@ornexus/neocortex 4.60.73 → 4.60.75

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (269) hide show
  1. package/dist/release-source.json +1 -1
  2. package/dist/sbom.cdx.json +1216 -1210
  3. package/install.ps1 +1 -1
  4. package/install.sh +1 -1
  5. package/package.json +2 -2
  6. package/packages/client/dist/adapters/adapter-registry.js +1 -108
  7. package/packages/client/dist/adapters/antigravity-adapter.js +2 -77
  8. package/packages/client/dist/adapters/claude-code-adapter.js +3 -79
  9. package/packages/client/dist/adapters/codex-adapter.js +2 -80
  10. package/packages/client/dist/adapters/cursor-adapter.js +4 -115
  11. package/packages/client/dist/adapters/gemini-adapter.js +2 -71
  12. package/packages/client/dist/adapters/grok-adapter.js +2 -42
  13. package/packages/client/dist/adapters/index.js +1 -22
  14. package/packages/client/dist/adapters/platform-detector.js +1 -212
  15. package/packages/client/dist/adapters/target-adapter.js +0 -12
  16. package/packages/client/dist/adapters/vscode-adapter.js +2 -72
  17. package/packages/client/dist/agent/refresh-stubs.js +2 -417
  18. package/packages/client/dist/agent/update-agent-yaml.js +1 -102
  19. package/packages/client/dist/agent/update-description.js +1 -251
  20. package/packages/client/dist/cache/crypto-utils.js +1 -78
  21. package/packages/client/dist/cache/encrypted-cache.d.ts +27 -0
  22. package/packages/client/dist/cache/encrypted-cache.js +1 -108
  23. package/packages/client/dist/cache/in-memory-asset-cache.js +1 -73
  24. package/packages/client/dist/cache/index.js +1 -13
  25. package/packages/client/dist/cache/protected-pi-boundary.js +1 -44
  26. package/packages/client/dist/checkpoint/checkpoint-client-reader.js +2 -127
  27. package/packages/client/dist/checkpoint/index.js +1 -11
  28. package/packages/client/dist/checkpoint/shared-checkpoint-types.js +1 -32
  29. package/packages/client/dist/cli.js +5 -358
  30. package/packages/client/dist/commands/activate.js +8 -394
  31. package/packages/client/dist/commands/architecture-answers.js +7 -274
  32. package/packages/client/dist/commands/architecture-memory-terminal.js +4 -253
  33. package/packages/client/dist/commands/architecture-non-ui-continuation.js +1 -100
  34. package/packages/client/dist/commands/architecture-root-binding.js +1 -51
  35. package/packages/client/dist/commands/cache-status.js +2 -112
  36. package/packages/client/dist/commands/config.js +1 -88
  37. package/packages/client/dist/commands/doctor.js +2 -635
  38. package/packages/client/dist/commands/invoke.d.ts +38 -1
  39. package/packages/client/dist/commands/invoke.js +143 -7200
  40. package/packages/client/dist/commands/legacy-epic-terminal.js +1 -71
  41. package/packages/client/dist/commands/legacy-story-branch.js +1 -96
  42. package/packages/client/dist/commands/legacy-story-pr.js +1 -276
  43. package/packages/client/dist/commands/mutation-qa-checkpoint.js +5 -285
  44. package/packages/client/dist/commands/mutation-qa-gate.js +1 -54
  45. package/packages/client/dist/commands/mutation-qa-git.js +1 -41
  46. package/packages/client/dist/commands/mutation-qa-policy.js +1 -102
  47. package/packages/client/dist/commands/mutation-qa-run.js +3 -219
  48. package/packages/client/dist/commands/mutation-qa-verdict.js +1 -149
  49. package/packages/client/dist/commands/mutation-qa.js +1 -220
  50. package/packages/client/dist/commands/native-agent.js +2 -136
  51. package/packages/client/dist/commands/planning-diagnosis.js +1 -43
  52. package/packages/client/dist/commands/planning-generation.js +1 -53
  53. package/packages/client/dist/commands/planning-memory.js +1 -40
  54. package/packages/client/dist/commands/planning-research.js +1 -42
  55. package/packages/client/dist/commands/private-session.js +1 -75
  56. package/packages/client/dist/commands/property-qa.js +1 -139
  57. package/packages/client/dist/commands/qa-control.js +1 -16
  58. package/packages/client/dist/commands/qa-scan-browser-launch.js +1 -55
  59. package/packages/client/dist/commands/qa-scan-browser-route.js +1 -28
  60. package/packages/client/dist/commands/qa-scan-capture.js +5 -663
  61. package/packages/client/dist/commands/qa-scan-discovery.js +3 -376
  62. package/packages/client/dist/commands/qa-scan-review.js +5 -826
  63. package/packages/client/dist/commands/qa-synthetic-backend-capture.js +1 -266
  64. package/packages/client/dist/commands/qa-synthetic-backend-review.js +1 -297
  65. package/packages/client/dist/commands/qa-synthetic-backend.js +2 -340
  66. package/packages/client/dist/commands/qa-synthetic-broker-port.js +1 -85
  67. package/packages/client/dist/commands/qa-synthetic-browser.js +1 -39
  68. package/packages/client/dist/commands/refactor-characterization.js +21 -671
  69. package/packages/client/dist/commands/refactor-commit.js +13 -399
  70. package/packages/client/dist/commands/refactor-control.js +3 -142
  71. package/packages/client/dist/commands/refactor-cpp-assertions.js +3 -93
  72. package/packages/client/dist/commands/refactor-review.js +5 -283
  73. package/packages/client/dist/commands/refactor-root.js +7 -588
  74. package/packages/client/dist/commands/refresh-memory.js +3 -156
  75. package/packages/client/dist/commands/shared-architecture-non-ui.js +1 -24
  76. package/packages/client/dist/commands/story-checkpoint.js +1 -171
  77. package/packages/client/dist/config/host-auth-broker.d.ts +31 -0
  78. package/packages/client/dist/config/host-auth-broker.js +1 -0
  79. package/packages/client/dist/config/host-auth-reference.d.ts +32 -0
  80. package/packages/client/dist/config/host-auth-reference.js +1 -0
  81. package/packages/client/dist/config/profile-directory.js +1 -13
  82. package/packages/client/dist/config/resolver-selection.js +1 -278
  83. package/packages/client/dist/config/secure-config.js +12 -281
  84. package/packages/client/dist/config.js +2 -223
  85. package/packages/client/dist/constants.js +1 -25
  86. package/packages/client/dist/context/context-collector.js +2 -222
  87. package/packages/client/dist/context/context-sanitizer.js +1 -145
  88. package/packages/client/dist/continuity/autonomous-governance.js +1 -285
  89. package/packages/client/dist/continuity/continuity-client-state-store.js +1 -1587
  90. package/packages/client/dist/continuity/invoke-hooks.js +1 -129
  91. package/packages/client/dist/continuity/migrations/001-initial-schema.js +2 -12
  92. package/packages/client/dist/continuity/migrations/002-processing-output-summary-indexes.js +2 -12
  93. package/packages/client/dist/continuity/migrations/003-headless-execution-attempts.js +2 -12
  94. package/packages/client/dist/continuity/migrations/004-outbox-delivery-state.js +2 -12
  95. package/packages/client/dist/continuity/migrations/005-bounded-headless-queue.js +2 -12
  96. package/packages/client/dist/continuity/migrations/006-native-agent-dispatches.js +2 -10
  97. package/packages/client/dist/continuity/native-agent-store.js +1 -69
  98. package/packages/client/dist/continuity/native-agent-types.d.ts +11 -0
  99. package/packages/client/dist/continuity/native-agent-types.js +1 -90
  100. package/packages/client/dist/continuity/outbox.js +1 -117
  101. package/packages/client/dist/continuity/runner-bootstrap-policy.js +1 -172
  102. package/packages/client/dist/continuity/sqlite-store.js +81 -2612
  103. package/packages/client/dist/effects/invoke-effect-gateways.js +1 -62
  104. package/packages/client/dist/errors/error-messages.d.ts +3 -0
  105. package/packages/client/dist/errors/error-messages.js +2 -228
  106. package/packages/client/dist/errors/frontmatter-diagnostics.js +1 -125
  107. package/packages/client/dist/evidence/collector.js +1 -347
  108. package/packages/client/dist/evidence/index.js +1 -1
  109. package/packages/client/dist/evidence/types.js +0 -2
  110. package/packages/client/dist/fs/atomic-state-replace.js +1 -152
  111. package/packages/client/dist/generated/command-registry.generated.js +1 -4076
  112. package/packages/client/dist/generated/public-projections.generated.js +1 -149
  113. package/packages/client/dist/git/direct-yolo-c01-retry.js +4 -138
  114. package/packages/client/dist/git/direct-yolo-checkpoint.d.ts +11 -1
  115. package/packages/client/dist/git/direct-yolo-checkpoint.js +4 -1234
  116. package/packages/client/dist/git/epic-operational-state.js +2 -672
  117. package/packages/client/dist/git/git-lifecycle-step-ids.js +1 -14
  118. package/packages/client/dist/git/git-lifecycle-store.d.ts +23 -0
  119. package/packages/client/dist/git/git-lifecycle-store.js +10 -1981
  120. package/packages/client/dist/git/legacy-story-branch-checkpoint.js +9 -259
  121. package/packages/client/dist/git/legacy-story-branch-setup.js +4 -348
  122. package/packages/client/dist/git/legacy-story-pr.js +70 -3538
  123. package/packages/client/dist/git/secure-filesystem-boundary.js +5 -182
  124. package/packages/client/dist/graph-retrieval/pre-command-hook.js +1 -284
  125. package/packages/client/dist/graph-retrieval/shared-graph-retrieval-contract.js +1 -237
  126. package/packages/client/dist/i18n/first-run.js +2 -60
  127. package/packages/client/dist/index.d.ts +2 -0
  128. package/packages/client/dist/index.js +1 -47
  129. package/packages/client/dist/invocation/invoke-input.js +1 -24
  130. package/packages/client/dist/license/host-auth-recovery.d.ts +158 -0
  131. package/packages/client/dist/license/host-auth-recovery.js +1 -0
  132. package/packages/client/dist/license/index.js +1 -5
  133. package/packages/client/dist/license/license-client.d.ts +10 -1
  134. package/packages/client/dist/license/license-client.js +1 -304
  135. package/packages/client/dist/machine/fingerprint.js +2 -163
  136. package/packages/client/dist/machine/index.js +1 -5
  137. package/packages/client/dist/memory/project-memory-path-scope.js +1 -62
  138. package/packages/client/dist/memory/project-memory-writer.js +40 -1007
  139. package/packages/client/dist/memory/shared-project-memory-types.js +2 -253
  140. package/packages/client/dist/migrations/epic-lifecycle-backfill.js +3 -1060
  141. package/packages/client/dist/migrations/project-identity-capability.js +1 -50
