open-multi-agent-kit 0.95.0 → 0.95.2

package/dist/core/bash-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash-executor.d.ts","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOtD,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,CAiIrB","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n\tenv?: NodeJS.ProcessEnv;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `omk-bash-${id}.log`);\n\t\t// Owner-only permissions: full output can contain secrets (env vars, tokens, etc.).\n\t\ttempFileStream = createWriteStream(tempFilePath, { mode: 0o600 });\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\t/** Close and delete the temp file when its path is never surfaced to the caller. */\n\tconst discardTempFile = async () => {\n\t\tif (!tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst path = tempFilePath;\n\t\tconst stream = tempFileStream;\n\t\ttempFilePath = undefined;\n\t\ttempFileStream = undefined;\n\t\tif (stream) {\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\tstream.end(() => resolve());\n\t\t\t});\n\t\t}\n\t\ttry {\n\t\t\tawait rm(path, { force: true });\n\t\t} catch {\n\t\t\t// Best effort: a stale temp file must not fail the command.\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t\tenv: options?.env,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t} else {\n\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\tawait discardTempFile();\n\t\t}\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t} else {\n\t\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\t\tawait discardTempFile();\n\t\t\t}\n\t\t\tif (tempFileStream) {\n\t\t\t\ttempFileStream.end();\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\t// The path is never reported when the command throws; clean up the spill file.\n\t\tawait discardTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}
+{"version":3,"file":"bash-executor.d.ts","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOtD,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,CAuIrB","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n\tenv?: NodeJS.ProcessEnv;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `omk-bash-${id}.log`);\n\t\t// Owner-only permissions: full output can contain secrets (env vars, tokens, etc.).\n\t\ttempFileStream = createWriteStream(tempFilePath, { mode: 0o600 });\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\t/** Close and delete the temp file when its path is never surfaced to the caller. */\n\tconst discardTempFile = async () => {\n\t\tif (!tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst path = tempFilePath;\n\t\tconst stream = tempFileStream;\n\t\ttempFilePath = undefined;\n\t\ttempFileStream = undefined;\n\t\tif (stream) {\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\tstream.end(() => resolve());\n\t\t\t});\n\t\t}\n\t\ttry {\n\t\t\tawait rm(path, { force: true });\n\t\t} catch {\n\t\t\t// Best effort: a stale temp file must not fail the command.\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t\tenv: options?.env,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t} else {\n\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\tawait discardTempFile();\n\t\t}\n\t\tif (tempFileStream) {\n\t\t\t// end() is async — wait for flush so fullOutputPath is complete\n\t\t\t// when the caller reads it (flaky empty/partial file under load).\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\ttempFileStream!.end(() => resolve());\n\t\t\t});\n\t\t}\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t} else {\n\t\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\t\tawait discardTempFile();\n\t\t\t}\n\t\t\tif (tempFileStream) {\n\t\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\t\ttempFileStream!.end(() => resolve());\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\t// The path is never reported when the command throws; clean up the spill file.\n\t\tawait discardTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}

package/dist/core/bash-executor.js

@@ -100,7 +100,11 @@ export async function executeBashWithOperations(command, cwd, operations, option
             await discardTempFile();
         }
         if (tempFileStream) {
-            tempFileStream.end();
+            // end() is async — wait for flush so fullOutputPath is complete
+            // when the caller reads it (flaky empty/partial file under load).
+            await new Promise((resolve) => {
+                tempFileStream.end(() => resolve());
+            });
         }
         const cancelled = options?.signal?.aborted ?? false;
         return {
@@ -124,7 +128,9 @@ export async function executeBashWithOperations(command, cwd, operations, option
                 await discardTempFile();
             }
             if (tempFileStream) {
-                tempFileStream.end();
+                await new Promise((resolve) => {
+                    tempFileStream.end(() => resolve());
+                });
             }
             return {
                 output: truncationResult.truncated ? truncationResult.content : fullOutput,

package/dist/core/bash-executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"bash-executor.js","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA2BtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAe,EACf,GAAW,EACX,UAA0B,EAC1B,OAA6B,EACP;IACtB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAuC,CAAC;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;QAC5B,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,oFAAoF;QACpF,cAAc,GAAG,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IAAA,CACD,CAAC;IAEF,oFAAoF;IACpF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,YAAY,GAAG,SAAS,CAAC;QACzB,cAAc,GAAG,SAAS,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAAA,CAC5B,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACR,4DAA4D;QAC7D,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC;QAChC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;QAE1B,mEAAmE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAExG,kDAAkD;QAClD,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACpC,cAAc,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,sBAAsB;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;YACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,MAAM;YACN,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,GAAG,EAAE,OAAO,EAAE,GAAG;SACjB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YAChC,cAAc,EAAE,CAAC;QAClB,CAAC;aAAM,CAAC;YACP,+FAA+F;YAC/F,MAAM,eAAe,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChE,SAAS;YACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,2BAA2B;QAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACP,+FAA+F;gBAC/F,MAAM,eAAe,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACpB,cAAc,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,eAAe,EAAE,CAAC;QAExB,MAAM,GAAG,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n\tenv?: NodeJS.ProcessEnv;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `omk-bash-${id}.log`);\n\t\t// Owner-only permissions: full output can contain secrets (env vars, tokens, etc.).\n\t\ttempFileStream = createWriteStream(tempFilePath, { mode: 0o600 });\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\t/** Close and delete the temp file when its path is never surfaced to the caller. */\n\tconst discardTempFile = async () => {\n\t\tif (!tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst path = tempFilePath;\n\t\tconst stream = tempFileStream;\n\t\ttempFilePath = undefined;\n\t\ttempFileStream = undefined;\n\t\tif (stream) {\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\tstream.end(() => resolve());\n\t\t\t});\n\t\t}\n\t\ttry {\n\t\t\tawait rm(path, { force: true });\n\t\t} catch {\n\t\t\t// Best effort: a stale temp file must not fail the command.\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t\tenv: options?.env,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t} else {\n\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\tawait discardTempFile();\n\t\t}\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t} else {\n\t\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\t\tawait discardTempFile();\n\t\t\t}\n\t\t\tif (tempFileStream) {\n\t\t\t\ttempFileStream.end();\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\t// The path is never reported when the command throws; clean up the spill file.\n\t\tawait discardTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}
+{"version":3,"file":"bash-executor.js","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA2BtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAe,EACf,GAAW,EACX,UAA0B,EAC1B,OAA6B,EACP;IACtB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAuC,CAAC;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;QAC5B,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,oFAAoF;QACpF,cAAc,GAAG,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IAAA,CACD,CAAC;IAEF,oFAAoF;IACpF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,YAAY,GAAG,SAAS,CAAC;QACzB,cAAc,GAAG,SAAS,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAAA,CAC5B,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACR,4DAA4D;QAC7D,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC;QAChC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;QAE1B,mEAAmE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAExG,kDAAkD;QAClD,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACpC,cAAc,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,sBAAsB;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;YACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,MAAM;YACN,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,GAAG,EAAE,OAAO,EAAE,GAAG;SACjB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YAChC,cAAc,EAAE,CAAC;QAClB,CAAC;aAAM,CAAC;YACP,+FAA+F;YAC/F,MAAM,eAAe,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACpB,kEAAgE;YAChE,kEAAkE;YAClE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpC,cAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAAA,CACrC,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChE,SAAS;YACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,2BAA2B;QAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACP,+FAA+F;gBAC/F,MAAM,eAAe,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBACpC,cAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAA,CACrC,CAAC,CAAC;YACJ,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,eAAe,EAAE,CAAC;QAExB,MAAM,GAAG,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n\tenv?: NodeJS.ProcessEnv;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `omk-bash-${id}.log`);\n\t\t// Owner-only permissions: full output can contain secrets (env vars, tokens, etc.).\n\t\ttempFileStream = createWriteStream(tempFilePath, { mode: 0o600 });\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\t/** Close and delete the temp file when its path is never surfaced to the caller. */\n\tconst discardTempFile = async () => {\n\t\tif (!tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst path = tempFilePath;\n\t\tconst stream = tempFileStream;\n\t\ttempFilePath = undefined;\n\t\ttempFileStream = undefined;\n\t\tif (stream) {\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\tstream.end(() => resolve());\n\t\t\t});\n\t\t}\n\t\ttry {\n\t\t\tawait rm(path, { force: true });\n\t\t} catch {\n\t\t\t// Best effort: a stale temp file must not fail the command.\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t\tenv: options?.env,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t} else {\n\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\tawait discardTempFile();\n\t\t}\n\t\tif (tempFileStream) {\n\t\t\t// end() is async — wait for flush so fullOutputPath is complete\n\t\t\t// when the caller reads it (flaky empty/partial file under load).\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\ttempFileStream!.end(() => resolve());\n\t\t\t});\n\t\t}\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t} else {\n\t\t\t\t// fullOutputPath is only surfaced when output is truncated; don't leave the spill file behind.\n\t\t\t\tawait discardTempFile();\n\t\t\t}\n\t\t\tif (tempFileStream) {\n\t\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\t\ttempFileStream!.end(() => resolve());\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\t// The path is never reported when the command throws; clean up the spill file.\n\t\tawait discardTempFile();\n\n\t\tthrow err;\n\t}\n}\n"]}

package/dist/core/compaction/transaction.d.ts

@@ -2,6 +2,15 @@ import type { SessionIntegrityReport } from "../session-integrity.ts";
 export declare const SESSION_REVISION_TOKEN_SCHEMA_VERSION: 1;
 export declare const COMPACTION_TRANSACTION_SCHEMA_VERSION: 1;
 export declare const COMPACTION_ENVELOPE_SCHEMA_VERSION: 2;
+export declare function containsCredentialShape(value: string): boolean;
+/**
+ * Deterministically mask credential-shaped spans so sanitized text always
+ * satisfies this module's fail-closed content validators. Producers (compaction
+ * summaries, preserved provenance) must route generated text through this
+ * before validation; otherwise a paranoid validator match would abort the
+ * entire compaction and strand an overflowed session.
