@namzu/sdk 2.0.0 → 3.0.0

package/dist/types/toolset/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/toolset/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAErF,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,QAAQ,GAAG,MAAM,CAAA;AAExF,MAAM,MAAM,cAAc,GACvB,WAAW,GACX,kBAAkB,GAClB,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,WAAW,CAAA;AAEd,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAA;AAE7E,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,MAAM,CAAA;AAErF,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,GAAG,KAAK,GAAG,OAAO,CAAA;QACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAClC,CAAA;IACD,QAAQ,CAAC,YAAY,CAAC,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,QAAQ,CAAC,KAAK,CAAC,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAA;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;IACD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAA;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAA;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC3C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/toolset/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAErF,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,YAAY,GAAG,eAAe,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE5F,MAAM,MAAM,cAAc,GACvB,WAAW,GACX,kBAAkB,GAClB,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,WAAW,CAAA;AAEd,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAA;AAE7E,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,GAAG,KAAK,GAAG,OAAO,CAAA;QACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAClC,CAAA;IACD,QAAQ,CAAC,YAAY,CAAC,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,QAAQ,CAAC,KAAK,CAAC,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAA;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;IACD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAA;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAA;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC3C"}

package/dist/utils/__tests__/atomic-write.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=atomic-write.test.d.ts.map

package/dist/utils/__tests__/atomic-write.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.test.d.ts","sourceRoot":"","sources":["../../../src/utils/__tests__/atomic-write.test.ts"],"names":[],"mappings":""}

package/dist/utils/__tests__/atomic-write.test.js

@@ -0,0 +1,91 @@
+import { mkdtempSync, readFileSync, readdirSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { atomicWriteFile, temporaryPathFor } from '../atomic-write.js';
+/**
+ * The rename is what makes the write atomic — a reader sees the old file or
+ * the new one, never a half-written one. The sidecar it renames FROM has to
+ * be private to this write, and in seven places it was a fixed
+ * `${path}.tmp`.
+ *
+ * Two writers of the same record then shared one scratch file: both opened
+ * it, both wrote into it, and the first rename published whatever mixture
+ * had landed while the second renamed a file that was no longer there. That
+ * is the failure atomic writes exist to prevent, reached through the
+ * mechanism meant to prevent it.
+ *
+ * Not hypothetical here: the cross-process park and unpark handoff is a
+ * design where two processes legitimately touch the same records, and it is
+ * the feature these stores exist to serve.
+ */
+let dir;
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), 'namzu-atomic-'));
+});
+afterEach(() => {
+    rmSync(dir, { recursive: true, force: true });
+});
+describe('the sidecar name', () => {
+    it('is different every time', () => {
+        const names = new Set(Array.from({ length: 1000 }, () => temporaryPathFor('/x/record.json')));
+        // A thousand writes in the same millisecond is a batch, not a stress
+        // test — a timestamp alone would collide here.
+        expect(names.size).toBe(1000);
+    });
+    it('stays beside the file it will become', () => {
+        expect(temporaryPathFor('/x/record.json').startsWith('/x/record.json.')).toBe(true);
+        // Same directory, so the rename is within one filesystem and stays
+        // atomic rather than degrading to a copy.
+        expect(temporaryPathFor('/x/record.json')).toMatch(/\.tmp$/);
+    });
+    it('carries the process id, so two processes cannot pick the same one', () => {
+        expect(temporaryPathFor('/x/record.json')).toContain(`.${process.pid}.`);
+    });
+});
+describe('writing', () => {
+    it('publishes the content', async () => {
+        const target = join(dir, 'record.json');
+        await atomicWriteFile(target, '{"a":1}');
+        expect(readFileSync(target, 'utf-8')).toBe('{"a":1}');
+    });
+    it('leaves no sidecar behind on success', async () => {
+        await atomicWriteFile(join(dir, 'record.json'), 'x');
+        expect(readdirSync(dir)).toEqual(['record.json']);
+    });
+    it('leaves no sidecar behind on failure', async () => {
+        // A directory that does not exist fails the write, not the rename.
+        await expect(atomicWriteFile(join(dir, 'missing', 'record.json'), 'x')).rejects.toThrow();
+        // A leftover sidecar looks like a record to anything scanning the
+        // directory, and the next attempt would not reuse it anyway.
+        expect(readdirSync(dir)).toEqual([]);
+    });
+    it('does not corrupt a record when two writes race', async () => {
+        const target = join(dir, 'record.json');
+        const first = 'a'.repeat(200_000);
+        const second = 'b'.repeat(200_000);
+        await Promise.all([atomicWriteFile(target, first), atomicWriteFile(target, second)]);
+        // One of them won; neither produced a mixture. With a shared sidecar
+        // this is exactly where the halves interleave.
+        const written = readFileSync(target, 'utf-8');
+        expect([first, second]).toContain(written);
+        expect(readdirSync(dir)).toEqual(['record.json']);
+    });
+    it('survives many concurrent writes to the same record', async () => {
+        const target = join(dir, 'record.json');
+        const bodies = Array.from({ length: 25 }, (_, i) => `${i}`.repeat(50_000));
+        await Promise.all(bodies.map((body) => atomicWriteFile(target, body)));
+        expect(bodies).toContain(readFileSync(target, 'utf-8'));
+        expect(readdirSync(dir)).toEqual(['record.json']);
+    });
+});
+describe('a contended rename', () => {
+    it('does not retry a failure that is not contention', async () => {
+        // A missing directory is a permanent condition; retrying it would
+        // turn a clear failure into a delay and then the same failure.
+        const started = Date.now();
+        await expect(atomicWriteFile(join(dir, 'nope', 'record.json'), 'x')).rejects.toThrow();
+        expect(Date.now() - started).toBeLessThan(50);
+    });
+});
+//# sourceMappingURL=atomic-write.test.js.map

