@getarbiter/cli 0.5.0

package/dist/i18n/en.json

@@ -0,0 +1,293 @@
+{
+  "errors": {
+    "E_CONFIG_NOT_FOUND": "No arbiter.json found. Run `arbiter init` to initialize.",
+    "E_CONFIG_INVALID": "arbiter.json is invalid after the requested changes.",
+    "E_CONFIG_WRITE": "Failed to write arbiter.json.",
+    "E_INIT_ALREADY_EXISTS": "arbiter.json already exists in this directory.",
+    "E_UPGRADE_UNKNOWN_LEVEL": "Unknown governance level: {level}",
+    "E_UPGRADE_ALREADY_AT_LEVEL": "Already at governance level {level}.",
+    "E_UPGRADE_PARSE": "Could not parse current governance level.",
+    "E_UPGRADE_WRITE": "Failed to write upgraded config.",
+    "E_UPGRADE_GENERATE": "Failed to generate governance files.",
+    "E_LOCK_TIMEOUT": "File lock timed out after {ms}ms.",
+    "E_LOCK_STALE": "Stale lock file detected at {path}.",
+    "E_LOCK_RELEASE": "Failed to release file lock at {path}.",
+    "E_LOCK_SYMLINK": "Lock path {path} is a symlink \u2014 refusing to create lock.",
+    "E_LOCK_FOREIGN_HOST": "Lock held by a process on a different host ({host}). Run `arbiter doctor --recover-lock` to manually release.",
+    "E_LOCK_BUSY": "arbiter is already running (PID {pid}, host {host}, cmd: {cmd}, age: {age}s). Run `arbiter doctor --recover-lock` to force-release if the process is gone.",
+    "E_LOCK_CONFLICT": "Lock already exists at {path}.",
+    "E_LOCK_PATH_ESCAPE": "Refusing to release lock at {path} \u2014 path escapes outside the project root.",
+    "E_LOCK_SYMLINK_UNLINK": "Lock path {path} is a symlink \u2014 refusing to unlink. Remove it manually.",
+    "E_LOCK_UNREADABLE": "Cannot read lock at {path} \u2014 it may not exist or is not a valid arbiter lock. Check permissions with `ls -la {path}`.",
+    "E_LOCK_PID_CHANGED": "Lock PID changed: expected {expected} but found {found}. The lock was released and re-acquired between inspect and recover. Aborting.",
+    "E_GATE_MUTEX_UNSUPPORTED": "flock(1) is {detail} \u2014 the per-repo gate mutex requires util-linux flock (kernel-side release when the gate-exec supervisor is SIGKILL/OOM-killed; killing the Arbiter Node PID alone leaves that supervisor holding the mutex). Run the wave serially (--max-parallel 1, no mutex needed) or install flock. (ADR-103)",
+    "E_NO_PLAN_ANCHOR": "No active plan anchor found. Run `/task #NNN` to initialize a plan.",
+    "E_WORK_NO_CONFIG": "No arbiter.json found. Run `arbiter init` first.",
+    "E_WORK_NO_PHASE": "Cannot advance: no active task phase.",
+    "E_WORK_INVALID_PHASE": "Invalid task phase: {phase}.",
+    "E_PLUGIN_NOT_FOUND": "Plugin not found: {name}.",
+    "E_PLUGIN_INSTALL": "Failed to install plugin: {name}.",
+    "E_PLUGIN_REMOVE": "Failed to remove plugin: {name}.",
+    "E_PLUGIN_NOT_INSTALLED": "Plugin not found: {name}. Check `arbiter configure --set plugins={name}` to enable it.",
+    "E_CONFIGURE_INVALID": "Invalid configuration value for {key}: {value}.",
+    "E_CONFIGURE_NO_CONFIG": "No arbiter.json found. Run `arbiter init` first.",
+    "E_CONFIGURE_INVALID_KEY": "Unknown configuration key: {key}.",
+    "E_CONFIGURE_READ": "Failed to read current configuration.",
+    "E_CONFIGURE_CONFIG_INVALID": "Configuration invalid after changes: {errors}",
+    "E_UPDATE_FETCH": "Failed to fetch update information.",
+    "E_UPDATE_WRITE": "Failed to write update files.",
+    "E_UPDATE_CONFIG_INVALID": "Config invalid after update: {errors}.",
+    "E_FS_READ": "Failed to read file: {path}.",
+    "E_FS_WRITE": "Failed to write file: {path}.",
+    "E_FS_ENOSPC": "Disk full while writing {path}. Free up space and retry. Use `df -h` to check available space.",
+    "E_FS_EACCES": "Permission denied accessing {path}. Check file ownership and directory permissions.",
+    "E_FS_EROFS": "Cannot write {path} \u2014 filesystem is read-only. Check mount options.",
+    "E_FS_EDQUOT": "Disk quota exceeded while writing {path}. Free up space or raise your quota.",
+    "E_FS_EPERM": "Operation not permitted on {path}. Check immutable bit, SELinux/AppArmor, ACLs, or file ownership.",
+    "E_FS_ENOTDIR": "Cannot access {path} \u2014 a component of the path is not a directory.",
+    "E_FS_EISDIR": "Cannot access {path} \u2014 target is a directory, expected a file.",
+    "E_FS_ENOENT": "Cannot access {path} \u2014 the path does not exist. Check the path, or create the parent directory first (for example: `mkdir -p`).",
+    "E_FS_EBUSY": "Cannot access {path} \u2014 the file is busy or locked by another process. Close it and retry.",
+    "E_FS_EMFILE": "Cannot access {path} \u2014 too many open files. Close other files or raise the limit with `ulimit -n`, then retry.",
+    "E_GENERATE_FAILED": "Generator failed: {key}.",
+    "E_WORK_ADVANCE_FAILED": "Failed to advance task phase.",
+    "E_INIT_GITHUB_SETUP": "Failed to set up GitHub Actions.",
+    "E_INIT_GITHUB_UNAUTHENTICATED": "--github was requested but GitHub CLI (gh) is not authenticated: {error}. No GitHub workflows or their 8 gates (ci-tiers, action-pins, workflow-perms, workflow-runners, workflow-sha-pinning, workflow-job-naming, pr-size-gate, merge-method-ff-only) were emitted. Run `gh auth login` (or set GH_TOKEN) and re-run `arbiter init --github`.",
+    "E_UPDATE_GITHUB_UNAUTHENTICATED": "--github was requested but GitHub CLI (gh) is not authenticated: {error}. No GitHub workflows or their 8 gates (ci-tiers, action-pins, workflow-perms, workflow-runners, workflow-sha-pinning, workflow-job-naming, pr-size-gate, merge-method-ff-only) were emitted. Run `gh auth login` (or set GH_TOKEN) and re-run `arbiter update --github`.",
+    "E_INIT_WRITE": "Failed to write initialization files.",
+    "E_INIT_DETECT": "Failed to detect project structure.",
+    "E_INIT_UNKNOWN_LANGUAGE": "Language is unknown: test naming and test pyramid checks cannot be configured. Re-run `arbiter init --language <lang>` with the project language; governance files were not generated.",
+    "E_INIT_DIRTY_TREE": "Working tree has uncommitted changes. Commit or stash first, or use --force to override.",
+    "E_INIT_PLUGIN_FAILURES": "Plugin(s) failed:\n  {failures}",
+    "E_TARGET_REQUIRED": "--target is required. Specify L2 or L3.",
+    "E_ALREADY_AT_LEVEL": "Already at {level}. Nothing to upgrade.",
+    "E_DOWNGRADE_NOT_SUPPORTED": "Downgrade not supported. Edit arbiter.json manually and run arbiter update.",
+    "E_GRACE_NOT_SUPPORTED": "The grace period is implemented for L1\u2192L2 only (ADR-028). To move to a higher level, run `arbiter configure --set governanceLevel=<L3|L4>` followed by `arbiter update`.",
+    "E_UPGRADE_CONFIG_INVALID": "Config invalid after upgrade: {errors}.",
+    "E_NO_GRACE_PERIOD": "No grace period to extend (none set or already expired).",
+    "E_GRACE_LOG_MALFORMED": "grace-log.json is malformed \u2014 delete {path} to reset extend history.",
+    "E_INVALID_ARCHETYPE": "Invalid {field}: \"{value}\". Valid: {valid}",
