yuurei 0.0.1

package/dist/cli/trace-show.js

@@ -0,0 +1,22 @@
+import { join } from 'node:path';
+import { findYuureiDir } from '../config/discovery.js';
+import { readTrace } from '../trace/reader.js';
+import { YuureiError, EXIT_CODES } from './exit-codes.js';
+export async function runTraceShow(cwd, runId, logger) {
+    const yuureiDir = await findYuureiDir(cwd);
+    if (!yuureiDir) {
+        throw new YuureiError('no .yuurei/ directory found', EXIT_CODES.CONFIG_ERROR);
+    }
+    const runDir = join(yuureiDir, 'runs', runId);
+    const trace = await readTrace(runDir).catch(() => {
+        throw new YuureiError(`no trace found for run: ${runId}`, EXIT_CODES.CONFIG_ERROR);
+    });
+    logger.info(runId, {
+        runtime: trace.runtime.id,
+        exitCode: trace.execution.exit_code,
+        signal: trace.execution.signal,
+        durationMs: trace.execution.duration_ms,
+        timedOut: trace.execution.timed_out,
+    });
+}
+//# sourceMappingURL=trace-show.js.map

package/dist/cli/trace-show.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-show.js","sourceRoot":"","sources":["../../src/cli/trace-show.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc;IAC3E,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,6BAA6B,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC/C,MAAM,IAAI,WAAW,CAAC,2BAA2B,KAAK,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACzB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS;QACnC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;QAC9B,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;QACvC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/config/discovery.d.ts

@@ -0,0 +1,3 @@
+/** Walks upward from `startDir` looking for a `.yuurei/` directory, like git finds `.git/`. */
+export declare function findYuureiDir(startDir: string): Promise<string | null>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/config/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/config/discovery.ts"],"names":[],"mappings":"AAGA,+FAA+F;AAC/F,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAa5E"}

package/dist/config/discovery.js

@@ -0,0 +1,18 @@
+import { dirname, join } from 'node:path';
+import { pathExists } from '../util/fs.js';
+/** Walks upward from `startDir` looking for a `.yuurei/` directory, like git finds `.git/`. */
+export async function findYuureiDir(startDir) {
+    let current = startDir;
+    for (;;) {
+        const candidate = join(current, '.yuurei');
+        if (await pathExists(candidate)) {
+            return candidate;
+        }
+        const parent = dirname(current);
+        if (parent === current) {
+            return null;
+        }
+        current = parent;
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/config/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/config/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+/** Schema for `.yuurei/yuurei.yaml` (design doc §7.2). */
+export declare const YuureiConfigSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    profiles: z.ZodRecord<z.ZodString, z.ZodObject<{
+        runtime: z.ZodString;
+        source: z.ZodString;
+    }, z.core.$strip>>;
+    runs: z.ZodRecord<z.ZodString, z.ZodObject<{
+        profile: z.ZodString;
+        task: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type YuureiConfig = z.infer<typeof YuureiConfigSchema>;
+/** Schema for a single `profiles/<name>/profile.yaml`. */
+export declare const ProfileYamlSchema: z.ZodObject<{
+    runtime: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ProfileYaml = z.infer<typeof ProfileYamlSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAgB7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+/** Schema for `.yuurei/yuurei.yaml` (design doc §7.2). */
+export const YuureiConfigSchema = z.object({
+    version: z.literal(1),
+    profiles: z.record(z.string(), z.object({
+        runtime: z.string(),
+        source: z.string(),
+    })),
+    runs: z.record(z.string(), z.object({
+        profile: z.string(),
+        task: z.string(),
+    })),
+});
+/** Schema for a single `profiles/<name>/profile.yaml`. */
+export const ProfileYamlSchema = z.object({
+    runtime: z.string(),
+    description: z.string().optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAChB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CACH;IACD,IAAI,EAAE,CAAC,CAAC,MAAM,CACZ,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC,CACH;CACF,CAAC,CAAC;AAIH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC"}

