@aviaratech/ai-delivery 0.1.0

package/dist/services/agentReadinessService.js

@@ -0,0 +1,225 @@
+import { existsSync } from 'node:fs';
+import { join, normalize } from 'node:path';
+export function evaluateAgentReadiness(input) {
+    const failures = [];
+    const body = input.body.trim();
+    const scope = extractScopePaths(body);
+    if (!hasSubstantiveOutcome(body)) {
+        failures.push({
+            code: 'outcome',
+            message: 'Add a substantive Outcome or Problem section.',
+        });
+    }
+    const acceptanceCriteria = extractCheckboxItems(extractSection(body, 'Acceptance Criteria'));
+    if (acceptanceCriteria.length < 2 || acceptanceCriteria.length > 5) {
+        failures.push({
+            code: 'acceptance-criteria',
+            message: 'Declare two to five checkbox acceptance criteria.',
+        });
+    }
+    if (!hasExecutableVerification(body)) {
+        failures.push({
+            code: 'verification',
+            message: 'Include an executable verification command in inline or fenced code.',
+        });
+    }
+    if (scope.length === 0 || scope.some((scopePath) => !isRepositoryPath(scopePath, input.repoRoot))) {
+        failures.push({
+            code: 'scope',
+            message: 'Declare scope paths that exist in the repository.',
+        });
+    }
+    if ((input.blockedBy?.length ?? 0) > 0) {
+        failures.push({
+            code: 'blocked',
+            message: `Resolve native blocked-by issue${input.blockedBy?.length === 1 ? '' : 's'} before autonomous development.`,
+        });
+    }
+    if (requiresRepositoryEvidence({ body, scope }) && !hasRepositoryEvidence(body, input.repoRoot)) {
+        failures.push({
+            code: 'evidence',
+            message: 'Add repository-backed current-state evidence for this scope.',
+        });
+    }
+    if (input.trackingParent === true) {
+        failures.push({
+            code: 'tracking-parent',
+            message: 'Dispatch an executable sub-issue instead of the tracking parent.',
+        });
+    }
+    else if (input.points === undefined) {
+        failures.push({
+            code: 'points',
+            message: 'Set configured native Points before autonomous development.',
+        });
+    }
+    if (hasUnresolvedMarker(body)) {
+        failures.push({
+            code: 'unresolved',
+            message: 'Resolve TODO, TBD, policy-choice, or architectural-fork markers.',
+        });
+    }
+    return { failures, ready: failures.length === 0 };
+}
+function extractCheckboxItems(section) {
+    return section
+        .split(/\r?\n/u)
+        .map((line) => {
+        const candidate = line.trimStart();
+        if (!['*', '+', '-'].includes(candidate.charAt(0))) {
+            return undefined;
+        }
+        const checkbox = candidate.slice(1).trimStart();
+        if (checkbox.length < 4 ||
+            !checkbox.startsWith('[') ||
+            ![' ', 'x', 'X'].includes(checkbox.charAt(1)) ||
+            checkbox.charAt(2) !== ']' ||
+            ![' ', '\t'].includes(checkbox.charAt(3))) {
+            return undefined;
+        }
+        return checkbox.slice(4).trim();
+    })
+        .filter((item) => item !== undefined && item.length > 0);
+}
+function extractFencedCode(body) {
+    const blocks = [];
+    let current = null;
+    for (const line of body.split(/\r?\n/u)) {
+        if (current !== null) {
+            if (line.trim() === '```') {
+                blocks.push(current.join('\n'));
+                current = null;
+            }
+            else {
