@dewtech/dare-cli 3.8.1 → 3.9.0

package/README.md

@@ -164,6 +164,9 @@ Pick **one** of the two paths per stack:
 | `mcp-rust` (beta) | Rust 1.78+ (rustup) | `rust:1.83` |
 | `mcp-go` (beta) | Go 1.23+ — https://go.dev/dl/ | `golang:1.25` |
 
+> **v3.8.1–3.8.2 (manutenção):** `dare update` passa a entregar os skills/comandos/config das v3.4→v3.8 a projetos existentes (backfill do `UPDATE-MANIFEST`, 3.8.1). O CI ganha um **gate de cobertura de docs** + **redeploy automático da documentação** a cada release (3.8.2).
+
+> **v3.9.0:** **Secure Autonomous Executor + Agentic-chain Security Gate** — `dare execute --agent` (driver plugável, SDK como `optionalDependency` lazy; `--budget-tokens`, `--require-approval rank|none`, `--on-fail replan|escalate|stop`, `--dry-run`; telemetria de custo no GraphRAG; gate `no-llm-in-core`) **+** `dare guard` (unicode-audit + scan heurístico + proveniência Ed25519/minisign-compat + trust boundaries control/data; exit code **6** em FAIL; pré-flight do `dare execute --agent`; bloco `guard` em `dare.config.json`, opt-in `enabled:false`).
 > **v3.8.0:** **Formal Verification Gate** — opt-in strict aspect `verification.formal` (enabled/backend/modules/maxRepairIterations/proofTimeoutSeconds/antiBypass) plus flags `--formal` / `--no-formal` / `--formal-backend <dafny|verus|lean>`. Proves marked critical modules against external Dafny/Verus/Lean toolchain (not an npm dep); exit 5 when toolchain missing on a marked module; anti-bypass rejects `assume(false)`/`ensures true`/leaks even on solver exit 0; telemetry edge `proven_by` → `formal-gate`.
 
 > **v3.7.0:** **Brownfield Discovery** — deterministic auto-discovery of codebase patterns/conventions (`dare patterns`, read-only) fed into the dual graph + steering, plus lightweight planning personas (Analyst/PM/Architect) at planning time only (no runtime swarm). Extends `dare reverse`/`dna`.
@@ -424,6 +427,23 @@ The skills shipped by `dare init` (`.cursor/rules/skill-dag-runner.mdc`,
 `.agents/skills/dare-dag-runner/SKILL.md`, `.claude/commands/dare-dag-run.md`)
 guide the IDE agent through this loop.
 
+#### Autonomous mode (`--agent`)
+
+```bash
+dare execute --agent --dry-run --dag DARE/dare-dag.yaml --require-approval none
+dare execute --agent --budget-tokens 50000 --best-of 3
+```
+
+| Flag | Default | Description |
+|------|---------|-------------|
+| `--agent` | off | Driver executa cada task (mock/claude) |
+| `--budget-tokens <n>` | unlimited | Teto de tokens (soma best-of-N) |
+| `--require-approval` | `rank` | `rank` pausa entre ranks; `none` autônomo |
+| `--on-fail` | `escalate` | `replan` \| `escalate` \| `stop` |
+| `--dry-run` | off | Usa `mockDriver` sem rede |
+
+Exit codes: `6` quando o guard bloqueia no pré-flight (`guard.enabled`).
+
 #### Stack-specific skills
 
 `dare init` also ships skills focused on architectural decisions for

package/dist/__tests__/ide-command-parity.test.js

@@ -36,6 +36,7 @@ const CLI_COMMANDS = {
     bench: 'dare-bench',
     steering: 'dare-steering',
     hooks: 'dare-hooks',
+    guard: 'dare-guard',
     patterns: 'dare-patterns',
     skill: 'dare-skill',
     welcome: 'dare-welcome',

