@a-company/paradigm 3.44.0 → 5.3.3

package/dist/{chunk-DS5QY37M.js → chunk-GTR2TBIJ.js}

@@ -16,11 +16,16 @@ var COMMON_HOOK = `#!/bin/sh
 #   CWD      \u2014 Project root directory (already cd'd into)
 #   MODIFIED \u2014 Output of \`git diff --name-only HEAD\`
 #
+# Caller may set:
+#   PARADIGM_AUTO_FIX \u2014 Set to "1" to auto-fix trivial violations (missing .purpose stubs, missing lore)
+#
 # Sets:
 #   VIOLATIONS      \u2014 Newline-separated violation messages
 #   VIOLATION_COUNT \u2014 Number of violations
 #   ADVISORY        \u2014 Non-blocking advisory text
 #   SOURCE_COUNT    \u2014 Number of modified source files
+#   AUTO_FIXED      \u2014 Newline-separated auto-fix actions taken
+#   AUTO_FIX_COUNT  \u2014 Number of auto-fixes applied
 #
 # Checks:
 #   1. Source files modified without .purpose updates (threshold: 2+)
@@ -37,6 +42,9 @@ var COMMON_HOOK = `#!/bin/sh
 
 VIOLATIONS=""
 VIOLATION_COUNT=0
+AUTO_FIXED=""
+AUTO_FIX_COUNT=0
+PARADIGM_AUTO_FIX="\${PARADIGM_AUTO_FIX:-0}"
 
 # --- Check 1: Source files modified without .purpose updates ---
 SOURCE_COUNT=0
@@ -95,11 +103,28 @@ for file in $MODIFIED; do
 done
 
 if [ -n "$DIRS_WITHOUT_PURPOSE" ]; then
-  VIOLATIONS="$VIOLATIONS
+  if [ "$PARADIGM_AUTO_FIX" = "1" ]; then
+    # Auto-fix: create stub .purpose files for directories missing them
+    for dir in $DIRS_WITHOUT_PURPOSE; do
+      dir_basename=$(basename "$dir")
+      cat > "$dir/.purpose" <<PURPOSEEOF
+# Auto-generated .purpose stub \u2014 update with real descriptions
+components:
+  $dir_basename:
+    description: "TODO: describe this component"
+    tags: []
+PURPOSEEOF
+      AUTO_FIXED="$AUTO_FIXED
+  - Created stub .purpose in $dir (update descriptions)"
+      AUTO_FIX_COUNT=$((AUTO_FIX_COUNT + 1))
+    done
+  else
+    VIOLATIONS="$VIOLATIONS
   - These directories have modified source files but no .purpose file anywhere in their path:
    $DIRS_WITHOUT_PURPOSE
     Create a .purpose file using paradigm_purpose_init + paradigm_purpose_add_component."
-  VIOLATION_COUNT=$((VIOLATION_COUNT + 1))
+    VIOLATION_COUNT=$((VIOLATION_COUNT + 1))
+  fi
 fi
 
 # --- Check 3: Route patterns added without portal.yaml ---
@@ -252,11 +277,46 @@ if [ "$SOURCE_COUNT" -ge 3 ] && [ -d ".paradigm/lore" ]; then
   fi
 
