agentrinse 0.0.0 → 0.2.0

package/dist/adapters/runtime/adapter.js

@@ -0,0 +1,319 @@
+import { execFile } from "node:child_process";
+import { constants } from "node:fs";
+import { access, lstat, readdir, realpath } from "node:fs/promises";
+import { delimiter, join, resolve } from "node:path";
+import { promisify } from "node:util";
+import { sha256 } from "../../core/digest.js";
+const execFileAsync = promisify(execFile);
+const RUNTIMES = [
+    { tool: "codex", command: "codex", displayName: "Codex CLI" },
+    { tool: "claude", command: "claude", displayName: "Claude Code" },
+    { tool: "cursor", command: "cursor-agent", displayName: "Cursor Agent" },
+    { tool: "copilot", command: "copilot", displayName: "GitHub Copilot CLI" },
+    { tool: "opencode", command: "opencode", displayName: "OpenCode" },
+    { tool: "grok", command: "grok", displayName: "Grok Build" },
+];
+function isMissing(error) {
+    return (error instanceof Error && "code" in error && error.code === "ENOENT");
+}
+function isUnavailableExecutable(error) {
+    return (error instanceof Error &&
+        "code" in error &&
+        ["EACCES", "ENOENT", "EPERM"].includes(error.code ?? ""));
+}
+async function defaultRunVersion(executable) {
+    const result = await execFileAsync(executable, ["--version"], {
+        encoding: "utf8",
+        maxBuffer: 256 * 1024,
+        timeout: 5_000,
+    });
+    return result.stdout.trim() === "" ? result.stderr : result.stdout;
+}
+function versionLine(output) {
+    const value = output.split(/\r?\n/u)[0]?.trim();
+    return value === undefined || value === "" ? undefined : value.slice(0, 200);
+}
+export class RuntimeAuditAdapter {
+    options;
+    id = "runtime";
+    constructor(options = {}) {
+        this.options = options;
+    }
+    executableNames(command) {
+        return this.options.platform === "win32"
+            ? [`${command}.exe`, `${command}.cmd`, command]
+            : [command];
+    }
+    async resolveCommand(command) {
+        const environment = this.options.environment ?? process.env;
+        const pathValue = environment.PATH ?? environment.Path;
+        if (pathValue === undefined || pathValue === "") {
+            return undefined;
+        }
+        for (const directory of pathValue.split(delimiter)) {
+            if (directory === "") {
+                continue;
+            }
+            for (const name of this.executableNames(command)) {
+                const candidate = resolve(directory, name);
+                try {
+                    const stats = await lstat(candidate);
+                    if (stats.isFile() || stats.isSymbolicLink()) {
+                        if (this.options.platform !== "win32") {
+                            try {
+                                await access(candidate, constants.X_OK);
+                            }
+                            catch (error) {
+                                if (isUnavailableExecutable(error)) {
+                                    continue;
+                                }
+                                throw error;
+                            }
+                        }
+                        return candidate;
+                    }
+                }
+                catch (error) {
+                    if (!isMissing(error)) {
+                        throw error;
+                    }
+                }
+            }
+        }
+        return undefined;
+    }
+    async discovered(context) {
+        for (const runtime of RUNTIMES) {
+            if ((await this.resolveCommand(runtime.command)) !== undefined) {
+                return true;
+            }
+        }
+        try {
+            const stats = await lstat(join(context.home, ".local", "share", "claude", "versions"));
+            return stats.isDirectory() && !stats.isSymbolicLink();
+        }
+        catch (error) {
+            if (isMissing(error)) {
+                return false;
+            }
+            throw error;
+        }
+    }
+    async probe(context) {
+        try {
+            return (await this.discovered(context))
+                ? {
+                    adapter: this.id,
+                    status: "available",
+                    detail: "Agent runtime installations found",
+                    diagnostics: [],
+                }
+                : {
+                    adapter: this.id,
+                    status: "absent",
+                    detail: "No supported agent runtime installation found",
+                    diagnostics: [],
+                };
+        }
+        catch (error) {
+            return {
+                adapter: this.id,
+                status: "degraded",
+                detail: "Agent runtime installations could not be inspected",
+                diagnostics: [
+                    {
+                        severity: "warning",
+                        code: "RUNTIME_PROBE_FAILED",
+                        message: error instanceof Error ? error.message : String(error),
+                        adapter: this.id,
+                    },
+                ],
+            };
+        }
+    }
+    resource(context, input) {
+        const path = resolve(input.path);
+        const canonicalKey = `runtime:agent-runtime:${input.tool}:${path}`;
+        return {
+            resource: {
+                id: `runtime:agent-runtime:${sha256(canonicalKey)}`,
+                adapter: this.id,
+                kind: "agent-runtime",
+                canonicalKey,
+                displayName: input.displayName,
