@nanocollective/sentinel 0.1.0-alpha.0

package/dist/findings/types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The findings data model. This is a stable contract: rich enough that a
+ * future auto-fix surface can consume it without a migration, even though v1
+ * only files issues. See docs/findings/index.md.
+ */
+/** The four-tier severity scale. Order matters: index encodes rank. */
+export declare const SEVERITIES: readonly ["low", "medium", "high", "critical"];
+export type Severity = (typeof SEVERITIES)[number];
+/** Confidence is tracked separately from severity. */
+export declare const CONFIDENCES: readonly ["low", "medium", "high"];
+export type Confidence = (typeof CONFIDENCES)[number];
+/** A 1-indexed, inclusive line range within a file. */
+export interface LineRange {
+    start: number;
+    end: number;
+}
+/** A single thing a rule pack flagged. */
+export interface Finding {
+    /** The rule pack (and pattern within it) that produced the finding. */
+    rule: string;
+    /** The affected file, relative to the repository root. */
+    file: string;
+    /** The line range within that file. */
+    lineRange: LineRange;
+    /** The finding's category, carried from the pack. */
+    category: string;
+    /** One of the four severities. */
+    severity: Severity;
+    /** The model's confidence in the finding. */
+    confidence: Confidence;
+    /** The relevant code excerpt. */
+    offendingSnippet: string;
+    /**
+     * The human-facing layer the issue body renders. These are model-authored
+     * (they cannot be derived from the machine fields) and optional: a finding
+     * still validates without them, but a good pack produces them.
+     */
+    /** A one-line summary of the finding. */
+    summary?: string;
+    /** Why the finding carries the severity it does. */
+    rationale?: string;
+    /** What a reviewer should do next. Not a patch — a next step. */
+    suggestedNextSteps?: string;
+}
+/** The rank of a severity, 0 (low) to 3 (critical). */
+export declare function severityRank(severity: Severity): number;
+/** Returns true if a finding's severity is at or above the filing threshold. */
+export declare function meetsSeverityThreshold(severity: Severity, threshold: Severity): boolean;
+/** Returns true if the value is one of the allowed severities. */
+export declare function isSeverity(value: unknown): value is Severity;
+/** Returns true if the value is one of the allowed confidences. */
+export declare function isConfidence(value: unknown): value is Confidence;
+//# sourceMappingURL=types.d.ts.map

package/dist/findings/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../source/findings/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,uEAAuE;AACvE,eAAO,MAAM,UAAU,gDAAiD,CAAC;AAEzE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,sDAAsD;AACtD,eAAO,MAAM,WAAW,oCAAqC,CAAC;AAE9D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtD,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,0CAA0C;AAC1C,MAAM,WAAW,OAAO;IACvB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,SAAS,EAAE,SAAS,CAAC;IACrB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,6CAA6C;IAC7C,UAAU,EAAE,UAAU,CAAC;IACvB,iCAAiC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,uDAAuD;AACvD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAEvD;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,QAAQ,GACjB,OAAO,CAET;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAK5D;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAKhE"}

package/dist/findings/types.js

@@ -0,0 +1,28 @@
+/**
+ * The findings data model. This is a stable contract: rich enough that a
+ * future auto-fix surface can consume it without a migration, even though v1
+ * only files issues. See docs/findings/index.md.
+ */
+/** The four-tier severity scale. Order matters: index encodes rank. */
+export const SEVERITIES = ['low', 'medium', 'high', 'critical'];
+/** Confidence is tracked separately from severity. */
+export const CONFIDENCES = ['low', 'medium', 'high'];
+/** The rank of a severity, 0 (low) to 3 (critical). */
+export function severityRank(severity) {
+    return SEVERITIES.indexOf(severity);
+}
+/** Returns true if a finding's severity is at or above the filing threshold. */
+export function meetsSeverityThreshold(severity, threshold) {
+    return severityRank(severity) >= severityRank(threshold);
+}
+/** Returns true if the value is one of the allowed severities. */
+export function isSeverity(value) {
+    return (typeof value === 'string' &&
+        SEVERITIES.includes(value));
+}
+/** Returns true if the value is one of the allowed confidences. */
+export function isConfidence(value) {
+    return (typeof value === 'string' &&
+        CONFIDENCES.includes(value));
+}
+//# sourceMappingURL=types.js.map

