@iowarp/clio-coder 0.3.4 → 0.3.7

package/dist/{verifiers-4UUM6TEE.js → chunk-YTYFXUI3.js}

@@ -1,51 +1,37 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
-  discoverDeclaredChecksAtRoot,
+  parseTomlDocument,
+  tomlTableAt
+} from "./chunk-LCGCVYZ4.js";
+import {
   verifyTool
-} from "./chunk-PCZJO5TI.js";
-import "./chunk-NILBFAPG.js";
+} from "./chunk-UFQ3F4FW.js";
+import {
+  discoverDeclaredChecksAtRoot,
+  discoverDeclaredProjectEntriesAtRoot
+} from "./chunk-PD3MESLB.js";
 import {
   PROJECT_VERIFIER_CATALOG_CAPS,
   PROJECT_VERIFIER_CATALOG_RELATIVE_PATH,
   PROJECT_VERIFIER_CATALOG_VERSION,
   compareCodepoints,
-  loadProjectVerifierCatalog,
   parseProjectVerifierCatalogText
-} from "./chunk-FYYLNIL5.js";
+} from "./chunk-GH5622CP.js";
 import {
   isVerificationScriptName
 } from "./chunk-UL3WSD3F.js";
-import "./chunk-VG7TBQIY.js";
-import "./chunk-OQE5J4C6.js";
-import "./chunk-ECH6PKUQ.js";
-import "./chunk-6XLNIQDB.js";
-import "./chunk-5B2AEOW5.js";
-import "./chunk-CGKSTWHD.js";
-import {
-  printError,
-  printOk
-} from "./chunk-ED4KHGC3.js";
-import "./chunk-5TSRNF4G.js";
 import {
   SAFE_EXEC_DEFAULT_TIMEOUT_MS,
   resolveSafeCwd
-} from "./chunk-VEZEGCGW.js";
-import "./chunk-FQ4SKYE4.js";
-import "./chunk-FCSXB6T2.js";
+} from "./chunk-D4MDIG46.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
-import "./chunk-YXLYO42X.js";
-import "./chunk-BNAZZHFG.js";
-import "./chunk-6EJMN2Y3.js";
 import {
   __toESM,
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
 
-// src/cli/verifiers.ts
-init_esm_shims();
-
 // src/tools/verify/authoring.ts
 init_esm_shims();
 var import_yaml = __toESM(require_dist(), 1);
@@ -166,8 +152,13 @@ function cargoProposals(workspaceRoot, diagnostics) {
     diagnostics.push(`${relative}: ${text.message}; Cargo discovery skipped.`);
     return [];
   }
-  const workspace = /^\s*\[workspace(?:\]|\.)/mu.test(text);
-  const packageManifest = /^\s*\[package\]/mu.test(text);
+  const document = parseTomlDocument(text);
+  if (document === null) {
+    diagnostics.push(`${relative}: invalid TOML; Cargo discovery skipped.`);
+    return [];
+  }
+  const workspace = tomlTableAt(document, ["workspace"]) !== null;
+  const packageManifest = tomlTableAt(document, ["package"]) !== null;
   if (!workspace && !packageManifest) {
     diagnostics.push(`${relative}: no [package] or [workspace] declaration was found; Cargo discovery skipped.`);
     return [];
@@ -240,71 +231,68 @@ function cmakeProposals(workspaceRoot, diagnostics) {
   if (proposals.length === 0) diagnostics.push(`${relative}: no visible buildPresets or testPresets were declared.`);
   return proposals;
 }
-function tomlSections(text) {
-  const sections = /* @__PURE__ */ new Map();
-  let active = "";
-  for (const line of text.split(/\r?\n/u)) {
-    const header = /^\s*\[([^\]]+)\]\s*(?:#.*)?$/u.exec(line);
-    if (header?.[1] !== void 0) {
-      active = header[1].trim();
-      if (!sections.has(active)) sections.set(active, []);
-      continue;
-    }
-    if (active.length > 0) sections.get(active)?.push(line);
-  }
-  return sections;
-}
-function declaredScriptName(line) {
-  const match = /^\s*(?:"([^"]+)"|'([^']+)'|([A-Za-z0-9_.:-]+))\s*=\s*(?:"[^"]+"|'[^']+')\s*(?:#.*)?$/u.exec(line);
-  return match?.[1] ?? match?.[2] ?? match?.[3] ?? null;
-}
 function pythonProposals(workspaceRoot, diagnostics) {
   const proposals = [];
   const pyprojectPath = "pyproject.toml";
   const pyproject = regularFileText(path.join(workspaceRoot, pyprojectPath), workspaceRoot);
   if (pyproject instanceof Error) diagnostics.push(`${pyprojectPath}: ${pyproject.message}; Python discovery skipped.`);
   if (typeof pyproject === "string") {
-    const sections = tomlSections(pyproject);
-    for (const [section, module, id, description, tags2] of [
-      ["tool.pytest.ini_options", "pytest", "python-pytest", "Run the declared pytest suite", ["python", "test"]],
-      ["tool.tox", "tox", "python-tox", "Run the declared tox environments", ["python", "test"]],
