@deftai/directive 0.126.2 → 0.128.0

package/dist/hook-dispatch.d.ts

@@ -1,80 +0,0 @@
-#!/usr/bin/env node
-import { type HookEvent, type HookHost, type HookPayloadContext } from "@deftai/directive-core/hooks";
-interface ParsedArgs {
-    host?: HookHost;
-    event?: HookEvent;
-    projectRoot?: string;
-    error?: string;
-}
-export interface HookDispatchCliSeams {
-    readonly readStdin?: () => string;
-    readonly writeOut?: (text: string) => void;
-    readonly writeErr?: (text: string) => void;
-    readonly cwd?: () => string;
-    /**
-     * Sleep between empty-stdin retry polls (#2864). Injected in tests so delayed
-     * payloads can be simulated without real wall-clock waits.
-     */
-    readonly sleepMs?: (ms: number) => void;
-    /**
-     * Empty-stdin retry budget in ms (default {@link DEFAULT_STDIN_EMPTY_RETRY_MS}).
-     * Set `0` to disable retries (single read). Tests for true-empty paths often
-     * set this to 0 for speed; delayed-payload tests set a positive budget.
-     */
-    readonly stdinEmptyRetryMs?: number;
-    /** Clock for empty-stdin deadline; defaults to `Date.now` (tests inject synthetic clocks). */
-    readonly nowMs?: () => number;
-}
-/**
- * How long to re-poll stdin after an empty first read before concluding the host
- * sent nothing (#2864). Keeps well under Cursor's deposited `timeout: 5` while
- * covering short non-blocking delivery races (reporter matrix rows K/L).
- */
-export declare const DEFAULT_STDIN_EMPTY_RETRY_MS = 250;
-/** Interval between empty-stdin re-polls while the retry budget remains. */
-export declare const STDIN_EMPTY_RETRY_INTERVAL_MS = 25;
-/**
- * Read hook stdin with a short empty-read retry budget (#2864).
- *
- * A single `readFileSync(0)` on a non-blocking descriptor can return zero bytes
- * before the host has attached a writer. That is indistinguishable from a true
- * empty payload if we never re-poll. We re-read for up to `emptyRetryMs`; true
- * empty (every poll empty through the budget) still yields empty for the deny
- * path. Delayed payloads that arrive within the budget are accepted.
- */
-export declare function readStdinHardened(readOnce: () => string, options?: {
-    emptyRetryMs?: number;
-    sleepMs?: (ms: number) => void;
-    nowMs?: () => number;
-}): string;
-export declare function parseArgs(argv: readonly string[]): ParsedArgs;
-/** @deprecated Prefer ParsedHookPayload from @deftai/directive-core/hooks (#2950). */
-export interface ParsedPayload {
-    readonly payload: unknown;
-    readonly context: HookPayloadContext;
-}
-/**
- * Parse host hook stdin into payload + context.
- * Pure implementation lives in core classify (`parseHookStdin`); CLI re-exports
- * for backward-compatible imports in tests (#2734 / #2738 / #2950).
- */
-export declare function parsePayload(raw: string): ParsedPayload;
-/**
- * Provider-neutral hook dispatch CLI entry (`deft hook:dispatch` / `deft-hook`).
- *
- * ## Exit-code contract (#2864)
- *
- * | Exit | Meaning |
- * |------|---------|
- * | `0`  | A host decision was rendered to stdout (allow **or** deny). Hosts must parse stdout; exit status does **not** encode the verdict. |
- * | `2`  | Argv / configuration error (unsupported host/event, missing flags, unrecognized args). |
- *
- * This process never returns `1` for a rendered verdict. Cursor `failClosed`
- * deposits that report "exit code 1" are therefore process-level failures
- * (crash, signal kill under host timeout, spawn environment), not `run()` deny
- * paths. Empty-stdin denies still exit `0` with a Cursor JSON body carrying
- * `code: "stdin-empty"`.
- */
-export declare function run(argv: string[], seams?: HookDispatchCliSeams): number;
-export {};
-//# sourceMappingURL=hook-dispatch.d.ts.map

