@cleocode/contracts 2026.4.101 → 2026.4.102

package/dist/branch-lock.d.ts

@@ -0,0 +1,225 @@
+/**
+ * Branch-lock and owner-override authentication contracts for T1118.
+ *
+ * Defines types, error codes, and interfaces for the four-layer agent
+ * branch-protection system:
+ *
+ * - L1: Git worktree isolation per spawned agent
+ * - L2: cleo-git-shim binary on PATH for harness-agnostic enforcement
+ * - L3: Filesystem hardening via chmod (+ optional chattr on Linux)
+ * - L4: Owner-override HMAC session authentication with TTY + rate-limit gates
+ *
+ * @task T1118
+ * @adr ADR-055
+ */
+/**
+ * State of an agent worktree created by orchestrate.spawn.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface AgentWorktreeState {
+    /** Absolute path to the worktree directory. */
+    path: string;
+    /** Branch name (format: task/<taskId>). */
+    branch: string;
+    /** Task ID that owns this worktree. */
+    taskId: string;
+    /** Base ref the branch was created from (e.g. "main"). */
+    baseRef: string;
+    /** Project hash for env-var injection. */
+    projectHash: string;
+    /** ISO 8601 timestamp when the worktree was created. */
+    createdAt: string;
+    /** Whether git worktree lock was applied to this entry. */
+    locked: boolean;
+}
+/**
+ * Result of creating a worktree during spawn.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface WorktreeSpawnResult {
+    /** The created worktree state. */
+    worktree: AgentWorktreeState;
+    /** Environment variables to inject into the agent's process. */
+    envVars: Record<string, string>;
+    /** CWD the agent MUST be started in. */
+    cwd: string;
+    /** Preamble text to prepend to the agent's spawn prompt. */
+    preamble: string;
+}
+/**
+ * Result from the orchestrate.worktree.complete operation.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface WorktreeCompleteResult {
+    /** Task ID that was completed. */
+    taskId: string;
+    /** Whether the cherry-pick succeeded. */
+    cherryPicked: boolean;
+    /** Number of commits cherry-picked. */
+    commitCount: number;
+    /** Whether the worktree was removed. */
+    worktreeRemoved: boolean;
+    /** Whether the task branch was deleted. */
+    branchDeleted: boolean;
+    /** Error message if any step failed (non-fatal — caller decides). */
+    error?: string;
+}
+/**
+ * Result from the orchestrate.worktree.cleanup operation.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface WorktreeCleanupResult {
+    /** Number of stale worktrees removed. */
+    removed: number;
+    /** Paths that were removed. */
+    removedPaths: string[];
+    /** Paths that failed to remove (with reasons). */
+    errors: Array<{
+        path: string;
+        reason: string;
+    }>;
+}
+/**
+ * Environment variables read by the cleo-git-shim binary.
+ *
+ * @task T1118
+ * @task T1121
+ */
+export interface GitShimEnv {
+    /** Agent role. When set to worker|lead|subagent, branch-mutating ops are blocked. */
+    CLEO_AGENT_ROLE?: 'orchestrator' | 'worker' | 'lead' | 'subagent';
+    /** When set to "1", bypass the branch-mutation denylist for one command. */
+    CLEO_ALLOW_BRANCH_OPS?: '1';
+    /** Worktree root path — informational for shim error messages. */
+    CLEO_WORKTREE_ROOT?: string;
+    /** Branch protection mode. */
+    CLEO_BRANCH_PROTECTION?: 'strict' | 'permissive' | 'off';
+}
+/**
+ * A blocked git subcommand entry in the denylist.
+ *
+ * @task T1118
+ * @task T1121
+ */
+export interface DeniedGitOp {
+    /** The git subcommand (e.g. "checkout"). */
+    subcommand: string;
+    /** Optional flag that triggers the denial (e.g. "--hard" for reset). */
+    flag?: string;
+    /** Human-readable reason shown in the shim's stderr output. */
+    reason: string;
+}
+/**
+ * Platform capability report for filesystem hardening.
+ *
+ * @task T1118
+ * @task T1122
+ */
+export interface FsHardenCapabilities {
+    /** Whether chmod is available (always true on POSIX). */
+    chmod: boolean;
+    /** Whether chattr is available (Linux ext2/3/4/xfs only). */
+    chattr: boolean;
+    /** Whether chflags is available (macOS). */
+    chflags: boolean;
+    /** Detected platform. */
+    platform: 'linux' | 'macos' | 'windows' | 'wsl' | 'unknown';
+}
+/**
+ * State of the filesystem hard-lock for the orchestrator's HEAD.
+ *
+ * @task T1118
+ * @task T1122
+ */
+export interface FsHardenState {
+    /** Whether any lock is currently active. */
+    active: boolean;
+    /** Which mechanism was applied (chmod, chattr, or chflags). */
+    mechanism: 'chmod' | 'chattr' | 'chflags' | 'none';
+    /** Absolute path(s) that were locked. */
+    lockedPaths: string[];
+    /** ISO 8601 timestamp when the lock was applied. */
+    appliedAt?: string;
+}
+/**
+ * Record appended to force-bypass.jsonl when an override is used.
+ *
+ * Extends the base ForceBypassRecord with L4-specific authentication fields.
+ *
+ * @task T1118
+ * @task T1123
+ */
+export interface OwnerOverrideAuditRecord {
+    /** ISO 8601 timestamp. */
+    timestamp: string;
+    /** Task ID being verified (may be "*" for session-level). */
+    taskId: string;
+    /** Gate being bypassed. */
+    gate: string;
+    /** Write action performed. */
+    action: string;
+    /** Agent ID that performed the bypass. */
+    agent_id: string;
+    /** Session ID. */
+    session_id: string | null;
+    /** Whether the HMAC token was validated (L4a). */
+    token_validated: boolean;
+    /** Whether TTY was present (L4c). */
+    tty_present: boolean;
+    /** Override count within the current session (L4d). */
+    override_count: number;
+    /** Webhook delivery status (L4d). */
+    webhook_delivered?: boolean;
+    /** Reason supplied by the operator. */
+    reason: string;
+    /** Process ID. */
+    pid: number;
+}
+/**
+ * Configuration for the owner override system.
+ *
+ * @task T1118
+ * @task T1123
+ */
+export interface OwnerOverrideConfig {
+    /** Maximum number of overrides allowed per session (default: 3). */
+    maxPerSession: number;
+    /** Optional webhook URL to POST on each bypass. */
+    alertWebhook?: string;
+}
+/**
+ * Error codes emitted by the branch-lock + override-auth system.
+ *
+ * @task T1118
+ */
+export declare const BRANCH_LOCK_ERROR_CODES: {
+    /** L2: git shim blocked a branch-mutating operation. */
+    readonly E_GIT_OP_BLOCKED: "E_GIT_OP_BLOCKED";
+    /** L1: spawn attempted without a worktree handle. */
+    readonly E_WORKTREE_REQUIRED: "E_WORKTREE_REQUIRED";
+    /** L1: worktree path does not exist or is not a valid git worktree. */
+    readonly E_WORKTREE_INVALID: "E_WORKTREE_INVALID";
+    /** L1: cherry-pick failed during worktree.complete. */
+    readonly E_CHERRY_PICK_FAILED: "E_CHERRY_PICK_FAILED";
+    /** L3: filesystem harden failed. */
+    readonly E_FS_HARDEN_FAILED: "E_FS_HARDEN_FAILED";
+    /** L4a: HMAC token invalid or missing. */
+    readonly E_OVERRIDE_TOKEN_INVALID: "E_OVERRIDE_TOKEN_INVALID";
+    /** L4b: caller has CLEO_AGENT_ROLE=worker|lead|subagent — override forbidden. */
+    readonly E_OVERRIDE_FORBIDDEN_AGENT_ROLE: "E_OVERRIDE_FORBIDDEN_AGENT_ROLE";
+    /** L4c: override requires TTY but stdin/stderr is not a TTY. */
+    readonly E_OVERRIDE_NEEDS_TTY: "E_OVERRIDE_NEEDS_TTY";
+    /** L4d: session override limit exceeded. */
+    readonly E_OVERRIDE_RATE_LIMIT: "E_OVERRIDE_RATE_LIMIT";
+};
+/** Union of all branch-lock error code strings. */
+export type BranchLockErrorCode = (typeof BRANCH_LOCK_ERROR_CODES)[keyof typeof BRANCH_LOCK_ERROR_CODES];
+//# sourceMappingURL=branch-lock.d.ts.map

