@cat-factory/kernel 0.6.0

package/dist/ports/ci-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-status.d.ts","sourceRoot":"","sources":["../../src/ports/ci-status.ts"],"names":[],"mappings":"AAOA,mFAAmF;AACnF,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAA;IACd,oGAAoG;IACpG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,6FAA6F;IAC7F,MAAM,EAAE,OAAO,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CACzE"}

package/dist/ports/ci-status.js

@@ -0,0 +1,8 @@
+// Port for reading a block's CI status — the GitHub check runs for the head
+// commit of the pull request an implementation step opened. The execution
+// engine's `ci` step polls this between durable sleeps to decide whether CI is
+// green (advance), still running (keep polling) or failing (dispatch a CI-fixer).
+// Modelled as a port so core stays free of GitHub specifics; the worker resolves
+// the block's repo target + PR branch head and calls `GitHubClient.listCheckRuns`.
+export {};
+//# sourceMappingURL=ci-status.js.map

package/dist/ports/ci-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-status.js","sourceRoot":"","sources":["../../src/ports/ci-status.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,kFAAkF;AAClF,iFAAiF;AACjF,mFAAmF"}

package/dist/ports/clarity-review-repositories.d.ts

@@ -0,0 +1,12 @@
+import type { ClarityReview } from '../domain/types.js';
+export interface ClarityReviewRepository {
+    /** The current review for a block, or null if none has been run. */
+    getByBlock(workspaceId: string, blockId: string): Promise<ClarityReview | null>;
+    /** A review by its id, or null if it does not exist. */
+    get(workspaceId: string, id: string): Promise<ClarityReview | null>;
+    /** Create or replace a review (the service deletes a block's prior review first). */
+    upsert(workspaceId: string, review: ClarityReview): Promise<void>;
+    /** Drop any existing review(s) for a block (called before a fresh review run). */
+    deleteByBlock(workspaceId: string, blockId: string): Promise<void>;
+}
+//# sourceMappingURL=clarity-review-repositories.d.ts.map

package/dist/ports/clarity-review-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clarity-review-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/clarity-review-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAQvD,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC/E,wDAAwD;IACxD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IACnE,qFAAqF;IACrF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,kFAAkF;IAClF,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE"}

package/dist/ports/clarity-review-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=clarity-review-repositories.js.map

package/dist/ports/clarity-review-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clarity-review-repositories.js","sourceRoot":"","sources":["../../src/ports/clarity-review-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/consensus-repositories.d.ts

@@ -0,0 +1,12 @@
+import type { ConsensusSession } from '../domain/types.js';
+export interface ConsensusSessionRepository {
+    /** A session by its id, or null if it does not exist. */
+    get(workspaceId: string, id: string): Promise<ConsensusSession | null>;
+    /** The session for a specific run step, or null if none has run. */
+    getByStep(workspaceId: string, executionId: string, stepIndex: number): Promise<ConsensusSession | null>;
+    /** The most recent session for a block, or null if none has run. */
+    getByBlock(workspaceId: string, blockId: string): Promise<ConsensusSession | null>;
+    /** Create or replace a session (idempotent per id — replays/live updates re-upsert). */
+    upsert(workspaceId: string, session: ConsensusSession): Promise<void>;
+}
+//# sourceMappingURL=consensus-repositories.d.ts.map

package/dist/ports/consensus-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consensus-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/consensus-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAU1D,MAAM,WAAW,0BAA0B;IACzC,yDAAyD;IACzD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IACtE,oEAAoE;IACpE,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IACnC,oEAAoE;IACpE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAClF,wFAAwF;IACxF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtE"}

package/dist/ports/consensus-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=consensus-repositories.js.map

package/dist/ports/consensus-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consensus-repositories.js","sourceRoot":"","sources":["../../src/ports/consensus-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/document-repositories.d.ts