package/dist/hook-dispatch.js

@@ -1,186 +0,0 @@
-#!/usr/bin/env node
-import { readFileSync } from "node:fs";
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { decideHook, hookPayloadTopLevelKeys, isHookEvent, isHookHost, mergeHookDispatchEnviron, normalizeHookProjectRoot, parseHookStdin, projectRootFromHookPayload, renderHostDecision, } from "@deftai/directive-core/hooks";
-/**
- * How long to re-poll stdin after an empty first read before concluding the host
- * sent nothing (#2864). Keeps well under Cursor's deposited `timeout: 5` while
- * covering short non-blocking delivery races (reporter matrix rows K/L).
- */
-export const DEFAULT_STDIN_EMPTY_RETRY_MS = 250;
-/** Interval between empty-stdin re-polls while the retry budget remains. */
-export const STDIN_EMPTY_RETRY_INTERVAL_MS = 25;
-function defaultSleepMs(ms) {
-    if (ms <= 0)
-        return;
-    try {
-        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-    }
-    catch {
-        const end = Date.now() + ms;
-        while (Date.now() < end) {
-            /* spin — last-resort fallback when Atomics.wait is unavailable */
-        }
-    }
-}
-/**
- * Read hook stdin with a short empty-read retry budget (#2864).
- *
- * A single `readFileSync(0)` on a non-blocking descriptor can return zero bytes
- * before the host has attached a writer. That is indistinguishable from a true
- * empty payload if we never re-poll. We re-read for up to `emptyRetryMs`; true
- * empty (every poll empty through the budget) still yields empty for the deny
- * path. Delayed payloads that arrive within the budget are accepted.
- */
-export function readStdinHardened(readOnce, options = {}) {
-    const emptyRetryMs = options.emptyRetryMs ?? DEFAULT_STDIN_EMPTY_RETRY_MS;
-    const sleepMs = options.sleepMs ?? defaultSleepMs;
-    const nowMs = options.nowMs ?? (() => Date.now());
-    let raw = readOnce();
-    if (raw.trim().length > 0 || emptyRetryMs <= 0)
-        return raw;
-    const deadline = nowMs() + emptyRetryMs;
-    while (nowMs() < deadline) {
-        sleepMs(STDIN_EMPTY_RETRY_INTERVAL_MS);
-        raw = readOnce();
-        if (raw.trim().length > 0)
-            return raw;
-    }
-    return raw;
-}
-function takeValue(argv, index, flag) {
-    const token = argv[index];
-    const prefix = `${flag}=`;
-    if (token?.startsWith(prefix))
-        return { value: token.slice(prefix.length), next: index };
-    const value = argv[index + 1];
-    if (value === undefined)
-        return { next: index, error: `argument ${flag}: expected one argument` };
-    return { value, next: index + 1 };
-}
-export function parseArgs(argv) {
-    const parsed = {};
-    for (let i = 0; i < argv.length; i += 1) {
-        const token = argv[i];
-        if (token === "--host" || token?.startsWith("--host=")) {
-            const taken = takeValue(argv, i, "--host");
-            if (taken.error)
-                return { error: taken.error };
-            const value = taken.value ?? "";
-            if (!isHookHost(value)) {
-                return { error: `unsupported host: ${JSON.stringify(taken.value)}` };
-            }
-            parsed.host = value;
-            i = taken.next;
-            continue;
-        }
-        if (token === "--event" || token?.startsWith("--event=")) {
-            const taken = takeValue(argv, i, "--event");
-            if (taken.error)
-                return { error: taken.error };
-            const value = taken.value ?? "";
-            if (!isHookEvent(value)) {
-                return { error: `unsupported event: ${JSON.stringify(taken.value)}` };
-            }
-            parsed.event = value;
-            i = taken.next;
-            continue;
-        }
-        if (token === "--project-root" || token?.startsWith("--project-root=")) {
-            const taken = takeValue(argv, i, "--project-root");
-            if (taken.error)
-                return { error: taken.error };
-            parsed.projectRoot = taken.value;
