clinkx 0.1.0

package/dist/registry.js

@@ -0,0 +1,163 @@
+import { readFileSync, readdirSync, statSync, existsSync, } from "node:fs";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { CliAdapterConfigSchema } from "./config.js";
+import { InvalidParamsError } from "./errors.js";
+import { logger } from "./logger.js";
+function discoverConfigPaths() {
+    const envPath = process.env["CLINKX_CONFIG_PATH"];
+    if (envPath != null && envPath !== "") {
+        return resolveConfigPath(envPath);
+    }
+    const paths = [];
+    // XDG-aligned: ~/.config/clinkx/adapters/*.json
+    const xdgHome = process.env["XDG_CONFIG_HOME"] ?? join(homedir(), ".config");
+    const xdgDir = join(xdgHome, "clinkx", "adapters");
+    paths.push(...listJsonFiles(xdgDir));
+    // Built-in: conf/adapters/*.json relative to package install location
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    const builtinDir = join(__dirname, "..", "conf", "adapters");
+    paths.push(...listJsonFiles(builtinDir));
+    return paths;
+}
+function resolveConfigPath(configPath) {
+    try {
+        const stats = statSync(configPath);
+        if (stats.isDirectory()) {
+            return listJsonFiles(configPath);
+        }
+        return [configPath];
+    }
+    catch {
+        logger.warn({ path: configPath }, "CLINKX_CONFIG_PATH not found");
+        return [];
+    }
+}
+function listJsonFiles(dirPath) {
+    if (!existsSync(dirPath))
+        return [];
+    try {
+        return readdirSync(dirPath)
+            .filter((f) => f.endsWith(".json"))
+            .sort()
+            .map((f) => join(dirPath, f));
+    }
+    catch {
+        return [];
+    }
+}
+export class AdapterRegistry {
+    adapters = new Map();
+    configSources = new Map();
+    builtinAdaptersDir;
+    constructor() {
+        const __dirname = dirname(fileURLToPath(import.meta.url));
+        this.builtinAdaptersDir = join(__dirname, "..", "conf", "adapters");
+    }
+    /**
+     * Load adapters from config files discovered via the standard precedence:
+     * CLINKX_CONFIG_PATH → XDG config → conf/adapters/*.json
+     */
+    static load() {
+        const registry = new AdapterRegistry();
+        const paths = discoverConfigPaths();
+        for (const filePath of paths) {
+            registry.loadConfigFile(filePath);
+        }
+        logger.info({ adapters: registry.getAdapterNames() }, "adapter registry loaded");
+        return registry;
+    }
+    /** Create a registry from explicit config objects (for testing). */
+    static fromConfigs(configs) {
+        const registry = new AdapterRegistry();
+        for (const config of configs) {
+            if (registry.adapters.has(config.name)) {
+                throw new Error(`Duplicate adapter name "${config.name}"`);
+            }
+            registry.adapters.set(config.name, config);
+        }
+        return registry;
+    }
+    loadConfigFile(filePath) {
+        const raw = readFileSync(filePath, "utf-8");
+        const json = JSON.parse(raw);
+        const result = CliAdapterConfigSchema.safeParse(json);
+        if (!result.success) {
+            throw new Error(`Invalid adapter config in ${filePath}: ${result.error.message}`);
+        }
+        const config = result.data;
+        // Resolve prompt_file references into inline_prompt (inline_prompt wins if both set).
+        // Try relative to the config file first; fall back to the built-in adapters dir
+        // so user-override configs can reference shipped prompt files without copying them.
+        const configDir = dirname(filePath);
+        for (const [roleName, role] of Object.entries(config.roles)) {
+            if (role.inline_prompt == null && role.prompt_file != null) {
+                const resolved = join(configDir, role.prompt_file);
+                let promptPath;
+                if (existsSync(resolved)) {
+                    promptPath = resolved;
+                }
+                else {
+                    const builtinFallback = join(this.builtinAdaptersDir, role.prompt_file);
+                    if (existsSync(builtinFallback)) {
+                        promptPath = builtinFallback;
+                        logger.debug({ role: roleName, resolved, fallback: builtinFallback }, "prompt_file not found next to config, falling back to built-in");
+                    }
+                }
+                if (promptPath == null) {
+                    throw new Error(`Prompt file not found for role "${roleName}" in ${filePath}: ${resolved}`);
+                }
+                role.inline_prompt = readFileSync(promptPath, "utf-8").trimEnd();
+            }
+        }
+        const existing = this.configSources.get(config.name);
+        if (existing != null) {
+            // First-wins: higher-precedence source (user XDG) already loaded — skip built-in.
