@xenosystem/acp-agent 0.1.1

package/dist/index.js

@@ -0,0 +1,83 @@
+/**
+ * @xenosystem/acp-agent — XENO-owned ACP agent-side stdio endpoint.
+ *
+ * The inverse of `@xenosystem/acp-core` (the ACP *client*). Answers ACP v1 agent methods over stdio
+ * and runs as an external ACP-compatible subprocess:
+ *
+ *   node packages/agent/dist/cli.js agent --provider fixture
+ *
+ * XACP-005+ adds a provider-adapter foundation: a typed `Provider` contract, registry, event
+ * model, error taxonomy, and safety validator. Runnable paths today are the fixture plus
+ * approval-gated `xeno-local`, `claude-local`, and `codex-local`; Gemini/OpenCode/Kimi/GLM/Hermes stay
+ * blocked placeholders. ACP mode keeps stdout JSON-RPC-only.
+ */
+// ACP server + wire types
+export { normalizeAgentPromptBlocks, normalizeXenoSystemPrompt, startAcpAgent, XENO_CHOOSE_DIRECTORY_METHOD, XENO_CHOOSE_WORKSPACE_PLACEMENT_METHOD, XENO_CONTEXT_META_KEY, XENO_META_KEY, } from "./acpAgentServer.js";
+export { SessionStore } from "./sessionStore.js";
+export { createStdioServer, logStderr } from "./stdioJsonRpc.js";
+export { AcpError, JSONRPC } from "./errors.js";
+export { VERSION, AGENT_NAME, AGENT_TITLE, ACP_PROTOCOL_VERSION } from "./version.js";
+// Provider-adapter foundation (XACP-005)
+export { ProviderRegistry, createDefaultRegistry, createPlaceholderDefinitions, } from "./providers/providerRegistry.js";
+export { buildProviderDiscoverySummary, defaultOnlyModelDiscovery, isSafeProviderModelId, providerDisplayName, resolveProviderModelDiscovery, staticModelDiscovery, validateProviderModelSelection, } from "./providers/providerDiscovery.js";
+export { discoverCodexCliModels, parseCodexModelCatalog, } from "./providers/codexModelCatalog.js";
+export { createFixtureProviderDefinition, FIXTURE_CAPABILITIES, FIXTURE_FINAL_TEXT, } from "./providers/fixtureProvider.js";
+export { createXenoLocalDefinition, emitXenoLocalStream, xenoLocalAdapterCommand, XENO_LOCAL_ID, XENO_LOCAL_CAPABILITIES, XENO_LOCAL_FINAL_TEXT, } from "./providers/xenoLocalProvider.js";
+export { createClaudeLocalDefinition, claudeLocalCommand, renderPromptText, stableClaudeSessionUuid, CLAUDE_LOCAL_ID, CLAUDE_LOCAL_DEFAULT_EXECUTABLE, CLAUDE_LOCAL_CAPABILITIES, CLAUDE_LOCAL_ENV_ALLOWLIST_KEYS, CLAUDE_LOCAL_ENV_BLOCKLIST_KEYS, } from "./providers/claudeLocalProvider.js";
+export { parseClaudeStreamJson, } from "./providers/claudeStreamJsonParser.js";
+export { CODEX_HOST_REQUEST_CLOSE_TAG, CODEX_HOST_REQUEST_OPEN_TAG, parseCodexExecJson, } from "./providers/codexExecJsonParser.js";
+export { createCodexLocalDefinition, codexLocalCommand, renderCodexPromptText, CODEX_LOCAL_ID, CODEX_LOCAL_DEFAULT_EXECUTABLE, CODEX_LOCAL_CAPABILITIES, CODEX_LOCAL_ENV_ALLOWLIST_KEYS, CODEX_LOCAL_ENV_BLOCKLIST_KEYS, } from "./providers/codexLocalProvider.js";
+export { validateProviderSafety, } from "./providers/providerSafety.js";
+export { providerEventToAcpUpdate, createEventFactory, isTerminalEvent, } from "./providers/providerEvents.js";
+export { ProviderError, ProviderConfigurationError, ProviderAuthRequiredError, ProviderRateLimitError, ProviderUnavailableError, ProviderTimeoutError, ProviderCancelledError, ProviderProtocolError, ProviderSafetyViolationError, ProviderNotImplementedError, ProviderInternalError, buildProviderAuthFailureDiagnostic, } from "./providers/providerErrors.js";
+// Network/Auth/Egress safety layer (XACP-006)
+export { evaluateProviderSafety, isGateAllowed, } from "./security/capabilityGate.js";
+export { validateProviderAuthPolicy, validateSecretReference, summarizeAuthPolicy, NO_AUTH_POLICY, } from "./security/authPolicy.js";
