@zenalexa/unicli 0.217.0 → 0.218.0

package/dist/engine/repair/remedies.js

@@ -0,0 +1,169 @@
+const REMEDIES = {
+    "desktop-uia.binary_missing": {
+        message: "Install the Windows UIA sidecar package for this platform.",
+        command: "unicli doctor compute --install",
+        doc: "docs/operate/troubleshooting.md#desktop-uiabinary_missing",
+    },
+    "desktop-uia.startup_failed": {
+        message: "Inspect the UIA sidecar startup logs and retry with tracing.",
+        command: "UNICLI_TRACE=1 unicli doctor compute",
+        doc: "docs/operate/troubleshooting.md#desktop-uiastartup_failed",
+    },
+    "desktop-uia.permission": {
+        message: "Run from an elevated terminal or install the sidecar with UIAccess.",
+        doc: "docs/operate/troubleshooting.md#desktop-uiapermission",
+    },
+    "desktop-uia.no_element": {
+        message: "The ref is stale; take a fresh compute snapshot and retry.",
+        command: "unicli compute snapshot",
+        doc: "docs/operate/troubleshooting.md#desktop-uiano_element",
+    },
+    "desktop-uia.not_invokable": {
+        message: "Use set-value or keyboard press for elements without Invoke.",
+        doc: "docs/operate/troubleshooting.md#desktop-uianot_invokable",
+    },
+    "desktop-uia.timeout": {
+        message: "Retry the call; the sidecar should restart after a timeout.",
+        doc: "docs/operate/troubleshooting.md#desktop-uiatimeout",
+    },
+    "desktop-uia.sidecar_crashed": {
+        message: "Retry once; inspect UIA sidecar startup logs if it repeats.",
+        command: "UNICLI_TRACE=1 unicli doctor compute",
+        doc: "docs/operate/troubleshooting.md#desktop-uiasidecar_crashed",
+    },
+    "desktop-atspi.binary_missing": {
+        message: "Install the Linux AT-SPI sidecar package for this platform.",
+        command: "unicli doctor compute --install",
+        doc: "docs/operate/troubleshooting.md#desktop-atspibinary_missing",
+    },
+    "desktop-atspi.dbus_blocked": {
+        message: "Start the user AT-SPI bus daemon.",
+        command: "systemctl --user start at-spi-dbus-bus",
+        doc: "docs/operate/troubleshooting.md#desktop-atspidbus_blocked",
+    },
+    "desktop-atspi.no_a11y_attr": {
+        message: "Enable accessibility support in the target app and retry.",
+        doc: "docs/operate/troubleshooting.md#desktop-atspino_a11y_attr",
+    },
+    "desktop-atspi.wayland-input": {
+        message: "Install a Wayland input helper for fallback key/mouse actions.",
+        command: "sudo apt install ydotool",
+        doc: "docs/operate/troubleshooting.md#desktop-atspiwayland-input",
+    },
+    "desktop-atspi.x11-input": {
+        message: "Install xdotool for X11 fallback key/mouse actions.",
+        command: "sudo apt install xdotool",
+        doc: "docs/operate/troubleshooting.md#desktop-atspix11-input",
+    },
+    "desktop-atspi.no_element": {
+        message: "The ref is stale; take a fresh compute snapshot and retry.",
+        command: "unicli compute snapshot",
+        doc: "docs/operate/troubleshooting.md#desktop-atspino_element",
+    },
+    "desktop-atspi.sidecar_crashed": {
+        message: "Retry once; inspect AT-SPI sidecar startup logs if it repeats.",
+        command: "UNICLI_TRACE=1 unicli doctor compute",
+        doc: "docs/operate/troubleshooting.md#desktop-atspisidecar_crashed",
+    },
+    "desktop-ax.permission": {
+        message: "Grant macOS Accessibility to the app or terminal launching Uni-CLI.",
+        deeplink: "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility",
+        doc: "docs/operate/troubleshooting.md#desktop-axpermission",
+    },
+    "desktop-ax.screen-recording": {
+        message: "Grant macOS Screen Recording for screenshot fallback.",
+        deeplink: "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture",
+        doc: "docs/operate/troubleshooting.md#desktop-axscreen-recording",
+    },
+    "desktop-ax.binary_missing": {
