@claudexor/orchestrator 3.1.0 → 3.1.2

package/dist/runTerminals.js

@@ -8,8 +8,62 @@
  * forever.
  */
 import { join } from "node:path";
-import { makeOutcomeFacts } from "@claudexor/schema";
+import { RunFailureCode } from "@claudexor/schema";
 import { redactSecrets } from "@claudexor/util";
+import { budgetFailureRecord, classifyBudgetFailure } from "./budgetFailure.js";
+import { reconcileDecisionBudget, settledBudgetSnapshot, } from "./decisionBudget.js";
+import { reconcileDecisionTerminal } from "./decisionTerminalReconciliation.js";
+import { clearFailureArtifact, reconcileWorkProductTerminal, terminalOutcomeFacts, } from "./terminalOutcome.js";
+export function announcedRunContext(identity, ledger, hasDelegateAuthority) {
+    return {
+        ...identity,
+        spend: () => ledger.spend(),
+        valuation: () => ledger.valuation(),
+        spendEstimated: () => ledger.estimated(),
+        valuationKnowledge: () => ledger.valuationKnowledge(),
+        budgetTerminal: () => ledger.terminal(),
+        recheckBudgetAfterBarrier: hasDelegateAuthority,
+    };
+}
+function ownsDelegateDrain(context) {
+    try {
+        return context.recheckBudgetAfterBarrier?.() === true;
+    }
+    catch {
+        // Reconciliation is an extra authority granted only to a proven Delegate
+        // drain owner. An unreadable ownership predicate must fail closed instead
+        // of touching an ordinary Agent's already-terminal artifacts.
+        return false;
+    }
+}
+function postDrainBudgetFailure(context, terminal, budget, prior) {
+    const mapping = classifyBudgetFailure({ denial: null, terminal });
+    const facts = terminalOutcomeFacts(prior.facts, "failed", mapping.reason);
+    reconcileDecisionBudget(context, budget, { facts, why: mapping.safeMessage });
+    reconcileWorkProductTerminal(context, facts);
+    context.store.writeText(join(context.paths.finalDir, "summary.md"), `# Run ${context.runId} (${context.mode})\n\n- Lifecycle: failed (${mapping.reason})\n- Phase: budget\n\n${mapping.safeMessage}\n`);
+    writeFailure(context.store, context.paths, budgetFailureRecord(mapping, { runDir: context.paths.root }));
+    context.log.emit("output.ready", {
+        kind: "summary",
+        path: "final/summary.md",
+        state: "diagnostic",
+    });
+    context.log.emit("run.failed", {
+        lifecycle: "failed",
+        facts,
+        reason: mapping.reason,
+        phase: "budget",
+        error: mapping.safeMessage,
+        failure_ref: "final/failure.yaml",
+    });
+    return {
+        ...prior,
+        lifecycle: "failed",
+        facts,
+        summary: mapping.safeMessage,
+        spendUsd: budget.spendUsd,
+    };
+}
 export function writeFailure(store, paths, failure) {
     store.writeYaml(join(paths.finalDir, "failure.yaml"), {
         phase: failure.phase,
@@ -38,7 +92,10 @@ export function cancelledResult(log, runId, taskId, mode, runDir, candidates, wr
  * user cancel aborts with a DOMException reason and stays a bare cancel. */
 cancelSignal, 
 /** Materializes the diagnostic summary the output.ready below announces. */
-store) {
+store, 
+/** A prepared result may already carry independent checks/review/work facts
+ * when cancellation wins during the Delegate terminal barrier. */
+priorFacts) {
     if (writeTelemetry) {
         try {
             writeTelemetry();
@@ -72,9 +129,7 @@ store) {
     if (summaryWritten) {
         log.emit("output.ready", { kind: "summary", path: "final/summary.md", state: "diagnostic" });
     }
-    const cancelFacts = makeOutcomeFacts("cancelled", {
-        reason: cancelReason === "wall_clock_exceeded" ? "wall_clock_exceeded" : "user_cancelled",
-    });
+    const cancelFacts = terminalOutcomeFacts(priorFacts, "cancelled", cancelReason === "wall_clock_exceeded" ? "wall_clock_exceeded" : "user_cancelled");
     log.emit("run.failed", {
         lifecycle: "cancelled",
         facts: cancelFacts,
@@ -96,20 +151,25 @@ store) {
     };
 }
 /**
- * Terminal safety net for an unexpected throw in a post-announce phase.
- * Every run must end with failure.yaml + summary + a terminal run.failed
- * event.
+ * Shared post-announce failure terminal. Unexpected throws use its internal
+ * defaults; known callers may supply narrow typed provenance. Every run ends
+ * with failure.yaml + summary + a terminal run.failed event.
  */
-export function failTerminally(log, store, paths, runId, taskId, mode, phase, err, spendUsd) {
+export function failTerminally(log, store, paths, runId, taskId, mode, phase, err, spendUsd, failureMeta = {}) {
     const message = redactSecrets(err instanceof Error ? err.message : String(err));
-    const failFacts = makeOutcomeFacts("failed", { reason: "harness_failed" });
+    const parsedCode = RunFailureCode.safeParse(err && typeof err === "object" ? err.code : undefined);
+    const failFacts = terminalOutcomeFacts(failureMeta.priorFacts, "failed", "harness_failed");
     store.writeText(join(paths.finalDir, "summary.md"), `# Run ${runId} (${mode})\n\n- Lifecycle: failed\n- Phase: ${phase}\n\n${message}\n`);
     writeFailure(store, paths, {
         phase,
-        category: "internal",
+        category: failureMeta.category ?? "internal",
+        code: parsedCode.success ? parsedCode.data : null,
+        harnessId: failureMeta.harnessId,
+        attemptId: failureMeta.attemptId,
         safeMessage: message,
+        rawDetailRef: failureMeta.rawDetailRef,
         runDir: paths.root,
-        nextActions: ["Open diagnostics", "Retry the run"],
+        nextActions: failureMeta.nextActions ?? ["Open diagnostics", "Retry the run"],
     });
     log.emit("output.ready", { kind: "summary", path: "final/summary.md", state: "diagnostic" });
     log.emit("run.failed", {
@@ -141,6 +201,9 @@ export function failTerminally(log, store, paths, runId, taskId, mode, phase, er
  * internal failure.
  */
 export async function guardAnnouncedRun(signal, body, 
+/** Awaited after strategy work but before a deferred terminal is flushed.
+ * Delegate parents use it to fence admission and drain child settlements. */
+beforeTerminal, 
 /**
  * Invoked once with the announced runId when the strategy settles (return OR
  * throw). The single per-run terminalization hook: per-run engine state keyed
@@ -149,40 +212,168 @@ export async function guardAnnouncedRun(signal, body,
  */
 onSettled) {
     let announced = null;
+    let preparedResult = null;
+    let barrierAttempted = false;
+    let barrierFailed = false;
+    const runBarrier = async (context) => {
+        if (barrierAttempted)
+            return;
+        barrierAttempted = true;
+        try {
+            await beforeTerminal?.(context);
+        }
+        catch (error) {
+            barrierFailed = true;
+            throw error;
+        }
+    };
     try {
-        return await body((a) => {
+        const result = await body((a) => {
             announced = a;
         });
+        preparedResult = result;
+        const context = announced;
+        if (context) {
+            await runBarrier(context);
+            const budget = settledBudgetSnapshot(context);
+            const delegateBarrierArmed = ownsDelegateDrain(context);
+            if (delegateBarrierArmed && signal?.aborted) {
+                context.log.clearDeferredTerminal();
+                const cancelFacts = terminalOutcomeFacts(result.facts, "cancelled", signal.reason === "wall_clock_exceeded" ? "wall_clock_exceeded" : "user_cancelled");
