@jcr-adk/cli 2.0.0

package/dist/review-pack-summary.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Review-pack bundle builder — DAC-007 / Recovery plane read-only evidence bundle.
+ *
+ * SEC-17: bundle is for human review — not an automatic approval verdict.
+ */
+import type { PersistedAdkEvent } from "@jcr-adk/state";
+import { extractSpecGoal, parseAcceptanceFile, type HandoffAcceptanceItem } from "./handoff-summary.js";
+export interface ReviewPackGateResult {
+    readonly gateId: string;
+    readonly runId: string;
+    readonly result: string;
+    readonly reportHash?: string;
+    readonly timestamp: string;
+}
+export interface ReviewPackAcceptanceEvidence {
+    readonly id: string;
+    readonly description: string;
+    readonly evidencePath: string;
+    readonly evidenceStatus: "linked" | "missing_path" | "pending";
+}
+export interface ReviewPackPolicySummary {
+    readonly deniedCount: number;
+    readonly approvalRequiredCount: number;
+    readonly approvedCount: number;
+    readonly recentDenials: readonly {
+        readonly ruleId: string;
+        readonly reason: string;
+        readonly timestamp: string;
+    }[];
+}
+export interface ReviewPackBundle {
+    readonly specId: string;
+    readonly generatedAt: string;
+    readonly requirementsSummary: string;
+    readonly currentStatus: string;
+    readonly changedFiles: readonly string[];
+    readonly acceptanceEvidence: readonly ReviewPackAcceptanceEvidence[];
+    readonly gateResults: readonly ReviewPackGateResult[];
+    readonly policySummary: ReviewPackPolicySummary;
+    readonly residualRisk: readonly string[];
+    readonly reportHash?: string;
+    readonly statusNote?: string;
+    readonly evidenceLabel: "observed" | "inferred";
+}
+/** Latest gate.report per gateId for a spec (includes PASS). */
+export declare function collectGateResults(events: readonly PersistedAdkEvent[], specId: string): ReviewPackGateResult[];
+export declare function buildPolicySummary(events: readonly PersistedAdkEvent[]): ReviewPackPolicySummary;
+export declare function mapAcceptanceEvidence(items: readonly HandoffAcceptanceItem[]): ReviewPackAcceptanceEvidence[];
+export declare function collectChangedFiles(events: readonly PersistedAdkEvent[], artifactPaths: readonly string[], acceptance: readonly HandoffAcceptanceItem[]): string[];
+export declare function buildResidualRisk(input: {
+    readonly acceptance: readonly ReviewPackAcceptanceEvidence[];
+    readonly gateResults: readonly ReviewPackGateResult[];
+    readonly policySummary: ReviewPackPolicySummary;
+}): string[];
+export declare function buildReviewPackBundle(input: {
+    readonly specId: string;
+    readonly requirementsSummary: string;
+    readonly currentStatus: string;
+    readonly acceptance: readonly HandoffAcceptanceItem[];
+    readonly artifactPaths: readonly string[];
+    readonly events: readonly PersistedAdkEvent[];
+    readonly reportHash?: string;
+}): ReviewPackBundle;
+/** Render reviewer-facing markdown summary. */
+export declare function renderReviewPackMarkdown(bundle: ReviewPackBundle): string;
+export { extractSpecGoal, parseAcceptanceFile };
+//# sourceMappingURL=review-pack-summary.d.ts.map

package/dist/review-pack-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-pack-summary.d.ts","sourceRoot":"","sources":["../src/review-pack-summary.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAExG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;CAChE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,SAAS;QAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACrE,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAAC;CACjD;AAMD,gEAAgE;AAChE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,iBAAiB,EAAE,EACpC,MAAM,EAAE,MAAM,GACb,oBAAoB,EAAE,CAsBxB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,uBAAuB,CA0BhG;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,qBAAqB,EAAE,GACtC,4BAA4B,EAAE,CAYhC;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,iBAAiB,EAAE,EACpC,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,UAAU,EAAE,SAAS,qBAAqB,EAAE,GAC3C,MAAM,EAAE,CAgBV;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CACjD,GAAG,MAAM,EAAE,CA+BX;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,gBAAgB,CA4BnB;AAED,+CAA+C;AAC/C,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqEzE;AAED,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/review-pack-summary.js

@@ -0,0 +1,199 @@
+/**
+ * Review-pack bundle builder — DAC-007 / Recovery plane read-only evidence bundle.
