@jcr-adk/core 2.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/artifact-ref.d.ts

@@ -0,0 +1,11 @@
+/** Typed reference to an ADK artifact — avoids raw path strings in domain code. */
+export type ArtifactKind = "spec" | "plan" | "report" | "log" | "codemap" | "decision" | "diff";
+export interface ArtifactRef {
+    readonly kind: ArtifactKind;
+    readonly path: string;
+    readonly sha256?: string;
+    readonly generatedBy?: string;
+    readonly createdAt: string;
+}
+export declare function createArtifactRef(kind: ArtifactKind, path: string, options?: Pick<ArtifactRef, "sha256" | "generatedBy" | "createdAt">): ArtifactRef;
+//# sourceMappingURL=artifact-ref.d.ts.map

package/dist/artifact-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-ref.d.ts","sourceRoot":"","sources":["../src/artifact-ref.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,KAAK,GACL,SAAS,GACT,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC,GAClE,WAAW,CAQb"}

package/dist/artifact-ref.js

@@ -0,0 +1,10 @@
+export function createArtifactRef(kind, path, options) {
+    return {
+        kind,
+        path,
+        sha256: options?.sha256,
+        generatedBy: options?.generatedBy,
+        createdAt: options?.createdAt ?? new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=artifact-ref.js.map

package/dist/artifact-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-ref.js","sourceRoot":"","sources":["../src/artifact-ref.ts"],"names":[],"mappings":"AAkBA,MAAM,UAAU,iBAAiB,CAC/B,IAAkB,EAClB,IAAY,EACZ,OAAmE;IAEnE,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,OAAO,EAAE,MAAM;QACvB,WAAW,EAAE,OAAO,EAAE,WAAW;QACjC,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1D,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,39 @@
+/** Supported on-disk config schema (version 1). */
+export interface AdkConfigFileV1 {
+    readonly version: 1;
+    readonly artifactRoot?: string;
+    readonly projectId?: string;
+}
+export type AdkConfigFile = AdkConfigFileV1;
+/** Supported config schema versions — unknown version is fail-closed. */
+export declare const SUPPORTED_CONFIG_VERSIONS: readonly [1];
+export type SupportedConfigVersion = (typeof SUPPORTED_CONFIG_VERSIONS)[number];
+export declare const CURRENT_CONFIG_VERSION: SupportedConfigVersion;
+export declare const DEFAULT_ARTIFACT_ROOT = ".jcr-adk";
+/** Runtime config with resolved absolute paths. */
+export interface AdkConfig {
+    readonly version: SupportedConfigVersion;
+    readonly workspaceRoot: string;
+    readonly artifactRoot: string;
+    readonly projectId?: string;
+    readonly adkDir: string;
+    readonly configDir: string;
+    readonly specsDir: string;
+    readonly logsDir: string;
+    readonly reportsDir: string;
+    readonly adkEventsPath: string;
+    readonly gateReportsDir: string;
+}
+export type AdkConfigParseResult = {
+    readonly ok: true;
+    readonly config: AdkConfigFile;
+} | {
+    readonly ok: false;
+    readonly reason: "INVALID_SHAPE" | "UNSUPPORTED_VERSION";
+    readonly message: string;
+};
+/** Parse and validate config file JSON — unknown version fail-closed. */
+export declare function parseAdkConfigFile(raw: unknown): AdkConfigParseResult;
+/** Build default v1 config file shape. */
+export declare function defaultAdkConfigFile(projectId?: string): AdkConfigFileV1;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAE5C,yEAAyE;AACzE,eAAO,MAAM,yBAAyB,cAAe,CAAC;AACtD,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChF,eAAO,MAAM,sBAAsB,EAAE,sBAA0B,CAAC;AAEhE,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAM/G,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAkDrE;AAED,0CAA0C;AAC1C,wBAAgB,oBAAoB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CAExE"}

