@synctek/forgeos 2.0.0

package/dist/trust/transmission.js

@@ -0,0 +1,390 @@
+/**
+ * Shareable metadata transmission for the ForgeOS Trust Ledger.
+ *
+ * Controls exactly what leaves the developer's machine.
+ *
+ * Design is fail-closed: any privacy violation raises rather than returning
+ * a partial payload. New fields added to the ledger schema are automatically
+ * excluded until explicitly added to TRANSMITTABLE_FIELDS.
+ *
+ * Binary-compatible with the Python transmission.py implementation:
+ * - Same TRANSMITTABLE_FIELDS allowlist
+ * - Same sensitive pattern regexes (adapted for JavaScript RegExp)
+ * - Same transmission payload structure
+ * - Same manifest format (both box-drawing and plain-text versions)
+ *
+ * Privacy model (architecture §7.1):
+ *   - LOCAL_ONLY_FIELDS (signature, source_tree_hash) are NEVER transmitted.
+ *   - TRANSMITTABLE_FIELDS is the explicit allowlist. Any field not in this
+ *     list is stripped. New fields are automatically excluded.
+ *   - The privacy filter validates before transmission and raises
+ *     PrivacyViolationError on any sensitive pattern match.
+ *
+ * Transmission log:
+ *   Every attempt (approved or rejected) is appended to
+ *   .forgeos/transmissions.log as a JSON line.
+ */
+import { createHash } from 'crypto';
+import { existsSync, appendFileSync, readFileSync } from 'fs';
+import { join } from 'path';
+import { pythonJsonDumps } from './chain.js';
+// ------------------------------------------------------------------
+// Constants
+// ------------------------------------------------------------------
+/**
+ * Explicit allowlist: only these top-level fields may appear in a
+ * transmitted payload. Matches Python's TRANSMITTABLE_FIELDS exactly.
+ */
+export const TRANSMITTABLE_FIELDS = new Set([
+    'seq',
+    'timestamp',
+    'entry_type',
+    'payload_hash',
+    'chain_hash',
+    'schema_version',
+]);
+/**
+ * Fields that are local-only and must be stripped before transmission.
+ * Matches Python's LOCAL_ONLY_FIELDS.
+ */
+export const LOCAL_ONLY_FIELDS = new Set(['signature', 'source_tree_hash']);
+/**
+ * Sensitive patterns — matches Python's _SENSITIVE_PATTERNS.
+ *
+ * Python patterns adapted to JavaScript RegExp:
+ *   r"(^|[/\\])(home|Users)[/\\]"  → /(^|[/\\])(home|Users)[/\\]/i
+ *   r"^[A-Za-z]:[/\\]"             → /^[A-Za-z]:[/\\]/
+ *   r"(password|secret|token|api[_-]?key)\s*[:=]" (case insensitive)
+ *   r"def\s+\w+\s*\("              → /def\s+\w+\s*\(/
+ *   r"import\s+\w+"                → /import\s+\w+/
+ */
+const SENSITIVE_PATTERNS = [
+    /(^|[/\\])(home|Users)[/\\]/i, // Absolute path (macOS/Linux)
+    /^[A-Za-z]:[/\\]/, // Windows absolute path
+    /(password|secret|token|api[_-]?key)\s*[:=]/i, // Credentials
+    /def\s+\w+\s*\(/, // Python function definition
+    /import\s+\w+/, // Python import statement
+];
+/** Default fallback endpoint if config.toml is missing. */
+const DEFAULT_ALLOWED_ENDPOINTS = [
+    'https://api.forgeos.synctek.io/api/trust/submit',
+];
+// ------------------------------------------------------------------
+// Exceptions
+// ------------------------------------------------------------------
+export class TransmissionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'TransmissionError';
+    }
+}
+export class PrivacyViolationError extends TransmissionError {
+    constructor(message) {
+        super(message);
+        this.name = 'PrivacyViolationError';
+    }
+}
+// ------------------------------------------------------------------
+// Privacy filter
+// ------------------------------------------------------------------
+/**
+ * Build a transmission payload from a list of ledger entries.
