@paths.design/caws-cli 10.2.0 → 11.0.0

package/dist/shell/commands/doctor.js

@@ -0,0 +1,97 @@
+"use strict";
+// `caws doctor` — composition command.
+//
+// Pipeline (no business logic in this file):
+//
+//   1. resolveRepoRoot(cwd)         (store)
+//   2. composeDoctorSnapshot(...)   (store)
+//   3. inspectProjectState(input)   (kernel)
+//   4. render store-load diagnostics  (renderer)
+//   5. render doctor findings         (renderer)
+//   6. choose exit code               (this file)
+//
+// The command does NOT read .caws/ files directly, does NOT walk specs,
+// does NOT invent repair rules, and does NOT re-validate state.
+//
+// Exit codes:
+//   0 = no error-severity findings AND no error-severity store-load
+//       diagnostics
+//   1 = any error-severity finding OR any error-severity store-load
+//       diagnostic. (Store-load errors count even when they were filtered
+//       out before reaching the kernel, because an invalid spec file is a
+//       project-health problem regardless.)
+//   2 = repo-root resolution failed, or other hard composition failure.
+//
+// Testable without Commander: caller passes cwd / out / err / now and
+// receives a number. `registerShellCommands(program)` (Slice 5c.9) is the
+// only place that wires this to Commander.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDoctorCommand = runDoctorCommand;
+const caws_kernel_1 = require("@paths.design/caws-kernel");
+const store_1 = require("../../store");
+const index_1 = require("../index");
+function runDoctorCommand(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const now = opts.now ?? new Date();
+    const out = opts.out ?? ((s) => process.stdout.write(s + '\n'));
+    const err = opts.err ?? ((s) => process.stderr.write(s + '\n'));
+    const showData = opts.showData === true;
+    // 1. Repo root
+    const repoRootResult = (0, store_1.resolveRepoRoot)(cwd);
+    if (!repoRootResult.ok) {
+        err('caws doctor: failed to resolve repo root.');
+        err((0, index_1.renderDiagnostics)(repoRootResult.errors, { showData }));
+        return 2;
+    }
+    const { repoRoot, cawsDir } = repoRootResult.value;
+    // 2 + 3. Compose snapshot, run kernel diagnoser
+    let composition;
+    try {
+        composition = (0, store_1.composeDoctorSnapshot)({ repoRoot, cawsDir, now });
+    }
+    catch (e) {
+        err(`caws doctor: store composition failed: ${e.message}`);
+        return 2;
+    }
+    const { snapshot, doctorInput } = composition;
+    let report;
+    try {
+        report = (0, caws_kernel_1.inspectProjectState)(doctorInput);
+    }
+    catch (e) {
+        err(`caws doctor: kernel inspect failed: ${e.message}`);
+        return 2;
+    }
+    // 4. Render store-load diagnostics — kept SEPARATE from doctor findings.
+    const loadDiagnostics = [
+        ...snapshot.specDiagnostics,
+        ...snapshot.policyErrors,
+        ...snapshot.policyWarnings,
+        ...snapshot.eventWarnings,
+    ];
+    out('Store load diagnostics:');
+    if (loadDiagnostics.length === 0) {
+        out('  (none)');
+    }
+    else {
+        out((0, index_1.renderDiagnostics)(loadDiagnostics, { showData }));
+    }
+    // 5. Render doctor findings — separate section.
+    out('');
+    out('Doctor findings:');
+    if (report.findings.length === 0) {
+        out('  (none)');
+    }
+    else {
+        out((0, index_1.renderFindings)(report.findings, { showData }));
+    }
+    // 6. Exit code
+    const loadCounts = (0, index_1.countSeverities)(loadDiagnostics);
+    const findingCounts = (0, index_1.countFindingSeverities)(report.findings);
+    const hasErrors = findingCounts.errors > 0 || loadCounts.errors > 0;
+    out('');
+    out(`Summary: findings ${findingCounts.errors}E/${findingCounts.warnings}W/${findingCounts.infos}I; ` +
+        `load ${loadCounts.errors}E/${loadCounts.warnings}W/${loadCounts.infos}I`);
+    return hasErrors ? 1 : 0;
+}
+//# sourceMappingURL=doctor.js.map