+        message: "Install Xcode command line tools so the AX Swift helper can run.",
+        command: "xcode-select --install",
+        doc: "docs/operate/troubleshooting.md#desktop-axbinary_missing",
+    },
+    "cdp-browser.attach_failed": {
+        message: "Check the CDP port or relaunch the app with remote debugging enabled.",
+        doc: "docs/operate/troubleshooting.md#cdp-browserattach_failed",
+    },
+    "cdp-browser.electron_running_without_debug_port": {
+        message: "Launch the Electron app with a remote debugging port.",
+        command: "unicli compute launch <app> --debug-port 9229",
+        doc: "docs/operate/troubleshooting.md#cdp-browserelectron_running_without_debug_port",
+    },
+    "cua.no_backend": {
+        message: "Configure a CUA backend key for screenshot/VLM fallback.",
+        doc: "docs/operate/troubleshooting.md#cuano_backend",
+    },
+    "compute.compute_find.ref-store": {
+        message: "Run a fresh snapshot so refs are available, then retry find.",
+        command: "unicli compute snapshot",
+        doc: "docs/operate/troubleshooting.md#computecompute_findref-store",
+    },
+};
+const COMPUTE_NO_TRANSPORT = {
+    message: "Run the compute doctor to identify the blocked transport.",
+    command: "unicli doctor compute",
+    doc: "docs/operate/troubleshooting.md#computestepno-transport-available",
+};
+const COMPUTE_EDGE_REMEDIES = {
+    element_off_screen: {
+        message: "Scroll the element into view or take a fresh snapshot.",
+        command: "unicli compute snapshot",
+        doc: "docs/operate/troubleshooting.md#computestepelement_off_screen",
+    },
+    window_minimized: {
+        message: "Restore or focus the target window before retrying.",
+        doc: "docs/operate/troubleshooting.md#computestepwindow_minimized",
+    },
+    element_disabled: {
+        message: "Wait for the element to become enabled, then retry.",
+        command: "unicli compute wait --state enabled",
+        doc: "docs/operate/troubleshooting.md#computestepelement_disabled",
+    },
+    ref_expired: {
+        message: "The ref expired; take a fresh snapshot and retry.",
+        command: "unicli compute snapshot",
+        doc: "docs/operate/troubleshooting.md#computestepref_expired",
+    },
+    sidecar_crashed: {
+        message: "Retry once; the sidecar should restart before the next call.",
+        command: "UNICLI_TRACE=1 unicli doctor compute",
+        doc: "docs/operate/troubleshooting.md#computestepsidecar_crashed",
+    },
+    sidecar_busy: {
+        message: "Retry after the current sidecar call completes.",
+        doc: "docs/operate/troubleshooting.md#computestepsidecar_busy",
+    },
+    app_ambiguous: {
+        message: "Disambiguate the target by bundle id, process name, pid, or window id.",
+        command: "unicli compute windows --app <name>",
+        doc: "docs/operate/troubleshooting.md#computestepapp_ambiguous",
+    },
+    focus_required: {
+        message: "Retry with explicit focus only if background control is impossible.",
+        doc: "docs/operate/troubleshooting.md#computestepfocus_required",
+    },
+};
+export function lookupRemedy(minimumCapability) {
+    if (!minimumCapability)
+        return undefined;
+    if (minimumCapability in REMEDIES)
+        return REMEDIES[minimumCapability];
+    if (minimumCapability.startsWith("compute.") &&
+        minimumCapability.endsWith(".no-transport-available")) {
+        return COMPUTE_NO_TRANSPORT;
+    }
+    const edgeKey = minimumCapability.split(".").at(-1);
+    if (minimumCapability.startsWith("compute.") &&
+        edgeKey &&
+        edgeKey in COMPUTE_EDGE_REMEDIES) {
+        return COMPUTE_EDGE_REMEDIES[edgeKey];
+    }
+    return undefined;
+}
+export function enrichErrorWithRemedy(error) {
+    if (error.remedy)
+        return error;
+    const remedy = lookupRemedy(error.minimum_capability);
+    return remedy ? { ...error, remedy } : error;
+}
+//# sourceMappingURL=remedies.js.map

