@sema-agent/core 1.279.0

package/dist/core/file-snapshot-store.js

@@ -0,0 +1,244 @@
+import { createHash } from "node:crypto";
+const normSlash = (p) => p.replace(/\\/g, "/");
+const stripTrailSep = (p) => p.replace(/[\\/]+$/, "");
+const foldDrive = (p) => (/^[A-Za-z]:(\/|$)/.test(p) ? p[0].toLowerCase() + p.slice(1) : p);
+const isWinFormPath = (p) => /^[A-Za-z]:[\\/]/.test(p) || p.startsWith("\\\\") || (!p.startsWith("/") && p.includes("\\"));
+function relUnder(root, child) {
+    const fold = isWinFormPath(root) ? normSlash : (p) => p;
+    const r = foldDrive(fold(stripTrailSep(root)));
+    const c = foldDrive(fold(child));
+    if (c === r)
+        return "";
+    if (!c.startsWith(r + "/"))
+        return null;
+    return fold(child).slice(fold(stripTrailSep(root)).length + 1);
+}
+function joinUnder(root, rel) {
+    const win = isWinFormPath(root);
+    return stripTrailSep(root) + (win ? "\\" : "/") + (win ? rel.replace(/\//g, "\\") : rel);
+}
+function isUnsafeRelPath(relN) {
+    return relN.startsWith("/") || /^[A-Za-z]:/.test(relN) || relN.split("/").includes("..");
+}
+export const DEFAULT_SNAPSHOT_BOUNDS = {
+    maxFiles: 10000,
+    maxBytes: 256 * 1024 * 1024,
+    ignoreDirs: new Set([".git", "node_modules"]),
+};
+async function enumerateTree(env, root, bounds, signal) {
+    const files = [];
+    const symlinks = [];
+    let totalBytes = 0;
+    const stack = [root];
+    while (stack.length > 0) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const dir = stack.pop();
+        const ls = await env.listDir(dir, signal);
+        if (!ls.ok) {
+            return { ok: false, error: { code: "enumerate_failed", message: `listDir ${dir}: ${ls.error.code}` } };
+        }
+        for (const info of ls.value) {
+            if (info.kind === "symlink") {
+                symlinks.push(info.path);
+            }
+            else if (info.kind === "directory") {
+                if (!bounds.ignoreDirs.has(info.name))
+                    stack.push(info.path);
+            }
+            else if (info.kind === "file") {
+                const relPath = relUnder(root, info.path);
+                if (relPath === null)
+                    return { ok: false, error: { code: "enumerate_failed", message: `path escapes root form: ${info.path}` } };
+                files.push({ relPath, absPath: info.path, size: info.size });
+                totalBytes += info.size;
+                if (files.length > bounds.maxFiles)
+                    return { ok: false, error: { code: "too_large", message: `> ${bounds.maxFiles} files` } };
+                if (totalBytes > bounds.maxBytes)
+                    return { ok: false, error: { code: "too_large", message: `> ${bounds.maxBytes} bytes` } };
+            }
+        }
+    }
+    return { ok: true, value: { files, symlinks } };
+}
+const SEP = String.fromCharCode(0);
+const skey = (scope, key) => `${scope}${SEP}${key}`;
+export async function captureManifest(env, root, bounds, signal, putBlob) {
+    const enumerated = await enumerateTree(env, root, bounds, signal);
+    if (!enumerated.ok)
+        return enumerated;
+    const manifest = new Map();
+    for (const f of enumerated.value.files) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const rb = await env.readBinaryFile(f.absPath, signal);
+        if (!rb.ok)
+            return { ok: false, error: { code: "read_failed", message: `read ${f.relPath}: ${rb.error.code}` } };
+        const hash = createHash("sha256").update(rb.value).digest("hex");
+        await putBlob(hash, rb.value);
+        manifest.set(f.relPath, hash);
+    }
+    return { ok: true, value: manifest };
+}
+export async function applyManifest(env, root, bounds, signal, manifest, getBlob) {
+    const cur = await enumerateTree(env, root, bounds, signal);
+    if (!cur.ok)
+        return cur;
+    for (const link of cur.value.symlinks) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const rm = await env.remove(link, { force: true });
+        if (!rm.ok)
+            return { ok: false, error: { code: "restore_failed", message: `remove symlink ${link}: ${rm.error.code}` } };
+    }
+    for (const f of cur.value.files) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        if (!manifest.has(f.relPath)) {
