agentrinse 0.1.0 → 0.3.0

package/dist/adapters/git/status.js

@@ -0,0 +1,87 @@
+function changeFlags(token) {
+    return {
+        staged: token[0] !== undefined && token[0] !== ".",
+        modified: token[1] !== undefined && token[1] !== ".",
+    };
+}
+export function parseGitStatusPorcelainV2(input) {
+    const facts = {
+        ahead: 0,
+        behind: 0,
+        staged: 0,
+        modified: 0,
+        untracked: 0,
+        conflicted: 0,
+        ignored: 0,
+    };
+    let expectRenameSource = false;
+    for (const token of input.split("\0")) {
+        if (token === "") {
+            continue;
+        }
+        if (expectRenameSource) {
+            expectRenameSource = false;
+            continue;
+        }
+        if (token.startsWith("# branch.oid ")) {
+            const value = token.slice("# branch.oid ".length);
+            if (value !== "(initial)") {
+                facts.head = value;
+            }
+            continue;
+        }
+        if (token.startsWith("# branch.head ")) {
+            const value = token.slice("# branch.head ".length);
+            if (value !== "(detached)") {
+                facts.branch = value;
+            }
+            continue;
+        }
+        if (token.startsWith("# branch.upstream ")) {
+            facts.upstream = token.slice("# branch.upstream ".length);
+            continue;
+        }
+        if (token.startsWith("# branch.ab ")) {
+            const match = /^# branch\.ab \+(\d+) -(\d+)$/u.exec(token);
+            if (match === null) {
+                throw new Error(`invalid branch.ab record: ${token}`);
+            }
+            facts.ahead = Number.parseInt(match[1], 10);
+            facts.behind = Number.parseInt(match[2], 10);
+            continue;
+        }
+        if (token.startsWith("1 ") || token.startsWith("2 ")) {
+            const flags = changeFlags(token.slice(2, 4));
+            facts.staged += Number(flags.staged);
+            facts.modified += Number(flags.modified);
+            expectRenameSource = token.startsWith("2 ");
+            continue;
+        }
+        if (token.startsWith("u ")) {
+            facts.conflicted += 1;
+            facts.staged += 1;
+            facts.modified += 1;
+            continue;
+        }
+        if (token.startsWith("? ")) {
+            facts.untracked += 1;
+            continue;
+        }
+        if (token.startsWith("! ")) {
+            facts.ignored += 1;
+            continue;
+        }
+        if (token.startsWith("# ")) {
+            continue;
+        }
+        throw new Error(`unknown porcelain v2 record: ${token}`);
+    }
+    return facts;
+}
+export function countStatusSuppressedIndexEntries(input) {
+    return input
+        .split("\0")
+        .filter((entry) => entry.startsWith("S ") ||
+        (entry.length >= 2 && entry[1] === " " && /^[a-z]$/u.test(entry[0]))).length;
+}
+//# sourceMappingURL=status.js.map

package/dist/adapters/git/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/adapters/git/status.ts"],"names":[],"mappings":"AAaA,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAClD,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,KAAK,GAAmB;QAC5B,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,CAAC;QACZ,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;KACX,CAAC;IACF,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,EAAE,CAAC;YACvB,kBAAkB,GAAG,KAAK,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAC3B,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACvB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzC,kBAAkB,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;YACtB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAClB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC7D,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CACxE,CAAC,MAAM,CAAC;AACb,CAAC"}

package/dist/adapters/provider-adapter.d.ts

@@ -2,12 +2,15 @@ import type { AuditAdapter, AuditContext, CollectionResult } from "../contracts/
 import type { Finding } from "../contracts/finding.js";
 import type { AdapterProbe } from "../contracts/report.js";
 import type { ResourceSnapshot } from "../contracts/resource.js";
+import type { ReachabilityIndex } from "../core/reachability.js";
 import type { ProviderSpec } from "./provider-specs.js";
 export type ProviderAdapterOptions = {
     root?: string;
     platform?: NodeJS.Platform;
     measureBytes: boolean;
     maxEntries: number;
+    reachability?: ReachabilityIndex;
+    inventoryResources?: boolean;
 };
 export declare class ProviderAuditAdapter implements AuditAdapter {
     private readonly spec;

