@reposkein/mcp 0.2.7 → 0.4.0

package/dist/indexer/decisionsAffected.d.ts

@@ -0,0 +1,42 @@
+/** TS mirror of the indexer's GraphDelta (indexer/crates/core/src/delta.rs). */
+export interface GraphDeltaJson {
+    added: string[];
+    removed: string[];
+    modified: string[];
+    counts: {
+        added: number;
+        removed: number;
+        modified: number;
+    };
+    truncated: boolean;
+}
+export interface DecisionAffected {
+    decision_id: string;
+    title: string;
+    why: "anchor_modified" | "anchor_removed" | "governed_path_changed";
+}
+/** Where hook-driven indexes park their delta: pre-commit / post-merge /
+ *  post-checkout discard stdout, and post-merge (teammate changes landing) is
+ *  exactly when decisions drift — the file bridges that gap to the next MCP
+ *  call. Root repo only; nested repos' drift surfaces when they are reindexed
+ *  through the MCP tools themselves. */
+export declare function pendingDeltaPath(repoPath: string): string;
+/** Reads AND consumes the pending delta (delete-on-read: each drift event is
+ *  surfaced once). Corrupt files are consumed silently — a damaged advisory
+ *  file must not wedge the pipeline. */
+export declare function readPendingDelta(repoPath: string): GraphDeltaJson | null;
+/** Drops the given node ids (suffix-tolerant) from the pending delta —
+ *  called by record_decision, whose own refresh index would otherwise park a
+ *  delta that flags the just-stamped decision as drifted on the next call.
+ *  Deletes the file when nothing else remains; best-effort throughout. */
+export declare function removeFromPendingDelta(repoPath: string, nodeIds: string[]): void;
+/** Unions two deltas (id lists deduped; counts = union sizes). */
+export declare function mergeDeltas(a: GraphDeltaJson, b: GraphDeltaJson): GraphDeltaJson;
+/** Cross-references a delta against the decision log: which accepted/proposed
+ *  decisions govern something that just changed? Anchor matching is
+ *  suffix-tolerant across repo_ids; PATH governance is scoped to the root
+ *  repo (`rootRepoId`) — nested child repos use child-relative paths, a
+ *  different coordinate system, and are governed via anchors instead.
+ *  Deterministic order (by decision id). The skill rule: re-read each and
+ *  conform, supersede, or reaffirm. */
+export declare function decisionsAffectedBy(repoPath: string, delta: GraphDeltaJson, rootRepoId: string): DecisionAffected[];

