@garygentry/system1-core 0.4.1 → 0.5.0

package/dist/guard/gather.d.ts

@@ -0,0 +1,65 @@
+import type { SourceSpec } from "../sources/types.js";
+import type { PackContext } from "./done-check.js";
+import { type GuardSession } from "./state.js";
+/** git's empty tree: the base of a session that started before the first commit. */
+export declare const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
+/** The most criteria one check sends; the rest are listed for the agent to check. */
+export declare const MAX_CRITERIA = 30;
+/** A bullet longer than this is not a checkable criterion. */
+export declare const MAX_CRITERION_CHARS = 400;
+/** The most untracked files read into one check. */
+export declare const MAX_UNTRACKED = 200;
+/** The most whole files the criteria can pull in by naming them. */
+export declare const MAX_NAMED_FILES = 10;
+/** …and at most this many for any one criterion. */
+export declare const MAX_NAMED_PER_CRITERION = 3;
+/**
+ * Tracked files a criterion names: by path (`src/greet.ts`), by file name
+ * (`greet.ts`, `README.md`), or by a distinctive stem (`README`, `CHANGELOG`,
+ * five characters or more, as a whole word). Case-insensitive; in the order
+ * the criteria name them.
+ */
+export declare function namedFiles(criteria: readonly Criterion[], tracked: readonly string[]): string[];
+export interface Criterion {
+    text: string;
+    /** Repo-relative path of the criteria file, and the bullet's line in it. */
+    file: string;
+    line: number;
+}
+export interface SelfCheck extends Criterion {
+    /** Why it isn't sent: said to the agent in the block reason or message. */
+    why: string;
+}
+export interface Gathered {
+    /** Sent to the model, two questions each. */
+    criteria: Criterion[];
+    /** Never sent: for the agent to check itself. */
+    checkYourself: SelfCheck[];
+    /** Said alongside the outcome, e.g. a criteria file changed mid-session. */
+    notes: string[];
+    /** The change, for `prepare()`. */
+    sources: SourceSpec[];
+    /**
+     * Files the criteria name, whole, for context. Not part of the change: a
+     * session that changed nothing is never judged just because a file was named.
+     */
+    context: SourceSpec[];
+    /**
+     * The configured evidence files (a test log, say), sent with the change.
+     * Not part of it: a stop with no work is never judged because a log exists.
+     */
+    evidence: SourceSpec[];
+}
+/**
+ * The bullets of a markdown file: `-`, `*`, `+`, `1.` or `1)`, with an
+ * optional `[ ]` box. Ticked boxes (`[x]`) are done and dropped. Headings,
+ * prose and fenced code are not criteria. An indented line right after a
+ * bullet continues it.
+ */
+export declare function parseBullets(text: string): Array<{
+    text: string;
+    line: number;
+}>;
+/** Gather the criteria and the change for one Stop. Sends nothing. */
+export declare function gather(ctx: PackContext, session: GuardSession): Promise<Gathered>;
+//# sourceMappingURL=gather.d.ts.map

package/dist/guard/gather.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gather.d.ts","sourceRoot":"","sources":["../../src/guard/gather.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,YAAY,CAAA;AAElE,oFAAoF;AACpF,eAAO,MAAM,UAAU,6CAA6C,CAAA;AACpE,qFAAqF;AACrF,eAAO,MAAM,YAAY,KAAK,CAAA;AAC9B,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,oDAAoD;AACpD,eAAO,MAAM,aAAa,MAAM,CAAA;AAYhC,oEAAoE;AACpE,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,oDAAoD;AACpD,eAAO,MAAM,uBAAuB,IAAI,CAAA;AAExC;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAoC/F;AAmBD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,QAAQ;IACvB,6CAA6C;IAC7C,QAAQ,EAAE,SAAS,EAAE,CAAA;IACrB,iDAAiD;IACjD,aAAa,EAAE,SAAS,EAAE,CAAA;IAC1B,4EAA4E;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,mCAAmC;IACnC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB;;;OAGG;IACH,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB;;;OAGG;IACH,QAAQ,EAAE,UAAU,EAAE,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAwChF;AA0DD,sEAAsE;AACtE,wBAAsB,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiGvF"}

package/dist/guard/gather.js

@@ -0,0 +1,288 @@
+/**
+ * `done-check`, part one: what to judge (M10 §5). The criteria come from the
+ * configured files' bullets, as they were when the session started; the
+ * change is this session's diff against its base, its untracked files, and
+ * any evidence files. Nothing here sends anything: the sources go through
+ * `prepare()` (excludes, scrubbing, size) before any question is asked.
