@ornexus/neocortex 4.60.66 → 4.60.68

package/packages/client/dist/runner/headless/types.js

@@ -1,2 +1,574 @@
-import{createHash as v}from"node:crypto";import{spawn as V}from"node:child_process";import{createLocalJobConsoleServer as z}from"../local-console.js";const F=Object.freeze(["fake","test","opencode","claude-code"]),l=Object.freeze({OK:"continuity-ok",RUNTIME_EXPLICIT:"headless-runtime-explicit",RUNTIME_ORIGIN:"headless-runtime-origin",RUNTIME_DEFAULT:"headless-runtime-default",RUNTIME_FALLBACK:"headless-runtime-fallback",RUNTIME_UNRESOLVED:"headless-runtime-unresolved",RUNTIME_UNTRUSTED:"headless-runtime-untrusted",MODEL_REJECTED:"headless-model-rejected",DIRECTIVE_REJECTED:"headless-directive-rejected",PROMPT_REJECTED:"headless-prompt-rejected",ADAPTER_UNAVAILABLE:"headless-adapter-unavailable",RUNTIME_AUTH_REQUIRED:"headless-runtime-auth-required",MANAGED_PROFILE_MISSING:"headless-managed-profile-missing",MANAGED_PROFILE_INVALID:"headless-managed-profile-invalid",APPROVAL_POLICY_INVALID:"headless-approval-policy-invalid",APPROVAL_POLICY_MISMATCH:"headless-approval-policy-mismatch",EXECUTION_CANCELLED:"headless-execution-cancelled",EXECUTION_TIMEOUT:"headless-execution-timeout",EXECUTION_BACKOFF:"headless-execution-backoff",EXECUTION_COMPLETED:"headless-execution-completed",EXECUTION_FAILED:"headless-execution-failed",RECEIPT_REDACTED:"headless-receipt-redacted",YOLOOP_METADATA_INVALID:"headless-yoloop-metadata-invalid",YOLOOP_ISOLATION_VIOLATION:"headless-yoloop-isolation-violation",WORKER_POOL_SERIAL_FALLBACK:"worker-pool-serial-fallback",WORKER_POOL_PARALLEL_ACTIVE:"worker-pool-parallel-active",WORKER_POOL_BACKPRESSURE_PAUSED:"worker-pool-backpressure-paused"}),$=120,O=240,X=600*1e3,U=1800*1e3,Y=/^[A-Za-z0-9][A-Za-z0-9._:+/-]{0,119}$/,G=/^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/,J=/^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/,Z=/(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i,w=/(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i,L=/(?:[;&|`$<>]|\$\(|\n|\r|\0)/,q=new Set(["promptKind","targetKind","targetRef","storyId","epicId","runtimeId","modelId","runtimeSource","timeoutMs","receipt","publicSummary","publicSafe"]),W=new Set(["executionId","attemptId","jobId","operationId","idempotencyKey","runnerId","subagentId"]);function Q(e){return F.includes(e)}function pe(e,r){const t=[],s=[];if(!K(e))return t.push(i("input","unsafe_key","value-denied")),k(l.DIRECTIVE_REJECTED,"Headless adapter input must be a public object.",t);for(const m of Object.keys(e))q.has(m)||(s.push(m),t.push(i(m,x(m),"key-denied")));const u=e.publicSafe===!0;u||t.push(i("publicSafe","unsafe_key","value-denied"));const a=h(e.promptKind);a!=="yolo"&&a!=="yolo-branchless-preparation"&&a!=="yoloop"&&t.push(i("promptKind","unsafe_key","value-denied"));const p=h(e.targetKind);p!=="story"&&p!=="epic"&&t.push(i("targetKind","unsafe_key","value-denied"));const o=h(e.targetRef);(!o||!M(o)||L.test(o)||o.includes(".."))&&t.push(i("targetRef","prompt_body","value-denied")),(a==="yolo"||a==="yolo-branchless-preparation")&&(p!=="story"||!o||!G.test(o))&&t.push(i("targetRef","prompt_body","value-denied")),a==="yoloop"&&(p!=="epic"||!o||!J.test(o))&&t.push(i("targetRef","prompt_body","value-denied"));const d=P(e.storyId,"storyId",t),f=P(e.epicId,"epicId",t);d&&o&&(a==="yolo"||a==="yolo-branchless-preparation")&&d!==o.replace(/^docs\/stories\//,"").replace(/\.story\.md$/,"")&&t.push(i("storyId","prompt_body","value-denied")),f&&o&&a==="yoloop"&&f!==o.replace(/^docs\/epics\/epic-/,"").replace(/\.md$/,"")&&t.push(i("epicId","prompt_body","value-denied"));const E=h(e.runtimeId);(!E||!Q(E)||r&&E!==r)&&t.push(i("runtimeId","unsafe_key","value-denied"));const b=te(e.modelId,t),y=re(e.runtimeSource,t),_=se(e.timeoutMs,t),T=ne(e.publicSummary,t),S=ie(e.receipt,t);if(t.length>0||s.length>0||!u||!a||!p||!o||!E){const m=t.some(n=>n.field==="modelId"),g=t.some(n=>n.reason==="prompt_body");return k(m?l.MODEL_REJECTED:g?l.PROMPT_REJECTED:l.DIRECTIVE_REJECTED,g?"Headless adapter target did not match a public prompt shape.":"Headless adapter input failed public-safety validation.",t)}const A={promptKind:a,targetKind:p,targetRef:o,...d?