@gobing-ai/ts-ai-runner 0.5.4 → 0.5.7

package/dist/agent-spec.d.ts

@@ -23,6 +23,13 @@ export declare class ValueError extends Error {
 }
 /** Validate that `id` matches the agent ID format: 2-64 chars, lowercase alphanumeric with `_` or `-`. Returns the id on success, throws `ValueError` otherwise. */
 export declare function validateAgentId(id: string): string;
+/**
+ * Validate a caller-supplied session id before it is used in a filesystem path
+ * (task 0086 R15): 1-128 chars, starting alphanumeric, then alnum/`.`/`_`/`-`,
+ * and never containing `..`. Returns the id on success, throws `ValueError`
+ * otherwise — failing closed beats sanitizing attacker-controlled path input.
+ */
+export declare function assertSafeSessionId(id: string): string;
 /** Load and validate all YAML agent spec files from `configDir`. Throws `ValueError` on parse failures or duplicate IDs. */
 export declare function loadAgentSpecs(configDir: string, fs?: FileSystem): Promise<AgentSpec[]>;
 /** Serialize `spec` to YAML and write it to `configDir/<id>.yaml`. Creates the directory if missing. */

package/dist/agent-spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-spec.d.ts","sourceRoot":"","sources":["../src/agent-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,KAAK,UAAU,EAIlB,MAAM,uBAAuB,CAAC;AAE/B,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,4EAA4E;AAC5E,qBAAa,UAAW,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI9B;AAED,oKAAoK;AACpK,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED,4HAA4H;AAC5H,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,GAAE,UAAmC,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAcrH;AAED,wGAAwG;AACxG,wBAAsB,aAAa,CAC/B,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,EACjB,EAAE,GAAE,UAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,oGAAoG;AACpG,wBAAsB,eAAe,CACjC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,EAAE,GAAE,UAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAGf"}
+{"version":3,"file":"agent-spec.d.ts","sourceRoot":"","sources":["../src/agent-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,KAAK,UAAU,EAIlB,MAAM,uBAAuB,CAAC;AAE/B,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,4EAA4E;AAC5E,qBAAa,UAAW,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI9B;AAED,oKAAoK;AACpK,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,4HAA4H;AAC5H,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,GAAE,UAAmC,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAcrH;AAED,wGAAwG;AACxG,wBAAsB,aAAa,CAC/B,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,EACjB,EAAE,GAAE,UAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,oGAAoG;AACpG,wBAAsB,eAAe,CACjC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,EAAE,GAAE,UAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/agent-spec.js

@@ -13,6 +13,18 @@ export function validateAgentId(id) {
     }
     return id;
 }
+/**
+ * Validate a caller-supplied session id before it is used in a filesystem path
+ * (task 0086 R15): 1-128 chars, starting alphanumeric, then alnum/`.`/`_`/`-`,
+ * and never containing `..`. Returns the id on success, throws `ValueError`
+ * otherwise — failing closed beats sanitizing attacker-controlled path input.
+ */
+export function assertSafeSessionId(id) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id) || id.includes('..')) {
+        throw new ValueError(`Invalid session id "${id}": expected 1-128 chars (alphanumeric, ".", "_", "-", starting alphanumeric) without path separators or ".."`);
+    }
+    return id;
+}
 /** Load and validate all YAML agent spec files from `configDir`. Throws `ValueError` on parse failures or duplicate IDs. */
 export async function loadAgentSpecs(configDir, fs = createNodeFileSystem()) {
     const entries = (await safeReadDir(configDir, fs))

