@actrun_ai/tastekit-core 0.1.0

package/dist/skills/versioner.js

@@ -0,0 +1,76 @@
+import { readFileIfExists, writeFileSafe, ensureDir } from '../utils/filesystem.js';
+import { hashString } from '../utils/hash.js';
+import { join } from 'path';
+/**
+ * Skill Versioner — Track skill instruction history for rollback
+ *
+ * Stores version snapshots in .tastekit/skill-versions/{skill_id}.versions.json.
+ * Each version records content hash, timestamp, optional amendment ID, and eval score.
+ */
+const VERSIONS_DIR = 'skill-versions';
+export class SkillVersioner {
+    basePath;
+    constructor(workspacePath) {
+        this.basePath = join(workspacePath, VERSIONS_DIR);
+        ensureDir(this.basePath);
+    }
+    /** Record a new version of a skill's content. Returns the version number. */
+    recordVersion(skillId, content, opts) {
+        const history = this.getHistory(skillId);
+        const contentHash = hashString(content);
+        // Skip if content hasn't changed
+        if (history.versions.length > 0) {
+            const latest = history.versions[history.versions.length - 1];
+            if (latest.content_hash === contentHash) {
+                return latest;
+            }
+        }
+        const version = {
+            version: history.versions.length + 1,
+            content_hash: contentHash,
+            timestamp: new Date().toISOString(),
+            amendment_id: opts?.amendmentId,
+            eval_score: opts?.evalScore,
+        };
+        history.versions.push(version);
+        history.current = version.version;
+        this.saveHistory(skillId, history);
+        return version;
+    }
+    /** Get the full version history for a skill. */
+    getHistory(skillId) {
+        const filePath = this.historyPath(skillId);
+        const content = readFileIfExists(filePath);
+        if (content) {
+            return JSON.parse(content);
+        }
+        return {
+            skill_id: skillId,
+            versions: [],
+            current: 0,
+        };
+    }
+    /** Get a specific version. */
+    getVersion(skillId, versionNumber) {
+        const history = this.getHistory(skillId);
+        return history.versions.find(v => v.version === versionNumber) ?? null;
+    }
+    /** Set the current version pointer (for rollback). */
+    rollback(skillId, toVersion) {
+        const history = this.getHistory(skillId);
+        const target = history.versions.find(v => v.version === toVersion);
+        if (!target) {
+            throw new Error(`Version ${toVersion} not found for skill "${skillId}"`);
+        }
+        history.current = toVersion;
+        this.saveHistory(skillId, history);
+        return target;
+    }
+    historyPath(skillId) {
+        return join(this.basePath, `${skillId}.versions.json`);
+    }
+    saveHistory(skillId, history) {
+        writeFileSafe(this.historyPath(skillId), JSON.stringify(history, null, 2));
+    }
+}
+//# sourceMappingURL=versioner.js.map

package/dist/skills/versioner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versioner.js","sourceRoot":"","sources":["../../skills/versioner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B;;;;;GAKG;AAEH,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC,MAAM,OAAO,cAAc;IACjB,QAAQ,CAAS;IAEzB,YAAY,aAAqB;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAClD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,6EAA6E;IAC7E,aAAa,CACX,OAAe,EACf,OAAe,EACf,IAAmD;QAEnD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAExC,iCAAiC;QACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACxC,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAiB;YAC5B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACpC,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,IAAI,EAAE,WAAW;YAC/B,UAAU,EAAE,IAAI,EAAE,SAAS;SAC5B,CAAC;QAEF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,gDAAgD;IAChD,UAAU,CAAC,OAAe;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAC;QACpD,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,UAAU,CAAC,OAAe,EAAE,aAAqB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAED,sDAAsD;IACtD,QAAQ,CAAC,OAAe,EAAE,SAAiB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAEnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,yBAAyB,OAAO,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,gBAAgB,CAAC,CAAC;IACzD,CAAC;IAEO,WAAW,CAAC,OAAe,EAAE,OAA4B;QAC/D,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/tracing/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * TasteKit Tracing Module
+ *
+ * Trace-first logging for all operations.
+ */
+export * from './tracer.js';
+export * from './reader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tracing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../tracing/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/tracing/index.js

