@ashlr/hub 2.2.0

package/dist/core/seams/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/seams/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}

package/dist/core/seams/portfolio.d.ts

@@ -0,0 +1,50 @@
+/**
+ * core/seams/portfolio.ts — PortfolioSync seam (M30).
+ *
+ * SEAM over core/quality/store.ts (HealthReport snapshots) + core/dashboard.ts
+ * (the portfolio DashboardSnapshot).
+ *
+ *   (a) PortfolioSync        — the interface.
+ *   (b) LocalPortfolioSync   — DEFAULT. Behavior-preserving adapter; delegates
+ *                              1:1. Health snapshots write ONLY under
+ *                              ~/.ashlr/quality/; snapshot build is read-only.
+ *   (c) CloudPortfolioSync   — GATED stub; every method throws before any I/O.
+ *   (d) selectPortfolioSync  — local by default; gated stub ONLY when an
+ *                              endpoint is explicitly configured (still refuses).
+ *
+ * HARD SAFETY: local-first + self-hostable + cloud-gated. No new deps.
+ */
+import type { AshlrConfig, DashboardSnapshot, HealthReport } from '../types.js';
+export declare const PORTFOLIO_SEAM: {
+    id: "portfolio";
+    name: string;
+    delegatesTo: string;
+    summary: string;
+};
+/** Health-snapshot persistence + portfolio dashboard build. */
+export interface PortfolioSync {
+    /** Persist a HealthReport snapshot; returns its path or null on failure. */
+    saveReport(report: HealthReport): string | null;
+    /** List persisted HealthReport snapshots, most-recent first (bounded). */
+    listReports(): HealthReport[];
+    /** Newest snapshot strictly before `before` (for trend deltas), or null. */
+    loadPreviousReport(before?: string): HealthReport | null;
+    /** Build the portfolio dashboard snapshot (read-only aggregation). */
+    buildSnapshot(cfg: AshlrConfig): Promise<DashboardSnapshot>;
+}
+/** DEFAULT local impl — pass-through adapter over the quality store + dashboard. */
+export declare class LocalPortfolioSync implements PortfolioSync {
+    saveReport(report: HealthReport): string | null;
+    listReports(): HealthReport[];
+    loadPreviousReport(before?: string): HealthReport | null;
+    buildSnapshot(cfg: AshlrConfig): Promise<DashboardSnapshot>;
+}
+/** GATED cloud stub — a team-shared portfolio roll-up WOULD live here. Throws first. */
+export declare class CloudPortfolioSync implements PortfolioSync {
+    saveReport(_report: HealthReport): string | null;
+    listReports(): HealthReport[];
+    loadPreviousReport(_before?: string): HealthReport | null;
+    buildSnapshot(_cfg: AshlrConfig): Promise<DashboardSnapshot>;
+}
+/** Local by default; gated stub only when an endpoint is configured (refuses). */
+export declare function selectPortfolioSync(cfg: AshlrConfig): PortfolioSync;

