yuurei 0.0.1

package/dist/runtime/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/runtime/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAehD;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,IACE,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,CAAC,CACC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAClC,OAAO,CAAC,SAAS,GAAG,CAAC;YACrB,OAAO,CAAC,SAAS,IAAI,cAAc,CACpC,EACD,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,UAAU,CACZ,mDAAmD,cAAc,SAAS,OAAO,CAAC,SAAS,EAAE,CAC9F,CACF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,mEAAmE;QACnE,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACjD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,YAAY,GAA0B,IAAI,CAAC;QAC/C,IAAI,SAAS,GAA0B,IAAI,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,iEAAiE;QACjE,mEAAmE;QACnE,sCAAsC;QACtC,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,YAAY,CAAC,OAAO,EAAE,CAAC;YACvB,YAAY,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,iEAAiE;gBACjE,+DAA+D;gBAC/D,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC,EAAE,OAAO,CAAC,yBAAyB,IAAI,uBAAuB,CAAC,CAAC;YACnE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE5B,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,kEAAkE;QAClE,qEAAqE;QACrE,yDAAyD;QACzD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAO;YACpB,WAAW,EAAE,CAAC;YACd,mEAAmE;YACnE,qEAAqE;YACrE,kEAAkE;YAClE,kEAAkE;YAClE,gEAAgE;YAChE,oEAAoE;YACpE,OAAO,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;iBAC1C,IAAI,CAAC,GAAG,EAAE;gBACT,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,cAAc,CAAC;oBACb,QAAQ;oBACR,MAAM;oBACN,SAAS;oBACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,+DAA+D;YACjE,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/registry.d.ts

@@ -0,0 +1,4 @@
+import type { Runtime } from './types.js';
+export declare function getRuntime(id: string): Runtime;
+export declare function listRuntimeIds(): string[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/runtime/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/runtime/registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAY1C,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAM9C;AAED,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC"}

package/dist/runtime/registry.js

@@ -0,0 +1,23 @@
+import { EXIT_CODES, YuureiError } from '../cli/exit-codes.js';
+import { ClaudeCodeRuntime } from './claude-code/index.js';
+import { CodexRuntime } from './codex/index.js';
+/**
+ * The only module allowed to import concrete Runtime adapters. Everything
+ * else must go through `getRuntime(id)` so the core stays adapter-agnostic
+ * (design doc §6.1).
+ */
+const RUNTIMES = {
+    'claude-code': () => new ClaudeCodeRuntime(),
+    codex: () => new CodexRuntime(),
+};
+export function getRuntime(id) {
+    const factory = RUNTIMES[id];
+    if (!factory) {
+        throw new YuureiError(`unknown runtime: ${id}`, EXIT_CODES.RUNTIME_UNSUPPORTED);
+    }
+    return factory();
+}
+export function listRuntimeIds() {
+    return Object.keys(RUNTIMES);
+}
+//# sourceMappingURL=registry.js.map

package/dist/runtime/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/runtime/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD;;;;GAIG;AACH,MAAM,QAAQ,GAAkC;IAC9C,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,iBAAiB,EAAE;IAC5C,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE;CAChC,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC"}

package/dist/runtime/reserved-paths.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Rejects profile config entries that would land on a path the runtime reads
+ * its own credential from (design doc §9.2). Without this, a profile shipping
+ * its own credential file would survive untouched whenever bridging no-ops or
+ * fails -- including simply being disabled -- and the run would silently
+ * authenticate as whoever wrote the profile rather than as the operator.
+ *
+ * Enforced regardless of whether credential bridging is enabled for this run:
+ * the isolated environment usually holds no credential of its own, so a
+ * profile-supplied one competes with nothing and is used unconditionally.
+ *
+ * Comparison is on the *resolved destination*, via the same `join` the write
+ * sink uses, rather than on the raw key. A guard that compares the raw key
+ * lets `./auth.json` and `sub/../auth.json` through while `join` still lands
+ * them on the reserved path. Lower-cased because a runtime resolves these
+ * files by name on a filesystem that may not be case-sensitive.
+ */
+export declare function assertNoReservedConfigPath(destDir: string, configFiles: Record<string, {
+    content: Buffer;
+    mode: number;
+}>, reservedNames: readonly string[]): void;
+//# sourceMappingURL=reserved-paths.d.ts.map