package/dist/config.js

@@ -0,0 +1,56 @@
+/** Supported config schema versions — unknown version is fail-closed. */
+export const SUPPORTED_CONFIG_VERSIONS = [1];
+export const CURRENT_CONFIG_VERSION = 1;
+export const DEFAULT_ARTIFACT_ROOT = ".jcr-adk";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Parse and validate config file JSON — unknown version fail-closed. */
+export function parseAdkConfigFile(raw) {
+    if (!isRecord(raw)) {
+        return { ok: false, reason: "INVALID_SHAPE", message: "config must be an object" };
+    }
+    const version = raw.version;
+    if (typeof version !== "number") {
+        return { ok: false, reason: "INVALID_SHAPE", message: "config.version must be a number" };
+    }
+    if (!SUPPORTED_CONFIG_VERSIONS.includes(version)) {
+        return {
+            ok: false,
+            reason: "UNSUPPORTED_VERSION",
+            message: `unsupported config version ${version}; supported: ${SUPPORTED_CONFIG_VERSIONS.join(", ")}`,
+        };
+    }
+    if (version === 1) {
+        const artifactRoot = raw.artifactRoot === undefined
+            ? undefined
+            : typeof raw.artifactRoot === "string"
+                ? raw.artifactRoot
+                : null;
+        if (artifactRoot === null) {
+            return { ok: false, reason: "INVALID_SHAPE", message: "config.artifactRoot must be a string" };
+        }
+        const projectId = raw.projectId === undefined
+            ? undefined
+            : typeof raw.projectId === "string"
+                ? raw.projectId
+                : null;
+        if (projectId === null) {
+            return { ok: false, reason: "INVALID_SHAPE", message: "config.projectId must be a string" };
+        }
+        return {
+            ok: true,
+            config: { version: 1, artifactRoot, projectId },
+        };
+    }
+    return {
+        ok: false,
+        reason: "UNSUPPORTED_VERSION",
+        message: `unsupported config version ${version}`,
+    };
+}
+/** Build default v1 config file shape. */
+export function defaultAdkConfigFile(projectId) {
+    return { version: 1, artifactRoot: DEFAULT_ARTIFACT_ROOT, projectId };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AASA,yEAAyE;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,CAAU,CAAC;AAEtD,MAAM,CAAC,MAAM,sBAAsB,GAA2B,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAqBhD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,OAAiC,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,8BAA8B,OAAO,gBAAgB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACrG,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,YAAY,GAChB,GAAG,CAAC,YAAY,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;gBACpC,CAAC,CAAC,GAAG,CAAC,YAAY;gBAClB,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;QACjG,CAAC;QAED,MAAM,SAAS,GACb,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;gBACjC,CAAC,CAAC,GAAG,CAAC,SAAS;gBACf,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;QAC9F,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE;SAChD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,qBAAqB;QAC7B,OAAO,EAAE,8BAA8B,OAAO,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,oBAAoB,CAAC,SAAkB;IACrD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC;AACxE,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,25 @@
+import type { AdkConfig, AdkConfigFile } from "./config.js";
+import type { CorrelationIds } from "./correlation.js";
+/** Runtime execution context shared across packages. */
+export interface AdkContext {
+    readonly workspaceRoot: string;
+    readonly specId?: string;
+    readonly runId?: string;
+    readonly requestId: string;
+    readonly config: AdkConfig;
+    readonly correlation: CorrelationIds;
+}
+export interface CreateAdkContextInput {
+    readonly workspaceRoot: string;
+    readonly config: AdkConfig;
+    readonly correlation: CorrelationIds;
+}
+/** Assemble runtime context from resolved config and correlation IDs. */
+export declare function createAdkContext(input: CreateAdkContextInput): AdkContext;
+/**
+ * Merge on-disk config file with workspace paths.
+ * Delegates to resolveAdkPaths so OS-aware path.join and workspace-boundary
+ * logic is applied consistently (Fix 1: path logic unification).
+ */
+export declare function resolveAdkConfig(workspaceRoot: string, file?: AdkConfigFile): AdkConfig;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,UAAU,CASzE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,GAAE,aAAmE,GACxE,SAAS,CAgBX"}

package/dist/context.js

@@ -0,0 +1,36 @@
+import { DEFAULT_ARTIFACT_ROOT } from "./config.js";
+import { resolveAdkPaths } from "./paths.js";
+/** Assemble runtime context from resolved config and correlation IDs. */
+export function createAdkContext(input) {
+    return {
+        workspaceRoot: input.workspaceRoot,
+        specId: input.correlation.specId,
+        runId: input.correlation.runId,
+        requestId: input.correlation.requestId,
+        config: input.config,
+        correlation: input.correlation,
+    };
+}
+/**
+ * Merge on-disk config file with workspace paths.
+ * Delegates to resolveAdkPaths so OS-aware path.join and workspace-boundary
+ * logic is applied consistently (Fix 1: path logic unification).
+ */
+export function resolveAdkConfig(workspaceRoot, file = { version: 1, artifactRoot: DEFAULT_ARTIFACT_ROOT }) {
+    const artifactRoot = file.artifactRoot ?? DEFAULT_ARTIFACT_ROOT;
+    const paths = resolveAdkPaths(workspaceRoot, artifactRoot);
+    return {
+        version: file.version,
+        workspaceRoot,
+        artifactRoot,
+        projectId: file.projectId,
+        adkDir: paths.adkDir,
+        configDir: paths.configDir,
+        specsDir: paths.specsDir,
+        logsDir: paths.logsDir,
+        reportsDir: paths.reportsDir,
+        adkEventsPath: paths.adkEventsPath,
+        gateReportsDir: paths.gateReportsDir,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAkB7C,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;QAChC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK;QAC9B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EACrB,OAAsB,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE;IAEzE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAChE,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3D,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa;QACb,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC"}

package/dist/correlation.d.ts

@@ -0,0 +1,22 @@
+/** Correlation identifiers — F-01 compatible specId / runId / requestId. */
+export interface CorrelationIds {
+    readonly specId: string;
+    readonly runId: string;
+    readonly requestId: string;
+}
+export interface CreateCorrelationInput {
+    readonly specId: string;
+    readonly runId?: string;
+    readonly requestId?: string;
+}
+/** Create correlation triple, generating missing IDs when omitted. */
+export declare function createCorrelationIds(input: CreateCorrelationInput): CorrelationIds;
+/** Propagate correlation into a child scope (e.g. nested tool call). */
+export declare function propagateCorrelationIds(parent: CorrelationIds, overrides?: Partial<Pick<CorrelationIds, "runId" | "requestId">>): CorrelationIds;
+/** RUN-{epochMs} — matches F-01 spike convention. */
+export declare function generateRunId(prefix?: string): string;
+/** REQ-{uuid} — matches F-01 spike convention. */
+export declare function generateRequestId(): string;
+/** SPEC-{date}-{seq} helper for new specs. */
+export declare function generateSpecId(date?: Date, seq?: number): string;
+//# sourceMappingURL=correlation.d.ts.map

package/dist/correlation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation.d.ts","sourceRoot":"","sources":["../src/correlation.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,GAAG,cAAc,CAMlF;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,cAAc,EACtB,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,WAAW,CAAC,CAAC,GAC/D,cAAc,CAMhB;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,MAAM,SAAQ,GAAG,MAAM,CAEpD;AAED,kDAAkD;AAClD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,IAAI,OAAa,EAAE,GAAG,SAAI,GAAG,MAAM,CAKjE"}

