@telora/daemon 0.21.26 → 0.21.82

package/dist/reality-pole-capture.js

@@ -1,114 +0,0 @@
-/**
- * Reality-pole capture: the daemon-lifecycle binding that POPULATES each
- * assertional loop item's durable code anchor from a completed focus's git
- * footprint. This is the production caller of reality-pole.ts -- without it the
- * loop_context_code_anchor table stays empty and the context-lock tripwire
- * (churn + embedding-distance) has no inputs (churned always false, distance
- * always NULL).
- *
- * Runs on focus-team completion (after the status advance, before the merge),
- * once per focus:
- *   1. footprint = files the focus branch changed vs the integration base
- *      (getDeliveryFootprint over the focus worktree -- the focus's cumulative,
- *      DURABLE footprint, not a single transient delivery).
- *   2. for each assertional loop item on the focus (documents + answers), upsert
- *      its anchor to that footprint and embed it edge-side (writeRealityAnchor).
- *
- * The footprint is the focus's whole change set: a focus-level loop document is
- * "about" the code its focus touched, so every focus item anchors to the same
- * durable file set for v1. Per-delivery sub-scoping is a later refinement (the
- * scope granularity is part of the still-firming cadence design).
- *
- * Embeddings measure ABOUTNESS not agreement -- the reality pole is a distance
- * reference for the drift tripwire, never a truth oracle. FAIL-OPEN throughout:
- * a missing anchor only degrades the churn-clock signal; it never wedges
- * completion.
- */
-import { getDeliveryFootprint, writeRealityAnchor, } from './reality-pole.js';
-import { callApi as defaultCallApi } from './queries/shared.js';
-import { createLogger } from './log.js';
-const log = createLogger({ module: 'reality-pole' });
-/**
- * Default enumeration of a focus's assertional loop items: documents on the
- * focus + answers to the focus's questions. Reuses the existing loop list edge
- * actions (no new endpoint). Fail-open per source -- a failed list yields fewer
- * anchors, never a thrown completion.
- */
-async function listFocusAssertionalItems(focusId) {
-    const targets = [];
-    try {
-        const docs = await defaultCallApi('loop_document_list', {
-            entityType: 'focus',
-            entityId: focusId,
-            detail: 'titles',
-            limit: 500,
-        });
-        for (const d of docs.items ?? [])
-            targets.push({ itemType: 'document', itemId: d.id });
-    }
-    catch (err) {
-        log.warn(`[reality-pole] list documents failed for focus ${focusId.slice(0, 8)}: ` +
-            `${err instanceof Error ? err.message : String(err)}`);
-    }
-    try {
-        const questions = await defaultCallApi('loop_question_list', {
-            entityType: 'focus',
-            entityId: focusId,
-            detail: 'titles',
-            limit: 500,
-        });
-        for (const q of questions.items ?? []) {
-            try {
-                const ans = await defaultCallApi('loop_answer_get', {
-                    questionId: q.id,
-                });
-                if (ans.answer?.id)
-                    targets.push({ itemType: 'answer', itemId: ans.answer.id });
-            }
-            catch (err) {
-                // No answer for this question -- skip.
-                log.debug('No answer for this question -- skip', { error: String(err?.message ?? err) });
-            }
-        }
-    }
-    catch (err) {
-        log.warn(`[reality-pole] list answers failed for focus ${focusId.slice(0, 8)}: ` +
-            `${err instanceof Error ? err.message : String(err)}`);
-    }
-    return targets;
-}
-/**
- * Capture the focus's reality poles: anchor every assertional loop item to the
- * focus's durable code footprint and embed it. Returns counts for logging.
- *
- * Skips entirely when the footprint is empty (no diff vs base -> nothing durable
- * to anchor to). Each per-item write is fail-open (writeRealityAnchor never
- * throws), so one bad item never aborts the rest.
- */
-export async function captureRealityPoles(args, deps = {}) {
-    const getFootprint = deps.getFootprint ?? getDeliveryFootprint;
-    const listItems = deps.listItems ?? listFocusAssertionalItems;
-    const writeAnchor = deps.writeAnchor ?? writeRealityAnchor;
-    const files = getFootprint(args.worktreePath, args.baseBranch);
-    if (files.length === 0) {
-        return { fileCount: 0, itemCount: 0, anchored: 0 };
-    }
-    const items = await listItems(args.focusId);
-    let anchored = 0;
-    for (const item of items) {
-        const res = await writeAnchor({
-            organizationId: args.organizationId,
-            itemType: item.itemType,
-            itemId: item.itemId,
-            files,
-        });
-        if (res.anchorId)
-            anchored++;
-    }
-    if (items.length > 0) {
-        log.info(`[reality-pole] Focus ${args.focusId.slice(0, 8)}: anchored ${anchored}/${items.length} ` +
-            `loop items to ${files.length} footprint file(s).`);
-    }
-    return { fileCount: files.length, itemCount: items.length, anchored };
-}
-//# sourceMappingURL=reality-pole-capture.js.map

