@deftai/directive-core 0.103.0 → 0.105.0

package/dist/vbrief-validate/plan-hooks.js

@@ -3,6 +3,7 @@ import { validateCoverageDebt } from "../policy/coverage-debt.js";
 import { validateHostHooks } from "../policy/host-hooks.js";
 import { validateHostSlashCommands } from "../policy/host-slash-commands.js";
 import { readPlanPolicy } from "../policy/plan-extensions.js";
+import { parseProjectInvariants } from "../policy/project-invariants.js";
 import { validateRuntimeAuthority } from "../policy/runtime-authority.js";
 import { validateStalenessTickler } from "../policy/staleness-tickler.js";
 import { validateOpenClawProductCommands } from "../slash/openclaw-deposit.js";
@@ -93,6 +94,61 @@ export function validateSessionRitualStalenessHoursOnPlan(plan, filepath) {
     }
     return out;
 }
+function validateForgeOutageRetryMinutes(value) {
+    if (value === null || value === undefined) {
+        return [];
+    }
+    if (typeof value !== "number" || !Number.isInteger(value)) {
+        const repr = typeof value === "string"
+            ? pyStrRepr(value)
+            : typeof value === "boolean"
+                ? value
+                    ? "True"
+                    : "False"
+                : String(value);
+        return [
+            "plan.policy.forgeOutageRetryMinutes must be an integer; got " +
+                `${pythonTypeName(value)} (${repr})`,
+        ];
+    }
+    if (value < 5) {
+        return [`plan.policy.forgeOutageRetryMinutes must be >= 5; got ${value}`];
+    }
+    return [];
+}
+/** vbrief_validate hook for ``projectInvariants`` (#3425). */
+export function validateProjectInvariantsOnPlan(plan, filepath) {
+    if (typeof plan !== "object" || plan === null || Array.isArray(plan)) {
+        return [];
+    }
+    const policy = readPlanPolicy(plan);
+    if (typeof policy !== "object" || policy === null || Array.isArray(policy)) {
+        return [];
+    }
+    if (!("projectInvariants" in policy)) {
+        return [];
+    }
+    const { errors } = parseProjectInvariants(policy.projectInvariants);
+    return errors.map((err) => `${filepath}: ${err} (#3425)`);
+}
+/** vbrief_validate hook for ``forgeOutageRetryMinutes`` (#3422). */
+export function validateForgeOutageRetryMinutesOnPlan(plan, filepath) {
+    if (typeof plan !== "object" || plan === null || Array.isArray(plan)) {
+        return [];
+    }
+    const policy = readPlanPolicy(plan);
+    if (typeof policy !== "object" || policy === null || Array.isArray(policy)) {
+        return [];
+    }
+    if (!("forgeOutageRetryMinutes" in policy)) {
+        return [];
+    }
+    const out = [];
+    for (const err of validateForgeOutageRetryMinutes(policy.forgeOutageRetryMinutes)) {
+        out.push(`${filepath}: ${err} (#3422)`);
+    }
+    return out;
+}
 /** vbrief_validate hook: validate ``plan.policy.triageRankingLabels`` (#1128). */
 export function validateTriageRankingLabelsOnPlan(plan, filepath) {
     if (typeof plan !== "object" || plan === null || Array.isArray(plan)) {
@@ -283,6 +339,18 @@ export function runProjectDefinitionHooks(plan, filepath) {
     catch {
         /* hook must not break validation */
     }
+    try {
+        errors.push(...validateForgeOutageRetryMinutesOnPlan(plan, filepath));
+    }
+    catch {
+        /* hook must not break validation */
+    }
+    try {
+        errors.push(...validateProjectInvariantsOnPlan(plan, filepath));
+    }
+    catch {
+        /* hook must not break validation */
+    }
     try {
         errors.push(...validateStalenessTicklerOnPlan(plan, filepath));
     }

