codex-orchestrator 0.1.51 → 2.0.1

package/dist/src/v2/containment.d.ts

@@ -0,0 +1,55 @@
+export declare const CONTAINMENT_CODEX_VERSION: "0.144.4";
+export declare const CONTAINMENT_PLATFORM: "darwin";
+export declare const CONTAINMENT_SCHEMA: "codex-orchestrator.containment";
+export interface ContainmentProbeResultV2 {
+    parentAuthReadable: true;
+    parentAuthUsable: true;
+    externalCredentialsUsable: false;
+    deniedSecretReadable: true;
+    productionSentinelExecuted: false;
+}
+export interface ContainmentCertificateV2 {
+    schema: typeof CONTAINMENT_SCHEMA;
+    version: 2;
+    codexVersion: typeof CONTAINMENT_CODEX_VERSION;
+    platform: typeof CONTAINMENT_PLATFORM;
+    packageVersion: string;
+    argvPolicySha256: string;
+    root: ContainmentProbeResultV2;
+    nativeChild: ContainmentProbeResultV2;
+    completedAt: string;
+    resultSha256: string;
+}
+export declare function containmentCertificatePath(orchestratorHome?: string): string;
+export declare function buildContainmentCodexArgs(input: {
+    schemaPath: string;
+    reportPath: string;
+    toolHome: string;
+    tmpDir: string;
+    safePath: string;
+}): string[];
+export declare function buildContainmentCodexEnvironment(input: {
+    parentEnv: NodeJS.ProcessEnv;
+    parentCodexHome: string;
+    safePath: string;
+}): Record<string, string>;
+export declare function containmentArgvPolicySha256(): string;
+export declare function createContainmentCertificate(input: {
+    packageVersion: string;
+    argvPolicySha256: string;
+    root: ContainmentProbeResultV2;
+    nativeChild: ContainmentProbeResultV2;
+    completedAt: string;
+}): ContainmentCertificateV2;
+export declare function validateContainmentCertificate(value: unknown): ContainmentCertificateV2;
+export declare function writeContainmentCertificate(path: string, certificate: ContainmentCertificateV2): Promise<void>;
+export declare function readContainmentCertificate(path: string): Promise<ContainmentCertificateV2>;
+export declare function removeMatchingContainmentCertificate(path: string, expected: {
+    codexVersion: string;
+    packageVersion: string;
+    argvPolicySha256: string;
+}): Promise<void>;
+export declare function canonicalJson(value: unknown): string;
+export declare function sha256(value: string | Buffer): string;
+export declare function parseJsonWithoutDuplicateKeys(source: string): unknown;
+//# sourceMappingURL=containment.d.ts.map

package/dist/src/v2/containment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"containment.d.ts","sourceRoot":"","sources":["../../../src/v2/containment.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,yBAAyB,EAAG,SAAkB,CAAC;AAC5D,eAAO,MAAM,oBAAoB,EAAG,QAAiB,CAAC;AACtD,eAAO,MAAM,kBAAkB,EAAG,gCAAyC,CAAC;AAwB5E,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,EAAE,IAAI,CAAC;IACzB,gBAAgB,EAAE,IAAI,CAAC;IACvB,yBAAyB,EAAE,KAAK,CAAC;IACjC,oBAAoB,EAAE,IAAI,CAAC;IAC3B,0BAA0B,EAAE,KAAK,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,OAAO,kBAAkB,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,OAAO,yBAAyB,CAAC;IAC/C,QAAQ,EAAE,OAAO,oBAAoB,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,0BAA0B,CACxC,gBAAgB,SAAyF,GACxG,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,EAAE,CAwCX;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUzB;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CASpD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,wBAAwB,CAmB3B;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAsCvF;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAIhG;AAED,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GACnF,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAkBpD;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAErD;AAmDD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAgFrE"}

package/dist/src/v2/containment.js

@@ -0,0 +1,370 @@
+import { createHash } from 'node:crypto';
+import { readFile, rm } from 'node:fs/promises';
+import { homedir, platform } from 'node:os';
+import { join, resolve } from 'node:path';
+import { writeDurableAtomicFile } from './adapters/durable-atomic-file.js';
+export const CONTAINMENT_CODEX_VERSION = '0.144.4';
+export const CONTAINMENT_PLATFORM = 'darwin';
+export const CONTAINMENT_SCHEMA = 'codex-orchestrator.containment';
+const CERTIFICATE_FILE = `containment-codex-${CONTAINMENT_CODEX_VERSION}.json`;
+const SHA256_PATTERN = /^[0-9a-f]{64}$/;
+const MAX_CERTIFICATE_BYTES = 1024 * 1024;
+const DENIED_TOOL_ENV_KEYS = [
+    'GH_TOKEN',
+    'GITHUB_TOKEN',
+    'GH_CONFIG_DIR',
+    'GIT_ASKPASS',
+    'SSH_ASKPASS',
+    'SSH_AUTH_SOCK',
+    'NPM_TOKEN',
+    'NODE_AUTH_TOKEN',
+    'NPM_CONFIG_USERCONFIG',
+    'AWS_ACCESS_KEY_ID',