@@ -0,0 +1,55 @@
+import type { DocumentSourceKind } from '../domain/types.js';
+import type { DocumentCredentials } from './document-source.js';
+/**
+ * A workspace's connection to one document source, including its credential bag.
+ * Credentials are infrastructure detail (never sent on the wire); they live here
+ * so the import path can authenticate against the source for this workspace.
+ */
+export interface DocumentConnectionRecord {
+    workspaceId: string;
+    source: DocumentSourceKind;
+    credentials: DocumentCredentials;
+    /** Human-friendly label for the connection (site URL, workspace name). */
+    label: string;
+    createdAt: number;
+    /** Set when the workspace disconnects (tombstone). */
+    deletedAt: number | null;
+}
+export interface DocumentConnectionRepository {
+    /** The workspace's live connection for a source, or null if not connected. */
+    getByWorkspace(workspaceId: string, source: DocumentSourceKind): Promise<DocumentConnectionRecord | null>;
+    /** Every live connection the workspace holds, across sources. */
+    listByWorkspace(workspaceId: string): Promise<DocumentConnectionRecord[]>;
+    /** Create or replace the live connection for a (workspace, source). */
+    upsert(record: DocumentConnectionRecord): Promise<void>;
+    /** Tombstone the workspace's connection to a source. */
+    softDelete(workspaceId: string, source: DocumentSourceKind, at: number): Promise<void>;
+}
+/**
+ * A page projected locally for a workspace. The cached `body` (normalized
+ * Markdown) backs both the planner and the agent context injection;
+ * `linkedBlockId` records the board block this page is attached to, if any.
+ */
+export interface DocumentRecord {
+    workspaceId: string;
+    source: DocumentSourceKind;
+    externalId: string;
+    title: string;
+    url: string;
+    excerpt: string;
+    body: string;
+    linkedBlockId: string | null;
+    syncedAt: number;
+    deletedAt: number | null;
+}
+export interface DocumentRepository {
+    upsert(record: DocumentRecord): Promise<void>;
+    get(workspaceId: string, source: DocumentSourceKind, externalId: string): Promise<DocumentRecord | null>;
+    /** Every live document imported into the workspace, across sources. */
+    listByWorkspace(workspaceId: string): Promise<DocumentRecord[]>;
+    /** Live documents attached to a board block (resolved during execution). */
+    listByBlock(workspaceId: string, blockId: string): Promise<DocumentRecord[]>;
+    /** Attach a document to a board block (or detach with null). */
+    linkBlock(workspaceId: string, source: DocumentSourceKind, externalId: string, blockId: string | null): Promise<void>;
+}
+//# sourceMappingURL=document-repositories.d.ts.map

package/dist/ports/document-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/document-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAO/D;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,WAAW,EAAE,mBAAmB,CAAA;IAChC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,8EAA8E;IAC9E,cAAc,CACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAA;IAC3C,iEAAiE;IACjE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAA;IACzE,uEAAuE;IACvE,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,wDAAwD;IACxD,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvF;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,GAAG,CACD,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IACjC,uEAAuE;IACvE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/D,4EAA4E;IAC5E,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC5E,gEAAgE;IAChE,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB"}

package/dist/ports/document-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=document-repositories.js.map

package/dist/ports/document-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-repositories.js","sourceRoot":"","sources":["../../src/ports/document-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/document-source.d.ts

