@jeger-ai/opengantry 1.0.0

package/dist/cli/commands/upgrade.js

@@ -0,0 +1,89 @@
+import { CLI_NAME } from "../lib/constants.js";
+import { logError, logInfo, setExitCode } from "../lib/cli-io.js";
+import { getRepoRoot } from "../lib/git.js";
+import { resolveTemplateRootFromModule } from "../lib/integration-compat.js";
+import { runUpgradeApply } from "../lib/upgrade-apply.js";
+import { runUpgradePlan } from "../lib/upgrade-plan.js";
+import { GapmanUserError } from "../lib/user-error.js";
+export function runUpgrade(options = {}) {
+    let repoRoot;
+    try {
+        repoRoot = getRepoRoot(options.cwd);
+    }
+    catch (e) {
+        logError(e instanceof Error ? e.message.replace(`${CLI_NAME}: `, "") : String(e));
+        setExitCode(2);
+        return;
+    }
+    let templatesRoot;
+    try {
+        templatesRoot = resolveTemplateRootFromModule();
+    }
+    catch (e) {
+        logError(e instanceof Error ? e.message : String(e));
+        setExitCode(2);
+        return;
+    }
+    if (options.apply) {
+        void runUpgradeApply({
+            repoRoot,
+            mission: options.mission,
+            templatesRoot,
+            json: options.json,
+        })
+            .then((result) => {
+            if (options.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            if (result.status === "blocked") {
+                setExitCode(2);
+            }
+        })
+            .catch((e) => {
+            handleUpgradeError(e, options.json);
+        });
+        return;
+    }
+    try {
+        const result = runUpgradePlan({
+            repoRoot,
+            templatesRoot,
+            msn: options.msn,
+            dryRun: options.dryRun,
+            json: options.json,
+        });
+        if (options.json) {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        if (result.status === "downgrade_blocked") {
+            logError(result.message ?? "downgrade blocked");
+            setExitCode(2);
+            return;
+        }
+        if (result.status === "already_current") {
+            logInfo(result.message ?? "already current");
+            return;
+        }
+        if (result.status === "no_changes") {
+            logInfo(result.message ?? "no changes");
+            return;
+        }
+    }
+    catch (e) {
+        handleUpgradeError(e, options.json);
+    }
+}
+function handleUpgradeError(e, json) {
+    if (e instanceof GapmanUserError) {
+        const payload = { error: e.code, message: e.message, hint: e.hint };
+        if (json)
+            console.log(JSON.stringify(payload, null, 2));
+        else
+            logError(e.message + (e.hint ? `\nFix: ${e.hint}` : ""));
+        setExitCode(2);
+        return;
+    }
+    logError(e instanceof Error ? e.message : String(e));
+    setExitCode(2);
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/cli/commands/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../../src/cli/commands/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAWvD,MAAM,UAAU,UAAU,CAAC,UAA0B,EAAE;IACrD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,6BAA6B,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,eAAe,CAAC;YACnB,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa;YACb,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC;aACC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,WAAW,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACX,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACL,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,QAAQ;YACR,aAAa;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YAC1C,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,mBAAmB,CAAC,CAAC;YAChD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU,EAAE,IAAc;IACpD,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;YACnD,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,WAAW,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC"}

package/dist/cli/commands/verify.d.ts

@@ -0,0 +1,6 @@
+import type { VerifyOptions } from "../lib/verify-types.js";
+export type { VerifyOptions } from "../lib/verify-types.js";
+export declare function runVerify(options: VerifyOptions): Promise<void>;
+/** Exposed for tests that need silent phase evaluation without fix wrapper. */
+export declare function evaluateVerifyForMission(options: VerifyOptions): import("../lib/verify-engine.js").VerifyPhaseResult;
+//# sourceMappingURL=verify.d.ts.map

package/dist/cli/commands/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/verify.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAK5D,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrE;AAED,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,aAAa,uDAI9D"}

