@intentset/cli 0.1.0

package/dist/commands/impact.js

@@ -0,0 +1,92 @@
+/**
+ * `intentset impact <ID>` (Core §10): what depends on an artifact. Direct
+ * dependents apart from candidates further downstream, each with the path
+ * that reached it and a reason per step; the start's own rules, contracts and
+ * decisions as review context; navigation ancestors. Every report names its
+ * snapshot and says that reachability is not proof. Never writes.
+ */
+import { impact } from "@intentset/core";
+import { formatDiagnostic, json, snapshotLine, TOOL } from "../output.js";
+import { unresolved, validationLine, validationSummary } from "./shared.js";
+export const REACHABILITY_NOTE = "Reachability through authored links marks an artifact for review; it is not proof that runtime behavior changed (Core §10).";
+export function impactCommand(session, id, asJson, io) {
+    const { graph } = session.result;
+    const level = session.level;
+    const start = graph.artifacts.get(id);
+    if (start === undefined) {
+        const diagnostic = unresolved(id, session);
+        if (asJson) {
+            io.stdout(json({
+                tool: TOOL,
+                snapshot: session.snapshot,
+                validation: validationSummary(session, level),
+                start: null,
+                diagnostics: [diagnostic],
+            }));
+        }
+        else {
+            io.stderr(formatDiagnostic(diagnostic));
+        }
+        return 1;
+    }
+    const report = impact(graph, id);
+    if (asJson) {
+        io.stdout(json({
+            tool: TOOL,
+            snapshot: session.snapshot,
+            validation: validationSummary(session, level),
+            note: REACHABILITY_NOTE,
+            start: { id, type: start.meta.type, title: start.meta.title, path: start.path },
+            direct: report.direct,
+            candidates: report.candidates,
+            context: report.context,
+            ancestors: report.ancestors,
+            diagnostics: [],
+        }));
+    }
+    else {
+        io.stdout(renderImpact(report, session, level, `${start.meta.type} "${start.meta.title}"`));
+    }
+    return session.result.ok ? 0 : 1;
+}
+function renderImpact(report, session, level, described) {
+    const lines = [
+        `Impact of ${report.start}, ${described}`,
+        snapshotLine(session.snapshot),
+        validationLine(session, level),
+        REACHABILITY_NOTE,
+        "",
+    ];
+    const section = (title, gloss, hits) => {
+        lines.push(`${title} (${hits.length}): ${gloss}`);
+        if (hits.length === 0)
+            lines.push("  none");
+        for (const hit of hits) {
+            lines.push(`  ${hit.id}  ${hit.type}  ${hit.title}`);
+            lines.push(`    path: ${pathText(report.start, hit)}`);
+            lines.push(`    reason: ${hit.path.map((step) => step.reason).join(" ")}`);
+        }
+        lines.push("");
+    };
+    section("Direct", "one link from the start", report.direct);
+    section("Candidates", "reachable beyond the direct set, for review", report.candidates);
+    section("Review context", "the start's own rules, contracts and decisions", report.context);
+    lines.push(`Ancestors: ${report.ancestors.length === 0 ? "none" : report.ancestors.join(" > ")}`);
+    return `${lines.join("\n")}\n`;
+}
+/**
+ * A hit's path as authored edges, written in the direction they were authored.
+ * A reverse step (`kind←`) is an edge from the step to the node before it, so
+ * a chain reads from the hit back to the start: `C --dependsOn--> B --implements--> A`.
+ * A context step (`kind→`) is an edge from the start to the hit.
+ */
+export function pathText(start, hit) {
+    const forward = hit.path.length === 1 && hit.path[0].via.endsWith("→");
+    if (forward)
+        return `${start} --${hit.path[0].via.slice(0, -1)}--> ${hit.id}`;
+    let text = start;
+    for (const step of hit.path)
+        text = `${step.id} --${step.via.slice(0, -1)}--> ${text}`;
+    return text;
+}
+//# sourceMappingURL=impact.js.map

