@n-dx/core 0.1.0

package/packages/hench/dist/guard/policy.js

@@ -0,0 +1,156 @@
+/**
+ * Session-aware policy engine — runtime enforcement with cumulative tracking.
+ *
+ * Unlike the static validators in commands.ts and paths.ts which check
+ * individual operations in isolation, the PolicyEngine tracks cumulative
+ * session state: total commands run, bytes written, and operation frequency.
+ * This enables rate limiting and resource budgets that prevent runaway
+ * autonomous behavior even when each individual operation is valid.
+ *
+ * ## Design
+ *
+ * - **One engine per agent run** — instantiated alongside GuardRails
+ * - **Sliding-window rate limiting** — tracks operation timestamps within
+ *   a configurable window to enforce per-minute limits
+ * - **Cumulative resource tracking** — bytes written, commands executed,
+ *   files modified are tracked across the entire session
+ * - **Audit trail** — every guard decision (allow/deny) is logged with
+ *   context for post-run analysis
+ *
+ * @module
+ */
+import { GuardError } from "./paths.js";
+export const DEFAULT_POLICY_LIMITS = {
+    maxCommandsPerMinute: 60,
+    maxWritesPerMinute: 30,
+    maxTotalBytesWritten: 0, // unlimited by default
+    maxTotalCommands: 0, // unlimited by default
+    rateLimitWindowMs: 60_000,
+};
+/**
+ * Session-aware policy engine that tracks cumulative resource usage
+ * and enforces rate limits across an agent run.
+ */
+export class PolicyEngine {
+    limits;
+    // Cumulative counters
+    _commandsRun = 0;
+    _bytesWritten = 0;
+    _filesRead = 0;
+    _filesWritten = 0;
+    _operationsTotal = 0;
+    // Sliding-window timestamps for rate limiting
+    commandTimestamps = [];
+    writeTimestamps = [];
+    // Audit trail
+    _auditLog = [];
+    constructor(limits = {}) {
+        this.limits = { ...DEFAULT_POLICY_LIMITS, ...limits };
+    }
+    /**
+     * Check whether an operation is allowed under current policy.
+     * Records the decision in the audit trail.
+     *
+     * @throws {GuardError} if the operation exceeds policy limits
+     */
+    checkPolicy(operation, target, meta) {
+        const now = Date.now();
+        // Rate limit checks for commands
+        if (operation === "command" || operation === "git") {
+            this.pruneWindow(this.commandTimestamps, now);
+            if (this.limits.maxCommandsPerMinute > 0 &&
+                this.commandTimestamps.length >= this.limits.maxCommandsPerMinute) {
+                this.recordAudit(now, operation, "deny", target, `Rate limit exceeded: ${this.commandTimestamps.length} commands in the last ${this.limits.rateLimitWindowMs / 1000}s (limit: ${this.limits.maxCommandsPerMinute})`);
+                throw new GuardError(`Rate limit exceeded: ${this.limits.maxCommandsPerMinute} commands per ${this.limits.rateLimitWindowMs / 1000}s`);
+            }
+            // Cumulative command limit
+            if (this.limits.maxTotalCommands > 0 && this._commandsRun >= this.limits.maxTotalCommands) {
+                this.recordAudit(now, operation, "deny", target, `Session command limit exceeded: ${this._commandsRun} (limit: ${this.limits.maxTotalCommands})`);
+                throw new GuardError(`Session limit exceeded: ${this.limits.maxTotalCommands} total commands`);
+            }
