@jinn-network/client 0.1.2 → 0.1.3-canary.2d6b2676

package/dist/plugins/manifest.d.ts

@@ -0,0 +1,7 @@
+import type { SolverPluginManifest } from './types.js';
+export declare const MANIFEST_LOOKUP_ORDER: readonly [".claude-plugin/plugin.json", "gemini-extension.json", "jinn.plugin.json"];
+export declare function findSolverPluginManifest(root: string): string;
+export declare function loadSolverPluginManifest(root: string): {
+    path: string;
+    manifest: SolverPluginManifest;
+};

package/dist/plugins/manifest.js

@@ -0,0 +1,22 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { validateSolverPluginManifest } from './validator.js';
+export const MANIFEST_LOOKUP_ORDER = [
+    '.claude-plugin/plugin.json',
+    'gemini-extension.json',
+    'jinn.plugin.json',
+];
+export function findSolverPluginManifest(root) {
+    for (const rel of MANIFEST_LOOKUP_ORDER) {
+        const path = join(root, rel);
+        if (existsSync(path))
+            return path;
+    }
+    throw new Error(`No SolverPlugin manifest found in ${root}`);
+}
+export function loadSolverPluginManifest(root) {
+    const path = findSolverPluginManifest(root);
+    const raw = JSON.parse(readFileSync(path, 'utf-8'));
+    return { path, manifest: validateSolverPluginManifest(raw) };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/plugins/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/plugins/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAG9D,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,4BAA4B;IAC5B,uBAAuB;IACvB,kBAAkB;CACV,CAAC;AAEX,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IAInD,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC;IAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/D,CAAC"}

package/dist/plugins/registry.d.ts

@@ -0,0 +1,9 @@
+import type { LoadedSolverPlugin, SolverPluginEntry, ResolveSolverPluginOptions } from './types.js';
+export declare class SolverPluginRegistry {
+    private readonly plugins;
+    register(plugin: LoadedSolverPlugin): void;
+    get(name: string): LoadedSolverPlugin | undefined;
+    forSolverType(solverType: string): LoadedSolverPlugin[];
+    list(): LoadedSolverPlugin[];
+}
+export declare function loadSolverPlugins(entries: readonly SolverPluginEntry[], opts?: ResolveSolverPluginOptions): Promise<SolverPluginRegistry>;

package/dist/plugins/registry.js

@@ -0,0 +1,24 @@
+import { resolveSolverPlugin } from './resolvers.js';
+export class SolverPluginRegistry {
+    plugins = new Map();
+    register(plugin) {
+        this.plugins.set(plugin.name, plugin);
+    }
+    get(name) {
+        return this.plugins.get(name);
+    }
+    forSolverType(solverType) {
+        return [...this.plugins.values()].filter((plugin) => plugin.solverType === solverType);
+    }
+    list() {
+        return [...this.plugins.values()].sort((a, b) => a.name.localeCompare(b.name));
+    }
+}
+export async function loadSolverPlugins(entries, opts = {}) {
+    const registry = new SolverPluginRegistry();
+    for (const entry of entries) {
+        registry.register(await resolveSolverPlugin(entry, opts));
+    }
+    return registry;
+}
+//# sourceMappingURL=registry.js.map

package/dist/plugins/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/plugins/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,OAAO,oBAAoB;IACd,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEjE,QAAQ,CAAC,MAA0B;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,aAAa,CAAC,UAAkB;QAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IACzF,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAqC,EACrC,OAAmC,EAAE;IAErC,MAAM,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/plugins/resolvers.d.ts

