@bluewombat/runtime 0.1.0

package/SPECS.md

@@ -0,0 +1,303 @@
+# Host
+
+The composition root, not a Transformer. It is the process you run: Cursor, admission,
+Conductor, report. It is not a FeatureStandard transformer and it is not a
+sequencer — Conductor sequences; this package calls it.
+
+Host does not know a tracker. It resolves one FeatureManager package, hands it
+the options it never reads, and drives the `ManagerPort` that package returns.
+Adding GitLab or Jira changes nothing here.
+
+## 1. Job
+
+```
+  boot                         Host, each tick                       others
+  ----                         ---------------                       ------
+  paths + slots                listen: drain the manager since       the manager package
+  manager + its options          the Cursor                          WorkLedger
+  the plugins (isolation,      probe: abandon what the tracker       Conductor
+    persist)                     no longer lists                     Publisher / Refresher slots
+  the work line copy           refresh the work line copy
+                               one Delivery at a time:
+                                 admit / ready / cancel,
+                                 reconcile, drive, report,
+                                 save Cursor
+                               sweep: drive what is in flight
+                                 or received, report
+                           ←   idle | ran | stopped
+```
+
+**In:** WorkLineStable, how to isolate and fold it (`workLine.isolation`),
+workspace root, ledger root, a manager specifier and its opaque options,
+Planner / Builder / Gate argv.
+**Out:** a typed result. The CLI maps that to an exit code.
+
+## 2. Faces
+
+| Face   | Entry                                                               | Must not                                      |
+| ------ | ------------------------------------------------------------------- | --------------------------------------------- |
+| Import | `openHost(options)` then `runOnce` / `run`                          | Live inside Conductor `src/run/`              |
+| CLI    | `mason run \| watch \| status \| cancel \| init \| setup \| doctor` | Interpret a FeatureStandard; pick Child paths |
+
+`src/loop/` is the process: `open-host.ts` opens packages (composition),
+`tick.ts` runs the listen / probe / Cursor / sweep loop, `deliveries.ts` handles one
+Delivery, `drive.ts` runs one Project and reports on the Feature that ran,
+`report.ts` maps Conductor outcomes to FeatureManager Events,
+`journal.ts` and `trace.ts` are its film and its stdout. `loop/` may import
+Transformer packages: this package **is** the composition root for the
+execution Transformers. Conductor still must not. Host must not import a
+tracker or an isolation strategy by name: both reach it through `plugins/`.
+§ 1–7 describe `loop/`; § 8 describes `operator/`. The layers and the one
+import rule between them are in [README.md](./README.md) § Layers.
+
+## 3. Configuration
+
+`mason.config.json`, found by walking up from the working directory, or the
+file `--config` names. Relative paths in the file resolve against the file;
+relative paths in a flag resolve against the working directory. Flags override
+the file. `--manager-option key=value` merges per key, so overriding one option
+does not drop the others; a repeated key becomes an array.
+
+Host validates only its own keys. `managerOptions` is copied through untouched:
+a tracker's fields are that package's business, and its errors are that
+package's words.
+
+## 4. Loading a manager
+
+`manager` is a package name or a path. Resolution imports the bare specifier
+first — mason and its managers installed side by side in one project — then
+walks up from the config file's directory, which covers a global `mason`
+driving a locally installed manager. A module without `createManager` is
+refused by name, and a manager that cannot read its options returns a reason,
+never a throw.
+
+Secrets never pass through Host. The manager reads them from the environment
+it is handed.
+
+## 5. Cursor
+
+Path: `<ledgerRoot>/cursor`. Contents: the last committed Listener Cursor, or
+absent. `runOnce` passes it as the manager's `since`. After each Delivery is
+handled (including skipped / invalid), the Cursor is that Delivery's name.
+`unavailable` / interrupt does **not** advance the Cursor: the Delivery is
+retried on the next tick.
+
+A crash may replay one Delivery. Handlers must tolerate a repeat: admit is
+idempotent on `key`; a manager may append an Event twice — accepted trade for
+not losing an Event.
+
+## 6. One Delivery
+
+`adapt` first. Then:
+
+| Adapter                                     | Host                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+| ------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `invalid` (new, or the intention changed)   | `recordInvalid`, emit `invalid`                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `invalid` (same fingerprint as recorded)    | leave it; the tracker was told, and telling it is what delivered it again                                                                                                                                                                                                                                                                                                                                                                            |