@@ -0,0 +1,8 @@
+/**
+ * TasteKit Tracing Module
+ *
+ * Trace-first logging for all operations.
+ */
+export * from './tracer.js';
+export * from './reader.js';
+//# sourceMappingURL=index.js.map

package/dist/tracing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../tracing/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/tracing/reader.d.ts

@@ -0,0 +1,18 @@
+import { TraceEvent } from '../schemas/trace.js';
+/**
+ * Trace Reader
+ *
+ * Reads and parses trace files.
+ */
+export declare class TraceReader {
+    readTrace(tracePath: string): TraceEvent[];
+    filterByEventType(events: TraceEvent[], eventType: string): TraceEvent[];
+    filterBySkill(events: TraceEvent[], skillId: string): TraceEvent[];
+    filterByActor(events: TraceEvent[], actor: 'agent' | 'user' | 'system'): TraceEvent[];
+    getErrors(events: TraceEvent[]): TraceEvent[];
+    getApprovals(events: TraceEvent[]): {
+        requests: TraceEvent[];
+        responses: TraceEvent[];
+    };
+}
+//# sourceMappingURL=reader.d.ts.map

package/dist/tracing/reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.d.ts","sourceRoot":"","sources":["../../tracing/reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;GAIG;AAEH,qBAAa,WAAW;IACtB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE;IAS1C,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE;IAIxE,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE;IAIlE,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,EAAE;IAIrF,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE;IAI7C,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG;QAClC,QAAQ,EAAE,UAAU,EAAE,CAAC;QACvB,SAAS,EAAE,UAAU,EAAE,CAAC;KACzB;CAMF"}

package/dist/tracing/reader.js

@@ -0,0 +1,34 @@
+import { readFileSync } from 'fs';
+/**
+ * Trace Reader
+ *
+ * Reads and parses trace files.
+ */
+export class TraceReader {
+    readTrace(tracePath) {
+        const content = readFileSync(tracePath, 'utf-8');
+        const lines = content.trim().split('\n');
+        return lines
+            .filter(line => line.length > 0)
+            .map(line => JSON.parse(line));
+    }
+    filterByEventType(events, eventType) {
+        return events.filter(e => e.event_type === eventType);
+    }
+    filterBySkill(events, skillId) {
+        return events.filter(e => e.skill_id === skillId);
+    }
+    filterByActor(events, actor) {
+        return events.filter(e => e.actor === actor);
+    }
+    getErrors(events) {
+        return this.filterByEventType(events, 'error');
+    }
+    getApprovals(events) {
+        return {
+            requests: this.filterByEventType(events, 'approval_requested'),
+            responses: this.filterByEventType(events, 'approval_response'),
+        };
+    }
+}
+//# sourceMappingURL=reader.js.map

package/dist/tracing/reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../tracing/reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAGlC;;;;GAIG;AAEH,MAAM,OAAO,WAAW;IACtB,SAAS,CAAC,SAAiB;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO,KAAK;aACT,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;aAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;IACjD,CAAC;IAED,iBAAiB,CAAC,MAAoB,EAAE,SAAiB;QACvD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IACxD,CAAC;IAED,aAAa,CAAC,MAAoB,EAAE,OAAe;QACjD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,aAAa,CAAC,MAAoB,EAAE,KAAkC;QACpE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,CAAC,MAAoB;QAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,MAAoB;QAI/B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,CAAC;YAC9D,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,CAAC;SAC/D,CAAC;IACJ,CAAC;CACF"}

