@hasna/todos 0.11.40 → 0.11.41

package/dist/lib/event-hooks.d.ts

@@ -0,0 +1,58 @@
+import { type LocalEventHookConfig, type LocalEventHookTarget } from "./config.js";
+export declare const LOCAL_EVENT_TYPES: readonly ["task.assigned", "task.blocked", "task.started", "task.completed", "task.failed", "task.unblocked", "task.status_changed", "plan.updated", "run.started", "run.completed", "run.failed", "run.cancelled", "approval.decided", "import.finished", "export.finished"];
+export type LocalEventType = typeof LOCAL_EVENT_TYPES[number] | string;
+export interface LocalEventHookInput {
+    name: string;
+    events: string[];
+    target: LocalEventHookTarget;
+    enabled?: boolean;
+    file_path?: string;
+    socket_path?: string;
+    command?: string;
+    cwd?: string;
+    sandbox?: string;
+    env?: Record<string, string>;
+    retry?: {
+        attempts?: number;
+        backoff_ms?: number;
+    };
+}
+export interface LocalEventEnvelope {
+    id: string;
+    type: LocalEventType;
+    timestamp: string;
+    payload: unknown;
+    source: {
+        package: "@hasna/todos";
+        local_only: true;
+    };
+    integrity: {
+        algorithm: "sha256";
+        digest: string;
+    };
+}
+export interface LocalEventHookDispatchInput {
+    type: LocalEventType;
+    payload?: unknown;
+    hooks?: LocalEventHookConfig[];
+    timestamp?: string;
+}
+export interface LocalEventHookDispatchResult {
+    hook: string;
+    event_id: string;
+    event_type: LocalEventType;
+    target: LocalEventHookTarget;
+    status: "delivered" | "failed" | "skipped";
+    attempts: number;
+    integrity: LocalEventEnvelope["integrity"];
+    output_summary?: string;
+    error?: string;
+}
+export declare function upsertLocalEventHook(input: LocalEventHookInput): LocalEventHookConfig;
+export declare function listLocalEventHooks(): LocalEventHookConfig[];
+export declare function getLocalEventHook(name: string): LocalEventHookConfig | null;
+export declare function removeLocalEventHook(name: string): boolean;
+export declare function emitLocalEventHooks(input: LocalEventHookDispatchInput): Promise<LocalEventHookDispatchResult[]>;
+export declare function emitLocalEventHooksQuiet(input: LocalEventHookDispatchInput): void;
+export declare function testLocalEventHook(name: string, input: Omit<LocalEventHookDispatchInput, "hooks">): Promise<LocalEventHookDispatchResult[]>;
+//# sourceMappingURL=event-hooks.d.ts.map

package/dist/lib/event-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-hooks.d.ts","sourceRoot":"","sources":["../../src/lib/event-hooks.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,iBAAiB,+QAgBpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE;QACN,OAAO,EAAE,cAAc,CAAC;QACxB,UAAU,EAAE,IAAI,CAAC;KAClB,CAAC;IACF,SAAS,EAAE;QACT,SAAS,EAAE,QAAQ,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAmLD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,CAYrF;AAED,wBAAgB,mBAAmB,IAAI,oBAAoB,EAAE,CAE5D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAE3E;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAKrH;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,2BAA2B,GAAG,IAAI,CAEjF;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,2BAA2B,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAIjJ"}