package/dist/findings/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../source/findings/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AAIzE,sDAAsD;AACtD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAuC9D,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC9C,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CACrC,QAAkB,EAClB,SAAmB;IAEnB,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,KAAc;IACxC,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACxB,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACjD,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,KAAc;IAC1C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACxB,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClD,CAAC;AACH,CAAC"}

package/dist/findings/validate.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The findings validator. This is the hard gate the workflow runs against the
+ * agent's structured output before anything is filed. It enforces three rules
+ * (see docs/workflow/index.md#validation):
+ *
+ *   1. The output is well-formed JSON.
+ *   2. Every finding's severity is within the allowed set.
+ *   3. Every finding cites at least one file and a line range.
+ *
+ * On failure it returns a structured error report, which the auto-fix loop
+ * feeds back to the agent for a second attempt.
+ */
+import { type Finding } from './types.js';
+/** A single reason a finding (or the whole output) failed validation. */
+export interface ValidationError {
+    /** Index of the offending finding, or -1 for a document-level error. */
+    index: number;
+    /** The field at fault, or 'document' for parse-level errors. */
+    field: string;
+    /** A human-readable explanation, suitable for the auto-fix prompt. */
+    message: string;
+}
+/** The outcome of validating a batch of findings. */
+export interface ValidationResult {
+    valid: boolean;
+    /** The findings that passed, in input order. */
+    findings: Finding[];
+    /** Every reason validation failed. Empty when valid. */
+    errors: ValidationError[];
+}
+/**
+ * Validate the agent's findings output. Accepts either a raw JSON string (which
+ * it parses — Rule 1) or an already-parsed array of unknown values.
+ */
+export declare function validateFindings(raw: unknown): ValidationResult;
+//# sourceMappingURL=validate.d.ts.map

package/dist/findings/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../source/findings/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEN,KAAK,OAAO,EAKZ,MAAM,YAAY,CAAC;AAEpB,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC/B,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,gDAAgD;IAChD,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,wDAAwD;IACxD,MAAM,EAAE,eAAe,EAAE,CAAC;CAC1B;AAmJD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CA2C/D"}

