@isaacriehm/cairn-core 0.22.5 → 0.22.6

package/dist/mcp/schemas.d.ts

@@ -11,8 +11,8 @@ export declare const invariantGetInput: {
 export declare const inScopeInput: {
     path_globs: z.ZodArray<z.ZodString>;
     types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        invariant: "invariant";
         decision: "decision";
+        invariant: "invariant";
     }>>>;
     status: z.ZodOptional<z.ZodArray<z.ZodString>>;
 };
@@ -50,11 +50,11 @@ export declare const searchInput: {
     query: z.ZodString;
     scope: z.ZodOptional<z.ZodArray<z.ZodString>>;
     kinds: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        invariant: "invariant";
         decision: "decision";
+        invariant: "invariant";
+        doc: "doc";
         task: "task";
         run: "run";
-        doc: "doc";
         manifest: "manifest";
     }>>>;
     limit: z.ZodOptional<z.ZodNumber>;
@@ -109,9 +109,9 @@ export declare const resumeInput: {
 export declare const taskCompleteInput: {
     task_id: z.ZodOptional<z.ZodString>;
     outcome: z.ZodEnum<{
-        aborted: "aborted";
         succeeded: "succeeded";
         failed: "failed";
+        aborted: "aborted";
     }>;
     summary: z.ZodOptional<z.ZodString>;
 };
@@ -177,9 +177,9 @@ export declare const resolveAttentionInput: {
      * kinds reject `d`.
      */
     choice: z.ZodEnum<{
-        c: "c";
         d: "d";
         a: "a";
+        c: "c";
         b: "b";
     }>;
     /**
@@ -208,12 +208,12 @@ export declare const resolveAttentionInput: {
      *                d=none-of-these (drop pending, leave source untouched).
      */
     kind: z.ZodEnum<{
+        bypass: "bypass";
+        review: "review";
         decision_draft: "decision_draft";
         baseline_finding: "baseline_finding";
         invalidation_event: "invalidation_event";
         drift: "drift";
-        bypass: "bypass";
-        review: "review";
         conflict: "conflict";
         alignment_pending: "alignment_pending";
     }>;
@@ -311,10 +311,10 @@ export declare const missionPlanPhaseInput: {
 export declare const missionAdvanceInput: {
     phase_id: z.ZodString;
     choice: z.ZodEnum<{
+        force: "force";
         exit: "exit";
         not_yet: "not_yet";
         defer: "defer";
-        force: "force";
         drop: "drop";
     }>;
     defer_hours: z.ZodOptional<z.ZodNumber>;

package/dist/mcp/tools/mission-set-exit-gate.d.ts

@@ -21,8 +21,8 @@ import { z } from "zod";
 import type { ToolDef } from "./types.js";
 export declare const missionSetExitGateInput: {
     exit_gate: z.ZodEnum<{
-        auto: "auto";
         prompt: "prompt";
+        auto: "auto";
         manual: "manual";
     }>;
     mission_id: z.ZodOptional<z.ZodString>;

package/dist/migrate/migrations/0004-drop-glob-settings.d.ts

@@ -0,0 +1,16 @@
+/**
+ * 0004 — drop the glob-driven sensor settings.
+ *
+ * The Layer C structural sensors (route-handler / DTO) and the high-stakes GC
+ * tier were removed: stack-specific regex fed by LLM-guessed globs that were
+ * never validated against the tree or refreshed after adoption, so they failed
+ * silent and never fired. Their config surface — the whole `project_globs`
+ * block and the legacy top-level `high_stakes_globs` key — now has no runtime
+ * reader. Stripping it is value-preserving (`off_limits` and everything else
+ * stay), so this is a `safe` migration. New adoptions stop emitting these keys
+ * at the source (init/overlay.ts).
+ */
+import type { Migration } from "../types.js";
+/** Defunct top-level config keys with no runtime consumer. */
+export declare const DEAD_GLOB_KEYS: readonly ["project_globs", "high_stakes_globs"];
+export declare const dropGlobSettings: Migration;