package/dist/tracing/tracer.d.ts

@@ -0,0 +1,22 @@
+import { TraceEvent } from '../schemas/trace.js';
+/**
+ * Tracer
+ *
+ * Writes trace events to JSONL files.
+ */
+export declare class Tracer {
+    private runId;
+    private tracePath;
+    constructor(workspacePath: string, runId?: string);
+    getRunId(): string;
+    trace(event: Omit<TraceEvent, 'schema_version' | 'run_id' | 'timestamp'>): void;
+    tracePlan(data: any): void;
+    traceThink(data: any, skillId?: string): void;
+    traceToolCall(toolRef: string, input: any, skillId?: string, stepId?: string): void;
+    traceToolResult(toolRef: string, output: any, skillId?: string, stepId?: string): void;
+    traceApprovalRequest(data: any, riskScore?: number): void;
+    traceApprovalResponse(approved: boolean, reason?: string): void;
+    traceArtifactWritten(artifactPath: string, hash: string): void;
+    traceError(error: Error, context?: any): void;
+}
+//# sourceMappingURL=tracer.d.ts.map

package/dist/tracing/tracer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracer.d.ts","sourceRoot":"","sources":["../../tracing/tracer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIjD;;;;GAIG;AAEH,qBAAa,MAAM;IACjB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,SAAS,CAAS;gBAEd,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IASjD,QAAQ,IAAI,MAAM;IAIlB,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,gBAAgB,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,IAAI;IAa/E,SAAS,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI;IAQ1B,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAS7C,aAAa,CACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,IAAI;IAYP,eAAe,CACb,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,GAAG,EACX,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,IAAI;IAYP,oBAAoB,CAClB,IAAI,EAAE,GAAG,EACT,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI;IASP,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAQ/D,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAS9D,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI;CAW9C"}

package/dist/tracing/tracer.js

@@ -0,0 +1,105 @@
+import { appendFileSync } from 'fs';
+import { join } from 'path';
+import { hashObject } from '../utils/hash.js';
+import { ensureDir, resolveTracesPath } from '../utils/filesystem.js';
+/**
+ * Tracer
+ *
+ * Writes trace events to JSONL files.
+ */
+export class Tracer {
+    runId;
+    tracePath;
+    constructor(workspacePath, runId) {
+        this.runId = runId || crypto.randomUUID();
+        const tracesDir = resolveTracesPath(workspacePath);
+        ensureDir(tracesDir);
+        this.tracePath = join(tracesDir, `${this.runId}.trace.v1.jsonl`);
+    }
+    getRunId() {
+        return this.runId;
+    }
+    trace(event) {
+        const fullEvent = {
+            schema_version: 'trace_event.v1',
+            run_id: this.runId,
+            timestamp: new Date().toISOString(),
+            ...event,
+        };
+        // Write as JSONL (one event per line)
+        const line = JSON.stringify(fullEvent) + '\n';
+        appendFileSync(this.tracePath, line);
+    }
+    tracePlan(data) {
+        this.trace({
+            actor: 'agent',
+            event_type: 'plan',
+            data,
+        });
+    }
+    traceThink(data, skillId) {
+        this.trace({
+            actor: 'agent',
+            event_type: 'think',
+            skill_id: skillId,
+            data,
+        });
+    }
+    traceToolCall(toolRef, input, skillId, stepId) {
+        this.trace({
+            actor: 'agent',
+            event_type: 'tool_call',
+            tool_ref: toolRef,
+            skill_id: skillId,
+            step_id: stepId,
+            input_hash: hashObject(input),
+            data: { input },
+        });
+    }
+    traceToolResult(toolRef, output, skillId, stepId) {
+        this.trace({
+            actor: 'agent',
+            event_type: 'tool_result',
+            tool_ref: toolRef,
+            skill_id: skillId,
+            step_id: stepId,
+            output_hash: hashObject(output),
+            data: { output },
+        });
+    }
+    traceApprovalRequest(data, riskScore) {
+        this.trace({
+            actor: 'agent',
+            event_type: 'approval_requested',
+            risk_score: riskScore,
+            data,
+        });
+    }
+    traceApprovalResponse(approved, reason) {
+        this.trace({
+            actor: 'user',
+            event_type: 'approval_response',
+            data: { approved, reason },
+        });
+    }
+    traceArtifactWritten(artifactPath, hash) {
+        this.trace({
+            actor: 'agent',
+            event_type: 'artifact_written',
+            output_hash: hash,
+            data: { path: artifactPath },
+        });
+    }
+    traceError(error, context) {
+        this.trace({
+            actor: 'system',
+            event_type: 'error',
+            error: error.message,
+            data: {
+                stack: error.stack,
+                context,
+            },
+        });
+    }
+}
+//# sourceMappingURL=tracer.js.map