-            i = taken.next;
-            continue;
-        }
-        return { error: `unrecognized argument: ${token}` };
-    }
-    if (parsed.host === undefined)
-        return { error: "--host is required" };
-    if (parsed.event === undefined)
-        return { error: "--event is required" };
-    return parsed;
-}
-/**
- * Parse host hook stdin into payload + context.
- * Pure implementation lives in core classify (`parseHookStdin`); CLI re-exports
- * for backward-compatible imports in tests (#2734 / #2738 / #2950).
- */
-export function parsePayload(raw) {
-    return parseHookStdin(raw);
-}
-/**
- * Provider-neutral hook dispatch CLI entry (`deft hook:dispatch` / `deft-hook`).
- *
- * ## Exit-code contract (#2864)
- *
- * | Exit | Meaning |
- * |------|---------|
- * | `0`  | A host decision was rendered to stdout (allow **or** deny). Hosts must parse stdout; exit status does **not** encode the verdict. |
- * | `2`  | Argv / configuration error (unsupported host/event, missing flags, unrecognized args). |
- *
- * This process never returns `1` for a rendered verdict. Cursor `failClosed`
- * deposits that report "exit code 1" are therefore process-level failures
- * (crash, signal kill under host timeout, spawn environment), not `run()` deny
- * paths. Empty-stdin denies still exit `0` with a Cursor JSON body carrying
- * `code: "stdin-empty"`.
- */
-export function run(argv, seams = {}) {
-    const args = parseArgs(argv);
-    const writeOut = seams.writeOut ?? ((text) => process.stdout.write(text));
-    const writeErr = seams.writeErr ?? ((text) => process.stderr.write(text));
-    if (args.error !== undefined || args.host === undefined || args.event === undefined) {
-        writeErr(`${args.error ?? "invalid hook-dispatch arguments"}\n`);
-        return 2;
-    }
-    const readOnce = seams.readStdin ?? (() => readFileSync(0, "utf8"));
-    const rawStdin = readStdinHardened(readOnce, {
-        emptyRetryMs: seams.stdinEmptyRetryMs,
-        sleepMs: seams.sleepMs,
-        nowMs: seams.nowMs,
-    });
-    const cwd = (seams.cwd ?? process.cwd)();
-    const { payload, context: payloadContext } = parsePayload(rawStdin);
-    const projectRoot = normalizeHookProjectRoot(args.projectRoot ? resolve(args.projectRoot) : projectRootFromHookPayload(payload, cwd));
-    const environ = mergeHookDispatchEnviron(payload);
-    const decision = decideHook({
-        host: args.host,
-        event: args.event,
-        projectRoot,
-        payload,
-        payloadContext,
-        ...(environ !== undefined ? { environ } : {}),
-    });
-    const rendered = renderHostDecision(args.host, decision);
-    if (rendered.length > 0)
-        writeOut(`${rendered}\n`);
-    // Force-kill allow must print the non-empty reason even when host allow wire is empty (#5281).
-    if (decision.code === "kill-force-ready" && decision.message.trim().length > 0) {
-        writeErr(`${decision.message}\n`);
-    }
-    if ((decision.code === "invalid-input" || decision.code === "stdin-empty") &&
-        args.host === "cursor") {
-        // Keys are already embedded in decision.message; stderr helps operators tailing logs.
-        const keys = hookPayloadTopLevelKeys(payload);
-        if (keys.length > 0) {
-            writeErr(`Directive hook diagnostic: payload top-level keys: ${keys.join(", ")}\n`);
-        }
-        else if (decision.code === "stdin-empty") {
-            writeErr("Directive hook diagnostic: stdin was empty after empty-read retry budget\n");
-        }
-    }
-    if (decision.code === "session-start-degraded")
-        writeErr(`${decision.message}\n`);
-    if (decision.code === "session-compact-rearm" ||
-        decision.code === "session-compact-rearm-degraded" ||
-        decision.code === "session-compact-noop") {
-        writeErr(`${decision.message}\n`);
-    }
-    return 0;
-}
-if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
-    process.exit(run(process.argv.slice(2)));
-}
-//# sourceMappingURL=hook-dispatch.js.map

