@petepetrash/circuit 0.1.0

package/dist/shared/config-loader.js

@@ -0,0 +1,140 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { ZodError } from 'zod';
+import { Config, LayeredConfig } from '../schemas/config.js';
+import { PolicyEnvelopeV2, PolicyLayer, } from '../schemas/policy-envelope.js';
+import { PROJECT_CONFIG_RELATIVE_SEGMENTS } from './control-plane-paths.js';
+const USER_GLOBAL_CONFIG_RELATIVE_PATH = ['.config', 'circuit', 'config.yaml'];
+const PROJECT_CONFIG_RELATIVE_PATH = PROJECT_CONFIG_RELATIVE_SEGMENTS;
+export function userGlobalConfigPath(homeDir = homedir()) {
+    return join(homeDir, ...USER_GLOBAL_CONFIG_RELATIVE_PATH);
+}
+export function projectConfigPath(cwd = process.cwd()) {
+    return join(cwd, ...PROJECT_CONFIG_RELATIVE_PATH);
+}
+function parseConfigYaml(text, sourcePath) {
+    try {
+        return parseYaml(text);
+    }
+    catch (err) {
+        throw new Error(`config YAML parse failed at ${sourcePath}: ${err.message}`);
+    }
+}
+// The loader stays strict — an unrecognized key always fails — but the error
+// names both honest explanations. Additive optional keys land without a
+// schema_version bump, so a config written for a newer Circuit fails on an
+// older binary with an unrecognized-key error, not a version mismatch; a bare
+// schema dump would leave the operator hunting for a typo that is not there.
+function configValidationError(layer, abs, err) {
+    const base = `config validation failed for ${layer} at ${abs}: ${err.message}`;
+    if (!(err instanceof ZodError))
+        return new Error(base);
+    const unrecognized = err.issues.filter((issue) => issue.code === 'unrecognized_keys');
+    if (unrecognized.length === 0)
+        return new Error(base);
+    // `circuits` was renamed to `flows` in v1 — both the top-level per-flow slot
+    // and `relay.circuits`. An alpha config carrying the old key is not a typo and
+    // not a newer-Circuit key, so point straight at the rename.
+    const usedLegacyCircuits = unrecognized.some((issue) => (issue.keys ?? []).includes('circuits'));
+    if (usedLegacyCircuits) {
+        return new Error(`${base}\nThe \`circuits\` config key was renamed to \`flows\` in v1. Rename \`circuits:\` to \`flows:\` (and \`relay.circuits:\` to \`relay.flows:\`).`);
+    }
+    return new Error(`${base}\nAn unrecognized key is either a typo or a key from a newer Circuit than this one. Check the spelling, or update Circuit if the config needs the newer key.`);
+}
+function loadConfigLayerFromPath(layer, sourcePath) {
+    const abs = resolve(sourcePath);
+    if (!existsSync(abs))
+        return undefined;
+    const raw = parseConfigYaml(readFileSync(abs, 'utf8'), abs);
+    try {
+        return LayeredConfig.parse({
+            layer,
+            source_path: abs,
+            config: Config.parse(raw),
+        });
+    }
+    catch (err) {
+        throw configValidationError(layer, abs, err);
+    }
+}
+function loadRuntimeConfigLayerFromPath(layer, sourcePath) {
+    const abs = resolve(sourcePath);
+    if (!existsSync(abs))
+        return undefined;
+    const raw = parseConfigYaml(readFileSync(abs, 'utf8'), abs);
+    if (raw !== null && typeof raw === 'object' && !Array.isArray(raw)) {
+        const schemaVersion = raw.schema_version;
+        if (schemaVersion === 2) {
+            try {
+                return {
+                    policy: PolicyLayer.parse({
+                        source: layer,
+                        source_path: abs,
+                        envelope: PolicyEnvelopeV2.parse(raw),
+                    }),
+                };
+            }
+            catch (err) {
+                throw new Error(`policy validation failed for ${layer} at ${abs}: ${err.message}`);
+            }
+        }
+    }
+    try {
+        return {
+            selection: LayeredConfig.parse({
+                layer,
+                source_path: abs,
+                config: Config.parse(raw),
+            }),
+        };
+    }
+    catch (err) {
+        throw configValidationError(layer, abs, err);
+    }
+}
+export function discoverConfigLayers(options = {}) {
+    const layers = [];
+    const userGlobal = loadConfigLayerFromPath('user-global', userGlobalConfigPath(options.homeDir));
+    if (userGlobal !== undefined)
+        layers.push(userGlobal);
+    const project = loadConfigLayerFromPath('project', projectConfigPath(options.cwd));
+    if (project !== undefined)
+        layers.push(project);
+    if (options.invocationConfig !== undefined) {
+        layers.push(LayeredConfig.parse({
+            layer: 'invocation',
+            config: options.invocationConfig,
+        }));
+    }
+    return layers;
+}
+export function discoverRuntimeConfigLayers(options = {}) {
+    const selectionConfigLayers = [];
+    const policyLayers = [];
+    for (const [layer, path] of [
+        ['user-global', userGlobalConfigPath(options.homeDir)],
+        ['project', projectConfigPath(options.cwd)],
+    ]) {
+        const loaded = loadRuntimeConfigLayerFromPath(layer, path);
+        if (loaded?.selection !== undefined)
+            selectionConfigLayers.push(loaded.selection);
+        if (loaded?.policy !== undefined)
+            policyLayers.push(loaded.policy);
+    }
+    if (options.invocationConfig !== undefined) {
+        selectionConfigLayers.push(LayeredConfig.parse({
+            layer: 'invocation',
+            config: options.invocationConfig,
+        }));
+    }
+    if (options.invocationPolicy !== undefined) {
+        policyLayers.push(PolicyLayer.parse({
+            source: 'invocation',
+            envelope: options.invocationPolicy,
+        }));
+    }
+    return { selectionConfigLayers, policyLayers };
+}
+//# sourceMappingURL=config-loader.js.map