@@ -0,0 +1,55 @@
+import type { DocumentSourceKind, DocumentSourceDescriptor, DocumentSearchResult } from '../domain/types.js';
+/** A source's per-workspace credentials, as a flat key→value bag. */
+export type DocumentCredentials = Record<string, string>;
+/** A page fetched from a source, with its body normalized to Markdown. */
+export interface DocumentContent {
+    /** The source's stable id for the page. */
+    externalId: string;
+    title: string;
+    /** Canonical web URL of the page. */
+    url: string;
+    /** Body normalized to lightweight Markdown (consumed by the planner/excerpt). */
+    body: string;
+}
+/** The result of validating + normalizing connect credentials. */
+export interface NormalizedConnection {
+    /** The credential bag to persist (trimmed/normalized). */
+    credentials: DocumentCredentials;
+    /** A human-friendly label for the connection (site URL, workspace name). */
+    label: string;
+}
+export interface DocumentSourceProvider {
+    /** Which source this provider serves. */
+    readonly kind: DocumentSourceKind;
+    /** Self-description so the UI can render the connect/import forms generically. */
+    readonly descriptor: DocumentSourceDescriptor;
+    /**
+     * Validate the supplied credentials and return the bag to persist plus a
+     * display label. Throws a ValidationError on anything missing/unsafe.
+     */
+    normalizeConnection(input: DocumentCredentials): NormalizedConnection;
+    /** Resolve a stable page id from raw user input (a bare id or a page URL); null if unparseable. */
+    parseRef(input: string): string | null;
+    /** Fetch a single page by its id using the connection credentials. */
+    fetchDocument(credentials: DocumentCredentials, externalId: string): Promise<DocumentContent>;
+    /**
+     * Search the source's catalogue by free text and return lean hits (no body).
+     * Optional: a provider that only supports paste-a-URL import omits it (and its
+     * descriptor sets `searchable: false`). The provider builds the query and maps
+     * the response; the returned `externalId`s are valid import refs.
+     *
+     * `workspaceId` is the workspace whose connection is searching, so a provider
+     * that authenticates per-workspace out-of-band (e.g. the GitHub App, which
+     * ignores `credentials`) can scope the search to that workspace's installation
+     * instead of leaking across tenants.
+     */
+    search?(credentials: DocumentCredentials, query: string, workspaceId: string): Promise<DocumentSearchResult[]>;
+}
+/** A lookup of the providers wired for this deployment, keyed by source. */
+export interface DocumentSourceRegistry {
+    /** The provider for a source, or undefined if that source isn't configured. */
+    get(kind: DocumentSourceKind): DocumentSourceProvider | undefined;
+    /** Every configured provider (drives the source list exposed to the UI). */
+    list(): DocumentSourceProvider[];
+}
+//# sourceMappingURL=document-source.d.ts.map

package/dist/ports/document-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-source.d.ts","sourceRoot":"","sources":["../../src/ports/document-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,oBAAoB,CAAA;AAa3B,qEAAqE;AACrE,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAExD,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAA;CACb;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,0DAA0D;IAC1D,WAAW,EAAE,mBAAmB,CAAA;IAChC,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAA;IAC7C;;;OAGG;IACH,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,CAAA;IACrE,mGAAmG;IACnG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACtC,sEAAsE;IACtE,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC7F;;;;;;;;;;OAUG;IACH,MAAM,CAAC,CACL,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;CACnC;AAED,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,GAAG,CAAC,IAAI,EAAE,kBAAkB,GAAG,sBAAsB,GAAG,SAAS,CAAA;IACjE,4EAA4E;IAC5E,IAAI,IAAI,sBAAsB,EAAE,CAAA;CACjC"}

package/dist/ports/document-source.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=document-source.js.map

package/dist/ports/document-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-source.js","sourceRoot":"","sources":["../../src/ports/document-source.ts"],"names":[],"mappings":""}

package/dist/ports/email-sender.d.ts

@@ -0,0 +1,42 @@
+export interface EmailMessage {
+    to: string;
+    subject: string;
+    /** HTML body. */
+    html: string;
+    /** Plain-text fallback (recommended for deliverability). */
+    text?: string;
+}
+export interface EmailSender {
+    /** Send one transactional email. Throws on a provider/transport failure. */
+    send(message: EmailMessage): Promise<void>;
+}
+/** Supported transactional-email providers (UI-onboarded per account). */
+export type EmailProviderKind = 'sendgrid' | 'resend';
+/**
+ * An account's email-sender connection: which provider, the From address, and the
+ * encrypted provider API key. Keyed per-account and stored in the DB (onboarded in
+ * the UI, never via env). The key is decrypted only in-memory at send time.
+ */
+export interface EmailConnectionRecord {
+    accountId: string;
+    provider: EmailProviderKind;
+    fromAddress: string;
+    /** Ciphertext of the provider API key (SecretCipher envelope); never plaintext. */
+    apiKeyCipher: string;
+    createdAt: number;
+    updatedAt: number;
+    /** Set when the account disconnects email (tombstone). */
+    deletedAt: number | null;
+}
+export interface EmailConnectionRepository {
+    /**
+     * The account's live (non-tombstoned) connection, or null when not connected or
+     * disconnected. Soft-deleted rows are filtered out, so callers never see a tombstone.
+     */
+    getByAccount(accountId: string): Promise<EmailConnectionRecord | null>;
+    /** Create or replace the live connection for an account. */
+    upsert(record: EmailConnectionRecord): Promise<void>;
+    /** Tombstone the account's connection. */
+    softDelete(accountId: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=email-sender.d.ts.map

