thinkpool-pair 0.7.363 → 0.7.365

package/repo-search.mjs

@@ -1,190 +1 @@
-import { execFileSync } from 'node:child_process'
-
-const MAX_QUERY_CHARS = 160
-const DEFAULT_MAX_RESULTS = 8
-const MAX_FILES_BUFFER = 16 * 1024 * 1024
-
-const STOP_WORDS = new Set([
-  'a', 'an', 'and', 'every', 'file', 'files', 'find', 'for', 'from', 'in',
-  'inside', 'is', 'locate', 'me', 'of', 'please', 'show', 'the', 'to', 'under',
-  'where', 'with',
-])
-
-const EXPANSIONS = Object.freeze({
-  api: ['endpoint', 'route', 'server'],
-  auth: ['login', 'session', 'oauth'],
-  component: ['card', 'panel', 'view', 'widget'],
-  config: ['configuration', 'settings'],
-  database: ['db', 'sql', 'schema'],
-  image: ['asset', 'gallery', 'media', 'photo', 'picture', 'thumbnail'],
-  library: ['catalog', 'collection', 'index', 'lib'],
-  login: ['auth', 'oauth', 'session'],
-  session: ['auth', 'login'],
-  style: ['css', 'theme'],
-  styles: ['css', 'theme'],
-  test: ['spec'],
-  tests: ['spec'],
-})
-
-const cleanQuery = (value) => String(value || '')
-  // Deliberately strip ASCII control characters from room-supplied queries.
-  // eslint-disable-next-line no-control-regex
-  .replace(/[\u0000-\u001f\u007f]/g, ' ')
-  .replace(/\s+/g, ' ')
-  .trim()
-
-const unique = (values) => [...new Set(values.filter(Boolean))]
-const escapeRegex = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
-const normalizePath = (value) => String(value || '').replace(/\\/g, '/').replace(/^\.\//, '')
-const wordish = (value) => String(value || '').toLowerCase().replace(/[^\p{L}\p{N}]+/gu, ' ').trim()
-const pathContainsSegment = (path, segment) => `/${normalizePath(path).toLowerCase()}/`.includes(`/${segment.toLowerCase().replace(/^\/+|\/+$/g, '')}/`)
-
-function queryTokens(query) {
-  return unique((query.toLowerCase().match(/[\p{L}\p{N}][\p{L}\p{N}_-]*/gu) || [])
-    .map((token) => token.replace(/^[-_]+|[-_]+$/g, ''))
-    .filter((token) => token && !STOP_WORDS.has(token)))
-}
-
-function locationHints(query) {
-  return unique([...query.toLowerCase().matchAll(/\b(?:from|in|inside|under)\s+([\p{L}\p{N}_.\/-]+)/gu)]
-    .map((match) => match[1].replace(/^\/+|\/+$/g, ''))
-    .filter(Boolean))
-}
-
-function defaultRun(command, args, cwd) {
-  return execFileSync(command, args, {
-    cwd,
-    encoding: 'utf8',
-    timeout: command === 'rg' ? 1400 : 3000,
-    maxBuffer: MAX_FILES_BUFFER,
-    stdio: ['ignore', 'pipe', 'pipe'],
-  })
-}
-
-function listedFiles(run, cwd) {
-  const raw = String(run('git', ['ls-files', '-z', '--cached', '--others', '--exclude-standard'], cwd) || '')
-  return unique(raw.split('\0').map(normalizePath).filter(Boolean))
-}
-
-function contentMatches(run, cwd, terms, knownFiles) {
-  const matches = new Map()
-  if (!terms.length) return matches
-  const pattern = terms.slice().sort((a, b) => b.length - a.length).map(escapeRegex).join('|')
-  let raw = ''
-  try {
-    raw = String(run('rg', [
-      '--json',
-      '--ignore-case',
-      '--max-count', '4',
-      '--no-messages',
-      '--regexp', pattern,
-      '.',
-    ], cwd) || '')
-  } catch {
-    // `rg` is the fast path. A host without it still gets filename/path search;
-    // repository search must never block the room or fall through to an LLM turn.
-    return matches
-  }
-  for (const line of raw.split(/\r?\n/)) {
-    if (!line) continue
-    let record
-    try { record = JSON.parse(line) } catch { continue }
-    if (record?.type !== 'match') continue
-    const path = normalizePath(record.data?.path?.text)
-    if (!knownFiles.has(path)) continue
-    const lineNumber = Number(record.data?.line_number)
-    const text = String(record.data?.lines?.text || '').toLowerCase()
-    const prior = matches.get(path)
-    if (!prior) matches.set(path, { line: Number.isFinite(lineNumber) ? lineNumber : null, text })
-    else prior.text += ` ${text}`
-  }
-  return matches
-}
-
-function candidateScore(path, original, expanded, content) {
-  const lowerPath = path.toLowerCase()
-  const base = lowerPath.split('/').at(-1) || lowerPath
-  const pathWords = ` ${wordish(lowerPath)} `
-  const contentText = content?.text || ''
-  let score = 0
-
-  const phrase = original.join(' ')
-  if (phrase && pathWords.includes(` ${phrase} `)) score += 100
-  for (const token of original) {
-    if (base.includes(token)) score += 30
-    if (lowerPath.includes(token)) score += 16
-    if (pathWords.includes(` ${token} `)) score += 8
-    if (contentText.includes(token)) score += 8
-  }
-  for (const token of expanded) {
-    if (base.includes(token)) score += 8
-    else if (lowerPath.includes(token)) score += 5
-    if (contentText.includes(token)) score += 2
-  }
-
-  const rootMatches = (haystack) => original.filter((token) =>
-    haystack.includes(token) || (EXPANSIONS[token] || []).some((alias) => haystack.includes(alias)))
-  const pathCoverage = rootMatches(lowerPath).length
-  const coverage = rootMatches(`${lowerPath} ${contentText}`).length
-  score += (coverage ** 2) * 18 + (pathCoverage ** 2) * 22
-
-  const ext = base.includes('.') ? base.slice(base.lastIndexOf('.')) : ''
-  const componentFile = ['.jsx', '.tsx', '.vue', '.svelte'].includes(ext)
-  if (original.includes('component') && componentFile) score += 60
-  if (original.some((token) => token === 'test' || token === 'tests') && /(?:^|\/)(?:test|tests|spec|specs)(?:\/|$)|\.(?:test|spec)\./.test(lowerPath)) score += 10
-  if (original.some((token) => token === 'asset' || token === 'assets') && /(?:^|\/)assets?(?:\/|$)/.test(lowerPath)) score += 10
-  const testPath = /(?:^|\/)(?:test|tests|spec|specs)(?:\/|$)|\.(?:test|spec)\./.test(lowerPath)
-  if (testPath && !original.some((token) => token === 'test' || token === 'tests')) score -= 25
-  if (/^(?:docs|marketing|archive|\.claude)\//.test(lowerPath)) score -= 35
-  if (/^(?:src|app|lib|api|bridge|server|client|components|packages)\//.test(lowerPath)) score += 12
-  return { score, coverage, pathCoverage, componentFile }
-}
-
-export function repoSearch({
-  cwd = process.cwd(),
-  query,
-  maxResults = DEFAULT_MAX_RESULTS,
-  run = defaultRun,
-  now = () => Date.now(),
-} = {}) {
-  const startedAt = now()
-  const cleaned = cleanQuery(query)
-  const finish = (result) => ({ ...result, durationMs: Math.max(0, Math.round(now() - startedAt)) })
-
-  if (!cleaned) return finish({ query: '', results: [], total: 0, truncated: false, error: 'Use /find followed by a filename, symbol, or code concept.' })
-  if (cleaned.length > MAX_QUERY_CHARS) return finish({ query: cleaned.slice(0, MAX_QUERY_CHARS), results: [], total: 0, truncated: false, error: `Keep /find queries under ${MAX_QUERY_CHARS} characters.` })
