synorch 0.3.0 → 0.4.0-beta.0

package/dist/harness/tools/builtin/write-tools.js

@@ -0,0 +1,335 @@
+import { randomUUID } from "node:crypto";
+import { lstat, mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { z } from "zod";
+import { normalizeRelativePath } from "../../../domain/relative-path.js";
+import { digestSchema, workspaceDigest } from "../../contracts/index.js";
+import { ledgerKey } from "../file-ledger.js";
+import { applyHunks, contentOfAddedFile, parsePatch, PatchError } from "../patch.js";
+import { conformContent, decodeTextFile, encodeTextFile, TextEncodingError, uniformEol } from "../text-file.js";
+import { isMissing, resolveWorkspacePath, ToolScopeViolation } from "../workspace-path.js";
+import { messageOf } from "./read-tools.js";
+import { actionOf, builtinMetadata, defineTool, errorResult, NormalizedMemo, okResult, recheckWritePath, scopeViolationResult } from "./shared.js";
+class StalePrecondition extends Error {
+}
+/** The precondition cannot be defaulted: the file exists and this attempt has not seen it. */
+class MissingPrecondition extends Error {
+}
+const writeFileInput = z.strictObject({
+    path: z.string().min(1).max(1024),
+    content: z.string().max(4 * 1024 * 1024),
+    /**
+     * Workspace digest of the current bytes (the `digest` in read_file's header). Optional: it
+     * defaults to the digest this attempt last read or wrote for the path. `null` requires that the
+     * file does not exist yet.
+     */
+    expected_digest: digestSchema.nullable().optional(),
+});
+export function createWriteFileTool() {
+    const metadata = builtinMetadata({
+        name: "write_file",
+        description: "Create a file or replace its whole content (owned paths only, written atomically). Overwriting needs the file's digest: it defaults to your last read_file/write of that path in this attempt, or pass expected_digest. An existing file keeps its line endings and BOM.",
+        effect: "workspace-write",
+        idempotent: false,
+        network: "none",
+        output_limit_bytes: 16 * 1024,
+        timeout_ms: 30_000,
+        cancellable: true,
+        concurrency: "sequential",
+        visible_to: ["implementer", "debugger", "session"],
+    });
+    const memo = new NormalizedMemo();
+    return defineTool(metadata, writeFileInput, {
+        async normalize(input, context) {
+            const resolved = await resolveWorkspacePath(context.workspaceRoot, input.path, "write");
+            memo.remember(context.toolCallId, resolved.relative);
+            return actionOf(metadata, input, context, { paths: [{ path: resolved.relative, access: "write" }] });
+        },
+        async execute(input, context) {
+            try {
+                const approved = memo.take(context.toolCallId);
+                const absolute = await recheckWritePath(context, input.path, approved);
+                const relative = approved ?? input.path;
+                const current = await readOptional(absolute);
+                const expected = expectedFor(input.expected_digest, relative, current, context.files);
+                assertPrecondition(current, expected, relative);
+                const existing = current === undefined ? undefined : decodeTextFile(current, relative);
+                const bytes = conformContent(input.content, existing);
+                await atomicWrite(absolute, bytes);
+                const digest = workspaceDigest(bytes);
+                context.files?.noteWrite(relative, digest);
+                const kept = existing === undefined ? "" : keptFormatNote(existing, input.content);
+                return okResult(`${current === undefined ? "created" : "updated"} ${relative} (${bytes.length} bytes${kept}) · digest ${digest}`, {
+                    changed_paths: [relative],
+                    digest,
+                });
+            }
+            catch (error) {
+                return writeFailure(error);
+            }
+        },
+    });
+}
+const applyPatchInput = z.strictObject({
+    patch: z.string().min(1).max(4 * 1024 * 1024),
+    /**
+     * Optional pre-image digest per touched path (`null`: the file must not exist yet). A path left
+     * out defaults to the digest this attempt last read or wrote for it; a new file needs nothing.