package/dist/ports/email-sender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-sender.d.ts","sourceRoot":"","sources":["../../src/ports/email-sender.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3C;AAED,0EAA0E;AAC1E,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAA;AAErD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAA;IACtE,4DAA4D;IAC5D,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,0CAA0C;IAC1C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzD"}

package/dist/ports/email-sender.js

@@ -0,0 +1,7 @@
+// Port for transactional email delivery (invitations today; could back an email
+// NotificationChannel later). The facade composes whichever provider is configured
+// (SendGrid / Resend) behind this single port — mirroring how the model registry
+// composes vendor resolvers. Unconfigured ⇒ the port is simply not wired, and the
+// callers that need it are opt-in.
+export {};
+//# sourceMappingURL=email-sender.js.map

package/dist/ports/email-sender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-sender.js","sourceRoot":"","sources":["../../src/ports/email-sender.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,mCAAmC"}

package/dist/ports/environment-provider.d.ts

@@ -0,0 +1,67 @@
+import type { EnvironmentAccessHandle, EnvironmentManifest, EnvironmentStatus } from '../domain/types.js';
+/** Resolve a manifest `secretRef.key` to its value, or undefined if unset. */
+export type SecretResolver = (key: string) => string | undefined;
+/** Fields extracted from an earlier provision response, for status/teardown. */
+export type ProvisionFields = Record<string, string>;
+/**
+ * Typed build context for a provision call, derived from the block under deployment.
+ * A PR-environment provider needs the git ref + repo identity to target the right
+ * environment; the same values are also flattened into `inputs` as `{{input.*}}`
+ * strings for the manifest path. Every field is optional — a manual provision or a
+ * non-PR block may carry none.
+ */
+export interface ProvisionContext {
+    blockId?: string;
+    /** The head branch the agent pushed its work to, when known. */
+    branch?: string;
+    /** The pull request number within the repo, when known. */
+    pullNumber?: number;
+    /** The pull request web URL, when known. */
+    pullUrl?: string;
+    /** The repo owner (org/user login), when resolvable. */
+    repoOwner?: string;
+    /** The repo name, when resolvable. */
+    repoName?: string;
+}
+export interface ProvisionEnvironmentRequest {
+    manifest: EnvironmentManifest;
+    /** Provision inputs (`{{input.*}}` in templates). */
+    inputs: Record<string, string>;
+    /**
+     * Typed git/PR/repo context for a code adapter. The same values are also present
+     * in `inputs` as strings, so the manifest-HTTP path needs nothing extra.
+     */
+    provisionContext?: ProvisionContext;
+    resolveSecret: SecretResolver;
+}
+export interface EnvironmentStatusRequest {
+    manifest: EnvironmentManifest;
+    externalId: string | null;
+    /** Fields captured at provision time (`{{provision.*}}` in templates). */
+    provisionFields: ProvisionFields;
+    resolveSecret: SecretResolver;
+}
+export interface EnvironmentTeardownRequest {
+    manifest: EnvironmentManifest;
+    externalId: string | null;
+    provisionFields: ProvisionFields;
+    resolveSecret: SecretResolver;
+}
+/** The provider's view of a provisioned environment (mapped from its response). */
+export interface ProvisionedEnvironment {
+    externalId: string | null;
+    url: string | null;
+    status: EnvironmentStatus;
+    expiresAt: number | null;
+    access: EnvironmentAccessHandle | null;
+    /** All fields the response mapping captured, for later status/teardown calls. */
+    fields: ProvisionFields;
+}
+export interface EnvironmentProvider {
+    provision(req: ProvisionEnvironmentRequest): Promise<ProvisionedEnvironment>;
+    status(req: EnvironmentStatusRequest): Promise<ProvisionedEnvironment>;
+    teardown(req: EnvironmentTeardownRequest): Promise<{
+        status: EnvironmentStatus;
+    }>;
+}
+//# sourceMappingURL=environment-provider.d.ts.map

