oh-my-super-agent 0.1.0

package/dist/src/providers/codex-exec.js

@@ -0,0 +1,127 @@
+import { existsSync, lstatSync } from "node:fs";
+import { join } from "node:path";
+import { assertOpaqueId } from "../domain/records.js";
+import { assertSchema } from "../runtime/schema.js";
+import { registeredSchema } from "../schemas/registry.js";
+import { readJsonFileNoFollow, validateExistingDirectory } from "../utils/fs.js";
+import { runProcess } from "./process.js";
+import { configuredProviderEnvironment, probeConfiguredAuth, resolveConfiguredRole, } from "./preflight.js";
+const DEFAULT_TIMEOUT_MS = 10 * 60 * 1000;
+const MAX_TIMEOUT_MS = 60 * 60 * 1000;
+const MAX_PROMPT_BYTES = 256 * 1024;
+const MAX_BUFFER_BYTES = 1024 * 1024;
+const CODEX_STRUCTURED_IDENTITIES = new WeakMap();
+export function runCodexStructured(request) {
+    const { role, modelId } = resolveConfiguredRole(request.config, request.roleId);
+    validateCodexRole(role);
+    const requestId = assertOpaqueId(request.requestId, "request id");
+    const cwd = validateExistingDirectory(request.cwd, "Codex working directory");
+    const temporaryRoot = validateExistingDirectory(request.temporaryRoot, "Codex temporary root");
+    const timeoutMs = validateTimeout(request.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    const promptBytes = Buffer.byteLength(request.prompt, "utf8");
+    if (promptBytes === 0 || promptBytes > MAX_PROMPT_BYTES) {
+        throw new Error(`Codex prompt must be between 1 and ${MAX_PROMPT_BYTES} bytes`);
+    }
+    const env = configuredProviderEnvironment(request.config, role, request.env ?? process.env, request.confirmBilledUse);
+    const runner = request.runner ?? runProcess;
+    probeConfiguredAuth({ role, cwd, env, runner });
+    const outputPath = join(temporaryRoot, `${requestId}.final.json`);
+    if (existsSync(outputPath))
+        throw new Error(`Codex output already exists: ${requestId}`);
+    const schema = registeredSchema(role.evidence_schema, request.packageRoot);
+    const processRequest = {
+        command: "codex",
+        args: [
+            "exec",
+            "--ignore-user-config",
+            "--strict-config",
+            "--ephemeral",
+            "--sandbox",
+            "read-only",
+            "--model",
+            modelId,
+            "--cd",
+            cwd,
+            "--color",
+            "never",
+            "--output-schema",
+            schema.path,
+            "--output-last-message",
+            outputPath,
+            "-",
+        ],
+        cwd,
+        env,
+        input: request.prompt,
+        timeoutMs,
+        maxBufferBytes: MAX_BUFFER_BYTES,
+    };
+    request.beforeProviderContact?.();
+    const result = runner(processRequest);
+    if (isTimeout(result))
+        throw new Error(`Codex exec timed out after ${timeoutMs}ms`);
+    if (result.error)
+        throw new Error(`Codex exec failed to start: ${result.error.message}`);
+    if (result.status !== 0) {
+        throw new Error(`Codex exec exited ${result.status ?? "without status"}: ${boundedDetail(result.stderr)}`);
+    }
+    if (!existsSync(outputPath))
+        throw new Error("Codex exec produced no final output");
+    const outputEntry = lstatSync(outputPath);
+    if (outputEntry.isSymbolicLink() || !outputEntry.isFile())
+        throw new Error("Codex exec final output is not a regular file");
+    const value = readJsonFileNoFollow(outputPath, MAX_BUFFER_BYTES);
+    assertSchema(value, schema.schema, `Codex ${role.role_id} output`);
+    const output = Object.freeze({
+        value: deepFreeze(value),
+        outputPath,
+        process: Object.freeze({ status: result.status, signal: result.signal, stdout: result.stdout, stderr: result.stderr }),
+    });
+    CODEX_STRUCTURED_IDENTITIES.set(output, Object.freeze({
+        request_id: requestId,
+        role_id: request.roleId,
+        fresh_session_id: requestId,
+        certifying: request.runner === undefined,
+    }));
+    return output;
+}
+export function codexStructuredResultIdentity(value) {
+    if (typeof value !== "object" || value === null || !Object.isFrozen(value)) {
+        throw new Error("Codex grade source is not a completed structured invocation");
+    }
+    const identity = CODEX_STRUCTURED_IDENTITIES.get(value);
+    if (!identity)
+        throw new Error("Codex grade source is not a completed structured invocation");
+    return identity;
+}
+function validateCodexRole(role) {
+    if (role.engine !== "codex" || role.transport !== "codex_exec") {
+        throw new Error(`role ${role.role_id} is not a Codex exec role`);
+    }
+    if (role.sandbox !== "read-only")
+        throw new Error(`role ${role.role_id} must use a read-only sandbox`);
+    if (role.session_policy !== "fresh" || role.freshness_policy !== "fresh_required") {
+        throw new Error(`role ${role.role_id} must require a fresh session`);
+    }
+}
+function validateTimeout(value) {
+    if (!Number.isSafeInteger(value) || value < 1 || value > MAX_TIMEOUT_MS) {
+        throw new Error(`timeout must be an integer between 1 and ${MAX_TIMEOUT_MS}ms`);
+    }
+    return value;
+}
+function isTimeout(result) {
+    return result.error !== undefined && "code" in result.error && result.error.code === "ETIMEDOUT";
+}
+function boundedDetail(value) {
+    const normalized = value.trim().replace(/\s+/g, " ");
+    return normalized.slice(0, 1024) || "no stderr";
+}
+function deepFreeze(value) {
+    if (typeof value !== "object" || value === null || Object.isFrozen(value))
+        return value;
+    for (const child of Object.values(value))
+        deepFreeze(child);
+    return Object.freeze(value);
+}
+//# sourceMappingURL=codex-exec.js.map

