@webpieces/rules-config 0.4.695 → 0.4.696

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/rules-config",
-  "version": "0.4.695",
+  "version": "0.4.696",
   "description": "Shared webpieces.config.json loader. Single source of truth for validation rule configuration consumed by @webpieces/ai-hook-rules, @webpieces/code-rules, and @webpieces/nx-webpieces-rules.",
   "type": "commonjs",
   "main": "./src/index.js",

package/src/home-config-doc-keys.d.ts

@@ -0,0 +1,51 @@
+/**
+ * The documentation-key convention for `~/.webpieces/config.json`.
+ *
+ * ─── WHY THIS EXISTS ──────────────────────────────────────────────────────────────────────────────
+ * JSON has no comments, and that file is HAND-AUTHORED by a human on their own machine. So the only
+ * way to leave a note in it used to be a key the loader would reject — which bought the note at the
+ * price of a warning on EVERY `wp-*` run, in every repo on the machine.
+ *
+ * One machine's note read, in full caps: "THIS KEY IS ALWAYS REJECTED, AS A WARNING. THAT IS OK AND
+ * EXPECTED — DO NOT 'FIX' IT." An agent read the warning, did not read the note, and offered to delete
+ * the key to silence it. A warning that has to be explained away every time is a warning that trains
+ * its readers to ignore warnings, so the convention is UNDERSTOOD now rather than merely tolerated:
+ *
+ *   `_doc`   — a note to whoever opens the file next.
+ *   `_aiDoc` — a note addressed specifically to an AI agent reading it.
+ *
+ * Both are accepted anywhere a key may appear (top level and inside `experimental`), must be strings,
+ * and are IGNORED. They are the only keys here whose presence and absence mean the same thing to the
+ * loader. The leading `_` says "not a setting" at a glance.
+ *
+ * ─── ACCEPTED EVERYWHERE, ADVERTISED NOWHERE ──────────────────────────────────────────────────────
+ * These names are deliberately NOT in `ALLOWED_TOP_LEVEL` or `ALLOWED_EXPERIMENTAL`. Those lists are
+ * the SETTINGS, and they are walked elsewhere — by the spec, to build typed sample documents, and by
+ * the "did you mean" hint. A documentation key has no typed value to contribute to a sample, and
+ * offering `_doc` as the nearest match to a misspelled setting would send someone hunting for what it
+ * configures. It configures nothing. `warnUnknownKeys` skips them; this class type-checks them.
+ */
+export declare const HOME_KEY_DOC = "_doc";
+export declare const HOME_KEY_AI_DOC = "_aiDoc";
+export declare const DOCUMENTATION_KEYS: readonly string[];
+/**
+ * Type-checks the documentation keys. Split out of `home-config.ts` as its own cohesive unit — the
+ * convention, its two names, and the one rule they carry.
+ */
+export declare class HomeDocKeys {
+    /**
+     * A documentation key holds PROSE, and holding anything else is an ERROR rather than a warning.
+     *
+     * `_doc: true` is not a note — it is somebody reaching for a setting and landing on the one key
+     * name the loader promises to ignore. Left as a warning it would read as "accepted", because every
+     * other accepted key in this file is a setting that does something. So the single thing these keys
+     * enforce is that they really are prose, which is the same "known key, wrong type → REJECT" rule
+     * the boolean and numeric keys already follow.
+     *
+     * `describeFile` is the loader's own file banner, passed in rather than rebuilt here, so a
+     * rejection from this class is indistinguishable from any other rejection the loader renders.
+     */
+    assertAreStrings(raw: Record<string, unknown>, prefix: string, describeFile: (m: string) => string): void;
+    /** True for a key this convention owns, so the unknown-key warning can skip it. */
+    isDocumentationKey(key: string): boolean;
+}

package/src/home-config-doc-keys.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HomeDocKeys = exports.DOCUMENTATION_KEYS = exports.HOME_KEY_AI_DOC = exports.HOME_KEY_DOC = void 0;
+const tslib_1 = require("tslib");
+const inversify_1 = require("inversify");
+const inform_ai_error_1 = require("./inform-ai-error");
+/**
+ * The documentation-key convention for `~/.webpieces/config.json`.
+ *
+ * ─── WHY THIS EXISTS ──────────────────────────────────────────────────────────────────────────────
+ * JSON has no comments, and that file is HAND-AUTHORED by a human on their own machine. So the only
+ * way to leave a note in it used to be a key the loader would reject — which bought the note at the
+ * price of a warning on EVERY `wp-*` run, in every repo on the machine.
+ *
+ * One machine's note read, in full caps: "THIS KEY IS ALWAYS REJECTED, AS A WARNING. THAT IS OK AND
+ * EXPECTED — DO NOT 'FIX' IT." An agent read the warning, did not read the note, and offered to delete
+ * the key to silence it. A warning that has to be explained away every time is a warning that trains
+ * its readers to ignore warnings, so the convention is UNDERSTOOD now rather than merely tolerated:
+ *
+ *   `_doc`   — a note to whoever opens the file next.
+ *   `_aiDoc` — a note addressed specifically to an AI agent reading it.
+ *
+ * Both are accepted anywhere a key may appear (top level and inside `experimental`), must be strings,
+ * and are IGNORED. They are the only keys here whose presence and absence mean the same thing to the
+ * loader. The leading `_` says "not a setting" at a glance.
+ *
+ * ─── ACCEPTED EVERYWHERE, ADVERTISED NOWHERE ──────────────────────────────────────────────────────
+ * These names are deliberately NOT in `ALLOWED_TOP_LEVEL` or `ALLOWED_EXPERIMENTAL`. Those lists are
+ * the SETTINGS, and they are walked elsewhere — by the spec, to build typed sample documents, and by
+ * the "did you mean" hint. A documentation key has no typed value to contribute to a sample, and
+ * offering `_doc` as the nearest match to a misspelled setting would send someone hunting for what it
+ * configures. It configures nothing. `warnUnknownKeys` skips them; this class type-checks them.
+ */
+exports.HOME_KEY_DOC = '_doc';
+exports.HOME_KEY_AI_DOC = '_aiDoc';
+exports.DOCUMENTATION_KEYS = [exports.HOME_KEY_DOC, exports.HOME_KEY_AI_DOC];
+/**
+ * Type-checks the documentation keys. Split out of `home-config.ts` as its own cohesive unit — the
+ * convention, its two names, and the one rule they carry.
+ */
+let HomeDocKeys = class HomeDocKeys {
+    /**
+     * A documentation key holds PROSE, and holding anything else is an ERROR rather than a warning.