package/dist/utils/__tests__/atomic-write.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/atomic-write.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAEtE;;;;;;;;;;;;;;;GAeG;AAEH,IAAI,GAAW,CAAA;AAEf,UAAU,CAAC,GAAG,EAAE;IACf,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;AACnD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9C,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QAClC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;QAC7F,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnF,mEAAmE;QACnE,0CAA0C;QAC1C,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAA;QACpD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACpD,mEAAmE;QACnE,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QACzF,kEAAkE;QAClE,6DAA6D;QAC7D,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAElC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QAEpF,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAE1E,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAChE,kEAAkE;QAClE,+DAA+D;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/utils/__tests__/shell-compress.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shell-compress.test.d.ts.map

package/dist/utils/__tests__/shell-compress.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-compress.test.d.ts","sourceRoot":"","sources":["../../../src/utils/__tests__/shell-compress.test.ts"],"names":[],"mappings":""}

package/dist/utils/__tests__/shell-compress.test.js

@@ -0,0 +1,41 @@
+import { describe, expect, it } from 'vitest';
+import { compressShellOutputFull } from '../shell-compress.js';
+/**
+ * `raw` here is bash stdout, and bash stdout is not something the run
+ * itself typed — a fetched page, a piped response, a file an agent was
+ * told to `cat`, all land in it verbatim. The pass-line detector's opening
+ * alternative used to hunt for a PASS/ok marker with an unbounded
+ * whitespace/bullet run in front of it. On a long line that never produces
+ * that marker, the engine restarts the hunt at every offset in the line,
+ * and this codebase's tool budgets cap payload bytes, not line length —
+ * one crafted line was enough to pin a core testing the regex, and would
+ * have done the same to the process compressing real output.
+ */
+describe('compressShellOutputFull', () => {
+    it('does not hang on a long marker-free line (js/polynomial-redos regression)', () => {
+        // 20 lines is `DEFAULT_MIN_LINES` — below it the function returns the
+        // input untouched and the vulnerable regex is never reached.
+        const poison = ' '.repeat(4000);
+        const raw = [poison, ...Array.from({ length: 19 }, (_, i) => `line ${i}`)].join('\n');
+        const start = Date.now();
+        compressShellOutputFull(raw);
+        const elapsedMs = Date.now() - start;
+        // The vulnerable regex takes ~20s on a line this size; a fixed one
+        // finishes in low single-digit milliseconds. 1s leaves headroom for a
+        // loaded CI box while still failing hard on a regression.
+        expect(elapsedMs).toBeLessThan(1000);
+    });
+    it('still recognizes and suppresses repeated PASS markers', () => {
+        // Distinct names, not indices: normalizeLine folds digits to `N`, so
+        // index-numbered lines would collapse into one another in the repeat
+        // pass and the assertion below would be measuring the wrong thing.
+        const names = ['alpha', 'bravo', 'charlie', 'delta', 'echo', 'foxtrot', 'golf', 'hotel'];
+        const passLines = names.map((name) => `  ✓ test ${name} PASS `);
+        const raw = [...passLines, ...Array.from({ length: 15 }, (_, i) => `other line ${i}`)].join('\n');
+        const { text } = compressShellOutputFull(raw, { maxPassLines: 3 });
+        expect(text).toContain('passing tests omitted');
+        // Only the configured cap of PASS lines survives verbatim.
+        expect(text.match(/✓ test \w+ PASS/g)?.length).toBe(3);
+    });
+});
+//# sourceMappingURL=shell-compress.test.js.map