   if [ "$LORE_RECORDED" = false ]; then
-    VIOLATIONS="$VIOLATIONS
+    if [ "$PARADIGM_AUTO_FIX" = "1" ]; then
+      # Auto-fix: create a stub lore entry with modified file info
+      TODAY=$(date -u +"%Y-%m-%d" 2>/dev/null || date +"%Y-%m-%d")
+      LORE_TIMESTAMP=$(date -u +"%H%M%S" 2>/dev/null || date +"%H%M%S")
+      LORE_DIR=".paradigm/lore/entries/$TODAY"
+      mkdir -p "$LORE_DIR" 2>/dev/null
+      LORE_ID="L-\${TODAY}-auto-\${LORE_TIMESTAMP}"
+      LORE_FILE="$LORE_DIR/\${LORE_ID}.yaml"
+
+      # Extract symbols from modified file paths (directory basenames as component names)
+      LORE_SYMBOLS=""
+      for file in $MODIFIED; do
+        case "$file" in
+          .paradigm/*|*.md|*.lock|*.log|.gitignore|.env*|*.json|*.purpose|portal.yaml) continue ;;
+        esac
+        sym_dir=$(basename "$(dirname "$file")")
+        case "$LORE_SYMBOLS" in
+          *"#$sym_dir"*) ;;
+          *) LORE_SYMBOLS="$LORE_SYMBOLS \\"#$sym_dir\\"" ;;
+        esac
+      done
+
+      cat > "$LORE_FILE" <<LOREEOF
+id: "$LORE_ID"
+type: agent-session
+title: "Auto-recorded session \u2014 $SOURCE_COUNT files modified"
+summary: "Session modified $SOURCE_COUNT source files. Auto-recorded by stop hook."
+symbols_touched: [$(echo $LORE_SYMBOLS | sed 's/^ //')]
+timestamp: "$(date -u +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || date +"%Y-%m-%dT%H:%M:%SZ")"
+LOREEOF
+      AUTO_FIXED="$AUTO_FIXED
+  - Created stub lore entry $LORE_ID (update with real summary)"
+      AUTO_FIX_COUNT=$((AUTO_FIX_COUNT + 1))
+    else
+      VIOLATIONS="$VIOLATIONS
   - You modified $SOURCE_COUNT source files but recorded no lore entry.
     Record your session: paradigm_lore_record (MCP) or paradigm lore record (CLI).
     Include: type, title, summary, and symbols_touched."
-    VIOLATION_COUNT=$((VIOLATION_COUNT + 1))
+      VIOLATION_COUNT=$((VIOLATION_COUNT + 1))
+    fi
   fi
 fi
 
@@ -350,11 +410,28 @@ if [ -f "$CONFIG_FILE" ]; then
   fi
 
   if [ -n "$MISSING_REQUIRED" ]; then
-    VIOLATIONS="$VIOLATIONS
+    if [ "$PARADIGM_AUTO_FIX" = "1" ]; then
+      # Auto-fix: create stub .purpose files for required patterns
+      for dir in $MISSING_REQUIRED; do
+        dir_basename=$(basename "$dir")
+        cat > "$dir/.purpose" <<PURPOSEEOF
+# Auto-generated .purpose stub (purpose-required) \u2014 update with real descriptions
+components:
+  $dir_basename:
+    description: "TODO: describe this component"
+    tags: []
+PURPOSEEOF
+        AUTO_FIXED="$AUTO_FIXED
+  - Created stub .purpose in $dir (purpose-required pattern)"
+        AUTO_FIX_COUNT=$((AUTO_FIX_COUNT + 1))
+      done
+    else
+      VIOLATIONS="$VIOLATIONS
   - These directories match purpose-required patterns but have no .purpose file:
    $MISSING_REQUIRED
     Create .purpose files: paradigm_purpose_init + paradigm_purpose_add_component."
-    VIOLATION_COUNT=$((VIOLATION_COUNT + 1))
+      VIOLATION_COUNT=$((VIOLATION_COUNT + 1))
+    fi
   fi
 fi
 
