@ttfw/envoi 1.0.0

package/dist/lib/lock.js

@@ -0,0 +1,254 @@
+/**
+ * Lock mechanism for preventing concurrent envoi runs.
+ *
+ * Implements crash-safe lock acquisition with boot_id tracking to enable
+ * safe reclaim of stale locks after crashes or reboots.
+ */
+import { execSync } from 'node:child_process';
+import { hostname } from 'node:os';
+import { unlink } from 'node:fs/promises';
+import { atomicWriteJson, atomicReadJson, AtomicFsError } from './fs.js';
+/**
+ * Error thrown when a lock is already held by another process.
+ */
+export class LockHeldError extends Error {
+    lockPath;
+    holder;
+    constructor(message, lockPath, holder) {
+        super(message);
+        this.lockPath = lockPath;
+        this.holder = holder;
+        this.name = 'LockHeldError';
+    }
+}
+/**
+ * Error thrown when a lock file is corrupt or malformed.
+ */
+export class LockCorruptError extends Error {
+    lockPath;
+    constructor(message, lockPath) {
+        super(message);
+        this.lockPath = lockPath;
+        this.name = 'LockCorruptError';
+    }
+}
+/** Cached boot ID to avoid repeated system calls */
+let cachedBootId = null;
+/**
+ * Gets a unique identifier for the current boot session.
+ *
+ * On Linux, reads /proc/sys/kernel/random/boot_id.
+ * On macOS, uses system uptime + hostname as a fingerprint since macOS
+ * doesn't have boot_id but uptime.boot_time is stable per boot.
+ *
+ * The result is cached for the lifetime of the process.
+ *
+ * @returns A string uniquely identifying the current boot session
+ */
+export function getBootId() {
+    if (cachedBootId !== null) {
+        return cachedBootId;
+    }
+    const platform = process.platform;
+    if (platform === 'linux') {
+        try {
+            // Linux provides a unique boot ID
+            const { readFileSync } = require('node:fs');
+            const bootId = readFileSync('/proc/sys/kernel/random/boot_id', 'utf-8').trim();
+            cachedBootId = bootId;
+            return bootId;
+        }
+        catch {
+            // Fall through to fallback
+        }
+    }
+    if (platform === 'darwin') {
+        try {
+            // macOS: use boot time from sysctl
+            const output = execSync('sysctl -n kern.boottime', { encoding: 'utf-8' });
+            // Output format: { sec = 1234567890, usec = 123456 } ...
+            const match = output.match(/sec\s*=\s*(\d+)/);
+            if (match) {
+                const bootTime = match[1];
+                cachedBootId = `${hostname()}-${bootTime}`;
+                return cachedBootId;
+            }
+        }
+        catch {
+            // Fall through to fallback
+        }
+    }
+    // Fallback: use process start time as a rough approximation
+    // This is less reliable but better than nothing
+    const startTime = Date.now() - (process.uptime() * 1000);
+    cachedBootId = `${hostname()}-${Math.floor(startTime / 1000)}`;
+    return cachedBootId;
+}
+/**
+ * Checks if a process with the given PID is currently running.
+ *
+ * Uses process.kill(pid, 0) which checks for process existence
+ * without actually sending a signal.
+ *
+ * @param pid - The process ID to check
+ * @returns true if the process is running, false otherwise
+ */
+export function isPidRunning(pid) {
+    try {
+        // Signal 0 doesn't send anything, just checks if process exists
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // ESRCH = no such process, EPERM = exists but no permission
+        if (error instanceof Error && 'code' in error) {
+            const code = error.code;
+            if (code === 'EPERM') {
+                // Process exists but we don't have permission to signal it
+                return true;
+            }
+        }
+        return false;
+    }
+}
+/**
+ * Determines if a lock is stale and can be reclaimed.
+ *
+ * A lock is considered stale if:
+ * - The holding process is no longer running, OR
+ * - The boot_id differs from the current boot (system has rebooted)
+ *
+ * @param lock - The lock information to check
+ * @returns true if the lock is stale and can be reclaimed
+ */
+export function isLockStale(lock) {
+    // If boot_id differs, the system has rebooted - lock is definitely stale
+    if (lock.boot_id !== getBootId()) {
+        return true;
+    }
+    // Same boot session - check if the process is still running
+    return !isPidRunning(lock.pid);
+}
+/**
+ * Validates that a parsed value is a valid LockInfo object.
+ *
+ * @param lockPath - Path to the lock file (for error messages)
+ * @param value - The parsed JSON value to validate
+ * @throws {LockCorruptError} If the value is not a valid LockInfo
+ */
+function validateLockShape(lockPath, value) {
+    const remediation = `Delete the lock file at ${lockPath} and retry.`;