package/dist/core/seams/portfolio.js

@@ -0,0 +1,61 @@
+/**
+ * core/seams/portfolio.ts — PortfolioSync seam (M30).
+ *
+ * SEAM over core/quality/store.ts (HealthReport snapshots) + core/dashboard.ts
+ * (the portfolio DashboardSnapshot).
+ *
+ *   (a) PortfolioSync        — the interface.
+ *   (b) LocalPortfolioSync   — DEFAULT. Behavior-preserving adapter; delegates
+ *                              1:1. Health snapshots write ONLY under
+ *                              ~/.ashlr/quality/; snapshot build is read-only.
+ *   (c) CloudPortfolioSync   — GATED stub; every method throws before any I/O.
+ *   (d) selectPortfolioSync  — local by default; gated stub ONLY when an
+ *                              endpoint is explicitly configured (still refuses).
+ *
+ * HARD SAFETY: local-first + self-hostable + cloud-gated. No new deps.
+ */
+import { listReports, loadPreviousReport, saveReport } from '../quality/store.js';
+import { buildSnapshot } from '../dashboard.js';
+import { seamEndpoint } from './registry.js';
+import { cloudGatedError } from './types.js';
+export const PORTFOLIO_SEAM = {
+    id: 'portfolio',
+    name: 'PortfolioSync',
+    delegatesTo: 'core/quality/store.ts + core/dashboard.ts',
+    summary: 'Portfolio health snapshots (~/.ashlr/quality/) + the org dashboard roll-up (read-only build).',
+};
+/** DEFAULT local impl — pass-through adapter over the quality store + dashboard. */
+export class LocalPortfolioSync {
+    saveReport(report) {
+        return saveReport(report);
+    }
+    listReports() {
+        return listReports();
+    }
+    loadPreviousReport(before) {
+        return loadPreviousReport(before);
+    }
+    buildSnapshot(cfg) {
+        return buildSnapshot(cfg);
+    }
+}
+/** GATED cloud stub — a team-shared portfolio roll-up WOULD live here. Throws first. */
+export class CloudPortfolioSync {
+    saveReport(_report) {
+        throw cloudGatedError(PORTFOLIO_SEAM.name, 'saveReport');
+    }
+    listReports() {
+        throw cloudGatedError(PORTFOLIO_SEAM.name, 'listReports');
+    }
+    loadPreviousReport(_before) {
+        throw cloudGatedError(PORTFOLIO_SEAM.name, 'loadPreviousReport');
+    }
+    buildSnapshot(_cfg) {
+        throw cloudGatedError(PORTFOLIO_SEAM.name, 'buildSnapshot');
+    }
+}
+/** Local by default; gated stub only when an endpoint is configured (refuses). */
+export function selectPortfolioSync(cfg) {
+    return seamEndpoint(cfg, 'portfolio') ? new CloudPortfolioSync() : new LocalPortfolioSync();
+}
+//# sourceMappingURL=portfolio.js.map

package/dist/core/seams/portfolio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portfolio.js","sourceRoot":"","sources":["../../../src/core/seams/portfolio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,WAAoB;IACxB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,2CAA2C;IACxD,OAAO,EAAE,+FAA+F;CACzG,CAAC;AAcF,oFAAoF;AACpF,MAAM,OAAO,kBAAkB;IAC7B,UAAU,CAAC,MAAoB;QAC7B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,WAAW;QACT,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,kBAAkB,CAAC,MAAe;QAChC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,aAAa,CAAC,GAAgB;QAC5B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,OAAO,kBAAkB;IAC7B,UAAU,CAAC,OAAqB;QAC9B,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;IACD,WAAW;QACT,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5D,CAAC;IACD,kBAAkB,CAAC,OAAgB;QACjC,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACnE,CAAC;IACD,aAAa,CAAC,IAAiB;QAC7B,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,OAAO,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC;AAC9F,CAAC"}

