@openrig/cli 0.5.2 → 0.5.3

package/daemon/dist/domain/context-packs/profile-composer.js

@@ -0,0 +1,125 @@
+// OPR.0.5.3.5 Atom 3 — the composition algebra (locked SPEC, founder refinement):
+//
+//   FRESH           = the base walk (atoms tagged fresh)
+//   HANDOVER        = FRESH + the handover material (atoms tagged handover)
+//   POST-COMPACTION = the tagged subset of fresh + the handover material
+//
+// Every profile is CLOSED over requires (a subset profile must close — intake rule);
+// the runtime filter runs per mini-req 3 (claude and codex are never assumed to have
+// lost the same dimensions, so they compose different profiles from the SAME graph);
+// each piece resolves through the Atom-1 address machinery and carries a per-piece
+// SOURCE LABEL (Q2-Amendment 1: composition is multi-source by contract — library /
+// seat tree / mission tree — and every assembled piece names its source; the caller's
+// resolver decides the kind, this module labels). Budgets are evaluated AT COMPOSE
+// and on overage REPORT the amount and the priority-ordered drop candidates —
+// composition never silently truncates (mini-req 9; D2: budgets flag for review,
+// never silently govern).
+//
+// PURE by contract, like the manifest parser: file text arrives through the caller's
+// readFile so the same algebra serves library packs today and configured tree roots
+// (seat/mission sources) when the wiring atom lands. Every failure is LOUD and names
+// the atom — a compose stops rather than thinning the walk (the Q1 rationale).
+import { estimateTokensFromBytes } from "./token-estimate.js";
+import { AddressResolutionError, parseAddress, resolveAddress } from "../markdown-address.js";
+export class ProfileComposeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ProfileComposeError";
+    }
+}
+/** Which situation tags select atoms for a profile, per the locked algebra. */
+function selectionTags(situation) {
+    switch (situation) {
+        case "fresh":
+            return ["fresh"];
+        case "handover":
+            return ["fresh", "handover"];
+        case "post-compaction":
+            return ["post-compaction", "handover"];
+    }
+}
+const DROP_ORDER = { optional: 0, recommended: 1, core: 2 };
+export function composeProfile(input) {
+    const { atoms, situation, runtime, readFile, budgetTokens, sourceKindFor } = input;
+    const byId = new Map(atoms.map((a) => [a.id, a]));
+    // 1. SELECT by situation tag, then filter by runtime (an "any" atom serves both).
+    const tags = selectionTags(situation);
+    const runtimeFits = (a) => a.runtime === "any" || a.runtime === runtime;
+    const selected = new Map();
+    for (const a of atoms) {
+        if (a.situations.some((s) => tags.includes(s)) && runtimeFits(a))
+            selected.set(a.id, a);
+    }
+    // 2. CLOSE over requires: a required atom joins the profile even when untagged.
+    //    A dependency that exists but is excluded by the RUNTIME filter is a broken
+    //    graph for this runtime — fail loud, never a quietly thinner walk.
+    const queue = [...selected.keys()];
+    while (queue.length > 0) {
+        const id = queue.pop();
+        for (const req of selected.get(id)?.requires ?? byId.get(id)?.requires ?? []) {
+            if (selected.has(req))
+                continue;
+            const dep = byId.get(req);
+            if (!dep) {
+                throw new ProfileComposeError(`atom '${id}' requires '${req}', which is not in the graph — the ${situation} profile cannot close.`);
+            }
+            if (!runtimeFits(dep)) {
+                throw new ProfileComposeError(`atom '${id}' requires '${req}', but '${req}' is declared runtime=${dep.runtime} and this compose targets runtime=${runtime} — ` +
+                    `the closure would silently thin the ${situation} walk; fix the graph (retag '${req}' or drop the edge).`);
+            }
+            selected.set(req, dep);
+            queue.push(req);
+        }
+    }
+    // 3. ORDER the walk (stable: order, then id — absorption depends on sequence).
+    const walk = [...selected.values()].sort((x, y) => x.order - y.order || x.id.localeCompare(y.id));
+    // 4. RESOLVE every piece through the one address machinery; label its source.
+    const pieces = walk.map((a) => {
+        const { ref, headerPath } = parseAddress(a.address);
+        let fileText;
+        try {
+            fileText = readFile(ref);
+        }
+        catch (err) {
+            throw new ProfileComposeError(`atom '${a.id}' (${a.address}): source file '${ref}' is unreadable — ${err.message}`);
+        }
+        let text;
+        if (headerPath.length === 0) {
+            text = fileText;
+        }
+        else {
+            try {
+                text = resolveAddress(fileText, headerPath).text;
+            }
+            catch (err) {
+                if (err instanceof AddressResolutionError) {
+                    throw new ProfileComposeError(`atom '${a.id}' (${a.address}): ${err.message}`);
+                }
+                throw err;
+            }
+        }
+        return {
+            atomId: a.id,
+            address: a.address,
+            sourceKind: sourceKindFor?.(a) ?? "library",
+            order: a.order,
+            priority: a.priority,
+            text,
+            estimatedTokens: estimateTokensFromBytes(Buffer.byteLength(text, "utf-8")),
+        };
+    });
+    const totalEstimatedTokens = pieces.reduce((sum, p) => sum + p.estimatedTokens, 0);
+    // 5. BUDGET report (mini-req 9): flag, never govern — all pieces stay.
+    let budget;
+    if (budgetTokens !== undefined && totalEstimatedTokens > budgetTokens) {
+        budget = {
+            limitTokens: budgetTokens,
+            overageTokens: totalEstimatedTokens - budgetTokens,
+            dropCandidates: [...pieces]
+                .sort((x, y) => DROP_ORDER[x.priority] - DROP_ORDER[y.priority] || y.estimatedTokens - x.estimatedTokens || x.atomId.localeCompare(y.atomId))
+                .map((p) => ({ atomId: p.atomId, priority: p.priority, estimatedTokens: p.estimatedTokens })),
+        };
+    }
+    return { situation, runtime, pieces, totalEstimatedTokens, ...(budget !== undefined ? { budget } : {}) };
+}
+//# sourceMappingURL=profile-composer.js.map

