@aperant/framework 0.8.0 → 0.8.4

package/dist/cli/verify-proof/resolver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/resolver.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAA;AAExE;;;GAGG;AAEH,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;AAC1D,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC3D,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAA;IACnE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAQ,EAAE,OAAO;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,sEAAsE;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACtD,IAAI,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC/D,IAAI,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACzD,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QAC1F,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QACzD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,cAAc,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QACvE,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACxD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QACvD,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA,CAAC,gCAAgC;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAC,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,cAAc;IACrD,CAAC;IACD,OAAO,CAAC,CAAA;AACT,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,IAAI;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAA;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEpC,MAAM,QAAQ,GAAG,EAAE,CAAA;IAEnB,wEAAwE;IACxE,MAAM,eAAe,GAAG,EAAE,CAAA;IAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACrC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC,CAAA;IAElD,mEAAmE;IACnE,MAAM,UAAU,GAAG,EAAE,CAAA;IACrB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACb,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACrB,MAAM,EAAE,aAAa,CAAC,CAAC,SAAS,wBAAwB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC1F,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAED,sDAAsD;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAE7F,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,GAAG,CAAA;QACzB,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,sFAAsF;IACtF,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;QACrE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;YACtC,MAAM,EAAE,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9D,CAAC,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,IAAI,kCAAkC,CAC3C,gEAAgE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACtF,QAAQ,CAAC,CAAC,CAAC,EACX,QAAQ,CACR,CAAA;AACF,CAAC"}

package/dist/cli/verify-proof/runtime-detect.d.mts

@@ -0,0 +1,27 @@
+/**
+ * Detect runtime capabilities from a parsed package.json object.
+ *
+ * @param {Record<string, unknown> | null} packageJson
+ * @returns {RuntimeCapabilities}
+ */
+export function detectFromPackageJson(packageJson: Record<string, unknown> | null): RuntimeCapabilities;
+/**
+ * Load and detect capabilities from a project directory's package.json.
+ * Returns empty capabilities if no package.json exists (malformed or
+ * missing — both cases fall through to "nothing detected").
+ *
+ * @param {string} projectDir
+ * @returns {RuntimeCapabilities}
+ */
+export function loadRuntimeCapabilities(projectDir: string): RuntimeCapabilities;
+export type RuntimeCapabilities = {
+    is_electron: boolean;
+    is_tauri: boolean;
+    is_nextjs: boolean;
+    is_nuxt: boolean;
+    is_web_frontend: boolean;
+    is_expo: boolean;
+    is_react_native: boolean;
+    has_node: boolean;
+};
+//# sourceMappingURL=runtime-detect.d.mts.map

package/dist/cli/verify-proof/runtime-detect.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.d.mts","sourceRoot":"","sources":["../../../src/cli/verify-proof/runtime-detect.mjs"],"names":[],"mappings":"AAyCA;;;;;GAKG;AACH,mDAHW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAC5B,mBAAmB,CAwD/B;AAED;;;;;;;GAOG;AACH,oDAHW,MAAM,GACJ,mBAAmB,CAY/B;;iBAxGa,OAAO;cACP,OAAO;eACP,OAAO;aACP,OAAO;qBACP,OAAO;aACP,OAAO;qBACP,OAAO;cACP,OAAO"}