+            this.commandTimestamps.push(now);
+            this._commandsRun++;
+        }
+        // Rate limit checks for writes
+        if (operation === "file_write") {
+            this.pruneWindow(this.writeTimestamps, now);
+            if (this.limits.maxWritesPerMinute > 0 &&
+                this.writeTimestamps.length >= this.limits.maxWritesPerMinute) {
+                this.recordAudit(now, operation, "deny", target, `Rate limit exceeded: ${this.writeTimestamps.length} writes in the last ${this.limits.rateLimitWindowMs / 1000}s (limit: ${this.limits.maxWritesPerMinute})`);
+                throw new GuardError(`Rate limit exceeded: ${this.limits.maxWritesPerMinute} file writes per ${this.limits.rateLimitWindowMs / 1000}s`);
+            }
+            this.writeTimestamps.push(now);
+            this._filesWritten++;
+        }
+        // Cumulative bytes written check
+        if (meta?.bytesWritten !== undefined) {
+            const projected = this._bytesWritten + meta.bytesWritten;
+            if (this.limits.maxTotalBytesWritten > 0 && projected > this.limits.maxTotalBytesWritten) {
+                this.recordAudit(now, operation, "deny", target, `Session byte limit exceeded: ${projected} bytes (limit: ${this.limits.maxTotalBytesWritten})`);
+                throw new GuardError(`Session limit exceeded: ${this.limits.maxTotalBytesWritten} total bytes written`);
+            }
+            this._bytesWritten += meta.bytesWritten;
+        }
+        // Track reads
+        if (operation === "file_read") {
+            this._filesRead++;
+        }
+        this._operationsTotal++;
+        // Record allowed
+        this.recordAudit(now, operation, "allow", target);
+    }
+    /**
+     * Get current session counters snapshot.
+     */
+    get counters() {
+        return {
+            commandsRun: this._commandsRun,
+            bytesWritten: this._bytesWritten,
+            filesRead: this._filesRead,
+            filesWritten: this._filesWritten,
+            operationsTotal: this._operationsTotal,
+        };
+    }
+    /**
+     * Get the full audit trail.
+     */
+    get auditLog() {
+        return this._auditLog;
+    }
+    /**
+     * Get a summary of the audit trail for logging.
+     */
+    auditSummary() {
+        const denied = this._auditLog.filter(e => e.verdict === "deny");
+        return {
+            total: this._auditLog.length,
+            allowed: this._auditLog.length - denied.length,
+            denied: denied.length,
+            denials: denied,
+        };
+    }
+    // -- Internal helpers --
+    pruneWindow(timestamps, now) {
+        const cutoff = now - this.limits.rateLimitWindowMs;
+        // Remove timestamps older than the window.
+        // Timestamps are in order, so find the first that's within window.
+        let i = 0;
+        while (i < timestamps.length && timestamps[i] < cutoff) {
+            i++;
+        }
+        if (i > 0) {
+            timestamps.splice(0, i);
+        }
+    }
+    recordAudit(timestamp, operation, verdict, target, reason) {
+        this._auditLog.push({
+            timestamp,
+            operation,
+            verdict,
+            target,
+            reason,
+            counters: { ...this.counters },
+        });
+    }
+}
+//# sourceMappingURL=policy.js.map

