@momentiq/dark-factory-cli 2.1.0 → 2.2.1

package/dist/onboard/apply-plan.js

@@ -0,0 +1,80 @@
+// packages/cli/src/onboard/apply-plan.ts
+//
+// Dispatcher over the three writers + the dry-run renderer. The PR writer
+// is a separate entry point (pr-writer.ts) because it spans subprocess
+// orchestration (gh auth check + branch + commit + gh pr create) that
+// doesn't belong in this hot path.
+//
+// Partial-failure contract (per B-D7): on any write error mid-loop, collect
+// the written-so-far list + the not-written list and re-throw a
+// ScaffoldApplyError. Idempotency: callers can re-run --apply after fixing
+// the disk/permission issue; written files are overwritten with identical
+// content; merge files re-detect the BEGIN/END block.
+import { writeEmit } from "./writers/emit.js";
+import { writeMerge } from "./writers/merge.js";
+import { writeSkip } from "./writers/skip.js";
+import { renderDryRun } from "./writers/dry-run-renderer.js";
+export class ScaffoldApplyError extends Error {
+    written;
+    notWritten;
+    cause;
+    constructor(message, written, notWritten, cause) {
+        super(message);
+        this.name = "ScaffoldApplyError";
+        this.written = written;
+        this.notWritten = notWritten;
+        this.cause = cause;
+    }
+}
+export async function applyPlan(rootDir, plan, opts) {
+    if (opts.mode !== "dry-run" && opts.mode !== "apply") {
+        throw new Error(`df onboard: applyPlan does not handle mode "${opts.mode}". ` +
+            "For pr mode, use runPrMode(plan, ...) from pr-writer.ts.");
+    }
+    if (opts.mode === "dry-run") {
+        const renderOpts = opts.color !== undefined ? { color: opts.color } : {};
+        const rendered = await renderDryRun(rootDir, plan, renderOpts);
+        const results = plan.files.map((f) => {
+            if (f.action === "skip")
+                return { path: f.path, action: "skip", rationale: f.rationale, wrote: false };
+            if (f.action === "emit")
+                return { path: f.path, action: "emit", wrote: false };
+            return { path: f.path, action: "merge", wrote: false, skipped: false };
+        });
+        return { mode: "dry-run", results, rendered };
+    }
+    // apply mode
+    const results = [];
+    const written = [];
+    for (let i = 0; i < plan.files.length; i++) {
+        const file = plan.files[i];
+        try {
+            if (file.action === "skip") {
+                results.push(await writeSkip(rootDir, file));
+                continue;
+            }
+            if (file.action === "emit") {
+                await writeEmit(rootDir, file, { force: opts.force ?? false });
+                results.push({ path: file.path, action: "emit", wrote: true });
+                written.push(file.path);
+                continue;
+            }
+            // merge
+            const mergeOpts = opts.stderr !== undefined ? { stderr: opts.stderr } : {};
+            const r = await writeMerge(rootDir, file, mergeOpts);
+            results.push(r);
+            if (r.wrote)
+                written.push(file.path);
+        }
+        catch (err) {
+            const notWritten = plan.files.slice(i).map((f) => f.path);
+            throw new ScaffoldApplyError(`df onboard: write failed at ${file.path} (${err instanceof Error ? err.message : String(err)}). ` +
+                `Files written before the failure: ${written.length ? written.join(", ") : "(none)"}. ` +
+                `Files NOT written: ${notWritten.join(", ")}. ` +
+                `Re-run \`df onboard --apply\` after addressing the disk/perm issue; ` +
+                `written files will be overwritten with the same content (idempotent).`, written, notWritten, err);
+        }
+    }
+    return { mode: "apply", results };
+}
+//# sourceMappingURL=apply-plan.js.map