package/dist/src/providers/codex-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-exec.js","sourceRoot":"","sources":["../../../src/providers/codex-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,UAAU,EAA+D,MAAM,cAAc,CAAC;AACvG,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,MAAM,2BAA2B,GAAG,IAAI,OAAO,EAAyC,CAAC;AA8BzF,MAAM,UAAU,kBAAkB,CAAc,OAA+B;IAC7E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,yBAAyB,CAAC,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,WAAW,KAAK,CAAC,IAAI,WAAW,GAAG,gBAAgB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sCAAsC,gBAAgB,QAAQ,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,6BAA6B,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;IAC5C,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,SAAS,aAAa,CAAC,CAAC;IAClE,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAmB;QACrC,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ,MAAM;YACN,sBAAsB;YACtB,iBAAiB;YACjB,aAAa;YACb,WAAW;YACX,WAAW;YACX,SAAS;YACT,OAAO;YACP,MAAM;YACN,GAAG;YACH,SAAS;YACT,OAAO;YACP,iBAAiB;YACjB,MAAM,CAAC,IAAI;YACX,uBAAuB;YACvB,UAAU;YACV,GAAG;SACJ;QACD,GAAG;QACH,GAAG;QACH,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,SAAS;QACT,cAAc,EAAE,gBAAgB;KACjC,CAAC;IACF,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAEtC,IAAI,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,IAAI,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,MAAM,IAAI,gBAAgB,KAAK,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpF,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAE5H,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACjE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,OAAO,SAAS,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,EAAE,UAAU,CAAC,KAAK,CAAM;QAC7B,UAAU;QACV,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KACvH,CAAC,CAAC;IACH,2BAA2B,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpD,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,gBAAgB,EAAE,SAAS;QAC3B,UAAU,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS;KACzC,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC9F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAsD;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,2BAA2B,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,+BAA+B,CAAC,CAAC;IACvG,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,+BAA+B,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,4CAA4C,cAAc,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB;IACtC,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;AACnG,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/src/providers/grading.d.ts