+     */
+    expected: z.record(z.string().min(1).max(1024), digestSchema.nullable()).optional(),
+    /** Shorthand for a patch that touches exactly one file. */
+    expected_digest: digestSchema.nullable().optional(),
+});
+export function createApplyPatchTool() {
+    const metadata = builtinMetadata({
+        name: "apply_patch",
+        description: "Edit owned files with a patch: the '*** Begin Patch' format (*** Update File / *** Add File / *** Delete File, '@@' hunks) or a unified diff (line counts optional). Hunks are located by their context lines. Preconditions default to your last read_file of each path. Line endings and BOM are preserved.",
+        effect: "workspace-write",
+        idempotent: false,
+        network: "none",
+        output_limit_bytes: 65_536,
+        timeout_ms: 30_000,
+        cancellable: true,
+        concurrency: "sequential",
+        visible_to: ["implementer", "debugger", "orchestrator", "session"],
+    });
+    const memo = new NormalizedMemo();
+    return defineTool(metadata, applyPatchInput, {
+        async normalize(input, context) {
+            const planned = [];
+            for (const declared of touchedPaths(parsePatch(input.patch))) {
+                const resolved = await resolveWorkspacePath(context.workspaceRoot, declared, "write");
+                planned.push({ declared, relative: resolved.relative });
+            }
+            memo.remember(context.toolCallId, planned);
+            return actionOf(metadata, input, context, { paths: planned.map((change) => ({ path: change.relative, access: "write" })) });
+        },
+        async execute(input, context) {
+            const planned = memo.take(context.toolCallId);
+            try {
+                const patches = parsePatch(input.patch);
+                const touched = touchedPaths(patches);
+                if (input.expected_digest !== undefined && touched.length !== 1) {
+                    throw new PatchError(`expected_digest is only for a patch that touches one file; this one touches ${touched.join(", ")}. Pass expected: {"<path>": "<digest>"} instead, or omit it to use your last read of each file.`);
+                }
+                const explicit = new Map();
+                for (const [key, value] of Object.entries(input.expected ?? {}))
+                    explicit.set(ledgerKey(normalizeRelativePath(key)), value);
+                const files = new Map();
+                const stateFor = async (declared, creating = false) => {
+                    const known = files.get(declared);
+                    if (known !== undefined)
+                        return known;
+                    const approved = planned?.find((change) => change.declared === declared)?.relative;
+                    const absolute = await recheckWritePath(context, declared, approved);
+                    const relative = approved ?? normalizeRelativePath(declared);
+                    const previous = await readOptional(absolute);
+                    const stated = input.expected_digest !== undefined
+                        ? input.expected_digest
+                        : explicit.has(ledgerKey(relative))
+                            ? explicit.get(ledgerKey(relative))
+                            : explicit.get(ledgerKey(normalizeRelativePath(declared)));
+                    assertPrecondition(previous, creating ? (stated ?? null) : expectedFor(stated, relative, previous, context.files), relative);
+                    const state = { absolute, relative, previous, decoded: undefined, exists: previous !== undefined, touched: false };
+                    files.set(declared, state);
+                    return state;
+                };
+                const decodedOf = (state) => {
+                    if (!state.exists)
+                        throw new PatchError(`${state.relative} does not exist; create it with '*** Add File: ${state.relative}' (or a '--- /dev/null' diff)`);
+                    state.decoded ??= decodeTextFile(state.previous ?? new Uint8Array(), state.relative);
+                    return state.decoded;
+                };
+                let hunkCount = 0;
+                for (const patch of patches) {
+                    const source = await stateFor(patch.path, patch.kind === "add");
+                    if (patch.kind === "add") {
