@claudexor/core 3.0.4 → 3.1.1

package/dist/runtime-env.js

@@ -1,14 +1,75 @@
+import { existsSync, lstatSync, readlinkSync, realpathSync, statSync } from "node:fs";
 import { homedir } from "node:os";
-import { delimiter, isAbsolute, join } from "node:path";
+import { basename, delimiter, dirname, isAbsolute, join } from "node:path";
 import { isLaunchableExecutable } from "./executable-inspection.js";
+/**
+ * The directory of the Node binary Claudexor ITSELF is running on, when that
+ * binary is safe to expose to a harness's inner login shell. In production this
+ * is the notarized app-bundled runtime
+ * (`.../Claudexor.app/Contents/Resources`); a CLI/dev daemon runs on the
+ * managed `~/.claudexor/node/bin/node`. Putting this dir FIRST on the harness
+ * PATH is the QA-022 fix: a vendor tool's inner `/bin/bash -lc` grandchild
+ * re-sources login profiles (`path_helper`, `brew shellenv`) and would
+ * otherwise resolve an ad-hoc Homebrew Node that macOS's code-signing monitor
+ * SIGKILLs (`Killed: 9`). Anchoring the SAME Node the daemon already proved
+ * runnable — by executing on it — lets the grandchild resolve a working Node
+ * even after the login shell reshuffles PATH.
+ *
+ * Guarded so the prepend can never make things worse:
+ *  - the path must be absolute and a spawnable regular file (the running
+ *    process is itself proof the bytes launch — "self-contained/valid");
+ *  - it must NOT itself be an at-risk Homebrew Node — prepending a killable
+ *    Node's dir would poison the very shell we are trying to protect;
+ *  - the REAL binary's dir (symlinks followed) is what we anchor — a symlinked
+ *    launcher must not put the WRONG dir first on the harness PATH;
+ *  - that dir must NOT be group/world-writable — prepending a dir any non-owner
+ *    can write to lets a local attacker drop a malicious `node`/`bash` that then
+ *    SHADOWS the system tools for every harness child.
+ * Returns null when any guard fails; the guessed `preferred` entries still apply.
+ */
+export function managedRunnerNodeDir(execPath = process.execPath, platform = process.platform) {
+    if (!execPath || !isAbsolute(execPath))
+        return null;
+    if (atRiskNodeAdvisory(execPath, platform) !== null)
+        return null;
+    // realpath + regular-file + executable facts (identity-stable, bounded).
+    if (!isLaunchableExecutable(execPath))
+        return null;
+    // Anchor the REAL binary's dir (follow symlinks) rather than the launcher's.
+    let runnerDir;
+    try {
+        runnerDir = dirname(realpathSync(execPath));
+    }
+    catch {
+        return null;
+    }
+    // A group/world-writable runner dir is an injection surface — skip the prepend.
+    if (platform !== "win32" && dirIsGroupOrWorldWritable(runnerDir))
+        return null;
+    return runnerDir;
+}
+/** True when `dir` is writable by group or other (POSIX mode & 0o022), or cannot
+ *  be stat'd (an undeterminable dir is not provably safe — treat as unsafe). */
+function dirIsGroupOrWorldWritable(dir) {
+    try {
+        return (statSync(dir).mode & 0o022) !== 0;
+    }
+    catch {
+        return true;
+    }
+}
 /**
  * Single producer for the PATH every local harness discovery/run surface should
  * use. Surfaces may still inherit other env vars, but binary resolution must not
  * depend on whether the daemon was launched from a GUI app, login shell, or CLI.
+ * Existing inherited entries are never dropped (only de-duplicated); the only
+ * additions are the trusted `preferred` prefixes.
