@formigio/fazemos-cli 0.10.67 → 0.10.75

package/dist/pause.js

@@ -33,17 +33,26 @@ import { api } from './api.js';
  *   (both)           → error: mutually exclusive
  */
 function resolveScope(opts) {
-    if (opts.role && opts.stream) {
+    // Test for PRESENCE, not truthiness. `--role ""` (the standard agent idiom
+    // `--role "$ROLE"` with an unset shell variable) yields '', which is falsy —
+    // so the old `if (opts.role)` skipped the branch entirely, the empty-string
+    // guard below was unreachable, and control fell through to `scope: 'global'`.
+    // A typo'd variable silently escalated a per-role pause into an ORG-WIDE one.
+    const hasRole = opts.role !== undefined;
+    const hasStream = opts.stream !== undefined;
+    if (hasRole && hasStream) {
         throw new Error('--role and --stream are mutually exclusive; specify at most one.');
     }
-    if (opts.role) {
-        if (!opts.role.trim())
-            throw new Error('--role cannot be empty');
+    if (hasRole) {
+        if (!opts.role.trim()) {
+            throw new Error('--role was given an empty value. Omit --role for a global pause.');
+        }
         return { scope: 'role', scope_key: opts.role.trim().toLowerCase() };
     }
-    if (opts.stream) {
-        if (!opts.stream.trim())
-            throw new Error('--stream cannot be empty');
+    if (hasStream) {
+        if (!opts.stream.trim()) {
+            throw new Error('--stream was given an empty value. Omit --stream for a global pause.');
+        }
         return { scope: 'stream', scope_key: opts.stream.trim() };
     }
     return { scope: 'global' };
@@ -83,12 +92,26 @@ export function registerPauseCommands(program) {
         'Requires admin or owner role. --reason is mandatory (audit trail).')
         .option('--role <slug>', 'pause a specific agent role (lower-cased role-slug)')
         .option('--stream <pipeline-instance-id>', 'pause a specific pipeline instance stream')
-        .requiredOption('--reason <text>', 'reason for the pause (required for audit trail)')
+        // NOT requiredOption: commander checks ancestors for missing mandatory
+        // options, so a required --reason here fires on `fazemos pause status`
+        // too — the documented read path errored out demanding a value it then
+        // discarded. Enforced in the action instead.
+        .option('--reason <text>', 'reason for the pause (required for audit trail)')
         .option('--json', 'output machine-readable JSON')
+        // SECURITY: `pause` carries BOTH this action and a `status` subcommand.
+        // Commander dispatches to a subcommand only when operands[0] matches one;
+        // otherwise it runs the PARENT action and drops the stray operand. So
+        // `fazemos pause resume --reason x`, `pause off`, or any typo silently
+        // SET AN ORG-WIDE PAUSE blocking every agent launch, and exited 0.
+        // Refusing excess operands turns those into a usage error.
+        .allowExcessArguments(false)
         .action(async (opts) => {
         try {
+            if (!opts.reason || !opts.reason.trim()) {
+                throw new Error("--reason is required when setting a pause (audit trail). To read current pauses use 'fazemos pause status'.");
+            }
             const { scope, scope_key } = resolveScope(opts);
-            const body = { scope, reason: opts.reason };
+            const body = { scope, reason: opts.reason.trim() };
             if (scope_key !== undefined)
                 body.scope_key = scope_key;
             const data = await api('POST', '/api/control-plane/pause', body, {
@@ -172,12 +195,20 @@ export function registerPauseCommands(program) {
         'Requires admin or owner role. --reason is mandatory (audit trail).')
         .option('--role <slug>', 'clear the pause for a specific agent role')
         .option('--stream <pipeline-instance-id>', 'clear the pause for a specific pipeline instance')
-        .requiredOption('--reason <text>', 'reason for the resume (maps to clear_reason; required for audit)')
+        .option('--reason <text>', 'reason for the resume (maps to clear_reason; required for audit)')
         .option('--json', 'output machine-readable JSON')
+        // Mirrors the pause guard: `fazemos resume status --reason x` used to CLEAR
+        // a pause rather than read one. resume hosts no subcommands today, but the
+        // stray-operand refusal is what makes a typo a usage error instead of a
+        // fleet-wide control-plane write.
