@nepopsx/cli 0.0.1

package/dist/generator/render.js

@@ -0,0 +1,229 @@
+import Handlebars from 'handlebars';
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join, basename } from 'node:path';
+import { generateWatermark } from '@nepopsx/core';
+import { applySteganography } from '../licensing/fingerprint.js';
+// ─── Prototype pollution guard ──────────────────────────────
+const BANNED_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+/**
+ * Deep-clone an object while stripping keys that could trigger
+ * Handlebars prototype pollution (e.g., {{constructor.constructor}}).
+ */
+function sanitizeContext(obj) {
+    if (obj === null || obj === undefined)
+        return obj;
+    if (typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj)) {
+        return obj.map(sanitizeContext);
+    }
+    const clean = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (BANNED_KEYS.has(key))
+            continue;
+        clean[key] = sanitizeContext(value);
+    }
+    return clean;
+}
+// ─── Register helpers ───────────────────────────────────────
+Handlebars.registerHelper('eq', (a, b) => a === b);
+Handlebars.registerHelper('neq', (a, b) => a !== b);
+Handlebars.registerHelper('includes', (arr, val) => Array.isArray(arr) && arr.includes(val));
+Handlebars.registerHelper('join', (arr, sep) => Array.isArray(arr) ? arr.join(sep) : '');
+Handlebars.registerHelper('uppercase', (str) => str?.toUpperCase());
+Handlebars.registerHelper('lowercase', (str) => str?.toLowerCase());
+Handlebars.registerHelper('capitalize', (str) => str ? str.charAt(0).toUpperCase() + str.slice(1) : '');
+// Index helper for numbered lists: {{idx @index}} → 1
+Handlebars.registerHelper('idx', (i) => i + 1);
+// Service filtering: {{#servicesByLang services "typescript"}}
+Handlebars.registerHelper('servicesByLang', function (services, lang, options) {
+    const filtered = services.filter((s) => s.language === lang);
+    if (filtered.length === 0)
+        return '';
+    return filtered.map((s) => options.fn(s)).join('');
+});
+// Conditional block if workspace has a specific language
+Handlebars.registerHelper('hasLanguage', function (services, lang, options) {
+    return services.some((s) => s.language === lang) ? options.fn(this) : '';
+});
+// Maturity badge
+Handlebars.registerHelper('maturityBadge', (maturity) => {
+    switch (maturity) {
+        case 'production': return '[Mature]';
+        case 'evolving': return '[Evolving]';
+        case 'prototype': return '[Prototype]';
+        case 'legacy': return '[Legacy]';
+        default: return '';
+    }
+});
+// Safety rules block
+Handlebars.registerHelper('safetyRules', function (config, options) {
+    const safety = config.safety;
+    if (!safety)
+        return '';
+    return options.fn(safety);
+});
+let _customInstructions = [];
+let _philosophyBlock = '';
+/**
+ * Set the philosophy markdown block for the current sync run.
+ */
+export function setPhilosophyBlock(block) {
+    _philosophyBlock = block;
+}
+/**
+ * Set the custom instructions for the current sync run.
+ */
+export function setCustomInstructions(customs) {
+    _customInstructions = customs;
+}
+// Helper: {{philosophyBlock}} — renders the philosophy as markdown
+Handlebars.registerHelper('philosophyBlock', () => _philosophyBlock);
+// Helper: {{customInstructions agentName}} — renders applicable custom instructions
+// Pass "all" or omit to include all instructions. Pass an agent name to filter by applies_to.
+Handlebars.registerHelper('customInstructions', (agentFileNameOrOptions) => {
+    if (_customInstructions.length === 0)
+        return '';
+    // When called as {{customInstructions}} with no args, Handlebars passes options as first arg
+    const agentFileName = typeof agentFileNameOrOptions === 'string' ? agentFileNameOrOptions : 'all';
+    const applicable = _customInstructions.filter((ci) => {
+        if (agentFileName === 'all' || agentFileName === 'worker') {
+            // Include all customs — no filtering by applies_to
+            return true;
+        }
+        // Filter by applies_to (if specified, agent name must match)
+        if (ci.applies_to && ci.applies_to.length > 0) {
+            return ci.applies_to.some((a) => agentFileName.includes(a));
+        }
+        return true;
+    });
+    if (applicable.length === 0)
+        return '';
+    const parts = [
+        '<!-- BEGIN CUSTOM INSTRUCTIONS -->',
+        '',
+    ];
+    for (const ci of applicable) {
+        parts.push(ci.content);
+        parts.push('');
+    }
+    parts.push('<!-- END CUSTOM INSTRUCTIONS -->');
+    return parts.join('\n');
+});
+/**
+ * Register all partials from an agent package's partials/ directory.
