@rosthq/cli 0.7.49 → 0.7.51

package/dist/index.js

@@ -43334,6 +43334,7 @@ var forgePlanArtifact = external_exports.object({
     }
   }
 });
+var forgePlanArtifactSchema = forgePlanArtifact;
 var forgeImplementationArtifact = external_exports.object({
   changes: forgeArtifactList,
   verification: forgeArtifactList,
@@ -52647,6 +52648,7 @@ function subpath(value) {
 function literal2(value) {
   return `(literal ${sbplString(value)})`;
 }
+var CLAUDE_TEMP_SBPL_REGEX = '(regex #"^/private/tmp/claude-[^/]+")';
 var STRICT_SYSTEM_READ_SUBPATHS = [
   "/usr",
   "/bin",
@@ -52693,7 +52695,7 @@ function buildSeatbeltProfile(input) {
   if (denyReadBaseSubpaths.length > 0) {
     lines.push(`(deny file-read* ${denyReadBaseSubpaths.join(" ")})`);
   }
-  const workspaceReads = [subpath(input.workspaceDir), ...input.allowWritePaths.map(subpath)];
+  const workspaceReads = [subpath(input.workspaceDir), ...input.allowWritePaths.map(subpath), CLAUDE_TEMP_SBPL_REGEX];
   lines.push(`(allow file-read* ${workspaceReads.join(" ")})`);
   lines.push("(deny file-write*)");
   const allowWrites = [
@@ -52702,6 +52704,8 @@ function buildSeatbeltProfile(input) {
     subpath(`${home}/.claude`),
     subpath(`${home}/.codex`),
     ...input.allowWritePaths.map(subpath),
+    CLAUDE_TEMP_SBPL_REGEX,
+    // DER-1398: Claude Code's per-session + per-command temp dirs.
     subpath("/dev/fd"),
     literal2("/dev/null"),
     literal2("/dev/stdout"),
@@ -52747,9 +52751,6 @@ function isSandboxExecAvailable() {
     return false;
   }
 }
-function claudeBashTempRoot(uid) {
-  return `/private/tmp/claude-${uid}`;
-}
 function resolveSandboxSpec(options) {
   if (options.mode === "off") {
     return { kind: "none", reason: "RUNNER_SANDBOX=off (loosened fallback - OS confinement disabled)" };
@@ -52772,11 +52773,7 @@ function resolveSandboxSpec(options) {
   const denyWritePaths = (options.denyWritePaths ?? []).map(
     (p) => p.endsWith("/") ? `${canonical(p.replace(/\/+$/, ""))}/` : canonicalFile(p)
   );
-  const uid = typeof process.getuid === "function" ? process.getuid() : null;
-  const allowWritePaths = [
-    ...(options.allowWritePaths ?? []).map(canonical),
-    ...uid !== null ? [canonicalFile(claudeBashTempRoot(uid))] : []
-  ];
+  const allowWritePaths = (options.allowWritePaths ?? []).map(canonical);
   const profile = buildSeatbeltProfile({
     workspaceDir,
     tmpDir,
@@ -53366,7 +53363,9 @@ async function executeClaimedUnit(fetchImpl, appUrl2, state, config2, io, runtim
     // narrower endpoint — T1.9 scope); its Zod schema strips unrecognized keys on a non-strict
     // parse either way, so sending them there is harmless, just unused.
     ...input.kind === "work_order" ? { step_ledger: ledger.entries() } : {},
-    ...input.kind === "work_order" && result.transcript ? { transcript: result.transcript } : {}
+    ...input.kind === "work_order" && result.transcript ? { transcript: result.transcript } : {},
+    // DER-1371: the planner's structured decomposition — only sent when the model produced one.
+    ...result.planArtifact ? { plan_artifact: result.planArtifact } : {}
   }, state.runner_secret);
   if (reported.status !== 200) {
     if (reported.status >= 400 && reported.status < 500) {
@@ -54112,12 +54111,14 @@ function runModelProcess(input) {
       const rawOutput = (out || err || "completed").trim();
       const redacted = redactForLog(rawOutput);
       const evidence = input.collectEvidence && code === 0 ? extractRunnerEvidence(rawOutput) : [];
+      const planArtifact = input.collectEvidence && code === 0 ? extractForgePlanArtifact(rawOutput) : void 0;
       finish({
         ok: code === 0,
         summary: extractRunnerSummary(redacted).slice(0, 12e3),
         transcript: scrubTranscriptSessionIds(redacted).slice(0, MAX_TRANSCRIPT_CHARS),
         ...evidence.length > 0 ? { evidence } : {},
-        ...input.expectSessionEnvelope ? extractClaudeSessionId(rawOutput) : {}
+        ...input.expectSessionEnvelope ? extractClaudeSessionId(rawOutput) : {},
+        ...planArtifact ? { planArtifact } : {}
       });
     });
     child.on("error", (error51) => {
@@ -54210,6 +54211,25 @@ function extractRunnerEvidence(output) {
   }
   return [];
 }
+function extractForgePlanArtifact(output) {
+  const directRecord = parseJsonObject(output.trim());
+  if (directRecord) {
+    const parsed = forgePlanArtifactSchema.safeParse(directRecord);
+    if (parsed.success) {
+      return parsed.data;
+    }
+    for (const key of ["result", "summary", "content", "text", "message"]) {
+      const nested = typeof directRecord[key] === "string" ? parseJsonObject(directRecord[key].trim()) : null;
+      if (nested) {
+        const nestedParsed = forgePlanArtifactSchema.safeParse(nested);
+        if (nestedParsed.success) {
+          return nestedParsed.data;
+        }
+      }
+    }
+  }
+  return void 0;
+}
 function extractClaudeSessionId(output) {
   const trimmed = output.trim();
   if (!trimmed.startsWith("{")) {