+| `upsert` (new/invalid)                      | `admit`, emit `accepted`, then `runProject` when the Project is free; a Project frozen by an escalation queues the Feature (journal `queued`, one `progress` Event) and the sweep starts it once the Project is free. Post-run Events (`planned` / `done` / `escalated`) are reported on the Feature that was driven, not on the delivered key. `progress` (once per refusal) when the Authority sent the Submission back and a repair is on its way |
+| `upsert` (in-flight / terminal)             | leave it; do not restart. In-flight is `planning`, `running`, `escalated`, `integrating`, `submitted`; terminal is `merging`, `done`, `cancelled`. An echo of a Host report (Submitted, a progress comment) is this row: do not admit it                                                                                                                                                                                                              |
+| `upsert` (`received`)                       | same drive as a new upsert (no second `accepted`)                                                                                                                                                                                                                                                                                                                                                                                                    |
+| `upsert` + `signalsReady` while `escalated` | same as `ready` — a poll snapshot has no `labeled` edge                                                                                                                                                                                                                                                                                                                                                                                              |
+| `ready`                                     | `resumeReady`, emit `resumed`, `runProject`, then the same post-run Events                                                                                                                                                                                                                                                                                                                                                                           |
+| `cancel`                                    | `conductor.cancel`. `cancelled`, or `reject_late` when the ledger says point of no return; nothing on `done` (the issue closing is the Submission's own doing) or `cancelled`                                                                                                                                                                                                                                                                        |
+| `unavailable` / interrupt                   | stop the tick                                                                                                                                                                                                                                                                                                                                                                                                                                        |
+
+`runProject` is always preceded by `reconcile` on that Project. Host never
+drives an `escalated` Feature: that state is frozen until a human `ready`.
+
+Every Event Host emits is a write to the tracker, and a tracker that lists by
+"last updated" delivers the intention again on the next pass because of that
+write. No row above may emit on that echo: `invalid` is keyed by fingerprint,
+`accepted` by the ledger not knowing the key (or knowing it `invalid`), the
+queued `progress` by `eventId`, the post-run Events by the Feature that was
+driven, `resumed` by taking the signal back, `cancelled` by the ledger
+refusing a second cancel, an in-flight Feature (including `submitted`) by
+leaving the upsert.
+
+On top of that, every Event that states a fact carries an `eventId`, so a
+manager that already has it says nothing — after a restart as much as within
+a pass. The id names the fact: `<key>:accepted:<fingerprint>` and
+`<key>:invalid:<fingerprint>` (an edit is a new fact), `<key>:planned:<planned_at>`,
+`<key>:integrated:<subtask>`, `<key>:submitted:<reference>`,
+`<key>:refused:<n>`, `<key>:queued:<blocker>`, `<key>:resumed:<round>`,
+`<key>:escalated:<round>:<kind>[:<subtask>]`, `<key>:done`,
+`<key>:cancelled`, `<key>:reject_late:…`. The round is the ledger's count of
+`ready` taken: a Plan refused, resumed and refused again has the same Attempt
+count both times, and only the round tells the two escalations apart.
+`escalation_reminder` alone would carry none, repetition being its point.
+
+## 7. Loop
+
+`run`: `runOnce` then, if `pollIntervalMs` is set, sleep and repeat until
+interrupt.
+
+SIGINT / SIGTERM: set the interrupt flag, `conductor.pause()`, stop after the
+current Delivery.
+
+Each pass appends JSON lines to `<ledgerRoot>/events.jsonl` (listen, probed,
