@ornexus/neocortex 4.60.68 → 4.60.70

package/packages/client/dist/runner/headless/types.js

@@ -1,574 +1,2 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P190.04 -- public-safe headless runtime/adapter contracts.
- */
-import { createHash } from 'node:crypto';
-import { spawn } from 'node:child_process';
-import { createLocalJobConsoleServer } from '../local-console.js';
-export const HEADLESS_ADAPTER_IDS = Object.freeze([
-    'fake',
-    'test',
-    'opencode',
-    'claude-code',
-]);
-export const HEADLESS_REASON_CODES = Object.freeze({
-    OK: 'continuity-ok',
-    RUNTIME_EXPLICIT: 'headless-runtime-explicit',
-    RUNTIME_ORIGIN: 'headless-runtime-origin',
-    RUNTIME_DEFAULT: 'headless-runtime-default',
-    RUNTIME_FALLBACK: 'headless-runtime-fallback',
-    RUNTIME_UNRESOLVED: 'headless-runtime-unresolved',
-    RUNTIME_UNTRUSTED: 'headless-runtime-untrusted',
-    MODEL_REJECTED: 'headless-model-rejected',
-    DIRECTIVE_REJECTED: 'headless-directive-rejected',
-    PROMPT_REJECTED: 'headless-prompt-rejected',
-    ADAPTER_UNAVAILABLE: 'headless-adapter-unavailable',
-    RUNTIME_AUTH_REQUIRED: 'headless-runtime-auth-required',
-    MANAGED_PROFILE_MISSING: 'headless-managed-profile-missing',
-    MANAGED_PROFILE_INVALID: 'headless-managed-profile-invalid',
-    APPROVAL_POLICY_INVALID: 'headless-approval-policy-invalid',
-    APPROVAL_POLICY_MISMATCH: 'headless-approval-policy-mismatch',
-    EXECUTION_CANCELLED: 'headless-execution-cancelled',
-    EXECUTION_TIMEOUT: 'headless-execution-timeout',
-    EXECUTION_BACKOFF: 'headless-execution-backoff',
-    EXECUTION_COMPLETED: 'headless-execution-completed',
-    EXECUTION_FAILED: 'headless-execution-failed',
-    RECEIPT_REDACTED: 'headless-receipt-redacted',
-    YOLOOP_METADATA_INVALID: 'headless-yoloop-metadata-invalid',
-    YOLOOP_ISOLATION_VIOLATION: 'headless-yoloop-isolation-violation',
-    WORKER_POOL_SERIAL_FALLBACK: 'worker-pool-serial-fallback',
-    WORKER_POOL_PARALLEL_ACTIVE: 'worker-pool-parallel-active',
-    WORKER_POOL_BACKPRESSURE_PAUSED: 'worker-pool-backpressure-paused',
-});
-const HEADLESS_MODEL_ID_MAX_CHARS = 120;
-const HEADLESS_PUBLIC_SUMMARY_MAX_CHARS = 240;
-const DEFAULT_TIMEOUT_MS = 10 * 60 * 1000;
-const MAX_TIMEOUT_MS = 30 * 60 * 1000;
-const MODEL_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:+/-]{0,119}$/;
-const STORY_REF_PATTERN = /^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/;
-const EPIC_REF_PATTERN = /^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/;
-const UNSAFE_KEY_PATTERN = /(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i;
-const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i;
-const SHELL_FRAGMENT_PATTERN = /(?:[;&|`$<>]|\$\(|\n|\r|\0)/;
-const ADAPTER_INPUT_ALLOWED_KEYS = new Set([
-    'promptKind',
-    'targetKind',
-    'targetRef',
-    'storyId',
-    'epicId',
-    'runtimeId',
-    'modelId',
-    'runtimeSource',
-    'timeoutMs',
-    'receipt',
-    'publicSummary',
-    'publicSafe',
-]);
-const RECEIPT_ALLOWED_KEYS = new Set([
-    'executionId',
-    'attemptId',
-    'jobId',
-    'operationId',
-    'idempotencyKey',
-    'runnerId',
-    'subagentId',
-]);
-export function isHeadlessAdapterId(value) {
-    return HEADLESS_ADAPTER_IDS.includes(value);
-}
-export function validateHeadlessAdapterExecutionInput(input, expectedRuntimeId) {
-    const redactions = [];
-    const rejectedKeys = [];
-    if (!isRecord(input)) {
-        redactions.push(redaction('input', 'unsafe_key', 'value-denied'));
-        return rejectAdapterInput(HEADLESS_REASON_CODES.DIRECTIVE_REJECTED, 'Headless adapter input must be a public object.', redactions);
-    }
-    for (const key of Object.keys(input)) {
-        if (!ADAPTER_INPUT_ALLOWED_KEYS.has(key)) {
-            rejectedKeys.push(key);
-            redactions.push(redaction(key, unsafeKeyReason(key), 'key-denied'));
-        }
-    }
-    const publicSafe = input.publicSafe === true;
-    if (!publicSafe)
-        redactions.push(redaction('publicSafe', 'unsafe_key', 'value-denied'));
-    const promptKind = stringValue(input.promptKind);
-    if (promptKind !== 'yolo' && promptKind !== 'yolo-branchless-preparation' && promptKind !== 'yoloop') {