-      ["tool.nox", "nox", "python-nox", "Run the declared nox sessions", ["python", "test"]]
-    ]) {
-      if (!sections.has(section)) continue;
-      proposals.push({
-        preferredId: id,
-        description,
-        command: ["python", "-m", module],
-        cwd: ".",
-        timeoutMs: SAFE_EXEC_DEFAULT_TIMEOUT_MS,
-        tags: [...tags2],
-        provenance: {
-          kind: "python-runner",
-          path: pyprojectPath,
-          detail: `[${section}]`,
-          authority: "toolchain-defined"
-        }
-      });
-    }
-    for (const section of ["project.scripts", "tool.poetry.scripts"]) {
-      for (const line of sections.get(section) ?? []) {
-        const name = declaredScriptName(line);
-        if (name === null || !isVerificationScriptName(name)) continue;
+    const document = parseTomlDocument(pyproject);
+    if (document === null) {
+      diagnostics.push(`${pyprojectPath}: invalid TOML; Python discovery skipped.`);
+    } else {
+      for (const [path2, section, module, id, description, tags] of [
+        [
+          ["tool", "pytest", "ini_options"],
+          "tool.pytest.ini_options",
+          "pytest",
+          "python-pytest",
+          "Run the declared pytest suite",
+          ["python", "test"]
+        ],
+        [["tool", "tox"], "tool.tox", "tox", "python-tox", "Run the declared tox environments", ["python", "test"]],
+        [["tool", "nox"], "tool.nox", "nox", "python-nox", "Run the declared nox sessions", ["python", "test"]]
+      ]) {
+        if (tomlTableAt(document, path2) === null) continue;
         proposals.push({
-          preferredId: `python-${slug(name, "check")}`,
-          description: `Run declared Python entry point '${name}'`,
-          command: [name],
+          preferredId: id,
+          description,
+          command: ["python", "-m", module],
           cwd: ".",
           timeoutMs: SAFE_EXEC_DEFAULT_TIMEOUT_MS,
-          tags: [slug(name.split(/[:.-]/u)[0] ?? "python", "python"), "python"],
+          tags: [...tags],
           provenance: {
             kind: "python-runner",
             path: pyprojectPath,
-            detail: `[${section}] entry '${name}'`,
-            authority: "project-declared"
+            detail: `[${section}]`,
+            authority: "toolchain-defined"
           }
         });
       }
+      for (const [path2, section] of [
+        [["project", "scripts"], "project.scripts"],
+        [["tool", "poetry", "scripts"], "tool.poetry.scripts"]
+      ]) {
+        const scripts = tomlTableAt(document, path2);
+        if (scripts === null) continue;
+        for (const [name, target] of Object.entries(scripts)) {
+          if (typeof target !== "string" || !isVerificationScriptName(name)) continue;
+          proposals.push({
+            preferredId: `python-${slug(name, "check")}`,
+            description: `Run declared Python entry point '${name}'`,
+            command: [name],
+            cwd: ".",
+            timeoutMs: SAFE_EXEC_DEFAULT_TIMEOUT_MS,
+            tags: [slug(name.split(/[:.-]/u)[0] ?? "python", "python"), "python"],
+            provenance: {
+              kind: "python-runner",
+              path: pyprojectPath,
+              detail: `[${section}] entry '${name}'`,
+              authority: "project-declared"
+            }
+          });
+        }
+      }
     }
   }
   for (const [relative, marker, module, id, description] of [
@@ -337,6 +325,52 @@ function pythonProposals(workspaceRoot, diagnostics) {
   }
   return proposals;
 }
+function discoverDeclaredProjectCommands(workspaceRoot = process.cwd()) {
+  const commands = [];
+  const add = (id, command, pathValue, detail, kind) => {
+    commands.push({
+      id,
+      command,
+      provenance: { kind, path: pathValue, detail, authority: "project-declared" }
+    });
+  };
+  for (const entry of discoverDeclaredProjectEntriesAtRoot(workspaceRoot)) {
+    add(entry.id, entry.command, entry.path, entry.detail, entry.kind);
+  }