+            logger.info({ name: config.name, kept: existing, skipped: filePath }, "adapter \"%s\" already loaded from %s — skipping %s", config.name, existing, filePath);
+            return;
+        }
+        this.adapters.set(config.name, config);
+        this.configSources.set(config.name, filePath);
+    }
+    /**
+     * Resolve a cli_name to its adapter config.
+     *
+     * Default CLI policy: 1 adapter = implicit; >1 = require explicit cli_name.
+     * Throws InvalidParamsError (→ -32602) on unknown name.
+     */
+    resolveAdapter(cliName) {
+        if (cliName == null) {
+            if (this.adapters.size === 0) {
+                throw new InvalidParamsError("No CLI adapters configured");
+            }
+            if (this.adapters.size === 1) {
+                return [...this.adapters.values()][0];
+            }
+            throw new InvalidParamsError(`cli_name is required when multiple adapters are configured. Available: ${this.getAdapterNames().join(", ")}`);
+        }
+        const adapter = this.adapters.get(cliName);
+        if (adapter == null) {
+            throw new InvalidParamsError(`Unknown cli_name "${cliName}". Available: ${this.getAdapterNames().join(", ")}`);
+        }
+        return adapter;
+    }
+    /** Sorted list of configured adapter names (for schema enum / error messages). */
+    getAdapterNames() {
+        return [...this.adapters.keys()].sort();
+    }
+    /** Deduplicated, sorted list of all role names across every adapter. */
+    getAllRoleNames() {
+        const roles = new Set();
+        for (const adapter of this.adapters.values()) {
+            for (const name of Object.keys(adapter.roles)) {
+                roles.add(name);
+            }
+        }
+        return [...roles].sort();
+    }
+    get size() {
+        return this.adapters.size;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAyB,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClD,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,gDAAgD;IAChD,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAErC,sEAAsE;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IAEzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,OAAO,CAAC;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAClC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,eAAe;IACT,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC/C,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,kBAAkB,CAAS;IAE5C;QACE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI;QACT,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,QAAQ,CAAC,eAAe,EAAE,EAAE,EACxC,yBAAyB,CAC1B,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oEAAoE;IACpE,MAAM,CAAC,WAAW,CAAC,OAA2B;QAC5C,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7D,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAE3B,sFAAsF;QACtF,gFAAgF;QAChF,oFAAoF;QACpF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnD,IAAI,UAA8B,CAAC;gBACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,UAAU,GAAG,QAAQ,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBACxE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;wBAChC,UAAU,GAAG,eAAe,CAAC;wBAC7B,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,EACvD,gEAAgE,CACjE,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,QAAQ,QAAQ,KAAK,QAAQ,EAAE,CAC3E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,kFAAkF;YAClF,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EACxD,qDAAqD,EACrD,MAAM,CAAC,IAAI,EACX,QAAQ,EACR,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,OAA2B;QACxC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;YACzC,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,0EAA0E,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9G,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,OAAO,iBAAiB,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kFAAkF;IAClF,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,wEAAwE;IACxE,eAAe;QACb,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}

package/dist/result-contract.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Safely read a result contract file from a run working directory.
+ *
+ * Safety rules:
+ *   1. Only allowlisted filenames (RESULT.md, RESULT.json)
+ *   2. lstat must show a regular file (not a symlink)
+ *   3. realpath must resolve within the run directory
+ *
+ * Returns file contents as a string, or null if:
+ *   - The file doesn't exist
+ *   - The file fails safety checks
+ */
+export declare function readResultFile(runDir: string, filename: string): string | null;

package/dist/result-contract.js

@@ -0,0 +1,80 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { logger } from "./logger.js";
+/** Filenames we're willing to read from a run directory. */
+const ALLOWED_RESULT_FILES = new Set(["RESULT.md", "RESULT.json"]);
+/**
+ * Safely read a result contract file from a run working directory.
