@momentiq/dark-factory-cli 2.1.0 → 2.2.0

package/dist/mcp/tools/onboard.js

@@ -0,0 +1,115 @@
+// packages/cli/src/mcp/tools/onboard.ts
+//
+// Cycle 15 Phase C — `df_onboard {target, mode}` MCP tool.
+//
+// Delegates EVERYTHING beyond analysis-only to `cmdOnboard()` from
+// `src/commands/onboard.ts` (Task 4.5) so the MCP path returns the SAME
+// merged plan as the CLI path. The MCP tool MUST NOT re-assemble a plan
+// from seeders alone — that would skip Phase B's LLM-emitted CLAUDE.md
+// and break Task 5 metric 1 through the MCP path.
+//
+// Per-mode `destructiveHint` annotation is set on the response (NOT on
+// the tool registration) because it varies per call:
+//   - analysis-only / dry-run → false (read-only / in-memory)
+//   - apply / pr             → true  (writes to working tree / opens PR)
+//
+// Tool-registration `openWorldHint: true` applies to ALL modes —
+// analysis reads the filesystem; pr reaches GitHub via gh.
+import { z } from "zod";
+import { analyze } from "../../onboard/analyze.js";
+import { cmdOnboard } from "../../commands/onboard.js";
+function isDestructive(mode) {
+    return mode === "apply" || mode === "pr";
+}
+function renderMarkdownSummary(input) {
+    if ("analysis" in input.sc) {
+        const a = input.sc.analysis;
+        return [
+            `**df_onboard** (mode=analysis-only)`,
+            `- canonicalName: ${a.canonicalName || "(unknown)"}`,
+            `- stacks: ${a.stacks.map((s) => s.language).join(", ") || "(none)"}`,
+            `- services: ${a.services.length}`,
+            `- decisions: ${a.decisions.length}`,
+            `- analyzerErrors: ${a.analyzerErrors.length}`,
+        ].join("\n");
+    }
+    const p = input.sc;
+    return [
+        `**df_onboard** (mode=${input.mode}, dryRun=${p.dryRun}, applied=${p.applied})`,
+        `- files in plan: ${p.plan.files.length}`,
+        p.branchName ? `- branch: ${p.branchName}` : null,
+    ]
+        .filter((line) => Boolean(line))
+        .join("\n");
+}
+export function registerOnboardTool(server, _opts = {}) {
+    server.registerTool("df_onboard", {
+        title: "Dark Factory onboard",
+        description: "Run `df onboard` on a target repo. Modes: analysis-only (Phase A — emit RepoAnalysis only), " +
+            "dry-run (Phase B+C — emit merged ScaffoldPlan without writing), apply (Phase B+C — write files " +
+            "to working tree), pr (Phase B+C — branch + commit + open a PR via gh). 'apply' and 'pr' mutate " +
+            "the working tree; their per-call response carries `annotations.destructiveHint: true`.",
+        inputSchema: {
+            target: z
+                .string()
+                .describe("Absolute path to the target repo's working tree."),
+            mode: z
+                .enum(["analysis-only", "dry-run", "apply", "pr"])
+                .describe("Operation mode. 'analysis-only' is read-only; 'dry-run' computes a plan but writes nothing; " +
+                "'apply' writes files in place; 'pr' writes to a fresh branch and opens a PR."),
+        },
+        outputSchema: {
+            analysis: z
+                .unknown()
+                .optional()
+                .describe("Present when mode='analysis-only' — the RepoAnalysis JSON."),
+            plan: z
+                .unknown()
+                .optional()
+                .describe("Present when mode != 'analysis-only' — the merged ScaffoldPlan."),
+            dryRun: z.boolean().optional(),
+            applied: z.boolean().optional(),
+            branchName: z.string().nullable().optional(),
+        },
+        annotations: {
+            // openWorldHint applies to ALL modes — analysis reads the
+            // filesystem; pr reaches GitHub via gh. destructiveHint is NOT
+            // set at registration because it varies per-mode (set per-call
+            // on the response below).
+            openWorldHint: true,
+        },
+    }, async (args) => {
+        const target = args.target;
+        const mode = args.mode;
+        const destructiveHint = isDestructive(mode);
+        if (mode === "analysis-only") {
+            const analysis = await analyze(target);
+            const result = { analysis };
+            return {
+                structuredContent: result,
+                content: [{ type: "text", text: renderMarkdownSummary({ mode, sc: result }) }],
+                // Per-call destructive flag — analysis-only is read-only.
+                annotations: { destructiveHint },
+            };
+        }
+        // dry-run / apply / pr — delegate to cmdOnboard. `json: true` is
+        // structurally irrelevant in the orchestrator's contract today
+        // (the orchestrator always returns the structured plan; the CLI
+        // shim handles rendered diff output), but pass it explicitly so
+        // the intent ("MCP wants the structured plan, not a rendered
+        // ANSI diff") is documented at the call site.
+        const out = (await cmdOnboard({ target, mode }));
+        const result = {
+            plan: out.plan,
+            dryRun: mode === "dry-run",
+            applied: out.applied,
+            branchName: out.branchName,
+        };
+        return {
+            structuredContent: result,
+            content: [{ type: "text", text: renderMarkdownSummary({ mode, sc: result }) }],
+            annotations: { destructiveHint },
+        };
+    });
+}
+//# sourceMappingURL=onboard.js.map