package/dist/lib/local-bridge.d.ts

@@ -0,0 +1,77 @@
+import type { Database } from "bun:sqlite";
+import { type ExportedArtifactContent } from "./artifact-store.js";
+import type { Project, Plan, Task, TaskComment, TaskDependency, TaskList } from "../types/index.js";
+import type { TaskCommit, TaskGitRef, TaskVerification } from "../db/task-commits.js";
+import type { TaskFile } from "../db/task-files.js";
+import type { TaskRun, TaskRunArtifact, TaskRunCommand, TaskRunEvent } from "../db/task-runs.js";
+export declare const TODOS_LOCAL_BRIDGE_KIND = "hasna.todos.local-bridge";
+export declare const TODOS_LOCAL_BRIDGE_SCHEMA_VERSION = 1;
+export interface TodosLocalBridgePackageSource {
+    packageName: "@hasna/todos";
+    repository: "hasna/todos";
+    version: string;
+}
+export interface TodosLocalBridgeSource {
+    project_id: string | null;
+    project_path: string | null;
+}
+export interface TodosLocalBridgeData {
+    projects: Project[];
+    task_lists: TaskList[];
+    plans: Plan[];
+    tasks: Task[];
+    task_dependencies: TaskDependency[];
+    comments: TaskComment[];
+    runs: TaskRun[];
+    run_events: TaskRunEvent[];
+    run_commands: TaskRunCommand[];
+    run_artifacts: TaskRunArtifact[];
+    task_files: TaskFile[];
+    task_commits: TaskCommit[];
+    task_git_refs: TaskGitRef[];
+    task_verifications: TaskVerification[];
+}
+export interface TodosLocalBridgeBundle {
+    schemaVersion: typeof TODOS_LOCAL_BRIDGE_SCHEMA_VERSION;
+    kind: typeof TODOS_LOCAL_BRIDGE_KIND;
+    exportedAt: string;
+    package: TodosLocalBridgePackageSource;
+    source: TodosLocalBridgeSource;
+    data: TodosLocalBridgeData;
+    artifact_contents?: ExportedArtifactContent[];
+    stats: Record<keyof TodosLocalBridgeData, number>;
+}
+export interface ExportLocalBridgeOptions {
+    project_id?: string;
+    generatedAt?: string;
+    version?: string;
+}
+export interface LocalBridgeValidationResult {
+    ok: boolean;
+    issues: string[];
+}
+export interface LocalBridgeImportConflict {
+    table: string;
+    id: string;
+    reason: "already_exists" | "missing_dependency" | "diverged";
+    fields?: string[];
+    resolution?: "skipped" | "safe_merged" | "manual_required";
+}
+export interface LocalBridgeImportResult {
+    ok: boolean;
+    dry_run: boolean;
+    inserted: Record<keyof TodosLocalBridgeData, number>;
+    merged: Record<keyof TodosLocalBridgeData, number>;
+    skipped: Record<keyof TodosLocalBridgeData, number>;
+    conflicts: LocalBridgeImportConflict[];
+    issues: string[];
+}
+export type LocalBridgeConflictStrategy = "skip" | "safe_merge";
+export interface ImportLocalBridgeOptions {
+    dryRun?: boolean;
+    conflictStrategy?: LocalBridgeConflictStrategy;
+}
+export declare function createLocalBridgeBundle(options?: ExportLocalBridgeOptions, db?: Database): TodosLocalBridgeBundle;
+export declare function validateLocalBridgeBundle(value: unknown): LocalBridgeValidationResult;
+export declare function importLocalBridgeBundle(bundle: TodosLocalBridgeBundle, options?: ImportLocalBridgeOptions, db?: Database): LocalBridgeImportResult;
+//# sourceMappingURL=local-bridge.d.ts.map

package/dist/lib/local-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bridge.d.ts","sourceRoot":"","sources":["../../src/lib/local-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAoB,MAAM,YAAY,CAAC;AAI7D,OAAO,EAA4D,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7H,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGjG,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAClE,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAEnD,MAAM,WAAW,6BAA6B;IAC5C,WAAW,EAAE,cAAc,CAAC;IAC5B,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,iBAAiB,EAAE,cAAc,EAAE,CAAC;IACpC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,aAAa,EAAE,eAAe,EAAE,CAAC;IACjC,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,aAAa,EAAE,UAAU,EAAE,CAAC;IAC5B,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,OAAO,iCAAiC,CAAC;IACxD,IAAI,EAAE,OAAO,uBAAuB,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,6BAA6B,CAAC;IACvC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,iBAAiB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC,MAAM,oBAAoB,EAAE,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,UAAU,CAAC;IAC7D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,iBAAiB,CAAC;CAC5D;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,EAAE,MAAM,CAAC,MAAM,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACpD,SAAS,EAAE,yBAAyB,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,YAAY,CAAC;AAEhE,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;CAChD;AAmJD,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,wBAA6B,EACtC,EAAE,CAAC,EAAE,QAAQ,GACZ,sBAAsB,CAkGxB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,2BAA2B,CA0BrF;AAyKD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,GAAE,wBAA6B,EACtC,EAAE,CAAC,EAAE,QAAQ,GACZ,uBAAuB,CAmEzB"}