+ *
+ * Safety rules:
+ *   1. Only allowlisted filenames (RESULT.md, RESULT.json)
+ *   2. lstat must show a regular file (not a symlink)
+ *   3. realpath must resolve within the run directory
+ *
+ * Returns file contents as a string, or null if:
+ *   - The file doesn't exist
+ *   - The file fails safety checks
+ */
+export function readResultFile(runDir, filename) {
+    if (!ALLOWED_RESULT_FILES.has(filename)) {
+        logger.warn({ filename }, "result contract: filename not in allowlist");
+        return null;
+    }
+    const filePath = path.join(runDir, filename);
+    let resolvedRunDir;
+    try {
+        resolvedRunDir = fs.realpathSync(path.resolve(runDir));
+    }
+    catch {
+        resolvedRunDir = path.resolve(runDir);
+    }
+    // Check existence via lstat (does not follow symlinks)
+    let stat;
+    try {
+        stat = fs.lstatSync(filePath);
+    }
+    catch {
+        // File doesn't exist — normal case
+        return null;
+    }
+    // Reject symlinks
+    if (stat.isSymbolicLink()) {
+        logger.warn({ filePath }, "result contract: rejecting symlink");
+        return null;
+    }
+    // Must be a regular file
+    if (!stat.isFile()) {
+        logger.warn({ filePath }, "result contract: not a regular file");
+        return null;
+    }
+    // Enforce size limit to prevent memory pressure from oversized result files
+    const MAX_RESULT_SIZE = 1_048_576; // 1 MB
+    if (stat.size > MAX_RESULT_SIZE) {
+        logger.warn({ filePath, size: stat.size, max: MAX_RESULT_SIZE }, "result contract: file exceeds size limit");
+        return null;
+    }
+    // Realpath must resolve within run dir
+    let realFilePath;
+    try {
+        realFilePath = fs.realpathSync(filePath);
+    }
+    catch {
+        logger.warn({ filePath }, "result contract: failed to resolve realpath");
+        return null;
+    }
+    const normalizedRunDir = resolvedRunDir.endsWith(path.sep)
+        ? resolvedRunDir
+        : resolvedRunDir + path.sep;
+    if (!realFilePath.startsWith(normalizedRunDir) && realFilePath !== resolvedRunDir) {
+        logger.warn({ realFilePath, runDir: resolvedRunDir }, "result contract: realpath escapes run directory");
+        return null;
+    }
+    try {
+        return fs.readFileSync(filePath, "utf-8");
+    }
+    catch (err) {
+        logger.warn({ filePath, err }, "result contract: failed to read file");
+        return null;
+    }
+}
+//# sourceMappingURL=result-contract.js.map

package/dist/result-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result-contract.js","sourceRoot":"","sources":["../src/result-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,QAAgB;IAEhB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,4CAA4C,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,uDAAuD;IACvD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB;IAClB,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,MAAM,eAAe,GAAG,SAAS,CAAC,CAAC,OAAO;IAC1C,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,0CAA0C,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,6CAA6C,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACxD,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC;IAE9B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;QAClF,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,EACxC,iDAAiD,CAClD,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,sCAAsC,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/run-dir.d.ts

@@ -0,0 +1,12 @@
+export interface RunDir {
+    path: string;
+    runId: string;
+    cleanup(): void;
+}
+/**
+ * Create a per-run temp directory under ${TMPDIR}/clinkx/runs/<run_id>.
+ *
+ * This directory is NOT used as subprocess cwd — it's a separate workspace
+ * passed by absolute path in the prompt and/or env var.
+ */
+export declare function createRunDir(): RunDir;

package/dist/run-dir.js

@@ -0,0 +1,32 @@
+import { mkdtempSync, mkdirSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { randomUUID } from "node:crypto";
+import { logger } from "./logger.js";
+/**
+ * Create a per-run temp directory under ${TMPDIR}/clinkx/runs/<run_id>.