+Transformer progress, admitted, reported, queued, idle, a heartbeat while
+`submitted`). That file is a film, not truth: a crash may drop the last lines;
+the ledger is still right. `mason run` still writes a human Trace on stdout.
+The journal is how another process attaches.
+
+After listen, if the manager declares `probe` and the listen reached the source
+(`completed`, `listened` — not `source-lost` / `interrupted` / `invalid-invocation`),
+Host asks `probe` of every Feature abandon is still legal for (`received`,
+`planning`, `running`, `escalated`, `integrating`, `submitted`). `gone` is the
+same abandon as a `cancel` delivery, so a deleted item a poll can never list
+still frees the Project; `unavailable` is not abandon. Probe runs before the
+work-line refresh and the deliveries, so a cancel in this pass can start the
+`received` queue on a copy that was just fast-forwarded.
+
+The sweep after the deliveries drives every Project that has work in flight
+**or** `received`, once per tick. The result is reported on the Feature that
+was driven. A `received` Feature behind an escalation is journaled `queued`
+and left; the next sweep that finds the Project free claims it. The same set
+(`in-flight ∪ received`) decides whether this pass refreshes the work line
+copy: starting a queued Feature on a copy that was not fast-forwarded this
+tick would build on a version that no longer exists.
+
+## 8. init, setup, doctor, watch, status and cancel
+
+`init` writes a config that already runs: the Planner is the bootstrap one from
+`@bluewombat/slots/planners/`, the Builder is a stub that says what to replace
+(example Cursor CLI and Claude Code Builders live in `@bluewombat/slots/builders/`),
+and the Gate sequence starts empty. Example Gates live in
+`@bluewombat/slots/gates/` (`parent-clean`, `sensitive-path`,
+`workspace-changed`, `ci-green`).
+
+Two Gate sequences: `builder.gates` is judged on each Subtask, `assembly.gates`
+on the feature they assemble into. A check that is right for one can be wrong for the
+other — `workspace-changed` says an Attempt that changed nothing did nothing,
+which is true of a Subtask and false of an assembly whose correct outcome is that
+nothing was left to do. The assembly produces nothing unless something refused it
+first: it is a judgement, and a refusal is `assembly.fix`, not a second first-pass.
+
+Every child of a Task carries its own ceiling and no other. Every `cmd` names
+its own `timeoutMs`, and none is inherited from a neighbour — nothing else
+bounds a producer. A Gate takes its own `timeoutMs`,
+or its sequence's `defaultTimeoutMs`, and a Gate that would end up with neither
+is refused when the config loads. Nothing is derived from what another child
+left behind, so what bounds a whole Task is arithmetic the Project can do:
+the builder's `maxAttempts` times its producer's ceiling plus the sum of its Gates'.
+An assembly fix is bounded the same way from `assembly.maxAttempts` and `assembly.fix`.
+Root `timeoutMs` bounds what is outside a Task — the manager, the
+isolations. Host has no flag named after a tracker (`--repo` is not a Host
+flag): tracker fields come from that package.
+
+At a terminal it asks rather than demands. Which manager comes from the packages
+installed nearby that declare the `mason-manager` keyword — Host holds no list
+of trackers, so a third-party one is offered the same way. A single one is named
+and confirmed rather than assumed: picking it silently reads as though the tool
+only speaks that tracker. None installed is an error naming the install
+command. What that manager needs comes from its own `questionsManager`: it
+declares the wording and the validation, Host reads the line. An option already
+given on the command line is not asked for again.
+
+WorkLineStable must exist before a run, so `init` inspects the path, names the
+branch when it is a git tree, writes `workLine.isolation` to
+`@bluewombat/isolation-git` or `@bluewombat/isolation-copy` from that inspection
+(Isolator and Integrator do not choose a strategy; Host loads the package named
+here), and offers to clone one —
+after listing the
+remote's branches and refusing a name that is not among them, because a
+`git clone --branch` that misses complains about the repository rather than the
+name that was wrong. `--clone REMOTE` (with an optional `--branch`, defaulting
+to the remote's own HEAD) answers that question ahead of time, so a script
+reaches the same place through the same code. An existing directory is never
+re-cloned. `init` then runs `setup` and offers to apply it, so nothing has to be
+re-run by hand.
+
+A flag is read by the same question that would have asked for it, so
+`--manager-option labels=mason` lands in the config in the shape a typed answer
+would, and a malformed one is refused before anything is written. The setup plan
+that follows never decides `init`'s exit code: it wrote its files, and
+`mason init && mason setup --apply` must not stop because a token is not
+exported yet.
+
+`--manager` turns every question off, which is what a script wants;
+`--interactive` forces them when stdin is a pipe. Overwriting an existing config
+needs `--force`, or a yes to the question. Ctrl-C, Ctrl-D, or a pipe running dry
+stops on the spot with `Cancelled. Nothing written.` and exit 130 — a read after