package/dist/mcp/tools/onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../../src/mcp/tools/onboard.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,kDAAkD;AAClD,EAAE;AACF,uEAAuE;AACvE,qDAAqD;AACrD,8DAA8D;AAC9D,yEAAyE;AACzE,EAAE;AACF,iEAAiE;AACjE,2DAA2D;AAE3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,UAAU,EAA6B,MAAM,2BAA2B,CAAC;AAqBlF,SAAS,aAAa,CAAC,IAAiB;IACtC,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAiE;IAC9F,IAAI,UAAU,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC;QAC5B,OAAO;YACL,qCAAqC;YACrC,oBAAoB,CAAC,CAAC,aAAa,IAAI,WAAW,EAAE;YACpD,aAAa,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;YACrE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClC,gBAAgB,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE;YACpC,qBAAqB,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE;SAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IACnB,OAAO;QACL,wBAAwB,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,OAAO,GAAG;QAC/E,oBAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QACzC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI;KAClD;SACE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,QAAoC,EAAE;IAEtC,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,8FAA8F;YAC9F,iGAAiG;YACjG,iGAAiG;YACjG,wFAAwF;QAC1F,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;iBACjD,QAAQ,CACP,8FAA8F;gBAC5F,8EAA8E,CACjF;SACJ;QACD,YAAY,EAAE;YACZ,QAAQ,EAAE,CAAC;iBACR,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,4DAA4D,CAAC;YACzE,IAAI,EAAE,CAAC;iBACJ,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,iEAAiE,CAAC;YAC9E,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAC7C;QACD,WAAW,EAAE;YACX,0DAA0D;YAC1D,+DAA+D;YAC/D,+DAA+D;YAC/D,0BAA0B;YAC1B,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAmB,CAAC;QACtC,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,MAAM,GAAuB,EAAE,QAAQ,EAAE,CAAC;YAChD,OAAO;gBACL,iBAAiB,EAAE,MAA4C;gBAC/D,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC9E,0DAA0D;gBAC1D,WAAW,EAAE,EAAE,eAAe,EAAE;aACjC,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,+DAA+D;QAC/D,gEAAgE;QAChE,gEAAgE;QAChE,6DAA6D;QAC7D,8CAA8C;QAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAyB,CAAC;QACzE,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,IAAI,KAAK,SAAS;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC;QACF,OAAO;YACL,iBAAiB,EAAE,MAA4C;YAC/D,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAC9E,WAAW,EAAE,EAAE,eAAe,EAAE;SACjC,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/onboard/apply-plan.d.ts

@@ -0,0 +1,29 @@
+import { type MergeResult } from "./writers/merge.js";
+import { type SkipResult } from "./writers/skip.js";
+import type { ScaffoldPlan } from "./scaffold-schema.js";
+export type ApplyMode = "dry-run" | "apply";
+export interface EmitResult {
+    path: string;
+    action: "emit";
+    wrote: boolean;
+}
+export type ApplyFileResult = EmitResult | MergeResult | SkipResult;
+export interface ApplyResult {
+    mode: ApplyMode;
+    results: ApplyFileResult[];
+    rendered?: string;
+}
+export interface ApplyOptions {
+    mode: ApplyMode;
+    force?: boolean;
+    color?: boolean;
+    stderr?: (s: string) => void;
+}
+export declare class ScaffoldApplyError extends Error {
+    written: string[];
+    notWritten: string[];
+    cause: unknown;
+    constructor(message: string, written: string[], notWritten: string[], cause: unknown);
+}
+export declare function applyPlan(rootDir: string, plan: ScaffoldPlan, opts: ApplyOptions): Promise<ApplyResult>;
+//# sourceMappingURL=apply-plan.d.ts.map

package/dist/onboard/apply-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../src/onboard/apply-plan.ts"],"names":[],"mappings":"AAcA,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO;CAOrF;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,WAAW,CAAC,CAuDtB"}

