@prismatic-io/lux 0.0.1

package/lib/core/annotation.js

@@ -0,0 +1,92 @@
+import { z } from "zod";
+import { formatZodIssues } from "./zod.js";
+const ExpectedBooleanLabelSchema = z
+    .object({
+    passed: z.boolean(),
+    score: z.number().min(0).max(1).optional(),
+})
+    .strict();
+export const GraderAnnotationSchema = z
+    .object({
+    /** Stable label identity within the dataset. */
+    id: z.string().min(1),
+    /** Persisted Lux run containing the evidence to grade. */
+    runDir: z.string().min(1),
+    /** Candidate-relative declarative rubric whose assertions grade this run. */
+    rubricPath: z
+        .string()
+        .min(1)
+        .transform((path) => path.replaceAll("\\", "/")),
+    /** Optional selection labels used by experiment split selectors. */
+    tags: z.array(z.string()).default([]),
+    expected: z
+        .object({
+        casePassed: z.boolean().optional(),
+        caseScore: z.number().min(0).max(1).optional(),
+        assertions: z.record(z.string(), ExpectedBooleanLabelSchema).default({}),
+    })
+        .strict(),
+    /** Whether the label was independently authored or generated as test data. */
+    source: z.enum(["human", "synthetic"]),
+    annotator: z.string().min(1).optional(),
+    labeledAt: z.string().datetime().optional(),
+    reviewer: z.string().min(1).optional(),
+    /** Human rationale supplied to the rubric optimizer on mismatches. */
+    feedback: z.string().optional(),
+    meta: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict()
+    .superRefine((annotation, ctx) => {
+    if (annotation.expected.casePassed === undefined &&
+        annotation.expected.caseScore === undefined &&
+        Object.keys(annotation.expected.assertions).length === 0) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["expected"],
+            message: "annotation requires a case pass/score label or at least one assertion label",
+        });
+    }
+    if (annotation.rubricPath.startsWith("/") ||
+        annotation.rubricPath.split(/[\\/]/).includes("..")) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["rubricPath"],
+            message: "rubricPath must stay within the experiment subject root",
+        });
+    }
+    if (!annotation.rubricPath.toLowerCase().endsWith(".json")) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["rubricPath"],
+            message: "grader experiments require a declarative .json rubric",
+        });
+    }
+});
+export const GraderAnnotationDatasetSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    annotations: z.array(GraderAnnotationSchema).min(1),
+    meta: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict()
+    .superRefine((dataset, ctx) => {
+    const ids = new Set();
+    for (const [index, annotation] of dataset.annotations.entries()) {
+        if (ids.has(annotation.id)) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["annotations", index, "id"],
+                message: `duplicate annotation id '${annotation.id}'`,
+            });
+        }
+        ids.add(annotation.id);
+    }
+});
+export const defineGraderAnnotations = (input) => {
+    const parsed = GraderAnnotationDatasetSchema.safeParse(input);
+    if (!parsed.success) {
+        throw new Error(`Invalid Lux grader annotations: ${formatZodIssues(parsed.error)}`);
+    }
+    return parsed.data;
+};
+//# sourceMappingURL=annotation.js.map

package/lib/core/annotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotation.js","sourceRoot":"","sources":["../../src/core/annotation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,MAAM,0BAA0B,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,gDAAgD;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,0DAA0D;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,6EAA6E;IAC7E,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,oEAAoE;IACpE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACzE,CAAC;SACD,MAAM,EAAE;IACX,8EAA8E;IAC9E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,sEAAsE;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE;IAC/B,IACE,UAAU,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS;QAC5C,UAAU,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;QAC3C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EACxD,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;IACL,CAAC;IACD,IACE,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QACrC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnD,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC;gBAClC,OAAO,EAAE,4BAA4B,UAAU,CAAC,EAAE,GAAG;aACtD,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,KAAmC,EACV,EAAE;IAC3B,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC,CAAC"}

