@telora/daemon 0.21.12 → 0.21.81

package/dist/assembly-engine.d.ts

@@ -1,114 +0,0 @@
-/**
- * Context Assembly Engine.
- *
- * Takes an ordered list of data source references (assembly recipe)
- * and resolves each entry into concrete markdown content.
- *
- * Source types are extensible via a registry pattern.
- */
-import type { DaemonConfig } from './types.js';
-/** Context available to resolvers when hydrating a recipe. */
-export interface AssemblyContext {
-    focusId: string;
-    deliveryIds: string[];
-    worktreePath: string | null;
-    config: DaemonConfig;
-    organizationId: string;
-    productId: string;
-    /**
-     * The PRD this assembly is scoped to, when resolving a PRD-altitude recipe
-     * (prd.context / prd.persona). Absent for ordinary focus/delivery assembly --
-     * the PRD resolvers treat a missing prdId as "no PRD context" and return
-     * empty, so adding this is non-breaking for every existing caller. A resolver
-     * param (e.g. prd.context(prdId=...)) overrides it when present.
-     */
-    prdId?: string;
-    /**
-     * Override for the git.diff_against_base base ref. When set, the diff is
-     * computed against this ref instead of the integration branch. The review
-     * resume path sets it to the focus's review coverage watermark
-     * (reviewed_through_sha) so a resumed reviewer sees only the incremental
-     * delta since the last completed coverage (watermark..tip) rather than the
-     * full branch diff. Absent for every other caller -> integration base.
-     */
-    diffBaseOverride?: string;
-}
-/** A resolver function that hydrates a source reference into markdown. */
-export type SourceResolver = (context: AssemblyContext, params: Record<string, string>) => Promise<string>;
-/**
- * Per-source attribution record for one resolved assembly entry.
- *
- * This is the assembly manifest: the exact record of WHAT context was injected
- * per spawn, the largest controllable lever on token spend. estimatedTokens is
- * a deterministic chars/4 model of the resolved section size (the standard
- * rough token estimate); charCount is the raw size. The manifest is derived
- * from the same resolved sections that compose the prompt -- it never alters
- * the composed string.
- */
-export interface AssemblyManifestEntry {
-    /** The recipe entry as written, e.g. 'loop.context' or 'wiki.search(query="x")'. */
-    sourceRef: string;
-    /** Position of this entry in the recipe (0-based, recipe order). */
-    ordinal: number;
-    /** Raw character count of the resolved section (0 for empty/failed sources). */
-    charCount: number;
-    /** Modeled token estimate (chars / 4, rounded up). Exact for injected context. */
-    estimatedTokens: number;
-}
-/** Result of resolving a recipe with attribution: the composed string + manifest. */
-export interface ResolvedAssembly {
-    /** The composed prompt -- byte-identical to resolveAssemblyRecipe's output. */
-    content: string;
-    /** One entry per recipe source, in recipe order. */
-    manifest: AssemblyManifestEntry[];
-}
-/**
- * Rough token estimate for a resolved section: ceil(chars / 4).
- * Matches the common ~4-chars-per-token heuristic; deterministic and cheap.
- */
-export declare function estimateTokens(charCount: number): number;
-/** Register a source resolver for a given source type. */
-export declare function registerSourceResolver(sourceType: string, resolver: SourceResolver): void;
-/** Get a registered resolver (for testing). */
-export declare function getResolver(sourceType: string): SourceResolver | undefined;
-/**
- * List all registered resolver source types, sorted. Used by initResolvers()
- * for its non-empty assertion and by the daemon startup log to surface what
- * the registry actually holds.
- */
-export declare function getRegisteredResolverTypes(): string[];
-/**
- * Parse a source reference string into type and params.
- *
- * Format: "type.subtype" or "type.subtype(key=value,key2=value2)"
- * Examples:
- *   "delivery.acceptance_criteria" -> { type: "delivery.acceptance_criteria", params: {} }
- *   "delivery.issues(status=done)" -> { type: "delivery.issues", params: { status: "done" } }
- */
-export declare function parseSourceReference(ref: string): {
-    type: string;
-    params: Record<string, string>;
-};
-/**
- * Resolve an assembly recipe into hydrated markdown content.
- *
- * Iterates through source references in order, resolves each via the
- * registered resolver, and concatenates results with section separators.
- *
- * Failed sources are handled gracefully: a warning comment is included
- * in the output, but the assembly continues.
- */
-export declare function resolveAssemblyRecipe(recipe: string[], context: AssemblyContext): Promise<string>;
-/**
- * Resolve an assembly recipe into both the hydrated markdown AND a per-source
- * attribution manifest.
- *
- * The composed `content` is byte-identical to resolveAssemblyRecipe (the same
- * join over the same sections), so wiring this in does not change any prompt.
- * The manifest carries one entry per recipe source in recipe order, with the
- * char count and modeled token estimate of the exact text that source
- * contributed (an empty/whitespace section contributes nothing to the string
- * and reports charCount 0).
- */
-export declare function resolveAssemblyRecipeWithManifest(recipe: string[], context: AssemblyContext): Promise<ResolvedAssembly>;
-//# sourceMappingURL=assembly-engine.d.ts.map

