agentrinse 0.1.0 → 0.2.0

package/dist/adapters/runtime/adapter.js

@@ -0,0 +1,319 @@
+import { execFile } from "node:child_process";
+import { constants } from "node:fs";
+import { access, lstat, readdir, realpath } from "node:fs/promises";
+import { delimiter, join, resolve } from "node:path";
+import { promisify } from "node:util";
+import { sha256 } from "../../core/digest.js";
+const execFileAsync = promisify(execFile);
+const RUNTIMES = [
+    { tool: "codex", command: "codex", displayName: "Codex CLI" },
+    { tool: "claude", command: "claude", displayName: "Claude Code" },
+    { tool: "cursor", command: "cursor-agent", displayName: "Cursor Agent" },
+    { tool: "copilot", command: "copilot", displayName: "GitHub Copilot CLI" },
+    { tool: "opencode", command: "opencode", displayName: "OpenCode" },
+    { tool: "grok", command: "grok", displayName: "Grok Build" },
+];
+function isMissing(error) {
+    return (error instanceof Error && "code" in error && error.code === "ENOENT");
+}
+function isUnavailableExecutable(error) {
+    return (error instanceof Error &&
+        "code" in error &&
+        ["EACCES", "ENOENT", "EPERM"].includes(error.code ?? ""));
+}
+async function defaultRunVersion(executable) {
+    const result = await execFileAsync(executable, ["--version"], {
+        encoding: "utf8",
+        maxBuffer: 256 * 1024,
+        timeout: 5_000,
+    });
+    return result.stdout.trim() === "" ? result.stderr : result.stdout;
+}
+function versionLine(output) {
+    const value = output.split(/\r?\n/u)[0]?.trim();
+    return value === undefined || value === "" ? undefined : value.slice(0, 200);
+}
+export class RuntimeAuditAdapter {
+    options;
+    id = "runtime";
+    constructor(options = {}) {
+        this.options = options;
+    }
+    executableNames(command) {
+        return this.options.platform === "win32"
+            ? [`${command}.exe`, `${command}.cmd`, command]
+            : [command];
+    }
+    async resolveCommand(command) {
+        const environment = this.options.environment ?? process.env;
+        const pathValue = environment.PATH ?? environment.Path;
+        if (pathValue === undefined || pathValue === "") {
+            return undefined;
+        }
+        for (const directory of pathValue.split(delimiter)) {
+            if (directory === "") {
+                continue;
+            }
+            for (const name of this.executableNames(command)) {
+                const candidate = resolve(directory, name);
+                try {
+                    const stats = await lstat(candidate);
+                    if (stats.isFile() || stats.isSymbolicLink()) {
+                        if (this.options.platform !== "win32") {
+                            try {
+                                await access(candidate, constants.X_OK);
+                            }
+                            catch (error) {
+                                if (isUnavailableExecutable(error)) {
+                                    continue;
+                                }
+                                throw error;
+                            }
+                        }
+                        return candidate;
+                    }
+                }
+                catch (error) {
+                    if (!isMissing(error)) {
+                        throw error;
+                    }
+                }
+            }
+        }
+        return undefined;
+    }
+    async discovered(context) {
+        for (const runtime of RUNTIMES) {
+            if ((await this.resolveCommand(runtime.command)) !== undefined) {
+                return true;
+            }
+        }
+        try {
+            const stats = await lstat(join(context.home, ".local", "share", "claude", "versions"));
+            return stats.isDirectory() && !stats.isSymbolicLink();
+        }
+        catch (error) {
+            if (isMissing(error)) {
+                return false;
+            }
+            throw error;
+        }
+    }
+    async probe(context) {
+        try {
+            return (await this.discovered(context))
+                ? {
+                    adapter: this.id,
+                    status: "available",
+                    detail: "Agent runtime installations found",
+                    diagnostics: [],
+                }
+                : {
+                    adapter: this.id,
+                    status: "absent",
+                    detail: "No supported agent runtime installation found",
+                    diagnostics: [],
+                };
+        }
+        catch (error) {
+            return {
+                adapter: this.id,
+                status: "degraded",
+                detail: "Agent runtime installations could not be inspected",
+                diagnostics: [
+                    {
+                        severity: "warning",
+                        code: "RUNTIME_PROBE_FAILED",
