@iflow-mcp/jkheadley-instar 0.26.2

package/dist/config/ConfigDefaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigDefaults.js","sourceRoot":"","sources":["../../src/config/ConfigDefaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,2EAA2E;AAC3E,MAAM,eAAe,GAA4B;IAC/C,UAAU,EAAE;QACV,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE;YACV,OAAO,EAAE,IAAI;YACb,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,KAAK;aACpB;YACD,MAAM,EAAE,KAAK;SACd;KACF;IACD,UAAU,EAAE;QACV,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,CAAC,MAAM,CAAC;KACvB;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,cAAc,GAA4C;IAC9D,iBAAiB,EAAE;QACjB,UAAU,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;QACpC,kBAAkB,EAAE;YAClB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE;YACZ,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE;gBACL,KAAK,EAAE,eAAe;gBACtB,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,CAAC;aACtB;SACF;QACD,MAAM,EAAE;YACN,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,OAAO;SACd;KACF;IACD,UAAU,EAAE;QACV,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACnC,kBAAkB,EAAE;YAClB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE;YACZ,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE;gBACL,KAAK,EAAE,eAAe;gBACtB,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,CAAC;aACtB;SACF;KACF;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAA4B;IACnD,kBAAkB,EAAE;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QAC3B,QAAQ,EAAE,EAAE;QACZ,gBAAgB,EAAE,EAAE;QACpB,KAAK,EAAE;YACL,KAAK,EAAE,YAAY,EAAS,gDAAgD;YAC5E,kBAAkB,EAAE,KAAK,EAAI,qCAAqC;YAClE,kBAAkB,EAAE,EAAE,EAAO,mBAAmB;SACjD;KACF;CACF,CAAC;AAEF,2BAA2B;AAE3B;;;GAGG;AACH,SAAS,SAAS,CAAC,MAA+B,EAAE,MAA+B;IACjF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IACE,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EACtF,CAAC;YACD,SAAS,CAAC,MAAM,CAAC,GAAG,CAA4B,EAAE,MAAM,CAAC,GAAG,CAA4B,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,MAAM,IAAI,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA+B,EAC/B,QAAiC;IAEjC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACrC,CAAC,CAAC,MAAM,CAAC,iBAA6B;QACtC,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,SAAS,KAAK,CAAC,MAA+B,EAAE,MAA+B,EAAE,IAAY;QAC3F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAE/C,+CAA+C;YAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,oCAAoC,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YAED,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;gBACrB,0BAA0B;gBAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,UAAU,CAAC,CAAC;YACtC,CAAC;iBAAM,IACL,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtF,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EACtF,CAAC;gBACD,6BAA6B;gBAC7B,KAAK,CAAC,MAAM,CAAC,GAAG,CAA4B,EAAE,MAAM,CAAC,GAAG,CAA4B,EAAE,QAAQ,CAAC,CAAC;YAClG,CAAC;iBAAM,CAAC;gBACN,4EAA4E;gBAC5E,wEAAwE;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC"}

package/dist/config/LiveConfig.d.ts

@@ -0,0 +1,97 @@
+/**
+ * LiveConfig — dynamic configuration that stays synchronized with disk.
+ *
+ * The Meta-Lesson: Every piece of mutable state needs a declared sync strategy.
+ * Without this, the default is "read once at startup" — which silently breaks
+ * whenever a session, migration, or manual edit changes the config file.
+ *
+ * LiveConfig solves the "Written But Not Re-Read" class of bugs:
+ *   - AutoUpdater not picking up autoApply changes
+ *   - MemoryPressureMonitor thresholds reverting on restart
+ *   - Any future config that can change at runtime
+ *
+ * Usage:
+ *   const live = new LiveConfig(stateDir);
+ *   live.start();
+ *
+ *   // Always reads current value — re-reads from disk if stale
+ *   const autoApply = live.get('updates.autoApply', true);
+ *
+ *   // Listen for changes
+ *   live.on('change', ({ path, oldValue, newValue }) => { ... });
+ *
+ * Lifecycle declarations:
+ *   LiveConfig tracks which config paths are accessed. On each refresh,
+ *   it compares old vs new values and emits 'change' events for any
+ *   differences. This makes "dynamic" the default — you don't need to
+ *   declare lifecycle, you just get notified when things change.