package/dist/ports/environment-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-provider.d.ts","sourceRoot":"","sources":["../../src/ports/environment-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAS3B,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;AAEhE,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEpD;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,aAAa,EAAE,cAAc,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,0EAA0E;IAC1E,eAAe,EAAE,eAAe,CAAA;IAChC,aAAa,EAAE,cAAc,CAAA;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,eAAe,EAAE,eAAe,CAAA;IAChC,aAAa,EAAE,cAAc,CAAA;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAA;IACtC,iFAAiF;IACjF,MAAM,EAAE,eAAe,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACtE,QAAQ,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAA;CAClF"}

package/dist/ports/environment-provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=environment-provider.js.map

package/dist/ports/environment-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-provider.js","sourceRoot":"","sources":["../../src/ports/environment-provider.ts"],"names":[],"mappings":""}

package/dist/ports/environment-repositories.d.ts

@@ -0,0 +1,64 @@
+import type { EnvironmentStatus } from '../domain/types.js';
+/**
+ * A workspace's binding to an environment provider: the validated manifest and
+ * the encrypted per-tenant secret bundle (the management-API credentials). The
+ * bundle is decrypted only in-memory, at call time, by the provisioning path.
+ */
+export interface EnvironmentConnectionRecord {
+    workspaceId: string;
+    providerId: string;
+    label: string;
+    baseUrl: string;
+    /** The validated manifest, serialized as JSON. */
+    manifestJson: string;
+    /** Ciphertext of the `{ key: value }` secret bundle (SecretCipher envelope). */
+    secretsCipher: string;
+    createdAt: number;
+    /** Set when the workspace unregisters (tombstone). */
+    deletedAt: number | null;
+}
+export interface EnvironmentConnectionRepository {
+    /** The workspace's live connection, or null if not registered. */
+    getByWorkspace(workspaceId: string): Promise<EnvironmentConnectionRecord | null>;
+    /** Create or replace the live connection for a workspace. */
+    upsert(record: EnvironmentConnectionRecord): Promise<void>;
+    /** Tombstone the workspace's connection. */
+    softDelete(workspaceId: string, at: number): Promise<void>;
+}
+/**
+ * A provisioned environment, projected locally. `accessCipher` holds the
+ * encrypted per-env access creds (what the tester uses); `provisionFieldsCipher`
+ * holds the encrypted fields captured at provision time (needed to interpolate
+ * status/teardown calls). Both are SecretCipher envelopes, never plaintext.
+ */
+export interface EnvironmentRecord {
+    id: string;
+    workspaceId: string;
+    blockId: string | null;
+    executionId: string | null;
+    providerId: string;
+    externalId: string | null;
+    url: string | null;
+    status: EnvironmentStatus;
+    accessCipher: string | null;
+    provisionFieldsCipher: string | null;
+    createdAt: number;
+    expiresAt: number | null;
+    lastError: string | null;
+    deletedAt: number | null;
+}
+export type EnvironmentRecordPatch = Partial<Pick<EnvironmentRecord, 'externalId' | 'url' | 'status' | 'accessCipher' | 'provisionFieldsCipher' | 'expiresAt' | 'lastError'>>;
+export interface EnvironmentRegistryRepository {
+    insert(record: EnvironmentRecord): Promise<void>;
+    update(workspaceId: string, id: string, patch: EnvironmentRecordPatch): Promise<void>;
+    get(workspaceId: string, id: string): Promise<EnvironmentRecord | null>;
+    /** The live environment provisioned for a board block — the discovery key. */
+    getByBlock(workspaceId: string, blockId: string): Promise<EnvironmentRecord | null>;
+    /** Every live environment in the workspace. */
+    listByWorkspace(workspaceId: string): Promise<EnvironmentRecord[]>;
+    /** Live environments whose TTL has elapsed (all workspaces), for the cron sweep. */
+    listExpired(nowEpochMs: number): Promise<EnvironmentRecord[]>;
+    /** Tombstone an environment record. */
+    softDelete(workspaceId: string, id: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=environment-repositories.d.ts.map

