@agentvibes/guardrails 0.1.0

package/dist/hookPostedit.js

@@ -0,0 +1,117 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, relative } from "node:path";
+import { formatFinding } from "./findings.js";
+import { addedLines, gitRoot, resolveMergeBase } from "./gitDiff.js";
+import { severityRaiseArgs } from "./severity.js";
+import { collectVerifyFindings } from "./verify.js";
+import { verifyExcludeRe } from "./verifyDiff.js";
+const SUPPRESS = "False positive? Suppress a specific finding with a justified comment on the line above it:\n// ast-grep-ignore: <rule-id> -- <why this is legitimate>\nThe scan honors it and will not re-flag that line.";
+function readStdin() {
+    try {
+        return readFileSync(0, "utf8");
+    }
+    catch {
+        return "";
+    }
+}
+function isTracked(root, file) {
+    const res = spawnSync("git", ["-C", root, "ls-files", "--error-unmatch", "--", file], {
+        encoding: "utf8",
+    });
+    return res.status === 0;
+}
+/** undefined = whole file (ladder rungs 1/2/4); a Set = rung 3's changed lines. */
+function changedLines(tool, file) {
+    if (tool === "Write")
+        return undefined;
+    const root = gitRoot(dirname(file));
+    if (root === undefined)
+        return undefined;
+    if (!isTracked(root, file))
+        return undefined;
+    const mb = resolveMergeBase(root);
+    if (mb === undefined)
+        return undefined;
+    return addedLines(root, mb, file);
+}
+/** Lines this working tree added vs HEAD — the newness test for structure tiering. */
+function newLines(file) {
+    const root = gitRoot(dirname(file));
+    if (root === undefined)
+        return undefined;
+    if (!isTracked(root, file))
+        return undefined;
+    return addedLines(root, "HEAD", file);
+}
+export function runHookPostedit() {
+    let input;
+    try {
+        input = JSON.parse(readStdin());
+    }
+    catch {
+        return 0;
+    }
+    const tool = input.tool_name ?? "";
+    const file = input.tool_input?.file_path ?? "";
+    if (tool !== "Edit" && tool !== "Write")
+        return 0;
+    const configDir = process.env.AGENT_CONFIG_DIR;
+    if (configDir !== undefined && configDir !== "" && file.startsWith(`${configDir}/`))
+        return 0;
+    if (!file.endsWith(".ts") && !file.endsWith(".tsx"))
+        return 0;
+    // ast-grep-ignore: silent-default-return -- a hook fires on deletes/renames too; a vanished file has nothing to scan and hooks must never fail the edit (donor hook-postedit.sh line `[ -f "$FILE" ] || exit 0`)
+    if (!existsSync(file))
+        return 0;
+    // Honour the repo's `[verify] exclude` carve-out (vendored trees) the same
+    // way verify-diff does — an edit inside a vendored copy is not gated.
+    const repoRoot = gitRoot(dirname(file));
+    if (repoRoot !== undefined &&
+        verifyExcludeRe(repoRoot)?.test(relative(repoRoot, file)) === true) {
+        return 0;
+    }
+    // [severity] raises apply here too; a MISCONFIGURED table must not fail the
+    // edit (hooks never block on their own defects) — the raise is skipped and
+    // verify/verify-diff will fail loudly on the same config in CI.
+    let severityArgs = [];
+    try {
+        severityArgs = severityRaiseArgs(repoRoot ?? dirname(file));
+    }
+    catch {
+        severityArgs = [];
+    }
+    let findings = collectVerifyFindings([file], severityArgs);
+    const lines = changedLines(tool, file);
+    if (lines !== undefined) {
+        // An EMPTY set is a real answer (a revert git already collapsed) — there
+        // is nothing of the agent's to gate. Only failure to COMPUTE degrades.
+        findings = findings.filter((f) => lines.has(f.line));
+    }
+    else {
+        const fresh = newLines(file);
+        findings = findings.map((f) => f.source === "structure" && f.severity === "error" && !(fresh?.has(f.line) ?? true)
+            ? { ...f, severity: "warning" }
+            : f);
+    }
+    if (findings.length === 0)
+        return 0;
+    const rendered = findings.map(formatFinding).join("\n").split("\n").slice(0, 60).join("\n");
+    const base = file.split("/").pop() ?? file;
+    if (findings.some((f) => f.severity === "error")) {
+        console.log(JSON.stringify({
+            decision: "block",
+            reason: `guardrails scan found ERROR-tier violations in ${base}:\n\n${rendered}\n\nFix these before continuing. ${SUPPRESS}\nRule rationale: the defensive-errors and mobx-models skills; \`guardrails verify --help\`.`,
+        }));
+    }
+    else {
+        console.log(JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PostToolUse",
+                additionalContext: `guardrails scan flagged warnings in ${base}:\n\n${rendered}\n\nAddress these or, if a finding is a false positive, suppress it. ${SUPPRESS}`,
+            },
+        }));
+    }
+    return 0;
+}
+//# sourceMappingURL=hookPostedit.js.map

package/dist/hookPostedit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookPostedit.js","sourceRoot":"","sources":["../src/hookPostedit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAgB,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AA2BlD,MAAM,QAAQ,GACZ,2MAA2M,CAAC;AAE9M,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;QACpF,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,sFAAsF;AACtF,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAc,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;IAC/C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC/C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9F,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9D,iNAAiN;IACjN,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAEhC,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,IACE,QAAQ,KAAK,SAAS;QACtB,eAAe,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAClE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,gEAAgE;IAChE,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,YAAY,GAAG,iBAAiB,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,QAAQ,GAAc,qBAAqB,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAEtE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,yEAAyE;QACzE,uEAAuE;QACvE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YACjF,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAkB,EAAE;YACxC,CAAC,CAAC,CAAC,CACN,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;IAE3C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,kDAAkD,IAAI,QAAQ,QAAQ,oCAAoC,QAAQ,8FAA8F;SACzN,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,kBAAkB,EAAE;gBAClB,aAAa,EAAE,aAAa;gBAC5B,iBAAiB,EAAE,uCAAuC,IAAI,QAAQ,QAAQ,wEAAwE,QAAQ,EAAE;aACjK;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/hookStop.d.ts

@@ -0,0 +1 @@
+export declare function runHookStop(): number;

package/dist/hookStop.js

@@ -0,0 +1,56 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { formatFinding } from "./findings.js";
+import { runVerifyDiffCollect } from "./verifyDiff.js";
+const MAX_BLOCKS = Number(process.env.GUARDRAILS_STOP_MAX_BLOCKS ?? 3);
+function counterPath(sessionId) {
+    const dir = join(tmpdir(), "guardrails-stop");
+    mkdirSync(dir, { recursive: true });
+    return join(dir, `${sessionId.replace(/[^A-Za-z0-9_-]/g, "_")}.count`);
+}
+function readCount(path) {
+    // ast-grep-ignore: silent-default-return -- a missing counter file IS the zero-blocks state, not a masked failure
+    if (!existsSync(path))
+        return 0;
+    const n = Number(readFileSync(path, "utf8").trim());
+    return Number.isFinite(n) ? n : 0;
+}
+export function runHookStop() {
+    try {
+        let input;
+        try {
+            input = JSON.parse(readFileSync(0, "utf8"));
+        }
+        catch {
+            return 0;
+        }
+        const sessionId = input.session_id ?? "unknown-session";
+        const { violations } = runVerifyDiffCollect(process.cwd(), undefined);
+        if (violations.length === 0)
+            return 0;
+        const path = counterPath(sessionId);
+        const blocks = readCount(path);
+        const rendered = violations.map(formatFinding).join("\n").split("\n").slice(0, 40).join("\n");
+        if (blocks >= MAX_BLOCKS) {
+            // Loud skip, never a fourth block: the warning goes to stderr (visible
+            // in the transcript) and names what was left red.
+            console.error(`guardrails hook-stop: SKIPPING the block — this session was already stopped ${blocks}x by this gate (max ${MAX_BLOCKS}). ${violations.length} error-tier finding(s) REMAIN on the session's changed lines:\n${rendered}\nRun \`guardrails verify-diff\` and fix them; CI will hold the same line.`);
+            return 0;
+        }
+        writeFileSync(path, String(blocks + 1));
+        const finalWarning = blocks + 1 === MAX_BLOCKS
+            ? `\n(This is block ${blocks + 1}/${MAX_BLOCKS} — the next Stop will NOT be blocked; CI still will.)`
+            : "";
+        console.log(JSON.stringify({
+            decision: "block",
+            reason: `guardrails verify-diff: ${violations.length} error-tier finding(s) on lines this session changed — finish the cleanup before stopping:\n\n${rendered}\n\nFix these, or suppress a genuine false positive with a justified comment on the line above:\n// ast-grep-ignore: <rule-id> -- <why this is legitimate>${finalWarning}`,
+        }));
+        return 0;
+    }
+    catch {
+        // Self-defect rule: a broken hook must not wedge the session.
+        return 0;
+    }
+}
+//# sourceMappingURL=hookStop.js.map

package/dist/hookStop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookStop.js","sourceRoot":"","sources":["../src/hookStop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAsBvD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,CAAC,CAAC;AAEvE,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,kHAAkH;IAClH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAc,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAExD,MAAM,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACtE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9F,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;YACzB,uEAAuE;YACvE,kDAAkD;YAClD,OAAO,CAAC,KAAK,CACX,+EAA+E,MAAM,uBAAuB,UAAU,MAAM,UAAU,CAAC,MAAM,kEAAkE,QAAQ,4EAA4E,CACpS,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,YAAY,GAChB,MAAM,GAAG,CAAC,KAAK,UAAU;YACvB,CAAC,CAAC,oBAAoB,MAAM,GAAG,CAAC,IAAI,UAAU,uDAAuD;YACrG,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,2BAA2B,UAAU,CAAC,MAAM,iGAAiG,QAAQ,6JAA6J,YAAY,EAAE;SACzU,CAAC,CACH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/hookStopTest.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/hookStopTest.js

@@ -0,0 +1,71 @@
+import { spawnSync } from "node:child_process";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { packageRoot } from "./packagePaths.js";
+// Fixtures for the Stop hook: block on red, silent on green, and the loop
+// breaker — after max blocks the hook SKIPS loudly instead of wedging the
+// session forever behind its own gate.
+function stop(cwd, sessionId) {
+    const res = spawnSync("node", [join(packageRoot, "dist", "cli.js"), "hook-stop"], {
+        cwd,
+        input: JSON.stringify({ session_id: sessionId }),
+        encoding: "utf8",
+        env: { ...process.env, GUARDRAILS_STOP_MAX_BLOCKS: "2" },
+    });
+    if (res.error)
+        throw res.error;
+    return { status: res.status ?? -1, out: res.stdout, err: res.stderr };
+}
+function expectStep(step, ok, detail) {
+    if (!ok) {
+        console.error(`FAIL hook-stop: ${step}\n${detail}`);
+        return false;
+    }
+    console.log(`  ok  hook-stop: ${step}`);
+    return true;
+}
+function main() {
+    const dir = mkdtempSync(join(tmpdir(), "guardrails-hookstop-"));
+    const session = `hookstop-test-${Date.now()}`;
+    try {
+        const git = (...args) => {
+            const r = spawnSync("git", ["-C", dir, ...args], { encoding: "utf8" });
+            if (r.status !== 0)
+                throw new Error(`git ${args.join(" ")}: ${r.stderr}`);
+        };
+        git("init", "-q");
+        writeFileSync(join(dir, "clean.ts"), "export const ok = 1;\n");
+        git("add", "-A");
+        git("-c", "user.email=t@t", "-c", "user.name=t", "commit", "-qm", "init");
+        const green = stop(dir, session);
+        if (!expectStep("clean session → silent allow", green.status === 0 && green.out.trim() === "", `${green.out}${green.err}`)) {
+            return 1;
+        }
+        writeFileSync(join(dir, "sessionWork.ts"), "export const boom = (x: unknown) => x as any;\n");
+        const b1 = stop(dir, session);
+        if (!expectStep("red session → block 1 with findings", b1.status === 0 &&
+            b1.out.includes('"decision":"block"') &&
+            b1.out.includes("as-any-escape"), b1.out)) {
+            return 1;
+        }
+        const b2 = stop(dir, session);
+        if (!expectStep("block 2/2 carries the final warning", b2.out.includes('"decision":"block"') && b2.out.includes("will NOT be blocked"), b2.out)) {
+            return 1;
+        }
+        const b3 = stop(dir, session);
+        if (!expectStep("block 3 → loop breaker: loud SKIP on stderr, no block", b3.status === 0 &&
+            !b3.out.includes("block") &&
+            b3.err.includes("SKIPPING") &&
+            b3.err.includes("as-any-escape"), `${b3.out}\n${b3.err}`)) {
+            return 1;
+        }
+        console.log("hook-stop fixtures passed");
+        return 0;
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+process.exit(main());
+//# sourceMappingURL=hookStopTest.js.map

package/dist/hookStopTest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookStopTest.js","sourceRoot":"","sources":["../src/hookStopTest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0EAA0E;AAC1E,0EAA0E;AAC1E,uCAAuC;AAEvC,SAAS,IAAI,CAAC,GAAW,EAAE,SAAiB;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,EAAE;QAChF,GAAG;QACH,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAChD,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,0BAA0B,EAAE,GAAG,EAAE;KACzD,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,KAAK;QAAE,MAAM,GAAG,CAAC,KAAK,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,EAAW,EAAE,MAAc;IAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI;IACX,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,GAAG,IAAc,EAAQ,EAAE;YACtC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC;QACF,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC/D,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,IACE,CAAC,UAAU,CACT,8BAA8B,EAC9B,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAC7C,GAAG,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAC3B,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,iDAAiD,CAAC,CAAC;QAC9F,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,IACE,CAAC,UAAU,CACT,qCAAqC,EACrC,EAAE,CAAC,MAAM,KAAK,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACrC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAClC,EAAE,CAAC,GAAG,CACP,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,IACE,CAAC,UAAU,CACT,qCAAqC,EACrC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAC/E,EAAE,CAAC,GAAG,CACP,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,IACE,CAAC,UAAU,CACT,uDAAuD,EACvD,EAAE,CAAC,MAAM,KAAK,CAAC;YACb,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3B,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAClC,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,EAAE,CACvB,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC"}

package/dist/init.d.ts

@@ -0,0 +1,24 @@
+interface Stack {
+    platform: string;
+    state: string;
+    storeRuntime: string;
+    styling: string;
+    componentModel: string;
+}
+/** Per-package detection signals; a package with none contributes nothing. */
+interface AppSignals {
+    name: string;
+    platform?: string;
+    state?: "mobx";
+    styling?: string;
+}
+export interface DetectedStack {
+    stack: Stack;
+    /** workspace packages that carried at least one signal */
+    apps: AppSignals[];
+    /** fields where signal-bearing apps disagree — per-app blocks get emitted */
+    conflicts: (keyof Stack)[];
+    hadPackageJson: boolean;
+}
+export declare function runInit(json: boolean): number;
+export {};

package/dist/init.js

@@ -0,0 +1,172 @@
+import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { listWorkspacePackages } from "./workspaces.js";
+function signalsOf(name, deps) {
+    const has = (dep) => dep in deps;
+    const platform = has("expo")
+        ? "expo"
+        : has("next")
+            ? "next-client"
+            : has("vite")
+                ? "vite-spa"
+                : undefined;
+    const state = has("mobx") ? "mobx" : undefined;
+    const stylingDep = has("nativewind") ? "nativewind" : has("tailwindcss") ? "tailwind" : undefined;
+    if (platform === undefined && state === undefined && stylingDep === undefined)
+        return undefined;
+    // An app (something with a platform) that installs no styling system is
+    // theme-inline by house convention; a library without a platform makes no
+    // styling claim at all.
+    const styling = stylingDep ?? (platform !== undefined ? "theme-inline" : undefined);
+    return {
+        name,
+        ...(platform !== undefined ? { platform } : {}),
+        ...(state !== undefined ? { state } : {}),
+        ...(styling !== undefined ? { styling } : {}),
+    };
+}
+// Monorepo-aware: the root package.json of a workspace repo is dependency-
+// empty, so signals are gathered from every workspace package too (the
+// observatory adoption hit exactly this — root-only detection said state=none
+// for a mobx repo). When signal-bearing apps DISAGREE on a field, the
+// aggregate takes the first app's value and a per-app block is materialized
+// for each, so the disagreement is visible in the TOML instead of averaged
+// away. Manual editing of the materialized file remains the designed fallback.
+function detectStack(cwd) {
+    const pkgPath = join(cwd, "package.json");
+    let rootDeps = {};
+    const hadPackageJson = existsSync(pkgPath);
+    if (hadPackageJson) {
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        rootDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+    }
+    const apps = [];
+    const rootSignals = signalsOf("(root)", rootDeps);
+    if (rootSignals !== undefined)
+        apps.push(rootSignals);
+    for (const ws of listWorkspacePackages(cwd)) {
+        const s = signalsOf(ws.name, ws.deps);
+        if (s !== undefined)
+            apps.push(s);
+    }
+    const distinct = (field) => [
+        ...new Set(apps.map((a) => a[field]).filter((v) => v !== undefined)),
+    ];
+    const platforms = distinct("platform");
+    const stylings = distinct("styling");
+    const state = apps.some((a) => a.state === "mobx") ? "mobx" : "none";
+    const conflicts = [];
+    if (platforms.length > 1)
+        conflicts.push("platform");
+    if (stylings.length > 1)
+        conflicts.push("styling");
+    const stack = {
+        platform: platforms[0] ?? "unknown",
+        state,
+        storeRuntime: state === "mobx" ? "client-singleton" : "none",
+        styling: stylings[0] ?? "theme-inline",
+        componentModel: "conventional",
+    };
+    return { stack, apps, conflicts, hadPackageJson };
+}
+function stackToml(detected) {
+    const { stack, apps, conflicts } = detected;
+    const provenance = apps.length > 0 ? `# detected from: ${apps.map((a) => a.name).join(", ")}` : undefined;
+    const lines = [
+        "[stack]",
+        ...(provenance !== undefined ? [provenance] : []),
+        ...(conflicts.length > 0
+            ? [`# apps disagree on: ${conflicts.join(", ")} — per-app values below; edit as needed`]
+            : []),
+        `platform = "${stack.platform}"                # vite-spa | expo | next-client | next-ssr`,
+        `state = "${stack.state}"                      # mobx | none`,
+        `storeRuntime = "${stack.storeRuntime}"        # client-singleton | request-scoped | none`,
+        `styling = "${stack.styling}"                  # theme-inline | tailwind | nativewind`,
+        `componentModel = "${stack.componentModel}"    # two-tier | conventional`,
+    ];
+    if (conflicts.length > 0) {
+        for (const app of apps) {
+            lines.push("", `[stack.app."${app.name}"]`);
+            if (app.platform !== undefined)
+                lines.push(`platform = "${app.platform}"`);
+            if (app.state !== undefined)
+                lines.push(`state = "${app.state}"`);
+            if (app.styling !== undefined)
+                lines.push(`styling = "${app.styling}"`);
+        }
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+const SGCONFIG_STUB = `# ast-grep config — rules come from the @agentvibes/guardrails package.
+# Add repo-local extra rules by creating .ast-grep/rules/ and uncommenting the
+# second ruleDir. Run: guardrails verify [paths]
+ruleDirs:
+  - node_modules/@agentvibes/guardrails/rules
+  # - .ast-grep/rules
+`;
+const BIOME_STUB = `{
+  "$schema": "https://biomejs.dev/schemas/2.5.10/schema.json",
+  "extends": ["@agentvibes/guardrails/biome"]
+}
+`;
+export function runInit(json) {
+    const cwd = process.cwd();
+    const actions = [];
+    const detected = detectStack(cwd);
+    const { stack, apps, conflicts, hadPackageJson } = detected;
+    const sgPath = join(cwd, "sgconfig.yml");
+    if (existsSync(sgPath)) {
+        actions.push({ file: "sgconfig.yml", action: "skipped-exists" });
+    }
+    else {
+        writeFileSync(sgPath, SGCONFIG_STUB);
+        actions.push({ file: "sgconfig.yml", action: "created" });
+    }
+    const biomePath = join(cwd, "biome.json");
+    if (existsSync(biomePath)) {
+        actions.push({ file: "biome.json", action: "skipped-exists" });
+    }
+    else {
+        writeFileSync(biomePath, BIOME_STUB);
+        actions.push({ file: "biome.json", action: "created" });
+    }
+    const tomlDir = join(cwd, ".agentvibes");
+    const tomlPath = join(tomlDir, "project.toml");
+    if (!existsSync(tomlPath)) {
+        mkdirSync(tomlDir, { recursive: true });
+        writeFileSync(tomlPath, `${stackToml(detected)}`);
+        actions.push({ file: ".agentvibes/project.toml", action: "created" });
+    }
+    else if (/^\[stack\]/m.test(readFileSync(tomlPath, "utf8"))) {
+        actions.push({ file: ".agentvibes/project.toml", action: "skipped-exists" });
+    }
+    else {
+        appendFileSync(tomlPath, `\n${stackToml(detected)}`);
+        actions.push({ file: ".agentvibes/project.toml", action: "appended" });
+    }
+    if (json) {
+        console.log(JSON.stringify({ command: "init", detected: stack, apps, conflicts, hadPackageJson, actions }, null, 2));
+        return 0;
+    }
+    console.log(`guardrails init — detected stack${hadPackageJson ? "" : " (no package.json found — all defaults)"}:`);
+    console.log(`  platform=${stack.platform} state=${stack.state} storeRuntime=${stack.storeRuntime} styling=${stack.styling} componentModel=${stack.componentModel}`);
+    if (apps.length > 0) {
+        console.log(`  signal packages: ${apps.map((a) => a.name).join(", ")}`);
+    }
+    if (conflicts.length > 0) {
+        console.log(`  apps DISAGREE on ${conflicts.join(", ")} — per-app [stack.app] blocks materialized; edit them by hand`);
+    }
+    for (const a of actions)
+        console.log(`  ${a.action.padEnd(14)} ${a.file}`);
+    const skippedStack = actions.some((a) => a.file === ".agentvibes/project.toml" && a.action === "skipped-exists");
+    if (skippedStack) {
+        console.log("  [stack] already declared — the existing config wins over detection; edit it by hand.");
+    }
+    else {
+        console.log("  Detected values are now MATERIALIZED in .agentvibes/project.toml — edit them there;");
+        console.log("  nothing re-infers them silently.");
+    }
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAsCxD,SAAS,SAAS,CAAC,IAAY,EAAE,IAA4B;IAC3D,MAAM,GAAG,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YACX,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;gBACX,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChG,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB;IACxB,MAAM,OAAO,GAAG,UAAU,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpF,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,uEAAuE;AACvE,8EAA8E;AAC9E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAI,QAAQ,GAA2B,EAAE,CAAC;IAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAGnD,CAAC;QACF,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,KAAK,MAAM,EAAE,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAuC,EAAY,EAAE,CAAC;QACtE,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;KAClF,CAAC;IACF,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAErE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAU;QACnB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS;QACnC,KAAK;QACL,YAAY,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM;QAC5D,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,cAAc;QACtC,cAAc,EAAE,cAAc;KAC/B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,QAAuB;IACxC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;IAC5C,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,KAAK,GAAG;QACZ,SAAS;QACT,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,CAAC,uBAAuB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAAC;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,eAAe,KAAK,CAAC,QAAQ,6DAA6D;QAC1F,YAAY,KAAK,CAAC,KAAK,sCAAsC;QAC7D,mBAAmB,KAAK,CAAC,YAAY,qDAAqD;QAC1F,cAAc,KAAK,CAAC,OAAO,2DAA2D;QACtF,qBAAqB,KAAK,CAAC,cAAc,gCAAgC;KAC1E,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;YAC5C,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC3E,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;YAClE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,aAAa,GAAG;;;;;;CAMrB,CAAC;AAEF,MAAM,UAAU,GAAG;;;;CAIlB,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,cAAc,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,EAC9E,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CACT,mCAAmC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yCAAyC,GAAG,CACtG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,cAAc,KAAK,CAAC,QAAQ,UAAU,KAAK,CAAC,KAAK,iBAAiB,KAAK,CAAC,YAAY,YAAY,KAAK,CAAC,OAAO,mBAAmB,KAAK,CAAC,cAAc,EAAE,CACvJ,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D,CAC1G,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAC9E,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,wFAAwF,CACzF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,uFAAuF,CACxF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/initTest.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/initTest.js

@@ -0,0 +1,88 @@
+import { spawnSync } from "node:child_process";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { packageRoot } from "./packagePaths.js";
+// Fixture tests for `guardrails init` stack detection. Three mini-repos:
+//   1. single-package app — the original root-only path still works
+//   2. pnpm monorepo, one signal app — signals aggregate from the workspace
+//      (the observatory case: root package.json is dependency-empty)
+//   3. pnpm monorepo, two apps that DISAGREE — the aggregate takes the first
+//      app's value and per-app [stack.app] blocks are materialized
+function init(cwd) {
+    const res = spawnSync("node", [join(packageRoot, "dist", "cli.js"), "init"], {
+        cwd,
+        encoding: "utf8",
+    });
+    if (res.error)
+        throw res.error;
+    return { status: res.status ?? -1, out: `${res.stdout}${res.stderr}` };
+}
+function pkg(dir, name, deps) {
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, "package.json"), JSON.stringify({ name, dependencies: deps }));
+}
+function expectToml(step, dir, wants, rejects) {
+    const toml = readFileSync(join(dir, ".agentvibes", "project.toml"), "utf8");
+    for (const w of wants) {
+        if (!toml.includes(w)) {
+            console.error(`FAIL init: ${step} — materialized TOML lacks '${w}'\n${toml}`);
+            return false;
+        }
+    }
+    for (const r of rejects) {
+        if (toml.includes(r)) {
+            console.error(`FAIL init: ${step} — materialized TOML unexpectedly contains '${r}'\n${toml}`);
+            return false;
+        }
+    }
+    console.log(`  ok  init: ${step}`);
+    return true;
+}
+function main() {
+    const base = mkdtempSync(join(tmpdir(), "guardrails-init-test-"));
+    try {
+        // 1. single-package app
+        const single = join(base, "single");
+        pkg(single, "single-app", { mobx: "^6", vite: "^6" });
+        if (init(single).status !== 0)
+            return 1;
+        if (!expectToml("single-package app detects from root", single, ['platform = "vite-spa"', 'state = "mobx"', 'storeRuntime = "client-singleton"'], ["[stack.app"])) {
+            return 1;
+        }
+        // 2. monorepo, dependency-empty root, one signal app among libraries
+        const mono = join(base, "mono");
+        pkg(mono, "mono-root", {});
+        writeFileSync(join(mono, "pnpm-workspace.yaml"), 'packages:\n  - "packages/*"\n');
+        pkg(join(mono, "packages", "web-ui"), "@mono/web-ui", { mobx: "^6", vite: "^6" });
+        pkg(join(mono, "packages", "lib"), "@mono/lib", { "ts-pattern": "^5" });
+        if (init(mono).status !== 0)
+            return 1;
+        if (!expectToml("monorepo aggregates workspace signals", mono, ['state = "mobx"', 'platform = "vite-spa"', "detected from: @mono/web-ui"], ["[stack.app", "@mono/lib"])) {
+            return 1;
+        }
+        // 3. monorepo with two disagreeing apps
+        const dual = join(base, "dual");
+        pkg(dual, "dual-root", {});
+        writeFileSync(join(dual, "pnpm-workspace.yaml"), 'packages:\n  - "apps/*"\n');
+        pkg(join(dual, "apps", "mobile"), "@dual/mobile", { expo: "^52", nativewind: "^4" });
+        pkg(join(dual, "apps", "web"), "@dual/web", { vite: "^6", mobx: "^6" });
+        if (init(dual).status !== 0)
+            return 1;
+        if (!expectToml("disagreeing apps materialize per-app blocks", dual, [
+            "apps disagree on: platform, styling",
+            '[stack.app."@dual/mobile"]',
+            '[stack.app."@dual/web"]',
+            'state = "mobx"',
+        ], [])) {
+            return 1;
+        }
+        console.log("init stack-detection fixtures passed");
+        return 0;
+    }
+    finally {
+        rmSync(base, { recursive: true, force: true });
+    }
+}
+process.exit(main());
+//# sourceMappingURL=initTest.js.map

package/dist/initTest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initTest.js","sourceRoot":"","sources":["../src/initTest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,yEAAyE;AACzE,oEAAoE;AACpE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,mEAAmE;AAEnE,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE;QAC3E,GAAG;QACH,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,KAAK;QAAE,MAAM,GAAG,CAAC,KAAK,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,IAA4B;IAClE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW,EAAE,KAAe,EAAE,OAAiB;IAC/E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,+BAA+B,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,+CAA+C,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,wBAAwB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACxC,IACE,CAAC,UAAU,CACT,sCAAsC,EACtC,MAAM,EACN,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,mCAAmC,CAAC,EAChF,CAAC,YAAY,CAAC,CACf,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,qEAAqE;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAClF,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,IACE,CAAC,UAAU,CACT,uCAAuC,EACvC,IAAI,EACJ,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,6BAA6B,CAAC,EAC1E,CAAC,YAAY,EAAE,WAAW,CAAC,CAC5B,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,wCAAwC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,IACE,CAAC,UAAU,CACT,6CAA6C,EAC7C,IAAI,EACJ;YACE,qCAAqC;YACrC,4BAA4B;YAC5B,yBAAyB;YACzB,gBAAgB;SACjB,EACD,EAAE,CACH,EACD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC"}

package/dist/iterate.d.ts

@@ -0,0 +1,9 @@
+export interface IterateOptions {
+    task: string | undefined;
+    cmd: string | undefined;
+    gate: string | undefined;
+    max: number;
+    json: boolean;
+    cliPath: string;
+}
+export declare function runIterate(opts: IterateOptions): number;