@spikedpunch/align-agent 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 align contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,83 @@
+# @spikedpunch/align-agent
+
+The Stage 4 BYOK (bring-your-own-key) LLM fix loop (ADR 010, `IMPLEMENTATION_PLAN.md` Stage 4).
+Depends only on `@spikedpunch/align-core` and `@anthropic-ai/sdk`; never imports `@spikedpunch/align-plugin-typescript` or
+`@spikedpunch/align-cli` (enforced by align's own dogfooded `align.config.ts` layering rule). `@spikedpunch/align-cli` is
+the composition root that wires the real `TypeScriptPlugin` scanner, `node:fs`, and `git`/`gh`
+into this package's `AgentEffects` interface (see `packages/cli/src/commands/agent.ts`).
+
+## Safety bound — read before running against a real repo
+
+**Behavioral safety is bounded by the target repo's own test suite.** No gate in align (or in this
+agent) verifies *behavior* — only form (parses, doesn't create a forbidden dependency, doesn't
+introduce a cycle). An LLM can satisfy every form gate by making code do less: the cleanest way to
+remove a forbidden import is often to delete the import *and* the feature that used it. This
+agent's guards reduce that risk but do not eliminate it:
+
+- **Exported-symbol surface diff** flags (and by default refuses to commit) any fix that deletes an
+  exported symbol, requiring explicit `--allow-symbol-removals` consent.
+- **Zero-coverage refusal** declines to propose a fix for a file with no detected test coverage
+  unless `--allow-untested` is passed. The v1 heuristic is **reachability, not real coverage**: a
+  file is "covered" if any scanned test file (`**/*.{test,spec}.*`) imports it directly or
+  transitively in the dependency graph. A test that imports a module but never exercises the
+  specific lines being changed still counts as "covered" — this catches the worst case (nothing
+  tests this file at all) cheaply, at the cost of false confidence on partially-exercised code.
+
+Neither guard is a substitute for a real test suite. If the target repo has weak or no tests, the
+agent's fixes carry the same behavioral risk any unreviewed automated edit would. Review the diff
+(or the draft PR, which is the default terminal-merge mode) before merging to a protected branch.
+
+## Suppressions — dormant machinery
+
+`FixProposal.suppressions` is accepted and zod-validated per ADR 010 (the schema is shared with the
+future tool-wrapping gate stack), but **arch-first v1 has no lint gates** — there is no rule
+category a suppression could legitimately silence yet. Any proposal that *uses* `suppressions` is
+rejected with "no suppressible rule categories active" (`rails.ts::usesSuppressions`, enforced in
+`run.ts`). This is tested as dormant machinery (`test/run.test.ts`), not wired to any live
+suppress-and-commit path — it exists now so the schema doesn't need a breaking change when
+tool-wrapping gates (Stage 5) activate it.
+
+## Design notes / deviations
+
+- **Apply pipeline lives in `@spikedpunch/align-core/fix`, not here** — per ADR 010 ("the LLM proposes, the
+  engine applies... this pipeline is entirely engine-side... it introduces no dependency from
+  `@spikedpunch/align-core` on any LLM client"). `FixProposal`/`EditBlock` zod schemas and the deterministic
+  byte-offset apply algorithm are pure data/algorithm with zero LLM awareness, so they belong in
+  core alongside every other IR core validates — `@spikedpunch/align-agent` only supplies the `FixProvider`
+  that produces a `FixProposal` and the effects shell that applies one.
+- **`condensedSymbolTable` is component-scoped**, not repo-wide or import-graph-reachability-scoped
+  — a repo-wide symbol table would blow the token budget on any non-trivial repo; component scope
+  is the cheapest reasonable proxy for "files the target may plausibly import" (`symbolTable.ts`).
+- **VERIFY and the terminal merge both run a FULL, non-scoped `align check`** — v1 does not
+  impact-scope verification inside the loop (impact scoping is Design Reserve). This is simpler and
+  matches ADR 005's freshness doctrine at the cost of a full rescan per REPAIR attempt; acceptable
+  given the measured ~1.4s full-rescan cost on the target repo class (`spike/SPIKE_REPORT.md`).
+  Impact-scoped in-loop VERIFY is a future promotion candidate if REPAIR-heavy runs measure slow.
+- **Model default is `claude-sonnet-5`**, not the `claude-api` skill's general-purpose
+  `claude-opus-4-8` default — an explicit deviation directed by the Stage 4 task brief: a
+  background fix loop that may issue many PLAN+FIX calls per run is exactly the
+  cost-sensitive/high-volume workload Sonnet-tier targets. Override via `--model` or
+  `ALIGN_AGENT_MODEL`.
+- **No fuzzy/whitespace-normalized apply fallback** (Design Reserve, ADR 010) — exact match +
+  `nearLine` disambiguation only, in `@spikedpunch/align-core/fix`.
+
+## `align agent run`
+
+```
+align agent run [--max-attempts N] [--pr|--auto-merge] [--allow-untested] \
+                 [--allow-symbol-removals] [--model <id>] [--dry-run]
+```
+
+Requires `ANTHROPIC_API_KEY` in the environment (or any credential source the Anthropic SDK
+resolves automatically — see the `claude-api` skill). `--dry-run` runs DISCOVER+GROUP+PLAN only and
+prints proposed edits without applying or committing anything — a cheap smoke test that still calls
+the real model.
+
+## Testing
+
+Every test in this package runs with no network access. `FakeFixProvider` (`test/fakeFixProvider.ts`)
+scripts deterministic responses per file; `test/fakeEffects.ts` provides an in-memory `AgentEffects`
+(including a git-revert-accurate undo log) for state-machine tests; `test/e2e-git.test.ts` exercises
+the real `git`/`gh` shell-out effects against a temp repo. One optional live-API smoke test
+(`test/live-smoke.test.ts`) runs only when `ALIGN_LIVE_SMOKE=1` and `ANTHROPIC_API_KEY` are both
+set — it skips (not fails) otherwise, and is never depended on by CI.