package/dist/ports/environment-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/environment-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAQ3D;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,kEAAkE;IAClE,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAA;IAChF,6DAA6D;IAC7D,MAAM,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,4CAA4C;IAC5C,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3D;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,iBAAiB,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAC1C,IAAI,CACF,iBAAiB,EACf,YAAY,GACZ,KAAK,GACL,QAAQ,GACR,cAAc,GACd,uBAAuB,GACvB,WAAW,GACX,WAAW,CACd,CACF,CAAA;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrF,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACvE,8EAA8E;IAC9E,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACnF,+CAA+C;IAC/C,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAClE,oFAAoF;IACpF,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAC7D,uCAAuC;IACvC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE"}

package/dist/ports/environment-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=environment-repositories.js.map

package/dist/ports/environment-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-repositories.js","sourceRoot":"","sources":["../../src/ports/environment-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/execution-events.d.ts

@@ -0,0 +1,72 @@
+import type { Block, BootstrapJob, ConsensusSession, ClarityReview, ExecutionInstance, LlmCallActivity, Notification, RequirementReview } from '../domain/types.js';
+export interface ExecutionEventPublisher {
+    /** A run advanced: push the updated instance and its rolled-up block. */
+    executionChanged(workspaceId: string, instance: ExecutionInstance, block?: Block | null): Promise<void>;
+    /**
+     * A structural board change the per-instance event can't express (a module
+     * materialised, a run cancelled) — a coarse signal that prompts a full refresh.
+     * `blockId` (when known) identifies a block of the affected service so the change can
+     * be fanned out to every workspace that mounts it (in-org sharing); omit it for a
+     * genuinely board-wide signal, which then reaches the originating workspace only.
+     */
+    boardChanged(workspaceId: string, reason: string, blockId?: string | null): Promise<void>;
+    /**
+     * A repo-bootstrap run advanced: push the updated job (with live `subtasks`)
+     * and its provisional/linked service frame, so the board patches the
+     * "bootstrapping…" card and its progress without a refetch. Optional so
+     * publishers/tests that predate bootstrap progress need no change.
+     */
+    bootstrapChanged?(workspaceId: string, job: BootstrapJob, block?: Block | null): Promise<void>;
+    /**
+     * A human-actionable notification was raised or resolved: push it so the board
+     * surfaces/clears its badge and inbox entry live. Optional so publishers/tests
+     * that predate notifications need no change.
+     */
+    notificationChanged?(workspaceId: string, notification: Notification): Promise<void>;
+    /**
+     * One container-agent LLM call completed at the proxy: push its compact summary
+     * (no prompt/response bodies) so an open "Model activity" view updates live,
+     * independent of the durable driver (the proxy records calls even while the run's
+     * poll loop is frozen). Optional so publishers/tests that predate it need no change;
+     * a runtime with no real-time transport wired leaves it a no-op.
+     */
+    llmCallObserved?(workspaceId: string, activity: LlmCallActivity): Promise<void>;
+    /**
+     * A block's requirements review changed status (the async incorporate + re-review cycle
+     * started, produced new findings, converged, or hit its cap): push the updated review so
+     * an open review window / inspector reflects the transition live. This is live state, not
+     * a summons — the user is called back via a `notificationChanged` event when input is
+     * needed. Optional; a runtime with no real-time transport wired leaves it a no-op.
+     */
+    requirementReviewChanged?(workspaceId: string, review: RequirementReview): Promise<void>;
+    /**
+     * A consensus session advanced (a participant contributed, a round completed, the
+     * synthesis landed, or it failed): push the updated transcript so an open Consensus
+     * Session window reflects the multi-model process live. Optional; a runtime with no
+     * real-time transport — or no consensus package wired — leaves it a no-op.
+     */
+    consensusSessionChanged?(workspaceId: string, session: ConsensusSession): Promise<void>;
+    /**
+     * A block's clarity (bug-report triage) review changed status — the mirror of
+     * {@link requirementReviewChanged} for the clarity loop: push the updated review so an
+     * open review window / inspector reflects the transition live. Optional; a runtime with
+     * no real-time transport wired leaves it a no-op.
+     */
+    clarityReviewChanged?(workspaceId: string, review: ClarityReview): Promise<void>;
+}
+/**
+ * The default publisher: it does nothing. With it wired, the engine behaves exactly
+ * as before — no events are pushed (tests, and any deployment without the
+ * WORKSPACE_EVENTS binding).
+ */
+export declare class NoopEventPublisher implements ExecutionEventPublisher {
+    executionChanged(): Promise<void>;
+    boardChanged(): Promise<void>;
+    bootstrapChanged(): Promise<void>;
+    notificationChanged(): Promise<void>;
+    llmCallObserved(): Promise<void>;
+    requirementReviewChanged(): Promise<void>;
+    consensusSessionChanged(): Promise<void>;
+    clarityReviewChanged(): Promise<void>;
+}
+//# sourceMappingURL=execution-events.d.ts.map