package/dist/cli/verify-proof/runtime-detect.mjs

@@ -0,0 +1,116 @@
+/**
+ * runtime-detect.mjs — pure project-shape capability detection.
+ *
+ * Extracted from packages/core/src/prompts/prompt-loader.ts:572-595 so the
+ * framework CLI is self-contained (no @aperant/core dep). Same heuristics:
+ * read package.json's dependencies + devDependencies, return a capability
+ * record the resolver can score against.
+ *
+ * Pattern: pure data in → pure data out. No filesystem walking, no exec.
+ * Use loadRuntimeCapabilities(projectDir) for the cwd-rooted variant.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+/**
+ * @typedef {Object} RuntimeCapabilities
+ * @property {boolean} is_electron
+ * @property {boolean} is_tauri
+ * @property {boolean} is_nextjs
+ * @property {boolean} is_nuxt
+ * @property {boolean} is_web_frontend
+ * @property {boolean} is_expo
+ * @property {boolean} is_react_native
+ * @property {boolean} has_node
+ */
+/** A capability record with every flag defaulted to false. */
+function emptyCapabilities() {
+    return {
+        is_electron: false,
+        is_tauri: false,
+        is_nextjs: false,
+        is_nuxt: false,
+        is_web_frontend: false,
+        is_expo: false,
+        is_react_native: false,
+        has_node: false,
+    };
+}
+/**
+ * Detect runtime capabilities from a parsed package.json object.
+ *
+ * @param {Record<string, unknown> | null} packageJson
+ * @returns {RuntimeCapabilities}
+ */
+export function detectFromPackageJson(packageJson) {
+    const capabilities = emptyCapabilities();
+    if (packageJson === null || typeof packageJson !== 'object')
+        return capabilities;
+    const allDeps = {
+        ...(packageJson.dependencies ?? {}) /** @type {Record<string,string>} */,
+        ...(packageJson.devDependencies ?? {}) /** @type {Record<string,string>} */,
+    };
+    const deps = new Set(Object.keys(allDeps).map((k) => k.toLowerCase()));
+    if (deps.has('electron') || [...deps].some((d) => d.startsWith('@electron'))) {
+        capabilities.is_electron = true;
+    }
+    if (deps.has('@tauri-apps/api') || deps.has('tauri')) {
+        capabilities.is_tauri = true;
+    }
+    if (deps.has('expo'))
+        capabilities.is_expo = true;
+    if (deps.has('react-native'))
+        capabilities.is_react_native = true;
+    // Web frontends — react/vue/svelte/angular/solid → frontend. BUT: an
+    // Electron app commonly bundles React as its renderer; in that case the
+    // runtime is "electron", not "web_frontend". Electron + react-native +
+    // expo + tauri all win over the web flag.
+    const isNativeContainer = capabilities.is_electron ||
+        capabilities.is_tauri ||
+        capabilities.is_react_native ||
+        capabilities.is_expo;
+    const webFrameworks = ['react', 'vue', 'svelte', 'angular', 'solid'];
+    if (!isNativeContainer && webFrameworks.some((f) => deps.has(f))) {
+        capabilities.is_web_frontend = true;
+    }
+    if (deps.has('next')) {
+        capabilities.is_nextjs = true;
+        capabilities.is_web_frontend = true;
+    }
+    if (deps.has('nuxt')) {
+        capabilities.is_nuxt = true;
+        capabilities.is_web_frontend = true;
+    }
+    if (deps.has('vite') && !isNativeContainer) {
+        capabilities.is_web_frontend = true;
+    }
+    // Node-ish? Anything with a package.json + an entry point counts.
+    if (typeof packageJson.main === 'string' || typeof packageJson.module === 'string') {
+        capabilities.has_node = true;
+    }
+    if (!capabilities.has_node && packageJson.scripts && typeof packageJson.scripts === 'object') {
+        capabilities.has_node = true;
+    }
+    return capabilities;
+}
+/**
+ * Load and detect capabilities from a project directory's package.json.
+ * Returns empty capabilities if no package.json exists (malformed or
+ * missing — both cases fall through to "nothing detected").
+ *
+ * @param {string} projectDir
+ * @returns {RuntimeCapabilities}
+ */
+export function loadRuntimeCapabilities(projectDir) {
+    const pkgPath = join(resolve(projectDir), 'package.json');
+    if (!existsSync(pkgPath))
+        return emptyCapabilities();
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+    }
+    catch {
+        return emptyCapabilities();
+    }
+    return detectFromPackageJson(parsed);
+}
+//# sourceMappingURL=runtime-detect.mjs.map

