@tokenfactory/acc-runner 0.42.0 → 0.44.0

package/dist/local-repo/index.js

@@ -0,0 +1,141 @@
+/**
+ * LOCAL-REPO-CLI — the decidable half of `acc repo add-local`.
+ *
+ * Everything here is pure: given a path on disk and a few probe results, decide
+ * what to register, what to refuse, and what to warn about. The plumbing that
+ * needs a keychain, a network and a filesystem lives in ./command.ts, the same
+ * split serve-scope uses — so every rule below is unit-testable without either.
+ *
+ * WHAT A "LOCAL REPO" IS, AND WHAT IT IS NOT
+ * ----------------------------------------------------------------------------
+ * It is a git working copy on THIS machine that ACC may run tasks in, attached
+ * to a project without the GitHub App being installed anywhere. That is the
+ * whole of it. In particular it is NOT:
+ *
+ *   * a mirror of a GitHub repo ACC will keep in sync — nothing here clones,
+ *     fetches or pushes on the server's behalf;
+ *   * a repo other people on the team can work. The grant the server records is
+ *     scoped to the registering user, and the path is known only to this
+ *     machine, so a teammate's runner has neither the right nor the directory;
+ *   * a way to skip a GitHub write grant on a repo that IS on GitHub. The
+ *     server derives the slug from the caller's user id into a reserved
+ *     `local.…` namespace precisely so this cannot be that.
+ *
+ * WHY THE PATH NEVER LEAVES THE MACHINE
+ * ----------------------------------------------------------------------------
+ * The server needs to know "machine M serves repo R" to route a task; it does
+ * not need to know that R is at /Users/priya/code/side-project. Sending the path
+ * would put a filesystem layout — usernames, project names, directory
+ * structure — into a shared database for no routing benefit, so the path stays
+ * in this machine's own config.json (`local-repos`) and the runner resolves it
+ * at task time. See docs/acc/LOCAL_REPO_CLI_SETUP.md.
+ */
+/** The reserved namespace the server mints local slugs into (acc.local_repo_slug). */
+export const LOCAL_REPO_PREFIX = "local.";
+/**
+ * Is this slug in the reserved local/CLI namespace? Mirrors
+ * acc.is_local_repo_slug (migration 0318) and src/lib/local-repo.ts. A GitHub
+ * owner segment can never contain a '.', so the two namespaces cannot collide.
+ */
+export function isLocalRepoSlug(repo) {
+    const slug = (repo ?? "").trim().toLowerCase();
+    const slash = slug.indexOf("/");
+    if (slash <= 0 || slash === slug.length - 1)
+        return false;
+    return slug.slice(0, slash).startsWith(LOCAL_REPO_PREFIX);
+}
+/**
+ * The human-facing name of a local repo — the part after the '/', without the
+ * per-user hash fragment that makes the slug unique. `local.9f2c1a/my-app` reads
+ * as "my-app (local)" in a list; the full slug is still what gets matched.
+ */
+export function localRepoDisplayName(repo) {
+    const slash = repo.lastIndexOf("/");
+    return slash >= 0 ? repo.slice(slash + 1) : repo;
+}
+/**
+ * Slugify a repo NAME the way acc.local_repo_slug does server-side, so the CLI
+ * can predict (and preview) the slug it is about to be handed. Kept in sync
+ * deliberately — the server is authoritative and the CLI stores whatever comes
+ * back, so a drift here is a cosmetic preview bug, never a wrong write.
+ */
+export function sanitizeLocalRepoName(raw) {
+    let name = (raw ?? "").trim().toLowerCase();
+    name = name.replace(/[^a-z0-9._-]+/g, "-");
+    name = name.replace(/^[-._]+|[-._]+$/g, "");
+    name = name.slice(0, 64);
+    name = name.replace(/^[-._]+|[-._]+$/g, "");
+    return name;
+}
+/**
+ * Decide what to register for a probed directory, or throw with the reason it
+ * cannot be registered.