package/dist/shell/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/shell/commands/doctor.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,4CAA4C;AAC5C,4CAA4C;AAC5C,6CAA6C;AAC7C,iDAAiD;AACjD,iDAAiD;AACjD,kDAAkD;AAClD,EAAE;AACF,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,cAAc;AACd,oEAAoE;AACpE,oBAAoB;AACpB,oEAAoE;AACpE,0EAA0E;AAC1E,0EAA0E;AAC1E,4CAA4C;AAC5C,wEAAwE;AACxE,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,2CAA2C;;AA4B3C,4CAsEC;AA/FD,2DAAgE;AAEhE,uCAGqB;AACrB,oCAKkB;AAclB,SAAgB,gBAAgB,CAAC,OAA6B,EAAE;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAExC,eAAe;IACf,MAAM,cAAc,GAAG,IAAA,uBAAe,EAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACjD,GAAG,CAAC,IAAA,yBAAiB,EAAC,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC;IAEnD,gDAAgD;IAChD,IAAI,WAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,WAAW,GAAG,IAAA,6BAAqB,EAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,0CAA2C,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;IAE9C,IAAI,MAA8C,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,iCAAmB,EAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,uCAAwC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,MAAM,eAAe,GAAiB;QACpC,GAAG,QAAQ,CAAC,eAAe;QAC3B,GAAG,QAAQ,CAAC,YAAY;QACxB,GAAG,QAAQ,CAAC,cAAc;QAC1B,GAAG,QAAQ,CAAC,aAAa;KAC1B,CAAC;IAEF,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC/B,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAA,yBAAiB,EAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,gDAAgD;IAChD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAA,sBAAc,EAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,eAAe;IACf,MAAM,UAAU,GAAG,IAAA,uBAAe,EAAC,eAAe,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,IAAA,8BAAsB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAEpE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CACD,qBAAqB,aAAa,CAAC,MAAM,KAAK,aAAa,CAAC,QAAQ,KAAK,aAAa,CAAC,KAAK,KAAK;QAC/F,QAAQ,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,KAAK,UAAU,CAAC,KAAK,GAAG,CAC5E,CAAC;IAEF,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/shell/commands/evidence.d.ts

@@ -0,0 +1,28 @@
+import { type ActorKind } from '@paths.design/caws-kernel';
+export type EvidenceKind = 'test' | 'gate' | 'ac';
+export interface EvidenceRecordOptions {
+    /** Which evidence event to record. */
+    readonly kind: EvidenceKind;
+    /** Required: the spec id this evidence is about. */
+    readonly specId: string;
+    /** Required: the event payload — must match the kernel's event-type schema. */
+    readonly data: Record<string, unknown>;
+    /** Actor kind. Defaults to 'agent'. */
+    readonly actorKind?: ActorKind;
+    /** Optional actor id override. Defaults to session.identity.session_id. */
+    readonly actorId?: string;
+    /** Optional ISO-8601 ts. Defaults to now. */
+    readonly ts?: string;
+    /** Working directory. Defaults to process.cwd(). */
+    readonly cwd?: string;
+    /** Injected clock for tests. */
+    readonly now?: () => Date;
+    /** Injected env for tests. */
+    readonly env?: NodeJS.ProcessEnv;
+    readonly out?: (line: string) => void;
+    readonly err?: (line: string) => void;
+    /** Show optional `data` blocks on rendered errors. */
+    readonly showData?: boolean;
+}
+export declare function runEvidenceRecordCommand(opts: EvidenceRecordOptions): number;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/shell/commands/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/shell/commands/evidence.ts"],"names":[],"mappings":"AAyBA,OAAO,EAEL,KAAK,SAAS,EAGf,MAAM,2BAA2B,CAAC;AAQnC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAQlD,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAeD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAqG5E"}

