@bradheitmann/odin-sentinel 0.2.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ODIN Sentinel contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,285 @@
+# ODIN Sentinel
+
+**Multi-harness terminal-pane team builder and orchestrator.**
+
+ODIN Sentinel is a portable control layer for visible agent teams running across
+terminal panes, local CLIs, editors, and MCP-capable harnesses. It does not try
+to be another agent. It gives the agents a room, a roster, and a way to work
+without dissolving into chatter.
+
+The questions are practical. Who is here? What role do they hold? Who may
+delegate? Who may verify? What changed, what passed, what failed, and how does
+the session end without leaving a pane stack full of unfinished business?
+
+ODIN starts with shape: an executive office, development pods, and ODIN
+roles across the mesh. Then it provides the protocol pieces that keep the shape
+honest: startup packets, role contracts, model and harness defaults, delegation
+envelopes, receipts, manifests, and closeout checklists.
+
+No hand-copied ritual. No private lore. Any MCP-capable harness can ask. Codex,
+Claude, Droid, Crush, Goose, Zed, OpenCode, or a client written in Rust, Go,
+Zig, or WebAssembly all fit the same boundary when they can launch or bridge
+stdio MCP. These are examples, not bundled dependencies. One server. Many
+harnesses. Same map, same names, same flame.
+
+The repository is named `odin-sentinel` to avoid confusion with the Odin
+programming language.
+
+For a recommended first team, see
+[docs/guides/recommended-starter-team.md](docs/guides/recommended-starter-team.md).
+
+## Terms
+
+- ODIN Sentinel: this MCP server and its portable team-coordination protocol.
+- SCP: Sentinel Coordination Protocol, the ODIN startup, delegation, receipt,
+  manifest, and closeout contract. It is not Secure Copy.
+- CMUX: a compatible terminal-pane control surface. ODIN can support CMUX-style
+  teams, but CMUX is not required by this repository.
+- Harness: a local agent runtime, CLI, editor integration, or MCP client.
+
+## How It Works
+
+```text
+                    MCP-capable clients
+          ┌─────────────────────────────────────┐
+          │ Codex │ Claude │ Droid │ Crush │ UI │
+          └───┬──────┬────────┬───────┬─────┬───┘
+              │      │        │       │     │
+              └──────┴────────┴───────┴─────┘
+                            │
+                            ▼
+                  ┌───────────────────┐
+                  │  odin-sentinel    │
+                  │  MCP server       │
+                  └─────────┬─────────┘
+                            │
+        ┌───────────────────┼───────────────────┐
+        ▼                   ▼                   ▼
+  ┌───────────┐       ┌───────────┐       ┌────────────┐
+  │ Resources │       │   Tools   │       │  Exports   │
+  │ protocol  │       │ validate  │       │ standalone │
+  │ roles     │       │ startup   │       │ protocol   │
+  │ topology  │       │ closeout  │       │ snapshots  │
+  └───────────┘       └───────────┘       └────────────┘
+        │                   │                   │
+        └───────────────────┼───────────────────┘
+                            ▼
+              ┌─────────────────────────┐
+              │ Visible role topology   │
+              │ EXEC PM, EXEC ODIN,     │
+              │ TEAM PM, TEAM ODIN,     │
+              │ DEV, QA, SHADOW         │
+              └─────────────────────────┘
+```
+
+## Provided MCP Resources
+
+- `odin://protocol/main` - core coordination protocol
+- `odin://protocol/roles` - generic role contracts
+- `odin://protocol/topology` - executive office, pod, and ODIN mesh defaults
+- `odin://protocol/model-profiles` - recommended starter model/harness profiles
+- `odin://protocol/closeout` - continuity parking and full shutdown checklists
+- `odin://protocol/delegation` - visible-role delegation contract
+- `odin://protocol/receipts/boot` - boot receipt template
+- `odin://protocol/receipts/team-manifest` - team manifest template
+
+## Provided MCP Tools
+
+- `odin.get_version`
+- `odin.get_startup_packet`
+- `odin.get_role_profile`
+- `odin.validate_boot_receipt`
+- `odin.validate_team_manifest`
+- `odin.get_delegation_packet`
+- `odin.validate_delegation_packet`
+- `odin.get_closeout_checklist`
+- `odin.get_runtime_notice`
+- `odin.export_protocol_snapshot`
+
+## Self-Contained Protocol
+
+ODIN Sentinel must not depend on external local extensions. Concepts such as
+delegation, handoff discovery, startup topology, model/harness profiles, receipt
+validation, and closeout are implemented as MCP resources and tools inside this
