@claudexor/delivery 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/delivery
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — Apply a WorkProduct patch: dry-run / apply / branch / commit / pr.
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/gate.d.ts

@@ -0,0 +1,38 @@
+import type { ApplyEligibility, DecisionRecord, WorkProduct } from "@claudexor/schema";
+/**
+ * Single owner of the apply gate (CLAUDEXOR_BIBLE §11): apply is allowed only
+ * for successful runs with a successful decision record and a patch
+ * WorkProduct bound (by hash) to the original verified repo root. Both
+ * surfaces (CLI `claudexor apply` and the Control API apply endpoints) MUST
+ * call this instead of re-implementing the policy.
+ */
+export interface ApplyGateInput {
+    /** Daemon job state when known; the artifact-only CLI path passes null. */
+    state?: string | null;
+    decision: DecisionRecord | null;
+    workProduct: WorkProduct | null;
+    patch: string;
+    /** Repo root recorded by the run (contract/params); null when unknown. */
+    originalRepoRoot: string | null;
+    /** Repo the caller wants to apply into. */
+    targetRepoRoot: string;
+    /**
+     * A persisted, auditable operator decision (arbitration/operator_decision.yaml)
+     * that explicitly accepts the blocking risk for THIS patch. The override is
+     * valid only when its recorded patch hash matches the artifact — a typed,
+     * server-owned unblock, never client-faked state.
+     */
+    operatorDecision?: {
+        action: string;
+        patch_sha256?: string;
+    } | null;
+}
+export declare function validateApplyGate(input: ApplyGateInput): string | null;
+/**
+ * Derived ApplyEligibility (the ONE producer): runs the same gate the apply
+ * endpoints enforce and projects a typed verdict for surfaces (GET /runs/:id,
+ * MCP structured results, CLI --json) — {eligible, state, reason,
+ * requiredAction} instead of every consumer re-implying eligibility.
+ */
+export declare function deriveApplyEligibility(input: ApplyGateInput): ApplyEligibility;
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKvF;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrE;AAuBD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CA8DtE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,CAY9E"}

package/dist/gate.js

@@ -0,0 +1,128 @@
+import { realpathSync } from "node:fs";
+import { parseUnifiedDiff } from "@claudexor/core";
+import { pathGuard } from "@claudexor/policy";
+import { sha256 } from "@claudexor/util";
+/**
+ * Honest, state-specific guidance for why a run is not applyable and what
+ * actually unblocks it. The operator risk override (accept_risk /
+ * override_needs_human) unblocks ONLY a `blocked` run (CLAUDEXOR_BIBLE §11) — so
+ * never point an operator at a decision the daemon will refuse for this state
+ * (a fixed contradiction: apply used to suggest accept_risk for ungated runs).
+ */
+function applyHint(state) {
+    switch (state) {
+        case "blocked":
+            return "an operator accept_risk/override_needs_human decision (POST /runs/:id/decision) can unblock apply for this patch";
+        case "ungated":
+        case "review_not_run":
+            return "not verified-applyable — add a --test gate or obtain a clean cross-family review, then re-run (risk overrides apply only to blocked runs)";
+        case "no_op":
+            return "the run made no changes; nothing to apply";
+        default:
+            return "re-run to reach a successful, verified outcome";
+    }
+}
+export function validateApplyGate(input) {
+    // An operator risk override is meaningful ONLY on a BLOCKED run (INV-111,
+    // Bible §11): the decision endpoint records decisions exclusively for
+    // blocked runs, so a succeeded-state override is an unreachable combination
+    // this gate must not honor either. Blocked evidence: the caller-known run
+    // state, or — on the artifact-only CLI path where live state is unknown —
+    // the persisted decision verdict (the orchestrator overrides decision.yaml
+    // to `blocked` whenever the run terminal is blocked).
+    const blockedEvidence = input.state === "blocked" || (input.state == null && input.decision?.status === "blocked");
+    const override = blockedEvidence &&
+        input.operatorDecision &&
+        (input.operatorDecision.action === "accept_risk" || input.operatorDecision.action === "override_needs_human") &&
+        typeof input.operatorDecision.patch_sha256 === "string" &&
+        input.operatorDecision.patch_sha256 === sha256(input.patch);
+    if (input.state && input.state !== "succeeded" && !override) {
+        return `run is not applyable while state is ${input.state}; ${applyHint(input.state)}`;
+    }
+    if (!input.decision)
+        return "decision record is required before apply";
+    if (input.decision.status !== "success" && !override) {
+        return `decision status is ${input.decision.status}; refusing apply (${applyHint(input.decision.status)})`;
+    }
+    // FinalVerifier consumer (INV-115): a patch that FAILED to apply onto a
+    // fresh tree at its own base is factually undeliverable — no operator
+    // override can change that. Failed verify GATES may be overridden through
+    // the same accept_risk path as any blocked run.
