@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/generators/preset/workspace-files-developer-agent.js

@@ -0,0 +1,511 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEVELOPER_AGENT_WORKSPACE_SEEDED_PATHS = exports.DEVELOPER_AGENT_ADAPTER_EVALUATION_PATH = exports.DEVELOPER_AGENT_HANDOFF_TEMPLATE_PATH = exports.DEVELOPER_AGENT_RUNBOOK_PATH = void 0;
+exports.renderDeveloperAgentWorkspaceFilePlan = renderDeveloperAgentWorkspaceFilePlan;
+const model_js_1 = require("../../developer-agent/model.js");
+exports.DEVELOPER_AGENT_RUNBOOK_PATH = 'docs/developer-agent.md';
+exports.DEVELOPER_AGENT_HANDOFF_TEMPLATE_PATH = 'docs/developer-agent-handoff.template.json';
+exports.DEVELOPER_AGENT_ADAPTER_EVALUATION_PATH = 'docs/developer-agent-adapters.md';
+exports.DEVELOPER_AGENT_WORKSPACE_SEEDED_PATHS = [
+    exports.DEVELOPER_AGENT_RUNBOOK_PATH,
+    exports.DEVELOPER_AGENT_HANDOFF_TEMPLATE_PATH,
+    exports.DEVELOPER_AGENT_ADAPTER_EVALUATION_PATH,
+];
+const HANDOFF_STATE_DESCRIPTIONS = {
+    'implemented-and-verified': 'Implementation and every required verification completed successfully.',
+    'implemented-external-proof-pending': 'Implementation completed, but named protected or external proof remains pending.',
+    'blocked-before-mutation': 'A prerequisite, policy, ownership, marker, or authority blocker stopped work before mutation.',
+    'failed-recovery-complete': 'Execution failed and the recorded recovery completed without pending cleanup.',
+    'failed-recovery-or-cleanup-required': 'Execution failed and named recovery or cleanup work is still required.',
+    'proposal-or-research-only': 'The record contains no implementation or mutation claim.',
+};
+function renderAgentsAppendix(name) {
+    return `## Developer-Agent workflow
+
+The Developer-Agent contract is bounded to the ${name} product and this repository. It does
+not grant authority over another repository, account, environment, or worktree.
+
+Use \`ebk agent context\`, \`ebk agent plan\`, \`ebk agent upgrade-preview\`,
+\`ebk agent handoff\`, and \`ebk agent resume\`; add \`--json\` when a machine-readable
+result is required. Nx remains the graph and target authority: an agent plan is advisory, and
+work runs only through the authenticated owning target, typed Nx generator, bounded EBK
+development command, frozen package-manager command, or plan-derived adopter-owned
+source-edit scope. Protected and destructive operations expose identity and routing only,
+never local command arguments.
+
+External Blueprint receipt review is the one deliberate target exception. Run only
+\`ebk blueprint verification-review\` after the protected static approval; there is no Nx
+receipt target, and an adapter must not invent one. The command leaves unauthoritative
+working-tree receipts for a later protected retention commit. Recurring Blueprint checks
+reported after that commit remain authenticated local-source Nx targets and retain the
+documented same-user installed-toolchain boundary.
+
+Begin and hand off implementation work with
+\`pnpm nx run ${name}:work-markers\`. Verify the affected owner target, then run
+\`pnpm nx run ${name}:verify\` and the workspace \`pnpm verify\` barrier before claiming
+implemented-and-verified.
+
+Use one topic branch and linked worktree per independent change. Stop on stale base,
+overlapping paths or shared external state, ownership or generated drift, invalid policy,
+blocking markers, missing prerequisites, or unknown authority; never merge, rebase, discard,
+or overwrite another worktree automatically.
+
+Local agents may inspect and propose protected work, but staging and production mutation
+belongs to the matching protected GitHub environment and OIDC workflow. Secret values remain
+a human-only TTY ceremony; agents may use only value-blind metadata, status, and verification.
+
+Read \`docs/developer-agent.md\`, \`docs/developer-agent-handoff.template.json\`,
+\`docs/developer-agent-adapters.md\`, \`docs/git-workflow.md\`, and
+\`docs/work-markers.md\` before proceeding.