package/dist/branch-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-lock.d.ts","sourceRoot":"","sources":["../src/branch-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,kCAAkC;IAClC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,YAAY,EAAE,OAAO,CAAC;IACtB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kDAAkD;IAClD,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAMD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,eAAe,CAAC,EAAE,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClE,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,GAAG,CAAC;IAC5B,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8BAA8B;IAC9B,sBAAsB,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,KAAK,CAAC;CAC1D;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,yDAAyD;IACzD,KAAK,EAAE,OAAO,CAAC;IACf,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,yBAAyB;IACzB,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;CAC7D;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,MAAM,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACnD,yCAAyC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,kDAAkD;IAClD,eAAe,EAAE,OAAO,CAAC;IACzB,qCAAqC;IACrC,WAAW,EAAE,OAAO,CAAC;IACrB,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;IAClC,wDAAwD;;IAExD,qDAAqD;;IAErD,uEAAuE;;IAEvE,uDAAuD;;IAEvD,oCAAoC;;IAEpC,0CAA0C;;IAE1C,iFAAiF;;IAEjF,gEAAgE;;IAEhE,4CAA4C;;CAEpC,CAAC;AAEX,mDAAmD;AACnD,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/branch-lock.js

@@ -0,0 +1,43 @@
+/**
+ * Branch-lock and owner-override authentication contracts for T1118.
+ *
+ * Defines types, error codes, and interfaces for the four-layer agent
+ * branch-protection system:
+ *
+ * - L1: Git worktree isolation per spawned agent
+ * - L2: cleo-git-shim binary on PATH for harness-agnostic enforcement
+ * - L3: Filesystem hardening via chmod (+ optional chattr on Linux)
+ * - L4: Owner-override HMAC session authentication with TTY + rate-limit gates
+ *
+ * @task T1118
+ * @adr ADR-055
+ */
+// ---------------------------------------------------------------------------
+// Error codes for branch-lock enforcement
+// ---------------------------------------------------------------------------
+/**
+ * Error codes emitted by the branch-lock + override-auth system.
+ *
+ * @task T1118
+ */
+export const BRANCH_LOCK_ERROR_CODES = {
+    /** L2: git shim blocked a branch-mutating operation. */
+    E_GIT_OP_BLOCKED: 'E_GIT_OP_BLOCKED',
+    /** L1: spawn attempted without a worktree handle. */
+    E_WORKTREE_REQUIRED: 'E_WORKTREE_REQUIRED',
+    /** L1: worktree path does not exist or is not a valid git worktree. */
+    E_WORKTREE_INVALID: 'E_WORKTREE_INVALID',
+    /** L1: cherry-pick failed during worktree.complete. */
+    E_CHERRY_PICK_FAILED: 'E_CHERRY_PICK_FAILED',
+    /** L3: filesystem harden failed. */
+    E_FS_HARDEN_FAILED: 'E_FS_HARDEN_FAILED',
+    /** L4a: HMAC token invalid or missing. */
+    E_OVERRIDE_TOKEN_INVALID: 'E_OVERRIDE_TOKEN_INVALID',
+    /** L4b: caller has CLEO_AGENT_ROLE=worker|lead|subagent — override forbidden. */
+    E_OVERRIDE_FORBIDDEN_AGENT_ROLE: 'E_OVERRIDE_FORBIDDEN_AGENT_ROLE',
+    /** L4c: override requires TTY but stdin/stderr is not a TTY. */
+    E_OVERRIDE_NEEDS_TTY: 'E_OVERRIDE_NEEDS_TTY',
+    /** L4d: session override limit exceeded. */
+    E_OVERRIDE_RATE_LIMIT: 'E_OVERRIDE_RATE_LIMIT',
+};
+//# sourceMappingURL=branch-lock.js.map