+            const rm = await env.remove(f.absPath, { force: true });
+            if (!rm.ok)
+                return { ok: false, error: { code: "restore_failed", message: `remove ${f.relPath}: ${rm.error.code}` } };
+        }
+    }
+    for (const [relPath, hash] of manifest) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const relN = isWinFormPath(root) ? normSlash(relPath) : relPath;
+        if (isUnsafeRelPath(relN)) {
+            return { ok: false, error: { code: "restore_failed", message: `unsafe relPath escapes root: ${relPath}` } };
+        }
+        const blob = await getBlob(hash);
+        if (!blob)
+            return { ok: false, error: { code: "restore_failed", message: `missing blob for ${relPath}` } };
+        const target = joinUnder(root, relN);
+        const fi = await env.fileInfo(target);
+        if (fi.ok && fi.value.kind === "directory") {
+            const rm = await env.remove(target, { recursive: true, force: true });
+            if (!rm.ok)
+                return { ok: false, error: { code: "restore_failed", message: `clear dir ${relPath}: ${rm.error.code}` } };
+        }
+        const w = await env.writeFile(target, blob);
+        if (!w.ok)
+            return { ok: false, error: { code: "restore_failed", message: `write ${relPath}: ${w.error.code}` } };
+    }
+    return { ok: true };
+}
+export class InMemoryFileSnapshotStore {
+    blobs = new Map();
+    manifests = new Map();
+    inFlight = new Map();
+    bounds;
+    constructor(bounds) {
+        this.bounds = {
+            maxFiles: bounds?.maxFiles ?? DEFAULT_SNAPSHOT_BOUNDS.maxFiles,
+            maxBytes: bounds?.maxBytes ?? DEFAULT_SNAPSHOT_BOUNDS.maxBytes,
+            ignoreDirs: new Set(bounds?.ignoreDirs ?? DEFAULT_SNAPSHOT_BOUNDS.ignoreDirs),
+        };
+    }
+    async snapshot(scope, key, env, root, signal) {
+        const sk = skey(scope, key);
+        if (this.manifests.has(sk) || this.inFlight.has(sk))
+            return { ok: true };
+        const written = new Set();
+        this.inFlight.set(sk, written);
+        try {
+            const captured = await captureManifest(env, root, this.bounds, signal, (hash, bytes) => {
+                written.add(hash);
+                if (!this.blobs.has(hash))
+                    this.blobs.set(hash, bytes);
+            });
+            if (!captured.ok)
+                return captured;
+            this.manifests.set(sk, captured.value);
+            return { ok: true };
+        }
+        finally {
+            this.inFlight.delete(sk);
+        }
+    }
+    async restore(scope, key, env, root, signal) {
+        const manifest = this.manifests.get(skey(scope, key));
+        if (!manifest)
+            return { ok: false, error: { code: "not_found", message: `no snapshot for key ${key}` } };
+        return applyManifest(env, root, this.bounds, signal, manifest, (hash) => this.blobs.get(hash));
+    }
+    async has(scope, key) {
+        return this.manifests.has(skey(scope, key));
+    }
+    async listKeys(scope) {
+        const prefix = `${scope}${SEP}`;
+        const keys = [];
+        for (const sk of this.manifests.keys()) {
+            if (sk.startsWith(prefix))
+                keys.push(sk.slice(prefix.length));
+        }
+        return keys;
+    }
+    async exportManifest(scope, key) {
+        const m = this.manifests.get(skey(scope, key));
+        return m ? new Map(m) : null;
+    }
+    async getBlob(hash) {
+        return this.blobs.get(hash);
+    }
+    async putBlob(hash, bytes) {
+        if (createHash("sha256").update(bytes).digest("hex") !== hash) {
+            return { ok: false, error: { code: "read_failed", message: `blob bytes fail content-address integrity for ${hash}` } };
+        }
+        if (!this.blobs.has(hash))
+            this.blobs.set(hash, bytes);
+        return { ok: true };
+    }
+    async importManifest(scope, key, manifest, srcGetBlob) {
+        const sk = skey(scope, key);
+        if (this.manifests.has(sk) || this.inFlight.has(sk))
+            return { ok: true };
+        const written = new Set();
+        this.inFlight.set(sk, written);
+        try {
+            for (const hash of new Set(manifest.values())) {
+                written.add(hash);
+                if (this.blobs.has(hash))
