@orkastery/cli 0.2.0 → 0.3.0

package/dist/maestro-runtime.js

@@ -0,0 +1,268 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.operationalSources = operationalSources;
+exports.nativeForThread = nativeForThread;
+exports.observeWithDeadline = observeWithDeadline;
+const zod_1 = require("zod");
+const hitl_contract_1 = require("./hitl-contract");
+const master_1 = require("./master");
+const maestro_sources_1 = require("./maestro-sources");
+const path = __importStar(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const claude_bg_1 = require("./adapters/claude-bg");
+const hitl_sessions_1 = require("./hitl-sessions");
+const thread_1 = require("./thread");
+const hitl_gates_1 = require("./hitl-gates");
+const ocupacao_1 = require("./ocupacao");
+const horario_1 = require("./horario");
+const conducao_1 = require("./conducao");
+const conducao_texto_1 = require("./conducao-texto");
+/** Valida todos os campos consumidos antes de deduplicar, filtrar ou publicar a fila. */
+const retryView = zod_1.z.object({
+    id: zod_1.z.string().max(160).regex(/^R[1-9]\d*$/),
+    thread: zod_1.z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,79}$/),
+    estado: zod_1.z.enum(['aguardando', 'retomado', 'escalado', 'cancelado']),
+    liberaEm: zod_1.z.string().max(512).datetime({ offset: true }).refine(v => Number.isFinite(Date.parse(v))),
+    tentativas: zod_1.z.number().int().nonnegative().safe(),
+});
+/** Referências e datas só entram na projeção depois de validar a fonte inteira. */
+const leaseView = zod_1.z.object({
+    nome: zod_1.z.string().min(1).refine(v => v.trim().length > 0 && !/[\u0000-\u001f\u007f]/.test(v)),
+    thread: zod_1.z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,79}$/),
+    expiraEm: zod_1.z.string().max(512).datetime({ offset: true }).refine(v => Number.isFinite(Date.parse(v))),
+});
+/**
+ * Recibo de SHIP validado em todos os campos consumidos antes de projetar. Push verificado
+ * que contradiz o próprio remoto ou a fonte da prova é recibo inválido, não entrega incompleta.
+ */
+const shipSha = zod_1.z.string().regex(/^[a-f0-9]{40}$/);
+const shipTs = zod_1.z.string().max(512).datetime({ offset: true }).refine(v => Number.isFinite(Date.parse(v)));
+const shipView = zod_1.z.union([
+    zod_1.z.object({
+        tipo: zod_1.z.literal('ship_done'), ts: shipTs, pushVerificado: zod_1.z.boolean(), mergeSha: shipSha,
+        shaRemoto: shipSha.nullable().optional(),
+        fonteDaProva: zod_1.z.string().min(1).max(512).refine(v => !/[\u0000-\u001f\u007f]/.test(v)).nullable().optional(),
+    }).refine(s => !s.pushVerificado || (s.shaRemoto === s.mergeSha && typeof s.fonteDaProva === 'string')),
+    zod_1.z.object({ tipo: zod_1.z.enum(['ship_started', 'ship_blocked']), ts: shipTs }),
+]);
+function operationalSources(reader, threads, native = [], now = new Date().toISOString(), threadScope) {
+    const names = ['sessions', 'blockers', 'leases', 'retries', 'hitl', 'ship', 'master'];
+    const sections = {};
+    for (const name of names)
+        sections[name] = { source: `ork.${name}`, items: [], gaps: [] };
+    // I-35: fato local absoluto e rotulado ao lado do ISO, nunca relativo (o fingerprint conta).
+    const local = (iso) => (0, horario_1.formatarDataHoraRotulada)(iso, { agora: now });
+    for (const t of threads) {
+        const refs = [{ kind: 'thread', id: t.id }];
+        let events;
+        try {
+            const raw = reader.read(`.orkastery/threads/${t.id}/ledger.jsonl`);
+            if (raw === null)
+                throw Error('missing');
+            events = raw.split('\n').filter(Boolean).map(line => JSON.parse(line));
+            if (events.some(e => typeof e.tipo !== 'string' || e.thread !== t.id))
+                throw Error('invalid');
+        }
+        catch {
+            for (const name of names.filter(n => !['leases', 'retries'].includes(n)))
+                sections[name].gaps.push(`ledger.unavailable:${t.id}`);
+            continue;
+        }
+        // I-36 (T17): quem conduz, pela mesma leitura das outras superficies. O leitor confinado nao sonda
+        // processo: conducao de processo vale ate o lease sair, como nas demais telas sem prova de morte.