+ *
+ * SEC-17: bundle is for human review — not an automatic approval verdict.
+ */
+import { extractSpecGoal, parseAcceptanceFile } from "./handoff-summary.js";
+function payloadOf(event) {
+    return event.payload;
+}
+/** Latest gate.report per gateId for a spec (includes PASS). */
+export function collectGateResults(events, specId) {
+    const latestByGateId = new Map();
+    for (const event of events) {
+        if (event.specId !== specId || event.kind !== "gate.report")
+            continue;
+        const payload = payloadOf(event);
+        const gateId = typeof payload.gateId === "string" ? payload.gateId : "UNKNOWN-GATE";
+        const entry = {
+            gateId,
+            runId: event.runId,
+            result: String(payload.result ?? "UNKNOWN"),
+            reportHash: typeof payload.reportHash === "string" ? payload.reportHash : undefined,
+            timestamp: event.timestamp,
+        };
+        const existing = latestByGateId.get(gateId);
+        if (!existing || event.timestamp >= existing.timestamp) {
+            latestByGateId.set(gateId, entry);
+        }
+    }
+    return [...latestByGateId.values()].sort((a, b) => a.timestamp.localeCompare(b.timestamp));
+}
+export function buildPolicySummary(events) {
+    let deniedCount = 0;
+    let approvalRequiredCount = 0;
+    let approvedCount = 0;
+    const recentDenials = [];
+    for (const event of events) {
+        if (event.kind === "policy.denied") {
+            deniedCount += 1;
+            const payload = payloadOf(event);
+            recentDenials.push({
+                ruleId: typeof payload.ruleId === "string" ? payload.ruleId : "UNKNOWN",
+                reason: typeof payload.reason === "string" ? payload.reason : "policy denied",
+                timestamp: event.timestamp,
+            });
+        }
+        if (event.kind === "policy.approval.required")
+            approvalRequiredCount += 1;
+        if (event.kind === "policy.approved")
+            approvedCount += 1;
+    }
+    return {
+        deniedCount,
+        approvalRequiredCount,
+        approvedCount,
+        recentDenials: recentDenials.slice(-5),
+    };
+}
+export function mapAcceptanceEvidence(items) {
+    return items.map((item) => ({
+        id: item.id,
+        description: item.description,
+        evidencePath: item.evidencePath,
+        evidenceStatus: item.status === "pending"
+            ? "pending"
+            : item.evidencePath.trim()
+                ? "linked"
+                : "missing_path",
+    }));
+}
+export function collectChangedFiles(events, artifactPaths, acceptance) {
+    const paths = new Set(artifactPaths);
+    for (const item of acceptance) {
+        const evidencePath = item.evidencePath.trim();
+        if (evidencePath)
+            paths.add(evidencePath);
+    }
+    for (const event of events) {
+        const payload = payloadOf(event);
+        if (typeof payload.targetPath === "string" && payload.targetPath.trim()) {
+            paths.add(payload.targetPath.trim());
+        }
+    }
+    return [...paths].sort();
+}
+export function buildResidualRisk(input) {
+    const risks = [];
+    for (const item of input.acceptance) {
+        if (item.evidenceStatus === "pending") {
+            risks.push(`Acceptance ${item.id} has no evidence path (manual/skipped risk, G-03)`);
+        }
+        if (item.evidenceStatus === "missing_path") {
+            risks.push(`Acceptance ${item.id} is missing a usable evidence path`);
+        }
+    }
+    for (const gate of input.gateResults) {
+        if (gate.result !== "PASS") {
+            risks.push(`Gate ${gate.gateId} latest result is ${gate.result}`);
+        }
+    }
+    if (input.policySummary.deniedCount > 0) {
+        risks.push(`${input.policySummary.deniedCount} policy denial(s) recorded in JSONL audit log`);
+    }
+    if (input.policySummary.approvalRequiredCount > input.policySummary.approvedCount) {
+        risks.push("Policy approval holds may be unresolved — review policy.approval.required events");
+    }
+    if (risks.length === 0) {
+        risks.push("No residual risks identified from artifacts and audit events (observed snapshot only)");
+    }
+    return risks;
+}
+export function buildReviewPackBundle(input) {
+    const acceptanceEvidence = mapAcceptanceEvidence(input.acceptance);