package/dist/utils/__tests__/shell-compress.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-compress.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/shell-compress.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAE9D;;;;;;;;;;GAUG;AACH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACpF,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAErF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,uBAAuB,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;QAEpC,mEAAmE;QACnE,sEAAsE;QACtE,0DAA0D;QAC1D,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;QACxF,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,QAAQ,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1F,IAAI,CACJ,CAAA;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAA;QAElE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAA;QAC/C,2DAA2D;QAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/utils/atomic-write.d.ts

@@ -0,0 +1,10 @@
+export declare function temporaryPathFor(filePath: string): string;
+/**
+ * Publish `content` atomically.
+ *
+ * A failed write removes its own sidecar. Leaving it behind would litter
+ * the store with files that look like records to anything scanning the
+ * directory, and the next attempt would not reuse it anyway.
+ */
+export declare function atomicWriteFile(filePath: string, content: string): Promise<void>;
+//# sourceMappingURL=atomic-write.d.ts.map

package/dist/utils/atomic-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../../src/utils/atomic-write.ts"],"names":[],"mappings":"AA+BA,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAStF"}

package/dist/utils/atomic-write.js

@@ -0,0 +1,83 @@
+import { randomBytes } from 'node:crypto';
+import { rename, unlink, writeFile } from 'node:fs/promises';
+/**
+ * Write-then-rename, with a sidecar name no other writer can pick.
+ *
+ * The rename is what makes the write atomic — a reader sees the old file or
+ * the new one, never a half-written one. The sidecar it renames FROM has to
+ * be private to this write, and in six stores it was a fixed
+ * `${path}.tmp`.
+ *
+ * Two writers of the same record then shared one scratch file: both opened
+ * it, both wrote into it, and the first `rename` published whatever mixture
+ * had landed while the second renamed a file that was no longer there. The
+ * result is the failure atomic writes exist to prevent, arrived at through
+ * the mechanism meant to prevent it.
+ *
+ * This is not hypothetical for this SDK. The cross-process park and unpark
+ * handoff — one process suspending a run and another resuming it — is a
+ * design where two processes legitimately touch the same records, and it is
+ * the feature these stores exist to serve. One store already got this
+ * right; the rest inherited the fixed name.
+ *
+ * The suffix carries the pid (distinct per process), a counter (distinct
+ * within a process, including within one millisecond) and a few random
+ * bytes (distinct across hosts sharing a network mount, where a pid can
+ * repeat).
+ */
+let counter = 0;
+export function temporaryPathFor(filePath) {
+    counter = (counter + 1) % Number.MAX_SAFE_INTEGER;
+    return `${filePath}.${process.pid}.${counter}.${randomBytes(4).toString('hex')}.tmp`;
+}
+/**
+ * Publish `content` atomically.
+ *
+ * A failed write removes its own sidecar. Leaving it behind would litter
+ * the store with files that look like records to anything scanning the
+ * directory, and the next attempt would not reuse it anyway.
+ */
+export async function atomicWriteFile(filePath, content) {
+    const tempPath = temporaryPathFor(filePath);
+    try {
+        await writeFile(tempPath, content, 'utf-8');
+        await renameWithRetry(tempPath, filePath);
+    }
+    catch (err) {
+        await unlink(tempPath).catch(() => undefined);
+        throw err;
+    }
+}
+/** Transient on Windows while another handle still holds the target. */
+const CONTENDED = new Set(['EPERM', 'EACCES', 'EBUSY']);
+const RENAME_ATTEMPTS = 5;
+/**
+ * Rename, retrying briefly while the target is contended.
+ *
+ * Replacing an existing file by rename is unconditional on POSIX and not
+ * on Windows, where a concurrent writer holding the target makes the call
+ * fail with `EPERM` — momentarily, for as long as the other rename takes.
+ * Two processes writing the same record is precisely the case this whole
+ * helper exists for, so treating that as a hard failure would hand back an
+ * error for a situation that resolves itself in microseconds.
+ *
+ * Bounded and short on purpose. A genuine permission problem is not
+ * transient, and retrying it forever would turn a clear failure into a
+ * hang; five attempts distinguishes contention from denial without
+ * pretending to fix the latter.
+ */
+async function renameWithRetry(from, to) {
+    for (let attempt = 1;; attempt++) {
+        try {
+            await rename(from, to);
+            return;
+        }
+        catch (err) {
+            const code = err.code ?? '';
+            if (!CONTENDED.has(code) || attempt >= RENAME_ATTEMPTS)
+                throw err;
+            await new Promise((resolve) => setTimeout(resolve, attempt));
+        }
+    }
+}
+//# sourceMappingURL=atomic-write.js.map