+ * .hbs partials are pre-rendered with config context; .md partials are included as-is.
+ */
+export function registerAgentPartials(partialsDir, config, agentMeta) {
+    if (!existsSync(partialsDir))
+        return;
+    for (const file of readdirSync(partialsDir)) {
+        const fullPath = join(partialsDir, file);
+        const raw = readFileSync(fullPath, 'utf-8');
+        // Derive partial name: "constitutional.md" → "constitutional", "worker-context.md.hbs" → "worker-context"
+        let partialName = file;
+        if (partialName.endsWith('.hbs'))
+            partialName = partialName.slice(0, -4); // strip .hbs
+        if (partialName.endsWith('.md'))
+            partialName = partialName.slice(0, -3); // strip .md
+        if (file.endsWith('.hbs')) {
+            // Pre-render the Handlebars partial with config context, then register the output
+            const rendered = renderTemplate(raw, config, agentMeta);
+            Handlebars.registerPartial(partialName, rendered);
+        }
+        else {
+            // Plain markdown — register as-is
+            Handlebars.registerPartial(partialName, raw);
+        }
+    }
+}
+/**
+ * Unregister all partials (call between agent packages to avoid cross-contamination).
+ */
+export function clearPartials(partialsDir) {
+    if (!existsSync(partialsDir))
+        return;
+    for (const file of readdirSync(partialsDir)) {
+        let partialName = file;
+        if (partialName.endsWith('.hbs'))
+            partialName = partialName.slice(0, -4);
+        if (partialName.endsWith('.md'))
+            partialName = partialName.slice(0, -3);
+        Handlebars.unregisterPartial(partialName);
+    }
+}
+/**
+ * Register partials from a remote template map keyed by relative file path.
+ * Returns the partial names so they can be unregistered after rendering.
+ */
+export function registerAgentPartialsFromMap(templateMap, config, agentMeta) {
+    const partialNames = [];
+    for (const [relativePath, raw] of Object.entries(templateMap)) {
+        if (!relativePath.startsWith('partials/'))
+            continue;
+        let partialName = basename(relativePath);
+        if (partialName.endsWith('.hbs'))
+            partialName = partialName.slice(0, -4);
+        if (partialName.endsWith('.md'))
+            partialName = partialName.slice(0, -3);
+        if (relativePath.endsWith('.hbs')) {
+            Handlebars.registerPartial(partialName, renderTemplate(raw, config, agentMeta));
+        }
+        else {
+            Handlebars.registerPartial(partialName, raw);
+        }
+        partialNames.push(partialName);
+    }
+    return partialNames;
+}
+export function clearPartialNames(partialNames) {
+    for (const partialName of partialNames) {
+        Handlebars.unregisterPartial(partialName);
+    }
+}
+/**
+ * Render a Handlebars template string with workspace config context.
+ * Context is sanitized to prevent prototype pollution attacks.
+ */
+export function renderTemplate(templateSource, config, agentMeta) {
+    const context = {
+        config,
+        agent: agentMeta,
+        timestamp: new Date().toISOString().split('T')[0],
+    };
+    const safeContext = sanitizeContext(context);
+    const template = Handlebars.compile(templateSource, { noEscape: true });
+    return template(safeContext);
+}
+/**
+ * Render a template file.
+ */
+export function renderTemplateFile(templatePath, config, agentMeta) {
+    const source = readFileSync(templatePath, 'utf-8');
+    return renderTemplate(source, config, agentMeta);
+}
+// ─── Watermark + fingerprint post-processing ────────────────
+let _watermarkData = null;
+/**
+ * Set watermark data for the current sync run.
+ * When set, every rendered file gets a watermark header + steganographic fingerprint.
+ * Pass null to disable (e.g., dev mode / free tier).
+ */
+export function setWatermarkData(data) {
+    _watermarkData = data;
+}
+/**
+ * Apply watermark header + steganographic fingerprint to rendered content.
+ * Should be called AFTER Handlebars rendering, on the final output.
