@ornexus/neocortex 4.60.71 → 4.60.73

package/packages/client/dist/evidence/collector.js

@@ -1 +1,347 @@
-import{createHash as q}from"node:crypto";import{lstatSync as A,readdirSync as G,readFileSync as z,realpathSync as E,statSync as O}from"node:fs";import{isAbsolute as F,relative as B,resolve as $}from"node:path";const J=Object.freeze({maxItems:48,maxFileBytes:96*1024,maxTotalBytes:512*1024,maxSummaryChars:280,maxEnvelopeBytes:64*1024,maxExclusions:64}),S=512,D=/(?:\.tsx?|\.jsx?|\.vue|\.svelte|\.css|\.scss|\.json|\.ya?ml|\.mdx?|\.html)$/i,V=/\.(?:png|jpe?g|webp)$/i,X=new Set([".git",".neocortex","node_modules","dist","build","coverage","core","private","secrets","credentials","raw-logs"]),I=/(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|\b(?:api[-_ ]?key|license[-_ ]?key|password|secret|token)\b\s*[:=]|\b(?:sk|pk|ghp|github_pat)_[A-Za-z0-9_-]{12,}|https?:\/\/(?:localhost|127\.0\.0\.1|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+|[^/\s]+\.(?:local|internal))\b|private\s+(?:prompt|workflow|customer data)|-----BEGIN [A-Z ]+PRIVATE KEY-----)/i,R=new Set(["metadata-only-v1","visual-pii-v1","strict-v1"]);function _(t){return q("sha256").update(t).digest("hex")}function j(t){if(Array.isArray(t))return`[${t.map(j).join(",")}]`;if(t&&typeof t=="object"){const e=t;return`{${Object.keys(e).sort().map(s=>`${JSON.stringify(s)}:${j(e[s])}`).join(",")}}`}return JSON.stringify(t)??"null"}function h(t){return t.trim().replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\.\//,"")}function N(t){const e=h(t);return!e||F(t)||e.startsWith("/")||/^[a-z]:[\\/]/i.test(t)?"absolute_path_rejected":e===".."||e.startsWith("../")||e.includes("/../")?"traversal_path_rejected":null}function K(t){return`evidence:${_(t).slice(0,16)}`}function c(t,e){return{sourceId:K(t),reasonCode:e}}function k(t){return h(t).toLowerCase().split("/").some(e=>e.startsWith(".env")||X.has(e))}function b(t,e){const s=B(t,e);return s===""||!s.startsWith("..")&&!F(s)}function w(t,e,s,r,u=S){if(!(s.length>=u))for(const i of G(e,{withFileTypes:!0}).sort((a,l)=>a.name.localeCompare(l.name))){if(s.length>=u)break;const a=$(e,i.name),l=h(B(t,a));if(!k(l)){if(i.isSymbolicLink()){r.push(c(l,"symlink_escape_rejected"));continue}if(i.isDirectory()){w(t,a,s,r,u);continue}i.isFile()&&D.test(i.name)&&s.push(l)}}}function U(t,e,s,r){const u=N(e);if(u){r.push(c(e,u));return}const i=h(e);if(k(i)||I.test(i)){r.push(c(e,"private_evidence_rejected"));return}const a=$(t,i);if(!b(t,a)){r.push(c(e,"traversal_path_rejected"));return}const l=A(a);if(l.isSymbolicLink()){r.push(c(e,"symlink_escape_rejected"));return}const p=E(a);if(!b(t,p)){r.push(c(e,"symlink_escape_rejected"));return}if(l.isDirectory()){w(t,p,s,r);return}l.isFile()&&s.push(i)}function Y(t){const e=t.toLowerCase();return/\.(?:stories|story)\.(?:tsx?|jsx?|mdx?)$/.test(e)||e.includes("/.storybook/")?"storybook":/(?:^|\/)(?:__tests__|tests?|e2e)(?:\/|$)|\.(?:test|spec)\.(?:tsx?|jsx?)$|playwright|vitest|jest/.test(e)?"validation":/(?:^|\/)(?:routes?|pages?|app)(?:\/|$)|(?:^|\/)router\./.test(e)?"route":/(?:^|\/)(?:components?|ui)(?:\/|$)|[A-Z][A-Za-z0-9_-]*\.(?:tsx|jsx|vue|svelte)$/.test(t)?"component":/(?:tokens?|theme|tailwind|design-system)|\.(?:css|scss)$/.test(e)?"token":/(?:openapi|asyncapi|contracts?|schemas?|events?)|\.(?:graphql|proto)$/.test(e)?"contract":e==="package.json"||e.startsWith("docs/architecture")||e.startsWith("docs/arquitetura-software")?"source_summary":null}function Q(t,e){let s=0;const r=[/\bexport\s+(?:default\s+)?(?:async\s+)?(?:function|class|const|let|var|interface|type|enum)\s+([A-Za-z_$][\w$]*)/g,/\b(?:GET|POST|PUT|PATCH|DELETE|OPTIONS|HEAD)\b/g,/--([a-z][a-z0-9-]{1,64})\s*:/gi];for(const u of r)for(const i of e.matchAll(u)){const a=(i[1]??i[0]).replace(/^--/,"");if(/^[A-Za-z_$][\w$-]{0,64}$/.test(a)&&(s+=1),s>=12)break}return`${t}; lines=${e.split(/\r?\n/).length}; structuralIdentifiers=${s}`}function H(t,e){const s=e.match(/\.[A-Za-z0-9]+$/)?.[0].toLowerCase()??".json";return`evidence/${t}/${_(e).slice(0,20)}${s}`}function ee(t,e){const s=t.consent??