@@ -0,0 +1,2 @@
+import type { LoadedSolverPlugin, ResolveSolverPluginOptions, SolverPluginEntry } from './types.js';
+export declare function resolveSolverPlugin(entry: SolverPluginEntry, opts?: ResolveSolverPluginOptions): Promise<LoadedSolverPlugin>;

package/dist/plugins/resolvers.js

@@ -0,0 +1,87 @@
+import { cpSync, existsSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { digestDirectory } from './digest.js';
+import { loadSolverPluginManifest } from './manifest.js';
+const DEFAULT_VENDOR_ROOT = join(homedir(), '.jinn-client', 'solver-plugins');
+function entrySource(entry) {
+    return typeof entry === 'string' ? entry : entry.source;
+}
+function entryName(entry, fallback) {
+    return typeof entry === 'string' ? fallback : entry.name ?? fallback;
+}
+function sourceKind(source) {
+    if (source.startsWith('bundled:'))
+        return 'bundled';
+    if (source.startsWith('file:') || source.startsWith('path:'))
+        return 'local';
+    if (source.startsWith('npm:'))
+        return 'npm';
+    if (source.startsWith('git:'))
+        return 'git';
+    if (source.startsWith('github:'))
+        return 'github';
+    if (source.startsWith('claude:'))
+        return 'claude';
+    return 'local';
+}
+function safeVendorName(source) {
+    return source.replace(/[^a-zA-Z0-9._-]+/g, '_').replace(/^_+|_+$/g, '');
+}
+function bundledRoot(defaultRoot) {
+    if (defaultRoot)
+        return defaultRoot;
+    const here = dirname(fileURLToPath(import.meta.url));
+    const srcRoot = resolve(here, '../../plugins');
+    const distRoot = resolve(here, '../plugins');
+    return existsSync(srcRoot) ? srcRoot : distRoot;
+}
+function localPathFromSource(source) {
+    const raw = source.startsWith('file:') || source.startsWith('path:')
+        ? source.slice(source.indexOf(':') + 1)
+        : source;
+    return isAbsolute(raw) ? raw : resolve(process.cwd(), raw);
+}
+function materializeLocal(root, vendorRoot, name) {
+    const target = join(vendorRoot, name);
+    mkdirSync(vendorRoot, { recursive: true, mode: 0o700 });
+    if (!existsSync(target)) {
+        cpSync(root, target, { recursive: true, dereference: true });
+    }
+    return target;
+}
+export async function resolveSolverPlugin(entry, opts = {}) {
+    const source = entrySource(entry);
+    const kind = sourceKind(source);
+    const vendorRoot = opts.vendorRoot ?? DEFAULT_VENDOR_ROOT;
+    let root;
+    if (kind === 'bundled') {
+        const bundledName = source.slice('bundled:'.length);
+        root = materializeLocal(join(bundledRoot(opts.bundledRoot), bundledName), vendorRoot, bundledName);
+    }
+    else if (kind === 'local') {
+        const localRoot = localPathFromSource(source);
+        root = materializeLocal(localRoot, vendorRoot, entryName(entry, basename(localRoot)));
+    }
+    else {
+        root = join(vendorRoot, safeVendorName(source));
+        if (!existsSync(root)) {
+            throw new Error(`SolverPlugin source ${source} is not vendored at ${root}`);
+        }
+    }
+    const { path: manifestPath, manifest } = loadSolverPluginManifest(root);
+    const sha256 = digestDirectory(root);
+    return {
+        name: entryName(entry, manifest.name),
+        version: manifest.version,
+        solverType: manifest.jinn.solverType,
+        source,
+        sourceKind: kind,
+        root,
+        manifestPath,
+        manifest,
+        sha256,
+    };
+}
+//# sourceMappingURL=resolvers.js.map

package/dist/plugins/resolvers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvers.js","sourceRoot":"","sources":["../../src/plugins/resolvers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAQzD,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;AAE9E,SAAS,WAAW,CAAC,KAAwB;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,KAAwB,EAAE,QAAgB;IAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7E,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAAC,WAAoB;IACvC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAClE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,UAAkB,EAAE,IAAY;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAwB,EACxB,OAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAE1D,IAAI,IAAY,CAAC;IACjB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACrG,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,GAAG,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;QACpC,MAAM;QACN,UAAU,EAAE,IAAI;QAChB,IAAI;QACJ,YAAY;QACZ,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/plugins/types.d.ts