package/dist/shared/config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../../src/shared/config-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,MAAM,EAA8B,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EACL,gBAAgB,EAChB,WAAW,GAEZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAE5E,MAAM,gCAAgC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAU,CAAC;AACxF,MAAM,4BAA4B,GAAG,gCAAgC,CAAC;AAiBtE,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,OAAO,EAAE;IACtD,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,gCAAgC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,4BAA4B,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,UAAkB;IACvD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,SAAS,qBAAqB,CAAC,KAAa,EAAE,GAAW,EAAE,GAAY;IACrE,MAAM,IAAI,GAAG,gCAAgC,KAAK,OAAO,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC;IAC1F,IAAI,CAAC,CAAC,GAAG,YAAY,QAAQ,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACtF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtD,6EAA6E;IAC7E,+EAA+E;IAC/E,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,CAAE,KAAsC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1E,CAAC;IACF,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CACd,GAAG,IAAI,iJAAiJ,CACzJ,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,KAAK,CACd,GAAG,IAAI,8JAA8J,CACtK,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAgC,EAChC,UAAkB;IAElB,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,KAAK,CAAC;YACzB,KAAK;YACL,WAAW,EAAE,GAAG;YAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAgC,EAChC,UAAkB;IAElB,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,aAAa,GAAI,GAA6C,CAAC,cAAc,CAAC;QACpF,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO;oBACL,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;wBACxB,MAAM,EAAE,KAAK;wBACb,WAAW,EAAE,GAAG;wBAChB,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC;qBACtC,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,gCAAgC,KAAK,OAAO,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO;YACL,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC7B,KAAK;gBACL,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;aAC1B,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAuC,EAAE;IAEzC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,UAAU,GAAG,uBAAuB,CAAC,aAAa,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,KAAK,CAAC;YAClB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,OAAO,CAAC,gBAAgB;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,UAAwC,EAAE;IAE1C,MAAM,qBAAqB,GAAoB,EAAE,CAAC;IAClD,MAAM,YAAY,GAAuB,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,aAAa,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;KACnC,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS;YAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,qBAAqB,CAAC,IAAI,CACxB,aAAa,CAAC,KAAK,CAAC;YAClB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,OAAO,CAAC,gBAAgB;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,YAAY,CAAC,IAAI,CACf,WAAW,CAAC,KAAK,CAAC;YAChB,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,OAAO,CAAC,gBAAgB;SACnC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC"}