package/dist/reality-pole-capture.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reality-pole-capture.js","sourceRoot":"","sources":["../src/reality-pole-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAyCrD;;;;;GAKG;AACH,KAAK,UAAU,yBAAyB,CAAC,OAAe;IACtD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAqB,oBAAoB,EAAE;YAC1E,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,kDAAkD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;YACvE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,cAAc,CAAqB,oBAAoB,EAAE;YAC/E,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,cAAc,CAA2B,iBAAiB,EAAE;oBAC5E,UAAU,EAAE,CAAC,CAAC,EAAE;iBACjB,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACrB,uCAAuC;gBAC/B,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,gDAAgD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;YACrE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA6B,EAC7B,OAAgC,EAAE;IAElC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,yBAAyB,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAE3D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,QAAQ;YAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CACN,wBAAwB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG;YACvF,iBAAiB,KAAK,CAAC,MAAM,qBAAqB,CACrD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxE,CAAC"}

package/dist/reality-pole.d.ts

@@ -1,64 +0,0 @@
-/**
- * Reality pole: a loop-context item's anchor to the DURABLE CODE STRUCTURE it
- * touches (the files a delivery changed) plus an embedding of that footprint.
- *
- * Embeddings here measure ABOUTNESS, not agreement: the reality pole is the
- * code an item is about, used to compute topical DISTANCE (a drift tripwire),
- * never a truth oracle. Two items pointing at the same files are "near" in this
- * space whether or not they agree.
- *
- * The daemon has NO direct Supabase client and NO access to the embedding API
- * key. So this module computes the git footprint locally and hands it to ONE
- * edge action (daemon_loop_anchor_upsert) that upserts the anchor, embeds the
- * footprint edge-side, and stores the vector. The daemon NEVER embeds directly.
- */
-import { callApi as defaultCallApi } from './queries/shared.js';
-/** A loop-context item type that can carry a reality anchor. */
-export type AnchorItemType = 'document' | 'answer';
-/**
- * Build the embed input string from a footprint's file paths.
- *
- * PURE -- no IO. Deterministic: the paths are de-duplicated, sorted, and
- * newline-joined so the same footprint always yields the same input (and thus
- * the same reality-pole embedding). Capped to a sane length.
- *
- * The embedding of this string is the reality pole -- a measure of what code
- * the item is ABOUT, for distance/drift, not a measure of correctness.
- */
-export declare function footprintToEmbedInput(files: string[]): string;
-/**
- * Get the changed files on the delivery branch vs the base branch.
- *
- * Resolves the delivery's diff range through the merge-aware seam
- * (resolveDeliveryDiffRange -- base...HEAD while ahead, else the recorded/searched
- * merge range) and runs `git diff --name-only <range>` in the worktree, so a
- * branch already merged back still reports its footprint. Returns [] on any git
- * failure or when no attributable range resolves -- NEVER throws.
- */
-export declare function getDeliveryFootprint(worktreePath: string, baseBranch: string): string[];
-export interface WriteRealityAnchorArgs {
-    organizationId: string;
-    itemType: AnchorItemType;
-    itemId: string;
-    files: string[];
-    sourceDeliveryId?: string;
-}
-export interface WriteRealityAnchorOptions {
-    /** Injectable API caller (for tests). Defaults to the real `callApi`. */
-    callApi?: typeof defaultCallApi;
-}
-export interface WriteRealityAnchorResult {
-    anchorId: string | null;
-    embedded: boolean;
-}
-/**
- * Write a loop-context item's reality anchor through the edge action.
- *
- * Builds the embed input from the footprint (footprintToEmbedInput) and calls
- * daemon_loop_anchor_upsert, which upserts the anchor row AND embeds the
- * footprint edge-side. Fail-open: on ANY error returns
- * { anchorId: null, embedded: false } rather than throwing -- a missing anchor
- * degrades the churn-clock signal, it never wedges the caller.
- */
-export declare function writeRealityAnchor(args: WriteRealityAnchorArgs, opts?: WriteRealityAnchorOptions): Promise<WriteRealityAnchorResult>;
-//# sourceMappingURL=reality-pole.d.ts.map