+ */
+import { EventEmitter } from 'node:events';
+export interface ConfigChange {
+    /** Dot-separated path to the changed value (e.g., 'updates.autoApply') */
+    path: string;
+    /** Previous value */
+    oldValue: unknown;
+    /** New value */
+    newValue: unknown;
+    /** When the change was detected */
+    detectedAt: string;
+}
+export interface LiveConfigOptions {
+    /** How often to check for file changes, in ms. Default: 5000 */
+    checkIntervalMs?: number;
+    /** Paths to watch for changes (dot-separated). If empty, watches all paths that have been accessed. */
+    watchPaths?: string[];
+}
+export declare class LiveConfig extends EventEmitter {
+    private stateDir;
+    private configPath;
+    private cache;
+    private lastMtime;
+    private lastReadAt;
+    private checkIntervalMs;
+    private interval;
+    private watchPaths;
+    private accessedPaths;
+    constructor(stateDir: string, options?: LiveConfigOptions);
+    /**
+     * Start periodic config monitoring.
+     * Checks file mtime and re-reads if changed.
+     */
+    start(): void;
+    /**
+     * Stop monitoring.
+     */
+    stop(): void;
+    /**
+     * Get a config value by dot-separated path.
+     * Always returns the current value — re-reads from disk if stale.
+     *
+     * Examples:
+     *   live.get('updates.autoApply', true)
+     *   live.get('monitoring.memoryMonitoring', true)
+     *   live.get('sessions.maxSessions', 3)
+     */
+    get<T>(dotPath: string, defaultValue: T): T;
+    /**
+     * Get the entire parsed config object.
+     * Useful when you need multiple values and don't want repeated lookups.
+     */
+    getAll(): Record<string, unknown>;
+    /**
+     * Force an immediate re-read from disk, regardless of staleness.
+     * Useful after writing to the config file.
+     */
+    forceRefresh(): void;
+    /**
+     * Write a value back to the config file.
+     * Handles atomic write and immediately refreshes the cache.
+     */
+    set(dotPath: string, value: unknown): void;
+    private refreshIfStale;
+    private refresh;
+    private getNestedValue;
+    private setNestedValue;
+    private deepEqual;
+}
+//# sourceMappingURL=LiveConfig.d.ts.map

package/dist/config/LiveConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LiveConfig.d.ts","sourceRoot":"","sources":["../../src/config/LiveConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uGAAuG;IACvG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,qBAAa,UAAW,SAAQ,YAAY;IAC1C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,aAAa,CAA0B;gBAEnC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAWzD;;;OAGG;IACH,KAAK,IAAI,IAAI;IASb;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;;;;;;;OAQG;IACH,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC;IAS3C;;;OAGG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAKjC;;;OAGG;IACH,YAAY,IAAI,IAAI;IAIpB;;;OAGG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAyB1C,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,OAAO;IA2Cf,OAAO,CAAC,cAAc;IActB,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,SAAS;CAgBlB"}

package/dist/config/LiveConfig.js

@@ -0,0 +1,220 @@
+/**
+ * LiveConfig — dynamic configuration that stays synchronized with disk.
+ *
+ * The Meta-Lesson: Every piece of mutable state needs a declared sync strategy.
+ * Without this, the default is "read once at startup" — which silently breaks
+ * whenever a session, migration, or manual edit changes the config file.
