@ashlr/hub 2.2.0

package/bin/ashlr

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+// Thin shim: delegate to the compiled CLI entrypoint.
+// Resolve relative to this file so the symlink in ~/.local/bin works.
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+
+const here = dirname(fileURLToPath(import.meta.url));
+import(resolve(here, '../dist/cli/index.js'));

package/dist/api/core.d.ts

@@ -0,0 +1,28 @@
+/**
+ * api/core.ts — the PUBLIC programmatic surface of @ashlr/hub (M33).
+ *
+ * Curated, read-heavy re-exports so other tools can build on ashlr's local
+ * stores without shelling out to the CLI. Everything here follows the same
+ * safety rules as the CLI: reads are free; the only mutation exposed is the
+ * inbox proposal path (pending, human-gated) — applyProposal is deliberately
+ * NOT exported.
+ */
+export { loadConfig, saveConfig, defaultConfig, CONFIG_PATH } from '../core/config.js';
+export { loadIndex } from '../core/index-engine.js';
+export { buildOrientation } from '../core/orient.js';
+export { recall } from '../core/genome/recall.js';
+export { loadGenome, appendHubEntry } from '../core/genome/store.js';
+export { loadBacklog } from '../core/portfolio/backlog.js';
+export { loadPreviousReport, listReports } from '../core/quality/store.js';
+export { ask } from '../core/knowledge/ask.js';
+export { impact, buildGraph } from '../core/knowledge/graph.js';
+export { listRuns, loadRun } from '../core/run/orchestrator.js';
+export { listSwarms, loadSwarm } from '../core/swarm/store.js';
+export { estimateRun, estimateSwarm } from '../core/observability/estimate.js';
+export { buildRollup } from '../core/observability/rollup.js';
+export { listProposals, loadProposal, createProposal, pendingCount } from '../core/inbox/store.js';
+export { readAudit } from '../core/sandbox/audit.js';
+export { getProviderRegistry } from '../core/providers.js';
+export { buildSeamRegistry } from '../core/seams/registry.js';
+export { nativeToolDefs, listNativeTools, isNativeTool, callNativeTool } from '../core/mcp-native.js';
+export { buildSnapshot } from '../core/dashboard.js';

package/dist/api/core.js

@@ -0,0 +1,42 @@
+/**
+ * api/core.ts — the PUBLIC programmatic surface of @ashlr/hub (M33).
+ *
+ * Curated, read-heavy re-exports so other tools can build on ashlr's local
+ * stores without shelling out to the CLI. Everything here follows the same
+ * safety rules as the CLI: reads are free; the only mutation exposed is the
+ * inbox proposal path (pending, human-gated) — applyProposal is deliberately
+ * NOT exported.
+ */
+// Config (read + write of ~/.ashlr/config.json with validation)
+export { loadConfig, saveConfig, defaultConfig, CONFIG_PATH } from '../core/config.js';
+// Desktop index (read-only)
+export { loadIndex } from '../core/index-engine.js';
+// Orientation — the composite session-start context (M31)
+export { buildOrientation } from '../core/orient.js';
+// Genome memory
+export { recall } from '../core/genome/recall.js';
+export { loadGenome, appendHubEntry } from '../core/genome/store.js';
+// Portfolio intelligence (read-only)
+export { loadBacklog } from '../core/portfolio/backlog.js';
+export { loadPreviousReport, listReports } from '../core/quality/store.js';
+export { ask } from '../core/knowledge/ask.js';
+export { impact, buildGraph } from '../core/knowledge/graph.js';
+// Runs + swarms (read-only history)
+export { listRuns, loadRun } from '../core/run/orchestrator.js';
+export { listSwarms, loadSwarm } from '../core/swarm/store.js';
+// Pre-flight estimation (M32)
+export { estimateRun, estimateSwarm } from '../core/observability/estimate.js';
+export { buildRollup } from '../core/observability/rollup.js';
+// Approval inbox — list/load + CREATE (pending only). Approval/apply is
+// deliberately NOT exported: that path stays human-gated via the CLI/web.
+export { listProposals, loadProposal, createProposal, pendingCount } from '../core/inbox/store.js';
+// Audit trail (read-only)
+export { readAudit } from '../core/sandbox/audit.js';
+// Providers + seams (read-only diagnostics)
+export { getProviderRegistry } from '../core/providers.js';
+export { buildSeamRegistry } from '../core/seams/registry.js';
+// Native MCP tool registry (M31) — for hosts embedding ashlr's agent tools
+export { nativeToolDefs, listNativeTools, isNativeTool, callNativeTool } from '../core/mcp-native.js';
+// Dashboard snapshot (read-only aggregate)
+export { buildSnapshot } from '../core/dashboard.js';
+//# sourceMappingURL=core.js.map