+  const pyprojectText = regularFileText(path.join(workspaceRoot, "pyproject.toml"), workspaceRoot);
+  if (typeof pyprojectText === "string") {
+    const document = parseTomlDocument(pyprojectText);
+    if (document !== null) {
+      for (const [tablePath, label] of [
+        [["project", "scripts"], "project.scripts"],
+        [["tool", "poetry", "scripts"], "tool.poetry.scripts"]
+      ]) {
+        const scripts = tomlTableAt(document, tablePath);
+        if (scripts === null) continue;
+        for (const [name, target] of Object.entries(scripts).sort(([left], [right]) => compareCodepoints(left, right))) {
+          if (typeof target === "string") add(name, [name], "pyproject.toml", `[${label}] entry '${name}'`, "python-runner");
+        }
+      }
+      for (const [tablePath, module, id, label] of [
+        [["tool", "pytest", "ini_options"], "pytest", "pytest", "tool.pytest.ini_options"],
+        [["tool", "tox"], "tox", "tox", "tool.tox"],
+        [["tool", "nox"], "nox", "nox", "tool.nox"]
+      ]) {
+        if (tomlTableAt(document, tablePath) !== null)
+          add(id, ["python", "-m", module], "pyproject.toml", `[${label}]`, "python-runner");
+      }
+    }
+  }
+  const seen = /* @__PURE__ */ new Set();
+  return commands.filter((entry) => {
+    let id = slug(entry.id, "command");
+    let suffix = 2;
+    while (seen.has(id)) id = `${slug(entry.id, "command")}-${suffix++}`;
+    seen.add(id);
+    entry.id = id;
+    return true;
+  });
+}
 function goProposals(workspaceRoot, diagnostics) {
   const relative = "go.mod";
   const text = regularFileText(path.join(workspaceRoot, relative), workspaceRoot);
@@ -500,14 +534,14 @@ function validationContractProposals(workspaceRoot, diagnostics) {
       const description = typeof record?.description === "string" ? record.description : `Run validation contract command ${JSON.stringify(argv)}`;
       const cwd = typeof record?.cwd === "string" ? record.cwd : ".";
       const timeoutMs = typeof record?.timeoutMs === "number" ? record.timeoutMs : SAFE_EXEC_DEFAULT_TIMEOUT_MS;
-      const tags2 = Array.isArray(record?.tags) ? record.tags.filter((tag) => typeof tag === "string") : [];
+      const tags = Array.isArray(record?.tags) ? record.tags.filter((tag) => typeof tag === "string") : [];
       proposals.push({
         preferredId: declaredId,
         description,
         command: argv,
         cwd,
         timeoutMs,
-        tags: tags2.length > 0 ? tags2 : ["scientific", "validation"],
+        tags: tags.length > 0 ? tags : ["scientific", "validation"],
         provenance: {
           kind: "validation-contract",
           path: relative,
@@ -634,8 +668,8 @@ function createVerifierDraft(discovery, options = {}) {
     ...discovery.catalogText === void 0 ? {} : { catalogText: discovery.catalogText }
   };
 }
-function catalogEntry({ id, description, command, cwd, timeoutMs, tags: tags2 }) {
-  return { id, description, command: [...command], cwd, timeoutMs, tags: [...tags2] };
+function catalogEntry({ id, description, command, cwd, timeoutMs, tags }) {
+  return { id, description, command: [...command], cwd, timeoutMs, tags: [...tags] };
 }
 function serializeVerifierDraft(draft) {
   const checks = [...draft.checks].sort((left, right) => compareCodepoints(left.id, right.id));
@@ -919,296 +953,11 @@ async function runVerifierAuthoringWorkflow(options) {
   };
 }
 
-// src/cli/verifiers.ts
-var HELP = `Project verifier authoring
-
-Usage:
-  clio-coder verifiers discover
-  clio-coder verifiers author [--exclude <id>] [--rename <old>=<new>] [--dry-run <id>] [--yes]
-  clio-coder verifiers validate
-  clio-coder verifiers dry-run <id>
-  clio-coder verifiers add --id <id> --description <text> --command <json-argv> [fields] [--yes]
-  clio-coder verifiers edit <id> [--description <text>] [--command <json-argv>] [fields] [--yes]
-  clio-coder verifiers rename <old> <new> [--yes]
-  clio-coder verifiers remove <id> [--yes]
-
-Fields:
-  --cwd <path>            repository-relative working directory (default .)