+                const cancelSummary = signal.reason === "wall_clock_exceeded"
+                    ? "run cancelled: wall-clock deadline (maxSeconds) exceeded"
+                    : "run cancelled";
+                let reconciledCancelFacts = cancelFacts;
+                try {
+                    reconcileDecisionBudget(context, budget);
+                    reconciledCancelFacts = reconcileDecisionTerminal(context, {
+                        facts: cancelFacts,
+                        why: cancelSummary,
+                        preparedFacts: result.facts,
+                    });
+                    reconcileWorkProductTerminal(context, reconciledCancelFacts);
+                    clearFailureArtifact(context);
+                }
+                catch {
+                    /* the cancellation terminal below remains authoritative */
+                }
+                const cancelled = cancelledResult(context.log, context.runId, context.taskId, context.mode, context.paths.root, result.candidates, undefined, budget.spendUsd, signal, context.store, reconciledCancelFacts);
+                context.log.flushDeferredTerminal();
+                return {
+                    ...result,
+                    lifecycle: "cancelled",
+                    facts: cancelled.facts,
+                    summary: cancelled.summary,
+                    spendUsd: cancelled.spendUsd,
+                    ...(cancelled.cancelReason ? { cancelReason: cancelled.cancelReason } : {}),
+                };
+            }
+            const budgetTerminal = delegateBarrierArmed ? (context.budgetTerminal?.() ?? null) : null;
+            if (budgetTerminal && result.lifecycle === "succeeded") {
+                context.log.clearDeferredTerminal();
+                const failed = postDrainBudgetFailure(context, budgetTerminal, budget, result);
+                context.log.flushDeferredTerminal();
+                return failed;
+            }
+            if (delegateBarrierArmed)
+                reconcileDecisionBudget(context, budget);
+            context.log.flushDeferredTerminal();
+            if (budget.spendUsd !== null)
+                return { ...result, spendUsd: budget.spendUsd };
+        }
+        return result;
     }
     catch (err) {
         // TS cannot see the closure assignment; the cast is safe (set-once).
         const a = announced;
         if (!a)
             throw err;
+        a.log.clearDeferredTerminal();
+        let terminalError = err;
+        try {
+            await runBarrier(a);
+        }
+        catch (barrierError) {
+            terminalError = barrierError;
+        }
         // Settled-spend accounting is part of the terminal contract on EVERY
         // path (the orchestrate executor aggregates it); a broken spend snapshot
         // must not mask the original failure, so it degrades to null loudly-typed.
-        let spendUsd = null;
+        const budget = settledBudgetSnapshot(a);
+        const spendUsd = budget.spendUsd;
+        const delegateBarrierArmed = ownsDelegateDrain(a);
+        if (signal?.aborted && terminalError === err) {
+            const priorFacts = preparedResult?.facts;
+            const cancelFacts = terminalOutcomeFacts(priorFacts, "cancelled", signal.reason === "wall_clock_exceeded" ? "wall_clock_exceeded" : "user_cancelled");
+            const cancelSummary = signal.reason === "wall_clock_exceeded"
+                ? "run cancelled: wall-clock deadline (maxSeconds) exceeded"
+                : "run cancelled";
+            let reconciledCancelFacts = cancelFacts;
+            try {
+                if (delegateBarrierArmed)
+                    reconcileDecisionBudget(a, budget);
+                reconciledCancelFacts = reconcileDecisionTerminal(a, {
+                    facts: cancelFacts,
+                    why: cancelSummary,
+                    ...(preparedResult ? { preparedFacts: preparedResult.facts } : {}),
+                });
+                reconcileWorkProductTerminal(a, reconciledCancelFacts);
+                clearFailureArtifact(a);
+            }
+            catch {
+                /* the cancellation terminal below remains authoritative */
+            }
+            const cancelled = cancelledResult(a.log, a.runId, a.taskId, a.mode, a.paths.root, preparedResult?.candidates ?? [], undefined, spendUsd, 
+            // A wall-clock abort surfaced as a throw must keep its reason and
+            // materialize the diagnostic summary, exactly like the checkpoint paths.
+            signal, a.store, reconciledCancelFacts);
+            a.log.flushDeferredTerminal();
+            return preparedResult
+                ? {
+                    ...preparedResult,
+                    lifecycle: "cancelled",
+                    facts: cancelled.facts,
+                    summary: cancelled.summary,
+                    spendUsd: cancelled.spendUsd,
+                    ...(cancelled.cancelReason ? { cancelReason: cancelled.cancelReason } : {}),
+                }
+                : cancelled;
+        }
+        const priorFacts = preparedResult?.facts;
+        const pendingFacts = terminalOutcomeFacts(priorFacts, "failed", "harness_failed");
+        const pendingSummary = redactSecrets(terminalError instanceof Error ? terminalError.message : String(terminalError));
+        let reconciledFailureFacts = pendingFacts;
         try {
-            spendUsd = a.spend ? a.spend() : null;
+            if (delegateBarrierArmed)
+                reconcileDecisionBudget(a, budget);
+            reconciledFailureFacts = reconcileDecisionTerminal(a, {
+                facts: pendingFacts,
+                why: pendingSummary,
+                ...(preparedResult ? { preparedFacts: preparedResult.facts } : {}),
+            });
+            reconcileWorkProductTerminal(a, reconciledFailureFacts);
         }
         catch {
-            spendUsd = null;
-        }
-        if (signal?.aborted) {
-            return cancelledResult(a.log, a.runId, a.taskId, a.mode, a.paths.root, [], undefined, spendUsd, 
-            // A wall-clock abort surfaced as a throw must keep its reason and
-            // materialize the diagnostic summary, exactly like the checkpoint paths.
-            signal, a.store);
+            /* the failure terminal below remains authoritative */
         }
-        return failTerminally(a.log, a.store, a.paths, a.runId, a.taskId, a.mode, a.phase, err, spendUsd);
+        const failed = failTerminally(a.log, a.store, a.paths, a.runId, a.taskId, a.mode, barrierFailed ? "delegation_drain" : a.phase, terminalError, spendUsd, { priorFacts: reconciledFailureFacts });
+        a.log.flushDeferredTerminal();
+        return preparedResult
+            ? {
+                ...preparedResult,
+                lifecycle: "failed",
+                facts: failed.facts,
+                summary: failed.summary,
+                spendUsd: failed.spendUsd,
+            }
+            : failed;
     }
     finally {
         // Release per-run engine state on EVERY terminal path (normal return, failure
         // net, cancel), but only for a run that actually announced a runId.
         const settled = announced;
         if (settled)
-            onSettled?.(settled.runId);
+            await onSettled?.(settled.runId);
     }
 }
 //# sourceMappingURL=runTerminals.js.map