+ *
+ * Refusals are limited to the two facts that make registration meaningless: the
+ * path is not a directory, or it is not a git repository (the runner's whole
+ * task loop is `git` — branch, commit, diff — so a plain folder would fail at
+ * the first step rather than at a legible place).
+ *
+ * A missing `origin` is NOT a refusal. Running tasks in a local working copy is
+ * useful on its own; it is opening a PR at the end that needs a remote, and the
+ * warning says exactly that instead of pre-emptively blocking the register.
+ */
+export function planLocalRepoRegistration(probe) {
+    if (!probe.isDirectory) {
+        throw new Error(`${probe.path} is not a directory — point at a git working copy`);
+    }
+    if (!probe.isGitRepo) {
+        throw new Error(`${probe.path} is not a git repository (no .git) — run \`git init\` there first, ` +
+            "or point at the repo root");
+    }
+    const rawName = probe.nameOverride?.trim() || basename(probe.path);
+    const name = sanitizeLocalRepoName(rawName);
+    if (!name) {
+        throw new Error(`could not derive a repo name from ${probe.path} — pass --name with letters or digits`);
+    }
+    const warnings = [];
+    if (!probe.originUrl) {
+        warnings.push("This repo has no `origin` remote. Tasks will run and commit here, but the " +
+            "runner cannot push a branch or open a PR — add a remote if you want PRs.");
+    }
+    warnings.push("The code stays on this machine. Only your own runner can work this repo, " +
+        "and only while it is online.");
+    return {
+        name,
+        path: probe.path,
+        // A preview, not a claim: the server mints the authoritative slug from the
+        // caller's user id, which this side deliberately does not know.
+        previewSlug: `${LOCAL_REPO_PREFIX}<you>/${name}`,
+        warnings,
+    };
+}
+/**
+ * Last path segment, tolerating a trailing separator (`~/code/my-app/` must
+ * yield "my-app", not ""). Local rather than node:path so this module stays
+ * dependency-free and testable as pure text.
+ */
+function basename(p) {
+    const parts = p.replace(/[\\/]+$/, "").split(/[\\/]/);
+    return parts[parts.length - 1] ?? "";
+}
+/**
+ * Is this error the "migration 0318 has not been applied here yet" shape?
+ * HALT-before-apply means every environment has a window where this command
+ * ships and the RPC does not exist; "run psql" and "something is broken" have
+ * different remedies, so the command says which. Mirrors serve-scope's
+ * isMigrationPending.
+ */
+export function isMigrationPending(err) {
+    if (!err)
+        return false;
+    // PostgREST: 404 + PGRST202 for an unknown RPC; Postgres 42883 for an
+    // undefined function reached another way.
+    if (err.code === "PGRST202" || err.code === "42883")
+        return true;
+    const msg = (err.message ?? "").toLowerCase();
+    return (msg.includes("register_local_repo") &&
+        (msg.includes("does not exist") ||
+            msg.includes("not find") ||
+            msg.includes("schema cache")));
+}
+//# sourceMappingURL=index.js.map

package/dist/local-repo/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local-repo/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAA+B;IAC7D,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAiCD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAqB;IAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,mDAAmD,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,IAAI,qEAAqE;YAChF,2BAA2B,CAC9B,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,qCAAqC,KAAK,CAAC,IAAI,uCAAuC,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CACX,4EAA4E;YAC1E,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,IAAI,CACX,2EAA2E;QACzE,8BAA8B,CACjC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,2EAA2E;QAC3E,gEAAgE;QAChE,WAAW,EAAE,GAAG,iBAAiB,SAAS,IAAI,EAAE;QAChD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAA+C;IAChF,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACnC,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAChC,CAAC;AACJ,CAAC"}

package/dist/machine-capabilities/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * AX-H1 (MACHINE-CAPABILITIES): probe and record what a machine can actually do.
