@momentiq/dark-factory-cli 2.18.0 → 3.0.1

package/dist/mode/guard.js

@@ -0,0 +1,160 @@
+// Cycle 27 Phase B — `df mode guard --hook` pure decision core.
+//
+// The Designer Mode tool guard, bound to Claude Code's PreToolUse hook by
+// commands/mode.ts (stdin JSON → decideGuard → hook decision JSON). Layer 2
+// of the enforcement stack (spec §4.4): soft relative to the pre-push gate
+// and CI ModeScope critic (layers 3–4), but the layer that turns a wrong
+// turn into instant, plain-language feedback inside the session.
+//
+// Posture:
+//  - No active mode → allow everything: the guard must be invisible to
+//    normal engineer sessions.
+//  - Active mode → file-writing tools are scope-checked (protectedPaths
+//    WINS over writeScopes on overlap); `dependencyPolicy: "none"` denies
+//    manifest/lockfile edits and dependency-adding Bash; destructive git
+//    is denied; read-only tools pass.
+//  - Active mode + input we cannot understand → fail CLOSED. A guard that
+//    fails open under confusion is not a guard.
+//
+// Denials are dual-register: `plain` speaks to a non-technical operator
+// (no jargon, no file-path vocabulary beyond the path itself); `hint`
+// speaks to the agent (which config knob fired, what to do instead —
+// usually: offer a handoff, never retry the same write).
+import { relative, resolve, sep } from "node:path";
+import { classifyModePath } from "./scope-policy.js";
+// `globMatch` historically lived in this file and is imported from here by
+// tests + external callers. Its canonical home is now scope-policy.ts
+// (shared with the CI scope critic so layers 2 and 4 enforce one policy —
+// spec §4.4); re-export keeps the old import path working.
+export { globMatch } from "./scope-policy.js";
+const ALLOW = { decision: "allow" };
+const FILE_TOOLS = new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
+const DESTRUCTIVE_BASH = [
+    { re: /\bgit\s+push\b[^\n;|&]*\s(--force\b|-f\b|--force-with-lease\b)/, what: "force-push" },
+    { re: /\bgit\s+reset\s+--hard\b/, what: "hard reset" },
+    { re: /\bgit\s+clean\s+-[a-zA-Z]*f/, what: "git clean" },
+    { re: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f|\brm\s+-[a-zA-Z]*f[a-zA-Z]*r/, what: "recursive delete" },
+];
+const DEPENDENCY_BASH = /\b(npm\s+(install|i|add)\s+\S|yarn\s+add\b|pnpm\s+(add|install)\s+\S|bun\s+add\b)/;
+// Bash is DEFAULT-DENY while a mode is active: shell writes (`> file`,
+// `sed -i`, `cp`, arbitrary interpreters) would bypass writeScopes entirely,
+// and no denylist can enumerate a shell. Only read-only inspection and the
+// repo's own dev/test scripts are allowed — and only as single, unchained
+// commands (metacharacters disqualify even safe-list prefixes).
+const BASH_METACHARS = /[;&|<>`$\\\n\r]/;
+const BASH_ALLOWLIST = [
+    /^git (status|log|diff|show|branch)(\s|$)/,
+    // NOTE: no `find` — its -delete/-exec/-ok forms mutate; the agent has
+    // dedicated read-only search tools instead.
+    /^(ls|pwd|cat|head|tail|grep|rg|echo|which)(\s|$)/,
+    /^npm (test|start)$/,
+    // `npm run <script>` (+ optional `--workspace=<name>`): RATIFIED trusted, same
+    // basis as `mode.devServer.command` below — package scripts are repo-author-
+    // committed. Contingent on package.json being operator-non-editable in these
+    // modes: `checkPath` denies manifest edits under `dependencyPolicy: "none"` and
+    // package.json sits in the seeded `protectedPaths`, so an operator cannot add a
+    // script — the reachable set is exactly what engineers vetted at commit time.
+    // No per-mode `allowedScripts` allowlist: it would duplicate those author-
+    // controls and desync from real scripts without narrowing an already author-
+    // bounded surface. The script-name charset admits no args and BASH_METACHARS is
+    // rejected first (checkBash), so there is no `-- <shell>` passthrough or
+    // chaining. Revisit only if a mode ever leaves package.json operator-editable.
+    /^npm run [A-Za-z0-9:_./-]+(\s--workspace=[A-Za-z0-9@/._-]+)?$/,
+    /^(node|npm|npx|git) --version$/,
+];
+function deny(plain, hint) {
+    return { decision: "deny", plain, hint };
+}
+function failClosed(modeName) {
+    return deny(`To be safe, ${modeName} mode blocked an action it couldn't understand.`, `guard received unparseable PreToolUse input while mode "${modeName}" is active — fail-closed; re-issue the tool call with well-formed input or hand off`);
+}
+/**
+ * Repo-relative, forward-slash, `..`-free path — or null when it escapes the
+ * repo. BOTH absolute and relative inputs are canonicalized through
+ * `resolve(cwd, filePath)` first: a relative path with `..` segments
+ * ("src/components/../../server/db.ts") must be scope-checked against what
+ * it RESOLVES to, never against its raw text.
+ */
+function relativize(filePath, cwd) {
+    const rel = relative(cwd, resolve(cwd, filePath));
+    const normalized = rel.split(sep).join("/");
+    if (normalized === "" || normalized === "." || normalized.startsWith("../") || normalized === "..") {
+        return null;
+    }
+    return normalized;
+}
+function checkPath(path, resolved) {
+    const { modeName, mode } = resolved;
+    // Precedence (protected > dependency > out-of-scope) lives in the shared
+    // classifier so this hook (layer 2) and the CI scope critic (layer 4)
+    // cannot drift — spec §4.4. This function maps the classification to the
+    // guard's dual-register deny messages.
+    const classification = classifyModePath(path, mode);
+    switch (classification.kind) {
+        case "protected":
+            return deny(`"${path}" is a protected area that needs an engineer — ${modeName} mode can't change it.`, `path matches mode "${modeName}" protectedPaths (protected wins over writeScopes) — do not retry; offer a handoff (df handoff) describing the intended change`);
+        case "dependency":
+            return deny(`Adding or changing installed packages isn't something ${modeName} mode can do.`, `dependencyPolicy is "none" for mode "${modeName}" — dependency changes escalate to an engineer via handoff`);
+        case "out-of-scope":
+            return deny(`"${path}" is outside the design areas set up for you, so ${modeName} mode left it unchanged.`, `path matches no writeScopes entry for mode "${modeName}" — if the task genuinely needs this file, stop and offer a handoff instead of retrying`);
+        case "allow":
+            return ALLOW;
+    }
+}
+function checkBash(command, resolved) {
+    const { modeName, mode } = resolved;
+    const trimmed = command.trim();
+    // Specific denials first — they carry sharper reasons than the default.
+    for (const { re, what } of DESTRUCTIVE_BASH) {
+        if (re.test(trimmed)) {
+            return deny(`That command could destroy work (${what}), so ${modeName} mode blocked it.`, `destructive command class "${what}" is always denied in operator modes — never needed for design work`);
+        }
+    }
+    if (mode.dependencyPolicy === "none" && DEPENDENCY_BASH.test(trimmed)) {
+        return deny(`Installing new packages isn't something ${modeName} mode can do.`, `dependencyPolicy is "none" for mode "${modeName}" — dependency additions escalate via handoff`);
+    }
+    // The catalog's own dev-server command is repo-author-committed — trusted
+    // verbatim (exact match only).
+    if (mode.devServer?.command && trimmed === mode.devServer.command.trim()) {
+        return ALLOW;
+    }
+    // Default-deny with a curated allowlist: single unchained commands only.
+    if (!BASH_METACHARS.test(trimmed) && BASH_ALLOWLIST.some((re) => re.test(trimmed))) {
+        return ALLOW;
+    }
+    return deny(`That command isn't on ${modeName} mode's safe list, so it wasn't run.`, `bash is default-deny in mode "${modeName}" (shell writes would bypass writeScopes) — use the file tools for edits inside writeScopes, the configured devServer command for previews, or offer a handoff`);
+}
+export function decideGuard(input, resolved) {
+    // Layer-2 invisibility: no active mode, no opinions.
+    if (!resolved)
+        return ALLOW;
+    if (typeof input !== "object" || input === null)
+        return failClosed(resolved.modeName);
+    const hook = input;
+    if (typeof hook.tool_name !== "string")
+        return failClosed(resolved.modeName);
+    const toolInput = typeof hook.tool_input === "object" && hook.tool_input !== null
+        ? hook.tool_input
+        : {};
+    if (FILE_TOOLS.has(hook.tool_name)) {
+        const rawPath = toolInput["file_path"] ?? toolInput["notebook_path"];
+        if (typeof rawPath !== "string" || rawPath.length === 0) {
+            return failClosed(resolved.modeName);
+        }
+        const cwd = typeof hook.cwd === "string" && hook.cwd.length > 0 ? hook.cwd : process.cwd();
+        const rel = relativize(rawPath, cwd);
+        if (rel === null) {
+            return deny(`That file is outside this project, so ${resolved.modeName} mode left it alone.`, `path resolves outside the repo root — always denied in operator modes`);
+        }
+        return checkPath(rel, resolved);
+    }
+    if (hook.tool_name === "Bash") {
+        const command = toolInput["command"];
+        if (typeof command !== "string")
+            return failClosed(resolved.modeName);
+        return checkBash(command, resolved);
+    }
+    // Read-only / non-mutating tools pass through untouched.
+    return ALLOW;
+}
+//# sourceMappingURL=guard.js.map

