agentrinse 0.3.0 → 0.5.0

package/dist/contracts/plan.d.ts

@@ -15,7 +15,7 @@ export declare const cleanupPlanSchema: z.ZodObject<{
     }>;
     configDigest: z.ZodString;
     auditDigest: z.ZodString;
-    actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    actions: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         actionId: z.ZodString;
         type: z.ZodLiteral<"artifacts.remove">;
         adapter: z.ZodLiteral<"artifacts">;
@@ -67,7 +67,212 @@ export declare const cleanupPlanSchema: z.ZodObject<{
             newestMtimeMs: z.ZodNumber;
             fingerprint: z.ZodString;
         }, z.core.$strip>;
-    }, z.core.$strip>], "type">>;
+    }, z.core.$strip>, z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"database.vacuum">;
+        adapter: z.ZodLiteral<"codex">;
+        resourceId: z.ZodString;
+        risk: z.ZodLiteral<"experimental">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodNumber;
+        backupTtlMinutes: z.ZodNumber;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            database: z.ZodEnum<{
+                goals: "goals";
+                logs: "logs";
+                memories: "memories";
+                state: "state";
+            }>;
+            filename: z.ZodEnum<{
+                "goals_1.sqlite": "goals_1.sqlite";
+                "logs_2.sqlite": "logs_2.sqlite";
+                "memories_1.sqlite": "memories_1.sqlite";
+                "state_5.sqlite": "state_5.sqlite";
+            }>;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            pageSize: z.ZodNumber;
+            pageCount: z.ZodNumber;
+            freelistCount: z.ZodNumber;
+            journalMode: z.ZodLiteral<"wal">;
+            autoVacuum: z.ZodNumber;
+            migrationVersion: z.ZodNumber;
+            migrationDigest: z.ZodString;
+            tables: z.ZodArray<z.ZodString>;
+            wal: z.ZodOptional<z.ZodObject<{
+                path: z.ZodString;
+                device: z.ZodNumber;
+                inode: z.ZodNumber;
+                mode: z.ZodNumber;
+                mtimeMs: z.ZodNumber;
+                measuredBytes: z.ZodNumber;
+            }, z.core.$strip>>;
+            shm: z.ZodOptional<z.ZodObject<{
+                path: z.ZodString;
+                device: z.ZodNumber;
+                inode: z.ZodNumber;
+                mode: z.ZodNumber;
+                mtimeMs: z.ZodNumber;
+                measuredBytes: z.ZodNumber;
+            }, z.core.$strip>>;
+            schemaDigest: z.ZodString;
+            fingerprint: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"provider.file-quarantine">;
+        resourceId: z.ZodString;
+        policyId: z.ZodString;
+        risk: z.ZodLiteral<"recoverable">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodLiteral<0>;
+        pendingQuarantineBytes: z.ZodNumber;
+        quarantineTtlMinutes: z.ZodNumber;
+        adapter: z.ZodLiteral<"claude">;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            ownerRoot: z.ZodString;
+            relativePath: z.ZodString;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            linkCount: z.ZodLiteral<1>;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            contentSha256: z.ZodString;
+            fingerprint: z.ZodString;
+            provider: z.ZodLiteral<"claude">;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"provider.file-quarantine">;
+        resourceId: z.ZodString;
+        policyId: z.ZodString;
+        risk: z.ZodLiteral<"recoverable">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodLiteral<0>;
+        pendingQuarantineBytes: z.ZodNumber;
+        quarantineTtlMinutes: z.ZodNumber;
+        adapter: z.ZodLiteral<"cursor">;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            ownerRoot: z.ZodString;
+            relativePath: z.ZodString;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            linkCount: z.ZodLiteral<1>;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            contentSha256: z.ZodString;
+            fingerprint: z.ZodString;
+            provider: z.ZodLiteral<"cursor">;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"provider.file-quarantine">;
+        resourceId: z.ZodString;
+        policyId: z.ZodString;
+        risk: z.ZodLiteral<"recoverable">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodLiteral<0>;
+        pendingQuarantineBytes: z.ZodNumber;
+        quarantineTtlMinutes: z.ZodNumber;
+        adapter: z.ZodLiteral<"copilot">;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            ownerRoot: z.ZodString;
+            relativePath: z.ZodString;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            linkCount: z.ZodLiteral<1>;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            contentSha256: z.ZodString;
+            fingerprint: z.ZodString;
+            provider: z.ZodLiteral<"copilot">;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"provider.file-quarantine">;
+        resourceId: z.ZodString;
+        policyId: z.ZodString;
+        risk: z.ZodLiteral<"recoverable">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodLiteral<0>;
+        pendingQuarantineBytes: z.ZodNumber;
+        quarantineTtlMinutes: z.ZodNumber;
+        adapter: z.ZodLiteral<"zed">;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            ownerRoot: z.ZodString;
+            relativePath: z.ZodString;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            linkCount: z.ZodLiteral<1>;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            contentSha256: z.ZodString;
+            fingerprint: z.ZodString;
+            provider: z.ZodLiteral<"zed">;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"provider.file-quarantine">;
+        resourceId: z.ZodString;
+        policyId: z.ZodString;
+        risk: z.ZodLiteral<"recoverable">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodLiteral<0>;
+        pendingQuarantineBytes: z.ZodNumber;
+        quarantineTtlMinutes: z.ZodNumber;
+        adapter: z.ZodLiteral<"opencode">;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            ownerRoot: z.ZodString;
+            relativePath: z.ZodString;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            linkCount: z.ZodLiteral<1>;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            contentSha256: z.ZodString;
+            fingerprint: z.ZodString;
+            provider: z.ZodLiteral<"opencode">;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        actionId: z.ZodString;
+        type: z.ZodLiteral<"provider.file-quarantine">;
+        resourceId: z.ZodString;
+        policyId: z.ZodString;
+        risk: z.ZodLiteral<"recoverable">;
+        description: z.ZodString;
+        expectedReclaimBytes: z.ZodLiteral<0>;
+        pendingQuarantineBytes: z.ZodNumber;
+        quarantineTtlMinutes: z.ZodNumber;
+        adapter: z.ZodLiteral<"grok">;
+        target: z.ZodObject<{
+            path: z.ZodString;
+            ownerRoot: z.ZodString;
+            relativePath: z.ZodString;
+            device: z.ZodNumber;
+            inode: z.ZodNumber;
+            linkCount: z.ZodLiteral<1>;
+            mode: z.ZodNumber;
+            mtimeMs: z.ZodNumber;
+            measuredBytes: z.ZodNumber;
+            contentSha256: z.ZodString;
+            fingerprint: z.ZodString;
+            provider: z.ZodLiteral<"grok">;
+        }, z.core.$strip>;
+    }, z.core.$strip>], "adapter">]>>;
     expectedReclaimBytes: z.ZodNumber;
     pendingQuarantineBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;