+ *
+ * Strips all LOCAL_ONLY_FIELDS and any fields not in TRANSMITTABLE_FIELDS.
+ * Runs a paranoia check for sensitive patterns in the resulting payload.
+ *
+ * Matches Python's prepare_transmission() exactly.
+ *
+ * @param entries - List of ledger entry dicts.
+ * @param fieldsToShare - Optional additional field names beyond TRANSMITTABLE_FIELDS.
+ * @returns Filtered payload dict suitable for transmission.
+ * @throws PrivacyViolationError if any value matches a sensitive pattern.
+ */
+export function prepareTransmission(entries, fieldsToShare) {
+    const allowed = new Set(TRANSMITTABLE_FIELDS);
+    if (fieldsToShare) {
+        for (const f of fieldsToShare) {
+            allowed.add(f);
+        }
+    }
+    const filteredEntries = [];
+    for (const entry of entries) {
+        const filtered = {};
+        const entryObj = entry;
+        for (const field of allowed) {
+            if (field in entryObj) {
+                filtered[field] = entryObj[field];
+            }
+        }
+        filteredEntries.push(filtered);
+    }
+    const payload = {
+        schema_version: '1.0',
+        transmitted_at: new Date().toISOString(),
+        entry_count: filteredEntries.length,
+        entries: filteredEntries,
+    };
+    assertNoSensitiveFields(payload);
+    return payload;
+}
+/**
+ * Walk every string value in the payload and raise on any sensitive pattern match.
+ *
+ * Matches Python's _assert_no_sensitive_fields() — fail-closed.
+ *
+ * @throws PrivacyViolationError on first match found.
+ */
+function assertNoSensitiveFields(payload) {
+    for (const [path, value] of walkValues(payload)) {
+        if (typeof value !== 'string')
+            continue;
+        for (const pattern of SENSITIVE_PATTERNS) {
+            if (pattern.test(value)) {
+                throw new PrivacyViolationError(`Sensitive pattern '${pattern.source}' found at field path '${path}': ${JSON.stringify(value.substring(0, 80))}. Transmission blocked.`);
+            }
+        }
+    }
+}
+/**
+ * Recursively yield [path, value] pairs from a nested dict/list.
+ * Matches Python's _walk_values().
+ */
+function walkValues(obj, path = '') {
+    const results = [];
+    if (obj !== null && typeof obj === 'object') {
+        if (Array.isArray(obj)) {
+            for (let i = 0; i < obj.length; i++) {
+                results.push(...walkValues(obj[i], `${path}[${i}]`));
+            }
+        }
+        else {
+            for (const [k, v] of Object.entries(obj)) {
+                const childPath = path ? `${path}.${k}` : k;
+                results.push(...walkValues(v, childPath));
+            }
+        }
+    }
+    else {
+        results.push([path, obj]);
+    }
+    return results;
+}
+/**
+ * Detect sensitive content in a string. Returns matching pattern sources.
+ *
+ * Convenience function for callers that want to pre-screen values.
+ */
+export function detectSensitiveContent(text) {
+    return SENSITIVE_PATTERNS
+        .filter(p => p.test(text))
+        .map(p => p.source);
+}
+// ------------------------------------------------------------------
+// Manifest generation
+// ------------------------------------------------------------------
+/**
+ * Generate a box-drawing manifest of what will be transmitted.
+ *
+ * Matches Python's generate_manifest() box-drawing format exactly.
+ *
+ * @param transmissionData - Filtered payload from prepareTransmission().
+ * @param destination - Target URL the data will be sent to.
+ * @returns Multiline string suitable for printing to a terminal.
