@opencodehub/cli 0.1.0

package/dist/commands/verdict-render.js

@@ -0,0 +1,123 @@
+/**
+ * Pure render helpers for `codehub verdict`.
+ *
+ * The CLI supports three output formats:
+ *   - `summary`   — chalk-free ANSI pretty-print for human eyes in a TTY.
+ *                   Honors `NO_COLOR` and falls back to plain text when
+ *                   stdout is not a TTY (piped or redirected).
+ *   - `markdown`  — the PR-comment markdown string already synthesized by
+ *                   the analysis module. Safe to pipe directly into
+ *                   `gh pr comment`.
+ *   - `json`      — pretty-printed JSON document of the entire response.
+ *
+ * Renderers are pure: they take a {@link VerdictResponse} and return a
+ * string. Side-effect output (stdout, exit code) is the caller's concern.
+ *
+ * The CLI also defines its own exit-code ladder (0/1/2/3) for the
+ * `--exit-code` flag. That ladder is stricter than
+ * `VerdictResponse.exitCode` (which maxes out at 2 per the analysis
+ * module's original PRD contract) so CI pipes get distinct signals for
+ * `single_review` vs `dual_review` vs `block`.
+ */
+/** CLI exit-code ladder distinct from `VerdictResponse.exitCode`. */
+const CLI_TIER_EXIT_CODES = {
+    auto_merge: 0,
+    single_review: 1,
+    dual_review: 1,
+    expert_review: 2,
+    block: 3,
+};
+export function cliExitCodeForTier(tier) {
+    return CLI_TIER_EXIT_CODES[tier];
+}
+export function renderJson(verdict) {
+    return JSON.stringify(verdict, null, 2);
+}
+export function renderMarkdown(verdict) {
+    if (verdict.reviewCommentMarkdown.length > 0) {
+        return verdict.reviewCommentMarkdown;
+    }
+    // Defensive fallback — should not normally trigger because
+    // computeVerdict always populates reviewCommentMarkdown.
+    return [
+        `## OpenCodeHub Verdict: \`${verdict.verdict}\``,
+        "",
+        `**Confidence:** ${(verdict.confidence * 100).toFixed(0)}% | **Exit code:** ${verdict.exitCode}`,
+        `**Blast radius:** ${verdict.blastRadius} across ${verdict.communitiesTouched.length} communities`,
+    ].join("\n");
+}
+/** ANSI SGR codes. */
+const RESET = "\x1b[0m";
+const BOLD = "\x1b[1m";
+const DIM = "\x1b[2m";
+const RED = "\x1b[31m";
+const GREEN = "\x1b[32m";
+const YELLOW = "\x1b[33m";
+const CYAN = "\x1b[36m";
+const TIER_COLORS = {
+    auto_merge: GREEN,
+    single_review: CYAN,
+    dual_review: YELLOW,
+    expert_review: RED,
+    block: RED,
+};
+function paintFactory(env) {
+    if (env.noColor || !env.isTty) {
+        return (_color, text) => text;
+    }
+    return (color, text) => `${color}${text}${RESET}`;
+}
+export function renderSummary(verdict, opts = {}) {
+    const env = {
+        isTty: opts.isTty ?? process.stdout.isTTY === true,
+        noColor: opts.noColor ??
+            (typeof process.env["NO_COLOR"] === "string" && process.env["NO_COLOR"].length > 0),
+    };
+    const paint = paintFactory(env);
+    const tierColor = TIER_COLORS[verdict.verdict];
+    const out = [];
+    const confidencePct = (verdict.confidence * 100).toFixed(0);
+    out.push(`${paint(BOLD, "Verdict:")} ${paint(tierColor + BOLD, verdict.verdict)} ` +
+        `${paint(DIM, `(confidence ${confidencePct}%)`)}`);
+    out.push(`${paint(BOLD, "Blast radius:")} ${verdict.blastRadius} symbols across ` +
+        `${verdict.communitiesTouched.length} communities`);
+    out.push(`${paint(BOLD, "Files changed:")} ${verdict.changedFileCount} | ` +
+        `${paint(BOLD, "Symbols affected:")} ${verdict.affectedSymbolCount}`);
+    const boundary = verdict.decisionBoundary;
+    if (boundary.nextTier !== null) {
+        out.push(`${paint(BOLD, "Boundary:")} ${boundary.distancePercent}% away from ` +
+            `${paint(TIER_COLORS[boundary.nextTier], boundary.nextTier)}`);
+    }
+    else {
+        out.push(`${paint(BOLD, "Boundary:")} terminal tier (no escalation above)`);
+    }
+    out.push("");
+    out.push(paint(BOLD, "Reasoning:"));
+    if (verdict.reasoningChain.length === 0) {
+        out.push("  (no signals)");
+    }
+    else {
+        for (const sig of verdict.reasoningChain) {
+            const sevPaint = sig.severity === "error" ? RED : sig.severity === "warn" ? YELLOW : DIM;
+            const marker = sig.severity === "error" ? "[!!]" : sig.severity === "warn" ? "(!)" : "(i)";
+            out.push(`  ${paint(sevPaint, marker)} ${sig.label}: ${String(sig.value)}`);
+        }
+    }
+    out.push("");
+    out.push(paint(BOLD, "Suggested reviewers:"));
+    if (verdict.recommendedReviewers.length === 0) {
+        out.push("  (none)");
+    }
+    else {
+        for (const rev of verdict.recommendedReviewers) {
+            const label = rev.name.length > 0 ? `${rev.name} <${rev.email}>` : rev.email;
+            out.push(`  - ${label} ${paint(DIM, `(${rev.weight.toFixed(2)})`)}`);
+        }
+    }
+    if (verdict.githubLabels.length > 0) {
+        out.push("");
+        out.push(`${paint(BOLD, "Labels:")} ${verdict.githubLabels.join(", ")}`);
+    }
+    return out.join("\n");
+}
+//# sourceMappingURL=verdict-render.js.map