+        .allowExcessArguments(false)
         .action(async (opts) => {
         try {
+            if (!opts.reason || !opts.reason.trim()) {
+                throw new Error('--reason is required when clearing a pause (audit trail).');
+            }
             const { scope, scope_key } = resolveScope(opts);
-            const body = { scope, clear_reason: opts.reason };
+            const body = { scope, clear_reason: opts.reason.trim() };
             if (scope_key !== undefined)
                 body.scope_key = scope_key;
             const data = await api('DELETE', '/api/control-plane/pause', body, {

package/dist/pause.js.map

@@ -1 +1 @@
-{"version":3,"file":"pause.js","sourceRoot":"","sources":["../src/pause.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,gFAAgF;AAChF,qEAAqE;AACrE,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAkB/B;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAwC;IAI5D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,sDAAsD;AACtD,SAAS,UAAU,CAAC,KAAiB,EAAE,SAAyB;IAC9D,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;IACrE,OAAO,WAAW,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,kFAAkF;AAElF;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IAEpD,gFAAgF;IAChF,EAAE;IACF,sEAAsE;IACtE,EAAE;IACF,SAAS;IACT,mDAAmD;IACnD,uEAAuE;IACvE,+EAA+E;IAC/E,kCAAkC;IAElC,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CACV,2EAA2E;QAC3E,8DAA8D;QAC9D,uDAAuD;QACvD,WAAW;QACX,2EAA2E;QAC3E,wEAAwE;QACxE,kFAAkF;QAClF,oEAAoE,CACrE;SACA,MAAM,CAAC,eAAe,EAAE,qDAAqD,CAAC;SAC9E,MAAM,CAAC,iCAAiC,EAAE,2CAA2C,CAAC;SACtF,cAAc,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;SACpF,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAwE,EAAE,EAAE;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,IAAI,GAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACpE,IAAI,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAExD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE;gBAC/D,eAAe,EAAE,IAAI;aACtB,CAAwB,CAAC;YAE1B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAE9E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,8CAA8C;QAC9C,+EAA+E;QAC/E,yCAAyC,CAC1C;SACA,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE;gBACnE,eAAe,EAAE,IAAI;aACtB,CAA2B,CAAC;YAE7B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,SAAS,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,gFAAgF;IAChF,EAAE;IACF,0EAA0E;IAC1E,mDAAmD;IACnD,EAAE;IACF,SAAS;IACT,wCAAwC;IACxC,gEAAgE;IAChE,iFAAiF;IAEjF,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,6EAA6E;QAC7E,6EAA6E;QAC7E,yEAAyE;QACzE,4CAA4C;QAC5C,WAAW;QACX,6CAA6C;QAC7C,+CAA+C;QAC/C,mDAAmD;QACnD,oEAAoE,CACrE;SACA,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC;SACpE,MAAM,CAAC,iCAAiC,EAAE,kDAAkD,CAAC;SAC7F,cAAc,CAAC,iBAAiB,EAAE,kEAAkE,CAAC;SACrG,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAwE,EAAE,EAAE;QACzF,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,IAAI,GAA2B,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1E,IAAI,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAExD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,0BAA0B,EAAE,IAAI,EAAE;gBACjE,eAAe,EAAE,IAAI;aACtB,CAA4C,CAAC;YAE9C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC5D,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,0CAA0C,CAAC,CAAC;gBAC5G,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"pause.js","sourceRoot":"","sources":["../src/pause.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,gFAAgF;AAChF,qEAAqE;AACrE,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAkB/B;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAwC;IAI5D,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;IAE5C,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,IAAI,CAAC,IAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,IAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,MAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,sDAAsD;AACtD,SAAS,UAAU,CAAC,KAAiB,EAAE,SAAyB;IAC9D,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;IACrE,OAAO,WAAW,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,kFAAkF;AAElF;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IAEpD,gFAAgF;IAChF,EAAE;IACF,sEAAsE;IACtE,EAAE;IACF,SAAS;IACT,mDAAmD;IACnD,uEAAuE;IACvE,+EAA+E;IAC/E,kCAAkC;IAElC,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CACV