package/dist/cli/commands/verify.js

@@ -0,0 +1,33 @@
+import { assertMissionGatePresent, parseMissionFile } from "../lib/mission-parser.js";
+import { runVerifyBreakGlass, runVerifyPhasesFromEngine } from "../lib/verify-flow.js";
+import { runVerifyWithFix } from "../lib/verify-repair.js";
+import { evaluateVerifyPhases } from "../lib/verify-engine.js";
+import { loadWorkspace } from "../lib/workspace.js";
+import { reportUserFacingError } from "../lib/user-error.js";
+export async function runVerify(options) {
+    try {
+        const { root } = loadWorkspace();
+        const mission = parseMissionFile(root, options.mission);
+        const missionArg = options.mission;
+        if (options.breakGlass === true) {
+            runVerifyBreakGlass(root, mission, options);
+            return;
+        }
+        assertMissionGatePresent(mission);
+        if (options.fix === true) {
+            await runVerifyWithFix(root, mission, missionArg, options);
+            return;
+        }
+        runVerifyPhasesFromEngine(root, mission, missionArg, options);
+    }
+    catch (e) {
+        reportUserFacingError(e);
+    }
+}
+/** Exposed for tests that need silent phase evaluation without fix wrapper. */
+export function evaluateVerifyForMission(options) {
+    const { root } = loadWorkspace();
+    const mission = parseMissionFile(root, options.mission);
+    return evaluateVerifyPhases(root, mission, options);
+}
+//# sourceMappingURL=verify.js.map

package/dist/cli/commands/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/cli/commands/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAI7D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;QAEnC,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChC,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,OAAsB;IAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { buildProgram } from "./program.js";
+import { resetOutputContext } from "./lib/output-context.js";
+import { reportUserFacingError } from "./lib/user-error.js";
+function handleFatal(error) {
+    if (error instanceof Error && error.message.includes("invalid audience")) {
+        return;
+    }
+    reportUserFacingError(error);
+}
+resetOutputContext();
+buildProgram().parseAsync(process.argv).catch(handleFatal);
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IACD,qBAAqB,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,kBAAkB,EAAE,CAAC;AACrB,YAAY,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC"}

package/dist/cli/lib/agent-error.d.ts

@@ -0,0 +1,20 @@
+import type { ForbiddenViolation } from "./forbidden-scan.js";
+import type { RuntimeExecResult } from "./runtime-exec-orchestrator.js";
+import type { ResolvedRuntimeEnv } from "./runtime-env.js";
+export interface AgentErrorPayload {
+    v: 1;
+    ts: string;
+    status: RuntimeExecResult["status"];
+    exit_code: number;
+    flight_id: string;
+    msn_id: string;
+    mission_file: string;
+    skill_key: string;
+    error_file: string;
+    violations: ForbiddenViolation[];
+    summary: string;
+    remediation: string[];
+}
+export declare function agentErrorAbsolutePath(repoRoot: string): string;
+export declare function writeAgentErrorPayload(repoRoot: string, resolved: ResolvedRuntimeEnv, result: RuntimeExecResult): AgentErrorPayload;
+//# sourceMappingURL=agent-error.d.ts.map

package/dist/cli/lib/agent-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-error.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/agent-error.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,CAAC,CAAC;IACL,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAsCD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,iBAAiB,GACxB,iBAAiB,CAmBnB"}