+ */
+export function applyLicenseWatermark(content) {
+    if (!_watermarkData)
+        return content;
+    // 1. Prepend visible watermark as first line
+    const watermarkLine = generateWatermark(_watermarkData);
+    let result = watermarkLine + '\n' + content;
+    // 2. Apply steganographic fingerprint
+    result = applySteganography(result, _watermarkData.fingerprint);
+    return result;
+}
+//# sourceMappingURL=render.js.map

package/dist/generator/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../src/generator/render.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAW,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,+DAA+D;AAE/D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvE;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,KAAK,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAE/D,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,UAAU,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,GAAc,EAAE,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACjH,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAc,EAAE,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5G,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;AAC5E,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;AAC5E,UAAU,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEhH,sDAAsD;AACtD,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAEvD,+DAA+D;AAC/D,UAAU,CAAC,cAAc,CAAC,gBAAgB,EAAE,UAAyB,QAAmB,EAAE,IAAY,EAAE,OAAiC;IACvI,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,yDAAyD;AACzD,UAAU,CAAC,cAAc,CAAC,aAAa,EAAE,UAAyB,QAAmB,EAAE,IAAY,EAAE,OAAiC;IACpI,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,iBAAiB;AACjB,UAAU,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC,QAAgB,EAAE,EAAE;IAC9D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY,CAAC,CAAC,OAAO,UAAU,CAAC;QACrC,KAAK,UAAU,CAAC,CAAC,OAAO,YAAY,CAAC;QACrC,KAAK,WAAW,CAAC,CAAC,OAAO,aAAa,CAAC;QACvC,KAAK,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC;QACjC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,qBAAqB;AACrB,UAAU,CAAC,cAAc,CAAC,aAAa,EAAE,UAAyB,MAAuB,EAAE,OAAiC;IAC1H,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAcH,IAAI,mBAAmB,GAAwB,EAAE,CAAC;AAClD,IAAI,gBAAgB,GAAW,EAAE,CAAC;AAElC;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,gBAAgB,GAAG,KAAK,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA4B;IAChE,mBAAmB,GAAG,OAAO,CAAC;AAChC,CAAC;AAED,mEAAmE;AACnE,UAAU,CAAC,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAErE,oFAAoF;AACpF,8FAA8F;AAC9F,UAAU,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC,sBAAyD,EAAE,EAAE;IAC5G,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhD,6FAA6F;IAC7F,MAAM,aAAa,GAAG,OAAO,sBAAsB,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC;IAElG,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACnD,IAAI,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC1D,mDAAmD;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,6DAA6D;QAC7D,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAG;QACZ,oCAAoC;QACpC,EAAE;KACH,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAaH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,MAAuB,EAAE,SAA6C;IAC/H,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO;IAErC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE5C,0GAA0G;QAC1G,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACvF,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;QAErF,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,kFAAkF;YAClF,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACxD,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,kCAAkC;YAClC,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO;IACrC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAmC,EACnC,MAAuB,EACvB,SAA6C;IAE7C,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QAEpD,IAAI,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAExE,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAAsB;IACtD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,cAAsB,EAAE,MAAuB,EAAE,SAA6C;IAC3H,MAAM,OAAO,GAAkB;QAC7B,MAAM;QACN,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAClD,CAAC;IAEF,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAkB,CAAC;IAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,MAAuB,EAAE,SAA6C;IAC7H,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,+DAA+D;AAE/D,IAAI,cAAc,GAAyB,IAAI,CAAC;AAEhD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAEpC,6CAA6C;IAC7C,MAAM,aAAa,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,MAAM,GAAG,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC;IAE5C,sCAAsC;IACtC,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;IAEhE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/generator/writer.d.ts

@@ -0,0 +1,19 @@
+export interface WriteOperation {
+    path: string;
+    content: string;
+    source: string;
+}
+export interface WriteResult {
+    created: string[];
+    updated: string[];
+    unchanged: string[];
+}
+/**
+ * Write generated files to disk. Diff-aware: only writes if content changed.
+ */
+export declare function writeGeneratedFiles(rootDir: string, operations: WriteOperation[], dryRun: boolean): WriteResult;
+/**
+ * Print write results to console.