+ */
+import { existsSync, lstatSync } from "node:fs";
+import { isAbsolute, relative, resolve } from "node:path";
+import { DecisionsError } from "../errors.js";
+import { lintStatement } from "../spec/lint.js";
+import { snapshotCriteria } from "./done-check.js";
+import { git } from "./git.js";
+import { MAX_CRITERIA_FILES } from "./state.js";
+/** git's empty tree: the base of a session that started before the first commit. */
+export const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
+/** The most criteria one check sends; the rest are listed for the agent to check. */
+export const MAX_CRITERIA = 30;
+/** A bullet longer than this is not a checkable criterion. */
+export const MAX_CRITERION_CHARS = 400;
+/** The most untracked files read into one check. */
+export const MAX_UNTRACKED = 200;
+/** Never part of the change: decide's own state, and dependencies at any depth. */
+const NOT_IN_DIFF = [":(exclude).system1/", ":(exclude,glob)**/node_modules/**"];
+const devNull = process.platform === "win32" ? "NUL" : "/dev/null";
+/** git's `-z` path list, without decide's state or dependencies. */
+function listed(out) {
+    return out
+        .split("\0")
+        .filter((p) => p && !p.startsWith(".system1/") && !/(^|\/)node_modules(\/|$)/.test(p));
+}
+/** The most whole files the criteria can pull in by naming them. */
+export const MAX_NAMED_FILES = 10;
+/** …and at most this many for any one criterion. */
+export const MAX_NAMED_PER_CRITERION = 3;
+/**
+ * Tracked files a criterion names: by path (`src/greet.ts`), by file name
+ * (`greet.ts`, `README.md`), or by a distinctive stem (`README`, `CHANGELOG`,
+ * five characters or more, as a whole word). Case-insensitive; in the order
+ * the criteria name them.
+ */
+export function namedFiles(criteria, tracked) {
+    // Each path's name and stem once, and each criterion's tokens once: this runs
+    // inside the hook's latency budget, over every tracked file.
+    const byName = new Map();
+    const byStem = new Map();
+    const add = (map, key, path) => map.set(key, [...(map.get(key) ?? []), path]);
+    for (const path of tracked) {
+        const lower = path.toLowerCase();
+        const name = lower.slice(lower.lastIndexOf("/") + 1);
+        add(byName, name, path);
+        const stem = name.includes(".") ? name.slice(0, name.lastIndexOf(".")) : name;
+        if (stem.length >= 5 && stem !== name)
+            add(byStem, stem, path);
+    }
+    const out = [];
+    for (const c of criteria) {
+        const text = c.text.toLowerCase();
+        const tokens = new Set(text.split(/[^a-z0-9_./-]+/).flatMap((t) => [t, t.replace(/[./-]+$/, "")]));
+        const words = new Set(text.split(/[^a-z0-9_-]+/));
+        // Ranked: a path named in full, then a file name, then a distinctive stem;
+        // a few per criterion, so one common word can't crowd out the rest.
