yuurei 0.0.1

package/dist/util/fs.js

@@ -0,0 +1,61 @@
+import { access, chmod, mkdir, realpath, writeFile } from 'node:fs/promises';
+import { basename, dirname, join, resolve } from 'node:path';
+import { EXIT_CODES, YuureiError } from '../cli/exit-codes.js';
+/**
+ * Resolves `path` as far as the filesystem actually allows (symlinks and
+ * all), then appends whatever doesn't exist yet lexically. Plain
+ * `realpath(path).catch(() => resolve(path))` is NOT safe when `path`
+ * doesn't exist: it falls back to the fully-unresolved lexical path, so an
+ * existing symlinked ancestor (e.g. macOS's `/var` -> `/private/var`, which
+ * every OS temp dir sits under) is resolved on one side of a comparison and
+ * not the other, producing a false negative.
+ */
+async function realpathAsFarAsExists(path) {
+    try {
+        return await realpath(path);
+    }
+    catch {
+        const parent = dirname(path);
+        if (parent === path)
+            return path; // reached the filesystem root
+        return join(await realpathAsFarAsExists(parent), basename(path));
+    }
+}
+/** Whether `child` is `parent` itself or nested inside it, resolving symlinks on both sides. */
+export async function isPathWithin(parent, child) {
+    const [realParent, realChild] = await Promise.all([
+        realpathAsFarAsExists(resolve(parent)),
+        realpathAsFarAsExists(resolve(child)),
+    ]);
+    return realChild === realParent || realChild.startsWith(`${realParent}/`);
+}
+export async function pathExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Writes an in-memory file tree under `destDir`, creating parent directories.
+ * Keys are relative paths, normally produced by `loadProfile`'s guarded walk —
+ * but this is the actual filesystem-write sink, so it re-validates every key
+ * itself rather than trusting a caller-side invariant it cannot enforce.
+ *
+ * Deliberately sets no modes beyond the default: `destDir` and its
+ * permissions are the caller's policy (the adapter creates it 0700).
+ */
+export async function writeFileTree(destDir, files) {
+    for (const [relPath, file] of Object.entries(files)) {
+        const target = join(destDir, relPath);
+        if (!(await isPathWithin(destDir, target))) {
+            throw new YuureiError(`refusing to write ${relPath}: escapes destination directory ${destDir}`, EXIT_CODES.CONFIG_ERROR);
+        }
+        await mkdir(dirname(target), { recursive: true });
+        await writeFile(target, file.content);
+        await chmod(target, file.mode & 0o777);
+    }
+}
+//# sourceMappingURL=fs.js.map

package/dist/util/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../src/util/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;;;GAQG;AACH,KAAK,UAAU,qBAAqB,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,8BAA8B;QAChE,OAAO,IAAI,CAAC,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IAC9D,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChD,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;KACtC,CAAC,CAAC;IACH,OAAO,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,KAAwD;IAExD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,WAAW,CACnB,qBAAqB,OAAO,mCAAmC,OAAO,EAAE,EACxE,UAAU,CAAC,YAAY,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/util/hash.d.ts

@@ -0,0 +1,3 @@
+/** Returns a `sha256:<hex>` digest of the given content. */
+export declare function sha256Digest(content: string | Buffer): string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/util/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/util/hash.ts"],"names":[],"mappings":"AAEA,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAG7D"}

package/dist/util/hash.js

@@ -0,0 +1,7 @@
+import { createHash } from 'node:crypto';
+/** Returns a `sha256:<hex>` digest of the given content. */
+export function sha256Digest(content) {
+    const hash = createHash('sha256').update(content).digest('hex');
+    return `sha256:${hash}`;
+}
+//# sourceMappingURL=hash.js.map

package/dist/util/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/util/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,OAAwB;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,UAAU,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/util/json.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Serializes a value to JSON with object keys sorted recursively, so that
+ * two structurally-equal values always produce the same string regardless
+ * of insertion order. Digests (cell_digest, profile digest, task digest)
+ * must be computed over this canonical form, not `JSON.stringify`.
+ */
+export declare function canonicalJsonStringify(value: unknown): string;
+//# sourceMappingURL=json.d.ts.map

package/dist/util/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/util/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7D"}

package/dist/util/json.js

@@ -0,0 +1,24 @@
+/**
+ * Serializes a value to JSON with object keys sorted recursively, so that
+ * two structurally-equal values always produce the same string regardless
+ * of insertion order. Digests (cell_digest, profile digest, task digest)
+ * must be computed over this canonical form, not `JSON.stringify`.
+ */
+export function canonicalJsonStringify(value) {
+    return JSON.stringify(sortKeysDeep(value));
+}
+function sortKeysDeep(value) {
+    if (Array.isArray(value)) {
+        return value.map(sortKeysDeep);
+    }
+    if (value !== null && typeof value === 'object') {
+        const entries = Object.entries(value).sort(([a], [b]) => a.localeCompare(b));
+        const sorted = {};
+        for (const [key, entryValue] of entries) {
+            sorted[key] = sortKeysDeep(entryValue);
+        }
+        return sorted;
+    }
+    return value;
+}
+//# sourceMappingURL=json.js.map

package/dist/util/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/util/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;QACF,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/util/logger.d.ts

