@telora/daemon 0.22.245 → 0.22.290

package/dist/verify/effect-reconciliation/judge-question.d.ts

@@ -0,0 +1,40 @@
+/** At most this many changed files are listed. */
+export declare const CHANGED_FILES_LISTED_MAX = 2000;
+/** At most this many characters of changed-file list. */
+export declare const CHANGED_FILES_LISTED_MAX_CHARS = 200000;
+/** At most this many diff-stat lines are shown; the summary line always is. */
+export declare const DIFF_STAT_LINES_MAX = 300;
+/** At most this many characters of diff stat. */
+export declare const DIFF_STAT_MAX_CHARS = 60000;
+/** At most this many characters of any one free-text field (range, check output, rationale, citations, a declared statement). */
+export declare const FREE_TEXT_MAX_CHARS = 20000;
+/** The longest declared statement a judge is handed; a longer one is refused whole, never cut. */
+export declare const STATEMENT_MAX_CHARS = 20000;
+/** At most this many characters of reality-tree context (the focus CRT dump an inspection reads). */
+export declare const TREE_CONTEXT_MAX_CHARS = 200000;
+/**
+ * A fingerprint of the question a judge is asked: every named declared statement,
+ * in name order. It moves when any statement is edited, so a hold on a question
+ * too long to hand a judge whole is released by shortening it
+ * (verify/outcome-routing/incurable-model-hold.ts). Pure.
+ */
+export declare function judgedQuestionFingerprint(statements: Record<string, string | null | undefined>): string;
+/**
+ * The first of the named statements that is longer than STATEMENT_MAX_CHARS, with
+ * its size, or null when every one can be handed to the judge whole. Pure.
+ */
+export declare function oversizedStatement(statements: Record<string, string | null | undefined>): {
+    name: string;
+    chars: number;
+    budgetChars: number;
+} | null;
+/** `text` cut to `max` characters, keeping its tail (or head), and saying so. Pure. */
+export declare function boundedText(text: string, max?: number, keep?: 'head' | 'tail'): string;
+/**
+ * The changed files as `- path` lines: as many as fit in both caps, then a line
+ * naming how many more there are and the command that lists them. Pure.
+ */
+export declare function boundedChangedFiles(files: readonly string[], range: string): string;
+/** The diff stat: its first lines within both caps, then the summary line. Pure. */
+export declare function boundedDiffStat(stat: string): string;
+//# sourceMappingURL=judge-question.d.ts.map

package/dist/verify/effect-reconciliation/judge-question.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-question.d.ts","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-question.ts"],"names":[],"mappings":"AA2BA,kDAAkD;AAClD,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAC9C,yDAAyD;AACzD,eAAO,MAAM,8BAA8B,SAAU,CAAC;AACtD,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iDAAiD;AACjD,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,iIAAiI;AACjI,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,qGAAqG;AACrG,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,CAGvG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKrJ;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAA4B,EAAE,IAAI,GAAE,MAAM,GAAG,MAAe,GAAG,MAAM,CAMnH;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAYnF;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAapD"}