package/lib/core/answerer.d.ts

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import type { Answer, Interrupt } from "./events.js";
+import { type TokenUsage } from "./usage.js";
+export type AnswerHistoryEntry = {
+    interrupt: Interrupt;
+    answer: Answer;
+    durationMs: number;
+};
+export type AnswererContext = {
+    persona: string | null;
+    prompt: string;
+    history: AnswerHistoryEntry[];
+    runDir: string;
+    /**
+     * Fires when the run is being torn down. Answerers that spawn subprocesses
+     * or block on external input must abandon the in-flight answer, or a
+     * Ctrl-C leaves billable agent calls running past the run's end.
+     */
+    abortSignal?: AbortSignal;
+    /**
+     * Persists a model-attempt start before a model-backed answerer invokes its
+     * provider.
+     */
+    recordModelAttemptStart?: (kind: "answerer") => Promise<string>;
+    /**
+     * Atomically settles one model-backed answer and re-checks campaign limits
+     * before another interrupt may invoke the provider.
+     */
+    recordModelAttemptComplete?: (attemptId: string, accounting: AnswererModelCallAccounting) => Promise<void>;
+};
+export declare const AnswererModelCallAccountingSchema: z.ZodObject<{
+    usage: z.ZodObject<{
+        input: z.ZodNumber;
+        output: z.ZodNumber;
+        cacheRead: z.ZodNumber;
+        cacheCreation: z.ZodNumber;
+    }, z.core.$strip>;
+    costUsd: z.ZodOptional<z.ZodNumber>;
+    unpricedModelCalls: z.ZodNumber;
+}, z.core.$strict>;
+export type AnswererModelCallAccounting = z.infer<typeof AnswererModelCallAccountingSchema>;
+export declare const AnswererModelAccountingSchema: z.ZodObject<{
+    calls: z.ZodNumber;
+    reportedCostUsd: z.ZodNumber;
+    unpricedModelCalls: z.ZodNumber;
+}, z.core.$strict>;
+export type AnswererModelAccounting = z.infer<typeof AnswererModelAccountingSchema>;
+export interface Answerer {
+    prepare(ctx: AnswererContext): Promise<void>;
+    /**
+     * Must settle within a bounded time (every bundled answerer enforces its
+     * own wait budget). Drivers pause their idle clock while a question is
+     * outstanding — the user's thinking time is not the agent's — so an
+     * answer() that never settles hangs the run until its abort signal fires.
+     */
+    answer(interrupt: Interrupt, ctx: AnswererContext): Promise<Answer>;
+    close(): Promise<void>;
+    /** Tokens spent playing the user, accumulated across every answer. */
+    usage?(): TokenUsage;
+    /** Model calls made by the answerer, kept separate from the subject driver. */
+    modelAccounting?(): AnswererModelAccounting;
+}
+export type AnswererPlugin<Cfg = unknown> = {
+    name: string;
+    configSchema?: z.ZodTypeAny;
+    create: (config: Cfg) => Answerer | Promise<Answerer>;
+};
+//# sourceMappingURL=answerer.d.ts.map

package/lib/core/answerer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"answerer.d.ts","sourceRoot":"","sources":["../../src/core/answerer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,YAAY,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE;;;OAGG;IACH,0BAA0B,CAAC,EAAE,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,2BAA2B,KACpC,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAEF,eAAO,MAAM,iCAAiC;;;;;;;;;kBAMnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,eAAO,MAAM,6BAA6B;;;;kBAM/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,sEAAsE;IACtE,KAAK,CAAC,IAAI,UAAU,CAAC;IACrB,+EAA+E;IAC/E,eAAe,CAAC,IAAI,uBAAuB,CAAC;CAC7C;AAED,MAAM,MAAM,cAAc,CAAC,GAAG,GAAG,OAAO,IAAI;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC;IAC5B,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvD,CAAC"}

package/lib/core/answerer.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+import { TokenUsageSchema } from "./usage.js";
+export const AnswererModelCallAccountingSchema = z
+    .object({
+    usage: TokenUsageSchema,
+    costUsd: z.number().nonnegative().optional(),
+    unpricedModelCalls: z.number().int().nonnegative(),
+})
+    .strict();
+export const AnswererModelAccountingSchema = z
+    .object({
+    calls: z.number().int().nonnegative(),
+    reportedCostUsd: z.number().nonnegative(),
+    unpricedModelCalls: z.number().int().nonnegative(),
+})
+    .strict();
+//# sourceMappingURL=answerer.js.map

package/lib/core/answerer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answerer.js","sourceRoot":"","sources":["../../src/core/answerer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAmB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAkC/D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,KAAK,EAAE,gBAAgB;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC5C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACzC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/lib/core/artifact-evidence.d.ts