  */
-export function normalizedHarnessPath(source = process.env) {
+export function normalizedHarnessPath(source = process.env, execPath = process.execPath, platform = process.platform) {
     const home = source.HOME || homedir();
+    const runnerDir = managedRunnerNodeDir(execPath, platform);
     const preferred = [
+        ...(runnerDir ? [runnerDir] : []),
         join(home, ".claudexor", "node", "bin"),
         join(home, ".local", "bin"),
         join(home, ".npm-global", "bin"),
@@ -31,8 +92,8 @@ export function normalizedHarnessPath(source = process.env) {
     })
         .join(delimiter);
 }
-export function harnessRuntimeEnv(source = process.env) {
-    return { ...source, PATH: normalizedHarnessPath(source) };
+export function harnessRuntimeEnv(source = process.env, execPath = process.execPath, platform = process.platform) {
+    return { ...source, PATH: normalizedHarnessPath(source, execPath, platform) };
 }
 /**
  * Resolve which binary a harness child will ACTUALLY execute, using the same
@@ -40,16 +101,23 @@ export function harnessRuntimeEnv(source = process.env) {
  * stale pinned shim (e.g. `~/.claudexor/node/bin/codex` shadowing a newer
  * install) is visible instead of silently answering for the wrong version.
  * Returns null when the binary is not on the harness PATH.
+ *
+ * `execPath`/`platform` are forwarded to `normalizedHarnessPath` (same defaults,
+ * so production behavior is unchanged). Forwarding them is what lets a test
+ * fully control the resolution PATH: without it the resolver always anchors the
+ * REAL `process.execPath` dir (e.g. `~/.claudexor/node/bin`) first, and any
+ * `claude`/`codex` living beside the running Node shadows an injected fixture —
+ * the machine-specific parity failure this seam closes.
  */
-export function resolveHarnessBinary(bin, source = process.env) {
-    const names = binaryNameCandidates(bin, source);
+export function resolveHarnessBinary(bin, source = process.env, execPath = process.execPath, platform = process.platform) {
+    const names = binaryNameCandidates(bin, source, platform);
     if (isAbsolute(bin)) {
         for (const name of names)
             if (isLaunchableExecutable(name))
                 return name;
         return null;
     }
-    for (const dir of normalizedHarnessPath(source).split(delimiter)) {
+    for (const dir of normalizedHarnessPath(source, execPath, platform).split(delimiter)) {
         if (!dir)
             continue;
         for (const name of names) {
@@ -64,10 +132,12 @@ export function resolveHarnessBinary(bin, source = process.env) {
  * Name candidates in cmd.exe lookup order: on Windows a bare `codex` is
  * spawnable as `codex.exe`/`codex.cmd` via PATHEXT, so the resolver must try
  * those too or doctor reports null for a perfectly runnable CLI. Elsewhere the
- * name is used as-is.
+ * name is used as-is. `platform` is forwarded from the resolver (same default,
+ * so production is unchanged) so an injected win32 gets win32 name candidates,
+ * not just win32 PATH ordering.
  */
-function binaryNameCandidates(bin, source) {
-    if (process.platform !== "win32")
+function binaryNameCandidates(bin, source, platform = process.platform) {
+    if (platform !== "win32")
         return [bin];
     const exts = (source.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean);
     const lower = bin.toLowerCase();
@@ -75,6 +145,113 @@ function binaryNameCandidates(bin, source) {
         return [bin];
     return [bin, ...exts.map((e) => bin + e)];
 }
+const HOMEBREW_PREFIXES = ["/opt/homebrew", "/usr/local", "/home/linuxbrew/.linuxbrew"];
+/**
+ * Advisory explaining WHY a harness binary failed to resolve when the
+ * filesystem still holds evidence of an install. The live incident this
+ * guards: Homebrew's codex cask stayed registered (Caskroom dir present,
+ * version pinned) while its payload and bin link had vanished, so every
+ * surface dead-ended at "not found on PATH"/ENOENT with no path to repair.
+ * Two evidence classes, checked in order:
+ *
+ *  1. an entry named like the binary exists on the harness PATH (or at the
+ *     configured absolute override) but is not spawnable — dangling symlink,
+ *     exec bit stripped, or a directory shadowing the name;
+ *  2. nothing is on PATH at all, but a Homebrew Caskroom/Cellar dir still
+ *     lists the binary as installed.