package/dist/indexer/decisionsAffected.js

@@ -0,0 +1,149 @@
+import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { loadDecisions, nodeIdRepo, nodeIdSuffix } from "../store/decisions.js";
+import { neutralizeSummary } from "../guard/summaryValidation.js";
+/** Where hook-driven indexes park their delta: pre-commit / post-merge /
+ *  post-checkout discard stdout, and post-merge (teammate changes landing) is
+ *  exactly when decisions drift — the file bridges that gap to the next MCP
+ *  call. Root repo only; nested repos' drift surfaces when they are reindexed
+ *  through the MCP tools themselves. */
+export function pendingDeltaPath(repoPath) {
+    return join(repoPath, ".reposkein", "local", "last_delta.json");
+}
+/** Reads AND consumes the pending delta (delete-on-read: each drift event is
+ *  surfaced once). Corrupt files are consumed silently — a damaged advisory
+ *  file must not wedge the pipeline. */
+export function readPendingDelta(repoPath) {
+    const p = pendingDeltaPath(repoPath);
+    if (!existsSync(p))
+        return null;
+    let delta = null;
+    try {
+        const parsed = JSON.parse(readFileSync(p, "utf8"));
+        if (Array.isArray(parsed.added) &&
+            Array.isArray(parsed.removed) &&
+            Array.isArray(parsed.modified)) {
+            delta = parsed;
+        }
+    }
+    catch {
+        delta = null;
+    }
+    try {
+        rmSync(p);
+    }
+    catch {
+        // best-effort consume
+    }
+    return delta;
+}
+/** Drops the given node ids (suffix-tolerant) from the pending delta —
+ *  called by record_decision, whose own refresh index would otherwise park a
+ *  delta that flags the just-stamped decision as drifted on the next call.
+ *  Deletes the file when nothing else remains; best-effort throughout. */
+export function removeFromPendingDelta(repoPath, nodeIds) {
+    if (nodeIds.length === 0)
+        return;
+    const p = pendingDeltaPath(repoPath);
+    if (!existsSync(p))
+        return;
+    try {
+        const delta = JSON.parse(readFileSync(p, "utf8"));
+        const drop = new Set(nodeIds.map(nodeIdSuffix).filter(Boolean));
+        const keep = (id) => {
+            const s = nodeIdSuffix(id);
+            return s === null || !drop.has(s);
+        };
+        const added = delta.added.filter(keep);
+        const removed = delta.removed.filter(keep);
+        const modified = delta.modified.filter(keep);
+        if (added.length === 0 && removed.length === 0 && modified.length === 0 && !delta.truncated) {
+            rmSync(p);
+            return;
+        }
+        writeFileSync(p, JSON.stringify({
+            added,
+            removed,
+            modified,
+            counts: { added: added.length, removed: removed.length, modified: modified.length },
+            truncated: delta.truncated,
+        }));
+    }
+    catch {
+        // best-effort: a damaged advisory file must not break recording
+    }
+}
+/** Unions two deltas (id lists deduped; counts = union sizes). */
+export function mergeDeltas(a, b) {
+    const union = (x, y) => [...new Set([...x, ...y])].sort();
+    const added = union(a.added, b.added);
+    const removed = union(a.removed, b.removed);
+    const modified = union(a.modified, b.modified);
+    return {
+        added,
+        removed,
+        modified,
+        counts: { added: added.length, removed: removed.length, modified: modified.length },
+        truncated: a.truncated || b.truncated,
+    };
+}
+/** The path embedded in a File/Directory node id, or null. */
+function pathOfNodeId(nodeId) {
+    const m = /^rs1:[^:]+:(?:file|dir):(.+)$/.exec(nodeId);
+    return m ? m[1] : null;
+}
+/** Cross-references a delta against the decision log: which accepted/proposed
+ *  decisions govern something that just changed? Anchor matching is
+ *  suffix-tolerant across repo_ids; PATH governance is scoped to the root
+ *  repo (`rootRepoId`) — nested child repos use child-relative paths, a
+ *  different coordinate system, and are governed via anchors instead.
+ *  Deterministic order (by decision id). The skill rule: re-read each and
+ *  conform, supersede, or reaffirm. */
+export function decisionsAffectedBy(repoPath, delta, rootRepoId) {
+    const { decisions } = loadDecisions(repoPath);
+    const modifiedSuffixes = new Set(delta.modified.map(nodeIdSuffix).filter(Boolean));
+    const removedSuffixes = new Set(delta.removed.map(nodeIdSuffix).filter(Boolean));
+    const changed = [...delta.modified, ...delta.added, ...delta.removed]
+        .map((id) => ({ path: pathOfNodeId(id), repo: nodeIdRepo(id) }))
+        .filter((c) => c.path !== null);
+    const out = [];
+    for (const rec of decisions) {
+        if (rec.status !== "accepted" && rec.status !== "proposed")
+            continue;
+        let why = null;
+        for (const a of rec.anchors) {
+            const suffix = nodeIdSuffix(a.node_id);
+            if (suffix === null)
+                continue;
+            if (removedSuffixes.has(suffix)) {
+                why = "anchor_removed";
+                break;
+            }
+            if (modifiedSuffixes.has(suffix)) {
+                why = "anchor_modified";
+                // keep scanning — a removed anchor outranks a modified one
+            }
+        }
+        if (!why) {
+            const governs = (c) => {
+                if (rec.anchors.some((a) => a.path === c.path && nodeIdRepo(a.node_id) === c.repo)) {
+                    return true;
+                }
+                if (c.repo !== rootRepoId)
+                    return false;
+                return rec.paths.some((g) => g === c.path || (g.endsWith("/") && c.path.startsWith(g)));
+            };
+            if (changed.some(governs))
+                why = "governed_path_changed";
+        }
+        if (why) {
+            out.push({
+                decision_id: rec.id,
+                title: neutralizeSummary(rec.title) ?? "",
+                why,
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=decisionsAffected.js.map