package/daemon/dist/domain/context-packs/profile-composer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-composer.js","sourceRoot":"","sources":["../../../src/domain/context-packs/profile-composer.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,EAAE;AACF,yDAAyD;AACzD,4EAA4E;AAC5E,yEAAyE;AACzE,EAAE;AACF,qFAAqF;AACrF,qFAAqF;AACrF,qFAAqF;AACrF,mFAAmF;AACnF,oFAAoF;AACpF,sFAAsF;AACtF,mFAAmF;AACnF,8EAA8E;AAC9E,iFAAiF;AACjF,0BAA0B;AAC1B,EAAE;AACF,qFAAqF;AACrF,oFAAoF;AACpF,qFAAqF;AACrF,+EAA+E;AAG/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE9F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AA6CD,+EAA+E;AAC/E,SAAS,aAAa,CAAC,SAA2B;IAChD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/B,KAAK,iBAAiB;YACpB,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAgD,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAEzG,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAElD,kFAAkF;IAClF,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAW,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;IAClG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,gFAAgF;IAChF,gFAAgF;IAChF,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7E,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,eAAe,GAAG,sCAAsC,SAAS,wBAAwB,CAAC,CAAC;YACtI,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,mBAAmB,CAC3B,SAAS,EAAE,eAAe,GAAG,WAAW,GAAG,yBAAyB,GAAG,CAAC,OAAO,qCAAqC,OAAO,KAAK;oBAC9H,uCAAuC,SAAS,gCAAgC,GAAG,sBAAsB,CAC5G,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAElG,8EAA8E;IAC9E,MAAM,MAAM,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7C,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,mBAAmB,GAAG,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,GAAG,QAAQ,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;oBAC1C,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjF,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,EAAE;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;YAC3C,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI;YACJ,eAAe,EAAE,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAEnF,uEAAuE;IACvE,IAAI,MAAiC,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS,IAAI,oBAAoB,GAAG,YAAY,EAAE,CAAC;QACtE,MAAM,GAAG;YACP,WAAW,EAAE,YAAY;YACzB,aAAa,EAAE,oBAAoB,GAAG,YAAY;YAClD,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC;iBACxB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;iBAC5I,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;SAChG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3G,CAAC"}