package/dist/shared/connector-relay.d.ts

@@ -0,0 +1,39 @@
+import type { ResolvedSelection } from '../schemas/selection-policy.js';
+export { sha256OfString as sha256Hex } from '../schemas/hashing.js';
+export interface RelayModelUsage {
+    readonly model: string;
+    readonly input_tokens: number;
+    readonly output_tokens: number;
+    readonly cache_read_tokens: number;
+    readonly cache_creation_tokens: number;
+    readonly cost_usd_reported?: number;
+}
+export interface RelayUsage {
+    readonly input_tokens: number;
+    readonly output_tokens: number;
+    readonly cache_read_tokens: number;
+    readonly cache_creation_tokens: number;
+    readonly cache_creation_5m_tokens: number;
+    readonly cache_creation_1h_tokens: number;
+    readonly total_cost_usd_reported?: number;
+    readonly models?: readonly RelayModelUsage[];
+}
+export interface RelayResult {
+    readonly request_payload: string;
+    readonly receipt_id: string;
+    readonly result_body: string;
+    readonly duration_ms: number;
+    readonly cli_version: string;
+    readonly usage?: RelayUsage;
+    readonly model?: string;
+}
+export interface ConnectorRelayInput {
+    prompt: string;
+    timeoutMs?: number;
+    idleTimeoutMs?: number;
+    cwd?: string;
+    resolvedSelection?: ResolvedSelection;
+    responseSchema?: Record<string, unknown>;
+    toolAllowList?: readonly string[];
+}
+//# sourceMappingURL=connector-relay.d.ts.map

package/dist/shared/connector-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-relay.d.ts","sourceRoot":"","sources":["../../src/shared/connector-relay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,cAAc,IAAI,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAKpE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAOD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAKD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAO5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IAGf,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAMtC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAOzC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC"}

package/dist/shared/connector-relay.js

@@ -0,0 +1,2 @@
+export { sha256OfString as sha256Hex } from '../schemas/hashing.js';
+//# sourceMappingURL=connector-relay.js.map

package/dist/shared/connector-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-relay.js","sourceRoot":"","sources":["../../src/shared/connector-relay.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,IAAI,SAAS,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/shared/control-plane-gitignore.d.ts

@@ -0,0 +1,10 @@
+export { controlPlaneRootFromDescendant } from './control-plane-paths.js';
+/**
+ * Seed `<circuitDir>/.gitignore` so machine-written control-plane files never
+ * get committed by accident. Idempotent: it only writes when the file is
+ * absent, so a user who has customized their own `.circuit/.gitignore` is never
+ * clobbered. Best-effort — a failure to seed must never break the write that
+ * triggered it.
+ */
+export declare function ensureCircuitGitignore(circuitDir: string): void;
+//# sourceMappingURL=control-plane-gitignore.d.ts.map

package/dist/shared/control-plane-gitignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-gitignore.d.ts","sourceRoot":"","sources":["../../src/shared/control-plane-gitignore.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAU1E;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAQ/D"}

package/dist/shared/control-plane-gitignore.js

@@ -0,0 +1,46 @@
+// Machine-write privacy for the project-local `.circuit/` control plane.
+//
+// Circuit auto-writes into `<repo>/.circuit` constantly: run folders, traces,
+// reports, evidence, history, project memory, prototype artifacts, and ambient
+// continuity records. A continuity record can restate secrets from a compaction
+// summary, and nothing else seeds an ignore file, so without one every machine
+// write is a `git add .` away from being committed silently. Seeding a single
+// `.circuit/.gitignore` keeps the whole subtree out of git while still letting a
+// user intentionally commit a project `config.yaml`.
+//
+// One source of truth: every `.circuit/` auto-write seam (a run opening, an
+// ambient harvest) calls ensureCircuitGitignore so the ignore rules are spelled
+// exactly once and can never drift between seams.
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { writeTextAtomic } from './atomic-io.js';
+export { controlPlaneRootFromDescendant } from './control-plane-paths.js';
+const CIRCUIT_GITIGNORE_CONTENTS = [
+    '# Circuit machine-written records — do not commit',
+    '*',
+    '!.gitignore',
+    '!config.yaml',
+    '',
+].join('\n');
+/**
+ * Seed `<circuitDir>/.gitignore` so machine-written control-plane files never
+ * get committed by accident. Idempotent: it only writes when the file is
+ * absent, so a user who has customized their own `.circuit/.gitignore` is never
+ * clobbered. Best-effort — a failure to seed must never break the write that
+ * triggered it.
+ */
+export function ensureCircuitGitignore(circuitDir) {
+    const gitignorePath = join(circuitDir, '.gitignore');
+    if (existsSync(gitignorePath))
+        return;
+    try {
+        writeTextAtomic(gitignorePath, CIRCUIT_GITIGNORE_CONTENTS);
+    }
+    catch {
+        // Privacy seeding is best-effort; never let it abort the triggering write.
+    }
+}
+// controlPlaneRootFromDescendant moved to control-plane-paths.ts (the path
+// helpers there use it to reject nested control planes) and is re-exported
+// above so run-boundary call sites keep their import.
+//# sourceMappingURL=control-plane-gitignore.js.map