package/dist/onboard/apply-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../../src/onboard/apply-plan.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,sEAAsE;AACtE,mCAAmC;AACnC,EAAE;AACF,4EAA4E;AAC5E,gEAAgE;AAChE,2EAA2E;AAC3E,0EAA0E;AAC1E,sDAAsD;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAoB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA2B7D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,OAAO,CAAW;IAClB,UAAU,CAAW;IACZ,KAAK,CAAU;IACxB,YAAY,OAAe,EAAE,OAAiB,EAAE,UAAoB,EAAE,KAAc;QAClF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,IAAkB,EAClB,IAAkB;IAElB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,IAAc,KAAK;YACrE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAwB,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAsB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACtD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACvG,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,aAAa;IACb,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,QAAQ;YACR,MAAM,SAAS,GAAqC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,IAAI,CAAC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;gBAChG,qCAAqC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;gBACvF,sBAAsB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC/C,sEAAsE;gBACtE,uEAAuE,EACzE,OAAO,EACP,UAAU,EACV,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/onboard/auto-profile.d.ts

@@ -0,0 +1,3 @@
+import type { RepoAnalysis } from "./schema.js";
+export declare function autoProfile(analysis: RepoAnalysis): "local" | "cloud";
+//# sourceMappingURL=auto-profile.d.ts.map

package/dist/onboard/auto-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-profile.d.ts","sourceRoot":"","sources":["../../src/onboard/auto-profile.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,GAAG,OAAO,CAGrE"}

package/dist/onboard/auto-profile.js

@@ -0,0 +1,20 @@
+// packages/cli/src/onboard/auto-profile.ts
+//
+// Resolve the critic profile (local | cloud) from a RepoAnalysis when the
+// operator did not pass --profile explicitly.
+//
+// This module is shipped as its own file (not inline in commands/onboard.ts)
+// so Phase C's deterministic .agent-review/config.json seeder can import the
+// same function via `import { autoProfile } from "../auto-profile.js"`. The
+// single-source-of-truth keeps Phase B + Phase C aligned on the heuristic
+// without either side re-implementing it.
+//
+// Heuristic (B-D8): a repo that already has a DF cli-pin AND a cloud PR
+// workflow is one that already runs the cloud quartet — keep them on
+// `cloud`. Everything else defaults to `local`. Explicit `--profile` always
+// wins; this function is only the fallback.
+export function autoProfile(analysis) {
+    const dfWired = analysis.dfPresence.cliPin !== null && analysis.dfPresence.prWorkflow;
+    return dfWired ? "cloud" : "local";
+}
+//# sourceMappingURL=auto-profile.js.map

package/dist/onboard/auto-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-profile.js","sourceRoot":"","sources":["../../src/onboard/auto-profile.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,4CAA4C;AAI5C,MAAM,UAAU,WAAW,CAAC,QAAsB;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;IACtF,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACrC,CAAC"}

package/dist/onboard/generate-plan.d.ts

@@ -0,0 +1,18 @@
+import { type ScaffoldPlan } from "./scaffold-schema.js";
+import { type LlmInputs, type LlmResult } from "./llm-client.js";
+import type { RepoAnalysis } from "./schema.js";
+import type { Template } from "./template-loader.js";
+export interface GeneratePlanOptions {
+    apiKey?: string;
+    modelId: string;
+    /** Resolved critic profile (B-D8). Flows into the scaffold prompt so the LLM
+     *  emits a profile-correct `.agent-review/config.json`. The CLI resolves the
+     *  profile (explicit `--profile` flag, else `autoProfile(analysis)`) before
+     *  calling generatePlan. */
+    profile: "local" | "cloud";
+    callLlm?: (inputs: LlmInputs) => Promise<LlmResult>;
+}
+export interface GeneratePlanResult extends Omit<ScaffoldPlan, never> {
+}
+export declare function generatePlan(analysis: RepoAnalysis, template: Template, opts: GeneratePlanOptions): Promise<ScaffoldPlan>;
+//# sourceMappingURL=generate-plan.d.ts.map

package/dist/onboard/generate-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-plan.d.ts","sourceRoot":"","sources":["../../src/onboard/generate-plan.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;gCAG4B;IAC5B,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAE3B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;CAEpE;AAID,wBAAsB,YAAY,CAChC,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,YAAY,CAAC,CA0DvB"}