+                current.push(line);
+            }
+            continue;
+        }
+        const candidate = line.trimStart();
+        const indentation = line.length - candidate.length;
+        if (indentation > 3 || !candidate.startsWith('```')) {
+            continue;
+        }
+        const info = candidate.slice(3).trim().toLowerCase();
+        if (['', 'bash', 'console', 'sh', 'shell', 'zsh'].includes(info)) {
+            current = [];
+        }
+    }
+    return blocks;
+}
+function extractInlineCode(body) {
+    return Array.from(body.matchAll(/`([^`\r\n]+)`/gu), (match) => match[1]?.trim() ?? '').filter(Boolean);
+}
+function extractScopePaths(body) {
+    const section = extractSection(body, 'Scope');
+    return Array.from(section.matchAll(/`([^`\r\n]+)`/gu), (match) => match[1]?.trim() ?? '').filter(Boolean);
+}
+function extractSection(body, heading) {
+    const lines = body.split(/\r?\n/u);
+    const start = lines.findIndex((line) => readMarkdownHeading(line)?.toLowerCase() === heading.toLowerCase());
+    if (start === -1)
+        return '';
+    const content = [];
+    for (const line of lines.slice(start + 1)) {
+        if (readMarkdownHeading(line) !== null)
+            break;
+        content.push(line);
+    }
+    return content.join('\n').trim();
+}
+function hasExecutableVerification(body) {
+    const executableCommands = new Set([
+        'bash',
+        'cargo',
+        'git',
+        'go',
+        'make',
+        'node',
+        'npm',
+        'npx',
+        'pnpm',
+        'python',
+        'python3',
+        'sh',
+        'tsc',
+        'tsx',
+        'zsh',
+    ]);
+    const code = [...extractInlineCode(body), ...extractFencedCode(body)];
+    return code.some((value) => value.split(/\r?\n/u).some((line) => {
+        const command = line.trimStart().split(/\s/u, 1)[0];
+        return command !== undefined && executableCommands.has(command);
+    }));
+}
+function hasRepositoryEvidence(body, repoRoot) {
+    const evidenceSource = body.replace(extractSection(body, 'Scope'), '');
+    if (/\b[0-9a-f]{40}:[^\s`]+/iu.test(evidenceSource) || /\/blob\/[0-9a-f]{40}\//iu.test(evidenceSource)) {
+        return true;
+    }
+    return extractInlineCode(evidenceSource).some((candidate) => isRepositoryPath(candidate, repoRoot));
+}
+function hasSubstantiveOutcome(body) {
+    const outcome = extractSection(body, 'Outcome');
+    const problem = extractSection(body, 'Problem');
+    return [outcome, problem].some((section) => stripMarkdown(section).length >= 24);
+}
+function hasUnresolvedMarker(body) {
+    return /\b(?:TODO|TBD|policy choice|architectural fork)\b/iu.test(body);
+}
+function isAggregateScope(scopePath) {
+    const normalized = normalizeScopePath(scopePath);
+    if (normalized === null)
+        return false;
+    return normalized.length === 0 || ['.', 'apps', 'packages', 'plugins'].includes(normalized);
+}
+function isRepositoryPath(candidate, repoRoot) {
+    const path = normalizeScopePath(candidate);
+    if (path === null)
+        return false;
+    const resolved = normalize(join(repoRoot, path));
+    const normalizedRoot = normalize(repoRoot);
+    return (resolved === normalizedRoot || resolved.startsWith(`${normalizedRoot}/`)) && existsSync(resolved);
+}
+function normalizeScopePath(candidate) {
+    const raw = candidate.replace(/(?::\d+(?::\d+)?)$/u, '').replace(/\\/gu, '/');
+    if (raw.startsWith('/') || raw.split('/').includes('..'))
+        return null;
+    return raw
+        .split('/')
+        .filter((part) => part.length > 0 && part !== '.')
