@zelari/core 1.49.0 → 2.0.0-alpha.2

package/dist/runtime/nodeProviders.js

@@ -0,0 +1,138 @@
+/**
+ * runtime/nodeProviders.ts — node-backed Fs/Shell providers over a jailed workspace.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+const DEFAULT_TIMEOUT_MS = 120_000;
+const DEFAULT_MAX_OUTPUT_CHARS = 200_000;
+const LIST_MAX_ENTRIES = 5_000;
+const LIST_MAX_DEPTH = 12;
+/**
+ * Kill a spawned command including its children. On Windows `child.kill()`
+ * only signals cmd.exe — the actual command keeps running. `taskkill /T /F`
+ * tears down the whole tree. On POSIX the child is spawned detached (own
+ * process group) so `process.kill(-pid, ...)` kills the whole group —
+ * `child.kill()` alone would leave grandchildren (e.g. `sleep`) running.
+ */
+function killTree(child) {
+    if (typeof child.pid !== 'number')
+        return;
+    if (process.platform === 'win32') {
+        spawn('taskkill', ['/pid', String(child.pid), '/T', '/F'], { shell: false, windowsHide: true });
+        return;
+    }
+    try {
+        process.kill(-child.pid, 'SIGKILL');
+    }
+    catch {
+        // Group already gone — fall back to signaling the leader directly.
+        child.kill('SIGKILL');
+    }
+}
+export class NodeFsProvider {
+    workspace;
+    constructor(workspace) {
+        this.workspace = workspace;
+    }
+    async readFile(rel) {
+        return fs.readFile(this.workspace.resolve(rel), 'utf-8');
+    }
+    async writeFile(rel, data) {
+        const absolute = this.workspace.resolve(rel);
+        await fs.mkdir(path.dirname(absolute), { recursive: true });
+        await fs.writeFile(absolute, data, 'utf-8');
+    }
+    async exists(rel) {
+        try {
+            await fs.access(this.workspace.resolve(rel));
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async list(rel = '.') {
+        const start = this.workspace.resolve(rel);
+        const root = path.resolve(this.workspace.root);
+        const out = [];
+        const walk = async (dir, depth) => {
+            if (depth > LIST_MAX_DEPTH || out.length >= LIST_MAX_ENTRIES)
+                return;
+            const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+            for (const entry of entries) {
+                if (out.length >= LIST_MAX_ENTRIES)
+                    return;
+                const abs = path.join(dir, entry.name);
+                if (entry.isDirectory()) {
+                    if (entry.name === 'node_modules' || entry.name === '.git')
+                        continue;
+                    await walk(abs, depth + 1);
+                }
+                else {
+                    out.push(path.relative(root, abs).split(path.sep).join('/'));
+                }
+            }
+        };
+        await walk(start, 0);
+        return out.sort();
+    }
+}
+export class NodeShellProvider {
+    workspace;
+    defaults;
+    constructor(workspace, defaults = {}) {
+        this.workspace = workspace;
+        this.defaults = defaults;
+    }
+    async exec(command, options = {}) {
+        const started = Date.now();
+        const cwd = this.workspace.resolve(options.cwd ?? '.');
+        const timeoutMs = options.timeoutMs ?? this.defaults.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        const maxChars = options.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
+        const isWindows = process.platform === 'win32';
+        const file = isWindows ? 'cmd.exe' : '/bin/sh';
+        const args = isWindows ? ['/d', '/s', '/c', command] : ['-c', command];
+        return await new Promise((resolve) => {
+            const child = spawn(file, args, {
+                cwd,
+                shell: false,
+                windowsHide: true,
+                // POSIX: own process group so the timeout can kill grandchildren too.
+                detached: !isWindows,
+            });
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            const append = (current, chunk) => {
+                const next = current + chunk;
+                return next.length > maxChars ? next.slice(next.length - maxChars) : next;
+            };
+            const timer = setTimeout(() => {
+                timedOut = true;
+                killTree(child);
+            }, timeoutMs);
+            child.stdout?.on('data', (d) => {
+                stdout = append(stdout, d.toString('utf-8'));
+            });
+            child.stderr?.on('data', (d) => {
+                stderr = append(stderr, d.toString('utf-8'));
+            });
+            child.on('error', (err) => {
+                clearTimeout(timer);
+                resolve({
+                    exitCode: null,
+                    stdout,
+                    stderr: `${stderr}${err.message}`,
+                    durationMs: Date.now() - started,
+                    timedOut,
+                });
+            });
+            child.on('close', (code) => {
+                clearTimeout(timer);
+                resolve({ exitCode: code, stdout, stderr, durationMs: Date.now() - started, timedOut });
+            });
+        });
+    }
+}
+//# sourceMappingURL=nodeProviders.js.map