package/dist/commands/impact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact.js","sourceRoot":"","sources":["../../src/commands/impact.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAqC,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAW,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEnF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,6HAA6H,CAAC;AAEhI,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,EAAU,EAAE,MAAe,EAAE,EAAM;IACjF,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,EAAE,CAAC,MAAM,CACP,IAAI,CAAC;gBACH,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC;gBAC7C,KAAK,EAAE,IAAI;gBACX,WAAW,EAAE,CAAC,UAAU,CAAC;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,EAAE,CAAC,MAAM,CACP,IAAI,CAAC;YACH,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC;YAC7C,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YAC/E,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,EAAE;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB,EAAE,OAAgB,EAAE,KAAa,EAAE,SAAiB;IAC5F,MAAM,KAAK,GAAG;QACZ,aAAa,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE;QACzC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC9B,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC;QAC9B,iBAAiB;QACjB,EAAE;KACH,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,IAAiB,EAAE,EAAE;QAClE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,MAAM,KAAK,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,CAAC,QAAQ,EAAE,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,YAAY,EAAE,6CAA6C,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACxF,OAAO,CAAC,gBAAgB,EAAE,gDAAgD,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAc;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,OAAO;QAAE,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9E,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,18 @@
+import type { Io } from "../output.ts";
+export declare const REGISTRIES_PATH = ".intentset/registries.yaml";
+export declare const DEFAULT_INIT_SCOPE = "product/**/*.md";
+export interface InitOptions {
+    root?: string;
+    repository?: string;
+    example: boolean;
+}
+export declare function configText(repository: string): string;
+export declare const EMPTY_REGISTRIES_TEXT: string;
+/**
+ * The scheduling example: this repository's own copy when running from a
+ * checkout, otherwise the one @intentset/conformance-suite ships. Null when
+ * neither is present.
+ */
+export declare function exampleDir(): Promise<string | null>;
+export declare function initCommand(options: InitOptions, io: Io): Promise<number>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAGvC,eAAO,MAAM,eAAe,+BAA+B,CAAC;AAC5D,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAGpD,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CAClB;AAOD,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAarD;AAED,eAAO,MAAM,qBAAqB,QAYtB,CAAC;AAEb;;;;GAIG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASzD;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6D/E"}