package/dist/migrate/migrations/0004-drop-glob-settings.js

@@ -0,0 +1,34 @@
+/**
+ * 0004 — drop the glob-driven sensor settings.
+ *
+ * The Layer C structural sensors (route-handler / DTO) and the high-stakes GC
+ * tier were removed: stack-specific regex fed by LLM-guessed globs that were
+ * never validated against the tree or refreshed after adoption, so they failed
+ * silent and never fired. Their config surface — the whole `project_globs`
+ * block and the legacy top-level `high_stakes_globs` key — now has no runtime
+ * reader. Stripping it is value-preserving (`off_limits` and everything else
+ * stay), so this is a `safe` migration. New adoptions stop emitting these keys
+ * at the source (init/overlay.ts).
+ */
+import { configHasKeys, deleteConfigKeys } from "../config-io.js";
+/** Defunct top-level config keys with no runtime consumer. */
+export const DEAD_GLOB_KEYS = ["project_globs", "high_stakes_globs"];
+export const dropGlobSettings = {
+    id: "0004-drop-glob-settings",
+    introducedIn: "0.22.6",
+    describe: "Remove the defunct glob-driven sensor settings (project_globs, high_stakes_globs) — the Layer C structural sensors + high-stakes GC tier were removed",
+    class: "safe",
+    detect(repoRoot, doc) {
+        return configHasKeys(repoRoot, DEAD_GLOB_KEYS, doc).length > 0;
+    },
+    apply(repoRoot) {
+        const removed = deleteConfigKeys(repoRoot, DEAD_GLOB_KEYS);
+        return {
+            changed: removed.length > 0,
+            detail: removed.length > 0
+                ? `removed ${removed.length} defunct glob key(s): ${removed.join(", ")}`
+                : "no glob settings present",
+        };
+    },
+};
+//# sourceMappingURL=0004-drop-glob-settings.js.map

package/dist/migrate/migrations/0004-drop-glob-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0004-drop-glob-settings.js","sourceRoot":"","sources":["../../../src/migrate/migrations/0004-drop-glob-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAElE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAU,CAAC;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,EAAE,EAAE,yBAAyB;IAC7B,YAAY,EAAE,QAAQ;IACtB,QAAQ,EACN,uJAAuJ;IACzJ,KAAK,EAAE,MAAM;IACb,MAAM,CAAC,QAAgB,EAAE,GAAsB;QAC7C,OAAO,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,QAAgB;QACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,MAAM,EACJ,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,yBAAyB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACxE,CAAC,CAAC,0BAA0B;SACjC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/migrate/registry.js

@@ -8,9 +8,11 @@
 import { dropDeadConfigFields } from "./migrations/0001-drop-dead-config-fields.js";
 import { backfillGitignore } from "./migrations/0002-backfill-gitignore.js";
 import { pruneScaffolding } from "./migrations/0003-prune-scaffolding.js";
+import { dropGlobSettings } from "./migrations/0004-drop-glob-settings.js";
 export const MIGRATIONS = [
     dropDeadConfigFields,
     backfillGitignore,
     pruneScaffolding,
+    dropGlobSettings,
 ];
 //# sourceMappingURL=registry.js.map

package/dist/migrate/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/migrate/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAE1E,MAAM,CAAC,MAAM,UAAU,GAAyB;IAC9C,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;CACjB,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/migrate/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,MAAM,CAAC,MAAM,UAAU,GAAyB;IAC9C,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC"}

package/dist/profiles/types.d.ts

@@ -41,8 +41,6 @@ export interface Profile {
     extractors: ProfileExtractor[];
     /** Suggested off-limits paths on adoption. */
     offLimitsDefaults: string[];
-    /** Suggested high-stakes globs on adoption. */
-    highStakesDefaults: string[];
     /** Suggested start command for the project (e.g., `pnpm dev`). */
     startCommand?: string;
 }

