@petepetrash/circuit 0.1.0

package/dist/shared/zod-to-response-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-to-response-schema.d.ts","sourceRoot":"","sources":["../../src/shared/zod-to-response-schema.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAiDzD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,kBAAkB,CAa/E"}

package/dist/shared/zod-to-response-schema.js

@@ -0,0 +1,88 @@
+// Convert a Zod report schema into the JSON Schema object that the
+// claude-code and codex CLIs accept via their structured-output flags
+// (`--json-schema` and `--output-schema` respectively).
+//
+// Why this lives in shared/: the connector-side wiring needs the
+// converted schema, and the runtime-side wiring needs to call this
+// before building the relay input. Putting it in shared/ keeps it
+// out of the runtime executors and out of the connectors themselves,
+// neither of which should depend on Zod.
+//
+// Conversion rules are intentionally conservative:
+//   - target: JSON Schema draft-07 (the format both CLIs document).
+//   - io: 'input' — relay schemas may use transforms that normalize a
+//     worker-friendly input shape after parsing. The CLI sees the input
+//     shape; runtime Zod parsing remains the output-normalization boundary.
+//   - reused: 'inline' and cycles: 'throw' — both CLIs accept fully
+//     inlined schemas, and inline schemas are easier to debug when a CLI
+//     rejection happens. Relay response schemas should not be recursive.
+//
+// Conversion-fidelity note. Zod JSON Schema conversion cannot carry Zod
+// constructs that don't have a structural equivalent in JSON Schema:
+//   - `.superRefine` / `.refine` predicates — value-conditional rules
+//     (e.g. "findings must be non-empty when verdict !== 'accept'") do
+//     NOT transfer. Express such rules structurally via discriminated
+//     unions when CLI-level enforcement matters; otherwise the runtime
+//     Zod parse still catches the violation, but the CLI does not.
+//   - `.preprocess` input-coercion is opaque to JSON Schema. Use `z.union`
+//     instead when leniency needs to be visible to the CLI.
+import { z } from 'zod';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function normalizeSchemaNode(node) {
+    if (!isRecord(node))
+        return;
+    if (Array.isArray(node.oneOf) && node.anyOf === undefined) {
+        node.anyOf = node.oneOf;
+        Reflect.deleteProperty(node, 'oneOf');
+    }
+    if (node.type === 'object' &&
+        isRecord(node.properties) &&
+        node.additionalProperties === undefined) {
+        node.additionalProperties = false;
+    }
+    if (isRecord(node.additionalProperties) && Object.keys(node.additionalProperties).length === 0) {
+        node.additionalProperties = true;
+    }
+    for (const value of Object.values(node)) {
+        if (Array.isArray(value)) {
+            for (const item of value)
+                normalizeSchemaNode(item);
+        }
+        else {
+            normalizeSchemaNode(value);
+        }
+    }
+}
+function assertNoReferenceSyntax(node) {
+    if (!isRecord(node))
+        return;
+    for (const [key, value] of Object.entries(node)) {
+        if (key === '$ref' || key === '$defs' || key === 'definitions') {
+            throw new Error(`Zod JSON Schema conversion emitted unsupported ${key}`);
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                assertNoReferenceSyntax(item);
+        }
+        else {
+            assertNoReferenceSyntax(value);
+        }
+    }
+}
+export function responseJsonSchemaFromZod(schema) {
+    const result = z.toJSONSchema(schema, {
+        target: 'draft-07',
+        io: 'input',
+        reused: 'inline',
+        cycles: 'throw',
+    });
+    if (typeof result !== 'object' || result === null) {
+        throw new Error('Zod JSON Schema conversion returned a non-object value');
+    }
+    normalizeSchemaNode(result);
+    assertNoReferenceSyntax(result);
+    return result;
+}
+//# sourceMappingURL=zod-to-response-schema.js.map

package/dist/shared/zod-to-response-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-to-response-schema.js","sourceRoot":"","sources":["../../src/shared/zod-to-response-schema.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,sEAAsE;AACtE,wDAAwD;AACxD,EAAE;AACF,iEAAiE;AACjE,mEAAmE;AACnE,kEAAkE;AAClE,qEAAqE;AACrE,yCAAyC;AACzC,EAAE;AACF,mDAAmD;AACnD,oEAAoE;AACpE,sEAAsE;AACtE,wEAAwE;AACxE,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,mEAAmE;AACnE,2EAA2E;AAC3E,4DAA4D;AAE5D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,IACE,IAAI,CAAC,IAAI,KAAK,QAAQ;QACtB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QACzB,IAAI,CAAC,oBAAoB,KAAK,SAAS,EACvC,CAAC;QACD,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/F,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACnC,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;QACpC,MAAM,EAAE,UAAU;QAClB,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,OAAO;KAChB,CAAC,CAAC;IACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,MAA4B,CAAC;AACtC,CAAC"}

