@rundiffusion/ledger 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 RunDiffusion
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,70 @@
+# @rundiffusion/ledger
+
+`rdt` is a Git-native engineering task, claim, delivery, and accountability CLI.
+It stores no company data outside the repository that invokes it:
+
+- Markdown on the default branch is the durable task and shiplog ledger.
+- remote Git refs arbitrate active claims and pin handoffs;
+- Git history records authorship and evidence;
+- repository CI decides what may merge.
+
+There is no database, hosted service, daemon, telemetry, HTTP client, or
+persistent cache. Any JSON audit output is a disposable CI artifact.
+
+## Develop
+
+Use Node 22.15 or newer:
+
+```sh
+npm ci
+npm test
+```
+
+The integration suite creates temporary bare Git remotes and proves claim
+races, exact-SHA leases, immutable handoffs, and delivery accountability.
+
+To exercise the CLI from a repository containing
+`accountability.config.json`:
+
+```sh
+npm run build
+node /path/to/devapps/ledger/dist/cli.js check
+```
+
+## Package safety
+
+Before publishing, run:
+
+```sh
+npm ci
+npm test
+npm pack --dry-run --json
+```
+
+The package `files` allowlist permits only `dist/`, this README, and the MIT
+license. Inspect the dry-run JSON and reject the release if it includes tests,
+fixtures, credentials, repository configuration, tasks, shiplogs, or plans.
+
+The runtime dependency list intentionally contains only the generic YAML
+parser. Do not add network clients, database drivers, telemetry, or caches.
+
+## Manual release
+
+The canonical source remains in the private `image-ai` Bitbucket repository,
+so v0.1.0 uses a manual public npm release rather than public-GitHub OIDC:
+
+```sh
+npm login
+npm publish --access public --otp <current-2fa-code>
+```
+
+Never commit an npm token. Publish from a clean commit, with npm 2FA enabled,
+after reviewing `npm pack --dry-run --json`. Consumer repositories exact-pin
+the published version in their lockfiles.
+
+## Repository contract
+
+Each consumer supplies `accountability.config.json`, `tasks/`, `shiplog/`, and
+`plans/`. Run `rdt --help` for the public commands. Daily operating guidance
+belongs in the consuming repository's `docs/agents/engineering-ledger.md` so
+that humans and agents see the same policy beside the code.

package/dist/args.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedArgs } from './types.js';
+export declare function parseArgs(argv: string[]): ParsedArgs;
+//# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAc7C,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA4BpD"}

package/dist/args.js

@@ -0,0 +1,43 @@
+const BOOLEAN_OPTIONS = new Set([
+    'audit',
+    'ci',
+    'final',
+    'force',
+    'help',
+    'hygiene',
+    'new',
+    'offline',
+    'rollback',
+]);
+export function parseArgs(argv) {
+    const [command = 'list', ...rest] = argv;
+    const positional = [];
+    const options = new Map();
+    for (let index = 0; index < rest.length; index += 1) {
+        const token = rest[index] ?? '';
+        if (!token.startsWith('--')) {
+            positional.push(token);
+            continue;
+        }
+        const equals = token.indexOf('=');
+        const rawName = token.slice(2, equals < 0 ? undefined : equals);
+        const name = rawName.replace(/_/g, '-');
+        if (!name)
+            throw new Error('Empty option name');
+        if (equals >= 0) {
+            options.set(name, token.slice(equals + 1));
+            continue;
+        }
+        if (BOOLEAN_OPTIONS.has(name)) {
+            options.set(name, true);
+            continue;
+        }
+        const value = rest[index + 1];
+        if (!value || value.startsWith('--'))
+            throw new Error(`--${name} requires a value`);
+        options.set(name, value);
+        index += 1;
+    }
+    return { command, positional, options };
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,OAAO;IACP,IAAI;IACJ,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,KAAK;IACL,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,CAAC,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACzC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { parseArgs } from './args.js';
+import { findRepoRoot, loadConfig } from './config.js';
+import { dispatch } from './commands.js';
+const HELP = `rdt - Git-native engineering ledger
+
+Usage:
+  rdt list [--offline]
+  rdt next [--offline]
+  rdt new --title <text> --outcome <text> --context <text> --acceptance <csv> --validation <csv> --areas <csv> [--from <pushed-branch>]
+  rdt start [TASK-ID]
+  rdt submit [TASK-ID] [--new] [--final]
+  rdt handoff TASK-ID --reason <text> [--responsible <identity>]
+  rdt release TASK-ID --reason <text>
+  rdt takeover TASK-ID --reason <text>
+  rdt ship TASK-ID --evidence <text> [--commit <sha>] [--rollback]
+  rdt verify TASK-ID --evidence <text>
+  rdt check [--ci] [--audit] [--hygiene] [--json <path>]
+
+The repository's accountability.config.json defines its ID prefix, default
+branch, areas, staleness thresholds, and linkage enforcement level.`;
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv.includes('--help') || argv[0] === 'help' || argv[0] === '-h') {
+        console.log(HELP);
+        return;
+    }
+    const root = findRepoRoot();
+    const config = loadConfig(root);
+    await dispatch({ root, config }, parseArgs(argv));
+}
+main().catch(error => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;oEAgBuD,CAAC;AAErE,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/commands.d.ts

@@ -0,0 +1,19 @@
+import type { LedgerConfig, ParsedArgs } from './types.js';
+interface Context {
+    root: string;
+    config: LedgerConfig;
+}
+export declare function commandList(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandNext(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandNew(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandStart(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandSubmit(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandShip(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandVerify(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandHandoff(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandRelease(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandTakeover(context: Context, args: ParsedArgs): Promise<void>;
+export declare function commandCheck(context: Context, args: ParsedArgs): Promise<void>;
+export declare function dispatch(context: Context, args: ParsedArgs): Promise<void>;
+export {};
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAe,YAAY,EAAE,UAAU,EAA6B,MAAM,YAAY,CAAC;AA+BnG,UAAU,OAAO;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;CACtB;AAmKD,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnF;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAWnF;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAElF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCpF;AA+CD,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBrF;AASD,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCnF;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBrF;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtF;AAOD,wBAAsB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BtF;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBpF;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAehF"}