{},r=s.redactionPolicy&&R.has(s.redactionPolicy)?s.redactionPolicy:void 0,u=typeof s.expiresAt=="string"?s.expiresAt:void 0,i=Date.parse(e),a=u?Date.parse(u):Number.NaN,l=Number.isFinite(i)&&Number.isFinite(a)&&a>i&&a-i<=3600*1e3;return{richEvidence:s.richEvidence===!0&&!!r&&l,screenshots:s.screenshots===!0&&s.richEvidence===!0&&!!r&&l,liveEvidence:s.liveEvidence===!0&&s.richEvidence===!0&&!!r&&l,...r?{redactionPolicy:r}:{},...u?{expiresAt:u}:{}}}function te(t,e,s,r){const u=N(e);if(u)return{exclusion:c(e,u)};if(k(e)||I.test(e))return{exclusion:c(e,"private_evidence_rejected")};if(!s||!D.test(e))return{exclusion:c(e,"unsupported_file_type")};const i=$(t,e);if(!b(t,i))return{exclusion:c(e,"traversal_path_rejected")};if(A(i).isSymbolicLink())return{exclusion:c(e,"symlink_escape_rejected")};const l=E(i);if(!b(t,l))return{exclusion:c(e,"symlink_escape_rejected")};const p=O(l);if(!p.isFile())return{exclusion:c(e,"unsupported_file_type")};if(p.size>r.maxFileBytes)return{exclusion:c(e,"oversized_evidence")};const y=z(l);if(y.includes(0)||I.test(y.toString("utf8")))return{exclusion:c(e,"private_evidence_rejected")};const f=h(e),d=_(y),g=H(s,f);return{item:{id:`${s}:${_(`${f}:${d}`).slice(0,20)}`,kind:s,source:{path:g,contentHash:d,byteLength:p.size},summary:Q(s,y.toString("utf8")).slice(0,r.maxSummaryChars)}}}function se(t,e,s,r){const u=N(e.path);if(u)return{exclusion:c(e.path,u)};if(!V.test(e.path))return{exclusion:c(e.path,"unsupported_file_type")};if(!s.richEvidence||(e.kind==="screenshot"?!s.screenshots:!s.liveEvidence))return{exclusion:c(e.path,"consent_required")};if(!e.redactionPolicy||!R.has(e.redactionPolicy)||e.redactionPolicy!==s.redactionPolicy)return{exclusion:c(e.path,"redaction_policy_required")};if(!e.expiresAt||e.expiresAt!==s.expiresAt)return{exclusion:c(e.path,"ttl_invalid")};if(k(e.path))return{exclusion:c(e.path,"private_evidence_rejected")};const i=$(t,e.path);if(!b(t,i))return{exclusion:c(e.path,"traversal_path_rejected")};if(A(i).isSymbolicLink())return{exclusion:c(e.path,"symlink_escape_rejected")};const l=E(i);if(!b(t,l))return{exclusion:c(e.path,"symlink_escape_rejected")};const p=O(l);if(!p.isFile())return{exclusion:c(e.path,"unsupported_file_type")};if(p.size>r.maxFileBytes)return{exclusion:c(e.path,"oversized_evidence")};const y=z(l),f=h(e.path),d={path:H(e.kind,f),contentHash:_(y),byteLength:p.size};return{item:{id:`${e.kind}:${_(`${f}:${d.contentHash}`).slice(0,20)}`,kind:e.kind,source:d,summary:`${e.kind}; metadata-only; bytes=${d.byteLength}`,consent:{redactionPolicy:e.redactionPolicy,expiresAt:e.expiresAt}}}}function ce(t){const e=E(t.projectRoot),s=new Date(t.collectedAt??Date.now()).toISOString(),r={...J,...t.budget},u=ee(t,s),i=[],a=[];for(const n of[...t.candidatePaths??[]].sort()){try{U(e,n,a,i)}catch{i.push(c(n,"malformed_evidence"))}if(a.length>=S)break}const l=[];(!t.candidatePaths||t.includeFallbackInventory===!0)&&w(e,e,l,i,Math.max(0,S-a.length));const p=new Set(a.map(h)),y=[...new Set([...a,...l])].slice(0,S),f=[];for(const n of y){let o;try{o=te(e,n,Y(h(n)),r)}catch{o={exclusion:c(n,"malformed_evidence")}}o.exclusion&&i.push(o.exclusion),o.item&&f.push({candidate:n,explicit:p.has(h(n)),item:o.item})}const d=new Map;for(const n of f)d.set(n.item.kind,[...d.get(n.item.kind)??[],n]);const g=(n,o)=>Number(o.explicit)-Number(n.explicit)||n.candidate.localeCompare(o.candidate);for(const n of d.values())n.sort(g);const C=[...d.keys()].sort().flatMap(n=>d.get(n)?.slice(0,1)??[]),P=new Set(C.map(n=>n.item.id)),Z=f.filter(n=>!P.has(n.item.id)).sort(g),x=[];let v=0;for(const n of[...C,...Z]){if(x.length>=r.maxItems||v+n.item.source.byteLength>r.maxTotalBytes){i.push(c(n.candidate,"budget_exceeded"));continue}x.push(n.item),v+=n.item.source.byteLength}for(const n of t.richCandidates??