@claudexor/util 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/util
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — Low-level utilities (ids, hashing, fs, redaction) with no Claudexor deps.
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/index.d.ts

@@ -0,0 +1,48 @@
+export { CLAUDEXOR_VERSION } from "./version.js";
+/** Generate a short unique id, optionally prefixed (e.g. "run-3f2a...."). */
+export declare function newId(prefix?: string): string;
+/** Current time as an ISO-8601 string. */
+export declare function nowIso(): string;
+/** sha256 of a string, returned as "sha256:<hex>". */
+export declare function sha256(data: string): string;
+/** Deterministic hash of a JSON-serializable value (stable key ordering). */
+export declare function hashJson(value: unknown): string;
+/** JSON.stringify with sorted object keys for stable hashing. */
+export declare function stableStringify(value: unknown): string;
+export declare function ensureDir(path: string): void;
+export declare function writeText(path: string, text: string): void;
+export declare function writeJson(path: string, value: unknown): void;
+export declare function appendLine(path: string, line: string): void;
+/** Read a text file; null on ANY error. BY DESIGN missing and unreadable/
+ * corrupt are indistinguishable — callers that must tell them apart (e.g.
+ * daemon load salvage) check existence first. */
+export declare function readTextSafe(path: string): string | null;
+/** Read+parse JSON; null on ANY error (same by-design contract as readTextSafe). */
+export declare function readJsonSafe<T = unknown>(path: string): T | null;
+export declare function pathExists(path: string): boolean;
+export declare function listDir(path: string): string[];
+/**
+ * Best-effort per-user home for GUI-launched daemons. macOS launch contexts can
+ * have a sparse environment; never let a missing/invalid home collapse storage
+ * to `/.claudexor`.
+ */
+export declare function userHomeDir(): string;
+export declare function userConfigDir(): string;
+export declare function noProjectRepoRoot(): string;
+/**
+ * Best-effort redaction of obvious secret tokens from text destined for logs or
+ * artifacts. This is defense-in-depth, never the primary control: secrets must
+ * not reach this layer in the first place.
+ */
+export declare function redactSecrets(text: string): string;
+export declare function containsSecretLikeToken(text: string): boolean;
+export declare function assertNoInlineSecretValues(value: unknown, path?: string, context?: string): void;
+/** The machine-readable `code` a typed error carries (e.g. inline_secret_rejected), if any. */
+export declare function errorCode(err: unknown): string | undefined;
+/**
+ * Invoke an optional observer callback without letting its errors affect the
+ * caller. Observers (GUI/service event sinks, run-start hooks) are untrusted:
+ * a throwing observer must never change canonical run state or terminal status.
+ */
+export declare function safeInvoke<T>(fn: ((arg: T) => void) | undefined, arg: T): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAYjD,6EAA6E;AAC7E,wBAAgB,KAAK,CAAC,MAAM,SAAK,GAAG,MAAM,CAGzC;AAED,0CAA0C;AAC1C,wBAAgB,MAAM,IAAI,MAAM,CAE/B;AAED,sDAAsD;AACtD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,6EAA6E;AAC7E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAcD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO5C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAG1D;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAE5D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAG3D;AAED;;iDAEiD;AACjD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMxD;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAQhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAM9C;AAQD;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,CASpC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AA+BD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,EAAE,OAAO,SAAe,GAAG,IAAI,CAgCnG;AAED,+FAA+F;AAC/F,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK1D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAO9E"}

package/dist/index.js

@@ -0,0 +1,220 @@
+export { CLAUDEXOR_VERSION } from "./version.js";
+import { createHash, randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join } from "node:path";
+/** Generate a short unique id, optionally prefixed (e.g. "run-3f2a...."). */
+export function newId(prefix = "") {
+    const id = randomUUID().replace(/-/g, "").slice(0, 12);
+    return prefix ? `${prefix}-${id}` : id;
+}
+/** Current time as an ISO-8601 string. */
+export function nowIso() {
+    return new Date().toISOString();
+}
+/** sha256 of a string, returned as "sha256:<hex>". */
+export function sha256(data) {
+    return "sha256:" + createHash("sha256").update(data).digest("hex");
+}
+/** Deterministic hash of a JSON-serializable value (stable key ordering). */
+export function hashJson(value) {
+    return sha256(stableStringify(value));
+}
+/** JSON.stringify with sorted object keys for stable hashing. */
+export function stableStringify(value) {
+    return JSON.stringify(sortKeys(value));
+}
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const key of Object.keys(value).sort()) {
+            out[key] = sortKeys(value[key]);
+        }
+        return out;
+    }
+    return value;
+}
+export function ensureDir(path) {
+    // DECIDED TRADEOFF: `mode` applies only at creation (POSIX). These helpers
+    // also write into USER-CHOSEN locations (benchmark outputs, project dirs),
+    // so re-chmodding a PRE-EXISTING directory here would silently lock down
+    // directories Claudexor does not own. Claudexor-owned SENSITIVE stores
+    // (secrets, daemon token) assert their own permissions at their writers.