package/dist/adapters/provider-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE5F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,qBAAa,oBAAqB,YAAW,YAAY;IAIrD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,YACmB,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,sBAAsB,EAGjD;IAED,OAAO,CAAC,IAAI;IAON,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAwExD;IAEK,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoEnF;IAEK,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBlF;CACF"}
+{"version":3,"file":"provider-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE5F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAQF,qBAAa,oBAAqB,YAAW,YAAY;IAIrD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,YACmB,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,sBAAsB,EAGjD;IAED,OAAO,CAAC,IAAI;IAON,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAwExD;IAEK,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6FnF;IAEK,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBlF;CACF"}

package/dist/adapters/provider-adapter.js

@@ -2,6 +2,7 @@ import { lstat } from "node:fs/promises";
 import { join, resolve } from "node:path";
 import { sha256 } from "../core/digest.js";
 import { measurePath } from "../core/measure.js";
+import { collectProviderReachability } from "./provider-reachability.js";
 function isMissing(error) {
     return (error instanceof Error && "code" in error && error.code === "ENOENT");
 }
@@ -90,10 +91,25 @@ export class ProviderAuditAdapter {
     }
     async collect(context, probe) {
         if (probe.status !== "available" || probe.root === undefined) {
+            if (probe.status === "degraded" &&
+                this.options.reachability !== undefined &&
+                (this.spec.id === "codex" || this.spec.id === "claude")) {
+                this.options.reachability.addGlobal({
+                    code: "unknown-provider-state",
+                    source: this.spec.id,
+                    detail: `${this.spec.displayName} ownership metadata could not be inspected.`,
+                });
+            }
             return { resources: [], diagnostics: [] };
         }
         const resources = [];
         const diagnostics = [];
+        if (this.options.reachability !== undefined) {
+            diagnostics.push(...(await collectProviderReachability(this.spec.id, context, probe.root, this.options.reachability)));
+        }
+        if (this.options.inventoryResources === false) {
+            return { resources: [], diagnostics };
+        }
         for (const candidate of this.spec.resources) {
             context.signal?.throwIfAborted();
             const path = candidate.relativePath === "." ? probe.root : join(probe.root, candidate.relativePath);