  142. package/packages/client/dist/migrations/project-identity.js +7 -493
  143. package/packages/client/dist/migrations/state-json.js +4 -393
  144. package/packages/client/dist/policy/architecture-policy.js +2 -184
  145. package/packages/client/dist/policy/index.js +1 -7
  146. package/packages/client/dist/policy/shared-policy-types.js +0 -38
  147. package/packages/client/dist/policy/subagent-approval-policy.js +1 -55
  148. package/packages/client/dist/private-execution/clean-baseline.js +2 -279
  149. package/packages/client/dist/private-execution/codex-executor.js +4 -574
  150. package/packages/client/dist/private-execution/codex-host-runtime.js +1 -137
  151. package/packages/client/dist/private-execution/codex-lifecycle-guard.js +1 -97
  152. package/packages/client/dist/private-execution/codex-scoped-permissions.js +1 -128
  153. package/packages/client/dist/private-execution/delivery.js +13 -410
  154. package/packages/client/dist/private-execution/diagnosis-root-review.js +2 -294
  155. package/packages/client/dist/private-execution/frozen-handoff.js +6 -19
  156. package/packages/client/dist/private-execution/implementation-validation.js +2 -106
  157. package/packages/client/dist/private-execution/isolated-admission.js +23 -1432
  158. package/packages/client/dist/private-execution/isolated-session.js +5 -725
  159. package/packages/client/dist/private-execution/isolated-workspace.js +1 -122
  160. package/packages/client/dist/private-execution/pact-consumer-runtime.js +3 -409
  161. package/packages/client/dist/private-execution/pact-test-source.js +1 -258
  162. package/packages/client/dist/private-execution/pact-toolchain.js +3 -290
  163. package/packages/client/dist/private-execution/pact-write-set.js +1 -172
  164. package/packages/client/dist/private-execution/planning-diagnosis-checkpoint.js +5 -406
  165. package/packages/client/dist/private-execution/planning-generation-checkpoint.js +5 -462
  166. package/packages/client/dist/private-execution/planning-memory-checkpoint.js +3 -139
  167. package/packages/client/dist/private-execution/planning-research-checkpoint.js +4 -325
  168. package/packages/client/dist/private-execution/private-report-store.js +1 -42
  169. package/packages/client/dist/private-execution/property-test-candidate.js +1 -103
  170. package/packages/client/dist/private-execution/property-test-choices.js +3 -147
  171. package/packages/client/dist/private-execution/property-test-plan.js +7 -271
  172. package/packages/client/dist/private-execution/property-test-review.js +4 -258
  173. package/packages/client/dist/private-execution/property-test-runtime.js +9 -372
  174. package/packages/client/dist/private-execution/property-test-source.js +1 -139
  175. package/packages/client/dist/private-execution/root-checkpoint.js +1 -80
  176. package/packages/client/dist/private-execution/root-memory-git-evidence.js +3 -135
  177. package/packages/client/dist/private-execution/root-memory-recovery.js +1 -93
  178. package/packages/client/dist/private-execution/root-memory-request.js +1 -29
  179. package/packages/client/dist/private-execution/root-memory-scope.js +1 -178
  180. package/packages/client/dist/private-execution/root-memory-writer.js +1 -102
  181. package/packages/client/dist/private-execution/session-lease.js +1 -63
  182. package/packages/client/dist/private-execution/shared-private-admission-types.js +1 -50
  183. package/packages/client/dist/private-execution/shared-project-validation.js +1 -66
  184. package/packages/client/dist/private-execution/shared-root-memory-types.js +1 -61
  185. package/packages/client/dist/private-execution/ux-source-validation.js +1 -372
  186. package/packages/client/dist/private-execution/ux-write-set.js +2 -191
  187. package/packages/client/dist/registry/registry-reconciliation.js +1 -234
  188. package/packages/client/dist/resilience/circuit-breaker.js +1 -170
  189. package/packages/client/dist/resilience/degradation-manager.js +1 -164
  190. package/packages/client/dist/resilience/freshness-indicator.js +1 -100
  191. package/packages/client/dist/resilience/index.js +1 -8
  192. package/packages/client/dist/resilience/recovery-detector.js +1 -74
  193. package/packages/client/dist/resolvers/asset-resolver.js +0 -13
  194. package/packages/client/dist/resolvers/local-resolver.js +8 -255
  195. package/packages/client/dist/resolvers/remote-resolver.js +1 -233
  196. package/packages/client/dist/runner/binary.js +1 -404
  197. package/packages/client/dist/runner/cli.js +17 -1571
  198. package/packages/client/dist/runner/epic-background-dispatcher.d.ts +61 -0
  199. package/packages/client/dist/runner/epic-background-dispatcher.js +1 -0
  200. package/packages/client/dist/runner/headless/adapters.js +1 -49
  201. package/packages/client/dist/runner/headless/background-root.d.ts +65 -0
  202. package/packages/client/dist/runner/headless/background-root.js +1 -0
  203. package/packages/client/dist/runner/headless/claude-code-adapter.js +1 -79
  204. package/packages/client/dist/runner/headless/continuous-story-workspace.js +11 -1628
  205. package/packages/client/dist/runner/headless/epic-git-reconciliation-inventory.js +1 -69
  206. package/packages/client/dist/runner/headless/epic-merge-candidate-qa.d.ts +1 -1
  207. package/packages/client/dist/runner/headless/epic-merge-candidate-qa.js +2 -110
  208. package/packages/client/dist/runner/headless/epic-terminal-git-cli-adapter.d.ts +2 -0
  209. package/packages/client/dist/runner/headless/epic-terminal-git-cli-adapter.js +10 -1236
  210. package/packages/client/dist/runner/headless/epic-terminal-git-runner.d.ts +27 -2
  211. package/packages/client/dist/runner/headless/epic-terminal-git-runner.js +2 -318
  212. package/packages/client/dist/runner/headless/fake-adapter.js +1 -62
  213. package/packages/client/dist/runner/headless/managed-environment-cleanup.d.ts +95 -0
  214. package/packages/client/dist/runner/headless/managed-environment-cleanup.js +1 -0
  215. package/packages/client/dist/runner/headless/managed-profile.js +1 -132
  216. package/packages/client/dist/runner/headless/opencode-adapter.js +2 -145
  217. package/packages/client/dist/runner/headless/prepared-story-bundle.js +1 -43
  218. package/packages/client/dist/runner/headless/resolver.js +1 -231
  219. package/packages/client/dist/runner/headless/run-yolo.js +1 -885
  220. package/packages/client/dist/runner/headless/run-yoloop.d.ts +1 -0
  221. package/packages/client/dist/runner/headless/run-yoloop.js +2 -2574
  222. package/packages/client/dist/runner/headless/types.js +2 -574
  223. package/packages/client/dist/runner/local-console.js +13 -396
  224. package/packages/client/dist/runner/portal-sync-worker.js +1 -1487
  225. package/packages/client/dist/runner/project-identity.js +1 -106
  226. package/packages/client/dist/runner/scheduler.js +7 -995
  227. package/packages/client/dist/runner-cli.js +2 -18
  228. package/packages/client/dist/state/invocation-shape.js +1 -13
  229. package/packages/client/dist/state/project-state-snapshot.d.ts +7 -0
  230. package/packages/client/dist/state/project-state-snapshot.js +1 -1731
  231. package/packages/client/dist/state/state-json-repair.js +3 -785
  232. package/packages/client/dist/state/structural-dag-projection.js +1 -118
  233. package/packages/client/dist/telemetry/index.js +1 -5
  234. package/packages/client/dist/telemetry/offline-queue.js +1 -131
  235. package/packages/client/dist/tier/index.js +1 -5
  236. package/packages/client/dist/tier/tier-aware-client.js +1 -405
  237. package/packages/client/dist/types/index.js +1 -38
  238. package/packages/client/dist/version.js +1 -27
  239. package/packages/client/dist/yolo/change-evidence-collector.d.ts +21 -1
  240. package/packages/client/dist/yolo/change-evidence-collector.js +1 -126
  241. package/packages/client/dist/yolo/invoke-envelope-capability.js +1 -62
  242. package/packages/client/dist/yolo/spec-envelope-collector.js +5 -184
  243. package/packages/client/dist/yoloop/discovery-hook.js +2 -300
  244. package/packages/client/dist/yoloop/index.js +1 -8
  245. package/packages/client/dist/yoloop/invoke-hooks.js +12 -669
  246. package/packages/client/dist/yoloop/shared-discover-epics.js +1 -1007
  247. package/packages/client/dist/yoloop/shared-yoloop-types.js +1 -33
  248. package/packages/client/dist/yoloop/target-normalization.js +1 -180
  249. package/packages/client/dist/yoloop/yoloop-client-state-store.js +1 -1920
  250. package/packages/shared/dist/invocation/explicit-intent-recovery.d.ts +83 -0
  251. package/packages/shared/dist/invocation/explicit-intent-recovery.js +187 -0
  252. package/packages/shared/dist/invocation/index.d.ts +7 -0
  253. package/packages/shared/dist/invocation/index.js +22 -0
  254. package/packages/shared/dist/yolo/change-evidence.js +1 -1
  255. package/packages/shared/dist/yoloop/epic-terminal-git.js +144 -2
  256. package/targets-stubs/antigravity/gemini.md +1 -1
  257. package/targets-stubs/antigravity/skill/SKILL.md +1 -1
  258. package/targets-stubs/claude-code/neocortex-root.agent.yaml +1 -1
  259. package/targets-stubs/claude-code/neocortex-root.md +2 -2
  260. package/targets-stubs/claude-code/neocortex.agent.yaml +1 -1
  261. package/targets-stubs/claude-code/neocortex.md +2 -2
  262. package/targets-stubs/codex/AGENTS.md +24 -21
  263. package/targets-stubs/codex/README.md +6 -1
  264. package/targets-stubs/codex/neocortex.toml +7 -2
  265. package/targets-stubs/cursor/agent.md +2 -2
  266. package/targets-stubs/gemini-cli/agent.md +2 -2
  267. package/targets-stubs/opencode/neocortex-root.md +16 -1
  268. package/targets-stubs/opencode/neocortex.md +6 -0
  269. package/targets-stubs/vscode/neocortex.agent.md +2 -2
@@ -1,237 +1 @@
1
- /**
2
- * P158.06 client-side SSoT shadow for graph retrieval metadata.
3
- *
4
- * Mirrored from @neocortex/shared/graph-retrieval-contract and the public
5
- * P198.01 command context policy for globally installed clients, where importing
6
- * shared source/dist subpaths can break before the monorepo build has
7
- * materialized dist files.