+        let conducao = null;
+        try {
+            conducao = (0, conducao_1.conducaoDosDados)(reader.json(`.orkastery/leases/${encodeURIComponent((0, conducao_1.nomeDaConducao)(t.id))}.json`), events, { agora: new Date(now) });
+        }
+        catch {
+            sections.sessions.gaps.push(`conducao.unavailable:${t.id}`);
+        }
+        const linhaDaConducao = conducao ? (0, conducao_texto_1.linhaDeConducao)(conducao, { agora: now }) : null;
+        if (conducao && !t.sessoes.some(s => s.sessionId === conducao.sessao))
+            sections.sessions.items.push((0, maestro_sources_1.item)(`conducao:${t.id}`, 'Conducao em andamento', 'active', refs, { conduction: (0, maestro_sources_1.safeText)(linhaDaConducao) }));
+        for (const s of t.sessoes) {
+            const observed = native.filter(n => n.sessionId === s.sessionId && n.runtime === (s.runtime ?? 'claude-bg'));
+            const n = observed.length === 1 ? observed[0] : undefined;
+            const divergence = !!n?.state && !!n.status && n.state !== n.status;
+            const phaseResult = events.some(e => e.tipo === 'phase_result' && e.sessionId === s.sessionId && e.fase === s.fase);
+            const terminal = ['done', 'completed', 'exited', 'stopped'].includes(n?.state ?? n?.status ?? '');
+            sections.sessions.items.push((0, maestro_sources_1.item)(s.sessionId, `${s.runtime ?? 'claude-bg'} · ${s.fase}`, divergence ? 'conflict' : n?.state ?? n?.status ?? 'unknown', refs, { runtime: s.runtime ?? 'claude-bg', phase: s.fase, nativeConfirmed: !!n && !n.reason, phaseResult,
+                ...(conducao && conducao.sessao === s.sessionId ? { conduction: (0, maestro_sources_1.safeText)(linhaDaConducao) } : {}),
+                reason: (0, maestro_sources_1.safeText)(divergence ? 'runtime.state_conflict' : n?.reason ?? (!n ? 'runtime.unavailable' : terminal && !phaseResult ? 'phase.result_missing' : '')) }));
+        }
+        const lastGate = events.filter(e => e.tipo === 'gate_blocked' ||
+            ocupacao_1.EVENTOS_QUE_DESTRAVAM.includes(e.tipo) || (0, ocupacao_1.ehAprovacaoHumana)(e)).at(-1);
+        if (lastGate?.tipo === 'gate_blocked')
+            sections.blockers.items.push((0, maestro_sources_1.item)(`gate:${t.id}`, lastGate.motivo, 'blocked', refs, { reason: (0, maestro_sources_1.safeText)(lastGate.motivo) }));
+        const currentHitlContext = (0, hitl_gates_1.contextoHitlDosEventos)(t, events);
+        for (const e of events.filter(e => e.tipo === 'hitl_requested')) {
+            try {
+                (0, hitl_contract_1.validarPedidoHitl)(e.pedido);
+                const p = e.pedido;
+                if (p.thread !== t.id)
+                    throw Error('scope');
+                const answered = events.some(r => ['human_gate', 'session_answered'].includes(r.tipo) && r.pedidoId === p.id);
+                if (answered)
+                    continue;
+                const sending = events.some(r => r.tipo === 'session_answer_sending' && r.pedidoId === p.id);
+                const stale = e.contexto !== currentHitlContext;
+                const prazo = (0, hitl_contract_1.prazoDoPedido)(p) ?? '';
+                sections.hitl.items.push((0, maestro_sources_1.item)(p.id, (0, hitl_contract_1.textoDoPedido)(p), stale ? 'stale' : sending ? 'delivery.uncertain' : (0, hitl_contract_1.estadoDoPedido)(p, now), refs, { deadline: prazo, deadlineLocal: local(prazo), target: (0, hitl_contract_1.alvoDoPedido)(p)?.tipo ?? 'decidido', recommendation: (0, maestro_sources_1.safeText)((0, hitl_contract_1.recomendacaoDoPedido)(p)),
+                    deliveryUncertain: sending, reason: stale ? 'hitl.context.stale' : '' }));
+            }
+            catch {
+                sections.hitl.gaps.push(`hitl.invalid:${t.id}`);
