@claudexor/core 1.0.0

package/dist/env-scope.js

@@ -0,0 +1,139 @@
+import { harnessRuntimeEnv } from "./runtime-env.js";
+/**
+ * Declarative env-scrub SSOT for harness children.
+ *
+ * Previously each adapter hand-rolled a partial denylist: codex scrubbed only
+ * OpenAI vars, claude only Anthropic/AWS/Google, cursor only its base-URL. The
+ * result was a cross-provider credential LEAK — a codex child inherited the
+ * user's `ANTHROPIC_API_KEY`, a claude child inherited `OPENAI_API_KEY`, etc.
+ *
+ * The contract is now uniform: scrub EVERY known provider credential / redirect
+ * env var from a harness child, then have the adapter re-add ONLY the single
+ * variable its chosen auth route legitimately needs (after the scrub). Base-URL
+ * redirects are always scrubbed so a redirect can never exfiltrate a seeded
+ * credential.
+ */
+export const PROVIDER_SECRET_ENV = [
+    // OpenAI / Codex
+    "OPENAI_API_KEY",
+    "OPENAI_ORG",
+    "OPENAI_ORG_ID",
+    "OPENAI_PROJECT",
+    "OPENAI_PROJECT_ID",
+    "OPENAI_BASE_URL",
+    "CODEX_API_KEY",
+    "CLAUDEXOR_CODEX_API_KEY",
+    // Anthropic / Claude
+    "ANTHROPIC_API_KEY",
+    "ANTHROPIC_AUTH_TOKEN",
+    "ANTHROPIC_BASE_URL",
+    "CLAUDE_API_KEY",
+    "CLAUDE_CODE_OAUTH_TOKEN",
+    "CLAUDE_CODE_USE_BEDROCK",
+    "CLAUDE_CODE_USE_VERTEX",
+    "ANTHROPIC_BEDROCK_BASE_URL",
+    "ANTHROPIC_VERTEX_PROJECT_ID",
+    "CLAUDEXOR_ANTHROPIC_API_KEY",
+    // Cloud provider creds reachable by Bedrock/Vertex routing
+    "AWS_ACCESS_KEY_ID",
+    "AWS_SECRET_ACCESS_KEY",
+    "AWS_SESSION_TOKEN",
+    "AWS_PROFILE",
+    "GOOGLE_APPLICATION_CREDENTIALS",
+    // Google / Gemini, xAI, OpenRouter, Cursor, OpenCode
+    "GEMINI_API_KEY",
+    "GOOGLE_API_KEY",
+    "XAI_API_KEY",
+    "OPENROUTER_API_KEY",
+    "OPENROUTER_BASE_URL",
+    "CURSOR_API_KEY",
+    "CLAUDEXOR_CURSOR_API_KEY",
+    "CURSOR_API_URL",
+    "OPENCODE_API_KEY",
+    // Raw OpenAI-compatible API harness
+    "CLAUDEXOR_RAWAPI_KEY",
+    "CLAUDEXOR_RAWAPI_BASE_URL",
+    // Other providers harness CLIs can read (third-party routers / clouds)
+    "GROQ_API_KEY",
+    "MISTRAL_API_KEY",
+    "DEEPSEEK_API_KEY",
+    "OPENAI_API_BASE",
+];
+/**
+ * Build an env patch (`{VAR: null}`) that scrubs every provider secret EXCEPT the
+ * ones in `keep` (the vars the adapter's chosen route legitimately uses, which it
+ * sets explicitly afterward). Apply this AFTER spreading `spec.env`.
+ */
+export function providerScrubEnv(keep = []) {
+    const keepSet = new Set(keep);
+    const out = {};
+    for (const name of PROVIDER_SECRET_ENV) {
+        if (!keepSet.has(name))
+            out[name] = null;
+    }
+    return out;
+}
+/**
+ * Minimal env an interactive CLI genuinely needs to run (locale, terminal, temp,
+ * and PATH to find its own binary + tools). Everything else is dropped under
+ * `env_inheritance: "clean"` — agent env isolation. Exact var values still come
+ * from the parent; only the KEY SET is restricted. Provider secrets are NOT in
+ * the allowlist (defense-in-depth on top of providerScrubEnv), and the adapter
+ * re-adds its single chosen credential explicitly afterward.
+ */
+export const CLEAN_ENV_ALLOWLIST = [
+    "PATH",
+    "HOME",
+    "USER",
+    "LOGNAME",
+    "SHELL",
+    "TERM",
+    "TMPDIR",
+    "TZ",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "LANGUAGE",
+    // Node/runtime discovery the spawned CLI may itself need to locate a runtime.
+    "NODE_PATH",
+    "NVM_DIR",
+    "XDG_CONFIG_HOME",
+    "XDG_CACHE_HOME",
+    "XDG_DATA_HOME",
+    "SYSTEMROOT", // Windows CLIs fail to start without it
+    // Proxy + TLS trust: NOT provider secrets, but a harness behind a corporate
+    // proxy / custom CA loses egress and TLS trust without them — `clean` must keep
+    // the network path working. (Both cases: curl/openssl read lower, Node reads upper.)
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "ALL_PROXY",
+    "NO_PROXY",
+    "http_proxy",
+    "https_proxy",
+    "all_proxy",
+    "no_proxy",
+    "NODE_EXTRA_CA_CERTS",
+    "SSL_CERT_FILE",
+    "SSL_CERT_DIR",
+    "REQUESTS_CA_BUNDLE",
+    "CURL_CA_BUNDLE",
+];
+/**
+ * Build the base child env for a given inheritance mode. `mirror_native` copies
+ * the parent env (the native CLIs' default); `clean` copies only the minimal
+ * allowlist (agent isolation). The adapter's `spec.env` overrides + the
+ * providerScrubEnv patch are applied ON TOP of this by the spawn layer.
+ */
+export function composeBaseEnv(inheritance, source = process.env) {
+    const normalizedSource = harnessRuntimeEnv(source);
+    if (inheritance !== "clean")
+        return normalizedSource;
+    const out = {};
+    for (const key of CLEAN_ENV_ALLOWLIST) {
+        const value = normalizedSource[key];
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=env-scope.js.map

