@felixdotgo/aidlc-kit 0.1.1 → 0.2.0

package/dist/src/state/validate.js

@@ -1,8 +1,18 @@
+import { gates, handoffKinds, phaseGate, phases } from "./domain.js";
+import { assertTaskArtifactPath, idPattern, iso, text } from "./guards.js";
 import { readyTaskItems } from "./items.js";
-import { assertTaskArtifactPath, gates, handoffKinds, idPattern, iso, phases, phaseGate, text } from "./shared.js";
+import { archiveRecordPath } from "./paths.js";
 const taskStatuses = ["active", "blocked_on_user", "paused", "done", "closed", "superseded"];
 export const validateLesson = (taskId, lesson) => {
-    if (!lesson || !idPattern.test(lesson.id) || lesson.taskId !== taskId || !Array.isArray(lesson.areas) || !lesson.areas.length || lesson.areas.some((area) => !text(area)) || !text(lesson.summary) || !text(lesson.prevention) || !text(lesson.example) || !text(lesson.promotion) || !text(lesson.source) || !iso(lesson.recordedAt))
+    if (!lesson)
+        throw new Error(`Invalid lesson: ${taskId}`);
+    if (!idPattern.test(lesson.id) || lesson.taskId !== taskId)
+        throw new Error(`Invalid lesson: ${taskId}`);
+    if (!Array.isArray(lesson.areas) || !lesson.areas.length || lesson.areas.some((area) => !text(area)))
+        throw new Error(`Invalid lesson: ${taskId}`);
+    if (!text(lesson.summary) || !text(lesson.prevention) || !text(lesson.example))
+        throw new Error(`Invalid lesson: ${taskId}`);
+    if (!text(lesson.promotion) || !text(lesson.source) || !iso(lesson.recordedAt))
         throw new Error(`Invalid lesson: ${taskId}`);
 };
 export const validateTask = (id, task) => {
@@ -23,7 +33,13 @@ export const validateTask = (id, task) => {
     if (task.tasks.some((item) => !item.id || !item.label || !["todo", "in_progress", "done", "deferred"].includes(item.status)))
         throw new Error(`Invalid execution tasks: ${id}`);
     readyTaskItems(task);
-    if (task.evidence.some((item) => !["approval", "spec", "test", "lint", "review", "diagnostic"].includes(item.kind) || !["pass", "fail", "skip"].includes(item.result) || !item.source || !iso(item.recordedAt) || (item.area !== undefined && !text(item.area)) || (item.gate !== undefined && !gates.includes(item.gate)) || (item.kind === "approval" && (!item.gate || item.gate === "none"))))
+    if (task.evidence.some((item) => !["approval", "spec", "test", "lint", "review", "diagnostic"].includes(item.kind) ||
+        !["pass", "fail", "skip"].includes(item.result) ||
+        !item.source ||
+        !iso(item.recordedAt) ||
+        (item.area !== undefined && !text(item.area)) ||
+        (item.gate !== undefined && !gates.includes(item.gate)) ||
+        (item.kind === "approval" && (!item.gate || item.gate === "none"))))
         throw new Error(`Invalid evidence: ${id}`);
     const lessonIds = new Set();
     for (const lesson of task.lessons ?? []) {
@@ -32,11 +48,21 @@ export const validateTask = (id, task) => {
             throw new Error(`Duplicate lesson id: ${id}/${lesson.id}`);
         lessonIds.add(lesson.id);
     }
-    if (task.lessonDisposition && (!["captured", "none"].includes(task.lessonDisposition.status) || !text(task.lessonDisposition.source) || !iso(task.lessonDisposition.recordedAt) || (task.lessonDisposition.status === "captured" && !(task.lessons?.length)) || (task.lessonDisposition.status === "none" && (Boolean(task.lessons?.length) || !text(task.lessonDisposition.reason)))))
+    if (task.lessonDisposition && (!["captured", "none"].includes(task.lessonDisposition.status) ||
+        !text(task.lessonDisposition.source) ||
+        !iso(task.lessonDisposition.recordedAt) ||
+        (task.lessonDisposition.status === "captured" && !(task.lessons?.length)) ||
+        (task.lessonDisposition.status === "none" && (Boolean(task.lessons?.length) || !text(task.lessonDisposition.reason)))))