package/dist/api/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/api/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,gEAAgE;AAChE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEvF,4BAA4B;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,0DAA0D;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,gBAAgB;AAChB,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAErE,qCAAqC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEhE,oCAAoC;AACpC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAE/D,8BAA8B;AAC9B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAE9D,wEAAwE;AACxE,0EAA0E;AAC1E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEnG,0BAA0B;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,4CAA4C;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,2EAA2E;AAC3E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEtG,2CAA2C;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * api/index.ts — the root entry of @ashlr/hub (M33).
+ *
+ * `import { loadConfig, recall, … } from '@ashlr/hub'` — the curated core
+ * surface plus the public types. Plugin authors import from
+ * '@ashlr/hub/plugin' instead (see ./plugin.ts).
+ */
+export * from './core.js';
+export type * from './types.js';

package/dist/api/index.js

@@ -0,0 +1,9 @@
+/**
+ * api/index.ts — the root entry of @ashlr/hub (M33).
+ *
+ * `import { loadConfig, recall, … } from '@ashlr/hub'` — the curated core
+ * surface plus the public types. Plugin authors import from
+ * '@ashlr/hub/plugin' instead (see ./plugin.ts).
+ */
+export * from './core.js';
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC"}

package/dist/api/plugin.d.ts

@@ -0,0 +1,12 @@
+/**
+ * api/plugin.ts — the PUBLIC plugin-system surface of @ashlr/hub (M33).
+ *
+ * Curated re-exports for plugin authors:
+ *   import type { PluginManifest, AshlrPlugin, ... } from '@ashlr/hub/plugin';
+ *   import { definePlugin, PLUGIN_API_VERSION } from '@ashlr/hub/plugin';
+ *
+ * Internals (registry, host-api, wrappers, manifest reader) stay unexported —
+ * add exports deliberately, never wholesale.
+ */
+export { PLUGIN_API_VERSION, definePlugin, } from '../core/plugins/types.js';
+export type { PluginCapability, PluginManifest, PluginHost, PluginScanner, PluginProviderSpec, PluginCommandSpec, PluginContributions, AshlrPlugin, } from '../core/plugins/types.js';

package/dist/api/plugin.js

@@ -0,0 +1,13 @@
+/**
+ * api/plugin.ts — the PUBLIC plugin-system surface of @ashlr/hub (M33).
+ *
+ * Curated re-exports for plugin authors:
+ *   import type { PluginManifest, AshlrPlugin, ... } from '@ashlr/hub/plugin';
+ *   import { definePlugin, PLUGIN_API_VERSION } from '@ashlr/hub/plugin';
+ *
+ * Internals (registry, host-api, wrappers, manifest reader) stay unexported —
+ * add exports deliberately, never wholesale.
+ */
+// Types + identity helper for plugin authors.
+export { PLUGIN_API_VERSION, definePlugin, } from '../core/plugins/types.js';
+//# sourceMappingURL=plugin.js.map