package/dist/__tests__/ide-command-parity.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"ide-command-parity.test.js","sourceRoot":"","sources":["../../src/__tests__/ide-command-parity.test.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAC5D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;AAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAE5D,uEAAuE;AACvE,+EAA+E;AAC/E,MAAM,YAAY,GAA2B;IAC3C,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,cAAc;IACvB,GAAG,EAAE,UAAU;IACf,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,gBAAgB;IAC3B,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,cAAc;CACxB,CAAC;AAEF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE1C,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"ide-command-parity.test.js","sourceRoot":"","sources":["../../src/__tests__/ide-command-parity.test.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAC5D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;AAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAE5D,uEAAuE;AACvE,+EAA+E;AAC/E,MAAM,YAAY,GAA2B;IAC3C,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,cAAc;IACvB,GAAG,EAAE,UAAU;IACf,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,gBAAgB;IAC3B,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,YAAY;IACnB,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,cAAc;CACxB,CAAC;AAEF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE1C,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/secure-executor-regression.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secure-executor-regression.test.d.ts.map

package/dist/__tests__/secure-executor-regression.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-executor-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/secure-executor-regression.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/secure-executor-regression.test.js

@@ -0,0 +1,294 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import fs from 'fs-extra';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { generateKeyPairSync } from 'node:crypto';
+import { readFileSync, readdirSync } from 'node:fs';
+import { signArtifact } from '../guard/provenance.js';
+const pkgRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
+const ALLOWED_REL = path.join('src', 'agent', 'drivers', 'claude.ts');
+const FORBIDDEN = /(?:import|require)\s*\(?['"]@anthropic-ai|from\s+['"]@anthropic-ai/;
+function keyPairPem() {
+    const { privateKey, publicKey } = generateKeyPairSync('ed25519');
+    return {
+        privateKey: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(),
+        publicKey: publicKey.export({ type: 'spki', format: 'pem' }).toString(),
+    };
+}
+function walkTsFiles(dir, base = pkgRoot) {
+    const entries = readdirSync(dir, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === '__tests__' || entry.name === 'node_modules')
+                continue;
+            files.push(...walkTsFiles(full, base));
+            continue;
+        }
+        if (!entry.name.endsWith('.ts'))
+            continue;
+        if (entry.name.endsWith('.test.ts') || entry.name.endsWith('.spec.ts'))
+            continue;
+        files.push(path.relative(base, full));
+    }
+    return files;
+}
+function listSourceFilesForDeterministicPath() {
+    return walkTsFiles(path.join(pkgRoot, 'src')).filter((f) => path.normalize(f) !== path.normalize(ALLOWED_REL));
+}
+function findLlmSdkImportsOutsideDriver() {
+    return listSourceFilesForDeterministicPath().filter((rel) => {
+        const content = readFileSync(path.join(pkgRoot, rel), 'utf8');
+        return FORBIDDEN.test(content);
+    });
+}
+describe('secure executor regression audit (task-620)', () => {
+    let projectRoot;
+    let exitCode;
+    let stdout;
+    let stderr;
+    beforeEach(async () => {
+        vi.resetModules();
+        projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'dare-secure-regression-'));
+        await fs.ensureDir(path.join(projectRoot, 'DARE', 'EXECUTION'));
+        await fs.writeJson(path.join(projectRoot, 'dare.config.json'), {}, { spaces: 2 });
+        vi.spyOn(process, 'cwd').mockReturnValue(projectRoot);
+        exitCode = undefined;
+        stdout = '';
+        stderr = '';
+        vi.spyOn(process, 'exit').mockImplementation((code) => {
+            exitCode = code;
+            throw new Error(`exit:${code}`);
+        });
+        vi.spyOn(console, 'log').mockImplementation((...args) => {
+            stdout += args.map(String).join(' ') + '\n';
+        });
+        vi.spyOn(console, 'error').mockImplementation((...args) => {
+            stderr += args.map(String).join(' ') + '\n';
+        });
+    });
+    afterEach(async () => {
+        const execute = await import('../commands/execute.js');
+        execute.setResolveDriverForTests(null);
+        execute.setPreflightGuardForTests(null);
+        execute.setRankApprovalForTests(null);
+        const claude = await import('../agent/drivers/claude.js');
+        claude.setClaudeSdkImporterForTests(null);