+server.
+
+A client may have other local extensions installed, but those extensions are optional
+and cannot be required for the ODIN Sentinel protocol to work.
+
+## Client Compatibility
+
+ODIN Sentinel is implemented in TypeScript and runs on Node.js, but MCP clients
+can be written in Rust, Zig, Go, WebAssembly, Python, or any other environment
+that can speak MCP over stdio.
+
+The boundary is plain MCP JSON-RPC:
+
+```text
+native / WASM / CLI client
+          │
+          │ MCP over stdio
+          ▼
+node dist/src/bin/index.js
+```
+
+For clients that cannot spawn stdio subprocesses, use a host bridge or consume
+the fallback files returned by `odin.export_protocol_snapshot`.
+
+See [docs/reference/client-compatibility.md](docs/reference/client-compatibility.md).
+For the current release-surface inventory, see
+[docs/reference/public-surface-audit.md](docs/reference/public-surface-audit.md).
+
+## Install
+
+For a step-by-step setup, see [docs/guides/quick-start.md](docs/guides/quick-start.md).
+
+For local source builds:
+
+```bash
+pnpm install
+pnpm run build
+```
+
+After the package is published, MCP clients can use the package directly:
+
+```bash
+pnpm dlx odin-sentinel
+```
+
+or:
+
+```bash
+npx -y odin-sentinel
+```
+
+See [docs/reference/distribution.md](docs/reference/distribution.md).
+
+## Run Over stdio
+
+```bash
+pnpm run dev
+```
+
+After building:
+
+```bash
+node dist/src/bin/index.js
+```
+
+When installed from a package, the executable names are:
+
+```bash
+odin-sentinel
+odin-sentinel-mcp
+```
+
+## Example MCP Client Configuration
+
+```json
+{
+  "mcpServers": {
+    "odin-sentinel": {
+      "command": "node",
+      "args": ["/absolute/path/to/odin-sentinel/dist/src/bin/index.js"]
+    }
+  }
+}
+```
+
+For local development, clients that support direct command execution can use:
+
+```json
+{
+  "mcpServers": {
+    "odin-sentinel": {
+      "command": "pnpm",
+      "args": ["exec", "tsx", "/absolute/path/to/odin-sentinel/src/bin/index.ts"]
+    }
+  }
+}
+```
+
+## Harness Setup Notes
+
+MCP-capable harnesses should point at the built stdio server:
+
+```text
+node /absolute/path/to/odin-sentinel/dist/src/bin/index.js
+```
+
+Common config shapes:
+
+- Claude/Cursor-style: add `odin-sentinel` under `mcpServers`.
+- Codex CLI: use `codex mcp add odin-sentinel -- node /path/to/dist/src/bin/index.js`.
+- Droid CLI: use `droid mcp add odin-sentinel node /path/to/dist/src/bin/index.js --type stdio`.
+- OpenCode-style: add a local `mcp.odin-sentinel` command entry.
+- Goose-style: add an enabled `type: mcp` extension entry.
+- Zed-style: add an enabled custom `context_servers.odin-sentinel` entry.
+
+These are MCP client patterns, not a compatibility certification for every
+release of every harness. For harnesses without discoverable MCP configuration,
+use the self-contained protocol snapshot from `odin.export_protocol_snapshot`
+or a thin prompt that directs the agent to an MCP-capable host bridge.
+
+ODIN Sentinel does not provide hosted inference and should not cost the
+maintainer money when users run it locally. See
+[docs/reference/cost-and-privacy.md](docs/reference/cost-and-privacy.md).
+
+## Startup Defaults
+
+Fresh startup returns an executive office plus one development pod unless the
+user or a handoff overrides it.
+
+Executive office:
+
+- `A/EXEC-PM`
+- `A/EXEC-ODIN`
+- `A/EXEC-ASST`
+- `A/EXEC-RSCH`
+- `A/EXEC-QA`
+
+Development pod:
+
+- `<TEAM>/TEAM-PM`
+- `<TEAM>/ODIN`
+- `<TEAM>/DEV-1`
+- `<TEAM>/QA-1`
+- `<TEAM>/SHADOW-1`
+
+## Closeout Modes
+
+- `PARK_FOR_CONTINUITY`: keep role slots open and park occupants.
+- `FULL_SESSION_SHUTDOWN`: quit occupants, verify exit, and close panes except
+  the final user-designated surface.
+
+## Development
+
+Source layout:
+
+- `src/bin/` - stdio entry point
+- `src/mcp/` - MCP resource and tool adapter
+- `src/protocol/` - ODIN protocol loading, packet construction, and validation
+- `protocol/` - portable protocol data
+- `docs/guides/` - onboarding and starter team guidance
+- `docs/reference/` - compatibility, distribution, cost, and privacy notes
+- `scripts/audit/` - package and public-surface release checks
+
+```bash
+pnpm run typecheck
+pnpm test
+pnpm run build
+pnpm run validate
+```
+
+## Open Source Hygiene
+
+This repository is intended to become public later. Do not commit:
+
+- personal file paths
+- account names
+- tokens, keys, or credentials
+- project-specific handoff content
+- private account details
+
+Keep protocol files generic and put local deployment details in untracked client
+configuration.