+                        message: error instanceof Error ? error.message : String(error),
+                        adapter: this.id,
+                    },
+                ],
+            };
+        }
+    }
+    resource(context, input) {
+        const path = resolve(input.path);
+        const canonicalKey = `runtime:agent-runtime:${input.tool}:${path}`;
+        return {
+            resource: {
+                id: `runtime:agent-runtime:${sha256(canonicalKey)}`,
+                adapter: this.id,
+                kind: "agent-runtime",
+                canonicalKey,
+                displayName: input.displayName,
+                path,
+            },
+            observedAt: context.now.toISOString(),
+            exists: true,
+            ...(input.measuredBytes === undefined ? {} : { measuredBytes: input.measuredBytes }),
+            facts: {
+                tool: input.tool,
+                reportOnly: true,
+                ...input.facts,
+            },
+        };
+    }
+    async collectClaudeNative(context) {
+        const root = join(context.home, ".local", "share", "claude", "versions");
+        const launcher = join(context.home, ".local", "bin", "claude");
+        const resources = [];
+        const paths = new Set();
+        const diagnostics = [];
+        let activePath;
+        try {
+            activePath = await realpath(launcher);
+        }
+        catch {
+            activePath = undefined;
+        }
+        try {
+            const rootStats = await lstat(root);
+            if (rootStats.isSymbolicLink() || !rootStats.isDirectory()) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "CLAUDE_RUNTIME_ROOT_UNSAFE",
+                    message: "Claude native version root must be a real directory.",
+                    adapter: this.id,
+                });
+                return { resources, paths, diagnostics };
+            }
+            for (const entry of await readdir(root, { withFileTypes: true })) {
+                context.signal?.throwIfAborted();
+                if (!entry.isFile()) {
+                    continue;
+                }
+                const path = await realpath(resolve(root, entry.name));
+                const stats = await lstat(path);
+                paths.add(path);
+                resources.push(this.resource(context, {
+                    tool: "claude",
+                    displayName: `Claude Code ${entry.name}`,
+                    path,
+                    measuredBytes: stats.size,
+                    facts: {
+                        version: entry.name,
+                        selected: activePath === path,
+                        installManager: "claude-native",
+                        recommendation: "Use `claude install stable` to manage this installation.",
+                        mtimeMs: stats.mtimeMs,
+                    },
+                }));
+            }
+        }
+        catch (error) {
+            if (!isMissing(error)) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "CLAUDE_RUNTIME_INSPECTION_FAILED",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+            }
+        }
+        return { resources, paths, diagnostics };
+    }
+    async collect(context, probe) {
+        if (probe.status !== "available") {
+            return { resources: [], diagnostics: [] };
+        }
+        const resources = [];
+        const diagnostics = [];
+        const resolved = new Map();
+        for (const runtime of RUNTIMES) {
+            const executable = await this.resolveCommand(runtime.command);
+            if (executable !== undefined) {
+                resolved.set(runtime.tool, executable);
+            }
+        }
+        const claudeNative = await this.collectClaudeNative(context);
+        resources.push(...claudeNative.resources);
+        diagnostics.push(...claudeNative.diagnostics);
+        for (const runtime of RUNTIMES) {
+            context.signal?.throwIfAborted();
+            const launcherPath = resolved.get(runtime.tool);
+            if (launcherPath === undefined) {
+                continue;
+            }
+            let executablePath;
+            try {
+                executablePath = await realpath(launcherPath);
+            }
+            catch (error) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "RUNTIME_EXECUTABLE_UNREADABLE",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+                continue;
+            }
+            const stats = await lstat(executablePath);
+            if (!stats.isFile()) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "RUNTIME_EXECUTABLE_INVALID",
+                    message: "Resolved runtime executable is not a regular file.",
+                    adapter: this.id,
+                });
+                continue;
+            }
+            if (runtime.tool === "claude" && claudeNative.paths.has(executablePath)) {
+                continue;
+            }
+            let version;
+            try {
