@momentiq/dark-factory-cli 2.1.0 → 2.2.1

package/dist/onboard/template-loader.js

@@ -0,0 +1,152 @@
+// packages/cli/src/onboard/template-loader.ts
+//
+// Template loader for `df onboard`'s Stage B input.
+// Resolves a templateRef (gh:<owner>/<repo>@<ref> | file://<abs>@<ref>) to a
+// content-addressed cache directory, then walks the directory and returns
+// the file set (subject to the Phase B filter rules: no .git/node_modules,
+// ≤ 64 KB per file, no binary, ≤ MAX_TEMPLATE_FILES entries total — see
+// the constant definition below for the current value).
+//
+// Cache key is the resolved sha — so `latest` and the sha it resolves to
+// share one entry, no churn on re-runs.
+//
+// Ref parsing is delegated to template-ref.ts (Task 1's co-located foundation
+// file) — this loader consumes parseTemplateRef + the parsed-ref types from
+// there. Round-4 restructure-completion: keeping the parser in the foundation
+// file means schema (Task 1) and loader (Task 3) cannot drift on the semantic
+// check, AND no circular import is possible (template-ref.ts imports nothing
+// from schema or loader, so the loader can import ScaffoldPlanSchema in the
+// future if it ever needs to).
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { mkdir, readdir, readFile, rename, rm, stat, cp } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join, relative } from "node:path";
+import { parseTemplateRef, } from "./template-ref.js";
+export { parseTemplateRef };
+const ex = promisify(execFile);
+// Raise-don't-filter: sage-blueprint's file inventory is intentional template
+// content (Copier `.jinja` outputs, backend + frontend source, configs), so
+// extension-whitelisting or expanding SKIP_DIRS would drop structural files
+// the LLM needs to see. The 64 KB per-file ceiling + binary-skip are the
+// real backstops; this cap is the count tripwire. See #140 for the original
+// 200→ raise rationale. (A total-bytes cap for the assembled prompt is a
+// follow-up — tracked separately so it can land with end-to-end metering.)
+export const MAX_TEMPLATE_FILES = 1000;
+export const MAX_TEMPLATE_FILE_SIZE = 65_536;
+const SKIP_DIRS = new Set([".git", "node_modules", "dist", "build"]);
+const FORTY_HEX = /^[0-9a-f]{40}$/i;
+async function resolveSha(parsed) {
+    if (parsed.kind === "file") {
+        return parsed.ref;
+    }
+    if (FORTY_HEX.test(parsed.ref)) {
+        return parsed.ref.toLowerCase();
+    }
+    const url = `https://github.com/${parsed.owner}/${parsed.repo}.git`;
+    const refArg = parsed.ref === "latest" ? "HEAD" :
+        parsed.ref.startsWith("refs/") ? parsed.ref :
+            parsed.ref;
+    const { stdout } = await ex("git", ["ls-remote", url, refArg]);
+    const sha = stdout.split(/\s/)[0];
+    if (!sha || !FORTY_HEX.test(sha)) {
+        throw new Error(`df onboard: could not resolve ref "${parsed.ref}" against ${url}. ` +
+            "Verify the ref exists and the repo is publicly readable.");
+    }
+    return sha.toLowerCase();
+}
+function cacheDirFor(parsed, sha, cacheRoot) {
+    if (parsed.kind === "gh") {
+        return join(cacheRoot, `${parsed.owner}__${parsed.repo}__${sha}`);
+    }
+    const tag = parsed.path.replace(/[^A-Za-z0-9._-]/g, "_");
+    return join(cacheRoot, `file__${tag}__${sha}`);
+}
+async function populateCache(parsed, sha, cacheDir) {
+    const tmp = `${cacheDir}.tmp-${process.pid}-${Date.now()}`;
+    await rm(tmp, { recursive: true, force: true });
+    if (parsed.kind === "file") {
+        await cp(parsed.path, tmp, { recursive: true });
+    }
+    else {
+        const url = `https://github.com/${parsed.owner}/${parsed.repo}.git`;
+        await mkdir(tmp, { recursive: true });
+        await ex("git", ["init", "-q"], { cwd: tmp });
+        await ex("git", ["fetch", "--depth", "1", "-q", url, sha], { cwd: tmp });
+        await ex("git", ["checkout", "-q", "FETCH_HEAD"], { cwd: tmp });
+        await rm(join(tmp, ".git"), { recursive: true, force: true });
+    }
+    try {
+        await rename(tmp, cacheDir);
+    }
+    catch (err) {
+        await rm(tmp, { recursive: true, force: true });
+        try {
+            await stat(cacheDir);
+        }
+        catch {
+            throw err;
+        }
+    }
+}
+async function isBinary(filepath) {
+    const head = Buffer.alloc(8192);
+    const fh = await import("node:fs/promises").then((m) => m.open(filepath, "r"));
+    try {
+        const { bytesRead } = await fh.read(head, 0, head.length, 0);
+        for (let i = 0; i < bytesRead; i++)
+            if (head[i] === 0)
+                return true;
+        return false;
+    }
+    finally {
+        await fh.close();
+    }
+}
+async function walkTemplate(rootDir) {
+    const out = [];
+    async function recur(dir) {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const e of entries) {
+            const abs = join(dir, e.name);
+            if (e.isDirectory()) {
+                if (SKIP_DIRS.has(e.name))
+                    continue;
+                await recur(abs);
+                continue;
+            }
+            if (!e.isFile())
+                continue;
+            const st = await stat(abs);
+            if (st.size > MAX_TEMPLATE_FILE_SIZE)
+                continue;
+            if (await isBinary(abs))
+                continue;
+            const rel = relative(rootDir, abs);
+            out.push({ path: rel, content: await readFile(abs, "utf8") });
+            if (out.length > MAX_TEMPLATE_FILES) {
+                throw new Error(`df onboard: template file count exceeds ${MAX_TEMPLATE_FILES}. ` +
+                    "Reduce the template surface or raise MAX_TEMPLATE_FILES " +
+                    "(see #140 for the rationale behind the current ceiling).");
+            }
+        }
+    }
+    await recur(rootDir);
+    return out;
+}
+export async function loadTemplate(canonicalRef, opts = {}) {
+    const parsed = parseTemplateRef(canonicalRef);
+    const cacheRoot = opts.cacheRoot ?? join(homedir(), ".df", "cache", "templates");
+    await mkdir(cacheRoot, { recursive: true });
+    const sha = await resolveSha(parsed);
+    const cacheDir = cacheDirFor(parsed, sha, cacheRoot);
+    try {
+        await stat(cacheDir);
+    }
+    catch {
+        await populateCache(parsed, sha, cacheDir);
+    }
+    const files = await walkTemplate(cacheDir);
+    return { canonicalRef, resolvedSha: sha, cacheDir, files };
+}
+//# sourceMappingURL=template-loader.js.map

