@petepetrash/circuit 0.1.0

package/dist/shared/fanout-branch-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fanout-branch-template.js","sourceRoot":"","sources":["../../src/shared/fanout-branch-template.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,IAAY;IAC3D,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,6CAA6C,OAAO,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,4BAA4B,OAAO,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,IAAa;IACxE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAW,CAAC;QACpC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,wCAAwC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,kCAAkC,GAAG,qBAAqB,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;QAC9E,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,wCAAwC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,kCAAkC,GAAG,qBAAqB,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAI,QAAW,EAAE,IAAa;IAC1D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAiB,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAiB,CAAC;IAC9E,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC"}

package/dist/shared/git-state-command.d.ts

@@ -0,0 +1,19 @@
+import { RuntimeGitStateSnapshot } from '../schemas/runtime-evidence.js';
+export type GitStateVerificationCommand = {
+    readonly id: string;
+    readonly cwd: string;
+    readonly argv: readonly string[];
+    readonly timeout_ms: number;
+    readonly max_output_bytes: number;
+    readonly env: Readonly<Record<string, string>>;
+};
+export type GitStateObservationLike = {
+    readonly status: 'passed' | 'failed';
+    readonly exit_code: number;
+    readonly stdout_summary: string;
+    readonly stderr_summary: string;
+};
+export type GitStateHelperOutput = RuntimeGitStateSnapshot;
+export declare function gitStateCommand(id: string): GitStateVerificationCommand;
+export declare function parseGitStateObservation(observation: GitStateObservationLike, schemaName: string): GitStateHelperOutput;
+//# sourceMappingURL=git-state-command.d.ts.map

package/dist/shared/git-state-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-state-command.d.ts","sourceRoot":"","sources":["../../src/shared/git-state-command.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAezE,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD,CAAC;AAIF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAMF,MAAM,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE3D,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,2BAA2B,CASvE;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,uBAAuB,EACpC,UAAU,EAAE,MAAM,GACjB,oBAAoB,CActB"}

package/dist/shared/git-state-command.js

@@ -0,0 +1,52 @@
+// Shared git-state helper invocation: the VerificationCommand that spawns
+// src/shared/git-state.ts plus the parser for its stdout JSON. Used by Fix's
+// baseline-snapshot/change-set chain and Build's baseline-snapshot/touch-area
+// gate, which previously kept byte-identical copies of all of this.
+//
+// The command and observation shapes here are structural twins of the
+// flow-layer VerificationCommand / VerificationCommandObservation interfaces
+// (src/flows/registries/verification-writers/types.ts). src/shared must not
+// import src/flows (the architecture-boundaries ratchet holds that edge set
+// empty), and TypeScript's structural typing makes the flow-side assignments
+// safe without the import.
+import { fileURLToPath } from 'node:url';
+import { RuntimeGitStateSnapshot } from '../schemas/runtime-evidence.js';
+const GIT_TIMEOUT_MS = 60_000;
+const GIT_MAX_OUTPUT_BYTES = 5_000_000;
+// Marketplace-safe by build-pipeline emission: git-state.ts runs as a child
+// process, so it has to live as a real file on disk next to this module.
+// scripts/plugins/runtime-bundle.ts emits the helper as a sidecar to every
+// bundle target (plugins/<host>/runtime/git-state.ts next to the bundled CLI,
+// dist/shared/git-state.ts for source-tree CLI runs) and --check mode fails
+// if any sidecar is missing or drifts from src/. Sibling-of-module resolution
+// is correct in every layout because the build pipeline puts a sibling there.
+const GIT_STATE_HELPER_PATH = fileURLToPath(new URL('./git-state.ts', import.meta.url));
+// Shape of the helper's stdout JSON. Validated before any writer trusts it —
+// a corrupt helper observation should fail fast with a clear message rather
+// than silently passing incomplete state downstream.
+const GitStateHelperOutput = RuntimeGitStateSnapshot;
+export function gitStateCommand(id) {
+    return {
+        id,
+        cwd: '.',
+        argv: [process.execPath, GIT_STATE_HELPER_PATH],
+        timeout_ms: GIT_TIMEOUT_MS,
+        max_output_bytes: GIT_MAX_OUTPUT_BYTES,
+        env: {},
+    };
+}
+export function parseGitStateObservation(observation, schemaName) {
+    if (observation.status !== 'passed') {
+        throw new Error(`${schemaName}: git-state helper failed (exit ${observation.exit_code}): ${observation.stderr_summary}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(observation.stdout_summary);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        throw new Error(`${schemaName}: git-state helper stdout was not valid JSON: ${reason}`);
+    }
+    return GitStateHelperOutput.parse(parsed);
+}
+//# sourceMappingURL=git-state-command.js.map