package/dist/env-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-scope.js","sourceRoot":"","sources":["../src/env-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;IACf,yBAAyB;IACzB,qBAAqB;IACrB,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;IAChB,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,4BAA4B;IAC5B,6BAA6B;IAC7B,6BAA6B;IAC7B,2DAA2D;IAC3D,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,gCAAgC;IAChC,qDAAqD;IACrD,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,qBAAqB;IACrB,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,kBAAkB;IAClB,oCAAoC;IACpC,sBAAsB;IACtB,2BAA2B;IAC3B,uEAAuE;IACvE,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;CAClB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,UAAU;IACV,UAAU;IACV,8EAA8E;IAC9E,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,YAAY,EAAE,wCAAwC;IACtD,4EAA4E;IAC5E,gFAAgF;IAChF,qFAAqF;IACrF,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,qBAAqB;IACrB,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,gBAAgB;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAsC,EACtC,SAA4B,OAAO,CAAC,GAAG;IAEvC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IACrD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Typed error hierarchy. We fail loudly: boundaries add context, preserve the
+ * original cause, and never swallow-and-continue.
+ */
+export declare class ClaudexorError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class HarnessUnavailableError extends ClaudexorError {
+}
+export declare class ContextOverflowError extends ClaudexorError {
+}
+export declare class WorkspaceError extends ClaudexorError {
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED,qBAAa,uBAAwB,SAAQ,cAAc;CAAG;AAC9D,qBAAa,oBAAqB,SAAQ,cAAc;CAAG;AAC3D,qBAAa,cAAe,SAAQ,cAAc;CAAG"}

package/dist/errors.js

@@ -0,0 +1,17 @@
+/**
+ * Typed error hierarchy. We fail loudly: boundaries add context, preserve the
+ * original cause, and never swallow-and-continue.
+ */
+export class ClaudexorError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = this.constructor.name;
+    }
+}
+export class HarnessUnavailableError extends ClaudexorError {
+}
+export class ContextOverflowError extends ClaudexorError {
+}
+export class WorkspaceError extends ClaudexorError {
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,cAAc;CAAG;AAC9D,MAAM,OAAO,oBAAqB,SAAQ,cAAc;CAAG;AAC3D,MAAM,OAAO,cAAe,SAAQ,cAAc;CAAG"}