package/dist/shell/commands/evidence.js

@@ -0,0 +1,166 @@
+"use strict";
+// `caws evidence record` — append one typed evidence event.
+//
+// Pipeline:
+//   1. resolveRepoRoot(cwd)
+//   2. resolveSession({ allowMint: true })       — this is a write op
+//   3. buildActor({ session, kind })
+//   4. construct EventBody from caller inputs   — body-only; no seq/prev/hash
+//   5. appendEvent(cawsDir, body)                 — store enforces lock,
+//                                                   chain via kernel
+//                                                   prepareAppend
+//   6. print seq + event_hash AFTER success
+//
+// Exit codes:
+//   0 = append succeeded
+//   1 = validation rejected the body OR appendEvent returned Err
+//   2 = repo-root / session resolution / composition failure
+//
+// CRITICAL: the API surface accepts EventBody-shaped inputs only. It does
+// not accept `seq`, `prev_hash`, or `event_hash`. The CLI layer parsing
+// (commander) MUST NOT add those fields. If a caller does pass them via
+// the data object, kernel `validateEventBody` rejects them (additionalProperties:
+// false on the per-event-type payload schemas).
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runEvidenceRecordCommand = runEvidenceRecordCommand;
+const path = __importStar(require("node:path"));
+const store_1 = require("../../store");
+const actor_1 = require("../session/actor");
+const resolve_session_1 = require("../session/resolve-session");
+const diagnostic_1 = require("../render/diagnostic");
+const rules_1 = require("../rules");
+const KIND_TO_EVENT_TYPE = {
+    test: 'test_recorded',
+    gate: 'gate_evaluated',
+    ac: 'ac_recorded',
+};
+function rejectPreChainedFields(data) {
+    for (const banned of ['seq', 'prev_hash', 'event_hash']) {
+        if (Object.prototype.hasOwnProperty.call(data, banned)) {
+            return banned;
+        }
+    }
+    return null;
+}
+function isEvidenceKind(value) {
+    return value === 'test' || value === 'gate' || value === 'ac';
+}
+function runEvidenceRecordCommand(opts) {
+    const cwd = opts.cwd ?? process.cwd();
+    const now = opts.now ?? (() => new Date());
+    const env = opts.env ?? process.env;
+    const out = opts.out ?? ((s) => process.stdout.write(s + '\n'));
+    const err = opts.err ?? ((s) => process.stderr.write(s + '\n'));
+    const showData = opts.showData === true;
+    // Validate the evidence kind up front (defensive — Commander should
+    // reject unknown values at the parser, but tests / programmatic callers
+    // may bypass that).
+    if (!isEvidenceKind(opts.kind)) {
+        err(`caws evidence record: invalid --type. Got ${JSON.stringify(opts.kind)}; expected test|gate|ac.`);
+        err(`(rule: ${rules_1.SHELL_RULES.COMMAND_INVALID_EVIDENCE_TYPE})`);
+        return 1;
+    }
+    // Reject pre-chained fields in the payload BEFORE doing any I/O.
+    const banned = rejectPreChainedFields(opts.data);
+    if (banned !== null) {
+        err(`caws evidence record: payload must NOT include \`${banned}\`. Pre-chained events are not accepted by this command.`);
+        err(`(rule: ${rules_1.SHELL_RULES.COMMAND_PRE_CHAINED_EVENT_REFUSED})`);
+        return 1;
+    }
+    // Require non-empty spec_id (also enforced by kernel REQUIRES_SPEC_ID
+    // fence, but we surface the shell-level error early).
+    if (typeof opts.specId !== 'string' || opts.specId.length === 0) {
+        err('caws evidence record: --spec is required.');
+        err(`(rule: ${rules_1.SHELL_RULES.COMMAND_MISSING_SPEC_ID})`);
+        return 1;
+    }
+    // 1. Repo root.
+    const repoRootResult = (0, store_1.resolveRepoRoot)(cwd);
+    if (!repoRootResult.ok) {
+        err('caws evidence record: failed to resolve repo root.');
+        err((0, diagnostic_1.renderDiagnostics)(repoRootResult.errors, { showData }));
+        return 2;
+    }
+    const { repoRoot, cawsDir } = repoRootResult.value;
+    // 2. Session (write op → allowMint).
+    const sessionResult = (0, resolve_session_1.resolveSession)({
+        cawsDir,
+        worktreeRoot: cwd,
+        env,
+        now,
+        allowMint: true,
+    });
+    if (!sessionResult.ok) {
+        err('caws evidence record: failed to resolve session identity.');
+        err((0, diagnostic_1.renderDiagnostics)(sessionResult.errors, { showData }));
+        return 2;
+    }
+    // 3. Actor envelope.
+    const actor = (0, actor_1.buildActor)({
+        session: sessionResult.value,
+        kind: opts.actorKind ?? 'agent',
+        ...(opts.actorId !== undefined ? { id: opts.actorId } : {}),
+    });
+    // 4. Body.
+    const eventType = KIND_TO_EVENT_TYPE[opts.kind];
+    const ts = opts.ts ?? now().toISOString();
+    // `EventBody.data` is typed as `EventPayload` (a union of per-event
+    // payload shapes). The kernel will validate against the right schema
+    // at append time; we hand off the caller's already-parsed object.
+    const body = {
+        event: eventType,
+        ts,
+        actor,
+        spec_id: opts.specId,
+        data: opts.data,
+    };
+    // 5. Append. `appendEvent` calls `prepareAppend` which calls
+    // `validateEventBody` against the per-type schema.
+    const appendResult = (0, store_1.appendEvent)(cawsDir, body);
+    if (!appendResult.ok) {
+        err('caws evidence record: append rejected.');
+        err((0, diagnostic_1.renderDiagnostics)(appendResult.errors, { showData }));
+        return 1;
+    }
+    // 6. Print outcome AFTER success. Includes seq + event_hash so the
+    // caller (agent or human) gets a stable handle for the new event.
+    const ev = appendResult.value;
+    out(`recorded ${ev.event} seq=${ev.seq} hash=${ev.event_hash} spec=${ev.spec_id ?? '(none)'}`);
+    // Print the relative events file path for ergonomics.
+    out(`  written to ${path.relative(repoRoot, path.join(cawsDir, 'events.jsonl'))}`);
+    return 0;
+}
+//# sourceMappingURL=evidence.js.map

