@zaip-ai/cli 6.3.0 → 7.5.0

package/dist/services/codex-task-delivery-authority-template.js

@@ -0,0 +1,206 @@
+/** A draft continuation keeps its immutable capture phase after canonical execution. */
+export const CODEX_TASK_DELIVERY_AUTHORITY_SUPPORT = String.raw `import { createHash } from "node:crypto";
+import { isAbsolute, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+export function createTaskDeliveryAuthority({ hasClaimedTaskWriter }) {
+// Run starts remain JSON objects; subsequent canonical v3 events are compact arrays.
+// Decode only identity/terminal fields needed for authority, never infer a Run.
+function readAuthorityRunRecords(text, id) {
+  if (typeof text !== "string" || !text.endsWith("\n")) throw new Error("incomplete_run");
+  const types = { f: "run.finished", d: "run.finalization.decided", a: "run.attribution.recovered", m: "model.selection.recorded", p: "provider.invocation.finished", c: "model.call.observed", u: "usage.recorded" };
+  const records = text.split(/\r?\n/).filter(Boolean).map((line, index) => {
+    const value = JSON.parse(line);
+    const record = Array.isArray(value)
+      ? value[0] === 3 && Object.hasOwn(types, value[1]) && value.length >= 7
+        ? { schema_version: 2, type: types[value[1]], event_id: value[2], sequence: value[3], run_id: id }
+        : null
+      : value;
+    if (!record || record.schema_version !== 2 || record.run_id !== id || record.sequence !== index + 1 ||
+        ((Array.isArray(value) || record.event_id !== undefined) && record.event_id !== id + ":" + String(index + 1).padStart(6, "0")) ||
+        typeof record.type !== "string" || (index === 0 ? record.type !== "run.started" : record.type === "run.started"))
+      throw new Error("invalid_run_identity");
+    return record;
+  });
+  if (!records.length) throw new Error("empty_run");
+  return records;
+}
+
+async function hasCurrentTaskOrchestratorRun(event, installedRoot, boundedRead) {
+  const threadId = event.session_id, turnId = event.turn_id;
+  if (typeof threadId !== "string" || typeof turnId !== "string" || !threadId || !turnId) return false;
+  if ((process.env.CODEX_THREAD_ID && threadId !== process.env.CODEX_THREAD_ID) ||
+      (process.env.CODEX_TURN_ID && turnId !== process.env.CODEX_TURN_ID)) return false;
+  try {
+    const digest = createHash("sha256").update(JSON.stringify(["codex", threadId, turnId, null, null])).digest("hex");
+    const correlation = JSON.parse(await boundedRead(resolve(installedRoot, ".agents/private/state/codex-telemetry-spool/v1/correlations", digest + ".json"), 65536, installedRoot));
+    const id = correlation.run_id;
+    const dated = typeof id === "string" ? /^RUN-(\d{4})-(\d{2})-(\d{2})-[A-Z0-9-]+-[A-Z0-9]{2,16}$/.exec(id) : null;
+    if (!dated || correlation.schema_version !== 1 || correlation.thread_id !== threadId || correlation.turn_id !== turnId || correlation.agent_path !== null) return false;
+    const candidates = [
+      ".agents/records/runs/" + dated[1] + "/" + dated[2] + "/" + id + ".jsonl",
+      ".agents/records/runs/" + dated[1] + "/" + dated[2] + "/" + dated[3] + "/" + id + ".jsonl",
+      ".agents/data/runs/" + dated[1] + "/" + dated[2] + "/" + dated[3] + "/" + id + ".jsonl",
+      ".agents/private/state/runs/" + dated[1] + "/" + dated[2] + "/" + id + ".jsonl",
+    ];
+    let selected = null;
+    for (const candidate of candidates) {
+      try {
+        const source = await boundedRead(resolve(installedRoot, candidate), 8388608, installedRoot);
+        if (selected !== null) return false;
+        selected = source;
+      } catch (error) { if (error.code !== "ENOENT") return false; }
+    }
+    if (selected === null || !selected.endsWith("\n")) return false;
+    const records = readAuthorityRunRecords(selected, id), started = records[0];
+    if (records.some((record, i) => record.run_id !== id || record.sequence !== i + 1 || record.schema_version !== 2)) return false;
+    const continued = started.client_turn_id !== turnId && await rootTaskContinuationMatches(started, event, installedRoot, boundedRead);
+    const valid = started?.type === "run.started" && started.client_thread_id === threadId && (started.client_turn_id === turnId || continued) &&
+      ["codex", "codex-desktop"].includes(started.client) &&
+      typeof started.task_id === "string" && started.task_id.startsWith("TASK-") &&
+      typeof started.execution_id === "string" && started.execution_id.startsWith("EXEC-") &&
+      started.agent === "agent-orchestrator" && started.run_role === "orchestrator" && started.parent_run_id === null && started.entrypoint === "task" &&
+      correlation.task_id === started.task_id && correlation.execution_id === started.execution_id &&
+      !records.some(record => record.type === "run.finished" || record.type === "run.finalization.decided");
+    return valid && (started.phase === "execution" || await promotedTaskDelivery(started, event, installedRoot, boundedRead)) ? started : false;
+  } catch { return false; }
+}
+async function promotedTaskDelivery(started, event, installedRoot, boundedRead) {
+  if (started.phase !== "conversation" || started.execution_kind !== "delivery" || started.intake?.intent !== "continue") return false;
+  return taskDeliveryGraph(started, event, installedRoot, boundedRead);
+}
+async function taskRecordLayout(root, boundedRead, parserRoot = root) {
+  const parser = await import(pathToFileURL(resolve(parserRoot, ".agents/skills/zaip-skill-github-deploy/scripts/yaml-parser.mjs")).href);