+ *
+ * Diagnostic only (doctor/discover append it); never gates a run and never
+ * executes a package manager. Returns null when the binary resolves or when
+ * there is nothing better to say than "not installed".
+ */
+export function brokenInstallAdvisory(bin, source = process.env, brewPrefixes = HOMEBREW_PREFIXES) {
+    if (resolveHarnessBinary(bin, source) !== null)
+        return null;
+    const name = basename(bin);
+    const names = binaryNameCandidates(bin, source);
+    const candidates = isAbsolute(bin)
+        ? names
+        : normalizedHarnessPath(source)
+            .split(delimiter)
+            .filter(Boolean)
+            .flatMap((dir) => names.map((n) => join(dir, n)));
+    for (const candidate of candidates) {
+        const kind = lstatKind(candidate);
+        if (kind === null)
+            continue;
+        const target = kind === "symlink" ? readlinkOrNull(candidate) : null;
+        const where = target === null ? candidate : `${candidate} (symlink to ${target})`;
+        const how = kind === "symlink" && !existsSync(candidate)
+            ? "its target is missing"
+            : kind === "dir"
+                ? "it is a directory, not a binary"
+                : "it is not executable";
+        const fix = brewRemediation(target ?? candidate) ??
+            `reinstall ${name} or point the binary override at a working install`;
+        return `${where} exists but ${how} — ${fix}`;
+    }
+    if (!SAFE_BREW_NAME.test(name))
+        return null;
+    for (const prefix of brewPrefixes) {
+        for (const [room, flag] of [
+            ["Caskroom", " --cask"],
+            ["Cellar", ""],
+        ]) {
+            const dir = join(prefix, room, name);
+            if (lstatKind(dir) === "dir") {
+                // An absolute override never scanned PATH, so say what was actually
+                // checked instead of claiming a PATH sweep that did not happen.
+                const evidence = isAbsolute(bin)
+                    ? `the configured override ${bin} does not exist`
+                    : `no runnable binary is on the harness PATH`;
+                return `Homebrew still lists ${name} as installed (${dir}) but ${evidence} — broken install; run \`brew reinstall${flag} ${name}\`${isAbsolute(bin) ? " or fix the binary override" : ""}`;
+            }
+        }
+    }
+    return null;
+}
+function lstatKind(path) {
+    try {
+        const s = lstatSync(path);
+        return s.isSymbolicLink() ? "symlink" : s.isDirectory() ? "dir" : "file";
+    }
+    catch {
+        return null;
+    }
+}
+function readlinkOrNull(path) {
+    try {
+        return readlinkSync(path);
+    }
+    catch {
+        return null;
+    }
+}
+/** A copyable `brew` command is emitted only for names shaped like real
+ *  Homebrew tokens: a configured override whose basename carries whitespace,
+ *  quotes, or shell metacharacters must never become a pasteable command. */
+const SAFE_BREW_NAME = /^[A-Za-z0-9][A-Za-z0-9@+._-]*$/;
+/** The brew package token is the path segment AFTER Caskroom/Cellar — a
+ *  binary's name can differ from the package that ships it, and the
+ *  remediation must name the package. */
+function brewToken(pathish, room) {
+    const marker = `/${room}/`;
+    const idx = pathish.indexOf(marker);
+    if (idx === -1)
+        return null;
+    const token = pathish.slice(idx + marker.length).split("/")[0] ?? "";
+    return SAFE_BREW_NAME.test(token) ? token : null;
+}
+/** Attribute a broken entry to Homebrew via its canonical payload dirs. */
+function brewRemediation(pathish) {
+    const cask = brewToken(pathish, "Caskroom");
+    if (cask)
+        return `run \`brew reinstall --cask ${cask}\``;
+    const formula = brewToken(pathish, "Cellar");
+    if (formula)
+        return `run \`brew reinstall ${formula}\``;
+    return null;
+}
 /**
  * Advisory when the Node binary running Claudexor is one macOS's code-signing
  * monitor is known to SIGKILL (Homebrew's adhoc-signed node). The daemon spawns