package/dist/skill-hooks/decision-packet.d.ts

@@ -0,0 +1,10 @@
+import type { Ref } from '../schemas/ref.js';
+import { type RunDecisionPacket as RunDecisionPacketValue } from '../schemas/run-envelope.js';
+import type { RunSkillHookEvent } from '../schemas/skill-hook.js';
+export interface BuildSkillHookDecisionPacketInput {
+    readonly runId: string;
+    readonly event: RunSkillHookEvent;
+    readonly artifactRefs?: readonly Ref[];
+}
+export declare function buildStrictSkillUnavailableDecisionPacket(input: BuildSkillHookDecisionPacketInput): RunDecisionPacketValue;
+//# sourceMappingURL=decision-packet.d.ts.map

package/dist/skill-hooks/decision-packet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-packet.d.ts","sourceRoot":"","sources":["../../src/skill-hooks/decision-packet.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAEL,KAAK,iBAAiB,IAAI,sBAAsB,EACjD,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC;CACxC;AAED,wBAAgB,yCAAyC,CACvD,KAAK,EAAE,iCAAiC,GACvC,sBAAsB,CAoCxB"}

package/dist/skill-hooks/decision-packet.js

@@ -0,0 +1,42 @@
+// Skill-hook decision-packet builder.
+//
+// buildStrictSkillUnavailableDecisionPacket turns a strict `auto` policy whose
+// configured skill is unavailable into the operator decision the actuator gates
+// on (while that decision is pending the actuator injects nothing). Oracle:
+// tests/contracts/skill-hook-policy-schema.test.ts. See ./policy.ts for how the
+// decision_packet_id is set.
+import { RunId } from '../schemas/ids.js';
+import { RunDecisionPacket, } from '../schemas/run-envelope.js';
+export function buildStrictSkillUnavailableDecisionPacket(input) {
+    if (input.event.policy.mode === 'none' ||
+        input.event.policy.strict !== true ||
+        input.event.decision_packet_id === undefined ||
+        input.event.unavailable_skills === undefined ||
+        input.event.unavailable_skills.length === 0) {
+        throw new Error('strict unavailable-skill packets require strict policy, unavailable skills, and decision_packet_id');
+    }
+    return RunDecisionPacket.parse({
+        schema: 'run.decision-packet@v0',
+        decision_id: input.event.decision_packet_id,
+        reason: 'strict-skill-unavailable',
+        prompt: `Configured skills are unavailable for ${input.event.hook}.`,
+        choices: [
+            {
+                id: 'continue-without-skill',
+                label: 'Continue',
+                effect: 'Continue without the unavailable skills and record that they did not run.',
+            },
+            {
+                id: 'stop',
+                label: 'Stop',
+                effect: 'Stop so the skill installation or policy can be fixed first.',
+            },
+        ],
+        resume_target: {
+            kind: 'run-envelope',
+            run_id: RunId.parse(input.runId),
+        },
+        artifact_refs: [...(input.artifactRefs ?? [])],
+    });
+}
+//# sourceMappingURL=decision-packet.js.map

package/dist/skill-hooks/decision-packet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-packet.js","sourceRoot":"","sources":["../../src/skill-hooks/decision-packet.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,6BAA6B;AAE7B,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EACL,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AASpC,MAAM,UAAU,yCAAyC,CACvD,KAAwC;IAExC,IACE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;QAClC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI;QAClC,KAAK,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;QAC5C,KAAK,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;QAC5C,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,wBAAwB;QAChC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB;QAC3C,MAAM,EAAE,0BAA0B;QAClC,MAAM,EAAE,yCAAyC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG;QACpE,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,wBAAwB;gBAC5B,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,2EAA2E;aACpF;YACD;gBACE,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,8DAA8D;aACvE;SACF;QACD,aAAa,EAAE;YACb,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;SACjC;QACD,aAAa,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/dist/skill-hooks/dispatch.d.ts

