@unbrained/pm-cli 2026.9.6 → 2026.9.8

package/dist/core/shared/author.js

@@ -1,1173 +1,2 @@
-/**
- * @module core/shared/author
- *
- * Provides shared primitives and utilities for Author.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="dfbf4eb8-1f02-5880-a70a-0e7ed9b9784a")}catch(e){}}();
-import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash } from "node:crypto";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { resolveAgentSessionContextFromSignals, } from "./agent-session-context.js";
-import { readAgentSemanticAttributionSync, } from "../session/session-state.js";
-import { isFileAbsentError } from "../fs/fs-utils.js";
-/** Stable built-in provenance dimensions understood by the default runtime. */
-export const AGENT_PROVENANCE_DIMENSIONS = [
-    "model",
-    "effort",
-    "role",
-    "topic",
-    "version",
-];
-const authorIdentityStorage = new AsyncLocalStorage();
-const harnessDetectionStorage = new AsyncLocalStorage();
-const workspaceHarnessSignalsStorage = new AsyncLocalStorage();
-/** Built-in agent descriptors evaluated before package and workspace additions. */
-export const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS = [
-    {
-        harness: "claude-code",
-        environment_keys: ["CLAUDE_CODE", "CLAUDECODE"],
-        model_environment_keys: ["ANTHROPIC_MODEL", "CLAUDE_MODEL"],
-        session_environment_keys: ["CLAUDE_CODE_SESSION_ID"],
-        provenance_environment_keys: {
-            effort: ["CLAUDE_EFFORT"],
-        },
-        provenance_resolvers: {
-            model: "claude_session_file",
-            version: "claude_session_file",
-        },
-        provenance_unavailable_dimensions: ["role", "topic"],
-        argv_markers: ["claude", "claude-code"],
-        client_names: ["claude", "claude-code", "claude code"],
-    },
-    {
-        harness: "codex",
-        environment_keys: ["CODEX_HOME", "CODEX_CI", "CODEX_THREAD_ID"],
-        model_environment_keys: ["CODEX_MODEL"],
-        session_environment_keys: ["CODEX_THREAD_ID"],
-        provenance_environment_keys: {
-            effort: ["CODEX_REASONING_EFFORT", "CODEX_EFFORT"],
-            role: ["CODEX_SESSION_ROLE"],
-        },
-        provenance_resolvers: {
-            model: "codex_session_file",
-            effort: "codex_session_file",
-            version: "ai_agent_version",
-        },
-        provenance_unavailable_dimensions: ["topic"],
-        argv_markers: ["codex"],
-        client_names: ["codex"],
-    },
-    {
-        harness: "pi",
-        environment_keys: ["PI_AGENT", "PI_CODING_AGENT"],
-        model_environment_keys: ["PI_MODEL"],
-        session_environment_keys: ["PI_SESSION_ID"],
-        provenance_unavailable_dimensions: ["effort", "role", "topic"],
-        argv_markers: ["pi"],
-        client_names: ["pi"],
-    },
-    {
-        harness: "opencode",
-        environment_keys: ["OPENCODE", "OPENCODE_SESSION_ID"],
-        model_environment_keys: ["OPENCODE_MODEL"],
-        session_environment_keys: ["OPENCODE_SESSION_ID"],
-        provenance_unavailable_dimensions: ["effort", "role", "topic"],
-        argv_markers: ["opencode"],
-        client_names: ["opencode"],
-    },
-    {
-        harness: "cursor",
-        environment_keys: ["CURSOR_AGENT", "CURSOR_TRACE_ID"],
-        model_environment_keys: ["CURSOR_MODEL"],
-        session_environment_keys: ["CURSOR_TRACE_ID"],
-        provenance_unavailable_dimensions: ["effort", "role", "topic"],
-        argv_markers: ["cursor"],
-        client_names: ["cursor"],
-    },
-    {
-        harness: "aider",
-        environment_keys: ["AIDER", "AIDER_MODEL"],
-        model_environment_keys: ["AIDER_MODEL"],
-        session_environment_keys: ["AIDER_SESSION_ID"],
-        provenance_unavailable_dimensions: ["effort", "role", "topic"],
-        argv_markers: ["aider"],
-        client_names: ["aider"],
-    },
-    {
-        harness: "gemini-cli",
-        environment_keys: ["GEMINI_CLI", "GEMINI_CLI_HOME"],
-        model_environment_keys: ["GEMINI_MODEL"],
-        session_environment_keys: ["GEMINI_CLI_SESSION_ID"],
-        provenance_unavailable_dimensions: ["effort", "role", "topic"],
-        argv_markers: ["gemini", "gemini-cli"],
-        client_names: ["gemini", "gemini-cli", "gemini cli"],
-    },
-    {
-        harness: "ci",
-        environment_keys: ["CI", "GITHUB_ACTIONS", "BUILDKITE", "GITLAB_CI"],
-        provenance_unavailable_dimensions: ["model", "effort", "role", "topic"],
-        argv_markers: [],
-        client_names: [],
-    },
-];
-const PROVENANCE_PROBE_POLICY = Object.freeze({
-    max_bytes: 1_048_576,
-    max_lines: 4_096,
-    network_access: false,
-    subprocess_access: false,
-});
-const CODEX_PROVENANCE_PROBE_POLICY = Object.freeze({
-    ...PROVENANCE_PROBE_POLICY,
-    max_bytes: 4_194_304,
-});
-const HARNESS_NAMESPACE_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
-function buildBuiltinProvenanceAdapter(descriptor) {
-    const unavailableDimensions = normalizeHarnessSignalDescriptor(descriptor).provenance_unavailable_dimensions;
-    const dimensions = new Set([
-        "model",
-        "version",
-        ...Object.keys(descriptor.provenance_environment_keys ?? {}),
-        ...Object.keys(descriptor.provenance_resolvers ?? {}),
-    ]);
-    return Object.freeze({
-        contract_version: 1,
-        adapter_version: "v1",
-        priority: 0,
-        harness: descriptor.harness,
-        descriptor,
-        supported_dimensions: Object.freeze([...dimensions].sort()),
-        native_sources: Object.freeze([
-            "environment",
-            "argv",
-            "mcp_client",
-            ...(Object.values(descriptor.provenance_resolvers ?? {}).some((resolver) => resolver?.endsWith("session_file"))
-                ? ["session_file"]
-                : []),
-        ]),
-        probe_policy: descriptor.harness === "codex"
-            ? CODEX_PROVENANCE_PROBE_POLICY
-            : PROVENANCE_PROBE_POLICY,
-        normalization: Object.freeze({
-            model_family: "v1",
-            effort: "v1",
-            preserve_raw: true,
-        }),
-        confidence: "high",
-        waivers: Object.freeze(Object.fromEntries(unavailableDimensions.map((dimension) => [
-            dimension,
-            "Harness does not expose this dimension.",
-        ]))),
-    });
-}
-/** Built-in versioned adapters for supported interactive agent harnesses. */
-export const BUILTIN_AGENT_PROVENANCE_ADAPTERS = Object.freeze(BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.filter((descriptor) => descriptor.harness !== "ci")
-    .map(buildBuiltinProvenanceAdapter)
-    .sort((left, right) => left.harness.localeCompare(right.harness)));
-const registeredAgentProvenanceAdapters = new Map();
-const registeredHarnessSignalDescriptors = new Map();
-function nonBlank(value) {
-    const trimmed = typeof value === "string" ? value.trim() : undefined;
-    return trimmed && trimmed.length > 0 ? trimmed : undefined;
-}
-function boundedUniqueStrings(values) {
-    return [
-        ...new Set((values ?? [])
-            .slice(0, 64)
-            .map((value) => value.trim())
-            .filter((value) => value.length > 0)
-            .map((value) => value.slice(0, 128))),
-    ];
-}
-function normalizeHarnessSignalDescriptor(descriptor) {
-    const harness = descriptor.harness.trim().toLowerCase();
-    if (!HARNESS_NAMESPACE_PATTERN.test(harness)) {
-        throw new Error(`Invalid harness signal descriptor namespace: ${descriptor.harness}`);
-    }
-    return {
-        harness,
-        environment_keys: boundedUniqueStrings(descriptor.environment_keys),
-        model_environment_keys: boundedUniqueStrings(descriptor.model_environment_keys),
-        session_environment_keys: boundedUniqueStrings(descriptor.session_environment_keys),
-        provenance_environment_keys: Object.fromEntries(Object.entries(descriptor.provenance_environment_keys ?? {})
-            .slice(0, 32)
-            .map(([dimension, keys]) => [
-            dimension.trim().toLowerCase().slice(0, 64),
-            boundedUniqueStrings(keys),
-        ])
-            .filter(([dimension]) => HARNESS_NAMESPACE_PATTERN.test(dimension))),
-        provenance_resolvers: Object.fromEntries(Object.entries(descriptor.provenance_resolvers ?? {})
-            .slice(0, 32)
-            .map(([dimension, resolver]) => [
-            dimension.trim().toLowerCase().slice(0, 64),
-            resolver,
-        ])
-            .filter((entry) => typeof entry[0] === "string" &&
-            HARNESS_NAMESPACE_PATTERN.test(entry[0]) &&
-            (entry[1] === "ai_agent_version" ||
-                entry[1] === "claude_session_file" ||
-                entry[1] === "codex_session_file"))),
-        provenance_unavailable_dimensions: boundedUniqueStrings(descriptor.provenance_unavailable_dimensions).map((value) => value.toLowerCase()),
-        argv_markers: boundedUniqueStrings(descriptor.argv_markers).map((value) => value.toLowerCase()),
-        client_names: boundedUniqueStrings(descriptor.client_names).map((value) => value.toLowerCase()),
-    };
-}
-const NORMALIZED_BUILTIN_HARNESS_SIGNAL_DESCRIPTORS = BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.map(normalizeHarnessSignalDescriptor);
-function descriptorEquals(left, right) {
-    return JSON.stringify(left) === JSON.stringify(right);
-}
-function literalSignalMatches(value, marker) {
-    const segments = value
-        .toLowerCase()
-        .slice(0, 512)
-        .split(/[/\\\s:=]+/u)
-        .filter((segment) => segment.length > 0);
-    return segments.includes(marker) || value.trim().toLowerCase() === marker;
-}
-function currentHarnessSignalDescriptors(localDescriptors = []) {
-    const adapterDescriptors = new Map(BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.filter((descriptor) => descriptor.harness !== "ci").map((descriptor) => [
-        descriptor.harness,
-        normalizeHarnessSignalDescriptor(descriptor),
-    ]));
-    for (const { adapter } of registeredAgentProvenanceAdapters.values()) {
-        adapterDescriptors.set(adapter.harness, normalizeHarnessSignalDescriptor(adapter.descriptor));
-    }