+    const fv = input.decision.final_verify;
+    if (fv?.attempted) {
+        if (fv.applied_cleanly === false) {
+            return `final verify: the patch did not apply onto a fresh tree at its base (${fv.reason ?? "conflict"}); re-run the task`;
+        }
+        // FAIL CLOSED (INV-115): null means the verifier ERRORED — the patch was
+        // never proven against a clean base. Unlike a proven conflict this is an
+        // infra failure, so accept_risk may override it.
+        if (fv.applied_cleanly === null && !override) {
+            return `final verify: the verifier errored before proving the patch against a clean base (${fv.reason ?? "verify infrastructure error"}); refusing apply (an operator accept_risk decision can override)`;
+        }
+        if (fv.gates_passed === false && !override) {
+            return "final verify: deterministic gates failed on the fresh verify tree; refusing apply (an operator accept_risk decision can override)";
+        }
+    }
+    if (!input.workProduct)
+        return "work product is required before apply";
+    if (input.workProduct.kind !== "patch")
+        return `work product kind ${input.workProduct.kind} is not applyable as a patch`;
+    const recorded = input.workProduct.meta?.["patch_sha256"];
+    if (typeof recorded !== "string" || recorded.length === 0)
+        return "work product patch hash is required before apply";
+    if (recorded !== sha256(input.patch))
+        return "patch artifact hash does not match the reviewed work product";
+    if (!input.originalRepoRoot)
+        return "run original project is unknown; refusing apply";
+    try {
+        if (realpathSync(input.originalRepoRoot) !== realpathSync(input.targetRepoRoot)) {
+            return "target repo does not match the run's original project; refusing apply";
+        }
+    }
+    catch {
+        return "run original project cannot be verified; refusing apply";
+    }
+    // Workspace confinement (defense-in-depth on top of `git apply`): every
+    // patched path must resolve INSIDE the target repo root.
+    for (const path of patchPaths(input.patch)) {
+        const guard = pathGuard(input.targetRepoRoot, path);
+        if (!guard.allowed)
+            return `patch path escapes the target repo: ${guard.reason}`;
+    }
+    return null;
+}
+/**
+ * Derived ApplyEligibility (the ONE producer): runs the same gate the apply
+ * endpoints enforce and projects a typed verdict for surfaces (GET /runs/:id,
+ * MCP structured results, CLI --json) — {eligible, state, reason,
+ * requiredAction} instead of every consumer re-implying eligibility.
+ */
+export function deriveApplyEligibility(input) {
+    const reason = validateApplyGate(input);
+    const state = input.state ?? input.decision?.status ?? null;
+    if (reason === null) {
+        return { eligible: true, state, reason: null, requiredAction: null };
+    }
+    return {
+        eligible: false,
+        state,
+        reason,
+        requiredAction: applyHint(state ?? ""),
+    };
+}
+/** Paths touched by a unified git diff (both old and new sides, excluding /dev/null). */
+function patchPaths(patch) {
+    // Shared structural parser: header lines are honored only in
+    // header position, so removed CONTENT starting with `-- ` (SQL comments)
+    // can never masquerade as a path and false-refuse the apply; quoted
+    // non-ASCII paths are C-unquoted to their real on-disk form.