@@ -0,0 +1,27 @@
+import type { LayeredConfig } from '../schemas/config.js';
+import { type RunSkillHookEvent } from '../schemas/skill-hook.js';
+import type { TraceEntry } from '../schemas/trace-entry.js';
+import type { UserSkillRegistry } from '../shared/user-skill-registry.js';
+import type { EditFileSurfaceSource } from './surface-sources.js';
+export interface SkillHookDispatchScope {
+    readonly flowId?: string;
+    readonly stageId?: string;
+    readonly stepId?: string;
+    readonly attemptId?: string;
+}
+export interface DispatchSkillHooksInput {
+    readonly entries: readonly TraceEntry[];
+    readonly configLayers?: readonly LayeredConfig[];
+    readonly scope: SkillHookDispatchScope;
+    readonly eventIdBase: string;
+    readonly registry?: UserSkillRegistry;
+}
+export declare function dispatchSkillHooksForEntries(input: DispatchSkillHooksInput): readonly RunSkillHookEvent[];
+export type DispatchReadJson = (ref: string) => Promise<unknown>;
+export interface DispatchEditFileHooksInput extends DispatchSkillHooksInput {
+    readonly readJson: DispatchReadJson;
+    readonly editFileSurfaceSources: Readonly<Record<string, EditFileSurfaceSource>>;
+}
+export declare function dispatchEditFileHooksForEntries(input: DispatchEditFileHooksInput): Promise<readonly RunSkillHookEvent[]>;
+export declare function dispatchSkillHooks(input: DispatchEditFileHooksInput): Promise<readonly RunSkillHookEvent[]>;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/skill-hooks/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/skill-hooks/dispatch.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAE,KAAK,iBAAiB,EAAyB,MAAM,0BAA0B,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAMlE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IAExC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IAEvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAwCD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,uBAAuB,GAC7B,SAAS,iBAAiB,EAAE,CAyB9B;AAgBD,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjE,MAAM,WAAW,0BAA2B,SAAQ,uBAAuB;IAGzE,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;CAClF;AAyCD,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CA0CvC;AAKD,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAIvC"}