@@ -0,0 +1,39 @@
+import type { JSONSchemaType } from 'ajv';
+export type SolverPluginSourceKind = 'bundled' | 'local' | 'npm' | 'git' | 'github' | 'claude';
+export type SolverPluginEntry = string | {
+    name?: string;
+    source: string;
+    version?: string;
+};
+export interface SolverPluginManifest {
+    name: string;
+    version: string;
+    description?: string;
+    jinn: {
+        solverType: string;
+        schemas: {
+            task: JSONSchemaType<unknown> | Record<string, unknown>;
+            solution: JSONSchemaType<unknown> | Record<string, unknown>;
+            verdict: JSONSchemaType<unknown> | Record<string, unknown>;
+        };
+        mcpServers?: Record<string, unknown>;
+        skills?: string[];
+    };
+    [key: string]: unknown;
+}
+export interface LoadedSolverPlugin {
+    name: string;
+    version: string;
+    solverType: string;
+    source: string;
+    sourceKind: SolverPluginSourceKind;
+    root: string;
+    manifestPath: string;
+    manifest: SolverPluginManifest;
+    sha256: string;
+    cid?: string;
+}
+export interface ResolveSolverPluginOptions {
+    bundledRoot?: string;
+    vendorRoot?: string;
+}

package/dist/plugins/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/plugins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":""}

package/dist/plugins/validator.d.ts

@@ -0,0 +1,3 @@
+import type { SolverPluginManifest } from './types.js';
+export declare function validateSolverPluginManifest(input: unknown): SolverPluginManifest;
+export declare function validateWithSchema(schema: Record<string, unknown>, value: unknown): void;

package/dist/plugins/validator.js

@@ -0,0 +1,44 @@
+import * as AjvModule from 'ajv/dist/2020.js';
+import * as addFormatsModule from 'ajv-formats';
+const AjvCtor = (AjvModule.default ?? AjvModule);
+const addFormats = (addFormatsModule.default ?? addFormatsModule);
+const ajv = new AjvCtor({ allErrors: true, strict: false });
+addFormats(ajv);
+function assertRecord(value, label) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+}
+export function validateSolverPluginManifest(input) {
+    assertRecord(input, 'manifest');
+    for (const key of Object.keys(input)) {
+        if (key.startsWith('jinn.')) {
+            throw new Error(`unknown top-level jinn extension key: ${key}; use manifest.jinn`);
+        }
+    }
+    if (typeof input['name'] !== 'string' || input['name'].length === 0) {
+        throw new Error('manifest.name is required');
+    }
+    if (typeof input['version'] !== 'string' || input['version'].length === 0) {
+        throw new Error('manifest.version is required');
+    }
+    const jinn = input['jinn'];
+    assertRecord(jinn, 'manifest.jinn');
+    if (typeof jinn['solverType'] !== 'string' || jinn['solverType'].length === 0) {
+        throw new Error('manifest.jinn.solverType is required');
+    }
+    const schemas = jinn['schemas'];
+    assertRecord(schemas, 'manifest.jinn.schemas');
+    for (const name of ['task', 'solution', 'verdict']) {
+        assertRecord(schemas[name], `manifest.jinn.schemas.${name}`);
+        ajv.compile(schemas[name]);
+    }
+    return input;
+}
+export function validateWithSchema(schema, value) {
+    const validate = ajv.compile(schema);
+    if (!validate(value)) {
+        throw new Error(ajv.errorsText(validate.errors, { separator: '; ' }));
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/plugins/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/plugins/validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,gBAAgB,MAAM,aAAa,CAAC;AAGhD,MAAM,OAAO,GAAG,CAAE,SAA8C,CAAC,OAAO,IAAI,SAAS,CAE/D,CAAC;AACvB,MAAM,UAAU,GAAG,CAAE,gBAAqD,CAAC,OAAO,IAAI,gBAAgB,CAE7F,CAAC;AACV,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,UAAU,CAAC,GAAG,CAAC,CAAC;AAEhB,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,qBAAqB,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,YAAY,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAU,EAAE,CAAC;QAC5D,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAwC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA+B,EAAE,KAAc;IAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}

