@ornexus/neocortex 4.60.68 → 4.60.69

package/packages/client/dist/evidence/collector.js

@@ -1,347 +1 @@
-import { createHash } from 'node:crypto';
-import { lstatSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
-import { isAbsolute, relative, resolve } from 'node:path';
-export const CLIENT_PROJECT_EVIDENCE_BUDGET = Object.freeze({
-    maxItems: 48,
-    maxFileBytes: 96 * 1024,
-    maxTotalBytes: 512 * 1024,
-    maxSummaryChars: 280,
-    maxEnvelopeBytes: 64 * 1024,
-    maxExclusions: 64,
-});
-const MAX_SCAN_ENTRIES = 512;
-const ALLOWED_EXTENSIONS = /(?:\.tsx?|\.jsx?|\.vue|\.svelte|\.css|\.scss|\.json|\.ya?ml|\.mdx?|\.html)$/i;
-const RICH_EXTENSIONS = /\.(?:png|jpe?g|webp)$/i;
-const IGNORED_SEGMENTS = new Set(['.git', '.neocortex', 'node_modules', 'dist', 'build', 'coverage', 'core', 'private', 'secrets', 'credentials', 'raw-logs']);
-const PRIVATE_CONTENT = /(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|\b(?:api[-_ ]?key|license[-_ ]?key|password|secret|token)\b\s*[:=]|\b(?:sk|pk|ghp|github_pat)_[A-Za-z0-9_-]{12,}|https?:\/\/(?:localhost|127\.0\.0\.1|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+|[^/\s]+\.(?:local|internal))\b|private\s+(?:prompt|workflow|customer data)|-----BEGIN [A-Z ]+PRIVATE KEY-----)/i;
-const REDACTION_POLICIES = new Set(['metadata-only-v1', 'visual-pii-v1', 'strict-v1']);
-function sha256(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-function stableJson(value) {
-    if (Array.isArray(value))
-        return `[${value.map(stableJson).join(',')}]`;
-    if (value && typeof value === 'object') {
-        const record = value;
-        return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`).join(',')}}`;
-    }
-    return JSON.stringify(value) ?? 'null';
-}
-function normalizePath(value) {
-    return value.trim().replace(/\\/g, '/').replace(/\/+/g, '/').replace(/^\.\//, '');
-}
-function pathRejection(value) {
-    const normalized = normalizePath(value);
-    if (!normalized || isAbsolute(value) || normalized.startsWith('/') || /^[a-z]:[\\/]/i.test(value))
-        return 'absolute_path_rejected';
-    if (normalized === '..' || normalized.startsWith('../') || normalized.includes('/../'))
-        return 'traversal_path_rejected';
-    return null;
-}
-function sourceId(value) {
-    return `evidence:${sha256(value).slice(0, 16)}`;
-}
-function excluded(value, reasonCode) {
-    return { sourceId: sourceId(value), reasonCode };
-}
-function isIgnored(relativePath) {
-    return normalizePath(relativePath).toLowerCase().split('/').some((segment) => segment.startsWith('.env') || IGNORED_SEGMENTS.has(segment));
-}
-function insideRoot(root, candidate) {
-    const rel = relative(root, candidate);
-    return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
-}
-function inventory(root, dir, output, exclusions, maxEntries = MAX_SCAN_ENTRIES) {
-    if (output.length >= maxEntries)
-        return;
-    for (const entry of readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-        if (output.length >= maxEntries)
-            break;
-        const absolute = resolve(dir, entry.name);
-        const relativePath = normalizePath(relative(root, absolute));
-        if (isIgnored(relativePath))
-            continue;
-        if (entry.isSymbolicLink()) {
-            exclusions.push(excluded(relativePath, 'symlink_escape_rejected'));
-            continue;
-        }
-        if (entry.isDirectory()) {
-            inventory(root, absolute, output, exclusions, maxEntries);
-            continue;
-        }
-        if (entry.isFile() && ALLOWED_EXTENSIONS.test(entry.name))
-            output.push(relativePath);
-    }
-}
-function expandExplicitCandidate(root, candidate, output, exclusions) {
-    const rejection = pathRejection(candidate);
-    if (rejection) {
-        exclusions.push(excluded(candidate, rejection));
-        return;
-    }
-    const normalized = normalizePath(candidate);
-    if (isIgnored(normalized) || PRIVATE_CONTENT.test(normalized)) {
-        exclusions.push(excluded(candidate, 'private_evidence_rejected'));
-        return;
-    }
-    const absolute = resolve(root, normalized);
-    if (!insideRoot(root, absolute)) {
