@imricci/zaker 0.1.0

package/dist/core/types.d.ts

@@ -0,0 +1,288 @@
+export type Verdict = "PASS" | "CHALLENGE" | "FAIL";
+export type ChallengeType = "C1" | "C2" | "C3" | "C3-FI" | "C4" | "C5" | "C6";
+export type ExecutionProviderKind = "local" | "cheap_cloud" | "ollama";
+export declare const SOP_SCHEMA_VERSION = "molo.sop.v1";
+export declare const CHECKPOINT_SCHEMA_VERSION = "molo.checkpoint.v1";
+export declare const AUDIT_SCHEMA_VERSION = "molo.audit.v1";
+export declare const MEMORY_SCHEMA_VERSION = "molo.memory.v1";
+export declare const INTENT_SCHEMA_VERSION = "molo.intent.v1";
+export declare const SESSION_SCHEMA_VERSION = "molo.session.v1";
+export declare const MEMORY_HYDRATION_SOURCE_LOCAL_FILE = "local_memory_file";
+export type IntentStatus = "DRAFT" | "CONFIRMED";
+export type SessionState = "ALIGN" | "READY" | "RUNNING" | "RESULT";
+export type SessionDialogRole = "user" | "system";
+export type SessionDialogKind = "message" | "command" | "status" | "result";
+export interface SessionDialogEntry {
+    turn: number;
+    timestamp: string;
+    role: SessionDialogRole;
+    kind: SessionDialogKind;
+    content: string;
+}
+export interface SessionDialogRound {
+    round: number;
+    started_at: string;
+    completed_at: string;
+    verdict: Verdict;
+    reason_code: string;
+    checkpoint_id?: string;
+}
+export interface SessionDialogState {
+    debug: boolean;
+    turn: number;
+    rounds: SessionDialogRound[];
+    history: SessionDialogEntry[];
+}
+export interface SOPScope {
+    allowed_paths: string[];
+    forbidden_paths: string[];
+}
+export interface IntentCard {
+    schema_version: string;
+    intent_id: string;
+    status: IntentStatus;
+    title: string;
+    goal: string;
+    scope: SOPScope;
+    acceptance: string[];
+    constraints: string[];
+    updated_at: string;
+    confirmed_at?: string;
+}
+export interface IntentBinding {
+    intent_id: string;
+    intent_sha256: string;
+    intent_confirmed_at: string;
+}
+export interface SessionStore {
+    schema_version: string;
+    state: SessionState;
+    updated_at: string;
+    current_intent_id?: string;
+    last_run_verdict?: Verdict;
+    last_checkpoint_id?: string;
+    last_run_completed_at?: string;
+    dialog?: SessionDialogState;
+}
+export interface SOPVerificationCommand {
+    id: string;
+    command: string;
+    timeout_sec: number;
+    required: boolean;
+}
+export interface SOPVerification {
+    commands: SOPVerificationCommand[];
+}
+export interface SOPLimits {
+    max_runtime_minutes: number;
+    max_challenges: number;
+}
+export interface SOPSkill {
+    type: string;
+}
+export interface SOPTask {
+    id: string;
+    title: string;
+    acceptance: string[];
+}
+export interface ExecutionSettings {
+    provider: ExecutionProviderKind;
+    model: string;
+    ollama_host: string;
+    max_attempts: number;
+}
+export interface SOP {
+    schema_version: string;
+    sop_id: string;
+    goal: string;
+    scope: SOPScope;
+    verification: SOPVerification;
+    limits: SOPLimits;
+    skills: SOPSkill[];
+    tasks: SOPTask[];
+    patches: string[];
+}
+export interface VerificationCommandResult {
+    id: string;
+    command: string;
+    exit_code: number;
+    stdout_excerpt: string;
+    stderr_excerpt: string;
+    stdout_sha256: string;
+    success: boolean;
+}
+export interface VerificationReport {
+    commands: VerificationCommandResult[];
+    all_passed: boolean;
+}
+export interface RunnerAttestation {
+    runner_id: string;
+    runner_version: string;
+    generated_at: string;
+    attestation_sha256: string;
+    metadata: RunnerMetadata;
+}
+export interface RunnerCommandSignature {
+    id: string;
+    command: string;
+    command_sha256: string;
+}
+export interface RunnerMetadata {
+    preflight_checked_at: string;
+    lockfile_path: string;
+    lockfile_sha256: string;
+    verification_commands: RunnerCommandSignature[];
+    risk_paths_file: string;
+    risk_paths_sha256: string;
+    execution: {
+        provider: ExecutionProviderKind;
