@tiangong-ai/cli 0.0.19 → 0.0.21

package/dist/research/workspace/storage.d.ts

@@ -0,0 +1,25 @@
+import type { WorkspacePaths } from "./types.js";
+export declare function workspacePaths(root: string): WorkspacePaths;
+export declare function ensureDirectory(path: string, mode?: number): Promise<void>;
+export declare function readJsonFile<T>(path: string, label: string): Promise<T>;
+export declare function writeJsonAtomic(path: string, value: unknown, mode?: number): Promise<void>;
+export declare function writeTextAtomic(path: string, value: string, mode?: number): Promise<void>;
+export declare function canonicalJson(value: unknown): string;
+export declare function sha256Text(value: string): string;
+export declare function sha256Bytes(value: Uint8Array): string;
+export declare function sha256File(path: string): Promise<string>;
+export declare function hashRegularTree(root: string): Promise<string>;
+export declare function regularTreeFiles(root: string): Promise<string[]>;
+export declare function fileRecord(path: string, logicalPath: string): Promise<{
+    path: string;
+    sha256: string;
+    bytes: number;
+}>;
+export declare function safeRelativePath(value: string, label: string): string;
+export declare function resolveContained(root: string, logicalPath: string): string;
+export declare function acquireFileLock(path: string, payload: unknown): Promise<() => Promise<void>>;
+export declare function pathExists(path: string): Promise<boolean>;
+export declare function fileSize(path: string): Promise<number>;
+export declare function isObject(value: unknown): value is Record<string, unknown>;
+export declare function requireAbsolutePath(value: string, label: string): string;
+export declare function basenameWithoutExtension(path: string): string;

package/dist/research/workspace/storage.js

@@ -0,0 +1,222 @@
+import { createHash, randomUUID } from "node:crypto";
+import { createReadStream, existsSync } from "node:fs";
+import { chmod, lstat, mkdir, open, readFile, readdir, rename, rm, stat, writeFile, } from "node:fs/promises";
+import { basename, dirname, join, relative, resolve, sep } from "node:path";
+import { CliError } from "../../errors.js";
+import { RESEARCH_CONTROL_DIRECTORY } from "./constants.js";
+const IGNORED_TREE_NAMES = new Set([
+    ".DS_Store",
+    ".git",
+    ".pytest_cache",
+    ".ruff_cache",
+    "__pycache__",
+    "node_modules",
+]);
+export function workspacePaths(root) {
+    const canonicalRoot = resolve(root);
+    const control = join(canonicalRoot, RESEARCH_CONTROL_DIRECTORY);
+    return {
+        root: canonicalRoot,
+        control,
+        marker: join(control, "workspace.json"),
+        config: join(control, "config.json"),
+        runtimeLock: join(control, "runtime-lock.json"),
+        capabilityDeclarations: join(control, "capabilities.json"),
+        capabilityLock: join(control, "capabilities.lock.json"),
+        doctorAttestation: join(control, "doctor-attestation.json"),
+        env: join(control, ".env"),
+        envExample: join(control, ".env.example"),
+        journal: join(control, "journal.jsonl"),
+        evidence: join(control, "evidence"),
+        evidenceCache: join(control, "evidence", "cache"),
+        evidenceObjects: join(control, "evidence", "objects"),
+        projects: join(control, "projects"),
+        runtime: join(control, "runtime"),
+        locks: join(control, "locks"),
+    };
+}
+export async function ensureDirectory(path, mode = 0o700) {
+    await mkdir(path, { recursive: true, mode });
+    await chmod(path, mode).catch(() => undefined);
+}
+export async function readJsonFile(path, label) {
+    try {
+        return JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        throw new CliError(`${label} is missing or invalid: ${path}`, {
+            code: "RESEARCH_STATE_INVALID",
+            exitCode: 2,
+            details: { path, error: String(error) },
+        });
+    }
+}
+export async function writeJsonAtomic(path, value, mode = 0o600) {
+    await ensureDirectory(dirname(path));
+    const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf8", mode });
+    await chmod(temporary, mode).catch(() => undefined);
