@codeledger/cli 0.2.1 → 0.5.1

package/dist/integrations/github-actions.js

@@ -0,0 +1,64 @@
+import { appendFileSync } from 'node:fs';
+/**
+ * Detect if running inside GitHub Actions.
+ */
+export function isGitHubActions() {
+    return process.env['GITHUB_ACTIONS'] === 'true';
+}
+/**
+ * Emit GitHub Actions annotations for violations.
+ *
+ * - DENY_PATH_MATCH → ::error file=<path>,line=1:: (annotates the file)
+ * - All other codes → ::error:: (no file reference, aggregate metric)
+ */
+export function emitAnnotations(report) {
+    for (const v of report.violations) {
+        if (v.code === 'DENY_PATH_MATCH' && v.path) {
+            console.log(`::error file=${v.path},line=1::${v.message}`);
+        }
+        else {
+            console.log(`::error::${v.message}`);
+        }
+    }
+}
+/**
+ * Write a step summary to $GITHUB_STEP_SUMMARY as markdown.
+ */
+export function writeStepSummary(report, _summaryText) {
+    const summaryFile = process.env['GITHUB_STEP_SUMMARY'];
+    if (!summaryFile)
+        return;
+    const status = report.decision.passed ? 'PASS' : 'FAIL';
+    const mode = report.decision.mode;
+    const icon = report.decision.passed ? ':white_check_mark:' : ':x:';
+    const lines = [];
+    lines.push(`## ${icon} CodeLedger Verify — ${status} (${mode} mode)`);
+    lines.push('');
+    lines.push('| Metric | Value | Status |');
+    lines.push('|--------|-------|--------|');
+    const confFail = report.violations.some((v) => v.code === 'LOW_CONFIDENCE');
+    const driftFail = report.violations.some((v) => v.code === 'HIGH_DRIFT');
+    const fileFail = report.violations.some((v) => v.code === 'BUNDLE_TOO_LARGE' && v.dimension === 'file_count');
+    const byteFail = report.violations.some((v) => v.code === 'BUNDLE_TOO_LARGE' && v.dimension === 'byte_size');
+    lines.push(`| Confidence | ${report.metrics.overall_confidence.toFixed(2)} | ${confFail ? ':x:' : ':white_check_mark:'} |`);
+    lines.push(`| Drift | ${report.metrics.drift_score.toFixed(2)} | ${driftFail ? ':x:' : ':white_check_mark:'} |`);
+    lines.push(`| File count | ${report.metrics.bundle_file_count} | ${fileFail ? ':x:' : ':white_check_mark:'} |`);
+    const sizeKb = (report.metrics.bundle_total_bytes / 1024).toFixed(1);
+    lines.push(`| Size | ${sizeKb} KB | ${byteFail ? ':x:' : ':white_check_mark:'} |`);
+    if (report.violations.length > 0) {
+        lines.push('');
+        lines.push(`### Violations (${report.violations.length})`);
+        lines.push('');
+        for (const v of report.violations) {
+            lines.push(`- **${v.code}**: ${v.message}`);
+        }
+    }
+    lines.push('');
+    try {
+        appendFileSync(summaryFile, lines.join('\n') + '\n');
+    }
+    catch {
+        // Silently ignore write errors — may not have permission
+    }
+}
+//# sourceMappingURL=github-actions.js.map

package/dist/integrations/github-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-actions.js","sourceRoot":"","sources":["../../src/integrations/github-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAGzC;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,YAAoB;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC;IAEnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,wBAAwB,MAAM,KAAK,IAAI,QAAQ,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC;IAE7G,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC;IAC5H,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC;IACjH,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,iBAAiB,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC;IAEhH,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,SAAS,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC;IAEnF,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,CAAC;QACH,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC"}

package/dist/manifest/build.d.ts

@@ -0,0 +1,19 @@
+import type { ContextBundle, ContextManifestV1 } from '@codeledger/types';
+export interface BuildManifestOptions {
+    bundle: ContextBundle;
+    repoRoot: string;
+    repoName: string;
+    commitSha: string | null;
+    codeledgerVersion: string;
+    intentNormalized: Record<string, unknown>;
+    intentHash: string;
+    driftScore: number;
+}
+/**
+ * Build a ContextManifestV1 from an existing bundle and repo metadata.
+ *
+ * The output is deterministic: same repo state + same intent = identical
+ * payload under stable serialization. No timestamps or volatile metadata.
+ */
+export declare function buildManifest(opts: BuildManifestOptions): ContextManifestV1;
+//# sourceMappingURL=build.d.ts.map