package/dist/preflight/claude-auth.d.ts

@@ -3,17 +3,20 @@
  *
  * Three contexts are recognised:
  *   - 'container'      — running inside a Docker container (/.dockerenv exists)
- *   - 'docker-compose' — a docker-compose.yml with a jinn-daemon service lives in cwd
+ *   - 'docker-compose' — explicitly opted-in via env / config
  *   - 'bare'           — plain host environment (default)
  *
  * Priority:
- *   1. JINN_RUNTIME_MODE env var (authoritative; CI/scripted operators)
- *   2. `runtimeMode` field in the resolved config (persisted by `jinn auth`)
- *   3. Filesystem heuristic (container → docker-compose → bare) as a last resort
+ *   1. JINN_RUNTIME_MODE env var (authoritative; CI / scripted operators)
+ *   2. `runtimeMode` field in the resolved config (persisted by jinn-auth split)
+ *   3. /.dockerenv presence -> 'container' (the only filesystem-guessable mode)
+ *   4. Default 'bare'
  *
- * The filesystem path is a LAST RESORT because running from the `client/`
- * checkout dir misdetects as docker-compose (the package's own compose file
- * names `jinn-daemon`). Operators should set `runtimeMode` at `jinn auth`.
+ * We deliberately do NOT guess `docker-compose` from a docker-compose.yml in
+ * cwd. That heuristic misfired for anyone running from the client/ checkout
+ * (the package ships its own compose file naming jinn-daemon) and nothing in
+ * the runtime can verify the host is actually orchestrating us via compose.
+ * Operators in real docker-compose set the env var or persist the mode.
  */
 export type AuthContext = 'container' | 'docker-compose' | 'bare';
 export interface DetectContextOptions {
@@ -24,8 +27,6 @@ export interface DetectContextOptions {
     env?: NodeJS.ProcessEnv;
     /** Override the /.dockerenv existence check (for testing). */
     dockerenvExists?: boolean;
-    /** Override the docker-compose.yml jinn-daemon check (for testing). */
-    composeServiceExists?: boolean;
 }
 export interface SpawnResult {
     status: number | null;
@@ -50,8 +51,7 @@ export interface LoginResult {
 }
 /**
  * Determine which environment Claude is running in.
- * When `dockerenvExists` / `composeServiceExists` are omitted the function
- * inspects the filesystem directly.
+ * When `dockerenvExists` is omitted the function inspects the filesystem directly.
  */
 export declare function detectAuthContext(opts: DetectContextOptions): AuthContext;
 /**

