@openrig/cli 0.1.11 → 0.2.0

package/dist/restore-packet/omitted-records.js

@@ -0,0 +1,116 @@
+// omitted-records.ts — classifies a parsed source record into one of the
+// 4 omitted-class enums (per M1 contract § 5) or accepts it as a kept
+// user-visible message.
+//
+// v0 generator excludes the following record classes from
+// transcript-latest.md and transcript.md:
+//
+// - reasoning_records: internal reasoning records that the runtime emitted
+//   but were not user-visible messages.
+// - raw_tool_outputs: full raw tool execution output (often verbose; may
+//   contain transient state).
+// - function_call_output: function-call result records that are not
+//   user-visible.
+// - redacted_secrets: applied to any matched credential patterns per the
+//   redaction policy. (This class counts records whose content matched
+//   a secret pattern AND was therefore redacted.)
+//
+// `omitted_classes` in the summary enumerates the classes ACTUALLY
+// excluded for THIS packet (not all available classes); the validator
+// checks each name is one of the 4 enum values.
+import { emptyOmittedCounts } from "./types.js";
+import { hasSecretPattern } from "./redaction.js";
+/**
+ * Classify a Codex JSONL record (the parsed JSON object) into kept /
+ * omitted. Caller is responsible for passing only `response_item`-class
+ * records; session_meta and compacted are handled separately by the
+ * Codex parser.
+ *
+ * Codex semantics (per Velocity prior art):
+ * - response_item with payload.type === "function_call" → function_call_output
+ * - response_item with payload.type === "custom_tool_call" → raw_tool_outputs
+ * - response_item with payload.type === "reasoning" → reasoning_records
+ * - response_item with payload.type === "message" + role in {developer,user,assistant}
+ *   → kept (after secret-pattern check)
+ * - everything else → reasoning_records (catch-all for non-message non-tool
+ *   payload types)
+ */
+export function classifyCodexRecord(record) {
+    const payloadType = typeof record.payload?.type === "string" ? record.payload.type : "";
+    switch (payloadType) {
+        case "function_call":
+            return { kind: "omitted", reason: "function_call_output" };
+        case "custom_tool_call":
+            return { kind: "omitted", reason: "raw_tool_outputs" };
+        case "reasoning":
+            return { kind: "omitted", reason: "reasoning_records" };
+        case "message": {
+            const role = typeof record.payload?.role === "string" ? record.payload.role : "";
+            if (role !== "developer" && role !== "user" && role !== "assistant") {
+                return { kind: "omitted", reason: "reasoning_records" };
+            }
+            return { kind: "kept" };
+        }
+        default:
+            return { kind: "omitted", reason: "reasoning_records" };
+    }
+}
+/**
+ * Classify a Claude transcript record. Claude shape carries the role
+ * directly at `record.type` (user / assistant / system / attachment /
+ * summary etc). Per the M2b dispatch's "emit the same structured
+ * representation as the Codex parser" requirement, the omitted-class
+ * mapping mirrors Codex.
+ */
+export function classifyClaudeRecord(record) {
+    const type = typeof record.type === "string" ? record.type : "";
+    switch (type) {
+        case "user":
+        case "assistant":
+            return { kind: "kept" };
+        case "attachment":
+            // Attachments are tool-result-class records (file content the user
+            // attached or tool output). Map to raw_tool_outputs.
+            return { kind: "omitted", reason: "raw_tool_outputs" };
+        case "summary":
+            // System/summary records are non-user-visible meta; map to
+            // reasoning_records.
+            return { kind: "omitted", reason: "reasoning_records" };
+        default:
+            // Everything else (sessionId-only, agentInfo, permissionMode meta,
+            // etc.) is metadata, not a user-visible message.
+            return { kind: "omitted", reason: "reasoning_records" };
+    }
+}
+/** State holder for accumulating omitted-class counts during parsing. */
+export class OmittedCounter {
+    counts = emptyOmittedCounts();
+    recordOmission(reason) {
+        this.counts[reason] += 1;
+    }
+    /**
+     * Mark that a kept message had secret content (was redacted). Increments
+     * `redacted_secrets` per occurrence. Caller checks `hasSecretPattern`
+     * BEFORE redaction to decide whether to record this.
+     */
+    recordRedaction() {
+        this.counts.redacted_secrets += 1;
+    }
+    /**
+     * Returns the list of omitted classes that have at least one record.
+     * Used to populate `summary.omitted_classes` per contract § 5.
+     * Order: stable (the enum order from the type definition).
+     */
+    activeClasses() {
+        const order = [
+            "reasoning_records",
+            "raw_tool_outputs",
+            "function_call_output",
+            "redacted_secrets",
+        ];
+        return order.filter((cls) => this.counts[cls] > 0);
+    }
+}
+/** Re-export for convenience. */
+export { hasSecretPattern };
+//# sourceMappingURL=omitted-records.js.map