+    const gateResults = collectGateResults(input.events, input.specId);
+    const policySummary = buildPolicySummary(input.events);
+    const latestGateHash = gateResults.at(-1)?.reportHash;
+    const latestPassHash = [...gateResults].reverse().find((gate) => gate.result === "PASS")?.reportHash;
+    const nonPassGates = gateResults.filter((gate) => gate.result !== "PASS");
+    const hasAuditDrift = input.currentStatus === "verified" && nonPassGates.length > 0;
+    return {
+        specId: input.specId,
+        generatedAt: new Date().toISOString(),
+        requirementsSummary: input.requirementsSummary,
+        currentStatus: input.currentStatus,
+        changedFiles: collectChangedFiles(input.events, input.artifactPaths, input.acceptance),
+        acceptanceEvidence,
+        gateResults,
+        policySummary,
+        residualRisk: buildResidualRisk({ acceptance: acceptanceEvidence, gateResults, policySummary }),
+        reportHash: hasAuditDrift
+            ? (input.reportHash ?? latestPassHash)
+            : (latestPassHash ?? latestGateHash ?? input.reportHash),
+        statusNote: hasAuditDrift
+            ? "metadata.json is verified but JSONL records newer non-PASS gate — inspect gateResults for audit drift"
+            : undefined,
+        evidenceLabel: "observed",
+    };
+}
+/** Render reviewer-facing markdown summary. */
+export function renderReviewPackMarkdown(bundle) {
+    const gatesSection = bundle.gateResults
+        .map((gate) => `- **${gate.gateId}**: ${gate.result}` +
+        (gate.reportHash ? ` (reportHash: \`${gate.reportHash}\`)` : "") +
+        ` — run \`${gate.runId}\` at ${gate.timestamp}`)
+        .join("\n");
+    const acceptanceSection = bundle.acceptanceEvidence
+        .map((item) => `- **${item.id}** [${item.evidenceStatus}]: ${item.description}` +
+        (item.evidencePath ? ` — \`${item.evidencePath}\`` : ""))
+        .join("\n");
+    const policySection = [
+        `- Denied: ${bundle.policySummary.deniedCount}`,
+        `- Approval required: ${bundle.policySummary.approvalRequiredCount}`,
+        `- Approved: ${bundle.policySummary.approvedCount}`,
+    ].join("\n");
+    const denialDetails = bundle.policySummary.recentDenials.length === 0
+        ? "_No recent policy.denied events._\n"
+        : bundle.policySummary.recentDenials
+            .map((d) => `- \`${d.ruleId}\` at ${d.timestamp}: ${d.reason}`)
+            .join("\n");
+    const filesSection = bundle.changedFiles.map((file) => `- \`${file}\``).join("\n");
+    const riskSection = bundle.residualRisk.map((risk) => `- ${risk}`).join("\n");
+    return `# Review Pack — ${bundle.specId}
+
+> Generated: ${bundle.generatedAt}  
+> Status: **${bundle.currentStatus}**  
+> Evidence label: ${bundle.evidenceLabel}
+${bundle.statusNote ? `\n> **Note:** ${bundle.statusNote}\n` : ""}
+
+## Requirements Summary
+
+${bundle.requirementsSummary}
+
+## Changed / Related Files
+
+${filesSection || "_No files listed._"}
+
+## Acceptance Evidence
+
+${acceptanceSection || "_No acceptance items._"}
+
+## Gate Results
+
+${gatesSection || "_No gate reports in audit log._"}
+
+## Policy Decisions
+
+${policySection}
+
+### Recent Denials
+
+${denialDetails}
+
+## Residual Risk
+
+${riskSection}
+`;
+}
+export { extractSpecGoal, parseAcceptanceFile };
+//# sourceMappingURL=review-pack-summary.js.map

package/dist/review-pack-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-pack-summary.js","sourceRoot":"","sources":["../src/review-pack-summary.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAA8B,MAAM,sBAAsB,CAAC;AA2CxG,SAAS,SAAS,CAAC,KAAwB;IACzC,OAAO,KAAK,CAAC,OAAkC,CAAC;AAClD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAChC,MAAoC,EACpC,MAAc;IAEd,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,SAAS;QACtE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;QACpF,MAAM,KAAK,GAAyB;YAClC,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC;YAC3C,UAAU,EAAE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACnF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvD,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoC;IACrE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,aAAa,GAAuD,EAAE,CAAC;IAE7E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,WAAW,IAAI,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC;gBACjB,MAAM,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACvE,MAAM,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;gBAC7E,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B;YAAE,qBAAqB,IAAI,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAAE,aAAa,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,WAAW;QACX,qBAAqB;QACrB,aAAa;QACb,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAuC;IAEvC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,cAAc,EACZ,IAAI,CAAC,MAAM,KAAK,SAAS;YACvB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;gBACxB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,cAAc;KACvB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAoC,EACpC,aAAgC,EAChC,UAA4C;IAE5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,YAAY;YAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACxE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,mDAAmD,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,oCAAoC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,WAAW,+CAA+C,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,qBAAqB,GAAG,KAAK,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;QAClF,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAQrC;IACC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;IACtD,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,UAAU,CAAC;IACrG,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,KAAK,UAAU,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAEpF,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC;QACtF,kBAAkB;QAClB,WAAW;QACX,aAAa;QACb,YAAY,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;QAC/F,UAAU,EAAE,aAAa;YACvB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,cAAc,CAAC;YACtC,CAAC,CAAC,CAAC,cAAc,IAAI,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1D,UAAU,EACR,aAAa;YACX,CAAC,CAAC,uGAAuG;YACzG,CAAC,CAAC,SAAS;QACf,aAAa,EAAE,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW;SACpC,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE;QACtC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,YAAY,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAClD;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,iBAAiB,GAAG,MAAM,CAAC,kBAAkB;SAChD,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,cAAc,MAAM,IAAI,CAAC,WAAW,EAAE;QAChE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3D;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,aAAa,GAAG;QACpB,aAAa,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE;QAC/C,wBAAwB,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE;QACpE,eAAe,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE;KACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,aAAa,GACjB,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAC7C,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpB,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9E,OAAO,mBAAmB,MAAM,CAAC,MAAM;;eAE1B,MAAM,CAAC,WAAW;cACnB,MAAM,CAAC,aAAa;oBACd,MAAM,CAAC,aAAa;EACtC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE;;;;EAI/D,MAAM,CAAC,mBAAmB;;;;EAI1B,YAAY,IAAI,oBAAoB;;;;EAIpC,iBAAiB,IAAI,wBAAwB;;;;EAI7C,YAAY,IAAI,iCAAiC;;;;EAIjD,aAAa;;;;EAIb,aAAa;;;;EAIb,WAAW;CACZ,CAAC;AACF,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/session-run.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Multi-command session runId — `.jcr-adk/state/current-run.json`.
+ *
+ * Wave 2 (KI-002): propagate runId across gate/tool/sync without repeating
+ * `--run-id` when the same spec is active in the workspace.
+ *
+ * Fail-closed contract (review hardening):
+ * - Only a SUCCESSFUL `run` records a `completed` session.
+ * - `sync` (reuse-or-fail) requires a `completed` session, so a failed run can
+ *   never promote metadata to `verified` (NP-01 intent).
+ * - `sync` consumes the session on success so a later run cannot silently reuse
+ *   a stale runId.
+ */
+export type RunSessionStatus = "started" | "completed" | "blocked";
+export interface CurrentRunSession {
+    readonly specId: string;
+    readonly runId: string;
+    readonly status: RunSessionStatus;
+    readonly updatedAt: string;
+}
+export type ResolveRunIdMode = 
+/**
+ * Use a completed session runId when specId matches; otherwise mint an
+ * EPHEMERAL runId for this single command WITHOUT persisting a completed
+ * session. Auxiliary commands (gate/tool) must never fabricate a completed
+ * session, or `sync` could verify without a successful `run` (NP-01).