-    const descriptors = [
-        ...adapterDescriptors.values(),
-        ...NORMALIZED_BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.filter((descriptor) => descriptor.harness === "ci"),
-        ...[...registeredHarnessSignalDescriptors.values()].map((entry) => entry.descriptor),
-        ...(workspaceHarnessSignalsStorage.getStore()?.descriptors ?? []),
-        ...localDescriptors.map(normalizeHarnessSignalDescriptor),
-    ];
-    const seen = new Set();
-    for (const descriptor of descriptors) {
-        if (seen.has(descriptor.harness)) {
-            throw new Error(`Harness signal descriptor collision for "${descriptor.harness}"`);
-        }
-        seen.add(descriptor.harness);
-    }
-    return descriptors;
-}
-function firstEnvironmentValue(env, keys) {
-    for (const key of keys ?? []) {
-        const value = nonBlank(env[key]);
-        if (value)
-            return value.slice(0, 256);
-    }
-    return undefined;
-}
-function provenanceFromArgv(argv, dimension) {
-    if (dimension === "role") {
-        const command = argv
-            .slice(0, 8)
-            .map((token) => token.trim().toLowerCase())
-            .find((token) => ["claim", "create", "update", "close", "release", "review"].includes(token));
-        if (command === "review")
-            return "reviewer";
-        if (command)
-            return "implementer";
-    }
-    return undefined;
-}
-function provenanceFlagValue(argv, dimension) {
-    const acceptedFlags = dimension === "model"
-        ? ["--model", "--agent-model"]
-        : [`--agent-${dimension}`];
-    const tokens = argv.slice(0, 8);
-    for (let index = 0; index < tokens.length; index += 1) {
-        const token = tokens[index].slice(0, 512);
-        if (acceptedFlags.includes(token)) {
-            return nonBlank(tokens[index + 1])?.slice(0, 256);
-        }
-        const prefix = acceptedFlags.find((flag) => token.startsWith(`${flag}=`));
-        if (prefix) {
-            return nonBlank(token.slice(prefix.length + 1))?.slice(0, 256);
-        }
-    }
-    return undefined;
-}
-const AGENT_ROLE_VALUES = new Set([
-    "implementation",
-    "implementer",
-    "investigator",
-    "orchestrator",
-    "planner",
-    "release-operator",
-    "reviewer",
-]);
-function normalizeProvenanceValue(dimension, value) {
-    if (dimension !== "role" || value === undefined)
-        return value;
-    const normalized = value
-        .trim()
-        .toLowerCase()
-        .replaceAll(/[_\s]+/gu, "-");
-    return AGENT_ROLE_VALUES.has(normalized) ? normalized : undefined;
-}
-function boundedProvenanceValue(provenance, dimension) {
-    return nonBlank(provenance?.[dimension])?.slice(0, 256);
-}
-const MAX_PROVENANCE_PROBE_BYTES = 1_048_576;
-const MAX_CODEX_PROVENANCE_PROBE_BYTES = 4_194_304;
-const codexProvenanceSnapshotCache = new Map();
-const EMPTY_CODEX_PROVENANCE_SNAPSHOT = Object.freeze({});
-const claudeProvenanceSnapshotCache = new Map();
-const EMPTY_CLAUDE_PROVENANCE_SNAPSHOT = Object.freeze({});
-function asProvenanceRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value)
-        ? value
-        : undefined;
-}
-function parseClaudeProvenanceLine(line) {
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return EMPTY_CLAUDE_PROVENANCE_SNAPSHOT;
-    }
-    const record = asProvenanceRecord(parsed);
-    if (!record)
-        return EMPTY_CLAUDE_PROVENANCE_SNAPSHOT;
-    const queue = [
-        { value: record, depth: 0 },
-    ];
-    let visited = 0;
-    let model;
-    let version;
-    while (queue.length > 0 && visited < 64) {
-        const current = queue.shift();
-        visited += 1;
-        model ??= nonBlank(current.value.model)?.slice(0, 256);
-        version ??= nonBlank(current.value.version)?.slice(0, 256);
-        if (model && version)
-            break;
-        if (current.depth >= 4)
-            continue;
-        for (const value of Object.values(current.value)) {
-            const nested = asProvenanceRecord(value);
-            if (nested) {
-                queue.push({
-                    value: nested,
-                    depth: current.depth + 1,
-                });
-            }
-        }
-    }
-    return Object.freeze({ model, version });
-}
-/** Classify one candidate without following symlinks or leaking filesystem detail. */
-function claudeTranscriptCandidateStatus(candidate) {
-    try {
-        return fs.lstatSync(candidate).isFile() ? "available" : "missing";
-    }
-    catch (error) {
-        return isFileAbsentError(error) ? "missing" : "failed";
-    }
-}
-/** Resolve a bounded cross-workspace Claude transcript discovery result. */
-function discoverClaudeSessionFile(projectsRoot, session) {
-    let discovered;
-    try {
-        discovered = fs
-            .readdirSync(projectsRoot, { withFileTypes: true })
-            .filter((entry) => entry.isDirectory())
-            .sort((left, right) => left.name.localeCompare(right.name))
-            .slice(0, 512)
-            .map((entry) => {
-            const candidate = path.join(projectsRoot, entry.name, `${session}.jsonl`);
-            return {
-                candidate,
-                status: claudeTranscriptCandidateStatus(candidate),
-            };
-        });
-    }
-    catch (error) {
-        return { status: isFileAbsentError(error) ? "missing" : "failed" };
-    }
-    const matches = discovered
-        .filter(({ status }) => status === "available")
-        .map(({ candidate }) => candidate);
-    if (matches.length === 0) {
-        return {
-            status: discovered.some(({ status }) => status === "failed")
-                ? "failed"
-                : "missing",
-        };
-    }
-    if (matches.length > 1)
-        return { status: "ambiguous" };
-    return { status: "available", path: matches[0] };
-}
-/** Resolve one Claude transcript by stable session identity without exposing its path. */
-function resolveClaudeSessionFile(signals, env) {
-    const session = nonBlank(env.CLAUDE_CODE_SESSION_ID);
-    if (!session || !/^[A-Za-z0-9_-]{1,128}$/u.test(session)) {
-        return { status: "unavailable" };
-    }
-    const workspace = path.resolve(signals.cwd ?? process.cwd());
-    const encodedWorkspace = workspace.replaceAll(/[^A-Za-z0-9-]/gu, "-");
-    const projectsRoot = path.join(signals.home_dir ?? os.homedir(), ".claude", "projects");
-    const directPath = path.join(projectsRoot, encodedWorkspace, `${session}.jsonl`);
-    const explicitPath = nonBlank(signals.session_file);
-    const suppliedPath = explicitPath && path.basename(explicitPath) === `${session}.jsonl`
-        ? explicitPath
-        : undefined;
-    for (const candidate of [suppliedPath, directPath]) {
-        if (!candidate)
-            continue;
-        const status = claudeTranscriptCandidateStatus(candidate);
-        if (status === "available")
-            return { status, path: candidate };
-        if (status === "failed")
-            return { status };
-    }
-    return discoverClaudeSessionFile(projectsRoot, session);
-}
-function readClaudeSessionProvenance(dimension, signals, env) {
-    const resolution = resolveClaudeSessionFile(signals, env);
-    if (resolution.status !== "available")
-        return undefined;
-    try {
-        const file = fs.openSync(resolution.path, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
-        try {
-            const stats = fs.fstatSync(file);
-            const cacheKey = `${resolution.path}\u0000${stats.size}\u0000${stats.mtimeMs}`;
-            const cached = claudeProvenanceSnapshotCache.get(cacheKey);
-            if (cached)
-                return cached[dimension];
-            const probeLength = Math.min(stats.size, MAX_PROVENANCE_PROBE_BYTES);
-            const headLength = Math.min(probeLength, Math.ceil(probeLength / 2));
-            const tailLength = Math.min(probeLength - headLength, stats.size - headLength);
-            const head = Buffer.alloc(headLength);
-            fs.readSync(file, head, 0, headLength, 0);
-            const tail = Buffer.alloc(tailLength);
-            if (tailLength > 0) {
-                fs.readSync(file, tail, 0, tailLength, stats.size - tailLength);
-            }
-            const snapshot = {};
-            const lines = stats.size <= probeLength
-                ? Buffer.concat([head, tail]).toString("utf8").split("\n")
-                : [
-                    ...head.toString("utf8").split("\n").slice(0, 4_096),
-                    ...tail.toString("utf8").split("\n").slice(-4_096),
-                ];
-            for (const line of lines) {
-                if (line.length === 0 || line.length > 262_144)
-                    continue;
-                const parsed = parseClaudeProvenanceLine(line);
-                snapshot.model ??= parsed.model;
-                snapshot.version ??= parsed.version;
-                if (snapshot.model && snapshot.version)
-                    break;
-            }
-            const frozen = Object.freeze(snapshot);
-            claudeProvenanceSnapshotCache.clear();
-            claudeProvenanceSnapshotCache.set(cacheKey, frozen);
-            return frozen[dimension];
-        }
-        finally {
-            fs.closeSync(file);
-        }
-    }
-    catch {
-        return undefined;
-    }
-}
-function findCodexSessionFile(root, session) {
-    let visited = 0;
-    const visit = (directory, depth) => {
-        if (depth > 4 || visited >= 512)
-            return undefined;
-        let entries;
-        try {
-            entries = fs
-                .readdirSync(directory, { withFileTypes: true })
-                .sort((left, right) => right.name.localeCompare(left.name));
-        }
-        catch {
-            return undefined;
-        }
-        for (const entry of entries) {
-            visited += 1;
-            if (visited > 512)
-                return undefined;
-            const entryPath = path.join(directory, entry.name);
-            if (entry.isFile() && entry.name.endsWith(`-${session}.jsonl`)) {
-                return entryPath;
-            }
-            if (entry.isDirectory()) {
-                const found = visit(entryPath, depth + 1);