8
- */
9
- export const GRAPH_RETRIEVAL_SCHEMA_VERSION = 1;
10
- export const GRAPH_RETRIEVAL_CLIENT_CONTRACT_VERSION = 'client-pre-command-v1';
11
- export const COMMAND_CONTEXT_RETRIEVAL_PROFILES = [
12
- 'utility',
13
- 'planning',
14
- 'architecture',
15
- 'diagnostic',
16
- 'research',
17
- 'story-execution',
18
- 'review',
19
- 'qa',
20
- 'security',
21
- 'continuity',
22
- 'recovery',
23
- ];
24
- export const DEFAULT_GRAPH_RETRIEVAL_BUDGETS = {
25
- maxItems: 24,
26
- maxEdges: 64,
27
- maxPayloadBytes: 12 * 1024,
28
- maxSnippetChars: 480,
29
- maxLabelChars: 160,
30
- maxTotalCost: 100,
31
- };
32
- const budget = (value) => Object.freeze({ ...value });
33
- export const CLIENT_GRAPH_RETRIEVAL_PROFILE_BUDGETS = Object.freeze({
34
- utility: budget({ maxItems: 4, maxEdges: 8, maxPayloadBytes: 4 * 1024, maxSnippetChars: 280, maxLabelChars: 96, maxTotalCost: 40 }),
35
- planning: budget({ maxItems: 12, maxEdges: 48, maxPayloadBytes: 8 * 1024, maxSnippetChars: 360, maxLabelChars: 128, maxTotalCost: 70 }),
36
- architecture: budget({ maxItems: 10, maxEdges: 48, maxPayloadBytes: 8 * 1024, maxSnippetChars: 360, maxLabelChars: 128, maxTotalCost: 65 }),
37
- diagnostic: budget({ maxItems: 10, maxEdges: 32, maxPayloadBytes: 8 * 1024, maxSnippetChars: 360, maxLabelChars: 128, maxTotalCost: 60 }),
38
- research: budget({ maxItems: 10, maxEdges: 32, maxPayloadBytes: 8 * 1024, maxSnippetChars: 360, maxLabelChars: 128, maxTotalCost: 60 }),
39
- 'story-execution': budget({ maxItems: 6, maxEdges: 32, maxPayloadBytes: 8 * 1024, maxSnippetChars: 320, maxLabelChars: 128, maxTotalCost: 50 }),
40
- review: budget({ maxItems: 8, maxEdges: 32, maxPayloadBytes: 8 * 1024, maxSnippetChars: 320, maxLabelChars: 128, maxTotalCost: 55 }),
41
- qa: budget({ maxItems: 6, maxEdges: 24, maxPayloadBytes: 8 * 1024, maxSnippetChars: 320, maxLabelChars: 128, maxTotalCost: 50 }),
42
- security: budget({ maxItems: 8, maxEdges: 24, maxPayloadBytes: 8 * 1024, maxSnippetChars: 320, maxLabelChars: 128, maxTotalCost: 55 }),
43
- continuity: budget({ maxItems: 6, maxEdges: 16, maxPayloadBytes: 4 * 1024, maxSnippetChars: 280, maxLabelChars: 96, maxTotalCost: 45 }),
44
- recovery: budget({ maxItems: 8, maxEdges: 32, maxPayloadBytes: 8 * 1024, maxSnippetChars: 320, maxLabelChars: 128, maxTotalCost: 55 }),
45
- });
46
- const policy = (seed) => Object.freeze({
47
- commandId: seed.commandId,
48
- ...(seed.number === undefined ? {} : { number: seed.number }),
49
- aliases: Object.freeze([...(seed.aliases ?? [])]),
50
- retrievalProfile: seed.retrievalProfile,
51
- retrievalBudget: CLIENT_GRAPH_RETRIEVAL_PROFILE_BUDGETS[seed.retrievalProfile],
52
- });
53
- const PUBLIC_COMMAND_POLICY_SEEDS = [
54
- { commandId: 'status', number: 1, aliases: ['st'], retrievalProfile: 'utility' },
55
- { commandId: 'arch-plan', number: 3, aliases: ['arquitetura', 'architecture', 'arch'], retrievalProfile: 'architecture' },
56
- { commandId: 'arch-prd', number: 4, aliases: ['prd', 'product-requirements'], retrievalProfile: 'architecture' },
57
- { commandId: 'arch-architecture', number: 5, aliases: ['arch-doc', 'tech-architecture'], retrievalProfile: 'architecture' },
58
- { commandId: 'arch-api-contracts', number: 6, aliases: ['api-contracts', 'api-contract'], retrievalProfile: 'architecture' },
59
- { commandId: 'arch-api-integrations', number: 7, aliases: ['api-integrations', 'api-int'], retrievalProfile: 'architecture' },
60
- { commandId: 'arch-database', number: 8, aliases: ['database-schema', 'db-schema', 'db'], retrievalProfile: 'architecture' },
61
- { commandId: 'arch-security', number: 9, aliases: ['cyber-security', 'security', 'sec'], retrievalProfile: 'architecture' },
62
- { commandId: 'arch-design-system', number: 10, aliases: ['design-system', 'ds', 'atomic-design'], retrievalProfile: 'architecture' },
63
- { commandId: 'arch-ux-design', number: 11, aliases: ['ux-design', 'ux', 'wireframes', 'wireframe', 'user-flows'], retrievalProfile: 'architecture' },
64
- { commandId: 'arch-performance', number: 12, aliases: ['performance', 'perf', 'capacity-planning', 'capacity', 'arch-perf', 'performance-strategy'], retrievalProfile: 'architecture' },
65
- { commandId: 'arch-testing', number: 13, aliases: ['testing-strategy', 'test-plan', 'test-strategy', 'arch-test'], retrievalProfile: 'architecture' },
66
- { commandId: 'arch-infrastructure', number: 14, aliases: ['infrastructure', 'infra', 'deploy-plan', 'deployment', 'arch-infra', 'arch-deploy'], retrievalProfile: 'architecture' },
67
- { commandId: 'arch-review', number: 15, aliases: ['review-consolidation', 'consolidation', 'architecture-review', 'arch-consolidation'], retrievalProfile: 'architecture' },
68
- { commandId: 'arch-fitness-functions', number: 16, aliases: ['fitness', 'fitness-functions', 'archfit', 'arch-fit', 'fit-funcs'], retrievalProfile: 'architecture' },
69
- { commandId: 'create-epic', number: 17, aliases: ['criar-epic', 'planejamento'], retrievalProfile: 'planning' },
70
- { commandId: 'idea-diagnose', number: 18, aliases: ['idea-diag'], retrievalProfile: 'planning' },
71
- { commandId: 'idea-research', number: 19, aliases: ['idea-pesq'], retrievalProfile: 'planning' },
72
- { commandId: 'generate-epic', number: 20, aliases: ['gerar-epic'], retrievalProfile: 'planning' },
73
- { commandId: 'exec', number: 21, aliases: ['executar', 'pipeline'], retrievalProfile: 'story-execution' },
74
- { commandId: 'yolo', number: 22, retrievalProfile: 'story-execution' },
75
- { commandId: 'epic', number: 23, aliases: ['parallel-epic'], retrievalProfile: 'story-execution' },
76
- { commandId: 'setup-branch', number: 24, aliases: ['setup', 'branch'], retrievalProfile: 'story-execution' },
77
- { commandId: 'diagnose', number: 25, aliases: ['diag', 'diagnostico', 'c02'], retrievalProfile: 'diagnostic' },
78
- { commandId: 'research', number: 26, aliases: ['pesquisar', 'pesq', 'research-fix', 'c03'], retrievalProfile: 'research' },
79
- { commandId: 'write-spec', number: 27, aliases: ['spec', 'especificacao', 'c04'], retrievalProfile: 'story-execution' },
80
- { commandId: 'create-tasks', number: 28, aliases: ['tasks', 'tarefas', 'c05'], retrievalProfile: 'story-execution' },
81
- { commandId: 'implement', number: 29, aliases: ['impl', 'implementar', 'c06'], retrievalProfile: 'story-execution' },
82
- { commandId: 'commit', number: 30, aliases: ['push', 'commit-push', 'commit_push', 'cp', 'c07'], retrievalProfile: 'story-execution' },
83
- { commandId: 'sync', number: 31, aliases: ['sincronizar', 'c08'], retrievalProfile: 'story-execution' },
84
- { commandId: 'create-pr', number: 32, aliases: ['pr', 'c09'], retrievalProfile: 'story-execution' },
85
- { commandId: 'review', number: 33, aliases: ['revisar', 'c11'], retrievalProfile: 'review' },
86
- { commandId: 'merge', number: 34, aliases: ['mesclar', 'c12'], retrievalProfile: 'story-execution' },
87
- { commandId: 'fix-blocked', number: 35, aliases: ['fix', 'corrigir'], retrievalProfile: 'recovery' },
88
- { commandId: 'finalize-epic', number: 36, aliases: ['finalizar'], retrievalProfile: 'recovery' },
89
- { commandId: 'resolve-conflicts', number: 37, aliases: ['conflitos'], retrievalProfile: 'recovery' },
90
- { commandId: 'update-memory', number: 38, aliases: ['memoria'], retrievalProfile: 'recovery' },
91
- { commandId: 'refactor', number: 39, aliases: ['refactoring', 'refact', 'refac', 'rf', 'cleanup-code', 'code-cleanup', 'code-quality', 'improve-code', 'modernize', 'modernization', 'legacy', 'legacy-code', 'debt-pay', 'pay-debt', 'debt-reduction', 'smell-fix', 'fix-smells', 'code-smells', 'strangler', 'strangler-fig'], retrievalProfile: 'recovery' },
92
- { commandId: 'cleanup', number: 40, aliases: ['limpar', 'limpeza'], retrievalProfile: 'utility' },
93
- { commandId: 'audit', number: 41, aliases: ['auditar', 'auditoria'], retrievalProfile: 'utility' },
94
- { commandId: 'tech-debt', number: 42, aliases: ['debt', 'debts', 'debt-list', 'tech-debts', 'td'], retrievalProfile: 'utility' },
95
- { commandId: 'menu', number: 43, aliases: ['help', 'ajuda', '?', 'commands', 'cmds'], retrievalProfile: 'utility' },
96
- { commandId: 'plans', number: 44, aliases: ['planos', 'pricing'], retrievalProfile: 'utility' },
97
- { commandId: 'billing', number: 45, aliases: ['bill', 'subscription', 'sub'], retrievalProfile: 'utility' },
98
- { commandId: 'subscribe', number: 46, aliases: ['upgrade', 'checkout'], retrievalProfile: 'utility' },
99
- { commandId: 'qa-scan', number: 47, aliases: ['qa', 'qa-test', 'visual-qa', 'e2e-scan', 'troubleshoot', 'debug-ui', 'scan', 'a11y', 'accessibility', 'wcag'], retrievalProfile: 'qa' },
100
- { commandId: 'yoloop', number: 48, aliases: ['auto-yolo', 'epic-runner', 'story-runner', 'loop-yolo', 'auto-epic'], retrievalProfile: 'utility' },
101
- { commandId: 'migrate-state', number: 49, aliases: ['migrate', 'state-migrate', 'schema-migrate'], retrievalProfile: 'utility' },
102
- { commandId: 'policy-audit', number: 50, aliases: ['policy', 'audit-policy', 'policy-history', 'policies'], retrievalProfile: 'utility' },
103
- { commandId: 'mutation-test', number: 51, aliases: ['mutation', 'stryker', 'kill-mutants'], retrievalProfile: 'qa' },
104
- { commandId: 'sync-openapi', number: 52, aliases: ['openapi-sync', 'api-sync', 'spec-sync', 'regen-openapi'], retrievalProfile: 'utility' },
105
- { commandId: 'generate-pacts', number: 53, aliases: ['pacts', 'gen-pacts', 'regen-pacts', 'create-pacts'], retrievalProfile: 'utility' },
106
- { commandId: 'verify-pacts', number: 54, aliases: ['verify-pact', 'pact-verify', 'check-pacts', 'pact-check'], retrievalProfile: 'utility' },
107
- { commandId: 'property-test', number: 55, aliases: ['property', 'pbt', 'proptest', 'property-tests', 'invariant-test'], retrievalProfile: 'qa' },
108
- { commandId: 'chaos-plan', number: 56, aliases: ['chaos', 'gameday', 'resilience-test'], retrievalProfile: 'utility' },
109
- { commandId: 'ui-ux-review', number: 57, aliases: ['ux-review', 'design-review', 'visual-review', 'product-polish'], retrievalProfile: 'utility' },
110
- { commandId: 'solyd-system', number: 58, aliases: ['security-system', 'authorized-security', 'sec-system'], retrievalProfile: 'security' },
111
- { commandId: 'goal', number: 59, aliases: ['goals', 'durable-goal', 'continuity-goal'], retrievalProfile: 'continuity' },
112
- { commandId: 'loop', number: 60, aliases: ['loops', 'durable-loop', 'continuity-loop'], retrievalProfile: 'continuity' },
113
- { commandId: 'jobs', number: 61, aliases: ['job', 'continuity-jobs'], retrievalProfile: 'continuity' },
114
- { commandId: 'runner', number: 62, aliases: ['neocortex-runner', 'continuity-runner'], retrievalProfile: 'continuity' },
115
- { commandId: 'migrate-project-id', number: 63, retrievalProfile: 'recovery' },
116
- ];
117
- const INTERNAL_COMMAND_POLICY_SEEDS = [
118
- { commandId: 'diagnose-inline', retrievalProfile: 'diagnostic' },
119
- { commandId: 'research-inline', retrievalProfile: 'research' },
120
- { commandId: 'yolo-inline', retrievalProfile: 'story-execution' },
121
- { commandId: 'goal-tick', retrievalProfile: 'continuity' },
122
- { commandId: 'loop-tick', retrievalProfile: 'continuity' },
123
- ];
124
- export const CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES = Object.freeze(PUBLIC_COMMAND_POLICY_SEEDS.map(policy));
