@claudexor/workspace 4.3.0 → 4.4.0

package/dist/anchor-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anchor-store.d.ts","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAsBA;8EAC8E;AAC9E,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAOD,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5F;AAoCD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAIjE;AAED;4EAC4E;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC;CAC/C,GAAG,oBAAoB,CAuBvB;AAED;kDACkD;AAClD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,GACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxB"}
+{"version":3,"file":"anchor-store.d.ts","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAaA;8EAC8E;AAC9E,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAOD,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5F;AAiBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAIjE;AAED;4EAC4E;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC;CAC/C,GAAG,oBAAoB,CAuBvB;AAED;kDACkD;AAClD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,GACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxB"}

package/dist/anchor-store.js

@@ -1,6 +1,6 @@
-import { closeSync, existsSync, fsyncSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { ensureDir, fsyncDirectory, projectRuntimeDir, sha256 } from "@claudexor/util";
+import { fsyncDirectory, projectRuntimeDir, sha256, writePatchObject } from "@claudexor/util";
 import { WorkspaceError } from "@claudexor/core";
 import { diffTrees } from "./git.js";
 const ANCHOR_ID = /^sha256:[0-9a-f]{64}$/;
@@ -31,7 +31,6 @@ function persistRevertAnchor(repo, patch) {
     const id = sha256(patch);
     const target = objectPath(repo, id);
     const targetDir = dirname(target);
-    ensureDir(targetDir);
     if (existsSync(target)) {
         if (sha256(readFileSync(target, "utf8")) !== id) {
             throw new WorkspaceError(`revert anchor ${id} failed its content digest`);
@@ -39,28 +38,7 @@ function persistRevertAnchor(repo, patch) {
         fsyncDirectory(targetDir);
         return id;
     }
-    const temp = `${target}.tmp-${process.pid}-${crypto.randomUUID()}`;
-    const fd = openSync(temp, "wx", 0o600);
-    try {
-        writeSync(fd, patch, undefined, "utf8");
-        fsyncSync(fd);
-    }
-    finally {
-        closeSync(fd);
-    }
-    try {
-        renameSync(temp, target);
-        fsyncDirectory(targetDir);
-    }
-    catch (error) {
-        try {
-            unlinkSync(temp);
-        }
-        catch {
-            // The original rename error is authoritative.
-        }
-        throw error;
-    }
+    writePatchObject(projectRuntimeDir(repo), target, patch);
     return id;
 }
 export function readRevertAnchor(repo, id) {

package/dist/anchor-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"anchor-store.js","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU;IAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,UAAkB,EAClB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,yEAAyE;AACzE,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAY,EAAE,KAAa;IAC3E,IAAI,CAAC;QACH,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACnE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAK7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,KAAK,UAAU;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACtE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,oGAAoG;SACvG,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,iGAAiG;KACpG,CAAC;AACJ,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,UAAyB,EACzB,WAA0B;IAE1B,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"anchor-store.js","sourceRoot":"","sources":["../src/anchor-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU;IAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,UAAkB,EAClB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,yEAAyE;AACzE,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAY,EAAE,KAAa;IAC3E,IAAI,CAAC;QACH,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAK7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,KAAK,UAAU;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACtE,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,oGAAoG;SACvG,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,iGAAiG;KACpG,CAAC;AACJ,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,UAAyB,EACzB,WAA0B;IAE1B,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/continuation-evidence.d.ts