+        model: string;
+        ollama_host?: string;
+        max_attempts: number;
+        attempts_used: number;
+    };
+}
+export interface SelfCritiqueItem {
+    severity: "LOW" | "MEDIUM" | "HIGH";
+    item: string;
+    evidence?: string;
+}
+export interface MemoryRecord {
+    id: string;
+    timestamp: string;
+    source: string;
+    supersedes: string;
+    confidence: number;
+    content: string;
+}
+export interface ExecutionFailureRecord extends MemoryRecord {
+}
+export interface MemoryStore {
+    schema_version: string;
+    facts: MemoryRecord[];
+    decisions: MemoryRecord[];
+    constraints: MemoryRecord[];
+    execution_failures: ExecutionFailureRecord[];
+}
+export type MemorySummaryStatus = "HYDRATED" | "DEGRADED";
+export interface MemorySummary {
+    status: MemorySummaryStatus;
+    source: string;
+    hydrated_at: string;
+    facts_count: number;
+    decisions_count: number;
+    constraints_count: number;
+    execution_failure_count: number;
+    used_ids: string[];
+    warning?: string;
+}
+export interface MemoryHydration {
+    status: MemorySummaryStatus;
+    source: string;
+    hydrated_at: string;
+    facts: MemoryRecord[];
+    decisions: MemoryRecord[];
+    constraints: MemoryRecord[];
+    execution_failures: ExecutionFailureRecord[];
+    warning?: string;
+    summary: MemorySummary;
+}
+export interface CheckpointBudget {
+    cloud_plan_calls: number;
+    cloud_audit_calls: number;
+    challenge_used: number;
+}
+export interface ChallengeHistoryEntry {
+    round: number;
+    challenge_id: string;
+    type: ChallengeType;
+    fingerprint: string;
+    instruction: string;
+    audit_call: number;
+    status: "APPLIED" | "SKIPPED" | "REJECTED";
+    applied_patches: number;
+    verification_all_passed: boolean;
+    reason?: string;
+    recorded_at: string;
+}
+export type C3FIRiskLevel = "HIGH" | "CRITICAL";
+export type C3FIStatus = "SKIPPED" | "PASSED" | "FAILED";
+export interface C3FIReport {
+    status: C3FIStatus;
+    required: boolean;
+    trigger_reason: string;
+    risk_level?: C3FIRiskLevel;
+    target_file?: string;
+    target_function?: string;
+    injected_line?: number;
+    injection_verification: {
+        all_passed: boolean;
+        failed_command_ids: string[];
+    };
+    post_rollback_verification: {
+        all_passed: boolean;
+        failed_command_ids: string[];
+    };
+    rollback: {
+        strategy: "snapshot_restore";
+        success: boolean;
+        detail?: string;
+    };
+    message: string;
+    recorded_at: string;
+}
+export interface Checkpoint {
+    schema_version: string;
+    checkpoint_id: string;
+    sop_id?: string;
+    intent_id?: string;
+    intent_sha256?: string;
+    intent_confirmed_at?: string;
+    base_commit: string;
+    head_commit: string;
+    diffstat: string;
+    diff_excerpt: string;
+    changed_files: string[];
+    verification: VerificationReport;
+    runner_attestation?: RunnerAttestation;
+    memory_summary: MemorySummary;
+    self_critique: SelfCritiqueItem[];
+    c3_fi_report: C3FIReport;
+    challenge_history: ChallengeHistoryEntry[];
+    budget: CheckpointBudget;
+}
+export interface AuditChallenge {
+    challenge_id: string;
+    type: ChallengeType;
+    fingerprint: string;
+    instruction: string;
+    remaining_budget?: number;
+    remediation_patches: string[];
+}
+export interface AuditResult {
+    schema_version: string;
+    verdict: Verdict;
+    reason_code: string;
+    message: string;
+    challenge?: AuditChallenge;
+}
+export interface ExecutionProviderInput {
+    goal: string;
+    tasks: SOPTask[];
+    scope: SOPScope;
+    limits: {
+        max_attempts: number;
+    };
+    patches: string[];
+}
+export interface ExecutionProviderOutput {
+    patches: string[];
+    attempts_used: number;
+}
+export interface ExecutionProvider {
+    execute(input: ExecutionProviderInput): Promise<ExecutionProviderOutput>;
+}
+export interface LLMProvider {
+    plan(prompt: string): Promise<SOP>;
+    audit(checkpoint: any): Promise<AuditResult>;
+}

