audit-tools 0.28.0

package/dist/shared/tooling/analyzerDeps.js

@@ -0,0 +1,130 @@
+import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { runTracked } from "./exec.js";
+/**
+ * Shared analyzer cache root. Defaults to ~/.audit-tools/analyzer-cache; the
+ * `AUDIT_TOOLS_ANALYZER_CACHE` environment variable overrides it so a run can be
+ * pinned to an isolated cache (e.g. tests that need dependency resolution to be
+ * deterministic regardless of what the host machine has previously cached).
+ */
+export function analyzerCacheRoot() {
+    const override = process.env.AUDIT_TOOLS_ANALYZER_CACHE;
+    if (override && override.trim().length > 0)
+        return override;
+    return join(homedir(), ".audit-tools", "analyzer-cache");
+}
+/** Parse "name", "name@version", or "@scope/name@version". */
+export function parseAnalyzerSpec(spec) {
+    const at = spec.lastIndexOf("@");
+    // at === 0 means a bare scoped name like "@scope/name" (no version).
+    if (at > 0) {
+        return { name: spec.slice(0, at), version: spec.slice(at + 1) };
+    }
+    return { name: spec };
+}
+// Cache directory key. Scoped package separators are escaped so the key is a
+// single valid directory name (e.g. "@scope/pkg@1.0.0" -> "@scope+pkg@1.0.0").
+function cacheKey(name, version) {
+    return `${name.replace(/\//g, "+")}@${version}`;
+}
+function packageDirIn(installDir, name) {
+    return join(installDir, "node_modules", ...name.split("/"));
+}
+function isInstalledPackage(packageDir) {
+    return existsSync(join(packageDir, "package.json"));
+}
+function findInCache(name, version, cacheRoot) {
+    if (!existsSync(cacheRoot))
+        return undefined;
+    if (version) {
+        const installDir = join(cacheRoot, cacheKey(name, version));
+        const packageDir = packageDirIn(installDir, name);
+        return isInstalledPackage(packageDir) ? packageDir : undefined;
+    }
+    // No version pinned: pick the highest-sorting matching cache entry that
+    // actually contains an installed package. Deterministic via reverse sort.
+    const prefix = `${name.replace(/\//g, "+")}@`;
+    let entries;
+    try {
+        entries = readdirSync(cacheRoot);
+    }
+    catch {
+        return undefined;
+    }
+    const matches = entries
+        .filter((entry) => entry.startsWith(prefix))
+        .sort()
+        .reverse();
+    for (const entry of matches) {
+        const packageDir = packageDirIn(join(cacheRoot, entry), name);
+        if (isInstalledPackage(packageDir))
+            return packageDir;
+    }
+    return undefined;
+}
+/**
+ * Resolve an analyzer dependency: repo node_modules → version-keyed cache →
+ * absent. `pkg` may be a bare name or "name@version"; a version narrows the
+ * cache lookup, otherwise the newest cached version is chosen.
+ */
+export function resolveAnalyzerDep(pkg, repoRoot, options = {}) {
+    const { name, version } = parseAnalyzerSpec(pkg);
+    const log = options.log ?? ((...args) => { console.error(...args); });
+    const repoPackageDir = packageDirIn(repoRoot, name);
+    if (isInstalledPackage(repoPackageDir)) {
+        log("[analyzerDeps] resolved %s via repo: %s", pkg, repoPackageDir);
+        return { via: "repo", path: repoPackageDir };
+    }
+    const cacheRoot = options.cacheRoot ?? analyzerCacheRoot();
+    const cached = findInCache(name, version, cacheRoot);
+    if (cached) {
+        log("[analyzerDeps] resolved %s via cache: %s", pkg, cached);
+        return { via: "cache", path: cached };
+    }
+    log("[analyzerDeps] %s not found in repo or cache (absent)", pkg);
+    return { via: "absent" };
+}
+/**
+ * Install `pkg@version` into the version-keyed shared cache and return the
+ * installed package directory. Requires an explicit version so the cache stays
+ * reproducible. Never writes into any audited project.