package/dist/contracts/plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/contracts/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0E1B,CAAC;AAEL,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/contracts/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsF1B,CAAC;AAEL,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/contracts/plan.js

@@ -38,7 +38,7 @@ export const cleanupPlanSchema = z
             });
         }
         targetPaths.add(action.target.path);
-        if (action.type === "worktree.quarantine") {
+        if (action.type === "worktree.quarantine" || action.type === "provider.file-quarantine") {
             if (action.pendingQuarantineBytes !== action.target.measuredBytes) {
                 context.addIssue({
                     code: "custom",
@@ -48,13 +48,22 @@ export const cleanupPlanSchema = z
             }
             pendingQuarantineBytes += action.pendingQuarantineBytes;
         }
-        else if (action.expectedReclaimBytes !== action.target.measuredBytes) {
+        else if (action.type === "artifacts.remove" &&
+            action.expectedReclaimBytes !== action.target.measuredBytes) {
             context.addIssue({
                 code: "custom",
                 message: "action reclaim estimate must match the measured target bytes",
                 path: ["actions", index, "expectedReclaimBytes"],
             });
         }
+        else if (action.type === "database.vacuum" &&
+            action.expectedReclaimBytes > action.target.measuredBytes) {
+            context.addIssue({
+                code: "custom",
+                message: "database reclaim estimate cannot exceed the database size",
+                path: ["actions", index, "expectedReclaimBytes"],
+            });
+        }
         expectedReclaimBytes += action.expectedReclaimBytes;
     }
     if (expectedReclaimBytes !== plan.expectedReclaimBytes) {