+    "E_INVALID_BOOL": "{path} must be true or false \u2014 got: {value}",
+    "E_INVALID_NUMBER": "{path} must be a number \u2014 got: {value}",
+    "E_INVALID_TOOL": "Invalid {noun}: {tool}. Valid tools: {valid}",
+    "E_INVALID_FORMAT": "Invalid --set format (expected path=value): {assignment}",
+    "E_UNKNOWN_PATH": "Unknown configuration path: {path}",
+    "E_UNSUPPORTED_PATH_DEPTH": "Unsupported path depth: {path}",
+    "E_INIT_WIN32": "arbiter does not support native Win32. Install WSL2 and run arbiter inside it. Setup guide: https://docs.arbiter.dev/install/windows",
+    "E_INVALID_LEVEL": "Unknown governance level: \"{level}\". Valid: L1, L2, L3, L4",
+    "E_INVALID_LANGUAGE": "Unknown language: \"{language}\". Valid: typescript, java, kotlin, rust, python, go, multi",
+    "E_TRAIN_SEALED": "SEALED: {reason} \u2014 {detail}. Land this train (gate, push, one PR closing every id) before starting the next one.",
+    "E_REVIEW_ROUNDS_EXHAUSTED": "REVIEW ROUNDS EXHAUSTED \u2014 {detail}",
+    "E_PR_NOT_MERGED": "NOT MERGED \u2014 {detail} A PR is owned until it is merged."
+  },
+  "cli": {
+    "shared": {
+      "done": "Done.",
+      "version_info": "arbiter {version}",
+      "dry_run_notice": "[dry-run] No files written.",
+      "dry_run_prefix": "[dry-run]",
+      "running": "Running {action}...",
+      "success": "Success.",
+      "error_prefix": "Error",
+      "warning_prefix": "Warning",
+      "hint_prefix": "Hint",
+      "docs_prefix": "Docs",
+      "force_override_hint": "Use --force to override this check."
+    },
+    "init": {
+      "banner": "Initializing arbiter governance...",
+      "detecting": "Detecting project structure...",
+      "detected_language": "Detected language: {language}",
+      "detected_archetype": "Detected archetype: {archetype}",
+      "detected_level": "Detected governance level: {level}",
+      "writing_files": "Writing governance files...",
+      "github_setup": "Setting up GitHub Actions...",
+      "github_skipped": "GitHub Actions setup skipped (no .github dir).",
+      "complete": "Governance initialized at level {level}.",
+      "dry_run_diff": "Dry-run diff ({count} files):",
+      "dry_run_file_create": "  [create] {path}",
+      "dry_run_file_update": "  [update] {path}",
+      "dry_run_file_skip": "  [skip]   {path}",
+      "brownfield_detected": "Brownfield project detected. Applying safe defaults.",
+      "brownfield_route": "Existing project detected (tests, CI workflows, lint config). The first gate run will measure your project as it is today. To select brownfield initialization, re-run with --brownfield. To capture a debt baseline when debt gates are enabled, run: node scripts/capture-debt-baseline.mjs.",
+      "already_exists": "arbiter.json already exists. Use --force to reinitialize.",
+      "prompt_confirm": "Proceed with initialization?",
+      "prompt_level": "Select governance level:",
+      "prompt_language": "Select primary language:",
+      "prompt_archetype": "Select project archetype:",
+      "local_arbiter_setup": "\n  Install the root-local Arbiter CLI with a caller-selected immutable package spec (exact release or full Git ref):\n    {setupCommand}",
+      "verify_hint": "\n  Run: node scripts/check-all.mjs L1  to verify\n",
+      "install_first_hint": "\n  Next: run `{installCommand}` first — init added the gate toolchain to devDependencies but did not install it.",
+      "install_first_hint_unreadable": "\n  Next: run `{installCommand}` first — package.json could not be read, so the gate toolchain in devDependencies cannot be assumed installed.",
+      "existing_agents_md": "  \u251c\u2500\u2500 Existing AGENTS.md detected \u2014 will back up",
+      "existing_claude_dir": "  \u251c\u2500\u2500 Existing .claude/ detected \u2014 will merge",
+      "existing_agents_dir": "  \u251c\u2500\u2500 Existing .agents/ detected \u2014 will merge",
+      "existing_gemini_dir": "  \u251c\u2500\u2500 Existing .gemini/ detected \u2014 will back up",
+      "existing_windsurf": "  \u251c\u2500\u2500 Existing windsurf-instructions.md detected \u2014 will back up",
+      "existing_aider": "  \u251c\u2500\u2500 Existing .aider.conf.yml detected \u2014 will back up",
+      "ai_rulez_detected": "  \u251c\u2500\u2500 ai-rulez detected \u2014 skipping tool configs (AGENTS.md + GitHub only)",
+      "capturing_baseline": "\n  Capturing debt baseline (this may take a few minutes)\u2026",
+      "baseline_captured": "  Baseline captured at scripts/debt-baseline.json",
+      "file_entry": "  {icon} {relPath}{label}",
+      "dry_run_notice_full": "\n  Dry run \u2014 no files will be written.\n",
+      "dry_run_create_header": "  [create]",
+      "dry_run_create_file": "  + {entry}",
+      "dry_run_modify_header": "  [modify]",
+      "dry_run_modify_file": "  ~ {entry}",
+      "dry_run_skip_header": "  [skip]",
+      "dry_run_skip_file": "  = {entry}",
+      "dry_run_deferred_note": "\n  Not listed: the doc-set skeletons. They are resolved from standards/gold-doc-set.yml, which this same run writes, so they can only be decided once init has run.",
+      "dry_run_run_hint": "\n  Run without --dry-run to apply.\n",
+      "gate_failed": "\n  arbiter init aborted: L3 maturity gate failed.\n",
+      "coherence_gate_failed": "\n  arbiter init aborted: collaborationMode \u00d7 governanceLevel coherence gate failed.\n",
+      "accept_beta_hint": "\n  Use --accept-beta-tools to allow beta tools, or reduce governance to L2.\n",
+      "verifying_toolchain": "\n  Verifying toolchain compatibility...",
+      "gh_access_note": "  Note: {message}",
+      "dirty_tree_warn": "\n  Warning: working tree has uncommitted changes (--force override active)\n"
+    },
+    "configure": {
+      "reading": "Reading current configuration...",
+      "updating": "Updating {key} to {value}...",
+      "updated": "  Updated: {keys}",
+      "list_header": "Current arbiter configuration:",
+      "no_changes": "No changes made.",
+      "reset_confirm": "Reset all configuration to defaults?",
+      "usage_hint": "  Usage: arbiter configure --set <path>=<value>\n  Interactive mode requires a TTY. Non-interactive usage requires --set.",
+      "drain_sync_withheld": "warning: {path} carries the `arbiter:preserve` marker, so its --max-parallel default was not updated. Set it to {cap} by hand to keep it in sync.",
+      "interactive": {
+        "intro": "arbiter configure \u2014 interactive mode",
+        "save_confirm": "Save these changes?",
+        "invalid_number": "Must be a positive integer",
+        "no_config": "No arbiter.json found. Run `arbiter init` first.",
+        "axis_header": "Project shape",
+        "features_header": "Feature flags",
+        "thresholds_header": "Quality thresholds",
+        "collaboration_header": "Collaboration mode",
+        "access_header": "AI tools & GitHub access",
+        "automation_header": "Ship automation"
+      }
+    },