@@ -0,0 +1,50 @@
+import type { Stats } from "node:fs";
+import type { Artifact } from "./driver.js";
+import type { Run } from "./run.js";
+export type RunArtifactInspection = {
+    target: string;
+    root: string;
+    artifact?: Artifact;
+    stats?: Stats;
+    issue?: string;
+};
+type RunArtifactEvidence = {
+    runDir: Run["runDir"];
+    artifacts: readonly Artifact[];
+};
+type ArtifactEvidenceBoundary = {
+    root: string;
+    indexedOnly: boolean;
+};
+/** Internal: bind a frozen Run object to its isolated artifact snapshot. */
+export declare const bindRunArtifactEvidence: (run: RunArtifactEvidence, boundary: ArtifactEvidenceBoundary) => void;
+/** Internal: whether a Run is confined to an isolated evidence snapshot. */
+export declare const hasRunArtifactEvidenceBoundary: (run: RunArtifactEvidence) => boolean;
+/**
+ * Resolve the common root captured by a driver. The default run artifacts
+ * directory remains the fallback for empty or genuinely multi-root evidence.
+ */
+export declare const runArtifactsRoot: (run: RunArtifactEvidence) => string;
+/**
+ * Inspect one captured artifact without following symlinks or allowing a path
+ * to escape the root recorded by its driver. An exact artifact-index entry
+ * wins; otherwise Lux uses the run's common captured-artifact root.
+ */
+export declare const inspectRunArtifact: (run: RunArtifactEvidence, authoredPath: string) => Promise<RunArtifactInspection>;
+export type ReadRunArtifactTextOptions = {
+    /**
+     * Maximum bytes read before UTF-8 decoding. Defaults to 5 MiB and cannot
+     * exceed Lux's 10 MiB public artifact-read ceiling.
+     */
+    maxBytes?: number;
+};
+export declare const readInspectedFileBytes: (target: string, expected: Stats, maxBytes: number, label: string) => Promise<Buffer>;
+export declare const readRunArtifactBytes: (run: RunArtifactEvidence, authoredPath: string, options?: ReadRunArtifactTextOptions) => Promise<Buffer>;
+/**
+ * Read UTF-8 artifact evidence through Lux's traversal, symlink, regular-file,
+ * and size checks. Throws a bounded, path-specific error when evidence is not
+ * safe to consume.
+ */
+export declare const readRunArtifactText: (run: RunArtifactEvidence, authoredPath: string, options?: ReadRunArtifactTextOptions) => Promise<string>;
+export {};
+//# sourceMappingURL=artifact-evidence.d.ts.map

package/lib/core/artifact-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-evidence.d.ts","sourceRoot":"","sources":["../../src/core/artifact-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAKpC,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;CAChC,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAIF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,QAC7B,mBAAmB,YACd,wBAAwB,KACjC,IAEF,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,QAAS,mBAAmB,KAAG,OACrC,CAAC;AAoBtC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAAS,mBAAmB,KAAG,MAK3D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QACxB,mBAAmB,gBACV,MAAM,KACnB,OAAO,CAAC,qBAAqB,CA8E/B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,sBAAsB,WACzB,MAAM,YACJ,KAAK,YACL,MAAM,SACT,MAAM,KACZ,OAAO,CAAC,MAAM,CAgDhB,CAAC;AAEF,eAAO,MAAM,oBAAoB,QAC1B,mBAAmB,gBACV,MAAM,YACX,0BAA0B,KAClC,OAAO,CAAC,MAAM,CAUhB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QACzB,mBAAmB,gBACV,MAAM,YACX,0BAA0B,KAClC,OAAO,CAAC,MAAM,CAEhB,CAAC"}