-  --timeout-ms <number>   bounded timeout in milliseconds (default 120000)
-  --tags <a,b>            comma-separated catalog tags
-
-Discovery and every preview are read-only. Mutating commands write only with
---yes after printing the exact argv, cwd, timeout, tags, source provenance, and
-effective execution authority. dry-run invokes the production verify path.
-`;
-var VALUE_OPTIONS = /* @__PURE__ */ new Set([
-  "--id",
-  "--description",
-  "--command",
-  "--cwd",
-  "--timeout-ms",
-  "--tags",
-  "--exclude",
-  "--rename",
-  "--dry-run"
-]);
-function parseAuthoringArgs(argv) {
-  const positional = [];
-  const values = /* @__PURE__ */ new Map();
-  let yes = false;
-  let help = false;
-  for (let index = 0; index < argv.length; index += 1) {
-    const arg = argv[index];
-    if (arg === "--yes") {
-      yes = true;
-      continue;
-    }
-    if (arg === "--help" || arg === "-h") {
-      help = true;
-      continue;
-    }
-    if (arg?.startsWith("--") === true) {
-      if (!VALUE_OPTIONS.has(arg)) return { yes, help, positional, values, error: `unknown option: ${arg}` };
-      const value = argv[index + 1];
-      if (value === void 0 || value.startsWith("--")) {
-        return { yes, help, positional, values, error: `${arg} requires a value` };
-      }
-      const prior = values.get(arg) ?? [];
-      prior.push(value);
-      values.set(arg, prior);
-      index += 1;
-      continue;
-    }
-    if (arg !== void 0) positional.push(arg);
-  }
-  return { yes, help, positional, values };
-}
-function oneValue(parsed, option) {
-  return parsed.values.get(option)?.at(-1);
-}
-function parseCommand(value) {
-  if (value === void 0) return new Error("--command is required and must be a JSON argv array");
-  let parsed;
-  try {
-    parsed = JSON.parse(value);
-  } catch (error) {
-    return new Error(`--command must be valid JSON: ${error instanceof Error ? error.message : String(error)}`);
-  }
-  if (!Array.isArray(parsed) || parsed.length === 0 || parsed.some((entry) => typeof entry !== "string")) {
-    return new Error("--command must be a non-empty JSON string array");
-  }
-  return parsed;
-}
-function parseTimeout(value) {
-  if (value === void 0) return SAFE_EXEC_DEFAULT_TIMEOUT_MS;
-  const parsed = Number(value);
-  if (!Number.isInteger(parsed) || parsed <= 0) return new Error("--timeout-ms must be a positive integer");
-  return parsed;
-}
-function tags(value) {
-  return value === void 0 ? [] : value.split(",").map((tag) => tag.trim()).filter((tag) => tag.length > 0);
-}
-function requiredValue(parsed, option) {
-  const value = oneValue(parsed, option);
-  return value === void 0 || value.length === 0 ? new Error(`${option} is required`) : value;
-}
-function authorRevisions(parsed) {
-  const revisions = [];
-  for (const id of parsed.values.get("--exclude") ?? []) revisions.push({ kind: "remove", id });
-  for (const rename of parsed.values.get("--rename") ?? []) {
-    const separator = rename.indexOf("=");
-    if (separator <= 0 || separator === rename.length - 1) {
-      return new Error("--rename must use <old>=<new>");
-    }
-    revisions.push({ kind: "rename", id: rename.slice(0, separator), newId: rename.slice(separator + 1) });
-  }
-  return revisions;
-}
-function addRevision(parsed) {
-  const id = requiredValue(parsed, "--id");
-  if (id instanceof Error) return id;
-  const description = requiredValue(parsed, "--description");
-  if (description instanceof Error) return description;