package/packages/hench/dist/guard/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAmBxC,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,oBAAoB,EAAE,EAAE;IACxB,kBAAkB,EAAE,EAAE;IACtB,oBAAoB,EAAE,CAAC,EAAE,uBAAuB;IAChD,gBAAgB,EAAE,CAAC,EAAM,uBAAuB;IAChD,iBAAiB,EAAE,MAAM;CAC1B,CAAC;AAuCF;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAe;IAE7B,sBAAsB;IACd,YAAY,GAAG,CAAC,CAAC;IACjB,aAAa,GAAG,CAAC,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,aAAa,GAAG,CAAC,CAAC;IAClB,gBAAgB,GAAG,CAAC,CAAC;IAE7B,8CAA8C;IACtC,iBAAiB,GAAa,EAAE,CAAC;IACjC,eAAe,GAAa,EAAE,CAAC;IAEvC,cAAc;IACN,SAAS,GAAiB,EAAE,CAAC;IAErC,YAAY,SAAgC,EAAE;QAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAwB,EAAE,MAAc,EAAE,IAAgC;QACpF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,iCAAiC;QACjC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAE9C,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC;gBACpC,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACtE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAC7C,wBAAwB,IAAI,CAAC,iBAAiB,CAAC,MAAM,yBAAyB,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC;gBACtK,MAAM,IAAI,UAAU,CAClB,wBAAwB,IAAI,CAAC,MAAM,CAAC,oBAAoB,iBAAiB,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,GAAG,CACjH,CAAC;YACJ,CAAC;YAED,2BAA2B;YAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1F,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAC7C,mCAAmC,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;gBACnG,MAAM,IAAI,UAAU,CAClB,2BAA2B,IAAI,CAAC,MAAM,CAAC,gBAAgB,iBAAiB,CACzE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;QAED,+BAA+B;QAC/B,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAE5C,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC;gBAClC,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAClE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAC7C,wBAAwB,IAAI,CAAC,eAAe,CAAC,MAAM,uBAAuB,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;gBAChK,MAAM,IAAI,UAAU,CAClB,wBAAwB,IAAI,CAAC,MAAM,CAAC,kBAAkB,oBAAoB,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAClH,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;YACzD,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACzF,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAC7C,gCAAgC,SAAS,kBAAkB,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC;gBAClG,MAAM,IAAI,UAAU,CAClB,2BAA2B,IAAI,CAAC,MAAM,CAAC,oBAAoB,sBAAsB,CAClF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;QAC1C,CAAC;QAED,cAAc;QACd,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,iBAAiB;QACjB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,eAAe,EAAE,IAAI,CAAC,gBAAgB;SACvC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM;SAChB,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEjB,WAAW,CAAC,UAAoB,EAAE,GAAW;QACnD,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACnD,2CAA2C;QAC3C,mEAAmE;QACnE,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;YACvD,CAAC,EAAE,CAAC;QACN,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,SAAiB,EACjB,SAAwB,EACxB,OAAqB,EACrB,MAAc,EACd,MAAe;QAEf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,SAAS;YACT,SAAS;YACT,OAAO;YACP,MAAM;YACN,MAAM;YACN,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}