package/dist/anthropicFixProvider.d.ts

@@ -0,0 +1,33 @@
+import { type FixProposal } from '@spikedpunch/align-core';
+import type { FixProvider, FixProviderInput } from './fixProvider.js';
+export declare const DEFAULT_MODEL = "claude-sonnet-5";
+export interface AnthropicFixProviderOptions {
+    /** Falls back to the SDK's own credential resolution (env/profile) when omitted — never log it. */
+    readonly apiKey?: string;
+    readonly model?: string;
+    readonly maxTokens?: number;
+    readonly schemaRetries?: number;
+}
+/** Telemetry's `agent` event usage field (IMPLEMENTATION_PLAN.md's telemetry spec, closing the
+ * Kimi-flagged observability gap): "capture whatever `@anthropic-ai/sdk` returns in
+ * `response.usage`; if absent, omit the field, don't fabricate." */
+export interface AnthropicUsageTotals {
+    readonly inputTokens: number;
+    readonly outputTokens: number;
+}
+export declare class AnthropicFixProvider implements FixProvider {
+    private readonly client;
+    private readonly model;
+    private readonly maxTokens;
+    private readonly schemaRetries;
+    private usageTotals;
+    constructor(options?: AnthropicFixProviderOptions);
+    /** Accumulated `input_tokens`/`output_tokens` across every real API call this instance made
+     * (schema-retry attempts included — a retry is still real spend). Read by
+     * `packages/cli/src/commands/agent.ts` after `runAgentLoop` completes to populate the `agent`
+     * telemetry event's optional `usage` field. */
+    getUsageTotals(): AnthropicUsageTotals | undefined;
+    private accumulateUsage;
+    proposeFix(input: FixProviderInput): Promise<FixProposal>;
+}
+//# sourceMappingURL=anthropicFixProvider.d.ts.map

package/dist/anthropicFixProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropicFixProvider.d.ts","sourceRoot":"","sources":["../src/anthropicFixProvider.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtE,eAAO,MAAM,aAAa,oBAAoB,CAAC;AA4C/C,MAAM,WAAW,2BAA2B;IAC1C,mGAAmG;IACnG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;oEAEoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAyDD,qBAAa,oBAAqB,YAAW,WAAW;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAKvC,OAAO,CAAC,WAAW,CAA4D;gBAEnE,OAAO,GAAE,2BAAgC;IAOrD;;;mDAG+C;IAC/C,cAAc,IAAI,oBAAoB,GAAG,SAAS;IAIlD,OAAO,CAAC,eAAe;IAQjB,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;CAqChE"}