+export { validateUrlAgainstEgressPolicy, isHostAllowed, validateHost, normalizeHost, isLocalhost, isPrivateHost, summarizeEgressPolicy, NO_EGRESS_POLICY, } from "./security/egressPolicy.js";
+export { redactSecretLikeText, redactSecretLikeValue, redactEnvRecord, looksSecretLike } from "./security/redaction.js";
+export { buildProviderDiagnostic } from "./security/securityDiagnostics.js";
+export { SecretStoreError, createUnavailableSecretStore, createMemorySecretStore, } from "./security/secretStore.js";
+export { buildSecretBindingReview, parseSecretBindingArg, } from "./security/secretBinding.js";
+// Provider policy config + manual approvals (XACP-007)
+export { loadProviderPolicyConfig, getPolicyEntry, applyPolicyToDefinition, stripJsonc, } from "./config/providerPolicyConfig.js";
+export { validateProviderPolicyConfig, } from "./config/providerPolicySchema.js";
+export { hashProviderDefinition, hashProviderPolicy } from "./config/providerPolicyHash.js";
+export { ProviderApprovalStore, createApprovalRecord, } from "./config/providerApprovalStore.js";
+export { isApprovalCurrent, } from "./config/providerApprovalTypes.js";
+export { resolveProviderStatus, approvalDecisionsFor, } from "./config/providerRunnability.js";
+export { buildPolicyReview } from "./config/providerPolicyDiagnostics.js";
+// Provider sandbox execution layer (XACP-008)
+export { createProviderSandboxContext, } from "./sandbox/providerSandbox.js";
+export { SandboxError } from "./sandbox/sandboxErrors.js";
+export { createSandboxAudit } from "./sandbox/providerSandboxAudit.js";
+export { createSandboxNetwork } from "./sandbox/sandboxNetwork.js";
+export { createSandboxSecrets } from "./sandbox/sandboxSecrets.js";
+export { createSandboxFilesystem } from "./sandbox/sandboxFilesystem.js";
+export { createSandboxTerminal } from "./sandbox/sandboxTerminal.js";
+export { createSandboxCancellation } from "./sandbox/sandboxCancellation.js";
+export { createSandboxDiagnostics } from "./sandbox/providerSandboxDiagnostics.js";
+// Minimal provider process supervisor (XACP-010) — a process boundary for FUTURE adapters.
+// NOT a sandbox: network/filesystem are explicitly NOT enforced. Ships no real provider.
+export { createProviderProcessSupervisor, } from "./process/providerProcessSupervisor.js";
+export { validateProviderProcessConfig, VALIDATION_BOUNDS, } from "./process/providerProcessValidation.js";
+export { buildProviderEnv, envKeyList, redactedEnvForAudit, } from "./process/providerProcessEnvironment.js";
+export { createTempWorkspace, useExistingWorkspace, redactWorkspace, } from "./process/providerProcessWorkspace.js";
+export { BoundedCapture } from "./process/providerProcessOutput.js";
+export { createProviderProcessAudit } from "./process/providerProcessAudit.js";
+export { buildProcessDiagnostics, minimalSupervisorEnforcement, enforcementSummaryLines, } from "./process/providerProcessDiagnostics.js";
+export { ProviderProcessError, } from "./process/providerProcessErrors.js";
+export { MINIMAL_SUPERVISOR_ENFORCEMENT, } from "./process/providerProcessTypes.js";
+// Provider adapter TEST harness (XACP-011) — proves the future adapter seam with a harmless,
+// XENO-owned fixture adapter. No real provider, no network, no secret load. Not in default registry.
+export { runAdapterPrompt } from "./adapters/adapterProcessHarness.js";
+export { parseAdapterOutput, safeSnippet, MAX_LINE_BYTES } from "./adapters/adapterEventParser.js";
+export { mapAdapterEvents } from "./adapters/adapterEventMapper.js";
+export { buildAdapterHarnessDiagnostics } from "./adapters/adapterDiagnostics.js";