package/dist/config/yuurei-config.d.ts

@@ -0,0 +1,4 @@
+import { type YuureiConfig } from './schema.js';
+/** Loads and validates `<yuureiDir>/yuurei.yaml`. */
+export declare function loadYuureiConfig(yuureiDir: string): Promise<YuureiConfig>;
+//# sourceMappingURL=yuurei-config.d.ts.map

package/dist/config/yuurei-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yuurei-config.d.ts","sourceRoot":"","sources":["../../src/config/yuurei-config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAEpE,qDAAqD;AACrD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAG/E"}

package/dist/config/yuurei-config.js

@@ -0,0 +1,10 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { parse } from 'yaml';
+import { YuureiConfigSchema } from './schema.js';
+/** Loads and validates `<yuureiDir>/yuurei.yaml`. */
+export async function loadYuureiConfig(yuureiDir) {
+    const raw = await readFile(join(yuureiDir, 'yuurei.yaml'), 'utf8');
+    return YuureiConfigSchema.parse(parse(raw));
+}
+//# sourceMappingURL=yuurei-config.js.map

package/dist/config/yuurei-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yuurei-config.js","sourceRoot":"","sources":["../../src/config/yuurei-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AAEpE,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/cost/noop.d.ts

@@ -0,0 +1,7 @@
+import type { CostEstimate, CostModel, UsageRecord } from './types.js';
+/** v0.3's only CostModel implementation: always declines to estimate. */
+export declare class NoopCostModel implements CostModel {
+    id(): string;
+    estimate(_input: UsageRecord): Promise<CostEstimate>;
+}
+//# sourceMappingURL=noop.d.ts.map

package/dist/cost/noop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop.d.ts","sourceRoot":"","sources":["../../src/cost/noop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEvE,yEAAyE;AACzE,qBAAa,aAAc,YAAW,SAAS;IAC7C,EAAE,IAAI,MAAM;IAIN,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAG3D"}

package/dist/cost/noop.js

@@ -0,0 +1,10 @@
+/** v0.3's only CostModel implementation: always declines to estimate. */
+export class NoopCostModel {
+    id() {
+        return 'noop';
+    }
+    async estimate(_input) {
+        return { amount: null, currency: null };
+    }
+}
+//# sourceMappingURL=noop.js.map

package/dist/cost/noop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop.js","sourceRoot":"","sources":["../../src/cost/noop.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,MAAM,OAAO,aAAa;IACxB,EAAE;QACA,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAmB;QAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;CACF"}

package/dist/cost/types.d.ts

@@ -0,0 +1,21 @@
+export interface UsageRecord {
+    runtimeId: string;
+    model: string;
+    tokensIn: number | null;
+    tokensOut: number | null;
+}
+export interface CostEstimate {
+    /** null = cannot be estimated, distinct from a real zero-cost result. */
+    amount: number | null;
+    currency: string | null;
+}
+/**
+ * Boundary converting observed usage into cost. v0.3 ships only a no-op
+ * implementation (see ./noop.ts); pricing/cost logic is deliberately out
+ * of scope so trace data stays re-computable later (design doc §6.4).
+ */
+export interface CostModel {
+    id(): string;
+    estimate(input: UsageRecord): Promise<CostEstimate>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cost/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cost/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,IAAI,MAAM,CAAC;IACb,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACrD"}

