@post-print/agent-harness 0.3.4 → 0.3.6

package/dist/openai-run.js

@@ -0,0 +1,373 @@
+import { spawn } from "node:child_process";
+import { access } from "node:fs/promises";
+import { createInterface } from "node:readline";
+import { resolveKeyOrLoginAuthMode } from "./auth-mode.js";
+import { createLiveNotifyState, emitLiveAgentEvents } from "./live-agent-event.js";
+import { resolveMcpServers } from "./mcp.js";
+import { accumulateOpenaiEvent, createOpenaiTraceAccumulator, finalizeOpenaiTraceAccumulator, lastAssistantText, parseOpenaiJsonlLine, } from "./openai-capture.js";
+import { AgentRunTimeoutError, getPartialTrace, isUserInputTool, UserInputRequiredError, withRunTimeout, } from "./run-guards.js";
+import { openaiUserConfigArgs } from "./user-skills.js";
+export const OPENAI_AUTH_MODE_ENV = "OPENAI_AUTH_MODE";
+export const OPENAI_MISSING_KEY_MESSAGE = "OPENAI_API_KEY or CODEX_API_KEY required for OpenAI agent runs, or set OPENAI_AUTH_MODE=subscription after `codex login`";
+export function resolveOpenaiAuthMode(raw = process.env[OPENAI_AUTH_MODE_ENV], apiKey) {
+    return resolveKeyOrLoginAuthMode({
+        envName: OPENAI_AUTH_MODE_ENV,
+        raw,
+        hasApiKey: Boolean((apiKey ?? process.env.OPENAI_API_KEY ?? process.env.CODEX_API_KEY)?.trim()),
+        missingKeyMessage: OPENAI_MISSING_KEY_MESSAGE,
+    });
+}
+let activeOpenaiRun;
+let lastOpenaiRunTrace;
+function stashTrace(acc) {
+    const trace = finalizeOpenaiTraceAccumulator(acc);
+    lastOpenaiRunTrace = trace;
+    return trace;
+}
+export function cancelActiveOpenaiRun() {
+    const active = activeOpenaiRun;
+    activeOpenaiRun = undefined;
+    if (!active) {
+        return;
+    }
+    active.abort.abort();
+    killOpenaiChild(active.child);
+}
+export function takeLastOpenaiRunTrace() {
+    const trace = lastOpenaiRunTrace;
+    lastOpenaiRunTrace = undefined;
+    return trace;
+}
+export function formatOpenaiRunFailure(options) {
+    const details = [];
+    if (options.rawStatus) {
+        details.push(`cli: ${options.rawStatus}`);
+    }
+    if (options.exitCode !== undefined && options.exitCode !== null) {
+        details.push(`exit: ${options.exitCode}`);
+    }
+    if (options.resultError) {
+        details.push(`error: ${options.resultError}`);
+    }
+    else if (options.stderr?.trim()) {
+        const compact = options.stderr.trim().replace(/\s+/g, " ").slice(0, 240);
+        details.push(`stderr: ${compact}`);
+    }
+    const suffix = details.length > 0 ? ` (${details.join(", ")})` : "";
+    return `openai run status: ${options.status}${suffix}`;
+}
+function destroyChildPipes(child) {
+    try {
+        child.stdout.destroy();
+    }
+    catch {
+        // best-effort
+    }
+    try {
+        child.stderr.destroy();
+    }
+    catch {
+        // best-effort
+    }
+}
+function killOpenaiChild(child) {
+    destroyChildPipes(child);
+    try {
+        child.kill("SIGTERM");
+    }
+    catch {
+        // best-effort
+    }
+    const pid = child.pid;
+    if (pid === undefined || pid <= 0 || process.platform === "win32") {
+        return;
+    }
+    try {
+        process.kill(-pid, "SIGTERM");
+    }
+    catch {
+        // best-effort
+    }
+}
+async function pathExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function resolveOpenaiBin(override) {
+    const candidate = override?.trim() || process.env.CODEX_BIN?.trim() || "codex";
+    if (candidate.includes("/") || candidate.includes("\\")) {
+        if (!(await pathExists(candidate))) {
+            throw new Error(`OpenAI Codex binary not found at ${candidate}`);
+        }
+    }
+    return candidate;
+}
+/**
+ * Child env for the Codex CLI. Subscription mode drops API keys:
+ * the CLI prefers a key over the `codex login` ChatGPT session.