@@ -406,6 +483,54 @@ if [ -f "portal.yaml" ]; then
     fi
   fi
 fi
+
+# --- Check 12: Graduation failure tracking ---
+# When violations occur for graduated habits, record failures for auto-demotion.
+if [ "$VIOLATION_COUNT" -gt 0 ] && [ -f ".paradigm/graduation.yaml" ]; then
+  GRAD_FAILURES_DIR=".paradigm/.graduation-failures"
+  mkdir -p "$GRAD_FAILURES_DIR" 2>/dev/null
+
+  # Map violations to graduated habit IDs
+  # Check 1/2/5 \u2192 purpose-coverage, Check 3/11 \u2192 gates-for-routes, Check 7 \u2192 record-lore-for-significant
+  NOW=$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date +%Y-%m-%dT%H:%M:%SZ)
+
+  # Purpose coverage violations \u2192 purpose-coverage habit
+  if echo "$VIOLATIONS" | grep -q "source file.*without .purpose\\|missing .purpose\\|purpose.*stale" 2>/dev/null; then
+    if grep -q "purpose-coverage" ".paradigm/graduation.yaml" 2>/dev/null && grep -A1 "purpose-coverage" ".paradigm/graduation.yaml" | grep -q "tier: hook" 2>/dev/null; then
+      echo "$NOW" >> "$GRAD_FAILURES_DIR/purpose-coverage"
+    fi
+  fi
+
+  # Portal gate violations \u2192 gates-for-routes habit
+  if echo "$VIOLATIONS" | grep -q "portal.yaml\\|gate.*undeclared\\|gate.*not declared" 2>/dev/null; then
+    if grep -q "gates-for-routes" ".paradigm/graduation.yaml" 2>/dev/null && grep -A1 "gates-for-routes" ".paradigm/graduation.yaml" | grep -q "tier: hook" 2>/dev/null; then
+      echo "$NOW" >> "$GRAD_FAILURES_DIR/gates-for-routes"
+    fi
+  fi
+
+  # Lore entry violations \u2192 record-lore-for-significant habit
+  if echo "$VIOLATIONS" | grep -q "lore entry expected\\|no lore" 2>/dev/null; then
+    if grep -q "record-lore-for-significant" ".paradigm/graduation.yaml" 2>/dev/null && grep -A1 "record-lore-for-significant" ".paradigm/graduation.yaml" | grep -q "tier: hook" 2>/dev/null; then
+      echo "$NOW" >> "$GRAD_FAILURES_DIR/record-lore-for-significant"
+    fi
+  fi
+
+  # Count recent failures and emit advisory if approaching demotion threshold
+  for fail_file in "$GRAD_FAILURES_DIR"/*; do
+    [ -f "$fail_file" ] || continue
+    habit_id=$(basename "$fail_file")
+    fail_count=$(wc -l < "$fail_file" | tr -d ' ')
+    if [ "$fail_count" -ge 3 ]; then
+      ADVISORY="$ADVISORY
+  - Graduated habit '$habit_id' has $fail_count failures \u2014 auto-demotion triggered.
+    Run paradigm_graduate_status to review tier changes."
+    elif [ "$fail_count" -ge 2 ]; then
+      ADVISORY="$ADVISORY
+  - Graduated habit '$habit_id' has $fail_count failures (demotion at 3).
+    Fix the underlying issue or it will be demoted to habit tier."
+    fi
+  done
+fi
 `;
 var CLAUDE_CODE_STOP_HOOK = `#!/bin/sh
 # Paradigm Claude Code Stop Hook (v2)
@@ -441,8 +566,9 @@ cd "$CWD" || exit 0
 # Get modified files (uncommitted changes)
 MODIFIED=$(git diff --name-only HEAD 2>/dev/null)
 if [ -z "$MODIFIED" ]; then
-  # Clean up pending-review on pass
+  # Clean up session markers on pass (no modifications)
   rm -f ".paradigm/.pending-review"
+  rm -f ".paradigm/.session-started"
   exit 0
 fi
 
@@ -450,8 +576,19 @@ fi
 SCRIPT_DIR=$(dirname "$0")
 . "$SCRIPT_DIR/paradigm-common.sh"
 
+# --- Report auto-fixes if any ---
+if [ "$AUTO_FIX_COUNT" -gt 0 ]; then
+  echo "" >&2
+  echo "[paradigm] Auto-fixed $AUTO_FIX_COUNT issue(s):" >&2
+  echo "$AUTO_FIXED" >&2
+fi
+
 # --- Final verdict ---
 if [ "$VIOLATION_COUNT" -gt 0 ]; then
+  # Emit compliance-violation event (fire-and-forget)
+  if command -v paradigm >/dev/null 2>&1; then
+    paradigm event emit --type compliance-violation --source stop-hook --severity error --context "Stop hook: $VIOLATION_COUNT violation(s)" &
+  fi
   echo "" >&2
   echo "Paradigm compliance check failed ($VIOLATION_COUNT violation(s)):" >&2
   echo "$VIOLATIONS" >&2
@@ -468,6 +605,8 @@ if [ "$VIOLATION_COUNT" -gt 0 ]; then
   echo "  4. paradigm_reindex \u2014 rebuild indexes after updates" >&2
   echo "  5. paradigm_lore_record \u2014 record session lore entry" >&2
   echo "  6. paradigm_habits_check \u2014 evaluate habit compliance" >&2
+  echo "" >&2
+  echo "Tip: Set PARADIGM_AUTO_FIX=1 to auto-fix trivial violations (missing .purpose stubs, missing lore)." >&2
   exit 2
 fi
 
