@opentag/runner 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Amplift
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/claude-code.d.ts

@@ -0,0 +1,11 @@
+import { type CommandRunner } from "./command.js";
+import { type ExecutorAdapter } from "./executor.js";
+export type ClaudeCodeExecutorOptions = {
+    runner?: CommandRunner;
+    claudeCommand?: string;
+    model?: string;
+    permissionMode?: "acceptEdits" | "auto" | "bypassPermissions" | "default" | "plan";
+    dangerouslySkipPermissions?: boolean;
+};
+export declare function createClaudeCodeExecutor(options?: ClaudeCodeExecutorOptions): ExecutorAdapter;
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../src/claude-code.ts"],"names":[],"mappings":"AACA,OAAO,EAA6C,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAgC,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAInF,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,aAAa,GAAG,MAAM,GAAG,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;IACnF,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC,CAAC;AA8BF,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,GAAG,eAAe,CAiGjG"}

package/dist/codex.d.ts

@@ -1,9 +1,11 @@
 import { type CommandRunner } from "./command.js";
-import type { ExecutorAdapter } from "./executor.js";
+import { type ExecutorAdapter } from "./executor.js";
+import { type RunnerSecurityPolicy } from "./security.js";
 export type CodexExecutorOptions = {
     runner?: CommandRunner;
     codexCommand?: string;
     model?: string;
+    security?: RunnerSecurityPolicy;
 };
 export declare function createCodexExecutor(options?: CodexExecutorOptions): ExecutorAdapter;
 //# sourceMappingURL=codex.d.ts.map

package/dist/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../src/codex.ts"],"names":[],"mappings":"AACA,OAAO,EAA6C,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AA0BF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,eAAe,CA2FvF"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../src/codex.ts"],"names":[],"mappings":"AACA,OAAO,EAA6C,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAgC,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAYnF,OAAO,EAAoE,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE5H,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC,CAAC;AA6BF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,eAAe,CAsKvF"}

package/dist/command.d.ts

@@ -3,10 +3,12 @@ export type CommandResult = {
     stdout: string;
     stderr: string;
 };
+export type CommandEnvironment = Record<string, string | undefined>;
 export type CommandRunner = {
     run(command: string, args: string[], options?: {
         cwd?: string;
         input?: string;
+        env?: CommandEnvironment;
     }): Promise<CommandResult>;
 };
 export declare const nodeCommandRunner: CommandRunner;

package/dist/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC1G,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,aA2B/B,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhG"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACpI,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,aA4B/B,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhG"}

package/dist/echo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"echo.d.ts","sourceRoot":"","sources":["../src/echo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,wBAAgB,kBAAkB,IAAI,eAAe,CAkCpD"}
+{"version":3,"file":"echo.d.ts","sourceRoot":"","sources":["../src/echo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,wBAAgB,kBAAkB,IAAI,eAAe,CAsCpD"}

package/dist/executor.d.ts

@@ -1,4 +1,4 @@
-import type { ContextPointer, OpenTagCommand, OpenTagRunResult } from "@opentag/core";
+import { type ContextPacket, type ContextPointer, type OpenTagCommand, type OpenTagRunResult, type PermissionGrant } from "@opentag/core";
 export type ExecutorEvent = {
     type: "executor.started" | "executor.progress" | "executor.completed" | "executor.failed";
     message: string;
@@ -12,7 +12,13 @@ export type ExecutorRunInput = {
     workspacePath: string;
     command: OpenTagCommand;
     context: ContextPointer[];
+    contextPacket?: ContextPacket;
+    permissions?: PermissionGrant[];
+    baseBranch?: string;
+    worktreeRoot?: string;
+    keepWorktree?: "always" | "on_failure" | "never";
 };
+export declare function renderContextPacketForPrompt(packet?: ContextPacket): string[];
 export type ExecutorReadiness = {
     ready: boolean;
     reason?: string;

package/dist/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC,CAAC"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAE/J,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;CAClD,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,MAAM,EAAE,CAiC7E;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC,CAAC"}

package/dist/git.d.ts

@@ -11,6 +11,29 @@ export declare function createRunBranch(input: {
     runner: CommandRunner;
     workspacePath: string;
     branchName: string;
+    startPoint?: string;
+}): Promise<void>;
+export declare function worktreePathForRun(input: {
+    workspacePath: string;
+    runId: string;
+    worktreeRoot?: string;
+}): string;
+export declare function createRunWorktree(input: {
+    runner: CommandRunner;
+    workspacePath: string;
+    worktreePath: string;
+    branchName: string;
+    baseBranch: string;
+}): Promise<void>;
+export declare function removeRunWorktree(input: {
+    runner: CommandRunner;
+    workspacePath: string;
+    worktreePath: string;
+}): Promise<void>;
+export declare function deleteRunBranch(input: {
+    runner: CommandRunner;
+    workspacePath: string;
+    branchName: string;
 }): Promise<void>;
 export declare function changedFiles(input: {
     runner: CommandRunner;
@@ -20,6 +43,17 @@ export declare function cleanupInternalArtifacts(input: {
     runner: CommandRunner;
     workspacePath: string;
 }): Promise<string[]>;
+export declare function commitRunChanges(input: {
+    runner: CommandRunner;
+    workspacePath: string;
+    message: string;
+}): Promise<boolean>;
+export declare function commitChangedFiles(input: {
+    runner: CommandRunner;
+    workspacePath: string;
+    files: string[];
+    message: string;
+}): Promise<void>;
 export declare function pushBranch(input: {
     runner: CommandRunner;
     workspacePath: string;

package/dist/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAIF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,EAAE,CAUzE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAIhE;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAI7G;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBzH;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE;IACtC,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAIF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,EAAE,CAUzE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAIhE;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAIT;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhI;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAI7G;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBzH;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE;IACtC,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB"}

package/dist/index.d.ts

@@ -1,6 +1,9 @@
+export * from "./claude-code.js";
 export * from "./codex.js";
 export * from "./command.js";
 export * from "./echo.js";
 export * from "./executor.js";
 export * from "./git.js";
+export * from "./result.js";
+export * from "./security.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -1,10 +1,14 @@
+// src/claude-code.ts
+import { contextPointerLabel as contextPointerLabel2 } from "@opentag/core";
+
 // src/command.ts
 import { spawn } from "child_process";
 var nodeCommandRunner = {
   run(command, args, options = {}) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const child = spawn(command, args, {
         cwd: options.cwd,
+        env: options.env,
         stdio: ["pipe", "pipe", "pipe"]
       });
       const stdout = [];
@@ -13,7 +17,7 @@ var nodeCommandRunner = {
       child.stderr.on("data", (chunk) => stderr.push(chunk));
       child.on("error", reject);
       child.on("close", (exitCode) => {
-        resolve({
+        resolve2({
           exitCode: exitCode ?? 1,
           stdout: Buffer.concat(stdout).toString("utf8"),
           stderr: Buffer.concat(stderr).toString("utf8")
@@ -32,7 +36,40 @@ async function assertCommandSucceeded(result, label) {
   }
 }
 
+// src/executor.ts
+import { contextPointerLabel } from "@opentag/core";
+function renderContextPacketForPrompt(packet) {
+  if (!packet) return [];
+  const lines = ["OpenTag context packet:", `- summary: ${packet.summary}`];
+  if (packet.intent) {
+    lines.push(`- intent: ${packet.intent.normalizedIntent}`);
+    lines.push(`- requested by: ${packet.intent.requestedBy.provider}:${packet.intent.requestedBy.providerUserId}`);
+  }
+  if (packet.sources?.length) {
+    lines.push("- selected sources:");
+    for (const source of packet.sources) {
+      lines.push(`  - [${source.role}] ${contextPointerLabel(source.pointer)}: ${source.pointer.uri}`);
+      lines.push(`    reason: ${source.reason}`);
+    }
+  }
+  if (packet.facts?.length) {
+    lines.push("- facts:");
+    for (const fact of packet.facts) {
+      lines.push(`  - ${fact.text}`);
+    }
+  }
+  if (packet.exclusions?.length) {
+    lines.push("- exclusions:");
+    for (const exclusion of packet.exclusions) {
+      lines.push(`  - ${exclusion}`);
+    }
+  }
+  return lines;
+}
+
 // src/git.ts
+import { mkdirSync } from "fs";
+import { dirname } from "path";
 var INTERNAL_ARTIFACT_ROOTS = [".omx", ".codex", ".claude"];
 function branchNameForRun(runId) {
   const safeRunId = runId.replace(/[^a-zA-Z0-9._-]/g, "-");
@@ -51,9 +88,35 @@ function parseChangedFiles(statusOutput) {
   return parseStatusEntries(statusOutput).map((entry) => entry.path).filter((path) => !isInternalArtifactPath(path));
 }
 async function createRunBranch(input) {
-  const result = await input.runner.run("git", ["checkout", "-B", input.branchName], { cwd: input.workspacePath });
+  const result = await input.runner.run("git", ["checkout", "-B", input.branchName, ...input.startPoint ? [input.startPoint] : []], { cwd: input.workspacePath });
   await assertCommandSucceeded(result, "create run branch");
 }
+function worktreePathForRun(input) {
+  const safeRunId = input.runId.replace(/[^a-zA-Z0-9._-]/g, "-");
+  const root = input.worktreeRoot ?? `${input.workspacePath.replace(/\/$/, "")}/.worktrees/opentag`;
+  return `${root.replace(/\/$/, "")}/${safeRunId}`;
+}
+async function createRunWorktree(input) {
+  mkdirSync(dirname(input.worktreePath), { recursive: true });
+  const result = await input.runner.run(
+    "git",
+    ["worktree", "add", "-B", input.branchName, input.worktreePath, input.baseBranch],
+    { cwd: input.workspacePath }
+  );
+  await assertCommandSucceeded(result, "create run worktree");
+}
+async function removeRunWorktree(input) {
+  const result = await input.runner.run("git", ["worktree", "remove", "--force", input.worktreePath], {
+    cwd: input.workspacePath
+  });
+  await assertCommandSucceeded(result, "remove run worktree");
+}
+async function deleteRunBranch(input) {
+  const result = await input.runner.run("git", ["branch", "-D", input.branchName], {
+    cwd: input.workspacePath
+  });
+  await assertCommandSucceeded(result, "delete empty run branch");
+}
 async function changedFiles(input) {
   const result = await input.runner.run("git", ["status", "--porcelain"], { cwd: input.workspacePath });
   await assertCommandSucceeded(result, "read changed files");
@@ -74,15 +137,103 @@ async function cleanupInternalArtifacts(input) {
   await assertCommandSucceeded(cleanResult, "clean internal artifacts");
   return untrackedRoots;
 }
+async function commitRunChanges(input) {
+  const files = await changedFiles({ runner: input.runner, workspacePath: input.workspacePath });
+  if (files.length === 0) return false;
+  const addResult = await input.runner.run("git", ["add", "--", ...files], {
+    cwd: input.workspacePath
+  });
+  await assertCommandSucceeded(addResult, "stage run changes");
+  const commitResult = await input.runner.run("git", ["commit", "-m", input.message], {
+    cwd: input.workspacePath
+  });
+  await assertCommandSucceeded(commitResult, "commit run changes");
+  return true;
+}
+async function commitChangedFiles(input) {
+  if (input.files.length === 0) return;
+  const addResult = await input.runner.run("git", ["add", "--", ...input.files], { cwd: input.workspacePath });
+  await assertCommandSucceeded(addResult, "stage changed files");
+  const commitResult = await input.runner.run("git", ["commit", "-m", input.message], { cwd: input.workspacePath });
+  await assertCommandSucceeded(commitResult, "commit changed files");
+}
 async function pushBranch(input) {
   const result = await input.runner.run("git", ["push", "-u", input.remote, input.branchName], { cwd: input.workspacePath });
   await assertCommandSucceeded(result, "push run branch");
 }
 