-        exclusions.push(excluded(candidate, 'traversal_path_rejected'));
-        return;
-    }
-    const stat = lstatSync(absolute);
-    if (stat.isSymbolicLink()) {
-        exclusions.push(excluded(candidate, 'symlink_escape_rejected'));
-        return;
-    }
-    const real = realpathSync(absolute);
-    if (!insideRoot(root, real)) {
-        exclusions.push(excluded(candidate, 'symlink_escape_rejected'));
-        return;
-    }
-    if (stat.isDirectory()) {
-        inventory(root, real, output, exclusions);
-        return;
-    }
-    if (stat.isFile())
-        output.push(normalized);
-}
-function kindFor(path) {
-    const lower = path.toLowerCase();
-    if (/\.(?:stories|story)\.(?:tsx?|jsx?|mdx?)$/.test(lower) || lower.includes('/.storybook/'))
-        return 'storybook';
-    if (/(?:^|\/)(?:__tests__|tests?|e2e)(?:\/|$)|\.(?:test|spec)\.(?:tsx?|jsx?)$|playwright|vitest|jest/.test(lower))
-        return 'validation';
-    if (/(?:^|\/)(?:routes?|pages?|app)(?:\/|$)|(?:^|\/)router\./.test(lower))
-        return 'route';
-    if (/(?:^|\/)(?:components?|ui)(?:\/|$)|[A-Z][A-Za-z0-9_-]*\.(?:tsx|jsx|vue|svelte)$/.test(path))
-        return 'component';
-    if (/(?:tokens?|theme|tailwind|design-system)|\.(?:css|scss)$/.test(lower))
-        return 'token';
-    if (/(?:openapi|asyncapi|contracts?|schemas?|events?)|\.(?:graphql|proto)$/.test(lower))
-        return 'contract';
-    if (lower === 'package.json' || lower.startsWith('docs/architecture') || lower.startsWith('docs/arquitetura-software'))
-        return 'source_summary';
-    return null;
-}
-function structuralSummary(kind, content) {
-    let identifierCount = 0;
-    const patterns = [
-        /\bexport\s+(?:default\s+)?(?:async\s+)?(?:function|class|const|let|var|interface|type|enum)\s+([A-Za-z_$][\w$]*)/g,
-        /\b(?:GET|POST|PUT|PATCH|DELETE|OPTIONS|HEAD)\b/g,
-        /--([a-z][a-z0-9-]{1,64})\s*:/gi,
-    ];
-    for (const pattern of patterns) {
-        for (const match of content.matchAll(pattern)) {
-            const identifier = (match[1] ?? match[0]).replace(/^--/, '');
-            if (/^[A-Za-z_$][\w$-]{0,64}$/.test(identifier))
-                identifierCount += 1;
-            if (identifierCount >= 12)
-                break;
-        }
-    }
-    return `${kind}; lines=${content.split(/\r?\n/).length}; structuralIdentifiers=${identifierCount}`;
-}
-function opaqueEvidencePath(kind, relativePath) {
-    const extension = relativePath.match(/\.[A-Za-z0-9]+$/)?.[0].toLowerCase() ?? '.json';
-    return `evidence/${kind}/${sha256(relativePath).slice(0, 20)}${extension}`;
-}
-function consentFor(options, collectedAt) {
-    const consent = options.consent ?? {};
-    const redactionPolicy = consent.redactionPolicy && REDACTION_POLICIES.has(consent.redactionPolicy) ? consent.redactionPolicy : undefined;
-    const expiresAt = typeof consent.expiresAt === 'string' ? consent.expiresAt : undefined;
-    const collectedMs = Date.parse(collectedAt);
-    const expiresMs = expiresAt ? Date.parse(expiresAt) : Number.NaN;
-    const ttlValid = Number.isFinite(collectedMs) && Number.isFinite(expiresMs) && expiresMs > collectedMs && expiresMs - collectedMs <= 60 * 60 * 1000;
-    return {
-        richEvidence: consent.richEvidence === true && !!redactionPolicy && ttlValid,
-        screenshots: consent.screenshots === true && consent.richEvidence === true && !!redactionPolicy && ttlValid,
-        liveEvidence: consent.liveEvidence === true && consent.richEvidence === true && !!redactionPolicy && ttlValid,
-        ...(redactionPolicy ? { redactionPolicy } : {}),
-        ...(expiresAt ? { expiresAt } : {}),
-    };
-}
-function collectFile(root, relativePath, kind, budget) {
-    const rejection = pathRejection(relativePath);
-    if (rejection)
-        return { exclusion: excluded(relativePath, rejection) };
-    if (isIgnored(relativePath) || PRIVATE_CONTENT.test(relativePath))
-        return { exclusion: excluded(relativePath, 'private_evidence_rejected') };
-    if (!kind || !ALLOWED_EXTENSIONS.test(relativePath))
-        return { exclusion: excluded(relativePath, 'unsupported_file_type') };
-    const absolute = resolve(root, relativePath);
