@apnex/network-adapter 0.1.11 → 0.1.12

package/dist/bin/seed-skills.d.ts

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import { type WantedBundles } from "../skills/manifest.js";
+export interface SeedSkillsDeps {
+    /** the seat's skills root ($CLAUDE_CONFIG_DIR/skills) — created cold if absent. */
+    skillsDir: string;
+    /** the durable managed-ledger sidecar path (kept OUTSIDE skillsDir). */
+    ledgerPath: string;
+    /** the role whose baseline to land (for the set-diff gate + per-role sets). */
+    role: string;
+    /** the parsed wanted-bundles manifest. */
+    manifest: WantedBundles;
+    /** the root of the pinned-source CLONE (contains skills/<id>/ + bundles/<b>.yaml). */
+    sourceRoot: string;
+    /** optional static role→skills OVERRIDES (the future per-role config surface). Slice-1
+     *  passes none → role-agnostic (role_map = the manifest expansion = mks-delivered). A
+     *  role override that DROPS an mks skill trips the live set-diff gate below. */
+    roleSkills?: ReadonlyMap<string, readonly string[]>;
+    log?: (msg: string) => void;
+}
+export interface SeedSkillsResult {
+    ok: boolean;
+    reason: string;
+    /** the mks-delivered skills missing from role_map (non-empty ⇒ gate FAILED). */
+    missing: string[];
+    landed: string[];
+}
+/**
+ * The orchestration core (injected deps; no env/git). Runs: mechanical bundle-expand →
+ * LIVE fail-closed set-diff gate (role_map ⊇ mks-delivered) → converge via the neutral
+ * loop + ClaudeSkillActuator. Returns ok=false on gate violation OR non-converged
+ * (the caller fail-closes the launch).
+ */
+export declare function runSeedSkills(deps: SeedSkillsDeps): SeedSkillsResult;
+/**
+ * True iff this module is the process entrypoint — robust to SYMLINK invocation
+ * (bug-251). The npm bin `ois-seed-skills` is a symlink, so `process.argv[1]` is the
+ * symlink path while `import.meta.url` is the real file; a raw `===` mismatches and
+ * `main()` silently no-ops (the fleet rollout invokes via that symlink → skill delivery
+ * would silently vanish). realpath-normalize BOTH sides so they compare canonical paths.
+ * Guarded for a missing/unresolvable argv[1] (e.g. under a test importer).
+ */
+export declare function isInvokedAsMain(moduleUrl: string, argv1: string | undefined): boolean;