package/dist/restore-packet/omitted-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitted-records.js","sourceRoot":"","sources":["../../src/restore-packet/omitted-records.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,sEAAsE;AACtE,wBAAwB;AACxB,EAAE;AACF,0DAA0D;AAC1D,0CAA0C;AAC1C,EAAE;AACF,2EAA2E;AAC3E,wCAAwC;AACxC,yEAAyE;AACzE,8BAA8B;AAC9B,oEAAoE;AACpE,kBAAkB;AAClB,yEAAyE;AACzE,uEAAuE;AACvE,kDAAkD;AAClD,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,gDAAgD;AAEhD,OAAO,EAAE,kBAAkB,EAA+C,MAAM,YAAY,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOlD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwD;IAC1F,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC7D,KAAK,kBAAkB;YACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACzD,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1D,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAC1D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD;YACE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA0B;IAC7D,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,KAAK,YAAY;YACf,mEAAmE;YACnE,qDAAqD;YACrD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACzD,KAAK,SAAS;YACZ,2DAA2D;YAC3D,qBAAqB;YACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1D;YACE,mEAAmE;YACnE,iDAAiD;YACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,OAAO,cAAc;IAChB,MAAM,GAAkB,kBAAkB,EAAE,CAAC;IAEtD,cAAc,CAAC,MAA0B;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,MAAM,KAAK,GAAyB;YAClC,mBAAmB;YACnB,kBAAkB;YAClB,sBAAsB;YACtB,kBAAkB;SACnB,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;CACF;AAED,iCAAiC;AACjC,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/restore-packet/packet-writer.d.ts

@@ -0,0 +1,59 @@
+import type { StructuredTranscript, SourceRuntime } from "./types.js";
+export interface WritePacketOptions {
+    /** Absolute path of the target packet directory. MUST NOT exist. */
+    targetDir: string;
+    /** Parsed source structured representation. */
+    structured: StructuredTranscript;
+    /** Runtime kind of the source seat. */
+    sourceRuntime: SourceRuntime;
+    /** Target rig name (operator-supplied). */
+    targetRig: string;
+    /** Target runtime kind (operator-supplied). */
+    targetRuntime: SourceRuntime;
+    /** Target workspace root (absolute path). */
+    targetWorkspaceRoot: string;
+    /** Default target repo (absolute path or null). */
+    defaultTargetRepo: string | null;
+    /** Path/URI to role guidance for the restored seat. */
+    rolePointer: string;
+    /** One-paragraph human-readable summary of current work. */
+    currentWorkSummary: string;
+    /** Who the restored seat hands off to next; "self" if continuing. */
+    nextOwner: string;
+    /** Caveats list (cross-runtime quirks, redaction notes, etc.). */
+    caveats: string[];
+    /** Explicit statement of restored-seat authority. */
+    authorityBoundaries: string;
+    /** Ordered source-trust ranking (subset of contract enum). */
+    sourceTrustRanking: string[];
+    /** Source session id. */
+    sourceSessionId: string;
+    /**
+     * Source rig name. Per M2c-CLI R2: passed explicitly by the CLI adapter
+     * (computed from parsed session_meta `<seat>@<rig>` split or operator
+     * --source-rig-override). The writer does NOT derive this from
+     * sourceSessionId — that hidden derivation was the M2c-CLI R1 bug.
+     */
+    sourceRig: string;
+    /** Source cwd (absolute path). */
+    sourceCwd: string;
+    /** Generator version identifier (e.g., "rig-restore-packet@0.1.0"). */
+    generatorVersion: string;
+    /** Whether to include the full transcript.md file. */
+    includeFullTranscript: boolean;
+}
+export interface WritePacketResult {
+    targetDir: string;
+    files: string[];
+    summaryPath: string;
+}
+/**
+ * Write a v0 restore packet directory atomically.
+ *
+ * Atomic guarantee: if any step fails (including schema validation of
+ * restore-summary.json), the targetDir is never created and any
+ * intermediate tempdir is removed. Operators see either a complete
+ * valid packet at targetDir, or no packet at all.
+ */
+export declare function writePacket(opts: WritePacketOptions): Promise<WritePacketResult>;
+//# sourceMappingURL=packet-writer.d.ts.map

