@kiwidata/grimoire 0.1.4 → 0.1.6

package/skills/references/principles.md

@@ -0,0 +1,82 @@
+# Grimoire Design Principles
+
+Four principles govern every grimoire artifact and every change. `grimoire-draft`,
+`grimoire-plan`, and `grimoire-review` each enforce them at their own stage. They
+are not style preferences — they are gates. A draft, plan, or design that violates
+one without a stated reason is rejected, not merged.
+
+This file is the single home for the principles (it practices what it preaches —
+the skills cite it rather than restating it).
+
+---
+
+## 1. One right way to do a thing
+
+There is exactly **one** sanctioned way to do each thing in the codebase, and one
+authoritative home for each fact. Two ways to do the same thing is a defect, even
+if both work.
+
+- One capability → one feature spec. One decision → one MADR. One constraint → one
+  register entry. One fact → one home. No capability described in three places.
+- When a second mechanism appears for an existing job, the right move is to delete
+  one and converge — never to keep both "for flexibility."
+- **Tell:** "we could do it this way *or* that way" in a spec/plan. Pick one. Record
+  why in a MADR if the choice is non-obvious; don't leave both paths in the code.
+
+## 2. DRY — don't repeat yourself
+
+Every piece of knowledge has a single, unambiguous representation.
+
+- Don't store what's derivable. Code structure comes from codebase-memory-mcp on
+  demand — never freeze it into a doc that drifts. Generated overviews regenerate;
+  they are not hand-edited.
+- Reuse before write: search the graph for an existing function/utility before
+  writing a new one. Three near-identical copies is the trigger to converge — but
+  do not abstract before the third (see KISS).
+- Duplication of *content* (the same rule in three skill files, the same constant in
+  three modules, the same scenario in feature + MADR) is the target. Eliminate it.
+
+## 3. Don't reinvent the wheel — use existing tools
+
+If an established tool already does a job well, use it. Do not build a parallel
+grimoire mechanism that duplicates it.
+
+- **git** is the wheel for change processes: branches = isolation, `git diff` =
+  staging, `git log` + PR + commit trailers = history and change identity. Do not
+  build change-folder copies, promote/sync steps, or bespoke archive/changelog trees.
+- For auth, crypto, parsing, HTTP, queues, etc. — adopt the battle-tested library.
+  Never roll custom crypto, custom session management, custom auth tokens.
+- Before building any tracking/versioning/state/diff mechanism, ask: does a standard
+  tool already in the stack do this? If yes, wire to it.
+- **Exception that proves the rule:** when no single standard tool exists (e.g. issue
+  tracking is a fractured landscape), don't force-adopt one *and* don't build a
+  general-purpose clone. Keep any local mechanism narrow and purpose-scoped.
+
+## 4. Keep it simple (KISS)
+
+The simplest thing that fully solves the *stated* problem wins.
+
+- Least code, fewest new files, smallest surface area. A few lines in an existing
+  file beats a new module. A standard-library call beats a new dependency. Inline
+  beats a one-line wrapper.
+- No premature abstraction. No `BaseX`/factory/strategy/config-object for a single
+  caller. No speculative generality "for a future second caller" that doesn't exist.
+- Solve the problem in front of you, not the imagined one. Non-goals are real scope
+  boundaries — do not plan or build past them.
+- **Tell:** an abstraction, indirection, or dependency whose only justification is a
+  hypothetical. Cut it.
+
+---
+
+## How the stages apply these
+
+- **draft** — admission-test every artifact: does this fact already have a home
+  (one-right-way/DRY)? Is it behavior (→ feature) or a constraint/decision/structure
+  (→ its own home, not a feature)? Is there an existing tool/library for it
+  (don't-reinvent)? Is the scope the stated problem only (KISS)?
+- **plan** — every task names the single approach (one-right-way), reuses before
+  writing (DRY), follows a proven pattern / existing tool rather than a bespoke one
+  (don't-reinvent), and chooses the least-code option within non-goals (KISS). Flag
+  any task that adds an abstraction, dependency, or second mechanism.
+- **review** — a dedicated principles pass: hunt for duplicate homes, derivable-but-
+  stored facts, reinvented wheels, and speculative complexity. Each is a finding.