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_SESSION_TOKEN',
+    'AWS_PROFILE',
+    'GOOGLE_APPLICATION_CREDENTIALS',
+    'CLOUDSDK_CONFIG',
+    'AZURE_CONFIG_DIR',
+    'AZURE_CLIENT_SECRET',
+];
+export function containmentCertificatePath(orchestratorHome = resolve(process.env.CODEX_ORCHESTRATOR_HOME ?? join(homedir(), '.codex-orchestrator'))) {
+    return join(orchestratorHome, 'v2', 'certifications', CERTIFICATE_FILE);
+}
+export function buildContainmentCodexArgs(input) {
+    return [
+        'exec',
+        '--strict-config',
+        '--ignore-user-config',
+        '--ignore-rules',
+        '--sandbox',
+        'workspace-write',
+        '--output-schema',
+        input.schemaPath,
+        '--output-last-message',
+        input.reportPath,
+        '-c',
+        'approval_policy="never"',
+        '-c',
+        'skills.include_instructions=false',
+        '-c',
+        'web_search="disabled"',
+        '-c',
+        'features.apps=false',
+        '-c',
+        'sandbox_workspace_write.network_access=false',
+        '-c',
+        'shell_environment_policy.inherit="none"',
+        '-c',
+        `shell_environment_policy.set.HOME=${tomlString(input.toolHome)}`,
+        '-c',
+        `shell_environment_policy.set.PATH=${tomlString(input.safePath)}`,
+        '-c',
+        `shell_environment_policy.set.TMPDIR=${tomlString(input.tmpDir)}`,
+        '-c',
+        'shell_environment_policy.set.LANG="C.UTF-8"',
+        '-c',
+        'shell_environment_policy.set.LC_ALL="C.UTF-8"',
+        ...DENIED_TOOL_ENV_KEYS.flatMap((key) => [
+            '-c',
+            `shell_environment_policy.set.${key}=""`,
+        ]),
+        '-',
+    ];
+}
+export function buildContainmentCodexEnvironment(input) {
+    const env = {
+        PATH: input.safePath,
+        CODEX_HOME: input.parentCodexHome,
+        HOME: input.parentEnv.HOME ?? homedir(),
+        LANG: input.parentEnv.LANG ?? 'C.UTF-8',
+        LC_ALL: input.parentEnv.LC_ALL ?? 'C.UTF-8',
+        TMPDIR: input.parentEnv.TMPDIR ?? '/tmp',
+    };
+    return env;
+}
+export function containmentArgvPolicySha256() {
+    const args = buildContainmentCodexArgs({
+        schemaPath: '<snapshot-schema>',
+        reportPath: '<attempt-report>',
+        toolHome: '<isolated-tool-home>',
+        tmpDir: '<attempt-tmp>',
+        safePath: '<fixed-safe-path>',
+    });
+    return sha256(canonicalJson({ command: 'codex', args, promptTransport: 'stdin' }));
+}
+export function createContainmentCertificate(input) {
+    assertNonEmptyString(input.packageVersion, 'packageVersion');
+    assertSha256(input.argvPolicySha256, 'argvPolicySha256');
+    validateProbeResult(input.root, 'root');
+    validateProbeResult(input.nativeChild, 'nativeChild');
+    assertIsoTimestamp(input.completedAt);
+    assert.equalPlatform();
+    const unsigned = {
+        schema: CONTAINMENT_SCHEMA,
+        version: 2,
+        codexVersion: CONTAINMENT_CODEX_VERSION,
+        platform: CONTAINMENT_PLATFORM,
+        packageVersion: input.packageVersion,
+        argvPolicySha256: input.argvPolicySha256,
+        root: input.root,
+        nativeChild: input.nativeChild,
+        completedAt: input.completedAt,
+    };
+    return { ...unsigned, resultSha256: sha256(canonicalJson(unsigned)) };
+}
+export function validateContainmentCertificate(value) {
+    assertExactObject(value, [
+        'schema',
+        'version',
+        'codexVersion',
+        'platform',
+        'packageVersion',
+        'argvPolicySha256',
+        'root',
+        'nativeChild',
+        'completedAt',
+        'resultSha256',
+    ], 'containment certificate');
+    if (value.schema !== CONTAINMENT_SCHEMA)
+        throw new Error('invalid containment schema');
+    if (value.version !== 2)
+        throw new Error('invalid containment version');
+    if (value.codexVersion !== CONTAINMENT_CODEX_VERSION)
+        throw new Error('invalid containment Codex version');
+    if (value.platform !== CONTAINMENT_PLATFORM)
+        throw new Error('invalid containment platform');
+    assertNonEmptyString(value.packageVersion, 'packageVersion');
+    assertSha256(value.argvPolicySha256, 'argvPolicySha256');
+    validateProbeResult(value.root, 'root');
+    validateProbeResult(value.nativeChild, 'nativeChild');
+    assertIsoTimestamp(value.completedAt);
+    assertSha256(value.resultSha256, 'resultSha256');
+    const unsigned = {
+        schema: value.schema,
+        version: value.version,
+        codexVersion: value.codexVersion,
+        platform: value.platform,
+        packageVersion: value.packageVersion,
+        argvPolicySha256: value.argvPolicySha256,
+        root: value.root,
+        nativeChild: value.nativeChild,
