agentrinse 0.0.0 → 0.2.0

package/dist/adapters/provider-reachability.js

@@ -0,0 +1,207 @@
+import { lstat, readFile } from "node:fs/promises";
+import { isAbsolute, join, resolve } from "node:path";
+import { sha256 } from "../core/digest.js";
+function isMissing(error) {
+    return (error instanceof Error && "code" in error && error.code === "ENOENT");
+}
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function diagnostic(adapter, code, message) {
+    return {
+        severity: "warning",
+        code,
+        message,
+        adapter,
+    };
+}
+async function readMetadataObject(path) {
+    try {
+        const stats = await lstat(path);
+        if (stats.isSymbolicLink()) {
+            return { status: "invalid", message: "Metadata symlinks are not followed." };
+        }
+        if (!stats.isFile()) {
+            return { status: "invalid", message: "Metadata path is not a regular file." };
+        }
+        const value = JSON.parse(await readFile(path, "utf8"));
+        return isObject(value)
+            ? { status: "available", value }
+            : { status: "invalid", message: "Metadata root must be a JSON object." };
+    }
+    catch (error) {
+        if (isMissing(error)) {
+            return { status: "absent" };
+        }
+        return {
+            status: "invalid",
+            message: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+function addPathRoot(index, input) {
+    if (!isAbsolute(input.path)) {
+        return false;
+    }
+    const path = resolve(input.path);
+    index.add({
+        path,
+        code: input.code,
+        source: input.source,
+        detail: input.detail,
+        evidenceRef: sha256(`${input.source}\0${input.field}\0${path}`),
+        ...(input.scope === undefined ? {} : { scope: input.scope }),
+    });
+    return true;
+}
+async function addManagedRoot(adapter, root, index) {
+    const worktrees = join(root, "worktrees");
+    try {
+        const stats = await lstat(worktrees);
+        if (stats.isSymbolicLink() || !stats.isDirectory()) {
+            index.addGlobal({
+                code: "unknown-provider-state",
+                source: adapter,
+                detail: `${adapter} managed worktree ownership could not be proven.`,
+            });
+            return [
+                diagnostic(adapter, "PROVIDER_WORKTREE_ROOT_UNSAFE", "The managed worktree root must be a real directory."),
+            ];
+        }
+        addPathRoot(index, {
+            path: worktrees,
+            code: "provider-managed-worktree",
+            source: adapter,
+            detail: `${adapter} owns this managed worktree.`,
+            field: "worktrees",
+            scope: "subtree",
+        });
+        return [];
+    }
+    catch (error) {
+        if (isMissing(error)) {
+            return [];
+        }
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: adapter,
+            detail: `${adapter} managed worktree ownership could not be proven.`,
+        });
+        return [
+            diagnostic(adapter, "PROVIDER_WORKTREE_ROOT_UNREADABLE", error instanceof Error ? error.message : String(error)),
+        ];
+    }
+}
+function parsePathArray(value, add) {
+    if (value === undefined) {
+        return "absent";
+    }
+    if (!Array.isArray(value) || value.some((path) => typeof path !== "string")) {
+        return "invalid";
+    }
+    for (const path of value) {
+        add(path);
+    }
+    return "valid";
+}
+function parsePathRecord(value, add) {
+    if (value === undefined) {
+        return "absent";
+    }
+    if (!isObject(value) || Object.values(value).some((path) => typeof path !== "string")) {
+        return "invalid";
+    }
+    for (const path of Object.values(value)) {
+        add(path);
+    }
+    return "valid";
+}
+async function collectCodexReachability(root, index) {
+    const diagnostics = await addManagedRoot("codex", root, index);
+    const metadata = await readMetadataObject(join(root, ".codex-global-state.json"));
+    if (metadata.status !== "available") {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "codex",
+            detail: "Codex workspace metadata could not be proven.",
+        });
+        diagnostics.push(diagnostic("codex", metadata.status === "absent"
+            ? "CODEX_WORKSPACE_METADATA_MISSING"
+            : "CODEX_WORKSPACE_METADATA_INVALID", metadata.status === "absent"
+            ? "Codex workspace metadata is unavailable."
+            : metadata.message));
+        return diagnostics;
+    }
+    let invalidPath = false;
+    const add = (code, detail, field) => (path) => {
+        if (!addPathRoot(index, { path, code, source: "codex", detail, field })) {
+            invalidPath = true;
+        }
+    };
+    const fieldStates = [
+        parsePathArray(metadata.value["active-workspace-roots"], add("active-session", "Codex marks this workspace as active.", "active-workspace-roots")),
+        parsePathArray(metadata.value["electron-saved-workspace-roots"], add("recent-session", "Codex retains this saved workspace.", "electron-saved-workspace-roots")),
+        parsePathRecord(metadata.value["thread-workspace-root-hints"], add("recent-session", "Codex thread metadata references this workspace.", "thread-workspace-root-hints")),
+    ];
+    if (invalidPath ||
+        fieldStates.includes("invalid") ||
+        fieldStates.every((state) => state === "absent")) {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "codex",
+            detail: "Codex workspace metadata is unsupported or incomplete.",
+        });
+        diagnostics.push(diagnostic("codex", "CODEX_WORKSPACE_METADATA_UNSUPPORTED", "Codex workspace metadata contains unsupported path fields."));
+    }
+    return diagnostics;
+}
+async function collectClaudeReachability(context, root, index) {
+    const diagnostics = await addManagedRoot("claude", root, index);
+    const metadata = await readMetadataObject(join(context.home, ".claude.json"));
+    if (metadata.status !== "available" || !isObject(metadata.value.projects)) {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "claude",
+            detail: "Claude project metadata could not be proven.",
+        });
+        diagnostics.push(diagnostic("claude", metadata.status === "absent"
+            ? "CLAUDE_PROJECT_METADATA_MISSING"
+            : "CLAUDE_PROJECT_METADATA_INVALID", metadata.status === "available"
+            ? "Claude project metadata must contain a projects object."
+            : metadata.status === "absent"
+                ? "Claude project metadata is unavailable."
+                : metadata.message));
+        return diagnostics;
+    }
+    let invalidPath = false;
+    for (const path of Object.keys(metadata.value.projects)) {
+        if (!addPathRoot(index, {
+            path,
+            code: "recent-session",
+            source: "claude",
+            detail: "Claude project metadata references this workspace.",
+            field: "projects",
+        })) {
+            invalidPath = true;
+        }
+    }
+    if (invalidPath) {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "claude",
+            detail: "Claude project metadata contains unsupported workspace paths.",
+        });
+        diagnostics.push(diagnostic("claude", "CLAUDE_PROJECT_METADATA_UNSUPPORTED", "Claude project metadata contains non-absolute workspace paths."));
+    }
+    return diagnostics;
+}
+export async function collectProviderReachability(adapter, context, root, index) {
+    if (adapter === "codex") {
+        return collectCodexReachability(root, index);
+    }
+    if (adapter === "claude") {
+        return collectClaudeReachability(context, root, index);
+    }
+    return [];
+}
+//# sourceMappingURL=provider-reachability.js.map