[]){let o;try{o=se(e,n,u,r)}catch{o={exclusion:c(n.path,"malformed_evidence")}}if(o.exclusion&&i.push(o.exclusion),!!o.item){if(x.length>=r.maxItems||v+o.item.source.byteLength>r.maxTotalBytes){i.push(c(n.path,"budget_exceeded"));continue}x.push(o.item),v+=o.item.source.byteLength}}x.sort((n,o)=>n.kind.localeCompare(o.kind)||n.source.path.localeCompare(o.source.path));const T=_(j(x));let m={schemaVersion:1,envelopeId:`evidence-${T.slice(0,24)}`,evidenceHash:T,collectedAt:s,consent:u,budget:{...r,acceptedItems:x.length,acceptedBytes:v},evidence:x,exclusions:i.slice(0,r.maxExclusions)};for(;Buffer.byteLength(JSON.stringify(m),"utf8")>r.maxEnvelopeBytes&&m.evidence.length>0;){const n=m.evidence.at(-1),o=m.evidence.slice(0,-1),L=_(j(o));m={...m,envelopeId:`evidence-${L.slice(0,24)}`,evidenceHash:L,budget:{...m.budget,acceptedItems:o.length,acceptedBytes:o.reduce((M,W)=>M+W.source.byteLength,0)},evidence:o,exclusions:[...m.exclusions,c(n.id,"budget_exceeded")].slice(0,r.maxExclusions)}}return m}export{J as CLIENT_PROJECT_EVIDENCE_BUDGET,ce as collectProjectEvidence};
+import { createHash } from 'node:crypto';
+import { lstatSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { isAbsolute, relative, resolve } from 'node:path';
+export const CLIENT_PROJECT_EVIDENCE_BUDGET = Object.freeze({
+    maxItems: 48,
+    maxFileBytes: 96 * 1024,
+    maxTotalBytes: 512 * 1024,
+    maxSummaryChars: 280,
+    maxEnvelopeBytes: 64 * 1024,
+    maxExclusions: 64,
+});
+const MAX_SCAN_ENTRIES = 512;
+const ALLOWED_EXTENSIONS = /(?:\.tsx?|\.jsx?|\.vue|\.svelte|\.css|\.scss|\.json|\.ya?ml|\.mdx?|\.html)$/i;
+const RICH_EXTENSIONS = /\.(?:png|jpe?g|webp)$/i;
+const IGNORED_SEGMENTS = new Set(['.git', '.neocortex', 'node_modules', 'dist', 'build', 'coverage', 'core', 'private', 'secrets', 'credentials', 'raw-logs']);
+const PRIVATE_CONTENT = /(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|\b(?:api[-_ ]?key|license[-_ ]?key|password|secret|token)\b\s*[:=]|\b(?:sk|pk|ghp|github_pat)_[A-Za-z0-9_-]{12,}|https?:\/\/(?:localhost|127\.0\.0\.1|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+|[^/\s]+\.(?:local|internal))\b|private\s+(?:prompt|workflow|customer data)|-----BEGIN [A-Z ]+PRIVATE KEY-----)/i;
+const REDACTION_POLICIES = new Set(['metadata-only-v1', 'visual-pii-v1', 'strict-v1']);
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function stableJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const record = value;
+        return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`).join(',')}}`;
+    }
+    return JSON.stringify(value) ?? 'null';
+}
+function normalizePath(value) {
+    return value.trim().replace(/\\/g, '/').replace(/\/+/g, '/').replace(/^\.\//, '');
+}
+function pathRejection(value) {
+    const normalized = normalizePath(value);
+    if (!normalized || isAbsolute(value) || normalized.startsWith('/') || /^[a-z]:[\\/]/i.test(value))
+        return 'absolute_path_rejected';
+    if (normalized === '..' || normalized.startsWith('../') || normalized.includes('/../'))
+        return 'traversal_path_rejected';
+    return null;
+}
+function sourceId(value) {
+    return `evidence:${sha256(value).slice(0, 16)}`;
+}
+function excluded(value, reasonCode) {
+    return { sourceId: sourceId(value), reasonCode };
+}
+function isIgnored(relativePath) {
+    return normalizePath(relativePath).toLowerCase().split('/').some((segment) => segment.startsWith('.env') || IGNORED_SEGMENTS.has(segment));
+}
+function insideRoot(root, candidate) {
+    const rel = relative(root, candidate);
+    return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+}
+function inventory(root, dir, output, exclusions, maxEntries = MAX_SCAN_ENTRIES) {
+    if (output.length >= maxEntries)
+        return;
+    for (const entry of readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+        if (output.length >= maxEntries)
+            break;
+        const absolute = resolve(dir, entry.name);
+        const relativePath = normalizePath(relative(root, absolute));
+        if (isIgnored(relativePath))
+            continue;
+        if (entry.isSymbolicLink()) {
+            exclusions.push(excluded(relativePath, 'symlink_escape_rejected'));
+            continue;
+        }
+        if (entry.isDirectory()) {
+            inventory(root, absolute, output, exclusions, maxEntries);
+            continue;
+        }
+        if (entry.isFile() && ALLOWED_EXTENSIONS.test(entry.name))
+            output.push(relativePath);
+    }
+}
+function expandExplicitCandidate(root, candidate, output, exclusions) {