+the input has ended raises rather than answering empty, so no question is ever
+re-asked at a terminal nobody is at. A refused answer is re-asked at most three
+times, each time saying what was wrong with it.
+
+`setup` asks the manager to bring the tracker to the shape a run expects. Host
+knows none of that shape: it resolves the manager, calls `setupManager`, and
+prints the steps. Without `--apply` nothing is written — a plan says what is
+`satisfied` and what is `missing`. With `--apply`, a step it fixed is `applied`.
+A `blocked` step exits 1; a `missing` step in a plan does not. A manager with no
+`setupManager` is reported as having nothing to do, and exits 0.
+
+`doctor` reports one line per check and exits 1 on any `fail`: the Node
+version, which config was found, whether the invocation is complete, whether
+WorkLineStable exists (and whether it is a git tree), whether `workLine.isolation`
+matches that tree and Authority, whether the created
+directories have an existing ancestor, whether every slot command resolves,
+whether the manager loads, and then the manager's own findings. It parses
+without demanding that paths exist, so one missing directory does not hide
+every other check, and it never uses the network.
+
+`watch` and `status` are the operator live view. They open the ledger the same
+way `run` does (`openFilesystemPersist` then `openWorkLedger`) and they do not
+open a manager, Conductor, or Host. `status` prints a snapshot of every known
+Feature and exits. `watch` prints that snapshot, then follows new journal lines
+until SIGINT (exit 0). A missing journal is not an error: the snapshot still
+stands. `--json` prints the snapshot as JSON. Ctrl-C on watch leaves the worker
+running. The file can grow without rotation.
+
+`cancel <key>` abandons one Feature the same way a `cancel` delivery does. The
+team still abandons in the FeatureManager; this is the hatch when the tracker
+cannot say the intention is gone (a manager with no `probe`, or an operator
+who already knows) and the ledger would otherwise freeze the Project. It
+takes the ledger lock — stop `run` first if it holds it. Exit 0 on cancel or
+already cancelled, 1 when abandon is refused (`done`, point of no return), 2
+when the key is missing or the ledger does not know it. The key is the first
+positional: `cancel github:owner/name#19`.
+
+## 9. Acceptance
+
+1. Convertible upsert in an empty Source → WorkLineStable carries the Builder
+   marker, Thread `accepted`, `planned`, `done`, Cursor is that file name.
+2. Unconvertible upsert → Thread `invalid`, no Conductor work, Cursor advanced.
+3. Fail-blocking Gate, then a `ready` Event, then passing Gates → Thread
+   contains `escalated` then `resumed` then `done`.
+4. `cancel` while `escalated` → Thread `cancelled`; WorkLineStable seed-only.
+5. Re-running `runOnce` with the saved Cursor does not re-deliver the first Event.
+6. GitHub: convertible issue (mocked API) → WorkLineStable marker, comments
+   `accepted`, `planned`, `done`.
+7. GitHub: fail-blocking then the same issue with the ready label → `escalated`,
+   `resumed`, `done`.
+8. A manager named by path, and one named by package, both load; a module without
+   `createManager` is refused by name.
+9. `init --manager` then `doctor` in an empty directory reports exactly what is missing;
+   `init` without `--manager` and without a terminal is refused.
+10. `setup` without `--apply` writes nothing, and names the flag that would;
+    a manager without `setupManager` exits 0 saying so.
+11. The wizard names the only installed manager, repeats a question its manager
+    refused, and skips an option already passed as a flag.
+12. `--clone` takes the named branch, falls back to the remote's default,
+    refuses a branch the remote does not carry, and re-clones nothing.
+13. `list()` after admit of two keys returns two summaries; a refused command
+    does not appear; `listInFlight()` is the mid-flight subset.
+14. A Transformer `status` line and a `gate-finished` line during `runProject`
+    appear in `<ledgerRoot>/events.jsonl`.
+15. `watch` on a ledger with Features and no journal prints the snapshot,
+    including a `submitted` Feature's reference, and exits 0 on interrupt. It
+    does not import `openHost` or a manager package.
+16. Two Features on one Project, the first `escalated`: admitting the second
+    emits `accepted` and one `progress` (queued), not `escalated`; the second
+    stays `received`. Cancelling the first in a later pass starts the second.
+    A `submitted` Feature that reaches `done` while a second is delivered
+    reports `done` on the first.
+17. After an escalation, a `probe` of `gone` cancels that Feature and the sweep
+    starts the `received` queue in the same pass. `unavailable` leaves the
+    escalation. A listen that missed the source does not probe. GitHub: a 404
+    on `GET /issues/{n}` after a completed listen cancels, even when the
+    listing is empty. `cancel <key>` abandons an escalated Feature.
+18. A Feature `submitted`, then the same upsert delivered again, then the
+    Authority refuses: Host skips the echo, records no `pending_fingerprint`,
+    and the next pass repairs. It does not escalate as a plan refusal.
+
+How to install, configure and run: [README.md](./README.md).