package/dist/manifest/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/manifest/build.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAElB,MAAM,mBAAmB,CAAC;AAW3B,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CA2E3E"}

package/dist/manifest/build.js

@@ -0,0 +1,82 @@
+import { createHash } from 'node:crypto';
+import { readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { MANIFEST_SCHEMA_VERSION } from './schema.js';
+/**
+ * Compute SHA-256 hex digest of a file's contents.
+ */
+function sha256File(filePath) {
+    const content = readFileSync(filePath);
+    return createHash('sha256').update(content).digest('hex');
+}
+/**
+ * Build a ContextManifestV1 from an existing bundle and repo metadata.
+ *
+ * The output is deterministic: same repo state + same intent = identical
+ * payload under stable serialization. No timestamps or volatile metadata.
+ */
+export function buildManifest(opts) {
+    const { bundle, repoRoot, repoName, commitSha, codeledgerVersion, intentNormalized, intentHash: hash, driftScore, } = opts;
+    // Build per-file entries, sorted by path (lexicographic, Array.sort default)
+    const files = bundle.files
+        .map((f) => {
+        const fullPath = join(repoRoot, f.path);
+        let bytes;
+        let sha256;
+        try {
+            bytes = statSync(fullPath).size;
+            sha256 = sha256File(fullPath);
+        }
+        catch {
+            // File may have been deleted since bundle generation — use content length
+            bytes = Buffer.byteLength(f.content, 'utf-8');
+            sha256 = createHash('sha256').update(f.content, 'utf-8').digest('hex');
+        }
+        return {
+            path: f.path,
+            sha256,
+            bytes,
+            score: f.score,
+        };
+    })
+        .sort((a, b) => a.path.localeCompare(b.path));
+    const totalBytes = files.reduce((sum, f) => sum + f.bytes, 0);
+    // Extract confidence envelope (guaranteed by assessConfidence)
+    const confidence = bundle.confidence;
+    const envelope = confidence?.envelope ?? {
+        structural_coverage: 0,
+        test_presence: 0,
+        churn_recency: 0,
+        keyword_saturation: 0,
+        dependency_depth: 0,
+    };
+    return {
+        schema_version: MANIFEST_SCHEMA_VERSION,
+        codeledger_version: codeledgerVersion,
+        repo: {
+            name: repoName,
+            commit_sha: commitSha,
+        },
+        intent: {
+            normalized: intentNormalized,
+            intent_hash: hash,
+            drift_score: driftScore,
+        },
+        bundle: {
+            file_count: files.length,
+            total_bytes: totalBytes,
+            files,
+        },
+        confidence: {
+            overall: confidence?.score ?? 0,
+            envelope: {
+                structural_coverage: envelope.structural_coverage,
+                test_presence: envelope.test_presence,
+                churn_recency: envelope.churn_recency,
+                keyword_saturation: envelope.keyword_saturation,
+                dependency_depth: envelope.dependency_depth,
+            },
+        },
+    };
+}
+//# sourceMappingURL=build.js.map

package/dist/manifest/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/manifest/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAMjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD;;GAEG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EAAE,IAAI,EAChB,UAAU,GACX,GAAG,IAAI,CAAC;IAET,6EAA6E;IAC7E,MAAM,KAAK,GAAqB,MAAM,CAAC,KAAK;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAa,CAAC;QAClB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;YAChC,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM;YACN,KAAK;YACL,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE9D,+DAA+D;IAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAQ,IAAI;QACvC,mBAAmB,EAAE,CAAC;QACtB,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE,CAAC;QACrB,gBAAgB,EAAE,CAAC;KACpB,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,uBAAuB;QACvC,kBAAkB,EAAE,iBAAiB;QACrC,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,SAAS;SACtB;QACD,MAAM,EAAE;YACN,UAAU,EAAE,gBAAgB;YAC5B,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,UAAU;SACxB;QACD,MAAM,EAAE;YACN,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,WAAW,EAAE,UAAU;YACvB,KAAK;SACN;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC;YAC/B,QAAQ,EAAE;gBACR,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/manifest/schema.d.ts