package/daemon/dist/domain/context-packs/profile-source-resolver.d.ts

@@ -0,0 +1,53 @@
+import type { SourceKind } from "./profile-composer.js";
+export declare class SourceResolutionError extends Error {
+    constructor(message: string);
+}
+declare const TREE_KINDS: readonly ["seat", "mission"];
+export type TreeKind = (typeof TREE_KINDS)[number];
+export interface ParsedSourceRef {
+    kind: SourceKind;
+    /** Relative path under the pack dir (library) or the kind's configured root. */
+    rel: string;
+}
+/** Split a pre-`#` ref into its resolver kind + relative path. Fail-loud on an
+ *  unknown prefix or a traversal-shaped path — a clean refusal, never an escape
+ *  (the r2-B3 precedent from the trace verb). */
+export declare function parseSourceRef(ref: string): ParsedSourceRef;
+export interface ProfileSourceRoots {
+    /** The seat's tree directory (recap + lore beside LEARNED) — from config. */
+    seat?: string;
+    /** The mission's tree directory — from config. */
+    mission?: string;
+}
+/** Byte-provenance record for one successful read (r1 rider 1 via 4a's review):
+ *  the label must be CHECKABLE, not merely asserted — with a symlink in play a
+ *  source label is accurate about the REF and wrong about the BYTES, and that
+ *  bites on benign symlinks, not just hostile ones. */
+export interface SourceReadRecord {
+    ref: string;
+    kind: SourceKind;
+    /** The root the read was granted against. */
+    base: string;
+    /** base + rel, before symlink resolution. */
+    nominalPath: string;
+    /** Where the BYTES actually came from (realpath after the successful read). */
+    realPath: string;
+    /** True when realPath sits outside base. Computed via path.relative — never a
+     *  bare string prefix (r1: `startsWith` says /seat-evil is inside /seat). */
+    escapesRoot: boolean;
+}
+/** Build the composer's fail-loud readFile over the pack dir + configured tree
+ *  roots. Every failure names the source kind and what was being resolved —
+ *  a missing root is a MISSING CONFIG error, never a silent empty; a DANGLING
+ *  symlink is its own named failure (a realistic corpus state, not a generic
+ *  unreadable). Each successful read reports byte provenance via onRead. */
+export declare function makeProfileReadFile(opts: {
+    packDir: string;
+    roots: ProfileSourceRoots;
+    onRead?: (record: SourceReadRecord) => void;
+}): (ref: string) => string;
+/** The composer's per-piece source label (Q2-Amendment 1: every assembled piece
+ *  is labeled with its source), derived from the atom's full address. */
+export declare function sourceKindForAddress(address: string): SourceKind;
+export {};
+//# sourceMappingURL=profile-source-resolver.d.ts.map

package/daemon/dist/domain/context-packs/profile-source-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-source-resolver.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/profile-source-resolver.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,QAAA,MAAM,UAAU,8BAA+B,CAAC;AAChD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;iDAEiD;AACjD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CA0B3D;AAED,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;uDAGuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB;iFAC6E;IAC7E,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;4EAI4E;AAC5E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CA8D1B;AAED;yEACyE;AACzE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEhE"}