package/dist/human-presence-mint.d.ts

@@ -1,70 +0,0 @@
-/**
- * Env markers that indicate an agent/host/CI shell even when stdin reports a TTY
- * (pseudo-terminal residual; #3110 Greptile). Presence refuses mint.
- * Expanded for dogfood conf 5/5 — markers are fail-closed (any non-empty value).
- */
-export declare const AUTHZ_AGENT_SHELL_ENV_MARKERS: readonly ["CLAUDECODE", "CLAUDE_CODE", "CLAUDE_CODE_ENTRYPOINT", "CURSOR_AGENT", "CURSOR_TRACE_ID", "CURSOR_SESSION_ID", "AIDER", "CONTINUE_CLI", "CODEX_SANDBOX", "CODEX_CI", "OPENAI_CODEX", "OPENCLAW", "OPENCLAW_STATE_DIR", "DEFT_PROBE_OPENCLAW", "DEFT_HOOK_HOST", "DEFT_AGENT_SHELL", "DEFT_AGENT_RUNTIME", "WARP_SESSION_ID", "WARP_HARNESS", "WARP_RUN_ID", "GEMINI_CLI", "AMP_CLI", "SWARM_AGENT", "AI_AGENT", "CI", "CONTINUOUS_INTEGRATION", "GITHUB_ACTIONS", "GITLAB_CI", "CIRCLECI", "BUILDKITE", "TRAVIS", "JENKINS_URL", "TEAMCITY_VERSION", "TF_BUILD", "APPVEYOR", "BITBUCKET_BUILD_NUMBER", "CODEBUILD_BUILD_ID"];
-/** Phrase an operator must type on the controlling TTY after --confirm (#3110). */
-export declare const AUTHZ_INTERACTIVE_CONFIRM_PHRASE = "mint";
-/** Testable seams for TTY / agent-shell detection (#3110 / #3384). */
-export interface HumanPresenceMintSeams {
-    /**
-     * When true, interactive human TTY is present.
-     * Default: both stdin and stdout report isTTY (pseudo-TTY residual; #3110).
-     */
-    readonly isTty?: () => boolean;
-    /** Environ for agent-shell marker detection (default: process.env). */
-    readonly environ?: NodeJS.ProcessEnv;
-    /**
-     * True when a controlling terminal device is available (`/dev/tty` or `\\.\CONIN$`).
-     * Default: open/close the platform controlling terminal (fail-closed on error).
-     */
-    readonly hasControllingTerminal?: () => boolean;
-    /**
-     * Read one interactive confirmation line from the operator (trimmed).
-     * Default: one line from the controlling terminal. Tests inject a fixed phrase.
-     */
-    readonly readInteractiveConfirm?: () => string | null;
-}
-export declare function looksLikeAgentShell(environ: NodeJS.ProcessEnv): boolean;
-/** Platform controlling-terminal path (`\\.\CONIN$` on win32, `/dev/tty` elsewhere). */
-export declare function controllingTerminalPath(platform?: NodeJS.Platform): string;
-/**
- * Open flag for the platform controlling-terminal device (#3596 leftover).
- *
- * Win32 stays `r+` so the probe and phrase-read share one flag. The leftover
- * path is the Windows device-namespace CONIN$ string, not bare CONIN$.
- */
-export declare function controllingTerminalOpenFlag(platform?: NodeJS.Platform): "r" | "r+";
-export declare function resolveHumanPresenceMintSeams(seams?: HumanPresenceMintSeams): Required<HumanPresenceMintSeams>;
-/** Active UAT campaign id, or null when no lease is active. */
-export declare function activeUatCampaignId(projectRoot: string): string | null;
-/**
- * While any UAT lease is active, refuse mint (#3110 / #3384).
- *
- * No multi-factor escape: TTY, `--confirm`, and typed phrase never authorize.
- * Returns an exit code when blocked, or null when mint may continue.
- */
-export declare function refuseMintWhileUatActive(verb: string, projectRoot: string): number | null;
-/**
- * Refuse non-interactive / agent-shell mint outside UAT (#3110 / #3384).
- *
- * Multi-factor human-presence gate (applies only when UAT lease is inactive):
- * 1. No known agent/CI env markers
- * 2. Interactive TTY (stdin + stdout isTTY)
- * 3. Controlling terminal device present (`/dev/tty` / `\\.\CONIN$`)
- * 4. Explicit argv `--confirm` (flag alone never enough)
- * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
- *
- * Fail-closed: if a real human interactive path cannot be proven, refuse mint.
- * Returns an exit code when blocked, or null when the mutation may proceed.
- */
-export declare function refuseNonInteractiveMint(input: {
-    readonly verb: string;
-    readonly confirm: boolean;
-    readonly isTty: () => boolean;
-    readonly environ: NodeJS.ProcessEnv;
-    readonly hasControllingTerminal: () => boolean;
-    readonly readInteractiveConfirm: () => string | null;
-}): number | null;
-//# sourceMappingURL=human-presence-mint.d.ts.map