-        redactions.push(redaction('promptKind', 'unsafe_key', 'value-denied'));
-    }
-    const targetKind = stringValue(input.targetKind);
-    if (targetKind !== 'story' && targetKind !== 'epic') {
-        redactions.push(redaction('targetKind', 'unsafe_key', 'value-denied'));
-    }
-    const targetRef = stringValue(input.targetRef);
-    if (!targetRef || !isSafePublicText(targetRef) || SHELL_FRAGMENT_PATTERN.test(targetRef) || targetRef.includes('..')) {
-        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
-    }
-    if ((promptKind === 'yolo' || promptKind === 'yolo-branchless-preparation')
-        && (targetKind !== 'story' || !targetRef || !STORY_REF_PATTERN.test(targetRef))) {
-        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
-    }
-    if (promptKind === 'yoloop' && (targetKind !== 'epic' || !targetRef || !EPIC_REF_PATTERN.test(targetRef))) {
-        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
-    }
-    const storyId = optionalSafeString(input.storyId, 'storyId', redactions);
-    const epicId = optionalSafeString(input.epicId, 'epicId', redactions);
-    if (storyId && targetRef && (promptKind === 'yolo' || promptKind === 'yolo-branchless-preparation')
-        && storyId !== targetRef.replace(/^docs\/stories\//, '').replace(/\.story\.md$/, '')) {
-        redactions.push(redaction('storyId', 'prompt_body', 'value-denied'));
-    }
-    if (epicId && targetRef && promptKind === 'yoloop' && epicId !== targetRef.replace(/^docs\/epics\/epic-/, '').replace(/\.md$/, '')) {
-        redactions.push(redaction('epicId', 'prompt_body', 'value-denied'));
-    }
-    const runtimeId = stringValue(input.runtimeId);
-    if (!runtimeId || !isHeadlessAdapterId(runtimeId) || (expectedRuntimeId && runtimeId !== expectedRuntimeId)) {
-        redactions.push(redaction('runtimeId', 'unsafe_key', 'value-denied'));
-    }
-    const modelId = optionalSafeModelId(input.modelId, redactions);
-    const runtimeSource = optionalRuntimeSource(input.runtimeSource, redactions);
-    const timeoutMs = normalizeTimeout(input.timeoutMs, redactions);
-    const publicSummary = optionalPublicSummary(input.publicSummary, redactions);
-    const receipt = validateReceipt(input.receipt, redactions);
-    if (redactions.length > 0 || rejectedKeys.length > 0 || !publicSafe || !promptKind || !targetKind || !targetRef || !runtimeId) {
-        const modelRejected = redactions.some((item) => item.field === 'modelId');
-        const promptRejected = redactions.some((item) => item.reason === 'prompt_body');
-        return rejectAdapterInput(modelRejected
-            ? HEADLESS_REASON_CODES.MODEL_REJECTED
-            : promptRejected
-                ? HEADLESS_REASON_CODES.PROMPT_REJECTED
-                : HEADLESS_REASON_CODES.DIRECTIVE_REJECTED, promptRejected
-            ? 'Headless adapter target did not match a public prompt shape.'
-            : 'Headless adapter input failed public-safety validation.', redactions);
-    }
-    const normalized = {
-        promptKind: promptKind,
-        targetKind: targetKind,
-        targetRef,
-        ...(storyId ? { storyId } : {}),
-        ...(epicId ? { epicId } : {}),
-        runtimeId: runtimeId,
-        ...(modelId ? { modelId } : {}),
-        ...(runtimeSource ? { runtimeSource } : {}),
-        ...(timeoutMs ? { timeoutMs } : {}),
-        ...(receipt ? { receipt } : {}),
-        ...(publicSummary ? { publicSummary } : {}),
-        publicSafe: true,
-    };
-    const prompt = renderHeadlessPrompt(normalized);
-    return {
-        ok: true,
-        input: normalized,
-        prompt,
-        promptHash: hashPublicValue(prompt),
-        reasonCodes: [HEADLESS_REASON_CODES.OK],
-        publicSafe: true,
-    };
-}
-export function renderHeadlessPrompt(input) {
-    if (input.promptKind === 'yolo')
-        return `*yolo @${input.targetRef}`;
-    if (input.promptKind === 'yolo-branchless-preparation')
-        return `*yolo @${input.targetRef} branchless-preparation`;
-    return `*yoloop @${input.targetRef}`;
-}
-export function hashPublicValue(value) {
-    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
-}
-export function createRejectedExecutionResult(adapterId, runtimeId, rejected, durationMs = 0) {
-    return {
