@oxagen/cli 2.1.4-719 → 2.1.4-724

package/oxagen.mjs

@@ -269,15 +269,15 @@ function writeFileAtomic(path2, data, options) {
 function writeAll(fd2, bytes) {
   let offset = 0;
   while (offset < bytes.length) {
-    const written = writeSync(fd2, bytes, offset, bytes.length - offset);
-    if (written <= 0)
+    const written2 = writeSync(fd2, bytes, offset, bytes.length - offset);
+    if (written2 <= 0)
       throw Object.assign(
         new Error(
           `write took ${offset} of ${bytes.length} bytes and then no more`
         ),
         { code: "EIO" }
       );
-    offset += written;
+    offset += written2;
   }
 }
 function writeSensitiveFileAtomic(path2, data, mode = 384) {
@@ -10464,8 +10464,8 @@ function isDaemonImage(record, image) {
 }
 function createdAfterRecord(record, createdMs) {
   if (createdMs === void 0 || record.started_at === void 0) return false;
-  const written = Date.parse(record.started_at);
-  return Number.isFinite(written) && createdMs > written + CLOCK_STEP_SLACK_MS;
+  const written2 = Date.parse(record.started_at);
+  return Number.isFinite(written2) && createdMs > written2 + CLOCK_STEP_SLACK_MS;
 }
 function processExecutable(pid) {
   try {
@@ -22316,8 +22316,8 @@ function readSidecar(path2, harness) {
       `${path2} cannot be read, so what Oxagen displaced in ${harness}'s settings is unknown: ${error instanceof Error ? error.message : String(error)}; repair it or remove it and run this again`
     );
   }
-  const written = parsed2["written_sha256"];
-  if (parsed2["schema"] !== SIDECAR_SCHEMA || typeof written !== "string")
+  const written2 = parsed2["written_sha256"];
+  if (parsed2["schema"] !== SIDECAR_SCHEMA || typeof written2 !== "string")
     return void 0;
   const stringAt = (key) => {
     const value = parsed2[key];
@@ -22327,7 +22327,7 @@ function readSidecar(path2, harness) {
     schema: SIDECAR_SCHEMA,
     existed: parsed2["existed"] === true,
     original_base64: stringAt("original_base64") ?? "",
-    written_sha256: written,
+    written_sha256: written2,
     previous: stringAt("previous")
   };
   if (harness === "claude-code")
@@ -23097,14 +23097,14 @@ function readSidecar2(path2, harness) {
       `${path2} cannot be read, so what Oxagen took from ${harness}'s credential file is unknown: ${error instanceof Error ? error.message : String(error)}; repair it or remove it and run this again`
     );
   }
-  const written = parsed2["written_sha256"];
-  if (parsed2["schema"] !== SIDECAR_SCHEMA2 || typeof written !== "string")
+  const written2 = parsed2["written_sha256"];
+  if (parsed2["schema"] !== SIDECAR_SCHEMA2 || typeof written2 !== "string")
     return void 0;
   const taken = parsed2["taken"];
   const common = {
     schema: SIDECAR_SCHEMA2,
     existed: parsed2["existed"] === true,
-    written_sha256: written,
+    written_sha256: written2,
     taken: Array.isArray(taken) ? taken.filter(
       (t) => typeof t === "object" && t !== null && typeof t.member === "string" && (t.kind === "api_key" || t.kind === "bearer")
     ) : []
@@ -23331,12 +23331,12 @@ function restoreClaude(options, released, sidecar) {
   if (text5 === void 0) {
     if (released !== void 0) {
       const member3 = released.kind === "bearer" ? CLAUDE_AUTH_TOKEN : CLAUDE_API_KEY;
-      const written = serializeJsonLike(void 0, {
+      const written2 = serializeJsonLike(void 0, {
         env: { [member3]: released.secret }
       });
-      writeFileAtomicPreserving(file, written);
+      writeFileAtomicPreserving(file, written2);
       dropSidecar();