+                        if (source.exists)
+                            throw new PatchError(`${source.relative} already exists; change it with '*** Update File: ${source.relative}'`);
+                        source.decoded = contentOfAddedFile(patch);
+                        source.exists = true;
+                        source.touched = true;
+                        continue;
+                    }
+                    if (patch.kind === "delete") {
+                        if (!source.exists)
+                            throw new PatchError(`${source.relative} does not exist, so it cannot be deleted`);
+                        source.decoded = undefined;
+                        source.exists = false;
+                        source.touched = true;
+                        continue;
+                    }
+                    const updated = applyHunks(decodedOf(source), patch.hunks, source.relative);
+                    hunkCount += patch.hunks.length;
+                    if (patch.moveTo === undefined) {
+                        source.decoded = updated;
+                        source.touched = true;
+                        continue;
+                    }
+                    const destination = await stateFor(patch.moveTo, true);
+                    if (destination.exists && destination !== source)
+                        throw new PatchError(`cannot move ${source.relative} to ${destination.relative}: the destination exists`);
+                    source.decoded = undefined;
+                    source.exists = false;
+                    source.touched = true;
+                    destination.decoded = updated;
+                    destination.exists = true;
+                    destination.touched = true;
+                }
+                const states = [...files.values()].filter((state) => state.touched);
+                const writes = states.map((state) => ({ ...state, content: state.exists && state.decoded !== undefined ? encodeTextFile(state.decoded) : undefined }));
+                await commitAll(writes);
+                const summary = [];
+                let singleDigest;
+                for (const write of writes) {
+                    const digest = write.content === undefined ? undefined : workspaceDigest(write.content);
+                    context.files?.noteWrite(write.relative, digest);
+                    if (writes.length === 1)
+                        singleDigest = digest;
+                    const verb = write.content === undefined ? "deleted" : write.previous === undefined ? "created" : "updated";
+                    summary.push(`${verb} ${write.relative}${digest === undefined ? "" : ` · digest ${digest}`}`);
+                }
+                const changed = writes.map((write) => write.relative);
+                return okResult(`applied ${hunkCount} hunk(s)\n${summary.join("\n")}`, { changed_paths: changed, ...(singleDigest === undefined ? {} : { digest: singleDigest }) });
+            }
+            catch (error) {
+                return writeFailure(error);
+            }
+        },
+    });
+}
+function touchedPaths(patches) {
+    const paths = new Set();
+    for (const patch of patches) {
+        paths.add(patch.path);
+        if (patch.moveTo !== undefined)
+            paths.add(patch.moveTo);
+    }
+    return [...paths];
+}
+async function commitAll(writes) {
+    const done = [];
+    try {
+        for (const write of writes) {
+            if (write.content === undefined) {
+                if (write.previous !== undefined)
+                    await unlink(write.absolute);
+            }
+            else
+                await atomicWrite(write.absolute, write.content);
+            done.push(write);
+        }
+    }
+    catch (error) {
+        for (const write of done.reverse()) {
+            if (write.previous === undefined)
+                await unlink(write.absolute).catch(() => undefined);
+            else
+                await atomicWrite(write.absolute, write.previous).catch(() => undefined);
+        }
+        throw error;
+    }
+}
+/**
+ * The precondition to check: the one the call states, else the digest this attempt last saw for
+ * the path, else "must not exist" for a file that is not there. An existing file the attempt has
+ * never seen cannot be defaulted.
