@isaacriehm/cairn-core 0.1.0

package/dist/profiles/types.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Stack profile — extension surface for project-specific generators, sensors,
+ * and adoption-time defaults. Per L47 (Codex audit Q8).
+ *
+ * The cairn package code is project-agnostic. All references to specific
+ * stacks (NestJS, Drizzle, Rails, etc.) live inside profile implementations,
+ * NEVER in core code paths. The profile registry is consulted at adoption
+ * time and at runtime via id-based lookup.
+ */
+export interface ProfileSensorRef {
+    /** Stable id used in sensor results. */
+    id: string;
+    /** What the sensor checks. */
+    description: string;
+    /** Globs that trigger this sensor. */
+    watch?: string[];
+    /** Severity if this sensor fails. */
+    severity?: "hard" | "soft";
+}
+export interface ProfileExtractorContext {
+    /** The repo root the daemon is operating against (mirror path). */
+    repoRoot: string;
+}
+export interface ProfileExtractor {
+    /** Stable id used in logs + manifest entries. */
+    id: string;
+    /** Output path relative to repoRoot — usually under .cairn/ground/. */
+    outputRelPath: string;
+    /** Watch globs that trigger this extractor (relative to repoRoot). */
+    watch: string[];
+    /** Run extractor; returns content to write, or null to skip writing. */
+    run(ctx: ProfileExtractorContext): Promise<string | null>;
+}
+export interface Profile {
+    /** Stable id — typescript-next-nest, python-fastapi, rails, go, rust, unknown. */
+    id: string;
+    name: string;
+    /** Returns true if this profile applies to the given repo. */
+    detect(repoRoot: string): boolean;
+    sensors: ProfileSensorRef[];
+    extractors: ProfileExtractor[];
+    /** Suggested off-limits paths on adoption. */
+    offLimitsDefaults: string[];
+    /** Suggested high-stakes globs on adoption. */
+    highStakesDefaults: string[];
+    /** Suggested start command for the project (e.g., `pnpm dev`). */
+    startCommand?: string;
+}

package/dist/profiles/types.js

@@ -0,0 +1,11 @@
+/**
+ * Stack profile — extension surface for project-specific generators, sensors,
+ * and adoption-time defaults. Per L47 (Codex audit Q8).
+ *
+ * The cairn package code is project-agnostic. All references to specific
+ * stacks (NestJS, Drizzle, Rails, etc.) live inside profile implementations,
+ * NEVER in core code paths. The profile registry is consulted at adoption
+ * time and at runtime via id-based lookup.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/profiles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/profiles/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/profiles/unknown.d.ts

@@ -0,0 +1,9 @@
+import type { Profile } from "./types.js";
+/**
+ * Fallback profile — applies when no other profile detects.
+ *
+ * Carries no extractors and no stack-specific sensors. The cairn still
+ * runs every generic sensor (Layer A/B/C/D/E/U + decision-assertions +
+ * invariant-suite) defined in templates/.cairn/config/sensors.yaml.
+ */
+export declare const unknownProfile: Profile;

package/dist/profiles/unknown.js

@@ -0,0 +1,17 @@
+/**
+ * Fallback profile — applies when no other profile detects.
+ *
+ * Carries no extractors and no stack-specific sensors. The cairn still
+ * runs every generic sensor (Layer A/B/C/D/E/U + decision-assertions +
+ * invariant-suite) defined in templates/.cairn/config/sensors.yaml.
+ */
+export const unknownProfile = {
+    id: "unknown",
+    name: "Unknown / generic",
+    detect: () => true,
+    sensors: [],
+    extractors: [],
+    offLimitsDefaults: [".git/**", ".archive/**", "node_modules/**", ".env", ".env.local"],
+    highStakesDefaults: [],
+};
+//# sourceMappingURL=unknown.js.map