+export { AdapterHarnessError } from "./adapters/adapterErrors.js";
+export { createTestAdapterDefinition, TEST_ADAPTER_ID, TEST_ADAPTER_CAPABILITIES, } from "./adapters/testAdapterProvider.js";
+// Frozen provider adapter runtime contract v1 (XACP-012).
+export { ADAPTER_RUNTIME_CONTRACT_VERSION, SUPPORTED_CONTRACT_VERSIONS, isSupportedContractVersion, resolveContractVersion, } from "./adapters/adapterContractVersion.js";
+export { validateAdapterProtocolEvent, ADAPTER_PROTOCOL_EVENT_TYPES, } from "./adapters/adapterEventProtocol.js";
+export { ADAPTER_FAILURE_CODES, describeAdapterFailure, isAdapterFailureCode, failureCodeForRunnability, } from "./adapters/adapterFailureTaxonomy.js";
+export { PROVIDER_EVENT_KINDS, TERMINAL_PROVIDER_EVENT_KINDS, PROVIDER_EVENT_TO_ACP, isValidProviderEvent, isTerminalProviderEventKind, buildProviderRuntimeDiagnostics, } from "./adapters/providerContractTypes.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,0BAA0B;AAC1B,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,aAAa,EACb,4BAA4B,EAC5B,sCAAsC,EACtC,qBAAqB,EACrB,aAAa,GAGd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAqB,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAA8C,MAAM,mBAAmB,CAAC;AAC7G,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGtF,yCAAyC;AACzC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,6BAA6B,EAC7B,oBAAoB,EACpB,8BAA8B,GAG/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,GAEhC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qBAAqB,GAGtB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,GAMnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,EACd,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,8BAA8B,GAE/B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,sBAAsB,GAGvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,GAGhB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EACrB,kCAAkC,GAGnC,MAAM,+BAA+B,CAAC;AA0BvC,8CAA8C;AAC9C,OAAO,EACL,sBAAsB,EACtB,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,8BAA8B,EAC9B,aAAa,EACb,YAAY,EACZ,aAAa,EACb,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACxH,OAAO,EAAE,uBAAuB,EAA2B,MAAM,mCAAmC,CAAC;AACrG,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,GAMxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GAGtB,MAAM,6BAA6B,CAAC;AAErC,uDAAuD;AACvD,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,uBAAuB,EACvB,UAAU,GAEX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,4BAA4B,GAI7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAC5F,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iBAAiB,GAGlB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAGrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAqB,MAAM,uCAAuC,CAAC;AAE7F,8CAA8C;AAC9C,OAAO,EACL,4BAA4B,GAG7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAyB,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAgCnF,2FAA2F;AAC3F,yFAAyF;AACzF,OAAO,EACL,+BAA+B,GAGhC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAElB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,mBAAmB,GAEpB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,GAEhB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,8BAA8B,GAU/B,MAAM,mCAAmC,CAAC;AAE3C,6FAA6F;AAC7F,qGAAqG;AACrG,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAA4B,MAAM,kCAAkC,CAAC;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAgC,MAAM,6BAA6B,CAAC;AAChG,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAU3C,0DAA0D;AAC1D,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,GAEvB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAM7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,GAG1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,+BAA+B,GAGhC,MAAM,qCAAqC,CAAC"}