package/dist/ports/execution-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-events.d.ts","sourceRoot":"","sources":["../../src/ports/execution-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAc3B,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB;;;;;;OAMG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzF;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9F;;;;OAIG;IACH,mBAAmB,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpF;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E;;;;;;OAMG;IACH,wBAAwB,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxF;;;;;OAKG;IACH,uBAAuB,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvF;;;;;OAKG;IACH,oBAAoB,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjF;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,YAAW,uBAAuB;IAC1D,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IACpC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IAChC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IACpC,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IACvC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IACnC,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IAC5C,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IAC3C,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;CAC/C"}

package/dist/ports/execution-events.js

@@ -0,0 +1,16 @@
+/**
+ * The default publisher: it does nothing. With it wired, the engine behaves exactly
+ * as before — no events are pushed (tests, and any deployment without the
+ * WORKSPACE_EVENTS binding).
+ */
+export class NoopEventPublisher {
+    async executionChanged() { }
+    async boardChanged() { }
+    async bootstrapChanged() { }
+    async notificationChanged() { }
+    async llmCallObserved() { }
+    async requirementReviewChanged() { }
+    async consensusSessionChanged() { }
+    async clarityReviewChanged() { }
+}
+//# sourceMappingURL=execution-events.js.map

package/dist/ports/execution-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-events.js","sourceRoot":"","sources":["../../src/ports/execution-events.ts"],"names":[],"mappings":"AAmFA;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAC7B,KAAK,CAAC,gBAAgB,KAAmB,CAAC;IAC1C,KAAK,CAAC,YAAY,KAAmB,CAAC;IACtC,KAAK,CAAC,gBAAgB,KAAmB,CAAC;IAC1C,KAAK,CAAC,mBAAmB,KAAmB,CAAC;IAC7C,KAAK,CAAC,eAAe,KAAmB,CAAC;IACzC,KAAK,CAAC,wBAAwB,KAAmB,CAAC;IAClD,KAAK,CAAC,uBAAuB,KAAmB,CAAC;IACjD,KAAK,CAAC,oBAAoB,KAAmB,CAAC;CAC/C"}