package/dist/skill-hooks/dispatch.js

@@ -0,0 +1,167 @@
+// Skill-hook dispatch (report-only slice).
+//
+// This is the live caller the policy layer was staged for. After a step
+// completes, the graph-runner hands this the trace entries that step just
+// appended; this maps the literal, rule-based detection signals to the
+// check-outcome hooks (after:verification-failed, after:evidence-gap), asks the
+// policy layer what each would do (buildRunSkillHookEvent), and returns the
+// events that a configured policy matched. The caller RECORDS them and injects
+// nothing — report-only. Detection is rule-based only (a typed trace signal),
+// never a model reading prose. See docs/ideas/skill-hooks-dispatch-spec.md.
+import { SKILL_HOOK_VOCABULARY } from '../schemas/skill-hook.js';
+import { buildRunSkillHookEvent } from './policy.js';
+const VOCABULARY_BY_HOOK = new Map(SKILL_HOOK_VOCABULARY.map((entry) => [entry.hook, entry]));
+// Map a just-appended trace entry to the check-outcome hook it triggers, if any.
+// Rule-based: keys on literal trace signals, no model.
+//
+// after:verification-failed — a failed verification check (the schema_sections
+// check the verification executor emits); deliberately NOT relay result_verdict
+// or acceptance_criteria checks.
+//
+// after:evidence-gap — the vocabulary defines this as "required claim missing
+// AFTER VERIFY", so it must key only on a VERIFICATION proof assessment
+// (assessment_id `proof.verification:*`, not a relay's `proof.acceptance:*`
+// proof, which every ordinary implementer relay emits as non-proven). It also
+// excludes 'contradicted' (a hard verification failure, already covered by
+// after:verification-failed) so a single failing verify does not double-fire;
+// the gap signal is a verification that ran but left a required claim unproven.
+function hookForEntry(entry) {
+    if (entry.kind === 'check.evaluated' &&
+        entry.check_kind === 'schema_sections' &&
+        entry.outcome === 'fail') {
+        return 'after:verification-failed';
+    }
+    if (entry.kind === 'proof.assessed' &&
+        entry.assessment_id.startsWith('proof.verification:') &&
+        entry.overall_status !== 'proven' &&
+        entry.overall_status !== 'contradicted') {
+        return 'after:evidence-gap';
+    }
+    return undefined;
+}
+// Build the skill-hook events a step's signals trigger under the run's config.
+// Returns only events whose policy resolved to something the operator opted into
+// (mode !== 'none'); a run with no matching skill_hooks config yields []. Pure:
+// no IO beyond the optional skill registry's own resolution; never throws for a
+// non-triggering entry.
+export function dispatchSkillHooksForEntries(input) {
+    const events = [];
+    for (const entry of input.entries) {
+        const hook = hookForEntry(entry);
+        if (hook === undefined)
+            continue;
+        const vocabulary = VOCABULARY_BY_HOOK.get(hook);
+        if (vocabulary === undefined)
+            continue;
+        const event = buildRunSkillHookEvent({
+            eventId: `${input.eventIdBase}:${hook}:${entry.sequence}`,
+            hook,
+            detectedFrom: [...vocabulary.detected_from],
+            cardinality: vocabulary.cardinality,
+            ...(input.configLayers === undefined ? {} : { configLayers: input.configLayers }),
+            ...(input.registry === undefined ? {} : { registry: input.registry }),
+            ...(input.scope.flowId === undefined ? {} : { flowId: input.scope.flowId }),
+            ...(input.scope.stageId === undefined ? {} : { stageId: input.scope.stageId }),
+            ...(input.scope.stepId === undefined ? {} : { stepId: input.scope.stepId }),
+            ...(input.scope.attemptId === undefined ? {} : { attemptId: input.scope.attemptId }),
+        });
+        // Operator opt-in gate: mode 'none' means no configured policy matched this
+        // hook, so a run with no skill_hooks config records nothing.
+        if (event.policy.mode === 'none')
+            continue;
+        events.push(event);
+    }
+    return events;
+}
+// Matches the bare anchors and the v1 extension-suffix form, and nothing else
+// (a namespaced custom hook starts with `<ns>/`, so it never matches).
+const EDIT_FILE_KEY_RE = /^(before|after):edit-files(:(\.[A-Za-z0-9]+)+)?$/;
+function editFileTiming(key) {
+    return key.startsWith('before:') ? 'before' : 'after';
+}
+function baseEditFileHook(key) {
+    return key.startsWith('before:') ? 'before:edit-files' : 'after:edit-files';
+}
+// The literal predicate carried in the key suffix: '.tsx' for
+// `after:edit-files:.tsx`, '' (match-any) for a bare `after:edit-files`.
+function editFileSuffix(key) {
+    const rest = key.slice(baseEditFileHook(key).length);
+    return rest.startsWith(':') ? rest.slice(1) : '';
+}
+function surfaceMatches(surface, suffix) {
+    if (suffix === '')
+        return surface.length > 0;
+    return surface.some((item) => item.endsWith(suffix));
+}
+// The distinct edit-files policy keys configured across the run's config layers.
+function editFilePolicyKeys(configLayers) {
+    const keys = new Set();
+    for (const layer of configLayers) {
+        for (const key of Object.keys(layer.config.skill_hooks.policy)) {
+            if (EDIT_FILE_KEY_RE.test(key))
+                keys.add(key);
+        }
+    }
+    return [...keys];
+}
+// Build the edit-files skill-hook events a step's report surfaces trigger under