package/dist/commands/init.js

@@ -0,0 +1,122 @@
+/**
+ * `intentset init`: the one command that writes, and it only creates. It
+ * writes `.intentset/config.yaml` and an empty-but-valid
+ * `.intentset/registries.yaml`, and with `--example` the scheduling example's
+ * records under `product/scheduling/` and its registries in place of the
+ * empty ones. Every target is checked before anything is written, and each
+ * file is opened with exclusive create, so an existing file is never
+ * overwritten, not even by a race.
+ */
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { compareStrings, DEFAULT_IGNORE, readConfig, readRegistries } from "@intentset/core";
+import { CONFIG_PATH } from "../repository.js";
+export const REGISTRIES_PATH = ".intentset/registries.yaml";
+export const DEFAULT_INIT_SCOPE = "product/**/*.md";
+const EXAMPLE_TARGET = "product/scheduling";
+/** YAML double-quoted scalar; the strict reader takes JSON's escapes. */
+function quote(value) {
+    return JSON.stringify(value);
+}
+export function configText(repository) {
+    return [
+        "# Intentset configuration (Core §11): the repository scope a conformance claim is about.",
+        "# Written by `intentset init`. Patterns are repository-relative: literal segments, * within",
+        "# one segment, ** across segments.",
+        `repository: ${quote(repository)}`,
+        "scope:",
+        `  - ${quote(DEFAULT_INIT_SCOPE)}`,
+        `registries: ${quote(REGISTRIES_PATH)}`,
+        "ignore:",
+        ...DEFAULT_IGNORE.map((pattern) => `  - ${quote(pattern)}`),
+        "",
+    ].join("\n");
+}
+export const EMPTY_REGISTRIES_TEXT = [
+    "# Intentset registries (Core §4, §7; VSA §3): the owners, audiences, release dimensions",
+    "# and shared resources records may name. An empty registry reads as not declared, and",
+    "# validate warns (CORE005) when a record names a value it could not check.",
+    "owners: []",
+    "audiences: []",
+    "releases: []",
+    "roles: []",
+    "editions: []",
+    "flags: []",
+    "resources: []",
+    "",
+].join("\n");
+/**
+ * The scheduling example: this repository's own copy when running from a
+ * checkout, otherwise the one @intentset/conformance-suite ships. Null when
+ * neither is present.
+ */
+export async function exampleDir() {
+    const candidates = [fileURLToPath(new URL("../../../../examples/scheduling/", import.meta.url))];
+    try {
+        const suite = (await import("@intentset/conformance-suite"));
+        if (typeof suite.examplesPath === "string")
+            candidates.push(join(suite.examplesPath, "scheduling"));
+    }
+    catch {
+        // Not installed: the checkout's copy is the only candidate.
+    }
+    return candidates.find((dir) => existsSync(join(dir, "registries.yaml"))) ?? null;
+}
+export async function initCommand(options, io) {
+    const root = resolve(io.cwd, options.root ?? ".");
+    const repository = options.repository ?? basename(root);
+    if (repository.trim() === "" || /[\r\n]/.test(repository)) {
+        io.stderr("intentset init: --repository must be a non-empty name on one line, such as org/name.\n");
+        return 2;
+    }
+    // Everything to write, decided before anything is written.
+    const files = new Map([[CONFIG_PATH, configText(repository)]]);
+    let registries = EMPTY_REGISTRIES_TEXT;
+    if (options.example) {
+        const dir = await exampleDir();
+        if (dir === null) {
+            io.stderr("intentset init: --example needs the scheduling example, which is in an Intentset checkout under\n" +
+                "examples/scheduling and in the @intentset/conformance-suite package. Neither was found; install\n" +
+                "@intentset/conformance-suite beside @intentset/cli, or run init without --example.\n");
+            return 2;
+        }
+        registries = readFileSync(join(dir, "registries.yaml"), "utf8");
+        for (const name of readdirSync(dir)
+            .filter((n) => n.endsWith(".md"))
+            .sort(compareStrings)) {
+            files.set(`${EXAMPLE_TARGET}/${name}`, readFileSync(join(dir, name), "utf8"));
+        }
+    }
+    files.set(REGISTRIES_PATH, registries);
+    // What init writes must read back clean, or it has handed the user a broken repository.
+    const config = readConfig(files.get(CONFIG_PATH), CONFIG_PATH);
+    const registry = readRegistries(registries, REGISTRIES_PATH);
+    if (config.diagnostics.length > 0 || registry.diagnostics.length > 0) {
+        io.stderr("intentset init: the files it would write do not read back clean; nothing was written.\n");
+        return 2;
+    }
+    const ordered = [...files.keys()].sort(compareStrings);
+    const existing = ordered.filter((path) => existsSync(join(root, path)));
+    if (existing.length > 0) {
+        io.stderr(`intentset init: refusing to overwrite ${existing.join(", ")}; init only creates files.\n` +
+            "Remove them first if a fresh start is what you want.\n");
+        return 2;
+    }
+    for (const path of ordered) {
+        const target = join(root, path);
+        try {
+            mkdirSync(dirname(target), { recursive: true });
+            writeFileSync(target, files.get(path), { flag: "wx" });
+        }
+        catch (error) {
+            io.stderr(`intentset init: could not create ${path}: ${error.message}\n`);
+            return 2;
+        }
+        io.stdout(`created ${path}\n`);
+    }
+    const scope = options.example ? `${files.size - 2} example records in scope` : "an empty scope";
+    io.stdout(`Initialized ${quote(repository)} with ${scope}. Next: intentset validate\n`);
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,CAAC,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AACpD,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAQ5C,yEAAyE;AACzE,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,OAAO;QACL,0FAA0F;QAC1F,6FAA6F;QAC7F,oCAAoC;QACpC,eAAe,KAAK,CAAC,UAAU,CAAC,EAAE;QAClC,QAAQ;QACR,OAAO,KAAK,CAAC,kBAAkB,CAAC,EAAE;QAClC,eAAe,KAAK,CAAC,eAAe,CAAC,EAAE;QACvC,SAAS;QACT,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,yFAAyF;IACzF,uFAAuF;IACvF,4EAA4E;IAC5E,YAAY;IACZ,eAAe;IACf,cAAc;IACd,WAAW;IACX,cAAc;IACd,WAAW;IACX,eAAe;IACf,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,UAAU,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,kCAAkC,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAA8B,CAAC;QAC1F,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB,EAAE,EAAM;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,EAAE,CAAC,MAAM,CAAC,wFAAwF,CAAC,CAAC;QACpG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,2DAA2D;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,UAAU,GAAG,qBAAqB,CAAC;IACvC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,EAAE,CAAC,MAAM,CACP,mGAAmG;gBACjG,mGAAmG;gBACnG,sFAAsF,CACzF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aAChC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,GAAG,cAAc,IAAI,IAAI,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAEvC,wFAAwF;IACxF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAW,EAAE,WAAW,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,EAAE,CAAC,MAAM,CAAC,yFAAyF,CAAC,CAAC;QACrG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,MAAM,CACP,yCAAyC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B;YACxF,wDAAwD,CAC3D,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,EAAE,CAAC,MAAM,CAAC,oCAAoC,IAAI,KAAM,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAChG,EAAE,CAAC,MAAM,CAAC,eAAe,KAAK,CAAC,UAAU,CAAC,SAAS,KAAK,8BAA8B,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/mcp.d.ts

@@ -0,0 +1,24 @@
+import { createIntentsetServer } from "@intentset/mcp";
+import { type Io } from "../output.ts";
+import { type SessionOptions } from "../session.ts";
+export type McpServer = ReturnType<typeof createIntentsetServer>;
+export interface McpOptions {
+    mode?: string;
+    includeRestricted: boolean;
+    visibility?: string;
+    audience?: string;
+    product?: string;
+    release?: string;
+    role?: string;
+    edition?: string;
+    flags: string[];
+    authorizedInternal: boolean;
+    authorizedRestricted: boolean;
+    publishedAt?: string;
+}
+export declare const MCP_MODES: readonly ["engineering", "customer"];
+export declare function mcpUsageProblem(options: McpOptions): string | null;
+/** The server the command would run, or the exit code after saying why there is none. Writes only to stderr. */
+export declare function buildMcpServer(options: McpOptions, sessionOptions: SessionOptions, io: Io): McpServer | number;
+export declare function mcpCommand(options: McpOptions, sessionOptions: SessionOptions, io: Io): Promise<number>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/commands/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,qBAAqB,EAAY,MAAM,gBAAgB,CAAC;AAEjE,OAAO,EAA2B,KAAK,EAAE,EAAgB,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAEjE,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEjE,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,SAAS,YAAI,aAAa,EAAE,UAAU,CAAU,CAAC;AAE9D,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAsBlE;AAED,gHAAgH;AAChH,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,SAAS,GAAG,MAAM,CAsE9G;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7G"}