+  const document = parser.parseDocument(await boundedRead(resolve(root, ".agents/config/framework.lock.yaml"), 262144, root), { strict: true, uniqueKeys: true });
+  const lock = document.toJS();
+  if (document.errors.length || lock?.lock_version !== 2 || ![2, 3].includes(lock.layout?.version)) throw new Error("invalid_task_record_layout");
+  return { parser, paths(kind, id, suffix) {
+    const date = /^(?:TASK|CHG|EXEC|RUN)-(\d{4})-(\d{2})-(\d{2})-/.exec(id);
+    if (!date) throw new Error("invalid_task_record_id");
+    const month = date[1] + "/" + date[2], day = month + "/" + date[3];
+    return (lock.layout.version === 3 ? [".agents/records/" + kind + "/" + month, ".agents/records/" + kind + "/" + day, ".agents/data/" + kind + "/" + day] : [".agents/data/" + kind + "/" + day]).map(base => resolve(root, base, id + suffix));
+  } };
+}
+async function uniqueTaskRecord(paths, boundedRead, maximumBytes = 8388608) {
+  let selected = null;
+  for (const path of paths) {
+    try { const text = await boundedRead(path, maximumBytes);if (selected !== null) throw new Error("ambiguous_task_record");selected = text; }
+    catch (error) { if (error.code !== "ENOENT") throw error; }
+  }
+  if (selected === null) throw new Error("missing_task_record");
+  return selected;
+}
+async function taskDeliveryGraph(started, event, installedRoot, boundedRead, writer = null, parserRoot = installedRoot, layout = null) {
+  const taskMatch = /^TASK-(\d{4})-(\d{2})-\d{2}-[A-Z0-9-]+$/.exec(started.task_id ?? "");
+  const executionMatch = /^EXEC-(\d{4})-(\d{2})-\d{2}-[A-Z0-9-]+$/.exec(started.execution_id ?? "");
+  if (!taskMatch || !executionMatch || !/^CHG-[A-Z0-9-]+$/.test(started.change_id ?? "")) return false;
+  const records = layout ?? await taskRecordLayout(installedRoot, boundedRead, parserRoot);
+  const metadata = async (kind, id, suffix) => {
+    const source = (await uniqueTaskRecord(records.paths(kind, id, suffix), boundedRead, 1048576)).replace(/\r\n/g, "\n");
+    const end = source.indexOf("\n---\n", 4);
+    if (!source.startsWith("---\n") || end < 0) throw new Error("invalid_canonical_markdown");
+    const document = records.parser.parseDocument(source.slice(4, end), { strict: true, uniqueKeys: true });
+    if (document.errors.length) throw new Error("invalid_canonical_markdown");
+    return document.toJS();
+  };
+  const task = await metadata("tasks", started.task_id, ".md");
+  const execution = await metadata("executions", started.execution_id, "/execution.md");
+  const changeMatch = /^CHG-(\d{4})-(\d{2})-\d{2}-[A-Z0-9-]+$/.exec(started.change_id);
+  if (!changeMatch) return false;
+  const change = await metadata("changes", started.change_id, "/change.md");
+  return task?.schema_version === 2 && task.id === started.task_id && ["executing", "verifying"].includes(task.status) &&
+    task.change_id === started.change_id && task.plan_ref?.execution_id === started.execution_id &&
+    typeof task.plan_ref.hash === "string" && task.plan_ref.hash === execution.plan_hash &&
+    execution?.schema_version === 2 && execution.id === started.execution_id && execution.kind === "delivery" &&
+    ["running", "verifying"].includes(execution.status) && execution.origin?.type === "task" && execution.origin.task_id === task.id &&
+    Array.isArray(execution.dag?.nodes) && execution.dag.nodes.length === 1 && execution.dag.nodes[0].task_id === task.id && execution.dag.nodes[0].change_id === change.id &&
+    change?.schema_version === 2 && change.id === started.change_id && ["executing", "verifying"].includes(change.status) &&
+    change.source?.type === "task" && change.source.task_id === task.id && Array.isArray(change.task_ids) && change.task_ids.length === 1 && change.task_ids[0] === task.id &&
+    (writer ? await writer(started) : await hasClaimedTaskWriter(event, installedRoot, boundedRead, started));
+}
+
+function rootTaskIdentity(started, event) {
+  return ["codex", "codex-desktop"].includes(started.client) && started.client_thread_id === event.session_id &&
+    started.agent === "agent-orchestrator" && started.run_role === "orchestrator" && started.parent_run_id === null &&
+    started.entrypoint === "task" && started.execution_kind === "delivery" && started.spec_id === null && started.prd_id === null &&
+    typeof started.model === "string" && !!started.model && typeof started.reasoning_effort === "string" && !!started.reasoning_effort &&
+    typeof started.client_turn_id === "string" && !!started.client_turn_id && started.client_turn_id !== event.turn_id;
+}
+
+async function readRootTaskRun(id, root, boundedRead, layout) {
+  const date = /^RUN-(\d{4})-(\d{2})-(\d{2})-[A-Z0-9-]+-[A-Z0-9]{2,16}$/.exec(id ?? "");
+  if (!date) throw new Error("invalid_root_task_run");
+  const selected = await uniqueTaskRecord(layout.paths("runs", id, ".jsonl"), boundedRead);
+  const records = readAuthorityRunRecords(selected, id);
+  if (records.some(record => ["run.finished", "run.finalization.decided"].includes(record.type))) throw new Error("terminal_root_task_run");
+  return records[0];
+}
+
+/** Bootstrap grants only the exact receipt command, never ordinary mutation. */
+async function rootTaskContinuationBootstrap(event, tokens, root, boundedRead, legacy) {
+  try {
+    if (event.permission_mode === "plan" || [event.agent_id, event.agent_type, event.agent_path, event.parent_agent_id].some(value => value !== undefined) ||
+        typeof event.session_id !== "string" || !event.session_id || typeof event.turn_id !== "string" || !event.turn_id ||