-      return { changed: true, text: written, secretRestored: true };
+      return { changed: true, text: written2, secretRestored: true };
     }
     dropSidecar();
     return { changed: false, text: text5, secretRestored: false };
@@ -23388,12 +23388,12 @@ function restoreCodex(options, released, sidecar) {
   };
   if (text5 === void 0) {
     if (released !== void 0) {
-      const written = serializeJsonLike(void 0, {
+      const written2 = serializeJsonLike(void 0, {
         [CODEX_KEY2]: released.secret
       });
-      writeFileAtomicPreserving(file, written);
+      writeFileAtomicPreserving(file, written2);
       dropSidecar();
-      return { changed: true, text: written, secretRestored: true };
+      return { changed: true, text: written2, secretRestored: true };
     }
     dropSidecar();
     return { changed: false, text: text5, secretRestored: false };
@@ -24941,7 +24941,7 @@ import { readFileSync as readFileSync10 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.4-719";
+  if (true) return "2.1.4-724";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -27718,14 +27718,14 @@ ${lines.join("\n")}
       /** Overwrite the bytes at `at` with spaces, leaving its newline. */
       static overwriteWithSpaces(fd2, at2) {
         const spaces = Buffer.alloc(Math.min(at2.length, 64 * 1024), " ");
-        let written = 0;
-        while (written < at2.length) {
-          written += writeSync4(
+        let written2 = 0;
+        while (written2 < at2.length) {
+          written2 += writeSync4(
             fd2,
             spaces,
             0,
-            Math.min(spaces.length, at2.length - written),
-            at2.offset + written
+            Math.min(spaces.length, at2.length - written2),
+            at2.offset + written2
           );
         }
       }
@@ -38439,21 +38439,21 @@ function rootReadOnly(system, path2, kind) {
 }
 function pinSandboxHooks(system, options) {
   const port = options.gatewayPort ?? SANDBOX_GATEWAY_PORT;
-  const written = [
+  const written2 = [
     [SANDBOX_HOOK_SCRIPT, sandboxHookScript(port)],
     [
       CLAUDE_MANAGED_SETTINGS,
       claudeCodeManagedSettings(`${options.nodePath} ${SANDBOX_HOOK_SCRIPT}`)
     ]
   ];
-  for (const [path2, contents] of written) {
+  for (const [path2, contents] of written2) {
     const directory = dirname15(path2);
     system.mkdir(directory, 493);
     system.chown(directory, 0, 0);
     system.writeFile(path2, contents, 292);
     system.chown(path2, 0, 0);
   }
-  const files2 = [options.nodePath, ...written.map(([path2]) => path2)];
+  const files2 = [options.nodePath, ...written2.map(([path2]) => path2)];
   for (const path2 of files2)
     if (!rootReadOnly(system, path2, "file") || !rootReadOnly(system, dirname15(path2), "directory"))
       throw new Error(
@@ -40026,13 +40026,13 @@ async function contentHash(absolutePath, kind, keep) {
     await handle2.close().catch(() => void 0);
     await unlink(temp2).catch(() => void 0);
   };
-  let written = 0;
+  let written2 = 0;
   try {
     for await (const chunk2 of createReadStream(absolutePath)) {
       hash3.update(chunk2);
       if (copy === null) continue;
-      written += chunk2.length;
-      if (keep === void 0 || written > keep.bytes) await drop();
+      written2 += chunk2.length;
+      if (keep === void 0 || written2 > keep.bytes) await drop();
       else await copy.handle.write(chunk2).catch(async () => drop());
     }
   } catch {
@@ -40715,8 +40715,8 @@ async function readSessionCommits(exec4, cwd, input) {