package/dist/branch-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-lock.js","sourceRoot":"","sources":["../src/branch-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAgNH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,wDAAwD;IACxD,gBAAgB,EAAE,kBAAkB;IACpC,qDAAqD;IACrD,mBAAmB,EAAE,qBAAqB;IAC1C,uEAAuE;IACvE,kBAAkB,EAAE,oBAAoB;IACxC,uDAAuD;IACvD,oBAAoB,EAAE,sBAAsB;IAC5C,oCAAoC;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,0CAA0C;IAC1C,wBAAwB,EAAE,0BAA0B;IACpD,iFAAiF;IACjF,+BAA+B,EAAE,iCAAiC;IAClE,gEAAgE;IAChE,oBAAoB,EAAE,sBAAsB;IAC5C,4CAA4C;IAC5C,qBAAqB,EAAE,uBAAuB;CACtC,CAAC"}

package/dist/index.d.ts

@@ -18,10 +18,12 @@ export { attachmentMetadataSchema, attachmentRefSchema, attachmentSchema, blobAt
 export type { BackupDatabaseEntry, BackupGlobalFileEntry, BackupIntegrity, BackupJsonEntry, BackupManifest, BackupMetadata, BackupScope, } from './backup-manifest.js';
 export type { BrainCognitiveType, BrainEntryRef, BrainEntrySummary, BrainMemoryTier, BrainSourceConfidence, ContradictionDetail, SupersededEntry, } from './brain.js';
 export type { BrainConnectionStatus, BrainEdge, BrainGraph, BrainNode, BrainNodeKind, BrainProjectContext, BrainQueryOptions, BrainStreamEvent, BrainSubstrate, } from './brain-graph.js';
+export type { AgentWorktreeState, BranchLockErrorCode, DeniedGitOp, FsHardenCapabilities, FsHardenState, GitShimEnv, OwnerOverrideAuditRecord, OwnerOverrideConfig, WorktreeCleanupResult, WorktreeCompleteResult, WorktreeSpawnResult, } from './branch-lock.js';
+export { BRANCH_LOCK_ERROR_CODES } from './branch-lock.js';
 export type { AdapterCapabilities } from './capabilities.js';
 export type { BatchParseResult, CodeSymbol, CodeSymbolKind, ParseResult, } from './code-symbol.js';
 export type { Conduit, ConduitConfig, ConduitMessage, ConduitSendOptions, ConduitSendResult, ConduitState, ConduitStateChange, ConduitUnsubscribe, } from './conduit.js';
-export type { BackupConfig, BrainConfig, BrainEmbeddingConfig, BrainLlmExtractionConfig, BrainMemoryBridgeConfig, BrainSummarizationConfig, BrainTieringConfig, ClaudeProviderConfig, ClaudeSpawnMode, CleoConfig, ConfigSource, DateFormat, EnforcementProfile, HierarchyConfig, LifecycleConfig, LifecycleEnforcementMode, LoggingConfig, LogLevel, OutputConfig, OutputFormat, ProviderConfig, ResolvedValue, SessionConfig, SessionSummaryInput, SharingConfig, SharingMode, SignalDockConfig, SignalDockMode, } from './config.js';
+export type { BackupConfig, BrainConfig, BrainEmbeddingConfig, BrainLlmExtractionConfig, BrainMemoryBridgeConfig, BrainSummarizationConfig, BrainTieringConfig, ClaudeProviderConfig, ClaudeSpawnMode, CleoConfig, ConfigSource, DateFormat, EnforcementProfile, HierarchyConfig, LifecycleConfig, LifecycleEnforcementMode, LoggingConfig, LogLevel, MemoryBridgeMode, OutputConfig, OutputFormat, ProviderConfig, ResolvedValue, SessionConfig, SessionSummaryInput, SharingConfig, SharingMode, SignalDockConfig, SignalDockMode, } from './config.js';
 export type { AdapterContextMonitorProvider } from './context-monitor.js';
 export type { ArchiveFields, ArchiveFile, DataAccessor, DataAccessorAgentInstance, QueryTasksResult, TaskFieldUpdates, TaskQueryFilters, TransactionAccessor, } from './data-accessor.js';
 export type { DependencyCategory, DependencyCheckResult, DependencyReport, DependencySpec, } from './dependency.js';
@@ -44,7 +46,7 @@ export type { BlastRadiusSummary, BrainMemoryRef, BrainRiskNote, CodeAnchorResul
 export type { NexusCteAlias, NexusCteMarkdownTable, NexusCteParams, NexusCtePlaceholder, NexusCteResult, } from './nexus-query-ops.js';
 export type { RouteMapEntry, RouteMapResult, ShapeCheckCaller, ShapeCheckResult, ShapeCheckStatus, } from './nexus-route-ops.js';
 export type { GitLogLinkerResult, LinkTaskResult, SymbolReference, TaskReference, } from './nexus-tasks-bridge-ops.js';
-export type { CommunityWikiStats, NexusWikiResult, WikiSymbolRow, } from './nexus-wiki-ops.js';
+export type { CommunityWikiStats, GenerateNexusWikiOptions, NexusWikiResult, WikiDbHandle, WikiStateFile, WikiSymbolRow, } from './nexus-wiki-ops.js';
 export * as ops from './operations/index.js';
 export type { BrainState } from './operations/orchestrate.js';
 export type { CittyArgDef, OperationParams, ParamCliDef, ParamDef, ParamType, } from './operations/params.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE7E,YAAY,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,2BAA2B,EAC3B,gBAAgB,EAChB,oBAAoB,EACpB,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,6BAA6B,EAC7B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,SAAS,EACT,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,OAAO,EACP,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAE1E,YAAY,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,EACX,cAAc,EACd,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,QAAQ,EACR,eAAe,EACf,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,QAAQ,GACT,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,aAAa,EACb,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1F,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,SAAS,EACT,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,SAAS,EACT,eAAe,EACf,WAAW,EACX,QAAQ,EACR,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,QAAQ,EACR,2BAA2B,EAC3B,wBAAwB,EACxB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,aAAa,GACd,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAErC,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,GAAG,MAAM,uBAAuB,CAAC;AAE7C,YAAY,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,YAAY,EACV,cAAc,EACd,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAEtC,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,OAAO,EACP,eAAe,EACf,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAElF,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,WAAW,EACX,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EAEd,KAAK,UAAU,EACf,aAAa,EACb,KAAK,UAAU,EACf,aAAa,EACb,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB,EACjB,KAAK,cAAc,EAEnB,qBAAqB,EACrB,KAAK,cAAc,EACnB,gBAAgB,EAChB,KAAK,aAAa,EAClB,kBAAkB,EAClB,eAAe,EACf,KAAK,WAAW,EAChB,yBAAyB,EACzB,2BAA2B,EAE3B,aAAa,EAEb,KAAK,UAAU,EACf,0BAA0B,EAC1B,uBAAuB,EAEvB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,WAAW,EACX,eAAe,EACf,WAAW,EACX,OAAO,EACP,aAAa,EACb,WAAW,EACX,IAAI,EACJ,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EAEZ,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,yBAAyB,EACzB,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,wBAAwB,EACxB,SAAS,EACT,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,UAAU,EACV,eAAe,EACf,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,QAAQ,EACR,SAAS,GACV,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE7E,YAAY,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,2BAA2B,EAC3B,gBAAgB,EAChB,oBAAoB,EACpB,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,6BAA6B,EAC7B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,SAAS,EACT,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,OAAO,EACP,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,aAAa,EACb,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAE1E,YAAY,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,EACX,cAAc,EACd,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,QAAQ,EACR,eAAe,EACf,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,QAAQ,GACT,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,aAAa,EACb,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1F,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,SAAS,EACT,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,SAAS,EACT,eAAe,EACf,WAAW,EACX,QAAQ,EACR,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,QAAQ,EACR,2BAA2B,EAC3B,wBAAwB,EACxB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,aAAa,GACd,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAErC,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,aAAa,GACd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,GAAG,MAAM,uBAAuB,CAAC;AAE7C,YAAY,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,YAAY,EACV,cAAc,EACd,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAEtC,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,OAAO,EACP,eAAe,EACf,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAElF,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,WAAW,EACX,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EAEd,KAAK,UAAU,EACf,aAAa,EACb,KAAK,UAAU,EACf,aAAa,EACb,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB,EACjB,KAAK,cAAc,EAEnB,qBAAqB,EACrB,KAAK,cAAc,EACnB,gBAAgB,EAChB,KAAK,aAAa,EAClB,kBAAkB,EAClB,eAAe,EACf,KAAK,WAAW,EAChB,yBAAyB,EACzB,2BAA2B,EAE3B,aAAa,EAEb,KAAK,UAAU,EACf,0BAA0B,EAC1B,uBAAuB,EAEvB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,WAAW,EACX,eAAe,EACf,WAAW,EACX,OAAO,EACP,aAAa,EACb,WAAW,EACX,IAAI,EACJ,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EAEZ,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,yBAAyB,EACzB,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,wBAAwB,EACxB,SAAS,EACT,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,UAAU,EACV,eAAe,EACf,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,QAAQ,EACR,SAAS,GACV,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -8,6 +8,8 @@
 // === Acceptance Gate Zod Schemas (runtime validation) ===
 export { acceptanceArraySchema, acceptanceGateResultSchema, acceptanceGateSchema, acceptanceItemSchema, commandGateSchema, fileAssertionSchema, fileGateSchema, gateBaseSchema, gateResultDetailsSchema, httpGateSchema, lintGateSchema, manualGateSchema, testGateSchema, } from './acceptance-gate-schema.js';
 export { attachmentMetadataSchema, attachmentRefSchema, attachmentSchema, blobAttachmentSchema, llmsTxtAttachmentSchema, llmtxtDocAttachmentSchema, localFileAttachmentSchema, urlAttachmentSchema, } from './attachment-schema.js';
+// === Branch-Lock + Owner-Auth Types (T1118) ===
+export { BRANCH_LOCK_ERROR_CODES } from './branch-lock.js';
 // === Error Utilities ===
 export { createErrorResult, createSuccessResult, formatError, getErrorMessage, isErrorResult, isErrorType, normalizeError, ThinAgentViolationError, } from './errors.js';
 // === Evidence Record Zod Schemas (runtime validation) ===