package/dist/agents/shims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shims.d.ts","sourceRoot":"","sources":["../../src/agents/shims.ts"],"names":[],"mappings":"AAGA,gEAAgE;AAChE,MAAM,MAAM,SAAS,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,IAAI,GACJ,UAAU,GACV,iBAAiB,GACjB,UAAU,GACV,QAAQ,GACR,KAAK,GACL,MAAM,GACN,UAAU,GACV,IAAI,CAAC;AAEX,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,mEAAmE;AACnE,MAAM,WAAW,WAAW;IACxB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC1B,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AASnD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC;CACnC;AAED,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACtB,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,wFAAwF;IACxF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,2GAA2G;IAC3G,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,oCAAoC;IACpC,cAAc,IAAI,WAAW,CAAC;IAC9B,yCAAyC;IACzC,iBAAiB,IAAI,WAAW,CAAC;IACjC,yCAAyC;IACzC,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,WAAW,CAAC;IACtD,8DAA8D;IAC9D,cAAc,IAAI,WAAW,GAAG,IAAI,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;CACrE;AAwVD,6DAA6D;AAC7D,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAa9D,CAAC;AAEF,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACnC,oFAAoF;IACpF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,2GAA2G;IAC3G,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,oEAAoE;IACpE,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,sGAAsG;IACtG,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CAC1B;AAyHD,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,SAAS,GAAG,sBAAsB,CAElF;AAED,mEAAmE;AACnE,eAAO,MAAM,cAAc,EAAE,SAAS,SAAS,EAU9C,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,aAAa,EAAE,SAAS,SAAS,EAa7C,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,SAAS,CAAyB,CAAC;AAU1E;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAQrE;AAED;mEACmE;AACnE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAMxD"}
+{"version":3,"file":"shims.d.ts","sourceRoot":"","sources":["../../src/agents/shims.ts"],"names":[],"mappings":"AAIA,gEAAgE;AAChE,MAAM,MAAM,SAAS,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,IAAI,GACJ,UAAU,GACV,iBAAiB,GACjB,UAAU,GACV,QAAQ,GACR,KAAK,GACL,MAAM,GACN,UAAU,GACV,IAAI,CAAC;AAEX,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,mEAAmE;AACnE,MAAM,WAAW,WAAW;IACxB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC1B,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AASnD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC;CACnC;AAED,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACtB,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,wFAAwF;IACxF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,2GAA2G;IAC3G,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,oCAAoC;IACpC,cAAc,IAAI,WAAW,CAAC;IAC9B,yCAAyC;IACzC,iBAAiB,IAAI,WAAW,CAAC;IACjC,yCAAyC;IACzC,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,WAAW,CAAC;IACtD,8DAA8D;IAC9D,cAAc,IAAI,WAAW,GAAG,IAAI,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;CACrE;AA0VD,6DAA6D;AAC7D,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAa9D,CAAC;AAEF,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACnC,oFAAoF;IACpF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,2GAA2G;IAC3G,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,oEAAoE;IACpE,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,sGAAsG;IACtG,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CAC1B;AAyHD,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,SAAS,GAAG,sBAAsB,CAElF;AAED,mEAAmE;AACnE,eAAO,MAAM,cAAc,EAAE,SAAS,SAAS,EAU9C,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,aAAa,EAAE,SAAS,SAAS,EAa7C,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,SAAS,CAAyB,CAAC;AAU1E;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAQrE;AAED;mEACmE;AACnE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAMxD"}

package/dist/agents/shims.js

@@ -1,5 +1,6 @@
 import { getLogger } from '@gobing-ai/ts-infra';
 import { joinPath } from '@gobing-ai/ts-runtime';
+import { assertSafeSessionId } from '../agent-spec.js';
 /** pi-family rpc dialect (pi docs/rpc.md): one JSON object per line. */
 const piRpcFrame = (input) => `${JSON.stringify({ type: 'prompt', message: input })}\n`;
 /** claude stream-json input dialect: one user-message JSONL envelope per line. */
@@ -353,15 +354,18 @@ const fmShim = {
         // and suppress any unscoped continue. `continue` alone degrades to a
         // fresh call — fm has no implicit last-session flag.
         if (options.sessionId !== undefined) {
-            const file = options.sessionDir !== undefined
-                ? joinPath(options.sessionDir, `${options.sessionId}.json`)
-                : `${options.sessionId}.json`;
+            // Task 0086 R15: sessionId lands in a filesystem path — validate it
+            // before it can escape sessionDir via separators or traversal.
+            const id = assertSafeSessionId(options.sessionId);
+            const file = options.sessionDir !== undefined ? joinPath(options.sessionDir, `${id}.json`) : `${id}.json`;
             args.push('--resume', file, '--save-transcript', file);
         }
         else if (options.sessionDir !== undefined) {
             args.push('--save-transcript', joinPath(options.sessionDir, 'fm-session.json'));
         }
-        args.push(options.input ?? '');
+        // Task 0086 R4: `--` pins the input as a positional, so dash-leading
+        // prompts (--help, -n) are never reparsed as fm flags.
+        args.push('--', options.input ?? '');
         return { command: 'fm', args };
     },
     getAuthCommand: () => ({ command: 'fm', args: ['available', '--model', 'system'] }),