package/lib/core/artifact-evidence.js

@@ -0,0 +1,185 @@
+import { constants, lstat, open } from "node:fs/promises";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+const DEFAULT_ARTIFACT_READ_BYTES = 5 * 1024 * 1024;
+const MAX_ARTIFACT_READ_BYTES = 10 * 1024 * 1024;
+const artifactEvidenceBoundaries = new WeakMap();
+/** Internal: bind a frozen Run object to its isolated artifact snapshot. */
+export const bindRunArtifactEvidence = (run, boundary) => {
+    artifactEvidenceBoundaries.set(run, { ...boundary, root: resolve(boundary.root) });
+};
+/** Internal: whether a Run is confined to an isolated evidence snapshot. */
+export const hasRunArtifactEvidenceBoundary = (run) => artifactEvidenceBoundaries.has(run);
+const pathEscapesRoot = (root, target) => {
+    const path = relative(root, target);
+    return path === ".." || path.startsWith(`..${sep}`) || isAbsolute(path);
+};
+const defaultArtifactsRoot = (run) => artifactEvidenceBoundaries.get(run)?.root ?? resolve(run.runDir, "artifacts");
+const rootsForArtifacts = (run, artifacts) => [
+    ...new Set(artifacts.map((artifact) => artifact.root && isAbsolute(artifact.root)
+        ? resolve(artifact.root)
+        : defaultArtifactsRoot(run))),
+];
+/**
+ * Resolve the common root captured by a driver. The default run artifacts
+ * directory remains the fallback for empty or genuinely multi-root evidence.
+ */
+export const runArtifactsRoot = (run) => {
+    const boundary = artifactEvidenceBoundaries.get(run);
+    if (boundary)
+        return boundary.root;
+    const roots = rootsForArtifacts(run, run.artifacts);
+    return roots.length === 1 ? (roots[0] ?? defaultArtifactsRoot(run)) : defaultArtifactsRoot(run);
+};
+/**
+ * Inspect one captured artifact without following symlinks or allowing a path
+ * to escape the root recorded by its driver. An exact artifact-index entry
+ * wins; otherwise Lux uses the run's common captured-artifact root.
+ */
+export const inspectRunArtifact = async (run, authoredPath) => {
+    if (authoredPath.includes("\0")) {
+        return {
+            target: authoredPath,
+            root: runArtifactsRoot(run),
+            issue: `${authoredPath} contains a null byte`,
+        };
+    }
+    const matching = run.artifacts.filter((candidate) => candidate.path === authoredPath);
+    if (artifactEvidenceBoundaries.get(run)?.indexedOnly && matching.length === 0) {
+        const root = defaultArtifactsRoot(run);
+        return {
+            target: resolve(root, authoredPath),
+            root,
+            issue: `${authoredPath} was not captured in the frozen artifact index`,
+        };
+    }
+    if (matching.some((candidate) => candidate.root !== undefined && !isAbsolute(candidate.root))) {
+        return {
+            target: authoredPath,
+            root: defaultArtifactsRoot(run),
+            issue: `${authoredPath} declares a non-absolute artifact root`,
+        };
+    }
+    const artifact = matching[0];
+    const identified = artifact ? { artifact } : {};
+    const matchingRoots = rootsForArtifacts(run, matching);
+    if (matchingRoots.length > 1) {
+        return {
+            target: authoredPath,
+            root: defaultArtifactsRoot(run),
+            issue: `${authoredPath} is ambiguous across multiple artifact roots`,
+        };
+    }
+    // A non-default root is trusted only for an exact artifact-index entry.
+    // Otherwise one captured path could turn its whole external root into
+    // assertion-readable evidence.
+    const root = matchingRoots[0] ?? defaultArtifactsRoot(run);
+    const target = resolve(root, authoredPath);
+    if (pathEscapesRoot(root, target)) {
+        return { target, root, issue: `${authoredPath} escapes the captured artifact root` };
+    }
+    const path = relative(root, target);
+    const components = [
+        root,
+        ...path
+            .split(sep)
+            .filter(Boolean)
+            .map((_, index, parts) => join(root, ...parts.slice(0, index + 1))),
+    ];
+    for (const [index, component] of components.entries()) {
+        let stats;
+        try {
+            stats = await lstat(component);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === "ENOENT" || code === "ENOTDIR") {
+                return { target, root, ...identified, issue: `${authoredPath} not found` };
+            }
+            throw error;
+        }
+        if (stats.isSymbolicLink()) {
+            return {
+                target,
+                root,
+                ...identified,
+                issue: `${authoredPath} resolves through a symlink`,
+            };
+        }
+        if (index < components.length - 1 && !stats.isDirectory()) {
+            return { target, root, ...identified, issue: `${authoredPath} not found` };
+        }
+        if (index === components.length - 1) {
+            return { target, root, ...identified, stats };
+        }
+    }
+    return { target, root, ...identified, issue: `${authoredPath} not found` };
+};
+export const readInspectedFileBytes = async (target, expected, maxBytes, label) => {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0 || maxBytes > MAX_ARTIFACT_READ_BYTES) {
+        throw new RangeError(`artifact maxBytes must be an integer from 0 to ${MAX_ARTIFACT_READ_BYTES}`);
+    }
+    if (!expected.isFile())
+        throw new Error(`${label} is not a file`);
+    if (expected.size > maxBytes) {
+        throw new Error(`${label} exceeds the ${maxBytes}-byte artifact read limit`);
+    }
+    try {
+        const handle = await open(target, constants.O_RDONLY | constants.O_NOFOLLOW);
+        try {
+            const opened = await handle.stat();
+            if (!opened.isFile())
+                throw new Error(`${label} is not a file`);
+            if (opened.dev !== expected.dev || opened.ino !== expected.ino) {
+                throw new Error(`${label} changed while it was being inspected`);
+            }
+            if (opened.size !== expected.size) {
+                throw new Error(`${label} changed while it was being inspected`);
+            }
+            if (opened.size > maxBytes) {
+                throw new Error(`${label} exceeds the ${maxBytes}-byte artifact read limit`);
+            }
+            // Allocate for the inspected file, not the caller's ceiling. Reading one
+            // extra byte detects same-inode growth after fstat without making many
+            // tiny artifact reads reserve the maximum concurrently.
+            const bytes = Buffer.alloc(expected.size + 1);
+            let offset = 0;
+            while (offset < bytes.length) {
+                const read = await handle.read(bytes, offset, bytes.length - offset, offset);
+                if (read.bytesRead === 0)
+                    break;
+                offset += read.bytesRead;
+            }
+            if (offset !== expected.size) {
+                throw new Error(`${label} changed while it was being inspected`);
+            }
+            return bytes.subarray(0, offset);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ELOOP") {
+            throw new Error(`${label} resolves through a symlink`);
+        }
+        throw error;
+    }
+};
+export const readRunArtifactBytes = async (run, authoredPath, options = {}) => {
+    const maxBytes = options.maxBytes ?? DEFAULT_ARTIFACT_READ_BYTES;
+    const inspected = await inspectRunArtifact(run, authoredPath);
+    if (!inspected.stats?.isFile()) {
+        throw new Error(inspected.issue ??
+            (inspected.stats ? `${authoredPath} is not a file` : `${authoredPath} not found`));
+    }
+    return await readInspectedFileBytes(inspected.target, inspected.stats, maxBytes, authoredPath);
+};
+/**
+ * Read UTF-8 artifact evidence through Lux's traversal, symlink, regular-file,
+ * and size checks. Throws a bounded, path-specific error when evidence is not
+ * safe to consume.
+ */
+export const readRunArtifactText = async (run, authoredPath, options = {}) => {
+    return (await readRunArtifactBytes(run, authoredPath, options)).toString("utf8");
+};
+//# sourceMappingURL=artifact-evidence.js.map