,2EAA2E;QAC3E,8DAA8D;QAC9D,uDAAuD;QACvD,WAAW;QACX,2EAA2E;QAC3E,wEAAwE;QACxE,kFAAkF;QAClF,oEAAoE,CACrE;SACA,MAAM,CAAC,eAAe,EAAE,qDAAqD,CAAC;SAC9E,MAAM,CAAC,iCAAiC,EAAE,2CAA2C,CAAC;QACvF,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,6CAA6C;SAC5C,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;SAC5E,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;QACjD,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,mEAAmE;QACnE,2DAA2D;SAC1D,oBAAoB,CAAC,KAAK,CAAC;SAC3B,MAAM,CAAC,KAAK,EAAE,IAAyE,EAAE,EAAE;QAC1F,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,IAAI,GAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3E,IAAI,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAExD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE;gBAC/D,eAAe,EAAE,IAAI;aACtB,CAAwB,CAAC;YAE1B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAE9E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,8CAA8C;QAC9C,+EAA+E;QAC/E,yCAAyC,CAC1C;SACA,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE;gBACnE,eAAe,EAAE,IAAI;aACtB,CAA2B,CAAC;YAE7B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,SAAS,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,gFAAgF;IAChF,EAAE;IACF,0EAA0E;IAC1E,mDAAmD;IACnD,EAAE;IACF,SAAS;IACT,wCAAwC;IACxC,gEAAgE;IAChE,iFAAiF;IAEjF,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,6EAA6E;QAC7E,6EAA6E;QAC7E,yEAAyE;QACzE,4CAA4C;QAC5C,WAAW;QACX,6CAA6C;QAC7C,+CAA+C;QAC/C,mDAAmD;QACnD,oEAAoE,CACrE;SACA,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC;SACpE,MAAM,CAAC,iCAAiC,EAAE,kDAAkD,CAAC;SAC7F,MAAM,CAAC,iBAAiB,EAAE,kEAAkE,CAAC;SAC7F,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;QACjD,4EAA4E;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,kCAAkC;SACjC,oBAAoB,CAAC,KAAK,CAAC;SAC3B,MAAM,CAAC,KAAK,EAAE,IAAyE,EAAE,EAAE;QAC1F,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,IAAI,GAA2B,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACjF,IAAI,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAExD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,0BAA0B,EAAE,IAAI,EAAE;gBACjE,eAAe,EAAE,IAAI;aACtB,CAA4C,CAAC;YAE9C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC5D,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,0CAA0C,CAAC,CAAC;gBAC5G,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/preflight/repoRead.d.ts

@@ -0,0 +1,65 @@
+/**
+ * F53 D3 — Remote workspace repo file reads via the operator's `gh` CLI.
+ *
+ * Row 3 checks (persona, playbook, roles.json entry) are verified against
+ * `origin/main` of the workspace repo — not the local working copy — so
+ * an uncommitted state doesn't produce false PASSes or FAILes.
+ */
+export interface RepoRef {
+    owner: string;
+    repo: string;
+    ref: string;
+}
+/**
+ * Parse a git remote URL into { owner, repo }.
+ * Handles HTTPS (https://github.com/owner/repo.git) and SSH (git@github.com:owner/repo.git).
+ */
+export declare function parseGitHubUrl(url: string): {
+    owner: string;
+    repo: string;
+} | null;
+/**
+ * Resolve the GitHub owner/repo for a workspace by reading its git remote origin URL.
+ * Returns null if the workspace is not a GitHub repo or git is not available.
+ */
+export declare function getWorkspaceGitHubRepo(workspaceRoot: string): RepoRef | null;
+/**
+ * Check if `gh` CLI is installed and authenticated.
+ * Throws ToolingError if not.
+ */
+export declare function checkGhAvailable(): void;
+/**
+ * Check if a file exists in the GitHub repo at origin/main.
+ * Calls `gh api` to query the Contents API.
+ * Returns true if file exists, false if 404.
+ * Throws ToolingError if gh fails for any other reason.
+ */
+export declare function checkFileExistsOnGitHub(repoRef: RepoRef, filePath: string): boolean;
+/**
+ * Get file size in bytes from the GitHub repo at origin/main.
+ * Returns null if the file is not found (404).
+ * Returns 0 if the file exists but is empty.
+ * Throws ToolingError if gh fails for any other reason.
+ */
+export declare function getFileSizeOnGitHub(repoRef: RepoRef, filePath: string): number | null;
+/**
+ * List filenames in a directory on GitHub at origin/main.
+ * Returns null if the path is not found (404) or if the path is a file (not a dir).
+ * Returns an array of filenames if the path is a directory.
+ * Throws ToolingError if gh fails for any other reason.