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,172 @@
+#!/usr/bin/env node
+import { PRODUCT } from "@bluewombat/manager-kit";
+import { CONFIG_FILENAME } from "./config/find-config.js";
+import { DEFAULT_HOME } from "./config/home.js";
+import { parseArgs } from "./config/parse-args.js";
+import { openHost } from "./loop/open-host.js";
+import { runCancel } from "./operator/cancel.js";
+import { runDoctor } from "./operator/doctor.js";
+import { runInit } from "./operator/init.js";
+import { runLive } from "./operator/live.js";
+import { isInteractive, terminalAsk } from "./operator/prompt.js";
+import { runSetup } from "./operator/setup.js";
+const USAGE = `Usage: ${PRODUCT} <command>
+
+  run      drain the FeatureManager, run Conductor, report
+  watch    snapshot the ledger and follow the journal
+  status   snapshot the ledger, then exit
+  cancel   abandon a Feature by key (when the tracker cannot say it is gone)
+  init     set this directory up — asks, writes, then runs setup
+  doctor   check the config, the slots, and the manager
+  setup    prepare the tracker (--apply to write; a plan without it)
+
+init flags:   --manager PKG --manager-option KEY=VALUE --work-line-stable DIR
+              --clone REMOTE [--branch NAME] --force --interactive
+
+Shared flags: --config FILE --manager NAME --manager-option KEY=VALUE --home DIR
+              --work-line-stable DIR --work-line-branch NAME --workspace-root DIR --ledger DIR
+              --planner -- CMD --planner-timeout-ms N
+              --builder -- CMD --builder-timeout-ms N --builder-max-attempts N
+              --builder-repair -- CMD --builder-repair-timeout-ms N
+              --builder-gate ID -- CMD --builder-gate-timeout-ms N
+              --assembly-fix -- CMD --assembly-fix-timeout-ms N --assembly-max-attempts N
+              --assembly-gate ID -- CMD --assembly-gate-timeout-ms N
+              --timeout-ms N --poll-interval-ms N
+
+A gate's --*-gate-timeout-ms comes before the --*-gate it bounds.
+
+watch / status also take --json (snapshot as JSON).
+
+Without --config, the nearest ${CONFIG_FILENAME} is used. --home is where Host
+keeps its own files (default ${DEFAULT_HOME}): the ledger, the workspaces, its copy of
+the work line.
+`;
+function installSignalHandlers(state) {
+    const onSignal = () => {
+        state.interrupted = true;
+    };
+    process.on("SIGINT", onSignal);
+    process.on("SIGTERM", onSignal);
+    return () => {
+        process.off("SIGINT", onSignal);
+        process.off("SIGTERM", onSignal);
+    };
+}
+async function run(argv) {
+    const parsed = parseArgs(argv, { cwd: process.cwd() });
+    if (!parsed.ok) {
+        process.stderr.write(`${parsed.reason}\n`);
+        return 2;
+    }
+    const interruptFlag = { interrupted: false };
+    const options = { ...parsed.invocation, interruptFlag };
+    const detachSignals = installSignalHandlers(interruptFlag);
+    let host;
+    try {
+        host = await openHost(options);
+        const result = await host.run();
+        if (result.lastRun?.outcome === "refused") {
+            return 1;
+        }
+        return interruptFlag.interrupted ? 130 : 0;
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        return 2;
+    }
+    finally {
+        await host?.close();
+        detachSignals();
+    }
+}
+async function main(argv) {
+    const command = argv[0];
+    const rest = argv.slice(1);
+    if (command === "run") {
+        return await run(rest);
+    }
+    if (command === "watch" || command === "status") {
+        const interruptFlag = { interrupted: false };
+        const detachSignals = installSignalHandlers(interruptFlag);
+        try {
+            return await runLive({
+                cwd: process.cwd(),
+                argv: rest,
+                write: (line) => process.stdout.write(line),
+                interruptFlag,
+                follow: command === "watch",
+            });
+        }
+        finally {
+            detachSignals();
+        }
+    }
+    if (command === "init") {
+        // Asking only makes sense at a terminal; a script gets the flags-only path.
+        // `--interactive` forces the questions when stdin is a pipe.
+        const wizard = (isInteractive() || rest.includes("--interactive")) && !rest.includes("--manager");