package/dist/src/bin/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/bin/index.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "../mcp/server.js";
+async function main() {
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+try {
+    await main();
+}
+catch (error) {
+    const message = error instanceof Error ? error.message : "Unknown startup failure";
+    console.error(`odin-sentinel failed to start: ${message}`);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=index.js.map

package/dist/src/bin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/bin/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,CAAC;IACH,MAAM,IAAI,EAAE,CAAC;AACf,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACnF,OAAO,CAAC,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/src/mcp/server.d.ts

@@ -0,0 +1,2 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function createServer(): McpServer;

package/dist/src/mcp/server.js

@@ -0,0 +1,159 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import YAML from "yaml";
+import { VERSION, exportProtocolSnapshot, getCloseoutChecklist, getDelegationPacket, getRoleProfile, getRuntimeNotice, getStartupPacket, loadProtocolData, validateBootReceipt, validateDelegationPacket, validateTeamManifest } from "../protocol/service.js";
+import { bootReceiptInputShape, closeoutChecklistInputShape, delegationPacketInputShape, recordInputShape, roleProfileInputShape, startupPacketInputShape, teamManifestInputShape } from "../protocol/schemas.js";
+function jsonText(value) {
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(value, null, 2)
+            }
+        ]
+    };
+}
+function textResource(uri, text, mimeType) {
+    return {
+        contents: [
+            {
+                uri,
+                mimeType,
+                text
+            }
+        ]
+    };
+}
+function yamlResource(value) {
+    return YAML.stringify(value);
+}
+function registerProtocolResources(server) {
+    const resources = [
+        {
+            name: "protocol-main",
+            uri: "odin://protocol/main",
+            title: "ODIN Sentinel Protocol",
+            description: "Portable ODIN/SCP coordination protocol.",
+            mimeType: "text/markdown",
+            read: () => loadProtocolData().protocol
+        },
+        {
+            name: "delegation",
+            uri: "odin://protocol/delegation",
+            title: "Delegation Contract",
+            description: "Native ODIN delegation packet contract and validation rules.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().delegation)
+        },
+        {
+            name: "boot-receipt",
+            uri: "odin://protocol/receipts/boot",
+            title: "Boot Receipt Template",
+            description: "Required startup receipt fields for visible ODIN/SCP roles.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().bootReceipt)
+        },
+        {
+            name: "team-manifest",
+            uri: "odin://protocol/receipts/team-manifest",
+            title: "Team Manifest Template",
+            description: "Required team topology manifest fields for ODIN/SCP startup.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().teamManifest)
+        },
+        {
+            name: "roles",
+            uri: "odin://protocol/roles",
+            title: "ODIN Role Contracts",
+            description: "Generic role definitions and authority defaults.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().roles)
+        },
+        {
+            name: "topology",
+            uri: "odin://protocol/topology",
+            title: "Default Topology",
+            description: "Executive office, development pod, and ODIN mesh defaults.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().topology)
+        },
+        {
+            name: "model-profiles",
+            uri: "odin://protocol/model-profiles",
+            title: "Model Harness Profiles",
+            description: "Default model and harness profile map.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().modelProfiles)
+        },
+        {
+            name: "closeout",
+            uri: "odin://protocol/closeout",
+            title: "Closeout Protocol",
+            description: "Continuity parking and full shutdown checklists.",
+            mimeType: "application/yaml",
+            read: () => yamlResource(loadProtocolData().closeout)
+        }
+    ];
+    for (const resource of resources) {
+        server.registerResource(resource.name, resource.uri, {
+            title: resource.title,
+            description: resource.description,
+            mimeType: resource.mimeType
+        }, (uri) => textResource(uri.href, resource.read(), resource.mimeType));
+    }
+}
+export function createServer() {
+    const server = new McpServer({
+        name: "odin-sentinel",
+        version: VERSION
+    });
+    registerProtocolResources(server);
+    server.registerTool("odin.get_delegation_packet", {
+        title: "Get Delegation Packet",
+        description: "Build a self-contained visible-role delegation packet without relying on outside local extensions.",
+        inputSchema: delegationPacketInputShape
+    }, (input) => jsonText(getDelegationPacket(input)));
+    server.registerTool("odin.validate_delegation_packet", {
+        title: "Validate Delegation Packet",
+        description: "Check a delegation packet for required ODIN fields and role-separation warnings.",
+        inputSchema: recordInputShape
+    }, (input) => jsonText(validateDelegationPacket(input.packet)));
+    server.registerTool("odin.get_version", {
+        title: "Get ODIN Sentinel Version",
+        description: "Return server and protocol version metadata."
+    }, () => jsonText({ name: "odin-sentinel", version: VERSION }));
