@vibedgc/sdk 0.6.4

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Mohit Kalra
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,53 @@
+# @vibedgc/sdk
+
+Node client for the DGC coding harness. It starts a managed `dgc serve` child with an isolated
+HOME and speaks editor protocol v14. Version 0.6.4 pairs with DGC CLI 0.43.4. Node 22 or newer.
+
+The package is attached to the GitHub release `sdk-v0.6.4` as `vibedgc-sdk-0.6.4.tgz`. It is not
+on the npm registry yet.
+
+```bash
+npm install https://github.com/OpenPeach-ai/dgc/releases/download/sdk-v0.6.4/vibedgc-sdk-0.6.4.tgz
+```
+
+```js
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { DGC } from "@vibedgc/sdk";
+
+const dgc = new DGC({
+  stateDir: mkdtempSync(join(tmpdir(), "dgc-sdk-")),
+  model: process.env.DGC_MODEL,          // for example "qwen3:8b"
+  baseUrl: process.env.DGC_BASE_URL,     // for example "http://127.0.0.1:11434/v1"
+});
+try {
+  const session = await dgc.session({
+    cwd: process.cwd(),
+    permissions: { mode: "plan", unhandled: "deny" },
+  });
+  const result = await session.run("Summarize this repository in two sentences.");
+  console.log(result.status, result.finalText);
+} finally {
+  await dgc.close();
+}
+```
+
+The SDK needs a DGC CLI (0.43.4 or newer). It uses `DGC_PYTHON` when set, else the installed
+`dgc` launcher (on `PATH` or `~/.local/bin/dgc`, where `curl -fsSL https://vibedgc.com/install.sh | bash`
+puts it), else `python3 -m dgc`. Pass `runtime: [...]` to choose explicitly.
+
+Each session runs with a private, freshly written config: nothing left in `stateDir` is merged,
+the workspace cannot grant itself capabilities (`trustWorkspace: true` opts in), the provider key
+never enters the runtime's environment, and a `policy` (tool, path, network and shell limits) is
+enforced by the runtime for that session only, in every permission mode. Every error is a `DGCError` subclass (`DGCConfigError`,
+`DGCRuntimeError`, `DGCProtocolError`, `DGCCommandRejectedError`, `DGCTimeoutError`,
+`DGCUnsupportedError`). Times are milliseconds: `run(prompt, { timeoutMs: null })` has no limit,
+and `{ signal }` takes an `AbortSignal` that cancels the run.
+
+The runtime child sees only basic variables (`PATH`, locale, terminal, temp and certificate
+locations), the isolated HOME, `apiKey` and `extraEnv`. Pass `inheritEnv: ["NAME"]` (or `true`)
+to hand it more of your environment.
+
+Full reference: [docs/SDK.md](https://github.com/OpenPeach-ai/dgc/blob/sdk-v0.6.4/docs/SDK.md).
+Licensed under Apache-2.0.

package/dist/audit.d.ts

@@ -0,0 +1,16 @@
+export declare const REDACTED = "[redacted]";
+/** Whether a key or variable name conventionally carries a credential. */
+export declare function sensitiveName(name: unknown): boolean;
+/** Mask this exact value in every later audit row (the provider key passed to DGC). */
+export declare function rememberSecret(value: unknown): void;
+/** Remove known secret values and high-confidence credential syntax from one string. */
+export declare function redactText(value: unknown, secrets?: Iterable<string>): string;
+/** Redact a JSON-like value: credential-named keys lose their scalar values; strings are scrubbed. */
+export declare function redact(value: unknown): unknown;
+export declare class AuditLog {
+    readonly directory: string;
+    constructor(directory: string);
+    pathFor(sessionId: string): string;
+    append(sessionId: string, runId: string, kind: string, payload: Record<string, unknown>, doRedact?: boolean): void;
+    export(sessionId?: string, redactOutput?: boolean): Array<Record<string, unknown>>;
+}