+ */
+"reuse-or-generate"
+/** Use a completed session runId when specId matches; otherwise fail-closed. */
+ | "reuse-or-fail";
+export declare function currentRunSessionPath(workspaceRoot: string): string;
+export declare function readCurrentRunSession(workspaceRoot: string): Promise<CurrentRunSession | null>;
+/** Atomically persist the session (temp write + rename) to avoid torn writes. */
+export declare function writeCurrentRunSession(workspaceRoot: string, session: Pick<CurrentRunSession, "specId" | "runId" | "status">): Promise<void>;
+/** Mark the active run session as completed after a successful `run`. */
+export declare function markRunSessionCompleted(workspaceRoot: string, session: Pick<CurrentRunSession, "specId" | "runId">): Promise<void>;
+/** Mark the active run session as blocked after AC-009 max-iteration stop. */
+export declare function markRunSessionBlocked(workspaceRoot: string, session: Pick<CurrentRunSession, "specId" | "runId">): Promise<void>;
+/** Consume (delete) the session so a later run starts from a fresh runId. */
+export declare function clearCurrentRunSession(workspaceRoot: string): Promise<void>;
+/**
+ * Resolve runId for a downstream CLI command (gate / tool / sync).
+ *
+ * `run` does NOT use this helper: it owns runId generation and only records a
+ * completed session after a successful execution (see commands/run.ts).
+ *
+ * Fail-closed invariant: a `completed` session is created ONLY by a successful
+ * `run` or an explicit `--run-id` (where the caller asserts the run happened
+ * out-of-band). A BLOCKED session cannot be overridden by `--run-id` (AC-009).
+ * `reuse-or-generate` never persists a completed session.
+ */
+export declare function resolveCliRunId(workspaceRoot: string, specId: string, options: {
+    readonly explicitRunId?: string;
+    readonly mode: ResolveRunIdMode;
+}): Promise<{
+    ok: true;
+    runId: string;
+} | {
+    ok: false;
+    message: string;
+}>;
+//# sourceMappingURL=session-run.d.ts.map

package/dist/session-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-run.d.ts","sourceRoot":"","sources":["../src/session-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB;AAC1B;;;;;GAKG;AACD,mBAAmB;AACrB,gFAAgF;GAC9E,eAAe,CAAC;AAEpB,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAuBnC;AAED,iFAAiF;AACjF,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC,GAC9D,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,yEAAyE;AACzE,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,OAAO,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,8EAA8E;AAC9E,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,OAAO,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,6EAA6E;AAC7E,wBAAsB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC5E,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCvE"}

package/dist/session-run.js

@@ -0,0 +1,112 @@
+/**
+ * Multi-command session runId — `.jcr-adk/state/current-run.json`.
+ *
+ * Wave 2 (KI-002): propagate runId across gate/tool/sync without repeating
+ * `--run-id` when the same spec is active in the workspace.
+ *
+ * Fail-closed contract (review hardening):
+ * - Only a SUCCESSFUL `run` records a `completed` session.
+ * - `sync` (reuse-or-fail) requires a `completed` session, so a failed run can
+ *   never promote metadata to `verified` (NP-01 intent).
+ * - `sync` consumes the session on success so a later run cannot silently reuse
+ *   a stale runId.
+ */
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { generateRunId, resolveAdkPaths } from "@jcr-adk/core";
+export function currentRunSessionPath(workspaceRoot) {
+    return join(resolveAdkPaths(workspaceRoot).adkDir, "state", "current-run.json");
+}
+export async function readCurrentRunSession(workspaceRoot) {
+    const filePath = currentRunSessionPath(workspaceRoot);
+    let raw;
+    try {
+        raw = JSON.parse(await readFile(filePath, "utf8"));
+    }
+    catch {
+        return null;
+    }
+    if (typeof raw !== "object" || raw === null)
+        return null;
+    const record = raw;
+    if (typeof record.specId !== "string" || typeof record.runId !== "string")
+        return null;
+    return {
+        specId: record.specId,
+        runId: record.runId,
+        // Fail-closed: only an explicit "completed" marker counts as completed.