package/dist/correlation.js

@@ -0,0 +1,32 @@
+/** Create correlation triple, generating missing IDs when omitted. */
+export function createCorrelationIds(input) {
+    return {
+        specId: input.specId,
+        runId: input.runId ?? generateRunId(),
+        requestId: input.requestId ?? generateRequestId(),
+    };
+}
+/** Propagate correlation into a child scope (e.g. nested tool call). */
+export function propagateCorrelationIds(parent, overrides) {
+    return {
+        specId: parent.specId,
+        runId: overrides?.runId ?? parent.runId,
+        requestId: overrides?.requestId ?? generateRequestId(),
+    };
+}
+/** RUN-{epochMs} — matches F-01 spike convention. */
+export function generateRunId(prefix = "RUN") {
+    return `${prefix}-${Date.now()}`;
+}
+/** REQ-{uuid} — matches F-01 spike convention. */
+export function generateRequestId() {
+    return `REQ-${crypto.randomUUID()}`;
+}
+/** SPEC-{date}-{seq} helper for new specs. */
+export function generateSpecId(date = new Date(), seq = 1) {
+    const y = date.getUTCFullYear();
+    const m = String(date.getUTCMonth() + 1).padStart(2, "0");
+    const d = String(date.getUTCDate()).padStart(2, "0");
+    return `SPEC-${y}${m}${d}-${String(seq).padStart(3, "0")}`;
+}
+//# sourceMappingURL=correlation.js.map

package/dist/correlation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation.js","sourceRoot":"","sources":["../src/correlation.ts"],"names":[],"mappings":"AAaA,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,KAA6B;IAChE,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,aAAa,EAAE;QACrC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,iBAAiB,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CACrC,MAAsB,EACtB,SAAgE;IAEhE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK;QACvC,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,iBAAiB,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,MAAM,GAAG,KAAK;IAC1C,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;AACtC,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,cAAc,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC;IACvD,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/gateway/gateway.d.ts

@@ -0,0 +1,15 @@
+import type { GatewayDecision, MutationRequest } from "./types.js";
+/**
+ * Gateway entry point: evaluate whether a mutation is allowed.
+ *
+ * Rules (SEC-12R / DAC-N02):
+ *   1. Non-protected path → allow.
+ *   2. direct_write to protected path → deny DAC-003-DIRECT-LIFECYCLE-WRITE.
+ *   3. tool mode + approved tool → allow.
+ *   4. tool mode + unapproved tool → deny DAC-003-UNAPPROVED-TOOL.
+ *
+ * Callers MUST emit a policy.denied event before returning the deny
+ * result to the caller (EVENT_FIRST_WRITE_ORDERING).
+ */
+export declare function gatewayCheck(request: MutationRequest): GatewayDecision;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/gateway/gateway.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAuBtE"}

package/dist/gateway/gateway.js

@@ -0,0 +1,35 @@
+import { isApprovedMutatingTool, isProtectedPath } from "./registry.js";
+/**
+ * Gateway entry point: evaluate whether a mutation is allowed.
+ *
+ * Rules (SEC-12R / DAC-N02):
+ *   1. Non-protected path → allow.
+ *   2. direct_write to protected path → deny DAC-003-DIRECT-LIFECYCLE-WRITE.
+ *   3. tool mode + approved tool → allow.
+ *   4. tool mode + unapproved tool → deny DAC-003-UNAPPROVED-TOOL.
+ *
+ * Callers MUST emit a policy.denied event before returning the deny
+ * result to the caller (EVENT_FIRST_WRITE_ORDERING).
+ */
+export function gatewayCheck(request) {
+    if (!isProtectedPath(request.targetPath)) {
+        return { allowed: true };
+    }
+    if (request.mode === "direct_write") {
+        return {
+            allowed: false,
+            ruleId: "DAC-003-DIRECT-LIFECYCLE-WRITE",
+            reason: "Direct lifecycle artifact mutation is forbidden; use approved ADK command or custom tool.",
+        };
+    }
+    const toolName = request.toolName ?? "";
+    if (isApprovedMutatingTool(toolName)) {
+        return { allowed: true };
+    }
+    return {
+        allowed: false,
+        ruleId: "DAC-003-UNAPPROVED-TOOL",
+        reason: `Tool '${toolName}' is not an approved mutating tool for protected path.`,
+    };
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/gateway/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGxE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,OAAwB;IACnD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gCAAgC;YACxC,MAAM,EAAE,2FAA2F;SACpG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,yBAAyB;QACjC,MAAM,EAAE,SAAS,QAAQ,wDAAwD;KAClF,CAAC;AACJ,CAAC"}

package/dist/gateway/index.d.ts

@@ -0,0 +1,4 @@
+export type { MutationMode, MutationRequest, GatewayRuleId, GatewayDecision } from "./types.js";
+export { PROTECTED_PATH_PREFIXES, PROTECTED_METADATA_SUFFIX, APPROVED_MUTATING_TOOLS, isProtectedPath, isApprovedMutatingTool, } from "./registry.js";
+export { gatewayCheck } from "./gateway.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/gateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/gateway/index.js

@@ -0,0 +1,3 @@
+export { PROTECTED_PATH_PREFIXES, PROTECTED_METADATA_SUFFIX, APPROVED_MUTATING_TOOLS, isProtectedPath, isApprovedMutatingTool, } from "./registry.js";
+export { gatewayCheck } from "./gateway.js";
+//# sourceMappingURL=index.js.map

package/dist/gateway/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/gateway/registry.d.ts

