yuurei 0.0.1

package/dist/isolation/tempdir.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Default minimum age before a `yuurei-*` temp dir counts as orphaned. A
+ * run's temp root is only written directly at creation time (level1 writes
+ * `home/` right after), so an actively-used root can look idle for a long
+ * time; the threshold exists so the sweep never touches a directory a
+ * (possibly hung) live run still owns.
+ */
+export declare const ORPHAN_TEMP_DIR_MIN_AGE_MS: number;
+export interface OrphanTempDir {
+    /** Absolute path to the orphaned directory. */
+    path: string;
+    /** Milliseconds since the directory was last modified. */
+    ageMs: number;
+}
+export interface FindOrphanTempDirsOptions {
+    /**
+     * Directory to scan for `yuurei-*` entries. Defaults to `os.tmpdir()`.
+     * Injectable for tests so the sweep can run against a scratch root.
+     */
+    root?: string;
+    /** Only directories older than this many milliseconds count. Defaults to `ORPHAN_TEMP_DIR_MIN_AGE_MS`. */
+    olderThanMs?: number;
+}
+export declare function createTempDir(): Promise<string>;
+export declare function removeTempDir(path: string): Promise<void>;
+/**
+ * Lists `yuurei-*` temp directories directly under the temp root that are
+ * old enough to be considered orphaned — left behind by a `SIGKILL`, power
+ * loss, or hard crash that bypassed the signal handler and `finally`-block
+ * cleanup (design doc §9.1, §15 safety regression). Only real directories
+ * are considered: a planted `yuurei-*` symlink or plain file with the prefix
+ * is ignored, so the sweep can never be tricked into deleting its target.
+ * Directories owned by another user are skipped too: `os.tmpdir()` is
+ * per-user on macOS, but a Linux host with a shared `/tmp` puts other
+ * people's `yuurei-*` runs in the same root, and this sweep deletes.
+ * Unreadable roots and entries are skipped rather than propagated.
+ */
+export declare function findOrphanTempDirs(options?: FindOrphanTempDirsOptions): Promise<OrphanTempDir[]>;
+export interface RemoveOrphanTempDirsResult {
+    removed: OrphanTempDir[];
+    failed: {
+        path: string;
+        error: string;
+    }[];
+}
+/**
+ * Finds and removes orphaned temp directories (see `findOrphanTempDirs`).
+ * Removal is best-effort: a failed deletion is reported in the result
+ * rather than aborting the sweep, so one unremovable directory does not
+ * hide the rest.
+ */
+export declare function removeOrphanTempDirs(options?: FindOrphanTempDirsOptions): Promise<RemoveOrphanTempDirsResult>;
+//# sourceMappingURL=tempdir.d.ts.map

package/dist/isolation/tempdir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tempdir.d.ts","sourceRoot":"","sources":["../../src/isolation/tempdir.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAErD;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC,CA8B1B;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAcrC"}