package/dist/adapters/provider-reachability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-reachability.js","sourceRoot":"","sources":["../../src/adapters/provider-reachability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAItD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAM3C,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,IAAY,EAAE,OAAe;IAC3E,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,IAAI;QACJ,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY;IAMZ,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE;YAChC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,KAAwB,EACxB,KAOC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC;QACR,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAA0B,EAC1B,IAAY,EACZ,KAAwB;IAExB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,OAAO,kDAAkD;aACrE,CAAC,CAAC;YACH,OAAO;gBACL,UAAU,CACR,OAAO,EACP,+BAA+B,EAC/B,qDAAqD,CACtD;aACF,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,KAAK,EAAE;YACjB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,GAAG,OAAO,8BAA8B;YAChD,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,GAAG,OAAO,kDAAkD;SACrE,CAAC,CAAC;QACH,OAAO;YACL,UAAU,CACR,OAAO,EACP,mCAAmC,EACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,GAA2B;IAE3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAc,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,GAA2B;IAE3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAc,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAY,EACZ,KAAwB;IAExB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,+CAA+C;SACxD,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,OAAO,EACP,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,kCAAkC,EACtC,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,QAAQ,CAAC,OAAO,CACrB,CACF,CAAC;QACF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;QAC5E,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,WAAW,GAAG;QAClB,cAAc,CACZ,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,EACxC,GAAG,CAAC,gBAAgB,EAAE,uCAAuC,EAAE,wBAAwB,CAAC,CACzF;QACD,cAAc,CACZ,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAChD,GAAG,CACD,gBAAgB,EAChB,qCAAqC,EACrC,gCAAgC,CACjC,CACF;QACD,eAAe,CACb,QAAQ,CAAC,KAAK,CAAC,6BAA6B,CAAC,EAC7C,GAAG,CACD,gBAAgB,EAChB,kDAAkD,EAClD,6BAA6B,CAC9B,CACF;KACF,CAAC;IAEF,IACE,WAAW;QACX,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC/B,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,EAChD,CAAC;QACD,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,wDAAwD;SACjE,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,OAAO,EACP,sCAAsC,EACtC,4DAA4D,CAC7D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAqB,EACrB,IAAY,EACZ,KAAwB;IAExB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1E,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,8CAA8C;SACvD,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,QAAQ,EACR,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,iCAAiC,EACrC,QAAQ,CAAC,MAAM,KAAK,WAAW;YAC7B,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC5B,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,QAAQ,CAAC,OAAO,CACvB,CACF,CAAC;QACF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,IACE,CAAC,WAAW,CAAC,KAAK,EAAE;YAClB,IAAI;YACJ,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,oDAAoD;YAC5D,KAAK,EAAE,UAAU;SAClB,CAAC,EACF,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,QAAQ,EACR,qCAAqC,EACrC,gEAAgE,CACjE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAA0B,EAC1B,OAAqB,EACrB,IAAY,EACZ,KAAwB;IAExB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/adapters/provider-specs.d.ts