+ */
+export declare function listDirectoryFilenamesOnGitHub(repoRef: RepoRef, dirPath: string): string[] | null;
+/**
+ * Get the full decoded text content of a file from the GitHub repo at origin/main.
+ * Returns null if the file is not found (404).
+ * Throws ToolingError if gh fails for any other reason.
+ *
+ * The GitHub Contents API returns base64-encoded content (≤1 MB). We decode it
+ * in Node.js after receiving the raw base64 string from gh. This is a content
+ * fetch (not just metadata), which is appropriate for the row-3a body check —
+ * persona files are small markdown docs and the extra payload is negligible.
+ */
+export declare function getFileContentOnGitHub(repoRef: RepoRef, filePath: string): string | null;
+export declare class ToolingError extends Error {
+    constructor(message: string);
+}

package/dist/preflight/repoRead.js

@@ -0,0 +1,194 @@
+/**
+ * F53 D3 — Remote workspace repo file reads via the operator's `gh` CLI.
+ *
+ * Row 3 checks (persona, playbook, roles.json entry) are verified against
+ * `origin/main` of the workspace repo — not the local working copy — so
+ * an uncommitted state doesn't produce false PASSes or FAILes.
+ */
+import { execSync } from 'child_process';
+/**
+ * Parse a git remote URL into { owner, repo }.
+ * Handles HTTPS (https://github.com/owner/repo.git) and SSH (git@github.com:owner/repo.git).
+ */
+export function parseGitHubUrl(url) {
+    // HTTPS
+    const httpsMatch = url.match(/github\.com\/([^/]+)\/([^/.]+?)(?:\.git)?\s*$/);
+    if (httpsMatch)
+        return { owner: httpsMatch[1], repo: httpsMatch[2] };
+    // SSH
+    const sshMatch = url.match(/github\.com:([^/]+)\/([^/.]+?)(?:\.git)?\s*$/);
+    if (sshMatch)
+        return { owner: sshMatch[1], repo: sshMatch[2] };
+    return null;
+}
+/**
+ * Resolve the GitHub owner/repo for a workspace by reading its git remote origin URL.
+ * Returns null if the workspace is not a GitHub repo or git is not available.
+ */
+export function getWorkspaceGitHubRepo(workspaceRoot) {
+    try {
+        const url = execSync('git config --get remote.origin.url', {
+            cwd: workspaceRoot,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        const parsed = parseGitHubUrl(url);
+        if (!parsed)
+            return null;
+        return { ...parsed, ref: 'main' };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if `gh` CLI is installed and authenticated.
+ * Throws ToolingError if not.
+ */
+export function checkGhAvailable() {
+    try {
+        execSync('gh auth status', {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            encoding: 'utf-8',
+        });
+    }
+    catch (err) {
+        const msg = String(err.stderr ?? err.stdout ?? err.message ?? '');
+        if (msg.includes('not logged into any') || msg.includes('not logged in') || msg.includes('You are not logged')) {
+            throw new ToolingError('gh CLI is not authenticated. Run: gh auth login');
+        }
+        throw new ToolingError('gh CLI is not installed or not in PATH. Install with: brew install gh && gh auth login');
+    }
+}
+/**
+ * Check if a file exists in the GitHub repo at origin/main.
+ * Calls `gh api` to query the Contents API.
+ * Returns true if file exists, false if 404.
+ * Throws ToolingError if gh fails for any other reason.
+ */
+export function checkFileExistsOnGitHub(repoRef, filePath) {
+    // Encode the path for the URL, but keep slashes
+    const encodedPath = filePath.split('/').map(encodeURIComponent).join('/');
+    const url = `repos/${repoRef.owner}/${repoRef.repo}/contents/${encodedPath}?ref=${repoRef.ref}`;
+    try {
+        execSync(`gh api "${url}" --jq '.type'`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return true;
+    }
+    catch (err) {
+        const stderr = String(err.stderr ?? '');
+        const stdout = String(err.stdout ?? '');
+        if (stderr.includes('Not Found') ||
+            stderr.includes('404') ||
+            stdout.includes('Not Found') ||
+            stdout.includes('"Not Found"')) {
+            return false;
+        }
+        // Other error — gh broken or auth issue
+        const detail = (stderr || stdout || String(err.message ?? '')).trim();
+        throw new ToolingError(`gh api call failed for ${filePath}: ${detail}`);
+    }
+}
+/**
+ * Get file size in bytes from the GitHub repo at origin/main.