+ */
+export function installToCache(pkgAtVersion, options = {}) {
+    const { name, version } = parseAnalyzerSpec(pkgAtVersion);
+    if (!version) {
+        return { ok: false, error: "installToCache requires an explicit version (name@version)" };
+    }
+    const cacheRoot = options.cacheRoot ?? analyzerCacheRoot();
+    const installDir = join(cacheRoot, cacheKey(name, version));
+    const run = options.run ?? ((argv, cwd) => runTracked(argv, { cwd }));
+    const log = options.log ?? ((...args) => { console.error(...args); });
+    try {
+        mkdirSync(installDir, { recursive: true });
+        const manifestPath = join(installDir, "package.json");
+        if (!existsSync(manifestPath)) {
+            writeFileSync(manifestPath, JSON.stringify({ name: "audit-tools-analyzer-cache", private: true }) + "\n", "utf8");
+        }
+        log("[analyzerDeps] installing %s into cache: %s", pkgAtVersion, installDir);
+        const result = run(["npm", "install", pkgAtVersion, "--no-audit", "--no-fund", "--save-exact"], installDir);
+        if (result.status !== 0) {
+            log("[analyzerDeps] npm install %s failed (exit %d): %s", pkgAtVersion, result.status, result.stderr.trim() || "(no stderr)");
+            return {
+                ok: false,
+                error: result.stderr.trim() || `npm install exited with ${result.status}`,
+            };
+        }
+        const packageDir = packageDirIn(installDir, name);
+        if (!isInstalledPackage(packageDir)) {
+            log("[analyzerDeps] npm install %s exited 0 but package directory is absent: %s", pkgAtVersion, packageDir);
+            return { ok: false, error: "package not present after install" };
+        }
+        log("[analyzerDeps] installed %s -> %s", pkgAtVersion, packageDir);
+        return { ok: true, path: packageDir };
+    }
+    catch (error) {
+        log("[analyzerDeps] installToCache threw for %s: %s", pkgAtVersion, error instanceof Error ? error.message : String(error));
+        return { ok: false, error: error instanceof Error ? error.message : String(error) };
+    }
+}
+//# sourceMappingURL=analyzerDeps.js.map

package/dist/shared/tooling/analyzerDeps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzerDeps.js","sourceRoot":"","sources":["../../../src/shared/tooling/analyzerDeps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAyB,MAAM,WAAW,CAAC;AAgC9D;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACxD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;AAC3D,CAAC;AAOD,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,qEAAqE;IACrE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,IAAY;IACpD,OAAO,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,OAA2B,EAC3B,SAAiB;IAEjB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IAC9C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO;SACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SAC3C,IAAI,EAAE;SACN,OAAO,EAAE,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,kBAAkB,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,QAAgB,EAChB,UAAqC,EAAE;IAEvC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjF,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,yCAAyC,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACpE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,0CAA0C,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IAED,GAAG,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;IAClE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAqBD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,UAAiC,EAAE;IAEnC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,aAAa,CACX,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAC5E,MAAM,CACP,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,6CAA6C,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,GAAG,CAChB,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC,EAC3E,UAAU,CACX,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,GAAG,CACD,oDAAoD,EACpD,YAAY,EACZ,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,aAAa,CACtC,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,2BAA2B,MAAM,CAAC,MAAM,EAAE;aAC1E,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,GAAG,CACD,4EAA4E,EAC5E,YAAY,EACZ,UAAU,CACX,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACnE,CAAC;QACD,GAAG,CAAC,mCAAmC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CACD,gDAAgD,EAChD,YAAY,EACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/shared/tooling/exec.d.ts

@@ -0,0 +1,99 @@
+import { type StdioOptions } from "node:child_process";
+export interface RunTrackedOptions {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    encoding?: BufferEncoding;
+    timeout?: number;
+    input?: string;
+    maxBuffer?: number;
+    windowsHide?: boolean;
+    stdio?: StdioOptions;
+    /** Override the platform; for tests. Defaults to `process.platform`. */
+    platform?: NodeJS.Platform;
+}
+export interface RunTrackedResult {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+    /** The argv actually spawned, after platform wrapping. */
+    argv: string[];
+    /** The cwd passed to runTracked, if any. undefined means the command inherited the process CWD. */
+    cwd?: string;
+    /** Elapsed wall-clock time in milliseconds for the spawned command. */
+    duration_ms: number;
+    error?: Error;
+}
+/**
+ * Quote a single argv token for embedding into the `cmd.exe /d /s /c "..."`
+ * command line used by `wrapForWindowsBatch`.