package/dist/shared/git-state-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-state-command.js","sourceRoot":"","sources":["../../src/shared/git-state-command.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2BAA2B;AAE3B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAEvC,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAqBxF,6EAA6E;AAC7E,4EAA4E;AAC5E,qDAAqD;AACrD,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAGrD,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO;QACL,EAAE;QACF,GAAG,EAAE,GAAG;QACR,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC;QAC/C,UAAU,EAAE,cAAc;QAC1B,gBAAgB,EAAE,oBAAoB;QACtC,GAAG,EAAE,EAAE;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,WAAoC,EACpC,UAAkB;IAElB,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,mCAAmC,WAAW,CAAC,SAAS,MAAM,WAAW,CAAC,cAAc,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,iDAAiD,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/shared/git-state.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=git-state.d.ts.map

package/dist/shared/git-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-state.d.ts","sourceRoot":"","sources":["../../src/shared/git-state.ts"],"names":[],"mappings":""}

package/dist/shared/git-state.js

@@ -0,0 +1,163 @@
+#!/usr/bin/env node
+// Snapshot the git working tree for proof-carrying change tracking.
+//
+// Serves two flows: Fix's change-set chain (fix-baseline-snapshot pre-fix,
+// fix-change-set post-fix) and Build's touch-area gate (build-baseline-snapshot
+// pre-act, build-touch-area post-verify). In each, a pre/post writer pair
+// compares snapshots to determine which paths the acting agent actually
+// touched, which is the spine of the change-set / touch-area verdict.
+//
+// Why a helper script instead of letting the writer call git directly?
+// Verification writers are limited to a fixed list of VerificationCommand
+// invocations declared at loadCommands time; the runtime spawns each one and
+// returns observations. Capturing per-file content fingerprints requires a
+// dynamic loop ("git status, then git hash-object for every dirty path"),
+// which doesn't fit a static command list. A single Node process can do
+// both, so the writer just declares one command — this script.
+//
+// Output (stdout, JSON, exits 0):
+//   {
+//     head_sha: "<40-hex sha>",
+//     entries: [
+//       {
+//         status_code: "<2 chars>",     // git porcelain XY (e.g. " M", "??", "R ")
+//         path: "<destination path>",   // for renames/copies, the new path
+//         fingerprint: "<oid|sentinel>",
+//         from?: "<source path>"        // only for renames/copies
+//       },
+//       ...
+//     ],
+//     hidden_index_flags: [
+//       { tag: "<1 char>", path: "<path>" },  // assume-unchanged or skip-worktree
+//       ...
+//     ]
+//   }
+//
+// fingerprint values:
+//   - 40-char hex git OID for files we could `git hash-object` (working-tree
+//     blob)
+//   - "<deleted>" for paths whose working-tree copy is gone (D status)
+//   - "<unhashable:<reason>>" if hash-object failed unexpectedly
+//
+// On any unrecoverable failure (no git, not a repo, etc.) the script writes a
+// short error to stderr and exits 1; the verification executor will surface
+// that as a failed observation.
+import { execFileSync } from 'node:child_process';
+import process from 'node:process';
+function git(args) {
+    // Buffer cap is generous — repos with thousands of dirty paths still fit.
+    return execFileSync('git', args, {
+        cwd: process.cwd(),
+        encoding: 'utf8',
+        maxBuffer: 50_000_000,
+    });
+}
+function gitBytes(args) {
+    return execFileSync('git', args, {
+        cwd: process.cwd(),
+        maxBuffer: 50_000_000,
+    });
+}
+function fail(message) {
+    process.stderr.write(`fix-git-state: ${message}\n`);
+    process.exit(1);
+}
+let head;
+try {
+    head = git(['rev-parse', 'HEAD']).trim();
+}
+catch (err) {
+    fail(`git rev-parse HEAD failed: ${err instanceof Error ? err.message : String(err)}`);
+}
+let statusBuf;
+try {
+    // Porcelain v1 with -z null-delimited entries and --untracked-files=all so
+    // expanded directories ("?? dir/") become per-file entries we can fingerprint
+    // and that adversaries can't hide under a directory bucket.
+    statusBuf = gitBytes(['status', '--porcelain=v1', '-z', '--untracked-files=all']);
+}
+catch (err) {
+    fail(`git status failed: ${err instanceof Error ? err.message : String(err)}`);
+}
+// Parse -z null-delimited entries.
+//   Plain entry: 'XY <path>\0'
+//   Rename/copy: 'XY <new-path>\0<old-path>\0'
+const entries = [];
+{
+    const text = statusBuf.toString('utf8');
+    let i = 0;
+    while (i < text.length) {
+        if (text.length - i < 4)
+            break; // need at least "XY <ch>"
+        const code = text.slice(i, i + 2);
+        i += 2;
+        if (text[i] !== ' ') {
+            // Malformed line — skip until next null.
+            const next = text.indexOf('\0', i);
+            i = next === -1 ? text.length : next + 1;
+            continue;
+        }
+        i += 1; // space
+        const endA = text.indexOf('\0', i);
+        if (endA === -1)
+            break;
+        const path = text.slice(i, endA);
+        i = endA + 1;
+        let fromPath;
+        const statusKind = code[0];
+        const isRenameOrCopy = statusKind === 'R' || statusKind === 'C';
+        if (isRenameOrCopy) {
+            const endB = text.indexOf('\0', i);
+            if (endB === -1)
+                break;
+            fromPath = text.slice(i, endB);
+            i = endB + 1;
+        }
+        let fingerprint;
+        const isDeleted = code.includes('D');
+        if (isDeleted) {
+            fingerprint = '<deleted>';
+        }
+        else {
+            try {
+                fingerprint = git(['hash-object', '--', path]).trim();
+            }
+            catch (err) {
+                const reason = err instanceof Error ? err.message.split('\n')[0] : String(err);
+                fingerprint = `<unhashable:${reason}>`;
+            }
+        }
+        const entry = { status_code: code, path, fingerprint };
+        if (fromPath !== undefined)
+            entry.from = fromPath;
+        entries.push(entry);
+    }
+}
+// Detect paths flagged with assume-unchanged or skip-worktree, which suppress
+// `git status` reporting. An adversary can hide tracked edits this way; the
+// change-set writer fails closed when this list is non-empty.
+const hiddenIndexFlags = [];
+try {
+    const lsFiles = git(['ls-files', '-v']);
+    for (const line of lsFiles.split('\n')) {
+        if (line.length < 2)
+            continue;
+        const tag = line[0];
+        if (tag === undefined)
+            continue;
+        const rest = line.slice(2);
+        // Per `git ls-files -v`: lowercase tags mean assume-unchanged or
+        // skip-worktree variants; uppercase means normal cached/etc.
+        if (tag !== tag.toLowerCase())
+            continue;
+        if (tag === ' ')
+            continue;
+        hiddenIndexFlags.push({ tag, path: rest });
+    }
+}
+catch {
+    // ls-files -v is best-effort; if it fails (e.g., bare repo), record nothing
+    // rather than aborting. The other checks are still in force.
+}
+process.stdout.write(JSON.stringify({ head_sha: head, entries, hidden_index_flags: hiddenIndexFlags }));
+//# sourceMappingURL=git-state.js.map