@@ -0,0 +1,18 @@
+/** Protected lifecycle artifact path prefixes. */
+export declare const PROTECTED_PATH_PREFIXES: readonly string[];
+/** Protected file suffix — always requires an approved tool. */
+export declare const PROTECTED_METADATA_SUFFIX = "metadata.yaml";
+/**
+ * Approved mutating tools — derived from the canonical registry's mutating flag.
+ * Only tools in this set may write to PROTECTED_PATH_PREFIXES.
+ */
+export declare const APPROVED_MUTATING_TOOLS: ReadonlySet<string>;
+/** Return true when `targetPath` is a protected lifecycle artifact. */
+export declare function isProtectedPath(targetPath: string): boolean;
+/**
+ * Return true when `toolName` (canonical OR deprecated alias) is an approved mutating tool.
+ * Alias resolution happens here at the gateway boundary, matching OI-005 policy:
+ * "deprecated aliases resolve at gateway boundary only".
+ */
+export declare function isApprovedMutatingTool(toolName: string): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/gateway/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/gateway/registry.ts"],"names":[],"mappings":"AASA,kDAAkD;AAClD,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAKpD,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAAuB,CAAC;AAEhF,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGhE"}

package/dist/gateway/registry.js

@@ -0,0 +1,40 @@
+/**
+ * Mutation boundary registry — SEC-12D / OI-009 / DAC-N02.
+ *
+ * The approved-mutating-tool set is DERIVED from the canonical tool registry
+ * (tools/registry.ts) so there is a single source of truth. Do not hardcode a
+ * second list here.
+ */
+import { MUTATING_TOOL_NAMES, resolveToolName } from "../tools/registry.js";
+/** Protected lifecycle artifact path prefixes. */
+export const PROTECTED_PATH_PREFIXES = [
+    ".jcr-adk/state",
+    ".jcr-adk/reports",
+    ".jcr-adk/logs",
+    ".jcr-adk/specs",
+];
+/** Protected file suffix — always requires an approved tool. */
+export const PROTECTED_METADATA_SUFFIX = "metadata.yaml";
+/**
+ * Approved mutating tools — derived from the canonical registry's mutating flag.
+ * Only tools in this set may write to PROTECTED_PATH_PREFIXES.
+ */
+export const APPROVED_MUTATING_TOOLS = MUTATING_TOOL_NAMES;
+/** Return true when `targetPath` is a protected lifecycle artifact. */
+export function isProtectedPath(targetPath) {
+    const normalized = targetPath.replace(/\\/g, "/");
+    if (PROTECTED_PATH_PREFIXES.some((prefix) => normalized === prefix || normalized.startsWith(`${prefix}/`))) {
+        return true;
+    }
+    return normalized.endsWith(PROTECTED_METADATA_SUFFIX);
+}
+/**
+ * Return true when `toolName` (canonical OR deprecated alias) is an approved mutating tool.
+ * Alias resolution happens here at the gateway boundary, matching OI-005 policy:
+ * "deprecated aliases resolve at gateway boundary only".
+ */
+export function isApprovedMutatingTool(toolName) {
+    const resolved = resolveToolName(toolName);
+    return resolved.ok && APPROVED_MUTATING_TOOLS.has(resolved.canonical);
+}
+//# sourceMappingURL=registry.js.map

package/dist/gateway/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/gateway/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5E,kDAAkD;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;CACjB,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAEzD;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,mBAAmB,CAAC;AAEhF,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,EAAE,IAAI,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC"}

package/dist/gateway/types.d.ts

@@ -0,0 +1,21 @@
+/**
+ * MutationGateway contract types.
+ *
+ * SEC-12R / DAC-N02: All writes to protected lifecycle artifacts must pass
+ * through this gateway. Direct writes are always denied.
+ */
+export type MutationMode = "direct_write" | "tool";
+export interface MutationRequest {
+    readonly mode: MutationMode;
+    readonly toolName?: string;
+    readonly targetPath: string;
+}
+export type GatewayRuleId = "DAC-003-DIRECT-LIFECYCLE-WRITE" | "DAC-003-UNAPPROVED-TOOL";
+export type GatewayDecision = {
+    readonly allowed: true;
+} | {
+    readonly allowed: false;
+    readonly ruleId: GatewayRuleId;
+    readonly reason: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/gateway/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GACrB,gCAAgC,GAChC,yBAAyB,CAAC;AAE9B,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/gateway/types.js