package/dist/onboard/generate-plan.js

@@ -0,0 +1,72 @@
+// packages/cli/src/onboard/generate-plan.ts
+//
+// Stage B entry point. Composes the prompt renderer, the LLM client, and
+// the ScaffoldPlanSchema validator into one async function. One retry on
+// validation failure (the model gets a chance to fix its own JSON when
+// shown the Zod error); zero retries on transient LLM errors (the LLM
+// client wrapper already handles those).
+import { zodToJsonSchema } from "zod-to-json-schema";
+import { ScaffoldPlanSchema, SCAFFOLD_PLAN_BYTE_BUDGET, } from "./scaffold-schema.js";
+import { renderScaffoldPrompt } from "./prompts.js";
+import { callScaffoldLlm, } from "./llm-client.js";
+const TOOL_NAME = "emit_scaffold_plan";
+export async function generatePlan(analysis, template, opts) {
+    const { systemPrompt, userMessage } = await renderScaffoldPrompt(analysis, template.files, { profile: opts.profile });
+    // Anthropic's tool-use `input_schema` requires `type: "object"` at the top
+    // level. zodToJsonSchema(s, NAME) emits `{$ref, definitions: {NAME: ...}}`
+    // — no top-level type, so the API rejects it with `tools.0.custom.input_schema.type:
+    // Field required`. Omit the name to get the schema inlined at top level.
+    const inputSchema = zodToJsonSchema(ScaffoldPlanSchema);
+    const callLlm = opts.callLlm ?? ((i) => callScaffoldLlm(i));
+    // exactOptionalPropertyTypes forbids assigning `undefined` to an optional
+    // property; conditionally spread `apiKey` only when defined so the llm-client
+    // falls through to its ANTHROPIC_API_KEY env-var lookup.
+    const baseInputs = {
+        systemPrompt,
+        toolName: TOOL_NAME,
+        toolInputSchema: inputSchema,
+        modelId: opts.modelId,
+        ...(opts.apiKey !== undefined ? { apiKey: opts.apiKey } : {}),
+    };
+    // Attempt 1
+    let result = await callLlm({ ...baseInputs, userMessage });
+    let parsed = ScaffoldPlanSchema.safeParse(stampTemplateRef(result.planJson, template));
+    if (!parsed.success) {
+        // Capture the first-attempt issues BEFORE the retry overwrites `parsed`,
+        // so the final error can cite both attempts (per W3 finding round-1).
+        const firstAttemptIssues = parsed.error.issues;
+        // Retry once with the validation error appended — the model often self-corrects.
+        const retryMessage = `${userMessage}\n\n## Previous attempt rejected\n` +
+            "Your last tool call did not validate. Issues:\n" +
+            firstAttemptIssues.map((i) => `- ${i.path.join(".")}: ${i.message}`).join("\n") +
+            "\n\nEmit `emit_scaffold_plan` again, fixing each issue above.";
+        result = await callLlm({ ...baseInputs, userMessage: retryMessage });
+        parsed = ScaffoldPlanSchema.safeParse(stampTemplateRef(result.planJson, template));
+        if (!parsed.success) {
+            throw new Error(`df onboard: scaffold plan validation failed after retry. ` +
+                `First-attempt issues: ${formatZodIssues(firstAttemptIssues)}; ` +
+                `second-attempt issues: ${formatZodIssues(parsed.error.issues)}`);
+        }
+    }
+    // Byte-budget backstop (per B-D2). Per-array caps and per-field maxLength
+    // catch most overflows; this is the final guardrail before the writer.
+    const serialized = JSON.stringify(parsed.data);
+    if (serialized.length > SCAFFOLD_PLAN_BYTE_BUDGET) {
+        throw new Error(`df onboard: ScaffoldPlan exceeds ${SCAFFOLD_PLAN_BYTE_BUDGET}-byte (64 KB) budget: ` +
+            `produced ${serialized.length} bytes. Tighten per-file tailored_content or files[] count.`);
+    }
+    return parsed.data;
+}
+// stampTemplateRef forces the plan's templateRef to be the loader's canonicalRef,
+// not the LLM's value — the LLM could echo a stale or fabricated ref, and the
+// plan's provenance must be ground-truth.
+function stampTemplateRef(planJson, template) {
+    if (planJson && typeof planJson === "object" && !Array.isArray(planJson)) {
+        return { ...planJson, templateRef: template.canonicalRef };
+    }
+    return planJson;
+}
+function formatZodIssues(issues) {
+    return issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`).join("; ");
+}
+//# sourceMappingURL=generate-plan.js.map