-// src/codex.ts
+// src/result.ts
+function createExecutorRunResult(input) {
+  const proposalId = `proposal_${input.runId}`;
+  const summary = input.output.slice(-4e3);
+  const suggestedChanges = input.changedFiles.length > 0 ? [
+    {
+      proposalId,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      sourceRunId: input.runId,
+      summary: `${input.executorName} changed ${input.changedFiles.length} file(s) on branch ${input.branchName}.`,
+      intents: [
+        {
+          intentId: `${proposalId}_create_pr`,
+          domain: "pull_request",
+          action: "create_pull_request",
+          summary: `Create a pull request for branch ${input.branchName}.`,
+          params: {
+            title: `OpenTag run ${input.runId}`,
+            body: [
+              "## Summary",
+              "",
+              summary
+            ].join("\n"),
+            head: input.branchName,
+            base: input.baseBranch ?? "main",
+            changedFiles: input.changedFiles,
+            risks: ["Creates a pull request from the executor-produced branch; review the diff before merging."],
+            executorConditions: ["isolated branch exists"]
+          }
+        },
+        {
+          intentId: `${proposalId}_link_branch`,
+          domain: "artifact_links",
+          action: "link_artifact",
+          summary: `Link the run branch ${input.branchName} to the work item.`,
+          params: { title: "Run branch", uri: input.branchName }
+        },
+        {
+          intentId: `${proposalId}_request_review`,
+          domain: "review",
+          action: "request_review",
+          summary: "Request human review of the generated code changes.",
+          params: { changedFiles: input.changedFiles }
+        }
+      ],
+      preconditions: ["The local branch was generated from the checkout state available to the runner."]
+    }
+  ] : void 0;
+  return {
+    conclusion: "success",
+    summary,
+    changedFiles: input.changedFiles,
+    artifacts: [
+      ...input.changedFiles.length > 0 ? [{ kind: "patch", title: "Run branch", uri: input.branchName }] : [],
+      ...input.extraArtifacts ?? []
+    ],
+    ...suggestedChanges ? { suggestedChanges } : {},
+    nextAction: input.changedFiles.length > 0 ? {
+      summary: "Review the proposed pull request action and reply `apply 1` if the branch should become a PR.",
+      hint: {
+        kind: "create_pull_request",
+        targetId: proposalId,
+        selectedIntentIds: [`${proposalId}_create_pr`]
+      }
+    } : "No file changes were detected."
+  };
+}
+
+// src/claude-code.ts
 function contextLines(context) {
   if (!context.length) return "No additional context pointers were provided.";
-  return context.map((pointer) => `- ${pointer.kind}: ${pointer.uri}`).join("\n");
+  return context.map((pointer) => `- ${contextPointerLabel2(pointer)}: ${pointer.uri}`).join("\n");
 }
 function buildPrompt(input) {
   return [
@@ -92,29 +243,36 @@ function buildPrompt(input) {
     "User request:",
     input.rawText,
     "",
+    ...renderContextPacketForPrompt(input.contextPacket),
+    ...input.contextPacket ? [""] : [],
     "Context pointers:",
     contextLines(input.context),
     "",
-    "Work autonomously but keep the change narrow. Run relevant verification if you modify files. End with a concise summary."
+    "Work autonomously but keep the change narrow. Run relevant verification if you modify files.",
+    "End with a concise summary of what changed, what was verified, and the recommended next action."
   ].join("\n");
 }
-function createCodexExecutor(options = {}) {
+function createClaudeCodeExecutor(options = {}) {
   const runner = options.runner ?? nodeCommandRunner;
-  const codexCommand = options.codexCommand ?? "codex";
+  const claudeCommand = options.claudeCommand ?? "claude";
   return {
-    id: "codex",
-    displayName: "Codex Executor",
+    id: "claude-code",
+    displayName: "Claude Code Executor",
     async canRun(input) {
-      const codexVersion = await runner.run(codexCommand, ["--version"], { cwd: input.workspacePath });
-      if (codexVersion.exitCode !== 0) {
-        return { ready: false, reason: `Codex CLI is not available: ${codexVersion.stderr || codexVersion.stdout}` };
+      try {
+        const claudeVersion = await runner.run(claudeCommand, ["--version"], { cwd: input.workspacePath });
+        if (claudeVersion.exitCode !== 0) {
+          return { ready: false, reason: `Claude Code CLI is not available: ${claudeVersion.stderr || claudeVersion.stdout}` };
+        }
+      } catch (error) {
+        return { ready: false, reason: `Claude Code CLI is not available: ${error instanceof Error ? error.message : String(error)}` };
       }
       const gitStatus = await runner.run("git", ["status", "--porcelain"], { cwd: input.workspacePath });
       if (gitStatus.exitCode !== 0) {
         return { ready: false, reason: `Workspace is not a git checkout: ${gitStatus.stderr || gitStatus.stdout}` };
       }
       if (gitStatus.stdout.trim().length > 0) {
-        return { ready: false, reason: "Workspace has uncommitted changes; refusing to run Codex executor." };
+        return { ready: false, reason: "Workspace has uncommitted changes; refusing to run Claude Code executor." };
       }
       return { ready: true };
     },
@@ -125,30 +283,38 @@ function createCodexExecutor(options = {}) {
         message: `Creating isolated branch ${branchName}`,
         at: (/* @__PURE__ */ new Date()).toISOString()
       });
-      await createRunBranch({ runner, workspacePath: input.workspacePath, branchName });
+      await createRunBranch({
+        runner,
+        workspacePath: input.workspacePath,
+        branchName,
+        ...input.baseBranch ? { startPoint: input.baseBranch } : {}
+      });
       await sink.emit({
         type: "executor.progress",
-        message: "Starting codex exec",
+        message: "Starting claude --print",
         at: (/* @__PURE__ */ new Date()).toISOString()
       });
       const args = [
-        "exec",
-        "--cd",
-        input.workspacePath,
-        "--full-auto",
-        "--ephemeral",
+        "--print",
+        "--input-format",
+        "text",
+        "--output-format",
+        "text",
+        "--no-session-persistence",
         ...options.model ? ["--model", options.model] : [],
-        "-"
+        ...options.permissionMode ? ["--permission-mode", options.permissionMode] : [],
+        ...options.dangerouslySkipPermissions ? ["--dangerously-skip-permissions"] : []
       ];
-      const codexResult = await runner.run(codexCommand, args, {
+      const claudeResult = await runner.run(claudeCommand, args, {
         cwd: input.workspacePath,
         input: buildPrompt({
           runId: input.runId,
           rawText: input.command.rawText,
-          context: input.context
+          context: input.context,
+          contextPacket: input.contextPacket
         })
       });
-      await assertCommandSucceeded(codexResult, "codex exec");
+      await assertCommandSucceeded(claudeResult, "claude --print");
       const cleanedArtifacts = await cleanupInternalArtifacts({ runner, workspacePath: input.workspacePath });
       if (cleanedArtifacts.length > 0) {
         await sink.emit({
@@ -160,24 +326,396 @@ function createCodexExecutor(options = {}) {
       const files = await changedFiles({ runner, workspacePath: input.workspacePath });
       await sink.emit({
         type: "executor.completed",
-        message: `Codex executor completed with ${files.length} changed file(s)`,
+        message: `Claude Code executor completed with ${files.length} changed file(s)`,
         at: (/* @__PURE__ */ new Date()).toISOString()
       });
-      const output = codexResult.stdout.trim() || codexResult.stderr.trim() || "Codex completed without textual output.";
-      return {
-        conclusion: "success",
-        summary: output.slice(-4e3),
-        changedFiles: files,
-        artifacts: [{ title: "Run branch", uri: branchName }],
-        verification: [
-          {
-            command: "codex exec",
-            outcome: "passed",
-            excerpt: output.slice(-1e3)
+      const output = claudeResult.stdout.trim() || claudeResult.stderr.trim() || "Claude Code completed without textual output.";
+      return createExecutorRunResult({
+        executorName: "Claude Code",
+        runId: input.runId,
+        branchName,
+        ...input.baseBranch ? { baseBranch: input.baseBranch } : {},
+        output,
+        changedFiles: files
+      });
+    },
+    async cancel() {
+      return;
+    }
+  };
+}
+
+// src/codex.ts
+import { contextPointerLabel as contextPointerLabel3 } from "@opentag/core";
+
+// src/security.ts
+import { fileURLToPath } from "url";
+import { isAbsolute, relative, resolve } from "path";
+var DEFAULT_SAFE_ENV_NAMES = [
+  "CI",
+  "COLORTERM",
+  "CODEX_HOME",
+  "FORCE_COLOR",
+  "HOME",
+  "LANG",
+  "LOGNAME",
+  "NO_COLOR",
+  "PATH",
+  "PWD",
+  "SHELL",
+  "SSL_CERT_DIR",
+  "SSL_CERT_FILE",
+  "TERM",
+  "TMP",
+  "TMPDIR",
+  "TEMP",
+  "USER",
+  "XDG_CACHE_HOME",
+  "XDG_CONFIG_HOME",
+  "XDG_DATA_HOME"
+];
+var SAFE_ENV_PREFIXES = ["LC_"];
+var SENSITIVE_ENV_PATTERNS = [
+  /TOKEN/,
+  /SECRET/,
+  /PASSWORD/,
+  /PASS$/,
+  /API[_-]?KEY/,
+  /CREDENTIAL/,
+  /COOKIE/,
+  /SESSION/,
+  /AUTH/,
+  /^AWS_/,
+  /^AZURE_/,
+  /^GCP_/,
+  /^GOOGLE_/,
+  /^OPENAI_/,
+  /^ANTHROPIC_/,
+  /^SLACK_/,
+  /^GITHUB_TOKEN$/,
+  /^GH_TOKEN$/,
+  /^SSH_/
+];
+var HIGH_RISK_TEXT_PATTERNS = [
+  {
+    code: "prompt.instruction_override",
+    pattern: /\b(ignore|disregard|forget)\s+(all\s+)?(previous|prior|system|developer|safety)\s+instructions\b/i,
+    message: "Request contains an instruction override pattern commonly used in prompt injection."
+  },
+  {
+    code: "prompt.secret_exfiltration",
+    pattern: /\b(print|dump|show|reveal|exfiltrate|send|upload|post|copy)\b[\s\S]{0,100}\b(secret|token|password|api[\s_-]?key|credential|environment variables?|env vars?)\b/i,
+    message: "Request appears to ask the runner to expose secrets or environment variables."
+  },
+  {
+    code: "prompt.sensitive_file_access",
+    pattern: /\b(cat|open|read|print|dump)\b[\s\S]{0,80}(~\/\.ssh|~\/\.aws|\.env\b|id_rsa|known_hosts|credentials\b)/i,
+    message: "Request appears to ask the runner to read sensitive local credential files."
+  }
+];
+function securityMode(policy) {
+  return policy?.mode ?? "enforce";
+}
+function isPathInside(childPath, parentPath) {
+  const child = resolve(childPath);
+  const parent = resolve(parentPath);
+  const pathFromParent = relative(parent, child);
+  return pathFromParent === "" || !pathFromParent.startsWith("..") && !isAbsolute(pathFromParent);
+}
+function fileContextPath(pointer, workspacePath) {
+  if (pointer.kind !== "file") return null;
+  if (pointer.uri.startsWith("file://")) {
+    return fileURLToPath(pointer.uri);
+  }
+  if (isAbsolute(pointer.uri)) {
+    return pointer.uri;
+  }
+  return resolve(workspacePath, pointer.uri);
+}
+function hasPermission(permissions, scope) {
+  return permissions?.some((permission) => permission.scope === scope) ?? false;
+}
+function needsWritePermission(command, executorId) {
+  if (executorId === "echo") return false;
+  return command.intent === "fix" || command.intent === "run";
+}
+function scanTextForHighRiskPatterns(input) {
+  const sources = [
+    { label: "command", text: input.command.rawText },
+    ...input.context.filter((pointer) => pointer.kind === "text").map((pointer) => ({ label: pointer.title ?? "text context", text: pointer.uri }))
+  ];
+  const findings = [];
+  for (const source of sources) {
+    for (const rule of HIGH_RISK_TEXT_PATTERNS) {
+      if (rule.pattern.test(source.text)) {
+        findings.push({
+          code: rule.code,
+          severity: "block",
+          message: `${rule.message} Source: ${source.label}.`
+        });
+      }
+    }
+  }
+  return findings;
+}
+function assessRunnerSecurity(input) {
+  const mode = securityMode(input.policy);
+  if (mode === "off") {
+    return { allowed: true, mode, findings: [] };
+  }
+  const findings = [];
+  if (!isAbsolute(input.workspacePath)) {
+    findings.push({
+      code: "workspace.relative_path",
+      severity: "block",
+      message: "Workspace path must be absolute before a local executor can run."
+    });
+  }
+  const workspacePath = resolve(input.workspacePath);
+  const executionPath = resolve(input.executionPath ?? input.workspacePath);
+  if (input.policy?.allowedWorkspaceRoot && !isPathInside(workspacePath, input.policy.allowedWorkspaceRoot)) {
+    findings.push({
+      code: "workspace.outside_allowed_root",
+      severity: "block",
+      message: "Workspace path is outside the configured allowed workspace root."
+    });
+  }
+  if (input.policy?.allowedWorkspaceRoot && !isPathInside(executionPath, input.policy.allowedWorkspaceRoot)) {
+    findings.push({
+      code: "execution.outside_allowed_root",
+      severity: "block",
+      message: "Execution path is outside the configured allowed workspace root."
+    });
+  }
+  for (const pointer of input.context) {
+    const filePath = fileContextPath(pointer, workspacePath);
+    if (filePath && !isPathInside(filePath, workspacePath)) {
+      findings.push({
+        code: "context.file_outside_workspace",
+        severity: "block",
+        message: `File context is outside the mapped workspace: ${pointer.uri}`
+      });
+    }
+  }
+  if (needsWritePermission(input.command, input.executorId) && !hasPermission(input.permissions, "repo:write")) {
+    findings.push({
+      code: "permission.repo_write_required",
+      severity: "block",
+      message: "Write-capable commands require an explicit repo:write permission grant."
+    });
+  }
+  if (!input.policy?.allowUnsafePrompts) {
+    findings.push(...scanTextForHighRiskPatterns({ command: input.command, context: input.context }));
+  }
+  const hasBlockingFinding = findings.some((finding) => finding.severity === "block");
+  return {
+    allowed: mode === "audit" || !hasBlockingFinding,
+    mode,
+    findings
+  };
+}
+function isSensitiveEnvName(name) {
+  const upperName = name.toUpperCase();
+  return SENSITIVE_ENV_PATTERNS.some((pattern) => pattern.test(upperName));
+}
+function isSafeEnvName(name, policy) {
+  const upperName = name.toUpperCase();
+  const safeNames = new Set([...DEFAULT_SAFE_ENV_NAMES, ...policy?.extraSafeEnv ?? []].map((envName) => envName.toUpperCase()));
+  return safeNames.has(upperName) || SAFE_ENV_PREFIXES.some((prefix) => upperName.startsWith(prefix));
+}
+function scrubEnvironment(env = process.env, policy) {
+  if (securityMode(policy) === "off") return { ...env };
+  const scrubbed = {};
+  for (const [name, value] of Object.entries(env)) {
+    if (typeof value !== "string") continue;
+    if (isSensitiveEnvName(name)) continue;
+    if (!isSafeEnvName(name, policy)) continue;
+    scrubbed[name] = value;
+  }
+  return scrubbed;
+}
+function formatSecurityAssessment(assessment) {
+  if (assessment.findings.length === 0) {
+    return `OpenTag runner security assessment passed in ${assessment.mode} mode.`;
+  }
+  const prefix = assessment.allowed ? `OpenTag runner security assessment reported ${assessment.findings.length} finding(s) in ${assessment.mode} mode.` : "OpenTag runner security blocked this run.";
+  const details = assessment.findings.map((finding) => `${finding.code}: ${finding.message}`).join(" ");
+  return `${prefix} ${details}`;
+}
+
+// src/codex.ts
+function contextLines2(context) {
+  if (!context.length) return "No additional context pointers were provided.";
+  return context.map((pointer) => `- ${contextPointerLabel3(pointer)}: ${pointer.uri}`).join("\n");
+}
+function buildPrompt2(input) {
+  return [
+    "You are executing an OpenTag run in a local checkout.",
+    `Run ID: ${input.runId}`,
+    "",
+    "User request:",
+    input.rawText,
+    "",
+    ...renderContextPacketForPrompt(input.contextPacket),