package/dist/shared/control-plane-gitignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-gitignore.js","sourceRoot":"","sources":["../../src/shared/control-plane-gitignore.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,iFAAiF;AACjF,qDAAqD;AACrD,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,kDAAkD;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,0BAA0B,GAAG;IACjC,mDAAmD;IACnD,GAAG;IACH,aAAa;IACb,cAAc;IACd,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO;IACtC,IAAI,CAAC;QACH,eAAe,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,2EAA2E;AAC3E,sDAAsD"}

package/dist/shared/control-plane-paths.d.ts

@@ -0,0 +1,36 @@
+export declare const CONTROL_PLANE_DIR = ".circuit";
+/**
+ * The nearest ancestor directory named `.circuit` (including `descendant`
+ * itself), or undefined when the path is not under a control plane.
+ */
+export declare function controlPlaneRootFromDescendant(descendant: string): string | undefined;
+/**
+ * Resolve a claimed project root, re-anchoring to the control plane's parent
+ * when the claim lies inside a `.circuit` directory. A hook or worker whose
+ * cwd sits inside the control plane (for example `.circuit/runs/<runId>`) is
+ * still working in the enclosing project; accepting the raw claim nested a
+ * second `.circuit` store inside the first (observed 2026-06-16/2026-07-12).
+ * No legitimate project root lives inside a control plane.
+ */
+export declare function normalizeProjectRoot(projectRoot: string): string;
+/** Run folders live under `<projectRoot>/.circuit/runs/<runId>/`. */
+export declare const CONTROL_PLANE_RUNS_DIR = ".circuit/runs";
+/** The history index lives under `<projectRoot>/.circuit/history/`. */
+export declare const CONTROL_PLANE_HISTORY_DIR = ".circuit/history";
+/** The project memory store lives under `<projectRoot>/.circuit/memory/`. */
+export declare const CONTROL_PLANE_MEMORY_DIR = ".circuit/memory";
+/** Out-of-run prototype artifacts land under `.circuit/prototypes/<hash>/`. */
+export declare const CONTROL_PLANE_PROTOTYPES_DIR = ".circuit/prototypes";
+/** Project config path segments, relative to the project root. */
+export declare const PROJECT_CONFIG_RELATIVE_SEGMENTS: readonly [".circuit", "config.yaml"];
+/** `<projectRoot>/.circuit` (absolute when `projectRoot` is absolute or via cwd). */
+export declare function controlPlaneRoot(projectRoot: string): string;
+/** `<projectRoot>/.circuit/runs`. */
+export declare function runsRoot(projectRoot: string): string;
+/** `<projectRoot>/.circuit/history`. */
+export declare function historyRoot(projectRoot: string): string;
+/** `<projectRoot>/.circuit/memory`. */
+export declare function memoryRoot(projectRoot: string): string;
+/** `<projectRoot>/.circuit/config.yaml`. */
+export declare function projectConfigPath(projectRoot: string): string;
+//# sourceMappingURL=control-plane-paths.d.ts.map

package/dist/shared/control-plane-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-paths.d.ts","sourceRoot":"","sources":["../../src/shared/control-plane-paths.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASrF;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAIhE;AAED,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,kBAA8B,CAAC;AAElE,uEAAuE;AACvE,eAAO,MAAM,yBAAyB,qBAAiC,CAAC;AAExE,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,oBAAgC,CAAC;AAEtE,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,wBAAoC,CAAC;AAE9E,kEAAkE;AAClE,eAAO,MAAM,gCAAgC,sCAA8C,CAAC;AAE5F,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,qCAAqC;AACrC,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wCAAwC;AACxC,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,uCAAuC;AACvC,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,4CAA4C;AAC5C,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/dist/shared/control-plane-paths.js