+        (process.env.CODEX_THREAD_ID && process.env.CODEX_THREAD_ID !== event.session_id) ||
+        (process.env.CODEX_TURN_ID && process.env.CODEX_TURN_ID !== event.turn_id)) return false;
+    const options = new Map();
+    for (let i = 5; i < tokens.length; i++) {
+      const flag = tokens[i];
+      if (options.has(flag)) return false;
+      if (flag === "--json") options.set(flag, true);
+      else if (["--task-owner", "--task", "--execution", "--from-turn", "--run", "--lifecycle-root", "--workspace"].includes(flag) && tokens[i + 1] && !tokens[i + 1].startsWith("--")) options.set(flag, tokens[++i]);
+      else return false;
+    }
+    const legacyRoute = options.has("--lifecycle-root");
+    if (options.size !== (legacyRoute ? 8 : 5) || options.get("--json") !== true || options.get("--task-owner") !== tokens[4]) return false;
+    let sourceRoot = root, sourceRead = boundedRead, writer = null;
+    if (legacyRoute) {
+      sourceRoot = options.get("--lifecycle-root");
+      if (!legacy || options.get("--run") !== tokens[4] || typeof sourceRoot !== "string" || !isAbsolute(sourceRoot) || sourceRoot.split(/[\\/]/).includes("..") ||
+          resolve(options.get("--workspace") ?? "") !== resolve(root) || resolve(event.tool_input?.workdir ?? "") !== resolve(root) || resolve(event.cwd) !== resolve(root) || resolve(legacy.observedEventCwd ?? "") !== resolve(sourceRoot) ||
+          resolve(await legacy.selectHookRepositoryRoot(root, sourceRoot)) !== resolve(sourceRoot)) return false;
+      const pin = JSON.parse(await boundedRead(resolve(root, ".agents/private/state/task-workspaces/record-origins/runs", tokens[4] + ".json"), 16384));
+      if (pin.schema_version !== 1 || pin.kind !== "legacy_record_origin" || pin.run_id !== tokens[4] || pin.task_id !== options.get("--task") || pin.execution_id !== options.get("--execution") ||
+          resolve(pin.records_workspace) !== resolve(sourceRoot) || resolve(pin.canonical_workspace) !== resolve(root)) return false;
+      sourceRead = (path, max) => legacy.read(path, max, sourceRoot);
+      writer = async started => {
+        const claim = JSON.parse(await boundedRead(resolve(root, ".agents/private/state/task-workspaces/shared-writer.json"), 65536));
+        return resolve(claim.records_workspace ?? "") === resolve(sourceRoot) && await hasClaimedTaskWriter(event, root, boundedRead, started, root);
+      };
+    } else if (resolve(event.cwd) !== resolve(root)) return false;
+    const layout = await taskRecordLayout(sourceRoot, sourceRead, root);
+    const started = await readRootTaskRun(tokens[4], sourceRoot, sourceRead, layout);
+    if (!rootTaskIdentity(started, event) || options.get("--task") !== started.task_id || options.get("--execution") !== started.execution_id ||
+        options.get("--from-turn") !== started.client_turn_id || !await taskDeliveryGraph(started, event, sourceRoot, sourceRead, writer, root, layout)) return false;
+    const digest = createHash("sha256").update(JSON.stringify(["codex", event.session_id, event.turn_id, null, null])).digest("hex");
+    try {
+      const correlation = JSON.parse(await boundedRead(resolve(root, ".agents/private/state/codex-telemetry-spool/v1/correlations", digest + ".json"), 65536, root));
+      if (correlation?.schema_version !== 1 || correlation.run_id !== started.run_id || correlation.thread_id !== event.session_id ||
+          correlation.turn_id !== event.turn_id || correlation.agent_path !== null || correlation.task_id !== started.task_id || correlation.execution_id !== started.execution_id) return false;
+    } catch (error) { if (error.code !== "ENOENT") return false; }
+    return started;
+  } catch { return false; }
+}
+
+async function rootTaskContinuationMatches(started, event, root, boundedRead) {
+  try {
+    if (!rootTaskIdentity(started, event) || event.permission_mode === "plan" ||
+        [event.agent_id, event.agent_type, event.agent_path, event.parent_agent_id].some(value => value !== undefined) ||
+        !await taskDeliveryGraph(started, event, root, boundedRead)) return false;
+    const key = createHash("sha256").update(JSON.stringify([started.run_id, event.session_id, event.turn_id])).digest("hex");
+    const text = await boundedRead(resolve(root, ".agents/private/state/codex-principal-continuations/v2", key + ".json"), 8192, root);
+    const claim = await boundedRead(resolve(root, ".agents/private/state/task-workspaces/shared-writer.json"), 65536, root);
+    const expected = {
+      schema_version: 2, kind: "root_task", principal_run_id: started.run_id, task_owner_run_id: started.run_id,
+      task_id: started.task_id, change_id: started.change_id, execution_id: started.execution_id, spec_id: null, prd_id: null,
+      session_id: event.session_id, original_turn_id: started.client_turn_id, previous_turn_id: started.client_turn_id,
+      turn_id: event.turn_id, model: started.model, reasoning_effort: started.reasoning_effort,
+      claim_sha256: createHash("sha256").update(claim).digest("hex"),
+      context_sha256: createHash("sha256").update(JSON.stringify({ session: event.session_id, turn: event.turn_id, model: started.model, reasoningEffort: started.reasoning_effort })).digest("hex"),
+    };
+    return text === JSON.stringify(expected) + "\n";
+  } catch { return false; }
+}
+return { readAuthorityRunRecords, hasCurrentTaskOrchestratorRun, rootTaskContinuationBootstrap };
+}
+`;
+//# sourceMappingURL=codex-task-delivery-authority-template.js.map