package/packages/hench/dist/prd/llm-gateway.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Centralized gateway for @n-dx/llm-client runtime imports.
+ *
+ * Mirrors rex-gateway.ts — all runtime imports from @n-dx/llm-client are
+ * funnelled through this single module.  This makes the cross-package
+ * dependency surface explicit and easy to audit, and prevents llm-client
+ * imports from drifting across the ~160-file hench zone.
+ *
+ * ## Dependency DAG context
+ *
+ * ```
+ *   hench → rex → llm-client
+ *   hench → llm-client          ← this gateway
+ *   sourcevision → llm-client
+ * ```
+ *
+ * ## Maximum-scope policy
+ *
+ * **In-scope (re-export permitted):**
+ * - Project configuration (load/merge config, resolve keys/paths)
+ * - Process execution (exec, spawn, process pool)
+ * - CLI primitives (output control, help formatting, error classes, typo suggestions)
+ * - Token usage parsing (API and stream token parsing)
+ * - Model resolution (resolve model names)
+ * - Shared constants (PROJECT_DIRS)
+ * - Canonical JSON serialization
+ *
+ * **Out-of-scope (must NOT be re-exported):**
+ * - MCP server/client factories (web-tier concern)
+ * - Transport internals (HTTP, stdio — consumed only by web package)
+ * - Vendor adapter internals (implementation details)
+ *
+ * @module hench/prd/llm-gateway
+ * @see packages/hench/src/prd/rex-gateway.ts — companion gateway for rex imports
+ * @see gateway-rules.json — enforcement rules
+ */
+export { loadClaudeConfig, loadLLMConfig, resolveApiKey, resolveCliPath, loadProjectOverrides, mergeWithOverrides, } from "@n-dx/llm-client";
+export { PROJECT_DIRS } from "@n-dx/llm-client";
+export { toCanonicalJSON } from "@n-dx/llm-client";
+export { setQuiet, isQuiet, info, result } from "@n-dx/llm-client";
+export { formatHelp, formatTypoSuggestion } from "@n-dx/llm-client";
+export { CLIError, ClaudeClientError } from "@n-dx/llm-client";
+export { exec, execStdout, execShellCmd, getCurrentHead, getCurrentBranch, isExecutableOnPath, spawnTool, spawnManaged, ProcessPool, ProcessLimitError, } from "@n-dx/llm-client";
+export { parseApiTokenUsage, parseStreamTokenUsage, } from "@n-dx/llm-client";
+export { resolveModel } from "@n-dx/llm-client";
+export { formatUsage } from "@n-dx/llm-client";
+export type { ClaudeConfig, LLMConfig, LLMVendor, ExecResult, ExecOptions, SpawnToolOptions, SpawnToolResult, ManagedChild, HelpDefinition, } from "@n-dx/llm-client";