-        status: 'failed',
-        adapterId,
-        runtimeId,
-        reasonCode: rejected.reasonCode,
-        reasonCodes: rejected.reasonCodes,
-        durationMs,
-        counts: {},
-        hashes: {},
-        publicSummary: boundPublicSummary(rejected.publicSummary),
-        redactionSummary: rejected.redactionSummary,
-        relativePaths: [],
-        publicSafe: true,
-    };
-}
-export function createUnavailableExecutionResult(adapterId, input, availability, durationMs = 0) {
-    return {
-        status: 'failed',
-        adapterId,
-        runtimeId: input.runtimeId,
-        ...(input.modelId ? { modelId: input.modelId } : {}),
-        ...(input.runtimeSource ? { runtimeSource: input.runtimeSource } : {}),
-        reasonCode: availability.reasonCode,
-        reasonCodes: availability.reasonCodes,
-        durationMs,
-        counts: {},
-        hashes: { prompt: hashPublicValue(renderHeadlessPrompt(input)) },
-        publicSummary: boundPublicSummary(availability.publicSummary),
-        redactionSummary: availability.redactionSummary,
-        relativePaths: [input.targetRef],
-        ...(input.receipt ? { receipt: input.receipt } : {}),
-        publicSafe: true,
-    };
-}
-export function normalizeHeadlessCommandResult(adapterId, input, commandResult) {
-    const prompt = renderHeadlessPrompt(input);
-    const stdoutHash = hashPublicValue(commandResult.stdout);
-    const stderrHash = hashPublicValue(commandResult.stderr);
-    const authEvidenceMatches = commandResult.timedOut || commandResult.exitCode === 0
-        ? 0
-        : countHeadlessAuthEvidenceMatches(commandResult.stdout, commandResult.stderr);
-    const status = commandResult.cancelled
-        ? 'failed'
-        : commandResult.timedOut
-            ? 'timed_out'
-            : commandResult.exitCode === 0
-                ? 'completed'
-                : 'failed';
-    const reasonCode = commandResult.cancelled
-        ? HEADLESS_REASON_CODES.EXECUTION_CANCELLED
-        : commandResult.timedOut
-            ? HEADLESS_REASON_CODES.EXECUTION_TIMEOUT
-            : commandResult.exitCode === 0
-                ? HEADLESS_REASON_CODES.EXECUTION_COMPLETED
-                : authEvidenceMatches > 0
-                    ? HEADLESS_REASON_CODES.RUNTIME_AUTH_REQUIRED
-                    : HEADLESS_REASON_CODES.EXECUTION_FAILED;
-    const redactionSummary = [
-        redaction('prompt', 'prompt_body', hashPublicValue(prompt)),
-    ];
-    if (commandResult.stdoutBytes > 0)
-        redactionSummary.push(redaction('stdout', 'raw_log', stdoutHash));
-    if (commandResult.stderrBytes > 0)
-        redactionSummary.push(redaction('stderr', 'raw_log', stderrHash));
-    return {
-        status,
-        adapterId,
-        runtimeId: input.runtimeId,
-        ...(input.modelId ? { modelId: input.modelId } : {}),
-        ...(input.runtimeSource ? { runtimeSource: input.runtimeSource } : {}),
-        reasonCode,
-        reasonCodes: [reasonCode, HEADLESS_REASON_CODES.RECEIPT_REDACTED],
-        exitCode: commandResult.exitCode,
-        signal: commandResult.signal ?? null,
-        durationMs: commandResult.durationMs,
-        counts: {
-            stdoutBytes: commandResult.stdoutBytes,
-            stderrBytes: commandResult.stderrBytes,
-            stdoutLines: countLines(commandResult.stdout),
-            stderrLines: countLines(commandResult.stderr),
-            ...(authEvidenceMatches > 0 ? { authEvidenceMatches } : {}),
-        },
-        hashes: {
-            prompt: hashPublicValue(prompt),
-            stdout: stdoutHash,
-            stderr: stderrHash,
-        },
-        publicSummary: status === 'completed'
-            ? 'Headless adapter completed with public-safe redacted output summary.'
-            : reasonCode === HEADLESS_REASON_CODES.EXECUTION_CANCELLED
-                ? 'Headless adapter was cancelled; raw output was redacted.'
-                : status === 'timed_out'
-                    ? 'Headless adapter timed out; raw output was redacted.'
-                    : reasonCode === HEADLESS_REASON_CODES.RUNTIME_AUTH_REQUIRED
-                        ? 'Headless adapter requires local runtime authentication; raw output was redacted.'