package/dist/commands/mcp.js

@@ -0,0 +1,122 @@
+/**
+ * `intentset mcp` (Core §10): the read-only MCP server over stdio, in the
+ * mode the operator chooses here and no client can change.
+ *
+ *   engineering  the validated graph: lookup, context, impact and search,
+ *                every result naming the snapshot and its source paths
+ *   customer     a publication made in memory exactly as `publish` makes
+ *                one, and its retrieval chunks; the server is never given
+ *                the graph, so it has no engineering record to leak
+ *
+ * stdout carries the protocol and nothing else: the startup line and every
+ * diagnostic go to stderr. A customer request that the publisher refuses,
+ * or a graph that does not validate, stops before any server starts.
+ */
+import { sortDiagnostics } from "@intentset/core";
+import { createIntentsetServer, runStdio } from "@intentset/mcp";
+import { publish, toChunks } from "@intentset/publisher";
+import { count, formatDiagnostic, snapshotLine } from "../output.js";
+import { openSession } from "../session.js";
+export const MCP_MODES = ["engineering", "customer"];
+export function mcpUsageProblem(options) {
+    if (options.mode === undefined || !MCP_MODES.includes(options.mode)) {
+        return `--mode ${options.mode ?? "(missing)"}: the modes are engineering and customer, and one must be chosen`;
+    }
+    const request = [
+        options.visibility,
+        options.audience,
+        options.product,
+        options.release,
+        options.role,
+        options.edition,
+    ].some((value) => value !== undefined);
+    if (options.mode === "engineering" && (request || options.flags.length > 0)) {
+        return "publication request options belong to --mode customer";
+    }
+    if (options.mode === "customer") {
+        if (options.includeRestricted)
+            return "--include-restricted belongs to --mode engineering";
+        if (options.visibility !== undefined && options.visibility !== "public" && options.visibility !== "customer") {
+            return `--visibility ${options.visibility}: customer mode serves a public or customer projection only`;
+        }
+    }
+    return null;
+}
+/** The server the command would run, or the exit code after saying why there is none. Writes only to stderr. */
+export function buildMcpServer(options, sessionOptions, io) {
+    const session = openSession("mcp", sessionOptions, io);
+    if (typeof session === "number")
+        return session;
+    const { result, snapshot, repo } = session;
+    const summary = `${count(result.graph.artifacts.size, "artifact")}, ${count(session.errors, "error")}, ${count(session.warnings, "warning")} at ${session.level}`;
+    if (options.mode === "engineering") {
+        if (!result.ok) {
+            io.stderr(`intentset mcp: validation has ${count(session.errors, "error")}; results may be incomplete.\n`);
+        }
+        try {
+            const server = createIntentsetServer({
+                mode: "engineering",
+                graph: result.graph,
+                snapshot: { commit: snapshot.commit, graphHash: snapshot.graphHash },
+                includeRestricted: options.includeRestricted,
+            });
+            io.stderr(`intentset mcp: engineering context for ${repo.config.repository} over stdio (${summary}${options.includeRestricted ? ", restricted records included" : ", restricted records withheld"}). ${snapshotLine(snapshot)}\n`);
+            return server;
+        }
+        catch (error) {
+            io.stderr(`intentset mcp: ${error.message}\n`);
+            return 2;
+        }
+    }
+    if (!result.ok) {
+        for (const d of session.diagnostics)
+            io.stderr(formatDiagnostic(d));
+        io.stderr(`intentset mcp: refused: validation has ${count(session.errors, "error")}, so nothing is published.\n`);
+        return 1;
+    }
+    const request = {
+        visibility: options.visibility,
+        audience: options.audience,
+        product: options.product,
+        release: options.release,
+        role: options.role,
+        edition: options.edition,
+        flags: options.flags,
+        authorizedInternal: options.authorizedInternal,
+        authorizedRestricted: options.authorizedRestricted,
+    };
+    const published = publish(result.graph, repo.registries, request, {
+        snapshot: { commit: snapshot.commit, graphHash: snapshot.graphHash },
+        publishedAt: options.publishedAt ?? new Date().toISOString(),
+    });
+    for (const d of sortDiagnostics(published.diagnostics))
+        io.stderr(formatDiagnostic(d));
+    if (published.index.request === null) {
+        io.stderr("intentset mcp: refused: the publisher refused the request, so there is nothing to serve.\n");
+        return 1;
+    }
+    try {
+        const documents = published.documents;
+        const server = createIntentsetServer({
+            mode: "customer",
+            publication: { documents, index: published.index },
+            chunks: toChunks(documents),
+        });
+        const r = published.index.request;
+        io.stderr(`intentset mcp: customer knowledge over stdio: ${count(documents.length, "published document")} for a ${r.visibility} projection, audience ${r.audience}, ${r.product} ${r.release}. ${snapshotLine(snapshot)}\n`);
+        return server;
+    }
+    catch (error) {
+        io.stderr(`intentset mcp: ${error.message}\n`);
+        return 2;
+    }
+}
+export async function mcpCommand(options, sessionOptions, io) {
+    const server = buildMcpServer(options, sessionOptions, io);
+    if (typeof server === "number")
+        return server;
+    io.signal?.addEventListener("abort", () => void server.close(), { once: true });
+    await runStdio(server);
+    return 0;
+}
+//# sourceMappingURL=mcp.js.map