+        const terminal = wizard ? terminalAsk() : undefined;
+        try {
+            const result = await runInit({
+                cwd: process.cwd(),
+                argv: rest,
+                env: process.env,
+                write: (line) => process.stdout.write(line),
+                ...(terminal === undefined ? {} : { ask: terminal.ask }),
+            });
+            if (!result.ok) {
+                process.stderr.write(`${result.reason}\n`);
+                return result.exitCode ?? 2;
+            }
+            return result.exitCode;
+        }
+        finally {
+            terminal?.close();
+        }
+    }
+    if (command === "setup") {
+        const interruptFlag = { interrupted: false };
+        const detachSignals = installSignalHandlers(interruptFlag);
+        try {
+            return await runSetup({
+                cwd: process.cwd(),
+                argv: rest,
+                env: process.env,
+                write: (line) => process.stdout.write(line),
+                interruptFlag,
+            });
+        }
+        finally {
+            detachSignals();
+        }
+    }
+    if (command === "doctor") {
+        return await runDoctor({
+            cwd: process.cwd(),
+            argv: rest,
+            env: process.env,
+            write: (line) => process.stdout.write(line),
+        });
+    }
+    if (command === "cancel") {
+        const interruptFlag = { interrupted: false };
+        const detachSignals = installSignalHandlers(interruptFlag);
+        try {
+            return await runCancel({
+                cwd: process.cwd(),
+                argv: rest,
+                env: process.env,
+                write: (line) => process.stdout.write(line),
+                interruptFlag,
+            });
+        }
+        finally {
+            detachSignals();
+        }
+    }
+    process.stderr.write(USAGE);
+    return 2;
+}
+const exitCode = await main(process.argv.slice(2));
+process.exitCode = exitCode;
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,MAAM,KAAK,GAAG,UAAU,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA2BC,eAAe;+BAChB,YAAY;;CAE1C,CAAC;AAEF,SAAS,qBAAqB,CAAC,KAA+B;IAC5D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3B,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc;IAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,aAAa,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAgB,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,IAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QACpB,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;gBACnB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC3C,aAAa;gBACb,MAAM,EAAE,OAAO,KAAK,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,MAAM,GACV,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;gBAC3B,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC3C,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC;gBACpB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC3C,aAAa;aACd,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,MAAM,SAAS,CAAC;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC;gBACrB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC3C,aAAa;aACd,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/config/defaults.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The plugins Host ships with, by name — the one place these names are
+ * written. Host's code never imports a plugin; it loads one by the name a
+ * config gives, and these are the names `mason init` writes and `persist`
+ * falls back to. Host's package.json declares exactly these, so a config
+ * `init` wrote runs with nothing else installed. A manager has no default:
+ * Host cannot pick a tracker.
+ */
+/** Isolation by git worktree, for a work line that is a git tree. */
+export declare const ISOLATION_GIT = "@bluewombat/isolation-git";
+/** Isolation by directory copy, for a plain directory. */
+export declare const ISOLATION_COPY = "@bluewombat/isolation-copy";
+/** Where the ledger goes when a config says nothing: one JSON file per key. */
+export declare const DEFAULT_PERSIST = "@bluewombat/persist-fs";
+/** The Planner `init` points a new config at until the Project writes its own. */
+export declare const BOOTSTRAP_PLANNER = "@bluewombat/slots/planners/one-subtask.mjs";
+//# sourceMappingURL=defaults.d.ts.map

