@isaacriehm/cairn-core 0.22.5 → 0.23.0

package/templates/.cairn/config/sensors.yaml

@@ -27,48 +27,6 @@ sensors:
       - every_run
     fail_severity: hard
 
-  # ── Layer B — attestation cross-check ─────────────────────────────────────
-  - id: attestation-cross-check
-    layer: B
-    kind: attestation
-    description: "Cross-checks agent's attestation.yaml against the actual diff. Mismatches (lying about completeness, files-touched count, todos/stubs introduced) fail the run."
-    triggers:
-      - every_run_completion
-    fail_severity: hard
-
-  # ── Layer C — project structural / contract sensors ──────────────────────
-  - id: route-handler-non-empty
-    layer: C
-    kind: structural
-    description: "For every route/controller method, body must contain non-trivial implementation (not just `return null` / empty / throw not-implemented)."
-    triggers:
-      - diff_touches_glob
-    glob_keys:
-      - route_handler_globs
-    fail_severity: hard
-
-  - id: dto-no-fake-fields
-    layer: C
-    kind: structural
-    description: "DTO/schema fields that are declared optional and always evaluate undefined fail this sensor — they look thorough without doing work."
-    triggers:
-      - diff_touches_glob
-    glob_keys:
-      - dto_globs
-    fail_severity: hard
-
-  # ── Generator-drift sensors (profile-driven) ──────────────────────────────
-  - id: generator-drift
-    layer: D
-    kind: generator_drift
-    description: "Re-runs the project's declared generator commands (e.g. openapi:generate, db:generate, sqlc generate, alembic check). Any non-empty diff = source out of sync with artifact."
-    triggers:
-      - diff_touches_glob
-    glob_keys:
-      - generator_source_globs
-    profile_hook: profile.generators
-    fail_severity: hard
-
   # ── Decision-assertion sensor ─────────────────────────────────────────────
   - id: decision-assertions
     layer: decisions
@@ -78,48 +36,24 @@ sensors:
       - every_run
     fail_severity: hard
 
-  # ── §INV invariant sensors (auto-registered by backprop) ────────────────
+  # ── §INV invariant sensors ───────────────────────────────────────────────
+  # PLANNED — not yet wired. No runner reads this entry: the pre-commit sweep
+  # executes only stub-pattern-catalog + decision-assertions. Invariants are
+  # curated (§INV pillar) but enforcement (an assertions[] array on each
+  # invariant routed through the assertion evaluator, like decisions) is a
+  # gap, not a live gate. Kept `soft` so it reads as a roadmap item, NOT a
+  # hard gate that silently passes because nothing runs it.
   - id: invariant-suite
     layer: invariants
     kind: invariant_runner
-    description: "Runs every active §INV invariant's linked sensor script. Active invariants accumulate over time; superseded ones are skipped."
+    status: planned
+    description: "PLANNED (not wired): would run every active §INV invariant's linked assertion. Today no runner reads this; invariant enforcement is unimplemented."
     triggers:
       - every_run
     sources:
       - .cairn/ground/invariants/
-    fail_severity: hard
-
-  # ── Reviewer subagent (SessionStart Drain) ───────────────────────────────────────────
-  - id: reviewer-subagent
-    layer: D
-    kind: inferential
-    description: "Same model as implementer; fresh context. Reads only spec.tightened.md + diff + decisions ledger + in-scope assertions. Anti-completionist framing. For high-stakes runs, also enforces query-scope completeness."
-    model_strategy: same_as_implementer
-    triggers:
-      - all_layer_c_sensors_passed
     fail_severity: soft
 