package/skills/references/refactor-scan-categories.md

@@ -91,8 +91,8 @@ TODO/FIXME/HACK/XXX comments that have aged.
 ## 2g. Duplication
 
 **How to scan:**
-- Read `.grimoire/docs/.snapshot.json` `duplicates` section if present
-- Or run `config.tools.duplicates` if configured (e.g., jscpd)
+- Run `config.tools.duplicates` if configured (e.g., jscpd), or `grimoire health` (config-driven `duplicates` metric)
+- Plus semantic clones via `search_graph(semantic_query=[...])` (requires codebase-memory-mcp) to catch re-implementations under different names
 - Group by area — within-area dupes are easy to consolidate
 
 **Severity:** high = >30 lines or >3 copies, medium = 10-30 lines or 2 copies, low = <10 lines

package/skills/references/review-personas.md

@@ -26,13 +26,13 @@ Build once, inject as preface to every persona. Findings that don't threaten any
 - `.grimoire/brand/tokens.json` and `.grimoire/brand/voice.md` — brand axis (if exist; see `./brand-tokens-format.md`)
 - `.grimoire/changes/<id>/consult.md` — pre-design consult assumptions + givens (if exists)
 - `.grimoire/changes/<id>/designs/problem.md` — design problem statement (if exists)
-- Tag histogram across `.grimoire/changes/**/*.feature` + `.grimoire/archive/**/*.feature`
+- Tag histogram across `features/**/*.feature` (the live baseline; features are edited in place, so this covers both the change and prior work)
 - All `.grimoire/decisions/*.md` with `status: accepted` — extract ID, title, top Decision Driver
 - Linked manifest's `Why` and `Non-goals` (if a Change trailer / active manifest exists); else PR body or commit messages
 
 ### Feature inventory
 
-- Glob `.grimoire/changes/**/*.feature` + `.grimoire/archive/**/*.feature`
+- Glob `features/**/*.feature` (the live baseline, including this change's edits)
 - Parse: `Feature:` line, first description line, `@tags`
 - Bucket by path prefix (area)
 - If total >80, emit area-level summary only (count + capability one-liner)
@@ -227,12 +227,18 @@ Every security finding gets OWASP 2021 + CWE tags. See CWE quick-reference in `.
 
 Skip if change is purely internal.
 
+**Coverage-gap routing (apply before recommending any new artifact).** A coverage gap does NOT default to "write a `.feature`." Route each gap to its one home using the feature-file admission test in `../grimoire-draft/SKILL.md` (§ jurisdiction table + the four admission gates):
+- A `.feature` scenario is warranted **only** for an actor-observable behavior that passes all four gates (external actor, observable outcome, domain language, survives reimplementation).
+- An invariant — observability/logging guarantee, perf budget, security control, compliance rule — is a **constraint**. Recommend it be recorded/verified in `.grimoire/docs/constraints.md`, never as a new `.feature`.
+- When a behavior gap belongs in features, the default is **extend an existing feature file** in the same domain — recommend a new file only if no existing file fits, and say which were considered. Don't propose a `.feature` per finding.
+- Test gaps for already-specified behavior are a *missing test*, not a missing feature — recommend the test, not a new spec.
+
 Evaluate:
-- **Test presence**: Every new user-facing behavior has a test? Every scenario from linked feature file has step definitions?
+- **Test presence**: Every new user-facing behavior has a test? Every scenario from a linked feature file has step definitions? Missing test = recommend the test; only recommend a new/extended `.feature` if the behavior itself is unspecified *and* passes the admission test.
 - **Test quality**: Tests asserting outputs, or just that code "ran"? Over-mocked tests = red flag.
 - **Negative paths**: For each happy path, is there a failure-path test?
-- **Edge cases**: Empty states, concurrent users, interruptions, boundary values?
-- **Observability**: New feature — how will it be debugged in prod? Structured logs / metrics / error surfaces?
+- **Edge cases**: Empty states, concurrent users, interruptions, boundary values? A missing edge case is a missing test/scenario in the relevant existing feature — not grounds for a new feature file.
+- **Observability**: New feature — how will it be debugged in prod? Structured logs / metrics / error surfaces? Observability is a **constraint**: verify it's asserted in `constraints.md`; do not recommend a `.feature` for it.
 - **Regression risk** *(PR/pre-commit)*: Which existing tests cover the touched code? Were any tests removed or weakened?
 - **Accessibility**: New UI — keyboard nav, aria labels, contrast?
 