+ *
+ * In this context cmd.exe's own argv parser processes the resulting quoted
+ * string, which treats doubled double-quotes as a literal `"` — so the
+ * correct strategy is to wrap the token in double-quotes and replace every
+ * internal `"` with `""`.
+ *
+ * **Do not use this for shell-interpreter command strings.**  For that context
+ * (where the entire command is a shell string interpreted by cmd.exe before any
+ * argv parser runs), use `quoteForShellInterpreterCmd` instead.
+ */
+export declare function quoteForCmd(arg: string): string;
+/**
+ * Quote a single argv token for embedding inside a shell command line that is
+ * rendered as one string (e.g. a subprocess-template entry): `cmd.exe`
+ * double-quote doubling on Windows, POSIX single-quote escaping elsewhere.
+ * Shared by the subprocess-template provider in both orchestrators.
+ */
+export declare function shellQuote(arg: string, platform?: NodeJS.Platform): string;
+export declare function toPromptPathToken(value: string): string;
+export declare function quotePromptCommandArg(value: string): string;
+export declare function renderPromptCommand(argv: readonly string[]): string;
+export declare function coerceJsonObjectArg<T extends Record<string, unknown>>(value: T | string | undefined, label: string): T;
+/**
+ * On Windows, package-manager shims (`npm`/`npx`/`pnpm`/`yarn`) are `.cmd`
+ * batch files that `spawn` cannot launch without a shell. Map them to their
+ * `.cmd` form so the batch-wrapping path below applies. Anything already
+ * carrying an executable extension is returned unchanged.
+ */
+export declare function platformCommand(command: string, platform?: NodeJS.Platform): string;
+/**
+ * Quote a single argv token for embedding in a full command-line *string*
+ * that `cmd.exe /c` will interpret as a shell command.
+ *
+ * **Context:** this is the *shell-interpreter* quoting context — the entire
+ * command is one string seen by `cmd.exe` before any argv parser runs.  In
+ * this context metacharacters (`^&|<>%"`) must be caret-escaped.  Safe
+ * single-token characters pass through unquoted.
+ *
+ * **Do not confuse with `quoteForCmd`**, which is the *argv-parser* context
+ * used by `wrapForWindowsBatch`.  The difference:
+ *
+ * - `quoteForCmd` (argv-parser): wraps in double-quotes and doubles internal
+ *   `"` → `""`.  Used in `cmd.exe /d /s /c "prog arg"` where cmd.exe's own
+ *   argv parser processes the quoted string.
+ *
+ * - `quoteForShellInterpreterCmd` (shell-interpreter): caret-escapes
+ *   metacharacters.  Used when building an inline shell command string passed
+ *   to `cmd.exe /c`, e.g. the opencode launcher's `cmd.exe /c "<command…>"`.
+ *
+ * Canonical owner of this charset — the opencode launcher
+ * (`resolveOpenCodeSpawnCommand`) imports it instead of carrying its own copy.
+ */
+export declare function quoteForShellInterpreterCmd(value: string): string;
+/**
+ * Resolve a logical argv into the concrete `[command, ...args]` that should be
+ * spawned on this platform, applying package-manager shim mapping and Windows
+ * batch wrapping. Exposed for callers that spawn asynchronously and only need
+ * the resolved argv.
+ */
+export declare function resolveExecArgv(argv: string[], options?: {
+    platform?: NodeJS.Platform;
+}): string[];
+/**
+ * Strip `CLAUDECODE` and any key matching `/^CLAUDE_CODE/` from an env object.
+ * Always operates on an explicit copy so the original is never mutated.
+ * When `base` is undefined, falls back to `process.env`.