{storyId:d}:{},...f?{epicId:f}:{},runtimeId:E,...b?{modelId:b}:{},...y?{runtimeSource:y}:{},..._?{timeoutMs:_}:{},...S?{receipt:S}:{},...T?{publicSummary:T}:{},publicSafe:!0},R=D(A);return{ok:!0,input:A,prompt:R,promptHash:I(R),reasonCodes:[l.OK],publicSafe:!0}}function D(e){return e.promptKind==="yolo"?`*yolo @${e.targetRef}`:e.promptKind==="yolo-branchless-preparation"?`*yolo @${e.targetRef} branchless-preparation`:`*yoloop @${e.targetRef}`}function I(e){return`sha256:${v("sha256").update(e).digest("hex")}`}function fe(e,r,t,s=0){return{status:"failed",adapterId:e,runtimeId:r,reasonCode:t.reasonCode,reasonCodes:t.reasonCodes,durationMs:s,counts:{},hashes:{},publicSummary:C(t.publicSummary),redactionSummary:t.redactionSummary,relativePaths:[],publicSafe:!0}}function Ee(e,r,t,s=0){return{status:"failed",adapterId:e,runtimeId:r.runtimeId,...r.modelId?{modelId:r.modelId}:{},...r.runtimeSource?{runtimeSource:r.runtimeSource}:{},reasonCode:t.reasonCode,reasonCodes:t.reasonCodes,durationMs:s,counts:{},hashes:{prompt:I(D(r))},publicSummary:C(t.publicSummary),redactionSummary:t.redactionSummary,relativePaths:[r.targetRef],...r.receipt?{receipt:r.receipt}:{},publicSafe:!0}}function me(e,r,t){const s=D(r),u=I(t.stdout),a=I(t.stderr),p=t.timedOut||t.exitCode===0?0:de(t.stdout,t.stderr),o=t.cancelled?"failed":t.timedOut?"timed_out":t.exitCode===0?"completed":"failed",d=t.cancelled?l.EXECUTION_CANCELLED:t.timedOut?l.EXECUTION_TIMEOUT:t.exitCode===0?l.EXECUTION_COMPLETED:p>0?l.RUNTIME_AUTH_REQUIRED:l.EXECUTION_FAILED,f=[i("prompt","prompt_body",I(s))];return t.stdoutBytes>0&&f.push(i("stdout","raw_log",u)),t.stderrBytes>0&&f.push(i("stderr","raw_log",a)),{status:o,adapterId:e,runtimeId:r.runtimeId,...r.modelId?{modelId:r.modelId}:{},...r.runtimeSource?{runtimeSource:r.runtimeSource}:{},reasonCode:d,reasonCodes:[d,l.RECEIPT_REDACTED],exitCode:t.exitCode,signal:t.signal??null,durationMs:t.durationMs,counts:{stdoutBytes:t.stdoutBytes,stderrBytes:t.stderrBytes,stdoutLines:H(t.stdout),stderrLines:H(t.stderr),...p>0?{authEvidenceMatches:p}:{}},hashes:{prompt:I(s),stdout:u,stderr:a},publicSummary:o==="completed"?"Headless adapter completed with public-safe redacted output summary.":d===l.EXECUTION_CANCELLED?"Headless adapter was cancelled; raw output was redacted.":o==="timed_out"?"Headless adapter timed out; raw output was redacted.":d===l.RUNTIME_AUTH_REQUIRED?"Headless adapter requires local runtime authentication; raw output was redacted.":"Headless adapter failed; raw output was redacted.",redactionSummary:f,relativePaths:[r.targetRef],...r.receipt?{receipt:r.receipt}:{},publicSafe:!0}}async function _e(e,r,t={}){const s=Date.now(),u=oe(t.timeoutMs),a=t.maxOutputBytes??64e3;return t.signal?.aborted?{exitCode:null,signal:"SIGTERM",timedOut:!1,cancelled:!0,durationMs:Date.now()-s,stdout:"",stderr:"",stdoutBytes:0,stderrBytes:0}:await new Promise(p=>{const o=V(e,[...r],{cwd:t.cwd,env:t.env,shell:!1,stdio:[t.localConsole?"pipe":"ignore","pipe","pipe"]}),d=t.localConsole?.jobId?z({...t.localConsole,projectRoot:t.localConsole.projectRoot??t.cwd,writeStdin:n=>{o.stdin?.write(n)},signalProcess:n=>o.kill(n)}):void 0;d?.start();let f="",E="",b=0,y=0,_=!1,T=!1,S=!1;const A=()=>{_||(S=!0,o.kill("SIGTERM"))};t.signal?.addEventListener("abort",A,{once:!0});const R=()=>{t.signal?.removeEventListener("abort",A)},m=(n,c,B)=>{const N=B+c.length;if(n.length<a){const j=a-n.length;return{text:n+c.toString("utf8").slice(0,j),bytes:N}}return{text:n,bytes:N}};o.stdout?.on("data",n=>{const c=m(f,n,b);f=c.text,b=c.bytes,d?.broadcastStdout(n)}),o.stderr?.on("data",n=>{const c=m(E,n,y);E=c.text,y=c.bytes,d?.broadcastStderr(n)});const g=setTimeout(()=>{T=!0,o.kill("SIGTERM")},u);o.on("error",n=>{if(_)return;_=!0,clearTimeout(g),R(),d?.close({exitCode:127,signal:null});const c=n instanceof Error?n.message:String(n);p({exitCode:127,signal:null,timedOut:!1,cancelled:S,durationMs:Date.now()-s,stdout:f,stderr:c,stdoutBytes:b,stderrBytes:Buffer.byteLength(c)})}),o.on("close",(n,c)=>{_||(_=!0,clearTimeout(g),R(),d?.close({exitCode:n,signal:c}),p({exitCode:n,signal:c,timedOut:T,cancelled:S,durationMs:Date.now()-s,stdout:f,stderr:E,stdoutBytes:b,stderrBytes:y}))})})}function be(e,r,t,s,u=[]){return{ok:!1,adapterId:e,...r?