@latysh-development/monolith 0.1.0-alpha.3 → 0.1.0-alpha.4

package/README.md

@@ -183,7 +183,7 @@ listing — not an official partnership, endorsement or certification.
 
 ## Project Status
 
-**Alpha** (`0.1.0-alpha.3`). The API and CLI are experimental and may change
+**Alpha** (`0.1.0-alpha.4`). The API and CLI are experimental and may change
 without notice. Published to npm under the alpha dist-tag. Durable State and the Coordinatorium
 (`monolith durable`, `monolith mission`) are experimental and are not part of
 the Quick Start.

package/dist/brief/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/brief/cli.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,iGAAiG;IACjG,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;AAIzD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA6C9D;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BvF"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/brief/cli.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;GAcG;AAOH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,iGAAiG;IACjG,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;AAIzD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA6C9D;AAQD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BvF"}

package/dist/brief/cli.js

@@ -14,6 +14,7 @@
  * -> 0, whatever the Freshness; usage error -> 1). It does not combine with
  * `--strict`, whose meaning (Completeness) belongs to the brief.
  */
+import { colorEnabled, paint, tintStatuses } from '../cli/style.js';
 import { collect } from './collect.js';
 import { render, DEFAULT_MAX_CHARS } from './render.js';
 import { reconcile, renderReconciliation } from './reconcile.js';
@@ -60,6 +61,11 @@ export function parseBriefArgs(args) {
     }
     return reconcileMode ? { ok: true, maxChars, strict, reconcile: true } : { ok: true, maxChars, strict };
 }
+/** Interactive terminals only: tints the Freshness / Completeness verdict words; plain text otherwise (byte for byte). */
+function tintBrief(text) {
+    const on = colorEnabled();
+    return tintStatuses(on ? text.replace(/^MONOLITH [A-Z ]+$/m, (h) => paint(h, 'head', true)) : text, on, ['Freshness', 'Completeness']);
+}
 export async function runBrief(args, targetDir = process.cwd()) {
     const parsed = parseBriefArgs(args);
     if (!parsed.ok) {
@@ -70,11 +76,11 @@ export async function runBrief(args, targetDir = process.cwd()) {
         if (!model.freshness || !model.freshnessEvidence) {
             throw new Error('monolith brief --reconcile: no freshness evidence could be collected.');
         }
-        process.stdout.write(renderReconciliation(reconcile(model.freshnessEvidence, model.freshness), parsed.maxChars).text);
+        process.stdout.write(tintBrief(renderReconciliation(reconcile(model.freshnessEvidence, model.freshness), parsed.maxChars).text));
         process.exit(0);
     }
     const { text, completeness } = render(model, parsed.maxChars);
-    process.stdout.write(text);
+    process.stdout.write(tintBrief(text));
     if (completeness === 'INCOMPLETE') {
         console.error('monolith brief: result is INCOMPLETE — see the Diagnostics section above.');
     }

package/dist/brief/collect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../src/brief/collect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAyBH,OAAO,KAAK,EACV,UAAU,EAOX,MAAM,YAAY,CAAC;AAiBpB,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,QAAa,CAAC;AAiUnD,wBAAsB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAqEpE"}
+{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../src/brief/collect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAyBH,OAAO,KAAK,EACV,UAAU,EAOX,MAAM,YAAY,CAAC;AAmBpB,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,QAAa,CAAC;AAwUnD,wBAAsB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAqEpE"}

package/dist/brief/collect.js

@@ -20,8 +20,9 @@ import { maskNonContent } from './markdown-context.js';
 import { selectActiveMissions, selectRecentFinishedMissions, selectLatestCheckpoint, hasCheckpointOrderMismatch, } from './selectors.js';
 import { stateFilePath, validateState, createInitialState, MAX_STATE_BYTES } from '../coordinatorium/index.js';
 import { ACTIVE_MD_REL, PARKED_IDEAS_LIMIT, PROTOCOLS_DIR, ROADMAP_INDEX_REL, STORY_INDEX_REL, HANDOFF_REL } from './constants.js';
-import { evaluateFreshness, parseActiveStoryClaim, parseRoadmapActiveStory, parseRoadmapStatuses, parseStoryIndexStatuses, } from './freshness.js';
-import { readGitSignals } from './git-signals.js';
+import { evaluateFreshness, extractWorkItemIds, parseActiveStoryClaim, parseRoadmapActiveStory, parseRoadmapStatuses, parseStoryIndexStatuses, } from './freshness.js';
+import { readBlobAt, readGitSignals } from './git-signals.js';
+import { attributeKnowledge } from './knowledge.js';
 import { ideaStore, listIdeas } from '../ideas/index.js';
 import { ideaNumber } from '../ideas/format.js';
 const RECENT_FINISHED_MISSIONS_LIMIT = 5;
@@ -270,8 +271,15 @@ function collectFreshness(targetDir, monolithRoot, root, story) {
     const content = new Map(docs.map((rel) => [rel, readStateDocument(targetDir, monolithRoot, root, rel)]));
     const roadmap = content.get(ROADMAP_INDEX_REL) ?? null;
     const storyIndex = content.get(STORY_INDEX_REL) ?? null;
+    const git = readGitSignals(targetDir, stateFiles);
     const evidence = {
-        git: readGitSignals(targetDir, stateFiles),
+        git,
+        knowledge: attributeKnowledge(git, {
+            monolithRoot,
+            stateFiles: new Set(stateFiles),
+            readBlob: (sha, rel) => readBlobAt(targetDir, sha, rel),
+            hasWorkItem: (subject) => extractWorkItemIds(subject).length > 0,
+        }),
         activeStory: story.fileExists && story.hasCurrentStorySection ? parseActiveStoryClaim(story.excerpt) : { kind: 'unknown' },
         roadmapActiveStory: roadmap === null ? null : parseRoadmapActiveStory(roadmap),
         roadmapStatuses: roadmap === null ? new Map() : parseRoadmapStatuses(roadmap),

