@jeger-ai/opengantry 1.1.2 → 2.1.0

package/dist/cli/lib/perimeter.js

@@ -0,0 +1,244 @@
+import path from "node:path";
+import { GXT_ERROR } from "./gxt-error-codes.js";
+import { toPosixRel } from "./cli-io.js";
+import { gitRevParse, gitRun, gitRunOk } from "./git.js";
+import { commitSubjectHasMsnPrefix, listCommitChangedPaths, listMsnSubjectCommits, } from "./git-proof.js";
+import { resolveTeacherEmails } from "./teacher-identity.js";
+export const DEFAULT_PERIMETER_PROTECTED = [
+    "**/.gxt-skill.yaml",
+    ".gitagent/foreman/MANIFEST.json",
+    ".gitagent/teacher/RULES.md",
+];
+const SHALLOW_HISTORY_HINT = "Configure CI checkout with fetch-depth: 0 or fetch the base ref explicitly before running gapman perimeter --ci.";
+function perimeterGlobs(manifest) {
+    return manifest.perimeter_protected?.length
+        ? [...manifest.perimeter_protected]
+        : [...DEFAULT_PERIMETER_PROTECTED];
+}
+/** Simple glob: double-star slash prefix = suffix match; otherwise exact repo-relative match. */
+export function pathMatchesPerimeterGlob(repoRelPath, glob) {
+    const norm = repoRelPath.replace(/\\/g, "/");
+    const g = glob.replace(/\\/g, "/");
+    if (g.startsWith("**/")) {
+        const suffix = g.slice(3);
+        return norm.endsWith(suffix) || norm.includes(`/${suffix}`);
+    }
+    return norm === g;
+}
+export function isPerimeterProtectedPath(repoRelPath, manifest) {
+    const globs = perimeterGlobs(manifest);
+    return globs.some((g) => pathMatchesPerimeterGlob(repoRelPath, g));
+}
+function shallowHistoryReason(baseRef, detail) {
+    return (`${GXT_ERROR.PERIMETER_SHALLOW_HISTORY}: cannot evaluate protected-path history for ${baseRef}..HEAD — ${detail}. ` +
+        SHALLOW_HISTORY_HINT);
+}
+export function listChangedPathsSinceBase(repoRoot, baseRef) {
+    if (!gitRevParse(repoRoot, baseRef)) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, `base ref "${baseRef}" is missing or unreachable`),
+        };
+    }
+    const r = gitRun(repoRoot, ["diff", "--name-only", `${baseRef}...HEAD`]);
+    if (!r.ok) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, r.stderr.trim() || "git diff failed"),
+        };
+    }
+    const paths = r.stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0)
+        .map((rel) => toPosixRel(repoRoot, path.join(repoRoot, rel)));
+    return { ok: true, paths };
+}
+/** All commits in baseRef..HEAD that touched repoRelPath (newest first). */
+export function listCommitsTouchingPathInRange(repoRoot, baseRef, repoRelPath) {
+    if (!gitRevParse(repoRoot, baseRef)) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, `base ref "${baseRef}" is missing or unreachable`),
+        };
+    }
+    const r = gitRun(repoRoot, ["log", "--format=%H", `${baseRef}..HEAD`, "--", repoRelPath]);
+    if (!r.ok) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, r.stderr.trim() || "git log failed"),
+        };
+    }
+    const commits = r.stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    return { ok: true, commits };
+}
+function lastCommitTouchingPath(repoRoot, repoRelPath) {
+    const r = gitRunOk(repoRoot, ["log", "-1", "--format=%H", "HEAD", "--", repoRelPath]);
+    if (!r.ok || !r.stdout.trim())
+        return null;
+    return r.stdout.trim();
+}
+function commitRow(repoRoot, hash) {
+    const r = gitRunOk(repoRoot, ["log", "-1", "--format=%H%x1f%s%x1f%aE", hash]);
+    if (!r.ok)
+        return null;
+    const parts = r.stdout.trim().split("\x1f");
+    if (parts.length < 3)
+        return null;
+    return { hash: parts[0], subject: parts[1], authorEmail: parts[2] };
+}
+function signatureStatus(repoRoot, hash) {
+    const r = gitRunOk(repoRoot, ["log", "-1", "--format=%G?", hash]);
+    if (!r.ok)
+        return "E";
+    return r.stdout.trim() || "N";
+}
+function isGoodSignature(status) {
+    return status === "G" || status === "U";
+}
+function findTeacherStampForPath(repoRoot, msnId, repoRelPath, teacherEmails) {
+    const rows = listMsnSubjectCommits(repoRoot, msnId);
+    for (const row of rows) {
+        if (!teacherEmails.includes(row.authorEmail.trim().toLowerCase()))
+            continue;
+        const changed = listCommitChangedPaths(repoRoot, row.hash);
+        if (changed.some((p) => p.replace(/\\/g, "/") === repoRelPath.replace(/\\/g, "/"))) {
+            return row;
+        }
+    }
+    return null;
+}
+function extractMsnFromRecentCommits(repoRoot, hash) {
+    const row = commitRow(repoRoot, hash);
+    if (!row)
+        return null;
+    const m = row.subject.match(/\[(MSN-\d{4})\]/);
+    return m?.[1] ?? null;
+}
+function checkProtectedPathCi(repoRoot, baseRef, filePath, violations, advisories) {
+    const range = listCommitsTouchingPathInRange(repoRoot, baseRef, filePath);