package/dist/api/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/api/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,8CAA8C;AAC9C,OAAO,EACL,kBAAkB,EAClB,YAAY,GACb,MAAM,0BAA0B,CAAC"}

package/dist/api/types.d.ts

@@ -0,0 +1,9 @@
+/**
+ * api/types.ts — the PUBLIC type surface of @ashlr/hub (M33).
+ *
+ * Curated re-exports only: everything here is part of the published contract
+ * (`import type { … } from '@ashlr/hub/types'`). Internals stay unexported —
+ * add types deliberately, never wholesale.
+ */
+export type { AshlrConfig, AshlrIndex, IndexedItem, ItemKind, GitStatus, RunState, RunTask, RunUsage, RunBudget, RunOptions, RunEstimate, PercentileTriple, SwarmRun, SwarmPlan, GenomeEntry, RecallHit, LearnInput, Backlog, WorkItem, WorkSource, HealthScore, HealthReport, HealthDimensionScore, AskResult, ImpactResult, KnowledgeGraph, Proposal, ProposalKind, ProposalStatus, ApplyResult, AuditEntry, ActivityRollup, DashboardSnapshot, WebServerOptions, OrientResult, NativeToolDef, NativeToolSafety, NotifyTarget, } from '../core/types.js';
+export type { SeamId, SeamImpl, SeamCloud, SeamStatus, SeamRegistry, } from '../core/seams/types.js';

package/dist/api/types.js

@@ -0,0 +1,9 @@
+/**
+ * api/types.ts — the PUBLIC type surface of @ashlr/hub (M33).
+ *
+ * Curated re-exports only: everything here is part of the published contract
+ * (`import type { … } from '@ashlr/hub/types'`). Internals stay unexported —
+ * add types deliberately, never wholesale.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/api/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/api/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/cli/args.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared CLI argument-parsing helpers.
+ *
+ * Extracted from the per-command parsers where the same validated-flag idioms
+ * were repeated. These are pure validators — callers keep their own loop and
+ * index handling, so control flow is unchanged.
+ */
+/**
+ * Validate a flag value as a positive integer.
+ *
+ * Returns `{ n }` on success or `{ error }` with the canonical message
+ * (`--<name> requires a positive integer, got: <raw|(missing)>`) on failure.
+ * Mirrors the inline `parseInt(...,10)` + `isNaN || <= 0` checks the command
+ * parsers used, including the `(missing)` placeholder for an absent value.
+ */
+export declare function parsePositiveInt(name: string, raw: string | undefined): {
+    n: number;
+} | {
+    error: string;
+};

package/dist/cli/args.js

@@ -0,0 +1,23 @@
+/**
+ * Shared CLI argument-parsing helpers.
+ *
+ * Extracted from the per-command parsers where the same validated-flag idioms
+ * were repeated. These are pure validators — callers keep their own loop and
+ * index handling, so control flow is unchanged.
+ */
+/**
+ * Validate a flag value as a positive integer.
+ *
+ * Returns `{ n }` on success or `{ error }` with the canonical message
+ * (`--<name> requires a positive integer, got: <raw|(missing)>`) on failure.
+ * Mirrors the inline `parseInt(...,10)` + `isNaN || <= 0` checks the command
+ * parsers used, including the `(missing)` placeholder for an absent value.
+ */
+export function parsePositiveInt(name, raw) {
+    const n = raw !== undefined ? parseInt(raw, 10) : NaN;
+    if (isNaN(n) || n <= 0) {
+        return { error: `--${name} requires a positive integer, got: ${raw ?? '(missing)'}` };
+    }
+    return { n };
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,GAAuB;IAEvB,MAAM,CAAC,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,sCAAsC,GAAG,IAAI,WAAW,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC;AACf,CAAC"}