package/dist/tracing/tracer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracer.js","sourceRoot":"","sources":["../../tracing/tracer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEtE;;;;GAIG;AAEH,MAAM,OAAO,MAAM;IACT,KAAK,CAAS;IACd,SAAS,CAAS;IAE1B,YAAY,aAAqB,EAAE,KAAc;QAC/C,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAE1C,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACnD,SAAS,CAAC,SAAS,CAAC,CAAC;QAErB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,iBAAiB,CAAC,CAAC;IACnE,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAkE;QACtE,MAAM,SAAS,GAAe;YAC5B,cAAc,EAAE,gBAAgB;YAChC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,KAAK;SACT,CAAC;QAEF,sCAAsC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAC9C,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,CAAC,IAAS;QACjB,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,MAAM;YAClB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAS,EAAE,OAAgB;QACpC,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;YACjB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CACX,OAAe,EACf,KAAU,EACV,OAAgB,EAChB,MAAe;QAEf,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;YAC7B,IAAI,EAAE,EAAE,KAAK,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CACb,OAAe,EACf,MAAW,EACX,OAAgB,EAChB,MAAe;QAEf,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAClB,IAAS,EACT,SAAkB;QAElB,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,oBAAoB;YAChC,UAAU,EAAE,SAAS;YACrB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB,CAAC,QAAiB,EAAE,MAAe;QACtD,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,mBAAmB;YAC/B,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,YAAoB,EAAE,IAAY;QACrD,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,kBAAkB;YAC9B,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAY,EAAE,OAAa;QACpC,IAAI,CAAC,KAAK,CAAC;YACT,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,OAAO;YACnB,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,IAAI,EAAE;gBACJ,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/trust/auditor.d.ts

@@ -0,0 +1,35 @@
+import { TrustV1 } from '../schemas/trust.js';
+import { BindingsV1 } from '../schemas/bindings.js';
+/**
+ * Trust Auditor
+ *
+ * Audits trust policy against current bindings and detects violations:
+ * - unpinned_server: bound server not in trust policy
+ * - fingerprint_mismatch: server fingerprint differs from pinned value
+ * - unpinned_skill: skill source not pinned (reserved for future use)
+ * - new_tool: tool appeared that was not in baseline bindings
+ */
+export interface AuditViolation {
+    type: 'fingerprint_mismatch' | 'unpinned_server' | 'unpinned_skill' | 'new_tool';
+    severity: 'error' | 'warning';
+    message: string;
+    details?: Record<string, unknown>;
+}
+export interface AuditReport {
+    timestamp: string;
+    violations: AuditViolation[];
+    passed: boolean;
+}
+export declare class TrustAuditor {
+    /**
+     * Audit trust policy against current bindings.
+     *
+     * @param trust - Current trust policy
+     * @param bindings - Current MCP bindings
+     * @param previousBindings - Optional baseline bindings for new_tool detection.
+     *   When provided, any tool in `bindings` that was not in `previousBindings`
+     *   triggers a new_tool warning.
+     */
+    audit(trust: TrustV1, bindings: BindingsV1, previousBindings?: BindingsV1): AuditReport;
+}
+//# sourceMappingURL=auditor.d.ts.map

package/dist/trust/auditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditor.d.ts","sourceRoot":"","sources":["../../trust/auditor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;;;;GAQG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,sBAAsB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,UAAU,CAAC;IACjF,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,YAAY;IACvB;;;;;;;;OAQG;IACH,KAAK,CACH,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,UAAU,EACpB,gBAAgB,CAAC,EAAE,UAAU,GAC5B,WAAW;CAqEf"}