package/dist/onboard/template-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-loader.js","sourceRoot":"","sources":["../../src/onboard/template-loader.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,oDAAoD;AACpD,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,wDAAwD;AACxD,EAAE;AACF,yEAAyE;AACzE,wCAAwC;AACxC,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,+BAA+B;AAE/B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACL,gBAAgB,GAIjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAG5B,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE/B,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAkBrE,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC,KAAK,UAAU,UAAU,CAAC,MAAyB;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,GAAG,GAAG,sBAAsB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC;IACpE,MAAM,MAAM,GACV,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,CAAC,GAAG,aAAa,GAAG,IAAI;YAClE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB,EAAE,GAAW,EAAE,SAAiB;IAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAyB,EAAE,GAAW,EAAE,QAAgB;IACnF,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC3D,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,sBAAsB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC;QACpE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,CAAC;QAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE;YAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,UAAU,KAAK,CAAC,GAAW;QAC9B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACpC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,IAAI,GAAG,sBAAsB;gBAAE,SAAS;YAC/C,IAAI,MAAM,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,2CAA2C,kBAAkB,IAAI;oBAC/D,0DAA0D;oBAC1D,0DAA0D,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB,EAAE,OAAoB,EAAE;IAC7E,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACjF,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC"}

package/dist/onboard/template-ref.d.ts

@@ -0,0 +1,15 @@
+export declare const TEMPLATE_REF_SHAPE_RE: RegExp;
+export interface GhTemplateRef {
+    kind: "gh";
+    owner: string;
+    repo: string;
+    ref: string;
+}
+export interface FileTemplateRef {
+    kind: "file";
+    path: string;
+    ref: string;
+}
+export type ParsedTemplateRef = GhTemplateRef | FileTemplateRef;
+export declare function parseTemplateRef(input: string): ParsedTemplateRef;
+//# sourceMappingURL=template-ref.d.ts.map