@@ -1,6 +1,6 @@
 import type { AdapterId } from "../config/schema.js";
 import type { ResourceKind } from "../contracts/resource.js";
-export type ProviderAdapterId = Exclude<AdapterId, "git" | "docker">;
+export type ProviderAdapterId = Exclude<AdapterId, "git" | "docker" | "runtime">;
 export type ProviderResourceSpec = {
     relativePath: string;
     displayName: string;

package/dist/adapters/provider-specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-specs.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-specs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;AAErE,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;IAC7D,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAuJlE,CAAC"}
+{"version":3,"file":"provider-specs.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-specs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC;AAEjF,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;IAC7D,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAuJlE,CAAC"}

package/dist/adapters/registry.d.ts

@@ -1,4 +1,10 @@
 import type { AgentRinseConfig } from "../config/schema.js";
 import type { AuditAdapter } from "../contracts/adapter.js";
-export declare function createAuditAdapters(config: AgentRinseConfig, platform?: NodeJS.Platform): AuditAdapter[];
+import { type ReachabilityRoot } from "../core/reachability.js";
+export type AuditAdapterRegistryOptions = {
+    providerInventory?: boolean;
+    roots?: ReachabilityRoot[];
+    environment?: NodeJS.ProcessEnv;
+};
+export declare function createAuditAdapters(config: AgentRinseConfig, platform?: NodeJS.Platform, options?: AuditAdapterRegistryOptions): AuditAdapter[];
 //# sourceMappingURL=registry.d.ts.map

package/dist/adapters/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAS5D,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,YAAY,EAAE,CA+BhB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAUnF,MAAM,MAAM,2BAA2B,GAAG;IACxC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,OAAO,GAAE,2BAAgC,GACxC,YAAY,EAAE,CAiFhB"}

package/dist/adapters/registry.js

@@ -1,24 +1,64 @@
+import { sha256 } from "../core/digest.js";
+import { ReachabilityIndex } from "../core/reachability.js";
 import { ArtifactAuditAdapter } from "./artifacts/adapter.js";
 import { DockerAuditAdapter } from "./docker/adapter.js";
 import { GitWorktreeAuditAdapter } from "./git/adapter.js";
 import { ProviderAuditAdapter } from "./provider-adapter.js";
 import { PROVIDER_SPECS } from "./provider-specs.js";
+import { RuntimeAuditAdapter } from "./runtime/adapter.js";
 const PROVIDER_IDS = Object.keys(PROVIDER_SPECS);
-export function createAuditAdapters(config, platform = process.platform) {
+export function createAuditAdapters(config, platform = process.platform, options = {}) {
+    const reachability = new ReachabilityIndex();
+    const gitEnabled = config.adapters.git?.enabled === true;
+    for (const root of options.roots ?? []) {
+        reachability.add(root);
+    }
+    for (const pin of config.pins) {
+        const root = {
+            code: "user-pin",
+            source: "config",
+            detail: "User configuration pins this resource.",
+            evidenceRef: sha256(JSON.stringify(pin)),
+            ...(pin.expiresAt === undefined ? {} : { expiresAt: pin.expiresAt }),
+        };
+        if ("path" in pin) {
+            reachability.add({ ...root, path: pin.path });
+        }
+        else if ("resourceId" in pin) {
+            reachability.addResource(pin.resourceId, root);
+        }
+        else if (gitEnabled) {
+            reachability.addGitRef(pin.gitRef, root);
+        }
+        else {
+            reachability.addGlobal({
+                ...root,
+                detail: "Git ref pin resolution requires the Git adapter.",
+            });
+        }
+    }
     const adapters = PROVIDER_IDS.filter((id) => config.adapters[id]?.enabled !== false).map((id) => new ProviderAuditAdapter(PROVIDER_SPECS[id], {
         ...(config.adapters[id]?.root === undefined ? {} : { root: config.adapters[id].root }),
         platform,
         measureBytes: config.audit.measureBytes,
         maxEntries: config.audit.maxEntries,
+        reachability,
+        inventoryResources: options.providerInventory ?? true,
     }));
+    if (gitEnabled) {
+        adapters.push(new GitWorktreeAuditAdapter(config.adapters.git?.root, undefined, undefined, undefined, reachability));
+    }
     if (config.artifacts.projects.length > 0) {
         adapters.push(new ArtifactAuditAdapter({
             ...config.artifacts,
             ...config.audit,
-        }));
+        }, undefined, undefined, reachability));
     }
-    if (config.adapters.git?.enabled === true) {
-        adapters.push(new GitWorktreeAuditAdapter(config.adapters.git.root));
+    if (config.adapters.runtime?.enabled !== false) {
+        adapters.push(new RuntimeAuditAdapter({
+            platform,
+            ...(options.environment === undefined ? {} : { environment: options.environment }),
+        }));
     }
     if (config.adapters.docker?.enabled === true) {
         adapters.push(new DockerAuditAdapter());