package/dist/cost/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/cost/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cost/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+import cac from 'cac';
+import { runClean } from './cli/clean.js';
+import { printDoctorReport, runDoctor } from './cli/doctor.js';
+import { runInit } from './cli/init.js';
+import { runInspect } from './cli/inspect.js';
+import { EXIT_CODES, YuureiError } from './cli/exit-codes.js';
+import { loggerForFlags } from './cli/output.js';
+import { runProfileList } from './cli/profile-list.js';
+import { runRun } from './cli/run.js';
+import { runTraceShow } from './cli/trace-show.js';
+import { packageVersion } from './version.js';
+const cli = cac('yuurei');
+function withErrorHandling(action) {
+    return async (...args) => {
+        try {
+            await action(...args);
+        }
+        catch (error) {
+            const flags = args[args.length - 1];
+            const logger = loggerForFlags(flags);
+            if (error instanceof YuureiError) {
+                logger.error(error.message);
+                process.exitCode = error.exitCode;
+                return;
+            }
+            logger.error(error instanceof Error ? error.message : String(error));
+            process.exitCode = EXIT_CODES.RUNTIME_EXECUTION_FAILED;
+        }
+    };
+}
+cli
+    .command('doctor', 'Inspect the environment; never mutates it')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (flags) => {
+    const report = await runDoctor();
+    printDoctorReport(report, loggerForFlags(flags), flags.json ? 'json' : 'human');
+}));
+cli
+    .command('profile <action>', 'Manage profiles (only "list" is supported)')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (action, flags) => {
+    if (action !== 'list') {
+        throw new YuureiError(`unknown profile action: ${action}`, EXIT_CODES.CONFIG_ERROR);
+    }
+    await runProfileList(process.cwd(), loggerForFlags(flags));
+}));
+cli
+    .command('inspect <profile-name>', 'Resolve a profile without running anything')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (profileName, flags) => {
+    await runInspect(process.cwd(), profileName, loggerForFlags(flags));
+}));
+cli
+    .command('clean', 'Remove orphaned isolation temp directories')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (flags) => {
+    await runClean(loggerForFlags(flags));
+}));
+cli
+    .command('init [directory]', 'Scaffold a new project for a first run')
+    .option('--runtime <runtime>', 'Runtime to scaffold for (default: claude-code)')
+    .option('--profile <name>', 'Profile name (default: claude-basic)')
+    .option('--task <name>', 'Task name (default: hello)')
+    .option('--run <name>', 'Named run referencing the profile and task (default: the task name)')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (directory, flags) => {
+    await runInit(process.cwd(), {
+        directory: directory ?? '',
+        runtime: flags.runtime ?? 'claude-code',
+        profile: flags.profile ?? 'claude-basic',
+        task: flags.task ?? 'hello',
+        ...(flags.run !== undefined ? { run: flags.run } : {}),
+        json: flags.json ?? false,
+    }, loggerForFlags(flags));
+}));
+cli
+    .command('run [run-name]', 'Execute a run')
+    .option('--profile <profile>', 'Profile name (used with --task instead of a run name)')
+    .option('--task <task>', 'Task file path (used with --profile instead of a run name)')
+    .option('--model <model>', 'Requested model')
+    .option('--keep', 'Keep the isolated workspace for debugging')
+    .option('--timeout <ms>', 'Kill the runtime process after this many milliseconds (default: no timeout)')
+    .option('--isolation <level>', 'Isolation strategy: level0 or level1 (default: level1)')
+    .option('--bridge-codex-auth-file', 'Experimental: bridge the real ~/.codex/auth.json into the isolated run (Codex only, off by default)')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (runName, flags) => {