package/dist/anthropicFixProvider.js

@@ -0,0 +1,157 @@
+/**
+ * The one real `FixProvider` implementation — raw Anthropic API tool-use, per the plan's "Inner
+ * PLAN+FIX: raw Anthropic API pure function (zod-constrained tool-use, memoizable), not a nested
+ * agent." Never imported by the state machine directly (`fixProvider.ts`'s interface is the only
+ * thing `run.ts` depends on) — this file is the sole place `@anthropic-ai/sdk` is imported.
+ *
+ * Model default per the `claude-api` skill reference, per explicit task instruction to default to
+ * the latest Sonnet-class model id (not the skill's general-purpose Opus default) — a background
+ * fix loop that may run many PLAN+FIX calls per session is exactly the cost-sensitive, high-volume
+ * workload Sonnet-tier is for. Config/env-selectable (`ALIGN_AGENT_MODEL` / `--model`).
+ */
+import Anthropic from '@anthropic-ai/sdk';
+import { fixProposalSchema } from '@spikedpunch/align-core';
+export const DEFAULT_MODEL = 'claude-sonnet-5';
+const DEFAULT_MAX_TOKENS = 16000;
+const DEFAULT_SCHEMA_RETRIES = 2;
+const TOOL_NAME = 'propose_fix';
+const EDIT_BLOCK_JSON_SCHEMA = {
+    type: 'object',
+    properties: {
+        search: {
+            type: 'string',
+            description: 'Exact, continuous block present in the file — literal, character-for-character match including whitespace/indentation/newlines. Include 1-2 lines of untouched context above/below for uniqueness.',
+        },
+        replace: { type: 'string', description: 'Replacement text. Empty string means deletion.' },
+        nearLine: {
+            type: 'integer',
+            description: 'Approximate 1-based line number, used ONLY to disambiguate if `search` matches more than once. Never affects file content.',
+        },
+        forViolations: { type: 'array', items: { type: 'string' }, description: 'Violation ids this edit addresses.' },
+    },
+    required: ['search', 'replace'],
+};
+const FIX_PROPOSAL_JSON_SCHEMA = {
+    type: 'object',
+    properties: {
+        files: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string', description: 'Repo-relative path, exactly as given in the violation payload.' },
+                    edits: { type: 'array', items: EDIT_BLOCK_JSON_SCHEMA, minItems: 1 },
+                },
+                required: ['path', 'edits'],
+            },
+            minItems: 1,
+        },
+        rationale: { type: 'string', description: 'Short explanation — becomes the git commit body.' },
+    },
+    required: ['files', 'rationale'],
+};
+function renderInputPrompt(input, correction) {
+    const parts = [];
+    parts.push('You are fixing architecture-conformance violations in a TypeScript monorepo. Respond ONLY by ' +
+        `calling the \`${TOOL_NAME}\` tool with a FixProposal. Adhere strictly to the schema: emit only ` +
+        'the precise chunks requiring modification (search/replace edit blocks, never full files, never ' +
+        'line-number diffs); `search` must match the file exactly including whitespace/indentation/' +
+        'newlines; include 1-2 lines of untouched context above/below each block for uniqueness. Do not ' +
+        'use the `suppressions` field — no suppressible rule categories are active in this repo.');
+    parts.push('\n## Rule explanations\n');
+    for (const exp of input.ruleExplanations) {
+        parts.push(`- ${exp.ruleId} (${exp.kind})${exp.because ? `: ${exp.because}` : ''}`);
+    }
+    parts.push('\n## Violations\n');
+    for (const v of input.violations) {
+        parts.push(`- id=${v.id} rule=${v.ruleId} kind=${v.kind} ${v.file}:${v.range.startLine}-${v.range.endLine}\n  snippet: ${v.snippet}`);
+    }
+    parts.push('\n## Current file contents\n');
+    for (const [path, content] of input.fileContents) {
+        parts.push(`### ${path}\n\`\`\`\n${content}\n\`\`\``);
+    }
+    if (input.condensedSymbolTable.length > 0) {
+        parts.push('\n## Importable symbols (files this target may import)\n');
+        for (const entry of input.condensedSymbolTable) {
+            parts.push(`- ${entry.file}: ${entry.exports.join(', ')}`);
+        }
+        parts.push('Only reference symbols that exist above — do not invent imports.');
+    }
+    if (input.previousFailure !== undefined) {
+        parts.push(`\n## Previous attempt failed to apply\n`);
+        parts.push(`reason: ${input.previousFailure.reason}`);
+        if (input.previousFailure.nearestCandidate !== undefined) {
+            parts.push(`Nearest candidate region (line numbers for your reference only — do NOT include them in \`search\`):\n${input.previousFailure.nearestCandidate.linesWithContext}`);
+        }
+        parts.push('Re-anchor your `search` block to match the file exactly, character-for-character.');
+    }
+    if (correction !== undefined) {
+        parts.push(`\n## Your previous response was invalid\n${correction}\nRetry, adhering strictly to the schema.`);
+    }
+    return parts.join('\n');
+}
+export class AnthropicFixProvider {
+    client;
+    model;
+    maxTokens;
+    schemaRetries;
+    // `undefined` until the first response actually surfaces `usage` — telemetry's `agent.usage`
+    // field must be omittable, never a fabricated `{ inputTokens: 0, outputTokens: 0 }` for a
+    // provider instance that was never actually called (e.g. `nothing-to-fix`, ADR-consistent with
+    // every other "if absent, omit" field in this codebase).
+    usageTotals;
+    constructor(options = {}) {
+        this.client = options.apiKey !== undefined ? new Anthropic({ apiKey: options.apiKey }) : new Anthropic();
+        this.model = options.model ?? process.env['ALIGN_AGENT_MODEL'] ?? DEFAULT_MODEL;
+        this.maxTokens = options.maxTokens ?? DEFAULT_MAX_TOKENS;
+        this.schemaRetries = options.schemaRetries ?? DEFAULT_SCHEMA_RETRIES;
+    }
+    /** Accumulated `input_tokens`/`output_tokens` across every real API call this instance made
+     * (schema-retry attempts included — a retry is still real spend). Read by
+     * `packages/cli/src/commands/agent.ts` after `runAgentLoop` completes to populate the `agent`
+     * telemetry event's optional `usage` field. */
+    getUsageTotals() {
+        return this.usageTotals;
+    }
+    accumulateUsage(usage) {
+        if (usage === undefined)
+            return;
+        const inputTokens = typeof usage.input_tokens === 'number' ? usage.input_tokens : 0;
+        const outputTokens = typeof usage.output_tokens === 'number' ? usage.output_tokens : 0;
+        const previous = this.usageTotals ?? { inputTokens: 0, outputTokens: 0 };
+        this.usageTotals = { inputTokens: previous.inputTokens + inputTokens, outputTokens: previous.outputTokens + outputTokens };
+    }
+    async proposeFix(input) {
+        let correction;
+        for (let attempt = 0; attempt <= this.schemaRetries; attempt++) {
+            const message = await this.client.messages.create({
+                model: this.model,
+                max_tokens: this.maxTokens,
+                tools: [
+                    {
+                        name: TOOL_NAME,
+                        description: 'Propose a search/replace edit-block fix for the given violations.',
+                        input_schema: FIX_PROPOSAL_JSON_SCHEMA,
+                    },
+                ],
+                tool_choice: { type: 'tool', name: TOOL_NAME },
+                messages: [{ role: 'user', content: renderInputPrompt(input, correction) }],
+            });
+            this.accumulateUsage(message.usage);
+            if (message.stop_reason === 'refusal') {
+                throw new Error('AnthropicFixProvider: model refused the request');
+            }
+            const toolUse = message.content.find((block) => block.type === 'tool_use' && block.name === TOOL_NAME);
+            if (toolUse === undefined || toolUse.type !== 'tool_use') {
+                correction = 'No tool call was returned. You must call the tool with a valid FixProposal.';
+                continue;
+            }
+            const parsed = fixProposalSchema.safeParse(toolUse.input);
+            if (parsed.success)
+                return parsed.data;
+            correction = `Schema validation failed: ${parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')}`;
+        }
+        throw new Error(`AnthropicFixProvider: exceeded ${this.schemaRetries} schema-mismatch retries`);
+    }
+}
+//# sourceMappingURL=anthropicFixProvider.js.map