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,2DAA2D;AAC3D,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,GACf,MAAM,6BAA6B,CAAC;AA0DrC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAuGhC,0BAA0B;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,EACX,cAAc,EACd,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAmBrB,2DAA2D;AAC3D,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,qBAAqB;AACrB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAgCzB,gCAAgC;AAChC,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAuCrB,8BAA8B;AAC9B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AAwEnB,8FAA8F;AAC9F,OAAO,KAAK,GAAG,MAAM,uBAAuB,CAAC;AAW7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAoC3D,kCAAkC;AAClC,OAAO,EAKL,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AA4DtC,wBAAwB;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C,uEAAuE;AACvE,OAAO,EACL,YAAY,EAIZ,aAAa,EAEb,aAAa,EACb,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB;AAEjB,gBAAgB;AAChB,qBAAqB,EAErB,gBAAgB,EAEhB,kBAAkB,EAClB,eAAe,EAEf,yBAAyB,EACzB,2BAA2B;AAC3B,YAAY;AACZ,aAAa,EAGb,0BAA0B,EAC1B,uBAAuB;AACvB,sBAAsB;AACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AA8C9B,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAiD5B,yCAAyC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,2DAA2D;AAC3D,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,GACf,MAAM,6BAA6B,CAAC;AA0DrC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AA8ChC,iDAAiD;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAwE3D,0BAA0B;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,EACX,cAAc,EACd,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAmBrB,2DAA2D;AAC3D,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,qBAAqB;AACrB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAgCzB,gCAAgC;AAChC,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAuCrB,8BAA8B;AAC9B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,aAAa,GACd,MAAM,WAAW,CAAC;AA2EnB,8FAA8F;AAC9F,OAAO,KAAK,GAAG,MAAM,uBAAuB,CAAC;AAW7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAoC3D,kCAAkC;AAClC,OAAO,EAKL,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AA4DtC,wBAAwB;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C,uEAAuE;AACvE,OAAO,EACL,YAAY,EAIZ,aAAa,EAEb,aAAa,EACb,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB;AAEjB,gBAAgB;AAChB,qBAAqB,EAErB,gBAAgB,EAEhB,kBAAkB,EAClB,eAAe,EAEf,yBAAyB,EACzB,2BAA2B;AAC3B,YAAY;AACZ,aAAa,EAGb,0BAA0B,EAC1B,uBAAuB;AACvB,sBAAsB;AACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AA8C9B,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAiD5B,yCAAyC"}

