@openrig/cli 0.1.12 → 0.3.0

package/dist/restore-packet/redaction.d.ts

@@ -0,0 +1,30 @@
+/**
+ * v0 secret-pattern list. Mirrors Velocity prior art `:34-48` exactly:
+ *
+ * 1. /\bsk-[A-Za-z0-9_-]{16,}\b/g — OpenAI-style secret tokens.
+ * 2. /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g — GitHub personal/OAuth tokens.
+ * 3. /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g — GitHub fine-grained PATs.
+ * 4. /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g — generic Bearer tokens.
+ * 5. /\b[A-Za-z0-9+/]{40,}={0,2}\b/g — base64-shaped strings ≥40 chars.
+ */
+export declare const SECRET_PATTERNS: readonly RegExp[];
+/**
+ * Apply the openrig-v0 redaction policy to a string. Returns the input
+ * with each match of the secret patterns replaced by the literal
+ * string `[REDACTED]`. Pure function; no side effects.
+ *
+ * The redaction is non-destructive at the structural level — only the
+ * matched substrings are replaced. Surrounding characters are kept.
+ */
+export declare function redact(text: string): string;
+/**
+ * Returns true if at least one secret pattern matches the input.
+ * Used by the omitted-records counter to track how many records had
+ * their content redacted (for the `redacted_secrets` omitted-class
+ * count in summary).
+ *
+ * Note: a SINGLE record may match multiple patterns; this returns true
+ * after the first match for efficiency.
+ */
+export declare function hasSecretPattern(text: string): boolean;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/restore-packet/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/restore-packet/redaction.ts"],"names":[],"mappings":"AAqBA;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAM5C,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQtD"}

package/dist/restore-packet/redaction.js

@@ -0,0 +1,71 @@
+// redaction.ts — applies the v0 redaction policy.
+//
+// Per M1 contract § 4: v0 defines two named policies:
+// - `velocity-v1`: mirrors the Velocity generator's token patterns at
+//   field-notes/2026-04-27-velocity-claude-from-codex-restore/tools/
+//   codex-jsonl-to-restore-packet.mjs:34-48 (sk-*, gh[pousr]_*,
+//   github_pat_*, Bearer *, base64 ≥40 chars).
+// - `openrig-v0`: the productized v0 policy, identical patterns to
+//   `velocity-v1` but with the canonical name. v0 generator emits
+//   `redaction_policy_id: "openrig-v0"`.
+//
+// Redaction is applied to:
+// - transcript content in transcript-latest.md and transcript.md.
+// - body content in restore-instructions.md if it quotes transcript
+//   material.
+// - top_paths / touched-files entries are NOT redacted (paths are not
+//   credential material).
+//
+// The validator does NOT scan content for residual credential patterns
+// (per § 4 + § 8: enforcement is generator-side at write time).
+/**
+ * v0 secret-pattern list. Mirrors Velocity prior art `:34-48` exactly:
+ *
+ * 1. /\bsk-[A-Za-z0-9_-]{16,}\b/g — OpenAI-style secret tokens.
+ * 2. /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g — GitHub personal/OAuth tokens.
+ * 3. /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g — GitHub fine-grained PATs.
+ * 4. /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g — generic Bearer tokens.
+ * 5. /\b[A-Za-z0-9+/]{40,}={0,2}\b/g — base64-shaped strings ≥40 chars.
+ */
+export const SECRET_PATTERNS = [
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g,
+    /\b[A-Za-z0-9+/]{40,}={0,2}\b/g,
+];
+/**
+ * Apply the openrig-v0 redaction policy to a string. Returns the input
+ * with each match of the secret patterns replaced by the literal
+ * string `[REDACTED]`. Pure function; no side effects.
+ *
+ * The redaction is non-destructive at the structural level — only the
+ * matched substrings are replaced. Surrounding characters are kept.
+ */
+export function redact(text) {
+    let out = text;
+    for (const pattern of SECRET_PATTERNS) {
+        out = out.replace(pattern, "[REDACTED]");
+    }
+    return out;
+}
+/**
+ * Returns true if at least one secret pattern matches the input.
+ * Used by the omitted-records counter to track how many records had
+ * their content redacted (for the `redacted_secrets` omitted-class
+ * count in summary).
+ *
+ * Note: a SINGLE record may match multiple patterns; this returns true
+ * after the first match for efficiency.
+ */
+export function hasSecretPattern(text) {
+    for (const pattern of SECRET_PATTERNS) {
+        // Non-global test: cannot reuse the global `g` regex without resetting
+        // lastIndex, so build a fresh non-global RegExp from source.
+        const probe = new RegExp(pattern.source);
+        if (probe.test(text))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/restore-packet/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/restore-packet/redaction.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,sDAAsD;AACtD,sEAAsE;AACtE,qEAAqE;AACrE,gEAAgE;AAChE,+CAA+C;AAC/C,mEAAmE;AACnE,kEAAkE;AAClE,yCAAyC;AACzC,EAAE;AACF,2BAA2B;AAC3B,kEAAkE;AAClE,oEAAoE;AACpE,cAAc;AACd,sEAAsE;AACtE,0BAA0B;AAC1B,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAEhE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,4BAA4B;IAC5B,kCAAkC;IAClC,mCAAmC;IACnC,uCAAuC;IACvC,+BAA+B;CAChC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,uEAAuE;QACvE,6DAA6D;QAC7D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/restore-packet/runtime-detect.d.ts