+ *
+ * LiveConfig solves the "Written But Not Re-Read" class of bugs:
+ *   - AutoUpdater not picking up autoApply changes
+ *   - MemoryPressureMonitor thresholds reverting on restart
+ *   - Any future config that can change at runtime
+ *
+ * Usage:
+ *   const live = new LiveConfig(stateDir);
+ *   live.start();
+ *
+ *   // Always reads current value — re-reads from disk if stale
+ *   const autoApply = live.get('updates.autoApply', true);
+ *
+ *   // Listen for changes
+ *   live.on('change', ({ path, oldValue, newValue }) => { ... });
+ *
+ * Lifecycle declarations:
+ *   LiveConfig tracks which config paths are accessed. On each refresh,
+ *   it compares old vs new values and emits 'change' events for any
+ *   differences. This makes "dynamic" the default — you don't need to
+ *   declare lifecycle, you just get notified when things change.
+ */
+import { EventEmitter } from 'node:events';
+import fs from 'node:fs';
+import path from 'node:path';
+export class LiveConfig extends EventEmitter {
+    stateDir;
+    configPath;
+    cache = {};
+    lastMtime = 0;
+    lastReadAt = 0;
+    checkIntervalMs;
+    interval = null;
+    watchPaths;
+    accessedPaths = new Set();
+    constructor(stateDir, options) {
+        super();
+        this.stateDir = stateDir;
+        this.configPath = path.join(stateDir, 'config.json');
+        this.checkIntervalMs = options?.checkIntervalMs ?? 5_000;
+        this.watchPaths = new Set(options?.watchPaths ?? []);
+        // Initial load
+        this.refresh();
+    }
+    /**
+     * Start periodic config monitoring.
+     * Checks file mtime and re-reads if changed.
+     */
+    start() {
+        if (this.interval)
+            return;
+        this.interval = setInterval(() => {
+            this.refreshIfStale();
+        }, this.checkIntervalMs);
+        this.interval.unref(); // Don't prevent process exit
+    }
+    /**
+     * Stop monitoring.
+     */
+    stop() {
+        if (this.interval) {
+            clearInterval(this.interval);
+            this.interval = null;
+        }
+    }
+    /**
+     * Get a config value by dot-separated path.
+     * Always returns the current value — re-reads from disk if stale.
+     *
+     * Examples:
+     *   live.get('updates.autoApply', true)
+     *   live.get('monitoring.memoryMonitoring', true)
+     *   live.get('sessions.maxSessions', 3)
+     */
+    get(dotPath, defaultValue) {
+        this.accessedPaths.add(dotPath);
+        this.refreshIfStale();
+        const value = this.getNestedValue(this.cache, dotPath);
+        if (value === undefined)
+            return defaultValue;
+        return value;
+    }
+    /**
+     * Get the entire parsed config object.
+     * Useful when you need multiple values and don't want repeated lookups.
+     */
+    getAll() {
+        this.refreshIfStale();
+        return { ...this.cache };
+    }
+    /**
+     * Force an immediate re-read from disk, regardless of staleness.
+     * Useful after writing to the config file.
+     */
+    forceRefresh() {
+        this.refresh();
+    }
+    /**
+     * Write a value back to the config file.
+     * Handles atomic write and immediately refreshes the cache.