@@ -274,7 +280,8 @@ If none of the above pin a rule, **don't invent one**. Style preferences without
 - **Imports**: Order, grouping, and form match the project (relative vs absolute, `.js` extension policy, type-only imports)?
 - **Formatting**: Diff respects `.editorconfig` and formatter rules (indentation, line endings, trailing newline, max line length)? Any formatter-noisy hunks unrelated to the change?
 - **Comments — presence**: Is there a comment whose WHAT is already obvious from the code? Per most projects' comment policies (and grimoire's `AGENTS.md`), explanatory-of-what comments are noise — **suggestion** to remove.
-- **Comments — content**: Do comments reference current task / fix / PR / caller ("added for X", "used by Y", "fix for issue #123")? These rot — **suggestion** to remove or rewrite as durable rationale.
+- **Comments — self-contained**: Does a comment name an external artifact that moves independently — a feature/scenario/`.feature`, MADR/ADR number, change-id, ticket/PR, specific test, or tag code (`LOG-OBS-003`)? These orphan — **suggestion** to rewrite in terms of the code itself (`code-quality.md` §7). Generic descriptive words (test, feature) are fine; identifiers pointing elsewhere are not.
+- **Comments — no essays**: Does a docstring lead with a prose paragraph before its params, or restate types in prose? Keep the summary to 1–2 terse lines — **suggestion** to compress; design rationale belongs in a decision record.
 - **Comments — style**: Match the project's comment form (`//` vs `/* */` vs `#`, JSDoc/TSDoc/docstring conventions)?
 - **Docstrings**: New public functions/classes — does the project require docstrings? If yes (per `comment_style` or visible convention), missing docstring = **suggestion**. If no, added boilerplate docstrings = **suggestion** to remove.
 - **Dead comments**: Commented-out code in the diff = **suggestion** to delete.