package/dist/mode/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/mode/guard.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,iEAAiE;AACjE,EAAE;AACF,WAAW;AACX,uEAAuE;AACvE,+BAA+B;AAC/B,wEAAwE;AACxE,0EAA0E;AAC1E,yEAAyE;AACzE,sCAAsC;AACtC,0EAA0E;AAC1E,gDAAgD;AAChD,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,yDAAyD;AAEzD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAInD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,2EAA2E;AAC3E,sEAAsE;AACtE,0EAA0E;AAC1E,2DAA2D;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAW9C,MAAM,KAAK,GAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAEnD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAE3E,MAAM,gBAAgB,GAA4C;IAChE,EAAE,EAAE,EAAE,gEAAgE,EAAE,IAAI,EAAE,YAAY,EAAE;IAC5F,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,YAAY,EAAE;IACtD,EAAE,EAAE,EAAE,6BAA6B,EAAE,IAAI,EAAE,WAAW,EAAE;IACxD,EAAE,EAAE,EAAE,2DAA2D,EAAE,IAAI,EAAE,kBAAkB,EAAE;CAC9F,CAAC;AAEF,MAAM,eAAe,GACnB,mFAAmF,CAAC;AAEtF,uEAAuE;AACvE,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,gEAAgE;AAChE,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,MAAM,cAAc,GAAsB;IACxC,0CAA0C;IAC1C,sEAAsE;IACtE,4CAA4C;IAC5C,kDAAkD;IAClD,oBAAoB;IACpB,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,gFAAgF;IAChF,yEAAyE;IACzE,+EAA+E;IAC/E,+DAA+D;IAC/D,gCAAgC;CACjC,CAAC;AAEF,SAAS,IAAI,CAAC,KAAa,EAAE,IAAY;IACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,IAAI,CACT,eAAe,QAAQ,iDAAiD,EACxE,2DAA2D,QAAQ,sFAAsF,CAC1J,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,QAAgB,EAAE,GAAW;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,QAA0B;IACzD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IACpC,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,uCAAuC;IACvC,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,WAAW;YACd,OAAO,IAAI,CACT,IAAI,IAAI,kDAAkD,QAAQ,wBAAwB,EAC1F,sBAAsB,QAAQ,gIAAgI,CAC/J,CAAC;QACJ,KAAK,YAAY;YACf,OAAO,IAAI,CACT,yDAAyD,QAAQ,eAAe,EAChF,wCAAwC,QAAQ,4DAA4D,CAC7G,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,IAAI,CACT,IAAI,IAAI,oDAAoD,QAAQ,0BAA0B,EAC9F,+CAA+C,QAAQ,yFAAyF,CACjJ,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,QAA0B;IAC5D,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE/B,wEAAwE;IACxE,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAC5C,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CACT,oCAAoC,IAAI,SAAS,QAAQ,mBAAmB,EAC5E,8BAA8B,IAAI,qEAAqE,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CACT,2CAA2C,QAAQ,eAAe,EAClE,wCAAwC,QAAQ,+CAA+C,CAChG,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,+BAA+B;IAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CACT,yBAAyB,QAAQ,sCAAsC,EACvE,iCAAiC,QAAQ,gKAAgK,CAC1M,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,QAAsC;IAEtC,qDAAqD;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,KAIZ,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7E,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;QAC7D,CAAC,CAAE,IAAI,CAAC,UAAsC;QAC9C,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3F,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,IAAI,CACT,yCAAyC,QAAQ,CAAC,QAAQ,sBAAsB,EAChF,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtE,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,yDAAyD;IACzD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/mode/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/mode/init.ts"],"names":[],"mappings":"AAgBA,OAAO,EAEL,KAAK,UAAU,EAChB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAkCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB5D;AAkBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAcpF;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CA6C3E"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/mode/init.ts"],"names":[],"mappings":"AAgBA,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,gCAAgC,CAAC;AAIxC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAkCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB5D;AAkBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAcpF;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAwD3E"}