package/dist/verify/effect-reconciliation/judge-question.js

@@ -0,0 +1,104 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/effect-reconciliation/judge-question.test.ts,
+//   packages/daemon/src/verify/engine/reconciliation-step.test.ts
+// PINNED-BY-END
+/**
+ * The bounded parts of a verify judge's question: the changed-file list, the
+ * diff stat, the declared statements and every free-text field -- in the system
+ * prompt as in the user message -- each capped in CHARACTERS as well as in
+ * entries or lines. A cap by count alone is not a bound: 814 paths of a few
+ * thousand characters each is a multi-megabyte list. So the whole question the
+ * reconciliation and ai_inspection judges receive stays far inside the input
+ * budget however broad the delivery, and whatever is not listed is named, with
+ * the git command that lists it from the pinned checkout.
+ *
+ * The QUESTION itself is never cut: a declared future (or an inspection's FRT,
+ * CRT or obstacle statement) is handed to the judge whole or not at all. One
+ * longer than STATEMENT_MAX_CHARS is refused as an input too large for the judge
+ * (`oversizedStatement`) -- the typed incurable hold, waiting for new input --
+ * because a qualifier in a cut tail would have the judge answer a weaker
+ * question, and nothing in the checkout would bring the missing clause back.
+ *
+ * @module verify/effect-reconciliation/judge-question
+ */
+import { createHash } from 'node:crypto';
+/** At most this many changed files are listed. */
+export const CHANGED_FILES_LISTED_MAX = 2_000;
+/** At most this many characters of changed-file list. */
+export const CHANGED_FILES_LISTED_MAX_CHARS = 200_000;
+/** At most this many diff-stat lines are shown; the summary line always is. */
+export const DIFF_STAT_LINES_MAX = 300;
+/** At most this many characters of diff stat. */
+export const DIFF_STAT_MAX_CHARS = 60_000;
+/** At most this many characters of any one free-text field (range, check output, rationale, citations, a declared statement). */
+export const FREE_TEXT_MAX_CHARS = 20_000;
+/** The longest declared statement a judge is handed; a longer one is refused whole, never cut. */
+export const STATEMENT_MAX_CHARS = 20_000;
+/** At most this many characters of reality-tree context (the focus CRT dump an inspection reads). */
+export const TREE_CONTEXT_MAX_CHARS = 200_000;
+/**
+ * A fingerprint of the question a judge is asked: every named declared statement,
+ * in name order. It moves when any statement is edited, so a hold on a question
+ * too long to hand a judge whole is released by shortening it
+ * (verify/outcome-routing/incurable-model-hold.ts). Pure.
+ */
+export function judgedQuestionFingerprint(statements) {
+    const entries = Object.entries(statements).map(([name, text]) => [name, text ?? '']).sort(([a], [b]) => a.localeCompare(b));
+    return createHash('sha256').update(JSON.stringify(entries)).digest('hex').slice(0, 16);
+}
+/**
+ * The first of the named statements that is longer than STATEMENT_MAX_CHARS, with
+ * its size, or null when every one can be handed to the judge whole. Pure.
+ */
+export function oversizedStatement(statements) {
+    for (const [name, text] of Object.entries(statements)) {
+        if (text && text.length > STATEMENT_MAX_CHARS)
+            return { name, chars: text.length, budgetChars: STATEMENT_MAX_CHARS };
+    }
+    return null;
+}
+/** `text` cut to `max` characters, keeping its tail (or head), and saying so. Pure. */
+export function boundedText(text, max = FREE_TEXT_MAX_CHARS, keep = 'tail') {
+    if (text.length <= max)
+        return text;
+    const cut = text.length - max;
+    return keep === 'tail'
+        ? `(${cut} earlier characters omitted)\n${text.slice(-max)}`
+        : `${text.slice(0, max)}\n(${cut} more characters omitted)`;
+}
+/**
+ * The changed files as `- path` lines: as many as fit in both caps, then a line
+ * naming how many more there are and the command that lists them. Pure.
+ */
+export function boundedChangedFiles(files, range) {
+    const lines = [];
+    let chars = 0;
+    for (const file of files) {
+        const line = `- ${file}`;
+        if (lines.length >= CHANGED_FILES_LISTED_MAX || chars + line.length + 1 > CHANGED_FILES_LISTED_MAX_CHARS)
+            break;
+        lines.push(line);
+        chars += line.length + 1;
+    }
+    const rest = files.length - lines.length;
+    if (rest > 0)
+        lines.push(`(and ${rest} more -- list them with \`git diff --name-only ${boundedText(range, 2_000, 'head')}\`)`);
+    return lines.join('\n');
+}
+/** The diff stat: its first lines within both caps, then the summary line. Pure. */
+export function boundedDiffStat(stat) {
+    const lines = stat.trim().split('\n');
+    const summary = lines.length > 1 ? (lines[lines.length - 1] ?? '') : '';
+    const body = lines.length > 1 ? lines.slice(0, -1) : lines;
+    const kept = [];
+    let chars = 0;
+    for (const line of body) {
+        if (kept.length >= DIFF_STAT_LINES_MAX || chars + line.length + 1 > DIFF_STAT_MAX_CHARS)
+            break;
+        kept.push(line);
+        chars += line.length + 1;
+    }
+    const omitted = body.length - kept.length;
+    return [...kept, ...(omitted > 0 ? [`(${omitted} more file lines omitted)`] : []), ...(summary ? [boundedText(summary, 2_000)] : [])].join('\n');
+}
+//# sourceMappingURL=judge-question.js.map