+    const rejection = pathRejection(candidate);
+    if (rejection) {
+        exclusions.push(excluded(candidate, rejection));
+        return;
+    }
+    const normalized = normalizePath(candidate);
+    if (isIgnored(normalized) || PRIVATE_CONTENT.test(normalized)) {
+        exclusions.push(excluded(candidate, 'private_evidence_rejected'));
+        return;
+    }
+    const absolute = resolve(root, normalized);
+    if (!insideRoot(root, absolute)) {
+        exclusions.push(excluded(candidate, 'traversal_path_rejected'));
+        return;
+    }
+    const stat = lstatSync(absolute);
+    if (stat.isSymbolicLink()) {
+        exclusions.push(excluded(candidate, 'symlink_escape_rejected'));
+        return;
+    }
+    const real = realpathSync(absolute);
+    if (!insideRoot(root, real)) {
+        exclusions.push(excluded(candidate, 'symlink_escape_rejected'));
+        return;
+    }
+    if (stat.isDirectory()) {
+        inventory(root, real, output, exclusions);
+        return;
+    }
+    if (stat.isFile())
+        output.push(normalized);
+}
+function kindFor(path) {
+    const lower = path.toLowerCase();
+    if (/\.(?:stories|story)\.(?:tsx?|jsx?|mdx?)$/.test(lower) || lower.includes('/.storybook/'))
+        return 'storybook';
+    if (/(?:^|\/)(?:__tests__|tests?|e2e)(?:\/|$)|\.(?:test|spec)\.(?:tsx?|jsx?)$|playwright|vitest|jest/.test(lower))
+        return 'validation';
+    if (/(?:^|\/)(?:routes?|pages?|app)(?:\/|$)|(?:^|\/)router\./.test(lower))
+        return 'route';
+    if (/(?:^|\/)(?:components?|ui)(?:\/|$)|[A-Z][A-Za-z0-9_-]*\.(?:tsx|jsx|vue|svelte)$/.test(path))
+        return 'component';
+    if (/(?:tokens?|theme|tailwind|design-system)|\.(?:css|scss)$/.test(lower))
+        return 'token';
+    if (/(?:openapi|asyncapi|contracts?|schemas?|events?)|\.(?:graphql|proto)$/.test(lower))
+        return 'contract';
+    if (lower === 'package.json' || lower.startsWith('docs/architecture') || lower.startsWith('docs/arquitetura-software'))
+        return 'source_summary';
+    return null;
+}
+function structuralSummary(kind, content) {
+    let identifierCount = 0;
+    const patterns = [
+        /\bexport\s+(?:default\s+)?(?:async\s+)?(?:function|class|const|let|var|interface|type|enum)\s+([A-Za-z_$][\w$]*)/g,
+        /\b(?:GET|POST|PUT|PATCH|DELETE|OPTIONS|HEAD)\b/g,
+        /--([a-z][a-z0-9-]{1,64})\s*:/gi,
+    ];
+    for (const pattern of patterns) {
+        for (const match of content.matchAll(pattern)) {
+            const identifier = (match[1] ?? match[0]).replace(/^--/, '');
+            if (/^[A-Za-z_$][\w$-]{0,64}$/.test(identifier))
+                identifierCount += 1;
+            if (identifierCount >= 12)
+                break;
+        }
+    }
+    return `${kind}; lines=${content.split(/\r?\n/).length}; structuralIdentifiers=${identifierCount}`;
+}
+function opaqueEvidencePath(kind, relativePath) {
+    const extension = relativePath.match(/\.[A-Za-z0-9]+$/)?.[0].toLowerCase() ?? '.json';
+    return `evidence/${kind}/${sha256(relativePath).slice(0, 20)}${extension}`;
+}
+function consentFor(options, collectedAt) {
+    const consent = options.consent ?? {};
+    const redactionPolicy = consent.redactionPolicy && REDACTION_POLICIES.has(consent.redactionPolicy) ? consent.redactionPolicy : undefined;
+    const expiresAt = typeof consent.expiresAt === 'string' ? consent.expiresAt : undefined;
+    const collectedMs = Date.parse(collectedAt);
+    const expiresMs = expiresAt ? Date.parse(expiresAt) : Number.NaN;
+    const ttlValid = Number.isFinite(collectedMs) && Number.isFinite(expiresMs) && expiresMs > collectedMs && expiresMs - collectedMs <= 60 * 60 * 1000;
+    return {
+        richEvidence: consent.richEvidence === true && !!redactionPolicy && ttlValid,
+        screenshots: consent.screenshots === true && consent.richEvidence === true && !!redactionPolicy && ttlValid,
+        liveEvidence: consent.liveEvidence === true && consent.richEvidence === true && !!redactionPolicy && ttlValid,
+        ...(redactionPolicy ? { redactionPolicy } : {}),
