@claudexor/core 1.0.0 → 2.1.1

package/dist/doctor.js

@@ -1,4 +1,5 @@
 import { createHash } from "node:crypto";
+import { redactSecrets } from "@claudexor/util";
 /**
  * Short-lived doctor cache. Real-harness `doctor()` is expensive (version probe,
  * native-auth check, and — for the api-key route — a paid isolated smoke), and
@@ -10,15 +11,58 @@ import { createHash } from "node:crypto";
 const DOCTOR_TTL_MS = Number(process.env.CLAUDEXOR_DOCTOR_TTL_MS ?? 90_000);
 /**
  * Non-OK results age out much faster: an out-of-band `codex login` /
- * `claude /login` (which Claudexor cannot observe to invalidate) should become
+ * `claude auth login --claudeai` (which Claudexor cannot observe to invalidate) should become
  * routable within seconds, not a full TTL. OK results keep the long TTL since
  * readiness rarely degrades spontaneously and re-probing it is what costs money.
  */
 const DOCTOR_NON_OK_TTL_MS = Number(process.env.CLAUDEXOR_DOCTOR_NON_OK_TTL_MS ?? 15_000);
 const doctorCache = new Map();
-/** Clear the doctor cache (call after auth/secrets/settings mutations). */
-export function invalidateDoctorCache() {
-    doctorCache.clear();
+let globalCacheGeneration = 0;
+const adapterCacheGenerations = new Map();
+const cwdCacheGenerations = new Map();
+const adapterCwdCacheGenerations = new Map();
+/**
+ * Invalidate derived doctor evidence after auth/secrets/settings mutations.
+ * No scope preserves the historical whole-cache behavior. A scope removes
+ * only entries whose structured dimensions match, so a Claude login cannot
+ * evict an unrelated Codex API-key smoke (or vice versa).
+ */
+export function invalidateDoctorCache(scope) {
+    if (!scope || (scope.adapterId === undefined && scope.cwd === undefined)) {
+        doctorCache.clear();
+        globalCacheGeneration += 1;
+        adapterCacheGenerations.clear();
+        cwdCacheGenerations.clear();
+        adapterCwdCacheGenerations.clear();
+        return;
+    }
+    if (scope.adapterId !== undefined && scope.cwd !== undefined) {
+        incrementGeneration(adapterCwdCacheGenerations, `${scope.adapterId}\0${scope.cwd}`);
+    }
+    else if (scope.adapterId !== undefined) {
+        incrementGeneration(adapterCacheGenerations, scope.adapterId);
+    }
+    else if (scope.cwd !== undefined) {
+        incrementGeneration(cwdCacheGenerations, scope.cwd);
+    }
+    for (const [key, entry] of doctorCache) {
+        if (scope.adapterId !== undefined && entry.adapterId !== scope.adapterId)
+            continue;
+        if (scope.cwd !== undefined && entry.cwd !== scope.cwd)
+            continue;
+        doctorCache.delete(key);
+    }
+}
+function incrementGeneration(generations, key) {
+    generations.set(key, (generations.get(key) ?? 0) + 1);
+}
+function cacheGeneration(adapterId, cwd) {
+    return [
+        globalCacheGeneration,
+        adapterCacheGenerations.get(adapterId) ?? 0,
+        cwdCacheGenerations.get(cwd) ?? 0,
+        adapterCwdCacheGenerations.get(`${adapterId}\0${cwd}`) ?? 0,
+    ].join(":");
 }
 function doctorCacheKey(adapterId, spec) {
     // The key covers EVERY spec field that can change a probe's outcome: cwd,
@@ -33,7 +77,7 @@ function doctorCacheKey(adapterId, spec) {
             .digest("hex")
             .slice(0, 16)
         : "";
-    return `${adapterId}::${spec.cwd ?? ""}::${spec.authPreference ?? ""}::${envDigest}`;
+    return `${adapterId}::${spec.cwd ?? ""}::${spec.authPreference ?? ""}::${spec.authSource ?? ""}::${envDigest}`;
 }
 /** Run conformance probes across all registered adapters; never throws. */
 export async function runDoctor(adapters, spec) {
@@ -42,7 +86,18 @@ export async function runDoctor(adapters, spec) {
     for (const adapter of adapters.values()) {
         // Fakes are cheap + deterministic and are reconfigured per test — never cache
         // them (avoids cross-test contamination); only real adapters benefit.
-        const cacheable = DOCTOR_TTL_MS > 0 && !adapter.id.startsWith("fake");
+        // A caller asking for fresh evidence must neither read nor seed shared
+        // cache state. This keeps an explicit post-login probe isolated from the
+        // normal routing cache and avoids clearing useful reports for other specs.
+        const cacheable = DOCTOR_TTL_MS > 0 &&
+            !adapter.id.startsWith("fake") &&
+            spec.fresh !== true &&
+            spec.abortSignal === undefined;
+        const cwd = spec.cwd ?? "";
+        // Capture the invalidation generation before the asynchronous probe. If
+        // auth/settings change while it is in flight, its result may still be
+        // returned to the original caller but must never repopulate shared cache.
+        const generation = cacheGeneration(adapter.id, cwd);
         const key = doctorCacheKey(adapter.id, spec);
         if (cacheable) {
             const hit = doctorCache.get(key);
@@ -57,17 +112,41 @@ export async function runDoctor(adapters, spec) {
             report = await adapter.doctor(spec);
         }
         catch (err) {
+            // Adapter errors are projected into successful doctor/readiness DTOs, so
+            // they bypass the control-api problem redactor. Sanitize at this producer
+            // boundary before the message can enter reasons, cache state, or exact
+            // auth-source evidence.
+            const detail = redactSecrets(err instanceof Error ? err.message : String(err));
             report = {
                 harness_id: adapter.id,
                 status: "unavailable",
                 checks: [],
                 enabled_intents: [],
                 disabled_intents: [],
-                reasons: [err instanceof Error ? err.message : String(err)],
+                reasons: [detail],
+                // An exact source probe that failed is UNKNOWN, not evidence that the
+                // source is absent. Preserve the requested identity so callers never
+                // have to collapse "probe failed" into null/unsupported.
+                auth_sources: spec.authSource === undefined
+                    ? []
+                    : [
+                        {
+                            source: spec.authSource,
+                            availability: "unknown",
+                            verification: "not_run",
+                            detail,
+                        },
+                    ],
             };
         }
-        if (cacheable)
-            doctorCache.set(key, { report, at: now });
+        if (cacheable && generation === cacheGeneration(adapter.id, cwd)) {
+            doctorCache.set(key, {
+                adapterId: adapter.id,
+                cwd,
+                report,
+                at: now,
+            });
+        }
         reports.push(report);
     }
     return reports;