package/daemon/dist/domain/context-packs/profile-source-resolver.js

@@ -0,0 +1,129 @@
+// OPR.0.5.3.5 Atom 4a — the two pre-`#` resolvers behind ONE grammar.
+//
+// Q2-Amendment 1 (locked), the desk's grammar ruling verbatim: non-library sources
+// are addressable with the SAME `#H2-slug/H3-slug` grammar; only the pre-`#`
+// resolver differs — a library ref resolves through the library (here: the pack's
+// own directory), a tree path resolves from CONFIGURED roots — and both resolve
+// FAIL-LOUD. One grammar held in memory, two resolvers behind it, no second
+// addressing convention. The kind prefix is the entire pre-`#` dialect:
+//
+//   walk.md#welcome              -> library (the pack's declared files)
+//   seat:RECAP.md#decisions      -> the seat tree (recap + lore live beside LEARNED)
+//   mission:NOTES.md#watch-items -> the mission tree
+//
+// Roots arrive from CONFIG through the caller (CE-v2 03-tree-addressability: an
+// addressing verb resolves tree paths from config, never literals — this module
+// holds no path literal and refuses to guess a missing root). Composability comes
+// from ADDRESSING, not homing: nothing must be copied into the library to compose
+// (a profile that copies seat or mission content into the library is a defect —
+// Q2-Amendment 1(c)).
+import { lstatSync, readFileSync, realpathSync } from "node:fs";
+import { isAbsolute, join, normalize, relative, sep } from "node:path";
+import { parseAddress } from "../markdown-address.js";
+export class SourceResolutionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SourceResolutionError";
+    }
+}
+const TREE_KINDS = ["seat", "mission"];
+/** Split a pre-`#` ref into its resolver kind + relative path. Fail-loud on an
+ *  unknown prefix or a traversal-shaped path — a clean refusal, never an escape
+ *  (the r2-B3 precedent from the trace verb). */
+export function parseSourceRef(ref) {
+    const colon = ref.indexOf(":");
+    let kind = "library";
+    let rel = ref;
+    if (colon >= 0) {
+        const prefix = ref.slice(0, colon);
+        if (!TREE_KINDS.includes(prefix)) {
+            throw new SourceResolutionError(`source ref '${ref}' has unknown kind prefix '${prefix}' — the pre-'#' dialect is bare (library), ${TREE_KINDS.map((k) => `'${k}:'`).join(" or ")}.`);
+        }
+        kind = prefix;
+        rel = ref.slice(colon + 1);
+    }
+    if (rel.length === 0) {
+        throw new SourceResolutionError(`source ref '${ref}' has an empty path after its kind prefix.`);
+    }
+    const unsafe = isAbsolute(rel) ||
+        rel.split(/[\\/]/).some((segment) => segment === ".." || segment === "");
+    if (unsafe) {
+        throw new SourceResolutionError(`source ref '${ref}' is traversal-shaped (absolute path, '..' or empty segment) — refs stay inside their source root.`);
+    }
+    return { kind, rel };
+}
+/** Build the composer's fail-loud readFile over the pack dir + configured tree
+ *  roots. Every failure names the source kind and what was being resolved —
+ *  a missing root is a MISSING CONFIG error, never a silent empty; a DANGLING
+ *  symlink is its own named failure (a realistic corpus state, not a generic
+ *  unreadable). Each successful read reports byte provenance via onRead. */
+export function makeProfileReadFile(opts) {
+    return (ref) => {
+        const { kind, rel } = parseSourceRef(ref);
+        let base;
+        if (kind === "library") {
+            base = opts.packDir;
+        }
+        else {
+            const configured = opts.roots[kind];
+            if (!configured) {
+                throw new SourceResolutionError(`source ref '${ref}' needs the ${kind} tree root, which is not configured for this compose — ` +
+                    `tree paths resolve from config, never literals; supply the ${kind} root or drop the ${kind}-homed atom.`);
+            }
+            base = configured;
+        }
+        const abs = normalize(join(base, rel));
+        let text;
+        try {
+            text = readFileSync(abs, "utf-8");
+        }
+        catch (err) {
+            // Name the dangling-symlink state precisely: the path EXISTS as a link
+            // but its target does not — a generic "unreadable" would send an author
+            // hunting for a file that is right there in their listing.
+            let dangling = false;
+            try {
+                lstatSync(abs);
+                dangling = true;
+            }
+            catch {
+                /* genuinely absent */
+            }
+            throw new SourceResolutionError(dangling
+                ? `source ref '${ref}' (${kind}) is a DANGLING symlink: ${abs} exists but its target does not — ${err.message}`
+                : `source ref '${ref}' (${kind}) did not resolve: ${abs} is unreadable — ${err.message}`);
+        }
+        // Provenance AFTER the successful read (r1: realpath on a missing file
+        // throws, and that throw must never garble the honest read error above).
+        if (opts.onRead) {
+            let realPath = abs;
+            try {
+                realPath = realpathSync(abs);
+            }
+            catch {
+                /* raced away post-read; nominal stands as the best truth available */
+            }
+            let realBase = base;
+            try {
+                realBase = realpathSync(base);
+            }
+            catch {
+                /* root itself unresolvable; compare against the nominal base */
+            }
+            const relFromBase = relative(realBase, realPath);
+            // SEGMENT comparison, never a prefix test on a path-shaped string (r1
+            // round-3 F1: a file legitimately NAMED '..hidden-notes.md' inside the
+            // root satisfied startsWith('..') — the identical class as
+            // startsWith(base) saying /seat-evil is inside /seat, one level in).
+            const escapesRoot = relFromBase === ".." || relFromBase.startsWith(`..${sep}`) || isAbsolute(relFromBase);
+            opts.onRead({ ref, kind, base, nominalPath: abs, realPath, escapesRoot });
+        }
+        return text;
+    };
+}
+/** The composer's per-piece source label (Q2-Amendment 1: every assembled piece
+ *  is labeled with its source), derived from the atom's full address. */
+export function sourceKindForAddress(address) {
+    return parseSourceRef(parseAddress(address).ref).kind;
+}
+//# sourceMappingURL=profile-source-resolver.js.map