package/dist/restore-packet/packet-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packet-writer.d.ts","sourceRoot":"","sources":["../../src/restore-packet/packet-writer.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAItE,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,UAAU,EAAE,oBAAoB,CAAC;IACjC,uCAAuC;IACvC,aAAa,EAAE,aAAa,CAAC;IAC7B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,aAAa,EAAE,aAAa,CAAC;IAC7B,6CAA6C;IAC7C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mDAAmD;IACnD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qDAAqD;IACrD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,yBAAyB;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAiJD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoFtF"}

package/dist/restore-packet/packet-writer.js

@@ -0,0 +1,224 @@
+// packet-writer.ts — assembles + atomically writes a v0 restore packet
+// directory.
+//
+// Per M1 contract § 1: emits 4 required files (restore-instructions.md,
+// transcript-latest.md, touched-files.md, restore-summary.json) plus
+// optional transcript.md (when full transcript material is available;
+// presence in lockstep with `full_transcript` summary key).
+//
+// Atomic emission via tempdir-then-rename:
+// 1. Write all files into a sibling tempdir (`<targetDir>.tmp-<rand>/`).
+// 2. Validate the tempdir's restore-summary.json against the embedded
+//    JSON Schema (RESTORE_SUMMARY_SCHEMA from schema-validator.ts).
+// 3. If valid: rename tempdir → targetDir (single fs.rename; atomic on
+//    same filesystem).
+// 4. If validation fails OR any write step fails: rmSync the tempdir;
+//    propagate the error. The targetDir is NEVER created in this case.
+//
+// Pre-condition: targetDir MUST NOT exist (operator must supply a fresh
+// path). Reject with explicit error otherwise.
+import { writeFileSync, existsSync, renameSync, rmSync, mkdtempSync } from "node:fs";
+import { dirname, basename, join } from "node:path";
+import { validateRestoreSummary, } from "./schema-validator.js";
+const TRANSCRIPT_BOUND = 120;
+function transcriptMarkdownFromMessages(title, session, messages, note) {
+    const body = messages
+        .map((m, i) => {
+        const ts = m.timestamp ? ` ${m.timestamp}` : "";
+        return `## ${i + 1}. ${m.role}${ts}\n\n${m.text}\n`;
+    })
+        .join("\n");
+    return `# ${title}\n\nSource session: \`${session}\`\n\n${note}\n\n${body}`;
+}
+function buildTranscriptLatest(structured, sourceSessionId) {
+    const latest = structured.messages.slice(-TRANSCRIPT_BOUND);
+    return transcriptMarkdownFromMessages("Bounded Latest Transcript", sourceSessionId, latest, `This bounded transcript contains the latest ${latest.length} extracted messages for normal restore. Use transcript.md only when deeper forensic recovery is needed.`);
+}
+function buildTranscriptFull(structured, sourceSessionId) {
+    return transcriptMarkdownFromMessages("Full Transcript", sourceSessionId, structured.messages, "This transcript contains developer/user/assistant messages extracted from the source. Reasoning records, tool calls, and tool outputs are omitted by design (see restore-summary.json `omitted_classes`).");
+}
+function buildTouchedFiles(structured) {
+    const rows = structured.paths.length > 0
+        ? structured.paths.map((entry) => `- \`${entry.path}\` (${entry.count})`).join("\n")
+        : "- No paths detected in extracted messages or tool arguments.";
+    return `# Touched Files And Path Inventory\n\nBest-effort path inventory from messages and tool arguments. This is a triage aid, not a complete proof of all files read or written.\n\n${rows}\n`;
+}
+function buildRestoreInstructions(opts) {
+    return `# Restore Instructions
+
+You are a restored seat in \`${opts.targetRig}\`. This packet records the cross-runtime context for resuming work from \`${opts.sourceSessionId}\`.
+
+## Identity
+
+1. Run \`rig whoami --json\`.
+2. Trust the current rig identity over the source-session transcript.
+3. Current workspace root: \`${opts.targetWorkspaceRoot}\`.
+4. Default target repo: \`${opts.defaultTargetRepo ?? "(none)"}\`.
+5. Role guidance pointer: \`${opts.rolePointer}\`.
+
+## Restore Steps
+
+1. Read this file.
+2. Read \`touched-files.md\`.
+3. Read \`transcript-latest.md\` for bounded current context.
+4. Use \`transcript.md\` only if the bounded transcript is insufficient.
+5. State: "restored from packet generated by ${opts.generatorVersion}; current rig is ${opts.targetRig}; default target repo is ${opts.defaultTargetRepo ?? "none"}."
+6. Name any caveats before resuming work.
+7. Hand off to next owner: \`${opts.nextOwner}\` (or "self" to continue).
+
+## Current Work
+
+${opts.currentWorkSummary}
+
+## Authority Boundaries
+
+${opts.authorityBoundaries}
+
+## Caveats
+
+${opts.caveats.length > 0 ? opts.caveats.map((c) => `- ${c}`).join("\n") : "- (none recorded)"}
+
+## Packet Stats
+
+- Source runtime: \`${opts.sourceRuntime}\`
+- Target runtime: \`${opts.targetRuntime}\`
+- JSONL/transcript lines processed: ${opts.structured.lineCount}
+- Extracted messages: ${opts.structured.messageCount}
+- Compaction records: ${opts.structured.compactedCount}
+- Source cwd: \`${opts.sourceCwd}\`
+`;
+}
+function buildSummary(opts) {
+    const omittedClassesActive = [];
+    for (const k of ["reasoning_records", "raw_tool_outputs", "function_call_output", "redacted_secrets"]) {
+        if (opts.structured.omittedCounts[k] > 0)
+            omittedClassesActive.push(k);
+    }
+    const messageCount = Math.min(opts.structured.messages.length, TRANSCRIPT_BOUND);