package/dist/cli/lib/agent-error.js

@@ -0,0 +1,58 @@
+import fs from "node:fs";
+import path from "node:path";
+import { REL_AGENT_ERROR_FILE } from "./constants.js";
+export function agentErrorAbsolutePath(repoRoot) {
+    return path.join(repoRoot, REL_AGENT_ERROR_FILE);
+}
+function buildSummary(result) {
+    switch (result.status) {
+        case "forbidden_zone_violation":
+            return `Forbidden-zone violation: ${String(result.violations.length)} path(s) changed outside policy.`;
+        case "timeout":
+            return "Worker exceeded the configured timeout and was terminated.";
+        case "worker_failed":
+            return `Worker exited with code ${String(result.workerExitCode ?? "unknown")}.`;
+        case "runtime_error":
+            return "Runtime orchestration failed before or during worker execution.";
+        default:
+            return `Flight ended with status ${result.status}.`;
+    }
+}
+function buildRemediation(result, resolved) {
+    const steps = [];
+    if (result.status === "forbidden_zone_violation") {
+        for (const v of result.violations.slice(0, 5)) {
+            steps.push(`Revert or avoid changes to forbidden path: ${v.path} (${v.kind})`);
+        }
+        steps.push("Confine edits to GXT_TMVC_ROOTS unless a Context Request is approved in WORKER_LOG.md");
+    }
+    if (result.status === "timeout") {
+        steps.push("Increase --timeout-ms or reduce worker scope; retry with a smaller command");
+    }
+    if (result.status === "worker_failed") {
+        steps.push("Inspect worker stderr in WORKER_LOG.md flight JSONL and fix the failing command");
+    }
+    steps.push(`Mission: ${resolved.mission_file}; skill: ${resolved.skill_key}`);
+    return steps;
+}
+export function writeAgentErrorPayload(repoRoot, resolved, result) {
+    const errorFile = agentErrorAbsolutePath(repoRoot);
+    fs.mkdirSync(path.dirname(errorFile), { recursive: true });
+    const payload = {
+        v: 1,
+        ts: new Date().toISOString(),
+        status: result.status,
+        exit_code: result.exitCode,
+        flight_id: result.flightId,
+        msn_id: resolved.msn_id,
+        mission_file: resolved.mission_file,
+        skill_key: resolved.skill_key,
+        error_file: errorFile,
+        violations: result.violations,
+        summary: buildSummary(result),
+        remediation: buildRemediation(result, resolved),
+    };
+    fs.writeFileSync(errorFile, JSON.stringify(payload, null, 2), "utf8");
+    return payload;
+}
+//# sourceMappingURL=agent-error.js.map

package/dist/cli/lib/agent-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-error.js","sourceRoot":"","sources":["../../../src/cli/lib/agent-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAoBtD,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,0BAA0B;YAC7B,OAAO,6BAA6B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,kCAAkC,CAAC;QACzG,KAAK,SAAS;YACZ,OAAO,4DAA4D,CAAC;QACtE,KAAK,eAAe;YAClB,OAAO,2BAA2B,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,GAAG,CAAC;QAClF,KAAK,eAAe;YAClB,OAAO,iEAAiE,CAAC;QAC3E;YACE,OAAO,4BAA4B,MAAM,CAAC,MAAM,GAAG,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAyB,EACzB,QAA4B;IAE5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAChG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,YAAY,YAAY,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAA4B,EAC5B,MAAyB;IAEzB,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACnD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAsB;QACjC,CAAC,EAAE,CAAC;QACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;QAC7B,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC;KAChD,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/lib/architecture-credential.d.ts

@@ -0,0 +1,22 @@
+export type ArchitectureCredentialKind = "bearer" | "api_key" | "basic" | "custom";
+export interface ArchitectureCredentialRecord {
+    schema_version: "0.1.0";
+    slot: string;
+    kind: ArchitectureCredentialKind;
+    stored_at: string;
+    /** Never log or print values from this object. */
+    values: Record<string, string>;
+}
+export declare function parseArchitectureCredentialKind(raw: string): ArchitectureCredentialKind;
+export declare function validateCredentialSlot(slot: string): string;
+export declare function architectureCredentialsDir(repoRoot: string): string;
+export declare function architectureCredentialPath(repoRoot: string, slot: string): string;
+export declare function listArchitectureCredentialSlots(repoRoot: string): string[];
+export declare function loadArchitectureCredential(repoRoot: string, slot: string): ArchitectureCredentialRecord | null;
+export declare function validateArchitectureCredentialRecord(raw: unknown, expectedSlot?: string): ArchitectureCredentialRecord;
+export declare function parseCredentialValuesFromStdin(kind: ArchitectureCredentialKind, raw: string): Record<string, string>;
+export declare function writeArchitectureCredential(repoRoot: string, slot: string, kind: ArchitectureCredentialKind, values: Record<string, string>): void;
+export declare function removeArchitectureCredential(repoRoot: string, slot: string): boolean;
+export declare function readStdinCredentialPayload(): Promise<string>;
+export declare function logCredentialStatus(repoRoot: string, slot?: string): void;
+//# sourceMappingURL=architecture-credential.d.ts.map