package/dist/utils/atomic-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.js","sourceRoot":"","sources":["../../src/utils/atomic-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,IAAI,OAAO,GAAG,CAAC,CAAA;AAEf,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAChD,OAAO,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAA;IACjD,OAAO,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAe;IACtE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QAC3C,MAAM,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7C,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC;AAED,wEAAwE;AACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AACvD,MAAM,eAAe,GAAG,CAAC,CAAA;AAEzB;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IACtD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACtB,OAAM;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,EAAE,CAAA;YACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,eAAe;gBAAE,MAAM,GAAG,CAAA;YACjE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7D,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/utils/shell-compress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell-compress.d.ts","sourceRoot":"","sources":["../../src/utils/shell-compress.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAgCD,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,oBAAoB,GAC5B,mBAAmB,CAyErB;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAEvF"}
+{"version":3,"file":"shell-compress.d.ts","sourceRoot":"","sources":["../../src/utils/shell-compress.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAgCD,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,oBAAoB,GAC5B,mBAAmB,CAyErB;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAEvF"}

package/dist/utils/shell-compress.js

@@ -1,5 +1,16 @@
 const STACK_FRAME_RE = /^\s+at\s+|^\s+File\s+"[^"]+",\s+line\s+\d+|^\s+at\s+[\w.$]+\(|^\s+\d+:\s+\w|^\s+from\s+\//;
-const PASS_LINE_RE = /[\s✓✔√●∙·►▸▹]+\s*(PASS|pass|ok|OK|✓|✔|√)\s|^\s*(PASS|ok)\s+[\w/.-]+|^ok\s+\d+\s|PASSED\s*$|^---\s*PASS:|^test\s+\S+\s+\.\.\.\s+ok\s*$/;
+// This line is tested against every line of shell output, which is
+// attacker-reachable (e.g. bash stdout can carry bytes the run itself never
+// typed — a fetched file, a piped response). The first alternative used to
+// open with an unbounded `[\s...]+` hunting for a PASS/ok marker that may
+// not exist: on a long run of bullet/whitespace characters with nothing to
+// match, the engine restarts that scan at every offset, and the per-offset
+// scan itself walks the remaining string — quadratic in line length (a
+// single crafted line was enough to hang the process). Capping the run
+// bounds the per-offset work to a constant, so the unavoidable per-offset
+// restart stays linear overall. 40 is generous for the checkmark/indent
+// prefixes real tool output produces; nothing legitimate needs more.
+const PASS_LINE_RE = /[\s✓✔√●∙·►▸▹]{1,40}(PASS|pass|ok|OK|✓|✔|√)\s|^\s*(PASS|ok)\s+[\w/.-]+|^ok\s+\d+\s|PASSED\s*$|^---\s*PASS:|^test\s+\S+\s+\.\.\.\s+ok\s*$/;
 const NOISE_RE = /^\s*[\\\/|─━░▓█▒■□◻◼⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏⣾⣽⣻⢿⡿⣟⣯⣷]+\s*$|^\s*\d+%\s*[|█▓░]+|^(Downloading|Fetching|Installing|Resolving|Compiling)\b.*\.\.\./;
 const DEFAULT_MIN_LINES = 20;
 const DEFAULT_MIN_REDUCTION = 0.1;