package/dist/human-presence-mint.js

@@ -1,204 +0,0 @@
-/**
- * Shared #3110 human-presence mint gate (#3384).
- *
- * Used by `authz` mutating verbs and `scope:record-approved-scope`. Multi-factor
- * human presence: interactive TTY + controlling terminal + `--confirm` + typed
- * phrase `mint`. Agent/CI env markers refuse fail-closed. `--actor` is never
- * an input here — display only at the caller.
- */
-import { closeSync, openSync, readSync } from "node:fs";
-import { loadAuthzState } from "@deftai/directive-core/authz";
-/**
- * Env markers that indicate an agent/host/CI shell even when stdin reports a TTY
- * (pseudo-terminal residual; #3110 Greptile). Presence refuses mint.
- * Expanded for dogfood conf 5/5 — markers are fail-closed (any non-empty value).
- */
-export const AUTHZ_AGENT_SHELL_ENV_MARKERS = [
-    // Coding agents / IDEs
-    "CLAUDECODE",
-    "CLAUDE_CODE",
-    "CLAUDE_CODE_ENTRYPOINT",
-    "CURSOR_AGENT",
-    "CURSOR_TRACE_ID",
-    "CURSOR_SESSION_ID",
-    "AIDER",
-    "CONTINUE_CLI",
-    "CODEX_SANDBOX",
-    "CODEX_CI",
-    "OPENAI_CODEX",
-    "OPENCLAW",
-    "OPENCLAW_STATE_DIR",
-    "DEFT_PROBE_OPENCLAW",
-    "DEFT_HOOK_HOST",
-    "DEFT_AGENT_SHELL",
-    "DEFT_AGENT_RUNTIME",
-    "WARP_SESSION_ID",
-    "WARP_HARNESS",
-    "WARP_RUN_ID",
-    "GEMINI_CLI",
-    "AMP_CLI",
-    "SWARM_AGENT",
-    "AI_AGENT",
-    // CI / automation (never a human interactive operator mint)
-    "CI",
-    "CONTINUOUS_INTEGRATION",
-    "GITHUB_ACTIONS",
-    "GITLAB_CI",
-    "CIRCLECI",
-    "BUILDKITE",
-    "TRAVIS",
-    "JENKINS_URL",
-    "TEAMCITY_VERSION",
-    "TF_BUILD",
-    "APPVEYOR",
-    "BITBUCKET_BUILD_NUMBER",
-    "CODEBUILD_BUILD_ID",
-];
-/** Phrase an operator must type on the controlling TTY after --confirm (#3110). */
-export const AUTHZ_INTERACTIVE_CONFIRM_PHRASE = "mint";
-export function looksLikeAgentShell(environ) {
-    for (const key of AUTHZ_AGENT_SHELL_ENV_MARKERS) {
-        const v = environ[key];
-        if (v !== undefined && String(v).trim().length > 0)
-            return true;
-    }
-    return false;
-}
-function defaultIsTty() {
-    return process.stdin.isTTY === true && process.stdout.isTTY === true;
-}
-/** Platform controlling-terminal path (`\\.\CONIN$` on win32, `/dev/tty` elsewhere). */
-export function controllingTerminalPath(platform = process.platform) {
-    // Real-console diagnostic on #3596: bare CONIN$ and CON ENOENT; device-namespace path opens.
-    return platform === "win32" ? "\\\\.\\CONIN$" : "/dev/tty";
-}
-/**
- * Open flag for the platform controlling-terminal device (#3596 leftover).
- *
- * Win32 stays `r+` so the probe and phrase-read share one flag. The leftover
- * path is the Windows device-namespace CONIN$ string, not bare CONIN$.
- */
-export function controllingTerminalOpenFlag(platform = process.platform) {
-    return platform === "win32" ? "r+" : "r";
-}
-function defaultHasControllingTerminal() {
-    try {
-        const fd = openSync(controllingTerminalPath(), controllingTerminalOpenFlag());
-        closeSync(fd);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function defaultReadInteractiveConfirm() {
-    // Read from the controlling terminal device — not redirected/piped stdin —
-    // so agent-controlled stdin alone cannot supply the confirm phrase (#3110).
-    let fd = null;
-    try {
-        fd = openSync(controllingTerminalPath(), controllingTerminalOpenFlag());
-        const buf = Buffer.alloc(256);
-        const n = readSync(fd, buf, 0, buf.length, null);
-        if (n <= 0)
-            return null;
-        return buf.subarray(0, n).toString("utf8").trim();
-    }
-    catch {
-        return null;
-    }
-    finally {
-        if (fd !== null) {
-            try {
-                closeSync(fd);
-            }
-            catch {
-                /* ignore */
-            }
-        }
-    }
-}
-export function resolveHumanPresenceMintSeams(seams = {}) {
-    return {
-        isTty: seams.isTty ?? defaultIsTty,