package/skills/references/test-baseline.md

@@ -0,0 +1,55 @@
+# Test Baseline Reference
+
+Loaded by skills that mutate code (`grimoire-apply`, `grimoire-bug`, `grimoire-refactor`) and the skill that checks for regressions (`grimoire-verify`).
+
+## Why
+
+"That's a pre-existing failure" is unfalsifiable if you never recorded what was failing *before* you started. Without a baseline, verify diffs against nothing — a regression you introduced and a failure that was already red look identical, and the user finds out at the end instead of signing off at the start.
+
+The fix is cheap: you already run the suite when you pick up a change. **Capture which tests were already failing, save it, and let the user accept it before any code is touched.** Verify then flags only *new* failures as regressions.
+
+This is not a new gate. It's saving the result of a run you already do.
+
+## Capture (at the start of a code change)
+
+Do this once, before writing the first test or touching production code — as part of the suite run you'd do anyway to understand the starting state.
+
+1. Run the configured suites: `config.tools.unit_test` and `config.tools.bdd_test`. Use what's configured; don't invent commands.
+2. Record the result to `.grimoire/changes/<change-id>/baseline.md` (ephemeral scaffolding, discarded with the change folder like `tasks.md`). For a bug fix with no change folder, record inline in the commit/test note and present to the user instead.
+3. Present the pre-existing failures to the user and get explicit acceptance before proceeding.
+
+### baseline.md format
+
+```markdown
+# Test Baseline — <change-id>
+
+captured: <date>          # the day you ran it; if unavailable, omit
+unit:  <pass>/<total> passing   command: <config.tools.unit_test>
+bdd:   <pass>/<total> passing   command: <config.tools.bdd_test>
+
+## Pre-existing failures (accepted by user before change)
+- <test id / name> — <one-line reason if known, else "pre-existing, cause unknown">
+- ...
+
+## Notes
+- <e.g. "unit suite not configured — baseline skipped for unit">
+```
+
+If nothing was failing, say so explicitly: `## Pre-existing failures: none — clean baseline`.
+
+## Skip rules
+
+- **No test command configured** for a suite → skip that suite, write `baseline skipped — no <suite> command configured` under Notes. Don't fabricate a command.
+- **User opts out** → write `baseline skipped — user opted out`. Verify must then NOT claim a clean diff; it reports failures as unclassified (could be pre-existing or new).
+- A skipped baseline is recorded, not silent. Verify needs to know it can't trust a diff.
+
+## Diff (at verify)
+
+`grimoire-verify` reads `baseline.md` and classifies the current suite result against it:
+
+- Test failing now **and** in baseline → **pre-existing** (already accepted; not a regression, don't blame the change).
+- Test failing now, **not** in baseline → **regression** introduced by this change → CRITICAL, must fix before finalize.
+- Test passing now, failing in baseline → incidentally fixed; note it, don't require it.
+- **No baseline / baseline skipped** → state plainly that failures cannot be classified, and list them all for the user to triage. Do not assert "existing tests pass" or "pre-existing failure" without a baseline to back it.
+
+The rule that replaces the old unfalsifiable claim: **a failure is "pre-existing" only if it's in `baseline.md`.** Otherwise it's yours.

package/skills/references/testing-contracts.md

@@ -41,7 +41,7 @@ For contract regression tests: if the client starts reading a new field or stops
 Before importing a module, calling a function, or adding a dependency — confirm it exists.
 
 **Imports and functions:**
-- Check area docs' Reusable Code table first (exact paths and line numbers)
+- Query the graph first (`search_graph` / `get_code_snippet`) for the exact symbol, path, and signature
 - If importing from a file you haven't read, read it first
 - If an import fails, don't guess — read the actual module for the real export name
 

package/templates/accepted-risks.yml

@@ -0,0 +1,47 @@
+# Grimoire Risk-Accepted Vulnerabilities
+# Vulnerabilities triaged as `affected` but consciously accepted — because no fix
+# exists yet, the residual risk is low, or the fix isn't worth it right now.
+#
+# Written by: grimoire-vuln-remediate (from a grimoire-vuln-triage `accept` verdict)
+# Read by:    grimoire-vuln-triage — an UNEXPIRED entry auto-suppresses that CVE as
+#             known-accepted so it doesn't re-flood the queue. An EXPIRED entry is
+#             re-surfaced for re-triage.
+#
+# Each entry requires: a CVE, the component, the VEX justification, a reason, an
+# owner, an accepted date, and an expiry (when to re-evaluate).
+#
+# An accepted risk is NOT closed — it is scheduled for review. Don't accept the same
+# CVE twice; update the existing entry.
+#
+# Created by: grimoire init
+# Last updated: YYYY-MM-DD
+
+accepted: []
+
+# --- Examples ---
+#
+# No upstream fix available — low residual risk, reachable but damped:
+#
+#   - cve: CVE-2026-44405
+#     component: paramiko
+#     component_type: library
+#     vex_justification: inline_mitigations_already_exist
+#     reason: "SHA-1 accepted in rsakey; outbound SFTP only, to tenant-configured
+#              trusted hosts. No upstream fix. EPSS ~0, not in KEV. Blast radius:
+#              low (integration, not the public API)."
+#     owner: fred
+#     accepted: 2026-06-04
+#     expires: 2026-09-04
+#
+# Base-image OS package with no patched version yet (not removable — transitive):
+#
+#   - cve: CVE-2026-40356
+#     component: krb5 (libgssapi-krb5-2, libk5crypto3, libkrb5-3, libkrb5support0)
+#     component_type: os-package
+#     vex_justification: vulnerable_code_not_in_execute_path
+#     reason: "Kerberos DoS. No gssapi/kerberos usage in app; pulled transitively
+#              via libpq5 (Postgres). Not removable without breaking libpq.
+#              status=affected, no FixedVersion. Re-check on base-image bump."
+#     owner: fred
+#     accepted: 2026-06-04
+#     expires: 2026-09-04