package/dist/cli/ask.d.ts

@@ -0,0 +1,22 @@
+/**
+ * CLI handler for `ashlr ask "<question>"`.
+ *
+ * Performs LOCAL RAG across the indexed portfolio and prints the synthesized
+ * answer with cited sources. All code stays on-machine by default — cloud is
+ * NEVER used unless --allow-cloud is explicitly passed AND a key exists.
+ *
+ * Usage:
+ *   ashlr ask "<question>" [--repo <path>] [--allow-cloud] [--json]
+ *
+ * Exit codes: 0 success, 1 error, 2 bad usage.
+ */
+/**
+ * `ashlr ask "<question>" [--repo <path>] [--allow-cloud] [--json]`
+ *
+ * LOCAL RAG over the indexed portfolio. Default path: local model only, all
+ * code stays on-machine. --allow-cloud opts into cloud synthesis (prints a
+ * clear warning before sending code off-machine).
+ *
+ * Exit codes: 0 success, 1 runtime error, 2 bad usage.
+ */
+export declare function cmdAsk(args: string[]): Promise<number>;

package/dist/cli/ask.js

@@ -0,0 +1,240 @@
+/**
+ * CLI handler for `ashlr ask "<question>"`.
+ *
+ * Performs LOCAL RAG across the indexed portfolio and prints the synthesized
+ * answer with cited sources. All code stays on-machine by default — cloud is
+ * NEVER used unless --allow-cloud is explicitly passed AND a key exists.
+ *
+ * Usage:
+ *   ashlr ask "<question>" [--repo <path>] [--allow-cloud] [--json]
+ *
+ * Exit codes: 0 success, 1 error, 2 bad usage.
+ */
+import path from 'node:path';
+import { pad, makeColors, isTty } from './ui.js';
+import { isEnrolled } from '../core/sandbox/policy.js';
+let _ask = undefined;
+async function importAsk() {
+    if (_ask === undefined) {
+        try {
+            const mod = (await import('../core/knowledge/ask.js'));
+            _ask = mod.ask;
+        }
+        catch {
+            _ask = null;
+        }
+    }
+    return _ask ?? null;
+}
+function parseAskArgs(args) {
+    let question;
+    let repo;
+    let allowCloud = false;
+    let json = false;
+    let help = false;
+    let error;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === '--help' || a === '-h') {
+            help = true;
+        }
+        else if (a === '--allow-cloud') {
+            allowCloud = true;
+        }
+        else if (a === '--json') {
+            json = true;
+        }
+        else if (a === '--repo') {
+            const next = args[++i];
+            if (!next || next.startsWith('--')) {
+                error = '--repo requires a path argument';
+                break;
+            }
+            repo = next;
+        }
+        else if (!a.startsWith('--')) {
+            // Positional: the question
+            if (question === undefined) {
+                question = a;
+            }
+            else {
+                // Multiple positional args — join them as the question
+                question = question + ' ' + a;
+            }
+        }
+        else {
+            error = `Unknown flag: ${a}`;
+            break;
+        }
+    }
+    if (!error && !help && !question) {
+        error = 'A question is required. Usage: ashlr ask "<question>"';
+    }
+    return { question: question ?? '', repo, allowCloud, json, help, error };
+}
+// ─── Help ─────────────────────────────────────────────────────────────────────
+function printHelp() {
+    const tty = isTty();
+    const { bold, cyan, dim, gray } = makeColors(tty);
+    const out = (s = '') => process.stdout.write(s + '\n');