package/dist/inactivity.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Inactivity watchdog for harness event streams: a wedged vendor CLI
+ * that stops emitting events would otherwise park the run in `running`
+ * forever — only reviewers had a timeout. The combinator pumps the source
+ * iterator and re-arms a timer on EVERY event; when the window elapses with
+ * no event, `onTimeout` fires exactly once (the caller aborts its per-attempt
+ * controller, which kills the process group through the existing abort
+ * plumbing) and the pump stops waiting for the source.
+ *
+ * This is an INACTIVITY window, not a wall-clock cap: long runs are fine as
+ * long as they keep talking. Distinct from cancellation by construction —
+ * the caller decides what the timeout means (typed harness_timeout failure),
+ * and a user cancel still routes through the run signal.
+ */
+export declare class HarnessInactivityTimeoutError extends Error {
+    readonly timeoutMs: number;
+    constructor(timeoutMs: number);
+}
+export declare function withInactivityWatchdog<T>(source: AsyncIterable<T>, opts: {
+    timeoutMs: number;
+    /** Called once when the window elapses; abort the stream here. */
+    onTimeout: () => void;
+    /**
+     * Legitimate-silence probe. When the window elapses while this returns
+     * true (e.g. a question is awaiting the USER's answer), the watchdog
+     * RE-ARMS instead of firing — waiting on a human is not a wedged harness,
+     * and the interaction channel enforces its own answer-wait budget.
+     */
+    isSuspended?: () => boolean;
+}): AsyncIterable<T>;
+//# sourceMappingURL=inactivity.d.ts.map

package/dist/inactivity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inactivity.d.ts","sourceRoot":"","sources":["../src/inactivity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAQvC;AAED,wBAAuB,sBAAsB,CAAC,CAAC,EAC7C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;CAC7B,GACA,aAAa,CAAC,CAAC,CAAC,CA8ClB"}

package/dist/inactivity.js

@@ -0,0 +1,77 @@
+/**
+ * Inactivity watchdog for harness event streams: a wedged vendor CLI
+ * that stops emitting events would otherwise park the run in `running`
+ * forever — only reviewers had a timeout. The combinator pumps the source
+ * iterator and re-arms a timer on EVERY event; when the window elapses with
+ * no event, `onTimeout` fires exactly once (the caller aborts its per-attempt
+ * controller, which kills the process group through the existing abort
+ * plumbing) and the pump stops waiting for the source.
+ *
+ * This is an INACTIVITY window, not a wall-clock cap: long runs are fine as
+ * long as they keep talking. Distinct from cancellation by construction —
+ * the caller decides what the timeout means (typed harness_timeout failure),
+ * and a user cancel still routes through the run signal.
+ */
+export class HarnessInactivityTimeoutError extends Error {
+    timeoutMs;
+    constructor(timeoutMs) {
+        super(`harness produced no events for ${timeoutMs}ms (inactivity watchdog); ` +
+            `the stream was aborted and the process group killed. Raise ` +
+            `runtime.harness_inactivity_timeout_ms if this workload is legitimately silent.`);
+        this.timeoutMs = timeoutMs;
+        this.name = "HarnessInactivityTimeoutError";
+    }
+}
+export async function* withInactivityWatchdog(source, opts) {
+    const iterator = source[Symbol.asyncIterator]();
+    let timer = null;
+    let timedOut = false;
+    let wake = null;
+    const arm = () => {
+        if (timer)
+            clearTimeout(timer);
+        timer = setTimeout(() => {
+            if (opts.isSuspended?.()) {
+                arm();
+                return;
+            }
+            timedOut = true;
+            opts.onTimeout();
+            wake?.();
+        }, Math.max(1, opts.timeoutMs));
+        // Deliberately NOT unref'd: a wedged in-process stream can leave nothing
+        // else on the event loop, and an unref'd watchdog would let node exit 0
+        // mid-run instead of firing the timeout.
+    };
+    try {
+        arm();
+        for (;;) {
+            // Race the next event against the watchdog firing: after onTimeout()
+            // aborts the child, the source SHOULD end on its own, but a stuck
+            // iterator must not keep the run parked — the sentinel wakes the pump.
+            const next = await Promise.race([
+                iterator.next(),
+                new Promise((resolve) => {
+                    wake = () => resolve("timeout");
+                    if (timedOut)
+                        resolve("timeout");
+                }),
+            ]);
+            if (next === "timeout" || timedOut) {
+                throw new HarnessInactivityTimeoutError(opts.timeoutMs);
+            }
+            if (next.done)
+                return;
+            arm();
+            yield next.value;
+        }
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        // Release a source still mid-iteration (also triggers spawnProcess's
+        // finally -> requestCancel when the caller exits the loop early).
+        void iterator.return?.(undefined);
+    }
+}
+//# sourceMappingURL=inactivity.js.map