-    if (!insideRoot(root, absolute))
-        return { exclusion: excluded(relativePath, 'traversal_path_rejected') };
-    const stat = lstatSync(absolute);
-    if (stat.isSymbolicLink())
-        return { exclusion: excluded(relativePath, 'symlink_escape_rejected') };
-    const real = realpathSync(absolute);
-    if (!insideRoot(root, real))
-        return { exclusion: excluded(relativePath, 'symlink_escape_rejected') };
-    const realStat = statSync(real);
-    if (!realStat.isFile())
-        return { exclusion: excluded(relativePath, 'unsupported_file_type') };
-    if (realStat.size > budget.maxFileBytes)
-        return { exclusion: excluded(relativePath, 'oversized_evidence') };
-    const content = readFileSync(real);
-    if (content.includes(0) || PRIVATE_CONTENT.test(content.toString('utf8')))
-        return { exclusion: excluded(relativePath, 'private_evidence_rejected') };
-    const normalized = normalizePath(relativePath);
-    const contentHash = sha256(content);
-    const publicPath = opaqueEvidencePath(kind, normalized);
-    return {
-        item: {
-            id: `${kind}:${sha256(`${normalized}:${contentHash}`).slice(0, 20)}`,
-            kind,
-            source: { path: publicPath, contentHash, byteLength: realStat.size },
-            summary: structuralSummary(kind, content.toString('utf8')).slice(0, budget.maxSummaryChars),
-        },
-    };
-}
-function collectRichCandidate(root, candidate, consent, budget) {
-    const rejection = pathRejection(candidate.path);
-    if (rejection)
-        return { exclusion: excluded(candidate.path, rejection) };
-    if (!RICH_EXTENSIONS.test(candidate.path))
-        return { exclusion: excluded(candidate.path, 'unsupported_file_type') };
-    if (!consent.richEvidence || (candidate.kind === 'screenshot' ? !consent.screenshots : !consent.liveEvidence))
-        return { exclusion: excluded(candidate.path, 'consent_required') };
-    if (!candidate.redactionPolicy || !REDACTION_POLICIES.has(candidate.redactionPolicy) || candidate.redactionPolicy !== consent.redactionPolicy)
-        return { exclusion: excluded(candidate.path, 'redaction_policy_required') };
-    if (!candidate.expiresAt || candidate.expiresAt !== consent.expiresAt)
-        return { exclusion: excluded(candidate.path, 'ttl_invalid') };
-    if (isIgnored(candidate.path))
-        return { exclusion: excluded(candidate.path, 'private_evidence_rejected') };
-    const absolute = resolve(root, candidate.path);
-    if (!insideRoot(root, absolute))
-        return { exclusion: excluded(candidate.path, 'traversal_path_rejected') };
-    const stat = lstatSync(absolute);
-    if (stat.isSymbolicLink())
-        return { exclusion: excluded(candidate.path, 'symlink_escape_rejected') };
-    const real = realpathSync(absolute);
-    if (!insideRoot(root, real))
-        return { exclusion: excluded(candidate.path, 'symlink_escape_rejected') };
-    const realStat = statSync(real);
-    if (!realStat.isFile())
-        return { exclusion: excluded(candidate.path, 'unsupported_file_type') };
-    if (realStat.size > budget.maxFileBytes)
-        return { exclusion: excluded(candidate.path, 'oversized_evidence') };
-    const content = readFileSync(real);
-    const normalized = normalizePath(candidate.path);
-    const source = { path: opaqueEvidencePath(candidate.kind, normalized), contentHash: sha256(content), byteLength: realStat.size };
-    return {
-        item: {
-            id: `${candidate.kind}:${sha256(`${normalized}:${source.contentHash}`).slice(0, 20)}`,
-            kind: candidate.kind,
-            source,
-            summary: `${candidate.kind}; metadata-only; bytes=${source.byteLength}`,
-            consent: { redactionPolicy: candidate.redactionPolicy, expiresAt: candidate.expiresAt },
-        },
-    };
-}
-export function collectProjectEvidence(options) {
-    const root = realpathSync(options.projectRoot);
-    const collectedAt = new Date(options.collectedAt ?? Date.now()).toISOString();
-    const budget = { ...CLIENT_PROJECT_EVIDENCE_BUDGET, ...options.budget };
-    const consent = consentFor(options, collectedAt);
-    const exclusions = [];
-    const explicitCandidates = [];