+    ...input.contextPacket ? [""] : [],
+    "Context pointers:",
+    contextLines2(input.context),
+    "",
+    "Work autonomously but keep the change narrow. Run relevant verification if you modify files. End with a concise summary."
+  ].join("\n");
+}
+function createCodexExecutor(options = {}) {
+  const runner = options.runner ?? nodeCommandRunner;
+  const codexCommand = options.codexCommand ?? "codex";
+  return {
+    id: "codex",
+    displayName: "Codex Executor",
+    async canRun(input) {
+      const codexVersion = await runner.run(codexCommand, ["--version"], { cwd: input.workspacePath });
+      if (codexVersion.exitCode !== 0) {
+        return { ready: false, reason: `Codex CLI is not available: ${codexVersion.stderr || codexVersion.stdout}` };
+      }
+      const gitRepo = await runner.run("git", ["rev-parse", "--show-toplevel"], { cwd: input.workspacePath });
+      if (gitRepo.exitCode !== 0) {
+        return { ready: false, reason: `Workspace is not a git checkout: ${gitRepo.stderr || gitRepo.stdout}` };
+      }
+      const baseBranch = input.baseBranch ?? "main";
+      const baseRef = await runner.run("git", ["rev-parse", "--verify", `${baseBranch}^{commit}`], {
+        cwd: input.workspacePath
+      });
+      if (baseRef.exitCode !== 0) {
+        return { ready: false, reason: `Base branch '${baseBranch}' is not available: ${baseRef.stderr || baseRef.stdout}` };
+      }
+      return { ready: true };
+    },
+    async run(input, sink) {
+      const security = options.security;
+      const worktreePath = worktreePathForRun({
+        workspacePath: input.workspacePath,
+        runId: input.runId,
+        ...input.worktreeRoot ? { worktreeRoot: input.worktreeRoot } : {}
+      });
+      const assessment = assessRunnerSecurity({
+        executorId: "codex",
+        workspacePath: input.workspacePath,
+        executionPath: worktreePath,
+        command: input.command,
+        context: input.context,
+        ...input.permissions ? { permissions: input.permissions } : {},
+        ...security ? { policy: security } : {}
+      });
+      if (assessment.findings.length > 0) {
+        await sink.emit({
+          type: assessment.allowed ? "executor.progress" : "executor.failed",
+          message: formatSecurityAssessment(assessment),
+          at: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      }
+      if (!assessment.allowed) {
+        return {
+          conclusion: "needs_human",
+          summary: formatSecurityAssessment(assessment),
+          nextAction: "Review the request and rerun with a narrower prompt or an explicit local policy override if appropriate."
+        };
+      }
+      const branchName = branchNameForRun(input.runId);
+      const baseBranch = input.baseBranch ?? "main";
+      const keepWorktree = input.keepWorktree ?? "on_failure";
+      let completed = false;
+      let changedFileCount;
+      await sink.emit({
+        type: "executor.started",
+        message: `Creating isolated worktree ${worktreePath} on ${branchName}`,
+        at: (/* @__PURE__ */ new Date()).toISOString()
+      });
+      try {
+        await createRunWorktree({
+          runner,
+          workspacePath: input.workspacePath,
+          worktreePath,
+          branchName,
+          baseBranch
+        });
+        await sink.emit({
+          type: "executor.progress",
+          message: "Starting codex exec",
+          at: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        const args = [
+          "exec",
+          "--cd",
+          worktreePath,
+          "--full-auto",
+          "--ephemeral",
+          ...options.model ? ["--model", options.model] : [],
+          "-"
+        ];
+        const codexResult = await runner.run(codexCommand, args, {
+          cwd: worktreePath,
+          env: scrubEnvironment(void 0, security),
+          input: buildPrompt2({
+            runId: input.runId,
+            rawText: input.command.rawText,
+            context: input.context,
+            contextPacket: input.contextPacket
+          })
+        });
+        await assertCommandSucceeded(codexResult, "codex exec");
+        const cleanedArtifacts = await cleanupInternalArtifacts({ runner, workspacePath: worktreePath });
+        if (cleanedArtifacts.length > 0) {
+          await sink.emit({
+            type: "executor.progress",
+            message: `Cleaned internal artifacts: ${cleanedArtifacts.join(", ")}`,
+            at: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        }
+        const files = await changedFiles({ runner, workspacePath: worktreePath });
+        changedFileCount = files.length;
+        if (files.length > 0) {
+          await sink.emit({
+            type: "executor.progress",
+            message: `Committing ${files.length} changed file(s) to ${branchName}`,
+            at: (/* @__PURE__ */ new Date()).toISOString()
+          });
+          await commitRunChanges({
+            runner,
+            workspacePath: worktreePath,
+            message: `OpenTag run ${input.runId}`
+          });
+        }
+        completed = true;
+        await sink.emit({
+          type: "executor.completed",
+          message: `Codex executor completed with ${files.length} changed file(s)`,
+          at: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        const output = codexResult.stdout.trim() || codexResult.stderr.trim() || "Codex completed without textual output.";
+        return createExecutorRunResult({
+          executorName: "Codex",
+          runId: input.runId,
+          branchName,
+          ...input.baseBranch ? { baseBranch: input.baseBranch } : {},
+          output,
+          changedFiles: files,
+          extraArtifacts: keepWorktree === "always" ? [{ title: "Run worktree", uri: worktreePath }] : []
+        });
+      } finally {
+        const shouldRemove = keepWorktree === "never" || keepWorktree === "on_failure" && completed;
+        if (shouldRemove) {
+          try {
+            await removeRunWorktree({ runner, workspacePath: input.workspacePath, worktreePath });
+            if (completed && changedFileCount === 0) {
+              await deleteRunBranch({ runner, workspacePath: input.workspacePath, branchName });
+            }
+          } catch (error) {
+            await sink.emit({
+              type: "executor.progress",
+              message: `Could not clean up run worktree or branch for ${worktreePath}: ${error instanceof Error ? error.message : String(error)}`,
+              at: (/* @__PURE__ */ new Date()).toISOString()
+            });
           }
-        ],
-        nextAction: files.length > 0 ? "Review the local branch and create a pull request." : "No file changes were detected."
-      };
+        }
+      }
     },
     async cancel() {
       return;
@@ -216,7 +754,11 @@ function createEchoExecutor() {
             outcome: "passed",
             excerpt: input.command.rawText
           }
-        ]
+        ],
+        nextAction: {
+          summary: "No external state change is suggested for the echo executor result.",
+          hint: { kind: "none" }
+        }
       };
     },
     async cancel() {
@@ -225,17 +767,30 @@ function createEchoExecutor() {
   };
 }
 export {
+  DEFAULT_SAFE_ENV_NAMES,
   assertCommandSucceeded,
+  assessRunnerSecurity,
   branchNameForRun,
   changedFiles,
   cleanupInternalArtifacts,
+  commitChangedFiles,
+  commitRunChanges,
+  createClaudeCodeExecutor,
   createCodexExecutor,
   createEchoExecutor,
+  createExecutorRunResult,
   createRunBranch,
+  createRunWorktree,
+  deleteRunBranch,
+  formatSecurityAssessment,
   isInternalArtifactPath,
   nodeCommandRunner,
   parseChangedFiles,
   parseStatusEntries,
-  pushBranch
+  pushBranch,
+  removeRunWorktree,
+  renderContextPacketForPrompt,
+  scrubEnvironment,
+  worktreePathForRun
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/command.ts","../src/git.ts","../src/codex.ts","../src/echo.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\n\nexport type CommandResult = {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n};\n\nexport type CommandRunner = {\n  run(command: string, args: string[], options?: { cwd?: string; input?: string }): Promise<CommandResult>;\n};\n\nexport const nodeCommandRunner: CommandRunner = {\n  run(command, args, options = {}) {\n    return new Promise((resolve, reject) => {\n      const child = spawn(command, args, {\n        cwd: options.cwd,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"]\n      });\n      const stdout: Buffer[] = [];\n      const stderr: Buffer[] = [];\n\n      child.stdout.on(\"data\", (chunk: Buffer) => stdout.push(chunk));\n      child.stderr.on(\"data\", (chunk: Buffer) => stderr.push(chunk));\n      child.on(\"error\", reject);\n      child.on(\"close\", (exitCode) => {\n        resolve({\n          exitCode: exitCode ?? 1,\n          stdout: Buffer.concat(stdout).toString(\"utf8\"),\n          stderr: Buffer.concat(stderr).toString(\"utf8\")\n        });\n      });\n\n      if (options.input) {\n        child.stdin.write(options.input);\n      }\n      child.stdin.end();\n    });\n  }\n};\n\nexport async function assertCommandSucceeded(result: CommandResult, label: string): Promise<void> {\n  if (result.exitCode !== 0) {\n    throw new Error(`${label} failed with exit code ${result.exitCode}: ${result.stderr || result.stdout}`);\n  }\n}\n","import type { CommandRunner } from \"./command.js\";\nimport { assertCommandSucceeded } from \"./command.js\";\n\nexport type GitStatusEntry = {\n  status: string;\n  path: string;\n};\n\nconst INTERNAL_ARTIFACT_ROOTS = [\".omx\", \".codex\", \".claude\"];\n\nexport function branchNameForRun(runId: string): string {\n  const safeRunId = runId.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n  return `opentag/${safeRunId}`;\n}\n\nexport function parseStatusEntries(statusOutput: string): GitStatusEntry[] {\n  return statusOutput\n    .split(\"\\n\")\n    .map((line) => line.replace(/\\r$/, \"\"))\n    .filter(Boolean)\n    .map((line) => ({\n      status: line.slice(0, 2),\n      path: line.slice(3).trim()\n    }))\n    .filter((entry) => entry.path.length > 0);\n}\n\nexport function isInternalArtifactPath(path: string): boolean {\n  return INTERNAL_ARTIFACT_ROOTS.some((root) => path === root || path.startsWith(`${root}/`));\n}\n\nexport function parseChangedFiles(statusOutput: string): string[] {\n  return parseStatusEntries(statusOutput)\n    .map((entry) => entry.path)\n    .filter((path) => !isInternalArtifactPath(path));\n}\n\nexport async function createRunBranch(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  branchName: string;\n}): Promise<void> {\n  const result = await input.runner.run(\"git\", [\"checkout\", \"-B\", input.branchName], { cwd: input.workspacePath });\n  await assertCommandSucceeded(result, \"create run branch\");\n}\n\nexport async function changedFiles(input: { runner: CommandRunner; workspacePath: string }): Promise<string[]> {\n  const result = await input.runner.run(\"git\", [\"status\", \"--porcelain\"], { cwd: input.workspacePath });\n  await assertCommandSucceeded(result, \"read changed files\");\n  return parseChangedFiles(result.stdout);\n}\n\nexport async function cleanupInternalArtifacts(input: { runner: CommandRunner; workspacePath: string }): Promise<string[]> {\n  const statusResult = await input.runner.run(\"git\", [\"status\", \"--porcelain\"], { cwd: input.workspacePath });\n  await assertCommandSucceeded(statusResult, \"scan internal artifacts\");\n  const untrackedRoots = Array.from(\n    new Set(\n      parseStatusEntries(statusResult.stdout)\n        .filter((entry) => entry.status === \"??\" && isInternalArtifactPath(entry.path))\n        .map((entry) => entry.path.split(\"/\", 1)[0] ?? entry.path)\n    )\n  );\n  if (untrackedRoots.length === 0) return [];\n\n  const cleanResult = await input.runner.run(\"git\", [\"clean\", \"-fd\", \"--\", ...untrackedRoots], {\n    cwd: input.workspacePath\n  });\n  await assertCommandSucceeded(cleanResult, \"clean internal artifacts\");\n  return untrackedRoots;\n}\n\nexport async function pushBranch(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  remote: string;\n  branchName: string;\n}): Promise<void> {\n  const result = await input.runner.run(\"git\", [\"push\", \"-u\", input.remote, input.branchName], { cwd: input.workspacePath });\n  await assertCommandSucceeded(result, \"push run branch\");\n}\n","import type { ContextPointer } from \"@opentag/core\";\nimport { assertCommandSucceeded, nodeCommandRunner, type CommandRunner } from \"./command.js\";\nimport type { ExecutorAdapter } from \"./executor.js\";\nimport { branchNameForRun, changedFiles, cleanupInternalArtifacts, createRunBranch } from \"./git.js\";\n\nexport type CodexExecutorOptions = {\n  runner?: CommandRunner;\n  codexCommand?: string;\n  model?: string;\n};\n\nfunction contextLines(context: ContextPointer[]): string {\n  if (!context.length) return \"No additional context pointers were provided.\";\n  return context.map((pointer) => `- ${pointer.kind}: ${pointer.uri}`).join(\"\\n\");\n}\n\nfunction buildPrompt(input: {\n  runId: string;\n  rawText: string;\n  context: ContextPointer[];\n}): string {\n  return [\n    \"You are executing an OpenTag run in a local checkout.\",\n    `Run ID: ${input.runId}`,\n    \"\",\n    \"User request:\",\n    input.rawText,\n    \"\",\n    \"Context pointers:\",\n    contextLines(input.context),\n    \"\",\n    \"Work autonomously but keep the change narrow. Run relevant verification if you modify files. End with a concise summary.\"\n  ].join(\"\\n\");\n}\n\nexport function createCodexExecutor(options: CodexExecutorOptions = {}): ExecutorAdapter {\n  const runner = options.runner ?? nodeCommandRunner;\n  const codexCommand = options.codexCommand ?? \"codex\";\n\n  return {\n    id: \"codex\",\n    displayName: \"Codex Executor\",\n    async canRun(input) {\n      const codexVersion = await runner.run(codexCommand, [\"--version\"], { cwd: input.workspacePath });\n      if (codexVersion.exitCode !== 0) {\n        return { ready: false, reason: `Codex CLI is not available: ${codexVersion.stderr || codexVersion.stdout}` };\n      }\n      const gitStatus = await runner.run(\"git\", [\"status\", \"--porcelain\"], { cwd: input.workspacePath });\n      if (gitStatus.exitCode !== 0) {\n        return { ready: false, reason: `Workspace is not a git checkout: ${gitStatus.stderr || gitStatus.stdout}` };\n      }\n      if (gitStatus.stdout.trim().length > 0) {\n        return { ready: false, reason: \"Workspace has uncommitted changes; refusing to run Codex executor.\" };\n      }\n      return { ready: true };\n    },\n    async run(input, sink) {\n      const branchName = branchNameForRun(input.runId);\n      await sink.emit({\n        type: \"executor.started\",\n        message: `Creating isolated branch ${branchName}`,\n        at: new Date().toISOString()\n      });\n      await createRunBranch({ runner, workspacePath: input.workspacePath, branchName });\n\n      await sink.emit({\n        type: \"executor.progress\",\n        message: \"Starting codex exec\",\n        at: new Date().toISOString()\n      });\n\n      const args = [\n        \"exec\",\n        \"--cd\",\n        input.workspacePath,\n        \"--full-auto\",\n        \"--ephemeral\",\n        ...(options.model ? [\"--model\", options.model] : []),\n        \"-\"\n      ];\n      const codexResult = await runner.run(codexCommand, args, {\n        cwd: input.workspacePath,\n        input: buildPrompt({\n          runId: input.runId,\n          rawText: input.command.rawText,\n          context: input.context\n        })\n      });\n      await assertCommandSucceeded(codexResult, \"codex exec\");\n\n      const cleanedArtifacts = await cleanupInternalArtifacts({ runner, workspacePath: input.workspacePath });\n      if (cleanedArtifacts.length > 0) {\n        await sink.emit({\n          type: \"executor.progress\",\n          message: `Cleaned internal artifacts: ${cleanedArtifacts.join(\", \")}`,\n          at: new Date().toISOString()\n        });\n      }\n\n      const files = await changedFiles({ runner, workspacePath: input.workspacePath });\n      await sink.emit({\n        type: \"executor.completed\",\n        message: `Codex executor completed with ${files.length} changed file(s)`,\n        at: new Date().toISOString()\n      });\n\n      const output = codexResult.stdout.trim() || codexResult.stderr.trim() || \"Codex completed without textual output.