+            }
+        }
+        const lastShip = events.filter(e => ['ship_done', 'ship_started', 'ship_blocked'].includes(e.tipo)).at(-1);
+        if (lastShip) {
+            const ship = shipView.safeParse(lastShip);
+            if (!ship.success)
+                sections.ship.gaps.push(`ship.invalid:${t.id}`);
+            else {
+                const done = ship.data.tipo === 'ship_done' ? ship.data : null, proven = done?.pushVerificado === true;
+                sections.ship.items.push((0, maestro_sources_1.item)(`ship:${t.id}`, 'Entrega', proven ? 'delivered' : 'incomplete', refs, { pushVerified: proven, mergeSha: done?.mergeSha ?? null, receiptAt: ship.data.ts, receiptAtLocal: local(ship.data.ts) }));
+            }
+        }
+        try {
+            const receipt = reader.json(`.orkastery/threads/${t.id}/master-log.json`);
+            if (receipt) {
+                const pending = receipt.contrato === master_1.CONTRATO_MASTER_PENDENTE;
+                if ((pending ? (0, master_1.validarMasterPendente)(receipt) : (0, master_1.validarMasterLog)(receipt)).length || receipt.thread !== t.id)
+                    throw Error('invalid');
+                sections.master.items.push((0, maestro_sources_1.item)(`master:${t.id}`, pending ? 'Ratificação humana pendente' : 'MASTER', pending ? 'ratificacao-pendente' : 'recorded', refs, { score: pending ? null : typeof receipt.score === 'number' ? receipt.score : null }));
+            }
+            else if (lastShip || t.faseAtual === 'MASTER')
+                sections.master.items.push((0, maestro_sources_1.item)(`master:${t.id}`, 'Score humano pendente', 'pending', refs, { score: null }));
+        }
+        catch {
+            sections.master.gaps.push(`master.invalid:${t.id}`);
+        }
+    }
+    try {
+        const leases = reader.list('.orkastery/leases').filter(f => f.endsWith('.json') && f !== 'fila.json')
+            .map(file => leaseView.parse(reader.json(`.orkastery/leases/${file}`)));
+        sections.leases.items = leases.filter(lease => !threadScope || lease.thread === threadScope)
+            .map(lease => (0, maestro_sources_1.item)(lease.nome.slice(0, 160), 'Região reservada', Date.parse(lease.expiraEm) <= Date.parse(now) ? 'expired' : 'active', [{ kind: 'thread', id: lease.thread }], { expiresAt: lease.expiraEm, expiresAtLocal: local(lease.expiraEm) }));
+    }
+    catch {
+        sections.leases.state = 'unavailable';
+        sections.leases.gaps.push('leases.unavailable');
+    }
+    try {
+        const raw = reader.read('.orkastery/retry/fila.jsonl') ?? '';
+        const queue = new Map();
+        for (const line of raw.split('\n').filter(Boolean)) {
+            const retry = retryView.parse(JSON.parse(line));
+            queue.set(retry.id, retry);
+        }
+        sections.retries.items = [...queue.values()].filter(retry => !threadScope || retry.thread === threadScope)
+            .map(retry => (0, maestro_sources_1.item)(retry.id, 'Retomada', retry.estado === 'aguardando' && Date.parse(retry.liberaEm) <= Date.parse(now) ? 'due' : retry.estado, [{ kind: 'thread', id: retry.thread }], { availableAt: retry.liberaEm, availableAtLocal: local(retry.liberaEm), attempts: retry.tentativas }));
+    }
+    catch {
+        sections.retries.state = 'unavailable';
+        sections.retries.gaps.push('retries.unavailable');
+    }
+    for (const section of Object.values(sections))
+        if (section.gaps.length)
+            section.state = 'unavailable';
+    return sections;
+}
+/** Detalhe nativo isolado do event loop, com deadline efetivo inclusive para CLI síncrono. */
+function nativeForThread(root, threadId) {
+    if (!path.isAbsolute(root) || !/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,79}$/.test(threadId))