+ */
+export declare function redactCredentialShapedContent(value: string): string;
 export interface SessionFileIdentity {
     readonly dev: string;
     readonly ino: string;

package/dist/core/compaction/transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../../src/core/compaction/transaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGX,sBAAsB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,kCAAkC,GAAa,CAAC;AA0B7D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC;CACvD;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAChC,sBAAsB,GACtB,oBAAoB,GACpB,6BAA6B,GAC7B,0BAA0B,GAC1B,+BAA+B,GAC/B,8BAA8B,GAC9B,6BAA6B,CAAC;AAEjC,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,wBAAwB,GACjC;IACA,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CACzC,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,iBAAiB,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CAC/C,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;CAChD,CAAC;AAEL,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4KAA4K;IAC5K,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAuOD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAkD/E;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAkCvF;AAUD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,qBAAqB,CA4BpG;AA+QD,wFAAwF;AACxF,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,sBAAsB,EAC9B,kBAAkB,EAAE,SAAS,MAAM,EAAE,GACnC,uBAAuB,CAgCzB;AAoED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,wBAAwB,CAmFnG;AAcD,uEAAuE;AACvE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA0B7E;AAED,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,kBAAkB,CA8BjG","sourcesContent":["import type { TranscriptIntegrityIssue, TranscriptIntegrityReport } from \"omk-agent-core\";\nimport { inspectTranscriptIntegrity } from \"omk-agent-core\";\nimport type {\n\tSessionIntegrityFinding,\n\tSessionIntegrityReasonCode,\n\tSessionIntegrityReport,\n} from \"../session-integrity.ts\";\n\nexport const SESSION_REVISION_TOKEN_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_TRANSACTION_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_ENVELOPE_SCHEMA_VERSION = 2 as const;\n\nconst MAX_METADATA_LENGTH = 256;\nconst MAX_FILE_IDENTITY_LENGTH = 32;\nconst MAX_SOURCE_ENTRIES = 4096;\nconst MAX_PROVENANCE_IDS = 1024;\nconst MAX_LATEST_INTENT_LENGTH = 16_384;\nconst MAX_SUMMARY_LENGTH = 262_144;\nconst MAX_PROVENANCE_TEXT_LENGTH = 4096;\nconst MAX_NEXT_ACTION_LENGTH = 4096;\nconst MAX_MODEL_HISTORY_ENTRIES = 256;\nconst EMPTY_SHA256 = \"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\";\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst DECIMAL_STRING_PATTERN = /^[0-9]+$/u;\nconst CANONICAL_TIMESTAMP_PATTERN = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst METADATA_CONTROL_PATTERN = /[\\u0000-\\u001f\\u007f]/u;\nconst CONTENT_CONTROL_PATTERN = /[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/u;\nconst CREDENTIAL_SHAPE_PATTERN =\n\t/-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\\s\"'`:])bearer\\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\\s*[:=]\\s*[\"']?[^\\s\"',;]{3,}|(?:sk|ghp|gho|ghu|ghs|github_pat|xox[baprs])[-_][A-Za-z0-9_-]{8,}/iu;\nconst REDACTED_ASSIGNMENT_PATTERN =\n\t/\\s*[:=]\\s*(?:\"\\[REDACTED\\]\"(?![A-Za-z0-9_+/-])|'\\[REDACTED\\]'(?![A-Za-z0-9_+/-])|\\[REDACTED\\](?![A-Za-z0-9._~+/-]))/giu;\n\nfunction containsCredentialShape(value: string): boolean {\n\treturn CREDENTIAL_SHAPE_PATTERN.test(value.replace(REDACTED_ASSIGNMENT_PATTERN, \"\"));\n}\n\nexport interface SessionFileIdentity {\n\treadonly dev: string;\n\treadonly ino: string;\n}\n\nexport interface SessionRevisionToken {\n\treadonly schemaVersion: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface SessionRevisionTokenInput {\n\treadonly schemaVersion?: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface CompactionSourceIdentity {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionSourceIdentityInput {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionModelIdentity {\n\treadonly provider: string;\n\treadonly id: string;\n}\n\nexport interface CompactionModelHistoryEntry {\n\treadonly entryId: string;\n\treadonly provider: string;\n\treadonly modelId: string;\n}\n\nexport interface CompactionPreservedProvenance {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionPreservedProvenanceInput {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionTransaction {\n\treadonly schemaVersion: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CompactionTransactionInput {\n\treadonly schemaVersion?: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionTokenInput;\n\treadonly source: CompactionSourceIdentityInput;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenanceInput;\n}\n\nexport type CompactionBarrierStatus = \"ready\" | \"defer\" | \"fail_closed\";\nexport type CompactionBarrierReason =\n\t| \"closed_active_branch\"\n\t| \"pending_tool_calls\"\n\t| \"missing_active_tail_results\"\n\t| \"invalid_pending_tool_ids\"\n\t| \"inconsistent_integrity_report\"\n\t| \"structural_integrity_failure\"\n\t| \"unsafe_missing_tool_results\";\n\nexport interface CompactionBarrierResult {\n\treadonly status: CompactionBarrierStatus;\n\treadonly reason: CompactionBarrierReason;\n\treadonly pendingToolCallIds: readonly string[];\n\treadonly missingToolCallIds: readonly string[];\n}\n\nexport type CompactionCommitDecision =\n\t| {\n\t\t\treadonly decision: \"commit\";\n\t\t\treadonly reason: \"exact_match\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly revision: SessionRevisionToken;\n\t\t\treadonly source: CompactionSourceIdentity;\n\t  }\n\t| {\n\t\t\treadonly decision: \"stale\";\n\t\t\treadonly reason: \"revision_mismatch\" | \"source_mismatch\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"duplicate\";\n\t\t\treadonly reason: \"source_already_committed\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"defer\";\n\t\t\treadonly reason: \"barrier_defer\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly barrierReason: CompactionBarrierReason;\n\t  }\n\t| {\n\t\t\treadonly decision: \"fail_closed\";\n\t\t\treadonly reason: \"barrier_fail_closed\" | \"invalid_transaction\" | \"invalid_commit_input\";\n\t\t\treadonly transactionId?: string;\n\t\t\treadonly barrierReason?: CompactionBarrierReason;\n\t  };\n\nexport interface DecideCompactionCommitInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly currentRevision: SessionRevisionToken;\n\treadonly currentSource: CompactionSourceIdentity;\n\treadonly barrier: CompactionBarrierResult;\n\treadonly priorCommittedSourceDigests: readonly string[];\n}\n\nexport interface CompactionEnvelope {\n\treadonly schemaVersion: typeof COMPACTION_ENVELOPE_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly summary: string;\n\treadonly summarySha256: string;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CreateCompactionEnvelopeInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly decision: CompactionCommitDecision;\n\treadonly summary: string;\n\t/** Caller-supplied lowercase 64-hex SHA-256 digest of `summary`. OMK does not compute or verify the digest here; the caller is responsible for computing and binding it. */\n\treadonly summarySha256: string;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction assertOnlyKeys(value: Record<string, unknown>, allowed: readonly string[], field: string): void {\n\tconst allowedKeys = new Set(allowed);\n\tif (Object.keys(value).some((key) => !allowedKeys.has(key))) {\n\t\tthrow new TypeError(`${field} contains unsupported metadata`);\n\t}\n}\n\nfunction assertSafeInteger(value: unknown, field: string): asserts value is number {\n\tif (!Number.isSafeInteger(value) || (value as number) < 0) {\n\t\tthrow new TypeError(`${field} must be a non-negative safe integer`);\n\t}\n}\n\nfunction assertMetadataText(value: unknown, field: string, maxLength = MAX_METADATA_LENGTH): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tMETADATA_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded metadata without control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped metadata`);\n\t}\n}\n\nfunction assertContentText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertSha256(value: unknown, field: string): asserts value is string {\n\tif (typeof value !== \"string\" || !SHA256_PATTERN.test(value)) {\n\t\tthrow new TypeError(`${field} must be a lowercase 64-hex SHA-256 digest`);\n\t}\n}\n\nfunction assertCanonicalTimestamp(value: unknown): asserts value is string {\n\tassertMetadataText(value, \"createdAt\");\n\tif (!CANONICAL_TIMESTAMP_PATTERN.test(value)) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n\tconst parsed = new Date(value);\n\tif (!Number.isFinite(parsed.valueOf()) || parsed.toISOString() !== value) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n}\n\nfunction copyFileIdentity(value: unknown): SessionFileIdentity | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isRecord(value)) throw new TypeError(\"fileIdentity must be an object\");\n\tassertOnlyKeys(value, [\"dev\", \"ino\"], \"fileIdentity\");\n\tfor (const field of [\"dev\", \"ino\"] as const) {\n\t\tconst part = value[field];\n\t\tif (\n\t\t\ttypeof part !== \"string\" ||\n\t\t\tpart.length === 0 ||\n\t\t\tpart.length > MAX_FILE_IDENTITY_LENGTH ||\n\t\t\t!DECIMAL_STRING_PATTERN.test(part)\n\t\t) {\n\t\t\tthrow new TypeError(`fileIdentity.${field} must be a bounded decimal string`);\n\t\t}\n\t}\n\treturn Object.freeze({ dev: value.dev as string, ino: value.ino as string });\n}\n\nfunction copyIdArray(value: unknown, field: string, maxItems: number): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertMetadataText(item, `${field}[${index}]`);\n\t\treturn item;\n\t});\n\tif (new Set(copy).size !== copy.length) throw new TypeError(`${field} must contain unique IDs`);\n\treturn Object.freeze(copy);\n}\n\nfunction assertProvenanceText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertNullableMetadataText(\n\tvalue: unknown,\n\tfield: string,\n\tmaxLength = MAX_METADATA_LENGTH,\n): asserts value is string | null {\n\tif (value === null) return;\n\tassertMetadataText(value, field, maxLength);\n}\n\nfunction copyTextArray(\n\tvalue: unknown,\n\tfield: string,\n\tmaxItems: number,\n\tmaxLength: number,\n\trequireUnique: boolean,\n): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertProvenanceText(item, `${field}[${index}]`, maxLength);\n\t\treturn item;\n\t});\n\tif (requireUnique && new Set(copy).size !