package/dist/services/codex-task-delivery-authority-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-task-delivery-authority-template.js","sourceRoot":"","sources":["../../src/services/codex-task-delivery-authority-template.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2M9D,CAAC"}

package/dist/services/codex-validation-runtime-template.js

@@ -16,7 +16,7 @@ export async function reviewedValidationRuntimePaths(command, tokenizeLiteralCom
   if (!repositoryRoot || !process.env.USERPROFILE) return [];
   let configured;
   try {
-    configured = JSON.parse(await readFile(resolve(repositoryRoot, ".local/validation-runtime.json"), "utf8"));
+    configured = JSON.parse(await readFile(resolve(repositoryRoot, ".agents/private/state/validation-runtime.json"), "utf8"));
   } catch { return []; }
   if (!configured || configured.schema_version !== 1 ||
       Object.keys(configured).sort().join(",") !== "executable,schema_version" ||

package/dist/services/codex-windows-hook-command.js

@@ -10,9 +10,9 @@ export function codexWindowsHookCommand(hook, workspaceRoot) {
         "$ProgressPreference = 'SilentlyContinue'",
         `$search = ${search}`,
         "$git = $null",
-        "while ($search) { $candidate = Join-Path $search '.local/git/cmd/git.exe'; if (Test-Path -LiteralPath $candidate -PathType Leaf) { $git = $candidate; break }; $parent = Split-Path -Path $search -Parent; if (!$parent -or $parent -eq $search) { break }; $search = $parent }",
+        "while ($search) { $candidate = Join-Path $search '.agents/private/state/git/cmd/git.exe'; if (Test-Path -LiteralPath $candidate -PathType Leaf) { $git = $candidate; break }; $parent = Split-Path -Path $search -Parent; if (!$parent -or $parent -eq $search) { break }; $search = $parent }",
         "if (!$git) { $git = (Get-Command git -ErrorAction SilentlyContinue).Source }",
-        "if (!$git) { exit 0 }",
+        "if (!$git) { [Console]::Error.WriteLine('ZAIP hook: Git is unavailable; restore the configured Git tool.'); exit 2 }",
         "$probe = New-Object System.Diagnostics.Process",
         "$probe.StartInfo.FileName = $git",
         "$probe.StartInfo.Arguments = 'rev-parse --show-toplevel'",

package/dist/services/codex-windows-hook-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-windows-hook-command.js","sourceRoot":"","sources":["../../src/services/codex-windows-hook-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,aAAsB;IAC1E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,MAAM,GACV,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;IAC1D,MAAM,MAAM,GAAG;QACb,0CAA0C;QAC1C,aAAa,MAAM,EAAE;QACrB,cAAc;QACd,iRAAiR;QACjR,8EAA8E;QAC9E,uBAAuB;QACvB,gDAAgD;QAChD,kCAAkC;QAClC,0DAA0D;QAC1D,2CAA2C;QAC3C,yCAAyC;QACzC,iDAAiD;QACjD,gDAAgD;QAChD,6hBAA6hB;QAC7hB,yCAAyC,IAAI,GAAG;QAChD,gEAAgE;QAChE,cAAc;QACd,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,yDAAyD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtH,CAAC"}
+{"version":3,"file":"codex-windows-hook-command.js","sourceRoot":"","sources":["../../src/services/codex-windows-hook-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,aAAsB;IAC1E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,MAAM,GACV,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;IAC1D,MAAM,MAAM,GAAG;QACb,0CAA0C;QAC1C,aAAa,MAAM,EAAE;QACrB,cAAc;QACd,gSAAgS;QAChS,8EAA8E;QAC9E,sHAAsH;QACtH,gDAAgD;QAChD,kCAAkC;QAClC,0DAA0D;QAC1D,2CAA2C;QAC3C,yCAAyC;QACzC,iDAAiD;QACjD,gDAAgD;QAChD,6hBAA6hB;QAC7hB,yCAAyC,IAAI,GAAG;QAChD,gEAAgE;QAChE,cAAc;QACd,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,yDAAyD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtH,CAAC"}