package/dist/process/providerProcessAudit.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Append-only audit log for the minimal supervisor (XACP-010).
+ *
+ * Events carry safe messages + redacted details only — never raw command lines, env values,
+ * secrets, or stack traces. The clock is injected (`now`) so tests are deterministic and the
+ * source touches no ambient time source.
+ */
+import type { ProviderProcessAudit } from "./providerProcessTypes.js";
+export declare function createProviderProcessAudit(opts: {
+    providerId: string;
+    processId: string;
+    now: () => string;
+}): ProviderProcessAudit;
+//# sourceMappingURL=providerProcessAudit.d.ts.map

package/dist/process/providerProcessAudit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessAudit.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessAudit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,oBAAoB,EAGrB,MAAM,2BAA2B,CAAC;AAEnC,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAkBvB"}

package/dist/process/providerProcessAudit.js

@@ -0,0 +1,27 @@
+/**
+ * Append-only audit log for the minimal supervisor (XACP-010).
+ *
+ * Events carry safe messages + redacted details only — never raw command lines, env values,
+ * secrets, or stack traces. The clock is injected (`now`) so tests are deterministic and the
+ * source touches no ambient time source.
+ */
+export function createProviderProcessAudit(opts) {
+    const events = [];
+    let seq = 0;
+    return {
+        record(kind, safeMessage, redactedDetails) {
+            seq += 1;
+            events.push({
+                eventId: `${opts.processId}-aud-${seq}`,
+                timestamp: opts.now(),
+                providerId: opts.providerId,
+                processId: opts.processId,
+                kind,
+                safeMessage,
+                ...(redactedDetails ? { redactedDetails } : {}),
+            });
+        },
+        events: () => [...events],
+    };
+}
+//# sourceMappingURL=providerProcessAudit.js.map

package/dist/process/providerProcessAudit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessAudit.js","sourceRoot":"","sources":["../../src/process/providerProcessAudit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,MAAM,UAAU,0BAA0B,CAAC,IAI1C;IACC,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO;QACL,MAAM,CAAC,IAA8B,EAAE,WAAmB,EAAE,eAAyC;YACnG,GAAG,IAAI,CAAC,CAAC;YACT,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,QAAQ,GAAG,EAAE;gBACvC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI;gBACJ,WAAW;gBACX,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;KAC1B,CAAC;AACJ,CAAC"}

package/dist/process/providerProcessDiagnostics.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Diagnostics summary for the minimal supervisor (XACP-010).
+ *
+ * Carries env KEY names only, a redacted workspace marker, byte counts/flags, and the FIXED,
+ * honest enforcement classification. Never secret values, never raw paths. The classification
+ * is what keeps the supervisor from overclaiming: `network: not_enforced`,
+ * `filesystem: not_enforced_against_hostile_process`, `processTreeKill: best_effort`.
+ */
+import { type ProviderProcessDiagnostics, type ProviderProcessEnforcement, type ProviderProcessStatus } from "./providerProcessTypes.js";
+export interface DiagnosticsInput {
+    providerId: string;
+    processId: string;
+    platform: NodeJS.Platform;
+    status: ProviderProcessStatus;
+    envKeys: string[];
+    workspace: string;
+    stdoutBytes: number;
+    stderrBytes: number;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+    treeKillAttempted: boolean;
+    treeKillSucceeded?: boolean;
+    auditCount: number;
+}
+export declare function buildProcessDiagnostics(input: DiagnosticsInput): ProviderProcessDiagnostics;
+/** The fixed enforcement classification — exposed for CLI/docs/tests. */
+export declare function minimalSupervisorEnforcement(): ProviderProcessEnforcement;
+/** Human-readable, redaction-safe lines describing what is / isn't enforced. */
+export declare function enforcementSummaryLines(platform: NodeJS.Platform): string[];
+//# sourceMappingURL=providerProcessDiagnostics.d.ts.map

package/dist/process/providerProcessDiagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessDiagnostics.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessDiagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,0BAA0B,CAkB3F;AAED,yEAAyE;AACzE,wBAAgB,4BAA4B,IAAI,0BAA0B,CAEzE;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,EAAE,CAgB3E"}