+ */
+export function buildOpenaiEnv(authMode, apiKey) {
+    if (authMode === "api-key") {
+        const key = apiKey ?? process.env.OPENAI_API_KEY ?? process.env.CODEX_API_KEY;
+        if (!key) {
+            return { ...process.env };
+        }
+        return { ...process.env, OPENAI_API_KEY: key, CODEX_API_KEY: key };
+    }
+    const env = { ...process.env };
+    delete env.OPENAI_API_KEY;
+    delete env.CODEX_API_KEY;
+    return env;
+}
+export function tomlString(value) {
+    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/** One `-c mcp_servers.name={…}` override for `codex exec`. */
+export function buildOpenaiMcpOverride(name, config) {
+    if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(name)) {
+        throw new Error(`OpenAI MCP server name must be a TOML key: ${name}`);
+    }
+    if ("command" in config && config.command) {
+        const parts = [`command=${tomlString(config.command)}`];
+        if (config.args && config.args.length > 0) {
+            parts.push(`args=[${config.args.map((arg) => tomlString(arg)).join(",")}]`);
+        }
+        if (config.cwd) {
+            parts.push(`cwd=${tomlString(config.cwd)}`);
+        }
+        if (config.env && Object.keys(config.env).length > 0) {
+            const env = Object.entries(config.env)
+                .map(([key, value]) => `${key}=${tomlString(value)}`)
+                .join(",");
+            parts.push(`env={${env}}`);
+        }
+        // Codex 0.154+ rejects MCP calls when approval_policy=never unless
+        // the server auto-approves tools.
+        parts.push('default_tools_approval_mode="approve"');
+        return `mcp_servers.${name}={${parts.join(",")}}`;
+    }
+    if ("url" in config && config.url) {
+        return `mcp_servers.${name}={url=${tomlString(config.url)},default_tools_approval_mode="approve"}`;
+    }
+    throw new Error(`OpenAI MCP server "${name}" needs a command or url`);
+}
+export function buildOpenaiMcpConfigArgs(servers) {
+    if (!servers || Object.keys(servers).length === 0) {
+        return [];
+    }
+    const args = [];
+    for (const [name, config] of Object.entries(servers)) {
+        args.push("-c", buildOpenaiMcpOverride(name, config));
+    }
+    return args;
+}
+export function buildOpenaiExecArgs(options) {
+    const sandbox = options.sandbox ?? "workspace-write";
+    const args = [
+        "exec",
+        "--json",
+        "--sandbox",
+        sandbox,
+        "--cd",
+        options.cwd,
+        // Deny keeps ~/.codex/config.toml out. Auth still uses CODEX_HOME.
+        // A user model pin (for example gpt-5.6-luna) can fail older Codex CLIs.
+        ...openaiUserConfigArgs(options.allowUserSkills === true),
+        // Headless default is never. Set it explicitly so a leftover config
+        // cannot prompt, and so we do not need --approve-for-me (Codex >= 0.147).