+ */
+export function generateManifest(transmissionData, destination) {
+    const entryCount = transmissionData.entry_count ?? 0;
+    const transmittedAt = transmissionData.transmitted_at ?? 'unknown';
+    const payloadJson = pythonJsonDumps(transmissionData);
+    const payloadHash = createHash('sha256')
+        .update(payloadJson, 'utf8')
+        .digest('hex')
+        .substring(0, 16);
+    const lines = [
+        '',
+        '┌─────────────────────────────────────────────────────────────────┐',
+        '│           ForgeOS — Trust Data Transmission Preview             │',
+        '├─────────────────────────────────────────────────────────────────┤',
+        `│  Destination  : ${destination.substring(0, 49).padEnd(49)}│`,
+        `│  Entries      : ${String(entryCount).padEnd(49)}│`,
+        `│  Prepared at  : ${transmittedAt.substring(0, 49).padEnd(49)}│`,
+        `│  Payload hash : ${payloadHash.padEnd(49)}│`,
+        '├─────────────────────────────────────────────────────────────────┤',
+        '│  Fields included in this transmission:                          │',
+    ];
+    // List transmitted field names (sorted)
+    for (const field of [...TRANSMITTABLE_FIELDS].sort()) {
+        lines.push(`│    • ${field.padEnd(60)}│`);
+    }
+    lines.push('├─────────────────────────────────────────────────────────────────┤', '│  Fields EXCLUDED (never transmitted):                           │', '│    • signature (Ed25519 key material)                           │', '│    • source_tree_hash (local path binding)                      │', '│    • full payload dict (analysis internals)                     │', '└─────────────────────────────────────────────────────────────────┘', '');
+    return lines.join('\n');
+}
+/**
+ * Generate a plain-text (no box-drawing) manifest for non-TTY output.
+ *
+ * Matches Python's generate_plain_manifest() exactly.
+ */
+export function generatePlainManifest(transmissionData, destination) {
+    const entryCount = transmissionData.entry_count ?? 0;
+    const transmittedAt = transmissionData.transmitted_at ?? 'unknown';
+    const fields = [...TRANSMITTABLE_FIELDS].sort().join(', ');
+    return ('\nForgeOS Trust Data Transmission Preview\n' +
+        '----------------------------------------\n' +
+        `Destination  : ${destination}\n` +
+        `Entries      : ${entryCount}\n` +
+        `Prepared at  : ${transmittedAt}\n` +
+        `Fields       : ${fields}\n` +
+        'Excluded     : signature, source_tree_hash, full payload\n' +
+        '----------------------------------------\n');
+}
+/**
+ * Append a transmission record to .forgeos/transmissions.log.
+ *
+ * Append-only log — every attempt is recorded whether approved,
+ * rejected, or errored. Matches Python's _log_transmission().
+ */
+export function logTransmission(projectPath, approved, autoConfirmed, payloadHash, destination, httpStatus = null, error = null) {
+    const logPath = join(projectPath, '.forgeos', 'transmissions.log');
+    const record = {
+        timestamp: new Date().toISOString(),
+        approved,
+        auto_confirmed: autoConfirmed,
+        payload_hash: payloadHash,
+        destination,
+        http_status: httpStatus,
+        error,
+    };
+    try {
+        // Match Python's json.dumps(record, ensure_ascii=False, sort_keys=True)
+        const line = pythonJsonDumps(record);
+        appendFileSync(logPath, line + '\n', 'utf8');
+    }
+    catch {
+        // Transmission logging failure must not prevent the result from being returned.
+    }
+}
+// ------------------------------------------------------------------
+// HTTP transmission (stdlib fetch, no external deps)
+// ------------------------------------------------------------------
+/**
+ * Load allowed endpoints from .forgeos/config.toml.
+ *
+ * Falls back to DEFAULT_ALLOWED_ENDPOINTS if the config file is missing
+ * or unreadable. Uses simple regex parsing (no TOML library dependency).