+        .join('/');
+}
+function readMarkdownHeading(line) {
+    let index = 0;
+    while (line.charAt(index) === ' ' && index < 4) {
+        index += 1;
+    }
+    if (index > 3 || line.charAt(index) !== '#') {
+        return null;
+    }
+    let markerCount = 0;
+    while (line.charAt(index + markerCount) === '#' && markerCount < 7) {
+        markerCount += 1;
+    }
+    if (markerCount === 0 || markerCount > 6 || ![' ', '\t'].includes(line.charAt(index + markerCount))) {
+        return null;
+    }
+    return line.slice(index + markerCount).trim();
+}
+function requiresRepositoryEvidence({ body, scope }) {
+    const ownershipRoots = new Set(scope
+        .map((scopePath) => normalizeScopePath(scopePath))
+        .filter((scopePath) => scopePath !== null)
+        .map((scopePath) => scopePath.split('/').filter(Boolean).slice(0, 2).join('/'))
+        .filter(Boolean));
+    return (scope.some(isAggregateScope) ||
+        ownershipRoots.size > 1 ||
+        /\b(?:migration|production|data|contract-sensitive)\b/iu.test(body));
+}
+function stripMarkdown(value) {
+    return value
+        .replace(/[`*_>#-]/gu, '')
+        .replace(/\s+/gu, ' ')
+        .trim();
+}
+//# sourceMappingURL=agentReadinessService.js.map

package/dist/services/agentReadinessService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentReadinessService.js","sourceRoot":"","sources":["../../src/services/agentReadinessService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAuB5C,MAAM,UAAU,sBAAsB,CAAC,KAOtC;IACC,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7F,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,sEAAsE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClG,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,kCAAkC,KAAK,CAAC,SAAS,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iCAAiC;SACrH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,0BAA0B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChG,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,8DAA8D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,OAAO;SACX,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAChD,IACE,QAAQ,CAAC,MAAM,GAAG,CAAC;YACnB,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC7C,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAC1B,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EACzC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QACnD,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1C,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM;QAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;QACjC,MAAM;QACN,OAAO;QACP,KAAK;QACL,IAAI;QACJ,MAAM;QACN,MAAM;QACN,KAAK;QACL,KAAK;QACL,MAAM;QACN,QAAQ;QACR,SAAS;QACT,IAAI;QACJ,KAAK;QACL,KAAK;QACL,KAAK;KACN,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,OAAO,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,QAAgB;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACvG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,iBAAiB,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,QAAgB;IAC3D,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,CAAC,QAAQ,KAAK,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC;SACjD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,GAAG,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACnE,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,WAAW,KAAK,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC;QACpG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,0BAA0B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAqC;IACpF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,KAAK;SACF,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;SAC9D,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC9E,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,OAAO,CACL,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC5B,cAAc,CAAC,IAAI,GAAG,CAAC;QACvB,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,CACpE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK;SACT,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/services/deliveryAdmission.d.ts

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+declare const RuntimeAdmissionSchema: z.ZodObject<{
+    admissionId: z.ZodString;
+    capability: z.ZodObject<{
+        cli: z.ZodNumber;
+        mcp: z.ZodNumber;
+    }, z.core.$strict>;
+    cliPath: z.ZodString;
+    cliSha256: z.ZodString;
+    configDigest: z.ZodString;
+    mcpLauncherPath: z.ZodString;
+    mcpLauncherSha256: z.ZodString;
+    packageDistSha256: z.ZodString;
+    packageManifestSha256: z.ZodString;
+    packageVersion: z.ZodString;
+    pluginManifestPath: z.ZodString;
+    pluginManifestSha256: z.ZodString;
+    repository: z.ZodString;
+    schemaVersion: z.ZodLiteral<"ai-delivery.runtime-admission@1">;
+    sourceArchiveSha256: z.ZodString;
+    sourceCommit: z.ZodString;
+}, z.core.$strict>;
+export type RuntimeAdmission = z.infer<typeof RuntimeAdmissionSchema>;
+/**
+ * An installer-owned, private, immutable admission binds the actual CLI and MCP
+ * bytes to one source archive and the consuming repository configuration.
+ * Neither invocation surface can refresh its own admission during a mutation.