package/dist/core/seams/registry.d.ts

@@ -0,0 +1,42 @@
+/**
+ * core/seams/registry.ts — M30 seam registry + endpoint accessor.
+ *
+ * The single place that:
+ *  - reads (defensively) the OPTIONAL per-seam cloud endpoint config, and
+ *  - lists every seam with its active impl ('local') and cloud availability
+ *    (false | 'gated'), feeding the READ-ONLY `ashlr seams` diagnostic.
+ *
+ * HARD SAFETY:
+ *  - READ-ONLY: building the registry triggers NO I/O — it reads only the
+ *    in-memory config and emits metadata. It never instantiates a seam impl,
+ *    never calls a local adapter, and never touches disk/network.
+ *  - NO ACTIVATION PATH: `seamEndpoint()` only reports whether an endpoint
+ *    STRING is present. A present endpoint routes a selector to the GATED stub
+ *    (which throws). There is no value of config that yields a functional cloud
+ *    backbone.
+ *  - NON-REGRESSION: the seam config is read via a cast over an OPTIONAL
+ *    property of AshlrConfig (`seamsConfig()`), so AshlrConfig is unmodified and
+ *    DEFAULT UNSET => local for every seam.
+ */
+import type { AshlrConfig } from '../types.js';
+import type { SeamId, SeamRegistry, SeamsConfig } from './types.js';
+/**
+ * Defensively read the OPTIONAL `seams` config block off AshlrConfig WITHOUT
+ * modifying the AshlrConfig type (NON-REGRESSION). Returns {} when unset, so
+ * every seam DEFAULTS to local.
+ */
+export declare function seamsConfig(cfg: AshlrConfig): SeamsConfig;
+/**
+ * Return the explicitly-configured cloud endpoint for a seam, or null when
+ * unset. A non-null result routes the seam's selector to the GATED stub (which
+ * throws on every method) — it NEVER enables a functional backbone. Only the
+ * seven gated seams can have an endpoint; the reference telemetry seam is
+ * excluded (it has no gated stub here).
+ */
+export declare function seamEndpoint(cfg: AshlrConfig, id: Exclude<SeamId, 'telemetry'>): string | null;
+/**
+ * Build the READ-ONLY seam registry roll-up for `ashlr seams`. Pure: derives
+ * everything from the in-memory config + static descriptors. Triggers NO I/O,
+ * instantiates NO seam impl, and never touches disk/network. NEVER throws.
+ */
+export declare function buildSeamRegistry(cfg: AshlrConfig): SeamRegistry;

