@ashlr/hub 3.2.7 → 3.3.2

package/CHANGELOG.md

@@ -11,6 +11,316 @@ hub (M1–M20). Entries below detail each milestone; dates are merge dates into
 
 ## [Unreleased]
 
+## [3.3.2] — 2026-08-20 — Safe successor after the failed immutable 3.3.1 release attempt
+
+- Carries forward the reviewed fail-closed runtime and operator-console closure
+  prepared for 3.3.1, plus the deterministic trajectory-fixture clock repair
+  merged at protected revision
+  `d6c1a5ec3626f715018a8ffb929906ac0f52f5c9`. That exact protected revision is
+  the required first-parent rollback for the 3.3.2 release merge.
+- Preserves the failed lightweight `v3.3.1` tag at
+  `f2c9353db35fbf12889bddafd8acc2b7ca5ae67c` and its failed release workflow
+  run `32396250683`, attempt 1. npm version 3.3.1 and its GitHub Release remain
+  absent; the tag, version, run, and absence must never be rewritten, rerun,
+  published, or reused.
+- Keeps the immutable public 3.3.0 predecessor quarantined at its exact package
+  integrity and tag while preparing 3.3.2 as the sole candidate successor. npm
+  `latest` remains 3.0.1 until isolated acceptance and a separate observation-
+  only promotion admission approved solely by `masonwyatt23` both succeed.
+
+## [3.3.1] — 2026-08-18 — Fail-closed runtime boundaries and emergency neutralization of the quarantined 3.3.0 candidate
+
+- Restores the hostile-reviewed, fail-closed authority and web-security tree
+  after an unsafe 3.3.0 candidate was merged and published concurrently. The
+  immutable 3.3.0 package and lightweight tag remain preserved for provenance,
+  but 3.3.0 must never move to npm `latest` or be installed or activated as the
+  production runtime. npm `latest` remains 3.0.1.
+- Compiled daemon and conductor trust roots are empty; resident-start,
+  service-install, and host-merge authority remain dormant. Post-merge credit
+  and learning signals stay report-only. This restores exact
+  session revocation and operator-truth safeguards; and breaks the cold-import
+  post-merge-credit ESM cycle without widening the public API or operational
+  learning authority.
+- Restores the operator-console security boundary: session-bound and expiry-bound
+  SSE with exact logout revocation, descriptor-bound static reads, strict
+  CSP/security headers, and stable bounded public error responses.
+- The source-neutralization merge itself was intentionally not a release. The
+  protected lightweight `v3.3.1` tag remains fixed at
+  `f2c9353db35fbf12889bddafd8acc2b7ca5ae67c`; release workflow run
+  `32396250683`, attempt 1, failed during native verification. Every downstream
+  release stage—the signed canary, prepare, npm publish, publication
+  verification, and GitHub Release—was skipped. npm version 3.3.1 and its
+  GitHub Release remain absent. The tag and reserved version must not be moved,
+  reused, published, or promoted; 3.3.2 is the sole successor lane.
+
+## [3.3.0] — 2026-08-17 — Fleet activation, autonomous merge, and the operator console
+
+### 2026-08-16 — Fleet activation unblocked, autonomous merge wired, learning loop closed
+
+Nine threads landed together: the daemon activation-authority system that had
+been unconditionally denying itself was replaced with a real granted-scope
+check, and the bug that made it self-invalidate every permit was fixed; the
+previously dead-code autonomous-merge revocation protocol got its first
+caller; the fleet's self-improvement loop went from recording zero lessons on
+rejection to recording them from every rejection; a test-isolation escape that
+had corrupted the operator's real `~/.ashlr/daemon.json` for 11 days was
+closed fail-closed; and a new React operator console shipped alongside the
+untouched legacy dashboard. Milestone-level detail and today's newly
+discovered ID collision are in
+[`docs/MILESTONE-INDEX.md`](docs/MILESTONE-INDEX.md); the mechanics of
+turning any of this on — including four non-obvious gates that block
+unattended activation even after a grant — are in
+[`docs/RUNTIME-FLEET-ACTIVATION.md`](docs/RUNTIME-FLEET-ACTIVATION.md).
+
+- **Daemon activation authority replaces its own denials (M470 — see
+  collision note below).** Five hard-coded refusals — `DAEMON_ACTIVATION_TRUST_ROOTS`
+  frozen empty, `liveConductorActivationAuthorized()` returning a literal
+  `false`, `assertResidentServiceInstallAuthorized()` throwing
+  unconditionally, and two more in the same family — are replaced by a real
+  check against an operator-owned trust-root store (`~/.ashlr/activation/`,
+  0700/0600, owner-checked, fail-closed on missing/malformed to the
+  *identical* prior denial) and Ed25519-signed, expiring, revocable standing
+  grants across nine scopes: `once`, `resident`, `residentStanding`,
+  `conductor`, `automerge`, `repair`, `deploy`, `install`, `proposalOnly`
+  (`src/core/daemon/activation-permit.ts:121-131`). `residentStanding` is
+  new — the scope that lets the daemon restart unattended; it is not implied
+  by `resident` and must be granted explicitly.
+
+  Root-cause bug fixed in the same change: `daemonActivationAuthorityStateDigest()`
+  folded `~/.ashlr`'s own directory mtime into the digest a permit is
+  checked against, but `daemon start`'s `acquireDaemonLock()`
+  (`src/core/daemon/state.ts`) creates `~/.ashlr/daemon.lock` — a new direct
+  child of `~/.ashlr` — *before* the permit is ever consumed, bumping that
+  same mtime. Every freshly minted permit self-invalidated, 100%
+  reproducibly, before it could be used — the fleet could never have
+  activated unattended even with a valid grant. Fixed to key the digest on
+  the directory's `dev`+`ino` instead, which survive ordinary child churn
+  (`src/core/daemon/activation-permit.ts:961-997`).
+
+  **ID collision introduced today:** `test/m470.activation-authority.test.ts`
+  reuses milestone number M470, which was already assigned to the
+  already-shipped "proposal capture candidate identity"
+  (`test/m470.proposal-capture-candidate-identity.test.ts`; see the M464–M503
+  entry below). Recorded as a new row in `docs/MILESTONE-INDEX.md` §2.
+
+- **Autonomous PR merge gets its first caller (M504, M505).** The durable
+  merge-revocation protocol (`src/core/autonomy/host-merge-revocation-protocol.ts`)
+  existed with zero callers before today; it is now invoked from
+  `attemptHostAutoMerge()` (`src/core/merge.ts:2845-2901`), gated behind
+  `foundry.autoMerge.hostAutoMerge`, which **defaults to `false`**
+  (`src/core/merge.ts:2795`; `test/m505.host-auto-merge.test.ts` pins the
+  default-off behavior). A `failureCategory`
+  (`'code' | 'tool' | 'timeout' | 'infra' | 'cancelled' | 'invalid-command'`,
+  `src/core/run/verify-commands.ts:86-92`) is now threaded through
+  verify-commands, verify, run-tests, merge, the detached post-merge
+  runner/verification, the regression sentinel, and self-heal — exit 127