+        const byPath = [...tokens]
+            .filter((t) => t.includes("/"))
+            .flatMap((t) => tracked.filter((p) => p.toLowerCase() === t));
+        const byFile = [...tokens].flatMap((t) => byName.get(t) ?? []);
+        const stems = [...words].flatMap((w) => {
+            const hits = byStem.get(w) ?? [];
+            return hits.length <= 2 ? hits : []; // a stem many files share names none of them
+        });
+        const picked = [...new Set([...byPath, ...byFile, ...stems])].filter((p) => !out.includes(p));
+        out.push(...picked.slice(0, MAX_NAMED_PER_CRITERION));
+        if (out.length >= MAX_NAMED_FILES)
+            return out.slice(0, MAX_NAMED_FILES);
+    }
+    return out;
+}
+/**
+ * Ignored files (not whole ignored directories, such as build output) changed
+ * since the session started. They are never read: an ignore rule is the
+ * user's to keep private. But a change the check can't see is said out loud.
+ */
+function changedIgnored(repoRoot, paths, since) {
+    return paths.filter((p) => {
+        if (p.endsWith("/"))
+            return false;
+        try {
+            const stat = lstatSync(resolve(repoRoot, p));
+            return stat.isFile() && stat.mtimeMs > since;
+        }
+        catch {
+            return false;
+        }
+    });
+}
+/**
+ * The bullets of a markdown file: `-`, `*`, `+`, `1.` or `1)`, with an
+ * optional `[ ]` box. Ticked boxes (`[x]`) are done and dropped. Headings,
+ * prose and fenced code are not criteria. An indented line right after a
+ * bullet continues it.
+ */
+export function parseBullets(text) {
+    const out = [];
+    let fence;
+    let comment = false;
+    let open;
+    text.split(/\r?\n/).forEach((raw, i) => {
+        if (comment || /^\s*<!--/.test(raw)) {
+            comment = !raw.includes("-->");
+            open = undefined;
+            return;
+        }
+        // A fence closes only with the same character, at least as many of it.
+        const run = /^\s*(`{3,}|~{3,})/.exec(raw)?.[1];
+        if (run) {
+            if (!fence)
+                fence = run;
+            else if (run[0] === fence[0] && run.length >= fence.length && !raw.trim().slice(run.length))
+                fence = undefined;
+            open = undefined;
+            return;
+        }
+        if (fence)
+            return;
+        if (/^\s*([-*_])(\s*\1){2,}\s*$/.test(raw)) {
+            open = undefined; // a horizontal rule
+            return;
+        }
+        const bullet = /^\s*(?:[-*+]|\d{1,3}[.)])\s+(?:\[( |x|X)\]\s+)?(.*\S)\s*$/.exec(raw);
+        if (bullet) {
+            open = undefined;
+            if (bullet[1] === "x" || bullet[1] === "X")
+                return;
+            open = { text: bullet[2] ?? "", line: i + 1 };
+            out.push(open);
+            return;
+        }
+        if (open && /^\s{2,}\S/.test(raw)) {
+            open.text = `${open.text} ${raw.trim()}`;
+            return;
+        }
+        open = undefined;
+    });
+    return out;
+}
+/** A configured path as the repo-relative form snapshots use, or undefined if it leaves the repo. */
+function repoPath(repoRoot, path) {
+    const rel = relative(repoRoot, resolve(repoRoot, path));
+    if (!rel || rel.startsWith("..") || isAbsolute(rel))
+        return undefined;
+    return rel.split("\\").join("/");
+}
+/**
+ * Each criteria file's text as the session started. The files are the ones
+ * snapshotted at SessionStart plus any configured now, so editing the config
+ * mid-session can add criteria but not drop them. An edited or emptied file
+ * is checked against its original, and the note says so. A file created
+ * mid-session is used as it is (it can only add checks). A file too long to
+ * snapshot is never used, whether it changed or not.