@@ -0,0 +1,2 @@
+export declare const MANIFEST_SCHEMA_VERSION: "mustang/manifest/v1";
+//# sourceMappingURL=schema.d.ts.map

package/dist/manifest/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/manifest/schema.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,EAAG,qBAA8B,CAAC"}

package/dist/manifest/schema.js

@@ -0,0 +1,2 @@
+export const MANIFEST_SCHEMA_VERSION = 'mustang/manifest/v1';
+//# sourceMappingURL=schema.js.map

package/dist/manifest/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/manifest/schema.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAA8B,CAAC"}

package/dist/manifest/write.d.ts

@@ -0,0 +1,13 @@
+import type { ContextManifestV1 } from '@codeledger/types';
+/**
+ * Serialize a manifest with stable key ordering and write to disk.
+ *
+ * Stable ordering is achieved by constructing the object in explicit key order
+ * (matching the schema definition). Arrays are already sorted in buildManifest().
+ * Output ends with a trailing newline for POSIX compatibility.
+ *
+ * Phase 2 will introduce strict JCS canonicalization; this stable output is
+ * designed to be close to that form already.
+ */
+export declare function writeManifest(manifest: ContextManifestV1, outPath: string): void;
+//# sourceMappingURL=write.d.ts.map

package/dist/manifest/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/manifest/write.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAsChF"}

package/dist/manifest/write.js

@@ -0,0 +1,69 @@
+import { writeFileSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+/**
+ * Serialize a manifest with stable key ordering and write to disk.
+ *
+ * Stable ordering is achieved by constructing the object in explicit key order
+ * (matching the schema definition). Arrays are already sorted in buildManifest().
+ * Output ends with a trailing newline for POSIX compatibility.
+ *
+ * Phase 2 will introduce strict JCS canonicalization; this stable output is
+ * designed to be close to that form already.
+ */
+export function writeManifest(manifest, outPath) {
+    // Construct with explicit key order for deterministic serialization
+    const ordered = {
+        schema_version: manifest.schema_version,
+        codeledger_version: manifest.codeledger_version,
+        repo: {
+            name: manifest.repo.name,
+            commit_sha: manifest.repo.commit_sha,
+        },
+        intent: {
+            normalized: sortObject(manifest.intent.normalized),
+            intent_hash: manifest.intent.intent_hash,
+            drift_score: manifest.intent.drift_score,
+        },
+        bundle: {
+            file_count: manifest.bundle.file_count,
+            total_bytes: manifest.bundle.total_bytes,
+            files: manifest.bundle.files.map((f) => ({
+                path: f.path,
+                sha256: f.sha256,
+                bytes: f.bytes,
+                score: f.score,
+            })),
+        },
+        confidence: {
+            overall: manifest.confidence.overall,
+            envelope: {
+                structural_coverage: manifest.confidence.envelope.structural_coverage,
+                test_presence: manifest.confidence.envelope.test_presence,
+                churn_recency: manifest.confidence.envelope.churn_recency,
+                keyword_saturation: manifest.confidence.envelope.keyword_saturation,
+                dependency_depth: manifest.confidence.envelope.dependency_depth,
+            },
+        },
+    };
+    mkdirSync(dirname(outPath), { recursive: true });
+    writeFileSync(outPath, JSON.stringify(ordered, null, 2) + '\n');
+}
+/**
+ * Recursively sort object keys for deterministic output.
+ * Arrays preserve order; nested objects get sorted keys.
+ */
+function sortObject(obj) {
+    if (obj === null || obj === undefined)
+        return obj;
+    if (Array.isArray(obj))
+        return obj.map(sortObject);
+    if (typeof obj === 'object') {
+        const sorted = {};
+        for (const key of Object.keys(obj).sort()) {
+            sorted[key] = sortObject(obj[key]);
+        }
+        return sorted;
+    }
+    return obj;
+}
+//# sourceMappingURL=write.js.map