package/dist/commands/verdict-render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-render.js","sourceRoot":"","sources":["../../src/commands/verdict-render.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,qEAAqE;AACrE,MAAM,mBAAmB,GAAuC;IAC9D,UAAU,EAAE,CAAC;IACb,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,aAAa,EAAE,CAAC;IAChB,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAiB;IAClD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAwB;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,IAAI,OAAO,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,qBAAqB,CAAC;IACvC,CAAC;IACD,2DAA2D;IAC3D,yDAAyD;IACzD,OAAO;QACL,6BAA6B,OAAO,CAAC,OAAO,IAAI;QAChD,EAAE;QACF,mBAAmB,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,OAAO,CAAC,QAAQ,EAAE;QAChG,qBAAqB,OAAO,CAAC,WAAW,WAAW,OAAO,CAAC,kBAAkB,CAAC,MAAM,cAAc;KACnG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAOD,sBAAsB;AACtB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,IAAI,GAAG,UAAU,CAAC;AAExB,MAAM,WAAW,GAAgC;IAC/C,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,IAAI;IACnB,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,GAAG;IAClB,KAAK,EAAE,GAAG;CACX,CAAC;AAEF,SAAS,YAAY,CAAC,GAAe;IACnC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AACpD,CAAC;AASD,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,OAA6B,EAAE;IACrF,MAAM,GAAG,GAAe;QACtB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QAClD,OAAO,EACL,IAAI,CAAC,OAAO;YACZ,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;KACtF,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG;QACvE,GAAG,KAAK,CAAC,GAAG,EAAE,eAAe,aAAa,IAAI,CAAC,EAAE,CACpD,CAAC;IACF,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,WAAW,kBAAkB;QACtE,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,cAAc,CACrD,CAAC;IACF,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,OAAO,CAAC,gBAAgB,KAAK;QAC/D,GAAG,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,IAAI,OAAO,CAAC,mBAAmB,EAAE,CACvE,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,eAAe,cAAc;YACnE,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,sCAAsC,CAAC,CAAC;IAC9E,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YACzF,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/commands/verdict.d.ts