package/dist/lib/local-encryption.d.ts

@@ -0,0 +1,94 @@
+import { type LocalEncryptionProfileConfig } from "./config.js";
+export declare const TODOS_ENCRYPTED_VALUE_KIND = "hasna.todos.encrypted-value";
+export declare const TODOS_ENCRYPTED_BRIDGE_KIND = "hasna.todos.encrypted-bridge";
+export declare const TODOS_ENCRYPTION_SCHEMA_VERSION = 1;
+export declare const DEFAULT_ENCRYPTION_PROFILE = "default";
+export declare const DEFAULT_ENCRYPTION_KEY_ENV = "TODOS_ENCRYPTION_KEY";
+export interface LocalEncryptionEnvelope {
+    schemaVersion: typeof TODOS_ENCRYPTION_SCHEMA_VERSION;
+    kind: typeof TODOS_ENCRYPTED_VALUE_KIND;
+    encryptedAt: string;
+    profile: string;
+    key_env: string;
+    algorithm: "aes-256-gcm";
+    kdf: "scrypt";
+    salt: string;
+    iv: string;
+    auth_tag: string;
+    ciphertext: string;
+    plaintext_sha256: string;
+}
+export interface EncryptedLocalBridgeBundle {
+    schemaVersion: typeof TODOS_ENCRYPTION_SCHEMA_VERSION;
+    kind: typeof TODOS_ENCRYPTED_BRIDGE_KIND;
+    encryptedAt: string;
+    package: {
+        packageName: "@hasna/todos";
+        repository: "hasna/todos";
+        version: string;
+    };
+    plaintext: {
+        kind: string;
+        schemaVersion: number;
+        sha256: string;
+    };
+    encryption: Omit<LocalEncryptionEnvelope, "schemaVersion" | "kind" | "encryptedAt" | "plaintext_sha256">;
+    warnings: string[];
+}
+export interface UpsertEncryptionProfileInput {
+    name: string;
+    key_env?: string;
+    description?: string;
+    salt?: string;
+}
+export declare class EncryptionKeyUnavailableError extends Error {
+    readonly keyEnv: string;
+    readonly profile: string;
+    constructor(keyEnv: string, profile: string);
+}
+export declare class EncryptedPayloadError extends Error {
+    constructor(message: string);
+}
+export declare function ensureEncryptionProfile(name?: string): LocalEncryptionProfileConfig;
+export declare function listEncryptionProfiles(): LocalEncryptionProfileConfig[];
+export declare function upsertEncryptionProfile(input: UpsertEncryptionProfileInput): LocalEncryptionProfileConfig;
+export declare function removeEncryptionProfile(name: string): boolean;
+export declare function encryptionProfileStatus(name?: string, env?: NodeJS.ProcessEnv): {
+    profile: LocalEncryptionProfileConfig;
+    locked: boolean;
+    key_env: string;
+    key_present: boolean;
+};
+export declare function encryptString(plaintext: string, options?: {
+    profile?: string;
+    env?: NodeJS.ProcessEnv;
+    encryptedAt?: string;
+}): LocalEncryptionEnvelope;
+export declare function isEncryptedValue(value: unknown): value is LocalEncryptionEnvelope;
+export declare function decryptString(envelope: LocalEncryptionEnvelope, env?: NodeJS.ProcessEnv): string;
+export declare function encryptValue(value: unknown, options?: {
+    profile?: string;
+    env?: NodeJS.ProcessEnv;
+}): LocalEncryptionEnvelope;
+export declare function decryptValue<T = unknown>(envelope: LocalEncryptionEnvelope, env?: NodeJS.ProcessEnv): T;
+export declare function looksSensitiveKey(key: string): boolean;
+export declare function encryptSensitiveFields(value: unknown, options?: {
+    profile?: string;
+    env?: NodeJS.ProcessEnv;
+}): unknown;
+export declare function createEncryptedBridgeBundle(bundle: {
+    kind: string;
+    schemaVersion: number;
+    package: {
+        packageName: "@hasna/todos";
+        repository: "hasna/todos";
+        version: string;
+    };
+}, options?: {
+    profile?: string;
+    env?: NodeJS.ProcessEnv;
+    encryptedAt?: string;
+}): EncryptedLocalBridgeBundle;
+export declare function isEncryptedBridgeBundle(value: unknown): value is EncryptedLocalBridgeBundle;
+export declare function decryptBridgeBundle<T>(bundle: EncryptedLocalBridgeBundle, env?: NodeJS.ProcessEnv): T;
+//# sourceMappingURL=local-encryption.d.ts.map