package/dist/core/seams/registry.js

@@ -0,0 +1,128 @@
+/**
+ * core/seams/registry.ts — M30 seam registry + endpoint accessor.
+ *
+ * The single place that:
+ *  - reads (defensively) the OPTIONAL per-seam cloud endpoint config, and
+ *  - lists every seam with its active impl ('local') and cloud availability
+ *    (false | 'gated'), feeding the READ-ONLY `ashlr seams` diagnostic.
+ *
+ * HARD SAFETY:
+ *  - READ-ONLY: building the registry triggers NO I/O — it reads only the
+ *    in-memory config and emits metadata. It never instantiates a seam impl,
+ *    never calls a local adapter, and never touches disk/network.
+ *  - NO ACTIVATION PATH: `seamEndpoint()` only reports whether an endpoint
+ *    STRING is present. A present endpoint routes a selector to the GATED stub
+ *    (which throws). There is no value of config that yields a functional cloud
+ *    backbone.
+ *  - NON-REGRESSION: the seam config is read via a cast over an OPTIONAL
+ *    property of AshlrConfig (`seamsConfig()`), so AshlrConfig is unmodified and
+ *    DEFAULT UNSET => local for every seam.
+ */
+import { RUN_SWARM_SEAM } from './run-swarm.js';
+import { BACKLOG_SEAM } from './backlog.js';
+import { INBOX_SEAM } from './inbox.js';
+import { DAEMON_COORDINATOR_SEAM } from './daemon-coordinator.js';
+import { GENOME_SEAM } from './genome.js';
+import { PORTFOLIO_SEAM } from './portfolio.js';
+import { IDENTITY_SEAM } from './identity.js';
+/**
+ * The seam ids that have a GATED cloud stub (so `cloud` reports 'gated'). The
+ * `telemetry` reference seam is intentionally NOT here: its opt-in OtlpHttpSink
+ * is a real local-network sink (M19), not a gated team backbone — its cloud
+ * field is `false`.
+ */
+const GATED_SEAM_IDS = new Set([
+    'runSwarm',
+    'backlog',
+    'inbox',
+    'daemonCoordinator',
+    'genome',
+    'portfolio',
+    'identity',
+]);
+/**
+ * Defensively read the OPTIONAL `seams` config block off AshlrConfig WITHOUT
+ * modifying the AshlrConfig type (NON-REGRESSION). Returns {} when unset, so
+ * every seam DEFAULTS to local.
+ */
+export function seamsConfig(cfg) {
+    const raw = cfg.seams;
+    if (raw !== null && typeof raw === 'object' && !Array.isArray(raw)) {
+        return raw;
+    }
+    return {};
+}
+/**
+ * Return the explicitly-configured cloud endpoint for a seam, or null when
+ * unset. A non-null result routes the seam's selector to the GATED stub (which
+ * throws on every method) — it NEVER enables a functional backbone. Only the
+ * seven gated seams can have an endpoint; the reference telemetry seam is
+ * excluded (it has no gated stub here).
+ */
+export function seamEndpoint(cfg, id) {
+    const sc = seamsConfig(cfg);
+    const entry = sc[id];
+    const endpoint = entry?.endpoint;
+    return typeof endpoint === 'string' && endpoint.trim().length > 0 ? endpoint : null;
+}
+/**
+ * The static seam descriptors, in display order (telemetry cited last).
+ *
+ * Built LAZILY inside a function rather than at module top-level: registry.ts
+ * and the per-seam modules import each other (each seam pulls `seamEndpoint`
+ * from here; here we cite each seam's `*_SEAM` descriptor). Referencing the
+ * imported `*_SEAM` bindings at module-evaluation time is order-dependent under
+ * ESM and can hit a temporal-dead-zone crash when a seam module is the FIRST
+ * entry imported. Deferring the array into a function guarantees every `*_SEAM`
+ * binding is fully initialised before it is read, regardless of import order.
+ */
+function seamDescriptors() {
+    return [
+        RUN_SWARM_SEAM,
+        BACKLOG_SEAM,
+        INBOX_SEAM,
+        DAEMON_COORDINATOR_SEAM,
+        GENOME_SEAM,
+        PORTFOLIO_SEAM,
+        IDENTITY_SEAM,
+        {
+            id: 'telemetry',
+            name: 'TelemetrySink',
+            delegatesTo: 'core/observability/telemetry-sink.ts',
+            summary: 'Reference seam (M19): LocalFileSink default + opt-in OTLP sink. Cited, not rewritten.',
+        },
+    ];
+}
+/**
+ * Build the READ-ONLY seam registry roll-up for `ashlr seams`. Pure: derives
+ * everything from the in-memory config + static descriptors. Triggers NO I/O,
+ * instantiates NO seam impl, and never touches disk/network. NEVER throws.
+ */
+export function buildSeamRegistry(cfg) {
+    const seams = seamDescriptors().map((d) => {
+        const cloud = GATED_SEAM_IDS.has(d.id) ? 'gated' : false;
+        // Only the gated seams can have an endpoint; telemetry never routes here.
+        const endpointConfigured = d.id !== 'telemetry' && seamEndpoint(cfg, d.id) !== null;
+        // active is 'gated' ONLY when a cloud endpoint is explicitly configured for
+        // a gated seam — and that impl refuses. Otherwise ALWAYS 'local'.
+        const active = endpointConfigured ? 'gated' : 'local';
+        return {
+            id: d.id,
+            name: d.name,
+            active,
+            cloud,
+            endpointConfigured,
+            delegatesTo: d.delegatesTo,
+            summary: d.summary,
+        };
+    });
+    const gatedConfigured = seams.filter((s) => s.endpointConfigured).length;
+    const allLocal = seams.every((s) => s.active === 'local');
+    return {
+        generatedAt: new Date().toISOString(),
+        seams,
+        allLocal,
+        gatedConfigured,
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/seams/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/core/seams/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAS;IAC1D,UAAU;IACV,SAAS;IACT,OAAO;IACP,mBAAmB;IACnB,QAAQ;IACR,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAgB;IAC1C,MAAM,GAAG,GAAI,GAA2B,CAAC,KAAK,CAAC;IAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,GAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAgB,EAAE,EAAgC;IAC7E,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,CAAC;IACjC,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAUD;;;;;;;;;;GAUG;AACH,SAAS,eAAe;IACtB,OAAO;QACL,cAAc;QACd,YAAY;QACZ,UAAU;QACV,uBAAuB;QACvB,WAAW;QACX,cAAc;QACd,aAAa;QACb;YACE,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,sCAAsC;YACnD,OAAO,EAAE,uFAAuF;SACjG;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAgB;IAChD,MAAM,KAAK,GAAiB,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,KAAe,CAAC;QAC/E,0EAA0E;QAC1E,MAAM,kBAAkB,GACtB,CAAC,CAAC,EAAE,KAAK,WAAW,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAkC,CAAC,KAAK,IAAI,CAAC;QAC3F,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,OAAiB,CAAC;QAC5E,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM;YACN,KAAK;YACL,kBAAkB;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAE1D,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;QACL,QAAQ;QACR,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/core/seams/run-swarm.d.ts