     const files2 = rows.map(fileOf).sort(byPath);
     const test = input.tests[commit.sha];
     const toolUseId = callAt(times.get(commit.sha), calls);
-    const written = input.written;
-    const outside = merge || written === void 0 || root === void 0 ? void 0 : files2.some((file) => !written.has(join29(root, file.path)));
+    const written2 = input.written;
+    const outside = merge || written2 === void 0 || root === void 0 ? void 0 : files2.some((file) => !written2.has(join29(root, file.path)));
     return {
       sha: commit.sha,
       parent_shas: commit.parents.slice(0, MAX_COMMIT_PARENTS),
@@ -57199,7 +57199,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.4-719",
+      version: "2.1.4-724",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -62101,11 +62101,11 @@ async function syncSteering(opts) {
       committed: false
     };
   }
-  let written = 0;
+  let written2 = 0;
   const outOfBudget = () => deadlineMs !== void 0 && deadlineMs - now() < MIN_SYNC_SLICE_MS;
   const outOfTime = () => refuse3(
     "out_of_time",
-    `The prompt's hook ran out of time after ${written} of ${updated.length + removed.length} file(s) under \`.oxagen/\` were taken from ${target2}. Run \`oxagen steering sync\` to finish, or \`git restore --staged --worktree .oxagen\` to undo it.`
+    `The prompt's hook ran out of time after ${written2} of ${updated.length + removed.length} file(s) under \`.oxagen/\` were taken from ${target2}. Run \`oxagen steering sync\` to finish, or \`git restore --staged --worktree .oxagen\` to undo it.`
   );
   if (updated.length > 0) {
     for (const batch of chunk(updated, 200)) {
@@ -62124,7 +62124,7 @@ async function syncSteering(opts) {
         "--",
         ...batch
       );
-      written += batch.length;
+      written2 += batch.length;
     }
   }
   if (removed.length > 0) {
@@ -62139,7 +62139,7 @@ async function syncSteering(opts) {
         "--",
         ...batch
       );
-      written += batch.length;
+      written2 += batch.length;
     }
     if (force) {
       for (const batch of chunk(removed, 200)) {
@@ -75312,7 +75312,7 @@ function codegraphSettingsGroupOf(path2) {
     (entry2) => codegraphSettingsPath(entry2.group) === path2
   ) ?? null;
 }
-var share, confidence, sourceTagSchema, codegraphSourcesSchema, CODEGRAPH_SOURCES_DEFAULTS, CODEGRAPH_FILE_SIZE_LIMIT_BYTES_DEFAULT, CODEGRAPH_SKIPPED_PATHS_DEFAULT, codegraphIndexingSchema, CODEGRAPH_INDEXING_DEFAULTS, codegraphKeySourceSchema, codegraphCallModeSchema, modelId, codegraphModelsSchema, CODEGRAPH_MODELS_DEFAULTS, codegraphEmbeddingProviderSchema, CODEGRAPH_EMBEDDING_DIMENSIONS_MAX, CODEGRAPH_OXAGEN_EMBEDDING_MODEL, CODEGRAPH_ENDPOINT_URL_PATTERN, codegraphEmbeddingsSchema, CODEGRAPH_EMBEDDINGS_DEFAULTS, codegraphLocalSchema, CODEGRAPH_LOCAL_DEFAULTS, CODEGRAPH_PROVENANCE_CONFIDENCE_DEFAULTS, codegraphConfidenceSchema, CODEGRAPH_CONFIDENCE_DEFAULTS, codegraphDomainsSchema, CODEGRAPH_DOMAINS_DEFAULTS, CODEGRAPH_BOT_AUTHORS_DEFAULT, codegraphHistorySchema, CODEGRAPH_HISTORY_DEFAULTS, codegraphDecisionsSchema, CODEGRAPH_DECISIONS_DEFAULTS, codegraphHostDefaultSchema, CODEGRAPH_HOST_DEFAULTS, codegraphScriptsSchema, CODEGRAPH_SCRIPTS_DEFAULTS, codegraphDomainIdSchema, codegraphBoundariesSchema, CODEGRAPH_BOUNDARIES_DEFAULTS, codegraphBudgetsSchema, CODEGRAPH_BUDGETS_DEFAULTS, codegraphFreshnessSchema, CODEGRAPH_FRESHNESS_DEFAULTS, CODEGRAPH_SETTINGS_GROUPS;