package/dist/bin/seed-skills.js

@@ -0,0 +1,177 @@
+#!/usr/bin/env node
+/**
+ * bin/seed-skills.ts — the SEED-TIME headless FAIL-CLOSED skills entrypoint
+ * (hcapskills0 build_claude, design §5). A network-adapter bin the ois claude_seed
+ * invokes in the `mission_kit_sync` slot: it materializes a role's declared skill
+ * baseline into $CLAUDE_CONFIG_DIR/skills BEFORE `exec claude`, headless (no claude
+ * runtime), and ABORTS the launch loudly (non-zero) on any converge failure — NEVER
+ * `exec claude` with a partial baseline (matching mission_kit_sync's fail-closed cp).
+ *
+ * THE INTEGRATION POINT: ALL env/ois-layout/git coupling lives HERE (guardrail 2), so
+ * the shared skills module (actuator + source) stays fs/env/git-free — the bin reads
+ * env, parses the ois manifest, clones the pinned source, and INJECTS concrete paths.
+ * `runSeedSkills` is the injected-deps orchestration core (testable without git/env);
+ * `main` is the env/git wrapper.
+ *
+ * COEXIST (design §9): this runs ALONGSIDE the legacy mission_kit_sync (behind the
+ * launch flag in ois), never retiring it. The LIVE set-diff gate (below) is what keeps
+ * coexist from clobbering an mks skill at runtime under manifest drift.
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { join } from "node:path";
+import { SpecStore } from "../control-plane/spec-store.js";
+import { ReconcileLoop } from "../control-plane/reconcile-loop.js";
+import { ClaudeSkillActuator } from "../skills/claude-skill-actuator.js";
+import { FileSkillLedger } from "../skills/file-skill-ledger.js";
+import { RoleSkillSource } from "../skills/role-skill-source.js";
+import { parseWantedBundles, parseBundleSkills, expandWantedBundles, } from "../skills/manifest.js";
+import { missingFromRoleMap } from "../skills/set-diff-gate.js";
+/**
+ * The orchestration core (injected deps; no env/git). Runs: mechanical bundle-expand →
+ * LIVE fail-closed set-diff gate (role_map ⊇ mks-delivered) → converge via the neutral
+ * loop + ClaudeSkillActuator. Returns ok=false on gate violation OR non-converged
+ * (the caller fail-closes the launch).
+ */
+export function runSeedSkills(deps) {
+    const log = deps.log ?? (() => { });
+    const readBundleSkills = (bundle) => {
+        const bf = join(deps.sourceRoot, "bundles", `${bundle}.yaml`);
+        if (!existsSync(bf)) {
+            throw new Error(`bundle '${bundle}' not found (bundles/${bundle}.yaml)`);
+        }
+        return parseBundleSkills(readFileSync(bf, "utf8"));
+    };
+    // MECHANICAL expansion — the same derivation mission_kit_sync uses, so mks-delivered
+    // and role_map both descend from this manifest (design §5).
+    const expanded = expandWantedBundles(deps.manifest, readBundleSkills);
+    const source = new RoleSkillSource({
+        defaultSkills: expanded, // slice-1: role-agnostic (mirrors mks); per-role generalizes
+        roleSkills: deps.roleSkills,
+        sourceDirFor: (id) => join(deps.sourceRoot, "skills", id),
+    });
+    const roleSkills = source.skillIdsForRole(deps.role);
+    const mksDelivered = expanded; // what legacy mission_kit_sync would copy for this seat
+    // ── LIVE, FAIL-CLOSED set-diff gate (invariant 3b; design §8.2). role_map MUST be a
+    //    superset of mks-delivered, or the actuator's ledger-scoped removal could unlink
+    //    an mks skill dropped from role_map. Enforced at RUNTIME (not just CI) so it holds
+    //    under manifest drift — abort BEFORE any converge/unlink.
+    const missing = missingFromRoleMap(roleSkills, mksDelivered);
+    if (missing.length > 0) {
+        return {
+            ok: false,
+            reason: `set-diff gate VIOLATED for role '${deps.role}': role_map is missing mission_kit_sync-delivered skills [${missing.join(", ")}] — aborting to protect the coexisting legacy baseline`,
+            missing,
+            landed: [],
+        };
+    }
+    // Cold-seat root + empty ledger are created here (the watcher precondition: the skills
+    // root pre-exists once cp is gone).
+    mkdirSync(deps.skillsDir, { recursive: true });
+    const ledger = new FileSkillLedger(deps.ledgerPath);
+    const actuator = new ClaudeSkillActuator({ skillsDir: deps.skillsDir, ledger, log });
+    const store = new SpecStore();
+    const loop = new ReconcileLoop({ store, actuator }, { log });
+    store.apply(source.specsForRole(deps.role));
+    const outcome = loop.sync("seed-skills");
+    if (!outcome.converged) {
+        return {
+            ok: false,
+            reason: `skills converge did NOT reach converged (klass=${outcome.klass ?? "?"}${outcome.detail ? `: ${outcome.detail}` : ""}) — refusing to launch with a partial baseline`,
+            missing: [],
+            landed: [...actuator.observeManaged().observedManaged],
+        };
+    }
+    return {
+        ok: true,
+        reason: `seeded ${roleSkills.length} skill(s) for role '${deps.role}'`,
+        missing: [],
+        landed: [...actuator.observeManaged().observedManaged],
+    };
+}
+/** env/git wrapper: read env, parse the manifest, clone the pinned source, delegate. */
+function main(argv) {
+    const log = (m) => console.error(m);
+    const skillsDir = argv[2] ??
+        (process.env.CLAUDE_CONFIG_DIR
+            ? join(process.env.CLAUDE_CONFIG_DIR, "skills")
+            : undefined);
+    const manifestPath = process.env.HCAP_SKILLS_MANIFEST;
+    const role = process.env.OIS_ROLE ?? process.env.OIS_AGENT_ROLE ?? "unknown";
+    const ledgerPath = process.env.HCAP_SKILLS_LEDGER ??
+        (process.env.CLAUDE_CONFIG_DIR
+            ? join(process.env.CLAUDE_CONFIG_DIR, ".hcap-skills-managed.json")
+            : undefined);
+    if (!skillsDir) {
+        log("[hcap-skills] FATAL: no skills dir (arg1 or CLAUDE_CONFIG_DIR)");
+        return 2;
+    }
+    if (!manifestPath || !existsSync(manifestPath)) {
+        log(`[hcap-skills] FATAL: manifest not found (HCAP_SKILLS_MANIFEST=${manifestPath})`);
+        return 2;
+    }
+    if (!ledgerPath) {
+        log("[hcap-skills] FATAL: no ledger path (HCAP_SKILLS_LEDGER or CLAUDE_CONFIG_DIR)");
+        return 2;
+    }
+    const manifest = parseWantedBundles(readFileSync(manifestPath, "utf8"));
+    const repo = process.env.SKILL_SYNC_REPO ?? manifest.sourceRepo;
+    const ref = process.env.SKILL_SYNC_REF ?? manifest.sourceRef;
+    if (!repo || !ref) {
+        log("[hcap-skills] FATAL: manifest missing source_repo / source_ref (pin required)");
+        return 2;
+    }
+    let clone;
+    try {
+        clone = mkdtempSync(join(tmpdir(), "hcap-skills-"));
+        execFileSync("git", ["clone", "--quiet", repo, clone], { stdio: ["ignore", "ignore", "inherit"] });
+        execFileSync("git", ["-C", clone, "checkout", "--quiet", ref], { stdio: ["ignore", "ignore", "inherit"] });
+        const result = runSeedSkills({
+            skillsDir,
+            ledgerPath,
+            role,
+            manifest,
+            sourceRoot: clone,
+            log,
+        });
+        if (!result.ok) {
+            log(`[hcap-skills] ABORT (fail-closed): ${result.reason}`);
+            return 1;
+        }
+        log(`[hcap-skills] OK: ${result.reason} from ${repo}@${ref} → ${skillsDir}`);
+        return 0;
+    }
+    catch (err) {
+        log(`[hcap-skills] ABORT (fail-closed): ${err?.message ?? String(err)}`);
+        return 1;
+    }
+    finally {
+        if (clone)
+            rmSync(clone, { recursive: true, force: true });
+    }
+}
+/**
+ * True iff this module is the process entrypoint — robust to SYMLINK invocation
+ * (bug-251). The npm bin `ois-seed-skills` is a symlink, so `process.argv[1]` is the
+ * symlink path while `import.meta.url` is the real file; a raw `===` mismatches and
+ * `main()` silently no-ops (the fleet rollout invokes via that symlink → skill delivery
+ * would silently vanish). realpath-normalize BOTH sides so they compare canonical paths.
+ * Guarded for a missing/unresolvable argv[1] (e.g. under a test importer).
+ */
+export function isInvokedAsMain(moduleUrl, argv1) {
+    if (!argv1)
+        return false;
+    try {
+        return realpathSync(fileURLToPath(moduleUrl)) === realpathSync(argv1);
+    }
+    catch {
+        return false;
+    }
+}
+// Run only when invoked as a script (not when imported by a test) — symlink-safe.
+if (isInvokedAsMain(import.meta.url, process.argv[1])) {
+    process.exit(main(process.argv));
+}
+//# sourceMappingURL=seed-skills.js.map