+    const summary = {
+        source_session_id: opts.sourceSessionId,
+        source_rig: opts.sourceRig,
+        source_runtime: opts.sourceRuntime,
+        source_cwd: opts.sourceCwd,
+        target_rig: opts.targetRig,
+        target_runtime: opts.targetRuntime,
+        target_workspace_root: opts.targetWorkspaceRoot,
+        default_target_repo: opts.defaultTargetRepo,
+        role_pointer: opts.rolePointer,
+        bounded_latest_transcript: {
+            path: "transcript-latest.md",
+            message_count: messageCount,
+            bound: TRANSCRIPT_BOUND,
+        },
+        touched_files: {
+            path: "touched-files.md",
+            top_paths: opts.structured.paths.slice(0, 30),
+        },
+        durable_pointers: {
+            queue_pointers: [],
+            progress_pointers: [],
+            field_note_pointers: [],
+            artifact_pointers: [],
+        },
+        current_work_summary: opts.currentWorkSummary,
+        next_owner: opts.nextOwner,
+        caveats: opts.caveats,
+        authority_boundaries: opts.authorityBoundaries,
+        omitted_classes: omittedClassesActive,
+        redaction_policy_id: "openrig-v0",
+        source_trust_ranking: opts.sourceTrustRanking,
+        generator_version: opts.generatorVersion,
+        generated_at: new Date().toISOString(),
+    };
+    if (opts.includeFullTranscript) {
+        summary.full_transcript = {
+            path: "transcript.md",
+            line_count: opts.structured.messages.length,
+        };
+    }
+    return summary;
+}
+/**
+ * Write a v0 restore packet directory atomically.
+ *
+ * Atomic guarantee: if any step fails (including schema validation of
+ * restore-summary.json), the targetDir is never created and any
+ * intermediate tempdir is removed. Operators see either a complete
+ * valid packet at targetDir, or no packet at all.
+ */
+export async function writePacket(opts) {
+    if (existsSync(opts.targetDir)) {
+        throw new Error(`restore-packet write: target directory already exists: ${opts.targetDir}`);
+    }
+    // Build all file contents BEFORE creating any disk state. This way if
+    // an in-memory step throws (unlikely, but defensive), no tempdir was
+    // created.
+    const summary = buildSummary(opts);
+    const validation = validateRestoreSummary(summary);
+    if (!validation.valid) {
+        const errSummary = validation.errors
+            .slice(0, 5)
+            .map((e) => `${e.field}: ${e.rule}`)
+            .join("; ");
+        throw new Error(`restore-packet write: schema validation failed before atomic rename: ${errSummary}`);
+    }
+    const restoreInstructions = buildRestoreInstructions(opts);
+    const transcriptLatest = buildTranscriptLatest(opts.structured, opts.sourceSessionId);
+    const touchedFiles = buildTouchedFiles(opts.structured);
+    const transcriptFull = opts.includeFullTranscript
+        ? buildTranscriptFull(opts.structured, opts.sourceSessionId)
+        : null;
+    // Create tempdir as a sibling of targetDir using mkdtemp for race-free
+    // unique name. The dirname() must exist and be writable; we don't
+    // mkdir the parent for the operator (operator authority bedrock).
+    const parentDir = dirname(opts.targetDir);
+    const tempPrefix = `${basename(opts.targetDir)}.tmp-restore-packet-`;
+    const tempDir = mkdtempSync(join(parentDir, tempPrefix));
+    try {
+        writeFileSync(join(tempDir, "restore-instructions.md"), restoreInstructions, "utf-8");
+        writeFileSync(join(tempDir, "transcript-latest.md"), transcriptLatest, "utf-8");
+        writeFileSync(join(tempDir, "touched-files.md"), touchedFiles, "utf-8");
+        writeFileSync(join(tempDir, "restore-summary.json"), JSON.stringify(summary, null, 2), "utf-8");
+        if (transcriptFull !== null) {
+            writeFileSync(join(tempDir, "transcript.md"), transcriptFull, "utf-8");
+        }
+        // Re-validate by parsing the on-disk summary (round-trip self-check).
+        // This catches any structural divergence between buildSummary's
+        // in-memory shape and the JSON.stringify() serialization.
+        const onDisk = JSON.parse(
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        (await import("node:fs")).readFileSync(join(tempDir, "restore-summary.json"), "utf-8"));
+        const recheck = validateRestoreSummary(onDisk);
+        if (!recheck.valid) {
+            throw new Error(`restore-packet write: on-disk schema recheck failed: ${recheck.errors.slice(0, 5).map((e) => `${e.field}: ${e.rule}`).join("; ")}`);
+        }
+        // Atomic rename tempdir → targetDir. fs.rename is atomic when source
+        // and destination are on the same filesystem; we keep them sibling
+        // so this holds.
+        renameSync(tempDir, opts.targetDir);
+    }
+    catch (err) {
+        // Clean up tempdir on any failure; do NOT leave a partial packet.
+        try {
+            rmSync(tempDir, { recursive: true, force: true });
+        }
+        catch {
+            // Best-effort cleanup; original error takes precedence.
+        }
+        throw err;
+    }
+    const files = [
+        "restore-instructions.md",
+        "transcript-latest.md",
+        "touched-files.md",
+        "restore-summary.json",
+    ];
+    if (transcriptFull !== null)
+        files.push("transcript.md");
+    return {
+        targetDir: opts.targetDir,
+        files,
+        summaryPath: join(opts.targetDir, "restore-summary.json"),
+    };
+}
+//# sourceMappingURL=packet-writer.js.map