package/dist/engine/repair/remedies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remedies.js","sourceRoot":"","sources":["../../../src/engine/repair/remedies.ts"],"names":[],"mappings":"AAEA,MAAM,QAAQ,GAA6C;IACzD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,4DAA4D;QACrE,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,2DAA2D;KACjE;IACD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,8DAA8D;QACvE,OAAO,EAAE,sCAAsC;QAC/C,GAAG,EAAE,2DAA2D;KACjE;IACD,wBAAwB,EAAE;QACxB,OAAO,EACL,qEAAqE;QACvE,GAAG,EAAE,uDAAuD;KAC7D;IACD,wBAAwB,EAAE;QACxB,OAAO,EAAE,4DAA4D;QACrE,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,uDAAuD;KAC7D;IACD,2BAA2B,EAAE;QAC3B,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,0DAA0D;KAChE;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,6DAA6D;QACtE,GAAG,EAAE,oDAAoD;KAC1D;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,6DAA6D;QACtE,OAAO,EAAE,sCAAsC;QAC/C,GAAG,EAAE,4DAA4D;KAClE;IACD,8BAA8B,EAAE;QAC9B,OAAO,EAAE,6DAA6D;QACtE,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,6DAA6D;KACnE;IACD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,mCAAmC;QAC5C,OAAO,EAAE,wCAAwC;QACjD,GAAG,EAAE,2DAA2D;KACjE;IACD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,2DAA2D;QACpE,GAAG,EAAE,2DAA2D;KACjE;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,gEAAgE;QACzE,OAAO,EAAE,0BAA0B;QACnC,GAAG,EAAE,4DAA4D;KAClE;IACD,yBAAyB,EAAE;QACzB,OAAO,EAAE,qDAAqD;QAC9D,OAAO,EAAE,0BAA0B;QACnC,GAAG,EAAE,wDAAwD;KAC9D;IACD,0BAA0B,EAAE;QAC1B,OAAO,EAAE,4DAA4D;QACrE,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,yDAAyD;KAC/D;IACD,+BAA+B,EAAE;QAC/B,OAAO,EAAE,gEAAgE;QACzE,OAAO,EAAE,sCAAsC;QAC/C,GAAG,EAAE,8DAA8D;KACpE;IACD,uBAAuB,EAAE;QACvB,OAAO,EACL,qEAAqE;QACvE,QAAQ,EACN,+EAA+E;QACjF,GAAG,EAAE,sDAAsD;KAC5D;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EACN,+EAA+E;QACjF,GAAG,EAAE,4DAA4D;KAClE;IACD,2BAA2B,EAAE;QAC3B,OAAO,EAAE,kEAAkE;QAC3E,OAAO,EAAE,wBAAwB;QACjC,GAAG,EAAE,0DAA0D;KAChE;IACD,2BAA2B,EAAE;QAC3B,OAAO,EACL,uEAAuE;QACzE,GAAG,EAAE,0DAA0D;KAChE;IACD,iDAAiD,EAAE;QACjD,OAAO,EAAE,uDAAuD;QAChE,OAAO,EAAE,+CAA+C;QACxD,GAAG,EAAE,gFAAgF;KACtF;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,0DAA0D;QACnE,GAAG,EAAE,+CAA+C;KACrD;IACD,gCAAgC,EAAE;QAChC,OAAO,EAAE,8DAA8D;QACvE,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,8DAA8D;KACpE;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAmB;IAC3C,OAAO,EAAE,2DAA2D;IACpE,OAAO,EAAE,uBAAuB;IAChC,GAAG,EAAE,mEAAmE;CACzE,CAAC;AAEF,MAAM,qBAAqB,GAA6C;IACtE,kBAAkB,EAAE;QAClB,OAAO,EAAE,wDAAwD;QACjE,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,+DAA+D;KACrE;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,qDAAqD;QAC9D,GAAG,EAAE,6DAA6D;KACnE;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,qDAAqD;QAC9D,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,6DAA6D;KACnE;IACD,WAAW,EAAE;QACX,OAAO,EAAE,mDAAmD;QAC5D,OAAO,EAAE,yBAAyB;QAClC,GAAG,EAAE,wDAAwD;KAC9D;IACD,eAAe,EAAE;QACf,OAAO,EAAE,8DAA8D;QACvE,OAAO,EAAE,sCAAsC;QAC/C,GAAG,EAAE,4DAA4D;KAClE;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,iDAAiD;QAC1D,GAAG,EAAE,yDAAyD;KAC/D;IACD,aAAa,EAAE;QACb,OAAO,EACL,wEAAwE;QAC1E,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,0DAA0D;KAChE;IACD,cAAc,EAAE;QACd,OAAO,EACL,qEAAqE;QACvE,GAAG,EAAE,2DAA2D;KACjE;CACF,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,iBAAqC;IAErC,IAAI,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,iBAAiB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACtE,IACE,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,iBAAiB,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EACrD,CAAC;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IACE,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,OAAO;QACP,OAAO,IAAI,qBAAqB,EAChC,CAAC;QACD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAoB;IACxD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC"}