+     */
+    set(dotPath, value) {
+        this.refreshIfStale(); // Get latest before modifying
+        this.setNestedValue(this.cache, dotPath, value);
+        // Atomic write
+        try {
+            const dir = path.dirname(this.configPath);
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            const tmpPath = `${this.configPath}.${process.pid}.tmp`;
+            fs.writeFileSync(tmpPath, JSON.stringify(this.cache, null, 2) + '\n');
+            fs.renameSync(tmpPath, this.configPath);
+            // Update mtime cache
+            const stat = fs.statSync(this.configPath);
+            this.lastMtime = stat.mtimeMs;
+            this.lastReadAt = Date.now();
+        }
+        catch (err) {
+            console.error(`[LiveConfig] Failed to write config:`, err);
+        }
+    }
+    // ── Internal ────────────────────────────────────────────────────────
+    refreshIfStale() {
+        try {
+            if (!fs.existsSync(this.configPath))
+                return;
+            const stat = fs.statSync(this.configPath);
+            if (stat.mtimeMs !== this.lastMtime) {
+                this.refresh();
+            }
+        }
+        catch {
+            // @silent-fallback-ok — stat failure, use cached values
+        }
+    }
+    refresh() {
+        try {
+            if (!fs.existsSync(this.configPath)) {
+                this.cache = {};
+                return;
+            }
+            const content = fs.readFileSync(this.configPath, 'utf-8');
+            const newConfig = JSON.parse(content);
+            const stat = fs.statSync(this.configPath);
+            this.lastMtime = stat.mtimeMs;
+            this.lastReadAt = Date.now();
+            // Detect changes in watched paths
+            const pathsToCheck = this.watchPaths.size > 0
+                ? this.watchPaths
+                : this.accessedPaths;
+            for (const dotPath of pathsToCheck) {
+                const oldValue = this.getNestedValue(this.cache, dotPath);
+                const newValue = this.getNestedValue(newConfig, dotPath);
+                if (!this.deepEqual(oldValue, newValue)) {
+                    const change = {
+                        path: dotPath,
+                        oldValue,
+                        newValue,
+                        detectedAt: new Date().toISOString(),
+                    };
+                    console.log(`[LiveConfig] Change detected: ${dotPath} = ${JSON.stringify(oldValue)} → ${JSON.stringify(newValue)}`);
+                    this.emit('change', change);
+                }
+            }
+            this.cache = newConfig;
+        }
+        catch (err) {
+            console.error(`[LiveConfig] Failed to read config:`, err);
+            // Keep cached values on read failure
+        }
+    }
+    getNestedValue(obj, dotPath) {
+        const parts = dotPath.split('.');
+        let current = obj;
+        for (const part of parts) {
+            if (current === null || current === undefined || typeof current !== 'object') {
+                return undefined;
+            }
+            current = current[part];
+        }
+        return current;
+    }
+    setNestedValue(obj, dotPath, value) {
+        const parts = dotPath.split('.');
+        let current = obj;
+        for (let i = 0; i < parts.length - 1; i++) {
+            const part = parts[i];
+            if (typeof current[part] !== 'object' || current[part] === null) {
+                current[part] = {};
+            }
+            current = current[part];
+        }
+        current[parts[parts.length - 1]] = value;
+    }
+    deepEqual(a, b) {
+        if (a === b)
+            return true;
+        if (a === null || b === null)
+            return false;
+        if (typeof a !== typeof b)
+            return false;
+        if (typeof a !== 'object')
+            return false;
+        const aObj = a;
+        const bObj = b;
+        const keys = new Set([...Object.keys(aObj), ...Object.keys(bObj)]);
+        for (const key of keys) {
+            if (!this.deepEqual(aObj[key], bObj[key]))
+                return false;
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=LiveConfig.js.map

package/dist/config/LiveConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LiveConfig.js","sourceRoot":"","sources":["../../src/config/LiveConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAoB7B,MAAM,OAAO,UAAW,SAAQ,YAAY;IAClC,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,KAAK,GAA4B,EAAE,CAAC;IACpC,SAAS,GAAG,CAAC,CAAC;IACd,UAAU,GAAG,CAAC,CAAC;IACf,eAAe,CAAS;IACxB,QAAQ,GAA0C,IAAI,CAAC;IACvD,UAAU,CAAc;IACxB,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE/C,YAAY,QAAgB,EAAE,OAA2B;QACvD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,KAAK,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QAErD,eAAe;QACf,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAE1B,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,6BAA6B;IACtD,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,GAAG,CAAI,OAAe,EAAE,YAAe;QACrC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC;QAC7C,OAAO,KAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,OAAe,EAAE,KAAc;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,8BAA8B;QAErD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAEhD,eAAe;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEhE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YACxD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACtE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAExC,qBAAqB;YACrB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,uEAAuE;IAE/D,cAAc;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;gBAAE,OAAO;YAE5C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YAEjE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,kCAAkC;YAClC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC,UAAU;gBACjB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;YAEvB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAEzD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACxC,MAAM,MAAM,GAAiB;wBAC3B,IAAI,EAAE,OAAO;wBACb,QAAQ;wBACR,QAAQ;wBACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACrC,CAAC;oBAEF,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACpH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;YAC1D,qCAAqC;QACvC,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,GAA4B,EAAE,OAAe;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,GAAY,GAAG,CAAC;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7E,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,GAA4B,EAAE,OAAe,EAAE,KAAc;QAClF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,GAA4B,GAAG,CAAC;QAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,IAAI,CAA4B,CAAC;QACrD,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,CAAU,EAAE,CAAU;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,OAAO,CAAC,KAAK,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAExC,MAAM,IAAI,GAAG,CAA4B,CAAC;QAC1C,MAAM,IAAI,GAAG,CAA4B,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/core/AccessControl.d.ts

@@ -0,0 +1,91 @@
+/**
+ * AccessControl — Role-Based Access Control for multi-user sync.