+ *
+ * This directory is NOT used as subprocess cwd — it's a separate workspace
+ * passed by absolute path in the prompt and/or env var.
+ */
+export function createRunDir() {
+    const runId = randomUUID();
+    const base = join(tmpdir(), "clinkx", "runs");
+    mkdirSync(base, { recursive: true });
+    const path = mkdtempSync(join(base, `${runId}-`));
+    logger.debug({ runId, path }, "created run directory");
+    return {
+        path,
+        runId,
+        cleanup() {
+            try {
+                rmSync(path, { recursive: true, force: true });
+                logger.debug({ runId }, "cleaned up run directory");
+            }
+            catch (err) {
+                logger.warn({ runId, err }, "failed to clean up run directory");
+            }
+        },
+    };
+}
+//# sourceMappingURL=run-dir.js.map

package/dist/run-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-dir.js","sourceRoot":"","sources":["../src/run-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;IAElD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAEvD,OAAO;QACL,IAAI;QACJ,KAAK;QACL,OAAO;YACL,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,kCAAkC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,39 @@
+import { type ChildProcess } from "node:child_process";
+import type { CliAdapterConfig } from "./config.js";
+/** Active subprocess registry for graceful shutdown. */
+export declare const activeProcesses: Set<ChildProcess>;
+/** Kill all tracked subprocesses (SIGTERM). */
+export declare function killAllActive(): void;
+export interface RunOptions {
+    adapter: CliAdapterConfig;
+    prompt: string;
+    runDirPath: string;
+    timeoutSeconds?: number | undefined;
+    unsafe?: boolean | undefined;
+    signal?: AbortSignal | undefined;
+}
+export interface RunResult {
+    exitCode: number | null;
+    signal: string | null;
+    stdoutHead: string;
+    stdoutTail: string;
+    stderrHead: string;
+    stderrTail: string;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+    stdoutBytes: number;
+    stderrBytes: number;
+    timedOut: boolean;
+    killed: boolean;
+}
+/**
+ * Spawn and manage a subprocess for a CLI adapter.
+ *
+ * - shell:false for safety
+ * - Prompt delivered via configured prompt_mode
+ * - Head+tail output capture per stream
+ * - SIGTERM → grace → SIGKILL timeout escalation
+ * - Process-group kill on Unix
+ * - AbortSignal for MCP cancellation
+ */
+export declare function runSubprocess(options: RunOptions): Promise<RunResult>;

package/dist/runner.js

@@ -0,0 +1,220 @@
+import { spawn } from "node:child_process";
+import { logger } from "./logger.js";
+import { ExecutionError } from "./errors.js";
+import { buildEnv, redactSecrets } from "./env.js";
+import { preparePromptDelivery } from "./prompt-mode.js";
+import { assertNoTtyRequired, resolveArgs } from "./safety.js";
+/** Active subprocess registry for graceful shutdown. */
+export const activeProcesses = new Set();
+/** Kill all tracked subprocesses (SIGTERM). */
+export function killAllActive() {
+    for (const child of activeProcesses) {
+        killProcessGroup(child, "SIGTERM");
+    }
+}
+const DEFAULT_MAX_PROMPT_BYTES = 1_048_576; // 1 MB
+const DEFAULT_TIMEOUT_SECONDS = 600;
+const DEFAULT_MAX_OUTPUT_BYTES = 10_485_760; // 10 MB
+const GRACE_PERIOD_MS = 5_000;
+const HEAD_TAIL_BYTES = 50_000; // 50 KB per head/tail segment
+function safeParseInt(val, fallback) {
+    if (val == null || val === "")
+        return fallback;
+    const n = Number(val);
+    return Number.isFinite(n) && n > 0 ? n : fallback;
+}
+function createStreamCapture(maxBytes) {
+    const headSize = Math.min(HEAD_TAIL_BYTES, Math.floor(maxBytes / 2));
+    const tailSize = Math.min(HEAD_TAIL_BYTES, Math.floor(maxBytes / 2));
+    const capture = {
+        head: Buffer.alloc(0),
+        tail: Buffer.alloc(0),
+        totalBytes: 0,
+        truncated: false,
+    };
+    return {
+        capture,
+        onData(chunk) {
+            capture.totalBytes += chunk.length;
+            let tailPortion = null;
+            // Fill head buffer first
+            if (capture.head.length < headSize) {
+                const remaining = headSize - capture.head.length;
+                const toHead = chunk.subarray(0, remaining);
+                capture.head = Buffer.concat([capture.head, toHead]);
+                // Only the overflow portion goes to tail