package/dist/findings/validate.js

@@ -0,0 +1,178 @@
+/**
+ * The findings validator. This is the hard gate the workflow runs against the
+ * agent's structured output before anything is filed. It enforces three rules
+ * (see docs/workflow/index.md#validation):
+ *
+ *   1. The output is well-formed JSON.
+ *   2. Every finding's severity is within the allowed set.
+ *   3. Every finding cites at least one file and a line range.
+ *
+ * On failure it returns a structured error report, which the auto-fix loop
+ * feeds back to the agent for a second attempt.
+ */
+import { isConfidence, isSeverity, } from './types.js';
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.trim().length > 0;
+}
+function validateLineRange(value, index, errors) {
+    if (!isObject(value)) {
+        errors.push({
+            index,
+            field: 'line_range',
+            message: 'line_range must be an object with numeric start and end',
+        });
+        return false;
+    }
+    const { start, end } = value;
+    if (typeof start !== 'number' || typeof end !== 'number') {
+        errors.push({
+            index,
+            field: 'line_range',
+            message: 'line_range.start and line_range.end must both be numbers',
+        });
+        return false;
+    }
+    if (start < 1 || end < start) {
+        errors.push({
+            index,
+            field: 'line_range',
+            message: 'line_range must satisfy 1 <= start <= end',
+        });
+        return false;
+    }
+    return true;
+}
+function validateFinding(value, index, errors) {
+    if (!isObject(value)) {
+        errors.push({
+            index,
+            field: 'finding',
+            message: 'finding must be an object',
+        });
+        return null;
+    }
+    const before = errors.length;
+    if (!isNonEmptyString(value.rule)) {
+        errors.push({
+            index,
+            field: 'rule',
+            message: 'rule must be a non-empty string',
+        });
+    }
+    // Rule 3: every finding cites at least one file...
+    if (!isNonEmptyString(value.file)) {
+        errors.push({
+            index,
+            field: 'file',
+            message: 'file must be a non-empty string',
+        });
+    }
+    // ...and a line range.
+    validateLineRange(value.line_range, index, errors);
+    if (!isNonEmptyString(value.category)) {
+        errors.push({
+            index,
+            field: 'category',
+            message: 'category must be a non-empty string',
+        });
+    }
+    // Rule 2: severity within the allowed set.
+    if (!isSeverity(value.severity)) {
+        errors.push({
+            index,
+            field: 'severity',
+            message: 'severity must be one of: low, medium, high, critical',
+        });
+    }
+    if (!isConfidence(value.confidence)) {
+        errors.push({
+            index,
+            field: 'confidence',
+            message: 'confidence must be one of: low, medium, high',
+        });
+    }
+    if (!isNonEmptyString(value.offending_snippet)) {
+        errors.push({
+            index,
+            field: 'offending_snippet',
+            message: 'offending_snippet must be a non-empty string',
+        });
+    }
+    // Optional human-facing fields: when present, they must be strings.
+    for (const key of ['summary', 'rationale', 'suggested_next_steps']) {
+        if (value[key] !== undefined && typeof value[key] !== 'string') {
+            errors.push({ index, field: key, message: `${key} must be a string` });
+        }
+    }
+    if (errors.length > before) {
+        return null;
+    }
+    const finding = {
+        rule: value.rule,
+        file: value.file,
+        lineRange: value.line_range,
+        category: value.category,
+        severity: value.severity,
+        confidence: value.confidence,
+        offendingSnippet: value.offending_snippet,
+    };
+    if (typeof value.summary === 'string') {
+        finding.summary = value.summary;
+    }
+    if (typeof value.rationale === 'string') {
+        finding.rationale = value.rationale;
+    }
+    if (typeof value.suggested_next_steps === 'string') {
+        finding.suggestedNextSteps = value.suggested_next_steps;
+    }
+    return finding;
+}
+/**
+ * Validate the agent's findings output. Accepts either a raw JSON string (which
+ * it parses — Rule 1) or an already-parsed array of unknown values.
+ */
+export function validateFindings(raw) {
+    const errors = [];
+    let parsed = raw;
+    // Rule 1: well-formed JSON.
+    if (typeof raw === 'string') {
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return {
+                valid: false,
+                findings: [],
+                errors: [
+                    { index: -1, field: 'document', message: `invalid JSON: ${message}` },
+                ],
+            };
+        }
+    }
+    if (!Array.isArray(parsed)) {
+        return {
+            valid: false,
+            findings: [],
+            errors: [
+                {
+                    index: -1,
+                    field: 'document',
+                    message: 'findings output must be an array',
+                },
+            ],
+        };
+    }
+    const findings = [];
+    for (const [index, entry] of parsed.entries()) {
+        const finding = validateFinding(entry, index, errors);
+        if (finding) {
+            findings.push(finding);
+        }
+    }
+    return { valid: errors.length === 0, findings, errors };
+}
+//# sourceMappingURL=validate.js.map