+        "-c",
+        "approval_policy=never",
+    ];
+    args.push(...buildOpenaiMcpConfigArgs(options.mcpServers));
+    const model = options.model?.trim() ||
+        process.env.CODEX_AGENT_MODEL?.trim() ||
+        process.env.OPENAI_AGENT_MODEL?.trim();
+    if (model) {
+        args.push("--model", model);
+    }
+    args.push(options.prompt);
+    return args;
+}
+async function drainJsonl(child, acc, failOnUserInput, signal, onAgentEvent) {
+    const liveState = createLiveNotifyState();
+    const stderrChunks = [];
+    child.stderr.setEncoding("utf8");
+    child.stderr.on("data", (chunk) => {
+        stderrChunks.push(chunk);
+    });
+    const spawnError = new Promise((_, reject) => {
+        child.once("error", reject);
+    });
+    const aborted = new Promise((_, reject) => {
+        const fail = () => {
+            destroyChildPipes(child);
+            reject(new AgentRunTimeoutError(0));
+        };
+        if (signal.aborted) {
+            fail();
+            return;
+        }
+        signal.addEventListener("abort", fail, { once: true });
+    });
+    const readStdout = async () => {
+        const rl = createInterface({ input: child.stdout, crlfDelay: Number.POSITIVE_INFINITY });
+        try {
+            for await (const line of rl) {
+                if (signal.aborted) {
+                    break;
+                }
+                const event = parseOpenaiJsonlLine(line);
+                if (!event) {
+                    continue;
+                }
+                accumulateOpenaiEvent(acc, event);
+                emitLiveAgentEvents(acc, liveState, onAgentEvent);
+                stashTrace(acc);
+                const lastTool = acc.toolCalls.at(-1);
+                if (lastTool && isUserInputTool(lastTool.name)) {
+                    if (failOnUserInput) {
+                        const userInputError = new UserInputRequiredError(lastTool.name);
+                        userInputError.trace = stashTrace(acc);
+                        killOpenaiChild(child);
+                        throw userInputError;
+                    }
+                    killOpenaiChild(child);
+                    break;
+                }
+            }
+        }
+        finally {
+            rl.close();
+        }
+    };
+    const waitClose = new Promise((resolve) => {
+        child.once("close", (code) => resolve(code));
+    });
+    try {
+        const settled = await Promise.race([
+            spawnError,
+            aborted,
+            Promise.all([readStdout(), waitClose]).then(([, exitCode]) => ({ exitCode })),
+        ]);
+        return { exitCode: settled.exitCode, stderr: stderrChunks.join("") };
+    }
+    catch (error) {
+        killOpenaiChild(child);
+        throw error;
+    }
+}
+/** Shared Codex CLI path — `codex exec --json` → AgentTrace. */
+export async function runOpenaiAgent(options) {
+    const authMode = options.authMode ?? resolveOpenaiAuthMode(undefined, options.apiKey);
+    const apiKey = options.apiKey ?? process.env.OPENAI_API_KEY ?? process.env.CODEX_API_KEY;
+    if (authMode === "api-key" && !apiKey?.trim()) {
+        throw new Error(OPENAI_MISSING_KEY_MESSAGE);
+    }
+    const bin = await resolveOpenaiBin(options.bin);
+    let timedOut = false;
+    const args = buildOpenaiExecArgs({
+        prompt: options.prompt,
+        cwd: options.cwd,
+        model: options.model,
+        sandbox: options.sandbox,
+        mcpServers: resolveMcpServers(options.mcpServers, { cwd: options.cwd }),
+        allowUserSkills: options.allowUserSkills === true,
+    });
+    const execute = async () => {
+        const acc = createOpenaiTraceAccumulator();
+        const abort = new AbortController();
+        const child = spawn(bin, args, {
+            cwd: options.cwd,
+            env: buildOpenaiEnv(authMode, options.apiKey),
+            stdio: ["ignore", "pipe", "pipe"],
+            detached: process.platform !== "win32",
+        });
+        activeOpenaiRun = { child, acc, abort };
+        if (timedOut) {
+            abort.abort();
+            killOpenaiChild(child);
+            activeOpenaiRun = undefined;
+            const timeoutError = new AgentRunTimeoutError(options.timeoutMs ?? 0);
+            timeoutError.trace = stashTrace(acc);
+            throw timeoutError;
+        }
+        try {
+            const { exitCode, stderr } = await drainJsonl(child, acc, options.failOnUserInput !== false, abort.signal, options.onAgentEvent);
+            const trace = stashTrace(acc);
+            const rawStatus = acc.rawStatus ?? (exitCode === 0 ? "success" : "error");
+            const failed = (exitCode !== null && exitCode !== 0) || rawStatus === "error" || Boolean(acc.resultError);
+            return {