package/dist/onboard/apply-plan.js

@@ -0,0 +1,80 @@
+// packages/cli/src/onboard/apply-plan.ts
+//
+// Dispatcher over the three writers + the dry-run renderer. The PR writer
+// is a separate entry point (pr-writer.ts) because it spans subprocess
+// orchestration (gh auth check + branch + commit + gh pr create) that
+// doesn't belong in this hot path.
+//
+// Partial-failure contract (per B-D7): on any write error mid-loop, collect
+// the written-so-far list + the not-written list and re-throw a
+// ScaffoldApplyError. Idempotency: callers can re-run --apply after fixing
+// the disk/permission issue; written files are overwritten with identical
+// content; merge files re-detect the BEGIN/END block.
+import { writeEmit } from "./writers/emit.js";
+import { writeMerge } from "./writers/merge.js";
+import { writeSkip } from "./writers/skip.js";
+import { renderDryRun } from "./writers/dry-run-renderer.js";
+export class ScaffoldApplyError extends Error {
+    written;
+    notWritten;
+    cause;
+    constructor(message, written, notWritten, cause) {
+        super(message);
+        this.name = "ScaffoldApplyError";
+        this.written = written;
+        this.notWritten = notWritten;
+        this.cause = cause;
+    }
+}
+export async function applyPlan(rootDir, plan, opts) {
+    if (opts.mode !== "dry-run" && opts.mode !== "apply") {
+        throw new Error(`df onboard: applyPlan does not handle mode "${opts.mode}". ` +
+            "For pr mode, use runPrMode(plan, ...) from pr-writer.ts.");
+    }
+    if (opts.mode === "dry-run") {
+        const renderOpts = opts.color !== undefined ? { color: opts.color } : {};
+        const rendered = await renderDryRun(rootDir, plan, renderOpts);
+        const results = plan.files.map((f) => {
+            if (f.action === "skip")
+                return { path: f.path, action: "skip", rationale: f.rationale, wrote: false };
+            if (f.action === "emit")
+                return { path: f.path, action: "emit", wrote: false };
+            return { path: f.path, action: "merge", wrote: false, skipped: false };
+        });
+        return { mode: "dry-run", results, rendered };
+    }
+    // apply mode
+    const results = [];
+    const written = [];
+    for (let i = 0; i < plan.files.length; i++) {
+        const file = plan.files[i];
+        try {
+            if (file.action === "skip") {
+                results.push(await writeSkip(rootDir, file));
+                continue;
+            }
+            if (file.action === "emit") {
+                await writeEmit(rootDir, file, { force: opts.force ?? false });
+                results.push({ path: file.path, action: "emit", wrote: true });
+                written.push(file.path);
+                continue;
+            }
+            // merge
+            const mergeOpts = opts.stderr !== undefined ? { stderr: opts.stderr } : {};
+            const r = await writeMerge(rootDir, file, mergeOpts);
+            results.push(r);
+            if (r.wrote)
+                written.push(file.path);
+        }
+        catch (err) {
+            const notWritten = plan.files.slice(i).map((f) => f.path);
+            throw new ScaffoldApplyError(`df onboard: write failed at ${file.path} (${err instanceof Error ? err.message : String(err)}). ` +
+                `Files written before the failure: ${written.length ? written.join(", ") : "(none)"}. ` +
+                `Files NOT written: ${notWritten.join(", ")}. ` +
+                `Re-run \`df onboard --apply\` after addressing the disk/perm issue; ` +
+                `written files will be overwritten with the same content (idempotent).`, written, notWritten, err);
+        }
+    }
+    return { mode: "apply", results };
+}
+//# sourceMappingURL=apply-plan.js.map

package/dist/onboard/apply-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../../src/onboard/apply-plan.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,sEAAsE;AACtE,mCAAmC;AACnC,EAAE;AACF,4EAA4E;AAC5E,gEAAgE;AAChE,2EAA2E;AAC3E,0EAA0E;AAC1E,sDAAsD;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAoB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA2B7D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,OAAO,CAAW;IAClB,UAAU,CAAW;IACZ,KAAK,CAAU;IACxB,YAAY,OAAe,EAAE,OAAiB,EAAE,UAAoB,EAAE,KAAc;QAClF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,IAAkB,EAClB,IAAkB;IAElB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,IAAc,KAAK;YACrE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAwB,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAsB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACtD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACvG,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,aAAa;IACb,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,QAAQ;YACR,MAAM,SAAS,GAAqC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,IAAI,CAAC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;gBAChG,qCAAqC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;gBACvF,sBAAsB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC/C,sEAAsE;gBACtE,uEAAuE,EACzE,OAAO,EACP,UAAU,EACV,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/onboard/auto-profile.d.ts

