@deftai/directive 0.126.2 → 0.128.0

package/dist/scope-record-observable-scope.js

@@ -1,204 +0,0 @@
-#!/usr/bin/env node
-/**
- * CLI for scope:record-observable-scope (#4495).
- *
- * Human-presence mint of `.deft/observable-scope/<plan-id>.json` from
- * `plan["x-directive/observableChange"]`. --actor is display-only.
- */
-import { existsSync, readFileSync } from "node:fs";
-import { basename, relative, resolve } from "node:path";
-import { buildObservableScopeRecord, extractObservableChangeFromPlan, parseObservableChangeContract, writeObservableScopeRecord, } from "@deftai/directive-core/observable-scope";
-import { isDirectEntrypoint } from "./entrypoint.js";
-import { refuseMintWhileUatActive, refuseNonInteractiveMint, resolveHumanPresenceMintSeams, } from "./human-presence-mint.js";
-import { isPathInsideRoot } from "./scope-record-approved-scope.js";
-const DEFAULT_MINTED_VIA = "scope:record-observable-scope";
-const ALLOWED_MINTED_VIA = new Set([DEFAULT_MINTED_VIA, "in-harness-ask"]);
-function usage() {
-    return ("usage: scope:record-observable-scope -- <xbrief-path> --actor <name> --confirm " +
-        "[--kind operator] [--minted-via in-harness-ask|scope:record-observable-scope] " +
-        "[--project-root <dir>] [--quiet]\n" +
-        '  Writes .deft/observable-scope/<plan-id>.json from plan["x-directive/observableChange"].\n' +
-        "  Attended mid-build (#5010): ask in parent chat; on yes the human runs this verb on a real TTY " +
-        "with --minted-via=in-harness-ask (attestation is not an agent-shell bypass). Commit the record on " +
-        "the delivery-branch merge base, then rebase the implementation branch — same-PR working-tree-only " +
-        "records are not authoritative. Unattended/C1: rewrite or park. --actor is display only. Mint still " +
-        "requires a real TTY, controlling terminal, --confirm, and typed phrase mint (#3110). Agent/CI shells refuse.");
-}
-function extractPlanId(payload) {
-    if (payload === null || typeof payload !== "object" || Array.isArray(payload))
-        return null;
-    const plan = payload.plan;
-    if (plan === null || typeof plan !== "object" || Array.isArray(plan))
-        return null;
-    const id = plan.id;
-    return typeof id === "string" && id.trim().length > 0 ? id.trim() : null;
-}
-export function parseArgs(argv) {
-    const parsed = {
-        projectRoot: ".",
-        xbriefPath: "",
-        actor: "",
-        kind: "operator",
-        mintedVia: DEFAULT_MINTED_VIA,
-        quiet: false,
-        confirm: false,
-    };
-    const positionals = [];
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (arg === "--")
-            continue;
-        if (arg === "--help" || arg === "-h")
-            return { ...parsed, help: true };
-        if (arg === "--quiet")
-            parsed.quiet = true;
-        else if (arg === "--confirm")
-            parsed.confirm = true;
-        else if (arg === "--project-root") {
-            const value = argv[i + 1];
-            if (value === undefined)
-                return { ...parsed, error: "argument --project-root: expected one argument" };
-            parsed.projectRoot = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--project-root=")) {
-            parsed.projectRoot = arg.slice("--project-root=".length);
-        }
-        else if (arg === "--actor") {
-            const value = argv[i + 1];
-            if (value === undefined)
-                return { ...parsed, error: "argument --actor: expected one argument" };
-            parsed.actor = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--actor=")) {
-            parsed.actor = arg.slice("--actor=".length);
-        }
-        else if (arg === "--kind") {
-            const value = argv[i + 1];
-            if (value === undefined)
-                return { ...parsed, error: "argument --kind: expected one argument" };
-            parsed.kind = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--kind=")) {
-            parsed.kind = arg.slice("--kind=".length);
-        }
-        else if (arg === "--minted-via") {
-            const value = argv[i + 1];
-            if (value === undefined)
-                return { ...parsed, error: "argument --minted-via: expected one argument" };
-            parsed.mintedVia = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--minted-via=")) {