package/packages/hench/dist/prd/llm-gateway.js

@@ -0,0 +1,57 @@
+/**
+ * Centralized gateway for @n-dx/llm-client runtime imports.
+ *
+ * Mirrors rex-gateway.ts — all runtime imports from @n-dx/llm-client are
+ * funnelled through this single module.  This makes the cross-package
+ * dependency surface explicit and easy to audit, and prevents llm-client
+ * imports from drifting across the ~160-file hench zone.
+ *
+ * ## Dependency DAG context
+ *
+ * ```
+ *   hench → rex → llm-client
+ *   hench → llm-client          ← this gateway
+ *   sourcevision → llm-client
+ * ```
+ *
+ * ## Maximum-scope policy
+ *
+ * **In-scope (re-export permitted):**
+ * - Project configuration (load/merge config, resolve keys/paths)
+ * - Process execution (exec, spawn, process pool)
+ * - CLI primitives (output control, help formatting, error classes, typo suggestions)
+ * - Token usage parsing (API and stream token parsing)
+ * - Model resolution (resolve model names)
+ * - Shared constants (PROJECT_DIRS)
+ * - Canonical JSON serialization
+ *
+ * **Out-of-scope (must NOT be re-exported):**
+ * - MCP server/client factories (web-tier concern)
+ * - Transport internals (HTTP, stdio — consumed only by web package)
+ * - Vendor adapter internals (implementation details)
+ *
+ * @module hench/prd/llm-gateway
+ * @see packages/hench/src/prd/rex-gateway.ts — companion gateway for rex imports
+ * @see gateway-rules.json — enforcement rules
+ */
+// ---- Project configuration --------------------------------------------------
+export { loadClaudeConfig, loadLLMConfig, resolveApiKey, resolveCliPath, loadProjectOverrides, mergeWithOverrides, } from "@n-dx/llm-client";
+// ---- Shared constants -------------------------------------------------------
+export { PROJECT_DIRS } from "@n-dx/llm-client";
+// ---- Canonical JSON ---------------------------------------------------------
+export { toCanonicalJSON } from "@n-dx/llm-client";
+// ---- CLI output control -----------------------------------------------------
+export { setQuiet, isQuiet, info, result } from "@n-dx/llm-client";
+// ---- CLI help formatting ----------------------------------------------------
+export { formatHelp, formatTypoSuggestion } from "@n-dx/llm-client";
+// ---- CLI error classes ------------------------------------------------------
+export { CLIError, ClaudeClientError } from "@n-dx/llm-client";
+// ---- Process execution ------------------------------------------------------
+export { exec, execStdout, execShellCmd, getCurrentHead, getCurrentBranch, isExecutableOnPath, spawnTool, spawnManaged, ProcessPool, ProcessLimitError, } from "@n-dx/llm-client";
+// ---- Token usage parsing ----------------------------------------------------
+export { parseApiTokenUsage, parseStreamTokenUsage, } from "@n-dx/llm-client";
+// ---- Model resolution -------------------------------------------------------
+export { resolveModel } from "@n-dx/llm-client";
+// ---- Usage formatting -------------------------------------------------------
+export { formatUsage } from "@n-dx/llm-client";
+//# sourceMappingURL=llm-gateway.js.map