+        ...(expiresAt ? { expiresAt } : {}),
+    };
+}
+function collectFile(root, relativePath, kind, budget) {
+    const rejection = pathRejection(relativePath);
+    if (rejection)
+        return { exclusion: excluded(relativePath, rejection) };
+    if (isIgnored(relativePath) || PRIVATE_CONTENT.test(relativePath))
+        return { exclusion: excluded(relativePath, 'private_evidence_rejected') };
+    if (!kind || !ALLOWED_EXTENSIONS.test(relativePath))
+        return { exclusion: excluded(relativePath, 'unsupported_file_type') };
+    const absolute = resolve(root, relativePath);
+    if (!insideRoot(root, absolute))
+        return { exclusion: excluded(relativePath, 'traversal_path_rejected') };
+    const stat = lstatSync(absolute);
+    if (stat.isSymbolicLink())
+        return { exclusion: excluded(relativePath, 'symlink_escape_rejected') };
+    const real = realpathSync(absolute);
+    if (!insideRoot(root, real))
+        return { exclusion: excluded(relativePath, 'symlink_escape_rejected') };
+    const realStat = statSync(real);
+    if (!realStat.isFile())
+        return { exclusion: excluded(relativePath, 'unsupported_file_type') };
+    if (realStat.size > budget.maxFileBytes)
+        return { exclusion: excluded(relativePath, 'oversized_evidence') };
+    const content = readFileSync(real);
+    if (content.includes(0) || PRIVATE_CONTENT.test(content.toString('utf8')))
+        return { exclusion: excluded(relativePath, 'private_evidence_rejected') };
+    const normalized = normalizePath(relativePath);
+    const contentHash = sha256(content);
+    const publicPath = opaqueEvidencePath(kind, normalized);
+    return {
+        item: {
+            id: `${kind}:${sha256(`${normalized}:${contentHash}`).slice(0, 20)}`,
+            kind,
+            source: { path: publicPath, contentHash, byteLength: realStat.size },
+            summary: structuralSummary(kind, content.toString('utf8')).slice(0, budget.maxSummaryChars),
+        },
+    };
+}
+function collectRichCandidate(root, candidate, consent, budget) {
+    const rejection = pathRejection(candidate.path);
+    if (rejection)
+        return { exclusion: excluded(candidate.path, rejection) };
+    if (!RICH_EXTENSIONS.test(candidate.path))
+        return { exclusion: excluded(candidate.path, 'unsupported_file_type') };
+    if (!consent.richEvidence || (candidate.kind === 'screenshot' ? !consent.screenshots : !consent.liveEvidence))
+        return { exclusion: excluded(candidate.path, 'consent_required') };
+    if (!candidate.redactionPolicy || !REDACTION_POLICIES.has(candidate.redactionPolicy) || candidate.redactionPolicy !== consent.redactionPolicy)
+        return { exclusion: excluded(candidate.path, 'redaction_policy_required') };
+    if (!candidate.expiresAt || candidate.expiresAt !== consent.expiresAt)
+        return { exclusion: excluded(candidate.path, 'ttl_invalid') };
+    if (isIgnored(candidate.path))
+        return { exclusion: excluded(candidate.path, 'private_evidence_rejected') };
+    const absolute = resolve(root, candidate.path);
+    if (!insideRoot(root, absolute))
+        return { exclusion: excluded(candidate.path, 'traversal_path_rejected') };
+    const stat = lstatSync(absolute);
+    if (stat.isSymbolicLink())
+        return { exclusion: excluded(candidate.path, 'symlink_escape_rejected') };
+    const real = realpathSync(absolute);
+    if (!insideRoot(root, real))
+        return { exclusion: excluded(candidate.path, 'symlink_escape_rejected') };
+    const realStat = statSync(real);
+    if (!realStat.isFile())
+        return { exclusion: excluded(candidate.path, 'unsupported_file_type') };
+    if (realStat.size > budget.maxFileBytes)
+        return { exclusion: excluded(candidate.path, 'oversized_evidence') };
+    const content = readFileSync(real);
+    const normalized = normalizePath(candidate.path);
+    const source = { path: opaqueEvidencePath(candidate.kind, normalized), contentHash: sha256(content), byteLength: realStat.size };
+    return {
+        item: {
+            id: `${candidate.kind}:${sha256(`${normalized}:${source.contentHash}`).slice(0, 20)}`,