package/dist/trust/auditor.js

@@ -0,0 +1,78 @@
+export class TrustAuditor {
+    /**
+     * Audit trust policy against current bindings.
+     *
+     * @param trust - Current trust policy
+     * @param bindings - Current MCP bindings
+     * @param previousBindings - Optional baseline bindings for new_tool detection.
+     *   When provided, any tool in `bindings` that was not in `previousBindings`
+     *   triggers a new_tool warning.
+     */
+    audit(trust, bindings, previousBindings) {
+        const violations = [];
+        // Check all bound servers are pinned and fingerprints match
+        for (const server of bindings.servers) {
+            const pinned = trust.mcp_servers.find(s => s.url === server.url);
+            if (!pinned) {
+                violations.push({
+                    type: 'unpinned_server',
+                    severity: 'warning',
+                    message: `MCP server not pinned: ${server.name}`,
+                    details: { url: server.url },
+                });
+            }
+            else if (server.pinned_fingerprint && server.pinned_fingerprint !== pinned.fingerprint) {
+                violations.push({
+                    type: 'fingerprint_mismatch',
+                    severity: pinned.pin_mode === 'strict' ? 'error' : 'warning',
+                    message: `Fingerprint mismatch for server: ${server.name}`,
+                    details: {
+                        expected: pinned.fingerprint,
+                        actual: server.pinned_fingerprint,
+                    },
+                });
+            }
+            else if (!server.pinned_fingerprint && pinned.fingerprint) {
+                // Server is in trust policy with a fingerprint but binding never pinned one
+                violations.push({
+                    type: 'unpinned_server',
+                    severity: 'warning',
+                    message: `Server binding has no pinned fingerprint but trust policy expects one: ${server.name}`,
+                    details: { url: server.url, expected_fingerprint: pinned.fingerprint },
+                });
+            }
+        }
+        // Detect new tools not present in baseline
+        if (previousBindings) {
+            const baselineToolRefs = new Set();
+            for (const server of previousBindings.servers) {
+                for (const tool of server.tools) {
+                    baselineToolRefs.add(`${server.name}:${tool.tool_ref}`);
+                }
+            }
+            for (const server of bindings.servers) {
+                for (const tool of server.tools) {
+                    const qualifiedRef = `${server.name}:${tool.tool_ref}`;
+                    if (!baselineToolRefs.has(qualifiedRef)) {
+                        violations.push({
+                            type: 'new_tool',
+                            severity: 'warning',
+                            message: `New tool detected: ${qualifiedRef}`,
+                            details: {
+                                server: server.name,
+                                tool_ref: tool.tool_ref,
+                                risk_hints: tool.risk_hints,
+                            },
+                        });
+                    }
+                }
+            }
+        }
+        return {
+            timestamp: new Date().toISOString(),
+            violations,
+            passed: violations.filter(v => v.severity === 'error').length === 0,
+        };
+    }
+}
+//# sourceMappingURL=auditor.js.map

package/dist/trust/auditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditor.js","sourceRoot":"","sources":["../../trust/auditor.ts"],"names":[],"mappings":"AA0BA,MAAM,OAAO,YAAY;IACvB;;;;;;;;OAQG;IACH,KAAK,CACH,KAAc,EACd,QAAoB,EACpB,gBAA6B;QAE7B,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,4DAA4D;QAC5D,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,0BAA0B,MAAM,CAAC,IAAI,EAAE;oBAChD,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzF,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBAC5D,OAAO,EAAE,oCAAoC,MAAM,CAAC,IAAI,EAAE;oBAC1D,OAAO,EAAE;wBACP,QAAQ,EAAE,MAAM,CAAC,WAAW;wBAC5B,MAAM,EAAE,MAAM,CAAC,kBAAkB;qBAClC;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC5D,4EAA4E;gBAC5E,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,0EAA0E,MAAM,CAAC,IAAI,EAAE;oBAChG,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;YAC3C,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,gBAAgB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,MAAM,YAAY,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wBACxC,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,sBAAsB,YAAY,EAAE;4BAC7C,OAAO,EAAE;gCACP,MAAM,EAAE,MAAM,CAAC,IAAI;gCACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,UAAU,EAAE,IAAI,CAAC,UAAU;6BAC5B;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU;YACV,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;SACpE,CAAC;IACJ,CAAC;CACF"}

package/dist/trust/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * TasteKit Trust Module
+ *
+ * Trust and provenance management for MCP servers and skill sources.
+ */
+export * from './manager.js';
+export * from './auditor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/trust/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../trust/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/trust/index.js