@@ -0,0 +1,71 @@
+// Canonical spellings for the project-local control plane (`.circuit/`).
+// Every layer that touches the control plane derives its paths from these
+// constants so the directory layout is spelled exactly once.
+//
+// The helper functions below carry the one canonical joining discipline:
+// `resolve(projectRoot, SEGMENT)`. Call sites that anchor the control plane
+// to a project root use the helpers; the constants stay exported for the
+// sites that need the relative fragment itself (artifact-relative paths,
+// URL-style prefix comparisons, display strings, and roots that must stay
+// cwd-relative when the caller passes a relative directory).
+import { basename, dirname, resolve } from 'node:path';
+export const CONTROL_PLANE_DIR = '.circuit';
+/**
+ * The nearest ancestor directory named `.circuit` (including `descendant`
+ * itself), or undefined when the path is not under a control plane.
+ */
+export function controlPlaneRootFromDescendant(descendant) {
+    let current = resolve(descendant);
+    let parent = dirname(current);
+    while (parent !== current) {
+        if (basename(current) === CONTROL_PLANE_DIR)
+            return current;
+        current = parent;
+        parent = dirname(current);
+    }
+    return basename(current) === CONTROL_PLANE_DIR ? current : undefined;
+}
+/**
+ * Resolve a claimed project root, re-anchoring to the control plane's parent
+ * when the claim lies inside a `.circuit` directory. A hook or worker whose
+ * cwd sits inside the control plane (for example `.circuit/runs/<runId>`) is
+ * still working in the enclosing project; accepting the raw claim nested a
+ * second `.circuit` store inside the first (observed 2026-06-16/2026-07-12).
+ * No legitimate project root lives inside a control plane.
+ */
+export function normalizeProjectRoot(projectRoot) {
+    const resolved = resolve(projectRoot);
+    const enclosingControlPlane = controlPlaneRootFromDescendant(resolved);
+    return enclosingControlPlane === undefined ? resolved : dirname(enclosingControlPlane);
+}
+/** Run folders live under `<projectRoot>/.circuit/runs/<runId>/`. */
+export const CONTROL_PLANE_RUNS_DIR = `${CONTROL_PLANE_DIR}/runs`;
+/** The history index lives under `<projectRoot>/.circuit/history/`. */
+export const CONTROL_PLANE_HISTORY_DIR = `${CONTROL_PLANE_DIR}/history`;
+/** The project memory store lives under `<projectRoot>/.circuit/memory/`. */
+export const CONTROL_PLANE_MEMORY_DIR = `${CONTROL_PLANE_DIR}/memory`;
+/** Out-of-run prototype artifacts land under `.circuit/prototypes/<hash>/`. */
+export const CONTROL_PLANE_PROTOTYPES_DIR = `${CONTROL_PLANE_DIR}/prototypes`;
+/** Project config path segments, relative to the project root. */
+export const PROJECT_CONFIG_RELATIVE_SEGMENTS = [CONTROL_PLANE_DIR, 'config.yaml'];
+/** `<projectRoot>/.circuit` (absolute when `projectRoot` is absolute or via cwd). */
+export function controlPlaneRoot(projectRoot) {
+    return resolve(normalizeProjectRoot(projectRoot), CONTROL_PLANE_DIR);
+}
+/** `<projectRoot>/.circuit/runs`. */
+export function runsRoot(projectRoot) {
+    return resolve(normalizeProjectRoot(projectRoot), CONTROL_PLANE_RUNS_DIR);
+}
+/** `<projectRoot>/.circuit/history`. */
+export function historyRoot(projectRoot) {
+    return resolve(normalizeProjectRoot(projectRoot), CONTROL_PLANE_HISTORY_DIR);
+}
+/** `<projectRoot>/.circuit/memory`. */
+export function memoryRoot(projectRoot) {
+    return resolve(normalizeProjectRoot(projectRoot), CONTROL_PLANE_MEMORY_DIR);
+}
+/** `<projectRoot>/.circuit/config.yaml`. */
+export function projectConfigPath(projectRoot) {
+    return resolve(normalizeProjectRoot(projectRoot), ...PROJECT_CONFIG_RELATIVE_SEGMENTS);
+}
+//# sourceMappingURL=control-plane-paths.js.map

package/dist/shared/control-plane-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-paths.js","sourceRoot":"","sources":["../../src/shared/control-plane-paths.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,6DAA6D;AAC7D,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,6DAA6D;AAE7D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,UAAkB;IAC/D,IAAI,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,MAAM,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,iBAAiB;YAAE,OAAO,OAAO,CAAC;QAC5D,OAAO,GAAG,MAAM,CAAC;QACjB,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AACzF,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,iBAAiB,OAAO,CAAC;AAElE,uEAAuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,iBAAiB,UAAU,CAAC;AAExE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,iBAAiB,SAAS,CAAC;AAEtE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,iBAAiB,aAAa,CAAC;AAE9E,kEAAkE;AAClE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAU,CAAC;AAE5F,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,QAAQ,CAAC,WAAmB;IAC1C,OAAO,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC5E,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAC/E,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,OAAO,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC9E,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,GAAG,gCAAgC,CAAC,CAAC;AACzF,CAAC"}