+`;
+}
+function renderHandoffStates() {
+    return model_js_1.DEVELOPER_AGENT_HANDOFF_STATES.map((state) => `- \`${state}\`: ${HANDOFF_STATE_DESCRIPTIONS[state]}`).join('\n');
+}
+function renderRunbook(name) {
+    return `# Developer-Agent runbook
+
+This is the vendor-neutral Developer-Agent contract for the ${name} repository. The
+repository-local CLI, Nx graph, generated ownership records, installed package versions,
+Blueprint records, Repository Operating Policy, Git state, work markers, and declared
+contracts are the sources of truth. Neither Work Orchestration nor the Operations Console is
+required. A skill, MCP client, IDE, or hosted agent service is optional.
+
+The numeric JSON schema in this runbook is framework-internal and may change before stable v1.
+Do not publish an adapter or treat it as an independent public API until the repository-native
+CLI and Nx contract complete their live pilots.
+
+## Canonical loop
+
+1. Run \`pnpm nx run ${name}:work-markers\`.
+2. Run \`ebk agent context\` to inspect bounded repository, Git, project, ownership, policy,
+   marker, contract, and verification facts. Select an explicit base and head when affected
+   calculation is required. This CLI is the sole full structured context transport. The root
+   \`pnpm nx run ${name}:developer-context\` target is a compatibility and graph-authority
+   route: its human mode emits concise prose, and \`--json\` emits only the canonical context
+   byte length and digest in a bounded fingerprint.
+3. Create one bounded JSON request, then run
+   \`ebk agent plan <request.json>\` for one supported operation and reviewed
+   acceptance-criteria reference. The plan is advisory and grants no execution authority.
+4. Follow only the reported owner and operation:
+   - execute a typed stable Slice, Function, Service, Job, or Upgrade generator with exactly
+     the structured arguments reported by the plan;
+   - execute authenticated read-only, local-source, or development Nx targets;
+   - execute bounded \`ebk dev\` inspection or Slice lifecycle commands;
+   - execute the frozen package installation command;
+   - make an ordinary source edit only within the plan-derived adopter-owned project scope; or
+   - route protected work to the matching GitHub environment and OIDC workflow without
+     receiving local command arguments.
+5. Verify the affected project or owner target, rerun
+   \`pnpm nx run ${name}:work-markers\`, run \`pnpm nx run ${name}:verify\`, and complete
+   \`pnpm verify\` before claiming completion.
+6. Fill an adopter-owned copy of the seeded template, then run
+   \`ebk agent handoff <handoff.json>\` to validate exact resumable state. A different actor
+   uses \`ebk agent resume <handoff.json>\` and must re-inspect current state rather than
+   trust a transcript.
+
+There is no agent command that executes an arbitrary plan. Unknown operations remain
+unsupported until their owning target, command, workflow, or runbook has an exact authenticated
+signature and proof contract. The stable Slice, Function, Service, Job, and Upgrade generators
+have closed typed inputs; arbitrary Blueprint references or inputs, dependency changes other
+than frozen installation, mutable development configuration, and secret set/remove remain
+outside \`ebk agent plan\`. Use their direct typed owner and never infer arguments.
+
+External Blueprint receipt creation is not an Nx target. After protected Git retains the exact
+static generated-content approval, invoke only \`ebk blueprint verification-review\`. The
+dependency-light launcher enters a controlled child and executes the admitted roots directly;
+it leaves receipts uncommitted for a separate protected retention review. Never replace it with
+\`pnpm\`, \`npx\`, an inferred \`nx run\`, a non-workspace shell shim, or an adapter-generated
+command. The installed workspace package-manager shim may enter the launcher, but the controlled
+child never resolves a sensitive executable through that shim or ambient \`PATH\`. Once the
+retained receipt is present in protected history, context may expose its recurring
+verification roots as ordinary authenticated local-source Nx targets. Those recurring runs do
+not inherit the receipt command's stronger clean-child evidence boundary.
+
+The plan request is a regular, non-symlink, workspace-relative JSON file under the generated
+ignored \`.ebk/agent/requests/\` directory. Select an \`operationId\` exactly as reported by
+context:
+
+\`\`\`json
+{
+  "acceptanceCriteriaReference": "GH:123/acceptance-v2",
+  "operationId": "source-edit:${name}",
+  "requestedOutcome": "Edit bounded adopter-owned source",
+  "selectedFiles": ["path/to/adopter-owned-source.ts"]
+}
+\`\`\`
+
+Optional \`assumptions\` remain bounded and explicit. The CLI derives each selected path's
+\`managed\`, \`seeded\`, or \`adopter-owned\` mode from repository ownership records and
+project roots; the request cannot assert it. Cross-project selections, unknown ownership,
+managed or seeded source-edit paths, raw commands, prompts, secret values, absolute paths,
+traversal, and symlink inputs are refused.