\";\n      return {\n        conclusion: \"success\",\n        summary: output.slice(-4000),\n        changedFiles: files,\n        artifacts: [{ title: \"Run branch\", uri: branchName }],\n        verification: [\n          {\n            command: \"codex exec\",\n            outcome: \"passed\",\n            excerpt: output.slice(-1000)\n          }\n        ],\n        nextAction: files.length > 0 ? \"Review the local branch and create a pull request.\" : \"No file changes were detected.\"\n      };\n    },\n    async cancel() {\n      return;\n    }\n  };\n}\n","import type { ExecutorAdapter } from \"./executor.js\";\n\nfunction nowIso(): string {\n  return new Date().toISOString();\n}\n\nexport function createEchoExecutor(): ExecutorAdapter {\n  return {\n    id: \"echo\",\n    displayName: \"Echo Executor\",\n    async canRun() {\n      return { ready: true };\n    },\n    async run(input, sink) {\n      await sink.emit({\n        type: \"executor.started\",\n        message: `Echo executor started for ${input.runId}`,\n        at: nowIso()\n      });\n      await sink.emit({\n        type: \"executor.completed\",\n        message: `Echo executor completed for ${input.runId}`,\n        at: nowIso()\n      });\n      return {\n        conclusion: \"success\",\n        summary: `Echoed OpenTag command: ${input.command.rawText}`,\n        verification: [\n          {\n            command: \"echo\",\n            outcome: \"passed\",\n            excerpt: input.command.rawText\n          }\n        ]\n      };\n    },\n    async cancel() {\n      return;\n    }\n  };\n}\n"],"mappings":";AAAA,SAAS,aAAa;AAYf,IAAM,oBAAmC;AAAA,EAC9C,IAAI,SAAS,MAAM,UAAU,CAAC,GAAG;AAC/B,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,QAAQ,MAAM,SAAS,MAAM;AAAA,QACjC,KAAK,QAAQ;AAAA,QACb,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAChC,CAAC;AACD,YAAM,SAAmB,CAAC;AAC1B,YAAM,SAAmB,CAAC;AAE1B,YAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AAC7D,YAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AAC7D,YAAM,GAAG,SAAS,MAAM;AACxB,YAAM,GAAG,SAAS,CAAC,aAAa;AAC9B,gBAAQ;AAAA,UACN,UAAU,YAAY;AAAA,UACtB,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAAA,UAC7C,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAAA,QAC/C,CAAC;AAAA,MACH,CAAC;AAED,UAAI,QAAQ,OAAO;AACjB,cAAM,MAAM,MAAM,QAAQ,KAAK;AAAA,MACjC;AACA,YAAM,MAAM,IAAI;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,uBAAuB,QAAuB,OAA8B;AAChG,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,MAAM,GAAG,KAAK,0BAA0B,OAAO,QAAQ,KAAK,OAAO,UAAU,OAAO,MAAM,EAAE;AAAA,EACxG;AACF;;;ACrCA,IAAM,0BAA0B,CAAC,QAAQ,UAAU,SAAS;AAErD,SAAS,iBAAiB,OAAuB;AACtD,QAAM,YAAY,MAAM,QAAQ,oBAAoB,GAAG;AACvD,SAAO,WAAW,SAAS;AAC7B;AAEO,SAAS,mBAAmB,cAAwC;AACzE,SAAO,aACJ,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,QAAQ,OAAO,EAAE,CAAC,EACrC,OAAO,OAAO,EACd,IAAI,CAAC,UAAU;AAAA,IACd,QAAQ,KAAK,MAAM,GAAG,CAAC;AAAA,IACvB,MAAM,KAAK,MAAM,CAAC,EAAE,KAAK;AAAA,EAC3B,EAAE,EACD,OAAO,CAAC,UAAU,MAAM,KAAK,SAAS,CAAC;AAC5C;AAEO,SAAS,uBAAuB,MAAuB;AAC5D,SAAO,wBAAwB,KAAK,CAAC,SAAS,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,CAAC;AAC5F;AAEO,SAAS,kBAAkB,cAAgC;AAChE,SAAO,mBAAmB,YAAY,EACnC,IAAI,CAAC,UAAU,MAAM,IAAI,EACzB,OAAO,CAAC,SAAS,CAAC,uBAAuB,IAAI,CAAC;AACnD;AAEA,eAAsB,gBAAgB,OAIpB;AAChB,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,MAAM,MAAM,UAAU,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAC/G,QAAM,uBAAuB,QAAQ,mBAAmB;AAC1D;AAEA,eAAsB,aAAa,OAA4E;AAC7G,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,aAAa,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACpG,QAAM,uBAAuB,QAAQ,oBAAoB;AACzD,SAAO,kBAAkB,OAAO,MAAM;AACxC;AAEA,eAAsB,yBAAyB,OAA4E;AACzH,QAAM,eAAe,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,aAAa,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAC1G,QAAM,uBAAuB,cAAc,yBAAyB;AACpE,QAAM,iBAAiB,MAAM;AAAA,IAC3B,IAAI;AAAA,MACF,mBAAmB,aAAa,MAAM,EACnC,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ,uBAAuB,MAAM,IAAI,CAAC,EAC7E,IAAI,CAAC,UAAU,MAAM,KAAK,MAAM,KAAK,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI;AAAA,IAC7D;AAAA,EACF;AACA,MAAI,eAAe,WAAW,EAAG,QAAO,CAAC;AAEzC,QAAM,cAAc,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,SAAS,OAAO,MAAM,GAAG,cAAc,GAAG;AAAA,IAC3F,KAAK,MAAM;AAAA,EACb,CAAC;AACD,QAAM,uBAAuB,aAAa,0BAA0B;AACpE,SAAO;AACT;AAEA,eAAsB,WAAW,OAKf;AAChB,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,MAAM,MAAM,QAAQ,MAAM,UAAU,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACzH,QAAM,uBAAuB,QAAQ,iBAAiB;AACxD;;;ACpEA,SAAS,aAAa,SAAmC;AACvD,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,QAAQ,GAAG,EAAE,EAAE,KAAK,IAAI;AAChF;AAEA,SAAS,YAAY,OAIV;AACT,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM,KAAK;AAAA,IACtB;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,aAAa,MAAM,OAAO;AAAA,IAC1B;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,oBAAoB,UAAgC,CAAC,GAAoB;AACvF,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,eAAe,QAAQ,gBAAgB;AAE7C,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,MAAM,OAAO,OAAO;AAClB,YAAM,eAAe,MAAM,OAAO,IAAI,cAAc,CAAC,WAAW,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAC/F,UAAI,aAAa,aAAa,GAAG;AAC/B,eAAO,EAAE,OAAO,OAAO,QAAQ,+BAA+B,aAAa,UAAU,aAAa,MAAM,GAAG;AAAA,MAC7G;AACA,YAAM,YAAY,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,aAAa,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACjG,UAAI,UAAU,aAAa,GAAG;AAC5B,eAAO,EAAE,OAAO,OAAO,QAAQ,oCAAoC,UAAU,UAAU,UAAU,MAAM,GAAG;AAAA,MAC5G;AACA,UAAI,UAAU,OAAO,KAAK,EAAE,SAAS,GAAG;AACtC,eAAO,EAAE,OAAO,OAAO,QAAQ,qEAAqE;AAAA,MACtG;AACA,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,IAAI,OAAO,MAAM;AACrB,YAAM,aAAa,iBAAiB,MAAM,KAAK;AAC/C,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,4BAA4B,UAAU;AAAA,QAC/C,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AACD,YAAM,gBAAgB,EAAE,QAAQ,eAAe,MAAM,eAAe,WAAW,CAAC;AAEhF,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS;AAAA,QACT,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,OAAO;AAAA,QACX;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA,GAAI,QAAQ,QAAQ,CAAC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,QAClD;AAAA,MACF;AACA,YAAM,cAAc,MAAM,OAAO,IAAI,cAAc,MAAM;AAAA,QACvD,KAAK,MAAM;AAAA,QACX,OAAO,YAAY;AAAA,UACjB,OAAO,MAAM;AAAA,UACb,SAAS,MAAM,QAAQ;AAAA,UACvB,SAAS,MAAM;AAAA,QACjB,CAAC;AAAA,MACH,CAAC;AACD,YAAM,uBAAuB,aAAa,YAAY;AAEtD,YAAM,mBAAmB,MAAM,yBAAyB,EAAE,QAAQ,eAAe,MAAM,cAAc,CAAC;AACtG,UAAI,iBAAiB,SAAS,GAAG;AAC/B,cAAM,KAAK,KAAK;AAAA,UACd,MAAM;AAAA,UACN,SAAS,+BAA+B,iBAAiB,KAAK,IAAI,CAAC;AAAA,UACnE,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7B,CAAC;AAAA,MACH;AAEA,YAAM,QAAQ,MAAM,aAAa,EAAE,QAAQ,eAAe,MAAM,cAAc,CAAC;AAC/E,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,iCAAiC,MAAM,MAAM;AAAA,QACtD,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,SAAS,YAAY,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,KAAK;AACzE,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,SAAS,OAAO,MAAM,IAAK;AAAA,QAC3B,cAAc;AAAA,QACd,WAAW,CAAC,EAAE,OAAO,cAAc,KAAK,WAAW,CAAC;AAAA,QACpD,cAAc;AAAA,UACZ;AAAA,YACE,SAAS;AAAA,YACT,SAAS;AAAA,YACT,SAAS,OAAO,MAAM,IAAK;AAAA,UAC7B;AAAA,QACF;AAAA,QACA,YAAY,MAAM,SAAS,IAAI,uDAAuD;AAAA,MACxF;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb;AAAA,IACF;AAAA,EACF;AACF;;;AC5HA,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAEO,SAAS,qBAAsC;AACpD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,MAAM,SAAS;AACb,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,IAAI,OAAO,MAAM;AACrB,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,6BAA6B,MAAM,KAAK;AAAA,QACjD,IAAI,OAAO;AAAA,MACb,CAAC;AACD,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,+BAA+B,MAAM,KAAK;AAAA,QACnD,IAAI,OAAO;AAAA,MACb,CAAC;AACD,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,SAAS,2BAA2B,MAAM,QAAQ,OAAO;AAAA,QACzD,cAAc;AAAA,UACZ;AAAA,YACE,SAAS;AAAA,YACT,SAAS;AAAA,YACT,SAAS,MAAM,QAAQ;AAAA,UACzB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/claude-code.ts","../src/command.ts","../src/executor.ts","../src/git.ts","../src/result.ts","../src/codex.ts","../src/security.ts","../src/echo.ts"],"sourcesContent":["import { contextPointerLabel, type ContextPacket, type ContextPointer } from \"@opentag/core\";\nimport { assertCommandSucceeded, nodeCommandRunner, type CommandRunner } from \"./command.js\";\nimport { renderContextPacketForPrompt, type ExecutorAdapter } from \"./executor.js\";\nimport { branchNameForRun, changedFiles, cleanupInternalArtifacts, createRunBranch } from \"./git.js\";\nimport { createExecutorRunResult } from \"./result.js\";\n\nexport type ClaudeCodeExecutorOptions = {\n  runner?: CommandRunner;\n  claudeCommand?: string;\n  model?: string;\n  permissionMode?: \"acceptEdits\" | \"auto\" | \"bypassPermissions\" | \"default\" | \"plan\";\n  dangerouslySkipPermissions?: boolean;\n};\n\nfunction contextLines(context: ContextPointer[]): string {\n  if (!context.length) return \"No additional context pointers were provided.\";\n  return context.map((pointer) => `- ${contextPointerLabel(pointer)}: ${pointer.uri}`).join(\"\\n\");\n}\n\nfunction buildPrompt(input: {\n  runId: string;\n  rawText: string;\n  context: ContextPointer[];\n  contextPacket: ContextPacket | undefined;\n}): string {\n  return [\n    \"You are executing an OpenTag run in a local checkout.\",\n    `Run ID: ${input.runId}`,\n    \"\",\n    \"User request:\",\n    input.rawText,\n    \"\",\n    ...renderContextPacketForPrompt(input.contextPacket),\n    ...(input.contextPacket ? [\"\"] : []),\n    \"Context pointers:\",\n    contextLines(input.context),\n    \"\",\n    \"Work autonomously but keep the change narrow. Run relevant verification if you modify files.\",\n    \"End with a concise summary of what changed, what was verified, and the recommended next action.\"\n  ].join(\"\\n\");\n}\n\nexport function createClaudeCodeExecutor(options: ClaudeCodeExecutorOptions = {}): ExecutorAdapter {\n  const runner = options.runner ?? nodeCommandRunner;\n  const claudeCommand = options.claudeCommand ?? \"claude\";\n\n  return {\n    id: \"claude-code\",\n    displayName: \"Claude Code Executor\",\n    async canRun(input) {\n      try {\n        const claudeVersion = await runner.run(claudeCommand, [\"--version\"], { cwd: input.workspacePath });\n        if (claudeVersion.exitCode !== 0) {\n          return { ready: false, reason: `Claude Code CLI is not available: ${claudeVersion.stderr || claudeVersion.stdout}` };\n        }\n      } catch (error) {\n        return { ready: false, reason: `Claude Code CLI is not available: ${error instanceof Error ? error.message : String(error)}` };\n      }\n      const gitStatus = await runner.run(\"git\", [\"status\", \"--porcelain\"], { cwd: input.workspacePath });\n      if (gitStatus.exitCode !== 0) {\n        return { ready: false, reason: `Workspace is not a git checkout: ${gitStatus.stderr || gitStatus.stdout}` };\n      }\n      if (gitStatus.stdout.trim().length > 0) {\n        return { ready: false, reason: \"Workspace has uncommitted changes; refusing to run Claude Code executor.\" };\n      }\n      return { ready: true };\n    },\n    async run(input, sink) {\n      const branchName = branchNameForRun(input.runId);\n      await sink.emit({\n        type: \"executor.started\",\n        message: `Creating isolated branch ${branchName}`,\n        at: new Date().toISOString()\n      });\n      await createRunBranch({\n        runner,\n        workspacePath: input.workspacePath,\n        branchName,\n        ...(input.baseBranch ? { startPoint: input.baseBranch } : {})\n      });\n\n      await sink.emit({\n        type: \"executor.progress\",\n        message: \"Starting claude --print\",\n        at: new Date().toISOString()\n      });\n\n      const args = [\n        \"--print\",\n        \"--input-format\",\n        \"text\",\n        \"--output-format\",\n        \"text\",\n        \"--no-session-persistence\",\n        ...(options.model ? [\"--model\", options.model] : []),\n        ...(options.permissionMode ? [\"--permission-mode\", options.permissionMode] : []),\n        ...(options.dangerouslySkipPermissions ? [\"--dangerously-skip-permissions\"] : [])\n      ];\n      const claudeResult = await runner.run(claudeCommand, args, {\n        cwd: input.workspacePath,\n        input: buildPrompt({\n          runId: input.runId,\n          rawText: input.command.rawText,\n          context: input.context,\n          contextPacket: input.contextPacket\n        })\n      });\n      await assertCommandSucceeded(claudeResult, \"claude --print\");\n\n      const cleanedArtifacts = await cleanupInternalArtifacts({ runner, workspacePath: input.workspacePath });\n      if (cleanedArtifacts.length > 0) {\n        await sink.emit({\n          type: \"executor.progress\",\n          message: `Cleaned internal artifacts: ${cleanedArtifacts.join(\", \")}`,\n          at: new Date().toISOString()\n        });\n      }\n\n      const files = await changedFiles({ runner, workspacePath: input.workspacePath });\n      await sink.emit({\n        type: \"executor.completed\",\n        message: `Claude Code executor completed with ${files.length} changed file(s)`,\n        at: new Date().toISOString()\n      });\n\n      const output = claudeResult.stdout.trim() || claudeResult.stderr.trim() || \"Claude Code completed without textual output.\";\n      return createExecutorRunResult({\n        executorName: \"Claude Code\",\n        runId: input.runId,\n        branchName,\n        ...(input.baseBranch ? { baseBranch: input.baseBranch } : {}),\n        output,\n        changedFiles: files\n      });\n    },\n    async cancel() {\n      return;\n    }\n  };\n}\n","import { spawn } from \"node:child_process\";\n\nexport type CommandResult = {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n};\n\nexport type CommandEnvironment = Record<string, string | undefined>;\n\nexport type CommandRunner = {\n  run(command: string, args: string[], options?: { cwd?: string; input?: string; env?: CommandEnvironment }): Promise<CommandResult>;\n};\n\nexport const nodeCommandRunner: CommandRunner = {\n  run(command, args, options = {}) {\n    return new Promise((resolve, reject) => {\n      const child = spawn(command, args, {\n        cwd: options.cwd,\n        env: options.env,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"]\n      });\n      const stdout: Buffer[] = [];\n      const stderr: Buffer[] = [];\n\n      child.stdout.on(\"data\", (chunk: Buffer) => stdout.push(chunk));\n      child.stderr.on(\"data\", (chunk: Buffer) => stderr.push(chunk));\n      child.on(\"error\", reject);\n      child.on(\"close\", (exitCode) => {\n        resolve({\n          exitCode: exitCode ?? 1,\n          stdout: Buffer.concat(stdout).toString(\"utf8\"),\n          stderr: Buffer.concat(stderr).toString(\"utf8\")\n        });\n      });\n\n      if (options.input) {\n        child.stdin.write(options.input);\n      }\n      child.stdin.end();\n    });\n  }\n};\n\nexport async function assertCommandSucceeded(result: CommandResult, label: string): Promise<void> {\n  if (result.exitCode !