package/dist/onboard/template-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-ref.d.ts","sourceRoot":"","sources":["../../src/onboard/template-ref.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,qBAAqB,QAA+C,CAAC;AAElF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,eAAe,CAAC;AAEhE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAyBjE"}

package/dist/onboard/template-ref.js

@@ -0,0 +1,45 @@
+// packages/cli/src/onboard/template-ref.ts
+//
+// Template-ref foundation (round-4 advisor restructure-completion).
+//
+// Co-located foundation file: both `scaffold-schema.ts` (Task 1) and
+// `template-loader.ts` (Task 3) import `parseTemplateRef` from here so
+// the predicate has a single source of truth (schema and loader cannot
+// drift on the semantic ref check) AND there's no circular import (the
+// loader can also import ScaffoldPlanSchema if it ever needs to without
+// creating a cycle, because template-ref.ts imports from neither).
+//
+// History — round-3 W3 advisor restructure. Rounds 1+2 tried to encode
+// the NEGATIVE constraint ("not a 7–39 hex string") as a POSITIVE
+// character class inside a single regex. Each round's tweak introduced
+// a new false-positive or false-negative: round 1 ([A-Za-z._/-]) silently
+// accepted short hex; round 2 ([g-zG-Z._/-]) rejected valid pure-digit
+// refs like `123456` / `20260603`; gemini's prescribed round-3 lookahead
+// fix STILL rejected `20260603` (an 8-digit ref is a subset of
+// [0-9a-fA-F]). The negative constraint cannot compose cleanly with a
+// positive class. The restructure: narrow the regex to SHAPE, delegate
+// semantics to this parser. See commit log + plan §B-D3 for the
+// iteration arc (round-1 → round-2 → round-3 regex iteration; round-4
+// shared-module extraction).
+export const TEMPLATE_REF_SHAPE_RE = /^(gh:[^/]+\/[^@]+|file:\/\/\/[^@]+)@[^@]+$/;
+export function parseTemplateRef(input) {
+    const fileMatch = input.match(/^file:\/\/(\/[^@]+)@([A-Za-z0-9._/-]+)$/);
+    if (fileMatch) {
+        return { kind: "file", path: fileMatch[1], ref: fileMatch[2] };
+    }
+    const ghMatch = input.match(/^gh:([^/]+)\/([^@]+)@([A-Za-z0-9._/-]+)$/);
+    if (ghMatch) {
+        const [, owner, repo, ref] = ghMatch;
+        if (ref.length >= 7 &&
+            ref.length < 40 &&
+            /^[0-9a-fA-F]+$/.test(ref) &&
+            /[a-fA-F]/.test(ref)) {
+            throw new Error(`df onboard: short sha "${ref}" is not supported as a template ref. ` +
+                "Use the full 40-character sha, or a tag/branch name.");
+        }
+        return { kind: "gh", owner: owner, repo: repo, ref: ref };
+    }
+    throw new Error(`df onboard: malformed templateRef "${input}". ` +
+        "Expected gh:<owner>/<repo>@<ref> or file:///<abs-path>@<ref>.");
+}
+//# sourceMappingURL=template-ref.js.map

package/dist/onboard/template-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-ref.js","sourceRoot":"","sources":["../../src/onboard/template-ref.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,uEAAuE;AACvE,0EAA0E;AAC1E,uEAAuE;AACvE,yEAAyE;AACzE,+DAA+D;AAC/D,sEAAsE;AACtE,uEAAuE;AACvE,gEAAgE;AAChE,sEAAsE;AACtE,6BAA6B;AAE7B,MAAM,CAAC,MAAM,qBAAqB,GAAG,4CAA4C,CAAC;AAiBlF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACzE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAE,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACxE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC;QACrC,IACE,GAAI,CAAC,MAAM,IAAI,CAAC;YAChB,GAAI,CAAC,MAAM,GAAG,EAAE;YAChB,gBAAgB,CAAC,IAAI,CAAC,GAAI,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,GAAI,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,wCAAwC;gBACnE,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAM,EAAE,IAAI,EAAE,IAAK,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,KAAK;QAC9C,+DAA+D,CAClE,CAAC;AACJ,CAAC"}