package/dist/runtime/reserved-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved-paths.d.ts","sourceRoot":"","sources":["../../src/runtime/reserved-paths.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAC9D,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,IAAI,CAeN"}

package/dist/runtime/reserved-paths.js

@@ -0,0 +1,30 @@
+import { join } from 'node:path';
+import { EXIT_CODES, YuureiError } from '../cli/exit-codes.js';
+/**
+ * Rejects profile config entries that would land on a path the runtime reads
+ * its own credential from (design doc §9.2). Without this, a profile shipping
+ * its own credential file would survive untouched whenever bridging no-ops or
+ * fails -- including simply being disabled -- and the run would silently
+ * authenticate as whoever wrote the profile rather than as the operator.
+ *
+ * Enforced regardless of whether credential bridging is enabled for this run:
+ * the isolated environment usually holds no credential of its own, so a
+ * profile-supplied one competes with nothing and is used unconditionally.
+ *
+ * Comparison is on the *resolved destination*, via the same `join` the write
+ * sink uses, rather than on the raw key. A guard that compares the raw key
+ * lets `./auth.json` and `sub/../auth.json` through while `join` still lands
+ * them on the reserved path. Lower-cased because a runtime resolves these
+ * files by name on a filesystem that may not be case-sensitive.
+ */
+export function assertNoReservedConfigPath(destDir, configFiles, reservedNames) {
+    const reservedTargets = new Map(reservedNames.map((name) => [join(destDir, name).toLowerCase(), name]));
+    for (const key of Object.keys(configFiles)) {
+        const reserved = reservedTargets.get(join(destDir, key).toLowerCase());
+        if (reserved !== undefined) {
+            const alias = key === reserved ? '' : ` (resolves to "${reserved}")`;
+            throw new YuureiError(`profile config may not provide "${key}"${alias}: this path is reserved for the runtime's own credential`, EXIT_CODES.CONFIG_ERROR);
+        }
+    }
+}
+//# sourceMappingURL=reserved-paths.js.map

package/dist/runtime/reserved-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved-paths.js","sourceRoot":"","sources":["../../src/runtime/reserved-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,WAA8D,EAC9D,aAAgC;IAEhC,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC,CACvE,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,QAAQ,IAAI,CAAC;YACrE,MAAM,IAAI,WAAW,CACnB,mCAAmC,GAAG,IAAI,KAAK,0DAA0D,EACzG,UAAU,CAAC,YAAY,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtime/types.d.ts

