@tokenfactory/acc-runner 0.41.7 → 0.43.0

package/dist/machine-capabilities/probe.js

@@ -0,0 +1,243 @@
+/**
+ * AX-H1 (MACHINE-CAPABILITIES): the host probe. Answers "what does THIS machine
+ * actually offer?" — gh, git, and each registered engine's login — so ACC can
+ * tell a user what their own machine can do instead of leaving that in the
+ * operator's head.
+ *
+ * WHAT IT READS, AND WHAT IT REFUSES TO READ. Every probe here is a read-only,
+ * short-timeout, local invocation of a tool's own status command:
+ *
+ *   gh    `gh --version`, `gh auth status`  — presence, version, whether the
+ *         credential works, the account login, the host, and the token's SCOPE
+ *         LABELS. `--show-token` is NEVER passed: the scopes are the authority,
+ *         and the authority is the answerable question ("can this machine open a
+ *         PR?"). The token is not read, so it cannot be sent. The unit suite
+ *         asserts no argv in this package contains `--show-token`.
+ *   git   `git --version`, `git config --get user.email` — presence, version and
+ *         the committing identity. Git has no host-level login of its own, so
+ *         `authenticated` is false and the credential-health question is answered
+ *         by the separate GIT-AUTH-ALERT `ls-remote` probe (git-auth/probe.ts),
+ *         which is where a remote round-trip belongs.
+ *   engines  the AS-1 `accountIdentity()` surface plus a `--version` presence
+ *         check. NOT a second credential probe: the identity is exactly what the
+ *         AS-1 cadence already computes, so the engine rows are a projection of
+ *         a fact this process already has.
+ *
+ * Nothing here reads a keychain, a token file, or an environment variable's
+ * VALUE. Every free-text field goes through redact.ts before it leaves the host.
+ *
+ * FULLY injectable (exec / hostname / engines / version) so the whole probe is
+ * exercised with zero real subprocesses.
+ */
+import { execa } from "execa";
+import os from "node:os";
+import { buildEnv } from "../bin-resolve.js";
+import { chatEngineIds, getChatEngine } from "../engines/registry.js";
+import { unknownAccountIdentity } from "../engines/account-identity.js";
+import { PACKAGE_VERSION } from "../pkg-version.js";
+import { sanitizeSnapshot } from "./redact.js";
+import { HOST_TOOLS, } from "./types.js";
+/** Per-probe timeout. A capability probe must never hold up a cadence tick. */
+export const PROBE_TIMEOUT_MS = 5_000;
+const defaultExec = async (bin, args) => {
+    try {
+        const res = await execa(bin, args, {
+            env: buildEnv(),
+            timeout: PROBE_TIMEOUT_MS,
+            reject: false,
+        });
+        return {
+            stdout: res.stdout ?? "",
+            stderr: res.stderr ?? "",
+            exitCode: res.exitCode ?? null,
+        };
+    }
+    catch (err) {
+        // A missing binary throws ENOENT rather than exiting non-zero. That is
+        // "absent", not "broken", and it is reported as such.
+        return { stdout: "", stderr: err?.message ?? "spawn failed", exitCode: null };
+    }
+};
+/**
+ * Extract the first dotted version triple from a `--version` line. Tolerant on
+ * purpose: `gh version 2.62.0 (2024-11-08)`, `git version 2.46.0`,
+ * `1.0.30 (Claude Code)` and a bare `2.4` all resolve; anything else is null
+ * rather than a guess (an invented version would make an "is this old enough?"
+ * question answerable and wrong).
+ */
+export function parseVersion(output) {
+    const m = /\b(\d+(?:\.\d+){1,3})\b/.exec(output ?? "");
+    return m ? m[1] : null;
+}
+/**
+ * Parse `gh auth status` output. gh prints a human block per host:
+ *
+ *   github.com
+ *     ✓ Logged in to github.com account gaurav (keyring)
+ *     - Active account: true
+ *     - Git operations protocol: https
+ *     - Token: gho_************************************
+ *     - Token scopes: 'gist', 'read:org', 'repo'
+ *
+ * The `Token:` line is already elided by gh, and we do not read it either way —
+ * only the account, the host, and the scope labels. Tolerant of the older
+ * `Logged in to github.com as gaurav (…)` spelling, and of `--json`-less GHES
+ * output where the host is the bare first line.