-            parsed.mintedVia = arg.slice("--minted-via=".length);
-        }
-        else if (arg?.startsWith("-")) {
-            return { ...parsed, error: `unrecognized argument: ${arg}` };
-        }
-        else if (arg !== undefined) {
-            positionals.push(arg);
-        }
-    }
-    if (parsed.help)
-        return parsed;
-    if (positionals.length === 0)
-        return { ...parsed, error: `missing xBRIEF path\n${usage()}` };
-    if (positionals.length > 1) {
-        return { ...parsed, error: `unexpected extra args: ${positionals.slice(1).join(" ")}` };
-    }
-    parsed.xbriefPath = positionals[0] ?? "";
-    if (parsed.actor.trim().length === 0) {
-        return {
-            ...parsed,
-            error: `argument --actor is required (human operator identity)\n${usage()}`,
-        };
-    }
-    if (!ALLOWED_MINTED_VIA.has(parsed.mintedVia.trim())) {
-        return {
-            ...parsed,
-            error: `argument --minted-via must be one of: ${[...ALLOWED_MINTED_VIA].join(", ")}\n${usage()}`,
-        };
-    }
-    parsed.mintedVia = parsed.mintedVia.trim();
-    return parsed;
-}
-export function run(argv, seams = {}) {
-    const args = parseArgs(argv);
-    if (args.help) {
-        process.stdout.write(`${usage()}\n`);
-        return 0;
-    }
-    if (args.error !== undefined) {
-        process.stderr.write(`scope_record_observable_scope: ${args.error}\n`);
-        return 2;
-    }
-    const projectRoot = resolve(args.projectRoot);
-    const uat = refuseMintWhileUatActive("scope:record-observable-scope", projectRoot);
-    if (uat !== null)
-        return uat;
-    const resolved = resolveHumanPresenceMintSeams(seams);
-    const refused = refuseNonInteractiveMint({
-        verb: "scope:record-observable-scope",
-        confirm: args.confirm,
-        isTty: resolved.isTty,
-        environ: resolved.environ,
-        hasControllingTerminal: resolved.hasControllingTerminal,
-        readInteractiveConfirm: resolved.readInteractiveConfirm,
-    });
-    if (refused !== null)
-        return refused;
-    const xbriefAbs = resolve(projectRoot, args.xbriefPath);
-    const fullPath = existsSync(xbriefAbs) ? xbriefAbs : resolve(args.xbriefPath);
-    if (!existsSync(fullPath)) {
-        process.stderr.write(`scope_record_observable_scope: xBRIEF not found: ${args.xbriefPath}\n`);
-        return 2;
-    }
-    if (!isPathInsideRoot(projectRoot, fullPath)) {
-        process.stderr.write("scope_record_observable_scope: xBRIEF path escapes --project-root.\n");
-        return 2;
-    }
-    let payload;
-    const rawText = readFileSync(fullPath, "utf8");
-    try {
-        payload = JSON.parse(rawText);
-    }
-    catch (err) {
-        process.stderr.write(`scope_record_observable_scope: invalid JSON: ${String(err)}\n`);
-        return 2;
-    }
-    const planId = extractPlanId(payload) ?? basename(fullPath, ".xbrief.json");
-    const contract = parseObservableChangeContract(extractObservableChangeFromPlan(payload));
-    if ("error" in contract) {
-        process.stderr.write(`scope_record_observable_scope: ${contract.error}\n`);
-        return 2;
-    }
-    const rel = relative(projectRoot, fullPath).replace(/\\/g, "/");
-    const rec = buildObservableScopeRecord({
-        planId,
-        xbriefRelPath: rel.startsWith("xbrief/pending/") ? `xbrief/active/${basename(rel)}` : rel,
-        allowedChanges: contract.allowedChanges,
-        mustPreserve: contract.mustPreserve,
-        changeKind: contract.changeKind,
-        humanApproval: {
-            kind: args.kind,
-            actor: args.actor,
-            mintedAt: new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
-            mintedVia: args.mintedVia,
-        },
-    });
-    if ("error" in rec) {
-        process.stderr.write(`scope_record_observable_scope: ${rec.error}\n`);
-        return 2;
-    }
-    const path = writeObservableScopeRecord(projectRoot, rec);
-    if (!args.quiet) {
-        process.stdout.write(`Wrote ${path}\nCommit this record on the merge base before the UI change PR. Demand this mint after the observableChange contract is authored, not at parking (#4588; predecessor #4383).\n`);
-    }
-    return 0;
-}
-if (isDirectEntrypoint(import.meta.url)) {
-    process.exit(run(process.argv.slice(2)));
-}
-//# sourceMappingURL=scope-record-observable-scope.js.map