-        environ: seams.environ ?? process.env,
-        hasControllingTerminal: seams.hasControllingTerminal ?? defaultHasControllingTerminal,
-        readInteractiveConfirm: seams.readInteractiveConfirm ?? defaultReadInteractiveConfirm,
-    };
-}
-/** Active UAT campaign id, or null when no lease is active. */
-export function activeUatCampaignId(projectRoot) {
-    const state = loadAuthzState(projectRoot);
-    if (state.uat === null || !state.uat.active)
-        return null;
-    return state.uat.campaignId;
-}
-/**
- * While any UAT lease is active, refuse mint (#3110 / #3384).
- *
- * No multi-factor escape: TTY, `--confirm`, and typed phrase never authorize.
- * Returns an exit code when blocked, or null when mint may continue.
- */
-export function refuseMintWhileUatActive(verb, projectRoot) {
-    const campaignId = activeUatCampaignId(projectRoot);
-    if (campaignId === null)
-        return null;
-    process.stderr.write(`${verb}: refusing mint while UAT lease is ACTIVE (campaign=${campaignId}). ` +
-        "Under active UAT, mint is hard-refused — no TTY, --confirm, or phrase path " +
-        "authorizes remint (#3110 / #3384). Mint before uat-start; clear the lease " +
-        "out-of-band to end UAT.\n");
-    return 2;
-}
-/**
- * Refuse non-interactive / agent-shell mint outside UAT (#3110 / #3384).
- *
- * Multi-factor human-presence gate (applies only when UAT lease is inactive):
- * 1. No known agent/CI env markers
- * 2. Interactive TTY (stdin + stdout isTTY)
- * 3. Controlling terminal device present (`/dev/tty` / `\\.\CONIN$`)
- * 4. Explicit argv `--confirm` (flag alone never enough)
- * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
- *
- * Fail-closed: if a real human interactive path cannot be proven, refuse mint.
- * Returns an exit code when blocked, or null when the mutation may proceed.
- */
-export function refuseNonInteractiveMint(input) {
-    const { verb, confirm } = input;
-    if (looksLikeAgentShell(input.environ)) {
-        process.stderr.write(`${verb}: refusing operator-cli stamp from an agent/host/CI shell ` +
-            `(detected agent or CI env marker). Mint requires a human interactive ` +
-            "TTY without agent-shell markers, plus --confirm and typed phrase (#3110).\n");
-        return 2;
-    }
-    const tty = input.isTty();
-    if (!tty && !confirm) {
-        process.stderr.write(`${verb}: refusing non-interactive operator-cli stamp. ` +
-            "Mint requires interactive TTY, --confirm, and typed phrase " +
-            `'${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' (#3110).\n`);
-        return 2;
-    }
-    if (!tty) {
-        process.stderr.write(`${verb}: refusing non-TTY operator-cli stamp. ` +
-            "--confirm alone never authorizes mint — interactive TTY is required (#3110).\n");
-        return 2;
-    }
-    if (!confirm) {
-        process.stderr.write(`${verb}: refusing operator-cli stamp without --confirm. ` +
-            "Interactive TTY alone never authorizes mint — pass --confirm explicitly (#3110).\n");
-        return 2;
-    }
-    if (!input.hasControllingTerminal()) {
-        process.stderr.write(`${verb}: refusing operator-cli stamp without a controlling terminal. ` +
-            "Open a real interactive console (not a headless/agent pipe) to mint (#3110).\n");
-        return 2;
-    }
-    process.stderr.write(`${verb}: type '${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' and press Enter to confirm operator mint: `);
-    const line = input.readInteractiveConfirm();
-    const phrase = (line ?? "").trim().toLowerCase();
-    if (phrase !== AUTHZ_INTERACTIVE_CONFIRM_PHRASE) {
-        process.stderr.write(`\n${verb}: interactive confirm phrase mismatch (got ${JSON.stringify(line ?? "")}). ` +
-            `Type exactly '${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' on the controlling TTY (#3110).\n`);
-        return 2;
-    }
-    return null;
-}
-//# sourceMappingURL=human-presence-mint.js.map