package/dist/findings/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../source/findings/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGN,YAAY,EACZ,UAAU,GAGV,MAAM,YAAY,CAAC;AAqBpB,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CACzB,KAAc,EACd,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,yDAAyD;SAClE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,EAAC,KAAK,EAAE,GAAG,EAAC,GAAG,KAAK,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,0DAA0D;SACnE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,2CAA2C;SACpD,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CACvB,KAAc,EACd,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,2BAA2B;SACpC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,iCAAiC;SAC1C,CAAC,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,iCAAiC;SAC1C,CAAC,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,qCAAqC;SAC9C,CAAC,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,sDAAsD;SAC/D,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,8CAA8C;SACvD,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,8CAA8C;SACvD,CAAC,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACpE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,mBAAmB,EAAC,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAY;QACxB,IAAI,EAAE,KAAK,CAAC,IAAc;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAc;QAC1B,SAAS,EAAE,KAAK,CAAC,UAAuB;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAkB;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAoB;QACpC,UAAU,EAAE,KAAK,CAAC,UAAwB;QAC1C,gBAAgB,EAAE,KAAK,CAAC,iBAA2B;KACnD,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC5C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,MAAM,GAAY,GAAG,CAAC;IAE1B,4BAA4B;IAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE;oBACP,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,OAAO,EAAE,EAAC;iBACnE;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE;gBACP;oBACC,KAAK,EAAE,CAAC,CAAC;oBACT,KAAK,EAAE,UAAU;oBACjB,OAAO,EAAE,kCAAkC;iBAC3C;aACD;SACD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IAED,OAAO,EAAC,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAC,CAAC;AACvD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Public library API for @nanocollective/sentinel.
+ *
+ * The same package is both the scaffolder (`sentinel init`), the workflow
+ * runtime (`sentinel run`), and a library. This module is the library surface.
+ */
+export { parseConfig } from './config/parse.js';
+export { parseRepoOverride } from './config/repo-override.js';
+export type { ConfigError, ConfigResult, IssuesConfig, ModelConfig, ModelFallback, RepoOverride, RepoOverrideResult, SentinelConfig, Suppression, Target, } from './config/types.js';
+export { findingHash } from './dedup/hash.js';
+export { readMarker, readMisses, upsertMarker } from './dedup/markers.js';
+export { planReconciliation, type ReconcileOptions, type ReconcilePlan, SUPPRESSION_LABELS, } from './dedup/plan.js';
+export { type ReconcileResult, reconcileFindings, } from './dedup/reconcile.js';
+export type { Confidence, Finding, LineRange, Severity, } from './findings/types.js';
+export { CONFIDENCES, isConfidence, isSeverity, meetsSeverityThreshold, SEVERITIES, severityRank, } from './findings/types.js';
+export type { ValidationError, ValidationResult, } from './findings/validate.js';
+export { validateFindings } from './findings/validate.js';
+export { type ParsedInitArgs, parseInitArgs } from './init/args.js';
+export { planInit } from './init/plan.js';
+export { type ScaffoldResult, scaffold } from './init/scaffold.js';
+export { configReadme, nanocoderConfig, sentinelYaml, starterPack, workflowYaml, } from './init/templates.js';
+export { DEFAULT_INIT_OPTIONS, type InitOptions, type ScaffoldFile, } from './init/types.js';
+export { buildIssueBody, buildIssueTitle } from './issues/body.js';
+export { buildIssueContent, fileFindings, qualifyingFindings, targetRepoFor, } from './issues/file.js';
+export { buildGhCloseArgs, buildGhEditArgs, buildGhIssueArgs, buildGhListArgs, ghIssueClient, parseIssueList, parseIssueUrl, } from './issues/gh-client.js';
+export type { CreatedIssue, CreateIssueParams, ExistingIssue, FiledIssue, FilingContext, FilingError, FilingResult, GitHubClient, IssueContent, IssueQueryClient, ReconcileClient, } from './issues/types.js';
+export { runAudit } from './orchestrator/audit.js';
+export { type AutoFixOptions, type AutoFixResult, buildAutoFixPrompt, runAuditWithAutoFix, } from './orchestrator/auto-fix.js';
+export { extractJsonArray } from './orchestrator/extract.js';