package/dist/manifest/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/manifest/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,QAA2B,EAAE,OAAe;IACxE,oEAAoE;IACpE,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YACxB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;SACrC;QACD,MAAM,EAAE;YACN,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAClD,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;YACxC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;SACzC;QACD,MAAM,EAAE;YACN,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;YACtC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;YACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,CAAC,CAAC,KAAK;aACf,CAAC,CAAC;SACJ;QACD,UAAU,EAAE;YACV,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO;YACpC,QAAQ,EAAE;gBACR,mBAAmB,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,mBAAmB;gBACrE,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa;gBACzD,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa;gBACzD,kBAAkB,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,kBAAkB;gBACnE,gBAAgB,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB;aAChE;SACF;KACF,CAAC;IAEF,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAE,GAA+B,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/policy/load.d.ts

@@ -0,0 +1,21 @@
+import type { MustangPolicyV1 } from '@codeledger/types';
+/**
+ * Load and parse a policy JSON file. Returns the parsed object.
+ * Throws with a descriptive error if the file is malformed.
+ * Returns null if the file does not exist.
+ */
+export declare function loadPolicyFile(filePath: string): Partial<MustangPolicyV1> | null;
+/**
+ * Load the org default policy file from a policy root directory.
+ * Returns null if org/default.json does not exist.
+ * Throws on malformed JSON (fatal error per spec).
+ */
+export declare function loadOrgDefault(policyRoot: string): Partial<MustangPolicyV1> | null;
+/**
+ * Load a repo-specific policy override from the policy root directory.
+ * Matches case-insensitively against repos/<name>.json filenames.
+ * Returns null if no matching file exists.
+ * Throws on malformed JSON (fatal error per spec).
+ */
+export declare function loadRepoOverride(policyRoot: string, repoName: string): Partial<MustangPolicyV1> | null;
+//# sourceMappingURL=load.d.ts.map

package/dist/policy/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/policy/load.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAuBhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAetG"}

package/dist/policy/load.js

@@ -0,0 +1,63 @@
+import { readFileSync, existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { validatePolicy } from './schema.js';
+/**
+ * Load and parse a policy JSON file. Returns the parsed object.
+ * Throws with a descriptive error if the file is malformed.
+ * Returns null if the file does not exist.
+ */
+export function loadPolicyFile(filePath) {
+    if (!existsSync(filePath))
+        return null;
+    let raw;
+    try {
+        raw = readFileSync(filePath, 'utf-8');
+    }
+    catch (err) {
+        throw new Error(`Cannot read policy file: ${filePath} (${err.message})`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`Malformed JSON in policy file: ${filePath}`);
+    }
+    const validationError = validatePolicy(parsed);
+    if (validationError) {
+        throw new Error(`Invalid policy in ${filePath}: ${validationError}`);
+    }
+    return parsed;
+}
+/**
+ * Load the org default policy file from a policy root directory.
+ * Returns null if org/default.json does not exist.
+ * Throws on malformed JSON (fatal error per spec).
+ */
+export function loadOrgDefault(policyRoot) {
+    return loadPolicyFile(join(policyRoot, 'org', 'default.json'));
+}
+/**
+ * Load a repo-specific policy override from the policy root directory.
+ * Matches case-insensitively against repos/<name>.json filenames.
+ * Returns null if no matching file exists.
+ * Throws on malformed JSON (fatal error per spec).
+ */
+export function loadRepoOverride(policyRoot, repoName) {
+    const reposDir = join(policyRoot, 'repos');
+    if (!existsSync(reposDir))
+        return null;
+    // Case-insensitive match against filenames
+    const lowerName = repoName.toLowerCase();
+    const entries = readdirSync(reposDir);
+    const match = entries.find((f) => {
+        if (!f.endsWith('.json'))
+            return false;
+        const baseName = f.slice(0, -5); // strip .json
+        return baseName.toLowerCase() === lowerName;
+    });
+    if (!match)
+        return null;
+    return loadPolicyFile(join(reposDir, match));
+}
+//# sourceMappingURL=load.js.map

package/dist/policy/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/policy/load.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,KAAM,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,KAAK,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,MAAkC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,2CAA2C;IAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QAC/C,OAAO,QAAQ,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/policy/resolve.d.ts