+        throw Error('maestro.project.scope');
+    const result = (0, node_child_process_1.spawnSync)(process.execPath, [__filename, '--native', root, threadId], {
+        encoding: 'utf8', timeout: 2000, killSignal: 'SIGKILL', maxBuffer: 1048576,
+        env: { PATH: process.env.PATH, HOME: process.env.HOME, LANG: 'C.UTF-8' },
+    });
+    if (result.status !== 0 || result.error)
+        return [];
+    try {
+        const list = JSON.parse(result.stdout);
+        return Array.isArray(list) ? list : [];
+    }
+    catch {
+        return [];
+    }
+}
+if (require.main === module && process.argv[2] === '--native') {
+    try {
+        const root = process.argv[3], id = process.argv[4], t = (0, thread_1.lerThread)(root, id), cwd = path.resolve(t.worktree ?? root);
+        const result = [];
+        const claude = t.sessoes.some(s => s.runtime === 'claude-bg') ? (0, claude_bg_1.consultarSessoes)(cwd, true) : null;
+        for (const s of t.sessoes) {
+            try {
+                if (s.runtime === 'claude-bg') {
+                    const matches = claude?.sessoes.filter(n => n.sessionId === s.sessionId && n.cwd === cwd) ?? [];
+                    if (claude?.ok && matches.length === 1)
+                        result.push({ sessionId: s.sessionId, runtime: s.runtime, state: matches[0].state, status: matches[0].status });
+                }
+                else if (s.runtime === 'codex') {
+                    const obs = (0, hitl_sessions_1.controleNativo)(s.runtime, root, id, s.sessionId).consultar();
+                    const matches = obs.sessoes.filter(n => n.sessionId === s.sessionId && n.cwd === cwd);
+                    if (obs.ok && matches.length === 1)
+                        result.push({ sessionId: s.sessionId, runtime: s.runtime, state: matches[0].estado });
+                }
+            }
+            catch {
+                result.push({ sessionId: s.sessionId, runtime: s.runtime ?? 'claude-bg', reason: 'runtime.unavailable' });
+            }
+        }
+        process.stdout.write(JSON.stringify(result));
+    }
+    catch {
+        process.exitCode = 1;
+    }
+}
+/** Deadline cancela a consulta; nunca transforma indisponibilidade em sessão encerrada. */
+async function observeWithDeadline(read, timeoutMs = 2000) {
+    const controller = new AbortController();
+    let timer;
+    const duration = Number.isFinite(timeoutMs) ? Math.min(2000, Math.max(1, timeoutMs)) : 2000;
+    try {
+        return await Promise.race([new Promise(resolve => {
+                timer = setTimeout(() => { controller.abort(); resolve([]); }, duration);
+            }), Promise.resolve().then(() => read(controller.signal))]);
+    }
+    catch {
+        return [];
+    }
+    finally {
+        clearTimeout(timer);
+        controller.abort();
+    }
+}

package/dist/maestro-snapshot.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maestroSnapshot = maestroSnapshot;
+const maestro_contract_1 = require("./maestro-contract");
+const maestro_discovery_1 = require("./maestro-discovery");
+const maestro_sources_1 = require("./maestro-sources");
+/** Defesa final para TODOS os campos públicos, inclusive facts e identificadores. */
+function publicItem(raw) {
+    const identity = (v) => (0, maestro_sources_1.safeText)(v) === v && v.length <= 160 ? v : `redacted:${(0, maestro_sources_1.digest)(v)}`;
+    const clean = { id: identity(raw.id), title: (0, maestro_sources_1.safeText)(raw.title), status: (0, maestro_sources_1.safeText)(raw.status),
+        refs: raw.refs.slice(0, 16).map(r => ({ kind: identity(r.kind), id: identity(r.id) })),
+        facts: Object.fromEntries(Object.entries(raw.facts).filter(([k]) => /^[a-zA-Z][a-zA-Z0-9_]{0,63}$/.test(k)).slice(0, 24)