package/dist/verify-ac/evaluate.d.ts

@@ -27,6 +27,11 @@ export interface OracleIntegrityResultFields {
     readonly code: number;
     readonly message: string;
 }
+/**
+ * Walk-level method fingerprint: command list + cwd hash (#3397 / #3322).
+ * Same shape for fail and pass so an honest product fix does not flag.
+ */
+export declare function methodFingerprintForWalk(commands: readonly string[], cwd: string): string;
 /** Stable prefix for product-oracle check ids emitted by verify:ac (#3322 / #3337). */
 export declare const VERIFY_AC_CHECK_ID_PREFIX = "verify:ac";
 /**
@@ -40,7 +45,8 @@ export declare function verifyAcCheckId(scopeKey?: string | null): string;
 /** Test seam: isolate stdout-dest buffer across cases. */
 export declare function resetInProcessVerificationBuffer(): void;
 /**
- * Record each executed acceptance command as a verification event (#3322).
+ * Record one walk-level verification event for the executed command set (#3322 / #3397).
+ * Fail and pass use the same method_fingerprint shape (command list + cwd hash).
  * Fail-open: missing dest / write errors never change the AC result.
  * Stdout dest also appends to the same-process buffer so evaluate can
  * inspect this invocation without re-reading a file.

package/dist/verify-ac/evaluate.js

@@ -7,14 +7,25 @@
  * attempts just emitted by this verify:ac — it does not treat non-file
  * dest as no evidence.
  */
-import { randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { parseRunSummaryJsonl, RunSummaryEmitter, resolveRunSummaryDestination, } from "../run-summary/index.js";
 import { flagPassAfterFailWithMethodChange, readVerificationAttempts, unresolvedMethodChangePasses, } from "./flag.js";
 function formatUnresolved(flag) {
+    const delta = typeof flag.resolved_command_count_delta === "number"
+        ? ` command_count_delta=${flag.resolved_command_count_delta}`
+        : "";
     return (`check_id=${flag.check_id} fail method=${flag.failed_method} ` +
-        `then pass method=${flag.passed_method} without independent re-derivation`);
+        `then pass method=${flag.passed_method} without independent re-derivation${delta}`);
+}
+/**
+ * Walk-level method fingerprint: command list + cwd hash (#3397 / #3322).
+ * Same shape for fail and pass so an honest product fix does not flag.
+ */
+export function methodFingerprintForWalk(commands, cwd) {
+    const cwdHash = createHash("sha256").update(cwd, "utf8").digest("hex");
+    return `${commands.join("\0")}\0${cwdHash}`;
 }
 /** Stable prefix for product-oracle check ids emitted by verify:ac (#3322 / #3337). */
 export const VERIFY_AC_CHECK_ID_PREFIX = "verify:ac";
@@ -36,11 +47,9 @@ export function verifyAcCheckId(scopeKey) {
 }
 /** Same-process verification JSONL when dest is stdout (`-`). */
 const inProcessVerificationLines = [];
-let inProcessStdoutSessionId;
 /** Test seam: isolate stdout-dest buffer across cases. */
 export function resetInProcessVerificationBuffer() {
     inProcessVerificationLines.length = 0;
-    inProcessStdoutSessionId = undefined;
 }
 function inProcessVerificationText() {
     if (inProcessVerificationLines.length === 0) {
@@ -49,7 +58,8 @@ function inProcessVerificationText() {
     return inProcessVerificationLines.join("\n");
 }
 /**
- * Record each executed acceptance command as a verification event (#3322).
+ * Record one walk-level verification event for the executed command set (#3322 / #3397).
+ * Fail and pass use the same method_fingerprint shape (command list + cwd hash).
  * Fail-open: missing dest / write errors never change the AC result.
  * Stdout dest also appends to the same-process buffer so evaluate can
  * inspect this invocation without re-reading a file.
@@ -63,18 +73,7 @@ export function emitVerifyAcAttempts(options) {
         const env = options.env ?? process.env;
         const projectRoot = resolve(options.projectRoot);
         const dest = resolveRunSummaryDestination(projectRoot, { env });
-        const explicitSession = options.sessionId?.trim() ||
-            (typeof env.DEFT_SESSION_ID === "string" ? env.DEFT_SESSION_ID.trim() : "");
-        let sessionId = explicitSession;
-        if (!sessionId) {
-            if (dest.kind === "stdout") {
-                inProcessStdoutSessionId ??= randomUUID();
-                sessionId = inProcessStdoutSessionId;
-            }
-            else {
-                sessionId = randomUUID();
-            }
-        }
+        const sessionId = options.sessionId;
         const explicitCheck = typeof options.checkId === "string" && options.checkId.trim().length > 0
             ? options.checkId.trim()
             : null;
@@ -83,17 +82,26 @@ export function emitVerifyAcAttempts(options) {
             projectRoot,
             sessionId,
             env,
+            component: "verify-ac",
             writeStdout: options.writeStdout,
         });
-        for (const run of options.runs) {
-            const emitted = emitter.emitVerification({
-                check_id: checkId,
-                method_fingerprint: `${run.command}\0${run.cwd}`,
-                outcome: run.ok ? "pass" : "fail",
-            });
-            if (dest.kind === "stdout" && emitted.line !== null) {
-                inProcessVerificationLines.push(JSON.stringify(emitted.line));
-            }
+        // One walk-level event: the method is the command set, not each command.
+        // Per-command emit was blind to a shrinking list that kept the first command (#3397).
+        const commands = options.runs.map((run) => run.command);
+        const firstCwd = options.runs[0]?.cwd ?? "";
+        // Hash the cwd key (joined only when cwds differ) so cwd paths never enter
+        // the fingerprint; commandCountFromFingerprint can still count commands.
+        const cwdKey = options.runs.every((run) => run.cwd === firstCwd)
+            ? firstCwd
+            : options.runs.map((run) => run.cwd).join("\0");
+        const outcome = options.runs.every((run) => run.ok) ? "pass" : "fail";
+        const emitted = emitter.emitVerification({
+            check_id: checkId,
+            method_fingerprint: methodFingerprintForWalk(commands, cwdKey),
+            outcome,
+        });
+        if (dest.kind === "stdout" && emitted.line !== null) {
+            inProcessVerificationLines.push(JSON.stringify(emitted.line));
         }
     }
     catch {