+ */
+export declare function assertDeliveryRuntimeAdmitted(input: {
+    repoRoot: string;
+    runtimeEntryPath?: string;
+}): RuntimeAdmission;
+export {};

package/dist/services/deliveryAdmission.js

@@ -0,0 +1,122 @@
+import { createHash } from 'node:crypto';
+import { readFileSync, readdirSync, realpathSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { z } from 'zod';
+import { loadDeliveryConfig } from '../config/deliveryConfig.js';
+import { assertPrivateFile } from '../delivery/common.js';
+import { digestValue } from '../delivery/index.js';
+import { DeliveryError } from '../errors.js';
+import { gitCommonDir, gitRoot } from '../git.js';
+const Sha256 = z.string().regex(/^sha256:[a-f0-9]{64}$/u);
+const CAPABILITY = 1;
+const RuntimeAdmissionSchema = z
+    .object({
+    admissionId: Sha256,
+    capability: z.object({ cli: z.number().int().positive(), mcp: z.number().int().positive() }).strict(),
+    cliPath: z.string().min(1),
+    cliSha256: Sha256,
+    configDigest: Sha256,
+    mcpLauncherPath: z.string().min(1),
+    mcpLauncherSha256: Sha256,
+    packageDistSha256: Sha256,
+    packageManifestSha256: Sha256,
+    packageVersion: z.string().min(1),
+    pluginManifestPath: z.string().min(1),
+    pluginManifestSha256: Sha256,
+    repository: z.string().min(1),
+    schemaVersion: z.literal('ai-delivery.runtime-admission@1'),
+    sourceArchiveSha256: Sha256,
+    sourceCommit: z.string().regex(/^[a-f0-9]{40}$/u),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const { admissionId, ...content } = value;
+    if (admissionId !== digestValue(content)) {
+        context.addIssue({ code: 'custom', message: 'Runtime admission identity is invalid.' });
+    }
+});
+function fileDigest(path) {
+    return `sha256:${createHash('sha256').update(readFileSync(path)).digest('hex')}`;
+}
+function directoryDigest(path) {
+    const entries = [];
+    const visit = (directory, relative) => {
+        for (const entry of readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0)) {
+            const child = join(directory, entry.name);
+            const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+            if (entry.isDirectory())
+                visit(child, childRelative);
+            else if (entry.isFile())
+                entries.push({ path: childRelative, sha256: fileDigest(child) });
+            else
+                throw new DeliveryError('Runtime distribution contains an unsupported link or file type.');
+        }
+    };
+    visit(path, '');
+    if (entries.length === 0)
+        throw new DeliveryError('Runtime distribution is empty.');
+    return digestValue(entries);
+}
+function manifest(path) {
+    const value = JSON.parse(readFileSync(path, 'utf8'));
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new DeliveryError('Runtime package or plugin manifest is invalid.');
+    }
+    return value;
+}
+/**
+ * An installer-owned, private, immutable admission binds the actual CLI and MCP
+ * bytes to one source archive and the consuming repository configuration.
+ * Neither invocation surface can refresh its own admission during a mutation.