@@ -0,0 +1,182 @@
+import { SessionCapsule } from "@claudexor/schema";
+export declare function runFilesExpired(runDir: string): boolean;
+export declare function readSessionCapsule(attemptDir: string): SessionCapsule | null;
+export declare function readContinuationEvidence(runDir: string): {
+    resumable: {
+        cause: "cancelled" | "context_exhausted" | "host_restart" | "input_required" | "other" | "permission_denied" | "pinned_limit" | "pool_exhausted" | "transport" | "vendor_limit" | "wall_clock";
+        resetsAt: string | null;
+        limitWindow: string | null;
+        limitEvidence: "unspecified" | "window" | null;
+        carriers: ("native" | "native_moved" | "packet")[];
+        limitCode: string | null;
+        session: {
+            harness: string;
+            nativeSessionId: string;
+            holderProfileId: string | null;
+        } | null;
+        workspace: {
+            kind: "in_place" | "none" | "retained_envelope";
+            root: string | null;
+        };
+    } | undefined;
+    held: {
+        attemptId: string;
+        capsule: {
+            harness: string;
+            nativeSessionId: string;
+            holderProfileId: string | null;
+            file: string | null;
+            mtimeMs: number | null;
+            sidecars: string[];
+            cwd: string;
+            requestedModel: string | null;
+        };
+    } | null;
+    attemptId: string;
+    attempt: {
+        request_refusal?: {
+            scope: "turn_text";
+            unit: "unicode_scalars";
+            source: string;
+            kind: "input_too_large";
+            limit: number | null;
+            actual: number | null;
+            native_code: string;
+        } | {
+            kind: "vendor_cli_too_old";
+            native_code: "claude_code_version_too_old";
+            source: "claude_stdout";
+            binary_path: string | null;
+            installed_version: string | null;
+        } | undefined;
+        effort_resolution?: {
+            requested: string | null;
+            submitted: string | null;
+            resolution: "downward" | "exact" | "floor" | "omitted" | "rejected" | "unverifiable";
+            source: "account_catalog" | "adapter" | "live_probe" | "versioned_snapshot";
+            parameter: string | null;
+            observed: string | null;
+            observedSource: string | null;
+            reason?: string | undefined;
+        } | undefined;
+        processing?: {
+            requested: "economy" | "fast" | "standard" | null;
+            submitted: "economy" | "fast" | "standard" | null;
+            submittedNative: string | null;
+            observed: "economy" | "fast" | "mixed" | "standard" | "unknown";
+            observedNative: string[];
+            reason: string | null;
+            source: string;
+        } | undefined;
+        processing_cost_basis?: {
+            nativeMode: string | null;
+            kind: "cash" | "included" | "paid_credits" | "unknown" | "valuation";
+            source: string;
+            debit?: "unobserved" | undefined;
+        } | undefined;
+        usage_cost?: {
+            cashUsd: number;
+            valuationUsd: number;
+            unknownUsd: number;
+            cashKnowledge: "estimated" | "exact" | "unknown";
+            valuationKnowledge: "estimated" | "exact" | "unknown";
+        } | undefined;
+        attempt_id: string;
+        harness_id: string;
+        observed_model: string | null;
+        auth_mode: "api_key" | "local_session" | "unknown" | null;
+        auth_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+        profile_id: string | null;
+        requested_model: string | null;
+        request_requirements: {
+            capability: "browser" | "delegation" | "path_deny";
+            harness_id: string;
+            eligible: boolean;
+            requested: boolean;
+            effective: boolean;
+            reason: "access_profile_incompatible" | "effective" | "manifest_unsupported" | "not_requested" | "postdiff_only" | "runtime_unavailable" | "web_policy_off";
+            evidence_refs: string[];
+        }[];
+        web: {
+            required: boolean;
+            policy: "auto" | "cached" | "live" | "off";
+            effective_mode: "auto" | "cached" | "live" | "off";
+            attempted: boolean;
+            satisfied: boolean;
+            status: "attempted" | "failed" | "none" | "satisfied" | "unverified";
+            verification: "dispatched" | "none" | "verified";
+            tool: string | null;
+            target: string | null;
+            error_summary: string | null;
+        };
+        tool_errors: {
+            tool: string;
+            kind: "command" | "file" | "mcp" | "other" | "search" | "web";
+            target: string | null;
+            summary: string;
+            recovered: boolean;
+            tool_use_id: string | null;
+        }[];
+        tool_errors_total: number;
+        unrecovered_tool_errors: number;
+        statusless_tool_results: number;
+        dropped_events: number;
+        transient_failures: {
+            kind: "network" | "service_unavailable" | "stream_disconnect" | "timeout" | "unknown";
+            category: "auth_failed" | "capability_refused" | "config_error" | "process_crash" | "rate_limited" | "timeout" | "unknown_harness_error";
+            retryable: boolean;
+            retry_delay_ms: number | null;
+            http_status: number | null;
+            signal: string | null;
+            adapter_code: string | null;
+        }[];
+        outcome: {
+            deliverable_present: boolean;
+            gates_passed: boolean | null;
+            harness_errored: boolean;
+            web_required_unsatisfied: boolean;
+            delegation_belt_unavailable: boolean;
+            tool_warnings_count: number;
+            status: "blocked" | "failed" | "success" | "success_with_warnings";
+            work_state?: {
+                state: "completed" | "incomplete" | "needs_input" | "unverified";
+                source: "absent" | "constrained" | "validated";
+                required_inputs?: {
+                    kind: "context" | "credential" | "decision" | "external_dependency" | "file" | "permission";
+                    locator: string | null;
+                    description: string;
+                }[] | undefined;
+                unverified_reason?: "footer_missing" | "footer_not_json" | "footer_not_object" | "legacy_output_invalid" | "report_contradictory" | "report_malformed" | "report_missing" | undefined;
+            } | undefined;
+        };
+        delegation_belt?: {
+            requested: boolean;
+            server_name: string | null;
+            ready: boolean;
+            failed: boolean;
+            tool_evidence: boolean;
+        } | undefined;
+        browser?: {
+            requested: boolean;
+            server_name: string | null;
+            attempted: boolean;
+            satisfied: boolean;
+            failed: boolean;
+            unused: boolean;
+        } | undefined;
+        usage: {
+            input_tokens: number | null;
+            output_tokens: number | null;
+            cached_input_tokens: number | null;
+            input_token_usage?: {
+                total_tokens: number | null;
+                cache_read_tokens: number | null;
+                cache_write_tokens: number | null;
+            } | undefined;
+        };
+    } | undefined;
+    patch: string;
+    output: string;
+    hasEvidence: boolean;
+};
+//# sourceMappingURL=continuation-evidence.d.ts.map