+ */
+export function loadAllowedEndpoints(projectPath) {
+    const configPath = join(projectPath, '.forgeos', 'config.toml');
+    if (!existsSync(configPath)) {
+        return [...DEFAULT_ALLOWED_ENDPOINTS];
+    }
+    try {
+        const content = readFileSync(configPath, 'utf8');
+        // Extract allowed_endpoints array from [transmission] section
+        // Simple line-by-line parser — avoids TOML library dependency
+        const endpoints = [];
+        let inTransmissionSection = false;
+        let inArray = false;
+        for (const line of content.split('\n')) {
+            const trimmed = line.trim();
+            if (trimmed === '[transmission]') {
+                inTransmissionSection = true;
+                continue;
+            }
+            if (trimmed.startsWith('[') && trimmed !== '[transmission]') {
+                inTransmissionSection = false;
+                inArray = false;
+                continue;
+            }
+            if (!inTransmissionSection)
+                continue;
+            if (trimmed.startsWith('allowed_endpoints')) {
+                inArray = true;
+                // Check for inline array: allowed_endpoints = ["url"]
+                const inlineMatch = trimmed.match(/allowed_endpoints\s*=\s*\[([^\]]*)\]/);
+                if (inlineMatch) {
+                    const items = inlineMatch[1].match(/"([^"]+)"/g);
+                    if (items) {
+                        endpoints.push(...items.map(s => s.replace(/"/g, '')));
+                    }
+                    inArray = false;
+                }
+                continue;
+            }
+            if (inArray) {
+                if (trimmed === ']') {
+                    inArray = false;
+                    continue;
+                }
+                const urlMatch = trimmed.match(/^"([^"]+)"/);
+                if (urlMatch) {
+                    endpoints.push(urlMatch[1]);
+                }
+            }
+        }
+        return endpoints.length > 0 ? endpoints : [...DEFAULT_ALLOWED_ENDPOINTS];
+    }
+    catch {
+        return [...DEFAULT_ALLOWED_ENDPOINTS];
+    }
+}
+/**
+ * Send a transmission payload to a ForgeOS Trust API endpoint.
+ *
+ * Checks the URL against the allowed endpoints list.
+ * Returns a TransmissionResult; all errors are caught and returned as status='error'.
+ *
+ * @param url - Target endpoint URL (must be HTTPS).
+ * @param data - Filtered payload from prepareTransmission().
+ * @param projectPath - Project root for config and logging.
+ * @param noConfirm - Skip interactive confirmation.
+ * @returns TransmissionResult.
+ * @throws TransmissionError if the URL is not in the allowed list.
+ */
+export async function sendTransmission(url, data, projectPath, noConfirm = false) {
+    // Endpoint allowlist check
+    const allowed = loadAllowedEndpoints(projectPath);
+    if (!allowed.includes(url)) {
+        throw new TransmissionError(`Endpoint '${url}' is not in the allowed endpoints list. ` +
+            `Add it to .forgeos/config.toml under [transmission] allowed_endpoints to permit this destination.`);
+    }
+    if (!url.startsWith('https://')) {
+        throw new TransmissionError(`Refusing to transmit over non-HTTPS URL: ${JSON.stringify(url)}`);
+    }
+    const payloadJson = pythonJsonDumps(data);
+    const payloadHash = createHash('sha256').update(payloadJson, 'utf8').digest('hex');
+    try {
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'User-Agent': 'forgeos-cli/1.0',
+            },
+            body: payloadJson,
+            signal: AbortSignal.timeout(30_000),
+        });
+        let responseBody = null;
+        try {
+            responseBody = (await response.json());
+        }
+        catch {
+            responseBody = null;
+        }
+        logTransmission(projectPath, true, noConfirm, payloadHash, url, response.status);
+        return {
+            status: 'sent',
+            http_status: response.status,
+            response_body: responseBody,
+            payload_hash: payloadHash,
+        };
+    }
+    catch (exc) {
+        const errorMessage = exc instanceof Error ? exc.message : String(exc);
+        logTransmission(projectPath, true, noConfirm, payloadHash, url, null, errorMessage);
+        return {
+            status: 'error',
+            http_status: null,
+            response_body: null,
+            payload_hash: payloadHash,