package/dist/audit.js

@@ -0,0 +1,179 @@
+/**
+ * Run audit log with secret redaction. Stored in the isolated stateDir, never the host ~/.dgc.
+ * Mirrors sdk/python/dgc_sdk/audit.py.
+ *
+ * Files are owner-only (0600 in a 0700 directory). Redaction removes the same high-confidence
+ * credential shapes DGC removes from its own transcripts (provider and forge tokens, JWTs, PEM
+ * private keys, `Authorization` headers, credential-named JSON/env/flag values, URL userinfo),
+ * plus the exact values of credential-named variables in this process's environment and any
+ * secret the SDK was given (the provider `apiKey`).
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { appendPrivate, privateDir } from "./state.js";
+export const REDACTED = "[redacted]";
+const MIN_EXACT_SECRET = 8;
+const MAX_SECRET_VALUES = 256;
+const SAFE_PLACEHOLDERS = new Set([
+    "ollama", "sk-local", "lm-studio", "none", "null", "undefined", "password",
+    "changeme", "example", "placeholder",
+]);
+// Key names that carry credentials (`max_tokens` / `token_estimate` are not).
+const COUNT_NAME = /(?:^|[_-])tokens?[_-](?:estimate|count|budget|limit|usage|used)(?:$|[_-])/i;
+const SENSITIVE_NAME = new RegExp("(?:^|[_-])(?:api[_-]?key|access[_-]?key(?:[_-]?id)?|"
+    + "secret[_-]?(?:access[_-]?)?key|access[_-]?token|refresh[_-]?token|auth[_-]?token|"
+    + "session[_-]?token|oauth[_-]?token|id[_-]?token|token|password|passwd|passphrase|"
+    + "client[_-]?secret|private[_-]?key|credentials?|secret|authorization|cookie)(?:$|[_-])", "i");
+const AUTH_HEADER = /(\b(?:proxy-)?authorization\s*[:=]\s*(?:bearer|basic|token)?\s*)([^\s"'`,;}{\]]{4,})/gim;
+const BEARER = /(\bbearer\s+)([A-Za-z0-9._~+/=-]{8,})/gi;
+const HEADER_KEY = /(\bx-(?:api|auth)-(?:key|token)\s*[:=]\s*)(\S{4,})/gim;
+const JSON_SECRET = new RegExp("([\"']?[A-Za-z0-9_-]*(?:api[_-]?key|access[_-]?token|refresh[_-]?token|auth[_-]?token|"
+    + "session[_-]?token|oauth[_-]?token|token|password|passwd|passphrase|client[_-]?secret|"
+    + "secret[_-]?(?:access[_-]?)?key|private[_-]?key|credential|secret)[\"']?\\s*:\\s*)"
+    + "([\"'])([^\\r\\n]*?)(\\2)", "gi");
+// `NAME=value` / `name: value` lines (.env, YAML, shell), bare names included. A value that is
+// code reading the secret (`config.get(...)`, `os.environ["..."]`) is left alone.
+const ASSIGN_SECRET = new RegExp("(\\b[A-Za-z0-9_]*(?:API_KEY|APIKEY|ACCESS_KEY_ID|SECRET_ACCESS_KEY|SECRET_KEY|"
+    + "ACCESS_TOKEN|REFRESH_TOKEN|AUTH_TOKEN|SESSION_TOKEN|OAUTH_TOKEN|TOKEN|PASSWORD|PASSWD|"
+    + "PASSPHRASE|CLIENT_SECRET|PRIVATE_KEY|CREDENTIAL|SECRET)\\s*[:=]\\s*[\"']?)"
+    + "(?![A-Za-z_][A-Za-z0-9_.]*[(\\[])"
+    + "([^\\s\"'`;,]{4,})", "gim");
+const FLAG_SECRET = new RegExp("(\\B--(?:api[_-]?key|access[_-]?token|refresh[_-]?token|auth[_-]?token|"
+    + "session[_-]?token|token|password|client[_-]?secret|secret[_-]?key|credential)"
+    + "(?:=|\\s+))([^\\s\"'`,;]{4,})", "gi");
+const URL_CREDENTIAL = /(\b[a-z][a-z0-9+.-]*:\/\/)([^\s/@:]+):([^\s/@]+)@/gi;
+const PREFIX_TOKEN = new RegExp("\\b(?:sk-(?:ant-|proj-|svcacct-|or-)?[A-Za-z0-9_-]{12,}|"
+    + "github_pat_[A-Za-z0-9_]{12,}|gh[opusr]_[A-Za-z0-9]{12,}|glpat-[A-Za-z0-9_-]{12,}|"
+    + "xox[abeprs]-[A-Za-z0-9-]{10,}|(?:AKIA|ASIA)[A-Z0-9]{12,}|AIza[0-9A-Za-z_-]{30,}|"
+    + "(?:sk|rk|pk)_(?:live|test)_[0-9A-Za-z]{12,}|npm_[A-Za-z0-9]{30,}|hf_[A-Za-z0-9]{30,}|"
+    + "pypi-[A-Za-z0-9_-]{30,})\\b", "gi");
+const JWT = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g;
+const PRIVATE_KEY = /-----BEGIN (?:[A-Z0-9 ]+ )?PRIVATE KEY(?: BLOCK)?-----[\s\S]*?-----END (?:[A-Z0-9 ]+ )?PRIVATE KEY(?: BLOCK)?-----/g;
+const MARKER = "\u0000DGC-SDK-REDACTED\u0000";
+const EXTRA_SECRETS = new Set();
+let ENV_SECRETS = null;
+function usableSecret(value) {
+    if (typeof value !== "string")
+        return null;
+    const text = value.trim();
+    if (text.length < MIN_EXACT_SECRET || text.length > 16_384
+        || SAFE_PLACEHOLDERS.has(text.toLowerCase()) || text.includes("\u0000")) {
+        return null;
+    }
+    return text;
+}
+/** Whether a key or variable name conventionally carries a credential. */
+export function sensitiveName(name) {
+    const text = String(name ?? "");
+    return SENSITIVE_NAME.test(text) && !COUNT_NAME.test(text);
+}
+/** Mask this exact value in every later audit row (the provider key passed to DGC). */