+                    continue;
+                const bytes = await srcGetBlob(hash);
+                if (!bytes)
+                    return { ok: false, error: { code: "read_failed", message: `missing source blob ${hash}` } };
+                if (createHash("sha256").update(bytes).digest("hex") !== hash) {
+                    return { ok: false, error: { code: "read_failed", message: `source blob ${hash} fails content-address integrity` } };
+                }
+                this.blobs.set(hash, bytes);
+            }
+            this.manifests.set(sk, new Map(manifest));
+            return { ok: true };
+        }
+        catch (err) {
+            return { ok: false, error: { code: "read_failed", message: `source blob fetch failed: ${err.message}` } };
+        }
+        finally {
+            this.inFlight.delete(sk);
+        }
+    }
+    async reap(scope, keepKeys) {
+        const keep = new Set(keepKeys);
+        const prefix = `${scope}${SEP}`;
+        let removed = 0;
+        for (const sk of [...this.manifests.keys()]) {
+            if (sk.startsWith(prefix) && !keep.has(sk.slice(prefix.length))) {
+                this.manifests.delete(sk);
+                removed++;
+            }
+        }
+        const live = new Set();
+        for (const hs of this.inFlight.values())
+            for (const h of hs)
+                live.add(h);
+        for (const m of this.manifests.values())
+            for (const h of m.values())
+                live.add(h);
+        for (const h of [...this.blobs.keys()])
+            if (!live.has(h))
+                this.blobs.delete(h);
+        return removed;
+    }
+}
+//# sourceMappingURL=file-snapshot-store.js.map

package/dist/core/file-snapshot-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-snapshot-store.js","sourceRoot":"","sources":["../../src/core/file-snapshot-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACtE,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAI5G,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAE5I,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAwGD,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IAIzD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC3B,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C,CAAC;AAsBF,KAAK,UAAU,aAAa,CAAC,GAAiB,EAAE,IAAY,EAAE,MAA0B,EAAE,MAAoB;IAC5G,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACzG,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAG5B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAGhC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACjI,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,QAAQ,QAAQ,EAAE,EAAE,CAAC;gBAC9H,IAAI,UAAU,GAAG,MAAM,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,QAAQ,QAAQ,EAAE,EAAE,CAAC;YAC9H,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,GAAW,EAAU,EAAE,CAAC,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AAS5E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAiB,EACjB,IAAY,EACZ,MAA0B,EAC1B,MAA+B,EAC/B,OAAkE;IAElE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACjH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAiB,EACjB,IAAY,EACZ,MAA0B,EAC1B,MAA+B,EAC/B,QAA6B,EAC7B,OAAmF;IAEnF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAGxB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3H,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,EAAE,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACxH,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAS1F,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAChE,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gCAAgC,OAAO,EAAE,EAAE,EAAE,CAAC;QAC9G,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3G,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,EAAE,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,OAAO,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACzH,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACnH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAOD,MAAM,OAAO,yBAAyB;IACnB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IAInD,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,MAAM,CAAqB;IAE5C,YAAY,MAAoC;QAG9C,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;YAC9D,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;YAC9D,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