@@ -0,0 +1,19 @@
+import type { SourceRuntime } from "./types.js";
+/**
+ * Detect the source runtime from a sample of JSONL lines.
+ *
+ * Returns:
+ * - "codex" — at least one line has `type: "response_item"` OR
+ *   `type: "session_meta"` OR `type: "compacted"`.
+ * - "claude-code" — at least one line has `type: "user"` or
+ *   `type: "assistant"` AND no Codex markers seen.
+ * - null — input is empty / non-JSONL / ambiguous (e.g., neither
+ *   marker class appears).
+ *
+ * Detection is non-greedy: walks the input lines until a definitive
+ * marker is found. Bias toward Codex markers if both shape classes
+ * appear (extremely unlikely in practice; would indicate a malformed
+ * mixed source).
+ */
+export declare function detectRuntime(content: string): SourceRuntime | null;
+//# sourceMappingURL=runtime-detect.d.ts.map

package/dist/restore-packet/runtime-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.d.ts","sourceRoot":"","sources":["../../src/restore-packet/runtime-detect.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CA6CnE"}

package/dist/restore-packet/runtime-detect.js

@@ -0,0 +1,81 @@
+// runtime-detect.ts — auto-detect the source runtime from a JSONL/transcript
+// shape.
+//
+// Per M1 contract § 3.4: source-runtime resolution for `--source-jsonl` is
+// auto-detected from the JSONL shape (Codex JSONL has `payload.type`
+// markers; Claude transcript has different shape). If auto-detect is
+// ambiguous, fail with clear error and prompt for `--source-runtime`
+// flag.
+//
+// Detection is by content shape, NOT file extension or filename
+// (per dispatch's "Do NOT use file extensions or filenames as the
+// detection key. Detect by content shape.").
+//
+// Codex shape: each line is JSON with `type` field; the discriminating
+// markers are `type: "session_meta"`, `type: "response_item"`, or
+// `type: "compacted"`. response_item records carry a `payload` object
+// with a `type` sub-field.
+//
+// Claude shape: each line is JSON with `type` field; values include
+// `user`, `assistant`, `system`, `attachment`, `summary`, etc. NO
+// `payload` wrapper; the message content is directly under `message`
+// or `attachment`.
+/**
+ * Detect the source runtime from a sample of JSONL lines.
+ *
+ * Returns:
+ * - "codex" — at least one line has `type: "response_item"` OR
+ *   `type: "session_meta"` OR `type: "compacted"`.
+ * - "claude-code" — at least one line has `type: "user"` or
+ *   `type: "assistant"` AND no Codex markers seen.
+ * - null — input is empty / non-JSONL / ambiguous (e.g., neither
+ *   marker class appears).
+ *
+ * Detection is non-greedy: walks the input lines until a definitive
+ * marker is found. Bias toward Codex markers if both shape classes
+ * appear (extremely unlikely in practice; would indicate a malformed
+ * mixed source).
+ */
+export function detectRuntime(content) {
+    if (typeof content !== "string" || content.length === 0)
+        return null;
+    let sawCodexMarker = false;
+    let sawClaudeMarker = false;
+    for (const rawLine of content.split("\n")) {
+        const line = rawLine.trim();
+        if (!line)
+            continue;
+        let record;
+        try {
+            record = JSON.parse(line);
+        }
+        catch {
+            // Skip malformed JSON lines; they don't affect detection.
+            continue;
+        }
+        const recordType = typeof record.type === "string" ? record.type : "";
+        // Codex discriminators: type values + payload wrapper presence.
+        if (recordType === "response_item" ||
+            recordType === "session_meta" ||
+            recordType === "compacted") {
+            sawCodexMarker = true;
+            // Early-return on the strongest Codex marker; ambiguity bias
+            // toward Codex if Claude markers also appear is intentional
+            // (Codex's response_item is structurally distinct from any
+            // Claude record; if it's present, the content is Codex JSONL).
+            return "codex";
+        }
+        // Claude discriminators: top-level type as a user/assistant marker.
+        if (recordType === "user" || recordType === "assistant") {
+            sawClaudeMarker = true;
+            // Don't early-return on Claude alone — keep looking for any
+            // Codex marker (defensive against the unlikely mixed-shape case).
+        }
+    }
+    if (sawCodexMarker)
+        return "codex";
+    if (sawClaudeMarker)
+        return "claude-code";
+    return null;
+}
+//# sourceMappingURL=runtime-detect.js.map