+    out('');
+    out(bold('  ashlr ask') + dim(' — LOCAL RAG across the indexed portfolio'));
+    out('');
+    out('  ' + bold('Usage:'));
+    out(`    ${cyan('ashlr ask "<question>"')} [--repo <path>] [--allow-cloud] [--json]`);
+    out('');
+    out('  ' + bold('Options:'));
+    const opts = [
+        ['--repo <path>', 'Scope the search to a single enrolled repo (absolute path).'],
+        ['--allow-cloud', 'Allow cloud model for synthesis if local is unavailable. SENDS CODE TO CLOUD.'],
+        ['--json', 'Emit AskResult as JSON on stdout instead of human-readable output.'],
+        ['--help', 'Show this help.'],
+    ];
+    const w = Math.max(...opts.map(([f]) => f.length));
+    for (const [flag, desc] of opts) {
+        out(`    ${cyan(pad(flag, w))}  ${desc}`);
+    }
+    out('');
+    out('  ' + bold('Examples:'));
+    out(`    ${cyan('ashlr ask "how does the orchestrator handle retries"')}`);
+    out(`    ${cyan('ashlr ask "what deps are shared across repos"')}`);
+    out(`    ${cyan('ashlr ask "where is auth logic" --repo ~/projects/my-app')}`);
+    out(`    ${cyan('ashlr ask "summarize the run pipeline" --json')}`);
+    out('');
+    out('  ' + gray('Run `ashlr knowledge build` first to index enrolled repos.'));
+    out('');
+}
+// ─── Human-readable output ───────────────────────────────────────────────────
+function printAskHuman(result) {
+    const tty = isTty();
+    const { bold, cyan, dim, green, yellow, gray } = makeColors(tty);
+    const out = (s = '') => process.stdout.write(s + '\n');
+    out('');
+    out(bold('  Answer') + gray(` [${result.method} · ${result.local ? 'local' : 'cloud'}]`));
+    out('');
+    // Indent the answer body
+    const lines = result.answer.split('\n');
+    for (const line of lines) {
+        out('  ' + line);
+    }
+    out('');
+    if (result.sources.length === 0) {
+        out(dim('  (no sources cited)'));
+        out('');
+        return;
+    }
+    out(bold('  Sources:'));
+    const srcW = Math.max(...result.sources.map(s => `${s.repo}:${s.file}`.length), 12);
+    for (const src of result.sources) {
+        const loc = `${src.repo}:${src.file}`;
+        const lineRef = src.line > 0 ? yellow(`L${src.line}`) : dim('—');
+        out(`    ${cyan(pad(loc, srcW))}  ${lineRef}`);
+    }
+    out('');
+    if (!result.local) {
+        out(green('  ') + yellow('Note: answer was synthesized using a CLOUD model (--allow-cloud was set).'));
+        out('');
+    }
+}
+// ─── Main export ─────────────────────────────────────────────────────────────
+/**
+ * `ashlr ask "<question>" [--repo <path>] [--allow-cloud] [--json]`
+ *
+ * LOCAL RAG over the indexed portfolio. Default path: local model only, all
+ * code stays on-machine. --allow-cloud opts into cloud synthesis (prints a
+ * clear warning before sending code off-machine).
+ *
+ * Exit codes: 0 success, 1 runtime error, 2 bad usage.
+ */
+export async function cmdAsk(args) {
+    const parsed = parseAskArgs(args);
+    if (parsed.help) {
+        printHelp();
+        return 0;
+    }
+    if (parsed.error) {
+        process.stderr.write('error: ' + parsed.error + '\n');
+        process.stderr.write('Run `ashlr ask --help` for usage.\n');
+        return 2;
+    }
+    const tty = isTty();
+    const { bold, yellow, red, dim, cyan } = makeColors(tty);
+    // ── ENROLLMENT-SCOPED: reject a non-enrolled --repo before any retrieval ──