+// the run's config. Returns only events whose policy resolved to something the
+// operator opted into (mode !== 'none'). Best-effort: an unreadable report or a
+// report schema with no surface source is skipped, never thrown.
+export async function dispatchEditFileHooksForEntries(input) {
+    const keys = editFilePolicyKeys(input.configLayers ?? []);
+    if (keys.length === 0)
+        return [];
+    const events = [];
+    for (const entry of input.entries) {
+        if (entry.kind !== 'step.report_written')
+            continue;
+        const source = input.editFileSurfaceSources[entry.report_schema];
+        if (source === undefined)
+            continue;
+        let report;
+        try {
+            report = await input.readJson(entry.report_path);
+        }
+        catch {
+            continue; // unreadable report: report-only dispatch must never break a run
+        }
+        const surface = source.extract(report);
+        if (surface.length === 0)
+            continue;
+        for (const key of keys) {
+            if (editFileTiming(key) !== source.timing)
+                continue;
+            if (!surfaceMatches(surface, editFileSuffix(key)))
+                continue;
+            const vocabulary = VOCABULARY_BY_HOOK.get(baseEditFileHook(key));
+            if (vocabulary === undefined)
+                continue;
+            const event = buildRunSkillHookEvent({
+                eventId: `${input.eventIdBase}:${key}:${entry.sequence}`,
+                hook: key,
+                detectedFrom: [...vocabulary.detected_from],
+                cardinality: vocabulary.cardinality,
+                ...(input.configLayers === undefined ? {} : { configLayers: input.configLayers }),
+                ...(input.registry === undefined ? {} : { registry: input.registry }),
+                ...(input.scope.flowId === undefined ? {} : { flowId: input.scope.flowId }),
+                ...(input.scope.stageId === undefined ? {} : { stageId: input.scope.stageId }),
+                ...(input.scope.stepId === undefined ? {} : { stepId: input.scope.stepId }),
+                ...(input.scope.attemptId === undefined ? {} : { attemptId: input.scope.attemptId }),
+            });
+            if (event.policy.mode === 'none')
+                continue;
+            events.push(event);
+        }
+    }
+    return events;
+}
+// The single dispatch entry the graph-runner calls after a step completes:
+// records both check-outcome hooks (sync, from trace signals) and file-edit
+// hooks (async, from report surfaces) the step's entries trigger.
+export async function dispatchSkillHooks(input) {
+    const checkOutcome = dispatchSkillHooksForEntries(input);
+    const editFile = await dispatchEditFileHooksForEntries(input);
+    return [...checkOutcome, ...editFile];
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/skill-hooks/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/skill-hooks/dispatch.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAI5E,OAAO,EAA0B,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC1D,CAAC;AAoBF,iFAAiF;AACjF,uDAAuD;AACvD,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,iCAAiC;AACjC,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,gFAAgF;AAChF,SAAS,YAAY,CAAC,KAAiB;IACrC,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAChC,KAAK,CAAC,UAAU,KAAK,iBAAiB;QACtC,KAAK,CAAC,OAAO,KAAK,MAAM,EACxB,CAAC;QACD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,qBAAqB,CAAC;QACrD,KAAK,CAAC,cAAc,KAAK,QAAQ;QACjC,KAAK,CAAC,cAAc,KAAK,cAAc,EACvC,CAAC;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,wBAAwB;AACxB,MAAM,UAAU,4BAA4B,CAC1C,KAA8B;IAE9B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC;YACnC,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE;YACzD,IAAI;YACJ,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC;YAC3C,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9E,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;SACrF,CAAC,CAAC;QACH,4EAA4E;QAC5E,6DAA6D;QAC7D,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAyBD,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAE5E,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACxD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC9E,CAAC;AAED,8DAA8D;AAC9D,yEAAyE;AACzE,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,OAA0B,EAAE,MAAc;IAChE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,YAAsC;IAChE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAAiC;IAEjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;YAAE,SAAS;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAEnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,iEAAiE;QAC7E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM;gBAAE,SAAS;YACpD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAS;YACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC;gBACnC,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,IAAI,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE;gBACxD,IAAI,EAAE,GAAG;gBACT,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC;gBAC3C,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;gBACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9E,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;aACrF,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,4EAA4E;AAC5E,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAiC;IAEjC,MAAM,YAAY,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAC;AACxC,CAAC"}

