agentrinse 0.0.0 → 0.2.0

package/dist/core/reachability.js

@@ -0,0 +1,121 @@
+import { isAbsolute, relative, resolve } from "node:path";
+function isInside(root, candidate) {
+    const result = relative(root, candidate);
+    return result === "" || (!result.startsWith("..") && !isAbsolute(result));
+}
+export class ReachabilityIndex {
+    roots = new Map();
+    resourceRoots = new Map();
+    gitRefRoots = new Map();
+    globalRoots = new Map();
+    add(root) {
+        const path = resolve(root.path);
+        const key = `${root.code}\0${root.source}\0${path}\0${root.scope ?? "overlap"}\0${root.evidenceRef ?? ""}`;
+        this.roots.set(key, { ...root, path });
+    }
+    addGlobal(root) {
+        const key = `${root.code}\0${root.source}\0${root.evidenceRef ?? ""}`;
+        this.globalRoots.set(key, root);
+    }
+    addResource(resourceId, root) {
+        const key = `${resourceId}\0${root.code}\0${root.source}\0${root.evidenceRef ?? ""}`;
+        this.resourceRoots.set(key, root);
+    }
+    addGitRef(gitRef, root) {
+        const key = `${gitRef}\0${root.code}\0${root.source}\0${root.evidenceRef ?? ""}`;
+        this.gitRefRoots.set(key, root);
+    }
+    bindGitRefsToPath(path, gitRefs, observedAt, inspectionComplete = true) {
+        const refs = new Set(gitRefs);
+        for (const [key, root] of this.gitRefRoots) {
+            if (!this.isCurrent(root, observedAt)) {
+                continue;
+            }
+            const gitRef = key.slice(0, key.indexOf("\0"));
+            if (inspectionComplete && !refs.has(gitRef)) {
+                continue;
+            }
+            this.add({
+                ...root,
+                path,
+                scope: "subtree",
+                ...(inspectionComplete
+                    ? {}
+                    : { detail: "A configured Git ref pin could not be ruled out for this worktree." }),
+            });
+        }
+    }
+    protectUnresolvedGitRefs(observedAt) {
+        for (const root of this.gitRefRoots.values()) {
+            if (this.isCurrent(root, observedAt)) {
+                this.addGlobal({
+                    ...root,
+                    detail: "Configured Git ref pins could not be resolved.",
+                });
+            }
+        }
+    }
+    isCurrent(root, observedAt) {
+        return root.expiresAt === undefined || Date.parse(root.expiresAt) > Date.parse(observedAt);
+    }
+    evidence(root, observedAt) {
+        const { expiresAt: _expiresAt, ...evidence } = root;
+        return { ...evidence, observedAt };
+    }
+    sort(roots) {
+        return roots.sort((left, right) => {
+            const byCode = left.code.localeCompare(right.code);
+            if (byCode !== 0) {
+                return byCode;
+            }
+            const bySource = left.source.localeCompare(right.source);
+            return bySource !== 0
+                ? bySource
+                : (left.evidenceRef ?? "").localeCompare(right.evidenceRef ?? "");
+        });
+    }
+    rootsFor(path, observedAt) {
+        const target = resolve(path);
+        const matchingRoots = [...this.roots.values()]
+            .filter((root) => this.isCurrent(root, observedAt))
+            .filter((root) => root.scope === "subtree"
+            ? isInside(root.path, target)
+            : isInside(root.path, target) || isInside(target, root.path))
+            .map(({ path: _path, scope: _scope, ...root }) => this.evidence(root, observedAt));
+        const globalRoots = [...this.globalRoots.values()]
+            .filter((root) => this.isCurrent(root, observedAt))
+            .map((root) => this.evidence(root, observedAt));
+        return this.sort([...matchingRoots, ...globalRoots]);
+    }
+    rootsForResource(resource, facts, observedAt) {
+        const roots = resource.path === undefined
+            ? this.rootsFor("/", observedAt)
+            : this.rootsFor(resource.path, observedAt);
+        for (const [key, root] of this.resourceRoots) {
+            if (key.startsWith(`${resource.id}\0`) && this.isCurrent(root, observedAt)) {
+                roots.push(this.evidence(root, observedAt));
+            }
+        }
+        const branch = typeof facts.branch === "string" ? facts.branch : undefined;
+        const upstream = typeof facts.upstream === "string" ? facts.upstream : undefined;
+        const gitRefs = new Set(Array.isArray(facts.gitRefs)
+            ? facts.gitRefs.filter((value) => typeof value === "string")
+            : []);
+        for (const [key, root] of this.gitRefRoots) {
+            const gitRef = key.slice(0, key.indexOf("\0"));
+            const matchesBranch = branch === gitRef ||
+                (gitRef.startsWith("refs/heads/") && branch === gitRef.slice("refs/heads/".length));
+            const matchesUpstream = upstream === gitRef ||
+                (gitRef.startsWith("refs/remotes/") && upstream === gitRef.slice("refs/remotes/".length));
+            if ((matchesBranch || matchesUpstream || gitRefs.has(gitRef)) &&
+                this.isCurrent(root, observedAt)) {
+                roots.push(this.evidence(root, observedAt));
+            }
+        }
+        return this.sort(roots);
+    }
+    size() {
+        return (this.roots.size + this.resourceRoots.size + this.gitRefRoots.size + this.globalRoots.size);
+    }
+}
+//# sourceMappingURL=reachability.js.map