@@ -0,0 +1,66 @@
+/**
+ * core/seams/run-swarm.ts — RunSwarmStore seam (M30).
+ *
+ * SEAM over core/swarm/store.ts (listSwarms / loadSwarm / saveSwarm).
+ *
+ * Shape (mirrors the canonical telemetry-sink seam):
+ *   (a) RunSwarmStore        — the interface.
+ *   (b) LocalRunSwarmStore   — DEFAULT. A thin, behavior-preserving adapter that
+ *                              delegates 1:1 to the existing exported functions.
+ *                              ZERO behavior change, identical signatures.
+ *   (c) CloudRunSwarmStore   — GATED stub. Every method THROWS the canonical
+ *                              gated error as its FIRST statement, before any
+ *                              I/O. It performs NO fetch/http and touches NO
+ *                              disk/network — it only refuses.
+ *   (d) selectRunSwarmStore  — returns LocalRunSwarmStore by default; returns
+ *                              the gated stub ONLY when a cloud endpoint is
+ *                              explicitly configured for this seam (and that
+ *                              stub still refuses). There is NO activation path.
+ *
+ * HARD SAFETY: local-first + self-hostable + cloud-gated. No new deps.
+ */
+import type { AshlrConfig, SwarmRun } from '../types.js';
+/** The display name + delegate path for diagnostics. */
+export declare const RUN_SWARM_SEAM: {
+    id: "runSwarm";
+    name: string;
+    delegatesTo: string;
+    summary: string;
+};
+/** Persistence + listing of SwarmRun records. */
+export interface RunSwarmStore {
+    /** List all persisted swarm runs, most-recent first. */
+    list(): SwarmRun[];
+    /** Load a single swarm run by id, or null when absent/corrupt. */
+    load(id: string): SwarmRun | null;
+    /** Persist a swarm run record. */
+    save(s: SwarmRun): void;
+}
+/**
+ * DEFAULT local impl — a behavior-preserving adapter over core/swarm/store.ts.
+ * Each method is a direct pass-through; no logic is added or changed.
+ */
+export declare class LocalRunSwarmStore implements RunSwarmStore {
+    list(): SwarmRun[];
+    load(id: string): SwarmRun | null;
+    save(s: SwarmRun): void;
+}
+/**
+ * GATED cloud stub — a multi-machine/team swarm registry WOULD live here.
+ * Every method THROWS the canonical gated error FIRST, before any I/O. It never
+ * opens a socket, never calls fetch, never touches disk. Referenceable, inert.
+ */
+export declare class CloudRunSwarmStore implements RunSwarmStore {
+    list(): SwarmRun[];
+    load(_id: string): SwarmRun | null;
+    save(_s: SwarmRun): void;
+}
+/**
+ * Select the active RunSwarmStore for a config.
+ *  - LocalRunSwarmStore by DEFAULT (no endpoint configured) — the only path the
+ *    autonomous loop/daemon can ever reach.
+ *  - CloudRunSwarmStore ONLY when a cloud endpoint is explicitly configured for
+ *    this seam — and that impl REFUSES (throws) on every method. There is no
+ *    way to flip to a functional cloud backbone.
+ */
+export declare function selectRunSwarmStore(cfg: AshlrConfig): RunSwarmStore;

