@skillcap/gdh 0.23.0 → 0.24.0

package/INSTALL-BUNDLE.json

@@ -1,5 +1,5 @@
 {
   "product": "GDH",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "installMode": "packaged_install"
 }

package/RELEASE-SPAN-UPDATE-CONTRACTS.json

@@ -2492,6 +2492,70 @@
           }
         ]
       }
+    },
+    {
+      "version": "0.24.0",
+      "releaseTag": "v0.24.0",
+      "migrationStatus": "required",
+      "summary": "v0.24.0 ships v1.18 Migration Chain Integrity. Five managed-surface version constants bump (GDH_AGENT_CONTRACT_VERSION 8 -> 9, GDH_GUIDANCE_INDEX_VERSION 4 -> 5, GDH_GUIDANCE_UNIT_VERSION 17 -> 18, GDH_UPDATE_HOOK_VERSION 5 -> 6, GDH_RUNTIME_BRIDGE_SURFACE_VERSION 11 -> 12). The migration registry adds entry s3c8_to_s3c9_register_runtime_bridge_autoload — a class-3 project-native register_autoload op that writes the GDHBridge autoload entry into project.godot deterministically, replacing the pre-v0.24 manual editor plugin-enable detour the chain matrix flagged as compatibility_degraded.",
+      "releaseHighlights": {
+        "summary": "v0.24.0 ships the v1.18 Migration Chain Integrity milestone. GDH now guarantees that every supported version listed in `docs/product/SUPPORTED-VERSIONS.md` reaches HEAD through `gdh self-update` without manual editor intervention. The release adds a falsifiable five-condition `release:apply` gate (registry completeness, chain matrix, corpus parity, goldens, migration-verify outcome `pass`), a typed managed-surface drift manifest with module-load `assertClassRegistered` guards, deterministic GDHBridge autoload registration during install/repair/self-update, a single-direction migration registry with paired golden fixtures, durable backup with crash-resilient restore, render-inventory orphan sweeping, and a `bumpAndRebakePin` 12-step orchestrator that composes all of the above.",
+        "operatorChanges": [
+          "**Deterministic GDHBridge autoload registration.** `gdh setup`, `gdh self-update`, and `gdh migrate --apply` now write the GDHBridge autoload entry into `project.godot` directly. Pre-v0.24, agents driving self-update had to instruct the operator to open the Godot editor and enable the GDH Runtime Bridge plugin so it could register the autoload itself. The chain matrix flagged that detour as `compatibility_degraded`; v0.24 closes it as a class-3 project-native `register_autoload` op on the v1.18 manifest allowlist.",
+          "**Migration chain matrix.** `npm run test:migration-chain` exercises every supported version (v0.18.0 through v0.23.0) end-to-end against HEAD via the installed tarball. `release:apply` invokes the matrix in-process and refuses to tag on non-zero exit.",
+          "**Five-condition release-apply gate.** `corepack yarn release:apply` enforces five machine-verifiable conditions before tagging: registry completeness (every `surfaceVersionChange` has a bracketing `MIGRATION_REGISTRY_ENTRIES` entry), chain matrix exit 0, corpus parity (`SUPPORTED-VERSIONS.md` rows match `tests/fixtures/migration-corpus/v<version>/` directories), goldens exit 0, and migration-verify outcome `pass`. There is no env-flag bypass, no `--force`, no skip-attestation file.",
+          "**Managed surface drift classification.** `GDH_MANAGED_SURFACE_CLASSES` from `@gdh/core` is the typed source of truth for the three drift classes (deterministic / user-data / project-native). Every managed-surface renderer carries a module-load `assertClassRegistered` guard that aborts the install pipeline if the manifest and a renderer drift.",
+          "**Local pre-commit and pre-push hooks.** `corepack yarn hooks:install` installs simple-git-hooks. Pre-commit catches schema-affecting diffs without paired migration entries and goldens; pre-push runs the adjacent star-case chain test plus all goldens. Hooks are bypass-able by `git commit --no-verify` and `git push --no-verify` — these are git-level escapes that no hook framework can prevent.",
+          "**Maintainer release skills.** `/gdh-dev:release`, `/gdh-dev:migration-verify`, and `/gdh-dev:publish` (Claude) and the Codex/Cursor equivalents now own the end-to-end release flow. `/gdh-dev:migration-verify` is a thin wrapper around `node scripts/release-lib/migration-verify.mjs` and consumes its locked JSON outcome contract.",
+          "**Durable backup.** `bumpAndRebakePin` step 5 writes a directory-level durable backup at `.gdh-state/backup/` via the staged-rename strategy (`.gdh-state/backup.new/` → atomic `fs.rename`). Restore is byte-equal round-trip; user-edit drift is detected by absence of any KNOWN_GDH_MARKERS and persisted in the manifest's `preservation_notes`.",
+          "**Render-inventory orphan sweeping.** `bumpAndRebakePin` writes `.gdh-state/render-inventory.json` after each successful re-bake; the next run computes set-diff against the previous inventory and deletes orphaned managed files. Symlink-safe (`fs.lstat` existence probe + `fs.rm` unlink semantics) and path-traversal-gated.",
+          "**Migration-verifier JSON outcome contract.** `scripts/release-lib/migration-verify.mjs` returns one of `pass | blocked | incomplete` over six conditions (artifacts, registry completeness, release-note/manifest/verification consistency, corpus parity, chain matrix, goldens). Both `/gdh-dev:migration-verify` and `release:apply` consume the same JSON; `release:apply` passes pre-computed chain + goldens evidence so the helper does not double-spawn."
+        ]
+      },
+      "updateContract": {
+        "summary": "Managed targets need release-specific migration for v0.24.0 because five managed-surface version constants bumped and the migration registry now writes the GDHBridge autoload entry into project.godot deterministically. After self-update, run gdh migrate --apply, then validate adapter status, drift, and the deterministic autoload registration.",
+        "steps": [
+          {
+            "id": "self_update_runtime_workflow_package",
+            "kind": "mechanical",
+            "summary": "Install the v0.24.0 GDH package.",
+            "detail": "Run gdh self-update so the new managed surface contract versions and the s3c8_to_s3c9_register_runtime_bridge_autoload registry entry are available to the host.",
+            "commands": [
+              "gdh self-update --apply"
+            ],
+            "validationCommands": [
+              "gdh status"
+            ]
+          },
+          {
+            "id": "rebake_v118_managed_surfaces",
+            "kind": "mechanical",
+            "summary": "Re-bake managed AGENTS.md, guidance, and hook surfaces; register the GDHBridge autoload in project.godot.",
+            "detail": "Run gdh migrate --apply so agent contract version 9 writes the new AGENTS.md contract block, guidance index version 5 and unit version 18 write the refreshed guidance, hook version 6 writes managed hook scripts, and the v1.18 register_autoload op writes the GDHBridge autoload entry into project.godot if it is missing.",
+            "commands": [
+              "gdh migrate --apply"
+            ],
+            "validationCommands": [
+              "gdh adapters status",
+              "gdh verify drift",
+              "gdh status"
+            ]
+          },
+          {
+            "id": "verify_runtime_bridge_autoload_registered",
+            "kind": "agent_reasoning",
+            "summary": "Confirm the GDHBridge autoload is registered deterministically in project.godot.",
+            "detail": "Open project.godot and confirm an `[autoload]` section contains `GDHBridge=\"*res://addons/gdh_bridge/runtime/gdh_runtime_bridge.gd\"`. Pre-v0.24 targets that relied on the manual editor plugin-enable detour pick up the entry automatically during gdh migrate --apply. No editor session is required.",
+            "commands": [
+              "gdh status"
+            ],
+            "validationCommands": [
+              "gdh status",
+              "gdh authoring check --mode final"
+            ]
+          }
+        ]
+      }
     }
   ]
 }