+ *
+ * Three roles with escalating permissions:
+ *   - Contributor: code changes via branches only
+ *   - Maintainer: code + limited config, direct branch merge
+ *   - Admin: full control including force-resolve and config changes
+ *
+ * From INTELLIGENT_SYNC_SPEC Section 5.5 (Access Control).
+ */
+export type UserRole = 'admin' | 'maintainer' | 'contributor';
+export type Permission = 'code:modify' | 'code:merge-to-main' | 'config:read' | 'config:modify' | 'agent-state:modify' | 'conflict:force-resolve' | 'branch:create' | 'branch:merge' | 'ledger:write-own' | 'ledger:write-any';
+export interface AccessCheckResult {
+    /** Whether the action is allowed. */
+    allowed: boolean;
+    /** The user's role. */
+    role: UserRole;
+    /** The permission that was checked. */
+    permission: Permission;
+    /** Reason for denial, if not allowed. */
+    reason?: string;
+    /** Suggested alternative action. */
+    suggestion?: string;
+}
+export interface UserRoleEntry {
+    /** User ID. */
+    userId: string;
+    /** Assigned role. */
+    role: UserRole;
+    /** When the role was assigned. */
+    assignedAt: string;
+    /** Who assigned the role (userId or 'system'). */
+    assignedBy: string;
+}
+export interface AccessControlConfig {
+    /** User role assignments. */
+    roles: UserRoleEntry[];
+    /** Default role for unknown users (default: 'contributor'). */
+    defaultRole?: UserRole;
+    /** Whether RBAC is enabled (false = all permissions granted). */
+    enabled?: boolean;
+}
+export declare class AccessControl {
+    private roles;
+    private defaultRole;
+    private enabled;
+    constructor(config: AccessControlConfig);
+    /**
+     * Check if a user has a specific permission.
+     */
+    check(userId: string, permission: Permission): AccessCheckResult;
+    /**
+     * Check multiple permissions at once.
+     * Returns true only if ALL permissions are granted.
+     */
+    checkAll(userId: string, permissions: Permission[]): {
+        allowed: boolean;
+        results: AccessCheckResult[];
+    };
+    /**
+     * Check if a user has ANY of the given permissions.
+     */
+    checkAny(userId: string, permissions: Permission[]): {
+        allowed: boolean;
+        results: AccessCheckResult[];
+    };
+    /**
+     * Get a user's role.
+     */
+    getUserRole(userId: string): UserRole;
+    /**
+     * Set a user's role (requires admin).
+     */
+    setUserRole(adminUserId: string, targetUserId: string, newRole: UserRole): {
+        success: boolean;
+        error?: string;
+    };
+    /**
+     * List all role assignments.
+     */
+    listRoles(): UserRoleEntry[];
+    /**
+     * Get all permissions for a role.
+     */
+    getPermissionsForRole(role: UserRole): Permission[];
+    /**
+     * Check if RBAC is enabled.