+ */
+export function parseGhAuthStatus(output) {
+    const text = output ?? "";
+    const account = /Logged in to \S+ account ([A-Za-z0-9._-]+)/.exec(text)?.[1] ??
+        /Logged in to \S+ as ([A-Za-z0-9._-]+)/.exec(text)?.[1] ??
+        null;
+    const host = /Logged in to (\S+?)(?: account| as)\b/.exec(text)?.[1] ?? null;
+    const scopeLine = /Token scopes:\s*(.+)/.exec(text)?.[1] ?? "";
+    const scopes = scopeLine
+        .split(",")
+        .map((s) => s.trim().replace(/^['"]|['"]$/g, ""))
+        .filter((s) => s.length > 0 && s !== "none");
+    return { account, host, scopes };
+}
+/** Probe `gh`: presence, version, whether it authenticates, and as whom. */
+async function probeGh(exec) {
+    const ver = await exec("gh", ["--version"]);
+    const present = ver.exitCode === 0;
+    const version = present ? parseVersion(ver.stdout) : null;
+    if (!present) {
+        return {
+            tool: "gh",
+            present: false,
+            version: null,
+            authenticated: false,
+            identity: null,
+            host: null,
+            scopes: [],
+            detail: "gh not installed (or not on PATH)",
+        };
+    }
+    // `gh auth status` is a LOCAL token check, not a GitHub API call (see gh.ts),
+    // so it is unbudgeted and safe to run on every capability probe.
+    const status = await exec("gh", ["auth", "status"]);
+    const authenticated = status.exitCode === 0;
+    // gh has printed the status block on stdout since 2.x and on stderr before
+    // that; read both so an older install still resolves an identity.
+    const { account, host, scopes } = parseGhAuthStatus(`${status.stdout}\n${status.stderr}`);
+    return {
+        tool: "gh",
+        present: true,
+        version,
+        authenticated,
+        identity: authenticated ? account : null,
+        host: authenticated ? host : null,
+        scopes: authenticated ? scopes : [],
+        detail: authenticated
+            ? `gh ${version ?? "?"} authenticated${account ? ` as ${account}` : ""}${host ? ` on ${host}` : ""}`
+            : `gh ${version ?? "?"} installed but not authenticated (run \`gh auth login\`)`,
+    };
+}
+/** Probe `git`: presence, version and the committing identity. */
+async function probeGit(exec) {
+    const ver = await exec("git", ["--version"]);
+    const present = ver.exitCode === 0;
+    if (!present) {
+        return {
+            tool: "git",
+            present: false,
+            version: null,
+            authenticated: false,
+            identity: null,
+            host: null,
+            scopes: [],
+            detail: "git not installed (or not on PATH)",
+        };
+    }
+    const version = parseVersion(ver.stdout);
+    const email = await exec("git", ["config", "--get", "user.email"]);
+    const identity = email.exitCode === 0 ? email.stdout.trim() || null : null;
+    return {
+        tool: "git",
+        present: true,
+        version,
+        // git holds no host login of its own; remote credential health is the
+        // GIT-AUTH-ALERT ls-remote probe's job, and duplicating it here would mean
+        // a second remote round trip on every cadence tick.
+        authenticated: false,
+        identity,
+        host: null,
+        scopes: [],
+        detail: identity
+            ? `git ${version ?? "?"} committing as ${identity}`
+            : `git ${version ?? "?"} (no user.email configured)`,
+    };
+}
+/**
+ * Probe one engine: is the binary there, and who is it logged in as? The identity
+ * comes from the AS-1 `accountIdentity()` surface — this is a PROJECTION of the
+ * probe the cadence already runs, not a second credential probe. An engine that
+ * predates AS-1 degrades to the honest unknown-account identity rather than being
+ * reported as logged out.