+ */
+function criteriaTexts(ctx, session, notes) {
+    const configured = ctx.pack.criteria
+        .map((p) => repoPath(ctx.repoRoot, p))
+        .filter((p) => p !== undefined);
+    const paths = [...new Set([...session.criteria.map((c) => c.path), ...configured])];
+    if (paths.length > MAX_CRITERIA_FILES) {
+        notes.push(`only the first ${MAX_CRITERIA_FILES} criteria files were read`);
+    }
+    const out = [];
+    for (const file of paths.slice(0, MAX_CRITERIA_FILES)) {
+        const atStart = session.criteria.find((c) => c.path === file);
+        if (atStart && !configured.includes(file)) {
+            notes.push(`${file} was removed from the criteria config during the session; still checked`);
+        }
+        const now = snapshotCriteria(ctx.repoRoot, [file])[0];
+        const text = atStart ? atStart.text : now?.text;
+        if ((atStart ?? now) && text === undefined) {
+            notes.push(`${file} is too long to read as criteria`);
+            continue;
+        }
+        if (text === undefined)
+            continue;
+        if (atStart && now?.sha256 !== atStart.sha256) {
+            notes.push(`${file} changed since the session started; checked against the original`);
+        }
+        out.push({ file, text });
+    }
+    return out;
+}
+function isRegularFile(repoRoot, path) {
+    try {
+        return lstatSync(resolve(repoRoot, path)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** Gather the criteria and the change for one Stop. Sends nothing. */
+export async function gather(ctx, session) {
+    const notes = [];
+    const criteria = [];
+    const checkYourself = [];
+    for (const { file, text } of criteriaTexts(ctx, session, notes)) {
+        for (const bullet of parseBullets(text)) {
+            const c = { text: bullet.text, file, line: bullet.line };
+            if (bullet.text.length > MAX_CRITERION_CHARS) {
+                checkYourself.push({ ...c, why: "too long to check as one criterion" });
+                continue;
+            }
+            const finding = lintStatement(bullet.text)[0];
+            if (finding) {
+                checkYourself.push({ ...c, why: `${finding.message}: check it yourself` });
+                continue;
+            }
+            if (criteria.length >= MAX_CRITERIA) {
+                checkYourself.push({ ...c, why: `over the ${MAX_CRITERIA}-criterion limit of one check` });
+                continue;
+            }
+            criteria.push(c);
+        }
+    }
+    const sources = [];
+    const context = [];
+    const evidence = [];
+    if (criteria.length > 0) {
+        const git_ = (args) => git(ctx.repoRoot, args, { signal: ctx.signal });
+        let range;
+        if (session.base) {
+            try {
+                await git_(["cat-file", "-e", `${session.base}^{commit}`]);
+            }
+            catch (error) {
+                if (error.name === "AbortError")
+                    throw error;
+                throw new DecisionsError("source-error", "the session's base commit no longer exists (history was rewritten), so this session's change can't be found");
+            }
+            range = session.base;
+        }
+        else {
+            // The empty tree, as this repo's hash function names it (SHA-1 or SHA-256).
+            range = (await git_(["hash-object", "-t", "tree", devNull])).trim();
+        }
+        sources.push({ kind: "diff", range, paths: [".", ...NOT_IN_DIFF] });
+        const untracked = listed(await git_(["ls-files", "--others", "--exclude-standard", "-z"]))
+            .filter((p) => isRegularFile(ctx.repoRoot, p))
+            .sort();
+        if (untracked.length > MAX_UNTRACKED) {
+            notes.push(`${untracked.length - MAX_UNTRACKED} untracked files were left out (over ${MAX_UNTRACKED})`);
+        }
+        for (const path of untracked.slice(0, MAX_UNTRACKED)) {
+            sources.push({ kind: "file", path, optional: true });
+        }
+        const hidden = changedIgnored(ctx.repoRoot, listed(await git_([
+            "ls-files",
+            "--others",
+            "--ignored",
+            "--exclude-standard",
+            "--directory",
+            "-z",
+        ])), Date.parse(session.startedAt));
+        if (hidden.length > 0) {
+            const shown = hidden.slice(0, 5).join(", ");
+            notes.push(`ignored files changed during the session and weren't checked: ${shown}${hidden.length > 5 ? ` and ${hidden.length - 5} more` : ""}`);
+        }
+        // Files a criterion names ("README documents…", "src/greet.ts returns…"),
+        // whole and as they are now: "not done" leaves no diff, so without them
+        // the model couldn't judge a criterion about work that wasn't done.