package/dist/profiles/unknown.d.ts

@@ -3,7 +3,7 @@ import type { Profile } from "./types.js";
  * Fallback profile — applies when no other profile detects.
  *
  * Carries no extractors and no stack-specific sensors. The cairn still
- * runs every generic sensor (Layer A/B/C/D/E/U + decision-assertions +
- * invariant-suite) defined in templates/.cairn/config/sensors.yaml.
+ * runs the generic sensors (Layer A stub catalog + decision-assertions)
+ * defined in templates/.cairn/config/sensors.yaml.
  */
 export declare const unknownProfile: Profile;

package/dist/profiles/unknown.js

@@ -2,8 +2,8 @@
  * Fallback profile — applies when no other profile detects.
  *
  * Carries no extractors and no stack-specific sensors. The cairn still
- * runs every generic sensor (Layer A/B/C/D/E/U + decision-assertions +
- * invariant-suite) defined in templates/.cairn/config/sensors.yaml.
+ * runs the generic sensors (Layer A stub catalog + decision-assertions)
+ * defined in templates/.cairn/config/sensors.yaml.
  */
 export const unknownProfile = {
     id: "unknown",
@@ -12,6 +12,5 @@ export const unknownProfile = {
     sensors: [],
     extractors: [],
     offLimitsDefaults: [".git/**", ".archive/**", "node_modules/**", ".env", ".env.local"],
-    highStakesDefaults: [],
 };
 //# sourceMappingURL=unknown.js.map

package/dist/profiles/unknown.js.map

@@ -1 +1 @@
-{"version":3,"file":"unknown.js","sourceRoot":"","sources":["../../src/profiles/unknown.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAY;IACrC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;IAClB,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,iBAAiB,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,CAAC;IACtF,kBAAkB,EAAE,EAAE;CACvB,CAAC"}
+{"version":3,"file":"unknown.js","sourceRoot":"","sources":["../../src/profiles/unknown.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAY;IACrC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;IAClB,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,iBAAiB,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,CAAC;CACvF,CAAC"}

package/dist/sensors/diff.d.ts

@@ -34,6 +34,6 @@ export declare function getRangeDiff(repoRoot: string, range: string): Promise<D
 export declare function diffHasGlobMatch(diff: DiffEntry[], globs: readonly string[], matcher: (path: string, glob: string) => boolean): boolean;
 /**
  * Filter a diff to entries whose path matches any of the supplied globs.
- * Useful for layered sensors that scope to e.g. route_handler_globs.
+ * Useful for any check that scopes to a glob set (e.g. a decision's scope_globs).
  */
 export declare function filterDiffByGlobs(diff: DiffEntry[], globs: readonly string[], matcher: (path: string, glob: string) => boolean): DiffEntry[];

package/dist/sensors/diff.js

@@ -267,7 +267,7 @@ export function diffHasGlobMatch(diff, globs, matcher) {
 }
 /**
  * Filter a diff to entries whose path matches any of the supplied globs.
- * Useful for layered sensors that scope to e.g. route_handler_globs.
+ * Useful for any check that scopes to a glob set (e.g. a decision's scope_globs).
  */
 export function filterDiffByGlobs(diff, globs, matcher) {
     return diff.filter((d) => globs.some((g) => matcher(d.path, g)));

package/dist/sensors/index.d.ts

@@ -1,12 +1,11 @@
-export type { DiffEntry, ProjectGlobs, SensorFinding, SensorLanguage, SensorResult, SensorSweepResult, StubCatalog, StubPattern, } from "./types.js";
+export type { DiffEntry, SensorFinding, SensorLanguage, SensorResult, SensorSweepResult, StubCatalog, StubPattern, } from "./types.js";
 export { getDiff, getStagedDiff, getRangeDiff, diffHasGlobMatch, filterDiffByGlobs, } from "./diff.js";
 export { loadStubCatalog, parseStubCatalog, loadSensorRegistry } from "./catalog.js";
 export type { SensorRegistry, SensorRegistryEntry } from "./catalog.js";
 export { detectStubMatches, runStubCatalog, detectLanguage } from "./stub-catalog.js";
 export type { StubMatch } from "./stub-catalog.js";
-export { runRouteHandlerNonEmpty, runDtoNoFakeFields, } from "./structural.js";
 export { loadAcceptedDecisions, decisionsInScope, listMirrorFiles, runDecisionAssertions, } from "./decisions.js";
 export { formatRemediation } from "./remediation.js";
 export type { RemediationOptions } from "./remediation.js";
-export { runSensorsOnDiff, loadProjectGlobs } from "./runner.js";
+export { runSensorsOnDiff } from "./runner.js";
 export type { RunSensorsOnDiffArgs } from "./runner.js";