package/dist/shared/git-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-state.js","sourceRoot":"","sources":["../../src/shared/git-state.ts"],"names":[],"mappings":";AACA,oEAAoE;AACpE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,+DAA+D;AAC/D,EAAE;AACF,kCAAkC;AAClC,MAAM;AACN,gCAAgC;AAChC,iBAAiB;AACjB,UAAU;AACV,oFAAoF;AACpF,4EAA4E;AAC5E,yCAAyC;AACzC,mEAAmE;AACnE,WAAW;AACX,YAAY;AACZ,SAAS;AACT,4BAA4B;AAC5B,mFAAmF;AACnF,YAAY;AACZ,QAAQ;AACR,MAAM;AACN,EAAE;AACF,sBAAsB;AACtB,6EAA6E;AAC7E,YAAY;AACZ,uEAAuE;AACvE,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,gCAAgC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,OAAO,MAAM,cAAc,CAAC;AAcnC,SAAS,GAAG,CAAC,IAAuB;IAClC,0EAA0E;IAC1E,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,IAAuB;IACvC,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,OAAO,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAY,CAAC;AACjB,IAAI,CAAC;IACH,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,IAAI,SAAiB,CAAC;AACtB,IAAI,CAAC;IACH,2EAA2E;IAC3E,8EAA8E;IAC9E,4DAA4D;IAC5D,SAAS,GAAG,QAAQ,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;AACpF,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,mCAAmC;AACnC,+BAA+B;AAC/B,+CAA+C;AAC/C,MAAM,OAAO,GAAoB,EAAE,CAAC;AACpC,CAAC;IACC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,0BAA0B;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,yCAAyC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,CAAC,CAAC;YAAE,MAAM;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QAEb,IAAI,QAA4B,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,cAAc,GAAG,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,CAAC;QAChE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,CAAC,CAAC;gBAAE,MAAM;YACvB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/B,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACf,CAAC;QAED,IAAI,WAAmB,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,SAAS,EAAE,CAAC;YACd,WAAW,GAAG,WAAW,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,WAAW,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/E,WAAW,GAAG,eAAe,MAAM,GAAG,CAAC;YACzC,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,gBAAgB,GAAsB,EAAE,CAAC;AAC/C,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,iEAAiE;QACjE,6DAA6D;QAC7D,IAAI,GAAG,KAAK,GAAG,CAAC,WAAW,EAAE;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QAC1B,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,4EAA4E;IAC5E,6DAA6D;AAC/D,CAAC;AAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAClF,CAAC"}