+        const included = new Set(untracked.slice(0, MAX_UNTRACKED));
+        const tracked = listed(await git_(["ls-files", "-z"]));
+        for (const path of namedFiles(criteria, tracked)) {
+            if (included.has(path) || !isRegularFile(ctx.repoRoot, path))
+                continue;
+            included.add(path);
+            context.push({ kind: "file", path, optional: true });
+        }
+        for (const configured of ctx.pack.evidence) {
+            const path = repoPath(ctx.repoRoot, configured);
+            if (path && existsSync(resolve(ctx.repoRoot, path)) && isRegularFile(ctx.repoRoot, path)) {
+                evidence.push({ kind: "file", path, optional: true });
+            }
+            else {
+                notes.push(`evidence file ${configured} was not found`);
+            }
+        }
+    }
+    return { criteria, checkYourself, notes, sources, context, evidence };
+}
+//# sourceMappingURL=gather.js.map

package/dist/guard/gather.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gather.js","sourceRoot":"","sources":["../../src/guard/gather.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAC9B,OAAO,EAAqB,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAElE,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,0CAA0C,CAAA;AACpE,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAA;AAC9B,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AACtC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAA;AAChC,mFAAmF;AACnF,MAAM,WAAW,GAAG,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAA;AAChF,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAA;AAElE,oEAAoE;AACpE,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1F,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAA;AACjC,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAA;AAExC;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,QAA8B,EAAE,OAA0B;IACnF,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC1C,MAAM,GAAG,GAAG,CAAC,GAA0B,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE,CACpE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC7E,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAC3E,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;QACjD,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aAC9B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAC9D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAChC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA,CAAC,6CAA6C;QACnF,CAAC,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7F,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAA;QACrD,IAAI,GAAG,CAAC,MAAM,IAAI,eAAe;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,KAAe,EAAE,KAAa;IACtE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAmCD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA0C,EAAE,CAAA;IACrD,IAAI,KAAyB,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,IAAgD,CAAA;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACrC,IAAI,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC9B,IAAI,GAAG,SAAS,CAAA;YAChB,OAAM;QACR,CAAC;QACD,uEAAuE;QACvE,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,GAAG,CAAA;iBAClB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBACzF,KAAK,GAAG,SAAS,CAAA;YACnB,IAAI,GAAG,SAAS,CAAA;YAChB,OAAM;QACR,CAAC;QACD,IAAI,KAAK;YAAE,OAAM;QACjB,IAAI,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,SAAS,CAAA,CAAC,oBAAoB;YACrC,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpF,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,GAAG,SAAS,CAAA;YAChB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAM;YAClD,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;YAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,OAAM;QACR,CAAC;QACD,IAAI,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;YACxC,OAAM;QACR,CAAC;QACD,IAAI,GAAG,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;IACF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qGAAqG;AACrG,SAAS,QAAQ,CAAC,QAAgB,EAAE,IAAY;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAA;IACvD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACrE,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,GAAgB,EAChB,OAAqB,EACrB,KAAe;IAEf,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IACnF,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,kBAAkB,kBAAkB,2BAA2B,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,GAAG,GAA0C,EAAE,CAAA;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QAC7D,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,yEAAyE,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACrD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAA;QAC/C,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAA;YACrD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAQ;QAChC,IAAI,OAAO,IAAI,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,kEAAkE,CAAC,CAAA;QACvF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAY;IACnD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAgB,EAAE,OAAqB;IAClE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAgB,EAAE,CAAA;IAChC,MAAM,aAAa,GAAgB,EAAE,CAAA;IACrC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;YACxD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,oCAAoC,EAAE,CAAC,CAAA;gBACvE,SAAQ;YACV,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,qBAAqB,EAAE,CAAC,CAAA;gBAC1E,SAAQ;YACV,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;gBACpC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,YAAY,YAAY,+BAA+B,EAAE,CAAC,CAAA;gBAC1F,SAAQ;YACV,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QAChF,IAAI,KAAa,CAAA;QACjB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAAe,CAAC,IAAI,KAAK,YAAY;oBAAE,MAAM,KAAK,CAAA;gBACvD,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,6GAA6G,CAC9G,CAAA;YACH,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,IAAI,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,4EAA4E;YAC5E,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACrE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QACnE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC;aACvF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;aAC7C,IAAI,EAAE,CAAA;QACT,IAAI,SAAS,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,CAAC,MAAM,GAAG,aAAa,wCAAwC,aAAa,GAAG,CAC5F,CAAA;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAC3B,GAAG,CAAC,QAAQ,EACZ,MAAM,CACJ,MAAM,IAAI,CAAC;YACT,UAAU;YACV,UAAU;YACV,WAAW;YACX,oBAAoB;YACpB,aAAa;YACb,IAAI;SACL,CAAC,CACH,EACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAC9B,CAAA;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3C,KAAK,CAAC,IAAI,CACR,iEAAiE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACrI,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACtD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAAE,SAAQ;YACtE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;YAC/C,IAAI,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,gBAAgB,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AACvE,CAAC"}

package/dist/guard/git.d.ts

@@ -0,0 +1,15 @@
+export interface GitOptions {
+    /** Aborts the git process: the hook's deadline. */
+    signal?: AbortSignal;
+    maxBuffer?: number;
+}
+/**
+ * Run git in `cwd` and resolve with stdout. The engine spawns only git (0014).
+ * Asynchronous so the hook's deadline can interrupt it: a slow git (a huge
+ * repo, a network filesystem) must not hold the Stop past `latencyMs`.
+ * A failure is a `source-error`, which a guard hook reports and fails open on.
+ */
+export declare function git(cwd: string, args: string[], options?: GitOptions): Promise<string>;
+/** HEAD's commit, or `null` in a repo with no commits yet. */
+export declare function headCommit(cwd: string, signal?: AbortSignal): Promise<string | null>;
+//# sourceMappingURL=git.d.ts.map

package/dist/guard/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/guard/git.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,mDAAmD;IACnD,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAyB1F;AAED,8DAA8D;AAC9D,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAW1F"}

package/dist/guard/git.js

@@ -0,0 +1,44 @@
+import { execFile } from "node:child_process";
+import { DecisionsError } from "../errors.js";
+/**
+ * Run git in `cwd` and resolve with stdout. The engine spawns only git (0014).
+ * Asynchronous so the hook's deadline can interrupt it: a slow git (a huge
+ * repo, a network filesystem) must not hold the Stop past `latencyMs`.
+ * A failure is a `source-error`, which a guard hook reports and fails open on.
+ */
+export function git(cwd, args, options = {}) {
+    return new Promise((resolve, reject) => {
+        execFile("git", ["-C", cwd, ...args], {
+            encoding: "utf8",
+            maxBuffer: options.maxBuffer ?? 64 * 1024 * 1024,
+            ...(options.signal ? { signal: options.signal } : {}),
+        }, (error, stdout, stderr) => {
+            if (!error)
+                return resolve(stdout);
+            if (error.name === "AbortError")
+                return reject(error);
+            const detail = String(stderr || error.message)
+                .trim()
+                .split("\n")[0] ?? "";
+            reject(Object.assign(new DecisionsError("source-error", `git ${args[0]} failed: ${detail}`), {
+                exitCode: typeof error.code === "number" ? error.code : undefined,
+            }));
+        });
+    });
+}
+/** HEAD's commit, or `null` in a repo with no commits yet. */
+export async function headCommit(cwd, signal) {
+    try {
+        const out = await git(cwd, ["rev-parse", "--verify", "--quiet", "HEAD^{commit}"], {
+            ...(signal ? { signal } : {}),
+        });
+        return out.trim() || null;
+    }
+    catch (error) {
+        // `--verify --quiet` exits 1 with no output when there is no commit yet.