package/dist/shared/equipment-enforcement.d.ts

@@ -0,0 +1,11 @@
+import type { ToolScopeCapability } from '../schemas/connector.js';
+import type { EquipmentEnforcement, EquipmentScope } from '../schemas/equipment-scope.js';
+export interface EquipmentEnforcementDecision {
+    readonly declared: EquipmentEnforcement;
+    readonly effective: EquipmentEnforcement;
+    readonly downgraded: boolean;
+    readonly toolAllowList?: readonly string[];
+    readonly finding?: string;
+}
+export declare function resolveEquipmentEnforcement(scope: EquipmentScope | undefined, capability: ToolScopeCapability): EquipmentEnforcementDecision;
+//# sourceMappingURL=equipment-enforcement.d.ts.map

package/dist/shared/equipment-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"equipment-enforcement.d.ts","sourceRoot":"","sources":["../../src/shared/equipment-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAU1F,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAOD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,cAAc,GAAG,SAAS,EACjC,UAAU,EAAE,mBAAmB,GAC9B,4BAA4B,CAkC9B"}

package/dist/shared/equipment-enforcement.js

@@ -0,0 +1,37 @@
+// Map a declared equipment scope plus the running connector's tool-scope
+// capability to the effective enforcement. Pure and total: every pair returns a
+// decision, never throws. This is the single seam where "enforced" becomes a
+// real restriction or is honestly downgraded — the connector layer and the
+// trace recorder both consume what this returns.
+export function resolveEquipmentEnforcement(scope, capability) {
+    // No scope, or the full tool surface: nothing to restrict. Trusted by
+    // definition. (The schema forbids enforced + full, so a full scope is always
+    // trusted here.)
+    if (scope === undefined || scope.tools === 'full') {
+        return { declared: 'trusted', effective: 'trusted', downgraded: false };
+    }
+    // An allow-list offered as guidance. It is rendered to the worker in the
+    // prompt but never restricts the connector's tools.
+    if (scope.enforcement === 'trusted') {
+        return { declared: 'trusted', effective: 'trusted', downgraded: false };
+    }
+    // Declared enforced against an allow-list. Honor it only where the connector
+    // can actually restrict its tool surface.
+    if (capability === 'allow-list') {
+        return {
+            declared: 'enforced',
+            effective: 'enforced',
+            downgraded: false,
+            toolAllowList: scope.tools.allow,
+        };
+    }
+    // Declared enforced, but the connector cannot restrict tools. Downgrade to
+    // trusted and record a finding. Never displayed as enforced; grants no list.
+    return {
+        declared: 'enforced',
+        effective: 'trusted',
+        downgraded: true,
+        finding: "equipment scope declared 'enforced' but the connector cannot restrict tools (tool_scope capability 'none'); downgraded to trusted — the tool list is offered as guidance, not enforced",
+    };
+}
+//# sourceMappingURL=equipment-enforcement.js.map

package/dist/shared/equipment-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"equipment-enforcement.js","sourceRoot":"","sources":["../../src/shared/equipment-enforcement.ts"],"names":[],"mappings":"AAmBA,yEAAyE;AACzE,gFAAgF;AAChF,6EAA6E;AAC7E,2EAA2E;AAC3E,iDAAiD;AACjD,MAAM,UAAU,2BAA2B,CACzC,KAAiC,EACjC,UAA+B;IAE/B,sEAAsE;IACtE,6EAA6E;IAC7E,iBAAiB;IACjB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED,yEAAyE;IACzE,oDAAoD;IACpD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED,6EAA6E;IAC7E,0CAA0C;IAC1C,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,KAAK;YACjB,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;SACjC,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE,IAAI;QAChB,OAAO,EACL,wLAAwL;KAC3L,CAAC;AACJ,CAAC"}