+var share, confidence, sourceTagSchema, codegraphSourcesSchema, CODEGRAPH_SOURCES_DEFAULTS, CODEGRAPH_FILE_SIZE_LIMIT_BYTES_DEFAULT, CODEGRAPH_SKIPPED_PATHS_DEFAULT, codegraphIndexingSchema, CODEGRAPH_INDEXING_DEFAULTS, codegraphKeySourceSchema, codegraphCallModeSchema, modelId, codegraphModelsSchema, CODEGRAPH_MODELS_DEFAULTS, codegraphEmbeddingProviderSchema, CODEGRAPH_EMBEDDING_DIMENSIONS_MAX, CODEGRAPH_OXAGEN_EMBEDDING_MODEL, CODEGRAPH_ENDPOINT_URL_PATTERN, codegraphEmbeddingsSchema, CODEGRAPH_EMBEDDINGS_DEFAULTS, codegraphLocalSchema, CODEGRAPH_LOCAL_DEFAULTS, CODEGRAPH_PROVENANCE_CONFIDENCE_DEFAULTS, codegraphConfidenceSchema, CODEGRAPH_CONFIDENCE_DEFAULTS, codegraphDomainIdSchema, written, domainName, domainDefinition, codegraphDomainChangeSchema, codegraphDomainsSchema, CODEGRAPH_DOMAINS_DEFAULTS, CODEGRAPH_BOT_AUTHORS_DEFAULT, codegraphHistorySchema, CODEGRAPH_HISTORY_DEFAULTS, codegraphDecisionsSchema, CODEGRAPH_DECISIONS_DEFAULTS, codegraphHostDefaultSchema, CODEGRAPH_HOST_DEFAULTS, codegraphScriptsSchema, CODEGRAPH_SCRIPTS_DEFAULTS, codegraphBoundariesSchema, CODEGRAPH_BOUNDARIES_DEFAULTS, codegraphBudgetsSchema, CODEGRAPH_BUDGETS_DEFAULTS, codegraphFreshnessSchema, CODEGRAPH_FRESHNESS_DEFAULTS, CODEGRAPH_SETTINGS_GROUPS;
 var init_codegraph_settings = __esm({
   "../../packages/oxagen/src/steering-repo/codegraph-settings.ts"() {
     "use strict";
@@ -75586,9 +75586,38 @@ var init_codegraph_settings = __esm({
       agent_publish_score: 0.6,
       agent_confidence_cap: 0.8
     };
+    codegraphDomainIdSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9_.-]{0,127}$/, "a domain id is lowercase");
+    written = (max2) => external_exports.string().min(1).max(max2).regex(/\S/, "write at least one word");
+    domainName = () => written(120);
+    domainDefinition = () => written(600);
+    codegraphDomainChangeSchema = external_exports.discriminatedUnion("action", [
+      external_exports.object({
+        action: external_exports.literal("rename"),
+        domain: codegraphDomainIdSchema,
+        name: domainName().describe("The new name."),
+        definition: domainDefinition().optional().describe("The new one-sentence definition. Unset: keep the current one.")
+      }).strict(),
+      external_exports.object({
+        action: external_exports.literal("merge"),
+        domain: codegraphDomainIdSchema,
+        into: codegraphDomainIdSchema.describe(
+          "The domain that takes every member of `domain`."
+        )
+      }).strict(),
+      external_exports.object({
+        action: external_exports.literal("split"),
+        domain: codegraphDomainIdSchema,
+        id: codegraphDomainIdSchema.describe("The stable ID of the new domain."),
+        name: domainName().describe("The name of the new domain."),
+        definition: domainDefinition().optional(),
+        paths: external_exports.array(written(512)).min(1).describe("The folders or files whose members move to the new domain.")
+      }).strict()
+    ]);
     codegraphDomainsSchema = external_exports.object({
       tag_score: setting(
-        share().describe("The score a source tag adds toward a domain."),
+        share().describe(
+          "The score a domain needs for a node to take it. Every node takes at least one."
+        ),
         0.35
       ),
       close_call_margin: setting(
@@ -75606,6 +75635,9 @@ var init_codegraph_settings = __esm({
           "Regroup domains when this share of the grouping graph's edge weight changes."
         ),
         0.1
+      ),
+      changes: external_exports.array(codegraphDomainChangeSchema).optional().describe(
+        "The renames, merges, and splits a workspace Admin approved, applied in order on every rebuild."