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+}
+export function writeText(path, text) {
+    ensureDir(dirname(path));
+    writeFileSync(path, text, { encoding: "utf8", mode: 0o600 });
+}
+export function writeJson(path, value) {
+    writeText(path, JSON.stringify(value, null, 2) + "\n");
+}
+export function appendLine(path, line) {
+    ensureDir(dirname(path));
+    writeFileSync(path, line.endsWith("\n") ? line : line + "\n", { flag: "a", mode: 0o600 });
+}
+/** Read a text file; null on ANY error. BY DESIGN missing and unreadable/
+ * corrupt are indistinguishable — callers that must tell them apart (e.g.
+ * daemon load salvage) check existence first. */
+export function readTextSafe(path) {
+    try {
+        return readFileSync(path, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/** Read+parse JSON; null on ANY error (same by-design contract as readTextSafe). */
+export function readJsonSafe(path) {
+    const text = readTextSafe(path);
+    if (text === null)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+}
+export function pathExists(path) {
+    return existsSync(path);
+}
+export function listDir(path) {
+    try {
+        return readdirSync(path);
+    }
+    catch {
+        return [];
+    }
+}
+function usableAbsoluteDir(raw) {
+    const value = raw?.trim();
+    if (!value || value === "/" || value === "." || value === "~" || !isAbsolute(value))
+        return null;
+    return value.replace(/\/+$/, "");
+}
+/**
+ * Best-effort per-user home for GUI-launched daemons. macOS launch contexts can
+ * have a sparse environment; never let a missing/invalid home collapse storage
+ * to `/.claudexor`.
+ */
+export function userHomeDir() {
+    const home = usableAbsoluteDir(process.env.HOME) ??
+        usableAbsoluteDir(process.env.USERPROFILE) ??
+        usableAbsoluteDir(homedir());
+    if (!home) {
+        throw new Error("Unable to resolve a safe user home directory; set HOME or CLAUDEXOR_CONFIG_DIR");
+    }
+    return home;
+}
+export function userConfigDir() {
+    const override = process.env.CLAUDEXOR_CONFIG_DIR?.trim();
+    if (override) {
+        const safe = usableAbsoluteDir(override);
+        if (!safe)
+            throw new Error("CLAUDEXOR_CONFIG_DIR must be a safe absolute path");
+        return safe;
+    }
+    return join(userHomeDir(), ".claudexor");
+}
+export function noProjectRepoRoot() {
+    return join(userHomeDir(), ".cache", "claudexor", "no-project");
+}
+const SECRET_PATTERNS = [
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    /\bghp_[A-Za-z0-9]{20,}\b/g,
+    /\bgho_[A-Za-z0-9]{20,}\b/g,
+    /\bghs_[A-Za-z0-9]{20,}\b/g,
+    /\bghu_[A-Za-z0-9]{20,}\b/g,
+    /\bglpat-[A-Za-z0-9_-]{16,}\b/g,
+    /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+    /\bsk-or-v1-[A-Za-z0-9]{20,}\b/g,
+    /\bsk-[A-Za-z0-9_-]{20,}\b/g,
+    /\bAIza[A-Za-z0-9_-]{30,}\b/g,
+    /\bxai-[A-Za-z0-9_-]{20,}\b/g,
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    // Slack tokens incl. xoxe (refresh) and xoxc (session) classes.
+    /\bxox[abceprs]-[A-Za-z0-9-]{10,}\b/g,
+    // Cursor API keys (key_<hex>); OpenRouter keys (sk-or-v1-... handled above).
+    /\bkey_[A-Za-z0-9]{20,}\b/g,
+    // Google OAuth access tokens.
+    /\bya29\.[A-Za-z0-9._-]{20,}\b/g,
+    // npm granular access tokens.
+    /\bnpm_[A-Za-z0-9]{20,}\b/g,
+    // PEM private key blocks (RSA/EC/OPENSSH/PKCS8 headers all match).
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+    // Bearer tokens (length-gated to avoid redacting prose like "Bearer of news").
+    /\bBearer\s+[A-Za-z0-9._~+/-]{20,}=*/gi,
+    // JWTs (header.payload.signature) — anthropic/cursor/openai OAuth tokens.
+    /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}\b/g,
+];
+/**
+ * Best-effort redaction of obvious secret tokens from text destined for logs or
+ * artifacts. This is defense-in-depth, never the primary control: secrets must
+ * not reach this layer in the first place.