+    server.registerTool("odin.get_runtime_notice", {
+        title: "Get Runtime Notice",
+        description: "Return cost, privacy, inference, telemetry, and standalone runtime boundaries."
+    }, () => jsonText(getRuntimeNotice()));
+    server.registerTool("odin.get_startup_packet", {
+        title: "Get Startup Packet",
+        description: "Return a generic SCP/ODIN startup packet for a role and pod count.",
+        inputSchema: startupPacketInputShape
+    }, (input) => jsonText(getStartupPacket(input)));
+    server.registerTool("odin.get_role_profile", {
+        title: "Get Role Profile",
+        description: "Return the authority profile for a generic ODIN/SCP role.",
+        inputSchema: roleProfileInputShape
+    }, (input) => jsonText(getRoleProfile(input.role)));
+    server.registerTool("odin.validate_boot_receipt", {
+        title: "Validate Boot Receipt",
+        description: "Check a boot receipt for required ODIN/SCP fields and basic authority warnings.",
+        inputSchema: bootReceiptInputShape
+    }, (input) => jsonText(validateBootReceipt(input.receipt)));
+    server.registerTool("odin.validate_team_manifest", {
+        title: "Validate Team Manifest",
+        description: "Check a team manifest for required ODIN/SCP topology fields.",
+        inputSchema: teamManifestInputShape
+    }, (input) => jsonText(validateTeamManifest(input.manifest)));
+    server.registerTool("odin.get_closeout_checklist", {
+        title: "Get Closeout Checklist",
+        description: "Return the checklist for continuity parking or full session shutdown.",
+        inputSchema: closeoutChecklistInputShape
+    }, (input) => jsonText(getCloseoutChecklist(input.mode)));
+    server.registerTool("odin.export_protocol_snapshot", {
+        title: "Export Protocol Snapshot",
+        description: "Return generated fallback protocol files for clients that cannot use MCP."
+    }, () => jsonText({ version: VERSION, files: exportProtocolSnapshot() }));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/src/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,OAAO,EACP,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;aACrC;SACF;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY,EAAE,QAAgB;IAC/D,OAAO;QACL,QAAQ,EAAE;YACR;gBACE,GAAG;gBACH,QAAQ;gBACR,IAAI;aACL;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAiB;IAClD,MAAM,SAAS,GAAmB;QAChC;YACE,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,sBAAsB;YAC3B,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,0CAA0C;YACvD,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,QAAQ;SACxC;QACD;YACE,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,4BAA4B;YACjC,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,8DAA8D;YAC3E,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC;SACxD;QACD;YACE,IAAI,EAAE,cAAc;YACpB,GAAG,EAAE,+BAA+B;YACpC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,6DAA6D;YAC1E,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,WAAW,CAAC;SACzD;QACD;YACE,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,wCAAwC;YAC7C,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,8DAA8D;YAC3E,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC;SAC1D;QACD;YACE,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,uBAAuB;YAC5B,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,kDAAkD;YAC/D,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC;SACnD;QACD;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,0BAA0B;YAC/B,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,4DAA4D;YACzE,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC;SACtD;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,GAAG,EAAE,gCAAgC;YACrC,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,wCAAwC;YACrD,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAAC;SAC3D;QACD;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,0BAA0B;YAC/B,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,kDAAkD;YAC/D,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC;SACtD;KACF,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,gBAAgB,CACrB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,GAAG,EACZ;YACE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE,0BAA0B;KACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAChD,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iCAAiC,EACjC;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE,gBAAgB;KAC9B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAC5D,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,8CAA8C;KAC5D,EACD,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAC5D,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,gFAAgF;KAC9F,EACD,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CACnC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,oEAAoE;QACjF,WAAW,EAAE,uBAAuB;KACrC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAC7C,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE,qBAAqB;KACnC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAChD,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,qBAAqB;KACnC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CACxD,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,6BAA6B,EAC7B;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,8DAA8D;QAC3E,WAAW,EAAE,sBAAsB;KACpC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAC1D,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,6BAA6B,EAC7B;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,uEAAuE;QACpF,WAAW,EAAE,2BAA2B;KACzC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACtD,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,2EAA2E;KACzF,EACD,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,CAAC,CACtE,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/protocol/index.d.ts