@@ -0,0 +1,2 @@
+import { type RoleId, type RolePolicyConfig, type RolePolicyRow } from "../domain/role-policy.js";
+export declare function selectGrader(config: RolePolicyConfig, executorRoleId: RoleId): RolePolicyRow;

package/dist/src/providers/grading.js

@@ -0,0 +1,20 @@
+import { selectCrossEngineGrader, validateRolePolicyConfig, } from "../domain/role-policy.js";
+export function selectGrader(config, executorRoleId) {
+    const errors = validateRolePolicyConfig(config);
+    if (errors.length > 0)
+        throw new Error(`invalid role policy: ${errors.join("; ")}`);
+    const graderRoleId = selectCrossEngineGrader(config, executorRoleId);
+    const executor = config.roles[executorRoleId];
+    const grader = config.roles[graderRoleId];
+    if (grader.engine === executor.engine)
+        throw new Error("grader must use a different engine from the executor");
+    if (grader.sandbox !== "read-only")
+        throw new Error("grader must be read-only");
+    if (grader.session_policy !== "fresh" || grader.freshness_policy !== "fresh_required") {
+        throw new Error("grader must use fresh evidence");
+    }
+    if (grader.evidence_schema !== "grader-output.v1")
+        throw new Error("grader must use grader-output.v1");
+    return grader;
+}
+//# sourceMappingURL=grading.js.map

package/dist/src/providers/grading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grading.js","sourceRoot":"","sources":["../../../src/providers/grading.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAIzB,MAAM,0BAA0B,CAAC;AAElC,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,cAAsB;IAC3E,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,IAAI,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACvG,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/providers/native-dispatch.d.ts

@@ -0,0 +1,24 @@
+import type { RolePolicyConfig } from "../domain/role-policy.js";
+import { type ProcessRunner } from "./process.js";
+import { type AuthEvidence, type CodexCliCompatibilityEvidence, type WorktreeEvidence } from "./preflight.js";
+export interface NativeDispatchPlan {
+    engine: "codex";
+    command: "codex";
+    args: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    interactive: true;
+    operatorOriginatedOmsManaged: true;
+    nativeAction: "goal";
+    compatibilityEvidence: CodexCliCompatibilityEvidence;
+    authEvidence: AuthEvidence;
+    worktreeEvidence: WorktreeEvidence;
+}
+export declare function prepareCodexGoalLaunch(options: {
+    config: RolePolicyConfig;
+    roleId: "oms.goal-long-executor";
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    confirmBilledUse?: boolean;
+    runner?: ProcessRunner;
+}): NativeDispatchPlan;

package/dist/src/providers/native-dispatch.js

@@ -0,0 +1,34 @@
+import { validateExistingDirectory } from "../utils/fs.js";
+import { runProcess } from "./process.js";
+import { configuredProviderEnvironment, probeCodexCliCompatibility, probeConfiguredAuth, resolveConfiguredRole, verifyLinkedWorktree, } from "./preflight.js";
+export function prepareCodexGoalLaunch(options) {
+    const { role, modelId } = resolveConfiguredRole(options.config, options.roleId);
+    if (role.engine !== "codex" || role.transport !== "codex_goal") {
+        throw new Error(`role ${role.role_id} is not a Codex goal role`);
+    }
+    if (role.session_policy !== "operator_originated_oms_managed_interactive" || role.freshness_policy !== "resumable") {
+        throw new Error(`role ${role.role_id} must use an operator-originated OMS-managed resumable goal`);
+    }
+    if (role.sandbox !== "ticket-worktree-write")
+        throw new Error(`role ${role.role_id} requires a ticket worktree`);
+    const cwd = validateExistingDirectory(options.cwd, "Codex goal worktree");
+    const env = configuredProviderEnvironment(options.config, role, options.env ?? process.env, options.confirmBilledUse);
+    const runner = options.runner ?? runProcess;
+    const compatibilityEvidence = probeCodexCliCompatibility({ cwd, env, runner });
+    const authEvidence = probeConfiguredAuth({ role, cwd, env, runner });
+    const worktreeEvidence = verifyLinkedWorktree({ cwd, env, runner });
+    return {
+        engine: "codex",
+        command: "codex",
+        args: ["--model", modelId, "--sandbox", "workspace-write", "--cd", cwd],
+        cwd,
+        env,
+        interactive: true,
+        operatorOriginatedOmsManaged: true,
+        nativeAction: "goal",
+        compatibilityEvidence,
+        authEvidence,
+        worktreeEvidence,
+    };
+}
+//# sourceMappingURL=native-dispatch.js.map