package/dist/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,CAAC;AAC5E;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,MAAM,CAAC,CAAC;AAK1F,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;AAExD,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB;IACnC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,IAAgB;IACzD,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG;QACxB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACvF,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,GAAG,SAAS,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,cAAc,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;AACvF,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAyB,EACzB,IAAgB;IAEhB,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,SAAS,GAAG,aAAa,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,GAAG,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC/E,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG;gBACP,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,EAAE;gBACV,eAAe,EAAE,EAAE;gBACnB,gBAAgB,EAAE,EAAE;gBACpB,OAAO,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC5D,CAAC;QACJ,CAAC;QACD,IAAI,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,CAAC;AAC5E;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,MAAM,CAAC,CAAC;AAO1F,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;AACxD,IAAI,qBAAqB,GAAG,CAAC,CAAC;AAC9B,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC1D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAkB,CAAC;AAS7D;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAoC;IACxE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACzE,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,qBAAqB,IAAI,CAAC,CAAC;QAC3B,uBAAuB,CAAC,KAAK,EAAE,CAAC;QAChC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QAC5B,0BAA0B,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7D,mBAAmB,CAAC,0BAA0B,EAAE,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,mBAAmB,CAAC,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACnC,mBAAmB,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,SAAS;QACnF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,SAAS;QACjE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAgC,EAAE,GAAW;IACxE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,GAAW;IACrD,OAAO;QACL,qBAAqB;QACrB,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3C,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACjC,0BAA0B,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC;KAC5D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,IAAgB;IACzD,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG;QACxB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACvF,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,GAAG,SAAS,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,cAAc,IAAI,EAAE,KAAK,IAAI,CAAC,UAAU,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;AACjH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAyB,EACzB,IAAgB;IAEhB,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,8EAA8E;QAC9E,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,SAAS,GACb,aAAa,GAAG,CAAC;YACjB,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,KAAK,KAAK,IAAI;YACnB,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QAC3B,wEAAwE;QACxE,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,GAAG,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC/E,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,wBAAwB;YACxB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,MAAM,GAAG;gBACP,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,EAAE;gBACV,eAAe,EAAE,EAAE;gBACnB,gBAAgB,EAAE,EAAE;gBACpB,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,sEAAsE;gBACtE,qEAAqE;gBACrE,yDAAyD;gBACzD,YAAY,EACV,IAAI,CAAC,UAAU,KAAK,SAAS;oBAC3B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE;4BACE,MAAM,EAAE,IAAI,CAAC,UAAU;4BACvB,YAAY,EAAE,SAAS;4BACvB,YAAY,EAAE,SAAS;4BACvB,MAAM;yBACP;qBACF;aACR,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,IAAI,UAAU,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;YACjE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE;gBACnB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,GAAG;gBACH,MAAM;gBACN,EAAE,EAAE,GAAG;aACR,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/effort.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"effort.d.ts","sourceRoot":"","sources":["../src/effort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAiBpD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,EACxC,SAAS,EAAE,SAAS,UAAU,EAAE,GAC/B,UAAU,GAAG,IAAI,CAiBnB"}
+{"version":3,"file":"effort.d.ts","sourceRoot":"","sources":["../src/effort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAiBpD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,EACxC,SAAS,EAAE,SAAS,UAAU,EAAE,GAC/B,UAAU,GAAG,IAAI,CAoBnB"}