package/dist/engine/runtime-resource-guard.d.ts

@@ -0,0 +1,23 @@
+import { type PipelineContext } from "./executor.js";
+import type { CapabilityAccess } from "./capability-policy.js";
+import type { OperationEffect } from "./operation-policy.js";
+interface RuntimeResourceGuardOptions {
+    action: string;
+    step: number;
+    config: unknown;
+}
+export declare function assertRuntimeNetworkAllowed(ctx: PipelineContext, options: RuntimeResourceGuardOptions & {
+    url: string;
+    access?: Extract<CapabilityAccess, "read" | "write">;
+    effect?: OperationEffect;
+}): void;
+export declare function assertRuntimePathAllowed(ctx: PipelineContext, options: RuntimeResourceGuardOptions & {
+    path: string;
+    access?: Extract<CapabilityAccess, "read" | "write">;
+    effect?: OperationEffect;
+}): void;
+export declare function assertRuntimeExecutableAllowed(ctx: PipelineContext, options: RuntimeResourceGuardOptions & {
+    command: string;
+}): void;
+export {};
+//# sourceMappingURL=runtime-resource-guard.d.ts.map

package/dist/engine/runtime-resource-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-resource-guard.d.ts","sourceRoot":"","sources":["../../src/engine/runtime-resource-guard.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAO7D,UAAU,2BAA2B;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,2BAA2B,GAAG;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B,GACA,IAAI,CAeN;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,2BAA2B,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B,GACA,IAAI,CAYN;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,2BAA2B,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB,GACA,IAAI,CAWN"}

package/dist/engine/runtime-resource-guard.js

@@ -0,0 +1,85 @@
+import { existsSync, realpathSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { PipelineError } from "./executor.js";
+import { createPermissionRulesStore, findDenyRuleForRuntimeResourceSync, } from "./permission-rules.js";
+export function assertRuntimeNetworkAllowed(ctx, options) {
+    const domain = domainFromUrl(options.url);
+    if (!domain)
+        return;
+    const access = options.access ?? "read";
+    assertRuntimeResourceAllowed(ctx, {
+        effect: options.effect ?? (access === "read" ? "read" : "remote_resource"),
+        dimensions: { network: access },
+        resources: { domains: [domain] },
+        resource_summary: [`domain:${domain}`],
+    }, options);
+}
+export function assertRuntimePathAllowed(ctx, options) {
+    const path = normalizePath(options.path);
+    assertRuntimeResourceAllowed(ctx, {
+        effect: options.effect ?? "local_file",
+        dimensions: { file: options.access ?? "write" },
+        resources: { paths: [path] },
+        resource_summary: [`path:${path}`],
+    }, options);
+}
+export function assertRuntimeExecutableAllowed(ctx, options) {
+    assertRuntimeResourceAllowed(ctx, {
+        effect: "local_app",
+        dimensions: { process: "write" },
+        resources: { executables: [options.command] },
+        resource_summary: [`executable:${options.command}`],
+    }, options);
+}
+function assertRuntimeResourceAllowed(ctx, input, options) {
+    const rule = findDenyRuleForRuntimeResourceSync({
+        site: ctx.site,
+        command: ctx.command,
+        ...input,
+    });
+    if (!rule)
+        return;
+    throw new PipelineError(`permission rule "${rule.id}" denies runtime resource: ${rule.reason}`, {
+        step: options.step,
+        action: options.action,
+        config: {
+            rule_id: rule.id,
+            resources: input.resources,
+        },
+        errorType: "permission_denied",
+        suggestion: `Edit or remove permission rule "${rule.id}" in ${createPermissionRulesStore().path}.`,
+        retryable: false,
+        alternatives: ["unicli --dry-run <site> <command>"],
+    });
+}
+function domainFromUrl(raw) {
+    try {
+        return new URL(raw).hostname.toLowerCase().replace(/\.+$/, "");
+    }
+    catch {
+        return undefined;
+    }
+}
+function normalizePath(path) {
+    return realpathAwareResolve(path);
+}
+function realpathAwareResolve(path) {
+    const resolved = resolve(path);
+    const missing = [];
+    let current = resolved;
+    while (!existsSync(current)) {
+        const parent = dirname(current);
+        if (parent === current)
+            return resolved;
+        missing.unshift(basename(current));
+        current = parent;
+    }
+    try {
+        const real = realpathSync(current);
+        return missing.length > 0 ? join(real, ...missing) : real;
+    }
+    catch {
+        return resolved;
+    }
+}
+//# sourceMappingURL=runtime-resource-guard.js.map