package/dist/isolation/tempdir.js

@@ -0,0 +1,87 @@
+import { lstat, mkdtemp, readdir, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const PREFIX = 'yuurei-';
+/**
+ * Default minimum age before a `yuurei-*` temp dir counts as orphaned. A
+ * run's temp root is only written directly at creation time (level1 writes
+ * `home/` right after), so an actively-used root can look idle for a long
+ * time; the threshold exists so the sweep never touches a directory a
+ * (possibly hung) live run still owns.
+ */
+export const ORPHAN_TEMP_DIR_MIN_AGE_MS = 24 * 60 * 60 * 1000;
+export async function createTempDir() {
+    return mkdtemp(join(tmpdir(), PREFIX));
+}
+export async function removeTempDir(path) {
+    await rm(path, { recursive: true, force: true });
+}
+/**
+ * Lists `yuurei-*` temp directories directly under the temp root that are
+ * old enough to be considered orphaned — left behind by a `SIGKILL`, power
+ * loss, or hard crash that bypassed the signal handler and `finally`-block
+ * cleanup (design doc §9.1, §15 safety regression). Only real directories
+ * are considered: a planted `yuurei-*` symlink or plain file with the prefix
+ * is ignored, so the sweep can never be tricked into deleting its target.
+ * Directories owned by another user are skipped too: `os.tmpdir()` is
+ * per-user on macOS, but a Linux host with a shared `/tmp` puts other
+ * people's `yuurei-*` runs in the same root, and this sweep deletes.
+ * Unreadable roots and entries are skipped rather than propagated.
+ */
+export async function findOrphanTempDirs(options) {
+    const root = options?.root ?? tmpdir();
+    const olderThanMs = options?.olderThanMs ?? ORPHAN_TEMP_DIR_MIN_AGE_MS;
+    const now = Date.now();
+    const orphans = [];
+    // Undefined on platforms without POSIX uids, where there is no ownership
+    // to compare and the other guards above still apply.
+    const uid = process.getuid?.();
+    let entries;
+    try {
+        entries = await readdir(root, { withFileTypes: true });
+    }
+    catch {
+        return orphans;
+    }
+    for (const entry of entries) {
+        if (!entry.name.startsWith(PREFIX))
+            continue;
+        // withFileTypes reads d_type; excludes symlinks (type 'symlink') and files.
+        if (!entry.isDirectory())
+            continue;
+        const path = join(root, entry.name);
+        // lstat (not stat) so a symlink swapped in after readdir is not followed.
+        const info = await lstat(path).catch(() => null);
+        if (info === null || !info.isDirectory())
+            continue;
+        if (uid !== undefined && info.uid !== uid)
+            continue;
+        const ageMs = now - info.mtimeMs;
+        if (ageMs >= olderThanMs)
+            orphans.push({ path, ageMs });
+    }
+    return orphans;
+}
+/**
+ * Finds and removes orphaned temp directories (see `findOrphanTempDirs`).
+ * Removal is best-effort: a failed deletion is reported in the result
+ * rather than aborting the sweep, so one unremovable directory does not
+ * hide the rest.
+ */
+export async function removeOrphanTempDirs(options) {
+    const result = { removed: [], failed: [] };
+    for (const orphan of await findOrphanTempDirs(options)) {
+        try {
+            await rm(orphan.path, { recursive: true, force: true });
+            result.removed.push(orphan);
+        }
+        catch (error) {
+            result.failed.push({
+                path: orphan.path,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=tempdir.js.map

package/dist/isolation/tempdir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tempdir.js","sourceRoot":"","sources":["../../src/isolation/tempdir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,MAAM,GAAG,SAAS,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAmB9D,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAmC;IAEnC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,0BAA0B,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAE/B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7C,4EAA4E;QAC5E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,0EAA0E;QAC1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,SAAS;QACnD,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;YAAE,SAAS;QACpD,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,KAAK,IAAI,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAmC;IAEnC,MAAM,MAAM,GAA+B,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvE,KAAK,MAAM,MAAM,IAAI,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/isolation/types.d.ts

@@ -0,0 +1,37 @@
+import type { ResolvedCell } from '../cell/types.js';
+export type IsolationStrategy = 'level0' | 'level1';
+export interface IsolationContext {
+    strategy: IsolationStrategy;
+    /** Absolute path to the temporary root created for this run. */
+    rootDir: string;
+    /** Temporary HOME directory. Set for level1, null for level0 (arg/config-root swap only). */
+    homeDir: string | null;
+    env: Record<string, string>;
+    /** Corresponds to the `--keep` CLI flag: skip cleanup in `dispose()` for debugging. */
+    keep: boolean;
+}
+/**
+ * Discriminated union so callers cannot reach `Runtime.execute()` without
+ * narrowing to `verified: true` first — see the fail-closed principle in
+ * design doc §9.1 / §12.2: isolation that cannot be verified must not run.
+ */
+export type IsolationReport = {
+    verified: true;
+    strategy: IsolationStrategy;
+    checkedAt: string;
+} | {
+    verified: false;
+    strategy: IsolationStrategy;
+    checkedAt: string;
+    findings: string[];
+};
+/**
+ * Builds a temporary execution environment isolated from the user's global
+ * runtime configuration, verifies that isolation, and tears it down.
+ */
+export interface Isolation {
+    create(cell: ResolvedCell): Promise<IsolationContext>;
+    verify(context: IsolationContext): Promise<IsolationReport>;
+    dispose(context: IsolationContext): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/isolation/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/isolation/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,uFAAuF;IACvF,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE5F;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5D,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD"}

package/dist/isolation/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/isolation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/isolation/types.ts"],"names":[],"mappings":""}