@@ -0,0 +1,18 @@
+import type { ResolvedPolicyV1 } from '@codeledger/types';
+export interface ResolvePolicyOptions {
+    /** Explicit policy root from --policy-root flag (highest precedence). */
+    policyRoot?: string;
+    /** Working directory for git detection and default path. */
+    cwd: string;
+}
+/**
+ * Resolve the effective policy through the cascade:
+ *   1. Hard-coded safe defaults
+ *   2. Org default (org/default.json) — deep merge
+ *   3. Repo override (repos/<name>.json) — deep merge
+ *
+ * Policy root resolution order:
+ *   --policy-root flag > CODELEDGER_POLICY_PATH env > .codeledger/policy/ > safe defaults
+ */
+export declare function resolvePolicy(opts: ResolvePolicyOptions): ResolvedPolicyV1;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/policy/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/policy/resolve.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAI1D,MAAM,WAAW,oBAAoB;IACnC,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,gBAAgB,CA+B1E"}

package/dist/policy/resolve.js

@@ -0,0 +1,86 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { execSync } from 'node:child_process';
+import { SAFE_DEFAULTS, mergePolicy, toResolved } from './schema.js';
+import { loadOrgDefault, loadRepoOverride } from './load.js';
+/**
+ * Resolve the effective policy through the cascade:
+ *   1. Hard-coded safe defaults
+ *   2. Org default (org/default.json) — deep merge
+ *   3. Repo override (repos/<name>.json) — deep merge
+ *
+ * Policy root resolution order:
+ *   --policy-root flag > CODELEDGER_POLICY_PATH env > .codeledger/policy/ > safe defaults
+ */
+export function resolvePolicy(opts) {
+    const { cwd } = opts;
+    // Determine policy root directory
+    const policyRoot = determinePolicyRoot(opts);
+    // If no policy root found, return safe defaults
+    if (!policyRoot) {
+        return toResolved(SAFE_DEFAULTS, 'hardcoded-defaults');
+    }
+    // Layer 1: start from safe defaults
+    let policy = { ...SAFE_DEFAULTS };
+    let source = 'hardcoded-defaults';
+    // Layer 2: org default
+    const orgDefault = loadOrgDefault(policyRoot);
+    if (orgDefault) {
+        policy = mergePolicy(policy, orgDefault);
+        source = 'org-default';
+    }
+    // Layer 3: repo override
+    const repoName = getRepoName(cwd);
+    const repoOverride = loadRepoOverride(policyRoot, repoName);
+    if (repoOverride) {
+        policy = mergePolicy(policy, repoOverride);
+        source = 'repo-override';
+    }
+    return toResolved(policy, source);
+}
+/**
+ * Determine the policy root directory from the cascade:
+ *   --policy-root > CODELEDGER_POLICY_PATH env > .codeledger/policy/
+ */
+function determinePolicyRoot(opts) {
+    // Highest precedence: explicit flag
+    if (opts.policyRoot) {
+        if (!existsSync(opts.policyRoot))
+            return null;
+        return opts.policyRoot;
+    }
+    // Second: env var
+    const envPath = process.env['CODELEDGER_POLICY_PATH'];
+    if (envPath) {
+        if (!existsSync(envPath))
+            return null;
+        return envPath;
+    }
+    // Third: default location
+    const defaultPath = join(opts.cwd, '.codeledger', 'policy');
+    if (existsSync(defaultPath))
+        return defaultPath;
+    return null;
+}
+/**
+ * Get the repo name from git origin remote URL.
+ * Falls back to working directory name if no origin remote.
+ */
+function getRepoName(cwd) {
+    try {
+        const url = execSync('git remote get-url origin', {
+            cwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        // Extract last path component, strip .git suffix
+        const parts = url.replace(/\.git$/, '').split('/');
+        return parts[parts.length - 1] ?? 'unknown';
+    }
+    catch {
+        // No origin remote — use directory name
+        const parts = cwd.replace(/\/$/, '').split('/');
+        return parts[parts.length - 1] ?? 'unknown';
+    }
+}
+//# sourceMappingURL=resolve.js.map

package/dist/policy/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/policy/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAS7D;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAErB,kCAAkC;IAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE7C,gDAAgD;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,oCAAoC;IACpC,IAAI,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IAClC,IAAI,MAAM,GAAsC,oBAAoB,CAAC;IAErE,uBAAuB;IACvB,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,GAAG,aAAa,CAAC;IACzB,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3C,MAAM,GAAG,eAAe,CAAC;IAC3B,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAA0B;IACrD,oCAAoC;IACpC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0BAA0B;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAEhD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,2BAA2B,EAAE;YAChD,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,iDAAiD;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/policy/schema.d.ts