package/dist/verify/effect-reconciliation/judge-question.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-question.js","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-question.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sFAAsF;AACtF,kEAAkE;AAClE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,kDAAkD;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,yDAAyD;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AACtD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,iIAAiI;AACjI,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,kGAAkG;AAClG,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,qGAAqG;AACrG,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAqD;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAqD;IACtF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,mBAAmB;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACvH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc,mBAAmB,EAAE,OAAwB,MAAM;IACzG,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;IAC9B,OAAO,IAAI,KAAK,MAAM;QACpB,CAAC,CAAC,IAAI,GAAG,iCAAiC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE;QAC5D,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,2BAA2B,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,KAAa;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,IAAI,wBAAwB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,8BAA8B;YAAE,MAAM;QAChH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,kDAAkD,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,IAAI,mBAAmB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,mBAAmB;YAAE,MAAM;QAC/F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnJ,CAAC"}

package/dist/verify/effect-reconciliation/judge-tool-guard-cli.d.ts

@@ -0,0 +1,6 @@
+/** Decide one hook payload: the exit code and the refusal reason. */
+export declare function decideHookPayload(checkoutPath: string | undefined, stdin: string, basePath?: string | null): {
+    code: 0 | 2;
+    reason: string;
+};
+//# sourceMappingURL=judge-tool-guard-cli.d.ts.map

package/dist/verify/effect-reconciliation/judge-tool-guard-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-tool-guard-cli.d.ts","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-tool-guard-cli.ts"],"names":[],"mappings":"AAsBA,qEAAqE;AACrE,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B;IAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAUjC"}

package/dist/verify/effect-reconciliation/judge-tool-guard-cli.js

@@ -0,0 +1,58 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/effect-reconciliation/judge-tool-guard.test.ts
+// PINNED-BY-END
+/**
+ * The PreToolUse hook a verify judge session is started with
+ * (verify/effect-reconciliation/judge-invoker.ts judgeGuardSettings): reads the
+ * hook's JSON from stdin, decides it with judgeToolVerdict
+ * (verify/effect-reconciliation/judge-tool-guard.ts) against the judged tree's
+ * export and the base tree's export named in argv, and exits 0 to let the tool run or 2
+ * -- with the reason on stderr, which the session reads -- to refuse it.
+ * Anything unreadable is refused.
+ *
+ * Usage: node judge-tool-guard-cli.js <checkoutPath> [<basePath>]   (hook JSON on stdin)
+ *
+ * @module verify/effect-reconciliation/judge-tool-guard-cli
+ */
+import { realpathSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { judgeToolVerdict } from './judge-tool-guard.js';
+/** Decide one hook payload: the exit code and the refusal reason. */
+export function decideHookPayload(checkoutPath, stdin, basePath = null) {
+    if (!checkoutPath)
+        return { code: 2, reason: 'judge guard: no checkout path given' };
+    let payload;
+    try {
+        payload = JSON.parse(stdin);
+    }
+    catch {
+        return { code: 2, reason: 'judge guard: the hook input is not JSON' };
+    }
+    const verdict = judgeToolVerdict(checkoutPath, String(payload.tool_name ?? ''), payload.tool_input, basePath);
+    return verdict.allow ? { code: 0, reason: '' } : { code: 2, reason: `judge guard: ${verdict.reason}` };
+}
+async function main() {
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(chunk);
+    const [checkoutPath, basePath] = process.argv.slice(2);
+    const { code, reason } = decideHookPayload(checkoutPath, Buffer.concat(chunks).toString('utf8'), basePath || null);
+    if (reason)
+        process.stderr.write(`${reason}\n`);
+    process.exitCode = code;
+}
+/** Whether this module is the process entry point (a hook run), not an import. */
+function isEntryPoint() {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        return realpathSync(entry) === realpathSync(fileURLToPath(import.meta.url));
+    }
+    catch {
+        return false;
+    }
+}
+if (isEntryPoint())
+    void main();
+//# sourceMappingURL=judge-tool-guard-cli.js.map