-  # ── Layer E — high-stakes E2E / demo ─────────────────────────────────────
-  - id: e2e-real-db
-    layer: E
-    kind: e2e
-    description: "Runs the project's E2E suite against a real database (no mocks). High-stakes UAT MUST include a cross-tenant negative fixture — a request from user/org B against a resource owned by user/org A returning the expected denial."
-    triggers:
-      - high_stakes_glob_match
-    profile_hook: profile.e2e_command
-    fail_severity: hard
-    requires:
-      cross_tenant_fixture: true
-
-  # ── Layer U — UAT headless ───────────────────────────────────────────────
-  - id: uat-headless-chrome
-    layer: U
-    kind: uat
-    description: "Headless Chrome via Playwright captures GIF + screenshots + console + network. Evidence-file gate: .uat-passed contains SHA256 of bundle. Bare touch rejected."
-    triggers:
-      - code_class_or_high_stakes
-    fail_severity: hard
-
   # ── Frontmatter freshness (nightly GC pass) ──────────────────────────────
   - id: frontmatter-freshness
     layer: gc
@@ -140,23 +74,10 @@ sensors:
     fail_severity: soft
 
 # ──────────────────────────────────────────────────────────────────────────────
-# Scoped-glob keys.
-#
-# Each adopting project fills these in its `<project_name>:` block. Sensors that
-# trigger on `glob_keys` resolve them at dispatch from the project block.
-# ──────────────────────────────────────────────────────────────────────────────
-
-required_glob_keys:
-  - route_handler_globs        # e.g. core/src/**/*.controller.ts (NestJS) | app/controllers/**/*.rb (Rails)
-  - dto_globs                  # e.g. core/src/**/*.dto.ts | apps/api/schemas/**/*.py
-  - generator_source_globs     # files that, when changed, mean the generator should re-run
-  - high_stakes_globs          # paths whose changes require Layer E + cross-tenant fixture
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Copy-safety configuration (write guardian + Layer C sensor)
+# Copy-safety configuration (write guardian + copy scanner)
 #
-# The write guardian (PostToolUse hook on Write/Edit) and the Layer C
-# copy-safety sensor both consume this block. Globs default to common frontend
+# The write guardian and the copy scanner (both PostToolUse hooks on
+# Write/Edit) consume this block. Globs default to common frontend
 # file extensions; extend per-project as needed. allowlist holds verbatim
 # strings that match a pattern but are intentional (technical error codes,
 # product names, etc.).

package/templates/.cairn/config/workflow.md

@@ -26,19 +26,16 @@ source-commits:
     - .env.local
     - node_modules/**
     # adopting project extends with its own off-limits paths at init
-  high_stakes_globs: []                 # populated at init from stack-profile heuristic + operator confirm
   trust_posture:
     safe_class_auto_merge: true
     code_class_auto_merge: false
-    high_stakes_auto_merge: false
 
 ---
 
 # Workflow policy
 
-This file is the on-disk surface for the **project-extension block** that
-`cairn-core/src/sensors/runner.ts` reads (via `Object.keys()` lookup) and
-that the Phase-3 init mapper patches with discovered globs and sensors.
+This file carries the **project-extension block** — the project's `off_limits`
+denylist and trust posture, seeded at adoption and extended by the operator.
 
 The plugin-era cairn does NOT use this file as a per-task prompt template
 — each task's spec lives at `.cairn/tasks/active/<task_id>/spec.tightened.md`