+        status: record.status === "completed"
+            ? "completed"
+            : record.status === "blocked"
+                ? "blocked"
+                : "started",
+        updatedAt: typeof record.updatedAt === "string" ? record.updatedAt : new Date().toISOString(),
+    };
+}
+/** Atomically persist the session (temp write + rename) to avoid torn writes. */
+export async function writeCurrentRunSession(workspaceRoot, session) {
+    const filePath = currentRunSessionPath(workspaceRoot);
+    await mkdir(dirname(filePath), { recursive: true });
+    const body = {
+        specId: session.specId,
+        runId: session.runId,
+        status: session.status,
+        updatedAt: new Date().toISOString(),
+    };
+    const tmpPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(tmpPath, `${JSON.stringify(body, null, 2)}\n`, "utf8");
+    await rename(tmpPath, filePath);
+}
+/** Mark the active run session as completed after a successful `run`. */
+export async function markRunSessionCompleted(workspaceRoot, session) {
+    await writeCurrentRunSession(workspaceRoot, { ...session, status: "completed" });
+}
+/** Mark the active run session as blocked after AC-009 max-iteration stop. */
+export async function markRunSessionBlocked(workspaceRoot, session) {
+    await writeCurrentRunSession(workspaceRoot, { ...session, status: "blocked" });
+}
+/** Consume (delete) the session so a later run starts from a fresh runId. */
+export async function clearCurrentRunSession(workspaceRoot) {
+    await rm(currentRunSessionPath(workspaceRoot), { force: true });
+}
+/**
+ * Resolve runId for a downstream CLI command (gate / tool / sync).
+ *
+ * `run` does NOT use this helper: it owns runId generation and only records a
+ * completed session after a successful execution (see commands/run.ts).
+ *
+ * Fail-closed invariant: a `completed` session is created ONLY by a successful
+ * `run` or an explicit `--run-id` (where the caller asserts the run happened
+ * out-of-band). A BLOCKED session cannot be overridden by `--run-id` (AC-009).
+ * `reuse-or-generate` never persists a completed session.
+ */
+export async function resolveCliRunId(workspaceRoot, specId, options) {
+    const current = await readCurrentRunSession(workspaceRoot);
+    if (current?.specId === specId && current.status === "blocked") {
+        return {
+            ok: false,
+            message: "run session is BLOCKED: max iteration exceeded (AC-009); run doctor/gate or start a fresh run before sync",
+        };
+    }
+    if (options.explicitRunId) {
+        await writeCurrentRunSession(workspaceRoot, {
+            specId,
+            runId: options.explicitRunId,
+            status: "completed",
+        });
+        return { ok: true, runId: options.explicitRunId };
+    }
+    if (current?.specId === specId && current.status === "completed") {
+        return { ok: true, runId: current.runId };
+    }
+    if (options.mode === "reuse-or-fail") {
+        return {
+            ok: false,
+            message: "missing completed run session: pass --run-id or run `jcr-adk run` for this spec first (KI-002)",
+        };
+    }
+    // reuse-or-generate: ephemeral runId for this command only. Do NOT persist a
+    // completed session — otherwise gate/tool would let sync verify without a run.
+    return { ok: true, runId: generateRunId() };
+}
+//# sourceMappingURL=session-run.js.map

package/dist/session-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-run.js","sourceRoot":"","sources":["../src/session-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAsB/D,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB;IAErB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,wEAAwE;QACxE,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,WAAW;YAC3B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS;QACjB,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9F,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAqB,EACrB,OAA+D;IAE/D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAsB;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC/D,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,OAAoD;IAEpD,MAAM,sBAAsB,CAAC,aAAa,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAqB,EACrB,OAAoD;IAEpD,MAAM,sBAAsB,CAAC,aAAa,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,aAAqB;IAChE,MAAM,EAAE,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,MAAc,EACd,OAA6E;IAE7E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,2GAA2G;SAC9G,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,sBAAsB,CAAC,aAAa,EAAE;YAC1C,MAAM;YACN,KAAK,EAAE,OAAO,CAAC,aAAa;YAC5B,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,gGAAgG;SACnG,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;AAC9C,CAAC"}

package/dist/session.d.ts

@@ -0,0 +1,24 @@
+/**
+ * CLI runtime session — wires GuardedToolExecutor to workspace artifacts.