package/dist/shell/commands/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/shell/commands/evidence.ts"],"names":[],"mappings":";AAAA,4DAA4D;AAC5D,EAAE;AACF,YAAY;AACZ,4BAA4B;AAC5B,sEAAsE;AACtE,qCAAqC;AACrC,8EAA8E;AAC9E,yEAAyE;AACzE,qEAAqE;AACrE,kEAAkE;AAClE,4CAA4C;AAC5C,EAAE;AACF,cAAc;AACd,yBAAyB;AACzB,iEAAiE;AACjE,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AACxE,kFAAkF;AAClF,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+DhD,4DAqGC;AAlKD,gDAAkC;AASlC,uCAA2D;AAC3D,4CAA8C;AAC9C,gEAA4D;AAC5D,qDAAyD;AACzD,oCAAuC;AAIvC,MAAM,kBAAkB,GAAoC;IAC1D,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,aAAa;CAClB,CAAC;AA2BF,SAAS,sBAAsB,CAAC,IAA6B;IAC3D,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAA2B;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAExC,oEAAoE;IACpE,wEAAwE;IACxE,oBAAoB;IACpB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,GAAG,CACD,6CAA6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CACjG,CAAC;QACF,GAAG,CACD,UAAU,mBAAW,CAAC,6BAA6B,GAAG,CACvD,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iEAAiE;IACjE,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,GAAG,CACD,oDAAoD,MAAM,0DAA0D,CACrH,CAAC;QACF,GAAG,CAAC,UAAU,mBAAW,CAAC,iCAAiC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,sEAAsE;IACtE,sDAAsD;IACtD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACjD,GAAG,CAAC,UAAU,mBAAW,CAAC,uBAAuB,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,gBAAgB;IAChB,MAAM,cAAc,GAAG,IAAA,uBAAe,EAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC1D,GAAG,CAAC,IAAA,8BAAiB,EAAC,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC;IAEnD,qCAAqC;IACrC,MAAM,aAAa,GAAG,IAAA,gCAAc,EAAC;QACnC,OAAO;QACP,YAAY,EAAE,GAAG;QACjB,GAAG;QACH,GAAG;QACH,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACjE,GAAG,CAAC,IAAA,8BAAiB,EAAC,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAU,IAAA,kBAAU,EAAC;QAC9B,OAAO,EAAE,aAAa,CAAC,KAAK;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEH,WAAW;IACX,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,SAAS;QAChB,EAAE;QACF,KAAK;QACL,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI;KACQ,CAAC;IAE1B,6DAA6D;IAC7D,mDAAmD;IACnD,MAAM,YAAY,GAAG,IAAA,mBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAA,8BAAiB,EAAC,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC;IAC9B,GAAG,CACD,YAAY,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,UAAU,SAAS,EAAE,CAAC,OAAO,IAAI,QAAQ,EAAE,CAC1F,CAAC;IACF,sDAAsD;IACtD,GAAG,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/shell/commands/gates.d.ts

@@ -0,0 +1,19 @@
+import { type QualityGatesRunner } from '../gates/quality-gates-adapter';
+export interface GatesRunCommandOptions {
+    readonly cwd?: string;
+    readonly now?: () => Date;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly out?: (line: string) => void;
+    readonly err?: (line: string) => void;
+    /** Extra args to pass to the subprocess after --json. */
+    readonly subprocessArgs?: readonly string[];
+    /** Injected subprocess runner (tests). */
+    readonly runner?: QualityGatesRunner;
+    /** Show structured data on rendered diagnostics. */
+    readonly showData?: boolean;
+}
+export interface GatesRunCommandRequest {
+    readonly specId: string;
+}
+export declare function runGatesRunCommand(request: GatesRunCommandRequest, opts?: GatesRunCommandOptions): number;
+//# sourceMappingURL=gates.d.ts.map