package/dist/preflight/claude-auth.js

@@ -3,19 +3,22 @@
  *
  * Three contexts are recognised:
  *   - 'container'      — running inside a Docker container (/.dockerenv exists)
- *   - 'docker-compose' — a docker-compose.yml with a jinn-daemon service lives in cwd
+ *   - 'docker-compose' — explicitly opted-in via env / config
  *   - 'bare'           — plain host environment (default)
  *
  * Priority:
- *   1. JINN_RUNTIME_MODE env var (authoritative; CI/scripted operators)
- *   2. `runtimeMode` field in the resolved config (persisted by `jinn auth`)
- *   3. Filesystem heuristic (container → docker-compose → bare) as a last resort
+ *   1. JINN_RUNTIME_MODE env var (authoritative; CI / scripted operators)
+ *   2. `runtimeMode` field in the resolved config (persisted by jinn-auth split)
+ *   3. /.dockerenv presence -> 'container' (the only filesystem-guessable mode)
+ *   4. Default 'bare'
  *
- * The filesystem path is a LAST RESORT because running from the `client/`
- * checkout dir misdetects as docker-compose (the package's own compose file
- * names `jinn-daemon`). Operators should set `runtimeMode` at `jinn auth`.
+ * We deliberately do NOT guess `docker-compose` from a docker-compose.yml in
+ * cwd. That heuristic misfired for anyone running from the client/ checkout
+ * (the package ships its own compose file naming jinn-daemon) and nothing in
+ * the runtime can verify the host is actually orchestrating us via compose.
+ * Operators in real docker-compose set the env var or persist the mode.
  */
-import { existsSync, readFileSync } from 'node:fs';
+import { existsSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
 import { join } from 'node:path';
 // ---------------------------------------------------------------------------
@@ -23,48 +26,31 @@ import { join } from 'node:path';
 // ---------------------------------------------------------------------------
 /**
  * Determine which environment Claude is running in.
- * When `dockerenvExists` / `composeServiceExists` are omitted the function
- * inspects the filesystem directly.
+ * When `dockerenvExists` is omitted the function inspects the filesystem directly.
  */
 export function detectAuthContext(opts) {
-    const { cwd } = opts;
     const env = opts.env ?? process.env;
     // 1. JINN_RUNTIME_MODE env var (CI / scripted operators).
     const envMode = env['JINN_RUNTIME_MODE'];
     if (envMode === 'bare' || envMode === 'docker-compose' || envMode === 'container') {
         return envMode;
     }
-    // 2. Explicit config (persisted by `jinn auth`).
+    // 2. Explicit config (persisted by jinn-auth split).
     if (opts.configuredMode) {
         return opts.configuredMode;
     }
-    // 3. Filesystem heuristic — last resort. Flawed inside the client/ checkout dir
-    // because the package's own docker-compose.yml names jinn-daemon. Prefer
-    // setting runtimeMode explicitly.
+    // 3. /.dockerenv -> 'container'. This is the only filesystem signal we trust:
+    // it means the runtime IS a Docker container, no ambiguity.
     const inContainer = opts.dockerenvExists !== undefined
         ? opts.dockerenvExists
         : existsSync('/.dockerenv');
     if (inContainer)
         return 'container';
-    const hasComposeService = opts.composeServiceExists !== undefined
-        ? opts.composeServiceExists
-        : _composeHasJinnDaemon(cwd);
-    if (hasComposeService)
-        return 'docker-compose';
+    // 4. Default 'bare'. We deliberately do NOT guess 'docker-compose' from a
+    // local docker-compose.yml — that heuristic misfired for anyone running
+    // from the client/ checkout dir.
     return 'bare';
 }
-function _composeHasJinnDaemon(cwd) {
-    const composePath = join(cwd, 'docker-compose.yml');
-    if (!existsSync(composePath))
-        return false;
-    try {
-        const content = readFileSync(composePath, 'utf8');
-        return content.includes('jinn-daemon');
-    }
-    catch {
-        return false;
-    }
-}
 // ---------------------------------------------------------------------------
 // probeClaudeAuth
 // ---------------------------------------------------------------------------