package/dist/process/providerProcessDiagnostics.js

@@ -0,0 +1,51 @@
+/**
+ * Diagnostics summary for the minimal supervisor (XACP-010).
+ *
+ * Carries env KEY names only, a redacted workspace marker, byte counts/flags, and the FIXED,
+ * honest enforcement classification. Never secret values, never raw paths. The classification
+ * is what keeps the supervisor from overclaiming: `network: not_enforced`,
+ * `filesystem: not_enforced_against_hostile_process`, `processTreeKill: best_effort`.
+ */
+import { MINIMAL_SUPERVISOR_ENFORCEMENT, } from "./providerProcessTypes.js";
+export function buildProcessDiagnostics(input) {
+    return {
+        providerId: input.providerId,
+        processId: input.processId,
+        platform: input.platform,
+        supervisorMode: "minimal",
+        status: input.status,
+        envKeys: [...input.envKeys].sort(),
+        workspace: input.workspace,
+        stdoutBytes: input.stdoutBytes,
+        stderrBytes: input.stderrBytes,
+        stdoutTruncated: input.stdoutTruncated,
+        stderrTruncated: input.stderrTruncated,
+        treeKillAttempted: input.treeKillAttempted,
+        ...(input.treeKillSucceeded !== undefined ? { treeKillSucceeded: input.treeKillSucceeded } : {}),
+        enforcement: MINIMAL_SUPERVISOR_ENFORCEMENT,
+        auditCount: input.auditCount,
+    };
+}
+/** The fixed enforcement classification — exposed for CLI/docs/tests. */
+export function minimalSupervisorEnforcement() {
+    return MINIMAL_SUPERVISOR_ENFORCEMENT;
+}
+/** Human-readable, redaction-safe lines describing what is / isn't enforced. */
+export function enforcementSummaryLines(platform) {
+    const e = MINIMAL_SUPERVISOR_ENFORCEMENT;
+    return [
+        `platform: ${platform}`,
+        `supervisor mode: minimal`,
+        `shell: ${e.shell}`,
+        `env allowlist: ${e.env}`,
+        `cwd isolation: ${e.cwd}`,
+        `timeout: ${e.timeout}`,
+        `stdout/stderr capture: ${e.stdoutStderrCapture}`,
+        `redaction: ${e.redaction}`,
+        `process tree cleanup: ${e.processTreeKill}`,
+        `network: ${e.network}`,
+        `filesystem: ${e.filesystem}`,
+        `terminal: ${e.terminal}`,
+    ];
+}
+//# sourceMappingURL=providerProcessDiagnostics.js.map

package/dist/process/providerProcessDiagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessDiagnostics.js","sourceRoot":"","sources":["../../src/process/providerProcessDiagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,8BAA8B,GAI/B,MAAM,2BAA2B,CAAC;AAkBnC,MAAM,UAAU,uBAAuB,CAAC,KAAuB;IAC7D,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,WAAW,EAAE,8BAA8B;QAC3C,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,4BAA4B;IAC1C,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,QAAyB;IAC/D,MAAM,CAAC,GAAG,8BAA8B,CAAC;IACzC,OAAO;QACL,aAAa,QAAQ,EAAE;QACvB,0BAA0B;QAC1B,UAAU,CAAC,CAAC,KAAK,EAAE;QACnB,kBAAkB,CAAC,CAAC,GAAG,EAAE;QACzB,kBAAkB,CAAC,CAAC,GAAG,EAAE;QACzB,YAAY,CAAC,CAAC,OAAO,EAAE;QACvB,0BAA0B,CAAC,CAAC,mBAAmB,EAAE;QACjD,cAAc,CAAC,CAAC,SAAS,EAAE;QAC3B,yBAAyB,CAAC,CAAC,eAAe,EAAE;QAC5C,YAAY,CAAC,CAAC,OAAO,EAAE;QACvB,eAAe,CAAC,CAAC,UAAU,EAAE;QAC7B,aAAa,CAAC,CAAC,QAAQ,EAAE;KAC1B,CAAC;AACJ,CAAC"}

package/dist/process/providerProcessEnvironment.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Environment construction for the minimal supervisor (XACP-010).
+ *
+ * The child sees ONLY the explicit allowlist (plus, optionally, a few documented platform
+ * basics the caller opts into). The full `process.env` is NEVER inherited by default — this is
+ * the difference between "the operator's shell environment" and "a clean, declared environment".
+ *
+ * This module reads NO secrets and does NOT touch `process.env` itself; the caller passes any
+ * base values explicitly. Diagnostics expose env KEY names only — never values.
+ */
+import type { ValidatedProviderProcessConfig } from "./providerProcessValidation.js";
+export interface BuildProviderEnvOptions {
+    /**
+     * Optional, explicit platform-basics to fold in (e.g. `{ PATH, SystemRoot, ComSpec }`) when a
+     * provider genuinely needs them. The caller supplies the values; this module never reads them
+     * from `process.env`. Allowlist values take precedence on key collisions.
+     */
+    platformBasics?: Record<string, string>;
+}
+/**
+ * Build the child's environment: a clean record containing ONLY the validated allowlist, merged
+ * over any explicitly-provided platform basics. No inheritance of the ambient environment.
+ */
+export declare function buildProviderEnv(config: ValidatedProviderProcessConfig, opts?: BuildProviderEnvOptions): Record<string, string>;
+/** Env KEY names only — safe for diagnostics. */
+export declare function envKeyList(env: Record<string, string>): string[];
+/** A redacted view of the env (keys kept, secret-like values masked) for audit details. */
+export declare function redactedEnvForAudit(env: Record<string, string>): Record<string, string>;
+//# sourceMappingURL=providerProcessEnvironment.d.ts.map