package/dist/anthropicFixProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropicFixProvider.js","sourceRoot":"","sources":["../src/anthropicFixProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAoB,MAAM,yBAAyB,CAAC;AAG9E,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,SAAS,GAAG,aAAa,CAAC;AAEhC,MAAM,sBAAsB,GAAG;IAC7B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,oMAAoM;SACvM;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;QAC1F,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,4HAA4H;SAC1I;QACD,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;KAC/G;IACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;CACvB,CAAC;AAEX,MAAM,wBAAwB,GAAG;IAC/B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gEAAgE,EAAE;oBACvG,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACrE;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;aAC5B;YACD,QAAQ,EAAE,CAAC;SACZ;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;KAC/F;IACD,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;CACxB,CAAC;AAkBX,SAAS,iBAAiB,CAAC,KAAuB,EAAE,UAAmB;IACrE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CACR,+FAA+F;QAC7F,iBAAiB,SAAS,uEAAuE;QACjG,iGAAiG;QACjG,4FAA4F;QAC5F,iGAAiG;QACjG,yFAAyF,CAC5F,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAC1H,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,aAAa,OAAO,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACvE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,eAAe,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CACR,yGAAyG,KAAK,CAAC,eAAe,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CACnK,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,4CAA4C,UAAU,2CAA2C,CAAC,CAAC;IAChH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAY;IAClB,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,aAAa,CAAS;IACvC,6FAA6F;IAC7F,0FAA0F;IAC1F,+FAA+F;IAC/F,yDAAyD;IACjD,WAAW,CAA4D;IAE/E,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QACzG,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,aAAa,CAAC;QAChF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACvE,CAAC;IAED;;;mDAG+C;IAC/C,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,eAAe,CAAC,KAA2C;QACjE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,WAAW,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,GAAG,YAAY,EAAE,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAuB;QACtC,IAAI,UAA8B,CAAC;QAEnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAChD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,mEAAmE;wBAChF,YAAY,EAAE,wBAAiE;qBAChF;iBACF;gBACD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;aAC5E,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAEpC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YACvG,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACzD,UAAU,GAAG,6EAA6E,CAAC;gBAC3F,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC;YAEvC,UAAU,GAAG,6BAA6B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7H,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,aAAa,0BAA0B,CAAC,CAAC;IAClG,CAAC;CACF"}