+export { buildNanocoderArgs, buildNanocoderEnv, nanocoderRunner, resolveModelId, } from './orchestrator/nanocoder-runner.js';
+export type { AuditResult, ModelRunner, ModelRunResult, RunnerOptions, } from './orchestrator/types.js';
+export { buildAuditPrompt } from './prompt/build.js';
+export type { PromptInput, PromptResult, SourceFile } from './prompt/types.js';
+export type { DependencyResult } from './rule-packs/dependencies.js';
+export { resolveDependencies } from './rule-packs/dependencies.js';
+export { globToRegExp, matchesAppliesTo, matchesGlob, } from './rule-packs/glob.js';
+export { parseRulePack, splitFrontmatter } from './rule-packs/parse.js';
+export type { AppliesTo, ParseResult, RulePack, RulePackError, RulePackManifest, } from './rule-packs/types.js';
+export { auditPack, type PackAuditContext } from './run/audit.js';
+export { buildCloneArgs, type EnsureTargetsResult } from './run/clone.js';
+export { type DryRunPreview, previewReconciliation, renderPreview, } from './run/preview.js';
+export { countFindings, renderReport } from './run/report.js';
+export { type RunConfigOptions, type RunDeps, type RunLocalDeps, type RunReport, runFromConfig, runLocal, } from './run/run.js';
+export { isEnabledPackPath, unionPatterns } from './run/select.js';
+export { fsPackLoader, fsRepoFiles } from './run/sources.js';
+export type { LoadedPacks, PackLoadError, PackLoader, PackOutcome, RepoFiles, RepoOutcome, RunOutcome, } from './run/types.js';
+export { applyRepoOverride, isSuppressed, matchesSuppression, type OverrideOutcome, } from './suppression/apply.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../source/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAC,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AAC5D,YAAY,EACX,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,MAAM,GACN,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAC,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACN,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,kBAAkB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,KAAK,eAAe,EACpB,iBAAiB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACX,UAAU,EACV,OAAO,EACP,SAAS,EACT,QAAQ,GACR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,WAAW,EACX,YAAY,EACZ,UAAU,EACV,sBAAsB,EACtB,UAAU,EACV,YAAY,GACZ,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACX,eAAe,EACf,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAC,gBAAgB,EAAC,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAC,KAAK,cAAc,EAAE,aAAa,EAAC,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAC,QAAQ,EAAC,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAC,KAAK,cAAc,EAAE,QAAQ,EAAC,MAAM,oBAAoB,CAAC;AACjE,OAAO,EACN,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,YAAY,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAC,cAAc,EAAE,eAAe,EAAC,MAAM,kBAAkB,CAAC;AACjE,OAAO,EACN,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,aAAa,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,GACb,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,QAAQ,EAAC,MAAM,yBAAyB,CAAC;AACjD,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,kBAAkB,EAClB,mBAAmB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAC,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,GACd,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACX,WAAW,EACX,WAAW,EACX,cAAc,EACd,aAAa,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAC,gBAAgB,EAAC,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAC,MAAM,mBAAmB,CAAC;AAC7E,YAAY,EAAC,gBAAgB,EAAC,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAC,mBAAmB,EAAC,MAAM,8BAA8B,CAAC;AACjE,OAAO,EACN,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,aAAa,EAAE,gBAAgB,EAAC,MAAM,uBAAuB,CAAC;AACtE,YAAY,EACX,SAAS,EACT,WAAW,EACX,QAAQ,EACR,aAAa,EACb,gBAAgB,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAC,SAAS,EAAE,KAAK,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAC,cAAc,EAAE,KAAK,mBAAmB,EAAC,MAAM,gBAAgB,CAAC;AACxE,OAAO,EACN,KAAK,aAAa,EAClB,qBAAqB,EACrB,aAAa,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,aAAa,EAAE,YAAY,EAAC,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,aAAa,EACb,QAAQ,GACR,MAAM,cAAc,CAAC;AACtB,OAAO,EAAC,iBAAiB,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAC,YAAY,EAAE,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAC3D,YAAY,EACX,WAAW,EACX,aAAa,EACb,UAAU,EACV,WAAW,EACX,SAAS,EACT,WAAW,EACX,UAAU,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,KAAK,eAAe,GACpB,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,39 @@
+/**
+ * Public library API for @nanocollective/sentinel.
+ *