package/packages/hench/dist/prd/llm-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-gateway.js","sourceRoot":"","sources":["../../src/prd/llm-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,gFAAgF;AAChF,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,gFAAgF;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,gFAAgF;AAChF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEnE,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAEpE,gFAAgF;AAChF,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE/D,gFAAgF;AAChF,OAAO,EACL,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/packages/hench/dist/prd/ops.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @deprecated Renamed to `rex-gateway.ts`. This barrel re-export exists
+ * for backward compatibility; new code should import from `./rex-gateway.js`.
+ */
+export * from "./rex-gateway.js";

package/packages/hench/dist/prd/ops.js

@@ -0,0 +1,6 @@
+/**
+ * @deprecated Renamed to `rex-gateway.ts`. This barrel re-export exists
+ * for backward compatibility; new code should import from `./rex-gateway.js`.
+ */
+export * from "./rex-gateway.js";
+//# sourceMappingURL=ops.js.map

package/packages/hench/dist/prd/ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops.js","sourceRoot":"","sources":["../../src/prd/ops.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,kBAAkB,CAAC"}

package/packages/hench/dist/prd/rex-gateway.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Centralized gateway for rex runtime imports.
+ *
+ * Hench needs several rex functions at runtime (tree traversal, task
+ * selection, timestamp computation, auto-completion).  Rather than
+ * scattering `import … from "rex"` across 9+ files, every runtime
+ * import is funnelled through this single module.  This makes the
+ * cross-package dependency surface explicit and easy to audit.
+ *
+ * ## Dependency DAG invariant
+ *
+ * Hench is the only domain package that imports from another domain
+ * package (rex).  This creates a strict one-way dependency:
+ *
+ * ```
+ *   hench → rex → llm-client
+ *   hench → llm-client
+ *   sourcevision → llm-client
+ * ```
+ *
+ * By concentrating all hench→rex runtime imports here, we ensure:
+ * - The cross-package surface is **explicit** (re-exports, not scattered
+ *   imports).
+ * - The DAG stays **acyclic** — rex never imports from hench.
+ * - Future changes to rex's public API need only be updated in this
+ *   single file.
+ *
+ * ## Migration safety
+ *
+ * This gateway is the sole cross-zone coupling surface for ~160 hench
+ * files. To mitigate blast radius from rex API changes:
+ *
+ * 1. **Contract test** — `tests/unit/prd/rex-gateway.test.ts` verifies
+ *    every re-export exists and is callable, catching API drift at test
+ *    time rather than in production agent loops.
+ *
+ * 2. **Domain-aligned sections** — re-exports are grouped by concern
+ *    (store, tree, task-selection, validation, etc.). If rex ever splits
+ *    into sub-packages, each section can be migrated independently.
+ *
+ * 3. **Narrow consumer surface** — only 3 files import from this
+ *    gateway (cli/commands/run.ts, agent/planning/brief.ts,
+ *    tools/rex.ts). Each imports only the subset it needs.
+ *
+ * ## Maximum-scope policy
+ *
+ * This gateway intentionally limits its surface to the rex APIs that
+ * hench needs for its core mission: picking a task, running an agent
+ * loop, and recording the result. Categories explicitly in-scope and
+ * out-of-scope are listed below. New re-exports must fit an in-scope
+ * category — if they don't, the feature should be reconsidered or the
+ * policy updated with a documented rationale.
+ *
+ * **In-scope (re-export permitted):**
+ * - Schema version contract (read/validate prd.json compatibility)
+ * - Store factory (open a PRDStore for reading/writing)
+ * - Tree traversal (findItem, walkTree — locate items in the tree)
+ * - Task selection (findNextTask, findActionableTasks, collectCompletedIds)
+ * - Timestamp computation (status change timestamps)
+ * - Parent auto-completion (bubble-up completion when children finish)
+ * - Requirements validation (verify task acceptance criteria)
+ * - Level helpers (isRootLevel, isWorkItem — classify items)
+ * - Finding acknowledgment (load/save/acknowledge sourcevision findings)
+ *
+ * **Out-of-scope (must NOT be re-exported):**
+ * - PRD mutation (insertChild, updateInTree, removeFromTree — hench
+ *   mutates via rex MCP tools, not direct tree manipulation)
+ * - Analytics & health (computeEpicStats, computeHealthScore — these
+ *   serve the dashboard/UI, not the agent loop)
+ * - Merge/consolidation (validateMerge, mergeItems — user-facing operations)
+ * - Reorganize/reshape (detectReorganizations, applyReshape — LLM-powered
+ *   restructuring is an interactive workflow, not an agent concern)
+ * - MCP server factory (createRexMcpServer — web-tier concern only)
+ * - Domain constants (PRIORITY_ORDER, LEVEL_HIERARCHY — UI display aids)
+ *
+ * **Type-only** imports (`import type { PRDStore, … }`) must also
+ * flow through this gateway to prevent the type-import promotion
+ * erosion path — a type import can be promoted to a runtime import
+ * during refactoring, silently bypassing the gateway pattern.
+ * This is enforced by domain-isolation.test.js.
+ *
+ * @module hench/prd/rex-gateway
+ * @see packages/web/src/server/domain-gateway.ts — web's equivalent gateway
+ * @see packages/hench/tests/unit/prd/rex-gateway.test.ts — contract test
+ */
+export { SCHEMA_VERSION, isCompatibleSchema, assertSchemaVersion } from "rex";
+export { resolveStore } from "rex";
+export { findItem, walkTree } from "rex";
+export { findNextTask, findActionableTasks, collectCompletedIds } from "rex";
+export { computeTimestampUpdates } from "rex";
+export { findAutoCompletions } from "rex";
+export { collectRequirements, validateAutomatedRequirements, formatRequirementsValidation, } from "rex";
+export { isRootLevel, isWorkItem } from "rex";
+export { loadAcknowledged, saveAcknowledged, acknowledgeFinding } from "rex";
+export type { PRDStore, PRDItem, ItemStatus, ResolutionType, CommandExecutor, TreeEntry } from "rex";