{commandName:r}:{},reasonCode:t,reasonCodes:[t],publicSummary:C(s),redactionSummary:u,publicSafe:!0}}function Ie(e,r,t,s={}){const u={ok:!0,adapterId:e,commandName:r,...s.versionText?{versionHash:I(s.versionText)}:{},reasonCodes:[l.OK],publicSummary:C(t),publicSafe:!0};return s.executablePath&&Object.defineProperty(u,"executablePath",{value:s.executablePath,enumerable:!1,configurable:!1}),u}function i(e,r,t){return{field:e,reason:r,evidence:t,publicSafe:!0}}function C(e){return e.length<=O?e:`${e.slice(0,O)}\u2026[TRUNCATED:${e.length-O}]`}function ee(e){return e.length<=$&&Y.test(e)&&!w.test(e)&&!L.test(e)&&!e.includes("..")&&!e.startsWith("/")}function k(e,r,t){return{ok:!1,reasonCode:e,reasonCodes:[e],publicSummary:C(r),redactionSummary:t,publicSafe:!0}}function P(e,r,t){if(e===void 0)return;const s=h(e);if(!s||!M(s)||L.test(s)){t.push(i(r,x(r),"value-denied"));return}return s}function te(e,r){if(e===void 0)return;const t=h(e);if(!t||!ee(t)){r.push(i("modelId","unsafe_key","value-denied"));return}return t}function re(e,r){if(e!==void 0){if(e==="explicit"||e==="origin"||e==="default"||e==="fallback")return e;r.push(i("runtimeSource","unsafe_key","value-denied"))}}function se(e,r){if(e!==void 0){if(typeof e!="number"||!Number.isInteger(e)||e<=0||e>U){r.push(i("timeoutMs","unbounded_number","value-denied"));return}return e}}function oe(e){return!e||!Number.isInteger(e)||e<=0||e>U?X:e}function ne(e,r){if(e===void 0)return;const t=h(e);if(!t||t.length>O||!M(t)){r.push(i("publicSummary","unbounded_text","value-denied"));return}return t}function ie(e,r){if(e===void 0)return;if(!K(e)){r.push(i("receipt","unsafe_key","value-denied"));return}const t={};for(const[s,u]of Object.entries(e)){if(!W.has(s)||Z.test(s)){r.push(i(`receipt.${s}`,x(s),"key-denied"));continue}const a=P(u,`receipt.${s}`,r);a&&(t[s]=a)}return Object.keys(t).length>0?t:void 0}function x(e){return/prompt/i.test(e)?"prompt_body":/std(?:out|err)|raw|log|transcript|stack/i.test(e)?"raw_log":/url/i.test(e)?"private_url":/path|cwd|argv|args|shell|command|binary|executable/i.test(e)?"executable_path":/secret|token|password|authorization|api[_-]?key|license/i.test(e)?"secret_or_pii":"unsafe_key"}function h(e){return typeof e=="string"?e:void 0}function M(e){return e.length>0&&!w.test(e)&&!/\0/.test(e)}function H(e){return e?e.split(/\r?\n/).filter(r=>r.length>0).length:0}const ae=Object.freeze([/\bauth(?:entication|orization)?\s+(?:is\s+)?required\b/i,/\brequires?\s+authentication\b/i,/\bmust\s+(?:log\s?in|authenticate|be\s+authenticated)\b/i,/\bunauthenticated\b/i,/\b(?:not|unauthenticated)\s+(?:logged\s+in|authenticated)\b/i,/\blog\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,/\bplease\s+(?:log\s?in|authenticate|sign\s?in)\b/i,/\bsign\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,/\bsession\s+(?:expired|not\s+found|invalid)\b/i,/\bcredentials?\s+(?:missing|required|not\s+found)\b/i]);function de(...e){const r=e.filter(t=>t.length>0).map(t=>t.slice(0,8e3)).join(`
-`);return r?ae.reduce((t,s)=>t+(s.test(r)?1:0),0):0}function K(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}export{F as HEADLESS_ADAPTER_IDS,l as HEADLESS_REASON_CODES,be as adapterAvailabilityFailure,Ie as adapterAvailabilitySuccess,C as boundPublicSummary,fe as createRejectedExecutionResult,Ee as createUnavailableExecutionResult,I as hashPublicValue,Q as isHeadlessAdapterId,ee as isSafeHeadlessModelId,me as normalizeHeadlessCommandResult,i as redaction,D as renderHeadlessPrompt,_e as runHeadlessCommand,pe as validateHeadlessAdapterExecutionInput};
+/**
+ * @license FSL-1.1
+ * Copyright (c) 2026 OrNexus AI
+ *
+ * P190.04 -- public-safe headless runtime/adapter contracts.