package/dist/config/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,eAAO,MAAM,aAAa,8BAA8B,CAAC;AACzD,0DAA0D;AAC1D,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAC3D,+EAA+E;AAC/E,eAAO,MAAM,eAAe,2BAA2B,CAAC;AACxD,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,+CAA+C,CAAC"}

package/dist/config/defaults.js

@@ -0,0 +1,17 @@
+/**
+ * The plugins Host ships with, by name — the one place these names are
+ * written. Host's code never imports a plugin; it loads one by the name a
+ * config gives, and these are the names `mason init` writes and `persist`
+ * falls back to. Host's package.json declares exactly these, so a config
+ * `init` wrote runs with nothing else installed. A manager has no default:
+ * Host cannot pick a tracker.
+ */
+/** Isolation by git worktree, for a work line that is a git tree. */
+export const ISOLATION_GIT = "@bluewombat/isolation-git";
+/** Isolation by directory copy, for a plain directory. */
+export const ISOLATION_COPY = "@bluewombat/isolation-copy";
+/** Where the ledger goes when a config says nothing: one JSON file per key. */
+export const DEFAULT_PERSIST = "@bluewombat/persist-fs";
+/** The Planner `init` points a new config at until the Project writes its own. */
+export const BOOTSTRAP_PLANNER = "@bluewombat/slots/planners/one-subtask.mjs";
+//# sourceMappingURL=defaults.js.map

package/dist/config/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,aAAa,GAAG,2BAA2B,CAAC;AACzD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAC3D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACxD,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC"}