-    for (const candidate of [...(options.candidatePaths ?? [])].sort()) {
-        try {
-            expandExplicitCandidate(root, candidate, explicitCandidates, exclusions);
-        }
-        catch {
-            exclusions.push(excluded(candidate, 'malformed_evidence'));
-        }
-        if (explicitCandidates.length >= MAX_SCAN_ENTRIES)
-            break;
-    }
-    const fallbackCandidates = [];
-    if (!options.candidatePaths || options.includeFallbackInventory === true) {
-        inventory(root, root, fallbackCandidates, exclusions, Math.max(0, MAX_SCAN_ENTRIES - explicitCandidates.length));
-    }
-    const explicitSet = new Set(explicitCandidates.map(normalizePath));
-    const candidates = [...new Set([...explicitCandidates, ...fallbackCandidates])].slice(0, MAX_SCAN_ENTRIES);
-    const collected = [];
-    for (const candidate of candidates) {
-        let result;
-        try {
-            result = collectFile(root, candidate, kindFor(normalizePath(candidate)), budget);
-        }
-        catch {
-            result = { exclusion: excluded(candidate, 'malformed_evidence') };
-        }
-        if (result.exclusion)
-            exclusions.push(result.exclusion);
-        if (result.item)
-            collected.push({ candidate, explicit: explicitSet.has(normalizePath(candidate)), item: result.item });
-    }
-    const byKind = new Map();
-    for (const entry of collected)
-        byKind.set(entry.item.kind, [...(byKind.get(entry.item.kind) ?? []), entry]);
-    const priority = (left, right) => Number(right.explicit) - Number(left.explicit) || left.candidate.localeCompare(right.candidate);
-    for (const entries of byKind.values())
-        entries.sort(priority);
-    const reserved = [...byKind.keys()].sort().flatMap((kind) => byKind.get(kind)?.slice(0, 1) ?? []);
-    const reservedIds = new Set(reserved.map((entry) => entry.item.id));
-    const fill = collected.filter((entry) => !reservedIds.has(entry.item.id)).sort(priority);
-    const evidence = [];
-    let acceptedBytes = 0;
-    for (const entry of [...reserved, ...fill]) {
-        if (evidence.length >= budget.maxItems || acceptedBytes + entry.item.source.byteLength > budget.maxTotalBytes) {
-            exclusions.push(excluded(entry.candidate, 'budget_exceeded'));
-            continue;
-        }
-        evidence.push(entry.item);
-        acceptedBytes += entry.item.source.byteLength;
-    }
-    for (const candidate of options.richCandidates ?? []) {
-        let result;
-        try {
-            result = collectRichCandidate(root, candidate, consent, budget);
-        }
-        catch {
-            result = { exclusion: excluded(candidate.path, 'malformed_evidence') };
-        }
-        if (result.exclusion)
-            exclusions.push(result.exclusion);
-        if (!result.item)
-            continue;
-        if (evidence.length >= budget.maxItems || acceptedBytes + result.item.source.byteLength > budget.maxTotalBytes) {
-            exclusions.push(excluded(candidate.path, 'budget_exceeded'));
-            continue;
-        }
-        evidence.push(result.item);
-        acceptedBytes += result.item.source.byteLength;
-    }
-    evidence.sort((left, right) => left.kind.localeCompare(right.kind) || left.source.path.localeCompare(right.source.path));
-    const evidenceHash = sha256(stableJson(evidence));
-    let envelope = {
-        schemaVersion: 1,
-        envelopeId: `evidence-${evidenceHash.slice(0, 24)}`,
-        evidenceHash,
-        collectedAt,
-        consent,
-        budget: { ...budget, acceptedItems: evidence.length, acceptedBytes },
-        evidence,
-        exclusions: exclusions.slice(0, budget.maxExclusions),
-    };
-    while (Buffer.byteLength(JSON.stringify(envelope), 'utf8') > budget.maxEnvelopeBytes && envelope.evidence.length > 0) {
-        const removed = envelope.evidence.at(-1);
-        const nextEvidence = envelope.evidence.slice(0, -1);
-        const nextHash = sha256(stableJson(nextEvidence));
-        envelope = {
-            ...envelope,
-            envelopeId: `evidence-${nextHash.slice(0, 24)}`,
-            evidenceHash: nextHash,
-            budget: {