package/dist/profile/loader.d.ts

@@ -0,0 +1,9 @@
+import type { Profile, ResolvedProfile } from './types.js';
+/**
+ * Loads `profile.yaml` and every file under `config/` into resolved
+ * content, then digests that content. The digest is computed over actual
+ * file contents, not the profile name, so two profiles with the same name
+ * but different config never collide (design doc §7.3).
+ */
+export declare function loadProfile(profile: Profile): Promise<ResolvedProfile>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/profile/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/profile/loader.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAkB,MAAM,YAAY,CAAC;AAE3E;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CA4B5E"}

package/dist/profile/loader.js

@@ -0,0 +1,95 @@
+import { readdir, readFile, realpath, stat } from 'node:fs/promises';
+import { join, relative } from 'node:path';
+import { parse } from 'yaml';
+import { canonicalJsonStringify } from '../util/json.js';
+import { sha256Digest } from '../util/hash.js';
+import { isPathWithin, pathExists } from '../util/fs.js';
+import { ProfileYamlSchema } from '../config/schema.js';
+import { EXIT_CODES, YuureiError } from '../cli/exit-codes.js';
+/**
+ * Loads `profile.yaml` and every file under `config/` into resolved
+ * content, then digests that content. The digest is computed over actual
+ * file contents, not the profile name, so two profiles with the same name
+ * but different config never collide (design doc §7.3).
+ */
+export async function loadProfile(profile) {
+    const profileYamlRaw = await readFile(join(profile.sourceDir, 'profile.yaml'), 'utf8');
+    const profileYaml = ProfileYamlSchema.parse(parse(profileYamlRaw));
+    const configDir = join(profile.sourceDir, 'config');
+    const rawConfigFiles = (await pathExists(configDir)) ? await readAllFiles(configDir) : {};
+    const content = { profileYaml, configFiles: rawConfigFiles };
+    // Digest over base64 (not raw Buffers) so JSON serialization of the
+    // canonical form is stable and deterministic for binary content.
+    const digestContent = {
+        profileYaml,
+        configFiles: Object.fromEntries(Object.entries(rawConfigFiles).map(([path, { content, mode }]) => [
+            path,
+            { content: content.toString('base64'), mode },
+        ])),
+    };
+    const digest = sha256Digest(canonicalJsonStringify(digestContent));
+    return {
+        name: profile.name,
+        runtime: profileYaml.runtime,
+        content,
+        digest,
+    };
+}
+async function readAllFiles(rootDir) {
+    const result = {};
+    const rootReal = await realpath(rootDir);
+    // `ancestors` holds the realpath of every directory on the CURRENT walk
+    // branch (root to here), not every directory ever visited. A global
+    // visited set would incorrectly drop a second, non-cyclic symlink to an
+    // already-seen sibling directory (e.g. two symlinks both pointing at
+    // config/shared/) and make the digest depend on readdir() ordering.
+    // Tracking only the current branch still catches every real cycle,
+    // including a symlink pointing back at a plain (non-symlink) ancestor.
+    async function walk(currentDir, ancestors) {
+        const entries = await readdir(currentDir, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = join(currentDir, entry.name);
+            if (entry.isSymbolicLink()) {
+                // realpath() MUST come before isPathWithin(): isPathWithin() swallows a
+                // realpath failure via .catch(() => resolve(child)), which makes a dangling
+                // symlink appear to be within the boundary and pass the guard.
+                const target = await realpath(fullPath).catch(() => null);
+                if (target === null) {
+                    throw new YuureiError(`profile config contains a dangling symlink: ${relative(rootDir, fullPath)}`, EXIT_CODES.CONFIG_ERROR);
+                }
+                if (!(await isPathWithin(rootReal, target))) {
+                    throw new YuureiError(`profile config symlink escapes the profile config directory: ${relative(rootDir, fullPath)}`, EXIT_CODES.CONFIG_ERROR);
+                }
+                const targetStat = await stat(target);
+                if (targetStat.isDirectory()) {
+                    if (ancestors.has(target)) {
+                        throw new YuureiError(`profile config symlink forms a cycle: ${relative(rootDir, fullPath)}`, EXIT_CODES.CONFIG_ERROR);
+                    }
+                    await walk(fullPath, new Set([...ancestors, target]));
+                }
+                else if (targetStat.isFile()) {
+                    result[relative(rootDir, fullPath)] = {
+                        content: await readFile(target),
+                        mode: targetStat.mode,
+                    };
+                }
+            }
+            else if (entry.isDirectory()) {
+                const target = await realpath(fullPath);
+                if (ancestors.has(target)) {
+                    throw new YuureiError(`profile config symlink forms a cycle: ${relative(rootDir, fullPath)}`, EXIT_CODES.CONFIG_ERROR);
+                }
+                await walk(fullPath, new Set([...ancestors, target]));
+            }
+            else if (entry.isFile()) {
+                result[relative(rootDir, fullPath)] = {
+                    content: await readFile(fullPath),
+                    mode: (await stat(fullPath)).mode,
+                };
+            }
+        }
+    }
+    await walk(rootDir, new Set([rootReal]));
+    return result;
+}
+//# sourceMappingURL=loader.js.map