+            kind: candidate.kind,
+            source,
+            summary: `${candidate.kind}; metadata-only; bytes=${source.byteLength}`,
+            consent: { redactionPolicy: candidate.redactionPolicy, expiresAt: candidate.expiresAt },
+        },
+    };
+}
+export function collectProjectEvidence(options) {
+    const root = realpathSync(options.projectRoot);
+    const collectedAt = new Date(options.collectedAt ?? Date.now()).toISOString();
+    const budget = { ...CLIENT_PROJECT_EVIDENCE_BUDGET, ...options.budget };
+    const consent = consentFor(options, collectedAt);
+    const exclusions = [];
+    const explicitCandidates = [];
+    for (const candidate of [...(options.candidatePaths ?? [])].sort()) {
+        try {
+            expandExplicitCandidate(root, candidate, explicitCandidates, exclusions);
+        }
+        catch {
+            exclusions.push(excluded(candidate, 'malformed_evidence'));
+        }
+        if (explicitCandidates.length >= MAX_SCAN_ENTRIES)
+            break;
+    }
+    const fallbackCandidates = [];
+    if (!options.candidatePaths || options.includeFallbackInventory === true) {
+        inventory(root, root, fallbackCandidates, exclusions, Math.max(0, MAX_SCAN_ENTRIES - explicitCandidates.length));
+    }
+    const explicitSet = new Set(explicitCandidates.map(normalizePath));
+    const candidates = [...new Set([...explicitCandidates, ...fallbackCandidates])].slice(0, MAX_SCAN_ENTRIES);
+    const collected = [];
+    for (const candidate of candidates) {
+        let result;
+        try {
+            result = collectFile(root, candidate, kindFor(normalizePath(candidate)), budget);
+        }
+        catch {
+            result = { exclusion: excluded(candidate, 'malformed_evidence') };
+        }
+        if (result.exclusion)
+            exclusions.push(result.exclusion);
+        if (result.item)
+            collected.push({ candidate, explicit: explicitSet.has(normalizePath(candidate)), item: result.item });
+    }
+    const byKind = new Map();
+    for (const entry of collected)
+        byKind.set(entry.item.kind, [...(byKind.get(entry.item.kind) ?? []), entry]);
+    const priority = (left, right) => Number(right.explicit) - Number(left.explicit) || left.candidate.localeCompare(right.candidate);
+    for (const entries of byKind.values())
+        entries.sort(priority);
+    const reserved = [...byKind.keys()].sort().flatMap((kind) => byKind.get(kind)?.slice(0, 1) ?? []);
+    const reservedIds = new Set(reserved.map((entry) => entry.item.id));
+    const fill = collected.filter((entry) => !reservedIds.has(entry.item.id)).sort(priority);
+    const evidence = [];
+    let acceptedBytes = 0;
+    for (const entry of [...reserved, ...fill]) {
+        if (evidence.length >= budget.maxItems || acceptedBytes + entry.item.source.byteLength > budget.maxTotalBytes) {
+            exclusions.push(excluded(entry.candidate, 'budget_exceeded'));
+            continue;
+        }
+        evidence.push(entry.item);
+        acceptedBytes += entry.item.source.byteLength;
+    }
+    for (const candidate of options.richCandidates ?? []) {
+        let result;
+        try {
+            result = collectRichCandidate(root, candidate, consent, budget);
+        }
+        catch {
+            result = { exclusion: excluded(candidate.path, 'malformed_evidence') };
+        }
+        if (result.exclusion)
+            exclusions.push(result.exclusion);
+        if (!result.item)
+            continue;
+        if (evidence.length >= budget.maxItems || acceptedBytes + result.item.source.byteLength > budget.maxTotalBytes) {
+            exclusions.push(excluded(candidate.path, 'budget_exceeded'));
+            continue;
+        }
+        evidence.push(result.item);
+        acceptedBytes += result.item.source.byteLength;
+    }
+    evidence.sort((left, right) => left.kind.localeCompare(right.kind) || left.source.path.localeCompare(right.source.path));
+    const evidenceHash = sha256(stableJson(evidence));
+    let envelope = {
+        schemaVersion: 1,
+        envelopeId: `evidence-${evidenceHash.slice(0, 24)}`,