+ */
+import { createHash } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { createLocalJobConsoleServer } from '../local-console.js';
+export const HEADLESS_ADAPTER_IDS = Object.freeze([
+    'fake',
+    'test',
+    'opencode',
+    'claude-code',
+]);
+export const HEADLESS_REASON_CODES = Object.freeze({
+    OK: 'continuity-ok',
+    RUNTIME_EXPLICIT: 'headless-runtime-explicit',
+    RUNTIME_ORIGIN: 'headless-runtime-origin',
+    RUNTIME_DEFAULT: 'headless-runtime-default',
+    RUNTIME_FALLBACK: 'headless-runtime-fallback',
+    RUNTIME_UNRESOLVED: 'headless-runtime-unresolved',
+    RUNTIME_UNTRUSTED: 'headless-runtime-untrusted',
+    MODEL_REJECTED: 'headless-model-rejected',
+    DIRECTIVE_REJECTED: 'headless-directive-rejected',
+    PROMPT_REJECTED: 'headless-prompt-rejected',
+    ADAPTER_UNAVAILABLE: 'headless-adapter-unavailable',
+    RUNTIME_AUTH_REQUIRED: 'headless-runtime-auth-required',
+    MANAGED_PROFILE_MISSING: 'headless-managed-profile-missing',
+    MANAGED_PROFILE_INVALID: 'headless-managed-profile-invalid',
+    APPROVAL_POLICY_INVALID: 'headless-approval-policy-invalid',
+    APPROVAL_POLICY_MISMATCH: 'headless-approval-policy-mismatch',
+    EXECUTION_CANCELLED: 'headless-execution-cancelled',
+    EXECUTION_TIMEOUT: 'headless-execution-timeout',
+    EXECUTION_BACKOFF: 'headless-execution-backoff',
+    EXECUTION_COMPLETED: 'headless-execution-completed',
+    EXECUTION_FAILED: 'headless-execution-failed',
+    RECEIPT_REDACTED: 'headless-receipt-redacted',
+    YOLOOP_METADATA_INVALID: 'headless-yoloop-metadata-invalid',
+    YOLOOP_ISOLATION_VIOLATION: 'headless-yoloop-isolation-violation',
+    WORKER_POOL_SERIAL_FALLBACK: 'worker-pool-serial-fallback',
+    WORKER_POOL_PARALLEL_ACTIVE: 'worker-pool-parallel-active',
+    WORKER_POOL_BACKPRESSURE_PAUSED: 'worker-pool-backpressure-paused',
+});
+const HEADLESS_MODEL_ID_MAX_CHARS = 120;
+const HEADLESS_PUBLIC_SUMMARY_MAX_CHARS = 240;
+const DEFAULT_TIMEOUT_MS = 10 * 60 * 1000;
+const MAX_TIMEOUT_MS = 30 * 60 * 1000;
+const MODEL_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:+/-]{0,119}$/;
+const STORY_REF_PATTERN = /^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/;
+const EPIC_REF_PATTERN = /^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/;
+const UNSAFE_KEY_PATTERN = /(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i;
+const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i;
+const SHELL_FRAGMENT_PATTERN = /(?:[;&|`$<>]|\$\(|\n|\r|\0)/;
+const ADAPTER_INPUT_ALLOWED_KEYS = new Set([
+    'promptKind',
+    'targetKind',
+    'targetRef',
+    'storyId',
+    'epicId',
+    'runtimeId',
+    'modelId',
+    'runtimeSource',
+    'timeoutMs',
+    'receipt',
+    'publicSummary',
+    'publicSafe',
+]);
+const RECEIPT_ALLOWED_KEYS = new Set([
+    'executionId',
+    'attemptId',
+    'jobId',
+    'operationId',
+    'idempotencyKey',
+    'runnerId',
+    'subagentId',
+]);
+export function isHeadlessAdapterId(value) {
+    return HEADLESS_ADAPTER_IDS.includes(value);
+}
+export function validateHeadlessAdapterExecutionInput(input, expectedRuntimeId) {
+    const redactions = [];
+    const rejectedKeys = [];
+    if (!isRecord(input)) {
+        redactions.push(redaction('input', 'unsafe_key', 'value-denied'));
+        return rejectAdapterInput(HEADLESS_REASON_CODES.DIRECTIVE_REJECTED, 'Headless adapter input must be a public object.', redactions);
+    }
