@orkastery/cli 0.2.0 → 0.3.0

package/dist/company-brain-source.js

@@ -0,0 +1,177 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CYCLE_TYPES = void 0;
+exports.portfolioEntities = portfolioEntities;
+exports.portfolioHistory = portfolioHistory;
+exports.entityEvent = entityEvent;
+exports.readCycle = readCycle;
+exports.readSourceFile = readSourceFile;
+/** D5/D9: deterministic allowlist, references to authoritative sources; no transcript capture. */
+const fs = __importStar(require("node:fs"));
+const node_crypto_1 = require("node:crypto");
+const company_brain_contract_1 = require("./company-brain-contract");
+const company_brain_journal_1 = require("./company-brain-journal");
+exports.CYCLE_TYPES = new Set(['thread_created', 'phase_dispatch', 'phase_dispatch_verified', 'phase_result', 'fase_concluida',
+    'hitl_requested', 'hitl_answered', 'hitl_confirmed', 'hitl_expired', 'human_gate', 'autonomous_decision', 'gate_passed', 'gate_blocked',
+    'claim_added', 'claim_verified', 'claim_withdrawn', 'verify_run', 'artifact_written', 'artifact_delivered', 'phase_artifact_written',
+    'ship_started', 'ship_done', 'ship_blocked', 'push_verified', 'rollback_done', 'postmortem_recorded', 'master_done', 'score_proposto', 'master_score_recorded',
+    // I-43 (D3): a aceitacao por default e fato do ciclo de entrega, nao ruido de
+    // operacao. Sem ela na allowlist, o registro de que a entrega passou sem revisao
+    // ficaria de fora do ciclo, que e exatamente onde ele precisa ser visivel.
+    'aceite_por_omissao',
+    'brain_scope_recorded']);
+const safeId = (v) => typeof v === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159}$/.test(v);
+const hash = (v) => typeof v === 'string' && /^[a-f0-9]{64}$/.test(v);
+function portfolioEntities(catalog, scope, observations = {}) {
+    if (catalog.schema !== 'ork.portfolio/v1')
+        throw Error('brain.source.schema');
+    return (0, company_brain_contract_1.validateCatalog)([...catalog.products, ...catalog.projects, ...catalog.initiatives].map(e => {
+        const kind = { product: 'prod', project: 'proj', initiative: 'init' }[e.kind];
+        return { schema: 'orkmind.company-brain-entity/v1', tenant_id: scope.tenant, id: e.id, kind,
+            version: e.version, parent_id: e.kind === 'product' ? null : e.kind === 'project' ? e.productId : e.projectId,
+            workspace_ids: e.kind === 'project' ? e.workspaceIds : [], depends_on: e.kind === 'initiative' ? e.dependsOn : [],
+            aliases: [{ system: 'ork', instance: scope.instance, id: e.id }], title: e.title, description: e.description,
+            status: e.status, acceptance_criteria: e.acceptanceCriteria,
+            owner: { raw: e.ownerId, state: e.ownerId === null ? 'unknown' : 'legacy-label', principal: null },
+            source: { authority: 'ork', instance: scope.instance, source_ref: `portfolio.json#${e.id}`,
+                source_hash: (0, company_brain_contract_1.digest)(e), source_version: e.version, location: `id:${e.id}` },
+            // Global updatedAt describes a snapshot, not this entity version. Unknown stays null.
+            acl_ref: scope.aclRef, observed_at: observations[`${e.id}:${e.version}`] ?? null, recorded_at: null };
+    }));
+}
+/** Confirmed journal snapshots retain intermediate versions. Only an actual change
+ * observed by the journal supplies a timestamp; legacy observations stay unknown. */
+function portfolioHistory(catalog, scope, entries = []) {
+    const confirmed = new Set(entries.filter(e => e.type === 'confirmed').map(e => e.id));
+    const observations = {}, snapshots = [];
+    let previous = null;
+    const values = (p) => p ? [...p.products, ...p.projects, ...p.initiatives] : [];
+    for (const intent of entries.filter(e => e.type === 'intent' && confirmed.has(e.id))) {
+        if ((0, company_brain_journal_1.bytesHash)(JSON.stringify(intent.value, null, 2) + '\n') !== intent.afterHash)
+            throw Error('brain.journal.source-conflict');
+        const before = Object.hasOwn(intent, 'beforeValue') ? intent.beforeValue : previous;
+        if (before)
+            snapshots.push(before);
+        const prior = new Map(values(before).map(e => [e.id, e]));
+        for (const e of values(intent.value)) {
+            // A legacy first snapshot has no evidence identifying when its versions changed.