package/dist/contracts/plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/contracts/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACrC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,4CAA4C;gBACrD,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,8CAA8C;gBACvD,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,sBAAsB,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClE,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,0DAA0D;oBACnE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,wBAAwB,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,sBAAsB,IAAI,MAAM,CAAC,sBAAsB,CAAC;QAC1D,CAAC;aAAM,IAAI,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACvE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,8DAA8D;gBACvE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,IAAI,MAAM,CAAC,oBAAoB,CAAC;IACtD,CAAC;IAED,IAAI,oBAAoB,KAAK,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,CAAC,sBAAsB,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;QAClE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yEAAyE;YAClF,IAAI,EAAE,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/contracts/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACrC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,4CAA4C;gBACrD,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,8CAA8C;gBACvD,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,IAAI,MAAM,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YACxF,IAAI,MAAM,CAAC,sBAAsB,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClE,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,0DAA0D;oBACnE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,wBAAwB,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,sBAAsB,IAAI,MAAM,CAAC,sBAAsB,CAAC;QAC1D,CAAC;aAAM,IACL,MAAM,CAAC,IAAI,KAAK,kBAAkB;YAClC,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAC3D,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,8DAA8D;gBACvE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;aAAM,IACL,MAAM,CAAC,IAAI,KAAK,iBAAiB;YACjC,MAAM,CAAC,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EACzD,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,2DAA2D;gBACpE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,IAAI,MAAM,CAAC,oBAAoB,CAAC;IACtD,CAAC;IAED,IAAI,oBAAoB,KAAK,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,CAAC,sBAAsB,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;QAClE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yEAAyE;YAClF,IAAI,EAAE,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/contracts/provider-file-quarantine.d.ts

@@ -0,0 +1,221 @@
+import { z } from "zod";
+export declare const providerFileQuarantineStatusSchema: z.ZodEnum<{
+    partial: "partial";
+    preparing: "preparing";
+    purged: "purged";
+    purging: "purging";
+    quarantined: "quarantined";
+    restored: "restored";
+    restoring: "restoring";
+}>;
+export declare const providerFileQuarantineEntrySchema: z.ZodIntersection<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    entryId: z.ZodString;
+    runId: z.ZodString;
+    actionId: z.ZodString;
+    resourceId: z.ZodString;
+    policyId: z.ZodString;
+    originalPath: z.ZodString;
+    quarantinePath: z.ZodString;
+    createdAt: z.ZodString;
+    expiresAt: z.ZodString;
+    target: z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>;
+    restoredAt: z.ZodOptional<z.ZodString>;
+    purgedAt: z.ZodOptional<z.ZodString>;
+    diagnostic: z.ZodOptional<z.ZodObject<{
+        severity: z.ZodEnum<{
+            error: "error";
+            info: "info";
+            warning: "warning";
+        }>;
+        code: z.ZodString;
+        message: z.ZodString;
+        adapter: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        remediation: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"preparing">;
+    quarantineIdentity: z.ZodOptional<z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"quarantined">;
+    quarantineIdentity: z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"restoring">;
+    quarantineIdentity: z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"restored">;
+    quarantineIdentity: z.ZodOptional<z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"purging">;
+    quarantineIdentity: z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"purged">;
+    quarantineIdentity: z.ZodOptional<z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"partial">;
+    quarantineIdentity: z.ZodObject<{
+        path: z.ZodString;
+        ownerRoot: z.ZodString;
+        relativePath: z.ZodString;
+        provider: z.ZodEnum<{
+            claude: "claude";
+            copilot: "copilot";
+            cursor: "cursor";
+            grok: "grok";
+            opencode: "opencode";
+            zed: "zed";
+        }>;
+        device: z.ZodNumber;
+        inode: z.ZodNumber;
+        linkCount: z.ZodLiteral<1>;
+        mode: z.ZodNumber;
+        mtimeMs: z.ZodNumber;
+        measuredBytes: z.ZodNumber;
+        contentSha256: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>], "status">>;
+export type ProviderFileQuarantineStatus = z.infer<typeof providerFileQuarantineStatusSchema>;
+export type ProviderFileQuarantineEntry = z.infer<typeof providerFileQuarantineEntrySchema>;
+//# sourceMappingURL=provider-file-quarantine.d.ts.map