== 0) {\n    throw new Error(`${label} failed with exit code ${result.exitCode}: ${result.stderr || result.stdout}`);\n  }\n}\n","import { contextPointerLabel, type ContextPacket, type ContextPointer, type OpenTagCommand, type OpenTagRunResult, type PermissionGrant } from \"@opentag/core\";\n\nexport type ExecutorEvent = {\n  type: \"executor.started\" | \"executor.progress\" | \"executor.completed\" | \"executor.failed\";\n  message: string;\n  at: string;\n};\n\nexport type ExecutorEventSink = {\n  emit(event: ExecutorEvent): Promise<void>;\n};\n\nexport type ExecutorRunInput = {\n  runId: string;\n  workspacePath: string;\n  command: OpenTagCommand;\n  context: ContextPointer[];\n  contextPacket?: ContextPacket;\n  permissions?: PermissionGrant[];\n  baseBranch?: string;\n  worktreeRoot?: string;\n  keepWorktree?: \"always\" | \"on_failure\" | \"never\";\n};\n\nexport function renderContextPacketForPrompt(packet?: ContextPacket): string[] {\n  if (!packet) return [];\n\n  const lines = [\"OpenTag context packet:\", `- summary: ${packet.summary}`];\n\n  if (packet.intent) {\n    lines.push(`- intent: ${packet.intent.normalizedIntent}`);\n    lines.push(`- requested by: ${packet.intent.requestedBy.provider}:${packet.intent.requestedBy.providerUserId}`);\n  }\n\n  if (packet.sources?.length) {\n    lines.push(\"- selected sources:\");\n    for (const source of packet.sources) {\n      lines.push(`  - [${source.role}] ${contextPointerLabel(source.pointer)}: ${source.pointer.uri}`);\n      lines.push(`    reason: ${source.reason}`);\n    }\n  }\n\n  if (packet.facts?.length) {\n    lines.push(\"- facts:\");\n    for (const fact of packet.facts) {\n      lines.push(`  - ${fact.text}`);\n    }\n  }\n\n  if (packet.exclusions?.length) {\n    lines.push(\"- exclusions:\");\n    for (const exclusion of packet.exclusions) {\n      lines.push(`  - ${exclusion}`);\n    }\n  }\n\n  return lines;\n}\n\nexport type ExecutorReadiness = {\n  ready: boolean;\n  reason?: string;\n};\n\nexport type ExecutorAdapter = {\n  id: string;\n  displayName: string;\n  canRun(input: ExecutorRunInput): Promise<ExecutorReadiness>;\n  run(input: ExecutorRunInput, sink: ExecutorEventSink): Promise<OpenTagRunResult>;\n  cancel(runId: string): Promise<void>;\n};\n","import { mkdirSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport type { CommandRunner } from \"./command.js\";\nimport { assertCommandSucceeded } from \"./command.js\";\n\nexport type GitStatusEntry = {\n  status: string;\n  path: string;\n};\n\nconst INTERNAL_ARTIFACT_ROOTS = [\".omx\", \".codex\", \".claude\"];\n\nexport function branchNameForRun(runId: string): string {\n  const safeRunId = runId.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n  return `opentag/${safeRunId}`;\n}\n\nexport function parseStatusEntries(statusOutput: string): GitStatusEntry[] {\n  return statusOutput\n    .split(\"\\n\")\n    .map((line) => line.replace(/\\r$/, \"\"))\n    .filter(Boolean)\n    .map((line) => ({\n      status: line.slice(0, 2),\n      path: line.slice(3).trim()\n    }))\n    .filter((entry) => entry.path.length > 0);\n}\n\nexport function isInternalArtifactPath(path: string): boolean {\n  return INTERNAL_ARTIFACT_ROOTS.some((root) => path === root || path.startsWith(`${root}/`));\n}\n\nexport function parseChangedFiles(statusOutput: string): string[] {\n  return parseStatusEntries(statusOutput)\n    .map((entry) => entry.path)\n    .filter((path) => !isInternalArtifactPath(path));\n}\n\nexport async function createRunBranch(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  branchName: string;\n  startPoint?: string;\n}): Promise<void> {\n  const result = await input.runner.run(\"git\", [\"checkout\", \"-B\", input.branchName, ...(input.startPoint ? [input.startPoint] : [])], { cwd: input.workspacePath });\n  await assertCommandSucceeded(result, \"create run branch\");\n}\n\nexport function worktreePathForRun(input: {\n  workspacePath: string;\n  runId: string;\n  worktreeRoot?: string;\n}): string {\n  const safeRunId = input.runId.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n  const root = input.worktreeRoot ?? `${input.workspacePath.replace(/\\/$/, \"\")}/.worktrees/opentag`;\n  return `${root.replace(/\\/$/, \"\")}/${safeRunId}`;\n}\n\nexport async function createRunWorktree(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  worktreePath: string;\n  branchName: string;\n  baseBranch: string;\n}): Promise<void> {\n  mkdirSync(dirname(input.worktreePath), { recursive: true });\n  const result = await input.runner.run(\n    \"git\",\n    [\"worktree\", \"add\", \"-B\", input.branchName, input.worktreePath, input.baseBranch],\n    { cwd: input.workspacePath }\n  );\n  await assertCommandSucceeded(result, \"create run worktree\");\n}\n\nexport async function removeRunWorktree(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  worktreePath: string;\n}): Promise<void> {\n  const result = await input.runner.run(\"git\", [\"worktree\", \"remove\", \"--force\", input.worktreePath], {\n    cwd: input.workspacePath\n  });\n  await assertCommandSucceeded(result, \"remove run worktree\");\n}\n\nexport async function deleteRunBranch(input: { runner: CommandRunner; workspacePath: string; branchName: string }): Promise<void> {\n  const result = await input.runner.run(\"git\", [\"branch\", \"-D\", input.branchName], {\n    cwd: input.workspacePath\n  });\n  await assertCommandSucceeded(result, \"delete empty run branch\");\n}\n\nexport async function changedFiles(input: { runner: CommandRunner; workspacePath: string }): Promise<string[]> {\n  const result = await input.runner.run(\"git\", [\"status\", \"--porcelain\"], { cwd: input.workspacePath });\n  await assertCommandSucceeded(result, \"read changed files\");\n  return parseChangedFiles(result.stdout);\n}\n\nexport async function cleanupInternalArtifacts(input: { runner: CommandRunner; workspacePath: string }): Promise<string[]> {\n  const statusResult = await input.runner.run(\"git\", [\"status\", \"--porcelain\"], { cwd: input.workspacePath });\n  await assertCommandSucceeded(statusResult, \"scan internal artifacts\");\n  const untrackedRoots = Array.from(\n    new Set(\n      parseStatusEntries(statusResult.stdout)\n        .filter((entry) => entry.status === \"??\" && isInternalArtifactPath(entry.path))\n        .map((entry) => entry.path.split(\"/\", 1)[0] ?? entry.path)\n    )\n  );\n  if (untrackedRoots.length === 0) return [];\n\n  const cleanResult = await input.runner.run(\"git\", [\"clean\", \"-fd\", \"--\", ...untrackedRoots], {\n    cwd: input.workspacePath\n  });\n  await assertCommandSucceeded(cleanResult, \"clean internal artifacts\");\n  return untrackedRoots;\n}\n\nexport async function commitRunChanges(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  message: string;\n}): Promise<boolean> {\n  const files = await changedFiles({ runner: input.runner, workspacePath: input.workspacePath });\n  if (files.length === 0) return false;\n\n  const addResult = await input.runner.run(\"git\", [\"add\", \"--\", ...files], {\n    cwd: input.workspacePath\n  });\n  await assertCommandSucceeded(addResult, \"stage run changes\");\n\n  const commitResult = await input.runner.run(\"git\", [\"commit\", \"-m\", input.message], {\n    cwd: input.workspacePath\n  });\n  await assertCommandSucceeded(commitResult, \"commit run changes\");\n  return true;\n}\n\nexport async function commitChangedFiles(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  files: string[];\n  message: string;\n}): Promise<void> {\n  if (input.files.length === 0) return;\n  const addResult = await input.runner.run(\"git\", [\"add\", \"--\", ...input.files], { cwd: input.workspacePath });\n  await assertCommandSucceeded(addResult, \"stage changed files\");\n  const commitResult = await input.runner.run(\"git\", [\"commit\", \"-m\", input.message], { cwd: input.workspacePath });\n  await assertCommandSucceeded(commitResult, \"commit changed files\");\n}\n\nexport async function pushBranch(input: {\n  runner: CommandRunner;\n  workspacePath: string;\n  remote: string;\n  branchName: string;\n}): Promise<void> {\n  const result = await input.runner.run(\"git\", [\"push\", \"-u\", input.remote, input.branchName], { cwd: input.workspacePath });\n  await assertCommandSucceeded(result, \"push run branch\");\n}\n","import type { OpenTagRunResult } from \"@opentag/core\";\n\nexport function createExecutorRunResult(input: {\n  executorName: string;\n  runId: string;\n  branchName: string;\n  baseBranch?: string;\n  output: string;\n  changedFiles: string[];\n  extraArtifacts?: NonNullable<OpenTagRunResult[\"artifacts\"]>;\n}): OpenTagRunResult {\n  const proposalId = `proposal_${input.runId}`;\n  const summary = input.output.slice(-4000);\n  const suggestedChanges =\n    input.changedFiles.length > 0\n      ? [\n          {\n            proposalId,\n            createdAt: new Date().toISOString(),\n            sourceRunId: input.runId,\n            summary: `${input.executorName} changed ${input.changedFiles.length} file(s) on branch ${input.branchName}.`,\n            intents: [\n              {\n                intentId: `${proposalId}_create_pr`,\n                domain: \"pull_request\" as const,\n                action: \"create_pull_request\",\n                summary: `Create a pull request for branch ${input.branchName}.`,\n                params: {\n                  title: `OpenTag run ${input.runId}`,\n                  body: [\n                    \"## Summary\",\n                    \"\",\n                    summary\n                  ].join(\"\\n\"),\n                  head: input.branchName,\n                  base: input.baseBranch ?? \"main\",\n                  changedFiles: input.changedFiles,\n                  risks: [\"Creates a pull request from the executor-produced branch; review the diff before merging.\"],\n                  executorConditions: [\"isolated branch exists\"]\n                }\n              },\n              {\n                intentId: `${proposalId}_link_branch`,\n                domain: \"artifact_links\" as const,\n                action: \"link_artifact\",\n                summary: `Link the run branch ${input.branchName} to the work item.`,\n                params: { title: \"Run branch\", uri: input.branchName }\n              },\n              {\n                intentId: `${proposalId}_request_review`,\n                domain: \"review\" as const,\n                action: \"request_review\",\n                summary: \"Request human review of the generated code changes.\",\n                params: { changedFiles: input.changedFiles }\n              }\n            ],\n            preconditions: [\"The local branch was generated from the checkout state available to the runner.\"]\n          }\n        ]\n      : undefined;\n\n  return {\n    conclusion: \"success\",\n    summary,\n    changedFiles: input.changedFiles,\n    artifacts: [\n      ...(input.changedFiles.length > 0 ? [{ kind: \"patch\" as const, title: \"Run branch\", uri: input.branchName }] : []),\n      ...(input.extraArtifacts ?? [])\n    ],\n    ...(suggestedChanges ? { suggestedChanges } : {}),\n    nextAction:\n      input.changedFiles.length > 0\n        ? {\n            summary: \"Review the proposed pull request action and reply `apply 1` if the branch should become a PR.\",\n            hint: {\n              kind: \"create_pull_request\",\n              targetId: proposalId,\n              selectedIntentIds: [`${proposalId}_create_pr`]\n            }\n          }\n        : \"No file changes were detected.\"\n  };\n}\n","import { contextPointerLabel, type ContextPacket, type ContextPointer } from \"@opentag/core\";\nimport { assertCommandSucceeded, nodeCommandRunner, type CommandRunner } from \"./command.js\";\nimport { renderContextPacketForPrompt, type ExecutorAdapter } from \"./executor.js\";\nimport {\n  branchNameForRun,\n  changedFiles,\n  cleanupInternalArtifacts,\n  commitRunChanges,\n  createRunWorktree,\n  deleteRunBranch,\n  removeRunWorktree,\n  worktreePathForRun\n} from \"./git.js\";\nimport { createExecutorRunResult } from \"./result.js\";\nimport { assessRunnerSecurity, formatSecurityAssessment, scrubEnvironment, type RunnerSecurityPolicy } from \"./security.js\";\n\nexport type CodexExecutorOptions = {\n  runner?: CommandRunner;\n  codexCommand?: string;\n  model?: string;\n  security?: RunnerSecurityPolicy;\n};\n\nfunction contextLines(context: ContextPointer[]): string {\n  if (!context.length) return \"No additional context pointers were provided.\";\n  return context.map((pointer) => `- ${contextPointerLabel(pointer)}: ${pointer.uri}`).join(\"\\n\");\n}\n\nfunction buildPrompt(input: {\n  runId: string;\n  rawText: string;\n  context: ContextPointer[];\n  contextPacket: ContextPacket | undefined;\n}): string {\n  return [\n    \"You are executing an OpenTag run in a local checkout.\",\n    `Run ID: ${input.runId}`,\n    \"\",\n    \"User request:\",\n    input.rawText,\n    \"\",\n    ...renderContextPacketForPrompt(input.contextPacket),\n    ...(input.contextPacket ? [\"\"] : []),\n    \"Context pointers:\",\n    contextLines(input.context),\n    \"\",\n    \"Work autonomously but keep the change narrow. Run relevant verification if you modify files. End with a concise summary.\"\n  ].join(\"\\n\");\n}\n\nexport function createCodexExecutor(options: CodexExecutorOptions = {}): ExecutorAdapter {\n  const runner = options.runner ?? nodeCommandRunner;\n  const codexCommand = options.codexCommand ?? \"codex\";\n\n  return {\n    id: \"codex\",\n    displayName: \"Codex Executor\",\n    async canRun(input) {\n      const codexVersion = await runner.run(codexCommand, [\"--version\"], { cwd: input.workspacePath });\n      if (codexVersion.exitCode !== 0) {\n        return { ready: false, reason: `Codex CLI is not available: ${codexVersion.stderr || codexVersion.stdout}` };\n      }\n      const gitRepo = await runner.run(\"git\", [\"rev-parse\", \"--show-toplevel\"], { cwd: input.workspacePath });\n      if (gitRepo.exitCode !== 0) {\n        return { ready: false, reason: `Workspace is not a git checkout: ${gitRepo.stderr || gitRepo.stdout}` };\n      }\n      const baseBranch = input.baseBranch ?? \"main\";\n      const baseRef = await runner.run(\"git\", [\"rev-parse\", \"--verify\", `${baseBranch}^{commit}`], {\n        cwd: input.workspacePath\n      });\n      if (baseRef.exitCode !== 0) {\n        return { ready: false, reason: `Base branch '${baseBranch}' is not available: ${baseRef.stderr || baseRef.stdout}` };\n      }\n      return { ready: true };\n    },\n    async run(input, sink) {\n      const security = options.security;\n      const worktreePath = worktreePathForRun({\n        workspacePath: input.workspacePath,\n        runId: input.runId,\n        ...(input.worktreeRoot ? { worktreeRoot: input.worktreeRoot } : {})\n      });\n      const assessment = assessRunnerSecurity({\n        executorId: \"codex\",\n        workspacePath: input.workspacePath,\n        executionPath: worktreePath,\n        command: input.command,\n        context: input.context,\n        ...(input.permissions ? { permissions: input.permissions } : {}),\n        ...(security ? { policy: security } : {})\n      });\n      if (assessment.findings.length > 0) {\n        await sink.emit({\n          type: assessment.allowed ? \"executor.progress\" : \"executor.failed\",\n          message: formatSecurityAssessment(assessment),\n          at: new Date().toISOString()\n        });\n      }\n      if (!assessment.allowed) {\n        return {\n          conclusion: \"needs_human\",\n          summary: formatSecurityAssessment(assessment),\n          nextAction: \"Review the request and rerun with a narrower prompt or an explicit local policy override if appropriate.\"\n        };\n      }\n\n      const branchName = branchNameForRun(input.runId);\n      const baseBranch = input.baseBranch ?? \"main\";\n      const keepWorktree = input.keepWorktree ?? \"on_failure\";\n      let completed = false;\n      let changedFileCount: number | undefined;\n\n      await sink.emit({\n        type: \"executor.started\",\n        message: `Creating isolated worktree ${worktreePath} on ${branchName}`,\n        at: new Date().toISOString()\n      });\n      try {\n        await createRunWorktree({\n          runner,\n          workspacePath: input.workspacePath,\n          worktreePath,\n          branchName,\n          baseBranch\n        });\n\n        await sink.emit({\n          type: \"executor.progress\",\n          message: \"Starting codex exec\",\n          at: new Date().toISOString()\n        });\n\n        const args = [\n          \"exec\",\n          \"--cd\",\n          worktreePath,\n          \"--full-auto\",\n          \"--ephemeral\",\n          ...