@isaacriehm/cairn-core 0.26.0 → 0.31.0

package/dist/migrate/migrations/0008-clean-adoption-scaffolding.js

@@ -0,0 +1,206 @@
+/**
+ * 0008 — clean leaked adoption scaffolding from a project's committed `.cairn/`.
+ *
+ * The shipped templates leaked Cairn-internal strings into every adopter's
+ * committed files that the seed never scrubbed:
+ *   - workflow.md  : a "Project-extension placeholder" meta-comment describing
+ *                    the template's OWN substitution (false the moment init
+ *                    ran) + a dangling `docs/SYSTEM_OVERVIEW.md` pointer (a
+ *                    Cairn-internal doc that never ships to adopters).
+ *   - sensors.yaml : the "honest-agent invariants stack" framing — internal
+ *                    jargon that means nothing in an adopter's repo.
+ *   - .gitignore   : `PLUGIN_ARCHITECTURE §7/§17`, `docs/FILESYSTEM_LAYOUT.md`,
+ *                    `spec §2.2` — references to Cairn-internal docs that
+ *                    dangle in the adopter's tree.
+ *   - git-hooks    : `Spec: PLUGIN_ARCHITECTURE §17 Layer 1` refs in the
+ *                    commit-msg + post-commit hooks.
+ *   - personas.yaml: a `DOCS_SPEC.md §3.4` shape ref written by an older
+ *                    brand-setup path (the template itself is clean).
+ *
+ * Plus synthetic, template-author timestamps in workflow.md + the brand /
+ * product files (`2026-05-02T…`, `2026-05-04T…`). A fake `verified-at` is one
+ * the freshness system can't trust, so we replace each synthetic stamp with
+ * the file's real git first-commit author-date — the true adoption time,
+ * identical on every clone. If git can't resolve it (untracked / ghost) the
+ * stamp is LEFT rather than fabricated (no clock value → no per-clone churn).
+ *
+ * The templates now ship clean; this converges existing repos to them.
+ *
+ * `safe` (not `review`): deterministic, zero-semantic cosmetic edits. The
+ * comment scrubs carry none of the matched anchor text (idempotent), and the
+ * timestamp swap is content-derived — whoever runs it first commits the
+ * canonical clean file and every other clone's `detect()` short-circuits, so
+ * there is no churn. Auto-applies on session open (cf. 0001/0004).
+ *
+ * Ships in 0.27.0 → `introducedIn` 0.27.0; every prior adopter re-evaluates on
+ * upgrade. `detect()` carries correctness.
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { cairnDir } from "@isaacriehm/cairn-state";
+/** The leaked workflow.md block: a rule line, the placeholder meta-comment, a rule line. */
+const LEAKED_BLOCK = /#[ ]*─{10,}\n# Project-extension placeholder\.[\s\S]*?#[ ]*─{10,}\n/;
+/** Dangling pointer at a Cairn-internal doc that never ships to adopters. */
+const DANGLING_DOC_REF = /\n+If you're looking for the daily flow, see `docs\/SYSTEM_OVERVIEW\.md` §4\.\n/;
+/** Clean operator-facing workflow.md replacement — matches the shipped template. */
+const CLEAN_BLOCK = [
+    "# ──────────────────────────────────────────────────────────────────────────────",
+    "# Project workflow extension — keyed by this project's slug. Carries the",
+    "# `off_limits` denylist (paths Cairn must never touch) and the trust posture.",
+    "# Seeded at adoption; extend `off_limits` with your own paths.",
+    "# ──────────────────────────────────────────────────────────────────────────────",
+    "",
+].join("\n");
+/** Exact synthetic literals the templates used to ship — only these are swapped. */
+const SYNTHETIC_STAMPS = ["2026-05-02T13:19:00Z", "2026-05-04T00:00:00Z"];
+const FILES = [
+    {
+        rel: ["config", "workflow.md"],
+        scrubs: [
+            { re: LEAKED_BLOCK, with: CLEAN_BLOCK, label: "placeholder meta-comment" },
+            { re: DANGLING_DOC_REF, with: "\n", label: "dangling docs/ pointer" },
+        ],
+        fixTimestamps: true,
+    },
+    {
+        rel: ["config", "sensors.yaml"],
+        scrubs: [
+            {
+                re: / Layer A of the honest-agent invariants stack\./,
+                with: "",
+                label: "internal jargon (sensors.yaml)",
+            },
+        ],
+    },
+    {
+        rel: [".gitignore"],
+        scrubs: [
+            { re: / Marked\n# GITIGNORED in docs\/FILESYSTEM_LAYOUT\.md\./, with: "", label: "FILESYSTEM_LAYOUT ref" },
+            { re: / Spec: PLUGIN_ARCHITECTURE §7\./, with: "", label: "PLUGIN_ARCHITECTURE §7 ref" },
+            { re: / \(per PLUGIN_ARCHITECTURE §7\)/, with: "", label: "PLUGIN_ARCHITECTURE §7 paren ref" },
+            { re: / Per PLUGIN_ARCHITECTURE §17 Layer 1\./, with: "", label: "PLUGIN_ARCHITECTURE §17 ref" },
+            { re: / in spec §2\.2/, with: "", label: "spec §2.2 ref" },
+        ],
+    },
+    {
+        rel: ["git-hooks", "commit-msg"],
+        scrubs: [
+            { re: /# Spec: PLUGIN_ARCHITECTURE §17 Layer 1\.\n#\n/, with: "", label: "commit-msg spec ref" },