package/dist/effort.js

@@ -39,7 +39,8 @@ export function normalizeEffort(requested, supported) {
     for (const level of supported) {
         const distance = Math.abs(rank(level) - want);
         // Strictly-closer wins; on a tie keep the LOWER-ranked (cheaper) candidate.
-        if (distance < bestDistance || (distance === bestDistance && best !== null && rank(level) < rank(best))) {
+        if (distance < bestDistance ||
+            (distance === bestDistance && best !== null && rank(level) < rank(best))) {
             best = level;
             bestDistance = distance;
         }

package/dist/effort.js.map

@@ -1 +1 @@
-{"version":3,"file":"effort.js","sourceRoot":"","sources":["../src/effort.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,IAAI,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,aAAa,GAA0B,gBAAgB,CAAC,OAAO,CAAC;AAEtE,SAAS,IAAI,CAAC,KAAiB;IAC7B,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAwC,EACxC,SAAgC;IAEhC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,4EAA4E;QAC5E,IAAI,QAAQ,GAAG,YAAY,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxG,IAAI,GAAG,KAAK,CAAC;YACb,YAAY,GAAG,QAAQ,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"effort.js","sourceRoot":"","sources":["../src/effort.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,IAAI,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,aAAa,GAA0B,gBAAgB,CAAC,OAAO,CAAC;AAEtE,SAAS,IAAI,CAAC,KAAiB;IAC7B,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAwC,EACxC,SAAgC;IAEhC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,4EAA4E;QAC5E,IACE,QAAQ,GAAG,YAAY;YACvB,CAAC,QAAQ,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EACxE,CAAC;YACD,IAAI,GAAG,KAAK,CAAC;YACb,YAAY,GAAG,QAAQ,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/env-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-scope.d.ts","sourceRoot":"","sources":["../src/env-scope.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EA6ChD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAOnF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAoChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,GAAG,OAAO,EACtC,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,MAAM,CAAC,UAAU,CASnB"}
+{"version":3,"file":"env-scope.d.ts","sourceRoot":"","sources":["../src/env-scope.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EA4DhD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAOnF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAoChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,GAAG,OAAO,EACtC,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,MAAM,CAAC,UAAU,CASnB"}