package/dist/coverage.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Zero-coverage refusal heuristic (green≠correct guard (b), IMPLEMENTATION_PLAN.md Stage 4).
+ *
+ * v1 heuristic, stated honestly: a file is "covered" if any scanned test file (matching
+ * `**\/*.{test,spec}.*`) imports it directly or transitively within the graph — computable from
+ * the `DependencyGraph` the orchestrator already builds, no separate coverage-instrumentation
+ * tool. This is a REACHABILITY proxy, not real coverage: a test file that imports a module but
+ * never exercises the specific lines being changed still counts as "covered." It catches the
+ * worst case (a file literally nothing imports from a test) cheaply, at the cost of false
+ * confidence on files with imported-but-unexercised code. Documented in the agent package README
+ * per the plan's requirement to state this plainly.
+ */
+import type { DependencyGraph, RepoRelativePath } from '@spikedpunch/align-core';
+export declare function isFileCovered(target: RepoRelativePath, graph: DependencyGraph, testFilePattern?: RegExp): boolean;
+//# sourceMappingURL=coverage.d.ts.map

package/dist/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAIjF,wBAAgB,aAAa,CAC3B,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,eAAe,EACtB,eAAe,GAAE,MAAkC,GAClD,OAAO,CAsBT"}

package/dist/coverage.js

@@ -0,0 +1,28 @@
+const DEFAULT_TEST_FILE_PATTERN = /\.(test|spec)\./;
+export function isFileCovered(target, graph, testFilePattern = DEFAULT_TEST_FILE_PATTERN) {
+    const testFiles = graph.nodes.filter((n) => testFilePattern.test(n.file)).map((n) => n.file);
+    if (testFiles.length === 0)
+        return false;
+    const adjacency = new Map();
+    for (const edge of graph.edges) {
+        const list = adjacency.get(edge.from) ?? [];
+        list.push(edge.to);
+        adjacency.set(edge.from, list);
+    }
+    const visited = new Set();
+    const stack = [...testFiles];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        if (current === undefined)
+            break;
+        if (current === target)
+            return true;
+        if (visited.has(current))
+            continue;
+        visited.add(current);
+        for (const next of adjacency.get(current) ?? [])
+            stack.push(next);
+    }
+    return false;
+}
+//# sourceMappingURL=coverage.js.map