+        ],
+    },
+    {
+        rel: ["git-hooks", "post-commit"],
+        scrubs: [
+            {
+                re: /# Spec: PLUGIN_ARCHITECTURE §17 Layer 1 \(bypass tracking\)\.\n#\n/,
+                with: "",
+                label: "post-commit spec ref",
+            },
+        ],
+    },
+    {
+        rel: ["ground", "product", "personas.yaml"],
+        scrubs: [
+            { re: /\n# See DOCS_SPEC\.md §3\.4 for shape\./, with: "", label: "personas DOCS_SPEC ref" },
+        ],
+    },
+    { rel: ["ground", "brand", "overview.md"], fixTimestamps: true },
+    { rel: ["ground", "brand", "voice.md"], fixTimestamps: true },
+    { rel: ["ground", "product", "positioning.md"], fixTimestamps: true },
+];
+function readMaybe(abs) {
+    if (!existsSync(abs))
+        return null;
+    try {
+        return readFileSync(abs, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+function hasSyntheticStamp(text) {
+    return SYNTHETIC_STAMPS.some((s) => text.includes(s));
+}
+/** Does this file still need any scrub or timestamp fix? */
+function fileNeeds(spec, raw) {
+    if (spec.scrubs?.some((s) => s.re.test(raw)))
+        return true;
+    if (spec.fixTimestamps === true && hasSyntheticStamp(raw))
+        return true;
+    return false;
+}
+/**
+ * The author-date of the commit that first ADDED `repoRelPath` — the real
+ * adoption time, stable across clones (author date, not committer date).
+ * Null when git is unavailable or the file is untracked (e.g. ghost mode).
+ */
+function gitAddDateIso(repoRoot, repoRelPath) {
+    try {
+        const out = execFileSync("git", ["log", "--diff-filter=A", "--follow", "--format=%aI", "-1", "--", repoRelPath], { cwd: repoRoot, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+        const first = out.split("\n")[0]?.trim() ?? "";
+        return first.length > 0 ? first : null;
+    }
+    catch {
+        return null;
+    }
+}
+export const cleanAdoptionScaffolding = {
+    id: "0008-clean-adoption-scaffolding",
+    introducedIn: "0.27.0",
+    describe: "Scrub leaked template scaffolding from a project's committed .cairn/ — internal-doc refs (PLUGIN_ARCHITECTURE/FILESYSTEM_LAYOUT/DOCS_SPEC/SYSTEM_OVERVIEW), the false-after-adoption 'Project-extension placeholder' comment, the 'honest-agent invariants stack' jargon — and replace synthetic template-author timestamps with each file's real git add-date so verified-at is trustworthy",
+    class: "safe",
+    detect(repoRoot) {
+        for (const spec of FILES) {
+            const raw = readMaybe(cairnDir(repoRoot, ...spec.rel));
+            if (raw !== null && fileNeeds(spec, raw))
+                return true;
+        }
+        return false;
+    },
+    apply(repoRoot) {
+        const cleaned = [];
+        for (const spec of FILES) {
+            const abs = cairnDir(repoRoot, ...spec.rel);
+            const raw = readMaybe(abs);
+            if (raw === null)
+                continue;
+            let next = raw;
+            for (const scrub of spec.scrubs ?? []) {
+                if (scrub.re.test(next)) {
+                    next = next.replace(scrub.re, scrub.with);
+                    cleaned.push(scrub.label);
+                }
+            }
+            if (spec.fixTimestamps === true && hasSyntheticStamp(next)) {
+                // The git add-date is the real adoption time. In committed mode the
+                // file is tracked at `.cairn/<rel>`; in ghost mode it lives out-of-repo
+                // and is untracked, so this lookup naturally returns null → stamp left.
+                const repoRel = [".cairn", ...spec.rel].join("/");
+                const addDate = gitAddDateIso(repoRoot, repoRel);
+                if (addDate !== null) {
+                    for (const synth of SYNTHETIC_STAMPS) {
+                        next = next.split(synth).join(addDate);
+                    }
+                    cleaned.push(`${spec.rel[spec.rel.length - 1]} timestamp`);
+                }
+                // git unresolved → leave the stamp; never fabricate a clock value.
+            }
+            if (next !== raw) {
+                try {
+                    writeFileSync(abs, next, "utf8");
+                }
+                catch (err) {
+                    return {
+                        changed: false,
+                        detail: `failed to rewrite ${spec.rel.join("/")}: ${err instanceof Error ? err.message : String(err)}`,
+                    };
+                }
+            }
+        }
+        if (cleaned.length === 0) {
+            return { changed: false, detail: "no leaked adoption scaffolding found" };
+        }
+        return { changed: true, detail: `cleaned: ${cleaned.join(" + ")}` };
+    },
+};
+//# sourceMappingURL=0008-clean-adoption-scaffolding.js.map