-                ...envelope.budget,
-                acceptedItems: nextEvidence.length,
-                acceptedBytes: nextEvidence.reduce((total, item) => total + item.source.byteLength, 0),
-            },
-            evidence: nextEvidence,
-            exclusions: [...envelope.exclusions, excluded(removed.id, 'budget_exceeded')].slice(0, budget.maxExclusions),
-        };
-    }
-    return envelope;
-}
+import{createHash as q}from"node:crypto";import{lstatSync as A,readdirSync as G,readFileSync as z,realpathSync as E,statSync as O}from"node:fs";import{isAbsolute as F,relative as B,resolve as $}from"node:path";const J=Object.freeze({maxItems:48,maxFileBytes:96*1024,maxTotalBytes:512*1024,maxSummaryChars:280,maxEnvelopeBytes:64*1024,maxExclusions:64}),S=512,D=/(?:\.tsx?|\.jsx?|\.vue|\.svelte|\.css|\.scss|\.json|\.ya?ml|\.mdx?|\.html)$/i,V=/\.(?:png|jpe?g|webp)$/i,X=new Set([".git",".neocortex","node_modules","dist","build","coverage","core","private","secrets","credentials","raw-logs"]),I=/(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|\b(?:api[-_ ]?key|license[-_ ]?key|password|secret|token)\b\s*[:=]|\b(?:sk|pk|ghp|github_pat)_[A-Za-z0-9_-]{12,}|https?:\/\/(?:localhost|127\.0\.0\.1|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+|[^/\s]+\.(?:local|internal))\b|private\s+(?:prompt|workflow|customer data)|-----BEGIN [A-Z ]+PRIVATE KEY-----)/i,R=new Set(["metadata-only-v1","visual-pii-v1","strict-v1"]);function _(t){return q("sha256").update(t).digest("hex")}function j(t){if(Array.isArray(t))return`[${t.map(j).join(",")}]`;if(t&&typeof t=="object"){const e=t;return`{${Object.keys(e).sort().map(s=>`${JSON.stringify(s)}:${j(e[s])}`).join(",")}}`}return JSON.stringify(t)??"null"}function h(t){return t.trim().replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\.\//,"")}function N(t){const e=h(t);return!e||F(t)||e.startsWith("/")||/^[a-z]:[\\/]/i.test(t)?"absolute_path_rejected":e===".."||e.startsWith("../")||e.includes("/../")?"traversal_path_rejected":null}function K(t){return`evidence:${_(t).slice(0,16)}`}function c(t,e){return{sourceId:K(t),reasonCode:e}}function k(t){return h(t).toLowerCase().split("/").some(e=>e.startsWith(".env")||X.has(e))}function b(t,e){const s=B(t,e);return s===""||!s.startsWith("..")&&!F(s)}function w(t,e,s,r,u=S){if(!(s.length>=u))for(const i of G(e,{withFileTypes:!0}).sort((a,l)=>a.name.localeCompare(l.name))){if(s.length>=u)break;const a=$(e,i.name),l=h(B(t,a));if(!k(l)){if(i.isSymbolicLink()){r.push(c(l,"symlink_escape_rejected"));continue}if(i.isDirectory()){w(t,a,s,r,u);continue}i.isFile()&&D.test(i.name)&&s.push(l)}}}function U(t,e,s,r){const u=N(e);if(u){r.push(c(e,u));return}const i=h(e);if(k(i)||I.test(i)){r.push(c(e,"private_evidence_rejected"));return}const a=$(t,i);if(!b(t,a)){r.push(c(e,"traversal_path_rejected"));return}const l=A(a);if(l.isSymbolicLink()){r.push(c(e,"symlink_escape_rejected"));return}const p=E(a);if(!b(t,p)){r.push(c(e,"symlink_escape_rejected"));return}if(l.isDirectory()){w(t,p,s,r);return}l.isFile()&&s.push(i)}function Y(t){const e=t.toLowerCase();return/\.(?:stories|story)\.(?:tsx?|jsx?|mdx?)$/.test(e)||e.includes("/.storybook/")?"storybook":/(?:^|\/)(?:__tests__|tests?|e2e)(?:\/|$)|\.(?:test|spec)\.(?:tsx?|jsx?)$|playwright|vitest|jest/.test(e)?"validation":/(?:^|\/)(?:routes?|pages?|app)(?:\/|$)|(?:^|\/)router\./.test(e)?"route":/(?:^|\/)(?:components?|ui)(?:\/|$)|[A-Z][A-Za-z0-9_-]*\.(?:tsx|jsx|vue|svelte)$/.test(t)?"component":/(?:tokens?|theme|tailwind|design-system)|\.(?:css|scss)$/.test(e)?"token":/(?:openapi|asyncapi|contracts?|schemas?|events?)|\.(?:graphql|proto)$/.test(e)?"contract":e==="package.json"||e.startsWith("docs/architecture")||e.startsWith("docs/arquitetura-software")?"source_summary":null}function Q(t,e){let s=0;const r=[/\bexport\s+(?:default\s+)?(?:async\s+)?(?:function|class|const|let|var|interface|type|enum)\s+([A-Za-z_$][\w$]*)/g,/\b(?:GET|POST|PUT|PATCH|DELETE|OPTIONS|HEAD)\b/g,/--([a-z][a-z0-9-]{1,64})\s*:/gi];for(const u of r)for(const i of e.matchAll(u)){const a=(i[1]??i[0]).replace(/^--/,"");if(/^[A-Za-z_$][\w$-]{0,64}$/.test(a)&&(s+=1),s>=12)break}return`${t}; lines=${e.split(/\r?\n/).length}; structuralIdentifiers=${s}`}function H(t,e){const s=e.match(/\.