+            .map(([k, v]) => [k, /password|senha|secret|token|authorization|api_?key/i.test(k) ? '[redigido]' : typeof v === 'string' ? (0, maestro_sources_1.safeText)(v) : v])),
+        ...(raw.action ? { action: { ...raw.action, reason: (0, maestro_sources_1.safeText)(raw.action.reason),
+                preconditions: raw.action.preconditions.slice(0, 10).map(maestro_sources_1.safeText), readback: (0, maestro_sources_1.safeText)(raw.action.readback) } } : {}) };
+    if (JSON.stringify(raw) !== JSON.stringify(clean)) {
+        if (clean.action)
+            clean.action = { ...clean.action, available: false, reason: 'maestro.source.redacted_identity' };
+    }
+    if (Buffer.byteLength(JSON.stringify(clean)) > 2048)
+        return { ...clean, title: clean.title.slice(0, 160),
+            refs: [], facts: { reason: 'maestro.item.limit' },
+            ...(clean.action ? { action: { ...clean.action, available: false, reason: 'maestro.item.limit', preconditions: [], readback: '' } } : {}) };
+    return clean;
+}
+function publicMessages(values, limit) {
+    return [...values.slice(0, limit).map(maestro_sources_1.safeText), ...(values.length > limit ? [`maestro.messages.omitted:${values.length - limit}`] : [])];
+}
+function maestroSnapshot(context, options = {}) {
+    const clock = options.clock ?? Date.now, started = clock();
+    (0, maestro_discovery_1.revalidateMaestroContext)(context);
+    const collect = options.collect ?? (ctx => (0, maestro_sources_1.collectMaestroSources)(ctx, options));
+    let sources = collect(context), stable = sources.unchanged();
+    if (!stable && clock() - started < maestro_contract_1.MAESTRO_LIMITS.totalMs) {
+        sources = collect(context);
+        stable = sources.unchanged();
+    }
+    const timedOut = clock() - started >= maestro_contract_1.MAESTRO_LIMITS.totalMs;
+    if (timedOut)
+        sources = { ...sources, sections: {}, gaps: ['maestro.snapshot.timeout'], conflicts: [] };
+    const observedAt = new Date().toISOString(), sections = {};
+    for (const name of maestro_contract_1.SECTION_NAMES) {
+        const src = sources.sections[name], all = [...(src?.items ?? [])].sort((a, b) => a.id.localeCompare(b.id));
+        const requested = options.offsets?.[name] ?? 0;
+        if (!Number.isSafeInteger(requested) || requested < 0)
+            throw Error('maestro.page.invalid');
+        const offset = Math.min(requested, all.length), items = all.slice(offset, offset + 50).map(publicItem), omitted = all.length - offset - items.length;
+        const unavailable = !src || src.state === 'unavailable';
+        const state = timedOut ? 'unavailable' : !stable ? 'conflict' : unavailable ? 'unavailable' : src.state ?? (all.length ? 'available' : 'empty');
+        sections[name] = { state, source: (0, maestro_sources_1.safeText)(src?.source ?? name).slice(0, 160), observedAt, fingerprint: src ? (0, maestro_sources_1.digest)(src) : null,
+            coverage: { total: unavailable ? null : all.length, offset, returned: items.length, omitted: unavailable ? null : omitted,
+                nextOffset: omitted ? offset + items.length : null, limit: 50 }, items, gaps: publicMessages(src?.gaps ?? ['maestro.source.unavailable'], 4) };
+    }
+    const result = { schema: maestro_contract_1.MAESTRO_SCHEMA, observedAt, fingerprint: (0, maestro_sources_1.digest)([context.fingerprint, sources.fingerprint]),
+        project: { ...context.project, name: (0, maestro_sources_1.safeText)(context.project.name) }, limits: maestro_contract_1.MAESTRO_LIMITS, sections, gaps: publicMessages(sources.gaps, 12),
+        conflicts: publicMessages([...sources.conflicts, ...(!stable ? ['maestro.snapshot.stale'] : [])], 12) };
+    // Orçamento incremental; mantém um item por seção para nextOffset avançar.