package/dist/runtime/nodeProviders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeProviders.js","sourceRoot":"","sources":["../../src/runtime/nodeProviders.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,KAAgD;IAChE,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,SAA4B;QAA5B,cAAS,GAAT,SAAS,CAAmB;IAAG,CAAC;IAE7D,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,IAAY;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,KAAa,EAAiB,EAAE;YAC/D,IAAI,KAAK,GAAG,cAAc,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO;YACrE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;oBAAE,OAAO;gBAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;wBAAE,SAAS;oBACrE,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,SAA4B,EAC5B,WAAmC,EAAE;QADrC,cAAS,GAAT,SAAS,CAAmB;QAC5B,aAAQ,GAAR,QAAQ,CAA6B;IACrD,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,UAA4B,EAAE;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACpE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEvE,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC9B,GAAG;gBACH,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,IAAI;gBACjB,sEAAsE;gBACtE,QAAQ,EAAE,CAAC,SAAS;aACrB,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE;gBACxD,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,CAAC;gBAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACrC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACrC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI;oBACd,MAAM;oBACN,MAAM,EAAE,GAAG,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE;oBACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;oBAChC,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/runtime/profiles.d.ts

@@ -0,0 +1,44 @@
+/**
+ * runtime/profiles.ts — versioned capability profiles (ADR-0022).
+ *
+ * A profile is an immutable, versioned capability set + orchestration mount.
+ * `minimal/v1` is the benchmark baseline (P6: smallest orchestration);
+ * `kraken/v1` the default product profile. The tool manifest hash makes
+ * same-task/same-profile runs comparable.
+ */
+import { z } from 'zod';
+export declare const ProfileSchema: z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodLiteral<1>;
+    description: z.ZodString;
+    tools: z.ZodArray<z.ZodString>;
+    orchestration: z.ZodObject<{
+        kraken: z.ZodBoolean;
+        council: z.ZodBoolean;
+        subagents: z.ZodBoolean;
+        mission: z.ZodBoolean;
+    }, z.core.$strip>;
+    verification: z.ZodObject<{
+        deterministicEngine: z.ZodBoolean;
+        llmVerifier: z.ZodBoolean;
+        strictCompletion: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type Profile = z.infer<typeof ProfileSchema>;
+export declare const MINIMAL_TOOLS: readonly ["read_file", "edit_file", "bash", "grep_content", "list_files"];
+export declare const MINIMAL_V1: Profile;
+export declare const KRAKEN_V1: Profile;
+export declare const COUNCIL_V1: Profile;
+export declare const MISSION_V1: Profile;
+export declare const BUILT_IN_PROFILES: Readonly<Record<string, Profile>>;
+export declare class UnknownProfileError extends Error {
+    readonly requested: string;
+    readonly known: string[];
+    readonly code = "UNKNOWN_PROFILE";
+    constructor(requested: string, known: string[]);
+}
+/** Resolve a built-in profile by id (fails loudly on typos). */
+export declare function resolveProfile(id: string): Profile;
+/** sha256 of the sorted tool names — recorded in the session header. */
+export declare function toolManifestHash(tools: readonly string[]): string;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/runtime/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;iBAiBxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa,2EAA4E,CAAC;AAEvG,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,SAAS,EAAE,OAOtB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK9D,CAAC;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;aAG1B,SAAS,EAAE,MAAM;aACjB,KAAK,EAAE,MAAM,EAAE;IAHjC,QAAQ,CAAC,IAAI,qBAAqB;gBAEhB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EAAE;CAKlC;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAIlD;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGjE"}