+    await runRun(process.cwd(), {
+        runName,
+        profile: flags.profile,
+        task: flags.task,
+        model: flags.model,
+        keep: flags.keep,
+        timeoutMs: flags.timeout !== undefined ? Number(flags.timeout) : undefined,
+        isolation: flags.isolation,
+        bridgeCodexAuthFile: flags.bridgeCodexAuthFile,
+    }, loggerForFlags(flags));
+}));
+cli
+    .command('trace <action> <run-id>', 'Inspect traces (only "show" is supported)')
+    .option('--json', 'Output as JSON')
+    .action(withErrorHandling(async (action, runId, flags) => {
+    if (action !== 'show') {
+        throw new YuureiError(`unknown trace action: ${action}`, EXIT_CODES.CONFIG_ERROR);
+    }
+    await runTraceShow(process.cwd(), runId, loggerForFlags(flags));
+}));
+cli.help();
+cli.version(packageVersion);
+cli.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE1B,SAAS,iBAAiB,CACxB,MAAwC;IAExC,OAAO,KAAK,EAAE,GAAG,IAAU,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAuB,CAAC;YAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5B,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,wBAAwB,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,GAAG;KACA,OAAO,CAAC,QAAQ,EAAE,2CAA2C,CAAC;KAC9D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CAAC,KAAK,EAAE,KAAyB,EAAE,EAAE;IACpD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAClF,CAAC,CAAC,CACH,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;KACzE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CAAC,KAAK,EAAE,MAAc,EAAE,KAAyB,EAAE,EAAE;IACpE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,2BAA2B,MAAM,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC,CACH,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,wBAAwB,EAAE,4CAA4C,CAAC;KAC/E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CAAC,KAAK,EAAE,WAAmB,EAAE,KAAyB,EAAE,EAAE;IACzE,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CACH,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,OAAO,EAAE,4CAA4C,CAAC;KAC9D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CAAC,KAAK,EAAE,KAAyB,EAAE,EAAE;IACpD,MAAM,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CACH,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,kBAAkB,EAAE,wCAAwC,CAAC;KACrE,MAAM,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KAC/E,MAAM,CAAC,kBAAkB,EAAE,sCAAsC,CAAC;KAClE,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;KACrD,MAAM,CAAC,cAAc,EAAE,qEAAqE,CAAC;KAC7F,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CACf,KAAK,EACH,SAA6B,EAC7B,KAMC,EACD,EAAE;IACF,MAAM,OAAO,CACX,OAAO,CAAC,GAAG,EAAE,EACb;QACE,SAAS,EAAE,SAAS,IAAI,EAAE;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,aAAa;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,cAAc;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO;QAC3B,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK;KAC1B,EACD,cAAc,CAAC,KAAK,CAAC,CACtB,CAAC;AACJ,CAAC,CACF,CACF,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC;KAC1C,MAAM,CAAC,qBAAqB,EAAE,uDAAuD,CAAC;KACtF,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;KACrF,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;KAC7D,MAAM,CACL,gBAAgB,EAChB,6EAA6E,CAC9E;KACA,MAAM,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;KACvF,MAAM,CACL,0BAA0B,EAC1B,qGAAqG,CACtG;KACA,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CACf,KAAK,EACH,OAA2B,EAC3B,KASC,EACD,EAAE;IACF,MAAM,MAAM,CACV,OAAO,CAAC,GAAG,EAAE,EACb;QACE,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1E,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,EACD,cAAc,CAAC,KAAK,CAAC,CACtB,CAAC;AACJ,CAAC,CACF,CACF,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,yBAAyB,EAAE,2CAA2C,CAAC;KAC/E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CACL,iBAAiB,CAAC,KAAK,EAAE,MAAc,EAAE,KAAa,EAAE,KAAyB,EAAE,EAAE;IACnF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,yBAAyB,MAAM,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC,CAAC,CACH,CAAC;AAEJ,GAAG,CAAC,IAAI,EAAE,CAAC;AACX,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AAC5B,GAAG,CAAC,KAAK,EAAE,CAAC"}