@@ -0,0 +1,3 @@
+import type { RepoAnalysis } from "./schema.js";
+export declare function autoProfile(analysis: RepoAnalysis): "local" | "cloud";
+//# sourceMappingURL=auto-profile.d.ts.map

package/dist/onboard/auto-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-profile.d.ts","sourceRoot":"","sources":["../../src/onboard/auto-profile.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,GAAG,OAAO,CAGrE"}

package/dist/onboard/auto-profile.js

@@ -0,0 +1,20 @@
+// packages/cli/src/onboard/auto-profile.ts
+//
+// Resolve the critic profile (local | cloud) from a RepoAnalysis when the
+// operator did not pass --profile explicitly.
+//
+// This module is shipped as its own file (not inline in commands/onboard.ts)
+// so Phase C's deterministic .agent-review/config.json seeder can import the
+// same function via `import { autoProfile } from "../auto-profile.js"`. The
+// single-source-of-truth keeps Phase B + Phase C aligned on the heuristic
+// without either side re-implementing it.
+//
+// Heuristic (B-D8): a repo that already has a DF cli-pin AND a cloud PR
+// workflow is one that already runs the cloud quartet — keep them on
+// `cloud`. Everything else defaults to `local`. Explicit `--profile` always
+// wins; this function is only the fallback.
+export function autoProfile(analysis) {
+    const dfWired = analysis.dfPresence.cliPin !== null && analysis.dfPresence.prWorkflow;
+    return dfWired ? "cloud" : "local";
+}
+//# sourceMappingURL=auto-profile.js.map

package/dist/onboard/auto-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-profile.js","sourceRoot":"","sources":["../../src/onboard/auto-profile.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,4CAA4C;AAI5C,MAAM,UAAU,WAAW,CAAC,QAAsB;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;IACtF,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACrC,CAAC"}

package/dist/onboard/generate-plan.d.ts

@@ -0,0 +1,18 @@
+import { type ScaffoldPlan } from "./scaffold-schema.js";
+import { type LlmInputs, type LlmResult } from "./llm-client.js";
+import type { RepoAnalysis } from "./schema.js";
+import type { Template } from "./template-loader.js";
+export interface GeneratePlanOptions {
+    apiKey?: string;
+    modelId: string;
+    /** Resolved critic profile (B-D8). Flows into the scaffold prompt so the LLM
+     *  emits a profile-correct `.agent-review/config.json`. The CLI resolves the
+     *  profile (explicit `--profile` flag, else `autoProfile(analysis)`) before
+     *  calling generatePlan. */
+    profile: "local" | "cloud";
+    callLlm?: (inputs: LlmInputs) => Promise<LlmResult>;
+}
+export interface GeneratePlanResult extends Omit<ScaffoldPlan, never> {
+}
+export declare function generatePlan(analysis: RepoAnalysis, template: Template, opts: GeneratePlanOptions): Promise<ScaffoldPlan>;
+//# sourceMappingURL=generate-plan.d.ts.map

package/dist/onboard/generate-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-plan.d.ts","sourceRoot":"","sources":["../../src/onboard/generate-plan.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;gCAG4B;IAC5B,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAE3B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;CAEpE;AAID,wBAAsB,YAAY,CAChC,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,YAAY,CAAC,CAsDvB"}