package/dist/continuation-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuation-evidence.d.ts","sourceRoot":"","sources":["../src/continuation-evidence.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8B,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAI/E,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQvD;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAO5E;AAYD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2CtD"}

package/dist/continuation-evidence.js

@@ -0,0 +1,70 @@
+/** Shared evidence facts for admission and the successor's carrier planner. */
+import { existsSync, lstatSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+import { parse as yamlParse } from "yaml";
+import { RunResumable, RunTelemetry, SessionCapsule } from "@claudexor/schema";
+import { readRunEvents, retainedOutput } from "@claudexor/event-log";
+import { readTextSafe } from "@claudexor/util";
+export function runFilesExpired(runDir) {
+    try {
+        lstatSync(join(runDir, "tombstone.yaml"));
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+export function readSessionCapsule(attemptDir) {
+    try {
+        const text = readTextSafe(join(attemptDir, "session-capsule.json"));
+        return text === null ? null : SessionCapsule.parse(JSON.parse(text));
+    }
+    catch {
+        return null;
+    }
+}
+function yaml(path) {
+    const text = readTextSafe(path);
+    if (text === null)
+        return null;
+    try {
+        return yamlParse(text);
+    }
+    catch {
+        return null;
+    }
+}
+export function readContinuationEvidence(runDir) {
+    const finalDir = join(runDir, "final");
+    const resumable = RunResumable.safeParse(yaml(join(finalDir, "resumable.yaml"))).data;
+    const telemetry = RunTelemetry.safeParse(yaml(join(finalDir, "telemetry.yaml"))).data;
+    const attemptsDir = join(runDir, "attempts");
+    const sessions = existsSync(attemptsDir)
+        ? readdirSync(attemptsDir)
+            .sort()
+            .flatMap((attemptId) => {
+            const capsule = readSessionCapsule(join(attemptsDir, attemptId));
+            return capsule ? [{ attemptId, capsule }] : [];
+        })
+        : [];
+    const held = sessions.find((entry) => entry.capsule.nativeSessionId === resumable?.session?.nativeSessionId) ??
+        sessions.reduce((newest, entry) => newest && (newest.capsule.mtimeMs ?? 0) > (entry.capsule.mtimeMs ?? 0) ? newest : entry, null);
+    const attemptId = held?.attemptId ?? telemetry?.final_attempt_id ?? "a01";
+    const attempt = telemetry?.attempts.find((entry) => entry.attempt_id === attemptId);
+    const patch = readTextSafe(join(attemptsDir, attemptId, "patch.diff")) ??
+        readTextSafe(join(finalDir, "patch.diff")) ??
+        "";
+    const events = readRunEvents(join(runDir, "events.jsonl"));
+    const output = readTextSafe(join(finalDir, "answer.md"))?.trim() ||
+        readTextSafe(join(finalDir, "retained-output.md"))?.trim() ||
+        retainedOutput(events.events, events.malformed) ||
+        "";
+    const hasEvidence = !!patch.trim() ||
+        !!output ||
+        events.events.some((event) => event.type === "harness.event" &&
+            ["tool_call", "file_change"].includes(String(event.payload["type"])));
+    return { resumable, held, attemptId, attempt, patch, output, hasEvidence };
+}
+//# sourceMappingURL=continuation-evidence.js.map