+        evidenceHash,
+        collectedAt,
+        consent,
+        budget: { ...budget, acceptedItems: evidence.length, acceptedBytes },
+        evidence,
+        exclusions: exclusions.slice(0, budget.maxExclusions),
+    };
+    while (Buffer.byteLength(JSON.stringify(envelope), 'utf8') > budget.maxEnvelopeBytes && envelope.evidence.length > 0) {
+        const removed = envelope.evidence.at(-1);
+        const nextEvidence = envelope.evidence.slice(0, -1);
+        const nextHash = sha256(stableJson(nextEvidence));
+        envelope = {
+            ...envelope,
+            envelopeId: `evidence-${nextHash.slice(0, 24)}`,
+            evidenceHash: nextHash,
+            budget: {
+                ...envelope.budget,
+                acceptedItems: nextEvidence.length,
+                acceptedBytes: nextEvidence.reduce((total, item) => total + item.source.byteLength, 0),
+            },
+            evidence: nextEvidence,
+            exclusions: [...envelope.exclusions, excluded(removed.id, 'budget_exceeded')].slice(0, budget.maxExclusions),
+        };
+    }
+    return envelope;
+}

package/packages/client/dist/evidence/index.js

@@ -1 +1 @@
-import{CLIENT_PROJECT_EVIDENCE_BUDGET as c,collectProjectEvidence as o}from"./collector.js";export{c as CLIENT_PROJECT_EVIDENCE_BUDGET,o as collectProjectEvidence};
+export { CLIENT_PROJECT_EVIDENCE_BUDGET, collectProjectEvidence } from './collector.js';

package/packages/client/dist/evidence/types.js

@@ -0,0 +1,2 @@
+/** Runtime-local mirror of the project evidence contract. */
+export {};

package/packages/client/dist/fs/atomic-state-replace.js

@@ -1 +1,152 @@
-import{randomUUID as C}from"node:crypto";import{closeSync as E,existsSync as f,fsyncSync as y,lstatSync as p,mkdirSync as w,openSync as u,readdirSync as R,renameSync as l,unlinkSync as d,writeFileSync as A}from"node:fs";import{basename as S,dirname as s,join as h}from"node:path";const _=/^\d+\.[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}\.(tmp|swap)$/i;function k(t){const n=s(t);if(!f(n))return"none";const o=`${S(t)}.`,e=R(n).filter(r=>r.startsWith(o)&&_.test(r.slice(o.length))).map(r=>({entry:r,path:h(n,r),kind:r.endsWith(".swap")?"swap":"tmp"}));if(f(t)){if(!p(t).isFile())throw new Error("ATOMIC_REPLACE_RECOVERY_UNSAFE");for(const r of e)if(!p(r.path).isFile())throw new Error("ATOMIC_REPLACE_RECOVERY_UNSAFE");for(const r of e)d(r.path);return e.length>0&&m(n),"none"}const c=e.filter(r=>r.kind==="swap"),a=e.filter(r=>r.kind==="tmp");if(c.length>1||c.length===0&&a.length>1)throw new Error("ATOMIC_REPLACE_RECOVERY_AMBIGUOUS");const i=c[0]??a[0];if(!i)return"none";if(!p(i.path).isFile())throw new Error("ATOMIC_REPLACE_RECOVERY_UNSAFE");l(i.path,t);for(const r of e)if(!(r.path===i.path||!f(r.path)))try{d(r.path)}catch{}return m(n),i.kind==="swap"?"restored-swap":"promoted-temp"}function m(t){let n;try{n=u(t,"r"),y(n)}catch{}finally{n!==void 0&&E(n)}}function x(t,n){w(s(t),{recursive:!0,mode:448});let o;try{o=u(t,"wx",384),A(o,n,"utf8"),y(o)}catch(e){if(o!==void 0){try{E(o)}catch{}o=void 0}try{f(t)&&d(t)}catch{}throw m(s(t)),e}finally{o!==void 0&&E(o)}m(s(t))}function $(t,n){w(s(t),{recursive:!0,mode:448});const o=`${process.pid}.${C()}`,e=`${t}.${o}.tmp`,c=`${t}.${o}.swap`;A(e,n,{encoding:"utf8",mode:384,flag:"wx"});const a=u(e,"r");try{y(a)}finally{E(a)}try{l(e,t)}catch{let i=!1;try{f(t)&&(l(t,c),i=!0),l(e,t)}catch(r){i&&!f(t)&&f(c)&&l(c,t);try{f(e)&&d(e)}catch{}throw r}if(i)try{d(c)}catch{}}m(s(t))}export{$ as atomicReplaceUtf8,x as durableCreateUtf8,m as fsyncDirectoryBestEffort,k as recoverAtomicReplaceUtf8};
+import { randomUUID } from 'node:crypto';
+import { closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readdirSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+const ATOMIC_TOKEN = /^\d+\.[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}\.(tmp|swap)$/i;
+/**
+ * Recover a fully-fsynced artifact left by a process crash. A swap is the
+ * conservative authority because it restores the last committed destination;
+ * without a swap, one unambiguous temp can be promoted for first creation.