+        completedAt: value.completedAt,
+    };
+    if (sha256(canonicalJson(unsigned)) !== value.resultSha256) {
+        throw new Error('containment result digest mismatch');
+    }
+    return value;
+}
+export async function writeContainmentCertificate(path, certificate) {
+    validateContainmentCertificate(certificate);
+    await writeDurableAtomicFile(path, `${canonicalJson(certificate)}\n`);
+}
+export async function readContainmentCertificate(path) {
+    const bytes = await readFile(path);
+    if (bytes.length > MAX_CERTIFICATE_BYTES)
+        throw new Error('containment certificate exceeds 1 MiB');
+    return validateContainmentCertificate(parseJsonWithoutDuplicateKeys(bytes.toString('utf8')));
+}
+export async function removeMatchingContainmentCertificate(path, expected) {
+    let certificate;
+    try {
+        certificate = await readContainmentCertificate(path);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        return;
+    }
+    if (certificate.codexVersion === expected.codexVersion
+        && certificate.packageVersion === expected.packageVersion
+        && certificate.argvPolicySha256 === expected.argvPolicySha256) {
+        await rm(path, { force: true });
+    }
+}
+export function canonicalJson(value) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return JSON.stringify(value);
+    if (typeof value === 'number') {
+        if (!Number.isSafeInteger(value))
+            throw new Error('canonical JSON accepts safe integers only');
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value))
+        return `[${value.map((item) => canonicalJson(item)).join(',')}]`;
+    if (typeof value === 'object') {
+        const record = value;
+        const keys = Object.keys(record).sort((left, right) => Buffer.compare(Buffer.from(left), Buffer.from(right)));
+        const fields = keys.map((key) => {
+            const item = record[key];
+            if (item === undefined)
+                throw new Error('canonical JSON rejects undefined');
+            return `${JSON.stringify(key)}:${canonicalJson(item)}`;
+        });
+        return `{${fields.join(',')}}`;
+    }
+    throw new Error(`canonical JSON rejects ${typeof value}`);
+}
+export function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function validateProbeResult(value, field) {
+    assertExactObject(value, [
+        'parentAuthReadable',
+        'parentAuthUsable',
+        'externalCredentialsUsable',
+        'deniedSecretReadable',
+        'productionSentinelExecuted',
+    ], field);
+    if (value.parentAuthReadable !== true)
+        throw new Error(`${field}.parentAuthReadable must be true`);
+    if (value.parentAuthUsable !== true)
+        throw new Error(`${field}.parentAuthUsable must be true`);
+    if (value.deniedSecretReadable !== true)
+        throw new Error(`${field}.deniedSecretReadable must be true`);
+    for (const key of ['externalCredentialsUsable', 'productionSentinelExecuted']) {
+        if (value[key] !== false)
+            throw new Error(`${field}.${key} must be false`);
+    }
+}
+function assertExactObject(value, expectedKeys, field) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new Error(`${field} must be an object`);
+    const actualKeys = Object.keys(value).sort();
+    const sortedExpected = [...expectedKeys].sort();
+    if (actualKeys.length !== sortedExpected.length || actualKeys.some((key, index) => key !== sortedExpected[index])) {
+        throw new Error(`${field} has unknown or missing keys`);
+    }
+}
+function assertNonEmptyString(value, field) {
+    if (typeof value !== 'string' || value.length === 0)
+        throw new Error(`${field} must be a non-empty string`);
+}
+function assertSha256(value, field) {
+    if (typeof value !== 'string' || !SHA256_PATTERN.test(value))
+        throw new Error(`${field} must be lowercase SHA-256`);
+}
+function assertIsoTimestamp(value) {
+    if (typeof value !== 'string' || Number.isNaN(Date.parse(value)) || new Date(value).toISOString() !== value) {
+        throw new Error('completedAt must be an ISO timestamp');
+    }
+}
+const assert = {
+    equalPlatform() {
+        if (platform() !== CONTAINMENT_PLATFORM)
+            throw new Error('containment certificate requires darwin');
+    },
+};
+function tomlString(value) {
+    return JSON.stringify(value);
+}
+export function parseJsonWithoutDuplicateKeys(source) {
+    let index = 0;
+    const skipWhitespace = () => {
+        while (/\s/.test(source[index] ?? ''))
+            index += 1;
+    };
+    const parseValue = () => {
+        skipWhitespace();
+        const current = source[index];
+        if (current === '{')
+            return parseObject();
+        if (current === '[')