+     *
+     * `_doc: true` is not a note — it is somebody reaching for a setting and landing on the one key
+     * name the loader promises to ignore. Left as a warning it would read as "accepted", because every
+     * other accepted key in this file is a setting that does something. So the single thing these keys
+     * enforce is that they really are prose, which is the same "known key, wrong type → REJECT" rule
+     * the boolean and numeric keys already follow.
+     *
+     * `describeFile` is the loader's own file banner, passed in rather than rebuilt here, so a
+     * rejection from this class is indistinguishable from any other rejection the loader renders.
+     */
+    // webpieces-disable no-any-unknown -- the document is user-authored and unvalidated at this point
+    assertAreStrings(raw, prefix, describeFile) {
+        for (const key of exports.DOCUMENTATION_KEYS) {
+            const value = raw[key];
+            if (value === undefined || typeof value === 'string')
+                continue;
+            throw new inform_ai_error_1.InformAiError(describeFile(`"${prefix}${key}" is a documentation key and must be a string. It holds a note for ` +
+                `whoever reads this file next and is otherwise IGNORED — it is not a setting, so a ` +
+                `${typeof value} here means a real setting was intended. Write the note as a string, ` +
+                `or use the key you actually meant.`));
+        }
+    }
+    /** True for a key this convention owns, so the unknown-key warning can skip it. */
+    isDocumentationKey(key) {
+        return exports.DOCUMENTATION_KEYS.includes(key);
+    }
+};
+exports.HomeDocKeys = HomeDocKeys;
+exports.HomeDocKeys = HomeDocKeys = tslib_1.__decorate([
+    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton)
+], HomeDocKeys);
+//# sourceMappingURL=home-config-doc-keys.js.map

package/src/home-config-doc-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-config-doc-keys.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/home-config-doc-keys.ts"],"names":[],"mappings":";;;;AAAA,yCAA2D;AAE3D,uDAAkD;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACU,QAAA,YAAY,GAAG,MAAM,CAAC;AACtB,QAAA,eAAe,GAAG,QAAQ,CAAC;AAC3B,QAAA,kBAAkB,GAAsB,CAAC,oBAAY,EAAE,uBAAe,CAAC,CAAC;AAErF;;;GAGG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IACpB;;;;;;;;;;;OAWG;IACH,kGAAkG;IAClG,gBAAgB,CAAC,GAA4B,EAAE,MAAc,EAAE,YAAmC;QAC9F,KAAK,MAAM,GAAG,IAAI,0BAAkB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAC/D,MAAM,IAAI,+BAAa,CAAC,YAAY,CAChC,IAAI,MAAM,GAAG,GAAG,qEAAqE;gBACrF,oFAAoF;gBACpF,GAAG,OAAO,KAAK,uEAAuE;gBACtF,oCAAoC,CAAC,CAAC,CAAC;QAC/C,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,kBAAkB,CAAC,GAAW;QAC1B,OAAO,0BAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;CACJ,CAAA;AA9BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;GAC5B,WAAW,CA8BvB","sourcesContent":["import { injectable, bindingScopeValues } from 'inversify';\n\nimport { InformAiError } from './inform-ai-error';\n\n/**\n * The documentation-key convention for `~/.webpieces/config.json`.\n *\n * ─── WHY THIS EXISTS ──────────────────────────────────────────────────────────────────────────────\n * JSON has no comments, and that file is HAND-AUTHORED by a human on their own machine. So the only\n * way to leave a note in it used to be a key the loader would reject — which bought the note at the\n * price of a warning on EVERY `wp-*` run, in every repo on the machine.\n *\n * One machine's note read, in full caps: \"THIS KEY IS ALWAYS REJECTED, AS A WARNING. THAT IS OK AND\n * EXPECTED — DO NOT 'FIX' IT.\" An agent read the warning, did not read the note, and offered to delete\n * the key to silence it. A warning that has to be explained away every time is a warning that trains\n * its readers to ignore warnings, so the convention is UNDERSTOOD now rather than merely tolerated:\n *\n *   `_doc`   — a note to whoever opens the file next.\n *   `_aiDoc` — a note addressed specifically to an AI agent reading it.\n *\n * Both are accepted anywhere a key may appear (top level and inside `experimental`), must be strings,\n * and are IGNORED. They are the only keys here whose presence and absence mean the same thing to the\n * loader. The leading `_` says \"not a setting\" at a glance.\n *\n * ─── ACCEPTED EVERYWHERE, ADVERTISED NOWHERE ──────────────────────────────────────────────────────\n * These names are deliberately NOT in `ALLOWED_TOP_LEVEL` or `ALLOWED_EXPERIMENTAL`. Those lists are\n * the SETTINGS, and they are walked elsewhere — by the spec, to build typed sample documents, and by\n * the \"did you mean\" hint. A documentation key has no typed value to contribute to a sample, and\n * offering `_doc` as the nearest match to a misspelled setting would send someone hunting for what it\n * configures. It configures nothing. `warnUnknownKeys` skips them; this class type-checks them.\n */\nexport const HOME_KEY_DOC = '_doc';\nexport const HOME_KEY_AI_DOC = '_aiDoc';\nexport const DOCUMENTATION_KEYS: readonly string[] = [HOME_KEY_DOC, HOME_KEY_AI_DOC];\n\n/**\n * Type-checks the documentation keys. Split out of `home-config.ts` as its own cohesive unit — the\n * convention, its two names, and the one rule they carry.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class HomeDocKeys {\n    /**\n     * A documentation key holds PROSE, and holding anything else is an ERROR rather than a warning.\n     *\n     * `_doc: true` is not a note — it is somebody reaching for a setting and landing on the one key\n     * name the loader promises to ignore. Left as a warning it would read as \"accepted\", because every\n     * other accepted key in this file is a setting that does something. So the single thing these keys\n     * enforce is that they really are prose, which is the same \"known key, wrong type → REJECT\" rule\n     * the boolean and numeric keys already follow.\n     *\n     * `describeFile` is the loader's own file banner, passed in rather than rebuilt here, so a\n     * rejection from this class is indistinguishable from any other rejection the loader renders.\n     */\n    // webpieces-disable no-any-unknown -- the document is user-authored and unvalidated at this point\n    assertAreStrings(raw: Record<string, unknown>, prefix: string, describeFile: (m: string) => string): void {\n        for (const key of DOCUMENTATION_KEYS) {\n            const value = raw[key];\n            if (value === undefined || typeof value === 'string') continue;\n            throw new InformAiError(describeFile(\n                `\"${prefix}${key}\" is a documentation key and must be a string. It holds a note for ` +\n                `whoever reads this file next and is otherwise IGNORED — it is not a setting, so a ` +\n                `${typeof value} here means a real setting was intended. Write the note as a string, ` +\n                `or use the key you actually meant.`));\n        }\n    }\n\n    /** True for a key this convention owns, so the unknown-key warning can skip it. */\n    isDocumentationKey(key: string): boolean {\n        return DOCUMENTATION_KEYS.includes(key);\n    }\n}\n"]}

package/src/home-config-retired-keys.d.ts

@@ -0,0 +1,43 @@
+/**
+ * One retired `~/.webpieces/config.json` key and the mechanical edit that replaces it. Data-only.