package/dist/indexer/decisionsAffected.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionsAffected.js","sourceRoot":"","sources":["../../src/indexer/decisionsAffected.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAiBlE;;;;wCAIwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAClE,CAAC;AAED;;wCAEwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAmB,CAAC;QACrE,IACE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAC7B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC9B,CAAC;YACD,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;0EAG0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,OAAiB;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAmB,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE;YAC1B,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5F,MAAM,CAAC,CAAC,CAAC,CAAC;YACV,OAAO;QACT,CAAC;QACD,aAAa,CACX,CAAC,EACD,IAAI,CAAC,SAAS,CAAC;YACb,KAAK;YACL,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE;YACnF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,CAAiB,EAAE,CAAiB;IAC9D,MAAM,KAAK,GAAG,CAAC,CAAW,EAAE,CAAW,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,KAAK;QACL,OAAO;QACP,QAAQ;QACR,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE;QACnF,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS;KACtC,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;uCAMuC;AACvC,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,KAAqB,EACrB,UAAkB;IAElB,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;IAC/F,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;SAClE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,CAAC,EAA8C,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAE9E,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QACrE,IAAI,GAAG,GAAmC,IAAI,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC9B,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,GAAG,GAAG,gBAAgB,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,GAAG,GAAG,iBAAiB,CAAC;gBACxB,2DAA2D;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,CAAC,CAAwC,EAAW,EAAE;gBACpE,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,KAAK,CAAC;gBACxC,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,GAAG,GAAG,uBAAuB,CAAC;QAC3D,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC;gBACP,WAAW,EAAE,GAAG,CAAC,EAAE;gBACnB,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzC,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/indexer/fetchBinary.d.ts

@@ -1,3 +1,4 @@
+import { type Dispatcher } from "undici";
 /** Custom error class for integrity check failures. */
 export declare class IntegrityError extends Error {
     constructor(message: string);
@@ -5,6 +6,19 @@ export declare class IntegrityError extends Error {
 /** `<platform>-<arch>` for the current host, or null if unsupported. */
 export declare function platformKey(platform?: string, arch?: string): string | null;
 export declare function isWindows(platform?: string): boolean;
+/** Whether this host has a prebuilt indexer release asset. Convenience
+ *  wrapper over `platformKey()` for call sites that just need a boolean
+ *  (e.g. `init`'s pre-flight check, before attempting any fetch). */
+export declare function isSupportedPlatform(platform?: string, arch?: string): boolean;
+/** Printed when a host has no prebuilt indexer (darwin-x64, win32-arm64, …):
+ *  the from-source fallback plus the offline override env var, so `init` can
+ *  continue (write agent config, skip only the binary-dependent steps)
+ *  instead of crashing. See docs/INSTALL.md §2 "Platform support". */
+export declare function cargoInstallFallbackMessage(platform?: string, arch?: string): string;
+export declare function proxyDispatcher(): Dispatcher | undefined;
+/** For testing only: reset the cached proxy dispatcher so env var changes
+ *  take effect on the next call. */
+export declare function _resetProxyDispatcherCache(): void;
 /** Release asset name for a platform key, e.g. reposkein-indexer-darwin-arm64. */
 export declare function assetName(key: string): string;
 /** GitHub Release download URL for the given version + platform key. */