+    // Must be an object (not null, not array)
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new LockCorruptError(`Lock file has invalid structure (expected object, got ${value === null ? 'null' : Array.isArray(value) ? 'array' : typeof value}). ${remediation}`, lockPath);
+    }
+    const obj = value;
+    // pid must be integer > 0
+    if (typeof obj.pid !== 'number' || !Number.isInteger(obj.pid) || obj.pid <= 0) {
+        throw new LockCorruptError(`Lock file has invalid pid (expected integer > 0, got ${JSON.stringify(obj.pid)}). ${remediation}`, lockPath);
+    }
+    // started_at must be non-empty string
+    if (typeof obj.started_at !== 'string' || obj.started_at === '') {
+        throw new LockCorruptError(`Lock file has invalid started_at (expected non-empty string, got ${JSON.stringify(obj.started_at)}). ${remediation}`, lockPath);
+    }
+    // boot_id must be non-empty string
+    if (typeof obj.boot_id !== 'string' || obj.boot_id === '') {
+        throw new LockCorruptError(`Lock file has invalid boot_id (expected non-empty string, got ${JSON.stringify(obj.boot_id)}). ${remediation}`, lockPath);
+    }
+}
+/**
+ * Acquires a lock by creating a lock file atomically.
+ *
+ * If a lock already exists:
+ * - If stale (process dead or different boot), reclaims it with a warning
+ * - If held by an active process, throws LockHeldError
+ *
+ * @param lockPath - Path to the lock file
+ * @returns The lock information that was written
+ * @throws {LockHeldError} If the lock is held by another active process
+ * @throws {LockCorruptError} If the lock file is corrupt or malformed
+ * @throws {AtomicFsError} If the lock file cannot be written
+ */
+export async function acquireLock(lockPath) {
+    // Check if lock file exists
+    let existingLock = null;
+    try {
+        const rawValue = await atomicReadJson(lockPath);
+        validateLockShape(lockPath, rawValue);
+        existingLock = rawValue;
+    }
+    catch (error) {
+        // Re-throw LockCorruptError as-is
+        if (error instanceof LockCorruptError) {
+            throw error;
+        }
+        if (error instanceof AtomicFsError) {
+            const cause = error.cause;
+            // File doesn't exist - no lock, proceed
+            if (cause && 'code' in cause && cause.code === 'ENOENT') {
+                // No lock file exists
+            }
+            else if (cause instanceof SyntaxError) {
+                // JSON parse error - corrupt lock file
+                const remediation = `Delete the lock file at ${lockPath} and retry.`;
+                throw new LockCorruptError(`Lock file contains invalid JSON. ${remediation}`, lockPath);
+            }
+            else {
+                // Real error (I/O issue, permission denied, etc.)
+                throw error;
+            }
+        }
+        else {
+            // Unknown error, rethrow
+            throw error;
+        }
+    }
+    if (existingLock) {
+        if (isLockStale(existingLock)) {
+            // Lock is stale - log warning and reclaim
+            console.warn(`Reclaiming stale lock from PID ${existingLock.pid} (started_at: ${existingLock.started_at}, boot_id: ${existingLock.boot_id})`);
+        }
+        else {
+            // Lock is held by an active process
+            throw new LockHeldError(`Lock is held by PID ${existingLock.pid} (started_at: ${existingLock.started_at})`, lockPath, existingLock);
+        }
+    }
+    // Create new lock
+    const lockInfo = {
+        pid: process.pid,
+        started_at: new Date().toISOString(),
+        boot_id: getBootId(),
+    };
+    await atomicWriteJson(lockPath, lockInfo);
+    return lockInfo;
+}
+/**
+ * Releases a lock by deleting the lock file.
+ *
+ * Only releases the lock if it belongs to the current process.
+ * Silently succeeds if the lock doesn't exist or belongs to another process.
+ *
+ * @param lockPath - Path to the lock file
+ */
+export async function releaseLock(lockPath) {
+    try {
+        // Read current lock to verify ownership
+        const lock = await atomicReadJson(lockPath);
+        // Only delete if we own the lock
+        if (lock.pid === process.pid && lock.boot_id === getBootId()) {
+            await unlink(lockPath);
+        }
+    }
+    catch (error) {
+        // Lock doesn't exist or can't be read - nothing to release
+        if (error instanceof AtomicFsError) {
+            const cause = error.cause;
+            if (cause && 'code' in cause && cause.code === 'ENOENT') {
+                // File doesn't exist - already released
+                return;
+            }
+        }
+        // For other errors, also silently succeed - lock cleanup shouldn't fail the process
+    }
+}
+//# sourceMappingURL=lock.js.map