+ * Returns null if the file is not found (404).
+ * Returns 0 if the file exists but is empty.
+ * Throws ToolingError if gh fails for any other reason.
+ */
+export function getFileSizeOnGitHub(repoRef, filePath) {
+    const encodedPath = filePath.split('/').map(encodeURIComponent).join('/');
+    const url = `repos/${repoRef.owner}/${repoRef.repo}/contents/${encodedPath}?ref=${repoRef.ref}`;
+    try {
+        const result = execSync(`gh api "${url}" --jq '.size'`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        const size = parseInt(result, 10);
+        return isNaN(size) ? 0 : size;
+    }
+    catch (err) {
+        const stderr = String(err.stderr ?? '');
+        const stdout = String(err.stdout ?? '');
+        if (stderr.includes('Not Found') ||
+            stderr.includes('404') ||
+            stdout.includes('Not Found') ||
+            stdout.includes('"Not Found"')) {
+            return null;
+        }
+        const detail = (stderr || stdout || String(err.message ?? '')).trim();
+        throw new ToolingError(`gh api call failed for ${filePath}: ${detail}`);
+    }
+}
+/**
+ * List filenames in a directory on GitHub at origin/main.
+ * Returns null if the path is not found (404) or if the path is a file (not a dir).
+ * Returns an array of filenames if the path is a directory.
+ * Throws ToolingError if gh fails for any other reason.
+ */
+export function listDirectoryFilenamesOnGitHub(repoRef, dirPath) {
+    const encodedPath = dirPath.split('/').map(encodeURIComponent).join('/');
+    const url = `repos/${repoRef.owner}/${repoRef.repo}/contents/${encodedPath}?ref=${repoRef.ref}`;
+    try {
+        // The API returns an array for directories, an object for files.
+        // Use conditional jq to safely handle both: return null if not an array.
+        const result = execSync(`gh api "${url}" --jq 'if type == "array" then [.[].name] else null end'`, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        if (result === 'null')
+            return null;
+        return JSON.parse(result);
+    }
+    catch (err) {
+        const stderr = String(err.stderr ?? '');
+        const stdout = String(err.stdout ?? '');
+        if (stderr.includes('Not Found') ||
+            stderr.includes('404') ||
+            stdout.includes('Not Found') ||
+            stdout.includes('"Not Found"')) {
+            return null;
+        }
+        const detail = (stderr || stdout || String(err.message ?? '')).trim();
+        throw new ToolingError(`gh api directory listing failed for ${dirPath}: ${detail}`);
+    }
+}
+/**
+ * Get the full decoded text content of a file from the GitHub repo at origin/main.
+ * Returns null if the file is not found (404).
+ * Throws ToolingError if gh fails for any other reason.
+ *
+ * The GitHub Contents API returns base64-encoded content (≤1 MB). We decode it
+ * in Node.js after receiving the raw base64 string from gh. This is a content
+ * fetch (not just metadata), which is appropriate for the row-3a body check —
+ * persona files are small markdown docs and the extra payload is negligible.
+ */
+export function getFileContentOnGitHub(repoRef, filePath) {
+    const encodedPath = filePath.split('/').map(encodeURIComponent).join('/');
+    const url = `repos/${repoRef.owner}/${repoRef.repo}/contents/${encodedPath}?ref=${repoRef.ref}`;
+    try {
+        // GitHub encodes file content as base64 with embedded newlines every 60 chars.