package/dist/profiles/unknown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unknown.js","sourceRoot":"","sources":["../../src/profiles/unknown.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAY;IACrC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;IAClB,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,iBAAiB,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,CAAC;IACtF,kBAAkB,EAAE,EAAE;CACvB,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Minimal Liquid-style template renderer. Supports:
+ *   {{var}}                       — substitute scalar value
+ *   {{#each LIST}}...{{/each}}    — repeat block per item; inside the block
+ *                                   {{this}} resolves to the current item;
+ *                                   for object items, {{this.field}} works.
+ *
+ * Anything not matched is left literal. No conditionals, no nested blocks
+ * beyond {{#each}}. The cairn's prompt template (`templates/.cairn/
+ * config/workflow.md`) was authored to fit this surface.
+ */
+export type TemplateContext = Record<string, string | number | boolean | string[] | Record<string, string>[] | undefined>;
+export declare function renderTemplate(template: string, ctx: TemplateContext): string;
+/**
+ * Read the workflow.md template from `<repoRoot>/.cairn/config/workflow.md`,
+ * strip the YAML frontmatter, and return only the prompt body (everything
+ * after the second `---`).
+ */
+export declare function loadWorkflowTemplate(repoRoot: string): string;

package/dist/prompt.js

@@ -0,0 +1,50 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+export function renderTemplate(template, ctx) {
+    // 1. Each blocks first — they are coarser than scalar substitutions.
+    const eachBlockRe = /\{\{#each\s+(\w+)\}\}([\s\S]*?)\{\{\/each\}\}/g;
+    let out = template.replace(eachBlockRe, (_, key, body) => {
+        const list = ctx[key];
+        if (!Array.isArray(list))
+            return "";
+        return list
+            .map((item) => {
+            if (typeof item === "string") {
+                return body.replace(/\{\{this\}\}/g, item);
+            }
+            if (typeof item === "object" && item !== null) {
+                let chunk = body.replace(/\{\{this\}\}/g, JSON.stringify(item));
+                chunk = chunk.replace(/\{\{this\.(\w+)\}\}/g, (_m, field) => {
+                    const v = item[field];
+                    return v === undefined ? "" : String(v);
+                });
+                return chunk;
+            }
+            return "";
+        })
+            .join("");
+    });
+    // 2. Scalar substitutions.
+    out = out.replace(/\{\{(\w+)\}\}/g, (_match, key) => {
+        const v = ctx[key];
+        if (v === undefined)
+            return "";
+        if (Array.isArray(v))
+            return v.join(", ");
+        return String(v);
+    });
+    return out;
+}
+/**
+ * Read the workflow.md template from `<repoRoot>/.cairn/config/workflow.md`,
+ * strip the YAML frontmatter, and return only the prompt body (everything
+ * after the second `---`).
+ */
+export function loadWorkflowTemplate(repoRoot) {
+    const path = join(repoRoot, ".cairn", "config", "workflow.md");
+    const raw = readFileSync(path, "utf8");
+    // Frontmatter ends at the second `---` line.
+    const match = raw.match(/^---\n[\s\S]*?\n---\n([\s\S]*)$/);
+    return match ? (match[1] ?? "") : raw;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmBjC,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,GAAoB;IACnE,qEAAqE;IACrE,MAAM,WAAW,GAAG,gDAAgD,CAAC;IACrE,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE;QACvE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,IAAI;aACR,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC9C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,EAAE,EAAE,KAAa,EAAE,EAAE;oBAClE,MAAM,CAAC,GAAI,IAA+B,CAAC,KAAK,CAAC,CAAC;oBAClD,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;QAC1D,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,6CAA6C;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxC,CAAC"}