package/dist/assembly-engine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assembly-engine.d.ts","sourceRoot":"","sources":["../src/assembly-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG,CAC3B,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAKD,0DAA0D;AAC1D,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAEzF;AAED,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE1E;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAelG;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,gBAAgB,CAAC,CA0D3B"}

package/dist/assembly-engine.js

@@ -1,137 +0,0 @@
-/**
- * Context Assembly Engine.
- *
- * Takes an ordered list of data source references (assembly recipe)
- * and resolves each entry into concrete markdown content.
- *
- * Source types are extensible via a registry pattern.
- */
-import { createLogger } from './log.js';
-const log = createLogger({ module: 'assembly-engine' });
-/**
- * Rough token estimate for a resolved section: ceil(chars / 4).
- * Matches the common ~4-chars-per-token heuristic; deterministic and cheap.
- */
-export function estimateTokens(charCount) {
-    return charCount > 0 ? Math.ceil(charCount / 4) : 0;
-}
-// Registry of source resolvers
-const resolverRegistry = new Map();
-/** Register a source resolver for a given source type. */
-export function registerSourceResolver(sourceType, resolver) {
-    resolverRegistry.set(sourceType, resolver);
-}
-/** Get a registered resolver (for testing). */
-export function getResolver(sourceType) {
-    return resolverRegistry.get(sourceType);
-}
-/**
- * List all registered resolver source types, sorted. Used by initResolvers()
- * for its non-empty assertion and by the daemon startup log to surface what
- * the registry actually holds.
- */
-export function getRegisteredResolverTypes() {
-    return [...resolverRegistry.keys()].sort();
-}
-/**
- * Parse a source reference string into type and params.
- *
- * Format: "type.subtype" or "type.subtype(key=value,key2=value2)"
- * Examples:
- *   "delivery.acceptance_criteria" -> { type: "delivery.acceptance_criteria", params: {} }
- *   "delivery.issues(status=done)" -> { type: "delivery.issues", params: { status: "done" } }
- */
-export function parseSourceReference(ref) {
-    const paramMatch = ref.match(/^([^(]+)\(([^)]*)\)$/);
-    if (paramMatch) {
-        const type = paramMatch[1];
-        const paramStr = paramMatch[2];
-        const params = {};
-        for (const pair of paramStr.split(',')) {
-            const [key, value] = pair.split('=').map(s => s.trim());
-            if (key && value !== undefined) {
-                params[key] = value;
-            }
-        }
-        return { type, params };
-    }
-    return { type: ref, params: {} };
-}
-/**
- * Resolve an assembly recipe into hydrated markdown content.
- *
- * Iterates through source references in order, resolves each via the
- * registered resolver, and concatenates results with section separators.
- *
- * Failed sources are handled gracefully: a warning comment is included
- * in the output, but the assembly continues.
- */
-export async function resolveAssemblyRecipe(recipe, context) {
-    const { content } = await resolveAssemblyRecipeWithManifest(recipe, context);
-    return content;
-}
-/**
- * Resolve an assembly recipe into both the hydrated markdown AND a per-source
- * attribution manifest.
- *
- * The composed `content` is byte-identical to resolveAssemblyRecipe (the same
- * join over the same sections), so wiring this in does not change any prompt.
- * The manifest carries one entry per recipe source in recipe order, with the
- * char count and modeled token estimate of the exact text that source
- * contributed (an empty/whitespace section contributes nothing to the string
- * and reports charCount 0).
- */
-export async function resolveAssemblyRecipeWithManifest(recipe, context) {
-    // Fail loud on an empty registry: a non-empty recipe against zero
-    // registered resolvers means registration never ran (initResolvers() was
-    // not called and no importer loaded the assembly-resolvers shim). Every
-    // section would degrade to an "unknown source type" comment -- a prompt
-    // silently missing ALL of its context. Throwing turns that silent
-    // degradation into an actionable startup/wiring error.
-    if (recipe.length > 0 && resolverRegistry.size === 0) {
-        throw new Error('[assembly-engine] Resolver registry is empty but a non-empty assembly ' +
-            'recipe was requested. Call initResolvers() (resolvers/index.js) before ' +
-            'resolving recipes -- daemon startup does this in FocusEngine.init.');
-    }
-    const sections = [];
-    const manifest = [];
-    let ordinal = 0;
-    for (const ref of recipe) {
-        const { type, params } = parseSourceReference(ref);
-        const resolver = resolverRegistry.get(type);
-        // The contributed string is whatever lands in `sections` for this source
-        // (a comment for unknown/failed sources, the resolved content for a hit,
-        // or nothing for an empty result). The manifest measures exactly that.
-        let contributed = '';
-        if (!resolver) {
-            contributed = `<!-- Assembly: unknown source type "${type}" -->`;
-            sections.push(contributed);
-            log.warn(`No resolver registered for source type "${type}"`);
-        }
-        else {
-            try {
-                const content = await resolver(context, params);
-                if (content && content.trim()) {
-                    contributed = content;
-                    sections.push(contributed);
-                }
-            }
-            catch (err) {
-                const message = err.message;
-                contributed = `<!-- Assembly: failed to resolve "${ref}": ${message} -->`;
-                sections.push(contributed);
-                log.warn(`Failed to resolve source "${ref}": ${message}`);
-            }
-        }
-        const charCount = contributed.length;
-        manifest.push({
-            sourceRef: ref,
-            ordinal,
-            charCount,
-            estimatedTokens: estimateTokens(charCount),
-        });
-        ordinal += 1;
-    }
-    return { content: sections.join('\n\n'), manifest };
-}
-//# sourceMappingURL=assembly-engine.js.map

package/dist/assembly-engine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assembly-engine.js","sourceRoot":"","sources":["../src/assembly-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAiExD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,+BAA+B;AAC/B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;AAE3D,0DAA0D;AAC1D,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,QAAwB;IACjF,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAgB,EAChB,OAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,MAAgB,EAChB,OAAwB;IAExB,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,yEAAyE;YACzE,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5C,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,WAAW,GAAG,uCAAuC,IAAI,OAAO,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,2CAA2C,IAAI,GAAG,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9B,WAAW,GAAG,OAAO,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC;gBACvC,WAAW,GAAG,qCAAqC,GAAG,MAAM,OAAO,MAAM,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,MAAM,OAAO,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,GAAG;YACd,OAAO;YACP,SAAS;YACT,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}