package/dist/attention/scoring.d.ts

@@ -1,47 +0,0 @@
-/**
- * Confidence scoring for source-comment-derived DEC drafts and
- * invariant proposals.
- *
- * Phase 7b emits one DEC draft per "rationale"-class essay comment and
- * one invariant per "constraint"-class essay comment. On a busy
- * monorepo the classifier easily produces 400+ drafts — no human will
- * sort through that interactively, so we score each draft by a small
- * set of heuristics and bulk-accept the obvious ones during attention
- * drain. Operator triages only the medium / low-confidence remainder.
- *
- * Heuristic stance:
- *   - **DEC drafts** are attribution-of-existing-prose. Cost of keeping
- *     a borderline draft is near zero (queryable rationale metadata).
- *     Bias accepts upward — score ≥7 → high.
- *   - **Invariants** become enforcement signals; false positives turn
- *     into noise during sensor sweeps. Bias accepts downward —
- *     stricter signal required (modal verb + reason + high-stakes
- *     location) before high-confidence accept.
- *
- * Scoring is pure. Inputs are the parsed draft fields; no filesystem.
- */
-import type { ProjectGlobs } from "../sensors/types.js";
-export type DraftConfidence = "high" | "medium" | "low";
-export interface DraftScoreInput {
-    /** Repo-relative path to the source file the draft was extracted from. */
-    sourceFile: string;
-    /** Comment prose (markers stripped). */
-    prose: string;
-    /** Suggested DEC title or invariant text. */
-    title: string;
-    /** Raw block including markers + JSDoc tags. */
-    rawComment: string;
-    /** Project globs from `.cairn/config.yaml`. */
-    globs: ProjectGlobs;
-}
-/**
- * Score a DEC draft. Max 8 / threshold 7→high / 4→medium.
- */
-export declare function scoreDecDraft(input: DraftScoreInput): DraftConfidence;
-/**
- * Score an invariant proposal. Max 9 / threshold 7→high / 4→medium.
- * Stricter than DEC scoring: requires modal verb + reason + high-stakes
- * location for high confidence, since false-positive invariants become
- * sensor-sweep noise downstream.
- */
-export declare function scoreInvariant(input: DraftScoreInput): DraftConfidence;

package/dist/attention/scoring.js

@@ -1,87 +0,0 @@
-/**
- * Confidence scoring for source-comment-derived DEC drafts and
- * invariant proposals.
- *
- * Phase 7b emits one DEC draft per "rationale"-class essay comment and
- * one invariant per "constraint"-class essay comment. On a busy
- * monorepo the classifier easily produces 400+ drafts — no human will
- * sort through that interactively, so we score each draft by a small
- * set of heuristics and bulk-accept the obvious ones during attention
- * drain. Operator triages only the medium / low-confidence remainder.
- *
- * Heuristic stance:
- *   - **DEC drafts** are attribution-of-existing-prose. Cost of keeping
- *     a borderline draft is near zero (queryable rationale metadata).
- *     Bias accepts upward — score ≥7 → high.
- *   - **Invariants** become enforcement signals; false positives turn
- *     into noise during sensor sweeps. Bias accepts downward —
- *     stricter signal required (modal verb + reason + high-stakes
- *     location) before high-confidence accept.
- *
- * Scoring is pure. Inputs are the parsed draft fields; no filesystem.
- */
-import { matchAnyGlob } from "@isaacriehm/cairn-state";
-const DECISION_VERBS = /\b(chose|chosen|choose|decided|prefer|preferred|because|locked|enforce|enforced|require|required|adopt|adopted|standardize|standardized|switch|migrated|deprecate|reject|rejected)\b/i;
-const JSDOC_TAGS = /@(domain|scope|orgScope|see|param|returns|throws|deprecated|since|module|namespace|file|fileoverview|public|private|protected|internal|readonly|override|sealed|immutable|invariant)\b/;
-const INVARIANT_MODALS = /\b(MUST|MUSTN'T|MUST NOT|NEVER|ALWAYS|SHALL|SHALL NOT|CANNOT|FORBID|FORBIDDEN|REQUIRED|REQUIRES)\b/i;
-const REASON_MARKERS = /\b(because|to (prevent|ensure|avoid|guarantee|preserve|enforce|stop)|otherwise)\b/i;
-function inHighStakes(file, globs) {
-    return matchAnyGlob(file, globs.high_stakes_globs ?? []);
-}
-function inRoutesOrDtos(file, globs) {
-    const combined = [
-        ...(globs.route_handler_globs ?? []),
-        ...(globs.dto_globs ?? []),
-    ];
-    return matchAnyGlob(file, combined);
-}
-/**
- * Score a DEC draft. Max 8 / threshold 7→high / 4→medium.
- */
-export function scoreDecDraft(input) {
-    let score = 0;
-    if (inHighStakes(input.sourceFile, input.globs))
-        score += 3;
-    if (inRoutesOrDtos(input.sourceFile, input.globs))
-        score += 1;
-    const proseLen = input.prose.trim().length;
-    if (proseLen >= 80 && proseLen <= 800)
-        score += 2;
-    const titleLen = input.title.trim().length;
-    if (titleLen >= 10 && titleLen <= 80)
-        score += 1;
-    if (DECISION_VERBS.test(input.prose))
-        score += 2;
-    if (JSDOC_TAGS.test(input.rawComment))
-        score += 1;
-    if (score >= 7)
-        return "high";
-    if (score >= 4)
-        return "medium";
-    return "low";
-}
-/**
- * Score an invariant proposal. Max 9 / threshold 7→high / 4→medium.
- * Stricter than DEC scoring: requires modal verb + reason + high-stakes
- * location for high confidence, since false-positive invariants become
- * sensor-sweep noise downstream.
- */
-export function scoreInvariant(input) {
-    let score = 0;
-    if (inHighStakes(input.sourceFile, input.globs))
-        score += 3;
-    const modalText = `${input.title}\n${input.prose}`;
-    if (INVARIANT_MODALS.test(modalText))
-        score += 3;
-    if (REASON_MARKERS.test(input.prose))
-        score += 2;
-    const proseLen = input.prose.trim().length;
-    if (proseLen >= 50 && proseLen <= 600)
-        score += 1;
-    if (score >= 7)
-        return "high";
-    if (score >= 4)
-        return "medium";
-    return "low";
-}
-//# sourceMappingURL=scoring.js.map