package/dist/cli/verify-proof/runtime-detect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/runtime-detect.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;;;;;;;GAUG;AAEH,8DAA8D;AAC9D,SAAS,iBAAiB;IACzB,OAAO;QACN,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,KAAK;KACf,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAW;IAChD,MAAM,YAAY,GAAG,iBAAiB,EAAE,CAAA;IACxC,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAA;IAEhF,MAAM,OAAO,GAAG;QACf,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,oCAAoC;QACxE,GAAG,CAAC,WAAW,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,oCAAoC;KAC3E,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAEtE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9E,YAAY,CAAC,WAAW,GAAG,IAAI,CAAA;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;IACjD,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IAEjE,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,iBAAiB,GACtB,YAAY,CAAC,WAAW;QACxB,YAAY,CAAC,QAAQ;QACrB,YAAY,CAAC,eAAe;QAC5B,YAAY,CAAC,OAAO,CAAA;IACrB,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACpE,IAAI,CAAC,iBAAiB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,YAAY,CAAC,SAAS,GAAG,IAAI,CAAA;QAC7B,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;QAC3B,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpF,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC7B,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,WAAW,CAAC,OAAO,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9F,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC7B,CAAC;IAED,OAAO,YAAY,CAAA;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAU;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAA;IACzD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,iBAAiB,EAAE,CAAA;IACpD,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,iBAAiB,EAAE,CAAA;IAC3B,CAAC;IACD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;AACrC,CAAC"}

package/dist/cli/verify-proof/trust.d.mts

@@ -0,0 +1,70 @@
+/**
+ * Compute a stable manifest hash for TOFU + audit lines.
+ * @param {DriverManifest} manifest
+ * @returns {string}
+ */
+export function manifestSha256(manifest: DriverManifest): string;
+/**
+ * Read the TOFU lock file. Returns an empty object if missing or malformed.
+ * @param {string} projectDir
+ * @returns {Record<string, {manifest_sha256: string, artifact_digest?: string, approved_at: string, trust_tier: string}>}
+ */
+export function readTofuLock(projectDir: string): Record<string, {
+    manifest_sha256: string;
+    artifact_digest?: string;
+    approved_at: string;
+    trust_tier: string;
+}>;
+/**
+ * Persist a TOFU lock file (atomic-ish: write + rename not used since we
+ * append-only to a tiny JSON; conflicting writes from parallel agents
+ * would clobber an entry but `.aperant/driver-tofu.json` is per-project,
+ * not per-agent).
+ *
+ * @param {string} projectDir
+ * @param {Record<string, unknown>} tofu
+ */
+export function writeTofuLock(projectDir: string, tofu: Record<string, unknown>): void;
+/**
+ * Build the canonical TOFU key for a (driver, version) pair. The hash is
+ * NOT part of the key — the value's manifest_sha256 + artifact_digest
+ * detect drift.
+ * @param {string} driverId
+ * @param {string} version
+ * @returns {string}
+ */
+export function tofuKey(driverId: string, version: string): string;
+/**
+ * Read the project's policy file. Returns the default policy if missing.
+ * @param {string} projectDir
+ * @returns {{mode: 'first_party_only' | 'allowlist', allowed: string[], denied: string[]}}
+ */
+export function readPolicy(projectDir: string): {
+    mode: "first_party_only" | "allowlist";
+    allowed: string[];
+    denied: string[];
+};
+/**
+ * Decide whether a driver invocation is allowed.
+ *
+ * @param {DriverManifest} manifest
+ * @param {ReturnType<typeof readTofuLock>} tofu
+ * @param {ReturnType<typeof readPolicy>} policy
+ * @returns {{decision: 'allow' | 'deny' | 'requires_approval', reason: string, expected_manifest_sha256?: string}}
+ */
+export function decide(manifest: DriverManifest, tofu: ReturnType<typeof readTofuLock>, policy: ReturnType<typeof readPolicy>): {
+    decision: "allow" | "deny" | "requires_approval";
+    reason: string;
+    expected_manifest_sha256?: string;
+};
+/**
+ * Persist a one-time approval for a (driver, version) pair into the TOFU
+ * lock. The caller is responsible for actually prompting the user; this
+ * function just writes the entry.
+ *
+ * @param {string} projectDir
+ * @param {DriverManifest} manifest
+ */
+export function recordApproval(projectDir: string, manifest: DriverManifest): void;
+export type DriverManifest = import("@aperant/driver-sdk").DriverManifest;
+//# sourceMappingURL=trust.d.mts.map