package/dist/src/providers/native-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-dispatch.js","sourceRoot":"","sources":["../../../src/providers/native-dispatch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAsB,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GAIrB,MAAM,gBAAgB,CAAC;AAgBxB,MAAM,UAAU,sBAAsB,CAAC,OAOtC;IACC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,2BAA2B,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,6CAA6C,IAAI,IAAI,CAAC,gBAAgB,KAAK,WAAW,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,6DAA6D,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,uBAAuB;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,6BAA6B,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,6BAA6B,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;IAC5C,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,CAAC;QACvE,GAAG;QACH,GAAG;QACH,WAAW,EAAE,IAAI;QACjB,4BAA4B,EAAE,IAAI;QAClC,YAAY,EAAE,MAAM;QACpB,qBAAqB;QACrB,YAAY;QACZ,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/src/providers/preflight.d.ts

@@ -0,0 +1,65 @@
+import type { BillingClass, Engine, RoleId, RolePolicyConfig, RolePolicyRow } from "../domain/role-policy.js";
+import type { ProcessRunner } from "./process.js";
+export declare const SUPPORTED_CLAUDE_CODE_VERSIONS: readonly ["2.1.207"];
+export declare const SUPPORTED_CODEX_CLI_VERSIONS: readonly ["0.145.0-alpha.2"];
+export interface AuthEvidence {
+    schema_version: 1;
+    engine: Engine;
+    auth_mode: "chatgpt_subscription" | "claude_subscription" | "api_key";
+    billing_class: BillingClass;
+    observed_at: string;
+    probe: "codex-login-status" | "claude-auth-status";
+}
+export interface ClaudeCodeCompatibilityEvidence {
+    readonly command: "claude";
+    readonly version: (typeof SUPPORTED_CLAUDE_CODE_VERSIONS)[number];
+}
+export interface CodexCliCompatibilityEvidence {
+    readonly command: "codex";
+    readonly version: (typeof SUPPORTED_CODEX_CLI_VERSIONS)[number];
+}
+export interface ResolvedRole {
+    role: RolePolicyRow;
+    modelId: string;
+}
+export declare function resolveConfiguredRole(config: RolePolicyConfig, roleId: RoleId): ResolvedRole;
+export declare function subscriptionEnvironment(engine: Engine, input: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function probeCodexSubscriptionAuth(options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    runner: ProcessRunner;
+}): AuthEvidence;
+export declare function probeClaudeSubscriptionAuth(options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    runner: ProcessRunner;
+}): AuthEvidence;
+export declare function probeClaudeCodeCompatibility(options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    runner: ProcessRunner;
+}): ClaudeCodeCompatibilityEvidence;
+export declare function probeCodexCliCompatibility(options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    runner: ProcessRunner;
+}): CodexCliCompatibilityEvidence;
+export interface WorktreeEvidence {
+    root: string;
+    git_dir: string;
+    common_git_dir: string;
+}
+export declare function verifyLinkedWorktree(options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    runner: ProcessRunner;
+}): WorktreeEvidence;
+export declare function assertShippedSubscriptionRole(role: RolePolicyRow): void;
+export declare function configuredProviderEnvironment(config: RolePolicyConfig, role: RolePolicyRow, input: NodeJS.ProcessEnv, confirmBilledUse?: boolean): NodeJS.ProcessEnv;
+export declare function probeConfiguredAuth(options: {
+    role: RolePolicyRow;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    runner: ProcessRunner;
+}): AuthEvidence;
+export declare function assertConfiguredProviderRole(config: RolePolicyConfig, role: RolePolicyRow, confirmBilledUse?: boolean): void;