package/dist/shared/git-state.ts

@@ -0,0 +1,175 @@
+#!/usr/bin/env node
+// Snapshot the git working tree for proof-carrying change tracking.
+//
+// Serves two flows: Fix's change-set chain (fix-baseline-snapshot pre-fix,
+// fix-change-set post-fix) and Build's touch-area gate (build-baseline-snapshot
+// pre-act, build-touch-area post-verify). In each, a pre/post writer pair
+// compares snapshots to determine which paths the acting agent actually
+// touched, which is the spine of the change-set / touch-area verdict.
+//
+// Why a helper script instead of letting the writer call git directly?
+// Verification writers are limited to a fixed list of VerificationCommand
+// invocations declared at loadCommands time; the runtime spawns each one and
+// returns observations. Capturing per-file content fingerprints requires a
+// dynamic loop ("git status, then git hash-object for every dirty path"),
+// which doesn't fit a static command list. A single Node process can do
+// both, so the writer just declares one command — this script.
+//
+// Output (stdout, JSON, exits 0):
+//   {
+//     head_sha: "<40-hex sha>",
+//     entries: [
+//       {
+//         status_code: "<2 chars>",     // git porcelain XY (e.g. " M", "??", "R ")
+//         path: "<destination path>",   // for renames/copies, the new path
+//         fingerprint: "<oid|sentinel>",
+//         from?: "<source path>"        // only for renames/copies
+//       },
+//       ...
+//     ],
+//     hidden_index_flags: [
+//       { tag: "<1 char>", path: "<path>" },  // assume-unchanged or skip-worktree
+//       ...
+//     ]
+//   }
+//
+// fingerprint values:
+//   - 40-char hex git OID for files we could `git hash-object` (working-tree
+//     blob)
+//   - "<deleted>" for paths whose working-tree copy is gone (D status)
+//   - "<unhashable:<reason>>" if hash-object failed unexpectedly
+//
+// On any unrecoverable failure (no git, not a repo, etc.) the script writes a
+// short error to stderr and exits 1; the verification executor will surface
+// that as a failed observation.
+
+import { execFileSync } from 'node:child_process';
+import process from 'node:process';
+
+type GitStateEntry = {
+  status_code: string;
+  path: string;
+  fingerprint: string;
+  from?: string;
+};
+
+type HiddenIndexFlag = {
+  tag: string;
+  path: string;
+};
+
+function git(args: readonly string[]): string {
+  // Buffer cap is generous — repos with thousands of dirty paths still fit.
+  return execFileSync('git', args, {
+    cwd: process.cwd(),
+    encoding: 'utf8',
+    maxBuffer: 50_000_000,
+  });
+}
+
+function gitBytes(args: readonly string[]): Buffer {
+  return execFileSync('git', args, {
+    cwd: process.cwd(),
+    maxBuffer: 50_000_000,
+  });
+}
+
+function fail(message: string): never {
+  process.stderr.write(`fix-git-state: ${message}\n`);
+  process.exit(1);
+}
+
+let head: string;
+try {
+  head = git(['rev-parse', 'HEAD']).trim();
+} catch (err) {
+  fail(`git rev-parse HEAD failed: ${err instanceof Error ? err.message : String(err)}`);
+}
+
+let statusBuf: Buffer;
+try {
+  // Porcelain v1 with -z null-delimited entries and --untracked-files=all so
+  // expanded directories ("?? dir/") become per-file entries we can fingerprint
+  // and that adversaries can't hide under a directory bucket.
+  statusBuf = gitBytes(['status', '--porcelain=v1', '-z', '--untracked-files=all']);
+} catch (err) {
+  fail(`git status failed: ${err instanceof Error ? err.message : String(err)}`);
+}
+
+// Parse -z null-delimited entries.
+//   Plain entry: 'XY <path>\0'
+//   Rename/copy: 'XY <new-path>\0<old-path>\0'
+const entries: GitStateEntry[] = [];
+{
+  const text = statusBuf.toString('utf8');
+  let i = 0;
+  while (i < text.length) {
+    if (text.length - i < 4) break; // need at least "XY <ch>"
+    const code = text.slice(i, i + 2);
+    i += 2;
+    if (text[i] !== ' ') {
+      // Malformed line — skip until next null.
+      const next = text.indexOf('\0', i);
+      i = next === -1 ? text.length : next + 1;
+      continue;
+    }
+    i += 1; // space
+    const endA = text.indexOf('\0', i);
+    if (endA === -1) break;
+    const path = text.slice(i, endA);
+    i = endA + 1;
+
+    let fromPath: string | undefined;
+    const statusKind = code[0];
+    const isRenameOrCopy = statusKind === 'R' || statusKind === 'C';
+    if (isRenameOrCopy) {
+      const endB = text.indexOf('\0', i);
+      if (endB === -1) break;
+      fromPath = text.slice(i, endB);
+      i = endB + 1;
+    }
+
+    let fingerprint: string;
+    const isDeleted = code.includes('D');
+    if (isDeleted) {
+      fingerprint = '<deleted>';
+    } else {
+      try {
+        fingerprint = git(['hash-object', '--', path]).trim();
+      } catch (err) {
+        const reason = err instanceof Error ? err.message.split('\n')[0] : String(err);
+        fingerprint = `<unhashable:${reason}>`;
+      }
+    }
+
+    const entry: GitStateEntry = { status_code: code, path, fingerprint };
+    if (fromPath !== undefined) entry.from = fromPath;
+    entries.push(entry);
+  }
+}
+
+// Detect paths flagged with assume-unchanged or skip-worktree, which suppress
+// `git status` reporting. An adversary can hide tracked edits this way; the
+// change-set writer fails closed when this list is non-empty.
+const hiddenIndexFlags: HiddenIndexFlag[] = [];
+try {
+  const lsFiles = git(['ls-files', '-v']);
+  for (const line of lsFiles.split('\n')) {
+    if (line.length < 2) continue;
+    const tag = line[0];
+    if (tag === undefined) continue;
+    const rest = line.slice(2);
+    // Per `git ls-files -v`: lowercase tags mean assume-unchanged or
+    // skip-worktree variants; uppercase means normal cached/etc.
+    if (tag !== tag.toLowerCase()) continue;
+    if (tag === ' ') continue;
+    hiddenIndexFlags.push({ tag, path: rest });
+  }
+} catch {
+  // ls-files -v is best-effort; if it fails (e.g., bare repo), record nothing
+  // rather than aborting. The other checks are still in force.
+}
+
+process.stdout.write(
+  JSON.stringify({ head_sha: head, entries, hidden_index_flags: hiddenIndexFlags }),
+);