package/dist/cli/verify-proof/trust.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.mts","sourceRoot":"","sources":["../../../src/cli/verify-proof/trust.mjs"],"names":[],"mappings":"AA+BA;;;;GAIG;AACH,yCAHW,cAAc,GACZ,MAAM,CAKlB;AAED;;;;GAIG;AACH,yCAHW,MAAM,GACJ,MAAM,CAAC,MAAM,EAAE;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,CAAC,CAUxH;AAED;;;;;;;;GAQG;AACH,0CAHW,MAAM,QACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAMjC;AAED;;;;;;;GAOG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAIlB;AAED;;;;GAIG;AACH,uCAHW,MAAM,GACJ;IAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAC,CAgBzF;AAED;;;;;;;GAOG;AACH,iCALW,cAAc,QACd,UAAU,CAAC,OAAO,YAAY,CAAC,UAC/B,UAAU,CAAC,OAAO,UAAU,CAAC,GAC3B;IAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,wBAAwB,CAAC,EAAE,MAAM,CAAA;CAAC,CAwDjH;AAED;;;;;;;GAOG;AACH,2CAHW,MAAM,YACN,cAAc,QAYxB;6BAjKY,OAAO,qBAAqB,EAAE,cAAc"}

package/dist/cli/verify-proof/trust.mjs

@@ -0,0 +1,174 @@
+/**
+ * trust.mjs — driver trust enforcement (TOFU lock + policy file + decision).
+ *
+ * Implements ID-03:
+ *   - 4 trust tiers: first_party_signed (default-allow), community_verified,
+ *     community_unverified, local_unverified.
+ *   - Default policy: only first_party_signed auto-runs.
+ *   - Non-first-party drivers require one-time user approval; approval is
+ *     bound to a TOFU lock at .aperant/driver-tofu.json keyed by
+ *     {driver_id, version, manifest_sha256, artifact_digest}. Any drift
+ *     re-prompts.
+ *
+ * The audit log (audit.mjs) writes one line per decision (allow/deny).
+ * The execution layer (exec.mjs) enforces structured-only local_command.
+ *
+ * This module is decision-only: it does NOT prompt the user. The caller
+ * (workflow runner / apt-tools driver doctor) decides whether to invoke
+ * the prompt UX, then calls recordApproval() to persist the TOFU entry.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+/**
+ * @typedef {import('@aperant/driver-sdk').DriverManifest} DriverManifest
+ */
+const TOFU_PATH = '.aperant/driver-tofu.json';
+const POLICY_PATH = '.aperant/policy.json';
+/**
+ * Compute a stable manifest hash for TOFU + audit lines.
+ * @param {DriverManifest} manifest
+ * @returns {string}
+ */
+export function manifestSha256(manifest) {
+    const stable = JSON.stringify(manifest, Object.keys(manifest).sort());
+    return createHash('sha256').update(stable).digest('hex');
+}
+/**
+ * Read the TOFU lock file. Returns an empty object if missing or malformed.
+ * @param {string} projectDir
+ * @returns {Record<string, {manifest_sha256: string, artifact_digest?: string, approved_at: string, trust_tier: string}>}
+ */
+export function readTofuLock(projectDir) {
+    const path = join(resolve(projectDir), TOFU_PATH);
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Persist a TOFU lock file (atomic-ish: write + rename not used since we
+ * append-only to a tiny JSON; conflicting writes from parallel agents
+ * would clobber an entry but `.aperant/driver-tofu.json` is per-project,
+ * not per-agent).
+ *
+ * @param {string} projectDir
+ * @param {Record<string, unknown>} tofu
+ */
+export function writeTofuLock(projectDir, tofu) {
+    const path = join(resolve(projectDir), TOFU_PATH);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(tofu, null, 2) + '\n', 'utf-8');
+}
+/**
+ * Build the canonical TOFU key for a (driver, version) pair. The hash is
+ * NOT part of the key — the value's manifest_sha256 + artifact_digest
+ * detect drift.
+ * @param {string} driverId
+ * @param {string} version
+ * @returns {string}
+ */
+export function tofuKey(driverId, version) {
+    return `${driverId}@${version}`;
+}
+/**