package/dist/cli/lib/architecture-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-credential.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/architecture-credential.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,0BAA0B,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAKD,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAKvF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ3D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGjF;AAaD,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ1E;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,4BAA4B,GAAG,IAAI,CAMrC;AAED,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,OAAO,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,4BAA4B,CAgC9B;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,0BAA0B,EAChC,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA8CxB;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,0BAA0B,EAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,IAAI,CAgBN;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpF;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC,CAW5D;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAoBzE"}

package/dist/cli/lib/architecture-credential.js

@@ -0,0 +1,198 @@
+import fs from "node:fs";
+import path from "node:path";
+import { CLI_NAME, REL_ARCHITECTURE_CREDENTIALS_DIR } from "./constants.js";
+import { logInfo } from "./cli-io.js";
+const SLOT_PATTERN = /^[a-z0-9][a-z0-9/_-]{0,63}$/;
+const VALID_KINDS = new Set(["bearer", "api_key", "basic", "custom"]);
+export function parseArchitectureCredentialKind(raw) {
+    if (!VALID_KINDS.has(raw)) {
+        throw new Error(`gapman arch cred: kind must be one of ${[...VALID_KINDS].join(", ")}`);
+    }
+    return raw;
+}
+export function validateCredentialSlot(slot) {
+    const normalized = slot.trim();
+    if (!SLOT_PATTERN.test(normalized)) {
+        throw new Error(`${CLI_NAME} arch cred: slot must match ${SLOT_PATTERN} (e.g. architecture/confluence)`);
+    }
+    return normalized;
+}
+export function architectureCredentialsDir(repoRoot) {
+    return path.join(repoRoot, REL_ARCHITECTURE_CREDENTIALS_DIR.split("/").join(path.sep));
+}
+export function architectureCredentialPath(repoRoot, slot) {
+    const safe = validateCredentialSlot(slot);
+    return path.join(architectureCredentialsDir(repoRoot), `${safe.replace(/\//g, "__")}.json`);
+}
+function ensureCredentialsDir(repoRoot) {
+    const dir = architectureCredentialsDir(repoRoot);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    try {
+        fs.chmodSync(dir, 0o700);
+    }
+    catch {
+        /* best effort on platforms that restrict chmod */
+    }
+    return dir;
+}
+export function listArchitectureCredentialSlots(repoRoot) {
+    const dir = architectureCredentialsDir(repoRoot);
+    if (!fs.existsSync(dir))
+        return [];
+    return fs
+        .readdirSync(dir)
+        .filter((name) => name.endsWith(".json"))
+        .map((name) => name.slice(0, -".json".length).replace(/__/g, "/"))
+        .sort();
+}
+export function loadArchitectureCredential(repoRoot, slot) {
+    const abs = architectureCredentialPath(repoRoot, slot);
+    if (!fs.existsSync(abs))
+        return null;
+    const parsed = JSON.parse(fs.readFileSync(abs, "utf8"));
+    validateArchitectureCredentialRecord(parsed, slot);
+    return parsed;
+}
+export function validateArchitectureCredentialRecord(raw, expectedSlot) {
+    if (raw == null || typeof raw !== "object") {
+        throw new Error("architecture credential must be a JSON object");
+    }
+    const o = raw;
+    if (o.schema_version !== "0.1.0")
+        throw new Error("architecture credential: unsupported schema_version");
+    if (typeof o.slot !== "string")
+        throw new Error("architecture credential: slot required");
+    if (expectedSlot && o.slot !== expectedSlot) {
+        throw new Error("architecture credential: slot mismatch");
+    }
+    if (typeof o.kind !== "string" || !VALID_KINDS.has(o.kind)) {
+        throw new Error("architecture credential: invalid kind");
+    }
+    if (typeof o.stored_at !== "string")
+        throw new Error("architecture credential: stored_at required");
+    if (o.values == null || typeof o.values !== "object") {
+        throw new Error("architecture credential: values required");
+    }
+    const values = {};
+    for (const [k, v] of Object.entries(o.values)) {
+        if (typeof v !== "string" || v.length === 0) {