package/dist/src/providers/preflight.js

@@ -0,0 +1,256 @@
+import { realpathSync } from "node:fs";
+import { resolveRoleModel, validateRolePolicyConfig } from "../domain/role-policy.js";
+import { isRecord, validateExistingDirectory } from "../utils/fs.js";
+const AUTH_TIMEOUT_MS = 10_000;
+const AUTH_MAX_BUFFER_BYTES = 64 * 1024;
+export const SUPPORTED_CLAUDE_CODE_VERSIONS = Object.freeze(["2.1.207"]);
+export const SUPPORTED_CODEX_CLI_VERSIONS = Object.freeze(["0.145.0-alpha.2"]);
+const FORBIDDEN_AUTH_ENV = {
+    codex: [
+        "OPENAI_API_KEY",
+        "CODEX_API_KEY",
+        "AZURE_OPENAI_API_KEY",
+        "OPENAI_BASE_URL",
+        "OPENAI_ORGANIZATION",
+        "OPENAI_PROJECT",
+    ],
+    claude: [
+        "ANTHROPIC_API_KEY",
+        "ANTHROPIC_AUTH_TOKEN",
+        "CLAUDE_CODE_USE_BEDROCK",
+        "CLAUDE_CODE_USE_VERTEX",
+        "CLAUDE_CODE_USE_FOUNDRY",
+        "AWS_BEARER_TOKEN_BEDROCK",
+    ],
+};
+const BASE_ENV_ALLOWLIST = new Set([
+    "PATH",
+    "HOME",
+    "USER",
+    "LOGNAME",
+    "SHELL",
+    "TERM",
+    "COLORTERM",
+    "LANG",
+    "TMPDIR",
+    "NO_COLOR",
+    "SSL_CERT_FILE",
+    "SSL_CERT_DIR",
+    "XDG_CONFIG_HOME",
+    "XDG_CACHE_HOME",
+    "XDG_DATA_HOME",
+    "XDG_RUNTIME_DIR",
+]);
+export function resolveConfiguredRole(config, roleId) {
+    const errors = validateRolePolicyConfig(config);
+    if (errors.length > 0)
+        throw new Error(`invalid role policy: ${errors.join("; ")}`);
+    const role = config.roles[roleId];
+    const model = resolveRoleModel(config, roleId);
+    return { role, modelId: model.id };
+}
+export function subscriptionEnvironment(engine, input) {
+    const conflicts = FORBIDDEN_AUTH_ENV[engine].filter((key) => typeof input[key] === "string" && input[key] !== "");
+    if (conflicts.length > 0)
+        throw new Error(`${engine} subscription auth conflicts with environment: ${conflicts.join(", ")}`);
+    return subscriptionEnvironmentBase(engine, input);
+}
+export function probeCodexSubscriptionAuth(options) {
+    const result = options.runner(authRequest("codex", ["login", "status"], options));
+    assertProbeSuccess(result, "Codex auth probe");
+    const statusText = stripAnsi(`${result.stdout}\n${result.stderr}`).trim();
+    if (!/^Logged in using ChatGPT\s*$/i.test(statusText)) {
+        throw new Error("Codex auth probe did not confirm ChatGPT subscription auth");
+    }
+    return {
+        schema_version: 1,
+        engine: "codex",
+        auth_mode: "chatgpt_subscription",
+        billing_class: "subscription",
+        observed_at: new Date().toISOString(),
+        probe: "codex-login-status",
+    };
+}
+export function probeClaudeSubscriptionAuth(options) {
+    const result = options.runner(authRequest("claude", ["auth", "status", "--json"], options));
+    assertProbeSuccess(result, "Claude auth probe");
+    let value;
+    try {
+        value = JSON.parse(result.stdout);
+    }
+    catch {
+        throw new Error("Claude auth probe returned malformed JSON");
+    }
+    if (!isRecord(value)
+        || value.loggedIn !== true
+        || value.authMethod !== "claude.ai"
+        || value.apiProvider !== "firstParty"
+        || typeof value.subscriptionType !== "string"
+        || value.subscriptionType.length === 0) {
+        throw new Error("Claude auth probe did not confirm first-party subscription auth");
+    }
+    return {
+        schema_version: 1,
+        engine: "claude",
+        auth_mode: "claude_subscription",
+        billing_class: "subscription",
+        observed_at: new Date().toISOString(),
+        probe: "claude-auth-status",
+    };
+}
+export function probeClaudeCodeCompatibility(options) {
+    const result = options.runner(authRequest("claude", ["--version"], options));
+    assertProbeSuccess(result, "Claude Code version probe");
+    const match = /^([0-9]+\.[0-9]+\.[0-9]+) \(Claude Code\)\s*$/u.exec(stripAnsi(`${result.stdout}${result.stderr}`));
+    const version = match?.[1];
+    if (!version || !SUPPORTED_CLAUDE_CODE_VERSIONS.includes(version)) {
+        throw new Error(`unsupported Claude Code version: ${version ?? "unknown"}`);
+    }
+    return Object.freeze({ command: "claude", version: version });
+}
+export function probeCodexCliCompatibility(options) {
+    const result = options.runner(authRequest("codex", ["--version"], options));
+    assertProbeSuccess(result, "Codex CLI version probe");
+    const match = /^codex-cli ([0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?)\s*$/u.exec(stripAnsi(`${result.stdout}${result.stderr}`));
+    const version = match?.[1];
+    if (!version || !SUPPORTED_CODEX_CLI_VERSIONS.includes(version)) {
+        throw new Error(`unsupported Codex CLI version: ${version ?? "unknown"}`);
+    }
+    return Object.freeze({ command: "codex", version: version });
+}
+export function verifyLinkedWorktree(options) {
+    const cwd = validateExistingDirectory(options.cwd, "ticket worktree");
+    const request = {
+        command: "git",
+        args: ["rev-parse", "--path-format=absolute", "--show-toplevel", "--git-dir", "--git-common-dir"],
+        cwd,
+        env: options.env,
+        timeoutMs: AUTH_TIMEOUT_MS,
+        maxBufferBytes: AUTH_MAX_BUFFER_BYTES,
+    };
+    const result = options.runner(request);
+    assertProbeSuccess(result, "Git worktree probe");
+    const [root, gitDir, commonGitDir, ...extra] = result.stdout.trim().split(/\r?\n/);