+ */
+export declare function printWriteResult(result: WriteResult, dryRun: boolean): void;
+//# sourceMappingURL=writer.d.ts.map

package/dist/generator/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../src/generator/writer.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,GAAG,WAAW,CA2B/G;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAuB3E"}

package/dist/generator/writer.js

@@ -0,0 +1,59 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import chalk from 'chalk';
+/**
+ * Write generated files to disk. Diff-aware: only writes if content changed.
+ */
+export function writeGeneratedFiles(rootDir, operations, dryRun) {
+    const result = { created: [], updated: [], unchanged: [] };
+    for (const op of operations) {
+        const fullPath = join(rootDir, op.path);
+        const dir = dirname(fullPath);
+        if (existsSync(fullPath)) {
+            const existing = readFileSync(fullPath, 'utf-8');
+            if (existing === op.content) {
+                result.unchanged.push(op.path);
+                continue;
+            }
+            if (!dryRun) {
+                writeFileSync(fullPath, op.content, 'utf-8');
+            }
+            result.updated.push(op.path);
+        }
+        else {
+            if (!dryRun) {
+                mkdirSync(dir, { recursive: true });
+                writeFileSync(fullPath, op.content, 'utf-8');
+            }
+            result.created.push(op.path);
+        }
+    }
+    return result;
+}
+/**
+ * Print write results to console.
+ */
+export function printWriteResult(result, dryRun) {
+    const prefix = dryRun ? chalk.dim('[dry-run] ') : '';
+    if (result.created.length > 0) {
+        console.log(`\n${prefix}${chalk.green('Created:')}`);
+        for (const f of result.created)
+            console.log(`  ${chalk.green('+')} ${f}`);
+    }
+    if (result.updated.length > 0) {
+        console.log(`\n${prefix}${chalk.yellow('Updated:')}`);
+        for (const f of result.updated)
+            console.log(`  ${chalk.yellow('~')} ${f}`);
+    }
+    if (result.unchanged.length > 0) {
+        console.log(`\n${prefix}${chalk.dim(`Unchanged: ${result.unchanged.length} file(s)`)}`);
+    }
+    const total = result.created.length + result.updated.length;
+    if (total === 0) {
+        console.log(chalk.dim('\nNo changes needed.'));
+    }
+    else {
+        console.log(`\n${prefix}${chalk.bold(`${total} file(s) ${dryRun ? 'would be' : ''} written.`)}`);
+    }
+}
+//# sourceMappingURL=writer.js.map

package/dist/generator/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../src/generator/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAc1B;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAA4B,EAAE,MAAe;IAChG,MAAM,MAAM,GAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAExE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE9B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAmB,EAAE,MAAe;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,61 @@
+import { Command } from 'commander';
+import { initCommand } from './commands/init.js';
+import { syncCommand } from './commands/sync.js';
+import { doctorCommand } from './commands/doctor.js';
+import { installCommand } from './commands/install.js';
+import { activateCommand } from './commands/activate.js';
+import { decodeCommand } from './commands/decode.js';
+import { serverClearCommand, serverSetCommand, serverShowCommand, } from './commands/server.js';
+const program = new Command();
+program
+    .name('opsx')
+    .description('OPSX — AI Agent Platform for Engineering Teams')
+    .version('0.0.1');
+program
+    .command('init')
+    .description('Initialize a new OPSX workspace (interactive setup)')
+    .option('--non-interactive', 'Skip prompts, use defaults + auto-detect')
+    .action(initCommand);
+program
+    .command('sync')
+    .description('Generate .github/ files from workspace config + installed agents')
+    .option('-c, --config <path>', 'Path to workspace.yaml', '.opsx/workspace.yaml')
+    .option('--dry-run', 'Preview changes without writing files')
+    .option('--dev', 'Dev mode — bypass license checks (for OPSX agent developers)')
+    .action(syncCommand);
+program
+    .command('install <agent>')
+    .description('Install an agent package (e.g., feature-factory, qa-commander)')
+    .option('--version <ver>', 'Specific version to install')
+    .action(installCommand);
+program
+    .command('doctor')
+    .description('Validate workspace.yaml and check workspace health')
+    .option('-c, --config <path>', 'Path to workspace.yaml', '.opsx/workspace.yaml')
+    .action(doctorCommand);
+program
+    .command('activate <key>')
+    .description('Activate an OPSX license key for this machine')
+    .option('-c, --config <path>', 'Path to workspace.yaml', '.opsx/workspace.yaml')
+    .action(activateCommand);
+program
+    .command('decode <file>')
+    .description('Forensic decode — extract fingerprint from a generated file')