package/dist/sensors/attestation.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Layer B — attestation cross-check.
+ *
+ * The agent emits a fenced YAML block at the end of its final response.
+ * This module:
+ *   1. Extracts the YAML block from the agent's final text.
+ *   2. Parses it into a structured `Attestation`.
+ *   3. Cross-checks every claim against the actual diff. Mismatch = lie.
+ *
+ * Per PRIMER §10 Layer B. Lying must be harder than telling truth.
+ */
+import type { Attestation, DiffEntry, SensorResult, StubCatalog } from "./types.js";
+/**
+ * Extract the YAML block from a final assistant message. The template
+ * instructs the agent to emit a fenced block whose first line is the literal
+ * key `attestation:`. We accept either:
+ *
+ *   ```yaml
+ *   attestation:
+ *     ...
+ *   ```
+ *
+ * or a bare top-level YAML doc starting with `attestation:`.
+ */
+export declare function extractAttestation(text: string): Attestation | undefined;
+/**
+ * Cross-check the attestation against the diff. Returns the sensor result.
+ *
+ * Hard fails:
+ *   - attestation absent or unparseable
+ *   - files_touched mismatches actual changed paths (set-equality)
+ *   - todos_introduced != count of TODO/FIXME/XXX/HACK markers added
+ *   - stubs_introduced != count of hard-severity stub-pattern hits
+ *   - any delivered item declared `behavior: full` whose path/text contains
+ *     a stub-pattern hit (lying about completeness)
+ */
+export declare function runAttestationCrossCheck(args: {
+    attestation: Attestation | undefined;
+    diff: DiffEntry[];
+    stubCatalog: StubCatalog;
+    /** Globs of files always allowed in diff but not required to be in
+     *  files_touched (e.g. `.cairn/runs/active/**`). */
+    ignoreGlobs?: string[];
+}): SensorResult;