+export function rememberSecret(value) {
+    const usable = usableSecret(value);
+    if (usable !== null && EXTRA_SECRETS.size < MAX_SECRET_VALUES)
+        EXTRA_SECRETS.add(usable);
+}
+function knownSecrets() {
+    if (ENV_SECRETS === null) {
+        const found = [];
+        for (const [name, value] of Object.entries(process.env).slice(0, 4096)) {
+            const usable = usableSecret(value);
+            if (usable !== null && sensitiveName(name)) {
+                found.push(usable);
+                if (found.length >= MAX_SECRET_VALUES)
+                    break;
+            }
+        }
+        ENV_SECRETS = found;
+    }
+    return [...new Set([...ENV_SECRETS, ...EXTRA_SECRETS])]
+        .sort((a, b) => b.length - a.length || (a < b ? -1 : a > b ? 1 : 0));
+}
+/** Remove known secret values and high-confidence credential syntax from one string. */
+export function redactText(value, secrets = []) {
+    let text = String(value ?? "").split(REDACTED).join(MARKER);
+    for (const secret of [...knownSecrets(), ...secrets]) {
+        const usable = usableSecret(secret);
+        if (usable)
+            text = text.split(usable).join(MARKER);
+    }
+    text = text.replace(PRIVATE_KEY, MARKER);
+    text = text.replace(URL_CREDENTIAL, (_m, scheme) => scheme + MARKER + "@");
+    text = text.replace(AUTH_HEADER, (_m, head) => head + MARKER);
+    text = text.replace(BEARER, (_m, head) => head + MARKER);
+    text = text.replace(HEADER_KEY, (_m, head) => head + MARKER);
+    text = text.replace(JSON_SECRET, (_m, head, open, _v, close) => head + open + MARKER + close);
+    text = text.replace(ASSIGN_SECRET, (_m, head) => head + MARKER);
+    text = text.replace(FLAG_SECRET, (_m, head) => head + MARKER);
+    text = text.replace(PREFIX_TOKEN, MARKER);
+    text = text.replace(JWT, MARKER);
+    return text.split(MARKER).join(REDACTED);
+}
+/** Redact a JSON-like value: credential-named keys lose their scalar values; strings are scrubbed. */
+export function redact(value) {
+    if (typeof value === "string")
+        return redactText(value);
+    if (Array.isArray(value))
+        return value.slice(0, 80).map(redact);
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [key, item] of Object.entries(value)) {
+            if (sensitiveName(key) && (typeof item === "string" || typeof item === "number")) {
+                out[key] = REDACTED;
+            }
+            else {
+                out[key] = redact(item);
+            }
+        }
+        return out;
+    }
+    if (value === null || value === undefined || typeof value === "number" || typeof value === "boolean") {
+        return value ?? null;
+    }
+    return redactText(String(value).slice(0, 2000));
+}
+function stem(sessionId) {
+    const cleaned = [...(sessionId || "unknown")]
+        .map((ch) => (/[A-Za-z0-9_-]/.test(ch) ? ch : "_")).join("").slice(0, 80);
+    return cleaned || "unknown";
+}
+export class AuditLog {
+    directory;
+    constructor(directory) {
+        this.directory = privateDir(directory);
+    }
+    pathFor(sessionId) {
+        return join(this.directory, `${stem(sessionId)}.jsonl`);
+    }
+    append(sessionId, runId, kind, payload, doRedact = true) {
+        const row = {
+            ts: Date.now() / 1000,
+            session_id: sessionId,
+            run_id: runId,
+            type: kind,
+            payload: doRedact ? redact(payload) : payload,
+        };
+        appendPrivate(this.pathFor(sessionId), JSON.stringify(row) + "\n");
+    }
+    export(sessionId, redactOutput = true) {
+        const paths = sessionId
+            ? [this.pathFor(sessionId)]
+            : (existsSync(this.directory) ? readdirSync(this.directory).filter((name) => name.endsWith(".jsonl"))
+                .sort().map((name) => join(this.directory, name)) : []);
+        const rows = [];
+        for (const path of paths) {
+            if (!existsSync(path))
+                continue;
+            for (const line of readFileSync(path, "utf8").split("\n")) {
+                if (!line.trim())
+                    continue;
+                try {
+                    const row = JSON.parse(line);
+                    rows.push(redactOutput ? redact(row) : row);
+                }
+                catch { /* skip a torn line */ }
+            }
+        }
+        return rows;
+    }
+}