package/dist/session-ready.d.ts

@@ -1,15 +0,0 @@
-#!/usr/bin/env node
-export interface ParsedSessionReadyArgs {
-    projectRoot: string;
-    emitJson: boolean;
-    withNetwork: boolean;
-    repo: string | null;
-    /** #3611: explicit lifecycle owner injected by a host hook bridge. */
-    sessionId: string | null;
-    error?: string;
-}
-/** Parse session:ready CLI args. */
-export declare function parseArgs(argv: readonly string[]): ParsedSessionReadyArgs;
-/** Native session:ready handler (#2993). */
-export declare function run(argv?: readonly string[]): number;
-//# sourceMappingURL=session-ready.d.ts.map

package/dist/session-ready.js

@@ -1,144 +0,0 @@
-#!/usr/bin/env node
-/**
- * CLI: deft session:ready — one-shot mutation recovery (#2993).
- *
- * Composes session:start (when needed) + verify:session-ritual --tier=gated
- * + cache fetch-all recovery so PreToolUse gated inspect goes green in one verb.
- */
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { runSessionReady } from "@deftai/directive-core/session";
-/** Parse session:ready CLI args. */
-export function parseArgs(argv) {
-    const parsed = {
-        projectRoot: ".",
-        emitJson: false,
-        withNetwork: false,
-        repo: null,
-        sessionId: null,
-    };
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (arg === undefined)
-            continue;
-        if (arg === "--")
-            continue;
-        if (arg === "--json") {
-            parsed.emitJson = true;
-            continue;
-        }
-        if (arg === "--with-network") {
-            parsed.withNetwork = true;
-            continue;
-        }
-        if (arg === "--help" || arg === "-h") {
-            return {
-                ...parsed,
-                error: "usage: session:ready [--project-root <path>] [--repo OWNER/NAME] [--session-id <id>] [--with-network] [--json]\n" +
-                    "  One-shot recovery: session:start (if needed) + gated ritual + cache recovery (#2993).",
-            };
-        }
-        if (arg === "--project-root") {
-            const value = argv[i + 1];
-            if (value === undefined || value.startsWith("--")) {
-                return { ...parsed, error: "argument --project-root: expected one argument" };
-            }
-            parsed.projectRoot = value;
-            i += 1;
-            continue;
-        }
-        if (arg.startsWith("--project-root=")) {
-            const value = arg.slice("--project-root=".length);
-            if (value.length === 0 || value.startsWith("--")) {
-                return { ...parsed, error: "argument --project-root: expected one argument" };
-            }
-            parsed.projectRoot = value;
-            continue;
-        }
-        if (arg === "--session-id") {
-            const value = argv[i + 1];
-            if (value === undefined || value.startsWith("--")) {
-                return { ...parsed, error: "argument --session-id: expected one argument" };
-            }
-            const sessionId = value.trim();
-            if (sessionId.length === 0 || sessionId.startsWith("--")) {
-                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
-            }
-            parsed.sessionId = sessionId;
-            i += 1;
-            continue;
-        }
-        if (arg.startsWith("--session-id=")) {
-            const sessionId = arg.slice("--session-id=".length).trim();
-            if (sessionId.length === 0 || sessionId.startsWith("--")) {
-                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
-            }
-            parsed.sessionId = sessionId;
-            continue;
-        }
-        if (arg === "--repo") {
-            const value = argv[i + 1];
-            if (value === undefined || value.startsWith("--")) {
-                return { ...parsed, error: "argument --repo: expected one argument" };
-            }
-            parsed.repo = value;
-            i += 1;
-            continue;
-        }
-        if (arg.startsWith("--repo=")) {
-            const value = arg.slice("--repo=".length);
-            if (value.length === 0 || value.startsWith("--")) {
-                return { ...parsed, error: "argument --repo: expected one argument" };
-            }
-            parsed.repo = value;
-            continue;
-        }
-        if (arg.startsWith("-")) {
-            return { ...parsed, error: `unrecognized argument: ${arg}` };
-        }
-        return { ...parsed, error: `unexpected argument: ${arg}` };
-    }
-    return parsed;
-}
-/** Native session:ready handler (#2993). */
-export function run(argv = process.argv.slice(2)) {
-    const args = parseArgs(argv);
-    if (args.error !== undefined) {
-        process.stderr.write(`session_ready: ${args.error}\n`);
-        return 2;
-    }
-    const projectRoot = resolve(args.projectRoot);
-    const result = runSessionReady(projectRoot, {
-        repo: args.repo,
-        sessionId: args.sessionId ?? undefined,
-        sessionStartOptions: {
-            allowOptionalNetwork: args.withNetwork ? true : undefined,
-            writeHistory: false,
-        },
-    });
-    if (args.emitJson) {
-        process.stdout.write(`${JSON.stringify({
-            ready: result.code === 0,
-            exit_code: result.code,
-            session_id: result.sessionId,
-            path: result.path,
-            message: result.message,
-            steps: result.steps,
-            duration_ms: result.duration_ms,
-        })}\n`);
-        return result.code;
-    }
-    const sink = result.code === 0 ? process.stdout : process.stderr;
-    // Prefer the canonical single success/failure line; keep intermediate lines
-    // only when they add recovery context (start output / cache progress).
-    const intermediates = result.lines.filter((line) => line !== result.message);
-    for (const line of intermediates) {
-        sink.write(`${line}\n`);
-    }
-    sink.write(`${result.message}\n`);
-    return result.code;
-}
-if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
-    process.exit(run(process.argv.slice(2)));
-}
-//# sourceMappingURL=session-ready.js.map