-                        : 'Headless adapter failed; raw output was redacted.',
-        redactionSummary,
-        relativePaths: [input.targetRef],
-        ...(input.receipt ? { receipt: input.receipt } : {}),
-        publicSafe: true,
-    };
-}
-export async function runHeadlessCommand(command, args, options = {}) {
-    const startedAt = Date.now();
-    const timeoutMs = normalizeRunnerTimeout(options.timeoutMs);
-    const maxOutputBytes = options.maxOutputBytes ?? 64_000;
-    if (options.signal?.aborted) {
-        return {
-            exitCode: null,
-            signal: 'SIGTERM',
-            timedOut: false,
-            cancelled: true,
-            durationMs: Date.now() - startedAt,
-            stdout: '',
-            stderr: '',
-            stdoutBytes: 0,
-            stderrBytes: 0,
-        };
-    }
-    return await new Promise((resolve) => {
-        const child = spawn(command, [...args], {
-            cwd: options.cwd,
-            env: options.env,
-            shell: false,
-            stdio: [options.localConsole ? 'pipe' : 'ignore', 'pipe', 'pipe'],
-        });
-        const localConsole = options.localConsole?.jobId
-            ? createLocalJobConsoleServer({
-                ...options.localConsole,
-                projectRoot: options.localConsole.projectRoot ?? options.cwd,
-                writeStdin: (chunk) => {
-                    child.stdin?.write(chunk);
-                },
-                signalProcess: (signal) => child.kill(signal),
-            })
-            : undefined;
-        void localConsole?.start();
-        let stdout = '';
-        let stderr = '';
-        let stdoutBytes = 0;
-        let stderrBytes = 0;
-        let settled = false;
-        let timedOut = false;
-        let cancelled = false;
-        const abort = () => {
-            if (settled)
-                return;
-            cancelled = true;
-            child.kill('SIGTERM');
-        };
-        options.signal?.addEventListener('abort', abort, { once: true });
-        const cleanup = () => {
-            options.signal?.removeEventListener('abort', abort);
-        };
-        const append = (current, chunk, previousBytes) => {
-            const bytes = previousBytes + chunk.length;
-            if (current.length < maxOutputBytes) {
-                const remaining = maxOutputBytes - current.length;
-                return { text: current + chunk.toString('utf8').slice(0, remaining), bytes };
-            }
-            return { text: current, bytes };
-        };
-        child.stdout?.on('data', (chunk) => {
-            const next = append(stdout, chunk, stdoutBytes);
-            stdout = next.text;
-            stdoutBytes = next.bytes;
-            localConsole?.broadcastStdout(chunk);
-        });
-        child.stderr?.on('data', (chunk) => {
-            const next = append(stderr, chunk, stderrBytes);
-            stderr = next.text;
-            stderrBytes = next.bytes;
-            localConsole?.broadcastStderr(chunk);
-        });
-        const timer = setTimeout(() => {
-            timedOut = true;
-            child.kill('SIGTERM');
-        }, timeoutMs);
-        child.on('error', (error) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            cleanup();
-            localConsole?.close({ exitCode: 127, signal: null });
-            const safeMessage = error instanceof Error ? error.message : String(error);
-            resolve({
-                exitCode: 127,
-                signal: null,
-                timedOut: false,
-                cancelled,
-                durationMs: Date.now() - startedAt,
-                stdout,
-                stderr: safeMessage,
-                stdoutBytes,
-                stderrBytes: Buffer.byteLength(safeMessage),
-            });
-        });
-        child.on('close', (exitCode, signal) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            cleanup();
-            localConsole?.close({ exitCode, signal });
-            resolve({
-                exitCode,
-                signal,
-                timedOut,
-                cancelled,
-                durationMs: Date.now() - startedAt,
-                stdout,
-                stderr,
-                stdoutBytes,
-                stderrBytes,
-            });
-        });
-    });
-}
-export function adapterAvailabilityFailure(adapterId, commandName, reasonCode, publicSummary, redactionSummary = []) {
-    return {
-        ok: false,
-        adapterId,
-        ...(commandName ? { commandName } : {}),
-        reasonCode,
-        reasonCodes: [reasonCode],
-        publicSummary: boundPublicSummary(publicSummary),
-        redactionSummary,
-        publicSafe: true,
-    };
-}
-export function adapterAvailabilitySuccess(adapterId, commandName, publicSummary, details = {}) {
-    const result = {
-        ok: true,
-        adapterId,
-        commandName,
-        ...(details.versionText ? { versionHash: hashPublicValue(details.versionText) } : {}),
-        reasonCodes: [HEADLESS_REASON_CODES.OK],
-        publicSummary: boundPublicSummary(publicSummary),
-        publicSafe: true,
-    };
-    if (details.executablePath) {
-        Object.defineProperty(result, 'executablePath', {
-            value: details.executablePath,
-            enumerable: false,
-            configurable: false,
-        });
-    }
-    return result;
-}
-export function redaction(field, reason, evidence) {
-    return { field, reason, evidence, publicSafe: true };
-}
-export function boundPublicSummary(value) {
-    return value.length <= HEADLESS_PUBLIC_SUMMARY_MAX_CHARS
-        ? value
-        : `${value.slice(0, HEADLESS_PUBLIC_SUMMARY_MAX_CHARS)}…[TRUNCATED:${value.length - HEADLESS_PUBLIC_SUMMARY_MAX_CHARS}]`;
-}
-export function isSafeHeadlessModelId(value) {
-    return value.length <= HEADLESS_MODEL_ID_MAX_CHARS
-        && MODEL_ID_PATTERN.test(value)
-        && !UNSAFE_VALUE_PATTERN.test(value)
-        && !SHELL_FRAGMENT_PATTERN.test(value)
-        && !value.includes('..')