package/dist/lib/local-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-encryption.d.ts","sourceRoot":"","sources":["../../src/lib/local-encryption.ts"],"names":[],"mappings":"AACA,OAAO,EAA0B,KAAK,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAGxF,eAAO,MAAM,0BAA0B,gCAAgC,CAAC;AACxE,eAAO,MAAM,2BAA2B,iCAAiC,CAAC;AAC1E,eAAO,MAAM,+BAA+B,IAAI,CAAC;AACjD,eAAO,MAAM,0BAA0B,YAAY,CAAC;AACpD,eAAO,MAAM,0BAA0B,yBAAyB,CAAC;AAEjE,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IACtD,IAAI,EAAE,OAAO,0BAA0B,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,CAAC;IACzB,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IACtD,IAAI,EAAE,OAAO,2BAA2B,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,WAAW,EAAE,cAAc,CAAC;QAC5B,UAAU,EAAE,aAAa,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,UAAU,EAAE,IAAI,CAAC,uBAAuB,EAAE,eAAe,GAAG,MAAM,GAAG,aAAa,GAAG,kBAAkB,CAAC,CAAC;IACzG,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAAxC,MAAM,EAAE,MAAM,EAAW,OAAO,EAAE,MAAM;CAG9D;AAED,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAG5B;AA6BD,wBAAgB,uBAAuB,CAAC,IAAI,SAA6B,GAAG,4BAA4B,CAKvG;AAED,wBAAgB,sBAAsB,IAAI,4BAA4B,EAAE,CAGvE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,4BAA4B,CAwBzG;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ7D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,SAA6B,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB;;;;;EAQ9G;AAQD,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAChF,uBAAuB,CAqBzB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uBAAuB,CAKjF;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAsB7G;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAAG,uBAAuB,CAEjI;AAED,wBAAgB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,CAAC,CAEpH;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAAG,OAAO,CAc3H;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE;IACN,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE;QAAE,WAAW,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF,EACD,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAChF,0BAA0B,CA4B5B;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,0BAA0B,CAK3F;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,MAAM,EAAE,0BAA0B,EAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,CAAC,CAiBH"}