+ * AUTH_APPROVAL_BRIEF.md §7, Phase H, gap G-17.
+ *
+ * Three modules, one rule (brief §7.1 — no credential ever transits ACC; presence
+ * and identity only):
+ *
+ *   types.ts   the CLOSED field set. Presence, identity, provenance. Nothing else.
+ *   redact.ts  the boundary: rebuild + mask every record before it leaves the host.
+ *   probe.ts   the host probe (gh / git / engine logins), read-only and bounded.
+ *   report.ts  the gate + the write, driven by somebody ELSE's cadence.
+ *
+ * The cadence is the AS-1 account probe (engines/account-probe.ts), reused rather
+ * than duplicated: `AccountProbeScheduler` calls the reporter on each of its four
+ * triggers, so this package still has exactly one probe loop on a host.
+ */
+export { HOST_TOOLS, type EngineCapability, type HostTool, type MachineCapabilityReport, type MachineCapabilitySnapshot, type ToolCapability, } from "./types.js";
+export { CREDENTIAL_SHAPES, looksLikeCredential, safeScopes, safeText, sanitizeEngine, sanitizeSnapshot, sanitizeTool, } from "./redact.js";
+export { PROBE_TIMEOUT_MS, parseGhAuthStatus, parseVersion, probeMachineCapabilities, type MachineCapabilityProbeDeps, type ProbeExec, type ProbeExecResult, } from "./probe.js";
+export { DEFAULT_PROBE_MIN_INTERVAL_MS, DEFAULT_REFRESH_MIN_INTERVAL_MS, MachineCapabilityReporter, recordMachineCapabilities, snapshotFingerprint, type MachineCapabilityReporterDeps, type MachineCapabilityTickOutcome, type MachineCapabilityTransport, } from "./report.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/machine-capabilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/machine-capabilities/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,GAChC,MAAM,aAAa,CAAC"}

package/dist/machine-capabilities/index.js

@@ -0,0 +1,21 @@
+/**
+ * AX-H1 (MACHINE-CAPABILITIES): probe and record what a machine can actually do.
+ * AUTH_APPROVAL_BRIEF.md §7, Phase H, gap G-17.
+ *
+ * Three modules, one rule (brief §7.1 — no credential ever transits ACC; presence
+ * and identity only):
+ *
+ *   types.ts   the CLOSED field set. Presence, identity, provenance. Nothing else.
+ *   redact.ts  the boundary: rebuild + mask every record before it leaves the host.
+ *   probe.ts   the host probe (gh / git / engine logins), read-only and bounded.
+ *   report.ts  the gate + the write, driven by somebody ELSE's cadence.
+ *
+ * The cadence is the AS-1 account probe (engines/account-probe.ts), reused rather
+ * than duplicated: `AccountProbeScheduler` calls the reporter on each of its four
+ * triggers, so this package still has exactly one probe loop on a host.