package/dist/core/reachability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reachability.js","sourceRoot":"","sources":["../../src/core/reachability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAc1D,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,iBAAiB;IACX,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,aAAa,GAAG,IAAI,GAAG,EAAgC,CAAC;IACxD,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEvE,GAAG,CAAC,IAAsB;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC3G,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,IAA0B;QAClC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,IAA0B;QACxD,MAAM,GAAG,GAAG,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACrF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,CAAC,MAAc,EAAE,IAA0B;QAClD,MAAM,GAAG,GAAG,GAAG,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACjF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,iBAAiB,CACf,IAAY,EACZ,OAAyB,EACzB,UAAkB,EAClB,kBAAkB,GAAG,IAAI;QAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,IAAI,kBAAkB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC;gBACP,GAAG,IAAI;gBACP,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,GAAG,CAAC,kBAAkB;oBACpB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,oEAAoE,EAAE,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wBAAwB,CAAC,UAAkB;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,SAAS,CAAC;oBACb,GAAG,IAAI;oBACP,MAAM,EAAE,gDAAgD;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,IAA0B,EAAE,UAAkB;QAC9D,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7F,CAAC;IAEO,QAAQ,CAAC,IAA0B,EAAE,UAAkB;QAC7D,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;QACpD,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,CAAC;IACrC,CAAC;IAEO,IAAI,CAAC,KAAqB;QAChC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzD,OAAO,QAAQ,KAAK,CAAC;gBACnB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,UAAkB;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aAC3C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;aAClD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,CAAC,KAAK,KAAK,SAAS;YACtB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YAC7B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAC/D;aACA,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aAC/C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB,CACd,QAAqB,EACrB,KAA8B,EAC9B,UAAkB;QAElB,MAAM,KAAK,GACT,QAAQ,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC1B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC7E,CAAC,CAAC,EAAE,CACP,CAAC;QACF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,MAAM,aAAa,GACjB,MAAM,KAAK,MAAM;gBACjB,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,MAAM,eAAe,GACnB,QAAQ,KAAK,MAAM;gBACnB,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5F,IACE,CAAC,aAAa,IAAI,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,EAChC,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI;QACF,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAC1F,CAAC;IACJ,CAAC;CACF"}

package/dist/core/redaction.d.ts

@@ -0,0 +1,4 @@
+import type { AuditReport } from "../contracts/report.js";
+export declare function redactAuditValue<T>(value: T, home: string, salt: string): T;
+export declare function redactAuditReport(report: AuditReport, salt: string): AuditReport;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/core/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/core/redaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAiG1D,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAM3E;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAEhF"}