125
- export const CLIENT_INTERNAL_COMMAND_CONTEXT_POLICIES = Object.freeze(INTERNAL_COMMAND_POLICY_SEEDS.map(policy));
126
- export const CLIENT_COMMAND_CONTEXT_POLICIES = Object.freeze([
127
- ...CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES,
128
- ...CLIENT_INTERNAL_COMMAND_CONTEXT_POLICIES,
129
- ]);
130
- export const CLIENT_COMMAND_CONTEXT_POLICY_BY_ID = Object.freeze(Object.fromEntries(CLIENT_COMMAND_CONTEXT_POLICIES.map((entry) => [entry.commandId, entry])));
131
- export const CLIENT_COMMAND_CONTEXT_POLICY_BY_NUMBER = Object.freeze(Object.fromEntries(CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES
132
- .filter((entry) => entry.number !== undefined)
133
- .map((entry) => [entry.number, entry])));
134
- export const CLIENT_COMMAND_CONTEXT_POLICY_ALIAS_MAP = Object.freeze(Object.fromEntries(CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES.flatMap((entry) => entry.aliases.map((alias) => [normalizeCommandToken(alias), entry.commandId]))));
135
- export function normalizeCommandToken(input) {
136
- return input.trim().toLowerCase().replace(/^\*/, '');
137
- }
138
- function leadingCommandToken(input) {
139
- return input.trim().split(/\s+/, 1)[0] ?? '';
140
- }
141
- export function listClientPublicCommandContextPolicies() {
142
- return CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES;
143
- }
144
- export function listClientInternalCommandContextPolicies() {
145
- return CLIENT_INTERNAL_COMMAND_CONTEXT_POLICIES;
146
- }
147
- export function listClientCommandContextPolicies() {
148
- return CLIENT_COMMAND_CONTEXT_POLICIES;
149
- }
150
- export function resolveClientCommandContextPolicy(input) {
151
- const token = leadingCommandToken(input);
152
- if (!token)
153
- return CLIENT_COMMAND_CONTEXT_POLICY_BY_ID['menu'] ?? null;
154
- const normalized = normalizeCommandToken(token);
155
- if (/^\d+$/.test(normalized)) {
156
- return CLIENT_COMMAND_CONTEXT_POLICY_BY_NUMBER[Number.parseInt(normalized, 10)] ?? null;
157
- }
158
- return CLIENT_COMMAND_CONTEXT_POLICY_BY_ID[normalized]
159
- ?? CLIENT_COMMAND_CONTEXT_POLICY_BY_ID[CLIENT_COMMAND_CONTEXT_POLICY_ALIAS_MAP[normalized] ?? '']
160
- ?? null;
161
- }
162
- const NODE_TYPE_PRIORITY = {
163
- CanonicalMemory: 0,
164
- Guardrail: 1,
165
- Debt: 2,
166
- State: 3,
167
- Story: 4,
168
- Epic: 5,
169
- Command: 6,
170
- Doc: 7,
171
- Package: 8,
172
- Api: 9,
173
- Route: 10,
174
- DbSchema: 11,
175
- Flag: 12,
176
- BusinessRule: 13,
177
- Risk: 14,
178
- PlatformMemory: 15,
179
- };
180
- export function normalizeGraphRetrievalPath(path) {
181
- return path.replace(/\\/g, '/').replace(/\/+/g, '/').replace(/^\.\//, '');
182
- }
183
- function stableItemKey(item) {
184
- return [item.nodeType, `${item.source.kind}:${normalizeGraphRetrievalPath(item.source.path).toLowerCase()}`, item.stableId.toLowerCase()].join('|');
185
- }
186
- function score(item) {
187
- return item.score ?? 0;
188
- }
189
- export function compareGraphRetrievalItems(a, b) {
190
- const scoreDiff = score(b) - score(a);
191
- if (scoreDiff !== 0)
192
- return scoreDiff;
193
- const confidenceDiff = b.confidence - a.confidence;
194
- if (confidenceDiff !== 0)
195
- return confidenceDiff;
196
- const costDiff = a.budgetCost - b.budgetCost;
197
- if (costDiff !== 0)
198
- return costDiff;
199
- const typeDiff = NODE_TYPE_PRIORITY[a.nodeType] - NODE_TYPE_PRIORITY[b.nodeType];
200
- if (typeDiff !== 0)
201
- return typeDiff;
202
- const pathDiff = normalizeGraphRetrievalPath(a.source.path).localeCompare(normalizeGraphRetrievalPath(b.source.path), 'en-US');
203
- if (pathDiff !== 0)
204
- return pathDiff;
205
- return a.stableId.localeCompare(b.stableId, 'en-US');
206
- }
207
- export function createGraphRetrievalMetadata(params) {
208
- const budget = { ...DEFAULT_GRAPH_RETRIEVAL_BUDGETS, ...params.budgets };
209
- const deduped = new Map();
210
- for (const item of params.items) {
211
- const previous = deduped.get(stableItemKey(item));
212
- if (!previous || compareGraphRetrievalItems(item, previous) < 0)
213
- deduped.set(stableItemKey(item), item);
214
- }
215
- const selected = [];
216
- const skipped = [];
217
- let totalCost = 0;
218
- for (const item of [...deduped.values()].sort(compareGraphRetrievalItems)) {
219
- const nextCost = totalCost + Math.max(1, item.budgetCost);
220
- if (selected.length >= budget.maxItems || nextCost > budget.maxTotalCost) {
221
- skipped.push({ stableId: item.stableId, source: item.source, reasonCode: 'budget_exceeded' });
222
- continue;
223
- }
224
- selected.push(item);
225
- totalCost = nextCost;
226
- }
227
- return {
228
- schemaVersion: GRAPH_RETRIEVAL_SCHEMA_VERSION,
229
- retrievalId: params.retrievalId,
230
- query: params.query,
231
- budget: { ...budget, totalCost },
232
- items: selected,
233
- skipped,
234
- warnings: params.warnings ?? [],
235
- generatedAt: params.generatedAt,
236
- };
237
- }
1
+ const L=1,O="client-pre-command-v1",N=["utility","planning","architecture","diagnostic","research","story-execution","review","qa","security","continuity","recovery"],P={maxItems:24,maxEdges:64,maxPayloadBytes:12288,maxSnippetChars:480,maxLabelChars:160,maxTotalCost:100},i=e=>Object.freeze({...e}),v=Object.freeze({utility:i({maxItems:4,maxEdges:8,maxPayloadBytes:4*1024,maxSnippetChars:280,maxLabelChars:96,maxTotalCost:40}),planning:i({maxItems:12,maxEdges:48,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:70}),architecture:i({maxItems:10,maxEdges:48,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:65}),diagnostic:i({maxItems:10,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:60}),research:i({maxItems:10,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:360,maxLabelChars:128,maxTotalCost:60}),"story-execution":i({maxItems:6,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:50}),review:i({maxItems:8,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:55}),qa:i({maxItems:6,maxEdges:24,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:50}),security:i({maxItems:8,maxEdges:24,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:55}),continuity:i({maxItems:6,maxEdges:16,maxPayloadBytes:4*1024,maxSnippetChars:280,maxLabelChars:96,maxTotalCost:45}),recovery:i({maxItems:8,maxEdges:32,maxPayloadBytes:8*1024,maxSnippetChars:320,maxLabelChars:128,maxTotalCost:55})}),u=e=>Object.freeze({commandId:e.commandId,...e.number===void 0?{}:{number:e.number},aliases:Object.freeze([...e.aliases??[]]),retrievalProfile:e.retrievalProfile,retrievalBudget:v[e.retrievalProfile]}),C=[{commandId:"status",number:1,aliases:["st"],retrievalProfile:"utility"},{commandId:"arch-plan",number:3,aliases:["arquitetura","architecture","arch"],retrievalProfile:"architecture"},{commandId:"arch-prd",number:4,aliases:["prd","product-requirements"],retrievalProfile:"architecture"},{commandId:"arch-architecture",number:5,aliases:["arch-doc","tech-architecture"],retrievalProfile:"architecture"},{commandId:"arch-api-contracts",number:6,aliases:["api-contracts","api-contract"],retrievalProfile:"architecture"},{commandId:"arch-api-integrations",number:7,aliases:["api-integrations","api-int"],retrievalProfile:"architecture"},{commandId:"arch-database",number:8,aliases:["database-schema","db-schema","db"],retrievalProfile:"architecture"},{commandId:"arch-security",number:9,aliases:["cyber-security","security","sec"],retrievalProfile:"architecture"},{commandId:"arch-design-system",number:10,aliases:["design-system","ds","atomic-design"],retrievalProfile:"architecture"},{commandId:"arch-ux-design",number:11,aliases:["ux-design","ux","wireframes","wireframe","user-flows"],retrievalProfile:"architecture"},{commandId:"arch-performance",number:12,aliases:["performance","perf","capacity-planning","capacity","arch-perf","performance-strategy"],retrievalProfile:"architecture"},{commandId:"arch-testing",number:13,aliases:["testing-strategy","test-plan","test-strategy","arch-test"],retrievalProfile:"architecture"},{commandId:"arch-infrastructure",number:14,aliases:["infrastructure","infra","deploy-plan","deployment","arch-infra","arch-deploy"],retrievalProfile:"architecture"},{commandId:"arch-review",number:15,aliases:["review-consolidation","consolidation","architecture-review","arch-consolidation"],retrievalProfile:"architecture"},{commandId:"arch-fitness-functions",number:16,aliases:["fitness","fitness-functions","archfit","arch-fit","fit-funcs"],retrievalProfile:"architecture"},{commandId:"create-epic",number:17,aliases:["criar-epic","planejamento"],retrievalProfile:"planning"},{commandId:"idea-diagnose",number:18,aliases:["idea-diag"],retrievalProfile:"planning"},{commandId:"idea-research",number:19,aliases:["idea-pesq"],retrievalProfile:"planning"},{commandId:"generate-epic",number:20,aliases:["gerar-epic"],retrievalProfile:"planning"},{commandId:"exec",number:21,aliases:["executar","pipeline"],retrievalProfile:"story-execution"},{commandId:"yolo",number:22,retrievalProfile:"story-execution"},{commandId:"epic",number:23,aliases:["parallel-epic"],retrievalProfile:"story-execution"},{commandId:"setup-branch",number:24,aliases:["setup","branch"],retrievalProfile:"story-execution"},{commandId:"diagnose",number:25,aliases:["diag","diagnostico","c02"],retrievalProfile:"diagnostic"},{commandId:"research",number:26,aliases:["pesquisar","pesq","research-fix","c03"],retrievalProfile:"research"},{commandId:"write-spec",number:27,aliases:["spec","especificacao","c04"],retrievalProfile:"story-execution"},{commandId:"create-tasks",number:28,aliases:["tasks","tarefas","c05"],retrievalProfile:"story-execution"},{commandId:"implement",number:29,aliases:["impl","implementar","c06"],retrievalProfile:"story-execution"},{commandId:"commit",number:30,aliases:["push","commit-push","commit_push","cp","c07"],retrievalProfile:"story-execution"},{commandId:"sync",number:31,aliases:["sincronizar","c08"],retrievalProfile:"story-execution"},{commandId:"create-pr",number:32,aliases:["pr","c09"],retrievalProfile:"story-execution"},{commandId:"review",number:33,aliases:["revisar","c11"],retrievalProfile:"review"},{commandId:"merge",number:34,aliases:["mesclar","c12"],retrievalProfile:"story-execution"},{commandId:"fix-blocked",number:35,aliases:["fix","corrigir"],retrievalProfile:"recovery"},{commandId:"finalize-epic",number:36,aliases:["finalizar"],retrievalProfile:"recovery"},{commandId:"resolve-conflicts",number:37,aliases:["conflitos"],retrievalProfile:"recovery"},{commandId:"update-memory",number:38,aliases:["memoria"],retrievalProfile:"recovery"},{commandId:"refactor",number:39,aliases:["refactoring","refact","refac","rf","cleanup-code","code-cleanup","code-quality","improve-code","modernize","modernization","legacy","legacy-code","debt-pay","pay-debt","debt-reduction","smell-fix","fix-smells","code-smells","strangler","strangler-fig"],retrievalProfile:"recovery"},{commandId:"cleanup",number:40,aliases:["limpar","limpeza"],retrievalProfile:"utility"},{commandId:"audit",number:41,aliases:["auditar","auditoria"],retrievalProfile:"utility"},{commandId:"tech-debt",number:42,aliases:["debt","debts","debt-list","tech-debts","td"],retrievalProfile:"utility"},{commandId:"menu",number:43,aliases:["help","ajuda","?","commands","cmds"],retrievalProfile:"utility"},{commandId:"plans",number:44,aliases:["planos","pricing"],retrievalProfile:"utility"},{commandId:"billing",number:45,aliases:["bill","subscription","sub"],retrievalProfile:"utility"},{commandId:"subscribe",number:46,aliases:["upgrade","checkout"],retrievalProfile:"utility"},{commandId:"qa-scan",number:47,aliases:["qa","qa-test","visual-qa","e2e-scan","troubleshoot","debug-ui","scan","a11y","accessibility","wcag"],retrievalProfile:"qa"},{commandId:"yoloop",number:48,aliases:["auto-yolo","epic-runner","story-runner","loop-yolo","auto-epic"],retrievalProfile:"utility"},{commandId:"migrate-state",number:49,aliases:["migrate","state-migrate","schema-migrate"],retrievalProfile:"utility"},{commandId:"policy-audit",number:50,aliases:["policy","audit-policy","policy-history","policies"],retrievalProfile:"utility"},{commandId:"mutation-test",number:51,aliases:["mutation","stryker","kill-mutants"],retrievalProfile:"qa"},{commandId:"sync-openapi",number:52,aliases:["openapi-sync","api-sync","spec-sync","regen-openapi"],retrievalProfile:"utility"},{commandId:"generate-pacts",number:53,aliases:["pacts","gen-pacts","regen-pacts","create-pacts"],retrievalProfile:"utility"},{commandId:"verify-pacts",number:54,aliases:["verify-pact","pact-verify","check-pacts","pact-check"],retrievalProfile:"utility"},{commandId:"property-test",number:55,aliases:["property","pbt","proptest","property-tests","invariant-test"],retrievalProfile:"qa"},{commandId:"chaos-plan",number:56,aliases:["chaos","gameday","resilience-test"],retrievalProfile:"utility"},{commandId:"ui-ux-review",number:57,aliases:["ux-review","design-review","visual-review","product-polish"],retrievalProfile:"utility"},{commandId:"solyd-system",number:58,aliases:["security-system","authorized-security","sec-system"],retrievalProfile:"security"},{commandId:"goal",number:59,aliases:["goals","durable-goal","continuity-goal"],retrievalProfile:"continuity"},{commandId:"loop",number:60,aliases:["loops","durable-loop","continuity-loop"],retrievalProfile:"continuity"},{commandId:"jobs",number:61,aliases:["job","continuity-jobs"],retrievalProfile:"continuity"},{commandId:"runner",number:62,aliases:["neocortex-runner","continuity-runner"],retrievalProfile:"continuity"},{commandId:"migrate-project-id",number:63,retrievalProfile:"recovery"}],g=[{commandId:"diagnose-inline",retrievalProfile:"diagnostic"},{commandId:"research-inline",retrievalProfile:"research"},{commandId:"yolo-inline",retrievalProfile:"story-execution"},{commandId:"goal-tick",retrievalProfile:"continuity"},{commandId:"loop-tick",retrievalProfile:"continuity"}],l=Object.freeze(C.map(u)),p=Object.freeze(g.map(u)),f=Object.freeze([...l,...p]),m=Object.freeze(Object.fromEntries(f.map(e=>[e.commandId,e]))),E=Object.freeze(Object.fromEntries(l.filter(e=>e.number!==void 0).map(e=>[e.number,e]))),_=Object.freeze(Object.fromEntries(l.flatMap(e=>e.aliases.map(a=>[y(a),e.commandId]))));function y(e){return e.trim().toLowerCase().replace(/^\*/,"")}function T(e){return e.trim().split(/\s+/,1)[0]??""}function R(){return l}function S(){return p}function A(){return f}function M(e){const a=T(e);if(!a)return m.menu??null;const t=y(a);return/^\d+$/.test(t)?E[Number.parseInt(t,10)]??null:m[t]??m[_[t]??""]??null}const b={CanonicalMemory:0,Guardrail:1,Debt:2,State:3,Story:4,Epic:5,Command:6,Doc:7,Package:8,Api:9,Route:10,DbSchema:11,Flag:12,BusinessRule:13,Risk:14,PlatformMemory:15};function d(e){return e.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\.\//,"")}function I(e){return[e.nodeType,`${e.source.kind}:${d(e.source.path).toLowerCase()}`,e.stableId.toLowerCase()].join("|")}function x(e){return e.score??0}function h(e,a){const t=x(a)-x(e);if(t!==0)return t;const o=a.confidence-e.confidence;if(o!==0)return o;const s=e.budgetCost-a.budgetCost;if(s!==0)return s;const n=b[e.nodeType]-b[a.nodeType];if(n!==0)return n;const r=d(e.source.path).localeCompare(d(a.source.path),"en-US");return r!==0?r:e.stableId.localeCompare(a.stableId,"en-US")}function D(e){const a={...P,...e.budgets},t=new Map;for(const r of e.items){const c=t.get(I(r));(!c||h(r,c)<0)&&t.set(I(r),r)}const o=[],s=[];let n=0;for(const r of[...t.values()].sort(h)){const c=n+Math.max(1,r.budgetCost);if(o.length>=a.maxItems||c>a.maxTotalCost){s.push({stableId:r.stableId,source:r.source,reasonCode:"budget_exceeded"});continue}o.push(r),n=c}return{schemaVersion:1,retrievalId:e.retrievalId,query:e.query,budget:{...a,totalCost:n},items:o,skipped:s,warnings:e.warnings??[],generatedAt:e.generatedAt}}export{f as CLIENT_COMMAND_CONTEXT_POLICIES,_ as CLIENT_COMMAND_CONTEXT_POLICY_ALIAS_MAP,m as CLIENT_COMMAND_CONTEXT_POLICY_BY_ID,E as CLIENT_COMMAND_CONTEXT_POLICY_BY_NUMBER,v as CLIENT_GRAPH_RETRIEVAL_PROFILE_BUDGETS,p as CLIENT_INTERNAL_COMMAND_CONTEXT_POLICIES,l as CLIENT_PUBLIC_COMMAND_CONTEXT_POLICIES,N as COMMAND_CONTEXT_RETRIEVAL_PROFILES,P as DEFAULT_GRAPH_RETRIEVAL_BUDGETS,O as GRAPH_RETRIEVAL_CLIENT_CONTRACT_VERSION,L as GRAPH_RETRIEVAL_SCHEMA_VERSION,h as compareGraphRetrievalItems,D as createGraphRetrievalMetadata,A as listClientCommandContextPolicies,S as listClientInternalCommandContextPolicies,R as listClientPublicCommandContextPolicies,y as normalizeCommandToken,d as normalizeGraphRetrievalPath,M as resolveClientCommandContextPolicy};
@@ -1,60 +1,2 @@
1
- /**
2
- * @license FSL-1.1
3
- * Copyright (c) 2026 OrNexus AI
4
- *
5
- * First-run messages -- localized welcome strings shown on the user's
6
- * first `neocortex-client invoke` call. Writes to stderr so it never
7
- * contaminates instruction output. See P76.02.
8
- */
9
- export const FIRST_RUN_MESSAGES = {
10
- 'en': {
11
- banner: '── Welcome to Neocortex ─────────────────────────────────────',
12
- intro: 'Looks like this is your first time here. Here are a few commands to get started:',
13
- commands: [
14
- { label: '@neocortex *menu', description: 'See all available commands' },
15
- { label: '@neocortex *arch-plan', description: 'Plan a new project architecture' },
16
- { label: '@neocortex *yolo', description: 'Quick implementation mode' },
17
- { label: '@neocortex *status', description: 'Check your project status' },
18
- ],
19
- tip: 'Tip: run `@neocortex *menu` for the full, tier-aware command list.',
20
- },
21
- 'pt-BR': {
22
- banner: '── Bem-vindo ao Neocortex ───────────────────────────────────',
23
- intro: 'Parece que esta é a sua primeira vez por aqui. Alguns comandos para começar:',
24
- commands: [
25
- { label: '@neocortex *menu', description: 'Ver todos os comandos disponíveis' },
26
- { label: '@neocortex *arch-plan', description: 'Planejar a arquitetura de um novo projeto' },
27
- { label: '@neocortex *yolo', description: 'Modo de implementação rápida' },
28
- { label: '@neocortex *status', description: 'Ver o status do seu projeto' },
29
- ],
30
- tip: 'Dica: execute `@neocortex *menu` para a lista completa (já filtrada pelo seu tier).',
31
- },
32
- };
33
- /** Detect the best locale from process.env.LANG / LC_ALL. Falls back to en. */
34
- export function detectFirstRunLocale(env = process.env) {
35
- const raw = (env.LC_ALL ?? env.LANG ?? '').toLowerCase();
36
- if (raw.startsWith('pt'))
37
- return 'pt-BR';
38
- return 'en';
39
- }
40
- /** Render the first-run message as a plain-text block suitable for stderr. */
41
- export function renderFirstRunMessage(locale) {
42
- const msg = FIRST_RUN_MESSAGES[locale];
43
- const width = 62;
44
- // Find the longest command label for padding
45
- const labelWidth = msg.commands.reduce((max, c) => Math.max(max, c.label.length), 0);
46
- const lines = [];
47
- lines.push(msg.banner);
48
- lines.push('');
49
- lines.push(msg.intro);
50
- lines.push('');
51
- for (const cmd of msg.commands) {
52
- const padded = cmd.label.padEnd(labelWidth + 2);
53
- lines.push(` ${padded}${cmd.description}`);
54
- }
55
- lines.push('');
56
- lines.push(msg.tip);
57
- lines.push(''.padEnd(width, '─'));
58
- lines.push('');
59
- return lines.join('\n');
60
- }
1
+ const i={en:{banner:"\u2500\u2500 Welcome to Neocortex \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",intro:"Looks like this is your first time here. Here are a few commands to get started:",commands:[{label:"@neocortex *menu",description:"See all available commands"},{label:"@neocortex *arch-plan",description:"Plan a new project architecture"},{label:"@neocortex *yolo",description:"Quick implementation mode"},{label:"@neocortex *status",description:"Check your project status"}],tip:"Tip: run `@neocortex *menu` for the full, tier-aware command list."},"pt-BR":{banner:"\u2500\u2500 Bem-vindo ao Neocortex \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",intro:"Parece que esta \xE9 a sua primeira vez por aqui. Alguns comandos para come\xE7ar:",commands:[{label:"@neocortex *menu",description:"Ver todos os comandos dispon\xEDveis"},{label:"@neocortex *arch-plan",description:"Planejar a arquitetura de um novo projeto"},{label:"@neocortex *yolo",description:"Modo de implementa\xE7\xE3o r\xE1pida"},{label:"@neocortex *status",description:"Ver o status do seu projeto"}],tip:"Dica: execute `@neocortex *menu` para a lista completa (j\xE1 filtrada pelo seu tier)."}};function c(t=process.env){return(t.LC_ALL??t.LANG??"").toLowerCase().startsWith("pt")?"pt-BR":"en"}function p(t){const o=i[t],n=62,s=o.commands.reduce((r,a)=>Math.max(r,a.label.length),0),e=[];e.push(o.banner),e.push(""),e.push(o.intro),e.push("");for(const r of o.commands){const a=r.label.padEnd(s+2);e.push(` ${a}${r.description}`)}return e.push(""),e.push(o.tip),e.push("".padEnd(n,"\u2500")),e.push(""),e.join(`
2
+ `)}export{i as FIRST_RUN_MESSAGES,c as detectFirstRunLocale,p as renderFirstRunMessage};
@@ -53,6 +53,8 @@ export { ClientCircuitBreaker, type CircuitState, type CircuitBreakerConfig, typ
53
53
  export { OfflineTelemetryQueue, type TelemetryEvent, type QueueConfig, type QueueStats, type FlushResult, } from './telemetry/index.js';
54
54
  export { getCacheStatus, formatCacheStatus, type CacheStatusInfo, type CacheStatusOptions, } from './commands/cache-status.js';
55
55
  export { getSubagentApprovalPolicy, ensureManagedSubagentApprovalPolicy, setSubagentApprovalMode, resetSubagentApprovalMode, ApprovalPolicyConfigError, type ApprovalPolicyConfigOptions, type ApprovalPolicyConfigResult, } from './config.js';
56
+ export { NATIVE_BACKGROUND_REASON_CODES, planEpicBackgroundDispatch, type AuthorizedNativeBackgroundEntryV1, type EpicBackgroundDispatchDecisionV1, type NativeBackgroundAdmissionInput, type NativeBackgroundTaskDirectiveV1, } from './runner/epic-background-dispatcher.js';
57
+ export { NATIVE_BACKGROUND_MAX_POLLS, NativeBackgroundRootError, boundedNativeBackgroundPoll, runNativeBackgroundRoot, type BoundedNativeBackgroundPollResultV1, type NativeBackgroundReservationV1, type NativeBackgroundRootPorts, type NativeBackgroundRootResultV1, } from './runner/headless/background-root.js';
56
58
  export { deriveOpaqueNativeAgentHandle, openNativeAgentPrivateStore, resolveNativeAgentPrivateRuntimePaths, } from './continuity/native-agent-store.js';
57
59
  export { configCliHandler, type ConfigCliDependencies, } from './commands/config.js';
58
60
  export { storyCheckpointCliHandler, parseStoryCheckpointArgs, } from './commands/story-checkpoint.js';
@@ -1,47 +1 @@
1
- /**
2
- * @license FSL-1.1
3
- * Copyright (c) 2026 OrNexus AI
4
- *
5
- * This file is part of Neocortex CLI, licensed under the
6
- * Functional Source License, Version 1.1 (FSL-1.1).