package/dist/sensors/index.js

@@ -1,8 +1,7 @@
 export { getDiff, getStagedDiff, getRangeDiff, diffHasGlobMatch, filterDiffByGlobs, } from "./diff.js";
 export { loadStubCatalog, parseStubCatalog, loadSensorRegistry } from "./catalog.js";
 export { detectStubMatches, runStubCatalog, detectLanguage } from "./stub-catalog.js";
-export { runRouteHandlerNonEmpty, runDtoNoFakeFields, } from "./structural.js";
 export { loadAcceptedDecisions, decisionsInScope, listMirrorFiles, runDecisionAssertions, } from "./decisions.js";
 export { formatRemediation } from "./remediation.js";
-export { runSensorsOnDiff, loadProjectGlobs } from "./runner.js";
+export { runSensorsOnDiff } from "./runner.js";
 //# sourceMappingURL=index.js.map

package/dist/sensors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sensors/index.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,OAAO,EACP,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAErF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,EACL,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sensors/index.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,OAAO,EACP,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAErF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/sensors/runner.d.ts

@@ -3,19 +3,20 @@
  *
  * Composes the sensors that actually have teeth into one diff-scoped sweep:
  *   - Layer A — stub-pattern catalog (mechanical debt regex)
- *   - Layer C — generic structural sensors (route handlers, DTOs)
  *   - decision-assertions — "was the in-scope DEC honored?"
  *
  * Runs at the real gates: pre-commit (staged diff), CI (`--diff` range), and
  * advisory at the Stop hook (working-tree diff). The diff + repoRoot are the
  * only inputs — there is no mirror checkout or orchestrator runtime.
  *
- * Layer-B attestation cross-check was removed: it depended on an
- * agent-emitted attestation block that no production path produced, so it
- * never ran. Project-specific "proposed sensors" were likewise never wired
- * to an executor and have been dropped.
+ * Two theatre layers have been removed. (1) Layer-B attestation cross-check:
+ * depended on an agent-emitted attestation block no production path produced.
+ * (2) The Layer C structural sensors (route-handler / DTO) + their
+ * `project_globs` targeting: stack-specific regex fed by LLM-guessed globs that
+ * were never validated or refreshed, so they failed silent and never fired.
+ * Both are gone; the spine (Layer A + decision-assertions) is glob-independent.
  */
-import type { DiffEntry, ProjectGlobs, SensorLanguage, SensorSweepResult } from "./types.js";
+import type { DiffEntry, SensorLanguage, SensorSweepResult } from "./types.js";
 export interface RunSensorsOnDiffArgs {
     /** Repo root — decisions, stub catalog, and config are read from here. */
     repoRoot: string;
@@ -23,8 +24,6 @@ export interface RunSensorsOnDiffArgs {
     diff: DiffEntry[];
     /** Languages to filter Layer A patterns. Omit = scan all known languages. */
     languages?: SensorLanguage[];
-    /** Route/DTO globs. Omit = loaded from `.cairn/config.yaml`. */
-    projectGlobs?: ProjectGlobs;
     /** Label for log lines (e.g. the gate name). */
     runId?: string;
     /** Retry context for the remediation prompt. Defaults to a single 1/1 pass. */
@@ -37,5 +36,3 @@ export interface RunSensorsOnDiffArgs {
  * the caller can surface to the agent.
  */
 export declare function runSensorsOnDiff(args: RunSensorsOnDiffArgs): Promise<SensorSweepResult>;
-/** Read route/DTO/high-stakes globs from `.cairn/config.yaml`. */
-export declare function loadProjectGlobs(repoRoot: string): ProjectGlobs;