package/dist/sensors/attestation.js

@@ -0,0 +1,262 @@
+/**
+ * Layer B — attestation cross-check.
+ *
+ * The agent emits a fenced YAML block at the end of its final response.
+ * This module:
+ *   1. Extracts the YAML block from the agent's final text.
+ *   2. Parses it into a structured `Attestation`.
+ *   3. Cross-checks every claim against the actual diff. Mismatch = lie.
+ *
+ * Per PRIMER §10 Layer B. Lying must be harder than telling truth.
+ */
+import { parse as parseYaml } from "yaml";
+import { matchAnyGlob } from "../ground/glob.js";
+import { detectStubMatches } from "./stub-catalog.js";
+const SENSOR_ID = "attestation-cross-check";
+/**
+ * Extract the YAML block from a final assistant message. The template
+ * instructs the agent to emit a fenced block whose first line is the literal
+ * key `attestation:`. We accept either:
+ *
+ *   ```yaml
+ *   attestation:
+ *     ...
+ *   ```
+ *
+ * or a bare top-level YAML doc starting with `attestation:`.
+ */
+export function extractAttestation(text) {
+    if (typeof text !== "string" || text.length === 0)
+        return undefined;
+    // Prefer fenced ```yaml ... ``` block whose body starts with `attestation:`.
+    const fenced = /```(?:yaml|yml)?\s*\n([\s\S]*?)\n```/g;
+    let match;
+    while ((match = fenced.exec(text)) !== null) {
+        const body = match[1] ?? "";
+        if (/^\s*attestation\s*:/m.test(body)) {
+            const parsed = parseAttestationBody(body);
+            if (parsed)
+                return parsed;
+        }
+    }
+    // Fallback: bare YAML in text starting with `attestation:`.
+    const bareIdx = text.search(/^\s*attestation\s*:/m);
+    if (bareIdx !== -1) {
+        const slice = text.slice(bareIdx);
+        return parseAttestationBody(slice);
+    }
+    return undefined;
+}
+/** Try parsing a YAML body that contains an `attestation:` key. */
+function parseAttestationBody(body) {
+    let doc;
+    try {
+        doc = parseYaml(body);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof doc !== "object" || doc === null)
+        return undefined;
+    const root = doc;
+    const at = root["attestation"];
+    if (typeof at !== "object" || at === null)
+        return undefined;
+    const a = at;
+    const delivered = Array.isArray(a["delivered"])
+        ? a["delivered"].map((d) => ({
+            symbol: String(d["symbol"] ?? ""),
+            ...(typeof d["path"] === "string" ? { path: d["path"] } : {}),
+            behavior: (() => {
+                const v = d["behavior"];
+                return v === "partial" || v === "scaffolded" ? v : "full";
+            })(),
+            ...(Array.isArray(d["sensors_passed"])
+                ? { sensors_passed: d["sensors_passed"].map(String) }
+                : {}),
+        }))
+        : [];
+    const deferred = Array.isArray(a["deferred"])
+        ? a["deferred"].map((d) => ({
+            symbol: String(d["symbol"] ?? ""),
+            reason: String(d["reason"] ?? ""),
+        }))
+        : [];
+    const known_limitations = Array.isArray(a["known_limitations"])
+        ? a["known_limitations"].map(String)
+        : [];
+    const todos_introduced = typeof a["todos_introduced"] === "number" ? a["todos_introduced"] : 0;
+    const stubs_introduced = typeof a["stubs_introduced"] === "number" ? a["stubs_introduced"] : 0;
+    const files_touched = Array.isArray(a["files_touched"])
+        ? a["files_touched"].map(String)
+        : [];
+    const out = {
+        delivered,
+        deferred,
+        known_limitations,
+        todos_introduced,
+        stubs_introduced,
+        files_touched,
+    };
+    // Optional blocked_by from the same root or under attestation.
+    const block = (root["blocked_by"] ?? a["blocked_by"]);
+    if (typeof block === "object" && block !== null) {
+        const b = block;
+        if (typeof b["reason"] === "string") {
+            out.blocked_by = {
+                reason: b["reason"],
+                ...(typeof b["needed_from_operator"] === "string"
+                    ? { needed_from_operator: b["needed_from_operator"] }
+                    : {}),
+            };
+        }
+    }
+    return out;
+}
+/**
+ * Cross-check the attestation against the diff. Returns the sensor result.
+ *
+ * Hard fails:
+ *   - attestation absent or unparseable
+ *   - files_touched mismatches actual changed paths (set-equality)
+ *   - todos_introduced != count of TODO/FIXME/XXX/HACK markers added
+ *   - stubs_introduced != count of hard-severity stub-pattern hits
+ *   - any delivered item declared `behavior: full` whose path/text contains
+ *     a stub-pattern hit (lying about completeness)
+ */
+export function runAttestationCrossCheck(args) {
+    const startedAt = Date.now();
+    const findings = [];
+    if (!args.attestation) {
+        findings.push({
+            sensor_id: SENSOR_ID,
+            message: "agent emitted no `attestation:` YAML block in final response — Layer B contract requires one",