package/dist/onboard/validate.d.ts

@@ -0,0 +1,19 @@
+import type { DoctorCheck } from "@momentiq/dark-factory-schemas";
+export interface CheckAgentContextSetOptions {
+    repoRoot: string;
+    /**
+     * The value of `loaded.config.context?.guidanceFiles` from the loaded
+     * AgentReviewConfig. The required-files walk (CLAUDE.md, AGENTS.md, etc.)
+     * runs UNCONDITIONALLY regardless of this value (per Decision #7 round-1
+     * revision — the cycle 15 D3 required-files set is the floor, not gated
+     * by the opt-in guidanceFiles field).
+     *
+     * - `undefined` or `[]` → guidance-file walk skipped; single
+     *   `agent_context.guidance_not_configured` informational marker emitted.
+     * - Non-empty array → each path additionally checked; failures emit
+     *   `agent_context.guidance_<i>` per Decision #7.
+     */
+    guidanceFiles: readonly string[] | undefined;
+}
+export declare function checkAgentContextSet(opts: CheckAgentContextSetOptions): Promise<DoctorCheck[]>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/onboard/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/onboard/validate.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAElE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC9C;AA2DD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,WAAW,EAAE,CAAC,CA+DxB"}

package/dist/onboard/validate.js

@@ -0,0 +1,127 @@
+// Cycle 15 Phase C — `checkAgentContextSet()` for `df doctor`.
+//
+// Walks the cycle-15 D3 required-files set (CLAUDE.md, AGENTS.md,
+// .claude/settings.json, docs/PRINCIPLES.md, docs/roadmap/cycles/cycle1-*.md,
+// .agent-review/config.json) UNCONDITIONALLY, then optionally validates each
+// path in `context.guidanceFiles` (from the loaded AgentReviewConfig) resolves
+// to a real file under `repoRoot`.
+//
+// Per Decision #7 (round-1 revision): the required-files walk runs regardless
+// of whether `context.guidanceFiles` is configured — the D3 set is the floor.
+// The guidance-file walk is opt-in: when `guidanceFiles` is undefined OR `[]`,
+// a single `agent_context.guidance_not_configured` informational marker is
+// emitted (passed: true, optional: true) so operators see the field was
+// skipped rather than silently absent.
+//
+// Cycle 15 exit-criterion lines 297–303: "the post-apply check fails loudly
+// when any of [list] are missing or unwired (`context.guidanceFiles` does not
+// point at real files). All current repos must pass `df doctor` after this
+// lands."
+import { access, readdir } from "node:fs/promises";
+import { constants } from "node:fs";
+import { resolve } from "node:path";
+const REQUIRED_FILES = [
+    { key: "claude_md", name: "CLAUDE.md", path: "CLAUDE.md", isGlob: false },
+    { key: "agents_md", name: "AGENTS.md", path: "AGENTS.md", isGlob: false },
+    {
+        key: "claude_settings",
+        name: ".claude/settings.json",
+        path: ".claude/settings.json",
+        isGlob: false,
+    },
+    {
+        key: "principles",
+        name: "docs/PRINCIPLES.md",
+        path: "docs/PRINCIPLES.md",
+        isGlob: false,
+    },
+    {
+        key: "cycle1_bootstrap",
+        name: "docs/roadmap/cycles/cycle1-*.md",
+        path: "docs/roadmap/cycles",
+        isGlob: true,
+    },
+    {
+        key: "config",
+        name: ".agent-review/config.json",
+        path: ".agent-review/config.json",
+        isGlob: false,
+    },
+];
+async function fileExists(path) {
+    try {
+        await access(path, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function cycle1GlobMatches(dir) {
+    try {
+        const entries = await readdir(dir);
+        return entries.some((name) => /^cycle1-.*\.md$/.test(name));
+    }
+    catch {
+        return false;
+    }
+}
+const REMEDIATION = "run `df onboard --apply` to generate the missing agent-context files, or restore the file from version control";
+export async function checkAgentContextSet(opts) {
+    const out = [];
+    // Required-file walk — runs UNCONDITIONALLY per Decision #7 (round-1
+    // revision). The cycle 15 exit-criterion lines 297–303 say "fails loudly
+    // when any of [list] are missing OR unwired"; a repo without a
+    // `context.guidanceFiles` block in .agent-review/config.json should still
+    // fail when CLAUDE.md is missing.
+    for (const req of REQUIRED_FILES) {
+        const fullPath = resolve(opts.repoRoot, req.path);
+        const exists = req.isGlob
+            ? await cycle1GlobMatches(fullPath)
+            : await fileExists(fullPath);
+        out.push(exists
+            ? {
+                name: `agent_context.${req.key}`,
+                passed: true,
+                detail: `${req.name} present at ${fullPath}`,
+            }
+            : {
+                name: `agent_context.${req.key}`,
+                passed: false,
+                detail: `${req.name} missing at ${fullPath}`,
+                remediation: REMEDIATION,
+            });
+    }
+    // Guidance-file walk — additional check, runs only when the guidanceFiles
+    // field is non-empty. The field is opt-in (NOT a gate for the required-
+    // files set above).
+    if (opts.guidanceFiles === undefined || opts.guidanceFiles.length === 0) {
+        out.push({
+            name: "agent_context.guidance_not_configured",
+            passed: true,
+            optional: true,
+            detail: ".agent-review/config.json has no `context.guidanceFiles` block — additional per-path validation skipped (the required-files walk above still ran).",
+        });
+    }
+    else {
+        for (let i = 0; i < opts.guidanceFiles.length; i++) {
+            const rel = opts.guidanceFiles[i];
+            const full = resolve(opts.repoRoot, rel);
+            const exists = await fileExists(full);
+            out.push(exists
+                ? {
+                    name: `agent_context.guidance_${i}`,
+                    passed: true,
+                    detail: `guidanceFiles[${i}] (${rel}) resolves to ${full}`,
+                }
+                : {
+                    name: `agent_context.guidance_${i}`,
+                    passed: false,
+                    detail: `guidanceFiles[${i}] (${rel}) does not resolve to a real file under ${opts.repoRoot}`,
+                    remediation: `fix the path in .agent-review/config.json's context.guidanceFiles[${i}] or create the file`,
+                });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=validate.js.map