package/dist/coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAcA,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,UAAU,aAAa,CAC3B,MAAwB,EACxB,KAAsB,EACtB,kBAA0B,yBAAyB;IAEnD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAa,CAAC,GAAG,SAAS,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM;QACjC,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/effects.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Injected effects — the imperative shell the state machine (`run.ts`) is built against. Every
+ * side effect (fs, git, `align check`, formatting) is an interface here so the state machine can
+ * be driven end-to-end by a fake in tests, per CODING_BEST_PRACTICES.md §15 ("if you're reaching
+ * for module mocking, the dependency wasn't injected").
+ */
+import type { CheckRun, DependencyGraph, RepoRelativePath } from '@spikedpunch/align-core';
+import type { FixProvider } from './fixProvider.js';
+export interface GitCommitResult {
+    readonly sha: string;
+}
+export type RebaseResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly conflict: true;
+};
+export type PushResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly reason: 'no-remote' | 'push-failed';
+};
+export type PrResult = {
+    readonly ok: true;
+    readonly url: string;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+/** All git operations the agent needs — a thin, testable seam over the real `git`/`gh` binaries. */
+export interface GitEffects {
+    isWorktreeClean(): Promise<boolean>;
+    currentBranch(): Promise<string>;
+    createBranch(name: string): Promise<void>;
+    /** Stages exactly `paths` and commits. Returns the new commit sha. */
+    commit(message: string, paths: readonly RepoRelativePath[]): Promise<GitCommitResult>;
+    /** Hard-reverts the working tree to the state before `sha` (used by REPAIR). */
+    revertCommit(sha: string): Promise<void>;
+    /** Rebases the current branch onto `ontoBranch`. Never auto-resolves conflicts. */
+    rebaseOnto(ontoBranch: string): Promise<RebaseResult>;
+    push(branch: string): Promise<PushResult>;
+    /** Requires `gh` on PATH and a remote; returns `ok:false` (never throws) when either is absent. */
+    createDraftPr(params: {
+        readonly branch: string;
+        readonly base: string;
+        readonly title: string;
+        readonly body: string;
+    }): Promise<PrResult>;
+    ffMergeAndDeleteBranch(branch: string, base: string): Promise<void>;
+}
+export interface AgentEffects {
+    readonly fixProvider: FixProvider;
+    /** Fresh, FULL `align check` — no scoping (DISCOVER and the terminal-merge verify both use this;
+     * VERIFY inside the loop uses it too — v1 keeps verification uniformly full-scope, matching
+     * ADR 005's "the oracle never answers from state older than the code it judges" doctrine and
+     * sidestepping impact-scoping, which is Design Reserve). */
+    readonly runCheck: () => Promise<CheckRun>;
+    /** Fresh full dependency-graph scan (for condensedSymbolTable, coverage heuristic, symbol diff). */
+    readonly scanGraph: () => Promise<DependencyGraph>;
+    readonly readFile: (path: RepoRelativePath) => Promise<string>;
+    readonly writeFile: (path: RepoRelativePath, content: string) => Promise<void>;
+    /** Mechanical post-format: runs the target repo's own prettier on `paths` if the target repo
+     * exposes one (checked via its own package.json/devDependencies); skips silently otherwise. */
+    readonly formatIfAvailable: (paths: readonly RepoRelativePath[]) => Promise<void>;
+    readonly git: GitEffects;
+    readonly now: () => number;
+}
+//# sourceMappingURL=effects.d.ts.map

package/dist/effects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effects.d.ts","sourceRoot":"","sources":["../src/effects.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,CAAA;CAAE,CAAC;AAEtH,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErH,oGAAoG;AACpG,MAAM,WAAW,UAAU;IACzB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,sEAAsE;IACtE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtF,gFAAgF;IAChF,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,mFAAmF;IACnF,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,mGAAmG;IACnG,aAAa,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5I,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;gEAG4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,oGAAoG;IACpG,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E;mGAC+F;IAC/F,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B"}

package/dist/effects.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=effects.js.map

package/dist/effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effects.js","sourceRoot":"","sources":["../src/effects.ts"],"names":[],"mappings":""}