       )
     }).strict();
     CODEGRAPH_DOMAINS_DEFAULTS = {
@@ -75731,7 +75763,6 @@ var init_codegraph_settings = __esm({
       host_defaults: CODEGRAPH_HOST_DEFAULTS,
       trusted_policies: []
     };
-    codegraphDomainIdSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9_.-]{0,127}$/, "a domain id is lowercase");
     codegraphBoundariesSchema = external_exports.object({
       allowed_crossings: uniqueArray(
         external_exports.object({
@@ -75835,7 +75866,7 @@ var init_codegraph_settings = __esm({
         group: "domains",
         id: "codegraph-domains/v1",
         title: "Code graph domains",
-        description: "codegraph/domains.toml: the tag score, the close-call margin and limit, and the regrouping threshold.",
+        description: "codegraph/domains.toml: the tag score, the close-call margin and limit, the regrouping threshold, and the approved domain changes.",
         schema: codegraphDomainsSchema,
         defaults: CODEGRAPH_DOMAINS_DEFAULTS,
         timing: "next_build"
@@ -101557,7 +101588,7 @@ function fromReflection(protos, notes) {
   const symbols = new Symbols();
   for (const file of effective) symbols.register(file);
   const visibility = new Visibility(effective);
-  const written = [];
+  const written2 = [];
   for (const [name, file] of [...reflected].sort(
     ([a], [b3]) => a < b3 ? -1 : a > b3 ? 1 : 0
   )) {
@@ -101565,18 +101596,18 @@ function fromReflection(protos, notes) {
       noteChangedWkt(file, notes);
       continue;
     }
-    written.push({
+    written2.push({
       path: `${PROTO_DIR}${name}`,
       text: printProto(file, symbols, visibility.of(name), notes)
     });
   }
-  if (written.length === 0) {
+  if (written2.length === 0) {
     throw new GrpcImportError(
       "empty",
       "Server reflection returned only well-known types, so it holds no service to import. Import the server's .proto files instead."
     );
   }
-  return written;
+  return written2;
 }
 function decodeAll(protos) {
   const byName2 = /* @__PURE__ */ new Map();
@@ -102153,8 +102184,8 @@ var init_tools5 = __esm({
 // ../../packages/mcp-studio/src/grpc/index.ts
 async function importGrpc(input) {
   const notes = new Notes();
-  const written = "files" in input ? [] : fromReflection(input.reflection.file_descriptor_protos, notes);
-  const sources = "files" in input ? input.files : written;
+  const written2 = "files" in input ? [] : fromReflection(input.reflection.file_descriptor_protos, notes);
+  const sources = "files" in input ? input.files : written2;
   const set = buildSet(sources, notes);
   return {
     ...toolsOf2(set, notes),
@@ -102162,7 +102193,7 @@ async function importGrpc(input) {
     environments: [],
     auth: [],
     document_hash: bundleHash(sources),
-    files: written,
+    files: written2,
     descriptor_set: set.descriptorSet
   };
 }
@@ -130005,7 +130036,7 @@ var init_common2 = __esm({
 function call(name, request3, result2) {
   return { call: name, request: request3, result: result2, response: responseSchema(result2) };
 }
-var unit3, count10, names, excluded, withinSchema, testRefSchema, SEARCH_GROUPS, searchHitSchema, searchCodeGraphRequest, searchCodeGraphResult, blastTargetSchema, decisionItemSchema, blastGroupsSchema, getBlastRadiusRequest, getBlastRadiusResult, listUnitTestsRequest, listUnitTestsResult, flowDataSchema, flowNodeSchema, jobStepSchema, getExecutionFlowRequest, getExecutionFlowResult, traceSpecRequest, traceSpecResult, listGoverningDecisionsBase, listGoverningDecisionsRequestShape, listGoverningDecisionsRequest, listGoverningDecisionsResult, getEnvVarsRequest, getEnvVarsResult, connectionSchema, getInfraRequest, getInfraResult, listCiJobsRequest, listCiJobsResult, scriptEffectSchema, listScriptsRequest, listScriptsResult, getApiDocsRequest, getApiDocsResult, exportOpenapiDraftRequest, exportOpenapiDraftResult, listCoChangesRequest, listCoChangesResult, rankSymbolsRequest, rankSymbolsResult, getRepoMapRequest, getRepoMapResult, getDomainBriefRequest, getDomainBriefResult, checkChangeRequest, checkChangeResult, findDefinitionRequest, findDefinitionResult, findReferencesRequest, findReferencesResult, findImplementationsRequest, findImplementationsResult, listNeighborsRequest, listNeighborsResult, CODEGRAPH_CALLS;