package/dist/onboard/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/onboard/validate.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,kEAAkE;AAClE,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,mCAAmC;AACnC,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,wEAAwE;AACxE,uCAAuC;AACvC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,UAAU;AAEV,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BpC,MAAM,cAAc,GAA4B;IAC9C,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE;IACzE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE;IACzE;QACE,GAAG,EAAE,iBAAiB;QACtB,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,KAAK;KACd;IACD;QACE,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,KAAK;KACd;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,IAAI,EAAE,iCAAiC;QACvC,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,IAAI;KACb;IACD;QACE,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,KAAK;KACd;CACF,CAAC;AAEF,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GACf,gHAAgH,CAAC;AAEnH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAiC;IAEjC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAE9B,qEAAqE;IACrE,yEAAyE;IACzE,+DAA+D;IAC/D,0EAA0E;IAC1E,kCAAkC;IAClC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM;YACvB,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC;YACnC,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CACN,MAAM;YACJ,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB,GAAG,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,eAAe,QAAQ,EAAE;aAC7C;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB,GAAG,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,eAAe,QAAQ,EAAE;gBAC5C,WAAW,EAAE,WAAW;aACzB,CACN,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,oBAAoB;IACpB,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,uCAAuC;YAC7C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,MAAM,EACJ,oJAAoJ;SACvJ,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC;YACnC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACtC,GAAG,CAAC,IAAI,CACN,MAAM;gBACJ,CAAC,CAAC;oBACE,IAAI,EAAE,0BAA0B,CAAC,EAAE;oBACnC,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,iBAAiB,CAAC,MAAM,GAAG,iBAAiB,IAAI,EAAE;iBAC3D;gBACH,CAAC,CAAC;oBACE,IAAI,EAAE,0BAA0B,CAAC,EAAE;oBACnC,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,iBAAiB,CAAC,MAAM,GAAG,2CAA2C,IAAI,CAAC,QAAQ,EAAE;oBAC7F,WAAW,EAAE,qEAAqE,CAAC,sBAAsB;iBAC1G,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/onboard/writers/dry-run-renderer.d.ts