package/dist/fixProvider.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `FixProvider` — the injected boundary between the state machine and any LLM (CODING_BEST_PRACTICES.md
+ * §14/15, per the task's explicit framing): the state machine is a pure decision core that never
+ * imports `@anthropic-ai/sdk`; it only ever sees this interface, which any fake can implement in
+ * tests. `AnthropicFixProvider` (anthropicFixProvider.ts) is the one real implementation.
+ */
+import { type RepoRelativePath, type RuleId, type Violation } from '@spikedpunch/align-core';
+import type { FailureContext, FixProposal } from '@spikedpunch/align-core';
+export interface RuleExplanation {
+    readonly ruleId: RuleId;
+    readonly kind: string;
+    /** `.because()` / doc-quote provenance (ADR 002/011) — included verbatim so the LLM sees the
+     * project's own stated rationale, not a paraphrase. */
+    readonly because?: string;
+}
+export interface SymbolTableEntry {
+    readonly file: RepoRelativePath;
+    readonly exports: readonly string[];
+}
+export interface FixProviderInput {
+    /** Structured violations for one GROUP (all of one file's violations, per ADR 010/plan). */
+    readonly violations: readonly Violation[];
+    /** The grouped file(s)' current content — search blocks must match this exactly. */
+    readonly fileContents: ReadonlyMap<RepoRelativePath, string>;
+    /** Importable symbols from the graph — exports of files the target may import. */
+    readonly condensedSymbolTable: readonly SymbolTableEntry[];
+    readonly ruleExplanations: readonly RuleExplanation[];
+    /** Present only on a REPAIR retry — the apply pipeline's rejection reason + re-anchoring context. */
+    readonly previousFailure?: FailureContext;
+}
+export interface FixProvider {
+    proposeFix(input: FixProviderInput): Promise<FixProposal>;
+}
+export declare function hashFixProviderInput(input: FixProviderInput): string;
+/**
+ * Wraps any `FixProvider` with in-memory, per-run memoization by `hash(input)`. A `FixProposal` is
+ * a pure function of its input in spirit (ADR 010: "preserves pure-function memoization
+ * semantics") — an identical GROUP + identical `previousFailure` context should never re-invoke
+ * the underlying provider (saves cost, and makes REPAIR retries with unchanged state a no-op
+ * instead of an infinite-cost loop).
+ */
+export declare class MemoizingFixProvider implements FixProvider {
+    private readonly inner;
+    private readonly cache;
+    private callCount;
+    constructor(inner: FixProvider);
+    proposeFix(input: FixProviderInput): Promise<FixProposal>;
+    /** Test/observability hook — number of calls that actually reached the inner provider. */
+    get providerCallCount(): number;
+}
+//# sourceMappingURL=fixProvider.d.ts.map

package/dist/fixProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixProvider.d.ts","sourceRoot":"","sources":["../src/fixProvider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAa,KAAK,gBAAgB,EAAE,KAAK,MAAM,EAAE,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACxG,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;2DACuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;IAC1C,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC7D,kFAAkF;IAClF,QAAQ,CAAC,oBAAoB,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;IACtD,qGAAqG;IACrG,QAAQ,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3D;AAeD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAEpE;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,WAAW;IAI1C,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2C;IACjE,OAAO,CAAC,SAAS,CAAK;gBAEO,KAAK,EAAE,WAAW;IAEzC,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;IAa/D,0FAA0F;IAC1F,IAAI,iBAAiB,IAAI,MAAM,CAE9B;CACF"}

package/dist/fixProvider.js

@@ -0,0 +1,54 @@
+/**
+ * `FixProvider` — the injected boundary between the state machine and any LLM (CODING_BEST_PRACTICES.md
+ * §14/15, per the task's explicit framing): the state machine is a pure decision core that never
+ * imports `@anthropic-ai/sdk`; it only ever sees this interface, which any fake can implement in
+ * tests. `AnthropicFixProvider` (anthropicFixProvider.ts) is the one real implementation.
+ */
+import { sha256Hex } from '@spikedpunch/align-core';
+/** Canonical, order-independent serialization of a `FixProviderInput` for memoization hashing. */
+function canonicalize(input) {
+    const files = [...input.fileContents.entries()].sort(([a], [b]) => a.localeCompare(b));
+    const violations = [...input.violations]
+        .map((v) => ({ id: v.id, ruleId: v.ruleId, file: v.file, range: v.range, snippet: v.snippet }))
+        .sort((a, b) => a.id.localeCompare(b.id));
+    const symbols = [...input.condensedSymbolTable]
+        .map((s) => ({ file: s.file, exports: [...s.exports].sort() }))
+        .sort((a, b) => a.file.localeCompare(b.file));
+    const explanations = [...input.ruleExplanations].sort((a, b) => a.ruleId.localeCompare(b.ruleId));
+    return JSON.stringify({ files, violations, symbols, explanations, previousFailure: input.previousFailure ?? null });
+}
+export function hashFixProviderInput(input) {
+    return sha256Hex(canonicalize(input));
+}
+/**
+ * Wraps any `FixProvider` with in-memory, per-run memoization by `hash(input)`. A `FixProposal` is
+ * a pure function of its input in spirit (ADR 010: "preserves pure-function memoization
+ * semantics") — an identical GROUP + identical `previousFailure` context should never re-invoke
+ * the underlying provider (saves cost, and makes REPAIR retries with unchanged state a no-op
+ * instead of an infinite-cost loop).
+ */
+export class MemoizingFixProvider {
+    inner;
+    cache = new Map();
+    callCount = 0;
+    constructor(inner) {
+        this.inner = inner;
+    }
+    async proposeFix(input) {
+        const key = hashFixProviderInput(input);
+        const cached = this.cache.get(key);
+        if (cached !== undefined)
+            return cached;
+        this.callCount += 1;
+        const promise = this.inner.proposeFix(input);
+        this.cache.set(key, promise);
+        // Never memoize a rejection — a transient failure shouldn't poison the cache for this run.
+        promise.catch(() => this.cache.delete(key));
+        return promise;
+    }
+    /** Test/observability hook — number of calls that actually reached the inner provider. */
+    get providerCallCount() {
+        return this.callCount;
+    }
+}
+//# sourceMappingURL=fixProvider.js.map