-
-  const original = queryTokens(cleaned)
-  if (!original.length) return finish({ query: cleaned, results: [], total: 0, truncated: false, error: 'Try a filename, symbol, or code concept.' })
-  const expanded = unique(original.flatMap((token) => EXPANSIONS[token] || []))
-
-  let files
-  try { files = listedFiles(run, cwd) } catch {
-    return finish({ query: cleaned, results: [], total: 0, truncated: false, error: 'Repository search is unavailable outside a readable Git checkout.' })
-  }
-  const activeLocations = locationHints(cleaned).filter((hint) => files.some((path) => pathContainsSegment(path, hint)))
-  const eligibleFiles = activeLocations.length
-    ? files.filter((path) => activeLocations.every((hint) => pathContainsSegment(path, hint)))
-    : files
-  const knownFiles = new Set(eligibleFiles)
-  const matches = contentMatches(run, cwd, unique([...original, ...expanded]), knownFiles)
-  const minimumCoverage = Math.max(1, Math.ceil(original.length * 0.6))
-  const ranked = eligibleFiles
-    .map((path) => {
-      const rank = candidateScore(path, original, expanded, matches.get(path))
-      return { path, line: matches.get(path)?.line || null, ...rank }
-    })
-    .filter((item) => item.score > 0 && (
-      item.coverage >= minimumCoverage
-      || (original.includes('component') && item.componentFile && item.coverage >= 2)
-    ))
-    .sort((a, b) => b.score - a.score || b.pathCoverage - a.pathCoverage || a.path.length - b.path.length || a.path.localeCompare(b.path))
-
-  const limit = Math.max(1, Math.min(20, Number(maxResults) || DEFAULT_MAX_RESULTS))
-  return finish({
-    query: cleaned,
-    results: ranked.slice(0, limit).map(({ path, line }) => ({ path, ...(line ? { line } : {}) })),
-    total: ranked.length,
-    truncated: ranked.length > limit,
-  })
-}
+import{execFileSync as e}from"node:child_process";const t=new Set(["a","an","and","every","file","files","find","for","from","in","inside","is","locate","me","of","please","show","the","to","under","where","with"]),s=Object.freeze({api:["endpoint","route","server"],auth:["login","session","oauth"],component:["card","panel","view","widget"],config:["configuration","settings"],database:["db","sql","schema"],image:["asset","gallery","media","photo","picture","thumbnail"],library:["catalog","collection","index","lib"],login:["auth","oauth","session"],session:["auth","login"],style:["css","theme"],styles:["css","theme"],test:["spec"],tests:["spec"]}),n=e=>[...new Set(e.filter(Boolean))],r=e=>e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),o=e=>String(e||"").replace(/\\/g,"/").replace(/^\.\//,""),a=(e,t)=>`/${o(e).toLowerCase()}/`.includes(`/${t.toLowerCase().replace(/^\/+|\/+$/g,"")}/`);function c(t,s,n){return e(t,s,{cwd:n,encoding:"utf8",timeout:"rg"===t?1400:3e3,maxBuffer:16777216,stdio:["ignore","pipe","pipe"]})}export function repoSearch({cwd:e=process.cwd(),query:i,maxResults:l=8,run:u=c,now:p=()=>Date.now()}={}){const d=p(),h=String(i||"").replace(/[\u0000-\u001f\u007f]/g," ").replace(/\s+/g," ").trim(),g=e=>({...e,durationMs:Math.max(0,Math.round(p()-d))});if(!h)return g({query:"",results:[],total:0,truncated:!1,error:"Use /find followed by a filename, symbol, or code concept."});if(h.length>160)return g({query:h.slice(0,160),results:[],total:0,truncated:!1,error:"Keep /find queries under 160 characters."});const f=function(e){return n((e.toLowerCase().match(/[\p{L}\p{N}][\p{L}\p{N}_-]*/gu)||[]).map(e=>e.replace(/^[-_]+|[-_]+$/g,"")).filter(e=>e&&!t.has(e)))}(h);if(!f.length)return g({query:h,results:[],total:0,truncated:!1,error:"Try a filename, symbol, or code concept."});const m=n(f.flatMap(e=>s[e]||[]));let w;try{w=function(e,t){const s=String(e("git",["ls-files","-z","--cached","--others","--exclude-standard"],t)||"");return n(s.split("\0").map(o).filter(Boolean))}(u,e)}catch{return g({query:h,results:[],total:0,truncated:!1,error:"Repository search is unavailable outside a readable Git checkout."})}const y=function(e){return n([...e.toLowerCase().matchAll(/\b(?:from|in|inside|under)\s+([\p{L}\p{N}_.\/-]+)/gu)].map(e=>e[1].replace(/^\/+|\/+$/g,"")).filter(Boolean))}(h).filter(e=>w.some(t=>a(t,e))),b=y.length?w.filter(e=>y.every(t=>a(e,t))):w,x=new Set(b),v=function(e,t,s,n){const a=new Map;if(!s.length)return a;const c=s.slice().sort((e,t)=>t.length-e.length).map(r).join("|");let i="";try{i=String(e("rg",["--json","--ignore-case","--max-count","4","--no-messages","--regexp",c,"."],t)||"")}catch{return a}for(const e of i.split(/\r?\n/)){if(!e)continue;let t;try{t=JSON.parse(e)}catch{continue}if("match"!==t?.type)continue;const s=o(t.data?.path?.text);if(!n.has(s))continue;const r=Number(t.data?.line_number),c=String(t.data?.lines?.text||"").toLowerCase(),i=a.get(s);i?i.text+=` ${c}`:a.set(s,{line:Number.isFinite(r)?r:null,text:c})}return a}(u,e,n([...f,...m]),x),$=Math.max(1,Math.ceil(.6*f.length)),C=b.map(e=>{const t=function(e,t,n,r){const o=e.toLowerCase(),a=o.split("/").at(-1)||o,c=` ${i=o,String(i||"").toLowerCase().replace(/[^\p{L}\p{N}]+/gu," ").trim()} `;var i;const l=r?.text||"";let u=0;const p=t.join(" ");p&&c.includes(` ${p} `)&&(u+=100);for(const e of t)a.includes(e)&&(u+=30),o.includes(e)&&(u+=16),c.includes(` ${e} `)&&(u+=8),l.includes(e)&&(u+=8);for(const e of n)a.includes(e)?u+=8:o.includes(e)&&(u+=5),l.includes(e)&&(u+=2);const d=e=>t.filter(t=>e.includes(t)||(s[t]||[]).some(t=>e.includes(t))),h=d(o).length,g=d(`${o} ${l}`).length;u+=g**2*18+h**2*22;const f=a.includes(".")?a.slice(a.lastIndexOf(".")):"",m=[".jsx",".tsx",".vue",".svelte"].includes(f);return t.includes("component")&&m&&(u+=60),t.some(e=>"test"===e||"tests"===e)&&/(?:^|\/)(?:test|tests|spec|specs)(?:\/|$)|\.(?:test|spec)\./.test(o)&&(u+=10),t.some(e=>"asset"===e||"assets"===e)&&/(?:^|\/)assets?(?:\/|$)/.test(o)&&(u+=10),/(?:^|\/)(?:test|tests|spec|specs)(?:\/|$)|\.(?:test|spec)\./.test(o)&&!t.some(e=>"test"===e||"tests"===e)&&(u-=25),/^(?:docs|marketing|archive|\.claude)\//.test(o)&&(u-=35),/^(?:src|app|lib|api|bridge|server|client|components|packages)\//.test(o)&&(u+=12),{score:u,coverage:g,pathCoverage:h,componentFile:m}}(e,f,m,v.get(e));return{path:e,line:v.get(e)?.line||null,...t}}).filter(e=>e.score>0&&(e.coverage>=$||f.includes("component")&&e.componentFile&&e.coverage>=2)).sort((e,t)=>t.score-e.score||t.pathCoverage-e.pathCoverage||e.path.length-t.path.length||e.path.localeCompare(t.path)),L=Math.max(1,Math.min(20,Number(l)||8));return g({query:h,results:C.slice(0,L).map(({path:e,line:t})=>({path:e,...t?{line:t}:{}})),total:C.length,truncated:C.length>L})}

package/review-check.mjs

@@ -1,182 +1 @@
-// Fixed, bridge-owned review checks. Models receive only { target, checkId }.