@@ -0,0 +1,61 @@
+/**
+ * `codehub verdict` — 5-tier PR verdict CLI.
+ */
+import { type VerdictConfig, type VerdictQuery, type VerdictResponse, type VerdictTier } from "@opencodehub/analysis";
+import { type Policy, PolicyValidationError } from "@opencodehub/policy";
+import type { IGraphStore, Store } from "@opencodehub/storage";
+export type VerdictOutputFormat = "markdown" | "json" | "summary";
+/**
+ * Policy tier mapping: VerdictTier -> numeric blast-radius tier used by
+ * policy.blast_radius_max rules. `max_tier: 2` therefore means "block
+ * any diff whose verdict is dual_review or higher".
+ *
+ * Kept inline + exported so tests and downstream callers can assert on it.
+ */
+export declare const POLICY_TIER_FOR_VERDICT: Record<VerdictTier, number>;
+export interface VerdictCliOptions {
+    readonly base?: string;
+    readonly head?: string;
+    readonly repo?: string;
+    readonly home?: string;
+    readonly outputFormat?: VerdictOutputFormat;
+    readonly prComment?: boolean;
+    readonly exitCode?: boolean;
+    readonly json?: boolean;
+    readonly configOverrides?: Partial<VerdictConfig>;
+    /**
+     * Test seam — inject a custom store factory. Production callers leave
+     * this unset; the runtime calls {@link openStoreForCommand}. Either an
+     * `IGraphStore`-shaped fake (legacy tests) or the composed `Store`
+     * envelope is acceptable; the runVerdict body normalises both into an
+     * `IGraphStore` for the analysis call.
+     */
+    readonly storeFactory?: () => Promise<{
+        store: IGraphStore | Store;
+        repoPath: string;
+    }>;
+    readonly computeVerdictFn?: (store: IGraphStore, query: VerdictQuery) => Promise<VerdictResponse>;
+    /**
+     * Test hook: override the policy loader. Defaults to loadPolicy against
+     * `<repoPath>/opencodehub.policy.yaml`.
+     */
+    readonly loadPolicyFn?: (filePath: string) => Promise<Policy | undefined>;
+    /**
+     * Test hook: override the approvals list (e.g. coming from the PR's
+     * review state). v1 does not fetch approvals from anywhere — CI callers
+     * that want ownership_required rules to pass must inject them.
+     */
+    readonly approvals?: readonly string[];
+}
+export interface ResolvedVerdictMode {
+    readonly format: VerdictOutputFormat;
+    readonly exitCode: boolean;
+}
+/**
+ * Resolve raw CLI flags to effective mode. `--pr-comment` implies markdown +
+ * exit-code. `--json` is a backward-compat alias for `--output-format json`.
+ */
+export declare function resolveVerdictMode(opts: VerdictCliOptions): ResolvedVerdictMode;
+export declare function runVerdict(opts?: VerdictCliOptions): Promise<void>;
+export { PolicyValidationError };
+//# sourceMappingURL=verdict.d.ts.map

package/dist/commands/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../src/commands/verdict.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,MAAM,EAGX,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAI/D,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAM9D,CAAC;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,GAAG,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAClG;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CAY/E;AAED,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqD5E;AA2DD,OAAO,EAAE,qBAAqB,EAAE,CAAC"}