package/lib/core/artifact-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-evidence.js","sourceRoot":"","sources":["../../src/core/artifact-evidence.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAIrE,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAoBjD,MAAM,0BAA0B,GAAG,IAAI,OAAO,EAAoC,CAAC;AAEnF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,GAAwB,EACxB,QAAkC,EAC5B,EAAE;IACR,0BAA0B,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,GAAwB,EAAW,EAAE,CAClF,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEtC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,MAAc,EAAW,EAAE;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,GAAwB,EAAU,EAAE,CAChE,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEhF,MAAM,iBAAiB,GAAG,CAAC,GAAwB,EAAE,SAA8B,EAAY,EAAE,CAAC;IAChG,GAAG,IAAI,GAAG,CACR,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACzB,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAC9B,CACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAwB,EAAU,EAAE;IACnE,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAClG,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAwB,EACxB,YAAoB,EACY,EAAE;IAClC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;YAC3B,KAAK,EAAE,GAAG,YAAY,uBAAuB;SAC9C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACtF,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC;YACnC,IAAI;YACJ,KAAK,EAAE,GAAG,YAAY,gDAAgD;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,KAAK,EAAE,GAAG,YAAY,wCAAwC;SAC/D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,KAAK,EAAE,GAAG,YAAY,8CAA8C;SACrE,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,sEAAsE;IACtE,+BAA+B;IAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,qCAAqC,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG;QACjB,IAAI;QACJ,GAAG,IAAI;aACJ,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;KACtE,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,KAAY,CAAC;QACjB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,YAAY,YAAY,EAAE,CAAC;YAC7E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM;gBACN,IAAI;gBACJ,GAAG,UAAU;gBACb,KAAK,EAAE,GAAG,YAAY,6BAA6B;aACpD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,YAAY,YAAY,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,YAAY,YAAY,EAAE,CAAC;AAC7E,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,MAAc,EACd,QAAe,EACf,QAAgB,EAChB,KAAa,EACI,EAAE;IACnB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,uBAAuB,EAAE,CAAC;QAC1F,MAAM,IAAI,UAAU,CAClB,kDAAkD,uBAAuB,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,QAAQ,2BAA2B,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,QAAQ,2BAA2B,CAAC,CAAC;YAC/E,CAAC;YACD,yEAAyE;YACzE,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC7E,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;oBAAE,MAAM;gBAChC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;YAC3B,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,GAAwB,EACxB,YAAoB,EACpB,OAAO,GAA+B,EAAE,EACvB,EAAE;IACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,2BAA2B,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,SAAS,CAAC,KAAK;YACb,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,gBAAgB,CAAC,CAAC,CAAC,GAAG,YAAY,YAAY,CAAC,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACjG,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAwB,EACxB,YAAoB,EACpB,OAAO,GAA+B,EAAE,EACvB,EAAE;IACnB,OAAO,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnF,CAAC,CAAC"}