-// This is host execution parity with Claude/Codex Flow, not a malicious-code sandbox.
-import fs from 'node:fs'
-import fsp from 'node:fs/promises'
-import os from 'node:os'
-import path from 'node:path'
-import { spawn } from 'node:child_process'
-import { execFile } from 'node:child_process'
-import { promisify } from 'node:util'
-
-const execFileAsync = promisify(execFile)
-
-const CHECKS = Object.freeze({
-  'node-test': ['node', ['--test']], 'npm-test': ['npm', ['test']],
-  'npm-build': ['npm', ['run', 'build']], pytest: ['pytest', []],
-  'cargo-test': ['cargo', ['test']], 'go-test': ['go', ['test', './...']],
-})
-const OUTPUT_CAP = 512 * 1024
-
-// Codex's native read-only/review mode never raises approval cards. Mark only
-// the pinned Git-blob reader as approval-free: it cannot execute target code,
-// mutate the target, or reach the open world.
-export const IMMUTABLE_REVIEW_READ_TOOL_EXTRAS = Object.freeze({
-  annotations: Object.freeze({
-    readOnlyHint: true,
-    destructiveHint: false,
-    idempotentHint: true,
-    openWorldHint: false,
-  }),
-})
-
-// Fixed check ids prevent command injection, but the selected check still runs
-// target-defined code. The scratch archive protects the reviewed worktree; it
-// is not an OS filesystem/network sandbox. Advertise that boundary honestly so
-// approvalPolicy=never reviewers refuse execution instead of silently granting
-// host/open-world authority. Sandboxed runners can still expose this behind an
-// explicit approval in runtimes that support one.
-export const UNSANDBOXED_REVIEW_CHECK_TOOL_EXTRAS = Object.freeze({
-  annotations: Object.freeze({
-    readOnlyHint: false,
-    destructiveHint: true,
-    idempotentHint: false,
-    openWorldHint: true,
-  }),
-})
-
-export function reviewCheckCommand(checkId) {
-  if (!Object.hasOwn(CHECKS, checkId)) throw new Error('unapproved review check')
-  const [command, args] = CHECKS[checkId]
-  return { command, args: [...args] }
-}
-
-export async function reviewCheckEnv(env = process.env, root = null) {
-  root ||= await fsp.mkdtemp(path.join(os.tmpdir(), 'tp-review-env-'))
-  const keptPath = env.PATH || process.env.PATH || ''
-  const home = path.join(root, 'home')
-  const npmCache = path.join(root, 'npm-cache')
-  const tmp = path.join(root, 'tmp')
-  await Promise.all([fsp.mkdir(home, { recursive: true }), fsp.mkdir(npmCache, { recursive: true }), fsp.mkdir(tmp, { recursive: true })])
-  return { PATH: keptPath, HOME: home, TMPDIR: path.join(root, 'tmp'), npm_config_cache: npmCache, npm_config_userconfig: path.join(home, '.npmrc'), GIT_CONFIG_NOSYSTEM: '1' }
-}
-
-export function validateReviewTarget(target, snapshots) {
-  if (typeof target !== 'string' || !/^[a-z0-9-]{1,64}$/.test(target)) throw new Error('invalid reviewed target')
-  const snapshot = (Array.isArray(snapshots) ? snapshots : []).find((item) => item?.taskKey === target)
-  if (!snapshot || !/^[0-9a-f]{40}$/i.test(snapshot.sha) || !path.isAbsolute(snapshot.cwd || '')) throw new Error('reviewed target is not pinned')
-  return snapshot
-}
-
-export function validateReviewPath(filePath) {
-  if (typeof filePath !== 'string' || !filePath || filePath.length > 512 || path.posix.isAbsolute(filePath)) throw new Error('invalid review path')
-  const normalized = path.posix.normalize(filePath)
-  if (normalized === '.' || normalized === '..' || normalized.startsWith('../') || normalized.split('/').some((part) => !part || part === '.')) throw new Error('invalid review path')
-  return normalized
-}
-
-// Read the pinned Git blob, never the reviewer worktree.  git ls-tree refuses
-// directories and symlinks before git show is allowed to materialize bytes.
-export async function readReviewFile({ target, filePath, snapshots, maxBytes = 512 * 1024 } = {}) {
-  const snapshot = validateReviewTarget(target, snapshots)
-  const normalized = validateReviewPath(filePath)
-  const cap = Number.isInteger(maxBytes) && maxBytes > 0 && maxBytes <= 512 * 1024 ? maxBytes : 512 * 1024
-  const listed = await execFileAsync('git', ['-C', snapshot.cwd, 'ls-tree', '-z', snapshot.sha, '--', normalized], { encoding: 'buffer', maxBuffer: 1024 * 1024 })
-  const record = Buffer.from(listed.stdout).toString('utf8').split('\0').filter(Boolean)[0] || ''
-  const match = /^(100[0-7]{3}) blob ([0-9a-f]{40})\t(.+)$/.exec(record)
-  if (!match || match[3] !== normalized) throw new Error('review file is not a pinned regular file')
-  const shown = await execFileAsync('git', ['-C', snapshot.cwd, 'show', `${snapshot.sha}:${normalized}`], { encoding: 'buffer', maxBuffer: cap + 1 })
-  const bytes = Buffer.from(shown.stdout)
-  if (bytes.length > cap) throw new Error('review file exceeds byte limit')
-  return { target, sha: snapshot.sha, path: normalized, content: bytes.toString('utf8'), bytes: bytes.length }
-}
-
-function boundedPush(parts, value) {
-  const text = String(value || '')
-  parts.push(text)
-  let total = parts.reduce((n, part) => n + part.length, 0)
-  while (total > OUTPUT_CAP && parts.length) total -= parts.shift().length
-}
-
-export async function killTree(child, signal = 'SIGTERM', { platform = process.platform, spawnImpl = spawn, taskkillTimeoutMs = 1_000 } = {}) {
-  if (!child?.pid) return true
-  if (platform === 'win32' && signal === 'SIGKILL') {
-    // Windows has no process-group equivalent.  This is trusted-host parity,
-    // not unescapable process-tree isolation. taskkill itself can hang on a
-    // hostile/broken host, so race it: cleanup remains best-effort and the
-    // review request always settles.