package/dist/core/redaction.js

@@ -0,0 +1,91 @@
+import { posix, win32 } from "node:path";
+import { sha256 } from "./digest.js";
+const IDENTIFIER_KEYS = new Set([
+    "Command",
+    "Image",
+    "Names",
+    "Repository",
+    "actionId",
+    "auditId",
+    "branch",
+    "canonicalKey",
+    "displayName",
+    "evidenceRef",
+    "externalId",
+    "findingId",
+    "head",
+    "id",
+    "resourceId",
+]);
+const PATH_KEYS = new Set([
+    "home",
+    "isolationPath",
+    "mountBoundaryPaths",
+    "path",
+    "projectRoot",
+    "root",
+]);
+const HOST_KEYS = new Set(["host", "hostname"]);
+function token(kind, value, salt) {
+    return `${kind}:${sha256(`${salt}\0${value}`).slice(0, 16)}`;
+}
+function redactPath(value, home, salt) {
+    if (value === home) {
+        return "$HOME";
+    }
+    if (value.startsWith(`${home}${posix.sep}`) || value.startsWith(`${home}${win32.sep}`)) {
+        return `$HOME/<${token("path", value, salt)}>`;
+    }
+    return posix.isAbsolute(value) || win32.isAbsolute(value)
+        ? `$PATH/<${token("path", value, salt)}>`
+        : value;
+}
+function replacePathMatch(matched, context) {
+    const suffix = matched.match(/[),.;:]+$/u)?.[0] ?? "";
+    const path = suffix === "" ? matched : matched.slice(0, -suffix.length);
+    return `${redactPath(path, context.home, context.salt)}${suffix}`;
+}
+function redactText(value, context) {
+    let output = value;
+    output = output.replace(/\\\\[\s\S]*/gu, (matched) => replacePathMatch(matched, context));
+    output = output.replace(/(?<!\\)\\(?!\\)[\s\S]*/gu, (matched) => replacePathMatch(matched, context));
+    output = output.replace(/(?<![$\w>])\/[\s\S]*/gu, (matched) => replacePathMatch(matched, context));
+    return output.replace(/\b[A-Za-z]:\\[\s\S]*/gu, (matched) => replacePathMatch(matched, context));
+}
+function redactValue(value, context, key) {
+    if (typeof value === "string") {
+        if (key !== undefined && IDENTIFIER_KEYS.has(key)) {
+            return token("id", value, context.salt);
+        }
+        if (key !== undefined && PATH_KEYS.has(key)) {
+            return redactPath(value, context.home, context.salt);
+        }
+        return redactText(value, context);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => redactValue(item, context, key));
+    }
+    if (typeof value !== "object" || value === null) {
+        return value;
+    }
+    const output = {};
+    for (const [childKey, childValue] of Object.entries(value)) {
+        if (HOST_KEYS.has(childKey)) {
+            continue;
+        }
+        output[childKey] =
+            childKey === "candidateActions" ? [] : redactValue(childValue, context, childKey);
+    }
+    return output;
+}
+export function redactAuditValue(value, home, salt) {
+    const context = {
+        home,
+        salt,
+    };
+    return redactValue(value, context);
+}
+export function redactAuditReport(report, salt) {
+    return redactAuditValue(report, report.home, salt);
+}
+//# sourceMappingURL=redaction.js.map

package/dist/core/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/core/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,SAAS;IACT,OAAO;IACP,OAAO;IACP,YAAY;IACZ,UAAU;IACV,SAAS;IACT,QAAQ;IACR,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,WAAW;IACX,MAAM;IACN,IAAI;IACJ,YAAY;CACb,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM;IACN,eAAe;IACf,oBAAoB;IACpB,MAAM;IACN,aAAa;IACb,MAAM;CACP,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAOhD,SAAS,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY;IACtD,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,IAAY;IAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACvF,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvD,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG;QACzC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,OAAyB;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxE,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,OAAyB;IAC1D,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9D,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CACnC,CAAC;IACF,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC5D,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CACnC,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAAyB,EAAE,GAAY;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC;YACd,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAI,KAAQ,EAAE,IAAY,EAAE,IAAY;IACtE,MAAM,OAAO,GAAqB;QAChC,IAAI;QACJ,IAAI;KACL,CAAC;IACF,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAM,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,IAAY;IACjE,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/core/safety.d.ts

@@ -1,7 +1,15 @@
 export declare class UnsafeAuditRootError extends Error {
     readonly name = "UnsafeAuditRootError";
 }
+export declare class UnsafeDestructiveFixtureError extends Error {
+    readonly name = "UnsafeDestructiveFixtureError";
+}
 export declare function isPathInside(root: string, candidate: string): boolean;
 export declare function resolvePhysicalPath(candidate: string): Promise<string>;
 export declare function assertAuditRoot(candidate: string, realHome?: string): Promise<string>;
+export declare function assertDestructiveFixtureRoot(candidate: string, options?: {
+    temporaryRoot?: string;
+    realHome?: string;
+    repositoryRoot?: string;
+}): Promise<string>;
 //# sourceMappingURL=safety.d.ts.map

package/dist/core/safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/core/safety.ts"],"names":[],"mappings":"AAIA,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAkB,IAAI,0BAA0B;CACjD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrE;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B5E;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB9F"}
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/core/safety.ts"],"names":[],"mappings":"AAIA,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAkB,IAAI,0BAA0B;CACjD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,SAAkB,IAAI,mCAAmC;CAC1D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrE;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B5E;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB9F;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IACP,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,MAAM,CAAC,CAiCjB"}