(options.model ? [\"--model\", options.model] : []),\n          \"-\"\n        ];\n        const codexResult = await runner.run(codexCommand, args, {\n          cwd: worktreePath,\n          env: scrubEnvironment(undefined, security),\n          input: buildPrompt({\n            runId: input.runId,\n            rawText: input.command.rawText,\n            context: input.context,\n            contextPacket: input.contextPacket\n          })\n        });\n        await assertCommandSucceeded(codexResult, \"codex exec\");\n\n        const cleanedArtifacts = await cleanupInternalArtifacts({ runner, workspacePath: worktreePath });\n        if (cleanedArtifacts.length > 0) {\n          await sink.emit({\n            type: \"executor.progress\",\n            message: `Cleaned internal artifacts: ${cleanedArtifacts.join(\", \")}`,\n            at: new Date().toISOString()\n          });\n        }\n\n        const files = await changedFiles({ runner, workspacePath: worktreePath });\n        changedFileCount = files.length;\n        if (files.length > 0) {\n          await sink.emit({\n            type: \"executor.progress\",\n            message: `Committing ${files.length} changed file(s) to ${branchName}`,\n            at: new Date().toISOString()\n          });\n          await commitRunChanges({\n            runner,\n            workspacePath: worktreePath,\n            message: `OpenTag run ${input.runId}`\n          });\n        }\n        completed = true;\n\n        await sink.emit({\n          type: \"executor.completed\",\n          message: `Codex executor completed with ${files.length} changed file(s)`,\n          at: new Date().toISOString()\n        });\n\n        const output = codexResult.stdout.trim() || codexResult.stderr.trim() || \"Codex completed without textual output.\";\n        return createExecutorRunResult({\n          executorName: \"Codex\",\n          runId: input.runId,\n          branchName,\n          ...(input.baseBranch ? { baseBranch: input.baseBranch } : {}),\n          output,\n          changedFiles: files,\n          extraArtifacts: keepWorktree === \"always\" ? [{ title: \"Run worktree\", uri: worktreePath }] : []\n        });\n      } finally {\n        const shouldRemove = keepWorktree === \"never\" || (keepWorktree === \"on_failure\" && completed);\n        if (shouldRemove) {\n          try {\n            await removeRunWorktree({ runner, workspacePath: input.workspacePath, worktreePath });\n            if (completed && changedFileCount === 0) {\n              await deleteRunBranch({ runner, workspacePath: input.workspacePath, branchName });\n            }\n          } catch (error) {\n            await sink.emit({\n              type: \"executor.progress\",\n              message: `Could not clean up run worktree or branch for ${worktreePath}: ${error instanceof Error ? error.message : String(error)}`,\n              at: new Date().toISOString()\n            });\n          }\n        }\n      }\n    },\n    async cancel() {\n      return;\n    }\n  };\n}\n","import { fileURLToPath } from \"node:url\";\nimport { isAbsolute, relative, resolve } from \"node:path\";\nimport type { ContextPointer, OpenTagCommand, PermissionGrant } from \"@opentag/core\";\nimport type { CommandEnvironment } from \"./command.js\";\n\nexport type RunnerSecurityMode = \"enforce\" | \"audit\" | \"off\";\n\nexport type RunnerSecurityPolicy = {\n  mode?: RunnerSecurityMode;\n  allowedWorkspaceRoot?: string;\n  allowUnsafePrompts?: boolean;\n  extraSafeEnv?: string[];\n};\n\nexport type RunnerSecurityFinding = {\n  code: string;\n  severity: \"block\" | \"warn\";\n  message: string;\n};\n\nexport type RunnerSecurityAssessment = {\n  allowed: boolean;\n  mode: RunnerSecurityMode;\n  findings: RunnerSecurityFinding[];\n};\n\nexport const DEFAULT_SAFE_ENV_NAMES = [\n  \"CI\",\n  \"COLORTERM\",\n  \"CODEX_HOME\",\n  \"FORCE_COLOR\",\n  \"HOME\",\n  \"LANG\",\n  \"LOGNAME\",\n  \"NO_COLOR\",\n  \"PATH\",\n  \"PWD\",\n  \"SHELL\",\n  \"SSL_CERT_DIR\",\n  \"SSL_CERT_FILE\",\n  \"TERM\",\n  \"TMP\",\n  \"TMPDIR\",\n  \"TEMP\",\n  \"USER\",\n  \"XDG_CACHE_HOME\",\n  \"XDG_CONFIG_HOME\",\n  \"XDG_DATA_HOME\"\n];\n\nconst SAFE_ENV_PREFIXES = [\"LC_\"];\n\nconst SENSITIVE_ENV_PATTERNS = [\n  /TOKEN/,\n  /SECRET/,\n  /PASSWORD/,\n  /PASS$/,\n  /API[_-]?KEY/,\n  /CREDENTIAL/,\n  /COOKIE/,\n  /SESSION/,\n  /AUTH/,\n  /^AWS_/,\n  /^AZURE_/,\n  /^GCP_/,\n  /^GOOGLE_/,\n  /^OPENAI_/,\n  /^ANTHROPIC_/,\n  /^SLACK_/,\n  /^GITHUB_TOKEN$/,\n  /^GH_TOKEN$/,\n  /^SSH_/\n];\n\nconst HIGH_RISK_TEXT_PATTERNS: Array<{ code: string; pattern: RegExp; message: string }> = [\n  {\n    code: \"prompt.instruction_override\",\n    pattern: /\\b(ignore|disregard|forget)\\s+(all\\s+)?(previous|prior|system|developer|safety)\\s+instructions\\b/i,\n    message: \"Request contains an instruction override pattern commonly used in prompt injection.\"\n  },\n  {\n    code: \"prompt.secret_exfiltration\",\n    pattern:\n      /\\b(print|dump|show|reveal|exfiltrate|send|upload|post|copy)\\b[\\s\\S]{0,100}\\b(secret|token|password|api[\\s_-]?key|credential|environment variables?|env vars?)\\b/i,\n    message: \"Request appears to ask the runner to expose secrets or environment variables.\"\n  },\n  {\n    code: \"prompt.sensitive_file_access\",\n    pattern: /\\b(cat|open|read|print|dump)\\b[\\s\\S]{0,80}(~\\/\\.ssh|~\\/\\.aws|\\.env\\b|id_rsa|known_hosts|credentials\\b)/i,\n    message: \"Request appears to ask the runner to read sensitive local credential files.\"\n  }\n];\n\nfunction securityMode(policy: RunnerSecurityPolicy | undefined): RunnerSecurityMode {\n  return policy?.mode ?? \"enforce\";\n}\n\nfunction isPathInside(childPath: string, parentPath: string): boolean {\n  const child = resolve(childPath);\n  const parent = resolve(parentPath);\n  const pathFromParent = relative(parent, child);\n  return pathFromParent === \"\" || (!pathFromParent.startsWith(\"..\") && !isAbsolute(pathFromParent));\n}\n\nfunction fileContextPath(pointer: ContextPointer, workspacePath: string): string | null {\n  if (pointer.kind !== \"file\") return null;\n  if (pointer.uri.startsWith(\"file://\")) {\n    return fileURLToPath(pointer.uri);\n  }\n  if (isAbsolute(pointer.uri)) {\n    return pointer.uri;\n  }\n  return resolve(workspacePath, pointer.uri);\n}\n\nfunction hasPermission(permissions: PermissionGrant[] | undefined, scope: string): boolean {\n  return permissions?.some((permission) => permission.scope === scope) ?? false;\n}\n\nfunction needsWritePermission(command: OpenTagCommand, executorId: string): boolean {\n  if (executorId === \"echo\") return false;\n  return command.intent === \"fix\" || command.intent === \"run\";\n}\n\nfunction scanTextForHighRiskPatterns(input: { command: OpenTagCommand; context: ContextPointer[] }): RunnerSecurityFinding[] {\n  const sources = [\n    { label: \"command\", text: input.command.rawText },\n    ...input.context\n      .filter((pointer) => pointer.kind === \"text\")\n      .map((pointer) => ({ label: pointer.title ?? \"text context\", text: pointer.uri }))\n  ];\n\n  const findings: RunnerSecurityFinding[] = [];\n  for (const source of sources) {\n    for (const rule of HIGH_RISK_TEXT_PATTERNS) {\n      if (rule.pattern.test(source.text)) {\n        findings.push({\n          code: rule.code,\n          severity: \"block\",\n          message: `${rule.message} Source: ${source.label}.`\n        });\n      }\n    }\n  }\n  return findings;\n}\n\nexport function assessRunnerSecurity(input: {\n  executorId: string;\n  workspacePath: string;\n  executionPath?: string;\n  command: OpenTagCommand;\n  context: ContextPointer[];\n  permissions?: PermissionGrant[];\n  policy?: RunnerSecurityPolicy;\n}): RunnerSecurityAssessment {\n  const mode = securityMode(input.policy);\n  if (mode === \"off\") {\n    return { allowed: true, mode, findings: [] };\n  }\n\n  const findings: RunnerSecurityFinding[] = [];\n  if (!isAbsolute(input.workspacePath)) {\n    findings.push({\n      code: \"workspace.relative_path\",\n      severity: \"block\",\n      message: \"Workspace path must be absolute before a local executor can run.\"\n    });\n  }\n\n  const workspacePath = resolve(input.workspacePath);\n  const executionPath = resolve(input.executionPath ?? input.workspacePath);\n  if (input.policy?.allowedWorkspaceRoot && !isPathInside(workspacePath, input.policy.allowedWorkspaceRoot)) {\n    findings.push({\n      code: \"workspace.outside_allowed_root\",\n      severity: \"block\",\n      message: \"Workspace path is outside the configured allowed workspace root.\"\n    });\n  }\n  if (input.policy?.allowedWorkspaceRoot && !isPathInside(executionPath, input.policy.allowedWorkspaceRoot)) {\n    findings.push({\n      code: \"execution.outside_allowed_root\",\n      severity: \"block\",\n      message: \"Execution path is outside the configured allowed workspace root.\"\n    });\n  }\n\n  for (const pointer of input.context) {\n    const filePath = fileContextPath(pointer, workspacePath);\n    if (filePath && !isPathInside(filePath, workspacePath)) {\n      findings.push({\n        code: \"context.file_outside_workspace\",\n        severity: \"block\",\n        message: `File context is outside the mapped workspace: ${pointer.uri}`\n      });\n    }\n  }\n\n  if (needsWritePermission(input.command, input.executorId) && !hasPermission(input.permissions, \"repo:write\")) {\n    findings.push({\n      code: \"permission.repo_write_required\",\n      severity: \"block\",\n      message: \"Write-capable commands require an explicit repo:write permission grant.\"\n    });\n  }\n\n  if (!input.policy?.allowUnsafePrompts) {\n    findings.push(...scanTextForHighRiskPatterns({ command: input.command, context: input.context }));\n  }\n\n  const hasBlockingFinding = findings.some((finding) => finding.severity === \"block\");\n  return {\n    allowed: mode === \"audit\" || !hasBlockingFinding,\n    mode,\n    findings\n  };\n}\n\nfunction isSensitiveEnvName(name: string): boolean {\n  const upperName = name.toUpperCase();\n  return SENSITIVE_ENV_PATTERNS.some((pattern) => pattern.test(upperName));\n}\n\nfunction isSafeEnvName(name: string, policy: RunnerSecurityPolicy | undefined): boolean {\n  const upperName = name.toUpperCase();\n  const safeNames = new Set([...DEFAULT_SAFE_ENV_NAMES, ...(policy?.extraSafeEnv ?? [])].map((envName) => envName.toUpperCase()));\n  return safeNames.has(upperName) || SAFE_ENV_PREFIXES.some((prefix) => upperName.startsWith(prefix));\n}\n\nexport function scrubEnvironment(env: CommandEnvironment = process.env, policy?: RunnerSecurityPolicy): CommandEnvironment {\n  if (securityMode(policy) === \"off\") return { ...env };\n\n  const scrubbed: CommandEnvironment = {};\n  for (const [name, value] of Object.entries(env)) {\n    if (typeof value !== \"string\") continue;\n    if (isSensitiveEnvName(name)) continue;\n    if (!isSafeEnvName(name, policy)) continue;\n    scrubbed[name] = value;\n  }\n  return scrubbed;\n}\n\nexport function formatSecurityAssessment(assessment: RunnerSecurityAssessment): string {\n  if (assessment.findings.length === 0) {\n    return `OpenTag runner security assessment passed in ${assessment.mode} mode.`;\n  }\n\n  const prefix = assessment.allowed\n    ? `OpenTag runner security assessment reported ${assessment.findings.length} finding(s) in ${assessment.mode} mode.`\n    : \"OpenTag runner security blocked this run.\";\n  const details = assessment.findings.map((finding) => `${finding.code}: ${finding.message}`).join(\" \");\n  return `${prefix} ${details}`;\n}\n","import type { ExecutorAdapter } from \"./executor.js\";\n\nfunction nowIso(): string {\n  return new Date().toISOString();\n}\n\nexport function createEchoExecutor(): ExecutorAdapter {\n  return {\n    id: \"echo\",\n    displayName: \"Echo Executor\",\n    async canRun() {\n      return { ready: true };\n    },\n    async run(input, sink) {\n      await sink.emit({\n        type: \"executor.started\",\n        message: `Echo executor started for ${input.runId}`,\n        at: nowIso()\n      });\n      await sink.emit({\n        type: \"executor.completed\",\n        message: `Echo executor completed for ${input.runId}`,\n        at: nowIso()\n      });\n      return {\n        conclusion: \"success\",\n        summary: `Echoed OpenTag command: ${input.command.rawText}`,\n        verification: [\n          {\n            command: \"echo\",\n            outcome: \"passed\",\n            excerpt: input.command.rawText\n          }\n        ],\n        nextAction: {\n          summary: \"No external state change is suggested for the echo executor result.\",\n          hint: { kind: \"none\" }\n        }\n      };\n    },\n    async cancel() {\n      return;\n    }\n  };\n}\n"],"mappings":";AAAA,SAAS,uBAAAA,4BAAoE;;;ACA7E,SAAS,aAAa;AAcf,IAAM,oBAAmC;AAAA,EAC9C,IAAI,SAAS,MAAM,UAAU,CAAC,GAAG;AAC/B,WAAO,IAAI,QAAQ,CAACC,UAAS,WAAW;AACtC,YAAM,QAAQ,MAAM,SAAS,MAAM;AAAA,QACjC,KAAK,QAAQ;AAAA,QACb,KAAK,QAAQ;AAAA,QACb,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAChC,CAAC;AACD,YAAM,SAAmB,CAAC;AAC1B,YAAM,SAAmB,CAAC;AAE1B,YAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AAC7D,YAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,KAAK,KAAK,CAAC;AAC7D,YAAM,GAAG,SAAS,MAAM;AACxB,YAAM,GAAG,SAAS,CAAC,aAAa;AAC9B,QAAAA,SAAQ;AAAA,UACN,UAAU,YAAY;AAAA,UACtB,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAAA,UAC7C,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAAA,QAC/C,CAAC;AAAA,MACH,CAAC;AAED,UAAI,QAAQ,OAAO;AACjB,cAAM,MAAM,MAAM,QAAQ,KAAK;AAAA,MACjC;AACA,YAAM,MAAM,IAAI;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,uBAAuB,QAAuB,OAA8B;AAChG,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,MAAM,GAAG,KAAK,0BAA0B,OAAO,QAAQ,KAAK,OAAO,UAAU,OAAO,MAAM,EAAE;AAAA,EACxG;AACF;;;AChDA,SAAS,2BAAsI;AAwBxI,SAAS,6BAA6B,QAAkC;AAC7E,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,QAAM,QAAQ,CAAC,2BAA2B,cAAc,OAAO,OAAO,EAAE;AAExE,MAAI,OAAO,QAAQ;AACjB,UAAM,KAAK,aAAa,OAAO,OAAO,gBAAgB,EAAE;AACxD,UAAM,KAAK,mBAAmB,OAAO,OAAO,YAAY,QAAQ,IAAI,OAAO,OAAO,YAAY,cAAc,EAAE;AAAA,EAChH;AAEA,MAAI,OAAO,SAAS,QAAQ;AAC1B,UAAM,KAAK,qBAAqB;AAChC,eAAW,UAAU,OAAO,SAAS;AACnC,YAAM,KAAK,QAAQ,OAAO,IAAI,KAAK,oBAAoB,OAAO,OAAO,CAAC,KAAK,OAAO,QAAQ,GAAG,EAAE;AAC/F,YAAM,KAAK,eAAe,OAAO,MAAM,EAAE;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI,OAAO,OAAO,QAAQ;AACxB,UAAM,KAAK,UAAU;AACrB,eAAW,QAAQ,OAAO,OAAO;AAC/B,YAAM,KAAK,OAAO,KAAK,IAAI,EAAE;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,YAAY,QAAQ;AAC7B,UAAM,KAAK,eAAe;AAC1B,eAAW,aAAa,OAAO,YAAY;AACzC,YAAM,KAAK,OAAO,SAAS,EAAE;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AACT;;;ACzDA,SAAS,iBAAiB;AAC1B,SAAS,eAAe;AASxB,IAAM,0BAA0B,CAAC,QAAQ,UAAU,SAAS;AAErD,SAAS,iBAAiB,OAAuB;AACtD,QAAM,YAAY,MAAM,QAAQ,oBAAoB,GAAG;AACvD,SAAO,WAAW,SAAS;AAC7B;AAEO,SAAS,mBAAmB,cAAwC;AACzE,SAAO,aACJ,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,QAAQ,OAAO,EAAE,CAAC,EACrC,OAAO,OAAO,EACd,IAAI,CAAC,UAAU;AAAA,IACd,QAAQ,KAAK,MAAM,GAAG,CAAC;AAAA,IACvB,MAAM,KAAK,MAAM,CAAC,EAAE,KAAK;AAAA,EAC3B,EAAE,EACD,OAAO,CAAC,UAAU,MAAM,KAAK,SAAS,CAAC;AAC5C;AAEO,SAAS,uBAAuB,MAAuB;AAC5D,SAAO,wBAAwB,KAAK,CAAC,SAAS,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,CAAC;AAC5F;AAEO,SAAS,kBAAkB,cAAgC;AAChE,SAAO,mBAAmB,YAAY,EACnC,IAAI,CAAC,UAAU,MAAM,IAAI,EACzB,OAAO,CAAC,SAAS,CAAC,uBAAuB,IAAI,CAAC;AACnD;AAEA,eAAsB,gBAAgB,OAKpB;AAChB,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,MAAM,MAAM,YAAY,GAAI,MAAM,aAAa,CAAC,MAAM,UAAU,IAAI,CAAC,CAAE,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAChK,QAAM,uBAAuB,QAAQ,mBAAmB;AAC1D;AAEO,SAAS,mBAAmB,OAIxB;AACT,QAAM,YAAY,MAAM,MAAM,QAAQ,oBAAoB,GAAG;AAC7D,QAAM,OAAO,MAAM,gBAAgB,GAAG,MAAM,cAAc,QAAQ,OAAO,EAAE,CAAC;AAC5E,SAAO,GAAG,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI,SAAS;AAChD;AAEA,eAAsB,kBAAkB,OAMtB;AAChB,YAAU,QAAQ,MAAM,