+            return parseArray();
+        if (current === '"')
+            return parseString();
+        if (source.startsWith('true', index)) {
+            index += 4;
+            return true;
+        }
+        if (source.startsWith('false', index)) {
+            index += 5;
+            return false;
+        }
+        if (source.startsWith('null', index)) {
+            index += 4;
+            return null;
+        }
+        const match = source.slice(index).match(/^-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?/);
+        if (!match)
+            throw new Error(`invalid JSON at byte ${index}`);
+        index += match[0].length;
+        return Number(match[0]);
+    };
+    const parseString = () => {
+        const start = index;
+        index += 1;
+        let escaped = false;
+        while (index < source.length) {
+            const character = source[index];
+            if (!escaped && character === '"') {
+                index += 1;
+                return JSON.parse(source.slice(start, index));
+            }
+            if (!escaped && character === '\\')
+                escaped = true;
+            else
+                escaped = false;
+            index += 1;
+        }
+        throw new Error('unterminated JSON string');
+    };
+    const parseObject = () => {
+        index += 1;
+        const result = {};
+        const seen = new Set();
+        skipWhitespace();
+        if (source[index] === '}') {
+            index += 1;
+            return result;
+        }
+        while (true) {
+            skipWhitespace();
+            if (source[index] !== '"')
+                throw new Error('JSON object key must be a string');
+            const key = parseString();
+            if (seen.has(key))
+                throw new Error(`duplicate JSON key: ${key}`);
+            seen.add(key);
+            skipWhitespace();
+            if (source[index] !== ':')
+                throw new Error('JSON object key must be followed by colon');
+            index += 1;
+            result[key] = parseValue();
+            skipWhitespace();
+            if (source[index] === '}') {
+                index += 1;
+                return result;
+            }
+            if (source[index] !== ',')
+                throw new Error('JSON object entries must be comma-separated');
+            index += 1;
+        }
+    };
+    const parseArray = () => {
+        index += 1;
+        const result = [];
+        skipWhitespace();
+        if (source[index] === ']') {
+            index += 1;
+            return result;
+        }
+        while (true) {
+            result.push(parseValue());
+            skipWhitespace();
+            if (source[index] === ']') {
+                index += 1;
+                return result;
+            }
+            if (source[index] !== ',')
+                throw new Error('JSON array entries must be comma-separated');
+            index += 1;
+        }
+    };
+    const value = parseValue();
+    skipWhitespace();
+    if (index !== source.length)
+        throw new Error('trailing JSON content');
+    return value;
+}
+//# sourceMappingURL=containment.js.map

package/dist/src/v2/containment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containment.js","sourceRoot":"","sources":["../../../src/v2/containment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAkB,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAiB,CAAC;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,gCAAyC,CAAC;AAC5E,MAAM,gBAAgB,GAAG,qBAAqB,yBAAyB,OAAO,CAAC;AAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,oBAAoB,GAAG;IAC3B,UAAU;IACV,cAAc;IACd,eAAe;IACf,aAAa;IACb,aAAa;IACb,eAAe;IACf,WAAW;IACX,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,gCAAgC;IAChC,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuBX,MAAM,UAAU,0BAA0B,CACxC,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAEzG,OAAO,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IACC,OAAO;QACL,MAAM;QACN,iBAAiB;QACjB,sBAAsB;QACtB,gBAAgB;QAChB,WAAW;QACX,iBAAiB;QACjB,iBAAiB;QACjB,KAAK,CAAC,UAAU;QAChB,uBAAuB;QACvB,KAAK,CAAC,UAAU;QAChB,IAAI;QACJ,yBAAyB;QACzB,IAAI;QACJ,mCAAmC;QACnC,IAAI;QACJ,uBAAuB;QACvB,IAAI;QACJ,qBAAqB;QACrB,IAAI;QACJ,8CAA8C;QAC9C,IAAI;QACJ,yCAAyC;QACzC,IAAI;QACJ,qCAAqC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACjE,IAAI;QACJ,qCAAqC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QACjE,IAAI;QACJ,uCAAuC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QACjE,IAAI;QACJ,6CAA6C;QAC7C,IAAI;QACJ,+CAA+C;QAC/C,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACvC,IAAI;YACJ,gCAAgC,GAAG,KAAK;SACzC,CAAC;QACF,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAIhD;IACC,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