package/dist/lib/local-fields.d.ts

@@ -0,0 +1,33 @@
+import type { Database } from "bun:sqlite";
+import type { Task, TaskPriority } from "../types/index.js";
+export type LocalTaskSeverity = "s0" | "s1" | "s2" | "s3" | "s4" | string;
+export interface LocalTaskFields {
+    labels: string[];
+    priority: TaskPriority;
+    severity: LocalTaskSeverity | null;
+    owner: string | null;
+    area: string | null;
+    custom: Record<string, unknown>;
+}
+export interface SetTaskLocalFieldsInput {
+    labels?: string[];
+    priority?: TaskPriority;
+    severity?: LocalTaskSeverity | null;
+    owner?: string | null;
+    area?: string | null;
+    custom?: Record<string, unknown>;
+    merge_custom?: boolean;
+}
+export interface LocalTaskFieldQuery {
+    labels?: string[];
+    priority?: TaskPriority | TaskPriority[];
+    severity?: LocalTaskSeverity;
+    owner?: string;
+    area?: string;
+    custom?: Record<string, unknown>;
+    limit?: number;
+}
+export declare function getTaskLocalFields(taskId: string, db?: Database): LocalTaskFields;
+export declare function setTaskLocalFields(taskId: string, input: SetTaskLocalFieldsInput, db?: Database): Task;
+export declare function queryTasksByLocalFields(query: LocalTaskFieldQuery, db?: Database): Task[];
+//# sourceMappingURL=local-fields.d.ts.map

package/dist/lib/local-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-fields.d.ts","sourceRoot":"","sources":["../../src/lib/local-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAI5D,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAqBD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,eAAe,CAajF;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,EAAE,CAAC,EAAE,QAAQ,GACZ,IAAI,CA+BN;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,IAAI,EAAE,CAqBzF"}

package/dist/lib/policy-packs.d.ts

@@ -0,0 +1,87 @@
+import type { Database } from "bun:sqlite";
+import type { TaskStatus } from "../types/index.js";
+import { type PolicyPackConfig } from "./config.js";
+export interface UpsertPolicyPackInput {
+    name: string;
+    root?: string;
+    version?: number;
+    required_commands?: string[];
+    prohibited_commands?: string[];
+    prohibited_paths?: string[];
+    required_statuses?: string[];
+    require_passed_verification?: boolean;
+    require_commit?: boolean;
+    require_pull_request?: boolean;
+    require_approval?: boolean;
+    require_run?: boolean;
+    require_artifact?: boolean;
+    evidence_min_count?: number;
+    branch_pattern?: string;
+}
+export interface ValidatePolicyPackInput {
+    name: string;
+    task_id: string;
+    root?: string;
+    explain?: boolean;
+}
+export type PolicyFindingStatus = "pass" | "fail";
+export type PolicyFindingSeverity = "info" | "error";
+export interface PolicyPackFinding {
+    id: string;
+    status: PolicyFindingStatus;
+    severity: PolicyFindingSeverity;
+    message: string;
+    evidence: string[];
+}
+export interface PolicyEvidenceSummary {
+    task: {
+        id: string;
+        title: string;
+        status: TaskStatus;
+        requires_approval: boolean;
+        approved_by: string | null;
+        approved_at: string | null;
+    };
+    verifications: Array<{
+        command: string;
+        status: string;
+        artifact_path: string | null;
+    }>;
+    commits: Array<{
+        sha: string;
+        files_changed: string[];
+    }>;
+    git_refs: Array<{
+        ref_type: string;
+        name: string;
+        url: string | null;
+    }>;
+    runs: Array<{
+        id: string;
+        status: string;
+        title: string | null;
+    }>;
+    run_commands: Array<{
+        command: string;
+        status: string;
+        artifact_path: string | null;
+    }>;
+    artifacts: string[];
+    files: string[];
+    evidence_count: number;
+}
+export interface PolicyPackValidationResult {
+    pack: PolicyPackConfig;
+    task_id: string;
+    mode: "validate" | "explain";
+    passed: boolean;
+    findings: PolicyPackFinding[];
+    audit_evidence: PolicyEvidenceSummary;
+}
+export declare function listPolicyPacks(): PolicyPackConfig[];
+export declare function getPolicyPack(name: string): PolicyPackConfig | null;
+export declare function upsertPolicyPack(input: UpsertPolicyPackInput): PolicyPackConfig;
+export declare function removePolicyPack(name: string): boolean;
+export declare function validatePolicyPack(input: ValidatePolicyPackInput, db?: Database): PolicyPackValidationResult;
+export declare function explainPolicyPack(input: Omit<ValidatePolicyPackInput, "explain">, db?: Database): PolicyPackValidationResult;
+//# sourceMappingURL=policy-packs.d.ts.map