package/dist/continuation-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuation-evidence.js","sourceRoot":"","sources":["../src/continuation-evidence.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC;QACtC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC;aACrB,IAAI,EAAE;aACN,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YACjE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,CAAC,CAAC;QACN,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GACR,QAAQ,CAAC,IAAI,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,OAAO,EAAE,eAAe,CACjF;QACD,QAAQ,CAAC,MAAM,CACb,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAChB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EACzF,IAAI,CACL,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,SAAS,EAAE,gBAAgB,IAAI,KAAK,CAAC;IAC1E,MAAM,OAAO,GAAG,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IACpF,MAAM,KAAK,GACT,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACxD,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC1C,EAAE,CAAC;IACL,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GACV,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE;QACjD,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE;QAC1D,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;QAC/C,EAAE,CAAC;IACL,MAAM,WAAW,GACf,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,MAAM;QACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,eAAe;YAC9B,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC"}

package/dist/continuation-sources.d.ts

@@ -1,6 +1,8 @@
 import { ContinuationSources } from "@claudexor/schema";
 export declare function writeContinuationSources(runDir: string, sources: ContinuationSources): void;
-export declare function readContinuationSources(runDir: string): ContinuationSources;
+export declare function readContinuationSources(runDir: string, options?: {
+    strict?: boolean;
+}): ContinuationSources;
 export declare function retainedEnvelopeInChain(sources: ContinuationSources): {
     version: 1;
     state: "live" | "retained";

package/dist/continuation-sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"continuation-sources.d.ts","sourceRoot":"","sources":["../src/continuation-sources.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAKxD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAI3F;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAM3E;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;SAMnE"}
+{"version":3,"file":"continuation-sources.d.ts","sourceRoot":"","sources":["../src/continuation-sources.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAKxD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAkB3F;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,mBAAmB,CAYrB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;SAMnE"}

package/dist/continuation-sources.js

@@ -1,19 +1,43 @@
 /** Durable predecessor addresses; custody remains authoritative in each envelope. */
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { closeSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { fsyncDirectory } from "@claudexor/util";
 import { dirname, join } from "node:path";
 import { ContinuationSources } from "@claudexor/schema";
 import { retainedEnvelopeOfRun } from "./retained-envelopes.js";
 const SOURCES_FILE = "context/continuation.json";
 export function writeContinuationSources(runDir, sources) {
     const path = join(runDir, SOURCES_FILE);
+    const text = JSON.stringify(ContinuationSources.parse(sources)) + "\n";
     mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, JSON.stringify(ContinuationSources.parse(sources)) + "\n");
+    const temp = `${path}.tmp-${randomUUID()}`;
+    try {
+        const fd = openSync(temp, "wx", 0o600);
+        try {
+            writeFileSync(fd, text);
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        renameSync(temp, path);
+        fsyncDirectory(dirname(path));
+    }
+    finally {
+        rmSync(temp, { force: true });
+    }
 }
-export function readContinuationSources(runDir) {
+export function readContinuationSources(runDir, options = {}) {
     try {
         return ContinuationSources.parse(JSON.parse(readFileSync(join(runDir, SOURCES_FILE), "utf8")));
     }
-    catch {
+    catch (error) {
+        // Absence is normal for a non-continuation. Retirement must distinguish
+        // that from unreadable evidence instead of proving false non-ownership.
+        if (options.strict && error.code !== "ENOENT")
+            throw new Error(`continuation references ${join(runDir, SOURCES_FILE)}: ${String(error)}`, {
+                cause: error,
+            });
         return [];
     }
 }