package/daemon/dist/domain/context-packs/profile-source-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-source-resolver.js","sourceRoot":"","sources":["../../../src/domain/context-packs/profile-source-resolver.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,mFAAmF;AACnF,6EAA6E;AAC7E,kFAAkF;AAClF,gFAAgF;AAChF,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,qFAAqF;AACrF,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,sBAAsB;AAEtB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,CAAU,CAAC;AAShD;;iDAEiD;AACjD,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,IAAI,GAAe,SAAS,CAAC;IACjC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,qBAAqB,CAC7B,eAAe,GAAG,8BAA8B,MAAM,8CAA8C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CACrJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,MAAkB,CAAC;QAC1B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,qBAAqB,CAAC,eAAe,GAAG,4CAA4C,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GACV,UAAU,CAAC,GAAG,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,qBAAqB,CAC7B,eAAe,GAAG,oGAAoG,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AA2BD;;;;4EAI4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,OAAO,CAAC,GAAW,EAAU,EAAE;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,IAAY,CAAC;QACjB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,qBAAqB,CAC7B,eAAe,GAAG,eAAe,IAAI,yDAAyD;oBAC5F,8DAA8D,IAAI,qBAAqB,IAAI,cAAc,CAC5G,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,wEAAwE;YACxE,2DAA2D;YAC3D,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,MAAM,IAAI,qBAAqB,CAC7B,QAAQ;gBACN,CAAC,CAAC,eAAe,GAAG,MAAM,IAAI,4BAA4B,GAAG,qCAAsC,GAAa,CAAC,OAAO,EAAE;gBAC1H,CAAC,CAAC,eAAe,GAAG,MAAM,IAAI,sBAAsB,GAAG,oBAAqB,GAAa,CAAC,OAAO,EAAE,CACtG,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,GAAG,CAAC;YACnB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;YACD,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjD,sEAAsE;YACtE,uEAAuE;YACvE,2DAA2D;YAC3D,qEAAqE;YACrE,MAAM,WAAW,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;YAC1G,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/daemon/dist/domain/context-packs/seat-recap-store.d.ts

@@ -0,0 +1,48 @@
+export declare const RECAP_FILENAME = "RECAP.md";
+export declare class RecapWriteError extends Error {
+    constructor(message: string);
+}
+export interface RecapChainEntry {
+    /** Absolute path of the superseded recap. */
+    path: string;
+    /** The supersession timestamp encoded in the filename (ms epoch). */
+    supersededAtMs: number;
+    /** Same-millisecond disambiguator (1 for the bare name, 2+ for -N suffixes). */
+    sequence: number;
+}
+/** Write the seat's current recap, superseding any existing one into the
+ *  chain. The gate is ADDRESSABILITY only — never prose shape. */
+export declare function writeSeatRecap(opts: {
+    seatDir: string;
+    content: string;
+    now?: () => number;
+}): void;
+/** The superseded chain, oldest first. Empty when no recap was ever superseded. */
+export declare function listRecapChain(seatDir: string): RecapChainEntry[];
+export type RecapContractFinding = {
+    kind: "no-decisions-section";
+} | {
+    kind: "nonstandard-unverified-marker";
+    line: number;
+};
+/** The authoring contract's CHECKABLE subset (Q2): decisions-with-rationale has
+ *  a structural proxy (a decisions-titled section exists); the UNVERIFIED
+ *  marker has a canonical grammar (`UNVERIFIED:` uppercase) that must stay
+ *  findable — a variant marker hides exactly the fact it exists to flag.
+ *  Advisory: findings, never throws. */
+export declare function validateRecapContract(content: string): RecapContractFinding[];
+/** BUILD FOLLOW-UP (r1 verdict bb00e850; row 17015088) — the authored-recap
+ *  pointer resolution, ONE-HOMED here beside the store it reads, parsing the
+ *  seat ref through the CANONICAL parseSessionName (first-@ split, the
+ *  documented greedy-rig ruling) — never a second parser. Safety floor
+ *  preserved: an unresolved or non-canonical ref fails with a LABELED reason
+ *  carrying what was tried; fuzzy-matching another seat's directory would hand
+ *  a successor a DIFFERENT occupant's decisions, which is strictly worse than
+ *  honest absence. */
+export declare function resolveAuthoredRecapPointer(seatRef: string, topologyRoot: string): {
+    address: string;
+    chainLength: number;
+} | {
+    absentReason: string;
+};
+//# sourceMappingURL=seat-recap-store.d.ts.map