package/dist/mode/init.js

@@ -12,7 +12,8 @@
 import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
-import { parseDarkFactoryConfig, } from "@momentiq/dark-factory-schemas";
+import { MODE_NAME_RE, parseDarkFactoryConfig, } from "@momentiq/dark-factory-schemas";
+import { loadModeConfig } from "./loadConfig.js";
 const DEFAULT_PROTECTED_PATHS = [
     "**/auth/**",
     "**/api/**",
@@ -99,10 +100,18 @@ export function buildDefaultModeEntry(repoRoot, modeName) {
     return entry;
 }
 export function initMode(repoRoot, modeName) {
-    const configPath = join(repoRoot, "darkfactory.yaml");
-    const existingText = existsSync(configPath) ? readFileSync(configPath, "utf8") : "";
-    const existingRaw = existingText.trim().length > 0 ? parseYaml(existingText) : {};
-    const existingConfig = parseDarkFactoryConfig(existingRaw ?? {});
+    if (!MODE_NAME_RE.test(modeName)) {
+        // Validated BEFORE any file work: the name is interpolated into
+        // generated YAML (comment lines + map key) — newlines or comment
+        // breakouts are injection, not typos. Same rule the canonical parser
+        // enforces, applied early for a better error.
+        throw new Error(`df mode init: invalid mode name ${JSON.stringify(modeName)} — mode names must be ` +
+            `lowercase slugs matching ${MODE_NAME_RE.source} (e.g. "designer").`);
+    }
+    // Shared read → parseYaml → parseDarkFactoryConfig ritual (with the raw
+    // `text` init appends to) lives in loadModeConfig — one interpretation of
+    // darkfactory.yaml across the `df mode …` surface.
+    const { configPath, text: existingText, config: existingConfig } = loadModeConfig(repoRoot);
     const entry = buildDefaultModeEntry(repoRoot, modeName);
     if (existingConfig.modes?.[modeName]) {
         return {