== copy.length) {\n\t\tthrow new TypeError(`${field} must contain unique entries`);\n\t}\n\treturn Object.freeze(copy);\n}\n\nfunction copyModelHistory(value: unknown): readonly CompactionModelHistoryEntry[] {\n\tif (!Array.isArray(value) || value.length > MAX_MODEL_HISTORY_ENTRIES) {\n\t\tthrow new TypeError(\"preserved.modelHistory must be a bounded array\");\n\t}\n\tconst seenEntryIds = new Set<string>();\n\tconst copy = value.map((item, index) => {\n\t\tif (!isRecord(item)) throw new TypeError(`preserved.modelHistory[${index}] must be an object`);\n\t\tassertOnlyKeys(item, [\"entryId\", \"provider\", \"modelId\"], `preserved.modelHistory[${index}]`);\n\t\tassertMetadataText(item.entryId, `preserved.modelHistory[${index}].entryId`);\n\t\tassertMetadataText(item.provider, `preserved.modelHistory[${index}].provider`);\n\t\tassertMetadataText(item.modelId, `preserved.modelHistory[${index}].modelId`);\n\t\tconst entryId = item.entryId as string;\n\t\tif (seenEntryIds.has(entryId)) throw new TypeError(\"preserved.modelHistory must contain unique entryId values\");\n\t\tseenEntryIds.add(entryId);\n\t\treturn Object.freeze({ entryId, provider: item.provider as string, modelId: item.modelId as string });\n\t});\n\treturn Object.freeze(copy);\n}\n\nfunction copyPreservedProvenance(input: unknown): CompactionPreservedProvenance {\n\tif (!isRecord(input)) throw new TypeError(\"preserved must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"latestIntent\",\n\t\t\t\"openTasks\",\n\t\t\t\"laneIds\",\n\t\t\t\"acceptancePredicateIds\",\n\t\t\t\"evidenceReceiptIds\",\n\t\t\t\"blockerReasons\",\n\t\t\t\"repairEventIds\",\n\t\t\t\"branch\",\n\t\t\t\"worktree\",\n\t\t\t\"modelHistory\",\n\t\t\t\"nextAction\",\n\t\t],\n\t\t\"preserved\",\n\t);\n\tassertProvenanceText(input.latestIntent, \"preserved.latestIntent\", MAX_LATEST_INTENT_LENGTH);\n\tconst openTasks = copyTextArray(\n\t\tinput.openTasks,\n\t\t\"preserved.openTasks\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst laneIds = copyTextArray(input.laneIds, \"preserved.laneIds\", MAX_PROVENANCE_IDS, MAX_METADATA_LENGTH, true);\n\tconst acceptancePredicateIds = copyTextArray(\n\t\tinput.acceptancePredicateIds,\n\t\t\"preserved.acceptancePredicateIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst evidenceReceiptIds = copyTextArray(\n\t\tinput.evidenceReceiptIds,\n\t\t\"preserved.evidenceReceiptIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst blockerReasons = copyTextArray(\n\t\tinput.blockerReasons,\n\t\t\"preserved.blockerReasons\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst repairEventIds = copyTextArray(\n\t\tinput.repairEventIds,\n\t\t\"preserved.repairEventIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tassertNullableMetadataText(input.branch, \"preserved.branch\", MAX_PROVENANCE_TEXT_LENGTH);\n\tassertNullableMetadataText(input.worktree, \"preserved.worktree\", MAX_PROVENANCE_TEXT_LENGTH);\n\tconst modelHistory = copyModelHistory(input.modelHistory);\n\tassertProvenanceText(input.nextAction, \"preserved.nextAction\", MAX_NEXT_ACTION_LENGTH);\n\treturn Object.freeze({\n\t\tlatestIntent: input.latestIntent,\n\t\topenTasks,\n\t\tlaneIds,\n\t\tacceptancePredicateIds,\n\t\tevidenceReceiptIds,\n\t\tblockerReasons,\n\t\trepairEventIds,\n\t\tbranch: input.branch,\n\t\tworktree: input.worktree,\n\t\tmodelHistory,\n\t\tnextAction: input.nextAction,\n\t});\n}\n\nexport function createSessionRevisionToken(input: unknown): SessionRevisionToken {\n\tif (!isRecord(input)) throw new TypeError(\"session revision token must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"schemaVersion\",\n\t\t\t\"sessionId\",\n\t\t\t\"completeBytes\",\n\t\t\t\"recordCount\",\n\t\t\t\"leafId\",\n\t\t\t\"lastEntryId\",\n\t\t\t\"completePrefixSha256\",\n\t\t\t\"fileIdentity\",\n\t\t],\n\t\t\"session revision token\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== SESSION_REVISION_TOKEN_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported session revision token schema version\");\n\t}\n\tassertMetadataText(input.sessionId, \"sessionId\");\n\tassertSafeInteger(input.completeBytes, \"completeBytes\");\n\tassertSafeInteger(input.recordCount, \"recordCount\");\n\tif (input.leafId !== null) assertMetadataText(input.leafId, \"leafId\");\n\tif (input.lastEntryId !== null) assertMetadataText(input.lastEntryId, \"lastEntryId\");\n\tassertSha256(input.completePrefixSha256, \"completePrefixSha256\");\n\n\tif ((input.completeBytes === 0) !== (input.recordCount === 0)) {\n\t\tthrow new TypeError(\"completeBytes and recordCount must both be empty or both be non-empty\");\n\t}\n\tif (input.recordCount === 0 && (input.leafId !== null || input.lastEntryId !== null)) {\n\t\tthrow new TypeError(\"an empty revision cannot identify entries\");\n\t}\n\tif (input.leafId !== null && input.lastEntryId === null) {\n\t\tthrow new TypeError(\"leafId requires a lastEntryId\");\n\t}\n\tif (input.completeBytes === 0 && input.completePrefixSha256 !== EMPTY_SHA256) {\n\t\tthrow new TypeError(\"an empty revision must use the SHA-256 digest of empty bytes\");\n\t}\n\n\tconst fileIdentity = copyFileIdentity(input.fileIdentity);\n\treturn Object.freeze({\n\t\tschemaVersion: SESSION_REVISION_TOKEN_SCHEMA_VERSION,\n\t\tsessionId: input.sessionId,\n\t\tcompleteBytes: input.completeBytes,\n\t\trecordCount: input.recordCount,\n\t\tleafId: input.leafId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tcompletePrefixSha256: input.completePrefixSha256,\n\t\t...(fileIdentity === undefined ? {} : { fileIdentity }),\n\t});\n}\n\nexport function createCompactionSourceIdentity(input: unknown): CompactionSourceIdentity {\n\tif (!isRecord(input)) throw new TypeError(\"compaction source identity must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"sessionId\", \"entryIds\", \"firstEntryId\", \"lastEntryId\", \"sourceSha256\", \"activeLeafId\", \"messageCount\"],\n\t\t\"compaction source identity\",\n\t);\n\tassertMetadataText(input.sessionId, \"source.sessionId\");\n\tconst entryIds = copyIdArray(input.entryIds, \"source.entryIds\", MAX_SOURCE_ENTRIES);\n\tif (entryIds.length === 0) throw new TypeError(\"source.entryIds must be non-empty\");\n\tassertMetadataText(input.firstEntryId, \"source.firstEntryId\");\n\tassertMetadataText(input.lastEntryId, \"source.lastEntryId\");\n\tassertMetadataText(input.activeLeafId, \"source.activeLeafId\");\n\tassertSha256(input.sourceSha256, \"source.sourceSha256\");\n\tassertSafeInteger(input.messageCount, \"source.messageCount\");\n\tif (input.messageCount > entryIds.length) {\n\t\tthrow new TypeError(\"source.messageCount cannot exceed source.entryIds length\");\n\t}\n\tif (input.firstEntryId !== entryIds[0] || input.lastEntryId !== entryIds.at(-1)) {\n\t\tthrow new TypeError(\"source first/last IDs must match the ordered entry IDs\");\n\t}\n\t// R30 P2: active leaf must be the last entry in the source range\n\tif (input.activeLeafId !== input.lastEntryId) {\n\t\tthrow new TypeError(\"source.activeLeafId must match source.lastEntryId\");\n\t}\n\treturn Object.freeze({\n\t\tsessionId: input.sessionId,\n\t\tentryIds,\n\t\tfirstEntryId: input.firstEntryId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tsourceSha256: input.sourceSha256,\n\t\tactiveLeafId: input.activeLeafId,\n\t\tmessageCount: input.messageCount,\n\t});\n}\n\nfunction copyModelIdentity(value: unknown): CompactionModelIdentity {\n\tif (!isRecord(value)) throw new TypeError(\"model must be an object\");\n\tassertOnlyKeys(value, [\"provider\", \"id\"], \"model\");\n\tassertMetadataText(value.provider, \"model.provider\");\n\tassertMetadataText(value.id, \"model.id\");\n\treturn Object.freeze({ provider: value.provider, id: value.id });\n}\n\nexport function createCompactionTransaction(input: CompactionTransactionInput): CompactionTransaction {\n\tif (!isRecord(input)) throw new TypeError(\"compaction transaction must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"schemaVersion\", \"transactionId\", \"baseRevision\", \"source\", \"createdAt\", \"model\", \"preserved\"],\n\t\t\"compaction transaction\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== COMPACTION_TRANSACTION_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction transaction schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"transaction revision and source must identify the same session and active leaf\");\n\t}\n\tconst model = copyModelIdentity(input.model);\n\tconst preserved = copyPreservedProvenance(input.preserved);\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_TRANSACTION_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel,\n\t\tpreserved,\n\t});\n}\n\nconst KNOWN_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"trailing_fragment\",\n\t\"invalid_utf8\",\n\t\"malformed_json\",\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n\t\"invalid_entry\",\n\t\"unsupported_entry\",\n\t\"duplicate_entry_id\",\n\t\"missing_parent\",\n\t\"self_cycle\",\n\t\"parent_cycle\",\n\t\"active_leaf_missing\",\n\t\"compaction_first_kept_not_ancestor\",\n\t\"active_branch_context_invalid\",\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst TRANSCRIPT_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst HEADER_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n]);\nconst TRANSCRIPT_ISSUE_KINDS = new Set<string>([\n\t\"missing_result\",\n\t\"duplicate_result\",\n\t\"orphan_result\",\n\t\"duplicate_call_id\",\n\t\"interleaved_non_result\",\n]);\n\nfunction messageToolCalls(message: SessionIntegrityReport[\"activeMessages\"][number]): readonly {\n\treadonly id: string;\n\treadonly name: string;\n}[] {\n\tif (message.role !== \"assistant\") return [];\n\treturn message.content.flatMap((block) => (block.type === \"toolCall\" ? [{ id: block.id, name: block.name }] : []));\n}\n\nfunction transcriptFindingReason(issue: TranscriptIntegrityIssue): SessionIntegrityReasonCode {\n\tswitch (issue.kind) {\n\t\tcase \"missing_result\":\n\t\t\treturn \"transcript_missing_result\";\n\t\tcase \"duplicate_result\":\n\t\t\treturn \"transcript_duplicate_result\";\n\t\tcase \"orphan_result\":\n\t\t\treturn \"transcript_orphan_result\";\n\t\tcase \"duplicate_call_id\":\n\t\t\treturn \"transcript_duplicate_call_id\";\n\t\tcase \"interleaved_non_result\":\n\t\t\treturn \"transcript_interleaved_non_result\";\n\t}\n}\n\nfunction issueIdentity(issue: {\n\treadonly kind: string;\n\treadonly toolCallId: string;\n\treadonly toolName?: string;\n}): string {\n\treturn JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null]);\n}\n\nfunction findingIdentity(finding: SessionIntegrityFinding): string {\n\treturn JSON.stringify([\n\t\tfinding.reason,\n\t\tfinding.line ?? null,\n\t\tfinding.entryId ?? null,\n\t\tfinding.parentId ?? null,\n\t\tfinding.cycleEntryIds ?? null,\n\t\tfinding.toolCallId ?? null,\n\t\tfinding.toolName ?? null,\n\t]);\n}\n\nfunction sameMultiset(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst counts = new Map<string, number>();\n\tfor (const item of left) counts.set(item, (counts.get(item) ?? 0) + 1);\n\tfor (const item of right) {\n\t\tconst count = counts.get(item);\n\t\tif (count === undefined) return false;\n\t\tif (count === 1) counts.delete(item);\n\t\telse counts.set(item, count - 1);\n\t}\n\treturn counts.size === 0;\n}\n\nfunction validByteDigest(value: unknown, completePrefix: boolean): boolean {\n\tif (!isRecord(value)) return false;\n\tconst keys = completePrefix ? [\"byteCount\", \"sha256\", \"lineCount\"] : [\"byteCount\", \"sha256\"];\n\tif (Object.keys(value).some((key) => !keys.includes(key))) return false;\n\tif (!Number.isSafeInteger(value.byteCount) || (value.byteCount as number) < 0) return false;\n\tif (typeof value.sha256 !== \"string\" || !SHA256_PATTERN.test(value.sha256)) return false;\n\tif (!completePrefix) return true;\n\treturn Number.isSafeInteger(value.lineCount) && (value.lineCount as number) >= 0;\n}\n\nfunction validFinding(value: unknown): value is SessionIntegrityFinding {\n\tif (!isRecord(value) || typeof value.reason !== \"string\") return false;\n\tif (!KNOWN_FINDING_REASONS.has(value.reason as SessionIntegrityReasonCode)) return false;\n\tconst allowed = [\"reason\", \"line\", \"entryId\", \"parentId\", \"cycleEntryIds\", \"toolCallId\", \"toolName\"];\n\tif (Object.keys(value).some((key) => !allowed.includes(key))) return false;\n\tif (value.line !== undefined && (!Number.isSafeInteger(value.line) || (value.line as number) < 1)) return false;\n\tfor (const field of [\"entryId\", \"parentId\", \"toolCallId\", \"toolName\"] as const) {\n\t\tif (value[field] !