+ */
+async function probeEngine(engineId, exec) {
+    let binary = engineId;
+    let channel = "none";
+    let identity = unknownAccountIdentity({
+        engineId,
+        channel: "none",
+        detail: `engine ${engineId} is not registered in this runner build`,
+    });
+    try {
+        const engine = getChatEngine(engineId);
+        binary = engine.binary;
+        channel = engine.authMode;
+        identity = engine.accountIdentity
+            ? await engine.accountIdentity()
+            : unknownAccountIdentity({
+                engineId: engine.id,
+                channel: engine.authMode,
+                detail: "no account-identity probe on this engine build",
+            });
+    }
+    catch {
+        // An unknown / unresolvable engine id is reported as absent, never thrown:
+        // one bad engine must not cost the whole snapshot.
+    }
+    const ver = await exec(binary, ["--version"]);
+    const present = ver.exitCode === 0;
+    return {
+        engine_id: engineId,
+        present,
+        version: present ? parseVersion(ver.stdout) : null,
+        // "Logged in" means a REAL named account resolved. The AS-1 honest-unknown
+        // identity always carries a synthetic account, so presence of that id is not
+        // evidence of a login — the email is.
+        logged_in: identity.account_email !== null,
+        channel: identity.channel ?? channel,
+        account_email: identity.account_email,
+        plan_hint: identity.plan_hint,
+        synthetic_account: identity.synthetic_account,
+        detail: present
+            ? identity.detail
+            : `${engineId} not installed (or not on PATH); ${identity.detail}`,
+    };
+}
+/**
+ * Probe the whole host. Never throws and never rejects: a probe that fails is
+ * reported as an absent tool, because "we could not tell" and "it is not there"
+ * are both answers a user can act on, whereas an exception on a cadence tick is
+ * not. The result is passed through `sanitizeSnapshot` before it is returned, so
+ * a caller cannot obtain an unredacted snapshot from this module at all.
+ */
+export async function probeMachineCapabilities(deps = {}) {
+    const exec = deps.exec ?? defaultExec;
+    const engineIds = (deps.engineIds ?? chatEngineIds)();
+    const tools = await Promise.all(HOST_TOOLS.map((tool) => (tool === "gh" ? probeGh(exec) : probeGit(exec))));
+    const engines = await Promise.all(engineIds.map((id) => probeEngine(id, exec)));
+    return sanitizeSnapshot({
+        machine: (deps.hostname ?? (() => os.hostname()))() || "unknown-host",
+        platform: deps.platform ?? process.platform,
+        arch: deps.arch ?? process.arch,
+        runner_version: deps.runnerVersion ?? PACKAGE_VERSION,
+        tools,
+        engines,
+    });
+}
+//# sourceMappingURL=probe.js.map

package/dist/machine-capabilities/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/machine-capabilities/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,UAAU,GAIX,MAAM,YAAY,CAAC;AAYpB,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,MAAM,WAAW,GAAc,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,QAAQ,EAAE;YACf,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAG,GAAa,EAAE,OAAO,IAAI,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC;AAgBF;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAK9C,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;IAC1B,MAAM,OAAO,GACX,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC;IACP,MAAM,IAAI,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7E,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,SAAS;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;SAChD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,OAAO,CAAC,IAAe;IACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CACjD,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CACrC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;QACb,OAAO;QACP,aAAa;QACb,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACxC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACnC,MAAM,EAAE,aAAa;YACnB,CAAC,CAAC,MAAM,OAAO,IAAI,GAAG,iBAAiB,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAClE,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,EACzB,EAAE