package/dist/brief/freshness.d.ts

@@ -20,8 +20,9 @@
  *            absence of an active story never means "project complete".
  */
 import { maskNonContent } from './markdown-context.js';
+import type { KnowledgeEvidence } from './knowledge.js';
 export type FreshnessStatus = 'FRESH' | 'STALE' | 'UNKNOWN';
-export type FreshnessReasonCode = 'STATE_CONTRADICTION' | 'UNRECORDED_WORK' | 'GIT_UNAVAILABLE' | 'STATE_NOT_IN_GIT' | 'GIT_HISTORY_TRUNCATED' | 'UNATTRIBUTED_ACTIVITY' | 'NO_ACTIVITY_SINCE_STATE_UPDATE' | 'ACTIVITY_RECORDED';
+export type FreshnessReasonCode = 'STATE_CONTRADICTION' | 'UNRECORDED_WORK' | 'GIT_UNAVAILABLE' | 'STATE_NOT_IN_GIT' | 'GIT_HISTORY_TRUNCATED' | 'GIT_HISTORY_SHALLOW' | 'UNATTRIBUTED_ACTIVITY' | 'NO_ACTIVITY_SINCE_STATE_UPDATE' | 'ACTIVITY_RECORDED';
 export interface FreshnessReason {
     code: FreshnessReasonCode;
     message: string;
@@ -37,7 +38,7 @@ export interface GitCommitSignal {
     /** Paths changed by the commit, relative to the project directory. Empty for plain merges. */
     files: string[];
 }
-export type GitUnavailableReason = 'GIT_NOT_INSTALLED' | 'NOT_A_GIT_REPOSITORY' | 'GIT_FAILED';
+export type GitUnavailableReason = 'GIT_NOT_INSTALLED' | 'NOT_A_GIT_REPOSITORY' | 'GIT_FAILED' | 'GIT_OUTPUT_INVALID';
 export type GitSignals = {
     status: 'unavailable';
     reason: GitUnavailableReason;
@@ -52,6 +53,8 @@ export type GitSignals = {
     commitsSince: GitCommitSignal[];
     /** True when git history was cut at the read limit — the picture is partial. */
     truncated: boolean;
+    /** True in a shallow clone: history before the boundary is absent, so "no later activity" proves nothing. */
+    shallow?: boolean;
 };
 export type StoryClaim = {
     kind: 'none';
@@ -80,6 +83,8 @@ export interface FreshnessEvidence {
     recordedText: string;
     /** Repo-relative-to-project paths that are state documents (their own commits are not "activity"). */
     stateFiles: ReadonlySet<string>;
+    /** KA-001: commits explained by registered independent knowledge. Absent = none (older callers). */
+    knowledge?: KnowledgeEvidence;
 }
 export interface FreshnessResult {
     status: FreshnessStatus;
@@ -128,5 +133,15 @@ export declare function parseRoadmapActiveStory(content: string): string | null;
 export declare function parseRoadmapStatuses(content: string): Map<string, string>;
 /** `### [STORY ]<id> — title` followed by `**Status:** X` in story-index.md (outside code fences and comments). */
 export declare function parseStoryIndexStatuses(content: string): Map<string, string>;
+export interface Contradiction {
+    message: string;
+    documents: string[];
+}
+/**
+ * Contradictions between the state documents. Shared by `brief` (freshness /
+ * `--reconcile`) and `finalize` (FIN-002 consistency assessment) so that there
+ * is exactly one definition of "these documents disagree".
+ */
+export declare function findContradictions(ev: Pick<FreshnessEvidence, 'activeStory' | 'roadmapActiveStory' | 'roadmapStatuses' | 'storyIndexStatuses'>): Contradiction[];
 export declare function evaluateFreshness(ev: FreshnessEvidence): FreshnessResult;
 //# sourceMappingURL=freshness.d.ts.map