-  const command = parseCommand(oneValue(parsed, "--command"));
-  if (command instanceof Error) return command;
-  const timeoutMs = parseTimeout(oneValue(parsed, "--timeout-ms"));
-  if (timeoutMs instanceof Error) return timeoutMs;
-  return {
-    kind: "add",
-    check: {
-      id,
-      description,
-      command,
-      cwd: oneValue(parsed, "--cwd") ?? ".",
-      timeoutMs,
-      tags: tags(oneValue(parsed, "--tags"))
-    }
-  };
-}
-function editRevision(parsed) {
-  const id = parsed.positional[1];
-  if (id === void 0) return new Error("edit requires a check ID");
-  const changes = {};
-  const description = oneValue(parsed, "--description");
-  if (description !== void 0) changes.description = description;
-  const commandValue = oneValue(parsed, "--command");
-  if (commandValue !== void 0) {
-    const command = parseCommand(commandValue);
-    if (command instanceof Error) return command;
-    changes.command = command;
-  }
-  const cwd = oneValue(parsed, "--cwd");
-  if (cwd !== void 0) changes.cwd = cwd;
-  const timeoutValue = oneValue(parsed, "--timeout-ms");
-  if (timeoutValue !== void 0) {
-    const timeoutMs = parseTimeout(timeoutValue);
-    if (timeoutMs instanceof Error) return timeoutMs;
-    changes.timeoutMs = timeoutMs;
-  }
-  const tagValue = oneValue(parsed, "--tags");
-  if (tagValue !== void 0) changes.tags = tags(tagValue);
-  if (Object.keys(changes).length === 0) return new Error("edit requires at least one changed field");
-  return { kind: "edit", id, changes };
-}
-function mutationRevision(parsed) {
-  const command = parsed.positional[0];
-  if (command === "add") return addRevision(parsed);
-  if (command === "edit") return editRevision(parsed);
-  if (command === "rename") {
-    const id = parsed.positional[1];
-    const newId = parsed.positional[2];
-    if (id === void 0 || newId === void 0) return new Error("rename requires <old> and <new> IDs");
-    return { kind: "rename", id, newId };
-  }
-  if (command === "remove") {
-    const id = parsed.positional[1];
-    if (id === void 0) return new Error("remove requires a check ID");
-    return { kind: "remove", id };
-  }
-  return new Error(`unknown verifiers command: ${command ?? "(none)"}`);
-}
-function printDryRun(id, result) {
-  if (result.kind === "error") {
-    printError(`dry-run '${id}' failed: ${result.message}`);
-    return 1;
-  }
-  process.stdout.write(`Dry run '${id}':
-${result.output}${result.output.endsWith("\n") ? "" : "\n"}`);
-  return 0;
-}
-async function executeWorkflow(parsed, options) {
-  let printedPreview = false;
-  const dryRunCheckIds = parsed.values.get("--dry-run") ?? [];
-  const result = await runVerifierAuthoringWorkflow({
-    includeProposals: options.includeProposals,
-    initialRevisions: options.revisions,
-    confirmed: parsed.yes,
-    decide(context) {
-      process.stdout.write(`${context.preview}
-`);
-      printedPreview = true;
-      if (!parsed.yes || context.draft.checks.length === 0 && options.revisions.length === 0) {
-        return { kind: "reject" };
-      }
-      return { kind: "confirm", dryRunCheckIds };
-    }
-  });
-  if (result.status === "invalid") {
-    if (!printedPreview && result.preview !== void 0) process.stdout.write(`${result.preview}
-`);
-    printError(result.reason);
-    if (result.wrote && result.path !== void 0) {
-      process.stderr.write(`  ${result.path} was written; repair or remove it before running a check.