package/dist/nexus-wiki-ops.d.ts

@@ -5,6 +5,7 @@
  * from the nexus code graph.
  *
  * @task T1060
+ * @task T1109
  * @epic T1042
  */
 /**
@@ -32,6 +33,10 @@ export interface NexusWikiResult {
     communities: CommunityWikiStats[];
     /** Error message if success is false */
     error?: string;
+    /** IDs of communities that were skipped (incremental mode) */
+    skippedCommunities?: string[];
+    /** Whether LOOM LLM narrative was generated */
+    loomEnabled?: boolean;
 }
 /**
  * Symbol metadata as it appears in the wiki index.
@@ -48,4 +53,75 @@ export interface WikiSymbolRow {
     /** Number of symbols this symbol calls */
     calleeCount: number;
 }
+/**
+ * Subset of SQLite-compatible parameter values accepted by `DatabaseSync.prepare()`.
+ * Mirrors node:sqlite's `SQLInputValue` without importing from node internals.
+ */
+export type WikiSqlParam = null | number | bigint | string | Uint8Array;
+/**
+ * Minimal interface for an injectable SQLite database handle.
+ * Used in tests to provide an isolated in-memory or temp-file database
+ * instead of the real nexus.db singleton.
+ *
+ * Matches the subset of `DatabaseSync` (node:sqlite) used by the wiki generator.
+ */
+export interface WikiDbHandle {
+    /**
+     * Prepare a SQL statement and return a statement object with
+     * `all(...params)` and `get(...params)` accessors.
+     * Compatible with both `DatabaseSync.prepare()` and test mocks.
+     */
+    prepare: (sql: string) => {
+        all: (...params: WikiSqlParam[]) => Record<string, WikiSqlParam>[];
+        get: (...params: WikiSqlParam[]) => Record<string, WikiSqlParam> | undefined;
+    };
+}
+/**
+ * Options for generating the nexus wiki index.
+ */
+export interface GenerateNexusWikiOptions {
+    /**
+     * Filter generation to a single community ID.
+     * When set, only that community's markdown file is generated.
+     * The overview.md is NOT generated in single-community mode.
+     */
+    communityFilter?: string;
+    /**
+     * Enable incremental mode: use `cleo nexus diff` data to skip
+     * communities whose symbols have not changed since the last wiki run.
+     *
+     * Reads `.cleo/wiki-state.json` for the last-run commit SHA.
+     * On first run (no state file), performs a full generation and writes
+     * the state file.
+     */
+    incremental?: boolean;
+    /**
+     * LOOM provider function for generating narrative module summaries.
+     * Injected by the caller (CLI or test harness). When `null`, scaffold
+     * mode is used (no LLM narrative).
+     *
+     * Signature: `(prompt: string) => Promise<string>`
+     */
+    loomProvider?: ((prompt: string) => Promise<string>) | null;
+    /**
+     * Project root directory (used for resolving `.cleo/wiki-state.json`
+     * and running git operations). Defaults to `process.cwd()`.
+     */
+    projectRoot?: string;
+    /**
+     * Injectable database handle for testing.
+     * When provided, this handle is used instead of the real nexus.db singleton.
+     * Allows unit/integration tests to use isolated in-memory SQLite databases.
+     */
+    _dbForTesting?: WikiDbHandle;
+}
+/**
+ * State file persisted to `.cleo/wiki-state.json` for incremental mode.
+ */
+export interface WikiStateFile {
+    /** Git commit SHA of the last full or incremental wiki generation run. */
+    lastRunCommit: string;
+    /** List of community IDs generated in the last run. */
+    generatedCommunities: string[];
+}
 //# sourceMappingURL=nexus-wiki-ops.d.ts.map

package/dist/nexus-wiki-ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nexus-wiki-ops.d.ts","sourceRoot":"","sources":["../src/nexus-wiki-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"nexus-wiki-ops.d.ts","sourceRoot":"","sources":["../src/nexus-wiki-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK;QACxB,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QACnE,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,SAAS,CAAC;KAC9E,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IAC5D;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC"}

package/dist/nexus-wiki-ops.js

@@ -5,6 +5,7 @@
  * from the nexus code graph.
  *
  * @task T1060
+ * @task T1109
  * @epic T1042
  */
 export {};

package/dist/nexus-wiki-ops.js.map

@@ -1 +1 @@
-{"version":3,"file":"nexus-wiki-ops.js","sourceRoot":"","sources":["../src/nexus-wiki-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}
+{"version":3,"file":"nexus-wiki-ops.js","sourceRoot":"","sources":["../src/nexus-wiki-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/operations/session.d.ts