package/dist/reality-pole.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reality-pole.d.ts","sourceRoot":"","sources":["../src/reality-pole.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAMhE,gEAAgE;AAChE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AASnD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAa7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAmBvF;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAWD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,wBAAwB,CAAC,CAqBnC"}

package/dist/reality-pole.js

@@ -1,101 +0,0 @@
-/**
- * Reality pole: a loop-context item's anchor to the DURABLE CODE STRUCTURE it
- * touches (the files a delivery changed) plus an embedding of that footprint.
- *
- * Embeddings here measure ABOUTNESS, not agreement: the reality pole is the
- * code an item is about, used to compute topical DISTANCE (a drift tripwire),
- * never a truth oracle. Two items pointing at the same files are "near" in this
- * space whether or not they agree.
- *
- * The daemon has NO direct Supabase client and NO access to the embedding API
- * key. So this module computes the git footprint locally and hands it to ONE
- * edge action (daemon_loop_anchor_upsert) that upserts the anchor, embeds the
- * footprint edge-side, and stores the vector. The daemon NEVER embeds directly.
- */
-import { runGitSync } from './git/index.js';
-import { resolveDeliveryDiffRange } from './resolvers/shared/git-diff.js';
-import { callApi as defaultCallApi } from './queries/shared.js';
-import { createLogger } from './log.js';
-const log = createLogger({ module: 'reality-pole' });
-/**
- * Cap on the embed input length. The footprint is file paths, not file
- * contents, so this is generous -- it only guards against a pathological
- * delivery touching thousands of files.
- */
-const EMBED_INPUT_CHAR_LIMIT = 20000;
-/**
- * Build the embed input string from a footprint's file paths.
- *
- * PURE -- no IO. Deterministic: the paths are de-duplicated, sorted, and
- * newline-joined so the same footprint always yields the same input (and thus
- * the same reality-pole embedding). Capped to a sane length.
- *
- * The embedding of this string is the reality pole -- a measure of what code
- * the item is ABOUT, for distance/drift, not a measure of correctness.
- */
-export function footprintToEmbedInput(files) {
-    const unique = Array.from(new Set(files
-        .filter((f) => typeof f === 'string')
-        .map((f) => f.trim())
-        .filter((f) => f.length > 0))).sort();
-    const joined = unique.join('\n');
-    return joined.length <= EMBED_INPUT_CHAR_LIMIT
-        ? joined
-        : joined.slice(0, EMBED_INPUT_CHAR_LIMIT);
-}
-/**
- * Get the changed files on the delivery branch vs the base branch.
- *
- * Resolves the delivery's diff range through the merge-aware seam
- * (resolveDeliveryDiffRange -- base...HEAD while ahead, else the recorded/searched
- * merge range) and runs `git diff --name-only <range>` in the worktree, so a
- * branch already merged back still reports its footprint. Returns [] on any git
- * failure or when no attributable range resolves -- NEVER throws.
- */
-export function getDeliveryFootprint(worktreePath, baseBranch) {
-    // Merge-aware seam: resolve the range that contains the delivery's work so a
-    // focus branch already merged back (level with base) still reports its
-    // footprint rather than an empty base...HEAD name-only diff.
-    const range = resolveDeliveryDiffRange(worktreePath, baseBranch);
-    if (!range)
-        return [];
-    const result = runGitSync(['diff', '--name-only', range], worktreePath, { timeoutMs: 30_000 });
-    if (!result.success) {
-        log.warn(`getDeliveryFootprint failed: ${result.error}`);
-        return [];
-    }
-    return result.output
-        .split('\n')
-        .map((line) => line.trim())
-        .filter((line) => line.length > 0);
-}
-/**
- * Write a loop-context item's reality anchor through the edge action.
- *
- * Builds the embed input from the footprint (footprintToEmbedInput) and calls
- * daemon_loop_anchor_upsert, which upserts the anchor row AND embeds the
- * footprint edge-side. Fail-open: on ANY error returns
- * { anchorId: null, embedded: false } rather than throwing -- a missing anchor
- * degrades the churn-clock signal, it never wedges the caller.
- */
-export async function writeRealityAnchor(args, opts = {}) {
-    const call = opts.callApi ?? defaultCallApi;
-    try {
-        const result = await call('daemon_loop_anchor_upsert', {
-            itemType: args.itemType,
-            itemId: args.itemId,
-            files: args.files,
-            sourceDeliveryId: args.sourceDeliveryId ?? null,
-            embedText: footprintToEmbedInput(args.files),
-        });
-        return {
-            anchorId: typeof result.anchorId === 'string' ? result.anchorId : null,
-            embedded: result.embedded === true,
-        };
-    }
-    catch (err) {
-        log.warn(`[reality-pole] writeRealityAnchor failed for ${args.itemType} ${args.itemId}:`, err instanceof Error ? err.message : String(err));
-        return { anchorId: null, embedded: false };
-    }
-}
-//# sourceMappingURL=reality-pole.js.map