package/dist/assembly-resolvers.d.ts

@@ -1,28 +0,0 @@
-/**
- * FACADE -- the real logic lives elsewhere.
- *
- * Source resolvers for the Context Assembly Engine. This module is a thin
- * compatibility shim:
- *   - Resolver bodies: `resolvers/` (one module per resolver)
- *   - Cross-resolver helpers: `resolvers/shared/`
- *   - Registration: `resolvers/index.ts` `initResolvers()` -- EXPLICIT, not
- *     an import side effect inside the resolver modules themselves.
- *
- * Loading this module calls initResolvers(), so the many existing importers
- * (focus-executor, directive/directive-assembly, audit-phase, tests) keep
- * getting a fully-populated registry. initResolvers() is idempotent and
- * throws if the registry ends up empty -- a broken registration path fails
- * loudly instead of silently assembling prompts with missing sections.
- * Daemon startup additionally calls initResolvers() in FocusEngine.init and
- * logs the registered keys.
- *
- * The named public surface (helpers + types consumed by other source files
- * and tests) is re-exported from the barrel so existing imports of
- * `assembly-resolvers.js` keep working unchanged:
- *   - values: MAX_DIFF_BYTES, getGitDiff, CRT_DUMP_BUDGET_CHARS,
- *     renderRealityTreeDump, FOCUS_REALITY_TREE_EMPTY_STATE
- *   - types: RealityTreeRow, RealityTreeListResponse, RealityNodeRow,
- *     RealityEdgeRow, NodeListResponse, EdgeListResponse
- */
-export * from './resolvers/index.js';
-//# sourceMappingURL=assembly-resolvers.d.ts.map

package/dist/assembly-resolvers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assembly-resolvers.d.ts","sourceRoot":"","sources":["../src/assembly-resolvers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,cAAc,sBAAsB,CAAC"}

package/dist/assembly-resolvers.js

@@ -1,30 +0,0 @@
-/**
- * FACADE -- the real logic lives elsewhere.
- *
- * Source resolvers for the Context Assembly Engine. This module is a thin
- * compatibility shim:
- *   - Resolver bodies: `resolvers/` (one module per resolver)
- *   - Cross-resolver helpers: `resolvers/shared/`
- *   - Registration: `resolvers/index.ts` `initResolvers()` -- EXPLICIT, not
- *     an import side effect inside the resolver modules themselves.
- *
- * Loading this module calls initResolvers(), so the many existing importers
- * (focus-executor, directive/directive-assembly, audit-phase, tests) keep
- * getting a fully-populated registry. initResolvers() is idempotent and
- * throws if the registry ends up empty -- a broken registration path fails
- * loudly instead of silently assembling prompts with missing sections.
- * Daemon startup additionally calls initResolvers() in FocusEngine.init and
- * logs the registered keys.
- *
- * The named public surface (helpers + types consumed by other source files
- * and tests) is re-exported from the barrel so existing imports of
- * `assembly-resolvers.js` keep working unchanged:
- *   - values: MAX_DIFF_BYTES, getGitDiff, CRT_DUMP_BUDGET_CHARS,
- *     renderRealityTreeDump, FOCUS_REALITY_TREE_EMPTY_STATE
- *   - types: RealityTreeRow, RealityTreeListResponse, RealityNodeRow,
- *     RealityEdgeRow, NodeListResponse, EdgeListResponse
- */
-import { initResolvers } from './resolvers/index.js';
-initResolvers();
-export * from './resolvers/index.js';
-//# sourceMappingURL=assembly-resolvers.js.map

package/dist/assembly-resolvers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assembly-resolvers.js","sourceRoot":"","sources":["../src/assembly-resolvers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,aAAa,EAAE,CAAC;AAEhB,cAAc,sBAAsB,CAAC"}