package/dist/restore-packet/packet-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packet-writer.js","sourceRoot":"","sources":["../../src/restore-packet/packet-writer.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,aAAa;AACb,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,4DAA4D;AAC5D,EAAE;AACF,2CAA2C;AAC3C,yEAAyE;AACzE,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,uBAAuB;AACvB,sEAAsE;AACtE,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,+CAA+C;AAE/C,OAAO,EAAa,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAoD7B,SAAS,8BAA8B,CACrC,KAAa,EACb,OAAe,EACf,QAA0C,EAC1C,IAAY;IAEZ,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,KAAK,KAAK,yBAAyB,OAAO,SAAS,IAAI,OAAO,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAC5B,UAAgC,EAChC,eAAuB;IAEvB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC5D,OAAO,8BAA8B,CACnC,2BAA2B,EAC3B,eAAe,EACf,MAAM,EACN,+CAA+C,MAAM,CAAC,MAAM,yGAAyG,CACtK,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAgC,EAChC,eAAuB;IAEvB,OAAO,8BAA8B,CACnC,iBAAiB,EACjB,eAAe,EACf,UAAU,CAAC,QAAQ,EACnB,2MAA2M,CAC5M,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAgC;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACpF,CAAC,CAAC,8DAA8D,CAAC;IACnE,OAAO,kLAAkL,IAAI,IAAI,CAAC;AACpM,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAwB;IACxD,OAAO;;+BAEsB,IAAI,CAAC,SAAS,8EAA8E,IAAI,CAAC,eAAe;;;;;;+BAMhH,IAAI,CAAC,mBAAmB;4BAC3B,IAAI,CAAC,iBAAiB,IAAI,QAAQ;8BAChC,IAAI,CAAC,WAAW;;;;;;;;+CAQC,IAAI,CAAC,gBAAgB,oBAAoB,IAAI,CAAC,SAAS,4BAA4B,IAAI,CAAC,iBAAiB,IAAI,MAAM;;+BAEnI,IAAI,CAAC,SAAS;;;;EAI3C,IAAI,CAAC,kBAAkB;;;;EAIvB,IAAI,CAAC,mBAAmB;;;;EAIxB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB;;;;sBAIxE,IAAI,CAAC,aAAa;sBAClB,IAAI,CAAC,aAAa;sCACF,IAAI,CAAC,UAAU,CAAC,SAAS;wBACvC,IAAI,CAAC,UAAU,CAAC,YAAY;wBAC5B,IAAI,CAAC,UAAU,CAAC,cAAc;kBACpC,IAAI,CAAC,SAAS;CAC/B,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB;IAC5C,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB,CAAU,EAAE,CAAC;QAC/G,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjF,MAAM,OAAO,GAA4B;QACvC,iBAAiB,EAAE,IAAI,CAAC,eAAe;QACvC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,qBAAqB,EAAE,IAAI,CAAC,mBAAmB;QAC/C,mBAAmB,EAAE,IAAI,CAAC,iBAAiB;QAC3C,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,yBAAyB,EAAE;YACzB,IAAI,EAAE,sBAAsB;YAC5B,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE,gBAAgB;SACxB;QACD,aAAa,EAAE;YACb,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAC9C;QACD,gBAAgB,EAAE;YAChB,cAAc,EAAE,EAAE;YAClB,iBAAiB,EAAE,EAAE;YACrB,mBAAmB,EAAE,EAAE;YACvB,iBAAiB,EAAE,EAAE;SACtB;QACD,oBAAoB,EAAE,IAAI,CAAC,kBAAkB;QAC7C,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,oBAAoB,EAAE,IAAI,CAAC,mBAAmB;QAC9C,eAAe,EAAE,oBAAoB;QACrC,mBAAmB,EAAE,YAAY;QACjC,oBAAoB,EAAE,IAAI,CAAC,kBAAkB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,gBAAgB;QACxC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACvC,CAAC;IACF,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/B,OAAO,CAAC,eAAe,GAAG;YACxB,IAAI,EAAE,eAAe;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM;SAC5C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,sEAAsE;IACtE,qEAAqE;IACrE,WAAW;IACX,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,UAAU,GAAqB,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM;aACjC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;aACnC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,wEAAwE,UAAU,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB;QAC/C,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,kEAAkE;IAClE,kEAAkE;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC;IACrE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzD,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACtF,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAChF,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACxE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChG,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;QAED,sEAAsE;QACtE,gEAAgE;QAChE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;QACvB,iEAAiE;QACjE,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CACvF,CAAC;QACF,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,wDAAwD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpI,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,mEAAmE;QACnE,iBAAiB;QACjB,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,yBAAyB;QACzB,sBAAsB;QACtB,kBAAkB;QAClB,sBAAsB;KACvB,CAAC;IACF,IAAI,cAAc,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAEzD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK;QACL,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC;KAC1D,CAAC;AACJ,CAAC"}