package/dist/commands/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAmB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAA2B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAW,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAuB,MAAM,eAAe,CAAC;AAmBjE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,UAAU,CAAU,CAAC;AAE9D,MAAM,UAAU,eAAe,CAAC,OAAmB;IACjD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,OAAO,UAAU,OAAO,CAAC,IAAI,IAAI,WAAW,kEAAkE,CAAC;IACjH,CAAC;IACD,MAAM,OAAO,GAAG;QACd,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,OAAO;KAChB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,iBAAiB;YAAE,OAAO,oDAAoD,CAAC;QAC3F,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YAC7G,OAAO,gBAAgB,OAAO,CAAC,UAAU,6DAA6D,CAAC;QACzG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,cAAc,CAAC,OAAmB,EAAE,cAA8B,EAAE,EAAM;IACxF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IAElK,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,EAAE,CAAC,MAAM,CAAC,iCAAiC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAAC;gBACnC,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;gBACpE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;aAC7C,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CACP,0CAA0C,IAAI,CAAC,MAAM,CAAC,UAAU,gBAAgB,OAAO,GACrF,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,+BAChE,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CACjC,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,EAAE,CAAC,MAAM,CAAC,kBAAmB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW;YAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,EAAE,CAAC,MAAM,CAAC,0CAA0C,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAClH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,OAAO,CAAC,UAAwB;QAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KAC7B,CAAC;IACxB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE;QAChE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;QACpE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7D,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC;QAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACrC,EAAE,CAAC,MAAM,CAAC,4FAA4F,CAAC,CAAC;QACxG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE;YAClD,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAClC,EAAE,CAAC,MAAM,CACP,iDAAiD,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC,UAAU,yBAAyB,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,QAAQ,CAAC,IAAI,CAClN,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,kBAAmB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,cAA8B,EAAE,EAAM;IAC1F,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/publish.d.ts

@@ -0,0 +1,19 @@
+import { type Io } from "../output.ts";
+import type { Session } from "../session.ts";
+export interface PublishCliOptions {
+    visibility?: string;
+    audience?: string;
+    product?: string;
+    release?: string;
+    role?: string;
+    edition?: string;
+    flags: string[];
+    authorizedInternal: boolean;
+    authorizedRestricted: boolean;
+    out?: string;
+    html: boolean;
+    publishedAt?: string;
+}
+export declare function publishUsageProblem(options: PublishCliOptions): string | null;
+export declare function publishCommand(session: Session, options: PublishCliOptions, io: Io): number;
+//# sourceMappingURL=publish.d.ts.map

package/dist/commands/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAcA,OAAO,EAA2B,KAAK,EAAE,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAM7E;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,CA2E3F"}