package/dist/mode/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/mode/init.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,sBAAsB;AACtB,8EAA8E;AAC9E,mEAAmE;AACnE,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EACL,sBAAsB,GAEvB,MAAM,gCAAgC,CAAC;AASxC,MAAM,uBAAuB,GAAG;IAC9B,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,YAAY;IACZ,eAAe;IACf,cAAc;IACd,mBAAmB;CACpB,CAAC;AAEF,MAAM,yBAAyB,GAAG;IAChC,gBAAgB;IAChB,SAAS;IACT,WAAW;IACX,YAAY;IACZ,KAAK;IACL,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAEzF,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,yBAAyB,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,2BAA2B,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,GAAG,KAAK,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAEnD,CAAC;QACF,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAe;QACxB,WAAW;QACX,cAAc,EAAE,CAAC,GAAG,uBAAuB,CAAC;QAC5C,gBAAgB,EAAE,MAAM;QACxB,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;QAC3C,YAAY,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;QACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;KACjC,CAAC;IACF,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3C,KAAK,QAAQ,CAAC,CAAC,sDAAsD;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,QAAgB;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,WAAW,GAAY,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,cAAc,GAAG,sBAAsB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ;YACR,UAAU;YACV,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,IAAI,EAAE;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QACzB,wEAAwE;QACxE,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,aAAa,QAAQ,kDAAkD;YACvE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GACT,mEAAmE,QAAQ,OAAO;QAClF,8EAA8E;QAC9E,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,KAAK,CAAC;IAEnD,sEAAsE;IACtE,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7C,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrC,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ;QACR,UAAU;QACV,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/mode/init.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,sBAAsB;AACtB,8EAA8E;AAC9E,mEAAmE;AACnE,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EACL,YAAY,EACZ,sBAAsB,GAEvB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AASjD,MAAM,uBAAuB,GAAG;IAC9B,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,YAAY;IACZ,eAAe;IACf,cAAc;IACd,mBAAmB;CACpB,CAAC;AAEF,MAAM,yBAAyB,GAAG;IAChC,gBAAgB;IAChB,SAAS;IACT,WAAW;IACX,YAAY;IACZ,KAAK;IACL,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAEzF,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,yBAAyB,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,2BAA2B,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,GAAG,KAAK,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAEnD,CAAC;QACF,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAe;QACxB,WAAW;QACX,cAAc,EAAE,CAAC,GAAG,uBAAuB,CAAC;QAC5C,gBAAgB,EAAE,MAAM;QACxB,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;QAC3C,YAAY,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;QACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;KACjC,CAAC;IACF,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3C,KAAK,QAAQ,CAAC,CAAC,sDAAsD;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,QAAgB;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,gEAAgE;QAChE,iEAAiE;QACjE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wBAAwB;YACjF,4BAA4B,YAAY,CAAC,MAAM,qBAAqB,CACvE,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,GAC9D,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE3B,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ;YACR,UAAU;YACV,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,IAAI,EAAE;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QACzB,wEAAwE;QACxE,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,aAAa,QAAQ,kDAAkD;YACvE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GACT,mEAAmE,QAAQ,OAAO;QAClF,8EAA8E;QAC9E,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,KAAK,CAAC;IAEnD,sEAAsE;IACtE,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7C,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrC,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ;QACR,UAAU;QACV,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC"}