package/dist/env-scope.js

@@ -22,6 +22,7 @@ export const PROVIDER_SECRET_ENV = [
     "OPENAI_PROJECT_ID",
     "OPENAI_BASE_URL",
     "CODEX_API_KEY",
+    "CODEX_ACCESS_TOKEN",
     "CLAUDEXOR_CODEX_API_KEY",
     // Anthropic / Claude
     "ANTHROPIC_API_KEY",
@@ -31,8 +32,13 @@ export const PROVIDER_SECRET_ENV = [
     "CLAUDE_CODE_OAUTH_TOKEN",
     "CLAUDE_CODE_USE_BEDROCK",
     "CLAUDE_CODE_USE_VERTEX",
+    "CLAUDE_CODE_USE_FOUNDRY",
     "ANTHROPIC_BEDROCK_BASE_URL",
     "ANTHROPIC_VERTEX_PROJECT_ID",
+    "ANTHROPIC_FOUNDRY_API_KEY",
+    "ANTHROPIC_FOUNDRY_AUTH_TOKEN",
+    "ANTHROPIC_FOUNDRY_RESOURCE",
+    "ANTHROPIC_FOUNDRY_BASE_URL",
     "CLAUDEXOR_ANTHROPIC_API_KEY",
     // Cloud provider creds reachable by Bedrock/Vertex routing
     "AWS_ACCESS_KEY_ID",
@@ -40,6 +46,15 @@ export const PROVIDER_SECRET_ENV = [
     "AWS_SESSION_TOKEN",
     "AWS_PROFILE",
     "GOOGLE_APPLICATION_CREDENTIALS",
+    // Azure credentials and route selectors reachable by Foundry auth.
+    "AZURE_CLIENT_ID",
+    "AZURE_CLIENT_SECRET",
+    "AZURE_TENANT_ID",
+    "AZURE_SUBSCRIPTION_ID",
+    "AZURE_FEDERATED_TOKEN_FILE",
+    "AZURE_AUTHORITY_HOST",
+    "AZURE_TOKEN_CREDENTIALS",
+    "AZURE_CONFIG_DIR",
     // Google / Gemini, xAI, OpenRouter, Cursor, OpenCode
     "GEMINI_API_KEY",
     "GOOGLE_API_KEY",

package/dist/env-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-scope.js","sourceRoot":"","sources":["../src/env-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;IACf,yBAAyB;IACzB,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;IAChB,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,4BAA4B;IAC5B,6BAA6B;IAC7B,6BAA6B;IAC7B,2DAA2D;IAC3D,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,gCAAgC;IAChC,qDAAqD;IACrD,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,qBAAqB;IACrB,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,kBAAkB;IAClB,oCAAoC;IACpC,sBAAsB;IACtB,2BAA2B;IAC3B,uEAAuE;IACvE,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;CAClB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,UAAU;IACV,UAAU;IACV,8EAA8E;IAC9E,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,YAAY,EAAE,wCAAwC;IACtD,4EAA4E;IAC5E,gFAAgF;IAChF,qFAAqF;IACrF,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,qBAAqB;IACrB,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,gBAAgB;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAsC,EACtC,SAA4B,OAAO,CAAC,GAAG;IAEvC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IACrD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"env-scope.js","sourceRoot":"","sources":["../src/env-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;IACf,oBAAoB;IACpB,yBAAyB;IACzB,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;IAChB,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,yBAAyB;IACzB,4BAA4B;IAC5B,6BAA6B;IAC7B,2BAA2B;IAC3B,8BAA8B;IAC9B,4BAA4B;IAC5B,4BAA4B;IAC5B,6BAA6B;IAC7B,2DAA2D;IAC3D,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,gCAAgC;IAChC,mEAAmE;IACnE,iBAAiB;IACjB,qBAAqB;IACrB,iBAAiB;IACjB,uBAAuB;IACvB,4BAA4B;IAC5B,sBAAsB;IACtB,yBAAyB;IACzB,kBAAkB;IAClB,qDAAqD;IACrD,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,qBAAqB;IACrB,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,kBAAkB;IAClB,oCAAoC;IACpC,sBAAsB;IACtB,2BAA2B;IAC3B,uEAAuE;IACvE,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;CAClB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,UAAU;IACV,UAAU;IACV,8EAA8E;IAC9E,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,YAAY,EAAE,wCAAwC;IACtD,4EAA4E;IAC5E,gFAAgF;IAChF,qFAAqF;IACrF,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,qBAAqB;IACrB,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,gBAAgB;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAsC,EACtC,SAA4B,OAAO,CAAC,GAAG;IAEvC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IACrD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/executable-inspection.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Immutable facts about the exact bytes at an executable path — the SINGLE
+ * producer of executable facts shared by the harness PATH resolver and the
+ * setup-login evidence gate, so the two surfaces can never disagree about the
+ * same file (the parity break that made setup-login reject a binary Doctor and
+ * runs accepted).
+ *
+ * `nlink` is captured as a FACT, never an inline rejection here: link-count
+ * policy is scoped to the file's owner/type by the CALLER. Daemon-owned MUTABLE
+ * files (journal, token, locks) legitimately require `nlink === 1` at their own
+ * call-sites — a second hard link there means the private file is not
+ * exclusively owned. An external, read-only vendor binary is a different case:
+ * the official installer hard-links the platform binary into its launcher
+ * (`@anthropic-ai/claude-code` → `nlink === 2`), so for a binary Claudexor never
+ * writes, `dev`/`inode`/`sha256` already prove which exact bytes will run and
+ * the link count is irrelevant.
+ */
+export interface ExecutableInspection {
+    /** realpath-resolved canonical path (all symlinks followed). */
+    realpath: string;
+    isRegularFile: boolean;
+    /** Any exec bit set (POSIX mode & 0o111). Advisory on win32. */
+    isExecutable: boolean;
+    size: number;
+    /** mode & 0o7777. */
+    mode: number;
+    device: string;
+    inode: string;
+    nlink: number;
+    /** The opened inode still matches the named canonical file and it is not a
+     *  symlink — no swap raced between open and stat. */
+    identityStable: boolean;
+}
+/**
+ * Safely open the realpath-resolved canonical file (O_NOFOLLOW so a swapped
+ * symlink can't redirect us; O_NONBLOCK so a FIFO on PATH cannot block the
+ * open), capture its facts, and hand the SAME fd to `fn` so a content read is
+ * byte-faithful to the exact inode we identity-checked (no TOCTOU between the
+ * check and the read).
+ */
+export declare function withExecutableInspection<T>(path: string, fn: (info: ExecutableInspection, fd: number) => T): T;
+/** Facts only (fd closed before returning). */
+export declare function inspectExecutable(path: string): ExecutableInspection;
+/** True when the inspection describes a real, bounded regular file. */
+export declare function isBoundedRegularExecutable(info: ExecutableInspection): boolean;
+/**
+ * Cheap "the process can spawn this" verdict for the harness PATH resolver: a
+ * bounded regular file the current user may execute. No content hash. Returns
+ * false on any inspection error (dangling symlink, permission, mid-walk race).
+ */
+export declare function isLaunchableExecutable(path: string): boolean;
+//# sourceMappingURL=executable-inspection.d.ts.map

