@shrkcrft/core 0.1.0-alpha.16 → 0.1.0-alpha.18

package/dist/delegate/delegate-recipe.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The `IDelegateRecipe` contract — a fenced, mechanical task a local-LLM worker
+ * may produce edits for (see `shrk delegate`).
+ *
+ * Lives in `core` (not `config`) so BOTH the config loader AND the pack contract
+ * (`@shrkcrft/plugin-api`, which depends only on core) can reference it — a pack
+ * ships recipes via `delegateRecipeFiles`, the config declares them inline, and
+ * both resolve to this one type.
+ */
+/**
+ * Routing hints for a delegate recipe (forward-compat; recipes are resolved by
+ * explicit `--recipe <id>` today). Kept primitive — no dependency on the
+ * higher-layer task router.
+ */
+export interface IDelegateRecipeMatch {
+    keywords?: readonly string[];
+    fileGlobs?: readonly string[];
+}
+/** A fenced, mechanical task a local-LLM worker may produce edits for. */
+export interface IDelegateRecipe {
+    /** Stable id used by `shrk delegate run --recipe <id>`. */
+    id: string;
+    /** Human-readable label. */
+    title?: string;
+    /** Optional routing hints (unused by the explicit-`--recipe` path). */
+    match?: IDelegateRecipeMatch;
+    /**
+     * Allow-list of globs the worker may touch. A target path matching NONE of
+     * these is refused before any write — the worker's blast radius is fenced.
+     */
+    guardrailGlobs: readonly string[];
+    /**
+     * `IPlannedOperation` kinds the worker may emit (e.g. `'export'`,
+     * `'ensure-import'`). An op of any other kind is dropped, never applied.
+     */
+    allowedOps: readonly string[];
+    /** Local provider preference; defaults to the delegation block / `'auto'`. */
+    provider?: 'auto' | 'ollama' | 'llamacpp';
+    /** Model id passed to the provider. */
+    model?: string;
+    /** Max generate→verify attempts before escalating to a human. Default 2. */
+    maxAttempts?: number;
+    /** Per-attempt wall-clock budget (ms) for the model call. */
+    maxBudgetMs?: number;
+    /** Refuse delegation when the task risk exceeds this ceiling. */
+    riskCeiling?: 'low' | 'medium';
+    /**
+     * Deterministic verification ids run after the edit lands. Each MUST resolve
+     * to a `verificationCommands[].id` — this is the only way a recipe runs a
+     * verify command (a pack can never inject executable shell).
+     */
+    verificationIds: readonly string[];
+}
+//# sourceMappingURL=delegate-recipe.d.ts.map

package/dist/delegate/delegate-recipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate-recipe.d.ts","sourceRoot":"","sources":["../../src/delegate/delegate-recipe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B;;;OAGG;IACH,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;OAGG;IACH,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC1C,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,WAAW,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC/B;;;;OAIG;IACH,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC"}

package/dist/delegate/delegate-recipe.js

@@ -0,0 +1,10 @@
+/**
+ * The `IDelegateRecipe` contract — a fenced, mechanical task a local-LLM worker
+ * may produce edits for (see `shrk delegate`).
+ *
+ * Lives in `core` (not `config`) so BOTH the config loader AND the pack contract
+ * (`@shrkcrft/plugin-api`, which depends only on core) can reference it — a pack
+ * ships recipes via `delegateRecipeFiles`, the config declares them inline, and
+ * both resolve to this one type.
+ */
+export {};

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export * from './result/result.js';
 export * from './result/errors.js';
+export * from './delegate/delegate-recipe.js';
 export * from './logger/log-level.js';
 export * from './logger/logger.js';
 export * from './fs/file-system.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 export * from "./result/result.js";
 export * from "./result/errors.js";
+export * from "./delegate/delegate-recipe.js";
 export * from "./logger/log-level.js";
 export * from "./logger/logger.js";
 export * from "./fs/file-system.js";

package/dist/object/object-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"object-utils.d.ts","sourceRoot":"","sources":["../../src/object/object-utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CASnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI9E;AAED,wBAAgB,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxF,CAAC,EAAE,CAAC,EACJ,CAAC,EAAE,CAAC,GACH,CAAC,GAAG,CAAC,CAYP;AAED,wBAAgB,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAMhG;AAED,wBAAgB,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAShG;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAW9E;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,EAClD,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GACpB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAOhB"}
+{"version":3,"file":"object-utils.d.ts","sourceRoot":"","sources":["../../src/object/object-utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CASnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI9E;AAiBD,wBAAgB,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxF,CAAC,EAAE,CAAC,EACJ,CAAC,EAAE,CAAC,GACH,CAAC,GAAG,CAAC,CAYP;AAED,wBAAgB,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAUhG;AAED,wBAAgB,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAShG;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAW9E;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,EAClD,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GACpB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAOhB"}

package/dist/object/object-utils.js

@@ -15,16 +15,29 @@ export function isPlainObject(value) {
     const proto = Object.getPrototypeOf(value);
     return proto === null || proto === Object.prototype;
 }
+/**
+ * Assign an own enumerable data property. Plain `target[key] = value` invokes
+ * the `Object.prototype.__proto__` setter for a key literally equal to
+ * `"__proto__"` (a real own key after `JSON.parse`), which silently drops the
+ * value (or pollutes the prototype) — so build these objects via defineProperty.
+ */
+function setOwn(target, key, value) {
+    Object.defineProperty(target, key, { value, writable: true, enumerable: true, configurable: true });
+}
+/** Read an OWN property value (returns undefined when the key isn't an own prop). */
+function getOwn(obj, key) {
+    return Object.prototype.hasOwnProperty.call(obj, key) ? obj[key] : undefined;
+}
 export function merge(a, b) {
     const result = { ...a };
     for (const key of Object.keys(b)) {
-        const av = result[key];
+        const av = getOwn(result, key);
         const bv = b[key];
         if (isPlainObject(av) && isPlainObject(bv)) {
-            result[key] = merge(av, bv);
+            setOwn(result, key, merge(av, bv));
         }
         else if (bv !== undefined) {
-            result[key] = bv;
+            setOwn(result, key, bv);
         }
     }
     return result;
@@ -32,8 +45,11 @@ export function merge(a, b) {
 export function pick(obj, keys) {
     const result = {};
     for (const key of keys) {
-        if (key in obj)
-            result[key] = obj[key];
+        // Own-property check (not `key in obj`, which walks the prototype chain, so
+        // pick(obj, ['toString']) would otherwise copy the inherited function).
+        if (Object.prototype.hasOwnProperty.call(obj, key)) {
+            setOwn(result, key, obj[key]);
+        }
     }
     return result;
 }
@@ -42,7 +58,7 @@ export function omit(obj, keys) {
     const result = {};
     for (const key of Object.keys(obj)) {
         if (!keySet.has(key)) {
-            result[key] = obj[key];
+            setOwn(result, key, obj[key]);
         }
     }
     return result;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shrkcrft/core",
-  "version": "0.1.0-alpha.16",
+  "version": "0.1.0-alpha.18",
   "description": "SharkCraft core primitives: Result, AppError, logger, file-system abstraction, path/string/object utils, IDs.",
   "license": "MIT",
   "author": "SharkCraft contributors",