package/dist/onboard/generate-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-plan.js","sourceRoot":"","sources":["../../src/onboard/generate-plan.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,sEAAsE;AACtE,yCAAyC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AAoBzB,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAsB,EACtB,QAAkB,EAClB,IAAyB;IAEzB,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,oBAAoB,CAC9D,QAAQ,EACR,QAAQ,CAAC,KAAK,EACd,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,qFAAqF;IACrF,yEAAyE;IACzE,MAAM,WAAW,GAAG,eAAe,CAAC,kBAAkB,CAAW,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,0EAA0E;IAC1E,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,UAAU,GAAmC;QACjD,YAAY;QACZ,QAAQ,EAAE,SAAS;QACnB,eAAe,EAAE,WAAW;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;IAEF,YAAY;IACZ,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/C,iFAAiF;QACjF,MAAM,YAAY,GAChB,GAAG,WAAW,oCAAoC;YAClD,iDAAiD;YACjD,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/E,+DAA+D,CAAC;QAClE,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,2DAA2D;gBACzD,yBAAyB,eAAe,CAAC,kBAAkB,CAAC,IAAI;gBAChE,0BAA0B,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,oCAAoC,yBAAyB,wBAAwB;YACnF,YAAY,UAAU,CAAC,MAAM,6DAA6D,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,kFAAkF;AAClF,8EAA8E;AAC9E,0CAA0C;AAC1C,SAAS,gBAAgB,CAAC,QAAiB,EAAE,QAAkB;IAC7D,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,GAAI,QAAoC,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,MAAwD;IAC/E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC"}

package/dist/onboard/llm-client.d.ts

@@ -0,0 +1,45 @@
+export interface LlmInputs {
+    systemPrompt: string;
+    userMessage: string;
+    toolName: string;
+    toolInputSchema: object;
+    apiKey?: string;
+    modelId: string;
+    maxTokens?: number;
+}
+export interface LlmResult {
+    planJson: unknown;
+    modelId: string;
+    inputTokens: number;
+    outputTokens: number;
+    attempts: number;
+}
+export interface LlmClientLike {
+    messages: {
+        create(params: unknown): Promise<{
+            id: string;
+            model: string;
+            content: Array<{
+                type: "tool_use";
+                name: string;
+                input: unknown;
+            } | {
+                type: "text";
+                text: string;
+            } | {
+                type: string;
+            }>;
+            usage: {
+                input_tokens: number;
+                output_tokens: number;
+            };
+            stop_reason: string;
+        }>;
+    };
+}
+export type LlmClientFactory = (apiKey: string) => LlmClientLike;
+export interface CallOptions {
+    createClient?: LlmClientFactory;
+}
+export declare function callScaffoldLlm(inputs: LlmInputs, opts?: CallOptions): Promise<LlmResult>;
+//# sourceMappingURL=llm-client.d.ts.map

package/dist/onboard/llm-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-client.d.ts","sourceRoot":"","sources":["../../src/onboard/llm-client.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE;QACR,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,MAAM,CAAC;YACd,OAAO,EAAE,KAAK,CACV;gBAAE,IAAI,EAAE,UAAU,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,OAAO,CAAA;aAAE,GAClD;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,GAC9B;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CACnB,CAAC;YACF,KAAK,EAAE;gBAAE,YAAY,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE,CAAC;YACvD,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,aAAa,CAAC;AAkBjE,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,SAAS,CAAC,CA8EpB"}