-                if (found)
-                    return found;
-            }
-        }
-        return undefined;
-    };
-    return visit(root, 0);
-}
-function codexProvenanceWindows(size) {
-    if (size <= MAX_CODEX_PROVENANCE_PROBE_BYTES) {
-        return [{ offset: 0, length: size }];
-    }
-    const halfBudget = Math.floor(MAX_CODEX_PROVENANCE_PROBE_BYTES / 2);
-    return [
-        { offset: size - halfBudget, length: halfBudget },
-        { offset: 0, length: halfBudget },
-    ];
-}
-function mergeCodexTurnContext(snapshot, line) {
-    if (line.length === 0 || line.length > 262_144)
-        return;
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return;
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        return;
-    }
-    const record = parsed;
-    if (record.type !== "turn_context")
-        return;
-    const payload = typeof record.payload === "object" && record.payload !== null
-        ? record.payload
-        : undefined;
-    snapshot.model ??= nonBlank(payload?.model)?.slice(0, 256);
-    snapshot.effort ??= nonBlank(payload?.effort)?.slice(0, 256);
-}
-function readCodexProvenanceSnapshot(file, size) {
-    const snapshot = {};
-    let linesRemaining = 4_096;
-    for (const window of codexProvenanceWindows(size)) {
-        const buffer = Buffer.alloc(window.length);
-        fs.readSync(file, buffer, 0, window.length, window.offset);
-        const lines = buffer
-            .toString("utf8")
-            .split("\n")
-            .reverse()
-            .slice(0, linesRemaining);
-        linesRemaining -= lines.length;
-        for (const line of lines) {
-            mergeCodexTurnContext(snapshot, line);
-            if (snapshot.model && snapshot.effort)
-                break;
-        }
-        if ((snapshot.model && snapshot.effort) || linesRemaining <= 0)
-            break;
-    }
-    return snapshot;
-}
-function readCodexSessionProvenance(dimension, signals, env) {
-    const session = nonBlank(env.CODEX_THREAD_ID);
-    if (!session || !/^[A-Za-z0-9_-]{1,128}$/u.test(session))
-        return undefined;
-    const sessionsRoot = path.join(signals.home_dir ?? os.homedir(), ".codex", "sessions");
-    const cacheKey = `${sessionsRoot}\0${session}`;
-    const cached = codexProvenanceSnapshotCache.get(cacheKey);
-    if (cached)
-        return cached[dimension];
-    const sessionPath = findCodexSessionFile(sessionsRoot, session);
-    if (!sessionPath) {
-        codexProvenanceSnapshotCache.set(cacheKey, EMPTY_CODEX_PROVENANCE_SNAPSHOT);
-        return undefined;
-    }
-    try {
-        const file = fs.openSync(sessionPath, "r");
-        try {
-            const size = fs.fstatSync(file).size;
-            const snapshot = readCodexProvenanceSnapshot(file, size);
-            codexProvenanceSnapshotCache.set(cacheKey, snapshot);
-            return snapshot[dimension];
-        }
-        finally {
-            fs.closeSync(file);
-        }
-    }
-    catch {
-        codexProvenanceSnapshotCache.set(cacheKey, EMPTY_CODEX_PROVENANCE_SNAPSHOT);
-        return undefined;
-    }
-}
-function resolveProvenanceProbe(dimension, signals, env, descriptor) {
-    const workspaceSignals = workspaceHarnessSignalsStorage.getStore();
-    const enabled = signals.probes_enabled !== false &&
-        workspaceSignals?.probesEnabled !== false &&
-        !["0", "false", "off"].includes(nonBlank(env.PM_AGENT_PROBES)?.toLowerCase() ?? "");
-    if (!enabled)
-        return undefined;
-    const resolver = descriptor?.provenance_resolvers[dimension];
-    if (resolver === "claude_session_file") {
-        return readClaudeSessionProvenance(dimension, signals, env);
-    }
-    if (resolver === "codex_session_file") {
-        return readCodexSessionProvenance(dimension, signals, env);
-    }
-    if (resolver === "ai_agent_version") {
-        const value = nonBlank(env.AI_AGENT);
-        if (!value ||
-            !descriptor ||
-            !literalSignalMatches(value, descriptor.harness)) {
-            return undefined;
-        }
-        const match = /(?:^|[@/\s])v?(\d+\.\d+(?:\.\d+)?(?:[-+][A-Za-z0-9.-]+)?)$/u.exec(value);
-        return match?.[1]?.slice(0, 256);
-    }
-    return undefined;
-}
-function provenanceResolverHasInput(resolver, descriptor, signals, env) {
-    if (resolver === "ai_agent_version") {
-        const value = nonBlank(env.AI_AGENT);
-        return value !== undefined &&
-            literalSignalMatches(value, descriptor.harness)
-            ? "available"
-            : "unavailable";
-    }
-    if (resolver === "codex_session_file") {
-        return nonBlank(env.CODEX_THREAD_ID) !== undefined
-            ? "available"
-            : "unavailable";
-    }
-    return resolveClaudeSessionFile(signals, env).status;
-}
-function effectiveHarnessDetectionSignals(signals) {
-    if (signals)
-        return signals;
-    return (harnessDetectionStorage.getStore() ?? {
-        env: process.env,
-        argv: process.argv,
-    });
-}
-function descriptorMatchesSignals(descriptor, env, labels, clientName) {
-    const environmentMatch = descriptor.environment_keys.some((key) => nonBlank(env[key]) !== undefined);
-    const argvMatch = descriptor.argv_markers.some((marker) => labels.some((label) => {
-        const normalizedPath = label.replaceAll("\\", "/");
-        return literalSignalMatches(normalizedPath.slice(normalizedPath.lastIndexOf("/") + 1), marker);
-    }));
-    const clientMatch = descriptor.client_names.some((name) => clientName === name || literalSignalMatches(clientName, name));
-    return environmentMatch || argvMatch || clientMatch;
-}
-function inferredProvenanceObservation(dimension, semanticAttribution) {
-    if (!semanticAttribution)
-        return undefined;
-    let value;
-    if (dimension === "topic")
-        value = semanticAttribution.topic;
-    if (dimension === "role")
-        value = semanticAttribution.role;
-    if (!value)
-        return undefined;
-    return {
-        value,
-        source: "inferred",
-        confidence: semanticAttribution.confidence,
-        rule_version: semanticAttribution.rule_version,
-        evidence: semanticAttribution.evidence,
-    };
-}
-function firstProvenanceObservation(candidates) {
-    const observed = candidates.find(([value]) => value !== undefined);
-    return observed?.[0]
-        ? { value: observed[0], source: observed[1] }
-        : undefined;
-}
-function resolveAgentProvenanceObservation(dimension, signals, env, descriptor, sessionContext, semanticAttribution) {
-    const overrideKey = `PM_AGENT_${dimension.toUpperCase().replaceAll("-", "_")}`;
-    const hostResolvedDimensions = new Set([
-        ...AGENT_PROVENANCE_DIMENSIONS,
-        ...Object.keys(descriptor?.provenance_environment_keys ?? {}),
-    ]);
-    let overrideValue;
-    let argvValue;
-    let argvFlagValue;
-    if (hostResolvedDimensions.has(dimension)) {
-        overrideValue = normalizeProvenanceValue(dimension, nonBlank(env[overrideKey])?.slice(0, 256));
-        argvFlagValue = normalizeProvenanceValue(dimension, provenanceFlagValue(signals.argv ?? [], dimension));
-        argvValue = normalizeProvenanceValue(dimension, provenanceFromArgv(signals.argv ?? [], dimension));
-    }
-    const environmentKeysByDimension = {
-        ...descriptor?.provenance_environment_keys,
-        model: descriptor?.model_environment_keys,
-    };
-    const clientProvenance = {
-        ...signals.client_info?.provenance,
-        model: signals.client_info?.model,
-    };
-    const sessionValue = boundedProvenanceValue(sessionContext?.provenance, dimension);
-    const environmentValue = normalizeProvenanceValue(dimension, firstEnvironmentValue(env, environmentKeysByDimension[dimension]));
-    const clientValue = normalizeProvenanceValue(dimension, boundedProvenanceValue(clientProvenance, dimension));
-    const hostValue = normalizeProvenanceValue(dimension, boundedProvenanceValue(signals.provenance, dimension));
-    const probeValue = resolveProvenanceProbe(dimension, signals, env, descriptor);
-    const observed = firstProvenanceObservation([
-        [overrideValue, "override"],
-        [sessionValue, "session"],
-        [argvFlagValue, "argv"],
-        [environmentValue, "environment"],
-        [clientValue, "mcp_client"],
-        [hostValue, "host"],
-        [probeValue, "probe"],
-    ]);
-    return (observed ??
-        inferredProvenanceObservation(dimension, semanticAttribution) ??
-        (argvValue ? { value: argvValue, source: "argv" } : undefined));
-}
-function resolveAgentInstance(harness, session) {
-    if (!harness || !session)
-        return undefined;
-    return createHash("sha256")
-        .update(`pm-agent-instance:v1\0${harness}\0${session}`)
-        .digest("hex")
-        .slice(0, 24);
-}
-function resolveAgentProvenance(signals, env, descriptor, sessionContext, semanticAttribution) {
-    const descriptorDimensions = Object.keys(descriptor?.provenance_environment_keys ?? {});
-    const dimensions = new Set([
-        ...AGENT_PROVENANCE_DIMENSIONS,
-        ...descriptorDimensions,
-        ...Object.keys(descriptor?.provenance_resolvers ?? {}),
-        ...Object.keys(signals.provenance ?? {}),
-        ...Object.keys(signals.client_info?.provenance ?? {}),
-        ...Object.keys(sessionContext?.provenance ?? {}),
-    ]);
-    const observations = {};
-    for (const dimension of dimensions) {
-        const observed = resolveAgentProvenanceObservation(dimension, signals, env, descriptor, sessionContext, semanticAttribution);
-        if (observed) {
-            observations[dimension] = observed;
-        }
-        else if (descriptor &&
-            (dimension !== "version" ||
-                descriptor.provenance_unavailable_dimensions.includes(dimension))) {
-            observations[dimension] = null;
-        }
-    }
-    return observations;
-}
-/**
- * Register package-provided harness signals until the returned disposer runs.
- *
- * Built-in and conflicting package namespaces are rejected deterministically.
- * Re-registering an identical package descriptor is reference counted so
- * repeated extension activation remains idempotent.