+ *
+ * This mirrors `RetiredConfigKey` rather than reusing it: that table's entries carry a `scope`
+ * (rule-name vs key-in-section) that describes webpieces.config.json's two-level layout and means
+ * nothing here, and its `label` convention names that file's sections. One shared class covering both
+ * would be a type with fields that are dead for half its instances.
+ */
+export declare class RetiredHomeConfigKey {
+    key: string;
+    movedTo: string;
+    instruction: string;
+    constructor(key: string, movedTo: string, instruction: string);
+}
+/**
+ * Every retired home-config key — the ONE place in the codebase where a dead home-config key may be
+ * named, exactly as `RETIRED_CONFIG_KEYS` is for webpieces.config.json. Newest at the bottom.
+ *
+ * When you retire a key here, DELETE its read path in the same change. `home-config.spec.ts` asserts
+ * every entry below actually FAILS the load, so a fallback that quietly accepts one turns it red.
+ */
+export declare const RETIRED_HOME_CONFIG_KEYS: readonly RetiredHomeConfigKey[];
+/**
+ * An experiment a HUMAN ended, and the sentence that says so.
+ *
+ * Distinct from `RETIRED_HOME_CONFIG_KEYS`, and deliberately not merged with it: a retired key is a
+ * HARD FAILURE on exact match, which is too harsh for a machine-global hand-authored file — somebody
+ * who opted INTO a behaviour they now get unconditionally must not have their shell broken for saying
+ * yes early. So an ended experiment falls through to the unknown-key WARNING, and this table only
+ * makes that warning SAY something.
+ *
+ * The gap it closes is the one that produced this table. `buildGateLogCapture` was deleted and capture
+ * made unconditional; its owner's config still said `true`, and every `wp-*` run told him only that the
+ * key "is not a key this @webpieces release understands" — which reads like a typo or a version skew,
+ * not like an answer. His actual question was "how did that happen?", and nothing on screen answered it.
+ */
+export declare class EndedExperiment {
+    key: string;
+    endedIn: string;
+    note: string;
+    constructor(key: string, endedIn: string, note: string);
+}
+export declare const ENDED_EXPERIMENTS: readonly EndedExperiment[];

package/src/home-config-retired-keys.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENDED_EXPERIMENTS = exports.EndedExperiment = exports.RETIRED_HOME_CONFIG_KEYS = exports.RetiredHomeConfigKey = void 0;
+/**
+ * One retired `~/.webpieces/config.json` key and the mechanical edit that replaces it. Data-only.
+ *
+ * This mirrors `RetiredConfigKey` rather than reusing it: that table's entries carry a `scope`
+ * (rule-name vs key-in-section) that describes webpieces.config.json's two-level layout and means
+ * nothing here, and its `label` convention names that file's sections. One shared class covering both
+ * would be a type with fields that are dead for half its instances.
+ */
+class RetiredHomeConfigKey {
+    // Dotted path exactly as it appears in the file, e.g. `experimental.captureBuildGateLog`.
+    key;
+    // Where the value goes now. Empty when the key is deleted outright.
+    movedTo;
+    // The imperative fix, written for the agent that will apply it verbatim.
+    instruction;
+    constructor(key, movedTo, instruction) {
+        this.key = key;
+        this.movedTo = movedTo;
+        this.instruction = instruction;
+    }
+}
+exports.RetiredHomeConfigKey = RetiredHomeConfigKey;
+/**
+ * Every retired home-config key — the ONE place in the codebase where a dead home-config key may be
+ * named, exactly as `RETIRED_CONFIG_KEYS` is for webpieces.config.json. Newest at the bottom.
+ *
+ * When you retire a key here, DELETE its read path in the same change. `home-config.spec.ts` asserts
+ * every entry below actually FAILS the load, so a fallback that quietly accepts one turns it red.
+ */
+exports.RETIRED_HOME_CONFIG_KEYS = [
+    // `captureBuildGateLog` was the working name while the build-log feature was being built, and it
+    // appears in the branch history and in in-flight drafts, so it is exactly the spelling an agent
+    // reconstructing the file from memory will type. It never shipped in a release; it is listed so that
+    // typing it produces the DELETION instruction rather than a bare "unknown key". It used to point at
+    // `experimental.buildGateLogCapture`; that key is itself gone now (capture is unconditional), so the
+    // destination is "no replacement, delete it" and this entry is the only place either name survives.
+    new RetiredHomeConfigKey('experimental.captureBuildGateLog', '', 'Delete the key. Capturing the build gate\'s output to a log file is no longer optional — every ' +
+        'build the PR gate runs writes its full output to a file and prints a "FullLog :" pointer at it.'),
+];
+/**
+ * An experiment a HUMAN ended, and the sentence that says so.
+ *
+ * Distinct from `RETIRED_HOME_CONFIG_KEYS`, and deliberately not merged with it: a retired key is a
+ * HARD FAILURE on exact match, which is too harsh for a machine-global hand-authored file — somebody
+ * who opted INTO a behaviour they now get unconditionally must not have their shell broken for saying
+ * yes early. So an ended experiment falls through to the unknown-key WARNING, and this table only
+ * makes that warning SAY something.
+ *
+ * The gap it closes is the one that produced this table. `buildGateLogCapture` was deleted and capture
+ * made unconditional; its owner's config still said `true`, and every `wp-*` run told him only that the
+ * key "is not a key this @webpieces release understands" — which reads like a typo or a version skew,
+ * not like an answer. His actual question was "how did that happen?", and nothing on screen answered it.
+ */
+class EndedExperiment {
+    // Dotted path exactly as it appears in the file.
+    key;
+    // The release in which the experiment ended.
+    endedIn;
+    // What replaced it, and what to do with the key now. Written for whoever reads the warning.