package/dist/runTerminals.js.map

@@ -1 +1 @@
-{"version":3,"file":"runTerminals.js","sourceRoot":"","sources":["../src/runTerminals.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAiBhD,MAAM,UAAU,YAAY,CAC1B,KAAoB,EACpB,KAA4C,EAC5C,OAeC;IAED,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE;QACpD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAa,EACb,KAAa,EACb,MAAc,EACd,IAAc,EACd,MAAc,EACd,UAAsE,EACtE,cAA2B,EAC3B,QAAwB;AACxB;;4EAE4E;AAC5E,YAA0B;AAC1B,4EAA4E;AAC5E,KAAqB;IAErB,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,cAAc,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,YAAY,EAAE,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM;QAC7D,CAAC,CAAC,YAAY,CAAC,MAAM;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GACf,YAAY,KAAK,qBAAqB;QACpC,CAAC,CAAC,0DAA0D;QAC5D,CAAC,CAAC,eAAe,CAAC;IACtB,8EAA8E;IAC9E,4EAA4E;IAC5E,wCAAwC;IACxC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EACnC,SAAS,KAAK,KAAK,IAAI,gCAAgC,YAAY,CAAC,CAAC,CAAC,aAAa,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,IAAI,CAC7H,CAAC;YACF,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,sEAAsE;IACtE,oEAAoE;IACpE,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,EAAE;QAChD,MAAM,EAAE,YAAY,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB;KAC1F,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;QACrB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI;QACJ,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,IAAI;QACZ,MAAM;QACN,OAAO,EAAE,WAAW;QACpB,UAAU;QACV,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAa,EACb,KAAoB,EACpB,KAA4C,EAC5C,KAAa,EACb,MAAc,EACd,IAAc,EACd,KAAa,EACb,GAAY,EACZ,QAAwB;IAExB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAClC,SAAS,KAAK,KAAK,IAAI,sCAAsC,KAAK,OAAO,OAAO,IAAI,CACrF,CAAC;IACF,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;QACzB,KAAK;QACL,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,WAAW,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;KACnD,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7F,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;QACrB,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK;QACL,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,oBAAoB;KAClC,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,EAAE;QACd,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA+B,EAC/B,IAAiF;AACjF;;;;;GAKG;AACH,SAAmC;IAEnC,IAAI,SAAS,GAA+B,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACtB,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,MAAM,CAAC,GAAG,SAAuC,CAAC;QAClD,IAAI,CAAC,CAAC;YAAE,MAAM,GAAG,CAAC;QAClB,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,KAAK,CAAC,IAAI,EACZ,EAAE,EACF,SAAS,EACT,QAAQ;YACR,kEAAkE;YAClE,yEAAyE;YACzE,MAAM,EACN,CAAC,CAAC,KAAK,CACR,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CACnB,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,KAAK,EACP,GAAG,EACH,QAAQ,CACT,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,8EAA8E;QAC9E,oEAAoE;QACpE,MAAM,OAAO,GAAG,SAAuC,CAAC;QACxD,IAAI,OAAO;YAAE,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}
+{"version":3,"file":"runTerminals.js","sourceRoot":"","sources":["../src/runTerminals.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAkC,MAAM,mBAAmB,CAAC;AAInF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AA+B9B,MAAM,UAAU,mBAAmB,CACjC,QAA8B,EAC9B,MAAoB,EACpB,oBAAmC;IAEnC,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;QACnC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;QACxC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE;QACrD,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;QACvC,yBAAyB,EAAE,oBAAoB;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA4B;IACrD,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,yBAAyB,EAAE,EAAE,KAAK,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,0EAA0E;QAC1E,8DAA8D;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA4B,EAC5B,QAAuC,EACvC,MAA6B,EAC7B,KAAyB;IAEzB,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,SAAS,CACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAC1C,SAAS,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,6BAA6B,OAAO,CAAC,MAAM,yBAAyB,OAAO,CAAC,WAAW,IAAI,CACnI,CAAC;IACF,YAAY,CACV,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,KAAK,EACb,mBAAmB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAC7D,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE;QAC/B,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,YAAY;KACpB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;QAC7B,SAAS,EAAE,QAAQ;QACnB,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,OAAO,CAAC,WAAW;QAC1B,WAAW,EAAE,oBAAoB;KAClC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,QAAQ;QACnB,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,WAAW;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAoB,EACpB,KAA4C,EAC5C,OAeC;IAED,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE;QACpD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAa,EACb,KAAa,EACb,MAAc,EACd,IAAc,EACd,MAAc,EACd,UAAsE,EACtE,cAA2B,EAC3B,QAAwB;AACxB;;4EAE4E;AAC5E,YAA0B;AAC1B,4EAA4E;AAC5E,KAAqB;AACrB;kEACkE;AAClE,UAA4B;IAE5B,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,cAAc,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,YAAY,EAAE,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM;QAC7D,CAAC,CAAC,YAAY,CAAC,MAAM;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GACf,YAAY,KAAK,qBAAqB;QACpC,CAAC,CAAC,0DAA0D;QAC5D,CAAC,CAAC,eAAe,CAAC;IACtB,8EAA8E;IAC9E,4EAA4E;IAC5E,wCAAwC;IACxC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EACnC,SAAS,KAAK,KAAK,IAAI,gCAAgC,YAAY,CAAC,CAAC,CAAC,aAAa,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,IAAI,CAC7H,CAAC;YACF,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,sEAAsE;IACtE,oEAAoE;IACpE,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,CACtC,UAAU,EACV,WAAW,EACX,YAAY,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CAClF,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;QACrB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI;QACJ,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,IAAI;QACZ,MAAM;QACN,OAAO,EAAE,WAAW;QACpB,UAAU;QACV,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAa,EACb,KAAoB,EACpB,KAA4C,EAC5C,KAAa,EACb,MAAc,EACd,IAAc,EACd,KAAa,EACb,GAAY,EACZ,QAAwB,EACxB,cAOI,EAAE;IAEN,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CACzC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC3F,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAClC,SAAS,KAAK,KAAK,IAAI,sCAAsC,KAAK,OAAO,OAAO,IAAI,CACrF,CAAC;IACF,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;QACzB,KAAK;QACL,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,UAAU;QAC5C,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjD,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,OAAO;QACpB,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC;KAC9E,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7F,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;QACrB,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK;QACL,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,oBAAoB;KAClC,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,EAAE;QACd,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA+B,EAC/B,IAAiF;AACjF;6EAC6E;AAC7E,cAAuE;AACvE;;;;;GAKG;AACH,SAAmD;IAEnD,IAAI,SAAS,GAA+B,IAAI,CAAC;IACjD,IAAI,cAAc,GAA8B,IAAI,CAAC;IACrD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,UAAU,GAAG,KAAK,EAAE,OAA4B,EAAiB,EAAE;QACvE,IAAI,gBAAgB;YAAE,OAAO;QAC7B,gBAAgB,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9B,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,cAAc,GAAG,MAAM,CAAC;QACxB,MAAM,OAAO,GAAG,SAAuC,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,oBAAoB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,oBAAoB,CACtC,MAAM,CAAC,KAAK,EACZ,WAAW,EACX,MAAM,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CACnF,CAAC;gBACF,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,qBAAqB;oBACrC,CAAC,CAAC,0DAA0D;oBAC5D,CAAC,CAAC,eAAe,CAAC;gBACtB,IAAI,qBAAqB,GAAG,WAAW,CAAC;gBACxC,IAAI,CAAC;oBACH,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACzC,qBAAqB,GAAG,yBAAyB,CAAC,OAAO,EAAE;wBACzD,KAAK,EAAE,WAAW;wBAClB,GAAG,EAAE,aAAa;wBAClB,aAAa,EAAE,MAAM,CAAC,KAAK;qBAC5B,CAAC,CAAC;oBACH,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;oBAC7D,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;gBACD,MAAM,SAAS,GAAG,eAAe,CAC/B,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,KAAK,CAAC,IAAI,EAClB,MAAM,CAAC,UAAU,EACjB,SAAS,EACT,MAAM,CAAC,QAAQ,EACf,MAAM,EACN,OAAO,CAAC,KAAK,EACb,qBAAqB,CACtB,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBACpC,OAAO;oBACL,GAAG,MAAM;oBACT,SAAS,EAAE,WAAW;oBACtB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5E,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1F,IAAI,cAAc,IAAI,MAAM,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC/E,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBACpC,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,oBAAoB;gBAAE,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,MAAM,CAAC,GAAG,SAAuC,CAAC;QAClD,IAAI,CAAC,CAAC;YAAE,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC9B,IAAI,aAAa,GAAG,GAAG,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,aAAa,GAAG,YAAY,CAAC;QAC/B,CAAC;QACD,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,OAAO,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,cAAc,EAAE,KAAK,CAAC;YACzC,MAAM,WAAW,GAAG,oBAAoB,CACtC,UAAU,EACV,WAAW,EACX,MAAM,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CACnF,CAAC;YACF,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,qBAAqB;gBACrC,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,eAAe,CAAC;YACtB,IAAI,qBAAqB,GAAG,WAAW,CAAC;YACxC,IAAI,CAAC;gBACH,IAAI,oBAAoB;oBAAE,uBAAuB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC7D,qBAAqB,GAAG,yBAAyB,CAAC,CAAC,EAAE;oBACnD,KAAK,EAAE,WAAW;oBAClB,GAAG,EAAE,aAAa;oBAClB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC,CAAC;gBACH,4BAA4B,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;gBACvD,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;YACD,MAAM,SAAS,GAAG,eAAe,CAC/B,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,KAAK,CAAC,IAAI,EACZ,cAAc,EAAE,UAAU,IAAI,EAAE,EAChC,SAAS,EACT,QAAQ;YACR,kEAAkE;YAClE,yEAAyE;YACzE,MAAM,EACN,CAAC,CAAC,KAAK,EACP,qBAAqB,CACtB,CAAC;YACF,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC9B,OAAO,cAAc;gBACnB,CAAC,CAAC;oBACE,GAAG,cAAc;oBACjB,SAAS,EAAE,WAAW;oBACtB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5E;gBACH,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,EAAE,KAAK,CAAC;QACzC,MAAM,YAAY,GAAG,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAClF,MAAM,cAAc,GAAG,aAAa,CAClC,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAC/E,CAAC;QACF,IAAI,sBAAsB,GAAG,YAAY,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,oBAAoB;gBAAE,uBAAuB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7D,sBAAsB,GAAG,yBAAyB,CAAC,CAAC,EAAE;gBACpD,KAAK,EAAE,YAAY;gBACnB,GAAG,EAAE,cAAc;gBACnB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,4BAA4B,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAC3B,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,IAAI,EACN,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAC5C,aAAa,EACb,QAAQ,EACR,EAAE,UAAU,EAAE,sBAAsB,EAAE,CACvC,CAAC;QACF,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC9B,OAAO,cAAc;YACnB,CAAC,CAAC;gBACE,GAAG,cAAc;gBACjB,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;YACH,CAAC,CAAC,MAAM,CAAC;IACb,CAAC;YAAS,CAAC;QACT,8EAA8E;QAC9E,oEAAoE;QACpE,MAAM,OAAO,GAAG,SAAuC,CAAC;QACxD,IAAI,OAAO;YAAE,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/secretDiff.d.ts