,uBAAuB,CAAC,UAAU,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,GAAW,EAAE,GAAiB,EAAE,IAAY,EAAE,MAAoB;QAC9F,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACrF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC;YAElC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,GAAW,EAAE,GAAiB,EAAE,IAAY,EAAE,MAAoB;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,EAAE,CAAC;QACzG,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa;QAG1B,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,GAAW;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAiB;QAG3C,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iDAAiD,IAAI,EAAE,EAAE,EAAE,CAAC;QACzH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,GAAW,EACX,QAA6B,EAC7B,UAA6D;QAE7D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACnC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,IAAI,kCAAkC,EAAE,EAAE,CAAC;gBACvH,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YAGD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAIb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6BAA8B,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QACvH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,QAAkB;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAID,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/core/git-worktree-env.d.ts

@@ -0,0 +1,16 @@
+import type { ExecutionEnv } from "../internal/harness.js";
+export declare const WORKTREE_PARENT = ".sema-worktrees";
+export interface AddWorktreeOptions {
+    repoRoot: string;
+    sessionId: string;
+    rootEnvAt: (worktreeDir: string) => ExecutionEnv | Promise<ExecutionEnv>;
+    commit?: string;
+}
+export declare function addWorktree(baseEnv: ExecutionEnv, opts: AddWorktreeOptions): Promise<{
+    env: ExecutionEnv & {
+        destroy(): Promise<void>;
+    };
+    worktreeDir: string;
+}>;
+export declare function pruneWorktrees(baseEnv: ExecutionEnv, repoRoot: string): Promise<void>;
+//# sourceMappingURL=git-worktree-env.d.ts.map

package/dist/core/git-worktree-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-worktree-env.d.ts","sourceRoot":"","sources":["../../src/core/git-worktree-env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI3D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,EAAE,MAAM,CAAC;IAEjB,SAAS,EAAE,MAAM,CAAC;IAMlB,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC;IAAE,GAAG,EAAE,YAAY,GAAG;QAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAiCpF;AAID,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3F"}

package/dist/core/git-worktree-env.js

@@ -0,0 +1,40 @@
+import { randomUUID } from "node:crypto";
+export const WORKTREE_PARENT = ".sema-worktrees";
+function shq(s) {
+    return `'${s.replace(/'/g, "'\\''")}'`;
+}
+export async function addWorktree(baseEnv, opts) {
+    const safe = (opts.sessionId || "task").replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 64);
+    const worktreeDir = `${opts.repoRoot}/${WORKTREE_PARENT}/${safe}-${randomUUID().slice(0, 8)}`;
+    const add = await baseEnv.exec(`git worktree add --detach ${shq(worktreeDir)} ${shq(opts.commit ?? "HEAD")}`, {
+        cwd: opts.repoRoot,
+    });
+    if (!add.ok || add.value.exitCode !== 0) {
+        const detail = add.ok ? add.value.stderr || add.value.stdout : String(add.error);
+        throw new Error(`git worktree add failed: ${detail}`);
+    }
+    let inner;
+    try {
+        inner = await opts.rootEnvAt(worktreeDir);
+    }
+    catch (err) {
+        await baseEnv.exec(`git worktree remove --force ${shq(worktreeDir)}`, { cwd: opts.repoRoot }).catch(() => undefined);
+        throw err;
+    }
+    const innerDestroy = inner.destroy;
+    const env = inner;
+    env.destroy = async () => {
+        try {
+            if (typeof innerDestroy === "function")
+                await innerDestroy.call(inner);
+        }
+        finally {
+            await baseEnv.exec(`git worktree remove --force ${shq(worktreeDir)}`, { cwd: opts.repoRoot }).catch(() => undefined);
+        }
+    };
+    return { env, worktreeDir };
+}
+export async function pruneWorktrees(baseEnv, repoRoot) {
+    await baseEnv.exec("git worktree prune", { cwd: repoRoot });
+}
+//# sourceMappingURL=git-worktree-env.js.map