package/dist/inactivity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inactivity.js","sourceRoot":"","sources":["../src/inactivity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACjC;IAArB,YAAqB,SAAiB;QACpC,KAAK,CACH,kCAAkC,SAAS,4BAA4B;YACrE,6DAA6D;YAC7D,gFAAgF,CACnF,CAAC;QALiB,cAAS,GAAT,SAAS,CAAQ;QAMpC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,sBAAsB,CAC3C,MAAwB,EACxB,IAWC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;gBACzB,GAAG,EAAE,CAAC;gBACN,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,EAAE,EAAE,CAAC;QACX,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChC,yEAAyE;QACzE,wEAAwE;QACxE,yCAAyC;IAC3C,CAAC,CAAC;IACF,IAAI,CAAC;QACH,GAAG,EAAE,CAAC;QACN,SAAS,CAAC;YACR,qEAAqE;YACrE,kEAAkE;YAClE,uEAAuE;YACvE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,QAAQ,CAAC,IAAI,EAAE;gBACf,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;oBACjC,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,QAAQ;wBAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnC,CAAC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,GAAG,EAAE,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,qEAAqE;QACrE,kEAAkE;QAClE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAkB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export * from "./errors.js";
+export * from "./adapter.js";
+export * from "./effort.js";
+export * from "./model.js";
+export * from "./proc.js";
+export * from "./runloop.js";
+export * from "./inactivity.js";
+export * from "./process-registry.js";
+export * from "./diff.js";
+export * from "./conformance.js";
+export * from "./capabilities.js";
+export * from "./doctor.js";
+export * from "./env-scope.js";
+export * from "./runtime-env.js";
+export * from "./browser-mcp.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+export * from "./errors.js";
+export * from "./adapter.js";
+export * from "./effort.js";
+export * from "./model.js";
+export * from "./proc.js";
+export * from "./runloop.js";
+export * from "./inactivity.js";
+export * from "./process-registry.js";
+export * from "./diff.js";
+export * from "./conformance.js";
+export * from "./capabilities.js";
+export * from "./doctor.js";
+export * from "./env-scope.js";
+export * from "./runtime-env.js";
+export * from "./browser-mcp.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/model.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Validate a requested/configured model id against a harness's model truth
+ * source — the model analog of the effort normalizer (`normalizeEffort`).
+ * Data-driven: the caller supplies the truth list (live `models()` inventory
+ * or manifest `known_models`); this never hardcodes a model list in logic.
+ *
+ * STRICT semantics (locked owner decision, INV-104): there is no "warn and pass through".
+ * - no model requested (null/empty) → ok (the harness default is used).
+ * - truth list empty → rejected: the harness cannot verify models, so an
+ *   EXPLICIT model is refused with actionable text instead of being forwarded
+ *   to the vendor CLI to die as an opaque native error.
+ * - requested ∈ list → ok.
+ * - requested ∉ list → rejected, naming the truth source and the list.
+ */
+export type ModelCheckStatus = "ok" | "rejected";
+export interface ModelCheck {
+    status: ModelCheckStatus;
+    message: string | null;
+}
+/** Where the truth list came from; used to phrase actionable refusals. */
+export type ModelTruthSource = "api" | "manifest";
+export declare function validateModel(requested: string | null | undefined, known: readonly string[], source?: ModelTruthSource): ModelCheck;
+//# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,UAAU,CAAC;AACjD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,UAAU,CAAC;AAElD,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,GAAE,gBAA6B,GACpC,UAAU,CAkBZ"}

package/dist/model.js

@@ -0,0 +1,21 @@
+export function validateModel(requested, known, source = "manifest") {
+    const model = typeof requested === "string" ? requested.trim() : "";
+    if (!model)
+        return { status: "ok", message: null };
+    if (known.length === 0) {
+        return {
+            status: "rejected",
+            message: `this harness cannot verify models (no ${source === "api" ? "live model inventory" : "manifest known_models"}); ` +
+                `use the harness default (omit the model) or add known_models to the manifest`,
+        };
+    }
+    if (known.includes(model))
+        return { status: "ok", message: null };
+    const shown = known.slice(0, 80).join(", ");
+    const suffix = known.length > 80 ? `, ... (${known.length} total)` : "";
+    return {
+        status: "rejected",
+        message: `model "${model}" is not in the harness's ${source === "api" ? "live model inventory" : "manifest known-model list"} (${shown}${suffix})`,
+    };
+}
+//# sourceMappingURL=model.js.map