package/dist/adapters/provider-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-adapter.js","sourceRoot":"","sources":["../../src/adapters/provider-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAO1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUjD,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,oBAAoB;IAIZ,IAAI;IACJ,OAAO;IAJjB,EAAE,CAAS;IAEpB,YACmB,IAAkB,EAClB,OAA+B;oBAD/B,IAAI;uBACJ,OAAO;QAExB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,OAAqB;QAChC,OAAO,OAAO,CACZ,IAAI,CAAC,OAAO,CAAC,IAAI;YACf,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CACjF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,UAAU;oBAClB,IAAI;oBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,sCAAsC;oBACtE,WAAW,EAAE;wBACX;4BACE,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,uBAAuB;4BAC7B,OAAO,EAAE,yDAAyD;4BAClE,OAAO,EAAE,IAAI,CAAC,EAAE;yBACjB;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,UAAU;oBAClB,IAAI;oBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,0BAA0B;oBAC1D,WAAW,EAAE;wBACX;4BACE,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,6BAA6B;4BACnC,OAAO,EAAE,kDAAkD;4BAC3D,OAAO,EAAE,IAAI,CAAC,EAAE;yBACjB;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,WAAW;gBACnB,IAAI;gBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,kBAAkB;gBAClD,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,sBAAsB;oBACtD,WAAW,EAAE,EAAE;iBAChB,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,UAAU;gBAClB,IAAI;gBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,mCAAmC;gBACnE,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,KAAmB;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GACR,SAAS,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YAEzF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,WAAW,CAAC,IAAI,CAAC;wBACf,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,+CAA+C;wBACxD,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY;oBAC3C,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE;wBACtB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;wBACnC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;qBACpE,CAAC;oBACJ,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAE1E,SAAS,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE;wBACR,EAAE,EAAE,UAAU;wBACd,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;wBACpB,YAAY;wBACZ,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;qBACpB;oBACD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;oBACrC,MAAM,EAAE,IAAI;oBACZ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;oBAC1E,KAAK,EAAE;wBACL,UAAU,EAAE,IAAI;wBAChB,OAAO,EAAE,WAAW,EAAE,OAAO;wBAC7B,eAAe,EAAE,WAAW,EAAE,eAAe;wBAC7C,oBAAoB,EAAE,WAAW,EAAE,SAAS;qBAC7C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,QAA0B;QAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,4BAA4B;oBAClC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,UAAU;oBACV,MAAM,EAAE,gEAAgE;iBACzE;aACF;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,gBAAgB,EAAE,EAAE;YACpB,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1F,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"provider-adapter.js","sourceRoot":"","sources":["../../src/adapters/provider-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAO1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAYzE,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,oBAAoB;IAIZ,IAAI;IACJ,OAAO;IAJjB,EAAE,CAAS;IAEpB,YACmB,IAAkB,EAClB,OAA+B;oBAD/B,IAAI;uBACJ,OAAO;QAExB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,OAAqB;QAChC,OAAO,OAAO,CACZ,IAAI,CAAC,OAAO,CAAC,IAAI;YACf,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CACjF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,UAAU;oBAClB,IAAI;oBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,sCAAsC;oBACtE,WAAW,EAAE;wBACX;4BACE,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,uBAAuB;4BAC7B,OAAO,EAAE,yDAAyD;4BAClE,OAAO,EAAE,IAAI,CAAC,EAAE;yBACjB;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,UAAU;oBAClB,IAAI;oBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,0BAA0B;oBAC1D,WAAW,EAAE;wBACX;4BACE,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,6BAA6B;4BACnC,OAAO,EAAE,kDAAkD;4BAC3D,OAAO,EAAE,IAAI,CAAC,EAAE;yBACjB;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,WAAW;gBACnB,IAAI;gBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,kBAAkB;gBAClD,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,sBAAsB;oBACtD,WAAW,EAAE,EAAE;iBAChB,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,UAAU;gBAClB,IAAI;gBACJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,mCAAmC;gBACnE,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,KAAmB;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7D,IACE,KAAK,CAAC,MAAM,KAAK,UAAU;gBAC3B,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;gBACvC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EACvD,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC;oBAClC,IAAI,EAAE,wBAAwB;oBAC9B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;oBACpB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,6CAA6C;iBAC9E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC5C,WAAW,CAAC,IAAI,CACd,GAAG,CAAC,MAAM,2BAA2B,CACnC,IAAI,CAAC,IAAI,CAAC,EAAE,EACZ,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,OAAO,CAAC,YAAY,CAC1B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC9C,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GACR,SAAS,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YAEzF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,WAAW,CAAC,IAAI,CAAC;wBACf,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,+CAA+C;wBACxD,OAAO,EAAE,IAAI,CAAC,EAAE;qBACjB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY;oBAC3C,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE;wBACtB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;wBACnC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;qBACpE,CAAC;oBACJ,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAE1E,SAAS,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE;wBACR,EAAE,EAAE,UAAU;wBACd,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;wBACpB,YAAY;wBACZ,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;qBACpB;oBACD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;oBACrC,MAAM,EAAE,IAAI;oBACZ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;oBAC1E,KAAK,EAAE;wBACL,UAAU,EAAE,IAAI;wBAChB,OAAO,EAAE,WAAW,EAAE,OAAO;wBAC7B,eAAe,EAAE,WAAW,EAAE,eAAe;wBAC7C,oBAAoB,EAAE,WAAW,EAAE,SAAS;qBAC7C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,OAAO,EAAE,IAAI,CAAC,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,QAA0B;QAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,4BAA4B;oBAClC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,UAAU;oBACV,MAAM,EAAE,gEAAgE;iBACzE;aACF;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,gBAAgB,EAAE,EAAE;YACpB,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1F,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/provider-reachability.d.ts