+        };
+    }
+}
+//# sourceMappingURL=transmission.js.map

package/dist/trust/transmission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transmission.js","sourceRoot":"","sources":["../../src/trust/transmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,qEAAqE;AACrE,YAAY;AACZ,qEAAqE;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC1C,KAAK;IACL,WAAW;IACX,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAa;IACnC,6BAA6B,EAAY,8BAA8B;IACvE,iBAAiB,EAAyB,wBAAwB;IAClE,6CAA6C,EAAG,cAAc;IAC9D,gBAAgB,EAA0B,6BAA6B;IACvE,cAAc,EAA4B,0BAA0B;CACrE,CAAC;AAEF,2DAA2D;AAC3D,MAAM,yBAAyB,GAAG;IAChC,iDAAiD;CAClD,CAAC;AAEF,qEAAqE;AACrE,aAAa;AACb,qEAAqE;AAErE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,iBAAiB;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAoBD,qEAAqE;AACrE,iBAAiB;AACjB,qEAAqE;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,aAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC9C,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAA8B,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,KAA2C,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,QAAQ,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAwB;QACnC,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxC,WAAW,EAAE,eAAe,CAAC,MAAM;QACnC,OAAO,EAAE,eAAe;KACzB,CAAC;IAEF,uBAAuB,CAAC,OAA6C,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,OAAgC;IAC/D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,qBAAqB,CAC7B,sBAAsB,OAAO,CAAC,MAAM,0BAA0B,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,yBAAyB,CACxI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,GAAY,EACZ,IAAI,GAAG,EAAE;IAET,MAAM,OAAO,GAA6B,EAAE,CAAC;IAE7C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;gBACpE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,kBAAkB;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,qEAAqE;AACrE,sBAAsB;AACtB,qEAAqE;AAErE;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,gBAAqC,EACrC,WAAmB;IAEnB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,IAAI,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,gBAAgB,CAAC,cAAc,IAAI,SAAS,CAAC;IAEnE,MAAM,WAAW,GAAG,eAAe,CAAC,gBAAsD,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;SAC3B,MAAM,CAAC,KAAK,CAAC;SACb,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpB,MAAM,KAAK,GAAa;QACtB,EAAE;QACF,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,qBAAqB,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;QAC/D,qBAAqB,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;QACrD,qBAAqB,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;QACjE,qBAAqB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;QAC9C,qEAAqE;QACrE,qEAAqE;KACtE,CAAC;IAEF,wCAAwC;IACxC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI,CACR,qEAAqE,EACrE,qEAAqE,EACrE,qEAAqE,EACrE,qEAAqE,EACrE,qEAAqE,EACrE,qEAAqE,EACrE,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,gBAAqC,EACrC,WAAmB;IAEnB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,IAAI,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,gBAAgB,CAAC,cAAc,IAAI,SAAS,CAAC;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3D,OAAO,CACL,6CAA6C;QAC7C,4CAA4C;QAC5C,kBAAkB,WAAW,IAAI;QACjC,kBAAkB,UAAU,IAAI;QAChC,kBAAkB,aAAa,IAAI;QACnC,kBAAkB,MAAM,IAAI;QAC5B,4DAA4D;QAC5D,4CAA4C,CAC7C,CAAC;AACJ,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,QAAiB,EACjB,aAAsB,EACtB,WAAmB,EACnB,WAAmB,EACnB,aAA4B,IAAI,EAChC,QAAuB,IAAI;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACnE,MAAM,MAAM,GAA0B;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ;QACR,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,WAAW;QACzB,WAAW;QACX,WAAW,EAAE,UAAU;QACvB,KAAK;KACN,CAAC;IAEF,IAAI,CAAC;QACH,wEAAwE;QACxE,MAAM,IAAI,GAAG,eAAe,CAAC,MAA4C,CAAC,CAAC;QAC3E,cAAc,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,qDAAqD;AACrD,qEAAqE;AAErE;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,yBAAyB,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjD,8DAA8D;QAC9D,8DAA8D;QAC9D,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACjC,qBAAqB,GAAG,IAAI,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBAC5D,qBAAqB,GAAG,KAAK,CAAC;gBAC9B,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,qBAAqB;gBAAE,SAAS;YAErC,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC;gBACf,sDAAsD;gBACtD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC1E,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACjD,IAAI,KAAK,EAAE,CAAC;wBACV,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;oBACzD