+ */
+export function recoverAtomicReplaceUtf8(path) {
+    const directory = dirname(path);
+    if (!existsSync(directory))
+        return 'none';
+    const prefix = `${basename(path)}.`;
+    const artifacts = readdirSync(directory)
+        .filter((entry) => entry.startsWith(prefix) && ATOMIC_TOKEN.test(entry.slice(prefix.length)))
+        .map((entry) => ({
+        entry,
+        path: join(directory, entry),
+        kind: entry.endsWith('.swap') ? 'swap' : 'tmp',
+    }));
+    if (existsSync(path)) {
+        if (!lstatSync(path).isFile())
+            throw new Error('ATOMIC_REPLACE_RECOVERY_UNSAFE');
+        for (const artifact of artifacts) {
+            if (!lstatSync(artifact.path).isFile())
+                throw new Error('ATOMIC_REPLACE_RECOVERY_UNSAFE');
+        }
+        for (const artifact of artifacts)
+            unlinkSync(artifact.path);
+        if (artifacts.length > 0)
+            fsyncDirectoryBestEffort(directory);
+        return 'none';
+    }
+    const swaps = artifacts.filter((artifact) => artifact.kind === 'swap');
+    const temps = artifacts.filter((artifact) => artifact.kind === 'tmp');
+    if (swaps.length > 1 || (swaps.length === 0 && temps.length > 1)) {
+        throw new Error('ATOMIC_REPLACE_RECOVERY_AMBIGUOUS');
+    }
+    const selected = swaps[0] ?? temps[0];
+    if (!selected)
+        return 'none';
+    if (!lstatSync(selected.path).isFile())
+        throw new Error('ATOMIC_REPLACE_RECOVERY_UNSAFE');
+    renameSync(selected.path, path);
+    for (const artifact of artifacts) {
+        if (artifact.path === selected.path || !existsSync(artifact.path))
+            continue;
+        try {
+            unlinkSync(artifact.path);
+        }
+        catch { /* recovered destination is authoritative */ }
+    }
+    fsyncDirectoryBestEffort(directory);
+    return selected.kind === 'swap' ? 'restored-swap' : 'promoted-temp';
+}
+/** Best-effort directory durability; Windows can reject directory handles. */
+export function fsyncDirectoryBestEffort(path) {
+    let fd;
+    try {
+        fd = openSync(path, 'r');
+        fsyncSync(fd);
+    }
+    catch {
+        // The temp file itself is always fsynced before replacement. On hosts that
+        // cannot fsync directories this is the strongest portable boundary.
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+/** Create a new UTF-8 file and make its contents durable before returning. */
+export function durableCreateUtf8(path, contents) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    let fd;
+    try {
+        fd = openSync(path, 'wx', 0o600);
+        writeFileSync(fd, contents, 'utf8');
+        fsyncSync(fd);
+    }
+    catch (error) {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch { /* best effort before cleanup */ }
+            fd = undefined;
+        }
+        try {
+            if (existsSync(path))
+                unlinkSync(path);
+        }
+        catch { /* best effort */ }
+        fsyncDirectoryBestEffort(dirname(path));
+        throw error;
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+    fsyncDirectoryBestEffort(dirname(path));
+}
+/**
+ * Replace one UTF-8 state file without truncating the live destination.
+ * The fallback swap exists for Windows rename semantics and restores the
+ * original if installing the new file fails.
+ */
+export function atomicReplaceUtf8(path, contents) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const token = `${process.pid}.${randomUUID()}`;
+    const temp = `${path}.${token}.tmp`;
+    const swap = `${path}.${token}.swap`;
+    writeFileSync(temp, contents, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+    const fd = openSync(temp, 'r');
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(temp, path);
+    }
+    catch {
+        let movedOriginal = false;
+        try {
+            if (existsSync(path)) {
+                renameSync(path, swap);
+                movedOriginal = true;
+            }
+            renameSync(temp, path);
+        }
+        catch (fallbackError) {
+            if (movedOriginal && !existsSync(path) && existsSync(swap))
+                renameSync(swap, path);
+            try {
+                if (existsSync(temp))
+                    unlinkSync(temp);
+            }
+            catch { /* best effort */ }
+            throw fallbackError;
+        }
+        if (movedOriginal) {
+            try {
+                unlinkSync(swap);
+            }
+            catch { /* stale swap is safer than an uncertain replace */ }
+        }
+    }
+    fsyncDirectoryBestEffort(dirname(path));
+}