;YACJ,CAAC,CAAC,MAAM,OAAO,IAAI,GAAG,0DAA0D;KACnF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,QAAQ,CAAC,IAAe;IACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,OAAO;QACL,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,IAAI;QACb,OAAO;QACP,sEAAsE;QACtE,2EAA2E;QAC3E,oDAAoD;QACpD,aAAa,EAAE,KAAK;QACpB,QAAQ;QACR,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,OAAO,OAAO,IAAI,GAAG,kBAAkB,QAAQ,EAAE;YACnD,CAAC,CAAC,OAAO,OAAO,IAAI,GAAG,6BAA6B;KACvD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAe;IAC1D,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,IAAI,OAAO,GAAgC,MAAM,CAAC;IAClD,IAAI,QAAQ,GAAG,sBAAsB,CAAC;QACpC,QAAQ;QACR,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,UAAU,QAAQ,yCAAyC;KACpE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC1B,QAAQ,GAAG,MAAM,CAAC,eAAe;YAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,EAAE;YAChC,CAAC,CAAC,sBAAsB,CAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,MAAM,EAAE,gDAAgD;aACzD,CAAC,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,mDAAmD;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAClD,2EAA2E;QAC3E,6EAA6E;QAC7E,sCAAsC;QACtC,SAAS,EAAE,QAAQ,CAAC,aAAa,KAAK,IAAI;QAC1C,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO;QACpC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC,GAAG,QAAQ,oCAAoC,QAAQ,CAAC,MAAM,EAAE;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAmC,EAAE;IAErC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,EAAE,CAAC;IAEtD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAEhF,OAAO,gBAAgB,CAAC;QACtB,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,cAAc;QACrE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;QAC/B,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,eAAe;QACrD,KAAK;QACL,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/machine-capabilities/redact.d.ts

@@ -0,0 +1,42 @@
+import { type EngineCapability, type MachineCapabilitySnapshot, type ToolCapability } from "./types.js";
+/**
+ * Credential SHAPES a developer machine actually holds, plus the two generic
+ * carriers. Mirrors the regexes in `acc.machine_capability_material_free`
+ * (0310 §2); `tests/unit/t1785160000000035-machine-capabilities.test.ts` asserts
+ * the mirror by running the same vectors through both spellings.
+ */
+export declare const CREDENTIAL_SHAPES: readonly RegExp[];
+/** True when `value` contains anything shaped like a credential. */
+export declare function looksLikeCredential(value: string | null | undefined): boolean;
+/**
+ * Mask + bound one free-text field. Applies `maskGitCredentials` first (the
+ * GIT-AUTH-ALERT masker, so URL userinfo and bare gh tokens are rewritten rather
+ * than dropped), then DROPS the value entirely if a credential shape survived —
+ * an unmaskable value is not worth a field. Length-bounded so a whitelisted
+ * field cannot become the smuggling channel.
+ */
+export declare function safeText(value: string | null | undefined, maxLength: number): string | null;
+/**
+ * Bound, dedupe and sort gh scope labels. Sorted so two snapshots of the same
+ * machine compare equal regardless of the order gh printed them, which is what
+ * makes the "did anything change?" fingerprint in report.ts stable. A label that
+ * looks like a credential is dropped rather than masked — a scope label is a
+ * short well-known word, so an unmaskable one is not a scope.
+ */
+export declare function safeScopes(scopes: readonly string[] | null | undefined): string[];
+/** Rebuild one tool row from the closed field set. */
+export declare function sanitizeTool(tool: ToolCapability): ToolCapability;
+/** Rebuild one engine row from the closed field set. */
+export declare function sanitizeEngine(engine: EngineCapability): EngineCapability;
+/**
+ * Rebuild a whole snapshot. The ONLY function the reporter is allowed to send
+ * the output of — `recordMachineCapabilities` calls it unconditionally, even on a
+ * snapshot this package built itself, because the point is that no future probe
+ * can add a field that bypasses it.
+ *
+ * Rows for tools outside `HOST_TOOLS` and engines with a blank id are dropped:
+ * the server-side whitelist would drop them anyway, and sending them would make
+ * the local snapshot disagree with the recorded one.