+ * The same package is both the scaffolder (`sentinel init`), the workflow
+ * runtime (`sentinel run`), and a library. This module is the library surface.
+ */
+export { parseConfig } from './config/parse.js';
+export { parseRepoOverride } from './config/repo-override.js';
+export { findingHash } from './dedup/hash.js';
+export { readMarker, readMisses, upsertMarker } from './dedup/markers.js';
+export { planReconciliation, SUPPRESSION_LABELS, } from './dedup/plan.js';
+export { reconcileFindings, } from './dedup/reconcile.js';
+export { CONFIDENCES, isConfidence, isSeverity, meetsSeverityThreshold, SEVERITIES, severityRank, } from './findings/types.js';
+export { validateFindings } from './findings/validate.js';
+export { parseInitArgs } from './init/args.js';
+export { planInit } from './init/plan.js';
+export { scaffold } from './init/scaffold.js';
+export { configReadme, nanocoderConfig, sentinelYaml, starterPack, workflowYaml, } from './init/templates.js';
+export { DEFAULT_INIT_OPTIONS, } from './init/types.js';
+export { buildIssueBody, buildIssueTitle } from './issues/body.js';
+export { buildIssueContent, fileFindings, qualifyingFindings, targetRepoFor, } from './issues/file.js';
+export { buildGhCloseArgs, buildGhEditArgs, buildGhIssueArgs, buildGhListArgs, ghIssueClient, parseIssueList, parseIssueUrl, } from './issues/gh-client.js';
+export { runAudit } from './orchestrator/audit.js';
+export { buildAutoFixPrompt, runAuditWithAutoFix, } from './orchestrator/auto-fix.js';
+export { extractJsonArray } from './orchestrator/extract.js';
+export { buildNanocoderArgs, buildNanocoderEnv, nanocoderRunner, resolveModelId, } from './orchestrator/nanocoder-runner.js';
+export { buildAuditPrompt } from './prompt/build.js';
+export { resolveDependencies } from './rule-packs/dependencies.js';
+export { globToRegExp, matchesAppliesTo, matchesGlob, } from './rule-packs/glob.js';
+export { parseRulePack, splitFrontmatter } from './rule-packs/parse.js';
+export { auditPack } from './run/audit.js';
+export { buildCloneArgs } from './run/clone.js';
+export { previewReconciliation, renderPreview, } from './run/preview.js';
+export { countFindings, renderReport } from './run/report.js';
+export { runFromConfig, runLocal, } from './run/run.js';
+export { isEnabledPackPath, unionPatterns } from './run/select.js';
+export { fsPackLoader, fsRepoFiles } from './run/sources.js';
+export { applyRepoOverride, isSuppressed, matchesSuppression, } from './suppression/apply.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../source/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAC,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AAa5D,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAC,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACN,kBAAkB,EAGlB,kBAAkB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEN,iBAAiB,GACjB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EACN,WAAW,EACX,YAAY,EACZ,UAAU,EACV,sBAAsB,EACtB,UAAU,EACV,YAAY,GACZ,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAC,gBAAgB,EAAC,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAsB,aAAa,EAAC,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAC,QAAQ,EAAC,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAsB,QAAQ,EAAC,MAAM,oBAAoB,CAAC;AACjE,OAAO,EACN,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,oBAAoB,GAGpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAC,cAAc,EAAE,eAAe,EAAC,MAAM,kBAAkB,CAAC;AACjE,OAAO,EACN,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,aAAa,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,GACb,MAAM,uBAAuB,CAAC;AAc/B,OAAO,EAAC,QAAQ,EAAC,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAGN,kBAAkB,EAClB,mBAAmB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAC,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,cAAc,GACd,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EAAC,mBAAmB,EAAC,MAAM,8BAA8B,CAAC;AACjE,OAAO,EACN,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,aAAa,EAAE,gBAAgB,EAAC,MAAM,uBAAuB,CAAC;AAQtE,OAAO,EAAC,SAAS,EAAwB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAC,cAAc,EAA2B,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAEN,qBAAqB,EACrB,aAAa,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,aAAa,EAAE,YAAY,EAAC,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAKN,aAAa,EACb,QAAQ,GACR,MAAM,cAAc,CAAC;AACtB,OAAO,EAAC,iBAAiB,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAC,YAAY,EAAE,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAU3D,OAAO,EACN,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,GAElB,MAAM,wBAAwB,CAAC"}