package/dist/restore-packet/runtime-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.js","sourceRoot":"","sources":["../../src/restore-packet/runtime-detect.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,SAAS;AACT,EAAE;AACF,2EAA2E;AAC3E,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,QAAQ;AACR,EAAE;AACF,gEAAgE;AAChE,kEAAkE;AAClE,6CAA6C;AAC7C,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,sEAAsE;AACtE,2BAA2B;AAC3B,EAAE;AACF,oEAAoE;AACpE,kEAAkE;AAClE,qEAAqE;AACrE,mBAAmB;AAInB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,MAAwD,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtE,gEAAgE;QAChE,IACE,UAAU,KAAK,eAAe;YAC9B,UAAU,KAAK,cAAc;YAC7B,UAAU,KAAK,WAAW,EAC1B,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,6DAA6D;YAC7D,4DAA4D;YAC5D,2DAA2D;YAC3D,+DAA+D;YAC/D,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,oEAAoE;QACpE,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YACxD,eAAe,GAAG,IAAI,CAAC;YACvB,4DAA4D;YAC5D,kEAAkE;QACpE,CAAC;IACH,CAAC;IAED,IAAI,cAAc;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,eAAe;QAAE,OAAO,aAAa,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/restore-packet/schema-validator.d.ts

@@ -0,0 +1,13 @@
+export interface ValidationError {
+    field: string;
+    value: string;
+    rule: string;
+    severity: "error" | "warning";
+}
+export interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+}
+export declare const RESTORE_SUMMARY_SCHEMA: Record<string, unknown>;
+export declare function validateRestoreSummary(summary: unknown): ValidationResult;
+//# sourceMappingURL=schema-validator.d.ts.map

package/dist/restore-packet/schema-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-validator.d.ts","sourceRoot":"","sources":["../../src/restore-packet/schema-validator.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAKD,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAgK1D,CAAC;AAyBF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAiCzE"}