-    return await new Promise((resolve) => {
-      let done = false
-      let timer = null
-      const finish = (ok) => {
-        if (done) return
-        done = true
-        if (timer) clearTimeout(timer)
-        resolve(ok)
-      }
-      try {
-        const taskkill = spawnImpl('taskkill', ['/pid', String(child.pid), '/T', '/F'], { stdio: 'ignore', windowsHide: true })
-        taskkill.once('close', (code) => finish(code === 0))
-        taskkill.once('error', () => finish(false))
-        timer = setTimeout(() => { try { taskkill.kill?.() } catch {} finish(false) }, taskkillTimeoutMs)
-      } catch { finish(false) }
-    })
-  }
-  try { platform === 'win32' ? child.kill(signal) : process.kill(-child.pid, signal); return true } catch { try { return child.kill(signal) } catch { return false } }
-}
-
-export function runProcess(command, args, { cwd, env, timeoutMs = 120_000, killGraceMs = 250 } = {}) {
-  return new Promise((resolve) => {
-    const stdout = [], stderr = []
-    let timedOut = false
-    let settled = false
-    let child
-    let timer = null
-    let forceTimer = null
-    let settleTimer = null
-    const settle = (code) => {
-      if (settled) return
-      settled = true
-      if (timer) clearTimeout(timer)
-      if (forceTimer) clearTimeout(forceTimer)
-      if (settleTimer) clearTimeout(settleTimer)
-      resolve({ exitCode: Number.isInteger(code) ? code : null, stdout: stdout.join('').slice(-OUTPUT_CAP), stderr: stderr.join('').slice(-OUTPUT_CAP), timedOut })
-    }
-    try { child = spawn(command, args, { cwd, env, detached: process.platform !== 'win32', stdio: ['ignore', 'pipe', 'pipe'] }) }
-    catch (error) { stderr.push(String(error?.message || error)); settle(null); return }
-    child.stdout.on('data', (value) => boundedPush(stdout, value))
-    child.stderr.on('data', (value) => boundedPush(stderr, value))
-    timer = setTimeout(() => {
-      timedOut = true; void killTree(child)
-      forceTimer = setTimeout(async () => {
-        if (!await killTree(child, 'SIGKILL')) boundedPush(stderr, 'review check cleanup could not confirm process-tree termination')
-        // SIGKILL is unconditional on POSIX, but a platform/process failure must
-        // not leave the MCP call pending forever. A second best-effort kill then
-        // settles the caller; the scratch finally block can run.
-        settleTimer = setTimeout(() => {
-          void killTree(child, 'SIGKILL')
-          boundedPush(stderr, 'review check process did not report close after forced termination')
-          settle(null)
-        }, 1_000)
-      }, killGraceMs)
-    }, timeoutMs)
-    child.once('error', (error) => boundedPush(stderr, error?.message || error))
-    child.once('close', (code) => settle(code))
-  })
-}
-
-export async function runReviewCheck({ target, checkId, snapshots, env = process.env, tmpdir = os.tmpdir(), timeoutMs } = {}) {
-  const snapshot = validateReviewTarget(target, snapshots)
-  const archiveDir = await fsp.mkdtemp(path.join(tmpdir, 'tp-review-'))
-  const archive = path.join(archiveDir, 'source.tar')
-  const scratch = path.join(archiveDir, 'tree')
-  try {
-    await fsp.mkdir(scratch)
-    const archiveResult = await runProcess('git', ['-C', snapshot.cwd, 'archive', '--format=tar', `--output=${archive}`, snapshot.sha], { env: await reviewCheckEnv(env, archiveDir), timeoutMs: 15_000 })
-    if (archiveResult.exitCode !== 0 || archiveResult.timedOut) return { pass: false, target, sha: snapshot.sha, command: ['git', 'archive'], exitCode: archiveResult.exitCode, ...archiveResult }
-    const extract = await runProcess('tar', ['-xf', archive, '-C', scratch], { env: await reviewCheckEnv(env, archiveDir), timeoutMs: 15_000 })
-    if (extract.exitCode !== 0 || extract.timedOut) return { pass: false, target, sha: snapshot.sha, command: ['tar', '-xf'], exitCode: extract.exitCode, ...extract }
-    const spec = reviewCheckCommand(checkId)
-    const result = await runProcess(spec.command, spec.args, { cwd: scratch, env: await reviewCheckEnv(env, archiveDir), timeoutMs })
-    return { pass: result.exitCode === 0 && !result.timedOut, target, sha: snapshot.sha, command: [spec.command, ...spec.args], ...result }
-  } finally { await fsp.rm(archiveDir, { recursive: true, force: true }) }
-}
+import e from"node:fs";import t from"node:fs/promises";import r from"node:os";import i from"node:path";import{spawn as o}from"node:child_process";import{execFile as n}from"node:child_process";import{promisify as s}from"node:util";const a=s(n),c=Object.freeze({"node-test":["node",["--test"]],"npm-test":["npm",["test"]],"npm-build":["npm",["run","build"]],pytest:["pytest",[]],"cargo-test":["cargo",["test"]],"go-test":["go",["test","./..."]]});export const IMMUTABLE_REVIEW_READ_TOOL_EXTRAS=Object.freeze({annotations:Object.freeze({readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1})});export const UNSANDBOXED_REVIEW_CHECK_TOOL_EXTRAS=Object.freeze({annotations:Object.freeze({readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!0})});export function reviewCheckCommand(e){if(!Object.hasOwn(c,e))throw new Error("unapproved review check");const[t,r]=c[e];return{command:t,args:[...r]}}export async function reviewCheckEnv(e=process.env,o=null){o||=await t.mkdtemp(i.join(r.tmpdir(),"tp-review-env-"));const n=e.PATH||process.env.PATH||"",s=i.join(o,"home"),a=i.join(o,"npm-cache"),c=i.join(o,"tmp");return await Promise.all([t.mkdir(s,{recursive:!0}),t.mkdir(a,{recursive:!0}),t.mkdir(c,{recursive:!0})]),{PATH:n,HOME:s,TMPDIR:i.join(o,"tmp"),npm_config_cache:a,npm_config_userconfig:i.join(s,".npmrc"),GIT_CONFIG_NOSYSTEM:"1"}}export function validateReviewTarget(e,t){if("string"!=typeof e||!/^[a-z0-9-]{1,64}$/.test(e))throw new Error("invalid reviewed target");const r=(Array.isArray(t)?t:[]).find(t=>t?.taskKey===e);if(!r||!/^[0-9a-f]{40}$/i.test(r.sha)||!i.isAbsolute(r.cwd||""))throw new Error("reviewed target is not pinned");return r}export function validateReviewPath(e){if("string"!=typeof e||!e||e.length>512||i.posix.isAbsolute(e))throw new Error("invalid review path");const t=i.posix.normalize(e);if("."===t||".."===t||t.startsWith("../")||t.split("/").some(e=>!e||"."===e))throw new Error("invalid review path");return t}export async function readReviewFile({target:e,filePath:t,snapshots:r,maxBytes:i=524288}={}){const o=validateReviewTarget(e,r),n=validateReviewPath(t),s=Number.isInteger(i)&&i>0&&i<=524288?i:524288,c=await a("git",["-C",o.cwd,"ls-tree","-z",o.sha,"--",n],{encoding:"buffer",maxBuffer:1048576}),d=Buffer.from(c.stdout).toString("utf8").split("\0").filter(Boolean)[0]||"",l=/^(100[0-7]{3}) blob ([0-9a-f]{40})\t(.