package/dist/bin/seed-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-skills.js","sourceRoot":"","sources":["../../src/bin/seed-skills.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AA4BhE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAoB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAY,EAAE;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,wBAAwB,MAAM,QAAQ,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,qFAAqF;IACrF,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,aAAa,EAAE,QAAQ,EAAE,6DAA6D;QACtF,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;KAC1D,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,wDAAwD;IAEvF,qFAAqF;IACrF,qFAAqF;IACrF,uFAAuF;IACvF,8DAA8D;IAC9D,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oCAAoC,IAAI,CAAC,IAAI,6DAA6D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD;YAC5L,OAAO;YACP,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IAED,uFAAuF;IACvF,oCAAoC;IACpC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAE7D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEzC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kDAAkD,OAAO,CAAC,KAAK,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,gDAAgD;YAC5K,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC,eAAe,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,UAAU,UAAU,CAAC,MAAM,uBAAuB,IAAI,CAAC,IAAI,GAAG;QACtE,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,IAAI,CAAC,CAAC,CAAC;QACP,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;IAC7E,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;YAClE,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,gEAAgE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,iEAAiE,YAAY,GAAG,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,+EAA+E,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,QAAQ,CAAC,UAAU,CAAC;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC,SAAS,CAAC;IAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,+EAA+E,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACpD,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACnG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAE3G,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,SAAS;YACT,UAAU;YACV,IAAI;YACJ,QAAQ;YACR,UAAU,EAAE,KAAK;YACjB,GAAG;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,GAAG,CAAC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CAAC,qBAAqB,MAAM,CAAC,MAAM,SAAS,IAAI,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,sCAAuC,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commitSha": "7f2e93c",
-  "dirty": true,
-  "buildTime": "2026-07-11T08:02:28.261Z",
+  "commitSha": "b24120e",
+  "dirty": false,
+  "buildTime": "2026-07-13T13:44:02.663Z",
   "branch": "HEAD"
 }