package/dist/brief/freshness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"freshness.d.ts","sourceRoot":"","sources":["../../src/brief/freshness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAyB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE9E,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAE5D,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,uBAAuB,GACvB,gCAAgC,GAChC,mBAAmB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,YAAY,CAAC;AAE/F,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACvD;IACE,MAAM,EAAE,IAAI,CAAC;IACb,gFAAgF;IAChF,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,gFAAgF;IAChF,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,gFAAgF;IAChF,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEN,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE;AAChC;;;GAGG;GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,UAAU,CAAC;IAChB,iHAAiH;IACjH,WAAW,EAAE,UAAU,CAAC;IACxB,6GAA6G;IAC7G,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,qGAAqG;IACrG,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,+GAA+G;IAC/G,YAAY,EAAE,MAAM,CAAC;IACrB,sGAAsG;IACtG,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;IACtD,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,6FAA6F;IAC7F,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kGAAkG;IAClG,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAyBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAOzD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAG5D;AAID,OAAO,EAAE,cAAc,EAAE,CAAC;AAW1B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CAuBxE;AAED,0FAA0F;AAC1F,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAYzE;AAED,mHAAmH;AACnH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAgB5E;AAqED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,GAAG,eAAe,CA2GxE"}
+{"version":3,"file":"freshness.d.ts","sourceRoot":"","sources":["../../src/brief/freshness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAyB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAE5D,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,qBAAqB,GACrB,uBAAuB,GACvB,gCAAgC,GAChC,mBAAmB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,mBAAmB,GAAG,sBAAsB,GAAG,YAAY,GAAG,oBAAoB,CAAC;AAEtH,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACvD;IACE,MAAM,EAAE,IAAI,CAAC;IACb,gFAAgF;IAChF,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,gFAAgF;IAChF,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,gFAAgF;IAChF,SAAS,EAAE,OAAO,CAAC;IACnB,6GAA6G;IAC7G,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEN,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE;AAChC;;;GAGG;GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,UAAU,CAAC;IAChB,iHAAiH;IACjH,WAAW,EAAE,UAAU,CAAC;IACxB,6GAA6G;IAC7G,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,qGAAqG;IACrG,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,+GAA+G;IAC/G,YAAY,EAAE,MAAM,CAAC;IACrB,sGAAsG;IACtG,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,oGAAoG;IACpG,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;IACtD,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,6FAA6F;IAC7F,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kGAAkG;IAClG,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAyBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAOzD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAG5D;AAID,OAAO,EAAE,cAAc,EAAE,CAAC;AAW1B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CAuBxE;AAED,0FAA0F;AAC1F,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAYzE;AAED,mHAAmH;AACnH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAgB5E;AAiBD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,oBAAoB,CAAC,GAAG,aAAa,EAAE,CA2ChK;AAID,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,GAAG,eAAe,CAuHxE"}