         throw new Error(`Invalid lesson disposition: ${id}`);
     if (task.handoff && (!handoffKinds.includes(task.handoff.kind) || !text(task.handoff.reason) || !text(task.handoff.source) || !iso(task.handoff.recordedAt) || task.status !== "paused"))
         throw new Error(`Invalid task handoff: ${id}`);
-    if (task.legacyG2Wait !== undefined && (typeof task.legacyG2Wait !== "object" || Array.isArray(task.legacyG2Wait) || !iso(task.legacyG2Wait.migratedAt) || !text(task.legacyG2Wait.source) || task.phase !== "build" || task.gate !== "G2_codereview" || task.status !== "blocked_on_user"))
+    if (task.legacyG2Wait !== undefined && (typeof task.legacyG2Wait !== "object" ||
+        Array.isArray(task.legacyG2Wait) ||
+        !iso(task.legacyG2Wait.migratedAt) ||
+        !text(task.legacyG2Wait.source) ||
+        task.phase !== "build" ||
+        task.gate !== "G2_codereview" ||
+        task.status !== "blocked_on_user"))
         throw new Error(`Invalid legacy G2 wait marker: ${id}`);
     if ((task.status === "closed" || task.status === "superseded") !== Boolean(task.closure))
         throw new Error(`Invalid task closure: ${id}`);
@@ -51,7 +77,21 @@ export const validateTask = (id, task) => {
             assertTaskArtifactPath(id, path);
 };
 const validateArchiveSummary = (id, item) => {
-    if (!idPattern.test(id) || !item || item.id !== id || !text(item.title) || !["feature", "bug", "refactor", "infra"].includes(item.type) || !phases.includes(item.phase) || !gates.includes(item.gate) || item.gate !== phaseGate(item.phase) || !["done", "closed", "superseded"].includes(item.status) || !["low", "normal", "high", "regulated"].includes(item.risk) || !Array.isArray(item.areas) || !item.areas.length || item.areas.some((area) => !text(area)) || item.record !== `.agents/data/state/archive/${id}.json` || !/^[a-f0-9]{64}$/.test(item.digest) || !Number.isInteger(item.lessonCount) || item.lessonCount < 0 || !iso(item.createdAt) || !iso(item.updatedAt))
+    if (!idPattern.test(id))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (!item || item.id !== id || !text(item.title))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (!["feature", "bug", "refactor", "infra"].includes(item.type))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (!phases.includes(item.phase) || !gates.includes(item.gate) || item.gate !== phaseGate(item.phase))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (!["done", "closed", "superseded"].includes(item.status) || !["low", "normal", "high", "regulated"].includes(item.risk))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (!Array.isArray(item.areas) || !item.areas.length || item.areas.some((area) => !text(area)))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (item.record !== archiveRecordPath(id) || !/^[a-f0-9]{64}$/.test(item.digest))
+        throw new Error(`Invalid archived task summary: ${id}`);
+    if (!Number.isInteger(item.lessonCount) || item.lessonCount < 0 || !iso(item.createdAt) || !iso(item.updatedAt))
         throw new Error(`Invalid archived task summary: ${id}`);
     if ((item.status === "superseded") !== Boolean(item.successorTaskId) || (item.status === "closed" && item.successorTaskId) || (item.predecessorTaskId !== undefined && !text(item.predecessorTaskId)))
         throw new Error(`Invalid archived task links: ${id}`);
@@ -93,7 +133,10 @@ export const validateState = (value) => {
             if (seen.has(cursor.successorTaskId))
                 throw new Error(`Cyclic successor link: ${id}`);
             seen.add(cursor.successorTaskId);
-            cursor = references[cursor.successorTaskId];
+            const next = references[cursor.successorTaskId];
+            if (!next)
+                throw new Error(`Invalid successor link: ${id}`);
+            cursor = next;
         }
     }
     return state;