@@ -0,0 +1,22 @@
+import type { MustangPolicyV1, ResolvedPolicyV1 } from '@codeledger/types';
+export declare const POLICY_SCHEMA_VERSION: "mustang/policy/v1";
+/**
+ * Hard-coded safe defaults. When no policy files exist, this is the effective
+ * policy. Observe mode, no enforcement, maximally permissive thresholds.
+ */
+export declare const SAFE_DEFAULTS: MustangPolicyV1;
+/**
+ * Validate a parsed policy object. Returns an error message string if invalid,
+ * or null if valid.
+ */
+export declare function validatePolicy(obj: unknown): string | null;
+/**
+ * Deep-merge a partial policy onto a base policy. Override wins for set fields.
+ * Arrays replace (not concatenate) — deny_paths in override replaces base.
+ */
+export declare function mergePolicy(base: MustangPolicyV1, override: Partial<MustangPolicyV1>): MustangPolicyV1;
+/**
+ * Convert a MustangPolicyV1 to a ResolvedPolicyV1 with provenance.
+ */
+export declare function toResolved(policy: MustangPolicyV1, resolvedFrom: ResolvedPolicyV1['resolved_from']): ResolvedPolicyV1;
+//# sourceMappingURL=schema.d.ts.map

package/dist/policy/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/policy/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAc,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEvF,eAAO,MAAM,qBAAqB,EAAG,mBAA4B,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,eAW3B,CAAC;AAKF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAqC1D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAetG;AAED;;GAEG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,gBAAgB,CAAC,eAAe,CAAC,GAC9C,gBAAgB,CAElB"}

package/dist/policy/schema.js

@@ -0,0 +1,82 @@
+export const POLICY_SCHEMA_VERSION = 'mustang/policy/v1';
+/**
+ * Hard-coded safe defaults. When no policy files exist, this is the effective
+ * policy. Observe mode, no enforcement, maximally permissive thresholds.
+ */
+export const SAFE_DEFAULTS = {
+    schema_version: POLICY_SCHEMA_VERSION,
+    mode: 'observe',
+    min_confidence: 0.0,
+    max_drift: 1.0,
+    require_tests: false,
+    deny_paths: [],
+    bundle_max_files: 500,
+    bundle_max_bytes: 5_000_000,
+    redact_actor_identity: true,
+    store_file_paths: true,
+};
+/** All valid policy modes. */
+const VALID_MODES = new Set(['observe', 'warn', 'block']);
+/**
+ * Validate a parsed policy object. Returns an error message string if invalid,
+ * or null if valid.
+ */
+export function validatePolicy(obj) {
+    if (typeof obj !== 'object' || obj === null || Array.isArray(obj)) {
+        return 'Policy must be a JSON object';
+    }
+    const policy = obj;
+    if (policy['mode'] !== undefined) {
+        if (typeof policy['mode'] !== 'string' || !VALID_MODES.has(policy['mode'])) {
+            return `Invalid policy mode: "${policy['mode']}". Must be one of: observe, warn, block`;
+        }
+    }
+    if (policy['min_confidence'] !== undefined) {
+        if (typeof policy['min_confidence'] !== 'number' || policy['min_confidence'] < 0 || policy['min_confidence'] > 1) {
+            return 'min_confidence must be a number between 0 and 1';
+        }
+    }
+    if (policy['max_drift'] !== undefined) {
+        if (typeof policy['max_drift'] !== 'number' || policy['max_drift'] < 0 || policy['max_drift'] > 1) {
+            return 'max_drift must be a number between 0 and 1';
+        }
+    }
+    if (policy['deny_paths'] !== undefined) {
+        if (!Array.isArray(policy['deny_paths'])) {
+            return 'deny_paths must be an array of strings';
+        }
+        for (const p of policy['deny_paths']) {
+            if (typeof p !== 'string') {
+                return 'deny_paths entries must be strings';
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Deep-merge a partial policy onto a base policy. Override wins for set fields.
+ * Arrays replace (not concatenate) — deny_paths in override replaces base.
+ */
+export function mergePolicy(base, override) {
+    return {
+        schema_version: POLICY_SCHEMA_VERSION,
+        mode: (override.mode ?? base.mode),
+        min_confidence: override.min_confidence ?? base.min_confidence,
+        max_drift: override.max_drift ?? base.max_drift,
+        require_tests: override.require_tests ?? base.require_tests,
+        deny_paths: override.deny_paths ?? base.deny_paths,
+        bundle_max_files: override.bundle_max_files ?? base.bundle_max_files,
+        bundle_max_bytes: override.bundle_max_bytes ?? base.bundle_max_bytes,
+        redact_actor_identity: override.redact_actor_identity ?? base.redact_actor_identity,
+        store_file_paths: override.store_file_paths ?? base.store_file_paths,
+        min_review_coverage: override.min_review_coverage ?? base.min_review_coverage,
+        block_post_hoc_reads: override.block_post_hoc_reads ?? base.block_post_hoc_reads,
+    };
+}
+/**
+ * Convert a MustangPolicyV1 to a ResolvedPolicyV1 with provenance.
+ */
+export function toResolved(policy, resolvedFrom) {
+    return { ...policy, resolved_from: resolvedFrom };
+}
+//# sourceMappingURL=schema.js.map