- */
-export function registerHarnessSignalDescriptors(descriptors) {
-    const normalized = descriptors.map(normalizeHarnessSignalDescriptor);
-    const builtins = new Map(NORMALIZED_BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.map((descriptor) => [
-        descriptor.harness,
-        descriptor,
-    ]));
-    const seen = new Set();
-    for (const descriptor of normalized) {
-        if (seen.has(descriptor.harness) || builtins.has(descriptor.harness)) {
-            throw new Error(`Harness signal descriptor collision for "${descriptor.harness}"`);
-        }
-        const registered = registeredHarnessSignalDescriptors.get(descriptor.harness);
-        if (registered && !descriptorEquals(registered.descriptor, descriptor)) {
-            throw new Error(`Harness signal descriptor collision for "${descriptor.harness}"`);
-        }
-        seen.add(descriptor.harness);
-    }
-    for (const descriptor of normalized) {
-        const registered = registeredHarnessSignalDescriptors.get(descriptor.harness);
-        registeredHarnessSignalDescriptors.set(descriptor.harness, {
-            descriptor,
-            registrations: (registered?.registrations ?? 0) + 1,
-        });
-    }
-    let active = true;
-    return () => {
-        if (!active)
-            return;
-        active = false;
-        for (const descriptor of normalized) {
-            const registered = registeredHarnessSignalDescriptors.get(descriptor.harness);
-            if (!registered || registered.registrations <= 1) {
-                registeredHarnessSignalDescriptors.delete(descriptor.harness);
-            }
-            else {
-                registered.registrations -= 1;
-            }
-        }
-    };
-}
-function normalizeAgentProvenanceAdapter(adapter) {
-    const descriptor = normalizeHarnessSignalDescriptor(adapter.descriptor);
-    const harness = adapter.harness.trim().toLowerCase();
-    if (adapter.contract_version !== 1) {
-        throw new Error(`Unsupported provenance adapter contract for "${harness}": ${adapter.contract_version}`);
-    }
-    if (descriptor.harness !== harness) {
-        throw new Error(`Provenance adapter harness "${harness}" does not match descriptor "${descriptor.harness}".`);
-    }
-    const adapterVersion = nonBlank(adapter.adapter_version)?.slice(0, 64);
-    if (!adapterVersion) {
-        throw new Error(`Provenance adapter "${harness}" requires a version.`);
-    }
-    if (!Number.isSafeInteger(adapter.priority)) {
-        throw new Error(`Provenance adapter "${harness}" requires an integer priority.`);
-    }
-    if (adapter.probe_policy.network_access !== false ||
-        adapter.probe_policy.subprocess_access !== false ||
-        adapter.probe_policy.max_bytes > MAX_CODEX_PROVENANCE_PROBE_BYTES ||
-        adapter.probe_policy.max_lines > 4_096) {
-        throw new Error(`Provenance adapter "${harness}" exceeds the bounded local probe policy.`);
-    }
-    return Object.freeze({
-        ...adapter,
-        adapter_version: adapterVersion,
-        harness,
-        descriptor,
-        supported_dimensions: Object.freeze(boundedUniqueStrings(adapter.supported_dimensions)
-            .map((dimension) => dimension.toLowerCase())
-            .sort()),
-        native_sources: Object.freeze([...new Set(adapter.native_sources)]),
-        probe_policy: Object.freeze({ ...adapter.probe_policy }),
-        normalization: Object.freeze({ ...adapter.normalization }),
-        ...(adapter.waivers
-            ? {
-                waivers: Object.freeze(Object.fromEntries(Object.entries(adapter.waivers)
-                    .slice(0, 32)
-                    .map(([dimension, reason]) => [
-                    dimension.slice(0, 64),
-                    reason.slice(0, 256),
-                ]))),
-            }
-            : {}),
-    });
-}
-/** Return the effective built-in or explicitly higher-priority package adapters. */
-export function listAgentProvenanceAdapters() {
-    const effective = new Map(BUILTIN_AGENT_PROVENANCE_ADAPTERS.map((adapter) => [
-        adapter.harness,
-        adapter,
-    ]));
-    for (const { adapter } of registeredAgentProvenanceAdapters.values()) {
-        effective.set(adapter.harness, adapter);
-    }
-    return Object.freeze([...effective.values()].sort((left, right) => left.harness.localeCompare(right.harness)));
-}
-/**
- * Register package adapters until disposal. Replacing a built-in requires an
- * explicitly greater priority; equal-priority ambiguity fails closed.
- */
-export function registerAgentProvenanceAdapters(adapters) {
-    const normalized = adapters.map(normalizeAgentProvenanceAdapter);
-    const builtins = new Map(BUILTIN_AGENT_PROVENANCE_ADAPTERS.map((adapter) => [
-        adapter.harness,
-        adapter,
-    ]));
-    const seen = new Set();
-    for (const adapter of normalized) {
-        if (seen.has(adapter.harness)) {
-            throw new Error(`Provenance adapter collision for "${adapter.harness}".`);
-        }
-        const builtin = builtins.get(adapter.harness);
-        if (builtin && adapter.priority <= builtin.priority) {
-            throw new Error(`Provenance adapter override for "${adapter.harness}" requires priority greater than ${builtin.priority}.`);
-        }
-        const registered = registeredAgentProvenanceAdapters.get(adapter.harness);
-        if (registered &&
-            JSON.stringify(registered.adapter) !== JSON.stringify(adapter)) {
-            throw new Error(`Provenance adapter collision for "${adapter.harness}".`);
-        }
-        seen.add(adapter.harness);
-    }
-    for (const adapter of normalized) {
-        const registered = registeredAgentProvenanceAdapters.get(adapter.harness);
-        registeredAgentProvenanceAdapters.set(adapter.harness, {
-            adapter,
-            registrations: (registered?.registrations ?? 0) + 1,
-        });
-    }
-    let active = true;
-    return () => {
-        if (!active)
-            return;
-        active = false;
-        for (const adapter of normalized) {
-            const registered = registeredAgentProvenanceAdapters.get(adapter.harness);
-            if (!registered || registered.registrations <= 1) {
-                registeredAgentProvenanceAdapters.delete(adapter.harness);
-            }
-            else {
-                registered.registrations -= 1;
-            }
-        }
-    };
-}
-/** Normalize model-family or effort vocabulary while retaining the raw value. */
-export function normalizeAgentProvenanceAdapterValue(dimension, value) {
-    const raw = value.trim().slice(0, 256);
-    let normalized = raw.toLowerCase();
-    if (dimension === "model") {
-        const family = /^(gpt-\d+(?:\.\d+)?)/u.exec(normalized)?.[1];
-        if (family)
-            normalized = family;
-    }
-    else {
-        normalized = normalized.replaceAll(/[_\s-]+/gu, "");
-        const effortAliases = {
-            minimal: "low",
-            low: "low",
-            medium: "medium",
-            high: "high",
-            xhigh: "xhigh",
-            max: "max",
-            ultra: "ultra",
-        };
-        normalized = effortAliases[normalized] ?? normalized;
-    }
-    return { raw, normalized, vocabulary: "v1" };
-}
-/** Run one invocation with host-provided detection signals available downstream. */
-export function runWithHarnessDetectionSignals(signals, callback) {
-    return harnessDetectionStorage.run(signals, callback);
-}
-/** Run one invocation with workspace-provided descriptors available downstream. */
-export function runWithWorkspaceHarnessSignalDescriptors(descriptors, callback, options = {}) {
-    const normalized = descriptors.map(normalizeHarnessSignalDescriptor);
-    currentHarnessSignalDescriptors(normalized);
-    return workspaceHarnessSignalsStorage.run({
-        descriptors: normalized,
-        probesEnabled: options.probesEnabled !== false,
-    }, callback);
-}
-/**
- * Detect structured agent provenance from bounded caller-supplied signals.
- *
- * The function is deterministic and side-effect free. Descriptor values are
- * treated as literal strings; they never execute regexes, commands, filesystem
- * traversal, or network requests.
- */
-export function detectAgentIdentity(signals) {
-    const effectiveSignals = effectiveHarnessDetectionSignals(signals);
-    const env = effectiveSignals.env ?? {};
-    const descriptors = currentHarnessSignalDescriptors(effectiveSignals.descriptors);
-    const labels = [
-        ...(effectiveSignals.argv ?? []).slice(0, 3),
-        ...(effectiveSignals.process_labels ?? []),
-    ]
-        .slice(0, 64)
-        .map((token) => token.slice(0, 512));
-    const clientName = effectiveSignals.client_info?.name.trim().toLowerCase() ?? "";
-    const descriptor = descriptors.find((candidate) => descriptorMatchesSignals(candidate, env, labels, clientName));
-    const sessionContext = resolveAgentSessionContextFromSignals(effectiveSignals, env);
-    const session = [
-        firstEnvironmentValue(env, descriptor?.session_environment_keys),
-        nonBlank(effectiveSignals.client_info?.session)?.slice(0, 256),
-    ].find((candidate) => candidate !== undefined);
-    const instance = resolveAgentInstance(descriptor?.harness, session);
-    const semanticAttribution = readAgentSemanticAttributionSync({
-        cwd: effectiveSignals.cwd ?? process.cwd(),
-        env,
-        key: instance,
-    });
-    const provenance = resolveAgentProvenance(effectiveSignals, env, descriptor, sessionContext, semanticAttribution);
-    const modelCandidate = provenance.model;
-    const entries = [
-        ["harness", descriptor?.harness],
-        ["model", modelCandidate?.value],
-        ["model_source", modelCandidate?.source],
-        ["session", session],
-        ["instance", instance],
-        ["provenance", Object.keys(provenance).length > 0 ? provenance : undefined],
-        ["episode", sessionContext.episode],
-    ];
-    return Object.fromEntries(entries.filter((entry) => entry[1] !== undefined));
-}
-/** Classify one configured resolver's privacy-safe absence outcome. */
-function provenanceResolverAbsence(resolverInput) {
-    if (resolverInput === "unavailable") {
-        return { status: "unavailable", reason: "harness_unavailable" };
-    }
-    if (resolverInput === "missing") {
-        return { status: "unavailable", reason: "resolver_input_missing" };
-    }
-    return { status: "failed", reason: "resolver_failed" };
-}
-function resolveProvenanceOutcome(dimension, identity, descriptor, signals, env, probesEnabled, invalidValue) {
-    const resolver = descriptor?.provenance_resolvers[dimension];
-    if (identity.provenance?.[dimension]) {
-        return {
-            status: "resolved",
-            ...(resolver ? { resolver } : {}),
-            rule_version: "v1",
-        };
-    }
-    if (invalidValue) {
-        return {
-            status: "unavailable",
-            reason: "invalid_value",
-            rule_version: "v1",
-        };
-    }
-    if (resolver) {
-        if (!probesEnabled) {
-            return {
-                status: "unavailable",
-                reason: "probes_disabled",
-                resolver,
-                rule_version: "v1",
-            };
-        }
-        const resolverInput = provenanceResolverHasInput(resolver, descriptor, signals, env);
-        return {
-            ...provenanceResolverAbsence(resolverInput),
-            resolver,
-            rule_version: "v1",
-        };
-    }
-    return {
-        status: descriptor?.provenance_unavailable_dimensions.includes(dimension)
-            ? "unavailable"
-            : "not_configured",
-        reason: descriptor?.provenance_unavailable_dimensions.includes(dimension)
-            ? "harness_unavailable"
-            : "resolver_not_configured",
-        rule_version: "v1",
-    };
-}
-/**
- * Diagnose provenance without exposing environment values, paths, or probe data.
- *
- * This additive SDK contract keeps legacy `detectAgentIdentity` projections
- * stable while giving health checks and history writers explicit absence states.