+  (missing binary) now classifies as `'tool'`, not a broken diff. `git apply
+  --3way` is now used in both `verifyProposal` and `attemptHostAutoMerge`
+  (`src/core/merge.ts:2313, 2984`) so a stale base no longer reads as a real
+  conflict. The self-eval parity gate — previously a single flaky
+  invariant-test failure was a GLOBAL merge blocker — now retries up to
+  `SELF_EVAL_PARITY_RETRY_ATTEMPTS = 2` times with a 500ms delay before
+  failing (`src/core/merge.ts:265-267`).
+
+- **Learning loop closed; judge parse failures stop posing as verdicts.**
+  `hasReleasedPostMergeCredit()` (`src/core/fleet/post-merge-credit.ts:137-150`)
+  no longer hardcodes `false` — it verifies an HMAC-signed, timing-safe-compared
+  token — unblocking consumers across `learned-router.ts`,
+  `skill-attestation.ts`, `feedback.ts`, `quality-metrics.ts`,
+  `judge-trace.ts`, and `post-merge-credit.ts` itself. `learnFromRejection`
+  is no longer reachable only when auto-merge is on: a new
+  `sweepRejectionLearning()` (`src/core/fleet/self-improve.ts`) reads the
+  decisions ledger directly and learns from rejections regardless of the
+  auto-merge flag. (The commit message cites 672 rejections the fleet had
+  never learned from while auto-merge defaulted off; that figure is the
+  author's estimate, not a value stored or checked anywhere in `src/` or
+  `test/` — do not repeat it as a verified count.) `curateAntiPlaybooks()`
+  (`src/core/fleet/self-improve.ts:284-322`), previously unreferenced, now
+  has a caller in `src/core/fleet/orchestrator.ts:1338`. Separately, a July
+  refactor had given every real judge verdict a reason code but not the
+  parse-failure fallback — parse failures were structurally indistinguishable
+  from considered reviews and incremented `judgeNonShipCount`, pushing good
+  proposals toward auto-archive. Parse failures now get their own
+  `'judge-parse-failure'` reason code (`src/core/fleet/judge-decision-metadata.ts:20`)
+  and are excluded from `judgeNonShipCount` entirely
+  (`src/core/fleet/automerge-pass.ts:335-337`).
+
+- **Test isolation: HOME escape closed fail-closed.** On 2026-08-05 a vitest
+  run escaped HOME isolation and wrote the operator's real
+  `~/.ashlr/daemon.json`, leaving the daemon unstartable for 11 days. Cause:
+  `test/setup/home.ts` fell back to the real `os.homedir()` whenever
+  `process.env.HOME` was unset — fail-open. It now throws immediately if
+  `HOME` is unset or resolves to the real developer home
+  (`test/setup/home.ts:52-65`).
+
+- **Fleet-status cache correction.** `GET /api/fleet` no longer performs
+  API-side response recomposition (`src/core/web/api.ts`, pinned by
+  `test/build-identity.test.ts`) — a response-shape fix, landed today. The
+  shared TTL cache for `buildFleetStatus()`
+  (`src/core/web/fleet-status-cache.ts`: 5s TTL, stale-while-refresh to 60s,
+  in-flight dedup) landed with the new console earlier this week, not today.
+  **The "32.5s cold → 4.0s cold / 0ms warm" figures reported for this work do
+  not appear anywhere in the code, tests, or the cache module's own
+  documentation and could not be verified — do not repeat them.** The cache
+  module's comment instead cites a worse pre-fix baseline (`/api/snapshot`
+  2.4s idle → 69.4s under load; `/api/control` similarly degraded). Call-site
+  count is also imprecise across sources: the cache module's comment says
+  six, a test comment says seven, a source grep finds eleven — the true
+  count depends on what "independent call site" means and isn't settled.
+
+- **New operator console (`src/web-ui/`).** React 19 + Vite 6, served at
+  `/next/` alongside the untouched legacy vanilla-JS SPA at `/`
+  (`vite.config.web.ts:11-26`, `src/core/web/static.ts:87-88`). **16 views**
+  (not the 13 originally reported), a chart layer
+  (`src/web-ui/components/charts/`), a work journal
+  (`src/web-ui/routes/journal/`), live run streaming
+  (`src/web-ui/components/stream/`, `useRunStream.ts`), and a notification
+  centre (`src/web-ui/components/notifications/`). Backend changes were
+  minimal and additive — query-param filtering on `src/core/web/api.ts` for
+  the inbox history view — not a rewrite; `server.ts`/`static.ts` routing is
+  unchanged.
+
+- **Two activation designs now formally coexist; the guard protecting the
+  boundary between them was strengthened, not weakened.**
+  `conductor-permit` (`src/core/daemon/goal-conductor-permit-operator.ts`,
+  offline cold-custody, used by the goal conductor — M516–M518) and
+  `activation` (`src/core/daemon/activation-permit.ts`, on-machine standing
+  grants, M470 above) are separate modules with non-overlapping imports. The
+  test protecting this boundary used to check that a file
+  (`src/cli/activation.ts`) did not exist by name — a check that would have
+  broken the moment that file needed to exist for a legitimate, unrelated
+  reason. It now asserts the real invariant: the daemon activation CLI's
+  source text must not match any conductor-authority symbol name
+  (`test/m518.goal-conductor-permit-operator.test.ts:924-926`) — conductor
+  authority must be unreachable from the daemon surface, not merely absent
+  from a filename.
+
+### 2026-08-16 — Live-data web UI crash and TITRR proposal-quality fixes
+
+- **`/work/swarms` crashed on real fleet data; a route error boundary now
+  contains that class of bug.** `SwarmsView` and `SwarmDetailView` read
+  `sw.plan.tasks.length` and `sw.usage.tokensIn` unguarded; two of eighty real
+  swarm records (legacy smoke-test runs) carry neither field, so the view
+  threw, React unmounted the root, and the screen went blank with no recovery
+  short of a hard reload. Both reads are now guarded, and a new
+  `RouteErrorBoundary` (`src/web-ui/components/primitives/RouteErrorBoundary.tsx`)
+  wraps the route outlet so a failing view renders an inline error card with
+  retry while the sidebar, topbar, and command palette stay alive — the
+  durable fix; the optional chaining is the specific one.
+- **Crushed tables got their column widths back.** The inbox proposal table
+  had no fixed layout, so auto-layout divided space evenly across seven
+  columns and crushed `Title` to roughly one word per line. The same pattern
+  — traced to the Fleet Dashboard's Recent Runs panel, which `DESIGN.md`
+  names as the reference other views copy — also affected Runs' goal column,
+  where a single multi-paragraph prompt could balloon one row past the
+  viewport. All three (`src/web-ui/routes/inbox/ProposalList.tsx`,
+  `src/web-ui/routes/fleet-dashboard/RunsPanel.tsx`,
+  `src/web-ui/routes/work/runs/RunsView.tsx`) now use fixed layout with
+  explicit column widths and a shared two-line clamp utility. GenomeView's
+  plain "Loading…" text was also swapped for the SkeletonRow convention used
+  everywhere else, noticeable because that endpoint takes ~6s for 2014
+  entries.