package/dist/restore-packet/redaction.d.ts

@@ -0,0 +1,30 @@
+/**
+ * v0 secret-pattern list. Mirrors Velocity prior art `:34-48` exactly:
+ *
+ * 1. /\bsk-[A-Za-z0-9_-]{16,}\b/g — OpenAI-style secret tokens.
+ * 2. /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g — GitHub personal/OAuth tokens.
+ * 3. /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g — GitHub fine-grained PATs.
+ * 4. /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g — generic Bearer tokens.
+ * 5. /\b[A-Za-z0-9+/]{40,}={0,2}\b/g — base64-shaped strings ≥40 chars.
+ */
+export declare const SECRET_PATTERNS: readonly RegExp[];
+/**
+ * Apply the openrig-v0 redaction policy to a string. Returns the input
+ * with each match of the secret patterns replaced by the literal
+ * string `[REDACTED]`. Pure function; no side effects.
+ *
+ * The redaction is non-destructive at the structural level — only the
+ * matched substrings are replaced. Surrounding characters are kept.
+ */
+export declare function redact(text: string): string;
+/**
+ * Returns true if at least one secret pattern matches the input.
+ * Used by the omitted-records counter to track how many records had
+ * their content redacted (for the `redacted_secrets` omitted-class
+ * count in summary).
+ *
+ * Note: a SINGLE record may match multiple patterns; this returns true
+ * after the first match for efficiency.
+ */
+export declare function hasSecretPattern(text: string): boolean;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/restore-packet/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/restore-packet/redaction.ts"],"names":[],"mappings":"AAqBA;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAM5C,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQtD"}