@@ -0,0 +1,105 @@
+import type { ResolvedCell } from '../cell/types.js';
+import type { IsolationContext } from '../isolation/types.js';
+export interface RuntimeDetection {
+    installed: boolean;
+    /** null = version could not be determined; never guess a fallback value. */
+    version: string | null;
+    /** null = version could not be determined; otherwise whether this version is supported. */
+    versionSupported: boolean | null;
+    executablePath: string | null;
+    /** null = auth usability was not checked. */
+    authUsable: boolean | null;
+    /**
+     * Safe next-step guidance for the operator when authUsable is false.
+     * Only populated when installed && authUsable === false. Never contains
+     * credential values, paths, or recommendations to persist tokens.
+     */
+    authGuidance?: string;
+}
+export interface PreparedRun {
+    runtimeId: string;
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    cwd: string;
+    isolation: IsolationContext;
+    cell: ResolvedCell;
+    /** null = version could not be determined at prepare() time; never a hardcoded fallback. */
+    runtimeVersion: string | null;
+    /**
+     * The actual real credential values this adapter forwarded or wrote,
+     * regardless of where they ended up (an env var, or a field inside a
+     * bridged file like Codex's auth.json). The pipeline redacts each of
+     * these, by exact match, from persisted stdout/stderr — reporting values
+     * rather than env var *names* is deliberate: a name-based list can never
+     * reach a secret embedded inside file content, only one inside `env`.
+     */
+    credentialValuesToRedact: string[];
+}
+export interface RuntimeResult {
+    /** null = process was killed by signal or the exit code was never observed. */
+    exitCode: number | null;
+    signal: NodeJS.Signals | null;
+    startedAt: string;
+    finishedAt: string;
+    stdoutPath: string;
+    stderrPath: string;
+    timedOut: boolean;
+}
+/**
+ * Minimal context passed from prepare() to normalize() — only the fields
+ * normalize() actually needs. Keeps normalize() from depending on the full
+ * PreparedRun (which includes credentials, env vars, cwd) and makes the
+ * boundary explicit.
+ */
+export interface NormalizationContext {
+    /** null = version could not be determined at prepare() time. */
+    runtimeVersion: string | null;
+}
+export interface NormalizedTraceFragment {
+    runtime: {
+        id: string;
+        version: string | null;
+    };
+    model: {
+        requested: string;
+        resolved: string | null;
+    };
+    execution: {
+        exitCode: number | null;
+        signal: string | null;
+        durationMs: number | null;
+    };
+    /** null = usage metric was not observed; never default to 0. */
+    usage: Record<string, number | null>;
+    /**
+     * Non-fatal issues encountered during normalization (e.g. usage parse
+     * failure). Empty array and absent are equivalent — the pipeline reports
+     * each entry via onWarning and does not write them to trace.json.
+     */
+    warnings?: string[];
+}
+/**
+ * The pipeline passes this to `prepare()` so an adapter can register each
+ * credential path on disk at the moment it writes it — not when prepare()
+ * returns. The scrub list is therefore populated by the write, so a signal or
+ * throw between the write and the return cannot strand credential material
+ * (design doc §9.2). `rm(path, { force: true })` on a never-written path is a
+ * no-op, so registering before an attempted write is safe.
+ */
+export type RegisterCredentialPath = (path: string) => void;
+/**
+ * Hides runtime-specific launch/inspect/exit handling. Implementations
+ * (ClaudeCodeRuntime, CodexRuntime) must keep their config path/CLI-arg/
+ * env-var conventions encapsulated internally — nothing runtime-specific
+ * should leak into the core (design doc §6.1).
+ */
+export interface Runtime {
+    id(): string;
+    detect(): Promise<RuntimeDetection>;
+    prepare(cell: ResolvedCell, isolation: IsolationContext, registerCredentialPath: RegisterCredentialPath): Promise<PreparedRun>;
+    /** `timeoutMs` null means no timeout is enforced. */
+    execute(run: PreparedRun, timeoutMs: number | null): Promise<RuntimeResult>;
+    normalize(result: RuntimeResult, context: NormalizationContext): Promise<NormalizedTraceFragment>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2FAA2F;IAC3F,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6CAA6C;IAC7C,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,4FAA4F;IAC5F,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,wBAAwB,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChD,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACtD,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACzF,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,IAAI,MAAM,CAAC;IACb,MAAM,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpC,OAAO,CACL,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,gBAAgB,EAC3B,sBAAsB,EAAE,sBAAsB,GAC7C,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,qDAAqD;IACrD,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5E,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACnG"}

package/dist/runtime/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":""}

package/dist/trace/reader.d.ts

@@ -0,0 +1,4 @@
+import { type Trace } from './schema.js';
+/** Loads and validates `<runDir>/trace.json`. */
+export declare function readTrace(runDir: string): Promise<Trace>;
+//# sourceMappingURL=reader.d.ts.map

package/dist/trace/reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.d.ts","sourceRoot":"","sources":["../../src/trace/reader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAEtD,iDAAiD;AACjD,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAG9D"}

package/dist/trace/reader.js

@@ -0,0 +1,9 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { TraceSchema } from './schema.js';
+/** Loads and validates `<runDir>/trace.json`. */
+export async function readTrace(runDir) {
+    const raw = await readFile(join(runDir, 'trace.json'), 'utf8');
+    return TraceSchema.parse(JSON.parse(raw));
+}
+//# sourceMappingURL=reader.js.map

package/dist/trace/reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../src/trace/reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAc,MAAM,aAAa,CAAC;AAEtD,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc;IAC5C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/trace/redact.d.ts