+    "work": {
+      "no_units": "No work units found.",
+      "unit_row": "  {id}  {status}{phase}  {title}{labels}",
+      "created": "  Created: {id}  {title}",
+      "show": {
+        "id": "  id:     {id}",
+        "title": "  title:  {title}",
+        "status": "  status: {status}",
+        "phase": "  phase:  {phase}",
+        "parent": "  parent: {parent}",
+        "labels": "  labels: {labels}"
+      },
+      "closed": "  Closed: {id}",
+      "advanced": "  Advanced: {id} \u2192 {phase}",
+      "no_task": "No active task. Run `/task #NNN` to start.",
+      "complete": "Task complete."
+    },
+    "upgrade_level": {
+      "grace_ends_warn": "Grace ends {date} ({days} days). {target} gates will WARN until then.",
+      "grace_extended": "Grace extended to {date} (+{days} days).",
+      "grace_capped": "Grace window capped at {max} days (requested {requested}). The generated gate ignores any grace longer than {max} days.",
+      "grace_extend_capped": "Grace window capped at {max} days from now (extend by {requested} would exceed it). The generated gate ignores any grace longer than {max} days."
+    },
+    "update": {
+      "checking": "Checking for updates...",
+      "up_to_date": "arbiter is up to date.",
+      "available": "Update available: {version}",
+      "updating": "Updating to {version}...",
+      "complete": "Updated to {version}.",
+      "failed": "Update failed.",
+      "done": "\n  Done! {created} created, {replaced} updated, {skipped} skipped, {withheld} withheld.",
+      "no_config_changes": "  No config changes detected \u2014 re-running to pick up template updates.",
+      "reason_regen": "  {reason} detected \u2014 full regeneration.",
+      "selective": "  Selective update: {count} generator group(s).",
+      "verify_hint": "\n  Run: node scripts/check-all.mjs L1  to verify\n",
+      "config_invalid": "  [arbiter] Config invalid after update: {errors}"
+    },
+    "plugin": {
+      "installing": "Installing plugin: {name}...",
+      "installed": "Plugin installed: {name}",
+      "removing": "Removing plugin: {name}...",
+      "removed": "Plugin removed: {name}",
+      "listing": "Installed plugins:",
+      "none": "No plugins installed.",
+      "not_found": "Plugin not found: {name}.",
+      "scaffolded": "  Scaffolded plugin: {name}",
+      "location": "  Location: {path}",
+      "next_steps": "  Next steps:",
+      "cd_hint": "    cd {path}",
+      "npm_install": "    npm install",
+      "npm_build": "    npm run build",
+      "no_config": "  No arbiter.json found. Run `arbiter init` first.",
+      "added": "  Plugin added: {name}",
+      "removed_msg": "  Plugin removed: {name}",
+      "no_plugins": "  No plugins configured.",
+      "plugins_header": "  Configured plugins:",
+      "plugin_row": "  \u251c\u2500\u2500 {name} ({status})",
+      "timeout": "Plugin \"{name}\" timed out after {ms}ms",
+      "interrupted": "Plugin \"{name}\" was interrupted by signal",
+      "crashed": "Plugin \"{name}\" crashed (exit code {code})",
+      "load_error": "Failed to load plugin \"{name}\": {message}\n  arbiter.json was not modified.\n  {hint}",
+      "retry_network": "Network issue detected. Remove the plugin from arbiter.json's `plugins` array, then re-run `arbiter update`.",
+      "retry_local": "Verify the package is installed (`npm install {name}`), or remove it from arbiter.json's `plugins` array and re-run `arbiter update`.",
+      "security_advisory": "  Security advisory: Plugin {name} will execute Node code during `arbiter update`. Verify source before use.",
+      "already_configured": "  Plugin already configured: {name}"
+    },
+    "diff": {
+      "banner": "\n  Arbiter \u2014 diff (dry run)\n",
+      "no_config": "  No arbiter.json found. Run `arbiter init` first.\n",
+      "new_file": "  + {key}  (new file)",
+      "changed_file": "  ~ {key}  (would update)",
+      "unchanged_file": "  = {key}  (unchanged)",
+      "up_to_date": "\n  All files up to date. Nothing to update.\n",
+      "run_update": "\n  Run `arbiter update` to apply changes.\n",
+      "remote_header": "\n  Remote side effects (`arbiter update --github` would perform):",
+      "remote_effect": "  \u2192 {op}  {target}",
+      "ignored_file": "  \u2013 {key}  (skipped \u2014 .arbiterignore)",
+      "withheld_file": "  ! {key}  (template fix WITHHELD \u2014 user-modified)",
+      "withheld_header": "\n  Withheld template fixes ({count}) \u2014 preserved because user-modified, fix NOT applied:",
+      "withheld_hint": "  These files are behind the current template. Review the upstream changes and merge them manually, or run `arbiter diff --withheld` for a focused list.",
+      "governance_stale_section": "STALE {file}: {section} \u2014 {detail}",
+      "governance_stale_footer": "Governance sections are stale \u2014 run `arbiter update`.",
+      "governance_up_to_date": "Governance sections are up to date."
+    },
+    "worktree": {
+      "ready": "\nWorktree ready: {path}",
+      "branch": "Branch:         {branch}",
+      "base": "Base:           {base} @ {ref}",
+      "next": "\nNext:           cd '{path}'\n",
+      "harvested": "Harvested {count} file(s):",
+      "harvest_copied": "  copied: {file}",
+      "skipped_count": "Skipped {count} file(s) (uncommitted changes in main repo):",
+      "harvest_skipped": "  skipped: {file}",
+      "harvest_protected": "  protected-untracked: {file}",
+      "no_harvest": "No files to harvest (worktree has no changes).",
+      "branch_deleted": "Branch {branch} deleted.",
+      "closed": "\nWorktree closed: {path}",
+      "relinked": "\nWorktree relinked: {path}"
+    },
+    "doctor": {
+      "recover_lock": {
+        "refused": "Refusing to release live or unconfirmed lock holder(s): {holders}. Use `arbiter doctor recover-lock --force` to override deliberately."
+      }
+    },
+    "wizard": {
+      "migration_plan": "\n  Migration plan:",
+      "replace_entry": "  \u251c\u2500\u2500 Replace (backed up): {entry}",
+      "merge_entry": "  \u251c\u2500\u2500 Merge: {entry}",
+      "preserve_entry": "  \u251c\u2500\u2500 Preserve: {entry}",
+      "create_entry": "  \u251c\u2500\u2500 Create: {entry}",
+      "existing_governance": "  Existing governance detected:",
+      "existing_agents_md": "  \u251c\u2500\u2500 AGENTS.md",
+      "existing_claude_dir": "  \u251c\u2500\u2500 .claude/ directory",
+      "existing_agents_dir": "  \u251c\u2500\u2500 .agents/ directory",
+      "existing_gemini_dir": "  \u251c\u2500\u2500 .gemini/ directory",
+      "existing_windsurf": "  \u251c\u2500\u2500 windsurf-instructions.md",
+      "existing_aider": "  \u251c\u2500\u2500 .aider.conf.yml",
+      "tools_header": "\n  Will generate governance files for: {tools}",
+      "cancelled": "\n  Cancelled.\n",
+      "aborted": "\n  Aborted \u2014 no changes made.\n",
+      "gh_access_note": "  Note: {message}"
+    }
+  }
+}