package/dist/sensors/runner.js

@@ -3,25 +3,24 @@
  *
  * Composes the sensors that actually have teeth into one diff-scoped sweep:
  *   - Layer A — stub-pattern catalog (mechanical debt regex)
- *   - Layer C — generic structural sensors (route handlers, DTOs)
  *   - decision-assertions — "was the in-scope DEC honored?"
  *
  * Runs at the real gates: pre-commit (staged diff), CI (`--diff` range), and
  * advisory at the Stop hook (working-tree diff). The diff + repoRoot are the
  * only inputs — there is no mirror checkout or orchestrator runtime.
  *
- * Layer-B attestation cross-check was removed: it depended on an
- * agent-emitted attestation block that no production path produced, so it
- * never ran. Project-specific "proposed sensors" were likewise never wired
- * to an executor and have been dropped.
+ * Two theatre layers have been removed. (1) Layer-B attestation cross-check:
+ * depended on an agent-emitted attestation block no production path produced.
+ * (2) The Layer C structural sensors (route-handler / DTO) + their
+ * `project_globs` targeting: stack-specific regex fed by LLM-guessed globs that
+ * were never validated or refreshed, so they failed silent and never fired.
+ * Both are gone; the spine (Layer A + decision-assertions) is glob-independent.
  */
 import { logger } from "../logger.js";
-import { loadCairnConfig } from "@isaacriehm/cairn-state";
 import { decisionsInScope, loadAcceptedDecisions, runDecisionAssertions, } from "./decisions.js";
 import { loadStubCatalog } from "./catalog.js";
 import { formatRemediation } from "./remediation.js";
 import { runStubCatalog } from "./stub-catalog.js";
-import { runDtoNoFakeFields, runRouteHandlerNonEmpty } from "./structural.js";
 const log = logger("sensors.runner");
 /**
  * Run the live sensor sweep over a diff. Returns per-sensor results, the
@@ -31,16 +30,12 @@ const log = logger("sensors.runner");
 export async function runSensorsOnDiff(args) {
     const startedAt = Date.now();
     const { repoRoot, diff } = args;
-    const projectGlobs = args.projectGlobs ?? loadProjectGlobs(repoRoot);
     const stubCatalog = loadStubCatalog(repoRoot);
     const acceptedDecisions = loadAcceptedDecisions(repoRoot);
     const inScope = decisionsInScope(acceptedDecisions, diff);
     const results = [
         // Layer A — stub-pattern catalog.
         runStubCatalog({ diff, catalog: stubCatalog, languages: args.languages }),
-        // Layer C — generic structural sensors.
-        runRouteHandlerNonEmpty({ diff, globs: projectGlobs.route_handler_globs }),
-        runDtoNoFakeFields({ diff, globs: projectGlobs.dto_globs }),
         // Decision-assertions — the core value prop.
         runDecisionAssertions({ mirrorPath: repoRoot, diff, decisions: inScope }),
     ];
@@ -74,32 +69,4 @@ export async function runSensorsOnDiff(args) {
         duration_ms: Date.now() - startedAt,
     };
 }
-/** Read route/DTO/high-stakes globs from `.cairn/config.yaml`. */
-export function loadProjectGlobs(repoRoot) {
-    const cfg = loadCairnConfig(repoRoot);
-    const out = {};
-    const asStrings = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string") : undefined;
-    const pg = cfg["project_globs"];
-    if (typeof pg === "object" && pg !== null) {
-        const p = pg;
-        const rh = asStrings(p["route_handler_globs"]);
-        if (rh)
-            out.route_handler_globs = rh;
-        const dto = asStrings(p["dto_globs"]);
-        if (dto)
-            out.dto_globs = dto;
-        const gen = asStrings(p["generator_source_globs"]);
-        if (gen)
-            out.generator_source_globs = gen;
-        const hs = asStrings(p["high_stakes_globs"]);
-        if (hs)
-            out.high_stakes_globs = hs;
-    }
-    if (out.high_stakes_globs === undefined) {
-        const topHs = asStrings(cfg["high_stakes_globs"]);
-        if (topHs)
-            out.high_stakes_globs = topHs;
-    }
-    return out;
-}
 //# sourceMappingURL=runner.js.map