package/dist/policy/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/policy/schema.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAA4B,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,cAAc,EAAE,qBAAqB;IACrC,IAAI,EAAE,SAAS;IACf,cAAc,EAAE,GAAG;IACnB,SAAS,EAAE,GAAG;IACd,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,EAAE;IACd,gBAAgB,EAAE,GAAG;IACrB,gBAAgB,EAAE,SAAS;IAC3B,qBAAqB,EAAE,IAAI;IAC3B,gBAAgB,EAAE,IAAI;CACvB,CAAC;AAEF,8BAA8B;AAC9B,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAE9C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAW,CAAC,EAAE,CAAC;YACrF,OAAO,yBAAyB,MAAM,CAAC,MAAM,CAAC,yCAAyC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACjH,OAAO,iDAAiD,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAClG,OAAO,4CAA4C,CAAC;QACtD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,wCAAwC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,oCAAoC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAqB,EAAE,QAAkC;IACnF,OAAO;QACL,cAAc,EAAE,qBAAqB;QACrC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAe;QAChD,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;QAC9D,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;QAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa;QAC3D,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;QAClD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;QACpE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;QACpE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,IAAI,IAAI,CAAC,qBAAqB;QACnF,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;QACpE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,mBAAmB;QAC7E,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC,oBAAoB;KACjF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,MAAuB,EACvB,YAA+C;IAE/C,OAAO,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC"}

package/dist/session-paths.d.ts

@@ -14,10 +14,18 @@ export declare function sessionStartRef(cwd: string, sessionId: SessionId | null
 export declare function sessionProgressPath(cwd: string, sessionId: SessionId | null): string;
 /** Path to the hook-reminded marker. */
 export declare function sessionHookRemindedPath(cwd: string, sessionId: SessionId | null): string;
+/** Path to the per-task activation history (JSONL, one record per activate call). */
+export declare function sessionTaskHistoryPath(cwd: string, sessionId: SessionId | null): string;
 /** Legacy fallback bundle path (always .codeledger/active-bundle.md). */
 export declare function legacyBundlePath(cwd: string): string;
 /** Sessions root directory. */
 export declare function sessionsRootDir(cwd: string): string;
 /** Registry file path. */
 export declare function registryPath(cwd: string): string;
+/** Path to the read log (JSONL, one record per file read). */
+export declare function sessionReadLogPath(cwd: string, sessionId: SessionId | null): string;
+/** Path to the review config (written when --mode review is used). */
+export declare function sessionReviewConfigPath(cwd: string, sessionId: SessionId | null): string;
+/** Path to the coverage report checkpoint (written by gatekeeper). */
+export declare function sessionCoverageReportPath(cwd: string, sessionId: SessionId | null): string;
 //# sourceMappingURL=session-paths.d.ts.map