package/dist/continuation-sources.js.map

@@ -1 +1 @@
-{"version":3,"file":"continuation-sources.js","sourceRoot":"","sources":["../src/continuation-sources.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,OAA4B;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACxC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA4B;IAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"continuation-sources.js","sourceRoot":"","sources":["../src/continuation-sources.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,OAA4B;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACvE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxB,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,OAAO,GAAyB,EAAE;IAElC,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,wEAAwE;QACxE,IAAI,OAAO,CAAC,MAAM,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACtE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;gBACzF,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA4B;IAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/git-nested-repositories.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Untracked nested repositories that no `.gitmodules` entry declares, as
+ * worktree-top-relative paths: `git ls-files --others` names each one with a
+ * trailing slash because Git never descends into another repository, and
+ * `--full-name` keeps the names top-relative when the capture runs in a
+ * subdirectory, matching both the patch paths and the `:(top)` exclusions.
+ * Read against the caller's scratch index (`env`), so the set is "not in the
+ * base tree", never the user's staging state.
+ *
+ * A patch cannot carry another repository (Git records a commit link, or
+ * refuses a repository without a commit outright), so callers leave these out
+ * of their `git add` with `nestedRepositoryExcludes` instead of failing.
+ */
+export declare function untrackedNestedRepositories(repo: string, env: Record<string, string>, pathspec: string[], label: string): Promise<string[]>;
+/** Exclusion pathspecs for `untrackedNestedRepositories` paths: top-relative
+ * and literal, so a name with glob characters never swallows a sibling. */
+export declare function nestedRepositoryExcludes(paths: string[]): string[];
+//# sourceMappingURL=git-nested-repositories.d.ts.map

package/dist/git-nested-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-nested-repositories.d.ts","sourceRoot":"","sources":["../src/git-nested-repositories.ts"],"names":[],"mappings":"AAsCA;;;;;;;;;;;;GAYG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED;2EAC2E;AAC3E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE"}