package/dist/decision/decision-maker.d.ts

@@ -40,6 +40,14 @@ export interface DecisionMakerOptions {
     fetch?: typeof fetch;
     [key: string]: unknown;
 }
+/**
+ * @internal Exported for task 0086 R9 branch tests: `importModule` lets tests
+ * simulate package-import failures that cannot occur in-workspace (workspace
+ * links always resolve).
+ */
+export declare function resolveLayaDriver(options: DecisionMakerOptions, importModule?: (specifier: string) => Promise<unknown>): Promise<DecisionDriver>;
+/** @internal Exported for task 0086 R9 branch tests; see {@link resolveLayaDriver}. */
+export declare function resolveFmDriver(options: DecisionMakerOptions, importModule?: (specifier: string) => Promise<unknown>): Promise<DecisionDriver>;
 /**
  * Build a DecisionMaker. `options.driver` wins when supplied; otherwise `options.backend`
  * resolves the driver (default `'typesafe'`). The driver is constructed lazily on first use.

package/dist/decision/decision-maker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decision-maker.d.ts","sourceRoot":"","sources":["../../src/decision/decision-maker.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACR,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,IAAI,EACJ,UAAU,EACV,QAAQ,EACR,WAAW,EACd,MAAM,SAAS,CAAC;AAKjB,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE;QAC/C,KAAK,EAAE,aAAa,CAAC;QACrB,SAAS,EAAE,CAAC,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,yEAAyE;IACzE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,EACzB,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GACxB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,gFAAgF;IAChF,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1G,wEAAwE;IACxE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxG;AAED,gEAAgE;AAChE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,UAAU,CAAC;AAErE,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACjC,oHAAoH;IACpH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,qFAAqF;IACrF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AA0DD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAwDrF"}
+{"version":3,"file":"decision-maker.d.ts","sourceRoot":"","sources":["../../src/decision/decision-maker.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACR,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,IAAI,EACJ,UAAU,EACV,QAAQ,EACR,WAAW,EACd,MAAM,SAAS,CAAC;AAKjB,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE;QAC/C,KAAK,EAAE,aAAa,CAAC;QACrB,SAAS,EAAE,CAAC,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,yEAAyE;IACzE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,EACzB,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GACxB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,gFAAgF;IAChF,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1G,wEAAwE;IACxE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxG;AAED,gEAAgE;AAChE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,UAAU,CAAC;AAErE,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACjC,oHAAoH;IACpH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,qFAAqF;IACrF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAoBD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,YAAY,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAoC,GACzF,OAAO,CAAC,cAAc,CAAC,CAuBzB;AAID,uFAAuF;AACvF,wBAAsB,eAAe,CACjC,OAAO,EAAE,oBAAoB,EAC7B,YAAY,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAoC,GACzF,OAAO,CAAC,cAAc,CAAC,CAkBzB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAwDrF"}