package/dist/restore-packet/schema-validator.js

@@ -0,0 +1,245 @@
+// schema-validator.ts — validates restore-summary.json against the v0 JSON
+// Schema (packages/cli/src/schemas/restore-summary.schema.json).
+//
+// Per M1 contract § 8 + IMPL § M2 line 167:
+// - generator-side: emit-time self-check against the schema before atomic
+//   rename of the packet directory.
+// - operator-side: M3 `rig restore-packet validate <packet-dir>` runs this
+//   validator and surfaces per-field violations.
+//
+// Validator returns a ValidationResult with `valid` and a per-field error
+// list. Each error names: field path, value (truncated/escaped), rule, and
+// severity. Required-field violations are severity `error`; optional-field
+// malformations are severity `warning` per § 8.
+//
+// M2a R2 packaging fix: the schema is embedded directly in this module as
+// a typed TS const (RESTORE_SUMMARY_SCHEMA) rather than read from the
+// sibling .json file at runtime. tsc emits the const into the compiled
+// validator JS, so the validator works after `tsc` emit without any extra
+// build-script copy step. The canonical JSON Schema file at
+// `packages/cli/src/schemas/restore-summary.schema.json` remains the
+// source of truth for downstream IDE / tooling consumption; a drift-catcher
+// test in `test/restore-packet.test.ts` asserts the two stay byte-equivalent.
+import Ajv from "ajv";
+import addFormats from "ajv-formats";
+// RESTORE_SUMMARY_SCHEMA — verbatim mirror of
+// `packages/cli/src/schemas/restore-summary.schema.json`. Keep these in
+// lockstep; the drift-catcher test enforces equivalence.
+export const RESTORE_SUMMARY_SCHEMA = {
+    $schema: "http://json-schema.org/draft-07/schema#",
+    $id: "https://openrig.dev/schemas/restore-summary.schema.json",
+    title: "Restore Packet Summary",
+    description: "Machine-readable metadata for a cross-runtime restore packet per the v0 paper standard.",
+    type: "object",
+    required: [
+        "source_session_id",
+        "source_rig",
+        "source_runtime",
+        "source_cwd",
+        "target_rig",
+        "target_runtime",
+        "target_workspace_root",
+        "default_target_repo",
+        "role_pointer",
+        "bounded_latest_transcript",
+        "touched_files",
+        "durable_pointers",
+        "current_work_summary",
+        "next_owner",
+        "caveats",
+        "authority_boundaries",
+        "omitted_classes",
+        "redaction_policy_id",
+        "source_trust_ranking",
+        "generator_version",
+        "generated_at",
+    ],
+    properties: {
+        source_session_id: { type: "string", minLength: 1 },
+        source_rig: { type: "string", minLength: 1 },
+        source_runtime: {
+            type: "string",
+            enum: ["claude-code", "codex", "terminal", "external"],
+        },
+        source_cwd: { type: "string", pattern: "^/" },
+        target_rig: { type: "string", minLength: 1 },
+        target_runtime: {
+            type: "string",
+            enum: ["claude-code", "codex", "terminal", "external"],
+        },
+        target_workspace_root: { type: "string", pattern: "^/" },
+        default_target_repo: { type: ["string", "null"] },
+        role_pointer: {
+            type: "string",
+            minLength: 1,
+            description: "Path or URI pointing to the role guidance file the restored seat should consume. REQUIRED per v0 standard field #9; resolves at restore time.",
+        },
+        bounded_latest_transcript: {
+            type: "object",
+            required: ["path", "message_count", "bound"],
+            properties: {
+                path: { type: "string" },
+                message_count: {
+                    type: "integer",
+                    minimum: 0,
+                    description: "Actual count of extracted messages in transcript-latest.md.",
+                },
+                bound: {
+                    type: "integer",
+                    const: 120,
+                    description: "v0 bound is fixed at 120 messages to match Velocity prior art (per contract § 7). v1+ may make configurable; v0 schema requires const 120 so packets with the wrong bound cannot pass.",
+                },
+            },
+        },
+        full_transcript: {
+            type: "object",
+            properties: {
+                path: { type: "string" },
+                line_count: { type: "integer", minimum: 0 },
+            },
+            description: "Optional per v0 standard field #11. Generator emits when full transcript material is available (e.g., from --source-jsonl or full-read --source-session); omitted otherwise.",
+        },
+        touched_files: {
+            type: "object",
+            required: ["path", "top_paths"],
+            properties: {
+                path: { type: "string" },
+                top_paths: {
+                    type: "array",
+                    items: {
+                        type: "object",
+                        required: ["path", "count"],
+                        properties: {