+                status: failed ? "failed" : "completed",
+                trace,
+                rawStatus,
+                exitCode,
+                stderr: stderr || undefined,
+            };
+        }
+        catch (error) {
+            abort.abort();
+            killOpenaiChild(child);
+            const partial = stashTrace(acc);
+            if (error instanceof AgentRunTimeoutError || error instanceof UserInputRequiredError) {
+                error.trace = error.trace ?? partial;
+                throw error;
+            }
+            if (error && typeof error === "object" && "code" in error) {
+                const code = error.code;
+                if (code === "ENOENT") {
+                    throw new Error(`OpenAI Codex binary not found (${bin}). Install the Codex CLI or set CODEX_BIN.`);
+                }
+            }
+            throw error;
+        }
+        finally {
+            if (activeOpenaiRun?.child === child) {
+                activeOpenaiRun = undefined;
+            }
+        }
+    };
+    if (options.timeoutMs && options.timeoutMs > 0) {
+        await options.onDeadlineStart?.();
+        try {
+            return await withRunTimeout(execute, options.timeoutMs, {
+                onTimeout: () => {
+                    timedOut = true;
+                    cancelActiveOpenaiRun();
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof AgentRunTimeoutError) {
+                error.trace = error.trace ?? takeLastOpenaiRunTrace() ?? getPartialTrace(error);
+            }
+            throw error;
+        }
+    }
+    return execute();
+}
+/** Classifier-only Codex path — read-only sandbox, last assistant text. */
+export async function runOpenaiClassifier(options) {
+    const result = await runOpenaiAgent({
+        cwd: options.cwd,
+        prompt: options.prompt,
+        apiKey: options.apiKey,
+        bin: options.bin,
+        sandbox: "read-only",
+        failOnUserInput: true,
+    });
+    return {
+        status: result.status,
+        text: lastAssistantText(result.trace),
+        rawStatus: result.rawStatus,
+        sdkError: result.trace.artifacts.openaiResultError
+            ? { message: result.trace.artifacts.openaiResultError }
+            : undefined,
+        usage: result.trace.usage,
+    };
+}
+//# sourceMappingURL=openai-run.js.map

package/dist/openai-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-run.js","sourceRoot":"","sources":["../src/openai-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAqB,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAwB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,EACN,qBAAqB,EACrB,4BAA4B,EAC5B,8BAA8B,EAC9B,iBAAiB,EAEjB,oBAAoB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,cAAc,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAIxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD,MAAM,CAAC,MAAM,0BAA0B,GACtC,0HAA0H,CAAC;AAE5H,MAAM,UAAU,qBAAqB,CACpC,GAAG,GAAuB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAC3D,MAAe;IAEf,OAAO,yBAAyB,CAAC;QAChC,OAAO,EAAE,oBAAoB;QAC7B,GAAG;QACH,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/F,iBAAiB,EAAE,0BAA0B;KAC7C,CAAC,CAAC;AACJ,CAAC;AAwCD,IAAI,eAA8C,CAAC;AACnD,IAAI,kBAA0C,CAAC;AAE/C,SAAS,UAAU,CAAC,GAA2B;IAC9C,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;IAClD,kBAAkB,GAAG,KAAK,CAAC;IAC3B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,MAAM,MAAM,GAAG,eAAe,CAAC;IAC/B,eAAe,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO;IACR,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC;IACjC,kBAAkB,GAAG,SAAS,CAAC;IAC/B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAMtC;IACA,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,sBAAsB,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IACnD,IAAI,CAAC;QACJ,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;IACD,IAAI,CAAC;QACJ,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IACjD,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACnE,OAAO;IACR,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAiB;IACvD,MAAM,SAAS,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;IAC/E,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,MAAe;IACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC9E,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC,cAAc,CAAC;IAC1B,OAAO,GAAG,CAAC,aAAa,CAAC;IACzB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACvC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AACjE,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,MAAuB;IAC3E,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;iBACpC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;iBACpD,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,mEAAmE;QACnE,kCAAkC;QAClC,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACpD,OAAO,eAAe,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACnC,OAAO,eAAe,IAAI,SAAS,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,0BAA0B,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,OAAoD;IAEpD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAOnC;IACA,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC;IACrD,MAAM,IAAI,GAAG;QACZ,MAAM;QACN,QAAQ;QACR,WAAW;QACX,OAAO;QACP,MAAM;QACN,OAAO,CAAC,GAAG;QACX,mEAAmE;QACnE,yEAAyE;QACzE,GAAG,oBAAoB,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC;QACzD,oEAAoE;QACpE,0EAA0E;QAC1E,IAAI;QACJ,uBAAuB;KACvB,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GACV,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,KAAyB,EACzB,GAA2B,EAC3B,eAAwB,EACxB,MAAmB,EACnB,YAA8C;IAE9C,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACnD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,GAAG,EAAE;YACjB,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,EAAE,CAAC;YACP,OAAO;QACR,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,IAAmB,EAAE;QAC5C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC;YACJ,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM;gBACP,CAAC;gBACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,SAAS;gBACV,CAAC;gBACD,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;gBAClD,UAAU,CAAC,GAAG,CAAC,CAAC;gBAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,IAAI,eAAe,EAAE,CAAC;wBACrB,MAAM,cAAc,GAAG,IAAI,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBACjE,cAAc,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;wBACvC,eAAe,CAAC,KAAK,CAAC,CAAC;wBACvB,MAAM,cAAc,CAAC;oBACtB,CAAC;oBACD,eAAe,CAAC,KAAK,CAAC,CAAC;oBACvB,MAAM;gBACP,CAAC;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,EAAE,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,UAAU;YACV,OAAO;YACP,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;SAC7E,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAyB;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzF,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,mBAAmB,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACvE,eAAe,EAAE,OAAO,CAAC,eAAe,KAAK,IAAI;KACjD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,IAA8B,EAAE;QACpD,MAAM,GAAG,GAAG,4BAA4B,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACtC,CAAuB,CAAC;QAEzB,eAAe,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,eAAe,GAAG,SAAS,CAAC;YAC5B,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YACtE,YAAY,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,YAAY,CAAC;QACpB,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAC5C,KAAK,EACL,GAAG,EACH,OAAO,CAAC,eAAe,KAAK,KAAK,EACjC,KAAK,CAAC,MAAM,EACZ,OAAO,CAAC,YAAY,CACpB,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,MAAM,GACX,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5F,OAAO;gBACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;gBACvC,KAAK;gBACL,SAAS;gBACT,QAAQ;gBACR,MAAM,EAAE,MAAM,IAAI,SAAS;aAC3B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,YAAY,oBAAoB,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBACtF,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC;gBACrC,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC3D,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CACd,kCAAkC,GAAG,4CAA4C,CACjF,CAAC;gBACH,CAAC;YACF,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,IAAI,eAAe,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;gBACtC,eAAe,GAAG,SAAS,CAAC;YAC7B,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvD,SAAS,EAAE,GAAG,EAAE;oBACf,QAAQ,GAAG,IAAI,CAAC;oBAChB,qBAAqB,EAAE,CAAC;gBACzB,CAAC;aACD,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC3C,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,sBAAsB,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,OAAO,OAAO,EAAE,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAKzC;IACA,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QACnC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,WAAW;QACpB,eAAe,EAAE,IAAI;KACrB,CAAC,CAAC;IACH,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB;YACjD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,EAAE;YACvD,CAAC,CAAC,SAAS;QACZ,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;KACzB,CAAC;AACH,CAAC"}

package/dist/sealed-workspace.d.ts

@@ -0,0 +1,37 @@
+import type { AgentTrace } from "./types.js";
+export declare const SEALED_WORKSPACE_DIR_PREFIX = "agent-harness-seal-";
+export interface SealedWorkspace {
+    path: string;
+    cleanup: () => Promise<void>;
+}
+export interface CreateSealedWorkspaceOptions {
+    callerCwd: string;
+    /** Caller-relative files or directories to overlay after the HEAD snapshot. */
+    overlayPaths?: string[];
+    /**
+     * Caller-relative folder that becomes the sealed repo.
+     * Omit, empty, or `"."` keeps `git archive HEAD`.