- */
-export function diagnoseAgentIdentity(signals) {
-    const effectiveSignals = effectiveHarnessDetectionSignals(signals);
-    const identity = detectAgentIdentity(effectiveSignals);
-    const descriptor = currentHarnessSignalDescriptors(effectiveSignals.descriptors).find((candidate) => candidate.harness === identity.harness);
-    const env = effectiveSignals.env ?? {};
-    const probesEnabled = effectiveSignals.probes_enabled !== false &&
-        workspaceHarnessSignalsStorage.getStore()?.probesEnabled !== false &&
-        !["0", "false", "off"].includes(nonBlank(env.PM_AGENT_PROBES)?.toLowerCase() ?? "");
-    const sessionContext = resolveAgentSessionContextFromSignals(effectiveSignals, env);
-    const invalidRoleValue = [
-        env.PM_AGENT_ROLE,
-        sessionContext.provenance?.role,
-        firstEnvironmentValue(env, descriptor?.provenance_environment_keys.role),
-        effectiveSignals.client_info?.provenance?.role,
-        effectiveSignals.provenance?.role,
-        provenanceFlagValue(effectiveSignals.argv ?? [], "role"),
-    ].some((candidate) => {
-        const value = nonBlank(candidate)?.slice(0, 256);
-        return (value !== undefined &&
-            normalizeProvenanceValue("role", value) === undefined);
-    });
-    const outcomes = Object.fromEntries(AGENT_PROVENANCE_DIMENSIONS.map((dimension) => [
-        dimension,
-        resolveProvenanceOutcome(dimension, identity, descriptor, effectiveSignals, env, probesEnabled, dimension === "role" && invalidRoleValue),
-    ]));
-    return { ...identity, provenance_outcomes: outcomes };
-}
-/** Reads the invocation-wide author override through the canonical environment seam. */
-export function readAuthorEnvironment() {
-    return process.env.PM_AUTHOR;
-}
-/** Updates or clears the invocation-wide author override through the canonical environment seam. */
-export function writeAuthorEnvironment(author) {
-    if (author === undefined)
-        delete process.env.PM_AUTHOR;
-    else
-        process.env.PM_AUTHOR = author;
-}
-/**
- * Detect a known agent harness from bounded, caller-supplied runtime signals.
- *
- * The function is pure: it performs no process traversal, subprocess launch,
- * network access, or telemetry emission. Hosts can therefore use it in
- * latency-sensitive mutation paths and test every detection branch directly.
- */
-export function detectHarnessIdentity(signals) {
-    return detectAgentIdentity(signals).harness;
-}
-/**
- * Resolve one mutation identity using the stable precedence contract:
- * explicit argument, `PM_AUTHOR`, configured default, detected harness, then
- * anonymous fallback.
- */
-export function resolveAuthorIdentity(candidate, fallback, signals) {
-    const effectiveSignals = effectiveHarnessDetectionSignals(signals);
-    const detected = detectAgentIdentity(effectiveSignals);
-    if (candidate !== undefined) {
-        const explicit = nonBlank(candidate);
-        return explicit
-            ? { author: explicit, source: "asserted", ...detected }
-            : { author: "unknown", source: "unknown", ...detected };
-    }
-    if (effectiveSignals.env?.PM_AUTHOR !== undefined) {
-        const environment = nonBlank(effectiveSignals.env.PM_AUTHOR);
-        return environment
-            ? { author: environment, source: "asserted", ...detected }
-            : { author: "unknown", source: "unknown", ...detected };
-    }
-    const configured = nonBlank(fallback);
-    if (configured) {
-        return { author: configured, source: "configured", ...detected };
-    }
-    if (detected.harness) {
-        return {
-            author: `harness:${detected.harness}`,
-            source: "detected",
-            ...detected,
-        };
-    }
-    return { author: "unknown", source: "unknown", ...detected };
-}
-/** Return the provenance associated with the current resolved author. */
-export function resolveHistoryAuthorSource(author) {
-    const active = authorIdentityStorage.getStore();
-    if (active?.author === author) {
-        return active.source;
-    }
-    if (author.startsWith("harness:")) {
-        return "detected";
-    }
-    return author === "unknown" ? "unknown" : "asserted";
-}
-/** Return structured agent provenance associated with the current author. */
-export function resolveHistoryAgentIdentity(author) {
-    const active = authorIdentityStorage.getStore();
-    if (active?.author !== author) {
-        return author.startsWith("harness:")
-            ? { harness: author.slice("harness:".length) }
-            : {};
-    }
-    return {
-        ...(active.harness ? { harness: active.harness } : {}),
-        ...(active.model ? { model: active.model } : {}),
-        ...(active.model_source ? { model_source: active.model_source } : {}),
-        ...(active.session ? { session: active.session } : {}),
-        ...(active.instance ? { instance: active.instance } : {}),
-        ...(active.provenance ? { provenance: active.provenance } : {}),
-        ...(active.episode ? { episode: active.episode } : {}),
-    };
-}
-/**
- * Resolve the ownership principal for an automatically detected agent.
- *
- * Human-facing authors remain stable (`harness:codex`, for example), while a
- * privacy-safe invocation fingerprint prevents two concurrent sessions of the
- * same harness from silently sharing one claim. Explicit and configured
- * authors intentionally retain their asserted principal.
- */
-export function resolveClaimPrincipal(author) {
-    const active = authorIdentityStorage.getStore();
-    return active?.author === author &&
-        active.source === "detected" &&
-        active.instance
-        ? `${author}#${active.instance}`
-        : author;
-}
-/** Resolves the effective mutation author from explicit input, environment defaults, and fallback settings. */
-export function resolveAuthor(candidate, fallback) {
-    const identity = resolveAuthorIdentity(candidate, fallback);
-    authorIdentityStorage.enterWith(identity);
-    return identity.author;
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c39d3d14-b0b5-5309-b89a-9da08e1a939a")}catch(e2){}})();import{AsyncLocalStorage}from"node:async_hooks";import{createHash}from"node:crypto";import fs from"node:fs";import os from"node:os";import path from"node:path";import{resolveAgentSessionContextFromSignals}from"./agent-session-context.js";import{readAgentSemanticAttributionSync}from"../session/session-state.js";import{isFileAbsentError}from"../fs/fs-utils.js";const AGENT_PROVENANCE_DIMENSIONS=["model","effort","role","topic","version"];const authorIdentityStorage=new AsyncLocalStorage;const harnessDetectionStorage=new AsyncLocalStorage;const workspaceHarnessSignalsStorage=new AsyncLocalStorage;const BUILTIN_HARNESS_SIGNAL_DESCRIPTORS=[{harness:"claude-code",environment_keys:["CLAUDE_CODE","CLAUDECODE"],model_environment_keys:["ANTHROPIC_MODEL","CLAUDE_MODEL"],session_environment_keys:["CLAUDE_CODE_SESSION_ID"],provenance_environment_keys:{effort:["CLAUDE_EFFORT"]},provenance_resolvers:{model:"claude_session_file",version:"claude_session_file"},provenance_unavailable_dimensions:["role","topic"],argv_markers:["claude","claude-code"],client_names:["claude","claude-code","claude code"]},{harness:"codex",environment_keys:["CODEX_HOME","CODEX_CI","CODEX_THREAD_ID"],model_environment_keys:["CODEX_MODEL"],session_environment_keys:["CODEX_THREAD_ID"],provenance_environment_keys:{effort:["CODEX_REASONING_EFFORT","CODEX_EFFORT"],role:["CODEX_SESSION_ROLE"]},provenance_resolvers:{model:"codex_session_file",effort:"codex_session_file",version:"ai_agent_version"},provenance_unavailable_dimensions:["topic"],argv_markers:["codex"],client_names:["codex"]},{harness:"pi",environment_keys:["PI_AGENT","PI_CODING_AGENT"],model_environment_keys:["PI_MODEL"],session_environment_keys:["PI_SESSION_ID"],provenance_unavailable_dimensions:["effort","role","topic"],argv_markers:["pi"],client_names:["pi"]},{harness:"opencode",environment_keys:["OPENCODE","OPENCODE_SESSION_ID"],model_environment_keys:["OPENCODE_MODEL"],session_environment_keys:["OPENCODE_SESSION_ID"],provenance_unavailable_dimensions:["effort","role","topic"],argv_markers:["opencode"],client_names:["opencode"]},{harness:"cursor",environment_keys:["CURSOR_AGENT","CURSOR_TRACE_ID"],model_environment_keys:["CURSOR_MODEL"],session_environment_keys:["CURSOR_TRACE_ID"],provenance_unavailable_dimensions:["effort","role","topic"],argv_markers:["cursor"],client_names:["cursor"]},{harness:"aider",environment_keys:["AIDER","AIDER_MODEL"],model_environment_keys:["AIDER_MODEL"],session_environment_keys:["AIDER_SESSION_ID"],provenance_unavailable_dimensions:["effort","role","topic"],argv_markers:["aider"],client_names:["aider"]},{harness:"gemini-cli",environment_keys:["GEMINI_CLI","GEMINI_CLI_HOME"],model_environment_keys:["GEMINI_MODEL"],session_environment_keys:["GEMINI_CLI_SESSION_ID"],provenance_unavailable_dimensions:["effort","role","topic"],argv_markers:["gemini","gemini-cli"],client_names:["gemini","gemini-cli","gemini cli"]},{harness:"ci",environment_keys:["CI","GITHUB_ACTIONS","BUILDKITE","GITLAB_CI"],provenance_unavailable_dimensions:["model","effort","role","topic"],argv_markers:[],client_names:[]}];const PROVENANCE_PROBE_POLICY=Object.freeze({max_bytes:1048576,max_lines:4096,network_access:false,subprocess_access:false});const CODEX_PROVENANCE_PROBE_POLICY=Object.freeze({...PROVENANCE_PROBE_POLICY,max_bytes:4194304});const HARNESS_NAMESPACE_PATTERN=/^[a-z0-9]+(?:-[a-z0-9]+)*$/u;function buildBuiltinProvenanceAdapter(descriptor){const unavailableDimensions=normalizeHarnessSignalDescriptor(descriptor).provenance_unavailable_dimensions;const dimensions=new Set(["model","version",...Object.keys(descriptor.provenance_environment_keys??{}),...Object.keys(descriptor.provenance_resolvers??{})]);return Object.freeze({contract_version:1,adapter_version:"v1",priority:0,harness:descriptor.harness,descriptor,supported_dimensions:Object.freeze([...dimensions].sort()),native_sources:Object.freeze(["environment","argv","mcp_client",...Object.values(descriptor.provenance_resolvers??