+                version = versionLine(await (this.options.runVersion ?? defaultRunVersion)(executablePath));
+            }
+            catch (error) {
+                diagnostics.push({
+                    severity: "warning",
+                    code: "RUNTIME_VERSION_FAILED",
+                    message: error instanceof Error ? error.message : String(error),
+                    adapter: this.id,
+                });
+            }
+            resources.push(this.resource(context, {
+                tool: runtime.tool,
+                displayName: runtime.displayName,
+                path: executablePath,
+                measuredBytes: stats.size,
+                facts: {
+                    selected: true,
+                    launcherPath,
+                    executablePath,
+                    installManager: "unknown",
+                    recommendation: "Use the owning installer or package manager for updates and removal.",
+                    ...(version === undefined ? {} : { version }),
+                    mtimeMs: stats.mtimeMs,
+                },
+            }));
+        }
+        resources.sort((left, right) => left.resource.canonicalKey.localeCompare(right.resource.canonicalKey));
+        return { resources, diagnostics };
+    }
+    async classify(context, resource) {
+        const observedAt = context.now.toISOString();
+        return {
+            schemaVersion: 1,
+            findingId: `${resource.resource.id}:${sha256(context.auditId)}`,
+            auditId: context.auditId,
+            observedAt,
+            resource: resource.resource,
+            state: "protected",
+            confidence: "certain",
+            roots: [
+                {
+                    code: "runtime-owner-report-only",
+                    source: this.id,
+                    observedAt,
+                    detail: "Agent runtime maintenance remains owned by its installer or package manager.",
+                },
+            ],
+            facts: resource.facts,
+            candidateActions: [],
+            ...(resource.measuredBytes === undefined ? {} : { measuredBytes: resource.measuredBytes }),
+            warnings: [],
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/adapters/runtime/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/adapters/runtime/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAOtC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,QAAQ,GAAG;IACf,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE;IAC7D,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;IACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE;IACxE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC1E,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE;IAClE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;CACpD,CAAC;AAUX,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACf,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE;QAC5D,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,OAAO,mBAAmB;IAGD,OAAO;IAF3B,EAAE,GAAG,SAAS,CAAC;IAExB,YAA6B,OAAO,GAA0B,EAAE;uBAAnC,OAAO;IAA+B,CAAC;IAE5D,eAAe,CAAC,OAAe;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,EAAE,OAAO,CAAC;YAC/C,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAe;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;QAC5D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;oBACrC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;wBAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BACtC,IAAI,CAAC;gCACH,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;4BAC1C,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;oCACnC,SAAS;gCACX,CAAC;gCACD,MAAM,KAAK,CAAC;4BACd,CAAC;wBACH,CAAC;wBACD,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBACtB,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAqB;QAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC,CAAC;oBACE,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,WAAW;oBACnB,MAAM,EAAE,mCAAmC;oBAC3C,WAAW,EAAE,EAAE;iBAChB;gBACH,CAAC,CAAC;oBACE,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,+CAA+C;oBACvD,WAAW,EAAE,EAAE;iBAChB,CAAC;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,oDAAoD;gBAC5D,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,QAAQ,CACd,OAAqB,EACrB,KAMC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,yBAAyB,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE;gBACR,EAAE,EAAE,yBAAyB,MAAM,CAAC,YAAY,CAAC,EAAE;gBACnD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,IAAI,EAAE,eAAe;gBACrB,YAAY;gBACZ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI;aACL;YACD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,IAAI;YACZ,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;YACpF,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,IAAI;gBAChB,GAAG,KAAK,CAAC,KAAK;aACf;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,OAAqB;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3D,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,sDAAsD;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC3C,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,SAAS,CAAC,IAAI,CACZ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,eAAe,KAAK,CAAC,IAAI,EAAE;oBACxC,IAAI;oBACJ,aAAa,EAAE,KAAK,CAAC,IAAI;oBACzB,KAAK,EAAE;wBACL,OAAO,EAAE,KAAK,CAAC,IAAI;wBACnB,QAAQ,EAAE,UAAU,KAAK,IAAI;wBAC7B,cAAc,EAAE,eAAe;wBAC/B,cAAc,EAAE,0DAA0D;wBAC1E,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,KAAmB;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,cAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,oDAAoD;oBAC7D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,SAAS,CAAC,IAAI,CACZ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,cAAc;gBACpB,aAAa,EAAE,KAAK,CAAC,IAAI;gBACzB,KAAK,EAAE;oBACL,QAAQ,EAAE,IAAI;oBACd,YAAY;oBACZ,cAAc;oBACd,cAAc,EAAE,SAAS;oBACzB,cAAc,EAAE,sEAAsE;oBACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;oBAC7C,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CACtE,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,QAA0B;QAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,2BAA2B;oBACjC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,UAAU;oBACV,MAAM,EAAE,8EAA8E;iBACvF;aACF;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,gBAAgB,EAAE,EAAE;YACpB,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1F,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/commands/adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,IAAI,MAAM,CAevC"}
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,IAAI,MAAM,CAgBvC"}

package/dist/commands/adapters.js

@@ -8,6 +8,7 @@ export function renderAdapters() {
             .map((spec) => `${spec.id.padEnd(10)} audit-only  ${spec.displayName}`),
         "",
         "git        audit-only  Git worktrees (explicit root)",
+        "runtime    audit-only  Installed agent runtimes",
         "docker     audit-only  Docker images and containers (opt-in)",
         "artifacts  safe-clean  Explicit rebuildable project directories",
         "",

package/dist/commands/adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG;QACZ,qBAAqB;QACrB,EAAE;QACF,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;aAC7B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;QACzE,EAAE;QACF,sDAAsD;QACtD,8DAA8D;QAC9D,iEAAiE;QACjE,EAAE;KACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/commands/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG;QACZ,qBAAqB;QACrB,EAAE;QACF,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;aAC7B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;QACzE,EAAE;QACF,sDAAsD;QACtD,iDAAiD;QACjD,8DAA8D;QAC9D,iEAAiE;QACjE,EAAE;KACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/commands/clean.d.ts

@@ -0,0 +1,61 @@
+import { type ActionRisk } from "../contracts/action.js";
+import type { CleanupPlan } from "../contracts/plan.js";
+import type { AuditReport } from "../contracts/report.js";
+import type { CleanupRun } from "../contracts/run.js";
+export type CleanCommandOptions = {
+    home: string;
+    config?: string;
+    stateDir?: string;
+    profile: "closeout";
+    cwd?: string;
+    apply: boolean;
+    yes: boolean;
+    json: boolean;
+    maxRisk?: ActionRisk;
+    signal?: AbortSignal;
+    dependencies?: {
+        platform?: NodeJS.Platform;
+        now?: () => Date;
+        runCommand?: (command: string, args: string[]) => Promise<{
+            stdout: string;
+            stderr: string;
+        }>;
+    };
+};
+export type MoleHandoff = {
+    status: "available" | "absent" | "not-applicable";
+    suggestions: string[];
+};
+export type CloseoutSummary = {
+    profile: "closeout";
+    repositoryRoot: string;
+    currentWorktree: string;
+    auditId: string;
+    planId: string;
+    auditPath: string;
+    planPath: string;
+    configPath: string;
+    worktrees: number;
+    protectedWorktrees: number;
+    eligibleActions: number;
+    expectedReclaimBytes: number;
+    mole: MoleHandoff;
+    run?: {
+        runId: string;
+        status: CleanupRun["status"];
+        journalPath: string;
+        reclaimedBytes: number;
+    };
+};
+export type CleanCommandResult = {
+    audit: AuditReport;
+    plan: CleanupPlan;
+    run?: CleanupRun;
+    status: "ok" | "degraded" | "failed";
+    summary: CloseoutSummary;
+    output: string;
+};
+export declare function cleanCommandExitCode(result: Pick<CleanCommandResult, "run" | "status">): number | undefined;
+export declare function cleanCommandStatus(audit: Pick<AuditReport, "diagnostics" | "probes">, run?: Pick<CleanupRun, "status">): CleanCommandResult["status"];
+export declare function executeCleanCommand(options: CleanCommandOptions): Promise<CleanCommandResult>;
+//# sourceMappingURL=clean.d.ts.map