+            throw new Error(`architecture credential: values.${k} must be a non-empty string`);
+        }
+        values[k] = v;
+    }
+    validateCredentialSlot(o.slot);
+    return {
+        schema_version: "0.1.0",
+        slot: o.slot,
+        kind: o.kind,
+        stored_at: o.stored_at,
+        values,
+    };
+}
+export function parseCredentialValuesFromStdin(kind, raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        throw new Error("architecture credential: empty stdin");
+    if (kind === "basic") {
+        let parsed;
+        try {
+            parsed = JSON.parse(trimmed);
+        }
+        catch {
+            throw new Error('architecture credential: basic kind expects JSON {"username":"…","password":"…"} on stdin');
+        }
+        if (parsed == null || typeof parsed !== "object") {
+            throw new Error("architecture credential: basic kind expects JSON object on stdin");
+        }
+        const o = parsed;
+        if (typeof o.username !== "string" || typeof o.password !== "string") {
+            throw new Error("architecture credential: basic kind requires username and password strings");
+        }
+        return { username: o.username, password: o.password };
+    }
+    if (kind === "custom") {
+        let parsed;
+        try {
+            parsed = JSON.parse(trimmed);
+        }
+        catch {
+            throw new Error("architecture credential: custom kind expects JSON object on stdin");
+        }
+        if (parsed == null || typeof parsed !== "object") {
+            throw new Error("architecture credential: custom kind expects JSON object on stdin");
+        }
+        const values = {};
+        for (const [k, v] of Object.entries(parsed)) {
+            if (typeof v !== "string" || v.length === 0) {
+                throw new Error(`architecture credential: custom.values.${k} must be a non-empty string`);
+            }
+            values[k] = v;
+        }
+        if (Object.keys(values).length === 0) {
+            throw new Error("architecture credential: custom kind requires at least one string field");
+        }
+        return values;
+    }
+    const key = kind === "bearer" ? "token" : "api_key";
+    return { [key]: trimmed };
+}
+export function writeArchitectureCredential(repoRoot, slot, kind, values) {
+    ensureCredentialsDir(repoRoot);
+    const record = {
+        schema_version: "0.1.0",
+        slot: validateCredentialSlot(slot),
+        kind,
+        stored_at: new Date().toISOString(),
+        values,
+    };
+    const abs = architectureCredentialPath(repoRoot, slot);
+    fs.writeFileSync(abs, `${JSON.stringify(record, null, 2)}\n`, { mode: 0o600, encoding: "utf8" });
+    try {
+        fs.chmodSync(abs, 0o600);
+    }
+    catch {
+        /* best effort */
+    }
+}
+export function removeArchitectureCredential(repoRoot, slot) {
+    const abs = architectureCredentialPath(repoRoot, slot);
+    if (!fs.existsSync(abs))
+        return false;
+    fs.rmSync(abs);
+    return true;
+}
+export function readStdinCredentialPayload() {
+    return new Promise((resolve, reject) => {
+        if (process.stdin.isTTY) {
+            reject(new Error(`${CLI_NAME} arch cred set: pipe secret on stdin (never pass tokens as argv)`));
+            return;
+        }
+        const chunks = [];
+        process.stdin.on("data", (chunk) => chunks.push(chunk));
+        process.stdin.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+        process.stdin.on("error", reject);
+    });
+}
+export function logCredentialStatus(repoRoot, slot) {
+    if (slot) {
+        const record = loadArchitectureCredential(repoRoot, slot);
+        if (!record) {
+            logInfo(`${CLI_NAME} arch cred: slot ${slot} not stored`);
+            return;
+        }
+        logInfo(`${CLI_NAME} arch cred: slot=${record.slot} kind=${record.kind} stored_at=${record.stored_at}`);
+        return;
+    }
+    const slots = listArchitectureCredentialSlots(repoRoot);
+    if (slots.length === 0) {
+        logInfo(`${CLI_NAME} arch cred: no slots stored under ${REL_ARCHITECTURE_CREDENTIALS_DIR}`);
+        return;
+    }
+    for (const s of slots) {
+        const record = loadArchitectureCredential(repoRoot, s);
+        if (!record)
+            continue;
+        logInfo(`  - ${record.slot} (${record.kind}, ${record.stored_at})`);
+    }
+}
+//# sourceMappingURL=architecture-credential.js.map