+     */
+    isEnabled(): boolean;
+}
+//# sourceMappingURL=AccessControl.d.ts.map

package/dist/core/AccessControl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessControl.d.ts","sourceRoot":"","sources":["../../src/core/AccessControl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAE9D,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,oBAAoB,GACpB,aAAa,GACb,eAAe,GACf,oBAAoB,GACpB,wBAAwB,GACxB,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,uBAAuB;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,uCAAuC;IACvC,UAAU,EAAE,UAAU,CAAC;IACvB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe;IACf,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,IAAI,EAAE,QAAQ,CAAC;IACf,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA2ED,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,WAAW,CAAW;IAC9B,OAAO,CAAC,OAAO,CAAU;gBAEb,MAAM,EAAE,mBAAmB;IAWvC;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,iBAAiB;IA4BhE;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG;QACnD,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC9B;IAQD;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG;QACnD,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC9B;IAUD;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAIrC;;OAEG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,QAAQ,GAChB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAmBvC;;OAEG;IACH,SAAS,IAAI,aAAa,EAAE;IAI5B;;OAEG;IACH,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,EAAE;IAInD;;OAEG;IACH,SAAS,IAAI,OAAO;CAGrB"}

package/dist/core/AccessControl.js

@@ -0,0 +1,184 @@
+/**
+ * AccessControl — Role-Based Access Control for multi-user sync.
+ *
+ * Three roles with escalating permissions:
+ *   - Contributor: code changes via branches only
+ *   - Maintainer: code + limited config, direct branch merge
+ *   - Admin: full control including force-resolve and config changes
+ *
+ * From INTELLIGENT_SYNC_SPEC Section 5.5 (Access Control).
+ */
+// ── Constants ────────────────────────────────────────────────────────
+/**
+ * Permission matrix per spec Section 5.5.
+ */
+const ROLE_PERMISSIONS = {
+    admin: new Set([
+        'code:modify',
+        'code:merge-to-main',
+        'config:read',
+        'config:modify',
+        'agent-state:modify',
+        'conflict:force-resolve',
+        'branch:create',
+        'branch:merge',
+        'ledger:write-own',
+        'ledger:write-any',
+    ]),
+    maintainer: new Set([
+        'code:modify',
+        'code:merge-to-main',
+        'config:read',
+        'branch:create',
+        'branch:merge',
+        'ledger:write-own',
+    ]),
+    contributor: new Set([
+        'code:modify',
+        'config:read',
+        'branch:create',
+        'ledger:write-own',
+    ]),
+};
+/**
+ * Human-readable permission descriptions for error messages.
+ */
+const PERMISSION_DESCRIPTIONS = {
+    'code:modify': 'Modify code files',
+    'code:merge-to-main': 'Merge directly to main branch',
+    'config:read': 'Read configuration',
+    'config:modify': 'Modify configuration',
+    'agent-state:modify': 'Modify agent state',
+    'conflict:force-resolve': 'Force-resolve conflicts (skip LLM resolution)',
+    'branch:create': 'Create task branches',
+    'branch:merge': 'Merge task branches',
+    'ledger:write-own': 'Write own ledger entries',
+    'ledger:write-any': "Write any machine's ledger entries",
+};
+/**
+ * Suggestions for denied permissions.
+ */
+const DENIAL_SUGGESTIONS = {
+    'code:merge-to-main': {
+        contributor: 'Use a task branch and submit through tiered resolution instead',
+    },
+    'config:modify': {
+        contributor: 'Request an admin to make config changes',
+        maintainer: 'Request an admin to make config changes',
+    },
+    'conflict:force-resolve': {
+        contributor: 'Use the tiered resolution system (Tier 0 → Tier 2)',
+        maintainer: 'Use the tiered resolution system (Tier 0 → Tier 2)',
+    },
+    'agent-state:modify': {
+        contributor: 'Only admins can modify agent state',
+        maintainer: 'Only admins can modify agent state',
+    },
+};
+// ── AccessControl ────────────────────────────────────────────────────
+export class AccessControl {
+    roles;
+    defaultRole;
+    enabled;
+    constructor(config) {
+        this.roles = new Map();
+        for (const entry of config.roles) {
+            this.roles.set(entry.userId, entry);
+        }
+        this.defaultRole = config.defaultRole ?? 'contributor';
+        this.enabled = config.enabled ?? true;
+    }
+    // ── Permission Checks ─────────────────────────────────────────────
+    /**
+     * Check if a user has a specific permission.