package/dist/commands/clean.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clean.d.ts","sourceRoot":"","sources":["../../src/commands/clean.ts"],"names":[],"mappings":"AASA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAWtD,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,UAAU,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QACjB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC/F,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;IAClD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,UAAU,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,QAAQ,CAAC;IACrC,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,QAAQ,CAAC,GACjD,MAAM,GAAG,SAAS,CAQpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,GAAG,QAAQ,CAAC,EAClD,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,GAC/B,kBAAkB,CAAC,QAAQ,CAAC,CAO9B;AA6FD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAgI7B"}

package/dist/commands/clean.js

@@ -0,0 +1,224 @@
+import { execFile } from "node:child_process";
+import { isAbsolute, relative, resolve } from "node:path";
+import { promisify } from "node:util";
+import { parseWorktreePorcelain } from "../adapters/git/porcelain.js";
+import { createAuditAdapters } from "../adapters/registry.js";
+import { confirmApply } from "./apply.js";
+import { loadConfigForHome } from "../config/load.js";
+import { actionRiskSchema } from "../contracts/action.js";
+import { applyCleanupPlan } from "../core/apply.js";
+import { runAudit } from "../core/audit.js";
+import { CommandInterruptedError } from "../core/interruption.js";
+import { createCleanupPlan } from "../core/plan.js";
+import { createCommandEnvelope, jsonDocument } from "../machine-output.js";
+import { writeJsonAtomic } from "../state/json-file.js";
+import { resolveStateRoot, stateLayout } from "../state/layout.js";
+const execFileAsync = promisify(execFile);
+export function cleanCommandExitCode(result) {
+    if (result.run?.status === "interrupted") {
+        return 130;
+    }
+    if (result.run !== undefined && ["failed", "partial"].includes(result.run.status)) {
+        return 2;
+    }
+    return result.status === "degraded" ? 1 : undefined;
+}
+export function cleanCommandStatus(audit, run) {
+    if (run !== undefined && ["failed", "interrupted", "partial"].includes(run.status)) {
+        return "failed";
+    }
+    return audit.probes.some((probe) => probe.status === "degraded") || audit.diagnostics.length > 0
+        ? "degraded"
+        : "ok";
+}
+async function defaultRunCommand(command, args) {
+    const result = await execFileAsync(command, args, {
+        encoding: "utf8",
+        maxBuffer: 4 * 1024 * 1024,
+        timeout: 10_000,
+    });
+    return { stdout: result.stdout, stderr: result.stderr };
+}
+function isInside(root, candidate) {
+    const result = relative(resolve(root), resolve(candidate));
+    return result === "" || (!result.startsWith("..") && !isAbsolute(result));
+}
+function scopedConfig(config, currentWorktree, worktrees, maxRisk) {
+    const scoped = structuredClone(config);
+    for (const id of ["cursor", "copilot", "zed", "opencode", "grok", "runtime", "docker"]) {
+        scoped.adapters[id] = { enabled: false };
+    }
+    scoped.adapters.git = { enabled: true, root: currentWorktree };
+    scoped.artifacts.projects = scoped.artifacts.projects.filter((project) => worktrees.some((worktree) => isInside(worktree, project.root)));
+    if (maxRisk !== undefined) {
+        scoped.plan.maxRisk = maxRisk;
+    }
+    return scoped;
+}
+async function moleHandoff(platform, runCommand) {
+    if (platform !== "darwin") {
+        return { status: "not-applicable", suggestions: [] };
+    }
+    try {
+        await runCommand("mo", ["--version"]);
+        return {
+            status: "available",
+            suggestions: ["mo purge --dry-run", "mo clean --dry-run"],
+        };
+    }
+    catch {
+        return {
+            status: "absent",
+            suggestions: ["Install Mole to preview broad macOS cleanup outside AgentRinse."],
+        };
+    }
+}
+function renderCloseout(summary) {
+    const lines = [
+        "AgentRinse closeout",
+        "",
+        `Repository: ${summary.repositoryRoot}`,
+        `Worktrees: ${summary.worktrees} (${summary.protectedWorktrees} protected)`,
+        `Eligible actions: ${summary.eligibleActions}`,
+        `Expected reclaim: ${summary.expectedReclaimBytes} bytes`,
+        `Audit: ${summary.auditPath}`,
+        `Plan: ${summary.planPath}`,
+        `Config: ${summary.configPath}`,
+    ];
+    if (summary.run !== undefined) {
+        lines.push(`Run: ${summary.run.status} (${summary.run.reclaimedBytes} bytes)`, `Journal: ${summary.run.journalPath}`);
+    }
+    if (summary.mole.suggestions.length > 0) {
+        lines.push("", "Mole handoff:", ...summary.mole.suggestions.map((item) => `  ${item}`));
+    }
+    return `${lines.join("\n")}\n`;
+}
+function interruptionFrom(signal) {
+    if (signal?.aborted !== true) {
+        return undefined;
+    }
+    return signal.reason instanceof CommandInterruptedError
+        ? signal.reason
+        : new CommandInterruptedError("clean interrupted");
+}
+export async function executeCleanCommand(options) {