package/dist/cli/lib/architecture-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-credential.js","sourceRoot":"","sources":["../../../src/cli/lib/architecture-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAatC,MAAM,YAAY,GAAG,6BAA6B,CAAC;AACnD,MAAM,WAAW,GAAG,IAAI,GAAG,CAA6B,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElG,MAAM,UAAU,+BAA+B,CAAC,GAAW;IACzD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAiC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,GAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,+BAA+B,YAAY,iCAAiC,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,IAAY;IACvE,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,QAAgB;IAC9D,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE;SACN,WAAW,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACjE,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,IAAY;IAEZ,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAiC,CAAC;IACxF,oCAAoC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,GAAY,EACZ,YAAqB;IAErB,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,cAAc,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzG,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC1F,IAAI,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAkC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAiC,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,6BAA6B,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO;QACL,cAAc,EAAE,OAAO;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAkC;QAC1C,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAAgC,EAChC,GAAW;IAEX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAEtE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YACvE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,6BAA6B,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,IAAY,EACZ,IAAgC,EAChC,MAA8B;IAE9B,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAiC;QAC3C,cAAc,EAAE,OAAO;QACvB,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC;QAClC,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM;KACP,CAAC;IACF,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB,EAAE,IAAY;IACzE,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,kEAAkE,CAAC,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAa;IACjE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,QAAQ,oBAAoB,IAAI,aAAa,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,QAAQ,oBAAoB,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,QAAQ,qCAAqC,gCAAgC,EAAE,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,0BAA0B,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,OAAO,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/cli/lib/architecture-pointer-discovery.d.ts

@@ -0,0 +1,7 @@
+import { type ArchitecturePointer } from "./architecture-pointer-types.js";
+export declare function resolveArchitectureAccessSkill(pointer: ArchitecturePointer): string;
+export declare function resolveArchitectureDiscoverySkill(pointer: ArchitecturePointer): string;
+export declare function architectureFileIsStub(content: string): boolean;
+export declare function architectureRequiresDiscovery(repoRoot: string, pointer: ArchitecturePointer): boolean;
+export declare function summarizeArchitecturePointer(pointer: ArchitecturePointer): string;
+//# sourceMappingURL=architecture-pointer-discovery.d.ts.map

package/dist/cli/lib/architecture-pointer-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-pointer-discovery.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/architecture-pointer-discovery.ts"],"names":[],"mappings":"AAMA,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAKtG,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAEnF;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAEtF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAqBrG;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAgBjF"}