package/dist/brief/freshness.js

@@ -163,7 +163,12 @@ function listIds(ids) {
 function isDone(status) {
     return status === 'COMPLETED' || status === 'DONE';
 }
-function findContradictions(ev) {
+/**
+ * Contradictions between the state documents. Shared by `brief` (freshness /
+ * `--reconcile`) and `finalize` (FIN-002 consistency assessment) so that there
+ * is exactly one definition of "these documents disagree".
+ */
+export function findContradictions(ev) {
     const out = [];
     if (ev.activeStory.kind === 'unknown' && ev.activeStory.contradiction !== undefined) {
         out.push({
@@ -225,6 +230,7 @@ export function evaluateFreshness(ev) {
             GIT_NOT_INSTALLED: 'git is not installed or not runnable',
             NOT_A_GIT_REPOSITORY: 'the project is not inside a git repository',
             GIT_FAILED: 'git could not be queried',
+            GIT_OUTPUT_INVALID: 'git returned history that could not be parsed unambiguously',
         };
         reasons.push({ code: 'GIT_UNAVAILABLE', message: `Cannot compare state with history: ${why[ev.git.reason]}.` });
         gitVerdict = 'unknown';
@@ -241,9 +247,12 @@ export function evaluateFreshness(ev) {
         base.activityCount = activity.length;
         const referenced = new Set();
         let unattributed = 0;
+        let knowledgeCommits = 0;
         for (const c of activity) {
             const ids = extractWorkItemIds(c.subject);
-            if (ids.length === 0)
+            if (ids.length === 0 && ev.knowledge?.attributed.has(c.sha))
+                knowledgeCommits++;
+            else if (ids.length === 0)
                 unattributed++;
             for (const id of ids)
                 referenced.add(id);
@@ -265,6 +274,13 @@ export function evaluateFreshness(ev) {
             });
             gitVerdict = 'unknown';
         }
+        else if (ev.git.shallow === true) {
+            reasons.push({
+                code: 'GIT_HISTORY_SHALLOW',
+                message: 'The repository is a shallow clone: history before its boundary is not available, so the check cannot be complete.',
+            });
+            gitVerdict = 'unknown';
+        }
         else if (unattributed > 0) {
             reasons.push({
                 code: 'UNATTRIBUTED_ACTIVITY',
@@ -283,11 +299,13 @@ export function evaluateFreshness(ev) {
         else {
             reasons.push({
                 code: 'ACTIVITY_RECORDED',
-                message: `All ${activity.length} commit(s) after the last state update reference work items that the state documents mention.`,
+                message: knowledgeCommits === 0
+                    ? `All ${activity.length} commit(s) after the last state update reference work items that the state documents mention.`
+                    : `All ${activity.length} commit(s) after the last state update either reference work items that the state documents mention (${activity.length - knowledgeCommits}) or are attributed to registered independent knowledge (${knowledgeCommits}).`,
             });
             gitVerdict = 'fresh';
         }
-        if (activity.length > 0 && ev.activeStory.kind === 'none') {
+        if (activity.length - knowledgeCommits > 0 && ev.activeStory.kind === 'none') {
             warnings.push('Git activity exists after the last recorded state update, but no active story is recorded.');
         }
     }

package/dist/brief/git-signals.d.ts

@@ -1,17 +1,44 @@
 /**
- * Read-only git signals for the freshness check (SELF-AWARENESS-001).
+ * Read-only, local, offline git signals for the freshness check
+ * (SELF-AWARENESS-001, hardened in alpha.4 by A4-SEC-01/02).
  *
- * Runs only `git log` and `git rev-parse`, never a command that writes, never
- * through a shell, with config that could launch helper programs switched off.
- * Any failure degrades to `{ status: 'unavailable' }` — git being absent,
- * broken or refusing the directory must never fail the brief.
+ * Contract:
+ *  - Only `git log`, `git rev-list`, `git diff-tree`, `git rev-parse` and
+ *    `git cat-file` are run; never a command that writes, never through a shell.
+ *  - Offline: lazy fetch of missing objects (partial clones) is disabled
+ *    (`GIT_NO_LAZY_FETCH=1`) and every transport is refused
+ *    (`GIT_ALLOW_PROTOCOL=none`), so a missing object is an error here, never a
+ *    download, an object-store write, or a program started from remote config.
+ *    (`-c protocol.allow=never` alone was tested and does NOT stop a `file`
+ *    promisor remote; it is kept only as an additional layer.)
+ *  - Structural parsing: output that carries attacker-influenced text (commit
+ *    subjects, file names) is never split on characters that text can contain.
+ *    Records use NUL (`-z`), which neither a subject nor a path can contain;
+ *    commit metadata and file lists come from separate commands; shas and dates
+ *    are validated against strict patterns; the commit list is cross-checked
+ *    against `git rev-list`. Anything unexpected is `GIT_OUTPUT_INVALID`.
+ *  - Fail closed: every failure degrades to `{ status: 'unavailable' }`, which
+ *    freshness turns into UNKNOWN. Git being absent, broken, refusing the
+ *    directory or returning something unparseable never fails the brief and is
+ *    never evidence of FRESH.
  */
 import type { GitSignals } from './freshness.js';
 /** Upper bound on commits read after the last state update. Hitting it marks the result truncated. */
 export declare const MAX_COMMITS_SINCE = 500;
+/** Largest blob `readBlobAt` will read; checked with `git cat-file -s` before the content is requested. */
+export declare const MAX_BLOB_BYTES: number;
+export declare function isGitSha(s: string): boolean;
 /**
  * @param targetDir project directory (git is run from here; paths are relative to it)
  * @param stateFiles state documents, relative to `targetDir`. Only existing ones need be passed.
  */
 export declare function readGitSignals(targetDir: string, stateFiles: string[]): GitSignals;
+/**
+ * Contents of `relPath` (relative to `targetDir`) as of commit `sha`, or null
+ * when the file does not exist there, is larger than `MAX_BLOB_BYTES`, is not
+ * available locally (a partial clone's missing blob is NOT fetched) or cannot be
+ * read. `git cat-file` only: read-only, no textconv, no shell. Used by KA-001 to
+ * judge an idea registration as it was when the commit was made.
+ */
+export declare function readBlobAt(targetDir: string, sha: string, relPath: string): string | null;
 //# sourceMappingURL=git-signals.d.ts.map