package/dist/commands/publish.js

@@ -0,0 +1,98 @@
+/**
+ * `intentset publish` (Core §9): the deny-by-default projection of reviewed
+ * knowledge for one audience, release and entitlement, as generated Markset
+ * with provenance, optional HTML, the index a customer tool may read, and
+ * retrieval chunks that carry the same filters. Refuses outright when the
+ * graph does not validate. Review pins are read as written: a real pin is a
+ * literal hash, and the fixtures' `@current` is never bound here, so an
+ * unbound one reads as changed. Writes only into the --out directory, which
+ * must be new or empty and outside the documents' scope.
+ */
+import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { sortDiagnostics } from "@intentset/core";
+import { publish, toChunks } from "@intentset/publisher";
+import { count, formatDiagnostic } from "../output.js";
+import { outputDirProblem, outputProblem } from "../outputs.js";
+const ISO_8601 = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]+)?(?:Z|[+-][0-9]{2}:[0-9]{2})$/;
+export function publishUsageProblem(options) {
+    if (options.out === undefined || options.out === "")
+        return "--out <dir> is required";
+    if (options.publishedAt !== undefined && !ISO_8601.test(options.publishedAt)) {
+        return `--published-at ${options.publishedAt}: give an ISO 8601 time such as 2026-10-02T12:00:00Z`;
+    }
+    return null;
+}
+export function publishCommand(session, options, io) {
+    const fail = (message) => {
+        io.stderr(`intentset publish: ${message}\n`);
+        return 2;
+    };
+    const { repo, result, snapshot } = session;
+    if (!result.ok) {
+        for (const d of session.diagnostics)
+            io.stdout(formatDiagnostic(d));
+        io.stderr(`intentset publish: refused: validation at ${session.level} has ${count(session.errors, "error")}, and nothing is published from a graph that does not validate.\n`);
+        return 1;
+    }
+    const dir = resolve(io.cwd, options.out);
+    if (existsSync(dir) && readdirSync(dir).length > 0) {
+        return fail(`--out ${options.out} is not empty; publish into a new or empty directory so nothing stale survives.`);
+    }
+    const where = outputDirProblem(repo, dir);
+    if (where !== null)
+        return fail(`--out ${options.out} ${where}.`);
+    // The request exactly as given: a dimension left out stays out, and the publisher refuses it (no implicit wildcard).
+    const request = {
+        visibility: options.visibility,
+        audience: options.audience,
+        product: options.product,
+        release: options.release,
+        role: options.role,
+        edition: options.edition,
+        flags: options.flags,
+        authorizedInternal: options.authorizedInternal,
+        authorizedRestricted: options.authorizedRestricted,
+    };
+    const published = publish(result.graph, repo.registries, request, {
+        snapshot: { commit: snapshot.commit, graphHash: snapshot.graphHash },
+        publishedAt: options.publishedAt ?? new Date().toISOString(),
+        renderHtml: options.html,
+    });
+    const outputs = new Map();
+    if (published.index.request !== null) {
+        for (const document of published.documents) {
+            outputs.set(`${document.id}.md`, document.markset);
+            if (document.html !== undefined)
+                outputs.set(`${document.id}.html`, document.html);
+        }
+        outputs.set("index.json", `${JSON.stringify(published.index, null, 2)}\n`);
+        const chunks = toChunks(published.documents);
+        outputs.set("chunks.jsonl", chunks.map((chunk) => `${JSON.stringify(chunk)}\n`).join(""));
+    }
+    for (const name of outputs.keys()) {
+        const problem = outputProblem(repo, join(dir, name));
+        if (problem !== null)
+            return fail(`--out ${options.out}: ${name} ${problem}; nothing was written.`);
+    }
+    if (outputs.size > 0)
+        mkdirSync(dir, { recursive: true });
+    for (const [name, text] of outputs)
+        writeFileSync(join(dir, name), text, { flag: "wx" });
+    for (const d of sortDiagnostics(published.diagnostics))
+        io.stdout(formatDiagnostic(d));
+    const index = published.index;
+    const lines = [];
+    if (index.request === null) {
+        lines.push("The request was refused, so nothing was projected and nothing was written.");
+    }
+    else {
+        const r = index.request;
+        lines.push(`Published ${count(index.published.length, "document")} for a ${r.visibility} projection: audience ${r.audience}, ${r.product} ${r.release}, role ${r.role}, edition ${r.edition}, flags ${r.flags.length === 0 ? "none" : r.flags.join(", ")}`, ...index.published.map((id) => `  ${id}`));
+        const reasons = Object.keys(index.excludedCounts);
+        lines.push(`Excluded, among what this projection may see (${reasons.length === 0 ? "none" : reasons.map((reason) => `${reason} ${index.excludedCounts[reason]}`).join(", ")})`, `Snapshot: ${snapshot.commit === null ? `no commit (${snapshot.commitUnavailable})` : `commit ${snapshot.commit}`}, graph ${snapshot.graphHash}`, `Wrote ${[...outputs.keys()].map((name) => join(options.out, name)).join(", ")}`);
+    }
+    io.stdout(`${lines.join("\n")}\n`);
+    return published.ok ? 0 : 1;
+}
+//# sourceMappingURL=publish.js.map