@@ -0,0 +1,22 @@
+export declare function redactSecrets(text: string): string;
+/**
+ * Exact-match redaction of specific known secret values reported by the
+ * runtime adapter that produced them (as opposed to redactSecrets' generic
+ * shape-based patterns, which won't catch a credential that doesn't happen
+ * to look like `sk-...` or `Bearer ...` — an OAuth access/refresh token
+ * embedded in a bridged Codex auth.json, for instance). Literal split/join
+ * rather than a constructed RegExp, since a credential value may itself
+ * contain regex metacharacters.
+ */
+export declare function redactKnownValues(text: string, values: readonly string[]): string;
+/**
+ * Redacts and persists a log without retaining the complete input in
+ * memory. Raw input is buffered only until the byte cap is exceeded (plus
+ * at most one read chunk), so memory usage is bounded by `maxBytes`
+ * regardless of log length or credential length. Redaction runs over the
+ * whole buffered prefix, so a known value or secret pattern that spans any
+ * number of read chunks is still removed; when the byte cap cuts a stream
+ * mid-credential, the surviving prefix is additionally redacted.
+ */
+export declare function redactFile(inputPath: string, outputPath: string, values: readonly string[], maxBytes?: number): Promise<boolean>;
+//# sourceMappingURL=redact.d.ts.map

package/dist/trace/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/trace/redact.ts"],"names":[],"mappings":"AAmBA,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAWD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAOjF;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,QAAQ,SAAwB,GAC/B,OAAO,CAAC,OAAO,CAAC,CAqBlB"}