+                path,
+            },
+            observedAt: context.now.toISOString(),
+            exists: true,
+            ...(input.measuredBytes === undefined ? {} : { measuredBytes: input.measuredBytes }),
+            facts: {
+                tool: input.tool,
+                reportOnly: true,
+                ...input.facts,
+            },
+        };
+    }
+    async collectClaudeNative(context) {
+        const root = join(context.home, ".local", "share", "claude", "versions");
+        const launcher = join(context.home, ".local", "bin", "claude");
+        const resources = [];
+        const paths = new Set();
+        const diagnostics = [];
+        let activePath;
+        try {
+            activePath = await realpath(launcher);
+        }
+        catch {
+            activePath = undefined;
+        }
+        try {
+            const rootStats = await lstat(root);
+            if (rootStats.isSymbolicLink() || !rootStats.isDirectory()) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "CLAUDE_RUNTIME_ROOT_UNSAFE",
+                    message: "Claude native version root must be a real directory.",
+                    adapter: this.id,
+                });
+                return { resources, paths, diagnostics };
+            }
+            for (const entry of await readdir(root, { withFileTypes: true })) {
+                context.signal?.throwIfAborted();
+                if (!entry.isFile()) {
+                    continue;
+                }
+                const path = await realpath(resolve(root, entry.name));
+                const stats = await lstat(path);
+                paths.add(path);
+                resources.push(this.resource(context, {
+                    tool: "claude",
+                    displayName: `Claude Code ${entry.name}`,
+                    path,
+                    measuredBytes: stats.size,
+                    facts: {
+                        version: entry.name,
+                        selected: activePath === path,
+                        installManager: "claude-native",
+                        recommendation: "Use `claude install stable` to manage this installation.",
+                        mtimeMs: stats.mtimeMs,
+                    },
+                }));
+            }
+        }
+        catch (error) {
+            if (!isMissing(error)) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "CLAUDE_RUNTIME_INSPECTION_FAILED",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+            }
+        }
+        return { resources, paths, diagnostics };
+    }
+    async collect(context, probe) {
+        if (probe.status !== "available") {
+            return { resources: [], diagnostics: [] };
+        }
+        const resources = [];
+        const diagnostics = [];
+        const resolved = new Map();
+        for (const runtime of RUNTIMES) {
+            const executable = await this.resolveCommand(runtime.command);
+            if (executable !== undefined) {
+                resolved.set(runtime.tool, executable);
+            }
+        }
+        const claudeNative = await this.collectClaudeNative(context);
+        resources.push(...claudeNative.resources);
+        diagnostics.push(...claudeNative.diagnostics);
+        for (const runtime of RUNTIMES) {
+            context.signal?.throwIfAborted();
+            const launcherPath = resolved.get(runtime.tool);
+            if (launcherPath === undefined) {
+                continue;
+            }
+            let executablePath;
+            try {
+                executablePath = await realpath(launcherPath);
+            }
+            catch (error) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "RUNTIME_EXECUTABLE_UNREADABLE",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+                continue;
+            }
+            const stats = await lstat(executablePath);
+            if (!stats.isFile()) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "RUNTIME_EXECUTABLE_INVALID",
+                    message: "Resolved runtime executable is not a regular file.",
+                    adapter: this.id,
+                });
+                continue;
+            }
+            if (runtime.tool === "claude" && claudeNative.paths.has(executablePath)) {
+                continue;
+            }
+            let version;
+            try {
+                version = versionLine(await (this.options.runVersion ?? defaultRunVersion)(executablePath));
+            }
+            catch (error) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "RUNTIME_VERSION_FAILED",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+            }
+            resources.push(this.resource(context, {
+                tool: runtime.tool,
+                displayName: runtime.displayName,
+                path: executablePath,
+                measuredBytes: stats.size,
+                facts: {
+                    selected: true,
+                    launcherPath,
+                    executablePath,
+                    installManager: "unknown",
+                    recommendation: "Use the owning installer or package manager for updates and removal.",
+                    ...(version === undefined ? {} : { version }),
+                    mtimeMs: stats.mtimeMs,
+                },
+            }));
+        }
+        resources.sort((left, right) => left.resource.canonicalKey.localeCompare(right.resource.canonicalKey));
+        return { resources, diagnostics };
+    }
+    async classify(context, resource) {