package/dist/profile/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/profile/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB;IAChD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1F,MAAM,OAAO,GAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IAE7E,oEAAoE;IACpE,iEAAiE;IACjE,MAAM,aAAa,GAAG;QACpB,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAChE,IAAI;YACJ,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE;SAC9C,CAAC,CACH;KACF,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IAEnE,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe;IAEf,MAAM,MAAM,GAAsD,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzC,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,uEAAuE;IACvE,KAAK,UAAU,IAAI,CAAC,UAAkB,EAAE,SAA8B;QACpE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,wEAAwE;gBACxE,4EAA4E;gBAC5E,+DAA+D;gBAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,IAAI,WAAW,CACnB,+CAA+C,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAC5E,UAAU,CAAC,YAAY,CACxB,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,WAAW,CACnB,gEAAgE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAC7F,UAAU,CAAC,YAAY,CACxB,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC7B,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC1B,MAAM,IAAI,WAAW,CACnB,yCAAyC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EACtE,UAAU,CAAC,YAAY,CACxB,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBACxD,CAAC;qBAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC/B,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,GAAG;wBACpC,OAAO,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC;wBAC/B,IAAI,EAAE,UAAU,CAAC,IAAI;qBACtB,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,WAAW,CACnB,yCAAyC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EACtE,UAAU,CAAC,YAAY,CACxB,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACxD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,GAAG;oBACpC,OAAO,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC;oBACjC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/profile/manifest.d.ts

@@ -0,0 +1,29 @@
+import type { ResolvedProfileRef } from '../cell/types.js';
+import type { ProfileYaml } from '../config/schema.js';
+/** What is recorded about one materialized profile config file. */
+export interface ProfileFileManifest {
+    digest: string;
+    /** Permission bits the file was materialized with, as `writeFileTree` applies them. */
+    mode: number;
+    bytes: number;
+}
+/**
+ * The durable record of which profile a run used, written to
+ * `resolved-profile.json`.
+ */
+export interface ProfileManifest {
+    name: string;
+    digest: string;
+    profileYaml: ProfileYaml;
+    configFiles: Record<string, ProfileFileManifest>;
+}
+/**
+ * Reduces a resolved profile to what §10.1 records, a digest of the profile
+ * content rather than the content itself.
+ *
+ * Redacting the bytes instead does not work: `redactSecrets` matches
+ * secret-shaped *text*, and a `Buffer` serializes to a numeric array, so the
+ * patterns never see a string to match.
+ */
+export declare function toProfileManifest(resolved: ResolvedProfileRef): ProfileManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/profile/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/profile/manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAClD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,eAAe,CAkB/E"}

package/dist/profile/manifest.js

@@ -0,0 +1,28 @@
+import { sha256Digest } from '../util/hash.js';
+/**
+ * Reduces a resolved profile to what §10.1 records, a digest of the profile
+ * content rather than the content itself.
+ *
+ * Redacting the bytes instead does not work: `redactSecrets` matches
+ * secret-shaped *text*, and a `Buffer` serializes to a numeric array, so the
+ * patterns never see a string to match.
+ */
+export function toProfileManifest(resolved) {
+    const configFiles = {};
+    for (const [path, file] of Object.entries(resolved.content.configFiles)) {
+        configFiles[path] = {
+            digest: sha256Digest(file.content),
+            // The same mask `writeFileTree` chmods with (`util/fs.ts`), so this
+            // records the bits that actually landed, not the profile's raw stat mode.
+            mode: file.mode & 0o777,
+            bytes: file.content.byteLength,
+        };
+    }
+    return {
+        name: resolved.name,
+        digest: resolved.digest,
+        profileYaml: resolved.content.profileYaml,
+        configFiles,
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/profile/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/profile/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAuB/C;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,MAAM,WAAW,GAAwC,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACxE,WAAW,CAAC,IAAI,CAAC,GAAG;YAClB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,oEAAoE;YACpE,0EAA0E;YAC1E,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK;YACvB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;SAC/B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;QACzC,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/profile/types.d.ts