package/dist/i18n/index.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+import{readFileSync,existsSync}from"node:fs";import{dirname,join}from"node:path";import{fileURLToPath}from"node:url";const __dirname=dirname(fileURLToPath(import.meta.url)),cache=new Map;let activeCatalog=null;function flatten(obj,prefix=""){const result=new Map;for(const[k,v]of Object.entries(obj)){const key=prefix?`${prefix}.${k}`:k;if(typeof v=="string")result.set(key,v);else for(const[sk,sv]of flatten(v,key))result.set(sk,sv)}return result}function readLocaleFile(loc){const path=join(__dirname,`${loc}.json`);if(!existsSync(path))return null;try{return JSON.parse(readFileSync(path,"utf-8"))}catch{return process.stderr.write(`[arbiter i18n] malformed locale file: ${path}
+`),null}}function buildLocaleChain(locale){if(!locale||locale==="C"||locale==="POSIX")return["en"];const chain=[locale],noEncoding=locale.replace(/\..+$/,"");noEncoding!==locale&&chain.push(noEncoding);const base=noEncoding.replace(/[_-].+$/,"");return base!==noEncoding&&chain.push(base),chain.includes("en")||chain.push("en"),chain}export function loadCatalog(locale){const cached=cache.get(locale);if(cached)return cached;const chain=buildLocaleChain(locale);for(const loc of chain){const raw=readLocaleFile(loc);if(raw){const catalog=flatten(raw);return cache.set(locale,catalog),catalog}}process.stderr.write(`[arbiter i18n] no locale file found for '${locale}' (chain exhausted)
+`);const fallback=flatten({});return cache.set(locale,fallback),fallback}export function resolveLocale(env){const raw=env.ARBITER_LOCALE||env.LC_ALL||env.LC_MESSAGES||env.LANG||"en";return!raw||raw==="C"||raw==="POSIX"?"en":raw}function getActiveCatalog(){return activeCatalog||(activeCatalog=loadCatalog(resolveLocale(process.env))),activeCatalog}export function t(key,params){let value=getActiveCatalog().get(key)??key;if(params)for(const[k,v]of Object.entries(params))value=value.replaceAll(`{${k}}`,String(v));return value}export function resetForTest(){activeCatalog=null,cache.clear()}