@@ -0,0 +1,6 @@
+import type { AuditContext } from "../contracts/adapter.js";
+import type { Diagnostic } from "../contracts/diagnostic.js";
+import type { ReachabilityIndex } from "../core/reachability.js";
+import type { ProviderAdapterId } from "./provider-specs.js";
+export declare function collectProviderReachability(adapter: ProviderAdapterId, context: AuditContext, root: string, index: ReachabilityIndex): Promise<Diagnostic[]>;
+//# sourceMappingURL=provider-reachability.d.ts.map

package/dist/adapters/provider-reachability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-reachability.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-reachability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAyS7D,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,UAAU,EAAE,CAAC,CAQvB"}

package/dist/adapters/provider-reachability.js

@@ -0,0 +1,207 @@
+import { lstat, readFile } from "node:fs/promises";
+import { isAbsolute, join, resolve } from "node:path";
+import { sha256 } from "../core/digest.js";
+function isMissing(error) {
+    return (error instanceof Error && "code" in error && error.code === "ENOENT");
+}
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function diagnostic(adapter, code, message) {
+    return {
+        severity: "warning",
+        code,
+        message,
+        adapter,
+    };
+}
+async function readMetadataObject(path) {
+    try {
+        const stats = await lstat(path);
+        if (stats.isSymbolicLink()) {
+            return { status: "invalid", message: "Metadata symlinks are not followed." };
+        }
+        if (!stats.isFile()) {
+            return { status: "invalid", message: "Metadata path is not a regular file." };
+        }
+        const value = JSON.parse(await readFile(path, "utf8"));
+        return isObject(value)
+            ? { status: "available", value }
+            : { status: "invalid", message: "Metadata root must be a JSON object." };
+    }
+    catch (error) {
+        if (isMissing(error)) {
+            return { status: "absent" };
+        }
+        return {
+            status: "invalid",
+            message: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+function addPathRoot(index, input) {
+    if (!isAbsolute(input.path)) {
+        return false;
+    }
+    const path = resolve(input.path);
+    index.add({
+        path,
+        code: input.code,
+        source: input.source,
+        detail: input.detail,
+        evidenceRef: sha256(`${input.source}\0${input.field}\0${path}`),
+        ...(input.scope === undefined ? {} : { scope: input.scope }),
+    });
+    return true;
+}
+async function addManagedRoot(adapter, root, index) {
+    const worktrees = join(root, "worktrees");
+    try {
+        const stats = await lstat(worktrees);
+        if (stats.isSymbolicLink() || !stats.isDirectory()) {
+            index.addGlobal({
+                code: "unknown-provider-state",
+                source: adapter,
+                detail: `${adapter} managed worktree ownership could not be proven.`,
+            });
+            return [
+                diagnostic(adapter, "PROVIDER_WORKTREE_ROOT_UNSAFE", "The managed worktree root must be a real directory."),
+            ];
+        }
+        addPathRoot(index, {
+            path: worktrees,
+            code: "provider-managed-worktree",
+            source: adapter,
+            detail: `${adapter} owns this managed worktree.`,
+            field: "worktrees",
+            scope: "subtree",
+        });
+        return [];
+    }
+    catch (error) {
+        if (isMissing(error)) {
+            return [];
+        }
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: adapter,
+            detail: `${adapter} managed worktree ownership could not be proven.`,
+        });
+        return [
+            diagnostic(adapter, "PROVIDER_WORKTREE_ROOT_UNREADABLE", error instanceof Error ? error.message : String(error)),
+        ];
+    }
+}
+function parsePathArray(value, add) {
+    if (value === undefined) {
+        return "absent";
+    }
+    if (!Array.isArray(value) || value.some((path) => typeof path !== "string")) {
+        return "invalid";
+    }
+    for (const path of value) {
+        add(path);
+    }
+    return "valid";
+}
+function parsePathRecord(value, add) {