package/dist/isolation/config-root.d.ts

@@ -0,0 +1,9 @@
+import type { IsolationContext } from './types.js';
+/**
+ * Returns the directory from which runtime-specific config paths should be
+ * resolved. Under level1, this is the isolated homeDir; under level0, it is
+ * rootDir (so CLAUDE_CONFIG_DIR / CODEX_HOME still point away from the user's
+ * real ~/.claude / ~/.codex — see design doc §9.3).
+ */
+export declare function configRootOf(context: IsolationContext): string;
+//# sourceMappingURL=config-root.d.ts.map

package/dist/isolation/config-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-root.d.ts","sourceRoot":"","sources":["../../src/isolation/config-root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAE9D"}

package/dist/isolation/config-root.js

@@ -0,0 +1,10 @@
+/**
+ * Returns the directory from which runtime-specific config paths should be
+ * resolved. Under level1, this is the isolated homeDir; under level0, it is
+ * rootDir (so CLAUDE_CONFIG_DIR / CODEX_HOME still point away from the user's
+ * real ~/.claude / ~/.codex — see design doc §9.3).
+ */
+export function configRootOf(context) {
+    return context.homeDir ?? context.rootDir;
+}
+//# sourceMappingURL=config-root.js.map

package/dist/isolation/config-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-root.js","sourceRoot":"","sources":["../../src/isolation/config-root.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAyB;IACpD,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;AAC5C,CAAC"}

package/dist/isolation/env.d.ts

@@ -0,0 +1,2 @@
+export declare function buildRestrictedEnv(source: NodeJS.ProcessEnv, overrides: Record<string, string>): Record<string, string>;
+//# sourceMappingURL=env.d.ts.map

package/dist/isolation/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/isolation/env.ts"],"names":[],"mappings":"AAOA,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,UAAU,EACzB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB"}

package/dist/isolation/env.js

@@ -0,0 +1,17 @@
+/**
+ * Environment variables that are safe to forward into an isolated run
+ * unchanged (e.g. terminal/locale basics). Everything else is dropped
+ * unless a runtime adapter explicitly re-adds something it needs.
+ */
+const ALLOWED_ENV_KEYS = ['PATH', 'LANG', 'LC_ALL', 'TERM', 'TZ'];
+export function buildRestrictedEnv(source, overrides) {
+    const restricted = {};
+    for (const key of ALLOWED_ENV_KEYS) {
+        const value = source[key];
+        if (value !== undefined) {
+            restricted[key] = value;
+        }
+    }
+    return { ...restricted, ...overrides };
+}
+//# sourceMappingURL=env.js.map

package/dist/isolation/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/isolation/env.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAElE,MAAM,UAAU,kBAAkB,CAChC,MAAyB,EACzB,SAAiC;IAEjC,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,SAAS,EAAE,CAAC;AACzC,CAAC"}

package/dist/isolation/index.d.ts

@@ -0,0 +1,9 @@
+import type { Isolation, IsolationContext } from './types.js';
+export declare function createIsolation(strategy: 'level0' | 'level1'): Isolation;
+/**
+ * Fail-closed gate: throws if isolation cannot be verified. This is the
+ * only place callers should call to get a verified context — never call
+ * `isolation.verify()` directly and branch on the result elsewhere.
+ */
+export declare function createVerifiedIsolation(isolation: Isolation, cell: Parameters<Isolation['create']>[0]): Promise<IsolationContext>;
+//# sourceMappingURL=index.d.ts.map

package/dist/isolation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/isolation/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAmB,MAAM,YAAY,CAAC;AAE/E,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAExE;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GACvC,OAAO,CAAC,gBAAgB,CAAC,CAa3B"}

package/dist/isolation/index.js

@@ -0,0 +1,21 @@
+import { EXIT_CODES, YuureiError } from '../cli/exit-codes.js';
+import { Level0Isolation } from './level0.js';
+import { Level1Isolation } from './level1.js';
+export function createIsolation(strategy) {
+    return strategy === 'level0' ? new Level0Isolation() : new Level1Isolation();
+}
+/**
+ * Fail-closed gate: throws if isolation cannot be verified. This is the
+ * only place callers should call to get a verified context — never call
+ * `isolation.verify()` directly and branch on the result elsewhere.
+ */
+export async function createVerifiedIsolation(isolation, cell) {
+    const context = await isolation.create(cell);
+    const report = await isolation.verify(context);
+    if (!report.verified) {
+        await isolation.dispose(context);
+        throw new YuureiError(`isolation verification failed: ${report.findings.join('; ')}`, EXIT_CODES.ISOLATION_VERIFICATION_FAILED);
+    }
+    return context;
+}
+//# sourceMappingURL=index.js.map

package/dist/isolation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/isolation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,UAAU,eAAe,CAAC,QAA6B;IAC3D,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAoB,EACpB,IAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAoB,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,WAAW,CACnB,kCAAkC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,UAAU,CAAC,6BAA6B,CACzC,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/isolation/level0.d.ts