+)$/.exec(d);if(!l||l[3]!==n)throw new Error("review file is not a pinned regular file");const m=await a("git",["-C",o.cwd,"show",`${o.sha}:${n}`],{encoding:"buffer",maxBuffer:s+1}),u=Buffer.from(m.stdout);if(u.length>s)throw new Error("review file exceeds byte limit");return{target:e,sha:o.sha,path:n,content:u.toString("utf8"),bytes:u.length}}function d(e,t){const r=String(t||"");e.push(r);let i=e.reduce((e,t)=>e+t.length,0);for(;i>524288&&e.length;)i-=e.shift().length}export async function killTree(e,t="SIGTERM",{platform:r=process.platform,spawnImpl:i=o,taskkillTimeoutMs:n=1e3}={}){if(!e?.pid)return!0;if("win32"===r&&"SIGKILL"===t)return await new Promise(t=>{let r=!1,o=null;const s=e=>{r||(r=!0,o&&clearTimeout(o),t(e))};try{const t=i("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore",windowsHide:!0});t.once("close",e=>s(0===e)),t.once("error",()=>s(!1)),o=setTimeout(()=>{try{t.kill?.()}catch{}s(!1)},n)}catch{s(!1)}});try{return"win32"===r?e.kill(t):process.kill(-e.pid,t),!0}catch{try{return e.kill(t)}catch{return!1}}}export function runProcess(e,t,{cwd:r,env:i,timeoutMs:n=12e4,killGraceMs:s=250}={}){return new Promise(a=>{const c=[],l=[];let m,u=!1,p=!1,f=null,w=null,h=null;const v=e=>{p||(p=!0,f&&clearTimeout(f),w&&clearTimeout(w),h&&clearTimeout(h),a({exitCode:Number.isInteger(e)?e:null,stdout:c.join("").slice(-524288),stderr:l.join("").slice(-524288),timedOut:u}))};try{m=o(e,t,{cwd:r,env:i,detached:"win32"!==process.platform,stdio:["ignore","pipe","pipe"]})}catch(e){return l.push(String(e?.message||e)),void v(null)}m.stdout.on("data",e=>d(c,e)),m.stderr.on("data",e=>d(l,e)),f=setTimeout(()=>{u=!0,killTree(m),w=setTimeout(async()=>{await killTree(m,"SIGKILL")||d(l,"review check cleanup could not confirm process-tree termination"),h=setTimeout(()=>{killTree(m,"SIGKILL"),d(l,"review check process did not report close after forced termination"),v(null)},1e3)},s)},n),m.once("error",e=>d(l,e?.message||e)),m.once("close",e=>v(e))})}export async function runReviewCheck({target:e,checkId:o,snapshots:n,env:s=process.env,tmpdir:a=r.tmpdir(),timeoutMs:c}={}){const d=validateReviewTarget(e,n),l=await t.mkdtemp(i.join(a,"tp-review-")),m=i.join(l,"source.tar"),u=i.join(l,"tree");try{await t.mkdir(u);const r=await runProcess("git",["-C",d.cwd,"archive","--format=tar",`--output=${m}`,d.sha],{env:await reviewCheckEnv(s,l),timeoutMs:15e3});if(0!==r.exitCode||r.timedOut)return{pass:!1,target:e,sha:d.sha,command:["git","archive"],exitCode:r.exitCode,...r};const i=await runProcess("tar",["-xf",m,"-C",u],{env:await reviewCheckEnv(s,l),timeoutMs:15e3});if(0!==i.exitCode||i.timedOut)return{pass:!1,target:e,sha:d.sha,command:["tar","-xf"],exitCode:i.exitCode,...i};const n=reviewCheckCommand(o),a=await runProcess(n.command,n.args,{cwd:u,env:await reviewCheckEnv(s,l),timeoutMs:c});return{pass:0===a.exitCode&&!a.timedOut,target:e,sha:d.sha,command:[n.command,...n.args],...a}}finally{await t.rm(l,{recursive:!0,force:!0})}}

package/runtime-contract.mjs

@@ -1,93 +1 @@
-// Bridge-owned semantic capabilities. Native runtimes keep their own tool
-// transport; this module only admits the stable room-facing meaning.
-
-const RUNTIMES = Object.freeze(['claude', 'codex', 'hermes'])
-const SUPPORT = Object.freeze({ claude: 'native', codex: 'native', hermes: 'native' })
-const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9._:@-]{0,159}$/
-const HOST_PATH = /(?:\/home\/|\/users\/|\/private\/|\/tmp\/|[a-z]:\\|\\\\|(?:^|[\\/])\.\.(?:[\\/]|$))/i
-const SECRET_KEY = /(secret|token|password|authorization|api.?key|private.?key)/i
-const SECRET_VALUE = /(?:sk-[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9]{20,}|github_pat_[a-z0-9_]{20,}|xox[baprs]-[a-z0-9-]{10,}|AKIA[0-9A-Z]{16}|sbp_[a-z0-9]{20,}|eyJ[a-z0-9_-]{16,}\.[a-z0-9_-]{16,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,})/i
-const PROHIBITED_PROSE = /(?:raw transcript|tool args?|chain[ -]of[ -]thought|hidden reasoning|system prompt|environment dump|provider key|BEGIN (?:RSA |OPENSSH )?PRIVATE KEY)/i
-
-const schema = (required = [], properties = {}) => Object.freeze({
-  type: 'object', additionalProperties: false, required: Object.freeze(required), properties: Object.freeze(properties),
-})
-const text = (maxLength = 500) => Object.freeze({ type: 'string', minLength: 1, maxLength })
-const optionalText = (maxLength = 500) => Object.freeze({ type: 'string', maxLength })
-const bool = Object.freeze({ type: 'boolean' })
-const integer = (minimum, maximum) => Object.freeze({ type: 'integer', minimum, maximum })
-const id = Object.freeze({ type: 'string', minLength: 1, maxLength: 160, pattern: '^[A-Za-z0-9][A-Za-z0-9._:@-]*$' })
-const option = schema(['label', 'description'], { label: text(80), description: text(240) })
-const question = schema(['id', 'header', 'question', 'options'], {
-  id: Object.freeze({ type: 'string', minLength: 1, maxLength: 80, pattern: '^[A-Za-z0-9][A-Za-z0-9_-]*$' }),
-  header: text(12), question: text(500), options: Object.freeze({ type: 'array', minItems: 2, maxItems: 3, items: option }), multiSelect: bool,
-})
-const evidenceRef = schema(['type', 'id'], { type: id, id })
-
-export const RUNTIME_CAPABILITY_VERSION = 1
-export const RUNTIME_CAPABILITIES = Object.freeze([
-  Object.freeze({ id: 'request_user_input', version: 1, runtimeSupport: SUPPORT, inputSchema: schema(['questions'], { questions: Object.freeze({ type: 'array', minItems: 1, maxItems: 3, items: question }), autoResolutionMs: integer(60_000, 240_000) }), output: 'accepted | deferred | rejected | failed', authority: 'pair-control', persistence: 'durable-safe-ref', continuation: 'resumable', secretFreeRoomPayload: true }),
-  Object.freeze({ id: 'request_permission', version: 1, runtimeSupport: SUPPORT, inputSchema: schema(['action'], { action: text(160), reason: optionalText(280) }), output: 'accepted | deferred | rejected | failed', authority: 'pair-control', persistence: 'durable-safe-ref', continuation: 'resumable', secretFreeRoomPayload: true }),
-  Object.freeze({ id: 'submit_flow_plan', version: 1, runtimeSupport: SUPPORT, inputSchema: schema(['plan'], { plan: text(32_768) }), output: 'accepted | rejected | failed', authority: 'pair-control', persistence: 'durable-safe-ref', continuation: 'resumable', secretFreeRoomPayload: true }),
-  Object.freeze({ id: 'mark_flow_done', version: 1, runtimeSupport: SUPPORT, inputSchema: schema([], { evidenceRef }), output: 'accepted | rejected | failed', authority: 'bridge', persistence: 'durable-safe-ref', continuation: 'none', secretFreeRoomPayload: true }),