+    for (const key of Object.keys(input)) {
+        if (!ADAPTER_INPUT_ALLOWED_KEYS.has(key)) {
+            rejectedKeys.push(key);
+            redactions.push(redaction(key, unsafeKeyReason(key), 'key-denied'));
+        }
+    }
+    const publicSafe = input.publicSafe === true;
+    if (!publicSafe)
+        redactions.push(redaction('publicSafe', 'unsafe_key', 'value-denied'));
+    const promptKind = stringValue(input.promptKind);
+    if (promptKind !== 'yolo' && promptKind !== 'yolo-branchless-preparation' && promptKind !== 'yoloop') {
+        redactions.push(redaction('promptKind', 'unsafe_key', 'value-denied'));
+    }
+    const targetKind = stringValue(input.targetKind);
+    if (targetKind !== 'story' && targetKind !== 'epic') {
+        redactions.push(redaction('targetKind', 'unsafe_key', 'value-denied'));
+    }
+    const targetRef = stringValue(input.targetRef);
+    if (!targetRef || !isSafePublicText(targetRef) || SHELL_FRAGMENT_PATTERN.test(targetRef) || targetRef.includes('..')) {
+        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
+    }
+    if ((promptKind === 'yolo' || promptKind === 'yolo-branchless-preparation')
+        && (targetKind !== 'story' || !targetRef || !STORY_REF_PATTERN.test(targetRef))) {
+        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
+    }
+    if (promptKind === 'yoloop' && (targetKind !== 'epic' || !targetRef || !EPIC_REF_PATTERN.test(targetRef))) {
+        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
+    }
+    const storyId = optionalSafeString(input.storyId, 'storyId', redactions);
+    const epicId = optionalSafeString(input.epicId, 'epicId', redactions);
+    if (storyId && targetRef && (promptKind === 'yolo' || promptKind === 'yolo-branchless-preparation')
+        && storyId !== targetRef.replace(/^docs\/stories\//, '').replace(/\.story\.md$/, '')) {
+        redactions.push(redaction('storyId', 'prompt_body', 'value-denied'));
+    }
+    if (epicId && targetRef && promptKind === 'yoloop' && epicId !== targetRef.replace(/^docs\/epics\/epic-/, '').replace(/\.md$/, '')) {
+        redactions.push(redaction('epicId', 'prompt_body', 'value-denied'));
+    }
+    const runtimeId = stringValue(input.runtimeId);
+    if (!runtimeId || !isHeadlessAdapterId(runtimeId) || (expectedRuntimeId && runtimeId !== expectedRuntimeId)) {
+        redactions.push(redaction('runtimeId', 'unsafe_key', 'value-denied'));
+    }
+    const modelId = optionalSafeModelId(input.modelId, redactions);
+    const runtimeSource = optionalRuntimeSource(input.runtimeSource, redactions);
+    const timeoutMs = normalizeTimeout(input.timeoutMs, redactions);
+    const publicSummary = optionalPublicSummary(input.publicSummary, redactions);
+    const receipt = validateReceipt(input.receipt, redactions);
+    if (redactions.length > 0 || rejectedKeys.length > 0 || !publicSafe || !promptKind || !targetKind || !targetRef || !runtimeId) {
+        const modelRejected = redactions.some((item) => item.field === 'modelId');
+        const promptRejected = redactions.some((item) => item.reason === 'prompt_body');
+        return rejectAdapterInput(modelRejected
+            ? HEADLESS_REASON_CODES.MODEL_REJECTED
+            : promptRejected
+                ? HEADLESS_REASON_CODES.PROMPT_REJECTED
+                : HEADLESS_REASON_CODES.DIRECTIVE_REJECTED, promptRejected
+            ? 'Headless adapter target did not match a public prompt shape.'