,CAAC;oBACD,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;oBACpB,OAAO,GAAG,KAAK,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC7C,IAAI,QAAQ,EAAE,CAAC;oBACb,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,yBAAyB,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,IAAyB,EACzB,WAAmB,EACnB,SAAS,GAAG,KAAK;IAEjB,2BAA2B;IAC3B,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CACzB,aAAa,GAAG,0CAA0C;YAC1D,mGAAmG,CACpG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,iBAAiB,CACzB,4CAA4C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,IAA0C,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,iBAAiB;aAChC;YACD,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,YAAY,GAAmC,IAAI,CAAC;QACxD,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEjF,OAAO;YACL,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,QAAQ,CAAC,MAAM;YAC5B,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,WAAW;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtE,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QAEpF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,WAAW;SAC1B,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,183 @@
+export interface Session {
+    id: string;
+    developer_id: string;
+    project_id: string;
+    initiative_id: string | null;
+    started_at: string;
+    ended_at: string | null;
+    status: string;
+    tasks: Task[];
+}
+export interface Task {
+    id: string;
+    session_id: string;
+    project_id: string;
+    description: string;
+    initiative_id: string | null;
+    changeset_id: string | null;
+    status: string;
+    current_gate: string | null;
+    created_at: string;
+    completed_at: string | null;
+}
+export interface Initiative {
+    id: string;
+    title: string;
+    description: string;
+    priority: string;
+    status: string;
+    project_id: string;
+    created_at: string;
+}
+export interface RiskProfile {
+    changeset_id: string;
+    score: number;
+    categories_triggered: string[];
+    required_roles: string[];
+    required_evidence: string[];
+    required_gates: string[];
+    computed_at: string;
+}
+export interface ChangeSet {
+    id: string;
+    initiative_id: string;
+    project_id: string;
+    description: string;
+    files_changed: string[];
+    modules_affected: string[];
+    status: string;
+    created_at: string;
+}
+export interface ReviewFinding {
+    category: string;
+    severity: string;
+    observation: string;
+    recommendation: string | null;
+}
+export interface Profile {
+    role: string;
+    system_prompt: string;
+    extended_prompt: string;
+    output_format: string;
+    checklist: Array<{
+        gate: string;
+        role_responsible: boolean;
+        required_evidence: string[];
+    }>;
+    severity_levels: string[];
+    verdict_options: string[];
+    shared_mind_context?: {
+        patterns: string[];
+        anti_patterns: string[];
+        fix_recipes: Array<{
+            problem: string;
+            solution: string;
+        }>;
+        past_regressions: Array<{
+            modules: string[];
+            description: string;
+        }>;
+        past_gate_failures: Array<{
+            gate: string;
+            reason: string;
+        }>;
+        quality_warnings: Array<{
+            severity: string;
+            category: string;
+            message: string;
+        }>;
+    };
+    focus_areas?: string[];
+}
+export interface GatePipeline {
+    changeset_id: string;
+    project_id: string;
+    current_gate: string;
+    gates: GateStatus[];
+    risk_score: number;
+    created_at: string;
+}
+export interface GateStatus {
+    gate_id: string;
+    gate_name: string;
+    order: number;
+    status: string;
+    required_evidence: string[];
+    provided_evidence: string[];
+    required_roles: string[];
+    completed_roles: string[];
+    promoted_at: string | null;
+    promoted_by: string | null;
+    rejection_reason: string | null;
+}
+export interface ReleaseCheck {
+    can_release: boolean;
+    pending_gates: string[];
+    failed_gates: string[];
+    passed_gates: string[];
+    skipped_gates: string[];
+}
+export interface WorkflowState {
+    initiative_id: string;
+    initiative: Initiative;
+    changesets: Array<{
+        changeset: ChangeSet;
+        risk_profile: RiskProfile;
+        current_gate: string | null;
+        can_release: boolean;
+        missing_evidence: string[];