+
+Typed generator requests add one closed \`generatorInput\` object and cannot supply
+\`selectedFiles\`. New Slice planning accepts only \`{"generator":"slice","name":"billing"}\`
+and the built-in Standard Blueprint. Function, Service, and Job planning requires exact
+\`generator\`, \`slice\`, \`feature\`, and \`name\` strings which must match inspected
+repository context. Upgrade planning accepts only an existing \`workspace\`, \`foundation\`,
+or Product Slice target:
+
+\`\`\`json
+{
+  "acceptanceCriteriaReference": "GH:123/upgrade-v1",
+  "generatorInput": { "generator": "upgrade", "name": "billing" },
+  "operationId": "generator:upgrade:preview",
+  "requestedOutcome": "Preview the billing ownership upgrade"
+}
+\`\`\`
+
+The Upgrade apply plan requires a schema-valid, caller-retained, digest-bound preview. Run
+\`ebk agent upgrade-preview <request.json> .ebk/agent/previews/<name>.json\` from clean,
+non-stale source, retain the returned digest and reference in the apply request's
+\`generatorInput.preview\`, then invoke only the exact owning Nx command reported by that
+plan. Apply revalidates the artifact and independently re-derives its exact mutation candidate.
+Preview artifacts are non-overwriting, allowlisted, non-secret local files under the
+generated ignored \`.ebk/agent/previews/\` directory. POSIX hosts additionally require
+current-user ownership and private directory/file modes; Windows inherits the repository
+directory ACL because Node does not expose an equivalent ownership check. The artifact binds
+the repository commit, workspace, installed framework candidate, ownership-recorded framework
+and Blueprint versions, and optional candidate provenance. Any changed binding requires a
+new preview.
+
+Atomic hard-link creation selects one publisher without replacing an existing artifact and
+requires no persistent lock that could be orphaned by a terminated process. Deliberate
+same-UID filesystem tampering is outside this v1 control: Node does not expose the fd-relative
+path operations required to make ancestor replacement race-proof, so any detected path or
+ownership change fails closed.
+
+Every typed generator preview is \`local-source\`: even a dry run executes the owning
+generator and may create bounded ignored preview material. An external Blueprint Upgrade
+preview additionally executes the admitted publisher's generator code with supply-chain risk
+under the authority of the invoking process. No preview is a filesystem or network sandbox,
+and none may be reported as read-only proof.
+
+Installing a newer stable framework candidate intentionally creates version drift before
+ownership upgrade. Only the Upgrade operation for the exact target may consume its typed
+version-drift finding, and only in dependency order: workspace, then Foundation, then each
+Product Slice. Every identity disagreement, managed drift, package mismatch, wrong target,
+or prerequisite-layer drift remains blocking. Prerelease consumers regenerate cleanly
+instead of using this stable-line transition as beta compatibility.
+
+Bound inspection with \`--projects=<names>\`, \`--slice=<name>\`, and optional
+\`--feature=<name>\`. Affected inspection requires the complete
+\`--base=<ref> --head=<ref>\` pair; \`--targets=<names>\` is valid only with that pair.
+Reference an existing generated or separately retained candidate document explicitly with
+\`--candidate-provenance=<workspace-relative-path>\`; context records only its path and
+SHA-256 digest, never its contents.
+
+## JSON contract
+
+Add \`--json\` to a canonical command when automation needs structured output. JSON output is
+one bounded, versioned CLI envelope. Route automation on its \`namespace\`, \`command\`,
+\`schemaVersion\`, \`outcome\`, and optional \`failureClassification\`, then validate the
+payload's \`kind\` and \`schemaVersion\`; do not scrape human prose. Arrays representing sets
+are deterministically ordered. Output is allowlisted and excludes environment dumps, secret
+values, file contents, raw logs, prompts, and transcripts. Refer to large or protected
+evidence by bounded path, digest, and privacy class.
+
+Inspection and planning are report-first. A successful context or plan does not prove that
+mutation, verification, cleanup, protected evidence, or approval occurred.
+
+## Stop conditions
+
+Stop before mutation when the command reports invalid input, a dirty worktree, stale base,
+overlapping work, ownership conflict, generated drift, policy conflict, blocking marker,
+missing prerequisite, or required authority. Unknown targets fail closed. Do not repair managed
+output directly, silently adopt another worktree's changes, infer a protected credential, or
+broaden an operation beyond the owning tool.