package/dist/shared/html/checkpoint-page.d.ts

@@ -0,0 +1,41 @@
+import type { ReactNode } from 'react';
+import type { HtmlProjectorContext } from './projector.js';
+export declare function shellSingleQuote(value: string): string;
+export declare function resumeCommandForChoice(runFolder: string, choiceId: string): string;
+export type CheckpointPageOption = {
+    readonly id: string;
+    readonly label: string;
+    readonly description?: string | undefined;
+    readonly isDefault?: boolean | undefined;
+    readonly isRecommended?: boolean | undefined;
+    readonly extra?: ReactNode | undefined;
+};
+export type CheckpointPageInput = {
+    readonly meta: {
+        readonly flowLabel: string;
+        readonly runId: string;
+        readonly stepId: string;
+    };
+    readonly question: string;
+    readonly subtitle?: string | undefined;
+    readonly ribbon: readonly string[];
+    readonly recommendation?: {
+        readonly label: string;
+        readonly rationale?: string | undefined;
+    } | undefined;
+    readonly options: readonly CheckpointPageOption[];
+    readonly defaultChoice?: {
+        readonly id: string;
+        readonly label: string;
+    } | undefined;
+    readonly context?: ReactNode | undefined;
+    readonly appendix?: ReactNode | undefined;
+    readonly resume: {
+        readonly runFolder: string;
+    };
+    readonly footerLeft?: string | undefined;
+    readonly footerRight?: string | undefined;
+};
+export declare function renderCheckpointPage(input: CheckpointPageInput): string;
+export declare function genericCheckpointHtml(ctx: HtmlProjectorContext): string | undefined;
+//# sourceMappingURL=checkpoint-page.d.ts.map

package/dist/shared/html/checkpoint-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-page.d.ts","sourceRoot":"","sources":["../../../src/shared/html/checkpoint-page.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAM3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIlF;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EACpB;QACE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzC,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAErF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAEzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,CAAC;AAmKF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAKvE;AAeD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CA0DnF"}