+ */
+export declare function sanitizeSnapshot(snapshot: MachineCapabilitySnapshot): MachineCapabilitySnapshot;
+//# sourceMappingURL=redact.d.ts.map

package/dist/machine-capabilities/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/machine-capabilities/redact.ts"],"names":[],"mappings":"AA6BA,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,yBAAyB,EAC9B,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAkB9C,CAAC;AAEF,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAG7E;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAMf;AAOD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAWjF;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAWjE;AAED,wDAAwD;AACxD,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAYzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB,GAClC,yBAAyB,CAgB3B"}

package/dist/machine-capabilities/redact.js

@@ -0,0 +1,160 @@
+/**
+ * AX-H1 (MACHINE-CAPABILITIES): the LAST THING that runs on the host before a
+ * capability snapshot leaves it.
+ *
+ * AUTH_APPROVAL_BRIEF.md §7.1 / the MLSA plan: no credential ever transits ACC —
+ * presence and identity only. That is enforced in three independent places, and
+ * this is the first of them:
+ *
+ *   1. HERE — `sanitizeSnapshot` REBUILDS every record from the closed field set
+ *      in types.ts and masks every free-text field, so nothing the probe happened
+ *      to capture can ride along. A rebuild rather than a filter: a field nobody
+ *      whitelisted is absent from the output by construction, not removed by a
+ *      rule somebody has to remember to write.
+ *   2. `acc._normalize_machine_capability_{tools,engines}` (migration 0310 §6)
+ *      does the same rebuild server-side, so a rogue or stale runner build cannot
+ *      widen the record.
+ *   3. Two CHECK constraints on `acc.machine_capabilities` reject anything SHAPED
+ *      like a credential at rest, so material that somehow reached a whitelisted
+ *      field is unstorable rather than merely unwritten.
+ *
+ * `looksLikeCredential` is the shared shape test behind (1) and (3) — the
+ * patterns are mirrored in `acc.machine_capability_material_free(jsonb)` and the
+ * unit suite asserts the two agree case by case. It is a SHAPE test, not entropy
+ * analysis: it cannot prove a string is not a secret, which is exactly why it is
+ * the backstop and the rebuild is the boundary.
+ *
+ * PURE by construction — no I/O, no clock — so every rule is unit-testable.
+ */
+import { maskGitCredentials } from "../git-auth/probe.js";
+import { HOST_TOOLS, } from "./types.js";
+/**
+ * Credential SHAPES a developer machine actually holds, plus the two generic
+ * carriers. Mirrors the regexes in `acc.machine_capability_material_free`
+ * (0310 §2); `tests/unit/t1785160000000035-machine-capabilities.test.ts` asserts
+ * the mirror by running the same vectors through both spellings.
+ */
+export const CREDENTIAL_SHAPES = [
+    // GitHub personal / OAuth / app / refresh tokens, and fine-grained PATs.
+    /gh[posru]_[A-Za-z0-9]{16,}/,
+    /github_pat_[A-Za-z0-9_]{20,}/,
+    // Anthropic, OpenAI-family, Google AI keys.
+    /sk-ant-[A-Za-z0-9_-]{16,}/,
+    /sk-[A-Za-z0-9]{32,}/,
+    /AIza[0-9A-Za-z_-]{30,}/,
+    // Slack bot/user/app tokens (an MCP or notifier credential).
+    /xox[baprse]-[A-Za-z0-9-]{10,}/,
+    // A JWT (a Supabase service-role key, an ACC-signed runner token).
+    /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\./,
+    // A PEM private key block (a GitHub App key).
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
+    // userinfo in a URL: scheme://user:token@host — how a PAT leaks out of a git
+    // remote. maskGitCredentials rewrites this to scheme://***@host, which has no
+    // colon before the '@' and therefore does not match.
+    /:\/\/[^/\s"]+:[^/\s"@]+@/,
+];
+/** True when `value` contains anything shaped like a credential. */
+export function looksLikeCredential(value) {
+    if (!value)
+        return false;
+    return CREDENTIAL_SHAPES.some((re) => re.test(value));
+}
+/**
+ * Mask + bound one free-text field. Applies `maskGitCredentials` first (the
+ * GIT-AUTH-ALERT masker, so URL userinfo and bare gh tokens are rewritten rather
+ * than dropped), then DROPS the value entirely if a credential shape survived —
+ * an unmaskable value is not worth a field. Length-bounded so a whitelisted
+ * field cannot become the smuggling channel.