package/dist/reality-pole.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reality-pole.js","sourceRoot":"","sources":["../src/reality-pole.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAMrD;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAe;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CACL,KAAK;SACF,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CACF,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,IAAI,sBAAsB;QAC5C,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,UAAkB;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,KAAK,GAAG,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CACvB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,EAC9B,YAAY,EACZ,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AA6BD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA4B,EAC5B,OAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAuB,2BAA2B,EAAE;YAC3E,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;YAC/C,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7C,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACtE,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;SACnC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,gDAAgD,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,EAC/E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/reality-writeback.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reality-writeback.d.ts","sourceRoot":"","sources":["../src/reality-writeback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;yCAEyC;AACzC,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,uBAAuB,GAAG,WAAW,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC9C;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,uBAAuB,CAAC;IACxC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAWD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,EAAE,CAyE9E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAEjE;AAqBD;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,oBAAoB,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACtD,wDAAwD;IACxD,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,kBAAkB,CAAC;IACjC,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE;QAChB,gFAAgF;QAChF,MAAM,EAAE,IAAI,CAAC;QACb,uDAAuD;QACvD,YAAY,EAAE,MAAM,CAAC;QACrB,wFAAwF;QACxF,oBAAoB,EAAE,uBAAuB,GAAG,WAAW,CAAC;KAC7D,CAAC;CACH;AAOD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,IAAI,CA2B/E;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,WAAW,EAAE,GAC5B,mBAAmB,EAAE,CAOvB"}