+    note;
+    constructor(key, endedIn, note) {
+        this.key = key;
+        this.endedIn = endedIn;
+        this.note = note;
+    }
+}
+exports.EndedExperiment = EndedExperiment;
+exports.ENDED_EXPERIMENTS = [
+    new EndedExperiment('experimental.buildGateLogCapture', '0.4.693', 'Capturing the build gate\'s output to a log file is UNCONDITIONAL now, so this flag switches ' +
+        'nothing — you already have what it asked for. Delete the key.'),
+];
+//# sourceMappingURL=home-config-retired-keys.js.map

package/src/home-config-retired-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-config-retired-keys.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/home-config-retired-keys.ts"],"names":[],"mappings":";;;AAAA;;;;;;;GAOG;AACH,MAAa,oBAAoB;IAC7B,0FAA0F;IAC1F,GAAG,CAAS;IACZ,oEAAoE;IACpE,OAAO,CAAS;IAChB,yEAAyE;IACzE,WAAW,CAAS;IAEpB,YAAY,GAAW,EAAE,OAAe,EAAE,WAAmB;QACzD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;CACJ;AAbD,oDAaC;AAED;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAoC;IACrE,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,oGAAoG;IACpG,qGAAqG;IACrG,oGAAoG;IACpG,IAAI,oBAAoB,CACpB,kCAAkC,EAAE,EAAE,EACtC,iGAAiG;QACjG,iGAAiG,CACpG;CACJ,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAa,eAAe;IACxB,iDAAiD;IACjD,GAAG,CAAS;IACZ,6CAA6C;IAC7C,OAAO,CAAS;IAChB,4FAA4F;IAC5F,IAAI,CAAS;IAEb,YAAY,GAAW,EAAE,OAAe,EAAE,IAAY;QAClD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;CACJ;AAbD,0CAaC;AAEY,QAAA,iBAAiB,GAA+B;IACzD,IAAI,eAAe,CACf,kCAAkC,EAAE,SAAS,EAC7C,+FAA+F;QAC/F,+DAA+D,CAAC;CACvE,CAAC","sourcesContent":["/**\n * One retired `~/.webpieces/config.json` key and the mechanical edit that replaces it. Data-only.\n *\n * This mirrors `RetiredConfigKey` rather than reusing it: that table's entries carry a `scope`\n * (rule-name vs key-in-section) that describes webpieces.config.json's two-level layout and means\n * nothing here, and its `label` convention names that file's sections. One shared class covering both\n * would be a type with fields that are dead for half its instances.\n */\nexport class RetiredHomeConfigKey {\n    // Dotted path exactly as it appears in the file, e.g. `experimental.captureBuildGateLog`.\n    key: string;\n    // Where the value goes now. Empty when the key is deleted outright.\n    movedTo: string;\n    // The imperative fix, written for the agent that will apply it verbatim.\n    instruction: string;\n\n    constructor(key: string, movedTo: string, instruction: string) {\n        this.key = key;\n        this.movedTo = movedTo;\n        this.instruction = instruction;\n    }\n}\n\n/**\n * Every retired home-config key — the ONE place in the codebase where a dead home-config key may be\n * named, exactly as `RETIRED_CONFIG_KEYS` is for webpieces.config.json. Newest at the bottom.\n *\n * When you retire a key here, DELETE its read path in the same change. `home-config.spec.ts` asserts\n * every entry below actually FAILS the load, so a fallback that quietly accepts one turns it red.\n */\nexport const RETIRED_HOME_CONFIG_KEYS: readonly RetiredHomeConfigKey[] = [\n    // `captureBuildGateLog` was the working name while the build-log feature was being built, and it\n    // appears in the branch history and in in-flight drafts, so it is exactly the spelling an agent\n    // reconstructing the file from memory will type. It never shipped in a release; it is listed so that\n    // typing it produces the DELETION instruction rather than a bare \"unknown key\". It used to point at\n    // `experimental.buildGateLogCapture`; that key is itself gone now (capture is unconditional), so the\n    // destination is \"no replacement, delete it\" and this entry is the only place either name survives.\n    new RetiredHomeConfigKey(\n        'experimental.captureBuildGateLog', '',\n        'Delete the key. Capturing the build gate\\'s output to a log file is no longer optional — every ' +\n        'build the PR gate runs writes its full output to a file and prints a \"FullLog :\" pointer at it.',\n    ),\n];\n\n/**\n * An experiment a HUMAN ended, and the sentence that says so.\n *\n * Distinct from `RETIRED_HOME_CONFIG_KEYS`, and deliberately not merged with it: a retired key is a\n * HARD FAILURE on exact match, which is too harsh for a machine-global hand-authored file — somebody\n * who opted INTO a behaviour they now get unconditionally must not have their shell broken for saying\n * yes early. So an ended experiment falls through to the unknown-key WARNING, and this table only\n * makes that warning SAY something.\n *\n * The gap it closes is the one that produced this table. `buildGateLogCapture` was deleted and capture\n * made unconditional; its owner's config still said `true`, and every `wp-*` run told him only that the\n * key \"is not a key this @webpieces release understands\" — which reads like a typo or a version skew,\n * not like an answer. His actual question was \"how did that happen?\", and nothing on screen answered it.\n */\nexport class EndedExperiment {\n    // Dotted path exactly as it appears in the file.\n    key: string;\n    // The release in which the experiment ended.\n    endedIn: string;\n    // What replaced it, and what to do with the key now. Written for whoever reads the warning.\n    note: string;\n\n    constructor(key: string, endedIn: string, note: string) {\n        this.key = key;\n        this.endedIn = endedIn;\n        this.note = note;\n    }\n}\n\nexport const ENDED_EXPERIMENTS: readonly EndedExperiment[] = [\n    new EndedExperiment(\n        'experimental.buildGateLogCapture', '0.4.693',\n        'Capturing the build gate\\'s output to a log file is UNCONDITIONAL now, so this flag switches ' +\n        'nothing — you already have what it asked for. Delete the key.'),\n];\n"]}

package/src/home-config.d.ts

@@ -1,3 +1,7 @@
+import { DOCUMENTATION_KEYS, HOME_KEY_DOC, HOME_KEY_AI_DOC, HomeDocKeys } from './home-config-doc-keys';
+import { RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS, EndedExperiment, ENDED_EXPERIMENTS } from './home-config-retired-keys';
+export { DOCUMENTATION_KEYS, HOME_KEY_DOC, HOME_KEY_AI_DOC, HomeDocKeys };
+export { RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS, EndedExperiment, ENDED_EXPERIMENTS };
 /**
  * `~/.webpieces/config.json` — the MACHINE-GLOBAL preference file, and a different thing from the repo's
  * tracked `webpieces.config.json`. It is EXPERIMENTAL and entirely OPTIONAL.