package/dist/lib/policy-packs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-packs.d.ts","sourceRoot":"","sources":["../../src/lib/policy-packs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,OAAO,KAAK,EAAQ,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAA0B,KAAK,gBAAgB,EAAoB,MAAM,aAAa,CAAC;AAE9F,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,CAAC;AAClD,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,OAAO,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,aAAa,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACxF,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzD,QAAQ,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACxE,IAAI,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAClE,YAAY,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACvF,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,cAAc,EAAE,qBAAqB,CAAC;CACvC;AAuKD,wBAAgB,eAAe,IAAI,gBAAgB,EAAE,CAEpD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAEnE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CAkC/E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOtD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,0BAA0B,CAgG5G;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,0BAA0B,CAE5H"}

package/dist/lib/project-bootstrap.d.ts

@@ -0,0 +1,35 @@
+import type { Database } from "bun:sqlite";
+import type { Project, ProjectSource, TaskList } from "../types/index.js";
+export interface ProjectBootstrapOptions {
+    path?: string;
+    name?: string;
+    taskListSlug?: string;
+    dryRun?: boolean;
+}
+export interface ProjectWorkspaceDiscovery {
+    inputPath: string;
+    projectPath: string;
+    projectName: string;
+    gitRoot: string | null;
+    packageRoot: string | null;
+    packageName: string | null;
+    workspaceRoot: string | null;
+    workspaceKind: string | null;
+    monorepo: boolean;
+    markers: string[];
+}
+export interface ProjectBootstrapResult {
+    dryRun: boolean;
+    discovery: ProjectWorkspaceDiscovery;
+    project: Project | null;
+    taskList: TaskList | null;
+    sources: ProjectSource[];
+    created: {
+        project: boolean;
+        taskList: boolean;
+        sources: string[];
+    };
+}
+export declare function discoverProjectWorkspace(inputPath?: string): ProjectWorkspaceDiscovery;
+export declare function bootstrapProject(options?: ProjectBootstrapOptions, db?: Database): ProjectBootstrapResult;
+//# sourceMappingURL=project-bootstrap.d.ts.map

package/dist/lib/project-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-bootstrap.d.ts","sourceRoot":"","sources":["../../src/lib/project-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAa3C,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE1E,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,yBAAyB,CAAC;IACrC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;CACH;AA6DD,wBAAgB,wBAAwB,CAAC,SAAS,SAAgB,GAAG,yBAAyB,CAuB7F;AAkBD,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,sBAAsB,CA2D7G"}

package/dist/lib/public-release-gate.d.ts

@@ -0,0 +1,50 @@
+export type PackageJson = {
+    name?: string;
+    version?: string;
+    license?: string;
+    main?: string;
+    types?: string;
+    bin?: Record<string, string>;
+    exports?: Record<string, unknown>;
+    files?: string[];
+    workspaces?: string[];
+    publishConfig?: {
+        registry?: string;
+        access?: string;
+    };
+    repository?: {
+        type?: string;
+        url?: string;
+        directory?: string;
+    };
+    homepage?: string;
+    bugs?: {
+        url?: string;
+    };
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    gitHead?: string;
+};
+export type TextFile = {
+    path: string;
+    text: string;
+};
+export type ReleaseGateFailure = {
+    check: string;
+    message: string;
+};
+export type ReleaseProvenance = {
+    packageName?: string;
+    packageVersion?: string;
+    repository?: string;
+    gitCommit?: string;
+    generatedAt?: string;
+};
+export declare function validateRootPackageMetadata(packageJson: PackageJson): ReleaseGateFailure[];
+export declare function validateSdkPackageMetadata(packageJson: PackageJson): ReleaseGateFailure[];
+export declare function validatePublicTextSurfaces(files: TextFile[]): ReleaseGateFailure[];
+export declare function validatePackedPackageFiles(paths: string[]): ReleaseGateFailure[];
+export declare function validatePackedProvenanceMetadata(packageJson: PackageJson): ReleaseGateFailure[];
+export declare function validateReleaseProvenanceMetadata(provenance: ReleaseProvenance, packageJson: PackageJson): ReleaseGateFailure[];
+export declare function validateNpmView(packageName: string, rawJson: string): ReleaseGateFailure[];
+//# sourceMappingURL=public-release-gate.d.ts.map