package/dist/decision/decision-maker.js

@@ -22,30 +22,42 @@ function resolveApiKey(options) {
     return apiKey;
 }
 const LAYA_DRIVER_PACKAGE = '@gobing-ai/ts-laya-mlx';
-async function resolveLayaDriver(options) {
+/**
+ * @internal Exported for task 0086 R9 branch tests: `importModule` lets tests
+ * simulate package-import failures that cannot occur in-workspace (workspace
+ * links always resolve).
+ */
+export async function resolveLayaDriver(options, importModule = (specifier) => import(specifier)) {
+    // Task 0086 R9: only the IMPORT is translated to the install-hint error;
+    // construction errors from the factory itself propagate unchanged so the
+    // caller sees the real cause instead of a misleading install message.
+    let mod;
     try {
-        const mod = (await import(LAYA_DRIVER_PACKAGE));
-        if (typeof mod.createLayaDriver !== 'function') {
-            throw new Error(`Module '${LAYA_DRIVER_PACKAGE}' does not export createLayaDriver`);
-        }
-        return mod.createLayaDriver(options);
+        mod = (await importModule(LAYA_DRIVER_PACKAGE));
     }
     catch (cause) {
         throw new DecisionConfigError(`The 'laya-local' backend requires '${LAYA_DRIVER_PACKAGE}' to be installed; install it with 'bun add ${LAYA_DRIVER_PACKAGE}'`, 'LAYA_BACKEND', { cause });
     }
+    if (typeof mod.createLayaDriver !== 'function') {
+        throw new DecisionConfigError(`Module '${LAYA_DRIVER_PACKAGE}' does not export createLayaDriver`, 'LAYA_BACKEND');
+    }
+    return mod.createLayaDriver(options);
 }
 const FM_DRIVER_PACKAGE = '@gobing-ai/ts-decision-fm';
-async function resolveFmDriver(options) {
+/** @internal Exported for task 0086 R9 branch tests; see {@link resolveLayaDriver}. */
+export async function resolveFmDriver(options, importModule = (specifier) => import(specifier)) {
+    // Task 0086 R9: same import/construction split as laya above.
+    let mod;
     try {
-        const mod = (await import(FM_DRIVER_PACKAGE));
-        if (typeof mod.createFmDriver !== 'function') {
-            throw new Error(`Module '${FM_DRIVER_PACKAGE}' does not export createFmDriver`);
-        }
-        return mod.createFmDriver(options);
+        mod = (await importModule(FM_DRIVER_PACKAGE));
     }
     catch (cause) {
         throw new DecisionConfigError(`The 'fm-local' backend requires '${FM_DRIVER_PACKAGE}' to be installed; install it with 'bun add ${FM_DRIVER_PACKAGE}'`, 'FM_BACKEND', { cause });
     }
+    if (typeof mod.createFmDriver !== 'function') {
+        throw new DecisionConfigError(`Module '${FM_DRIVER_PACKAGE}' does not export createFmDriver`, 'FM_BACKEND');
+    }
+    return mod.createFmDriver(options);
 }
 /**
  * Build a DecisionMaker. `options.driver` wins when supplied; otherwise `options.backend`

package/dist/identity.d.ts

@@ -32,7 +32,8 @@ export declare function getGitContext(workspacePath: string, executor?: ProcessE
  * Query git for the current branch name and dirty file count synchronously.
  *
  * @deprecated Use the async {@link getGitContext} instead. Kept for one release for sync callers.
- * Defaults to the deprecated {@link BunSyncProcessExecutor}; new code must not rely on it.
+ * Defaults to {@link NodeSyncProcessExecutor} (task 0087 R7 migrated the default off the
+ * deprecated BunSyncProcessExecutor).
  */
 export declare function getGitContextSync(workspacePath: string, executor?: SyncProcessExecutor): string | null;
 //# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,8HAA8H;AAC9H,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CA8ClE;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAC/B,aAAa,EAAE,MAAM,EACrB,QAAQ,GAAE,eAAwD,GACnE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC7B,aAAa,EAAE,MAAM,EACrB,QAAQ,GAAE,mBAAkD,GAC7D,MAAM,GAAG,IAAI,CASf"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,8HAA8H;AAC9H,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CA8ClE;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAC/B,aAAa,EAAE,MAAM,EACrB,QAAQ,GAAE,eAAwD,GACnE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC7B,aAAa,EAAE,MAAM,EACrB,QAAQ,GAAE,mBAAmD,GAC9D,MAAM,GAAG,IAAI,CASf"}

package/dist/identity.js

@@ -1,4 +1,4 @@
-import { BunSyncProcessExecutor, nodeBunFactory, } from '@gobing-ai/ts-runtime';
+import { NodeSyncProcessExecutor, nodeBunFactory, } from '@gobing-ai/ts-runtime';
 /** Build a human-readable identity preamble string that describes the agent, its task, peers, guardrails, and git context. */
 export function buildIdentityPreamble(ctx) {
     const sections = [
@@ -52,9 +52,10 @@ export async function getGitContext(workspacePath, executor = nodeBunFactory.cre
  * Query git for the current branch name and dirty file count synchronously.
  *
  * @deprecated Use the async {@link getGitContext} instead. Kept for one release for sync callers.
- * Defaults to the deprecated {@link BunSyncProcessExecutor}; new code must not rely on it.
+ * Defaults to {@link NodeSyncProcessExecutor} (task 0087 R7 migrated the default off the
+ * deprecated BunSyncProcessExecutor).
  */
-export function getGitContextSync(workspacePath, executor = new BunSyncProcessExecutor()) {
+export function getGitContextSync(workspacePath, executor = new NodeSyncProcessExecutor()) {
     const branch = runGitSync(executor, ['-C', workspacePath, 'branch', '--show-current']);
     if (branch === null || branch === '')
         return null;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/ts-ai-runner",
-    "version": "0.5.4",
+    "version": "0.5.7",
     "description": "@gobing-ai/ts-ai-runner — Coding-agent shims, detection, doctor checks, and prompt execution.",
     "keywords": [
         "typescript",
@@ -47,13 +47,13 @@
         "release": "echo 'Manual publish is disabled. Releases go through GitHub Actions via Trusted Publishing — push a tag: git tag @gobing-ai/ts-ai-runner-v<version> && git push --tags' && exit 1"
     },
     "dependencies": {
-        "@gobing-ai/ts-infra": "^0.5.4",
-        "@gobing-ai/ts-runtime": "^0.5.4",
+        "@gobing-ai/ts-infra": "^0.5.7",
+        "@gobing-ai/ts-runtime": "^0.5.7",
         "@typesafe-ai/sdk": "0.6.0"
     },
     "devDependencies": {
         "@types/bun": "1.3.14",
-        "@gobing-ai/ts-db": "^0.5.4"
+        "@gobing-ai/ts-db": "^0.5.7"
     },
     "publishConfig": {
         "access": "public"