package/dist/brief/git-signals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-signals.d.ts","sourceRoot":"","sources":["../../src/brief/git-signals.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,gBAAgB,CAAC;AAElE,sGAAsG;AACtG,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAgCrC;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,UAAU,CAqDlF"}
+{"version":3,"file":"git-signals.d.ts","sourceRoot":"","sources":["../../src/brief/git-signals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,gBAAgB,CAAC;AAElE,sGAAsG;AACtG,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,2GAA2G;AAC3G,eAAO,MAAM,cAAc,QAAa,CAAC;AAqDzC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAE3C;AAyDD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,UAAU,CA6DlF;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUzF"}

package/dist/brief/git-signals.js

@@ -1,14 +1,32 @@
 /**
- * Read-only git signals for the freshness check (SELF-AWARENESS-001).
+ * Read-only, local, offline git signals for the freshness check
+ * (SELF-AWARENESS-001, hardened in alpha.4 by A4-SEC-01/02).
  *
- * Runs only `git log` and `git rev-parse`, never a command that writes, never
- * through a shell, with config that could launch helper programs switched off.
- * Any failure degrades to `{ status: 'unavailable' }` — git being absent,
- * broken or refusing the directory must never fail the brief.
+ * Contract:
+ *  - Only `git log`, `git rev-list`, `git diff-tree`, `git rev-parse` and
+ *    `git cat-file` are run; never a command that writes, never through a shell.
+ *  - Offline: lazy fetch of missing objects (partial clones) is disabled
+ *    (`GIT_NO_LAZY_FETCH=1`) and every transport is refused
+ *    (`GIT_ALLOW_PROTOCOL=none`), so a missing object is an error here, never a
+ *    download, an object-store write, or a program started from remote config.
+ *    (`-c protocol.allow=never` alone was tested and does NOT stop a `file`
+ *    promisor remote; it is kept only as an additional layer.)
+ *  - Structural parsing: output that carries attacker-influenced text (commit
+ *    subjects, file names) is never split on characters that text can contain.
+ *    Records use NUL (`-z`), which neither a subject nor a path can contain;
+ *    commit metadata and file lists come from separate commands; shas and dates
+ *    are validated against strict patterns; the commit list is cross-checked
+ *    against `git rev-list`. Anything unexpected is `GIT_OUTPUT_INVALID`.
+ *  - Fail closed: every failure degrades to `{ status: 'unavailable' }`, which
+ *    freshness turns into UNKNOWN. Git being absent, broken, refusing the
+ *    directory or returning something unparseable never fails the brief and is
+ *    never evidence of FRESH.
  */
 import { execFileSync } from 'child_process';
 /** Upper bound on commits read after the last state update. Hitting it marks the result truncated. */
 export const MAX_COMMITS_SINCE = 500;
+/** Largest blob `readBlobAt` will read; checked with `git cat-file -s` before the content is requested. */
+export const MAX_BLOB_BYTES = 256 * 1024;
 const GIT_TIMEOUT_MS = 10_000;
 const GIT_MAX_BUFFER = 8 * 1024 * 1024;
 const SAFE_CONFIG = [
@@ -16,18 +34,37 @@ const SAFE_CONFIG = [
     '-c', 'core.pager=cat',
     '-c', 'log.showSignature=false',
     '-c', 'diff.external=',
+    '-c', 'core.quotepath=off',
+    '-c', 'protocol.allow=never',
+    '-c', 'protocol.file.allow=never',
 ];
+const SAFE_ENV = {
+    GIT_OPTIONAL_LOCKS: '0',
+    GIT_TERMINAL_PROMPT: '0',
+    GIT_EXTERNAL_DIFF: '',
+    /** git >= 2.44: a missing object is an error instead of a fetch from the promisor remote. */
+    GIT_NO_LAZY_FETCH: '1',
+    /** Older git has no GIT_NO_LAZY_FETCH; refusing every transport stops the fetch itself. */
+    GIT_ALLOW_PROTOCOL: 'none',
+    /** State-document names come from config: never git pathspec magic. */
+    GIT_LITERAL_PATHSPECS: '1',
+    /** Replace refs would change the history this check reports. */
+    GIT_NO_REPLACE_OBJECTS: '1',
+};
 class GitMissingError extends Error {
 }
-function git(cwd, args) {
+class GitOutputError extends Error {
+}
+function git(cwd, args, opts = {}) {
     try {
         return execFileSync('git', [...SAFE_CONFIG, ...args], {
             cwd,
             encoding: 'utf8',
             timeout: GIT_TIMEOUT_MS,
-            maxBuffer: GIT_MAX_BUFFER,
-            stdio: ['ignore', 'pipe', 'pipe'],
-            env: { ...process.env, GIT_OPTIONAL_LOCKS: '0', GIT_TERMINAL_PROMPT: '0', GIT_EXTERNAL_DIFF: '' },
+            maxBuffer: opts.maxBuffer ?? GIT_MAX_BUFFER,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            input: opts.input ?? '',