package/dist/onboard/generate-plan.js

@@ -0,0 +1,68 @@
+// packages/cli/src/onboard/generate-plan.ts
+//
+// Stage B entry point. Composes the prompt renderer, the LLM client, and
+// the ScaffoldPlanSchema validator into one async function. One retry on
+// validation failure (the model gets a chance to fix its own JSON when
+// shown the Zod error); zero retries on transient LLM errors (the LLM
+// client wrapper already handles those).
+import { zodToJsonSchema } from "zod-to-json-schema";
+import { ScaffoldPlanSchema, SCAFFOLD_PLAN_BYTE_BUDGET, } from "./scaffold-schema.js";
+import { renderScaffoldPrompt } from "./prompts.js";
+import { callScaffoldLlm, } from "./llm-client.js";
+const TOOL_NAME = "emit_scaffold_plan";
+export async function generatePlan(analysis, template, opts) {
+    const { systemPrompt, userMessage } = await renderScaffoldPrompt(analysis, template.files, { profile: opts.profile });
+    const inputSchema = zodToJsonSchema(ScaffoldPlanSchema, "ScaffoldPlan");
+    const callLlm = opts.callLlm ?? ((i) => callScaffoldLlm(i));
+    // exactOptionalPropertyTypes forbids assigning `undefined` to an optional
+    // property; conditionally spread `apiKey` only when defined so the llm-client
+    // falls through to its ANTHROPIC_API_KEY env-var lookup.
+    const baseInputs = {
+        systemPrompt,
+        toolName: TOOL_NAME,
+        toolInputSchema: inputSchema,
+        modelId: opts.modelId,
+        ...(opts.apiKey !== undefined ? { apiKey: opts.apiKey } : {}),
+    };
+    // Attempt 1
+    let result = await callLlm({ ...baseInputs, userMessage });
+    let parsed = ScaffoldPlanSchema.safeParse(stampTemplateRef(result.planJson, template));
+    if (!parsed.success) {
+        // Capture the first-attempt issues BEFORE the retry overwrites `parsed`,
+        // so the final error can cite both attempts (per W3 finding round-1).
+        const firstAttemptIssues = parsed.error.issues;
+        // Retry once with the validation error appended — the model often self-corrects.
+        const retryMessage = `${userMessage}\n\n## Previous attempt rejected\n` +
+            "Your last tool call did not validate. Issues:\n" +
+            firstAttemptIssues.map((i) => `- ${i.path.join(".")}: ${i.message}`).join("\n") +
+            "\n\nEmit `emit_scaffold_plan` again, fixing each issue above.";
+        result = await callLlm({ ...baseInputs, userMessage: retryMessage });
+        parsed = ScaffoldPlanSchema.safeParse(stampTemplateRef(result.planJson, template));
+        if (!parsed.success) {
+            throw new Error(`df onboard: scaffold plan validation failed after retry. ` +
+                `First-attempt issues: ${formatZodIssues(firstAttemptIssues)}; ` +
+                `second-attempt issues: ${formatZodIssues(parsed.error.issues)}`);
+        }
+    }
+    // Byte-budget backstop (per B-D2). Per-array caps and per-field maxLength
+    // catch most overflows; this is the final guardrail before the writer.
+    const serialized = JSON.stringify(parsed.data);
+    if (serialized.length > SCAFFOLD_PLAN_BYTE_BUDGET) {
+        throw new Error(`df onboard: ScaffoldPlan exceeds ${SCAFFOLD_PLAN_BYTE_BUDGET}-byte (64 KB) budget: ` +
+            `produced ${serialized.length} bytes. Tighten per-file tailored_content or files[] count.`);
+    }
+    return parsed.data;
+}
+// stampTemplateRef forces the plan's templateRef to be the loader's canonicalRef,
+// not the LLM's value — the LLM could echo a stale or fabricated ref, and the
+// plan's provenance must be ground-truth.
+function stampTemplateRef(planJson, template) {
+    if (planJson && typeof planJson === "object" && !Array.isArray(planJson)) {
+        return { ...planJson, templateRef: template.canonicalRef };
+    }
+    return planJson;
+}
+function formatZodIssues(issues) {
+    return issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`).join("; ");
+}
+//# sourceMappingURL=generate-plan.js.map

package/dist/onboard/generate-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-plan.js","sourceRoot":"","sources":["../../src/onboard/generate-plan.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,sEAAsE;AACtE,yCAAyC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AAoBzB,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAsB,EACtB,QAAkB,EAClB,IAAyB;IAEzB,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,oBAAoB,CAC9D,QAAQ,EACR,QAAQ,CAAC,KAAK,EACd,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;IACF,MAAM,WAAW,GAAG,eAAe,CAAC,kBAAkB,EAAE,cAAc,CAAW,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,0EAA0E;IAC1E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,UAAU,GAAmC;QACjD,YAAY;QACZ,QAAQ,EAAE,SAAS;QACnB,eAAe,EAAE,WAAW;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;IAEF,YAAY;IACZ,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/C,iFAAiF;QACjF,MAAM,YAAY,GAChB,GAAG,WAAW,oCAAoC;YAClD,iDAAiD;YACjD,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/E,+DAA+D,CAAC;QAClE,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,2DAA2D;gBACzD,yBAAyB,eAAe,CAAC,kBAAkB,CAAC,IAAI;gBAChE,0BAA0B,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,oCAAoC,yBAAyB,wBAAwB;YACnF,YAAY,UAAU,CAAC,MAAM,6DAA6D,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,kFAAkF;AAClF,8EAA8E;AAC9E,0CAA0C;AAC1C,SAAS,gBAAgB,CAAC,QAAiB,EAAE,QAAkB;IAC7D,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,GAAI,QAAoC,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,MAAwD;IAC/E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC"}