+                if (chunk.length > remaining) {
+                    tailPortion = chunk.subarray(remaining);
+                }
+            }
+            else {
+                tailPortion = chunk;
+            }
+            // Update tail (ring-buffer style)
+            if (tailPortion != null) {
+                const combined = Buffer.concat([capture.tail, tailPortion]);
+                if (combined.length > tailSize) {
+                    capture.tail = combined.subarray(combined.length - tailSize);
+                }
+                else {
+                    capture.tail = combined;
+                }
+            }
+            // Only mark truncated when total exceeds head + tail capacity
+            if (capture.totalBytes > headSize + tailSize) {
+                capture.truncated = true;
+            }
+        },
+    };
+}
+function killProcessGroup(child, sig) {
+    const pid = child.pid;
+    if (pid == null)
+        return;
+    try {
+        // Kill entire process group on Unix (detached = new group)
+        process.kill(-pid, sig);
+    }
+    catch {
+        try {
+            child.kill(sig);
+        }
+        catch {
+            // Process already exited
+        }
+    }
+}
+/**
+ * Spawn and manage a subprocess for a CLI adapter.
+ *
+ * - shell:false for safety
+ * - Prompt delivered via configured prompt_mode
+ * - Head+tail output capture per stream
+ * - SIGTERM → grace → SIGKILL timeout escalation
+ * - Process-group kill on Unix
+ * - AbortSignal for MCP cancellation
+ */
+export function runSubprocess(options) {
+    const { adapter, prompt, runDirPath, signal } = options;
+    const timeoutSeconds = options.timeoutSeconds ??
+        adapter.timeout_seconds ??
+        safeParseInt(process.env["CLINKX_TIMEOUT_SECONDS"], DEFAULT_TIMEOUT_SECONDS);
+    const maxPromptBytes = safeParseInt(process.env["CLINKX_MAX_PROMPT_BYTES"], DEFAULT_MAX_PROMPT_BYTES);
+    const maxOutputBytes = safeParseInt(process.env["CLINKX_MAX_OUTPUT_BYTES"], DEFAULT_MAX_OUTPUT_BYTES);
+    // Bound input size
+    const promptBuf = Buffer.from(prompt, "utf-8");
+    if (promptBuf.length > maxPromptBytes) {
+        return Promise.reject(new ExecutionError(`Prompt exceeds maximum size (${promptBuf.length} > ${maxPromptBytes} bytes)`));
+    }
+    // Requires-TTY check
+    try {
+        assertNoTtyRequired(adapter.name, adapter.requires_tty);
+    }
+    catch (err) {
+        return Promise.reject(err);
+    }
+    // Build args
+    const args = resolveArgs(adapter.args, adapter.unsafe_args, options.unsafe === true);
+    // Prepare prompt delivery
+    const delivery = preparePromptDelivery(adapter.prompt_mode, prompt, runDirPath);
+    args.push(...delivery.extraArgs);
+    // Build sanitized env
+    const env = buildEnv(adapter, { CLINKX_RUN_DIR: runDirPath });
+    logger.debug({
+        command: adapter.command,
+        args,
+        env: redactSecrets(env),
+        timeoutSeconds,
+        promptMode: adapter.prompt_mode,
+    }, "spawning subprocess");
+    return new Promise((resolve, reject) => {
+        let timedOut = false;
+        let killed = false;
+        let timeoutHandle;
+        let graceHandle;
+        let child;
+        try {
+            child = spawn(adapter.command, args, {
+                shell: false,
+                cwd: process.cwd(),
+                env,
+                stdio: [delivery.useStdin ? "pipe" : "ignore", "pipe", "pipe"],
+                detached: true, // New process group for clean kill
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            reject(new ExecutionError(`Failed to spawn "${adapter.command}": ${msg}`));
+            return;
+        }
+        activeProcesses.add(child);
+        const stdoutCapture = createStreamCapture(maxOutputBytes);
+        const stderrCapture = createStreamCapture(maxOutputBytes);
+        child.stdout?.on("data", (chunk) => stdoutCapture.onData(chunk));
+        child.stderr?.on("data", (chunk) => stderrCapture.onData(chunk));
+        // Write prompt to stdin
+        if (delivery.useStdin && child.stdin) {
+            child.stdin.on("error", (err) => {
+                // EPIPE is expected when child exits before we finish writing — non-fatal
+                logger.debug({ err: err.message }, "stdin write error (non-fatal)");
+            });