+- **TITRR stopped filing proposals it already knew had failed verification.**
+  `TITRR_MAX_ATTEMPTS` was hardcoded to 2 ("1 initial + 1 repair"); on
+  exhausting it with tests still failing, the loop unconditionally filed the
+  diff anyway via `captureTitrrProposal({isPartial:true,
+  forceGateBlockReason})` — the root cause of `[partial]` proposals that
+  could never pass verification, and, per the fix commit's own estimate (not
+  a value stored or checked anywhere in `src/` or `test/` — do not repeat it
+  as a verified count), a large share of the 672 proposals the fleet had
+  never merged. `TITRR_MAX_ATTEMPTS` is raised to 4, and exhaustion now drops
+  with no proposal at all rather than filing an unverifiable one; the
+  annotation is kept on the run for audit but nothing reaches the inbox.
+
+### M464–M503 — daemon durability, post-merge verification pipeline, Mission OS extensions
+
+Forty milestones landed on `master` with no CHANGELOG entry; this backfills
+them by theme. Full per-milestone detail, file:line citations, and the four
+that warrant a standalone contract are indexed in
+[`docs/MILESTONE-INDEX.md`](docs/MILESTONE-INDEX.md) §5. Gaps M474, M483,
+M489, M499, M500 have no corresponding test file or milestone.
+
+- **Daemon crash-safety and recovery (M486, M487, M490, M501, M488, M476).**
+  Daemon accounting writes now cross an fsync power-loss barrier (temp write +
+  fsync, rename, directory fsync) before being reported durable (M486). A new
+  authorized quarantine flow hard-links crash-suspect daemon state into
+  immutable evidence with a signed receipt and a 10-minute plan expiry (M487),
+  and a paired resolution flow consumes that receipt to produce fresh state
+  that conservatively carries forward same-day spend accounting when it can
+  be verified (never silently resets a daily budget to zero), refusing while
+  service activity or execution retries are in flight (M501). Both are wired into the CLI as explicit, authorization-gated
+  subcommands (`recover-state` / `resolve-state`, M490). Runtime-release
+  canary/rollback pairs get an observation-only signature and digest check
+  with no deployment authority (M488). Release-tip observations are recorded
+  in an immutable, HMAC-sealed, no-clobber sequence ledger — not a
+  transparency log or release authority (M476).
+
+- **Detached post-merge verification pipeline (M465, M466, M467, M468, M472,
+  M478, M482).** Auto-merge canary promotion readiness is evaluated
+  observation-only against verification coverage, release evidence, and
+  post-merge cohorts — it never grants activation (M465). Diff scope for
+  auto-merge is measured with fail-closed rejection of symlinks, gitlinks,
+  and malformed patch headers, alongside a durable prepared→armed→revoked
+  host-merge cancellation state machine (M466). Post-merge verification
+  cohorts are recorded as signed, immutable, metadata-only records —
+  explicitly excluding prompts, diffs, and command output — and can neither
+  authorize merge nor rollback (M467). A runner checks out one exact commit
+  into a scratch worktree, runs the repo's own verification profile, and
+  records only bounded pass/fail metadata before cleanup (M468), scheduled by
+  an observation-only orchestrator that emits at most one work ticket per
+  invocation (M472). Root verification contracts are detected read-only from
+  each repo's own manifests (`package.json`, `tsconfig.json`,
+  `vitest.config.ts`, …) without ever spawning a package manager (M478).
+  Release artifacts get a dependency-inventory + manifest-integrity contract
+  with hard size caps (M482).
+
+- **Proposal funnel + capture identity (M464, M469, M470, M471, M473,
+  M475).** Agent work lifecycle transitions are now recorded as a
+  metadata-only, cryptographically-chained audit trail with a closed
+  vocabulary of phases/transitions/triggers — no raw prompts, diffs, or file
+  paths (M464). Proposal-funnel metrics (attempts, capture errors, policy
+  suppressions, gate blocks) are scrubbed before aggregation and withheld on
+  unstable snapshots rather than guessed (M469). Proposal capture now binds a
+  durable candidate identity from sandboxed execution (M470), settled through
+  a transactional claim/settle/reconcile task store with compare-and-swap
+  leases (M471). A new verifier-execution-authority layer admits signed,
+  data-only capsule statements against caller-pinned trust policies (M473),
+  gated by a separate crypto-only policy-approval observation that itself
+  signs, persists, or executes nothing (M475).
+
+- **Mission OS extensions (M485, M491, M492, M493, M494, M495, M496, M497,
+  M502).** The mission compiler reconciles goals from briefings — respecting
+  dependencies, active-goal caps, and human gates, rejecting cycles — behind
+  a read-only operator briefing UI (M485). Ecosystem-wide mission graphs
+  compile deterministically into one cycle-checked, digested structure bounded
+  to 24 nodes (M491), projected through a fail-closed, mutation-free "outcome
+  room" view (M492). Mission state can now be captured into a signed,
+  durable observation receipt carrying no execution authority (M493), and a
+  shadow reconciler suggests — but never creates — up to 16 candidate goals
+  per preview, verified against that receipt (M494). External ecosystem
+  inputs (Cortex mission candidates, Locus identity evidence) get bounded,
+  fail-closed-on-expiry validation schemas that import no authority (M495).
+  Mission observations are captured only from authenticated, realized-merge
+  proposals (M496), and both the read-only shadow observer (M502) and its
+  CLI entry point (`vision shadow`, M497) prove the whole planning loop can
+  run end-to-end with zero effect.
+
+- **Supply-chain and dashboard hardening (M477, M480, M481, M479, M498,
+  M503, M484).** Public JSON payloads are scrubbed of secret-shaped strings
+  and home-directory paths and de-recursed before they reach the dashboard or
+  API (M477). The dashboard's mobile shell keeps navigation in one
+  horizontally-scrollable row (M480). Every action in every CI workflow is
+  now pinned to a reviewed immutable commit (M481), and the npm release
+  workflow additionally validates the release tag's target commit is in
+  protected `master` history before `npm publish --provenance` runs (M479).
+  Best-of-N's `-n` CLI flag is validated before config or model loading —
+  rejecting non-integers, floats, zero, negative, and unsafe-integer values
+  with exit code 2 (M498). The dashboard gained a read-only auth mode that
+  permits SSE and reads but blocks all mutating endpoints (M503). PR stack
+  topology (linearity, dependency correctness, convergence declarations) is
+  now shadow-observed read-only against GitHub with no mutation capability
+  (M484).
+
 ## [3.2.7] — 2026-08-16 — Immutable candidate supersession
 