package/dist/core/seams/run-swarm.js

@@ -0,0 +1,74 @@
+/**
+ * core/seams/run-swarm.ts — RunSwarmStore seam (M30).
+ *
+ * SEAM over core/swarm/store.ts (listSwarms / loadSwarm / saveSwarm).
+ *
+ * Shape (mirrors the canonical telemetry-sink seam):
+ *   (a) RunSwarmStore        — the interface.
+ *   (b) LocalRunSwarmStore   — DEFAULT. A thin, behavior-preserving adapter that
+ *                              delegates 1:1 to the existing exported functions.
+ *                              ZERO behavior change, identical signatures.
+ *   (c) CloudRunSwarmStore   — GATED stub. Every method THROWS the canonical
+ *                              gated error as its FIRST statement, before any
+ *                              I/O. It performs NO fetch/http and touches NO
+ *                              disk/network — it only refuses.
+ *   (d) selectRunSwarmStore  — returns LocalRunSwarmStore by default; returns
+ *                              the gated stub ONLY when a cloud endpoint is
+ *                              explicitly configured for this seam (and that
+ *                              stub still refuses). There is NO activation path.
+ *
+ * HARD SAFETY: local-first + self-hostable + cloud-gated. No new deps.
+ */
+import { listSwarms, loadSwarm, saveSwarm } from '../swarm/store.js';
+import { seamEndpoint } from './registry.js';
+import { cloudGatedError } from './types.js';
+/** The display name + delegate path for diagnostics. */
+export const RUN_SWARM_SEAM = {
+    id: 'runSwarm',
+    name: 'RunSwarmStore',
+    delegatesTo: 'core/swarm/store.ts',
+    summary: 'Persist + list autonomous run/swarm records (~/.ashlr/swarms/).',
+};
+/**
+ * DEFAULT local impl — a behavior-preserving adapter over core/swarm/store.ts.
+ * Each method is a direct pass-through; no logic is added or changed.
+ */
+export class LocalRunSwarmStore {
+    list() {
+        return listSwarms();
+    }
+    load(id) {
+        return loadSwarm(id);
+    }
+    save(s) {
+        saveSwarm(s);
+    }
+}
+/**
+ * GATED cloud stub — a multi-machine/team swarm registry WOULD live here.
+ * Every method THROWS the canonical gated error FIRST, before any I/O. It never
+ * opens a socket, never calls fetch, never touches disk. Referenceable, inert.
+ */
+export class CloudRunSwarmStore {
+    list() {
+        throw cloudGatedError(RUN_SWARM_SEAM.name, 'list');
+    }
+    load(_id) {
+        throw cloudGatedError(RUN_SWARM_SEAM.name, 'load');
+    }
+    save(_s) {
+        throw cloudGatedError(RUN_SWARM_SEAM.name, 'save');
+    }
+}
+/**
+ * Select the active RunSwarmStore for a config.
+ *  - LocalRunSwarmStore by DEFAULT (no endpoint configured) — the only path the
+ *    autonomous loop/daemon can ever reach.
+ *  - CloudRunSwarmStore ONLY when a cloud endpoint is explicitly configured for
+ *    this seam — and that impl REFUSES (throws) on every method. There is no
+ *    way to flip to a functional cloud backbone.
+ */
+export function selectRunSwarmStore(cfg) {
+    return seamEndpoint(cfg, 'runSwarm') ? new CloudRunSwarmStore() : new LocalRunSwarmStore();
+}
+//# sourceMappingURL=run-swarm.js.map

package/dist/core/seams/run-swarm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-swarm.js","sourceRoot":"","sources":["../../../src/core/seams/run-swarm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,wDAAwD;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,UAAmB;IACvB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,iEAAiE;CAC3E,CAAC;AAYF;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IAC7B,IAAI;QACF,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,EAAU;QACb,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,CAAW;QACd,SAAS,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAC7B,IAAI;QACF,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,GAAW;QACd,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,EAAY;QACf,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,OAAO,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC;AAC7F,CAAC"}