{}).some(resolver=>resolver?.endsWith("session_file"))?["session_file"]:[]]),probe_policy:descriptor.harness==="codex"?CODEX_PROVENANCE_PROBE_POLICY:PROVENANCE_PROBE_POLICY,normalization:Object.freeze({model_family:"v1",effort:"v1",preserve_raw:true}),confidence:"high",waivers:Object.freeze(Object.fromEntries(unavailableDimensions.map(dimension=>[dimension,"Harness does not expose this dimension."])))})}const BUILTIN_AGENT_PROVENANCE_ADAPTERS=Object.freeze(BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.filter(descriptor=>descriptor.harness!=="ci").map(buildBuiltinProvenanceAdapter).sort((left,right)=>left.harness.localeCompare(right.harness)));const registeredAgentProvenanceAdapters=new Map;const registeredHarnessSignalDescriptors=new Map;function nonBlank(value){const trimmed=typeof value==="string"?value.trim():void 0;return trimmed&&trimmed.length>0?trimmed:void 0}function boundedUniqueStrings(values){return[...new Set((values??[]).slice(0,64).map(value=>value.trim()).filter(value=>value.length>0).map(value=>value.slice(0,128)))]}function normalizeHarnessSignalDescriptor(descriptor){const harness=descriptor.harness.trim().toLowerCase();if(!HARNESS_NAMESPACE_PATTERN.test(harness)){throw new Error(`Invalid harness signal descriptor namespace: ${descriptor.harness}`)}return{harness,environment_keys:boundedUniqueStrings(descriptor.environment_keys),model_environment_keys:boundedUniqueStrings(descriptor.model_environment_keys),session_environment_keys:boundedUniqueStrings(descriptor.session_environment_keys),provenance_environment_keys:Object.fromEntries(Object.entries(descriptor.provenance_environment_keys??{}).slice(0,32).map(([dimension,keys])=>[dimension.trim().toLowerCase().slice(0,64),boundedUniqueStrings(keys)]).filter(([dimension])=>HARNESS_NAMESPACE_PATTERN.test(dimension))),provenance_resolvers:Object.fromEntries(Object.entries(descriptor.provenance_resolvers??{}).slice(0,32).map(([dimension,resolver])=>[dimension.trim().toLowerCase().slice(0,64),resolver]).filter(entry=>typeof entry[0]==="string"&&HARNESS_NAMESPACE_PATTERN.test(entry[0])&&(entry[1]==="ai_agent_version"||entry[1]==="claude_session_file"||entry[1]==="codex_session_file"))),provenance_unavailable_dimensions:boundedUniqueStrings(descriptor.provenance_unavailable_dimensions).map(value=>value.toLowerCase()),argv_markers:boundedUniqueStrings(descriptor.argv_markers).map(value=>value.toLowerCase()),client_names:boundedUniqueStrings(descriptor.client_names).map(value=>value.toLowerCase())}}const NORMALIZED_BUILTIN_HARNESS_SIGNAL_DESCRIPTORS=BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.map(normalizeHarnessSignalDescriptor);function descriptorEquals(left,right){return JSON.stringify(left)===JSON.stringify(right)}function literalSignalMatches(value,marker){const segments=value.toLowerCase().slice(0,512).split(/[/\\\s:=]+/u).filter(segment=>segment.length>0);return segments.includes(marker)||value.trim().toLowerCase()===marker}function currentHarnessSignalDescriptors(localDescriptors=[]){const adapterDescriptors=new Map(BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.filter(descriptor=>descriptor.harness!=="ci").map(descriptor=>[descriptor.harness,normalizeHarnessSignalDescriptor(descriptor)]));for(const{adapter}of registeredAgentProvenanceAdapters.values()){adapterDescriptors.set(adapter.harness,normalizeHarnessSignalDescriptor(adapter.descriptor))}const descriptors=[...adapterDescriptors.values(),...NORMALIZED_BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.filter(descriptor=>descriptor.harness==="ci"),...[...registeredHarnessSignalDescriptors.values()].map(entry=>entry.descriptor),...workspaceHarnessSignalsStorage.getStore()?.descriptors??[],...localDescriptors.map(normalizeHarnessSignalDescriptor)];const seen=new Set;for(const descriptor of descriptors){if(seen.has(descriptor.harness)){throw new Error(`Harness signal descriptor collision for "${descriptor.harness}"`)}seen.add(descriptor.harness)}return descriptors}function firstEnvironmentValue(env,keys){for(const key of keys??[]){const value=nonBlank(env[key]);if(value)return value.slice(0,256)}return void 0}function provenanceFromArgv(argv,dimension){if(dimension==="role"){const command=argv.slice(0,8).map(token=>token.trim().toLowerCase()).find(token=>["claim","create","update","close","release","review"].includes(token));if(command==="review")return"reviewer";if(command)return"implementer"}return void 0}function provenanceFlagValue(argv,dimension){const acceptedFlags=dimension==="model"?["--model","--agent-model"]:[`--agent-${dimension}`];const tokens=argv.slice(0,8);for(let index=0;index<tokens.length;index+=1){const token=tokens[index].slice(0,512);if(acceptedFlags.includes(token)){return nonBlank(tokens[index+1])?.slice(0,256)}const prefix=acceptedFlags.find(flag=>token.startsWith(`${flag}=`));if(prefix){return nonBlank(token.slice(prefix.length+1))?.slice(0,256)}}return void 0}const AGENT_ROLE_VALUES=new Set(["implementation","implementer","investigator","orchestrator","planner","release-operator","reviewer"]);function normalizeProvenanceValue(dimension,value){if(dimension!=="role"||value===void 0)return value;const normalized=value.trim().toLowerCase().replaceAll(/[_\s]+/gu,"-");return AGENT_ROLE_VALUES.has(normalized)?normalized:void 0}function boundedProvenanceValue(provenance,dimension){return nonBlank(provenance?.[dimension])?.slice(0,256)}const MAX_PROVENANCE_PROBE_BYTES=1048576;const MAX_CODEX_PROVENANCE_PROBE_BYTES=4194304;const codexProvenanceSnapshotCache=new Map;const EMPTY_CODEX_PROVENANCE_SNAPSHOT=Object.freeze({});const claudeProvenanceSnapshotCache=new Map;const EMPTY_CLAUDE_PROVENANCE_SNAPSHOT=Object.freeze({});function asProvenanceRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)?value:void 0}function parseClaudeProvenanceLine(line){let parsed;try{parsed=JSON.parse(line)}catch{return EMPTY_CLAUDE_PROVENANCE_SNAPSHOT}const record=asProvenanceRecord(parsed);if(!record)return EMPTY_CLAUDE_PROVENANCE_SNAPSHOT;const queue=[{value:record,depth:0}];let visited=0;let model;let version;while(queue.length>0&&visited<64){const current=queue.shift();visited+=1;model??=nonBlank(current.value.model)?.slice(0,256);version??=nonBlank(current.value.version)?.slice(0,256);if(model&&version)break;if(current.depth>=4)continue;for(const value of Object.values(current.value)){const nested=asProvenanceRecord(value);if(nested){queue.push({value:nested,depth:current.depth+1})}}}return Object.freeze({model,version})}function claudeTranscriptCandidateStatus(candidate){try{return fs.lstatSync(candidate).isFile()?"available":"missing"}catch(error){return isFileAbsentError(error)?"missing":"failed"}}function discoverClaudeSessionFile(projectsRoot,session){let discovered;try{discovered=fs.readdirSync(projectsRoot,{withFileTypes:true}).filter(entry=>entry.isDirectory()).sort((left,right)=>left.name.localeCompare(right.name)).slice(0,512).map(entry=>{const candidate=path.join(projectsRoot,entry.name,`${session}.jsonl`);return{candidate,status:claudeTranscriptCandidateStatus(candidate)}})}catch(error){return{status:isFileAbsentError(error)?"missing":"failed"}}const matches=discovered.filter(({status})=>status==="available").map(({candidate})=>candidate);if(matches.length===0){return{status:discovered.some(({status})=>status==="failed")?"failed":"missing"}}if(matches.length>1)return{status:"ambiguous"};return{status:"available",path:matches[0]}}function resolveClaudeSessionFile(signals,env){const session=nonBlank(env.CLAUDE_CODE_SESSION_ID);if(!session||!/^[A-Za-z0-9_-]{1,128}$/u.test(session)){return{status:"unavailable"}}const workspace=path.resolve(signals.cwd??process.cwd());const encodedWorkspace=workspace.replaceAll(/[^A-Za-z0-9-]/gu,"-");const projectsRoot=path.join(signals.home_dir??os.homedir(),".claude","projects");const directPath=path.join(projectsRoot,encodedWorkspace,`${session}.jsonl`);const explicitPath=nonBlank(signals.session_file);const suppliedPath=explicitPath&&path.basename(explicitPath)===`${session}.jsonl`?explicitPath:void 0;for(const candidate of[suppliedPath,directPath]){if(!candidate)continue;const status=claudeTranscriptCandidateStatus(candidate);if(status==="available")return{status,path:candidate};if(status==="failed")return{status}}return discoverClaudeSessionFile(projectsRoot,session)}function readClaudeSessionProvenance(dimension,signals,env){const resolution=resolveClaudeSessionFile(signals,env);if(resolution.status!=="available")return void 0;try{const file=fs.openSync(resolution.path,fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW);try{const stats=fs.fstatSync(file);const cacheKey=`${resolution.path}\0${stats.size}\0${stats.mtimeMs}`;const cached=claudeProvenanceSnapshotCache.get(cacheKey);if(cached)return cached[dimension];const probeLength=Math.min(stats.size,MAX_PROVENANCE_PROBE_BYTES);const headLength=Math.min(probeLength,Math.ceil(probeLength/2));const tailLength=Math.min(probeLength-headLength,stats.size-headLength);const head=Buffer.alloc(headLength);fs.readSync(file,head,0,headLength,0);const tail=Buffer.alloc(tailLength);if(tailLength>0){fs.readSync(file,tail,0,tailLength,stats.size-tailLength)}const snapshot={};const lines=stats.size<=probeLength?Buffer.concat([head,tail]).toString("utf8").split("\n"):[...head.toString("utf8").split("\n").slice(0,4096),...tail.toString("utf8").split("\n").slice(-4096)];for(const line of lines){if(line.length===0||line.length>262144)continue;const parsed=parseClaudeProvenanceLine(line);snapshot.model??=parsed.model;snapshot.version??