+        if (error.exitCode === 1)
+            return null;
+        throw error;
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/guard/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/guard/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAQ7C;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,OAAO,GAAe,EAAE;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EACpB;YACE,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;YAChD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;YAClC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;YACrD,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC;iBAC5B,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACzB,MAAM,CACJ,MAAM,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC,EAAE;gBACpF,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAClE,CAAC,CACH,CAAA;QACH,CAAC,CACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,MAAoB;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE;YAChF,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,IAAK,KAA+B,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAChE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/guard/packs.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Guard packs (M10): hooks that check an agent's work at a harness event and
+ * send content to the decision model when they do. Each pack is dormant until
+ * the user enables it in this repo, on top of egress consent. Enabling is a
+ * consent act (plan X6), so `enabled` is read only from the repo layer, like
+ * `egress.consent` (decision 0009): a user-level setting can't switch on
+ * egress in every repo.
+ */
+export declare const PACKS: {
+    readonly "done-check": {
+        readonly summary: "At Stop, checks the change against the criteria files' bullets and blocks once on a confidently unmet one";
+        readonly defaults: {
+            readonly latencyMs: 5000;
+            readonly maxUsdPerSession: 0.01;
+            readonly criteria: readonly ["TASK.md", ".system1/done.md"];
+            readonly evidence: string[];
+        };
+    };
+};
+export type PackName = keyof typeof PACKS;
+export declare const PACK_NAMES: PackName[];
+export declare function isPackName(name: string): name is PackName;
+export interface GuardPackConfig {
+    /** Only ever taken from the repo layer. */
+    enabled: boolean;
+    /** When and how it was enabled, as `setGuardEnabled` recorded it. */
+    enabledAt?: string;
+    enabledBy?: string;
+    /** The time a check may add at the event before it fails open. */
+    latencyMs: number;
+    /** Measured spend per session (the ledger, by session id) before checks are skipped. */
+    maxUsdPerSession: number;
+    /** Files whose bullets are the criteria, relative to the repo root. */
+    criteria: string[];
+    /** Extra files sent with the change as evidence, e.g. a test log. */
+    evidence: string[];
+}
+export interface GuardConfig {
+    packs: Record<PackName, GuardPackConfig>;
+}
+type Layer = Record<string, unknown> | undefined;
+/**
+ * `guard:` from both layers, with warnings for everything ignored. Options:
+ * the repo wins over the user, then the pack default; a list is taken whole
+ * from the first layer that sets it. A value of the wrong type is ignored
+ * with a warning, like the other config keys, so a bad file never stops
+ * `decide`.
+ */
+export declare function readGuard(user: Layer, userFile: string, repo: Layer, repoFile: string, warnings: string[]): GuardConfig;
+export {};
+//# sourceMappingURL=packs.d.ts.map

package/dist/guard/packs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packs.d.ts","sourceRoot":"","sources":["../../src/guard/packs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,KAAK;aAChB,YAAY;iBACV,OAAO,EACL,2GAA2G;iBAC7G,QAAQ;qBACN,SAAS,EAAE,IAAI;qBACf,gBAAgB,EAAE,IAAI;qBACtB,QAAQ,YAAG,SAAS,EAAE,kBAAkB;qBACxC,QAAQ,EAAQ,MAAM,EAAE;;;CAGpB,CAAA;AAEV,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,KAAK,CAAA;AAEzC,eAAO,MAAM,UAAU,EAAyB,QAAQ,EAAE,CAAA;AAE1D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,QAAQ,CAEzD;AAED,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAA;IACjB,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAA;IACxB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;CACzC;AAED,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;AAahD;;;;;;GAMG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE,KAAK,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,KAAK,EACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAAE,GACjB,WAAW,CAoEb"}