package/dist/control-plane/contracts.d.ts

@@ -0,0 +1,99 @@
+/**
+ * control-plane/contracts.ts — the harness-neutral, RESOURCE-GENERIC HCAP consumer
+ * core (hcapskills0 build_core; design docs/design/hcapskills-design.md v2).
+ *
+ * The generalize+invert of the mission-107 PI tool-control-plane: one neutral Controller
+ * (SpecStore → DiffEngine → ReconcileLoop) drives ANY resource kind (tools on MCP,
+ * skills on filesystem, …) through a `ResourceActuatorPort` that decides HOW to
+ * converge. Two inversions vs the pi original (grounding §3, design §2/§3):
+ *
+ *  1. The port is `converge(desired) → tri-state` + `observeManaged()`, NOT
+ *     register/setActive/snapshot. The built-in preserve-baseline union and the
+ *     poison-guard are pi-ACTUATOR internals now — they never appear here (a
+ *     root-scoped filesystem actuator has no built-ins to preserve).
+ *  2. Every observed/desired comparison is MANAGED-SCOPED (`observed ∩ managedNames`
+ *     vs desired). The neutral Controller never sees the raw running surface, so a host's
+ *     ever-present built-ins can never read as drift.
+ *
+ * `definition` is OPAQUE (actuator-interpreted): a ToolDescriptor for pi-tools, a
+ * skill/corpus identifier for claude-skills — NEVER molded to a tool shape.
+ */
+/** A declared resource — resource-generic. `definition` is opaque to the core. */
+export interface ResourceSpec {
+    name: string;
+    /** actuator-interpreted payload (registration/materialization input). Opaque here. */
+    definition: unknown;
+    /** enabled ⇒ member of the desired ACTIVE managed subset; false = declared-inactive. */
+    enabled: boolean;
+}
+/**
+ * Tri-state convergence outcome from the actuator. The ACTUATOR decides what
+ * "not-yet-observable" means for ITS substrate (pi: setActive lands the next agent
+ * turn; claude: a filesystem watcher hasn't yet picked up the write) and reports
+ * `pending`; the neutral loop counts-but-tolerates it and must NEVER read it as
+ * `converged` OR `failed`. The loop counts converge PASSES, never a wall-clock
+ * "turn" — the vocabulary here is substrate-agnostic on purpose.
+ */
+export type ConvergeStatus = "converged" | "pending" | "failed";
+/** Failure taxonomy for a converge pass (loud escalation after the bound). */
+export type ConvergeFailureClass = "actuate-failed" | "incoherent-plan" | "observe-failed" | "still-diverged";
+/** The actuator's report for one converge pass. */
+export interface ConvergeResult {
+    status: ConvergeStatus;
+    /** the managed names the actuator drove toward ACTIVE (the loop confirms against this). */
+    desiredManaged: string[];
+    klass?: ConvergeFailureClass;
+    detail?: string;
+}
+/** The MANAGED-scoped observation (`observed ∩ managedNames`) — never the raw surface. */
+export interface ManagedObservation {
+    /** names currently observed active WITHIN this plane's managed set. */
+    observedManaged: string[];
+    /** every name this plane has ever driven (the managed ledger; for status joins). */
+    managedNames: string[];
+}
+/**
+ * THE harness-neutral actuation seam. Each actuator decides HOW to converge its
+ * managed surface toward `desired` (pi: register defs → setActive(builtins ∪
+ * enabled) → poison-guard; claude: write/unlink SKILL.md trees). Exposes NO
+ * register/setActive/remove primitives — those are actuator-internal.
+ */
+export interface ResourceActuatorPort {
+    /** converge the managed surface toward `desired`; returns tri-state (never throws
+     *  for an actuation fault — reports `failed` so the loop can escalate/retry). */
+    converge(desired: readonly ResourceSpec[]): ConvergeResult;
+    /** observe the MANAGED subset fresh (F1 — no in-memory latch). */
+    observeManaged(): ManagedObservation;
+}
+/** U1 custody of the declared spec (neutral). */
+export interface ResourceSpecStorePort {
+    list(): readonly ResourceSpec[];
+    get(name: string): ResourceSpec | undefined;
+    apply(spec: readonly ResourceSpec[]): void;
+    create(spec: ResourceSpec): void;
+    destroy(name: string): void;
+}
+/** KF4 — the persistence seam (Slice-1 in-memory no-op; disk impl deferred). */
+export interface SpecPersistencePort {
+    load(): ResourceSpec[] | null;
+    save(spec: readonly ResourceSpec[]): void;
+}
+/** The outcome of one level-triggered reconcile pass (loop → onOutcome). */
+export interface ConvergeOutcome {
+    reason: string;
+    converged: boolean;
+    /** true only for the tolerated interim (`pending`) — actuation accepted, effect not yet observed; not converged, not escalating yet. */
+    pending?: boolean;
+    klass?: ConvergeFailureClass;
+    detail?: string;
+    /** consecutive non-converged passes including this one (0 on convergence). */
+    consecutiveFailures: number;
+}
+/** Per-resource status, derived from U1 records + the managed observation (never host introspection). */
+export interface RunningResourceStatus {
+    name: string;
+    declared: boolean;
+    enabled: boolean;
+    active: boolean;
+    managed: boolean;
+}