package/dist/attention/scoring.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../../src/attention/scoring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAkBvD,MAAM,cAAc,GAClB,uLAAuL,CAAC;AAE1L,MAAM,UAAU,GAAG,wLAAwL,CAAC;AAE5M,MAAM,gBAAgB,GACpB,qGAAqG,CAAC;AAExG,MAAM,cAAc,GAAG,oFAAoF,CAAC;AAE5G,SAAS,YAAY,CAAC,IAAY,EAAE,KAAmB;IACrD,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAmB;IACvD,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;KAC3B,CAAC;IACF,OAAO,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC5D,IAAI,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;IAC3C,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,GAAG;QAAE,KAAK,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;IAC3C,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE;QAAE,KAAK,IAAI,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAElD,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;IACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;IAC3C,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,GAAG;QAAE,KAAK,IAAI,CAAC,CAAC;IAElD,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hooks/read-enrich.d.ts

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-/**
- * Bin entrypoint — `node cairn-core/dist/hooks/read-enrich.js`.
- * PostToolUse on Read; injects citation legend.
- */
-export {};

package/dist/hooks/read-enrich.js

@@ -1,11 +0,0 @@
-#!/usr/bin/env node
-/**
- * Bin entrypoint — `node cairn-core/dist/hooks/read-enrich.js`.
- * PostToolUse on Read; injects citation legend.
- */
-import { runReadEnricher } from "./post-tool-use/index.js";
-runReadEnricher().catch((err) => {
-    process.stderr.write(`[cairn read-enrich] ${err instanceof Error ? err.message : String(err)}\n`);
-    process.exit(1);
-});
-//# sourceMappingURL=read-enrich.js.map

package/dist/hooks/read-enrich.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-enrich.js","sourceRoot":"","sources":["../../src/hooks/read-enrich.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5E,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/hooks/write-guard.d.ts