package/dist/i18n/types.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+export{};

package/dist/integrations/companions.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{detectInstalledSkills}from"./skill-detector.js";import{SKILLS_MATRIX,bareName}from"./skills-matrix.js";export function resolveCompanions(input){if(input.self)return[];const installed=detectInstalledSkills({targetDir:"",claudeHome:input.claudeHome}),installedIds=new Set(installed.map(s=>s.skillId)),installedBare=new Set(installed.map(s=>bareName(s.skillId))),active=[];for(const entry of SKILLS_MATRIX){const one=resolveOne(entry,installedIds,installedBare,input.overrides,input.language);one&&active.push(one)}return active}function resolveOne(entry,installedIds,installedBare,overrides,language){const policy=entry.companion;if(!policy||!installedIds.has(entry.id)&&!installedBare.has(bareName(entry.id)))return null;const override=overrides?.[bareName(entry.id)]??overrides?.[entry.id];return override?.enabled===!1?null:{id:entry.id,label:policy.label,mode:resolveMode(override,policy,language),policy}}const CONSERVATIVE_LITE_STACKS=new Set(["java","kotlin","csharp"]);function resolveModeWithSource(override,policy,language){const mode=override?.mode;return mode==="lite"||mode==="full"?{mode,source:"arbiter.json override"}:language!==void 0&&CONSERVATIVE_LITE_STACKS.has(language)?{mode:"lite",source:"stack default"}:{mode:policy.defaultMode,source:"policy default"}}function resolveMode(override,policy,language){return resolveModeWithSource(override,policy,language).mode}export function companionGreenInstruction(active){return active.filter(c=>c.policy.greenInstruction).map(c=>(c.policy.greenInstruction??"").replaceAll("{mode}",c.mode)).join(" ")}export function companionStatusLine(active){return active.map(c=>`${c.label} (${c.mode})`).join(", ")}export function diagnoseCompanions(input){const installed=detectInstalledSkills({targetDir:"",claudeHome:input.claudeHome}),installedIds=new Set(installed.map(s=>s.skillId)),installedBare=new Set(installed.map(s=>bareName(s.skillId))),out=[];for(const entry of SKILLS_MATRIX){const policy=entry.companion;if(!policy)continue;const override=input.overrides?.[bareName(entry.id)]??input.overrides?.[entry.id],{mode,source}=resolveModeWithSource(override,policy,input.language);out.push({id:entry.id,label:policy.label,installed:installedIds.has(entry.id)||installedBare.has(bareName(entry.id)),disabledByConfig:override?.enabled===!1,mode,modeSource:source})}return out}