package/dist/commands/verdict.js

@@ -0,0 +1,146 @@
+/**
+ * `codehub verdict` — 5-tier PR verdict CLI.
+ */
+import { join } from "node:path";
+import { computeVerdict, } from "@opencodehub/analysis";
+import { evaluatePolicy, loadPolicy, PolicyValidationError, } from "@opencodehub/policy";
+import { openStoreForCommand } from "./open-store.js";
+import { cliExitCodeForTier, renderJson, renderMarkdown, renderSummary } from "./verdict-render.js";
+/**
+ * Policy tier mapping: VerdictTier -> numeric blast-radius tier used by
+ * policy.blast_radius_max rules. `max_tier: 2` therefore means "block
+ * any diff whose verdict is dual_review or higher".
+ *
+ * Kept inline + exported so tests and downstream callers can assert on it.
+ */
+export const POLICY_TIER_FOR_VERDICT = Object.freeze({
+    auto_merge: 1,
+    single_review: 2,
+    dual_review: 3,
+    expert_review: 4,
+    block: 5,
+});
+/**
+ * Resolve raw CLI flags to effective mode. `--pr-comment` implies markdown +
+ * exit-code. `--json` is a backward-compat alias for `--output-format json`.
+ */
+export function resolveVerdictMode(opts) {
+    if (opts.prComment === true) {
+        return { format: "markdown", exitCode: true };
+    }
+    const explicit = opts.outputFormat;
+    const format = explicit ?? (opts.json === true ? "json" : "summary");
+    // Default exit-code policy: on for summary (interactive + CI ergonomic),
+    // off for json and explicit markdown (backward compat for scripts that
+    // parse the output and manage their own exit).
+    const defaultExit = format === "summary";
+    const exitCode = opts.exitCode === true ? true : opts.exitCode === false ? false : defaultExit;
+    return { format, exitCode };
+}
+export async function runVerdict(opts = {}) {
+    const mode = resolveVerdictMode(opts);
+    const factory = opts.storeFactory ?? (() => openStoreForCommand(opts));
+    const { store, repoPath } = await factory();
+    const compute = opts.computeVerdictFn ?? computeVerdict;
+    try {
+        const query = {
+            repoPath,
+            ...(opts.base !== undefined ? { base: opts.base } : {}),
+            ...(opts.head !== undefined ? { head: opts.head } : {}),
+            ...(opts.configOverrides !== undefined ? { config: opts.configOverrides } : {}),
+        };
+        // Normalise — production passes the composed `Store` envelope; legacy
+        // test fakes pass an `IGraphStore`. The analysis layer only needs the
+        // graph view either way.
+        const graph = "graph" in store ? store.graph : store;
+        const verdict = await compute(graph, query);
+        // Fold opencodehub.policy.yaml into the decision. `loadPolicy` returns
+        // undefined for the starter (all-comment) state so the default repo
+        // gets unchanged behavior. A malformed policy file throws — we let the
+        // error propagate so the CLI exits non-zero rather than silently pass.
+        const load = opts.loadPolicyFn ?? loadPolicy;
+        const policyPath = join(repoPath, "opencodehub.policy.yaml");
+        const policy = await load(policyPath);
+        const policyDecision = policy !== undefined
+            ? evaluatePolicy(policy, buildPolicyContext(verdict, opts.approvals ?? []))
+            : undefined;
+        const baseOutput = mode.format === "json"
+            ? renderJson(verdict)
+            : mode.format === "markdown"
+                ? renderMarkdown(verdict)
+                : renderSummary(verdict);
+        const output = mode.format === "json"
+            ? renderJsonWithPolicy(baseOutput, policyDecision)
+            : policyDecision !== undefined
+                ? `${baseOutput}\n${renderPolicyBlock(policyDecision, mode.format)}`
+                : baseOutput;
+        process.stdout.write(`${output}\n`);
+        if (mode.exitCode) {
+            const tierExit = cliExitCodeForTier(verdict.verdict);
+            // Policy block is strictly at least as severe as the verdict's own
+            // exit code: max(tierExit, 3 when policyDecision.status === "block").
+            const policyExit = policyDecision?.status === "block" ? 3 : 0;
+            process.exitCode = Math.max(tierExit, policyExit);
+        }
+    }
+    finally {
+        await store.close();
+    }
+}
+function buildPolicyContext(verdict, approvals) {
+    return {
+        // v1 wiring: verdict does not yet compute a license audit, so we
+        // surface an empty set. license_allowlist rules therefore pass until a
+        // follow-up task wires SBOM license data in.
+        licenseViolations: [],
+        blastRadiusTier: POLICY_TIER_FOR_VERDICT[verdict.verdict],
+        // v1 wiring: ownership_required rules inspect touched paths. We don't
+        // have the raw changed-file list on VerdictResponse yet — the closest
+        // structured data is communitiesTouched. Leave touchedPaths empty for
+        // now; this means ownership_required is a no-op until the verdict
+        // pipeline surfaces changed paths explicitly.
+        touchedPaths: [],
+        ownersByPath: new Map(),
+        approvals,
+    };
+}
+/**
+ * Merge the policy decision into the JSON output. Parsing the rendered JSON
+ * is marginally slower than re-stringifying `verdict`, but it keeps a single
+ * source of truth for the baseline shape (`renderJson`) and survives future
+ * additions to VerdictResponse without touching this file.
+ */
+function renderJsonWithPolicy(baseJson, policy) {
+    if (policy === undefined)
+        return baseJson;
+    const parsed = JSON.parse(baseJson);
+    parsed["policy"] = policy;
+    return JSON.stringify(parsed, null, 2);
+}
+function renderPolicyBlock(decision, format) {
+    if (format === "markdown")
+        return renderPolicyMarkdown(decision);
+    return renderPolicySummary(decision);
+}
+function renderPolicyMarkdown(decision) {
+    if (decision.status === "pass") {
+        return "### Policy\n\nPolicy: `pass`";
+    }
+    const lines = ["### Policy", "", `Policy: \`${decision.status}\``, "", "Violations:"];
+    for (const v of decision.violations) {
+        lines.push(`- \`${v.ruleId}\`: ${v.reason}`);
+    }
+    return lines.join("\n");
+}
+function renderPolicySummary(decision) {
+    const header = `Policy: ${decision.status}`;
+    if (decision.status === "pass")
+        return header;
+    const lines = [header];
+    for (const v of decision.violations) {
+        lines.push(`  [!!] ${v.ruleId}: ${v.reason}`);
+    }
+    return lines.join("\n");
+}
+export { PolicyValidationError };
+//# sourceMappingURL=verdict.js.map