+    if (!range.ok) {
+        violations.push({
+            path: filePath,
+            commit: "unknown",
+            reason: range.reason,
+            advisoryOnly: false,
+        });
+        return;
+    }
+    if (range.commits.length === 0) {
+        violations.push({
+            path: filePath,
+            commit: "unknown",
+            reason: `no commits in ${baseRef}..HEAD found for protected path ${filePath}`,
+            advisoryOnly: false,
+        });
+        return;
+    }
+    for (const commit of range.commits) {
+        const sig = signatureStatus(repoRoot, commit);
+        if (!isGoodSignature(sig)) {
+            violations.push({
+                path: filePath,
+                commit,
+                reason: `${GXT_ERROR.PERIMETER_VIOLATION}: protected file ${filePath} modified in unsigned commit ${commit.slice(0, 7)} ` +
+                    `(signature status: ${sig}). CI requires verified SSH/GPG signature.`,
+                advisoryOnly: false,
+            });
+        }
+    }
+    const unsignedForPath = violations.filter((v) => v.path === filePath && !v.advisoryOnly);
+    if (unsignedForPath.length === 0) {
+        advisories.push(`perimeter: ${filePath} — all ${String(range.commits.length)} commit(s) in range are signed`);
+    }
+}
+function checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations, advisories) {
+    const commit = lastCommitTouchingPath(repoRoot, filePath);
+    if (!commit) {
+        violations.push({
+            path: filePath,
+            commit: "unknown",
+            reason: `no commit found for protected path ${filePath}`,
+            advisoryOnly: true,
+        });
+        return;
+    }
+    const row = commitRow(repoRoot, commit);
+    if (!row) {
+        violations.push({
+            path: filePath,
+            commit,
+            reason: `cannot read commit metadata for ${commit}`,
+            advisoryOnly: true,
+        });
+        return;
+    }
+    const msnId = extractMsnFromRecentCommits(repoRoot, commit);
+    const emailMatch = row.authorEmail.trim().toLowerCase() &&
+        teacherEmails.includes(row.authorEmail.trim().toLowerCase());
+    const subjectMatch = msnId !== null && commitSubjectHasMsnPrefix(row.subject, msnId);
+    const stamp = msnId !== null ? findTeacherStampForPath(repoRoot, msnId, filePath, teacherEmails) : null;
+    if (stamp) {
+        advisories.push(`perimeter (advisory): ${filePath} — Teacher email + MSN stamp hint matched ${stamp.hash.slice(0, 7)} (forgeable locally; CI verifies signature)`);
+        return;
+    }
+    advisories.push(`perimeter (advisory): ${filePath} modified in ${commit.slice(0, 7)} — ` +
+        `email match=${String(emailMatch)}, subject MSN match=${String(subjectMatch)}. ` +
+        `Local checks are forgeable; push triggers CI signature enforcement.`);
+}
+export function checkPerimeter(repoRoot, manifest, options) {
+    const changedResult = listChangedPathsSinceBase(repoRoot, options.baseRef);
+    if (!changedResult.ok) {
+        if (options.ci === true) {
+            return {
+                ok: false,
+                violations: [
+                    {
+                        path: "(range)",
+                        commit: "unknown",
+                        reason: changedResult.reason,
+                        advisoryOnly: false,
+                    },
+                ],
+                advisories: [],
+            };
+        }
+        return { ok: true, violations: [], advisories: [changedResult.reason] };
+    }
+    const protectedChanged = changedResult.paths.filter((p) => isPerimeterProtectedPath(p, manifest));
+    if (protectedChanged.length === 0) {
+        return { ok: true, violations: [], advisories: [] };
+    }
+    const teacherEmails = resolveTeacherEmails(repoRoot).emails;
+    const violations = [];
+    const advisories = [];
+    for (const filePath of protectedChanged) {
+        if (options.ci === true) {
+            checkProtectedPathCi(repoRoot, options.baseRef, filePath, violations, advisories);
+        }
+        else {
+            checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations, advisories);
+        }
+    }
+    const hardFailures = violations.filter((v) => !v.advisoryOnly);
+    return {
+        ok: hardFailures.length === 0,
+        violations,
+        advisories,
+    };
+}
+/** Verify a single commit has a good signature (for CI helpers). */
+export function verifyCommitSignature(repoRoot, hash) {
+    const r = gitRun(repoRoot, ["verify-commit", hash]);
+    if (r.ok)
+        return true;
+    return isGoodSignature(signatureStatus(repoRoot, hash));
+}
+//# sourceMappingURL=perimeter.js.map