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-/**
- * Bin entrypoint — `node cairn-core/dist/hooks/write-guard.js`.
- * PostToolUse on Write/Edit; copy-safety + scope reminder.
- */
-export {};

package/dist/hooks/write-guard.js

@@ -1,11 +0,0 @@
-#!/usr/bin/env node
-/**
- * Bin entrypoint — `node cairn-core/dist/hooks/write-guard.js`.
- * PostToolUse on Write/Edit; copy-safety + scope reminder.
- */
-import { runWriteGuardian } from "./post-tool-use/index.js";
-runWriteGuardian().catch((err) => {
-    process.stderr.write(`[cairn write-guard] ${err instanceof Error ? err.message : String(err)}\n`);
-    process.exit(1);
-});
-//# sourceMappingURL=write-guard.js.map

package/dist/hooks/write-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"write-guard.js","sourceRoot":"","sources":["../../src/hooks/write-guard.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5E,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/init/glob-inference.d.ts

@@ -1,16 +0,0 @@
-/**
- * Deterministic glob baseline derived from framework conventions detected
- * in Phase 1. The mapper LLM still adds project-specific globs on top;
- * these are always included regardless of LLM output.
- *
- * Pure function. Uses existsSync for file-presence checks only.
- */
-import type { DetectionResult } from "./types.js";
-export interface InferredGlobs {
-    route_handler_globs: string[];
-    dto_globs: string[];
-    generator_source_globs: string[];
-    high_stakes_globs: string[];
-    off_limits_globs: string[];
-}
-export declare function inferGlobsFromDetection(detection: DetectionResult, repoRoot: string): InferredGlobs;