@@ -153,6 +157,11 @@ export declare const DEFAULT_MAX_CONCURRENT_BUILDS = 3;
  * which is the one failure mode nobody would notice until an older release started rejecting files.
  * Walking the real constant makes the test cover a new key the moment it appears here.
  */
+/**
+ * The SETTINGS only. Documentation keys are deliberately NOT here: these lists are walked to build
+ * sample documents and to assert cross-version invariants, and every entry is assumed to be a setting
+ * with a typed value. `warnUnknownKeys` accepts the documentation keys separately, everywhere.
+ */
 export declare const ALLOWED_TOP_LEVEL: readonly string[];
 /**
  * The understood `experimental.*` keys, SPLIT BY VALUE TYPE — because the spec walks these lists to build
@@ -163,6 +172,22 @@ export declare const ALLOWED_TOP_LEVEL: readonly string[];
  * `ALLOWED_EXPERIMENTAL` stays the ONE list the validator warns against — derived from the two, never
  * hand-maintained beside them, so it cannot fall out of step.
  */
+/**
+ * ─── ONLY A HUMAN ENDS AN EXPERIMENT ──────────────────────────────────────────────────────────────
+ *
+ * An AI agent may ADD a flag to these lists. It may NEVER DELETE one, and may never make a flagged
+ * behaviour unconditional — however settled it looks, however old the flag is, however good the
+ * reasoning. Ending an experiment judges evidence that lives on someone else's machine.
+ *
+ * From a live incident: PR #711 deleted `buildGateLogCapture` and made capture unconditional. Its
+ * owner's config said `true`, and after that release the opt-in silently meant nothing. Note the
+ * shape — that file says "AI: DO NOT EDIT this file!!", and the agent never touched it; it deleted
+ * the key from the CODE, which has the identical effect from the owner's seat. A rule protecting a
+ * FILE does not protect the SETTING it selects.
+ *
+ * If you believe an experiment should end, SAY SO and leave the flag alone. CLAUDE.md §"ONLY A HUMAN
+ * ENDS AN EXPERIMENT" carries the full rule and what a human-ended retirement looks like.
+ */
 export declare const ALLOWED_EXPERIMENTAL_BOOLEANS: readonly string[];
 export declare const ALLOWED_EXPERIMENTAL_NUMBERS: readonly string[];
 export declare const ALLOWED_EXPERIMENTAL: readonly string[];
@@ -208,28 +233,6 @@ export declare class HomeConfig {
     maxConcurrentBuilds: number;
     constructor(wholeRepoBuildGuard: boolean, orphanDirSweep: boolean, maxConcurrentBuilds: number);
 }
-/**
- * One retired `~/.webpieces/config.json` key and the mechanical edit that replaces it. Data-only.
- *
- * This mirrors `RetiredConfigKey` rather than reusing it: that table's entries carry a `scope`
- * (rule-name vs key-in-section) that describes webpieces.config.json's two-level layout and means
- * nothing here, and its `label` convention names that file's sections. One shared class covering both
- * would be a type with fields that are dead for half its instances.
- */
-export declare class RetiredHomeConfigKey {
-    key: string;
-    movedTo: string;
-    instruction: string;
-    constructor(key: string, movedTo: string, instruction: string);
-}
-/**
- * Every retired home-config key — the ONE place in the codebase where a dead home-config key may be
- * named, exactly as `RETIRED_CONFIG_KEYS` is for webpieces.config.json. Newest at the bottom.
- *
- * When you retire a key here, DELETE its read path in the same change. `home-config.spec.ts` asserts
- * every entry below actually FAILS the load, so a fallback that quietly accepts one turns it red.
- */
-export declare const RETIRED_HOME_CONFIG_KEYS: readonly RetiredHomeConfigKey[];
 /**
  * Loads and validates `~/.webpieces/config.json`, and resolves whether a path IS that file (for the
  * guard carve-out that keeps a rejection repairable).
@@ -239,6 +242,8 @@ export declare const RETIRED_HOME_CONFIG_KEYS: readonly RetiredHomeConfigKey[];
  * ignored with a warning). The class docblock at the top of this file has the reasoning.
  */
 export declare class HomeConfigService {
+    private readonly docKeys;
+    constructor(docKeys?: HomeDocKeys);
     /** Absolute path to the preference file. `homeDir` is a parameter so specs never touch a real HOME. */
     configPath(homeDir?: string): string;
     /**
@@ -335,6 +340,15 @@ export declare class HomeConfigService {
      * uses in this package for the same category of finding — something a human may want to know about
      * and is not required to act on.
      */
+    /**
+     * The sentence for a flag a HUMAN ended, or '' when this key is not one.
+     *
+     * Consulted BEFORE the retired-near-miss hint and before the generic "typo or newer release" line,
+     * because for these keys that generic line is actively misleading: it invites the reader to check
+     * their spelling or upgrade, when the truth is that they spelled it correctly, they are on a new
+     * enough release, and the thing they asked for now happens anyway.
+     */
+    private endedExperimentHint;
     private warnUnknownKeys;
     /**
      * A near-miss of a RETIRED key, pointed at its migration — or '' when nothing retired is close.