+var unit3, count10, names, excluded, withinSchema, testRefSchema, SEARCH_GROUPS, searchHitSchema, SEARCH_MEANING_STATES, searchMeaningStateSchema, searchCodeGraphRequest, searchCodeGraphResult, blastTargetSchema, decisionItemSchema, blastGroupsSchema, getBlastRadiusRequest, getBlastRadiusResult, listUnitTestsRequest, listUnitTestsResult, flowDataSchema, flowNodeSchema, jobStepSchema, getExecutionFlowRequest, getExecutionFlowResult, traceSpecRequest, traceSpecResult, listGoverningDecisionsBase, listGoverningDecisionsRequestShape, listGoverningDecisionsRequest, listGoverningDecisionsResult, getEnvVarsRequest, getEnvVarsResult, connectionSchema, getInfraRequest, getInfraResult, listCiJobsRequest, listCiJobsResult, scriptEffectSchema, listScriptsRequest, listScriptsResult, getApiDocsRequest, getApiDocsResult, exportOpenapiDraftRequest, exportOpenapiDraftResult, listCoChangesRequest, listCoChangesResult, rankSymbolsRequest, rankSymbolsResult, getRepoMapRequest, getRepoMapResult, getDomainBriefRequest, getDomainBriefResult, checkChangeRequest, checkChangeResult, findDefinitionRequest, findDefinitionResult, findReferencesRequest, findReferencesResult, findImplementationsRequest, findImplementationsResult, listNeighborsRequest, listNeighborsResult, CODEGRAPH_CALLS;
 var init_calls = __esm({
   "../../packages/codegraph/src/query/calls.ts"() {
     "use strict";
@@ -130049,13 +130080,24 @@ var init_calls = __esm({
       at: external_exports.string().min(1).optional(),
       why: external_exports.string().min(1).optional(),
       status: external_exports.string().min(1).optional(),
-      id: external_exports.string().min(1).optional()
+      id: external_exports.string().min(1).optional(),
+      kind: nodeKindSchema,
+      score: external_exports.number().nonnegative(),
+      /** True for a node the question names exactly. */
+      exact: external_exports.boolean().optional(),
+      /** The domains the result is tagged with, heaviest first. */
+      domains: names.optional(),
+      signature: external_exports.string().min(1).optional(),
+      /** With `responseFormat: "detailed"`: the names and links the walk took. */
+      path: external_exports.array(external_exports.string().min(1)).optional()
     }).strict().refine((h) => h.name !== void 0 || h.file !== void 0, {
       message: "a hit needs a name or a file"
     });
+    SEARCH_MEANING_STATES = ["used", "off", "unavailable"];
+    searchMeaningStateSchema = external_exports.enum(SEARCH_MEANING_STATES);
     searchCodeGraphRequest = requestSchema({
-      query: external_exports.string().min(1),
-      groups: external_exports.array(external_exports.enum(SEARCH_GROUPS)).optional()
+      query: external_exports.string().trim().min(1).max(2e3),
+      groups: external_exports.array(external_exports.enum(SEARCH_GROUPS)).min(1).optional()
     });
     searchCodeGraphResult = external_exports.object({
       query: external_exports.string().min(1),
@@ -130075,6 +130117,7 @@ var init_calls = __esm({
         decisions: external_exports.array(searchHitSchema)
       }).partial().strict(),
       dossiers: names,
+      meaning: searchMeaningStateSchema.optional(),
       excluded
     }).strict();
     blastTargetSchema = external_exports.object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxagen/cli",
-  "version": "2.1.4-719",
+  "version": "2.1.4-724",
   "description": "Oxagen governance CLI — spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
   "type": "module",
   "bin": {