package/dist/migrate/migrations/0008-clean-adoption-scaffolding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0008-clean-adoption-scaffolding.js","sourceRoot":"","sources":["../../../src/migrate/migrations/0008-clean-adoption-scaffolding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAkBnD,4FAA4F;AAC5F,MAAM,YAAY,GAChB,qEAAqE,CAAC;AAExE,6EAA6E;AAC7E,MAAM,gBAAgB,GACpB,iFAAiF,CAAC;AAEpF,oFAAoF;AACpF,MAAM,WAAW,GAAG;IAClB,kFAAkF;IAClF,0EAA0E;IAC1E,+EAA+E;IAC/E,gEAAgE;IAChE,kFAAkF;IAClF,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,CAAC,sBAAsB,EAAE,sBAAsB,CAAU,CAAC;AAEnF,MAAM,KAAK,GAAwB;IACjC;QACE,GAAG,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC9B,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,0BAA0B,EAAE;YAC1E,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE;SACtE;QACD,aAAa,EAAE,IAAI;KACpB;IACD;QACE,GAAG,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;QAC/B,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,iDAAiD;gBACrD,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,gCAAgC;aACxC;SACF;KACF;IACD;QACE,GAAG,EAAE,CAAC,YAAY,CAAC;QACnB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,wDAAwD,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE;YAC1G,EAAE,EAAE,EAAE,iCAAiC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE;YACxF,EAAE,EAAE,EAAE,iCAAiC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE;YAC9F,EAAE,EAAE,EAAE,wCAAwC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE;YAChG,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;SAC3D;KACF;IACD;QACE,GAAG,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QAChC,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,gDAAgD,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE;SACjG;KACF;IACD;QACE,GAAG,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;QACjC,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,oEAAoE;gBACxE,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,sBAAsB;aAC9B;SACF;KACF;IACD;QACE,GAAG,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;QAC3C,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,yCAAyC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;SAC7F;KACF;IACD,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;IAChE,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;IAC7D,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;CACtE,CAAC;AAEF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,IAAc,EAAE,GAAW;IAC5C,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,WAAmB;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,KAAK,EACL,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAC/E,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CACzE,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAc;IACjD,EAAE,EAAE,iCAAiC;IACrC,YAAY,EAAE,QAAQ;IACtB,QAAQ,EACN,8XAA8X;IAChY,KAAK,EAAE,MAAM;IACb,MAAM,CAAC,QAAgB;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,IAAI,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,QAAgB;QACpB,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS;YAE3B,IAAI,IAAI,GAAG,GAAG,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,oEAAoE;gBACpE,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;wBACrC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACzC,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC7D,CAAC;gBACD,mEAAmE;YACrE,CAAC;YAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBACnC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,qBAAqB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBACvG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACtE,CAAC;CACF,CAAC"}