@@ -0,0 +1,29 @@
+import type { WorkspaceEnvelope } from "@claudexor/schema";
+import { revertWorkingTreePatch, type WorkspaceManager } from "@claudexor/workspace";
+export interface SecretDiffRefusal {
+    disposition: "discarded" | "reverted" | "manual_cleanup";
+    detail: string;
+}
+export declare function recordSecretDiffRefusal(refusal: SecretDiffRefusal | undefined, errors: string[], existingError: boolean): boolean;
+export declare function secretDiffNextActions(refusal: SecretDiffRefusal): string[];
+/** Keep a secret-bearing patch memory-only. Isolated bytes die with their
+ * envelope; in-place bytes are removed only through the existing exact
+ * postimage check, so a concurrent edit turns into manual cleanup rather than
+ * a destructive rollback. */
+export declare function quarantineSecretDiff(input: {
+    diff: string;
+    inPlace: boolean;
+    repo: string;
+    binarySecretLike: boolean;
+    /** Secret-risk media that is not represented by `diff` cannot be removed by
+     * a successful text rollback and therefore requires truthful manual cleanup. */
+    secretOutsidePatch?: boolean;
+    gitBacked: boolean;
+    /** Test seam for the typed workspace rollback contract. */
+    revertPatch?: typeof revertWorkingTreePatch;
+}): Promise<{
+    diff: string;
+    refusal?: SecretDiffRefusal;
+}>;
+export declare function quarantineCandidateWorkspace(wsm: WorkspaceManager, envelope: WorkspaceEnvelope, inPlace: boolean, answerText?: string): ReturnType<typeof quarantineSecretDiff>;
+//# sourceMappingURL=secretDiff.d.ts.map