package/dist/lib/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/lib/lock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAEzE;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IACA;IAHlB,YACE,OAAe,EACC,QAAgB,EAChB,MAAgB;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAU;QAGhC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IAFlB,YACE,OAAe,EACC,QAAgB;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,aAAQ,GAAR,QAAQ,CAAQ;QAGhC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,oDAAoD;AACpD,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS;IACvB,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAY,YAAY,CAAC,iCAAiC,EAAE,OAAO,CAAY,CAAC,IAAI,EAAE,CAAC;YACnG,YAAY,GAAG,MAAM,CAAC;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1E,yDAAyD;YACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1B,YAAY,GAAG,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3C,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,gDAAgD;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,YAAY,GAAG,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;IAC/D,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,gEAAgE;QAChE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4DAA4D;QAC5D,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,2DAA2D;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,IAAc;IACxC,yEAAyE;IACzE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAC5D,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAAc;IACzD,MAAM,WAAW,GAAG,2BAA2B,QAAQ,aAAa,CAAC;IAErE,0CAA0C;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CACxB,yDAAyD,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,WAAW,EAAE,EACnJ,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,0BAA0B;IAC1B,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,gBAAgB,CACxB,wDAAwD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,WAAW,EAAE,EAClG,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,WAAW,EAAE,EACrH,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,gBAAgB,CACxB,iEAAiE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,WAAW,EAAE,EAC/G,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,4BAA4B;IAC5B,IAAI,YAAY,GAAoB,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAU,QAAQ,CAAC,CAAC;QACzD,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,YAAY,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kCAAkC;QAClC,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,wCAAwC;YACxC,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnF,sBAAsB;YACxB,CAAC;iBAAM,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACxC,uCAAuC;gBACvC,MAAM,WAAW,GAAG,2BAA2B,QAAQ,aAAa,CAAC;gBACrE,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,WAAW,EAAE,EACjD,QAAQ,CACT,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,kDAAkD;gBAClD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;aAAM,CAAC;YACN,yBAAyB;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,0CAA0C;YAC1C,OAAO,CAAC,IAAI,CACV,kCAAkC,YAAY,CAAC,GAAG,iBAAiB,YAAY,CAAC,UAAU,cAAc,YAAY,CAAC,OAAO,GAAG,CAChI,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,IAAI,aAAa,CACrB,uBAAuB,YAAY,CAAC,GAAG,iBAAiB,YAAY,CAAC,UAAU,GAAG,EAClF,QAAQ,EACR,YAAY,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,QAAQ,GAAa;QACzB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,SAAS,EAAE;KACrB,CAAC;IAEF,MAAM,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAW,QAAQ,CAAC,CAAC;QAEtD,iCAAiC;QACjC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,EAAE,CAAC;YAC7D,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2DAA2D;QAC3D,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnF,wCAAwC;gBACxC,OAAO;YACT,CAAC;QACH,CAAC;QACD,oFAAoF;IACtF,CAAC;AACH,CAAC"}