package/dist/src/state.d.ts

@@ -2,14 +2,19 @@
  * Facade for the lifecycle-state domain. Behavior-preserving re-export of the
  * split modules under `src/state/`; import paths from outside remain unchanged.
  */
-export * from "./state/shared.js";
-export * from "./state/lock.js";
-export * from "./state/items.js";
-export * from "./state/transitions.js";
-export * from "./state/validate.js";
-export * from "./state/store.js";
-export * from "./state/memory.js";
-export * from "./state/lessons.js";
-export * from "./state/archive.js";
-export * from "./state/lifecycle.js";
-export * from "./state/render.js";
+export { stampLegacyG2Waits, prepareV4Migration, migrateState } from "./state/migrate.js";
+export { taskRecordContent, archivedSummary } from "./state/archive-record.js";
+export { emptyState, legacyG2WaitSource, phases, gates, handoffKinds, terminal, phaseGate, digest } from "./state/domain.js";
+export { iso, text, idPattern, audited, tokens, assertTaskArtifactPath } from "./state/guards.js";
+export { assertNoSymlinkPath, writeAtomic, parseJsonText, parseJsonFile } from "./state/io.js";
+export { type NextAction, readyTaskItems, nextAction } from "./state/items.js";
+export { recordLesson, recordNoLessons, lessonStateDigest, createLessonIndex, rebuildLessonIndex, searchLessons } from "./state/lessons.js";
+export { handoffTask, closeTask, supersedeTask, reopenTask } from "./state/lifecycle.js";
+export { type StateLockOptions, acquireStateLock } from "./state/lock.js";
+export { emptyMemoryRegistry, validateMemoryRegistry, loadMemoryRegistry, saveMemoryRegistry, selectAgenticMemory, promoteAgenticMemory, retireAgenticMemory } from "./state/memory.js";
+export { statePath, lessonIndexPath, memoryRegistryPath, stateLockPath, stateLockGuardPath, archiveRecordPath } from "./state/paths.js";
+export { type TaskSummary, listTaskSummaries, renderWorkplan, renderViews } from "./state/render.js";
+export { pathOverlaps, pathsOverlap, concurrentItemPairs, partitionDiagnostics, loopPartitionStrict, workplanScope } from "./state/partition.js";
+export { loadState, loadTask, saveState } from "./state/store.js";
+export { latestApproval, buildBoundary, hasApproval, hasCurrentBuildApproval, hasAreaVerification, hasVerification, hasReview, type RepairBounds, repairBounds, isLegacyG2Wait, transitionDiagnostics, transitionTask } from "./state/transitions.js";
+export { validateLesson, validateTask, validateState } from "./state/validate.js";

package/dist/src/state.js

@@ -2,14 +2,19 @@
  * Facade for the lifecycle-state domain. Behavior-preserving re-export of the
  * split modules under `src/state/`; import paths from outside remain unchanged.
  */
-export * from "./state/shared.js";
-export * from "./state/lock.js";
-export * from "./state/items.js";
-export * from "./state/transitions.js";
-export * from "./state/validate.js";
-export * from "./state/store.js";
-export * from "./state/memory.js";
-export * from "./state/lessons.js";
-export * from "./state/archive.js";
-export * from "./state/lifecycle.js";
-export * from "./state/render.js";
+export { stampLegacyG2Waits, prepareV4Migration, migrateState } from "./state/migrate.js";
+export { taskRecordContent, archivedSummary } from "./state/archive-record.js";
+export { emptyState, legacyG2WaitSource, phases, gates, handoffKinds, terminal, phaseGate, digest } from "./state/domain.js";
+export { iso, text, idPattern, audited, tokens, assertTaskArtifactPath } from "./state/guards.js";
+export { assertNoSymlinkPath, writeAtomic, parseJsonText, parseJsonFile } from "./state/io.js";
+export { readyTaskItems, nextAction } from "./state/items.js";
+export { recordLesson, recordNoLessons, lessonStateDigest, createLessonIndex, rebuildLessonIndex, searchLessons } from "./state/lessons.js";
+export { handoffTask, closeTask, supersedeTask, reopenTask } from "./state/lifecycle.js";
+export { acquireStateLock } from "./state/lock.js";
+export { emptyMemoryRegistry, validateMemoryRegistry, loadMemoryRegistry, saveMemoryRegistry, selectAgenticMemory, promoteAgenticMemory, retireAgenticMemory } from "./state/memory.js";
+export { statePath, lessonIndexPath, memoryRegistryPath, stateLockPath, stateLockGuardPath, archiveRecordPath } from "./state/paths.js";
+export { listTaskSummaries, renderWorkplan, renderViews } from "./state/render.js";
+export { pathOverlaps, pathsOverlap, concurrentItemPairs, partitionDiagnostics, loopPartitionStrict, workplanScope } from "./state/partition.js";
+export { loadState, loadTask, saveState } from "./state/store.js";
+export { latestApproval, buildBoundary, hasApproval, hasCurrentBuildApproval, hasAreaVerification, hasVerification, hasReview, repairBounds, isLegacyG2Wait, transitionDiagnostics, transitionTask } from "./state/transitions.js";
+export { validateLesson, validateTask, validateState } from "./state/validate.js";