package/dist/process/providerProcessEnvironment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessEnvironment.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAErF,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,8BAA8B,EACtC,IAAI,GAAE,uBAA4B,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxB;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAEhE;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEvF"}

package/dist/process/providerProcessEnvironment.js

@@ -0,0 +1,37 @@
+/**
+ * Environment construction for the minimal supervisor (XACP-010).
+ *
+ * The child sees ONLY the explicit allowlist (plus, optionally, a few documented platform
+ * basics the caller opts into). The full `process.env` is NEVER inherited by default — this is
+ * the difference between "the operator's shell environment" and "a clean, declared environment".
+ *
+ * This module reads NO secrets and does NOT touch `process.env` itself; the caller passes any
+ * base values explicitly. Diagnostics expose env KEY names only — never values.
+ */
+import { redactEnvRecord } from "../security/redaction.js";
+/**
+ * Build the child's environment: a clean record containing ONLY the validated allowlist, merged
+ * over any explicitly-provided platform basics. No inheritance of the ambient environment.
+ */
+export function buildProviderEnv(config, opts = {}) {
+    const env = {};
+    // Documented, opt-in platform basics first (lowest precedence).
+    for (const [k, v] of Object.entries(opts.platformBasics ?? {})) {
+        if (typeof v === "string")
+            env[k] = v;
+    }
+    // Explicit allowlist wins.
+    for (const [k, v] of Object.entries(config.envAllowlist)) {
+        env[k] = v;
+    }
+    return env;
+}
+/** Env KEY names only — safe for diagnostics. */
+export function envKeyList(env) {
+    return Object.keys(env).sort();
+}
+/** A redacted view of the env (keys kept, secret-like values masked) for audit details. */
+export function redactedEnvForAudit(env) {
+    return redactEnvRecord(env);
+}
+//# sourceMappingURL=providerProcessEnvironment.js.map

package/dist/process/providerProcessEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessEnvironment.js","sourceRoot":"","sources":["../../src/process/providerProcessEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAY3D;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAsC,EACtC,OAAgC,EAAE;IAElC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,gEAAgE;IAChE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,2BAA2B;IAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,GAA2B;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,GAA2B;IAC7D,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/process/providerProcessErrors.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Minimal-supervisor error taxonomy (XACP-010).
+ *
+ * Safe messages only — never stack traces, raw command lines, env values, or secrets. These
+ * errors describe *validation/launch* failures of the cross-platform minimal supervisor; they
+ * make no claim of network/filesystem containment (which this layer does NOT enforce).
+ */
+export type ProviderProcessErrorCode = "PROCESS_CONFIG_INVALID" | "PROCESS_EXECUTABLE_INVALID" | "PROCESS_ARGS_INVALID" | "PROCESS_CWD_INVALID" | "PROCESS_ENV_INVALID" | "PROCESS_TIMEOUT_INVALID" | "PROCESS_LIMIT_INVALID" | "PROCESS_WORKSPACE_INVALID" | "PROCESS_SPAWN_FAILED" | "PROCESS_ALREADY_STARTED" | "PROCESS_INTERNAL";
+export declare class ProviderProcessError extends Error {
+    readonly code: ProviderProcessErrorCode;
+    readonly providerId?: string;
+    readonly redactedDetails?: Record<string, unknown>;
+    constructor(init: {
+        code: ProviderProcessErrorCode;
+        safeMessage: string;
+        providerId?: string;
+        redactedDetails?: Record<string, unknown>;
+    });
+    get safeMessage(): string;
+}
+//# sourceMappingURL=providerProcessErrors.d.ts.map

package/dist/process/providerProcessErrors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessErrors.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessErrors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,wBAAwB,GAChC,wBAAwB,GACxB,4BAA4B,GAC5B,sBAAsB,GACtB,qBAAqB,GACrB,qBAAqB,GACrB,yBAAyB,GACzB,uBAAuB,GACvB,2BAA2B,GAC3B,sBAAsB,GACtB,yBAAyB,GACzB,kBAAkB,CAAC;AAEvB,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEvC,IAAI,EAAE;QAChB,IAAI,EAAE,wBAAwB,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C;IAQD,IAAI,WAAW,IAAI,MAAM,CAExB;CACF"}