+ */
+export declare function stripClaudeCodeEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Run a command synchronously. argv[0] is the command, the rest are args. */
+export declare function runTracked(argv: string[], options?: RunTrackedOptions): RunTrackedResult;
+//# sourceMappingURL=exec.d.ts.map

package/dist/shared/tooling/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/shared/tooling/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlE,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,mGAAmG;IACnG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AA0BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAGR;AAWD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEnE;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,KAAK,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,MAAM,GACZ,CAAC,CAeH;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAKR;AAkBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;CAAO,GAC3C,MAAM,EAAE,CAOV;AAOD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,GACvB,MAAM,CAAC,UAAU,CAQnB;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,iBAAsB,GAC9B,gBAAgB,CAoClB"}

package/dist/shared/tooling/exec.js

@@ -0,0 +1,217 @@
+import { spawnSync } from "node:child_process";
+const SHELL_SHIM_COMMANDS = new Set(["npm", "npx", "pnpm", "yarn"]);
+// --- cmd.exe quoting helpers ---
+//
+// There are two distinct contexts in which a token must be quoted for cmd.exe,
+// and the correct quoting strategy differs between them:
+//
+//   • `quoteForCmd`          — for `wrapForWindowsBatch`: each argv token is
+//     embedded into the single-string argument passed to `cmd.exe /d /s /c`.
+//     In this context cmd.exe's own *argv parser* processes the resulting
+//     quoted string, so doubling double-quotes (`"` → `""`) is correct.
+//     Use this when constructing the argv array for `wrapForWindowsBatch`.
+//
+//   • `quoteForShellInterpreterCmd` — for the opencode launcher
+//     (`resolveOpenCodeSpawnCommand`): tokens are embedded into a full
+//     command-line *string* that `cmd.exe /c` interprets as a shell command.
+//     In this context the cmd.exe *command interpreter* sees metacharacters
+//     (`^&|<>%"`) before any argv parser, so caret-escaping them is the correct
+//     strategy.  Use this when building the inline string argument for any
+//     `cmd.exe /c "<full-command-string>"`.
+//
+// Do NOT mix them up: `quoteForShellInterpreterCmd` is not a substitute for
+// `quoteForCmd` in the batch-wrapping path, and vice versa.
+/**
+ * Quote a single argv token for embedding into the `cmd.exe /d /s /c "..."`
+ * command line used by `wrapForWindowsBatch`.
+ *
+ * In this context cmd.exe's own argv parser processes the resulting quoted
+ * string, which treats doubled double-quotes as a literal `"` — so the
+ * correct strategy is to wrap the token in double-quotes and replace every
+ * internal `"` with `""`.
+ *
+ * **Do not use this for shell-interpreter command strings.**  For that context
+ * (where the entire command is a shell string interpreted by cmd.exe before any
+ * argv parser runs), use `quoteForShellInterpreterCmd` instead.
+ */
+export function quoteForCmd(arg) {
+    if (arg.length === 0)
+        return '""';
+    if (!/[\s"]/u.test(arg))
+        return arg;
+    return `"${arg.replace(/"/g, '""')}"`;
+}
+/**
+ * Quote a single argv token for embedding inside a shell command line that is
+ * rendered as one string (e.g. a subprocess-template entry): `cmd.exe`
+ * double-quote doubling on Windows, POSIX single-quote escaping elsewhere.
+ * Shared by the subprocess-template provider in both orchestrators.