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,QAAM,SAAS,MAAM,MAAM,OAAO;AAAA,IAChC;AAAA,IACA,CAAC,YAAY,OAAO,MAAM,MAAM,YAAY,MAAM,cAAc,MAAM,UAAU;AAAA,IAChF,EAAE,KAAK,MAAM,cAAc;AAAA,EAC7B;AACA,QAAM,uBAAuB,QAAQ,qBAAqB;AAC5D;AAEA,eAAsB,kBAAkB,OAItB;AAChB,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,UAAU,WAAW,MAAM,YAAY,GAAG;AAAA,IAClG,KAAK,MAAM;AAAA,EACb,CAAC;AACD,QAAM,uBAAuB,QAAQ,qBAAqB;AAC5D;AAEA,eAAsB,gBAAgB,OAA4F;AAChI,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,MAAM,MAAM,UAAU,GAAG;AAAA,IAC/E,KAAK,MAAM;AAAA,EACb,CAAC;AACD,QAAM,uBAAuB,QAAQ,yBAAyB;AAChE;AAEA,eAAsB,aAAa,OAA4E;AAC7G,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,aAAa,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACpG,QAAM,uBAAuB,QAAQ,oBAAoB;AACzD,SAAO,kBAAkB,OAAO,MAAM;AACxC;AAEA,eAAsB,yBAAyB,OAA4E;AACzH,QAAM,eAAe,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,aAAa,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAC1G,QAAM,uBAAuB,cAAc,yBAAyB;AACpE,QAAM,iBAAiB,MAAM;AAAA,IAC3B,IAAI;AAAA,MACF,mBAAmB,aAAa,MAAM,EACnC,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ,uBAAuB,MAAM,IAAI,CAAC,EAC7E,IAAI,CAAC,UAAU,MAAM,KAAK,MAAM,KAAK,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI;AAAA,IAC7D;AAAA,EACF;AACA,MAAI,eAAe,WAAW,EAAG,QAAO,CAAC;AAEzC,QAAM,cAAc,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,SAAS,OAAO,MAAM,GAAG,cAAc,GAAG;AAAA,IAC3F,KAAK,MAAM;AAAA,EACb,CAAC;AACD,QAAM,uBAAuB,aAAa,0BAA0B;AACpE,SAAO;AACT;AAEA,eAAsB,iBAAiB,OAIlB;AACnB,QAAM,QAAQ,MAAM,aAAa,EAAE,QAAQ,MAAM,QAAQ,eAAe,MAAM,cAAc,CAAC;AAC7F,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,QAAM,YAAY,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,OAAO,MAAM,GAAG,KAAK,GAAG;AAAA,IACvE,KAAK,MAAM;AAAA,EACb,CAAC;AACD,QAAM,uBAAuB,WAAW,mBAAmB;AAE3D,QAAM,eAAe,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,MAAM,MAAM,OAAO,GAAG;AAAA,IAClF,KAAK,MAAM;AAAA,EACb,CAAC;AACD,QAAM,uBAAuB,cAAc,oBAAoB;AAC/D,SAAO;AACT;AAEA,eAAsB,mBAAmB,OAKvB;AAChB,MAAI,MAAM,MAAM,WAAW,EAAG;AAC9B,QAAM,YAAY,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,OAAO,MAAM,GAAG,MAAM,KAAK,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAC3G,QAAM,uBAAuB,WAAW,qBAAqB;AAC7D,QAAM,eAAe,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,MAAM,MAAM,OAAO,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAChH,QAAM,uBAAuB,cAAc,sBAAsB;AACnE;AAEA,eAAsB,WAAW,OAKf;AAChB,QAAM,SAAS,MAAM,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,MAAM,MAAM,QAAQ,MAAM,UAAU,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACzH,QAAM,uBAAuB,QAAQ,iBAAiB;AACxD;;;AC7JO,SAAS,wBAAwB,OAQnB;AACnB,QAAM,aAAa,YAAY,MAAM,KAAK;AAC1C,QAAM,UAAU,MAAM,OAAO,MAAM,IAAK;AACxC,QAAM,mBACJ,MAAM,aAAa,SAAS,IACxB;AAAA,IACE;AAAA,MACE;AAAA,MACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,aAAa,MAAM;AAAA,MACnB,SAAS,GAAG,MAAM,YAAY,YAAY,MAAM,aAAa,MAAM,sBAAsB,MAAM,UAAU;AAAA,MACzG,SAAS;AAAA,QACP;AAAA,UACE,UAAU,GAAG,UAAU;AAAA,UACvB,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,SAAS,oCAAoC,MAAM,UAAU;AAAA,UAC7D,QAAQ;AAAA,YACN,OAAO,eAAe,MAAM,KAAK;AAAA,YACjC,MAAM;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,YACF,EAAE,KAAK,IAAI;AAAA,YACX,MAAM,MAAM;AAAA,YACZ,MAAM,MAAM,cAAc;AAAA,YAC1B,cAAc,MAAM;AAAA,YACpB,OAAO,CAAC,2FAA2F;AAAA,YACnG,oBAAoB,CAAC,wBAAwB;AAAA,UAC/C;AAAA,QACF;AAAA,QACA;AAAA,UACE,UAAU,GAAG,UAAU;AAAA,UACvB,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,SAAS,uBAAuB,MAAM,UAAU;AAAA,UAChD,QAAQ,EAAE,OAAO,cAAc,KAAK,MAAM,WAAW;AAAA,QACvD;AAAA,QACA;AAAA,UACE,UAAU,GAAG,UAAU;AAAA,UACvB,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,QAAQ,EAAE,cAAc,MAAM,aAAa;AAAA,QAC7C;AAAA,MACF;AAAA,MACA,eAAe,CAAC,iFAAiF;AAAA,IACnG;AAAA,EACF,IACA;AAEN,SAAO;AAAA,IACL,YAAY;AAAA,IACZ;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,WAAW;AAAA,MACT,GAAI,MAAM,aAAa,SAAS,IAAI,CAAC,EAAE,MAAM,SAAkB,OAAO,cAAc,KAAK,MAAM,WAAW,CAAC,IAAI,CAAC;AAAA,MAChH,GAAI,MAAM,kBAAkB,CAAC;AAAA,IAC/B;AAAA,IACA,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;AAAA,IAC/C,YACE,MAAM,aAAa,SAAS,IACxB;AAAA,MACE,SAAS;AAAA,MACT,MAAM;AAAA,QACJ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,mBAAmB,CAAC,GAAG,UAAU,YAAY;AAAA,MAC/C;AAAA,IACF,IACA;AAAA,EACR;AACF;;;AJpEA,SAAS,aAAa,SAAmC;AACvD,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,IAAI,CAAC,YAAY,KAAKC,qBAAoB,OAAO,CAAC,KAAK,QAAQ,GAAG,EAAE,EAAE,KAAK,IAAI;AAChG;AAEA,SAAS,YAAY,OAKV;AACT,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM,KAAK;AAAA,IACtB;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,GAAG,6BAA6B,MAAM,aAAa;AAAA,IACnD,GAAI,MAAM,gBAAgB,CAAC,EAAE,IAAI,CAAC;AAAA,IAClC;AAAA,IACA,aAAa,MAAM,OAAO;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,yBAAyB,UAAqC,CAAC,GAAoB;AACjG,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,gBAAgB,QAAQ,iBAAiB;AAE/C,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,MAAM,OAAO,OAAO;AAClB,UAAI;AACF,cAAM,gBAAgB,MAAM,OAAO,IAAI,eAAe,CAAC,WAAW,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACjG,YAAI,cAAc,aAAa,GAAG;AAChC,iBAAO,EAAE,OAAO,OAAO,QAAQ,qCAAqC,cAAc,UAAU,cAAc,MAAM,GAAG;AAAA,QACrH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,EAAE,OAAO,OAAO,QAAQ,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,GAAG;AAAA,MAC/H;AACA,YAAM,YAAY,MAAM,OAAO,IAAI,OAAO,CAAC,UAAU,aAAa,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACjG,UAAI,UAAU,aAAa,GAAG;AAC5B,eAAO,EAAE,OAAO,OAAO,QAAQ,oCAAoC,UAAU,UAAU,UAAU,MAAM,GAAG;AAAA,MAC5G;AACA,UAAI,UAAU,OAAO,KAAK,EAAE,SAAS,GAAG;AACtC,eAAO,EAAE,OAAO,OAAO,QAAQ,2EAA2E;AAAA,MAC5G;AACA,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,IAAI,OAAO,MAAM;AACrB,YAAM,aAAa,iBAAiB,MAAM,KAAK;AAC/C,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,4BAA4B,UAAU;AAAA,QAC/C,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AACD,YAAM,gBAAgB;AAAA,QACpB;AAAA,QACA,eAAe,MAAM;AAAA,QACrB;AAAA,QACA,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,MAC7D,CAAC;AAED,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS;AAAA,QACT,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,OAAO;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,QAAQ,QAAQ,CAAC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,QAClD,GAAI,QAAQ,iBAAiB,CAAC,qBAAqB,QAAQ,cAAc,IAAI,CAAC;AAAA,QAC9E,GAAI,QAAQ,6BAA6B,CAAC,gCAAgC,IAAI,CAAC;AAAA,MACjF;AACA,YAAM,eAAe,MAAM,OAAO,IAAI,eAAe,MAAM;AAAA,QACzD,KAAK,MAAM;AAAA,QACX,OAAO,YAAY;AAAA,UACjB,OAAO,MAAM;AAAA,UACb,SAAS,MAAM,QAAQ;AAAA,UACvB,SAAS,MAAM;AAAA,UACf,eAAe,MAAM;AAAA,QACvB,CAAC;AAAA,MACH,CAAC;AACD,YAAM,uBAAuB,cAAc,gBAAgB;AAE3D,YAAM,mBAAmB,MAAM,yBAAyB,EAAE,QAAQ,eAAe,MAAM,cAAc,CAAC;AACtG,UAAI,iBAAiB,SAAS,GAAG;AAC/B,cAAM,KAAK,KAAK;AAAA,UACd,MAAM;AAAA,UACN,SAAS,+BAA+B,iBAAiB,KAAK,IAAI,CAAC;AAAA,UACnE,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7B,CAAC;AAAA,MACH;AAEA,YAAM,QAAQ,MAAM,aAAa,EAAE,QAAQ,eAAe,MAAM,cAAc,CAAC;AAC/E,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,uCAAuC,MAAM,MAAM;AAAA,QAC5D,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,SAAS,aAAa,OAAO,KAAK,KAAK,aAAa,OAAO,KAAK,KAAK;AAC3E,aAAO,wBAAwB;AAAA,QAC7B,cAAc;AAAA,QACd,OAAO,MAAM;AAAA,QACb;AAAA,QACA,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,QAC3D;AAAA,QACA,cAAc;AAAA,MAChB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,SAAS;AACb;AAAA,IACF;AAAA,EACF;AACF;;;AK3IA,SAAS,uBAAAC,4BAAoE;;;ACA7E,SAAS,qBAAqB;AAC9B,SAAS,YAAY,UAAU,eAAe;AAyBvC,IAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,oBAAoB,CAAC,KAAK;AAEhC,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,0BAAqF;AAAA,EACzF;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,SACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AACF;AAEA,SAAS,aAAa,QAA8D;AAClF,SAAO,QAAQ,QAAQ;AACzB;AAEA,SAAS,aAAa,WAAmB,YAA6B;AACpE,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,iBAAiB,SAAS,QAAQ,KAAK;AAC7C,SAAO,mBAAmB,MAAO,CAAC,eAAe,WAAW,IAAI,KAAK,CAAC,WAAW,cAAc;AACjG;AAEA,SAAS,gBAAgB,SAAyB,eAAsC;AACtF,MAAI,QAAQ,SAAS,OAAQ,QAAO;AACpC,MAAI,QAAQ,IAAI,WAAW,SAAS,GAAG;AACrC,WAAO,cAAc,QAAQ,GAAG;AAAA,EAClC;AACA,MAAI,WAAW,QAAQ,GAAG,GAAG;AAC3B,WAAO,QAAQ;AAAA,EACjB;AACA,SAAO,QAAQ,eAAe,QAAQ,GAAG;AAC3C;AAEA,SAAS,cAAc,aAA4C,OAAwB;AACzF,SAAO,aAAa,KAAK,CAAC,eAAe,WAAW,UAAU,KAAK,KAAK;AAC1E;AAEA,SAAS,qBAAqB,SAAyB,YAA6B;AAClF,MAAI,eAAe,OAAQ,QAAO;AAClC,SAAO,QAAQ,WAAW,SAAS,QAAQ,WAAW;AACxD;AAEA,SAAS,4BAA4B,OAAwF;AAC3H,QAAM,UAAU;AAAA,IACd,EAAE,OAAO,WAAW,MAAM,MAAM,QAAQ,QAAQ;AAAA,IAChD,GAAG,MAAM,QACN,OAAO,CAAC,YAAY,QAAQ,SAAS,MAAM,EAC3C,IAAI,CAAC,aAAa,EAAE,OAAO,QAAQ,SAAS,gBAAgB,MAAM,QAAQ,IAAI,EAAE;AAAA,EACrF;AAEA,QAAM,WAAoC,CAAC;AAC3C,aAAW,UAAU,SAAS;AAC5B,eAAW,QAAQ,yBAAyB;AAC1C,UAAI,KAAK,QAAQ,KAAK,OAAO,IAAI,GAAG;AAClC,iBAAS,KAAK;AAAA,UACZ,MAAM,KAAK;AAAA,UACX,UAAU;AAAA,UACV,SAAS,GAAG,KAAK,OAAO,YAAY,OAAO,KAAK;AAAA,QAClD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,qBAAqB,OAQR;AAC3B,QAAM,OAAO,aAAa,MAAM,MAAM;AACtC,MAAI,SAAS,OAAO;AAClB,WAAO,EAAE,SAAS,MAAM,MAAM,UAAU,CAAC,EAAE;AAAA,EAC7C;AAEA,QAAM,WAAoC,CAAC;AAC3C,MAAI,CAAC,WAAW,MAAM,aAAa,GAAG;AACpC,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,QAAQ,MAAM,aAAa;AACjD,QAAM,gBAAgB,QAAQ,MAAM,iBAAiB,MAAM,aAAa;AACxE,MAAI,MAAM,QAAQ,wBAAwB,CAAC,aAAa,eAAe,MAAM,OAAO,oBAAoB,GAAG;AACzG,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,MAAM,QAAQ,wBAAwB,CAAC,aAAa,eAAe,MAAM,OAAO,oBAAoB,GAAG;AACzG,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,aAAW,WAAW,MAAM,SAAS;AACnC,UAAM,WAAW,gBAAgB,SAAS,aAAa;AACvD,QAAI,YAAY,CAAC,aAAa,UAAU,aAAa,GAAG;AACtD,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,iDAAiD,QAAQ,GAAG;AAAA,MACvE,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,qBAAqB,MAAM,SAAS,MAAM,UAAU,KAAK,CAAC,cAAc,MAAM,aAAa,YAAY,GAAG;AAC5G,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,MAAM,QAAQ,oBAAoB;AACrC,aAAS,KAAK,GAAG,4BAA4B,EAAE,SAAS,MAAM,SAAS,SAAS,MAAM,QAAQ,CAAC,CAAC;AAAA,EAClG;AAEA,QAAM,qBAAqB,SAAS,KAAK,CAAC,YAAY,QAAQ,aAAa,OAAO;AAClF,SAAO;AAAA,IACL,SAAS,SAAS,WAAW,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,MAAuB;AACjD,QAAM,YAAY,KAAK,YAAY;AACnC,SAAO,uBAAuB,KAAK,CAAC,YAAY,QAAQ,KAAK,SAAS,CAAC;AACzE;AAEA,SAAS,cAAc,MAAc,QAAmD;AACtF,QAAM,YAAY,KAAK,YAAY;AACnC,QAAM,YAAY,IAAI,IAAI,CAAC,GAAG,wBAAwB,GAAI,QAAQ,gBAAgB,CAAC,CAAE,EAAE,IAAI,CAAC,YAAY,QAAQ,YAAY,CAAC,CAAC;AAC9H,SAAO,UAAU,IAAI,SAAS,KAAK,kBAAkB,KAAK,CAAC,WAAW,UAAU,WAAW,MAAM,CAAC;AACpG;AAEO,SAAS,iBAAiB,MAA0B,QAAQ,KAAK,QAAmD;AACzH,MAAI,aAAa,MAAM,MAAM,MAAO,QAAO,EAAE,GAAG,IAAI;AAEpD,QAAM,WAA+B,CAAC;AACtC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC/C,QAAI,OAAO,UAAU,SAAU;AAC/B,QAAI,mBAAmB,IAAI,EAAG;AAC9B,QAAI,CAAC,cAAc,MAAM,MAAM,EAAG;AAClC,aAAS,IAAI,IAAI;AAAA,EACnB;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,YAA8C;AACrF,MAAI,WAAW,SAAS,WAAW,GAAG;AACpC,WAAO,gDAAgD,WAAW,IAAI;AAAA,EACxE;AAEA,QAAM,SAAS,WAAW,UACtB,+CAA+C,WAAW,SAAS,MAAM,kBAAkB,WAAW,IAAI,WAC1G;AACJ,QAAM,UAAU,WAAW,SAAS,IAAI,CAAC,YAAY,GAAG,QAAQ,IAAI,KAAK,QAAQ,OAAO,EAAE,EAAE,KAAK,GAAG;AACpG,SAAO,GAAG,MAAM,IAAI,OAAO;AAC7B;;;ADrOA,SAASC,cAAa,SAAmC;AACvD,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,IAAI,CAAC,YAAY,KAAKC,qBAAoB,OAAO,CAAC,KAAK,QAAQ,GAAG,EAAE,EAAE,KAAK,IAAI;AAChG;AAEA,SAASC,aAAY,OAKV;AACT,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM,KAAK;AAAA,IACtB;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,GAAG,6BAA6B,MAAM,aAAa;AAAA,IACnD,GAAI,MAAM,gBAAgB,CAAC,EAAE,IAAI,CAAC;AAAA,IAClC;AAAA,IACAF,cAAa,MAAM,OAAO;AAAA,IAC1B;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,oBAAoB,UAAgC,CAAC,GAAoB;AACvF,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,eAAe,QAAQ,gBAAgB;AAE7C,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,MAAM,OAAO,OAAO;AAClB,YAAM,eAAe,MAAM,OAAO,IAAI,cAAc,CAAC,WAAW,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AAC/F,UAAI,aAAa,aAAa,GAAG;AAC/B,eAAO,EAAE,OAAO,OAAO,QAAQ,+BAA+B,aAAa,UAAU,aAAa,MAAM,GAAG;AAAA,MAC7G;AACA,YAAM,UAAU,MAAM,OAAO,IAAI,OAAO,CAAC,aAAa,iBAAiB,GAAG,EAAE,KAAK,MAAM,cAAc,CAAC;AACtG,UAAI,QAAQ,aAAa,GAAG;AAC1B,eAAO,EAAE,OAAO,OAAO,QAAQ,oCAAoC,QAAQ,UAAU,QAAQ,MAAM,GAAG;AAAA,MACxG;AACA,YAAM,aAAa,MAAM,cAAc;AACvC,YAAM,UAAU,MAAM,OAAO,IAAI,OAAO,CAAC,aAAa,YAAY,GAAG,UAAU,WAAW,GAAG;AAAA,QAC3F,KAAK,MAAM;AAAA,MACb,CAAC;AACD,UAAI,QAAQ,aAAa,GAAG;AAC1B,eAAO,EAAE,OAAO,OAAO,QAAQ,gBAAgB,UAAU,uBAAuB,QAAQ,UAAU,QAAQ,MAAM,GAAG;AAAA,MACrH;AACA,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,IAAI,OAAO,MAAM;AACrB,YAAM,WAAW,QAAQ;AACzB,YAAM,eAAe,mBAAmB;AAAA,QACtC,eAAe,MAAM;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,MACnE,CAAC;AACD,YAAM,aAAa,qBAAqB;AAAA,QACtC,YAAY;AAAA,QACZ,eAAe,MAAM;AAAA,QACrB,eAAe;AAAA,QACf,SAAS,MAAM;AAAA,QACf,SAAS,MAAM;AAAA,QACf,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,QAC9D,GAAI,WAAW,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,MACzC,CAAC;AACD,UAAI,WAAW,SAAS,SAAS,GAAG;AAClC,cAAM,KAAK,KAAK;AAAA,UACd,MAAM,WAAW,UAAU,sBAAsB;AAAA,UACjD,SAAS,yBAAyB,UAAU;AAAA,UAC5C,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7B,CAAC;AAAA,MACH;AACA,UAAI,CAAC,WAAW,SAAS;AACvB,eAAO;AAAA,UACL,YAAY;AAAA,UACZ,SAAS,yBAAyB,UAAU;AAAA,UAC5C,YAAY;AAAA,QACd;AAAA,MACF;AAEA,YAAM,aAAa,iBAAiB,MAAM,KAAK;AAC/C,YAAM,aAAa,MAAM,cAAc;AACvC,YAAM,eAAe,MAAM,gBAAgB;AAC3C,UAAI,YAAY;AAChB,UAAI;AAEJ,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,8BAA8B,YAAY,OAAO,UAAU;AAAA,QACpE,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC7B,CAAC;AACD,UAAI;AACF,cAAM,kBAAkB;AAAA,UACtB;AAAA,UACA,eAAe,MAAM;AAAA,UACrB;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,KAAK,KAAK;AAAA,UACd,MAAM;AAAA,UACN,SAAS;AAAA,UACT,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7B,CAAC;AAED,cAAM,OAAO;AAAA,UACX;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,GAAI,QAAQ,QAAQ,CAAC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,UAClD;AAAA,QACF;AACA,cAAM,cAAc,MAAM,OAAO,IAAI,cAAc,MAAM;AAAA,UACvD,KAAK;AAAA,UACL,KAAK,iBAAiB,QAAW,QAAQ;AAAA,UACzC,OAAOE,aAAY;AAAA,YACjB,OAAO,MAAM;AAAA,YACb,SAAS,MAAM,QAAQ;AAAA,YACvB,SAAS,MAAM;AAAA,YACf,eAAe,MAAM;AAAA,UACvB,CAAC;AAAA,QACH,CAAC;AACD,cAAM,uBAAuB,aAAa,YAAY;AAEtD,cAAM,mBAAmB,MAAM,yBAAyB,EAAE,QAAQ,eAAe,aAAa,CAAC;AAC/F,YAAI,iBAAiB,SAAS,GAAG;AAC/B,gBAAM,KAAK,KAAK;AAAA,YACd,MAAM;AAAA,YACN,SAAS,+BAA+B,iBAAiB,KAAK,IAAI,CAAC;AAAA,YACnE,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,UAC7B,CAAC;AAAA,QACH;AAEA,cAAM,QAAQ,MAAM,aAAa,EAAE,QAAQ,eAAe,aAAa,CAAC;AACxE,2BAAmB,MAAM;AACzB,YAAI,MAAM,SAAS,GAAG;AACpB,gBAAM,KAAK,KAAK;AAAA,YACd,MAAM;AAAA,YACN,SAAS,cAAc,MAAM,MAAM,uBAAuB,UAAU;AAAA,YACpE,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,UAC7B,CAAC;AACD,gBAAM,iBAAiB;AAAA,YACrB;AAAA,YACA,eAAe;AAAA,YACf,SAAS,eAAe,MAAM,KAAK;AAAA,UACrC,CAAC;AAAA,QACH;AACA,oBAAY;AAEZ,cAAM,KAAK,KAAK;AAAA,UACd,MAAM;AAAA,UACN,SAAS,iCAAiC,MAAM,MAAM;AAAA,UACtD,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7B,CAAC;AAED,cAAM,SAAS,YAAY,OAAO,KAAK,KAAK,YAAY,OAAO,KAAK,KAAK;AACzE,eAAO,wBAAwB;AAAA,UAC7B,cAAc;AAAA,UACd,OAAO,MAAM;AAAA,UACb;AAAA,UACA,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,UAC3D;AAAA,UACA,cAAc;AAAA,UACd,gBAAgB,iBAAiB,WAAW,CAAC,EAAE,OAAO,gBAAgB,KAAK,aAAa,CAAC,IAAI,CAAC;AAAA,QAChG,CAAC;AAAA,MACH,UAAE;AACA,cAAM,eAAe,iBAAiB,WAAY,iBAAiB,gBAAgB;AACnF,YAAI,cAAc;AAChB,cAAI;AACF,kBAAM,kBAAkB,EAAE,QAAQ,eAAe,MAAM,eAAe,aAAa,CAAC;AACpF,gBAAI,aAAa,qBAAqB,GAAG;AACvC,oBAAM,gBAAgB,EAAE,QAAQ,eAAe,MAAM,eAAe,WAAW,CAAC;AAAA,YAClF;AAAA,UACF,SAAS,OAAO;AACd,kBAAM,KAAK,KAAK;AAAA,cACd,MAAM;AAAA,cACN,SAAS,iDAAiD,YAAY,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,cACjI,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,YAC7B,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb;AAAA,IACF;AAAA,EACF;AACF;;;AEtNA,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAEO,SAAS,qBAAsC;AACpD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,MAAM,SAAS;AACb,aAAO,EAAE,OAAO,KAAK;AAAA,IACvB;AAAA,IACA,MAAM,IAAI,OAAO,MAAM;AACrB,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,6BAA6B,MAAM,KAAK;AAAA,QACjD,IAAI,OAAO;AAAA,MACb,CAAC;AACD,YAAM,KAAK,KAAK;AAAA,QACd,MAAM;AAAA,QACN,SAAS,+BAA+B,MAAM,KAAK;AAAA,QACnD,IAAI,OAAO;AAAA,MACb,CAAC;AACD,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,SAAS,2BAA2B,MAAM,QAAQ,OAAO;AAAA,QACzD,cAAc;AAAA,UACZ;AAAA,YACE,SAAS;AAAA,YACT,SAAS;AAAA,YACT,SAAS,MAAM,QAAQ;AAAA,UACzB;AAAA,QACF;AAAA,QACA,YAAY;AAAA,UACV,SAAS;AAAA,UACT,MAAM,EAAE,MAAM,OAAO;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb;AAAA,IACF;AAAA,EACF;AACF;","names":["contextPointerLabel","resolve","contextPointerLabel","contextPointerLabel","contextLines","contextPointerLabel","buildPrompt"]}