package/dist/init/glob-inference.js

@@ -1,132 +0,0 @@
-/**
- * Deterministic glob baseline derived from framework conventions detected
- * in Phase 1. The mapper LLM still adds project-specific globs on top;
- * these are always included regardless of LLM output.
- *
- * Pure function. Uses existsSync for file-presence checks only.
- */
-import { existsSync } from "node:fs";
-import { join } from "node:path";
-export function inferGlobsFromDetection(detection, repoRoot) {
-    const route_handler_globs = [];
-    const dto_globs = [];
-    const generator_source_globs = [];
-    const sigs = detection.stack_signatures;
-    const has = (rel) => existsSync(join(repoRoot, rel));
-    // ── NestJS ───────────────────────────────────────────────
-    if (has("nest-cli.json")) {
-        route_handler_globs.push("**/*.controller.ts");
-        dto_globs.push("**/*.dto.ts");
-    }
-    // ── Ruby ─────────────────────────────────────────────────
-    if (sigs.some((s) => s.kind === "ruby")) {
-        route_handler_globs.push("app/controllers/**/*.rb");
-        dto_globs.push("app/forms/**/*.rb", "app/serializers/**/*.rb");
-    }
-    // ── Python ───────────────────────────────────────────────
-    if (sigs.some((s) => s.kind === "python")) {
-        route_handler_globs.push("**/views.py", "**/routes.py", "**/api/**/*.py");
-    }
-    // ── Go ───────────────────────────────────────────────────
-    if (sigs.some((s) => s.kind === "go")) {
-        route_handler_globs.push("**/handlers/**/*.go", "**/routes/**/*.go");
-    }
-    // ── Rust ─────────────────────────────────────────────────
-    if (sigs.some((s) => s.kind === "rust")) {
-        route_handler_globs.push("**/handlers.rs", "**/routes.rs");
-    }
-    // ── Java (Spring) ────────────────────────────────────────
-    if (sigs.some((s) => s.kind === "java")) {
-        route_handler_globs.push("**/*Controller.java", "**/*Resource.java");
-        dto_globs.push("**/dto/**/*.java", "**/*Dto.java", "**/*Request.java");
-    }
-    // ── Kotlin (Spring / Ktor) ───────────────────────────────
-    if (sigs.some((s) => s.kind === "kotlin")) {
-        route_handler_globs.push("**/*Controller.kt", "**/routes/**/*.kt");
-        dto_globs.push("**/dto/**/*.kt", "**/*Dto.kt", "**/*Request.kt");
-    }
-    // ── C# (.NET) ────────────────────────────────────────────
-    if (sigs.some((s) => s.kind === "csharp")) {
-        route_handler_globs.push("**/Controllers/**/*.cs", "**/*Controller.cs");
-        dto_globs.push("**/Dtos/**/*.cs", "**/*Dto.cs");
-    }
-    // ── PHP (Laravel / Symfony) ──────────────────────────────
-    if (sigs.some((s) => s.kind === "php")) {
-        route_handler_globs.push("app/Http/Controllers/**/*.php", "**/*Controller.php");
-        dto_globs.push("app/Http/Requests/**/*.php");
-    }
-    // ── Elixir (Phoenix) ─────────────────────────────────────
-    if (sigs.some((s) => s.kind === "elixir")) {
-        route_handler_globs.push("lib/**/*_controller.ex", "lib/**/controllers/**/*.ex");
-    }
-    // ── Prisma ───────────────────────────────────────────────
-    if (has("prisma/schema.prisma")) {
-        generator_source_globs.push("prisma/schema.prisma");
-    }
-    // ── Drizzle ──────────────────────────────────────────────
-    if (has("drizzle.config.ts") ||
-        has("drizzle.config.js") ||
-        has("drizzle.config.mjs")) {
-        generator_source_globs.push("**/db/schema.ts", "**/schema.ts");
-    }
-    // ── Protobuf ─────────────────────────────────────────────
-    if (hasGlob(repoRoot, ".proto")) {
-        generator_source_globs.push("**/*.proto");
-    }
-    // ── GraphQL ──────────────────────────────────────────────
-    if (hasGlob(repoRoot, ".graphql") || hasGlob(repoRoot, ".gql")) {
-        generator_source_globs.push("**/*.graphql", "**/*.gql");
-    }
-    // ── OpenAPI / Swagger ────────────────────────────────────
-    if (has("openapi.json") ||
-        has("openapi.yaml") ||
-        has("swagger.json") ||
-        has("swagger.yaml")) {
-        generator_source_globs.push("openapi.{json,yaml}", "swagger.{json,yaml}");
-    }
-    // ── Always-on ────────────────────────────────────────────
-    const high_stakes_globs = [
-        "**/auth/**",
-        "**/billing/**",
-        "**/payment*/**",
-        "**/security/**",
-        "**/secrets/**",
-    ];
-    const off_limits_globs = [
-        "**/vendor/**",
-        "**/__generated__/**",
-        "**/*.generated.ts",
-        "**/*.pb.go",
-    ];
-    return {
-        route_handler_globs,
-        dto_globs,
-        generator_source_globs,
-        high_stakes_globs,
-        off_limits_globs,
-    };
-}
-/**
- * Returns true if any conventional top-level directory or file associated
- * with the given extension exists. Checks known common locations only —
- * avoids recursive tree walks for init performance.
- *
- * Proto: look for protos/, proto/, or *.proto at root.
- * GraphQL: look for schema.graphql/schema.gql at root or graphql/ dir.
- */
-function hasGlob(repoRoot, ext) {
-    if (ext === ".proto") {
-        return (existsSync(join(repoRoot, "protos")) ||
-            existsSync(join(repoRoot, "proto")) ||
-            existsSync(join(repoRoot, "schema.proto")) ||
-            existsSync(join(repoRoot, "service.proto")));
-    }
-    if (ext === ".graphql" || ext === ".gql") {
-        return (existsSync(join(repoRoot, "graphql")) ||
-            existsSync(join(repoRoot, "schema.graphql")) ||
-            existsSync(join(repoRoot, "schema.gql")) ||
-            existsSync(join(repoRoot, "graph")));
-    }
-    return false;
-}
-//# sourceMappingURL=glob-inference.js.map