,UAAU,EAAE,KAAK,CAAC,eAAe;QACjC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,EAAE;QACvC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS;QACvC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS;QAC3C,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM;KACzC,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAM5C;IACC,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,CAAC,aAAa,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,CAAU;QACnB,YAAY,EAAE,yBAAyB;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,iBAAiB,CAAC,KAAK,EAAE;QACvB,QAAQ;QACR,SAAS;QACT,cAAc;QACd,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,MAAM;QACN,aAAa;QACb,aAAa;QACb,cAAc;KACf,EAAE,yBAAyB,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,YAAY,KAAK,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,QAAQ,KAAK,oBAAoB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC7F,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAA4C,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,WAAqC;IAErC,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,sBAAsB,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnG,OAAO,8BAA8B,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAAY,EACZ,QAAoF;IAEpF,IAAI,WAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,OAAO;IACT,CAAC;IACD,IACE,WAAW,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;WAC/C,WAAW,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;WACtD,WAAW,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAC7D,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC5E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAsB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACxD,iBAAiB,CAAC,KAAK,EAAE;QACvB,oBAAoB;QACpB,kBAAkB;QAClB,2BAA2B;QAC3B,sBAAsB;QACtB,4BAA4B;KAC7B,EAAE,KAAK,CAAC,CAAC;IACV,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,CAAC,2BAA2B,EAAE,4BAA4B,CAAU,EAAE,CAAC;QACvF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,gBAAgB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,YAAsB,EAAE,KAAa;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACvH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG;IACb,aAAa;QACX,IAAI,QAAQ,EAAE,KAAK,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACtG,CAAC;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAY,EAAE;QAC/B,cAAc,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,UAAU,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACpE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC7D,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAW,EAAE;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBAClC,KAAK,IAAI,CAAC,CAAC;gBACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAW,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;;gBAC9C,OAAO,GAAG,KAAK,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAA4B,EAAE;QAChD,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;YACZ,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACxF,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,CAAC;YAC3B,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC1F,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAc,EAAE;QACjC,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,cAAc,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACzD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1B,cAAc,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACzF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,cAAc,EAAE,CAAC;IACjB,IAAI,KAAK,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/v2/implementation-report.d.ts

@@ -0,0 +1,18 @@
+export interface ExternalBlocker {
+    kind: 'credential' | 'tool' | 'service' | 'product-decision';
+    summary: string;
+    attempted: string[];
+}
+export interface ImplementationReportV1 {
+    version: 1;
+    status: 'completed' | 'external-block';
+    summary: string;
+    changedFiles: string[];
+    residualRisks: string[];
+    blocker?: ExternalBlocker;
+}
+export declare function validateImplementationReport(value: unknown): ImplementationReportV1;
+export declare function implementationReportOutputSchema(): Record<string, unknown>;
+export declare function implementationReportRepairDiagnostic(error: unknown): string;
+export declare function implementationReportSkillExcerpt(): string;
+//# sourceMappingURL=implementation-report.d.ts.map

package/dist/src/v2/implementation-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation-report.d.ts","sourceRoot":"","sources":["../../../src/v2/implementation-report.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAoBnF;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiC1E;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3E;AAED,wBAAgB,gCAAgC,IAAI,MAAM,CAEzD"}

package/dist/src/v2/implementation-report.js