package/dist/verify-ac/flag.d.ts

@@ -20,7 +20,11 @@ export interface FlaggedMethodChangePass {
     readonly failed_method: string;
     readonly passed_method: string;
     readonly independent_rederivation: boolean;
+    /** Pass count minus fail count when both fingerprints carry a command list (#3397). */
+    readonly resolved_command_count_delta?: number;
 }
+/** Command count encoded in a walk fingerprint (`cmd\0cmd\0cwd-or-hash`). */
+export declare function commandCountFromFingerprint(fingerprint: string): number;
 /** Extract well-formed verification attempts in stream order. */
 export declare function readVerificationAttempts(lines: readonly RunSummaryLine[]): VerificationAttempt[];
 /**

package/dist/verify-ac/flag.js

@@ -6,6 +6,19 @@
  * In-place comparison repair then pass is unresolved.
  */
 import { parseRunSummaryJsonl } from "../run-summary/index.js";
+/** Command count encoded in a walk fingerprint (`cmd\0cmd\0cwd-or-hash`). */
+export function commandCountFromFingerprint(fingerprint) {
+    const parts = fingerprint.split("\0");
+    if (parts.length <= 1) {
+        return 1;
+    }
+    const last = parts[parts.length - 1] ?? "";
+    const lastIsCwdOrHash = /^[0-9a-f]{8,64}$/i.test(last) ||
+        last.includes("/") ||
+        last.includes("\\") ||
+        last.includes(":");
+    return lastIsCwdOrHash ? Math.max(1, parts.length - 1) : parts.length;
+}
 function asRecord(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
         return null;
@@ -74,11 +87,14 @@ export function flagPassAfterFailWithMethodChange(attempts) {
         }
         const other = [...prior].find((method) => method !== attempt.method_fingerprint);
         if (other !== undefined) {
+            const delta = commandCountFromFingerprint(attempt.method_fingerprint) -
+                commandCountFromFingerprint(other);
             flagged.push({
                 check_id: attempt.check_id,
                 failed_method: other,
                 passed_method: attempt.method_fingerprint,
                 independent_rederivation: attempt.independent_rederivation,
+                ...(delta !== 0 ? { resolved_command_count_delta: delta } : {}),
             });
         }
         if (attempt.independent_rederivation || other === undefined) {