package/dist/process/providerProcessErrors.js

@@ -0,0 +1,25 @@
+/**
+ * Minimal-supervisor error taxonomy (XACP-010).
+ *
+ * Safe messages only — never stack traces, raw command lines, env values, or secrets. These
+ * errors describe *validation/launch* failures of the cross-platform minimal supervisor; they
+ * make no claim of network/filesystem containment (which this layer does NOT enforce).
+ */
+export class ProviderProcessError extends Error {
+    code;
+    providerId;
+    redactedDetails;
+    constructor(init) {
+        super(init.safeMessage);
+        this.name = "ProviderProcessError";
+        this.code = init.code;
+        if (init.providerId !== undefined)
+            this.providerId = init.providerId;
+        if (init.redactedDetails !== undefined)
+            this.redactedDetails = init.redactedDetails;
+    }
+    get safeMessage() {
+        return this.message;
+    }
+}
+//# sourceMappingURL=providerProcessErrors.js.map

package/dist/process/providerProcessErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessErrors.js","sourceRoot":"","sources":["../../src/process/providerProcessErrors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAA2B;IAC/B,UAAU,CAAU;IACpB,eAAe,CAA2B;IAEnD,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACrE,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IACtF,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/process/providerProcessOutput.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Bounded, redacted output capture for the minimal supervisor (XACP-010).
+ *
+ * Two guarantees:
+ *   1. Bounded — never retain more than `limitBytes` of a stream (excess dropped, flag set), so
+ *      a chatty/forking process can't exhaust memory.
+ *   2. Redacted — `redactedText()` masks secret-like tokens before anything reaches diagnostics
+ *      or audit. The raw text is returned to the *caller* (a test/adapter) but is never logged.
+ */
+export declare class BoundedCapture {
+    private readonly limitBytes;
+    private chunks;
+    private size;
+    private truncated;
+    constructor(limitBytes: number);
+    push(chunk: Buffer | string): void;
+    get bytes(): number;
+    get isTruncated(): boolean;
+    /** Raw captured text (may contain secrets — caller's responsibility, never logged). */
+    text(): string;
+    /** Redacted text — secret-like whitespace-delimited tokens are masked. Safe for diagnostics. */
+    redactedText(mask?: string): string;
+}
+//# sourceMappingURL=providerProcessOutput.d.ts.map

package/dist/process/providerProcessOutput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessOutput.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessOutput.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,qBAAa,cAAc;IAKb,OAAO,CAAC,QAAQ,CAAC,UAAU;IAJvC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,SAAS,CAAS;gBAEG,UAAU,EAAE,MAAM;IAE/C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAiBlC,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,uFAAuF;IACvF,IAAI,IAAI,MAAM;IAId,gGAAgG;IAChG,YAAY,CAAC,IAAI,SAAe,GAAG,MAAM;CAG1C"}

package/dist/process/providerProcessOutput.js

@@ -0,0 +1,52 @@
+/**
+ * Bounded, redacted output capture for the minimal supervisor (XACP-010).
+ *
+ * Two guarantees:
+ *   1. Bounded — never retain more than `limitBytes` of a stream (excess dropped, flag set), so
+ *      a chatty/forking process can't exhaust memory.
+ *   2. Redacted — `redactedText()` masks secret-like tokens before anything reaches diagnostics
+ *      or audit. The raw text is returned to the *caller* (a test/adapter) but is never logged.
+ */
+import { DEFAULT_REDACTION_POLICY } from "../security/securityTypes.js";
+import { redactSecretLikeText } from "../security/redaction.js";
+export class BoundedCapture {
+    limitBytes;
+    chunks = [];
+    size = 0;
+    truncated = false;
+    constructor(limitBytes) {
+        this.limitBytes = limitBytes;
+    }
+    push(chunk) {
+        const buf = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+        if (this.size >= this.limitBytes) {
+            this.truncated = true;
+            return;
+        }
+        const remaining = this.limitBytes - this.size;
+        if (buf.length > remaining) {
+            this.chunks.push(buf.subarray(0, remaining));
+            this.size = this.limitBytes;
+            this.truncated = true;
+        }
+        else {
+            this.chunks.push(buf);
+            this.size += buf.length;
+        }
+    }
+    get bytes() {
+        return this.size;
+    }
+    get isTruncated() {
+        return this.truncated;
+    }
+    /** Raw captured text (may contain secrets — caller's responsibility, never logged). */
+    text() {
+        return Buffer.concat(this.chunks).toString("utf8");
+    }
+    /** Redacted text — secret-like whitespace-delimited tokens are masked. Safe for diagnostics. */
+    redactedText(mask = "[REDACTED]") {
+        return redactSecretLikeText(this.text(), { ...DEFAULT_REDACTION_POLICY, mask });
+    }
+}
+//# sourceMappingURL=providerProcessOutput.js.map