== undefined && typeof value[field] !== \"string\") return false;\n\t}\n\treturn (\n\t\tvalue.cycleEntryIds === undefined ||\n\t\t(Array.isArray(value.cycleEntryIds) && value.cycleEntryIds.every((item) => typeof item === \"string\"))\n\t);\n}\n\nfunction validTranscriptIssue(value: unknown): value is TranscriptIntegrityIssue {\n\tif (!isRecord(value) || !TRANSCRIPT_ISSUE_KINDS.has(value.kind as string)) return false;\n\tif (typeof value.toolCallId !== \"string\" || value.toolCallId.length === 0) return false;\n\tif (value.toolName !== undefined && typeof value.toolName !== \"string\") return false;\n\treturn Object.keys(value).every((key) => [\"kind\", \"toolCallId\", \"toolName\"].includes(key));\n}\n\nfunction activeBranchIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!Array.isArray(report.entries) || !Array.isArray(report.activeBranch) || !Array.isArray(report.activeMessages)) {\n\t\treturn false;\n\t}\n\tconst entryIds = new Set<string>();\n\tfor (const entry of report.entries) {\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || entry.id.length === 0) return false;\n\t\tentryIds.add(entry.id);\n\t}\n\tif (report.activeLeafId === null) return report.activeBranch.length === 0;\n\tif (typeof report.activeLeafId !== \"string\" || report.activeBranch.length === 0) return false;\n\tconst branchIds = new Set<string>();\n\tfor (let index = 0; index < report.activeBranch.length; index++) {\n\t\tconst entry = report.activeBranch[index];\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || branchIds.has(entry.id) || !entryIds.has(entry.id)) {\n\t\t\treturn false;\n\t\t}\n\t\tbranchIds.add(entry.id);\n\t\tconst expectedParent = index === 0 ? null : report.activeBranch[index - 1]?.id;\n\t\tif (entry.parentId !== expectedParent) return false;\n\t}\n\treturn report.activeBranch.at(-1)?.id === report.activeLeafId;\n}\n\nfunction reportIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!isRecord(report)) return false;\n\tif (!validByteDigest(report.source, false) || !validByteDigest(report.completePrefix, true)) return false;\n\tif (report.trailingFragment !== null && !validByteDigest(report.trailingFragment, false)) return false;\n\tconst trailingBytes = report.trailingFragment?.byteCount ?? 0;\n\tif (report.source.byteCount !== report.completePrefix.byteCount + trailingBytes) return false;\n\tif (report.completePrefix.lineCount > report.completePrefix.byteCount) return false;\n\tif (report.completePrefix.byteCount === 0 && report.completePrefix.sha256 !== EMPTY_SHA256) return false;\n\tif (report.trailingFragment === null && report.source.sha256 !== report.completePrefix.sha256) return false;\n\tif (!Array.isArray(report.findings) || !report.findings.every(validFinding)) return false;\n\tif (typeof report.ok !== \"boolean\" || report.ok !== (report.findings.length === 0)) return false;\n\n\tconst trailingFindings = report.findings.filter((finding) => finding.reason === \"trailing_fragment\");\n\tif (\n\t\ttrailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||\n\t\ttrailingFindings.some((finding) => Object.keys(finding).length !== 1)\n\t) {\n\t\treturn false;\n\t}\n\tif (report.header === null) {\n\t\tif (!report.findings.some((finding) => HEADER_FINDING_REASONS.has(finding.reason))) return false;\n\t} else if (!isRecord(report.header) || typeof report.header.id !== \"string\" || report.header.id.length === 0) {\n\t\treturn false;\n\t}\n\tif (!activeBranchIsConsistent(report)) return false;\n\n\tconst transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));\n\tif (report.transcript === null) {\n\t\t// R30 P1-2: null transcript can never produce ready.\n\t\t// A producer-consistent null transcript requires activeMessages to be empty\n\t\t// and a structural finding to explain why no transcript was produced.\n\t\tif (report.activeMessages.length > 0) return false;\n\t\tif (transcriptFindings.length !== 0) return false;\n\t\tconst hasStructuralFinding = report.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t);\n\t\treturn hasStructuralFinding;\n\t}\n\tif (!isRecord(report.transcript) || !Array.isArray(report.transcript.issues)) return false;\n\tif (!report.transcript.issues.every(validTranscriptIssue)) return false;\n\tif (report.transcript.ok !== (report.transcript.issues.length === 0)) return false;\n\tif (\n\t\treport.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\tlet inspected: TranscriptIntegrityReport;\n\ttry {\n\t\tinspected = inspectTranscriptIntegrity(report.activeMessages);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (\n\t\tinspected.ok !== report.transcript.ok ||\n\t\t!sameMultiset(inspected.issues.map(issueIdentity), report.transcript.issues.map(issueIdentity))\n\t) {\n\t\treturn false;\n\t}\n\treturn sameMultiset(\n\t\ttranscriptFindings.map(findingIdentity),\n\t\tinspected.issues.map((issue) =>\n\t\t\tJSON.stringify([\n\t\t\t\ttranscriptFindingReason(issue),\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tissue.toolCallId,\n\t\t\t\tissue.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t);\n}\n\nfunction missingCallsAreAtActiveTail(report: SessionIntegrityReport, missingIds: ReadonlySet<string>): boolean {\n\tlet lastAssistantIndex = -1;\n\tfor (let index = report.activeMessages.length - 1; index >= 0; index--) {\n\t\tif (report.activeMessages[index]?.role === \"assistant\") {\n\t\t\tlastAssistantIndex = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (lastAssistantIndex === -1) return false;\n\tconst assistant = report.activeMessages[lastAssistantIndex];\n\tif (!assistant || assistant.role !== \"assistant\") return false;\n\tconst tailCallIds = new Set(messageToolCalls(assistant).map((call) => call.id));\n\tif ([...missingIds].some((id) => !tailCallIds.has(id))) return false;\n\tfor (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {\n\t\tconst message = report.activeMessages[index];\n\t\tif (!message || message.role !== \"toolResult\" || !tailCallIds.has(message.toolCallId)) return false;\n\t}\n\treturn true;\n}\n\nfunction barrierResult(\n\tstatus: CompactionBarrierStatus,\n\treason: CompactionBarrierReason,\n\tpendingToolCallIds: readonly string[],\n\tmissingToolCallIds: readonly string[] = [],\n): CompactionBarrierResult {\n\treturn Object.freeze({\n\t\tstatus,\n\t\treason,\n\t\tpendingToolCallIds: Object.freeze([...pendingToolCallIds]),\n\t\tmissingToolCallIds: Object.freeze([...missingToolCallIds]),\n\t});\n}\n\n/** Derive a closed-turn compaction barrier without repairing or mutating the report. */\nexport function evaluateCompactionBarrier(\n\treport: SessionIntegrityReport,\n\tpendingToolCallIds: readonly string[],\n): CompactionBarrierResult {\n\tlet pending: readonly string[];\n\ttry {\n\t\tpending = copyIdArray(pendingToolCallIds, \"pendingToolCallIds\", MAX_PROVENANCE_IDS);\n\t} catch {\n\t\treturn barrierResult(\"fail_closed\", \"invalid_pending_tool_ids\", []);\n\t}\n\tif (!reportIsConsistent(report)) {\n\t\treturn barrierResult(\"fail_closed\", \"inconsistent_integrity_report\", pending);\n\t}\n\tconst blockingFinding = report.findings.find((finding) => finding.reason !== \"transcript_missing_result\");\n\tconst blockingIssue = report.transcript?.issues.find((issue) => issue.kind !== \"missing_result\");\n\tif (blockingFinding || blockingIssue) {\n\t\treturn barrierResult(\"fail_closed\", \"structural_integrity_failure\", pending);\n\t}\n\n\tconst missing = Object.freeze(\n\t\t(report.transcript?.issues ?? [])\n\t\t\t.filter((issue) => issue.kind === \"missing_result\")\n\t\t\t.map((issue) => issue.toolCallId),\n\t);\n\tconst missingSet = new Set(missing);\n\tconst pendingSet = new Set(pending);\n\tif (\n\t\tmissing.length > 0 &&\n\t\t(!missingCallsAreAtActiveTail(report, missingSet) || missing.some((toolCallId) => !pendingSet.has(toolCallId)))\n\t) {\n\t\treturn barrierResult(\"fail_closed\", \"unsafe_missing_tool_results\", pending, missing);\n\t}\n\tif (missing.length > 0) return barrierResult(\"defer\", \"missing_active_tail_results\", pending, missing);\n\tif (pending.length > 0) return barrierResult(\"defer\", \"pending_tool_calls\", pending);\n\treturn barrierResult(\"ready\", \"closed_active_branch\", []);\n}\n\nfunction sameRevision(left: SessionRevisionToken, right: SessionRevisionToken): boolean {\n\treturn (\n\t\tleft.schemaVersion === right.schemaVersion &&\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.completeBytes === right.completeBytes &&\n\t\tleft.recordCount === right.recordCount &&\n\t\tleft.leafId === right.leafId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.completePrefixSha256 === right.completePrefixSha256 &&\n\t\tleft.fileIdentity?.dev === right.fileIdentity?.dev &&\n\t\tleft.fileIdentity?.ino === right.fileIdentity?.ino\n\t);\n}\n\nfunction sameSource(left: CompactionSourceIdentity, right: CompactionSourceIdentity): boolean {\n\treturn (\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.firstEntryId === right.firstEntryId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.sourceSha256 === right.sourceSha256 &&\n\t\tleft.activeLeafId === right.activeLeafId &&\n\t\tleft.messageCount === right.messageCount &&\n\t\tleft.entryIds.length === right.entryIds.length &&\n\t\tleft.entryIds.every((id, index) => id === right.entryIds[index])\n\t);\n}\n\nfunction validBarrierResult(barrier: CompactionBarrierResult): boolean {\n\tif (!isRecord(barrier) || !Array.isArray(barrier.pendingToolCallIds) || !Array.isArray(barrier.missingToolCallIds)) {\n\t\treturn false;\n\t}\n\tconst pending = barrier.pendingToolCallIds;\n\tconst missing = barrier.missingToolCallIds;\n\t// R30 P1-3: validate all IDs are bounded, unique, safe metadata text\n\ttry {\n\t\tfor (const ids of [pending, missing]) {\n\t\t\tif (ids.length > MAX_PROVENANCE_IDS) return false;\n\t\t\tif (new Set(ids).size !== ids.length) return false;\n\t\t\tfor (const id of ids) assertMetadataText(id, \"barrier toolCallId\");\n\t\t}\n\t} catch {\n\t\treturn false;\n\t}\n\tswitch (barrier.status) {\n\t\tcase \"ready\":\n\t\t\treturn barrier.reason === \"closed_active_branch\" && pending.length === 0 && missing.length === 0;\n\t\tcase \"defer\":\n\t\t\tif (barrier.reason === \"pending_tool_calls\") {\n\t\t\t\treturn pending.length > 0 && missing.length === 0;\n\t\t\t}\n\t\t\tif (barrier.reason === \"missing_active_tail_results\") {\n\t\t\t\treturn missing.length > 0 && missing.every((id) => pending.includes(id));\n\t\t\t}\n\t\t\treturn false;\n\t\tcase \"fail_closed\":\n\t\t\treturn (\n\t\t\t\tbarrier.reason === \"invalid_pending_tool_ids\" ||\n\t\t\t\tbarrier.reason === \"inconsistent_integrity_report\" ||\n\t\t\t\tbarrier.reason === \"structural_integrity_failure\" ||\n\t\t\t\tbarrier.reason === \"unsafe_missing_tool_results\"\n\t\t\t);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\n/**\n * Authorize an in-memory commit attempt. A \"commit\" decision is not evidence of\n * durable persistence; the integration layer must still perform its own atomic CAS write.