package/dist/verify/effect-reconciliation/judge-tool-guard-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-tool-guard-cli.js","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-tool-guard-cli.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uFAAuF;AACvF,gBAAgB;AAEhB;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAC/B,YAAgC,EAChC,KAAa,EACb,WAA0B,IAAI;IAE9B,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACrF,IAAI,OAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAmB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9G,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACzG,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IACtE,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;IACnH,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,YAAY,EAAE;IAAE,KAAK,IAAI,EAAE,CAAC"}

package/dist/verify/effect-reconciliation/judge-tool-guard.d.ts

@@ -0,0 +1,14 @@
+/** What the guard decides about one tool call. */
+export type JudgeToolVerdict = {
+    allow: true;
+} | {
+    allow: false;
+    reason: string;
+};
+/**
+ * Decide one tool call of a judge session reading `checkoutPath` (its working
+ * directory) and, when given, `basePath` (module header). Never throws:
+ * anything it cannot establish is refused.
+ */
+export declare function judgeToolVerdict(checkoutPath: string, toolName: string, toolInput: unknown, basePath?: string | null): JudgeToolVerdict;
+//# sourceMappingURL=judge-tool-guard.d.ts.map

package/dist/verify/effect-reconciliation/judge-tool-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-tool-guard.d.ts","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-tool-guard.ts"],"names":[],"mappings":"AA6BA,kDAAkD;AAClD,MAAM,MAAM,gBAAgB,GAAG;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAgClF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B,gBAAgB,CAyBlB"}