+            severity: "hard",
+        });
+        return {
+            sensor_id: SENSOR_ID,
+            ok: false,
+            duration_ms: Date.now() - startedAt,
+            findings,
+        };
+    }
+    if (args.attestation.blocked_by) {
+        // Agent declared it can't proceed. Surface as soft so the orchestrator
+        // routes it back to the operator instead of looping.
+        findings.push({
+            sensor_id: SENSOR_ID,
+            message: `agent reported blocked_by: ${args.attestation.blocked_by.reason}`,
+            severity: "soft",
+        });
+    }
+    const diffPaths = new Set(args.diff
+        .filter((d) => d.status !== "deleted")
+        .map((d) => d.path));
+    const ignore = args.ignoreGlobs ?? [];
+    const declared = new Set(args.attestation.files_touched);
+    // Set-equality: every changed file must be declared, and every declared
+    // file must be in the diff (catches "I changed these other files too" lies).
+    for (const path of diffPaths) {
+        if (declared.has(path))
+            continue;
+        if (ignore.length > 0 && matchAnyGlob(path, ignore))
+            continue;
+        findings.push({
+            sensor_id: SENSOR_ID,
+            path,
+            message: `file changed but not in attestation.files_touched: ${path}`,
+            severity: "hard",
+        });
+    }
+    for (const path of declared) {
+        if (diffPaths.has(path))
+            continue;
+        findings.push({
+            sensor_id: SENSOR_ID,
+            path,
+            message: `attestation.files_touched lists a file not actually changed: ${path}`,
+            severity: "hard",
+        });
+    }
+    // Count markers added in the diff.
+    const addedTodoCount = countAddedMarkers(args.diff);
+    if (args.attestation.todos_introduced !== addedTodoCount) {
+        findings.push({
+            sensor_id: SENSOR_ID,
+            message: `attestation.todos_introduced=${args.attestation.todos_introduced} but diff adds ${addedTodoCount} TODO/FIXME/XXX/HACK marker(s)`,
+            severity: "hard",
+        });
+    }
+    // Count hard-stub matches in the diff.
+    const stubHits = detectStubMatches({
+        diff: args.diff,
+        catalog: args.stubCatalog,
+        /** All languages — Layer B doesn't get to filter by profile (the agent's
+         *  number must match the same denominator we'll use). */
+        languages: undefined,
+    });
+    const hardStubCount = stubHits.filter((h) => h.severity === "hard").length;
+    if (args.attestation.stubs_introduced !== hardStubCount) {
+        findings.push({
+            sensor_id: SENSOR_ID,
+            message: `attestation.stubs_introduced=${args.attestation.stubs_introduced} but Layer A finds ${hardStubCount} hard-severity stub pattern(s)`,
+            severity: "hard",
+        });
+    }
+    // behavior:full + stub-pattern coexistence = lie about completeness.
+    for (const d of args.attestation.delivered) {
+        if (d.behavior !== "full")
+            continue;
+        const matches = stubHits.filter((h) => {
+            if (d.path && h.path !== d.path)
+                return false;
+            // If no path, just see whether any matched_text references the symbol.
+            if (!d.path)
+                return (h.matched_text ?? "").includes(d.symbol);
+            return true;
+        });
+        for (const m of matches) {
+            const f = {
+                sensor_id: SENSOR_ID,
+                message: `delivered "${d.symbol}" claimed behavior:full but contains stub pattern \`${m.pattern_id}\``,
+                severity: "hard",
+            };
+            if (m.path !== undefined)
+                f.path = m.path;
+            if (m.line !== undefined)
+                f.line = m.line;
+            if (m.matched_text !== undefined)
+                f.matched_text = m.matched_text;
+            if (m.pattern_id !== undefined)
+                f.pattern_id = m.pattern_id;
+            findings.push(f);
+        }
+    }
+    const ok = findings.every((f) => f.severity !== "hard");
+    return {
+        sensor_id: SENSOR_ID,
+        ok,
+        duration_ms: Date.now() - startedAt,
+        findings,
+    };
+}
+/**
+ * Count TODO/FIXME/XXX/HACK markers introduced in the diff (added lines only).
+ * Modified files: counts markers in content not present at the SHA pin.
+ * Added files: counts every marker.
+ */
+function countAddedMarkers(diff) {
+    const re = /(?:\/\/|#|\/\*|--)\s*(TODO|FIXME|XXX|HACK)\b/g;
+    let total = 0;
+    for (const entry of diff) {
+        if (entry.status === "deleted")
+            continue;
+        const after = entry.afterContent ?? "";
+        const before = entry.beforeContent ?? "";
+        const beforeCount = (before.match(re) ?? []).length;
+        const afterCount = (after.match(re) ?? []).length;
+        total += Math.max(0, afterCount - beforeCount);
+    }
+    return total;
+}
+//# sourceMappingURL=attestation.js.map