package/dist/skill-hooks/injection.d.ts

@@ -0,0 +1,7 @@
+import type { SkillId } from '../schemas/ids.js';
+export interface SkillHookInjectionChannel {
+    add(ids: readonly SkillId[]): void;
+    ids(): readonly SkillId[];
+}
+export declare function createSkillHookInjectionChannel(): SkillHookInjectionChannel;
+//# sourceMappingURL=injection.d.ts.map

package/dist/skill-hooks/injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../src/skill-hooks/injection.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,WAAW,yBAAyB;IAGxC,GAAG,CAAC,GAAG,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAAC;IAGnC,GAAG,IAAI,SAAS,OAAO,EAAE,CAAC;CAC3B;AAED,wBAAgB,+BAA+B,IAAI,yBAAyB,CAW3E"}

package/dist/skill-hooks/injection.js

@@ -0,0 +1,50 @@
+// Skill-hook injection channel — the run-scoped accumulator the actuator writes
+// and the relay seam reads.
+//
+// Slice 3 (the actuator) flips skill-hook dispatch from report-only to ACT: when
+// an `auto` policy matches, the dispatcher adds the event's resolved
+// triggered_skills to this channel. Subsequent IMPLEMENTER relay steps read the
+// channel (in planRelayGuidanceDecision) and merge those skill ids into the
+// step's loaded skills, so the worker prompt, the recorded relay guidance, and
+// the assertRelayGuidanceMatchesPlan check all see one consistent skill set.
+//
+// Scope: every injecting hook today (before/after:edit-files,
+// after:verification-failed) concerns a code edit, so injection applies ONLY to
+// write-capable (implementer-role) relays. planRelayGuidanceDecision gates on the
+// role; a researcher or reviewer relay never receives an injected skill (role
+// separation — a reviewer must judge the work independently). The gate lives in
+// planRelayGuidanceDecision, not here, so this channel stays a plain accumulator.
+//
+// Design constraints this shape enforces (see docs/ideas/skill-hooks-dispatch-spec.md):
+//
+//  - Persistent across the run, not one-shot. `ids()` is a pure idempotent read;
+//    it never drains. Two reasons: (1) planRelayGuidanceDecision is called more
+//    than once per step (the production path, the injected-connector path, and
+//    each fanout branch), and assertRelayGuidanceMatchesPlan + the request-payload
+//    hash require every call for a given step to return the identical skill set;
+//    (2) recovery loops re-run the implementer after a verification failure, and
+//    a skill injected by after:verification-failed must reach that retry. So once
+//    injected, a skill stays loaded for the remainder of the run on every
+//    implementer relay (a known, accepted over-injection cost across same-role
+//    steps; it does NOT leak across roles). The channel is mutated ONLY at the
+//    post-step dispatch seam (between steps, after the relay executor has fully
+//    returned), so within a single step every read is stable.
+//  - Deduped. A skill injected twice (two hooks, or a hook plus a later hook)
+//    is added once; resolveLoadedRelaySkills dedupes again against selection and
+//    slot bindings, so order and multiplicity here do not matter downstream.
+//  - Pure. No IO; the skill bodies are resolved later by the relay loader's
+//    registry, not here.
+export function createSkillHookInjectionChannel() {
+    // Insertion-ordered set keyed by the string id; first-seen order is stable.
+    const set = new Set();
+    return {
+        add(ids) {
+            for (const id of ids)
+                set.add(id);
+        },
+        ids() {
+            return [...set];
+        },
+    };
+}
+//# sourceMappingURL=injection.js.map

package/dist/skill-hooks/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../src/skill-hooks/injection.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4BAA4B;AAC5B,EAAE;AACF,iFAAiF;AACjF,qEAAqE;AACrE,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,6EAA6E;AAC7E,EAAE;AACF,8DAA8D;AAC9D,gFAAgF;AAChF,kFAAkF;AAClF,8EAA8E;AAC9E,gFAAgF;AAChF,kFAAkF;AAClF,EAAE;AACF,wFAAwF;AACxF,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,+EAA+E;AAC/E,mFAAmF;AACnF,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,8DAA8D;AAC9D,8EAA8E;AAC9E,iFAAiF;AACjF,6EAA6E;AAC7E,4EAA4E;AAC5E,yBAAyB;AAazB,MAAM,UAAU,+BAA+B;IAC7C,4EAA4E;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO;QACL,GAAG,CAAC,GAAG;YACL,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,GAAG,CAAC,GAAG,CAAC,EAAuB,CAAC,CAAC;QACzD,CAAC;QACD,GAAG;YACD,OAAO,CAAC,GAAG,GAAG,CAAkC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/skill-hooks/policy.d.ts