package/dist/ports/fragment-repositories.d.ts

@@ -0,0 +1,65 @@
+import type { AgentKind, BlockType, FragmentOwnerKind } from '../domain/types.js';
+/** The `appliesTo` hints, retained as the deterministic-selection fallback. */
+export interface FragmentAppliesTo {
+    blockTypes?: BlockType[];
+    agentKinds?: AgentKind[];
+}
+/** A persisted managed fragment row at one tier (see ADR 0006 §2). */
+export interface PromptFragmentRecord {
+    /** Stable, globally-unique id (a slug, or `src:<sourceId>:<path>` for sourced). */
+    fragmentId: string;
+    ownerKind: FragmentOwnerKind;
+    ownerId: string;
+    version: string;
+    title: string;
+    category: string | null;
+    /** One-line description; fed to the relevance selector. */
+    summary: string;
+    /** The guidance folded into the system prompt. */
+    body: string;
+    appliesTo: FragmentAppliesTo | null;
+    tags: string[] | null;
+    /** Provenance, when sourced from a repo (null for hand-authored). */
+    sourceId: string | null;
+    sourcePath: string | null;
+    sourceSha: string | null;
+    createdAt: number;
+    updatedAt: number;
+    /** Tombstone: suppresses an inherited fragment, or marks one removed upstream. */
+    deletedAt: number | null;
+}
+export interface PromptFragmentRepository {
+    /**
+     * Fragments owned by `(ownerKind, ownerId)`. Excludes tombstones by default;
+     * pass `includeDeleted` for the catalog merge, which must see suppressions.
+     */
+    listByOwner(ownerKind: FragmentOwnerKind, ownerId: string, includeDeleted?: boolean): Promise<PromptFragmentRecord[]>;
+    get(ownerKind: FragmentOwnerKind, ownerId: string, fragmentId: string): Promise<PromptFragmentRecord | null>;
+    upsert(record: PromptFragmentRecord): Promise<void>;
+    softDelete(ownerKind: FragmentOwnerKind, ownerId: string, fragmentId: string, at: number): Promise<void>;
+    /** Live fragments produced by a given source, for resync diffing/tombstoning. */
+    listBySource(sourceId: string): Promise<PromptFragmentRecord[]>;
+}
+/** A repo a tier links as a source of Markdown guideline files (ADR 0006 §3). */
+export interface FragmentSourceRecord {
+    id: string;
+    ownerKind: FragmentOwnerKind;
+    ownerId: string;
+    repoOwner: string;
+    repoName: string;
+    gitRef: string;
+    dirPath: string;
+    /** Digest of the source tree at the last successful sync; powers "changed?". */
+    lastSyncedSha: string | null;
+    lastSyncedAt: number | null;
+    createdAt: number;
+    deletedAt: number | null;
+}
+export interface FragmentSourceRepository {
+    listByOwner(ownerKind: FragmentOwnerKind, ownerId: string): Promise<FragmentSourceRecord[]>;
+    get(id: string): Promise<FragmentSourceRecord | null>;
+    upsert(record: FragmentSourceRecord): Promise<void>;
+    updateSyncState(id: string, lastSyncedSha: string, lastSyncedAt: number): Promise<void>;
+    softDelete(id: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=fragment-repositories.d.ts.map

package/dist/ports/fragment-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragment-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/fragment-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAUjF,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAA;CACzB;AAED,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAA;IACf,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACnC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,kFAAkF;IAClF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,WAAW,CACT,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,OAAO,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAClC,GAAG,CACD,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;IACvC,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,UAAU,CACR,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,iFAAiF;IACjF,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;CAChE;AAED,iFAAiF;AACjF,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,iBAAiB,CAAA;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,gFAAgF;IAChF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAC3F,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;IACrD,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvF,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD"}

package/dist/ports/fragment-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fragment-repositories.js.map

package/dist/ports/fragment-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragment-repositories.js","sourceRoot":"","sources":["../../src/ports/fragment-repositories.ts"],"names":[],"mappings":""}