-  Object.freeze({ id: 'submit_flow_review', version: 1, runtimeSupport: SUPPORT, inputSchema: schema(['verdict'], { verdict: text(16_384) }), output: 'accepted | rejected | failed', authority: 'bridge', persistence: 'durable-safe-ref', continuation: 'none', secretFreeRoomPayload: true }),
-  Object.freeze({ id: 'terminal_interrupt', version: 1, runtimeSupport: SUPPORT, inputSchema: schema([], { reason: optionalText(280) }), output: 'accepted | rejected | failed', authority: 'bridge', persistence: 'ephemeral', continuation: 'none', secretFreeRoomPayload: true }),
-  Object.freeze({ id: 'lane_continuation', version: 1, runtimeSupport: SUPPORT, inputSchema: schema(['state'], { state: Object.freeze({ type: 'string', enum: Object.freeze(['waiting_for_human', 'resumable', 'canceled', 'terminal']) }), resumeKind: Object.freeze({ type: 'string', enum: Object.freeze(['human_response', 'approval', 'redispatch', 'reconnect']) }) }), output: 'accepted | deferred | rejected | failed', authority: 'bridge', persistence: 'durable-safe-ref', continuation: 'resumable', secretFreeRoomPayload: true }),
-])
-
-const CAPABILITIES = new Map(RUNTIME_CAPABILITIES.map((capability) => [capability.id, capability]))
-export const runtimeCapability = (id) => CAPABILITIES.get(id) || null
-export const runtimeSupportsCapability = (runtime, capabilityId) => RUNTIMES.includes(runtime) && runtimeCapability(capabilityId)?.runtimeSupport?.[runtime] === 'native'
-
-const jsonBytes = (value) => {
-  try { return new TextEncoder().encode(JSON.stringify(value)).length } catch { return Infinity }
-}
-
-// This deliberately mirrors the pair-control redaction boundary without pulling
-// browser source into the published bridge package.
-export function isSecretFreeRoomPayload (value, maxBytes = 8192) {
-  if (value == null || jsonBytes(value) > maxBytes) return false
-  const visit = (node) => {
-    if (typeof node === 'string') return node.length <= 2048 && !HOST_PATH.test(node) && !SECRET_VALUE.test(node) && !PROHIBITED_PROSE.test(node)
-    if (node == null || typeof node === 'number' || typeof node === 'boolean') return true
-    if (Array.isArray(node)) return node.length <= 64 && node.every(visit)
-    if (typeof node !== 'object') return false
-    return Object.entries(node).every(([key, child]) => !SECRET_KEY.test(key) && visit(child))
-  }
-  return visit(value)
-}
-
-function validValue (value, definition) {
-  if (!definition) return true
-  if (definition.type === 'object') {
-    if (!value || typeof value !== 'object' || Array.isArray(value)) return false
-    if (definition.additionalProperties === false && Object.keys(value).some((key) => !Object.hasOwn(definition.properties || {}, key))) return false
-    if ((definition.required || []).some((key) => !Object.hasOwn(value, key))) return false
-    return Object.entries(definition.properties || {}).every(([key, child]) => !Object.hasOwn(value, key) || validValue(value[key], child))
-  }
-  if (definition.type === 'array') return Array.isArray(value) && value.length >= (definition.minItems || 0) && value.length <= (definition.maxItems ?? Infinity) && (!definition.items || value.every((item) => validValue(item, definition.items)))
-  if (definition.type === 'string') return typeof value === 'string' && value.length >= (definition.minLength || 0) && value.length <= (definition.maxLength ?? Infinity) && (!definition.enum || definition.enum.includes(value)) && (!definition.pattern || new RegExp(definition.pattern).test(value))
-  if (definition.type === 'integer') return Number.isSafeInteger(value) && value >= (definition.minimum ?? -Infinity) && value <= (definition.maximum ?? Infinity)
-  if (definition.type === 'boolean') return typeof value === 'boolean'
-  return false
-}
-
-export function validateRuntimeCapabilityInput (capabilityId, input) {
-  const capability = runtimeCapability(capabilityId)
-  return !!capability && validValue(input, capability.inputSchema)
-}
-
-export function admitRuntimeCapability ({ runtime, capabilityId, input = {}, roomPayload = null } = {}) {
-  const capability = runtimeCapability(capabilityId)
-  if (!capability) return Object.freeze({ ok: false, code: 'unregistered_capability' })
-  if (!RUNTIMES.includes(runtime) || capability.runtimeSupport[runtime] !== 'native') return Object.freeze({ ok: false, code: 'runtime_capability_mismatch' })
-  if (!validateRuntimeCapabilityInput(capabilityId, input)) return Object.freeze({ ok: false, code: 'invalid_capability_input' })
-  if (capability.secretFreeRoomPayload && roomPayload != null && !isSecretFreeRoomPayload(roomPayload)) return Object.freeze({ ok: false, code: 'unsafe_room_payload' })
-  return Object.freeze({ ok: true, code: 'admitted', capability })
-}
-
-export function assertRuntimeCapability (request) {
-  const admitted = admitRuntimeCapability(request)
-  if (!admitted.ok) throw new TypeError(`Runtime capability rejected: ${admitted.code}`)
-  return admitted.capability
-}
+const e=Object.freeze(["claude","codex","hermes"]),t=Object.freeze({claude:"native",codex:"native",hermes:"native"}),r=/(?:\/home\/|\/users\/|\/private\/|\/tmp\/|[a-z]:\\|\\\\|(?:^|[\\/])\.\.(?:[\\/]|$))/i,i=/(secret|token|password|authorization|api.?key|private.?key)/i,a=/(?:sk-[a-z0-9_-]{8,}|gsk_[a-z0-9_-]{8,}|AIza[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9]{20,}|github_pat_[a-z0-9_]{20,}|xox[baprs]-[a-z0-9-]{10,}|AKIA[0-9A-Z]{16}|sbp_[a-z0-9]{20,}|eyJ[a-z0-9_-]{16,}\.[a-z0-9_-]{16,}\.[a-z0-9_-]{8,}|bearer\s+[a-z0-9._-]{8,})/i,n=/(?:raw transcript|tool args?