+
+For development mutation, name the cleanup and recovery owner before execution. For staging or
+production, a local agent stops at report or proposal: mutation belongs only to the matching
+protected GitHub environment and OIDC workflow. Destructive work additionally requires an exact
+target, explicit approval, retained recovery proof, and completed cleanup.
+
+Secret values are entered only through the human TTY ceremony. Agents and CI are limited to
+value-blind secret metadata, status, and verification.
+
+## Handoff and resumption
+
+\`${exports.DEVELOPER_AGENT_HANDOFF_TEMPLATE_PATH}\` is a seeded draft, not a historical handoff. Its
+zero commits and \`REPLACE_WITH_...\` values are sentinels. Do not retain or resume it until every
+sentinel is replaced with inspected state and the handoff command validates the result. Actual
+handoff records are local checkpoint data: store an adopter-owned copy under the generated
+ignored \`.ebk/agent/handoffs/\` directory, never in a managed or tracked source path. Create
+a handoff only at a clean, committed checkpoint. The record binds the exact repository,
+worktree, Nx-default base ref and commit, head commit, selected projects and targets, canonical
+stage, effective policy digest, candidate provenance, Blueprint and framework versions,
+performed operation identities, marker snapshot, external resources, and required verification
+and evidence.
+
+The six honest handoff states are:
+
+${renderHandoffStates()}
+
+\`${exports.DEVELOPER_AGENT_HANDOFF_TEMPLATE_PATH}\` includes one structurally complete,
+proposal-only \`source-edit:${name}\` result. It demonstrates the nested result and
+Testing/Evidence composition without claiming a mutation: its change sets are empty, its
+result is \`incomplete\`, and its required verification is explicitly pending. Delete that
+operation and result when no operation was attempted, or replace every field with facts from
+the inspected plan, owning tool, and evidence producer.
+
+Each retained result must include \`affected\`, \`artifacts\`, \`changes\`, \`cleanup\`,
+\`nextSafeAction\`, \`operation\`, \`outcome\`, \`recovery\`, \`source\`, \`tool\`,
+\`unresolved\`, and \`verification\`; add \`failureClassification\` whenever the result
+contract requires it. Never infer \`succeeded\` from a clean worktree or a command exit alone.
+When proof ran, retain the complete Testing/Evidence result under
+\`testingEvidence.result\`: artifacts, cleanup, counts, environment, findings, retry facts,
+operation and proof layer, outcome and proof-started state, source candidates, timing, and
+workspace identity. Its outer \`reference\`, \`digest\`, and evidence class must match one
+Developer-Agent artifact, and every nested Testing/Evidence artifact must match an outer
+artifact name and digest. Copy producer facts exactly; do not turn blocked, incomplete,
+failed, or flaky proof into passed evidence.
+
+The handoff is a reconciliation record, not a second summary:
+
+- \`operations\` must be exactly the operations represented by \`results\`;
+- \`changedFiles\`, \`changedContracts\`, \`externalState\`, and \`unresolved\` must be the
+  exact unions of their nested result fields;
+- \`requiredVerification\` is the exact executed-or-pending union, and
+  \`requiredVerificationPending\` is the exact omitted union;
+- \`requiredEvidence\` is the exact referenced-or-pending union, and protected or recovery
+  proof remains in \`requiredEvidencePending\` until its semantic validator succeeds; and
+- result source, Testing/Evidence source, framework and Blueprint candidates, project, Slice,
+  stage, target, and proof layer must agree with the retained repository and operation scope.
+
+\`implemented-and-verified\` is unavailable while required verification, external proof,
+cleanup, recovery, or another unresolved item remains pending. A resumed actor runs
+\`ebk agent resume\`, re-inspects every retained binding, rebinds the next operation to the
+current registry, and stops on dirty, stale, contradictory, unsupported, or incomplete state.
+\`implemented-and-verified\` requires succeeded results, executed verification, and ingested
+passed Testing/Evidence. \`implemented-external-proof-pending\` requires an
+\`external-proof-pending\` incomplete result plus the named protected or recovery evidence;
+it cannot hide incomplete cleanup or recovery. \`proposal-or-research-only\` permits only
+blocked or incomplete results and no changed file, contract, external resource, or mutation
+claim.
+Completed generator results retain their effective project, contract, verification, and
+evidence scope plus the closed typed generator identity needed to rebind that scope, but never
+executable argv or arbitrary normalized inputs. A generator cannot be a resumable next action;
+create a fresh typed plan instead.