@@ -478,9 +617,26 @@ if [ -n "$ADVISORY" ]; then
   echo "$ADVISORY" >&2
 fi
 
-# Clean up pending-review on pass
+# Auto-demote graduated habits with 3+ failures
+if [ -d ".paradigm/.graduation-failures" ]; then
+  for fail_file in .paradigm/.graduation-failures/*; do
+    [ -f "$fail_file" ] || continue
+    habit_id=$(basename "$fail_file")
+    fail_count=$(wc -l < "$fail_file" | tr -d ' ')
+    if [ "$fail_count" -ge 3 ]; then
+      if command -v paradigm >/dev/null 2>&1; then
+        paradigm graduate demote "$habit_id" --cooldown 14 2>/dev/null || true
+      fi
+      rm -f "$fail_file"
+      echo "[paradigm] Auto-demoted '$habit_id' after $fail_count failures." >&2
+    fi
+  done
+fi
+
+# Clean up session markers on pass
 rm -f ".paradigm/.pending-review"
 rm -f ".paradigm/.habits-blocking"
+rm -f ".paradigm/.session-started"
 
 exit 0
 `;
@@ -493,17 +649,23 @@ var CLAUDE_CODE_POSTWRITE_HOOK = `#!/bin/sh
 #
 # Hook type: PostToolUse (matcher: Edit,Write)
 # Exit 0 always (never blocks \u2014 advisory only)
+#
+# NOTE: stdin JSON can be 8KB+ (tool_response includes full file contents).
+# Using echo "$INPUT" | jq corrupts the JSON via shell string handling.
+# Fix: write stdin to temp file, use jq < file for all extractions.
 
-# Read JSON from stdin (hook input)
-INPUT=$(cat)
+# Save stdin to temp file \u2014 avoids echo corruption on large JSON
+TMPINPUT=$(mktemp)
+trap 'rm -f "$TMPINPUT"' EXIT
+cat > "$TMPINPUT"
 
 # Extract the file path from tool_input
 if command -v jq >/dev/null 2>&1; then
-  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .tool_input.filePath // empty' 2>/dev/null)
+  FILE_PATH=$(jq -r '.tool_input.file_path // .tool_input.filePath // empty' < "$TMPINPUT" 2>/dev/null)
 else
-  FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"file_path"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+  FILE_PATH=$(grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' "$TMPINPUT" | head -1 | sed 's/.*"file_path"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
   if [ -z "$FILE_PATH" ]; then
-    FILE_PATH=$(echo "$INPUT" | grep -o '"filePath"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"filePath"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+    FILE_PATH=$(grep -o '"filePath"[[:space:]]*:[[:space:]]*"[^"]*"' "$TMPINPUT" | head -1 | sed 's/.*"filePath"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
   fi
 fi
 
@@ -511,6 +673,16 @@ if [ -z "$FILE_PATH" ]; then
   exit 0
 fi
 
+# Extract cwd from input
+if command -v jq >/dev/null 2>&1; then
+  CWD=$(jq -r '.cwd // empty' < "$TMPINPUT" 2>/dev/null)
+else
+  CWD=$(grep -o '"cwd"[[:space:]]*:[[:space:]]*"[^"]*"' "$TMPINPUT" | sed 's/.*"cwd"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+fi
+if [ -n "$CWD" ]; then
+  cd "$CWD" || exit 0
+fi
+
 # Skip non-source files
 case "$FILE_PATH" in
   *.purpose|portal.yaml|*.md|*.lock|*.log|*.json|*.yaml|*.yml|.gitignore|.env*) exit 0 ;;
@@ -526,6 +698,15 @@ if [ ! -d ".paradigm" ]; then
   exit 0
 fi
 
+# Pseudo-session-start: first edit of session emits one-time guidance
+if [ ! -f ".paradigm/.session-started" ]; then
+  PREV_PENDING=$(cat .paradigm/.pending-review 2>/dev/null | wc -l | tr -d ' ')
+  if [ "$PREV_PENDING" -gt 0 ] 2>/dev/null; then
+    echo "[paradigm] Session started. $PREV_PENDING uncovered edit(s) from last session." >&2
+  fi
+  touch ".paradigm/.session-started"
+fi
+
 # Convert to relative path (strip project root prefix)
 PROJECT_ROOT="$(pwd)"
 REL_PATH="$FILE_PATH"
@@ -538,6 +719,11 @@ case "$REL_PATH" in
   /*) exit 0 ;;
 esac
 