+ */
+export { HOST_TOOLS, } from "./types.js";
+export { CREDENTIAL_SHAPES, looksLikeCredential, safeScopes, safeText, sanitizeEngine, sanitizeSnapshot, sanitizeTool, } from "./redact.js";
+export { PROBE_TIMEOUT_MS, parseGhAuthStatus, parseVersion, probeMachineCapabilities, } from "./probe.js";
+export { DEFAULT_PROBE_MIN_INTERVAL_MS, DEFAULT_REFRESH_MIN_INTERVAL_MS, MachineCapabilityReporter, recordMachineCapabilities, snapshotFingerprint, } from "./report.js";
+//# sourceMappingURL=index.js.map

package/dist/machine-capabilities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/machine-capabilities/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,UAAU,GAMX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,GAIzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,GAIpB,MAAM,aAAa,CAAC"}

package/dist/machine-capabilities/probe.d.ts

@@ -0,0 +1,61 @@
+import { type MachineCapabilitySnapshot } from "./types.js";
+/** One command invocation captured without throwing. */
+export interface ProbeExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+/** The single I/O seam: run `bin args` and report what happened. Never throws. */
+export type ProbeExec = (bin: string, args: string[]) => Promise<ProbeExecResult>;
+/** Per-probe timeout. A capability probe must never hold up a cadence tick. */
+export declare const PROBE_TIMEOUT_MS = 5000;
+export interface MachineCapabilityProbeDeps {
+    /** Command runner (test seam). Defaults to a bounded, non-throwing execa. */
+    exec?: ProbeExec;
+    /** Host name (test seam). Defaults to os.hostname(). */
+    hostname?: () => string;
+    /** Engine ids to probe (test seam). Defaults to the chat-engine registry. */
+    engineIds?: () => string[];
+    /** Reported runner version (test seam). Defaults to the package version. */
+    runnerVersion?: string;
+    /** platform/arch (test seam). Default to process values. */
+    platform?: string;
+    arch?: string;
+}
+/**
+ * Extract the first dotted version triple from a `--version` line. Tolerant on
+ * purpose: `gh version 2.62.0 (2024-11-08)`, `git version 2.46.0`,
+ * `1.0.30 (Claude Code)` and a bare `2.4` all resolve; anything else is null
+ * rather than a guess (an invented version would make an "is this old enough?"
+ * question answerable and wrong).
+ */
+export declare function parseVersion(output: string): string | null;
+/**
+ * Parse `gh auth status` output. gh prints a human block per host:
+ *
+ *   github.com
+ *     ✓ Logged in to github.com account gaurav (keyring)
+ *     - Active account: true
+ *     - Git operations protocol: https
+ *     - Token: gho_************************************
+ *     - Token scopes: 'gist', 'read:org', 'repo'
+ *
+ * The `Token:` line is already elided by gh, and we do not read it either way —
+ * only the account, the host, and the scope labels. Tolerant of the older
+ * `Logged in to github.com as gaurav (…)` spelling, and of `--json`-less GHES
+ * output where the host is the bare first line.
+ */
+export declare function parseGhAuthStatus(output: string): {
+    account: string | null;
+    host: string | null;
+    scopes: string[];
+};
+/**
+ * Probe the whole host. Never throws and never rejects: a probe that fails is
+ * reported as an absent tool, because "we could not tell" and "it is not there"
+ * are both answers a user can act on, whereas an exception on a cadence tick is
+ * not. The result is passed through `sanitizeSnapshot` before it is returned, so
+ * a caller cannot obtain an unredacted snapshot from this module at all.
+ */
+export declare function probeMachineCapabilities(deps?: MachineCapabilityProbeDeps): Promise<MachineCapabilitySnapshot>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/machine-capabilities/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/machine-capabilities/probe.ts"],"names":[],"mappings":"AAsCA,OAAO,EAGL,KAAK,yBAAyB,EAE/B,MAAM,YAAY,CAAC;AAEpB,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAElF,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AAqBtC,MAAM,WAAW,0BAA0B;IACzC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG;IACjD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAaA;AAkID;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAiBpC"}

package/dist/machine-capabilities/probe.js

@@ -0,0 +1,243 @@
+/**
+ * AX-H1 (MACHINE-CAPABILITIES): the host probe. Answers "what does THIS machine
+ * actually offer?" — gh, git, and each registered engine's login — so ACC can
+ * tell a user what their own machine can do instead of leaving that in the
+ * operator's head.
+ *
+ * WHAT IT READS, AND WHAT IT REFUSES TO READ. Every probe here is a read-only,
+ * short-timeout, local invocation of a tool's own status command:
+ *
+ *   gh    `gh --version`, `gh auth status`  — presence, version, whether the
+ *         credential works, the account login, the host, and the token's SCOPE
+ *         LABELS. `--show-token` is NEVER passed: the scopes are the authority,
+ *         and the authority is the answerable question ("can this machine open a
+ *         PR?"). The token is not read, so it cannot be sent. The unit suite
+ *         asserts no argv in this package contains `--show-token`.