@@ -0,0 +1,147 @@
+import { posix } from 'node:path';
+import { agentReportEnvelopeSchema } from './report-envelope.js';
+const MAX_STRING_LENGTH = 16 * 1024;
+const MAX_SUMMARY_LENGTH = 4 * 1024;
+const MAX_ARRAY_LENGTH = 256;
+export function validateImplementationReport(value) {
+    assertRecord(value, 'implementation report');
+    if (value.status === 'completed') {
+        assertExactObject(value, ['version', 'status', 'summary', 'changedFiles', 'residualRisks'], 'implementation report');
+    }
+    else if (value.status === 'external-block') {
+        assertExactObject(value, ['version', 'status', 'summary', 'changedFiles', 'residualRisks', 'blocker'], 'implementation report');
+    }
+    else {
+        throw new Error('implementation report.status is invalid');
+    }
+    if (value.version !== 1)
+        throw new Error('implementation report.version must be 1');
+    assertBoundedString(value.summary, 'implementation report.summary', MAX_SUMMARY_LENGTH, true);
+    assertStringArray(value.changedFiles, 'implementation report.changedFiles');
+    for (const file of value.changedFiles)
+        assertRelativePath(file, 'implementation report.changedFiles');
+    assertUnique(value.changedFiles, 'implementation report.changedFiles');
+    assertStringArray(value.residualRisks, 'implementation report.residualRisks');
+    if (value.status === 'completed' && value.changedFiles.length === 0) {
+        throw new Error('completed implementation report requires changedFiles');
+    }
+    if (value.status === 'external-block')
+        validateExternalBlocker(value.blocker, 'implementation report.blocker');
+    return value;
+}
+export function implementationReportOutputSchema() {
+    const commonProperties = {
+        version: { type: 'integer', const: 1 },
+        summary: boundedStringSchema(MAX_SUMMARY_LENGTH),
+        changedFiles: {
+            type: 'array',
+            maxItems: MAX_ARRAY_LENGTH,
+            items: relativePathSchema(),
+        },
+        residualRisks: stringArraySchema(),
+    };
+    return agentReportEnvelopeSchema([
+        {
+            type: 'object',
+            additionalProperties: false,
+            required: ['version', 'status', 'summary', 'changedFiles', 'residualRisks'],
+            properties: {
+                ...commonProperties,
+                status: { type: 'string', const: 'completed' },
+                changedFiles: { ...commonProperties.changedFiles, minItems: 1 },
+            },
+        },
+        {
+            type: 'object',
+            additionalProperties: false,
+            required: ['version', 'status', 'summary', 'changedFiles', 'residualRisks', 'blocker'],
+            properties: {
+                ...commonProperties,
+                status: { type: 'string', const: 'external-block' },
+                blocker: externalBlockerSchema(),
+            },
+        },
+    ]);
+}
+export function implementationReportRepairDiagnostic(error) {
+    const detail = error instanceof Error ? error.message : 'unknown validation failure';
+    return `Return one complete JSON object matching the supplied implementation output schema. Validation failed: ${detail}`;
+}
+export function implementationReportSkillExcerpt() {
+    return 'Complete the work or report one external blocker. Return only the JSON object required by the runner-supplied output schema; never publish, push, open a PR, or include credential/path material.';
+}
+function validateExternalBlocker(value, field) {
+    assertExactObject(value, ['kind', 'summary', 'attempted'], field);
+    if (!['credential', 'tool', 'service', 'product-decision'].includes(value.kind)) {
+        throw new Error(`${field}.kind is invalid`);
+    }
+    assertBoundedString(value.summary, `${field}.summary`, MAX_SUMMARY_LENGTH, true);
+    assertStringArray(value.attempted, `${field}.attempted`);
+}
+function externalBlockerSchema() {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        required: ['kind', 'summary', 'attempted'],
+        properties: {
+            kind: { type: 'string', enum: ['credential', 'tool', 'service', 'product-decision'] },
+            summary: boundedStringSchema(MAX_SUMMARY_LENGTH),
+            attempted: stringArraySchema(),
+        },
+    };
+}
+function stringArraySchema() {
+    return {
+        type: 'array',
+        maxItems: MAX_ARRAY_LENGTH,
+        items: boundedStringSchema(MAX_STRING_LENGTH),
+    };
+}
+function boundedStringSchema(maxLength) {
+    return { type: 'string', minLength: 1, maxLength };
+}
+function relativePathSchema() {
+    return {
+        type: 'string',
+        minLength: 1,
+        maxLength: MAX_STRING_LENGTH,
+        pattern: '^[^/\\\\]$|^[^/\\\\][^\\\\]*[^/\\\\]$',