@@ -0,0 +1,8 @@
+/**
+ * MutationGateway contract types.
+ *
+ * SEC-12R / DAC-N02: All writes to protected lifecycle artifacts must pass
+ * through this gateway. Direct writes are always denied.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/gateway/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+export type { AdkConfig, AdkConfigFile, AdkConfigFileV1, AdkConfigParseResult, SupportedConfigVersion, } from "./config.js";
+export { CURRENT_CONFIG_VERSION, DEFAULT_ARTIFACT_ROOT, SUPPORTED_CONFIG_VERSIONS, defaultAdkConfigFile, parseAdkConfigFile, } from "./config.js";
+export type { AdkContext, CreateAdkContextInput } from "./context.js";
+export { createAdkContext, resolveAdkConfig } from "./context.js";
+export type { CorrelationIds, CreateCorrelationInput } from "./correlation.js";
+export { createCorrelationIds, generateRequestId, generateRunId, generateSpecId, propagateCorrelationIds, } from "./correlation.js";
+export type { ArtifactKind, ArtifactRef } from "./artifact-ref.js";
+export { createArtifactRef } from "./artifact-ref.js";
+export type { EventKind, AdkEventBase, ToolInvocation, ToolInvocationResult, } from "./types/events.js";
+export type { AdkErrorCode, AdkError, AdkErrorSeverity } from "./types/errors.js";
+export { adkError, isAdkError, isFatal, FAIL_CLOSED_CODES } from "./types/errors.js";
+export type { AdkPaths, PathResolveResult } from "./paths.js";
+export { joinWithinRoot, resolveAdkPaths, resolveArtifactPath, resolveArtifactRef, resolveGateReportPath, resolveSpecDir, } from "./paths.js";
+export type { MutationMode, MutationRequest, GatewayRuleId, GatewayDecision, } from "./gateway/index.js";
+export { PROTECTED_PATH_PREFIXES, PROTECTED_METADATA_SUFFIX, APPROVED_MUTATING_TOOLS, isProtectedPath, isApprovedMutatingTool, gatewayCheck, } from "./gateway/index.js";
+export type { ToolRegistryEntry, ResolveToolResult } from "./tools/registry.js";
+export { TOOL_REGISTRY, TOOL_ALIASES, MUTATING_TOOL_NAMES, resolveToolName, getToolEntry, isMutatingTool, } from "./tools/registry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,SAAS,EACT,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAElE,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,YAAY,EACV,SAAS,EACT,YAAY,EACZ,cAAc,EACd,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAErF,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,cAAc,GACf,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export { CURRENT_CONFIG_VERSION, DEFAULT_ARTIFACT_ROOT, SUPPORTED_CONFIG_VERSIONS, defaultAdkConfigFile, parseAdkConfigFile, } from "./config.js";
+export { createAdkContext, resolveAdkConfig } from "./context.js";
+export { createCorrelationIds, generateRequestId, generateRunId, generateSpecId, propagateCorrelationIds, } from "./correlation.js";
+export { createArtifactRef } from "./artifact-ref.js";
+export { adkError, isAdkError, isFatal, FAIL_CLOSED_CODES } from "./types/errors.js";
+export { joinWithinRoot, resolveAdkPaths, resolveArtifactPath, resolveArtifactRef, resolveGateReportPath, resolveSpecDir, } from "./paths.js";
+export { PROTECTED_PATH_PREFIXES, PROTECTED_METADATA_SUFFIX, APPROVED_MUTATING_TOOLS, isProtectedPath, isApprovedMutatingTool, gatewayCheck, } from "./gateway/index.js";
+export { TOOL_REGISTRY, TOOL_ALIASES, MUTATING_TOOL_NAMES, resolveToolName, getToolEntry, isMutatingTool, } from "./tools/registry.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGlE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAUtD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGrF,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAQpB,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,cAAc,GACf,MAAM,qBAAqB,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,36 @@
+import type { AdkConfig } from "./config.js";
+import type { ArtifactRef } from "./artifact-ref.js";
+export interface AdkPaths {
+    readonly adkDir: string;
+    readonly configDir: string;
+    readonly configFilePath: string;
+    readonly specsDir: string;
+    readonly logsDir: string;
+    readonly adkEventsPath: string;
+    readonly reportsDir: string;
+    readonly gateReportsDir: string;
+}
+export type PathResolveResult = {
+    readonly ok: true;
+    readonly absolutePath: string;
+    readonly relativePath: string;
+} | {
+    readonly ok: false;
+    readonly reason: "PATH_ESCAPE" | "INVALID_SEGMENT";
+    readonly message: string;
+};
+/** Resolve standard `.jcr-adk` layout from workspace root. */
+export declare function resolveAdkPaths(workspaceRoot: string, artifactRoot?: string): AdkPaths;
+/** Resolve a path segment chain without escaping workspace root. */
+export declare function joinWithinRoot(workspaceRoot: string, ...segments: string[]): PathResolveResult;
+/** Resolve spec directory: `.jcr-adk/specs/{specId}`. */
+export declare function resolveSpecDir(config: AdkConfig, specId: string): PathResolveResult;
+/** Resolve gate report path under reports/gate. */
+export declare function resolveGateReportPath(config: AdkConfig, reportName: string): PathResolveResult;
+/** Resolve relative artifact path to absolute, enforcing workspace boundary. */
+export declare function resolveArtifactPath(workspaceRoot: string, artifactPath: string): PathResolveResult;
+/** Build ArtifactRef with workspace-safe absolute path. */
+export declare function resolveArtifactRef(workspaceRoot: string, ref: Pick<ArtifactRef, "kind" | "path"> & Partial<ArtifactRef>): PathResolveResult & {
+    readonly ref?: ArtifactRef;
+};
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzG,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,SAAa,GAAG,QAAQ,CAgB1F;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,CA+B9F;AAED,yDAAyD;AACzD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,GACb,iBAAiB,CAEnB;AAED,mDAAmD;AACnD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,GACjB,iBAAiB,CAQnB;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,iBAAiB,CAkBnB;AAED,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAC7D,iBAAiB,GAAG;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAA;CAAE,CAWpD"}