+        const rawB64 = execSync(`gh api "${url}" --jq '.content'`, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        if (!rawB64 || rawB64 === 'null')
+            return null;
+        // Strip embedded newlines before decoding
+        return Buffer.from(rawB64.replace(/\n/g, ''), 'base64').toString('utf-8');
+    }
+    catch (err) {
+        const stderr = String(err.stderr ?? '');
+        const stdout = String(err.stdout ?? '');
+        if (stderr.includes('Not Found') ||
+            stderr.includes('404') ||
+            stdout.includes('Not Found') ||
+            stdout.includes('"Not Found"')) {
+            return null;
+        }
+        const detail = (stderr || stdout || String(err.message ?? '')).trim();
+        throw new ToolingError(`gh api call failed for ${filePath}: ${detail}`);
+    }
+}
+export class ToolingError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ToolingError';
+    }
+}
+//# sourceMappingURL=repoRead.js.map

package/dist/preflight/repoRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoRead.js","sourceRoot":"","sources":["../../src/preflight/repoRead.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQzC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,QAAQ;IACR,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC9E,IAAI,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM;IACN,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3E,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,oCAAoC,EAAE;YACzD,GAAG,EAAE,aAAa;YAClB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,QAAQ,CAAC,gBAAgB,EAAE;YACzB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC/G,MAAM,IAAI,YAAY,CACpB,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,wFAAwF,CACzF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,QAAgB;IACxE,gDAAgD;IAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,aAAa,WAAW,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAChG,IAAI,CAAC;QACH,QAAQ,CAAC,WAAW,GAAG,gBAAgB,EAAE;YACvC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,IACE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC9B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,wCAAwC;QACxC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,0BAA0B,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,QAAgB;IACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,aAAa,WAAW,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAChG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,GAAG,gBAAgB,EAAE;YACtD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,IACE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC9B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,0BAA0B,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAgB,EAAE,OAAe;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,aAAa,WAAW,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAChG,IAAI,CAAC;QACH,iEAAiE;QACjE,yEAAyE;QACzE,MAAM,MAAM,GAAG,QAAQ,CACrB,WAAW,GAAG,2DAA2D,EACzE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACvD,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAa,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,IACE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC9B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,uCAAuC,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,QAAgB;IACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,aAAa,WAAW,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAChG,IAAI,CAAC;QACH,+EAA+E;QAC/E,MAAM,MAAM,GAAG,QAAQ,CACrB,WAAW,GAAG,mBAAmB,EACjC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACvD,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9C,0CAA0C;QAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxC,IACE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC9B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,0BAA0B,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/dist/preflight/roster.d.ts

@@ -0,0 +1,65 @@
+/**
+ * F53 r3 D9 — Roster loader.
+ *
+ * Classifies every project×role pair as one of:
+ *   - `declared_here`: workspace's roles.json (root or per-project) declares the role
+ *     with a filler and a project field.
+ *   - `declared_cross_workspace`: root roles.json `cross_workspace_roles` block declares
+ *     the role by pointer (workspace_path + registry_path); no filler, no project.
+ *   - (absence = `not_declared`): neither of the above.
+ *
+ * `declared_here` and `declared_cross_workspace` are two distinct positive states.
+ * `not_declared` is absence — not a positive entry.
+ */
+import type { RolesRegistry, RoleEntry } from '../dispatch.js';
+export interface DeclaredHereEntry {
+    classification: 'declared_here';
+    project_slug: string;
+    role_slug: string;
+    filler: RoleEntry['filler'];
+    source_file: string;
+}
+export interface DeclaredCrossWorkspaceEntry {
+    classification: 'declared_cross_workspace';
+    role_slug: string;
+    workspace_path: string;
+    registry_path: string;
+    source_file: string;
+}
+export interface Roster {
+    declared_here: DeclaredHereEntry[];
+    declared_cross_workspace: DeclaredCrossWorkspaceEntry[];
+    source_files: string[];
+}
+/**
+ * Build the roster from a root registry (and any per-project registries under
+ * `<workspaceRoot>/projects/`).
+ *
+ * @param workspaceRoot - the workspace repo root (where .fazemos/roles.json lives)
+ * @param rootRegistry - the already-loaded root registry
+ */
+export declare function loadRoster(workspaceRoot: string, rootRegistry: RolesRegistry): Roster;
+/**
+ * Return the roster classification for a (project_slug, role_slug) pair.
+ * `declared_here` wins over `declared_cross_workspace`.
+ */
+export declare function classifyRoleForProject(roster: Roster, project_slug: string, role_slug: string): 'declared_here' | 'declared_cross_workspace' | 'not_declared';
+/**
+ * Return all declared-here entries for a given role_slug, plus whether it is
+ * cross-workspace-declared.
+ */
+export declare function getProjectsForRole(roster: Roster, role_slug: string): {
+    declared_here: DeclaredHereEntry[];
+    declared_cross_workspace: DeclaredCrossWorkspaceEntry | null;
+};
+/**
+ * Return all declared-here roles for a given project_slug, plus the cross-workspace
+ * entries (which are project-agnostic — they apply to the whole workspace).