package/dist/sensors/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/sensors/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAS9E,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAkBrC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA0B;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAmB;QAC9B,kCAAkC;QAClC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzE,wCAAwC;QACxC,uBAAuB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,mBAAmB,EAAE,CAAC;QAC1E,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC;QAC3D,6CAA6C;QAC7C,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;KAC1E,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,EACpE,CAAC,CACF,CAAC;IACF,MAAM,EAAE,GAAG,aAAa,KAAK,CAAC,CAAC;IAC/B,MAAM,kBAAkB,GAAG,EAAE;QAC3B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;SACnC,CAAC,CAAC;IAEP,GAAG,CAAC,IAAI,CACN;QACE,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc;QACpC,EAAE;QACF,aAAa;QACb,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,EAAE,EAAE,CAAC,CAAC,SAAS;YACf,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM;SAC3B,CAAC,CAAC;KACJ,EACD,uBAAuB,CACxB,CAAC;IAEF,OAAO;QACL,EAAE;QACF,aAAa;QACb,aAAa;QACb,OAAO;QACP,kBAAkB;QAClB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACpC,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,CAAC,CAAU,EAAwB,EAAE,CACrD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IAChC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,EAA6B,CAAC;QACxC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC/C,IAAI,EAAE;YAAE,GAAG,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;QAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACnD,IAAI,GAAG;YAAE,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC;QAC1C,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7C,IAAI,EAAE;YAAE,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAClD,IAAI,KAAK;YAAE,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/sensors/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQnD,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAgBrC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA0B;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAmB;QAC9B,kCAAkC;QAClC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzE,6CAA6C;QAC7C,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;KAC1E,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,EACpE,CAAC,CACF,CAAC;IACF,MAAM,EAAE,GAAG,aAAa,KAAK,CAAC,CAAC;IAC/B,MAAM,kBAAkB,GAAG,EAAE;QAC3B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;SACnC,CAAC,CAAC;IAEP,GAAG,CAAC,IAAI,CACN;QACE,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc;QACpC,EAAE;QACF,aAAa;QACb,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,EAAE,EAAE,CAAC,CAAC,SAAS;YACf,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM;SAC3B,CAAC,CAAC;KACJ,EACD,uBAAuB,CACxB,CAAC;IAEF,OAAO;QACL,EAAE;QACF,aAAa;QACb,aAAa;QACb,OAAO;QACP,kBAAkB;QAClB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACpC,CAAC;AACJ,CAAC"}

package/dist/sensors/types.d.ts

@@ -56,19 +56,6 @@ export interface StubCatalog {
     version: number;
     patterns: StubPattern[];
 }
-/**
- * Project-extension block resolved from workflow.md `<project>:` extension.
- * Sensors that trigger on `glob_keys` look up the matching key here.
- */
-export interface ProjectGlobs {
-    route_handler_globs?: string[];
-    dto_globs?: string[];
-    generator_source_globs?: string[];
-    high_stakes_globs?: string[];
-    /** Off-limits — file_must_not_be_modified assertions also enforce these. */
-    off_limits?: string[];
-    [key: string]: string[] | undefined;
-}
 export interface SensorFinding {
     /** id from sensors.yaml — e.g., "stub-pattern-catalog". */
     sensor_id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isaacriehm/cairn-core",
-  "version": "0.22.5",
+  "version": "0.22.6",
   "description": "Cairn core — state + context layer. Curated `.cairn/ground/` (decisions, §INV invariants, canonical-map, brand, quality-grades), MCP server, init wizard, hook runners, sensors, GC drift sweep.",
   "author": "Isaac Riehm",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "simple-git": "^3.36.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@isaacriehm/cairn-state": "0.22.5"
+    "@isaacriehm/cairn-state": "0.22.6"
   },
   "devDependencies": {
     "@types/cli-progress": "^3.11.6",