package/dist/core/types.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEMORY_HYDRATION_SOURCE_LOCAL_FILE = exports.SESSION_SCHEMA_VERSION = exports.INTENT_SCHEMA_VERSION = exports.MEMORY_SCHEMA_VERSION = exports.AUDIT_SCHEMA_VERSION = exports.CHECKPOINT_SCHEMA_VERSION = exports.SOP_SCHEMA_VERSION = void 0;
+exports.SOP_SCHEMA_VERSION = "molo.sop.v1";
+exports.CHECKPOINT_SCHEMA_VERSION = "molo.checkpoint.v1";
+exports.AUDIT_SCHEMA_VERSION = "molo.audit.v1";
+exports.MEMORY_SCHEMA_VERSION = "molo.memory.v1";
+exports.INTENT_SCHEMA_VERSION = "molo.intent.v1";
+exports.SESSION_SCHEMA_VERSION = "molo.session.v1";
+exports.MEMORY_HYDRATION_SOURCE_LOCAL_FILE = "local_memory_file";
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":";;;AAIa,QAAA,kBAAkB,GAAG,aAAa,CAAC;AACnC,QAAA,yBAAyB,GAAG,oBAAoB,CAAC;AACjD,QAAA,oBAAoB,GAAG,eAAe,CAAC;AACvC,QAAA,qBAAqB,GAAG,gBAAgB,CAAC;AACzC,QAAA,qBAAqB,GAAG,gBAAgB,CAAC;AACzC,QAAA,sBAAsB,GAAG,iBAAiB,CAAC;AAC3C,QAAA,kCAAkC,GAAG,mBAAmB,CAAC"}

package/dist/core/verdict-panel.d.ts

@@ -0,0 +1,29 @@
+import { AuditResult, ChallengeType, Checkpoint, Verdict } from "./types";
+type SkillStatusValue = "PASS" | "FAIL";
+type TestStatus = "PASS" | "FAIL" | "PENDING";
+export interface SkillStatusItem {
+    skill: "preflight" | "core_execution" | "audit_checkpoint";
+    status: SkillStatusValue;
+    detail: string;
+}
+export interface VerdictPanel {
+    verdict: Verdict;
+    reason_code: string;
+    trigger_rule: string;
+    rule_hits: string[];
+    audit_conclusion: string;
+    changed_files: number;
+    tests_passed: number;
+    tests_total: number;
+    test_status: TestStatus;
+    risk_hit: string;
+    challenge_type?: ChallengeType;
+    objections: string[];
+    required_evidence: string[];
+    evidence_refs: string[];
+    retry_allowed: boolean;
+    retry_reason: string;
+    skill_statuses: SkillStatusItem[];
+}
+export declare function buildVerdictPanel(finalAudit: AuditResult, checkpoint?: Checkpoint): VerdictPanel;
+export {};