package/dist/reality-writeback.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reality-writeback.js","sourceRoot":"","sources":["../src/reality-writeback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAkIH;;;GAGG;AACH,MAAM,yBAAyB,GAC7B,yFAAyF,CAAC;AAC5F,MAAM,wBAAwB,GAC5B,iFAAiF,CAAC;AAEpF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAE5C,MAAM,aAAa,GAAG,CAAC,GAAkB,EAAE,IAAyB,EAAiB,EAAE;QACrF,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACzC,CAAC;QACD,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,uEAAuE;QACvE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,aAAa,CAClB;gBACE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,WAAW;gBAC3B,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,IAAI,wBAAwB;aAC1E,EACD,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC;QAEvD,kEAAkE;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,aAAa,CAClB;gBACE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,uBAAuB;gBACvC,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,IAAI,yBAAyB;aAC3E,EACD,IAAI,CACL,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,IAAI,IAAI,CAAC,2BAA2B,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,aAAa,CAClB;gBACE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,uBAAuB;gBACvC,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,IAAI,yBAAyB;aAC3E,EACD,IAAI,CACL,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;QAC5E,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7E,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,2EAA2E;YAC3E,6EAA6E;YAC7E,uEAAuE;YACvE,0EAA0E;YAC1E,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAyB;IACtD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC;AACjF,CAAC;AA4ED,MAAM,2BAA2B,GAC/B,4EAA4E,CAAC;AAC/E,MAAM,6BAA6B,GACjC,4EAA4E,CAAC;AAE/E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAiB;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACjD,IAAI,cAAc,KAAK,uBAAuB,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACjF,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC9E,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,CAAC,CAAC,2BAA2B,CAAC;IAClC,MAAM,UAAU,GACd,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC,sBAAsB;QAC7B,CAAC,CAAC,6BAA6B,CAAC;IAEpC,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,kBAAkB;QAChC,aAAa,EAAE,KAAK;QACpB,kBAAkB,EAAE,UAAU;QAC9B,gBAAgB,EAAE;YAChB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,oBAAoB,EAAE,cAAc;SACrC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA6B;IAE7B,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/resolver-dispatch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolver-dispatch.d.ts","sourceRoot":"","sources":["../src/resolver-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAEvF;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD;AAED,wDAAwD;AACxD,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,WAAW,CAAC;AAE/D,uEAAuE;AACvE,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE7E,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,QAAQ,EAAE,gBAAgB,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAyBnF"}

package/dist/resolver-dispatch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolver-dispatch.js","sourceRoot":"","sources":["../src/resolver-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IAC/D,OAAO,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AAClD,CAAC;AAoDD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAkB;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,sEAAsE;IACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QACtD,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,IAAI,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtD,CAAC;IAED,iEAAiE;IACjE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC9D,CAAC"}