package/node_modules/@gdh/adapters/dist/authoring-hook-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authoring-hook-render.d.ts","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mCAAmC,yCAAyC,CAAC;AAC1F,eAAO,MAAM,kCAAkC,wCAAwC,CAAC;AACxF,eAAO,MAAM,6BAA6B,uRAC4O,CAAC;AACvR,eAAO,MAAM,4BAA4B,qRAC2O,CAAC;AAErR,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;CACpC,GAAG,MAAM,CAmIT"}
+{"version":3,"file":"authoring-hook-render.d.ts","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mCAAmC,yCAAyC,CAAC;AAC1F,eAAO,MAAM,kCAAkC,wCAAwC,CAAC;AACxF,eAAO,MAAM,6BAA6B,uRAC4O,CAAC;AACvR,eAAO,MAAM,4BAA4B,qRAC2O,CAAC;AAErR,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;CACpC,GAAG,MAAM,CAmIT"}

package/node_modules/@gdh/adapters/dist/authoring-hook-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, assertClassRegistered } from "@gdh/core";
+assertClassRegistered("authoring_hook", "deterministic");
 export const CLAUDE_AUTHORING_HOOK_RELATIVE_PATH = ".claude/hooks/gdh-authoring-guard.js";
 export const CODEX_AUTHORING_HOOK_RELATIVE_PATH = ".codex/hooks/gdh-authoring-guard.js";
 export const CLAUDE_AUTHORING_HOOK_COMMAND = "node -e \"const fs=require('fs'),path=require('path');let d=process.cwd();for(;;){const f=path.join(d,'.claude/hooks/gdh-authoring-guard.js');if(fs.existsSync(f)){require(f);break}const p=path.dirname(d);if(p===d)throw new Error('GDH Claude authoring hook not found');d=p}\"";