package/dist/lib/migration.d.ts

@@ -0,0 +1,9 @@
+import type { EnvoiConfig } from '../types/config.js';
+interface MigrationResult {
+    config: EnvoiConfig;
+    configPath: string;
+    migrated: boolean;
+}
+export declare function migrateLegacyLayoutIfNeeded(configPath: string, config: EnvoiConfig): Promise<MigrationResult>;
+export {};
+//# sourceMappingURL=migration.d.ts.map

package/dist/lib/migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.d.ts","sourceRoot":"","sources":["../../src/lib/migration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAStD,UAAU,eAAe;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAkDD,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,eAAe,CAAC,CA0B1B"}

package/dist/lib/migration.js

@@ -0,0 +1,74 @@
+import { access, rename } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { atomicWriteJson } from './fs.js';
+import { CONFIG_FILE_NAME, LEGACY_WORKSPACE_DIR_NAME, PRODUCT_NAME, WORKSPACE_DIR_NAME, isLegacyConfigPath, } from './branding.js';
+async function exists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function rewriteString(value, oldWorkspace, newWorkspace) {
+    if (value === oldWorkspace)
+        return newWorkspace;
+    if (value.startsWith(`${oldWorkspace}/`)) {
+        return `${newWorkspace}/${value.slice(oldWorkspace.length + 1)}`;
+    }
+    if (value.startsWith('relais/')) {
+        return `envoi/${value.slice('relais/'.length)}`;
+    }
+    return value.replace(/\brelais\//g, 'envoi/');
+}
+function rewriteValue(value, oldWorkspace, newWorkspace) {
+    if (typeof value === 'string') {
+        return rewriteString(value, oldWorkspace, newWorkspace);
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => rewriteValue(entry, oldWorkspace, newWorkspace));
+    }
+    if (value && typeof value === 'object') {
+        const output = {};
+        for (const [key, entry] of Object.entries(value)) {
+            output[key] = rewriteValue(entry, oldWorkspace, newWorkspace);
+        }
+        return output;
+    }
+    return value;
+}
+function buildMigratedConfig(config) {
+    const oldWorkspace = config.workspace_dir || LEGACY_WORKSPACE_DIR_NAME;
+    const newWorkspace = oldWorkspace === LEGACY_WORKSPACE_DIR_NAME ? WORKSPACE_DIR_NAME : oldWorkspace;
+    const rewritten = rewriteValue(config, oldWorkspace, newWorkspace);
+    return {
+        ...rewritten,
+        product_name: PRODUCT_NAME.toLowerCase(),
+        workspace_dir: newWorkspace,
+    };
+}
+export async function migrateLegacyLayoutIfNeeded(configPath, config) {
+    if (!isLegacyConfigPath(configPath)) {
+        return { config, configPath, migrated: false };
+    }
+    const repoRoot = dirname(configPath);
+    const targetConfigPath = join(repoRoot, CONFIG_FILE_NAME);
+    const migratedConfig = buildMigratedConfig(config);
+    if (config.workspace_dir === LEGACY_WORKSPACE_DIR_NAME) {
+        const legacyWorkspacePath = join(repoRoot, LEGACY_WORKSPACE_DIR_NAME);
+        const newWorkspacePath = join(repoRoot, WORKSPACE_DIR_NAME);
+        if ((await exists(legacyWorkspacePath)) && !(await exists(newWorkspacePath))) {
+            await rename(legacyWorkspacePath, newWorkspacePath);
+        }
+    }
+    if (!(await exists(targetConfigPath))) {
+        await atomicWriteJson(targetConfigPath, migratedConfig);
+    }
+    return {
+        config: migratedConfig,
+        configPath: targetConfigPath,
+        migrated: true,
+    };
+}
+//# sourceMappingURL=migration.js.map