+ */
+export function safeText(value, maxLength) {
+    if (value === null || value === undefined)
+        return null;
+    const masked = maskGitCredentials(String(value)).trim();
+    if (!masked)
+        return null;
+    if (looksLikeCredential(masked))
+        return null;
+    return masked.slice(0, maxLength);
+}
+/** `safeText` for a field that must be a string: an unusable value becomes "". */
+function safeDetail(value, maxLength = 300) {
+    return safeText(value, maxLength) ?? "";
+}
+/**
+ * Bound, dedupe and sort gh scope labels. Sorted so two snapshots of the same
+ * machine compare equal regardless of the order gh printed them, which is what
+ * makes the "did anything change?" fingerprint in report.ts stable. A label that
+ * looks like a credential is dropped rather than masked — a scope label is a
+ * short well-known word, so an unmaskable one is not a scope.
+ */
+export function safeScopes(scopes) {
+    if (!Array.isArray(scopes))
+        return [];
+    const out = new Set();
+    for (const raw of scopes) {
+        if (typeof raw !== "string")
+            continue;
+        const label = raw.trim();
+        if (!label || looksLikeCredential(label))
+            continue;
+        out.add(label.slice(0, 60));
+        if (out.size >= 32)
+            break;
+    }
+    return [...out].sort();
+}
+/** Rebuild one tool row from the closed field set. */
+export function sanitizeTool(tool) {
+    return {
+        tool: tool.tool,
+        present: tool.present === true,
+        version: safeText(tool.version, 60),
+        authenticated: tool.authenticated === true,
+        identity: safeText(tool.identity, 200),
+        host: safeText(tool.host, 120),
+        scopes: safeScopes(tool.scopes),
+        detail: safeDetail(tool.detail),
+    };
+}
+/** Rebuild one engine row from the closed field set. */
+export function sanitizeEngine(engine) {
+    return {
+        engine_id: (engine.engine_id ?? "").trim().slice(0, 60),
+        present: engine.present === true,
+        version: safeText(engine.version, 60),
+        logged_in: engine.logged_in === true,
+        channel: engine.channel,
+        account_email: safeText(engine.account_email, 200),
+        plan_hint: engine.plan_hint,
+        synthetic_account: safeDetail(engine.synthetic_account, 260),
+        detail: safeDetail(engine.detail),
+    };
+}
+/**
+ * Rebuild a whole snapshot. The ONLY function the reporter is allowed to send
+ * the output of — `recordMachineCapabilities` calls it unconditionally, even on a
+ * snapshot this package built itself, because the point is that no future probe
+ * can add a field that bypasses it.
+ *
+ * Rows for tools outside `HOST_TOOLS` and engines with a blank id are dropped:
+ * the server-side whitelist would drop them anyway, and sending them would make
+ * the local snapshot disagree with the recorded one.