package/node_modules/@gdh/adapters/dist/authoring-hook-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"authoring-hook-render.js","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,CAAC,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AAC1F,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC;AACxF,MAAM,CAAC,MAAM,6BAA6B,GACxC,oRAAoR,CAAC;AACvR,MAAM,CAAC,MAAM,4BAA4B,GACvC,kRAAkR,CAAC;AAErR,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACC,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,8DAA8D;QAC9D,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG;QAChE,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG;QAC3E,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;QAC/C,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,iDAAiD;QACjD,EAAE;QACF,kEAAkE;QAClE,yBAAyB;QACzB,EAAE;QACF,SAAS;QACT,EAAE;QACF,mBAAmB;QACnB,kCAAkC;QAClC,gDAAgD;QAChD,0DAA0D;QAC1D,8BAA8B;QAC9B,oCAAoC;QACpC,6GAA6G;QAC7G,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,8CAA8C;QAC9C,2DAA2D;QAC3D,gEAAgE;QAChE,+CAA+C;QAC/C,yEAAyE;QACzE,mEAAmE;QACnE,yFAAyF;QACzF,wGAAwG;QACxG,4FAA4F;QAC5F,sFAAsF;QACtF,oJAAoJ;QACpJ,qEAAqE;QACrE,8HAA8H;QAC9H,KAAK;QACL,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,yFAAyF;QACzF,sBAAsB;QACtB,uBAAuB;QACvB,wBAAwB;QACxB,sBAAsB;QACtB,OAAO;QACP,yEAAyE;QACzE,wHAAwH;QACxH,GAAG;QACH,EAAE;QACF,mDAAmD;QACnD,uFAAuF;QACvF,qBAAqB;QACrB,yDAAyD;QACzD,qEAAqE;QACrE,wEAAwE;QACxE,8HAA8H;QAC9H,+FAA+F;QAC/F,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,oEAAoE;QACpE,wDAAwD;QACxD,2DAA2D;QAC3D,0DAA0D;QAC1D,sDAAsD;QACtD,4HAA4H;QAC5H,kHAAkH;QAClH,GAAG;QACH,EAAE;QACF,yCAAyC;QACzC,qBAAqB;QACrB,qEAAqE;QACrE,cAAc;QACd,iFAAiF;QACjF,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,uDAAuD;QACvD,iEAAiE;QACjE,oFAAoF;QACpF,2CAA2C;QAC3C,GAAG;QACH,EAAE;QACF,kEAAkE;QAClE,wEAAwE;QACxE,0DAA0D;QAC1D,kEAAkE;QAClE,2GAA2G;QAC3G,kEAAkE;QAClE,iJAAiJ;QACjJ,4GAA4G;QAC5G,sIAAsI;QACtI,KAAK;QACL,4EAA4E;QAC5E,8CAA8C;QAC9C,GAAG;QACH,yKAAyK;QACzK,yKAAyK;QACzK,EAAE;QACF,4CAA4C;QAC5C,iFAAiF;QACjF,sEAAsE;QACtE,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,qDAAqD;QACrD,uEAAuE;QACvE,qDAAqD;QACrD,iEAAiE;QACjE,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,iFAAiF;QACjF,kHAAkH;QAClH,EAAE;QACF,uCAAuC;QACvC,0BAA0B;QAC1B,kDAAkD;QAClD,oHAAoH;QACpH,0DAA0D;QAC1D,oBAAoB;QACpB,GAAG;QACH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"authoring-hook-render.js","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,qBAAqB,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AAC1F,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC;AACxF,MAAM,CAAC,MAAM,6BAA6B,GACxC,oRAAoR,CAAC;AACvR,MAAM,CAAC,MAAM,4BAA4B,GACvC,kRAAkR,CAAC;AAErR,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACC,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,8DAA8D;QAC9D,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG;QAChE,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG;QAC3E,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;QAC/C,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,iDAAiD;QACjD,EAAE;QACF,kEAAkE;QAClE,yBAAyB;QACzB,EAAE;QACF,SAAS;QACT,EAAE;QACF,mBAAmB;QACnB,kCAAkC;QAClC,gDAAgD;QAChD,0DAA0D;QAC1D,8BAA8B;QAC9B,oCAAoC;QACpC,6GAA6G;QAC7G,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,8CAA8C;QAC9C,2DAA2D;QAC3D,gEAAgE;QAChE,+CAA+C;QAC/C,yEAAyE;QACzE,mEAAmE;QACnE,yFAAyF;QACzF,wGAAwG;QACxG,4FAA4F;QAC5F,sFAAsF;QACtF,oJAAoJ;QACpJ,qEAAqE;QACrE,8HAA8H;QAC9H,KAAK;QACL,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,yFAAyF;QACzF,sBAAsB;QACtB,uBAAuB;QACvB,wBAAwB;QACxB,sBAAsB;QACtB,OAAO;QACP,yEAAyE;QACzE,wHAAwH;QACxH,GAAG;QACH,EAAE;QACF,mDAAmD;QACnD,uFAAuF;QACvF,qBAAqB;QACrB,yDAAyD;QACzD,qEAAqE;QACrE,wEAAwE;QACxE,8HAA8H;QAC9H,+FAA+F;QAC/F,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,oEAAoE;QACpE,wDAAwD;QACxD,2DAA2D;QAC3D,0DAA0D;QAC1D,sDAAsD;QACtD,4HAA4H;QAC5H,kHAAkH;QAClH,GAAG;QACH,EAAE;QACF,yCAAyC;QACzC,qBAAqB;QACrB,qEAAqE;QACrE,cAAc;QACd,iFAAiF;QACjF,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,uDAAuD;QACvD,iEAAiE;QACjE,oFAAoF;QACpF,2CAA2C;QAC3C,GAAG;QACH,EAAE;QACF,kEAAkE;QAClE,wEAAwE;QACxE,0DAA0D;QAC1D,kEAAkE;QAClE,2GAA2G;QAC3G,kEAAkE;QAClE,iJAAiJ;QACjJ,4GAA4G;QAC5G,sIAAsI;QACtI,KAAK;QACL,4EAA4E;QAC5E,8CAA8C;QAC9C,GAAG;QACH,yKAAyK;QACzK,yKAAyK;QACzK,EAAE;QACF,4CAA4C;QAC5C,iFAAiF;QACjF,sEAAsE;QACtE,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,qDAAqD;QACrD,uEAAuE;QACvE,qDAAqD;QACrD,iEAAiE;QACjE,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,iFAAiF;QACjF,kHAAkH;QAClH,EAAE;QACF,uCAAuC;QACvC,0BAA0B;QAC1B,kDAAkD;QAClD,oHAAoH;QACpH,0DAA0D;QAC1D,oBAAoB;QACpB,GAAG;QACH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/claude-statusline-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-statusline-render.d.ts","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oCACT,CAAC;AAEpC;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CA4B5E"}
+{"version":3,"file":"claude-statusline-render.d.ts","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oCACT,CAAC;AAEpC;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CA4B5E"}

package/node_modules/@gdh/adapters/dist/claude-statusline-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, assertClassRegistered } from "@gdh/core";
+assertClassRegistered("claude_statusline", "deterministic");
 /**
  * Relative path of the optional managed Claude statusline renderer script.
  * GDH bakes this file so projects can opt into it manually, but adapter