package/dist/init/glob-inference.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"glob-inference.js","sourceRoot":"","sources":["../../src/init/glob-inference.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,MAAM,UAAU,uBAAuB,CACrC,SAA0B,EAC1B,QAAgB;IAEhB,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAE5C,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAE7D,4DAA4D;IAC5D,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACzB,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/C,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QACxC,mBAAmB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpD,SAAS,CAAC,IAAI,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACjE,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1C,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACtC,mBAAmB,CAAC,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;IACvE,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QACxC,mBAAmB,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QACxC,mBAAmB,CAAC,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACzE,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1C,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACnE,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1C,mBAAmB,CAAC,IAAI,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;QACxE,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACvC,mBAAmB,CAAC,IAAI,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;QAChF,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1C,mBAAmB,CAAC,IAAI,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAC;IACnF,CAAC;IAED,4DAA4D;IAC5D,IAAI,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAChC,sBAAsB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC;IAED,4DAA4D;IAC5D,IACE,GAAG,CAAC,mBAAmB,CAAC;QACxB,GAAG,CAAC,mBAAmB,CAAC;QACxB,GAAG,CAAC,oBAAoB,CAAC,EACzB,CAAC;QACD,sBAAsB,CAAC,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IACjE,CAAC;IAED,4DAA4D;IAC5D,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,4DAA4D;IAC5D,IAAI,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAC/D,sBAAsB,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,4DAA4D;IAC5D,IACE,GAAG,CAAC,cAAc,CAAC;QACnB,GAAG,CAAC,cAAc,CAAC;QACnB,GAAG,CAAC,cAAc,CAAC;QACnB,GAAG,CAAC,cAAc,CAAC,EACnB,CAAC;QACD,sBAAsB,CAAC,IAAI,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IAED,4DAA4D;IAC5D,MAAM,iBAAiB,GAAG;QACxB,YAAY;QACZ,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,eAAe;KAChB,CAAC;IAEF,MAAM,gBAAgB,GAAG;QACvB,cAAc;QACd,qBAAqB;QACrB,mBAAmB;QACnB,YAAY;KACb,CAAC;IAEF,OAAO;QACL,mBAAmB;QACnB,SAAS;QACT,sBAAsB;QACtB,iBAAiB;QACjB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,QAAgB,EAAE,GAAW;IAC5C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACzC,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/init/phases/12-strip.d.ts

@@ -1,10 +0,0 @@
-/**
- * Phase 12-strip — per-module strip-replace consent.
- *
- * Surfaces each ingestion-flagged module as an A/B/C choice (strip /
- * keep / skip). Tracks remaining modules in
- * `outputs["12-strip"].pending` and emits one question at a time
- * until the queue is empty.
- */
-import type { PhaseResult, PhaseState } from "./types.js";
-export declare function runPhase12Strip(state: PhaseState): Promise<PhaseResult>;