+        const observedAt = context.now.toISOString();
+        return {
+            schemaVersion: 1,
+            findingId: `${resource.resource.id}:${sha256(context.auditId)}`,
+            auditId: context.auditId,
+            observedAt,
+            resource: resource.resource,
+            state: "protected",
+            confidence: "certain",
+            roots: [
+                {
+                    code: "runtime-owner-report-only",
+                    source: this.id,
+                    observedAt,
+                    detail: "Agent runtime maintenance remains owned by its installer or package manager.",
+                },
+            ],
+            facts: resource.facts,
+            candidateActions: [],
+            ...(resource.measuredBytes === undefined ? {} : { measuredBytes: resource.measuredBytes }),
+            warnings: [],
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/adapters/runtime/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/adapters/runtime/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAOtC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,QAAQ,GAAG;IACf,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE;IAC7D,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;IACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE;IACxE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC1E,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE;IAClE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;CACpD,CAAC;AAUX,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACf,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE;QAC5D,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,OAAO,mBAAmB;IAGD,OAAO;IAF3B,EAAE,GAAG,SAAS,CAAC;IAExB,YAA6B,OAAO,GAA0B,EAAE;uBAAnC,OAAO;IAA+B,CAAC;IAE5D,eAAe,CAAC,OAAe;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,EAAE,OAAO,CAAC;YAC/C,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAe;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;QAC5D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;oBACrC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;wBAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BACtC,IAAI,CAAC;gCACH,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;4BAC1C,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;oCACnC,SAAS;gCACX,CAAC;gCACD,MAAM,KAAK,CAAC;4BACd,CAAC;wBACH,CAAC;wBACD,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBACtB,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAqB;QAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC,CAAC;oBACE,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,WAAW;oBACnB,MAAM,EAAE,mCAAmC;oBAC3C,WAAW,EAAE,EAAE;iBAChB;gBACH,CAAC,CAAC;oBACE,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,+CAA+C;oBACvD,WAAW,EAAE,EAAE;iBAChB,CAAC;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,oDAAoD;gBAC5D,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,QAAQ,CACd,OAAqB,EACrB,KAMC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,yBAAyB,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE;gBACR,EAAE,EAAE,yBAAyB,MAAM,CAAC,YAAY,CAAC,EAAE;gBACnD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,IAAI,EAAE,eAAe;gBACrB,YAAY;gBACZ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI;aACL;YACD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,IAAI;YACZ,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;YACpF,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,IAAI;gBAChB,GAAG,KAAK,CAAC,KAAK;aACf;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,OAAqB;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3D,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,sDAAsD;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC3C,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,SAAS,CAAC,IAAI,CACZ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,eAAe,KAAK,CAAC,IAAI,EAAE;oBACxC,IAAI;oBACJ,aAAa,EAAE,KAAK,CAAC,IAAI;oBACzB,KAAK,EAAE;wBACL,OAAO,EAAE,KAAK,CAAC,IAAI;wBACnB,QAAQ,EAAE,UAAU,KAAK,IAAI;wBAC7B,cAAc,EAAE,eAAe;wBAC/B,cAAc,EAAE,0DAA0D;wBAC1E,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,KAAmB;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,cAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,oDAAoD;oBAC7D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,SAAS,CAAC,IAAI,CACZ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,cAAc;gBACpB,aAAa,EAAE,KAAK,CAAC,IAAI;gBACzB,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI;oBACd,YAAY;oBACZ,cAAc;oBACd,cAAc,EAAE,SAAS;oBACzB,cAAc,EAAE,sEAAsE;oBACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;oBAC7C,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CACtE,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,QAA0B;QAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,2BAA2B;oBACjC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,UAAU;oBACV,MAAM,EAAE,8EAA8E;iBACvF;aACF;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,gBAAgB,EAAE,EAAE;YACpB,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1F,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/cli.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { main } from "./main.js";
+import { CommandInterruptedError } from "./core/interruption.js";
 main().catch((error) => {
     const message = error instanceof Error ? error.message : String(error);
     process.stderr.write(`agentrinse: ${message}\n`);
-    process.exitCode = 1;
+    process.exitCode = error instanceof CommandInterruptedError ? error.exitCode : 1;
 });
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,QAAQ,GAAG,KAAK,YAAY,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC,CAAC,CAAC"}