package/dist/audit-hooks.d.ts

@@ -1,63 +0,0 @@
-/**
- * Pre-commit hook management for read-only audit sessions.
- *
- * Installs a git pre-commit hook in a worktree that blocks all commits,
- * providing an informative message about the read-only audit mode.
- */
-/**
- * Install a pre-commit hook in a worktree that blocks all commits.
- * Used for read-only audit sessions.
- */
-export declare function installAuditPreCommitHook(worktreePath: string): void;
-/**
- * Write (or merge into) the worktree's `.claude/settings.json` a write-deny
- * overlay so a read-only audit team physically cannot Write/Edit or run
- * write-shaped Bash.
- *
- * The daemon spawns agents with `--dangerously-skip-permissions
- * --setting-sources project,local`, which reads the worktree's
- * `.claude/settings.json` (project source). Two properties make this deny
- * overlay the tool-layer enforcement of read-only mode:
- *   - `--dangerously-skip-permissions` only auto-approves the *ask* tier;
- *     explicit `permissions.deny` entries are still enforced.
- *   - Crucially, `deny` is honored even in an UNTRUSTED worktree -- the case
- *     that actually matters, because a daemon-created worktree is a fresh path
- *     and untrusted by default. In an untrusted worktree `permissions.allow` is
- *     DISCARDED ("this workspace has not been trusted"), so it would be wrong to
- *     assume `deny` shares that fate: `deny` is a restriction, not a grant, so
- *     honoring it from an untrusted project is safe, and Claude Code does.
- *
- * This is not assumed -- it is verified. See
- * `__tests__/read-only-deny-enforcement-evidence.test.ts` for the reproduction
- * (untrusted worktree + deny overlay -> the Write tool is removed from the
- * session and no file is written; the same untrusted worktree WITHOUT deny ->
- * Write is available and succeeds while the allow list is ignored), measured
- * against Claude Code 2.1.221 on 2026-08-04. Re-run that reproduction when
- * bumping the Claude CLI.
- *
- * The pre-commit hook (installAuditPreCommitHook) and the completion-side
- * revert are retained as defense-in-depth ON TOP of this tool-layer guard --
- * not as the only guards.
- *
- * Idempotent: re-running merges the deny list, deduplicated, producing no diff.
- * MUST only be called for read-only focuses -- a writable focus's settings
- * must never carry a `deny` key.
- */
-export declare function writeReadOnlyDenyOverlay(worktreePath: string): void;
-/**
- * Write Codex's read-only audit overlay into the worktree-local project config.
- *
- * Codex project config is a durable record for the worktree; spawn-time `-c`
- * overrides still select `default_permissions="telora_read_only"` so read-only
- * enforcement does not depend on project trust. The profile itself is kept here
- * for parity, inspection, and trusted-project runs.
- */
-export declare function writeCodexReadOnlyOverlay(worktreePath: string): void;
-/**
- * Install all read-only audit enforcement in a worktree: the commit-blocking
- * pre-commit hook, Claude's write-deny settings overlay, and Codex's
- * read-only permission profile. Single entry point so every read-only
- * worktree-setup site gets identical coverage.
- */
-export declare function installReadOnlyAuditGuards(worktreePath: string): void;
-//# sourceMappingURL=audit-hooks.d.ts.map

package/dist/audit-hooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-hooks.d.ts","sourceRoot":"","sources":["../src/audit-hooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAiCpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CA0BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CA8BpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAIrE"}