+     */
+    check(userId, permission) {
+        // If RBAC is disabled, allow everything
+        if (!this.enabled) {
+            return {
+                allowed: true,
+                role: this.getUserRole(userId),
+                permission,
+            };
+        }
+        const role = this.getUserRole(userId);
+        const allowed = ROLE_PERMISSIONS[role].has(permission);
+        if (allowed) {
+            return { allowed: true, role, permission };
+        }
+        const suggestion = DENIAL_SUGGESTIONS[permission]?.[role];
+        return {
+            allowed: false,
+            role,
+            permission,
+            reason: `Role "${role}" does not have permission "${permission}" (${PERMISSION_DESCRIPTIONS[permission]})`,
+            suggestion,
+        };
+    }
+    /**
+     * Check multiple permissions at once.
+     * Returns true only if ALL permissions are granted.
+     */
+    checkAll(userId, permissions) {
+        const results = permissions.map(p => this.check(userId, p));
+        return {
+            allowed: results.every(r => r.allowed),
+            results,
+        };
+    }
+    /**
+     * Check if a user has ANY of the given permissions.
+     */
+    checkAny(userId, permissions) {
+        const results = permissions.map(p => this.check(userId, p));
+        return {
+            allowed: results.some(r => r.allowed),
+            results,
+        };
+    }
+    // ── Role Management ───────────────────────────────────────────────
+    /**
+     * Get a user's role.
+     */
+    getUserRole(userId) {
+        return this.roles.get(userId)?.role ?? this.defaultRole;
+    }
+    /**
+     * Set a user's role (requires admin).
+     */
+    setUserRole(adminUserId, targetUserId, newRole) {
+        // Verify admin has permission
+        if (this.enabled) {
+            const adminRole = this.getUserRole(adminUserId);
+            if (adminRole !== 'admin') {
+                return { success: false, error: 'Only admins can assign roles' };
+            }
+        }
+        this.roles.set(targetUserId, {
+            userId: targetUserId,
+            role: newRole,
+            assignedAt: new Date().toISOString(),
+            assignedBy: adminUserId,
+        });
+        return { success: true };
+    }
+    /**
+     * List all role assignments.
+     */
+    listRoles() {
+        return [...this.roles.values()];
+    }
+    /**
+     * Get all permissions for a role.
+     */
+    getPermissionsForRole(role) {
+        return [...ROLE_PERMISSIONS[role]];
+    }
+    /**
+     * Check if RBAC is enabled.
+     */
+    isEnabled() {
+        return this.enabled;
+    }
+}
+//# sourceMappingURL=AccessControl.js.map

package/dist/core/AccessControl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessControl.js","sourceRoot":"","sources":["../../src/core/AccessControl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmDH,wEAAwE;AAExE;;GAEG;AACH,MAAM,gBAAgB,GAAsC;IAC1D,KAAK,EAAE,IAAI,GAAG,CAAC;QACb,aAAa;QACb,oBAAoB;QACpB,aAAa;QACb,eAAe;QACf,oBAAoB;QACpB,wBAAwB;QACxB,eAAe;QACf,cAAc;QACd,kBAAkB;QAClB,kBAAkB;KACnB,CAAC;IACF,UAAU,EAAE,IAAI,GAAG,CAAC;QAClB,aAAa;QACb,oBAAoB;QACpB,aAAa;QACb,eAAe;QACf,cAAc;QACd,kBAAkB;KACnB,CAAC;IACF,WAAW,EAAE,IAAI,GAAG,CAAC;QACnB,aAAa;QACb,aAAa;QACb,eAAe;QACf,kBAAkB;KACnB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAA+B;IAC1D,aAAa,EAAE,mBAAmB;IAClC,oBAAoB,EAAE,+BAA+B;IACrD,aAAa,EAAE,oBAAoB;IACnC,eAAe,EAAE,sBAAsB;IACvC,oBAAoB,EAAE,oBAAoB;IAC1C,wBAAwB,EAAE,+CAA+C;IACzE,eAAe,EAAE,