package/dist/trace/redact.js

@@ -0,0 +1,124 @@
+import { createReadStream } from 'node:fs';
+import { writeFile } from 'node:fs/promises';
+/**
+ * Patterns for common secret shapes (API keys, bearer tokens, generic
+ * long hex/base64 blobs following an assignment). This is a best-effort
+ * safety net, not a guarantee — adapters must still avoid writing secrets
+ * into anything that flows through here (design doc §10.2).
+ */
+const SECRET_PATTERNS = [
+    /\b(sk-[a-zA-Z0-9]{16,})\b/g,
+    /\bBearer\s+[a-zA-Z0-9._-]{16,}\b/gi,
+    /\b(?:api[_-]?key|token|secret|password)\s*[:=]\s*['"]?[a-zA-Z0-9._-]{8,}['"]?/gi,
+];
+const REDACTED = '[REDACTED]';
+const DEFAULT_LOG_MAX_BYTES = 1024 * 1024;
+export function redactSecrets(text) {
+    let result = text;
+    for (const pattern of SECRET_PATTERNS) {
+        result = result.replace(pattern, REDACTED);
+    }
+    return result;
+}
+/**
+ * Below this length, a "known value" is refused rather than redacted: a
+ * malformed or truncated credential file could otherwise hand this function
+ * a one- or two-character string, which would then blank out every
+ * occurrence of that character across the whole log. Real API keys and
+ * OAuth tokens are always far longer than this.
+ */
+const MIN_REDACTABLE_LENGTH = 8;
+/**
+ * Exact-match redaction of specific known secret values reported by the
+ * runtime adapter that produced them (as opposed to redactSecrets' generic
+ * shape-based patterns, which won't catch a credential that doesn't happen
+ * to look like `sk-...` or `Bearer ...` — an OAuth access/refresh token
+ * embedded in a bridged Codex auth.json, for instance). Literal split/join
+ * rather than a constructed RegExp, since a credential value may itself
+ * contain regex metacharacters.
+ */
+export function redactKnownValues(text, values) {
+    let result = text;
+    for (const value of values) {
+        if (value.length < MIN_REDACTABLE_LENGTH)
+            continue;
+        result = result.split(value).join(REDACTED);
+    }
+    return result;
+}
+/**
+ * Redacts and persists a log without retaining the complete input in
+ * memory. Raw input is buffered only until the byte cap is exceeded (plus
+ * at most one read chunk), so memory usage is bounded by `maxBytes`
+ * regardless of log length or credential length. Redaction runs over the
+ * whole buffered prefix, so a known value or secret pattern that spans any
+ * number of read chunks is still removed; when the byte cap cuts a stream
+ * mid-credential, the surviving prefix is additionally redacted.
+ */
+export async function redactFile(inputPath, outputPath, values, maxBytes = DEFAULT_LOG_MAX_BYTES) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) {
+        throw new RangeError('maxBytes must be a non-negative safe integer');
+    }
+    let output = '';
+    let stoppedEarly = false;
+    for await (const chunk of createReadStream(inputPath, { encoding: 'utf8' })) {
+        output += chunk;
+        if (Buffer.byteLength(output, 'utf8') > maxBytes) {
+            stoppedEarly = true;
+            break;
+        }
+    }
+    output = redactSecrets(redactKnownValues(output, values));
+    output = redactTerminalKnownPrefix(output, values);
+    const truncated = stoppedEarly || Buffer.byteLength(output, 'utf8') > maxBytes;
+    await writeFile(outputPath, utf8Prefix(output, maxBytes), 'utf8');
+    return truncated;
+}
+function utf8Prefix(text, maxBytes) {
+    let bytes = 0;
+    let prefix = '';
+    for (const character of text) {
+        const characterBytes = Buffer.byteLength(character, 'utf8');
+        if (bytes + characterBytes > maxBytes)
+            break;
+        prefix += character;
+        bytes += characterBytes;
+    }
+    return prefix;
+}
+/**
+ * Redacts the tail of a stream when it ends with the prefix of a known
+ * value — i.e. the stream was cut (by the byte cap or a crashed writer)
+ * while a credential was still being written. Only prefixes that already
+ * meet the minimum redactable length are considered, so clean log endings
+ * are untouched. Each value's first character is used to locate candidate
+ * alignments, so the cost is negligible for logs that do not end in a
+ * credential.
+ */
+function redactTerminalKnownPrefix(text, values) {
+    let longest = 0;
+    for (const value of values) {
+        if (value.length < MIN_REDACTABLE_LENGTH)
+            continue;
+        const maxPrefix = Math.min(value.length - 1, text.length);
+        if (maxPrefix < MIN_REDACTABLE_LENGTH)
+            continue;
+        const first = value[0];
+        for (let start = text.length - maxPrefix; start <= text.length - MIN_REDACTABLE_LENGTH; start += 1) {
+            if (text[start] !== first)
+                continue;
+            const length = text.length - start;
+            let i = 0;
+            while (i < length && text[start + i] === value[i])
+                i += 1;
+            if (i === length) {
+                longest = Math.max(longest, length);
+                break;
+            }
+        }
+    }
+    if (longest === 0)
+        return text;
+    return `${text.slice(0, text.length - longest)}${REDACTED}`;
+}
+//# sourceMappingURL=redact.js.map

package/dist/trace/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/trace/redact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,eAAe,GAAa;IAChC,4BAA4B;IAC5B,oCAAoC;IACpC,iFAAiF;CAClF,CAAC;AAEF,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAyB;IACvE,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;YAAE,SAAS;QACnD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,UAAkB,EAClB,MAAyB,EACzB,QAAQ,GAAG,qBAAqB;IAEhC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;YACjD,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC;IAC/E,MAAM,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAClE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,KAAK,GAAG,cAAc,GAAG,QAAQ;YAAE,MAAM;QAC7C,MAAM,IAAI,SAAS,CAAC;QACpB,KAAK,IAAI,cAAc,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAAC,IAAY,EAAE,MAAyB;IACxE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;YAAE,SAAS;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,SAAS,GAAG,qBAAqB;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KACE,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,EACnC,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAC5C,KAAK,IAAI,CAAC,EACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK;gBAAE,SAAS;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;gBACjB,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACpC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC;AAC9D,CAAC"}