package/templates/.cairn/config/sensors.yaml

@@ -27,48 +27,6 @@ sensors:
       - every_run
     fail_severity: hard
 
-  # ── Layer B — attestation cross-check ─────────────────────────────────────
-  - id: attestation-cross-check
-    layer: B
-    kind: attestation
-    description: "Cross-checks agent's attestation.yaml against the actual diff. Mismatches (lying about completeness, files-touched count, todos/stubs introduced) fail the run."
-    triggers:
-      - every_run_completion
-    fail_severity: hard
-
-  # ── Layer C — project structural / contract sensors ──────────────────────
-  - id: route-handler-non-empty
-    layer: C
-    kind: structural
-    description: "For every route/controller method, body must contain non-trivial implementation (not just `return null` / empty / throw not-implemented)."
-    triggers:
-      - diff_touches_glob
-    glob_keys:
-      - route_handler_globs
-    fail_severity: hard
-
-  - id: dto-no-fake-fields
-    layer: C
-    kind: structural
-    description: "DTO/schema fields that are declared optional and always evaluate undefined fail this sensor — they look thorough without doing work."
-    triggers:
-      - diff_touches_glob
-    glob_keys:
-      - dto_globs
-    fail_severity: hard
-
-  # ── Generator-drift sensors (profile-driven) ──────────────────────────────
-  - id: generator-drift
-    layer: D
-    kind: generator_drift
-    description: "Re-runs the project's declared generator commands (e.g. openapi:generate, db:generate, sqlc generate, alembic check). Any non-empty diff = source out of sync with artifact."
-    triggers:
-      - diff_touches_glob
-    glob_keys:
-      - generator_source_globs
-    profile_hook: profile.generators
-    fail_severity: hard
-
   # ── Decision-assertion sensor ─────────────────────────────────────────────
   - id: decision-assertions
     layer: decisions
@@ -89,37 +47,6 @@ sensors:
       - .cairn/ground/invariants/
     fail_severity: hard
 
-  # ── Reviewer subagent (SessionStart Drain) ───────────────────────────────────────────
-  - id: reviewer-subagent
-    layer: D
-    kind: inferential
-    description: "Same model as implementer; fresh context. Reads only spec.tightened.md + diff + decisions ledger + in-scope assertions. Anti-completionist framing. For high-stakes runs, also enforces query-scope completeness."
-    model_strategy: same_as_implementer
-    triggers:
-      - all_layer_c_sensors_passed
-    fail_severity: soft
-
-  # ── Layer E — high-stakes E2E / demo ─────────────────────────────────────
-  - id: e2e-real-db
-    layer: E
-    kind: e2e
-    description: "Runs the project's E2E suite against a real database (no mocks). High-stakes UAT MUST include a cross-tenant negative fixture — a request from user/org B against a resource owned by user/org A returning the expected denial."
-    triggers:
-      - high_stakes_glob_match
-    profile_hook: profile.e2e_command
-    fail_severity: hard
-    requires:
-      cross_tenant_fixture: true
-
-  # ── Layer U — UAT headless ───────────────────────────────────────────────
-  - id: uat-headless-chrome
-    layer: U
-    kind: uat
-    description: "Headless Chrome via Playwright captures GIF + screenshots + console + network. Evidence-file gate: .uat-passed contains SHA256 of bundle. Bare touch rejected."
-    triggers:
-      - code_class_or_high_stakes
-    fail_severity: hard
-
   # ── Frontmatter freshness (nightly GC pass) ──────────────────────────────
   - id: frontmatter-freshness
     layer: gc
@@ -140,23 +67,10 @@ sensors:
     fail_severity: soft
 