@@ -0,0 +1,6 @@
+import type { ScaffoldPlan } from "../scaffold-schema.js";
+export interface DryRunOptions {
+    color?: boolean;
+}
+export declare function renderDryRun(rootDir: string, plan: ScaffoldPlan, opts?: DryRunOptions): Promise<string>;
+//# sourceMappingURL=dry-run-renderer.d.ts.map

package/dist/onboard/writers/dry-run-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-run-renderer.d.ts","sourceRoot":"","sources":["../../../src/onboard/writers/dry-run-renderer.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,YAAY,EAAY,MAAM,uBAAuB,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA4DD,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,MAAM,CAAC,CAkBjB"}

package/dist/onboard/writers/dry-run-renderer.js

@@ -0,0 +1,88 @@
+// packages/cli/src/onboard/writers/dry-run-renderer.ts
+//
+// Render a human-readable preview of a ScaffoldPlan against a target dir.
+// Shows per-file actions: emit (new or overwrite-diff), merge (additive
+// append preview), skip (no-op). Colorized by default; honors NO_COLOR.
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { createPatch } from "diff";
+const C = {
+    reset: "\x1b[0m",
+    bold: "\x1b[1m",
+    red: "\x1b[31m",
+    green: "\x1b[32m",
+    yellow: "\x1b[33m",
+    cyan: "\x1b[36m",
+    dim: "\x1b[2m",
+};
+function colored(s, code, on) {
+    return on ? `${code}${s}${C.reset}` : s;
+}
+async function readIfExists(p) {
+    try {
+        return await readFile(p, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+function diffBlock(path, existing, proposed, color) {
+    const patch = createPatch(path, existing, proposed, "existing", "proposed");
+    if (!color)
+        return patch;
+    // Colorize +/- lines.
+    return patch.split("\n").map((line) => {
+        if (line.startsWith("+++") || line.startsWith("---"))
+            return colored(line, C.bold, true);
+        if (line.startsWith("+"))
+            return colored(line, C.green, true);
+        if (line.startsWith("-"))
+            return colored(line, C.red, true);
+        if (line.startsWith("@@"))
+            return colored(line, C.cyan, true);
+        return line;
+    }).join("\n");
+}
+async function renderFile(rootDir, file, color) {
+    const path = file.path;
+    if (file.action === "skip") {
+        return colored(`skip   ${path}`, C.yellow, color) +
+            colored(`  — ${file.rationale}`, C.dim, color) + "\n";
+    }
+    if (file.action === "emit") {
+        const existing = await readIfExists(join(rootDir, path));
+        if (existing === null) {
+            const header = colored(`emit   ${path}  (new file)`, C.green, color) + "\n";
+            const body = file.tailored_content.split("\n").map((l) => `+ ${l}`).join("\n");
+            return header + (color ? colored(body, C.green, true) : body) + "\n";
+        }
+        const header = colored(`emit   ${path}  (overwrite — diff below)`, C.bold, color) + "\n";
+        return header + diffBlock(path, existing, file.tailored_content, color) + "\n";
+    }
+    // merge
+    const existing = await readIfExists(join(rootDir, path));
+    if (existing === null) {
+        const header = colored(`merge  ${path}  (target absent — falling back to emit)`, C.yellow, color) + "\n";
+        return header + (color ? colored(file.tailored_content, C.green, true) : file.tailored_content) + "\n";
+    }
+    const header = colored(`merge  ${path}  (additive append)`, C.bold, color) + "\n";
+    const body = file.tailored_content.split("\n").map((l) => `+ ${l}`).join("\n");
+    return header + (color ? colored(body, C.green, true) : body) + "\n";
+}
+export async function renderDryRun(rootDir, plan, opts = {}) {
+    const color = opts.color ?? (process.env["NO_COLOR"] === undefined || process.env["NO_COLOR"] === "");
+    const lines = [];
+    lines.push(colored(`# df onboard — dry-run preview`, C.bold, color));
+    lines.push(`# template: ${plan.templateRef}`);
+    lines.push(`# generated: ${plan.generatedAtIso}`);
+    lines.push(`# files: ${plan.files.length}`);
+    lines.push("");
+    for (const file of plan.files) {
+        lines.push(await renderFile(rootDir, file, color));
+    }
+    lines.push("");
+    lines.push(colored("Summary: ", C.bold, color) + plan.summary);
+    lines.push(colored("Dry-run only — pass --apply to write, --pr to open a PR.", C.dim, color));
+    return lines.join("\n") + "\n";
+}
+//# sourceMappingURL=dry-run-renderer.js.map