package/dist/resolver-reach.d.ts

@@ -1,192 +0,0 @@
-/**
- * Resolver reach is BOUNDED up front, and its out-of-worktree actions are ON
- * THE RECORD. The negative branch of the resolver-dispatch seam
- * (resolver-dispatch.ts).
- *
- * The resolver only closes anything if it holds reach the sandboxed worktree
- * agent lacks (spawn-sandbox.ts documents that asymmetry: a git worktree bounds
- * the branch but NOT the OS -- credentials to other machines, sibling repos, the
- * operator's home are all reachable). That same reach, granted without a
- * declared bound, is unattended credentialed action on hosts with nothing
- * reviewing what it did: a resolver's host actions produce no diff and pass no
- * review gate, unlike code changes. Today's paste-into-Claude-Code workaround at
- * least happens with a human watching; removing the human removes that too.
- *
- * Two invariants, both provable without a live host:
- *
- *  1. REACH IS DECLARED IN ADVANCE, PER BLOCKAGE CLASS, and FAIL-CLOSED. A
- *     resolver acts only within a bound declared before it runs ("this class may
- *     restart a container on host H"); an action outside that bound is REFUSED,
- *     not permitted-and-logged. An unrecognized or undeclared blockage class
- *     yields NO reach -- never a default to broad reach. This follows the
- *     spawn-sandbox.ts shape: explicit, fail-closed, declared rather than
- *     ambient. Reach is a property of the declared grant, never inferred from
- *     what an attempt happened to touch (a reach granted by outcome is not a
- *     bound).
- *
- *  2. EVERY OUT-OF-WORKTREE ACTION IS RECORDED, durably and credential-free, on
- *     the success, failure, AND throwing paths -- a failed unattended action is
- *     exactly the one that must not vanish. The record identifies the blockage,
- *     the action attempted, and its outcome. The sink is injectable (tests
- *     capture records without a live host); the default writes a structured line
- *     to the canonical daemon log, which is durable and human-reviewable.
- *
- * This module is NOT a second resolver and does not re-open the dispatch design.
- * It supplies the reach `bound` that feeds `BlockageResolver.reach` and wraps a
- * single host action so it is authorized against the bound and recorded --
- * composing with dispatchBlockage, not rewriting it.
- *
- * @module resolver-reach
- */
-/**
- * A blockage class -- the unit at which reach is declared in advance. Stable,
- * coarse identifiers (e.g. 'dirty_worktree', 'restart_container'), NOT
- * per-incident strings: the grant is authored against the class, so the class
- * must be knowable before any specific blockage occurs.
- */
-export type BlockageClass = string;
-/**
- * One host action a resolver may attempt OUTSIDE the worktree. `kind` and
- * `target` are what the bound is checked against; `summary` is the
- * human-readable line that lands in the record.
- */
-export interface ResolverAction {
-    /** The blockage class this action serves (checked against its grant). */
-    blockageClass: BlockageClass;
-    /** Stable action-kind id (e.g. 'restart_container'), matched against the grant. */
-    kind: string;
-    /** The host/resource the action touches (e.g. 'host-H'), matched against the grant. */
-    target: string;
-    /** Human-readable description of what will be attempted. Author-controlled; never carry credentials here. */
-    summary: string;
-}
-/**
- * A DECLARED grant: exactly what a blockage class is permitted to do, authored
- * in advance. An action is authorized only if BOTH its kind and its target are
- * listed. An empty `allowedActionKinds` or `allowedTargets` therefore grants no
- * reach at all -- the fail-closed floor.
- */
-export interface ReachGrant {
-    blockageClass: BlockageClass;
-    /** Action kinds this class may attempt. Empty => no reach. */
-    allowedActionKinds: readonly string[];
-    /** Targets (hosts/resources) this class may touch. Empty => no reach. */
-    allowedTargets: readonly string[];
-}
-/** The declared grants, keyed by blockage class. Injectable so tests supply their own. */
-export type ReachRegistry = ReadonlyMap<BlockageClass, ReachGrant>;
-/** The resolved reach bound for one blockage class. */
-export interface ReachBound {
-    blockageClass: BlockageClass;
-    /** True only when a grant is declared for this class with non-empty allowed kinds AND targets. */
-    reach: boolean;
-    /** The declared grant when reach is real; null when the class is undeclared or empty. */
-    grant: ReachGrant | null;
-}
-/** The decision of authorizing one action against a bound. */
-export type ReachDecision = {
-    authorized: true;
-} | {
-    authorized: false;
-    reason: string;
-};
-/**
- * Resolve a blockage class to its declared reach bound. FAIL-CLOSED: an
- * unrecognized/undeclared class -- or a declared grant that permits no kind or
- * no target -- yields `reach: false` and `grant: null`. There is no path that
- * defaults an unknown class to broad reach.
- */
-export declare function resolveReachBound(blockageClass: BlockageClass, registry: ReachRegistry): ReachBound;
-/**
- * Authorize a single action against a resolved bound. REFUSES (does not
- * permit-and-log) when the bound has no reach, the action serves a different
- * class than the bound, or the action's kind/target is outside the declared
- * grant. A refusal means the action must NOT run.
- */
-export declare function authorizeAction(bound: ReachBound, action: ResolverAction): ReachDecision;
-/** The terminal outcome of one recorded resolver action. */