package/dist/src/task-ui.d.ts

@@ -0,0 +1,54 @@
+import { type IncomingMessage, type ServerResponse, type Server } from "node:http";
+export type UiAuthorityMode = "local" | "fleet";
+export interface UiOptions {
+    root: string;
+    host: string;
+    port: number;
+    token?: string;
+    /** Loop authority the dashboard reads and acts on; defaults to `.agents/config.json` `loop.mode` (local unless fleet). */
+    mode?: UiAuthorityMode;
+    /** Fleet reviewer credential held server-side; passed only to the approve child process. */
+    reviewerToken?: string;
+}
+export declare const scrubbedEnv: (extra?: Record<string, string>) => NodeJS.ProcessEnv;
+/**
+ * Fixed token from a file (`--token-file`, `--reviewer-token-file`) so the browser stays signed in across
+ * UI restarts. The file must live outside the project (agents work inside it), be a regular non-symlink
+ * file, and be private to the owner (mode 600/400). With `create`, a missing file is created with a
+ * random token. The token is never passed to the daemon, lead, or workers.
+ */
+export declare const readUiTokenFile: (root: string, path: string, { create }: {
+    create: boolean;
+}) => string;
+/** Best-effort browser launch for `aidlc-kit ui --open`; failures are ignored (the URL is printed anyway). */
+export declare const openBrowser: (url: string) => void;
+/** The configured loop authority: `fleet` only when `loop.mode` says so; everything else reads local state. */
+export declare const resolveUiMode: (root: string) => UiAuthorityMode;
+/** DNS-rebinding and CSRF guard: the Host header must name the bound address (any loopback name when
+ * bound to loopback; a wildcard bind cannot be pinned and relies on the token and Origin check), and a
+ * state-changing request that carries an Origin must be same-origin. */
+export declare const requestAllowed: (options: Pick<UiOptions, "host">, req: IncomingMessage) => {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+export interface DaemonStatus {
+    running: boolean;
+    pid: number | null;
+    startedAt: string | null;
+}
+/** Reads the singleton loop daemon lock written by `loop-daemon.mjs`. */
+export declare const daemonStatus: (root: string) => DaemonStatus;
+/** Renders a small subset of Markdown to escaped HTML. Exported for tests. */
+export declare const markdownToHtml: (markdown: string) => string;
+/** On a fresh connection the SSE stream replays at most this many lines. */
+export declare const SSE_REPLAY_LINES = 200;
+/** Builds the request handler for the UI server (exported for unit tests). */
+export declare const createUiHandler: (options: UiOptions) => (req: IncomingMessage, res: ServerResponse) => void;
+/** Starts the UI HTTP server and resolves once it is listening. */
+export declare const startUiServer: (options: UiOptions) => Promise<{
+    server: Server;
+    port: number;
+    token: string;
+}>;