package/dist/core/seams/types.d.ts

@@ -0,0 +1,123 @@
+/**
+ * core/seams/types.ts — M30 seam types (single-sourced).
+ *
+ * Defines the shared types for the M30 "cloud-ready seams" layer: the read-only
+ * diagnostic shape (`SeamStatus`), the registry roll-up (`SeamRegistry`), and a
+ * defensive, OPTIONAL config augmentation (`SeamsConfig`) describing where a
+ * cloud/team backbone endpoint WOULD be configured per seam.
+ *
+ * HARD SAFETY NOTE: the presence of an endpoint string here NEVER activates a
+ * working cloud backbone. Every cloud impl is a GATED STUB that THROWS before
+ * any I/O. A configured endpoint only changes which (throwing) stub a selector
+ * returns; it can never perform a remote call. There is NO config flag and NO
+ * code path that activates a functional cloud/team backbone — that remains a
+ * Mason GATE (explicit opt-in, not implemented). Local-first + self-hostable;
+ * nothing public.
+ *
+ * This block is kept OUT of the monolithic core/types.ts on purpose so the M30
+ * additions are purely additive and cannot perturb any existing type. The
+ * `SeamsConfig` shape is read defensively off `AshlrConfig` via `seamsConfig()`
+ * in registry.ts (a cast over an optional property) so AshlrConfig itself is
+ * unchanged — preserving the M30 NON-REGRESSION invariant at the type level.
+ */
+/**
+ * Stable identifiers for every v2 seam. Used as the key in the registry and in
+ * the `ashlr seams` diagnostic. `telemetry` is the pre-existing M19 reference
+ * seam (core/observability/telemetry-sink.ts) — it is CITED here, not rewritten.
+ */
+export type SeamId = 'runSwarm' | 'backlog' | 'inbox' | 'daemonCoordinator' | 'genome' | 'portfolio' | 'identity' | 'telemetry';
+/**
+ * Which implementation a seam is actively serving. The default path is ALWAYS
+ * `'local'`. `'gated'` is only ever surfaced when a cloud endpoint is explicitly
+ * configured for that seam — and that impl REFUSES (throws) on every method.
+ */
+export type SeamImpl = 'local' | 'gated';
+/**
+ * Whether a cloud/team impl exists for a seam. It is NEVER `true` in M30:
+ *  - `false`  — no cloud impl exists at all (e.g. the reference telemetry seam,
+ *               whose opt-in OTLP sink is a real local-network sink, not a
+ *               gated team backbone).
+ *  - `'gated'`— a cloud STUB exists but is gated on Mason and THROWS; it can be
+ *               referenced (when an endpoint is configured) but never does I/O.
+ */
+export type SeamCloud = false | 'gated';
+/**
+ * Read-only diagnostic record for one seam — the row rendered by `ashlr seams`.
+ * Pure metadata; contains NO endpoint secrets and triggers NO I/O to produce.
+ */
+export interface SeamStatus {
+    /** Stable seam identifier. */
+    id: SeamId;
+    /** Human-readable seam name (e.g. 'RunSwarmStore'). */
+    name: string;
+    /** The active implementation. ALWAYS 'local' on the default path. */
+    active: SeamImpl;
+    /** Cloud availability: false (none) or 'gated' (stub exists, throws). */
+    cloud: SeamCloud;
+    /**
+     * Whether a cloud endpoint is explicitly configured for this seam. When true,
+     * `active` is 'gated' and the seam REFUSES to operate (throws). Default false.
+     */
+    endpointConfigured: boolean;
+    /** The existing local module this seam delegates to (for the diagnostic). */
+    delegatesTo: string;
+    /** One-line description of the seam's responsibility. */
+    summary: string;
+}
+/** The full read-only registry roll-up consumed by the `ashlr seams` command. */
+export interface SeamRegistry {
+    /** ISO timestamp the registry snapshot was produced. */
+    generatedAt: string;
+    /** One row per seam. */
+    seams: SeamStatus[];
+    /**
+     * Convenience roll-up flags for the diagnostic header.
+     * `allLocal` is true when EVERY seam is serving its local impl (the only
+     * state reachable without an explicitly-configured cloud endpoint).
+     */
+    allLocal: boolean;
+    /** Count of seams with an explicitly-configured (but gated) cloud endpoint. */
+    gatedConfigured: number;
+}
+/**
+ * OPTIONAL, defensively-read config augmentation describing where a cloud/team
+ * backbone endpoint WOULD live per seam. DEFAULT UNSET => local for every seam.
+ *
+ * Read off `AshlrConfig` via a cast in registry.ts; AshlrConfig itself is NOT
+ * modified (NON-REGRESSION). An endpoint string here only routes a selector to
+ * the GATED (throwing) stub — it can never enable a functional backbone.
+ */
+export interface SeamsConfig {
+    /** Per-seam cloud endpoint. Presence => route to the gated stub (throws). */
+    runSwarm?: {
+        endpoint?: string;
+    };
+    backlog?: {
+        endpoint?: string;
+    };
+    inbox?: {
+        endpoint?: string;
+    };
+    daemonCoordinator?: {
+        endpoint?: string;
+    };
+    genome?: {
+        endpoint?: string;
+    };
+    portfolio?: {
+        endpoint?: string;
+    };
+    identity?: {
+        endpoint?: string;
+    };
+}
+/**
+ * Canonical gated-error message thrown by EVERY cloud stub method. Centralised
+ * so the message is identical across seams and easy for the verifier to assert.
+ */
+export declare const CLOUD_GATED_MESSAGE = "cloud/team backbone gated on Mason \u2014 not implemented (requires Mason's explicit opt-in)";
+/**
+ * Construct the canonical gated Error for a seam + method. The cloud stubs call
+ * this and THROW it as the FIRST statement of every method, before any I/O.
+ */
+export declare function cloudGatedError(seam: string, method: string): Error;