package/dist/mode/loadConfig.d.ts

@@ -0,0 +1,34 @@
+import { type DarkFactoryConfig } from "@momentiq/dark-factory-schemas";
+export declare const MODE_CONFIG_FILENAME = "darkfactory.yaml";
+export interface LoadedModeConfig {
+    /**
+     * Absolute path to `darkfactory.yaml`, whether or not the file exists
+     * (`resolve`d against `repoRoot`, matching the skills-side loader).
+     */
+    readonly configPath: string;
+    /**
+     * Raw file text. `""` when the file is missing OR exists but is empty — so
+     * `text === ""` alone does NOT distinguish those two; a caller that needs
+     * the distinction checks the path on disk. `df mode init` appends to this
+     * verbatim so hand-maintained comments/formatting survive.
+     */
+    readonly text: string;
+    /**
+     * Canonically-parsed config. `{}` (defaults everywhere) when the file is
+     * missing, empty, or comment-only. Throws when the file exists with content
+     * that `parseDarkFactoryConfig` rejects — a mode command must fail closed on
+     * a malformed config rather than operate on a silently-defaulted one.
+     */
+    readonly config: DarkFactoryConfig;
+}
+/**
+ * Load `darkfactory.yaml` from `repoRoot` for the `df mode …` commands.
+ *
+ * A missing file, an empty file, and a comment/whitespace-only file all
+ * resolve to the empty config (`{}`) — the same defaulted-everywhere case the
+ * canonical parser treats `parseDarkFactoryConfig({})` as. Any other content
+ * is YAML-parsed then handed to `parseDarkFactoryConfig`, which throws a
+ * `SchemaError` naming the offending path on an invalid shape.
+ */
+export declare function loadModeConfig(repoRoot: string): LoadedModeConfig;
+//# sourceMappingURL=loadConfig.d.ts.map

package/dist/mode/loadConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadConfig.d.ts","sourceRoot":"","sources":["../../src/mode/loadConfig.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gCAAgC,CAAC;AAExC,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAQjE"}

package/dist/mode/loadConfig.js

@@ -0,0 +1,38 @@
+// Cycle 27 — shared `darkfactory.yaml` loader for the `df mode …` surface.
+//
+// `df mode status` and `df mode init` both performed the same
+// read → parseYaml → parseDarkFactoryConfig ritual inline. This module is the
+// single home for that ritual so there is ONE place that decides how the mode
+// commands turn the file on disk into a typed config.
+//
+// It delegates shape validation to the canonical `parseDarkFactoryConfig`
+// (@momentiq/dark-factory-schemas) — the exact same parser `skills/config.ts`
+// (via `loadDarkFactoryConfig`) and `df doctor` (`checkDarkFactoryConfig`) use.
+// There is no second interpretation of `darkfactory.yaml`; the two loaders
+// differ only in ergonomics (this one returns the raw `text` so `df mode init`
+// can APPEND to the consumer's file without re-serializing it; the skills
+// loader adds an `isDefault` flag + a friendly error wrapper).
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { parseDarkFactoryConfig, } from "@momentiq/dark-factory-schemas";
+export const MODE_CONFIG_FILENAME = "darkfactory.yaml";
+/**
+ * Load `darkfactory.yaml` from `repoRoot` for the `df mode …` commands.
+ *
+ * A missing file, an empty file, and a comment/whitespace-only file all
+ * resolve to the empty config (`{}`) — the same defaulted-everywhere case the
+ * canonical parser treats `parseDarkFactoryConfig({})` as. Any other content
+ * is YAML-parsed then handed to `parseDarkFactoryConfig`, which throws a
+ * `SchemaError` naming the offending path on an invalid shape.
+ */
+export function loadModeConfig(repoRoot) {
+    const configPath = resolve(repoRoot, MODE_CONFIG_FILENAME);
+    const text = existsSync(configPath) ? readFileSync(configPath, "utf8") : "";
+    // Only YAML-parse when there is real content: the parser returns null for a
+    // comment/whitespace-only file, so `?? {}` folds that into the empty config.
+    const raw = text.trim().length > 0 ? parseYaml(text) : {};
+    const config = parseDarkFactoryConfig(raw ?? {});
+    return { configPath, text, config };
+}
+//# sourceMappingURL=loadConfig.js.map

package/dist/mode/loadConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadConfig.js","sourceRoot":"","sources":["../../src/mode/loadConfig.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,8EAA8E;AAC9E,sDAAsD;AACtD,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAC1E,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,sBAAsB,GAEvB,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAwBvD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,GAAG,GAAY,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/mode/prompts/designer-baseline.md

@@ -0,0 +1,47 @@
+<!-- DF-PROFILE: baseline -->
+# Designer Mode — session doctrine (baseline)
+
+You are working with a **non-technical operator** — a designer, PM, or founder
+describing product intent. You own every technical decision; they own every
+product decision. Their trust in this session depends on the rules below.
+
+## Language
+
+- Speak plain product language. Never show code, diffs, stack traces, file
+  trees, or git/terminal vocabulary unless the operator explicitly asks.
+- Translate progress and problems into outcomes: what changed, what they'll
+  see, what happens next. Never paste raw errors — say what went wrong in one
+  sentence and what you're doing about it.
+
+## Questions
+
+- Ask ONLY product or visual questions ("Should the banner stay visible while
+  scrolling?"), never technical ones (frameworks, files, state, APIs — decide
+  those yourself, following the repo's existing conventions).
+- Prefer multiple choice with 2–3 concrete options plus "you decide". One
+  question at a time. If you can make a reasonable call, make it and say so.
+
+## Design doctrine
+
+- `DESIGN.md` at the repo root is the design source of truth: take every
+  color, font, and spacing value from its tokens; follow its do's and don'ts.
+- Reuse existing components before creating anything new — extend, don't fork.
+- Never remove accessibility affordances (focus rings, labels, contrast).
+
+## Verification
+
+- Show, don't tell: run the dev server and present before/after screenshots
+  for every visual change. Iterate until the operator says it looks right.
+
+## Guardrails
+
+- When a tool call is denied by the mode guard, do NOT retry or work around
+  it. Explain in one plain sentence, then offer to package the request for an
+  engineer (a handoff) — framed as progress, not rejection.
+- Never bypass, weaken, or ask the operator to bypass any gate.
+
+## Shipping
+
+- Branches, PRs, reviews, and merges are invisible plumbing: run them
+  yourself and report status plainly ("It's in review with our automated
+  checks — I'll tell you when it's live.").