package/dist/executable-inspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-inspection.d.ts","sourceRoot":"","sources":["../src/executable-inspection.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd;yDACqD;IACrD,cAAc,EAAE,OAAO,CAAC;CACzB;AASD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EACxC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,CAAC,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,KAAK,CAAC,GAChD,CAAC,CAuBH;AAED,+CAA+C;AAC/C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAEpE;AAED,uEAAuE;AACvE,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAI9E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuB5D"}

package/dist/executable-inspection.js

@@ -0,0 +1,83 @@
+import { accessSync, closeSync, constants, fstatSync, lstatSync, openSync, realpathSync, statSync, } from "node:fs";
+import { resolve } from "node:path";
+// O_NOFOLLOW/O_NONBLOCK are POSIX-only; on win32 they are undefined and must
+// degrade to a no-op (0) or the OR would produce NaN and every open would fail
+// — which would make the resolver find no binaries on Windows.
+const O_NOFOLLOW = constants.O_NOFOLLOW ?? 0;
+const O_NONBLOCK = constants.O_NONBLOCK ?? 0;
+const MAX_EXECUTABLE_BYTES = 1024 * 1024 * 1024; // 1 GiB
+/**
+ * Safely open the realpath-resolved canonical file (O_NOFOLLOW so a swapped
+ * symlink can't redirect us; O_NONBLOCK so a FIFO on PATH cannot block the
+ * open), capture its facts, and hand the SAME fd to `fn` so a content read is
+ * byte-faithful to the exact inode we identity-checked (no TOCTOU between the
+ * check and the read).
+ */
+export function withExecutableInspection(path, fn) {
+    const canonical = realpathSync(resolve(path));
+    const fd = openSync(canonical, constants.O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
+    try {
+        const stat = fstatSync(fd, { bigint: true });
+        const named = lstatSync(canonical, { bigint: true });
+        const identityStable = !named.isSymbolicLink() && named.isFile() && named.dev === stat.dev && named.ino === stat.ino;
+        const info = {
+            realpath: canonical,
+            isRegularFile: stat.isFile(),
+            isExecutable: (stat.mode & 73n) !== 0n,
+            size: Number(stat.size),
+            mode: Number(stat.mode & 4095n),
+            device: String(stat.dev),
+            inode: String(stat.ino),
+            nlink: Number(stat.nlink),
+            identityStable,
+        };
+        return fn(info, fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Facts only (fd closed before returning). */
+export function inspectExecutable(path) {
+    return withExecutableInspection(path, (info) => info);
+}
+/** True when the inspection describes a real, bounded regular file. */
+export function isBoundedRegularExecutable(info) {
+    return (info.isRegularFile && info.identityStable && info.size >= 0 && info.size <= MAX_EXECUTABLE_BYTES);
+}
+/**
+ * Cheap "the process can spawn this" verdict for the harness PATH resolver: a
+ * bounded regular file the current user may execute. No content hash. Returns
+ * false on any inspection error (dangling symlink, permission, mid-walk race).
+ */
+export function isLaunchableExecutable(path) {
+    try {
+        const info = inspectExecutable(path);
+        if (!info.isRegularFile || !info.identityStable)
+            return false;
+        if (process.platform !== "win32")
+            accessSync(info.realpath, constants.X_OK);
+        return true;
+    }
+    catch (err) {
+        // An exec-only binary (mode 0o111, not readable) cannot be O_RDONLY-opened
+        // by inspectExecutable, but the old resolver accepted it — execution does
+        // not require read. Fall back to the classic spawn-faithful probe (a
+        // regular file the process may execute) so resolution behavior is unchanged.
+        if (err?.code === "EACCES") {
+            try {
+                const real = realpathSync(resolve(path));
+                if (!statSync(real).isFile())
+                    return false;
+                if (process.platform !== "win32")
+                    accessSync(real, constants.X_OK);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=executable-inspection.js.map