-export type ResolverActionOutcome = 'success' | 'failure' | 'refused';
-/**
- * A durable record of one out-of-worktree resolver action. Carries NO
- * credential material by construction: only the blockage class, the action's
- * kind/target/summary, the outcome, and a REDACTED free-text detail.
- */
-export interface ResolverActionRecord {
-    blockageClass: BlockageClass;
-    action: {
-        kind: string;
-        target: string;
-        summary: string;
-    };
-    outcome: ResolverActionOutcome;
-    /** Redacted free-text detail (failure reason / refusal reason). Never raw secrets. */
-    detail?: string;
-    /** ISO timestamp the record was written. */
-    recordedAt: string;
-}
-/**
- * The injectable record sink. Called on EVERY path -- success, failure,
- * refusal, and throw. Tests supply a capturing sink; the default writes to the
- * canonical daemon log. May be async; the runner awaits it.
- */
-export type ResolverActionRecorder = (record: ResolverActionRecord) => void | Promise<void>;
-/**
- * The default production recorder: a structured line in the canonical daemon
- * log (~/.telora/daemon.log) -- durable, rotated, and human-reviewable after
- * the fact, which is precisely what a diff-less host action otherwise lacks.
- * The record's `detail` is already redacted before it arrives here, so this
- * sink cannot leak credentials.
- */
-export declare const logResolverAction: ResolverActionRecorder;
-/**
- * Redact credential-shaped material from free-text before it enters a record.
- * A record a human reviews must never itself become a credential leak, so this
- * scrubs bearer/authorization values, `key=value` pairs whose key names a
- * secret, and long opaque token blobs. Conservative and lossy on purpose --
- * over-redaction is safe; under-redaction is the failure.
- */
-export declare function redactResolverDetail(text: string): string;
-/** What a bounded action's `execute` reports back. */
-export interface ResolverExecuteResult {
-    /** True when the host action succeeded. */
-    ok: boolean;
-    /** Free-text detail (never pre-redacted -- the runner redacts it). */
-    detail?: string;
-}
-/** The terminal outcome of {@link runReachBoundedAction}. */
-export type ReachBoundedOutcome = {
-    outcome: 'success';
-} | {
-    outcome: 'failure';
-    detail?: string;
-} | {
-    outcome: 'refused';
-    reason: string;
-};
-/** Collaborators for {@link runReachBoundedAction}; all injectable for tests. */
-export interface ReachBoundedDeps {
-    /** The declared grants. Reach is resolved from here BEFORE the action runs. */
-    registry: ReachRegistry;
-    /** The record sink, called on every path. Defaults to {@link logResolverAction}. */
-    record?: ResolverActionRecorder;
-    /** Detail redactor. Defaults to {@link redactResolverDetail}. */
-    redact?: (text: string) => string;
-    /** Clock for `recordedAt`. Defaults to ISO-now. */
-    clock?: () => string;
-}
-/**
- * Run one out-of-worktree resolver action within its declared bound, recording
- * every path.
- *
- * Guarantees, all provable without a live host:
- *  - The action is AUTHORIZED against the pre-declared bound FIRST. An action
- *    outside the bound (or under an undeclared class) is REFUSED -- `execute` is
- *    never called -- and the refusal is recorded.
- *  - On execution, `success` or `failure` is recorded from the result.
- *  - If `execute` THROWS, a `failure` record is written (via catch) BEFORE the
- *    error propagates -- the failed unattended action never vanishes.
- *  - The recorded `detail` is always redacted, so no credential material enters
- *    the record regardless of the sink.
- */
-export declare function runReachBoundedAction(deps: ReachBoundedDeps, action: ResolverAction, execute: () => Promise<ResolverExecuteResult>): Promise<ReachBoundedOutcome>;
-//# sourceMappingURL=resolver-reach.d.ts.map

package/dist/resolver-reach.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolver-reach.d.ts","sourceRoot":"","sources":["../src/resolver-reach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAMH;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,aAAa,EAAE,aAAa,CAAC;IAC7B,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,6GAA6G;IAC7G,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,8DAA8D;IAC9D,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,yEAAyE;IACzE,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,0FAA0F;AAC1F,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;AAEnE,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,kGAAkG;IAClG,KAAK,EAAE,OAAO,CAAC;IACf,yFAAyF;IACzF,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,MAAM,aAAa,GACrB;IAAE,UAAU,EAAE,IAAI,CAAA;CAAE,GACpB;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,GAAG,UAAU,CAOnG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,GAAG,aAAa,CAiBxF;AAED,4DAA4D;AAC5D,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,OAAO,EAAE,qBAAqB,CAAC;IAC/B,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE5F;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,sBAU/B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWzD;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,2CAA2C;IAC3C,EAAE,EAAE,OAAO,CAAC;IACZ,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,6DAA6D;AAC7D,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,GACtB;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,QAAQ,EAAE,aAAa,CAAC;IACxB,oFAAoF;IACpF,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,iEAAiE;IACjE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,GAC5C,OAAO,CAAC,mBAAmB,CAAC,CAwC9B"}