+    if (!root || !gitDir || !commonGitDir || extra.length > 0)
+        throw new Error("Git worktree probe returned invalid output");
+    if (realpathSync.native(root) !== cwd)
+        throw new Error("writable provider cwd must be the worktree root");
+    if (realpathSync.native(gitDir) === realpathSync.native(commonGitDir)) {
+        throw new Error("writable provider requires a dedicated linked worktree");
+    }
+    return { root: cwd, git_dir: gitDir, common_git_dir: commonGitDir };
+}
+export function assertShippedSubscriptionRole(role) {
+    const expectedAuth = role.engine === "codex" ? "chatgpt_subscription" : "claude_subscription";
+    if (role.auth_mode !== expectedAuth
+        || role.billing_class !== "subscription"
+        || role.allow_api_billing
+        || role.allow_overage_credits
+        || role.unattended_eligible) {
+        throw new Error(`role ${role.role_id} is outside the shipped subscription gate`);
+    }
+}
+export function configuredProviderEnvironment(config, role, input, confirmBilledUse = false) {
+    assertConfiguredProviderRole(config, role, confirmBilledUse);
+    if (role.auth_mode !== "api_key")
+        return subscriptionEnvironment(role.engine, input);
+    const key = role.engine === "codex" ? "OPENAI_API_KEY" : "ANTHROPIC_API_KEY";
+    const value = input[key];
+    if (!value)
+        throw new Error(`role ${role.role_id} requires ${key}`);
+    const conflicts = FORBIDDEN_AUTH_ENV[role.engine].filter((name) => name !== key && typeof input[name] === "string" && input[name] !== "");
+    if (conflicts.length > 0)
+        throw new Error(`${role.engine} API auth conflicts with environment: ${conflicts.join(", ")}`);
+    const env = subscriptionEnvironmentBase(role.engine, input);
+    env[key] = value;
+    return env;
+}
+export function probeConfiguredAuth(options) {
+    if (options.role.auth_mode !== "api_key") {
+        return options.role.engine === "codex"
+            ? probeCodexSubscriptionAuth(options)
+            : probeClaudeSubscriptionAuth(options);
+    }
+    if (options.role.engine === "codex") {
+        const result = options.runner(authRequest("codex", ["login", "status"], options));
+        assertProbeSuccess(result, "Codex auth probe");
+        const statusText = stripAnsi(`${result.stdout}\n${result.stderr}`).trim();
+        if (!/^Logged in using (?:an )?API key(?:\s+-\s+\S+)?\s*$/i.test(statusText)) {
+            throw new Error("Codex auth probe did not confirm API-key auth");
+        }
+        return authEvidence(options.role, "codex-login-status");
+    }
+    const result = options.runner(authRequest("claude", ["auth", "status", "--json"], options));
+    assertProbeSuccess(result, "Claude auth probe");
+    let value;
+    try {
+        value = JSON.parse(result.stdout);
+    }
+    catch {
+        throw new Error("Claude auth probe returned malformed JSON");
+    }
+    if (!isRecord(value)
+        || value.loggedIn !== true
+        || typeof value.authMethod !== "string"
+        || !/api/i.test(value.authMethod)
+        || value.apiProvider !== "firstParty") {
+        throw new Error("Claude auth probe did not confirm first-party API-key auth");
+    }
+    return authEvidence(options.role, "claude-auth-status");
+}
+export function assertConfiguredProviderRole(config, role, confirmBilledUse = false) {
+    if (role.auth_mode === "claude_subscription" || role.auth_mode === "chatgpt_subscription") {
+        assertShippedSubscriptionRole(role);
+        return;
+    }
+    if (role.auth_mode !== "api_key" || !role.allow_api_billing) {
+        throw new Error(`role ${role.role_id} has no implemented provider auth gate`);
+    }
+    if (role.billing_class !== "api" && role.billing_class !== "credit_billed") {
+        throw new Error(`role ${role.role_id} API auth has incompatible billing`);
+    }
+    if (role.billing_class === "credit_billed" && (!config.credit_billed_allowed || !role.allow_overage_credits)) {
+        throw new Error(`role ${role.role_id} credit billing is not fully enabled`);
+    }
+    if (!confirmBilledUse)
+        throw new Error(`role ${role.role_id} requires explicit billed-use confirmation`);
+}
+function authRequest(command, args, options) {
+    return {
+        command,
+        args,
+        cwd: options.cwd,
+        env: options.env,
+        timeoutMs: AUTH_TIMEOUT_MS,
+        maxBufferBytes: AUTH_MAX_BUFFER_BYTES,
+    };
+}
+function assertProbeSuccess(result, label) {
+    if (result.error)
+        throw new Error(`${label} failed to start`);
+    if (result.status !== 0)
+        throw new Error(`${label} exited ${result.status ?? "without status"}`);
+}
+function stripAnsi(value) {
+    return value.replace(/\u001b\[[0-?]*[ -/]*[@-~]/g, "");
+}
+function subscriptionEnvironmentBase(engine, input) {
+    const engineKeys = engine === "codex" ? new Set(["CODEX_HOME"]) : new Set(["CLAUDE_CONFIG_DIR"]);
+    const env = {};
+    for (const [key, value] of Object.entries(input)) {
+        if (value !== undefined && (BASE_ENV_ALLOWLIST.has(key) || engineKeys.has(key) || key.startsWith("LC_")))
+            env[key] = value;
+    }
+    return env;
+}
+function authEvidence(role, probe) {
+    return {
+        schema_version: 1,
+        engine: role.engine,
+        auth_mode: "api_key",
+        billing_class: role.billing_class,
+        observed_at: new Date().toISOString(),
+        probe,
+    };
+}
+//# sourceMappingURL=preflight.js.map