@@ -0,0 +1,20 @@
+import type { ResolvedCell } from '../cell/types.js';
+import type { Isolation, IsolationContext, IsolationReport } from './types.js';
+/**
+ * Level 0 isolation: swaps CLI arguments / config-root paths only, no
+ * temporary HOME. The narrowest isolation strategy (design doc §9.3).
+ *
+ * Unlike level1, the operator's real HOME is left untouched in the
+ * spawned process's environment — level0 only redirects config-root
+ * resolution (e.g. CLAUDE_CONFIG_DIR/CODEX_HOME, set later by the runtime
+ * adapter via configRootOf()) rather than sandboxing HOME itself. A
+ * runtime, hook, or command that reads $HOME for anything other than its
+ * own config root still sees the operator's real home directory under
+ * level0 — that is the intended, narrower tradeoff this level makes.
+ */
+export declare class Level0Isolation implements Isolation {
+    create(_cell: ResolvedCell): Promise<IsolationContext>;
+    verify(context: IsolationContext): Promise<IsolationReport>;
+    dispose(context: IsolationContext): Promise<void>;
+}
+//# sourceMappingURL=level0.d.ts.map

package/dist/isolation/level0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"level0.d.ts","sourceRoot":"","sources":["../../src/isolation/level0.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG/E;;;;;;;;;;;GAWG;AACH,qBAAa,eAAgB,YAAW,SAAS;IACzC,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYtD,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAoB3D,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAIxD"}

package/dist/isolation/level0.js

@@ -0,0 +1,51 @@
+import { buildRestrictedEnv } from './env.js';
+import { createTempDir, removeTempDir } from './tempdir.js';
+import { pathExists } from '../util/fs.js';
+/**
+ * Level 0 isolation: swaps CLI arguments / config-root paths only, no
+ * temporary HOME. The narrowest isolation strategy (design doc §9.3).
+ *
+ * Unlike level1, the operator's real HOME is left untouched in the
+ * spawned process's environment — level0 only redirects config-root
+ * resolution (e.g. CLAUDE_CONFIG_DIR/CODEX_HOME, set later by the runtime
+ * adapter via configRootOf()) rather than sandboxing HOME itself. A
+ * runtime, hook, or command that reads $HOME for anything other than its
+ * own config root still sees the operator's real home directory under
+ * level0 — that is the intended, narrower tradeoff this level makes.
+ */
+export class Level0Isolation {
+    async create(_cell) {
+        const rootDir = await createTempDir();
+        const realHome = process.env['HOME'];
+        return {
+            strategy: 'level0',
+            rootDir,
+            homeDir: null,
+            env: buildRestrictedEnv(process.env, realHome !== undefined ? { HOME: realHome } : {}),
+            keep: false,
+        };
+    }
+    async verify(context) {
+        const checkedAt = new Date().toISOString();
+        const findings = [];
+        if (!(await pathExists(context.rootDir))) {
+            findings.push(`rootDir does not exist: ${context.rootDir}`);
+        }
+        if (context.homeDir !== null) {
+            findings.push('level0 isolation must not set homeDir');
+        }
+        const realHome = process.env['HOME'];
+        if (realHome !== undefined && context.env['HOME'] !== realHome) {
+            findings.push('level0 isolation must leave the real HOME untouched');
+        }
+        return findings.length === 0
+            ? { verified: true, strategy: 'level0', checkedAt }
+            : { verified: false, strategy: 'level0', checkedAt, findings };
+    }
+    async dispose(context) {
+        if (context.keep)
+            return;
+        await removeTempDir(context.rootDir);
+    }
+}
+//# sourceMappingURL=level0.js.map

package/dist/isolation/level0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"level0.js","sourceRoot":"","sources":["../../src/isolation/level0.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,MAAM,CAAC,KAAmB;QAC9B,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO;YACP,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;YACnD,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAyB;QACrC,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO;QACzB,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/isolation/level1.d.ts

