+            const found = Object.hasOwn(values, providerId) ? values[providerId] : undefined;
+            if (providerId === 'openai-codex' && options.codexAuthFile) {
+                if (found !== undefined)
+                    throw new PiAuthError('AUTHENTICATION_CONFLICT', 'OpenAI Codex 인증 파일이 두 곳에 지정되어 있습니다.', 'openai-codex에는 Pi 인증 또는 읽기 전용 Codex 인증 중 하나만 지정하세요.');
+                return codex(operation.signal);
+            }
+            return found === undefined ? undefined : credential(found);
+        },
+        async list(operation = {}) {
+            const values = options.authFile ? await load(options.authFile, operation.signal) : {};
+            const result = [];
+            for (const [providerId, entry] of Object.entries(values)) {
+                if (object(entry) && (entry.type === 'api_key' || entry.type === 'oauth'))
+                    result.push({ providerId, type: entry.type });
+            }
+            if (options.codexAuthFile && !result.some(item => item.providerId === 'openai-codex'))
+                result.push({ providerId: 'openai-codex', type: 'oauth' });
+            return result;
+        },
+        async modify() { throw readonly(); },
+        async delete() { throw readonly(); },
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/executors/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/executors/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAM/E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IACb,MAAM,CAAS;IACxB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAc;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACpF,CAAC;CACF;AAED,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,4BAA4B,EAAE,uBAAuB,EAAE,qDAAqD,CAAC,CAAC;AACxJ,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,wBAAwB,EAAE,2BAA2B,EAAE,iDAAiD,CAAC,CAAC;AAChJ,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,wBAAwB,EAAE,wBAAwB,EAAE,qEAAqE,CAAC,CAAC;AACjK,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,gCAAgC,CAAC,CAAC;AACjI,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,6BAA6B,EAAE,kCAAkC,EAAE,mDAAmD,CAAC,CAAC;AAElK,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE3I,MAAM,UAAU,iBAAiB,CAAC,OAAO,GAAc,EAAE;IACvD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9I,MAAM,IAAI,WAAW,CAAC,6BAA6B,EAAE,wBAAwB,EAAE,sEAAsE,CAAC,CAAC;QACzJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;QAAC,CAAC;QAC1D,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ;gBAAE,MAAM,WAAW,EAAE,CAAC;YAChJ,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAAkB,EAAE,aAAqB;IAC/F,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO;IACxD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAC9F,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACxI,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,MAAM,OAAO,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAa,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAA6B,EAAE,CAAC,EAAE,CAAC;IACjL,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACtM,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QAC3D,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,EAAE,CAAC;AAClB,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAkB,EAAE,aAAqB;IACrF,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC3C,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAoB;QACpD,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,WAAW;gBAAE,MAAM,KAAK,CAAC;YAC9C,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,WAAW,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IACD,KAAK,UAAU,KAAK,CAAC,MAAoB;QACvC,IAAI,CAAC,OAAO,CAAC,aAAa;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,OAAO,EAAE,CAAC;QACvH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAC,CAAC;QAChJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACvG,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC;QACnC,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;QACrD,8FAA8F;QAC9F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,SAAS,GAAyB,EAAE;YACjE,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,IAAI,UAAU,KAAK,cAAc,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3D,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,qCAAqC,EAAE,qDAAqD,CAAC,CAAC;gBACxK,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,GAAyB,EAAE;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,MAAM,GAAqB,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAClJ,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,KAAsC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,MAAM,KAAoB,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/src/executors/errors.d.ts

@@ -0,0 +1,6 @@
+export declare function diagnosticError(code: string, message: string, remedy: string): Error & {
+    code: string;
+    remedy: string;
+};
+export declare function errorMessage(value: unknown): string;
+export declare function errorCode(value: unknown): string | undefined;

package/dist/src/executors/errors.js

@@ -0,0 +1,10 @@
+export function diagnosticError(code, message, remedy) {
+    return Object.assign(new Error(message), { code, remedy });
+}
+export function errorMessage(value) { return value instanceof Error ? value.message : String(value); }
+export function errorCode(value) {
+    if (value && typeof value === 'object' && 'code' in value && typeof value.code === 'string')
+        return value.code;
+    return undefined;
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/executors/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/executors/errors.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7D,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc,IAAY,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvH,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC/G,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/executors/index.d.ts

@@ -0,0 +1,20 @@
+import type { PiOptions, StreamFn } from './pi.js';
+import type { AlarmMethod, ReviewEnvelope, ReviewRequest, ReviewResult, ExecutionContext, ExecutorReadiness, ProbeResult } from '../contracts.js';
+import type { SpawnImplementation } from './process.js';
+export declare function validateResult(value: unknown): ReviewResult;
+/** Three executor strategies. The broker alone persists workflow state. */
+export interface ExecutorOptions {
+    piOptions?: PiOptions;
+    streamFn?: StreamFn;
+    alarmMethods?: (AlarmMethod | AlarmMethod['notify'])[];
+    spawnImpl?: SpawnImplementation;
+}
+export declare function createExecutorRegistry({ piOptions, streamFn, alarmMethods, spawnImpl }?: ExecutorOptions): {
+    validateWorkspace(repoPath: string): Promise<void>;
+    canExecute(request: Pick<ReviewEnvelope, 'profile'>): Promise<ExecutorReadiness>;
+    probe(request: ReviewEnvelope, { worktreePath, workspacePath, runDir, signal, onEvent }: ExecutionContext): Promise<ProbeResult>;
+    notifyHuman(request: ReviewRequest): Promise<{
+        alarmMethods: string[];
+    }>;
+    execute(request: ReviewEnvelope, { worktreePath, workspacePath, runDir, signal, onEvent }: ExecutionContext): Promise<ReviewResult>;
+};