+    // (docs/contracts/CONTRACT-M25.md invariant 3: ask is enrolled-repos-only.) Resolve to absolute
+    // and validate; loadChunks would silently return [] otherwise.
+    let scopedRepo = parsed.repo;
+    if (parsed.repo !== undefined) {
+        const abs = path.resolve(parsed.repo);
+        if (!isEnrolled(abs)) {
+            process.stderr.write(red('error: ') +
+                `not enrolled: ${parsed.repo}\n` +
+                '       ask is scoped to enrolled repos. Enroll first: ashlr enroll add <path>\n');
+            return 1;
+        }
+        scopedRepo = abs;
+    }
+    // ── Privacy warning for --allow-cloud ────────────────────────────────────
+    if (parsed.allowCloud && !parsed.json) {
+        process.stderr.write(yellow('warning: ') +
+            '--allow-cloud is set — repository code chunks MAY be sent to a cloud model for synthesis.\n' +
+            '         Omit --allow-cloud to keep all code on-machine (default).\n');
+    }
+    // ── Load the ask module ───────────────────────────────────────────────────
+    const askFn = await importAsk();
+    if (!askFn) {
+        process.stderr.write(red('error: ') +
+            'ask command requires src/core/knowledge/ask.ts (M25 module not yet built).\n');
+        return 1;
+    }
+    // ── Execute ───────────────────────────────────────────────────────────────
+    let result;
+    try {
+        result = await askFn(parsed.question, {
+            repo: scopedRepo,
+            allowCloud: parsed.allowCloud,
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        // Hint when nothing is indexed yet
+        if (msg.toLowerCase().includes('no chunks') ||
+            msg.toLowerCase().includes('not indexed') ||
+            msg.toLowerCase().includes('empty')) {
+            process.stderr.write(red('error: ') + 'No knowledge indexed yet.\n' +
+                dim('  Run ') + cyan('ashlr knowledge build') + dim(' to index enrolled repos first.\n'));
+            return 1;
+        }
+        process.stderr.write(red('error: ') + msg + '\n');
+        return 1;
+    }
+    // ── No chunks found: hint to build ───────────────────────────────────────
+    if (result.sources.length === 0 && !result.answer.trim()) {
+        if (parsed.json) {
+            process.stdout.write(JSON.stringify(result) + '\n');
+        }
+        else {
+            process.stderr.write(dim('No knowledge indexed') +
+                (parsed.repo ? ` for repo: ${parsed.repo}` : '') + '.\n');
+            process.stderr.write(dim('  Run ') + cyan('ashlr knowledge build') +
+                (parsed.repo ? ` --repo ${parsed.repo}` : '') +
+                dim(' to index enrolled repos.\n'));
+        }
+        return 1;
+    }
+    // ── Output ────────────────────────────────────────────────────────────────
+    if (parsed.json) {
+        process.stdout.write(JSON.stringify(result) + '\n');
+    }
+    else {
+        // Hint when nothing is indexed but the module returned something
+        if (result.sources.length === 0) {
+            process.stderr.write(bold('Hint: ') +
+                dim('no sources found — run ') +
+                cyan('ashlr knowledge build') +
+                dim(' to index enrolled repos.\n'));
+        }
+        printAskHuman(result);
+    }
+    return 0;
+}
+//# sourceMappingURL=ask.js.map