 # ──────────────────────────────────────────────────────────────────────────────
-# Scoped-glob keys.
-#
-# Each adopting project fills these in its `<project_name>:` block. Sensors that
-# trigger on `glob_keys` resolve them at dispatch from the project block.
-# ──────────────────────────────────────────────────────────────────────────────
-
-required_glob_keys:
-  - route_handler_globs        # e.g. core/src/**/*.controller.ts (NestJS) | app/controllers/**/*.rb (Rails)
-  - dto_globs                  # e.g. core/src/**/*.dto.ts | apps/api/schemas/**/*.py
-  - generator_source_globs     # files that, when changed, mean the generator should re-run
-  - high_stakes_globs          # paths whose changes require Layer E + cross-tenant fixture
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Copy-safety configuration (write guardian + Layer C sensor)
+# Copy-safety configuration (write guardian + copy scanner)
 #
-# The write guardian (PostToolUse hook on Write/Edit) and the Layer C
-# copy-safety sensor both consume this block. Globs default to common frontend
+# The write guardian and the copy scanner (both PostToolUse hooks on
+# Write/Edit) consume this block. Globs default to common frontend
 # file extensions; extend per-project as needed. allowlist holds verbatim
 # strings that match a pattern but are intentional (technical error codes,
 # product names, etc.).

package/templates/.cairn/config/workflow.md

@@ -26,19 +26,16 @@ source-commits:
     - .env.local
     - node_modules/**
     # adopting project extends with its own off-limits paths at init
-  high_stakes_globs: []                 # populated at init from stack-profile heuristic + operator confirm
   trust_posture:
     safe_class_auto_merge: true
     code_class_auto_merge: false
-    high_stakes_auto_merge: false
 
 ---
 
 # Workflow policy
 
-This file is the on-disk surface for the **project-extension block** that
-`cairn-core/src/sensors/runner.ts` reads (via `Object.keys()` lookup) and
-that the Phase-3 init mapper patches with discovered globs and sensors.
+This file carries the **project-extension block** — the project's `off_limits`
+denylist and trust posture, seeded at adoption and extended by the operator.
 
 The plugin-era cairn does NOT use this file as a per-task prompt template
 — each task's spec lives at `.cairn/tasks/active/<task_id>/spec.tightened.md`

package/dist/attention/scoring.d.ts

@@ -1,47 +0,0 @@
-/**
- * Confidence scoring for source-comment-derived DEC drafts and
- * invariant proposals.
- *
- * Phase 7b emits one DEC draft per "rationale"-class essay comment and
- * one invariant per "constraint"-class essay comment. On a busy
- * monorepo the classifier easily produces 400+ drafts — no human will
- * sort through that interactively, so we score each draft by a small
- * set of heuristics and bulk-accept the obvious ones during attention
- * drain. Operator triages only the medium / low-confidence remainder.
- *
- * Heuristic stance:
- *   - **DEC drafts** are attribution-of-existing-prose. Cost of keeping
- *     a borderline draft is near zero (queryable rationale metadata).
- *     Bias accepts upward — score ≥7 → high.
- *   - **Invariants** become enforcement signals; false positives turn
- *     into noise during sensor sweeps. Bias accepts downward —
- *     stricter signal required (modal verb + reason + high-stakes
- *     location) before high-confidence accept.
- *
- * Scoring is pure. Inputs are the parsed draft fields; no filesystem.
- */
-import type { ProjectGlobs } from "../sensors/types.js";
-export type DraftConfidence = "high" | "medium" | "low";
-export interface DraftScoreInput {
-    /** Repo-relative path to the source file the draft was extracted from. */
-    sourceFile: string;
-    /** Comment prose (markers stripped). */
-    prose: string;
-    /** Suggested DEC title or invariant text. */
-    title: string;
-    /** Raw block including markers + JSDoc tags. */
-    rawComment: string;
-    /** Project globs from `.cairn/config.yaml`. */
-    globs: ProjectGlobs;
-}
-/**
- * Score a DEC draft. Max 8 / threshold 7→high / 4→medium.
- */
-export declare function scoreDecDraft(input: DraftScoreInput): DraftConfidence;
-/**
- * Score an invariant proposal. Max 9 / threshold 7→high / 4→medium.
- * Stricter than DEC scoring: requires modal verb + reason + high-stakes
- * location for high confidence, since false-positive invariants become
- * sensor-sweep noise downstream.
- */
-export declare function scoreInvariant(input: DraftScoreInput): DraftConfidence;