package/dist/preflight/claude-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-auth.js","sourceRoot":"","sources":["../../src/preflight/claude-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA6CjC,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA0B;IAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,0DAA0D;IAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iDAAiD;IACjD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,gFAAgF;IAChF,yEAAyE;IACzE,kCAAkC;IAClC,MAAM,WAAW,GACf,IAAI,CAAC,eAAe,KAAK,SAAS;QAChC,CAAC,CAAC,IAAI,CAAC,eAAe;QACtB,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEhC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,MAAM,iBAAiB,GACrB,IAAI,CAAC,oBAAoB,KAAK,SAAS;QACrC,CAAC,CAAC,IAAI,CAAC,oBAAoB;QAC3B,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,iBAAiB;QAAE,OAAO,gBAAgB,CAAC;IAE/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE9B,MAAM,EAAE,GAAgB,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE3E,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,OAAO;YACP,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,gDAAgD;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,OAAO;YACP,MAAM,EAAE,6CAA6C;SACtD,CAAC;IACJ,CAAC;IAED,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC;QACtB,MAAkC,CAAC,QAAQ,KAAK,IAAI,EACrD,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,KAAK,GACT,OAAQ,MAAkC,CAAC,KAAK,KAAK,QAAQ;QAC3D,CAAC,CAAG,MAAkC,CAAC,KAAgB;QACvD,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW;QACrD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB,EAAE,GAAW;IACzD,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IAEnB,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG;YACL,SAAS;YACT,IAAI;YACJ,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC;YAC/B,KAAK;YACL,MAAM;YACN,IAAI;YACJ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,aAAa;YACb,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,GAAW;IAEX,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE;gBACJ,SAAS;gBACT,IAAI;gBACJ,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC;gBAC/B,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,WAAW;gBACX,cAAc;gBACd,QAAQ;gBACR,aAAa;gBACb,MAAM;gBACN,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC"}
+{"version":3,"file":"claude-auth.js","sourceRoot":"","sources":["../../src/preflight/claude-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA2CjC,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA0B;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,0DAA0D;IAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qDAAqD;IACrD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,WAAW,GACf,IAAI,CAAC,eAAe,KAAK,SAAS;QAChC,CAAC,CAAC,IAAI,CAAC,eAAe;QACtB,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEhC,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,0EAA0E;IAC1E,wEAAwE;IACxE,iCAAiC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE9B,MAAM,EAAE,GAAgB,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE3E,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,OAAO;YACP,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,gDAAgD;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,OAAO;YACP,MAAM,EAAE,6CAA6C;SACtD,CAAC;IACJ,CAAC;IAED,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC;QACtB,MAAkC,CAAC,QAAQ,KAAK,IAAI,EACrD,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,KAAK,GACT,OAAQ,MAAkC,CAAC,KAAK,KAAK,QAAQ;QAC3D,CAAC,CAAG,MAAkC,CAAC,KAAgB;QACvD,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW;QACrD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB,EAAE,GAAW;IACzD,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IAEnB,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG;YACL,SAAS;YACT,IAAI;YACJ,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC;YAC/B,KAAK;YACL,MAAM;YACN,IAAI;YACJ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,aAAa;YACb,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,GAAW;IAEX,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE;gBACJ,SAAS;gBACT,IAAI;gBACJ,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC;gBAC/B,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,WAAW;gBACX,cAAc;gBACd,QAAQ;gBACR,aAAa;gBACb,MAAM;gBACN,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC"}

package/dist/runner/claude.d.ts

@@ -1,4 +1,4 @@
-import type { DesiredState, RestorationResult } from '../types/index.js';
+import type { Task, TaskResult } from '../types/index.js';
 import type { Runner, RunnerContext } from './runner.js';
 export interface ClaudeRunnerConfig {
     claudePath?: string;
@@ -10,6 +10,6 @@ export declare class ClaudeRunner implements Runner {
     private model?;
     private readonly mcpLauncher;
     constructor(config?: ClaudeRunnerConfig);
-    run(desiredState: DesiredState, context: RunnerContext): Promise<RestorationResult>;
+    run(task: Task, context: RunnerContext): Promise<TaskResult>;
 }
-export declare function buildPrompt(desiredState: DesiredState): string;
+export declare function buildPrompt(task: Task): string;