package/dist/indexer/fetchBinary.js

@@ -1,8 +1,9 @@
 import { createWriteStream, existsSync, mkdirSync, chmodSync, statSync, readFileSync, unlinkSync, renameSync } from "node:fs";
 import { createHash, randomBytes } from "node:crypto";
-import { get } from "node:https";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { pipeline } from "node:stream/promises";
+import { request, EnvHttpProxyAgent } from "undici";
 /** Supported platform keys → must match the release asset suffixes (D2).
  *  Intel macOS (darwin-x64) is intentionally unsupported: all Macs have shipped
  *  Apple Silicon since 2020, and GitHub's macos-13 Intel runners are scarce and
@@ -28,6 +29,48 @@ export function platformKey(platform = process.platform, arch = process.arch) {
 export function isWindows(platform = process.platform) {
     return platform === "win32";
 }
+/** Whether this host has a prebuilt indexer release asset. Convenience
+ *  wrapper over `platformKey()` for call sites that just need a boolean
+ *  (e.g. `init`'s pre-flight check, before attempting any fetch). */
+export function isSupportedPlatform(platform = process.platform, arch = process.arch) {
+    return platformKey(platform, arch) !== null;
+}
+/** Printed when a host has no prebuilt indexer (darwin-x64, win32-arm64, …):
+ *  the from-source fallback plus the offline override env var, so `init` can
+ *  continue (write agent config, skip only the binary-dependent steps)
+ *  instead of crashing. See docs/INSTALL.md §2 "Platform support". */
+export function cargoInstallFallbackMessage(platform = process.platform, arch = process.arch) {
+    return (`reposkein: no prebuilt indexer for ${platform}-${arch}. Build from source:\n` +
+        "  git clone https://github.com/reposkein/reposkein.git && cd reposkein\n" +
+        "  cargo install --path indexer/crates/cli --root ./cargo-out\n" +
+        "  export REPOSKEIN_INDEXER_BIN=$PWD/cargo-out/bin/reposkein-indexer\n" +
+        "Then re-run `reposkein-mcp init` (or `doctor`/`index`) with that env var set — " +
+        "REPOSKEIN_INDEXER_BIN is also the offline fallback on supported platforms " +
+        "when the GitHub Releases fetch is unreachable.");
+}
+/** Reads HTTP(S)_PROXY / NO_PROXY (either case) via undici's
+ *  `EnvHttpProxyAgent` — the standard way to proxy `undici.request()` once
+ *  undici is a direct dependency (the global `fetch`'s own undici instance
+ *  isn't importable to attach a dispatcher to). Returns `undefined` (use
+ *  undici's default, non-proxying dispatcher) when no proxy env var is set,
+ *  so the common case pays zero extra cost. Cached per-process — proxy env
+ *  vars don't change mid-run. */
+let _proxyDispatcher;
+export function proxyDispatcher() {
+    if (_proxyDispatcher !== undefined)
+        return _proxyDispatcher ?? undefined;
+    const hasProxyEnv = !!(process.env.HTTPS_PROXY ||
+        process.env.https_proxy ||
+        process.env.HTTP_PROXY ||
+        process.env.http_proxy);
+    _proxyDispatcher = hasProxyEnv ? new EnvHttpProxyAgent() : null;
+    return _proxyDispatcher ?? undefined;
+}
+/** For testing only: reset the cached proxy dispatcher so env var changes
+ *  take effect on the next call. */
+export function _resetProxyDispatcherCache() {
+    _proxyDispatcher = undefined;
+}
 /** Release asset name for a platform key, e.g. reposkein-indexer-darwin-arm64. */
 export function assetName(key) {
     return `reposkein-indexer-${key}${key.startsWith("win32") ? ".exe" : ""}`;
@@ -96,45 +139,43 @@ export function verifyDigest(tempPath, expected) {
 }
 /** Follows redirects (GitHub release assets redirect to a CDN) and streams the
  *  body to `dest`. Rejects on non-2xx (after redirects) or network error.
- *  Redirect hardening: only follows https:// redirects to github.com or *.githubusercontent.com. */
-function downloadTo(url, dest, redirects = 5) {
-    return new Promise((resolve, reject) => {
-        get(url, (res) => {
-            const status = res.statusCode ?? 0;
-            if (status >= 300 && status < 400 && res.headers.location) {
-                if (redirects <= 0) {
-                    reject(new Error("too many redirects"));
-                    return;
-                }
-                const location = res.headers.location;
-                const next = new URL(location, url);
-                if (next.protocol !== "https:") {
-                    reject(new Error(`reposkein: redirect to non-https URL rejected: ${next.href}`));
-                    return;
-                }
-                const host = next.hostname;
-                if (host !== "github.com" &&
-                    host !== "objects.githubusercontent.com" &&
-                    !host.endsWith(".githubusercontent.com")) {
-                    reject(new Error(`reposkein: redirect to non-allowlisted host rejected: ${host}`));
-                    return;
-                }
-                res.resume();
-                downloadTo(next.href, dest, redirects - 1).then(resolve, reject);
-                return;
-            }
-            if (status !== 200) {
-                res.resume();
-                reject(new Error(`download failed: HTTP ${status} for ${url}`));
-                return;
-            }
-            mkdirSync(dirname(dest), { recursive: true });
-            const file = createWriteStream(dest);
-            res.pipe(file);
-            file.on("finish", () => file.close(() => resolve()));
-            file.on("error", reject);
-        }).on("error", reject);
-    });
+ *  Redirect hardening: only follows https:// redirects to github.com or
+ *  *.githubusercontent.com.
+ *
+ *  Uses undici's `request()` (not node:https) so a `proxyDispatcher()` can be
+ *  attached — that's the only way to honor HTTPS_PROXY/NO_PROXY for this
+ *  fetch, since the global `fetch()`'s own undici instance isn't reachable to
+ *  set a dispatcher on. `request()` never auto-follows redirects (no redirect
+ *  interceptor configured), so they're handled manually below to keep the
+ *  host allowlist in the loop. */
+async function downloadTo(url, dest, redirects = 5) {
+    const res = await request(url, { dispatcher: proxyDispatcher() });
+    const status = res.statusCode;
+    if (status >= 300 && status < 400 && res.headers.location) {
+        await res.body.dump().catch(() => { });
+        if (redirects <= 0) {
+            throw new Error("too many redirects");
+        }
+        const locationHeader = res.headers.location;
+        const location = Array.isArray(locationHeader) ? locationHeader[0] : locationHeader;
+        const next = new URL(location, url);
+        if (next.protocol !== "https:") {
+            throw new Error(`reposkein: redirect to non-https URL rejected: ${next.href}`);
+        }
+        const host = next.hostname;
+        if (host !== "github.com" &&
+            host !== "objects.githubusercontent.com" &&
+            !host.endsWith(".githubusercontent.com")) {
+            throw new Error(`reposkein: redirect to non-allowlisted host rejected: ${host}`);
+        }
+        return downloadTo(next.href, dest, redirects - 1);
+    }
+    if (status !== 200) {
+        await res.body.dump().catch(() => { });
+        throw new Error(`download failed: HTTP ${status} for ${url}`);
+    }
+    mkdirSync(dirname(dest), { recursive: true });
+    await pipeline(res.body, createWriteStream(dest));
 }
 /** Downloads the indexer binary for this host into the package cache, verifies
  *  its integrity, makes it executable, and atomically renames it into place.