package/dist/lib/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/lib/migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAQvB,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,YAAoB,EAAE,YAAoB;IAC9E,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,YAAoB,EAAE,YAAoB;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAmB;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,IAAI,yBAAyB,CAAC;IACvE,MAAM,YAAY,GAAG,YAAY,KAAK,yBAAyB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC;IACpG,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAgB,CAAC;IAClF,OAAO;QACL,GAAG,SAAS;QACZ,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE;QACxC,aAAa,EAAE,YAAY;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,UAAkB,EAClB,MAAmB;IAEnB,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,aAAa,KAAK,yBAAyB,EAAE,CAAC;QACvD,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,eAAe,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC"}

package/dist/lib/paths.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Path helpers for workspace-relative files.
+ *
+ * Config paths may be expressed either:
+ * - relative to `workspace_dir` (e.g. "prompts/orchestrator.user.txt"), OR
+ * - already prefixed with `workspace_dir` (e.g. "envoi/prompts/orchestrator.user.txt")
+ *
+ * We support both forms for backwards compatibility.
+ */
+/**
+ * Resolves a config path into a filesystem path.
+ *
+ * If `p` is absolute, returns it as-is.
+ * If `p` already starts with `${workspaceDir}/`, returns it as-is.
+ * Otherwise returns `join(workspaceDir, p)`.
+ */
+export declare function resolveInWorkspace(workspaceDir: string, p: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/lib/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAO1E"}

package/dist/lib/paths.js

@@ -0,0 +1,27 @@
+/**
+ * Path helpers for workspace-relative files.
+ *
+ * Config paths may be expressed either:
+ * - relative to `workspace_dir` (e.g. "prompts/orchestrator.user.txt"), OR
+ * - already prefixed with `workspace_dir` (e.g. "envoi/prompts/orchestrator.user.txt")
+ *
+ * We support both forms for backwards compatibility.
+ */
+import { isAbsolute, join } from 'node:path';
+/**
+ * Resolves a config path into a filesystem path.
+ *
+ * If `p` is absolute, returns it as-is.
+ * If `p` already starts with `${workspaceDir}/`, returns it as-is.
+ * Otherwise returns `join(workspaceDir, p)`.
+ */
+export function resolveInWorkspace(workspaceDir, p) {
+    if (isAbsolute(p))
+        return p;
+    const normalized = p.replace(/^[.][/]/, '');
+    if (normalized === workspaceDir || normalized.startsWith(`${workspaceDir}/`)) {
+        return normalized;
+    }
+    return join(workspaceDir, normalized);
+}
+//# sourceMappingURL=paths.js.map

package/dist/lib/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,CAAS;IAChE,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC;QAC7E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC"}