package/dist/sensors/attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.js","sourceRoot":"","sources":["../../src/sensors/attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAQjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpE,6EAA6E;IAC7E,MAAM,MAAM,GAAG,uCAAuC,CAAC;IACvD,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mEAAmE;AACnE,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,CAAC,GAAG,EAA6B,CAAC;IAExC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC,CAAE,CAAC,CAAC,WAAW,CAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,QAAQ,EAAE,CAAC,GAAsC,EAAE;gBACjD,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;gBACxB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5D,CAAC,CAAC,EAAE;YACJ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC,CAAC,EAAE,cAAc,EAAG,CAAC,CAAC,gBAAgB,CAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBACnE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC,CAAE,CAAC,CAAC,UAAU,CAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;SAClC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC7D,CAAC,CAAE,CAAC,CAAC,mBAAmB,CAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACrD,CAAC,CAAE,CAAC,CAAC,eAAe,CAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/C,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,GAAG,GAAgB;QACvB,SAAS;QACT,QAAQ;QACR,iBAAiB;QACjB,gBAAgB;QAChB,gBAAgB;QAChB,aAAa;KACd,CAAC;IAEF,+DAA+D;IAC/D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAY,CAAC;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpC,GAAG,CAAC,UAAU,GAAG;gBACf,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;gBACnB,GAAG,CAAC,OAAO,CAAC,CAAC,sBAAsB,CAAC,KAAK,QAAQ;oBAC/C,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE;oBACrD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,OAAO,EACL,8FAA8F;YAChG,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAChC,uEAAuE;QACvE,qDAAqD;QACrD,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,8BAA8B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE;YAC3E,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,IAAI,CAAC,IAAI;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACtB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAEzD,wEAAwE;IACxE,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,SAAS;QAC9D,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,IAAI;YACJ,OAAO,EAAE,sDAAsD,IAAI,EAAE;YACrE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,IAAI;YACJ,OAAO,EAAE,gEAAgE,IAAI,EAAE;YAC/E,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,cAAc,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,gCAAgC,IAAI,CAAC,WAAW,CAAC,gBAAgB,kBAAkB,cAAc,gCAAgC;YAC1I,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB;iEACyD;QACzD,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC3E,IAAI,IAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,aAAa,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,gCAAgC,IAAI,CAAC,WAAW,CAAC,gBAAgB,sBAAsB,aAAa,gCAAgC;YAC7I,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,SAAS;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC9C,uEAAuE;YACvE,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAkB;gBACvB,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,cAAc,CAAC,CAAC,MAAM,uDAAuD,CAAC,CAAC,UAAU,IAAI;gBACtG,QAAQ,EAAE,MAAM;aACjB,CAAC;YACF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;gBAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;YAClE,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;gBAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IACxD,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,EAAE;QACF,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAiB;IAC1C,MAAM,EAAE,GAAG,+CAA+C,CAAC;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpD,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAClD,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/sensors/catalog.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Loaders for the on-disk sensor configuration files.
+ *
+ * `.cairn/config/stub-patterns.yaml` — Layer A regex catalog
+ * `.cairn/config/sensors.yaml`       — sensor registry (which sensors run,
+ *                                        their layer, fail_severity, glob keys)
+ *
+ * Both files ship as templates in `cairn/templates/.cairn/config/` and
+ * are copied into the adopted project's `.cairn/config/` at init.
+ */
+import type { StubCatalog } from "./types.js";
+/** Parse a stub-patterns.yaml document into the typed catalog shape. */
+export declare function parseStubCatalog(yamlText: string): StubCatalog;
+/**
+ * Load the stub-pattern catalog. Order:
+ *   1. `<repoRoot>/.cairn/config/stub-patterns.yaml` (project override)
+ *   2. The package's bundled template file (always present in cairn/dist).
+ *
+ * Returns the parsed catalog. Throws only if both candidates are missing or
+ * unparseable — that would indicate a broken cairn install.
+ */
+export declare function loadStubCatalog(repoRoot?: string): StubCatalog;
+/** Sensor registry entry from sensors.yaml. */
+export interface SensorRegistryEntry {
+    id: string;
+    layer: string;
+    kind: string;
+    description: string;
+    triggers: string[];
+    glob_keys?: string[];
+    catalog?: string;
+    fail_severity?: "hard" | "soft";
+}
+export interface SensorRegistry {
+    version: number;
+    sensors: SensorRegistryEntry[];
+    required_glob_keys: string[];
+    disabled_per_project: string[];
+}
+/** Load + parse the sensor registry. */
+export declare function loadSensorRegistry(repoRoot?: string): SensorRegistry;