package/dist/commands/verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../../src/commands/verdict.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,cAAc,GAKf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EACd,UAAU,EAIV,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAgC,MAAM,CAAC,MAAM,CAAC;IAChF,UAAU,EAAE,CAAC;IACb,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,aAAa,EAAE,CAAC;IAChB,KAAK,EAAE,CAAC;CACT,CAAC,CAAC;AAuCH;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;IACnC,MAAM,MAAM,GAAwB,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1F,yEAAyE;IACzE,uEAAuE;IACvE,+CAA+C;IAC/C,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B,EAAE;IAC3D,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,IAAI,cAAc,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,KAAK,GAAiB;YAC1B,QAAQ;YACR,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC;QACF,sEAAsE;QACtE,sEAAsE;QACtE,yBAAyB;QACzB,MAAM,KAAK,GAAgB,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAE5C,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,cAAc,GAClB,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,KAAK,MAAM;YACpB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU;gBAC1B,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC;gBACzB,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,MAAM;YACpB,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,cAAc,CAAC;YAClD,CAAC,CAAC,cAAc,KAAK,SAAS;gBAC5B,CAAC,CAAC,GAAG,UAAU,KAAK,iBAAiB,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBACpE,CAAC,CAAC,UAAU,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,mEAAmE;YACnE,sEAAsE;YACtE,MAAM,UAAU,GAAU,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAkB,CAAC;QACrE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAwB,EAAE,SAA4B;IAChF,OAAO;QACL,iEAAiE;QACjE,uEAAuE;QACvE,6CAA6C;QAC7C,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC;QACzD,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,8CAA8C;QAC9C,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,IAAI,GAAG,EAAE;QACvB,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,MAAkC;IAChF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;IAC/D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAwB,EAAE,MAA2B;IAC9E,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACjE,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,GAAa,CAAC,YAAY,EAAE,EAAE,EAAE,aAAa,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAwB;IACnD,MAAM,MAAM,GAAG,WAAW,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,CAAC"}

package/dist/commands/wiki.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `codehub wiki` — emit a graph-only Markdown wiki (default) or, with `--llm`,
+ * route the top-ranked modules through `@opencodehub/summarizer`'s Bedrock
+ * Converse client to generate narrative prose.
+ *
+ * Gating rules (mirrored in `@opencodehub/analysis`):
+ *   - `--llm` absent: exact existing behavior (deterministic, no network).
+ *   - `--llm` + `--offline`: hard error. The summarizer requires network.
+ *   - `--llm --max-llm-calls 0`: dry-run — enumerate candidate modules but
+ *     never contact Bedrock.
+ *   - `--llm --max-llm-calls <n>`: call the summarizer for the top N modules
+ *     by symbolCount. Per-module failures fall back to a deterministic
+ *     substitute for that module without aborting the run.
+ */
+export interface WikiCommandOptions {
+    readonly output: string;
+    readonly repo?: string;
+    readonly home?: string;
+    readonly json?: boolean;
+    readonly offline?: boolean;
+    readonly llm?: boolean;
+    readonly maxLlmCalls?: number;
+    readonly llmModel?: string;
+}
+export declare function runWiki(opts: WikiCommandOptions): Promise<void>;
+//# sourceMappingURL=wiki.d.ts.map