package/dist/executable-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-inspection.js","sourceRoot":"","sources":["../src/executable-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoCpC,6EAA6E;AAC7E,+EAA+E;AAC/E,+DAA+D;AAC/D,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AAC7C,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,EAAiD;IAEjD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,cAAc,GAClB,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC;QAChG,MAAM,IAAI,GAAyB;YACjC,QAAQ,EAAE,SAAS;YACnB,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE;YAC5B,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE;YACzC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAO,CAAC;YACjC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB,cAAc;SACf,CAAC;QACF,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,wBAAwB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,0BAA0B,CAAC,IAA0B;IACnE,OAAO,CACL,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,oBAAoB,CACjG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,6EAA6E;QAC7E,IAAK,GAAyC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAAE,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/inactivity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inactivity.d.ts","sourceRoot":"","sources":["../src/inactivity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAQvC;AAED,wBAAuB,sBAAsB,CAAC,CAAC,EAC7C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,aAAa,CAAC,CAAC,CAAC,CA8ClB"}
+{"version":3,"file":"inactivity.d.ts","sourceRoot":"","sources":["../src/inactivity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAQvC;AAED,wBAAuB,sBAAsB,CAAC,CAAC,EAC7C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,aAAa,CAAC,CAAC,CAAC,CAiDlB"}