package/dist/runner/claude.js

@@ -4,6 +4,7 @@ import { dirname, join } from 'node:path';
 import { tmpdir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 import { Store } from '../store/store.js';
+import { tracedSpawn } from '../trajectory/index.js';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 /** MCP subprocess: compiled `server.js` when present, else `node --import tsx server.ts` (dev / yarn e2e). */
 function resolveJinnMcpLauncher(explicitPath) {
@@ -30,8 +31,8 @@ export class ClaudeRunner {
         this.model = config.model;
         this.mcpLauncher = resolveJinnMcpLauncher(config.mcpServerPath);
     }
-    async run(desiredState, context) {
-        const prompt = buildPrompt(desiredState);
+    async run(task, context) {
+        const prompt = buildPrompt(task);
         // Write MCP config to temp dir
         const tmpDir = mkdtempSync(join(tmpdir(), 'jinn-runner-'));
         const mcpConfigPath = join(tmpDir, 'mcp-config.json');
@@ -41,28 +42,59 @@ export class ClaudeRunner {
                     command: this.mcpLauncher.command,
                     args: this.mcpLauncher.args,
                     env: {
-                        DESIRED_STATE_ID: desiredState.id,
-                        DESIRED_STATE_DESCRIPTION: desiredState.description,
-                        DESIRED_STATE_CONTEXT: desiredState.context ? JSON.stringify(desiredState.context) : '',
-                        DESIRED_STATE_TYPE: desiredState.type ?? '',
-                        RESTORATION_REQUEST_ID: desiredState.restorationRequestId ?? '',
+                        DESIRED_STATE_ID: task.id,
+                        DESIRED_STATE_DESCRIPTION: task.description,
+                        DESIRED_STATE_CONTEXT: task.context ? JSON.stringify(task.context) : '',
+                        DESIRED_STATE_ROLE: task.role ?? '',
+                        RESTORATION_REQUEST_ID: task.restorationRequestId ?? '',
                         REQUEST_ID: context.requestId,
-                        RESTORATION_DELIVERY_DATA: desiredState.type === 'evaluation' && desiredState.context?.restorationResult
-                            ? JSON.stringify(desiredState.context.restorationResult)
+                        RESTORATION_DELIVERY_DATA: task.role === 'evaluation' && task.context?.restorationResult
+                            ? JSON.stringify(task.context.restorationResult)
                             : '',
                         STORE_PATH: context.storePath ?? '',
                         DAEMON_API_URL: context.daemonApiUrl ?? '',
+                        // Bearer token for the daemon's cost-mutating routes. MCP
+                        // subprocess attaches this as `Authorization: Bearer <token>`
+                        // on fetches to `POST /v1/artifacts/acquire` and
+                        // `POST /artifacts`. Empty string when unset → daemon returns 401.
+                        DAEMON_API_TOKEN: context.daemonApiToken ?? '',
+                        // Subgraph + IPFS gateway only — both keyless. The agent EOA
+                        // private key NEVER leaves the daemon process; acquire_artifact
+                        // proxies through DAEMON_API_URL instead.
+                        JINN_CORPUS_SUBGRAPH_URL: context.corpusEnv?.subgraphUrl ?? '',
+                        JINN_CORPUS_IPFS_GATEWAY_URL: context.corpusEnv?.ipfsGatewayUrl ?? '',
                     },
                 },
             },
         }));
         try {
-            await spawnAgent(this.claudePath, prompt, mcpConfigPath, this.model, context.timeoutMs);
+            if (context.trajectory) {
+                // Traced path — wrap spawn with tracedSpawn so the subprocess lifetime
+                // surfaces as a jinn.state_transition span in the run's trajectory.
+                const agentEnv = buildAgentEnv();
+                const args = buildAgentArgs(prompt, mcpConfigPath, this.model);
+                console.log(`[runner] Spawning agent (traced): ${this.claudePath} ${args.slice(0, 3).join(' ')} ... (timeout: ${context.timeoutMs}ms)`);
+                const result = await tracedSpawn({
+                    collector: context.trajectory,
+                    cmd: this.claudePath,
+                    args,
+                    env: agentEnv,
+                    stateFrom: 'PREPARED',
+                    stateTo: 'RAN_CLAUDE',
+                });
+                console.log(`[runner] Agent process exited (exitCode: ${result.exitCode})`);
+                if (result.exitCode !== 0) {
+                    throw new Error(`Agent exited with code ${result.exitCode}: ${result.stderr.slice(0, 500)}`);
+                }
+            }
+            else {
+                await spawnAgent(this.claudePath, prompt, mcpConfigPath, this.model, context.timeoutMs);
+            }
             // Read result from store — the MCP tool published it as an artifact
             if (context.storePath) {
                 const store = new Store(context.storePath);
                 try {
-                    const isEvaluation = desiredState.type === 'evaluation';
+                    const isEvaluation = task.role === 'evaluation';
                     const tag = isEvaluation ? 'evaluation-verdict' : 'restoration-result';
                     const artifact = store.getArtifactByRequestId(context.requestId, tag);
                     if (artifact) {
@@ -80,31 +112,31 @@ export class ClaudeRunner {
         }
     }
 }
-export function buildPrompt(desiredState) {
+export function buildPrompt(task) {
     let contextSection = '';
-    if (desiredState.context && Object.keys(desiredState.context).length > 0) {
-        contextSection = `\n## Context\n${JSON.stringify(desiredState.context, null, 2)}\n`;
+    if (task.context && Object.keys(task.context).length > 0) {
+        contextSection = `\n## Context\n${JSON.stringify(task.context, null, 2)}\n`;
     }
-    const isEvaluation = desiredState.type === 'evaluation';
+    const isEvaluation = task.role === 'evaluation';
     const instructions = isEvaluation
         ? `## Instructions
-1. Use get_desired_state to understand what was requested
+1. Use get_task to understand what was requested
 2. Use get_restoration_delivery to fetch the restoration result
-3. Evaluate whether the restoration achieved the desired state
+3. Evaluate whether the solution satisfied the Task
 4. Use submit_restoration_result to report your verdict
 5. Use report_progress to log progress along the way
 6. Optionally use publish_artifact to record any insights`
         : `## Instructions
-1. Use get_desired_state to understand what needs to be restored
+1. Use get_task to understand what needs to be restored
 2. Take the necessary actions to restore it
 3. Use submit_restoration_result to report what you did
 4. Use report_progress to log progress along the way
 5. Optionally use publish_artifact to record any insights`;
-    return `You are ${isEvaluation ? 'evaluating a restoration' : 'restoring a desired state'}.
+    return `You are ${isEvaluation ? 'evaluating a solution' : 'solving a Task'}.
 