package/dist/process/providerProcessOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessOutput.js","sourceRoot":"","sources":["../../src/process/providerProcessOutput.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,OAAO,cAAc;IAKI;IAJrB,MAAM,GAAa,EAAE,CAAC;IACtB,IAAI,GAAG,CAAC,CAAC;IACT,SAAS,GAAG,KAAK,CAAC;IAE1B,YAA6B,UAAkB;QAAlB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAEnD,IAAI,CAAC,KAAsB;QACzB,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,uFAAuF;IACvF,IAAI;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,gGAAgG;IAChG,YAAY,CAAC,IAAI,GAAG,YAAY;QAC9B,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;CACF"}

package/dist/process/providerProcessSupervisor.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Cross-platform MINIMAL provider process supervisor (XACP-010).
+ *
+ * SCOPED I/O EXCEPTION. This is the one file in the process/ layer that spawns a child process.
+ * It exists so provider adapters have a concrete, audited process boundary. It only runs after a
+ * higher layer supplies a policy/approval-gated config; the ACP handler itself keeps its
+ * zero-I/O-authority posture.
+ *
+ * What it enforces: no-shell launch (`shell:false`), validated executable/args, a clean env
+ * allowlist, an absolute cwd, a hard timeout, bounded+redacted output capture, best-effort
+ * process-tree cleanup, and an append-only audit trail.
+ *
+ * What it does NOT enforce — and must never claim to: network egress, filesystem access against
+ * a hostile process, or full child-process syscall containment. See
+ * `MINIMAL_SUPERVISOR_ENFORCEMENT`. The supervisor itself opens no sockets and makes no network
+ * call; it uses NO `exec`/`execFile` (only `spawn` with an argv array).
+ */
+import { spawn } from "node:child_process";
+import { type BuildProviderEnvOptions } from "./providerProcessEnvironment.js";
+import type { ProviderProcessConfig, ProviderProcessHandle } from "./providerProcessTypes.js";
+export interface SupervisorOptions extends BuildProviderEnvOptions {
+    /** Injected platform (defaults to process.platform) — for deterministic cross-OS tests. */
+    platform?: NodeJS.Platform;
+    /** Injected monotonic-ish clock in ms (defaults to performance.now) for duration. */
+    monotonicMs?: () => number;
+    /** Injected ISO timestamp source for audit (defaults to a fixed-free counter via caller). */
+    now?: () => string;
+    /** Injected spawn (for tests). Defaults to node:child_process spawn. */
+    spawnImpl?: typeof spawn;
+}
+export interface ProviderProcessSupervisor {
+    start(config: ProviderProcessConfig): ProviderProcessHandle;
+}
+/**
+ * Create the minimal supervisor. `start()` validates the config, builds a clean env, and spawns
+ * the child with `shell:false`. It throws a `ProviderProcessError` (safe message) on invalid
+ * config or spawn-setup failure; runtime spawn errors surface as a `failed` result via `wait()`.
+ */
+export declare function createProviderProcessSupervisor(opts?: SupervisorOptions): ProviderProcessSupervisor;
+//# sourceMappingURL=providerProcessSupervisor.d.ts.map

package/dist/process/providerProcessSupervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessSupervisor.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessSupervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAgC,KAAK,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAS7G,OAAO,KAAK,EAEV,qBAAqB,EAErB,qBAAqB,EAGtB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,iBAAkB,SAAQ,uBAAuB;IAChE,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,6FAA6F;IAC7F,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AA4PD,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,CAAC;CAC7D;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,GAAE,iBAAsB,GAAG,yBAAyB,CAgEvG"}