7
- *
8
- * Change Date: February 20, 2029
9
- * Change License: MIT
10
- *
11
- * See the LICENSE file in the project root for full license text.
12
- */
13
- export { ResolverMode, NoOpCache } from './types/index.js';
14
- export { PUBLIC_PROJECTION_BUNDLE, PUBLIC_PROJECTION_GENERATION_ID, PUBLIC_PROJECTION_BUNDLE_HASH, } from './generated/public-projections.generated.js';
15
- // ── Implementations ─────────────────────────────────────────────────────
16
- export { LocalResolver } from './resolvers/local-resolver.js';
17
- export { RemoteResolver, RemoteResolverError } from './resolvers/remote-resolver.js';
18
- // ── Cache ──────────────────────────────────────────────────────────────
19
- export { EncryptedCache } from './cache/index.js';
20
- // ── Factory ─────────────────────────────────────────────────────────────
21
- export { createResolver, selectResolver, } from './config/resolver-selection.js';
22
- // ── Context ─────────────────────────────────────────────────────────────
23
- export { collectContext, } from './context/context-collector.js';
24
- export { sanitizeValue, sanitizeRecord, sanitizeObject, } from './context/context-sanitizer.js';
25
- // ── Machine ──────────────────────────────────────────────────────────────
26
- export { getMachineFingerprint } from './machine/index.js';
27
- // ── License ──────────────────────────────────────────────────────────────
28
- export { LicenseClient } from './license/index.js';
29
- export { ClaudeCodeAdapter, CursorAdapter, VSCodeAdapter, GeminiAdapter, CodexAdapter, AntigravityAdapter, AdapterRegistry, UnknownTargetError, createDefaultRegistry, detectPlatform, isValidTargetId, } from './adapters/index.js';
30
- // ── Resilience (Story 42.9) ──────────────────────────────────────────────
31
- export { ClientCircuitBreaker, DegradationManager, DegradationLevel, FreshnessIndicator, RecoveryDetector, } from './resilience/index.js';
32
- // ── Telemetry (Story 42.9) ──────────────────────────────────────────────
33
- export { OfflineTelemetryQueue, } from './telemetry/index.js';
34
- // ── Commands (Story 42.9) ───────────────────────────────────────────────
35
- export { getCacheStatus, formatCacheStatus, } from './commands/cache-status.js';
36
- export { getSubagentApprovalPolicy, ensureManagedSubagentApprovalPolicy, setSubagentApprovalMode, resetSubagentApprovalMode, ApprovalPolicyConfigError, } from './config.js';
37
- export { deriveOpaqueNativeAgentHandle, openNativeAgentPrivateStore, resolveNativeAgentPrivateRuntimePaths, } from './continuity/native-agent-store.js';
38
- export { configCliHandler, } from './commands/config.js';
39
- export { storyCheckpointCliHandler, parseStoryCheckpointArgs, } from './commands/story-checkpoint.js';
40
- export { beginDirectYoloStoryCommit, finalizeDirectYoloStoryCheckpoint, issueDirectYoloSetupLeaseHandoff, prepareDirectYoloSetup, recoverLegacyDirectYoloStoryCheckpoint, } from './git/direct-yolo-checkpoint.js';
41
- export { FRONTMATTER_DIAGNOSTIC_CATEGORIES, FRONTMATTER_DIAGNOSTIC_REASON_CODES, getFrontmatterDiagnostic, formatFrontmatterDiagnostic, } from './errors/frontmatter-diagnostics.js';
42
- // ── Invoke Command (Story 45.2) ────────────────────────────────────────
43
- export { invoke, invokeCliHandler, collectStateSnapshot, } from './commands/invoke.js';
44
- // ── Tier Awareness (Epic 60) ─────────────────────────────────────────
45
- export { TierAwareClient, } from './tier/index.js';
46
- // ── Project Memory (P130) ──────────────────────────────────────────────
47
- export { buildProjectMemoryContent, createNodeProjectMemoryFs, writeProjectMemory, writeProjectMemoryTargetFiles, } from './memory/project-memory-writer.js';
1
+ import{ResolverMode as o,NoOpCache as t}from"./types/index.js";import{PUBLIC_PROJECTION_BUNDLE as i,PUBLIC_PROJECTION_GENERATION_ID as n,PUBLIC_PROJECTION_BUNDLE_HASH as p}from"./generated/public-projections.generated.js";import{LocalResolver as l}from"./resolvers/local-resolver.js";import{RemoteResolver as d,RemoteResolverError as s}from"./resolvers/remote-resolver.js";import{EncryptedCache as f}from"./cache/index.js";import{createResolver as A,selectResolver as R}from"./config/resolver-selection.js";import{collectContext as x}from"./context/context-collector.js";import{sanitizeValue as N,sanitizeRecord as S,sanitizeObject as E}from"./context/context-sanitizer.js";import{getMachineFingerprint as D}from"./machine/index.js";import{LicenseClient as y}from"./license/index.js";import{ClaudeCodeAdapter as _,CursorAdapter as I,VSCodeAdapter as h,GeminiAdapter as M,CodexAdapter as k,AntigravityAdapter as B,AdapterRegistry as L,UnknownTargetError as b,createDefaultRegistry as F,detectPlatform as U,isValidTargetId as G}from"./adapters/index.js";import{ClientCircuitBreaker as j,DegradationManager as V,DegradationLevel as Y,FreshnessIndicator as w,RecoveryDetector as z}from"./resilience/index.js";import{OfflineTelemetryQueue as K}from"./telemetry/index.js";import{getCacheStatus as Q,formatCacheStatus as X}from"./commands/cache-status.js";import{getSubagentApprovalPolicy as Z,ensureManagedSubagentApprovalPolicy as $,setSubagentApprovalMode as ee,resetSubagentApprovalMode as re,ApprovalPolicyConfigError as oe}from"./config.js";import{NATIVE_BACKGROUND_REASON_CODES as ae,planEpicBackgroundDispatch as ie}from"./runner/epic-background-dispatcher.js";import{NATIVE_BACKGROUND_MAX_POLLS as pe,NativeBackgroundRootError as ce,boundedNativeBackgroundPoll as le,runNativeBackgroundRoot as me}from"./runner/headless/background-root.js";import{deriveOpaqueNativeAgentHandle as se,openNativeAgentPrivateStore as Ce,resolveNativeAgentPrivateRuntimePaths as fe}from"./continuity/native-agent-store.js";import{configCliHandler as Ae}from"./commands/config.js";import{storyCheckpointCliHandler as ve,parseStoryCheckpointArgs as xe}from"./commands/story-checkpoint.js";import{beginDirectYoloStoryCommit as Ne,finalizeDirectYoloStoryCheckpoint as Se,issueDirectYoloSetupLeaseHandoff as Ee,prepareDirectYoloSetup as Oe,recoverLegacyDirectYoloStoryCheckpoint as De}from"./git/direct-yolo-checkpoint.js";import{FRONTMATTER_DIAGNOSTIC_CATEGORIES as ye,FRONTMATTER_DIAGNOSTIC_REASON_CODES as Pe,getFrontmatterDiagnostic as _e,formatFrontmatterDiagnostic as Ie}from"./errors/frontmatter-diagnostics.js";import{invoke as Me,invokeCliHandler as ke,collectStateSnapshot as Be}from"./commands/invoke.js";import{TierAwareClient as be}from"./tier/index.js";import{buildProjectMemoryContent as Ue,createNodeProjectMemoryFs as Ge,writeProjectMemory as He,writeProjectMemoryTargetFiles as je}from"./memory/project-memory-writer.js";export{L as AdapterRegistry,B as AntigravityAdapter,oe as ApprovalPolicyConfigError,_ as ClaudeCodeAdapter,j as ClientCircuitBreaker,k as CodexAdapter,I as CursorAdapter,Y as DegradationLevel,V as DegradationManager,f as EncryptedCache,ye as FRONTMATTER_DIAGNOSTIC_CATEGORIES,Pe as FRONTMATTER_DIAGNOSTIC_REASON_CODES,w as FreshnessIndicator,M as GeminiAdapter,y as LicenseClient,l as LocalResolver,pe as NATIVE_BACKGROUND_MAX_POLLS,ae as NATIVE_BACKGROUND_REASON_CODES,ce as NativeBackgroundRootError,t as NoOpCache,K as OfflineTelemetryQueue,i as PUBLIC_PROJECTION_BUNDLE,p as PUBLIC_PROJECTION_BUNDLE_HASH,n as PUBLIC_PROJECTION_GENERATION_ID,z as RecoveryDetector,d as RemoteResolver,s as RemoteResolverError,o as ResolverMode,be as TierAwareClient,b as UnknownTargetError,h as VSCodeAdapter,Ne as beginDirectYoloStoryCommit,le as boundedNativeBackgroundPoll,Ue as buildProjectMemoryContent,x as collectContext,Be as collectStateSnapshot,Ae as configCliHandler,F as createDefaultRegistry,Ge as createNodeProjectMemoryFs,A as createResolver,se as deriveOpaqueNativeAgentHandle,U as detectPlatform,$ as ensureManagedSubagentApprovalPolicy,Se as finalizeDirectYoloStoryCheckpoint,X as formatCacheStatus,Ie as formatFrontmatterDiagnostic,Q as getCacheStatus,_e as getFrontmatterDiagnostic,D as getMachineFingerprint,Z as getSubagentApprovalPolicy,Me as invoke,ke as invokeCliHandler,G as isValidTargetId,Ee as issueDirectYoloSetupLeaseHandoff,Ce as openNativeAgentPrivateStore,xe as parseStoryCheckpointArgs,ie as planEpicBackgroundDispatch,Oe as prepareDirectYoloSetup,De as recoverLegacyDirectYoloStoryCheckpoint,re as resetSubagentApprovalMode,fe as resolveNativeAgentPrivateRuntimePaths,me as runNativeBackgroundRoot,E as sanitizeObject,S as sanitizeRecord,N as sanitizeValue,R as selectResolver,ee as setSubagentApprovalMode,ve as storyCheckpointCliHandler,He as writeProjectMemory,je as writeProjectMemoryTargetFiles};
@@ -1,24 +1 @@
1
- import { createInvokeInputEnvelopeV2, } from '../../../shared/dist/invocation/index.js';
2
- export class InvokeInputDecodeError extends Error {
3
- source;
4
- code = 'INVOCATION_MALFORMED_INPUT';
5
- reason = 'invalid-utf8';
6
- constructor(source) {
7
- super(`${source} must contain valid UTF-8 text. Use --args-file or --stdin with an unmodified UTF-8 document.`);
8
- this.source = source;
9
- this.name = 'InvokeInputDecodeError';
10
- }
11
- }
12
- export function decodeExplicitInvokeInput(source, value) {
13
- if (typeof value === 'string')
14
- return value;
15
- try {
16
- return new TextDecoder('utf-8', { fatal: true }).decode(value);
17
- }
18
- catch {
19
- throw new InvokeInputDecodeError(source);
20
- }
21
- }
22
- export function buildInvokeInputEnvelope(source, value) {
23
- return createInvokeInputEnvelopeV2(source, decodeExplicitInvokeInput(source, value));
24
- }
1