+            : 'Headless adapter input failed public-safety validation.', redactions);
+    }
+    const normalized = {
+        promptKind: promptKind,
+        targetKind: targetKind,
+        targetRef,
+        ...(storyId ? { storyId } : {}),
+        ...(epicId ? { epicId } : {}),
+        runtimeId: runtimeId,
+        ...(modelId ? { modelId } : {}),
+        ...(runtimeSource ? { runtimeSource } : {}),
+        ...(timeoutMs ? { timeoutMs } : {}),
+        ...(receipt ? { receipt } : {}),
+        ...(publicSummary ? { publicSummary } : {}),
+        publicSafe: true,
+    };
+    const prompt = renderHeadlessPrompt(normalized);
+    return {
+        ok: true,
+        input: normalized,
+        prompt,
+        promptHash: hashPublicValue(prompt),
+        reasonCodes: [HEADLESS_REASON_CODES.OK],
+        publicSafe: true,
+    };
+}
+export function renderHeadlessPrompt(input) {
+    if (input.promptKind === 'yolo')
+        return `*yolo @${input.targetRef}`;
+    if (input.promptKind === 'yolo-branchless-preparation')
+        return `*yolo @${input.targetRef} branchless-preparation`;
+    return `*yoloop @${input.targetRef}`;
+}
+export function hashPublicValue(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+export function createRejectedExecutionResult(adapterId, runtimeId, rejected, durationMs = 0) {
+    return {
+        status: 'failed',
+        adapterId,
+        runtimeId,
+        reasonCode: rejected.reasonCode,
+        reasonCodes: rejected.reasonCodes,
+        durationMs,
+        counts: {},
+        hashes: {},
+        publicSummary: boundPublicSummary(rejected.publicSummary),
+        redactionSummary: rejected.redactionSummary,
+        relativePaths: [],
+        publicSafe: true,
+    };
+}
+export function createUnavailableExecutionResult(adapterId, input, availability, durationMs = 0) {
+    return {
+        status: 'failed',
+        adapterId,
+        runtimeId: input.runtimeId,
+        ...(input.modelId ? { modelId: input.modelId } : {}),
+        ...(input.runtimeSource ? { runtimeSource: input.runtimeSource } : {}),
+        reasonCode: availability.reasonCode,
+        reasonCodes: availability.reasonCodes,
+        durationMs,
+        counts: {},
+        hashes: { prompt: hashPublicValue(renderHeadlessPrompt(input)) },
+        publicSummary: boundPublicSummary(availability.publicSummary),
+        redactionSummary: availability.redactionSummary,
+        relativePaths: [input.targetRef],
+        ...(input.receipt ? { receipt: input.receipt } : {}),
+        publicSafe: true,
+    };
+}
+export function normalizeHeadlessCommandResult(adapterId, input, commandResult) {
+    const prompt = renderHeadlessPrompt(input);
+    const stdoutHash = hashPublicValue(commandResult.stdout);
+    const stderrHash = hashPublicValue(commandResult.stderr);
+    const authEvidenceMatches = commandResult.timedOut || commandResult.exitCode === 0
+        ? 0
+        : countHeadlessAuthEvidenceMatches(commandResult.stdout, commandResult.stderr);
+    const status = commandResult.cancelled
+        ? 'failed'
+        : commandResult.timedOut
+            ? 'timed_out'
+            : commandResult.exitCode === 0
+                ? 'completed'
+                : 'failed';
+    const reasonCode = commandResult.cancelled
+        ? HEADLESS_REASON_CODES.EXECUTION_CANCELLED
+        : commandResult.timedOut
+            ? HEADLESS_REASON_CODES.EXECUTION_TIMEOUT
+            : commandResult.exitCode === 0
+                ? HEADLESS_REASON_CODES.EXECUTION_COMPLETED
+                : authEvidenceMatches > 0
+                    ? HEADLESS_REASON_CODES.RUNTIME_AUTH_REQUIRED
+                    : HEADLESS_REASON_CODES.EXECUTION_FAILED;
+    const redactionSummary = [
+        redaction('prompt', 'prompt_body', hashPublicValue(prompt)),
+    ];
+    if (commandResult.stdoutBytes > 0)
+        redactionSummary.push(redaction('stdout', 'raw_log', stdoutHash));
+    if (commandResult.stderrBytes > 0)
+        redactionSummary.push(redaction('stderr', 'raw_log', stderrHash));
+    return {
+        status,
+        adapterId,
+        runtimeId: input.runtimeId,
+        ...(input.modelId ? { modelId: input.modelId } : {}),
+        ...(input.runtimeSource ? { runtimeSource: input.runtimeSource } : {}),
+        reasonCode,
+        reasonCodes: [reasonCode, HEADLESS_REASON_CODES.RECEIPT_REDACTED],
+        exitCode: commandResult.exitCode,
+        signal: commandResult.signal ?? null,
+        durationMs: commandResult.durationMs,
+        counts: {
+            stdoutBytes: commandResult.stdoutBytes,
+            stderrBytes: commandResult.stderrBytes,
+            stdoutLines: countLines(commandResult.stdout),
+            stderrLines: countLines(commandResult.stderr),
+            ...(authEvidenceMatches > 0 ? { authEvidenceMatches } : {}),
+        },
+        hashes: {
+            prompt: hashPublicValue(prompt),
+            stdout: stdoutHash,
+            stderr: stderrHash,
+        },
+        publicSummary: status === 'completed'
+            ? 'Headless adapter completed with public-safe redacted output summary.'
+            : reasonCode === HEADLESS_REASON_CODES.EXECUTION_CANCELLED
+                ? 'Headless adapter was cancelled; raw output was redacted.'
+                : status === 'timed_out'
+                    ? 'Headless adapter timed out; raw output was redacted.'
+                    : reasonCode === HEADLESS_REASON_CODES.RUNTIME_AUTH_REQUIRED
+                        ? 'Headless adapter requires local runtime authentication; raw output was redacted.'