+# Emit file-modified event (fire-and-forget)
+if command -v paradigm >/dev/null 2>&1; then
+  paradigm event emit --type file-modified --source post-write-hook --path "$REL_PATH" &
+fi
+
 # Track: append to .paradigm/.pending-review (deduplicated)
 PENDING_FILE=".paradigm/.pending-review"
 if [ -f "$PENDING_FILE" ]; then
@@ -581,6 +767,11 @@ elif [ "$PENDING_COUNT" -gt 0 ] && [ "$((PENDING_COUNT % 3))" -eq 0 ]; then
   echo "  The stop hook WILL BLOCK if .purpose files aren't updated." >&2
 fi
 
+# Context budget heuristic: suggest handoff check at high edit counts
+if [ "$PENDING_COUNT" -ge 30 ]; then
+  echo "[paradigm] ~$PENDING_COUNT edits this session. Consider preparing handoff." >&2
+fi
+
 exit 0
 `;
 var CLAUDE_CODE_PRECOMMIT_HOOK = `#!/bin/sh
@@ -784,8 +975,9 @@ fi
 # Get modified files (uncommitted changes)
 MODIFIED=$(git diff --name-only HEAD 2>/dev/null)
 if [ -z "$MODIFIED" ]; then
-  # Clean up pending-review on pass
+  # Clean up session markers on pass (no modifications)
   rm -f ".paradigm/.pending-review"
+  rm -f ".paradigm/.session-started"
   exit 0
 fi
 
@@ -793,6 +985,13 @@ fi
 SCRIPT_DIR=$(dirname "$0")
 . "$SCRIPT_DIR/paradigm-common.sh"
 
+# --- Report auto-fixes if any ---
+if [ "$AUTO_FIX_COUNT" -gt 0 ]; then
+  echo "" >&2
+  echo "[paradigm] Auto-fixed $AUTO_FIX_COUNT issue(s):" >&2
+  echo "$AUTO_FIXED" >&2
+fi
+
 # --- Final verdict ---
 if [ "$VIOLATION_COUNT" -gt 0 ]; then
   echo "" >&2
@@ -811,6 +1010,8 @@ if [ "$VIOLATION_COUNT" -gt 0 ]; then
   echo "  4. paradigm_reindex \u2014 rebuild indexes after updates" >&2
   echo "  5. paradigm_lore_record \u2014 record session lore entry" >&2
   echo "  6. paradigm_habits_check \u2014 evaluate habit compliance" >&2
+  echo "" >&2
+  echo "Tip: Set PARADIGM_AUTO_FIX=1 to auto-fix trivial violations (missing .purpose stubs, missing lore)." >&2
 
   # Output followup_message JSON to stdout for Cursor's compliance loop.
   # Cursor auto-submits this as the next user message, creating a retry loop.
@@ -828,10 +1029,27 @@ if [ -n "$ADVISORY" ]; then
   echo "$ADVISORY" >&2
 fi
 
-# Clean up pending-review and loop guard on pass
+# Auto-demote graduated habits with 3+ failures
+if [ -d ".paradigm/.graduation-failures" ]; then
+  for fail_file in .paradigm/.graduation-failures/*; do
+    [ -f "$fail_file" ] || continue
+    habit_id=$(basename "$fail_file")
+    fail_count=$(wc -l < "$fail_file" | tr -d ' ')
+    if [ "$fail_count" -ge 3 ]; then
+      if command -v paradigm >/dev/null 2>&1; then
+        paradigm graduate demote "$habit_id" --cooldown 14 2>/dev/null || true
+      fi
+      rm -f "$fail_file"
+      echo "[paradigm] Auto-demoted '$habit_id' after $fail_count failures." >&2
+    fi
+  done
+fi
+
+# Clean up session markers and loop guard on pass
 rm -f ".paradigm/.pending-review"
 rm -f ".paradigm/.habits-blocking"
 rm -f ".paradigm/.stop-hook-active"
+rm -f ".paradigm/.session-started"
 