+ *
+ * Connects M5 integration layer to the CLI entrypoint:
+ *   resolveAdkConfig → JsonlEventStore → F-01 registry adapter → GuardedToolExecutor
+ */
+import { type AdkConfig, type CorrelationIds } from "@jcr-adk/core";
+import { JsonlEventStore } from "@jcr-adk/state";
+import { GuardedToolExecutor } from "@jcr-adk/runtime";
+export interface CliSession {
+    readonly workspaceRoot: string;
+    readonly config: AdkConfig;
+    readonly correlation: CorrelationIds;
+    readonly executor: GuardedToolExecutor;
+    readonly store: JsonlEventStore;
+}
+export interface CreateCliSessionInput {
+    readonly workspaceRoot: string;
+    readonly specId: string;
+    readonly runId?: string;
+}
+/** Create a guarded execution session bound to the workspace JSONL event log. */
+export declare function createCliSession(input: CreateCliSessionInput): Promise<CliSession>;
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,iFAAiF;AACjF,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BxF"}

package/dist/session.js

@@ -0,0 +1,37 @@
+/**
+ * CLI runtime session — wires GuardedToolExecutor to workspace artifacts.
+ *
+ * Connects M5 integration layer to the CLI entrypoint:
+ *   resolveAdkConfig → JsonlEventStore → F-01 registry adapter → GuardedToolExecutor
+ */
+import { mkdir } from "node:fs/promises";
+import { dirname } from "node:path";
+import { createCorrelationIds, resolveAdkConfig, } from "@jcr-adk/core";
+import { JsonlEventStore } from "@jcr-adk/state";
+import { GuardedToolExecutor } from "@jcr-adk/runtime";
+import { createF01RegistryAdapter } from "@jcr-adk/runner-sdk";
+/** Create a guarded execution session bound to the workspace JSONL event log. */
+export async function createCliSession(input) {
+    const config = resolveAdkConfig(input.workspaceRoot);
+    await mkdir(dirname(config.adkEventsPath), { recursive: true });
+    const correlation = createCorrelationIds({
+        specId: input.specId,
+        runId: input.runId,
+    });
+    const store = new JsonlEventStore({
+        filePath: config.adkEventsPath,
+        boundRunId: correlation.runId,
+    });
+    const executor = new GuardedToolExecutor({
+        store,
+        adapter: createF01RegistryAdapter({ workspaceRoot: input.workspaceRoot }),
+    });
+    return {
+        workspaceRoot: input.workspaceRoot,
+        config,
+        correlation,
+        executor,
+        store,
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GAGjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAgB/D,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA4B;IACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,WAAW,GAAG,oBAAoB,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,UAAU,EAAE,WAAW,CAAC,KAAK;KAC9B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC;QACvC,KAAK;QACL,OAAO,EAAE,wBAAwB,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;KAC1E,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM;QACN,WAAW;QACX,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@jcr-adk/cli",
+  "version": "2.0.0",
+  "type": "module",
+  "bin": {
+    "jcr-adk": "./bin/jcr-adk.mjs"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "dependencies": {
+    "@jcr-adk/verifier": "2.0.0",
+    "@jcr-adk/core": "2.0.0",
+    "@jcr-adk/state": "2.0.0",
+    "@jcr-adk/doctor": "2.0.0",
+    "@jcr-adk/runtime": "2.0.0",
+    "@jcr-adk/runner-sdk": "2.0.0"
+  },
+  "devDependencies": {
+    "tsx": "^4.19.4",
+    "typescript": "^5.8.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "bin"
+  ],
+  "description": "JCR ADK (Jason Cursor ADK) — cli",
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "node --import tsx --test src/permissions.test.ts src/handlers.test.ts src/main.test.ts src/lifecycle-cli.test.ts src/plan-run-sync-sample.test.ts src/session-run.test.ts src/audit-replay-cli.test.ts src/explain-fail-summary.test.ts src/explain-fail-cli.test.ts src/handoff-summary.test.ts src/handoff-cli.test.ts src/review-pack-summary.test.ts src/review-pack-cli.test.ts",
+    "build": "tsc -p tsconfig.build.json"
+  }
+}