package/node_modules/@gdh/adapters/dist/claude-statusline-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-statusline-render.js","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iCAAiC,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAuB;IAClE,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gGAAgG;QAChG,wFAAwF;QACxF,qFAAqF;QACrF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,EAAE;QACF,+BAA+B;QAC/B,6EAA6E;QAC7E,EAAE;QACF,qBAAqB;QACrB,iCAAiC;QACjC,SAAS;QACT,mEAAmE;QACnE,2CAA2C;QAC3C,wDAAwD;QACxD,OAAO;QACP,kBAAkB;QAClB,GAAG;QACH,EAAE;QACF,kCAAkC;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"claude-statusline-render.js","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,qBAAqB,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iCAAiC,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAuB;IAClE,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gGAAgG;QAChG,wFAAwF;QACxF,qFAAqF;QACrF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,EAAE;QACF,+BAA+B;QAC/B,6EAA6E;QAC7E,EAAE;QACF,qBAAqB;QACrB,iCAAiC;QACjC,SAAS;QACT,mEAAmE;QACnE,2CAA2C;QAC3C,wDAAwD;QACxD,OAAO;QACP,kBAAkB;QAClB,GAAG;QACH,EAAE;QACF,kCAAkC;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/claude-update-hook-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-hook-render.d.ts","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,sCACd,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,wCAAwC,6CACT,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAwCzE"}
+{"version":3,"file":"claude-update-hook-render.d.ts","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,sCACd,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,wCAAwC,6CACT,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAwCzE"}

package/node_modules/@gdh/adapters/dist/claude-update-hook-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, assertClassRegistered } from "@gdh/core";
+assertClassRegistered("claude_update_hook", "deterministic");
 /**
  * Relative path of the managed Claude SessionStart parent hook script.
  * This is the .js file Claude Code invokes when a session opens on a

package/node_modules/@gdh/adapters/dist/claude-update-hook-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-hook-render.js","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,mCAAmC,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,0CAA0C,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gEAAgE;QAChE,qEAAqE;QACrE,uFAAuF;QACvF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,6CAA6C;QAC7C,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,qHAAqH;QACrH,4EAA4E;QAC5E,EAAE;QACF,iCAAiC;QACjC,yDAAyD;QACzD,+DAA+D;QAC/D,EAAE;QACF,qEAAqE;QACrE,EAAE;QACF,0EAA0E;QAC1E,yDAAyD;QACzD,sBAAsB;QACtB,wBAAwB;QACxB,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,kCAAkC;QAClC,6BAA6B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG;QAC7D,QAAQ;QACR,OAAO;QACP,EAAE;QACF,kBAAkB;QAClB,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"claude-update-hook-render.js","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,qBAAqB,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,mCAAmC,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,0CAA0C,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gEAAgE;QAChE,qEAAqE;QACrE,uFAAuF;QACvF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,6CAA6C;QAC7C,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,qHAAqH;QACrH,4EAA4E;QAC5E,EAAE;QACF,iCAAiC;QACjC,yDAAyD;QACzD,+DAA+D;QAC/D,EAAE;QACF,qEAAqE;QACrE,EAAE;QACF,0EAA0E;QAC1E,yDAAyD;QACzD,sBAAsB;QACtB,wBAAwB;QACxB,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,kCAAkC;QAClC,6BAA6B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG;QAC7D,QAAQ;QACR,OAAO;QACP,EAAE;QACF,kBAAkB;QAClB,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/claude-update-worker-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-worker-render.d.ts","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAsER"}
+{"version":3,"file":"claude-update-worker-render.d.ts","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAsER"}

package/node_modules/@gdh/adapters/dist/claude-update-worker-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION, GDH_UPDATE_REGISTRY_URL, } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, GDH_UPDATE_REGISTRY_URL, assertClassRegistered, } from "@gdh/core";
+assertClassRegistered("claude_update_worker", "deterministic");
 /**
  * Render the background worker source that is spawned (detached + unref) by
  * the SessionStart parent hook. The worker performs the HTTPS probe against

package/node_modules/@gdh/adapters/dist/claude-update-worker-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-worker-render.js","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAuB;IAEvB,wEAAwE;IACxE,0EAA0E;IAC1E,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,mEAAmE;QACnE,0EAA0E;QAC1E,oEAAoE;QACpE,kEAAkE;QAClE,EAAE;QACF,eAAe;QACf,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,wDAAwD;QACxD,oFAAoF;QACpF,0BAA0B;QAC1B,gFAAgF;QAChF,gFAAgF;QAChF,iCAAiC;QACjC,qCAAqC;QACrC,sCAAsC;QACtC,KAAK;QACL,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,+FAA+F;QAC/F,4EAA4E;QAC5E,EAAE;QACF,kDAAkD;QAClD,wBAAwB;QACxB,EAAE;QACF,iDAAiD;QACjD,2BAA2B;QAC3B,EAAE;QACF,mBAAmB;QACnB,SAAS;QACT,yBAAyB,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK;QACrE,2CAA2C;QAC3C,SAAS;QACT,kBAAkB;QAClB,EAAE;QACF,sBAAsB;QACtB,wBAAwB;QACxB,WAAW;QACX,sCAAsC;QACtC,+CAA+C;QAC/C,gCAAgC;QAChC,SAAS;QACT,oBAAoB;QACpB,KAAK;QACL,EAAE;QACF,qEAAqE;QACrE,gCAAgC;QAChC,EAAE;QACF,oBAAoB;QACpB,aAAa;QACb,aAAa;QACb,0CAA0C;QAC1C,oCAAoC;QACpC,+CAA+C;QAC/C,MAAM;QACN,EAAE;QACF,sFAAsF;QACtF,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"claude-update-worker-render.js","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAEnB,qBAAqB,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAuB;IAEvB,wEAAwE;IACxE,0EAA0E;IAC1E,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,mEAAmE;QACnE,0EAA0E;QAC1E,oEAAoE;QACpE,kEAAkE;QAClE,EAAE;QACF,eAAe;QACf,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,wDAAwD;QACxD,oFAAoF;QACpF,0BAA0B;QAC1B,gFAAgF;QAChF,gFAAgF;QAChF,iCAAiC;QACjC,qCAAqC;QACrC,sCAAsC;QACtC,KAAK;QACL,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,+FAA+F;QAC/F,4EAA4E;QAC5E,EAAE;QACF,kDAAkD;QAClD,wBAAwB;QACxB,EAAE;QACF,iDAAiD;QACjD,2BAA2B;QAC3B,EAAE;QACF,mBAAmB;QACnB,SAAS;QACT,yBAAyB,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK;QACrE,2CAA2C;QAC3C,SAAS;QACT,kBAAkB;QAClB,EAAE;QACF,sBAAsB;QACtB,wBAAwB;QACxB,WAAW;QACX,sCAAsC;QACtC,+CAA+C;QAC/C,gCAAgC;QAChC,SAAS;QACT,oBAAoB;QACpB,KAAK;QACL,EAAE;QACF,qEAAqE;QACrE,gCAAgC;QAChC,EAAE;QACF,oBAAoB;QACpB,aAAa;QACb,aAAa;QACb,0CAA0C;QAC1C,oCAAoC;QACpC,+CAA+C;QAC/C,MAAM;QACN,EAAE;QACF,sFAAsF;QACtF,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.d.ts