package/dist/secretDiff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretDiff.d.ts","sourceRoot":"","sources":["../src/secretDiff.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAIrF,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,WAAW,GAAG,UAAU,GAAG,gBAAgB,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,MAAM,EAAE,MAAM,EAAE,EAChB,aAAa,EAAE,OAAO,GACrB,OAAO,CAIT;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAI1E;AAED;;;6BAG6B;AAC7B,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;IAC1B;oFACgF;IAChF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,sBAAsB,CAAC;CAC7C,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAkEzD;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,MAAM,GAClB,UAAU,CAAC,OAAO,oBAAoB,CAAC,CA0CzC"}

package/dist/secretDiff.js

@@ -0,0 +1,133 @@
+import { realpathSync } from "node:fs";
+import { resolve, sep } from "node:path";
+import { summarizeDiffPaths } from "@claudexor/core";
+import { revertWorkingTreePatch } from "@claudexor/workspace";
+import { containsSecretLikeToken, redactSecrets } from "@claudexor/util";
+import { candidateOutputSecretRisk, rasterLinksInMarkdown } from "./candidateOutputs.js";
+export function recordSecretDiffRefusal(refusal, errors, existingError) {
+    if (!refusal)
+        return existingError;
+    errors.push("candidate output could not be proven secret-safe; refusing artifact persistence");
+    return true;
+}
+export function secretDiffNextActions(refusal) {
+    return refusal.disposition === "manual_cleanup"
+        ? ["Inspect and clean the state named in the recovery receipt", "Retry the run"]
+        : ["Retry the run without writing secret material"];
+}
+/** Keep a secret-bearing patch memory-only. Isolated bytes die with their
+ * envelope; in-place bytes are removed only through the existing exact
+ * postimage check, so a concurrent edit turns into manual cleanup rather than
+ * a destructive rollback. */
+export async function quarantineSecretDiff(input) {
+    if (!containsSecretLikeToken(input.diff) && !input.binarySecretLike) {
+        return { diff: input.diff };
+    }
+    if (!input.inPlace) {
+        return {
+            diff: "",
+            refusal: {
+                disposition: "discarded",
+                detail: "isolated candidate bytes that could not be proven secret-safe were discarded with the candidate envelope",
+            },
+        };
+    }
+    if (input.binarySecretLike && !input.diff.trim()) {
+        return {
+            diff: "",
+            refusal: {
+                disposition: "manual_cleanup",
+                detail: "candidate output could not be proven secret-safe or captured as an exact reversible patch; manual cleanup required",
+            },
+        };
+    }
+    let rollback;
+    try {
+        rollback = await (input.revertPatch ?? revertWorkingTreePatch)(input.repo, input.diff, {
+            isolateObjectWrites: input.gitBacked,
+            noIndex: !input.gitBacked,
+        });
+    }
+    catch (error) {
+        const rollbackCompleted = error instanceof Error &&
+            Object.prototype.hasOwnProperty.call(error, "cleanupError") &&
+            error.rollbackReverted === true;
+        return {
+            diff: "",
+            refusal: {
+                disposition: "manual_cleanup",
+                detail: rollbackCompleted
+                    ? "in-place bytes were rolled back, but Claudexor scratch cleanup could not be proven; manual cleanup of Claudexor temporary state is required"
+                    : "in-place output that could not be proven secret-safe could not be rolled back; manual cleanup required",
+            },
+        };
+    }
+    const manuallyClean = !rollback.reverted || input.gitBacked || input.secretOutsidePatch === true;
+    return {
+        diff: "",
+        refusal: !manuallyClean
+            ? {
+                disposition: "reverted",
+                detail: "in-place bytes that could not be proven secret-safe were removed by an exact checked rollback",
+            }
+            : {
+                disposition: "manual_cleanup",
+                detail: redactSecrets(rollback.reverted && input.secretOutsidePatch
+                    ? `the exact reversible patch was removed, but candidate media outside that patch could not be proven removed; manual cleanup required${input.gitBacked ? "; inspect Git index, refs, and objects too" : ""}`
+                    : rollback.reverted && input.gitBacked
+                        ? "worktree bytes were removed; inspect Git index, refs, and objects for harness-written secret state"
+                        : (rollback.reason ??
+                            "candidate output could not be proven removed; manual cleanup required")),
+            },
+    };
+}
+export async function quarantineCandidateWorkspace(wsm, envelope, inPlace, answerText) {
+    let captured;
+    try {
+        captured = await wsm.captureDiff(envelope);
+    }
+    catch (error) {
+        const scratchCleanupUnproven = error instanceof Error && Object.prototype.hasOwnProperty.call(error, "cleanupError");
+        return {
+            diff: "",
+            refusal: {
+                disposition: inPlace || scratchCleanupUnproven ? "manual_cleanup" : "discarded",
+                detail: scratchCleanupUnproven
+                    ? "candidate output capture failed and private scratch cleanup could not be proven; manual cleanup of Claudexor temporary state is required"
+                    : inPlace
+                        ? "candidate output could not be captured safely; manual cleanup required"
+                        : "uncaptured isolated candidate output was discarded with the candidate envelope",
+            },
+        };
+    }
+    const diffPaths = summarizeDiffPaths(captured.diff).paths;
+    const linkedPaths = rasterLinksInMarkdown(answerText ?? "");
+    const mediaRisk = candidateOutputSecretRisk({
+        worktreePath: envelope.worktree_path,
+        changedPaths: [...diffPaths, ...linkedPaths],
+    });
+    const diffIdentities = new Set(diffPaths.map((path) => candidatePathIdentity(envelope.worktree_path, path)));
+    const secretOutsidePatch = mediaRisk.artifactDirectoryUnsafe ||
+        mediaRisk.nonReversiblePaths.length > 0 ||
+        mediaRisk.riskyPaths.some((path) => !diffIdentities.has(candidatePathIdentity(envelope.worktree_path, path)));
+    return quarantineSecretDiff({
+        diff: captured.diff,
+        binarySecretLike: captured.binarySecretLike || mediaRisk.risky,
+        secretOutsidePatch,
+        repo: envelope.worktree_path,
+        inPlace,
+        gitBacked: Boolean(envelope.base_sha),
+    });
+}
+function candidatePathIdentity(root, raw) {
+    const absolute = resolve(root, raw);
+    if (absolute !== resolve(root) && !absolute.startsWith(resolve(root) + sep))
+        return absolute;
+    try {
+        return realpathSync.native(absolute);
+    }
+    catch {
+        return absolute;
+    }
+}
+//# sourceMappingURL=secretDiff.js.map