package/dist/restore-packet/redaction.js

@@ -0,0 +1,71 @@
+// redaction.ts — applies the v0 redaction policy.
+//
+// Per M1 contract § 4: v0 defines two named policies:
+// - `velocity-v1`: mirrors the Velocity generator's token patterns at
+//   field-notes/2026-04-27-velocity-claude-from-codex-restore/tools/
+//   codex-jsonl-to-restore-packet.mjs:34-48 (sk-*, gh[pousr]_*,
+//   github_pat_*, Bearer *, base64 ≥40 chars).
+// - `openrig-v0`: the productized v0 policy, identical patterns to
+//   `velocity-v1` but with the canonical name. v0 generator emits
+//   `redaction_policy_id: "openrig-v0"`.
+//
+// Redaction is applied to:
+// - transcript content in transcript-latest.md and transcript.md.
+// - body content in restore-instructions.md if it quotes transcript
+//   material.
+// - top_paths / touched-files entries are NOT redacted (paths are not
+//   credential material).
+//
+// The validator does NOT scan content for residual credential patterns
+// (per § 4 + § 8: enforcement is generator-side at write time).
+/**
+ * v0 secret-pattern list. Mirrors Velocity prior art `:34-48` exactly:
+ *
+ * 1. /\bsk-[A-Za-z0-9_-]{16,}\b/g — OpenAI-style secret tokens.
+ * 2. /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g — GitHub personal/OAuth tokens.
+ * 3. /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g — GitHub fine-grained PATs.
+ * 4. /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g — generic Bearer tokens.
+ * 5. /\b[A-Za-z0-9+/]{40,}={0,2}\b/g — base64-shaped strings ≥40 chars.
+ */
+export const SECRET_PATTERNS = [
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g,
+    /\b[A-Za-z0-9+/]{40,}={0,2}\b/g,
+];
+/**
+ * Apply the openrig-v0 redaction policy to a string. Returns the input
+ * with each match of the secret patterns replaced by the literal
+ * string `[REDACTED]`. Pure function; no side effects.
+ *
+ * The redaction is non-destructive at the structural level — only the
+ * matched substrings are replaced. Surrounding characters are kept.
+ */
+export function redact(text) {
+    let out = text;
+    for (const pattern of SECRET_PATTERNS) {
+        out = out.replace(pattern, "[REDACTED]");
+    }
+    return out;
+}
+/**
+ * Returns true if at least one secret pattern matches the input.
+ * Used by the omitted-records counter to track how many records had
+ * their content redacted (for the `redacted_secrets` omitted-class
+ * count in summary).
+ *
+ * Note: a SINGLE record may match multiple patterns; this returns true
+ * after the first match for efficiency.
+ */
+export function hasSecretPattern(text) {
+    for (const pattern of SECRET_PATTERNS) {
+        // Non-global test: cannot reuse the global `g` regex without resetting
+        // lastIndex, so build a fresh non-global RegExp from source.
+        const probe = new RegExp(pattern.source);
+        if (probe.test(text))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/restore-packet/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/restore-packet/redaction.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,sDAAsD;AACtD,sEAAsE;AACtE,qEAAqE;AACrE,gEAAgE;AAChE,+CAA+C;AAC/C,mEAAmE;AACnE,kEAAkE;AAClE,yCAAyC;AACzC,EAAE;AACF,2BAA2B;AAC3B,kEAAkE;AAClE,oEAAoE;AACpE,cAAc;AACd,sEAAsE;AACtE,0BAA0B;AAC1B,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAEhE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,4BAA4B;IAC5B,kCAAkC;IAClC,mCAAmC;IACnC,uCAAuC;IACvC,+BAA+B;CAChC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,uEAAuE;QACvE,6DAA6D;QAC7D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/restore-packet/runtime-detect.d.ts

@@ -0,0 +1,19 @@
+import type { SourceRuntime } from "./types.js";
+/**
+ * Detect the source runtime from a sample of JSONL lines.
+ *
+ * Returns:
+ * - "codex" — at least one line has `type: "response_item"` OR
+ *   `type: "session_meta"` OR `type: "compacted"`.
+ * - "claude-code" — at least one line has `type: "user"` or
+ *   `type: "assistant"` AND no Codex markers seen.
+ * - null — input is empty / non-JSONL / ambiguous (e.g., neither
+ *   marker class appears).
+ *
+ * Detection is non-greedy: walks the input lines until a definitive
+ * marker is found. Bias toward Codex markers if both shape classes
+ * appear (extremely unlikely in practice; would indicate a malformed
+ * mixed source).
+ */
+export declare function detectRuntime(content: string): SourceRuntime | null;
+//# sourceMappingURL=runtime-detect.d.ts.map

package/dist/restore-packet/runtime-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.d.ts","sourceRoot":"","sources":["../../src/restore-packet/runtime-detect.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CA6CnE"}