=parsed.version;if(snapshot.model&&snapshot.version)break}const frozen=Object.freeze(snapshot);claudeProvenanceSnapshotCache.clear();claudeProvenanceSnapshotCache.set(cacheKey,frozen);return frozen[dimension]}finally{fs.closeSync(file)}}catch{return void 0}}function findCodexSessionFile(root,session){let visited=0;const visit=(directory,depth)=>{if(depth>4||visited>=512)return void 0;let entries;try{entries=fs.readdirSync(directory,{withFileTypes:true}).sort((left,right)=>right.name.localeCompare(left.name))}catch{return void 0}for(const entry of entries){visited+=1;if(visited>512)return void 0;const entryPath=path.join(directory,entry.name);if(entry.isFile()&&entry.name.endsWith(`-${session}.jsonl`)){return entryPath}if(entry.isDirectory()){const found=visit(entryPath,depth+1);if(found)return found}}return void 0};return visit(root,0)}function codexProvenanceWindows(size){if(size<=MAX_CODEX_PROVENANCE_PROBE_BYTES){return[{offset:0,length:size}]}const halfBudget=Math.floor(MAX_CODEX_PROVENANCE_PROBE_BYTES/2);return[{offset:size-halfBudget,length:halfBudget},{offset:0,length:halfBudget}]}function mergeCodexTurnContext(snapshot,line){if(line.length===0||line.length>262144)return;let parsed;try{parsed=JSON.parse(line)}catch{return}if(typeof parsed!=="object"||parsed===null||Array.isArray(parsed)){return}const record=parsed;if(record.type!=="turn_context")return;const payload=typeof record.payload==="object"&&record.payload!==null?record.payload:void 0;snapshot.model??=nonBlank(payload?.model)?.slice(0,256);snapshot.effort??=nonBlank(payload?.effort)?.slice(0,256)}function readCodexProvenanceSnapshot(file,size){const snapshot={};let linesRemaining=4096;for(const window2 of codexProvenanceWindows(size)){const buffer=Buffer.alloc(window2.length);fs.readSync(file,buffer,0,window2.length,window2.offset);const lines=buffer.toString("utf8").split("\n").reverse().slice(0,linesRemaining);linesRemaining-=lines.length;for(const line of lines){mergeCodexTurnContext(snapshot,line);if(snapshot.model&&snapshot.effort)break}if(snapshot.model&&snapshot.effort||linesRemaining<=0)break}return snapshot}function readCodexSessionProvenance(dimension,signals,env){const session=nonBlank(env.CODEX_THREAD_ID);if(!session||!/^[A-Za-z0-9_-]{1,128}$/u.test(session))return void 0;const sessionsRoot=path.join(signals.home_dir??os.homedir(),".codex","sessions");const cacheKey=`${sessionsRoot}\0${session}`;const cached=codexProvenanceSnapshotCache.get(cacheKey);if(cached)return cached[dimension];const sessionPath=findCodexSessionFile(sessionsRoot,session);if(!sessionPath){codexProvenanceSnapshotCache.set(cacheKey,EMPTY_CODEX_PROVENANCE_SNAPSHOT);return void 0}try{const file=fs.openSync(sessionPath,"r");try{const size=fs.fstatSync(file).size;const snapshot=readCodexProvenanceSnapshot(file,size);codexProvenanceSnapshotCache.set(cacheKey,snapshot);return snapshot[dimension]}finally{fs.closeSync(file)}}catch{codexProvenanceSnapshotCache.set(cacheKey,EMPTY_CODEX_PROVENANCE_SNAPSHOT);return void 0}}function resolveProvenanceProbe(dimension,signals,env,descriptor){const workspaceSignals=workspaceHarnessSignalsStorage.getStore();const enabled=signals.probes_enabled!==false&&workspaceSignals?.probesEnabled!==false&&!["0","false","off"].includes(nonBlank(env.PM_AGENT_PROBES)?.toLowerCase()??"");if(!enabled)return void 0;const resolver=descriptor?.provenance_resolvers[dimension];if(resolver==="claude_session_file"){return readClaudeSessionProvenance(dimension,signals,env)}if(resolver==="codex_session_file"){return readCodexSessionProvenance(dimension,signals,env)}if(resolver==="ai_agent_version"){const value=nonBlank(env.AI_AGENT);if(!value||!descriptor||!literalSignalMatches(value,descriptor.harness)){return void 0}const match=/(?:^|[@/\s])v?(\d+\.\d+(?:\.\d+)?(?:[-+][A-Za-z0-9.-]+)?)$/u.exec(value);return match?.[1]?.slice(0,256)}return void 0}function provenanceResolverHasInput(resolver,descriptor,signals,env){if(resolver==="ai_agent_version"){const value=nonBlank(env.AI_AGENT);return value!==void 0&&literalSignalMatches(value,descriptor.harness)?"available":"unavailable"}if(resolver==="codex_session_file"){return nonBlank(env.CODEX_THREAD_ID)!==void 0?"available":"unavailable"}return resolveClaudeSessionFile(signals,env).status}function effectiveHarnessDetectionSignals(signals){if(signals)return signals;return harnessDetectionStorage.getStore()??{env:process.env,argv:process.argv}}function descriptorMatchesSignals(descriptor,env,labels,clientName){const environmentMatch=descriptor.environment_keys.some(key=>nonBlank(env[key])!==void 0);const argvMatch=descriptor.argv_markers.some(marker=>labels.some(label=>{const normalizedPath=label.replaceAll("\\","/");return literalSignalMatches(normalizedPath.slice(normalizedPath.lastIndexOf("/")+1),marker)}));const clientMatch=descriptor.client_names.some(name=>clientName===name||literalSignalMatches(clientName,name));return environmentMatch||argvMatch||clientMatch}function inferredProvenanceObservation(dimension,semanticAttribution){if(!semanticAttribution)return void 0;let value;if(dimension==="topic")value=semanticAttribution.topic;if(dimension==="role")value=semanticAttribution.role;if(!value)return void 0;return{value,source:"inferred",confidence:semanticAttribution.confidence,rule_version:semanticAttribution.rule_version,evidence:semanticAttribution.evidence}}function firstProvenanceObservation(candidates){const observed=candidates.find(([value])=>value!==void 0);return observed?.[0]?{value:observed[0],source:observed[1]}:void 0}function resolveAgentProvenanceObservation(dimension,signals,env,descriptor,sessionContext,semanticAttribution){const overrideKey=`PM_AGENT_${dimension.toUpperCase().replaceAll("-","_")}`;const hostResolvedDimensions=new Set([...AGENT_PROVENANCE_DIMENSIONS,...Object.keys(descriptor?.provenance_environment_keys??{})]);let overrideValue;let argvValue;let argvFlagValue;if(hostResolvedDimensions.has(dimension)){overrideValue=normalizeProvenanceValue(dimension,nonBlank(env[overrideKey])?.slice(0,256));argvFlagValue=normalizeProvenanceValue(dimension,provenanceFlagValue(signals.argv??[],dimension));argvValue=normalizeProvenanceValue(dimension,provenanceFromArgv(signals.argv??[],dimension))}const environmentKeysByDimension={...descriptor?.provenance_environment_keys,model:descriptor?.model_environment_keys};const clientProvenance={...signals.client_info?.provenance,model:signals.client_info?.model};const sessionValue=boundedProvenanceValue(sessionContext?.provenance,dimension);const environmentValue=normalizeProvenanceValue(dimension,firstEnvironmentValue(env,environmentKeysByDimension[dimension]));const clientValue=normalizeProvenanceValue(dimension,boundedProvenanceValue(clientProvenance,dimension));const hostValue=normalizeProvenanceValue(dimension,boundedProvenanceValue(signals.provenance,dimension));const probeValue=resolveProvenanceProbe(dimension,signals,env,descriptor);const observed=firstProvenanceObservation([[overrideValue,"override"],[sessionValue,"session"],[argvFlagValue,"argv"],[environmentValue,"environment"],[clientValue,"mcp_client"],[hostValue,"host"],[probeValue,"probe"]]);return observed??inferredProvenanceObservation(dimension,semanticAttribution)??(argvValue?{value:argvValue,source:"argv"}:void 0)}function resolveAgentInstance(harness,session){if(!harness||!session)return void 0;return createHash("sha256").update(`pm-agent-instance:v1\0${harness}\0${session}`).digest("hex").slice(0,24)}function resolveAgentProvenance(signals,env,descriptor,sessionContext,semanticAttribution){const descriptorDimensions=Object.keys(descriptor?.provenance_environment_keys??{});const dimensions=new Set([...AGENT_PROVENANCE_DIMENSIONS,...descriptorDimensions,...Object.keys(descriptor?.provenance_resolvers??{}),...Object.keys(signals.provenance??{}),...Object.keys(signals.client_info?.provenance??{}),...Object.keys(sessionContext?.provenance??{})]);const observations={};for(const dimension of dimensions){const observed=resolveAgentProvenanceObservation(dimension,signals,env,descriptor,sessionContext,semanticAttribution);if(observed){observations[dimension]=observed}else if(descriptor&&(dimension!=="version"||descriptor.provenance_unavailable_dimensions.includes(dimension))){observations[dimension]=null}}return observations}function registerHarnessSignalDescriptors(descriptors){const normalized=descriptors.map(normalizeHarnessSignalDescriptor);const builtins=new Map(NORMALIZED_BUILTIN_HARNESS_SIGNAL_DESCRIPTORS.map(descriptor=>[descriptor.harness,descriptor]));const seen=new Set;for(const descriptor of normalized){if(seen.has(descriptor.harness)||builtins.has(descriptor.harness)){throw new Error(`Harness signal descriptor collision for "${descriptor.harness}"`)}const registered=registeredHarnessSignalDescriptors.get(descriptor.harness);if(registered&&!descriptorEquals(registered.descriptor,descriptor)){throw new Error(`Harness signal descriptor collision for "${descriptor.harness}"`)}seen.add(descriptor.harness)}for(const descriptor of normalized){const registered=registeredHarnessSignalDescriptors.get(descriptor.harness);registeredHarnessSignalDescriptors.set(descriptor.harness,{descriptor,registrations:(registered?.registrations??0)+1})}let active=true;return()=>{if(!active)return;active=false;for(const descriptor of normalized){const registered=registeredHarnessSignalDescriptors.get(descriptor.harness);if(!registered||registered.registrations<=1){registeredHarnessSignalDescriptors.delete(descriptor.harness)}else{registered.registrations-=1}}}}function normalizeAgentProvenanceAdapter(adapter){const descriptor=normalizeHarnessSignalDescriptor(adapter.descriptor);const harness=adapter.harness.trim().toLowerCase();if(adapter.contract_version!==1){throw new Error(`Unsupported provenance adapter contract for "${harness}": ${adapter.contract_version}`)}if(descriptor.harness!==harness){throw new Error(`Provenance adapter harness "${harness}" does not match descriptor "${descriptor.harness}".`)}const adapterVersion=nonBlank(adapter.adapter_version)?.slice(0,64);if(!adapterVersion){throw new Error(`Provenance adapter "${harness}" requires a version.`)}if(!Number.isSafeInteger(adapter.priority)){throw new Error(`Provenance adapter "${harness}" requires an integer priority.`)}if(adapter.probe_policy.network_access!==false||adapter.probe_policy.subprocess_access!==false||adapter.probe_policy.max_bytes>MAX_CODEX_PROVENANCE_PROBE_BYTES||adapter.probe_policy.max_lines>4096){throw new Error(`Provenance adapter "${harness}" exceeds the bounded local probe policy.