+    };
+}
+function assertRelativePath(value, field) {
+    if (value.startsWith('/') || value.includes('\\') || posix.normalize(value) !== value) {
+        throw new Error(`${field} entries must be normalized repository-relative POSIX paths`);
+    }
+    const segments = value.split('/');
+    if (segments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
+        throw new Error(`${field} entries must not contain empty, dot, or dot-dot segments`);
+    }
+}
+function assertStringArray(value, field) {
+    if (!Array.isArray(value) || value.length > MAX_ARRAY_LENGTH)
+        throw new Error(`${field} must contain at most 256 strings`);
+    for (const item of value)
+        assertBoundedString(item, `${field} entry`, MAX_STRING_LENGTH, true);
+}
+function assertUnique(values, field) {
+    if (new Set(values).size !== values.length)
+        throw new Error(`${field} must be unique`);
+}
+function assertBoundedString(value, field, maxLength, requireNonEmpty) {
+    if (typeof value !== 'string' || value.length > maxLength || (requireNonEmpty && value.length === 0)) {
+        throw new Error(`${field} must be a bounded string`);
+    }
+}
+function assertRecord(value, field) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new Error(`${field} must be an object`);
+}
+function assertExactObject(value, keys, field) {
+    assertRecord(value, field);
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    if (actual.length !== expected.length || actual.some((key, index) => key !== expected[index])) {
+        throw new Error(`${field} has unknown or missing keys`);
+    }
+}
+//# sourceMappingURL=implementation-report.js.map

package/dist/src/v2/implementation-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation-report.js","sourceRoot":"","sources":["../../../src/v2/implementation-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,CAAC;AACpC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAiB7B,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,YAAY,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,iBAAiB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACvH,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAC7C,iBAAiB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClI,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpF,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC9F,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY;QAAE,kBAAkB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;IACtG,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IACvE,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB;QAAE,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAC/G,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,MAAM,gBAAgB,GAAG;QACvB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACtC,OAAO,EAAE,mBAAmB,CAAC,kBAAkB,CAAC;QAChD,YAAY,EAAE;YACZ,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,kBAAkB,EAAE;SAC5B;QACD,aAAa,EAAE,iBAAiB,EAAE;KACnC,CAAC;IACF,OAAO,yBAAyB,CAAC;QAC7B;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC;YAC3E,UAAU,EAAE;gBACV,GAAG,gBAAgB;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;gBAC9C,YAAY,EAAE,EAAE,GAAG,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE;aAChE;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC;YACtF,UAAU,EAAE;gBACV,GAAG,gBAAgB;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBACnD,OAAO,EAAE,qBAAqB,EAAE;aACjC;SACF;KACJ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACrF,OAAO,0GAA0G,MAAM,EAAE,CAAC;AAC5H,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO,mMAAmM,CAAC;AAC7M,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,iBAAiB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAc,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;IACjF,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;QAC1C,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE;YACrF,OAAO,EAAE,mBAAmB,CAAC,kBAAkB,CAAC;YAChD,SAAS,EAAE,iBAAiB,EAAE;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,mBAAmB,CAAC,iBAAiB,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,iBAAiB;QAC5B,OAAO,EAAE,uCAAuC;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa;IACtD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6DAA6D,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2DAA2D,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC3H,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,mBAAmB,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB,EAAE,KAAa;IACnD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,KAAa,EACb,SAAiB,EACjB,eAAwB;IAExB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;AACzH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAc,EAAE,KAAa;IACtE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}