package/dist/commands/wiki.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wiki.d.ts","sourceRoot":"","sources":["../../src/commands/wiki.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmErE"}

package/dist/commands/wiki.js

@@ -0,0 +1,74 @@
+/**
+ * `codehub wiki` — emit a graph-only Markdown wiki (default) or, with `--llm`,
+ * route the top-ranked modules through `@opencodehub/summarizer`'s Bedrock
+ * Converse client to generate narrative prose.
+ *
+ * Gating rules (mirrored in `@opencodehub/analysis`):
+ *   - `--llm` absent: exact existing behavior (deterministic, no network).
+ *   - `--llm` + `--offline`: hard error. The summarizer requires network.
+ *   - `--llm --max-llm-calls 0`: dry-run — enumerate candidate modules but
+ *     never contact Bedrock.
+ *   - `--llm --max-llm-calls <n>`: call the summarizer for the top N modules
+ *     by symbolCount. Per-module failures fall back to a deterministic
+ *     substitute for that module without aborting the run.
+ */
+import { computeRiskTrends, loadSnapshots } from "@opencodehub/analysis";
+import { generateWiki } from "@opencodehub/wiki";
+import { openStoreForCommand } from "./open-store.js";
+export async function runWiki(opts) {
+    const llmRequested = opts.llm === true;
+    if (llmRequested && opts.offline === true) {
+        throw new Error("codehub wiki: --llm requires network access; remove --offline or drop --llm");
+    }
+    const { store, repoPath } = await openStoreForCommand({
+        ...(opts.repo !== undefined ? { repo: opts.repo } : {}),
+        ...(opts.home !== undefined ? { home: opts.home } : {}),
+    });
+    try {
+        const maxLlmCalls = Math.max(0, typeof opts.maxLlmCalls === "number" && Number.isFinite(opts.maxLlmCalls)
+            ? Math.floor(opts.maxLlmCalls)
+            : 0);
+        const llm = llmRequested
+            ? {
+                enabled: true,
+                maxCalls: maxLlmCalls,
+                ...(opts.llmModel !== undefined ? { modelId: opts.llmModel } : {}),
+            }
+            : undefined;
+        const result = await generateWiki(store.graph, {
+            outputDir: opts.output,
+            repoPath,
+            loadTrends: async (p) => computeRiskTrends(await loadSnapshots(p)),
+            ...(llm !== undefined ? { llm } : {}),
+        });
+        if (opts.json === true) {
+            console.log(JSON.stringify({
+                outputDir: opts.output,
+                fileCount: result.filesWritten.length,
+                totalBytes: result.totalBytes,
+                files: result.filesWritten,
+                llm: llm === undefined
+                    ? { enabled: false }
+                    : {
+                        enabled: true,
+                        maxCalls: llm.maxCalls,
+                        ...(llm.modelId !== undefined ? { modelId: llm.modelId } : {}),
+                        dryRun: llm.maxCalls === 0,
+                    },
+            }, null, 2));
+            return;
+        }
+        console.warn(`wiki: wrote ${result.filesWritten.length} files (${result.totalBytes} bytes) to ${opts.output}`);
+        if (llm !== undefined) {
+            const mode = llm.maxCalls === 0 ? "dry-run (0 calls)" : `cap ${llm.maxCalls}`;
+            console.warn(`wiki: llm mode active — ${mode}`);
+        }
+        for (const f of result.filesWritten) {
+            console.log(f);
+        }
+    }
+    finally {
+        await store.close();
+    }
+}
+//# sourceMappingURL=wiki.js.map