-        && !value.startsWith('/');
-}
-function rejectAdapterInput(reasonCode, publicSummary, redactions) {
-    return {
-        ok: false,
-        reasonCode,
-        reasonCodes: [reasonCode],
-        publicSummary: boundPublicSummary(publicSummary),
-        redactionSummary: redactions,
-        publicSafe: true,
-    };
-}
-function optionalSafeString(value, field, redactions) {
-    if (value === undefined)
-        return undefined;
-    const text = stringValue(value);
-    if (!text || !isSafePublicText(text) || SHELL_FRAGMENT_PATTERN.test(text)) {
-        redactions.push(redaction(field, unsafeKeyReason(field), 'value-denied'));
-        return undefined;
-    }
-    return text;
-}
-function optionalSafeModelId(value, redactions) {
-    if (value === undefined)
-        return undefined;
-    const modelId = stringValue(value);
-    if (!modelId || !isSafeHeadlessModelId(modelId)) {
-        redactions.push(redaction('modelId', 'unsafe_key', 'value-denied'));
-        return undefined;
-    }
-    return modelId;
-}
-function optionalRuntimeSource(value, redactions) {
-    if (value === undefined)
-        return undefined;
-    if (value === 'explicit' || value === 'origin' || value === 'default' || value === 'fallback')
-        return value;
-    redactions.push(redaction('runtimeSource', 'unsafe_key', 'value-denied'));
-    return undefined;
-}
-function normalizeTimeout(value, redactions) {
-    if (value === undefined)
-        return undefined;
-    if (typeof value !== 'number' || !Number.isInteger(value) || value <= 0 || value > MAX_TIMEOUT_MS) {
-        redactions.push(redaction('timeoutMs', 'unbounded_number', 'value-denied'));
-        return undefined;
-    }
-    return value;
-}
-function normalizeRunnerTimeout(value) {
-    if (!value || !Number.isInteger(value) || value <= 0 || value > MAX_TIMEOUT_MS)
-        return DEFAULT_TIMEOUT_MS;
-    return value;
-}
-function optionalPublicSummary(value, redactions) {
-    if (value === undefined)
-        return undefined;
-    const text = stringValue(value);
-    if (!text || text.length > HEADLESS_PUBLIC_SUMMARY_MAX_CHARS || !isSafePublicText(text)) {
-        redactions.push(redaction('publicSummary', 'unbounded_text', 'value-denied'));
-        return undefined;
-    }
-    return text;
-}
-function validateReceipt(value, redactions) {
-    if (value === undefined)
-        return undefined;
-    if (!isRecord(value)) {
-        redactions.push(redaction('receipt', 'unsafe_key', 'value-denied'));
-        return undefined;
-    }
-    const receipt = {};
-    for (const [key, child] of Object.entries(value)) {
-        if (!RECEIPT_ALLOWED_KEYS.has(key) || UNSAFE_KEY_PATTERN.test(key)) {
-            redactions.push(redaction(`receipt.${key}`, unsafeKeyReason(key), 'key-denied'));
-            continue;
-        }
-        const text = optionalSafeString(child, `receipt.${key}`, redactions);
-        if (text)
-            receipt[key] = text;
-    }
-    return Object.keys(receipt).length > 0 ? receipt : undefined;
-}
-function unsafeKeyReason(key) {
-    if (/prompt/i.test(key))
-        return 'prompt_body';
-    if (/std(?:out|err)|raw|log|transcript|stack/i.test(key))
-        return 'raw_log';
-    if (/url/i.test(key))
-        return 'private_url';
-    if (/path|cwd|argv|args|shell|command|binary|executable/i.test(key))
-        return 'executable_path';
-    if (/secret|token|password|authorization|api[_-]?key|license/i.test(key))
-        return 'secret_or_pii';
-    return 'unsafe_key';
-}
-function stringValue(value) {
-    return typeof value === 'string' ? value : undefined;
-}
-function isSafePublicText(value) {
-    return value.length > 0 && !UNSAFE_VALUE_PATTERN.test(value) && !/\0/.test(value);
-}
-function countLines(value) {
-    if (!value)
-        return 0;
-    return value.split(/\r?\n/).filter((line) => line.length > 0).length;
-}
-const HEADLESS_AUTH_EVIDENCE_PATTERNS = Object.freeze([
-    /\bauth(?:entication|orization)?\s+(?:is\s+)?required\b/i,
-    /\brequires?\s+authentication\b/i,
-    /\bmust\s+(?:log\s?in|authenticate|be\s+authenticated)\b/i,
-    /\bunauthenticated\b/i,
-    /\b(?:not|unauthenticated)\s+(?:logged\s+in|authenticated)\b/i,
-    /\blog\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,