package/dist/src/providers/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../../src/providers/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAGrE,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAU,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAU,CAAC,CAAC;AAExF,MAAM,kBAAkB,GAAsC;IAC5D,KAAK,EAAE;QACL,gBAAgB;QAChB,eAAe;QACf,sBAAsB;QACtB,iBAAiB;QACjB,qBAAqB;QACrB,gBAAgB;KACjB;IACD,MAAM,EAAE;QACN,mBAAmB;QACnB,sBAAsB;QACtB,yBAAyB;QACzB,wBAAwB;QACxB,yBAAyB;QACzB,0BAA0B;KAC3B;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,WAAW;IACX,MAAM;IACN,QAAQ;IACR,UAAU;IACV,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,iBAAiB;CAClB,CAAC,CAAC;AA0BH,MAAM,UAAU,qBAAqB,CAAC,MAAwB,EAAE,MAAc;IAC5E,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,KAAwB;IAC9E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAClH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,kDAAkD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7H,OAAO,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,sBAAsB;QACjC,aAAa,EAAE,cAAc;QAC7B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,oBAAoB;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAI3C;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAY,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;WACb,KAAK,CAAC,QAAQ,KAAK,IAAI;WACvB,KAAK,CAAC,UAAU,KAAK,WAAW;WAChC,KAAK,CAAC,WAAW,KAAK,YAAY;WAClC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;WAC1C,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,qBAAqB;QAChC,aAAa,EAAE,cAAc;QAC7B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,oBAAoB;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAI5C;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,kBAAkB,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,gDAAgD,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,OAAqD,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAiB,EAAE,OAAO,EAAE,OAAqD,EAAE,CAAC,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,kBAAkB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,8DAA8D,CAAC,IAAI,CAC/E,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAC9C,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,OAAmD,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,OAAO,EAAE,OAAmD,EAAE,CAAC,CAAC;AACpH,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,OAIpC;IACC,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtE,MAAM,OAAO,GAAmB;QAC9B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,CAAC;QACjG,GAAG;QACH,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,eAAe;QAC1B,cAAc,EAAE,qBAAqB;KACtC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnF,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACzH,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC1G,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAmB;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC9F,IACE,IAAI,CAAC,SAAS,KAAK,YAAY;WAC5B,IAAI,CAAC,aAAa,KAAK,cAAc;WACrC,IAAI,CAAC,iBAAiB;WACtB,IAAI,CAAC,qBAAqB;WAC1B,IAAI,CAAC,mBAAmB,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,2CAA2C,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,MAAwB,EACxB,IAAmB,EACnB,KAAwB,EACxB,gBAAgB,GAAG,KAAK;IAExB,4BAA4B,CAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,aAAa,GAAG,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACtD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAChF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,yCAAyC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzH,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5D,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAKnC;IACC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO;YACpC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAClF,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,IAAI,CAAC,sDAAsD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAY,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;WACb,KAAK,CAAC,QAAQ,KAAK,IAAI;WACvB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;WACpC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WAC9B,KAAK,CAAC,WAAW,KAAK,YAAY,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,MAAwB,EACxB,IAAmB,EACnB,gBAAgB,GAAG,KAAK;IAExB,IAAI,IAAI,CAAC,SAAS,KAAK,qBAAqB,IAAI,IAAI,CAAC,SAAS,KAAK,sBAAsB,EAAE,CAAC;QAC1F,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,wCAAwC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,IAAI,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,oCAAoC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,eAAe,IAAI,CAAC,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,sCAAsC,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,WAAW,CAClB,OAA2B,EAC3B,IAAc,EACd,OAAgD;IAEhD,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,eAAe;QAC1B,cAAc,EAAE,qBAAqB;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAqB,EAAE,KAAa;IAC9D,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,MAAM,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc,EAAE,KAAwB;IAC3E,MAAM,UAAU,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACjG,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,KAA4B;IACrE,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/src/providers/process.d.ts