@@ -0,0 +1,2 @@
+export { VERSION, createProtocolService, exportProtocolSnapshot, getCloseoutChecklist, getDelegationPacket, getRoleProfile, getRuntimeNotice, getStartupPacket, validateBootReceipt, validateDelegationPacket, validateTeamManifest } from "./service.js";
+export type { CloseoutMode, DelegationPacketInput, ProtocolData, RuntimeNotice, StartupPacket, StartupPacketInput, ValidationResult } from "./service.js";

package/dist/src/protocol/index.js

@@ -0,0 +1,2 @@
+export { VERSION, createProtocolService, exportProtocolSnapshot, getCloseoutChecklist, getDelegationPacket, getRoleProfile, getRuntimeNotice, getStartupPacket, validateBootReceipt, validateDelegationPacket, validateTeamManifest } from "./service.js";
+//# sourceMappingURL=index.js.map

package/dist/src/protocol/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,cAAc,CAAC"}

package/dist/src/protocol/repository.d.ts

@@ -0,0 +1,16 @@
+export declare const REQUIRED_PROTOCOL_FILES: string[];
+export type ProtocolData = {
+    protocol: string;
+    roles: Record<string, unknown>;
+    topology: Record<string, unknown>;
+    modelProfiles: Record<string, unknown>;
+    closeout: Record<string, unknown>;
+    delegation: Record<string, unknown>;
+    bootReceipt: Record<string, unknown>;
+    teamManifest: Record<string, unknown>;
+};
+export type ProtocolRepository = {
+    load(): ProtocolData;
+    path(...segments: string[]): string;
+};
+export declare function createFileProtocolRepository(rootDir?: string): ProtocolRepository;