package/dist/runtime-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../src/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAA4B,OAAO,CAAC,GAAG;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG;QAChB,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC;QACzB,mBAAmB;QACnB,gBAAgB;QAChB,UAAU;QACV,MAAM;QACN,WAAW;QACX,OAAO;KACR,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,IAAI,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA4B,OAAO,CAAC,GAAG;IACvE,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,SAA4B,OAAO,CAAC,GAAG;IAEvC,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,sBAAsB,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,GAAW,EAAE,MAAyB;IAClE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,OAAO,CAAC,QAAQ,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GACV,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACrC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,WAAW,QAAQ,yIAAyI,CAAC;AACtK,CAAC"}
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../src/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,OAAO,CAAC,QAAQ,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjE,yEAAyE;IACzE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,6EAA6E;IAC7E,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,gFAAgF;IAChF,IAAI,QAAQ,KAAK,OAAO,IAAI,yBAAyB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;gFACgF;AAChF,SAAS,yBAAyB,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAA4B,OAAO,CAAC,GAAG,EACvC,WAAmB,OAAO,CAAC,QAAQ,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC;QACzB,mBAAmB;QACnB,gBAAgB;QAChB,UAAU;QACV,MAAM;QACN,WAAW;QACX,OAAO;KACR,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,IAAI,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,SAA4B,OAAO,CAAC,GAAG,EACvC,WAAmB,OAAO,CAAC,QAAQ,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,SAA4B,OAAO,CAAC,GAAG,EACvC,WAAmB,OAAO,CAAC,QAAQ,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,sBAAsB,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,GAAW,EACX,MAAyB,EACzB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,YAAY,EAAE,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,SAA4B,OAAO,CAAC,GAAG,EACvC,eAAkC,iBAAiB;IAEnD,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC;QAChC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC;aAC1B,KAAK,CAAC,SAAS,CAAC;aAChB,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,gBAAgB,MAAM,GAAG,CAAC;QAClF,MAAM,GAAG,GACP,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC1C,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,IAAI,KAAK,KAAK;gBACd,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,sBAAsB,CAAC;QAC/B,MAAM,GAAG,GACP,eAAe,CAAC,MAAM,IAAI,SAAS,CAAC;YACpC,aAAa,IAAI,oDAAoD,CAAC;QACxE,OAAO,GAAG,KAAK,eAAe,GAAG,MAAM,GAAG,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI;YACzB,CAAC,UAAU,EAAE,SAAS,CAAC;YACvB,CAAC,QAAQ,EAAE,EAAE,CAAC;SACN,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC7B,oEAAoE;gBACpE,gEAAgE;gBAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC;oBAC9B,CAAC,CAAC,2BAA2B,GAAG,iBAAiB;oBACjD,CAAC,CAAC,2CAA2C,CAAC;gBAChD,OAAO,wBAAwB,IAAI,kBAAkB,GAAG,SAAS,QAAQ,0CAA0C,IAAI,IAAI,IAAI,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC7L,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;6EAE6E;AAC7E,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAExD;;yCAEyC;AACzC,SAAS,SAAS,CAAC,OAAe,EAAE,IAA2B;IAC7D,MAAM,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,2EAA2E;AAC3E,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,IAAI;QAAE,OAAO,+BAA+B,IAAI,IAAI,CAAC;IACzD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,wBAAwB,OAAO,IAAI,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,OAAO,CAAC,QAAQ,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GACV,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACrC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,WAAW,QAAQ,yIAAyI,CAAC;AACtK,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/core",
-  "version": "3.0.4",
+  "version": "3.1.1",
   "license": "MIT",
   "description": "HarnessAdapter contract, process helpers, typed errors, and low-level execution utilities.",
   "type": "module",
@@ -20,8 +20,8 @@
   ],
   "dependencies": {
     "@playwright/mcp": "0.0.78",
-    "@claudexor/schema": "3.0.4",
-    "@claudexor/util": "3.0.4"
+    "@claudexor/util": "3.1.1",
+    "@claudexor/schema": "3.1.1"
   },
   "repository": {
     "type": "git",