+    await rename(temporary, path);
+}
+export async function writeTextAtomic(path, value, mode = 0o600) {
+    await ensureDirectory(dirname(path));
+    const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    await writeFile(temporary, value, { encoding: "utf8", mode });
+    await chmod(temporary, mode).catch(() => undefined);
+    await rename(temporary, path);
+}
+export function canonicalJson(value) {
+    return JSON.stringify(sortJson(value));
+}
+function sortJson(value) {
+    if (Array.isArray(value))
+        return value.map((item) => sortJson(item));
+    if (!isObject(value))
+        return value;
+    return Object.fromEntries(Object.keys(value)
+        .sort()
+        .map((key) => [key, sortJson(value[key])]));
+}
+export function sha256Text(value) {
+    return createHash("sha256").update(value, "utf8").digest("hex");
+}
+export function sha256Bytes(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+export async function sha256File(path) {
+    const hash = createHash("sha256");
+    await new Promise((resolvePromise, reject) => {
+        createReadStream(path)
+            .on("data", (chunk) => hash.update(chunk))
+            .on("error", reject)
+            .on("end", resolvePromise);
+    });
+    return hash.digest("hex");
+}
+export async function hashRegularTree(root) {
+    const rootInfo = await lstat(root).catch(() => undefined);
+    if (!rootInfo?.isDirectory() || rootInfo.isSymbolicLink()) {
+        throw new CliError(`Capability path must be a regular directory: ${root}`, {
+            code: "RESEARCH_CAPABILITY_INVALID",
+            exitCode: 2,
+        });
+    }
+    const files = await regularTreeFiles(root);
+    const hash = createHash("sha256");
+    for (const path of files) {
+        const logicalPath = relative(root, path).split(sep).join("/");
+        const info = await lstat(path);
+        hash.update(`${logicalPath}\0${info.size}\0`, "utf8");
+        hash.update(await readFile(path));
+        hash.update("\0", "utf8");
+    }
+    return hash.digest("hex");
+}
+export async function regularTreeFiles(root) {
+    const files = [];
+    async function visit(directory) {
+        const entries = await readdir(directory, { withFileTypes: true });
+        entries.sort((left, right) => left.name.localeCompare(right.name));
+        for (const entry of entries) {
+            if (IGNORED_TREE_NAMES.has(entry.name))
+                continue;
+            const path = join(directory, entry.name);
+            const info = await lstat(path);
+            if (info.isSymbolicLink()) {
+                throw new CliError(`Symbolic links are not allowed in capability trees: ${path}`, {
+                    code: "RESEARCH_CAPABILITY_INVALID",
+                    exitCode: 2,
+                });
+            }
+            if (info.isDirectory())
+                await visit(path);
+            else if (info.isFile())
+                files.push(path);
+            else {
+                throw new CliError(`Unsupported capability tree entry: ${path}`, {
+                    code: "RESEARCH_CAPABILITY_INVALID",
+                    exitCode: 2,
+                });
+            }
+        }
+    }
+    await visit(root);
+    return files;
+}
+export async function fileRecord(path, logicalPath) {
+    const info = await lstat(path);
+    if (!info.isFile() || info.isSymbolicLink()) {
+        throw new CliError(`Expected a regular output file: ${path}`, {
+            code: "RESEARCH_OUTPUT_INVALID",
+            exitCode: 2,
+        });
+    }
+    return { path: logicalPath, sha256: await sha256File(path), bytes: info.size };
+}
+export function safeRelativePath(value, label) {
+    const normalized = value.replaceAll("\\", "/");
+    if (!normalized ||
+        normalized.startsWith("/") ||
+        normalized.includes("\0") ||
+        normalized.split("/").some((part) => !part || part === "." || part === "..")) {
+        throw new CliError(`${label} must be a safe relative path.`, {
+            code: "RESEARCH_PATH_INVALID",
+            exitCode: 2,
+            details: { value },
+        });
+    }
+    return normalized;
+}
+export function resolveContained(root, logicalPath) {