@@ -0,0 +1,31 @@
+import type { ProfileYaml } from '../config/schema.js';
+/**
+ * A profile's fully-loaded content: the parsed profile.yaml plus a snapshot
+ * of every file under the profile's `config/`.
+ *
+ * INVARIANT: every key of `configFiles` is a relative path produced by
+ * `path.relative()` over a walk rooted at that profile's `config/`, so no key
+ * escapes its destination directory when re-joined. Enforced at the only
+ * producer (`loadProfile`), which is the filesystem boundary.
+ */
+export interface ProfileContent {
+    profileYaml: ProfileYaml;
+    configFiles: Record<string, {
+        content: Buffer;
+        mode: number;
+    }>;
+}
+export interface Profile {
+    name: string;
+    runtime: string;
+    /** Absolute path to the profile's directory (containing profile.yaml + config/). */
+    sourceDir: string;
+}
+export interface ResolvedProfile {
+    name: string;
+    runtime: string;
+    /** Fully-loaded profile.yaml content plus a snapshot of config/ file contents. */
+    content: ProfileContent;
+    digest: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/profile/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/profile/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/profile/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/profile/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/profile/types.ts"],"names":[],"mappings":""}

package/dist/run/id.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Generates a sortable, filesystem-safe run id: a compact UTC timestamp
+ * plus a short random suffix (e.g. `20260908T150112Z-a3f9`). Used as a
+ * directory name under `.yuurei/runs/`, so it must contain no `:` or `/`.
+ */
+export declare function generateRunId(now?: Date): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/run/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/run/id.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAO5D"}

package/dist/run/id.js

@@ -0,0 +1,15 @@
+import { randomBytes } from 'node:crypto';
+/**
+ * Generates a sortable, filesystem-safe run id: a compact UTC timestamp
+ * plus a short random suffix (e.g. `20260908T150112Z-a3f9`). Used as a
+ * directory name under `.yuurei/runs/`, so it must contain no `:` or `/`.
+ */
+export function generateRunId(now = new Date()) {
+    const timestamp = now
+        .toISOString()
+        .replace(/[-:]/g, '')
+        .replace(/\.\d+Z$/, 'Z');
+    const suffix = randomBytes(2).toString('hex');
+    return `${timestamp}-${suffix}`;
+}
+//# sourceMappingURL=id.js.map

package/dist/run/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/run/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAY,IAAI,IAAI,EAAE;IAClD,MAAM,SAAS,GAAG,GAAG;SAClB,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;AAClC,CAAC"}

package/dist/run/layout.d.ts

@@ -0,0 +1,27 @@
+type RunIdGenerator = () => string;
+/** The `.yuurei/runs/<run-id>/` layout described in design doc §10. */
+export interface RunLayout {
+    runDir: string;
+    workspaceDir: string;
+    tracePath: string;
+    resolvedProfilePath: string;
+    stdoutPath: string;
+    stderrPath: string;
+    artifactsPath: string;
+    patchPath: string;
+}
+/**
+ * Creates a run layout whose run id is unique: the run's directory under
+ * `runs/` is claimed with an atomic `mkdir(..., { recursive: false })`.
+ * When that fails with `EEXIST` because another invocation already claimed
+ * the same directory, this retries with a freshly generated run id. That is
+ * what prevents two concurrent `yuurei run` invocations from sharing a run
+ * directory (design doc §13 "avoiding collisions across parallel
+ * executions").
+ */
+export declare function createUniqueRunLayout(yuureiDir: string, generateId?: RunIdGenerator, maxAttempts?: number): Promise<{
+    runId: string;
+    layout: RunLayout;
+}>;
+export {};
+//# sourceMappingURL=layout.d.ts.map

package/dist/run/layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../src/run/layout.ts"],"names":[],"mappings":"AAIA,KAAK,cAAc,GAAG,MAAM,MAAM,CAAC;AAEnC,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAgBD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,cAA8B,EAC1C,WAAW,SAAI,GACd,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC,CAiB/C"}