@@ -167,6 +167,14 @@ export interface SessionStartParams {
     focus?: string;
     /** Enable full query+mutation audit logging for behavioral grading. */
     grade?: boolean;
+    /**
+     * HMAC-SHA256 owner-auth token for L4a override authentication (T1118).
+     *
+     * Derived from HMAC-SHA256(key=password, data=sessionId) during
+     * `cleo session start --owner-auth`. Stored in sessions.owner_auth_token
+     * and validated on every `CLEO_OWNER_OVERRIDE` call.
+     */
+    ownerAuthToken?: string;
 }
 /** Result of `session.start` — the newly created session. */
 export type SessionStartResult = Session;

package/dist/operations/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/operations/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAM7C;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAOD,4DAA4D;AAC5D,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,YAAY,EAAE,aAAa,GAAG,IAAI,CAAC;CACtD;AAGD,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAGxC,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,0DAA0D;AAC1D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;CACJ;AAGD,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wCAAwC;AACxC,MAAM,MAAM,wBAAwB,GAAG,cAAc,EAAE,CAAC;AAGxD,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,yCAAyC;AACzC,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wCAAwC;AACxC,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAGD,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAGhD,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,sCAAsC;AACtC,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,mCAAmC;AACnC,MAAM,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,CAAC;AAOzD,sCAAsC;AACtC,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AACD,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAGzC,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,cAAc,EAAE,mBAAmB,CAAC;CAC7D;AACD,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wDAAwD;AACxD,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAG1C,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,2DAA2D;AAC3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAG3C,mCAAmC;AACnC,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAGD,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AACD,2CAA2C;AAC3C,MAAM,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAGzD,kDAAkD;AAClD,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACvC;AACD,6CAA6C;AAC7C,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACrE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,CAAC;IACvF,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAC1F,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC9F,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAC1F,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAClE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC;IAChG,QAAQ,CAAC,mBAAmB,EAAE,SAAS;QACrC,6BAA6B;QAC7B,6BAA6B;KAC9B,CAAC;CACH,CAAC"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/operations/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAM7C;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAOD,4DAA4D;AAC5D,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,YAAY,EAAE,aAAa,GAAG,IAAI,CAAC;CACtD;AAGD,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAGxC,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,0DAA0D;AAC1D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;CACJ;AAGD,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wCAAwC;AACxC,MAAM,MAAM,wBAAwB,GAAG,cAAc,EAAE,CAAC;AAGxD,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,yCAAyC;AACzC,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,6CAA6C;AAC7C,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wCAAwC;AACxC,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAGD,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAGhD,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,sCAAsC;AACtC,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,mCAAmC;AACnC,MAAM,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,CAAC;AAOzD,sCAAsC;AACtC,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AACD,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAGzC,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,cAAc,EAAE,mBAAmB,CAAC;CAC7D;AACD,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wDAAwD;AACxD,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAG1C,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,2DAA2D;AAC3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAG3C,mCAAmC;AACnC,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAGD,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AACD,2CAA2C;AAC3C,MAAM,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAGzD,kDAAkD;AAClD,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACvC;AACD,6CAA6C;AAC7C,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACrE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,CAAC;IACvF,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAC1F,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC9F,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAC1F,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAClE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IACxE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC;IAChG,QAAQ,CAAC,mBAAmB,EAAE,SAAS;QACrC,6BAA6B;QAC7B,6BAA6B;KAC9B,CAAC;CACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/contracts",
-  "version": "2026.4.101",
+  "version": "2026.4.102",
   "description": "Domain types, interfaces, and contracts for the CLEO ecosystem",
   "type": "module",
   "main": "./dist/index.js",