|chain[ -]of[ -]thought|hidden reasoning|system prompt|environment dump|provider key|BEGIN (?:RSA |OPENSSH )?PRIVATE KEY)/i,o=(e=[],t={})=>Object.freeze({type:"object",additionalProperties:!1,required:Object.freeze(e),properties:Object.freeze(t)}),c=(e=500)=>Object.freeze({type:"string",minLength:1,maxLength:e}),p=(e=500)=>Object.freeze({type:"string",maxLength:e}),s=Object.freeze({type:"boolean"}),u=Object.freeze({type:"string",minLength:1,maxLength:160,pattern:"^[A-Za-z0-9][A-Za-z0-9._:@-]*$"}),m=o(["label","description"],{label:c(80),description:c(240)}),d=o(["id","header","question","options"],{id:Object.freeze({type:"string",minLength:1,maxLength:80,pattern:"^[A-Za-z0-9][A-Za-z0-9_-]*$"}),header:c(12),question:c(500),options:Object.freeze({type:"array",minItems:2,maxItems:3,items:m}),multiSelect:s}),l=o(["type","id"],{type:u,id:u});export const RUNTIME_CAPABILITY_VERSION=1;export const RUNTIME_CAPABILITIES=Object.freeze([Object.freeze({id:"request_user_input",version:1,runtimeSupport:t,inputSchema:o(["questions"],{questions:Object.freeze({type:"array",minItems:1,maxItems:3,items:d}),autoResolutionMs:Object.freeze({type:"integer",minimum:6e4,maximum:24e4})}),output:"accepted | deferred | rejected | failed",authority:"pair-control",persistence:"durable-safe-ref",continuation:"resumable",secretFreeRoomPayload:!0}),Object.freeze({id:"request_permission",version:1,runtimeSupport:t,inputSchema:o(["action"],{action:c(160),reason:p(280)}),output:"accepted | deferred | rejected | failed",authority:"pair-control",persistence:"durable-safe-ref",continuation:"resumable",secretFreeRoomPayload:!0}),Object.freeze({id:"submit_flow_plan",version:1,runtimeSupport:t,inputSchema:o(["plan"],{plan:c(32768)}),output:"accepted | rejected | failed",authority:"pair-control",persistence:"durable-safe-ref",continuation:"resumable",secretFreeRoomPayload:!0}),Object.freeze({id:"mark_flow_done",version:1,runtimeSupport:t,inputSchema:o([],{evidenceRef:l}),output:"accepted | rejected | failed",authority:"bridge",persistence:"durable-safe-ref",continuation:"none",secretFreeRoomPayload:!0}),Object.freeze({id:"submit_flow_review",version:1,runtimeSupport:t,inputSchema:o(["verdict"],{verdict:c(16384)}),output:"accepted | rejected | failed",authority:"bridge",persistence:"durable-safe-ref",continuation:"none",secretFreeRoomPayload:!0}),Object.freeze({id:"terminal_interrupt",version:1,runtimeSupport:t,inputSchema:o([],{reason:p(280)}),output:"accepted | rejected | failed",authority:"bridge",persistence:"ephemeral",continuation:"none",secretFreeRoomPayload:!0}),Object.freeze({id:"lane_continuation",version:1,runtimeSupport:t,inputSchema:o(["state"],{state:Object.freeze({type:"string",enum:Object.freeze(["waiting_for_human","resumable","canceled","terminal"])}),resumeKind:Object.freeze({type:"string",enum:Object.freeze(["human_response","approval","redispatch","reconnect"])})}),output:"accepted | deferred | rejected | failed",authority:"bridge",persistence:"durable-safe-ref",continuation:"resumable",secretFreeRoomPayload:!0})]);const b=new Map(RUNTIME_CAPABILITIES.map(e=>[e.id,e]));export const runtimeCapability=e=>b.get(e)||null;export const runtimeSupportsCapability=(t,r)=>e.includes(t)&&"native"===runtimeCapability(r)?.runtimeSupport?.[t];export function isSecretFreeRoomPayload(e,t=8192){if(null==e||(e=>{try{return(new TextEncoder).encode(JSON.stringify(e)).length}catch{return 1/0}})(e)>t)return!1;const o=e=>"string"==typeof e?e.length<=2048&&!r.test(e)&&!a.test(e)&&!n.test(e):null==e||"number"==typeof e||"boolean"==typeof e||(Array.isArray(e)?e.length<=64&&e.every(o):"object"==typeof e&&Object.entries(e).every(([e,t])=>!i.test(e)&&o(t)));return o(e)}function y(e,t){return!t||("object"===t.type?!(!e||"object"!=typeof e||Array.isArray(e))&&(!1!==t.additionalProperties||!Object.keys(e).some(e=>!Object.hasOwn(t.properties||{},e)))&&!(t.required||[]).some(t=>!Object.hasOwn(e,t))&&Object.entries(t.properties||{}).every(([t,r])=>!Object.hasOwn(e,t)||y(e[t],r)):"array"===t.type?Array.isArray(e)&&e.length>=(t.minItems||0)&&e.length<=(t.maxItems??1/0)&&(!t.items||e.every(e=>y(e,t.items))):"string"===t.type?"string"==typeof e&&e.length>=(t.minLength||0)&&e.length<=(t.maxLength??1/0)&&(!t.enum||t.enum.includes(e))&&(!t.pattern||new RegExp(t.pattern).test(e)):"integer"===t.type?Number.isSafeInteger(e)&&e>=(t.minimum??-1/0)&&e<=(t.maximum??1/0):"boolean"===t.type&&"boolean"==typeof e)}export function validateRuntimeCapabilityInput(e,t){const r=runtimeCapability(e);return!!r&&y(t,r.inputSchema)}export function admitRuntimeCapability({runtime:t,capabilityId:r,input:i={},roomPayload:a=null}={}){const n=runtimeCapability(r);return n?e.includes(t)&&"native"===n.runtimeSupport[t]?validateRuntimeCapabilityInput(r,i)?n.secretFreeRoomPayload&&null!=a&&!isSecretFreeRoomPayload(a)?Object.freeze({ok:!1,code:"unsafe_room_payload"}):Object.freeze({ok:!0,code:"admitted",capability:n}):Object.freeze({ok:!1,code:"invalid_capability_input"}):Object.freeze({ok:!1,code:"runtime_capability_mismatch"}):Object.freeze({ok:!1,code:"unregistered_capability"})}export function assertRuntimeCapability(e){const t=admitRuntimeCapability(e);if(!t.ok)throw new TypeError(`Runtime capability rejected: ${t.code}`);return t.capability}

package/runtime-registry.mjs

@@ -1,64 +1 @@
-import path from 'node:path'
-import { runtimeCapability, runtimeSupportsCapability } from './runtime-contract.mjs'
-
-const RUNTIMES = Object.freeze({
-  claude: Object.freeze({
-    id: 'claude', command: 'claude', label: 'Claude Code', protocol: 'agent-sdk',
-    structured: true, flow: true, canSteer: false, images: true, nativeModelCatalog: false, effortControl: true, defaultMode: 'default',
-    modes: Object.freeze(['default', 'acceptEdits', 'plan', 'bypassPermissions']),
-  }),
-  codex: Object.freeze({
-    id: 'codex', command: 'codex', label: 'Codex', protocol: 'codex-app-server',
-    structured: true, flow: true, canSteer: true, images: true, nativeModelCatalog: true, effortControl: true, defaultMode: 'bypassPermissions',
-    modes: Object.freeze(['default', 'acceptEdits', 'plan', 'bypassPermissions', 'review']),
-  }),
-  hermes: Object.freeze({
-    id: 'hermes', command: 'thinkpool', label: 'Hermes Agent', protocol: 'acp',
-    structured: true, flow: true, canSteer: true, images: true, nativeModelCatalog: true, catalogRequiresSession: true, effortControl: true, defaultMode: 'default',
-    modes: Object.freeze(['default', 'acceptEdits', 'plan', 'bypassPermissions']),
-    beta: true,
-  }),
-})
-
-export const STRUCTURED_RUNTIME_IDS = Object.freeze(Object.keys(RUNTIMES))
-export const structuredRuntimeMetadata = (runtime) => RUNTIMES[runtime] || null
-export const structuredRuntimeForCommand = (command) => {
-  const bin = path.basename(String(command || '')).toLowerCase()
-  return Object.values(RUNTIMES).find((runtime) => runtime.command === bin)?.id || null
-}
-export const defaultStructuredMode = (runtime) => structuredRuntimeMetadata(runtime)?.defaultMode || 'default'
-export const structuredRuntimeSupportsMode = (runtime, mode) => structuredRuntimeMetadata(runtime)?.modes?.includes(mode) === true
-export const structuredRuntimeSupportsFlow = (runtime) => structuredRuntimeMetadata(runtime)?.flow === true
-// This is deliberately semantic rather than a list of native tool names. The
-// bridge may expose an MCP tool, an SDK hook, or ACP registration underneath.