@@ -0,0 +1,8 @@
+/**
+ * TasteKit Trust Module
+ *
+ * Trust and provenance management for MCP servers and skill sources.
+ */
+export * from './manager.js';
+export * from './auditor.js';
+//# sourceMappingURL=index.js.map

package/dist/trust/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../trust/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/trust/manager.d.ts

@@ -0,0 +1,18 @@
+import { TrustV1 } from '../schemas/trust.js';
+/**
+ * Trust Manager
+ *
+ * Manages trust policy for MCP servers and skill sources.
+ */
+export declare class TrustManager {
+    private policy;
+    constructor(policy: TrustV1);
+    pinMCPServer(url: string, fingerprint: string, mode?: 'strict' | 'warn'): void;
+    pinSkillSource(type: 'local' | 'git', pathOrUrl: string, hash: string, mode?: 'strict' | 'warn'): void;
+    verifyMCPServer(url: string, currentFingerprint: string): {
+        trusted: boolean;
+        reason?: string;
+    };
+    getPolicy(): TrustV1;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/trust/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../trust/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAoC,MAAM,qBAAqB,CAAC;AAGhF;;;;GAIG;AAEH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAU;gBAEZ,MAAM,EAAE,OAAO;IAI3B,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,QAAQ,GAAG,MAAiB,GAAG,IAAI;IAexF,cAAc,CACZ,IAAI,EAAE,OAAO,GAAG,KAAK,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,QAAQ,GAAG,MAAiB,GACjC,IAAI;IAiBP,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG;QACxD,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAoBD,SAAS,IAAI,OAAO;CAGrB"}

package/dist/trust/manager.js

@@ -0,0 +1,60 @@
+/**
+ * Trust Manager
+ *
+ * Manages trust policy for MCP servers and skill sources.
+ */
+export class TrustManager {
+    policy;
+    constructor(policy) {
+        this.policy = policy;
+    }
+    pinMCPServer(url, fingerprint, mode = 'strict') {
+        const existing = this.policy.mcp_servers.find(s => s.url === url);
+        if (existing) {
+            existing.fingerprint = fingerprint;
+            existing.pin_mode = mode;
+        }
+        else {
+            this.policy.mcp_servers.push({
+                url,
+                fingerprint,
+                pin_mode: mode,
+            });
+        }
+    }
+    pinSkillSource(type, pathOrUrl, hash, mode = 'strict') {
+        const source = {
+            type,
+            pin_mode: mode,
+        };
+        if (type === 'local') {
+            source.path = pathOrUrl;
+            source.hash = hash;
+        }
+        else {
+            source.url = pathOrUrl;
+            source.commit = hash;
+        }
+        this.policy.skill_sources.push(source);
+    }
+    verifyMCPServer(url, currentFingerprint) {
+        const pinned = this.policy.mcp_servers.find(s => s.url === url);
+        if (!pinned) {
+            return {
+                trusted: false,
+                reason: 'Server not pinned in trust policy',
+            };
+        }
+        if (pinned.fingerprint !== currentFingerprint) {
+            return {
+                trusted: false,
+                reason: `Fingerprint mismatch (expected: ${pinned.fingerprint}, got: ${currentFingerprint})`,
+            };
+        }
+        return { trusted: true };
+    }
+    getPolicy() {
+        return this.policy;
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/trust/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../trust/manager.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,MAAM,OAAO,YAAY;IACf,MAAM,CAAU;IAExB,YAAY,MAAe;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,WAAmB,EAAE,OAA0B,QAAQ;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAElE,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;YACnC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC3B,GAAG;gBACH,WAAW;gBACX,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,cAAc,CACZ,IAAqB,EACrB,SAAiB,EACjB,IAAY,EACZ,OAA0B,QAAQ;QAElC,MAAM,MAAM,GAAqB;YAC/B,IAAI;YACJ,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;YACxB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC;YACvB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,eAAe,CAAC,GAAW,EAAE,kBAA0B;QAIrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mCAAmC;aAC5C,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mCAAmC,MAAM,CAAC,WAAW,UAAU,kBAAkB,GAAG;aAC7F,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/dist/utils/filesystem.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Filesystem utilities for TasteKit
+ */
+export declare function ensureDir(path: string): void;
+export declare function writeFileSafe(path: string, content: string): void;
+export declare function readFileIfExists(path: string): string | null;
+export declare function atomicWrite(path: string, content: string): void;
+export declare function resolveArtifactPath(workspacePath: string, artifact: 'constitution' | 'guardrails' | 'memory'): string;
+export declare function resolveTracesPath(workspacePath: string): string;
+export declare function resolveSkillsPath(workspacePath: string): string;
+export declare function resolvePlaybooksPath(workspacePath: string): string;
+export declare function resolveSessionPath(workspacePath: string): string;
+export declare function resolveTrustPath(workspacePath: string): string;
+export declare function resolveBindingsPath(workspacePath: string): string;
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/utils/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../utils/filesystem.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI5C;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAGjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK5D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK/D;AAED,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,cAAc,GAAG,YAAY,GAAG,QAAQ,GACjD,MAAM,CAOR;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEjE"}