package/dist/onboard/writers/dry-run-renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-run-renderer.js","sourceRoot":"","sources":["../../../src/onboard/writers/dry-run-renderer.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AAExE,OAAO,EAAE,QAAQ,EAAQ,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAQnC,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,GAAG,EAAE,SAAS;CACf,CAAC;AAEF,SAAS,OAAO,CAAC,CAAS,EAAE,IAAY,EAAE,EAAW;IACnD,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,CAAS;IACnC,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAc;IACjF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,sBAAsB;IACtB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,IAAc,EAAE,KAAc;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/C,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,4BAA4B,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QACzF,OAAO,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;IACjF,CAAC;IACD,QAAQ;IACR,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,0CAA0C,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QACzG,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;IACzG,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,qBAAqB,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,IAAkB,EAClB,OAAsB,EAAE;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IACtG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,OAAO,CAChB,0DAA0D,EAC1D,CAAC,CAAC,GAAG,EAAE,KAAK,CACb,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/dist/onboard/writers/emit.d.ts

@@ -0,0 +1,6 @@
+import type { EmitFilePlan } from "../scaffold-schema.js";
+export interface EmitOptions {
+    force?: boolean;
+}
+export declare function writeEmit(rootDir: string, plan: EmitFilePlan, opts?: EmitOptions): Promise<void>;
+//# sourceMappingURL=emit.d.ts.map

package/dist/onboard/writers/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../../src/onboard/writers/emit.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAcD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/onboard/writers/emit.js

@@ -0,0 +1,29 @@
+// packages/cli/src/onboard/writers/emit.ts
+import { mkdir, writeFile, stat } from "node:fs/promises";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+function safeResolve(root, p) {
+    if (isAbsolute(p)) {
+        throw new Error(`df onboard: refuses to emit to absolute path "${p}" (outside the target root).`);
+    }
+    const resolved = resolve(root, p);
+    const rel = relative(root, resolved);
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+        throw new Error(`df onboard: path traversal blocked — "${p}" resolves outside the target root.`);
+    }
+    return resolved;
+}
+export async function writeEmit(rootDir, plan, opts = {}) {
+    const abs = safeResolve(rootDir, plan.path);
+    let exists = false;
+    try {
+        await stat(abs);
+        exists = true;
+    }
+    catch { }
+    if (exists && !opts.force) {
+        throw new Error(`df onboard: refuses to overwrite existing file "${plan.path}" (pass force=true to override).`);
+    }
+    await mkdir(dirname(abs), { recursive: true });
+    await writeFile(abs, plan.tailored_content, "utf8");
+}
+//# sourceMappingURL=emit.js.map

package/dist/onboard/writers/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../../src/onboard/writers/emit.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAQ,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzE,SAAS,WAAW,CAAC,IAAY,EAAE,CAAS;IAC1C,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,8BAA8B,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,qCAAqC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,IAAkB,EAClB,OAAoB,EAAE;IAEtB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAChD,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,IAAI,kCAAkC,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/onboard/writers/merge.d.ts

@@ -0,0 +1,16 @@
+import type { MergeFilePlan } from "../scaffold-schema.js";
+export declare const BEGIN_MARKER = "<!-- df onboard: inserted-by-cycle-15 BEGIN -->";
+export declare const END_MARKER = "<!-- df onboard: inserted-by-cycle-15 END -->";
+export interface MergeOptions {
+    stderr?: (s: string) => void;
+}
+export interface MergeResult {
+    path: string;
+    action: "merge";
+    wrote: boolean;
+    skipped: boolean;
+    reason?: string;
+    fellBackToEmit?: boolean;
+}
+export declare function writeMerge(rootDir: string, plan: MergeFilePlan, opts?: MergeOptions): Promise<MergeResult>;
+//# sourceMappingURL=merge.d.ts.map

package/dist/onboard/writers/merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.d.ts","sourceRoot":"","sources":["../../../src/onboard/writers/merge.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,eAAO,MAAM,YAAY,oDAAoD,CAAC;AAC9E,eAAO,MAAM,UAAU,kDAAkD,CAAC;AAG1E,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA4ED,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA6CtB"}