package/dist/commands/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAmB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAA2B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAW,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAkBhE,MAAM,QAAQ,GAAG,iGAAiG,CAAC;AAEnH,MAAM,UAAU,mBAAmB,CAAC,OAA0B;IAC5D,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,EAAE;QAAE,OAAO,yBAAyB,CAAC;IACtF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7E,OAAO,kBAAkB,OAAO,CAAC,WAAW,sDAAsD,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,OAA0B,EAAE,EAAM;IACjF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,EAAE,CAAC,MAAM,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW;YAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,EAAE,CAAC,MAAM,CACP,6CAA6C,OAAO,CAAC,KAAK,QAAQ,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,mEAAmE,CACpK,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,GAAa,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC,SAAS,OAAO,CAAC,GAAG,iFAAiF,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,OAAO,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC;IAElE,qHAAqH;IACrH,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,OAAO,CAAC,UAAwB;QAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KAC7B,CAAC;IACxB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE;QAChE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;QACpE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5D,UAAU,EAAE,OAAO,CAAC,IAAI;KACzB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,SAAS,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,wBAAwB,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzF,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC;QAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,aAAa,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,UAAU,yBAAyB,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/O,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CACR,iDAAiD,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACnK,aAAa,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE,WAAW,QAAQ,CAAC,SAAS,EAAE,EAChJ,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAa,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/review.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `intentset review` (Core §10): the local review report. Validation at the
+ * highest level the inputs allow (L2 always; L4 when run records are given
+ * or found, since L3's evidence is the only input L4 needs beyond it), the
+ * architecture summary, coverage, and the impact of the change: every file
+ * changed since the base, committed or not, mapped to the artifacts it
+ * touches, a changed record to its own artifact and a changed source file
+ * through the claiming slice to that slice's behaviors, each start's direct
+ * dependents shown apart from its candidates. Markdown by default. Read-only.
+ */
+import { type Graph } from "@intentset/core";
+import { type Io } from "../output.ts";
+import type { Session } from "../session.ts";
+export interface Attribution {
+    /** The artifact impact starts from. */
+    start: string;
+    /** The changed files that led to it, and how. */
+    because: string[];
+}
+/** Map changed files to impact starts. A path that is a record names its artifact; a claimed source file names the claiming slices' behaviors. */
+export declare function attribute(graph: Graph, changed: readonly string[]): {
+    starts: Attribution[];
+    unattributed: string[];
+};
+export declare function reviewCommand(session: Session, options: {
+    base?: string;
+    levelReason: string;
+}, asJson: boolean, io: Io): number;
+//# sourceMappingURL=review.d.ts.map

package/dist/commands/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,KAAK,KAAK,EAA0B,MAAM,iBAAiB,CAAC;AAGrE,OAAO,EAA2B,KAAK,EAAE,EAA4B,MAAM,cAAc,CAAC;AAE1F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,kJAAkJ;AAClJ,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAoCrH;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAC/C,MAAM,EAAE,OAAO,EACf,EAAE,EAAE,EAAE,GACL,MAAM,CAqFR"}