package/dist/src/protocol/repository.js

@@ -0,0 +1,103 @@
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import YAML from "yaml";
+import { requireRecord } from "./validators.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export const REQUIRED_PROTOCOL_FILES = [
+    "protocol/SCP.md",
+    "protocol/roles.yaml",
+    "protocol/topology.yaml",
+    "protocol/model-profiles.yaml",
+    "protocol/closeout.yaml",
+    "protocol/delegation.yaml",
+    "protocol/receipts/boot-receipt.yaml",
+    "protocol/receipts/team-manifest.yaml"
+];
+function missingProtocolFiles(root) {
+    return REQUIRED_PROTOCOL_FILES.filter((file) => !existsSync(join(root, file)));
+}
+function protocolRootCandidate(root) {
+    try {
+        const canonicalRoot = realpathSync(root);
+        return missingProtocolFiles(canonicalRoot).length === 0 ? canonicalRoot : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function requireProtocolRoot(root, label) {
+    let canonicalRoot;
+    try {
+        canonicalRoot = realpathSync(root);
+    }
+    catch {
+        throw new Error(`${label} is not readable: ${root}`);
+    }
+    const missing = missingProtocolFiles(canonicalRoot);
+    if (missing.length > 0) {
+        throw new Error(`${label} is missing required protocol files: ${missing.join(", ")}`);
+    }
+    return canonicalRoot;
+}
+function findRootDir() {
+    if (process.env.ODIN_SENTINEL_ROOT) {
+        return requireProtocolRoot(process.env.ODIN_SENTINEL_ROOT, "ODIN_SENTINEL_ROOT");
+    }
+    const candidates = [
+        join(__dirname, ".."),
+        join(__dirname, "..", ".."),
+        join(__dirname, "..", "..", ".."),
+        process.cwd()
+    ];
+    const root = candidates.map(protocolRootCandidate).find((candidate) => Boolean(candidate));
+    if (!root) {
+        throw new Error("Could not locate ODIN Sentinel protocol directory");
+    }
+    return root;
+}
+function readYaml(path) {
+    return requireRecord(YAML.parse(readFileSync(path, "utf8")), path);
+}
+function protocolFingerprint(rootDir) {
+    return REQUIRED_PROTOCOL_FILES.map((file) => {
+        const stats = statSync(join(rootDir, file));
+        return `${file}:${stats.mtimeMs}:${stats.size}`;
+    }).join("|");
+}
+function deepFreeze(value) {
+    if (!value || typeof value !== "object" || Object.isFrozen(value)) {
+        return value;
+    }
+    for (const nested of Object.values(value)) {
+        deepFreeze(nested);
+    }
+    return Object.freeze(value);
+}
+export function createFileProtocolRepository(rootDir = findRootDir()) {
+    const canonicalRootDir = requireProtocolRoot(rootDir, "Protocol root");
+    let cache;
+    const protocolPath = (...segments) => join(canonicalRootDir, "protocol", ...segments);
+    return {
+        path: protocolPath,
+        load: () => {
+            const fingerprint = protocolFingerprint(canonicalRootDir);
+            if (cache?.fingerprint === fingerprint) {
+                return cache.data;
+            }
+            const data = deepFreeze({
+                protocol: readFileSync(protocolPath("SCP.md"), "utf8"),
+                roles: readYaml(protocolPath("roles.yaml")),
+                topology: readYaml(protocolPath("topology.yaml")),
+                modelProfiles: readYaml(protocolPath("model-profiles.yaml")),
+                closeout: readYaml(protocolPath("closeout.yaml")),
+                delegation: readYaml(protocolPath("delegation.yaml")),
+                bootReceipt: readYaml(protocolPath("receipts", "boot-receipt.yaml")),
+                teamManifest: readYaml(protocolPath("receipts", "team-manifest.yaml"))
+            });
+            cache = { fingerprint, data };
+            return data;
+        }
+    };
+}
+//# sourceMappingURL=repository.js.map

package/dist/src/protocol/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/protocol/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,iBAAiB;IACjB,qBAAqB;IACrB,wBAAwB;IACxB,8BAA8B;IAC9B,wBAAwB;IACxB,0BAA0B;IAC1B,qCAAqC;IACrC,sCAAsC;CACvC,CAAC;AAuBF,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,oBAAoB,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,OAAO,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC;QAC3B,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;QACjC,OAAO,CAAC,GAAG,EAAE;KACd,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAChH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAO,GAAG,WAAW,EAAE;IAClE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACvE,IAAI,KAAqC,CAAC;IAC1C,MAAM,YAAY,GAAG,CAAC,GAAG,QAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,CAAC;IAEhG,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,GAAG,EAAE;YACT,MAAM,WAAW,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAC1D,IAAI,KAAK,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,IAAI,CAAC;YACpB,CAAC;YAED,MAAM,IAAI,GAAG,UAAU,CAAC;gBACtB,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;gBACtD,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3C,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;gBACjD,aAAa,EAAE,QAAQ,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;gBAC5D,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;gBACjD,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;gBACrD,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;gBACpE,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;aACvE,CAAC,CAAC;YAEH,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}