package/dist/verify/effect-reconciliation/judge-tool-guard.js

@@ -0,0 +1,90 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/effect-reconciliation/judge-tool-guard.test.ts
+// PINNED-BY-END
+/**
+ * The boundary a verify judge session reads through: every tool call it makes is
+ * decided HERE, by the daemon, before the tool runs
+ * (verify/effect-reconciliation/judge-tool-guard-cli.ts is the PreToolUse hook
+ * the session is started with, verify/effect-reconciliation/judge-invoker.ts).
+ *
+ * The judge reads two exports of commit trees -- the judged one and its base
+ * (verify/effect-reconciliation/judge-workspace.ts) -- which hold files only,
+ * no `.git` and no object database. What it may reach is therefore fixed by
+ * what was written, not by parsing its requests; this guard only keeps its file
+ * tools INSIDE those directories:
+ *
+ *   - Read, Grep, Glob: every path they name resolves -- through symlinks --
+ *     inside one of the exports, and a glob pattern is neither absolute,
+ *     home-relative nor climbs out with `..`;
+ *   - every other tool is refused (the session is started with only these three).
+ *
+ * Writes are refused a second way: the exports are read-only on disk.
+ *
+ * @module verify/effect-reconciliation/judge-tool-guard
+ */
+import { existsSync, realpathSync } from 'node:fs';
+import { basename, dirname, isAbsolute, join, resolve, sep } from 'node:path';
+const ALLOW = { allow: true };
+const deny = (reason) => ({ allow: false, reason });
+/** The real path of `p`, resolving symlinks through its deepest existing ancestor. */
+function realOf(p) {
+    let head = p;
+    const tail = [];
+    while (!existsSync(head)) {
+        const parent = dirname(head);
+        if (parent === head)
+            return p;
+        tail.unshift(basename(head));
+        head = parent;
+    }
+    return join(realpathSync(head), ...tail);
+}
+/** Whether `p` (relative to the first root) resolves inside one of `roots`, through symlinks. */
+function insideRoots(roots, p) {
+    const real = realOf(resolve(roots[0] ?? '/', p));
+    return roots.some((root) => real === root || real.startsWith(root + sep));
+}
+/** Refusal reason for a glob pattern that could reach outside the exports, or null. Pure. */
+function globRefusal(pattern) {
+    if (pattern === undefined || pattern === null)
+        return null;
+    if (typeof pattern !== 'string')
+        return 'a glob pattern that is not a string';
+    const escapes = isAbsolute(pattern) || pattern.startsWith('~') || pattern.split(/[/\\]/).includes('..');
+    return escapes ? `the pattern "${pattern}" reaches outside the judge checkout` : null;
+}
+/**
+ * Decide one tool call of a judge session reading `checkoutPath` (its working
+ * directory) and, when given, `basePath` (module header). Never throws:
+ * anything it cannot establish is refused.
+ */
+export function judgeToolVerdict(checkoutPath, toolName, toolInput, basePath = null) {
+    let roots;
+    try {
+        roots = [checkoutPath, ...(basePath ? [basePath] : [])].map((r) => realpathSync(r));
+    }
+    catch {
+        return deny(`the judge checkout ${checkoutPath} does not exist`);
+    }
+    const input = (toolInput !== null && typeof toolInput === 'object' ? toolInput : {});
+    const pathArg = (key, required) => {
+        const p = input[key];
+        if (p === undefined && !required)
+            return ALLOW;
+        if (typeof p !== 'string' || p === '')
+            return deny(`${toolName} needs a ${key}`);
+        return insideRoots(roots, p) ? ALLOW : deny(`${p} is outside the judge checkout`);
+    };
+    switch (toolName) {
+        case 'Read':
+            return pathArg('file_path', true);
+        case 'Grep':
+        case 'Glob': {
+            const glob = globRefusal(toolName === 'Grep' ? input.glob : input.pattern);
+            return glob ? deny(glob) : pathArg('path', false);
+        }
+        default:
+            return deny(`the tool ${toolName} is not a judge tool (Read, Grep and Glob only)`);
+    }
+}
+//# sourceMappingURL=judge-tool-guard.js.map

package/dist/verify/effect-reconciliation/judge-tool-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-tool-guard.js","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-tool-guard.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uFAAuF;AACvF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAK9E,MAAM,KAAK,GAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9E,sFAAsF;AACtF,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,iGAAiG;AACjG,SAAS,WAAW,CAAC,KAAwB,EAAE,CAAS;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,6FAA6F;AAC7F,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,qCAAqC,CAAC;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,OAAO,CAAC,CAAC,CAAC,gBAAgB,OAAO,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAoB,EACpB,QAAgB,EAChB,SAAkB,EAClB,WAA0B,IAAI;IAE9B,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,sBAAsB,YAAY,iBAAiB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IAChH,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,QAAiB,EAAoB,EAAE;QACnE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,QAAQ,YAAY,GAAG,EAAE,CAAC,CAAC;QACjF,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACpF,CAAC,CAAC;IACF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD;YACE,OAAO,IAAI,CAAC,YAAY,QAAQ,iDAAiD,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/verify/effect-reconciliation/judge-workspace.d.ts