-    /\bplease\s+(?:log\s?in|authenticate|sign\s?in)\b/i,
-    /\bsign\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,
-    /\bsession\s+(?:expired|not\s+found|invalid)\b/i,
-    /\bcredentials?\s+(?:missing|required|not\s+found)\b/i,
-]);
-function countHeadlessAuthEvidenceMatches(...values) {
-    const bounded = values
-        .filter((value) => value.length > 0)
-        .map((value) => value.slice(0, 8_000))
-        .join('\n');
-    if (!bounded)
-        return 0;
-    return HEADLESS_AUTH_EVIDENCE_PATTERNS.reduce((count, pattern) => count + (pattern.test(bounded) ? 1 : 0), 0);
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
+import{createHash as v}from"node:crypto";import{spawn as V}from"node:child_process";import{createLocalJobConsoleServer as z}from"../local-console.js";const F=Object.freeze(["fake","test","opencode","claude-code"]),l=Object.freeze({OK:"continuity-ok",RUNTIME_EXPLICIT:"headless-runtime-explicit",RUNTIME_ORIGIN:"headless-runtime-origin",RUNTIME_DEFAULT:"headless-runtime-default",RUNTIME_FALLBACK:"headless-runtime-fallback",RUNTIME_UNRESOLVED:"headless-runtime-unresolved",RUNTIME_UNTRUSTED:"headless-runtime-untrusted",MODEL_REJECTED:"headless-model-rejected",DIRECTIVE_REJECTED:"headless-directive-rejected",PROMPT_REJECTED:"headless-prompt-rejected",ADAPTER_UNAVAILABLE:"headless-adapter-unavailable",RUNTIME_AUTH_REQUIRED:"headless-runtime-auth-required",MANAGED_PROFILE_MISSING:"headless-managed-profile-missing",MANAGED_PROFILE_INVALID:"headless-managed-profile-invalid",APPROVAL_POLICY_INVALID:"headless-approval-policy-invalid",APPROVAL_POLICY_MISMATCH:"headless-approval-policy-mismatch",EXECUTION_CANCELLED:"headless-execution-cancelled",EXECUTION_TIMEOUT:"headless-execution-timeout",EXECUTION_BACKOFF:"headless-execution-backoff",EXECUTION_COMPLETED:"headless-execution-completed",EXECUTION_FAILED:"headless-execution-failed",RECEIPT_REDACTED:"headless-receipt-redacted",YOLOOP_METADATA_INVALID:"headless-yoloop-metadata-invalid",YOLOOP_ISOLATION_VIOLATION:"headless-yoloop-isolation-violation",WORKER_POOL_SERIAL_FALLBACK:"worker-pool-serial-fallback",WORKER_POOL_PARALLEL_ACTIVE:"worker-pool-parallel-active",WORKER_POOL_BACKPRESSURE_PAUSED:"worker-pool-backpressure-paused"}),$=120,O=240,X=600*1e3,U=1800*1e3,Y=/^[A-Za-z0-9][A-Za-z0-9._:+/-]{0,119}$/,G=/^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/,J=/^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/,Z=/(raw[_-]?(?:logs?|payloads?)|std(?:out|err)|stack(?:[_-]?trace)?|transcript|objective(?:[_-]?(?:text|body|prompt))|prompt(?:[_-]?(?:body|text))?|private[_-]?(?:urls?|prompts?)|secret|token|password|protected(?:[_-]?(?:field|body|bodies|internals))?|workflow(?:[_-]?body)?|step(?:[_-]?body)?|customer(?:[_-]?(?:pii|data))?|\bpii\b|authorization|api[_-]?key|license[_-]?key|argv|args|executable(?:[_-]?path)?|binary(?:[_-]?path)?|shell|cwd|command[_-]?path|vendor(?:[_-]?(?:payload|corpus|response|output)))/i,w=/(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i,L=/(?:[;&|`$<>]|\$\(|\n|\r|\0)/,q=new Set(["promptKind","targetKind","targetRef","storyId","epicId","runtimeId","modelId","runtimeSource","timeoutMs","receipt","publicSummary","publicSafe"]),W=new Set(["executionId","attemptId","jobId","operationId","idempotencyKey","runnerId","subagentId"]);function Q(e){return F.includes(e)}function pe(e,r){const t=[],s=[];if(!K(e))return t.push(i("input","unsafe_key","value-denied")),k(l.DIRECTIVE_REJECTED,"Headless adapter input must be a public object.",t);for(const m of Object.keys(e))q.has(m)||(s.push(m),t.push(i(m,x(m),"key-denied")));const u=e.publicSafe===!0;u||t.push(i("publicSafe","unsafe_key","value-denied"));const a=h(e.promptKind);a!=="yolo"&&a!=="yolo-branchless-preparation"&&a!=="yoloop"&&t.push(i("promptKind","unsafe_key","value-denied"));const p=h(e.targetKind);p!=="story"&&p!=="epic"&&t.push(i("targetKind","unsafe_key","value-denied"));const o=h(e.targetRef);(!o||!M(o)||L.test(o)||o.includes(".."))&&t.push(i("targetRef","prompt_body","value-denied")),(a==="yolo"||a==="yolo-branchless-preparation")&&(p!=="story"||!o||!G.test(o))&&t.push(i("targetRef","prompt_body","value-denied")),a==="yoloop"&&(p!=="epic"||!o||!J.test(o))&&t.push(i("targetRef","prompt_body","value-denied"));const d=P(e.storyId,"storyId",t),f=P(e.epicId,"epicId",t);d&&o&&(a==="yolo"||a==="yolo-branchless-preparation")&&d!