package/src/home-config.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HomeConfigService = exports.RETIRED_HOME_CONFIG_KEYS = exports.RetiredHomeConfigKey = exports.HomeConfig = exports.ALLOWED_EXPERIMENTAL = exports.ALLOWED_EXPERIMENTAL_NUMBERS = exports.ALLOWED_EXPERIMENTAL_BOOLEANS = exports.ALLOWED_TOP_LEVEL = exports.DEFAULT_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_ORPHAN_DIR_SWEEP = exports.HOME_KEY_WHOLE_REPO_BUILD_GUARD = exports.HOME_EXPERIMENTAL_SECTION = exports.HOME_CONFIG_FILE = exports.HOME_CONFIG_DIR = void 0;
+exports.HomeConfigService = exports.HomeConfig = exports.ALLOWED_EXPERIMENTAL = exports.ALLOWED_EXPERIMENTAL_NUMBERS = exports.ALLOWED_EXPERIMENTAL_BOOLEANS = exports.ALLOWED_TOP_LEVEL = exports.DEFAULT_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_ORPHAN_DIR_SWEEP = exports.HOME_KEY_WHOLE_REPO_BUILD_GUARD = exports.HOME_EXPERIMENTAL_SECTION = exports.HOME_CONFIG_FILE = exports.HOME_CONFIG_DIR = exports.ENDED_EXPERIMENTS = exports.EndedExperiment = exports.RETIRED_HOME_CONFIG_KEYS = exports.RetiredHomeConfigKey = exports.HomeDocKeys = exports.HOME_KEY_AI_DOC = exports.HOME_KEY_DOC = exports.DOCUMENTATION_KEYS = void 0;
 const tslib_1 = require("tslib");
 const fs = tslib_1.__importStar(require("fs"));
 const os = tslib_1.__importStar(require("os"));
@@ -8,6 +8,16 @@ const path = tslib_1.__importStar(require("path"));
 const inversify_1 = require("inversify");
 const inform_ai_error_1 = require("./inform-ai-error");
 const to_error_1 = require("./to-error");
+const home_config_doc_keys_1 = require("./home-config-doc-keys");
+Object.defineProperty(exports, "DOCUMENTATION_KEYS", { enumerable: true, get: function () { return home_config_doc_keys_1.DOCUMENTATION_KEYS; } });
+Object.defineProperty(exports, "HOME_KEY_DOC", { enumerable: true, get: function () { return home_config_doc_keys_1.HOME_KEY_DOC; } });
+Object.defineProperty(exports, "HOME_KEY_AI_DOC", { enumerable: true, get: function () { return home_config_doc_keys_1.HOME_KEY_AI_DOC; } });
+Object.defineProperty(exports, "HomeDocKeys", { enumerable: true, get: function () { return home_config_doc_keys_1.HomeDocKeys; } });
+const home_config_retired_keys_1 = require("./home-config-retired-keys");
+Object.defineProperty(exports, "RetiredHomeConfigKey", { enumerable: true, get: function () { return home_config_retired_keys_1.RetiredHomeConfigKey; } });
+Object.defineProperty(exports, "RETIRED_HOME_CONFIG_KEYS", { enumerable: true, get: function () { return home_config_retired_keys_1.RETIRED_HOME_CONFIG_KEYS; } });
+Object.defineProperty(exports, "EndedExperiment", { enumerable: true, get: function () { return home_config_retired_keys_1.EndedExperiment; } });
+Object.defineProperty(exports, "ENDED_EXPERIMENTS", { enumerable: true, get: function () { return home_config_retired_keys_1.ENDED_EXPERIMENTS; } });
 /**
  * `~/.webpieces/config.json` — the MACHINE-GLOBAL preference file, and a different thing from the repo's
  * tracked `webpieces.config.json`. It is EXPERIMENTAL and entirely OPTIONAL.
@@ -191,6 +201,11 @@ exports.DEFAULT_MAX_CONCURRENT_BUILDS = 3;
  * which is the one failure mode nobody would notice until an older release started rejecting files.
  * Walking the real constant makes the test cover a new key the moment it appears here.
  */
+/**
+ * The SETTINGS only. Documentation keys are deliberately NOT here: these lists are walked to build
+ * sample documents and to assert cross-version invariants, and every entry is assumed to be a setting
+ * with a typed value. `warnUnknownKeys` accepts the documentation keys separately, everywhere.
+ */
 exports.ALLOWED_TOP_LEVEL = [exports.HOME_EXPERIMENTAL_SECTION];
 /**
  * The understood `experimental.*` keys, SPLIT BY VALUE TYPE — because the spec walks these lists to build
@@ -201,6 +216,22 @@ exports.ALLOWED_TOP_LEVEL = [exports.HOME_EXPERIMENTAL_SECTION];
  * `ALLOWED_EXPERIMENTAL` stays the ONE list the validator warns against — derived from the two, never
  * hand-maintained beside them, so it cannot fall out of step.
  */
+/**
+ * ─── ONLY A HUMAN ENDS AN EXPERIMENT ──────────────────────────────────────────────────────────────
+ *
+ * An AI agent may ADD a flag to these lists. It may NEVER DELETE one, and may never make a flagged
+ * behaviour unconditional — however settled it looks, however old the flag is, however good the
+ * reasoning. Ending an experiment judges evidence that lives on someone else's machine.
+ *
+ * From a live incident: PR #711 deleted `buildGateLogCapture` and made capture unconditional. Its
+ * owner's config said `true`, and after that release the opt-in silently meant nothing. Note the
+ * shape — that file says "AI: DO NOT EDIT this file!!", and the agent never touched it; it deleted
+ * the key from the CODE, which has the identical effect from the owner's seat. A rule protecting a
+ * FILE does not protect the SETTING it selects.
+ *
+ * If you believe an experiment should end, SAY SO and leave the flag alone. CLAUDE.md §"ONLY A HUMAN
+ * ENDS AN EXPERIMENT" carries the full rule and what a human-ended retirement looks like.
+ */
 exports.ALLOWED_EXPERIMENTAL_BOOLEANS = [
     exports.HOME_KEY_WHOLE_REPO_BUILD_GUARD, exports.HOME_KEY_ORPHAN_DIR_SWEEP,
 ];
@@ -288,45 +319,6 @@ class HomeConfig {
     }
 }
 exports.HomeConfig = HomeConfig;
-/**
- * One retired `~/.webpieces/config.json` key and the mechanical edit that replaces it. Data-only.
- *
- * This mirrors `RetiredConfigKey` rather than reusing it: that table's entries carry a `scope`
- * (rule-name vs key-in-section) that describes webpieces.config.json's two-level layout and means
- * nothing here, and its `label` convention names that file's sections. One shared class covering both
- * would be a type with fields that are dead for half its instances.
- */
-class RetiredHomeConfigKey {
-    // Dotted path exactly as it appears in the file, e.g. `experimental.captureBuildGateLog`.
-    key;
-    // Where the value goes now. Empty when the key is deleted outright.
-    movedTo;
-    // The imperative fix, written for the agent that will apply it verbatim.
-    instruction;
-    constructor(key, movedTo, instruction) {
-        this.key = key;
-        this.movedTo = movedTo;
-        this.instruction = instruction;
-    }
-}
-exports.RetiredHomeConfigKey = RetiredHomeConfigKey;
-/**
- * Every retired home-config key — the ONE place in the codebase where a dead home-config key may be
- * named, exactly as `RETIRED_CONFIG_KEYS` is for webpieces.config.json. Newest at the bottom.
- *
- * When you retire a key here, DELETE its read path in the same change. `home-config.spec.ts` asserts
- * every entry below actually FAILS the load, so a fallback that quietly accepts one turns it red.