+
+## Related runbooks
+
+- \`AGENTS.md\`
+- \`docs/architecture.md\`
+- \`docs/git-workflow.md\`
+- \`docs/repository-operating-policy.md\`
+- \`docs/work-markers.md\`
+- \`${exports.DEVELOPER_AGENT_ADAPTER_EVALUATION_PATH}\`
+`;
+}
+function createHandoffTemplate(options) {
+    const testingEvidenceDigest = `sha256:${'0'.repeat(64)}`;
+    const testingEvidenceReference = '.ebk/agent/evidence/REPLACE_WITH_TESTING_EVIDENCE.json';
+    const requiredVerification = `${options.name}:verify`;
+    return {
+        changedContracts: [],
+        changedFiles: [],
+        cleanup: { outcome: 'not-required' },
+        externalProofPending: false,
+        externalState: [],
+        kind: model_js_1.DEVELOPER_AGENT_HANDOFF_KIND,
+        markerSnapshot: [],
+        nextSafeAction: {
+            approvalRequired: false,
+            authority: 'read-only',
+            description: 'Replace every template sentinel, then inspect current context before retaining a handoff.',
+        },
+        operations: [
+            {
+                authority: 'local-source',
+                id: `source-edit:${options.name}`,
+                owner: 'source-edit',
+                scope: {
+                    contracts: [],
+                    evidenceClasses: ['source'],
+                    projects: [options.name],
+                    requiredVerification: [requiredVerification],
+                },
+            },
+        ],
+        recovery: { outcome: 'not-required' },
+        repository: {
+            baseCommit: '0'.repeat(40),
+            baseRef: 'REPLACE_WITH_DEFAULT_BASE_REF',
+            branch: 'REPLACE_WITH_BRANCH',
+            headCommit: '0'.repeat(40),
+            identity: options.name,
+            worktree: 'REPLACE_WITH_ABSOLUTE_WORKTREE',
+        },
+        requiredEvidence: ['source'],
+        requiredEvidencePending: [],
+        requiredVerification: [requiredVerification],
+        requiredVerificationPending: [requiredVerification],
+        results: [
+            {
+                affected: {
+                    contracts: [],
+                    projects: [options.name],
+                },
+                artifacts: [
+                    {
+                        digest: testingEvidenceDigest,
+                        evidenceClass: 'source',
+                        name: 'testing-evidence-result.json',
+                        privacyClass: 'repository-internal',
+                        reference: testingEvidenceReference,
+                    },
+                ],
+                changes: {
+                    externalResources: [],
+                    files: [],
+                },
+                cleanup: { outcome: 'not-required' },
+                kind: model_js_1.DEVELOPER_AGENT_RESULT_KIND,
+                nextSafeAction: {
+                    approvalRequired: false,
+                    authority: 'read-only',
+                    description: 'Replace the proposal-only example with inspected facts or remove it.',
+                },
+                operation: {
+                    name: `source-edit:${options.name}`,
+                    normalizedInputs: [],
+                },
+                outcome: 'incomplete',
+                recovery: { outcome: 'not-required' },
+                schemaVersion: model_js_1.DEVELOPER_AGENT_CONTRACT_SCHEMA_VERSION,
+                source: {
+                    commit: '0'.repeat(40),
+                    worktree: 'REPLACE_WITH_ABSOLUTE_WORKTREE',
+                },
+                testingEvidence: {
+                    digest: testingEvidenceDigest,
+                    reference: testingEvidenceReference,
+                    result: {
+                        artifacts: [],
+                        cleanup: { outcome: 'not-required' },
+                        counts: {
+                            failed: 0,
+                            passed: 1,
+                            quarantined: 0,
+                            retried: 0,
+                            skipped: 0,
+                        },
+                        environment: {
+                            class: 'local',
+                            deployed: false,
+                        },
+                        findings: [],
+                        identicalRetry: false,
+                        kind: 'testing-evidence-result',