package/dist/runtime/profiles.js

@@ -0,0 +1,91 @@
+/**
+ * runtime/profiles.ts — versioned capability profiles (ADR-0022).
+ *
+ * A profile is an immutable, versioned capability set + orchestration mount.
+ * `minimal/v1` is the benchmark baseline (P6: smallest orchestration);
+ * `kraken/v1` the default product profile. The tool manifest hash makes
+ * same-task/same-profile runs comparable.
+ */
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+export const ProfileSchema = z.object({
+    /** `<name>/v<N>` — immutable once published. */
+    id: z.string().regex(/^[a-z0-9-]+\/v\d+$/, 'profile id must be <name>/v<N>'),
+    version: z.literal(1),
+    description: z.string().min(1),
+    tools: z.array(z.string().min(1)).min(1),
+    orchestration: z.object({
+        kraken: z.boolean(),
+        council: z.boolean(),
+        subagents: z.boolean(),
+        mission: z.boolean(),
+    }),
+    verification: z.object({
+        deterministicEngine: z.boolean(),
+        llmVerifier: z.boolean(),
+        strictCompletion: z.boolean(),
+    }),
+});
+export const MINIMAL_TOOLS = ['read_file', 'edit_file', 'bash', 'grep_content', 'list_files'];
+export const MINIMAL_V1 = Object.freeze({
+    id: 'minimal/v1',
+    version: 1,
+    description: 'Baseline single-agent loop: no orchestration, deterministic verification only.',
+    tools: [...MINIMAL_TOOLS],
+    orchestration: { kraken: false, council: false, subagents: false, mission: false },
+    verification: { deterministicEngine: true, llmVerifier: false, strictCompletion: true },
+});
+export const KRAKEN_V1 = Object.freeze({
+    id: 'kraken/v1',
+    version: 1,
+    description: 'Default product profile: Kraken execution engine + tentacles + deterministic verification.',
+    tools: [...MINIMAL_TOOLS, 'write_file', 'apply_diff', 'task', 'web_search', 'browser_check'],
+    orchestration: { kraken: true, council: false, subagents: true, mission: false },
+    verification: { deterministicEngine: true, llmVerifier: false, strictCompletion: true },
+});
+export const COUNCIL_V1 = Object.freeze({
+    id: 'council/v1',
+    version: 1,
+    description: 'Council deliberation profile (design phase): members on the session spine, no Kraken executor.',
+    tools: [...MINIMAL_TOOLS, 'write_file'],
+    orchestration: { kraken: false, council: true, subagents: false, mission: false },
+    verification: { deterministicEngine: true, llmVerifier: false, strictCompletion: true },
+});
+export const MISSION_V1 = Object.freeze({
+    id: 'mission/v1',
+    version: 1,
+    description: 'Long-horizon mission profile: Kraken execution + council design + evidence-based completion.',
+    tools: [...KRAKEN_V1.tools],
+    orchestration: { kraken: true, council: true, subagents: true, mission: true },
+    verification: { deterministicEngine: true, llmVerifier: false, strictCompletion: true },
+});
+export const BUILT_IN_PROFILES = Object.freeze({
+    [MINIMAL_V1.id]: MINIMAL_V1,
+    [KRAKEN_V1.id]: KRAKEN_V1,
+    [COUNCIL_V1.id]: COUNCIL_V1,
+    [MISSION_V1.id]: MISSION_V1,
+});
+export class UnknownProfileError extends Error {
+    requested;
+    known;
+    code = 'UNKNOWN_PROFILE';
+    constructor(requested, known) {
+        super(`Unknown profile "${requested}". Known profiles: ${known.join(', ')}`);
+        this.requested = requested;
+        this.known = known;
+        this.name = 'UnknownProfileError';
+    }
+}
+/** Resolve a built-in profile by id (fails loudly on typos). */
+export function resolveProfile(id) {
+    const profile = BUILT_IN_PROFILES[id];
+    if (!profile)
+        throw new UnknownProfileError(id, Object.keys(BUILT_IN_PROFILES));
+    return profile;
+}
+/** sha256 of the sorted tool names — recorded in the session header. */
+export function toolManifestHash(tools) {
+    const manifest = [...tools].sort().join(',');
+    return createHash('sha256').update(manifest).digest('hex');
+}
+//# sourceMappingURL=profiles.js.map