+ */
+export function assertDeliveryRuntimeAdmitted(input) {
+    const root = gitRoot(input.repoRoot);
+    const loaded = loadDeliveryConfig(root);
+    const path = join(gitCommonDir(root), 'ai-delivery', 'runtime-admission.json');
+    let admission;
+    try {
+        admission = RuntimeAdmissionSchema.parse(JSON.parse(assertPrivateFile(path).toString('utf8')));
+    }
+    catch {
+        throw new DeliveryError('Missing or invalid private ai-delivery runtime admission; refresh the installed binding before lifecycle mutation.');
+    }
+    const entry = input.runtimeEntryPath ?? process.argv[1];
+    if (!entry)
+        throw new DeliveryError('Running ai-delivery entry path is unavailable.');
+    try {
+        const cliPath = realpathSync(entry);
+        const launcherPath = realpathSync(admission.mcpLauncherPath);
+        const pluginManifestPath = realpathSync(admission.pluginManifestPath);
+        const distPath = dirname(cliPath);
+        const packageManifestPath = join(dirname(distPath), 'package.json');
+        const packageManifest = manifest(packageManifestPath);
+        const pluginManifest = manifest(pluginManifestPath);
+        if (cliPath !== admission.cliPath ||
+            launcherPath !== admission.mcpLauncherPath ||
+            pluginManifestPath !== admission.pluginManifestPath ||
+            realpathSync(join(dirname(dirname(launcherPath)), '.claude-plugin', 'plugin.json')) !== pluginManifestPath ||
+            fileDigest(cliPath) !== admission.cliSha256 ||
+            fileDigest(launcherPath) !== admission.mcpLauncherSha256 ||
+            fileDigest(pluginManifestPath) !== admission.pluginManifestSha256 ||
+            fileDigest(packageManifestPath) !== admission.packageManifestSha256 ||
+            directoryDigest(distPath) !== admission.packageDistSha256 ||
+            admission.configDigest !== loaded.configDigest ||
+            admission.repository !== loaded.config.repository ||
+            admission.capability.cli !== CAPABILITY ||
+            admission.capability.mcp !== CAPABILITY ||
+            packageManifest.name !== '@aviaratech/ai-delivery' ||
+            packageManifest.version !== admission.packageVersion ||
+            pluginManifest.name !== 'ai-delivery' ||
+            pluginManifest.packageVersion !== admission.packageVersion ||
+            pluginManifest.deliveryCapabilityVersion !== CAPABILITY) {
+            throw new DeliveryError('Installed CLI/MCP source, capability or repository admission disagrees with the running delivery contract.');
+        }
+    }
+    catch (error) {
+        if (error instanceof DeliveryError)
+            throw error;
+        throw new DeliveryError('Installed CLI/MCP source or capability readback is unavailable.');
+    }
+    return admission;
+}
+//# sourceMappingURL=deliveryAdmission.js.map

package/dist/services/deliveryAdmission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveryAdmission.js","sourceRoot":"","sources":["../../src/services/deliveryAdmission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAElD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC1D,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACrG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,iBAAiB,EAAE,MAAM;IACzB,iBAAiB,EAAE,MAAM;IACzB,qBAAqB,EAAE,MAAM;IAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,oBAAoB,EAAE,MAAM;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAC3D,mBAAmB,EAAE,MAAM;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAClD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1C,IAAI,WAAW,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAQ,EAAE;QAC1D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvF,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC7D,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1E,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;iBAChD,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;;gBACrF,MAAM,IAAI,aAAa,CAAC,iEAAiE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACpF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IACzE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAG7C;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,wBAAwB,CAAC,CAAC;IAC/E,IAAI,SAA2B,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CACrB,oHAAoH,CACrH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,YAAY,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACpD,IACE,OAAO,KAAK,SAAS,CAAC,OAAO;YAC7B,YAAY,KAAK,SAAS,CAAC,eAAe;YAC1C,kBAAkB,KAAK,SAAS,CAAC,kBAAkB;YACnD,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,KAAK,kBAAkB;YAC1G,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,SAAS;YAC3C,UAAU,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,iBAAiB;YACxD,UAAU,CAAC,kBAAkB,CAAC,KAAK,SAAS,CAAC,oBAAoB;YACjE,UAAU,CAAC,mBAAmB,CAAC,KAAK,SAAS,CAAC,qBAAqB;YACnE,eAAe,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,iBAAiB;YACzD,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;YAC9C,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU;YACjD,SAAS,CAAC,UAAU,CAAC,GAAG,KAAK,UAAU;YACvC,SAAS,CAAC,UAAU,CAAC,GAAG,KAAK,UAAU;YACvC,eAAe,CAAC,IAAI,KAAK,yBAAyB;YAClD,eAAe,CAAC,OAAO,KAAK,SAAS,CAAC,cAAc;YACpD,cAAc,CAAC,IAAI,KAAK,aAAa;YACrC,cAAc,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc;YAC1D,cAAc,CAAC,yBAAyB,KAAK,UAAU,EACvD,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,4GAA4G,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,iEAAiE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/services/deliveryRecordService.d.ts

@@ -0,0 +1,47 @@
+import * as z from 'zod/v4';
+declare const DeliveryRecordSchema: z.ZodObject<{
+    blockerTimeMs: z.ZodNullable<z.ZodNumber>;
+    cycleTimeMs: z.ZodNumber;
+    firstPassApproved: z.ZodNullable<z.ZodBoolean>;
+    issueNumber: z.ZodNumber;
+    mergedAt: z.ZodISODateTime;
+    mergeSha: z.ZodString;
+    points: z.ZodNumber;
+    recordedAt: z.ZodISODateTime;
+    repository: z.ZodString;
+    reviewRounds: z.ZodNullable<z.ZodNumber>;
+    schemaVersion: z.ZodLiteral<"ai-delivery.delivery-record@1">;
+    terminalCleanupAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type DeliveryRecord = z.infer<typeof DeliveryRecordSchema>;
+export interface PointBucketStatistics {
+    blockerMeasurementCount: number;
+    deliveries: number;
+    firstPassRate: null | number;
+    meanReviewRounds: null | number;
+    medianBlockerTimeMs: null | number;
+    medianCycleTimeMs: null | number;
+    points: DeliveryRecord['points'];
+}
+export interface VelocityReport {
+    planningCapacityPoints: number;
+    pointBuckets: PointBucketStatistics[];
+    rollingFourWeekMedianPoints: number;
+    schemaVersion: 'ai-delivery.velocity-report@1';
+    weeks: {
+        end: string;
+        mergedPoints: number;
+        start: string;
+    }[];
+}
+export declare function buildVelocityReport(records: readonly DeliveryRecord[], now?: Date, configuredPoints?: readonly number[]): VelocityReport;
+export declare function getDeliveryRecords(projectRoot?: string): DeliveryRecord[];
+export declare function recordMergedDeliveries(candidates: readonly DeliveryRecord[], projectRoot?: string): Promise<{
+    records: DeliveryRecord[];
+    state: 'already-recorded' | 'recorded';
+}>;
+export declare function recordMergedDelivery(candidate: DeliveryRecord, projectRoot?: string): Promise<{
+    record: DeliveryRecord;
+    state: 'already-recorded' | 'recorded';
+}>;
+export {};

package/dist/services/deliveryRecordService.js

@@ -0,0 +1,199 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import * as z from 'zod/v4';
+import { gitCommonDir } from '../git.js';
+import { ensurePrivateDirectoryDurably, writePrivateJsonFileAtomically } from '../utils/atomicJson.js';
+import { DeliveryError } from '../errors.js';
+import { withLock } from '../utils/lockfile.js';
+const deliveryRecordsPath = (root) => join(gitCommonDir(root), 'ai-delivery', 'deliveries.json');
+const MS_PER_WEEK = 7 * 24 * 60 * 60 * 1000;
+const DeliveryRecordSchema = z
+    .object({
+    blockerTimeMs: z.number().int().nonnegative().nullable(),
+    cycleTimeMs: z.number().int().nonnegative(),
+    firstPassApproved: z.boolean().nullable(),
+    issueNumber: z.number().int().positive(),
+    mergedAt: z.iso.datetime(),