+    if (value === undefined) {
+        return "absent";
+    }
+    if (!isObject(value) || Object.values(value).some((path) => typeof path !== "string")) {
+        return "invalid";
+    }
+    for (const path of Object.values(value)) {
+        add(path);
+    }
+    return "valid";
+}
+async function collectCodexReachability(root, index) {
+    const diagnostics = await addManagedRoot("codex", root, index);
+    const metadata = await readMetadataObject(join(root, ".codex-global-state.json"));
+    if (metadata.status !== "available") {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "codex",
+            detail: "Codex workspace metadata could not be proven.",
+        });
+        diagnostics.push(diagnostic("codex", metadata.status === "absent"
+            ? "CODEX_WORKSPACE_METADATA_MISSING"
+            : "CODEX_WORKSPACE_METADATA_INVALID", metadata.status === "absent"
+            ? "Codex workspace metadata is unavailable."
+            : metadata.message));
+        return diagnostics;
+    }
+    let invalidPath = false;
+    const add = (code, detail, field) => (path) => {
+        if (!addPathRoot(index, { path, code, source: "codex", detail, field })) {
+            invalidPath = true;
+        }
+    };
+    const fieldStates = [
+        parsePathArray(metadata.value["active-workspace-roots"], add("active-session", "Codex marks this workspace as active.", "active-workspace-roots")),
+        parsePathArray(metadata.value["electron-saved-workspace-roots"], add("recent-session", "Codex retains this saved workspace.", "electron-saved-workspace-roots")),
+        parsePathRecord(metadata.value["thread-workspace-root-hints"], add("recent-session", "Codex thread metadata references this workspace.", "thread-workspace-root-hints")),
+    ];
+    if (invalidPath ||
+        fieldStates.includes("invalid") ||
+        fieldStates.every((state) => state === "absent")) {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "codex",
+            detail: "Codex workspace metadata is unsupported or incomplete.",
+        });
+        diagnostics.push(diagnostic("codex", "CODEX_WORKSPACE_METADATA_UNSUPPORTED", "Codex workspace metadata contains unsupported path fields."));
+    }
+    return diagnostics;
+}
+async function collectClaudeReachability(context, root, index) {
+    const diagnostics = await addManagedRoot("claude", root, index);
+    const metadata = await readMetadataObject(join(context.home, ".claude.json"));
+    if (metadata.status !== "available" || !isObject(metadata.value.projects)) {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "claude",
+            detail: "Claude project metadata could not be proven.",
+        });
+        diagnostics.push(diagnostic("claude", metadata.status === "absent"
+            ? "CLAUDE_PROJECT_METADATA_MISSING"
+            : "CLAUDE_PROJECT_METADATA_INVALID", metadata.status === "available"
+            ? "Claude project metadata must contain a projects object."
+            : metadata.status === "absent"
+                ? "Claude project metadata is unavailable."
+                : metadata.message));
+        return diagnostics;
+    }
+    let invalidPath = false;
+    for (const path of Object.keys(metadata.value.projects)) {
+        if (!addPathRoot(index, {
+            path,
+            code: "recent-session",
+            source: "claude",
+            detail: "Claude project metadata references this workspace.",
+            field: "projects",
+        })) {
+            invalidPath = true;
+        }
+    }
+    if (invalidPath) {
+        index.addGlobal({
+            code: "unknown-provider-state",
+            source: "claude",
+            detail: "Claude project metadata contains unsupported workspace paths.",
+        });
+        diagnostics.push(diagnostic("claude", "CLAUDE_PROJECT_METADATA_UNSUPPORTED", "Claude project metadata contains non-absolute workspace paths."));
+    }
+    return diagnostics;
+}
+export async function collectProviderReachability(adapter, context, root, index) {
+    if (adapter === "codex") {
+        return collectCodexReachability(root, index);
+    }
+    if (adapter === "claude") {
+        return collectClaudeReachability(context, root, index);
+    }
+    return [];
+}
+//# sourceMappingURL=provider-reachability.js.map