-`);
-    }
-    return 1;
-  }
-  if (result.status === "rejected") {
-    if (!parsed.yes) {
-      process.stdout.write("Review complete. Nothing changed; rerun the same command with --yes to write this preview.\n");
-    } else {
-      process.stdout.write(
-        "Nothing changed because the preview contains no catalog checks. Package checks remain active; unsupported commands can be added with `clio-coder verifiers add`.\n"
-      );
-    }
-    return 0;
-  }
-  printOk(`wrote ${result.path}; production parser accepted the catalog`);
-  let code = 0;
-  for (const dryRun of result.dryRuns) code = Math.max(code, printDryRun(dryRun.id, dryRun.result));
-  return code;
-}
-async function discoverCommand() {
-  const discovery = discoverVerifierAuthoring();
-  if (!discovery.ok) {
-    printError(discovery.reason);
-    process.stderr.write(`${discovery.manualEntry}
-`);
-    return 1;
-  }
-  process.stdout.write(`${previewVerifierDraft(createVerifierDraft(discovery))}
-`);
-  return 0;
-}
-function validateCommand() {
-  const loaded = loadProjectVerifierCatalog(process.cwd());
-  if (!loaded.ok) {
-    printError(`production catalog parser rejected ${loaded.reason}`);
-    return 1;
-  }
-  if (loaded.source === null) {
-    process.stdout.write(`No ${PROJECT_VERIFIER_CATALOG_RELATIVE_PATH} exists. Run \`clio-coder verifiers author\`.
-`);
-    return 0;
-  }
-  printOk(
-    `production catalog parser accepted ${PROJECT_VERIFIER_CATALOG_RELATIVE_PATH} (${loaded.source.checks.length} check${loaded.source.checks.length === 1 ? "" : "s"})`
-  );
-  return 0;
-}
-async function runVerifiersCommand(argv) {
-  const parsed = parseAuthoringArgs(argv);
-  if (parsed.error !== void 0) {
-    printError(parsed.error);
-    process.stderr.write(HELP);
-    return 2;
-  }
-  if (parsed.help || parsed.positional.length === 0) {
-    process.stdout.write(HELP);
-    return 0;
-  }
-  const command = parsed.positional[0];
-  if (command === "discover") return discoverCommand();
-  if (command === "validate") return validateCommand();
-  if (command === "dry-run") {
-    const id = parsed.positional[1];
-    if (id === void 0) {
-      printError("dry-run requires a check ID");
-      return 2;
-    }
-    return printDryRun(id, await verifyTool.run({ check: id }));
-  }
-  if (command === "author") {
-    const revisions = authorRevisions(parsed);
-    if (revisions instanceof Error) {
-      printError(revisions.message);
-      return 2;
-    }
-    return executeWorkflow(parsed, { includeProposals: true, revisions });
-  }
-  if (["add", "edit", "rename", "remove"].includes(command ?? "")) {
-    const revision = mutationRevision(parsed);
-    if (revision instanceof Error) {
-      printError(revision.message);
-      return 2;
-    }
-    return executeWorkflow(parsed, { includeProposals: false, revisions: [revision] });
-  }
-  printError(`unknown verifiers command: ${command}`);
-  process.stderr.write(HELP);
-  return 2;
-}
 export {
-  runVerifiersCommand
+  discoverDeclaredProjectCommands,
+  discoverVerifierAuthoring,
+  createVerifierDraft,
+  previewVerifierDraft,
+  runVerifierAuthoringWorkflow
 };
-//# sourceMappingURL=verifiers-4UUM6TEE.js.map
+//# sourceMappingURL=chunk-YTYFXUI3.js.map

package/dist/{chunk-3JLKSKD7.js → chunk-ZGH7FGS5.js}

@@ -1,10 +1,12 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   ROUTE_POLICY_VERSION,
-  isExecutionRole,
   isRouteDecisionAgentSelection,
   isRoutingIntent
-} from "./chunk-22NAGB7X.js";
+} from "./chunk-5C77SEEY.js";
+import {
+  isExecutionRole
+} from "./chunk-UND3GU2L.js";
 import {
   assertSafeId
 } from "./chunk-R346GLFC.js";
@@ -26,7 +28,7 @@ import {
 // src/domains/dispatch/receipt-integrity.ts
 init_esm_shims();
 import { createHash } from "node:crypto";
-var RUN_RECEIPT_INTEGRITY_VERSION = 15;
+var RUN_RECEIPT_INTEGRITY_VERSION = 19;
 var RUN_RECEIPT_INTEGRITY_ALGORITHM = "sha256";
 function sha256(input) {
   return createHash("sha256").update(input, "utf8").digest("hex");
@@ -79,6 +81,9 @@ var RECEIPT_INTEGRITY_FIELD_COVERAGE = {
   agentAudience: true,
   requestOrigin: true,
   task: true,
+  intent: true,
+  // Historical receipts omit this field, so their receipt and ledger payloads remain unchanged.