+    mergeSha: z.string().regex(/^[0-9a-f]{40}$/u),
+    points: z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+    recordedAt: z.iso.datetime(),
+    repository: z.string().regex(/^[^/\s]+\/[^/\s]+$/u),
+    reviewRounds: z.number().int().positive().nullable(),
+    schemaVersion: z.literal('ai-delivery.delivery-record@1'),
+    terminalCleanupAt: z.iso.datetime(),
+})
+    .strict()
+    .superRefine((record, context) => {
+    if (Date.parse(record.terminalCleanupAt) < Date.parse(record.mergedAt)) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Terminal cleanup cannot precede the merge.',
+            path: ['terminalCleanupAt'],
+        });
+    }
+    if (Date.parse(record.recordedAt) < Date.parse(record.terminalCleanupAt)) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Delivery recording cannot precede terminal cleanup.',
+            path: ['recordedAt'],
+        });
+    }
+});
+const DeliveryRecordFileSchema = z
+    .object({
+    records: z.array(DeliveryRecordSchema),
+    schemaVersion: z.literal('ai-delivery.delivery-records@1'),
+})
+    .strict();
+export function buildVelocityReport(records, now = new Date(), configuredPoints = []) {
+    if (!Number.isFinite(now.getTime())) {
+        throw new DeliveryError('Velocity report requires a valid observation time.');
+    }
+    const endMs = now.getTime();
+    const startMs = endMs - 4 * MS_PER_WEEK;
+    const selected = records.filter((record) => {
+        const mergedMs = Date.parse(record.mergedAt);
+        return mergedMs >= startMs && mergedMs < endMs;
+    });
+    const weeks = Array.from({ length: 4 }, (_, index) => {
+        const weekStart = startMs + index * MS_PER_WEEK;
+        const weekEnd = weekStart + MS_PER_WEEK;
+        return {
+            end: new Date(weekEnd).toISOString(),
+            mergedPoints: selected
+                .filter((record) => {
+                const mergedMs = Date.parse(record.mergedAt);
+                return mergedMs >= weekStart && mergedMs < weekEnd;
+            })
+                .reduce((sum, record) => sum + record.points, 0),
+            start: new Date(weekStart).toISOString(),
+        };
+    });
+    const rollingFourWeekMedianPoints = median(weeks.map((week) => week.mergedPoints)) ?? 0;
+    return {
+        planningCapacityPoints: Math.floor(rollingFourWeekMedianPoints * 0.8),
+        pointBuckets: [...new Set([...configuredPoints, ...selected.map((record) => record.points)])]
+            .sort((left, right) => left - right)
+            .map((points) => pointBucket(points, selected)),
+        rollingFourWeekMedianPoints,
+        schemaVersion: 'ai-delivery.velocity-report@1',
+        weeks,
+    };
+}
+export function getDeliveryRecords(projectRoot = process.cwd()) {
+    const path = deliveryRecordsPath(projectRoot);
+    if (!existsSync(path)) {
+        return [];
+    }
+    try {
+        return DeliveryRecordFileSchema.parse(JSON.parse(readFileSync(path, 'utf8'))).records;
+    }
+    catch (error) {
+        throw new DeliveryError(`Delivery record store is invalid: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+export async function recordMergedDeliveries(candidates, projectRoot = process.cwd()) {
+    if (candidates.length === 0) {
+        throw new DeliveryError('Delivery recording requires at least one merged delivery.');
+    }
+    const candidateRecords = candidates.map((candidate) => DeliveryRecordSchema.parse(candidate));
+    ensurePrivateDirectoryDurably(join(gitCommonDir(projectRoot), 'ai-delivery'));
+    return await withLock(join(gitCommonDir(projectRoot), 'ai-delivery'), {
+        operation: () => {
+            const records = getDeliveryRecords(projectRoot);
+            const pending = [];
+            for (const candidate of candidateRecords) {
+                const existing = [...records, ...pending].find((value) => sameDeliveryIdentity(value, candidate));
+                if (existing !== undefined && !sameImmutableFacts(existing, candidate)) {
+                    throw new DeliveryError('Delivery facts conflict with the existing immutable delivery record.');