package/dist/indexer/fetchBinary.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchBinary.js","sourceRoot":"","sources":["../../src/indexer/fetchBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9H,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;uFAGuF;AACvF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CACzB,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB,OAAO,CAAC,QAAQ;IAC3D,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,qBAAqB,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW;IACrD,OAAO,6DAA6D,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACjG,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc;IAC5B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAiB,CAAC;AAC3C,CAAC;AAED,yFAAyF;AACzF,IAAI,UAAU,GAA8C,SAAS,CAAC;AAEtE,SAAS,aAAa;IACpB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,UAAU,GAAG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,kEAAkE,IAAI,oBAAoB,CAAC,CAAC;IACzI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB;IAC/B,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED;;wFAEwF;AACxF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAuB;IACpE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,sFAAsF,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED;;oGAEoG;AACpG,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,SAAS,GAAG,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC1D,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBACxC,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACjF,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC3B,IACE,IAAI,KAAK,YAAY;oBACrB,IAAI,KAAK,+BAA+B;oBACxC,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACxC,CAAC;oBACD,MAAM,CAAC,IAAI,KAAK,CAAC,yDAAyD,IAAI,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;wBAGwB;AACxB,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB,cAAc,EAAE;IACrE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI;YACxE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;QAC7G,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;uFAOuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,MAAM,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc;YAAE,MAAM,GAAG,CAAC,CAAC,iDAAiD;QAC/F,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACrE,CAAC;AACH,CAAC"}
+{"version":3,"file":"fetchBinary.js","sourceRoot":"","sources":["../../src/indexer/fetchBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9H,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAmB,MAAM,QAAQ,CAAC;AAErE;;;uFAGuF;AACvF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CACzB,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB,OAAO,CAAC,QAAQ;IAC3D,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,mBAAmB,CACjC,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED;;;sEAGsE;AACtE,MAAM,UAAU,2BAA2B,CACzC,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,OAAO,CACL,sCAAsC,QAAQ,IAAI,IAAI,wBAAwB;QAC9E,0EAA0E;QAC1E,gEAAgE;QAChE,uEAAuE;QACvE,iFAAiF;QACjF,4EAA4E;QAC5E,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED;;;;;;iCAMiC;AACjC,IAAI,gBAA+C,CAAC;AAEpD,MAAM,UAAU,eAAe;IAC7B,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,IAAI,SAAS,CAAC;IACzE,MAAM,WAAW,GAAG,CAAC,CAAC,CACpB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CACvB,CAAC;IACF,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,OAAO,gBAAgB,IAAI,SAAS,CAAC;AACvC,CAAC;AAED;oCACoC;AACpC,MAAM,UAAU,0BAA0B;IACxC,gBAAgB,GAAG,SAAS,CAAC;AAC/B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,qBAAqB,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW;IACrD,OAAO,6DAA6D,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACjG,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc;IAC5B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAiB,CAAC;AAC3C,CAAC;AAED,yFAAyF;AACzF,IAAI,UAAU,GAA8C,SAAS,CAAC;AAEtE,SAAS,aAAa;IACpB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,UAAU,GAAG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,kEAAkE,IAAI,oBAAoB,CAAC,CAAC;IACzI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB;IAC/B,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED;;wFAEwF;AACxF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAuB;IACpE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,sFAAsF,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED;;;;;;;;;;kCAUkC;AAClC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,SAAS,GAAG,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAC9B,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QACrF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC3B,IACE,IAAI,KAAK,YAAY;YACrB,IAAI,KAAK,+BAA+B;YACxC,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;wBAGwB;AACxB,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB,cAAc,EAAE;IACrE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI;YACxE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;QAC7G,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;uFAOuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,MAAM,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc;YAAE,MAAM,GAAG,CAAC,CAAC,iDAAiD;QAC/F,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/indexer/runIndexer.d.ts