+            env: { ...process.env, ...SAFE_ENV },
         });
     }
     catch (err) {
@@ -36,8 +73,76 @@ function git(cwd, args) {
         throw err;
     }
 }
-const RS = '\x1e'; // record separator, starts each commit
-const US = '\x1f'; // unit separator, between header fields
+const SHA_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+const DATE_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:Z|[+-]\d{2}:\d{2})$/;
+/** `:oldmode newmode sha sha STATUS` (and the combined-diff form `::m m m sha sha sha SS`). Never a file name: names are consumed as the token after one. */
+const RAW_HEADER_RE = /^:+[0-7]{6}(?: [0-7]{6})* [0-9a-f]{4,64}(?: [0-9a-f]{4,64})* [A-Z]+[0-9]*$/;
+export function isGitSha(s) {
+    return SHA_RE.test(s);
+}
+/** Tokens of NUL-terminated output. The output must be empty or end with NUL. */
+function nulTokens(out) {
+    if (out === '')
+        return [];
+    if (!out.endsWith('\0'))
+        throw new GitOutputError('output is not NUL-terminated');
+    return out.slice(0, -1).split('\0');
+}
+/** `git log -z --no-patch --format=%H%x00%cI%x00%s`: strict triples. */
+function parseCommitTriples(out) {
+    const t = nulTokens(out);
+    if (t.length % 3 !== 0)
+        throw new GitOutputError('commit records are not complete triples');
+    const seen = new Set();
+    const commits = [];
+    for (let i = 0; i < t.length; i += 3) {
+        const [sha, date, subject] = [t[i], t[i + 1], t[i + 2]];
+        if (!SHA_RE.test(sha))
+            throw new GitOutputError('a commit id is not a valid object name');
+        if (!DATE_RE.test(date))
+            throw new GitOutputError('a commit date is not an ISO-8601 date');
+        if (seen.has(sha))
+            throw new GitOutputError('a commit appears twice');
+        seen.add(sha);
+        commits.push({ sha, date, subject });
+    }
+    return commits;
+}
+/**
+ * `git diff-tree --stdin -z --raw`: `<sha> NUL` then zero or more
+ * `<:raw-header> NUL <path> NUL`. A path is only ever read as the token after a
+ * raw header, so no file name (spaces, newlines, control characters, even a
+ * 40-hex string) can be mistaken for a commit id or a header. Commits without
+ * changes (clean merges, empty commits) may be absent; order must be preserved.
+ */
+function parseFileLists(out, expected, prefix) {
+    const t = nulTokens(out);
+    const files = new Map();
+    let next = 0; // index into `expected` the next sha must be at or after
+    let i = 0;
+    while (i < t.length) {
+        const sha = t[i++];
+        const at = SHA_RE.test(sha) ? expected.indexOf(sha, next) : -1;
+        if (at === -1)
+            throw new GitOutputError('a file list belongs to an unexpected or out-of-order commit');
+        next = at + 1;
+        const list = [];
+        while (i < t.length && t[i].startsWith(':')) {
+            if (!RAW_HEADER_RE.test(t[i]) || i + 1 >= t.length)
+                throw new GitOutputError('a raw diff entry is malformed');
+            // `--relative` is ignored for combined (merge) entries, which start with `::`: make them project-relative here.
+            if (t[i].startsWith('::')) {
+                if (t[i + 1].startsWith(prefix))
+                    list.push(t[i + 1].slice(prefix.length));
+            }
+            else
+                list.push(t[i + 1]);
+            i += 2;
+        }
+        files.set(sha, list);
+    }
+    return files;
+}
 /**
  * @param targetDir project directory (git is run from here; paths are relative to it)
  * @param stateFiles state documents, relative to `targetDir`. Only existing ones need be passed.
@@ -56,46 +161,71 @@ export function readGitSignals(targetDir, stateFiles) {
     }
     try {
         // A repository without commits has no HEAD: nothing to compare with.
+        let head;
         try {
-            git(targetDir, ['rev-parse', '--verify', '--quiet', 'HEAD']);
+            head = git(targetDir, ['rev-parse', '--verify', '--quiet', 'HEAD']).trim();
         }
         catch {
             return { status: 'ok', lastStateUpdate: null, commitsSince: [], truncated: false };
         }
+        if (!SHA_RE.test(head))
+            throw new GitOutputError('HEAD did not resolve to an object name');
+        // A shallow clone has no history before its boundary: "no later commit" proves nothing.
+        const shallowOut = git(targetDir, ['rev-parse', '--is-shallow-repository']).trim();
+        if (shallowOut !== 'true' && shallowOut !== 'false')
+            throw new GitOutputError('unexpected shallow-repository answer');