+                        operation: {
+                            commandVersion: 'REPLACE_WITH_COMMAND_VERSION',
+                            project: options.name,
+                            proofLayer: 'source',
+                            target: 'verify',
+                        },
+                        outcome: 'passed',
+                        proofStarted: true,
+                        retryChangedOutcome: false,
+                        schemaVersion: model_js_1.DEVELOPER_AGENT_TESTING_EVIDENCE_SCHEMA_VERSION,
+                        source: {
+                            blueprintCandidates: [],
+                            commit: '0'.repeat(40),
+                            frameworkCandidate: `@empire-builder-kit/nx@${options.frameworkVersion}`,
+                        },
+                        timing: {
+                            completedAt: '2026-01-01T00:00:01.000Z',
+                            durationMs: 1000,
+                            startedAt: '2026-01-01T00:00:00.000Z',
+                        },
+                        workspace: options.name,
+                    },
+                    schemaVersion: model_js_1.DEVELOPER_AGENT_TESTING_EVIDENCE_SCHEMA_VERSION,
+                },
+                tool: {
+                    contractVersion: model_js_1.DEVELOPER_AGENT_CONTRACT_SCHEMA_VERSION,
+                    name: 'source-edit',
+                    version: options.frameworkVersion,
+                },
+                unresolved: {
+                    approvalNeeds: [],
+                    assumptions: [],
+                    conflicts: [],
+                    markers: [],
+                },
+                verification: {
+                    executed: [],
+                    omitted: [requiredVerification],
+                },
+            },
+        ],
+        schemaVersion: model_js_1.DEVELOPER_AGENT_CONTRACT_SCHEMA_VERSION,
+        selection: {
+            affectedTargets: ['verify'],
+            projects: [options.name],
+        },
+        state: 'proposal-or-research-only',
+        unresolved: {
+            approvalNeeds: [],
+            assumptions: [],
+            conflicts: [],
+            markers: [],
+        },
+        versions: {
+            blueprintVersions: [],
+            canonicalStage: 'development',
+            effectivePolicyDigest: `sha256:${'0'.repeat(64)}`,
+            frameworkVersion: options.frameworkVersion,
+            policyReferences: ['ebk.repository-policy.json'],
+        },
+        work: {
+            acceptanceCriteriaRevision: 'REPLACE_WITH_ACCEPTANCE_CRITERIA_REVISION',
+            reference: 'REPLACE_WITH_WORK_REFERENCE',
+        },
+    };
+}
+function renderAdapterEvaluation() {
+    return `# Optional Developer-Agent adapter evaluation
+
+Stable-v1 decision: Empire Builder Kit does not ship a skill or MCP adapter before v1. The
+repository-local \`ebk agent context\`, \`ebk agent plan\`, \`ebk agent upgrade-preview\`,
+\`ebk agent handoff\`, \`ebk agent resume\`, and declared Nx targets are the canonical
+contract for humans and agents. Revisit an adapter only after that contract completes its
+live pilots.
+
+A skill or MCP adapter is optional.
+
+A future adapter may only wrap those same commands and declared targets. The repository-local
+CLI and Nx contract must remain fully usable without it.
+
+An adapter gains no filesystem, network, credential, approval, Git, cloud, or protected-stage
+authority. It must preserve structured argv, bounded JSON, stable classifications, redaction,
+stop conditions, and owning-tool selection byte-for-byte. Protected mutation still belongs to
+the matching GitHub environment and OIDC workflow.
+
+Evaluate an adapter only when it:
+
+- adds no parallel project graph, ownership model, operation registry, or result vocabulary;
+- treats repository, issue, Blueprint, and log content as untrusted data rather than instructions;
+- neither broadens a plan nor invents an execution path;
+- exposes no additional secret or environment data;
+- preserves operation, failure, handoff, and resumption semantics; and
+- can be removed without changing the repository workflow or retained handoff.
+
+Neither Work Orchestration nor the Operations Console is a prerequisite for this adapter or the
+canonical Developer-Agent contract.