package/dist/runtime/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,gDAAgD;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KACrB,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;QAChC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;QACxB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AAEvG,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,gFAAgF;IAC7F,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC;IACzB,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IAClF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAY,MAAM,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,4FAA4F;IACzG,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC;IAC5F,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IAChF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,gGAAgG;IAC7G,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,YAAY,CAAC;IACvC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IACjF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,8FAA8F;IAC3G,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;IAC3B,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9E,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAsC,MAAM,CAAC,MAAM,CAAC;IAChF,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS;IACzB,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;CAC5B,CAAC,CAAC;AAEH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG1B;IACA;IAHT,IAAI,GAAG,iBAAiB,CAAC;IAClC,YACkB,SAAiB,EACjB,KAAe;QAE/B,KAAK,CAAC,oBAAoB,SAAS,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAH7D,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}

package/dist/runtime/providers.d.ts

@@ -0,0 +1,85 @@
+/**
+ * runtime/providers.ts — execution seam interfaces (ADR-0022).
+ *
+ * Minimal, injectable, workspace-jailed seams. Core ships node + in-memory
+ * implementations; the CLI injects the real subagent provider. Providers are
+ * reached ONLY via ToolRegistry.invoke or the internal verification services
+ * — never as a side door around P2.
+ */
+/** Thrown when a relative path escapes the workspace root (path jail). */
+export declare class WorkspacePathEscapeError extends Error {
+    readonly root: string;
+    readonly attempted: string;
+    readonly code = "WORKSPACE_PATH_ESCAPE";
+    constructor(root: string, attempted: string);
+}
+export interface WorkspaceProvider {
+    readonly kind: 'local' | 'worktree' | 'memory' | 'remote';
+    /** Absolute root every relative path is jailed to. */
+    readonly root: string;
+    /** Resolve a workspace-relative path; throws on escape. */
+    resolve(rel: string): string;
+    /** Optional teardown (worktree removal, remote disconnect). */
+    dispose?(): Promise<void>;
+}
+/**
+ * Treat backslash as a path separator on every OS before resolving, so a
+ * relative path like `..\file` cannot smuggle out of the jail on POSIX
+ * (where `\` is an ordinary filename character).
+ */
+export declare function resolveJailed(root: string, rel: string): string;
+/** Path-jailed local workspace directory. */
+export declare class LocalWorkspace implements WorkspaceProvider {
+    readonly root: string;
+    readonly kind: "local";
+    constructor(root: string);
+    resolve(rel: string): string;
+}
+export interface FsProvider {
+    readFile(rel: string): Promise<string>;
+    writeFile(rel: string, data: string): Promise<void>;
+    exists(rel: string): Promise<boolean>;
+    /** Recursive listing of files (relative paths), bounded. */
+    list(rel?: string): Promise<string[]>;
+}
+export interface ShellResult {
+    /** null when the process was killed by a signal/timeout. */
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+    timedOut: boolean;
+}
+export interface ShellExecOptions {
+    /** Workspace-relative cwd (default: workspace root). */
+    cwd?: string;
+    timeoutMs?: number;
+    /** Output cap per stream (tail kept). Default 200k chars. */
+    maxOutputChars?: number;
+}
+export interface ShellProvider {
+    exec(command: string, options?: ShellExecOptions): Promise<ShellResult>;
+}
+export interface SubagentTask {
+    goal: string;
+    scope?: string[];
+    acceptance?: string[];
+    agent?: string;
+}
+export interface SubagentResult {
+    ok: boolean;
+    conclusion: string;
+    artifacts?: string[];
+}
+export interface SubagentProvider {
+    /** False when delegation is unavailable (core no-op default). */
+    readonly available: boolean;
+    runTask(task: SubagentTask): Promise<SubagentResult>;
+}
+/** Core default: delegation is a CLI-injected capability, never faked here. */
+export declare class NoopSubagentProvider implements SubagentProvider {
+    readonly available = false;
+    runTask(task: SubagentTask): Promise<SubagentResult>;
+}
+export declare const NOOP_SUBAGENT_PROVIDER: SubagentProvider;
+//# sourceMappingURL=providers.d.ts.map