package/dist/services/developer-identity-fixture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"developer-identity-fixture.d.ts","sourceRoot":"","sources":["../../src/services/developer-identity-fixture.ts"],"names":[],"mappings":"AAGA,oFAAoF;AACpF,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB7E"}
+{"version":3,"file":"developer-identity-fixture.d.ts","sourceRoot":"","sources":["../../src/services/developer-identity-fixture.ts"],"names":[],"mappings":"AAGA,oFAAoF;AACpF,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB7E"}

package/dist/services/developer-identity-fixture.js

@@ -1,9 +1,10 @@
-import { writeFile } from "node:fs/promises";
+import { mkdir, writeFile } from "node:fs/promises";
 import { resolve } from "node:path";
 /** Root Run integration fixtures need identity without depending on live GitHub. */
 export async function seedVerifiedFixtureIdentity(root) {
     const verifiedAt = new Date().toISOString();
-    await writeFile(resolve(root, ".local/developer-identity.json"), `${JSON.stringify({
+    await mkdir(resolve(root, ".agents/private/state"), { recursive: true });
+    await writeFile(resolve(root, ".agents/private/state/developer-identity.json"), `${JSON.stringify({
         schema_version: 1,
         provider: "github",
         account_id: "12345",

package/dist/services/developer-identity-fixture.js.map

@@ -1 +1 @@
-{"version":3,"file":"developer-identity-fixture.js","sourceRoot":"","sources":["../../src/services/developer-identity-fixture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,SAAS,CACb,OAAO,CAAC,IAAI,EAAE,gCAAgC,CAAC,EAC/C,GAAG,IAAI,CAAC,SAAS,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,OAAO;QACnB,cAAc,EAAE,mBAAmB;QACnC,kBAAkB,EAAE,wBAAwB;QAC5C,WAAW,EAAE,UAAU;QACvB,gBAAgB,EAAE,UAAU;QAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;KACxD,CAAC,IAAI,EACN,MAAM,CACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"developer-identity-fixture.js","sourceRoot":"","sources":["../../src/services/developer-identity-fixture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,SAAS,CACb,OAAO,CAAC,IAAI,EAAE,+CAA+C,CAAC,EAC9D,GAAG,IAAI,CAAC,SAAS,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,OAAO;QACnB,cAAc,EAAE,mBAAmB;QACnC,kBAAkB,EAAE,wBAAwB;QAC5C,WAAW,EAAE,UAAU;QACvB,gBAAgB,EAAE,UAAU;QAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;KACxD,CAAC,IAAI,EACN,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/services/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/services/doctor.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CACpC;AAwCD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAiG5E"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/services/doctor.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CACpC;AAwCD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAqG5E"}

package/dist/services/doctor.js

@@ -129,7 +129,11 @@ export async function doctorProject(directory) {
     if (profile === "full") {
         const terraform = await terraformDiagnostic(project.root);
         if (terraform.status === "not_applicable")
-            findings.push({ severity: "error", path: ".local/terraform", message: terraform.message });
+            findings.push({
+                severity: "error",
+                path: ".local/cache/terraform",
+                message: terraform.message,
+            });
     }
     return {
         root: project.root,

package/dist/services/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/services/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAchD,MAAM,QAAQ,GAAG;IACf,6BAA6B;IAC7B,oCAAoC;IACpC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,GAAG,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,IAAI,KAAK,CACrC;IACD,GAAG;QACD,gBAAgB;QAChB,kBAAkB;QAClB,oBAAoB;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;KAChB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,IAAI,KAAK,CAAC;CACnD,CAAC;AACF,MAAM,kBAAkB,GAAG;IACzB,sCAAsC;IACtC,8CAA8C;IAC9C,2CAA2C;IAC3C,8CAA8C;IAC9C,iDAAiD;IACjD,qDAAqD;IACrD,8DAA8D;CAC/D,CAAC;AACF,MAAM,eAAe,GAAG;IACtB,0BAA0B;IAC1B,4BAA4B;IAC5B,6CAA6C;IAC7C,uDAAuD;CACxD,CAAC;AACF,MAAM,gBAAgB,GAAG;IACvB,8BAA8B;IAC9B,kCAAkC;IAClC,+BAA+B;IAC/B,+BAA+B;IAC/B,yBAAyB;CAC1B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,oCAAoC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACjF,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,gFAAgF;aAC1F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,WAAW,EAAE,2BAA2B,QAAQ,EAAE;aAC5D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB;YACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAChE,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,YAAY,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAK,YAAY,CAAC,CAAC,CAAY,EAAE,YAAY,CAAC,CAAC,CAAW,CAAC,CAAC;YACtF,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAW,CAAC,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,0BAA0B,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACnD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACtF,CAAC,KAAc,EAAE,EAAE;QACjB,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACpF,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SAC3F,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CACpF,CAAC;AACN,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/services/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAchD,MAAM,QAAQ,GAAG;IACf,6BAA6B;IAC7B,oCAAoC;IACpC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,GAAG,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,IAAI,KAAK,CACrC;IACD,GAAG;QACD,gBAAgB;QAChB,kBAAkB;QAClB,oBAAoB;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;KAChB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,IAAI,KAAK,CAAC;CACnD,CAAC;AACF,MAAM,kBAAkB,GAAG;IACzB,sCAAsC;IACtC,8CAA8C;IAC9C,2CAA2C;IAC3C,8CAA8C;IAC9C,iDAAiD;IACjD,qDAAqD;IACrD,8DAA8D;CAC/D,CAAC;AACF,MAAM,eAAe,GAAG;IACtB,0BAA0B;IAC1B,4BAA4B;IAC5B,6CAA6C;IAC7C,uDAAuD;CACxD,CAAC;AACF,MAAM,gBAAgB,GAAG;IACvB,8BAA8B;IAC9B,kCAAkC;IAClC,+BAA+B;IAC/B,+BAA+B;IAC/B,yBAAyB;CAC1B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,oCAAoC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACjF,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,gFAAgF;aAC1F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,OAAO,EAAE,WAAW,EAAE,2BAA2B,QAAQ,EAAE;aAC5D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC,CAAC;IACP,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAChE,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,YAAY,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAK,YAAY,CAAC,CAAC,CAAY,EAAE,YAAY,CAAC,CAAC,CAAW,CAAC,CAAC;YACtF,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAW,CAAC,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,0BAA0B,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACnD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CACtF,CAAC,KAAc,EAAE,EAAE;QACjB,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACpF,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SAC3F,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CACpF,CAAC;AACN,CAAC"}