+ */
+function expectedFor(stated, relative, current, files) {
+    if (stated !== undefined)
+        return stated;
+    const seen = files?.lastSeen(relative);
+    if (seen !== undefined)
+        return seen;
+    if (current === undefined)
+        return null;
+    throw new MissingPrecondition(`${relative} already exists and has not been read in this attempt: read_file it first (the digest in its header becomes the default precondition), then retry. You can also pass its digest explicitly.`);
+}
+function assertPrecondition(current, expected, label) {
+    if (current === undefined) {
+        if (expected !== null)
+            throw new StalePrecondition(`${label} no longer exists (expected digest ${expected}); re-read the directory and retry, or create it as a new file.`);
+        return;
+    }
+    const actual = workspaceDigest(new Uint8Array(current));
+    if (expected === null)
+        throw new StalePrecondition(`${label} already exists (current digest ${actual}); re-read it with read_file and retry.`);
+    if (actual !== expected) {
+        throw new StalePrecondition(`${label} changed since it was read: expected digest ${expected}, current digest ${actual}. Re-read the file with read_file and retry the edit against its current content.`);
+    }
+}
+function keptFormatNote(existing, content) {
+    const notes = [];
+    const eol = uniformEol(existing.lines);
+    if (eol === "\r\n" && /(^|[^\r])\n/.test(content))
+        notes.push("CRLF line endings kept");
+    else if (eol === "\n" && /\r/.test(content))
+        notes.push("LF line endings kept");
+    else if (eol === "\r" && /\n/.test(content))
+        notes.push("CR line endings kept");
+    if (existing.bom && !content.startsWith(""))
+        notes.push("BOM kept");
+    return notes.length === 0 ? "" : `; ${notes.join(", ")}`;
+}
+async function readOptional(absolute) {
+    try {
+        return await readFile(absolute);
+    }
+    catch (error) {
+        if (isMissing(error))
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Temp file in the target directory, then rename. Rename replaces the directory entry, so a hard
+ * link planted after the check cannot redirect the write, and a half-written file is never seen.
+ */
+async function atomicWrite(absolute, content) {
+    const directory = path.dirname(absolute);
+    await mkdir(directory, { recursive: true });
+    const temporary = path.join(directory, `.${path.basename(absolute)}.${randomUUID()}.synorch-tmp`);
+    await writeFile(temporary, content, { flag: "wx" });
+    try {
+        const existing = await lstat(absolute).catch((error) => {
+            if (isMissing(error))
+                return undefined;
+            throw error;
+        });
+        if (existing?.isSymbolicLink())
+            throw new ToolScopeViolation(`${absolute} became a link before the write`, "write-outside-scope");
+        await renameWithRetry(temporary, absolute);
+    }
+    catch (error) {
+        await unlink(temporary).catch(() => undefined);
+        throw error;
+    }
+}
+const RETRYABLE_RENAME_CODES = new Set(["EPERM", "EACCES", "EBUSY"]);
+/**
+ * On Windows a rename over a file that another process briefly holds open (an antivirus or indexer
+ * scan of a file that was just written or run) fails transiently with EPERM/EACCES/EBUSY; retry
+ * with a bounded backoff (about 1.3 s in total) before reporting the failure.
+ */
+async function renameWithRetry(from, to) {
+    for (let attempt = 1;; attempt += 1) {
+        try {
+            await rename(from, to);
+            return;
+        }
+        catch (error) {
+            const code = error instanceof Error && "code" in error ? String(error.code) : "";
+            if (attempt >= 8 || !RETRYABLE_RENAME_CODES.has(code))
+                throw error;
+            await new Promise((resolve) => setTimeout(resolve, 5 * 2 ** attempt));
+        }
+    }
+}
+function writeFailure(error) {
+    if (error instanceof StalePrecondition)
+        return errorResult("stale_precondition", error.message);
+    if (error instanceof PatchError || error instanceof TextEncodingError || error instanceof MissingPrecondition)
+        return errorResult("invalid_arguments", error.message);
+    return scopeViolationResult(error) ?? errorResult("execution_failed", messageOf(error));
+}
+//# sourceMappingURL=write-tools.js.map

package/dist/harness/tools/builtin/write-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-tools.js","sourceRoot":"","sources":["../../../../src/harness/tools/builtin/write-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAkD,MAAM,0BAA0B,CAAC;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAoB,MAAM,iBAAiB,CAAC;AAClI,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnJ,MAAM,iBAAkB,SAAQ,KAAK;CAAG;AACxC,8FAA8F;AAC9F,MAAM,mBAAoB,SAAQ,KAAK;CAAG;AAE1C,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACxC;;;;OAIG;IACH,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,0QAA0Q;QAC5Q,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,MAAM;QACf,kBAAkB,EAAE,EAAE,GAAG,IAAI;QAC7B,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,YAAY;QACzB,UAAU,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC;KACnD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,cAAc,EAAU,CAAC;IAC1C,OAAO,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE;QAC1C,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO;YAC5B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrD,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;YAC1B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACvE,MAAM,QAAQ,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtF,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACvF,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACtD,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACnF,OAAO,QAAQ,CAAC,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,SAAS,IAAI,cAAc,MAAM,EAAE,EAAE;oBAChI,aAAa,EAAE,CAAC,QAAQ,CAAC;oBACzB,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7C;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnF,2DAA2D;IAC3D,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAQH,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,+SAA+S;QACjT,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,MAAM;QACf,kBAAkB,EAAE,MAAM;QAC1B,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,YAAY;QACzB,UAAU,