package/dist/trace/schema.d.ts

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+/**
+ * Independent of the yuurei package version — this only changes when the
+ * on-disk trace.json shape changes (design doc §6.3).
+ */
+export declare const TRACE_SCHEMA_VERSION = "0.3";
+export declare const TraceSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<"0.3">;
+    run_id: z.ZodString;
+    started_at: z.ZodString;
+    finished_at: z.ZodString;
+    runtime: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    model: z.ZodObject<{
+        requested: z.ZodString;
+        resolved: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    profile: z.ZodObject<{
+        name: z.ZodString;
+        digest: z.ZodString;
+    }, z.core.$strip>;
+    task: z.ZodObject<{
+        source: z.ZodString;
+        digest: z.ZodString;
+    }, z.core.$strip>;
+    isolation: z.ZodObject<{
+        strategy: z.ZodString;
+        verified: z.ZodBoolean;
+    }, z.core.$strip>;
+    execution: z.ZodObject<{
+        exit_code: z.ZodNullable<z.ZodNumber>;
+        signal: z.ZodNullable<z.ZodString>;
+        duration_ms: z.ZodNullable<z.ZodNumber>;
+        timed_out: z.ZodBoolean;
+    }, z.core.$strip>;
+    usage: z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>;
+    cost: z.ZodNullable<z.ZodObject<{
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+    }, z.core.$strip>>;
+    artifacts: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        kind: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type Trace = z.infer<typeof TraceSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/trace/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/trace/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAE1C,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+CtB,CAAC;AAEH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC"}

package/dist/trace/schema.js

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+/**
+ * Independent of the yuurei package version — this only changes when the
+ * on-disk trace.json shape changes (design doc §6.3).
+ */
+export const TRACE_SCHEMA_VERSION = '0.3';
+export const TraceSchema = z.object({
+    schema_version: z.literal(TRACE_SCHEMA_VERSION),
+    run_id: z.string(),
+    started_at: z.string(),
+    finished_at: z.string(),
+    runtime: z.object({
+        id: z.string(),
+        version: z.string().nullable(),
+    }),
+    model: z.object({
+        requested: z.string(),
+        resolved: z.string().nullable(),
+    }),
+    profile: z.object({
+        name: z.string(),
+        digest: z.string(),
+    }),
+    task: z.object({
+        source: z.string(),
+        digest: z.string(),
+    }),
+    isolation: z.object({
+        strategy: z.string(),
+        verified: z.boolean(),
+    }),
+    execution: z.object({
+        exit_code: z.number().nullable(),
+        signal: z.string().nullable(),
+        duration_ms: z.number().nullable(),
+        timed_out: z.boolean(),
+    }),
+    // An observed value not present in `usage` (rather than present as null)
+    // means it was never even attempted; null means attempted but unobserved.
+    usage: z.record(z.string(), z.number().nullable()),
+    // null = cost was not estimated for this run (CostModel is a no-op in v0.3).
+    cost: z
+        .object({
+        amount: z.number(),
+        currency: z.string(),
+    })
+        .nullable(),
+    artifacts: z.array(z.object({
+        path: z.string(),
+        kind: z.string(),
+    })),
+});
+//# sourceMappingURL=schema.js.map

package/dist/trace/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/trace/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;KACtB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IAClD,6EAA6E;IAC7E,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;SACD,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC,CACH;CACF,CAAC,CAAC"}