+            child.stdin.write(promptBuf);
+            child.stdin.end();
+        }
+        // Timeout: SIGTERM → grace → SIGKILL
+        timeoutHandle = setTimeout(() => {
+            timedOut = true;
+            logger.warn({ pid: child.pid, timeoutSeconds }, "subprocess timed out, sending SIGTERM");
+            killProcessGroup(child, "SIGTERM");
+            graceHandle = setTimeout(() => {
+                logger.warn({ pid: child.pid }, "grace period expired, sending SIGKILL");
+                killProcessGroup(child, "SIGKILL");
+            }, GRACE_PERIOD_MS);
+        }, timeoutSeconds * 1_000);
+        // Cancellation via AbortSignal
+        const onAbort = () => {
+            killed = true;
+            logger.info({ pid: child.pid }, "cancellation received, killing subprocess");
+            killProcessGroup(child, "SIGTERM");
+            graceHandle = setTimeout(() => {
+                killProcessGroup(child, "SIGKILL");
+            }, GRACE_PERIOD_MS);
+        };
+        if (signal) {
+            if (signal.aborted) {
+                onAbort();
+            }
+            else {
+                signal.addEventListener("abort", onAbort, { once: true });
+            }
+        }
+        child.on("error", (err) => {
+            clearTimeout(timeoutHandle);
+            clearTimeout(graceHandle);
+            signal?.removeEventListener("abort", onAbort);
+            activeProcesses.delete(child);
+            reject(new ExecutionError(`Failed to spawn "${adapter.command}": ${err.message}`));
+        });
+        child.on("close", (code, exitSignal) => {
+            clearTimeout(timeoutHandle);
+            clearTimeout(graceHandle);
+            signal?.removeEventListener("abort", onAbort);
+            activeProcesses.delete(child);
+            resolve({
+                exitCode: code,
+                signal: exitSignal ?? null,
+                stdoutHead: stdoutCapture.capture.head.toString("utf-8"),
+                stdoutTail: stdoutCapture.capture.tail.toString("utf-8"),
+                stderrHead: stderrCapture.capture.head.toString("utf-8"),
+                stderrTail: stderrCapture.capture.tail.toString("utf-8"),
+                stdoutTruncated: stdoutCapture.capture.truncated,
+                stderrTruncated: stderrCapture.capture.truncated,
+                stdoutBytes: stdoutCapture.capture.totalBytes,
+                stderrBytes: stderrCapture.capture.totalBytes,
+                timedOut,
+                killed,
+            });
+        });
+    });
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAmB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/D,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAgB,CAAC;AAEvD,+CAA+C;AAC/C,MAAM,UAAU,aAAa;IAC3B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,wBAAwB,GAAG,SAAS,CAAC,CAAC,OAAO;AACnD,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,wBAAwB,GAAG,UAAU,CAAC,CAAC,QAAQ;AACrD,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,8BAA8B;AAE9D,SAAS,YAAY,CAAC,GAAuB,EAAE,QAAgB;IAC7D,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAiCD,SAAS,mBAAmB,CAAC,QAAgB;IAI3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IAErE,MAAM,OAAO,GAAkB;QAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,KAAK;KACjB,CAAC;IAEF,OAAO;QACL,OAAO;QACP,MAAM,CAAC,KAAa;YAClB,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAEnC,IAAI,WAAW,GAAkB,IAAI,CAAC;YAEtC,yBAAyB;YACzB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACnC,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBACjD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBACrD,yCAAyC;gBACzC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;oBAC7B,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;YAED,kCAAkC;YAClC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC5D,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBAC/B,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;gBAC/D,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,IAAI,OAAO,CAAC,UAAU,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAAC;gBAC7C,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,GAAmB;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO;IACxB,IAAI,CAAC;QACH,2DAA2D;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,OAAmB;IAC/C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAExD,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc;QACtB,OAAO