package/dist/core/seams/types.js

@@ -0,0 +1,35 @@
+/**
+ * core/seams/types.ts — M30 seam types (single-sourced).
+ *
+ * Defines the shared types for the M30 "cloud-ready seams" layer: the read-only
+ * diagnostic shape (`SeamStatus`), the registry roll-up (`SeamRegistry`), and a
+ * defensive, OPTIONAL config augmentation (`SeamsConfig`) describing where a
+ * cloud/team backbone endpoint WOULD be configured per seam.
+ *
+ * HARD SAFETY NOTE: the presence of an endpoint string here NEVER activates a
+ * working cloud backbone. Every cloud impl is a GATED STUB that THROWS before
+ * any I/O. A configured endpoint only changes which (throwing) stub a selector
+ * returns; it can never perform a remote call. There is NO config flag and NO
+ * code path that activates a functional cloud/team backbone — that remains a
+ * Mason GATE (explicit opt-in, not implemented). Local-first + self-hostable;
+ * nothing public.
+ *
+ * This block is kept OUT of the monolithic core/types.ts on purpose so the M30
+ * additions are purely additive and cannot perturb any existing type. The
+ * `SeamsConfig` shape is read defensively off `AshlrConfig` via `seamsConfig()`
+ * in registry.ts (a cast over an optional property) so AshlrConfig itself is
+ * unchanged — preserving the M30 NON-REGRESSION invariant at the type level.
+ */
+/**
+ * Canonical gated-error message thrown by EVERY cloud stub method. Centralised
+ * so the message is identical across seams and easy for the verifier to assert.
+ */
+export const CLOUD_GATED_MESSAGE = 'cloud/team backbone gated on Mason — not implemented (requires Mason\'s explicit opt-in)';
+/**
+ * Construct the canonical gated Error for a seam + method. The cloud stubs call
+ * this and THROW it as the FIRST statement of every method, before any I/O.
+ */
+export function cloudGatedError(seam, method) {
+    return new Error(`[ashlr seams] ${seam}.${method}: ${CLOUD_GATED_MESSAGE}`);
+}
+//# sourceMappingURL=types.js.map

package/dist/core/seams/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/seams/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA6FH;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,0FAA0F,CAAC;AAE7F;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,OAAO,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC,CAAC;AAC9E,CAAC"}