+            if ((Object.hasOwn(intent, 'beforeValue') || before) && prior.get(e.id)?.version !== e.version)
+                observations[`${e.id}:${e.version}`] ??= intent.observedAt;
+        }
+        snapshots.push(intent.value);
+        previous = intent.value;
+    }
+    snapshots.push(catalog);
+    const seen = new Map(), result = [];
+    for (const snapshot of snapshots)
+        for (const entity of portfolioEntities(snapshot, scope, observations)) {
+            const key = `${entity.id}:${entity.version}`, old = seen.get(key);
+            if (old && old.source.source_hash === entity.source.source_hash)
+                continue;
+            seen.set(key, entity);
+            result.push(entity);
+        }
+    return result;
+}
+function entityEvent(entity, sequence) {
+    const identity = `portfolio:${entity.source.instance}:${entity.id}:${entity.version}`;
+    return (0, company_brain_contract_1.validateContract)({ schema: 'orkmind.company-brain-event/v1', tenant_id: entity.tenant_id,
+        id: 'event-' + (0, company_brain_contract_1.digest)(identity), producer_id: 'ork', aggregate_id: entity.id, sequence, source_event_id: 'source-' + (0, company_brain_contract_1.digest)(identity),
+        source: entity.source, operation: 'upsert', payload: entity, payload_hash: (0, company_brain_contract_1.digest)(entity), cycle: null,
+        evidence_refs: [entity.source.source_ref], occurred_at: null, observed_at: entity.observed_at, acl_ref: entity.acl_ref });
+}
+function readCycle(bytes, scope, after = 0) {
+    const end = bytes.lastIndexOf(10) + 1;
+    const complete = bytes.subarray(0, end).toString('utf8');
+    if (!Buffer.from(complete).equals(bytes.subarray(0, end)))
+        throw Error('brain.source.encoding');
+    const records = [];
+    let offset = 0, line = 0;
+    const prefix = (0, node_crypto_1.createHash)('sha256');
+    for (const raw of complete.split('\n').slice(0, -1)) {
+        line++;
+        offset += Buffer.byteLength(raw) + 1;
+        prefix.update(raw + '\n');
+        if (offset <= after)
+            continue;
+        let fact;
+        try {
+            fact = JSON.parse(raw);
+        }
+        catch {
+            throw Error('brain.source.corrupt');
+        }
+        if (!fact || fact.thread !== scope.thread || typeof fact.tipo !== 'string' || typeof fact.ts !== 'string')
+            throw Error('brain.source.scope');
+        let event = null;
+        if (exports.CYCLE_TYPES.has(fact.tipo)) {
+            const sourceId = safeId(fact.eventId) ? fact.eventId : 'legacy-' + (0, company_brain_contract_1.digest)([scope.thread, line, (0, company_brain_journal_1.bytesHash)(raw)]);
+            const assertionId = 'fact-' + (0, company_brain_contract_1.digest)([scope.instance, scope.thread, sourceId]);
+            const source = { authority: 'ork', instance: scope.instance,
+                source_ref: `threads/${scope.thread}/ledger.jsonl#L${line}`, source_hash: (0, company_brain_journal_1.bytesHash)(raw), source_version: line, location: `line:${line}` };
+            const fields = {};
+            for (const key of ['fase', 'estado', 'classificacao', 'claimId', 'pedidoId', 'sessionId', 'tipo', 'gate', 'commit', 'sha', 'schema', 'acao', 'contrato'])
+                if (safeId(fact[key]))
+                    fields[key] = fact[key];
+            for (const key of ['ok', 'repetida'])
+                if (typeof fact[key] === 'boolean')
+                    fields[key] = fact[key];
+            // Free text, rationale, question, answer and tool output stay at the source.