@@ -0,0 +1,63 @@
+import { type UnresolvedEvidenceRef } from '../shortfalls/ruling-evidence-resolution.js';
+/** Where the judge reads, what it judges, and how its citations resolve. */
+export interface JudgeWorkspace {
+    /** Absolute path of the export of `sha`'s tree: the judge's working directory. */
+    checkoutPath: string;
+    /** Absolute path of the export of the base tree (the state before the delivery's change), or null when there is none. */
+    basePath: string | null;
+    /** The repository the daemon resolves citations in (its objects); never given to the judge. */
+    sourceRepo: string;
+    /** The judged commit. */
+    sha: string;
+    /** The delivery's commit range, concrete (concreteJudgeRange): information for the judge, never a path into history. */
+    range: string;
+    /** Resolve cited references at `sha`: the ones that did NOT hold, each with its reason. Never throws. */
+    resolveCitations: (refs: readonly string[]) => Promise<UnresolvedEvidenceRef[]>;
+    /** Remove the exports. Idempotent. */
+    dispose: () => void;
+}
+/** The data of a judge workspace -- what a judge prompt and a citation resolver need, and nothing it can call. */
+export type JudgeCheckout = Pick<JudgeWorkspace, 'checkoutPath' | 'basePath' | 'sourceRepo' | 'sha' | 'range'>;
+/** Resolve a verdict's citations for a workspace (production: resolveJudgeCitations in its source repo at its sha). */
+export type JudgeCitationResolver = (checkout: JudgeCheckout, refs: readonly string[]) => Promise<UnresolvedEvidenceRef[]>;
+/** Whether a citation is a TREE CHECK (grep:), the only kind a whole-tree claim may rest on. Pure. */
+export declare function isTreeCheckCitation(ref: string): boolean;
+/** The scope a verdict declares for its question: the change, or the whole tree. */
+export type JudgeScope = 'change' | 'tree';
+/**
+ * What keeps a verdict's citations from vouching for it whatever they resolve to
+ * (module header): no concrete file / line / test citation, or no grep: check.
+ * Empty when both are present. Pure.
+ */
+export declare function citationShapeGaps(citations: readonly string[]): UnresolvedEvidenceRef[];
+/**
+ * Resolve a verdict's citations at `sha` in the repository at `repoPath`
+ * (module header grammar): the ones that did NOT resolve, each with its reason.
+ * An empty citation list resolves nothing and is reported as such. Never throws.
+ */
+export declare function resolveJudgeCitations(repoPath: string, sha: string, refs: readonly string[]): Promise<UnresolvedEvidenceRef[]>;
+/** The checkout's collaborators, bound at the composition root. */
+export interface JudgeWorkspaceDeps {
+    /** Parent directory judge checkouts are created under. */
+    checkoutRoot: string;
+}
+/**
+ * The delivery's range as the judge is given it: CONCRETE, in commits, ending at
+ * the judged commit -- never a branch name or a symbolic HEAD, which would name
+ * state other than the commit being judged. Each `A...B` / `A..B` part becomes
+ * `<merge-base>..<B>` (B = the judged sha when it is HEAD or empty); each bare
+ * commit is resolved. A part that cannot be resolved leaves just the judged
+ * commit, and says so. Read with hermetic git (judge-checkout.ts).
+ */
+export declare function concreteJudgeRange(repoPath: string, range: string, sha: string): string;
+/**
+ * The exports of `sha` -- or, when null, of `repoPath`'s HEAD read now -- and of
+ * the delivery's base, for one judgement (module header), keyed by `key` (a
+ * delivery judges once at a time). A leftover from a crashed run at the same
+ * path is removed first. Its range is the concrete one (concreteJudgeRange).
+ * Returns null when the judged tree cannot be exported -- the caller holds
+ * rather than judging the live worktree. A base that cannot be exported leaves
+ * the judge the judged tree alone, and says so.
+ */
+export declare function createJudgeWorkspace(repoPath: string, key: string, judgedSha: string | null, range: string, deps: JudgeWorkspaceDeps): JudgeWorkspace | null;
+//# sourceMappingURL=judge-workspace.d.ts.map

package/dist/verify/effect-reconciliation/judge-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge-workspace.d.ts","sourceRoot":"","sources":["../../../src/verify/effect-reconciliation/judge-workspace.ts"],"names":[],"mappings":"AA2DA,OAAO,EACoD,KAAK,qBAAqB,EACpF,MAAM,6CAA6C,CAAC;AAWrD,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,yHAAyH;IACzH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,wHAAwH;IACxH,KAAK,EAAE,MAAM,CAAC;IACd,yGAAyG;IACzG,gBAAgB,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAChF,sCAAsC;IACtC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,kHAAkH;AAClH,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC;AAE/G,uHAAuH;AACvH,MAAM,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAE3H,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAQ3C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAYvF;AASD;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAkBpI;AAUD,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAevF;AAaD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,kBAAkB,GACvB,cAAc,GAAG,IAAI,CAgDvB"}