package/dist/trace/writer.d.ts

@@ -0,0 +1,17 @@
+import { type Trace } from './schema.js';
+/**
+ * Validates and persists a trace to `<runDir>/trace.json`.
+ *
+ * `trace.json` is the completion marker (#111): its presence means the run
+ * finished and every durable output succeeded. A direct write could leave a
+ * truncated or malformed file after a crash mid-write, which the
+ * completion-marker logic would then treat as complete and that `trace show`
+ * would fail to parse. The trace is therefore written to a same-directory
+ * temporary file, fsynced, and atomically renamed into place, so `trace.json`
+ * only ever appears in a complete, valid state. On an ordinary failure the
+ * temporary file is removed; one left behind by a hard crash shares the run
+ * directory and is dropped together with it, and is never read as a trace
+ * (readers address `trace.json` exactly).
+ */
+export declare function writeTrace(runDir: string, trace: Trace): Promise<void>;
+//# sourceMappingURL=writer.d.ts.map

package/dist/trace/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../src/trace/writer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB5E"}

package/dist/trace/writer.js

@@ -0,0 +1,45 @@
+import { open, rename, rm, writeFile } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+import { redactSecrets } from './redact.js';
+import { TraceSchema } from './schema.js';
+/**
+ * Validates and persists a trace to `<runDir>/trace.json`.
+ *
+ * `trace.json` is the completion marker (#111): its presence means the run
+ * finished and every durable output succeeded. A direct write could leave a
+ * truncated or malformed file after a crash mid-write, which the
+ * completion-marker logic would then treat as complete and that `trace show`
+ * would fail to parse. The trace is therefore written to a same-directory
+ * temporary file, fsynced, and atomically renamed into place, so `trace.json`
+ * only ever appears in a complete, valid state. On an ordinary failure the
+ * temporary file is removed; one left behind by a hard crash shares the run
+ * directory and is dropped together with it, and is never read as a trace
+ * (readers address `trace.json` exactly).
+ */
+export async function writeTrace(runDir, trace) {
+    const parsed = TraceSchema.parse(trace);
+    const serialized = redactSecrets(JSON.stringify(parsed, null, 2));
+    const tracePath = join(runDir, 'trace.json');
+    const tempPath = join(runDir, `.trace.json.tmp-${randomUUID()}`);
+    try {
+        await writeFile(tempPath, serialized, 'utf8');
+        const handle = await open(tempPath, 'r+');
+        try {
+            // Flush data to disk before the rename, so a crash right after the
+            // atomic name flip cannot expose a zero-length trace.json.
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await rename(tempPath, tracePath);
+    }
+    catch (error) {
+        // A failed write/fsync/rename publishes nothing; leave neither a partial
+        // trace nor its temporary sibling behind.
+        await rm(tempPath, { force: true }).catch(() => { });
+        throw error;
+    }
+}
+//# sourceMappingURL=writer.js.map

package/dist/trace/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../src/trace/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAc,MAAM,aAAa,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,KAAY;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,mBAAmB,UAAU,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,mEAAmE;YACnE,2DAA2D;YAC3D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,0CAA0C;QAC1C,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/util/fs.d.ts

@@ -0,0 +1,17 @@
+/** Whether `child` is `parent` itself or nested inside it, resolving symlinks on both sides. */
+export declare function isPathWithin(parent: string, child: string): Promise<boolean>;
+export declare function pathExists(path: string): Promise<boolean>;
+/**
+ * Writes an in-memory file tree under `destDir`, creating parent directories.
+ * Keys are relative paths, normally produced by `loadProfile`'s guarded walk —
+ * but this is the actual filesystem-write sink, so it re-validates every key
+ * itself rather than trusting a caller-side invariant it cannot enforce.
+ *
+ * Deliberately sets no modes beyond the default: `destDir` and its
+ * permissions are the caller's policy (the adapter creates it 0700).
+ */
+export declare function writeFileTree(destDir: string, files: Record<string, {
+    content: Buffer;
+    mode: number;
+}>): Promise<void>;
+//# sourceMappingURL=fs.d.ts.map

package/dist/util/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/util/fs.ts"],"names":[],"mappings":"AAuBA,gGAAgG;AAChG,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMlF;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACvD,OAAO,CAAC,IAAI,CAAC,CAaf"}