-export const structuredRuntimeCapability = (runtime, capabilityId) => (
-  runtimeSupportsCapability(runtime, capabilityId) ? runtimeCapability(capabilityId) : null
-)
-export const structuredModeLocked = ({ flowRole, sliceType } = {}) => (
-  flowRole === 'conductor' || flowRole === 'reviewer' || sliceType === 'review'
-)
-export const structuredModeForSlice = (runtime, lane = {}) => {
-  if (lane.flowRole !== 'reviewer' && lane.sliceType !== 'review') return lane.mode
-  if (structuredRuntimeSupportsMode(runtime, 'review')) return 'review'
-  if (structuredRuntimeSupportsMode(runtime, 'plan')) return 'plan'
-  return lane.mode
-}
-export const structuredModesForLane = (runtime, lane = {}) => {
-  const modes = structuredRuntimeMetadata(runtime)?.modes || []
-  return structuredModeLocked(lane) && modes.includes(lane.mode) ? [lane.mode] : modes
-}
-const STRUCTURED_EFFORTS = new Set(['low', 'medium', 'high', 'xhigh', 'max'])
-export const normalizeStructuredEffort = (runtime, effort) => {
-  if (effort === null) return null
-  if (runtime === 'hermes' && effort === 'none') return 'none'
-  return STRUCTURED_EFFORTS.has(effort) ? effort : 'high'
-}
-export const shouldDeferStructuredRuntime = ({ runtime, defer, cwd, flowSessionId, flowTaskKey, models } = {}) => {
-  const metadata = structuredRuntimeMetadata(runtime)
-  // Some ACP agents publish their model catalog only from session/new or
-  // session/resume. A brand-new lane must perform that zero-inference handshake
-  // before its first prompt or the model picker has no truthful choices to show.
-  // Once the exact catalog is persisted, the normal lazy-start policy resumes.
-  if (metadata?.catalogRequiresSession && !(Array.isArray(models) && models.length)) return false
-  return !!defer || (!cwd && !flowSessionId && !flowTaskKey)
-}
+import e from"node:path";import{runtimeCapability as t,runtimeSupportsCapability as o}from"./runtime-contract.mjs";const r=Object.freeze({claude:Object.freeze({id:"claude",command:"claude",label:"Claude Code",protocol:"agent-sdk",structured:!0,flow:!0,canSteer:!1,images:!0,nativeModelCatalog:!1,effortControl:!0,defaultMode:"default",modes:Object.freeze(["default","acceptEdits","plan","bypassPermissions"])}),codex:Object.freeze({id:"codex",command:"codex",label:"Codex",protocol:"codex-app-server",structured:!0,flow:!0,canSteer:!0,images:!0,nativeModelCatalog:!0,effortControl:!0,defaultMode:"bypassPermissions",modes:Object.freeze(["default","acceptEdits","plan","bypassPermissions","review"])}),hermes:Object.freeze({id:"hermes",command:"thinkpool",label:"Hermes Agent",protocol:"acp",structured:!0,flow:!0,canSteer:!0,images:!0,nativeModelCatalog:!0,catalogRequiresSession:!0,effortControl:!0,defaultMode:"default",modes:Object.freeze(["default","acceptEdits","plan","bypassPermissions"]),beta:!0})});export const STRUCTURED_RUNTIME_IDS=Object.freeze(Object.keys(r));export const structuredRuntimeMetadata=e=>r[e]||null;export const structuredRuntimeForCommand=t=>{const o=e.basename(String(t||"")).toLowerCase();return Object.values(r).find(e=>e.command===o)?.id||null};export const defaultStructuredMode=e=>structuredRuntimeMetadata(e)?.defaultMode||"default";export const structuredRuntimeSupportsMode=(e,t)=>!0===structuredRuntimeMetadata(e)?.modes?.includes(t);export const structuredRuntimeSupportsFlow=e=>!0===structuredRuntimeMetadata(e)?.flow;export const structuredRuntimeCapability=(e,r)=>o(e,r)?t(r):null;export const structuredModeLocked=({flowRole:e,sliceType:t}={})=>"conductor"===e||"reviewer"===e||"review"===t;export const structuredModeForSlice=(e,t={})=>"reviewer"!==t.flowRole&&"review"!==t.sliceType?t.mode:structuredRuntimeSupportsMode(e,"review")?"review":structuredRuntimeSupportsMode(e,"plan")?"plan":t.mode;export const structuredModesForLane=(e,t={})=>{const o=structuredRuntimeMetadata(e)?.modes||[];return structuredModeLocked(t)&&o.includes(t.mode)?[t.mode]:o};const s=new Set(["low","medium","high","xhigh","max"]);export const normalizeStructuredEffort=(e,t)=>null===t?null:"hermes"===e&&"none"===t?"none":s.has(t)?t:"high";export const shouldDeferStructuredRuntime=({runtime:e,defer:t,cwd:o,flowSessionId:r,flowTaskKey:s,models:d}={})=>{const u=structuredRuntimeMetadata(e);return!(!(!u?.catalogRequiresSession||Array.isArray(d)&&d.length)||!t&&(o||r||s))};

package/runtime-session.mjs

@@ -1,20 +1 @@
-import { startClaudeSession } from './claude-session.mjs'
-import { startCodexSession } from './codex-session.mjs'
-import { startHermesSession } from './hermes-session.mjs'
-import { assertRuntimeCapability } from './runtime-contract.mjs'
-
-const FACTORIES = Object.freeze({
-  claude: startClaudeSession,
-  codex: startCodexSession,
-  hermes: startHermesSession,
-})
-
-export function startStructuredSession(runtime, options) {
-  const factory = FACTORIES[runtime]
-  if (!factory) throw new Error(`Unsupported structured runtime: ${runtime}`)
-  // Every live adapter has a native interrupt boundary. Assert the semantic
-  // contract here so an accidental registry/runtime divergence fails at launch,
-  // rather than silently accepting a provider-specific fallback later.
-  assertRuntimeCapability({ runtime, capabilityId: 'terminal_interrupt', input: {} })
-  return factory(options)
-}
+import{startClaudeSession as r}from"./claude-session.mjs";import{startCodexSession as t}from"./codex-session.mjs";import{startHermesSession as e}from"./hermes-session.mjs";import{assertRuntimeCapability as o}from"./runtime-contract.mjs";const s=Object.freeze({claude:r,codex:t,hermes:e});export function startStructuredSession(r,t){const e=s[r];if(!e)throw new Error(`Unsupported structured runtime: ${r}`);return o({runtime:r,capabilityId:"terminal_interrupt",input:{}}),e(t)}