+ */
+export function redactSecrets(text) {
+    let out = text;
+    for (const pattern of SECRET_PATTERNS)
+        out = out.replace(pattern, "[redacted]");
+    return out;
+}
+export function containsSecretLikeToken(text) {
+    return redactSecrets(text) !== text;
+}
+export function assertNoInlineSecretValues(value, path = "$", context = "run params") {
+    if (typeof value === "string") {
+        if (containsSecretLikeToken(value)) {
+            // Prompts get a tailored remediation: they are DURABLE run artifacts
+            // (task contracts, transcripts, review packets), so a pasted live
+            // credential would outlive the run. There is deliberately NO bypass
+            // flag for this fence.
+            const inPrompt = /\.prompt(\[|\.|$)/.test(path);
+            const remediation = inPrompt
+                ? "the prompt contains a secret-like value; prompts are durable run artifacts — remove the credential (store it with `claudexor secrets set` and reference it instead) and retry"
+                : "store values via secrets and pass refs/profiles";
+            throw Object.assign(new Error(`secret-like value is not accepted in ${context} (${path}); ${remediation}`), {
+                status: 400,
+                code: "inline_secret_rejected",
+            });
+        }
+        return;
+    }
+    if (!value || typeof value !== "object")
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((v, i) => assertNoInlineSecretValues(v, `${path}[${i}]`, context));
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (key === "env" || key === "secrets" || /(^|[_-])(secret|token|password|api[_-]?key)($|[_-])/i.test(key)) {
+            throw Object.assign(new Error(`inline secrets/env are not accepted in ${context} (${path}.${key}); store values via secrets and pass refs/profiles`), { status: 400, code: "inline_secret_rejected" });
+        }
+        assertNoInlineSecretValues(child, `${path}.${key}`, context);
+    }
+}
+/** The machine-readable `code` a typed error carries (e.g. inline_secret_rejected), if any. */
+export function errorCode(err) {
+    if (err && typeof err === "object" && "code" in err && typeof err.code === "string") {
+        return err.code;
+    }
+    return undefined;
+}
+/**
+ * Invoke an optional observer callback without letting its errors affect the
+ * caller. Observers (GUI/service event sinks, run-start hooks) are untrusted:
+ * a throwing observer must never change canonical run state or terminal status.
+ */
+export function safeInvoke(fn, arg) {
+    if (!fn)
+        return;
+    try {
+        fn(arg);
+    }
+    catch {
+        /* observer errors are isolated from control-plane state */
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtD,6EAA6E;AAC7E,MAAM,UAAU,KAAK,CAAC,MAAM,GAAG,EAAE;IAC/B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IAClD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAc;IACpD,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED;;iDAEiD;AACjD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAc,IAAY;IACpD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAuB;IAChD,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GACR,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACnC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAC1C,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,eAAe,GAAa;IAChC,mCAAmC;IACnC,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,2BAA2B;IAC3B,+BAA+B;IAC/B,gCAAgC;IAChC,gCAAgC;IAChC,4BAA4B;IAC5B,6BAA6B;IAC7B,6BAA6B;IAC7B,uBAAuB;IACvB,gEAAgE;IAChE,qCAAqC;IACrC,6EAA6E;IAC7E,2BAA2B;IAC3B,8BAA8B;IAC9B,gCAAgC;IAChC,8BAA8B;IAC9B,2BAA2B;IAC3B,mEAAmE;IACnE,6EAA6E;IAC7E,+EAA+E;IAC/E,uCAAuC;IACvC,0EAA0E;IAC1E,mEAAmE;CACpE,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,IAAI,GAAG,GAAG,EAAE,OAAO,GAAG,YAAY;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,qEAAqE;YACrE,kEAAkE;YAClE,oEAAoE;YACpE,uBAAuB;YACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,QAAQ;gBAC1B,CAAC,CAAC,+KAA+K;gBACjL,CAAC,CAAC,iDAAiD,CAAC;YACtD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,OAAO,KAAK,IAAI,MAAM,WAAW,EAAE,CAAC,EAAE;gBAC1G,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,wBAAwB;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,sDAAsD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3G,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,0CAA0C,OAAO,KAAK,IAAI,IAAI,GAAG,oDAAoD,CAAC,EAChI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAChD,CAAC;QACJ,CAAC;QACD,0BAA0B,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,OAAQ,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3G,OAAQ,GAAwB,CAAC,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAI,EAAkC,EAAE,GAAM;IACtE,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,IAAI,CAAC;QACH,EAAE,CAAC,GAAG,CAAC,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const CLAUDEXOR_VERSION = "1.0.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,iBAAiB,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,5 @@
+// GENERATED by scripts/gen-version.mjs from the root package.json — do not edit by hand.
+// Run `pnpm gen:version` after bumping the root version (changesets keeps the
+// workspace manifests in lockstep). The docs-truth gate enforces parity.
+export const CLAUDEXOR_VERSION = "1.0.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@claudexor/util",
+  "version": "1.0.0",
+  "license": "MIT",
+  "description": "Low-level utilities (ids, hashing, fs, redaction) with no Claudexor deps.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/util"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}