package/dist/cli/lib/perimeter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"perimeter.js","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAG7D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,oBAAoB;IACpB,iCAAiC;IACjC,4BAA4B;CACpB,CAAC;AAmBX,MAAM,oBAAoB,GACxB,kHAAkH,CAAC;AAErH,SAAS,cAAc,CAAC,QAAkB;IACxC,OAAO,QAAQ,CAAC,mBAAmB,EAAE,MAAM;QACzC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC;QACnC,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC;AACvC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,IAAY;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,QAAkB;IAC9E,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAC3D,OAAO,CACL,GAAG,SAAS,CAAC,yBAAyB,gDAAgD,OAAO,YAAY,MAAM,IAAI;QACnH,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,OAAe;IACzE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,aAAa,OAAO,6BAA6B,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC;SAC5E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM;SACnB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAMD,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,OAAe,EACf,WAAmB;IAEnB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,aAAa,OAAO,6BAA6B,CAAC;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,yBAAyB;YACzC,MAAM,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;SAC3E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM;SACrB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,WAAmB;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACtB,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,KAAa,EACb,WAAmB,EACnB,aAAuB;IAEvB,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC5E,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC;AAQD,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,UAAgC,EAChC,UAAoB;IAEpB,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iBAAiB,OAAO,mCAAmC,QAAQ,EAAE;YAC7E,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,MAAM;gBACN,MAAM,EACJ,GAAG,SAAS,CAAC,mBAAmB,oBAAoB,QAAQ,gCAAgC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;oBACjH,sBAAsB,GAAG,4CAA4C;gBACvE,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CACb,cAAc,QAAQ,UAAU,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,QAAgB,EAChB,aAAuB,EACvB,UAAgC,EAChC,UAAoB;IAEpB,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,sCAAsC,QAAQ,EAAE;YACxD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,MAAM,EAAE,mCAAmC,MAAM,EAAE;YACnD,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,UAAU,GACd,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,KAAK,IAAI,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,KAAK,GACT,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5F,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CACb,yBAAyB,QAAQ,6CAA6C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6CAA6C,CAClJ,CAAC;QACF,OAAO;IACT,CAAC;IACD,UAAU,CAAC,IAAI,CACb,yBAAyB,QAAQ,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;QACtE,eAAe,MAAM,CAAC,UAAU,CAAC,uBAAuB,MAAM,CAAC,YAAY,CAAC,IAAI;QAChF,qEAAqE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,QAAkB,EAClB,OAA8B;IAE9B,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACD,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClG,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/D,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;QAC7B,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,IAAY;IAClE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/cli/lib/program-stdin.d.ts