@@ -3,8 +3,6 @@ export interface SpawnResult {
     stdout: string;
     stderr: string;
 }
-/** Repo root the indexer operates on: REPOSKEIN_REPO_PATH or cwd. */
-export declare function repoPath(): string;
 export declare function spawnIndexer(bin: string, args: string[]): Promise<SpawnResult>;
 export interface IndexJsonStats {
     repo_id: string;
@@ -13,6 +11,9 @@ export interface IndexJsonStats {
     edges: number;
     children: number;
     warnings: string[];
+    /** Old-vs-new node diff (absent on a first index or when nothing changed) —
+     *  see indexer/crates/core/src/delta.rs. */
+    graph_delta?: import("./decisionsAffected.js").GraphDeltaJson;
 }
 /** Parse the JSON object emitted by `index --json`. Returns null on parse failure. */
 export declare function parseJsonStats(stdout: string): IndexJsonStats | null;

package/dist/indexer/runIndexer.js

@@ -13,10 +13,14 @@ function buildChildEnv() {
     }
     return env;
 }
-/** Repo root the indexer operates on: REPOSKEIN_REPO_PATH or cwd. */
-export function repoPath() {
-    return process.env.REPOSKEIN_REPO_PATH ?? process.cwd();
-}
+// NOTE: there used to be a `repoPath()` here (REPOSKEIN_REPO_PATH ?? cwd),
+// an independent repo-path resolver `tools/indexerTools.ts` called instead
+// of using its caller's already-resolved active repo. That let init/reindex
+// bypass session.select_repo entirely and index the wrong repo in workspace
+// mode — removed; every caller now takes an explicit `repoPath` param
+// sourced from mcp/src/store/repoSession.ts. Don't reintroduce an
+// env/cwd-based resolver here — see mcp/src/store/resolveRepoPath.ts for the
+// one central resolution algorithm.
 export function spawnIndexer(bin, args) {
     return new Promise((resolve, reject) => {
         const child = spawn(bin, args, { env: buildChildEnv() });