@@ -0,0 +1,8 @@
+export type LogFormat = 'human' | 'json';
+export interface Logger {
+    info(message: string, data?: Record<string, unknown>): void;
+    warn(message: string, data?: Record<string, unknown>): void;
+    error(message: string, data?: Record<string, unknown>): void;
+}
+export declare function createLogger(format: LogFormat): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/util/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/util/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzC,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAmBtD"}

package/dist/util/logger.js

@@ -0,0 +1,16 @@
+export function createLogger(format) {
+    const write = (level, message, data) => {
+        const stream = level === 'error' ? console.error : console.log;
+        if (format === 'json') {
+            stream(JSON.stringify({ level, message, ...data }));
+            return;
+        }
+        stream(data ? `${message} ${JSON.stringify(data)}` : message);
+    };
+    return {
+        info: (message, data) => write('info', message, data),
+        warn: (message, data) => write('warn', message, data),
+        error: (message, data) => write('error', message, data),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/util/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/util/logger.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,MAAM,KAAK,GAAG,CACZ,KAAgC,EAChC,OAAe,EACf,IAA8B,EAC9B,EAAE;QACF,MAAM,MAAM,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAC/D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;QACrD,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;QACrD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;KACxD,CAAC;AACJ,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The published yuurei package version (`package.json` `version`). This is the
+ * single source of the version for both the CLI (`cli.version()`) and cell
+ * identity (`RunPipelineInput.yuureiVersion`, which the digest hashes) — a
+ * package bump must update both, or cells silently carry a stale version in
+ * their identity (#113).
+ *
+ * `createRequire(import.meta.url)` resolves `../package.json` relative to the
+ * compiled module (`dist/version.js`), so it reaches the manifest both from a
+ * source checkout and from the packed tarball (`dist/` sits at the package
+ * root, exactly one level below `package.json`).
+ *
+ * Distinct concepts, intentionally separate sources:
+ * - **package version** (`packageVersion`, here): the npm release number;
+ *   part of the cell digest, so identical work against a different release is
+ *   a different cell.
+ * - **design version** (docs/design, v0.3): which design revision the current
+ *   implementation tracks; independent of package releases.
+ * - **trace schema version** (`TRACE_SCHEMA_VERSION` in `src/trace/schema.ts`):
+ *   the on-disk `trace.json` shape, which only changes when that shape
+ *   changes — never on package bumps (#113, schema comment).
+ */
+export declare const packageVersion: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,cAAc,EAAE,MAA2C,CAAC"}

package/dist/version.js

@@ -0,0 +1,26 @@
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+/**
+ * The published yuurei package version (`package.json` `version`). This is the
+ * single source of the version for both the CLI (`cli.version()`) and cell
+ * identity (`RunPipelineInput.yuureiVersion`, which the digest hashes) — a
+ * package bump must update both, or cells silently carry a stale version in
+ * their identity (#113).
+ *
+ * `createRequire(import.meta.url)` resolves `../package.json` relative to the
+ * compiled module (`dist/version.js`), so it reaches the manifest both from a
+ * source checkout and from the packed tarball (`dist/` sits at the package
+ * root, exactly one level below `package.json`).
+ *
+ * Distinct concepts, intentionally separate sources:
+ * - **package version** (`packageVersion`, here): the npm release number;
+ *   part of the cell digest, so identical work against a different release is
+ *   a different cell.
+ * - **design version** (docs/design, v0.3): which design revision the current
+ *   implementation tracks; independent of package releases.
+ * - **trace schema version** (`TRACE_SCHEMA_VERSION` in `src/trace/schema.ts`):
+ *   the on-disk `trace.json` shape, which only changes when that shape
+ *   changes — never on package bumps (#113, schema comment).
+ */
+export const packageVersion = require('../package.json').version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAW,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "yuurei",
+  "version": "0.0.1",
+  "description": "Isolated, reproducible runtime environments for coding agents (Claude Code, Codex).",
+  "homepage": "https://github.com/shimpeiws/yuurei#readme",
+  "bugs": {
+    "url": "https://github.com/shimpeiws/yuurei/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shimpeiws/yuurei.git"
+  },
+  "bin": {
+    "yuurei": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "docs/assets"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dev": "node --import tsx src/index.ts",
+    "build": "tsc --build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "check": "oxlint --deny-warnings",
+    "check:fix": "oxlint --deny-warnings --fix",
+    "format": "oxfmt --check .",
+    "format:fix": "oxfmt --write .",
+    "knip": "knip",
+    "smoke:package": "pnpm run build && node scripts/smoke-package.mjs",
+    "prepublishOnly": "pnpm run smoke:package",
+    "prepare": "lefthook install"
+  },
+  "dependencies": {
+    "cac": "^7.0.0",
+    "yaml": "^2.6.0",
+    "zod": "^4.5.4"
+  },
+  "devDependencies": {
+    "@tsconfig/strictest": "^2.0.5",
+    "@types/node": "^22.0.0",
+    "knip": "^6.0.0",
+    "lefthook": "^2.0.0",
+    "oxfmt": "^0.67.0",
+    "oxlint": "^1.82.0",
+    "tsx": "^4.19.0",
+    "typescript": "^6.0.0",
+    "vitest": "^5.0.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "packageManager": "pnpm@11.6.0"
+}