+    const sizes = new Map(Object.values(sections).map(s => [s, Buffer.byteLength(JSON.stringify(s))]));
+    let bytes = Buffer.byteLength(JSON.stringify(result));
+    while (bytes > maestro_contract_1.MAESTRO_LIMITS.bytes) {
+        const section = Object.values(sections).filter(s => s.items.length > 1).sort((a, b) => sizes.get(b) - sizes.get(a))[0];
+        if (!section)
+            throw Error('maestro.snapshot.size');
+        section.items.pop();
+        section.coverage.returned = section.items.length;
+        if (section.coverage.omitted !== null)
+            section.coverage.omitted++;
+        section.coverage.nextOffset = section.items.length ? section.coverage.offset + section.items.length : null;
+        if (!section.gaps.includes('maestro.page.byte_limit'))
+            section.gaps.push('maestro.page.byte_limit');
+        const size = Buffer.byteLength(JSON.stringify(section));
+        bytes += size - sizes.get(section);
+        sizes.set(section, size);
+    }
+    // Inclui projeção e serialização no prazo total; vence sem ações utilizáveis.
+    if (clock() - started >= maestro_contract_1.MAESTRO_LIMITS.totalMs) {
+        result.gaps = ['maestro.snapshot.timeout'];
+        for (const section of Object.values(sections)) {
+            section.state = 'unavailable';
+            section.items = [];
+            section.coverage = { total: null, offset: 0, returned: 0, omitted: null, nextOffset: null, limit: 50 };
+        }
+    }
+    (0, maestro_discovery_1.revalidateMaestroContext)(context);
+    return (0, maestro_contract_1.validateMaestroSnapshot)(result);
+}

package/dist/maestro-sources.js

@@ -0,0 +1,224 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MaestroReader = exports.item = exports.safeText = exports.digest = void 0;
+exports.collectMaestroSources = collectMaestroSources;
+/** Projeções das fontes canônicas. Nunca cria estado nem usa títulos como vínculo. */
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const zod_1 = require("zod");
+const hitl_1 = require("./hitl");
+const maestro_discovery_1 = require("./maestro-discovery");
+const maestro_runtime_1 = require("./maestro-runtime");
+const digest = (value) => (0, node_crypto_1.createHash)('sha256').update(JSON.stringify(value)).digest('hex');
+exports.digest = digest;
+const safeText = (value) => (0, hitl_1.redigirSegredos)(String(value ?? ''))
+    .replace(/\/(?:home|tmp|etc|root)\/[^\s]+/g, '[caminho privado]').slice(0, 512);
+exports.safeText = safeText;
+const item = (id, title, status, refs = [], facts = {}) => ({ id, title: (0, exports.safeText)(title), status: (0, exports.safeText)(status), refs: refs.slice(0, 16), facts });
+exports.item = item;
+/** Bounded, regular, physical files only. Re-check tracks missing files and directories too. */
+class MaestroReader {
+    root;
+    versions = new Map();
+    bytes = 0;
+    start = Date.now();
+    constructor(root) {
+        this.root = root;
+    }
+    inspect(relative, file) {
+        if (Date.now() - this.start > 2000)
+            throw Error('maestro.source.timeout');
+        if (path.isAbsolute(relative) || relative.split('/').some(x => x === '..' || x === '.'))