+    .action(decodeCommand);
+const serverProgram = program
+    .command('server')
+    .description('Manage the OPSX backend server URL for this workspace');
+serverProgram
+    .command('show')
+    .description('Show the effective OPSX backend server URL')
+    .action(serverShowCommand);
+serverProgram
+    .command('set <url>')
+    .description('Persist an OPSX backend server URL in .opsx/config.json')
+    .action(serverSetCommand);
+serverProgram
+    .command('clear')
+    .description('Remove the persisted OPSX backend server URL override')
+    .action(serverClearCommand);
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,gDAAgD,CAAC;KAC7D,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,qDAAqD,CAAC;KAClE,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;KACvE,MAAM,CAAC,WAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kEAAkE,CAAC;KAC/E,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;KAC/E,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;KAC5D,MAAM,CAAC,OAAO,EAAE,8DAA8D,CAAC;KAC/E,MAAM,CAAC,WAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,gEAAgE,CAAC;KAC7E,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;KACxD,MAAM,CAAC,cAAc,CAAC,CAAC;AAE1B,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;KAC/E,MAAM,CAAC,aAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;KAC/E,MAAM,CAAC,eAAe,CAAC,CAAC;AAE3B,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,aAAa,CAAC,CAAC;AAEzB,MAAM,aAAa,GAAG,OAAO;KAC1B,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,uDAAuD,CAAC,CAAC;AAExE,aAAa;KACV,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAE7B,aAAa;KACV,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAE5B,aAAa;KACV,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAE9B,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/licensing/fingerprint.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Fingerprinting — embeds traceable customer identity into generated files.
+ *
+ * Two levels:
+ *   A) Visible watermark (<!-- OPSX ... FP: abc123 -->) — handled by render.ts
+ *   B) Steganographic fingerprint — invisible encoding in prose choices
+ *
+ * Steganographic encoding:
+ *   - Encodes a customer ID (up to 32 bits) into binary
+ *   - Each bit is encoded as a word/phrase variant in the template
+ *   - Variants are semantically equivalent (same meaning)
+ *   - Even if the visible watermark is stripped, the stego fingerprint survives
+ */
+export interface StegoVariant {
+    /** Position index in the output where this variant applies */
+    id: string;
+    /** Variant for bit = 0 */
+    zero: string;
+    /** Variant for bit = 1 */
+    one: string;
+}
+/**
+ * Derive a numeric customer ID (24 bits) from the fingerprint hash.
+ */
+export declare function fingerprintToId(fingerprint: string): number;
+/**
+ * Apply steganographic fingerprint to a rendered template.
+ * Replaces the "zero" variants with "one" variants based on the customer's bits.
+ *
+ * Templates should be written using the "zero" variant of each phrase.
+ * This function selectively replaces some with the "one" variant based on fingerprint.
+ */
+export declare function applySteganography(content: string, fingerprint: string): string;
+/**
+ * Decode a steganographic fingerprint from a rendered file.
+ * Returns the extracted customer ID, or null if decoding fails.
+ */
+export declare function decodeSteganography(content: string): number | null;
+/**
+ * Full forensic decode: extract both visible and steganographic fingerprints.
+ */
+export declare function forensicDecode(content: string): {
+    visible_fp: string | null;
+    stego_id: number | null;
+    stego_fp_hex: string | null;
+    confidence: number;
+};
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/licensing/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/licensing/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,YAAY;IAC3B,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAmCD;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG3D;AAaD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAmB/E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBlE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG;IAC/C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB,CA2BA"}

package/dist/licensing/fingerprint.js

@@ -0,0 +1,163 @@
+/**
+ * Fingerprinting — embeds traceable customer identity into generated files.
+ *
+ * Two levels:
+ *   A) Visible watermark (<!-- OPSX ... FP: abc123 -->) — handled by render.ts
+ *   B) Steganographic fingerprint — invisible encoding in prose choices
+ *
+ * Steganographic encoding:
+ *   - Encodes a customer ID (up to 32 bits) into binary
+ *   - Each bit is encoded as a word/phrase variant in the template
+ *   - Variants are semantically equivalent (same meaning)
+ *   - Even if the visible watermark is stripped, the stego fingerprint survives
+ */
+// ─── Variant table ──────────────────────────────────────────
+// Each pair of phrases is semantically identical but encodes 1 bit.