package/lib/core/artifact-snapshot.d.ts

@@ -0,0 +1,37 @@
+import { z } from "zod";
+export declare const ARTIFACT_SNAPSHOT_MANIFEST = ".lux-snapshot.json";
+export declare const ArtifactSnapshotFileSchema: z.ZodObject<{
+    path: z.ZodString;
+    bytes: z.ZodNumber;
+    sha256: z.ZodString;
+}, z.core.$strip>;
+export type ArtifactSnapshotFile = z.infer<typeof ArtifactSnapshotFileSchema>;
+export declare const ArtifactSnapshotManifestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    name: z.ZodString;
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        bytes: z.ZodNumber;
+        sha256: z.ZodString;
+    }, z.core.$strip>>;
+    fileCount: z.ZodNumber;
+    bytes: z.ZodNumber;
+    baseSnapshot: z.ZodOptional<z.ZodString>;
+    reusedFiles: z.ZodNumber;
+    reusedBytes: z.ZodNumber;
+}, z.core.$strip>;
+export type ArtifactSnapshotManifest = z.infer<typeof ArtifactSnapshotManifestSchema>;
+export type ArtifactSnapshotContent = string | Uint8Array;
+export type ArtifactSnapshotFiles = Readonly<Record<string, ArtifactSnapshotContent>>;
+export interface WriteArtifactSnapshotOptions {
+    artifactsDir: string;
+    name: string;
+    files: ArtifactSnapshotFiles;
+    baseSnapshot?: string;
+    maxFiles?: number;
+    maxBytes?: number;
+    writeConcurrency?: number;
+}
+export declare const readArtifactSnapshotManifest: (snapshotRoot: string) => Promise<ArtifactSnapshotManifest | undefined>;
+export declare const writeArtifactSnapshot: ({ artifactsDir, name, files, baseSnapshot, maxFiles: requestedMaxFiles, maxBytes: requestedMaxBytes, writeConcurrency: requestedWriteConcurrency, }: WriteArtifactSnapshotOptions) => Promise<ArtifactSnapshotManifest>;
+//# sourceMappingURL=artifact-snapshot.d.ts.map

package/lib/core/artifact-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-snapshot.d.ts","sourceRoot":"","sources":["../../src/core/artifact-snapshot.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAG/D,eAAO,MAAM,0BAA0B;;;;iBAarC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;iBAkCvC,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,UAAU,CAAC;AAC1D,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAEtF,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,qBAAqB,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAkID,eAAO,MAAM,4BAA4B,iBACzB,MAAM,KACnB,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAmB9C,CAAC;AAuHF,eAAO,MAAM,qBAAqB,wJAQ/B,4BAA4B,KAAG,OAAO,CAAC,wBAAwB,CA4DjE,CAAC"}