package/dist/core/safety.js

@@ -1,9 +1,12 @@
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { realpath } from "node:fs/promises";
 import { basename, dirname, isAbsolute, parse, relative, resolve } from "node:path";
 export class UnsafeAuditRootError extends Error {
     name = "UnsafeAuditRootError";
 }
+export class UnsafeDestructiveFixtureError extends Error {
+    name = "UnsafeDestructiveFixtureError";
+}
 export function isPathInside(root, candidate) {
     const result = relative(resolve(root), resolve(candidate));
     return result === "" || (!result.startsWith("..") && !isAbsolute(result));
@@ -47,4 +50,29 @@ export async function assertAuditRoot(candidate, realHome = homedir()) {
     }
     return resolvedCandidate;
 }
+export async function assertDestructiveFixtureRoot(candidate, options = {}) {
+    const [resolvedCandidate, resolvedTemporaryRoot, resolvedHome, resolvedRepository] = await Promise.all([
+        realpath(resolve(candidate)),
+        realpath(resolve(options.temporaryRoot ?? tmpdir())),
+        realpath(resolve(options.realHome ?? homedir())),
+        realpath(resolve(options.repositoryRoot ?? process.cwd())),
+    ]);
+    if (resolvedCandidate === parse(resolvedCandidate).root) {
+        throw new UnsafeDestructiveFixtureError("destructive fixture cannot use the filesystem root");
+    }
+    if (resolvedCandidate === resolvedTemporaryRoot) {
+        throw new UnsafeDestructiveFixtureError("destructive fixture cannot use the temporary root");
+    }
+    if (!isPathInside(resolvedTemporaryRoot, resolvedCandidate)) {
+        throw new UnsafeDestructiveFixtureError("destructive fixture must be inside the selected temporary root");
+    }
+    if (resolvedCandidate === resolvedHome) {
+        throw new UnsafeDestructiveFixtureError("destructive fixture cannot use the real home");
+    }
+    if (isPathInside(resolvedCandidate, resolvedRepository) ||
+        isPathInside(resolvedRepository, resolvedCandidate)) {
+        throw new UnsafeDestructiveFixtureError("destructive fixture cannot overlap the repository checkout");
+    }
+    return resolvedCandidate;
+}
 //# sourceMappingURL=safety.js.map

package/dist/core/safety.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/core/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC3B,IAAI,GAAG,sBAAsB,CAAC;CACjD;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,IAAI,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,CAAC,CACC,KAAK,YAAY,KAAK;gBACtB,MAAM,IAAI,KAAK;gBACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACnD,EACD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/B,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAQ,GAAG,OAAO,EAAE;IAC3E,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,iBAAiB,KAAK,YAAY,IAAI,YAAY,CAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,oBAAoB,CAAC,wDAAwD,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/core/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC3B,IAAI,GAAG,sBAAsB,CAAC;CACjD;AAED,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACpC,IAAI,GAAG,+BAA+B,CAAC;CAC1D;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,IAAI,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,CAAC,CACC,KAAK,YAAY,KAAK;gBACtB,MAAM,IAAI,KAAK;gBACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACnD,EACD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/B,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAQ,GAAG,OAAO,EAAE;IAC3E,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,iBAAiB,KAAK,YAAY,IAAI,YAAY,CAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,oBAAoB,CAAC,wDAAwD,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,OAAO,GAIH,EAAE;IAEN,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,kBAAkB,CAAC,GAChF,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC,CAAC;QACpD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;QAChD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;KAC3D,CAAC,CAAC;IAEL,IAAI,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,6BAA6B,CAAC,oDAAoD,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,iBAAiB,KAAK,qBAAqB,EAAE,CAAC;QAChD,MAAM,IAAI,6BAA6B,CAAC,mDAAmD,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,6BAA6B,CACrC,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,IAAI,6BAA6B,CAAC,8CAA8C,CAAC,CAAC;IAC1F,CAAC;IACD,IACE,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;QACnD,YAAY,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,6BAA6B,CACrC,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/index.d.ts