+        const shallow = shallowOut === 'true';
         let lastStateUpdate = null;
         if (stateFiles.length > 0) {
-            const out = git(targetDir, ['log', '-1', `--format=%H${US}%cI`, '--', ...stateFiles]).trim();
-            if (out) {
-                const [sha, date] = out.split(US);
-                lastStateUpdate = { sha, date };
+            const t = nulTokens(git(targetDir, ['log', '-1', '-z', '--no-patch', '--format=%H%x00%cI', head, '--', ...stateFiles]));
+            if (t.length !== 0) {
+                if (t.length !== 2 || !SHA_RE.test(t[0]) || !DATE_RE.test(t[1]))
+                    throw new GitOutputError('the last state update is not a valid record');
+                lastStateUpdate = { sha: t[0], date: t[1] };
             }
         }
         if (!lastStateUpdate)
-            return { status: 'ok', lastStateUpdate: null, commitsSince: [], truncated: false };
-        const raw = git(targetDir, [
-            'log',
-            `-n${MAX_COMMITS_SINCE + 1}`,
-            '--no-ext-diff',
-            '--no-textconv',
-            '--relative',
-            '--name-only',
-            `--format=${RS}%H${US}%cI${US}%s`,
-            `${lastStateUpdate.sha}..HEAD`,
-        ]);
-        const commits = [];
-        for (const rec of raw.split(RS)) {
-            if (!rec.trim())
-                continue;
-            const nl = rec.indexOf('\n');
-            const header = nl === -1 ? rec : rec.slice(0, nl);
-            const [sha, date, subject] = header.split(US);
-            const files = (nl === -1 ? '' : rec.slice(nl + 1)).split('\n').filter((l) => l.trim() !== '');
-            commits.push({ sha, date, subject: subject ?? '', files });
+            return { status: 'ok', lastStateUpdate: null, commitsSince: [], truncated: false, shallow };
+        const range = `${lastStateUpdate.sha}..${head}`;
+        const limit = `-n${MAX_COMMITS_SINCE + 1}`;
+        const commits = parseCommitTriples(git(targetDir, ['log', '-z', '--no-patch', limit, '--format=%H%x00%cI%x00%s', range]));
+        // Independent cross-check of the commit list: same range, no free text in the output.
+        const listed = nulTokens(git(targetDir, ['rev-list', '-z', limit, range]));
+        if (listed.length !== commits.length || listed.some((s, k) => s !== commits[k].sha)) {
+            throw new GitOutputError('the commit list disagrees with git rev-list');
+        }
+        let fileLists = new Map();
+        if (commits.length > 0) {
+            const prefix = git(targetDir, ['rev-parse', '--show-prefix']).replace(/\n$/, '');
+            const raw = git(targetDir, ['diff-tree', '--stdin', '-z', '-r', '--raw', '-c', '--root', '--no-renames', '--no-ext-diff', '--no-textconv', '--ignore-submodules=none', '--relative'], { input: `${commits.map((c) => c.sha).join('\n')}\n` });
+            fileLists = parseFileLists(raw, commits.map((c) => c.sha), prefix);
         }
-        const truncated = commits.length > MAX_COMMITS_SINCE;
-        return { status: 'ok', lastStateUpdate, commitsSince: commits.slice(0, MAX_COMMITS_SINCE), truncated };
+        const signals = commits.map((c) => ({ sha: c.sha, date: c.date, subject: c.subject, files: fileLists.get(c.sha) ?? [] }));
+        const truncated = signals.length > MAX_COMMITS_SINCE;
+        return { status: 'ok', lastStateUpdate, commitsSince: signals.slice(0, MAX_COMMITS_SINCE), truncated, shallow };
+    }
+    catch (err) {
+        return { status: 'unavailable', reason: err instanceof GitOutputError ? 'GIT_OUTPUT_INVALID' : 'GIT_FAILED' };
+    }
+}
+/**
+ * Contents of `relPath` (relative to `targetDir`) as of commit `sha`, or null
+ * when the file does not exist there, is larger than `MAX_BLOB_BYTES`, is not
+ * available locally (a partial clone's missing blob is NOT fetched) or cannot be
+ * read. `git cat-file` only: read-only, no textconv, no shell. Used by KA-001 to
+ * judge an idea registration as it was when the commit was made.
+ */
+export function readBlobAt(targetDir, sha, relPath) {
+    if (!SHA_RE.test(sha) || relPath.includes('\0') || relPath.startsWith('-'))
+        return null;
+    const spec = `${sha}:./${relPath}`;
+    try {
+        const size = git(targetDir, ['cat-file', '-s', spec]).trim();
+        if (!/^\d{1,9}$/.test(size) || Number(size) > MAX_BLOB_BYTES)
+            return null;
+        return git(targetDir, ['cat-file', 'blob', spec], { maxBuffer: MAX_BLOB_BYTES + 1024 });
     }
     catch {
-        return { status: 'unavailable', reason: 'GIT_FAILED' };
+        return null;
     }
 }