package/dist/adapters/provider-reachability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-reachability.js","sourceRoot":"","sources":["../../src/adapters/provider-reachability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAItD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAM3C,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,IAAY,EAAE,OAAe;IAC3E,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,IAAI;QACJ,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY;IAMZ,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE;YAChC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,KAAwB,EACxB,KAOC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC;QACR,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAA0B,EAC1B,IAAY,EACZ,KAAwB;IAExB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,OAAO,kDAAkD;aACrE,CAAC,CAAC;YACH,OAAO;gBACL,UAAU,CACR,OAAO,EACP,+BAA+B,EAC/B,qDAAqD,CACtD;aACF,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,KAAK,EAAE;YACjB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,GAAG,OAAO,8BAA8B;YAChD,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,GAAG,OAAO,kDAAkD;SACrE,CAAC,CAAC;QACH,OAAO;YACL,UAAU,CACR,OAAO,EACP,mCAAmC,EACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,GAA2B;IAE3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAc,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,GAA2B;IAE3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAc,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAY,EACZ,KAAwB;IAExB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,+CAA+C;SACxD,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,OAAO,EACP,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,kCAAkC,EACtC,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,QAAQ,CAAC,OAAO,CACrB,CACF,CAAC;QACF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;QAC5E,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,WAAW,GAAG;QAClB,cAAc,CACZ,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,EACxC,GAAG,CAAC,gBAAgB,EAAE,uCAAuC,EAAE,wBAAwB,CAAC,CACzF;QACD,cAAc,CACZ,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAChD,GAAG,CACD,gBAAgB,EAChB,qCAAqC,EACrC,gCAAgC,CACjC,CACF;QACD,eAAe,CACb,QAAQ,CAAC,KAAK,CAAC,6BAA6B,CAAC,EAC7C,GAAG,CACD,gBAAgB,EAChB,kDAAkD,EAClD,6BAA6B,CAC9B,CACF;KACF,CAAC;IAEF,IACE,WAAW;QACX,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC/B,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,EAChD,CAAC;QACD,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,wDAAwD;SACjE,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,OAAO,EACP,sCAAsC,EACtC,4DAA4D,CAC7D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAqB,EACrB,IAAY,EACZ,KAAwB;IAExB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1E,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,8CAA8C;SACvD,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,QAAQ,EACR,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,iCAAiC,EACrC,QAAQ,CAAC,MAAM,KAAK,WAAW;YAC7B,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC5B,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,QAAQ,CAAC,OAAO,CACvB,CACF,CAAC;QACF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,IACE,CAAC,WAAW,CAAC,KAAK,EAAE;YAClB,IAAI;YACJ,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,oDAAoD;YAC5D,KAAK,EAAE,UAAU;SAClB,CAAC,EACF,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,UAAU,CACR,QAAQ,EACR,qCAAqC,EACrC,gEAAgE,CACjE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAA0B,EAC1B,OAAqB,EACrB,IAAY,EACZ,KAAwB;IAExB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/adapters/provider-specs.d.ts

@@ -1,6 +1,6 @@
 import type { AdapterId } from "../config/schema.js";
 import type { ResourceKind } from "../contracts/resource.js";
-export type ProviderAdapterId = Exclude<AdapterId, "git" | "docker">;
+export type ProviderAdapterId = Exclude<AdapterId, "git" | "docker" | "runtime">;
 export type ProviderResourceSpec = {
     relativePath: string;
     displayName: string;

package/dist/adapters/provider-specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-specs.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-specs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;AAErE,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;IAC7D,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAuJlE,CAAC"}
+{"version":3,"file":"provider-specs.d.ts","sourceRoot":"","sources":["../../src/adapters/provider-specs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC;AAEjF,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;IAC7D,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAuJlE,CAAC"}