package/dist/init/args.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Parse the `sentinel init` flags into resolved options. Pure and tested; the
+ * interactive prompting for anything omitted lives in the CLI glue.
+ */
+import { type InitOptions } from './types.js';
+/** The parsed result of `sentinel init` arguments. */
+export interface ParsedInitArgs {
+    options: InitOptions;
+    /** Directory to scaffold into. */
+    dir: string;
+    /** Overwrite existing files. */
+    force: boolean;
+    /** Run non-interactively, accepting defaults for anything not supplied. */
+    yes: boolean;
+    /** Validation problems (e.g. an unknown severity). */
+    errors: string[];
+}
+/** Parse `sentinel init` argv (excluding the `init` command word). */
+export declare function parseInitArgs(argv: string[]): ParsedInitArgs;
+//# sourceMappingURL=args.d.ts.map

package/dist/init/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../source/init/args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAuB,KAAK,WAAW,EAAC,MAAM,YAAY,CAAC;AAElE,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,WAAW,CAAC;IACrB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAC;IACb,sDAAsD;IACtD,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AA+BD,sEAAsE;AACtE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,cAAc,CAiD5D"}

package/dist/init/args.js

@@ -0,0 +1,80 @@
+/**
+ * Parse the `sentinel init` flags into resolved options. Pure and tested; the
+ * interactive prompting for anything omitted lives in the CLI glue.
+ */
+import { isSeverity } from '../findings/types.js';
+import { DEFAULT_INIT_OPTIONS } from './types.js';
+/** Split `--flag value` and `--flag=value` into a key/value map (+ booleans). */
+function tokenize(argv) {
+    const map = new Map();
+    for (let i = 0; i < argv.length; i++) {
+        const token = argv[i];
+        if (!token || !token.startsWith('--')) {
+            continue;
+        }
+        const body = token.slice(2);
+        const eq = body.indexOf('=');
+        if (eq !== -1) {
+            map.set(body.slice(0, eq), body.slice(eq + 1));
+            continue;
+        }
+        const next = argv[i + 1];
+        if (next !== undefined && !next.startsWith('--')) {
+            map.set(body, next);
+            i++;
+        }
+        else {
+            map.set(body, true);
+        }
+    }
+    return map;
+}
+function asString(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+/** Parse `sentinel init` argv (excluding the `init` command word). */
+export function parseInitArgs(argv) {
+    const flags = tokenize(argv);
+    const errors = [];
+    const options = { ...DEFAULT_INIT_OPTIONS };
+    const provider = asString(flags.get('provider'));
+    if (provider) {
+        options.provider = provider;
+    }
+    const model = asString(flags.get('model'));
+    if (model) {
+        options.model = model;
+    }
+    const schedule = asString(flags.get('schedule'));
+    if (schedule) {
+        options.schedule = schedule;
+    }
+    const label = asString(flags.get('label'));
+    if (label) {
+        options.label = label;
+    }
+    const targets = asString(flags.get('targets'));
+    if (targets) {
+        options.targets = targets
+            .split(',')
+            .map(target => target.trim())
+            .filter(target => target.length > 0);
+    }
+    const threshold = asString(flags.get('severity-threshold'));
+    if (threshold !== undefined) {
+        if (isSeverity(threshold)) {
+            options.severityThreshold = threshold;
+        }
+        else {
+            errors.push(`unknown severity-threshold "${threshold}" (use low, medium, high, or critical)`);
+        }
+    }
+    return {
+        options,
+        dir: asString(flags.get('dir')) ?? '.',
+        force: flags.get('force') === true || flags.get('force') === 'true',
+        yes: flags.get('yes') === true || flags.get('yes') === 'true',
+        errors,
+    };
+}
+//# sourceMappingURL=args.js.map

package/dist/init/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../source/init/args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAC,oBAAoB,EAAmB,MAAM,YAAY,CAAC;AAelE,iFAAiF;AACjF,SAAS,QAAQ,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpB,CAAC,EAAE,CAAC;QACL,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,IAAc;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,OAAO,GAAgB,EAAC,GAAG,oBAAoB,EAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,OAAO,GAAG,OAAO;aACvB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC5D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACvC,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CACV,+BAA+B,SAAS,wCAAwC,CAChF,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO;QACN,OAAO;QACP,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG;QACtC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM;QACnE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM;QAC7D,MAAM;KACN,CAAC;AACH,CAAC"}

package/dist/init/plan.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The file plan for a scaffold: sentinel.yaml, the scheduled workflow, the
+ * disabled starter pack (which also creates rule-packs/), and the config
+ * README. Pure — the writer applies it.
+ */
+import type { InitOptions, ScaffoldFile } from './types.js';
+/** The ordered set of files `sentinel init` scaffolds. */
+export declare function planInit(options: InitOptions): ScaffoldFile[];
+//# sourceMappingURL=plan.d.ts.map