package/dist/lib/public-release-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-release-gate.d.ts","sourceRoot":"","sources":["../../src/lib/public-release-gate.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAwCF,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,WAAW,GAAG,kBAAkB,EAAE,CAgD1F;AAED,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,WAAW,GAAG,kBAAkB,EAAE,CAQzF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,kBAAkB,EAAE,CAoBlF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAyBhF;AAED,wBAAgB,gCAAgC,CAAC,WAAW,EAAE,WAAW,GAAG,kBAAkB,EAAE,CAE/F;AAED,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,iBAAiB,EAC7B,WAAW,EAAE,WAAW,GACvB,kBAAkB,EAAE,CAiCtB;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAiB1F"}

package/dist/lib/redaction.d.ts

@@ -0,0 +1,3 @@
+export declare function redactEvidenceText(value: string): string;
+export declare function redactValue<T>(value: T): T;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/lib/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/lib/redaction.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAe1C"}

package/dist/lib/runner-sandbox.d.ts

@@ -0,0 +1,50 @@
+import { type RunnerSandboxNetworkPolicy, type RunnerSandboxProfile } from "./config.js";
+export interface UpsertRunnerSandboxInput {
+    name: string;
+    root?: string;
+    command_allowlist?: string[];
+    command_denylist?: string[];
+    cwd_boundary?: string;
+    write_scopes?: string[];
+    env_allowlist?: string[];
+    env_redactions?: string[];
+    network_policy?: RunnerSandboxNetworkPolicy;
+    require_approval?: boolean;
+    audit_evidence?: boolean;
+}
+export interface RunnerSandboxCheckInput {
+    name?: string;
+    path?: string;
+    cwd?: string;
+    command?: string;
+    write_paths?: string[];
+    env?: Record<string, string | undefined>;
+    network?: boolean;
+}
+export interface RunnerSandboxCheck {
+    allowed: boolean;
+    requires_approval: boolean;
+    reasons: string[];
+    profile: RunnerSandboxProfile;
+    redacted_env_keys: string[];
+    omitted_env_keys: string[];
+    effective_env_keys: string[];
+    audit_evidence: {
+        sandbox: string;
+        root: string;
+        cwd: string;
+        command?: string;
+        write_paths: string[];
+        network_requested: boolean;
+        network_policy: RunnerSandboxNetworkPolicy;
+        allowed: boolean;
+        reasons: string[];
+    } | null;
+}
+export declare function listRunnerSandboxProfiles(): RunnerSandboxProfile[];
+export declare function getRunnerSandboxProfile(name: string, path?: string): RunnerSandboxProfile;
+export declare function upsertRunnerSandboxProfile(input: UpsertRunnerSandboxInput): RunnerSandboxProfile;
+export declare function removeRunnerSandboxProfile(name: string): boolean;
+export declare function checkRunnerSandbox(input?: RunnerSandboxCheckInput): RunnerSandboxCheck;
+export declare function explainRunnerSandbox(input?: RunnerSandboxCheckInput): RunnerSandboxCheck;
+//# sourceMappingURL=runner-sandbox.d.ts.map