+ *   git   `git --version`, `git config --get user.email` — presence, version and
+ *         the committing identity. Git has no host-level login of its own, so
+ *         `authenticated` is false and the credential-health question is answered
+ *         by the separate GIT-AUTH-ALERT `ls-remote` probe (git-auth/probe.ts),
+ *         which is where a remote round-trip belongs.
+ *   engines  the AS-1 `accountIdentity()` surface plus a `--version` presence
+ *         check. NOT a second credential probe: the identity is exactly what the
+ *         AS-1 cadence already computes, so the engine rows are a projection of
+ *         a fact this process already has.
+ *
+ * Nothing here reads a keychain, a token file, or an environment variable's
+ * VALUE. Every free-text field goes through redact.ts before it leaves the host.
+ *
+ * FULLY injectable (exec / hostname / engines / version) so the whole probe is
+ * exercised with zero real subprocesses.
+ */
+import { execa } from "execa";
+import os from "node:os";
+import { buildEnv } from "../bin-resolve.js";
+import { chatEngineIds, getChatEngine } from "../engines/registry.js";
+import { unknownAccountIdentity } from "../engines/account-identity.js";
+import { PACKAGE_VERSION } from "../pkg-version.js";
+import { sanitizeSnapshot } from "./redact.js";
+import { HOST_TOOLS, } from "./types.js";
+/** Per-probe timeout. A capability probe must never hold up a cadence tick. */
+export const PROBE_TIMEOUT_MS = 5_000;
+const defaultExec = async (bin, args) => {
+    try {
+        const res = await execa(bin, args, {
+            env: buildEnv(),
+            timeout: PROBE_TIMEOUT_MS,
+            reject: false,
+        });
+        return {
+            stdout: res.stdout ?? "",
+            stderr: res.stderr ?? "",
+            exitCode: res.exitCode ?? null,
+        };
+    }
+    catch (err) {
+        // A missing binary throws ENOENT rather than exiting non-zero. That is
+        // "absent", not "broken", and it is reported as such.
+        return { stdout: "", stderr: err?.message ?? "spawn failed", exitCode: null };
+    }
+};
+/**
+ * Extract the first dotted version triple from a `--version` line. Tolerant on
+ * purpose: `gh version 2.62.0 (2024-11-08)`, `git version 2.46.0`,
+ * `1.0.30 (Claude Code)` and a bare `2.4` all resolve; anything else is null
+ * rather than a guess (an invented version would make an "is this old enough?"
+ * question answerable and wrong).
+ */
+export function parseVersion(output) {
+    const m = /\b(\d+(?:\.\d+){1,3})\b/.exec(output ?? "");
+    return m ? m[1] : null;
+}
+/**
+ * Parse `gh auth status` output. gh prints a human block per host:
+ *
+ *   github.com
+ *     ✓ Logged in to github.com account gaurav (keyring)
+ *     - Active account: true
+ *     - Git operations protocol: https
+ *     - Token: gho_************************************
+ *     - Token scopes: 'gist', 'read:org', 'repo'
+ *
+ * The `Token:` line is already elided by gh, and we do not read it either way —
+ * only the account, the host, and the scope labels. Tolerant of the older
+ * `Logged in to github.com as gaurav (…)` spelling, and of `--json`-less GHES
+ * output where the host is the bare first line.
+ */
+export function parseGhAuthStatus(output) {
+    const text = output ?? "";
+    const account = /Logged in to \S+ account ([A-Za-z0-9._-]+)/.exec(text)?.[1] ??
+        /Logged in to \S+ as ([A-Za-z0-9._-]+)/.exec(text)?.[1] ??