package/dist/runtime/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/runtime/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,0EAA0E;AAC1E,qBAAa,wBAAyB,SAAQ,KAAK;aAG/B,IAAI,EAAE,MAAM;aACZ,SAAS,EAAE,MAAM;IAHnC,QAAQ,CAAC,IAAI,2BAA2B;gBAEtB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM;CAKpC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1D,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ/D;AAED,6CAA6C;AAC7C,qBAAa,cAAe,YAAW,iBAAiB;IAG1C,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFjC,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;gBAEZ,IAAI,EAAE,MAAM;IAEjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAG7B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,4DAA4D;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACtD;AAED,+EAA+E;AAC/E,qBAAa,oBAAqB,YAAW,gBAAgB;IAC3D,QAAQ,CAAC,SAAS,SAAS;IAErB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;CAM3D;AAED,eAAO,MAAM,sBAAsB,EAAE,gBAA6C,CAAC"}

package/dist/runtime/providers.js

@@ -0,0 +1,58 @@
+/**
+ * runtime/providers.ts — execution seam interfaces (ADR-0022).
+ *
+ * Minimal, injectable, workspace-jailed seams. Core ships node + in-memory
+ * implementations; the CLI injects the real subagent provider. Providers are
+ * reached ONLY via ToolRegistry.invoke or the internal verification services
+ * — never as a side door around P2.
+ */
+import path from 'node:path';
+/** Thrown when a relative path escapes the workspace root (path jail). */
+export class WorkspacePathEscapeError extends Error {
+    root;
+    attempted;
+    code = 'WORKSPACE_PATH_ESCAPE';
+    constructor(root, attempted) {
+        super(`Path escapes workspace root: ${attempted} (root: ${root})`);
+        this.root = root;
+        this.attempted = attempted;
+        this.name = 'WorkspacePathEscapeError';
+    }
+}
+/**
+ * Treat backslash as a path separator on every OS before resolving, so a
+ * relative path like `..\file` cannot smuggle out of the jail on POSIX
+ * (where `\` is an ordinary filename character).
+ */
+export function resolveJailed(root, rel) {
+    const normalized = rel.split('\\').join('/');
+    const absolute = path.resolve(root, normalized);
+    const rootAbs = path.resolve(root);
+    if (absolute !== rootAbs && !absolute.startsWith(rootAbs + path.sep)) {
+        throw new WorkspacePathEscapeError(rootAbs, rel);
+    }
+    return absolute;
+}
+/** Path-jailed local workspace directory. */
+export class LocalWorkspace {
+    root;
+    kind = 'local';
+    constructor(root) {
+        this.root = root;
+    }
+    resolve(rel) {
+        return resolveJailed(this.root, rel);
+    }
+}
+/** Core default: delegation is a CLI-injected capability, never faked here. */
+export class NoopSubagentProvider {
+    available = false;
+    async runTask(task) {
+        return {
+            ok: false,
+            conclusion: `Subagent delegation is not available in this context (goal: ${task.goal}).`,
+        };
+    }
+}
+export const NOOP_SUBAGENT_PROVIDER = new NoopSubagentProvider();
+//# sourceMappingURL=providers.js.map

package/dist/runtime/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/runtime/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,0EAA0E;AAC1E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAG/B;IACA;IAHT,IAAI,GAAG,uBAAuB,CAAC;IACxC,YACkB,IAAY,EACZ,SAAiB;QAEjC,KAAK,CAAC,gCAAgC,SAAS,WAAW,IAAI,GAAG,CAAC,CAAC;QAHnD,SAAI,GAAJ,IAAI,CAAQ;QACZ,cAAS,GAAT,SAAS,CAAQ;QAGjC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAYD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6CAA6C;AAC7C,MAAM,OAAO,cAAc;IAGJ;IAFZ,IAAI,GAAG,OAAgB,CAAC;IAEjC,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErC,OAAO,CAAC,GAAW;QACjB,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;CACF;AAkDD,+EAA+E;AAC/E,MAAM,OAAO,oBAAoB;IACtB,SAAS,GAAG,KAAK,CAAC;IAE3B,KAAK,CAAC,OAAO,CAAC,IAAkB;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,+DAA+D,IAAI,CAAC,IAAI,IAAI;SACzF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAqB,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/runtime/worktreeWorkspace.d.ts