\n */\nexport function decideCompactionCommit(input: DecideCompactionCommitInput): CompactionCommitDecision {\n\tlet transaction: CompactionTransaction;\n\ttry {\n\t\ttransaction = createCompactionTransaction(input.transaction);\n\t} catch {\n\t\treturn Object.freeze({ decision: \"fail_closed\", reason: \"invalid_transaction\" });\n\t}\n\tif (!validBarrierResult(input.barrier)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (input.barrier.status === \"fail_closed\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"barrier_fail_closed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\tif (input.barrier.status === \"defer\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"defer\",\n\t\t\treason: \"barrier_defer\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\n\tlet currentRevision: SessionRevisionToken;\n\tlet currentSource: CompactionSourceIdentity;\n\tlet priorDigests: readonly string[];\n\ttry {\n\t\tcurrentRevision = createSessionRevisionToken(input.currentRevision);\n\t\tcurrentSource = createCompactionSourceIdentity(input.currentSource);\n\t\tif (\n\t\t\t!Array.isArray(input.priorCommittedSourceDigests) ||\n\t\t\tinput.priorCommittedSourceDigests.length > MAX_SOURCE_ENTRIES\n\t\t) {\n\t\t\tthrow new TypeError(\"priorCommittedSourceDigests must be a bounded array\");\n\t\t}\n\t\tpriorDigests = input.priorCommittedSourceDigests.map((digest, index) => {\n\t\t\tassertSha256(digest, `priorCommittedSourceDigests[${index}]`);\n\t\t\treturn digest;\n\t\t});\n\t} catch {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\n\tif (priorDigests.includes(transaction.source.sourceSha256)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"duplicate\",\n\t\t\treason: \"source_already_committed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameRevision(transaction.baseRevision, currentRevision)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"revision_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameSource(transaction.source, currentSource)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"source_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\treturn Object.freeze({\n\t\tdecision: \"commit\",\n\t\treason: \"exact_match\",\n\t\ttransactionId: transaction.transactionId,\n\t\trevision: currentRevision,\n\t\tsource: currentSource,\n\t});\n}\n\nconst COMPACTION_ENVELOPE_KEYS = [\n\t\"schemaVersion\",\n\t\"transactionId\",\n\t\"baseRevision\",\n\t\"source\",\n\t\"createdAt\",\n\t\"model\",\n\t\"summary\",\n\t\"summarySha256\",\n\t\"preserved\",\n] as const;\n\n/** Parse and deep-freeze a persisted schema-v2 compaction envelope. */\nexport function validateCompactionEnvelope(input: unknown): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope must be an object\");\n\tassertOnlyKeys(input, COMPACTION_ENVELOPE_KEYS, \"compaction envelope\");\n\tif (input.schemaVersion !== COMPACTION_ENVELOPE_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction envelope schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"envelope revision and source must identify the same session and active leaf\");\n\t}\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel: copyModelIdentity(input.model),\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: copyPreservedProvenance(input.preserved),\n\t});\n}\n\n/** Create provenance-bearing summary data only from an exact commit authorization. */\nexport function createCompactionEnvelope(input: CreateCompactionEnvelopeInput): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope input must be an object\");\n\tassertOnlyKeys(input, [\"transaction\", \"decision\", \"summary\", \"summarySha256\"], \"compaction envelope input\");\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tif (input.decision.decision !== \"commit\" || input.decision.reason !== \"exact_match\") {\n\t\tthrow new TypeError(\"a commit decision is required to create a compaction envelope\");\n\t}\n\tconst transaction = createCompactionTransaction(input.transaction);\n\tconst decisionRevision = createSessionRevisionToken(input.decision.revision);\n\tconst decisionSource = createCompactionSourceIdentity(input.decision.source);\n\tif (\n\t\tinput.decision.transactionId !== transaction.transactionId ||\n\t\t!sameRevision(transaction.baseRevision, decisionRevision) ||\n\t\t!sameSource(transaction.source, decisionSource)\n\t) {\n\t\tthrow new TypeError(\"commit decision does not match the compaction transaction\");\n\t}\n\n\treturn validateCompactionEnvelope({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: transaction.transactionId,\n\t\tbaseRevision: transaction.baseRevision,\n\t\tsource: transaction.source,\n\t\tcreatedAt: transaction.createdAt,\n\t\tmodel: transaction.model,\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: transaction.preserved,\n\t});\n}\n"]}
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../../src/core/compaction/transaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGX,sBAAsB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,kCAAkC,GAAa,CAAC;AAuB7D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC;CACvD;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAChC,sBAAsB,GACtB,oBAAoB,GACpB,6BAA6B,GAC7B,0BAA0B,GAC1B,+BAA+B,GAC/B,8BAA8B,GAC9B,6BAA6B,CAAC;AAEjC,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,wBAAwB,GACjC;IACA,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CACzC,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,iBAAiB,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CAC/C,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;CAChD,CAAC;AAEL,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4KAA4K;IAC5K,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAuOD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAkD/E;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAkCvF;AAUD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,qBAAqB,CA4BpG;AA+QD,wFAAwF;AACxF,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,sBAAsB,EAC9B,kBAAkB,EAAE,SAAS,MAAM,EAAE,GACnC,uBAAuB,CAgCzB;AAoED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,wBAAwB,CAmFnG;AAcD,uEAAuE;AACvE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA0B7E;AAED,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,kBAAkB,CA8BjG","sourcesContent":["import type { TranscriptIntegrityIssue, TranscriptIntegrityReport } from \"omk-agent-core\";\nimport { inspectTranscriptIntegrity } from \"omk-agent-core\";\nimport type {\n\tSessionIntegrityFinding,\n\tSessionIntegrityReasonCode,\n\tSessionIntegrityReport,\n} from \"../session-integrity.ts\";\n\nexport const SESSION_REVISION_TOKEN_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_TRANSACTION_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_ENVELOPE_SCHEMA_VERSION = 2 as const;\n\nconst MAX_METADATA_LENGTH = 256;\nconst MAX_FILE_IDENTITY_LENGTH = 32;\nconst MAX_SOURCE_ENTRIES = 4096;\nconst MAX_PROVENANCE_IDS = 1024;\nconst MAX_LATEST_INTENT_LENGTH = 16_384;\nconst MAX_SUMMARY_LENGTH = 262_144;\nconst MAX_PROVENANCE_TEXT_LENGTH = 4096;\nconst MAX_NEXT_ACTION_LENGTH = 4096;\nconst MAX_MODEL_HISTORY_ENTRIES = 256;\nconst EMPTY_SHA256 = \"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\";\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst DECIMAL_STRING_PATTERN = /^[0-9]+$/u;\nconst CANONICAL_TIMESTAMP_PATTERN = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst METADATA_CONTROL_PATTERN = /[\\u0000-\\u001f\\u007f]/u;\nconst CONTENT_CONTROL_PATTERN = /[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/u;\nconst CREDENTIAL_SHAPE_PATTERN =\n\t/-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\\s\"'`:])bearer\\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\\s*[:=]\\s*[\"']?[^\\s\"',;]{3,}|(?<![A-Za-z0-9])(?:sk|ghp|gho|ghu|ghs|github_pat|xox[baprs])[-_][A-Za-z0-9_-]{8,}|(?<![A-Za-z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])|(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9_-])gAAAAA[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9])v2:[A-Za-z0-9_+/=-]{20,}/iu;\nconst REDACTED_ASSIGNMENT_PATTERN =\n\t/\\s*[:=]\\s*(?:\"\\[REDACTED\\]\"(?![A-Za-z0-9_+/-])|'\\[REDACTED\\]'(?![A-Za-z0-9_+/-])|\\[REDACTED\\](?![A-Za-z0-9._~+/-]))/giu;\nconst CREDENTIAL_SHAPE_MASK_PATTERN = new RegExp(CREDENTIAL_SHAPE_PATTERN.source, \"giu\");\n\nexport function containsCredentialShape(value: string): boolean {\n\treturn CREDENTIAL_SHAPE_PATTERN.test(value.replace(REDACTED_ASSIGNMENT_PATTERN, \"\"));\n}\n\n/**\n * Deterministically mask credential-shaped spans so sanitized text always\n * satisfies this module's fail-closed content validators. Producers (compaction\n * summaries, preserved provenance) must route generated text through this\n * before validation; otherwise a paranoid validator match would abort the\n * entire compaction and strand an overflowed session.\n */\nexport function redactCredentialShapedContent(value: string): string {\n\tlet result = value;\n\tfor (let pass = 0; pass < 8 && containsCredentialShape(result); pass += 1) {\n\t\tresult = result.replace(CREDENTIAL_SHAPE_MASK_PATTERN, \"[REDACTED]\");\n\t}\n\treturn containsCredentialShape(result) ? \"[REDACTED]\" : result;\n}\n\nexport interface SessionFileIdentity {\n\treadonly dev: string;\n\treadonly ino: string;\n}\n\nexport interface SessionRevisionToken {\n\treadonly schemaVersion: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface SessionRevisionTokenInput {\n\treadonly schemaVersion?: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface CompactionSourceIdentity {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionSourceIdentityInput {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionModelIdentity {\n\treadonly provider: string;\n\treadonly id: string;\n}\n\nexport interface CompactionModelHistoryEntry {\n\treadonly entryId: string;\n\treadonly provider: string;\n\treadonly modelId: string;\n}\n\nexport interface CompactionPreservedProvenance {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionPreservedProvenanceInput {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionTransaction {\n\treadonly schemaVersion: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CompactionTransactionInput {\n\treadonly schemaVersion?: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionTokenInput;\n\treadonly source: CompactionSourceIdentityInput;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenanceInput;\n}\n\nexport type CompactionBarrierStatus = \"ready\" | \"defer\" | \"fail_closed\";\nexport type CompactionBarrierReason =\n\t| \"closed_active_branch\"\n\t| \"pending_tool_calls\"\n\t| \"missing_active_tail_results\"\n\t| \"invalid_pending_tool_ids\"\n\t| \"inconsistent_integrity_report\"\n\t| \"structural_integrity_failure\"\n\t| \"unsafe_missing_tool_results\";\n\nexport interface CompactionBarrierResult {\n\treadonly status: CompactionBarrierStatus;\n\treadonly reason: CompactionBarrierReason;\n\treadonly pendingToolCallIds: readonly string[];\n\treadonly missingToolCallIds: readonly string[];\n}\n\nexport type CompactionCommitDecision =\n\t| {\n\t\t\treadonly decision: \"commit\";\n\t\t\treadonly reason: \"exact_match\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly revision: SessionRevisionToken;\n\t\t\treadonly source: CompactionSourceIdentity;\n\t  }\n\t| {\n\t\t\treadonly decision: \"stale\";\n\t\t\treadonly reason: \"revision_mismatch\" | \"source_mismatch\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"duplicate\";\n\t\t\treadonly reason: \"source_already_committed\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"defer\";\n\t\t\treadonly reason: \"barrier_defer\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly barrierReason: CompactionBarrierReason;\n\t  }\n\t| {\n\t\t\treadonly decision: \"fail_closed\";\n\t\t\treadonly reason: \"barrier_fail_closed\" | \"invalid_transaction\" | \"invalid_commit_input\";\n\t\t\treadonly transactionId?: string;\n\t\t\treadonly barrierReason?: CompactionBarrierReason;\n\t  };\n\nexport interface DecideCompactionCommitInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly currentRevision: SessionRevisionToken;\n\treadonly currentSource: CompactionSourceIdentity;\n\treadonly barrier: CompactionBarrierResult;\n\treadonly priorCommittedSourceDigests: readonly string[];\n}\n\nexport interface CompactionEnvelope {\n\treadonly schemaVersion: typeof COMPACTION_ENVELOPE_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly summary: string;\n\treadonly summarySha256: string;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CreateCompactionEnvelopeInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly decision: CompactionCommitDecision;\n\treadonly summary: string;\n\t/** Caller-supplied lowercase 64-hex SHA-256 digest of `summary`. OMK does not compute or verify the digest here; the caller is responsible for computing and binding it. */\n\treadonly summarySha256: string;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction assertOnlyKeys(value: Record<string, unknown>, allowed: readonly string[], field: string): void {\n\tconst allowedKeys = new Set(allowed);\n\tif (Object.keys(value).some((key) => !allowedKeys.has(key))) {\n\t\tthrow new TypeError(`${field} contains unsupported metadata`);\n\t}\n}\n\nfunction assertSafeInteger(value: unknown, field: string): asserts value is number {\n\tif (!Number.isSafeInteger(value) || (value as number) < 0) {\n\t\tthrow new TypeError(`${field} must be a non-negative safe integer`);\n\t}\n}\n\nfunction assertMetadataText(value: unknown, field: string, maxLength = MAX_METADATA_LENGTH): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tMETADATA_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded metadata without control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped metadata`);\n\t}\n}\n\nfunction assertContentText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertSha256(value: unknown, field: string): asserts value is string {\n\tif (typeof value !== \"string\" || !SHA256_PATTERN.test(value)) {\n\t\tthrow new TypeError(`${field} must be a lowercase 64-hex SHA-256 digest`);\n\t}\n}\n\nfunction assertCanonicalTimestamp(value: unknown): asserts value is string {\n\tassertMetadataText(value, \"createdAt\");\n\tif (!CANONICAL_TIMESTAMP_PATTERN.test(value)) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n\tconst parsed = new Date(value);\n\tif (!Number.isFinite(parsed.valueOf()) || parsed.toISOString() !== value) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n}\n\nfunction copyFileIdentity(value: unknown): SessionFileIdentity | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isRecord(value)) throw new TypeError(\"fileIdentity must be an object\");\n\tassertOnlyKeys(value, [\"dev\", \"ino\"], \"fileIdentity\");\n\tfor (const field of [\"dev\", \"ino\"] as const) {\n\t\tconst part = value[field];\n\t\tif (\n\t\t\ttypeof part !== \"string\" ||\n\t\t\tpart.length === 0 ||\n\t\t\tpart.length > MAX_FILE_IDENTITY_LENGTH ||\n\t\t\t!DECIMAL_STRING_PATTERN.test(part)\n\t\t) {\n\t\t\tthrow new TypeError(`fileIdentity.${field} must be a bounded decimal string`);\n\t\t}\n\t}\n\treturn Object.freeze({ dev: value.dev as string, ino: value.ino as string });\n}\n\nfunction copyIdArray(value: unknown, field: string, maxItems: number): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertMetadataText(item, `${field}[${index}]`);\n\t\treturn item;\n\t});\n\tif (new Set(copy).size !== copy.length) throw new TypeError(`${field} must contain unique IDs`);\n\treturn Object.freeze(copy);\n}\n\nfunction assertProvenanceText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertNullableMetadataText(\n\tvalue: unknown,\n\tfield: string,\n\tmaxLength = MAX_METADATA_LENGTH,\n): asserts value is string | null {\n\tif (value === null) return;\n\tassertMetadataText(value, field, maxLength);\n}\n\nfunction copyTextArray(\n\tvalue: unknown,\n\tfield: string,\n\tmaxItems: number,\n\tmaxLength: number,\n\trequireUnique: boolean,\n): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertProvenanceText(item, `${field}[${index}]`, maxLength);\n\t\treturn item;\n\t});\n\tif (requireUnique && new Set(copy).size !== copy.length) {\n\t\tthrow new TypeError(`${field} must contain unique entries`);\n\t}\n\treturn Object.freeze(copy);\n}\n\nfunction copyModelHistory(value: unknown): readonly CompactionModelHistoryEntry[] {\n\tif (!Array.isArray(value) || value.length > MAX_MODEL_HISTORY_ENTRIES) {\n\t\tthrow new TypeError(\"preserved.modelHistory must be a bounded array\");\n\t}\n\tconst seenEntryIds = new Set<string>();\n\tconst copy = value.map((item, index) => {\n\t\tif (!isRecord(item)) throw new TypeError(`preserved.modelHistory[${index}] must be an object`);\n\t\tassertOnlyKeys(item, [\"entryId\", \"provider\", \"modelId\"], `preserved.modelHistory[${index}]`);\n\t\tassertMetadataText(item.entryId, `preserved.modelHistory[${index}].entryId`);\n\t\tassertMetadataText(item.provider, `preserved.modelHistory[${index}].provider`);\n\t\tassertMetadataText(item.modelId, `preserved.modelHistory[${index}].modelId`);\n\t\tconst entryId = item.entryId as string;\n\t\tif (seenEntryIds.has(entryId)) throw new TypeError(\"preserved.modelHistory must contain unique entryId values\");\n\t\tseenEntryIds.add(entryId);\n\t\treturn Object.freeze({ entryId, provider: item.provider as string, modelId: item.modelId as string });\n\t});\n\treturn Object.freeze(copy);\n}\n\nfunction copyPreservedProvenance(input: unknown): CompactionPreservedProvenance {\n\tif (!isRecord(input)) throw new TypeError(\"preserved must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"latestIntent\",\n\t\t\t\"openTasks\",\n\t\t\t\"laneIds\",\n\t\t\t\"acceptancePredicateIds\",\n\t\t\t\"evidenceReceiptIds\",\n\t\t\t\"blockerReasons\",\n\t\t\t\"repairEventIds\",\n\t\t\t\"branch\",\n\t\t\t\"worktree\",\n\t\t\t\"modelHistory\",\n\t\t\t\"nextAction\",\n\t\t],\n\t\t\"preserved\",\n\t);\n\tassertProvenanceText(input.latestIntent, \"preserved.latestIntent\", MAX_LATEST_INTENT_LENGTH);\n\tconst openTasks = copyTextArray(\n\t\tinput.openTasks,\n\t\t\"preserved.openTasks\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst laneIds = copyTextArray(input.laneIds, \"preserved.laneIds\", MAX_PROVENANCE_IDS, MAX_METADATA_LENGTH, true);\n\tconst acceptancePredicateIds = copyTextArray(\n\t\tinput.acceptancePredicateIds,\n\t\t\"preserved.acceptancePredicateIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst evidenceReceiptIds = copyTextArray(\n\t\tinput.evidenceReceiptIds,\n\t\t\"preserved.evidenceReceiptIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst blockerReasons = copyTextArray(\n\t\tinput.blockerReasons,\n\t\t\"preserved.blockerReasons\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst repairEventIds = copyTextArray(\n\t\tinput.repairEventIds,\n\t\t\"preserved.repairEventIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tassertNullableMetadataText(input.branch, \"preserved.branch\", MAX_PROVENANCE_TEXT_LENGTH);\n\tassertNullableMetadataText(input.worktree, \"preserved.worktree\", MAX_PROVENANCE_TEXT_LENGTH);\n\tconst modelHistory = copyModelHistory(input.modelHistory);\n\tassertProvenanceText(input.nextAction, \"preserved.nextAction\", MAX_NEXT_ACTION_LENGTH);\n\treturn Object.freeze({\n\t\tlatestIntent: input.latestIntent,\n\t\topenTasks,\n\t\tlaneIds,\n\t\tacceptancePredicateIds,\n\t\tevidenceReceiptIds,\n\t\tblockerReasons,\n\t\trepairEventIds,\n\t\tbranch: input.branch,\n\t\tworktree: input.worktree,\n\t\tmodelHistory,\n\t\tnextAction: input.nextAction,\n\t});\n}\n\nexport function createSessionRevisionToken(input: unknown): SessionRevisionToken {\n\tif (!isRecord(input)) throw new TypeError(\"session revision token must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"schemaVersion\",\n\t\t\t\"sessionId\",\n\t\t\t\"completeBytes\",\n\t\t\t\"recordCount\",\n\t\t\t\"leafId\",\n\t\t\t\"lastEntryId\",\n\t\t\t\"completePrefixSha256\",\n\t\t\t\"fileIdentity\",\n\t\t],\n\t\t\"session revision token\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== SESSION_REVISION_TOKEN_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported session revision token schema version\");\n\t}\n\tassertMetadataText(input.sessionId, \"sessionId\");\n\tassertSafeInteger(input.completeBytes, \"completeBytes\");\n\tassertSafeInteger(input.recordCount, \"recordCount\");\n\tif (input.leafId !== null) assertMetadataText(input.leafId, \"leafId\");\n\tif (input.lastEntryId !== null) assertMetadataText(input.lastEntryId, \"lastEntryId\");\n\tassertSha256(input.completePrefixSha256, \"completePrefixSha256\");\n\n\tif ((input.completeBytes === 0) !== (input.recordCount === 0)) {\n\t\tthrow new TypeError(\"completeBytes and recordCount must both be empty or both be non-empty\");\n\t}\n\tif (input.recordCount === 0 && (input.leafId !== null || input.lastEntryId !== null)) {\n\t\tthrow new TypeError(\"an empty revision cannot identify entries\");\n\t}\n\tif (input.leafId !== null && input.lastEntryId === null) {\n\t\tthrow new TypeError(\"leafId requires a lastEntryId\");\n\t}\n\tif (input.completeBytes === 0 && input.completePrefixSha256 !== EMPTY_SHA256) {\n\t\tthrow new TypeError(\"an empty revision must use the SHA-256 digest of empty bytes\");\n\t}\n\n\tconst fileIdentity = copyFileIdentity(input.fileIdentity);\n\treturn Object.freeze({\n\t\tschemaVersion: SESSION_REVISION_TOKEN_SCHEMA_VERSION,\n\t\tsessionId: input.sessionId,\n\t\tcompleteBytes: input.completeBytes,\n\t\trecordCount: input.recordCount,\n\t\tleafId: input.leafId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tcompletePrefixSha256: input.completePrefixSha256,\n\t\t...(fileIdentity === undefined ? {} : { fileIdentity }),\n\t});\n}\n\nexport function createCompactionSourceIdentity(input: unknown): CompactionSourceIdentity {\n\tif (!isRecord(input)) throw new TypeError(\"compaction source identity must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"sessionId\", \"entryIds\", \"firstEntryId\", \"lastEntryId\", \"sourceSha256\", \"activeLeafId\", \"messageCount\"],\n\t\t\"compaction source identity\",\n\t);\n\tassertMetadataText(input.sessionId, \"source.sessionId\");\n\tconst entryIds = copyIdArray(input.entryIds, \"source.entryIds\", MAX_SOURCE_ENTRIES);\n\tif (entryIds.length === 0) throw new TypeError(\"source.entryIds must be non-empty\");\n\tassertMetadataText(input.firstEntryId, \"source.firstEntryId\");\n\tassertMetadataText(input.lastEntryId, \"source.lastEntryId\");\n\tassertMetadataText(input.activeLeafId, \"source.activeLeafId\");\n\tassertSha256(input.sourceSha256, \"source.sourceSha256\");\n\tassertSafeInteger(input.messageCount, \"source.messageCount\");\n\tif (input.messageCount > entryIds.length) {\n\t\tthrow new TypeError(\"source.messageCount cannot exceed source.entryIds length\");\n\t}\n\tif (input.firstEntryId !== entryIds[0] || input.lastEntryId !== entryIds.at(-1)) {\n\t\tthrow new TypeError(\"source first/last IDs must match the ordered entry IDs\");\n\t}\n\t// R30 P2: active leaf must be the last entry in the source range\n\tif (input.activeLeafId !