+        null;
+    const host = /Logged in to (\S+?)(?: account| as)\b/.exec(text)?.[1] ?? null;
+    const scopeLine = /Token scopes:\s*(.+)/.exec(text)?.[1] ?? "";
+    const scopes = scopeLine
+        .split(",")
+        .map((s) => s.trim().replace(/^['"]|['"]$/g, ""))
+        .filter((s) => s.length > 0 && s !== "none");
+    return { account, host, scopes };
+}
+/** Probe `gh`: presence, version, whether it authenticates, and as whom. */
+async function probeGh(exec) {
+    const ver = await exec("gh", ["--version"]);
+    const present = ver.exitCode === 0;
+    const version = present ? parseVersion(ver.stdout) : null;
+    if (!present) {
+        return {
+            tool: "gh",
+            present: false,
+            version: null,
+            authenticated: false,
+            identity: null,
+            host: null,
+            scopes: [],
+            detail: "gh not installed (or not on PATH)",
+        };
+    }
+    // `gh auth status` is a LOCAL token check, not a GitHub API call (see gh.ts),
+    // so it is unbudgeted and safe to run on every capability probe.
+    const status = await exec("gh", ["auth", "status"]);
+    const authenticated = status.exitCode === 0;
+    // gh has printed the status block on stdout since 2.x and on stderr before
+    // that; read both so an older install still resolves an identity.
+    const { account, host, scopes } = parseGhAuthStatus(`${status.stdout}\n${status.stderr}`);
+    return {
+        tool: "gh",
+        present: true,
+        version,
+        authenticated,
+        identity: authenticated ? account : null,
+        host: authenticated ? host : null,
+        scopes: authenticated ? scopes : [],
+        detail: authenticated
+            ? `gh ${version ?? "?"} authenticated${account ? ` as ${account}` : ""}${host ? ` on ${host}` : ""}`
+            : `gh ${version ?? "?"} installed but not authenticated (run \`gh auth login\`)`,
+    };
+}
+/** Probe `git`: presence, version and the committing identity. */
+async function probeGit(exec) {
+    const ver = await exec("git", ["--version"]);
+    const present = ver.exitCode === 0;
+    if (!present) {
+        return {
+            tool: "git",
+            present: false,
+            version: null,
+            authenticated: false,
+            identity: null,
+            host: null,
+            scopes: [],
+            detail: "git not installed (or not on PATH)",
+        };
+    }
+    const version = parseVersion(ver.stdout);
+    const email = await exec("git", ["config", "--get", "user.email"]);
+    const identity = email.exitCode === 0 ? email.stdout.trim() || null : null;
+    return {
+        tool: "git",
+        present: true,
+        version,
+        // git holds no host login of its own; remote credential health is the
+        // GIT-AUTH-ALERT ls-remote probe's job, and duplicating it here would mean
+        // a second remote round trip on every cadence tick.
+        authenticated: false,
+        identity,
+        host: null,
+        scopes: [],
+        detail: identity
+            ? `git ${version ?? "?"} committing as ${identity}`
+            : `git ${version ?? "?"} (no user.email configured)`,
+    };
+}
+/**
+ * Probe one engine: is the binary there, and who is it logged in as? The identity
+ * comes from the AS-1 `accountIdentity()` surface — this is a PROJECTION of the
+ * probe the cadence already runs, not a second credential probe. An engine that
+ * predates AS-1 degrades to the honest unknown-account identity rather than being
+ * reported as logged out.
+ */
+async function probeEngine(engineId, exec) {
+    let binary = engineId;
+    let channel = "none";
+    let identity = unknownAccountIdentity({
+        engineId,
+        channel: "none",
+        detail: `engine ${engineId} is not registered in this runner build`,
+    });
+    try {
+        const engine = getChatEngine(engineId);
+        binary = engine.binary;
+        channel = engine.authMode;
+        identity = engine.accountIdentity
+            ? await engine.accountIdentity()
+            : unknownAccountIdentity({
+                engineId: engine.id,
+                channel: engine.authMode,
+                detail: "no account-identity probe on this engine build",
+            });
+    }
+    catch {
+        // An unknown / unresolvable engine id is reported as absent, never thrown:
+        // one bad engine must not cost the whole snapshot.