package/dist/secretDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretDiff.js","sourceRoot":"","sources":["../src/secretDiff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EAAE,sBAAsB,EAAyB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAOzF,MAAM,UAAU,uBAAuB,CACrC,OAAsC,EACtC,MAAgB,EAChB,aAAsB;IAEtB,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,OAAO,OAAO,CAAC,WAAW,KAAK,gBAAgB;QAC7C,CAAC,CAAC,CAAC,2DAA2D,EAAE,eAAe,CAAC;QAChF,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;AACxD,CAAC;AAED;;;6BAG6B;AAC7B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAW1C;IACC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,EAAE;YACR,OAAO,EAAE;gBACP,WAAW,EAAE,WAAW;gBACxB,MAAM,EACJ,0GAA0G;aAC7G;SACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,EAAE;YACR,OAAO,EAAE;gBACP,WAAW,EAAE,gBAAgB;gBAC7B,MAAM,EACJ,oHAAoH;aACvH;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YACrF,mBAAmB,EAAE,KAAK,CAAC,SAAS;YACpC,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,iBAAiB,GACrB,KAAK,YAAY,KAAK;YACtB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;YAC1D,KAAgD,CAAC,gBAAgB,KAAK,IAAI,CAAC;QAC9E,OAAO;YACL,IAAI,EAAE,EAAE;YACR,OAAO,EAAE;gBACP,WAAW,EAAE,gBAAgB;gBAC7B,MAAM,EAAE,iBAAiB;oBACvB,CAAC,CAAC,6IAA6I;oBAC/I,CAAC,CAAC,wGAAwG;aAC7G;SACF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC;IACjG,OAAO;QACL,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,CAAC,aAAa;YACrB,CAAC,CAAC;gBACE,WAAW,EAAE,UAAU;gBACvB,MAAM,EACJ,+FAA+F;aAClG;YACH,CAAC,CAAC;gBACE,WAAW,EAAE,gBAAgB;gBAC7B,MAAM,EAAE,aAAa,CACnB,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,kBAAkB;oBAC3C,CAAC,CAAC,sIAAsI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7M,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS;wBACpC,CAAC,CAAC,oGAAoG;wBACtG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;4BAChB,uEAAuE,CAAC,CAC/E;aACF;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAqB,EACrB,QAA2B,EAC3B,OAAgB,EAChB,UAAmB;IAEnB,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,sBAAsB,GAC1B,KAAK,YAAY,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,EAAE;YACR,OAAO,EAAE;gBACP,WAAW,EAAE,OAAO,IAAI,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW;gBAC/E,MAAM,EAAE,sBAAsB;oBAC5B,CAAC,CAAC,0IAA0I;oBAC5I,CAAC,CAAC,OAAO;wBACP,CAAC,CAAC,wEAAwE;wBAC1E,CAAC,CAAC,gFAAgF;aACvF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;IAC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC1C,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,YAAY,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,kBAAkB,GACtB,SAAS,CAAC,uBAAuB;QACjC,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACvC,SAAS,CAAC,UAAU,CAAC,IAAI,CACvB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,qBAAqB,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CACnF,CAAC;IACJ,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,KAAK;QAC9D,kBAAkB;QAClB,IAAI,EAAE,QAAQ,CAAC,aAAa;QAC5B,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,GAAW;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7F,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/terminalOutcome.d.ts