package/dist/onboard/llm-client.d.ts

@@ -0,0 +1,45 @@
+export interface LlmInputs {
+    systemPrompt: string;
+    userMessage: string;
+    toolName: string;
+    toolInputSchema: object;
+    apiKey?: string;
+    modelId: string;
+    maxTokens?: number;
+}
+export interface LlmResult {
+    planJson: unknown;
+    modelId: string;
+    inputTokens: number;
+    outputTokens: number;
+    attempts: number;
+}
+export interface LlmClientLike {
+    messages: {
+        create(params: unknown): Promise<{
+            id: string;
+            model: string;
+            content: Array<{
+                type: "tool_use";
+                name: string;
+                input: unknown;
+            } | {
+                type: "text";
+                text: string;
+            } | {
+                type: string;
+            }>;
+            usage: {
+                input_tokens: number;
+                output_tokens: number;
+            };
+            stop_reason: string;
+        }>;
+    };
+}
+export type LlmClientFactory = (apiKey: string) => LlmClientLike;
+export interface CallOptions {
+    createClient?: LlmClientFactory;
+}
+export declare function callScaffoldLlm(inputs: LlmInputs, opts?: CallOptions): Promise<LlmResult>;
+//# sourceMappingURL=llm-client.d.ts.map

package/dist/onboard/llm-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-client.d.ts","sourceRoot":"","sources":["../../src/onboard/llm-client.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE;QACR,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,MAAM,CAAC;YACd,OAAO,EAAE,KAAK,CACV;gBAAE,IAAI,EAAE,UAAU,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,OAAO,CAAA;aAAE,GAClD;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,GAC9B;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CACnB,CAAC;YACF,KAAK,EAAE;gBAAE,YAAY,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE,CAAC;YACvD,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,aAAa,CAAC;AAkBjE,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,SAAS,CAAC,CA2DpB"}

package/dist/onboard/llm-client.js

@@ -0,0 +1,84 @@
+// packages/cli/src/onboard/llm-client.ts
+//
+// Anthropic Messages-API wrapper with tool-use structured output.
+//
+// Why a wrapper instead of calling the SDK directly: the call shape is
+// shared by generatePlan() (Phase B) AND a future Phase B.1 prompt-test
+// harness, and the retry classification (transient vs permanent) is
+// security-critical (a 401 must never silently retry). Centralizing the
+// shape here means a new caller can't accidentally drift from the policy.
+//
+// Tool-use binding: declare a single tool `emit_scaffold_plan` whose
+// `input_schema` is the JSON-Schema rendering of ScaffoldPlanSchema; set
+// tool_choice to force the model into a tool call; read the tool-use
+// block's `input` as the candidate JSON. The SDK validates the JSON
+// shape at the API boundary; downstream Zod validation re-checks the
+// semantics (discriminated-union, byte budgets).
+import Anthropic from "@anthropic-ai/sdk";
+const DEFAULT_FACTORY = (apiKey) => new Anthropic({ apiKey });
+const TRANSIENT_STATUSES = new Set([429, 500, 502, 503, 504]);
+function isTransient(err) {
+    if (!(err instanceof Error))
+        return false;
+    const status = err.status;
+    if (typeof status === "number")
+        return TRANSIENT_STATUSES.has(status);
+    const code = err.code;
+    if (typeof code === "string" && /ECONNRESET|ETIMEDOUT|ENETUNREACH|EAI_AGAIN/.test(code)) {
+        return true;
+    }
+    return false;
+}
+export async function callScaffoldLlm(inputs, opts = {}) {
+    const apiKey = inputs.apiKey ?? process.env["ANTHROPIC_API_KEY"];
+    if (!apiKey || !apiKey.trim()) {
+        throw new Error("df onboard: ANTHROPIC_API_KEY is required for Phase B's scaffold-generation LLM call. " +
+            "Set the env var (or pass --api-key) and re-run.");
+    }
+    const factory = opts.createClient ?? DEFAULT_FACTORY;
+    const client = factory(apiKey);
+    const request = {
+        model: inputs.modelId,
+        max_tokens: inputs.maxTokens ?? 8192,
+        system: inputs.systemPrompt,
+        tools: [
+            {
+                name: inputs.toolName,
+                description: "Emit the tailored ScaffoldPlan JSON. The input schema is enforced strictly; " +
+                    "fields not in the schema are rejected.",
+                input_schema: inputs.toolInputSchema,
+            },
+        ],
+        tool_choice: { type: "tool", name: inputs.toolName },
+        messages: [{ role: "user", content: inputs.userMessage }],
+    };
+    let attempts = 0;
+    let lastErr = null;
+    for (let attempt = 0; attempt < 2; attempt++) {
+        attempts++;
+        try {
+            const r = await client.messages.create(request);
+            const toolBlock = r.content.find((b) => b.type === "tool_use" &&
+                b.name === inputs.toolName);
+            if (!toolBlock) {
+                throw new Error(`df onboard: no tool_use block found in LLM response (got stop_reason=${r.stop_reason}). ` +
+                    "The model did not honor tool_choice; check the prompt and model selection.");
+            }
+            return {
+                planJson: toolBlock.input,
+                modelId: r.model,
+                inputTokens: r.usage.input_tokens,
+                outputTokens: r.usage.output_tokens,
+                attempts,
+            };
+        }
+        catch (err) {
+            lastErr = err;
+            if (attempt === 0 && isTransient(err))
+                continue;
+            throw err;
+        }
+    }
+    throw lastErr instanceof Error ? lastErr : new Error(String(lastErr));
+}
+//# sourceMappingURL=llm-client.js.map