package/templates/constraints.md

@@ -0,0 +1,25 @@
+# Constraints
+
+> Invariants that must always hold. These are **not** behaviors (no external actor,
+> not observable in a scenario) — they are guarantees. Anything that failed the
+> feature-file admission test in `grimoire-draft` because it is a security control,
+> NFR, performance budget, observability guarantee, or compliance rule lives here,
+> **not** in a `.feature`.
+>
+> Each constraint is verified by a `unit-invariant` test (created at plan/apply),
+> never by a Gherkin scenario. Keep this register narrow: assert, justify, point to
+> the proof. Don't let it grow into an issue tracker — open work belongs in your
+> tracker, not here.
+
+| Constraint (assertion) | Rationale | How verified | Links |
+|------------------------|-----------|--------------|-------|
+| _e.g._ Log output never contains PII or secrets | Confidential data must not leak to logs/stdout | `tests/test_log_scrubbing.py::test_pii_redacted` | [ADR-0008](.grimoire/decisions/0008-...) |
+| _e.g._ Every request is isolated to its tenant | Multi-tenant data separation | `tests/test_tenant_isolation.py` | — |
+
+<!--
+Add one row per constraint. Guidance:
+- Assertion: a flat "X always holds" statement. No Given/When/Then.
+- Rationale: why it matters, in one line.
+- How verified: the exact test id that proves it. If none yet, write "TODO: unit-invariant test" — the plan stage will create it.
+- Links: the MADR that decided it (don't restate the decision here — DRY).
+-->

package/dist/commands/archive.d.ts

@@ -1,3 +0,0 @@
-import { Command } from "commander";
-export declare const archiveCommand: Command;
-//# sourceMappingURL=archive.d.ts.map

package/dist/commands/archive.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../src/commands/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,eAAO,MAAM,cAAc,SAgBvB,CAAC"}

package/dist/commands/archive.js

@@ -1,22 +0,0 @@
-import { Command } from "commander";
-import { archiveChange, ArchiveError } from "../core/archive.js";
-import chalk from "chalk";
-export const archiveCommand = new Command("archive")
-    .description("Archive a completed change")
-    .argument("<change-id>", "Change to archive")
-    .option("-y, --yes", "Skip confirmation prompt")
-    .action(async (changeId, options) => {
-    try {
-        await archiveChange(changeId, {
-            yes: options.yes ?? false,
-        });
-    }
-    catch (err) {
-        if (err instanceof ArchiveError) {
-            console.error(chalk.red(err.message));
-            process.exit(1);
-        }
-        throw err;
-    }
-});
-//# sourceMappingURL=archive.js.map

package/dist/commands/archive.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/commands/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KACjD,WAAW,CAAC,4BAA4B,CAAC;KACzC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;KAC5C,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;KAC/C,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,QAAQ,EAAE;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/log.d.ts

@@ -1,3 +0,0 @@
-import { Command } from "commander";
-export declare const logCommand: Command;
-//# sourceMappingURL=log.d.ts.map

package/dist/commands/log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/commands/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,eAAO,MAAM,UAAU,SAWnB,CAAC"}

package/dist/commands/log.js

@@ -1,15 +0,0 @@
-import { Command } from "commander";
-import { generateLog } from "../core/log.js";
-export const logCommand = new Command("log")
-    .description("Generate change log from archived grimoire changes")
-    .option("--from <ref>", "Start date or git tag (inclusive)")
-    .option("--to <ref>", "End date or git tag (inclusive)")
-    .option("--json", "Output as JSON")
-    .action(async (options) => {
-    await generateLog({
-        from: options.from,
-        to: options.to,
-        json: options.json ?? false,
-    });
-});
-//# sourceMappingURL=log.js.map

package/dist/commands/log.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/commands/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KACzC,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,cAAc,EAAE,mCAAmC,CAAC;KAC3D,MAAM,CAAC,YAAY,EAAE,iCAAiC,CAAC;KACvD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,WAAW,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/map.d.ts