package/dist/services/github-setup-status.d.ts

@@ -1,11 +1,14 @@
 export interface GitHubSetupStatus {
     configured: boolean;
-    reason: "git-unavailable" | "not-a-repository" | "identity-missing" | "origin-missing" | "origin-not-github" | "configured";
+    /** Verified local HEAD commit only; never evidence of a push or GitHub access. */
+    initialCommit?: string;
+    reason: "git-unavailable" | "not-a-repository" | "identity-missing" | "origin-missing" | "origin-not-github" | "initial-commit-missing" | "configured";
 }
 export type GitRunner = (directory: string, arguments_: readonly string[]) => Promise<string | null>;
 /**
- * Inspects only local Git configuration. It deliberately does not contact GitHub
- * or infer authentication from a remote URL.
+ * Inspects only local Git configuration and the HEAD commit. It never creates a
+ * commit, changes configuration, or contacts GitHub
+ * or infers authentication from a remote URL.
  */
 export declare function inspectGitHubSetup(directory: string, runGit?: GitRunner): Promise<GitHubSetupStatus>;
 export declare function isGitHubUrl(url: string): boolean;

package/dist/services/github-setup-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-setup-status.d.ts","sourceRoot":"","sources":["../../src/services/github-setup-status.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EACF,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,YAAY,CAAC;CAClB;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,KAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5B;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,SAAe,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAiCD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAKhD"}
+{"version":3,"file":"github-setup-status.d.ts","sourceRoot":"","sources":["../../src/services/github-setup-status.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EACF,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,wBAAwB,GACxB,YAAY,CAAC;CAClB;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,KAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5B;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,SAAe,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAiCD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAKhD"}

package/dist/services/github-setup-status.js

@@ -3,8 +3,9 @@ import { join } from "node:path";
 import { promisify } from "node:util";
 const exec = promisify(execFile);
 /**
- * Inspects only local Git configuration. It deliberately does not contact GitHub
- * or infer authentication from a remote URL.
+ * Inspects only local Git configuration and the HEAD commit. It never creates a
+ * commit, changes configuration, or contacts GitHub
+ * or infers authentication from a remote URL.
  */
 export async function inspectGitHubSetup(directory, runGit = git) {
     if (!validGitVersion(await runGit(directory, ["--version"])))
@@ -21,9 +22,12 @@ export async function inspectGitHubSetup(directory, runGit = git) {
         return pending("identity-missing");
     if (!origin)
         return pending("origin-missing");
-    return isGitHubUrl(rewriteGitUrl(origin, rewrites))
-        ? { configured: true, reason: "configured" }
-        : pending("origin-not-github");
+    if (!isGitHubUrl(rewriteGitUrl(origin, rewrites)))
+        return pending("origin-not-github");
+    const initialCommit = await runGit(directory, ["rev-parse", "--verify", "HEAD^{commit}"]);
+    if (!initialCommit || !/^(?:[a-f\d]{40}|[a-f\d]{64})$/iu.test(initialCommit))
+        return pending("initial-commit-missing");
+    return { configured: true, reason: "configured", initialCommit };
 }
 function pending(reason) {
     return { configured: false, reason };

package/dist/services/github-setup-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"github-setup-status.js","sourceRoot":"","sources":["../../src/services/github-setup-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAkBjC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,MAAM,GAAc,GAAG;IAEvB,IAAI,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,MAAM;QAC9E,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAErC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9C,OAAO,WAAW,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE;QAC5C,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,OAAO,CAAC,MAA0D;IACzE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,GAAG,GAAc,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,IAAI,eAAe,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,eAAe,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,KAAK,UAAU,OAAO,CACpB,UAAkB,EAClB,SAAiB,EACjB,UAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE;YACzD,GAAG,EAAE,SAAS;YACd,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB;IAC3C,OAAO,KAAK,KAAK,IAAI,IAAI,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5F,OAAO,CACL,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QACpC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,QAAuB;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7B,MAAM,UAAU,GAA4C,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"github-setup-status.js","sourceRoot":"","sources":["../../src/services/github-setup-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAqBjC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,MAAM,GAAc,GAAG;IAEvB,IAAI,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,MAAM;QAC9E,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAErC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,aAAa,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,aAAa,CAAC;QAC1E,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CAAC,MAA0D;IACzE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,GAAG,GAAc,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,IAAI,eAAe,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,eAAe,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,KAAK,UAAU,OAAO,CACpB,UAAkB,EAClB,SAAiB,EACjB,UAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE;YACzD,GAAG,EAAE,SAAS;YACd,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB;IAC3C,OAAO,KAAK,KAAK,IAAI,IAAI,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5F,OAAO,CACL,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QACpC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,QAAuB;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7B,MAAM,UAAU,GAA4C,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9E,CAAC"}