+        vi.restoreAllMocks();
+        await fs.remove(projectRoot).catch(() => undefined);
+    });
+    async function loadExecute() {
+        return import('../commands/execute.js');
+    }
+    async function runExecute(execute, args) {
+        try {
+            await execute.executeCommand.parseAsync(args, { from: 'user' });
+        }
+        catch (err) {
+            if (!(err instanceof Error) || !err.message.startsWith('exit:'))
+                throw err;
+        }
+    }
+    async function writeDag(tasks) {
+        const lines = [
+            'title: "Secure Executor Regression Fixture"',
+            'version: "1.0.0"',
+            'models:',
+            '  HIGH: claude-sonnet',
+            '  MED: claude-sonnet',
+            '  LOW: claude-sonnet',
+            'tasks:',
+        ];
+        for (const task of tasks) {
+            const dependsOn = task.dependsOn ?? [];
+            lines.push(`  - id: ${task.id}`);
+            lines.push(`    title: "${task.id}"`);
+            lines.push(dependsOn.length === 0
+                ? '    depends_on: []'
+                : `    depends_on: [${dependsOn.join(', ')}]`);
+            lines.push('    complexity: LOW');
+            if (task.specFile) {
+                lines.push(`    spec_file: ${task.specFile.replace(/\\/g, '/')}`);
+            }
+            lines.push('    subtask_prompt: |');
+            lines.push(`      ${task.prompt ?? `run ${task.id}`}`);
+        }
+        await fs.writeFile(path.join(projectRoot, 'DARE', 'dare-dag.yaml'), `${lines.join('\n')}\n`);
+    }
+    async function writeGuardConfig(guardBlock) {
+        await fs.writeJson(path.join(projectRoot, 'dare.config.json'), { guard: guardBlock }, { spaces: 2 });
+    }
+    it('budget_never_exceeded_with_best_of_n', async () => {
+        await writeDag([
+            { id: 'task-budget' },
+            { id: 'task-next', dependsOn: ['task-budget'] },
+        ]);
+        const execute = await loadExecute();
+        const runSpy = vi.fn(async (input) => {
+            const candidateId = path.basename(input.worktree);
+            if (candidateId === 'cand-3') {
+                await new Promise((resolve) => {
+                    if (input.signal.aborted) {
+                        resolve();
+                        return;
+                    }
+                    input.signal.addEventListener('abort', () => resolve(), { once: true });
+                    setTimeout(resolve, 200);
+                });
+                return {
+                    status: 'aborted',
+                    worktree: input.worktree,
+                    summary: 'aborted-by-budget',
+                    usage: { inputTokens: 0, outputTokens: 0, costUsd: 0, model: 'budget-driver' },
+                    failureSignature: 'budget-abort',
+                };
+            }
+            return {
+                status: 'implemented',
+                worktree: input.worktree,
+                summary: 'candidate-done',
+                usage: { inputTokens: 7, outputTokens: 0, costUsd: 0.01, model: 'budget-driver' },
+            };
+        });
+        execute.setResolveDriverForTests(async () => ({
+            id: 'budget-driver',
+            requiresNetwork: false,
+            run: runSpy,
+        }));
+        await runExecute(execute, [
+            '--agent',
+            '--dry-run',
+            '--best-of',
+            '3',
+            '--budget-tokens',
+            '14',
+            '--require-approval',
+            'none',
+            '--no-graph',
+        ]);
+        const state = (await fs.readJson(path.join(projectRoot, '.dare', 'state.json')));
+        expect(runSpy).toHaveBeenCalledTimes(3);
+        expect(runSpy.mock.calls.every(([input]) => input.taskId === 'task-budget')).toBe(true);
+        expect(state.tasks['task-budget']?.status).toBe('DONE');
+        expect(state.tasks['task-budget']?.tokens).toBe(14);
+        expect(state.tasks['task-next']?.status).toBe('PENDING');
+        expect(exitCode).toBe(1);
+        expect(stderr).toContain('Escalating');
+    });
+    it('data_channel_never_executes_shell', async () => {
+        const hookPath = '.dare/hooks/preflight.sh';
+        await fs.ensureDir(path.join(projectRoot, '.dare', 'hooks'));
+        await fs.writeFile(path.join(projectRoot, hookPath), '#!/usr/bin/env bash\necho insecure', 'utf8');
+        await writeDag([{ id: 'task-hook', specFile: hookPath }]);
+        await writeGuardConfig({
+            enabled: true,
+            onExecute: true,
+            unicode: 'strip',
+            trustedPaths: ['DARE/EXECUTION/**'],
+            signing: { enabled: false },
+        });
+        const execute = await loadExecute();
+        const safeSpawnModule = await import('../exec/safe-spawn.js');
+        const shellSpy = vi.spyOn(safeSpawnModule, 'safeSpawn');
+        const runSpy = vi.fn(async (input) => ({
+            status: 'implemented',
+            worktree: input.worktree,