package/dist/config/find-config.d.ts

@@ -0,0 +1,9 @@
+export declare const CONFIG_FILENAME = "mason.config.json";
+/**
+ * The nearest `mason.config.json`, walking up from `startDir`.
+ *
+ * Running from a subdirectory of the project is the common case, so the file is
+ * looked up the way a toolchain config is, not demanded on the command line.
+ */
+export declare function findConfig(startDir: string): string | undefined;
+//# sourceMappingURL=find-config.d.ts.map

package/dist/config/find-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-config.d.ts","sourceRoot":"","sources":["../../src/config/find-config.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,eAAe,sBAA2B,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAa/D"}

package/dist/config/find-config.js

@@ -0,0 +1,25 @@
+import { existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { PRODUCT } from "@bluewombat/manager-kit";
+export const CONFIG_FILENAME = `${PRODUCT}.config.json`;
+/**
+ * The nearest `mason.config.json`, walking up from `startDir`.
+ *
+ * Running from a subdirectory of the project is the common case, so the file is
+ * looked up the way a toolchain config is, not demanded on the command line.
+ */
+export function findConfig(startDir) {
+    let dir = resolve(startDir);
+    for (;;) {
+        const candidate = join(dir, CONFIG_FILENAME);
+        if (existsSync(candidate)) {
+            return candidate;
+        }
+        const parent = dirname(dir);
+        if (parent === dir) {
+            return undefined;
+        }
+        dir = parent;
+    }
+}
+//# sourceMappingURL=find-config.js.map

package/dist/config/find-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-config.js","sourceRoot":"","sources":["../../src/config/find-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,OAAO,cAAc,CAAC;AAExD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/config/home.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Where Host keeps what is its own — the ledger, the workspaces, its copy of
+ * the work line. One directory, so one line in a `.gitignore` covers it and
+ * nothing the system writes lands next to the operator's files.
+ *
+ * `workspaceRoot` and `ledger` in the config still move each part on its own;
+ * this is only where they go when nobody says.
+ */
+export declare const DEFAULT_HOME = "./.mason";
+export declare const HOME_LAYOUT: {
+    readonly workspaces: "workspaces";
+    readonly ledger: "ledger";
+    readonly workLine: "work-line";
+};
+export declare function homeOf(configDir: string, home: string | undefined): string;
+export declare function inHome(home: string, part: keyof typeof HOME_LAYOUT): string;
+//# sourceMappingURL=home.d.ts.map

package/dist/config/home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.d.ts","sourceRoot":"","sources":["../../src/config/home.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,aAAkB,CAAC;AAE5C,eAAO,MAAM,WAAW;;;;CAId,CAAC;AAEX,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAE1E;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,WAAW,GAAG,MAAM,CAE3E"}

package/dist/config/home.js

@@ -0,0 +1,23 @@
+import { join, resolve } from "node:path";
+import { PRODUCT } from "@bluewombat/manager-kit";
+/**
+ * Where Host keeps what is its own — the ledger, the workspaces, its copy of
+ * the work line. One directory, so one line in a `.gitignore` covers it and
+ * nothing the system writes lands next to the operator's files.
+ *
+ * `workspaceRoot` and `ledger` in the config still move each part on its own;
+ * this is only where they go when nobody says.
+ */
+export const DEFAULT_HOME = `./.${PRODUCT}`;
+export const HOME_LAYOUT = {
+    workspaces: "workspaces",
+    ledger: "ledger",
+    workLine: "work-line",
+};
+export function homeOf(configDir, home) {
+    return resolve(configDir, home ?? DEFAULT_HOME);
+}
+export function inHome(home, part) {
+    return join(home, HOME_LAYOUT[part]);
+}
+//# sourceMappingURL=home.js.map

package/dist/config/home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.js","sourceRoot":"","sources":["../../src/config/home.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,OAAO,EAAE,CAAC;AAE5C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,WAAW;CACb,CAAC;AAEX,MAAM,UAAU,MAAM,CAAC,SAAiB,EAAE,IAAwB;IAChE,OAAO,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,YAAY,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,IAA8B;IACjE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC"}