package/dist/commands/adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,IAAI,MAAM,CAevC"}
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,IAAI,MAAM,CAgBvC"}

package/dist/commands/adapters.js

@@ -8,6 +8,7 @@ export function renderAdapters() {
             .map((spec) => `${spec.id.padEnd(10)} audit-only  ${spec.displayName}`),
         "",
         "git        audit-only  Git worktrees (explicit root)",
+        "runtime    audit-only  Installed agent runtimes",
         "docker     audit-only  Docker images and containers (opt-in)",
         "artifacts  safe-clean  Explicit rebuildable project directories",
         "",

package/dist/commands/adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG;QACZ,qBAAqB;QACrB,EAAE;QACF,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;aAC7B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;QACzE,EAAE;QACF,sDAAsD;QACtD,8DAA8D;QAC9D,iEAAiE;QACjE,EAAE;KACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG;QACZ,qBAAqB;QACrB,EAAE;QACF,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;aAC7B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;QACzE,EAAE;QACF,sDAAsD;QACtD,iDAAiD;QACjD,8DAA8D;QAC9D,iEAAiE;QACjE,EAAE;KACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/commands/apply.d.ts

@@ -5,11 +5,17 @@ export type ApplyCommandOptions = {
     stateDir?: string;
     yes: boolean;
     json: boolean;
+    signal?: AbortSignal;
 };
 export type ApplyCommandResult = {
     run: CleanupRun;
     journalPath: string;
     output: string;
 };
+export type ConfirmApplyDependencies = {
+    isInteractive?: () => boolean;
+    question?: (prompt: string, signal?: AbortSignal) => Promise<string>;
+};
+export declare function confirmApply(actionCount: number, signal?: AbortSignal, dependencies?: ConfirmApplyDependencies): Promise<boolean>;
 export declare function executeApplyCommand(options: ApplyCommandOptions): Promise<ApplyCommandResult>;
 //# sourceMappingURL=apply.d.ts.map

package/dist/commands/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/commands/apply.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAMtD,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,UAAU,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAgCF,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/commands/apply.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAMtD,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,UAAU,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;IAC9B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACtE,CAAC;AAyBF,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,WAAW,EACpB,YAAY,GAAE,wBAA6B,GAC1C,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAeD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAyB7B"}

package/dist/commands/apply.js

@@ -1,27 +1,53 @@
 import { createInterface } from "node:readline/promises";
 import { resolve } from "node:path";
-import { loadConfig } from "../config/load.js";
+import { loadConfigForHome } from "../config/load.js";
 import { cleanupPlanSchema } from "../contracts/plan.js";
 import { applyCleanupPlan } from "../core/apply.js";
+import { CommandInterruptedError } from "../core/interruption.js";
 import { readJsonFile } from "../state/json-file.js";
 import { resolveStateRoot } from "../state/layout.js";
-import { VERSION } from "../version.js";
-async function confirmApply(actionCount) {
-    if (!process.stdin.isTTY || !process.stdout.isTTY) {
-        throw new Error("apply requires --yes when stdin or stdout is not an interactive terminal");
-    }
+async function defaultQuestion(promptText, signal) {
     const prompt = createInterface({
         input: process.stdin,
         output: process.stdout,
     });
     try {
-        const answer = await prompt.question(`Apply ${actionCount} safe cleanup action(s)? [y/N] `);
-        return ["y", "yes"].includes(answer.trim().toLowerCase());
+        return signal === undefined
+            ? await prompt.question(promptText)
+            : await prompt.question(promptText, { signal });
     }
     finally {
         prompt.close();
     }
 }
+function interruptionFrom(signal) {
+    if (signal?.aborted !== true) {
+        return undefined;
+    }
+    return signal.reason instanceof CommandInterruptedError
+        ? signal.reason
+        : new CommandInterruptedError("apply interrupted");
+}
+export async function confirmApply(actionCount, signal, dependencies = {}) {
+    const initialInterruption = interruptionFrom(signal);
+    if (initialInterruption !== undefined) {
+        throw initialInterruption;
+    }
+    if (!(dependencies.isInteractive ?? (() => process.stdin.isTTY && process.stdout.isTTY))()) {
+        throw new Error("apply requires --yes when stdin or stdout is not an interactive terminal");
+    }
+    try {
+        const answer = await (dependencies.question ?? defaultQuestion)(`Apply ${actionCount} safe cleanup action(s)? [y/N] `, signal);
+        return ["y", "yes"].includes(answer.trim().toLowerCase());
+    }
+    catch (error) {
+        const interruption = interruptionFrom(signal);
+        if (interruption !== undefined) {
+            throw interruption;
+        }
+        throw error;
+    }
+}
 function renderRun(run, journalPath) {
     const applied = run.actions.filter((action) => action.status === "applied").length;
     const skipped = run.actions.filter((action) => action.status === "skipped-stale").length;
@@ -38,19 +64,17 @@ export async function executeApplyCommand(options) {
     if (options.json && !options.yes) {
         throw new Error("apply --json requires --yes");
     }
-    if (VERSION === "0.0.0") {
-        throw new Error("apply is unavailable in the unsupported 0.0.0 reservation release");
-    }
     const input = await readJsonFile(resolve(options.plan));
     const plan = cleanupPlanSchema.parse(input);
-    const config = await loadConfig(options.config);
-    if (!options.yes && !(await confirmApply(plan.actions.length))) {
+    const { config } = await loadConfigForHome(plan.home, options.config);
+    if (!options.yes && !(await confirmApply(plan.actions.length, options.signal))) {
         throw new Error("apply cancelled");
     }
     const result = await applyCleanupPlan({
         input,
         config,
         stateRoot: resolveStateRoot(plan.home, options.stateDir),
+        ...(options.signal === undefined ? {} : { signal: options.signal }),
     });
     return {
         run: result.run,