sBAAsB;IACvC,cAAc,EAAE,qBAAqB;IACrC,kBAAkB,EAAE,0BAA0B;IAC9C,kBAAkB,EAAE,oCAAoC;CACzD,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAmE;IACzF,oBAAoB,EAAE;QACpB,WAAW,EAAE,gEAAgE;KAC9E;IACD,eAAe,EAAE;QACf,WAAW,EAAE,yCAAyC;QACtD,UAAU,EAAE,yCAAyC;KACtD;IACD,wBAAwB,EAAE;QACxB,WAAW,EAAE,oDAAoD;QACjE,UAAU,EAAE,oDAAoD;KACjE;IACD,oBAAoB,EAAE;QACpB,WAAW,EAAE,oCAAoC;QACjD,UAAU,EAAE,oCAAoC;KACjD;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,OAAO,aAAa;IAChB,KAAK,CAA6B;IAClC,WAAW,CAAW;IACtB,OAAO,CAAU;IAEzB,YAAY,MAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,aAAa,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;IACxC,CAAC;IAED,qEAAqE;IAErE;;OAEG;IACH,KAAK,CAAC,MAAc,EAAE,UAAsB;QAC1C,wCAAwC;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC9B,UAAU;aACX,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAE1D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI;YACJ,UAAU;YACV,MAAM,EAAE,SAAS,IAAI,+BAA+B,UAAU,MAAM,uBAAuB,CAAC,UAAU,CAAC,GAAG;YAC1G,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,MAAc,EAAE,WAAyB;QAIhD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,MAAc,EAAE,WAAyB;QAIhD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACrC,OAAO;SACR,CAAC;IACJ,CAAC;IAED,qEAAqE;IAErE;;OAEG;IACH,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,WAAW,CACT,WAAmB,EACnB,YAAoB,EACpB,OAAiB;QAEjB,8BAA8B;QAC9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE;YAC3B,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,IAAc;QAClC,OAAO,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/core/AdaptationValidator.d.ts

@@ -0,0 +1,44 @@
+/**
+ * AdaptationValidator — Post-adaptation scope enforcement and drift scoring.
+ *
+ * When the ContextualEvaluator adapts a dispatch, the adapted content must
+ * pass scope enforcement before execution. This prevents prompt injection
+ * via LLM adaptation (e.g., adapting a lesson into executable code).
+ *
+ * Also computes adaptation drift — how far the adapted content deviates
+ * from the original. High drift is flagged for human review.
+ */
+import type { Dispatch } from './DispatchManager.js';
+import type { DispatchScopeEnforcer } from './DispatchScopeEnforcer.js';
+import type { AutonomyProfileLevel } from './types.js';
+export interface AdaptationScopeCheck {
+    /** Whether the adaptation stays within the original dispatch's scope */
+    withinScope: boolean;
+    /** What scope violations were detected */
+    violations: string[];
+    /** Semantic drift from original (0 = identical, 1 = completely different) */
+    driftScore: number;
+    /** Whether human review is recommended */
+    flagForReview: boolean;
+}
+export interface AdaptationValidatorConfig {
+    /** Max semantic drift before flagging for review (default: 0.6) */
+    driftThreshold?: number;
+}
+export declare class AdaptationValidator {
+    private config;
+    constructor(config?: AdaptationValidatorConfig);
+    /**
+     * Validate adapted content against the original dispatch's scope.
+     */
+    validate(original: Dispatch, adaptedContent: string, scopeEnforcer?: DispatchScopeEnforcer | null, autonomyProfile?: AutonomyProfileLevel): AdaptationScopeCheck;
+    /**
+     * Compute drift between original and adapted content.
+     * Uses a simple token-overlap approach (Jaccard similarity inverted).
+     * Returns 0 (identical) to 1 (completely different).
+     */
+    computeDrift(original: string, adapted: string): number;
+    private tokenize;
+    private detectPatterns;
+}
+//# sourceMappingURL=AdaptationValidator.d.ts.map