+                            path: { type: "string" },
+                            count: { type: "integer", minimum: 0 },
+                        },
+                    },
+                },
+            },
+        },
+        durable_pointers: {
+            type: "object",
+            required: [
+                "queue_pointers",
+                "progress_pointers",
+                "field_note_pointers",
+                "artifact_pointers",
+            ],
+            properties: {
+                queue_pointers: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "References to durable queue items (qitem ids or queue-file paths).",
+                },
+                progress_pointers: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "References to PROGRESS.md cursors the source seat was operating against.",
+                },
+                field_note_pointers: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "References to field-notes folders or files.",
+                },
+                artifact_pointers: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "Other durable artifacts (proof packets, slice packets, candidate dossiers).",
+                },
+            },
+            description: "REQUIRED per v0 standard field #13. Pointers to durable work the source seat was operating against; restored seat reads to recover work-context.",
+        },
+        current_work_summary: { type: "string", minLength: 1 },
+        next_owner: { type: "string", minLength: 1 },
+        caveats: { type: "array", items: { type: "string" } },
+        authority_boundaries: { type: "string", minLength: 1 },
+        omitted_classes: {
+            type: "array",
+            items: {
+                type: "string",
+                enum: ["reasoning_records", "raw_tool_outputs", "function_call_output", "redacted_secrets"],
+            },
+        },
+        redaction_policy_id: { type: "string", enum: ["velocity-v1", "openrig-v0"] },
+        source_trust_ranking: {
+            type: "array",
+            items: {
+                type: "string",
+                enum: [
+                    "rig_whoami",
+                    "target_rigspec",
+                    "bounded_latest_transcript",
+                    "full_transcript",
+                    "touched_files",
+                    "restore_summary",
+                ],
+            },
+            minItems: 1,
+        },
+        generator_version: { type: "string", minLength: 1 },
+        generated_at: { type: "string", format: "date-time" },
+    },
+    additionalProperties: false,
+};
+let cachedValidator = null;
+function getValidator() {
+    if (cachedValidator)
+        return cachedValidator;
+    const ajv = new Ajv({ allErrors: true, strict: false });
+    addFormats(ajv);
+    cachedValidator = ajv.compile(RESTORE_SUMMARY_SCHEMA);
+    return cachedValidator;
+}
+function truncateValue(value) {
+    if (value === undefined)
+        return "<undefined>";
+    if (value === null)
+        return "null";
+    let s;
+    try {
+        s = typeof value === "string" ? value : JSON.stringify(value);
+    }
+    catch {
+        s = String(value);
+    }
+    if (s.length > 80)
+        return s.slice(0, 77) + "...";
+    return s;
+}
+export function validateRestoreSummary(summary) {
+    const validator = getValidator();
+    const ok = validator(summary);
+    if (ok) {
+        return { valid: true, errors: [] };
+    }
+    const errors = (validator.errors ?? []).map((err) => {
+        const instancePath = err.instancePath || "";
+        const missing = err.params && err.params.missingProperty;
+        const additional = err.params && err.params.additionalProperty;
+        let field = instancePath.replace(/^\//, "").replace(/\//g, ".");
+        if (missing)
+            field = field ? `${field}.${missing}` : missing;
+        if (additional)
+            field = additional;
+        // Per M1 contract § 8 + IMPL § M3: optional-field malformations are
+        // severity "warning"; required-field violations are severity "error".
+        // The only top-level optional field in v0 is `full_transcript`.
+        // Errors whose path begins at `/full_transcript` come from validating
+        // the optional object's contents, not from a missing-required check
+        // on a required field.
+        const isOptionalFieldError = instancePath.startsWith("/full_transcript");
+        return {
+            field: field || "<root>",
+            value: truncateValue(err.data),
+            rule: `${err.keyword}: ${err.message ?? ""}`.trim(),
+            severity: isOptionalFieldError ? "warning" : "error",
+        };
+    });
+    // `valid` is false on ANY ajv violation (preserves M2c writer
+    // semantics: any malformation should block atomic rename). The M3
+    // validate command consults `errors[].severity` to decide exit code
+    // per M1 contract § 8 (required-field-class errors → exit nonzero;
+    // optional-field warnings → exit 0 with warning text).
+    return { valid: false, errors };
+}
+//# sourceMappingURL=schema-validator.js.map

package/dist/restore-packet/schema-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-validator.js","sourceRoot":"","sources":["../../src/restore-packet/schema-validator.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,iEAAiE;AACjE,EAAE;AACF,4CAA4C;AAC5C,0EAA0E;AAC1E,oCAAoC;AACpC,2EAA2E;AAC3E,iDAAiD;AACjD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,gDAAgD;AAChD,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,4DAA4D;AAC5D,qEAAqE;AACrE,4EAA4E;AAC5E,8EAA8E;AAE9E,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,UAAU,MAAM,aAAa,CAAC;AAcrC,8CAA8C;AAC9C,wEAAwE;AACxE,yDAAyD;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAA4B;IAC7D,OAAO,EAAE,yCAAyC;IAClD,GAAG,EAAE,yDAAyD;IAC9D,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,yFAAyF;IAC3F,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE;QACR,mBAAmB;QACnB,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,uBAAuB;QACvB,qBAAqB;QACrB,cAAc;QACd,2BAA2B;QAC3B,eAAe;QACf,kBAAkB;QAClB,sBAAsB;QACtB,YAAY;QACZ,SAAS;QACT,sBAAsB;QACtB,iBAAiB;QACjB,qBAAqB;QACrB,sBAAsB;QACtB,mBAAmB;QACnB,cAAc;KACf;IACD,UAAU,EAAE;QACV,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACnD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC5C,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;SACvD;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QAC7C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC5C,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;SACvD;QACD,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QACxD,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACjD,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC;YACZ,WAAW,EACT,+IAA+I;SAClJ;QACD,yBAAyB,EAAE;YACzB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC;YAC5C,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,aAAa,EAAE;oBACb,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,6DAA6D;iBAC3E;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,GAAG;oBACV,WAAW,EACT,wLAAwL;iBAC3L;aACF;SACF;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;aAC5C;YACD,WAAW,EACT,8KAA8K;SACjL;QACD,aAAa,EAAE;YACb,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YAC/B,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,SAAS,EAAE;oBACT,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;wBAC3B,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;yBACvC;qBACF;iBACF;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,gBAAgB;gBAChB,mBAAmB;gBACnB,qBAAqB;gBACrB,mBAAmB;aACpB;YACD,UAAU,EAAE;gBACV,cAAc,EAAE;oBACd,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,oEAAoE;iBAClF;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,0EAA0E;iBACxF;gBACD,mBAAmB,EAAE;oBACnB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,6CAA6C;iBAC3D;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,6EAA6E;iBAC3F;aACF;YACD,WAAW,EACT,kJAAkJ;SACrJ;QACD,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACtD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACrD,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACtD,eAAe,EAAE;YACf,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB,CAAC;aAC5F;SACF;QACD,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;QAC5E,oBAAoB,EAAE;YACpB,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE;oBACJ,YAAY;oBACZ,gBAAgB;oBAChB,2BAA2B;oBAC3B,iBAAiB;oBACjB,eAAe;oBACf,iBAAiB;iBAClB;aACF;YACD,QAAQ,EAAE,CAAC;SACZ;QACD,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACnD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;KACtD;IACD,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,IAAI,eAAe,GAAsC,IAAI,CAAC;AAE9D,SAAS,YAAY;IACnB,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC9C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;IACjD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAsB,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACrE,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,IAAK,GAAG,CAAC,MAAuC,CAAC,eAAe,CAAC;QAC3F,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,IAAK,GAAG,CAAC,MAA0C,CAAC,kBAAkB,CAAC;QACpG,IAAI,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,OAAO;YAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7D,IAAI,UAAU;YAAE,KAAK,GAAG,UAAU,CAAC;QACnC,oEAAoE;QACpE,sEAAsE;QACtE,gEAAgE;QAChE,sEAAsE;QACtE,oEAAoE;QACpE,uBAAuB;QACvB,MAAM,oBAAoB,GAAG,YAAY,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACzE,OAAO;YACL,KAAK,EAAE,KAAK,IAAI,QAAQ;YACxB,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAC9B,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YACnD,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACrD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,8DAA8D;IAC9D,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,uDAAuD;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}