+            throw Error('maestro.project.scope');
+        const name = path.join(this.root, relative);
+        let cursor = this.root;
+        for (const part of relative.split('/')) {
+            cursor = path.join(cursor, part);
+            const s = fs.lstatSync(cursor, { throwIfNoEntry: false });
+            if (s?.isSymbolicLink())
+                throw Error('maestro.project.scope');
+        }
+        if (!fs.existsSync(name))
+            return 'missing';
+        const stat = fs.statSync(name);
+        if (file ? !stat.isFile() || stat.size > 1048576 : !stat.isDirectory())
+            throw Error('maestro.source.invalid');
+        return `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}:${stat.ctimeMs}`;
+    }
+    list(relative) {
+        const version = this.inspect(relative, false);
+        this.versions.set(relative + '/', version);
+        if (version === 'missing')
+            return [];
+        const names = fs.readdirSync(path.join(this.root, relative)).sort();
+        if (names.length > 10000)
+            throw Error('maestro.source.limit');
+        return names;
+    }
+    read(relative) {
+        const version = this.inspect(relative, true);
+        this.versions.set(relative, version);
+        if (version === 'missing')
+            return null;
+        const fd = fs.openSync(path.join(this.root, relative), fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        try {
+            const s = fs.fstatSync(fd);
+            if (!s.isFile() || s.size > 1048576 || (this.bytes += s.size) > 33554432)
+                throw Error('maestro.source.limit');
+            const bytes = Buffer.alloc(s.size + 1), count = fs.readSync(fd, bytes, 0, bytes.length, 0);
+            if (count > s.size || this.inspect(relative, true) !== version)
+                throw Error('maestro.snapshot.stale');
+            return bytes.subarray(0, count).toString('utf8');
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    json(relative) { const text = this.read(relative); return text === null ? null : JSON.parse(text); }
+    fingerprint() { return (0, exports.digest)([...this.versions].sort()); }
+    unchanged() {
+        try {
+            return [...this.versions].every(([file, version]) => this.inspect(file.replace(/\/$/, ''), !file.endsWith('/')) === version);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.MaestroReader = MaestroReader;
+const validId = (s) => /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,79}$/.test(s);
+// Validar os campos consumidos antes de publicar um valor para outras fontes.
+const sourceId = zod_1.z.string().refine(validId);
+const entityView = zod_1.z.object({ id: sourceId, title: zod_1.z.string(), status: zod_1.z.string() });
+const portfolioView = zod_1.z.object({ schema: zod_1.z.literal('ork.portfolio/v1'),
+    products: zod_1.z.array(entityView.extend({ kind: zod_1.z.literal('product') })),
+    projects: zod_1.z.array(entityView.extend({ kind: zod_1.z.literal('project'), productId: sourceId })),
+    initiatives: zod_1.z.array(entityView.extend({ kind: zod_1.z.literal('initiative'), projectId: sourceId })),
+});
+const objectiveView = zod_1.z.object({ schema: zod_1.z.literal('ork.objective/v1'), id: sourceId,
+    title: zod_1.z.string(), status: zod_1.z.string(), threads: zod_1.z.array(zod_1.z.object({ id: sourceId })),
+    envelope: zod_1.z.object({ schema: zod_1.z.literal('ork.objective-envelope/v1'), hash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+        portfolio: zod_1.z.object({ productId: sourceId, projectId: sourceId, initiativeIds: zod_1.z.array(sourceId) }).nullable() }),
+});
+const threadView = zod_1.z.object({ id: sourceId, nome: zod_1.z.string(), status: zod_1.z.string(), faseAtual: zod_1.z.string(), modo: zod_1.z.string(),
+    sessoes: zod_1.z.array(zod_1.z.object({ sessionId: sourceId, fase: zod_1.z.string(), runtime: zod_1.z.string().optional() })),
+    blocos: zod_1.z.array(zod_1.z.object({ fases: zod_1.z.array(zod_1.z.string()), slugFases: zod_1.z.string() })),
+});
+function collectMaestroSources(context, options = {}) {
+    (0, maestro_discovery_1.revalidateMaestroContext)(context);
+    const reader = new MaestroReader(context.root), sections = {}, gaps = [], conflicts = [];
+    const source = (name, reference, read) => {
+        try {
+            sections[name] = { source: reference, items: read(), gaps: [] };
+        }
+        catch {
+            sections[name] = { source: reference, items: [], gaps: ['maestro.source.unavailable'], state: 'unavailable' };