package/dist/shell/commands/gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../../src/shell/commands/gates.ts"],"names":[],"mappings":"AAyCA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAMxC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,yDAAyD;IACzD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AA6CD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,sBAAsB,EAC/B,IAAI,GAAE,sBAA2B,GAChC,MAAM,CAgIR"}

package/dist/shell/commands/gates.js

@@ -0,0 +1,181 @@
+"use strict";
+// `caws gates run` — single policy-driven gate execution path.
+//
+// Pipeline:
+//   1. resolveRepoRoot(cwd)
+//   2. composeStoreSnapshot               — we need the policy
+//   3. policy presence check              — gates cannot run without policy
+//   4. resolveSession({ allowMint: true }) — we will append events
+//   5. runQualityGates(adapter)            — subprocess + JSON validation
+//   6. deriveDispositions(report, policy)  — policy decides block/warn/skip
+//   7. For each disposition, appendEvent(`gate_evaluated`)
+//   8. Render summary
+//   9. Exit code:
+//      0 if no disposition blocks
+//      1 if any disposition blocks
+//      2 on hard composition errors (no policy, subprocess contract failure,
+//        event append failure)
+//
+// The subprocess does NOT decide blocking. The policy does. The subprocess
+// reports violations; this command groups them per policy-declared gate
+// and applies policy.gates[gate].mode to compute outcome.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGatesRunCommand = runGatesRunCommand;
+const store_1 = require("../../store");
+const diagnostic_1 = require("../render/diagnostic");
+const gates_1 = require("../render/gates");
+const resolve_session_1 = require("../session/resolve-session");
+const actor_1 = require("../session/actor");
+const rules_1 = require("../rules");
+const disposition_1 = require("../gates/disposition");
+const quality_gates_adapter_1 = require("../gates/quality-gates-adapter");
+const waiver_filter_1 = require("../gates/waiver-filter");
+const MAX_EVENT_VIOLATIONS = 100;
+function dispositionToEventBody(args) {
+    const violations = args.disposition.violations
+        .slice(0, MAX_EVENT_VIOLATIONS)
+        .map((v) => ({
+        rule: typeof v.type === 'string' ? v.type : 'unknown',
+        subject: typeof v.file === 'string'
+            ? typeof v.line === 'number'
+                ? `${v.file}:${v.line}`
+                : v.file
+            : (v.gate ?? 'unknown'),
+        ...(v.message !== undefined ? { details: v.message } : {}),
+    }));
+    const ev = args.waiverEvidence;
+    const waivedCount = ev?.waived_count ?? 0;
+    return {
+        event: 'gate_evaluated',
+        ts: args.ts,
+        actor: args.actor,
+        spec_id: args.specId,
+        data: {
+            gate_id: args.disposition.gate_id,
+            mode: args.disposition.mode,
+            result: args.disposition.outcome === 'skipped' ? 'skipped' : args.disposition.outcome,
+            violations,
+            waived_count: waivedCount,
+            ...(ev !== undefined && ev.waiver_ids.length > 0
+                ? { waiver_ids: ev.waiver_ids.slice() }
+                : {}),
+        },
+    };
+}
+function runGatesRunCommand(request, opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const nowFn = opts.now ?? (() => new Date());
+    const now = nowFn();
+    const env = opts.env ?? process.env;
+    const out = opts.out ?? ((s) => process.stdout.write(s + '\n'));
+    const err = opts.err ?? ((s) => process.stderr.write(s + '\n'));
+    const showData = opts.showData === true;
+    if (typeof request.specId !== 'string' || request.specId.length === 0) {
+        err('caws gates run: --spec is required.');
+        err(`(rule: ${rules_1.SHELL_RULES.COMMAND_MISSING_SPEC_ID})`);
+        return 1;
+    }
+    // 1. Repo root
+    const repoRootResult = (0, store_1.resolveRepoRoot)(cwd);
+    if (!repoRootResult.ok) {
+        err('caws gates run: failed to resolve repo root.');
+        err((0, diagnostic_1.renderDiagnostics)(repoRootResult.errors, { showData }));