package/packages/hench/dist/prd/rex-gateway.js

@@ -0,0 +1,104 @@
+/**
+ * Centralized gateway for rex runtime imports.
+ *
+ * Hench needs several rex functions at runtime (tree traversal, task
+ * selection, timestamp computation, auto-completion).  Rather than
+ * scattering `import … from "rex"` across 9+ files, every runtime
+ * import is funnelled through this single module.  This makes the
+ * cross-package dependency surface explicit and easy to audit.
+ *
+ * ## Dependency DAG invariant
+ *
+ * Hench is the only domain package that imports from another domain
+ * package (rex).  This creates a strict one-way dependency:
+ *
+ * ```
+ *   hench → rex → llm-client
+ *   hench → llm-client
+ *   sourcevision → llm-client
+ * ```
+ *
+ * By concentrating all hench→rex runtime imports here, we ensure:
+ * - The cross-package surface is **explicit** (re-exports, not scattered
+ *   imports).
+ * - The DAG stays **acyclic** — rex never imports from hench.
+ * - Future changes to rex's public API need only be updated in this
+ *   single file.
+ *
+ * ## Migration safety
+ *
+ * This gateway is the sole cross-zone coupling surface for ~160 hench
+ * files. To mitigate blast radius from rex API changes:
+ *
+ * 1. **Contract test** — `tests/unit/prd/rex-gateway.test.ts` verifies
+ *    every re-export exists and is callable, catching API drift at test
+ *    time rather than in production agent loops.
+ *
+ * 2. **Domain-aligned sections** — re-exports are grouped by concern
+ *    (store, tree, task-selection, validation, etc.). If rex ever splits
+ *    into sub-packages, each section can be migrated independently.
+ *
+ * 3. **Narrow consumer surface** — only 3 files import from this
+ *    gateway (cli/commands/run.ts, agent/planning/brief.ts,
+ *    tools/rex.ts). Each imports only the subset it needs.
+ *
+ * ## Maximum-scope policy
+ *
+ * This gateway intentionally limits its surface to the rex APIs that
+ * hench needs for its core mission: picking a task, running an agent
+ * loop, and recording the result. Categories explicitly in-scope and
+ * out-of-scope are listed below. New re-exports must fit an in-scope
+ * category — if they don't, the feature should be reconsidered or the
+ * policy updated with a documented rationale.
+ *
+ * **In-scope (re-export permitted):**
+ * - Schema version contract (read/validate prd.json compatibility)
+ * - Store factory (open a PRDStore for reading/writing)
+ * - Tree traversal (findItem, walkTree — locate items in the tree)
+ * - Task selection (findNextTask, findActionableTasks, collectCompletedIds)
+ * - Timestamp computation (status change timestamps)
+ * - Parent auto-completion (bubble-up completion when children finish)
+ * - Requirements validation (verify task acceptance criteria)
+ * - Level helpers (isRootLevel, isWorkItem — classify items)
+ * - Finding acknowledgment (load/save/acknowledge sourcevision findings)
+ *
+ * **Out-of-scope (must NOT be re-exported):**
+ * - PRD mutation (insertChild, updateInTree, removeFromTree — hench
+ *   mutates via rex MCP tools, not direct tree manipulation)
+ * - Analytics & health (computeEpicStats, computeHealthScore — these
+ *   serve the dashboard/UI, not the agent loop)
+ * - Merge/consolidation (validateMerge, mergeItems — user-facing operations)
+ * - Reorganize/reshape (detectReorganizations, applyReshape — LLM-powered
+ *   restructuring is an interactive workflow, not an agent concern)
+ * - MCP server factory (createRexMcpServer — web-tier concern only)
+ * - Domain constants (PRIORITY_ORDER, LEVEL_HIERARCHY — UI display aids)
+ *
+ * **Type-only** imports (`import type { PRDStore, … }`) must also
+ * flow through this gateway to prevent the type-import promotion
+ * erosion path — a type import can be promoted to a runtime import
+ * during refactoring, silently bypassing the gateway pattern.
+ * This is enforced by domain-isolation.test.js.
+ *
+ * @module hench/prd/rex-gateway
+ * @see packages/web/src/server/domain-gateway.ts — web's equivalent gateway
+ * @see packages/hench/tests/unit/prd/rex-gateway.test.ts — contract test
+ */
+// ---- Schema version contract ------------------------------------------------
+export { SCHEMA_VERSION, isCompatibleSchema, assertSchemaVersion } from "rex";
+// ---- Store factory ----------------------------------------------------------
+export { resolveStore } from "rex";
+// ---- Tree utilities ---------------------------------------------------------
+export { findItem, walkTree } from "rex";
+// ---- Task selection ---------------------------------------------------------
+export { findNextTask, findActionableTasks, collectCompletedIds } from "rex";
+// ---- Timestamps -------------------------------------------------------------
+export { computeTimestampUpdates } from "rex";
+// ---- Parent auto-completion -------------------------------------------------
+export { findAutoCompletions } from "rex";
+// ---- Requirements validation ------------------------------------------------
+export { collectRequirements, validateAutomatedRequirements, formatRequirementsValidation, } from "rex";
+// ---- Level helpers ----------------------------------------------------------
+export { isRootLevel, isWorkItem } from "rex";
+// ---- Finding acknowledgment -------------------------------------------------
+export { loadAcknowledged, saveAcknowledged, acknowledgeFinding } from "rex";
+//# sourceMappingURL=rex-gateway.js.map

package/packages/hench/dist/prd/rex-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rex-gateway.js","sourceRoot":"","sources":["../../src/prd/rex-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoFG;AAEH,gFAAgF;AAChF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,KAAK,CAAC;AAE9E,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,KAAK,CAAC;AAEnC,gFAAgF;AAChF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAEzC,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,KAAK,CAAC;AAE7E,gFAAgF;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,KAAK,CAAC;AAE9C,gFAAgF;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,KAAK,CAAC;AAE1C,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,KAAK,CAAC;AAEb,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAE9C,gFAAgF;AAChF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,KAAK,CAAC"}