+            summary: 'should-not-run',
+            usage: { inputTokens: 0, outputTokens: 0, costUsd: 0, model: 'guard-driver' },
+        }));
+        execute.setResolveDriverForTests(async () => ({
+            id: 'guard-driver',
+            requiresNetwork: false,
+            run: runSpy,
+        }));
+        await runExecute(execute, ['--agent', '--dry-run', '--require-approval', 'none', '--no-graph']);
+        const state = (await fs.readJson(path.join(projectRoot, '.dare', 'state.json')));
+        expect(exitCode).toBe(6);
+        expect(runSpy).not.toHaveBeenCalled();
+        expect(shellSpy).not.toHaveBeenCalled();
+        expect(state.tasks['task-hook']?.error).toContain('boundary-violation');
+        expect(stdout).not.toContain('DONE');
+    });
+    it('tampered_signed_artifact_fails', async () => {
+        const { privateKey, publicKey } = keyPairPem();
+        const specPath = 'DARE/EXECUTION/task-tampered.md';
+        const original = 'trusted deterministic artifact';
+        const tampered = `${original}!`;
+        await fs.ensureDir(path.join(projectRoot, 'keys'));
+        await fs.writeFile(path.join(projectRoot, 'keys', 'minisign.pub'), publicKey, 'utf8');
+        await fs.writeFile(path.join(projectRoot, specPath), original, 'utf8');
+        const signature = signArtifact(Buffer.from(original, 'utf8'), privateKey);
+        await fs.writeFile(path.join(projectRoot, `${specPath}.minisig`), `${signature}\n`, 'utf8');
+        await fs.writeFile(path.join(projectRoot, specPath), tampered, 'utf8');
+        await writeDag([{ id: 'task-tamper', specFile: specPath }]);
+        await writeGuardConfig({
+            enabled: true,
+            onExecute: true,
+            unicode: 'strip',
+            trustedPaths: ['DARE/EXECUTION/**'],
+            signing: { enabled: true, publicKey: 'keys/minisign.pub' },
+        });
+        const execute = await loadExecute();
+        const runSpy = vi.fn(async (input) => ({
+            status: 'implemented',
+            worktree: input.worktree,
+            summary: 'should-not-run',
+            usage: { inputTokens: 0, outputTokens: 0, costUsd: 0, model: 'guard-driver' },
+        }));
+        execute.setResolveDriverForTests(async () => ({
+            id: 'guard-driver',
+            requiresNetwork: false,
+            run: runSpy,
+        }));
+        await runExecute(execute, ['--agent', '--dry-run', '--require-approval', 'none', '--no-graph']);
+        const state = (await fs.readJson(path.join(projectRoot, '.dare', 'state.json')));
+        expect(exitCode).toBe(6);
+        expect(runSpy).not.toHaveBeenCalled();
+        expect(state.tasks['task-tamper']?.error).toContain('signature-invalid');
+    });
+    it('signed_poisoned_artifact_fails', async () => {
+        const { privateKey, publicKey } = keyPairPem();
+        const specPath = 'DARE/EXECUTION/task-poisoned.md';
+        const poisoned = 'safe-title\u200Boverride';
+        await fs.ensureDir(path.join(projectRoot, 'keys'));
+        await fs.writeFile(path.join(projectRoot, 'keys', 'minisign.pub'), publicKey, 'utf8');
+        await fs.writeFile(path.join(projectRoot, specPath), poisoned, 'utf8');
+        const signature = signArtifact(Buffer.from(poisoned, 'utf8'), privateKey);
+        await fs.writeFile(path.join(projectRoot, `${specPath}.minisig`), `${signature}\n`, 'utf8');
+        await writeDag([{ id: 'task-poisoned', specFile: specPath }]);
+        await writeGuardConfig({
+            enabled: true,
+            onExecute: true,
+            unicode: 'block',
+            trustedPaths: ['DARE/EXECUTION/**'],
+            signing: { enabled: true, publicKey: 'keys/minisign.pub' },
+        });
+        const execute = await loadExecute();
+        const runSpy = vi.fn(async (input) => ({
+            status: 'implemented',
+            worktree: input.worktree,
+            summary: 'should-not-run',
+            usage: { inputTokens: 0, outputTokens: 0, costUsd: 0, model: 'guard-driver' },
+        }));
+        execute.setResolveDriverForTests(async () => ({
+            id: 'guard-driver',
+            requiresNetwork: false,
+            run: runSpy,
+        }));
+        await runExecute(execute, ['--agent', '--dry-run', '--require-approval', 'none', '--no-graph']);
+        const state = (await fs.readJson(path.join(projectRoot, '.dare', 'state.json')));
+        expect(exitCode).toBe(6);
+        expect(runSpy).not.toHaveBeenCalled();
+        expect(state.tasks['task-poisoned']?.error).toContain('[unicode:');
+    });
+    it('no_llm_in_deterministic_path', () => {
+        // Reuso direto da invariante da task-604 (no-llm-in-core).
+        const offenders = findLlmSdkImportsOutsideDriver();
+        expect(offenders, `LLM SDK imported outside ${ALLOWED_REL}`).toEqual([]);
+        const planted = "import Anthropic from '@anthropic-ai/sdk';";
+        expect(FORBIDDEN.test(planted)).toBe(true);
+    });
+});
+//# sourceMappingURL=secure-executor-regression.test.js.map