 - Carries forward the immutable 3.2.6 candidate and all subsequently merged
@@ -199,8 +509,10 @@ hub (M1–M20). Entries below detail each milestone; dates are merge dates into
 - **Temporary resident-service authority restriction.** Production service
   install, reinstall, repair, restart, worker setup, and the service portion of
   first-run setup now fail closed at a shared deny-only boundary. Existing
-  services retain status and uninstall, and admitted one-shot workflows remain
-  available. Both git and npm update channels block before code replacement
+  services retain status and uninstall. Compiled daemon and conductor trust
+  roots are empty, so non-dry daemon/conductor execution remains dormant;
+  owner-invoked `ashlr run`/`ashlr swarm` and daemon dry-run remain available.
+  Both git and npm update channels block before code replacement
   for present, unknown, or running service state. Status now combines expected
   service-file and native-manager evidence into explicit `present`, `absent`, or
   `unknown` registration state; setup refusal occurs before all config/wizard

package/README.md

@@ -1,6 +1,6 @@
 # ashlr-hub
 
-**An autonomous engineering fleet that builds, maintains, and improves your repos — proposal-first by default, sandboxed, and gated by explicit merge authority.**
+**A governed autonomous-engineering fleet architecture — proposal-first, sandboxed, and gated by explicit runtime and merge authority.**
 