@@ -0,0 +1,71 @@
+import { type GdhDeferredActionStatus, type GdhEnvelopePendingAdvisory, type GdhHostHarnessIntrospect, type GdhProcessRestartProbe } from "@gdh/core";
+/**
+ * Adapters consumed by {@link computeDeferredActionsAdvisory} (and threaded
+ * through `buildGdhStatusResult`). Both fields default to `null` so unit tests
+ * (which cannot introspect a real host harness) see probe results degrade to
+ * `pending` and the advisory remains correctly gated.
+ */
+export interface GdhStatusBuildAdapters {
+    readonly hostHarnessIntrospect: GdhHostHarnessIntrospect;
+    readonly processProbe: GdhProcessRestartProbe;
+}
+/**
+ * Probed deferred-action entry surfaced through `gdh status`.
+ *
+ * Mirrors the `GdhDeferredAction` shape minus the on-disk-only fields; carries
+ * the live probe result so consumers can rebuild rendering without re-running
+ * the probes.
+ */
+export interface GdhDeferredActionStatusEntry {
+    readonly id: string;
+    readonly description: string;
+    readonly status: GdhDeferredActionStatus;
+    readonly reason?: string;
+}
+/**
+ * Backup-cleanup advisory shape (D-17). Emitted ONLY when:
+ *   1. every probed deferred action returns `clean` (or there are zero), AND
+ *   2. `.gdh-state/backup/` exists (a manifest was readable), AND
+ *   3. `.gdh-state/backup.new/` does NOT exist (no in-progress migration).
+ *
+ * The `command` literal is the verbatim CLI invocation users run.
+ */
+export interface GdhBackupAdvisory {
+    readonly command: "gdh migration clear-backups";
+    readonly reason: "all_deferred_actions_clean";
+    readonly from_pin: string;
+    readonly to_pin: string;
+}
+export interface GdhDeferredActionsAdvisoryResult {
+    readonly deferredActions: readonly GdhDeferredActionStatusEntry[];
+    readonly backupAdvisory: GdhBackupAdvisory | null;
+    /**
+     * Phase 73 D-12: envelope-pending advisory. `null` unless
+     * `migration.json.pending_envelope_resume` is non-null. Mutually exclusive
+     * with {@link GdhBackupAdvisory} — when this is non-null, `backupAdvisory`
+     * is `null` because clearing the durable backup while a chain is paused
+     * destroys the rollback substrate.
+     */
+    readonly envelopeAdvisory: GdhEnvelopePendingAdvisory | null;
+}
+/**
+ * Read `migration.json`, run the probe per deferred action, and decide whether
+ * to emit the backup-cleanup advisory.
+ *
+ * Threat mitigations:
+ * - T-72-05-03 (TOCTOU): re-reads migration.json AND backup state freshly
+ *   inside this function; no cached probe results are consumed across calls.
+ * - T-72-05-04 (malformed migration.json): `readMigrationState` returns null
+ *   on parse/shape failure → `deferredActions` is `[]` and the advisory is
+ *   gated through the standard truth table.
+ * - T-72-05-06 (stale probe → clean): the gate requires `status === "clean"`
+ *   for every probe; `stale` and `pending` both block the advisory.
+ * - T-72-05-07 (interrupted migration): staging-dir check forces the advisory
+ *   to null whenever `.gdh-state/backup.new/` exists.
+ *
+ * Defaults: `adapters.hostHarnessIntrospect = null` and `adapters.processProbe
+ * = null` (every probe degrades to `pending`, so the advisory does not spuriously
+ * fire when a host cannot evaluate the deferred conditions).
+ */
+export declare function computeDeferredActionsAdvisory(targetPath: string, adapters?: GdhStatusBuildAdapters): Promise<GdhDeferredActionsAdvisoryResult>;
+//# sourceMappingURL=deferred-actions-advisory.d.ts.map

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-actions-advisory.d.ts","sourceRoot":"","sources":["../src/deferred-actions-advisory.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC5B,MAAM,WAAW,CAAC;AAOnB;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,qBAAqB,EAAE,wBAAwB,CAAC;IACzD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAClE,QAAQ,CAAC,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClD;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;CAC9D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,sBAAsB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CA0E3C"}