== input.lastEntryId) {\n\t\tthrow new TypeError(\"source.activeLeafId must match source.lastEntryId\");\n\t}\n\treturn Object.freeze({\n\t\tsessionId: input.sessionId,\n\t\tentryIds,\n\t\tfirstEntryId: input.firstEntryId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tsourceSha256: input.sourceSha256,\n\t\tactiveLeafId: input.activeLeafId,\n\t\tmessageCount: input.messageCount,\n\t});\n}\n\nfunction copyModelIdentity(value: unknown): CompactionModelIdentity {\n\tif (!isRecord(value)) throw new TypeError(\"model must be an object\");\n\tassertOnlyKeys(value, [\"provider\", \"id\"], \"model\");\n\tassertMetadataText(value.provider, \"model.provider\");\n\tassertMetadataText(value.id, \"model.id\");\n\treturn Object.freeze({ provider: value.provider, id: value.id });\n}\n\nexport function createCompactionTransaction(input: CompactionTransactionInput): CompactionTransaction {\n\tif (!isRecord(input)) throw new TypeError(\"compaction transaction must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"schemaVersion\", \"transactionId\", \"baseRevision\", \"source\", \"createdAt\", \"model\", \"preserved\"],\n\t\t\"compaction transaction\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== COMPACTION_TRANSACTION_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction transaction schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"transaction revision and source must identify the same session and active leaf\");\n\t}\n\tconst model = copyModelIdentity(input.model);\n\tconst preserved = copyPreservedProvenance(input.preserved);\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_TRANSACTION_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel,\n\t\tpreserved,\n\t});\n}\n\nconst KNOWN_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"trailing_fragment\",\n\t\"invalid_utf8\",\n\t\"malformed_json\",\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n\t\"invalid_entry\",\n\t\"unsupported_entry\",\n\t\"duplicate_entry_id\",\n\t\"missing_parent\",\n\t\"self_cycle\",\n\t\"parent_cycle\",\n\t\"active_leaf_missing\",\n\t\"compaction_first_kept_not_ancestor\",\n\t\"active_branch_context_invalid\",\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst TRANSCRIPT_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst HEADER_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n]);\nconst TRANSCRIPT_ISSUE_KINDS = new Set<string>([\n\t\"missing_result\",\n\t\"duplicate_result\",\n\t\"orphan_result\",\n\t\"duplicate_call_id\",\n\t\"interleaved_non_result\",\n]);\n\nfunction messageToolCalls(message: SessionIntegrityReport[\"activeMessages\"][number]): readonly {\n\treadonly id: string;\n\treadonly name: string;\n}[] {\n\tif (message.role !== \"assistant\") return [];\n\treturn message.content.flatMap((block) => (block.type === \"toolCall\" ? [{ id: block.id, name: block.name }] : []));\n}\n\nfunction transcriptFindingReason(issue: TranscriptIntegrityIssue): SessionIntegrityReasonCode {\n\tswitch (issue.kind) {\n\t\tcase \"missing_result\":\n\t\t\treturn \"transcript_missing_result\";\n\t\tcase \"duplicate_result\":\n\t\t\treturn \"transcript_duplicate_result\";\n\t\tcase \"orphan_result\":\n\t\t\treturn \"transcript_orphan_result\";\n\t\tcase \"duplicate_call_id\":\n\t\t\treturn \"transcript_duplicate_call_id\";\n\t\tcase \"interleaved_non_result\":\n\t\t\treturn \"transcript_interleaved_non_result\";\n\t}\n}\n\nfunction issueIdentity(issue: {\n\treadonly kind: string;\n\treadonly toolCallId: string;\n\treadonly toolName?: string;\n}): string {\n\treturn JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null]);\n}\n\nfunction findingIdentity(finding: SessionIntegrityFinding): string {\n\treturn JSON.stringify([\n\t\tfinding.reason,\n\t\tfinding.line ?? null,\n\t\tfinding.entryId ?? null,\n\t\tfinding.parentId ?? null,\n\t\tfinding.cycleEntryIds ?? null,\n\t\tfinding.toolCallId ?? null,\n\t\tfinding.toolName ?? null,\n\t]);\n}\n\nfunction sameMultiset(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst counts = new Map<string, number>();\n\tfor (const item of left) counts.set(item, (counts.get(item) ?? 0) + 1);\n\tfor (const item of right) {\n\t\tconst count = counts.get(item);\n\t\tif (count === undefined) return false;\n\t\tif (count === 1) counts.delete(item);\n\t\telse counts.set(item, count - 1);\n\t}\n\treturn counts.size === 0;\n}\n\nfunction validByteDigest(value: unknown, completePrefix: boolean): boolean {\n\tif (!isRecord(value)) return false;\n\tconst keys = completePrefix ? [\"byteCount\", \"sha256\", \"lineCount\"] : [\"byteCount\", \"sha256\"];\n\tif (Object.keys(value).some((key) => !keys.includes(key))) return false;\n\tif (!Number.isSafeInteger(value.byteCount) || (value.byteCount as number) < 0) return false;\n\tif (typeof value.sha256 !== \"string\" || !SHA256_PATTERN.test(value.sha256)) return false;\n\tif (!completePrefix) return true;\n\treturn Number.isSafeInteger(value.lineCount) && (value.lineCount as number) >= 0;\n}\n\nfunction validFinding(value: unknown): value is SessionIntegrityFinding {\n\tif (!isRecord(value) || typeof value.reason !== \"string\") return false;\n\tif (!KNOWN_FINDING_REASONS.has(value.reason as SessionIntegrityReasonCode)) return false;\n\tconst allowed = [\"reason\", \"line\", \"entryId\", \"parentId\", \"cycleEntryIds\", \"toolCallId\", \"toolName\"];\n\tif (Object.keys(value).some((key) => !allowed.includes(key))) return false;\n\tif (value.line !== undefined && (!Number.isSafeInteger(value.line) || (value.line as number) < 1)) return false;\n\tfor (const field of [\"entryId\", \"parentId\", \"toolCallId\", \"toolName\"] as const) {\n\t\tif (value[field] !== undefined && typeof value[field] !== \"string\") return false;\n\t}\n\treturn (\n\t\tvalue.cycleEntryIds === undefined ||\n\t\t(Array.isArray(value.cycleEntryIds) && value.cycleEntryIds.every((item) => typeof item === \"string\"))\n\t);\n}\n\nfunction validTranscriptIssue(value: unknown): value is TranscriptIntegrityIssue {\n\tif (!isRecord(value) || !TRANSCRIPT_ISSUE_KINDS.has(value.kind as string)) return false;\n\tif (typeof value.toolCallId !== \"string\" || value.toolCallId.length === 0) return false;\n\tif (value.toolName !== undefined && typeof value.toolName !== \"string\") return false;\n\treturn Object.keys(value).every((key) => [\"kind\", \"toolCallId\", \"toolName\"].includes(key));\n}\n\nfunction activeBranchIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!Array.isArray(report.entries) || !Array.isArray(report.activeBranch) || !Array.isArray(report.activeMessages)) {\n\t\treturn false;\n\t}\n\tconst entryIds = new Set<string>();\n\tfor (const entry of report.entries) {\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || entry.id.length === 0) return false;\n\t\tentryIds.add(entry.id);\n\t}\n\tif (report.activeLeafId === null) return report.activeBranch.length === 0;\n\tif (typeof report.activeLeafId !== \"string\" || report.activeBranch.length === 0) return false;\n\tconst branchIds = new Set<string>();\n\tfor (let index = 0; index < report.activeBranch.length; index++) {\n\t\tconst entry = report.activeBranch[index];\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || branchIds.has(entry.id) || !entryIds.has(entry.id)) {\n\t\t\treturn false;\n\t\t}\n\t\tbranchIds.add(entry.id);\n\t\tconst expectedParent = index === 0 ? null : report.activeBranch[index - 1]?.id;\n\t\tif (entry.parentId !== expectedParent) return false;\n\t}\n\treturn report.activeBranch.at(-1)?.id === report.activeLeafId;\n}\n\nfunction reportIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!isRecord(report)) return false;\n\tif (!validByteDigest(report.source, false) || !validByteDigest(report.completePrefix, true)) return false;\n\tif (report.trailingFragment !== null && !validByteDigest(report.trailingFragment, false)) return false;\n\tconst trailingBytes = report.trailingFragment?.byteCount ?? 0;\n\tif (report.source.byteCount !== report.completePrefix.byteCount + trailingBytes) return false;\n\tif (report.completePrefix.lineCount > report.completePrefix.byteCount) return false;\n\tif (report.completePrefix.byteCount === 0 && report.completePrefix.sha256 !== EMPTY_SHA256) return false;\n\tif (report.trailingFragment === null && report.source.sha256 !== report.completePrefix.sha256) return false;\n\tif (!Array.isArray(report.findings) || !report.findings.every(validFinding)) return false;\n\tif (typeof report.ok !== \"boolean\" || report.ok !== (report.findings.length === 0)) return false;\n\n\tconst trailingFindings = report.findings.filter((finding) => finding.reason === \"trailing_fragment\");\n\tif (\n\t\ttrailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||\n\t\ttrailingFindings.some((finding) => Object.keys(finding).length !== 1)\n\t) {\n\t\treturn false;\n\t}\n\tif (report.header === null) {\n\t\tif (!report.findings.some((finding) => HEADER_FINDING_REASONS.has(finding.reason))) return false;\n\t} else if (!isRecord(report.header) || typeof report.header.id !== \"string\" || report.header.id.length === 0) {\n\t\treturn false;\n\t}\n\tif (!activeBranchIsConsistent(report)) return false;\n\n\tconst transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));\n\tif (report.transcript === null) {\n\t\t// R30 P1-2: null transcript can never produce ready.\n\t\t// A producer-consistent null transcript requires activeMessages to be empty\n\t\t// and a structural finding to explain why no transcript was produced.\n\t\tif (report.activeMessages.length > 0) return false;\n\t\tif (transcriptFindings.length !== 0) return false;\n\t\tconst hasStructuralFinding = report.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t);\n\t\treturn hasStructuralFinding;\n\t}\n\tif (!isRecord(report.transcript) || !Array.isArray(report.transcript.issues)) return false;\n\tif (!report.transcript.issues.every(validTranscriptIssue)) return false;\n\tif (report.transcript.ok !== (report.transcript.issues.length === 0)) return false;\n\tif (\n\t\treport.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\tlet inspected: TranscriptIntegrityReport;\n\ttry {\n\t\tinspected = inspectTranscriptIntegrity(report.activeMessages);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (\n\t\tinspected.ok !== report.transcript.ok ||\n\t\t!sameMultiset(inspected.issues.map(issueIdentity), report.transcript.issues.map(issueIdentity))\n\t) {\n\t\treturn false;\n\t}\n\treturn sameMultiset(\n\t\ttranscriptFindings.map(findingIdentity),\n\t\tinspected.issues.map((issue) =>\n\t\t\tJSON.stringify([\n\t\t\t\ttranscriptFindingReason(issue),\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tissue.toolCallId,\n\t\t\t\tissue.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t);\n}\n\nfunction missingCallsAreAtActiveTail(report: SessionIntegrityReport, missingIds: ReadonlySet<string>): boolean {\n\tlet lastAssistantIndex = -1;\n\tfor (let index = report.activeMessages.length - 1; index >= 0; index--) {\n\t\tif (report.activeMessages[index]?.role === \"assistant\") {\n\t\t\tlastAssistantIndex = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (lastAssistantIndex === -1) return false;\n\tconst assistant = report.activeMessages[lastAssistantIndex];\n\tif (!assistant || assistant.role !== \"assistant\") return false;\n\tconst tailCallIds = new Set(messageToolCalls(assistant).map((call) => call.id));\n\tif ([...missingIds].some((id) => !tailCallIds.has(id))) return false;\n\tfor (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {\n\t\tconst message = report.activeMessages[index];\n\t\tif (!message || message.role !