package/dist/mode/resolve.d.ts

@@ -1,4 +1,4 @@
-import type { DarkFactoryConfig, ModeConfig } from "@momentiq/dark-factory-schemas";
+import { type DarkFactoryConfig, type ModeConfig } from "@momentiq/dark-factory-schemas";
 /**
  * Pure precedence resolver. The CLI arg map can contain `mode` as a string
  * (the value), `true` (bare `--mode` with no value), or be absent. The env

package/dist/mode/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/mode/resolve.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAEpF;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;CAAE,EAC7C,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACpC,MAAM,GAAG,SAAS,CAYpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,MAAM,GACf,YAAY,CAiBd"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/mode/resolve.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,UAAU,EAChB,MAAM,gCAAgC,CAAC;AAcxC;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;CAAE,EAC7C,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACpC,MAAM,GAAG,SAAS,CAYpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,MAAM,GACf,YAAY,CAyBd"}

package/dist/mode/resolve.js

@@ -11,6 +11,16 @@
 //   2. `DF_MODE` env var.
 //   3. No mode — unlike profiles there is NO default: an unmoded session is
 //      the normal engineer path, so absence must stay meaningful.
+import { MODE_NAME_RE, } from "@momentiq/dark-factory-schemas";
+function assertSlug(value, source) {
+    if (!MODE_NAME_RE.test(value)) {
+        // JSON.stringify renders the hostile value safely escaped (newlines,
+        // backticks, quotes) — never raw, and never inside a copyable command.
+        throw new Error(`df mode: invalid mode name ${JSON.stringify(value)} from ${source} — ` +
+            `mode names are lowercase slugs matching ${MODE_NAME_RE.source}.`);
+    }
+    return value;
+}
 /**
  * Pure precedence resolver. The CLI arg map can contain `mode` as a string
  * (the value), `true` (bare `--mode` with no value), or be absent. The env
@@ -22,20 +32,26 @@ export function resolveMode(args, env) {
     if (typeof flagRaw === "string") {
         const trimmed = flagRaw.trim();
         if (trimmed.length > 0)
-            return trimmed;
+            return assertSlug(trimmed, "--mode");
     }
     const envRaw = env.DF_MODE;
     if (typeof envRaw === "string") {
         const trimmed = envRaw.trim();
         if (trimmed.length > 0)
-            return trimmed;
+            return assertSlug(trimmed, "DF_MODE");
     }
     return undefined;
 }
 export function resolveModeWithConfig(config, modeName) {
+    // Callers reach here via resolveMode (slug-validated), but this function is
+    // exported — re-assert so no path interpolates an unvalidated name.
+    if (!MODE_NAME_RE.test(modeName)) {
+        throw new Error(`df mode: invalid mode name ${JSON.stringify(modeName)} — ` +
+            `mode names are lowercase slugs matching ${MODE_NAME_RE.source}.`);
+    }
     if (!config.modes) {
         throw new Error(`df mode: no \`modes\` catalog in darkfactory.yaml — mode "${modeName}" ` +
-            `cannot be resolved. Run \`df mode init ${modeName}\` to seed one.`);
+            `cannot be resolved. Run \`df mode init <name>\` (e.g. \`df mode init designer\`) to seed one.`);
     }
     const mode = config.modes[modeName];
     if (!mode) {

package/dist/mode/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/mode/resolve.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,2CAA2C;AAC3C,iCAAiC;AACjC,0BAA0B;AAC1B,4EAA4E;AAC5E,kEAAkE;AAIlE;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,IAA6C,EAC7C,GAAqC;IAErC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;IACzC,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;IACzC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAaD,MAAM,UAAU,qBAAqB,CACnC,MAAyB,EACzB,QAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,6DAA6D,QAAQ,IAAI;YACvE,0CAA0C,QAAQ,iBAAiB,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,KAAK;YACrC,oBAAoB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;YAC9E,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/mode/resolve.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,2CAA2C;AAC3C,iCAAiC;AACjC,0BAA0B;AAC1B,4EAA4E;AAC5E,kEAAkE;AAElE,OAAO,EACL,YAAY,GAGb,MAAM,gCAAgC,CAAC;AAExC,SAAS,UAAU,CAAC,KAAa,EAAE,MAA4B;IAC7D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,MAAM,KAAK;YACrE,2CAA2C,YAAY,CAAC,MAAM,GAAG,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,IAA6C,EAC7C,GAAqC;IAErC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAaD,MAAM,UAAU,qBAAqB,CACnC,MAAyB,EACzB,QAAgB;IAEhB,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK;YACzD,2CAA2C,YAAY,CAAC,MAAM,GAAG,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,6DAA6D,QAAQ,IAAI;YACvE,+FAA+F,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,KAAK;YACrC,oBAAoB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;YAC9E,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/dist/mode/scope-policy.d.ts