package/dist/engine/runtime-resource-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-resource-guard.js","sourceRoot":"","sources":["../../src/engine/runtime-resource-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAC;AAGpE,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,GAEnC,MAAM,uBAAuB,CAAC;AAQ/B,MAAM,UAAU,2BAA2B,CACzC,GAAoB,EACpB,OAIC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,4BAA4B,CAC1B,GAAG,EACH;QACE,MAAM,EACJ,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACpE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;QAC/B,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;QAChC,gBAAgB,EAAE,CAAC,UAAU,MAAM,EAAE,CAAC;KACvC,EACD,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAAoB,EACpB,OAIC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,4BAA4B,CAC1B,GAAG,EACH;QACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,YAAY;QACtC,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,EAAE;QAC/C,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE;QAC5B,gBAAgB,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;KACnC,EACD,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAAoB,EACpB,OAEC;IAED,4BAA4B,CAC1B,GAAG,EACH;QACE,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;QAChC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QAC7C,gBAAgB,EAAE,CAAC,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC;KACpD,EACD,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,GAAoB,EACpB,KAAgC,EAChC,OAAoC;IAEpC,MAAM,IAAI,GAAG,kCAAkC,CAAC;QAC9C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,KAAK;KACT,CAAC,CAAC;IACH,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,MAAM,IAAI,aAAa,CACrB,oBAAoB,IAAI,CAAC,EAAE,8BAA8B,IAAI,CAAC,MAAM,EAAE,EACtE;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE;YACN,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;QACD,SAAS,EAAE,mBAAmB;QAC9B,UAAU,EAAE,mCAAmC,IAAI,CAAC,EAAE,QAAQ,0BAA0B,EAAE,CAAC,IAAI,GAAG;QAClG,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,CAAC,mCAAmC,CAAC;KACpD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,QAAQ,CAAC;IAEvB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,QAAQ,CAAC;QACxC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/engine/session/args.d.ts

@@ -0,0 +1,3 @@
+export declare function stableRunJson(value: unknown): string;
+export declare function hashRunArgs(args: Record<string, unknown>): string;
+//# sourceMappingURL=args.d.ts.map

package/dist/engine/session/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/engine/session/args.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcpD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEjE"}

package/dist/engine/session/args.js

@@ -0,0 +1,17 @@
+import { createHash } from "node:crypto";
+export function stableRunJson(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map(stableRunJson).join(",")}]`;
+    }
+    if (value && typeof value === "object") {
+        return `{${Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${stableRunJson(value[key])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value) ?? "undefined";
+}
+export function hashRunArgs(args) {
+    return `sha256:${createHash("sha256").update(stableRunJson(args)).digest("hex")}`;
+}
+//# sourceMappingURL=args.js.map

package/dist/engine/session/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../src/engine/session/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC;aACrD,IAAI,EAAE;aACN,GAAG,CACF,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CACrF;aACA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAA6B;IACvD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/engine/session/compare.d.ts