package/dist/shared/html/checkpoint-page.js

@@ -0,0 +1,108 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { MAX_PROMPT_LEN, truncate } from './page.js';
+import { renderHtmlDocument, t } from './react-page.js';
+import { Badge } from './ui/badge.js';
+import { Button } from './ui/button.js';
+import { Card } from './ui/card.js';
+export function shellSingleQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+export function resumeCommandForChoice(runFolder, choiceId) {
+    return `circuit resume --run-folder ${shellSingleQuote(runFolder)} --checkpoint-choice ${shellSingleQuote(choiceId)}`;
+}
+function Ribbon({ tags }) {
+    if (tags.length === 0)
+        return null;
+    return (_jsx("div", { "data-slot": "ribbon", className: "mb-7 flex flex-wrap gap-2", children: tags.map((tag) => (_jsx(Badge, { variant: "secondary", className: "rounded-full px-3 py-1 text-[11px] uppercase tracking-[0.06em] text-muted-foreground", children: t(tag, 120) }, tag))) }));
+}
+function Recommendation({ recommendation, }) {
+    return (_jsxs("div", { "data-slot": "recommendation", className: "mb-6 flex flex-wrap items-baseline gap-3 rounded-lg border border-positive/50 bg-positive/5 px-5 py-4", children: [_jsx(Badge, { variant: "outline", className: "border-positive/50 uppercase text-positive", children: "Recommended" }), _jsxs("span", { className: "min-w-[200px] flex-1 text-sm", children: [_jsx("strong", { className: "font-semibold", children: t(recommendation.label, MAX_PROMPT_LEN) }), recommendation.rationale === undefined ? null : (_jsxs("span", { className: "text-muted-foreground", children: [' ', t(recommendation.rationale, MAX_PROMPT_LEN)] }))] })] }));
+}
+function OptionCard({ option, runFolder, }) {
+    const command = truncate(resumeCommandForChoice(t(runFolder), option.id), MAX_PROMPT_LEN);
+    return (_jsxs(Card, { "data-slot": "option", className: option.isRecommended === true
+            ? 'gap-2.5 border-positive/60 py-5 shadow-none ring-[3px] ring-positive/10'
+            : 'gap-2.5 py-5 shadow-none', children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2.5 px-6", children: [_jsx("h2", { className: "text-base font-semibold leading-snug tracking-tight", children: t(option.label, MAX_PROMPT_LEN) }), option.isRecommended === true ? (_jsx(Badge, { variant: "outline", className: "border-positive/50 uppercase text-positive", children: "Recommended" })) : null, option.isDefault === true ? (_jsx(Badge, { variant: "secondary", className: "uppercase text-muted-foreground", children: "Default" })) : null] }), option.description === undefined ? null : (_jsx("p", { className: "px-6 text-sm text-muted-foreground", children: t(option.description, MAX_PROMPT_LEN) })), option.extra ?? null, _jsxs("div", { className: "flex flex-wrap items-center gap-2.5 px-6 pt-0.5", children: [_jsx(Button, { variant: "outline", size: "sm", "data-prompt": command, children: "Copy resume command" }), _jsx("code", { className: "max-w-full overflow-x-auto whitespace-pre rounded-md border bg-muted px-2.5 py-1.5 font-mono text-xs text-muted-foreground", children: command })] })] }));
+}
+function DefaultStrip({ defaultChoice, }) {
+    return (_jsxs("div", { "data-slot": "default-strip", className: "mt-5 flex flex-wrap items-baseline gap-3 rounded-lg border border-dashed border-border px-4 py-3.5 text-[13.5px] text-muted-foreground", children: [_jsx("span", { className: "whitespace-nowrap text-[10px] font-semibold uppercase tracking-[0.08em]", children: "If you do nothing" }), defaultChoice === undefined ? (_jsx("span", { children: "The run stays parked at this checkpoint until you choose." })) : (_jsxs("span", { children: ["The run stays parked at this checkpoint. The declared default is", ' ', _jsx("strong", { className: "font-semibold text-foreground", children: t(defaultChoice.label, MAX_PROMPT_LEN) }), "."] }))] }));
+}
+function CheckpointPage({ input }) {
+    const subtitle = input.subtitle ?? 'This run is paused. Pick an option, then resume from the terminal.';