@@ -0,0 +1,3 @@
+/** Shared stdin drain for Commander commands that accept piped intent text. */
+export declare function readStdinIfEmpty(text: string): Promise<string>;
+//# sourceMappingURL=program-stdin.d.ts.map

package/dist/cli/lib/program-stdin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-stdin.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/program-stdin.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW9D"}

package/dist/cli/lib/program-stdin.js

@@ -0,0 +1,15 @@
+/** Shared stdin drain for Commander commands that accept piped intent text. */
+export function readStdinIfEmpty(text) {
+    if (text.trim())
+        return Promise.resolve(text);
+    return new Promise((resolve, reject) => {
+        let data = "";
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("data", (chunk) => {
+            data += chunk;
+        });
+        process.stdin.on("end", () => resolve(data.trim()));
+        process.stdin.on("error", reject);
+    });
+}
+//# sourceMappingURL=program-stdin.js.map

package/dist/cli/lib/program-stdin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-stdin.js","sourceRoot":"","sources":["../../../src/cli/lib/program-stdin.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/register-proposals.d.ts

@@ -0,0 +1,13 @@
+import type { FolderSignature } from "./ast-discovery.js";
+export interface SkillProposal {
+    skill_key: string;
+    tmvc_roots: string[];
+    desc: string;
+    suggested_forbidden_imports: string[];
+    signature: FolderSignature;
+}
+export declare function suggestSkillKeyFromFolder(folderRel: string): string;
+export declare function buildSkillProposal(signature: FolderSignature, skillKey: string, httpLikeImports?: string[]): SkillProposal;
+export declare function formatProposalJson(proposal: SkillProposal): string;
+export declare function formatProposalHuman(proposal: SkillProposal): string;
+//# sourceMappingURL=register-proposals.d.ts.map

package/dist/cli/lib/register-proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-proposals.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/register-proposals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B,EAAE,MAAM,EAAE,CAAC;IACtC,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGnE;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,MAAM,EAChB,eAAe,WAAuD,GACrE,aAAa,CAkBf;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAElE;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAgBnE"}

package/dist/cli/lib/register-proposals.js

@@ -0,0 +1,38 @@
+import path from "node:path";
+export function suggestSkillKeyFromFolder(folderRel) {
+    const base = path.basename(folderRel.replace(/\/$/, ""));
+    return base.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "skill";
+}
+export function buildSkillProposal(signature, skillKey, httpLikeImports = ["express", "axios", "node-fetch", "@nestjs/common"]) {
+    const externalPackages = signature.imports.filter((i) => !i.startsWith(".") && !i.startsWith("/") && !i.startsWith("@/"));
+    const hasHttp = externalPackages.some((p) => httpLikeImports.some((h) => p === h || p.startsWith(`${h}/`)));
+    const suggestedForbidden = hasHttp
+        ? []
+        : httpLikeImports.filter((h) => !externalPackages.some((p) => p === h || p.startsWith(`${h}/`)));
+    return {
+        skill_key: skillKey,
+        tmvc_roots: [`${signature.folderRel}/`],
+        desc: `Auto-discovered skill for ${signature.folderRel} (${String(signature.fileCount)} TS files)`,
+        suggested_forbidden_imports: suggestedForbidden,
+        signature,
+    };
+}
+export function formatProposalJson(proposal) {
+    return JSON.stringify(proposal, null, 2);
+}
+export function formatProposalHuman(proposal) {
+    const lines = [
+        `Skill proposal: ${proposal.skill_key}`,
+        `  tmvc_roots: ${proposal.tmvc_roots.join(", ")}`,
+        `  desc: ${proposal.desc}`,
+        `  imports (${String(proposal.signature.imports.length)}): ${proposal.signature.imports.slice(0, 8).join(", ")}${proposal.signature.imports.length > 8 ? "…" : ""}`,
+        `  exports (${String(proposal.signature.exports.length)}): ${proposal.signature.exports.slice(0, 8).join(", ")}${proposal.signature.exports.length > 8 ? "…" : ""}`,
+    ];
+    if (proposal.suggested_forbidden_imports.length > 0) {
+        lines.push(`  suggested forbidden imports: ${proposal.suggested_forbidden_imports.join(", ")}`);
+    }
+    lines.push("");
+    lines.push("Teacher: review proposal, add skill to MANIFEST.json (Rule 4.4), then gapman legislate with --skill-key.");
+    return lines.join("\n");
+}
+//# sourceMappingURL=register-proposals.js.map