package/dist/verify-ac/index.d.ts

@@ -5,6 +5,6 @@
  * by editing the comparison. Deterministic surface is the flagged event.
  */
 export { type AcceptanceClause, type AcceptanceClauseReading, type ClauseOutcome, type ClauseWalkReport, type ClauseWalkResult, deriveAcceptanceClauses, formatClauseWalkMessage, isScratchArtifactPath, readAcceptanceClauses, serializeAcceptanceClauses, stampDerivedClausesOnAcceptance, walkAcceptanceClauses, } from "./clauses.js";
-export { type EvaluateProductOracleIntegrityOptions, emitVerifyAcAttempts, evaluateProductOracleIntegrity, mergeOracleVerdict, type OracleIntegrityResultFields, type ProductOracleIntegrityVerdict, VERIFY_AC_CHECK_ID_PREFIX, verifyAcCheckId, } from "./evaluate.js";
-export { type FlaggedMethodChangePass, flagPassAfterFailFromJsonl, flagPassAfterFailWithMethodChange, readVerificationAttempts, unresolvedMethodChangePasses, type VerificationAttempt, } from "./flag.js";
+export { type EvaluateProductOracleIntegrityOptions, emitVerifyAcAttempts, evaluateProductOracleIntegrity, mergeOracleVerdict, methodFingerprintForWalk, type OracleIntegrityResultFields, type ProductOracleIntegrityVerdict, VERIFY_AC_CHECK_ID_PREFIX, verifyAcCheckId, } from "./evaluate.js";
+export { commandCountFromFingerprint, type FlaggedMethodChangePass, flagPassAfterFailFromJsonl, flagPassAfterFailWithMethodChange, readVerificationAttempts, unresolvedMethodChangePasses, type VerificationAttempt, } from "./flag.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/verify-ac/index.js

@@ -5,6 +5,6 @@
  * by editing the comparison. Deterministic surface is the flagged event.
  */
 export { deriveAcceptanceClauses, formatClauseWalkMessage, isScratchArtifactPath, readAcceptanceClauses, serializeAcceptanceClauses, stampDerivedClausesOnAcceptance, walkAcceptanceClauses, } from "./clauses.js";
-export { emitVerifyAcAttempts, evaluateProductOracleIntegrity, mergeOracleVerdict, VERIFY_AC_CHECK_ID_PREFIX, verifyAcCheckId, } from "./evaluate.js";
-export { flagPassAfterFailFromJsonl, flagPassAfterFailWithMethodChange, readVerificationAttempts, unresolvedMethodChangePasses, } from "./flag.js";
+export { emitVerifyAcAttempts, evaluateProductOracleIntegrity, mergeOracleVerdict, methodFingerprintForWalk, VERIFY_AC_CHECK_ID_PREFIX, verifyAcCheckId, } from "./evaluate.js";
+export { commandCountFromFingerprint, flagPassAfterFailFromJsonl, flagPassAfterFailWithMethodChange, readVerificationAttempts, unresolvedMethodChangePasses, } from "./flag.js";
 //# sourceMappingURL=index.js.map

package/dist/verify-source/contained-writes.js

@@ -46,6 +46,8 @@ export const CONTAINED_WRITES_ALLOWLIST = [
     // Implementation modules for containment + contained write.
     "packages/core/src/fs/contained-write.ts",
     "packages/core/src/fs/projection-containment.ts",
+    // #3424: read-only O_NOFOLLOW fd pin in intended-placement inspect (not a write sink).
+    "packages/core/src/preflight/intended-placement.ts",
     // Deposit tree copy / contain primitives (low-level install sinks).
     "packages/core/src/deposit/copy-tree.ts",
     "packages/core/src/deposit/contain.ts",

package/dist/verify-source/index.d.ts

@@ -1,3 +1,4 @@
+export * from "../telemetry-coverage/index.js";
 export * from "./biome-config.js";
 export * from "./code-structure-validate.js";
 export * from "./contained-writes.js";

package/dist/verify-source/index.js

@@ -1,3 +1,4 @@
+export * from "../telemetry-coverage/index.js";
 export * from "./biome-config.js";
 export * from "./code-structure-validate.js";
 export * from "./contained-writes.js";