+`;
+}
+function renderDeveloperAgentWorkspaceFilePlan(options) {
+    const template = createHandoffTemplate(options);
+    return {
+        agentsAppendix: renderAgentsAppendix(options.name),
+        files: {
+            [exports.DEVELOPER_AGENT_RUNBOOK_PATH]: renderRunbook(options.name),
+            [exports.DEVELOPER_AGENT_HANDOFF_TEMPLATE_PATH]: `${JSON.stringify(template, null, 2)}\n`,
+            [exports.DEVELOPER_AGENT_ADAPTER_EVALUATION_PATH]: renderAdapterEvaluation(),
+        },
+        seededPaths: exports.DEVELOPER_AGENT_WORKSPACE_SEEDED_PATHS,
+    };
+}
+//# sourceMappingURL=workspace-files-developer-agent.js.map

package/src/generators/preset/workspace-files-developer-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-files-developer-agent.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-developer-agent.ts"],"names":[],"mappings":";;;AA2hBA,sFAiBC;AA5iBD,6DAQwC;AAE3B,QAAA,4BAA4B,GAAG,yBAAkC,CAAC;AAClE,QAAA,qCAAqC,GAChD,4CAAqD,CAAC;AAC3C,QAAA,uCAAuC,GAClD,kCAA2C,CAAC;AAEjC,QAAA,sCAAsC,GAAG;IACpD,oCAA4B;IAC5B,6CAAqC;IACrC,+CAAuC;CAC/B,CAAC;AAeX,MAAM,0BAA0B,GAAG;IACjC,0BAA0B,EACxB,wEAAwE;IAC1E,oCAAoC,EAClC,kFAAkF;IACpF,yBAAyB,EACvB,+FAA+F;IACjG,0BAA0B,EACxB,+EAA+E;IACjF,qCAAqC,EACnC,wEAAwE;IAC1E,2BAA2B,EACzB,0DAA0D;CACC,CAAC;AAEhE,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO;;iDAEwC,IAAI;;;;;;;;;;;;;;;;;;;gBAmBrC,IAAI;gBACJ,IAAI;;;;;;;;;;;;;;;CAenB,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,yCAA8B,CAAC,GAAG,CACvC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO;;8DAEqD,IAAI;;;;;;;;;;;;uBAY3C,IAAI;;;;mBAIR,IAAI;;;;;;;;;;;;;;;;mBAgBJ,IAAI,sCAAsC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAgCjC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkGhC,6CAAqC;;;;;;;;;;;;;EAavC,mBAAmB,EAAE;;IAEnB,6CAAqC;8BACX,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAoD5B,+CAAuC;CAC5C,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA2C;IAE3C,MAAM,qBAAqB,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACzD,MAAM,wBAAwB,GAC5B,wDAAwD,CAAC;IAC3D,MAAM,oBAAoB,GAAG,GAAG,OAAO,CAAC,IAAI,SAAS,CAAC;IACtD,OAAO;QACL,gBAAgB,EAAE,EAAE;QACpB,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QACpC,oBAAoB,EAAE,KAAK;QAC3B,aAAa,EAAE,EAAE;QACjB,IAAI,EAAE,uCAA4B;QAClC,cAAc,EAAE,EAAE;QAClB,cAAc,EAAE;YACd,gBAAgB,EAAE,KAAK;YACvB,SAAS,EAAE,WAAW;YACtB,WAAW,EACT,2FAA2F;SAC9F;QACD,UAAU,EAAE;YACV;gBACE,SAAS,EAAE,cAAc;gBACzB,EAAE,EAAE,eAAe,OAAO,CAAC,IAAI,EAAE;gBACjC,KAAK,EAAE,aAAa;gBACpB,KAAK,EAAE;oBACL,SAAS,EAAE,EAAE;oBACb,eAAe,EAAE,CAAC,QAAQ,CAAC;oBAC3B,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;oBACxB,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;iBAC7C;aACF;SACF;QACD,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QACrC,UAAU,EAAE;YACV,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,+BAA+B;YACxC,MAAM,EAAE,qBAAqB;YAC7B,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,QAAQ,EAAE,OAAO,CAAC,IAAI;YACtB,QAAQ,EAAE,gCAAgC;SAC3C;QACD,gBAAgB,EAAE,CAAC,QAAQ,CAAC;QAC5B,uBAAuB,EAAE,EAAE;QAC3B,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;QAC5C,2BAA2B,EAAE,CAAC,oBAAoB,CAAC;QACnD,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE;oBACR,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;iBACzB;gBACD,SAAS,EAAE;oBACT;wBACE,MAAM,EAAE,qBAAqB;wBAC7B,aAAa,EAAE,QAAQ;wBACvB,IAAI,EAAE,8BAA8B;wBACpC,YAAY,EAAE,qBAAqB;wBACnC