package/dist/init/phases/12-strip.js

@@ -1,88 +0,0 @@
-/**
- * Phase 12-strip — per-module strip-replace consent.
- *
- * Surfaces each ingestion-flagged module as an A/B/C choice (strip /
- * keep / skip). Tracks remaining modules in
- * `outputs["12-strip"].pending` and emits one question at a time
- * until the queue is empty.
- */
-import { advancePhase, isSelfAdoptState } from "./orchestrator.js";
-export async function runPhase12Strip(state) {
-    if (isSelfAdoptState(state)) {
-        const skipped = { pending: [], decisions: {} };
-        const next = {
-            ...state,
-            outputs: { ...state.outputs, "12-strip": skipped },
-            answer: undefined,
-        };
-        return {
-            status: "complete",
-            nextPhase: "13-multidev",
-            state: advancePhase(next),
-        };
-    }
-    const existing = state.outputs["12-strip"];
-    const modules = computeFlaggedModules(state);
-    // Initialize on first entry.
-    let s = existing ?? { pending: [...modules], decisions: {} };
-    // Operator just answered → record + dequeue.
-    if (state.answer !== undefined && state.answer.length > 0 && s.pending.length > 0) {
-        const head = s.pending[0];
-        const choice = normalizeChoice(state.answer);
-        s = {
-            pending: s.pending.slice(1),
-            decisions: { ...s.decisions, [head]: choice },
-        };
-    }
-    if (s.pending.length === 0) {
-        const next = {
-            ...state,
-            outputs: { ...state.outputs, "12-strip": s },
-            answer: undefined,
-        };
-        return {
-            status: "complete",
-            nextPhase: "13-multidev",
-            state: advancePhase(next),
-        };
-    }
-    const head = s.pending[0];
-    const question = {
-        id: `12-strip:${head}`,
-        prompt: `Strip the source-comment essay in ${head}?`,
-        options: [
-            {
-                id: "strip",
-                label: "strip — DEC is the source of truth",
-            },
-            {
-                id: "keep",
-                label: "keep — leave comment alongside DEC",
-            },
-            {
-                id: "skip",
-                label: "skip — decide later",
-            },
-        ],
-        default: "skip",
-    };
-    return {
-        status: "needs_input",
-        question,
-        state: { ...state, outputs: { ...state.outputs, "12-strip": s }, answer: undefined },
-    };
-}
-function normalizeChoice(answer) {
-    switch (answer) {
-        case "strip":
-        case "keep":
-        case "skip":
-            return answer;
-        default:
-            return "skip";
-    }
-}
-function computeFlaggedModules(_state) {
-    return [];
-}
-//# sourceMappingURL=12-strip.js.map

package/dist/init/phases/12-strip.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"12-strip.js","sourceRoot":"","sources":["../../../src/init/phases/12-strip.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAQnE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAiB;IACrD,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAe,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAe;YACvB,GAAG,KAAK;YACR,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;YAClD,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAa,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEvD,6BAA6B;IAC7B,IAAI,CAAC,GAAe,QAAQ,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAEzE,6CAA6C;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,GAAG;YACF,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3B,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAe;YACvB,GAAG,KAAK;YACR,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE;YAC5C,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,MAAM,QAAQ,GAAkB;QAC9B,EAAE,EAAE,YAAY,IAAI,EAAE;QACtB,MAAM,EAAE,qCAAqC,IAAI,GAAG;QACpD,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,oCAAoC;aAC5C;YACD;gBACE,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,oCAAoC;aAC5C;YACD;gBACE,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,qBAAqB;aAC7B;SACF;QACD,OAAO,EAAE,MAAM;KAChB,CAAC;IACF,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,QAAQ;QACR,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;KACrF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAkB;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/sensors/structural.d.ts

@@ -1,31 +0,0 @@
-/**
- * Layer C — generic project-agnostic structural sensors.
- *
- * Triggered when the diff touches files matching the project's glob keys.
- * Each sensor inspects the POST-change content of those files (not just
- * the diff) — Layer C is "do these load-bearing files follow contract",
- * which is stricter than Layer A's "did this run add new debt".
- *
- *   route-handler-non-empty — every method in a route/controller class has a
- *                             non-trivial body. Catches "added handler that
- *                             does nothing" disguised as completion.
- *   dto-no-fake-fields      — @IsOptional() fields with no other validator
- *                             are fake-thoroughness; they look like work and
- *                             do nothing.
- *
- * Both are pattern-based; profiles plug stack-specific globs. The regex is
- * intentionally conservative (false-negatives over false-positives) — sensors
- * that fail-loud-on-noise get disabled which defeats the purpose.
- */
-import type { DiffEntry, SensorResult } from "./types.js";
-/** Run route-handler-non-empty against changed files matching globs. */
-export declare function runRouteHandlerNonEmpty(args: {
-    diff: DiffEntry[];
-    globs: string[] | undefined;
-}): SensorResult;
-/** Run dto-no-fake-fields against changed files matching globs. */
-export declare function runDtoNoFakeFields(args: {
-    diff: DiffEntry[];
-    globs: string[] | undefined;
-}): SensorResult;
-/** 1-based line number from a character offset. */