+ */
+export function shellQuote(arg, platform = process.platform) {
+    if (platform === "win32")
+        return quoteForCmd(arg);
+    return "'" + arg.replace(/'/g, "'\\''") + "'";
+}
+function isPromptPathToken(value) {
+    return (/^[A-Za-z]:\\/u.test(value) ||
+        /^\\\\[^\\]+\\[^\\]+/u.test(value) ||
+        /^\.{1,2}\\/u.test(value) ||
+        (value.includes("\\") && /(?:^|\\)[^\\]+\.[A-Za-z0-9][A-Za-z0-9_-]*$/u.test(value)));
+}
+export function toPromptPathToken(value) {
+    return isPromptPathToken(value) ? value.replace(/\\/g, "/") : value;
+}
+export function quotePromptCommandArg(value) {
+    return /[\s"]/u.test(value)
+        ? `"${value.replace(/"/g, '\\"')}"`
+        : value;
+}
+export function renderPromptCommand(argv) {
+    return argv.map((item) => quotePromptCommandArg(toPromptPathToken(item))).join(" ");
+}
+export function coerceJsonObjectArg(value, label) {
+    if (value === undefined)
+        return {};
+    let parsed = value;
+    if (typeof value === "string") {
+        try {
+            parsed = JSON.parse(value);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new TypeError(`${label} must be an object or JSON object string: ${message}`);
+        }
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new TypeError(`${label} must be an object or JSON object string.`);
+    }
+    return parsed;
+}
+/**
+ * On Windows, package-manager shims (`npm`/`npx`/`pnpm`/`yarn`) are `.cmd`
+ * batch files that `spawn` cannot launch without a shell. Map them to their
+ * `.cmd` form so the batch-wrapping path below applies. Anything already
+ * carrying an executable extension is returned unchanged.
+ */
+export function platformCommand(command, platform = process.platform) {
+    if (platform !== "win32")
+        return command;
+    if (/\.(?:cmd|bat|com|exe)$/iu.test(command))
+        return command;
+    if (SHELL_SHIM_COMMANDS.has(command))
+        return `${command}.cmd`;
+    return command;
+}
+function isWindowsBatch(command, platform) {
+    return platform === "win32" && /\.(cmd|bat)$/iu.test(command);
+}
+function wrapForWindowsBatch(command, args, platform) {
+    if (!isWindowsBatch(command, platform))
+        return { command, args };
+    return {
+        command: process.env.ComSpec ?? "cmd.exe",
+        args: ["/d", "/s", "/c", [command, ...args].map(quoteForCmd).join(" ")],
+    };
+}
+/**
+ * Quote a single argv token for embedding in a full command-line *string*
+ * that `cmd.exe /c` will interpret as a shell command.
+ *
+ * **Context:** this is the *shell-interpreter* quoting context — the entire
+ * command is one string seen by `cmd.exe` before any argv parser runs.  In
+ * this context metacharacters (`^&|<>%"`) must be caret-escaped.  Safe
+ * single-token characters pass through unquoted.
+ *
+ * **Do not confuse with `quoteForCmd`**, which is the *argv-parser* context
+ * used by `wrapForWindowsBatch`.  The difference:
+ *
+ * - `quoteForCmd` (argv-parser): wraps in double-quotes and doubles internal
+ *   `"` → `""`.  Used in `cmd.exe /d /s /c "prog arg"` where cmd.exe's own
+ *   argv parser processes the quoted string.
+ *
+ * - `quoteForShellInterpreterCmd` (shell-interpreter): caret-escapes
+ *   metacharacters.  Used when building an inline shell command string passed
+ *   to `cmd.exe /c`, e.g. the opencode launcher's `cmd.exe /c "<command…>"`.
+ *
+ * Canonical owner of this charset — the opencode launcher
+ * (`resolveOpenCodeSpawnCommand`) imports it instead of carrying its own copy.
+ */
+export function quoteForShellInterpreterCmd(value) {
+    if (/^[A-Za-z0-9_./:=@+-]+$/u.test(value))
+        return value;
+    return `"${value.replace(/(["^&|<>%])/g, "^$1")}"`;
+}
+/**
+ * Resolve a logical argv into the concrete `[command, ...args]` that should be
+ * spawned on this platform, applying package-manager shim mapping and Windows
+ * batch wrapping. Exposed for callers that spawn asynchronously and only need
+ * the resolved argv.
+ */
+export function resolveExecArgv(argv, options = {}) {
+    if (argv.length === 0)
+        return [];
+    const platform = options.platform ?? process.platform;
+    const command = platformCommand(argv[0], platform);
+    const args = argv.slice(1);
+    const wrapped = wrapForWindowsBatch(command, args, platform);
+    return [wrapped.command, ...wrapped.args];
+}
+function toText(value) {
+    if (value == null)
+        return "";
+    return typeof value === "string" ? value : value.toString();
+}
+/**
+ * Strip `CLAUDECODE` and any key matching `/^CLAUDE_CODE/` from an env object.