package/dist/adapters/registry.d.ts

@@ -1,4 +1,11 @@
 import type { AgentRinseConfig } from "../config/schema.js";
 import type { AuditAdapter } from "../contracts/adapter.js";
-export declare function createAuditAdapters(config: AgentRinseConfig, platform?: NodeJS.Platform): AuditAdapter[];
+import { ReachabilityIndex, type ReachabilityRoot } from "../core/reachability.js";
+export type AuditAdapterRegistryOptions = {
+    providerInventory?: boolean;
+    roots?: ReachabilityRoot[];
+    environment?: NodeJS.ProcessEnv;
+    reachability?: ReachabilityIndex;
+};
+export declare function createAuditAdapters(config: AgentRinseConfig, platform?: NodeJS.Platform, options?: AuditAdapterRegistryOptions): AuditAdapter[];
 //# sourceMappingURL=registry.d.ts.map

package/dist/adapters/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAS5D,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,YAAY,EAAE,CA+BhB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAUnF,MAAM,MAAM,2BAA2B,GAAG;IACxC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,OAAO,GAAE,2BAAgC,GACxC,YAAY,EAAE,CAsFhB"}

package/dist/adapters/registry.js

@@ -1,24 +1,68 @@
+import { sha256 } from "../core/digest.js";
+import { ReachabilityIndex } from "../core/reachability.js";
 import { ArtifactAuditAdapter } from "./artifacts/adapter.js";
 import { DockerAuditAdapter } from "./docker/adapter.js";
 import { GitWorktreeAuditAdapter } from "./git/adapter.js";
 import { ProviderAuditAdapter } from "./provider-adapter.js";
 import { PROVIDER_SPECS } from "./provider-specs.js";
+import { RuntimeAuditAdapter } from "./runtime/adapter.js";
 const PROVIDER_IDS = Object.keys(PROVIDER_SPECS);
-export function createAuditAdapters(config, platform = process.platform) {
+export function createAuditAdapters(config, platform = process.platform, options = {}) {
+    const reachability = options.reachability ?? new ReachabilityIndex();
+    const gitEnabled = config.adapters.git?.enabled === true;
+    for (const root of options.roots ?? []) {
+        reachability.add(root);
+    }
+    for (const pin of config.pins) {
+        const root = {
+            code: "user-pin",
+            source: "config",
+            detail: "User configuration pins this resource.",
+            evidenceRef: sha256(JSON.stringify(pin)),
+            ...(pin.expiresAt === undefined ? {} : { expiresAt: pin.expiresAt }),
+        };
+        if ("path" in pin) {
+            reachability.add({ ...root, path: pin.path });
+        }
+        else if ("resourceId" in pin) {
+            reachability.addResource(pin.resourceId, root);
+        }
+        else if (gitEnabled) {
+            reachability.addGitRef(pin.gitRef, root);
+        }
+        else {
+            reachability.addGlobal({
+                ...root,
+                detail: "Git ref pin resolution requires the Git adapter.",
+            });
+        }
+    }
     const adapters = PROVIDER_IDS.filter((id) => config.adapters[id]?.enabled !== false).map((id) => new ProviderAuditAdapter(PROVIDER_SPECS[id], {
         ...(config.adapters[id]?.root === undefined ? {} : { root: config.adapters[id].root }),
         platform,
         measureBytes: config.audit.measureBytes,
         maxEntries: config.audit.maxEntries,
+        reachability,
+        inventoryResources: options.providerInventory ?? true,
     }));
+    if (gitEnabled) {
+        adapters.push(new GitWorktreeAuditAdapter(config.adapters.git?.root, undefined, undefined, undefined, reachability, {
+            ...config.audit,
+            ...config.worktrees,
+            platform,
+        }));
+    }
     if (config.artifacts.projects.length > 0) {
         adapters.push(new ArtifactAuditAdapter({
             ...config.artifacts,
             ...config.audit,
-        }));
+        }, undefined, undefined, reachability));
     }
-    if (config.adapters.git?.enabled === true) {
-        adapters.push(new GitWorktreeAuditAdapter(config.adapters.git.root));
+    if (config.adapters.runtime?.enabled !== false) {
+        adapters.push(new RuntimeAuditAdapter({
+            platform,
+            ...(options.environment === undefined ? {} : { environment: options.environment }),
+        }));
     }
     if (config.adapters.docker?.enabled === true) {
         adapters.push(new DockerAuditAdapter());