+ */
+export declare function getRolesForProject(roster: Roster, project_slug: string): {
+    declared_here: DeclaredHereEntry[];
+    declared_cross_workspace: DeclaredCrossWorkspaceEntry[];
+};
+export declare class RosterLoadError extends Error {
+    constructor(message: string);
+}

package/dist/preflight/roster.js

@@ -0,0 +1,153 @@
+/**
+ * F53 r3 D9 — Roster loader.
+ *
+ * Classifies every project×role pair as one of:
+ *   - `declared_here`: workspace's roles.json (root or per-project) declares the role
+ *     with a filler and a project field.
+ *   - `declared_cross_workspace`: root roles.json `cross_workspace_roles` block declares
+ *     the role by pointer (workspace_path + registry_path); no filler, no project.
+ *   - (absence = `not_declared`): neither of the above.
+ *
+ * `declared_here` and `declared_cross_workspace` are two distinct positive states.
+ * `not_declared` is absence — not a positive entry.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'fs';
+import { join } from 'path';
+// ── Loader ─────────────────────────────────────────────────────────────────────
+/**
+ * Build the roster from a root registry (and any per-project registries under
+ * `<workspaceRoot>/projects/`).
+ *
+ * @param workspaceRoot - the workspace repo root (where .fazemos/roles.json lives)
+ * @param rootRegistry - the already-loaded root registry
+ */
+export function loadRoster(workspaceRoot, rootRegistry) {
+    const declared_here = [];
+    const declared_cross_workspace = [];
+    const source_files = [];
+    function processRegistry(registry) {
+        if (!source_files.includes(registry._registryPath)) {
+            source_files.push(registry._registryPath);
+        }
+        const project_slug = registry.project ?? '';
+        // Locally-declared roles
+        for (const [role_slug, role] of Object.entries(registry.roles)) {
+            if (role.filler && project_slug) {
+                const exists = declared_here.some((e) => e.project_slug === project_slug && e.role_slug === role_slug);
+                if (!exists) {
+                    declared_here.push({
+                        classification: 'declared_here',
+                        project_slug,
+                        role_slug,
+                        filler: role.filler,
+                        source_file: registry._registryPath,
+                    });
+                }
+            }
+        }
+        // Cross-workspace pointers (only processed on root registry, where they live)
+        if (registry.cross_workspace_roles) {
+            for (const [role_slug, xref] of Object.entries(registry.cross_workspace_roles)) {
+                // Validate shape
+                if (!xref.workspace_path || !xref.registry_path) {
+                    throw new RosterLoadError(`Malformed cross_workspace_roles entry for '${role_slug}' in ${registry._registryPath}: ` +
+                        `must have workspace_path and registry_path.`);
+                }
+                const exists = declared_cross_workspace.some((e) => e.role_slug === role_slug);
+                if (!exists) {
+                    declared_cross_workspace.push({
+                        classification: 'declared_cross_workspace',
+                        role_slug,
+                        workspace_path: xref.workspace_path,
+                        registry_path: xref.registry_path,
+                        source_file: registry._registryPath,
+                    });
+                }
+            }
+        }
+    }
+    // Process root registry
+    processRegistry(rootRegistry);
+    // Process per-project registries (supports future layouts)
+    const projectsDir = join(workspaceRoot, 'projects');
+    if (existsSync(projectsDir)) {
+        try {
+            const entries = readdirSync(projectsDir);
+            for (const name of entries) {
+                const full = join(projectsDir, name);
+                try {
+                    if (!statSync(full).isDirectory())
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                const candidate = join(full, '.fazemos', 'roles.json');
+                if (existsSync(candidate)) {
+                    try {
+                        const raw = JSON.parse(readFileSync(candidate, 'utf-8'));
+                        const registry = {
+                            ...raw,
+                            _workspaceRoot: workspaceRoot,
+                            _registryPath: candidate,
+                        };
+                        processRegistry(registry);
+                    }
+                    catch (err) {
+                        if (err instanceof RosterLoadError)
+                            throw err;
+                        // Malformed JSON or other issues — skip silently
+                    }
+                }
+            }
+        }
+        catch (err) {
+            if (err instanceof RosterLoadError)
+                throw err;
+            // Can't enumerate projects/ — continue
+        }
+    }
+    return { declared_here, declared_cross_workspace, source_files };
+}
+// ── Classification helpers ─────────────────────────────────────────────────────
+/**
+ * Return the roster classification for a (project_slug, role_slug) pair.
+ * `declared_here` wins over `declared_cross_workspace`.