@@ -0,0 +1,18 @@
+export interface ProcessRequest {
+    command: string;
+    args: readonly string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    input?: string;
+    timeoutMs: number;
+    maxBufferBytes: number;
+}
+export interface ProcessResult {
+    status: number | null;
+    signal: NodeJS.Signals | null;
+    stdout: string;
+    stderr: string;
+    error?: Error;
+}
+export type ProcessRunner = (request: ProcessRequest) => ProcessResult;
+export declare const runProcess: ProcessRunner;

package/dist/src/providers/process.js

@@ -0,0 +1,21 @@
+import { spawnSync } from "node:child_process";
+export const runProcess = (request) => {
+    const result = spawnSync(request.command, [...request.args], {
+        cwd: request.cwd,
+        env: request.env,
+        input: request.input,
+        encoding: "utf8",
+        stdio: ["pipe", "pipe", "pipe"],
+        timeout: request.timeoutMs,
+        maxBuffer: request.maxBufferBytes,
+        shell: false,
+    });
+    return {
+        status: result.status,
+        signal: result.signal,
+        stdout: result.stdout ?? "",
+        stderr: result.stderr ?? "",
+        error: result.error,
+    };
+};
+//# sourceMappingURL=process.js.map

package/dist/src/providers/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../../src/providers/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAsB/C,MAAM,CAAC,MAAM,UAAU,GAAkB,CAAC,OAAO,EAAE,EAAE;IACnD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;QAC3D,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,SAAS;QAC1B,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC,CAAC"}