[A-Za-z0-9]+$/)?.[0].toLowerCase()??".json";return`evidence/${t}/${_(e).slice(0,20)}${s}`}function ee(t,e){const s=t.consent??{},r=s.redactionPolicy&&R.has(s.redactionPolicy)?s.redactionPolicy:void 0,u=typeof s.expiresAt=="string"?s.expiresAt:void 0,i=Date.parse(e),a=u?Date.parse(u):Number.NaN,l=Number.isFinite(i)&&Number.isFinite(a)&&a>i&&a-i<=3600*1e3;return{richEvidence:s.richEvidence===!0&&!!r&&l,screenshots:s.screenshots===!0&&s.richEvidence===!0&&!!r&&l,liveEvidence:s.liveEvidence===!0&&s.richEvidence===!0&&!!r&&l,...r?{redactionPolicy:r}:{},...u?{expiresAt:u}:{}}}function te(t,e,s,r){const u=N(e);if(u)return{exclusion:c(e,u)};if(k(e)||I.test(e))return{exclusion:c(e,"private_evidence_rejected")};if(!s||!D.test(e))return{exclusion:c(e,"unsupported_file_type")};const i=$(t,e);if(!b(t,i))return{exclusion:c(e,"traversal_path_rejected")};if(A(i).isSymbolicLink())return{exclusion:c(e,"symlink_escape_rejected")};const l=E(i);if(!b(t,l))return{exclusion:c(e,"symlink_escape_rejected")};const p=O(l);if(!p.isFile())return{exclusion:c(e,"unsupported_file_type")};if(p.size>r.maxFileBytes)return{exclusion:c(e,"oversized_evidence")};const y=z(l);if(y.includes(0)||I.test(y.toString("utf8")))return{exclusion:c(e,"private_evidence_rejected")};const f=h(e),d=_(y),g=H(s,f);return{item:{id:`${s}:${_(`${f}:${d}`).slice(0,20)}`,kind:s,source:{path:g,contentHash:d,byteLength:p.size},summary:Q(s,y.toString("utf8")).slice(0,r.maxSummaryChars)}}}function se(t,e,s,r){const u=N(e.path);if(u)return{exclusion:c(e.path,u)};if(!V.test(e.path))return{exclusion:c(e.path,"unsupported_file_type")};if(!s.richEvidence||(e.kind==="screenshot"?!s.screenshots:!s.liveEvidence))return{exclusion:c(e.path,"consent_required")};if(!e.redactionPolicy||!R.has(e.redactionPolicy)||e.redactionPolicy!==s.redactionPolicy)return{exclusion:c(e.path,"redaction_policy_required")};if(!e.expiresAt||e.expiresAt!==s.expiresAt)return{exclusion:c(e.path,"ttl_invalid")};if(k(e.path))return{exclusion:c(e.path,"private_evidence_rejected")};const i=$(t,e.path);if(!b(t,i))return{exclusion:c(e.path,"traversal_path_rejected")};if(A(i).isSymbolicLink())return{exclusion:c(e.path,"symlink_escape_rejected")};const l=E(i);if(!b(t,l))return{exclusion:c(e.path,"symlink_escape_rejected")};const p=O(l);if(!p.isFile())return{exclusion:c(e.path,"unsupported_file_type")};if(p.size>r.maxFileBytes)return{exclusion:c(e.path,"oversized_evidence")};const y=z(l),f=h(e.path),d={path:H(e.kind,f),contentHash:_(y),byteLength:p.size};return{item:{id:`${e.kind}:${_(`${f}:${d.contentHash}`).slice(0,20)}`,kind:e.kind,source:d,summary:`${e.kind}; metadata-only; bytes=${d.byteLength}`,consent:{redactionPolicy:e.redactionPolicy,expiresAt:e.expiresAt}}}}function ce(t){const e=E(t.projectRoot),s=new Date(t.collectedAt??Date.now()).toISOString(),r={...J,...t.budget},u=ee(t,s),i=[],a=[];for(const n of[...t.candidatePaths??[]].sort()){try{U(e,n,a,i)}catch{i.push(c(n,"malformed_evidence"))}if(a.length>=S)break}const l=[];(!t.candidatePaths||t.includeFallbackInventory===!0)&&w(e,e,l,i,Math.max(0,S-a.length));const p=new Set(a.map(h)),y=[...new Set([...a,...l])].slice(0,S),f=[];for(const n of y){let o;try{o=te(e,n,Y(h(n)),r)}catch{o={exclusion:c(n,"malformed_evidence")}}o.exclusion&&i.push(o.exclusion),o.item&&f.push({candidate:n,explicit:p.has(h(n)),item:o.item})}const d=new Map;for(const n of f)d.set(n.item.kind,[...d.get(n.item.kind)??[],n]);const g=(n,o)=>Number(o.explicit)-Number(n.explicit)||n.candidate.localeCompare(o.candidate);for(const n of d.values())n.sort(g);const C=[...d.keys()].sort().flatMap(n=>d.get(n)?.slice(0,1)??[]),P=new Set(C.map(n=>n.item.id)),Z=f.filter(n=>!P.has(n.item.id)).sort(g),x=[];let v=0;for(const n of[...C,...Z]){if(x.length>=r.maxItems||v+n.item.source.byteLength>r.maxTotalBytes){i.push(c(n.candidate,"budget_exceeded"));continue}x.push(n.item),v+=n.item.source.byteLength}for(const n of t.richCandidates??