package/dist/commands/wiki.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wiki.js","sourceRoot":"","sources":["../../src/commands/wiki.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAuB,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAatD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAwB;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC;IACvC,IAAI,YAAY,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAC9B,CAAC,CAAC,CAAC,CACN,CAAC;QACF,MAAM,GAAG,GAA+B,YAAY;YAClD,CAAC,CAAC;gBACE,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,WAAW;gBACrB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE;YAC7C,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,QAAQ;YACR,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,MAAM,CAAC,YAAY;gBAC1B,GAAG,EACD,GAAG,KAAK,SAAS;oBACf,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;oBACpB,CAAC,CAAC;wBACE,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;qBAC3B;aACR,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CACV,eAAe,MAAM,CAAC,YAAY,CAAC,MAAM,WAAW,MAAM,CAAC,UAAU,cAAc,IAAI,CAAC,MAAM,EAAE,CACjG,CAAC;QACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/editors/claude-code.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Claude Code MCP config writer.
+ *
+ * Targets `<project>/.mcp.json` by default, which is the `project` scope that
+ * gets checked into VCS. Shape:
+ *   { "mcpServers": { "<name>": { "command": ..., "args": [...], "env": {...} } } }
+ *
+ * The writer preserves every top-level key on the file AND every sibling entry
+ * under `mcpServers`. Only the `codehub` key is upserted.
+ */
+import type { EditorWriter, McpInvocation } from "./types.js";
+export interface ClaudeCodeWriterOptions {
+    /** Absolute project root. The writer targets `<root>/.mcp.json`. */
+    readonly projectRoot: string;
+}
+export declare function createClaudeCodeWriter(opts: ClaudeCodeWriterOptions): EditorWriter;
+/**
+ * Shared JSON merge for the "mcpServers" shape — used by Claude Code, Cursor,
+ * and Windsurf. Exposed so each editor's writer stays a one-liner.
+ */
+export declare function mergeMcpServers(existing: string | undefined, invocation: McpInvocation): string;
+export declare function buildMcpServersEntry(invocation: McpInvocation): Record<string, unknown>;
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/editors/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/editors/claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,uBAAuB,GAAG,YAAY,CASlF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,UAAU,EAAE,aAAa,GAAG,MAAM,CAM/F;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASvF"}

package/dist/editors/claude-code.js

@@ -0,0 +1,58 @@
+/**
+ * Claude Code MCP config writer.
+ *
+ * Targets `<project>/.mcp.json` by default, which is the `project` scope that
+ * gets checked into VCS. Shape:
+ *   { "mcpServers": { "<name>": { "command": ..., "args": [...], "env": {...} } } }
+ *
+ * The writer preserves every top-level key on the file AND every sibling entry
+ * under `mcpServers`. Only the `codehub` key is upserted.
+ */
+import { resolve } from "node:path";
+export function createClaudeCodeWriter(opts) {
+    const configPath = resolve(opts.projectRoot, ".mcp.json");
+    return {
+        id: "claude-code",
+        configPath,
+        merge(existing, invocation) {
+            return mergeMcpServers(existing, invocation);
+        },
+    };
+}
+/**
+ * Shared JSON merge for the "mcpServers" shape — used by Claude Code, Cursor,
+ * and Windsurf. Exposed so each editor's writer stays a one-liner.
+ */
+export function mergeMcpServers(existing, invocation) {
+    const doc = parseJsonObject(existing);
+    const servers = isObject(doc["mcpServers"]) ? { ...doc["mcpServers"] } : {};
+    servers["codehub"] = buildMcpServersEntry(invocation);
+    doc["mcpServers"] = servers;
+    return `${JSON.stringify(doc, null, 2)}\n`;
+}
+export function buildMcpServersEntry(invocation) {
+    const entry = {
+        command: invocation.command,
+        args: [...invocation.args],
+    };
+    if (Object.keys(invocation.env).length > 0) {
+        entry["env"] = { ...invocation.env };
+    }
+    return entry;
+}
+function parseJsonObject(input) {
+    if (input === undefined || input.trim().length === 0)
+        return {};
+    const parsed = JSON.parse(stripBom(input));
+    if (!isObject(parsed)) {
+        throw new Error("Expected config file to contain a top-level JSON object");
+    }
+    return { ...parsed };
+}
+function stripBom(s) {
+    return s.charCodeAt(0) === 0xfeff ? s.slice(1) : s;
+}
+function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/editors/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/editors/claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,MAAM,UAAU,sBAAsB,CAAC,IAA6B;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1D,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,UAAU;QACV,KAAK,CAAC,QAAQ,EAAE,UAAU;YACxB,OAAO,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAA4B,EAAE,UAAyB;IACrF,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,OAAO,CAAC,SAAS,CAAC,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;IAC5B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAyB;IAC5D,MAAM,KAAK,GAA4B;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC;KAC3B,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAY,CAAC;IACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/editors/codex.d.ts