package/dist/services/github-setup-status.test.js

@@ -1,3 +1,7 @@
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { describe, expect, it } from "vitest";
 import { inspectGitHubSetup, isGitHubUrl } from "./github-setup-status.js";
 describe("GitHub setup inspection", () => {
@@ -8,7 +12,7 @@ describe("GitHub setup inspection", () => {
         });
         await expect(inspectGitHubSetup("C:/project", async () => "unexpected executable output")).resolves.toEqual({ configured: false, reason: "git-unavailable" });
     });
-    it("requires a local identity and GitHub origin without requiring a commit", async () => {
+    it("reports the missing identity or first local commit without creating either", async () => {
         const withoutIdentity = runner({
             "--version": "git version 2.50.0",
             "rev-parse --is-inside-work-tree": "true",
@@ -26,8 +30,8 @@ describe("GitHub setup inspection", () => {
             "remote get-url origin": "git@github.com:zaip-ai/example.git",
         });
         await expect(inspectGitHubSetup("C:/project", configuredWithoutHead)).resolves.toEqual({
-            configured: true,
-            reason: "configured",
+            configured: false,
+            reason: "initial-commit-missing",
         });
     });
     it("recognizes direct and Git-config verified alias GitHub URLs", async () => {
@@ -43,13 +47,75 @@ describe("GitHub setup inspection", () => {
             "config --get user.name": "ZAIP",
             "config --get user.email": "team@example.test",
             "remote get-url origin": "git@github-work:zaip-ai/example.git",
+            "rev-parse --verify HEAD^{commit}": "a".repeat(40),
             "config --get-regexp ^url\\..*\\.insteadOf$": "url.git@github.com:.insteadof git@github-work:",
         });
         await expect(inspectGitHubSetup("C:/project", alias)).resolves.toEqual({
             configured: true,
             reason: "configured",
+            initialCommit: "a".repeat(40),
         });
     });
+    it.each([
+        null,
+        "HEAD",
+        "a".repeat(39),
+        "g".repeat(40),
+    ])("rejects invalid commit evidence %s", async (head) => {
+        const calls = [];
+        const run = runner({
+            "--version": "git version 2.50.0",
+            "rev-parse --is-inside-work-tree": "true",
+            "config --get user.name": "ZAIP",
+            "config --get user.email": "team@example.test",
+            "remote get-url origin": "https://github.com/zaip-ai/example.git",
+            ...(head ? { "rev-parse --verify HEAD^{commit}": head } : {}),
+        });
+        const result = await inspectGitHubSetup("C:/project", async (directory, args) => {
+            calls.push(args.join(" "));
+            return run(directory, args);
+        });
+        expect(result.reason).toBe("initial-commit-missing");
+        expect(calls).toContain("rev-parse --verify HEAD^{commit}");
+        expect(calls.some((call) => /^(commit|push|fetch|init|add|ls-remote)\b/u.test(call))).toBe(false);
+    });
+    it("observes a real empty repository then its existing commit without mutating user files or Git state", async () => {
+        const directory = mkdtempSync(join(tmpdir(), "zaip-onboarding-head-"));
+        const run = (...args) => execFileSync("git", args, {
+            cwd: directory,
+            encoding: "utf8",
+            windowsHide: true,
+            stdio: ["ignore", "pipe", "pipe"],
+        }).trim();
+        try {
+            run("init");
+            run("config", "user.name", "Fixture");
+            run("config", "user.email", "fixture@example.test");
+            run("remote", "add", "origin", "https://github.com/fixture/onboarding.git");
+            expect((await inspectGitHubSetup(directory)).reason).toBe("initial-commit-missing");
+            writeFileSync(join(directory, "README.md"), "fixture\n");
+            run("add", "README.md");
+            run("-c", "commit.gpgsign=false", "-c", `core.hooksPath=${join(directory, "no-hooks")}`, "commit", "-m", "Fixture initial commit");
+            const head = run("rev-parse", "HEAD");
+            const config = readFileSync(join(directory, ".git", "config"), "utf8");
+            writeFileSync(join(directory, "README.md"), "customized\n");
+            const status = run("status", "--porcelain");
+            for (let attempt = 0; attempt < 2; attempt++) {
+                expect(await inspectGitHubSetup(directory)).toEqual({
+                    configured: true,
+                    reason: "configured",
+                    initialCommit: head,
+                });
+            }
+            expect(run("rev-parse", "HEAD")).toBe(head);
+            expect(run("status", "--porcelain")).toBe(status);
+            expect(readFileSync(join(directory, ".git", "config"), "utf8")).toBe(config);
+            expect(readFileSync(join(directory, "README.md"), "utf8")).toBe("customized\n");
+        }
+        finally {
+            rmSync(directory, { recursive: true, force: true });
+        }
+    });
 });
 function runner(values) {
     return async (_directory, arguments_) => values[arguments_.join(" ")] ?? null;