@@ -0,0 +1,38 @@
+/**
+ * runtime/worktreeWorkspace.ts — git worktree as a WorkspaceProvider.
+ *
+ * Generalizes the CLI krakenWorktree logic (ZELARI_KRAKEN_WORKTREE) into a
+ * seam: two parallel writers on distinct worktrees cannot see each other's
+ * files. Branches are named `zelari/worktree-<id>` under
+ * `<sourceRoot>/.zelari/worktrees/<id>` (gitignored territory).
+ */
+import { type WorkspaceProvider } from './providers.js';
+export interface WorktreeOptions {
+    id?: string;
+    /** Keep the worktree + branch on dispose (manual merge). */
+    keepOnDispose?: boolean;
+    /** Base ref/branch for the worktree (default: HEAD). */
+    baseRef?: string;
+}
+export declare class WorktreeWorkspace implements WorkspaceProvider {
+    readonly root: string;
+    readonly branch: string;
+    private readonly sourceRoot;
+    private readonly keep;
+    readonly kind: "worktree";
+    private disposed;
+    private constructor();
+    /** Create an isolated worktree of `sourceRoot`. */
+    static create(sourceRoot: string, options?: WorktreeOptions): Promise<WorktreeWorkspace>;
+    resolve(rel: string): string;
+    /** Files changed in this worktree vs the base (git status --porcelain). */
+    status(): Promise<string[]>;
+    /**
+     * Squash-merge this branch into the currently checked-out branch of the
+     * source repo. Caller must be on the intended target branch.
+     */
+    mergeSquashBack(): Promise<void>;
+    /** Remove the worktree (and its branch unless keep). Idempotent. */
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=worktreeWorkspace.d.ts.map

package/dist/runtime/worktreeWorkspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktreeWorkspace.d.ts","sourceRoot":"","sources":["../../src/runtime/worktreeWorkspace.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAiBD,qBAAa,iBAAkB,YAAW,iBAAiB;IAMvD,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IARvB,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAS;IAEzB,OAAO;IAOP,mDAAmD;WACtC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQlG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAI5B,2EAA2E;IACrE,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IASjC;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAItC,oEAAoE;IAC9D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ/B"}