package/dist/shared/fanout-aggregate-report.d.ts

@@ -0,0 +1,32 @@
+import type { RubricResult } from '../schemas/rubric.js';
+import type { FanoutRubric } from '../schemas/step.js';
+export interface FanoutAggregateBranch<ChildOutcome extends string = string> {
+    readonly branch_id: string;
+    readonly child_run_id: string;
+    readonly child_outcome: ChildOutcome;
+    readonly verdict: string;
+    readonly admitted: boolean;
+    readonly result_path: string;
+    readonly duration_ms: number;
+    readonly result_body?: unknown;
+    readonly rubric_result?: RubricResult;
+}
+export interface FanoutAggregateBody<JoinPolicy extends string = string, ChildOutcome extends string = string> {
+    readonly schema_version: 1;
+    readonly join_policy: JoinPolicy;
+    readonly branch_count: number;
+    readonly winner_branch_id?: string;
+    readonly branches: ReadonlyArray<FanoutAggregateBranch<ChildOutcome>>;
+}
+export interface FanoutAggregateOutcome<ChildOutcome extends string = string> {
+    readonly branch_id: string;
+    readonly child_run_id: string;
+    readonly child_outcome: ChildOutcome;
+    readonly verdict: string;
+    readonly result_path: string;
+    readonly result_body?: unknown;
+    readonly duration_ms: number;
+    readonly admitted: boolean;
+}
+export declare function buildFanoutAggregate<JoinPolicy extends string, Outcome extends FanoutAggregateOutcome>(policy: JoinPolicy, outcomes: readonly Outcome[], winnerBranchId: string | undefined, rubric?: FanoutRubric): FanoutAggregateBody<JoinPolicy, Outcome['child_outcome']>;
+//# sourceMappingURL=fanout-aggregate-report.d.ts.map

package/dist/shared/fanout-aggregate-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fanout-aggregate-report.d.ts","sourceRoot":"","sources":["../../src/shared/fanout-aggregate-report.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAkB,YAAY,EAAuB,MAAM,sBAAsB,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,qBAAqB,CAAC,YAAY,SAAS,MAAM,GAAG,MAAM;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB,CAClC,UAAU,SAAS,MAAM,GAAG,MAAM,EAClC,YAAY,SAAS,MAAM,GAAG,MAAM;IAEpC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,sBAAsB,CAAC,YAAY,SAAS,MAAM,GAAG,MAAM;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,oBAAoB,CAClC,UAAU,SAAS,MAAM,EACzB,OAAO,SAAS,sBAAsB,EAEtC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,MAAM,CAAC,EAAE,YAAY,GACpB,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAkB3D"}

package/dist/shared/fanout-aggregate-report.js

@@ -0,0 +1,73 @@
+import { combineRubricResult } from '../policy/rubric.js';
+export function buildFanoutAggregate(policy, outcomes, winnerBranchId, rubric) {
+    return {
+        schema_version: 1,
+        join_policy: policy,
+        branch_count: outcomes.length,
+        ...(winnerBranchId === undefined ? {} : { winner_branch_id: winnerBranchId }),
+        branches: outcomes.map((outcome) => ({
+            branch_id: outcome.branch_id,
+            child_run_id: outcome.child_run_id,
+            child_outcome: outcome.child_outcome,
+            verdict: outcome.verdict,
+            admitted: outcome.admitted,
+            result_path: outcome.result_path,
+            duration_ms: outcome.duration_ms,
+            ...(outcome.result_body === undefined ? {} : { result_body: outcome.result_body }),
+            ...rubricResultFields(rubric, outcome.result_body),
+        })),
+    };
+}
+function rubricResultFields(rubric, resultBody) {
+    if (rubric === undefined || resultBody === undefined)
+        return {};
+    return { rubric_result: buildRubricResult(rubric, resultBody) };
+}
+function buildRubricResult(rubric, resultBody) {
+    const rawJudgments = readPath(resultBody, rubric.model_judgments_path);
+    if (!isRecord(rawJudgments)) {
+        throw new Error(`fanout rubric model_judgments_path '${rubric.model_judgments_path}' did not resolve to an object`);
+    }
+    const dims = {};
+    for (const dimId of rubric.ordered_dims) {
+        const judgment = rawJudgments[dimId];
+        if (!isRubricJudgment(judgment)) {
+            throw new Error(`fanout rubric dim '${dimId}' is missing a valid model judgment`);
+        }
+        const source = rubric.runtime_signals[dimId];
+        if (source === undefined) {
+            throw new Error(`fanout rubric dim '${dimId}' is missing a runtime signal source`);
+        }
+        dims[dimId] = {
+            runtime_signal: runtimeSignalForSource(resultBody, source),
+            model_judgment: judgment,
+        };
+    }
+    return combineRubricResult({
+        dims,
+        orderedDims: rubric.ordered_dims,
+    });
+}
+function runtimeSignalForSource(resultBody, source) {
+    if (source.kind === 'constant')
+        return source.signal;
+    const value = readPath(resultBody, source.path);
+    if (source.kind === 'non_empty_array') {
+        return Array.isArray(value) && value.length > 0 ? 'met' : 'missing';
+    }
+    return typeof value === 'string' && value.trim().length > 0 ? 'met' : 'missing';
+}
+function readPath(source, path) {
+    return path.split('.').reduce((current, segment) => {
+        if (!isRecord(current))
+            return undefined;
+        return current[segment];
+    }, source);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isRubricJudgment(value) {
+    return value === 'pass' || value === 'concern' || value === 'fail';
+}
+//# sourceMappingURL=fanout-aggregate-report.js.map