package/dist/paths.js

@@ -0,0 +1,94 @@
+import path from "node:path";
+import { createArtifactRef } from "./artifact-ref.js";
+/** Resolve standard `.jcr-adk` layout from workspace root. */
+export function resolveAdkPaths(workspaceRoot, artifactRoot = ".jcr-adk") {
+    const joined = joinWithinRoot(workspaceRoot, artifactRoot);
+    if (!joined.ok) {
+        throw new Error(`failed to resolve adk paths: ${joined.message}`);
+    }
+    const adkDir = joined.absolutePath;
+    return {
+        adkDir,
+        configDir: path.join(adkDir, "config"),
+        configFilePath: path.join(adkDir, "config", "adk.json"),
+        specsDir: path.join(adkDir, "specs"),
+        logsDir: path.join(adkDir, "logs"),
+        adkEventsPath: path.join(adkDir, "logs", "adk-events.jsonl"),
+        reportsDir: path.join(adkDir, "reports"),
+        gateReportsDir: path.join(adkDir, "reports", "gate"),
+    };
+}
+/** Resolve a path segment chain without escaping workspace root. */
+export function joinWithinRoot(workspaceRoot, ...segments) {
+    const root = path.resolve(workspaceRoot);
+    for (const segment of segments) {
+        if (segment.includes("\0") ||
+            path.isAbsolute(segment) ||
+            segment.split(/[/\\]/).some((part) => part === "..")) {
+            return {
+                ok: false,
+                reason: "INVALID_SEGMENT",
+                message: `invalid path segment: ${segment}`,
+            };
+        }
+    }
+    const absolutePath = path.resolve(root, ...segments);
+    if (!isPathWithinRoot(root, absolutePath)) {
+        return {
+            ok: false,
+            reason: "PATH_ESCAPE",
+            message: `path escapes workspace root: ${absolutePath}`,
+        };
+    }
+    return {
+        ok: true,
+        absolutePath,
+        relativePath: path.relative(root, absolutePath),
+    };
+}
+/** Resolve spec directory: `.jcr-adk/specs/{specId}`. */
+export function resolveSpecDir(config, specId) {
+    return joinWithinRoot(config.workspaceRoot, config.artifactRoot, "specs", specId);
+}
+/** Resolve gate report path under reports/gate. */
+export function resolveGateReportPath(config, reportName) {
+    return joinWithinRoot(config.workspaceRoot, config.artifactRoot, "reports", "gate", reportName);
+}
+/** Resolve relative artifact path to absolute, enforcing workspace boundary. */
+export function resolveArtifactPath(workspaceRoot, artifactPath) {
+    if (path.isAbsolute(artifactPath)) {
+        const root = path.resolve(workspaceRoot);
+        if (!isPathWithinRoot(root, artifactPath)) {
+            return {
+                ok: false,
+                reason: "PATH_ESCAPE",
+                message: `absolute path escapes workspace root: ${artifactPath}`,
+            };
+        }
+        return {
+            ok: true,
+            absolutePath: artifactPath,
+            relativePath: path.relative(root, artifactPath),
+        };
+    }
+    return joinWithinRoot(workspaceRoot, artifactPath);
+}
+/** Build ArtifactRef with workspace-safe absolute path. */
+export function resolveArtifactRef(workspaceRoot, ref) {
+    const resolved = resolveArtifactPath(workspaceRoot, ref.path);
+    if (!resolved.ok)
+        return resolved;
+    return {
+        ...resolved,
+        ref: createArtifactRef(ref.kind, resolved.absolutePath, {
+            sha256: ref.sha256,
+            generatedBy: ref.generatedBy,
+            createdAt: ref.createdAt ?? new Date().toISOString(),
+        }),
+    };
+}
+function isPathWithinRoot(root, target) {
+    const normalizedRoot = root.endsWith(path.sep) ? root : `${root}${path.sep}`;
+    return target === root || target.startsWith(normalizedRoot);
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAiBtD,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,YAAY,GAAG,UAAU;IAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;IACnC,OAAO;QACL,MAAM;QACN,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;QACtC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QACvD,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;QACpC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QAClC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC;QAC5D,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QACxC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,aAAqB,EAAE,GAAG,QAAkB;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EACpD,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,yBAAyB,OAAO,EAAE;aAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,gCAAgC,YAAY,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,YAAY;QACZ,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAC5B,MAAiB,EACjB,MAAc;IAEd,OAAO,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,qBAAqB,CACnC,MAAiB,EACjB,UAAkB;IAElB,OAAO,cAAc,CACnB,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,YAAY,EACnB,SAAS,EACT,MAAM,EACN,UAAU,CACX,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,aAAqB,EACrB,YAAoB;IAEpB,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,yCAAyC,YAAY,EAAE;aACjE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,YAAY;YAC1B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,GAA8D;IAE9D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO;QACL,GAAG,QAAQ;QACX,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE;YACtD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7E,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAC9D,CAAC"}

package/dist/tools/registry.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Canonical Tool Registry — OI-005 / 10-tool §Tool Registry Naming SSOT.
+ *
+ * This is the single source of truth for tool names and their mutating flag.
+ * The mutation gateway derives APPROVED_MUTATING_TOOLS from this registry so
+ * the two can never diverge (review lesson from PR-008).
+ *
+ * Ported 1:1 from spikes/core-p0-verify/src/lib/tool-registry.ts.
+ */
+export interface ToolRegistryEntry {
+    readonly canonical: string;
+    readonly role: string;
+    readonly mutating: boolean;
+}
+/** 13 canonical tools. */
+export declare const TOOL_REGISTRY: readonly ToolRegistryEntry[];
+/** Deprecated aliases → canonical (OI-005 정리). Resolved at gateway boundary only. */
+export declare const TOOL_ALIASES: Readonly<Record<string, string>>;
+export type ResolveToolResult = {
+    readonly ok: true;
+    readonly canonical: string;
+    readonly resolvedFromAlias: boolean;
+} | {
+    readonly ok: false;
+    readonly reason: "UNKNOWN_TOOL";
+    readonly message: string;
+};
+/** Resolve a (possibly aliased) tool name to its canonical form. Fail-closed on unknown. */
+export declare function resolveToolName(name: string): ResolveToolResult;
+/** Look up the registry entry for a name (after alias resolution). */
+export declare function getToolEntry(name: string): ToolRegistryEntry | undefined;
+/** True when the tool exists and is flagged mutating in the registry. */
+export declare function isMutatingTool(name: string): boolean;
+/** Set of canonical names flagged mutating — derived SSOT for the gateway. */
+export declare const MUTATING_TOOL_NAMES: ReadonlySet<string>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/tools/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,0BAA0B;AAC1B,eAAO,MAAM,aAAa,EAAE,SAAS,iBAAiB,EAcrD,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKzD,CAAC;AAKF,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtF,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAS/D;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAGxE;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAEnD,CAAC"}