+    if (options.profile !== "closeout") {
+        throw new Error(`unsupported clean profile: ${options.profile}`);
+    }
+    if (options.json && options.apply && !options.yes) {
+        throw new Error("clean --json --apply requires --yes");
+    }
+    const runCommand = options.dependencies?.runCommand ?? defaultRunCommand;
+    const platform = options.dependencies?.platform ?? process.platform;
+    const clock = options.dependencies?.now ?? (() => new Date());
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const home = resolve(options.home);
+    const currentWorktree = (await runCommand("git", ["-C", cwd, "rev-parse", "--show-toplevel"])).stdout.trim();
+    if (currentWorktree === "") {
+        throw new Error("closeout requires a Git worktree");
+    }
+    const worktreeOutput = (await runCommand("git", ["-C", currentWorktree, "worktree", "list", "--porcelain", "-z"])).stdout;
+    const worktrees = parseWorktreePorcelain(worktreeOutput).map((record) => resolve(record.path));
+    const repositoryRoot = worktrees[0] ?? currentWorktree;
+    const { config } = await loadConfigForHome(home, options.config);
+    const maxRisk = options.maxRisk === undefined ? undefined : actionRiskSchema.parse(options.maxRisk);
+    const scoped = scopedConfig(config, currentWorktree, worktrees, maxRisk);
+    const audit = await runAudit({
+        home,
+        config: scoped,
+        adapters: createAuditAdapters(scoped, platform, {
+            providerInventory: false,
+            roots: [
+                {
+                    path: currentWorktree,
+                    code: "current-worktree",
+                    source: "closeout",
+                    detail: "The worktree running the closeout profile is protected.",
+                },
+            ],
+        }),
+        now: clock,
+        ...(options.signal === undefined ? {} : { signal: options.signal }),
+    });
+    const plan = createCleanupPlan(audit, scoped, clock());
+    const layout = stateLayout(resolveStateRoot(home, options.stateDir));
+    const auditPath = resolve(layout.audits, `${audit.auditId}.json`);
+    const planPath = resolve(layout.plans, `${plan.planId}.json`);
+    const configPath = resolve(layout.plans, `${plan.planId}.config.json`);
+    await writeJsonAtomic(auditPath, audit, {
+        privateDirectories: [layout.root, layout.audits],
+    });
+    await writeJsonAtomic(planPath, plan, {
+        privateDirectories: [layout.root, layout.plans],
+    });
+    await writeJsonAtomic(configPath, scoped, {
+        privateDirectories: [layout.root, layout.plans],
+    });
+    let run;
+    let journalPath;
+    if (options.apply) {
+        const interruption = interruptionFrom(options.signal);
+        if (interruption !== undefined) {
+            throw interruption;
+        }
+        if (!options.yes && !(await confirmApply(plan.actions.length, options.signal))) {
+            throw new Error("clean apply cancelled");
+        }
+        const result = await applyCleanupPlan({
+            input: plan,
+            config: scoped,
+            stateRoot: layout.root,
+            ...(options.signal === undefined ? {} : { signal: options.signal }),
+            dependencies: { clock },
+        });
+        run = result.run;
+        journalPath = result.journalPath;
+    }
+    const gitFindings = audit.findings.filter((finding) => finding.resource.kind === "git-worktree");
+    const summary = {
+        profile: "closeout",
+        repositoryRoot,
+        currentWorktree,
+        auditId: audit.auditId,
+        planId: plan.planId,
+        auditPath,
+        planPath,
+        configPath,
+        worktrees: gitFindings.length,
+        protectedWorktrees: gitFindings.filter((finding) => finding.state !== "eligible").length,
+        eligibleActions: plan.actions.length,
+        expectedReclaimBytes: plan.expectedReclaimBytes,
+        mole: await moleHandoff(platform, runCommand),
+        ...(run === undefined || journalPath === undefined
+            ? {}
+            : {
+                run: {
+                    runId: run.runId,
+                    status: run.status,
+                    journalPath,
+                    reclaimedBytes: run.reclaimedBytes,
+                },
+            }),
+    };
+    const startedAt = audit.startedAt;
+    const completedAt = clock().toISOString();
+    const status = cleanCommandStatus(audit, run);
+    return {
+        audit,
+        plan,
+        ...(run === undefined ? {} : { run }),
+        status,
+        summary,
+        output: options.json
+            ? jsonDocument(createCommandEnvelope({
+                command: "clean",
+                startedAt,
+                completedAt,
+                status,
+                data: summary,
+                diagnostics: audit.diagnostics,
+            }))
+            : renderCloseout(summary),
+    };
+}
+//# sourceMappingURL=clean.js.map