+        return 2;
+    }
+    const { repoRoot, cawsDir } = repoRootResult.value;
+    // 2. Snapshot for policy
+    let snapshot;
+    try {
+        snapshot = (0, store_1.composeStoreSnapshot)({ repoRoot, cawsDir });
+    }
+    catch (e) {
+        err(`caws gates run: store composition failed: ${e.message}`);
+        return 2;
+    }
+    // 3. Policy required — gates cannot decide mode without it.
+    if (snapshot.policy === undefined) {
+        err(`caws gates run: no policy.yaml loaded — gates require policy to derive ` +
+            `block/warn/skip semantics. Run \`caws doctor\` for details.`);
+        err(`(rule: ${rules_1.SHELL_RULES.GATES_POLICY_REQUIRED})`);
+        if (snapshot.policyErrors.length > 0) {
+            err((0, diagnostic_1.renderDiagnostics)(snapshot.policyErrors, { showData }));
+        }
+        return 2;
+    }
+    const policy = snapshot.policy;
+    // 4. Session (write op — gates append events)
+    const sessionResult = (0, resolve_session_1.resolveSession)({
+        cawsDir,
+        worktreeRoot: cwd,
+        env,
+        now: nowFn,
+        allowMint: true,
+    });
+    if (!sessionResult.ok) {
+        err('caws gates run: failed to resolve session identity.');
+        err((0, diagnostic_1.renderDiagnostics)(sessionResult.errors, { showData }));
+        return 2;
+    }
+    const actor = (0, actor_1.buildActor)({
+        session: sessionResult.value,
+        kind: 'agent',
+    });
+    // 5. Subprocess + contract validation
+    const runOpts = {
+        cwd: repoRoot,
+    };
+    if (opts.runner !== undefined)
+        runOpts.runner = opts.runner;
+    if (opts.subprocessArgs !== undefined)
+        runOpts.args = opts.subprocessArgs;
+    const reportResult = (0, quality_gates_adapter_1.runQualityGates)(runOpts);
+    if (!reportResult.ok) {
+        err('caws gates run: quality-gates subprocess contract failure.');
+        err((0, diagnostic_1.renderDiagnostics)(reportResult.errors, { showData }));
+        return 2;
+    }
+    const report = reportResult.value;
+    // 6a. Load + apply waivers BEFORE disposition.
+    //     Waivers do NOT mutate policy.gates[gate].mode. They remove
+    //     authorized-exception violations from the report so blocking is
+    //     computed only from unwaived violations. Malformed waiver files
+    //     produce diagnostics but never discard valid waivers.
+    const waiversLoad = (0, store_1.loadWaivers)(cawsDir);
+    if (waiversLoad.diagnostics.length > 0) {
+        err((0, diagnostic_1.renderDiagnostics)(waiversLoad.diagnostics, { showData }));
+    }
+    const waiverFilter = (0, waiver_filter_1.filterWaivedViolations)({
+        report,
+        waivers: waiversLoad.waivers,
+        specId: request.specId,
+        now,
+        policyGateIds: Object.keys(policy.gates),
+    });
+    // 6b. Policy-driven disposition on UNWAIVED violations only.
+    const dispositionResult = (0, disposition_1.deriveDispositions)(waiverFilter.reportForDisposition, policy);
+    // 7. Append one gate_evaluated event per policy-declared gate.
+    //    Failure to append is a hard error: evidence integrity matters.
+    const ts = now.toISOString();
+    for (const d of dispositionResult.dispositions) {
+        const body = dispositionToEventBody({
+            disposition: d,
+            ts,
+            actor,
+            specId: request.specId,
+            ...(waiverFilter.waivedByGate[d.gate_id] !== undefined
+                ? { waiverEvidence: waiverFilter.waivedByGate[d.gate_id] }
+                : {}),
+        });
+        const append = (0, store_1.appendEvent)(cawsDir, body);
+        if (!append.ok) {
+            err(`caws gates run: failed to append gate_evaluated event for ${d.gate_id}.`);
+            err((0, diagnostic_1.renderDiagnostics)(append.errors, { showData }));
+            return 2;
+        }
+    }
+    // 8. Render summary
+    out((0, gates_1.renderGatesRun)(dispositionResult));
+    // 9. Exit by policy disposition.
+    return dispositionResult.anyBlocks ? 1 : 0;
+}
+//# sourceMappingURL=gates.js.map