package/dist/core/verdict-panel.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildVerdictPanel = buildVerdictPanel;
+function dedupeStrings(values) {
+    return [...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))];
+}
+function requiredEvidenceByType(type) {
+    if (!type) {
+        return [];
+    }
+    const table = {
+        C1: ["测试覆盖补充", "失败到通过的验证证据"],
+        C2: ["依赖影响分析", "调用方更新证据", "集成验证证据"],
+        C3: ["Runner 验证哈希", "runner_attestation"],
+        "C3-FI": ["故障注入报告", "回滚恢复验证证据"],
+        C4: ["兼容性评估", "迁移/回滚方案"],
+        C5: ["安全审计证据", "风险路径解释"],
+        C6: ["预算与调用统计", "挑战轮次消耗证明"]
+    };
+    return table[type];
+}
+function computeRetryAllowed(reasonCode) {
+    const blocked = new Set([
+        "C3_FI_GUARD_FAILED",
+        "CHALLENGE_LIMIT_EXCEEDED",
+        "DUPLICATE_CHALLENGE_FINGERPRINT",
+        "HUMAN_INTERVENTION_REQUIRED",
+        "PRECONDITION_FAILED"
+    ]);
+    return !blocked.has(reasonCode);
+}
+function computeRetryReason(reasonCode, allowed) {
+    if (allowed) {
+        return `retry allowed by rule ${reasonCode}`;
+    }
+    return `retry blocked by rule ${reasonCode}`;
+}
+function computeTestStatus(passed, total) {
+    if (total === 0) {
+        return "PENDING";
+    }
+    return passed === total ? "PASS" : "FAIL";
+}
+function computeSkillStatuses(checkpoint) {
+    const hasPreflightMetadata = Boolean(checkpoint?.runner_attestation?.metadata &&
+        checkpoint.runner_attestation.metadata.verification_commands.length > 0);
+    const hasAuditBinding = Boolean(checkpoint?.runner_attestation &&
+        checkpoint?.intent_id &&
+        checkpoint?.intent_sha256 &&
+        checkpoint?.intent_confirmed_at);
+    const hasExecutionEvidence = Boolean(checkpoint && Array.isArray(checkpoint.changed_files));
+    return [
+        {
+            skill: "preflight",
+            status: hasPreflightMetadata ? "PASS" : "FAIL",
+            detail: hasPreflightMetadata ? "runner metadata present" : "missing runner metadata"
+        },
+        {
+            skill: "core_execution",
+            status: hasExecutionEvidence ? "PASS" : "FAIL",
+            detail: hasExecutionEvidence
+                ? `changed_files tracked (${checkpoint?.changed_files.length ?? 0})`
+                : "missing execution evidence"
+        },
+        {
+            skill: "audit_checkpoint",
+            status: hasAuditBinding ? "PASS" : "FAIL",
+            detail: hasAuditBinding ? "intent binding + attestation present" : "missing checkpoint binding"
+        }
+    ];
+}
+function computeRiskHit(checkpoint) {
+    if (!checkpoint?.c3_fi_report?.required) {
+        return "无命中";
+    }
+    return `命中(${checkpoint.c3_fi_report.risk_level ?? "HIGH"})`;
+}
+function buildVerdictPanel(finalAudit, checkpoint) {
+    const verification = checkpoint?.verification.commands ?? [];
+    const testsPassed = verification.filter((entry) => entry.success).length;
+    const testsTotal = verification.length;
+    const challengeType = finalAudit.challenge?.type;
+    const reasonCode = finalAudit.reason_code || "UNKNOWN";
+    const retryAllowed = computeRetryAllowed(reasonCode);
+    const objections = dedupeStrings(finalAudit.verdict === "CHALLENGE"
+        ? [finalAudit.message, finalAudit.challenge?.instruction ?? ""]
+        : finalAudit.verdict === "FAIL"
+            ? [finalAudit.message]
+            : []);
+    const ruleHits = dedupeStrings([
+        reasonCode,
+        challengeType ?? "",
+        checkpoint?.c3_fi_report?.status === "FAILED" ? "C3_FI_GUARD_FAILED" : ""
+    ]);
+    return {
+        verdict: finalAudit.verdict,
+        reason_code: reasonCode,
+        trigger_rule: reasonCode,
+        rule_hits: ruleHits,
+        audit_conclusion: finalAudit.verdict === "PASS" ? "无结构性风险" : finalAudit.message,
+        changed_files: checkpoint?.changed_files.length ?? 0,
+        tests_passed: testsPassed,
+        tests_total: testsTotal,
+        test_status: computeTestStatus(testsPassed, testsTotal),
+        risk_hit: computeRiskHit(checkpoint),
+        challenge_type: challengeType,
+        objections,
+        required_evidence: requiredEvidenceByType(challengeType),
+        evidence_refs: dedupeStrings([
+            "checkpoint.runner_attestation.attestation_sha256",
+            "checkpoint.verification.commands[*].stdout_sha256",
+            "checkpoint.c3_fi_report",
+            "checkpoint.challenge_history[*]"
+        ]),
+        retry_allowed: retryAllowed,
+        retry_reason: computeRetryReason(reasonCode, retryAllowed),
+        skill_statuses: computeSkillStatuses(checkpoint)
+    };
+}
+//# sourceMappingURL=verdict-panel.js.map