+// We use 24 variants = 24 bits = 16M unique customers.
+const VARIANTS = [
+    { id: 'v01', zero: 'Before starting work', one: 'Prior to beginning work' },
+    { id: 'v02', zero: 'Make sure to', one: 'Ensure that you' },
+    { id: 'v03', zero: 'You must', one: 'You are required to' },
+    { id: 'v04', zero: 'when finished', one: 'upon completion' },
+    { id: 'v05', zero: 'check the', one: 'verify the' },
+    { id: 'v06', zero: 'Run the', one: 'Execute the' },
+    { id: 'v07', zero: 'do not', one: 'never' },
+    { id: 'v08', zero: 'immediately after', one: 'right after' },
+    { id: 'v09', zero: 'If an error occurs', one: 'In case of failure' },
+    { id: 'v10', zero: 'the following steps', one: 'these steps' },
+    { id: 'v11', zero: 'proceed with', one: 'continue with' },
+    { id: 'v12', zero: 'Review the output', one: 'Inspect the output' },
+    { id: 'v13', zero: 'as described below', one: 'as outlined below' },
+    { id: 'v14', zero: 'report back', one: 'provide feedback' },
+    { id: 'v15', zero: 'Begin by', one: 'Start by' },
+    { id: 'v16', zero: 'complete the task', one: 'finish the task' },
+    { id: 'v17', zero: 'all required', one: 'every required' },
+    { id: 'v18', zero: 'confirm that', one: 'validate that' },
+    { id: 'v19', zero: 'at this point', one: 'at this stage' },
+    { id: 'v20', zero: 'look for', one: 'search for' },
+    { id: 'v21', zero: 'important to note', one: 'worth noting' },
+    { id: 'v22', zero: 'as a result', one: 'consequently' },
+    { id: 'v23', zero: 'based on', one: 'according to' },
+    { id: 'v24', zero: 'in addition', one: 'additionally' },
+];
+// ─── Encoding ───────────────────────────────────────────────
+/**
+ * Derive a numeric customer ID (24 bits) from the fingerprint hash.
+ */
+export function fingerprintToId(fingerprint) {
+    // Use the first 6 hex chars (24 bits) of the fingerprint
+    return parseInt(fingerprint.substring(0, 6), 16) & 0xFFFFFF;
+}
+/**
+ * Convert a customer ID to a 24-bit binary array.
+ */
+function idToBits(id) {
+    const bits = [];
+    for (let i = 23; i >= 0; i--) {
+        bits.push(((id >> i) & 1) === 1);
+    }
+    return bits;
+}
+/**
+ * Apply steganographic fingerprint to a rendered template.
+ * Replaces the "zero" variants with "one" variants based on the customer's bits.
+ *
+ * Templates should be written using the "zero" variant of each phrase.
+ * This function selectively replaces some with the "one" variant based on fingerprint.
+ */
+export function applySteganography(content, fingerprint) {
+    const customerId = fingerprintToId(fingerprint);
+    const bits = idToBits(customerId);
+    let result = content;
+    for (let i = 0; i < VARIANTS.length; i++) {
+        const variant = VARIANTS[i];
+        if (bits[i]) {
+            // Bit is 1 → replace zero variant with one variant
+            // Use case-insensitive match for first occurrence only
+            const zeroRegex = new RegExp(escapeRegex(variant.zero), 'i');
+            if (zeroRegex.test(result)) {
+                result = result.replace(zeroRegex, matchCase(variant.zero, variant.one, result));
+            }
+        }
+        // Bit is 0 → leave the zero variant as-is (already in template)
+    }
+    return result;
+}
+/**
+ * Decode a steganographic fingerprint from a rendered file.
+ * Returns the extracted customer ID, or null if decoding fails.
+ */
+export function decodeSteganography(content) {
+    let bitsFound = 0;
+    let id = 0;
+    const lowerContent = content.toLowerCase();
+    for (let i = 0; i < VARIANTS.length; i++) {
+        const variant = VARIANTS[i];
+        const hasZero = lowerContent.includes(variant.zero.toLowerCase());
+        const hasOne = lowerContent.includes(variant.one.toLowerCase());
+        if (hasOne && !hasZero) {
+            // Bit is 1
+            id |= (1 << (23 - i));
+            bitsFound++;
+        }
+        else if (hasZero && !hasOne) {
+            // Bit is 0
+            bitsFound++;
+        }
+        // If neither or both found, bit is ambiguous — skip
+    }
+    // Need at least 12 clear bits to have a meaningful decode
+    if (bitsFound < 12)
+        return null;
+    return id;
+}
+/**
+ * Full forensic decode: extract both visible and steganographic fingerprints.