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,cAAc,EAA4B,CAAC;IAC5D,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE;QAC3C,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO;YAC5B,MAAM,OAAO,GAAoB,EAAE,CAAC;YACpC,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACtF,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAChE,MAAM,IAAI,UAAU,CAAC,+EAA+E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;gBAC3N,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;gBAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC5H,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;gBAC3C,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAQ,GAAG,KAAK,EAAsB,EAAE;oBAChF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;oBACtC,MAAM,QAAQ,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,QAAQ,CAAC;oBACnF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBACrE,MAAM,QAAQ,GAAG,QAAQ,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC;oBAC7D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC9C,MAAM,MAAM,GACV,KAAK,CAAC,eAAe,KAAK,SAAS;wBACjC,CAAC,CAAC,KAAK,CAAC,eAAe;wBACvB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;4BACjC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;4BACnC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACjE,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;oBAC7H,MAAM,KAAK,GAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;oBAC9H,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC3B,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC;gBACF,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAe,EAAE;oBAClD,IAAI,CAAC,KAAK,CAAC,MAAM;wBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,kDAAkD,KAAK,CAAC,QAAQ,+BAA+B,CAAC,CAAC;oBAC1J,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,UAAU,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACrF,OAAO,KAAK,CAAC,OAAO,CAAC;gBACvB,CAAC,CAAC;gBACF,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;oBAChE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBACzB,IAAI,MAAM,CAAC,MAAM;4BAAE,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,qDAAqD,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;wBACnI,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;wBAC3C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;wBACrB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;wBACtB,SAAS;oBACX,CAAC;oBACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5B,IAAI,CAAC,MAAM,CAAC,MAAM;4BAAE,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,0CAA0C,CAAC,CAAC;wBACvG,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;wBAC3B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;wBACtB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;wBACtB,SAAS;oBACX,CAAC;oBACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC5E,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;oBAChC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC/B,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;wBACzB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;wBACtB,SAAS;oBACX,CAAC;oBACD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACvD,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,KAAK,MAAM;wBAAE,MAAM,IAAI,UAAU,CAAC,eAAe,MAAM,CAAC,QAAQ,OAAO,WAAW,CAAC,QAAQ,0BAA0B,CAAC,CAAC;oBAC5J,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;oBAC3B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;oBACtB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC9B,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;oBAC1B,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;gBACvJ,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBACxB,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,IAAI,YAAgC,CAAC;gBACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACxF,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,YAAY,GAAG,MAAM,CAAC;oBAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5G,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChG,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtD,OAAO,QAAQ,CAAC,WAAW,SAAS,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;YACtK,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAiBD,SAAS,YAAY,CAAC,OAA6B;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAA+B;IACtD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC;;gBAAM,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;;gBACjF,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,MAAiC,EAAE,QAAgB,EAAE,OAA2B,EAAE,KAAoC;IACzI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,mBAAmB,CAC3B,GAAG,QAAQ,6LAA6L,CACzM,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B,EAAE,QAAuB,EAAE,KAAa;IAC7F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,KAAK,sCAAsC,QAAQ,iEAAiE,CAAC,CAAC;QAC5K,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,KAAK,mCAAmC,MAAM,yCAAyC,CAAC,CAAC;IAC/I,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAiB,CAAC,GAAG,KAAK,+CAA+C,QAAQ,oBAAoB,MAAM,mFAAmF,CAAC,CAAC;IAC5M,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAqB,EAAE,OAAe;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;SACnF,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;SAC3E,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAe;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,cAAc,CAAC,CAAC;IAClG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9D,IAAI,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvC,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,cAAc,EAAE;YAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,QAAQ,iCAAiC,EAAE,qBAAqB,CAAC,CAAC;QAClI,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1F;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IACrD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC;YACnE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,YAAY,iBAAiB;QAAE,OAAO,WAAW,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,mBAAmB;QAAE,OAAO,WAAW,CAAC,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACtK,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,kBAAkB,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/harness/tools/environment.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Child environments are built from an allowlist, never inherited wholesale: provider keys,
+ * tokens and anything else in the parent environment stay out of tool processes unless named
+ * here. Model-supplied variables may add values but never override loader or shell hooks.