package/dist/shell/commands/gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gates.js","sourceRoot":"","sources":["../../../src/shell/commands/gates.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,EAAE;AACF,YAAY;AACZ,4BAA4B;AAC5B,+DAA+D;AAC/D,4EAA4E;AAC5E,mEAAmE;AACnE,0EAA0E;AAC1E,4EAA4E;AAC5E,2DAA2D;AAC3D,sBAAsB;AACtB,kBAAkB;AAClB,kCAAkC;AAClC,mCAAmC;AACnC,6EAA6E;AAC7E,+BAA+B;AAC/B,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,0DAA0D;;AA4F1D,gDAmIC;AAxND,uCAKqB;AACrB,qDAAyD;AACzD,2CAAiD;AACjD,gEAA4D;AAC5D,4CAA8C;AAC9C,oCAAuC;AACvC,sDAG8B;AAC9B,0EAGwC;AACxC,0DAGgC;AAgBhC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,SAAS,sBAAsB,CAAC,IAM/B;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU;SAC3C,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrD,OAAO,EACL,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YACxB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAC1B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;gBACvB,CAAC,CAAC,CAAC,CAAC,IAAI;YACV,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;QAC3B,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC,CAAC;IAEN,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;IAC/B,MAAM,WAAW,GAAG,EAAE,EAAE,YAAY,IAAI,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK,EAAE,gBAAgB;QACvB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;YACjC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO;YACrF,UAAU;YACV,YAAY,EAAE,WAAW;YACzB,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR;KACsB,CAAC;AAC5B,CAAC;AAMD,SAAgB,kBAAkB,CAChC,OAA+B,EAC/B,OAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAExC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAC3C,GAAG,CAAC,UAAU,mBAAW,CAAC,uBAAuB,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,eAAe;IACf,MAAM,cAAc,GAAG,IAAA,uBAAe,EAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,8CAA8C,CAAC,CAAC;QACpD,GAAG,CAAC,IAAA,8BAAiB,EAAC,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC;IAEnD,yBAAyB;IACzB,IAAI,QAAiD,CAAC;IACtD,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,4BAAoB,EAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,6CAA8C,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CACD,yEAAyE;YACvE,6DAA6D,CAChE,CAAC;QACF,GAAG,CAAC,UAAU,mBAAW,CAAC,qBAAqB,GAAG,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,IAAA,8BAAiB,EAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,8CAA8C;IAC9C,MAAM,aAAa,GAAG,IAAA,gCAAc,EAAC;QACnC,OAAO;QACP,YAAY,EAAE,GAAG;QACjB,GAAG;QACH,GAAG,EAAE,KAAK;QACV,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAA,8BAAiB,EAAC,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAU,IAAA,kBAAU,EAAC;QAC9B,OAAO,EAAE,aAAa,CAAC,KAAK;QAC5B,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,OAAO,GAA2E;QACtF,GAAG,EAAE,QAAQ;KACd,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5D,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAA,uCAAe,EAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAClE,GAAG,CAAC,IAAA,8BAAiB,EAAC,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC;IAElC,+CAA+C;IAC/C,iEAAiE;IACjE,qEAAqE;IACrE,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,WAAW,GAAG,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAA,8BAAiB,EAAC,WAAW,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,sCAAsB,EAAC;QAC1C,MAAM;QACN,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG;QACH,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;KACzC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,iBAAiB,GAAG,IAAA,gCAAkB,EAC1C,YAAY,CAAC,oBAAoB,EACjC,MAAM,CACP,CAAC;IAEF,+DAA+D;IAC/D,oEAAoE;IACpE,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,sBAAsB,CAAC;YAClC,WAAW,EAAE,CAAC;YACd,EAAE;YACF,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS;gBACpD,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,GAAG,CAAC,6DAA6D,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAC/E,GAAG,CAAC,IAAA,8BAAiB,EAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,GAAG,CAAC,IAAA,sBAAc,EAAC,iBAAiB,CAAC,CAAC,CAAC;IAEvC,iCAAiC;IACjC,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/shell/commands/init.d.ts