package/dist/result.d.ts

@@ -0,0 +1,11 @@
+import type { OpenTagRunResult } from "@opentag/core";
+export declare function createExecutorRunResult(input: {
+    executorName: string;
+    runId: string;
+    branchName: string;
+    baseBranch?: string;
+    output: string;
+    changedFiles: string[];
+    extraArtifacts?: NonNullable<OpenTagRunResult["artifacts"]>;
+}): OpenTagRunResult;
+//# sourceMappingURL=result.d.ts.map

package/dist/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;CAC7D,GAAG,gBAAgB,CAwEnB"}

package/dist/security.d.ts

@@ -0,0 +1,32 @@
+import type { ContextPointer, OpenTagCommand, PermissionGrant } from "@opentag/core";
+import type { CommandEnvironment } from "./command.js";
+export type RunnerSecurityMode = "enforce" | "audit" | "off";
+export type RunnerSecurityPolicy = {
+    mode?: RunnerSecurityMode;
+    allowedWorkspaceRoot?: string;
+    allowUnsafePrompts?: boolean;
+    extraSafeEnv?: string[];
+};
+export type RunnerSecurityFinding = {
+    code: string;
+    severity: "block" | "warn";
+    message: string;
+};
+export type RunnerSecurityAssessment = {
+    allowed: boolean;
+    mode: RunnerSecurityMode;
+    findings: RunnerSecurityFinding[];
+};
+export declare const DEFAULT_SAFE_ENV_NAMES: string[];
+export declare function assessRunnerSecurity(input: {
+    executorId: string;
+    workspacePath: string;
+    executionPath?: string;
+    command: OpenTagCommand;
+    context: ContextPointer[];
+    permissions?: PermissionGrant[];
+    policy?: RunnerSecurityPolicy;
+}): RunnerSecurityAssessment;
+export declare function scrubEnvironment(env?: CommandEnvironment, policy?: RunnerSecurityPolicy): CommandEnvironment;
+export declare function formatSecurityAssessment(assessment: RunnerSecurityAssessment): string;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,KAAK,CAAC;AAE7D,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAsBlC,CAAC;AAmGF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B,GAAG,wBAAwB,CA6D3B;AAaD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,kBAAgC,EAAE,MAAM,CAAC,EAAE,oBAAoB,GAAG,kBAAkB,CAWzH;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,CAUrF"}

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "@opentag/runner",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Executor contracts and built-in runner adapters for OpenTag.",
   "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -26,9 +29,9 @@
     "codex",
     "agents"
   ],
-  "license": "Apache-2.0",
+  "license": "MIT",
   "dependencies": {
-    "@opentag/core": "0.1.0"
+    "@opentag/core": "0.2.0"
   },
   "devDependencies": {
     "tsup": "^8.3.5",