package/dist/shared/fanout-aggregate-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fanout-aggregate-report.js","sourceRoot":"","sources":["../../src/shared/fanout-aggregate-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAsC1D,MAAM,UAAU,oBAAoB,CAIlC,MAAkB,EAClB,QAA4B,EAC5B,cAAkC,EAClC,MAAqB;IAErB,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC;QAC7E,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YAClF,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;SACnD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAgC,EAChC,UAAmB;IAEnB,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChE,OAAO,EAAE,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,UAAmB;IAClE,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uCAAuC,MAAM,CAAC,oBAAoB,gCAAgC,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAGN,EAAE,CAAC;IACP,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,qCAAqC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,sCAAsC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG;YACZ,cAAc,EAAE,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC;YAC1D,cAAc,EAAE,QAAQ;SACzB,CAAC;IACJ,CAAC;IAED,OAAO,mBAAmB,CAAC;QACzB,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAAmB,EACnB,MAA+C;IAE/C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAe,EAAE,IAAY;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;AACrE,CAAC"}

package/dist/shared/fanout-branch-template.d.ts

@@ -0,0 +1,4 @@
+export declare function resolveDottedPath(root: unknown, path: string): unknown;
+export declare function substituteItemPlaceholders(template: string, item: unknown): string;
+export declare function expandTemplate<T>(template: T, item: unknown): T;
+//# sourceMappingURL=fanout-branch-template.d.ts.map

package/dist/shared/fanout-branch-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fanout-branch-template.d.ts","sourceRoot":"","sources":["../../src/shared/fanout-branch-template.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAYtE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAwBlF;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,CAa/D"}

package/dist/shared/fanout-branch-template.js

@@ -0,0 +1,55 @@
+export function resolveDottedPath(root, path) {
+    let cursor = root;
+    for (const segment of path.split('.')) {
+        if (cursor === null || typeof cursor !== 'object' || Array.isArray(cursor)) {
+            throw new Error(`items_path '${path}' descended into a non-object at segment '${segment}'`);
+        }
+        cursor = cursor[segment];
+        if (cursor === undefined) {
+            throw new Error(`items_path '${path}' is missing at segment '${segment}'`);
+        }
+    }
+    return cursor;
+}
+export function substituteItemPlaceholders(template, item) {
+    if (template === '$item')
+        return typeof item === 'string' ? item : JSON.stringify(item);
+    const exactMatch = /^\$item\.([a-z_][a-z0-9_]*)$/i.exec(template);
+    if (exactMatch !== null) {
+        const key = exactMatch[1];
+        if (item === null || typeof item !== 'object' || Array.isArray(item)) {
+            throw new Error(`'$item.${key}' substitution requires an object item`);
+        }
+        const value = item[key];
+        if (value === undefined) {
+            throw new Error(`'$item.${key}' substitution is missing the '${key}' field on the item`);
+        }
+        return typeof value === 'string' ? value : String(value);
+    }
+    return template.replace(/\$item\.([a-z_][a-z0-9_]*)/gi, (_match, key) => {
+        if (item === null || typeof item !== 'object' || Array.isArray(item)) {
+            throw new Error(`'$item.${key}' substitution requires an object item`);
+        }
+        const value = item[key];
+        if (value === undefined) {
+            throw new Error(`'$item.${key}' substitution is missing the '${key}' field on the item`);
+        }
+        return typeof value === 'string' ? value : String(value);
+    });
+}
+export function expandTemplate(template, item) {
+    if (typeof template === 'string') {
+        return substituteItemPlaceholders(template, item);
+    }
+    if (template === null || typeof template !== 'object')
+        return template;
+    if (Array.isArray(template)) {
+        return template.map((entry) => expandTemplate(entry, item));
+    }
+    const out = {};
+    for (const [key, value] of Object.entries(template)) {
+        out[key] = expandTemplate(value, item);
+    }
+    return out;
+}
+//# sourceMappingURL=fanout-branch-template.js.map