package/src/agent-spec.ts

@@ -42,6 +42,21 @@ export function validateAgentId(id: string): string {
     return id;
 }
 
+/**
+ * Validate a caller-supplied session id before it is used in a filesystem path
+ * (task 0086 R15): 1-128 chars, starting alphanumeric, then alnum/`.`/`_`/`-`,
+ * and never containing `..`. Returns the id on success, throws `ValueError`
+ * otherwise — failing closed beats sanitizing attacker-controlled path input.
+ */
+export function assertSafeSessionId(id: string): string {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id) || id.includes('..')) {
+        throw new ValueError(
+            `Invalid session id "${id}": expected 1-128 chars (alphanumeric, ".", "_", "-", starting alphanumeric) without path separators or ".."`,
+        );
+    }
+    return id;
+}
+
 /** Load and validate all YAML agent spec files from `configDir`. Throws `ValueError` on parse failures or duplicate IDs. */
 export async function loadAgentSpecs(configDir: string, fs: FileSystem = createNodeFileSystem()): Promise<AgentSpec[]> {
     const entries = (await safeReadDir(configDir, fs))

package/src/agents/shims.ts

@@ -1,5 +1,6 @@
 import { getLogger } from '@gobing-ai/ts-infra';
 import { joinPath } from '@gobing-ai/ts-runtime';
+import { assertSafeSessionId } from '../agent-spec';
 
 /** Identifier for one supported coding agent (canonical id). */
 export type AgentName =
@@ -459,15 +460,17 @@ const fmShim: AgentShim = {
         // and suppress any unscoped continue. `continue` alone degrades to a
         // fresh call — fm has no implicit last-session flag.
         if (options.sessionId !== undefined) {
-            const file =
-                options.sessionDir !== undefined
-                    ? joinPath(options.sessionDir, `${options.sessionId}.json`)
-                    : `${options.sessionId}.json`;
+            // Task 0086 R15: sessionId lands in a filesystem path — validate it
+            // before it can escape sessionDir via separators or traversal.
+            const id = assertSafeSessionId(options.sessionId);
+            const file = options.sessionDir !== undefined ? joinPath(options.sessionDir, `${id}.json`) : `${id}.json`;
             args.push('--resume', file, '--save-transcript', file);
         } else if (options.sessionDir !== undefined) {
             args.push('--save-transcript', joinPath(options.sessionDir, 'fm-session.json'));
         }
-        args.push(options.input ?? '');
+        // Task 0086 R4: `--` pins the input as a positional, so dash-leading
+        // prompts (--help, -n) are never reparsed as fm flags.
+        args.push('--', options.input ?? '');
         return { command: 'fm', args };
     },
     getAuthCommand: () => ({ command: 'fm', args: ['available', '--model', 'system'] }),

package/src/decision/decision-maker.ts

@@ -83,15 +83,23 @@ function resolveApiKey(options: DecisionMakerOptions): string {
 
 const LAYA_DRIVER_PACKAGE = '@gobing-ai/ts-laya-mlx';
 