package/dist/session-start.d.ts

@@ -1,56 +0,0 @@
-#!/usr/bin/env node
-import { type CeremonyDepth, type CeremonyDialInputs } from "@deftai/directive-core/policy";
-import { type PrimaryClaimException, type SessionCeremonyTier, type SessionPosture } from "@deftai/directive-core/session";
-export interface ParsedSessionStartArgs {
-    projectRoot: string;
-    deferValues: string[];
-    /** #4919: defer finalize-owed session gate with a recorded reason. */
-    deferOwedReason: string | null;
-    emitJson: boolean;
-    noHistory: boolean;
-    readOnly: boolean;
-    /** #2991: opt into optional network (release probe + triage cache hydrate). */
-    withNetwork: boolean;
-    /** #2992: cold (full) vs rearm (clock/HEAD refresh without fat path). */
-    ceremonyTier: SessionCeremonyTier;
-    /** #3214: optional dial inputs for ritual-depth selection. */
-    ceremonyDialInputs: CeremonyDialInputs;
-    /**
-     * #3214: force depth for this session only (does not persist policy).
-     * Applied as resolve inputs via a one-shot config override in run().
-     */
-    ceremonyDepthOverride: CeremonyDepth | null;
-    /**
-     * #3266: host/CLI effort-budget cap fields for bank-the-pass guidance.
-     * Merged with DEFT_HOST_EFFORT_BUDGET JSON when present.
-     */
-    effortBudgetHost: {
-        maxTurns?: number;
-        maxBudget?: number;
-        hardBudget?: boolean;
-    };
-    /**
-     * #3286: compact orientation output (terse machine format). Verbose remains
-     * the default; also settable via DEFT_SESSION_COMPACT=1.
-     */
-    compact: boolean;
-    /** #3433: steal the worktree occupancy lease. */
-    steal: boolean;
-    confirm: boolean;
-    occupant: string | null;
-    /**
-     * Trusted primary-claim exception from CLI argv (#4266). Closed enum;
-     * unknown values fail closed (exit 2).
-     */
-    primaryClaimException: PrimaryClaimException | null;
-    /** #3611: explicit lifecycle owner injected by a host hook bridge. */
-    sessionId: string | null;
-    /** Trusted --posture argv (#4444). */
-    posture: SessionPosture | null;
-    error?: string;
-}
-/** Parse session:start CLI args, mirroring scripts/session_start.py. */
-export declare function parseArgs(argv: readonly string[]): ParsedSessionStartArgs;
-/** Native session:start handler (#2032 — replaces framework-commands Python bridge). */
-export declare function run(argv: readonly string[]): number;
-//# sourceMappingURL=session-start.d.ts.map