+     */
+    workspace?: string;
+}
+export type ParsedScenarioWorkspace = {
+    ok: true;
+    rel: string | undefined;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Parse `workspace`. `undefined`, empty, and `"."` mean caller HEAD.
+ * Subfolder paths must stay repo-relative and must not contain `..`.
+ */
+export declare function parseScenarioWorkspace(raw: unknown): ParsedScenarioWorkspace;
+/** True when the run should copy caller HEAD instead of a fixture folder. */
+export declare function isCallerHeadWorkspace(raw: unknown): boolean;
+/** Caller-relative trees copied into every sealed run so hosts see local context. */
+export declare function defaultSealedOverlayPaths(extra?: string[], skillPaths?: string[]): string[];
+/** Copy HEAD plus caller context into a temp folder the agent should not leave. */
+export declare function createSealedWorkspace(options: CreateSealedWorkspaceOptions): Promise<SealedWorkspace>;
+/** Tool paths that resolve outside the sealed workspace. */
+export declare function toolPathsOutsideWorkspace(trace: AgentTrace, workspaceRoot: string): string[];
+//# sourceMappingURL=sealed-workspace.d.ts.map

package/dist/sealed-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealed-workspace.d.ts","sourceRoot":"","sources":["../src/sealed-workspace.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAK7C,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,uBAAuB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,uBAAuB,CAyB5E;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAG3D;AAqDD,qFAAqF;AACrF,wBAAgB,yBAAyB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAc3F;AAcD,mFAAmF;AACnF,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,4BAA4B,GACnC,OAAO,CAAC,eAAe,CAAC,CAwB1B;AAgBD,4DAA4D;AAC5D,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAY5F"}

package/dist/sealed-workspace.js

@@ -0,0 +1,170 @@
+import { execFile } from "node:child_process";
+import { cp, mkdir, mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { promisify } from "node:util";
+import { SKILL_ROOTS, skillOverlayRelPath } from "./skills-context.js";
+import { isPathUnderRoot } from "./working-tree-guard.js";
+const execFileAsync = promisify(execFile);
+export const SEALED_WORKSPACE_DIR_PREFIX = "agent-harness-seal-";
+/**
+ * Parse `workspace`. `undefined`, empty, and `"."` mean caller HEAD.
+ * Subfolder paths must stay repo-relative and must not contain `..`.
+ */
+export function parseScenarioWorkspace(raw) {
+    if (raw === undefined) {
+        return { ok: true, rel: undefined };
+    }
+    if (typeof raw !== "string") {
+        return { ok: false, message: `workspace must be a string, got ${JSON.stringify(raw)}` };
+    }
+    const normalized = raw.replace(/\\/g, "/").replace(/^\.\//, "").trim();
+    if (normalized.length === 0 || normalized === ".") {
+        return { ok: true, rel: undefined };
+    }
+    if (isAbsolute(raw) || normalized.startsWith("/")) {
+        return {
+            ok: false,
+            message: `workspace must be a repo-relative folder, got ${JSON.stringify(raw)}`,
+        };
+    }
+    const parts = normalized.split("/").filter((part) => part.length > 0);
+    if (parts.some((part) => part === ".." || part === ".")) {
+        return {
+            ok: false,
+            message: `workspace must not contain '..' segments, got ${JSON.stringify(raw)}`,
+        };
+    }
+    return { ok: true, rel: parts.join("/") };
+}
+/** True when the run should copy caller HEAD instead of a fixture folder. */
+export function isCallerHeadWorkspace(raw) {
+    const parsed = parseScenarioWorkspace(raw);
+    return parsed.ok && parsed.rel === undefined;
+}
+async function materializeGitHead(callerCwd, dest) {
+    try {
+        await execFileAsync("git", ["rev-parse", "--is-inside-work-tree"], { cwd: callerCwd });
+    }
+    catch {
+        return;
+    }
+    const archivePath = join(dest, ".git-archive.tar");
+    await execFileAsync("git", ["archive", "--format=tar", "-o", archivePath, "HEAD"], {
+        cwd: callerCwd,
+    });
+    await execFileAsync("tar", ["-xf", archivePath, "-C", dest]);
+    await rm(archivePath, { force: true });
+}
+function skipNestedGit(source) {
+    const parts = source.split(sep);
+    return !parts.includes(".git");