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.js

@@ -0,0 +1,89 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { readMigrationState, runDeferredActionProbe, } from "@gdh/core";
+import { BACKUP_STAGING_RELATIVE_PATH, readBackupManifest, } from "./durable-backup.js";
+/**
+ * Read `migration.json`, run the probe per deferred action, and decide whether
+ * to emit the backup-cleanup advisory.
+ *
+ * Threat mitigations:
+ * - T-72-05-03 (TOCTOU): re-reads migration.json AND backup state freshly
+ *   inside this function; no cached probe results are consumed across calls.
+ * - T-72-05-04 (malformed migration.json): `readMigrationState` returns null
+ *   on parse/shape failure → `deferredActions` is `[]` and the advisory is
+ *   gated through the standard truth table.
+ * - T-72-05-06 (stale probe → clean): the gate requires `status === "clean"`
+ *   for every probe; `stale` and `pending` both block the advisory.
+ * - T-72-05-07 (interrupted migration): staging-dir check forces the advisory
+ *   to null whenever `.gdh-state/backup.new/` exists.
+ *
+ * Defaults: `adapters.hostHarnessIntrospect = null` and `adapters.processProbe
+ * = null` (every probe degrades to `pending`, so the advisory does not spuriously
+ * fire when a host cannot evaluate the deferred conditions).
+ */
+export async function computeDeferredActionsAdvisory(targetPath, adapters) {
+    const hostHarnessIntrospect = adapters?.hostHarnessIntrospect ?? null;
+    const processProbe = adapters?.processProbe ?? null;
+    const migrationState = await readMigrationState(targetPath);
+    const probedActions = [];
+    for (const action of migrationState?.deferred_actions ?? []) {
+        const result = await runDeferredActionProbe(action, {
+            targetPath,
+            hostHarnessIntrospect,
+            processProbe,
+        });
+        const entry = result.reason !== undefined
+            ? {
+                id: action.id,
+                description: action.description,
+                status: result.status,
+                reason: result.reason,
+            }
+            : {
+                id: action.id,
+                description: action.description,
+                status: result.status,
+            };
+        probedActions.push(entry);
+    }
+    // Phase 73 D-12 — envelope-pending fourth gate. The marker is the in-flight
+    // resume substrate (D-11); clearing the durable backup while a chain is
+    // paused mid-bump destroys the rollback substrate. The two advisories are
+    // mutually exclusive: when the envelope marker is set, the backup advisory
+    // MUST be null, regardless of whether the other backup-cleanup gates pass.
+    const pendingEnvelope = migrationState?.pending_envelope_resume ?? null;
+    const noEnvelopePending = pendingEnvelope === null;
+    // Gate evaluation (advisory truth table):
+    //  (a) every probed action is clean (zero is trivially true)
+    //  (b) `.gdh-state/backup/` is present (manifest readable)
+    //  (c) `.gdh-state/backup.new/` is NOT present (no interrupted migration)
+    //  (d) Phase 73 D-12: no envelope is pending (mutually exclusive with
+    //      envelopeAdvisory)
+    const allClean = probedActions.every((a) => a.status === "clean");
+    const manifest = await readBackupManifest(targetPath);
+    const backupExists = manifest !== null;
+    const stagingPath = path.join(targetPath, BACKUP_STAGING_RELATIVE_PATH);
+    const stagingExists = await fs
+        .stat(stagingPath)
+        .then(() => true)
+        .catch(() => false);
+    const noMigrationInProgress = !stagingExists;
+    const backupAdvisory = allClean && backupExists && noMigrationInProgress && noEnvelopePending
+        ? {
+            command: "gdh migration clear-backups",
+            reason: "all_deferred_actions_clean",
+            from_pin: manifest.from_pin,
+            to_pin: manifest.to_pin,
+        }
+        : null;
+    const envelopeAdvisory = pendingEnvelope !== null
+        ? {
+            envelope_ref: pendingEnvelope.envelope_ref,
+            from_pin: pendingEnvelope.from_pin,
+            to_pin: pendingEnvelope.to_pin,
+            command: `gdh migration record-envelope-result ${pendingEnvelope.envelope_ref} --result-file <path>`,
+        }
+        : null;
+    return { deferredActions: probedActions, backupAdvisory, envelopeAdvisory };
+}
+//# sourceMappingURL=deferred-actions-advisory.js.map

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-actions-advisory.js","sourceRoot":"","sources":["../src/deferred-actions-advisory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GAKvB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAuD7B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAAkB,EAClB,QAAiC;IAEjC,MAAM,qBAAqB,GACzB,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAC1C,MAAM,YAAY,GAA2B,QAAQ,EAAE,YAAY,IAAI,IAAI,CAAC;IAE5E,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,aAAa,GAAmC,EAAE,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE;YAClD,UAAU;YACV,qBAAqB;YACrB,YAAY;SACb,CAAC,CAAC;QACH,MAAM,KAAK,GAAiC,MAAM,CAAC,MAAM,KAAK,SAAS;YACrE,CAAC,CAAC;gBACE,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;YACH,CAAC,CAAC;gBACE,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,eAAe,GAAG,cAAc,EAAE,uBAAuB,IAAI,IAAI,CAAC;IACxE,MAAM,iBAAiB,GAAG,eAAe,KAAK,IAAI,CAAC;IAEnD,0CAA0C;IAC1C,6DAA6D;IAC7D,2DAA2D;IAC3D,0EAA0E;IAC1E,sEAAsE;IACtE,yBAAyB;IACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,qBAAqB,GAAG,CAAC,aAAa,CAAC;IAE7C,MAAM,cAAc,GAClB,QAAQ,IAAI,YAAY,IAAI,qBAAqB,IAAI,iBAAiB;QACpE,CAAC,CAAC;YACE,OAAO,EAAE,6BAA6B;YACtC,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,gBAAgB,GACpB,eAAe,KAAK,IAAI;QACtB,CAAC,CAAC;YACE,YAAY,EAAE,eAAe,CAAC,YAAY;YAC1C,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,OAAO,EAAE,wCAAwC,eAAe,CAAC,YAAY,uBAAuB;SACrG;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AAC9E,CAAC"}