package/dist/lib/preflight.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Preflight checks for determining if a tick can safely start.
+ *
+ * Runs a series of checks and returns a PreflightResult indicating
+ * whether execution can proceed or is blocked.
+ */
+import type { EnvoiConfig } from '../types/config.js';
+import type { PreflightResult } from '../types/preflight.js';
+/**
+ * Runs all preflight checks to determine if a tick can safely start.
+ *
+ * Checks are run in order, returning immediately on BLOCKED:
+ * 1. Git repo exists (if config.runner.require_git)
+ * 2. Worktree is clean (no uncommitted changes)
+ * 3. Cleanup .tmp files under config.workspace_dir
+ * 4. Check history size (vs config.history.max_mb)
+ * 5. Budget check (placeholder - returns warning for now)
+ *
+ * @param config - The Envoi configuration
+ * @returns PreflightResult indicating success or blocked state
+ *
+ * @example
+ * ```typescript
+ * const result = await runPreflight(config);
+ * if (!result.ok) {
+ *   console.error(`Blocked: ${result.blocked_code}: ${result.blocked_reason}`);
+ *   process.exit(1);
+ * }
+ * console.log(`Preflight passed, base commit: ${result.base_commit}`);
+ * ```
+ */
+export declare function runPreflight(config: EnvoiConfig): Promise<PreflightResult>;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/lib/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/lib/preflight.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,uBAAuB,CAAC;AAuE1E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CA2HhF"}