package/dist/tools/registry.js

@@ -0,0 +1,57 @@
+/**
+ * Canonical Tool Registry — OI-005 / 10-tool §Tool Registry Naming SSOT.
+ *
+ * This is the single source of truth for tool names and their mutating flag.
+ * The mutation gateway derives APPROVED_MUTATING_TOOLS from this registry so
+ * the two can never diverge (review lesson from PR-008).
+ *
+ * Ported 1:1 from spikes/core-p0-verify/src/lib/tool-registry.ts.
+ */
+/** 13 canonical tools. */
+export const TOOL_REGISTRY = [
+    { canonical: "adk_spec_read", role: "SPEC 조회", mutating: false },
+    { canonical: "adk_spec_list", role: "SPEC 목록", mutating: false },
+    { canonical: "adk_progress_append", role: "progress append", mutating: true },
+    { canonical: "adk_acceptance_update", role: "acceptance trace update", mutating: true },
+    { canonical: "adk_gate_run", role: "gate 실행 요청", mutating: true },
+    { canonical: "adk_policy_check", role: "policy check", mutating: false },
+    { canonical: "adk_diagnostics_collect", role: "diagnostics 수집", mutating: true },
+    { canonical: "adk_decision_record", role: "decision 기록", mutating: true },
+    { canonical: "adk_codemap_query", role: "codemap 조회", mutating: false },
+    { canonical: "adk_codemap_update", role: "codemap 갱신", mutating: true },
+    { canonical: "adk_diff_summary", role: "diff 요약", mutating: false },
+    { canonical: "adk_doctor_run", role: "doctor 실행", mutating: true },
+    { canonical: "adk_sync_prepare", role: "sync 준비", mutating: true },
+];
+/** Deprecated aliases → canonical (OI-005 정리). Resolved at gateway boundary only. */
+export const TOOL_ALIASES = {
+    adk_read_spec: "adk_spec_read",
+    adk_append_progress: "adk_progress_append",
+    adk_run_gate: "adk_gate_run",
+    adk_check_policy: "adk_policy_check",
+};
+const _canonicalSet = new Set(TOOL_REGISTRY.map((t) => t.canonical));
+const _entryByName = new Map(TOOL_REGISTRY.map((t) => [t.canonical, t]));
+/** Resolve a (possibly aliased) tool name to its canonical form. Fail-closed on unknown. */
+export function resolveToolName(name) {
+    if (_canonicalSet.has(name)) {
+        return { ok: true, canonical: name, resolvedFromAlias: false };
+    }
+    const alias = TOOL_ALIASES[name];
+    if (alias) {
+        return { ok: true, canonical: alias, resolvedFromAlias: true };
+    }
+    return { ok: false, reason: "UNKNOWN_TOOL", message: `Unknown tool name: ${name}` };
+}
+/** Look up the registry entry for a name (after alias resolution). */
+export function getToolEntry(name) {
+    const resolved = resolveToolName(name);
+    return resolved.ok ? _entryByName.get(resolved.canonical) : undefined;
+}
+/** True when the tool exists and is flagged mutating in the registry. */
+export function isMutatingTool(name) {
+    return getToolEntry(name)?.mutating ?? false;
+}
+/** Set of canonical names flagged mutating — derived SSOT for the gateway. */
+export const MUTATING_TOOL_NAMES = new Set(TOOL_REGISTRY.filter((t) => t.mutating).map((t) => t.canonical));
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,aAAa,GAAiC;IACzD,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,EAAE,SAAS,EAAE,uBAAuB,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvF,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjE,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxE,EAAE,SAAS,EAAE,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;IAChF,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzE,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvE,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvE,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE;IACnE,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE;IAClE,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;CACnE,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAqC;IAC5D,aAAa,EAAE,eAAe;IAC9B,mBAAmB,EAAE,qBAAqB;IAC1C,YAAY,EAAE,cAAc;IAC5B,gBAAgB,EAAE,kBAAkB;CACrC,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAMzE,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,IAAI,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAC7D,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAChE,CAAC"}

package/dist/types/errors.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Fail-closed error taxonomy (T-CORE-06 / G-05, SEC-01).
+ *
+ * Every recoverable failure in the ADK maps to one of these codes so callers
+ * can branch deterministically and audit logs stay consistent across packages.
+ * Codes are grouped by subsystem; keep in sync with package-level failure types
+ * (state AppendFailure, verifier integrity, gateway decisions, doctor checks).
+ */
+export type AdkErrorCode = "CONFIG_INVALID" | "CONFIG_UNSUPPORTED_VERSION" | "PATH_DENIED" | "PATH_ESCAPE" | "EVENT_APPEND_FAILED" | "EVENT_INVALID" | "EVENT_LOG_CORRUPT" | "RUN_ID_MISMATCH" | "IO_ERROR" | "POLICY_DENIED" | "MUTATION_DENIED" | "UNKNOWN_TOOL" | "GATE_FAILED" | "REPORT_HASH_MISMATCH" | "COMMAND_NOT_PERMITTED" | "SDK_INCOMPATIBLE";
+/**
+ * Severity classifies whether a failure must abort the operation (fail-closed)
+ * or can be surfaced as a warning. Security/integrity failures are always fatal.
+ */
+export type AdkErrorSeverity = "fatal" | "warning";
+export interface AdkError {
+    readonly code: AdkErrorCode;
+    readonly message: string;
+    readonly severity: AdkErrorSeverity;
+    readonly cause?: unknown;
+}
+/**
+ * Codes that must ALWAYS fail closed (abort), regardless of caller intent.
+ * Used by `adkError` to default severity and by guards in security paths.
+ */
+export declare const FAIL_CLOSED_CODES: ReadonlySet<AdkErrorCode>;
+/**
+ * Build an AdkError.
+ *
+ * Severity rules:
+ *   - fail-closed codes always default to "fatal" and CANNOT be downgraded to
+ *     "warning" — doing so would allow security violations to be silently ignored.
+ *   - non-fail-closed codes default to "warning" but may be upgraded to "fatal".
+ */
+export declare function adkError(code: AdkErrorCode, message: string, options?: {
+    readonly cause?: unknown;
+    readonly severity?: AdkErrorSeverity;
+}): AdkError;
+/** Type guard for AdkError-shaped values. */
+export declare function isAdkError(value: unknown): value is AdkError;
+/** True when the error must abort the operation (fail-closed). */
+export declare function isFatal(error: AdkError): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/types/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAEpB,gBAAgB,GAChB,4BAA4B,GAE5B,aAAa,GACb,aAAa,GAEb,qBAAqB,GACrB,eAAe,GACf,mBAAmB,GACnB,iBAAiB,GACjB,UAAU,GAEV,eAAe,GACf,iBAAiB,GACjB,cAAc,GAEd,aAAa,GACb,sBAAsB,GAEtB,uBAAuB,GAEvB,kBAAkB,CAAC;AAEvB;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,SAAS,CAAC;AAEnD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,YAAY,CAgBtD,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;CAAO,GAC/E,QAAQ,CAkBV;AAED,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAQ5D;AAED,kEAAkE;AAClE,wBAAgB,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAEhD"}