package/dist/control-plane/contracts.js

@@ -0,0 +1,22 @@
+/**
+ * control-plane/contracts.ts — the harness-neutral, RESOURCE-GENERIC HCAP consumer
+ * core (hcapskills0 build_core; design docs/design/hcapskills-design.md v2).
+ *
+ * The generalize+invert of the mission-107 PI tool-control-plane: one neutral Controller
+ * (SpecStore → DiffEngine → ReconcileLoop) drives ANY resource kind (tools on MCP,
+ * skills on filesystem, …) through a `ResourceActuatorPort` that decides HOW to
+ * converge. Two inversions vs the pi original (grounding §3, design §2/§3):
+ *
+ *  1. The port is `converge(desired) → tri-state` + `observeManaged()`, NOT
+ *     register/setActive/snapshot. The built-in preserve-baseline union and the
+ *     poison-guard are pi-ACTUATOR internals now — they never appear here (a
+ *     root-scoped filesystem actuator has no built-ins to preserve).
+ *  2. Every observed/desired comparison is MANAGED-SCOPED (`observed ∩ managedNames`
+ *     vs desired). The neutral Controller never sees the raw running surface, so a host's
+ *     ever-present built-ins can never read as drift.
+ *
+ * `definition` is OPAQUE (actuator-interpreted): a ToolDescriptor for pi-tools, a
+ * skill/corpus identifier for claude-skills — NEVER molded to a tool shape.
+ */
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/control-plane/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/control-plane/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/control-plane/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * control-plane/ — the harness-neutral, resource-generic HCAP consumer Controller
+ * (hcapskills0 build_core; design docs/design/hcapskills-design.md v2). Generalized
+ * + inverted from the mission-107 PI tool-control-plane: one core (SpecStore →
+ * ReconcileLoop) drives any resource kind through a `ResourceActuatorPort` that
+ * decides HOW to converge. Consumed by pi-plugin (tools) and claude-plugin (skills).
+ * Naming (ratified, K8s-lineage): the neutral core IS the "Controller" — it reconciles
+ * declared specs onto a resource kind, living in this control-plane/. Classes keep their
+ * names (SpecStore, ReconcileLoop); the actuators keep "Actuator".
+ */
+export type { ResourceSpec, ConvergeStatus, ConvergeFailureClass, ConvergeResult, ManagedObservation, ResourceActuatorPort, ResourceSpecStorePort, SpecPersistencePort, ConvergeOutcome, RunningResourceStatus, } from "./contracts.js";
+export { SpecStore, InMemorySpecPersistence } from "./spec-store.js";
+export { ReconcileLoop } from "./reconcile-loop.js";
+export type { ReconcileCollaborators, ReconcileLoopOptions, } from "./reconcile-loop.js";

package/dist/control-plane/index.js

@@ -0,0 +1,3 @@
+export { SpecStore, InMemorySpecPersistence } from "./spec-store.js";
+export { ReconcileLoop } from "./reconcile-loop.js";
+//# sourceMappingURL=index.js.map

package/dist/control-plane/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/control-plane/index.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/control-plane/reconcile-loop.d.ts