@@ -0,0 +1,41 @@
+import type { ModeConfig } from "@momentiq/dark-factory-schemas";
+/**
+ * Bounded glob matcher for mode-catalog patterns. Supports exactly the
+ * forms the catalog uses — `**` (any depth, including none, across
+ * separators), `*` (any run within a segment), literal text — via safe
+ * regex translation. Deliberately NOT a general glob engine and NOT a new
+ * dependency: catalog patterns are repo-author-controlled.
+ */
+export declare function globMatch(pattern: string, path: string): boolean;
+export declare const DEPENDENCY_MANIFESTS: readonly string[];
+/**
+ * The rule that fired for a single repo-relative path against a mode
+ * catalog. `allow` means the path is within the mode's permitted surface;
+ * every other kind is a scope violation, in precedence order.
+ */
+export type ModePathClassification = {
+    kind: "allow";
+} | {
+    kind: "protected";
+} | {
+    kind: "dependency";
+} | {
+    kind: "out-of-scope";
+};
+/**
+ * Classify ONE repo-relative, forward-slash path against a mode catalog.
+ * Pure and total. Precedence (highest → lowest), matching spec §4.3 /
+ * §4.4:
+ *   1. `protectedPaths` — ALWAYS wins over writeScopes on overlap.
+ *   2. dependency manifest under `dependencyPolicy: "none"`.
+ *   3. `writeScopes` membership — only enforced when the mode declares at
+ *      least one write scope (an empty/absent writeScopes list means "no
+ *      scope narrowing", so nothing is out-of-scope on that axis).
+ *
+ * The caller supplies an already-relativized path (no leading `/`, no
+ * `..`); path canonicalization / repo-escape rejection is the caller's
+ * concern (the guard relativizes tool-call paths; the critic reads
+ * git-relative diff paths, which are already repo-relative).
+ */
+export declare function classifyModePath(path: string, mode: ModeConfig): ModePathClassification;
+//# sourceMappingURL=scope-policy.d.ts.map

package/dist/mode/scope-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-policy.d.ts","sourceRoot":"","sources":["../../src/mode/scope-policy.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CA4BhE;AAMD,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAOjD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAE7B;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,sBAAsB,CAcvF"}