+    const paths = new Set();
+    for (const f of parseUnifiedDiff(patch).files) {
+        if (f.oldPath)
+            paths.add(f.oldPath);
+        if (f.newPath)
+            paths.add(f.newPath);
+    }
+    return [...paths];
+}
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AA4BzC;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,kHAAkH,CAAC;QAC5H,KAAK,SAAS,CAAC;QACf,KAAK,gBAAgB;YACnB,OAAO,2IAA2I,CAAC;QACrJ,KAAK,OAAO;YACV,OAAO,2CAA2C,CAAC;QACrD;YACE,OAAO,gDAAgD,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,eAAe,GACnB,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC;IAC7F,MAAM,QAAQ,GACZ,eAAe;QACf,KAAK,CAAC,gBAAgB;QACtB,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,sBAAsB,CAAC;QAC7G,OAAO,KAAK,CAAC,gBAAgB,CAAC,YAAY,KAAK,QAAQ;QACvD,KAAK,CAAC,gBAAgB,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5D,OAAO,uCAAuC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,0CAA0C,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,sBAAsB,KAAK,CAAC,QAAQ,CAAC,MAAM,qBAAqB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;IAC7G,CAAC;IACD,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;IACvC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC;QAClB,IAAI,EAAE,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;YACjC,OAAO,wEAAwE,EAAE,CAAC,MAAM,IAAI,UAAU,oBAAoB,CAAC;QAC7H,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,EAAE,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,OAAO,qFAAqF,EAAE,CAAC,MAAM,IAAI,6BAA6B,mEAAmE,CAAC;QAC5M,CAAC;QACD,IAAI,EAAE,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO,mIAAmI,CAAC;QAC7I,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,uCAAuC,CAAC;IACvE,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,qBAAqB,KAAK,CAAC,WAAW,CAAC,IAAI,8BAA8B,CAAC;IACzH,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,kDAAkD,CAAC;IACrH,IAAI,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,8DAA8D,CAAC;IAC5G,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAAE,OAAO,iDAAiD,CAAC;IACtF,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAChF,OAAO,uEAAuE,CAAC;QACjF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,wEAAwE;IACxE,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,uCAAuC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC;IAC5D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,KAAK;QACL,MAAM;QACN,cAAc,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,KAAa;IAC/B,6DAA6D;IAC7D,yEAAyE;IACzE,oEAAoE;IACpE,6DAA6D;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+export * from "./gate.js";
+export { revertWorkingTreeTo as revertInPlace, type RevertResult } from "@claudexor/workspace";
+export interface ApplyResult {
+    ok: boolean;
+    code: number | null;
+    stderr: string;
+}
+/** Dry-run: does this patch apply cleanly? (git apply --check) */
+export declare function checkPatch(repoRoot: string, patch: string): Promise<ApplyResult>;
+export type DeliverMode = "artifact_only" | "apply" | "branch" | "commit" | "pr";
+export declare const DELIVER_MODES: Set<DeliverMode>;
+export interface DeliverOptions {
+    mode: DeliverMode;
+    branch?: string;
+    message?: string;
+    prBodyFile?: string;
+}
+export interface DeliverResult {
+    mode: DeliverMode;
+    applied: boolean;
+    branch?: string;
+    commit?: string;
+    prUrl?: string;
+    detail?: string;
+    /** True when a FAILED delivery left the tree mutated (restore failed);
+     * `applied:false, treeMutated:false` guarantees the tree is untouched. */
+    treeMutated?: boolean;
+}
+/**
+ * Deliver a WorkProduct patch according to a mutation mode. `pr` requires `gh`
+ * and a configured remote. Commit identity is set per-command (no global config
+ * mutation). Protected path: `--check` before any mutation, restore
+ * on failure (detached-HEAD safe), and HONEST `treeMutated` when a restore
+ * itself fails — never a clean-looking result over a conflicted tree.
+ */
+export declare function deliver(repoRoot: string, patch: string, opts: DeliverOptions): Promise<DeliverResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,cAAc,WAAW,CAAC;AAK1B,OAAO,EAAE,mBAAmB,IAAI,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAO/F,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kEAAkE;AAClE,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAGtF;AAGD,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC;AACjF,eAAO,MAAM,aAAa,kBAA6E,CAAC;AAExG,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;8EAC0E;IAC1E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAsH3G"}

package/dist/index.js

@@ -0,0 +1,151 @@
+import { rmSync } from "node:fs";
+import { join } from "node:path";
+import { parseUnifiedDiff, runCapture, runCaptureRaw } from "@claudexor/core";
+import { applyPatchProtected, stageAllExcludingArtifacts, statusPorcelainMeaningful } from "@claudexor/workspace";
+import { newId } from "@claudexor/util";
+export * from "./gate.js";
+// Server-owned in-place revert (restore the live tree to a run's pre-turn
+// snapshot, refusing if the tree diverged). Co-located with apply; control-api
+// calls it for the revert_run operator decision.
+export { revertWorkingTreeTo as revertInPlace } from "@claudexor/workspace";
+async function git(repo, args, input) {
+    // Raw capture: the patch rides stdin already; stdout may carry diffs too.
+    return runCaptureRaw("git", ["-C", repo, ...args], { timeoutMs: 60_000, input });
+}
+/** Dry-run: does this patch apply cleanly? (git apply --check) */
+export async function checkPatch(repoRoot, patch) {
+    const r = await git(repoRoot, ["apply", "--check", "-"], patch);
+    return { ok: r.code === 0, code: r.code, stderr: r.stderr };
+}
+export const DELIVER_MODES = new Set(["artifact_only", "apply", "branch", "commit", "pr"]);
+/**
+ * Deliver a WorkProduct patch according to a mutation mode. `pr` requires `gh`
+ * and a configured remote. Commit identity is set per-command (no global config
+ * mutation). Protected path: `--check` before any mutation, restore
+ * on failure (detached-HEAD safe), and HONEST `treeMutated` when a restore
+ * itself fails — never a clean-looking result over a conflicted tree.