package/dist/onboard/llm-client.js

@@ -0,0 +1,101 @@
+// packages/cli/src/onboard/llm-client.ts
+//
+// Anthropic Messages-API wrapper with tool-use structured output.
+//
+// Why a wrapper instead of calling the SDK directly: the call shape is
+// shared by generatePlan() (Phase B) AND a future Phase B.1 prompt-test
+// harness, and the retry classification (transient vs permanent) is
+// security-critical (a 401 must never silently retry). Centralizing the
+// shape here means a new caller can't accidentally drift from the policy.
+//
+// Tool-use binding: declare a single tool `emit_scaffold_plan` whose
+// `input_schema` is the JSON-Schema rendering of ScaffoldPlanSchema; set
+// tool_choice to force the model into a tool call; read the tool-use
+// block's `input` as the candidate JSON. The SDK validates the JSON
+// shape at the API boundary; downstream Zod validation re-checks the
+// semantics (discriminated-union, byte budgets).
+import Anthropic from "@anthropic-ai/sdk";
+const DEFAULT_FACTORY = (apiKey) => new Anthropic({ apiKey });
+const TRANSIENT_STATUSES = new Set([429, 500, 502, 503, 504]);
+function isTransient(err) {
+    if (!(err instanceof Error))
+        return false;
+    const status = err.status;
+    if (typeof status === "number")
+        return TRANSIENT_STATUSES.has(status);
+    const code = err.code;
+    if (typeof code === "string" && /ECONNRESET|ETIMEDOUT|ENETUNREACH|EAI_AGAIN/.test(code)) {
+        return true;
+    }
+    return false;
+}
+export async function callScaffoldLlm(inputs, opts = {}) {
+    const apiKey = inputs.apiKey ?? process.env["ANTHROPIC_API_KEY"];
+    if (!apiKey || !apiKey.trim()) {
+        throw new Error("df onboard: ANTHROPIC_API_KEY is required for Phase B's scaffold-generation LLM call. " +
+            "Set the env var (or pass --api-key) and re-run.");
+    }
+    const factory = opts.createClient ?? DEFAULT_FACTORY;
+    const client = factory(apiKey);
+    const request = {
+        model: inputs.modelId,
+        // 8192 was the original default; sage-blueprint at 701 template files
+        // produced a ScaffoldPlan that truncated mid-tool-use (stop_reason:
+        // max_tokens), so the `files` array was incomplete and Zod validation
+        // failed on `files: Required`. Sonnet 4.6 supports up to 64k output
+        // tokens; 32k is the sweet spot for one full ScaffoldPlan with headroom
+        // without paying for capacity we never use.
+        max_tokens: inputs.maxTokens ?? 32768,
+        system: inputs.systemPrompt,
+        tools: [
+            {
+                name: inputs.toolName,
+                description: "Emit the tailored ScaffoldPlan JSON. The input schema is enforced strictly; " +
+                    "fields not in the schema are rejected.",
+                input_schema: inputs.toolInputSchema,
+            },
+        ],
+        tool_choice: { type: "tool", name: inputs.toolName },
+        messages: [{ role: "user", content: inputs.userMessage }],
+    };
+    let attempts = 0;
+    let lastErr = null;
+    for (let attempt = 0; attempt < 2; attempt++) {
+        attempts++;
+        try {
+            const r = await client.messages.create(request);
+            // Opt-in diagnostic — stop_reason + token counts + content shape are the
+            // discriminating signals when downstream Zod validation fails on the
+            // returned plan (truncation vs. malformed output vs. wrong block type).
+            // Gated behind DF_ONBOARD_DEBUG so the benign-info line does not pollute
+            // stderr in normal use (per #57's severity-routing convention — benign
+            // info on stderr lights up GKE/Cloud Logging as severity:ERROR).
+            if (process.env["DF_ONBOARD_DEBUG"]) {
+                console.error(`[llm-diag] attempt=${attempts} stop_reason=${r.stop_reason} ` +
+                    `input_tokens=${r.usage.input_tokens} output_tokens=${r.usage.output_tokens} ` +
+                    `content_types=${JSON.stringify(r.content.map((b) => b.type))}`);
+            }
+            const toolBlock = r.content.find((b) => b.type === "tool_use" &&
+                b.name === inputs.toolName);
+            if (!toolBlock) {
+                throw new Error(`df onboard: no tool_use block found in LLM response (got stop_reason=${r.stop_reason}). ` +
+                    "The model did not honor tool_choice; check the prompt and model selection.");
+            }
+            return {
+                planJson: toolBlock.input,
+                modelId: r.model,
+                inputTokens: r.usage.input_tokens,
+                outputTokens: r.usage.output_tokens,
+                attempts,
+            };
+        }
+        catch (err) {
+            lastErr = err;
+            if (attempt === 0 && isTransient(err))
+                continue;
+            throw err;
+        }
+    }
+    throw lastErr instanceof Error ? lastErr : new Error(String(lastErr));
+}
+//# sourceMappingURL=llm-client.js.map