package/dist/__tests__/secure-executor-regression.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-executor-regression.test.js","sourceRoot":"","sources":["../../src/__tests__/secure-executor-regression.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAYtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtE,MAAM,SAAS,GACb,oEAAoE,CAAC;AAEvE,SAAS,UAAU;IACjB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1E,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAI,GAAG,OAAO;IAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC1E,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QACjF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mCAAmC;IAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B;IACrC,OAAO,mCAAmC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,WAAmB,CAAC;IACxB,IAAI,QAA4B,CAAC;IACjC,IAAI,MAAc,CAAC;IACnB,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,CAAC,YAAY,EAAE,CAAC;QAClB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAClF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEtD,QAAQ,GAAG,SAAS,CAAC;QACrB,MAAM,GAAG,EAAE,CAAC;QACZ,MAAM,GAAG,EAAE,CAAC;QAEZ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpD,QAAQ,GAAG,IAAc,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE;YACjE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE;YACnE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvD,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1D,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAE1C,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,WAAW;QACxB,OAAO,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,OAAsB,EAAE,IAAc;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,GAAG,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,KAAoC;QAC1D,MAAM,KAAK,GAAa;YACtB,6CAA6C;YAC7C,kBAAkB;YAClB,SAAS;YACT,uBAAuB;YACvB,sBAAsB;YACtB,sBAAsB;YACtB,QAAQ;SACT,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,SAAS,CAAC,MAAM,KAAK,CAAC;gBACpB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChD,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,UAAmC;QACjE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IAED,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,QAAQ,CAAC;YACb,EAAE,EAAE,EAAE,aAAa,EAAE;YACrB,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QAEpC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAoB,EAAE,EAAE;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACzB,OAAO,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,OAAO;oBACL,MAAM,EAAE,SAAkB;oBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,OAAO,EAAE,mBAAmB;oBAC5B,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE;oBAC9E,gBAAgB,EAAE,cAAc;iBACjC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,aAAsB;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,gBAAgB;gBACzB,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;aAClF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,eAAe;YACnB,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,MAAM;SACZ,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,CAAC,OAAO,EAAE;YACxB,SAAS;YACT,WAAW;YACX,WAAW;YACX,GAAG;YACH,iBAAiB;YACjB,IAAI;YACJ,oBAAoB;YACpB,MAAM;YACN,YAAY;SACb,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAE9E,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CACrB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAE,KAAuB,CAAC,MAAM,KAAK,aAAa,CAC/D,CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC;QACnG,MAAM,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,gBAAgB,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,CAAC,mBAAmB,CAAC;YACnC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAoB,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,aAAsB;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;SAC9E,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,cAAc;YAClB,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,MAAM;SACZ,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAEhG,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAE9E,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,iCAAiC,CAAC;QACnD,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAClD,MAAM,QAAQ,GAAG,GAAG,QAAQ,GAAG,CAAC;QAEhC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,UAAU,CAAC,EAAE,GAAG,SAAS,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEvE,MAAM,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,gBAAgB,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,CAAC,mBAAmB,CAAC;YACnC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE;SAC3D,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAoB,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,aAAsB;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;SAC9E,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,cAAc;YAClB,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,MAAM;SACZ,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAEhG,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAE9E,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,iCAAiC,CAAC;QACnD,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAE5C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,UAAU,CAAC,EAAE,GAAG,SAAS,IAAI,EAAE,MAAM,CAAC,CAAC;QAE5F,MAAM,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,gBAAgB,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,CAAC,mBAAmB,CAAC;YACnC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE;SAC3D,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAoB,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,aAAsB;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;SAC9E,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,cAAc;YAClB,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,MAAM;SACZ,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAEhG,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAE9E,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,2DAA2D;QAC3D,MAAM,SAAS,GAAG,8BAA8B,EAAE,CAAC;QACnD,MAAM,CAAC,SAAS,EAAE,4BAA4B,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,4CAA4C,CAAC;QAC7D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent/__tests__/budget.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=budget.test.d.ts.map