@@ -1,3 +0,0 @@
-import { Command } from "commander";
-export declare const mapCommand: Command;
-//# sourceMappingURL=map.d.ts.map

package/dist/commands/map.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../../src/commands/map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,eAAO,MAAM,UAAU,SAUnB,CAAC"}

package/dist/commands/map.js

@@ -1,16 +0,0 @@
-import { Command } from "commander";
-import { runMap, McpRequiredError } from "../core/map.js";
-export const mapCommand = new Command("map")
-    .description("Detect drift between conventions files and the current codebase")
-    .option("--duplicates", "Run jscpd to detect code duplication")
-    .action(async (options) => {
-    try {
-        await runMap({ duplicates: options.duplicates ?? false });
-    }
-    catch (e) {
-        if (e instanceof McpRequiredError)
-            process.exit(1);
-        throw e;
-    }
-});
-//# sourceMappingURL=map.js.map

package/dist/commands/map.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/commands/map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KACzC,WAAW,CAAC,iEAAiE,CAAC;KAC9E,MAAM,CAAC,cAAc,EAAE,sCAAsC,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/core/archive.d.ts

@@ -1,9 +0,0 @@
-interface ArchiveOptions {
-    yes: boolean;
-}
-export declare class ArchiveError extends Error {
-    constructor(message: string);
-}
-export declare function archiveChange(changeId: string, options: ArchiveOptions): Promise<void>;
-export {};
-//# sourceMappingURL=archive.d.ts.map

package/dist/core/archive.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../src/core/archive.ts"],"names":[],"mappings":"AAKA,UAAU,cAAc;IACtB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAwCD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/core/archive.js

@@ -1,81 +0,0 @@
-import { readFile, mkdir, cp, rm } from "node:fs/promises";
-import { join } from "node:path";
-import chalk from "chalk";
-import { findProjectRoot, resolveChangePath } from "../utils/paths.js";
-export class ArchiveError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "ArchiveError";
-    }
-}
-async function checkPendingTasks(changePath, yes) {
-    try {
-        const tasksContent = await readFile(join(changePath, "tasks.md"), "utf-8");
-        const pending = tasksContent.match(/^- \[ \] .+$/gm) || [];
-        if (pending.length > 0) {
-            console.log(chalk.yellow(`Warning: ${pending.length} task(s) still pending.`));
-            if (!yes)
-                throw new ArchiveError("Use --yes to archive anyway, or complete tasks first.");
-        }
-    }
-    catch (err) {
-        if (err instanceof ArchiveError)
-            throw err;
-        // No tasks file — ok
-    }
-}
-async function getUserConfirmation(changeId) {
-    const readline = await import("node:readline/promises");
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    const answer = await rl.question(`Archive change "${changeId}"? (y/N) `);
-    rl.close();
-    return answer.toLowerCase() === "y";
-}
-async function syncArtifactsToBaseline(changePath, root) {
-    try {
-        await cp(join(changePath, "features"), join(root, "features"), { recursive: true, force: true });
-        console.log(`  ${chalk.green("synced")} features to baseline`);
-    }
-    catch {
-        // No proposed features
-    }
-    try {
-        // TODO: handle sequential numbering for new decisions
-        await cp(join(changePath, "decisions"), join(root, ".grimoire", "decisions"), { recursive: true, force: true });
-        console.log(`  ${chalk.green("synced")} decisions to baseline`);
-    }
-    catch {
-        // No proposed decisions
-    }
-}
-export async function archiveChange(changeId, options) {
-    const root = await findProjectRoot();
-    const changePath = resolveChangePath(root, changeId);
-    try {
-        await readFile(join(changePath, "manifest.md"), "utf-8");
-    }
-    catch {
-        throw new ArchiveError(`Change "${changeId}" not found or missing manifest.`);
-    }
-    await checkPendingTasks(changePath, options.yes);
-    if (!options.yes) {
-        if (!(await getUserConfirmation(changeId))) {
-            console.log("Cancelled.");
-            return;
-        }
-    }
-    await syncArtifactsToBaseline(changePath, root);
-    const date = new Date().toISOString().split("T")[0];
-    const archiveDir = join(root, ".grimoire", "archive", `${date}-${changeId}`);
-    await mkdir(archiveDir, { recursive: true });
-    await cp(join(changePath, "manifest.md"), join(archiveDir, "manifest.md"));
-    try {
-        await cp(join(changePath, "tasks.md"), join(archiveDir, "tasks.md"));
-    }
-    catch {
-        // no tasks
-    }
-    await rm(changePath, { recursive: true });
-    console.log(`\n${chalk.green("Archived")} ${changeId} → .grimoire/archive/${date}-${changeId}/`);
-}
-//# sourceMappingURL=archive.js.map