package/dist/onboard/llm-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-client.js","sourceRoot":"","sources":["../../src/onboard/llm-client.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,kEAAkE;AAClE,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,oEAAoE;AACpE,wEAAwE;AACxE,0EAA0E;AAC1E,EAAE;AACF,qEAAqE;AACrE,yEAAyE;AACzE,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,iDAAiD;AAEjD,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAsC1C,MAAM,eAAe,GAAqB,CAAC,MAAM,EAAE,EAAE,CACnD,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAA6B,CAAC;AAExD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9D,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAI,GAAmC,CAAC,MAAM,CAAC;IAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,IAAI,GAAI,GAAiC,CAAC,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAiB,EACjB,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,wFAAwF;YACtF,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,OAAO;QACrB,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,4CAA4C;QAC5C,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;QACrC,MAAM,EAAE,MAAM,CAAC,YAAY;QAC3B,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,WAAW,EACT,8EAA8E;oBAC5E,wCAAwC;gBAC5C,YAAY,EAAE,MAAM,CAAC,eAAe;aACrC;SACF;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAW;QAC7D,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;KACnE,CAAC;IAEF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,QAAQ,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,yEAAyE;YACzE,qEAAqE;YACrE,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CACX,sBAAsB,QAAQ,gBAAgB,CAAC,CAAC,WAAW,GAAG;oBAC5D,gBAAgB,CAAC,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAAC,CAAC,KAAK,CAAC,aAAa,GAAG;oBAC9E,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,CACxF,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAA2D,EAAE,CAC5D,CAAsB,CAAC,IAAI,KAAK,UAAU;gBAC1C,CAAuB,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CACpD,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,wEAAwE,CAAC,CAAC,WAAW,KAAK;oBACxF,4EAA4E,CAC/E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,SAAS,CAAC,KAAK;gBACzB,OAAO,EAAE,CAAC,CAAC,KAAK;gBAChB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY;gBACjC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa;gBACnC,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,OAAO,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/onboard/prompts/scaffold.md