package/dist/integrations/external-review.js

@@ -0,0 +1,10 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync,lstatSync,realpathSync,statSync}from"node:fs";import{tmpdir}from"node:os";import{dirname,isAbsolute,join,relative,resolve,sep}from"node:path";import{currentBranch,headSha}from"../evidence/git-checks.js";import{mkdtempTranslated,readFileContained,readFileTranslated,rmTranslated,toFsError,writeFileContained}from"../utils/fs.js";import{getLogger}from"../utils/logger.js";import{CliError,runCli}from"../utils/run-cli.js";const CODEX_ENV_KEYS=["PATH","HOME","CODEX_HOME","TMPDIR","TMP","TEMP","LANG","LC_ALL","NO_COLOR"],EXTERNAL_REVIEW_SCHEMA="schemas/agent-return-external.schema.json",EXTERNAL_REVIEW_MAX_DIFF_BYTES=512*1024,EXTERNAL_REVIEW_MAX_OUTPUT_BYTES=512*1024,CROSS_MODEL_DISPATCH_SCHEMA="arbiter-cross-model-dispatch-v1";function externalSlotsForTier(tier){return tier==="Standard"?1:0}function slotCount(totalSlots){return Number.isInteger(totalSlots)&&totalSlots>0?totalSlots:0}function fallbackPlan(input,reason){const total=slotCount(input.totalSlots),labels=input.verticals.length>0?input.verticals:["bugs"];return{tier:input.tier,phase:input.phase,external:[],anthropic:Array.from({length:total},(_,index)=>labels[index%labels.length]??"bugs"),degradationReason:reason}}function configuredSlotCount(input){const cfg=input.cfg;return cfg===void 0||!cfg.enabled||!cfg.diffEgressConsent||!cfg.providers.includes("codex")?null:cfg.slots.codeReview<=0?0:!input.access?.available||!input.access.authenticated?null:Math.min(externalSlotsForTier(input.tier),slotCount(input.totalSlots),Math.max(0,cfg.slots.codeReview))}function fallbackReason(input){return input.cfg===void 0||!input.cfg.enabled?"disabled":input.cfg.slots.codeReview<=0?"provider-not-configured":input.cfg.diffEgressConsent?input.cfg.providers.includes("codex")?input.access?.available!==!0?"provider-unavailable":"provider-unauthenticated":"provider-not-configured":"consent-missing"}function preferredVertical(verticals){return verticals.includes("security")?"security":verticals.includes("bugs")?"bugs":verticals[0]??"bugs"}function planCrossModelSlots(input){if(input.phase!=="refactor")return fallbackPlan(input,"disabled");const count=configuredSlotCount(input);if(count===null||count===0)return fallbackPlan(input,fallbackReason(input));const labels=input.verticals.length>0?input.verticals:["bugs"],external=[preferredVertical(labels)],anthropicCount=slotCount(input.totalSlots)-count,anthropic=Array.from({length:anthropicCount},(_,index)=>labels[index%labels.length]??"bugs");return{tier:input.tier,phase:input.phase,external,anthropic}}function parseObject(value){try{const parsed=JSON.parse(value);return isPayloadObject(parsed)?parsed:null}catch{return null}}function isPayloadObject(value){if(value===null||typeof value!="object"||Array.isArray(value))return!1;const record=value;return Object.keys(record).some(key=>!["verdict","confidence","findings","refutations"].includes(key))?!1:(record.verdict==="PASS"||record.verdict==="WARN"||record.verdict==="FAIL")&&typeof record.confidence=="number"&&Array.isArray(record.findings)&&Array.isArray(record.refutations)}function balancedObjectAt(text,start){let depth=0,quoted=!1,escaped=!1;for(let index=start;index<text.length;index++){const char=text[index];if(quoted){escaped?escaped=!1:char==="\\"?escaped=!0:quoted=char!=='"';continue}if(char==='"'){quoted=!0;continue}if(depth+=char==="{"?1:char==="}"?-1:0,depth===0)return{value:text.slice(start,index+1),end:index}}return null}function balancedObjects(text){const objects=[];for(let start=0;start<text.length;start++){if(text[start]!=="{")continue;const object=balancedObjectAt(text,start);object!==null&&(objects.push(object.value),start=object.end)}return objects}function extractAgentReturnJson(text){const trimmed=text.trim();if(trimmed==="")return null;const direct=parseObject(trimmed);if(direct!==null)return direct;const fenced=trimmed.match(/^```(?:json)?\s*([\s\S]*?)\s*```$/i)?.[1];if(fenced!==void 0){const parsedFence=parseObject(fenced);if(parsedFence!==null)return parsedFence}let last=null;for(const candidate of balancedObjects(trimmed)){const parsed=parseObject(candidate);parsed!==null&&(last=parsed)}return last}function truncateDiff(diff){const bytes=Buffer.byteLength(diff,"utf8");return bytes<=EXTERNAL_REVIEW_MAX_DIFF_BYTES?{text:diff,bytes,truncated:!1}:{text:Buffer.from(diff,"utf8").subarray(0,EXTERNAL_REVIEW_MAX_DIFF_BYTES).toString("utf8"),bytes,truncated:!0}}function buildPrompt(prompt,diff,truncated){return`${prompt}
+
+--- BEGIN DIFF ---
+${diff}${truncated?`
+
+[arbiter cross-model review: diff truncated at 512 KiB; degradation=diff-truncated]
+`:""}--- END DIFF ---
+`}function resultStatus(reasons){return reasons.length>0?"degraded":"fulfilled"}function resultFor(request,prepared,reasons,extra={}){return{provider:"codex",status:resultStatus(reasons),diffBytes:prepared.bytes,diffTruncated:prepared.truncated,degradationReasons:reasons,...reasons[0]!==void 0?{degradationReason:reasons[0]}:{},recorded:extra.recorded??!1,...extra.envelope!==void 0?{envelope:extra.envelope}:{}}}function recorderArgs(request,access){return[join(request.repoRoot,"scripts","record-agent-return.mjs"),"--task",request.taskId,"--repo-root",request.repoRoot,...request.evidenceDir!==void 0?["--evidence-dir",request.evidenceDir]:[],"--provenance-vendor",access.vendor,"--provenance-cli","codex",...access.version!==null?["--provenance-cli-version",access.version]:[],"--provenance-dispatch","external-cli"]}function outputText(outputPath,codex){if(existsSync(outputPath)){if(statSync(outputPath).size>EXTERNAL_REVIEW_MAX_OUTPUT_BYTES)return null;const file=readFileTranslated(outputPath,"utf-8");if(Buffer.byteLength(file,"utf8")>EXTERNAL_REVIEW_MAX_OUTPUT_BYTES)return null;if(file.trim()!=="")return file}return Buffer.byteLength(codex.stdout,"utf8")>EXTERNAL_REVIEW_MAX_OUTPUT_BYTES?null:codex.stdout}function invokeCodex(request,prompt,outputPath,schemaPath){const sandboxRoot=dirname(outputPath),sourceEnv=request.env??process.env,env=Object.fromEntries(CODEX_ENV_KEYS.flatMap(key=>{const value=sourceEnv[key];return value===void 0?[]:[[key,value]]}));return runCli("codex",["exec","--strict-config","--ephemeral","--ignore-user-config","-c",'shell_environment_policy.inherit="none"',"-c",'default_permissions="arbiter-cross-model-review"',"-c",'permissions.arbiter-cross-model-review.extends=":read-only"',"-c",'permissions.arbiter-cross-model-review.filesystem.:root="deny"',"-c",'permissions.arbiter-cross-model-review.filesystem.:minimal="read"',"-c","permissions.arbiter-cross-model-review.network.enabled=false","--skip-git-repo-check","--output-schema",schemaPath,"-o",outputPath,"-C",sandboxRoot,"-"],{cwd:sandboxRoot,env,input:prompt,timeoutMs:request.cfg.timeoutMs,retries:0})}function persistEnvelope(request,access,envelope){return request.evidenceDir===void 0&&assertSafeDirectoryPath(request.repoRoot,join(request.repoRoot,".arbiter","evidence","agent-returns",sanitizeTask(request.taskId))),runCli("node",recorderArgs(request,access),{cwd:request.repoRoot,input:JSON.stringify({schema:"arbiter-agent-return-v1",agent:"codex-reviewer",role:"reviewer",taskId:request.taskId,verdict:envelope.verdict,confidence:envelope.confidence,findings:envelope.findings,refutations:envelope.refutations}),timeoutMs:request.cfg.timeoutMs,retries:0}).stdout.match(/\[record-agent-return\] OK — wrote (.+)\s*$/m)?.[1]??null}function sanitizeTask(taskId){return taskId.replace(/[^a-zA-Z0-9_-]/g,"_").slice(0,64)||"unknown"}const DIRECT_DISPATCH_REASONS={"consent-missing":"consent-absent","provider-unauthenticated":"not-authenticated",disabled:"disabled-by-env","provider-not-configured":"disabled-by-env","diff-truncated":"diff-truncated","coercion-failed":"coercion-failed","envelope-rejected":"envelope-rejected"};function dispatchReasonFromCliError(error){return error instanceof CliError?error.notFound?"cli-not-found":error.timedOut?"timeout":"nonzero-exit":"nonzero-exit"}function dispatchReasonFromUnavailableError(error){const detail=errorMessage(error)?.toLowerCase();return detail?.includes("timed out")||detail?.includes("timeout")?"timeout":detail?.includes("exit")||detail?.includes("failed")?"nonzero-exit":"cli-not-found"}function dispatchReason(reason,error){return DIRECT_DISPATCH_REASONS[reason]??