package/dist/core/archive.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/core/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAMvE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,GAAY;IAC/D,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,OAAO,CAAC,MAAM,yBAAyB,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,YAAY,CAAC,uDAAuD,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY;YAAE,MAAM,GAAG,CAAC;QAC3C,qBAAqB;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,QAAQ,WAAW,CAAC,CAAC;IACzE,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,UAAkB,EAAE,IAAY;IACrE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,IAAI,CAAC;QACH,sDAAsD;QACtD,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChH,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAuB;IAEvB,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,WAAW,QAAQ,kCAAkC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,uBAAuB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IAED,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,QAAQ,wBAAwB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;AACnG,CAAC"}

package/dist/core/log.d.ts

@@ -1,8 +0,0 @@
-interface LogOptions {
-    from?: string;
-    to?: string;
-    json: boolean;
-}
-export declare function generateLog(options: LogOptions): Promise<void>;
-export {};
-//# sourceMappingURL=log.d.ts.map

package/dist/core/log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/core/log.ts"],"names":[],"mappings":"AAMA,UAAU,UAAU;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;CACf;AA+BD,wBAAsB,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCpE"}

package/dist/core/log.js

@@ -1,140 +0,0 @@
-import { readdir, readFile } from "node:fs/promises";
-import { join } from "node:path";
-import chalk from "chalk";
-import { simpleGit } from "simple-git";
-import { findProjectRoot } from "../utils/paths.js";
-function printLogEntry(entry, currentMonth) {
-    const month = entry.date.slice(0, 7);
-    if (month !== currentMonth) {
-        console.log(chalk.bold.underline(`\n${formatMonth(month)}\n`));
-    }
-    console.log(`  ${chalk.dim(entry.date)}  ${chalk.cyan(entry.changeId)}`);
-    console.log(`  ${entry.summary}`);
-    if (entry.features.length > 0)
-        console.log(`  ${chalk.dim("Features:")} ${entry.features.join(", ")}`);
-    if (entry.decisions.length > 0)
-        console.log(`  ${chalk.dim("Decisions:")} ${entry.decisions.join(", ")}`);
-    if (entry.scenarios.length > 0) {
-        const display = entry.scenarios.length <= 3
-            ? entry.scenarios.join(", ")
-            : `${entry.scenarios.slice(0, 3).join(", ")} +${entry.scenarios.length - 3} more`;
-        console.log(`  ${chalk.dim("Scenarios:")} ${display}`);
-    }
-    console.log();
-    return month;
-}
-export async function generateLog(options) {
-    const root = await findProjectRoot();
-    const archiveDir = join(root, ".grimoire", "archive");
-    let entries;
-    try {
-        entries = await readArchiveEntries(archiveDir);
-    }
-    catch {
-        throw new Error("No archive found. No changes have been archived yet.");
-    }
-    if (entries.length === 0) {
-        console.log(chalk.dim("No archived changes found."));
-        return;
-    }
-    if (options.from || options.to) {
-        const fromDate = options.from ? await resolveDate(root, options.from) : "";
-        const toDate = options.to ? await resolveDate(root, options.to) : "9999-99-99";