@@ -1,9 +1,11 @@
 export { agentRinseConfigSchema, adapterIdSchema, type AdapterId, type AgentRinseConfig, } from "./config/schema.js";
 export { artifactNameSchema, artifactRemoveActionSchema, pathIdentitySchema, plannedActionSchema, type ArtifactName, type ArtifactRemoveAction, type PathIdentity, type PlannedAction, } from "./contracts/action.js";
+export { doctorCheckSchema, doctorReportSchema, type DoctorCheck, type DoctorReport, } from "./contracts/doctor.js";
+export { commandEnvelopeSchema, commandEnvelopeStatusSchema, commandEventSchema, type CommandEnvelope, type CommandEnvelopeStatus, type CommandEvent, } from "./contracts/output.js";
 export { cleanupPlanSchema, type CleanupPlan } from "./contracts/plan.js";
 export { auditReportSchema, type AdapterProbe, type AuditReport } from "./contracts/report.js";
 export { actionExecutionSchema, cleanupRunSchema, type ActionExecution, type CleanupRun, } from "./contracts/run.js";
-export { runAudit, type RunAuditOptions } from "./core/audit.js";
+export { runAudit, type AuditProgressEvent, type RunAuditOptions } from "./core/audit.js";
 export { applyCleanupPlan, type ApplyCleanupPlanOptions, type ApplyResult } from "./core/apply.js";
 export { createCleanupPlan } from "./core/plan.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,5 +1,7 @@
 export { agentRinseConfigSchema, adapterIdSchema, } from "./config/schema.js";
 export { artifactNameSchema, artifactRemoveActionSchema, pathIdentitySchema, plannedActionSchema, } from "./contracts/action.js";
+export { doctorCheckSchema, doctorReportSchema, } from "./contracts/doctor.js";
+export { commandEnvelopeSchema, commandEnvelopeStatusSchema, commandEventSchema, } from "./contracts/output.js";
 export { cleanupPlanSchema } from "./contracts/plan.js";
 export { auditReportSchema } from "./contracts/report.js";
 export { actionExecutionSchema, cleanupRunSchema, } from "./contracts/run.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,GAKpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAoB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAuC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAwB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAkD,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,GAKpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAoB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAuC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAiD,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAkD,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/machine-output.d.ts

@@ -0,0 +1,21 @@
+import { type CommandEnvelope, type CommandEnvelopeStatus, type CommandEvent } from "./contracts/output.js";
+import type { Diagnostic } from "./contracts/diagnostic.js";
+export declare function createCommandEnvelope<T>(options: {
+    command: string;
+    startedAt: string;
+    completedAt: string;
+    status: CommandEnvelopeStatus;
+    data: T;
+    diagnostics?: Diagnostic[];
+}): CommandEnvelope<T>;
+export declare function createCommandEvent<T>(options: {
+    event: string;
+    timestamp: string;
+    command: string;
+    commandId: string;
+    sequence: number;
+    data?: T;
+}): CommandEvent<T>;
+export declare function jsonDocument(value: unknown): string;
+export declare function ndjsonRecord(value: unknown): string;
+//# sourceMappingURL=machine-output.d.ts.map

package/dist/machine-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-output.d.ts","sourceRoot":"","sources":["../src/machine-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,EAAE;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC;IACR,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B,GAAG,eAAe,CAAC,CAAC,CAAC,CAWrB;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;CACV,GAAG,YAAY,CAAC,CAAC,CAAC,CAUlB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD"}

package/dist/machine-output.js

@@ -0,0 +1,32 @@
+import { commandEnvelopeSchema, commandEventSchema, } from "./contracts/output.js";
+import { VERSION } from "./version.js";
+export function createCommandEnvelope(options) {
+    return commandEnvelopeSchema.parse({
+        schemaVersion: 1,
+        command: options.command,
+        agentrinseVersion: VERSION,
+        startedAt: options.startedAt,
+        completedAt: options.completedAt,
+        status: options.status,
+        data: options.data,
+        diagnostics: options.diagnostics ?? [],
+    });
+}
+export function createCommandEvent(options) {
+    return commandEventSchema.parse({
+        schemaVersion: 1,
+        event: options.event,
+        timestamp: options.timestamp,
+        command: options.command,
+        commandId: options.commandId,
+        sequence: options.sequence,
+        ...(options.data === undefined ? {} : { data: options.data }),
+    });
+}
+export function jsonDocument(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+export function ndjsonRecord(value) {
+    return `${JSON.stringify(value)}\n`;
+}
+//# sourceMappingURL=machine-output.js.map

package/dist/machine-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-output.js","sourceRoot":"","sources":["../src/machine-output.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,UAAU,qBAAqB,CAAI,OAOxC;IACC,OAAO,qBAAqB,CAAC,KAAK,CAAC;QACjC,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;KACvC,CAAuB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAI,OAOrC;IACC,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;KAC9D,CAAoB,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;AACtC,CAAC"}

package/dist/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,wBAAgB,YAAY,IAAI,OAAO,CA6DtC;AAED,wBAAsB,IAAI,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7D"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,wBAAgB,YAAY,IAAI,OAAO,CAqUtC;AAED,wBAAsB,IAAI,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7D"}