+ */
+export async function deliver(repoRoot, patch, opts) {
+    if (!DELIVER_MODES.has(opts.mode))
+        return { mode: "artifact_only", applied: false, detail: `unsupported delivery mode: ${opts.mode}` };
+    if (opts.mode === "artifact_only") {
+        return { mode: "artifact_only", applied: false, detail: "patch emitted; working tree untouched" };
+    }
+    // Claudexor's own run/workspace artifacts are not user working-tree state
+    // (single owner: workspace artifact-paths — the `:(exclude)` pathspec used
+    // here before HARD-ERRORS when the project gitignores `.claudexor`, which
+    // Claudexor-initialized repos DO, and it missed `.claudexor-review-evidence`).
+    const dirty = await statusPorcelainMeaningful(repoRoot).catch((err) => {
+        return err instanceof Error ? err : new Error(String(err));
+    });
+    if (dirty instanceof Error)
+        return { mode: opts.mode, applied: false, detail: `status failed: ${dirty.message}` };
+    if (dirty.length > 0)
+        return { mode: opts.mode, applied: false, detail: "working tree is dirty; refusing delivery mutation" };
+    // Detached-HEAD safe restore point: `--abbrev-ref HEAD` on a detached head
+    // yields the literal "HEAD" (useless for checkout-restore); capture the sha.
+    const branchName = (await git(repoRoot, ["rev-parse", "--abbrev-ref", "HEAD"])).stdout.trim();
+    const headSha = (await git(repoRoot, ["rev-parse", "HEAD"])).stdout.trim();
+    const restoreRef = branchName && branchName !== "HEAD" ? branchName : headSha;
+    const restoreDetached = !branchName || branchName === "HEAD";
+    let branch = opts.branch;
+    let onNewBranch = false;
+    if (opts.mode === "branch" || opts.mode === "pr") {
+        branch = branch ?? `claudexor/${newId("wp")}`;
+        const cb = await git(repoRoot, ["checkout", "-b", branch]);
+        if (cb.code !== 0)
+            return { mode: opts.mode, applied: false, detail: `branch failed: ${cb.stderr.trim()}` };
+        onNewBranch = true;
+    }
+    /** Leave the fresh branch and delete it; report honestly if that fails. */
+    const cleanupBranch = async () => {
+        if (!onNewBranch || !branch)
+            return null;
+        const back = restoreDetached
+            ? await git(repoRoot, ["checkout", "--detach", restoreRef])
+            : await git(repoRoot, ["checkout", restoreRef]);
+        if (back.code !== 0)
+            return `failed to leave branch ${branch}: ${back.stderr.trim()}`;
+        const del = await git(repoRoot, ["branch", "-D", branch]);
+        if (del.code !== 0)
+            return `failed to delete branch ${branch}: ${del.stderr.trim()}`;
+        onNewBranch = false;
+        return null;
+    };
+    const ap = await applyPatchProtected(repoRoot, patch);
+    if (!ap.ok) {
+        const cleanupIssue = await cleanupBranch();
+        return {
+            mode: opts.mode,
+            applied: false,
+            branch,
+            treeMutated: ap.treeMutated || cleanupIssue !== null,
+            detail: [ap.detail ?? "apply failed", cleanupIssue].filter(Boolean).join("; "),
+        };
+    }
+    if (opts.mode === "apply")
+        return { mode: "apply", applied: true };
+    /** Post-apply failure: the patch IS in the tree — restore before reporting. */
+    const restoreAppliedTree = async (why) => {
+        const added = parseUnifiedDiff(patch)
+            .files.filter((f) => f.added && f.newPath)
+            .map((f) => f.newPath);
+        for (const rel of added) {
+            try {
+                rmSync(join(repoRoot, rel), { force: true });
+            }
+            catch {
+                /* verified below */
+            }
+        }
+        await git(repoRoot, ["reset", "--quiet"]);
+        await git(repoRoot, ["checkout", "--", "."]);
+        const cleanupIssue = await cleanupBranch();
+        const residue = await statusPorcelainMeaningful(repoRoot).catch(() => ["status failed"]);
+        const treeMutated = residue.length > 0 || cleanupIssue !== null;
+        return {
+            mode: opts.mode,
+            applied: false,
+            branch,
+            treeMutated,
+            detail: [why, cleanupIssue, treeMutated ? "RESTORE INCOMPLETE — inspect the tree manually" : "tree restored"].filter(Boolean).join("; "),
+        };
+    };
+    try {
+        await stageAllExcludingArtifacts(repoRoot);
+    }
+    catch (err) {
+        return restoreAppliedTree(`staging failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const message = opts.message ?? "claudexor: apply work product";
+    const commitRes = await git(repoRoot, [
+        "-c",
+        "user.email=claudexor@local",
+        "-c",
+        "user.name=claudexor",
+        "commit",
+        "-m",
+        message,
+    ]);
+    if (commitRes.code !== 0) {