+ */
+export declare const INHERITED_ENV_ALLOWLIST: readonly ["PATH", "Path", "PATHEXT", "SystemRoot", "SystemDrive", "windir", "ComSpec", "TEMP", "TMP", "TMPDIR", "HOME", "USERPROFILE", "HOMEDRIVE", "HOMEPATH", "APPDATA", "LOCALAPPDATA", "ProgramData", "ProgramFiles", "ProgramFiles(x86)", "CommonProgramFiles", "NUMBER_OF_PROCESSORS", "PROCESSOR_ARCHITECTURE", "OS", "LANG", "LC_ALL", "LC_CTYPE", "TZ", "USER", "USERNAME", "LOGNAME", "SHELL", "CI"];
+export declare function isBlockedEnvName(name: string): boolean;
+export declare function childEnvironment(inherited: Readonly<Record<string, string | undefined>>, extra?: Readonly<Record<string, string>>): Record<string, string>;
+//# sourceMappingURL=environment.d.ts.map

package/dist/harness/tools/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/environment.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,gZAiC1B,CAAC;AAKX,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtD;AAED,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACvD,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GAC3C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUxB"}

package/dist/harness/tools/environment.js

@@ -0,0 +1,59 @@
+import { BRIDGE_STRIPPED_ENV } from "../contracts/index.js";
+/**
+ * Child environments are built from an allowlist, never inherited wholesale: provider keys,
+ * tokens and anything else in the parent environment stay out of tool processes unless named
+ * here. Model-supplied variables may add values but never override loader or shell hooks.
+ */
+export const INHERITED_ENV_ALLOWLIST = [
+    "PATH",
+    "Path",
+    "PATHEXT",
+    "SystemRoot",
+    "SystemDrive",
+    "windir",
+    "ComSpec",
+    "TEMP",
+    "TMP",
+    "TMPDIR",
+    "HOME",
+    "USERPROFILE",
+    "HOMEDRIVE",
+    "HOMEPATH",
+    "APPDATA",
+    "LOCALAPPDATA",
+    "ProgramData",
+    "ProgramFiles",
+    "ProgramFiles(x86)",
+    "CommonProgramFiles",
+    "NUMBER_OF_PROCESSORS",
+    "PROCESSOR_ARCHITECTURE",
+    "OS",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "TZ",
+    "USER",
+    "USERNAME",
+    "LOGNAME",
+    "SHELL",
+    "CI",
+];
+const BLOCKED_OVERRIDE = /^(?:PATH|PATHEXT|LD_\w*|DYLD_\w*|NODE_OPTIONS|NODE_PATH|BASH_ENV|ENV|PROMPT_COMMAND|PS\d|SHELLOPTS|BASHOPTS|IFS|PYTHONSTARTUP|PYTHONPATH|PYTHONHOME|PERL5OPT|PERL5LIB|RUBYOPT|GIT_SSH|GIT_SSH_COMMAND|GIT_EXEC_PATH|GIT_CONFIG\w*|GIT_ASKPASS|SSH_ASKPASS|SYSTEMROOT|COMSPEC|WINDIR|HOME|USERPROFILE|APPDATA|LOCALAPPDATA)$/i;
+export function isBlockedEnvName(name) {
+    const stripped = BRIDGE_STRIPPED_ENV;
+    return BLOCKED_OVERRIDE.test(name) || stripped.includes(name.toUpperCase()) || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name);
+}
+export function childEnvironment(inherited, extra = {}) {