,SAAS,EAAE,wBAAwB;qBACpC;iBACF;gBACD,OAAO,EAAE;oBACP,iBAAiB,EAAE,EAAE;oBACrB,KAAK,EAAE,EAAE;iBACV;gBACD,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;gBACpC,IAAI,EAAE,sCAA2B;gBACjC,cAAc,EAAE;oBACd,gBAAgB,EAAE,KAAK;oBACvB,SAAS,EAAE,WAAW;oBACtB,WAAW,EACT,sEAAsE;iBACzE;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,eAAe,OAAO,CAAC,IAAI,EAAE;oBACnC,gBAAgB,EAAE,EAAE;iBACrB;gBACD,OAAO,EAAE,YAAY;gBACrB,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;gBACrC,aAAa,EAAE,kDAAuC;gBACtD,MAAM,EAAE;oBACN,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtB,QAAQ,EAAE,gCAAgC;iBAC3C;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,qBAAqB;oBAC7B,SAAS,EAAE,wBAAwB;oBACnC,MAAM,EAAE;wBACN,SAAS,EAAE,EAAE;wBACb,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;wBACpC,MAAM,EAAE;4BACN,MAAM,EAAE,CAAC;4BACT,MAAM,EAAE,CAAC;4BACT,WAAW,EAAE,CAAC;4BACd,OAAO,EAAE,CAAC;4BACV,OAAO,EAAE,CAAC;yBACX;wBACD,WAAW,EAAE;4BACX,KAAK,EAAE,OAAO;4BACd,QAAQ,EAAE,KAAK;yBAChB;wBACD,QAAQ,EAAE,EAAE;wBACZ,cAAc,EAAE,KAAK;wBACrB,IAAI,EAAE,yBAAyB;wBAC/B,SAAS,EAAE;4BACT,cAAc,EAAE,8BAA8B;4BAC9C,OAAO,EAAE,OAAO,CAAC,IAAI;4BACrB,UAAU,EAAE,QAAQ;4BACpB,MAAM,EAAE,QAAQ;yBACjB;wBACD,OAAO,EAAE,QAAQ;wBACjB,YAAY,EAAE,IAAI;wBAClB,mBAAmB,EAAE,KAAK;wBAC1B,aAAa,EAAE,0DAA+C;wBAC9D,MAAM,EAAE;4BACN,mBAAmB,EAAE,EAAE;4BACvB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;4BACtB,kBAAkB,EAAE,0BAA0B,OAAO,CAAC,gBAAgB,EAAE;yBACzE;wBACD,MAAM,EAAE;4BACN,WAAW,EAAE,0BAA0B;4BACvC,UAAU,EAAE,IAAI;4BAChB,SAAS,EAAE,0BAA0B;yBACtC;wBACD,SAAS,EAAE,OAAO,CAAC,IAAI;qBACxB;oBACD,aAAa,EAAE,0DAA+C;iBAC/D;gBACD,IAAI,EAAE;oBACJ,eAAe,EAAE,kDAAuC;oBACxD,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,OAAO,CAAC,gBAAgB;iBAClC;gBACD,UAAU,EAAE;oBACV,aAAa,EAAE,EAAE;oBACjB,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,EAAE;iBACZ;gBACD,YAAY,EAAE;oBACZ,QAAQ,EAAE,EAAE;oBACZ,OAAO,EAAE,CAAC,oBAAoB,CAAC;iBAChC;aACF;SACF;QACD,aAAa,EAAE,kDAAuC;QACtD,SAAS,EAAE;YACT,eAAe,EAAE,CAAC,QAAQ,CAAC;YAC3B,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACzB;QACD,KAAK,EAAE,2BAA2B;QAClC,UAAU,EAAE;YACV,aAAa,EAAE,EAAE;YACjB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;QACD,QAAQ,EAAE;YACR,iBAAiB,EAAE,EAAE;YACrB,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YACjD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,gBAAgB,EAAE,CAAC,4BAA4B,CAAC;SACjD;QACD,IAAI,EAAE;YACJ,0BAA0B,EAAE,2CAA2C;YACvE,SAAS,EAAE,6BAA6B;SACzC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BR,CAAC;AACF,CAAC;AAED,SAAgB,qCAAqC,CACnD,OAA2C;IAE3C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO;QACL,cAAc,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE;YACL,CAAC,oCAA4B,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3D,CAAC,6CAAqC,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CACxD,QAAQ,EACR,IAAI,EACJ,CAAC,CACF,IAAI;YACL,CAAC,+CAAuC,CAAC,EAAE,uBAAuB,EAAE;SACrE;QACD,WAAW,EAAE,8CAAsC;KACpD,CAAC;AACJ,CAAC"}

package/src/generators/preset/workspace-files-foundation-workload-roles.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Renders the Foundation's single generated workload role. It stays separate
+ * from the broad workspace template so candidate, preflight, and injection
+ * semantics can be inspected without parsing unrelated Foundation resources.
+ */
+export declare function renderFoundationWorkloadRoleFiles(): Readonly<Record<string, string>>;