package/dist/mode/scope-policy.js

@@ -0,0 +1,97 @@
+// Cycle 27 Phase C — shared operator-mode scope-policy core.
+//
+// Single source of truth for the catalog scope decision that BOTH
+// enforcement layers consume (spec §4.4 frames them as ONE policy, so
+// they must not drift):
+//   - Layer 2 (`mode/guard.ts` PreToolUse hook) — per-tool-call, live in
+//     the session, dual-register deny messages.
+//   - Layer 4 (`adapters/mode-scope.ts` CI/pre-push critic) — per-diff,
+//     tamper-proof, `blocker` findings.
+//
+// The precedence is invariant across both: `protectedPaths` ALWAYS wins
+// over `writeScopes` on overlap, then dependency-manifest edits under
+// `dependencyPolicy: "none"`, then writeScopes membership. Extracting the
+// classifier here means a change to that precedence lands in one place and
+// is enforced identically at both layers.
+/**
+ * Bounded glob matcher for mode-catalog patterns. Supports exactly the
+ * forms the catalog uses — `**` (any depth, including none, across
+ * separators), `*` (any run within a segment), literal text — via safe
+ * regex translation. Deliberately NOT a general glob engine and NOT a new
+ * dependency: catalog patterns are repo-author-controlled.
+ */
+export function globMatch(pattern, path) {
+    let re = "";
+    for (let i = 0; i < pattern.length; i++) {
+        const ch = pattern[i];
+        if (ch === "*") {
+            if (pattern[i + 1] === "*") {
+                // `**` = any depth. Two shapes: a `**/` prefix/interior swallows its
+                // slash (`(?:.*/)?`) so `**/x` also matches a root-level `x`; a trailing
+                // `**` becomes `.*`, so `a/**` → `^a/.*$` matches everything UNDER `a/`
+                // at any depth (the paths classified here are files, never a bare dir).
+                const next = pattern[i + 2];
+                if (next === "/") {
+                    re += "(?:.*/)?";
+                    i += 2;
+                }
+                else {
+                    re += ".*";
+                    i += 1;
+                }
+            }
+            else {
+                re += "[^/]*";
+            }
+        }
+        else if ("\\^$.|?+()[]{}".includes(ch)) {
+            re += `\\${ch}`;
+        }
+        else {
+            re += ch;
+        }
+    }
+    return new RegExp(`^${re}$`).test(path);
+}
+// Manifest/lockfile basenames that a `dependencyPolicy: "none"` mode may
+// not touch. Basename match (a nested `apps/web/package.json` is still a
+// dependency manifest). Kept in lockstep with the guard's Bash dependency
+// denylist by construction — both live in this module's consumers.
+export const DEPENDENCY_MANIFESTS = [
+    "package.json",
+    "package-lock.json",
+    "npm-shrinkwrap.json",
+    "pnpm-lock.yaml",
+    "yarn.lock",
+    "bun.lockb",
+];
+/**
+ * Classify ONE repo-relative, forward-slash path against a mode catalog.
+ * Pure and total. Precedence (highest → lowest), matching spec §4.3 /
+ * §4.4:
+ *   1. `protectedPaths` — ALWAYS wins over writeScopes on overlap.
+ *   2. dependency manifest under `dependencyPolicy: "none"`.
+ *   3. `writeScopes` membership — only enforced when the mode declares at
+ *      least one write scope (an empty/absent writeScopes list means "no
+ *      scope narrowing", so nothing is out-of-scope on that axis).
+ *
+ * The caller supplies an already-relativized path (no leading `/`, no
+ * `..`); path canonicalization / repo-escape rejection is the caller's
+ * concern (the guard relativizes tool-call paths; the critic reads
+ * git-relative diff paths, which are already repo-relative).
+ */
+export function classifyModePath(path, mode) {
+    const basename = path.split("/").pop() ?? path;
+    if ((mode.protectedPaths ?? []).some((p) => globMatch(p, path))) {
+        return { kind: "protected" };
+    }
+    if (mode.dependencyPolicy === "none" && DEPENDENCY_MANIFESTS.includes(basename)) {
+        return { kind: "dependency" };
+    }
+    const scopes = mode.writeScopes ?? [];
+    if (scopes.length > 0 && !scopes.some((p) => globMatch(p, path))) {
+        return { kind: "out-of-scope" };
+    }
+    return { kind: "allow" };
+}
+//# sourceMappingURL=scope-policy.js.map

package/dist/mode/scope-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-policy.js","sourceRoot":"","sources":["../../src/mode/scope-policy.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,wBAAwB;AACxB,yEAAyE;AACzE,gDAAgD;AAChD,wEAAwE;AACxE,wCAAwC;AACxC,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,0EAA0E;AAC1E,2EAA2E;AAC3E,0CAA0C;AAI1C;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAY;IACrD,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,qEAAqE;gBACrE,yEAAyE;gBACzE,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACjB,EAAE,IAAI,UAAU,CAAC;oBACjB,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,EAAE,IAAI,IAAI,CAAC;oBACX,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,EAAE,IAAI,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,WAAW;IACX,WAAW;CACZ,CAAC;AAaF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAgB;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;IAE/C,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/mode/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/mode/status.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,UAAU,EAChB,MAAM,gCAAgC,CAAC;AAIxC,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,GACjB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEzD,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;CAAE,EAC7C,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACpC,gBAAgB,CAWlB"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/mode/status.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAKjE,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,GACjB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEzD,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;CAAE,EAC7C,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACpC,gBAAgB,CAOlB"}

package/dist/mode/status.js

@@ -1,19 +1,12 @@
 // Cycle 27 Phase A — `df mode status`: report the session's active operator
 // mode. "No mode" is the normal engineer path, not an error.
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { parse as parseYaml } from "yaml";
-import { parseDarkFactoryConfig, } from "@momentiq/dark-factory-schemas";
+import { loadModeConfig } from "./loadConfig.js";
 import { resolveMode, resolveModeWithConfig } from "./resolve.js";
 export function modeStatus(repoRoot, args, env) {
     const modeName = resolveMode(args, env);
     if (!modeName)
         return { active: false };
-    const configPath = join(repoRoot, "darkfactory.yaml");
-    const raw = existsSync(configPath)
-        ? (parseYaml(readFileSync(configPath, "utf8")) ?? {})
-        : {};
-    const config = parseDarkFactoryConfig(raw);
+    const { config } = loadModeConfig(repoRoot);
     const resolved = resolveModeWithConfig(config, modeName);
     return { active: true, modeName: resolved.modeName, mode: resolved.mode };
 }

package/dist/mode/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/mode/status.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6DAA6D;AAE7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,sBAAsB,GAEvB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAMlE,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,IAA6C,EAC7C,GAAqC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAExC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACtD,MAAM,GAAG,GAAY,UAAU,CAAC,UAAU,CAAC;QACzC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/mode/status.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6DAA6D;AAI7D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAMlE,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,IAA6C,EAC7C,GAAqC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAExC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC5E,CAAC"}