package/dist/core/git-worktree-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-worktree-env.js","sourceRoot":"","sources":["../../src/core/git-worktree-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAkBjD,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAqB,EACrB,IAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,EAAE;QAC5G,GAAG,EAAE,IAAI,CAAC,QAAQ;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAID,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrH,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,YAAY,GAAI,KAA+C,CAAC,OAAO,CAAC;IAC9E,MAAM,GAAG,GAAG,KAAoD,CAAC;IAIjE,GAAG,CAAC,OAAO,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,CAAC;YACH,IAAI,OAAO,YAAY,KAAK,UAAU;gBAAE,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvH,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB,EAAE,QAAgB;IAC1E,MAAM,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/core/hooks.d.ts

@@ -0,0 +1,128 @@
+import type { DocumentContent, ImageContent, TextContent } from "../internal/llm.js";
+import type { PermissionResult, ToolCallRequest } from "./tool-policy.js";
+export interface Hooks {
+    preToolUse?(toolName: string, input: unknown, ctx: HookToolContext): PreToolUseResult | undefined | Promise<PreToolUseResult | undefined>;
+    postToolUse?(toolName: string, input: unknown, output: HookToolOutput, ctx: HookToolContext): PostToolUseResult | undefined | Promise<PostToolUseResult | undefined>;
+    userPromptSubmit?(prompt: string): UserPromptSubmitResult | undefined | Promise<UserPromptSubmitResult | undefined>;
+    stop?(ctx: StopHookContext): StopHookResult | undefined | Promise<StopHookResult | undefined>;
+    postToolUseFailure?(toolName: string, input: unknown, failure: HookToolFailure, ctx: HookToolContext): PostToolUseFailureResult | undefined | Promise<PostToolUseFailureResult | undefined>;
+    postToolBatch?(batch: PostToolBatchCall[]): PostToolBatchResult | undefined | Promise<PostToolBatchResult | undefined>;
+    preCompact?(ctx: PreCompactContext): PreCompactResult | undefined | Promise<PreCompactResult | undefined>;
+    postCompact?(ctx: PostCompactContext): void | Promise<void>;
+    stopFailure?(ctx: StopFailureContext): void | Promise<void>;
+    permissionDenied?(payload: PermissionDeniedPayload): void | Promise<void>;
+}
+export type PermissionDeniedSource = "policy" | "hook" | "safety" | "shellGate" | "planMode" | "classifier";
+export interface PermissionDeniedPayload {
+    toolName: string;
+    input: unknown;
+    toolCallId: string;
+    reason: string;
+    source: PermissionDeniedSource;
+}
+export declare function cloneObserverInput(input: unknown): unknown;
+export interface StopFailureContext {
+    error: string;
+    errorKind?: string;
+    turns: number;
+}
+export interface HookToolFailure {
+    error: string;
+    isInterrupt: boolean;
+    durationMs?: number;
+    content: Array<TextContent | ImageContent | DocumentContent>;
+    details: unknown;
+}
+export interface PostToolUseFailureResult {
+    additionalContext?: string;
+}
+export interface PostToolBatchCall {
+    toolName: string;
+    input: unknown;
+    toolCallId: string;
+    response?: string;
+    isError: boolean;
+}
+export interface PostToolBatchResult {
+    additionalContext?: string;
+}
+export interface PreCompactContext {
+    trigger: "auto" | "manual" | "forced";
+    customInstructions?: string;
+}
+export interface PreCompactResult {
+    block?: string;
+    additionalInstructions?: string;
+}
+export interface PostCompactContext {
+    trigger: "auto" | "manual" | "forced";
+    summary: string;
+    tokensBefore?: number;
+    tokensAfter?: number;
+}
+export interface StopHookContext {
+    stopHookActive: boolean;
+    consecutiveBlocks: number;
+}
+export interface StopHookResult {
+    block?: string;
+    additionalContext?: string;
+}
+export interface HookToolContext {
+    toolCallId: string;
+    toolName: string;
+}
+export interface HookToolOutput {
+    content: Array<TextContent | ImageContent | DocumentContent>;
+    details: unknown;
+    isError: boolean;
+}
+export type PreToolUseResult = PermissionResult & {
+    additionalContext?: string;
+};
+export interface PostToolUseResult {
+    updatedOutput?: Array<TextContent | ImageContent | DocumentContent>;
+    additionalContext?: string;
+}
+export interface UserPromptSubmitResult {