+        missing_roles: string[];
+        blockers: string[];
+    }>;
+    current_step: string;
+    next_actions: Array<{
+        action: string;
+        tool: string;
+        description: string;
+    }>;
+    progress: {
+        gates_total: number;
+        gates_passed: number;
+        gates_pending: number;
+        percent_complete: number;
+    };
+}
+export interface BootstrapResponse {
+    session: Session;
+    project: Record<string, unknown>;
+    active_initiatives: Array<{
+        id: string;
+        title: string;
+        priority: string;
+        status: string;
+        created_at: string;
+    }>;
+    pending_changesets: Array<{
+        changeset: ChangeSet;
+        risk_profile: RiskProfile;
+        pipeline_summary: {
+            current_gate: string;
+            pending_gates: string[];
+            passed_gates: string[];
+        };
+    }>;
+    shared_mind_stats: Record<string, unknown>;
+    governance: {
+        gate_definitions: Array<Record<string, unknown>>;
+        quality_roles: string[];
+        evidence_types: string[];
+        risk_categories: string[];
+        risk_thresholds: Record<string, string>;
+    };
+    runbook: {
+        workflow_steps: Array<{
+            step: number;
+            name: string;
+            tool: string | null;
+            description: string;
+        }>;
+        review_protocol: string;
+        rules: string[];
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,KAAK,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,OAAO,CAAC;QAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC,CAAC;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,mBAAmB,CAAC,EAAE;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC1D,gBAAgB,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpE,kBAAkB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5D,gBAAgB,EAAE,KAAK,CAAC;YACtB,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC,CAAC;KACJ,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,KAAK,CAAC;QAChB,SAAS,EAAE,SAAS,CAAC;QACrB,YAAY,EAAE,WAAW,CAAC;QAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,WAAW,EAAE,OAAO,CAAC;QACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC,CAAC;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,KAAK,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,kBAAkB,EAAE,KAAK,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,kBAAkB,EAAE,KAAK,CAAC;QACxB,SAAS,EAAE,SAAS,CAAC;QACrB,YAAY,EAAE,WAAW,CAAC;QAC1B,gBAAgB,EAAE;YAChB,YAAY,EAAE,MAAM,CAAC;YACrB,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,YAAY,EAAE,MAAM,EAAE,CAAC;SACxB,CAAC;KACH,CAAC,CAAC;IACH,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,UAAU,EAAE;QACV,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzC,CAAC;IACF,OAAO,EAAE;QACP,cAAc,EAAE,KAAK,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;QACH,eAAe,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH"}

package/dist/types.js

@@ -0,0 +1,3 @@
+// Engine response types
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,wBAAwB"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@synctek/forgeos",
+  "version": "2.0.0",
+  "description": "ForgeOS - AI Governance Platform CLI & MCP Server",
+  "type": "module",
+  "main": "dist/mcp/index.js",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "bin": {
+    "forge": "dist/cli/index.js",
+    "forgeos-mcp": "dist/mcp/index.js",
+    "forgeos-mcp-http": "dist/mcp/http-server.js"
+  },
+  "scripts": {
+    "build": "tsc -p .",
+    "start": "node dist/mcp/index.js",
+    "start:http": "node dist/mcp/http-server.js",
+    "dev": "tsx src/mcp/index.ts",
+    "dev:http": "tsx src/mcp/http-server.ts"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.19.9",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "commander": "^12.1.0",
+    "hono": "^4.12.1",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@types/node": "^25.2.1",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  },
+  "keywords": [
+    "mcp",
+    "forgeos",
+    "governance",
+    "claude",
+    "ai-agent",
+    "synctek",
+    "model-context-protocol"
+  ],
+  "author": "Synctek <hello@synctek.io>",
+  "license": "MIT",
+  "homepage": "https://synctek.io/forgeos",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/synctek/forgeos-mcp"
+  },
+  "bugs": {
+    "url": "https://github.com/synctek/forgeos-mcp/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}