package/dist/git-nested-repositories.js

@@ -0,0 +1,62 @@
+import { WorkspaceError } from "@claudexor/core";
+import { gitEnv } from "./git-run.js";
+/** Submodule paths the working tree's own `.gitmodules` declares, relative to
+ * the worktree top (where the file lives, whatever directory the capture runs
+ * in): a submodule the candidate added on purpose is captured as its commit
+ * link, as before. No file, or no declared path, declares nothing. The file is
+ * named relative to the capture directory (`--show-cdup` is only `../`
+ * steps), so no worktree path, whatever its spelling, is parsed here. */
+async function declaredSubmodulePaths(repo, env) {
+    const cdup = await gitEnv(repo, ["rev-parse", "--show-cdup"], env);
+    if (cdup.code !== 0)
+        return new Set();
+    const listed = await gitEnv(repo, [
+        "config",
+        "--file",
+        `${cdup.stdout.trim()}.gitmodules`,
+        "--null",
+        "--get-regexp",
+        "^submodule\\..*\\.path$",
+    ], env);
+    if (listed.code !== 0)
+        return new Set();
+    // --null: each entry is "key\nvalue\0", so a path keeps its spaces and newlines.
+    return new Set(listed.stdout
+        .split("\0")
+        .filter((entry) => entry.includes("\n"))
+        .map((entry) => entry.slice(entry.indexOf("\n") + 1))
+        .filter((path) => path.length > 0));
+}
+/**
+ * Untracked nested repositories that no `.gitmodules` entry declares, as
+ * worktree-top-relative paths: `git ls-files --others` names each one with a
+ * trailing slash because Git never descends into another repository, and
+ * `--full-name` keeps the names top-relative when the capture runs in a
+ * subdirectory, matching both the patch paths and the `:(top)` exclusions.
+ * Read against the caller's scratch index (`env`), so the set is "not in the
+ * base tree", never the user's staging state.
+ *
+ * A patch cannot carry another repository (Git records a commit link, or
+ * refuses a repository without a commit outright), so callers leave these out
+ * of their `git add` with `nestedRepositoryExcludes` instead of failing.
+ */
+export async function untrackedNestedRepositories(repo, env, pathspec, label) {
+    const listed = await gitEnv(repo, ["ls-files", "--others", "--exclude-standard", "--full-name", "-z", "--", ...pathspec], env);
+    if (listed.code !== 0) {
+        throw new WorkspaceError(`${label} could not list untracked files: ${listed.stderr.trim()}`);
+    }
+    const nested = listed.stdout
+        .split("\0")
+        .filter((entry) => entry.endsWith("/"))
+        .map((entry) => entry.slice(0, -1));
+    if (nested.length === 0)
+        return [];
+    const declared = await declaredSubmodulePaths(repo, env);
+    return nested.filter((path) => !declared.has(path));
+}
+/** Exclusion pathspecs for `untrackedNestedRepositories` paths: top-relative
+ * and literal, so a name with glob characters never swallows a sibling. */
+export function nestedRepositoryExcludes(paths) {
+    return paths.map((path) => `:(exclude,top,literal)${path}`);
+}
+//# sourceMappingURL=git-nested-repositories.js.map

package/dist/git-nested-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-nested-repositories.js","sourceRoot":"","sources":["../src/git-nested-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;;;yEAKyE;AACzE,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,GAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,IAAI,EACJ;QACE,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa;QAClC,QAAQ;QACR,cAAc;QACd,yBAAyB;KAC1B,EACD,GAAG,CACJ,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACxC,iFAAiF;IACjF,OAAO,IAAI,GAAG,CACZ,MAAM,CAAC,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;SACpD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,GAA2B,EAC3B,QAAkB,EAClB,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,IAAI,EACJ,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EACtF,GAAG,CACJ,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,oCAAoC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;SACzB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,wBAAwB,CAAC,KAAe;IACtD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/git-run.d.ts

@@ -0,0 +1,20 @@
+/** BYTE-FAITHFUL git capture: raw buffers, never readline — CR
+ * bytes in CRLF diff content survive, and no trailing newline is fabricated
+ * (trim-based consumers like revParse are unaffected: git ends its own
+ * output with \n). */
+export declare function git(repo: string, args: string[], input?: string): Promise<{
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}>;
+/** `git` with extra environment (e.g. a scratch GIT_INDEX_FILE for snapshots). */
+export declare function gitEnv(repo: string, args: string[], env: Record<string, string>, input?: string): Promise<{
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}>;
+/** Capture-time honesty: with --binary a payload-less "Binary files differ"
+ * stub should be impossible; if one appears anyway, fail AT CAPTURE with a
+ * typed error instead of shipping a patch that cannot apply. */
+export declare function assertNoBinaryStubs(diff: string, label: string): void;
+//# sourceMappingURL=git-run.d.ts.map

package/dist/git-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-run.d.ts","sourceRoot":"","sources":["../src/git-run.ts"],"names":[],"mappings":"AAOA;;;sBAGsB;AACtB,wBAAsB,GAAG,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAIlE;AAED,kFAAkF;AAClF,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAQlE;AAED;;gEAEgE;AAChE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQrE"}