package/dist/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAuBA,MAAM,UAAU,aAAa,CAC3B,SAAoC,EACpC,KAAwB,EACxB,SAA2B,UAAU;IAErC,MAAM,KAAK,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,OAAO,EACL,yCAAyC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,KAAK;gBACjH,8EAA8E;SACjF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,UAAU,KAAK,6BAA6B,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,2BAA2B,KAAK,KAAK,GAAG,MAAM,GAAG;KACnJ,CAAC;AACJ,CAAC"}

package/dist/proc.d.ts

@@ -0,0 +1,68 @@
+export interface SpawnOptions {
+    cwd?: string;
+    env?: Record<string, string | null | undefined>;
+    /**
+     * Base env composition for the child: `mirror_native` (default) inherits the
+     * parent env; `clean` starts from a minimal allowlist (agent env isolation).
+     * `env` patches + scrub are applied on top either way.
+     */
+    inheritEnv?: "mirror_native" | "clean";
+    input?: string;
+    timeoutMs?: number;
+    /** Signal sent when the consumer closes the stream before process exit. */
+    cancelSignal?: NodeJS.Signals;
+    /** Hard-kill delay after cancelSignal when the child ignores cooperative stop. */
+    cancelKillDelayMs?: number;
+    /** Runtime abort signal for active daemon/orchestrator cancellation. */
+    abortSignal?: AbortSignal;
+    /**
+     * Keep stdin open after writing `input` (bidirectional protocols such as
+     * Claude's stream-json control channel). The caller receives a writer via
+     * `onSpawn` and OWNS closing it; the child usually exits on stdin EOF.
+     */
+    keepStdinOpen?: boolean;
+    /** Called once after spawn with a live stdin handle (see keepStdinOpen). */
+    onSpawn?: (io: ChildStdin) => void;
+}
+/** Minimal live stdin handle for bidirectional CLI protocols. */
+export interface ChildStdin {
+    /** Write one line/frame; errors are swallowed (exit carries the outcome). */
+    write(data: string): void;
+    /** Close stdin (EOF) — the cooperative way to end a streaming session. */
+    end(): void;
+}
+export type ProcEvent = {
+    type: "stdout";
+    line: string;
+} | {
+    type: "stderr";
+    line: string;
+} | {
+    type: "exit";
+    code: number | null;
+    signal: NodeJS.Signals | null;
+};
+/**
+ * Spawn a process and stream stdout/stderr lines as they arrive, ending with an
+ * `exit` event. Throws (rejects the iterator) if the binary cannot be spawned
+ * (e.g. ENOENT) so callers can detect an unavailable harness.
+ */
+export declare function spawnProcess(cmd: string, args: string[], opts?: SpawnOptions): AsyncGenerator<ProcEvent>;
+export interface CaptureResult {
+    code: number | null;
+    signal: NodeJS.Signals | null;
+    stdout: string;
+    stderr: string;
+}
+/** Run a process to completion, capturing stdout/stderr. Throws on spawn error. */
+export declare function runCapture(cmd: string, args: string[], opts?: SpawnOptions): Promise<CaptureResult>;
+/**
+ * BYTE-FAITHFUL capture: `runCapture` rides readline, which splits
+ * on lone `\r` too and rejoins with `\n` — destroying CR bytes in CRLF file
+ * content and fabricating trailing newlines. Diff-carrying git output MUST
+ * come through here, or `final/patch.diff` is corrupted at the source and
+ * fails `git apply` downstream. Raw buffers, no line splitting, no
+ * fabrication; the same spawn machinery (process group, abort, timeout).
+ */
+export declare function runCaptureRaw(cmd: string, args: string[], opts?: SpawnOptions): Promise<CaptureResult>;
+//# sourceMappingURL=proc.d.ts.map

package/dist/proc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proc.d.ts","sourceRoot":"","sources":["../src/proc.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAChD;;;;OAIG;IACH,UAAU,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC;IAC9B,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,KAAK,IAAI,CAAC;CACpC;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,GAAG,IAAI,IAAI,CAAC;CACb;AAED,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;CAAE,CAAC;AAEzE;;;;GAIG;AACH,wBAAuB,YAAY,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,YAAiB,GACtB,cAAc,CAAC,SAAS,CAAC,CAkJ3B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mFAAmF;AACnF,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CA0ExB"}