+}
+async function materializeWorkspaceFolder(callerCwd, workspaceRel, dest) {
+    const root = resolve(callerCwd);
+    const from = resolve(callerCwd, workspaceRel);
+    if (!isPathUnderRoot(from, root)) {
+        throw new Error(`workspace must stay under the caller cwd: ${workspaceRel}`);
+    }
+    await rm(dest, { recursive: true, force: true });
+    await cp(from, dest, { recursive: true, filter: skipNestedGit });
+}
+async function overlayPath(callerCwd, dest, rel) {
+    const normalized = rel.replace(/^\.\//, "").trim();
+    if (!normalized || normalized.includes("\0")) {
+        return;
+    }
+    const from = resolve(callerCwd, normalized);
+    if (!isPathUnderRoot(from, resolve(callerCwd))) {
+        return;
+    }
+    const to = join(dest, normalized);
+    try {
+        await mkdir(dirname(to), { recursive: true });
+        await cp(from, to, { recursive: true, force: true });
+    }
+    catch {
+        // Missing overlay sources are skipped.
+    }
+}
+/** Caller-relative trees copied into every sealed run so hosts see local context. */
+export function defaultSealedOverlayPaths(extra, skillPaths) {
+    const extraSkillOverlays = (skillPaths ?? []).map((path) => skillOverlayRelPath(path));
+    return [
+        "AGENTS.md",
+        "CLAUDE.md",
+        ".cursor/rules",
+        ".skeleton/registry.md",
+        "skeleton.toml",
+        ".skeleton/config.yaml",
+        ".skeleton/customize",
+        ...SKILL_ROOTS,
+        ...extraSkillOverlays,
+        ...(extra ?? []),
+    ];
+}
+async function initNestedGit(dest) {
+    await execFileAsync("git", ["init", "-b", "main"], { cwd: dest });
+    await execFileAsync("git", ["config", "user.email", "harness@local"], { cwd: dest });
+    await execFileAsync("git", ["config", "user.name", "agent-harness"], { cwd: dest });
+    await execFileAsync("git", ["add", "-A"], { cwd: dest });
+    try {
+        await execFileAsync("git", ["commit", "-m", "sealed workspace"], { cwd: dest });
+    }
+    catch {
+        // Empty tree still keeps .git so git does not walk to the caller repo.
+    }
+}
+/** Copy HEAD plus caller context into a temp folder the agent should not leave. */
+export async function createSealedWorkspace(options) {
+    const dest = await mkdtemp(join(tmpdir(), SEALED_WORKSPACE_DIR_PREFIX));
+    const parsed = parseScenarioWorkspace(options.workspace);
+    if (!parsed.ok) {
+        await rm(dest, { recursive: true, force: true });
+        throw new Error(parsed.message);
+    }
+    if (parsed.rel) {
+        await materializeWorkspaceFolder(options.callerCwd, parsed.rel, dest);
+    }
+    else {
+        await materializeGitHead(options.callerCwd, dest);
+        for (const rel of options.overlayPaths ?? []) {
+            await overlayPath(options.callerCwd, dest, rel);
+        }
+    }
+    await initNestedGit(dest);
+    return {
+        path: dest,
+        cleanup: async () => {
+            await rm(dest, { recursive: true, force: true });
+        },
+    };
+}
+function candidatePathsFromArgs(args) {
+    if (!args) {
+        return [];
+    }
+    const paths = [];
+    for (const key of ["path", "file_path", "filePath", "target_file", "uri", "cwd"]) {
+        const value = args[key];
+        if (typeof value === "string") {
+            paths.push(value.replace(/^file:\/\//, ""));
+        }
+    }
+    return paths;
+}
+/** Tool paths that resolve outside the sealed workspace. */
+export function toolPathsOutsideWorkspace(trace, workspaceRoot) {
+    const root = resolve(workspaceRoot);
+    const escaped = [];
+    for (const call of trace.toolCalls) {
+        for (const raw of candidatePathsFromArgs(call.args)) {
+            const abs = isAbsolute(raw) ? resolve(raw) : resolve(root, raw);
+            if (!isPathUnderRoot(abs, root)) {
+                escaped.push(raw);
+            }
+        }
+    }
+    return [...new Set(escaped)];
+}
+//# sourceMappingURL=sealed-workspace.js.map