+ */
+export function sanitizeSnapshot(snapshot) {
+    const known = new Set(HOST_TOOLS);
+    return {
+        machine: safeDetail(snapshot.machine, 200) || "unknown-host",
+        platform: safeDetail(snapshot.platform, 40) || "unknown",
+        arch: safeDetail(snapshot.arch, 40) || "unknown",
+        runner_version: safeDetail(snapshot.runner_version, 60),
+        tools: (snapshot.tools ?? [])
+            .filter((t) => known.has(t?.tool))
+            .slice(0, 16)
+            .map(sanitizeTool),
+        engines: (snapshot.engines ?? [])
+            .filter((e) => typeof e?.engine_id === "string" && e.engine_id.trim().length > 0)
+            .slice(0, 32)
+            .map(sanitizeEngine),
+    };
+}
+//# sourceMappingURL=redact.js.map

package/dist/machine-capabilities/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/machine-capabilities/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,UAAU,GAKX,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,yEAAyE;IACzE,4BAA4B;IAC5B,8BAA8B;IAC9B,4CAA4C;IAC5C,2BAA2B;IAC3B,qBAAqB;IACrB,wBAAwB;IACxB,6DAA6D;IAC7D,+BAA+B;IAC/B,mEAAmE;IACnE,6CAA6C;IAC7C,8CAA8C;IAC9C,oCAAoC;IACpC,6EAA6E;IAC7E,8EAA8E;IAC9E,qDAAqD;IACrD,0BAA0B;CAC3B,CAAC;AAEF,oEAAoE;AACpE,MAAM,UAAU,mBAAmB,CAAC,KAAgC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,KAAgC,EAChC,SAAiB;IAEjB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,mBAAmB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,KAAgC,EAAE,SAAS,GAAG,GAAG;IACnE,OAAO,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAA4C;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,SAAS;QACnD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE;YAAE,MAAM;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI;QAC9B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa,KAAK,IAAI;QAC1C,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;QACtC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;QAC9B,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,MAAwB;IACrD,OAAO;QACL,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;QAChC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC;QAClD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,iBAAiB,EAAE,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC;QAC5D,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,UAAU,CAAC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,cAAc;QAC5D,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,SAAS;QACxD,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS;QAChD,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACvD,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAgB,CAAC,CAAC;aAC7C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,YAAY,CAAC;QACpB,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;aAChF,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,cAAc,CAAC;KACvB,CAAC;AACJ,CAAC"}

package/dist/machine-capabilities/report.d.ts

@@ -0,0 +1,107 @@
+import type { MachineCapabilityReport, MachineCapabilitySnapshot } from "./types.js";
+/** Minimum gap between host probes on the shared AS-1 cadence. */
+export declare const DEFAULT_PROBE_MIN_INTERVAL_MS: number;
+/** Minimum gap between re-recording an UNCHANGED snapshot (liveness refresh). */
+export declare const DEFAULT_REFRESH_MIN_INTERVAL_MS: number;
+/** The RPC surface the reporter needs — a supabase-js client satisfies it. */
+export interface MachineCapabilityTransport {
+    rpc(fn: string, args: Record<string, unknown>): PromiseLike<{
+        data?: unknown;
+        error?: {
+            message: string;
+        } | null;
+    }>;
+}
+/**
+ * A stable content fingerprint of a snapshot. Deliberately excludes nothing:
+ * every field that reaches the server is in it, so "unchanged" means the recorded
+ * row would be byte-identical. Sorted keys, so JSON key order cannot make an
+ * unchanged machine look changed.
+ */
+export declare function snapshotFingerprint(snapshot: MachineCapabilitySnapshot): string;
+export interface MachineCapabilityReporterDeps {
+    /** Probe the host. Should not throw; a throw is caught and logged. */
+    probe: () => Promise<MachineCapabilitySnapshot>;
+    /** The RPC transport. Omit to make the reporter probe-only (tests / dry runs). */
+    transport?: MachineCapabilityTransport | null;
+    /** The runner id to attribute the report to, when this process is a runner. */
+    runnerId?: string | null;
+    /** Min gap between host probes. Default 15 min. */
+    probeMinIntervalMs?: number;
+    /** Min gap between re-recording an unchanged snapshot. Default 6 h. */
+    refreshMinIntervalMs?: number;
+    /** Clock (test seam). Default Date.now. */
+    now?: () => number;
+    /** Best-effort log sink. */
+    onLog?: (line: string) => void;
+}
+/** What one cadence tick did, so a caller (and a test) can assert the gates. */
+export type MachineCapabilityTickOutcome = {
+    action: "skipped";
+    reason: "throttled";
+} | {
+    action: "probed";
+    recorded: boolean;
+    changed: boolean;
+    /** Why the write happened (or didn't): changed | liveness-refresh | unchanged | no-transport. */
+    reason: string;
+    /** Why the PROBE happened: first-probe | account-changed | interval-elapsed. */
+    probeReason: string;
+} | {
+    action: "failed";
+    reason: string;
+};
+/**
+ * Drives the capability probe on somebody else's cadence. Holds only the last
+ * fingerprint + two timestamps, so it is cheap to keep for the process lifetime
+ * and has no timer of its own — which is what makes "there is exactly one probe
+ * loop on this host" structurally true rather than a claim in a comment.