@@ -0,0 +1,50 @@
+/**
+ * control-plane/reconcile-loop.ts — U4 ReconcileLoop (resource-generic; hcapskills0
+ * build_core). Single concern: the level-triggered converge pass. Neutral — closes
+ * over the SpecStore + ResourceActuatorPort contracts, ZERO host types.
+ *
+ * LEVEL = declared spec (U1) vs the MANAGED observed surface (observed ∩ managedNames
+ * — never the raw surface, so a host's ever-present built-ins can never read as
+ * drift; design v2 §2 blocker fix). The actuator decides HOW to converge and reports
+ * a tri-state; the loop owns the escalation classification.
+ *
+ * Escalation semantics (design v2 §2; ratified ruling): the failure counter is a
+ * POISON/termination guard for "genuinely won't converge", NOT a divergence tally.
+ * The loop counts converge PASSES, never a wall-clock "turn" — the ACTUATOR reports
+ * `pending` (its actuation is accepted but not yet observable; what that means is the
+ * actuator's substrate concern: pi setActive lands next agent turn, claude a watcher
+ * hasn't yet picked up the write), and the loop TOLERATES it — it does NOT count.
+ * Only a CROSS-PASS stall — the actuator reports `pending` again for the SAME managed
+ * set on a LATER pass (it never became observable) — counts + escalates at the bound.
+ * `pendingSince` tracks the last-actuated-still-pending managed set to make exactly
+ * that within-pass-vs-cross-pass distinction. A hard actuation fault (status:"failed",
+ * e.g. a registration reject) is a DISTINCT input that counts immediately.
+ */
+import type { ConvergeOutcome, ResourceActuatorPort, ResourceSpec } from "./contracts.js";
+export interface ReconcileCollaborators {
+    store: {
+        list(): readonly ResourceSpec[];
+    };
+    actuator: Pick<ResourceActuatorPort, "converge">;
+}
+export interface ReconcileLoopOptions {
+    onOutcome?: (o: ConvergeOutcome) => void;
+    failureBound?: number;
+    log?: (msg: string) => void;
+}
+export declare class ReconcileLoop {
+    private readonly deps;
+    private readonly opts;
+    private consecutiveFailures;
+    /** the managed desired-set actuated in a prior pass that had NOT converged; a later
+     *  pass still-pending on the SAME set = a cross-pass stall (counts); a first
+     *  divergence = a within-pass pending (tolerated, not counted). */
+    private pendingSince;
+    private readonly failureBound;
+    private readonly log;
+    constructor(deps: ReconcileCollaborators, opts?: ReconcileLoopOptions);
+    getConsecutiveFailures(): number;
+    sync(reason: string): ConvergeOutcome;
+    private fail;
+    private emit;
+}

package/dist/control-plane/reconcile-loop.js

@@ -0,0 +1,83 @@
+export class ReconcileLoop {
+    deps;
+    opts;
+    consecutiveFailures = 0;
+    /** the managed desired-set actuated in a prior pass that had NOT converged; a later
+     *  pass still-pending on the SAME set = a cross-pass stall (counts); a first
+     *  divergence = a within-pass pending (tolerated, not counted). */
+    pendingSince = null;
+    failureBound;
+    log;
+    constructor(deps, opts = {}) {
+        this.deps = deps;
+        this.opts = opts;
+        this.failureBound = opts.failureBound ?? 3;
+        this.log = opts.log ?? (() => { });
+    }
+    getConsecutiveFailures() {
+        return this.consecutiveFailures;
+    }
+    sync(reason) {
+        const desired = this.deps.store.list();
+        // The actuator actuates + observes its own managed surface (a fresh read — F1) and
+        // reports a tri-state; it NEVER throws for an actuation fault (returns "failed").
+        const result = this.deps.actuator.converge(desired);
+        if (result.status === "failed") {
+            // a genuine actuation fault (registration reject, setActive throw) — counts NOW.
+            this.pendingSince = null;
+            return this.fail(reason, result.klass ?? "actuate-failed", result.detail);
+        }
+        if (result.status === "converged") {
+            this.consecutiveFailures = 0;
+            this.pendingSince = null;
+            return this.emit({ reason, converged: true, consecutiveFailures: 0 });
+        }
+        // status === "pending": actuated, managed surface not yet reflecting it.
+        const crossPass = this.pendingSince !== null &&
+            sameSet(this.pendingSince, result.desiredManaged);
+        this.pendingSince = [...result.desiredManaged];
+        if (crossPass) {
+            // same managed set reported pending again on a LATER pass, still not observable
+            // = genuinely not converging → count + escalate at the bound (termination guard).
+            return this.fail(reason, "still-diverged", "managed set still pending across a converge pass");
+        }
+        // within-pass deferral — TOLERATED, NOT counted (design v2 §2; lily ruling (a)).
+        this.log(`[hcap-reconcile] ${reason}: pending (managed actuation accepted, effect not yet observed) — not counted`);
+        return this.emit({
+            reason,
+            converged: false,
+            pending: true,
+            klass: "still-diverged",
+            consecutiveFailures: this.consecutiveFailures,
+        });
+    }
+    fail(reason, klass, detail) {
+        this.consecutiveFailures += 1;
+        this.log(`[hcap-reconcile] ${reason}: NOT converged (${klass}${detail ? `: ${detail}` : ""}) — consecutive=${this.consecutiveFailures}`);
+        if (this.consecutiveFailures >= this.failureBound) {
+            this.log(`[hcap-reconcile] ${reason}: ESCALATION — ${this.consecutiveFailures} consecutive cross-pass/failed converges (>= ${this.failureBound}, ${klass}); surface cannot converge, operator/architect intervention required`);
+        }
+        return this.emit({
+            reason,
+            converged: false,
+            klass,
+            detail,
+            consecutiveFailures: this.consecutiveFailures,
+        });
+    }
+    emit(o) {
+        this.opts.onOutcome?.(o);
+        return o;
+    }
+}
+/** Order-independent set equality over string name lists. */
+function sameSet(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const sa = new Set(a);
+    for (const x of b)
+        if (!sa.has(x))
+            return false;
+    return true;
+}
+//# sourceMappingURL=reconcile-loop.js.map