- */
-exports.RETIRED_HOME_CONFIG_KEYS = [
-    // `captureBuildGateLog` was the working name while the build-log feature was being built, and it
-    // appears in the branch history and in in-flight drafts, so it is exactly the spelling an agent
-    // reconstructing the file from memory will type. It never shipped in a release; it is listed so that
-    // typing it produces the DELETION instruction rather than a bare "unknown key". It used to point at
-    // `experimental.buildGateLogCapture`; that key is itself gone now (capture is unconditional), so the
-    // destination is "no replacement, delete it" and this entry is the only place either name survives.
-    new RetiredHomeConfigKey('experimental.captureBuildGateLog', '', 'Delete the key. Capturing the build gate\'s output to a log file is no longer optional — every ' +
-        'build the PR gate runs writes its full output to a file and prints a "FullLog :" pointer at it.'),
-];
 /**
  * Loads and validates `~/.webpieces/config.json`, and resolves whether a path IS that file (for the
  * guard carve-out that keeps a rejection repairable).
@@ -336,6 +328,10 @@ exports.RETIRED_HOME_CONFIG_KEYS = [
  * ignored with a warning). The class docblock at the top of this file has the reasoning.
  */
 let HomeConfigService = class HomeConfigService {
+    docKeys;
+    constructor(docKeys = new home_config_doc_keys_1.HomeDocKeys()) {
+        this.docKeys = docKeys;
+    }
     /** Absolute path to the preference file. `homeDir` is a parameter so specs never touch a real HOME. */
     configPath(homeDir = os.homedir()) {
         return path.join(homeDir, exports.HOME_CONFIG_DIR, exports.HOME_CONFIG_FILE);
@@ -433,6 +429,7 @@ let HomeConfigService = class HomeConfigService {
     // webpieces-disable no-any-unknown -- see parse(); the document is user-authored and unvalidated
     validate(raw, file) {
         this.assertNotRetired(raw, file);
+        this.docKeys.assertAreStrings(raw, '', (m) => this.error(file, m));
         this.warnUnknownKeys(Object.keys(raw), exports.ALLOWED_TOP_LEVEL, '');
         const section = raw[exports.HOME_EXPERIMENTAL_SECTION];
         if (section !== undefined && (typeof section !== 'object' || section === null || Array.isArray(section))) {
@@ -440,6 +437,7 @@ let HomeConfigService = class HomeConfigService {
         }
         // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above
         const experimental = (section ?? {});
+        this.docKeys.assertAreStrings(experimental, `${exports.HOME_EXPERIMENTAL_SECTION}.`, (m) => this.error(file, m));
         this.warnUnknownKeys(Object.keys(experimental), exports.ALLOWED_EXPERIMENTAL, `${exports.HOME_EXPERIMENTAL_SECTION}.`);
         return new HomeConfig(this.readOptionalBoolean(experimental, exports.HOME_KEY_WHOLE_REPO_BUILD_GUARD, file, GUARD_OFF_WHEN_ABSENT), this.readOptionalBoolean(experimental, exports.HOME_KEY_ORPHAN_DIR_SWEEP, file, GUARD_OFF_WHEN_ABSENT), this.readOptionalPositiveInteger(experimental, exports.HOME_KEY_MAX_CONCURRENT_BUILDS, file, exports.DEFAULT_MAX_CONCURRENT_BUILDS));
     }
@@ -508,7 +506,7 @@ let HomeConfigService = class HomeConfigService {
     // key whose value it should be MOVING, which is the whole reason the retirement table exists.
     // webpieces-disable no-any-unknown -- see parse()
     assertNotRetired(raw, file) {
-        for (const entry of exports.RETIRED_HOME_CONFIG_KEYS) {
+        for (const entry of home_config_retired_keys_1.RETIRED_HOME_CONFIG_KEYS) {
             if (!this.isPresentAt(raw, entry.key))
                 continue;
             const destination = entry.movedTo === ''
@@ -560,14 +558,34 @@ let HomeConfigService = class HomeConfigService {
      * uses in this package for the same category of finding — something a human may want to know about
      * and is not required to act on.
      */
+    /**
+     * The sentence for a flag a HUMAN ended, or '' when this key is not one.
+     *
+     * Consulted BEFORE the retired-near-miss hint and before the generic "typo or newer release" line,
+     * because for these keys that generic line is actively misleading: it invites the reader to check
+     * their spelling or upgrade, when the truth is that they spelled it correctly, they are on a new
+     * enough release, and the thing they asked for now happens anyway.
+     */
+    endedExperimentHint(dotted) {
+        const ended = home_config_retired_keys_1.ENDED_EXPERIMENTS.find((e) => e.key === dotted);
+        if (ended === undefined)
+            return '';
+        return ` That experiment ENDED in @webpieces ${ended.endedIn}. ${ended.note}`;
+    }
     warnUnknownKeys(found, allowed, prefix) {
+        // ACCEPTED everywhere, ADVERTISED nowhere. A documentation key is not a setting, so it is
+        // skipped here rather than added to the allowed lists: those lists are walked elsewhere to build
+        // typed sample documents, and listing `_doc` under "Understood here" — or offering it as the
+        // nearest match to a misspelled setting — would send someone hunting for what it configures.
+        // It configures nothing.
         for (const key of found) {
-            if (allowed.includes(key))
+            if (allowed.includes(key) || this.docKeys.isDocumentationKey(key))
                 continue;
             const near = this.nearestKnownKey(key, allowed);
             const guess = near !== ''
                 ? ` Did you mean "${prefix}${near}"?`
-                : this.nearRetiredHint(`${prefix}${key}`)
+                : this.endedExperimentHint(`${prefix}${key}`)
+                    || this.nearRetiredHint(`${prefix}${key}`)
                     || ' If it is a typo, fix the spelling; if it is from a NEWER @webpieces than this repo pins, upgrade this repo to use it.';
             this.warn(`"${prefix}${key}" is not a key this @webpieces release understands, so it was IGNORED ` +
                 `and had NO effect.${guess} Understood here: ${this.quotedKeys(allowed, prefix)}.`);
@@ -588,7 +606,7 @@ let HomeConfigService = class HomeConfigService {
      * dead one.