package/daemon/dist/domain/context-packs/seat-recap-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-recap-store.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/seat-recap-store.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,cAAc,aAAa,CAAC;AAGzC,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;kEACkE;AAClE,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,GAAG,IAAI,CA4BnG;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CAiBjE;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,+BAA+B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D;;;;wCAIwC;AACxC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAa7E;AAED;;;;;;;sBAOsB;AACtB,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAUrE"}

package/daemon/dist/domain/context-packs/seat-recap-store.js

@@ -0,0 +1,123 @@
+// OPR.0.5.3.5 mini-req 7 (Q2 + Q2-Amendment 1) — the seat recap store.
+//
+// The AUTHORED recap: decisions-with-rationale written by the outgoing occupant
+// at the boundary, extending the shipped from-record boot recap's name (the Q2
+// unify-what-exists ruling — predecessor-recap-resolver.ts remains the
+// transcript-derived sibling). SEAT-HOMED beside LEARNED (Q2-Amendment 1(a):
+// the recap is POSITION knowledge, unshareable by construction — a
+// library-homed recap would be position knowledge on the portable shelf).
+// RETENTION (1(b)): superseded-chain versioning — the newest recap is
+// RECAP.md, predecessors stay byte-preserved under recap-superseded/ in the
+// seat directory, cleaned by seat-directory lifecycle, NEVER by library
+// curation; no librarian job is created.
+//
+// Two validation altitudes, deliberately different:
+// - ADDRESSABILITY is the one HARD gate on write: the recap is composed by
+//   address (seat:RECAP.md#...), so an unaddressable recap (duplicate header
+//   paths, unterminated fence) would fail every handover profile downstream,
+//   silently late. Structural, not prose-shaped.
+// - The AUTHORING CONTRACT validates ADVISORY on its CHECKABLE subset only:
+//   findings flag for review, never gate the boundary (the D2 pattern). The
+//   contract's semantic halves (temporal order, derived-values-as-commands)
+//   are not mechanically checkable and are NOT pretended at.
+import { mkdirSync, readdirSync, renameSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { validateMarkdownAddressability, parseMarkdownSections } from "../markdown-address.js";
+import { parseSessionName } from "../session-name.js";
+export const RECAP_FILENAME = "RECAP.md";
+const CHAIN_DIRNAME = "recap-superseded";
+export class RecapWriteError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "RecapWriteError";
+    }
+}
+/** Write the seat's current recap, superseding any existing one into the
+ *  chain. The gate is ADDRESSABILITY only — never prose shape. */
+export function writeSeatRecap(opts) {
+    const findings = validateMarkdownAddressability(opts.content);
+    if (findings.length > 0) {
+        throw new RecapWriteError(`recap is not addressable and could never compose (seat:${RECAP_FILENAME}#... would fail every ` +
+            `handover profile): ${findings.map((f) => f.kind === "unterminated-fence" ? `unterminated fence at line ${f.line}` : `${f.kind} '${"headerPath" in f ? f.headerPath : ""}'`).join("; ")}. ` +
+            `Fix the structure (duplicate header paths / unterminated fences); prose shape is never gated.`);
+    }
+    const now = opts.now ?? Date.now;
+    const current = join(opts.seatDir, RECAP_FILENAME);
+    if (existsSync(current)) {
+        const chainDir = join(opts.seatDir, CHAIN_DIRNAME);
+        mkdirSync(chainDir, { recursive: true });
+        // COLLISION-SAFE naming (r1 F1): renameSync onto an existing path REPLACES