package/dist/verify-source/verify-stubs.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Shared "not product source" core (#3487) plus the directories only the stub
+ * scan treats as non-product: fixtures/tests, vendored trees, the history
+ * archive, and operator scripts.
+ */
 export declare const EXCLUDE_DIRS: Set<string>;
 export declare const EXTENSIONS: Set<string>;
 export interface StubFinding {
@@ -6,7 +11,16 @@ export interface StubFinding {
     readonly label: string;
     readonly text: string;
 }
-/** Recursive sorted rglob mirroring `sorted(Path(".").rglob("*"))`. */
+/**
+ * Recursive sorted rglob mirroring `sorted(Path(".").rglob("*"))`, pruning
+ * `EXCLUDE_DIRS` before recursing.
+ *
+ * Pruning is load-bearing, not an optimisation of a filter applied later: on a
+ * host with a populated `.deft-scratch/` the unpruned walk enumerates every
+ * swarm worktree (millions of entries) only to discard them per-file. #2953
+ * added `.deft-scratch` / `swarm-worktrees` to `EXCLUDE_DIRS` for exactly this
+ * reason but left the walk descending into them (#3481).
+ */
 export declare function sortedRglob(root: string): string[];
 export declare function scanFileForStubs(relPath: string, fullPath: string): StubFinding[];
 export interface VerifyStubsResult {

package/dist/verify-source/verify-stubs.js

@@ -1,20 +1,12 @@
 import { readdirSync, readFileSync, statSync } from "node:fs";
 import { join, resolve } from "node:path";
-export const EXCLUDE_DIRS = new Set([
-    "tests",
-    "vendor",
-    ".git",
-    "backup",
-    "history",
-    "node_modules",
-    ".venv",
-    "__pycache__",
-    "dist",
-    "scripts",
-    // Swarm / agent worktrees are not product source (#2953, #1656).
-    ".deft-scratch",
-    "swarm-worktrees",
-]);
+import { NON_PRODUCT_DIRS } from "../fs/non-product-dirs.js";
+/**
+ * Shared "not product source" core (#3487) plus the directories only the stub
+ * scan treats as non-product: fixtures/tests, vendored trees, the history
+ * archive, and operator scripts.
+ */
+export const EXCLUDE_DIRS = new Set([...NON_PRODUCT_DIRS, "tests", "vendor", "history", "scripts"]);
 export const EXTENSIONS = new Set([".py", ".go", ".sh"]);
 function isWordChar(ch) {
     if (ch.length === 0) {
@@ -73,7 +65,16 @@ function hasReturnNull(text) {
     }
     return false;
 }
-/** Recursive sorted rglob mirroring `sorted(Path(".").rglob("*"))`. */
+/**
+ * Recursive sorted rglob mirroring `sorted(Path(".").rglob("*"))`, pruning
+ * `EXCLUDE_DIRS` before recursing.
+ *
+ * Pruning is load-bearing, not an optimisation of a filter applied later: on a
+ * host with a populated `.deft-scratch/` the unpruned walk enumerates every
+ * swarm worktree (millions of entries) only to discard them per-file. #2953
+ * added `.deft-scratch` / `swarm-worktrees` to `EXCLUDE_DIRS` for exactly this
+ * reason but left the walk descending into them (#3481).
+ */
 export function sortedRglob(root) {
     const out = [];
     function walk(dir, relPrefix) {
@@ -95,6 +96,9 @@ export function sortedRglob(root) {
                 continue;
             }
             if (st.isDirectory()) {
+                if (EXCLUDE_DIRS.has(name)) {
+                    continue;
+                }
                 walk(full, rel);
             }
             else {