package/dist/adapters/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAA0B,MAAM,qBAAqB,CAAC;AAE7E,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAwB,CAAC;AAExE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,MAAM,QAAQ,GAAmB,YAAY,CAAC,MAAM,CAClD,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAC/C,CAAC,GAAG,CACH,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE;QAC3C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;QACvC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;KACpC,CAAC,CACL,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CACX,IAAI,oBAAoB,CAAC;YACvB,GAAG,MAAM,CAAC,SAAS;YACnB,GAAG,MAAM,CAAC,KAAK;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAyB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAA0B,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAwB,CAAC;AASxE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,OAAO,GAAgC,EAAE;IAEzC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,iBAAiB,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,wCAAwC;YAChD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;SACrE,CAAC;QACF,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;YAC/B,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,SAAS,CAAC;gBACrB,GAAG,IAAI;gBACP,MAAM,EAAE,kDAAkD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAmB,YAAY,CAAC,MAAM,CAClD,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAC/C,CAAC,GAAG,CACH,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE;QAC3C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;QACvC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;QACnC,YAAY;QACZ,kBAAkB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;KACtD,CAAC,CACL,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CACX,IAAI,uBAAuB,CACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EACzB,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ;YACE,GAAG,MAAM,CAAC,KAAK;YACf,GAAG,MAAM,CAAC,SAAS;YACnB,QAAQ;SACT,CACF,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CACX,IAAI,oBAAoB,CACtB;YACE,GAAG,MAAM,CAAC,SAAS;YACnB,GAAG,MAAM,CAAC,KAAK;SAChB,EACD,SAAS,EACT,SAAS,EACT,YAAY,CACb,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CACX,IAAI,mBAAmB,CAAC;YACtB,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;SACnF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/adapters/runtime/adapter.d.ts

@@ -0,0 +1,24 @@
+import type { AuditAdapter, AuditContext, CollectionResult } from "../../contracts/adapter.js";
+import type { Finding } from "../../contracts/finding.js";
+import type { AdapterProbe } from "../../contracts/report.js";
+import type { ResourceSnapshot } from "../../contracts/resource.js";
+export type RuntimeVersionRunner = (executable: string) => Promise<string>;
+export type RuntimeAdapterOptions = {
+    environment?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    runVersion?: RuntimeVersionRunner;
+};
+export declare class RuntimeAuditAdapter implements AuditAdapter {
+    private readonly options;
+    readonly id = "runtime";
+    constructor(options?: RuntimeAdapterOptions);
+    private executableNames;
+    private resolveCommand;
+    private discovered;
+    probe(context: AuditContext): Promise<AdapterProbe>;
+    private resource;
+    private collectClaudeNative;
+    collect(context: AuditContext, probe: AdapterProbe): Promise<CollectionResult>;
+    classify(context: AuditContext, resource: ResourceSnapshot): Promise<Finding>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapters/runtime/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/runtime/adapter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE/F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAapE,MAAM,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE3E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC,CAAC;AA8BF,qBAAa,mBAAoB,YAAW,YAAY;IAG1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,EAAE,aAAa;IAExB,YAA6B,OAAO,GAAE,qBAA0B,EAAI;IAEpE,OAAO,CAAC,eAAe;YAMT,cAAc;YAqCd,UAAU;IAiBlB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CA8BxD;IAED,OAAO,CAAC,QAAQ;YAgCF,mBAAmB;IA+D3B,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmFnF;IAEK,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBlF;CACF"}