package/dist/audit-hooks.js

@@ -1,154 +0,0 @@
-/**
- * Pre-commit hook management for read-only audit sessions.
- *
- * Installs a git pre-commit hook in a worktree that blocks all commits,
- * providing an informative message about the read-only audit mode.
- */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { runGitSync } from './git/index.js';
-import { buildClaudeSettings, mergeClaudeSettings } from './templates/claude-settings.js';
-import { ensureCodexConfigIgnoredInWorktree } from './worktree.js';
-import { createLogger } from './log.js';
-const log = createLogger({ module: 'audit-hooks' });
-const CODEX_READ_ONLY_BLOCK_START = '# BEGIN TELORA CODEX READ-ONLY';
-const CODEX_READ_ONLY_BLOCK_END = '# END TELORA CODEX READ-ONLY';
-/**
- * Install a pre-commit hook in a worktree that blocks all commits.
- * Used for read-only audit sessions.
- */
-export function installAuditPreCommitHook(worktreePath) {
-    // Create a custom hooks directory inside the worktree
-    const hooksDir = join(worktreePath, '.telora-hooks');
-    if (!existsSync(hooksDir)) {
-        mkdirSync(hooksDir, { recursive: true });
-    }
-    const hookScript = [
-        '#!/bin/bash',
-        'echo ""',
-        'echo "========================================================"',
-        'echo "  READ-ONLY AUDIT SESSION"',
-        'echo "========================================================"',
-        'echo ""',
-        'echo "  Commits are blocked. This session operates in"',
-        'echo "  read-only audit mode by design."',
-        'echo ""',
-        'echo "  Your job is discovery only:"',
-        'echo "  - Log findings as issues via MCP tools"',
-        'echo "  - Create remediation deliveries for fixes"',
-        'echo "  - Do NOT modify or commit code changes"',
-        'echo ""',
-        'echo "========================================================"',
-        'echo ""',
-        'exit 1',
-        '',
-    ].join('\n');
-    const hookPath = join(hooksDir, 'pre-commit');
-    writeFileSync(hookPath, hookScript, { mode: 0o755 });
-    // Point this worktree's git config at the custom hooks directory
-    runGitSync(['config', 'core.hooksPath', hooksDir], worktreePath);
-}
-/**
- * Write (or merge into) the worktree's `.claude/settings.json` a write-deny
- * overlay so a read-only audit team physically cannot Write/Edit or run
- * write-shaped Bash.
- *
- * The daemon spawns agents with `--dangerously-skip-permissions
- * --setting-sources project,local`, which reads the worktree's
- * `.claude/settings.json` (project source). Two properties make this deny
- * overlay the tool-layer enforcement of read-only mode:
- *   - `--dangerously-skip-permissions` only auto-approves the *ask* tier;
- *     explicit `permissions.deny` entries are still enforced.
- *   - Crucially, `deny` is honored even in an UNTRUSTED worktree -- the case
- *     that actually matters, because a daemon-created worktree is a fresh path
- *     and untrusted by default. In an untrusted worktree `permissions.allow` is
- *     DISCARDED ("this workspace has not been trusted"), so it would be wrong to
- *     assume `deny` shares that fate: `deny` is a restriction, not a grant, so
- *     honoring it from an untrusted project is safe, and Claude Code does.
- *
- * This is not assumed -- it is verified. See
- * `__tests__/read-only-deny-enforcement-evidence.test.ts` for the reproduction
- * (untrusted worktree + deny overlay -> the Write tool is removed from the
- * session and no file is written; the same untrusted worktree WITHOUT deny ->
- * Write is available and succeeds while the allow list is ignored), measured