+    block?: string;
+    additionalContext?: string;
+}
+export declare function formatHookFeedback(text: string): string;
+export interface ToolGateResult {
+    block?: boolean;
+    reason?: string;
+    updatedInput?: unknown;
+    suspend?: {
+        token: import("./checkpoint-store.js").CheckpointToken;
+        gate: import("./checkpoint-store.js").CheckpointGate;
+    };
+    preToolContext: string[];
+}
+export interface ToolGateInput {
+    event: {
+        toolCallId: string;
+        toolName: string;
+        input: Record<string, unknown>;
+    };
+    preToolUse?: Hooks["preToolUse"];
+    adjudicate?: (req: ToolCallRequest) => Promise<PermissionResult>;
+    resolveAsk: (decision: PermissionResult, req: ToolCallRequest) => Promise<PermissionResult>;
+    suspendAsk?: (req: ToolCallRequest, postHookArgs: unknown, safety?: import("./checkpoint-store.js").SafetyAxis) => Promise<ToolGateResult["suspend"] | undefined>;
+    egress?: boolean;
+    irreversibility?: "never" | "maybe" | "always";
+    reversibilityProbe?: (args: unknown) => {
+        reversible: boolean;
+    } | Promise<{
+        reversible: boolean;
+    }>;
+    approvalTimeoutMs?: number;
+    abortSignal?: AbortSignal;
+    permissionDenied?: (payload: PermissionDeniedPayload) => void | Promise<void>;
+    shellGated?: boolean;
+    autoMode?: {
+        decider: import("./auto-mode.js").AutoModeDecider;
+    };
+}
+export declare function runToolGate(input: ToolGateInput): Promise<ToolGateResult>;
+//# sourceMappingURL=hooks.d.ts.map

package/dist/core/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/core/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAoB1E,MAAM,WAAW,KAAK;IACpB,UAAU,CAAC,CACT,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,eAAe,GACnB,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACxE,WAAW,CAAC,CACV,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,eAAe,GACnB,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC1E,gBAAgB,CAAC,CACf,MAAM,EAAE,MAAM,GACb,sBAAsB,GAAG,SAAS,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAWpF,IAAI,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAS9F,kBAAkB,CAAC,CACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,eAAe,GACnB,wBAAwB,GAAG,SAAS,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IASxF,aAAa,CAAC,CACZ,KAAK,EAAE,iBAAiB,EAAE,GACzB,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAY9E,UAAU,CAAC,CAAC,GAAG,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAK1G,WAAW,CAAC,CAAC,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAW5D,WAAW,CAAC,CAAC,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAe5D,gBAAgB,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAgBD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;AAG5G,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IAGjB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IAEnB,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAUD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQ1D;AAGD,MAAM,WAAW,kBAAkB;IAEjC,KAAK,EAAE,MAAM,CAAC;IAGd,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,eAAe;IAE9B,KAAK,EAAE,MAAM,CAAC;IAGd,WAAW,EAAE,OAAO,CAAC;IAErB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,OAAO,EAAE,KAAK,CAAC,WAAW,GAAG,YAAY,GAAG,eAAe,CAAC,CAAC;IAI7D,OAAO,EAAE,OAAO,CAAC;CAClB;AAGD,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAGD,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,iBAAiB;IAGhC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAEtC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,gBAAgB;IAE/B,KAAK,CAAC,EAAE,MAAM,CAAC;IAKf,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAGD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAEtC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAGD,MAAM,WAAW,eAAe;IAG9B,cAAc,EAAE,OAAO,CAAC;IAExB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAGD,MAAM,WAAW,cAAc;IAG7B,KAAK,CAAC,EAAE,MAAM,CAAC;IAQf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC,WAAW,GAAG,YAAY,GAAG,eAAe,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAGjF,MAAM,WAAW,iBAAiB;IAEhC,aAAa,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,YAAY,GAAG,eAAe,CAAC,CAAC;IAEpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,sBAAsB;IAErC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAGD,MAAM,WAAW,cAAc;IAE7