 exit 0
 `;
@@ -1166,6 +1384,15 @@ fi
 
 cd "$CWD" || exit 0
 
+# Pseudo-session-start: first edit of session emits one-time guidance
+if [ ! -f ".paradigm/.session-started" ]; then
+  PREV_PENDING=$(cat .paradigm/.pending-review 2>/dev/null | wc -l | tr -d ' ')
+  if [ "$PREV_PENDING" -gt 0 ] 2>/dev/null; then
+    echo "[paradigm] Session started. $PREV_PENDING uncovered edit(s) from last session." >&2
+  fi
+  touch ".paradigm/.session-started"
+fi
+
 # Convert to relative path
 REL_PATH="$FILE_PATH"
 case "$FILE_PATH" in
@@ -1230,6 +1457,11 @@ elif [ "$PENDING_COUNT" -gt 0 ] && [ "$((PENDING_COUNT % 3))" -eq 0 ]; then
   echo "  The stop hook WILL BLOCK if .purpose files aren't updated." >&2
 fi
 
+# Context budget heuristic: suggest handoff check at high edit counts
+if [ "$PENDING_COUNT" -ge 30 ]; then
+  echo "[paradigm] ~$PENDING_COUNT edits this session. Consider preparing handoff." >&2
+fi
+
 exit 0
 `;
 

package/dist/{chunk-QDXI2DHR.js → chunk-J2JEQRT3.js}

@@ -10,7 +10,7 @@ async function graphCommand(path, options) {
   const shouldOpen = options.open !== false;
   console.log(chalk.cyan("\nStarting Symbol Graph...\n"));
   try {
-    const { startGraphServer } = await import("./graph-server-ZPXRSGCW.js");
+    const { startGraphServer } = await import("./graph-server-YL22VBBN.js");
     console.log(chalk.gray(`Project: ${projectDir}`));
     console.log(chalk.gray(`Port: ${port}`));
     console.log();

package/dist/{chunk-AKIMFN6I.js → chunk-JASGXLK3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   indexCommand
-} from "./chunk-7COU5S2Z.js";
+} from "./chunk-VL67H5IC.js";
 import {
   getDefaultPremiseContent
 } from "./chunk-ZGUAAVMA.js";
@@ -19,7 +19,7 @@ import {
   detectIDE,
   loadParadigmFiles,
   syncToIDE
-} from "./chunk-KB4XJWE3.js";
+} from "./chunk-6N3JTACN.js";
 import {
   log
 } from "./chunk-4NCFWYGG.js";