package/dist/indexer/runIndexer.js.map

@@ -1 +1 @@
-{"version":3,"file":"runIndexer.js","sourceRoot":"","sources":["../../src/indexer/runIndexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExH,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,qEAAqE;AACrE,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAc;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,6EAA6E;QAC7E,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;YAC9C,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,kBAAkB,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAWD,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,MAAwB,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACtC,CAAC"}
+{"version":3,"file":"runIndexer.js","sourceRoot":"","sources":["../../src/indexer/runIndexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExH,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,kEAAkE;AAClE,6EAA6E;AAC7E,oCAAoC;AAEpC,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAc;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,6EAA6E;QAC7E,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;YAC9C,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,kBAAkB,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,MAAwB,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACtC,CAAC"}

package/dist/profile/decisions.d.ts

@@ -0,0 +1,37 @@
+import { type DecisionStatus } from "../store/decisions.js";
+import type { TargetRow } from "./types.js";
+/** A decision surfaced on a profile/impact target: enough to know it exists
+ *  and whether the code drifted under it — full rationale via get_decision. */
+export interface GoverningDecision {
+    id: string;
+    title: string;
+    status: DecisionStatus;
+    /** "direct" — an anchor names this node; "contains" — a decision path
+     *  (exact file or dir prefix ending "/") covers the target's file. */
+    via: "direct" | "contains";
+    /** Direct anchors only: recorded hash vs the target's current hash. */
+    anchor_state?: "current" | "stale";
+}
+export interface TargetGovernance {
+    /** Max 5, accepted before proposed before deprecated; then newest first. */
+    decisions: GoverningDecision[];
+    /** Accepted decisions whose direct anchor on this node is stale — re-read
+     *  the decision and conform, supersede, or reaffirm. */
+    needing_review: string[];
+    truncated: boolean;
+}
+/** Pure filesystem + target-row computation (no store round-trips): which
+ *  decisions govern this node, and which of them the node has drifted under. */
+export declare function governingDecisionsFor(repoPath: string, target: TargetRow, rootRepoId?: string): TargetGovernance;
+/** Impact-shaped governance: for each decision, which of the given nodes it
+ *  governs (the target plus impacted rows). */
+export declare function governingDecisionsForNodes(repoPath: string, nodes: {
+    node_id: string;
+    file_path: string;
+    content_hash?: string | null;
+}[], rootRepoId?: string): {
+    id: string;
+    title: string;
+    status: DecisionStatus;
+    governs: string[];
+}[];