==o.replace(/^docs\/stories\//,"").replace(/\.story\.md$/,"")&&t.push(i("storyId","prompt_body","value-denied")),f&&o&&a==="yoloop"&&f!==o.replace(/^docs\/epics\/epic-/,"").replace(/\.md$/,"")&&t.push(i("epicId","prompt_body","value-denied"));const E=h(e.runtimeId);(!E||!Q(E)||r&&E!==r)&&t.push(i("runtimeId","unsafe_key","value-denied"));const b=te(e.modelId,t),y=re(e.runtimeSource,t),_=se(e.timeoutMs,t),T=ne(e.publicSummary,t),S=ie(e.receipt,t);if(t.length>0||s.length>0||!u||!a||!p||!o||!E){const m=t.some(n=>n.field==="modelId"),g=t.some(n=>n.reason==="prompt_body");return k(m?l.MODEL_REJECTED:g?l.PROMPT_REJECTED:l.DIRECTIVE_REJECTED,g?"Headless adapter target did not match a public prompt shape.":"Headless adapter input failed public-safety validation.",t)}const A={promptKind:a,targetKind:p,targetRef:o,...d?{storyId:d}:{},...f?{epicId:f}:{},runtimeId:E,...b?{modelId:b}:{},...y?{runtimeSource:y}:{},..._?{timeoutMs:_}:{},...S?{receipt:S}:{},...T?{publicSummary:T}:{},publicSafe:!0},R=D(A);return{ok:!0,input:A,prompt:R,promptHash:I(R),reasonCodes:[l.OK],publicSafe:!0}}function D(e){return e.promptKind==="yolo"?`*yolo @${e.targetRef}`:e.promptKind==="yolo-branchless-preparation"?`*yolo @${e.targetRef} branchless-preparation`:`*yoloop @${e.targetRef}`}function I(e){return`sha256:${v("sha256").update(e).digest("hex")}`}function fe(e,r,t,s=0){return{status:"failed",adapterId:e,runtimeId:r,reasonCode:t.reasonCode,reasonCodes:t.reasonCodes,durationMs:s,counts:{},hashes:{},publicSummary:C(t.publicSummary),redactionSummary:t.redactionSummary,relativePaths:[],publicSafe:!0}}function Ee(e,r,t,s=0){return{status:"failed",adapterId:e,runtimeId:r.runtimeId,...r.modelId?{modelId:r.modelId}:{},...r.runtimeSource?{runtimeSource:r.runtimeSource}:{},reasonCode:t.reasonCode,reasonCodes:t.reasonCodes,durationMs:s,counts:{},hashes:{prompt:I(D(r))},publicSummary:C(t.publicSummary),redactionSummary:t.redactionSummary,relativePaths:[r.targetRef],...r.receipt?{receipt:r.receipt}:{},publicSafe:!0}}function me(e,r,t){const s=D(r),u=I(t.stdout),a=I(t.stderr),p=t.timedOut||t.exitCode===0?0:de(t.stdout,t.stderr),o=t.cancelled?"failed":t.timedOut?"timed_out":t.exitCode===0?"completed":"failed",d=t.cancelled?l.EXECUTION_CANCELLED:t.timedOut?l.EXECUTION_TIMEOUT:t.exitCode===0?l.EXECUTION_COMPLETED:p>0?l.RUNTIME_AUTH_REQUIRED:l.EXECUTION_FAILED,f=[i("prompt","prompt_body",I(s))];return t.stdoutBytes>0&&f.push(i("stdout","raw_log",u)),t.stderrBytes>0&&f.push(i("stderr","raw_log",a)),{status:o,adapterId:e,runtimeId:r.runtimeId,...r.modelId?{modelId:r.modelId}:{},...r.runtimeSource?{runtimeSource:r.runtimeSource}:{},reasonCode:d,reasonCodes:[d,l.RECEIPT_REDACTED],exitCode:t.exitCode,signal:t.signal??null,durationMs:t.durationMs,counts:{stdoutBytes:t.stdoutBytes,stderrBytes:t.stderrBytes,stdoutLines:H(t.stdout),stderrLines:H(t.stderr),...p>0?{authEvidenceMatches:p}:{}},hashes:{prompt:I(s),stdout:u,stderr:a},publicSummary:o==="completed"?"Headless adapter completed with public-safe redacted output summary.":d===l.EXECUTION_CANCELLED?"Headless adapter was cancelled; raw output was redacted.":o==="timed_out"?"Headless adapter timed out; raw output was redacted.":d===l.RUNTIME_AUTH_REQUIRED?"Headless adapter requires local runtime authentication; raw output was redacted.":"Headless adapter failed; raw output was redacted.",redactionSummary:f,relativePaths:[r.targetRef],...r.receipt?{receipt:r.receipt}:{},publicSafe:!0}}async function _e(e,r,t={}){const s=Date.now(),u=oe(t.timeoutMs),a=t.maxOutputBytes??64e3;return t.signal?.aborted?{exitCode:null,signal:"SIGTERM",timedOut:!1,cancelled:!0,durationMs:Date.now()-s,stdout:"",stderr:"",stdoutBytes:0,stderrBytes:0}:await new Promise(p=>{const o=V(e,[...r],{cwd:t.cwd,env:t.env,shell:!1,stdio:[t.localConsole?"pipe":"ignore","pipe","pipe"]}),d=t.localConsole?.jobId?z({...t.localConsole,projectRoot:t.localConsole.projectRoot??t.cwd,writeStdin:n=>{o.stdin?.write(n)},signalProcess:n=>o.kill(n)}):void 0;d?.start();let f="",E="",b=0,y=0,_=!1,T=!1,S=!1;const A=()=>{_||(S=!0,o.kill("SIGTERM"))};t.signal?.addEventListener("abort",A,{once:!0});const R=()=>{t.signal?.removeEventListener("abort",A)},m=(n,c,B)=>{const N=B+c.length;if(n.length<a){const j=a-n.length;return{text:n+c.toString("utf8").slice(0,j),bytes:N}}return{text:n,bytes:N}};o.stdout?.on("data",n=>{const