[]){let o;try{o=se(e,n,u,r)}catch{o={exclusion:c(n.path,"malformed_evidence")}}if(o.exclusion&&i.push(o.exclusion),!!o.item){if(x.length>=r.maxItems||v+o.item.source.byteLength>r.maxTotalBytes){i.push(c(n.path,"budget_exceeded"));continue}x.push(o.item),v+=o.item.source.byteLength}}x.sort((n,o)=>n.kind.localeCompare(o.kind)||n.source.path.localeCompare(o.source.path));const T=_(j(x));let m={schemaVersion:1,envelopeId:`evidence-${T.slice(0,24)}`,evidenceHash:T,collectedAt:s,consent:u,budget:{...r,acceptedItems:x.length,acceptedBytes:v},evidence:x,exclusions:i.slice(0,r.maxExclusions)};for(;Buffer.byteLength(JSON.stringify(m),"utf8")>r.maxEnvelopeBytes&&m.evidence.length>0;){const n=m.evidence.at(-1),o=m.evidence.slice(0,-1),L=_(j(o));m={...m,envelopeId:`evidence-${L.slice(0,24)}`,evidenceHash:L,budget:{...m.budget,acceptedItems:o.length,acceptedBytes:o.reduce((M,W)=>M+W.source.byteLength,0)},evidence:o,exclusions:[...m.exclusions,c(n.id,"budget_exceeded")].slice(0,r.maxExclusions)}}return m}export{J as CLIENT_PROJECT_EVIDENCE_BUDGET,ce as collectProjectEvidence};

package/packages/client/dist/evidence/index.js

@@ -1 +1 @@
-export { CLIENT_PROJECT_EVIDENCE_BUDGET, collectProjectEvidence } from './collector.js';
+import{CLIENT_PROJECT_EVIDENCE_BUDGET as c,collectProjectEvidence as o}from"./collector.js";export{c as CLIENT_PROJECT_EVIDENCE_BUDGET,o as collectProjectEvidence};

package/packages/client/dist/evidence/types.js

@@ -1,2 +0,0 @@
-/** Runtime-local mirror of the project evidence contract. */
-export {};

package/packages/client/dist/fs/atomic-state-replace.js

@@ -1,152 +1 @@
-import { randomUUID } from 'node:crypto';
-import { closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readdirSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
-import { basename, dirname, join } from 'node:path';
-const ATOMIC_TOKEN = /^\d+\.[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}\.(tmp|swap)$/i;
-/**
- * Recover a fully-fsynced artifact left by a process crash. A swap is the
- * conservative authority because it restores the last committed destination;
- * without a swap, one unambiguous temp can be promoted for first creation.
- */
-export function recoverAtomicReplaceUtf8(path) {
-    const directory = dirname(path);
-    if (!existsSync(directory))
-        return 'none';
-    const prefix = `${basename(path)}.`;
-    const artifacts = readdirSync(directory)
-        .filter((entry) => entry.startsWith(prefix) && ATOMIC_TOKEN.test(entry.slice(prefix.length)))
-        .map((entry) => ({
-        entry,
-        path: join(directory, entry),
-        kind: entry.endsWith('.swap') ? 'swap' : 'tmp',
-    }));
-    if (existsSync(path)) {
-        if (!lstatSync(path).isFile())
-            throw new Error('ATOMIC_REPLACE_RECOVERY_UNSAFE');
-        for (const artifact of artifacts) {
-            if (!lstatSync(artifact.path).isFile())
-                throw new Error('ATOMIC_REPLACE_RECOVERY_UNSAFE');
-        }
-        for (const artifact of artifacts)
-            unlinkSync(artifact.path);
-        if (artifacts.length > 0)
-            fsyncDirectoryBestEffort(directory);
-        return 'none';
-    }
-    const swaps = artifacts.filter((artifact) => artifact.kind === 'swap');
-    const temps = artifacts.filter((artifact) => artifact.kind === 'tmp');
-    if (swaps.length > 1 || (swaps.length === 0 && temps.length > 1)) {
-        throw new Error('ATOMIC_REPLACE_RECOVERY_AMBIGUOUS');
-    }
-    const selected = swaps[0] ?? temps[0];
-    if (!selected)
-        return 'none';
-    if (!lstatSync(selected.path).isFile())
-        throw new Error('ATOMIC_REPLACE_RECOVERY_UNSAFE');
-    renameSync(selected.path, path);
-    for (const artifact of artifacts) {
-        if (artifact.path === selected.path || !existsSync(artifact.path))
-            continue;
-        try {
-            unlinkSync(artifact.path);
-        }
-        catch { /* recovered destination is authoritative */ }
-    }
-    fsyncDirectoryBestEffort(directory);
-    return selected.kind === 'swap' ? 'restored-swap' : 'promoted-temp';
-}
-/** Best-effort directory durability; Windows can reject directory handles. */
-export function fsyncDirectoryBestEffort(path) {
-    let fd;
-    try {
-        fd = openSync(path, 'r');
-        fsyncSync(fd);
-    }
-    catch {
-        // The temp file itself is always fsynced before replacement. On hosts that
-        // cannot fsync directories this is the strongest portable boundary.