package/dist/utils/filesystem.js

@@ -0,0 +1,53 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'fs';
+import { dirname, join } from 'path';
+/**
+ * Filesystem utilities for TasteKit
+ */
+export function ensureDir(path) {
+    if (!existsSync(path)) {
+        mkdirSync(path, { recursive: true });
+    }
+}
+export function writeFileSafe(path, content) {
+    ensureDir(dirname(path));
+    writeFileSync(path, content, 'utf-8');
+}
+export function readFileIfExists(path) {
+    if (existsSync(path)) {
+        return readFileSync(path, 'utf-8');
+    }
+    return null;
+}
+export function atomicWrite(path, content) {
+    ensureDir(dirname(path));
+    const tempPath = `${path}.tmp`;
+    writeFileSync(tempPath, content, 'utf-8');
+    renameSync(tempPath, path);
+}
+export function resolveArtifactPath(workspacePath, artifact) {
+    const filenames = {
+        constitution: 'constitution.v1.json',
+        guardrails: 'guardrails.v1.yaml',
+        memory: 'memory.v1.yaml',
+    };
+    return join(workspacePath, filenames[artifact]);
+}
+export function resolveTracesPath(workspacePath) {
+    return join(workspacePath, 'traces');
+}
+export function resolveSkillsPath(workspacePath) {
+    return join(workspacePath, 'skills');
+}
+export function resolvePlaybooksPath(workspacePath) {
+    return join(workspacePath, 'playbooks');
+}
+export function resolveSessionPath(workspacePath) {
+    return join(workspacePath, 'session.json');
+}
+export function resolveTrustPath(workspacePath) {
+    return join(workspacePath, 'trust.v1.json');
+}
+export function resolveBindingsPath(workspacePath) {
+    return join(workspacePath, 'bindings.v1.json');
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/utils/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../utils/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC;;GAEG;AAEH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACvD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC;IAC/B,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,aAAqB,EACrB,QAAkD;IAElD,MAAM,SAAS,GAA2B;QACxC,YAAY,EAAE,sBAAsB;QACpC,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACF,OAAO,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAAqB;IACrD,OAAO,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAAqB;IACrD,OAAO,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,OAAO,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,aAAqB;IACtD,OAAO,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,OAAO,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,OAAO,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;AACjD,CAAC"}

package/dist/utils/hash.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Hashing utilities for deterministic compilation and fingerprinting
+ */
+export declare function hashString(input: string): string;
+export declare function hashObject(obj: any): string;
+export declare function shortHash(input: string, length?: number): string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/utils/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../utils/hash.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAG3C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,MAAU,GAAG,MAAM,CAEnE"}