+    const environment = {};
+    const wanted = new Set(INHERITED_ENV_ALLOWLIST.map((name) => name.toLowerCase()));
+    for (const [name, value] of Object.entries(inherited)) {
+        if (value !== undefined && wanted.has(name.toLowerCase()))
+            environment[name] = value;
+    }
+    for (const [name, value] of Object.entries(extra)) {
+        if (!isBlockedEnvName(name))
+            environment[name] = value;
+    }
+    return environment;
+}
+//# sourceMappingURL=environment.js.map

package/dist/harness/tools/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../../src/harness/tools/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,MAAM;IACN,MAAM;IACN,SAAS;IACT,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,aAAa;IACb,WAAW;IACX,UAAU;IACV,SAAS;IACT,cAAc;IACd,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,wBAAwB;IACxB,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,MAAM;IACN,UAAU;IACV,SAAS;IACT,OAAO;IACP,IAAI;CACI,CAAC;AAEX,MAAM,gBAAgB,GACpB,8TAA8T,CAAC;AAEjU,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAsB,mBAAmB,CAAC;IACxD,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAuD,EACvD,QAA0C,EAAE;IAE5C,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/harness/tools/file-ledger.d.ts

@@ -0,0 +1,9 @@
+import { type AttemptFileLedger } from "../contracts/index.ts";
+/**
+ * The attempt's read/write ledger (ADR-18 D3): the last workspace digest the model saw for each
+ * path, so `write_file`/`apply_patch` can default a missing `expected_digest` to it. Keys are NFC
+ * and, on case-insensitive platforms, `foldPathCase`d, matching how the file system names them.
+ */
+export declare function ledgerKey(path: string, platform?: string): string;
+export declare function createAttemptFileLedger(platform?: string): AttemptFileLedger;
+//# sourceMappingURL=file-ledger.d.ts.map

package/dist/harness/tools/file-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-ledger.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/file-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiE,KAAK,iBAAiB,EAAe,MAAM,uBAAuB,CAAC;AAE3I;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAyB,GAAG,MAAM,CAGnF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,GAAE,MAAyB,GAAG,iBAAiB,CAY9F"}

package/dist/harness/tools/file-ledger.js

@@ -0,0 +1,26 @@
+import { foldPathCase, isCaseInsensitivePlatform, normalizePathUnicode } from "../contracts/index.js";
+/**
+ * The attempt's read/write ledger (ADR-18 D3): the last workspace digest the model saw for each
+ * path, so `write_file`/`apply_patch` can default a missing `expected_digest` to it. Keys are NFC
+ * and, on case-insensitive platforms, `foldPathCase`d, matching how the file system names them.