package/dist/onboard/llm-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-client.js","sourceRoot":"","sources":["../../src/onboard/llm-client.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,kEAAkE;AAClE,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,oEAAoE;AACpE,wEAAwE;AACxE,0EAA0E;AAC1E,EAAE;AACF,qEAAqE;AACrE,yEAAyE;AACzE,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,iDAAiD;AAEjD,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAsC1C,MAAM,eAAe,GAAqB,CAAC,MAAM,EAAE,EAAE,CACnD,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAA6B,CAAC;AAExD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAI,GAAmC,CAAC,MAAM,CAAC;IAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,IAAI,GAAI,GAAiC,CAAC,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAiB,EACjB,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,wFAAwF;YACtF,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,OAAO;QACrB,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACpC,MAAM,EAAE,MAAM,CAAC,YAAY;QAC3B,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,WAAW,EACT,8EAA8E;oBAC5E,wCAAwC;gBAC5C,YAAY,EAAE,MAAM,CAAC,eAAe;aACrC;SACF;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAW;QAC7D,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;KACnE,CAAC;IAEF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,QAAQ,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAA2D,EAAE,CAC5D,CAAsB,CAAC,IAAI,KAAK,UAAU;gBAC1C,CAAuB,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CACpD,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,wEAAwE,CAAC,CAAC,WAAW,KAAK;oBACxF,4EAA4E,CAC/E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,SAAS,CAAC,KAAK;gBACzB,OAAO,EAAE,CAAC,CAAC,KAAK;gBAChB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY;gBACjC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa;gBACnC,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,OAAO,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/onboard/prompts/scaffold.md