@@ -0,0 +1,22 @@
+import { RunOutcomeFacts } from "@claudexor/schema";
+import type { ArtifactStore } from "@claudexor/artifact-store";
+/** Strategy success may already have materialized a WorkProduct before a
+ * terminal barrier settles. Reconcile only its terminal projection: produced
+ * bytes, review evidence, and apply/revert state remain historical facts. */
+export declare function reconcileWorkProductTerminal(context: {
+    store: ArtifactStore;
+    paths: {
+        finalDir: string;
+    };
+}, facts: RunOutcomeFacts): void;
+/** Cancellation has no RunFailure payload. A prepared failed result may have
+ * written one before the deferred terminal barrier lets cancellation win. */
+export declare function clearFailureArtifact(context: {
+    paths: {
+        finalDir: string;
+    };
+}): void;
+/** Replace only the process terminal axes while retaining independent
+ * checks/review/no-change/work-state evidence from an already prepared run. */
+export declare function terminalOutcomeFacts(prior: RunOutcomeFacts | undefined, lifecycle: RunOutcomeFacts["lifecycle"], reason: RunOutcomeFacts["reason"]): RunOutcomeFacts;
+//# sourceMappingURL=terminalOutcome.d.ts.map

package/dist/terminalOutcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalOutcome.d.ts","sourceRoot":"","sources":["../src/terminalOutcome.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,eAAe,EAAe,MAAM,mBAAmB,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;6EAE6E;AAC7E,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAC9D,KAAK,EAAE,eAAe,GACrB,IAAI,CAmBN;AAED;6EAC6E;AAC7E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,IAAI,CAEnF;AAED;+EAC+E;AAC/E,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,EACvC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,GAChC,eAAe,CAIjB"}

package/dist/terminalOutcome.js

@@ -0,0 +1,39 @@
+import { rmSync } from "node:fs";
+import { join } from "node:path";
+import { makeOutcomeFacts, RunOutcomeFacts, WorkProduct } from "@claudexor/schema";
+/** Strategy success may already have materialized a WorkProduct before a
+ * terminal barrier settles. Reconcile only its terminal projection: produced
+ * bytes, review evidence, and apply/revert state remain historical facts. */
+export function reconcileWorkProductTerminal(context, facts) {
+    const path = join(context.paths.finalDir, "work_product.yaml");
+    const current = context.store.readYaml(path);
+    if (!current || typeof current !== "object" || Array.isArray(current))
+        return;
+    const record = current;
+    const priorMeta = record["meta"] && typeof record["meta"] === "object" && !Array.isArray(record["meta"])
+        ? record["meta"]
+        : {};
+    const reconciled = {
+        ...record,
+        meta: {
+            ...priorMeta,
+            lifecycle: facts.lifecycle,
+            outcome_facts: facts,
+        },
+    };
+    WorkProduct.parse(reconciled);
+    context.store.writeYaml(path, reconciled);
+}
+/** Cancellation has no RunFailure payload. A prepared failed result may have
+ * written one before the deferred terminal barrier lets cancellation win. */
+export function clearFailureArtifact(context) {
+    rmSync(join(context.paths.finalDir, "failure.yaml"), { force: true });
+}
+/** Replace only the process terminal axes while retaining independent
+ * checks/review/no-change/work-state evidence from an already prepared run. */
+export function terminalOutcomeFacts(prior, lifecycle, reason) {
+    return prior
+        ? RunOutcomeFacts.parse({ ...prior, lifecycle, reason })
+        : makeOutcomeFacts(lifecycle, { reason });
+}
+//# sourceMappingURL=terminalOutcome.js.map

package/dist/terminalOutcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalOutcome.js","sourceRoot":"","sources":["../src/terminalOutcome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGnF;;6EAE6E;AAC7E,MAAM,UAAU,4BAA4B,CAC1C,OAA8D,EAC9D,KAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAU,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IAC9E,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpF,CAAC,CAAE,MAAM,CAAC,MAAM,CAA6B;QAC7C,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM;QACT,IAAI,EAAE;YACJ,GAAG,SAAS;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK;SACrB;KACF,CAAC;IACF,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,OAAwC;IAC3E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,oBAAoB,CAClC,KAAkC,EAClC,SAAuC,EACvC,MAAiC;IAEjC,OAAO,KAAK;QACV,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACxD,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/dist/write-isolation.d.ts

@@ -0,0 +1,11 @@
+import type { ModeKind } from "@claudexor/schema";
+/** Refuse restriction policies that a live-tree write cannot contain. */
+export declare function assertWriteIsolation(input: {
+    mode: ModeKind;
+    protectedPaths: readonly string[];
+    denyPaths?: readonly string[];
+    inPlace?: boolean;
+    repoRoot: string;
+    executionRoot: string;
+}): void;
+//# sourceMappingURL=write-isolation.d.ts.map

package/dist/write-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-isolation.d.ts","sourceRoot":"","sources":["../src/write-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGlD,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,IAAI,CAcP"}

package/dist/write-isolation.js

@@ -0,0 +1,13 @@
+import { canonicalProjectRoot } from "@claudexor/util";
+/** Refuse restriction policies that a live-tree write cannot contain. */
+export function assertWriteIsolation(input) {
+    const liveProject = input.inPlace === true &&
+        canonicalProjectRoot(input.executionRoot) === canonicalProjectRoot(input.repoRoot);
+    if (input.mode === "agent" && input.protectedPaths.length > 0 && liveProject) {
+        throw new Error("project protected_paths require an isolated execution root before an agent run can mutate files; use an isolated thread or drop --in-place");
+    }
+    if ((input.denyPaths?.length ?? 0) > 0 && input.inPlace === true) {
+        throw new Error("denyPaths requires an isolated/envelope run: the post-diff policy gate blocks a violating patch before delivery, which an in-place run cannot guarantee; drop --deny-path or run isolated");
+    }
+}
+//# sourceMappingURL=write-isolation.js.map

package/dist/write-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-isolation.js","sourceRoot":"","sources":["../src/write-isolation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,MAAM,WAAW,GACf,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,4IAA4I,CAC7I,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,2LAA2L,CAC5L,CAAC;IACJ,CAAC;AACH,CAAC"}