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,YAAY,CAAC,EAAE,OAAO,CAAC;IAOvB,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,OAAO,uBAAuB,EAAE,eAAe,CAAC;QACvD,IAAI,EAAE,OAAO,uBAAuB,EAAE,cAAc,CAAC;KACtD,CAAC;IAEF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAGD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAChF,UAAU,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEjE,UAAU,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAQ5F,UAAU,CAAC,EAAE,CACX,GAAG,EAAE,eAAe,EACpB,YAAY,EAAE,OAAO,EAMrB,MAAM,CAAC,EAAE,OAAO,uBAAuB,EAAE,UAAU,KAChD,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC;IAOpD,MAAM,CAAC,EAAE,OAAO,CAAC;IAQjB,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IAO/C,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK;QAAE,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEnG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,WAAW,CAAC,EAAE,WAAW,CAAC;IAQ1B,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAM9E,UAAU,CAAC,EAAE,OAAO,CAAC;IAiBrB,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,gBAAgB,EAAE,eAAe,CAAA;KAAE,CAAC;CAClE;AAqDD,wBAAsB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAyO/E"}

package/dist/core/hooks.js

@@ -0,0 +1,184 @@
+import { decisionText } from "./tool-policy.js";
+import { inlineUntrusted } from "./untrusted-text.js";
+export function cloneObserverInput(input) {
+    try {
+        return structuredClone(input);
+    }
+    catch {
+        if (Array.isArray(input))
+            return [...input];
+        if (input !== null && typeof input === "object")
+            return { ...input };
+        return input;
+    }
+}
+export function formatHookFeedback(text) {
+    return `<system-reminder>\n${text}\n</system-reminder>`;
+}
+function withProbeTimeout(p, ms, signal) {
+    if (ms === undefined && signal === undefined)
+        return p;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const done = (fn, v) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer !== undefined)
+                clearTimeout(timer);
+            signal?.removeEventListener("abort", onAbort);
+            fn(v);
+        };
+        const onAbort = () => done(reject, new Error("reversibilityProbe aborted (task ended)"));
+        const timer = ms !== undefined
+            ? setTimeout(() => done(reject, new Error(`reversibilityProbe timed out after ${ms}ms`)), ms)
+            : undefined;
+        if (signal?.aborted) {
+            onAbort();
+            return;
+        }
+        signal?.addEventListener("abort", onAbort);
+        p.then((v) => done(resolve, v), (err) => done(reject, err));
+    });
+}
+export async function runToolGate(input) {
+    const { event, preToolUse, adjudicate, resolveAsk, suspendAsk } = input;
+    const { toolCallId, toolName } = event;
+    let currentInput = event.input;
+    const preToolContext = [];
+    let hookAsk;
+    if (preToolUse) {
+        const r = await preToolUse(toolName, currentInput, { toolCallId, toolName });
+        if (r) {
+            if (r.additionalContext) {
+                preToolContext.push(r.additionalContext);
+            }
+            if (r.action === "deny") {
+                return {
+                    block: true,
+                    reason: formatHookFeedback(decisionText(r) ?? `tool "${toolName}" blocked by a PreToolUse hook`),
+                    preToolContext,
+                };
+            }
+            if (r.action === "ask") {
+                hookAsk = r;
+            }
+            else if (r.updatedInput !== undefined) {
+                currentInput = r.updatedInput;
+            }
+        }
+    }
+    const req = { toolName, args: currentInput, toolCallId };
+    let decision = adjudicate ? await adjudicate(req) : { action: "allow" };
+    let denySource = "policy";
+    let policyRewrite;
+    if ((decision.action === "allow" || decision.action === "ask") && decision.updatedInput !== undefined) {
+        policyRewrite = decision.updatedInput;
+    }
+    else if (hookAsk?.action === "ask" && hookAsk.updatedInput !== undefined) {
+        policyRewrite = hookAsk.updatedInput;
+    }
+    if (decision.action === "allow" && hookAsk) {
+        decision = hookAsk;
+        denySource = "hook";
+    }
+    if (input.egress && decision.action === "allow") {
+        decision = {