package/dist/utils/shell-compress.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell-compress.js","sourceRoot":"","sources":["../../src/utils/shell-compress.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GACnB,2FAA2F,CAAA;AAE5F,MAAM,YAAY,GACjB,uIAAuI,CAAA;AAExI,MAAM,QAAQ,GACb,kIAAkI,CAAA;AAEnI,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,qBAAqB,GAAG,GAAG,CAAA;AACjC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAClC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAchC,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,WAAW,EAAE,CAAA;QACd,CAAC;aAAM,CAAC;YACP,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,gBAAgB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;YACtF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,QAAQ,GAAG,IAAI,CAAA;YACf,WAAW,GAAG,CAAC,CAAA;QAChB,CAAC;IACF,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,gBAAgB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;IACtF,CAAC;IAED,OAAO,MAAM,CAAA;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,GAAW,EACX,OAA8B;IAE9B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAA;IACvD,MAAM,YAAY,GAAG,OAAO,EAAE,mBAAmB,IAAI,qBAAqB,CAAA;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,wBAAwB,CAAA;IAC1E,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,sBAAsB,CAAA;IAEpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAE7B,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,wEAAwE;IACxE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,gBAAgB;QAChB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,SAAQ;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAA;YACZ,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;YACD,SAAQ;QACT,CAAC;QAED,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,cAAc,cAAc,CAAC,CAAA;QAC7D,CAAC;QACD,UAAU,GAAG,CAAC,CAAA;QAEd,wBAAwB;QACxB,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,SAAS,EAAE,CAAA;YACX,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;YACD,SAAQ;QACT,CAAC;QAED,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,GAAG,YAAY,wBAAwB,CAAC,CAAA;QACpE,CAAC;QACD,SAAS,GAAG,CAAC,CAAA;QAEb,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjB,CAAC;IAED,0BAA0B;IAC1B,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,cAAc,cAAc,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,GAAG,YAAY,wBAAwB,CAAC,CAAA;IACpE,CAAC;IAED,kCAAkC;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAEpD,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAA8B;IAC9E,OAAO,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAA;AAClD,CAAC"}
+{"version":3,"file":"shell-compress.js","sourceRoot":"","sources":["../../src/utils/shell-compress.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GACnB,2FAA2F,CAAA;AAE5F,mEAAmE;AACnE,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,qEAAqE;AACrE,MAAM,YAAY,GACjB,yIAAyI,CAAA;AAE1I,MAAM,QAAQ,GACb,kIAAkI,CAAA;AAEnI,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,qBAAqB,GAAG,GAAG,CAAA;AACjC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAClC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAchC,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,WAAW,EAAE,CAAA;QACd,CAAC;aAAM,CAAC;YACP,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,gBAAgB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;YACtF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,QAAQ,GAAG,IAAI,CAAA;YACf,WAAW,GAAG,CAAC,CAAA;QAChB,CAAC;IACF,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,gBAAgB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;IACtF,CAAC;IAED,OAAO,MAAM,CAAA;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,GAAW,EACX,OAA8B;IAE9B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAA;IACvD,MAAM,YAAY,GAAG,OAAO,EAAE,mBAAmB,IAAI,qBAAqB,CAAA;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,wBAAwB,CAAA;IAC1E,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,sBAAsB,CAAA;IAEpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAE7B,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,wEAAwE;IACxE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,gBAAgB;QAChB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,SAAQ;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAA;YACZ,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;YACD,SAAQ;QACT,CAAC;QAED,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,cAAc,cAAc,CAAC,CAAA;QAC7D,CAAC;QACD,UAAU,GAAG,CAAC,CAAA;QAEd,wBAAwB;QACxB,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,SAAS,EAAE,CAAA;YACX,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;YACD,SAAQ;QACT,CAAC;QAED,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,GAAG,YAAY,wBAAwB,CAAC,CAAA;QACpE,CAAC;QACD,SAAS,GAAG,CAAC,CAAA;QAEb,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjB,CAAC;IAED,0BAA0B;IAC1B,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,cAAc,cAAc,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,GAAG,YAAY,wBAAwB,CAAC,CAAA;IACpE,CAAC;IAED,kCAAkC;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAEpD,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAA8B;IAC9E,OAAO,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAA;AAClD,CAAC"}