+        // it, so two supersessions in one millisecond silently destroyed a
+        // predecessor — the retention contract inverted. A counter suffix
+        // disambiguates: nothing is lost AND the boundary write still succeeds
+        // (better than throwing on both counts). `now` is injectable, so
+        // programmatic callers collide deterministically, not rarely.
+        const stamp = String(now()).padStart(15, "0");
+        let target = join(chainDir, `RECAP-${stamp}.md`);
+        for (let counter = 2; existsSync(target); counter++) {
+            target = join(chainDir, `RECAP-${stamp}-${counter}.md`);
+        }
+        renameSync(current, target);
+    }
+    writeFileSync(current, opts.content);
+}
+/** The superseded chain, oldest first. Empty when no recap was ever superseded. */
+export function listRecapChain(seatDir) {
+    const chainDir = join(seatDir, CHAIN_DIRNAME);
+    let names;
+    try {
+        names = readdirSync(chainDir);
+    }
+    catch {
+        return [];
+    }
+    return names
+        .map((name) => {
+        const m = name.match(/^RECAP-(\d+)(?:-(\d+))?\.md$/);
+        return m
+            ? { path: join(chainDir, name), supersededAtMs: Number(m[1]), sequence: m[2] ? Number(m[2]) : 1 }
+            : null;
+    })
+        .filter((e) => e !== null)
+        .sort((a, b) => a.supersededAtMs - b.supersededAtMs || a.sequence - b.sequence);
+}
+/** The authoring contract's CHECKABLE subset (Q2): decisions-with-rationale has
+ *  a structural proxy (a decisions-titled section exists); the UNVERIFIED
+ *  marker has a canonical grammar (`UNVERIFIED:` uppercase) that must stay
+ *  findable — a variant marker hides exactly the fact it exists to flag.
+ *  Advisory: findings, never throws. */
+export function validateRecapContract(content) {
+    const findings = [];
+    const sections = parseMarkdownSections(content);
+    const hasDecisions = sections.some((s) => s.headerPath[s.headerPath.length - 1].includes("decision"));
+    if (!hasDecisions)
+        findings.push({ kind: "no-decisions-section" });
+    const lines = content.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (/unverified/i.test(line) && !line.includes("UNVERIFIED:")) {
+            findings.push({ kind: "nonstandard-unverified-marker", line: i });
+        }
+    }
+    return findings;
+}
+/** BUILD FOLLOW-UP (r1 verdict bb00e850; row 17015088) — the authored-recap
+ *  pointer resolution, ONE-HOMED here beside the store it reads, parsing the
+ *  seat ref through the CANONICAL parseSessionName (first-@ split, the
+ *  documented greedy-rig ruling) — never a second parser. Safety floor
+ *  preserved: an unresolved or non-canonical ref fails with a LABELED reason
+ *  carrying what was tried; fuzzy-matching another seat's directory would hand
+ *  a successor a DIFFERENT occupant's decisions, which is strictly worse than
+ *  honest absence. */
+export function resolveAuthoredRecapPointer(seatRef, topologyRoot) {
+    const parsed = parseSessionName(seatRef);
+    if (parsed.kind !== "canonical") {
+        return { absentReason: `seat ref '${seatRef}' did not parse as canonical <seat>@<rig> (parse verdict: ${parsed.kind}) — authored recap not resolved, never guessed` };
+    }
+    const seatDir = join(topologyRoot, "rigs", parsed.rig, "seats", parsed.member);
+    if (!existsSync(join(seatDir, RECAP_FILENAME))) {
+        return { absentReason: `no ${RECAP_FILENAME} on the seat tree (${seatDir}) — the predecessor never wrote one` };
+    }
+    return { address: `seat:${RECAP_FILENAME}`, chainLength: listRecapChain(seatDir).length };
+}
+//# sourceMappingURL=seat-recap-store.js.map