+            const assertion = { schema: 'orkmind.company-brain-assertion/v1', tenant_id: scope.tenant,
+                id: assertionId, version: 1, subject: scope.thread, predicate: fact.tipo, object_id: null,
+                value: JSON.stringify(fields), source, producer_id: 'ork', actor_id: null, method: 'deterministic',
+                observed_at: fact.ts, recorded_at: null, occurred_at: fact.ts, valid_from: null, valid_to: null,
+                precision: 'instant', state: 'accepted', acl_ref: scope.aclRef };
+            event = (0, company_brain_contract_1.validateContract)({ schema: 'orkmind.company-brain-event/v1', tenant_id: scope.tenant,
+                id: 'event-' + (0, company_brain_contract_1.digest)([scope.instance, sourceId]), producer_id: 'ork', aggregate_id: assertionId, sequence: 1,
+                source_event_id: sourceId, source, operation: 'assert', payload: assertion, payload_hash: (0, company_brain_contract_1.digest)(assertion),
+                cycle: { thread_id: scope.thread, objective_id: safeId(fact.objectiveId) ? fact.objectiveId : null,
+                    objective_hash: hash(fact.objectiveHash) ? fact.objectiveHash : null,
+                    project_id: scope.projectId ?? null, initiative_ids: scope.initiativeIds ?? [],
+                    phase: ['GOAL', 'PLAN', 'GO', 'CHECK', 'SHIP', 'MASTER'].includes(fact.fase) ? fact.fase : null,
+                    session_id: safeId(fact.sessionId) ? fact.sessionId : null, context_hash: hash(fact.contextHash) ? fact.contextHash : null },
+                evidence_refs: [source.source_ref], occurred_at: fact.ts, observed_at: fact.ts, acl_ref: scope.aclRef });
+        }
+        records.push({ event, end: offset, prefixHash: prefix.copy().digest('hex') });
+    }
+    return { records, completeBytes: end, partial: end !== bytes.length };
+}
+function readSourceFile(file, limit = 16 * 1024 * 1024) {
+    const stat = fs.lstatSync(file);
+    if (!stat.isFile() || stat.size > limit)
+        throw Error('brain.source.unavailable');
+    return fs.readFileSync(file);
+}

package/dist/company-brain-worker.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.brainWorker = brainWorker;
+/** Explicit lifecycle; installation never starts the worker. */
+async function brainWorker(sync, signal, intervalMs = 5000) {
+    if (!Number.isInteger(intervalMs) || intervalMs < 1000 || intervalMs > 60000)
+        throw Error('brain.worker.interval-invalid');
+    while (!signal.aborted) {
+        sync();
+        if (signal.aborted)
+            break;
+        await new Promise(resolve => {
+            const done = () => { clearTimeout(timer); signal.removeEventListener('abort', done); resolve(); };
+            const timer = setTimeout(done, intervalMs);
+            signal.addEventListener('abort', done, { once: true });
+        });
+    }
+}

package/dist/conducao-texto.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NOME_DA_OPERACAO = void 0;
+exports.conducaoDoLease = conducaoDoLease;
+exports.quemConduz = quemConduz;
+exports.linhaDeConducao = linhaDeConducao;
+/**
+ * I-36 (D9): o texto de "quem conduz agora", em UM lugar.
+ *
+ * Todas as superficies (thread status, board, monitor, pulse, snapshot do Maestro e os quatro
+ * hosts) imprimem esta linha e nenhuma a reescreve. Modulo sem dependencia de estado para que o
+ * `thread.ts` e o `leases.ts` possam usa-lo sem ciclo de importacao.
+ */
+const horario_1 = require("./horario");
+/** O que cada operacao de conducao e, em portugues de gente. */
+exports.NOME_DA_OPERACAO = {
+    'phase.run': 'despacho de fase',
+    'retry.run': 'retomada de fase',
+    verify: 'ork verify',
+    baseline: 'ork verify --baseline',
+    'fix.open': 'ork fix open',
+    'fix.reverify': 'ork fix reverify',
+    'mcp.verify': 'ork_verify (MCP)',
+    handoff: 'reserva de quem assumiu',
+};
+/** O objeto de leitura a partir do lease, sem consultar nada. */
+function conducaoDoLease(lease) {
+    const c = lease.conducao;
+    if (!c || c.contrato !== 'ork.conducao/v1')
+        return null;
+    return {
+        thread: lease.thread,
+        canal: c.canal,
+        sessao: c.dono.tipo === 'sessao' ? c.dono.sessionId : null,
+        fase: c.fase,
+        desde: lease.adquiridoEm,
+        promptSha256: c.promptSha256,
+        operacao: c.operacao,
+        dono: c.dono,
+        expiraEm: lease.expiraEm,
+        identidade: c.identidade,
+    };
+}
+/** Quem segura a conducao, em poucas palavras: a sessao, o processo ou a reserva. */
+function quemConduz(c) {
+    if (c.sessao)
+        return `sessao ${c.sessao.slice(0, 8)}`;
+    if (c.dono.tipo === 'processo')
+        return `processo ${c.dono.pid} (${exports.NOME_DA_OPERACAO[c.operacao]})`;
+    if (c.dono.tipo === 'reserva')
+        return `reserva de ${c.dono.por}`;
+    return exports.NOME_DA_OPERACAO[c.operacao];
+}
+/**
+ * "conduzido agora por CANAL, sessao ID, fase F, desde HORARIO": a linha unica (CS7). O horario
+ * sai no fuso do dono; a legenda do fuso fica com a superficie, uma vez por tela.
+ */
+function linhaDeConducao(c, opcoes = {}) {
+    return `conduzido agora por ${c.canal}, ${quemConduz(c)}, fase ${c.fase ?? '-'}, ` +
+        `desde ${(0, horario_1.formatarDataHora)(c.desde, opcoes.agora ? { agora: opcoes.agora } : {})}`;
+}