package/dist/git-run.js

@@ -0,0 +1,31 @@
+import { assertCaptureComplete, parseUnifiedDiff, runCaptureRaw, WorkspaceError, } from "@claudexor/core";
+/** BYTE-FAITHFUL git capture: raw buffers, never readline — CR
+ * bytes in CRLF diff content survive, and no trailing newline is fabricated
+ * (trim-based consumers like revParse are unaffected: git ends its own
+ * output with \n). */
+export async function git(repo, args, input) {
+    const r = await runCaptureRaw("git", ["-C", repo, ...args], { timeoutMs: 60_000, input });
+    assertCaptureComplete(r);
+    return r;
+}
+/** `git` with extra environment (e.g. a scratch GIT_INDEX_FILE for snapshots). */
+export async function gitEnv(repo, args, env, input) {
+    const r = await runCaptureRaw("git", ["-C", repo, ...args], {
+        timeoutMs: 60_000,
+        env,
+        input,
+    });
+    assertCaptureComplete(r);
+    return r;
+}
+/** Capture-time honesty: with --binary a payload-less "Binary files differ"
+ * stub should be impossible; if one appears anyway, fail AT CAPTURE with a
+ * typed error instead of shipping a patch that cannot apply. */
+export function assertNoBinaryStubs(diff, label) {
+    const stubs = parseUnifiedDiff(diff).files.filter((f) => f.binaryStub);
+    if (stubs.length > 0) {
+        const names = stubs.map((f) => f.newPath ?? f.oldPath ?? "(unknown)").join(", ");
+        throw new WorkspaceError(`${label} produced undeliverable binary stub(s) for: ${names}; the work product cannot be applied`);
+    }
+}
+//# sourceMappingURL=git-run.js.map

package/dist/git-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-run.js","sourceRoot":"","sources":["../src/git-run.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,IAAY,EACZ,IAAc,EACd,KAAc;IAEd,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,IAAc,EACd,GAA2B,EAC3B,KAAc;IAEd,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1D,SAAS,EAAE,MAAM;QACjB,GAAG;QACH,KAAK;KACN,CAAC,CAAC;IACH,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,IAAI,cAAc,CACtB,GAAG,KAAK,+CAA+C,KAAK,sCAAsC,CACnG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/git-transient-capture.d.ts

@@ -0,0 +1,30 @@
+import { CaptureOutputExceeded } from "@claudexor/core";
+/**
+ * Capture the current worktree against an exact base without writing its blobs
+ * into the user's Git object database. In-place harness output is untrusted
+ * until the secret fence has inspected the resulting patch; `snapshotTree`
+ * would otherwise leave a dangling raw-secret blob even when artifact
+ * persistence later refused the patch.
+ *
+ * Git still owns filename, mode, symlink, binary, ignored-file, and untracked
+ * semantics. A scratch index plus an isolated temporary object directory holds
+ * the candidate tree only for the duration of `git diff`; the real object
+ * directory is read-only through Git's alternates mechanism.
+ */
+export interface TransientDiffCapture {
+    captureIncomplete: boolean;
+    captureFailure?: CaptureOutputExceeded;
+    patch: string;
+    /** Changed binary files whose pre- or postimage holds secret-like bytes (or
+     * could not be read for inspection). The exact patch still carries their
+     * payload; a persisted COPY withholds it and discloses these paths (INV-062). */
+    binarySecretPaths: string[];
+    /** Untracked directories holding their own Git repository. A patch cannot
+     * carry another repository (Git would record a commit link, or refuse a
+     * repository without a commit), so they are left out of the capture and
+     * named here instead of failing the whole capture. */
+    excludedNestedRepositories?: string[];
+}
+export declare function captureWorkingTreeTransient(repo: string, baseSha: string, pathExcludes?: string[]): Promise<TransientDiffCapture>;
+export declare function diffWorkingTreeTransient(repo: string, baseSha: string, pathExcludes?: string[]): Promise<string>;
+//# sourceMappingURL=git-transient-capture.d.ts.map

package/dist/git-transient-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-transient-capture.d.ts","sourceRoot":"","sources":["../src/git-transient-capture.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAoC,MAAM,iBAAiB,CAAC;AAQ1F;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd;;qFAEiF;IACjF,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B;;;0DAGsD;IACtD,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;CACvC;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CA2H/B;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,MAAM,CAAC,CAIjB"}