+ import{createInvokeInputEnvelopeV2 as n}from"../../../shared/dist/invocation/index.js";class o extends Error{source;code="INVOCATION_MALFORMED_INPUT";reason="invalid-utf8";constructor(e){super(`${e} must contain valid UTF-8 text. Use --args-file or --stdin with an unmodified UTF-8 document.`),this.source=e,this.name="InvokeInputDecodeError"}}function r(t,e){if(typeof e=="string")return e;try{return new TextDecoder("utf-8",{fatal:!0}).decode(e)}catch{throw new o(t)}}function c(t,e){return n(t,r(t,e))}export{o as InvokeInputDecodeError,c as buildInvokeInputEnvelope,r as decodeExplicitInvokeInput};
@@ -0,0 +1,158 @@
1
+ import { EncryptedCache } from '../cache/encrypted-cache.js';
2
+ export type AuthCauseV1 = 'valid' | 'near-expiry' | 'expired' | 'not-configured' | 'store-unavailable' | 'store-corrupt' | 'keychain-unavailable' | 'transport-error' | 'timeout' | 'rate-limited' | 'service-unavailable' | 'revoked' | 'scope-denied' | 'client-denied' | 'protocol-invalid' | 'persistence-failed' | 'rotation-uncertain' | 'capability-unavailable' | 'revision-conflict';
3
+ export type AuthRecoveryResultV1 = {
4
+ readonly status: 'authenticated';
5
+ readonly generation: number;
6
+ readonly accessCredential: string;
7
+ readonly expiresAt: string;
8
+ } | {
9
+ readonly status: 'refresh-required';
10
+ readonly cause: AuthCauseV1;
11
+ readonly action: 'prepare' | 'retry-later' | 'reactivate' | 'request-scope' | 'recover-explicitly' | 'stop';
12
+ } | {
13
+ readonly status: 'uncertain';
14
+ readonly cause: 'rotation-uncertain' | 'persistence-failed';
15
+ readonly recoveryId: string;
16
+ readonly action: 'reconcile' | 'recover-explicitly';
17
+ } | {
18
+ readonly status: 'not-configured';
19
+ readonly action: 'activate';
20
+ };
21
+ export type AuthRecoveryPhase = 'prepared' | 'request-started' | 'response-received' | 'generation-committed' | 'uncertain' | 'completed' | 'aborted-before-request';
22
+ export interface AuthRecoveryJournalV1 {
23
+ readonly recoveryId: string;
24
+ readonly operationId: string;
25
+ readonly idempotencyKey: string;
26
+ readonly requestDigest: string;
27
+ readonly owner: string;
28
+ readonly createdAt: string;
29
+ readonly expiresAt: string;
30
+ readonly attemptCount: 0 | 1;
31
+ readonly replayCount: 0 | 1;
32
+ readonly phase: AuthRecoveryPhase;
33
+ readonly responseDigest?: string;
34
+ }
35
+ export interface AuthGenerationDocumentV1 {
36
+ readonly schemaVersion: 'AuthGeneration/1.0';
37
+ readonly revision: number;
38
+ readonly identityHash: string;
39
+ readonly accepted: null | {
40
+ readonly generation: number;
41
+ readonly accessToken: string;
42
+ readonly accessExpiresAt: string;
43
+ readonly refreshToken: string | null;
44
+ readonly refreshExpiresAt: string | null;
45
+ readonly acceptedAt: string;
46
+ readonly responseDigest: string;
47
+ };
48
+ readonly activeRecovery: AuthRecoveryJournalV1 | null;
49
+ readonly receipts: readonly {
50
+ readonly recoveryId: string;
51
+ readonly operationId: string;
52
+ readonly outcome: string;
53
+ readonly completedAt: string;
54
+ }[];
55
+ }
56
+ export interface AuthGenerationStore {
57
+ read(identityHash: string): Promise<AuthGenerationDocumentV1 | null>;
58
+ compareAndSet(expectedRevision: number, document: AuthGenerationDocumentV1): Promise<void>;
59
+ }
60
+ /** Private generation adapter backed by EncryptedCache's mandatory CAS path. */
61
+ export declare class EncryptedAuthGenerationStore implements AuthGenerationStore {
62
+ private readonly cache;
63
+ constructor(cache: EncryptedCache);
64
+ private key;
65
+ read(identityHash: string): Promise<AuthGenerationDocumentV1 | null>;
66
+ compareAndSet(expectedRevision: number, document: AuthGenerationDocumentV1): Promise<void>;
67
+ }
68
+ export interface AuthRefreshSuccess {
69
+ readonly token: string;
70
+ readonly expiresAt: string;
71
+ readonly refreshToken?: string | null;
72
+ readonly refreshExpiresAt?: string | null;
73
+ }
74
+ export interface AuthRecoveryInput {
75
+ readonly identityHash: string;
76
+ readonly recoveryId: string;
77
+ readonly operationId: string;
78
+ readonly idempotencyKey: string;
79
+ readonly requestDigest: string;
80
+ readonly owner: string;
81
+ readonly leaseMs?: number;
82
+ readonly timeoutMs?: number;
83
+ readonly now?: () => number;
84
+ readonly refresh: (signal?: AbortSignal) => Promise<AuthRefreshSuccess>;
85
+ }
86
+ export declare function createAuthIdentityHash(parts: readonly string[]): string;
87
+ export declare function validateAuthGenerationDocument(value: unknown, expectedIdentityHash?: string): AuthGenerationDocumentV1;
88
+ export declare function recoverHostAuthentication(store: AuthGenerationStore, input: AuthRecoveryInput): Promise<AuthRecoveryResultV1>;
89
+ export type AuthBusinessReplayDecisionV1 = {
90
+ readonly kind: 'replay-once';
91
+ readonly recoveryId: string;
92
+ } | {
93
+ readonly kind: 'reconcile-receipt';
94
+ readonly operationId: string;
95
+ } | {
96
+ readonly kind: 'stop';
97
+ readonly reasonCode: string;
98
+ };
99
+ export declare function decideAuthBusinessReplay(input: {
100
+ readonly recoveryId: string;
101
+ readonly operationId: string;
102
+ readonly generationCommitted: boolean;
103
+ readonly identityMatches: boolean;
104
+ readonly requestMatches: boolean;
105
+ readonly replayCount: number;
106
+ readonly receipt: 'not-accepted' | 'accepted' | 'unknown';
107
+ readonly supportsIdempotency: boolean;
108
+ readonly rotationUncertain: boolean;
109
+ }): AuthBusinessReplayDecisionV1;
110
+ /**
111
+ * Reserves the single business replay by CAS before returning authorization.
112
+ * Consumers perform the business effect only after this function succeeds.
113
+ */
114
+ export declare function reserveAuthBusinessReplay(store: AuthGenerationStore, input: {
115
+ readonly identityHash: string;
116
+ readonly recoveryId: string;
117
+ readonly operationId: string;
118
+ readonly requestDigest: string;
119
+ readonly receipt: 'not-accepted' | 'accepted' | 'unknown';
120
+ readonly supportsIdempotency: boolean;
121
+ readonly rotationUncertain?: boolean;
122
+ }): Promise<AuthBusinessReplayDecisionV1>;
123
+ /** Records the compare-bound business outcome before a later recovery may replace the journal. */
124
+ export declare function completeAuthRecovery(store: AuthGenerationStore, input: {
125
+ readonly identityHash: string;
126
+ readonly recoveryId: string;
127
+ readonly operationId: string;
128
+ readonly outcome: string;
129
+ readonly completedAt?: string;
130
+ }): Promise<AuthGenerationDocumentV1>;
131
+ export type AuthCausalEvidenceV1 = {
132
+ readonly kind: 'token';
133
+ readonly credential: string;
134
+ readonly expiresAt: string;
135
+ readonly generation: number;
136
+ readonly now?: number;
137
+ } | {
138
+ readonly kind: 'configuration';
139
+ readonly configured: boolean;
140
+ } | {
141
+ readonly kind: 'store';
142
+ readonly cause: 'store-unavailable' | 'store-corrupt' | 'keychain-unavailable';
143
+ } | {
144
+ readonly kind: 'transport';
145
+ readonly timeout?: boolean;
146
+ readonly requestStarted?: boolean;
147
+ readonly recoveryId?: string;
148
+ } | {
149
+ readonly kind: 'http';
150
+ readonly status: number;
151
+ readonly errorCode?: string;
152
+ } | {
153
+ readonly kind: 'persistence';
154
+ readonly recoveryId: string;
155
+ };
156
+ /** Pure evidence-to-cause mapping. Generic HTTP status never proves revocation. */
157
+ export declare function classifyAuthCausalEvidence(evidence: AuthCausalEvidenceV1): AuthRecoveryResultV1;
158
+ export declare function newRecoveryId(): string;
@@ -0,0 +1 @@
1
+ import{createHash as v,randomUUID as D}from"node:crypto";class K{cache;constructor(t){this.cache=t}key(t){if(!u.test(t))throw new Error("auth-business-identity-mismatch");return`neocortex:auth-generation:v1:${t}`}async read(t){const r=await this.cache.getAuthoritative(this.key(t));if(r===null)return null;try{return d(JSON.parse(r),t)}catch(o){throw new Error("auth-generation-corrupt",{cause:o})}}async compareAndSet(t,r){d(r,r.identityHash);const o=this.key(r.identityHash),i=await this.cache.getAuthoritative(o);let s=0;if(i!==null)try{s=d(JSON.parse(i),r.identityHash).revision}catch(n){throw new Error("auth-generation-corrupt",{cause:n})}if(s!==t||r.revision!==t+1)throw new Error("auth-generation-revision-conflict");await this.cache.setAuthoritative(o,JSON.stringify(r),{expectedPlaintextSha256:i===null?null:v("sha256").update(i).digest("hex")})}}const u=/^[a-f0-9]{64}$/,p=/^[A-Za-z0-9._:-]{1,128}$/;function J(e){if(e.length!==5||e.some(t=>t.length===0||t.length>256||/[\r\n\0]/.test(t)))throw new Error("auth-business-identity-mismatch");return v("sha256").update("neocortex-auth-generation-v1\0").update(e.join("\0")).digest("hex")}function d(e,t){let r;try{r=JSON.stringify(e)}catch{throw new Error("auth-generation-corrupt")}if(!l(e)||typeof r!="string")throw new Error("auth-generation-corrupt");if(Buffer.byteLength(r,"utf8")>256*1024)throw new Error("auth-generation-capacity");const o=e;if(o.schemaVersion!=="AuthGeneration/1.0"||!Number.isSafeInteger(o.revision)||o.revision<0||!u.test(o.identityHash)||t&&o.identityHash!==t||!Array.isArray(o.receipts)||o.receipts.length>32)throw new Error("auth-generation-corrupt");if(!m(e,["schemaVersion","revision","identityHash","accepted","activeRecovery","receipts"]))throw new Error("auth-generation-corrupt");S(o.accepted),H(o.activeRecovery);for(const i of o.receipts)T(i);return o}function C(e){return{schemaVersion:"AuthGeneration/1.0",revision:0,identityHash:e,accepted:null,activeRecovery:null,receipts:[]}}async function h(e,t,r){const o=d({...t,...r,revision:t.revision+1},t.identityHash);return await e.compareAndSet(t.revision,o),o}async function U(e,t){if(!u.test(t.identityHash)||!u.test(t.requestDigest)||![t.recoveryId,t.operationId,t.idempotencyKey,t.owner].every(a=>p.test(a)))return{status:"refresh-required",cause:"protocol-invalid",action:"stop"};const r=t.now??Date.now,o=Math.min(Math.max(t.leaseMs??3e4,1),6e4),i=Math.min(Math.max(t.timeoutMs??3e4,1),3e4);let s;try{s=d(await e.read(t.identityHash)??C(t.identityHash),t.identityHash)}catch(a){return x(a)}const n=s.activeRecovery;if(n)if(n.recoveryId===t.recoveryId){if(!