package/dist/control-plane/reconcile-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-loop.js","sourceRoot":"","sources":["../../src/control-plane/reconcile-loop.ts"],"names":[],"mappings":"AAuCA,MAAM,OAAO,aAAa;IAUL;IACA;IAVX,mBAAmB,GAAG,CAAC,CAAC;IAChC;;uEAEmE;IAC3D,YAAY,GAAoB,IAAI,CAAC;IAC5B,YAAY,CAAS;IACrB,GAAG,CAAwB;IAE5C,YACmB,IAA4B,EAC5B,OAA6B,EAAE;QAD/B,SAAI,GAAJ,IAAI,CAAwB;QAC5B,SAAI,GAAJ,IAAI,CAA2B;QAEhD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,sBAAsB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,mFAAmF;QACnF,kFAAkF;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,iFAAiF;YACjF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,yEAAyE;QACzE,MAAM,SAAS,GACb,IAAI,CAAC,YAAY,KAAK,IAAI;YAC1B,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAE/C,IAAI,SAAS,EAAE,CAAC;YACd,gFAAgF;YAChF,kFAAkF;YAClF,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,gBAAgB,EAChB,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,iFAAiF;QACjF,IAAI,CAAC,GAAG,CACN,oBAAoB,MAAM,+EAA+E,CAC1G,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC;YACf,MAAM;YACN,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,gBAAgB;YACvB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CACV,MAAc,EACd,KAA4C,EAC5C,MAAe;QAEf,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CACN,oBAAoB,MAAM,oBAAoB,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,IAAI,CAAC,mBAAmB,EAAE,CAC/H,CAAC;QACF,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CACN,oBAAoB,MAAM,kBAAkB,IAAI,CAAC,mBAAmB,gDAAgD,IAAI,CAAC,YAAY,KAAK,KAAK,sEAAsE,CACtN,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;YACf,MAAM;YACN,SAAS,EAAE,KAAK;YAChB,KAAK;YACL,MAAM;YACN,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,CAAkB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AAED,6DAA6D;AAC7D,SAAS,OAAO,CAAC,CAAoB,EAAE,CAAoB;IACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/control-plane/spec-store.d.ts

@@ -0,0 +1,29 @@
+/**
+ * control-plane/spec-store.ts — U1 SpecStore (resource-generic; hcapskills0
+ * build_core). Custody of the declared `ResourceSpec[]`: the SOLE writer + the SOLE
+ * authority for enabled-vs-removed truth (a host's introspection cannot distinguish
+ * declared-inactive from removed). Neutral — imports zero host types. A verbatim
+ * generalization (tool→resource) of the mission-107 pi SpecStore.
+ *
+ * KF4 — owns the persistence SEAM. Slice-1 uses the in-memory no-op; the disk impl
+ * is deferred (Earned-Exposure). The cold-start rehydrate lives here so the held
+ * spec surviving independent of any controller has a home in U1.
+ */
+import type { ResourceSpec, ResourceSpecStorePort, SpecPersistencePort } from "./contracts.js";
+/** The Slice-1 in-memory no-op impl behind the KF4 persistence seam. */
+export declare class InMemorySpecPersistence implements SpecPersistencePort {
+    load(): ResourceSpec[] | null;
+    save(_spec: readonly ResourceSpec[]): void;
+}
+export declare class SpecStore implements ResourceSpecStorePort {
+    private readonly persistence;
+    /** the declared spec, keyed by name; the array view preserves insertion order. */
+    private byName;
+    constructor(persistence?: SpecPersistencePort);
+    list(): readonly ResourceSpec[];
+    get(name: string): ResourceSpec | undefined;
+    /** AUTHORITATIVE REPLACE of the whole declared set — absent names ⇒ removed. */
+    apply(spec: readonly ResourceSpec[]): void;
+    create(spec: ResourceSpec): void;
+    destroy(name: string): void;
+}