+ */
+export function forensicDecode(content) {
+    // Visible fingerprint from watermark
+    const watermarkRegex = /FP: ([a-f0-9]+)/;
+    const watermarkMatch = content.match(watermarkRegex);
+    const visible_fp = watermarkMatch ? watermarkMatch[1] : null;
+    // Steganographic fingerprint
+    const stego_id = decodeSteganography(content);
+    const stego_fp_hex = stego_id !== null
+        ? stego_id.toString(16).padStart(6, '0')
+        : null;
+    // Confidence: count how many bits we could decode
+    let decodable = 0;
+    const lowerContent = content.toLowerCase();
+    for (const variant of VARIANTS) {
+        const hasZero = lowerContent.includes(variant.zero.toLowerCase());
+        const hasOne = lowerContent.includes(variant.one.toLowerCase());
+        if ((hasOne && !hasZero) || (hasZero && !hasOne))
+            decodable++;
+    }
+    return {
+        visible_fp,
+        stego_id,
+        stego_fp_hex,
+        confidence: decodable / VARIANTS.length,
+    };
+}
+// ─── Utilities ──────────────────────────────────────────────
+function escapeRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Match the case pattern of the source phrase in the actual content,
+ * and apply it to the replacement phrase.
+ */
+function matchCase(source, replacement, content) {
+    // Find the actual match in content to preserve casing
+    const match = content.match(new RegExp(escapeRegex(source), 'i'));
+    if (!match)
+        return replacement;
+    const actual = match[0];
+    // If source starts with uppercase in content, capitalize replacement
+    if (actual[0] === actual[0].toUpperCase()) {
+        return replacement.charAt(0).toUpperCase() + replacement.slice(1);
+    }
+    return replacement;
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/licensing/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/licensing/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,+DAA+D;AAC/D,oEAAoE;AACpE,uDAAuD;AAEvD,MAAM,QAAQ,GAAmB;IAC/B,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,yBAAyB,EAAE;IAC3E,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,EAAE;IAC3D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC3D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE;IAC5D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE;IACnD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE;IAClD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IAC3C,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,aAAa,EAAE;IAC5D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,oBAAoB,EAAE;IACpE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,aAAa,EAAE;IAC9D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE;IACzD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,oBAAoB,EAAE;IACnE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,mBAAmB,EAAE;IACnE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,kBAAkB,EAAE;IAC3D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IAChD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE;IAChE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE;IAC1D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE;IACzD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE;IAC1D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;IAClD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,EAAE;IAC7D,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,EAAE;IACvD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE;IACpD,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,EAAE;CACxD,CAAC;AAEF,+DAA+D;AAE/D;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,yDAAyD;IACzD,OAAO,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,EAAU;IAC1B,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,WAAmB;IACrE,MAAM,UAAU,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACZ,mDAAmD;YACnD,uDAAuD;YACvD,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7D,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,gEAAgE;IAClE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAEhE,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,WAAW;YACX,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACtB,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,WAAW;YACX,SAAS,EAAE,CAAC;QACd,CAAC;QACD,oDAAoD;IACtD,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAAS,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAM5C,qCAAqC;IACrC,MAAM,cAAc,GAAG,iBAAiB,CAAC;IACzC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI;QACpC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,kDAAkD;IAClD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,OAAO;QACL,UAAU;QACV,QAAQ;QACR,YAAY;QACZ,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM;KACxC,CAAC;AACJ,CAAC;AAED,+DAA+D;AAE/D,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,WAAmB,EAAE,OAAe;IACrE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAE/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,qEAAqE;IACrE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/licensing/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Licensing barrel — re-export all licensing modules.
+ */
+export { readLicense, writeLicense, activateLicense, validateLicense, enforceTierLimits, isDevMode, type ActivationResult, type TierViolation, } from './license-manager.js';
+export { fetchRemoteTemplates, type TemplateBundle, } from './template-fetch.js';
+export { applySteganography, decodeSteganography, forensicDecode, fingerprintToId, } from './fingerprint.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/licensing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/licensing/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,GAChB,MAAM,kBAAkB,CAAC"}