`)}return Object.freeze({...adapter,adapter_version:adapterVersion,harness,descriptor,supported_dimensions:Object.freeze(boundedUniqueStrings(adapter.supported_dimensions).map(dimension=>dimension.toLowerCase()).sort()),native_sources:Object.freeze([...new Set(adapter.native_sources)]),probe_policy:Object.freeze({...adapter.probe_policy}),normalization:Object.freeze({...adapter.normalization}),...adapter.waivers?{waivers:Object.freeze(Object.fromEntries(Object.entries(adapter.waivers).slice(0,32).map(([dimension,reason])=>[dimension.slice(0,64),reason.slice(0,256)])))}:{}})}function listAgentProvenanceAdapters(){const effective=new Map(BUILTIN_AGENT_PROVENANCE_ADAPTERS.map(adapter=>[adapter.harness,adapter]));for(const{adapter}of registeredAgentProvenanceAdapters.values()){effective.set(adapter.harness,adapter)}return Object.freeze([...effective.values()].sort((left,right)=>left.harness.localeCompare(right.harness)))}function registerAgentProvenanceAdapters(adapters){const normalized=adapters.map(normalizeAgentProvenanceAdapter);const builtins=new Map(BUILTIN_AGENT_PROVENANCE_ADAPTERS.map(adapter=>[adapter.harness,adapter]));const seen=new Set;for(const adapter of normalized){if(seen.has(adapter.harness)){throw new Error(`Provenance adapter collision for "${adapter.harness}".`)}const builtin=builtins.get(adapter.harness);if(builtin&&adapter.priority<=builtin.priority){throw new Error(`Provenance adapter override for "${adapter.harness}" requires priority greater than ${builtin.priority}.`)}const registered=registeredAgentProvenanceAdapters.get(adapter.harness);if(registered&&JSON.stringify(registered.adapter)!==JSON.stringify(adapter)){throw new Error(`Provenance adapter collision for "${adapter.harness}".`)}seen.add(adapter.harness)}for(const adapter of normalized){const registered=registeredAgentProvenanceAdapters.get(adapter.harness);registeredAgentProvenanceAdapters.set(adapter.harness,{adapter,registrations:(registered?.registrations??0)+1})}let active=true;return()=>{if(!active)return;active=false;for(const adapter of normalized){const registered=registeredAgentProvenanceAdapters.get(adapter.harness);if(!registered||registered.registrations<=1){registeredAgentProvenanceAdapters.delete(adapter.harness)}else{registered.registrations-=1}}}}function normalizeAgentProvenanceAdapterValue(dimension,value){const raw=value.trim().slice(0,256);let normalized=raw.toLowerCase();if(dimension==="model"){const family=/^(gpt-\d+(?:\.\d+)?)/u.exec(normalized)?.[1];if(family)normalized=family}else{normalized=normalized.replaceAll(/[_\s-]+/gu,"");const effortAliases={minimal:"low",low:"low",medium:"medium",high:"high",xhigh:"xhigh",max:"max",ultra:"ultra"};normalized=effortAliases[normalized]??normalized}return{raw,normalized,vocabulary:"v1"}}function runWithHarnessDetectionSignals(signals,callback){return harnessDetectionStorage.run(signals,callback)}function runWithWorkspaceHarnessSignalDescriptors(descriptors,callback,options={}){const normalized=descriptors.map(normalizeHarnessSignalDescriptor);currentHarnessSignalDescriptors(normalized);return workspaceHarnessSignalsStorage.run({descriptors:normalized,probesEnabled:options.probesEnabled!==false},callback)}function detectAgentIdentity(signals){const effectiveSignals=effectiveHarnessDetectionSignals(signals);const env=effectiveSignals.env??{};const descriptors=currentHarnessSignalDescriptors(effectiveSignals.descriptors);const labels=[...(effectiveSignals.argv??[]).slice(0,3),...effectiveSignals.process_labels??[]].slice(0,64).map(token=>token.slice(0,512));const clientName=effectiveSignals.client_info?.name.trim().toLowerCase()??"";const descriptor=descriptors.find(candidate=>descriptorMatchesSignals(candidate,env,labels,clientName));const sessionContext=resolveAgentSessionContextFromSignals(effectiveSignals,env);const session=[firstEnvironmentValue(env,descriptor?.session_environment_keys),nonBlank(effectiveSignals.client_info?.session)?.slice(0,256)].find(candidate=>candidate!==void 0);const instance=resolveAgentInstance(descriptor?.harness,session);const semanticAttribution=readAgentSemanticAttributionSync({cwd:effectiveSignals.cwd??process.cwd(),env,key:instance});const provenance=resolveAgentProvenance(effectiveSignals,env,descriptor,sessionContext,semanticAttribution);const modelCandidate=provenance.model;const entries=[["harness",descriptor?.harness],["model",modelCandidate?.value],["model_source",modelCandidate?.source],["session",session],["instance",instance],["provenance",Object.keys(provenance).length>0?provenance:void 0],["episode",sessionContext.episode]];return Object.fromEntries(entries.filter(entry=>entry[1]!==void 0))}function provenanceResolverAbsence(resolverInput){if(resolverInput==="unavailable"){return{status:"unavailable",reason:"harness_unavailable"}}if(resolverInput==="missing"){return{status:"unavailable",reason:"resolver_input_missing"}}return{status:"failed",reason:"resolver_failed"}}function resolveProvenanceOutcome(dimension,identity,descriptor,signals,env,probesEnabled,invalidValue){const resolver=descriptor?.provenance_resolvers[dimension];if(identity.provenance?.[dimension]){return{status:"resolved",...resolver?{resolver}:{},rule_version:"v1"}}if(invalidValue){return{status:"unavailable",reason:"invalid_value",rule_version:"v1"}}if(resolver){if(!probesEnabled){return{status:"unavailable",reason:"probes_disabled",resolver,rule_version:"v1"}}const resolverInput=provenanceResolverHasInput(resolver,descriptor,signals,env);return{...provenanceResolverAbsence(resolverInput),resolver,rule_version:"v1"}}return{status:descriptor?.provenance_unavailable_dimensions.includes(dimension)?"unavailable":"not_configured",reason:descriptor?.provenance_unavailable_dimensions.includes(dimension)?"harness_unavailable":"resolver_not_configured",rule_version:"v1"}}function diagnoseAgentIdentity(signals){const effectiveSignals=effectiveHarnessDetectionSignals(signals);const identity=detectAgentIdentity(effectiveSignals);const descriptor=currentHarnessSignalDescriptors(effectiveSignals.descriptors).find(candidate=>candidate.harness===identity.harness);const env=effectiveSignals.env??{};const probesEnabled=effectiveSignals.probes_enabled!==false&&workspaceHarnessSignalsStorage.getStore()?.probesEnabled!==false&&!["0","false","off"].includes(nonBlank(env.PM_AGENT_PROBES)?.toLowerCase()??"");const sessionContext=resolveAgentSessionContextFromSignals(effectiveSignals,env);const invalidRoleValue=[env.PM_AGENT_ROLE,sessionContext.provenance?.role,firstEnvironmentValue(env,descriptor?.provenance_environment_keys.role),effectiveSignals.client_info?.provenance?.role,effectiveSignals.provenance?.role,provenanceFlagValue(effectiveSignals.argv??[],"role")].some(candidate=>{const value=nonBlank(candidate)?.slice(0,256);return value!==void 0&&normalizeProvenanceValue("role",value)===void 0});const outcomes=Object.fromEntries(AGENT_PROVENANCE_DIMENSIONS.map(dimension=>[dimension,resolveProvenanceOutcome(dimension,identity,descriptor,effectiveSignals,env,probesEnabled,dimension==="role"&&invalidRoleValue)]));return{...identity,provenance_outcomes:outcomes}}function readAuthorEnvironment(){return process.env.PM_AUTHOR}function writeAuthorEnvironment(author){if(author===void 0)delete process.env.PM_AUTHOR;else process.env.PM_AUTHOR=author}function detectHarnessIdentity(signals){return detectAgentIdentity(signals).harness}function resolveAuthorIdentity(candidate,fallback,signals){const effectiveSignals=effectiveHarnessDetectionSignals(signals);const detected=detectAgentIdentity(effectiveSignals);if(candidate!==void 0){const explicit=nonBlank(candidate);return explicit?{author:explicit,source:"asserted",...detected}:{author:"unknown",source:"unknown",...detected}}if(effectiveSignals.env?.PM_AUTHOR!==void 0){const environment=nonBlank(effectiveSignals.env.PM_AUTHOR);return environment?{author:environment,source:"asserted",...detected}:{author:"unknown",source:"unknown",...detected}}const configured=nonBlank(fallback);if(configured){return{author:configured,source:"configured",...detected}}if(detected.harness){return{author:`harness:${detected.harness}`,source:"detected",...detected}}return{author:"unknown",source:"unknown",...detected}}function resolveHistoryAuthorSource(author){const active=authorIdentityStorage.getStore();if(active?.author===author){return active.source}if(author.startsWith("harness:")){return"detected"}return author==="unknown"?"unknown":"asserted"}function resolveHistoryAgentIdentity(author){const active=authorIdentityStorage.getStore();if(active?.author!==author){return author.startsWith("harness:")?{harness:author.slice("harness:".length)}:{}}return{...active.harness?{harness:active.harness}:{},...active.model?{model:active.model}:{},...active.model_source?{model_source:active.model_source}:{},...active.session?{session:active.session}:{},...active.instance?{instance:active.instance}:{},...active.provenance?{provenance:active.provenance}:{},...active.episode?{episode:active.episode}:{}}}function resolveClaimPrincipal(author){const active=authorIdentityStorage.getStore();return active?.author===author&&active.source==="detected"&&active.instance?`${author}#${active.instance}`:author}function resolveAuthor(candidate,fallback){const identity=resolveAuthorIdentity(candidate,fallback);authorIdentityStorage.enterWith(identity);return identity.author}export{AGENT_PROVENANCE_DIMENSIONS,BUILTIN_AGENT_PROVENANCE_ADAPTERS,BUILTIN_HARNESS_SIGNAL_DESCRIPTORS,detectAgentIdentity,detectHarnessIdentity,diagnoseAgentIdentity,listAgentProvenanceAdapters,normalizeAgentProvenanceAdapterValue,readAuthorEnvironment,registerAgentProvenanceAdapters,registerHarnessSignalDescriptors,resolveAuthor,resolveAuthorIdentity,resolveClaimPrincipal,resolveHistoryAgentIdentity,resolveHistoryAuthorSource,runWithHarnessDetectionSignals,runWithWorkspaceHarnessSignalDescriptors,writeAuthorEnvironment};
 //# sourceMappingURL=author.js.map
-//# debugId=dfbf4eb8-1f02-5880-a70a-0e7ed9b9784a