package/dist/core/verdict-panel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-panel.js","sourceRoot":"","sources":["../../src/core/verdict-panel.ts"],"names":[],"mappings":";;AAsHA,8CA6CC;AApID,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAoB;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAoC;QAC7C,EAAE,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC5B,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;QACnC,EAAE,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC;QACzC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC/B,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;QACxB,EAAE,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxB,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KAC5B,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,oBAAoB;QACpB,0BAA0B;QAC1B,iCAAiC;QACjC,6BAA6B;QAC7B,qBAAqB;KACtB,CAAC,CAAC;IACH,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAE,OAAgB;IAC9D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,yBAAyB,UAAU,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,yBAAyB,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAuB;IACnD,MAAM,oBAAoB,GAAG,OAAO,CAClC,UAAU,EAAE,kBAAkB,EAAE,QAAQ;QACtC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAC1E,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAC7B,UAAU,EAAE,kBAAkB;QAC5B,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,mBAAmB,CAClC,CAAC;IACF,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;IAE5F,OAAO;QACL;YACE,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC9C,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,yBAAyB;SACrF;QACD;YACE,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC9C,MAAM,EAAE,oBAAoB;gBAC1B,CAAC,CAAC,0BAA0B,UAAU,EAAE,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG;gBACpE,CAAC,CAAC,4BAA4B;SACjC;QACD;YACE,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACzC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,4BAA4B;SAChG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAuB;IAC7C,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,UAAU,CAAC,YAAY,CAAC,UAAU,IAAI,MAAM,GAAG,CAAC;AAC/D,CAAC;AAED,SAAgB,iBAAiB,CAAC,UAAuB,EAAE,UAAuB;IAChF,MAAM,YAAY,GAAG,UAAU,EAAE,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC7D,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC;IACvC,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC;IACjD,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,IAAI,SAAS,CAAC;IACvD,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,aAAa,CAC9B,UAAU,CAAC,OAAO,KAAK,WAAW;QAChC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC;QAC/D,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM;YAC7B,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YACtB,CAAC,CAAC,EAAE,CACT,CAAC;IAEF,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,UAAU;QACV,aAAa,IAAI,EAAE;QACnB,UAAU,EAAE,YAAY,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE;KAC1E,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,UAAU;QACxB,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO;QAC/E,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,IAAI,CAAC;QACpD,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;QACvD,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC;QACpC,cAAc,EAAE,aAAa;QAC7B,UAAU;QACV,iBAAiB,EAAE,sBAAsB,CAAC,aAAa,CAAC;QACxD,aAAa,EAAE,aAAa,CAAC;YAC3B,kDAAkD;YAClD,mDAAmD;YACnD,yBAAyB;YACzB,iCAAiC;SAClC,CAAC;QACF,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC;QAC1D,cAAc,EAAE,oBAAoB,CAAC,UAAU,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/core/verifier.d.ts

@@ -0,0 +1,2 @@
+import { RunnerCommandSignature, VerificationReport } from "./types";
+export declare function runVerification(signedCommands: RunnerCommandSignature[], cwd?: string): Promise<VerificationReport>;

package/dist/core/verifier.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runVerification = runVerification;
+const hashing_1 = require("../infra/hashing");
+const process_1 = require("../infra/process");
+function excerpt(output, maxLines = 20) {
+    return output.split(/\r?\n/).slice(0, maxLines).join("\n");
+}
+function tokenizeCommand(command) {
+    return command
+        .trim()
+        .split(/\s+/)
+        .filter((part) => part.length > 0);
+}
+async function runVerification(signedCommands, cwd = process.cwd()) {
+    if (signedCommands.length === 0) {
+        throw new Error("Verification failed: no signed verification commands provided.");
+    }
+    const commands = [];
+    for (const entry of signedCommands) {
+        const computedCommandHash = (0, hashing_1.sha256)(entry.command);
+        if (computedCommandHash !== entry.command_sha256) {
+            throw new Error(`Verification failed: command signature mismatch for ${entry.id}.`);
+        }
+        const tokens = tokenizeCommand(entry.command);
+        if (tokens.length === 0) {
+            throw new Error(`Verification failed: invalid command for ${entry.id}.`);
+        }
+        const binary = tokens[0];
+        const args = tokens.slice(1);
+        const result = await (0, process_1.runCommand)(binary, args, { cwd });
+        commands.push({
+            id: entry.id,
+            command: entry.command,
+            exit_code: result.exitCode,
+            stdout_excerpt: excerpt(result.stdout),
+            stderr_excerpt: excerpt(result.stderr),
+            stdout_sha256: (0, hashing_1.sha256)(result.stdout),
+            success: result.exitCode === 0
+        });
+    }
+    return {
+        commands,
+        all_passed: commands.every((entry) => entry.success)
+    };
+}
+//# sourceMappingURL=verifier.js.map