-        entries = entries.filter((e) => e.date >= fromDate && e.date <= toDate);
-    }
-    entries.sort((a, b) => b.date.localeCompare(a.date));
-    if (options.json) {
-        console.log(JSON.stringify(entries, null, 2));
-        return;
-    }
-    console.log(chalk.bold("Grimoire Change Log\n"));
-    let currentMonth = "";
-    for (const entry of entries) {
-        currentMonth = printLogEntry(entry, currentMonth);
-    }
-    console.log(chalk.dim(`${entries.length} change(s) total`));
-}
-async function readArchiveEntries(archiveDir) {
-    const dirs = await readdir(archiveDir, { withFileTypes: true });
-    const entries = [];
-    for (const dir of dirs) {
-        if (!dir.isDirectory())
-            continue;
-        // Directory name format: YYYY-MM-DD-<change-id>
-        const match = dir.name.match(/^(\d{4}-\d{2}-\d{2})-(.+)$/);
-        if (!match)
-            continue;
-        const [, date, changeId] = match;
-        const manifestPath = join(archiveDir, dir.name, "manifest.md");
-        let manifest;
-        try {
-            manifest = await readFile(manifestPath, "utf-8");
-        }
-        catch {
-            continue;
-        }
-        entries.push({
-            date,
-            changeId,
-            ...parseManifest(manifest),
-        });
-    }
-    return entries;
-}
-function parseManifest(content) {
-    // Extract title: # Change: <summary>
-    const titleMatch = content.match(/^#\s+Change:\s*(.+)$/m);
-    const summary = titleMatch ? titleMatch[1].trim() : "(no summary)";
-    // Extract why section
-    const whyMatch = content.match(/^##\s+Why\s*\n([\s\S]*?)(?=^##|\Z)/m);
-    const why = whyMatch ? whyMatch[1].trim() : "";
-    // Extract feature changes
-    const features = [];
-    const featurePattern = /\*\*(?:ADDED|MODIFIED|REMOVED)\*\*\s+`([^`]+\.feature)`/g;
-    let m;
-    while ((m = featurePattern.exec(content)) !== null) {
-        features.push(m[1]);
-    }
-    // Extract decisions
-    const decisions = [];
-    const decisionPattern = /\*\*(?:ADDED|MODIFIED|SUPERSEDED)\*\*\s+`(\d{4}-[^`]+\.md)`/g;
-    while ((m = decisionPattern.exec(content)) !== null) {
-        decisions.push(m[1]);
-    }
-    // Extract scenarios
-    const scenarios = [];
-    const scenarioPattern = /"([^"]+)"/g;
-    const scenarioSection = content.match(/^##\s+Scenarios\s+(?:Added|Modified)\s*\n([\s\S]*?)(?=^##|\Z)/gm);
-    if (scenarioSection) {
-        for (const section of scenarioSection) {
-            while ((m = scenarioPattern.exec(section)) !== null) {
-                scenarios.push(m[1]);
-            }
-        }
-    }
-    return { summary, why, features, decisions, scenarios };
-}
-async function resolveDate(root, ref) {
-    if (/^\d{4}-\d{2}-\d{2}$/.test(ref)) {
-        return ref;
-    }
-    // Try as a git tag
-    try {
-        const git = simpleGit(root);
-        const stdout = await git.raw(["log", "-1", "--format=%aI", ref]);
-        return stdout.trim().split("T")[0];
-    }
-    catch {
-        console.error(chalk.yellow(`Warning: Could not resolve "${ref}" as a git tag or date. Using as-is.`));
-        return ref;
-    }
-}
-function formatMonth(yyyyMm) {
-    const [year, month] = yyyyMm.split("-");
-    const months = [
-        "January", "February", "March", "April", "May", "June",
-        "July", "August", "September", "October", "November", "December",
-    ];
-    return `${months[parseInt(month, 10) - 1]} ${year}`;
-}
-//# sourceMappingURL=log.js.map