+                        : 'Headless adapter failed; raw output was redacted.',
+        redactionSummary,
+        relativePaths: [input.targetRef],
+        ...(input.receipt ? { receipt: input.receipt } : {}),
+        publicSafe: true,
+    };
+}
+export async function runHeadlessCommand(command, args, options = {}) {
+    const startedAt = Date.now();
+    const timeoutMs = normalizeRunnerTimeout(options.timeoutMs);
+    const maxOutputBytes = options.maxOutputBytes ?? 64_000;
+    if (options.signal?.aborted) {
+        return {
+            exitCode: null,
+            signal: 'SIGTERM',
+            timedOut: false,
+            cancelled: true,
+            durationMs: Date.now() - startedAt,
+            stdout: '',
+            stderr: '',
+            stdoutBytes: 0,
+            stderrBytes: 0,
+        };
+    }
+    return await new Promise((resolve) => {
+        const child = spawn(command, [...args], {
+            cwd: options.cwd,
+            env: options.env,
+            shell: false,
+            stdio: [options.localConsole ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+        });
+        const localConsole = options.localConsole?.jobId
+            ? createLocalJobConsoleServer({
+                ...options.localConsole,
+                projectRoot: options.localConsole.projectRoot ?? options.cwd,
+                writeStdin: (chunk) => {
+                    child.stdin?.write(chunk);
+                },
+                signalProcess: (signal) => child.kill(signal),
+            })
+            : undefined;
+        void localConsole?.start();
+        let stdout = '';
+        let stderr = '';
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let settled = false;
+        let timedOut = false;
+        let cancelled = false;
+        const abort = () => {
+            if (settled)
+                return;
+            cancelled = true;
+            child.kill('SIGTERM');
+        };
+        options.signal?.addEventListener('abort', abort, { once: true });
+        const cleanup = () => {
+            options.signal?.removeEventListener('abort', abort);
+        };
+        const append = (current, chunk, previousBytes) => {
+            const bytes = previousBytes + chunk.length;
+            if (current.length < maxOutputBytes) {
+                const remaining = maxOutputBytes - current.length;
+                return { text: current + chunk.toString('utf8').slice(0, remaining), bytes };
+            }
+            return { text: current, bytes };
+        };
+        child.stdout?.on('data', (chunk) => {
+            const next = append(stdout, chunk, stdoutBytes);
+            stdout = next.text;
+            stdoutBytes = next.bytes;
+            localConsole?.broadcastStdout(chunk);
+        });
+        child.stderr?.on('data', (chunk) => {
+            const next = append(stderr, chunk, stderrBytes);
+            stderr = next.text;
+            stderrBytes = next.bytes;
+            localConsole?.broadcastStderr(chunk);
+        });
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+        }, timeoutMs);
+        child.on('error', (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            cleanup();
+            localConsole?.close({ exitCode: 127, signal: null });
+            const safeMessage = error instanceof Error ? error.message : String(error);
+            resolve({
+                exitCode: 127,
+                signal: null,
+                timedOut: false,
+                cancelled,
+                durationMs: Date.now() - startedAt,
+                stdout,
+                stderr: safeMessage,
+                stdoutBytes,
+                stderrBytes: Buffer.byteLength(safeMessage),
+            });
+        });
+        child.on('close', (exitCode, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            cleanup();
+            localConsole?.close({ exitCode, signal });
+            resolve({
+                exitCode,
+                signal,
+                timedOut,
+                cancelled,
+                durationMs: Date.now() - startedAt,
+                stdout,
+                stderr,
+                stdoutBytes,
+                stderrBytes,
+            });
+        });
+    });
+}
+export function adapterAvailabilityFailure(adapterId, commandName, reasonCode, publicSummary, redactionSummary = []) {
+    return {
+        ok: false,
+        adapterId,
+        ...(commandName ? { commandName } : {}),
+        reasonCode,
+        reasonCodes: [reasonCode],
+        publicSummary: boundPublicSummary(publicSummary),
+        redactionSummary,
+        publicSafe: true,
+    };
+}
+export function adapterAvailabilitySuccess(adapterId, commandName, publicSummary, details = {}) {
+    const result = {
+        ok: true,
+        adapterId,
+        commandName,
+        ...(details.versionText ? { versionHash: hashPublicValue(details.versionText) } : {}),
+        reasonCodes: [HEADLESS_REASON_CODES.OK],
+        publicSummary: boundPublicSummary(publicSummary),
+        publicSafe: true,
+    };
+    if (details.executablePath) {
+        Object.defineProperty(result, 'executablePath', {
+            value: details.executablePath,
+            enumerable: false,
+            configurable: false,
+        });
+    }
+    return result;
+}
+export function redaction(field, reason, evidence) {
+    return { field, reason, evidence, publicSafe: true };
+}
+export function boundPublicSummary(value) {
+    return value.length <= HEADLESS_PUBLIC_SUMMARY_MAX_CHARS
+        ? value
+        : `${value.slice(0, HEADLESS_PUBLIC_SUMMARY_MAX_CHARS)}…[TRUNCATED:${value.length - HEADLESS_PUBLIC_SUMMARY_MAX_CHARS}]`;
+}
+export function isSafeHeadlessModelId(value) {
+    return value.length <= HEADLESS_MODEL_ID_MAX_CHARS
+        && MODEL_ID_PATTERN.test(value)
+        && !UNSAFE_VALUE_PATTERN.test(value)
+        && !SHELL_FRAGMENT_PATTERN.test(value)
+        && !value.includes('..')