 [![npm](https://img.shields.io/npm/v/@ashlr/hub.svg?logo=npm&label=%40ashlr%2Fhub&color=cb3837)](https://www.npmjs.com/package/@ashlr/hub)
 [![npm downloads](https://img.shields.io/npm/dm/@ashlr/hub.svg?color=cb3837)](https://www.npmjs.com/package/@ashlr/hub)
@@ -12,25 +12,25 @@
 
 ## What is this?
 
-ashlr-hub is a single Node binary that runs an autonomous agent fleet against your enrolled repositories.
+ashlr-hub is a single Node binary containing an autonomous agent fleet for enrolled repositories. In the current production build, compiled daemon and conductor trust roots are empty, so live non-dry fleet execution is deliberately dormant; verified dry-run, status, and local-console paths remain available.
 
-The fleet scans your backlog, dispatches sandboxed agent swarms across multiple backends (local Ollama/LM Studio, Claude Code, Codex, any OpenAI-compatible API), and deposits proposed diffs into an **Approval Inbox**. By default, nothing touches a branch until you explicitly approve it. A separate, default-off auto-merge subsystem can be enabled only with explicit authority and fail-closed verification. The kill-switch is a single file.
+When an independently provisioned runtime admits it, the fleet scans your backlog, dispatches sandboxed agent swarms across multiple backends (local Ollama/LM Studio, Claude Code, Codex, any OpenAI-compatible API), and deposits proposed diffs into an **Approval Inbox**. By default, nothing touches a branch until you explicitly approve it. A separate, default-off auto-merge subsystem can be enabled only with explicit authority and fail-closed verification. The kill-switch is a single file.
 
 It is also a local unifying harness: one CLI and web dashboard that indexes your enrolled projects, aggregates all your MCP servers into a single gateway, tracks real spend, and provides `ashlr run` / `ashlr swarm` for ad-hoc work.
 
 ### Authority defaults
 
-First activation follows a strict order: run `ashlr preflight`, enroll a repo, and complete a dry-run before enabling real daemon generation. Only then review a generated proposal and use `ashlr inbox approve`; merge, deploy, and service-install authority remain separate and default off.
+First activation currently stops at observation: run `ashlr preflight`, enroll a repo, and complete a dry-run. Empty compiled trust roots refuse live non-dry daemon and conductor effects, and resident service mutation has no production authority. Existing proposals can still be inspected, but no dry-run or readiness result widens runtime authority.
 
 | Path | Default | Required authority | Possible outward effect |
 |------|---------|--------------------|-------------------------|
-| Daemon generation | Enabled only when you run the daemon against enrolled repos | Enrollment, kill-switch clear, budget and sandbox gates | Pending proposal only; no apply, push, PR, deploy, or service mutation |
+| Daemon generation | **Dormant in production** | A separately provisioned compiled trust root; the shipped roots are empty | Dry-run/status only; live non-dry dispatch refuses before effects |
 | Inbox apply | Manual | Explicit `ashlr inbox approve`, confirmation, enrollment, kill-switch clear | Applies to a dedicated local branch; never silently edits the working tree |
 | Protected PR submit | Operator-invoked | Explicit `ashlr inbox submit`, caller confirmation, signed frontier provenance, fresh verification, and live protected-remote evidence | Opens one review PR; never merges `main` or contacts a model. `--yes` is caller intent, not an authenticated human receipt. |
 | Autonomous merge | **Off** | `foundry.autoMerge.enabled: true` plus the selected tier, judge-backed verification, or evidence authority gates | Local merge or protected remote PR, depending on policy; every refusal is fail-closed |
 | Judge-free evidence merge | **Off** | Base- and diff-bound deterministic verification, signed provenance/evidence, strict scope/risk policy, and live protected-branch checks | Protected remote PR handoff only; no local fallback, self-target merge, partial capture, or build/CI/manifest change |
 | Deploy | Never performed by the daemon | Explicit `ashlr ship --deploy <target> --confirm` after pre-ship checks | Runs the selected production deploy command |
-| OS service mutation | **Temporarily unavailable** | No production install/reinstall/repair/restart authority is currently issued | Existing services expose status and uninstall only; admitted one-shot workflows remain available |
+| OS service mutation | **Temporarily unavailable** | No production install/reinstall/repair/restart authority is currently issued | Existing services expose status and uninstall only; no live one-shot or resident start is admitted |
 
 No successful test, model verdict, or proposal record grants deployment or service-install authority. Those are separate operator commands.
 
@@ -38,7 +38,7 @@ No successful test, model verdict, or proposal record grants deployment or servi
 
 ## What makes it different
 
-Most AI coding tools are request-response: you ask, the model answers. ashlr-hub runs a **continuous autonomous loop**:
+Most AI coding tools are request-response: you ask, the model answers. Ashlr's source architecture defines a **continuous autonomous loop**, but the current production entrypoints keep its non-dry daemon and conductor effects dormant because their compiled trust roots are empty:
 
 ```
 End-State Spec (your vision)
@@ -54,7 +54,7 @@ End-State Spec (your vision)
                     → Scorecard feedback (outcomes feed learned routing)
 ```
 
-**What this unlocks:**
+**What this architecture unlocks once an independently provisioned runtime admits it:**
 
 - The fleet works your backlog while you sleep.
 - You review proposals with `ashlr inbox`, not a chat window.
@@ -99,13 +99,13 @@ cd ashlr-hub
 
 `install.sh` requires Node 22.15+ and is idempotent — safe to re-run after pulling updates.
 