package/dist/cli/ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.js","sourceRoot":"","sources":["../../src/cli/ask.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AASvD,IAAI,IAAI,GAA6B,SAAS,CAAC;AAE/C,KAAK,UAAU,SAAS;IACtB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAmB,CAAC;YACzE,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAaD,SAAS,YAAY,CAAC,IAAc;IAClC,IAAI,QAA4B,CAAC;IACjC,IAAI,IAAwB,CAAC;IAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAyB,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;YACjC,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,KAAK,GAAG,iCAAiC,CAAC;gBAC1C,MAAM;YACR,CAAC;YACD,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,2BAA2B;YAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,uDAAuD;gBACvD,QAAQ,GAAG,QAAQ,GAAG,GAAG,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,iBAAiB,CAAC,EAAE,CAAC;YAC7B,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,KAAK,GAAG,uDAAuD,CAAC;IAClE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEvD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;IAC5E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,OAAO,IAAI,CAAC,wBAAwB,CAAC,2CAA2C,CAAC,CAAC;IACtF,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7B,MAAM,IAAI,GAAuB;QAC/B,CAAC,eAAe,EAAE,6DAA6D,CAAC;QAChF,CAAC,eAAe,EAAE,+EAA+E,CAAC;QAClG,CAAC,QAAQ,EAAS,oEAAoE,CAAC;QACvF,CAAC,QAAQ,EAAS,iBAAiB,CAAC;KACrC,CAAC;IACF,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,OAAO,IAAI,CAAC,sDAAsD,CAAC,EAAE,CAAC,CAAC;IAC3E,GAAG,CAAC,OAAO,IAAI,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,OAAO,IAAI,CAAC,0DAA0D,CAAC,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,OAAO,IAAI,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,4DAA4D,CAAC,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,gFAAgF;AAEhF,SAAS,aAAa,CAAC,MAA4C;IACjE,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEvD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,yBAAyB;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EACxD,EAAE,CACH,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,2EAA2E,CAAC,CAAC,CAAC;QACvG,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzD,6EAA6E;IAC7E,gGAAgG;IAChG,+DAA+D;IAC/D,IAAI,UAAU,GAAuB,MAAM,CAAC,IAAI,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,SAAS,CAAC;gBACd,iBAAiB,MAAM,CAAC,IAAI,IAAI;gBAChC,iFAAiF,CAClF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,WAAW,CAAC;YACnB,6FAA6F;YAC7F,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,SAAS,CAAC;YACd,8EAA8E,CAC/E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6EAA6E;IAC7E,IAAI,MAA4C,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;YACpC,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE7D,mCAAmC;QACnC,IACE,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YACvC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;YACzC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,SAAS,CAAC,GAAG,6BAA6B;gBAC9C,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC,mCAAmC,CAAC,CACzF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,sBAAsB,CAAC;gBAC3B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CACzD,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC;gBAC7C,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,6BAA6B,CAAC,CACnC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6EAA6E;IAC7E,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,iEAAiE;QACjE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,QAAQ,CAAC;gBACd,GAAG,CAAC,yBAAyB,CAAC;gBAC9B,IAAI,CAAC,uBAAuB,CAAC;gBAC7B,GAAG,CAAC,6BAA6B,CAAC,CACnC,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/audit.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `ashlr audit` — READ-ONLY audit-trail viewer (Ashlr v2.1 MILESTONE H6, PART A).
+ *
+ * Tails the append-only JSONL audit trail (newest-first) written by
+ * `core/sandbox/audit.ts`. MUTATES NOTHING. No outward call. No model. The only
+ * thing this command does is READ `~/.ashlr/audit/<date>.jsonl` via `readAudit()`
+ * and print / filter it — see docs/contracts/CONTRACT-H6.md §A.3.
+ *
+ * H6 MOVES the viewer here from `cli/sandbox.ts` (where a minimal `cmdAudit`
+ * lived) and EXTENDS it with `--action` / `--result` / `--since` filters. The
+ * dispatcher's `loadAuditCmd` (src/cli/index.ts) is re-pointed at this module;
+ * the old `cmdAudit`/`formatAuditEntry`/`loadAuditModule` block in
+ * `cli/sandbox.ts` is removed in the implementation step.
+ *
+ * Flags (ALL read-only):
+ *   --limit N | -n N | N   Cap to the newest N records (applied AFTER filters).
+ *   --json                 Emit the records as a JSON array.
+ *   --action <verb>        Filter by action; `--action enroll` matches `enroll:*`,
+ *                          `--action kill:on` matches exactly.            [H6 NEW]
+ *   --result <ok|refused|error>  Filter by outcome.                        [H6 NEW]
+ *   --since <ISO|YYYY-MM-DD>     Drop records with ts strictly before this. [H6 NEW]
+ *
+ * Returns 0 on success, 2 on bad args (unknown flag / unparseable --since),
+ * 1 when the audit core module is not built.
+ */
+export declare function cmdAudit(args: string[]): Promise<number>;