package/dist/sensors/catalog.js

@@ -0,0 +1,123 @@
+/**
+ * Loaders for the on-disk sensor configuration files.
+ *
+ * `.cairn/config/stub-patterns.yaml` — Layer A regex catalog
+ * `.cairn/config/sensors.yaml`       — sensor registry (which sensors run,
+ *                                        their layer, fail_severity, glob keys)
+ *
+ * Both files ship as templates in `cairn/templates/.cairn/config/` and
+ * are copied into the adopted project's `.cairn/config/` at init.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parse as parseYaml } from "yaml";
+const HERE = dirname(fileURLToPath(import.meta.url));
+/**
+ * Path to the catalog file shipped inside the cairn package itself. Used
+ * as the fallback when the adopted project hasn't customized the catalog.
+ *
+ * `dist/sensors/catalog.js` runtime path → `templates/.cairn/config/...`.
+ */
+const PKG_TEMPLATE_STUB = join(HERE, "..", "..", "templates", ".cairn", "config", "stub-patterns.yaml");
+const PKG_TEMPLATE_SENSORS = join(HERE, "..", "..", "templates", ".cairn", "config", "sensors.yaml");
+const KNOWN_LANGUAGES = [
+    "typescript",
+    "javascript",
+    "python",
+    "ruby",
+    "go",
+    "rust",
+    "sql",
+];
+function isKnownLanguage(s) {
+    return typeof s === "string" && KNOWN_LANGUAGES.includes(s);
+}
+/** Parse a stub-patterns.yaml document into the typed catalog shape. */
+export function parseStubCatalog(yamlText) {
+    const doc = parseYaml(yamlText);
+    const version = typeof doc["version"] === "number" ? doc["version"] : 1;
+    const rawPatterns = Array.isArray(doc["patterns"]) ? doc["patterns"] : [];
+    const patterns = [];
+    for (const raw of rawPatterns) {
+        if (typeof raw !== "object" || raw === null)
+            continue;
+        const r = raw;
+        const id = typeof r["id"] === "string" ? r["id"] : "";
+        const langs = Array.isArray(r["languages"])
+            ? r["languages"].filter(isKnownLanguage)
+            : [];
+        const description = typeof r["description"] === "string" ? r["description"] : "";
+        const regex = typeof r["regex"] === "string" ? r["regex"] : "";
+        const severity = r["severity"] === "soft" ? "soft" : "hard";
+        if (id === "" || regex === "" || langs.length === 0)
+            continue;
+        patterns.push({ id, languages: langs, description, regex, severity });
+    }
+    return { version, patterns };
+}
+/**
+ * Load the stub-pattern catalog. Order:
+ *   1. `<repoRoot>/.cairn/config/stub-patterns.yaml` (project override)
+ *   2. The package's bundled template file (always present in cairn/dist).
+ *
+ * Returns the parsed catalog. Throws only if both candidates are missing or
+ * unparseable — that would indicate a broken cairn install.
+ */
+export function loadStubCatalog(repoRoot) {
+    const candidates = [];
+    if (repoRoot !== undefined) {
+        candidates.push(join(repoRoot, ".cairn", "config", "stub-patterns.yaml"));
+    }
+    candidates.push(PKG_TEMPLATE_STUB);
+    for (const p of candidates) {
+        if (!existsSync(p))
+            continue;
+        return parseStubCatalog(readFileSync(p, "utf8"));
+    }
+    throw new Error(`stub-patterns.yaml not found; checked: ${candidates.join(", ")}`);
+}
+/** Load + parse the sensor registry. */
+export function loadSensorRegistry(repoRoot) {
+    const candidates = [];
+    if (repoRoot !== undefined) {
+        candidates.push(join(repoRoot, ".cairn", "config", "sensors.yaml"));
+    }
+    candidates.push(PKG_TEMPLATE_SENSORS);
+    for (const p of candidates) {
+        if (!existsSync(p))
+            continue;
+        const doc = parseYaml(readFileSync(p, "utf8"));
+        const version = typeof doc["version"] === "number" ? doc["version"] : 1;
+        const sensors = [];
+        for (const raw of doc["sensors"] ?? []) {
+            if (typeof raw !== "object" || raw === null)
+                continue;
+            const r = raw;
+            sensors.push({
+                id: String(r["id"] ?? ""),
+                layer: String(r["layer"] ?? ""),
+                kind: String(r["kind"] ?? ""),
+                description: String(r["description"] ?? ""),
+                triggers: Array.isArray(r["triggers"]) ? r["triggers"] : [],
+                ...(Array.isArray(r["glob_keys"]) ? { glob_keys: r["glob_keys"] } : {}),
+                ...(typeof r["catalog"] === "string" ? { catalog: r["catalog"] } : {}),
+                ...(r["fail_severity"] === "hard" || r["fail_severity"] === "soft"
+                    ? { fail_severity: r["fail_severity"] }
+                    : {}),
+            });
+        }
+        return {
+            version,
+            sensors,
+            required_glob_keys: Array.isArray(doc["required_glob_keys"])
+                ? doc["required_glob_keys"]
+                : [],
+            disabled_per_project: Array.isArray(doc["disabled_per_project"])
+                ? doc["disabled_per_project"]
+                : [],
+        };
+    }
+    throw new Error(`sensors.yaml not found; checked: ${candidates.join(", ")}`);
+}
+//# sourceMappingURL=catalog.js.map