+        }
+    };
+    let objectives = [], threads = [];
+    source('portfolio', 'ork.portfolio/v1', () => {
+        const portfolio = reader.json('.orkastery/portfolio.json');
+        if (!portfolio || !portfolioView.safeParse(portfolio).success)
+            throw Error('unavailable');
+        return [...portfolio.products, ...portfolio.projects, ...portfolio.initiatives].map(p => (0, exports.item)(p.id, p.title, p.status, 'productId' in p ? [{ kind: 'product', id: p.productId }] : 'projectId' in p ? [{ kind: 'project', id: p.projectId }] : [], { kind: p.kind, deliveryProven: false, origin: 'creationOperationId' in p && p.creationOperationId ? 'creation.operation' : 'legacy' }));
+    });
+    source('demands', 'ork.objective/v1', () => {
+        let loaded = reader.list('.orkastery/objectives').map(id => {
+            if (!validId(id))
+                throw Error('invalid');
+            const value = reader.json(`.orkastery/objectives/${id}/objective.json`);
+            if (!value || value.id !== id || !objectiveView.safeParse(value).success)
+                throw Error('invalid');
+            return value;
+        });
+        if (options.threadId)
+            loaded = loaded.filter(o => o.threads.some(t => t.id === options.threadId));
+        const items = loaded.map(o => {
+            const p = o.envelope.portfolio;
+            return (0, exports.item)(o.id, o.title, o.status, [...(p ? [{ kind: 'product', id: p.productId }, { kind: 'project', id: p.projectId },
+                    ...p.initiativeIds.map(id => ({ kind: 'initiative', id }))] : []), ...o.threads.map(t => ({ kind: 'thread', id: t.id }))], { threadCount: o.threads.length, envelopeHash: o.envelope.hash });
+        });
+        objectives = loaded;
+        for (const o of loaded)
+            if (!o.threads.length)
+                gaps.push(`demand.without_thread:${o.id}`);
+        return items;
+    });
+    source('threads', 'ork.thread', () => {
+        const ids = options.threadId ? [options.threadId] : reader.list('.orkastery/threads');
+        const loaded = ids.map(id => {
+            if (!validId(id))
+                throw Error('invalid');
+            const t = reader.json(`.orkastery/threads/${id}/thread.json`);
+            if (!t || t.id !== id || !threadView.safeParse(t).success)
+                throw Error('invalid');
+            return t;
+        });
+        const items = loaded.map(t => {
+            const matches = objectives.filter(o => o.threads.some(v => v.id === t.id));
+            return (0, exports.item)(t.id, t.nome, t.status, matches.map(o => ({ kind: 'objective', id: o.id })), { phase: t.faseAtual, mode: t.modo, sessionCount: t.sessoes.length, block: t.blocos.find(b => b.fases.includes(t.faseAtual))?.slugFases ?? null });
+        });
+        threads = loaded;
+        if (sections.demands?.state !== 'unavailable')
+            for (const t of loaded) {
+                if (!objectives.some(o => o.threads.some(v => v.id === t.id)))
+                    gaps.push(`thread.without_objective:${t.id}`);
+            }
+        return items;
+    });
+    if (sections.demands?.state === 'unavailable') {
+        sections.threads?.gaps.push('demands.unavailable');
+        sections.portfolio?.gaps.push('demands.unavailable');
+    }
+    for (const p of sections.demands?.state === 'unavailable' ? [] : sections.portfolio?.items ?? []) {
+        const matches = objectives.filter(o => o.envelope.portfolio && (o.envelope.portfolio.productId === p.id ||
+            o.envelope.portfolio.projectId === p.id || o.envelope.portfolio.initiativeIds.includes(p.id)));
+        if (!matches.length)
+            gaps.push(`portfolio.without_demand:${p.id}`);
+        if (p.status === 'delivered' && matches.some(o => ['running', 'paused', 'awaiting_approval'].includes(o.status)))
+            conflicts.push(`entity.delivered_cycle_open:${p.id}`);
+    }
+    Object.assign(sections, (0, maestro_runtime_1.operationalSources)(reader, threads, options.native, undefined, options.threadId));
+    if (sections.threads?.state === 'unavailable') {
+        for (const name of ['sessions', 'blockers', 'hitl', 'ship', 'master']) {
+            const section = sections[name];
+            section.state = 'unavailable';
+            section.gaps.push('threads.unavailable');
+        }
+    }
+    return { sections, fingerprint: reader.fingerprint(), gaps, conflicts, unchanged: () => reader.unchanged() };
+}