-### 1. Run the setup wizard
+### 1. Confirm the setup boundary
 
 ```sh
-ashlr setup  # currently exits nonzero at the resident-service step
+ashlr setup  # currently refuses before config or wizard work
 ```
 
-Setup currently refuses before loading config or running the wizard while install/reinstall/repair/restart authority is withheld. It returns nonzero and leaves setup state untouched. Existing services support `ashlr daemon service-status` and `ashlr daemon uninstall`; admitted one-shot workflows such as `ashlr daemon start --once` remain available. Service status reports registration as `present`, `absent`, or `unknown`; only proven absence permits an in-place update.
+Setup currently refuses before loading config or running the wizard while install/reinstall/repair/restart authority is withheld. It returns nonzero and leaves setup state untouched. Existing services support `ashlr daemon service-status` and `ashlr daemon uninstall`; live one-shot and resident starts remain dormant because the production daemon trust roots are compiled empty. Service status reports registration as `present`, `absent`, or `unknown`; only proven absence permits an in-place update.
 
 ### 1a. Preflight check (optional but recommended)
 
@@ -113,7 +113,7 @@ Setup currently refuses before loading config or running the wizard while instal
 ashlr preflight
 ```
 
-Verifies daemon readiness, backend connectivity, and key configuration before you enroll any repos. Safe to skip — setup covers the same ground — but useful as a standalone health check after config changes.
+Verifies daemon readiness, backend connectivity, and key configuration before you enroll any repos. Run it directly: `ashlr setup` does not reach these checks in the current release because it refuses before config or wizard work.
 
 ### 2. Enroll a repo
 
@@ -132,13 +132,16 @@ ashlr daemon start --once --dry-run
 
 Prints what the fleet would work on. Creates no proposals, spends $0.
 
-### 4. Run one real tick
+### 4. Confirm the live boundary
 
 ```sh
 ashlr daemon start --once
 ```
 
-The fleet scans the backlog, dispatches sandboxed work, and deposits proposals into the inbox.
+The current production build refuses this non-dry command before dispatch or
+proposal creation because its compiled daemon trust roots are empty. Use
+`ashlr daemon status`, the dry-run above, and Mission Control for verified
+observation. A test-only injected trust root is not production activation.
 
 ### 5. Review proposals
 
@@ -161,21 +164,29 @@ ashlr serve           # web dashboard at http://127.0.0.1:7777 (localhost only)
 ashlr serve --open    # also opens the browser
 ```
 
-The dashboard shows fleet status, all runs and swarms, the inbox, rolling spend analytics, and shared memory.
-
-`ashlr serve` prints a fresh read token on every start. Paste it into the
-dashboard's **Read token** control. The browser keeps the raw read token only in
-the current tab's `sessionStorage` and exchanges it for a 15-minute, read-only,
-HttpOnly cookie. Because browser cookies are shared across ports on the same
-host, that ticket is also bound to a random 256-bit, origin-scoped client proof.
-EventSource sends only that non-authority proof in its URL: it is useless
-without the matching signed HttpOnly ticket, and a `no-referrer` policy keeps it
-from leaving the dashboard. Static assets and the minimal `{ "ok": true }`
-liveness response remain public on loopback; every proprietary API read
-requires the read token or the ticket plus its matching client proof.
-The 15-minute limit applies to the cookie ticket, not the raw read token: while
-the current server process and tab remain active, the browser renews the ticket
-using the read token retained in that tab.
+The dashboard shows fleet status, all runs and swarms, the inbox, rolling spend analytics, and shared memory. The new console is at `/next/`; `/` is the separately labelled legacy dashboard.
+
+`ashlr serve` prints a fresh read token on every start. In `/next/`, paste it
+into the **Read token** control once. The new console uses it only for the
+`POST /api/session` exchange and then discards the raw read token. A 15-minute,
+read-only HttpOnly cookie plus a random 256-bit client proof in
+`sessionStorage` survives a page reload until the signed ticket expires. After
+expiry, enter the raw read token again; `/next/` cannot silently renew because
+it does not retain that token. EventSource sends only the non-authority proof
+in its URL: it is useless without the matching signed HttpOnly ticket, and a
+`no-referrer` policy keeps it from leaving the dashboard.
+
+When `/next/` mutations are explicitly enabled, its separate mutation token is
+held only in module memory for a 20-minute idle window. It is never written to
+`sessionStorage`, local storage, a cookie, or a URL; **Lock** clears it
+immediately. The legacy dashboard at `/` has a different, separately labelled
+transport: it retains its raw read token in tab `sessionStorage` to renew the
+cookie, and prompts independently for mutation authority rather than using the
+new console's held-token contract.
+
+Static assets and the minimal `{ "ok": true }` liveness response remain public
+on loopback; every proprietary API read requires the read token or the ticket
+plus its matching client proof.
 