+    const safe = safeRelativePath(logicalPath, "Output path");
+    const candidate = resolve(root, safe);
+    const prefix = `${resolve(root)}${sep}`;
+    if (!candidate.startsWith(prefix)) {
+        throw new CliError(`Path escapes its root: ${logicalPath}`, {
+            code: "RESEARCH_PATH_INVALID",
+            exitCode: 2,
+        });
+    }
+    return candidate;
+}
+export async function acquireFileLock(path, payload) {
+    await ensureDirectory(dirname(path));
+    try {
+        const handle = await open(path, "wx", 0o600);
+        await handle.writeFile(`${JSON.stringify(payload)}\n`, "utf8");
+        await handle.close();
+    }
+    catch (error) {
+        throw new CliError(`Research workspace is locked: ${path}`, {
+            code: "RESEARCH_WORKSPACE_LOCKED",
+            exitCode: 3,
+            details: { error: String(error) },
+        });
+    }
+    return async () => rm(path, { force: true });
+}
+export async function pathExists(path) {
+    return existsSync(path);
+}
+export async function fileSize(path) {
+    return (await stat(path)).size;
+}
+export function isObject(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+export function requireAbsolutePath(value, label) {
+    const canonical = resolve(value);
+    if (canonical !== value) {
+        throw new CliError(`${label} must be absolute: ${value}`, {
+            code: "RESEARCH_PATH_NOT_ABSOLUTE",
+            exitCode: 2,
+        });
+    }
+    return canonical;
+}
+export function basenameWithoutExtension(path) {
+    const name = basename(path);
+    const dot = name.lastIndexOf(".");
+    return dot > 0 ? name.slice(0, dot) : name;
+}
+//# sourceMappingURL=storage.js.map

package/dist/research/workspace/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/research/workspace/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EACL,KAAK,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,EAAE,EACF,IAAI,EACJ,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5E,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW;IACX,MAAM;IACN,eAAe;IACf,aAAa;IACb,aAAa;IACb,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAChE,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACvC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC;QACpC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAC/C,sBAAsB,EAAE,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAC1D,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC;QACvD,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC;QAC3D,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC1B,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;QACzC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC;QACvC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QACnC,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC;QACjD,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC;QACrD,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QACjC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK;IAC9D,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,KAAa;IAC/D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,2BAA2B,IAAI,EAAE,EAAE;YAC5D,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc,EAAE,IAAI,GAAG,KAAK;IAC9E,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IAC/D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAG,KAAK;IAC7E,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IAC/D,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACf,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QACjD,gBAAgB,CAAC,IAAI,CAAC;aACnB,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;aACzC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;aACnB,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,QAAQ,CAAC,gDAAgD,IAAI,EAAE,EAAE;YACzE,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,KAAK,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,UAAU,KAAK,CAAC,SAAiB;QACpC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,QAAQ,CAAC,uDAAuD,IAAI,EAAE,EAAE;oBAChF,IAAI,EAAE,6BAA6B;oBACnC,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;iBACrC,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACpC,CAAC;gBACJ,MAAM,IAAI,QAAQ,CAAC,sCAAsC,IAAI,EAAE,EAAE;oBAC/D,IAAI,EAAE,6BAA6B;oBACnC,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,WAAmB;IAMnB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,QAAQ,CAAC,mCAAmC,IAAI,EAAE,EAAE;YAC5D,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,KAAa;IAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,IACE,CAAC,UAAU;QACX,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,gCAAgC,EAAE;YAC3D,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,KAAK,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB;IAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC,0BAA0B,WAAW,EAAE,EAAE;YAC1D,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,iCAAiC,IAAI,EAAE,EAAE;YAC1D,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,KAAa;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,sBAAsB,KAAK,EAAE,EAAE;YACxD,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/research/workspace/types.d.ts

@@ -0,0 +1,341 @@
+export type ContextRole = "workspace" | "unmanaged" | "invalid";
+export type ProjectStatus = "ready" | "running" | "blocked" | "complete";
+export type PackageStatus = "pending" | "ready" | "running" | "retry" | "failed" | "complete";
+export type PackageKind = "agent" | "verify";
+export type AgentKind = "codex" | "claude";
+export type AgentReasoningEffort = "minimal" | "low" | "medium" | "high" | "xhigh" | "max";
+export type AgentVerbosity = "low" | "medium" | "high";
+export type ResearchMode = "smoke-test" | "production-research";
+export type AgentPackageStage = "discover" | "analyze" | "synthesize" | "review";
+export interface AgentPricing {
+    inputUsdPerMillionTokens: number;
+    cachedInputUsdPerMillionTokens: number;
+    outputUsdPerMillionTokens: number;
+}
+export interface AgentRoute {
+    agent: AgentKind;
+    binary: string;
+    wrapperTargetBinary?: string;
+    model: string | null;
+    effort?: AgentReasoningEffort;
+    verbosity?: AgentVerbosity;
+    pricing?: AgentPricing;
+}
+export interface ResearchBudget {
+    maxTokens: number;
+    maxCostUsd: number;
+    maxWallSeconds: number;
+    maxFilesPerPackage: number;
+    maxBytesPerPackage: number;
+    maxAttemptsPerPackage: number;
+    confirmationCostUsd: number;
+    packageMaxTokens: Record<AgentPackageStage, number>;
+    packageMaxWallSeconds: Record<AgentPackageStage, number>;
+    maxOutputTokens: number;
+    maxRepairTokens: number;
+    maxBrokerResponseBytes: number;
+    maxBrokerContextTokens: number;
+    maxBrokerItems: number;
+    maxInputContextTokens: number;
+}
+export interface WorkspaceMarker {
+    schemaVersion: 1;
+    kind: "tiangong-research-workspace";
+    workspaceId: string;
+    name: string;
+    createdAt: string;
+}
+export interface WorkspaceConfig {
+    schemaVersion: 1;
+    mode: ResearchMode;
+    producer: AgentRoute;
+    reviewer: AgentRoute;
+    budget: ResearchBudget;
+}
+export interface RuntimeLock {
+    schemaVersion: 1;
+    protocolVersion: 1;
+    packageName: "@tiangong-ai/cli";
+    packageVersion: string;
+    workspaceId: string;
+}
+export interface CapabilityCredentialDeclaration {
+    id: string;
+    allowedHosts: string[];
+    headerName: string;
+    prefix: string;
+}
+export interface CapabilityDeclaration {
+    id: string;
+    skillPath: string;
+    permissions: string[];
+    allowedHosts: string[];
+    http: {
+        accept: string;
+        allowedContentTypes: string[];
+        maxResponseBytes: number;
+        maxItems: number;
+    } | null;
+    coverage: {
+        dimensions: string[];
+        sourceTypes: string[];
+        fullText: boolean;
+        publicationDates: boolean;
+    } | null;
+    credentials: CapabilityCredentialDeclaration[];
+}
+export interface CapabilityDeclarations {
+    schemaVersion: 1;
+    capabilities: CapabilityDeclaration[];
+}
+export interface CapabilityLockRecord {
+    id: string;
+    skillName: string;
+    skillPath: string;
+    treeSha256: string;
+    policySha256: string;
+    permissions: string[];
+    credentialIds: string[];
+}
+export interface CapabilityLock {
+    schemaVersion: 1;
+    generatedAt: string;
+    capabilities: CapabilityLockRecord[];
+}
+export interface ProjectInput {