package/dist/migrate/registry.js

@@ -12,6 +12,7 @@ import { dropGlobSettings } from "./migrations/0004-drop-glob-settings.js";
 import { demoteAutofilledBrand } from "./migrations/0005-demote-autofilled-brand.js";
 import { pruneSotAlignInvariants } from "./migrations/0006-prune-sot-align-invariants.js";
 import { collapseComponentDirs } from "./migrations/0007-collapse-component-dirs.js";
+import { cleanAdoptionScaffolding } from "./migrations/0008-clean-adoption-scaffolding.js";
 export const MIGRATIONS = [
     dropDeadConfigFields,
     backfillGitignore,
@@ -20,5 +21,6 @@ export const MIGRATIONS = [
     demoteAutofilledBrand,
     pruneSotAlignInvariants,
     collapseComponentDirs,
+    cleanAdoptionScaffolding,
 ];
 //# sourceMappingURL=registry.js.map

package/dist/migrate/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/migrate/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAErF,MAAM,CAAC,MAAM,UAAU,GAAyB;IAC9C,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,qBAAqB;CACtB,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/migrate/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAE3F,MAAM,CAAC,MAAM,UAAU,GAAyB;IAC9C,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;CACzB,CAAC"}

package/dist/resync/archive.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Shared pre-resync archive helper. Every resync mutation (config edits,
+ * source-rematch frontmatter rewrites, topic-index re-cluster) snapshots the
+ * file it is about to overwrite into `.cairn/ground/.archive/` first, so the
+ * operator can recover the prior state (Q23). Recoverable, never hard-deleted.
+ */
+/**
+ * Copy a repo file to `.cairn/ground/.archive/<base>.pre-resync.<ts>.bak`.
+ * Returns the repo-relative path of the backup, or null when the source is
+ * absent (fresh repo — nothing to back up) or the copy fails.
+ */
+export declare function archiveFile(srcAbs: string, repoRoot: string, base: string, nowIso: string): string | null;

package/dist/resync/archive.js

@@ -0,0 +1,29 @@
+/**
+ * Shared pre-resync archive helper. Every resync mutation (config edits,
+ * source-rematch frontmatter rewrites, topic-index re-cluster) snapshots the
+ * file it is about to overwrite into `.cairn/ground/.archive/` first, so the
+ * operator can recover the prior state (Q23). Recoverable, never hard-deleted.
+ */
+import { copyFileSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { archiveDir } from "@isaacriehm/cairn-state";
+/**
+ * Copy a repo file to `.cairn/ground/.archive/<base>.pre-resync.<ts>.bak`.
+ * Returns the repo-relative path of the backup, or null when the source is
+ * absent (fresh repo — nothing to back up) or the copy fails.
+ */
+export function archiveFile(srcAbs, repoRoot, base, nowIso) {
+    if (!existsSync(srcAbs))
+        return null;
+    const dir = archiveDir(repoRoot);
+    mkdirSync(dir, { recursive: true });
+    const name = `${base}.pre-resync.${nowIso.replace(/[:.]/g, "-")}.bak`;
+    try {
+        copyFileSync(srcAbs, join(dir, name));
+    }
+    catch {
+        return null;
+    }
+    return join(".cairn", "ground", ".archive", name);
+}
+//# sourceMappingURL=archive.js.map

package/dist/resync/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/resync/archive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAgB,EAChB,IAAY,EACZ,MAAc;IAEd,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,IAAI,eAAe,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC;IACtE,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/dist/resync/index.d.ts