package/dist/restore-packet/runtime-detect.js

@@ -0,0 +1,81 @@
+// runtime-detect.ts — auto-detect the source runtime from a JSONL/transcript
+// shape.
+//
+// Per M1 contract § 3.4: source-runtime resolution for `--source-jsonl` is
+// auto-detected from the JSONL shape (Codex JSONL has `payload.type`
+// markers; Claude transcript has different shape). If auto-detect is
+// ambiguous, fail with clear error and prompt for `--source-runtime`
+// flag.
+//
+// Detection is by content shape, NOT file extension or filename
+// (per dispatch's "Do NOT use file extensions or filenames as the
+// detection key. Detect by content shape.").
+//
+// Codex shape: each line is JSON with `type` field; the discriminating
+// markers are `type: "session_meta"`, `type: "response_item"`, or
+// `type: "compacted"`. response_item records carry a `payload` object
+// with a `type` sub-field.
+//
+// Claude shape: each line is JSON with `type` field; values include
+// `user`, `assistant`, `system`, `attachment`, `summary`, etc. NO
+// `payload` wrapper; the message content is directly under `message`
+// or `attachment`.
+/**
+ * Detect the source runtime from a sample of JSONL lines.
+ *
+ * Returns:
+ * - "codex" — at least one line has `type: "response_item"` OR
+ *   `type: "session_meta"` OR `type: "compacted"`.
+ * - "claude-code" — at least one line has `type: "user"` or
+ *   `type: "assistant"` AND no Codex markers seen.
+ * - null — input is empty / non-JSONL / ambiguous (e.g., neither
+ *   marker class appears).
+ *
+ * Detection is non-greedy: walks the input lines until a definitive
+ * marker is found. Bias toward Codex markers if both shape classes
+ * appear (extremely unlikely in practice; would indicate a malformed
+ * mixed source).
+ */
+export function detectRuntime(content) {
+    if (typeof content !== "string" || content.length === 0)
+        return null;
+    let sawCodexMarker = false;
+    let sawClaudeMarker = false;
+    for (const rawLine of content.split("\n")) {
+        const line = rawLine.trim();
+        if (!line)
+            continue;
+        let record;
+        try {
+            record = JSON.parse(line);
+        }
+        catch {
+            // Skip malformed JSON lines; they don't affect detection.
+            continue;
+        }
+        const recordType = typeof record.type === "string" ? record.type : "";
+        // Codex discriminators: type values + payload wrapper presence.
+        if (recordType === "response_item" ||
+            recordType === "session_meta" ||
+            recordType === "compacted") {
+            sawCodexMarker = true;
+            // Early-return on the strongest Codex marker; ambiguity bias
+            // toward Codex if Claude markers also appear is intentional
+            // (Codex's response_item is structurally distinct from any
+            // Claude record; if it's present, the content is Codex JSONL).
+            return "codex";
+        }
+        // Claude discriminators: top-level type as a user/assistant marker.
+        if (recordType === "user" || recordType === "assistant") {
+            sawClaudeMarker = true;
+            // Don't early-return on Claude alone — keep looking for any
+            // Codex marker (defensive against the unlikely mixed-shape case).
+        }
+    }
+    if (sawCodexMarker)
+        return "codex";
+    if (sawClaudeMarker)
+        return "claude-code";
+    return null;
+}
+//# sourceMappingURL=runtime-detect.js.map

package/dist/restore-packet/runtime-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.js","sourceRoot":"","sources":["../../src/restore-packet/runtime-detect.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,SAAS;AACT,EAAE;AACF,2EAA2E;AAC3E,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,QAAQ;AACR,EAAE;AACF,gEAAgE;AAChE,kEAAkE;AAClE,6CAA6C;AAC7C,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,sEAAsE;AACtE,2BAA2B;AAC3B,EAAE;AACF,oEAAoE;AACpE,kEAAkE;AAClE,qEAAqE;AACrE,mBAAmB;AAInB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,MAAwD,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtE,gEAAgE;QAChE,IACE,UAAU,KAAK,eAAe;YAC9B,UAAU,KAAK,cAAc;YAC7B,UAAU,KAAK,WAAW,EAC1B,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,6DAA6D;YAC7D,4DAA4D;YAC5D,2DAA2D;YAC3D,+DAA+D;YAC/D,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,oEAAoE;QACpE,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YACxD,eAAe,GAAG,IAAI,CAAC;YACvB,4DAA4D;YAC5D,kEAAkE;QACpE,CAAC;IACH,CAAC;IAED,IAAI,cAAc;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,eAAe;QAAE,OAAO,aAAa,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC"}