c=m(f,n,b);f=c.text,b=c.bytes,d?.broadcastStdout(n)}),o.stderr?.on("data",n=>{const c=m(E,n,y);E=c.text,y=c.bytes,d?.broadcastStderr(n)});const g=setTimeout(()=>{T=!0,o.kill("SIGTERM")},u);o.on("error",n=>{if(_)return;_=!0,clearTimeout(g),R(),d?.close({exitCode:127,signal:null});const c=n instanceof Error?n.message:String(n);p({exitCode:127,signal:null,timedOut:!1,cancelled:S,durationMs:Date.now()-s,stdout:f,stderr:c,stdoutBytes:b,stderrBytes:Buffer.byteLength(c)})}),o.on("close",(n,c)=>{_||(_=!0,clearTimeout(g),R(),d?.close({exitCode:n,signal:c}),p({exitCode:n,signal:c,timedOut:T,cancelled:S,durationMs:Date.now()-s,stdout:f,stderr:E,stdoutBytes:b,stderrBytes:y}))})})}function be(e,r,t,s,u=[]){return{ok:!1,adapterId:e,...r?{commandName:r}:{},reasonCode:t,reasonCodes:[t],publicSummary:C(s),redactionSummary:u,publicSafe:!0}}function Ie(e,r,t,s={}){const u={ok:!0,adapterId:e,commandName:r,...s.versionText?{versionHash:I(s.versionText)}:{},reasonCodes:[l.OK],publicSummary:C(t),publicSafe:!0};return s.executablePath&&Object.defineProperty(u,"executablePath",{value:s.executablePath,enumerable:!1,configurable:!1}),u}function i(e,r,t){return{field:e,reason:r,evidence:t,publicSafe:!0}}function C(e){return e.length<=O?e:`${e.slice(0,O)}\u2026[TRUNCATED:${e.length-O}]`}function ee(e){return e.length<=$&&Y.test(e)&&!w.test(e)&&!L.test(e)&&!e.includes("..")&&!e.startsWith("/")}function k(e,r,t){return{ok:!1,reasonCode:e,reasonCodes:[e],publicSummary:C(r),redactionSummary:t,publicSafe:!0}}function P(e,r,t){if(e===void 0)return;const s=h(e);if(!s||!M(s)||L.test(s)){t.push(i(r,x(r),"value-denied"));return}return s}function te(e,r){if(e===void 0)return;const t=h(e);if(!t||!ee(t)){r.push(i("modelId","unsafe_key","value-denied"));return}return t}function re(e,r){if(e!==void 0){if(e==="explicit"||e==="origin"||e==="default"||e==="fallback")return e;r.push(i("runtimeSource","unsafe_key","value-denied"))}}function se(e,r){if(e!==void 0){if(typeof e!="number"||!Number.isInteger(e)||e<=0||e>U){r.push(i("timeoutMs","unbounded_number","value-denied"));return}return e}}function oe(e){return!e||!Number.isInteger(e)||e<=0||e>U?X:e}function ne(e,r){if(e===void 0)return;const t=h(e);if(!t||t.length>O||!M(t)){r.push(i("publicSummary","unbounded_text","value-denied"));return}return t}function ie(e,r){if(e===void 0)return;if(!K(e)){r.push(i("receipt","unsafe_key","value-denied"));return}const t={};for(const[s,u]of Object.entries(e)){if(!W.has(s)||Z.test(s)){r.push(i(`receipt.${s}`,x(s),"key-denied"));continue}const a=P(u,`receipt.${s}`,r);a&&(t[s]=a)}return Object.keys(t).length>0?t:void 0}function x(e){return/prompt/i.test(e)?"prompt_body":/std(?:out|err)|raw|log|transcript|stack/i.test(e)?"raw_log":/url/i.test(e)?"private_url":/path|cwd|argv|args|shell|command|binary|executable/i.test(e)?"executable_path":/secret|token|password|authorization|api[_-]?key|license/i.test(e)?"secret_or_pii":"unsafe_key"}function h(e){return typeof e=="string"?e:void 0}function M(e){return e.length>0&&!w.test(e)&&!/\0/.test(e)}function H(e){return e?e.split(/\r?\n/).filter(r=>r.length>0).length:0}const ae=Object.freeze([/\bauth(?:entication|orization)?\s+(?:is\s+)?required\b/i,/\brequires?\s+authentication\b/i,/\bmust\s+(?:log\s?in|authenticate|be\s+authenticated)\b/i,/\bunauthenticated\b/i,/\b(?:not|unauthenticated)\s+(?:logged\s+in|authenticated)\b/i,/\blog\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,/\bplease\s+(?:log\s?in|authenticate|sign\s?in)\b/i,/\bsign\s?in\s+(?:required|to\s+continue|before\s+continuing)\b/i,/\bsession\s+(?:expired|not\s+found|invalid)\b/i,/\bcredentials?\s+(?:missing|required|not\s+found)\b/i]);function de(...e){const r=e.filter(t=>t.length>0).map(t=>t.slice(0,8e3)).join(`
+`);return r?ae.reduce((t,s)=>t+(s.test(r)?1:0),0):0}function K(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}export{F as HEADLESS_ADAPTER_IDS,l as HEADLESS_REASON_CODES,be as adapterAvailabilityFailure,Ie as adapterAvailabilitySuccess,C as boundPublicSummary,fe as createRejectedExecutionResult,Ee as createUnavailableExecutionResult,I as hashPublicValue,Q as isHeadlessAdapterId,ee as isSafeHeadlessModelId,me as normalizeHeadlessCommandResult,i as redaction,D as renderHeadlessPrompt,_e as runHeadlessCommand,pe as validateHeadlessAdapterExecutionInput};