+ */
+export function classifyRoleForProject(roster, project_slug, role_slug) {
+    if (roster.declared_here.some((e) => e.project_slug === project_slug && e.role_slug === role_slug)) {
+        return 'declared_here';
+    }
+    if (roster.declared_cross_workspace.some((e) => e.role_slug === role_slug)) {
+        return 'declared_cross_workspace';
+    }
+    return 'not_declared';
+}
+/**
+ * Return all declared-here entries for a given role_slug, plus whether it is
+ * cross-workspace-declared.
+ */
+export function getProjectsForRole(roster, role_slug) {
+    return {
+        declared_here: roster.declared_here.filter((e) => e.role_slug === role_slug),
+        declared_cross_workspace: roster.declared_cross_workspace.find((e) => e.role_slug === role_slug) ?? null,
+    };
+}
+/**
+ * Return all declared-here roles for a given project_slug, plus the cross-workspace
+ * entries (which are project-agnostic — they apply to the whole workspace).
+ */
+export function getRolesForProject(roster, project_slug) {
+    return {
+        declared_here: roster.declared_here.filter((e) => e.project_slug === project_slug),
+        declared_cross_workspace: roster.declared_cross_workspace,
+    };
+}
+// ── Errors ────────────────────────────────────────────────────────────────────
+export class RosterLoadError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RosterLoadError';
+    }
+}
+//# sourceMappingURL=roster.js.map

package/dist/preflight/roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.js","sourceRoot":"","sources":["../../src/preflight/roster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA2B5B,kFAAkF;AAElF;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,aAAqB,EACrB,YAA2B;IAE3B,MAAM,aAAa,GAAwB,EAAE,CAAC;IAC9C,MAAM,wBAAwB,GAAkC,EAAE,CAAC;IACnE,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,SAAS,eAAe,CAAC,QAAuB;QAC9C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;QAE5C,yBAAyB;QACzB,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CACpE,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,aAAa,CAAC,IAAI,CAAC;wBACjB,cAAc,EAAE,eAAe;wBAC/B,YAAY;wBACZ,SAAS;wBACT,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,WAAW,EAAE,QAAQ,CAAC,aAAa;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC/E,iBAAiB;gBACjB,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBAChD,MAAM,IAAI,eAAe,CACvB,8CAA8C,SAAS,QAAQ,QAAQ,CAAC,aAAa,IAAI;wBACzF,6CAA6C,CAC9C,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;gBAC/E,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,wBAAwB,CAAC,IAAI,CAAC;wBAC5B,cAAc,EAAE,0BAA0B;wBAC1C,SAAS;wBACT,cAAc,EAAE,IAAI,CAAC,cAAc;wBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;wBACjC,WAAW,EAAE,QAAQ,CAAC,aAAa;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,eAAe,CAAC,YAAY,CAAC,CAAC;IAE9B,2DAA2D;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC;oBACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;wBAAE,SAAS;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;gBACvD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAkB,CAAC;wBAC1E,MAAM,QAAQ,GAAkB;4BAC9B,GAAG,GAAG;4BACN,cAAc,EAAE,aAAa;4BAC7B,aAAa,EAAE,SAAS;yBACzB,CAAC;wBACF,eAAe,CAAC,QAAQ,CAAC,CAAC;oBAC5B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,GAAG,YAAY,eAAe;4BAAE,MAAM,GAAG,CAAC;wBAC9C,iDAAiD;oBACnD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,eAAe;gBAAE,MAAM,GAAG,CAAC;YAC9C,uCAAuC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAC;AACnE,CAAC;AAED,kFAAkF;AAElF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,YAAoB,EACpB,SAAiB;IAEjB,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QACnG,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3E,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,SAAiB;IAKjB,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;QAC5E,wBAAwB,EACtB,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,IAAI;KACjF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,YAAoB;IAKpB,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC;QAClF,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;KAC1D,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/dist/preflight/row1_member.d.ts

@@ -0,0 +1,8 @@
+/**
+ * F53 Row 1 — Agent member exists in org with the target role_slug.
+ *
+ * Data source: GET /api/organizations/:orgId/members?type=agent
+ * Checks: (a) an agent member named agentName exists, (b) role_slug ∈ agent_config.roles.
+ */
+import type { PreflightRow } from './schema.js';
+export declare function checkRow1Member(orgId: string, agentName: string, roleSlug: string): Promise<PreflightRow>;