+ */
+export declare class MachineCapabilityReporter {
+    private readonly deps;
+    private readonly probeMinIntervalMs;
+    private readonly refreshMinIntervalMs;
+    private readonly now;
+    private lastProbeAt;
+    private lastRecordAt;
+    private lastFingerprint;
+    private lastAccountKey;
+    private seq;
+    /** Serial chain so two triggers never probe concurrently or record out of order. */
+    private tail;
+    constructor(deps: MachineCapabilityReporterDeps);
+    /** The last recorded fingerprint (null before the first successful probe). */
+    fingerprint(): string | null;
+    /** Resolve once every queued tick has settled (test seam). */
+    settle(): Promise<void>;
+    /**
+     * Note one AS-1 cadence tick. `accountKey` is the AS-1 `synthetic_account` of
+     * the identity that tick resolved: when it moves, the engine rows are stale by
+     * definition and the throttle is bypassed.
+     *
+     * Returns the outcome and never rejects — a capability report is
+     * best-effort telemetry and must never be able to fail a cadence tick.
+     */
+    onProbeTick(args: {
+        trigger: string;
+        accountKey?: string | null;
+    }): Promise<MachineCapabilityTickOutcome>;
+    private shouldProbe;
+    private tick;
+}
+/**
+ * Send one report to `acc.record_machine_capabilities`. Returns false (and logs)
+ * on any failure rather than throwing: a pre-0310 server 404s this RPC, and an
+ * operator on an older deploy must not have their runner wedged by a telemetry
+ * write — the same non-fatal contract `set_runner_capabilities` uses in watch.ts.
+ *
+ * The snapshot is sanitized ONE more time on the way out. That is not paranoia
+ * theatre: this function is exported and callable with an arbitrary snapshot, and
+ * the invariant it has to hold is "nothing that leaves this process carries
+ * credential material", not "nothing that leaves this class does".
+ */
+export declare function recordMachineCapabilities(transport: MachineCapabilityTransport, report: MachineCapabilityReport, opts?: {
+    runnerId?: string | null;
+    onLog?: (line: string) => void;
+}): Promise<boolean>;
+//# sourceMappingURL=report.d.ts.map

package/dist/machine-capabilities/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/machine-capabilities/report.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAErF,kEAAkE;AAClE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AACzD,iFAAiF;AACjF,eAAO,MAAM,+BAA+B,QAAkB,CAAC;AAE/D,8EAA8E;AAC9E,MAAM,WAAW,0BAA0B;IACzC,GAAG,CACD,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,WAAW,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACxE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,CAQ/E;AAED,MAAM,WAAW,6BAA6B;IAC5C,sEAAsE;IACtE,KAAK,EAAE,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAChD,kFAAkF;IAClF,SAAS,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;IAC9C,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mDAAmD;IACnD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,gFAAgF;AAChF,MAAM,MAAM,4BAA4B,GACpC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAC1C;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,iGAAiG;IACjG,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,qBAAa,yBAAyB;IAaxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAZjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,GAAG,CAAK;IAChB,oFAAoF;IACpF,OAAO,CAAC,IAAI,CAAoC;gBAEnB,IAAI,EAAE,6BAA6B;IAShE,8EAA8E;IAC9E,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,8DAA8D;IACxD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B;;;;;;;OAOG;IACH,WAAW,CAAC,IAAI,EAAE;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAUzC,OAAO,CAAC,WAAW;YAUL,IAAI;CA4EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,0BAA0B,EACrC,MAAM,EAAE,uBAAuB,EAC/B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GACtE,OAAO,CAAC,OAAO,CAAC,CA+BlB"}