package/dist/types/errors.js

@@ -0,0 +1,60 @@
+/**
+ * Codes that must ALWAYS fail closed (abort), regardless of caller intent.
+ * Used by `adkError` to default severity and by guards in security paths.
+ */
+export const FAIL_CLOSED_CODES = new Set([
+    "PATH_DENIED",
+    "PATH_ESCAPE",
+    "EVENT_APPEND_FAILED",
+    "EVENT_INVALID",
+    "EVENT_LOG_CORRUPT",
+    "IO_ERROR", // IO failure breaks the audit trail — must abort, not warn
+    "RUN_ID_MISMATCH",
+    "POLICY_DENIED",
+    "MUTATION_DENIED",
+    "UNKNOWN_TOOL",
+    "GATE_FAILED", // gate verifier failure must abort — cannot proceed without gate
+    "REPORT_HASH_MISMATCH",
+    "COMMAND_NOT_PERMITTED",
+    "SDK_INCOMPATIBLE",
+    "CONFIG_UNSUPPORTED_VERSION",
+]);
+/**
+ * Build an AdkError.
+ *
+ * Severity rules:
+ *   - fail-closed codes always default to "fatal" and CANNOT be downgraded to
+ *     "warning" — doing so would allow security violations to be silently ignored.
+ *   - non-fail-closed codes default to "warning" but may be upgraded to "fatal".
+ */
+export function adkError(code, message, options = {}) {
+    const isFailClosed = FAIL_CLOSED_CODES.has(code);
+    const requestedSeverity = options.severity;
+    let severity;
+    if (isFailClosed) {
+        // Downgrade of a fail-closed code is a programming error — silently enforce fatal.
+        severity = "fatal";
+    }
+    else {
+        severity = requestedSeverity ?? "warning";
+    }
+    return {
+        code,
+        message,
+        severity,
+        ...(options.cause !== undefined ? { cause: options.cause } : {}),
+    };
+}
+/** Type guard for AdkError-shaped values. */
+export function isAdkError(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        "code" in value &&
+        "message" in value &&
+        "severity" in value);
+}
+/** True when the error must abort the operation (fail-closed). */
+export function isFatal(error) {
+    return error.severity === "fatal";
+}
+//# sourceMappingURL=errors.js.map

package/dist/types/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/types/errors.ts"],"names":[],"mappings":"AA8CA;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B,IAAI,GAAG,CAAC;IAClE,aAAa;IACb,aAAa;IACb,qBAAqB;IACrB,eAAe;IACf,mBAAmB;IACnB,UAAU,EAAY,2DAA2D;IACjF,iBAAiB;IACjB,eAAe;IACf,iBAAiB;IACjB,cAAc;IACd,aAAa,EAAW,iEAAiE;IACzF,sBAAsB;IACtB,uBAAuB;IACvB,kBAAkB;IAClB,4BAA4B;CAC7B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAkB,EAClB,OAAe,EACf,UAA8E,EAAE;IAEhF,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAE3C,IAAI,QAA0B,CAAC;IAC/B,IAAI,YAAY,EAAE,CAAC;QACjB,mFAAmF;QACnF,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,iBAAiB,IAAI,SAAS,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO;QACP,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,SAAS,IAAI,KAAK;QAClB,UAAU,IAAI,KAAK,CACpB,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,OAAO,CAAC,KAAe;IACrC,OAAO,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;AACpC,CAAC"}

package/dist/types/events.d.ts

@@ -0,0 +1,28 @@
+import type { CorrelationIds } from "../correlation.js";
+/** Canonical event kinds — owned by core. */
+export type EventKind = "run.started" | "run.completed" | "run.failed" | "tool.invoked" | "tool.completed" | "tool.failed" | "policy.denied" | "policy.approval.required" | "policy.approved" | "gate.report" | "mutation.denied";
+/** Base event envelope — persisted shape extends this in state package. */
+export interface AdkEventBase {
+    readonly id: string;
+    readonly kind: EventKind;
+    readonly timestamp: string;
+    readonly specId: string;
+    readonly runId: string;
+    readonly requestId: string;
+    readonly payload: Record<string, unknown>;
+}
+/** Bridge contract between CLI/gateway and runner-sdk — owned by core. */
+export interface ToolInvocation {
+    readonly toolName: string;
+    readonly args: Record<string, unknown>;
+    readonly correlation: CorrelationIds;
+    /** Policy-evaluated mutation target; forwarded to mutating tools after boundary allow. */
+    readonly targetPath?: string;
+}
+export interface ToolInvocationResult {
+    readonly toolName: string;
+    readonly success: boolean;
+    readonly output?: unknown;
+    readonly error?: string;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/types/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/types/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GACjB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,iBAAiB,GACjB,aAAa,GACb,iBAAiB,CAAC;AAEtB,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/types/events.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=events.js.map

package/dist/types/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/types/events.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@jcr-adk/core",
+  "version": "2.0.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "devDependencies": {
+    "tsx": "^4.19.4",
+    "typescript": "^5.8.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "description": "JCR ADK (Jason Cursor ADK) — core",
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "node --import tsx --test src/config.test.ts src/gateway/gateway.test.ts src/tools/registry.test.ts src/types/errors.test.ts",
+    "build": "tsc -p tsconfig.build.json"
+  }
+}