 Headless clients send the read token as a header:
 
@@ -186,16 +197,17 @@ curl -H "X-Ashlr-Token: $ASHLR_DASHBOARD_READ_TOKEN" \
 
 Read tokens and cookies cannot approve, dispatch, pause, resume, repair, or open
 local paths. When mutations are explicitly enabled, the server prints a second,
-independent mutation token. The browser asks for it anew for every exact action,
-uses it only for that request, and never retains it in JavaScript state,
-`sessionStorage`, a cookie, or a URL. Mutations accept only that token in
+independent mutation token. Both console contracts keep it out of persistent
+browser storage, cookies, and URLs. Mutations accept only that token in
 `X-Ashlr-Token`.
 
 ---
 
-## The autonomous loop
+## Resident loop and owner-invoked goals
 
-Once repos are enrolled, the higher-level entry point is the goal conductor:
+The source includes a resident goal conductor, but current production compiled
+conductor trust roots are empty. The loop dry-run is available; live non-dry
+loop commands below refuse before effects:
 
 ```sh
 ashlr loop               # one tick — advances active goals, then backlog fallback
@@ -203,7 +215,9 @@ ashlr loop --watch       # continuous (Ctrl-C to stop)
 ashlr loop --dry-run     # show what would advance, no proposals
 ```
 