@@ -0,0 +1,73 @@
+/**
+ * `cairn resync` — operator-initiated incremental re-discovery (Stage 3).
+ *
+ * Stage 1's config-drift sensor SURFACES the gap between declared config and
+ * the grown tree; resync is the operator-initiated verb that RESOLVES it. This
+ * v1 closes the deterministic half of the loop: it re-runs the config-drift
+ * detector and turns each finding into a concrete `config.yaml` edit —
+ *
+ *   - `config_uncovered_dir`     → add the dir to the owning workspace's
+ *                                  `componentDirs`
+ *   - `config_uncovered_ext`     → add the file type to that workspace's
+ *                                  `extensions`
+ *   - `config_gitignore_drift`   → add the ignored path to top-level
+ *                                  `off_limits`
+ *   - `config_orphan_path`       → drop the dead `componentDir`
+ *
+ * Safety (Q23): `--dry-run` (the default) mutates nothing — it returns the
+ * proposed edits for the operator to review. Apply archives the pre-resync
+ * `config.yaml` to `.cairn/ground/.archive/` first, edits via the comment-
+ * preserving yaml Document API, and is idempotent on a clean delta (re-run
+ * after apply proposes nothing). The edit is a `review`-class mutation of
+ * committed config the operator commits; derived state stays gitignored +
+ * per-clone, so there is no new multi-dev conflict surface (Q22).
+ *
+ * Deferred to the LLM half (Q3/Q16, opt-in, quota-gated): hash-rematch of moved
+ * entities, Haiku re-cluster of topic-index/canonical-map over genuinely-new
+ * prose, and re-curation of new areas into DEC/INV drafts. `domain_summary`
+ * (Q15) is an init-time seed for the brand bodies, not live agent context, so
+ * resync does not refresh it.
+ */
+export { runResyncRecluster, type ResyncReclusterOptions, type ResyncReclusterResult, } from "./recluster.js";
+export type { ProseBlock, SemanticJudge, SemanticVerdict } from "../init/topic-index/resolve.js";
+export type ResyncProposalKind = "add_component_dir" | "add_extension" | "add_off_limits" | "drop_component_dir" | "repoint_source";
+export interface ResyncProposal {
+    kind: ResyncProposalKind;
+    /** Target workspace ("" = single-app). Absent for off_limits / repoint. */
+    workspace?: string;
+    /** The dir / extension / glob added or dropped, or the new source_file. */
+    value: string;
+    /** Originating config-drift finding kind (or "stale_source" for rematch). */
+    from: string;
+    /** Human-readable one-liner. */
+    detail: string;
+    /** repoint_source — the entity being re-pointed. */
+    entityId?: string;
+    /** repoint_source — repo-relative path of the entity `.md`. */
+    entityPath?: string;
+}
+export interface ResyncResult {
+    dryRun: boolean;
+    proposals: ResyncProposal[];
+    applied: boolean;
+    /** Repo-relative path of the pre-resync config backup, or null. */
+    archivedConfig: string | null;
+    /** Repo-relative paths of pre-resync entity backups (source rematch). */
+    archivedEntities: string[];
+    /** Findings that produced no actionable proposal, with why. */
+    skipped: {
+        finding: string;
+        path: string;
+        reason: string;
+    }[];
+}
+export interface RunResyncOptions {
+    repoRoot: string;
+    /** Preview only — mutate nothing. Default true (safe). */
+    dryRun?: boolean;
+    /** Limit to findings whose path is at/under this repo-relative dir. */
+    area?: string;
+    /** Injected ISO for the archive filename (determinism in tests). */
+    nowIso?: string;
+}
+export declare function runResync(opts: RunResyncOptions): ResyncResult;