package/dist/runtime/worktreeWorkspace.js

@@ -0,0 +1,80 @@
+/**
+ * runtime/worktreeWorkspace.ts — git worktree as a WorkspaceProvider.
+ *
+ * Generalizes the CLI krakenWorktree logic (ZELARI_KRAKEN_WORKTREE) into a
+ * seam: two parallel writers on distinct worktrees cannot see each other's
+ * files. Branches are named `zelari/worktree-<id>` under
+ * `<sourceRoot>/.zelari/worktrees/<id>` (gitignored territory).
+ */
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { resolveJailed } from './providers.js';
+async function git(cwd, args) {
+    return await new Promise((resolve, reject) => {
+        const child = spawn('git', args, { cwd, shell: false });
+        let stdout = '';
+        let stderr = '';
+        child.stdout?.on('data', (d) => (stdout += d.toString('utf-8')));
+        child.stderr?.on('data', (d) => (stderr += d.toString('utf-8')));
+        child.on('error', (err) => reject(err));
+        child.on('close', (code) => {
+            if (code === 0)
+                resolve(stdout);
+            else
+                reject(new Error(`git ${args.join(' ')} failed (${code}): ${stderr.trim()}`));
+        });
+    });
+}
+export class WorktreeWorkspace {
+    root;
+    branch;
+    sourceRoot;
+    keep;
+    kind = 'worktree';
+    disposed = false;
+    constructor(root, branch, sourceRoot, keep) {
+        this.root = root;
+        this.branch = branch;
+        this.sourceRoot = sourceRoot;
+        this.keep = keep;
+    }
+    /** Create an isolated worktree of `sourceRoot`. */
+    static async create(sourceRoot, options = {}) {
+        const id = options.id ?? crypto.randomUUID().slice(0, 8);
+        const root = path.join(sourceRoot, '.zelari', 'worktrees', id);
+        const branch = `zelari/worktree-${id}`;
+        await git(sourceRoot, ['worktree', 'add', '-b', branch, root, options.baseRef ?? 'HEAD']);
+        return new WorktreeWorkspace(root, branch, sourceRoot, options.keepOnDispose ?? false);
+    }
+    resolve(rel) {
+        return resolveJailed(this.root, rel);
+    }
+    /** Files changed in this worktree vs the base (git status --porcelain). */
+    async status() {
+        const out = await git(this.root, ['status', '--porcelain']);
+        return out
+            .split('\n')
+            .map((l) => l.trim())
+            .filter(Boolean)
+            .map((l) => l.slice(3).trim());
+    }
+    /**
+     * Squash-merge this branch into the currently checked-out branch of the
+     * source repo. Caller must be on the intended target branch.
+     */
+    async mergeSquashBack() {
+        await git(this.sourceRoot, ['merge', '--squash', this.branch]);
+    }
+    /** Remove the worktree (and its branch unless keep). Idempotent. */
+    async dispose() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        await git(this.sourceRoot, ['worktree', 'remove', '--force', this.root]).catch(() => undefined);
+        if (!this.keep) {
+            await git(this.sourceRoot, ['branch', '-D', this.branch]).catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=worktreeWorkspace.js.map

package/dist/runtime/worktreeWorkspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktreeWorkspace.js","sourceRoot":"","sources":["../../src/runtime/worktreeWorkspace.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAA0B,MAAM,gBAAgB,CAAC;AAUvE,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc;IAC5C,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,iBAAiB;IAMjB;IACA;IACQ;IACA;IARV,IAAI,GAAG,UAAmB,CAAC;IAE5B,QAAQ,GAAG,KAAK,CAAC;IAEzB,YACW,IAAY,EACZ,MAAc,EACN,UAAkB,EAClB,IAAa;QAHrB,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QACN,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAS;IAC7B,CAAC;IAEJ,mDAAmD;IACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,UAA2B,EAAE;QACnE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,mBAAmB,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;QAC1F,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,MAAM;QACV,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5D,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF"}

package/dist/session/exportSession.d.ts

@@ -0,0 +1,31 @@
+/**
+ * session/exportSession.ts — portable, machine-readable session export.
+ *
+ * The export embeds the full event log plus a compact summary; it requires
+ * no lock and is safe to produce from a crashed/interrupted session.
+ */
+import type { SessionStore } from './store.js';
+export declare const SESSION_EXPORT_FORMAT = "zelari-session-export";
+export declare const SESSION_EXPORT_VERSION = 1;
+export interface SessionExport {
+    format: typeof SESSION_EXPORT_FORMAT;
+    version: typeof SESSION_EXPORT_VERSION;
+    sessionId: string;
+    exportedAt: number;
+    summary: {
+        lastSeq: number;
+        eventCount: number;
+        startedAt?: number;
+        endedAt?: number;
+        forkParent?: string;
+        toolCalls: number;
+        toolResults: number;
+        verifications: number;
+        issues: number;
+    };
+    events: unknown[];
+}
+export declare function exportSession(store: SessionStore, sessionId: string): Promise<SessionExport>;
+/** Pretty-printed JSON export (headless `--session-export` output). */
+export declare function exportSessionJson(store: SessionStore, sessionId: string): Promise<string>;
+//# sourceMappingURL=exportSession.d.ts.map

package/dist/session/exportSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exportSession.d.ts","sourceRoot":"","sources":["../../src/session/exportSession.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,qBAAqB,CAAC;IACrC,OAAO,EAAE,OAAO,sBAAsB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAqBlG;AAED,uEAAuE;AACvE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG/F"}