package/dist/identity-banner.d.ts

@@ -1,13 +0,0 @@
-export declare const CLI_PACKAGE: "@deftai/directive";
-export interface IdentityBannerParts {
-    readonly cliVersion: string;
-    readonly engineName: string;
-    readonly engineVersion: string;
-}
-/**
- * Display-both identity line. Engine semver is first so parseVersionFromOutput
- * in active-cli.ts and classify.ts still treat --version as the engine.
- */
-export declare function formatIdentityBanner(parts: IdentityBannerParts): string;
-export declare function identityBanner(): string;
-//# sourceMappingURL=identity-banner.d.ts.map

package/dist/identity-banner.js

@@ -1,19 +0,0 @@
-import { engineInfo } from "@deftai/directive-core";
-import { readCliPackageVersion } from "./cli-package-version.js";
-export const CLI_PACKAGE = "@deftai/directive";
-/**
- * Display-both identity line. Engine semver is first so parseVersionFromOutput
- * in active-cli.ts and classify.ts still treat --version as the engine.
- */
-export function formatIdentityBanner(parts) {
-    return `${CLI_PACKAGE} (engine: ${parts.engineName}@${parts.engineVersion}; package: ${CLI_PACKAGE}@${parts.cliVersion})`;
-}
-export function identityBanner() {
-    const info = engineInfo();
-    return formatIdentityBanner({
-        cliVersion: readCliPackageVersion(),
-        engineName: info.name,
-        engineVersion: info.version,
-    });
-}
-//# sourceMappingURL=identity-banner.js.map