(reason==="invocation-failed"?dispatchReasonFromCliError(error):reason==="provider-unavailable"?dispatchReasonFromUnavailableError(error):"nonzero-exit")}function errorMessage(error){return typeof error=="string"&&error.trim()!==""?error.trim():error instanceof Error&&error.message.trim()!==""?error.message.trim():null}function nonzeroExitDetail(error,message){return error instanceof CliError?`${error.cmd==="codex"?"Codex":error.cmd} exited with status ${error.exitCode}`:message??"Codex CLI exited unsuccessfully"}function dispatchDetail(reason,error){const message=errorMessage(error);return reason==="cli-not-found"?error instanceof CliError&&error.notFound?`Command not found: ${error.cmd}`:message??"Codex CLI unavailable":reason==="timeout"?message??"Codex invocation timed out":reason==="nonzero-exit"?nonzeroExitDetail(error,message):{"not-authenticated":"Codex CLI is not authenticated","consent-absent":"cross-model diff egress consent is absent","disabled-by-env":"cross-model review is disabled by configuration or environment","coercion-failed":"Codex output did not contain a valid review payload","envelope-rejected":"the recorder rejected the Codex envelope","diff-truncated":"diff exceeded the 512 KiB review limit"}[reason]}function relativeEvidencePath(repoRoot,path){return path===null?null:relative(repoRoot,path).replaceAll("\\","/")}function requestedEntries(request,plan){return!request.cfg.enabled||request.cfg.slots.codeReview<=0||plan.phase!=="refactor"||externalSlotsForTier(request.tier??"Standard")===0?[]:[{provider:"codex",vertical:request.vertical??plan.external[0]??"bugs"}]}function fulfilledEntries(request,result,envelopePath){return result.status!=="fulfilled"||result.envelope===void 0||!result.recorded||envelopePath===null?[]:[{provider:"codex",cliVersion:request.access?.version??"unknown",envelope:relativeEvidencePath(request.repoRoot,envelopePath)??envelopePath}]}function degradedEntries(request,plan,result,error){if(request.cfg.slots.codeReview<=0||plan.phase!=="refactor"||externalSlotsForTier(request.tier??"Standard")===0)return[];if(result.status!=="degraded")return[];const vertical=request.vertical??plan.external[0]??"bugs",originalReason=result.degradationReasons.at(-1)??plan.degradationReason;if(originalReason===void 0)return[];const reason=dispatchReason(originalReason,error);return[{provider:"codex",vertical,substitute:"anthropic",reason,detail:dispatchDetail(reason,error)}]}function writeDispatchEvidence(request,plan,result,envelopePath,error){const artifact={schema:CROSS_MODEL_DISPATCH_SCHEMA,taskId:request.taskId,branch:currentBranch(request.repoRoot),sha:headSha(request.repoRoot),ts:new Date().toISOString(),phase:request.phase??plan.phase,requested:requestedEntries(request,plan),fulfilled:fulfilledEntries(request,result,envelopePath),degraded:degradedEntries(request,plan,result,error??request.access?.error)},content=`${JSON.stringify(artifact,null,2)}
+`;if(request.dispatchEvidenceDir!==void 0){writeFileContained(request.dispatchEvidenceDir,join(sanitizeTask(request.taskId),"dispatch.json"),content);return}writeFileContained(request.repoRoot,join(".arbiter","evidence","cross-model",sanitizeTask(request.taskId),"dispatch.json"),content)}function outsideRoot(root,candidate){const path=relative(root,candidate);return isAbsolute(path)||path===".."||path.startsWith(`..${sep}`)}function assertSafeDirectoryPath(repoRoot,targetPath){let repoResolved;try{repoResolved=realpathSync(repoRoot)}catch(error){throw toFsError(error,repoRoot)}const target=resolve(targetPath);if(outsideRoot(repoResolved,target))throw new Error(`${targetPath} resolves outside the repository`);let current=target;for(;current!==repoResolved;){try{const stat=lstatSync(current);if(stat.isSymbolicLink())throw new Error(`${current} must not be a symbolic link`);if(!stat.isDirectory())throw new Error(`${current} must be a directory`);if(outsideRoot(repoResolved,realpathSync(current)))throw new Error(`${current} resolves outside the repository`)}catch(error){if(error.code!=="ENOENT")throw toFsError(error,current)}current=dirname(current)}}function assertSafeArbiterEvidenceRoot(repoRoot){for(const path of[join(repoRoot,".arbiter"),join(repoRoot,".arbiter","evidence"),join(repoRoot,".arbiter","evidence","cross-model"),join(repoRoot,".arbiter","evidence","agent-returns")])assertSafeDirectoryPath(repoRoot,path)}function finalizeResult(request,plan,result,envelopePath=null,error){if(writeDispatchEvidence(request,plan,result,envelopePath,error),request.cfg.onUnavailable==="fail"&&result.status==="degraded")throw new Error(`cross-model review unavailable: ${result.degradationReasons.join(", ")}`);return result}function cleanupTemp(dir){try{rmTranslated(dir,{recursive:!0,force:!0})}catch(error){getLogger().warn("cross_model_review.temp_cleanup_failed",{path:dir},`could not remove external-review scratch directory: ${error instanceof Error?error.message:String(error)}`)}}function resultWithoutExternal(request,plan,prepared){const reasons=request.cfg.slots.codeReview<=0||externalSlotsForTier(request.tier??"Standard")===0||plan.phase!=="refactor"?[]:[request.preflightDegradation??plan.degradationReason??"provider-unavailable"],result=resultFor(request,prepared,reasons);return request.cfg.enabled?finalizeResult(request,plan,result,null,request.preflightError):result}function persistExternalPayload(request,plan,prepared,reasons,payload){let envelopePath;try{if(request.access===void 0)throw new Error("external access disappeared before persistence");if(envelopePath=persistEnvelope(request,request.access,payload),envelopePath===null)throw new Error("recorder did not confirm envelope persistence")}catch(error){return finalizeResult(request,plan,resultFor(request,prepared,[...reasons,"envelope-rejected"],{envelope:payload}),null,error)}return finalizeResult(request,plan,resultFor(request,prepared,reasons,{envelope:payload,recorded:!0}),envelopePath)}function prepareExternalReview(request){request.cfg.enabled&&(request.dispatchEvidenceDir===void 0||request.evidenceDir===void 0)&&assertSafeArbiterEvidenceRoot(request.repoRoot);const prepared=truncateDiff(request.diff),tier=request.tier??"Standard",initial=planCrossModelSlots({tier,phase:request.phase??"refactor",totalSlots:externalSlotsForTier(tier),verticals:[request.vertical??"bugs"],cfg:request.cfg,...request.access!==void 0?{access:request.access}:{}});return{prepared,initial}}function invokeExternalReview(request){const{prepared,initial}=prepareExternalReview(request);if(initial.external.length===0)return resultWithoutExternal(request,initial,prepared);const reasons=prepared.truncated?["diff-truncated"]:[],prompt=buildPrompt(request.prompt,prepared.text,prepared.truncated);let scratch=null;try{scratch=mkdtempTranslated(join(tmpdir(),"arbiter-cross-model-review-"));const outputPath=join(scratch,"return.json"),schemaPath=join(scratch,"agent-return-external.schema.json");writeFileContained(scratch,"agent-return-external.schema.json",readFileContained(request.repoRoot,EXTERNAL_REVIEW_SCHEMA));const codex=invokeCodex(request,prompt,outputPath,schemaPath),output=outputText(outputPath,codex),payload=output===null?null:extractAgentReturnJson(output);return payload===null?finalizeResult(request,initial,resultFor(request,prepared,[...reasons,"coercion-failed"]),null):persistExternalPayload(request,initial,prepared,reasons,payload)}catch(error){if(error instanceof Error&&error.message.startsWith("cross-model review unavailable:"))throw error;return finalizeResult(request,initial,resultFor(request,prepared,[...reasons,"invocation-failed"]),null,error)}finally{scratch!==null&&cleanupTemp(scratch)}}export{externalSlotsForTier,planCrossModelSlots,extractAgentReturnJson,assertSafeArbiterEvidenceRoot,invokeExternalReview};