package/dist/changes.d.ts

@@ -0,0 +1,26 @@
+import type { FileChange } from "./types.ts";
+export type FileState = {
+    mtimeNs: bigint;
+    size: number;
+    mode: number;
+    content: Uint8Array | null;
+};
+export type Snapshot = Map<string, FileState>;
+/**
+ * The bytes of a regular file (up to the text limit), or null. O_NONBLOCK: a workspace path
+ * swapped for a FIFO would otherwise block the open, and the whole process, forever. O_NOFOLLOW
+ * keeps a symlink from redirecting the read.
+ */
+export declare function readRegular(path: string): Uint8Array | null;
+/** relpath -> state. Bounded to the session cwd, not a parent git tree. No symlink is followed. */
+export declare function snapshotWorkspace(root: string | null, exclude?: readonly string[], keepContent?: boolean): Snapshot;
+/** Unified hunks (3 lines of context) for two line lists, in difflib's format. */
+export declare function unifiedHunks(a: string[], b: string[]): string[];
+/** A `git apply`-able diff for one text file, or "" when either side is not text. */
+export declare function unifiedDiff(rel: string, kind: FileChange["kind"], before: string | null, after: string | null, modeBefore: number, modeAfter: number): string;
+/**
+ * Changes from `before` to `after` (a snapshot taken when the run's last turn ended; a fresh one
+ * when omitted). With `after` given, its kept content is used, so edits a later turn made in the
+ * meantime are not attributed to this run.
+ */
+export declare function diffWorkspace(root: string | null, before: Snapshot, exclude?: readonly string[], afterSnapshot?: Snapshot | null): FileChange[];