package/dist/lib/preflight.js

@@ -0,0 +1,177 @@
+/**
+ * Preflight checks for determining if a tick can safely start.
+ *
+ * Runs a series of checks and returns a PreflightResult indicating
+ * whether execution can proceed or is blocked.
+ */
+import { stat, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { cleanupTmpFiles, isGlobPatternSafe } from './fs.js';
+import { isGitRepo, isWorktreeCleanExcluding, getHeadCommit } from './git.js';
+import { readWorkspaceState } from './workspace_state.js';
+import { resolveInWorkspace } from './paths.js';
+/**
+ * Creates a blocked PreflightResult with the given code and reason.
+ */
+function blocked(code, reason, warnings = []) {
+    return {
+        ok: false,
+        blocked_code: code,
+        blocked_reason: reason,
+        warnings,
+        base_commit: null,
+    };
+}
+/**
+ * Creates a successful PreflightResult.
+ */
+function success(baseCommit, warnings = []) {
+    return {
+        ok: true,
+        blocked_code: null,
+        blocked_reason: null,
+        warnings,
+        base_commit: baseCommit,
+    };
+}
+/**
+ * Calculates the total size of a directory in bytes.
+ *
+ * @param dirPath - Path to the directory
+ * @returns Total size in bytes, or 0 if directory doesn't exist
+ */
+async function getDirectorySize(dirPath) {
+    let totalSize = 0;
+    try {
+        const entries = await readdir(dirPath, { withFileTypes: true });
+        for (const entry of entries) {
+            const entryPath = join(dirPath, entry.name);
+            if (entry.isFile()) {
+                try {
+                    const stats = await stat(entryPath);
+                    totalSize += stats.size;
+                }
+                catch {
+                    // Skip files we can't stat
+                }
+            }
+            else if (entry.isDirectory()) {
+                // Recursively calculate subdirectory size
+                totalSize += await getDirectorySize(entryPath);
+            }
+        }
+    }
+    catch {
+        // Directory doesn't exist or can't be read
+        return 0;
+    }
+    return totalSize;
+}
+/**
+ * Runs all preflight checks to determine if a tick can safely start.
+ *
+ * Checks are run in order, returning immediately on BLOCKED:
+ * 1. Git repo exists (if config.runner.require_git)
+ * 2. Worktree is clean (no uncommitted changes)
+ * 3. Cleanup .tmp files under config.workspace_dir
+ * 4. Check history size (vs config.history.max_mb)
+ * 5. Budget check (placeholder - returns warning for now)
+ *
+ * @param config - The Envoi configuration
+ * @returns PreflightResult indicating success or blocked state
+ *
+ * @example
+ * ```typescript
+ * const result = await runPreflight(config);
+ * if (!result.ok) {
+ *   console.error(`Blocked: ${result.blocked_code}: ${result.blocked_reason}`);
+ *   process.exit(1);
+ * }
+ * console.log(`Preflight passed, base commit: ${result.base_commit}`);
+ * ```
+ */
+export async function runPreflight(config) {
+    const warnings = [];
+    let baseCommit = null;
+    // 1. Check if git repo exists (if required)
+    if (config.runner.require_git) {
+        if (!isGitRepo()) {
+            return blocked('BLOCKED_MISSING_CONFIG', 'Not inside a git repository (require_git is enabled)');
+        }
+        // 2. Check if worktree is clean (excluding runner-owned files)
+        const worktreeStatus = isWorktreeCleanExcluding(config.runner.runner_owned_globs);
+        if (!worktreeStatus.clean) {
+            return blocked('BLOCKED_DIRTY_WORKTREE', `Git worktree has uncommitted changes: ${worktreeStatus.dirtyFiles.join(', ')}`);
+        }
+        // Get base commit for tracking changes
+        try {
+            baseCommit = getHeadCommit();
+        }
+        catch (error) {
+            return blocked('BLOCKED_MISSING_CONFIG', `Failed to get HEAD commit: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    // 3. Validate delete_tmp_glob pattern if configured
+    const deleteGlob = config.runner.crash_cleanup?.delete_tmp_glob;
+    if (deleteGlob && deleteGlob.trim() !== '') {
+        const globSafety = isGlobPatternSafe(deleteGlob);
+        if (!globSafety.safe) {
+            return blocked('BLOCKED_CRASH_RECOVERY_REQUIRED', `Unsafe delete_tmp_glob pattern: ${globSafety.reason}`);
+        }
+    }
+    // 4. Cleanup .tmp files (crash artifacts)
+    try {
+        const deleted = await cleanupTmpFiles(config.workspace_dir);
+        if (deleted.length > 0) {
+            warnings.push(`Cleaned up ${deleted.length} stale .tmp file(s): ${deleted.join(', ')}`);
+        }
+    }
+    catch (error) {
+        // If cleanup fails, it might indicate a crash recovery issue
+        // For now, just add a warning - the directory might not exist yet
+        warnings.push(`Could not cleanup tmp files in ${config.workspace_dir}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    // 4. Check history size vs cap
+    if (config.history.enabled) {
+        const historyPath = resolveInWorkspace(config.workspace_dir, config.history.dir);
+        const historySizeBytes = await getDirectorySize(historyPath);
+        const historySizeMb = historySizeBytes / (1024 * 1024);
+        const maxMb = config.history.max_mb;
+        if (historySizeMb >= maxMb) {
+            return blocked('BLOCKED_HISTORY_CAP_CLEANUP_REQUIRED', `History directory (${historySizeMb.toFixed(2)} MB) exceeds cap (${maxMb} MB). Manual cleanup required.`);
+        }
+        // Warn if approaching limit (>80%)
+        const warnThreshold = maxMb * 0.8;
+        if (historySizeMb >= warnThreshold) {
+            warnings.push(`History size (${historySizeMb.toFixed(2)} MB) is approaching cap (${maxMb} MB)`);
+        }
+    }
+    // 5. Budget hard-cap check
+    // Read workspace state and check if any budget exceeds its per-milestone cap
+    try {
+        const state = await readWorkspaceState(config.workspace_dir);
+        const caps = config.budgets.per_milestone;
+        if (state.budgets.ticks >= caps.max_ticks) {
+            return blocked('BLOCKED_BUDGET_CAP', `Tick budget exceeded: ${state.budgets.ticks} >= ${caps.max_ticks}`);
+        }
+        if (state.budgets.orchestrator_calls >= caps.max_orchestrator_calls) {
+            return blocked('BLOCKED_BUDGET_CAP', `Orchestrator call budget exceeded: ${state.budgets.orchestrator_calls} >= ${caps.max_orchestrator_calls}`);
+        }
+        if (state.budgets.builder_calls >= caps.max_builder_calls) {
+            return blocked('BLOCKED_BUDGET_CAP', `Builder call budget exceeded: ${state.budgets.builder_calls} >= ${caps.max_builder_calls}`);
+        }
+        if (state.budgets.verify_runs >= caps.max_verify_runs) {
+            return blocked('BLOCKED_BUDGET_CAP', `Verify run budget exceeded: ${state.budgets.verify_runs} >= ${caps.max_verify_runs}`);
+        }
+        // Add warning if approaching any limit
+        if (state.budget_warning) {
+            warnings.push('Budget warning: approaching limit on one or more budget categories');
+        }
+    }
+    catch (error) {
+        // If we can't read state, add warning but don't block
+        warnings.push(`Could not read workspace state for budget check: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return success(baseCommit, warnings);
+}
+//# sourceMappingURL=preflight.js.map