package/dist/index.d.ts

@@ -1,11 +0,0 @@
-/**
- * `@deftai/directive` — entrypoint for the deft directive TypeScript engine.
- *
- * Wave-1 skeleton (#1717): `banner()` spans the full dependency chain
- * (cli → core → types), proving the project-reference graph builds and
- * resolves end-to-end. Real commands land in later migration waves.
- */
-export { CLI_PACKAGE } from "./identity-banner.js";
-/** Renders CLI package and engine identity. First semver is the engine (#4766). */
-export declare function banner(): string;
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,14 +0,0 @@
-import { identityBanner } from "./identity-banner.js";
-/**
- * `@deftai/directive` — entrypoint for the deft directive TypeScript engine.
- *
- * Wave-1 skeleton (#1717): `banner()` spans the full dependency chain
- * (cli → core → types), proving the project-reference graph builds and
- * resolves end-to-end. Real commands land in later migration waves.
- */
-export { CLI_PACKAGE } from "./identity-banner.js";
-/** Renders CLI package and engine identity. First semver is the engine (#4766). */
-export function banner() {
-    return identityBanner();
-}
-//# sourceMappingURL=index.js.map

package/dist/init-cli/constants.d.ts

@@ -1,42 +0,0 @@
-/** Canonical headless install argv (#1339 / #1409 / getting-started.md). */
-export declare const CANONICAL_INIT_ARGV: readonly ["--yes", "--repo-root", ".", "--json"];
-/** Canonical headless upgrade argv (#1339 / #1409). */
-export declare const CANONICAL_UPDATE_ARGV: readonly ["--yes", "--upgrade", "--repo-root", ".", "--json"];
-/**
- * Flags that make `directive update` classify + print its plan without executing
- * the refresh (#2266). Recognised in the USER argv (never part of the canonical
- * always-applied argv above, which must stay a real refresh).
- */
-export declare const UPDATE_DRY_RUN_FLAGS: readonly ["--dry-run", "--plan"];
-/**
- * Flags that make `directive init` classify + print the dispatch plan without
- * executing any deposit/refresh/migrate (#2265). Mirrors {@link UPDATE_DRY_RUN_FLAGS};
- * recognised in the USER argv, never part of the canonical always-applied argv
- * above (which must stay a real adoption dispatch).
- */
-export declare const INIT_DRY_RUN_FLAGS: readonly ["--dry-run", "--plan"];
-/**
- * Flags that switch `directive init` into headless manifest-emit mode (#2268):
- * serialise the merged keystone `plan()` into a `{ version, files }` manifest
- * with ALL execution side effects suppressed. Recognised in the USER argv; NOT
- * part of the canonical always-applied argv above (which must stay a real,
- * executing adoption dispatch — a headless flag there would silently suppress
- * every install's side effects).
- */
-export declare const INIT_HEADLESS_FLAGS: readonly ["--headless", "/headless"];
-/**
- * Flag naming the manifest output target for `--headless` (#2268). Accepts the
- * `--output=<path>` and `--output <path>` forms; when absent the manifest is
- * written to stdout. Writing this file is the ONLY filesystem side effect the
- * headless path is permitted to perform.
- */
-export declare const INIT_OUTPUT_FLAGS: readonly ["--output", "/output"];
-/** Canonical migrate argv: defaults to cwd, human-readable unless --json (#1941). */
-export declare const CANONICAL_MIGRATE_ARGV: readonly ["--repo-root", "."];
-/**
- * Subcommand flag selecting the vendored→hybrid `.deft/core` un-commit (#2269).
- * `migrate --untrack-core` dispatches to the destructive un-track path; bare
- * `migrate` keeps its non-destructive provenance-stamp behavior.
- */
-export declare const MIGRATE_UNTRACK_CORE_FLAG = "--untrack-core";
-//# sourceMappingURL=constants.d.ts.map