package/dist/integrations/plugin-schema.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{z}from"zod";const PluginPackageSchema=z.object({name:z.string().regex(/^(?:@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/,"Invalid npm package name"),version:z.string().regex(/^\d+\.\d+\.\d+/,"Must follow semver (MAJOR.MINOR.PATCH)"),keywords:z.array(z.string()).refine(kw=>kw.includes("arbiter-plugin"),{message:'keywords must include "arbiter-plugin"'}),main:z.string().optional(),module:z.string().optional(),peerDependencies:z.record(z.string(),z.string()).optional()});export function validatePluginPackageJson(raw){const result=PluginPackageSchema.safeParse(raw);return result.success?{ok:!0,errors:[]}:{ok:!1,errors:result.error.issues.map(i=>`${i.path.join(".")}: ${i.message}`)}}

package/dist/integrations/skill-detector.js

@@ -0,0 +1,7 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync,readdirSync,readFileSync,statSync}from"node:fs";import{join}from"node:path";const MAX_DEPTH=6,MAX_ENTRIES=5e4,SKIP_DIRS=new Set(["node_modules"]);function parseFrontmatter(content){const normalized=content.replace(/\r\n/g,`
+`);if(!normalized.startsWith(`---
+`))return null;const end=normalized.indexOf(`
+---`,4);if(end===-1)return null;const block=normalized.slice(4,end),result={};for(const line of block.split(`
+`)){const colon=line.indexOf(":");if(colon===-1)continue;const key=line.slice(0,colon).trim();let val=line.slice(colon+1).trim();(val.startsWith('"')&&val.endsWith('"')||val.startsWith("'")&&val.endsWith("'"))&&(val=val.slice(1,-1)),key&&(result[key]=val)}return result}function sortedDirectoryEntries(dir){try{return readdirSync(dir).sort()}catch{return null}}function visitSkillEntry(dir,entry,depth,context){const{found,count}=context;if(entry.startsWith(".")||SKIP_DIRS.has(entry))return;const full=join(dir,entry);let stat;try{stat=statSync(full)}catch{return}if(stat.isDirectory()){findSkillFiles(full,depth+1,context);return}entry==="SKILL.md"&&(found.push(full),count.n++)}function findSkillFiles(dir,depth,context){const{count,limits}=context;if(depth>limits.maxDepth||count.n>=limits.maxEntries||!existsSync(dir))return;const entries=sortedDirectoryEntries(dir);if(entries!==null)for(const entry of entries){if(count.n>=limits.maxEntries){count.truncated=!0;break}visitSkillEntry(dir,entry,depth,context)}}function derivePluginOwner(path,root){const segs=path.split(/[\\/]+/).filter(Boolean),rootLen=root.split(/[\\/]+/).filter(Boolean).length,rel=segs.slice(rootLen),skillsIdx=rel.lastIndexOf("skills");return skillsIdx>=1?rel[skillsIdx-2]??rel[skillsIdx-1]??"plugin":rel.length>=4?rel[rel.length-4]??"plugin":rel.length>=3?rel[rel.length-3]??"plugin":"plugin"}function readSkill(path,deriveOwner){let content;try{content=readFileSync(path,"utf-8")}catch{return null}const fm=parseFrontmatter(content);if(!fm||!fm.name)return null;const owner=fm.pluginOwner??deriveOwner(path);return{skillId:`${owner}:${fm.name}`,pluginOwner:owner,version:fm.version??"unknown",sourcePath:path,...fm.role?{role:fm.role}:{}}}function collectFromDir(dir,seen,results,deriveOwner,limits){const found=[],count={n:0,truncated:!1};findSkillFiles(dir,0,{found,count,limits}),count.truncated&&process.stderr.write(`[arbiter] skill scan reached MAX_ENTRIES (${limits.maxEntries}) under ${dir}; results may be partial
+`);for(const path of found){const skill=readSkill(path,deriveOwner);skill&&(seen.has(skill.skillId)||(seen.add(skill.skillId),results.push(skill)))}}const projectOwner=()=>"project",userOwner=()=>"user";export function detectInstalledSkills(opts){const{targetDir,claudeHome}=opts,limits=opts.scanLimits??{maxDepth:MAX_DEPTH,maxEntries:MAX_ENTRIES},cacheKey=`${targetDir}\0${claudeHome}\0${limits.maxDepth}\0${limits.maxEntries}`,hit=skillCache.get(cacheKey);if(hit)return hit;const seen=new Set,results=[];if(targetDir){const pluginsRoot=join(targetDir,".claude","plugins");collectFromDir(pluginsRoot,seen,results,p=>derivePluginOwner(p,pluginsRoot),limits),collectFromDir(join(targetDir,".claude","skills"),seen,results,projectOwner,limits)}if(claudeHome){const cacheRoot=join(claudeHome,"plugins","cache");collectFromDir(cacheRoot,seen,results,p=>derivePluginOwner(p,cacheRoot),limits),collectFromDir(join(claudeHome,"skills"),seen,results,userOwner,limits)}return Object.freeze(results),skillCache.set(cacheKey,results),results}const skillCache=new Map;export function clearSkillCache(){skillCache.clear()}

package/dist/integrations/skills-matrix.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{SKILL_NAMES}from"../generators/skills.js";export function bareName(id){return id.includes(":")?id.split(":")[1]??id:id}const ARBITER_SKILLS=SKILL_NAMES.map(id=>({id,owner:"arbiter",role:"governance",installCmd:"arbiter init  # generates automatically",installSource:"builtin"})),UPSTREAM_SKILLS=[{id:"superpowers:using-superpowers",owner:"claude-plugins-official",role:"session-bootstrap",installCmd:"/plugin add claude-plugins-official/superpowers",installSource:"plugin"},{id:"pr-review-toolkit:review-pr",owner:"claude-plugins-official",role:"pr-review",installCmd:"/plugin add claude-plugins-official/pr-review-toolkit",installSource:"plugin"},{id:"frontend-design:frontend-design",owner:"claude-plugins-official",role:"ui-design",installCmd:"/plugin add claude-plugins-official/frontend-design",installSource:"plugin"},{id:"ponytail:ponytail",owner:"DietrichGebert",role:"drafting-persona",installCmd:"/plugin marketplace add DietrichGebert/ponytail && /plugin install ponytail@ponytail",installSource:"plugin",companion:{label:"ponytail",defaultMode:"full",greenInstruction:"Companion ponytail is active in {mode} mode: while implementing, climb ponytail\u2019s YAGNI ladder \u2014 reuse existing code, prefer stdlib/native features, resist new dependencies and speculative abstractions, and ship the shortest working diff. Never skip tests, input validation, security, or error handling, and never use ultra mode \u2014 arbiter\u2019s gates remain the safety net."}}];export const SKILLS_MATRIX=[...ARBITER_SKILLS,...UPSTREAM_SKILLS];

package/dist/integrations/types.d.ts

@@ -0,0 +1,23 @@
+export interface InstalledSkill {
+    /** Composite key: "<pluginOwner>:<skillName>" */
+    skillId: string;
+    pluginOwner: string;
+    version: string;
+    sourcePath: string;
+    role?: string;
+}
+export interface SkillMatrixEntry {
+    skillId: string;
+    pluginOwner: string;
+    versionRange: string;
+    role: string;
+    integrationStatus: 'proven' | 'beta' | 'unknown';
+    /** Built-in SKILL_NAMES this skill replaces when detected */
+    replaces: string[];
+    referenceUrl: string;
+}
+export interface SkipReport {
+    generator: string;
+    reason: string;
+    replacedBy: string;
+}

package/dist/integrations/types.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+export{};

package/dist/internal/cli-deprecation-registry.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+export const CLI_DEPRECATED_FLAGS=[{flag:"--no-adopt-gate-spine",stage:"warn",deprecatedIn:"0.5.0",removeIn:"0.8.0",replacement:"(none \u2014 omit the flag; withholding the gate spine is already the default)"},{flag:"--no-adopt-governance",stage:"warn",deprecatedIn:"0.5.0",removeIn:"0.8.0",replacement:"(none \u2014 omit the flag; withholding governance files is already the default)"}];

package/dist/internal/deprecate.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+export function applyDeprecatedFlagFilter(argv,registry){const remaining=[];for(const arg of argv){const eqIdx=arg.indexOf("="),flagName=eqIdx===-1?arg:arg.slice(0,eqIdx),record=registry.find(r=>r.flag===flagName);if(record===void 0){remaining.push(arg);continue}if(record.stage==="remove")return{remaining:argv,exitCode:1,errorMessage:`[arbiter] "${record.flag}" was removed in ${record.removeIn}. Use "${record.replacement}" instead. See docs/DEPRECATIONS.md.`};process.stderr.write(`[arbiter] DEPRECATED: "${record.flag}" is deprecated (since ${record.deprecatedIn}, removed in ${record.removeIn}). Use "${record.replacement}" instead.
+`),record.stage==="warn"&&remaining.push(arg)}return{remaining}}

package/dist/internal/experimental-warn.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+const warned=new Set;export function warnExperimental(name){warned.has(name)||(warned.add(name),process.stderr.write(`[arbiter] EXPERIMENTAL: "${name}" is an experimental feature and may change without notice. Enable with --experimental.${name}.
+`))}export function _resetWarned(){warned.clear()}

package/dist/invariants/catalog.d.ts

@@ -0,0 +1,2 @@
+import type { Invariant } from './types.js';
+export declare const INVARIANT_CATALOG: readonly Invariant[];