+ * Read the project's policy file. Returns the default policy if missing.
+ * @param {string} projectDir
+ * @returns {{mode: 'first_party_only' | 'allowlist', allowed: string[], denied: string[]}}
+ */
+export function readPolicy(projectDir) {
+    const path = join(resolve(projectDir), POLICY_PATH);
+    const defaults = { mode: 'first_party_only', allowed: [], denied: [] };
+    if (!existsSync(path))
+        return defaults;
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        return {
+            mode: parsed.mode === 'allowlist' ? 'allowlist' : 'first_party_only',
+            allowed: Array.isArray(parsed.allowed) ? parsed.allowed : [],
+            denied: Array.isArray(parsed.denied) ? parsed.denied : [],
+        };
+    }
+    catch {
+        return defaults;
+    }
+}
+/**
+ * Decide whether a driver invocation is allowed.
+ *
+ * @param {DriverManifest} manifest
+ * @param {ReturnType<typeof readTofuLock>} tofu
+ * @param {ReturnType<typeof readPolicy>} policy
+ * @returns {{decision: 'allow' | 'deny' | 'requires_approval', reason: string, expected_manifest_sha256?: string}}
+ */
+export function decide(manifest, tofu, policy) {
+    const tier = manifest.trust?.tier;
+    const driverId = manifest.driverId;
+    const version = manifest.version;
+    // Policy denylist always wins.
+    if (policy.denied.includes(driverId)) {
+        return { decision: 'deny', reason: `policy denies driver ${driverId}` };
+    }
+    // first_party_signed: default-allow under either policy mode (unless
+    // explicitly denied above).
+    if (tier === 'first_party_signed') {
+        return { decision: 'allow', reason: 'first_party_signed driver — default allow' };
+    }
+    // first_party_only mode blocks every other tier.
+    if (policy.mode === 'first_party_only') {
+        return {
+            decision: 'deny',
+            reason: `policy.mode=first_party_only blocks ${tier} driver`,
+        };
+    }
+    // allowlist mode: require explicit allow entry AND a valid TOFU lock.
+    if (!policy.allowed.includes(driverId)) {
+        return {
+            decision: 'deny',
+            reason: `policy.mode=allowlist but ${driverId} not in allowed[]`,
+        };
+    }
+    // Check TOFU lock.
+    const key = tofuKey(driverId, version);
+    const entry = tofu[key];
+    const currentHash = manifestSha256(manifest);
+    if (!entry) {
+        return {
+            decision: 'requires_approval',
+            reason: `no TOFU entry for ${key} — first run requires approval`,
+            expected_manifest_sha256: currentHash,
+        };
+    }
+    if (entry.manifest_sha256 !== currentHash) {
+        return {
+            decision: 'requires_approval',
+            reason: `TOFU manifest_sha256 drift for ${key} — driver changed since approval, re-prompt required`,
+            expected_manifest_sha256: currentHash,
+        };
+    }
+    return { decision: 'allow', reason: `TOFU entry valid for ${key}` };
+}
+/**
+ * Persist a one-time approval for a (driver, version) pair into the TOFU
+ * lock. The caller is responsible for actually prompting the user; this
+ * function just writes the entry.
+ *
+ * @param {string} projectDir
+ * @param {DriverManifest} manifest
+ */
+export function recordApproval(projectDir, manifest) {
+    const tofu = readTofuLock(projectDir);
+    const key = tofuKey(manifest.driverId, manifest.version);
+    tofu[key] = {
+        manifest_sha256: manifestSha256(manifest),
+        artifact_digest: manifest.trust?.integrity?.artifact_digest,
+        approved_at: new Date().toISOString(),
+        trust_tier: manifest.trust?.tier,
+    };
+    writeTofuLock(projectDir, tofu);
+}
+//# sourceMappingURL=trust.mjs.map