package/dist/init/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../source/init/plan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAAC,WAAW,EAAE,YAAY,EAAC,MAAM,YAAY,CAAC;AAE1D,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,YAAY,EAAE,CAQ7D"}

package/dist/init/plan.js

@@ -0,0 +1,17 @@
+/**
+ * The file plan for a scaffold: sentinel.yaml, the scheduled workflow, the
+ * disabled starter pack (which also creates rule-packs/), and the config
+ * README. Pure — the writer applies it.
+ */
+import { configReadme, nanocoderConfig, sentinelYaml, starterPack, workflowYaml, } from './templates.js';
+/** The ordered set of files `sentinel init` scaffolds. */
+export function planInit(options) {
+    return [
+        { path: 'sentinel.yaml', content: sentinelYaml(options) },
+        { path: 'agents.config.json', content: nanocoderConfig() },
+        { path: '.github/workflows/sentinel.yml', content: workflowYaml(options) },
+        { path: 'rule-packs/_starter/example.md', content: starterPack() },
+        { path: 'README.md', content: configReadme(options) },
+    ];
+}
+//# sourceMappingURL=plan.js.map

package/dist/init/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../source/init/plan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACN,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,GACZ,MAAM,gBAAgB,CAAC;AAGxB,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,OAAoB;IAC5C,OAAO;QACN,EAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAC;QACvD,EAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,EAAC;QACxD,EAAC,IAAI,EAAE,gCAAgC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAC;QACxE,EAAC,IAAI,EAAE,gCAAgC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAC;QAChE,EAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAC;KACnD,CAAC;AACH,CAAC"}

package/dist/init/scaffold.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Write the file plan to disk. Refuses to overwrite existing files unless
+ * `force` is set, so re-running init never clobbers a user's edited config.
+ * Tested against a temp directory.
+ */
+import type { InitOptions } from './types.js';
+/** What a scaffold run wrote and what it left alone. */
+export interface ScaffoldResult {
+    written: string[];
+    skipped: string[];
+}
+/**
+ * Scaffold a Sentinel config into `dir`. Existing files are skipped unless
+ * `force` is true.
+ */
+export declare function scaffold(options: InitOptions, dir: string, force?: boolean): ScaffoldResult;
+//# sourceMappingURL=scaffold.d.ts.map

package/dist/init/scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../source/init/scaffold.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,YAAY,CAAC;AAE5C,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACvB,OAAO,EAAE,WAAW,EACpB,GAAG,EAAE,MAAM,EACX,KAAK,UAAQ,GACX,cAAc,CAehB"}

package/dist/init/scaffold.js

@@ -0,0 +1,27 @@
+/**
+ * Write the file plan to disk. Refuses to overwrite existing files unless
+ * `force` is set, so re-running init never clobbers a user's edited config.
+ * Tested against a temp directory.
+ */
+import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { planInit } from './plan.js';
+/**
+ * Scaffold a Sentinel config into `dir`. Existing files are skipped unless
+ * `force` is true.
+ */
+export function scaffold(options, dir, force = false) {
+    const result = { written: [], skipped: [] };
+    for (const file of planInit(options)) {
+        const fullPath = join(dir, file.path);
+        if (existsSync(fullPath) && !force) {
+            result.skipped.push(file.path);
+            continue;
+        }
+        mkdirSync(dirname(fullPath), { recursive: true }); // nosemgrep
+        writeFileSync(fullPath, file.content); // nosemgrep
+        result.written.push(file.path);
+    }
+    return result;
+}
+//# sourceMappingURL=scaffold.js.map

package/dist/init/scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../source/init/scaffold.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAC,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAC,OAAO,EAAE,IAAI,EAAC,MAAM,WAAW,CAAC;AACxC,OAAO,EAAC,QAAQ,EAAC,MAAM,WAAW,CAAC;AASnC;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACvB,OAAoB,EACpB,GAAW,EACX,KAAK,GAAG,KAAK;IAEb,MAAM,MAAM,GAAmB,EAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAC,CAAC;IAE1D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS;QACV,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC,YAAY;QAC7D,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;QACnD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}