+    }
+    const ver = await exec(binary, ["--version"]);
+    const present = ver.exitCode === 0;
+    return {
+        engine_id: engineId,
+        present,
+        version: present ? parseVersion(ver.stdout) : null,
+        // "Logged in" means a REAL named account resolved. The AS-1 honest-unknown
+        // identity always carries a synthetic account, so presence of that id is not
+        // evidence of a login — the email is.
+        logged_in: identity.account_email !== null,
+        channel: identity.channel ?? channel,
+        account_email: identity.account_email,
+        plan_hint: identity.plan_hint,
+        synthetic_account: identity.synthetic_account,
+        detail: present
+            ? identity.detail
+            : `${engineId} not installed (or not on PATH); ${identity.detail}`,
+    };
+}
+/**
+ * Probe the whole host. Never throws and never rejects: a probe that fails is
+ * reported as an absent tool, because "we could not tell" and "it is not there"
+ * are both answers a user can act on, whereas an exception on a cadence tick is
+ * not. The result is passed through `sanitizeSnapshot` before it is returned, so
+ * a caller cannot obtain an unredacted snapshot from this module at all.
+ */
+export async function probeMachineCapabilities(deps = {}) {
+    const exec = deps.exec ?? defaultExec;
+    const engineIds = (deps.engineIds ?? chatEngineIds)();
+    const tools = await Promise.all(HOST_TOOLS.map((tool) => (tool === "gh" ? probeGh(exec) : probeGit(exec))));
+    const engines = await Promise.all(engineIds.map((id) => probeEngine(id, exec)));
+    return sanitizeSnapshot({
+        machine: (deps.hostname ?? (() => os.hostname()))() || "unknown-host",
+        platform: deps.platform ?? process.platform,
+        arch: deps.arch ?? process.arch,
+        runner_version: deps.runnerVersion ?? PACKAGE_VERSION,
+        tools,
+        engines,
+    });
+}
+//# sourceMappingURL=probe.js.map

package/dist/machine-capabilities/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/machine-capabilities/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,UAAU,GAIX,MAAM,YAAY,CAAC;AAYpB,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,MAAM,WAAW,GAAc,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,QAAQ,EAAE;YACf,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAG,GAAa,EAAE,OAAO,IAAI,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC;AAgBF;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAK9C,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;IAC1B,MAAM,OAAO,GACX,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC;IACP,MAAM,IAAI,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7E,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,SAAS;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;SAChD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,OAAO,CAAC,IAAe;IACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CACjD,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CACrC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;QACb,OAAO;QACP,aAAa;QACb,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACxC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACnC,MAAM,EAAE,aAAa;YACnB,CAAC,CAAC,MAAM,OAAO,IAAI,GAAG,iBAAiB,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAClE,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,EACzB,EAAE;YACJ,CAAC,CAAC,MAAM,OAAO,IAAI,GAAG,0DAA0D;KACnF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,QAAQ,CAAC,IAAe;IACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK;YACpB,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,OAAO;QACL,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,IAAI;QACb,OAAO;QACP,sEAAsE;QACtE,2EAA2E;QAC3E,oDAAoD;QACpD,aAAa,EAAE,KAAK;QACpB,QAAQ;QACR,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,OAAO,OAAO,IAAI,GAAG,kBAAkB,QAAQ,EAAE;YACnD,CAAC,CAAC,OAAO,OAAO,IAAI,GAAG,6BAA6B;KACvD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAe;IAC1D,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,IAAI,OAAO,GAAgC,MAAM,CAAC;IAClD,IAAI,QAAQ,GAAG,sBAAsB,CAAC;QACpC,QAAQ;QACR,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,UAAU,QAAQ,yCAAyC;KACpE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC1B,QAAQ,GAAG,MAAM,CAAC,eAAe;YAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,EAAE;YAChC,CAAC,CAAC,sBAAsB,CAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,MAAM,EAAE,gDAAgD;aACzD,CAAC,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,mDAAmD;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAClD,2EAA2E;QAC3E,6EAA6E;QAC7E,sCAAsC;QACtC,SAAS,EAAE,QAAQ,CAAC,aAAa,KAAK,IAAI;QAC1C,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO;QACpC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC,GAAG,QAAQ,oCAAoC,QAAQ,CAAC,MAAM,EAAE;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAmC,EAAE;IAErC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,EAAE,CAAC;IAEtD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAEhF,OAAO,gBAAgB,CAAC;QACtB,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,cAAc;QACrE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;QAC/B,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,eAAe;QACrD,KAAK;QACL,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/machine-capabilities/redact.d.ts

@@ -0,0 +1,42 @@
+import { type EngineCapability, type MachineCapabilitySnapshot, type ToolCapability } from "./types.js";
+/**
+ * Credential SHAPES a developer machine actually holds, plus the two generic
+ * carriers. Mirrors the regexes in `acc.machine_capability_material_free`
+ * (0310 §2); `tests/unit/t1785160000000035-machine-capabilities.test.ts` asserts
+ * the mirror by running the same vectors through both spellings.
+ */
+export declare const CREDENTIAL_SHAPES: readonly RegExp[];
+/** True when `value` contains anything shaped like a credential. */
+export declare function looksLikeCredential(value: string | null | undefined): boolean;
+/**
+ * Mask + bound one free-text field. Applies `maskGitCredentials` first (the
+ * GIT-AUTH-ALERT masker, so URL userinfo and bare gh tokens are rewritten rather
+ * than dropped), then DROPS the value entirely if a credential shape survived —
+ * an unmaskable value is not worth a field. Length-bounded so a whitelisted
+ * field cannot become the smuggling channel.
+ */
+export declare function safeText(value: string | null | undefined, maxLength: number): string | null;
+/**
+ * Bound, dedupe and sort gh scope labels. Sorted so two snapshots of the same
+ * machine compare equal regardless of the order gh printed them, which is what
+ * makes the "did anything change?" fingerprint in report.ts stable. A label that
+ * looks like a credential is dropped rather than masked — a scope label is a
+ * short well-known word, so an unmaskable one is not a scope.
+ */
+export declare function safeScopes(scopes: readonly string[] | null | undefined): string[];
+/** Rebuild one tool row from the closed field set. */
+export declare function sanitizeTool(tool: ToolCapability): ToolCapability;
+/** Rebuild one engine row from the closed field set. */
+export declare function sanitizeEngine(engine: EngineCapability): EngineCapability;
+/**
+ * Rebuild a whole snapshot. The ONLY function the reporter is allowed to send
+ * the output of — `recordMachineCapabilities` calls it unconditionally, even on a
+ * snapshot this package built itself, because the point is that no future probe
+ * can add a field that bypasses it.
+ *
+ * Rows for tools outside `HOST_TOOLS` and engines with a blank id are dropped:
+ * the server-side whitelist would drop them anyway, and sending them would make
+ * the local snapshot disagree with the recorded one.
+ */
+export declare function sanitizeSnapshot(snapshot: MachineCapabilitySnapshot): MachineCapabilitySnapshot;
+//# sourceMappingURL=redact.d.ts.map

package/dist/machine-capabilities/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/machine-capabilities/redact.ts"],"names":[],"mappings":"AA6BA,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,yBAAyB,EAC9B,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAkB9C,CAAC;AAEF,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAG7E;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAMf;AAOD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAWjF;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAWjE;AAED,wDAAwD;AACxD,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAYzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB,GAClC,yBAAyB,CAgB3B"}