+                }
+                if (existing === undefined) {
+                    pending.push(candidate);
+                }
+            }
+            if (pending.length > 0) {
+                writePrivateJsonFileAtomically(deliveryRecordsPath(projectRoot), {
+                    records: [...records, ...pending].sort(compareDeliveryRecords),
+                    schemaVersion: 'ai-delivery.delivery-records@1',
+                });
+            }
+            const readback = getDeliveryRecords(projectRoot);
+            const persisted = candidateRecords.map((candidate) => {
+                const match = readback.find((value) => sameDeliveryIdentity(value, candidate));
+                if (match === undefined || !sameImmutableFacts(match, candidate)) {
+                    throw new DeliveryError('Delivery record readback did not match the merged delivery.');
+                }
+                return match;
+            });
+            return {
+                records: persisted,
+                state: pending.length === 0 ? 'already-recorded' : 'recorded',
+            };
+        },
+        projectRoot,
+        timeout: 5000,
+    });
+}
+export async function recordMergedDelivery(candidate, projectRoot = process.cwd()) {
+    const result = await recordMergedDeliveries([candidate], projectRoot);
+    const [record] = result.records;
+    if (record === undefined) {
+        throw new DeliveryError('Delivery record batch did not return the merged delivery.');
+    }
+    return { record, state: result.state };
+}
+function compareDeliveryRecords(left, right) {
+    return (left.repository.localeCompare(right.repository) ||
+        left.issueNumber - right.issueNumber ||
+        left.mergeSha.localeCompare(right.mergeSha));
+}
+function median(values) {
+    if (values.length === 0) {
+        return null;
+    }
+    const sorted = [...values].sort((left, right) => left - right);
+    const middle = Math.floor(sorted.length / 2);
+    const upper = sorted[middle];
+    if (upper === undefined) {
+        return null;
+    }
+    if (sorted.length % 2 === 1) {
+        return upper;
+    }
+    const lower = sorted[middle - 1];
+    return lower === undefined ? upper : (lower + upper) / 2;
+}
+function pointBucket(points, records) {
+    const matches = records.filter((record) => record.points === points);
+    const blockerMeasurements = matches.flatMap((record) => record.blockerTimeMs === null ? [] : [record.blockerTimeMs]);
+    const firstPassMeasurements = matches.filter((record) => record.firstPassApproved !== null);
+    const reviewMeasurements = matches.flatMap((record) => (record.reviewRounds === null ? [] : [record.reviewRounds]));
+    return {
+        blockerMeasurementCount: blockerMeasurements.length,
+        deliveries: matches.length,
+        firstPassRate: firstPassMeasurements.length === 0
+            ? null
+            : firstPassMeasurements.filter((record) => record.firstPassApproved).length / firstPassMeasurements.length,
+        meanReviewRounds: reviewMeasurements.length === 0
+            ? null
+            : reviewMeasurements.reduce((sum, rounds) => sum + rounds, 0) / reviewMeasurements.length,
+        medianBlockerTimeMs: median(blockerMeasurements),
+        medianCycleTimeMs: median(matches.map((record) => record.cycleTimeMs)),
+        points,
+    };
+}
+function sameDeliveryIdentity(left, right) {
+    return (left.repository === right.repository && left.issueNumber === right.issueNumber && left.mergeSha === right.mergeSha);
+}
+function sameImmutableFacts(left, right) {
+    return (left.blockerTimeMs === right.blockerTimeMs &&
+        left.cycleTimeMs === right.cycleTimeMs &&
+        left.firstPassApproved === right.firstPassApproved &&
+        left.issueNumber === right.issueNumber &&
+        left.mergeSha === right.mergeSha &&
+        left.mergedAt === right.mergedAt &&
+        left.points === right.points &&
+        left.repository === right.repository &&
+        left.reviewRounds === right.reviewRounds);
+}
+//# sourceMappingURL=deliveryRecordService.js.map