+        && !value.startsWith('/');
+}
+function rejectAdapterInput(reasonCode, publicSummary, redactions) {
+    return {
+        ok: false,
+        reasonCode,
+        reasonCodes: [reasonCode],
+        publicSummary: boundPublicSummary(publicSummary),
+        redactionSummary: redactions,
+        publicSafe: true,
+    };
+}
+function optionalSafeString(value, field, redactions) {
+    if (value === undefined)
+        return undefined;
+    const text = stringValue(value);
+    if (!text || !isSafePublicText(text) || SHELL_FRAGMENT_PATTERN.test(text)) {
+        redactions.push(redaction(field, unsafeKeyReason(field), 'value-denied'));
+        return undefined;
+    }
+    return text;
+}
+function optionalSafeModelId(value, redactions) {
+    if (value === undefined)
+        return undefined;
+    const modelId = stringValue(value);
+    if (!modelId || !isSafeHeadlessModelId(modelId)) {
+        redactions.push(redaction('modelId', 'unsafe_key', 'value-denied'));
+        return undefined;
+    }
+    return modelId;
+}
+function optionalRuntimeSource(value, redactions) {
+    if (value === undefined)
+        return undefined;
+    if (value === 'explicit' || value === 'origin' || value === 'default' || value === 'fallback')
+        return value;
+    redactions.push(redaction('runtimeSource', 'unsafe_key', 'value-denied'));
+    return undefined;
+}
+function normalizeTimeout(value, redactions) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isInteger(value) || value <= 0 || value > MAX_TIMEOUT_MS) {
+        redactions.push(redaction('timeoutMs', 'unbounded_number', 'value-denied'));
+        return undefined;
+    }
+    return value;
+}
+function normalizeRunnerTimeout(value) {
+    if (!value || !Number.isInteger(value) || value <= 0 || value > MAX_TIMEOUT_MS)
+        return DEFAULT_TIMEOUT_MS;
+    return value;
+}
+function optionalPublicSummary(value, redactions) {
+    if (value === undefined)
+        return undefined;
+    const text = stringValue(value);
+    if (!text || text.length > HEADLESS_PUBLIC_SUMMARY_MAX_CHARS || !isSafePublicText(text)) {
+        redactions.push(redaction('publicSummary', 'unbounded_text', 'value-denied'));
+        return undefined;
+    }
+    return text;
+}
+function validateReceipt(value, redactions) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value)) {
+        redactions.push(redaction('receipt', 'unsafe_key', 'value-denied'));
+        return undefined;
+    }
+    const receipt = {};
+    for (const [key, child] of Object.entries(value)) {
+        if (!RECEIPT_ALLOWED_KEYS.has(key) || UNSAFE_KEY_PATTERN.test(key)) {
+            redactions.push(redaction(`receipt.${key}`, unsafeKeyReason(key), 'key-denied'));
+            continue;
+        }
+        const text = optionalSafeString(child, `receipt.${key}`, redactions);
+        if (text)
+            receipt[key] = text;
+    }
+    return Object.keys(receipt).length > 0 ? receipt : undefined;
+}
+function unsafeKeyReason(key) {
+    if (/prompt/i.test(key))
+        return 'prompt_body';
+    if (/std(?:out|err)|raw|log|transcript|stack/i.test(key))
+        return 'raw_log';
+    if (/url/i.test(key))
+        return 'private_url';
+    if (/path|cwd|argv|args|shell|command|binary|executable/i.test(key))
+        return 'executable_path';
+    if (/secret|token|password|authorization|api[_-]?key|license/i.test(key))
+        return 'secret_or_pii';
+    return 'unsafe_key';
+}
+function stringValue(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function isSafePublicText(value) {
+    return value.length > 0 && !UNSAFE_VALUE_PATTERN.test(value) && !/\0/.test(value);
+}
+function countLines(value) {
+    if (!value)
+        return 0;
+    return value.split(/\r?\n/).filter((line) => line.length > 0).length;
+}
+const HEADLESS_AUTH_EVIDENCE_PATTERNS = Object.freeze([
+    /\bauth(?:entication|orization)?\s+(?:is\s+)?required\b/i,
+    /\brequires?\s+authentication\b/i,
+    /\bmust\s+(?:log\s?in|authenticate|be\s+authenticated)\b/i,
+    /\bunauthenticated\b/i,
+    /\b(?:not|unauthenticated)\s+(?:logged\s+in|authenticated)\b/i,
+    /\blog\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,
+    /\bplease\s+(?:log\s?in|authenticate|sign\s?in)\b/i,
+    /\bsign\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,
+    /\bsession\s+(?:expired|not\s+found|invalid)\b/i,
+    /\bcredentials?\s+(?:missing|required|not\s+found)\b/i,
+]);
+function countHeadlessAuthEvidenceMatches(...values) {
+    const bounded = values
+        .filter((value) => value.length > 0)
+        .map((value) => value.slice(0, 8_000))
+        .join('\n');
+    if (!bounded)
+        return 0;
+    return HEADLESS_AUTH_EVIDENCE_PATTERNS.reduce((count, pattern) => count + (pattern.test(bounded) ? 1 : 0), 0);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}