package/dist/run/layout.js

@@ -0,0 +1,45 @@
+import { mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { generateRunId } from './id.js';
+function runLayout(yuureiDir, runId) {
+    const runDir = join(yuureiDir, 'runs', runId);
+    return {
+        runDir,
+        workspaceDir: join(runDir, 'workspace'),
+        tracePath: join(runDir, 'trace.json'),
+        resolvedProfilePath: join(runDir, 'resolved-profile.json'),
+        stdoutPath: join(runDir, 'stdout.log'),
+        stderrPath: join(runDir, 'stderr.log'),
+        artifactsPath: join(runDir, 'artifacts.json'),
+        patchPath: join(runDir, 'patch.diff'),
+    };
+}
+/**
+ * Creates a run layout whose run id is unique: the run's directory under
+ * `runs/` is claimed with an atomic `mkdir(..., { recursive: false })`.
+ * When that fails with `EEXIST` because another invocation already claimed
+ * the same directory, this retries with a freshly generated run id. That is
+ * what prevents two concurrent `yuurei run` invocations from sharing a run
+ * directory (design doc §13 "avoiding collisions across parallel
+ * executions").
+ */
+export async function createUniqueRunLayout(yuureiDir, generateId = generateRunId, maxAttempts = 5) {
+    const runsDir = join(yuureiDir, 'runs');
+    await mkdir(runsDir, { recursive: true });
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        const runId = generateId();
+        const layout = runLayout(yuureiDir, runId);
+        try {
+            await mkdir(layout.runDir, { recursive: false });
+            await mkdir(layout.workspaceDir, { recursive: true });
+            return { runId, layout };
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST' || attempt === maxAttempts) {
+                throw error;
+            }
+        }
+    }
+    throw new Error(`failed to create a unique run layout for ${yuureiDir}`);
+}
+//# sourceMappingURL=layout.js.map

package/dist/run/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../src/run/layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAgBxC,SAAS,SAAS,CAAC,SAAiB,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO;QACL,MAAM;QACN,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACvC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QACrC,mBAAmB,EAAE,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC;QAC1D,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QACtC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QACtC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAC7C,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,aAA6B,aAAa,EAC1C,WAAW,GAAG,CAAC;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBAClF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/run/pipeline.d.ts

@@ -0,0 +1,45 @@
+import { type CellResolutionInput } from '../cell/resolver.js';
+import type { ResolvedCell } from '../cell/types.js';
+import type { Isolation, IsolationStrategy } from '../isolation/types.js';
+import type { Runtime } from '../runtime/types.js';
+import type { Trace } from '../trace/schema.js';
+export interface RunPipelineInput extends CellResolutionInput {
+    yuureiDir: string;
+    isolationStrategy: 'level0' | 'level1';
+    keep: boolean;
+    /** null/undefined = no timeout is enforced (current default behaviour). */
+    timeoutMs?: number | null;
+    /** Maximum bytes retained for each saved log and artifact. */
+    maxArtifactBytes?: number;
+    /** Test seam only. Defaults to the real registry; production callers omit it. */
+    resolveRuntime?: (id: string) => Runtime;
+    /**
+     * Test seam only. Defaults to the real factory; production callers omit it.
+     * Lets a test wrap the isolation to put a barrier inside `dispose()` and
+     * prove the signal handler waits for the shared cleanup lifecycle.
+     */
+    createIsolation?: (strategy: IsolationStrategy) => Isolation;
+    /**
+     * Called synchronously for each non-fatal warning as it occurs (e.g. a
+     * credential file that could not be scrubbed on cleanup). This is the
+     * *only* way such a warning reaches the caller when a later step
+     * (execute/normalize/trace write/artifact collection) throws, since no
+     * RunPipelineResult is ever returned on that path — the throw propagates
+     * and the caller never sees a return value to read warnings off.
+     */
+    onWarning?: (message: string) => void;
+}
+export interface RunPipelineResult {
+    runId: string;
+    runDir: string;
+    cell: ResolvedCell;
+    trace: Trace;
+}
+/**
+ * The single place that orders a run's execution:
+ * resolve → isolate → verify (fail-closed) → prepare → execute →
+ * normalize → write trace → collect artifacts. No other module should
+ * re-implement this ordering (design doc §12.2 fail-closed principle).
+ */
+export declare function runPipeline(input: RunPipelineInput): Promise<RunPipelineResult>;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/run/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/run/pipeline.ts"],"names":[],"mappings":"AAGA,OAAO,EAAe,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAOrD,OAAO,KAAK,EAAE,SAAS,EAAoB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG5F,OAAO,KAAK,EAAe,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAIhD,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,SAAS,CAAC;IAC7D;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2PrF"}