package/src/branch-lock.ts

@@ -0,0 +1,254 @@
+/**
+ * Branch-lock and owner-override authentication contracts for T1118.
+ *
+ * Defines types, error codes, and interfaces for the four-layer agent
+ * branch-protection system:
+ *
+ * - L1: Git worktree isolation per spawned agent
+ * - L2: cleo-git-shim binary on PATH for harness-agnostic enforcement
+ * - L3: Filesystem hardening via chmod (+ optional chattr on Linux)
+ * - L4: Owner-override HMAC session authentication with TTY + rate-limit gates
+ *
+ * @task T1118
+ * @adr ADR-055
+ */
+
+// ---------------------------------------------------------------------------
+// L1 — Worktree lifecycle types
+// ---------------------------------------------------------------------------
+
+/**
+ * State of an agent worktree created by orchestrate.spawn.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface AgentWorktreeState {
+  /** Absolute path to the worktree directory. */
+  path: string;
+  /** Branch name (format: task/<taskId>). */
+  branch: string;
+  /** Task ID that owns this worktree. */
+  taskId: string;
+  /** Base ref the branch was created from (e.g. "main"). */
+  baseRef: string;
+  /** Project hash for env-var injection. */
+  projectHash: string;
+  /** ISO 8601 timestamp when the worktree was created. */
+  createdAt: string;
+  /** Whether git worktree lock was applied to this entry. */
+  locked: boolean;
+}
+
+/**
+ * Result of creating a worktree during spawn.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface WorktreeSpawnResult {
+  /** The created worktree state. */
+  worktree: AgentWorktreeState;
+  /** Environment variables to inject into the agent's process. */
+  envVars: Record<string, string>;
+  /** CWD the agent MUST be started in. */
+  cwd: string;
+  /** Preamble text to prepend to the agent's spawn prompt. */
+  preamble: string;
+}
+
+/**
+ * Result from the orchestrate.worktree.complete operation.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface WorktreeCompleteResult {
+  /** Task ID that was completed. */
+  taskId: string;
+  /** Whether the cherry-pick succeeded. */
+  cherryPicked: boolean;
+  /** Number of commits cherry-picked. */
+  commitCount: number;
+  /** Whether the worktree was removed. */
+  worktreeRemoved: boolean;
+  /** Whether the task branch was deleted. */
+  branchDeleted: boolean;
+  /** Error message if any step failed (non-fatal — caller decides). */
+  error?: string;
+}
+
+/**
+ * Result from the orchestrate.worktree.cleanup operation.
+ *
+ * @task T1118
+ * @task T1120
+ */
+export interface WorktreeCleanupResult {
+  /** Number of stale worktrees removed. */
+  removed: number;
+  /** Paths that were removed. */
+  removedPaths: string[];
+  /** Paths that failed to remove (with reasons). */
+  errors: Array<{ path: string; reason: string }>;
+}
+
+// ---------------------------------------------------------------------------
+// L2 — Git shim contract types
+// ---------------------------------------------------------------------------
+
+/**
+ * Environment variables read by the cleo-git-shim binary.
+ *
+ * @task T1118
+ * @task T1121
+ */
+export interface GitShimEnv {
+  /** Agent role. When set to worker|lead|subagent, branch-mutating ops are blocked. */
+  CLEO_AGENT_ROLE?: 'orchestrator' | 'worker' | 'lead' | 'subagent';
+  /** When set to "1", bypass the branch-mutation denylist for one command. */
+  CLEO_ALLOW_BRANCH_OPS?: '1';
+  /** Worktree root path — informational for shim error messages. */
+  CLEO_WORKTREE_ROOT?: string;
+  /** Branch protection mode. */
+  CLEO_BRANCH_PROTECTION?: 'strict' | 'permissive' | 'off';
+}
+
+/**
+ * A blocked git subcommand entry in the denylist.
+ *
+ * @task T1118
+ * @task T1121
+ */
+export interface DeniedGitOp {
+  /** The git subcommand (e.g. "checkout"). */
+  subcommand: string;
+  /** Optional flag that triggers the denial (e.g. "--hard" for reset). */
+  flag?: string;
+  /** Human-readable reason shown in the shim's stderr output. */
+  reason: string;
+}
+
+// ---------------------------------------------------------------------------
+// L3 — Filesystem hardening types
+// ---------------------------------------------------------------------------
+
+/**
+ * Platform capability report for filesystem hardening.
+ *
+ * @task T1118
+ * @task T1122
+ */
+export interface FsHardenCapabilities {
+  /** Whether chmod is available (always true on POSIX). */
+  chmod: boolean;
+  /** Whether chattr is available (Linux ext2/3/4/xfs only). */
+  chattr: boolean;
+  /** Whether chflags is available (macOS). */
+  chflags: boolean;
+  /** Detected platform. */
+  platform: 'linux' | 'macos' | 'windows' | 'wsl' | 'unknown';
+}
+
+/**
+ * State of the filesystem hard-lock for the orchestrator's HEAD.
+ *
+ * @task T1118
+ * @task T1122
+ */
+export interface FsHardenState {
+  /** Whether any lock is currently active. */
+  active: boolean;
+  /** Which mechanism was applied (chmod, chattr, or chflags). */
+  mechanism: 'chmod' | 'chattr' | 'chflags' | 'none';
+  /** Absolute path(s) that were locked. */
+  lockedPaths: string[];
+  /** ISO 8601 timestamp when the lock was applied. */
+  appliedAt?: string;
+}
+
+// ---------------------------------------------------------------------------
+// L4 — Owner override authentication types
+// ---------------------------------------------------------------------------
+
+/**
+ * Record appended to force-bypass.jsonl when an override is used.
+ *
+ * Extends the base ForceBypassRecord with L4-specific authentication fields.
+ *
+ * @task T1118
+ * @task T1123
+ */
+export interface OwnerOverrideAuditRecord {
+  /** ISO 8601 timestamp. */
+  timestamp: string;
+  /** Task ID being verified (may be "*" for session-level). */
+  taskId: string;
+  /** Gate being bypassed. */
+  gate: string;
+  /** Write action performed. */
+  action: string;
+  /** Agent ID that performed the bypass. */
+  agent_id: string;
+  /** Session ID. */
+  session_id: string | null;
+  /** Whether the HMAC token was validated (L4a). */
+  token_validated: boolean;
+  /** Whether TTY was present (L4c). */
+  tty_present: boolean;
+  /** Override count within the current session (L4d). */
+  override_count: number;
+  /** Webhook delivery status (L4d). */
+  webhook_delivered?: boolean;
+  /** Reason supplied by the operator. */
+  reason: string;
+  /** Process ID. */
+  pid: number;
+}
+
+/**
+ * Configuration for the owner override system.
+ *
+ * @task T1118
+ * @task T1123
+ */
+export interface OwnerOverrideConfig {
+  /** Maximum number of overrides allowed per session (default: 3). */
+  maxPerSession: number;
+  /** Optional webhook URL to POST on each bypass. */
+  alertWebhook?: string;
+}
+
+// ---------------------------------------------------------------------------
+// Error codes for branch-lock enforcement
+// ---------------------------------------------------------------------------
+
+/**
+ * Error codes emitted by the branch-lock + override-auth system.
+ *
+ * @task T1118
+ */
+export const BRANCH_LOCK_ERROR_CODES = {
+  /** L2: git shim blocked a branch-mutating operation. */
+  E_GIT_OP_BLOCKED: 'E_GIT_OP_BLOCKED',
+  /** L1: spawn attempted without a worktree handle. */
+  E_WORKTREE_REQUIRED: 'E_WORKTREE_REQUIRED',
+  /** L1: worktree path does not exist or is not a valid git worktree. */
+  E_WORKTREE_INVALID: 'E_WORKTREE_INVALID',
+  /** L1: cherry-pick failed during worktree.complete. */
+  E_CHERRY_PICK_FAILED: 'E_CHERRY_PICK_FAILED',
+  /** L3: filesystem harden failed. */
+  E_FS_HARDEN_FAILED: 'E_FS_HARDEN_FAILED',
+  /** L4a: HMAC token invalid or missing. */
+  E_OVERRIDE_TOKEN_INVALID: 'E_OVERRIDE_TOKEN_INVALID',
+  /** L4b: caller has CLEO_AGENT_ROLE=worker|lead|subagent — override forbidden. */
+  E_OVERRIDE_FORBIDDEN_AGENT_ROLE: 'E_OVERRIDE_FORBIDDEN_AGENT_ROLE',
+  /** L4c: override requires TTY but stdin/stderr is not a TTY. */
+  E_OVERRIDE_NEEDS_TTY: 'E_OVERRIDE_NEEDS_TTY',
+  /** L4d: session override limit exceeded. */
+  E_OVERRIDE_RATE_LIMIT: 'E_OVERRIDE_RATE_LIMIT',
+} as const;
+
+/** Union of all branch-lock error code strings. */
+export type BranchLockErrorCode =
+  (typeof BRANCH_LOCK_ERROR_CODES)[keyof typeof BRANCH_LOCK_ERROR_CODES];