package/dist/commands/apply.js.map

@@ -1 +1 @@
-{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/commands/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAgBxC,KAAK,UAAU,YAAY,CAAC,WAAmB;IAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,WAAW,iCAAiC,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,WAAmB;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACnF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC;IACzF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACtD,OAAO;QACL,OAAO,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,EAAE;QACjC,WAAW,OAAO,aAAa,OAAO,YAAY,MAAM,EAAE;QAC1D,aAAa,GAAG,CAAC,cAAc,QAAQ;QACvC,WAAW,WAAW,EAAE;QACxB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA4B;IAE5B,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,KAAK;QACL,MAAM;QACN,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC;KACzD,CAAC,CAAC;IACH,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,OAAO,CAAC,IAAI;YAClB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;YAC5C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/commands/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAsBtD,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,MAAoB;IACrE,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YACnC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,YAAY,uBAAuB;QACrD,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,IAAI,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,MAAoB,EACpB,YAAY,GAA6B,EAAE;IAE3C,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,mBAAmB,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,eAAe,CAAC,CAC7D,SAAS,WAAW,iCAAiC,EACrD,MAAM,CACP,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,YAAY,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,WAAmB;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACnF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC;IACzF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACtD,OAAO;QACL,OAAO,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,EAAE;QACjC,WAAW,OAAO,aAAa,OAAO,YAAY,MAAM,EAAE;QAC1D,aAAa,GAAG,CAAC,cAAc,QAAQ;QACvC,WAAW,WAAW,EAAE;QACxB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA4B;IAE5B,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,KAAK;QACL,MAAM;QACN,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,OAAO,CAAC,IAAI;YAClB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;YAC5C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/commands/audit.d.ts

@@ -2,11 +2,17 @@ import type { AuditReport } from "../contracts/report.js";
 export type AuditCommandOptions = {
     home: string;
     config?: string;
-    json: boolean;
+    json?: boolean;
+    ndjson?: boolean;
+    redact?: boolean;
     output?: string;
+    stateDir?: string;
+    now?: () => Date;
+    emit?: (output: string) => void;
 };
 export type AuditCommandResult = {
     report: AuditReport;
+    statePath: string;
     output: string;
 };
 export declare function executeAuditCommand(options: AuditCommandOptions): Promise<AuditCommandResult>;

package/dist/commands/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAK1D,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAgB7B"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAa1D,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAqH7B"}