+    return (_jsxs("div", { className: "mx-auto max-w-4xl px-6 py-12 pb-24 text-[15px] leading-relaxed antialiased", children: [_jsxs("header", { className: "mb-6", children: [_jsx("div", { className: "mb-2 text-xs font-medium uppercase tracking-[0.06em] text-muted-foreground", children: t(`Circuit · ${input.meta.flowLabel} · checkpoint waiting`, 160) }), _jsx("h1", { className: "text-[27px] font-semibold leading-tight tracking-tight text-balance", children: t(input.question, MAX_PROMPT_LEN) }), _jsx("p", { className: "mt-2 text-base text-muted-foreground", children: t(subtitle, MAX_PROMPT_LEN) })] }), _jsx(Ribbon, { tags: input.ribbon }), input.recommendation === undefined ? null : (_jsx(Recommendation, { recommendation: input.recommendation })), input.context ?? null, _jsx("div", { "data-slot": "option-list", className: "mt-2 flex flex-col gap-3", children: input.options.map((option) => (_jsx(OptionCard, { option: option, runFolder: input.resume.runFolder }, option.id))) }), _jsx(DefaultStrip, { defaultChoice: input.defaultChoice }), input.appendix ?? null, _jsxs("footer", { className: "mt-12 flex flex-wrap justify-between gap-3 border-t pt-6 text-xs text-muted-foreground", children: [_jsx("span", { children: t(input.footerLeft ?? `circuit · ${input.meta.stepId} · ${input.meta.runId}`, 300) }), input.footerRight === undefined ? null : (_jsx("span", { children: _jsx("code", { className: "font-mono text-[11px]", children: t(input.footerRight, 300) }) }))] })] }));
+}
+export function renderCheckpointPage(input) {
+    return renderHtmlDocument({
+        title: `${truncate(input.question, 80)} · Circuit ${input.meta.flowLabel} checkpoint`,
+        body: _jsx(CheckpointPage, { input: input }),
+    });
+}
+function flowLabelFromId(flowId) {
+    return flowId
+        .split('-')
+        .map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)
+        .join(' ');
+}
+// Renders the generic checkpoint page from the projector context alone.
+// This is the writer's structural fallback: it runs for any waiting
+// checkpoint whose flow has no projector (or whose projector produced
+// nothing), and it must render even when the request file was unreadable —
+// in that case the widened fields are absent and choice ids stand in as
+// labels. Returns undefined outside a waiting checkpoint.
+export function genericCheckpointHtml(ctx) {
+    if (ctx.runOutcome !== 'checkpoint_waiting')
+        return undefined;
+    const checkpoint = ctx.checkpoint;
+    if (checkpoint === undefined)
+        return undefined;
+    // Options come from the request's labeled choices, filtered to the
+    // allowed ids the runtime vouched for; any allowed id the request did
+    // not cover still gets a row so every legal resume path is visible.
+    const allowed = new Set(checkpoint.allowed_choices);
+    const labeled = (checkpoint.choices ?? []).filter((choice) => allowed.has(choice.id));
+    const covered = new Set(labeled.map((choice) => choice.id));
+    const options = [
+        ...labeled.map((choice) => ({
+            id: choice.id,
+            label: choice.label ?? choice.id,
+            ...(choice.description === undefined ? {} : { description: choice.description }),
+            ...(checkpoint.safe_default_choice === choice.id ? { isDefault: true } : {}),
+        })),
+        ...checkpoint.allowed_choices
+            .filter((id) => !covered.has(id))
+            .map((id) => ({
+            id,
+            label: id,
+            ...(checkpoint.safe_default_choice === id ? { isDefault: true } : {}),
+        })),
+    ];
+    if (options.length === 0)
+        return undefined;
+    const defaultOption = checkpoint.safe_default_choice === undefined
+        ? undefined
+        : options.find((option) => option.id === checkpoint.safe_default_choice);
+    const flowLabel = flowLabelFromId(ctx.flowId);
+    const question = checkpoint.prompt ??
+        `The ${flowLabel} flow is waiting for your choice at ${checkpoint.step_id}.`;
+    const ribbon = [
+        'Waiting for you',
+        ...(checkpoint.depth === undefined ? [] : [`Depth ${checkpoint.depth}`]),
+        `${options.length} ${options.length === 1 ? 'choice' : 'choices'}`,
+    ];
+    const requestPath = checkpoint.request_path.startsWith(`${ctx.runFolder}/`)
+        ? checkpoint.request_path.slice(ctx.runFolder.length + 1)
+        : checkpoint.request_path;
+    return renderCheckpointPage({
+        meta: { flowLabel, runId: ctx.runId, stepId: checkpoint.step_id },
+        question,
+        ribbon,
+        options,
+        ...(defaultOption === undefined
+            ? {}
+            : { defaultChoice: { id: defaultOption.id, label: defaultOption.label } }),
+        resume: { runFolder: ctx.runFolder },
+        footerLeft: `circuit · ${checkpoint.step_id} · ${ctx.runId}`,
+        footerRight: requestPath,
+    });
+}
+//# sourceMappingURL=checkpoint-page.js.map