@@ -0,0 +1,22 @@
+/**
+ * OpenAI Codex CLI MCP config writer.
+ *
+ * Targets `~/.codex/config.toml` — the only TOML config of the five. Shape:
+ *
+ *   [mcp_servers.codehub]
+ *   command = "codehub"
+ *   args = ["mcp"]
+ *   env = { ... }
+ *
+ * We round-trip the file via `@iarna/toml`. The library preserves string
+ * values and key ordering for tables we don't touch; we only rewrite the
+ * `[mcp_servers.codehub]` table. Other `[mcp_servers.*]` tables and unrelated
+ * top-level tables are preserved verbatim.
+ */
+import type { EditorWriter, McpInvocation } from "./types.js";
+export interface CodexWriterOptions {
+    readonly home?: string;
+}
+export declare function createCodexWriter(opts?: CodexWriterOptions): EditorWriter;
+export declare function mergeCodexConfig(existing: string | undefined, invocation: McpInvocation): string;
+//# sourceMappingURL=codex.d.ts.map

package/dist/editors/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/editors/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,kBAAuB,GAAG,YAAY,CAU7E;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,UAAU,EAAE,aAAa,GAAG,MAAM,CAMhG"}

package/dist/editors/codex.js

@@ -0,0 +1,59 @@
+/**
+ * OpenAI Codex CLI MCP config writer.
+ *
+ * Targets `~/.codex/config.toml` — the only TOML config of the five. Shape:
+ *
+ *   [mcp_servers.codehub]
+ *   command = "codehub"
+ *   args = ["mcp"]
+ *   env = { ... }
+ *
+ * We round-trip the file via `@iarna/toml`. The library preserves string
+ * values and key ordering for tables we don't touch; we only rewrite the
+ * `[mcp_servers.codehub]` table. Other `[mcp_servers.*]` tables and unrelated
+ * top-level tables are preserved verbatim.
+ */
+import { homedir } from "node:os";
+import { resolve } from "node:path";
+import * as TOML from "@iarna/toml";
+export function createCodexWriter(opts = {}) {
+    const home = opts.home ?? homedir();
+    const configPath = resolve(home, ".codex", "config.toml");
+    return {
+        id: "codex",
+        configPath,
+        merge(existing, invocation) {
+            return mergeCodexConfig(existing, invocation);
+        },
+    };
+}
+export function mergeCodexConfig(existing, invocation) {
+    const doc = parseTomlObject(existing);
+    const servers = isObject(doc["mcp_servers"]) ? { ...doc["mcp_servers"] } : {};
+    servers["codehub"] = buildCodexEntry(invocation);
+    doc["mcp_servers"] = servers;
+    return TOML.stringify(doc);
+}
+function buildCodexEntry(invocation) {
+    const entry = {
+        command: invocation.command,
+        args: [...invocation.args],
+    };
+    if (Object.keys(invocation.env).length > 0) {
+        entry["env"] = { ...invocation.env };
+    }
+    return entry;
+}
+function parseTomlObject(input) {
+    if (input === undefined || input.trim().length === 0)
+        return {};
+    const parsed = TOML.parse(input);
+    if (!isObject(parsed)) {
+        throw new Error("Expected Codex config to parse as a TOML table");
+    }
+    return { ...parsed };
+}
+function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+//# sourceMappingURL=codex.js.map