package/dist/restore-packet/types.d.ts

@@ -0,0 +1,76 @@
+/** A single user-visible message extracted from a transcript. */
+export interface ExtractedMessage {
+    /** ISO-8601 timestamp if the source provides one; else null. */
+    timestamp: string | null;
+    /** Speaker role. Restricted to user-visible roles (developer/user/assistant). */
+    role: "developer" | "user" | "assistant";
+    /** Redacted message text. */
+    text: string;
+    /** First non-empty line of the text, truncated to ~180 chars. Used in summaries. */
+    preview: string;
+}
+/** Canonical record-class enum per M1 contract § 5. */
+export type OmittedRecordClass = "reasoning_records" | "raw_tool_outputs" | "function_call_output" | "redacted_secrets";
+/**
+ * A path frequency entry from path extraction. Sorted by count
+ * descending then path ascending; used to populate `touched_files.top_paths`.
+ */
+export interface PathCount {
+    path: string;
+    count: number;
+}
+/**
+ * Per-runtime per-record-type counter. Flexible string keys because
+ * Codex JSONL uses `record.type` strings and Claude transcript uses
+ * `record.type` strings; both are runtime-defined.
+ */
+export type TypeCounts = Record<string, number>;
+/**
+ * Per-omitted-class counter. Records how many records were filtered
+ * for each of the 4 contract enums during parsing/redaction.
+ */
+export type OmittedCounts = Record<OmittedRecordClass, number>;
+/**
+ * Optional session metadata extracted from the source. Codex emits a
+ * `session_meta` record at the top of a JSONL; Claude transcripts
+ * carry per-record `cwd` etc.
+ */
+export interface SessionMeta {
+    cwd: string | null;
+    sessionId: string | null;
+    /** Free-form additional fields the runtime emitted; not load-bearing. */
+    raw?: Record<string, unknown>;
+}
+/**
+ * Structured representation produced by both parsers. The packet-writer
+ * (M2c) consumes this to assemble a v0 restore packet.
+ */
+export interface StructuredTranscript {
+    /** Top-level session metadata (cwd, sessionId). */
+    sessionMeta: SessionMeta | null;
+    /** Total source lines processed (raw JSONL line count, including malformed/skipped). */
+    lineCount: number;
+    /** Number of user-visible messages extracted into `messages`. */
+    messageCount: number;
+    /**
+     * Number of "compaction" records seen. Codex emits these explicitly
+     * (`type: "compacted"`); Claude doesn't. The field is parser-specific
+     * but always present (zero when not applicable).
+     */
+    compactedCount: number;
+    /** Per-record-type frequency map; used in human reports / debug. */
+    typeCounts: TypeCounts;
+    /** Per-omitted-class counter; populated as the parser filters records. */
+    omittedCounts: OmittedCounts;
+    /** Extracted messages in chronological order; redaction has been applied. */
+    messages: ExtractedMessage[];
+    /**
+     * Path frequency inventory; sorted by count desc then path asc.
+     * Capped at 200 entries.
+     */
+    paths: PathCount[];
+}
+/** Source-runtime kind. v0 supports codex + claude-code transcript shapes. */
+export type SourceRuntime = "codex" | "claude-code";
+export declare function emptyOmittedCounts(): OmittedCounts;
+//# sourceMappingURL=types.d.ts.map

package/dist/restore-packet/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/restore-packet/types.ts"],"names":[],"mappings":"AAOA,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iFAAiF;IACjF,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC;IACzC,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,uDAAuD;AACvD,MAAM,MAAM,kBAAkB,GAC1B,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,CAAC;AAEvB;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEhD;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,UAAU,EAAE,UAAU,CAAC;IACvB,0EAA0E;IAC1E,aAAa,EAAE,aAAa,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B;;;OAGG;IACH,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,aAAa,CAAC;AAEpD,wBAAgB,kBAAkB,IAAI,aAAa,CAOlD"}

package/dist/restore-packet/types.js

@@ -0,0 +1,15 @@
+// types.ts — shared TypeScript types for the restore-packet generator.
+//
+// Both runtime adapters (codex-jsonl-parser, claude-transcript-parser)
+// emit the same StructuredTranscript shape. Downstream modules
+// (redaction, omitted-records, packet-writer) consume this shape
+// without caring about the source runtime.
+export function emptyOmittedCounts() {
+    return {
+        reasoning_records: 0,
+        raw_tool_outputs: 0,
+        function_call_output: 0,
+        redacted_secrets: 0,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/restore-packet/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/restore-packet/types.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,uEAAuE;AACvE,+DAA+D;AAC/D,iEAAiE;AACjE,2CAA2C;AAwF3C,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,CAAC;QACnB,oBAAoB,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;KACpB,CAAC;AACJ,CAAC"}