+ * Always operates on an explicit copy so the original is never mutated.
+ * When `base` is undefined, falls back to `process.env`.
+ */
+export function stripClaudeCodeEnv(base) {
+    const src = base ?? process.env;
+    const out = {};
+    for (const [k, v] of Object.entries(src)) {
+        if (k === "CLAUDECODE" || /^CLAUDE_CODE/u.test(k))
+            continue;
+        out[k] = v;
+    }
+    return out;
+}
+/** Run a command synchronously. argv[0] is the command, the rest are args. */
+export function runTracked(argv, options = {}) {
+    if (argv.length === 0) {
+        return {
+            status: null,
+            stdout: "",
+            stderr: "",
+            argv: [],
+            cwd: options.cwd,
+            duration_ms: 0,
+            error: new Error("runTracked requires a non-empty argv"),
+        };
+    }
+    const resolved = resolveExecArgv(argv, {
+        platform: options.platform,
+    });
+    const start = Date.now();
+    const result = spawnSync(resolved[0], resolved.slice(1), {
+        cwd: options.cwd,
+        env: stripClaudeCodeEnv(options.env),
+        encoding: options.encoding ?? "utf8",
+        timeout: options.timeout,
+        input: options.input,
+        maxBuffer: options.maxBuffer,
+        windowsHide: options.windowsHide ?? true,
+        stdio: options.stdio,
+        shell: false,
+    });
+    return {
+        status: result.status,
+        stdout: toText(result.stdout),
+        stderr: toText(result.stderr),
+        argv: resolved,
+        cwd: options.cwd,
+        duration_ms: Date.now() - start,
+        error: result.error,
+    };
+}
+//# sourceMappingURL=exec.js.map

package/dist/shared/tooling/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../../src/shared/tooling/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAmClE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpE,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,yDAAyD;AACzD,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,gEAAgE;AAChE,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,2EAA2E;AAC3E,4CAA4C;AAC5C,EAAE;AACF,4EAA4E;AAC5E,4DAA4D;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACpC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CACL,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG;QACnC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAA6B,EAC7B,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAO,CAAC;IACxC,IAAI,MAAM,GAAY,KAAK,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6CAA6C,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACzC,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7D,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,OAAO,MAAM,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,QAAyB;IAChE,OAAO,QAAQ,KAAK,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,IAAc,EACd,QAAyB;IAEzB,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS;QACzC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,UAA0C,EAAE;IAE5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,KAAyC;IACvD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAChC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,YAAY,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAC5D,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CACxB,IAAc,EACd,UAA6B,EAAE;IAE/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,WAAW,EAAE,CAAC;YACd,KAAK,EAAE,IAAI,KAAK,CAAC,sCAAsC,CAAC;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACvD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC"}

package/dist/shared/tooling/repoConventions.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Lightweight, deterministic detection of a repository's house style so the
+ * remediator's worker prompts can say "match the surrounding code" with
+ * specifics (formatter, linter, test framework, module style, and a sampled
+ * snippet). Best-effort and side-effect-free: every probe is guarded and an
+ * undetected field is simply omitted. Phase 7A.
+ */
+export interface RepoConventions {
+    formatter?: string;
+    linter?: string;
+    test_framework?: string;
+    module_style?: "esm" | "commonjs";
+    indentation?: string;
+    quote_style?: "single" | "double";
+    /** A short excerpt from a representative source file. */
+    sample_snippet?: string;
+}
+export declare function detectRepoConventions(root: string): RepoConventions;
+/** Render a prompt block from detected conventions, or "" if nothing detected. */
+export declare function formatRepoConventions(conventions: RepoConventions, options?: {
+    includeSnippet?: boolean;
+}): string;
+//# sourceMappingURL=repoConventions.d.ts.map

package/dist/shared/tooling/repoConventions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoConventions.d.ts","sourceRoot":"","sources":["../../../src/shared/tooling/repoConventions.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AAEH,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAClC,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA4JD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAqBnE;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GACrC,MAAM,CAuBR"}