package/dist/sealed-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealed-workspace.js","sourceRoot":"","sources":["../src/sealed-workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAsBjE;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IAClD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO;YACN,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,iDAAiD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;SAC/E,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO;YACN,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,iDAAiD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;SAC/E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,GAAY;IACjD,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,IAAY;IAChE,IAAI,CAAC;QACJ,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;IACR,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACnD,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;QAClF,GAAG,EAAE,SAAS;KACd,CAAC,CAAC;IACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,SAAiB,EACjB,YAAoB,EACpB,IAAY;IAEZ,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6CAA6C,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,IAAY,EAAE,GAAW;IACtE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO;IACR,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO;IACR,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,uCAAuC;IACxC,CAAC;AACF,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,yBAAyB,CAAC,KAAgB,EAAE,UAAqB;IAChF,MAAM,kBAAkB,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,OAAO;QACN,WAAW;QACX,WAAW;QACX,eAAe;QACf,uBAAuB;QACvB,eAAe;QACf,uBAAuB;QACvB,qBAAqB;QACrB,GAAG,WAAW;QACd,GAAG,kBAAkB;QACrB,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;KAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC;QACJ,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACR,uEAAuE;IACxE,CAAC;AACF,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAAqC;IAErC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,0BAA0B,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACP,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAE1B,OAAO;QACN,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAyC;IACxE,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,yBAAyB,CAAC,KAAiB,EAAE,aAAqB;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/skills-context.d.ts

@@ -1,10 +1,17 @@
+/** Project skill trees used by Cursor, Claude, Codex, and similar hosts. */
+export declare const SKILL_ROOTS: readonly [".agents/skills", ".cursor/skills", ".codex/skills", ".claude/skills"];
+/** Skill folder name from a host-agnostic SKILL.md or references path. */
+export declare function skillNameFromWorkflowPath(path: string): string | undefined;
 export type SkillContextMode = "none" | "catalog" | "full";
-export interface SkillContextOptions {
-    mode: SkillContextMode;
-    /** Full mode: load only these skill folder names. Omit = all public skills. */
-    include?: string[];
-}
-export type SkillContextSetting = SkillContextMode | SkillContextOptions;
+export type SkillContextOptions = {
+    mode: "none";
+    include?: readonly string[];
+} | {
+    mode?: "catalog" | "full";
+    include: readonly string[];
+};
+/** Skill files for one run. Use repo-relative SKILL.md or skill-folder paths. */
+export type SkillContextSetting = "none" | readonly string[] | SkillContextOptions;
 export interface SkillCatalogEntry {
     name: string;
     dir: string;
@@ -12,7 +19,19 @@ export interface SkillCatalogEntry {
     description: string;
     disableModelInvocation: boolean;
 }
-declare function normalizeSkillContext(setting: SkillContextSetting | undefined): SkillContextOptions;
+export declare function normalizeRelSkillPath(raw: string): string;
+/** True for a repo-relative skill file or folder. Bare names are invalid. */
+export declare function isRepoRelativeSkillPath(raw: string): boolean;
+/** SKILL.md path for a listed skill file or folder. */
+export declare function skillManifestRelPath(raw: string): string;
+/** Folder copied into the sealed workspace for a listed skill path. */
+export declare function skillOverlayRelPath(raw: string): string;
+/** Skill paths this run may load. Empty when skills are off. */
+export declare function skillPathsFromSetting(setting: SkillContextSetting | undefined): string[];
+declare function normalizeSkillContext(setting: SkillContextSetting | undefined): {
+    mode: SkillContextMode;
+    include: string[];
+};
 export interface LoadedSkillContext {
     mode: SkillContextMode;
     sources: string[];