@@ -0,0 +1,32 @@
+import type { LayeredConfig } from '../schemas/config.js';
+import { SkillId } from '../schemas/ids.js';
+import { type RunSkillHookEvent as RunSkillHookEventValue, type SkillHookCardinality, type SkillHookName as SkillHookNameValue, type SkillHookPolicyResolution, type SkillHookPolicyRule } from '../schemas/skill-hook.js';
+import { type UserSkillRegistry } from '../shared/user-skill-registry.js';
+type PolicySource = Exclude<SkillHookPolicyResolution['source'], 'none'>;
+type ResolvedPolicy = {
+    readonly mode: 'none';
+    readonly source: 'none';
+} | {
+    readonly mode: SkillHookPolicyRule['mode'];
+    readonly source: PolicySource;
+    readonly strict: boolean;
+    readonly skills: readonly SkillId[];
+    readonly policyRef?: string;
+};
+export interface BuildRunSkillHookEventInput {
+    readonly eventId: string;
+    readonly hook: SkillHookNameValue;
+    readonly detectedFrom: readonly string[];
+    readonly cardinality: SkillHookCardinality;
+    readonly configLayers?: readonly LayeredConfig[];
+    readonly registry?: UserSkillRegistry;
+    readonly decisionPacketId?: string;
+    readonly flowId?: string;
+    readonly stageId?: string;
+    readonly stepId?: string;
+    readonly attemptId?: string;
+}
+export declare function resolveSkillHookPolicy(configLayers: readonly LayeredConfig[], hookInput: SkillHookNameValue): ResolvedPolicy;
+export declare function buildRunSkillHookEvent(input: BuildRunSkillHookEventInput): RunSkillHookEventValue;
+export {};
+//# sourceMappingURL=policy.d.ts.map

package/dist/skill-hooks/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/skill-hooks/policy.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAEL,KAAK,iBAAiB,IAAI,sBAAsB,EAChD,KAAK,oBAAoB,EAEzB,KAAK,aAAa,IAAI,kBAAkB,EACxC,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,iBAAiB,EAA2B,MAAM,kCAAkC,CAAC;AAEnG,KAAK,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AAEzE,KAAK,cAAc,GACf;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEN,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAkBD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,SAAS,aAAa,EAAE,EACtC,SAAS,EAAE,kBAAkB,GAC5B,cAAc,CA4BhB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,sBAAsB,CA+CjG"}

package/dist/skill-hooks/policy.js

@@ -0,0 +1,104 @@
+// Skill-hook policy layer — resolves an operator's skill_hooks policy for a hook
+// and builds the run.skill-hook event the dispatcher records (and, for `auto`,
+// the actuator injects). Live since the dispatch slices: graph-runner ->
+// dispatch.ts -> buildRunSkillHookEvent. Two modes: `auto` prepares the
+// configured skills; `mute` records the event with no prepared skills. A strict
+// policy whose configured skill is unavailable raises a decision packet instead
+// of silently proceeding.
+//
+// Behavioral oracle: tests/contracts/skill-hook-policy-schema.test.ts.
+import { SkillId } from '../schemas/ids.js';
+import { RunSkillHookEvent, SkillHookName, } from '../schemas/skill-hook.js';
+import { createUserSkillRegistry } from '../shared/user-skill-registry.js';
+function sourceForLayer(layer) {
+    if (layer === 'project')
+        return 'project-policy';
+    if (layer === 'user-global')
+        return 'user-global-policy';
+    return undefined;
+}
+function policyResolution(policy) {
+    if (policy.mode === 'none')
+        return { mode: 'none', source: 'none' };
+    return {
+        mode: policy.mode,
+        source: policy.source,
+        strict: policy.strict,
+        ...(policy.policyRef === undefined ? {} : { policy_ref: policy.policyRef }),
+    };
+}
+export function resolveSkillHookPolicy(configLayers, hookInput) {
+    const hook = SkillHookName.parse(hookInput);
+    let resolved = { mode: 'none', source: 'none' };
+    for (const layer of configLayers) {
+        const source = sourceForLayer(layer.layer);
+        if (source === undefined)
+            continue;
+        const rule = layer.config.skill_hooks.policy[hook];
+        if (rule === undefined)
+            continue;
+        resolved =
+            rule.mode === 'mute'
+                ? {
+                    mode: 'mute',
+                    source,
+                    strict: rule.strict,
+                    skills: [],
+                    ...(layer.source_path === undefined ? {} : { policyRef: layer.source_path }),
+                }
+                : {
+                    mode: rule.mode,
+                    source,
+                    strict: rule.strict,
+                    skills: rule.skills ?? [],
+                    ...(layer.source_path === undefined ? {} : { policyRef: layer.source_path }),
+                };
+    }
+    return resolved;
+}
+export function buildRunSkillHookEvent(input) {
+    const policy = resolveSkillHookPolicy(input.configLayers ?? [], input.hook);
+    const registry = input.registry ?? createUserSkillRegistry();
+    const triggeredSkills = [];
+    const unavailableSkills = [];
+    const shouldPrepare = policy.mode === 'auto';
+    if (shouldPrepare) {
+        for (const skill of policy.skills) {
+            try {
+                registry.resolve(skill);
+                triggeredSkills.push({
+                    id: SkillId.parse(skill),
+                    state: 'planned',
+                    source: policy.source,
+                });
+            }
+            catch (err) {
+                unavailableSkills.push({
+                    id: SkillId.parse(skill),
+                    state: 'unavailable',
+                    source: policy.source,
+                    reason: err.message,
+                });
+            }
+        }
+    }
+    const decisionPacketId = policy.mode !== 'none' && policy.strict && unavailableSkills.length > 0
+        ? (input.decisionPacketId ?? `${input.eventId}:strict-skill-unavailable`)
+        : input.decisionPacketId;
+    return RunSkillHookEvent.parse({
+        schema: 'run.skill-hook@v0',
+        event_id: input.eventId,
+        hook: input.hook,
+        detected_from: [...input.detectedFrom],
+        cardinality: input.cardinality,
+        policy: policyResolution(policy),
+        ...(input.flowId === undefined ? {} : { flow_id: input.flowId }),
+        ...(input.stageId === undefined ? {} : { stage_id: input.stageId }),
+        ...(input.stepId === undefined ? {} : { step_id: input.stepId }),
+        ...(input.attemptId === undefined ? {} : { attempt_id: input.attemptId }),
+        ...(decisionPacketId === undefined ? {} : { decision_packet_id: decisionPacketId }),
+        triggered_skills: triggeredSkills,
+        ...(unavailableSkills.length === 0 ? {} : { unavailable_skills: unavailableSkills }),
+    });
+}
+//# sourceMappingURL=policy.js.map