package/dist/adapters/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAA0B,MAAM,qBAAqB,CAAC;AAE7E,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAwB,CAAC;AAExE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,MAAM,QAAQ,GAAmB,YAAY,CAAC,MAAM,CAClD,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAC/C,CAAC,GAAG,CACH,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE;QAC3C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;QACvC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;KACpC,CAAC,CACL,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CACX,IAAI,oBAAoB,CAAC;YACvB,GAAG,MAAM,CAAC,SAAS;YACnB,GAAG,MAAM,CAAC,KAAK;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAyB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAA0B,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAwB,CAAC;AAQxE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,OAAO,GAAgC,EAAE;IAEzC,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,wCAAwC;YAChD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;SACrE,CAAC;QACF,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;YAC/B,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,SAAS,CAAC;gBACrB,GAAG,IAAI;gBACP,MAAM,EAAE,kDAAkD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAmB,YAAY,CAAC,MAAM,CAClD,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAC/C,CAAC,GAAG,CACH,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE;QAC3C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;QACvC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;QACnC,YAAY;QACZ,kBAAkB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;KACtD,CAAC,CACL,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CACX,IAAI,uBAAuB,CACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EACzB,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,CACb,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CACX,IAAI,oBAAoB,CACtB;YACE,GAAG,MAAM,CAAC,SAAS;YACnB,GAAG,MAAM,CAAC,KAAK;SAChB,EACD,SAAS,EACT,SAAS,EACT,YAAY,CACb,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CACX,IAAI,mBAAmB,CAAC;YACtB,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;SACnF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/adapters/runtime/adapter.d.ts

@@ -0,0 +1,24 @@
+import type { AuditAdapter, AuditContext, CollectionResult } from "../../contracts/adapter.js";
+import type { Finding } from "../../contracts/finding.js";
+import type { AdapterProbe } from "../../contracts/report.js";
+import type { ResourceSnapshot } from "../../contracts/resource.js";
+export type RuntimeVersionRunner = (executable: string) => Promise<string>;
+export type RuntimeAdapterOptions = {
+    environment?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    runVersion?: RuntimeVersionRunner;
+};
+export declare class RuntimeAuditAdapter implements AuditAdapter {
+    private readonly options;
+    readonly id = "runtime";
+    constructor(options?: RuntimeAdapterOptions);
+    private executableNames;
+    private resolveCommand;
+    private discovered;
+    probe(context: AuditContext): Promise<AdapterProbe>;
+    private resource;
+    private collectClaudeNative;
+    collect(context: AuditContext, probe: AdapterProbe): Promise<CollectionResult>;
+    classify(context: AuditContext, resource: ResourceSnapshot): Promise<Finding>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapters/runtime/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/runtime/adapter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE/F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAapE,MAAM,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE3E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC,CAAC;AA8BF,qBAAa,mBAAoB,YAAW,YAAY;IAG1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,EAAE,aAAa;IAExB,YAA6B,OAAO,GAAE,qBAA0B,EAAI;IAEpE,OAAO,CAAC,eAAe;YAMT,cAAc;YAqCd,UAAU;IAiBlB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CA8BxD;IAED,OAAO,CAAC,QAAQ;YAgCF,mBAAmB;IA+D3B,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmFnF;IAEK,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBlF;CACF"}