- * against Claude Code 2.1.221 on 2026-08-04. Re-run that reproduction when
- * bumping the Claude CLI.
- *
- * The pre-commit hook (installAuditPreCommitHook) and the completion-side
- * revert are retained as defense-in-depth ON TOP of this tool-layer guard --
- * not as the only guards.
- *
- * Idempotent: re-running merges the deny list, deduplicated, producing no diff.
- * MUST only be called for read-only focuses -- a writable focus's settings
- * must never carry a `deny` key.
- */
-export function writeReadOnlyDenyOverlay(worktreePath) {
-    const dir = join(worktreePath, '.claude');
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    const settingsPath = join(dir, 'settings.json');
-    let existing = null;
-    if (existsSync(settingsPath)) {
-        try {
-            const parsed = JSON.parse(readFileSync(settingsPath, 'utf-8'));
-            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
-                existing = parsed;
-            }
-        }
-        catch (err) {
-            // Corrupt settings file -- log and overwrite with the deny overlay rather
-            // than leave a read-only worktree without enforcement.
-            log.warn(`[audit-hooks] Existing ${settingsPath} is not valid JSON, overwriting with read-only overlay: ` +
-                `${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    const merged = mergeClaudeSettings(existing, buildClaudeSettings({ readOnly: true }));
-    writeFileSync(settingsPath, JSON.stringify(merged, null, 2) + '\n');
-}
-/**
- * Write Codex's read-only audit overlay into the worktree-local project config.
- *
- * Codex project config is a durable record for the worktree; spawn-time `-c`
- * overrides still select `default_permissions="telora_read_only"` so read-only
- * enforcement does not depend on project trust. The profile itself is kept here
- * for parity, inspection, and trusted-project runs.
- */
-export function writeCodexReadOnlyOverlay(worktreePath) {
-    ensureCodexConfigIgnoredInWorktree(worktreePath);
-    const dir = join(worktreePath, '.codex');
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true, mode: 0o700 });
-    }
-    const configPath = join(dir, 'config.toml');
-    const existing = existsSync(configPath) ? readFileSync(configPath, 'utf-8') : '';
-    const block = [
-        CODEX_READ_ONLY_BLOCK_START,
-        '# Generated by Telora for read-only Codex audit execution.',
-        '# Spawn-time overrides select this permission profile.',
-        '',
-        '[permissions.telora_read_only.filesystem]',
-        '":minimal" = "read"',
-        '":workspace_roots" = { "." = "read" }',
-        '',
-        '[permissions.telora_read_only.network]',
-        'enabled = false',
-        CODEX_READ_ONLY_BLOCK_END,
-    ].join('\n');
-    const markerPattern = new RegExp(`${CODEX_READ_ONLY_BLOCK_START}[\\s\\S]*?${CODEX_READ_ONLY_BLOCK_END}\\n?`, 'm');
-    const withoutOldBlock = existing.replace(markerPattern, '').trimEnd();
-    const separator = withoutOldBlock ? '\n\n' : '';
-    writeFileSync(configPath, `${withoutOldBlock}${separator}${block}\n`, { mode: 0o600 });
-}
-/**
- * Install all read-only audit enforcement in a worktree: the commit-blocking
- * pre-commit hook, Claude's write-deny settings overlay, and Codex's
- * read-only permission profile. Single entry point so every read-only
- * worktree-setup site gets identical coverage.
- */
-export function installReadOnlyAuditGuards(worktreePath) {
-    installAuditPreCommitHook(worktreePath);
-    writeReadOnlyDenyOverlay(worktreePath);
-    writeCodexReadOnlyOverlay(worktreePath);
-}
-//# sourceMappingURL=audit-hooks.js.map