package/daemon/dist/domain/context-packs/seat-recap-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-recap-store.js","sourceRoot":"","sources":["../../../src/domain/context-packs/seat-recap-store.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AACvE,6EAA6E;AAC7E,mEAAmE;AACnE,0EAA0E;AAC1E,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,yCAAyC;AACzC,EAAE;AACF,oDAAoD;AACpD,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,iDAAiD;AACjD,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,6DAA6D;AAE7D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAgB,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AACzC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAWD;kEACkE;AAClE,MAAM,UAAU,cAAc,CAAC,IAA8D;IAC3F,MAAM,QAAQ,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,0DAA0D,cAAc,wBAAwB;YAC9F,sBAAsB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC3L,+FAA+F,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,2EAA2E;QAC3E,mEAAmE;QACnE,kEAAkE;QAClE,uEAAuE;QACvE,iEAAiE;QACjE,8DAA8D;QAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC;QACjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO,CAAC;YACN,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACjG,CAAC,CAAC,IAAI,CAAC;IACX,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAMD;;;;wCAIwC;AACxC,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,YAAY;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;sBAOsB;AACtB,MAAM,UAAU,2BAA2B,CACzC,OAAe,EACf,YAAoB;IAEpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,EAAE,YAAY,EAAE,aAAa,OAAO,6DAA6D,MAAM,CAAC,IAAI,gDAAgD,EAAE,CAAC;IACxK,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,sBAAsB,OAAO,qCAAqC,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,cAAc,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5F,CAAC"}

package/daemon/dist/domain/markdown-address.d.ts

@@ -0,0 +1,56 @@
+export declare class AddressResolutionError extends Error {
+    constructor(message: string);
+}
+/** ONE slug rule, simple enough to hold in memory: lowercase; markdown emphasis/code
+ *  markers stripped with the text kept; every run of non-alphanumerics becomes one
+ *  hyphen; leading/trailing hyphens trimmed. */
+export declare function slugifyHeader(title: string): string;
+export interface ParsedAddress {
+    /** The pre-`#` ref — a library ref or a tree path; the caller's resolver owns it. */
+    ref: string;
+    /** 0 (whole file), 1 (H2) or 2 (H2/H3) slugs. */
+    headerPath: string[];
+}
+/** Parse the one grammar form `ref` / `ref#h2` / `ref#h2/h3`. Fail-loud on anything else. */
+export declare function parseAddress(address: string): ParsedAddress;
+export interface MarkdownSection {
+    /** Header level (2 or 3). */
+    level: number;
+    /** The header's raw title text. */
+    title: string;
+    /** This section's address path: [h2Slug] or [h2Slug, h3Slug]. */
+    headerPath: string[];
+    /** 0-based line of the header itself. */
+    headerLine: number;
+    /** FULL span (Q1): header line through the line before the next same-or-higher header. */
+    text: string;
+    /** OWN text: header line through the line before the next header of ANY level. */
+    ownText: string;
+}
+/** Parse the addressable H2/H3 section tree of a markdown text.
+ *  A matched section is NEVER empty by construction: the span includes the header
+ *  line itself, so even a body-less `## alpha` (next line another header, or EOF)
+ *  resolves to at least its own header — a matched-but-empty section can never
+ *  quietly thin a compose (the structural half of the fail-loud contract; r1 A2). */
+export declare function parseMarkdownSections(text: string): MarkdownSection[];
+/** Resolve a header path against markdown text. FAIL-LOUD: no match is an error that
+ *  names the miss and the real candidates at that altitude — never a silent empty. */
+export declare function resolveAddress(text: string, headerPath: string[]): MarkdownSection;
+export type AddressabilityFinding = {
+    kind: "duplicate-header-path";
+    headerPath: string;
+    lines: number[];
+} | {
+    kind: "unaddressable-header";
+    headerPath: string;
+    line: number;
+    title: string;
+} | {
+    kind: "unterminated-fence";
+    line: number;
+};
+/** The compose-gate validator: every H2/H3 must be uniquely addressable under the one
+ *  slug rule, and the file must not silently lose sections. Findings, not throws —
+ *  the caller decides the gate. */
+export declare function validateMarkdownAddressability(text: string): AddressabilityFinding[];
+//# sourceMappingURL=markdown-address.d.ts.map

package/daemon/dist/domain/markdown-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown-address.d.ts","sourceRoot":"","sources":["../../src/domain/markdown-address.ts"],"names":[],"mappings":"AA0BA,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED;;gDAEgD;AAChD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAsB3D;AAED,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;CACjB;AAyCD;;;;qFAIqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAgCrE;AAED;sFACsF;AACtF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,eAAe,CA4BlF;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;;mCAEmC;AACnC,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,EAAE,CA0BpF"}