+            action: "ask",
+            message: `tool "${toolName}" performs an external write (egress) — explicit approval required`,
+            decisionReason: "safety",
+        };
+        denySource = "safety";
+    }
+    if (decision.action === "allow" && (input.irreversibility === "always" || input.irreversibility === "maybe")) {
+        let tighten = true;
+        if (input.irreversibility === "maybe" && input.reversibilityProbe) {
+            let reversible = false;
+            try {
+                const verdict = await withProbeTimeout(Promise.resolve(input.reversibilityProbe(currentInput)), input.approvalTimeoutMs, input.abortSignal);
+                reversible = verdict?.reversible === true;
+            }
+            catch {
+                reversible = false;
+            }
+            tighten = !reversible;
+        }
+        if (tighten) {
+            decision = {
+                action: "ask",
+                message: `tool "${toolName}" performs an irreversible action — explicit approval required`,
+                decisionReason: "safety",
+            };
+            denySource = input.shellGated === true ? "shellGate" : "safety";
+        }
+    }
+    if (decision.action === "ask") {
+        if (policyRewrite !== undefined) {
+            currentInput = policyRewrite;
+            req.args = policyRewrite;
+        }
+        if (input.autoMode && decision.action === "ask") {
+            const verdict = await input.autoMode.decider
+                .decide({ req, askMessage: decisionText(decision) }, input.abortSignal)
+                .catch(() => ({ kind: "unavailable", cause: "error" }));
+            if (verdict.kind === "allow") {
+                decision = {
+                    action: "allow",
+                    message: "auto-mode classifier allowed this call",
+                    decisionReason: "classifier",
+                    ...(policyRewrite !== undefined ? { updatedInput: policyRewrite } : {}),
+                };
+            }
+            else if (verdict.kind === "block") {
+                const reason = verdict.reason ? inlineUntrusted(verdict.reason) : "";
+                const category = verdict.category ? inlineUntrusted(verdict.category) : "";
+                decision = {
+                    action: "deny",
+                    message: `auto-mode classifier blocked this call${reason ? `: ${reason}` : category ? `: [${category}]` : ""}`,
+                    decisionReason: "classifier",
+                };
+                denySource = "classifier";
+            }
+        }
+        if (suspendAsk && decision.action === "ask") {
+            const egressTool = input.egress === true;
+            const irreversibleTool = input.irreversibility === "always" || input.irreversibility === "maybe";
+            const safety = egressTool || irreversibleTool ? { egress: egressTool, irreversible: irreversibleTool } : undefined;
+            const suspended = await suspendAsk(req, currentInput, safety);
+            if (suspended) {
+                return { suspend: suspended, preToolContext };
+            }
+        }
+        if (decision.action === "ask") {
+            decision = await resolveAsk(decision, req);
+        }
+    }
+    if (decision.action === "deny") {
+        const denyReason = decisionText(decision) ?? `tool "${toolName}" denied by policy`;
+        if (decision.updatedInput !== undefined) {
+            currentInput = decision.updatedInput;
+        }
+        if (input.permissionDenied) {
+            try {
+                await input.permissionDenied({ toolName, input: cloneObserverInput(currentInput), toolCallId, reason: denyReason, source: denySource });
+            }
+            catch {
+            }
+        }
+        return {
+            block: true,
+            reason: formatHookFeedback(denyReason),
+            preToolContext,
+        };
+    }
+    if (decision.action === "allow") {
+        const rw = decision.updatedInput !== undefined ? decision.updatedInput : policyRewrite;
+        if (rw !== undefined)
+            currentInput = rw;
+    }
+    return {
+        updatedInput: currentInput === event.input ? undefined : currentInput,
+        preToolContext,
+    };
+}
+//# sourceMappingURL=hooks.js.map