package/dist/lib/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/lib/preflight.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD;;GAEG;AACH,SAAS,OAAO,CACd,IAAiB,EACjB,MAAc,EACd,WAAqB,EAAE;IAEvB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,MAAM;QACtB,QAAQ;QACR,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,OAAO,CAAC,UAAyB,EAAE,WAAqB,EAAE;IACjE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,QAAQ;QACR,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAe;IAC7C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5C,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;oBACpC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,0CAA0C;gBAC1C,SAAS,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;QAC3C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAmB;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,4CAA4C;IAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,OAAO,OAAO,CACZ,wBAAwB,EACxB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC1B,OAAO,OAAO,CACZ,wBAAwB,EACxB,yCAAyC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC;YACH,UAAU,GAAG,aAAa,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CACZ,wBAAwB,EACxB,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC;IAChE,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,OAAO,CACZ,iCAAiC,EACjC,mCAAmC,UAAU,CAAC,MAAM,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,MAAM,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6DAA6D;QAC7D,kEAAkE;QAClE,QAAQ,CAAC,IAAI,CACX,kCAAkC,MAAM,CAAC,aAAa,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpH,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjF,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,gBAAgB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAEpC,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;YAC3B,OAAO,OAAO,CACZ,sCAAsC,EACtC,sBAAsB,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,KAAK,gCAAgC,CACzG,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,aAAa,GAAG,KAAK,GAAG,GAAG,CAAC;QAClC,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CACX,iBAAiB,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,KAAK,MAAM,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;QAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,OAAO,CACZ,oBAAoB,EACpB,yBAAyB,KAAK,CAAC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,SAAS,EAAE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACpE,OAAO,OAAO,CACZ,oBAAoB,EACpB,sCAAsC,KAAK,CAAC,OAAO,CAAC,kBAAkB,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAC3G,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC1D,OAAO,OAAO,CACZ,oBAAoB,EACpB,iCAAiC,KAAK,CAAC,OAAO,CAAC,aAAa,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACtD,OAAO,OAAO,CACZ,oBAAoB,EACpB,+BAA+B,KAAK,CAAC,OAAO,CAAC,WAAW,OAAO,IAAI,CAAC,eAAe,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sDAAsD;QACtD,QAAQ,CAAC,IAAI,CAAC,oDAAoD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC"}

package/dist/lib/prompt_budget.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Prompt budgeting helpers to keep context payloads bounded and deterministic.
+ */
+export interface TruncatePromptSectionResult {
+    text: string;
+    truncated: boolean;
+    originalChars: number;
+}
+/**
+ * Truncates a prompt section to a max size with a deterministic marker.
+ *
+ * Strategy:
+ * - keep the beginning (usually most structural context)
+ * - keep the tail (usually latest status/error detail)
+ * - insert a deterministic marker between both
+ */
+export declare function truncatePromptSection(sectionName: string, value: string, maxChars: number): TruncatePromptSectionResult;
+//# sourceMappingURL=prompt_budget.d.ts.map

package/dist/lib/prompt_budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt_budget.d.ts","sourceRoot":"","sources":["../../src/lib/prompt_budget.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,2BAA2B,CA0B7B"}