package/dist/shared/html/checkpoint-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-page.js","sourceRoot":"","sources":["../../../src/shared/html/checkpoint-page.tsx"],"names":[],"mappings":";AAeA,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,QAAgB;IACxE,OAAO,+BAA+B,gBAAgB,CACpD,SAAS,CACV,wBAAwB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxD,CAAC;AAsCD,SAAS,MAAM,CAAC,EAAE,IAAI,EAAwC;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,CACL,2BAAe,QAAQ,EAAC,SAAS,EAAC,2BAA2B,YAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CACjB,KAAC,KAAK,IAEJ,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,sFAAsF,YAE/F,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,IAJP,GAAG,CAKF,CACT,CAAC,GACE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,EACtB,cAAc,GAGf;IACC,OAAO,CACL,4BACY,gBAAgB,EAC1B,SAAS,EAAC,uGAAuG,aAEjH,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,4CAA4C,4BAEvE,EACR,gBAAM,SAAS,EAAC,8BAA8B,aAC5C,iBAAQ,SAAS,EAAC,eAAe,YAAE,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,cAAc,CAAC,GAAU,EACnF,cAAc,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC/C,gBAAM,SAAS,EAAC,uBAAuB,aACpC,GAAG,EACH,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,IACvC,CACR,IACI,IACH,CACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,EAClB,MAAM,EACN,SAAS,GAIV;IACC,MAAM,OAAO,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;IAC1F,OAAO,CACL,MAAC,IAAI,iBACO,QAAQ,EAClB,SAAS,EACP,MAAM,CAAC,aAAa,KAAK,IAAI;YAC3B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,0BAA0B,aAGhC,eAAK,SAAS,EAAC,0CAA0C,aACvD,aAAI,SAAS,EAAC,qDAAqD,YAChE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,GAC7B,EACJ,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,CAC/B,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,4CAA4C,4BAEvE,CACT,CAAC,CAAC,CAAC,IAAI,EACP,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAC3B,KAAC,KAAK,IAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,iCAAiC,wBAE9D,CACT,CAAC,CAAC,CAAC,IAAI,IACJ,EACL,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CACzC,YAAG,SAAS,EAAC,oCAAoC,YAC9C,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GACpC,CACL,EACA,MAAM,CAAC,KAAK,IAAI,IAAI,EACrB,eAAK,SAAS,EAAC,iDAAiD,aAC9D,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,iBAAc,OAAO,oCAE/C,EACT,eAAM,SAAS,EAAC,4HAA4H,YACzI,OAAO,GACH,IACH,IACD,CACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EACpB,aAAa,GAGd;IACC,OAAO,CACL,4BACY,eAAe,EACzB,SAAS,EAAC,wIAAwI,aAElJ,eAAM,SAAS,EAAC,yEAAyE,kCAElF,EACN,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAC7B,uFAAsE,CACvE,CAAC,CAAC,CAAC,CACF,+FACmE,GAAG,EACpE,iBAAQ,SAAS,EAAC,+BAA+B,YAC9C,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,GAChC,SAEJ,CACR,IACG,CACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,EAAE,KAAK,EAA2C;IACxE,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,IAAI,oEAAoE,CAAC;IACzF,OAAO,CACL,eAAK,SAAS,EAAC,4EAA4E,aACzF,kBAAQ,SAAS,EAAC,MAAM,aACtB,cAAK,SAAS,EAAC,4EAA4E,YACxF,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,SAAS,uBAAuB,EAAE,GAAG,CAAC,GAC7D,EACN,aAAI,SAAS,EAAC,qEAAqE,YAChF,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,GAC/B,EACL,YAAG,SAAS,EAAC,sCAAsC,YAAE,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAK,IAC9E,EACT,KAAC,MAAM,IAAC,IAAI,EAAE,KAAK,CAAC,MAAM,GAAI,EAC7B,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC3C,KAAC,cAAc,IAAC,cAAc,EAAE,KAAK,CAAC,cAAc,GAAI,CACzD,EACA,KAAK,CAAC,OAAO,IAAI,IAAI,EACtB,2BAAe,aAAa,EAAC,SAAS,EAAC,0BAA0B,YAC9D,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC7B,KAAC,UAAU,IAAiB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,IAA5D,MAAM,CAAC,EAAE,CAAuD,CAClF,CAAC,GACE,EACN,KAAC,YAAY,IAAC,aAAa,EAAE,KAAK,CAAC,aAAa,GAAI,EACnD,KAAK,CAAC,QAAQ,IAAI,IAAI,EACvB,kBAAQ,SAAS,EAAC,wFAAwF,aACxG,yBACG,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,GAC9E,EACN,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CACxC,yBACE,eAAM,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,GAAQ,GACrE,CACR,IACM,IACL,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA0B;IAC7D,OAAO,kBAAkB,CAAC;QACxB,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,SAAS,aAAa;QACrF,IAAI,EAAE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,GAAI;KACvC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,oEAAoE;AACpE,sEAAsE;AACtE,2EAA2E;AAC3E,wEAAwE;AACxE,0DAA0D;AAC1D,MAAM,UAAU,qBAAqB,CAAC,GAAyB;IAC7D,IAAI,GAAG,CAAC,UAAU,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE/C,mEAAmE;IACnE,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAA2B;QACtC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE;YAChC,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YAChF,GAAG,CAAC,UAAU,CAAC,mBAAmB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,GAAG,UAAU,CAAC,eAAe;aAC1B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAChC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACZ,EAAE;YACF,KAAK,EAAE,EAAE;YACT,GAAG,CAAC,UAAU,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;KACN,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,aAAa,GACjB,UAAU,CAAC,mBAAmB,KAAK,SAAS;QAC1C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,UAAU,CAAC,MAAM;QACjB,OAAO,SAAS,uCAAuC,UAAU,CAAC,OAAO,GAAG,CAAC;IAC/E,MAAM,MAAM,GAAG;QACb,iBAAiB;QACjB,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE;KACnE,CAAC;IACF,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,SAAS,GAAG,CAAC;QACzE,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACzD,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;IAE5B,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE;QACjE,QAAQ;QACR,MAAM;QACN,OAAO;QACP,GAAG,CAAC,aAAa,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE;QACpC,UAAU,EAAE,aAAa,UAAU,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE;QAC5D,WAAW,EAAE,WAAW;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/shared/html/index.d.ts

@@ -0,0 +1,6 @@
+import type { HtmlProjector } from './projector.js';
+export { genericCheckpointHtml } from './checkpoint-page.js';
+export type { HtmlCheckpointChoice, HtmlProjector, HtmlProjectorCheckpoint, HtmlProjectorContext, JsonObject, } from './projector.js';
+export declare function registerHtmlProjector(flowId: string, projector: HtmlProjector): void;
+export declare function getHtmlProjector(flowId: string): HtmlProjector | undefined;
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/html/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/html/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACpB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAIxB,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,IAAI,CAEpF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAE1E"}