package/node_modules/@gdh/adapters/dist/durable-backup.d.ts

@@ -0,0 +1,209 @@
+import { type GdhMigrationVersionPair } from "@gdh/core";
+/**
+ * Workspace-relative directory for the durable update backup.
+ *
+ * Single durable backup per STA-01 / D-14: this directory is overwritten
+ * (rm -rf semantics) on every successful backup write. Multi-backup retention
+ * is explicitly deferred (see 72-CONTEXT.md "Deferred Ideas").
+ */
+export declare const BACKUP_RELATIVE_PATH = ".gdh-state/backup";
+/**
+ * Workspace-relative staging directory used to make the backup write atomic
+ * at the directory level (Pitfall 6 / T-72-04-03). The staged tree is built
+ * here, then renamed onto BACKUP_RELATIVE_PATH so the prior backup is never
+ * absent from disk between rm-rf and write.
+ */
+export declare const BACKUP_STAGING_RELATIVE_PATH = ".gdh-state/backup.new";
+/** Workspace-relative path to the per-backup manifest. */
+export declare const BACKUP_MANIFEST_RELATIVE_PATH = ".gdh-state/backup/manifest.json";
+export type GdhBackupPreservationReason = "class_1_backup_then_overwrite";
+export type GdhBackupMarkerState = "absent" | "present" | "not_applicable";
+/**
+ * WFL-02 / D-24 preservation note attached to the backup manifest. Emitted
+ * when a class-1 file's GDH ownership marker is absent (user-edited drift)
+ * and the file is captured into the backup BEFORE re-rendering.
+ */
+export interface GdhBackupPreservationNote {
+    readonly path: string;
+    readonly reason: GdhBackupPreservationReason;
+    readonly marker_state: GdhBackupMarkerState;
+}
+/**
+ * Per-path capture entry recorded in the backup manifest. `existed: false`
+ * matches the legacy in-memory rollbackOriginals null-content semantics: the
+ * file did not exist pre-update, so restore must `rm` the original path.
+ */
+export interface GdhBackupCapturedPath {
+    readonly path: string;
+    readonly existed: boolean;
+}
+/**
+ * Backup manifest schema (D-13). Version-locked at 1; readers reject any
+ * other backup_version with `null` (degraded fallback) so a future schema
+ * bump does not silently corrupt restore.
+ */
+export interface GdhBackupManifest {
+    readonly backup_version: 1;
+    readonly applied_at: string;
+    readonly from_pair: GdhMigrationVersionPair;
+    readonly to_pair: GdhMigrationVersionPair;
+    readonly from_pin: string;
+    readonly to_pin: string;
+    readonly captured_paths: readonly GdhBackupCapturedPath[];
+    readonly preservation_notes: readonly GdhBackupPreservationNote[];
+}
+export interface GdhWriteDurableBackupInput {
+    readonly targetPath: string;
+    readonly fromPair: GdhMigrationVersionPair;
+    readonly toPair: GdhMigrationVersionPair;
+    readonly fromPin: string;
+    readonly toPin: string;
+    /** Workspace-relative POSIX paths to capture (planned action paths + .gdh/project.yaml). */
+    readonly plannedPaths: readonly string[];
+    /** WFL-02 preservation notes attached to the manifest. */
+    readonly preservationNotes?: readonly GdhBackupPreservationNote[];
+    /** Optional clock for tests; defaults to () => new Date().toISOString(). */
+    readonly nowIso?: () => string;
+}
+export interface GdhWriteDurableBackupSkipped {
+    readonly path: string;
+    readonly reason: "path_traversal_blocked";
+}
+export type GdhWriteDurableBackupResult = {
+    readonly state: "written";
+    readonly backupPath: string;
+    readonly manifest: GdhBackupManifest;
+    readonly skipped: readonly GdhWriteDurableBackupSkipped[];
+} | {
+    readonly state: "skipped_no_planned_paths";
+};
+/**
+ * Write a single durable backup at .gdh-state/backup/ (STA-01 / D-13 / D-14).
+ *
+ * Staged-write strategy (T-72-04-03 mitigation, Pitfall 6):
+ *   1. Pre-clean .gdh-state/backup.new/ from any prior interrupted run.
+ *   2. Capture every plannedPaths entry into .gdh-state/backup.new/, mirroring
+ *      the workspace-relative directory structure. Missing files are recorded
+ *      in the manifest with existed: false but no file is written.
+ *   3. Write manifest.json into the staging directory via writeFileAtomic.
+ *   4. Remove the prior .gdh-state/backup/ (if any) and rename the staging
+ *      directory onto it.
+ *
+ * If interrupted between steps 2 and 4, the prior .gdh-state/backup/ is
+ * unchanged and the next call's pre-clean (step 1) removes the partial
+ * staging tree before it can corrupt anything.
+ *
+ * Path-traversal candidates (failing isWorkspaceRelativePath) are recorded
+ * in `skipped` with `path_traversal_blocked` and never written or captured.
+ */
+export declare function writeDurableBackup(input: GdhWriteDurableBackupInput): Promise<GdhWriteDurableBackupResult>;
+/**
+ * Read the backup manifest from .gdh-state/backup/manifest.json.
+ *
+ * Returns null on any failure (missing file, JSON parse error, schema
+ * mismatch). Never throws — degraded fallback so callers can branch on
+ * "no backup present" without try/catch ceremony, and so a corrupted
+ * manifest cannot trigger a partial restore (T-72-04-06).
+ */
+export declare function readBackupManifest(targetPath: string): Promise<GdhBackupManifest | null>;
+export type GdhRestoreFromDurableBackupResult = {
+    readonly state: "restored";
+    readonly restored: readonly string[];
+    readonly removed: readonly string[];
+    readonly skipped: readonly {
+        readonly path: string;
+        readonly reason: string;
+    }[];
+    /**
+     * WR-06: Count of captured_paths entries that failed to restore (i.e.,
+     * the length of `skipped`). Surfaced as a top-level field so callers
+     * can branch on actual restoration success without re-scanning the