+        return restoreAppliedTree(`commit failed: ${commitRes.stderr.trim()}`);
+    }
+    const commit = (await git(repoRoot, ["rev-parse", "HEAD"])).stdout.trim();
+    if (opts.mode === "commit" || opts.mode === "branch") {
+        return { mode: opts.mode, applied: true, branch, commit };
+    }
+    // pr
+    const push = await git(repoRoot, ["push", "-u", "origin", branch]);
+    if (push.code !== 0) {
+        return { mode: "pr", applied: false, branch, commit, treeMutated: true, detail: `push failed: ${push.stderr.trim()}; the local branch keeps the committed work` };
+    }
+    const ghArgs = ["pr", "create", "--head", branch, "--title", message];
+    if (opts.prBodyFile)
+        ghArgs.push("--body-file", opts.prBodyFile);
+    else
+        ghArgs.push("--body", "Created by Claudexor.");
+    const pr = await runCapture("gh", ghArgs, { cwd: repoRoot, timeoutMs: 60_000 }).catch(() => null);
+    const prUrl = pr && pr.code === 0 ? pr.stdout.trim() : undefined;
+    return { mode: "pr", applied: Boolean(prUrl), branch, commit, prUrl, detail: prUrl ? undefined : "gh pr create unavailable" };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAClH,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC,cAAc,WAAW,CAAC;AAE1B,0EAA0E;AAC1E,+EAA+E;AAC/E,iDAAiD;AACjD,OAAO,EAAE,mBAAmB,IAAI,aAAa,EAAqB,MAAM,sBAAsB,CAAC;AAE/F,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,KAAc;IAC7D,0EAA0E;IAC1E,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAQD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAa;IAC9D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC;AAID,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAc,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAqBxG;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,KAAa,EAAE,IAAoB;IACjF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IACvI,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACpG,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,+EAA+E;IAC/E,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC7E,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAClH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IAE9H,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3E,MAAM,UAAU,GAAG,UAAU,IAAI,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,MAAM,eAAe,GAAG,CAAC,UAAU,IAAI,UAAU,KAAK,MAAM,CAAC;IAE7D,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,GAAG,MAAM,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5G,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,2EAA2E;IAC3E,MAAM,aAAa,GAAG,KAAK,IAA4B,EAAE;QACvD,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,GAAG,eAAe;YAC1B,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3D,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,0BAA0B,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,2BAA2B,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACrF,WAAW,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,YAAY,GAAG,MAAM,aAAa,EAAE,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK;YACd,MAAM;YACN,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,YAAY,KAAK,IAAI;YACpD,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,cAAc,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEnE,+EAA+E;IAC/E,MAAM,kBAAkB,GAAG,KAAK,EAAE,GAAW,EAA0B,EAAE;QACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC;aAClC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC;aACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAiB,CAAC,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,aAAa,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK;YACd,MAAM;YACN,WAAW;YACX,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACzI,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kBAAkB,CAAC,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,+BAA+B,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE;QACpC,IAAI;QACJ,4BAA4B;QAC5B,IAAI;QACJ,qBAAqB;QACrB,QAAQ;QACR,IAAI;QACJ,OAAO;KACR,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,kBAAkB,CAAC,kBAAkB,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAE1E,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK;IACL,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAgB,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,6CAA6C,EAAE,CAAC;IACpK,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;;QAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;AAChI,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@claudexor/delivery",
+  "version": "1.0.1",
+  "license": "MIT",
+  "description": "Apply a WorkProduct patch: dry-run / apply / branch / commit / pr.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@claudexor/core": "1.0.1",
+    "@claudexor/util": "1.0.1",
+    "@claudexor/policy": "1.0.1",
+    "@claudexor/schema": "1.0.1",
+    "@claudexor/workspace": "1.0.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/delivery"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}