== \"toolResult\" || !tailCallIds.has(message.toolCallId)) return false;\n\t}\n\treturn true;\n}\n\nfunction barrierResult(\n\tstatus: CompactionBarrierStatus,\n\treason: CompactionBarrierReason,\n\tpendingToolCallIds: readonly string[],\n\tmissingToolCallIds: readonly string[] = [],\n): CompactionBarrierResult {\n\treturn Object.freeze({\n\t\tstatus,\n\t\treason,\n\t\tpendingToolCallIds: Object.freeze([...pendingToolCallIds]),\n\t\tmissingToolCallIds: Object.freeze([...missingToolCallIds]),\n\t});\n}\n\n/** Derive a closed-turn compaction barrier without repairing or mutating the report. */\nexport function evaluateCompactionBarrier(\n\treport: SessionIntegrityReport,\n\tpendingToolCallIds: readonly string[],\n): CompactionBarrierResult {\n\tlet pending: readonly string[];\n\ttry {\n\t\tpending = copyIdArray(pendingToolCallIds, \"pendingToolCallIds\", MAX_PROVENANCE_IDS);\n\t} catch {\n\t\treturn barrierResult(\"fail_closed\", \"invalid_pending_tool_ids\", []);\n\t}\n\tif (!reportIsConsistent(report)) {\n\t\treturn barrierResult(\"fail_closed\", \"inconsistent_integrity_report\", pending);\n\t}\n\tconst blockingFinding = report.findings.find((finding) => finding.reason !== \"transcript_missing_result\");\n\tconst blockingIssue = report.transcript?.issues.find((issue) => issue.kind !== \"missing_result\");\n\tif (blockingFinding || blockingIssue) {\n\t\treturn barrierResult(\"fail_closed\", \"structural_integrity_failure\", pending);\n\t}\n\n\tconst missing = Object.freeze(\n\t\t(report.transcript?.issues ?? [])\n\t\t\t.filter((issue) => issue.kind === \"missing_result\")\n\t\t\t.map((issue) => issue.toolCallId),\n\t);\n\tconst missingSet = new Set(missing);\n\tconst pendingSet = new Set(pending);\n\tif (\n\t\tmissing.length > 0 &&\n\t\t(!missingCallsAreAtActiveTail(report, missingSet) || missing.some((toolCallId) => !pendingSet.has(toolCallId)))\n\t) {\n\t\treturn barrierResult(\"fail_closed\", \"unsafe_missing_tool_results\", pending, missing);\n\t}\n\tif (missing.length > 0) return barrierResult(\"defer\", \"missing_active_tail_results\", pending, missing);\n\tif (pending.length > 0) return barrierResult(\"defer\", \"pending_tool_calls\", pending);\n\treturn barrierResult(\"ready\", \"closed_active_branch\", []);\n}\n\nfunction sameRevision(left: SessionRevisionToken, right: SessionRevisionToken): boolean {\n\treturn (\n\t\tleft.schemaVersion === right.schemaVersion &&\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.completeBytes === right.completeBytes &&\n\t\tleft.recordCount === right.recordCount &&\n\t\tleft.leafId === right.leafId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.completePrefixSha256 === right.completePrefixSha256 &&\n\t\tleft.fileIdentity?.dev === right.fileIdentity?.dev &&\n\t\tleft.fileIdentity?.ino === right.fileIdentity?.ino\n\t);\n}\n\nfunction sameSource(left: CompactionSourceIdentity, right: CompactionSourceIdentity): boolean {\n\treturn (\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.firstEntryId === right.firstEntryId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.sourceSha256 === right.sourceSha256 &&\n\t\tleft.activeLeafId === right.activeLeafId &&\n\t\tleft.messageCount === right.messageCount &&\n\t\tleft.entryIds.length === right.entryIds.length &&\n\t\tleft.entryIds.every((id, index) => id === right.entryIds[index])\n\t);\n}\n\nfunction validBarrierResult(barrier: CompactionBarrierResult): boolean {\n\tif (!isRecord(barrier) || !Array.isArray(barrier.pendingToolCallIds) || !Array.isArray(barrier.missingToolCallIds)) {\n\t\treturn false;\n\t}\n\tconst pending = barrier.pendingToolCallIds;\n\tconst missing = barrier.missingToolCallIds;\n\t// R30 P1-3: validate all IDs are bounded, unique, safe metadata text\n\ttry {\n\t\tfor (const ids of [pending, missing]) {\n\t\t\tif (ids.length > MAX_PROVENANCE_IDS) return false;\n\t\t\tif (new Set(ids).size !== ids.length) return false;\n\t\t\tfor (const id of ids) assertMetadataText(id, \"barrier toolCallId\");\n\t\t}\n\t} catch {\n\t\treturn false;\n\t}\n\tswitch (barrier.status) {\n\t\tcase \"ready\":\n\t\t\treturn barrier.reason === \"closed_active_branch\" && pending.length === 0 && missing.length === 0;\n\t\tcase \"defer\":\n\t\t\tif (barrier.reason === \"pending_tool_calls\") {\n\t\t\t\treturn pending.length > 0 && missing.length === 0;\n\t\t\t}\n\t\t\tif (barrier.reason === \"missing_active_tail_results\") {\n\t\t\t\treturn missing.length > 0 && missing.every((id) => pending.includes(id));\n\t\t\t}\n\t\t\treturn false;\n\t\tcase \"fail_closed\":\n\t\t\treturn (\n\t\t\t\tbarrier.reason === \"invalid_pending_tool_ids\" ||\n\t\t\t\tbarrier.reason === \"inconsistent_integrity_report\" ||\n\t\t\t\tbarrier.reason === \"structural_integrity_failure\" ||\n\t\t\t\tbarrier.reason === \"unsafe_missing_tool_results\"\n\t\t\t);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\n/**\n * Authorize an in-memory commit attempt. A \"commit\" decision is not evidence of\n * durable persistence; the integration layer must still perform its own atomic CAS write.\n */\nexport function decideCompactionCommit(input: DecideCompactionCommitInput): CompactionCommitDecision {\n\tlet transaction: CompactionTransaction;\n\ttry {\n\t\ttransaction = createCompactionTransaction(input.transaction);\n\t} catch {\n\t\treturn Object.freeze({ decision: \"fail_closed\", reason: \"invalid_transaction\" });\n\t}\n\tif (!validBarrierResult(input.barrier)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (input.barrier.status === \"fail_closed\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"barrier_fail_closed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\tif (input.barrier.status === \"defer\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"defer\",\n\t\t\treason: \"barrier_defer\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\n\tlet currentRevision: SessionRevisionToken;\n\tlet currentSource: CompactionSourceIdentity;\n\tlet priorDigests: readonly string[];\n\ttry {\n\t\tcurrentRevision = createSessionRevisionToken(input.currentRevision);\n\t\tcurrentSource = createCompactionSourceIdentity(input.currentSource);\n\t\tif (\n\t\t\t!Array.isArray(input.priorCommittedSourceDigests) ||\n\t\t\tinput.priorCommittedSourceDigests.length > MAX_SOURCE_ENTRIES\n\t\t) {\n\t\t\tthrow new TypeError(\"priorCommittedSourceDigests must be a bounded array\");\n\t\t}\n\t\tpriorDigests = input.priorCommittedSourceDigests.map((digest, index) => {\n\t\t\tassertSha256(digest, `priorCommittedSourceDigests[${index}]`);\n\t\t\treturn digest;\n\t\t});\n\t} catch {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\n\tif (priorDigests.includes(transaction.source.sourceSha256)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"duplicate\",\n\t\t\treason: \"source_already_committed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameRevision(transaction.baseRevision, currentRevision)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"revision_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameSource(transaction.source, currentSource)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"source_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\treturn Object.freeze({\n\t\tdecision: \"commit\",\n\t\treason: \"exact_match\",\n\t\ttransactionId: transaction.transactionId,\n\t\trevision: currentRevision,\n\t\tsource: currentSource,\n\t});\n}\n\nconst COMPACTION_ENVELOPE_KEYS = [\n\t\"schemaVersion\",\n\t\"transactionId\",\n\t\"baseRevision\",\n\t\"source\",\n\t\"createdAt\",\n\t\"model\",\n\t\"summary\",\n\t\"summarySha256\",\n\t\"preserved\",\n] as const;\n\n/** Parse and deep-freeze a persisted schema-v2 compaction envelope. */\nexport function validateCompactionEnvelope(input: unknown): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope must be an object\");\n\tassertOnlyKeys(input, COMPACTION_ENVELOPE_KEYS, \"compaction envelope\");\n\tif (input.schemaVersion !== COMPACTION_ENVELOPE_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction envelope schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"envelope revision and source must identify the same session and active leaf\");\n\t}\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel: copyModelIdentity(input.model),\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: copyPreservedProvenance(input.preserved),\n\t});\n}\n\n/** Create provenance-bearing summary data only from an exact commit authorization. */\nexport function createCompactionEnvelope(input: CreateCompactionEnvelopeInput): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope input must be an object\");\n\tassertOnlyKeys(input, [\"transaction\", \"decision\", \"summary\", \"summarySha256\"], \"compaction envelope input\");\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tif (input.decision.decision !== \"commit\" || input.decision.reason !== \"exact_match\") {\n\t\tthrow new TypeError(\"a commit decision is required to create a compaction envelope\");\n\t}\n\tconst transaction = createCompactionTransaction(input.transaction);\n\tconst decisionRevision = createSessionRevisionToken(input.decision.revision);\n\tconst decisionSource = createCompactionSourceIdentity(input.decision.source);\n\tif (\n\t\tinput.decision.transactionId !== transaction.transactionId ||\n\t\t!sameRevision(transaction.baseRevision, decisionRevision) ||\n\t\t!sameSource(transaction.source, decisionSource)\n\t) {\n\t\tthrow new TypeError(\"commit decision does not match the compaction transaction\");\n\t}\n\n\treturn validateCompactionEnvelope({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: transaction.transactionId,\n\t\tbaseRevision: transaction.baseRevision,\n\t\tsource: transaction.source,\n\t\tcreatedAt: transaction.createdAt,\n\t\tmodel: transaction.model,\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: transaction.preserved,\n\t});\n}\n"]}

package/dist/core/compaction/transaction.js

@@ -17,11 +17,26 @@ const DECIMAL_STRING_PATTERN = /^[0-9]+$/u;
 const CANONICAL_TIMESTAMP_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
 const METADATA_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/u;
 const CONTENT_CONTROL_PATTERN = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/u;
-const CREDENTIAL_SHAPE_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\s"'`:])bearer\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\s*[:=]\s*["']?[^\s"',;]{3,}|(?:sk|ghp|gho|ghu|ghs|github_pat|xox[baprs])[-_][A-Za-z0-9_-]{8,}/iu;
+const CREDENTIAL_SHAPE_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\s"'`:])bearer\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\s*[:=]\s*["']?[^\s"',;]{3,}|(?<![A-Za-z0-9])(?:sk|ghp|gho|ghu|ghs|github_pat|xox[baprs])[-_][A-Za-z0-9_-]{8,}|(?<![A-Za-z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])|(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9_-])gAAAAA[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9])v2:[A-Za-z0-9_+/=-]{20,}/iu;
 const REDACTED_ASSIGNMENT_PATTERN = /\s*[:=]\s*(?:"\[REDACTED\]"(?![A-Za-z0-9_+/-])|'\[REDACTED\]'(?![A-Za-z0-9_+/-])|\[REDACTED\](?![A-Za-z0-9._~+/-]))/giu;
-function containsCredentialShape(value) {
+const CREDENTIAL_SHAPE_MASK_PATTERN = new RegExp(CREDENTIAL_SHAPE_PATTERN.source, "giu");
+export function containsCredentialShape(value) {
     return CREDENTIAL_SHAPE_PATTERN.test(value.replace(REDACTED_ASSIGNMENT_PATTERN, ""));
 }
+/**
+ * Deterministically mask credential-shaped spans so sanitized text always
+ * satisfies this module's fail-closed content validators. Producers (compaction
+ * summaries, preserved provenance) must route generated text through this
+ * before validation; otherwise a paranoid validator match would abort the
+ * entire compaction and strand an overflowed session.
+ */
+export function redactCredentialShapedContent(value) {
+    let result = value;
+    for (let pass = 0; pass < 8 && containsCredentialShape(result); pass += 1) {
+        result = result.replace(CREDENTIAL_SHAPE_MASK_PATTERN, "[REDACTED]");
+    }
+    return containsCredentialShape(result) ? "[REDACTED]" : result;
+}
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }