@almightygpt/core 0.2.0

package/dist/adapters/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../src/adapters/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAuD,MAAM,YAAY,CAAC;AAE/F,oDAAoD;AACpD,MAAM,kBAAkB,GAAsD;IAC5E,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACtC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;IAC3C,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC5C,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;CAC7C,CAAC;AAEF,MAAM,aAAa,GAAG,QAAQ,CAAC;AAe/B,MAAM,OAAO,aAAa;IACf,IAAI,CAAS;IACb,QAAQ,GAAG,QAAQ,CAAC;IAEZ,MAAM,CAAgB;IACtB,YAAY,CAAS;IACrB,sBAAsB,CAAS;IAC/B,gBAAgB,CAAS;IAE1C,YACE,IAAI,GAAG,OAAO,EACd,UAAgC,EAAE;QAElC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;QAC1D,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC;QACrE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC;QAE5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;gBACvB,MAAM;gBACN,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CACpB,sEAAsE;gBACpE,8BAA8B,EAChC,IAAI,CAAC,IAAI,CACV,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,sBAAsB,CAAC;QAC7E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAE3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,QAAgD,CAAC;QACrD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAClD;gBACE,KAAK;gBACL,UAAU,EAAE,eAAe;gBAC3B,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE;oBAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE;iBAC7C;gBACD,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,aAAa;oBACxC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;oBAC9C,CAAC,CAAC,EAAE,CAAC;aACR,EACD,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CACpB,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzE,IAAI,CAAC,IAAI,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,IAAI,YAAY,CACpB,kEAAkE,EAClE,IAAI,CAAC,IAAI,CACV,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE5D,OAAO;YACL,OAAO;YACP,QAAQ;YACR,SAAS;YACT,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,SAAS,EAAE,QAAQ,CAAC,KAAK,IAAI,KAAK;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,eAAe,CACtB,KAAa,EACb,QAAgB,EAChB,SAAiB;IAEjB,8EAA8E;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrD,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAClC,CAAC;IACF,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;AACvF,CAAC"}

package/dist/adapters/types.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Adapter interface — every provider implementation satisfies this.
+ *
+ * Memory files (CLAUDE.md, CODEX_AGENT.md, AGENTS.md) and rule files
+ * (.almightygpt/rules.md) are assembled by the review pipeline into the
+ * `systemPrompt` field. Adapters do not read filesystem state themselves;
+ * they take a fully-assembled prompt and return a fully-typed result.
+ *
+ * This keeps adapters thin and testable, and means swapping providers is
+ * a single-file change.
+ */
+export type AgentRole = "worker" | "reviewer";
+export interface AdapterInput {
+    /** worker | reviewer — drives the default system framing if a custom prompt is not supplied. */
+    role: AgentRole;
+    /** Fully assembled system prompt (memory file + rules + role framing). */
+    systemPrompt: string;
+    /** The actual task or critique target. */
+    userMessage: string;
+    /** Optional structured output mode. Defaults to text. */
+    responseFormat?: "text" | "json_object";
+    /** Optional override of the model name. Falls back to the adapter's default. */
+    model?: string;
+    /** Hard upper bound on response tokens. Adapters should pass this through. */
+    maxOutputTokens?: number;
+    /** Hard wall-clock timeout in ms. Adapter aborts if exceeded. */
+    timeoutMs?: number;
+}
+export interface AdapterOutput {
+    /** The model's text response. */
+    content: string;
+    /** Input token count (prompt). */
+    tokensIn: number;
+    /** Output token count (completion). */
+    tokensOut: number;
+    /** Estimated USD cost based on the model's published rates. */
+    costUsd: number;
+    /** Wall-clock latency in milliseconds. */
+    latencyMs: number;
+    /** Concrete model name used (e.g. "gpt-4o-2024-08-06"). */
+    modelUsed: string;
+    /** Provider name (e.g. "openai", "anthropic"). */
+    provider: string;
+}
+export interface Adapter {
+    /** Identifier used in config.yaml (e.g. "codex", "claude", "mock"). */
+    readonly name: string;
+    /** Underlying provider family (e.g. "openai", "anthropic", "mock"). */
+    readonly provider: string;
+    /** True if credentials are available and the adapter can be invoked. */
+    isAvailable(): Promise<boolean>;
+    /** Execute one model call. */
+    execute(input: AdapterInput): Promise<AdapterOutput>;
+}
+/**
+ * Thrown when an adapter cannot complete the call. Callers should treat this
+ * as a recoverable run failure (record the error, do not crash the orchestrator).
+ */
+export declare class AdapterError extends Error {
+    readonly adapterName: string;
+    readonly cause?: unknown | undefined;
+    readonly name = "AdapterError";
+    constructor(message: string, adapterName: string, cause?: unknown | undefined);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,gGAAgG;IAChG,IAAI,EAAE,SAAS,CAAC;IAChB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACxC,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,8BAA8B;IAC9B,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;aAInB,WAAW,EAAE,MAAM;aACV,KAAK,CAAC,EAAE,OAAO;IAJ1C,SAAkB,IAAI,kBAAkB;gBAEtC,OAAO,EAAE,MAAM,EACC,WAAW,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,OAAO,YAAA;CAI3C"}

package/dist/adapters/types.js

@@ -0,0 +1,26 @@
+/**
+ * Adapter interface — every provider implementation satisfies this.
+ *
+ * Memory files (CLAUDE.md, CODEX_AGENT.md, AGENTS.md) and rule files
+ * (.almightygpt/rules.md) are assembled by the review pipeline into the
+ * `systemPrompt` field. Adapters do not read filesystem state themselves;
+ * they take a fully-assembled prompt and return a fully-typed result.
+ *
+ * This keeps adapters thin and testable, and means swapping providers is
+ * a single-file change.
+ */
+/**
+ * Thrown when an adapter cannot complete the call. Callers should treat this
+ * as a recoverable run failure (record the error, do not crash the orchestrator).
+ */
+export class AdapterError extends Error {
+    adapterName;
+    cause;
+    name = "AdapterError";
+    constructor(message, adapterName, cause) {
+        super(message);
+        this.adapterName = adapterName;
+        this.cause = cause;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiDH;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAInB;IACS;IAJT,IAAI,GAAG,cAAc,CAAC;IACxC,YACE,OAAe,EACC,WAAmB,EACV,KAAe;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,gBAAW,GAAX,WAAW,CAAQ;QACV,UAAK,GAAL,KAAK,CAAU;IAG1C,CAAC;CACF"}

package/dist/config/load.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Load and validate .almightygpt/config.yaml from a repo root.
+ *
+ * Returns a fully-typed Config object. Throws a ConfigError with a useful
+ * message if the file is missing, malformed, or fails schema validation.
+ */
+import { type Config } from "./schema.js";
+export declare class ConfigError extends Error {
+    readonly path: string;
+    readonly cause?: unknown | undefined;
+    readonly name = "ConfigError";
+    constructor(message: string, path: string, cause?: unknown | undefined);
+}
+export declare function loadConfig(repoRoot: string): Promise<Config>;
+//# sourceMappingURL=load.d.ts.map

package/dist/config/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,WAAY,SAAQ,KAAK;aAIlB,IAAI,EAAE,MAAM;aACH,KAAK,CAAC,EAAE,OAAO;IAJ1C,SAAkB,IAAI,iBAAiB;gBAErC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACH,KAAK,CAAC,EAAE,OAAO,YAAA;CAI3C;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqClE"}

package/dist/config/load.js

@@ -0,0 +1,46 @@
+/**
+ * Load and validate .almightygpt/config.yaml from a repo root.
+ *
+ * Returns a fully-typed Config object. Throws a ConfigError with a useful
+ * message if the file is missing, malformed, or fails schema validation.
+ */
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { ConfigSchema } from "./schema.js";
+export class ConfigError extends Error {
+    path;
+    cause;
+    name = "ConfigError";
+    constructor(message, path, cause) {
+        super(message);
+        this.path = path;
+        this.cause = cause;
+    }
+}
+export async function loadConfig(repoRoot) {
+    const path = join(repoRoot, ".almightygpt", "config.yaml");
+    let raw;
+    try {
+        raw = await readFile(path, "utf8");
+    }
+    catch (err) {
+        throw new ConfigError(`Could not read AlmightyGPT config. Run \`almightygpt init\` first.`, path, err);
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(raw);
+    }
+    catch (err) {
+        throw new ConfigError(`Config YAML is malformed: ${err instanceof Error ? err.message : String(err)}`, path, err);
+    }
+    const result = ConfigSchema.safeParse(parsed);
+    if (!result.success) {
+        const issues = result.error.issues
+            .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
+            .join("\n");
+        throw new ConfigError(`Config validation failed:\n${issues}`, path, result.error);
+    }
+    return result.data;
+}
+//# sourceMappingURL=load.js.map

package/dist/config/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AAExD,MAAM,OAAO,WAAY,SAAQ,KAAK;IAIlB;IACS;IAJT,IAAI,GAAG,aAAa,CAAC;IACvC,YACE,OAAe,EACC,IAAY,EACH,KAAe;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACH,UAAK,GAAL,KAAK,CAAU;IAG1C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,oEAAoE,EACpE,IAAI,EACJ,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/E,IAAI,EACJ,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,WAAW,CACnB,8BAA8B,MAAM,EAAE,EACtC,IAAI,EACJ,MAAM,CAAC,KAAK,CACb,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,260 @@
+/**
+ * Zod schema for .almightygpt/config.yaml.
+ *
+ * The schema is intentionally permissive on unknown fields (passthrough) so
+ * future features can land without forcing a config-bump. Required fields
+ * are minimal — most behavior has sensible defaults.
+ */
+import { z } from "zod";
+export declare const AgentRoleSchema: z.ZodEnum<["worker", "reviewer", "both", "optional"]>;
+export declare const AgentConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+    mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+    role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+    memoryFile: z.ZodString;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+    mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+    role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+    memoryFile: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+    mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+    role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+    memoryFile: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const ConfigSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    reviewsDir: z.ZodDefault<z.ZodString>;
+    runsDir: z.ZodDefault<z.ZodString>;
+    agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>>>;
+    defaults: z.ZodDefault<z.ZodObject<{
+        worker: z.ZodOptional<z.ZodString>;
+        reviewer: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        worker?: string | undefined;
+        reviewer?: string | undefined;
+    }, {
+        worker?: string | undefined;
+        reviewer?: string | undefined;
+    }>>;
+    context: z.ZodDefault<z.ZodObject<{
+        include: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        exclude: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        maxFileBytes: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        include: string[];
+        exclude: string[];
+        maxFileBytes: number;
+    }, {
+        include?: string[] | undefined;
+        exclude?: string[] | undefined;
+        maxFileBytes?: number | undefined;
+    }>>;
+    security: z.ZodDefault<z.ZodObject<{
+        redactSecrets: z.ZodDefault<z.ZodBoolean>;
+        requireExternalProviderConfirmation: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        redactSecrets: boolean;
+        requireExternalProviderConfirmation: boolean;
+    }, {
+        redactSecrets?: boolean | undefined;
+        requireExternalProviderConfirmation?: boolean | undefined;
+    }>>;
+    budget: z.ZodDefault<z.ZodObject<{
+        maxCostPerRunUsd: z.ZodDefault<z.ZodNumber>;
+        maxTokensPerRun: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        maxCostPerRunUsd: number;
+        maxTokensPerRun: number;
+    }, {
+        maxCostPerRunUsd?: number | undefined;
+        maxTokensPerRun?: number | undefined;
+    }>>;
+    review: z.ZodDefault<z.ZodObject<{
+        requireConcreteWeaknesses: z.ZodDefault<z.ZodNumber>;
+        warnOnZeroFileReferences: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        requireConcreteWeaknesses: number;
+        warnOnZeroFileReferences: boolean;
+    }, {
+        requireConcreteWeaknesses?: number | undefined;
+        warnOnZeroFileReferences?: boolean | undefined;
+    }>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    version: z.ZodLiteral<1>;
+    reviewsDir: z.ZodDefault<z.ZodString>;
+    runsDir: z.ZodDefault<z.ZodString>;
+    agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>>>;
+    defaults: z.ZodDefault<z.ZodObject<{
+        worker: z.ZodOptional<z.ZodString>;
+        reviewer: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        worker?: string | undefined;
+        reviewer?: string | undefined;
+    }, {
+        worker?: string | undefined;
+        reviewer?: string | undefined;
+    }>>;
+    context: z.ZodDefault<z.ZodObject<{
+        include: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        exclude: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        maxFileBytes: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        include: string[];
+        exclude: string[];
+        maxFileBytes: number;
+    }, {
+        include?: string[] | undefined;
+        exclude?: string[] | undefined;
+        maxFileBytes?: number | undefined;
+    }>>;
+    security: z.ZodDefault<z.ZodObject<{
+        redactSecrets: z.ZodDefault<z.ZodBoolean>;
+        requireExternalProviderConfirmation: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        redactSecrets: boolean;
+        requireExternalProviderConfirmation: boolean;
+    }, {
+        redactSecrets?: boolean | undefined;
+        requireExternalProviderConfirmation?: boolean | undefined;
+    }>>;
+    budget: z.ZodDefault<z.ZodObject<{
+        maxCostPerRunUsd: z.ZodDefault<z.ZodNumber>;
+        maxTokensPerRun: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        maxCostPerRunUsd: number;
+        maxTokensPerRun: number;
+    }, {
+        maxCostPerRunUsd?: number | undefined;
+        maxTokensPerRun?: number | undefined;
+    }>>;
+    review: z.ZodDefault<z.ZodObject<{
+        requireConcreteWeaknesses: z.ZodDefault<z.ZodNumber>;
+        warnOnZeroFileReferences: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        requireConcreteWeaknesses: number;
+        warnOnZeroFileReferences: boolean;
+    }, {
+        requireConcreteWeaknesses?: number | undefined;
+        warnOnZeroFileReferences?: boolean | undefined;
+    }>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    version: z.ZodLiteral<1>;
+    reviewsDir: z.ZodDefault<z.ZodString>;
+    runsDir: z.ZodDefault<z.ZodString>;
+    agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodEnum<["openai", "anthropic", "google", "mock"]>;
+        mode: z.ZodDefault<z.ZodEnum<["api", "cli"]>>;
+        role: z.ZodDefault<z.ZodEnum<["worker", "reviewer", "both", "optional"]>>;
+        memoryFile: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>>>;
+    defaults: z.ZodDefault<z.ZodObject<{
+        worker: z.ZodOptional<z.ZodString>;
+        reviewer: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        worker?: string | undefined;
+        reviewer?: string | undefined;
+    }, {
+        worker?: string | undefined;
+        reviewer?: string | undefined;
+    }>>;
+    context: z.ZodDefault<z.ZodObject<{
+        include: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        exclude: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        maxFileBytes: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        include: string[];
+        exclude: string[];
+        maxFileBytes: number;
+    }, {
+        include?: string[] | undefined;
+        exclude?: string[] | undefined;
+        maxFileBytes?: number | undefined;
+    }>>;
+    security: z.ZodDefault<z.ZodObject<{
+        redactSecrets: z.ZodDefault<z.ZodBoolean>;
+        requireExternalProviderConfirmation: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        redactSecrets: boolean;
+        requireExternalProviderConfirmation: boolean;
+    }, {
+        redactSecrets?: boolean | undefined;
+        requireExternalProviderConfirmation?: boolean | undefined;
+    }>>;
+    budget: z.ZodDefault<z.ZodObject<{
+        maxCostPerRunUsd: z.ZodDefault<z.ZodNumber>;
+        maxTokensPerRun: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        maxCostPerRunUsd: number;
+        maxTokensPerRun: number;
+    }, {
+        maxCostPerRunUsd?: number | undefined;
+        maxTokensPerRun?: number | undefined;
+    }>>;
+    review: z.ZodDefault<z.ZodObject<{
+        requireConcreteWeaknesses: z.ZodDefault<z.ZodNumber>;
+        warnOnZeroFileReferences: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        requireConcreteWeaknesses: number;
+        warnOnZeroFileReferences: boolean;
+    }, {
+        requireConcreteWeaknesses?: number | undefined;
+        warnOnZeroFileReferences?: boolean | undefined;
+    }>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type AgentConfig = z.infer<typeof AgentConfigSchema>;
+export type Config = z.infer<typeof ConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe,uDAAqD,CAAC;AAElF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;gCAQd,CAAC;AAEjB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAsCT,CAAC;AAEjB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,58 @@
+/**
+ * Zod schema for .almightygpt/config.yaml.
+ *
+ * The schema is intentionally permissive on unknown fields (passthrough) so
+ * future features can land without forcing a config-bump. Required fields
+ * are minimal — most behavior has sensible defaults.
+ */
+import { z } from "zod";
+export const AgentRoleSchema = z.enum(["worker", "reviewer", "both", "optional"]);
+export const AgentConfigSchema = z
+    .object({
+    enabled: z.boolean().default(true),
+    provider: z.enum(["openai", "anthropic", "google", "mock"]),
+    mode: z.enum(["api", "cli"]).default("api"),
+    role: AgentRoleSchema.default("optional"),
+    memoryFile: z.string().min(1),
+})
+    .passthrough();
+export const ConfigSchema = z
+    .object({
+    version: z.literal(1),
+    reviewsDir: z.string().min(1).default("docs/codex-reviews"),
+    runsDir: z.string().min(1).default(".almightygpt/runs"),
+    agents: z.record(z.string(), AgentConfigSchema).default({}),
+    defaults: z
+        .object({
+        worker: z.string().min(1).optional(),
+        reviewer: z.string().min(1).optional(),
+    })
+        .default({}),
+    context: z
+        .object({
+        include: z.array(z.string()).default([]),
+        exclude: z.array(z.string()).default([]),
+        maxFileBytes: z.number().int().positive().default(120_000),
+    })
+        .default({}),
+    security: z
+        .object({
+        redactSecrets: z.boolean().default(true),
+        requireExternalProviderConfirmation: z.boolean().default(true),
+    })
+        .default({}),
+    budget: z
+        .object({
+        maxCostPerRunUsd: z.number().positive().default(0.5),
+        maxTokensPerRun: z.number().int().positive().default(100_000),
+    })
+        .default({}),
+    review: z
+        .object({
+        requireConcreteWeaknesses: z.number().int().nonnegative().default(3),
+        warnOnZeroFileReferences: z.boolean().default(true),
+    })
+        .default({}),
+})
+    .passthrough();
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;KAC3D,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,mCAAmC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC/D,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACpD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;KAC9D,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACpD,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;KACD,WAAW,EAAE,CAAC"}

package/dist/context/manifest.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Build the context-manifest.json that accompanies every run.
+ *
+ * The manifest is the auditable record of what was sent to the model:
+ *   - which files were included,
+ *   - which were skipped and why,
+ *   - file content hashes (so re-runs against unchanged files can be
+ *     short-circuited later — caching is task #14+ scope but the hashes are
+ *     captured now to keep the format stable),
+ *   - redaction counts so the user can see how many secrets were filtered.
+ *
+ * For MVP 1 diff review, the "files" are the files in the diff; the manifest
+ * does not currently re-read full file contents (that's task #13 expansion
+ * for path review). Token estimates are 4-char heuristics.
+ */
+import type { RedactionMatch } from "./redact.js";
+export interface ManifestFile {
+    path: string;
+    bytes: number;
+    sha256: string;
+    /** Why this file was excluded, if so. Undefined means included. */
+    skippedReason?: string;
+}
+export interface ContextManifest {
+    generatedAt: string;
+    inputSource: "diff" | "diff-range" | "path" | "requirement-file" | "ask";
+    filesIncluded: ManifestFile[];
+    filesSkipped: ManifestFile[];
+    redaction: {
+        enabled: boolean;
+        totalCount: number;
+        byKind: RedactionMatch[];
+    };
+    totalTokensEstimate: number;
+    diffBytes: number;
+}
+export interface BuildManifestOptions {
+    inputSource: ContextManifest["inputSource"];
+    filesIncluded: {
+        path: string;
+        bytes: number;
+        content?: string;
+    }[];
+    filesSkipped: {
+        path: string;
+        bytes: number;
+        skippedReason: string;
+    }[];
+    diffText: string;
+    redaction: {
+        enabled: boolean;
+        totalCount: number;
+        byKind: RedactionMatch[];
+    };
+}
+export declare function buildContextManifest(opts: BuildManifestOptions): ContextManifest;
+export declare function writeContextManifest(runFolderAbsPath: string, manifest: ContextManifest): Promise<string>;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/context/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/context/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,kBAAkB,GAAG,KAAK,CAAC;IACzE,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,YAAY,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,cAAc,EAAE,CAAC;KAC1B,CAAC;IACF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC5C,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnE,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC;CAC/E;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAuBjB;AAED,wBAAsB,oBAAoB,CACxC,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,CAAC,CAQjB"}

package/dist/context/manifest.js

@@ -0,0 +1,49 @@
+/**
+ * Build the context-manifest.json that accompanies every run.
+ *
+ * The manifest is the auditable record of what was sent to the model:
+ *   - which files were included,
+ *   - which were skipped and why,
+ *   - file content hashes (so re-runs against unchanged files can be
+ *     short-circuited later — caching is task #14+ scope but the hashes are
+ *     captured now to keep the format stable),
+ *   - redaction counts so the user can see how many secrets were filtered.
+ *
+ * For MVP 1 diff review, the "files" are the files in the diff; the manifest
+ * does not currently re-read full file contents (that's task #13 expansion
+ * for path review). Token estimates are 4-char heuristics.
+ */
+import { writeFile } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+export function buildContextManifest(opts) {
+    const included = opts.filesIncluded.map((f) => ({
+        path: f.path,
+        bytes: f.bytes,
+        sha256: f.content ? sha256(f.content) : "",
+    }));
+    const skipped = opts.filesSkipped.map((f) => ({
+        path: f.path,
+        bytes: f.bytes,
+        sha256: "",
+        skippedReason: f.skippedReason,
+    }));
+    return {
+        generatedAt: new Date().toISOString(),
+        inputSource: opts.inputSource,
+        filesIncluded: included,
+        filesSkipped: skipped,
+        redaction: opts.redaction,
+        totalTokensEstimate: Math.ceil(opts.diffText.length / 4),
+        diffBytes: opts.diffText.length,
+    };
+}
+export async function writeContextManifest(runFolderAbsPath, manifest) {
+    const relPath = "context-manifest.json";
+    await writeFile(join(runFolderAbsPath, relPath), JSON.stringify(manifest, null, 2) + "\n", "utf8");
+    return relPath;
+}
+function sha256(s) {
+    return createHash("sha256").update(s).digest("hex");
+}
+//# sourceMappingURL=manifest.js.map

package/dist/context/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/context/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAiCjC,MAAM,UAAU,oBAAoB,CAClC,IAA0B;IAE1B,MAAM,QAAQ,GAAmB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3C,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAmB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,EAAE;QACV,aAAa,EAAE,CAAC,CAAC,aAAa;KAC/B,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,QAAQ;QACvB,YAAY,EAAE,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACxD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,gBAAwB,EACxB,QAAyB;IAEzB,MAAM,OAAO,GAAG,uBAAuB,CAAC;IACxC,MAAM,SAAS,CACb,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACxC,MAAM,CACP,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/dist/context/redact.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Secret redaction.
+ *
+ * Runs a battery of regex patterns over text and replaces matches with a
+ * `[REDACTED:<kind>:<short-hash>]` placeholder. The hash lets the user
+ * confirm two redactions refer to the same secret (useful for audit) without
+ * leaking the value.
+ *
+ * This is a defense-in-depth measure. The first line of defense is the
+ * `.almightyignore` file which prevents secret-bearing files from being
+ * included in the first place. Redaction catches what slips through.
+ *
+ * Patterns are deliberately conservative — false positives are better than
+ * leaking real secrets. Users can disable redaction via config if needed.
+ */
+export interface RedactionMatch {
+    kind: string;
+    count: number;
+}
+export interface RedactionResult {
+    text: string;
+    redactions: RedactionMatch[];
+    totalCount: number;
+}
+export declare function redactSecrets(text: string): RedactionResult;
+//# sourceMappingURL=redact.d.ts.map