package/dist/verification/presets.d.ts

@@ -6,9 +6,12 @@ import type { VerificationGateConfig } from '../types/verification/index.js';
  * The model: the sandbox is the safety boundary. Anything that
  * stays inside the sandbox auto-approves. Things that try to escape
  * (network reach, shell tricks the dangerous-pattern list catches)
- * fall through to a human review prompt. This mirrors Codex CLI's
- * `workspace-write` + `on-request` default and Claude Code's
- * sandboxed permission mode.
+ * fall through to a human review prompt.
+ *
+ * The boundary is chosen deliberately: it is the one line a tool cannot
+ * blur. "Is this edit risky?" has no stable answer, but "does this leave
+ * the sandbox?" does — so the gate asks the question it can answer, and
+ * asks a human about the rest.
  *
  * What this enables:
  * - `allowReadOnlyTools` — anything `tool.isReadOnly(input)` reports

package/dist/verification/presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/verification/presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,0BAA0B,IAAI,sBAAsB,CAQnE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,+BAA+B,IAAI,sBAAsB,CAUxE"}
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/verification/presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,0BAA0B,IAAI,sBAAsB,CAQnE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,+BAA+B,IAAI,sBAAsB,CAUxE"}

package/dist/verification/presets.js

@@ -5,9 +5,12 @@
  * The model: the sandbox is the safety boundary. Anything that
  * stays inside the sandbox auto-approves. Things that try to escape
  * (network reach, shell tricks the dangerous-pattern list catches)
- * fall through to a human review prompt. This mirrors Codex CLI's
- * `workspace-write` + `on-request` default and Claude Code's
- * sandboxed permission mode.
+ * fall through to a human review prompt.
+ *
+ * The boundary is chosen deliberately: it is the one line a tool cannot
+ * blur. "Is this edit risky?" has no stable answer, but "does this leave
+ * the sandbox?" does — so the gate asks the question it can answer, and
+ * asks a human about the rest.
  *
  * What this enables:
  * - `allowReadOnlyTools` — anything `tool.isReadOnly(input)` reports

package/dist/verification/presets.js.map

@@ -1 +1 @@
-{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../src/verification/presets.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,0BAA0B;IACzC,OAAO;QACN,OAAO,EAAE,IAAI;QACb,kBAAkB,EAAE,IAAI;QACxB,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;KACxF,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,+BAA+B;IAC9C,OAAO;QACN,OAAO,EAAE,IAAI;QACb,kBAAkB,EAAE,IAAI;QACxB,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE;YACN,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;SACxF;KACD,CAAA;AACF,CAAC"}
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../src/verification/presets.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,0BAA0B;IACzC,OAAO;QACN,OAAO,EAAE,IAAI;QACb,kBAAkB,EAAE,IAAI;QACxB,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;KACxF,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,+BAA+B;IAC9C,OAAO;QACN,OAAO,EAAE,IAAI;QACb,kBAAkB,EAAE,IAAI;QACxB,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE;YACN,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;SACxF;KACD,CAAA;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/sdk",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "description": "Open-source AI agent SDK with a built-in runtime. Nothing between you and your agents.",
   "license": "FSL-1.1-MIT",
   "type": "module",
@@ -44,12 +44,12 @@
     "@biomejs/biome": "^1.9.4",
     "@opentelemetry/api": "^1.9.0",
     "@types/node": "^22.19.17",
-    "@vitest/coverage-v8": "^2.1.9",
+    "@vitest/coverage-v8": "^3.2.6",
     "fast-check": "^4.7.0",
     "jsonschema": "^1.5.0",
     "knip": "^6.4.1",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0",
+    "vitest": "^3.2.6",
     "zod": "^3.23.0",
     "zod-to-json-schema": "^3.23.0"
   },