+    id: string;
+    role: "primary" | "reference" | "replication";
+    path: string;
+    sha256: string;
+    bytes: number;
+    contextPath?: string;
+    contextSha256?: string;
+    contextBytes?: number;
+    contextRanges?: ProjectInputLineRange[];
+    addedAt: string;
+}
+export interface ProjectInputLineRange {
+    startLine: number;
+    endLine: number;
+}
+export interface ProjectInputPlanEntry {
+    path: string;
+    contextPath?: string | null;
+    contextRanges?: ProjectInputLineRange[] | null;
+    role: ProjectInput["role"];
+    dimensions: string[];
+    sourceType: string;
+    fullText: boolean;
+    publicationDate: string | null;
+}
+export interface ProjectInputPlan {
+    schemaVersion: 1;
+    inputs: ProjectInputPlanEntry[];
+}
+export interface VerifiedProjectInputPlanEntry extends ProjectInputPlanEntry {
+    id: string;
+    sha256: string;
+    bytes: number;
+    contextSha256: string | null;
+    contextBytes: number | null;
+}
+export interface VerifiedProjectInputPlan {
+    schemaVersion: 1;
+    sha256: string;
+    inputs: VerifiedProjectInputPlanEntry[];
+}
+export interface ProjectEvidenceRequirements {
+    dimensions: string[];
+    sourceTypes: string[];
+    minSources: number;
+    minFullTextSources: number;
+    minDatedSources: number;
+    publicationDateFrom: string | null;
+    publicationDateTo: string | null;
+}
+export interface WorkPackage {
+    id: string;
+    stage: "discover" | "analyze" | "synthesize" | "review" | "close";
+    kind: PackageKind;
+    executor: "producer" | "reviewer" | "mechanical";
+    dependencies: string[];
+    expectedOutputs: string[];
+    status: PackageStatus;
+    attempts: number;
+    maxAttempts: number;
+    lastError: string | null;
+    lastFailureKind: FailureKind | null;
+    retryNotBefore: string | null;
+    startedAt: string | null;
+    completedAt: string | null;
+}
+export interface ProjectUsage {
+    tokens: number;
+    inputTokens: number;
+    cachedInputTokens: number;
+    outputTokens: number;
+    costUsd: number;
+    wallSeconds: number;
+}
+export interface ProjectState {
+    schemaVersion: 1;
+    id: string;
+    question: string;
+    status: ProjectStatus;
+    createdAt: string;
+    updatedAt: string;
+    budgetConfirmedAt: string | null;
+    inputs: ProjectInput[];
+    evidenceRequirements: ProjectEvidenceRequirements;
+    packages: WorkPackage[];
+    usage: ProjectUsage;
+}
+export interface OutputRecord {
+    path: string;
+    sha256: string;
+    bytes: number;
+}
+export interface ExecutionResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    tokens: number;
+    inputTokens: number;
+    cachedInputTokens: number;
+    outputTokens: number;
+    costUsd: number;
+    wallSeconds: number;
+    model: string | null;
+    runtime: AgentRuntimeFingerprint | null;
+    telemetry?: AgentExecutionTelemetry | undefined;
+}
+export interface AgentExecutionTelemetry {
+    eventCounts: Record<string, number>;
+    itemCounts: Record<string, number>;
+    toolCalls: number;
+    providerTurns: number | null;
+    reasoningOutputTokens: number;
+    providerErrors: string[];
+}
+export interface AgentRuntimeFingerprint {
+    agent: AgentKind;
+    model: string | null;
+    effort?: AgentReasoningEffort;
+    verbosity?: AgentVerbosity | null;
+    binarySha256: string;
+    wrapperSha256: string;
+    adapterSha256: string;
+    binaryVersion: string;
+    platform: NodeJS.Platform;
+    architecture: string;
+}
+export type FailureKind = "configuration" | "authentication" | "rate-limit" | "server" | "structured-output" | "budget" | "transient" | "deterministic";
+export interface RunRecord {
+    schemaVersion: 1;
+    runId: string;
+    projectId: string;
+    packageId: string;
+    executor: AgentKind | "mechanical";
+    startedAt: string;
+    completedAt: string;
+    exitCode: number;
+    tokens: number;
+    inputTokens: number;
+    cachedInputTokens: number;
+    outputTokens: number;
+    costUsd: number;
+    wallSeconds: number;
+    outputs: OutputRecord[];
+    stdoutSha256: string;
+    stderrSha256: string;
+    failureKind: FailureKind | null;