_(n,t))return{status:"refresh-required",cause:"protocol-invalid",action:"stop"};if((n.phase==="generation-committed"||n.phase==="completed")&&s.accepted)return A(s.accepted);if(n.attemptCount===1)return y(t.recoveryId,n.phase==="response-received"?"persistence-failed":"rotation-uncertain");if(Date.parse(n.expiresAt)>r()&&n.owner!==t.owner)return{status:"refresh-required",cause:"revision-conflict",action:"retry-later"}}else{if(n.attemptCount===1&&!["generation-committed","completed","aborted-before-request"].includes(n.phase))return y(n.recoveryId,n.phase==="response-received"?"persistence-failed":"rotation-uncertain");if(n.phase==="generation-committed")return{status:"refresh-required",cause:"revision-conflict",action:"retry-later"};if(n.attemptCount===0&&Date.parse(n.expiresAt)>r())return{status:"refresh-required",cause:"revision-conflict",action:"retry-later"}}const g={recoveryId:t.recoveryId,operationId:t.operationId,idempotencyKey:t.idempotencyKey,requestDigest:t.requestDigest,owner:t.owner,createdAt:new Date(r()).toISOString(),expiresAt:new Date(r()+o).toISOString(),attemptCount:0,replayCount:0,phase:"prepared"};try{(!n||n.recoveryId!==t.recoveryId||n.owner!==t.owner||n.phase!=="prepared")&&(s=await h(e,s,{activeRecovery:g}));const a={...g,attemptCount:1,phase:"request-started"};s=await h(e,s,{activeRecovery:a});let c;try{c=await M(t.refresh,i)}catch{return await q(e,s,a),y(t.recoveryId,"rotation-uncertain")}if(!c.token||c.token.length>65536||!Number.isFinite(Date.parse(c.expiresAt)))return await q(e,s,a),y(t.recoveryId,"rotation-uncertain");const w=v("sha256").update(JSON.stringify(c)).digest("hex"),I={...a,phase:"response-received",responseDigest:w};s=await h(e,s,{activeRecovery:I});const k={generation:(s.accepted?.generation??0)+1,accessToken:c.token,accessExpiresAt:c.expiresAt,refreshToken:c.refreshToken??null,refreshExpiresAt:c.refreshExpiresAt??null,acceptedAt:new Date(r()).toISOString(),responseDigest:w},E={...I,phase:"generation-committed"},b=await h(e,s,{accepted:k,activeRecovery:E});return A(b.accepted)}catch(a){return s.activeRecovery?.attemptCount!==1?x(a):y(t.recoveryId,"persistence-failed")}}function R(e){return!e.identityMatches||!e.requestMatches?{kind:"stop",reasonCode:"auth-business-identity-mismatch"}:e.rotationUncertain||!e.generationCommitted?{kind:"stop",reasonCode:"auth-business-replay-unsafe"}:e.replayCount!==0?{kind:"stop",reasonCode:"auth-business-replay-exhausted"}:e.receipt==="accepted"?{kind:"reconcile-receipt",operationId:e.operationId}:e.receipt==="unknown"&&!e.supportsIdempotency?{kind:"reconcile-receipt",operationId:e.operationId}:{kind:"replay-once",recoveryId:e.recoveryId}}async function B(e,t){let r;try{r=d(await e.read(t.identityHash),t.identityHash)}catch{return{kind:"stop",reasonCode:"auth-business-replay-unsafe"}}const o=r.activeRecovery;if(!o||o.recoveryId!==t.recoveryId||o.operationId!==t.operationId)return{kind:"stop",reasonCode:"auth-business-identity-mismatch"};const i=R({recoveryId:t.recoveryId,operationId:t.operationId,generationCommitted:o.phase==="generation-committed"&&r.accepted!==null,identityMatches:r.identityHash===t.identityHash,requestMatches:o.requestDigest===t.requestDigest,replayCount:o.replayCount,receipt:t.receipt,supportsIdempotency:t.supportsIdempotency,rotationUncertain:t.rotationUncertain===!0||o.phase==="uncertain"});if(i.kind!=="replay-once")return i;try{return await h(e,r,{activeRecovery:{...o,replayCount:1}}),i}catch{return{kind:"stop",reasonCode:"auth-generation-revision-conflict"}}}async function G(e,t){if(!u.test(t.identityHash)||![t.recoveryId,t.operationId,t.outcome].every(n=>p.test(n)))throw new Error("auth-business-identity-mismatch");const r=d(await e.read(t.identityHash),t.identityHash),o=r.activeRecovery;if(!o||o.recoveryId!==t.recoveryId||o.operationId!==t.operationId)throw new Error("auth-business-identity-mismatch");const i=r.receipts.find(n=>n.recoveryId===t.recoveryId);if(i){if(i.operationId!==t.operationId||i.outcome!==t.outcome)throw new Error("auth-business-identity-mismatch");return r}if(o.phase!=="generation-committed"||r.accepted===null)throw new Error("auth-business-replay-unsafe");if(r.receipts.length>=32)throw new Error("auth-generation-capacity");const s=t.completedAt??new Date().toISOString();if(!f(s))throw new Error("auth-business-identity-mismatch");return h(e,r,{activeRecovery:{...o,phase:"completed"},receipts:[...r.receipts,{recoveryId:t.recoveryId,operationId:t.operationId,outcome:t.outcome,completedAt:s}]})}function F(e){switch(e.kind){case"token":{const t=e.now??Date.now(),r=Date.parse(e.expiresAt);return Number.isFinite(r)?r<=t?{status:"refresh-required",cause:"expired",action:"prepare"}:r-t<=3e5?{status:"refresh-required",cause:"near-expiry",action:"prepare"}:{status:"authenticated",generation:e.generation,accessCredential:e.credential,expiresAt:e.expiresAt}:{status:"refresh-required",cause:"protocol-invalid",action:"stop"}}case"configuration":return e.configured?{status:"refresh-required",cause:"store-unavailable",action:"stop"}:{status:"not-configured",action:"activate"};case"store":return{status:"refresh-required",cause:e.cause,action:e.cause==="store-unavailable"?"retry-later":"stop"};case"transport":return e.requestStarted?y(e.recoveryId??"unknown-recovery","rotation-uncertain"):{status:"refresh-required",cause:e.timeout?"timeout":"transport-error",action:"retry-later"};case"http":{const t=e.errorCode??"";return e.status===429?{status:"refresh-required",cause:"rate-limited",action:"retry-later"}:e.status>=500?{status:"refresh-required",cause:"service-unavailable",action:"retry-later"}:t==="invalid_grant"||t==="revoked"?{status:"refresh-required",cause:"revoked",action:"reactivate"}:t==="invalid_scope"||t==="scope_denied"?{status:"refresh-required",cause:"scope-denied",action:"request-scope"}:t==="client_denied"?{status:"refresh-required",cause:"client-denied",action:"stop"}:{status:"refresh-required",cause:"protocol-invalid",action:"stop"}}case"persistence":return y(e.recoveryId,"persistence-failed")}}function P(){return D()}function S(e){if(e!==null){if(!l(e)||!m(e,["generation","accessToken","accessExpiresAt","refreshToken","refreshExpiresAt","acceptedAt","responseDigest"]))throw new Error("auth-generation-corrupt");if(!Number.isSafeInteger(e.generation)||e.generation<1||typeof e.accessToken!="string"||e.accessToken.length===0||e.accessToken.length>65536||e.refreshToken!==null&&(typeof e.refreshToken!="string"||e.refreshToken.length>65536)||!f(e.accessExpiresAt)||!f(e.acceptedAt)||e.refreshExpiresAt!==null&&!f(e.refreshExpiresAt)||!u.test(e.responseDigest))throw new Error("auth-generation-corrupt")}}function H(e){if(e===null)return;if(!l(e)||!m(e,["recoveryId","operationId","idempotencyKey","requestDigest","owner","createdAt","expiresAt","attemptCount","replayCount","phase","responseDigest"],!0))throw new Error("auth-generation-corrupt");const t=["prepared","request-started","response-received","generation-committed","uncertain","completed","aborted-before-request"];if(![e.recoveryId,e.operationId,e.idempotencyKey,e.owner].every(r=>p.test(r))||!u.test(e.requestDigest)||!f(e.createdAt)||!f(e.expiresAt)||![0,1].includes(e.attemptCount)||![0,1].includes(e.replayCount)||!t.includes(e.phase)||e.responseDigest!==void 0&&!u.test(e.responseDigest))throw new Error("auth-generation-corrupt")}function T(e){if(!l(e)||!m(e,["recoveryId","operationId","outcome","completedAt"])||!p.test(e.recoveryId)||!p.test(e.operationId)||!p.test(e.outcome)||!f(e.completedAt))throw new Error("auth-generation-corrupt")}function _(e,t){return e.operationId===t.operationId&&e.idempotencyKey===t.idempotencyKey&&e.requestDigest===t.requestDigest}function A(e){return{status:"authenticated",generation:e.generation,accessCredential:e.accessToken,expiresAt:e.accessExpiresAt}}function y(e,t){return{status:"uncertain",cause:t,recoveryId:e,action:"recover-explicitly"}}function x(e){const t=e instanceof Error?e.message:"";return t==="auth-generation-revision-conflict"||t==="auth-recovery-backpressure"?{status:"refresh-required",cause:"revision-conflict",action:"retry-later"}:t==="auth-generation-corrupt"||t==="auth-generation-path-unsafe"?{status:"refresh-required",cause:"store-corrupt",action:"stop"}:{status:"refresh-required",cause:"store-unavailable",action:"retry-later"}}async function q(e,t,r){try{await h(e,t,{activeRecovery:{...r,phase:"uncertain"}})}catch{}}async function M(e,t){const r=new AbortController;let o;const i=new Promise((s,n)=>{o=setTimeout(()=>{r.abort(),n(new Error("auth-refresh-timeout"))},t),o.unref?.()});try{return await Promise.race([e(r.signal),i])}finally{o&&clearTimeout(o)}}function f(e){return typeof e=="string"&&Number.isFinite(Date.parse(e))}function l(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function m(e,t,r=!1){const o=Object.keys(e).sort();return(r?t.slice(0,-1):t).every(s=>o.includes(s))&&o.every(s=>t.includes(s))}export{K as EncryptedAuthGenerationStore,F as classifyAuthCausalEvidence,G as completeAuthRecovery,J as createAuthIdentityHash,R as decideAuthBusinessReplay,P as newRecoveryId,U as recoverHostAuthentication,B as reserveAuthBusinessReplay,d as validateAuthGenerationDocument};