-    }
-    finally {
-        if (fd !== undefined)
-            closeSync(fd);
-    }
-}
-/** Create a new UTF-8 file and make its contents durable before returning. */
-export function durableCreateUtf8(path, contents) {
-    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
-    let fd;
-    try {
-        fd = openSync(path, 'wx', 0o600);
-        writeFileSync(fd, contents, 'utf8');
-        fsyncSync(fd);
-    }
-    catch (error) {
-        if (fd !== undefined) {
-            try {
-                closeSync(fd);
-            }
-            catch { /* best effort before cleanup */ }
-            fd = undefined;
-        }
-        try {
-            if (existsSync(path))
-                unlinkSync(path);
-        }
-        catch { /* best effort */ }
-        fsyncDirectoryBestEffort(dirname(path));
-        throw error;
-    }
-    finally {
-        if (fd !== undefined)
-            closeSync(fd);
-    }
-    fsyncDirectoryBestEffort(dirname(path));
-}
-/**
- * Replace one UTF-8 state file without truncating the live destination.
- * The fallback swap exists for Windows rename semantics and restores the
- * original if installing the new file fails.
- */
-export function atomicReplaceUtf8(path, contents) {
-    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
-    const token = `${process.pid}.${randomUUID()}`;
-    const temp = `${path}.${token}.tmp`;
-    const swap = `${path}.${token}.swap`;
-    writeFileSync(temp, contents, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
-    const fd = openSync(temp, 'r');
-    try {
-        fsyncSync(fd);
-    }
-    finally {
-        closeSync(fd);
-    }
-    try {
-        renameSync(temp, path);
-    }
-    catch {
-        let movedOriginal = false;
-        try {
-            if (existsSync(path)) {
-                renameSync(path, swap);
-                movedOriginal = true;
-            }
-            renameSync(temp, path);
-        }
-        catch (fallbackError) {
-            if (movedOriginal && !existsSync(path) && existsSync(swap))
-                renameSync(swap, path);
-            try {
-                if (existsSync(temp))
-                    unlinkSync(temp);
-            }
-            catch { /* best effort */ }
-            throw fallbackError;
-        }
-        if (movedOriginal) {
-            try {
-                unlinkSync(swap);
-            }
-            catch { /* stale swap is safer than an uncertain replace */ }
-        }
-    }
-    fsyncDirectoryBestEffort(dirname(path));
-}
+import{randomUUID as C}from"node:crypto";import{closeSync as E,existsSync as f,fsyncSync as y,lstatSync as p,mkdirSync as w,openSync as u,readdirSync as R,renameSync as l,unlinkSync as d,writeFileSync as A}from"node:fs";import{basename as S,dirname as s,join as h}from"node:path";const _=/^\d+\.[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}\.(tmp|swap)$/i;function k(t){const n=s(t);if(!f(n))return"none";const o=`${S(t)}.`,e=R(n).filter(r=>r.startsWith(o)&&_.test(r.slice(o.length))).map(r=>({entry:r,path:h(n,r),kind:r.endsWith(".swap")?"swap":"tmp"}));if(f(t)){if(!p(t).isFile())throw new Error("ATOMIC_REPLACE_RECOVERY_UNSAFE");for(const r of e)if(!p(r.path).isFile())throw new Error("ATOMIC_REPLACE_RECOVERY_UNSAFE");for(const r of e)d(r.path);return e.length>0&&m(n),"none"}const c=e.filter(r=>r.kind==="swap"),a=e.filter(r=>r.kind==="tmp");if(c.length>1||c.length===0&&a.length>1)throw new Error("ATOMIC_REPLACE_RECOVERY_AMBIGUOUS");const i=c[0]??a[0];if(!i)return"none";if(!p(i.path).isFile())throw new Error("ATOMIC_REPLACE_RECOVERY_UNSAFE");l(i.path,t);for(const r of e)if(!(r.path===i.path||!f(r.path)))try{d(r.path)}catch{}return m(n),i.kind==="swap"?"restored-swap":"promoted-temp"}function m(t){let n;try{n=u(t,"r"),y(n)}catch{}finally{n!==void 0&&E(n)}}function x(t,n){w(s(t),{recursive:!0,mode:448});let o;try{o=u(t,"wx",384),A(o,n,"utf8"),y(o)}catch(e){if(o!==void 0){try{E(o)}catch{}o=void 0}try{f(t)&&d(t)}catch{}throw m(s(t)),e}finally{o!==void 0&&E(o)}m(s(t))}function $(t,n){w(s(t),{recursive:!0,mode:448});const o=`${process.pid}.${C()}`,e=`${t}.${o}.tmp`,c=`${t}.${o}.swap`;A(e,n,{encoding:"utf8",mode:384,flag:"wx"});const a=u(e,"r");try{y(a)}finally{E(a)}try{l(e,t)}catch{let i=!1;try{f(t)&&(l(t,c),i=!0),l(e,t)}catch(r){i&&!f(t)&&f(c)&&l(c,t);try{f(e)&&d(e)}catch{}throw r}if(i)try{d(c)}catch{}}m(s(t))}export{$ as atomicReplaceUtf8,x as durableCreateUtf8,m as fsyncDirectoryBestEffort,k as recoverAtomicReplaceUtf8};