package/dist/services/github-setup-status.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"github-setup-status.test.js","sourceRoot":"","sources":["../../src/services/github-setup-status.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAkB,kBAAkB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE3F,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAChF,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,MAAM,MAAM,CACV,kBAAkB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,8BAA8B,CAAC,CAC7E,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,eAAe,GAAG,MAAM,CAAC;YAC7B,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,uBAAuB,EAAE,oCAAoC;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC/E,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QAEH,MAAM,qBAAqB,GAAG,MAAM,CAAC;YACnC,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,wBAAwB,EAAE,MAAM;YAChC,yBAAyB,EAAE,mBAAmB;YAC9C,uBAAuB,EAAE,oCAAoC;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrF,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,gDAAgD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,CAAC;YACnB,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,wBAAwB,EAAE,MAAM;YAChC,yBAAyB,EAAE,mBAAmB;YAC9C,uBAAuB,EAAE,qCAAqC;YAC9D,4CAA4C,EAC1C,gDAAgD;SACnD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrE,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,MAA8B;IAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC"}
+{"version":3,"file":"github-setup-status.test.js","sourceRoot":"","sources":["../../src/services/github-setup-status.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAkB,kBAAkB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE3F,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAChF,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,MAAM,MAAM,CACV,kBAAkB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,8BAA8B,CAAC,CAC7E,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,eAAe,GAAG,MAAM,CAAC;YAC7B,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,uBAAuB,EAAE,oCAAoC;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC/E,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QAEH,MAAM,qBAAqB,GAAG,MAAM,CAAC;YACnC,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,wBAAwB,EAAE,MAAM;YAChC,yBAAyB,EAAE,mBAAmB;YAC9C,uBAAuB,EAAE,oCAAoC;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrF,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,gDAAgD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,CAAC;YACnB,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,wBAAwB,EAAE,MAAM;YAChC,yBAAyB,EAAE,mBAAmB;YAC9C,uBAAuB,EAAE,qCAAqC;YAC9D,kCAAkC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,4CAA4C,EAC1C,gDAAgD;SACnD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrE,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,IAAI;QACJ,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACf,CAAC,CAAC,oCAAoC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC;YACjB,WAAW,EAAE,oBAAoB;YACjC,iCAAiC,EAAE,MAAM;YACzC,wBAAwB,EAAE,MAAM;YAChC,yBAAyB,EAAE,mBAAmB;YAC9C,uBAAuB,EAAE,wCAAwC;YACjE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,kCAAkC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YAC9E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACxF,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAc,EAAE,EAAE,CAChC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YACxB,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,CAAC;YACZ,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YACtC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;YACpD,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,2CAA2C,CAAC,CAAC;YAC5E,MAAM,CAAC,CAAC,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACpF,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;YACzD,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACxB,GAAG,CACD,IAAI,EACJ,sBAAsB,EACtB,IAAI,EACJ,kBAAkB,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAC/C,QAAQ,EACR,IAAI,EACJ,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YACvE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,cAAc,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC5C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC7C,MAAM,CAAC,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;oBAClD,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,YAAY;oBACpB,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,MAA8B;IAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC"}

package/dist/services/global-codex-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"global-codex-config.d.ts","sourceRoot":"","sources":["../../src/services/global-codex-config.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,2BAA2B,EAIjC,MAAM,sCAAsC,CAAC;AAG9C,YAAY,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAExF,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iBAAiB,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAOD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,SAAsD,EAC/D,UAAU,SAAiD,EAC3D,UAAU,GAAE,2BAA4C,EACxD,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9C,OAAO,CAAC,uBAAuB,CAAC,CAyFlC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAS1D;AAyGD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAMA"}
+{"version":3,"file":"global-codex-config.d.ts","sourceRoot":"","sources":["../../src/services/global-codex-config.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,2BAA2B,EAIjC,MAAM,sCAAsC,CAAC;AAI9C,YAAY,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAExF,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iBAAiB,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC/C,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAOD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,SAAsD,EAC/D,UAAU,SAAiD,EAC3D,UAAU,GAAE,2BAA4C,EACxD,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9C,OAAO,CAAC,uBAAuB,CAAC,CA0FlC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAS1D;AAyGD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAMA"}

package/dist/services/global-codex-config.js

@@ -5,6 +5,7 @@ import { adapterFiles } from "./adapters.js";
 import { CODEX_PRE_TOOL_USE_HOOK } from "./codex-config-template.js";
 import { codexWindowsHookCommand } from "./codex-windows-hook-command.js";
 import { assertNoConfigBackup, isMissingFile, nodeFileSystem, replaceConfig, } from "./global-codex-config-transaction.js";
+import { validateCodexTrustToml } from "./global-codex-project-trust.js";
 import { tomlStatements, tomlTables } from "./global-codex-toml.js";
 const AGENT_TABLE = /^\s*\[agents\."([^"]+)"\]\s*(?:#.*)?$/;
 const HOOK_TABLE = /^\s*\[\[hooks\.(PreToolUse|Stop|SubagentStart|SubagentStop)\]\]\s*(?:#.*)?$/;
@@ -44,6 +45,8 @@ export async function reconcileGlobalCodexConfig(codexHome = process.env.CODEX_H
         const legacyAgentNames = options.migrateLegacyAgents === false
             ? []
             : await catalogedCodexAliases(sourcePath, filesystem);
+        if (current !== null)
+            validateCodexTrustToml(current);
         const { content: stripped, removedRegistrations } = current === null
             ? { content: "", removedRegistrations: 0 }
             : stripLegacyRegistrations(current, legacyAgentNames);