package/dist/cli/lib/architecture-pointer-discovery.js

@@ -0,0 +1,60 @@
+import fs from "node:fs";
+import path from "node:path";
+import { REL_ARCHITECTURE_ACCESS_SKILL, REL_ARCHITECTURE_DISCOVERY_SKILL, } from "./constants.js";
+import { ARCHITECTURE_STUB_MARKERS } from "./architecture-pointer-types.js";
+const DEFAULT_ACCESS_SKILL = REL_ARCHITECTURE_ACCESS_SKILL;
+const DEFAULT_DISCOVERY_SKILL = REL_ARCHITECTURE_DISCOVERY_SKILL;
+export function resolveArchitectureAccessSkill(pointer) {
+    return pointer.access?.skill ?? DEFAULT_ACCESS_SKILL;
+}
+export function resolveArchitectureDiscoverySkill(pointer) {
+    return pointer.discovery?.skill ?? DEFAULT_DISCOVERY_SKILL;
+}
+export function architectureFileIsStub(content) {
+    const trimmed = content.trim();
+    if (trimmed.length === 0)
+        return true;
+    return ARCHITECTURE_STUB_MARKERS.some((marker) => content.includes(marker));
+}
+export function architectureRequiresDiscovery(repoRoot, pointer) {
+    if (pointer.kind === "unset")
+        return true;
+    if (pointer.kind === "external")
+        return false;
+    if (!pointer.location)
+        return true;
+    const targetAbs = path.resolve(repoRoot, pointer.location.split("/").join(path.sep));
+    if (!fs.existsSync(targetAbs))
+        return true;
+    if (pointer.kind === "file") {
+        const content = fs.readFileSync(targetAbs, "utf8");
+        return architectureFileIsStub(content);
+    }
+    if (pointer.kind === "directory") {
+        const entries = fs.readdirSync(targetAbs).filter((n) => !n.startsWith("."));
+        return entries.length === 0;
+    }
+    return false;
+}
+export function summarizeArchitecturePointer(pointer) {
+    const lines = [
+        `kind=${pointer.kind}`,
+        `location=${pointer.location || "(none)"}`,
+        `read_hint=${pointer.read_hint}`,
+        `discovery.skill=${resolveArchitectureDiscoverySkill(pointer)}`,
+    ];
+    if (pointer.access) {
+        lines.push(`access.required=${pointer.access.required}`);
+        if (pointer.access.tool)
+            lines.push(`access.tool=${pointer.access.tool}`);
+        lines.push(`access.skill=${resolveArchitectureAccessSkill(pointer)}`);
+        if (pointer.access.credential_slot)
+            lines.push(`access.credential_slot=${pointer.access.credential_slot}`);
+        if (pointer.access.auth_hint)
+            lines.push(`access.auth_hint=${pointer.access.auth_hint}`);
+        if (pointer.access.detect?.length)
+            lines.push(`access.detect=${pointer.access.detect.join(",")}`);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=architecture-pointer-discovery.js.map

package/dist/cli/lib/architecture-pointer-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-pointer-discovery.js","sourceRoot":"","sources":["../../../src/cli/lib/architecture-pointer-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iCAAiC,CAAC;AAEtG,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAC3D,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;AAEjE,MAAM,UAAU,8BAA8B,CAAC,OAA4B;IACzE,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,oBAAoB,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,OAA4B;IAC5E,OAAO,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,uBAAuB,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAgB,EAAE,OAA4B;IAC1F,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9C,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAA4B;IACvE,MAAM,KAAK,GAAG;QACZ,QAAQ,OAAO,CAAC,IAAI,EAAE;QACtB,YAAY,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE;QAC1C,aAAa,OAAO,CAAC,SAAS,EAAE;QAChC,mBAAmB,iCAAiC,CAAC,OAAO,CAAC,EAAE;KAChE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,gBAAgB,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM,CAAC,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3G,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/lib/architecture-pointer-doctor.d.ts

@@ -0,0 +1,3 @@
+import type { DoctorLine } from "./doctor-checks.js";
+export declare function runArchitecturePointerDoctorChecks(repoRoot: string): DoctorLine[];
+//# sourceMappingURL=architecture-pointer-doctor.d.ts.map

package/dist/cli/lib/architecture-pointer-doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-pointer-doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/architecture-pointer-doctor.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAuErD,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CA6CjF"}