package/dist/brief/knowledge.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Independent knowledge attribution (KA-001).
+ *
+ * A project may keep knowledge that belongs to no work item — a strategy
+ * paper, a vision note — without that being "unattributed activity" and
+ * without pretending it is part of the active story. The registration is an
+ * idea of the Idea Store (`IDEA-NNN`) that declares the artifact's `paths`.
+ *
+ * A commit is attributed to independent knowledge only when ALL hold:
+ *   1. its subject names no work item (a work item keeps its own semantics);
+ *   2. it names at least one `IDEA-NNN` that is a valid idea file **in the
+ *      tree of that very commit** (so registering an idea later never
+ *      legalises older commits, and a commit that registers or edits the idea
+ *      is itself never attributed — its own files are not covered);
+ *   3. the ideas it names declare `paths`, every declared path passes the
+ *      attribution policy (exact document files only — no directory prefixes, no
+ *      source code, nothing inside the MONOLITH root; `attributionPathProblem`),
+ *      and EVERY file the commit changed (other than state documents) is covered
+ *      by those paths;
+ *   4. no changed file lies inside the MONOLITH root;
+ *   5. it names at most MAX_IDEA_IDS_PER_COMMIT ideas, and the run stays inside a
+ *      fixed budget of blob reads (each read is a git subprocess).
+ * Attribution only EXPLAINS a commit. It is not approval: a registered, correctly
+ * attributed change may still be wrong or unreviewed.
+ * Anything else stays exactly what it was: unattributed activity. Nothing here
+ * activates a story, touches the roadmap or marks anything done; it only
+ * decides whether a commit is *explained*. No LLM, no network, read-only git.
+ */
+import type { GitSignals } from './freshness.js';
+export interface KnowledgeAttribution {
+    /** Idea ids named in the subject that were valid in the commit's tree. */
+    ideaIds: string[];
+    /** The paths those ideas declared (what the attribution rests on), in declaration order, without repeats. */
+    paths: string[];
+}
+export interface KnowledgeRejection {
+    /** One short reason a person can check. */
+    reason: string;
+}
+export interface KnowledgeEvidence {
+    /** Commit sha → attribution. Only commits that satisfied every rule. */
+    attributed: ReadonlyMap<string, KnowledgeAttribution>;
+    /** Commit sha → why a commit that NAMED an idea was not attributed. */
+    rejected: ReadonlyMap<string, KnowledgeRejection>;
+}
+export declare const EMPTY_KNOWLEDGE: KnowledgeEvidence;
+/** Upper bound of commits examined; beyond it the rest simply stay unattributed. */
+export declare const MAX_KNOWLEDGE_COMMITS = 200;
+/** A subject naming more ideas than this is refused without any git call (A4-SEC-05). */
+export declare const MAX_IDEA_IDS_PER_COMMIT = 8;
+/** Total blob reads (git subprocesses) per run; beyond it commits stay unattributed. */
+export declare const MAX_KNOWLEDGE_BLOB_READS = 64;
+export declare function ideaIdsInSubject(subject: string): string[];
+/** Reads `relPath` as of commit `sha`; null when it does not exist there (or cannot be read). */
+export type BlobReader = (sha: string, relPath: string) => string | null;
+export declare function attributeKnowledge(git: GitSignals, opts: {
+    monolithRoot: string;
+    stateFiles: ReadonlySet<string>;
+    readBlob: BlobReader;
+    hasWorkItem: (subject: string) => boolean;
+}): KnowledgeEvidence;
+//# sourceMappingURL=knowledge.d.ts.map

package/dist/brief/knowledge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge.d.ts","sourceRoot":"","sources":["../../src/brief/knowledge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAmB,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6GAA6G;IAC7G,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACtD,uEAAuE;IACvE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CACnD;AAED,eAAO,MAAM,eAAe,EAAE,iBAAkE,CAAC;AAEjG,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,wFAAwF;AACxF,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAI3C,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1D;AAED,iGAAiG;AACjG,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAEzE,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,UAAU,EACf,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,GAC/H,iBAAiB,CAyBnB"}