@@ -0,0 +1,92 @@
+import { type RunSummary } from "./query.js";
+import type { RunEvent, RunId } from "./types.js";
+export type RunComparisonStatus = "match" | "diverged" | "unknown";
+export type RunComparisonImpact = "behavior" | "context";
+export interface RunComparisonCheck {
+    name: string;
+    impact: RunComparisonImpact;
+    status: RunComparisonStatus;
+    left?: unknown;
+    right?: unknown;
+}
+export interface RunComparableResult {
+    exit_code?: number;
+    result_count?: number;
+    error_code?: string;
+    envelope_command?: string;
+    has_error?: boolean;
+    runtime_permission_denied?: RunComparableRuntimePermissionDenied;
+}
+export interface RunComparableRuntimePermissionDenied {
+    action?: string;
+    step?: number;
+    rule_id?: string;
+    resource_buckets?: string[];
+}
+export interface RunComparableEvidence {
+    total: number;
+    by_type: Record<string, number>;
+}
+export interface RunComparableEnvironment {
+    unicli_version?: string;
+    node_version?: string;
+    platform?: string;
+    arch?: string;
+    ci?: boolean;
+    permission_profile?: string;
+    transport_surface?: string;
+    target_surface?: string;
+    pipeline_steps?: number;
+}
+export interface RunComparableSummary {
+    run_id: RunId;
+    command?: string;
+    status: RunSummary["status"];
+    args_hash?: string;
+    permission_profile?: string;
+    transport_surface?: string;
+    target_surface?: string;
+    browser_target_kind?: string;
+    browser_tab_id?: number;
+    browser_window_id?: number;
+    browser_auth_state?: string;
+    environment?: RunComparableEnvironment;
+    result: RunComparableResult;
+    evidence: RunComparableEvidence;
+}
+export interface RunComparisonCounts {
+    match: number;
+    diverged: number;
+    unknown: number;
+}
+export interface RunComparisonScoreBucket extends RunComparisonCounts {
+    total: number;
+    score: number;
+}
+export interface RunComparisonScore {
+    passed: boolean;
+    overall: number;
+    behavior: RunComparisonScoreBucket;
+    context: RunComparisonScoreBucket;
+    failed_behavior_checks: string[];
+    unknown_behavior_checks: string[];
+    failed_context_checks: string[];
+    unknown_context_checks: string[];
+}
+export interface RunComparison {
+    left_run_id: RunId;
+    right_run_id: RunId;
+    status: RunComparisonStatus;
+    behavior: RunComparisonCounts;
+    context: RunComparisonCounts;
+    score: RunComparisonScore;
+    checks: RunComparisonCheck[];
+    left: RunComparableSummary;
+    right: RunComparableSummary;
+}
+export declare function summarizeComparableRun(events: RunEvent[], runId: RunId): RunComparableSummary;
+export declare function compareRunEvents(leftEvents: RunEvent[], rightEvents: RunEvent[], options: {
+    leftRunId: RunId;
+    rightRunId: RunId;
+}): RunComparison;
+//# sourceMappingURL=compare.d.ts.map

package/dist/engine/session/compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.d.ts","sourceRoot":"","sources":["../../../src/engine/session/compare.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAoB,MAAM,YAAY,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,yBAAyB,CAAC,EAAE,oCAAoC,CAAC;CAClE;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,KAAK,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAyB,SAAQ,mBAAmB;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,OAAO,EAAE,wBAAwB,CAAC;IAClC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,sBAAsB,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,KAAK,CAAC;IACnB,YAAY,EAAE,KAAK,CAAC;IACpB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAuLD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,QAAQ,EAAE,EAClB,KAAK,EAAE,KAAK,GACX,oBAAoB,CAkEtB;AAgID,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,QAAQ,EAAE,EACtB,WAAW,EAAE,QAAQ,EAAE,EACvB,OAAO,EAAE;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAC/C,aAAa,CAqMf"}