package/dist/inactivity.js.map

@@ -1 +1 @@
-{"version":3,"file":"inactivity.js","sourceRoot":"","sources":["../src/inactivity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACjC;IAArB,YAAqB,SAAiB;QACpC,KAAK,CACH,kCAAkC,SAAS,4BAA4B;YACrE,6DAA6D;YAC7D,gFAAgF,CACnF,CAAC;QALiB,cAAS,GAAT,SAAS,CAAQ;QAMpC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,sBAAsB,CAC3C,MAAwB,EACxB,IAWC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;gBACzB,GAAG,EAAE,CAAC;gBACN,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,EAAE,EAAE,CAAC;QACX,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChC,yEAAyE;QACzE,wEAAwE;QACxE,yCAAyC;IAC3C,CAAC,CAAC;IACF,IAAI,CAAC;QACH,GAAG,EAAE,CAAC;QACN,SAAS,CAAC;YACR,qEAAqE;YACrE,kEAAkE;YAClE,uEAAuE;YACvE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,QAAQ,CAAC,IAAI,EAAE;gBACf,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;oBACjC,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,QAAQ;wBAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnC,CAAC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,GAAG,EAAE,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,qEAAqE;QACrE,kEAAkE;QAClE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAkB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}
+{"version":3,"file":"inactivity.js","sourceRoot":"","sources":["../src/inactivity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACjC;IAArB,YAAqB,SAAiB;QACpC,KAAK,CACH,kCAAkC,SAAS,4BAA4B;YACrE,6DAA6D;YAC7D,gFAAgF,CACnF,CAAC;QALiB,cAAS,GAAT,SAAS,CAAQ;QAMpC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,sBAAsB,CAC3C,MAAwB,EACxB,IAWC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE;YACH,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;gBACzB,GAAG,EAAE,CAAC;gBACN,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,EAAE,EAAE,CAAC;QACX,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAC5B,CAAC;QACF,yEAAyE;QACzE,wEAAwE;QACxE,yCAAyC;IAC3C,CAAC,CAAC;IACF,IAAI,CAAC;QACH,GAAG,EAAE,CAAC;QACN,SAAS,CAAC;YACR,qEAAqE;YACrE,kEAAkE;YAClE,uEAAuE;YACvE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,QAAQ,CAAC,IAAI,EAAE;gBACf,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;oBACjC,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,QAAQ;wBAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnC,CAAC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,GAAG,EAAE,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,qEAAqE;QACrE,kEAAkE;QAClE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAkB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./errors.js";
 export * from "./adapter.js";
+export * from "./attachment-integrity.js";
 export * from "./effort.js";
 export * from "./model.js";
 export * from "./proc.js";
@@ -10,7 +11,15 @@ export * from "./diff.js";
 export * from "./conformance.js";
 export * from "./capabilities.js";
 export * from "./doctor.js";
+export * from "./answer-assembly.js";
+export * from "./auth-readiness.js";
+export * from "./auth-capability-verifier.js";
 export * from "./env-scope.js";
 export * from "./runtime-env.js";
+export * from "./executable-inspection.js";
+export * from "./instructions.js";
 export * from "./browser-mcp.js";
+export * from "./process-identity.js";
+export * from "./process-group.js";
+export * from "./isolation-locator.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 export * from "./errors.js";
 export * from "./adapter.js";
+export * from "./attachment-integrity.js";
 export * from "./effort.js";
 export * from "./model.js";
 export * from "./proc.js";
@@ -10,7 +11,15 @@ export * from "./diff.js";
 export * from "./conformance.js";
 export * from "./capabilities.js";
 export * from "./doctor.js";
+export * from "./answer-assembly.js";
+export * from "./auth-readiness.js";
+export * from "./auth-capability-verifier.js";
 export * from "./env-scope.js";
 export * from "./runtime-env.js";
+export * from "./executable-inspection.js";
+export * from "./instructions.js";
 export * from "./browser-mcp.js";
+export * from "./process-identity.js";
+export * from "./process-group.js";
+export * from "./isolation-locator.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC"}

package/dist/instructions.d.ts

@@ -0,0 +1,10 @@
+import type { HarnessRunSpec } from "@claudexor/schema";
+/**
+ * Layer caller-supplied per-run instructions onto the prompt for harnesses with
+ * NO native system-prompt flag (cursor, opencode, raw-api). Claude and Codex use
+ * their native additive channels (`--append-system-prompt`, `developer_instructions`)
+ * instead and never call this. The block is explicitly delimited so the model
+ * reads it as system framing, not as part of the user's request.
+ */
+export declare function promptWithInstructions(spec: Pick<HarnessRunSpec, "prompt" | "instructions">): string;
+//# sourceMappingURL=instructions.d.ts.map

package/dist/instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../src/instructions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,cAAc,CAAC,GACpD,MAAM,CAIR"}

package/dist/instructions.js

@@ -0,0 +1,14 @@
+/**
+ * Layer caller-supplied per-run instructions onto the prompt for harnesses with
+ * NO native system-prompt flag (cursor, opencode, raw-api). Claude and Codex use
+ * their native additive channels (`--append-system-prompt`, `developer_instructions`)
+ * instead and never call this. The block is explicitly delimited so the model
+ * reads it as system framing, not as part of the user's request.
+ */
+export function promptWithInstructions(spec) {
+    const instructions = spec.instructions?.trim();
+    if (!instructions)
+        return spec.prompt;
+    return `[SYSTEM INSTRUCTIONS]\n${instructions}\n[END SYSTEM INSTRUCTIONS]\n\n${spec.prompt}`;
+}
+//# sourceMappingURL=instructions.js.map

package/dist/instructions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.js","sourceRoot":"","sources":["../src/instructions.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAqD;IAErD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACtC,OAAO,0BAA0B,YAAY,kCAAkC,IAAI,CAAC,MAAM,EAAE,CAAC;AAC/F,CAAC"}