package/dist/profile/decisions.js

@@ -0,0 +1,112 @@
+import { neutralizeSummary } from "../guard/summaryValidation.js";
+import { loadDecisions, nodeIdRepo, nodeIdSuffix, } from "../store/decisions.js";
+const MAX_GOVERNING = 5;
+/** Only these statuses govern: rejected never held; superseded is history
+ *  (reachable through the chain, not worth profile budget). */
+const GOVERNING_ORDER = {
+    accepted: 0,
+    proposed: 1,
+    deprecated: 2,
+};
+function directAnchor(rec, targetId) {
+    const targetSuffix = nodeIdSuffix(targetId);
+    return rec.anchors.find((a) => a.node_id === targetId || (targetSuffix !== null && nodeIdSuffix(a.node_id) === targetSuffix));
+}
+/** Path governance for one node. Anchor paths match only within the anchored
+ *  node's own repo; authored `paths` are ROOT-relative and never cross into
+ *  nested child repos (child file_paths are child-relative — same-looking
+ *  strings, different coordinate system; anchor child code directly instead).
+ *  `rootRepoId` undefined → unscoped (single-repo callers/tests). */
+function coversPath(rec, filePath, nodeRepo, rootRepoId) {
+    if (filePath === "")
+        return false;
+    for (const a of rec.anchors) {
+        if (a.path === filePath && (nodeRepo === null || nodeIdRepo(a.node_id) === nodeRepo)) {
+            return true;
+        }
+    }
+    if (rootRepoId !== undefined && nodeRepo !== null && nodeRepo !== rootRepoId)
+        return false;
+    for (const p of rec.paths) {
+        if (p === filePath)
+            return true;
+        if (p.endsWith("/") && filePath.startsWith(p))
+            return true;
+    }
+    return false;
+}
+/** Pure filesystem + target-row computation (no store round-trips): which
+ *  decisions govern this node, and which of them the node has drifted under. */
+export function governingDecisionsFor(repoPath, target, rootRepoId) {
+    const { decisions } = loadDecisions(repoPath);
+    const matched = [];
+    const needing_review = [];
+    for (const rec of decisions) {
+        const order = GOVERNING_ORDER[rec.status];
+        if (order === undefined)
+            continue;
+        const anchor = directAnchor(rec, target.id);
+        let entry = null;
+        if (anchor) {
+            entry = {
+                id: rec.id,
+                title: neutralizeSummary(rec.title) ?? "",
+                status: rec.status,
+                via: "direct",
+            };
+            if (anchor.hash !== null && target.content_hash !== null) {
+                entry.anchor_state = anchor.hash === target.content_hash ? "current" : "stale";
+                if (entry.anchor_state === "stale" && rec.status === "accepted") {
+                    needing_review.push(rec.id);
+                }
+            }
+        }
+        else if (coversPath(rec, target.file_path, target.repo_id || nodeIdRepo(target.id), rootRepoId)) {
+            entry = {
+                id: rec.id,
+                title: neutralizeSummary(rec.title) ?? "",
+                status: rec.status,
+                via: "contains",
+            };
+        }
+        if (entry)
+            matched.push(entry);
+    }
+    matched.sort((a, b) => {
+        const oa = GOVERNING_ORDER[a.status];
+        const ob = GOVERNING_ORDER[b.status];
+        if (oa !== ob)
+            return oa - ob;
+        // Ids embed the date — newest first, then lexicographic.
+        return a.id < b.id ? 1 : a.id > b.id ? -1 : 0;
+    });
+    const truncated = matched.length > MAX_GOVERNING;
+    return { decisions: matched.slice(0, MAX_GOVERNING), needing_review, truncated };
+}
+/** Impact-shaped governance: for each decision, which of the given nodes it
+ *  governs (the target plus impacted rows). */
+export function governingDecisionsForNodes(repoPath, nodes, rootRepoId) {
+    const { decisions } = loadDecisions(repoPath);
+    const out = [];
+    for (const rec of decisions) {
+        if (GOVERNING_ORDER[rec.status] === undefined)
+            continue;
+        const governs = [];
+        for (const n of nodes) {
+            if (directAnchor(rec, n.node_id) ||
+                coversPath(rec, n.file_path, nodeIdRepo(n.node_id), rootRepoId)) {
+                governs.push(n.node_id);
+            }
+        }
+        if (governs.length > 0) {
+            out.push({
+                id: rec.id,
+                title: neutralizeSummary(rec.title) ?? "",
+                status: rec.status,
+                governs,
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=decisions.js.map

package/dist/profile/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.js","sourceRoot":"","sources":["../../src/profile/decisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,UAAU,EACV,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAyB/B,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;+DAC+D;AAC/D,MAAM,eAAe,GAA4C;IAC/D,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,SAAS,YAAY,CAAC,GAAmB,EAAE,QAAgB;IACzD,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,CAChG,CAAC;AACJ,CAAC;AAED;;;;qEAIqE;AACrE,SAAS,UAAU,CACjB,GAAmB,EACnB,QAAgB,EAChB,QAAuB,EACvB,UAAmB;IAEnB,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC3F,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,MAAiB,EACjB,UAAmB;IAEnB,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,KAAK,GAA6B,IAAI,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,EAAE,QAAQ;aACd,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC/E,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAChE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IACL,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,EACtF,CAAC;YACD,KAAK,GAAG;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,EAAE,UAAU;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC;QACtC,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC;QACtC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC9B,yDAAyD;QACzD,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC;IACjD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;AACnF,CAAC;AAED;+CAC+C;AAC/C,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,KAA6E,EAC7E,UAAmB;IAEnB,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAA+E,EAAE,CAAC;IAC3F,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,SAAS;QACxD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IACE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;gBAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,EAC/D,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}