package/dist/fixProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixProvider.js","sourceRoot":"","sources":["../src/fixProvider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAsD,MAAM,yBAAyB,CAAC;AAgCxG,kGAAkG;AAClG,SAAS,YAAY,CAAC,KAAuB;IAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IAC1D,OAAO,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IAIF;IAHZ,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACzD,SAAS,GAAG,CAAC,CAAC;IAEtB,YAA6B,KAAkB;QAAlB,UAAK,GAAL,KAAK,CAAa;IAAG,CAAC;IAEnD,KAAK,CAAC,UAAU,CAAC,KAAuB;QACtC,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,2FAA2F;QAC3F,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0FAA0F;IAC1F,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/format.d.ts

@@ -0,0 +1,5 @@
+/** Runs the target repo's own prettier binary on `paths` (relative to `rootDir`) if — and only if
+ * — the repo both declares prettier as a dependency AND has it installed locally. Never throws:
+ * a formatting failure is not fixable by the agent and must not halt the loop. */
+export declare function formatIfAvailable(rootDir: string, paths: readonly string[]): Promise<void>;
+//# sourceMappingURL=format.d.ts.map

package/dist/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAiCA;;kFAEkF;AAClF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhG"}

package/dist/format.js

@@ -0,0 +1,47 @@
+/**
+ * Mechanical post-format (APPLY step, IMPLEMENTATION_PLAN.md Stage 4): if the TARGET repo being
+ * fixed exposes prettier, run it on touched files before committing; skip silently otherwise.
+ * This is a target-repo runtime detection, not align's own repo's tooling — align's own repo has
+ * no prettier config (confirmed at Stage-4 research time), so this must never assume prettier is
+ * present.
+ */
+import { execFile } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+function prettierBinaryPath(rootDir) {
+    const binPath = path.join(rootDir, 'node_modules', '.bin', process.platform === 'win32' ? 'prettier.cmd' : 'prettier');
+    return fs.existsSync(binPath) ? binPath : undefined;
+}
+function targetRepoDeclaresPrettier(rootDir) {
+    const pkgPath = path.join(rootDir, 'package.json');
+    if (!fs.existsSync(pkgPath))
+        return false;
+    try {
+        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+        return Boolean(pkg.dependencies?.prettier ?? pkg.devDependencies?.prettier);
+    }
+    catch {
+        return false;
+    }
+}
+/** Runs the target repo's own prettier binary on `paths` (relative to `rootDir`) if — and only if
+ * — the repo both declares prettier as a dependency AND has it installed locally. Never throws:
+ * a formatting failure is not fixable by the agent and must not halt the loop. */
+export async function formatIfAvailable(rootDir, paths) {
+    if (paths.length === 0)
+        return;
+    if (!targetRepoDeclaresPrettier(rootDir))
+        return;
+    const bin = prettierBinaryPath(rootDir);
+    if (bin === undefined)
+        return;
+    try {
+        await execFileAsync(bin, ['--write', ...paths], { cwd: rootDir });
+    }
+    catch {
+        // Mechanical formatting is best-effort; a prettier crash must not halt the fix loop.
+    }
+}
+//# sourceMappingURL=format.js.map

package/dist/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvH,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAGtD,CAAC;QACF,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,IAAI,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;kFAEkF;AAClF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAwB;IAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC;QAAE,OAAO;IACjD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;IACvF,CAAC;AACH,CAAC"}