@@ -0,0 +1,13 @@
+import type { ResolvedCell } from '../cell/types.js';
+import type { Isolation, IsolationContext, IsolationReport } from './types.js';
+/**
+ * Level 1 isolation: temporary HOME directory plus a restricted env var
+ * set, so runtime adapters that read `$HOME`-relative config never touch
+ * the user's real global configuration (design doc §9.3).
+ */
+export declare class Level1Isolation implements Isolation {
+    create(_cell: ResolvedCell): Promise<IsolationContext>;
+    verify(context: IsolationContext): Promise<IsolationReport>;
+    dispose(context: IsolationContext): Promise<void>;
+}
+//# sourceMappingURL=level1.d.ts.map

package/dist/isolation/level1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"level1.d.ts","sourceRoot":"","sources":["../../src/isolation/level1.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE/E;;;;GAIG;AACH,qBAAa,eAAgB,YAAW,SAAS;IACzC,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IActD,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IA8B3D,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAIxD"}

package/dist/isolation/level1.js

@@ -0,0 +1,58 @@
+import { mkdir, realpath } from 'node:fs/promises';
+import { join } from 'node:path';
+import { isPathWithin, pathExists } from '../util/fs.js';
+import { buildRestrictedEnv } from './env.js';
+import { createTempDir, removeTempDir } from './tempdir.js';
+/**
+ * Level 1 isolation: temporary HOME directory plus a restricted env var
+ * set, so runtime adapters that read `$HOME`-relative config never touch
+ * the user's real global configuration (design doc §9.3).
+ */
+export class Level1Isolation {
+    async create(_cell) {
+        const rootDir = await createTempDir();
+        const homeDir = join(rootDir, 'home');
+        await mkdir(homeDir, { recursive: true, mode: 0o700 });
+        return {
+            strategy: 'level1',
+            rootDir,
+            homeDir,
+            env: buildRestrictedEnv(process.env, { HOME: homeDir }),
+            keep: false,
+        };
+    }
+    async verify(context) {
+        const checkedAt = new Date().toISOString();
+        const findings = [];
+        if (context.homeDir === null) {
+            findings.push('level1 isolation requires a homeDir');
+        }
+        else {
+            if (!(await pathExists(context.homeDir))) {
+                findings.push(`homeDir does not exist: ${context.homeDir}`);
+            }
+            if (!(await isPathWithin(context.rootDir, context.homeDir))) {
+                findings.push(`homeDir ${context.homeDir} is not nested under rootDir ${context.rootDir}`);
+            }
+            const realHome = process.env['HOME']
+                ? await realpath(process.env['HOME']).catch(() => null)
+                : null;
+            const realIsolatedHome = await realpath(context.homeDir).catch(() => null);
+            if (realHome !== null && realIsolatedHome === realHome) {
+                findings.push('isolated homeDir resolves to the real user HOME');
+            }
+        }
+        if (context.env['HOME'] !== context.homeDir) {
+            findings.push('env.HOME does not match the isolated homeDir');
+        }
+        return findings.length === 0
+            ? { verified: true, strategy: 'level1', checkedAt }
+            : { verified: false, strategy: 'level1', checkedAt, findings };
+    }
+    async dispose(context) {
+        if (context.keep)
+            return;
+        await removeTempDir(context.rootDir);
+    }
+}
+//# sourceMappingURL=level1.js.map

package/dist/isolation/level1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"level1.js","sourceRoot":"","sources":["../../src/isolation/level1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG5D;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,MAAM,CAAC,KAAmB;QAC9B,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvD,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO;YACP,OAAO;YACP,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACvD,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5D,QAAQ,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,OAAO,gCAAgC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3E,IAAI,QAAQ,KAAK,IAAI,IAAI,gBAAgB,KAAK,QAAQ,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;YACnD,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAyB;QACrC,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO;QACzB,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;CACF"}