+  budget: true,
   targetId: true,
   wireModelId: true,
   runtimeId: true,
@@ -94,12 +99,13 @@ var RECEIPT_INTEGRITY_FIELD_COVERAGE = {
   reroutes: true,
   pipeline: true,
   gate: true,
+  council: true,
   plan: true,
+  fleetGate: true,
   personaOverride: true,
   projectContext: true,
   // Always set on receipts written after #104 landed; absent only on older
-  // receipts, which digest exactly as they did before these fields existed,
-  // so the integrity version stays where it is.
+  // receipts, which omit these fields from canonical serialization.
   rulesApplied: true,
   operatorProfileApplied: true,
   exitCode: true,
@@ -129,6 +135,8 @@ var RECEIPT_INTEGRITY_FIELD_COVERAGE = {
   toolStats: true,
   toolActivity: true,
   verification: true,
+  hostVerification: true,
+  worktree: true,
   routingIntent: true,
   quality: true,
   skillActivations: true,
@@ -144,7 +152,7 @@ var RECEIPT_INTEGRITY_FIELD_COVERAGE = {
   validationGrounding: true,
   capabilityMismatch: true,
   // Same reasoning: absent unless the run had an agent ledger, so a receipt
-  // without one digests byte-identically to one produced before it existed.
+  // without one omits the field from canonical serialization.
   ledgerContribution: true,
   sessionId: true,
   briefing: true,
@@ -175,6 +183,7 @@ function ledgerDigestFields(envelope) {
     agentId: envelope.agentId,
     executionRole: envelope.executionRole,
     task: envelope.task,
+    ...envelope.budget !== void 0 ? { budget: envelope.budget } : {},
     targetId: envelope.targetId,
     wireModelId: envelope.wireModelId,
     runtimeId: envelope.runtimeId,
@@ -303,6 +312,7 @@ function firstLedgerMismatch(receipt, envelope) {
     if (!Object.is(receiptValue, ledgerValue)) return field;
   }
   if (canonicalJson(receipt.briefing ?? null) !== canonicalJson(envelope.briefing ?? null)) return "briefing";
+  if (canonicalJson(receipt.budget ?? null) !== canonicalJson(envelope.budget ?? null)) return "budget";
   if (canonicalJson(receipt.steering ?? null) !== canonicalJson(envelope.steering ?? null)) return "steering";
   return null;
 }
@@ -1066,4 +1076,4 @@ export {
   loadEvalTaskFile,
   EvalTaskFileError
 };
-//# sourceMappingURL=chunk-3JLKSKD7.js.map
+//# sourceMappingURL=chunk-ZGH7FGS5.js.map

package/dist/{chunk-VSNATDE6.js → chunk-ZZMN5OM4.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-W6GROXXM.js";
 import {
   ceilChars
-} from "./chunk-BPGS2WCQ.js";
+} from "./chunk-GEYXPTRF.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -119,4 +119,4 @@ export {
   recallableRefListing,
   recallErrorMessage
 };
-//# sourceMappingURL=chunk-VSNATDE6.js.map
+//# sourceMappingURL=chunk-ZZMN5OM4.js.map