package/dist/contracts/provider-file-quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-file-quarantine.d.ts","sourceRoot":"","sources":["../../src/contracts/provider-file-quarantine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,kCAAkC;;;;;;;;EAQ7C,CAAC;AAkDH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAE7C,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/dist/contracts/provider-file-quarantine.js

@@ -0,0 +1,61 @@
+import { z } from "zod";
+import { providerFileIdentitySchema } from "./action.js";
+import { diagnosticSchema } from "./diagnostic.js";
+import { quarantineEntryIdSchema } from "./quarantine.js";
+export const providerFileQuarantineStatusSchema = z.enum([
+    "preparing",
+    "quarantined",
+    "restoring",
+    "restored",
+    "purging",
+    "purged",
+    "partial",
+]);
+const providerFileQuarantineEntryBaseSchema = z.object({
+    schemaVersion: z.literal(1),
+    entryId: quarantineEntryIdSchema,
+    runId: quarantineEntryIdSchema,
+    actionId: z.string().min(1),
+    resourceId: z.string().min(1),
+    policyId: z.string().regex(/^[a-z0-9][a-z0-9.-]*$/u),
+    originalPath: z.string().min(1),
+    quarantinePath: z.string().min(1),
+    createdAt: z.string().datetime(),
+    expiresAt: z.string().datetime(),
+    target: providerFileIdentitySchema,
+    restoredAt: z.string().datetime().optional(),
+    purgedAt: z.string().datetime().optional(),
+    diagnostic: diagnosticSchema.optional(),
+});
+const providerFileQuarantineStateSchema = z.discriminatedUnion("status", [
+    z.object({
+        status: z.literal("preparing"),
+        quarantineIdentity: providerFileIdentitySchema.optional(),
+    }),
+    z.object({
+        status: z.literal("quarantined"),
+        quarantineIdentity: providerFileIdentitySchema,
+    }),
+    z.object({
+        status: z.literal("restoring"),
+        quarantineIdentity: providerFileIdentitySchema,
+    }),
+    z.object({
+        status: z.literal("restored"),
+        quarantineIdentity: providerFileIdentitySchema.optional(),
+    }),
+    z.object({
+        status: z.literal("purging"),
+        quarantineIdentity: providerFileIdentitySchema,
+    }),
+    z.object({
+        status: z.literal("purged"),
+        quarantineIdentity: providerFileIdentitySchema.optional(),
+    }),
+    z.object({
+        status: z.literal("partial"),
+        quarantineIdentity: providerFileIdentitySchema,
+    }),
+]);
+export const providerFileQuarantineEntrySchema = providerFileQuarantineEntryBaseSchema.and(providerFileQuarantineStateSchema);
+//# sourceMappingURL=provider-file-quarantine.js.map

package/dist/contracts/provider-file-quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-file-quarantine.js","sourceRoot":"","sources":["../../src/contracts/provider-file-quarantine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CAAC;IACvD,WAAW;IACX,aAAa;IACb,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,uBAAuB;IAChC,KAAK,EAAE,uBAAuB;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,0BAA0B;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,iCAAiC,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACvE,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9B,kBAAkB,EAAE,0BAA0B,CAAC,QAAQ,EAAE;KAC1D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAChC,kBAAkB,EAAE,0BAA0B;KAC/C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9B,kBAAkB,EAAE,0BAA0B;KAC/C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7B,kBAAkB,EAAE,0BAA0B,CAAC,QAAQ,EAAE;KAC1D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,kBAAkB,EAAE,0BAA0B;KAC/C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,kBAAkB,EAAE,0BAA0B,CAAC,QAAQ,EAAE;KAC1D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,kBAAkB,EAAE,0BAA0B;KAC/C,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,qCAAqC,CAAC,GAAG,CACxF,iCAAiC,CAClC,CAAC"}