@@ -0,0 +1,93 @@
+<!-- packages/cli/src/onboard/prompts/scaffold.md -->
+# Dark Factory `df onboard` — Stage B scaffold prompt (cycle 15 Phase B)
+
+You are the "Stage B" scaffold-tailoring agent inside `@momentiq/dark-factory-cli`'s
+`df onboard` command. Your role is to consume a **structured `RepoAnalysis`** (the
+deterministic Stage A output) and a **sage-blueprint template directory** (the raw
+markdown/JSON/YAML files that define the agent-context-set scaffolding), then
+emit a **`ScaffoldPlan`** describing how to tailor the template to the target repo.
+
+## Operating contract
+
+You MUST emit your response via the `emit_scaffold_plan` tool call. Do NOT emit
+prose text outside of the tool call. The tool's `input_schema` is strict; fields
+outside the schema are rejected, and the action discriminator forces an unambiguous
+choice per file.
+
+For every file in the input template, choose exactly ONE action:
+
+| Action | Use when | Required fields |
+|---|---|---|
+| `emit` | The target repo does NOT have this file yet, OR the existing file is empty/trivial and should be replaced. | `path`, `rationale`, `tailored_content` |
+| `merge` | The target repo HAS a non-trivial version of this file and the LLM-tailored content should be APPENDED additively (NOT replace). Reserve for `CLAUDE.md` and `AGENTS.md`. | `path`, `rationale`, `tailored_content` |
+| `skip` | The target repo already covers this file's intent, OR the file is irrelevant to the target's stack/services. | `path`, `rationale` (NO `tailored_content` — the schema rejects it) |
+
+### Tailoring rules
+
+1. **Cite the analysis, never invent.** Every claim in `tailored_content` must be
+   grounded in a field of `RepoAnalysis`. If you reference a service, it MUST
+   appear in `analysis.services[]`. If you cite a stack, it MUST appear in
+   `analysis.stacks[]`. If you describe a deploy story, cite `analysis.ci.deployStory`.
+   Hallucinating a non-existent service or stack is the worst possible failure
+   mode of this pipeline.
+
+2. **Substitute `{{ }}` placeholders.** The template files contain
+   `{{ project_name }}`, `{{ stack }}`, `{{ services }}` and similar Copier-style
+   placeholders. Replace each with the concrete value from `RepoAnalysis`:
+   - `{{ project_name }}` → `analysis.canonicalName.split("/")[1]`
+   - `{{ owner }}` → `analysis.canonicalName.split("/")[0]`
+   - `{{ stack }}` → `analysis.stacks[0]?.language` (or "polyglot" if multiple)
+   - `{{ services }}` → bulleted list from `analysis.services[]`
+   - `{{ default_branch }}` → `analysis.git.defaultBranch`
+   The bodies you emit must contain NO leftover `{{ }}` after substitution.
+
+3. **Use `merge` only for `CLAUDE.md` and `AGENTS.md`.** Other files don't have
+   the marker-comment infrastructure; use `emit` or `skip` for everything else.
+   When `analysis.docs.hasClaudeMd === true`, use `merge` for `CLAUDE.md`;
+   otherwise use `emit`. Same for `AGENTS.md`.
+
+4. **Skip when the target already covers it.** If `analysis.dfPresence.configJson === true`,
+   skip `.agent-review/config.json` — don't fight the existing gate. If
+   `analysis.dfPresence.prWorkflow === true`, skip `dark-factory-pr.yml`. Cite
+   the dfPresence field in the rationale.
+
+4a. **ALWAYS SKIP `.agent-review/config.json` (the Phase C seeder owns this path).** Emit a single `skip` entry for `.agent-review/config.json` with rationale "phase C seeder owns this path; phase B does not emit config.json"; do NOT include `tailored_content`. This applies regardless of `analysis.dfPresence.configJson`'s value and supersedes rule 4 for this specific path.
+
+5. **`merge` content rules.** When you emit `tailored_content` for a `merge`
+   action, that content is APPENDED after the existing file (with marker
+   comments managed by the CLI). Therefore:
+   - Do NOT include the user's existing headings.
+   - START with a top-level H2 section (e.g. `## Dark Factory onboarding`) so the
+     append reads naturally.
+   - Do NOT include `<!-- df onboard: inserted-by-cycle-15 -->` markers — the
+     CLI's merge writer adds them.
+
+6. **`rationale` is one sentence.** Plain English, ≤ 800 chars; reference the
+   specific analysis fields that drove the action choice.
+
+7. **`summary` is one paragraph.** ≤ 800 chars; what the LLM tailored, why, and
+   any caveats the operator should know.
+
+## Inputs
+
+### Resolved critic profile
+
+`{{CRITIC_PROFILE}}`
+
+(The phase-c seeder reads this resolved profile to emit the matching .agent-review/config.json; phase B's role is to thread it, not to emit the JSON.)
+
+### RepoAnalysis
+
+```json
+{{ANALYSIS_JSON}}
+```
+
+### Template file list (path: sizeBytes)
+
+{{TEMPLATE_FILE_LIST}}
+
+### Template file bodies
+
+{{TEMPLATE_FILE_BODIES}}
+
+## Now emit the `emit_scaffold_plan` tool call.

package/dist/onboard/prompts.d.ts

@@ -0,0 +1,13 @@
+import type { RepoAnalysis } from "./schema.js";
+import type { TemplateFile } from "./template-loader.js";
+export interface RenderedPrompt {
+    systemPrompt: string;
+    userMessage: string;
+}
+export interface RenderScaffoldPromptOptions {
+    /** Resolved critic profile (B-D8). Substituted into the system prompt's `{{CRITIC_PROFILE}}` placeholder so the LLM's `.agent-review/config.json` tailoring uses the right fleet. */
+    profile: "local" | "cloud";
+}
+export declare function renderScaffoldPromptSync(asset: string, analysis: RepoAnalysis, templateFiles: TemplateFile[], opts: RenderScaffoldPromptOptions): RenderedPrompt;
+export declare function renderScaffoldPrompt(analysis: RepoAnalysis, templateFiles: TemplateFile[], opts: RenderScaffoldPromptOptions): Promise<RenderedPrompt>;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/onboard/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/onboard/prompts.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAYzD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,qLAAqL;IACrL,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;CAC5B;AAcD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,YAAY,EAAE,EAC7B,IAAI,EAAE,2BAA2B,GAChC,cAAc,CAsBhB;AAED,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,YAAY,EAAE,EAC7B,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,cAAc,CAAC,CAGzB"}