+    failureDetails?: Record<string, unknown> | null | undefined;
+    runtime: AgentRuntimeFingerprint | null;
+    telemetry?: AgentExecutionTelemetry | undefined;
+}
+export interface JournalEvent {
+    schemaVersion: 1;
+    sequence: number;
+    timestamp: string;
+    type: string;
+    scope: string;
+    payload: Record<string, unknown>;
+    previousHash: string;
+    hash: string;
+}
+export interface ContextInspection {
+    role: ContextRole;
+    selectedPath: string;
+    root: string | null;
+    allowedOperations: string[];
+    violations: Array<{
+        code: string;
+        message: string;
+    }>;
+}
+export interface DoctorCheck {
+    id: string;
+    status: "pass" | "fail" | "warn";
+    detail: string;
+}
+export interface WorkspaceDoctorResult {
+    workspace: string;
+    status: "ready" | "blocked";
+    checks: DoctorCheck[];
+}
+export interface WorkspaceDoctorAttestation {
+    schemaVersion: 1;
+    workspaceId: string;
+    checkedAt: string;
+    expiresAt: string;
+    configSha256: string;
+    runtimeLockSha256: string;
+    capabilityDeclarationsSha256: string;
+    capabilityLockSha256: string;
+    doctorSchemaSha256: string;
+    runtimes: AgentRuntimeFingerprint[];
+    smokeUsage: Array<{
+        agent: AgentKind;
+        tokens: number;
+        inputTokens: number;
+        cachedInputTokens: number;
+        outputTokens: number;
+        costUsd: number;
+        wallSeconds: number;
+        telemetry?: AgentExecutionTelemetry | undefined;
+    }>;
+    attestationSha256: string;
+}
+export interface WorkspacePaths {
+    root: string;
+    control: string;
+    marker: string;
+    config: string;
+    runtimeLock: string;
+    capabilityDeclarations: string;
+    capabilityLock: string;
+    doctorAttestation: string;
+    env: string;
+    envExample: string;
+    journal: string;
+    evidence: string;
+    evidenceCache: string;
+    evidenceObjects: string;
+    projects: string;
+    runtime: string;
+    locks: string;
+}
+export interface ResearchProgressEvent {
+    schemaVersion: 1;
+    type: "run.started" | "package.started" | "package.heartbeat" | "package.completed" | "package.failed" | "run.completed";
+    timestamp: string;
+    requestId: string;
+    projectId: string | null;
+    packageId: string | null;
+    remainingBudget: {
+        tokens: number;
+        costUsd: number;
+        wallSeconds: number;
+    } | null;
+    detail?: Record<string, unknown>;
+}

package/dist/research/workspace/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/research/workspace/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/research/workspace/types.ts"],"names":[],"mappings":""}

package/dist/research/workspace/workspace.d.ts

@@ -0,0 +1,23 @@
+import { type AgentExecutionRequest } from "./executor.js";
+import type { RuntimeLock, WorkspaceConfig, WorkspaceDoctorResult, WorkspaceMarker, ResearchMode, ExecutionResult, WorkspaceDoctorAttestation } from "./types.js";
+export declare function initializeResearchWorkspace(targetPath: string, name: string | undefined, mode?: ResearchMode): Promise<{
+    workspace: string;
+    workspaceId: string;
+    created: string[];
+}>;
+export declare function requireResearchWorkspace(inputPath: string): Promise<string>;
+export declare function loadWorkspaceMarker(root: string): Promise<WorkspaceMarker>;
+export declare function loadWorkspaceConfig(root: string): Promise<WorkspaceConfig>;
+export interface DoctorOptions {
+    agentSmoke?: boolean;
+    environment?: NodeJS.ProcessEnv;
+    executor?: (request: AgentExecutionRequest) => Promise<ExecutionResult>;
+}
+export declare function doctorResearchWorkspace(inputPath: string, options?: DoctorOptions): Promise<WorkspaceDoctorResult>;
+export declare function verifyDoctorAttestation(root: string): Promise<{
+    status: "verified" | "missing" | "invalid" | "expired" | "drifted";
+    errors: string[];
+    attestation: WorkspaceDoctorAttestation | null;
+}>;
+export declare function withWorkspaceLock<T>(root: string, operation: string, callback: () => Promise<T>): Promise<T>;
+export declare function requireCurrentRuntimeLock(root: string, knownMarker?: WorkspaceMarker): Promise<RuntimeLock>;