package/dist/cli/verify-proof/trust.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/trust.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;GAEG;AAEH,MAAM,SAAS,GAAG,2BAA2B,CAAA;AAC7C,MAAM,WAAW,GAAG,sBAAsB,CAAA;AAE1C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACrE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAU;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAA;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,UAAU,EAAE,IAAI;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAA;IACjD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,QAAQ,EAAE,OAAO;IACxC,OAAO,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,UAAU;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACtE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAA;IACtC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;QACtD,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB;YACpE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC5D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACzD,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,QAAQ,CAAA;IAChB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;IAEhC,+BAA+B;IAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,QAAQ,EAAE,EAAE,CAAA;IACxE,CAAC;IAED,qEAAqE;IACrE,4BAA4B;IAC5B,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAA;IAClF,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACxC,OAAO;YACN,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,uCAAuC,IAAI,SAAS;SAC5D,CAAA;IACF,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO;YACN,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,6BAA6B,QAAQ,mBAAmB;SAChE,CAAA;IACF,CAAC;IAED,mBAAmB;IACnB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAE5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;YACN,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,qBAAqB,GAAG,gCAAgC;YAChE,wBAAwB,EAAE,WAAW;SACrC,CAAA;IACF,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO;YACN,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,kCAAkC,GAAG,sDAAsD;YACnG,wBAAwB,EAAE,WAAW;SACrC,CAAA;IACF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,UAAU,EAAE,QAAQ;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,GAAG;QACX,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC;QACzC,eAAe,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe;QAC3D,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI;KAChC,CAAA;IACD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;AAChC,CAAC"}

package/dist/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aperant",
-  "version": "0.7.3",
+  "version": "0.8.4",
   "description": "AI coding framework — composable skills for planning, executing, verifying, and reviewing code with any LLM provider. Works as Claude Code commands, Codex tasks, or programmatically.",
   "author": {
     "name": "Mikalsen AI",
@@ -25,6 +25,7 @@
     "skills/apt",
     "skills/apt-author-skill",
     "skills/apt-bootstrap",
+    "skills/apt-caveman",
     "skills/apt-classify",
     "skills/apt-close-task",
     "skills/apt-create-docs",
@@ -34,6 +35,8 @@
     "skills/apt-discuss",
     "skills/apt-docs",
     "skills/apt-execute",
+    "skills/apt-fan-out",
+    "skills/apt-handoff",
     "skills/apt-improve",
     "skills/apt-mockup",
     "skills/apt-pause",

package/dist/plugin/agents/apt-executor.md

@@ -46,6 +46,18 @@ node packages/framework/bin/apt-tools.mjs gate check . --task-id {task-id} --ski
 
 If `status == "fail"`, STOP. Report the failed gates verbatim and exit — do NOT auto-apply `--force`. Forcing is a human decision; the user can re-invoke with `--force --reason "<explanation>"` to bypass (the override is logged to `.aperant/events/{today}.jsonl`).
 
+## 0a. Fan-out worker identity (FRAMEWORK-BUG-033 defect 3)
+
+If your spawn prompt contains both `batch_id` and `task_id` (i.e. you are a fan-out worker subagent dispatched by `/apt:fan-out`), export `APT_AGENT_ID` in EVERY `Bash` invocation that runs `apt-tools ...`:
+
+```bash
+APT_AGENT_ID=fanout-${batch_id}-${task_id} node packages/framework/bin/apt-tools.mjs <command> ...
+```
+
+This pins your `team-status/{agentId}.json` file across short-lived CLI invocations. Without it, each `apt-tools` call gets a fresh `hostname-pid` agentId (per `agent-identity.mjs:86`), the previous pid dies, and `listTeamStatus({ includeStale: false })` filters healthy workers out between invocations — the team-status dashboard flickers into emptiness instead of showing 4 stable fan-out workers.
+
+Non-fan-out invocations of this agent receive no `batch_id` and skip this export — the legacy `hostname-pid` path remains correct for single-task work.
+
 ## 1. Load Context
 