package/dist/isolation-locator.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared locator discipline (release wave round-11): absolute, canonicalized
+ * through the DEEPEST EXISTING ancestor (a nonexistent leaf under a symlinked
+ * parent cannot alias a forbidden store), and CONFINED to the Claudexor-owned
+ * tree — a locator inside a repository or an arbitrary user dir would put
+ * credential state where git or other tools can capture it.
+ *
+ * The confinement root FOLLOWS the v2 root (release wave round-18 #4): under
+ * an explicit CLAUDEXOR_CONFIG_DIR override that override IS the complete
+ * relocatable root — a hermetic/disposable run must accept profiles inside
+ * it and reject the host's real ~/.claudexor (host credential state must not
+ * leak into an isolated environment). Without the override, the owned tree
+ * is ~/.claudexor as before.
+ */
+/** Canonicalize a path through its DEEPEST EXISTING ancestor (symlinks
+ * resolved), re-appending the not-yet-existing remainder — so two spellings
+ * of one location (e.g. /var vs /private/var on macOS) always compare equal
+ * even before the leaf exists. */
+export declare function normalizeThroughExistingAncestor(path: string): string;
+export declare function canonicalIsolationLocator(locator: string, label: string): string;
+//# sourceMappingURL=isolation-locator.d.ts.map

package/dist/isolation-locator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation-locator.d.ts","sourceRoot":"","sources":["../src/isolation-locator.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;GAaG;AACH;;;kCAGkC;AAClC,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAerE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAahF"}

package/dist/isolation-locator.js

@@ -0,0 +1,55 @@
+import { realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { claudexorOwnedRoot } from "@claudexor/util";
+/**
+ * Shared locator discipline (release wave round-11): absolute, canonicalized
+ * through the DEEPEST EXISTING ancestor (a nonexistent leaf under a symlinked
+ * parent cannot alias a forbidden store), and CONFINED to the Claudexor-owned
+ * tree — a locator inside a repository or an arbitrary user dir would put
+ * credential state where git or other tools can capture it.
+ *
+ * The confinement root FOLLOWS the v2 root (release wave round-18 #4): under
+ * an explicit CLAUDEXOR_CONFIG_DIR override that override IS the complete
+ * relocatable root — a hermetic/disposable run must accept profiles inside
+ * it and reject the host's real ~/.claudexor (host credential state must not
+ * leak into an isolated environment). Without the override, the owned tree
+ * is ~/.claudexor as before.
+ */
+/** Canonicalize a path through its DEEPEST EXISTING ancestor (symlinks
+ * resolved), re-appending the not-yet-existing remainder — so two spellings
+ * of one location (e.g. /var vs /private/var on macOS) always compare equal
+ * even before the leaf exists. */
+export function normalizeThroughExistingAncestor(path) {
+    let existing = resolve(path);
+    const tail = [];
+    for (;;) {
+        try {
+            existing = realpathSync(existing);
+            break;
+        }
+        catch {
+            const parent = dirname(existing);
+            if (parent === existing)
+                break;
+            tail.unshift(basename(existing));
+            existing = parent;
+        }
+    }
+    return tail.length > 0 ? join(existing, ...tail) : existing;
+}
+export function canonicalIsolationLocator(locator, label) {
+    if (!isAbsolute(locator))
+        throw new Error(`${label} must be absolute: ${locator}`);
+    const dir = normalizeThroughExistingAncestor(locator);
+    // Normalize the confinement root the SAME way as the locator (round-19,
+    // fable checkpoint): a not-yet-created CLAUDEXOR_CONFIG_DIR under a
+    // symlinked parent (/var → /private/var on macOS) would otherwise compare
+    // unequal to a locator that was resolved through that symlink, and
+    // false-reject a valid in-root profile.
+    const owned = normalizeThroughExistingAncestor(claudexorOwnedRoot());
+    if (dir !== owned && !dir.startsWith(owned + sep)) {
+        throw new Error(`${label} must live under ${owned} (got ${dir})`);
+    }
+    return dir;
+}
+//# sourceMappingURL=isolation-locator.js.map

package/dist/isolation-locator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation-locator.js","sourceRoot":"","sources":["../src/isolation-locator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH;;;kCAGkC;AAClC,MAAM,UAAU,gCAAgC,CAAC,IAAY;IAC3D,IAAI,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM;YAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjC,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAE,KAAa;IACtE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,OAAO,EAAE,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;IACtD,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,mEAAmE;IACnE,wCAAwC;IACxC,MAAM,KAAK,GAAG,gCAAgC,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACrE,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,KAAK,SAAS,GAAG,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}