package/dist/commands/audit.js

@@ -1,22 +1,113 @@
+import { randomUUID } from "node:crypto";
 import { resolve } from "node:path";
 import { createAuditAdapters } from "../adapters/registry.js";
-import { loadConfig } from "../config/load.js";
+import { loadConfigForHome } from "../config/load.js";
 import { runAudit } from "../core/audit.js";
+import { redactAuditReport, redactAuditValue } from "../core/redaction.js";
+import { createCommandEnvelope, createCommandEvent, jsonDocument, ndjsonRecord, } from "../machine-output.js";
 import { renderAudit } from "../output.js";
 import { writeJsonAtomic } from "../state/json-file.js";
+import { resolveStateRoot, stateLayout } from "../state/layout.js";
 export async function executeAuditCommand(options) {
-    const config = await loadConfig(options.config);
-    const report = await runAudit({
-        home: resolve(options.home),
-        config,
-        adapters: createAuditAdapters(config),
-    });
-    if (options.output !== undefined) {
-        await writeJsonAtomic(resolve(options.output), report);
+    if (options.json === true && options.ndjson === true) {
+        throw new Error("audit accepts only one of --json or --ndjson");
     }
-    return {
-        report,
-        output: options.json ? `${JSON.stringify(report, null, 2)}\n` : renderAudit(report),
+    if (options.redact === true && options.json !== true && options.ndjson !== true) {
+        throw new Error("audit --redact requires --json or --ndjson");
+    }
+    const clock = options.now ?? (() => new Date());
+    const commandId = randomUUID();
+    const salt = randomUUID();
+    const ndjson = [];
+    let sequence = 0;
+    const emitEvent = (event, timestamp, data) => {
+        const value = createCommandEvent({
+            event,
+            timestamp,
+            command: "audit",
+            commandId,
+            sequence: (sequence += 1),
+            ...(data === undefined ? {} : { data }),
+        });
+        const output = ndjsonRecord(value);
+        if (options.emit === undefined) {
+            ndjson.push(output);
+        }
+        else {
+            options.emit(output);
+        }
     };
+    const home = resolve(options.home);
+    const { config } = await loadConfigForHome(home, options.config);
+    const startedAt = clock().toISOString();
+    if (options.ndjson === true) {
+        emitEvent("command.started", startedAt, options.redact === true ? { home: "$HOME" } : { home });
+    }
+    try {
+        const report = await runAudit({
+            home,
+            config,
+            adapters: createAuditAdapters(config),
+            now: clock,
+            ...(options.ndjson === true
+                ? {
+                    onEvent: (event) => {
+                        emitEvent(event.type, event.timestamp, options.redact === true ? redactAuditValue(event.data, home, salt) : event.data);
+                    },
+                }
+                : {}),
+        });
+        const layout = stateLayout(resolveStateRoot(home, options.stateDir));
+        const statePath = resolve(layout.audits, `${report.auditId}.json`);
+        await writeJsonAtomic(statePath, report, {
+            privateDirectories: [layout.root, layout.audits],
+        });
+        if (options.output !== undefined) {
+            await writeJsonAtomic(resolve(options.output), report);
+        }
+        const selectedReport = options.redact === true ? redactAuditReport(report, salt) : report;
+        if (options.ndjson === true) {
+            emitEvent("command.completed", report.completedAt, {
+                auditId: options.redact === true
+                    ? redactAuditValue({ auditId: report.auditId }, home, salt).auditId
+                    : report.auditId,
+                status: report.probes.some((probe) => probe.status === "degraded") ||
+                    report.diagnostics.length > 0
+                    ? "degraded"
+                    : "ok",
+                probes: report.probes.length,
+                findings: report.findings.length,
+            });
+        }
+        const status = report.probes.some((probe) => probe.status === "degraded") || report.diagnostics.length > 0
+            ? "degraded"
+            : "ok";
+        return {
+            report,
+            statePath,
+            output: options.ndjson === true
+                ? ndjson.join("")
+                : options.json === true
+                    ? jsonDocument(createCommandEnvelope({
+                        command: "audit",
+                        startedAt: report.startedAt,
+                        completedAt: report.completedAt,
+                        status,
+                        data: selectedReport,
+                        diagnostics: selectedReport.diagnostics,
+                    }))
+                    : renderAudit(report),
+        };
+    }
+    catch (error) {
+        if (options.ndjson === true) {
+            const data = {
+                status: "failed",
+                error: error instanceof Error ? error.message : String(error),
+            };
+            emitEvent("command.completed", clock().toISOString(), options.redact === true ? redactAuditValue(data, home, salt) : data);
+        }
+        throw error;
+    }
 }
 //# sourceMappingURL=audit.js.map