@@ -0,0 +1,93 @@
+<!-- packages/cli/src/onboard/prompts/scaffold.md -->
+# Dark Factory `df onboard` — Stage B scaffold prompt (cycle 15 Phase B)
+
+You are the "Stage B" scaffold-tailoring agent inside `@momentiq/dark-factory-cli`'s
+`df onboard` command. Your role is to consume a **structured `RepoAnalysis`** (the
+deterministic Stage A output) and a **sage-blueprint template directory** (the raw
+markdown/JSON/YAML files that define the agent-context-set scaffolding), then
+emit a **`ScaffoldPlan`** describing how to tailor the template to the target repo.
+
+## Operating contract
+
+You MUST emit your response via the `emit_scaffold_plan` tool call. Do NOT emit
+prose text outside of the tool call. The tool's `input_schema` is strict; fields
+outside the schema are rejected, and the action discriminator forces an unambiguous
+choice per file.
+
+For every file in the input template, choose exactly ONE action:
+
+| Action | Use when | Required fields |
+|---|---|---|
+| `emit` | The target repo does NOT have this file yet, OR the existing file is empty/trivial and should be replaced. | `path`, `rationale`, `tailored_content` |
+| `merge` | The target repo HAS a non-trivial version of this file and the LLM-tailored content should be APPENDED additively (NOT replace). Reserve for `CLAUDE.md` and `AGENTS.md`. | `path`, `rationale`, `tailored_content` |
+| `skip` | The target repo already covers this file's intent, OR the file is irrelevant to the target's stack/services. | `path`, `rationale` (NO `tailored_content` — the schema rejects it) |
+
+### Tailoring rules
+
+1. **Cite the analysis, never invent.** Every claim in `tailored_content` must be
+   grounded in a field of `RepoAnalysis`. If you reference a service, it MUST
+   appear in `analysis.services[]`. If you cite a stack, it MUST appear in
+   `analysis.stacks[]`. If you describe a deploy story, cite `analysis.ci.deployStory`.
+   Hallucinating a non-existent service or stack is the worst possible failure
+   mode of this pipeline.
+
+2. **Substitute `{{ }}` placeholders.** The template files contain
+   `{{ project_name }}`, `{{ stack }}`, `{{ services }}` and similar Copier-style
+   placeholders. Replace each with the concrete value from `RepoAnalysis`:
+   - `{{ project_name }}` → `analysis.canonicalName.split("/")[1]`
+   - `{{ owner }}` → `analysis.canonicalName.split("/")[0]`
+   - `{{ stack }}` → `analysis.stacks[0]?.language` (or "polyglot" if multiple)
+   - `{{ services }}` → bulleted list from `analysis.services[]`
+   - `{{ default_branch }}` → `analysis.git.defaultBranch`
+   The bodies you emit must contain NO leftover `{{ }}` after substitution.
+
+3. **Use `merge` only for `CLAUDE.md` and `AGENTS.md`.** Other files don't have
+   the marker-comment infrastructure; use `emit` or `skip` for everything else.
+   When `analysis.docs.hasClaudeMd === true`, use `merge` for `CLAUDE.md`;
+   otherwise use `emit`. Same for `AGENTS.md`.
+
+4. **Skip when the target already covers it.** If `analysis.dfPresence.configJson === true`,
+   skip `.agent-review/config.json` — don't fight the existing gate. If
+   `analysis.dfPresence.prWorkflow === true`, skip `dark-factory-pr.yml`. Cite
+   the dfPresence field in the rationale.
+
+4a. **ALWAYS SKIP `.agent-review/config.json` (the Phase C seeder owns this path).** Emit a single `skip` entry for `.agent-review/config.json` with rationale "phase C seeder owns this path; phase B does not emit config.json"; do NOT include `tailored_content`. This applies regardless of `analysis.dfPresence.configJson`'s value and supersedes rule 4 for this specific path.
+
+5. **`merge` content rules.** When you emit `tailored_content` for a `merge`
+   action, that content is APPENDED after the existing file (with marker
+   comments managed by the CLI). Therefore:
+   - Do NOT include the user's existing headings.
+   - START with a top-level H2 section (e.g. `## Dark Factory onboarding`) so the
+     append reads naturally.
+   - Do NOT include `<!-- df onboard: inserted-by-cycle-15 -->` markers — the
+     CLI's merge writer adds them.
+
+6. **`rationale` is one sentence.** Plain English, ≤ 800 chars; reference the
+   specific analysis fields that drove the action choice.
+
+7. **`summary` is one paragraph.** ≤ 800 chars; what the LLM tailored, why, and
+   any caveats the operator should know.
+
+## Inputs
+
+### Resolved critic profile
+
+`{{CRITIC_PROFILE}}`
+
+(The phase-c seeder reads this resolved profile to emit the matching .agent-review/config.json; phase B's role is to thread it, not to emit the JSON.)
+
+### RepoAnalysis
+
+```json
+{{ANALYSIS_JSON}}
+```
+
+### Template file list (path: sizeBytes)
+
+{{TEMPLATE_FILE_LIST}}
+
+### Template file bodies
+
+{{TEMPLATE_FILE_BODIES}}
+
+## Now emit the `emit_scaffold_plan` tool call.

package/dist/onboard/prompts.d.ts

@@ -0,0 +1,13 @@
+import type { RepoAnalysis } from "./schema.js";
+import type { TemplateFile } from "./template-loader.js";
+export interface RenderedPrompt {
+    systemPrompt: string;
+    userMessage: string;
+}
+export interface RenderScaffoldPromptOptions {
+    /** Resolved critic profile (B-D8). Substituted into the system prompt's `{{CRITIC_PROFILE}}` placeholder so the LLM's `.agent-review/config.json` tailoring uses the right fleet. */
+    profile: "local" | "cloud";
+}
+export declare function renderScaffoldPromptSync(asset: string, analysis: RepoAnalysis, templateFiles: TemplateFile[], opts: RenderScaffoldPromptOptions): RenderedPrompt;
+export declare function renderScaffoldPrompt(analysis: RepoAnalysis, templateFiles: TemplateFile[], opts: RenderScaffoldPromptOptions): Promise<RenderedPrompt>;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/onboard/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/onboard/prompts.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAYzD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,qLAAqL;IACrL,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;CAC5B;AAcD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,YAAY,EAAE,EAC7B,IAAI,EAAE,2BAA2B,GAChC,cAAc,CAsBhB;AAED,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,YAAY,EAAE,EAC7B,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,cAAc,CAAC,CAGzB"}