+     * `skipped` array. When `restored.length === 0 && removed.length === 0
+     * && failedCount > 0`, the rollback is effectively a NO-RESTORE: every
+     * captured path failed (e.g., disk full, EROFS, EACCES) and the
+     * caller should NOT report this as a clean rollback. Pre-existing
+     * "best-effort" semantics are preserved (the function still returns
+     * \`state: "restored"\` to keep the discriminated-union contract
+     * stable for existing callers); the new field is additive.
+     */
+    readonly failedCount: number;
+} | {
+    readonly state: "no_backup_present";
+};
+/**
+ * Restore byte-equal content for every captured_paths entry in the backup
+ * manifest. Mirrors the legacy in-memory rollbackOriginals semantics:
+ *
+ *   - existed: true  → atomic-write the backup content over the original path
+ *   - existed: false → fs.rm the original path (file did not exist pre-update)
+ *
+ * The backup directory itself is read-only during restore (T-72-04 contract):
+ * each restore is a fresh copy from .gdh-state/backup/, so running restore
+ * twice produces the same final state.
+ *
+ * Path-traversal candidates in captured_paths are skipped with a structured
+ * warning (T-72-04-01); the rest of the restore still completes. If the
+ * backup content for an existed:true entry is missing on disk, that entry
+ * is skipped with reason "backup_content_missing" rather than aborting.
+ */
+export declare function restoreFromDurableBackup(input: {
+    readonly targetPath: string;
+}): Promise<GdhRestoreFromDurableBackupResult>;
+export interface GdhClass1MarkerDriftInput {
+    readonly targetPath: string;
+    /**
+     * Workspace-relative POSIX paths of class-1 (deterministic) managed files
+     * that the planned action set will re-render.
+     */
+    readonly plannedClass1Paths: readonly string[];
+    /**
+     * Optional per-path expected markers. Overrides KNOWN_GDH_MARKERS for
+     * files whose format ships its own marker convention. Use for class-1
+     * file types not covered by the default list (rare).
+     */
+    readonly expectedMarkersByPath?: ReadonlyMap<string, readonly string[]>;
+}
+export interface GdhClass1MarkerDriftEntry {
+    readonly path: string;
+    readonly markerState: GdhBackupMarkerState;
+}
+export interface GdhClass1MarkerDriftResult {
+    readonly driftedPaths: readonly GdhClass1MarkerDriftEntry[];
+    readonly absentPaths: readonly string[];
+    readonly skipped: readonly {
+        readonly path: string;
+        readonly reason: string;
+    }[];
+}
+/**
+ * Detect WFL-02 / D-24 class-1 marker drift.
+ *
+ * For each `plannedClass1Paths` entry that exists on disk, check whether the
+ * file contains any of its expected GDH ownership markers:
+ *   - Marker present → file is GDH-rendered; no drift; not flagged.
+ *   - Marker absent (but file exists) → user-edited drift; flagged with
+ *     marker_state: "absent".
+ *   - Per-path override supplied but no marker matches → conservative
+ *     marker_state: "not_applicable" + flagged as drifted (T-72-04-07: err on
+ *     the side of preservation when the marker convention is uncertain).
+ *   - File does not exist on disk → no drift; reported in absentPaths so
+ *     the caller knows the file will be rendered fresh (no preservation).
+ *
+ * Path-traversal candidates (failing isWorkspaceRelativePath) are skipped
+ * with structured warnings (T-72-04-01); never read.
+ *
+ * Pair the result with `driftResultToPreservationNotes` to produce the
+ * preservation-notes payload for `writeDurableBackup`.
+ */
+export declare function detectClass1MarkerDrift(input: GdhClass1MarkerDriftInput): Promise<GdhClass1MarkerDriftResult>;
+/**
+ * Convert a drift-detection result into preservation notes ready to attach
+ * to a `writeDurableBackup` call.
+ *
+ * Per D-24, every drifted path is preserved with reason
+ * `class_1_backup_then_overwrite`; the marker_state propagates from the
+ * drift entry so the manifest carries an audit trail of the detection
+ * outcome (absent vs not_applicable).
+ */
+export declare function driftResultToPreservationNotes(drift: GdhClass1MarkerDriftResult): readonly GdhBackupPreservationNote[];
+//# sourceMappingURL=durable-backup.d.ts.map

package/node_modules/@gdh/adapters/dist/durable-backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-backup.d.ts","sourceRoot":"","sources":["../src/durable-backup.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,WAAW,CAAC;AAEnB;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AACxD;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AACpE,0DAA0D;AAC1D,eAAO,MAAM,6BAA6B,oCAAoC,CAAC;AAE/E,MAAM,MAAM,2BAA2B,GAAG,+BAA+B,CAAC;AAC1E,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC1D,QAAQ,CAAC,kBAAkB,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACnE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAClE,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,MAAM,2BAA2B,GACnC;IACE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC3D,GACD;IAAE,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAA;CAAE,CAAC;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAsEtC;AAqDD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAWnC;AAED,MAAM,MAAM,iCAAiC,GACzC;IACE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,EAAE,CAAC;IACJ;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GACD;IAAE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE5C;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAqE7C;AA0BD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAgCrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,0BAA0B,GAChC,SAAS,yBAAyB,EAAE,CAMtC"}