package/dist/control-plane/spec-store.js

@@ -0,0 +1,41 @@
+/** The Slice-1 in-memory no-op impl behind the KF4 persistence seam. */
+export class InMemorySpecPersistence {
+    load() {
+        return null;
+    }
+    save(_spec) {
+        /* no-op — the disk-backed impl is a deferred Earned-Exposure item. */
+    }
+}
+export class SpecStore {
+    persistence;
+    /** the declared spec, keyed by name; the array view preserves insertion order. */
+    byName = new Map();
+    constructor(persistence = new InMemorySpecPersistence()) {
+        this.persistence = persistence;
+        const loaded = this.persistence.load();
+        if (loaded)
+            for (const s of loaded)
+                this.byName.set(s.name, s);
+    }
+    list() {
+        return [...this.byName.values()];
+    }
+    get(name) {
+        return this.byName.get(name);
+    }
+    /** AUTHORITATIVE REPLACE of the whole declared set — absent names ⇒ removed. */
+    apply(spec) {
+        this.byName = new Map(spec.map((s) => [s.name, s]));
+        this.persistence.save(this.list());
+    }
+    create(spec) {
+        this.byName.set(spec.name, spec);
+        this.persistence.save(this.list());
+    }
+    destroy(name) {
+        this.byName.delete(name);
+        this.persistence.save(this.list());
+    }
+}
+//# sourceMappingURL=spec-store.js.map

package/dist/control-plane/spec-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-store.js","sourceRoot":"","sources":["../../src/control-plane/spec-store.ts"],"names":[],"mappings":"AAiBA,wEAAwE;AACxE,MAAM,OAAO,uBAAuB;IAClC,IAAI;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAA8B;QACjC,sEAAsE;IACxE,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAKD;IAJnB,kFAAkF;IAC1E,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEjD,YACmB,cAAmC,IAAI,uBAAuB,EAAE;QAAhE,gBAAW,GAAX,WAAW,CAAqD;QAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,MAAM;YAAE,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,IAA6B;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,IAAkB;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/index.d.ts

@@ -30,8 +30,8 @@ export type { LivenessLostSignalPayload } from "./kernel/liveness-signal.js";
 export { parseHarnessManifest, loadHarnessManifest, serverCapabilitiesFromManifest, } from "./kernel/harness-manifest.js";
 export type { HarnessManifest, HarnessCapability } from "./kernel/harness-manifest.js";
 export type { ToolDescriptor, ToolDispatchCallOptions, ToolDispatchResult, IToolDispatchAgent, IToolManager, } from "./tool-manager/contracts.js";
-export { runToolDispatch } from "./tool-manager/dispatch/dispatch.js";
-export type { ToolDispatchContext, McpToolCallResult, } from "./tool-manager/dispatch/dispatch.js";
+export { runToolDispatch, DEFAULT_TRANSIENT_DROP_RETRY, } from "./tool-manager/dispatch/dispatch.js";
+export type { ToolDispatchContext, McpToolCallResult, TransientDropRetryConfig, } from "./tool-manager/dispatch/dispatch.js";
 export { createSharedDispatcher, pendingKey, injectQueueItemId, assertHostWiringComplete, } from "./tool-manager/orchestrator/dispatcher.js";
 export type { DispatcherClientInfo, DispatcherNotificationHooks, SharedDispatcherOptions, SharedDispatcher, } from "./tool-manager/orchestrator/dispatcher.js";
 export { CATALOG_SCHEMA_VERSION, cachePathFor, readCache, writeCache, isCacheValid, } from "./tool-manager/catalog/tool-catalog-cache.js";
@@ -52,3 +52,4 @@ export { appendNotification, buildPendingTaskNotification } from "./notification
 export type { NotificationLogEntry, NotificationLogOptions, } from "./notification-log.js";
 export { CognitivePipeline, CognitiveTelemetry, CircuitBreaker, HubUnavailableError, WriteCallDedup, DedupTimeoutError, ToolResultCache, FlushAllOnWriteStrategy, ToolDescriptionEnricher, ErrorNormalizer, NormalizedError, ResponseSummarizer, summarizeResult, buildPaginationHint, } from "@apnex/cognitive-layer";
 export type { CognitiveMiddleware, ToolCallContext, ListToolsContext, ToolErrorContext, Tool as CognitiveTool, StandardPipelineConfig, CognitiveTelemetryConfig, TelemetryEvent, TelemetryEventKind, CircuitBreakerConfig, CircuitState, CircuitStateChange, WriteCallDedupConfig, ToolResultCacheConfig, InvalidationStrategy, InvalidationDirective, CacheKey, ToolDescriptionEnricherConfig, ToolHints, ErrorNormalizerConfig, ErrorRule, CascadeDriftRule, ResponseSummarizerConfig, } from "@apnex/cognitive-layer";
+export * from "./control-plane/index.js";