-## Desired State
-ID: ${desiredState.id}
-Description: ${desiredState.description}
+## Task
+ID: ${task.id}
+Description: ${task.description}
 ${contextSection}
 ${instructions}
 
@@ -161,12 +193,16 @@ function buildAgentEnv() {
     }
     return env;
 }
+function buildAgentArgs(prompt, mcpConfigPath, model) {
+    const args = ['-p', prompt, '--mcp-config', mcpConfigPath, '--strict-mcp-config'];
+    if (model)
+        args.push('--model', model);
+    args.push('--allowedTools', 'mcp__jinn-client__*');
+    return args;
+}
 function spawnAgent(claudePath, prompt, mcpConfigPath, model, timeoutMs) {
     return new Promise((resolve, reject) => {
-        const args = ['-p', prompt, '--mcp-config', mcpConfigPath, '--strict-mcp-config'];
-        if (model)
-            args.push('--model', model);
-        args.push('--allowedTools', 'mcp__jinn-client__*');
+        const args = buildAgentArgs(prompt, mcpConfigPath, model);
         console.log(`[runner] Spawning agent: ${claudePath} ${args.slice(0, 3).join(' ')} ... (timeout: ${timeoutMs}ms)`);
         const agentEnv = buildAgentEnv();
         const child = spawn(claudePath, args, {