package/src/index.ts

@@ -144,6 +144,21 @@ export type {
   BrainStreamEvent,
   BrainSubstrate,
 } from './brain-graph.js';
+export type {
+  AgentWorktreeState,
+  BranchLockErrorCode,
+  DeniedGitOp,
+  FsHardenCapabilities,
+  FsHardenState,
+  GitShimEnv,
+  OwnerOverrideAuditRecord,
+  OwnerOverrideConfig,
+  WorktreeCleanupResult,
+  WorktreeCompleteResult,
+  WorktreeSpawnResult,
+} from './branch-lock.js';
+// === Branch-Lock + Owner-Auth Types (T1118) ===
+export { BRANCH_LOCK_ERROR_CODES } from './branch-lock.js';
 export type { AdapterCapabilities } from './capabilities.js';
 // === Code Symbol Types (tree-sitter AST) ===
 export type {
@@ -183,6 +198,7 @@ export type {
   LifecycleEnforcementMode,
   LoggingConfig,
   LogLevel,
+  MemoryBridgeMode,
   OutputConfig,
   OutputFormat,
   ProviderConfig,
@@ -410,7 +426,10 @@ export type {
 } from './nexus-tasks-bridge-ops.js';
 export type {
   CommunityWikiStats,
+  GenerateNexusWikiOptions,
   NexusWikiResult,
+  WikiDbHandle,
+  WikiStateFile,
   WikiSymbolRow,
 } from './nexus-wiki-ops.js';
 // === Operations Types (API wire format, namespaced to avoid collision with domain types) ===

package/src/nexus-wiki-ops.ts

@@ -5,6 +5,7 @@
  * from the nexus code graph.
  *
  * @task T1060
+ * @task T1109
  * @epic T1042
  */
 
@@ -34,6 +35,10 @@ export interface NexusWikiResult {
   communities: CommunityWikiStats[];
   /** Error message if success is false */
   error?: string;
+  /** IDs of communities that were skipped (incremental mode) */
+  skippedCommunities?: string[];
+  /** Whether LOOM LLM narrative was generated */
+  loomEnabled?: boolean;
 }
 
 /**
@@ -51,3 +56,78 @@ export interface WikiSymbolRow {
   /** Number of symbols this symbol calls */
   calleeCount: number;
 }
+
+/**
+ * Subset of SQLite-compatible parameter values accepted by `DatabaseSync.prepare()`.
+ * Mirrors node:sqlite's `SQLInputValue` without importing from node internals.
+ */
+export type WikiSqlParam = null | number | bigint | string | Uint8Array;
+
+/**
+ * Minimal interface for an injectable SQLite database handle.
+ * Used in tests to provide an isolated in-memory or temp-file database
+ * instead of the real nexus.db singleton.
+ *
+ * Matches the subset of `DatabaseSync` (node:sqlite) used by the wiki generator.
+ */
+export interface WikiDbHandle {
+  /**
+   * Prepare a SQL statement and return a statement object with
+   * `all(...params)` and `get(...params)` accessors.
+   * Compatible with both `DatabaseSync.prepare()` and test mocks.
+   */
+  prepare: (sql: string) => {
+    all: (...params: WikiSqlParam[]) => Record<string, WikiSqlParam>[];
+    get: (...params: WikiSqlParam[]) => Record<string, WikiSqlParam> | undefined;
+  };
+}
+
+/**
+ * Options for generating the nexus wiki index.
+ */
+export interface GenerateNexusWikiOptions {
+  /**
+   * Filter generation to a single community ID.
+   * When set, only that community's markdown file is generated.
+   * The overview.md is NOT generated in single-community mode.
+   */
+  communityFilter?: string;
+  /**
+   * Enable incremental mode: use `cleo nexus diff` data to skip
+   * communities whose symbols have not changed since the last wiki run.
+   *
+   * Reads `.cleo/wiki-state.json` for the last-run commit SHA.
+   * On first run (no state file), performs a full generation and writes
+   * the state file.
+   */
+  incremental?: boolean;
+  /**
+   * LOOM provider function for generating narrative module summaries.
+   * Injected by the caller (CLI or test harness). When `null`, scaffold
+   * mode is used (no LLM narrative).
+   *
+   * Signature: `(prompt: string) => Promise<string>`
+   */
+  loomProvider?: ((prompt: string) => Promise<string>) | null;
+  /**
+   * Project root directory (used for resolving `.cleo/wiki-state.json`
+   * and running git operations). Defaults to `process.cwd()`.
+   */
+  projectRoot?: string;
+  /**
+   * Injectable database handle for testing.
+   * When provided, this handle is used instead of the real nexus.db singleton.
+   * Allows unit/integration tests to use isolated in-memory SQLite databases.
+   */
+  _dbForTesting?: WikiDbHandle;
+}
+
+/**
+ * State file persisted to `.cleo/wiki-state.json` for incremental mode.
+ */
+export interface WikiStateFile {
+  /** Git commit SHA of the last full or incremental wiki generation run. */
+  lastRunCommit: string;
+  /** List of community IDs generated in the last run. */
+  generatedCommunities: string[];
+}

package/src/operations/session.ts

@@ -202,6 +202,14 @@ export interface SessionStartParams {
   focus?: string;
   /** Enable full query+mutation audit logging for behavioral grading. */
   grade?: boolean;
+  /**
+   * HMAC-SHA256 owner-auth token for L4a override authentication (T1118).
+   *
+   * Derived from HMAC-SHA256(key=password, data=sessionId) during
+   * `cleo session start --owner-auth`. Stored in sessions.owner_auth_token
+   * and validated on every `CLEO_OWNER_OVERRIDE` call.
+   */
+  ownerAuthToken?: string;
 }
 /** Result of `session.start` — the newly created session. */
 export type SessionStartResult = Session;