package/dist/onboard/prompts.js

@@ -0,0 +1,54 @@
+// packages/cli/src/onboard/prompts.ts
+//
+// Render the Stage B scaffold prompt by substituting the analysis + template
+// into the static prompt asset. The asset path uses import.meta.url so the
+// resolution works both from src/ (dev) and dist/ (npm install), matching
+// the project's existing pattern in critic prompts.
+import { readFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+const HERE = dirname(fileURLToPath(import.meta.url));
+const ASSET_PATH = join(HERE, "prompts", "scaffold.md");
+let _cachedAsset = null;
+async function loadAsset() {
+    if (_cachedAsset !== null)
+        return _cachedAsset;
+    _cachedAsset = await readFile(ASSET_PATH, "utf8");
+    return _cachedAsset;
+}
+function renderFileList(files) {
+    return files
+        .map((f) => `- ${f.path} (${Buffer.byteLength(f.content, "utf8")} bytes)`)
+        .join("\n");
+}
+function renderFileBodies(files) {
+    return files
+        .map((f) => `path: ${f.path}\n---\n${f.content}\n===\n`)
+        .join("\n");
+}
+export function renderScaffoldPromptSync(asset, analysis, templateFiles, opts) {
+    // Split the asset on a marker so the operating contract is the SYSTEM prompt
+    // (cached, prompt-cached on the SDK side) and the per-call payload is the
+    // USER message. The marker is the "## Inputs" heading.
+    const splitIdx = asset.indexOf("## Inputs");
+    if (splitIdx < 0) {
+        throw new Error("df onboard: scaffold.md asset missing '## Inputs' split marker — prompt-asset corruption.");
+    }
+    // {{CRITIC_PROFILE}} appears in both halves (rule 4a in the system prompt;
+    // the verbatim profile echo in the user payload), so replaceAll both sides.
+    const systemPrompt = asset.slice(0, splitIdx)
+        .replaceAll("{{CRITIC_PROFILE}}", opts.profile)
+        .trim();
+    const userTemplate = asset.slice(splitIdx);
+    const userMessage = userTemplate
+        .replaceAll("{{CRITIC_PROFILE}}", opts.profile)
+        .replace("{{ANALYSIS_JSON}}", JSON.stringify(analysis, null, 2))
+        .replace("{{TEMPLATE_FILE_LIST}}", renderFileList(templateFiles))
+        .replace("{{TEMPLATE_FILE_BODIES}}", renderFileBodies(templateFiles));
+    return { systemPrompt, userMessage };
+}
+export async function renderScaffoldPrompt(analysis, templateFiles, opts) {
+    const asset = await loadAsset();
+    return renderScaffoldPromptSync(asset, analysis, templateFiles, opts);
+}
+//# sourceMappingURL=prompts.js.map

package/dist/onboard/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/onboard/prompts.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,oDAAoD;AAEpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAKzC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAExD,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,KAAK,UAAU,SAAS;IACtB,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC/C,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,YAAY,CAAC;AACtB,CAAC;AAYD,SAAS,cAAc,CAAC,KAAqB;IAC3C,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC;SACzE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAqB;IAC7C,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,OAAO,SAAS,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,QAAsB,EACtB,aAA6B,EAC7B,IAAiC;IAEjC,6EAA6E;IAC7E,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SAC1C,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC;SAC9C,IAAI,EAAE,CAAC;IACV,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,YAAY;SAC7B,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC;SAC9C,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;SAC/D,OAAO,CAAC,wBAAwB,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;SAChE,OAAO,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IACxE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAsB,EACtB,aAA6B,EAC7B,IAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC"}