@@ -0,0 +1,8 @@
+export interface InitCommandOptions {
+    readonly cwd?: string;
+    readonly out?: (line: string) => void;
+    readonly err?: (line: string) => void;
+    readonly showData?: boolean;
+}
+export declare function runInitCommand(opts?: InitCommandOptions): number;
+//# sourceMappingURL=init.d.ts.map

package/dist/shell/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/shell/commands/init.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,cAAc,CAAC,IAAI,GAAE,kBAAuB,GAAG,MAAM,CAsCpE"}

package/dist/shell/commands/init.js

@@ -0,0 +1,64 @@
+"use strict";
+// `caws init` — vNext bootstrap of the canonical .caws/ shape.
+//
+// Pipeline:
+//   1. resolveRepoRoot(cwd)             — needs git, NOT .caws/
+//   2. initProject(repoRoot)            — store-side adapter does the work
+//   3. render result                    — short summary or "already initialized"
+//
+// Exit codes:
+//   0 = canonical state established (created OR already_initialized)
+//   1 = legacy residue refused (INIT_LEGACY_RESIDUE) — non-destructive,
+//       the user must clear the listed files manually
+//   2 = repo-root resolution failed, write I/O failed, or the default
+//       policy itself failed kernel validation
+//       (INIT_DEFAULT_POLICY_INVALID — programmer error in our seed)
+//
+// Discipline:
+//   - No --force in 7b. Force modes turn into cleanup tools and cleanup
+//     belongs to a later doctor/repair surface.
+//   - The seeded policy MUST pass kernel validation BEFORE landing on
+//     disk. If our default is bad, that's a programmer error and exit 2
+//     is correct — we do NOT write a known-invalid policy just to keep
+//     `init` succeeding.
+//   - Init never overwrites existing canonical files. Idempotent rerun
+//     reports "already initialized"; partial state is filled in
+//     additively (a half-bootstrapped project becomes whole).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runInitCommand = runInitCommand;
+const store_1 = require("../../store");
+const diagnostic_1 = require("../render/diagnostic");
+const init_1 = require("../render/init");
+function runInitCommand(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const out = opts.out ?? ((s) => process.stdout.write(s + '\n'));
+    const err = opts.err ?? ((s) => process.stderr.write(s + '\n'));
+    const showData = opts.showData === true;
+    // 1. Resolve repo root. We do NOT pass requireCawsDir — the whole
+    //    point of init is to create .caws/, so failing on its absence
+    //    here would be self-contradictory.
+    const root = (0, store_1.resolveRepoRoot)(cwd);
+    if (!root.ok) {
+        err('caws init: failed to resolve repo root.');
+        err((0, diagnostic_1.renderDiagnostics)(root.errors, { showData }));
+        return 2;
+    }
+    const { repoRoot } = root.value;
+    // 2. Bootstrap.
+    const result = (0, store_1.initProject)(repoRoot);
+    if (!result.ok) {
+        // Decide exit code from the diagnostic rule. Legacy residue is a
+        // user-correctable domain error (1); everything else is a hard
+        // store/programmer failure (2).
+        const isLegacy = result.errors.some((d) => d.rule === 'store.init.legacy_residue');
+        err(isLegacy
+            ? 'caws init: refusing to overwrite legacy state.'
+            : 'caws init: failed to bootstrap project.');
+        err((0, diagnostic_1.renderDiagnostics)(result.errors, { showData }));
+        return isLegacy ? 1 : 2;
+    }
+    // 3. Render and exit.
+    out((0, init_1.renderInit)({ result: result.value, repoRoot }));
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/shell/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/shell/commands/init.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,EAAE;AACF,YAAY;AACZ,gEAAgE;AAChE,2EAA2E;AAC3E,iFAAiF;AACjF,EAAE;AACF,cAAc;AACd,qEAAqE;AACrE,wEAAwE;AACxE,sDAAsD;AACtD,sEAAsE;AACtE,+CAA+C;AAC/C,qEAAqE;AACrE,EAAE;AACF,cAAc;AACd,wEAAwE;AACxE,gDAAgD;AAChD,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,yBAAyB;AACzB,uEAAuE;AACvE,gEAAgE;AAChE,8DAA8D;;AAa9D,wCAsCC;AAjDD,uCAA2D;AAC3D,qDAAyD;AACzD,yCAA4C;AAS5C,SAAgB,cAAc,CAAC,OAA2B,EAAE;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAExC,kEAAkE;IAClE,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,IAAI,GAAG,IAAA,uBAAe,EAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAC/C,GAAG,CAAC,IAAA,8BAAiB,EAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IAEhC,gBAAgB;IAChB,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,iEAAiE;QACjE,+DAA+D;QAC/D,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,2BAA2B,CAC9C,CAAC;QACF,GAAG,CACD,QAAQ;YACN,CAAC,CAAC,gDAAgD;YAClD,CAAC,CAAC,yCAAyC,CAC9C,CAAC;QACF,GAAG,CAAC,IAAA,8BAAiB,EAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,sBAAsB;IACtB,GAAG,CAAC,IAAA,iBAAU,EAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/shell/commands/scope.d.ts

@@ -0,0 +1,11 @@
+export type ScopeMode = 'show' | 'check';
+export interface ScopeCommandOptions {
+    readonly path: string;
+    readonly mode: ScopeMode;
+    readonly cwd?: string;
+    readonly out?: (line: string) => void;
+    readonly err?: (line: string) => void;
+    readonly showData?: boolean;
+}
+export declare function runScopeCommand(opts: ScopeCommandOptions): number;
+//# sourceMappingURL=scope.d.ts.map

package/dist/shell/commands/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../src/shell/commands/scope.ts"],"names":[],"mappings":"AAiCA,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAkEjE"}