,CAAC,eAAe;QACvB,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,wBAAwB,CACjE,CAAC;IACF,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,wBAAwB,CACjE,CAAC;IAEF,mBAAmB;IACnB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,cAAc,CAChB,gCAAgC,SAAS,CAAC,MAAM,MAAM,cAAc,SAAS,CAC9E,CACF,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,aAAa;IACb,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAErF,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,qBAAqB,CACpC,OAAO,CAAC,WAAyB,EACjC,MAAM,EACN,UAAU,CACX,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEjC,sBAAsB;IACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;IAE9D,MAAM,CAAC,KAAK,CACV;QACE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI;QACJ,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC;QACvB,cAAc;QACd,UAAU,EAAE,OAAO,CAAC,WAAW;KAChC,EACD,qBAAqB,CACtB,CAAC;IAEF,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,aAAwD,CAAC;QAC7D,IAAI,WAAsD,CAAC;QAE3D,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;gBACnC,KAAK,EAAE,KAAK;gBACZ,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,GAAG;gBACH,KAAK,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC9D,QAAQ,EAAE,IAAI,EAAE,mCAAmC;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,cAAc,CAAC,oBAAoB,OAAO,CAAC,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE3B,MAAM,aAAa,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAE1D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEzE,wBAAwB;QACxB,IAAI,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,0EAA0E;gBAC1E,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,qCAAqC;QACrC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,EAClC,uCAAuC,CACxC,CAAC;YACF,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACnC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;gBACzE,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrC,CAAC,EAAE,eAAe,CAAC,CAAC;QACtB,CAAC,EAAE,cAAc,GAAG,KAAK,CAAC,CAAC;QAE3B,+BAA+B;QAC/B,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAClB,2CAA2C,CAC5C,CAAC;YACF,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACnC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrC,CAAC,EAAE,eAAe,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,YAAY,CAAC,WAAW,CAAC,CAAC;YAC1B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,CACJ,IAAI,cAAc,CAChB,oBAAoB,OAAO,CAAC,OAAO,MAAM,GAAG,CAAC,OAAO,EAAE,CACvD,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;YACrC,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,YAAY,CAAC,WAAW,CAAC,CAAC;YAC1B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE9B,OAAO,CAAC;gBACN,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,UAAU,IAAI,IAAI;gBAC1B,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxD,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxD,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxD,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxD,eAAe,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS;gBAChD,eAAe,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS;gBAChD,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU;gBAC7C,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU;gBAC7C,QAAQ;gBACR,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/safety.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Resolve the final CLI args array, optionally merging unsafe_args.
+ *
+ * Policy (v1.1): the env gate CLINKX_ENABLE_UNSAFE=1 is the sole security
+ * boundary. When it is set and the adapter declares non-empty unsafeArgs,
+ * they are always included — the per-request `unsafe` flag is no longer
+ * required (retained for backward compat but ignored when the env gate
+ * is open).
+ *
+ * Returns the safe args array, optionally merged with unsafe_args.
+ */
+export declare function resolveArgs(args: readonly string[], unsafeArgs: readonly string[], requestUnsafe: boolean): string[];
+/**
+ * Build debug metadata object. Returns metadata only when debug=true.
+ * Never appends to model output — caller must place in a separate content block.
+ */
+export declare function buildDebugMetadata(debug: boolean, data: Record<string, unknown>): Record<string, unknown> | null;
+/**
+ * Guard against adapters that require a TTY.
+ * PTY emulation is not supported in v1 — throw ExecutionError with actionable message.
+ */
+export declare function assertNoTtyRequired(adapterName: string, requiresTty: boolean): void;