package/dist/skill-hooks/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/skill-hooks/policy.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,+EAA+E;AAC/E,yEAAyE;AACzE,wEAAwE;AACxE,gFAAgF;AAChF,gFAAgF;AAChF,0BAA0B;AAC1B,EAAE;AACF,uEAAuE;AAGvE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EAGjB,aAAa,GAId,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAA0B,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AA+BnG,SAAS,cAAc,CAAC,KAA6B;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IACjD,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,oBAAoB,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAsB;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,YAAsC,EACtC,SAA6B;IAE7B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,QAAQ,GAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEhE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,QAAQ;YACN,IAAI,CAAC,IAAI,KAAK,MAAM;gBAClB,CAAC,CAAC;oBACE,IAAI,EAAE,MAAM;oBACZ,MAAM;oBACN,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,EAAE;oBACV,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;iBAC7E;gBACH,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM;oBACN,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;oBACzB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;iBAC7E,CAAC;IACV,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,uBAAuB,EAAE,CAAC;IAC7D,MAAM,eAAe,GAA+C,EAAE,CAAC;IACvE,MAAM,iBAAiB,GAAiD,EAAE,CAAC;IAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;IAE7C,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;oBACxB,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iBAAiB,CAAC,IAAI,CAAC;oBACrB,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;oBACxB,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAG,GAAa,CAAC,OAAO;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GACpB,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,IAAI,GAAG,KAAK,CAAC,OAAO,2BAA2B,CAAC;QACzE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAE7B,OAAO,iBAAiB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAChC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;QACnF,gBAAgB,EAAE,eAAe;QACjC,GAAG,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;KACrF,CAAC,CAAC;AACL,CAAC"}

package/dist/skill-hooks/surface-sources.d.ts

@@ -0,0 +1,8 @@
+import type { EditFileTiming, ReportFileSurfaceDeclaration } from '../schemas/report-file-surface.js';
+export interface EditFileSurfaceSource {
+    readonly timing: EditFileTiming;
+    readonly extract: (report: unknown) => readonly string[];
+}
+export declare function surfaceSourceFromDeclaration(declaration: ReportFileSurfaceDeclaration): EditFileSurfaceSource;
+export declare function surfaceSourcesFromDeclarations(declarations: Readonly<Record<string, ReportFileSurfaceDeclaration>>): Readonly<Record<string, EditFileSurfaceSource>>;
+//# sourceMappingURL=surface-sources.d.ts.map

package/dist/skill-hooks/surface-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-sources.d.ts","sourceRoot":"","sources":["../../src/skill-hooks/surface-sources.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,cAAc,EACd,4BAA4B,EAE7B,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,qBAAqB;IAIpC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAGhC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS,MAAM,EAAE,CAAC;CAC1D;AAoCD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,4BAA4B,GACxC,qBAAqB,CAKvB;AAED,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,GACnE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CASjD"}