package/dist/audit-hooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-hooks.js","sourceRoot":"","sources":["../src/audit-hooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1F,OAAO,EAAE,kCAAkC,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AACrE,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AAEjE;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,SAAS;QACT,iEAAiE;QACjE,kCAAkC;QAClC,iEAAiE;QACjE,SAAS;QACT,wDAAwD;QACxD,0CAA0C;QAC1C,SAAS;QACT,sCAAsC;QACtC,iDAAiD;QACjD,oDAAoD;QACpD,iDAAiD;QACjD,SAAS;QACT,iEAAiE;QACjE,SAAS;QACT,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,iEAAiE;IACjE,UAAU,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAEhD,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,QAAQ,GAAG,MAAiC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,uDAAuD;YACvD,GAAG,CAAC,IAAI,CACN,0BAA0B,YAAY,0DAA0D;gBAC9F,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,kCAAkC,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,4DAA4D;QAC5D,wDAAwD;QACxD,EAAE;QACF,2CAA2C;QAC3C,qBAAqB;QACrB,uCAAuC;QACvC,EAAE;QACF,wCAAwC;QACxC,iBAAiB;QACjB,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,GAAG,2BAA2B,aAAa,yBAAyB,MAAM,EAC1E,GAAG,CACJ,CAAC;IACF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,aAAa,CAAC,UAAU,EAAE,GAAG,eAAe,GAAG,SAAS,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACxC,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACvC,yBAAyB,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC"}