package/dist/chunk-KVDYJLTC.js

@@ -0,0 +1,121 @@
+#!/usr/bin/env node
+
+// ../paradigm-mcp/src/utils/symphony-peers.ts
+import * as fs from "fs";
+import * as path from "path";
+import * as os from "os";
+import * as crypto from "crypto";
+var SCORE_DIR = path.join(os.homedir(), ".paradigm", "score");
+var PEERS_FILE = path.join(SCORE_DIR, "peers.json");
+var PAIRING_TTL_MS = 5 * 60 * 1e3;
+function loadPeers() {
+  try {
+    if (!fs.existsSync(PEERS_FILE)) return [];
+    const content = fs.readFileSync(PEERS_FILE, "utf-8");
+    const parsed = JSON.parse(content);
+    if (!Array.isArray(parsed)) return [];
+    return parsed;
+  } catch {
+    return [];
+  }
+}
+function savePeers(peers) {
+  if (!fs.existsSync(SCORE_DIR)) {
+    fs.mkdirSync(SCORE_DIR, { recursive: true });
+  }
+  fs.writeFileSync(PEERS_FILE, JSON.stringify(peers, null, 2), { mode: 384 });
+}
+function findPeer(id) {
+  const peers = loadPeers();
+  return peers.find((p) => p.id === id) ?? null;
+}
+function addPeer(peer) {
+  const peers = loadPeers();
+  const idx = peers.findIndex((p) => p.id === peer.id);
+  if (idx >= 0) {
+    peers[idx] = peer;
+  } else {
+    peers.push(peer);
+  }
+  savePeers(peers);
+}
+function revokePeer(id) {
+  const peers = loadPeers();
+  const peer = peers.find((p) => p.id === id);
+  if (!peer) return false;
+  peer.revoked = true;
+  savePeers(peers);
+  return true;
+}
+function forgetAllPeers() {
+  const peers = loadPeers();
+  const count = peers.length;
+  if (fs.existsSync(PEERS_FILE)) {
+    fs.unlinkSync(PEERS_FILE);
+  }
+  return count;
+}
+function updatePeerLastSeen(id) {
+  const peers = loadPeers();
+  const peer = peers.find((p) => p.id === id);
+  if (!peer) return;
+  peer.lastSeen = (/* @__PURE__ */ new Date()).toISOString();
+  savePeers(peers);
+}
+function updatePeerAgents(id, agents) {
+  const peers = loadPeers();
+  const peer = peers.find((p) => p.id === id);
+  if (!peer) return;
+  peer.agents = agents;
+  savePeers(peers);
+}
+function generatePairing() {
+  const sharedSecret = crypto.randomBytes(32).toString("hex");
+  const code = (parseInt(crypto.randomBytes(3).toString("hex"), 16) % 1e6).toString().padStart(6, "0");
+  const codeHash = crypto.createHash("sha256").update(code).digest("hex");
+  return {
+    code,
+    codeHash,
+    sharedSecret,
+    createdAt: Date.now()
+  };
+}
+function verifyPairingCode(state, code) {
+  if (Date.now() - state.createdAt > PAIRING_TTL_MS) {
+    return false;
+  }
+  const hash = crypto.createHash("sha256").update(code).digest("hex");
+  return hash === state.codeHash;
+}
+function computeHmacProof(challenge, codeHash) {
+  return crypto.createHmac("sha256", codeHash).update(challenge).digest("hex");
+}
+function verifyHmacProof(challenge, codeHash, proof) {
+  const expected = computeHmacProof(challenge, codeHash);
+  if (expected.length !== proof.length) return false;
+  try {
+    return crypto.timingSafeEqual(
+      Buffer.from(expected, "hex"),
+      Buffer.from(proof, "hex")
+    );
+  } catch {
+    return false;
+  }
+}
+
+export {
+  PEERS_FILE,
+  PAIRING_TTL_MS,
+  loadPeers,
+  savePeers,
+  findPeer,
+  addPeer,
+  revokePeer,
+  forgetAllPeers,
+  updatePeerLastSeen,
+  updatePeerAgents,
+  generatePairing,
+  verifyPairingCode,
+  computeHmacProof,
+  verifyHmacProof
+};

package/dist/{chunk-J4E6K5MG.js → chunk-LSRABQIY.js}

@@ -5,7 +5,7 @@ import {
 import {
   getProvider,
   initializeProviders
-} from "./chunk-FS3WTUHY.js";
+} from "./chunk-TXESEO7Y.js";
 import {
   loadAgentsManifest
 } from "./chunk-PMXRGPRQ.js";
@@ -614,6 +614,7 @@ var AgentSpawner = class {
       agent: agentName,
       task,
       status: "success",
+      completionVerified: false,
       outputs: {
         artifacts: [],
         symbols: context.symbols,
@@ -681,6 +682,29 @@ var AgentSpawner = class {
       if (this.budgetTracker) {
         this.budgetTracker.recordUsage(agentName, relay.metrics.tokens_used, model);
       }
+      if (relay.status === "success") {
+        const hasArtifacts = relay.outputs.artifacts.length > 0;
+        const hasDecisions = relay.outputs.decisions.length > 0;
+        const hasHandoff = !!relay.handoff;
+        const didFileWork = relay.metrics.files_written > 0;
+        const isArchitect = agentName === "architect";
+        const isBuilder = agentName === "builder";
+        if (isBuilder && !didFileWork && !hasHandoff) {
+          relay.status = "partial";
+        } else if (!hasArtifacts && !hasDecisions && !hasHandoff && !didFileWork) {
+          relay.status = "partial";
+        }
+        relay.completionVerified = true;
+        if (relay.status === "partial" && !isArchitect) {
+          if (options.onMessage) {
+            options.onMessage({
+              type: "text",
+              content: `[completion-check] Agent "${agentName}" downgraded from success \u2192 partial: no meaningful output detected.`,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+          }
+        }
+      }
       if (this.auditLogger) {
         const agentLog = {
           name: agentName,