+ */
+export function ledgerKey(path, platform = process.platform) {
+    const normalized = normalizePathUnicode(path.replaceAll("\\", "/").replace(/^\.\//, ""));
+    return isCaseInsensitivePlatform(platform) ? foldPathCase(normalized) : normalized;
+}
+export function createAttemptFileLedger(platform = process.platform) {
+    const seen = new Map();
+    return {
+        lastSeen: (path) => seen.get(ledgerKey(path, platform)),
+        noteRead: (path, digest) => {
+            seen.set(ledgerKey(path, platform), digest);
+        },
+        noteWrite: (path, digest) => {
+            if (digest === undefined)
+                seen.delete(ledgerKey(path, platform));
+            else
+                seen.set(ledgerKey(path, platform), digest);
+        },
+    };
+}
+//# sourceMappingURL=file-ledger.js.map

package/dist/harness/tools/file-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-ledger.js","sourceRoot":"","sources":["../../../src/harness/tools/file-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,oBAAoB,EAAuC,MAAM,uBAAuB,CAAC;AAE3I;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IACzE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAAmB,OAAO,CAAC,QAAQ;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,OAAO;QACL,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACzB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC1B,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;;gBAC5D,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/harness/tools/gateway.d.ts

@@ -0,0 +1,52 @@
+import { type ApprovalBroker, type BlobStore, type EventStore, type PolicyEngine, type SandboxRunner, type ToolCallId, type ToolGateway, type ToolInvocationScope, type ToolRegistry, type ToolResult } from "../contracts/index.ts";
+export interface ToolGatewayDependencies {
+    readonly events: EventStore;
+    readonly blobs: BlobStore;
+    readonly registry: ToolRegistry;
+    readonly policy: PolicyEngine;
+    readonly approvals: ApprovalBroker;
+    readonly sandbox: SandboxRunner;
+    /** Exact credential values to redact and to refuse in arguments (`ResolvedCredential.redactionValues`). */
+    readonly redactionValues?: () => readonly string[];
+    /** Streaming progress from a running tool, already redacted. */
+    readonly onUpdate?: (toolCallId: ToolCallId, text: string) => void;
+    readonly now?: () => Date;
+    /** Platform whose path-case policy keys the attempt file ledger (defaults to the running one). */
+    readonly platform?: string;
+    /** K7 PreToolUse / PostToolUse hooks; never run for harness-initiated (`system`) calls. */
+    readonly hooks?: ToolHooks;
+}
+/** One model tool call as a hook sees it. */
+export interface ToolHookCall {
+    readonly toolName: string;
+    readonly arguments: Readonly<Record<string, unknown>>;
+    readonly toolCallId: ToolCallId;
+    readonly scope: ToolInvocationScope;
+    readonly sessionId: string;
+}
+/**
+ * K7 hook seam. `pre` runs after the policy decided and before any approval prompt: it can deny a
+ * call or make an allowed call ask, never widen a decision. `post` adds context (hook feedback) to
+ * an executed call's result text. Failures of the seam itself never fail the call.
+ */
+export interface ToolHooks {
+    pre(call: ToolHookCall, signal: AbortSignal): Promise<{
+        readonly deny?: string;
+        readonly ask?: string;
+    } | undefined>;
+    post(call: ToolHookCall & {
+        readonly result: ToolResult;
+    }, signal: AbortSignal): Promise<{
+        readonly context?: string;
+    } | undefined>;
+}
+/**
+ * The single tool pipeline: propose → lookup → validate → normalize → policy → approval →
+ * sandbox check → execute → redact/bound → record. It writes every `tool/*` event itself, never
+ * throws for a denied or failed call and never starts a side effect when the log refuses a write.
+ * Recorded states follow the `toolCall` machine: anything refused before `tool/execution_started`
+ * (unknown tool, invalid arguments, policy, approval, sandbox) ends `denied` (or `cancelled`);
+ * only an executed call can end `succeeded` or `failed`.
+ */
+export declare function createToolGateway(dependencies: ToolGatewayDependencies): ToolGateway;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/harness/tools/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/gateway.ts"],"names":[],"mappings":"AAEA,OAAO,EAcL,KAAK,cAAc,EAInB,KAAK,SAAS,EAEd,KAAK,UAAU,EAIf,KAAK,YAAY,EAEjB,KAAK,aAAa,EAGlB,KAAK,UAAU,EAKf,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAM/B,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,2GAA2G;IAC3G,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;IACnD,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IACrH,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CACrI;AAoBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,uBAAuB,GAAG,WAAW,CAgXpF"}