package/dist/agent/__tests__/budget.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.test.d.ts","sourceRoot":"","sources":["../../../src/agent/__tests__/budget.test.ts"],"names":[],"mappings":""}

package/dist/agent/__tests__/budget.test.js

@@ -0,0 +1,36 @@
+import { describe, it, expect } from 'vitest';
+import { BudgetTracker } from '../budget.js';
+const usage = (input, output, cost = 0) => ({
+    inputTokens: input,
+    outputTokens: output,
+    costUsd: cost,
+    model: 'mock',
+});
+describe('BudgetTracker', () => {
+    it('should_sum_all_best_of_n_candidates', () => {
+        const budget = new BudgetTracker(1000);
+        budget.add(usage(100, 50, 0.01));
+        budget.add(usage(200, 100, 0.02));
+        budget.add(usage(50, 25, 0.005));
+        expect(budget.spent.tokens).toBe(525);
+        expect(budget.spent.usd).toBeCloseTo(0.035);
+    });
+    it('should_be_unlimited_when_null', () => {
+        const budget = new BudgetTracker(null);
+        budget.add(usage(999999, 999999));
+        expect(budget.remaining()).toBe(Number.POSITIVE_INFINITY);
+        expect(budget.exhausted()).toBe(false);
+    });
+    it('should_exhaust_at_limit', () => {
+        const budget = new BudgetTracker(100);
+        budget.add(usage(60, 40));
+        expect(budget.exhausted()).toBe(true);
+        expect(budget.remaining()).toBe(0);
+    });
+    it('should_not_go_negative', () => {
+        const budget = new BudgetTracker(50);
+        budget.add(usage(100, 100));
+        expect(budget.remaining()).toBe(0);
+    });
+});
+//# sourceMappingURL=budget.test.js.map

package/dist/agent/__tests__/budget.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.test.js","sourceRoot":"","sources":["../../../src/agent/__tests__/budget.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,IAAI,GAAG,CAAC,EAAc,EAAE,CAAC,CAAC;IACtE,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,MAAM;CACd,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAO,EAAE,MAAO,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent/__tests__/claude-driver.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=claude-driver.test.d.ts.map

package/dist/agent/__tests__/claude-driver.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-driver.test.d.ts","sourceRoot":"","sources":["../../../src/agent/__tests__/claude-driver.test.ts"],"names":[],"mappings":""}

package/dist/agent/__tests__/claude-driver.test.js

@@ -0,0 +1,88 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { AgentSdkMissingError, createClaudeDriver, setClaudeSdkImporterForTests, } from '../drivers/claude.js';
+function makeInput(signal) {
+    return {
+        taskId: 'task-605',
+        spec: '# spec',
+        steering: [],
+        worktree: '/tmp/worktree',
+        budgetRemaining: 1000,
+        signal,
+    };
+}
+describe('claude driver', () => {
+    const originalKey = process.env.ANTHROPIC_API_KEY;
+    beforeEach(() => {
+        vi.restoreAllMocks();
+        setClaudeSdkImporterForTests(null);
+        process.env.ANTHROPIC_API_KEY = 'sk-ant-test-key';
+    });
+    afterEach(() => {
+        setClaudeSdkImporterForTests(null);
+        if (originalKey === undefined) {
+            delete process.env.ANTHROPIC_API_KEY;
+        }
+        else {
+            process.env.ANTHROPIC_API_KEY = originalKey;
+        }
+    });
+    it('throws_AgentSdkMissingError_when_absent', async () => {
+        setClaudeSdkImporterForTests(async () => {
+            throw new Error('module missing');
+        });
+        await expect(createClaudeDriver({ model: 'claude-sonnet-4-5' })).rejects.toBeInstanceOf(AgentSdkMissingError);
+    });
+    it('does_not_log_api_key', async () => {
+        const key = 'sk-ant-secret-should-not-leak';
+        process.env.ANTHROPIC_API_KEY = key;
+        const createSpy = vi.fn(async () => ({
+            usage: { input_tokens: 5, output_tokens: 3 },
+            content: [{ type: 'text', text: 'ok' }],
+        }));
+        class MockAnthropic {
+            constructor() {
+                this.messages = { create: createSpy };
+            }
+        }
+        setClaudeSdkImporterForTests(async () => ({ default: MockAnthropic }));
+        const logSpy = vi.spyOn(console, 'log').mockImplementation(() => undefined);
+        const infoSpy = vi.spyOn(console, 'info').mockImplementation(() => undefined);
+        const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined);
+        const errorSpy = vi.spyOn(console, 'error').mockImplementation(() => undefined);
+        const driver = await createClaudeDriver({ model: 'claude-sonnet-4-5' });
+        await driver.run(makeInput(new AbortController().signal));
+        const output = [...logSpy.mock.calls, ...infoSpy.mock.calls, ...warnSpy.mock.calls, ...errorSpy.mock.calls]
+            .flat()
+            .map((value) => String(value))
+            .join('\n');
+        expect(output).not.toContain(key);
+    });
+    it('run_returns_usage', async () => {
+        const createSpy = vi.fn(async () => ({
+            usage: { input_tokens: 120, output_tokens: 60 },
+            content: [{ type: 'text', text: 'implemented patch' }],
+        }));
+        let receivedKey = '';
+        class MockAnthropic {
+            constructor(options) {
+                this.messages = { create: createSpy };
+                receivedKey = options.apiKey;
+            }
+        }
+        setClaudeSdkImporterForTests(async () => ({ default: MockAnthropic }));
+        const driver = await createClaudeDriver({ model: 'claude-sonnet-4-5', maxTokens: 512 });
+        const signal = new AbortController().signal;
+        const result = await driver.run(makeInput(signal));
+        expect(receivedKey).toBe('sk-ant-test-key');
+        expect(createSpy).toHaveBeenCalledWith(expect.objectContaining({
+            model: 'claude-sonnet-4-5',
+            max_tokens: 512,
+        }), expect.objectContaining({ signal }));
+        expect(result.status).toBe('implemented');
+        expect(result.usage.inputTokens).toBe(120);
+        expect(result.usage.outputTokens).toBe(60);
+        expect(result.usage.costUsd).toBeCloseTo(0.00126, 6);
+        expect(result.usage.model).toBe('claude-sonnet-4-5');
+    });
+});
+//# sourceMappingURL=claude-driver.test.js.map

package/dist/agent/__tests__/claude-driver.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-driver.test.js","sourceRoot":"","sources":["../../../src/agent/__tests__/claude-driver.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,SAAS,SAAS,CAAC,MAAmB;IACpC,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,eAAe;QACzB,eAAe,EAAE,IAAI;QACrB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAElD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,4BAA4B,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CACrF,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,GAAG,GAAG,+BAA+B,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC;QAEpC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE;YAC5C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACxC,CAAC,CAAC,CAAC;QAEJ,MAAM,aAAa;YAAnB;gBACW,aAAQ,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC5C,CAAC;SAAA;QAED,4BAA4B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;aACxG,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;SACvD,CAAC,CAAC,CAAC;QACJ,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,MAAM,aAAa;YAGjB,YAAY,OAAoC;gBAFvC,aAAQ,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBAGxC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YAC/B,CAAC;SACF;QAED,4BAA4B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAEnD,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,GAAG;SAChB,CAAC,EACF,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CACpC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent/__tests__/cost-telemetry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cost-telemetry.test.d.ts.map