-Set a strategic objective and the fleet plans + executes milestones:
+`ashlr goal "<objective>"` is different: it is a live, owner-invoked,
+proposal-only path that plans and advances one bounded milestone. It does not
+grant resident or unattended conductor authority:
 
 ```sh
 ashlr goal "harden the inbox apply path"
@@ -371,8 +385,8 @@ next actions point at work the daemon can select now instead of phantom backlog.
 | `ashlr onboard <repo>` | Enroll one repo with walkthrough + dry run |
 | `ashlr enroll add/remove/list` | Manage enrolled repos |
 | `ashlr enroll kill on/off` | Engage/clear the kill-switch |
-| `ashlr daemon start/stop/status` | Autonomous operator; proposal generation plus a separate default-off auto-merge maintenance pass |
-| `ashlr loop [--watch] [--dry-run]` | Goal-aware conductor — one tick or continuous |
+| `ashlr daemon start/stop/status` | Runtime operator; current production start refuses with empty compiled roots, while status remains observational |
+| `ashlr loop [--watch] [--dry-run]` | Goal-aware conductor; current production admits dry-run only |
 | `ashlr goal "<objective>"` | Set a strategic goal; plan + dispatch milestones |
 | `ashlr goals list/show/plan/advance` | Manage goals + milestones |
 | `ashlr vision show/review/preview/shadow/approve/reconcile` | Mission OS: strategy, bounded DAG preview, authenticated shadow evidence, and explicit goal adoption |
@@ -548,7 +562,8 @@ preflight soft-warns *consider locus.firm for production* (non-blocking).
 | **v2** (M21–M30) | Autonomous org — sandboxed swarms, Approval Inbox, enrollment, kill-switch | Shipped |
 | **v2.1** (H1–H8) | Harden and prove — adversarial test suite, safety invariants proven by tests | Shipped |
 | **v2.2** (M31–M33) | Agent-native — plugin system, Raycast, update channel | Shipped |
-| **v3** (M34–M44) | Team + Local Weapon — multi-machine inbox, adaptive prompts, verify→repair, eval | Shipped |
+| **v3-Weapon** (M41–M44) | Local Weapon — adaptive model-sized prompts, sandboxed engineer tool surface, verify→repair, eval | Shipped |
+| **v3-Team** (M34–M40) | Team Command Center — multi-machine inbox, coordinated daemons, team visibility | **Spec'd, not built** — see [`docs/SPEC-V3-TEAM.md`](docs/SPEC-V3-TEAM.md) |
 | **v4** (M45–M49) | Foundry — multi-backend engines, backend router, tiered-trust merge gate, HMAC provenance, fleet supervisor | Shipped |
 | **v5** (M50–M55) | Open Fleet — declarative engine registry, tri-tier trust, OS confinement, fleet intelligence, self-improving fleet, goal/loop conductor | Shipped |
 | **v5.1** (M320–M324) | Claude 5 Model Intelligence — Sonnet 5 workhorse routing, Fable 5 judge with Opus fallback, per-model ROI telemetry, cost-aware learned routing | Shipped |
@@ -572,6 +587,7 @@ See [`docs/ECOSYSTEM-MAP.md`](docs/ECOSYSTEM-MAP.md) for the full capability map
 | Doc | What it covers |
 |-----|----------------|
 | [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) | Module map, the autonomous loop, engine tiers, safety gates, the `~/.ashlr/` layout |
+| [`docs/MILESTONE-INDEX.md`](docs/MILESTONE-INDEX.md) | Authoritative milestone ID → subject → status lookup (M2–M519), incl. confirmed ID collisions (spec-vs-shipped and shipped-vs-shipped) |
 | [`docs/MISSION-OS.md`](docs/MISSION-OS.md) | Mission DAG, receipts, shadow workflow, Cortex/Locus boundaries, privacy, and troubleshooting |
 | [`docs/ELITE-AGENT-EFFICIENCY.md`](docs/ELITE-AGENT-EFFICIENCY.md) | Current primary-source research translated into Hub efficiency priorities and measurable autonomy gates |
 | [`docs/RUNTIME_ACTIVATION_AUTHORITY.md`](docs/RUNTIME_ACTIVATION_AUTHORITY.md) | Signed read-only resident activation admission, explicit mutation refusal, and native launchd v2 requirements |

package/dist/build-identity.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "packageVersion": "3.2.7",
-  "revision": "73931bdd31b3b4e4d905a30b5112e4cd712f7844",
+  "packageVersion": "3.3.2",
+  "revision": "2971c9f767c934e12fd056bf8c6dca5164ffe7d2",
   "dirty": false,
   "provenance": "git"
 }

package/dist/cli/audit.js

@@ -166,7 +166,25 @@ function formatAuditEntry(entry) {
 // ---------------------------------------------------------------------------
 // cmdAudit — the command entry point
 // ---------------------------------------------------------------------------
+function printAuditHelp() {
+    console.log('');
+    console.log(bold('  ashlr audit') + dim(' — READ-ONLY audit-trail viewer (tails ~/.ashlr/audit/*.jsonl)'));
+    console.log('');
+    console.log(dim('Usage: ashlr audit [N | --limit N] [--json] [--action <verb>] ' +
+        '[--result ok|refused|error] [--since <ISO|YYYY-MM-DD>]'));
+    console.log('');
+    console.log(`    ${dim('N')}                       positional shorthand for --limit N`);
+    console.log(`    ${dim('--action <verb>')}         filter by action; bare verb matches verb:*`);
+    console.log(`    ${dim('--result <ok|refused|error>')}  filter by outcome`);
+    console.log(`    ${dim('--since <ISO|YYYY-MM-DD>')}     drop records older than this`);
+    console.log(`    ${dim('--json')}                  emit the records as a JSON array`);
+    console.log('');
+}
 export async function cmdAudit(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        printAuditHelp();
+        return 0;
+    }
     const parsed = parseArgs(args);
     if ('error' in parsed) {
         console.error(red('error: ') + parsed.error);

package/dist/cli/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/cli/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAG5C,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAS9D,IAAI,UAAU,GAAmC,SAAS,CAAC;AAE3D,KAAK,UAAU,aAAa;IAC1B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,0BAA+C,CAAC,CAEzE,CAAC;YACF,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,SAAS,CAAC,GAAG,8DAA8D,CAChF,CAAC;AACJ,CAAC;AAiBD;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,KAAK,EAAE,0BAA0B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBACnD,OAAO,EAAE,KAAK,EAAE,2BAA2B,CAAC,8BAA8B,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAChB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,0BAA0B,CAAC,yCAAyC,EAAE,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjC,iDAAiD;YACjD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,OAAqB,EAAE,IAAsB;IACjE,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,GAAG,GAAG,OAAO,CAAC;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,wEAAwE;QACxE,+EAA+E;QAC/E,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,6EAA6E;QAC7E,8EAA8E;QAC9E,qEAAqE;QACrE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IACtF,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,yEAAyE;AACzE,iFAAiF;AACjF,iFAAiF;AACjF,gEAAgE;AAChE,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,WAAW,GACf,KAAK,CAAC,MAAM,KAAK,IAAI;QACnB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1B,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,OAAO,GAAG,EAAE,MAAM,WAAW,MAAM,MAAM,KAAK,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,GAAG,CACD,gEAAgE;YAC9D,wDAAwD,CAC3D,CACF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,cAAc,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE1C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/cli/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAG5C,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;AAS9D,IAAI,UAAU,GAAmC,SAAS,CAAC;AAE3D,KAAK,UAAU,aAAa;IAC1B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,0BAA+C,CAAC,CAEzE,CAAC;YACF,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,SAAS,CAAC,GAAG,8DAA8D,CAChF,CAAC;AACJ,CAAC;AAiBD;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,KAAK,EAAE,0BAA0B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBACnD,OAAO,EAAE,KAAK,EAAE,2BAA2B,CAAC,8BAA8B,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAChB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,0BAA0B,CAAC,yCAAyC,EAAE,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjC,iDAAiD;YACjD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,OAAqB,EAAE,IAAsB;IACjE,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,GAAG,GAAG,OAAO,CAAC;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,wEAAwE;QACxE,+EAA+E;QAC/E,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,6EAA6E;QAC7E,8EAA8E;QAC9E,qEAAqE;QACrE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IACtF,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,yEAAyE;AACzE,iFAAiF;AACjF,iFAAiF;AACjF,gEAAgE;AAChE,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,WAAW,GACf,KAAK,CAAC,MAAM,KAAK,IAAI;QACnB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1B,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,OAAO,GAAG,EAAE,MAAM,WAAW,MAAM,MAAM,KAAK,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E,SAAS,cAAc;IACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;IAC3G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CACb,gEAAgE;QAC9D,wDAAwD,CAC3D,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,iBAAiB,CAAC,qDAAqD,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,6BAA6B,CAAC,qBAAqB,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,0BAA0B,CAAC,mCAAmC,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,cAAc,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,GAAG,CACD,gEAAgE;YAC9D,wDAAwD,CAC3D,CACF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,cAAc,EAAE,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE1C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/backlog.d.ts

@@ -20,9 +20,4 @@
  */
 export declare const BACKLOG_SOURCE_FILTERS: readonly ["issue", "todo", "test", "dep", "doc", "security", "plugin", "self", "lint", "goal", "hygiene", "invent"];
 export declare const BACKLOG_SOURCE_FILTER_HELP: string;
-/**
- * `ashlr backlog [refresh] [--repo <path>] [--source <src>] [--limit <n>] [--json]`
- *
- * Returns process exit code (0 = success, 1 = error, 2 = usage error).
- */
 export declare function cmdBacklog(args: string[]): Promise<number>;