-async function resolveLayaDriver(options: DecisionMakerOptions): Promise<DecisionDriver> {
+/**
+ * @internal Exported for task 0086 R9 branch tests: `importModule` lets tests
+ * simulate package-import failures that cannot occur in-workspace (workspace
+ * links always resolve).
+ */
+export async function resolveLayaDriver(
+    options: DecisionMakerOptions,
+    importModule: (specifier: string) => Promise<unknown> = (specifier) => import(specifier),
+): Promise<DecisionDriver> {
+    // Task 0086 R9: only the IMPORT is translated to the install-hint error;
+    // construction errors from the factory itself propagate unchanged so the
+    // caller sees the real cause instead of a misleading install message.
+    let mod: { createLayaDriver?: (opts?: unknown) => DecisionDriver };
     try {
-        const mod = (await import(LAYA_DRIVER_PACKAGE)) as {
+        mod = (await importModule(LAYA_DRIVER_PACKAGE)) as {
             createLayaDriver?: (opts?: unknown) => DecisionDriver;
         };
-        if (typeof mod.createLayaDriver !== 'function') {
-            throw new Error(`Module '${LAYA_DRIVER_PACKAGE}' does not export createLayaDriver`);
-        }
-        return mod.createLayaDriver(options);
     } catch (cause) {
         throw new DecisionConfigError(
             `The 'laya-local' backend requires '${LAYA_DRIVER_PACKAGE}' to be installed; install it with 'bun add ${LAYA_DRIVER_PACKAGE}'`,
@@ -99,19 +107,28 @@ async function resolveLayaDriver(options: DecisionMakerOptions): Promise<Decisio
             { cause },
         );
     }
+    if (typeof mod.createLayaDriver !== 'function') {
+        throw new DecisionConfigError(
+            `Module '${LAYA_DRIVER_PACKAGE}' does not export createLayaDriver`,
+            'LAYA_BACKEND',
+        );
+    }
+    return mod.createLayaDriver(options);
 }
 
 const FM_DRIVER_PACKAGE = '@gobing-ai/ts-decision-fm';
 
-async function resolveFmDriver(options: DecisionMakerOptions): Promise<DecisionDriver> {
+/** @internal Exported for task 0086 R9 branch tests; see {@link resolveLayaDriver}. */
+export async function resolveFmDriver(
+    options: DecisionMakerOptions,
+    importModule: (specifier: string) => Promise<unknown> = (specifier) => import(specifier),
+): Promise<DecisionDriver> {
+    // Task 0086 R9: same import/construction split as laya above.
+    let mod: { createFmDriver?: (opts?: unknown) => DecisionDriver };
     try {
-        const mod = (await import(FM_DRIVER_PACKAGE)) as {
+        mod = (await importModule(FM_DRIVER_PACKAGE)) as {
             createFmDriver?: (opts?: unknown) => DecisionDriver;
         };
-        if (typeof mod.createFmDriver !== 'function') {
-            throw new Error(`Module '${FM_DRIVER_PACKAGE}' does not export createFmDriver`);
-        }
-        return mod.createFmDriver(options);
     } catch (cause) {
         throw new DecisionConfigError(
             `The 'fm-local' backend requires '${FM_DRIVER_PACKAGE}' to be installed; install it with 'bun add ${FM_DRIVER_PACKAGE}'`,
@@ -119,6 +136,10 @@ async function resolveFmDriver(options: DecisionMakerOptions): Promise<DecisionD
             { cause },
         );
     }
+    if (typeof mod.createFmDriver !== 'function') {
+        throw new DecisionConfigError(`Module '${FM_DRIVER_PACKAGE}' does not export createFmDriver`, 'FM_BACKEND');
+    }
+    return mod.createFmDriver(options);
 }
 
 /**

package/src/identity.ts

@@ -1,5 +1,5 @@
 import {
-    BunSyncProcessExecutor,
+    NodeSyncProcessExecutor,
     nodeBunFactory,
     type ProcessExecutor,
     type SyncProcessExecutor,
@@ -95,11 +95,12 @@ export async function getGitContext(
  * Query git for the current branch name and dirty file count synchronously.
  *
  * @deprecated Use the async {@link getGitContext} instead. Kept for one release for sync callers.
- * Defaults to the deprecated {@link BunSyncProcessExecutor}; new code must not rely on it.
+ * Defaults to {@link NodeSyncProcessExecutor} (task 0087 R7 migrated the default off the
+ * deprecated BunSyncProcessExecutor).
  */
 export function getGitContextSync(
     workspacePath: string,
-    executor: SyncProcessExecutor = new BunSyncProcessExecutor(),
+    executor: SyncProcessExecutor = new NodeSyncProcessExecutor(),
 ): string | null {
     const branch = runGitSync(executor, ['-C', workspacePath, 'branch', '--show-current']);
     if (branch === null || branch === '') return null;