package/dist/cli/lib/register-proposals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-proposals.js","sourceRoot":"","sources":["../../../src/cli/lib/register-proposals.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,SAA0B,EAC1B,QAAgB,EAChB,eAAe,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC;IAEtE,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CACvE,CAAC;IACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO;QAChC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAEnG,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,GAAG,CAAC;QACvC,IAAI,EAAE,6BAA6B,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY;QAClG,2BAA2B,EAAE,kBAAkB;QAC/C,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAuB;IACzD,MAAM,KAAK,GAAG;QACZ,mBAAmB,QAAQ,CAAC,SAAS,EAAE;QACvC,iBAAiB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACjD,WAAW,QAAQ,CAAC,IAAI,EAAE;QAC1B,cAAc,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnK,cAAc,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;KACpK,CAAC;IACF,IAAI,QAAQ,CAAC,2BAA2B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,kCAAkC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,0GAA0G,CAC3G,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/lib/runtime-env.js

@@ -1,8 +1,8 @@
 import fs from "node:fs";
 import path from "node:path";
 import { toPosixRel } from "./cli-io.js";
-import { agentErrorAbsolutePath } from "./agent-error.js";
-import { parseMissionFile } from "./mission-parser.js";
+import { agentErrorAbsolutePath } from "./errors.js";
+import { parseMissionFile } from "./missions/parser.js";
 import { defaultWorkerLogPath } from "./trace.js";
 function toRepoRelativePosix(repoRoot, absolutePath) {
     const rel = toPosixRel(repoRoot, path.resolve(absolutePath));

package/dist/cli/lib/runtime-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAmBlD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,yCAAyC,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,cAAc,EAAE,CAAC,CAAC,UAAU;QAC5B,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAmBlD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,yCAAyC,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,cAAc,EAAE,CAAC,CAAC,UAAU;QAC5B,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/cli/lib/runtime-exec.d.ts

@@ -1,5 +1,49 @@
-/**
- * Runtime execution harness: re-exports orchestrator (process runner lives in runtime-exec-process.ts).
- */
-export { runRuntimeExec, type RuntimeExecOptions, type RuntimeExecResult, } from "./runtime-exec-orchestrator.js";
+import { type ForbiddenViolation } from "./forbidden-scan.js";
+import { createTelemetryWriter } from "./telemetry-log.js";
+import type { Workspace } from "./workspace.js";
+export interface RuntimeExecResult {
+    status: "success" | "worker_failed" | "forbidden_zone_violation" | "runtime_error" | "timeout";
+    exitCode: number;
+    workerExitCode: number | null;
+    workerSignal: NodeJS.Signals | null;
+    violations: ForbiddenViolation[];
+    workerLogPath: string;
+    flightId: string;
+}
+export declare function emptyWorkerCommandResult(): RuntimeExecResult;
+export declare function buildRuntimeExecResult(input: {
+    violations: ForbiddenViolation[];
+    timedOut: boolean;
+    exitCode: number | null;
+    exitSignal: NodeJS.Signals | null;
+    workerLogPath: string;
+    flightId: string;
+}): RuntimeExecResult;
+export declare function runtimeErrorResult(workerLogPath: string, flightId: string): RuntimeExecResult;
+type TelemetryWriter = ReturnType<typeof createTelemetryWriter>;
+export interface WorkerCaptureResult {
+    code: number | null;
+    signal: NodeJS.Signals | null;
+    timedOut: boolean;
+}
+export declare function captureWorkerProcess(input: {
+    command: string;
+    argv: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    streamOutput: boolean;
+    timeoutMs?: number;
+    writer: TelemetryWriter;
+}): Promise<WorkerCaptureResult>;
+export interface RuntimeExecOptions {
+    mission: string;
+    workerCommand: string[];
+    cwd?: string;
+    workerLog?: string;
+    append?: boolean;
+    timeoutMs?: number;
+    streamOutput?: boolean;
+}
+export declare function runRuntimeExec(workspace: Workspace, options: RuntimeExecOptions): Promise<RuntimeExecResult>;
+export {};
 //# sourceMappingURL=runtime-exec.d.ts.map

package/dist/cli/lib/runtime-exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-exec.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"runtime-exec.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec.ts"],"names":[],"mappings":"AAIA,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EACF,SAAS,GACT,eAAe,GACf,0BAA0B,GAC1B,eAAe,GACf,SAAS,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACpC,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,wBAAwB,IAAI,iBAAiB,CAU5D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,iBAAiB,CAmBpB;AAED,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,iBAAiB,CAUnB;AAED,KAAK,eAAe,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;CACzB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+C/B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AA6FD,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA0E5B"}