package/dist/vitest-runner/win32-coverage-tmp-setup.d.ts

@@ -3,18 +3,17 @@ export declare const COVERAGE_TMP_CHUNK_RE: RegExp;
 export declare function isCoverageTmpChunkPath(filePath: string): boolean;
 export declare function ensureCoverageTmpDir(coverageTmpDir?: string): void;
 /**
- * Vitest 3.2.x writes coverage chunks without mkdir'ing the parent directory
- * (fixed upstream in vitest 4.x — vitest-dev/vitest#10117). On Windows the
- * directory can disappear between clean() and writeFile under release-scale
+ * Vitest 4.x includes the upstream mkdir (vitest-dev/vitest#10117). On Windows the
+ * directory can still disappear between clean() and writeFile under release-scale
  * load; mkdir immediately before chunk writes closes that race without
- * soft-failing real threshold failures (#2634).
+ * soft-failing real threshold failures (#2634 / #3480).
  */
 export declare function installCoverageTmpWriteGuard(): () => void;
 /**
  * Win32 globalSetup for coverage runs (#2580, hardened #2634).
  *
- * Keepalive mkdir plus a writeFile guard mirror vitest 4's defensive mkdir until
- * directive upgrades past vitest@3 (see vitest.config.ts #2634 upgrade note).
+ * Keepalive mkdir plus a writeFile guard remain until a full win32 coverage
+ * run proves vitest 4's #10117 mkdir is enough on its own (#3480).
  */
 export default function setup(): () => void;
 //# sourceMappingURL=win32-coverage-tmp-setup.d.ts.map

package/dist/vitest-runner/win32-coverage-tmp-setup.js

@@ -10,11 +10,10 @@ export function ensureCoverageTmpDir(coverageTmpDir = defaultCoverageTmp) {
     mkdirSync(coverageTmpDir, { recursive: true });
 }
 /**
- * Vitest 3.2.x writes coverage chunks without mkdir'ing the parent directory
- * (fixed upstream in vitest 4.x — vitest-dev/vitest#10117). On Windows the
- * directory can disappear between clean() and writeFile under release-scale
+ * Vitest 4.x includes the upstream mkdir (vitest-dev/vitest#10117). On Windows the
+ * directory can still disappear between clean() and writeFile under release-scale
  * load; mkdir immediately before chunk writes closes that race without
- * soft-failing real threshold failures (#2634).
+ * soft-failing real threshold failures (#2634 / #3480).
  */
 export function installCoverageTmpWriteGuard() {
     const originalWriteFile = fsPromises.writeFile.bind(fsPromises);
@@ -33,8 +32,8 @@ export function installCoverageTmpWriteGuard() {
 /**
  * Win32 globalSetup for coverage runs (#2580, hardened #2634).
  *
- * Keepalive mkdir plus a writeFile guard mirror vitest 4's defensive mkdir until
- * directive upgrades past vitest@3 (see vitest.config.ts #2634 upgrade note).
+ * Keepalive mkdir plus a writeFile guard remain until a full win32 coverage
+ * run proves vitest 4's #10117 mkdir is enough on its own (#3480).
  */
 export default function setup() {
     if (process.platform !== "win32")

package/dist/xbrief-migrate/migrate-project.js

@@ -1,6 +1,6 @@
 import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync } from "node:fs";
 import { join, relative, resolve } from "node:path";
-import { containedWrite } from "../fs/contained-write.js";
+import { containedRemove, containedWrite } from "../fs/contained-write.js";
 import { assertWriteTargetSafe, ProjectionContainmentError } from "../fs/projection-containment.js";
 import { checkGitClean } from "../migrate-preflight/index.js";
 import { applyAgentsRefresh } from "../platform/agents-md.js";
@@ -36,10 +36,7 @@ export function shouldOmitLegacyMigrationFile(relativePath) {
  */
 export function removeStaleMigratedFrameworkNarrative(projectRoot) {
     const stale = join(projectRoot, MIGRATED_ARTIFACT_DIR, OBSOLETE_FRAMEWORK_NARRATIVE_FILENAME);
-    if (!existsSync(stale))
-        return false;
-    rmSync(stale, { force: true });
-    return true;
+    return containedRemove({ root: projectRoot, target: stale }).removed;
 }
 function mapRelativePath(relativePath) {
     return relativePath

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-core",
-  "version": "0.103.0",
+  "version": "0.105.0",
   "description": "TypeScript engine core for the Directive framework.",
   "license": "MIT",
   "type": "module",
@@ -382,8 +382,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-content": "^0.103.0",
-    "@deftai/directive-types": "^0.103.0",
+    "@deftai/directive-content": "^0.105.0",
+    "@deftai/directive-types": "^0.105.0",
     "archiver": "^8.0.0"
   },
   "scripts": {