package/dist/agent/__tests__/cost-telemetry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-telemetry.test.d.ts","sourceRoot":"","sources":["../../../src/agent/__tests__/cost-telemetry.test.ts"],"names":[],"mappings":""}

package/dist/agent/__tests__/cost-telemetry.test.js

@@ -0,0 +1,61 @@
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'fs-extra';
+import { beforeEach, afterEach, describe, expect, it } from 'vitest';
+import { JsonGraph } from '../../graphrag/json-graph.js';
+import { recordCostTelemetry } from '../telemetry.js';
+const sampleUsage = {
+    inputTokens: 120,
+    outputTokens: 45,
+    costUsd: 0.03125,
+    model: 'claude-sonnet',
+};
+describe('recordCostTelemetry', () => {
+    let filePath;
+    let graph;
+    beforeEach(async () => {
+        filePath = path.join(os.tmpdir(), `dare-cost-telemetry-${Date.now()}-${Math.random().toString(36).slice(2)}.json`);
+        graph = new JsonGraph(filePath);
+        await graph.init();
+    });
+    afterEach(async () => {
+        graph.close();
+        await fs.remove(filePath).catch(() => undefined);
+    });
+    it('writes_cost_metadata_on_task_node', () => {
+        graph.addNode({
+            id: 'task:task-607',
+            type: 'task',
+            label: 'task-607',
+            metadata: { status: 'DONE' },
+        });
+        recordCostTelemetry(graph, 'task-607', sampleUsage, 3);
+        const taskNode = graph.getNode('task:task-607');
+        expect(taskNode?.metadata?.status).toBe('DONE');
+        expect(taskNode?.metadata?.inputTokens).toBe(120);
+        expect(taskNode?.metadata?.outputTokens).toBe(45);
+        expect(taskNode?.metadata?.costUsd).toBe(0.03125);
+        expect(taskNode?.metadata?.model).toBe('claude-sonnet');
+        expect(taskNode?.metadata?.attempts).toBe(3);
+    });
+    it('is_queryable_via_graph', () => {
+        graph.addNode({
+            id: 'task:task-608',
+            type: 'task',
+            label: 'task-608',
+        });
+        recordCostTelemetry(graph, 'task-608', sampleUsage, 1);
+        const fetched = graph.getNode('task:task-608');
+        expect(fetched?.metadata?.costUsd).toBe(0.03125);
+        const matches = graph.searchNodes('task-608', 5);
+        expect(matches.some((entry) => entry.node.id === 'task:task-608')).toBe(true);
+        const queried = matches.find((entry) => entry.node.id === 'task:task-608');
+        expect(queried?.node.metadata?.inputTokens).toBe(120);
+    });
+    it('no_throw_on_missing_node', () => {
+        expect(() => {
+            recordCostTelemetry(graph, 'task-missing', sampleUsage, 2);
+        }).not.toThrow();
+    });
+});
+//# sourceMappingURL=cost-telemetry.test.js.map

package/dist/agent/__tests__/cost-telemetry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-telemetry.test.js","sourceRoot":"","sources":["../../../src/agent/__tests__/cost-telemetry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,WAAW,GAAe;IAC9B,WAAW,EAAE,GAAG;IAChB,YAAY,EAAE,EAAE;IAChB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,eAAe;CACvB,CAAC;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,QAAgB,CAAC;IACrB,IAAI,KAAgB,CAAC;IAErB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAClB,EAAE,CAAC,MAAM,EAAE,EACX,uBAAuB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAChF,CAAC;QACF,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,KAAK,CAAC,OAAO,CAAC;YACZ,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC7B,CAAC,CAAC;QAEH,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,KAAK,CAAC,OAAO,CAAC;YACZ,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QAEH,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC;QAC3E,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,EAAE;YACV,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent/__tests__/driver.types.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=driver.types.test.d.ts.map

package/dist/agent/__tests__/driver.types.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.types.test.d.ts","sourceRoot":"","sources":["../../../src/agent/__tests__/driver.types.test.ts"],"names":[],"mappings":""}