package/dist/core/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/core/verifier.ts"],"names":[],"mappings":";;AAeA,0CAwCC;AAvDD,8CAA0C;AAC1C,8CAA8C;AAG9C,SAAS,OAAO,CAAC,MAAc,EAAE,QAAQ,GAAG,EAAE;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO;SACX,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,cAAwC,EACxC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IAEjD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,mBAAmB,GAAG,IAAA,gBAAM,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,mBAAmB,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,uDAAuD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAU,EAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEvD,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,aAAa,EAAE,IAAA,gBAAM,EAAC,MAAM,CAAC,MAAM,CAAC;YACpC,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KACrD,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const audit_1 = require("./commands/audit");
+const align_1 = require("./commands/align");
+const confirm_1 = require("./commands/confirm");
+const dialog_1 = require("./commands/dialog");
+const init_1 = require("./commands/init");
+const models_1 = require("./commands/models");
+const plan_1 = require("./commands/plan");
+const run_1 = require("./commands/run");
+const status_1 = require("./commands/status");
+const tui_1 = require("./commands/tui");
+async function main() {
+    if (process.argv.length <= 2) {
+        await (0, dialog_1.runDialogueSession)();
+        return;
+    }
+    const program = new commander_1.Command();
+    program.name("zaker").description("zaker-cli");
+    (0, init_1.registerInitCommand)(program);
+    (0, align_1.registerAlignCommand)(program);
+    (0, confirm_1.registerConfirmCommand)(program);
+    (0, status_1.registerStatusCommand)(program);
+    (0, models_1.registerModelsCommand)(program);
+    (0, plan_1.registerPlanCommand)(program);
+    (0, audit_1.registerAuditCommand)(program);
+    (0, run_1.registerRunCommand)(program);
+    (0, tui_1.registerTuiCommand)(program);
+    (0, dialog_1.registerDialogCommand)(program);
+    await program.parseAsync(process.argv);
+}
+main().catch((error) => {
+    if (error instanceof Error) {
+        console.error(error.message);
+    }
+    else {
+        console.error(String(error));
+    }
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,4CAAwD;AACxD,4CAAwD;AACxD,gDAA4D;AAC5D,8CAA8E;AAC9E,0CAAsD;AACtD,8CAA0D;AAC1D,0CAAsD;AACtD,wCAAoD;AACpD,8CAA0D;AAC1D,wCAAoD;AAEpD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAA,2BAAkB,GAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;IAC7B,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;IAC9B,IAAA,gCAAsB,EAAC,OAAO,CAAC,CAAC;IAChC,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;IAC/B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;IAC/B,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;IAC7B,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;IAC9B,IAAA,wBAAkB,EAAC,OAAO,CAAC,CAAC;IAC5B,IAAA,wBAAkB,EAAC,OAAO,CAAC,CAAC;IAC5B,IAAA,8BAAqB,EAAC,OAAO,CAAC,CAAC;IAE/B,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/infra/config.d.ts

@@ -0,0 +1,36 @@
+import { ExecutionSettings, LLMProvider } from "../core/types";
+export declare const CONFIG_SCHEMA_VERSION = "molo.config.v1";
+export interface MoloConfig {
+    schema_version: string;
+    scope: {
+        allowed_paths: string[];
+        forbidden_paths: string[];
+    };
+    model: {
+        provider: "mock" | "http" | "openai_codex_team";
+        endpoint?: string;
+        api_key_env?: string;
+        api_key?: string;
+        models_path?: string;
+        planner_model: string;
+        auditor_model: string;
+        timeout_ms?: number;
+    };
+    risk: {
+        risk_paths_file: string;
+    };
+    memory: {
+        memory_file: string;
+        max_items_per_category: number;
+    };
+    execution: ExecutionSettings;
+}
+export interface InitMoloResult {
+    created: string[];
+    updated: string[];
+    skipped: string[];
+}
+export declare function writeMoloConfig(config: MoloConfig, cwd?: string): Promise<void>;
+export declare function initMoloFiles(cwd?: string, force?: boolean): Promise<InitMoloResult>;
+export declare function readConfig(cwd?: string): Promise<MoloConfig>;
+export declare function createLLMProvider(config: MoloConfig): LLMProvider;