package/dist/lib/runner-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-sandbox.d.ts","sourceRoot":"","sources":["../../src/lib/runner-sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAE1B,MAAM,aAAa,CAAC;AAGrB,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,cAAc,EAAE,0BAA0B,CAAC;QAC3C,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;CACV;AA0FD,wBAAgB,yBAAyB,IAAI,oBAAoB,EAAE,CAElE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAgB,GAAG,oBAAoB,CAEhG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CA8BhG;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,GAAE,uBAA4B,GAAG,kBAAkB,CA0D1F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,GAAE,uBAA4B,GAAG,kBAAkB,CAE5F"}

package/dist/lib/task-contracts.d.ts

@@ -0,0 +1,75 @@
+import type { Database } from "bun:sqlite";
+export type TaskRiskLevel = "low" | "medium" | "high" | "critical";
+export type TaskReviewState = "none" | "requested" | "approved" | "changes_requested" | "reopened";
+export type RecordableTaskReviewState = Exclude<TaskReviewState, "none" | "requested">;
+export interface SetTaskContractInput {
+    task_id: string;
+    acceptance_criteria?: string[];
+    verification_commands?: string[];
+    expected_artifacts?: string[];
+    relevant_files?: string[];
+    risk_level?: TaskRiskLevel;
+    done_definition?: string[];
+}
+export interface TaskContract {
+    task_id: string;
+    acceptance_criteria: string[];
+    verification_commands: string[];
+    expected_artifacts: string[];
+    relevant_files: string[];
+    risk_level: TaskRiskLevel | null;
+    done_definition: string[];
+    updated_at: string;
+}
+export interface RequestTaskReviewInput {
+    task_id: string;
+    requester: string;
+    reviewer?: string;
+    notes?: string;
+}
+export interface RecordTaskReviewInput {
+    task_id: string;
+    state: RecordableTaskReviewState;
+    reviewer: string;
+    notes?: string;
+    changes_requested?: string[];
+}
+export interface TaskReviewHistoryEntry {
+    state: Exclude<TaskReviewState, "none">;
+    actor: string;
+    notes: string | null;
+    changes_requested: string[];
+    at: string;
+}
+export interface TaskReview {
+    task_id: string;
+    state: TaskReviewState;
+    requester: string | null;
+    reviewer: string | null;
+    notes: string | null;
+    changes_requested: string[];
+    requested_at: string | null;
+    reviewed_at: string | null;
+    history: TaskReviewHistoryEntry[];
+}
+export interface TaskDoneContractResult {
+    ok: boolean;
+    task_id: string;
+    missing: string[];
+    contract: TaskContract;
+    review: TaskReview;
+    evidence: {
+        task_status: string;
+        acceptance_criteria: number;
+        passed_verifications: string[];
+        artifacts: string[];
+        review_state: TaskReviewState;
+    };
+}
+export declare function setTaskContract(input: SetTaskContractInput, db?: Database): TaskContract;
+export declare function getTaskContract(taskId: string, db?: Database): TaskContract | null;
+export declare function requestTaskReview(input: RequestTaskReviewInput, db?: Database): TaskReview;
+export declare function recordTaskReview(input: RecordTaskReviewInput, db?: Database): TaskReview;
+export declare function getTaskReview(taskId: string, db?: Database): TaskReview | null;
+export declare function checkTaskDoneContract(taskId: string, db?: Database): TaskDoneContractResult;
+//# sourceMappingURL=task-contracts.d.ts.map

package/dist/lib/task-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-contracts.d.ts","sourceRoot":"","sources":["../../src/lib/task-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AACnE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,mBAAmB,GAAG,UAAU,CAAC;AACnG,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;AAEvF,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,aAAa,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,yBAAyB,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,sBAAsB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,YAAY,EAAE,eAAe,CAAC;KAC/B,CAAC;CACH;AAqGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,YAAY,CAoBxF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,IAAI,CAYlF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,UAAU,CAwB1F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,UAAU,CAyBxF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI,CAK9E;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,sBAAsB,CA0C3F"}