 1. Read `CLAUDE.md` and `AGENTS.md` if they exist

package/dist/plugin/agents/apt-planner.md

@@ -32,7 +32,8 @@ Before planning, discover project context:
 <environment>
 - **Working directory:** The project root
 - **apt-tools:** Always invoke as `node packages/framework/bin/apt-tools.mjs`
-- **Task directory:** Provided in the spawn prompt as `task_dir`. ALL artifacts (spec.md, implementation_plan.json) are written here, NOT to project root.
+- **Task directory:** Provided in the spawn prompt as `task_dir`. It MUST be an absolute path under the main repo's `.aperant/tasks/{task-id}/`. ALL artifacts (spec.md, implementation_plan.json) are written here, NOT to project root and NOT to a worktree-local `.aperant/tasks/` directory.
+- **Worktree path:** If provided, use it only for code investigation/editing context. Do not derive artifact paths from it.
 - **Config:** `.aperant/config.json` — project preferences
 - **State:** `.aperant/state.json` — execution state
 </environment>
@@ -43,7 +44,7 @@ Before planning, discover project context:
 
 1. Read `CLAUDE.md` and `AGENTS.md` if they exist — extract conventions, stack, constraints
 2. Run `node packages/framework/bin/apt-tools.mjs state .` to understand current project state
-3. Parse the task description and task_dir from the spawn prompt
+3. Parse the task description and task_dir from the spawn prompt. If task_dir is relative, resolve the real main repo path first instead of writing under the current worktree.
 
 ## 2. Assess Complexity
 
@@ -211,7 +212,7 @@ If unable to enumerate (network unavailable, action docs unclear), flag it expli
 
 ## 4. Write Specification
 
-The spec.md content format **branches on track** (Pocock adoption ID-05,
+The spec.md content format **branches on track** (ID-05,
 Fast Path Guarantee). QUICK-routed tasks keep the existing 4-section
 shape; STANDARD/DEEP/COMPLEX tasks get a PRD-shaped artifact that
 survives the task as a second-consumer document.
@@ -344,7 +345,7 @@ fix it now, not later.
 
 ## 5. Create Implementation Plan
 
-Subtask schema branches on track (Pocock adoption ID-05 — Fast Path Guarantee).
+Subtask schema branches on track.
 
 ### 5.A. QUICK track / SIMPLE complexity — legacy flat subtask schema
 

package/dist/plugin/agents/apt-team-docs-narrator.md

@@ -72,6 +72,17 @@ If the parent spawned you without a mode you recognize, write an error line to `
    rendered table. If present, REPLACE the content between anchors (never
    append — this is how re-runs stay idempotent).
 7. Call `apt-tools roadmap sync . --reason 'narrator:phase-ship:<phase_id>'`.
+8. **Slice 5 / AC14 / ADR-0006 dual-write.** Write the rendered prose
+   block to a temp file (e.g. `mktemp -t narrator-prose-XXXXXX.md`), then
+   run
+   `apt-tools roadmap convex-mirror . --scope <scope> --phase <phase_id> --anchor-id phase-ship:<phase_id> --prose-path <tempfile>`
+   (add `--merged-pr <pr-number>` when known). The markdown write from
+   step 7 is canonical (ADR-0006); this step is the Convex mirror.
+   Fail-soft contract:
+   - exit 0 with `status:ok` or `status:queued` → continue normally
+   - exit non-zero with `status:error` → append the error message to
+     `.aperant/digests/errors.log` and continue (do NOT block on Convex
+     failures; the in-process cron drainer reconciles within 5 min)
 
 ## Mode 2: `decision-merge` — merge a recorded decision into the roadmap