      */
     nearRetiredHint(dottedKey) {
-        for (const entry of exports.RETIRED_HOME_CONFIG_KEYS) {
+        for (const entry of home_config_retired_keys_1.RETIRED_HOME_CONFIG_KEYS) {
             if (this.editDistance(dottedKey.toLowerCase(), entry.key.toLowerCase()) > 2)
                 continue;
             const destination = entry.movedTo === ''
@@ -652,6 +670,7 @@ let HomeConfigService = class HomeConfigService {
 };
 exports.HomeConfigService = HomeConfigService;
 exports.HomeConfigService = HomeConfigService = tslib_1.__decorate([
-    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton)
+    (0, inversify_1.injectable)(inversify_1.bindingScopeValues.Singleton),
+    tslib_1.__metadata("design:paramtypes", [home_config_doc_keys_1.HomeDocKeys])
 ], HomeConfigService);
 //# sourceMappingURL=home-config.js.map

package/src/home-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"home-config.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/home-config.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,uDAAkD;AAClD,yCAAqC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHG;AACU,QAAA,eAAe,GAAG,YAAY,CAAC;AAC/B,QAAA,gBAAgB,GAAG,aAAa,CAAC;AAE9C,uGAAuG;AACvG,qGAAqG;AACrG,mCAAmC;AACtB,QAAA,yBAAyB,GAAG,cAAc,CAAC;AACxD,sGAAsG;AACtG,wGAAwG;AACxG,6BAA6B;AAC7B,EAAE;AACF,yGAAyG;AACzG,yGAAyG;AACzG,yGAAyG;AACzG,qGAAqG;AACrG,oGAAoG;AACpG,8FAA8F;AACjF,QAAA,+BAA+B,GAAG,wBAAwB,CAAC;AACxE,sGAAsG;AACtG,wFAAwF;AAC3E,QAAA,yBAAyB,GAAG,kBAAkB,CAAC;AAC5D;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,qBAAqB,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;;;;;GAQG;AACU,QAAA,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;;GAWG;AACU,QAAA,iBAAiB,GAAsB,CAAC,iCAAyB,CAAC,CAAC;AAChF;;;;;;;;GAQG;AACU,QAAA,6BAA6B,GAAsB;IAC5D,uCAA+B,EAAE,iCAAyB;CAC7D,CAAC;AACW,QAAA,4BAA4B,GAAsB,CAAC,sCAA8B,CAAC,CAAC;AACnF,QAAA,oBAAoB,GAAsB;IACnD,GAAG,qCAA6B,EAAE,GAAG,oCAA4B;CACpE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,iGAAiG;AACjG,MAAM,kBAAkB,GAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAE1H,4GAA4G;AAC5G,MAAa,UAAU;IACnB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAU;IAE7B;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAU;IAExB;;;;;;;;OAQG;IACH,mBAAmB,CAAS;IAE5B,sGAAsG;IACtG,iGAAiG;IACjG,sGAAsG;IACtG,gGAAgG;IAChG,iGAAiG;IACjG,uFAAuF;IACvF,YACI,mBAA4B,EAAE,cAAuB,EAAE,mBAA2B;QAElF,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IACnD,CAAC;CACJ;AAvDD,gCAuDC;AAED;;;;;;;GAOG;AACH,MAAa,oBAAoB;IAC7B,0FAA0F;IAC1F,GAAG,CAAS;IACZ,oEAAoE;IACpE,OAAO,CAAS;IAChB,yEAAyE;IACzE,WAAW,CAAS;IAEpB,YAAY,GAAW,EAAE,OAAe,EAAE,WAAmB;QACzD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;CACJ;AAbD,oDAaC;AAED;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAoC;IACrE,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,oGAAoG;IACpG,qGAAqG;IACrG,oGAAoG;IACpG,IAAI,oBAAoB,CACpB,kCAAkC,EAAE,EAAE,EACtC,iGAAiG;QACjG,iGAAiG,CACpG;CACJ,CAAC;AAEF;;;;;;;GAOG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC1B,uGAAuG;IACvG,UAAU,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAe,EAAE,wBAAgB,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,iGAAiG;QACjG,gGAAgG;QAChG,gGAAgG;QAChG,0CAA0C;QAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,UAAU,CACjB,qBAAqB,EAAE,qBAAqB,EAAE,qCAA6B,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAiB,EAAE,UAAkB,EAAE,CAAC,OAAO,EAAE;QAC9D,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/G,CAAC;IAED,oGAAoG;IAC5F,UAAU,CAAC,SAAiB,EAAE,OAAe;QACjD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,IAAY;QAC9B,qGAAqG;QACrG,kGAAkG;QAClG,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,KAAY;QACzB,mGAAmG;QACnG,MAAM,IAAI,GAAI,KAA4C,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,kGAAkG;IAClG,2GAA2G;IACnG,KAAK,CAAC,GAAW,EAAE,IAAY;QACnC,qGAAqG;QACrG,4FAA4F;QAC5F,8DAA8D;QAC9D,IAAI,CAAC;YACD,qFAAqF;YACrF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC,CAAC;YACtG,CAAC;YACD,8FAA8F;YAC9F,OAAO,MAAiC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,YAAY,+BAAa;gBAAE,MAAM,KAAK,CAAC;YAChD,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,+BAA+B,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClH,CAAC;IACL,CAAC;IAED,iGAAiG;IACzF,QAAQ,CAAC,GAA4B,EAAE,IAAY;QACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,yBAAiB,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,iCAAyB,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,iCAAyB,0BAA0B,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,8FAA8F;QAC9F,MAAM,YAAY,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;QAChE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,4BAAoB,EAAE,GAAG,iCAAyB,GAAG,CAAC,CAAC;QACvG,OAAO,IAAI,UAAU,CACjB,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,uCAA+B,EAAE,IAAI,EAAE,qBAAqB,CAAC,EACpG,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,iCAAyB,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAC9F,IAAI,CAAC,2BAA2B,CAC5B,YAAY,EAAE,sCAA8B,EAAE,IAAI,EAAE,qCAA6B,CAAC,CACzF,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,kDAAkD;IAClD,yDAAyD;IACjD,2BAA2B,CAC/B,YAAqC,EAAE,GAAW,EAAE,IAAY,EAAE,UAAkB;QAEpF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACnC,IAAI,iCAAyB,IAAI,GAAG,qDAAqD;gBACzF,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,yCAAyC;gBACjE,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,6CAA6C;gBAC5E,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,kDAAkD;IAClD,yDAAyD;IACjD,mBAAmB,CACvB,YAAqC,EAAE,GAAW,EAAE,IAAY,EAAE,UAAmB;QAErF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;IACtF,CAAC;IAED,kDAAkD;IAClD,yDAAyD;IACjD,SAAS,CAAC,KAAc,EAAE,GAAW,EAAE,IAAY,EAAE,GAAW;QACpE,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACnC,IAAI,iCAAyB,IAAI,GAAG,wBAAwB;gBAC5D,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,sGAAsG;IACtG,8FAA8F;IAC9F,kDAAkD;IAC1C,gBAAgB,CAAC,GAA4B,EAAE,IAAY;QAC/D,KAAK,MAAM,KAAK,IAAI,gCAAwB,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,KAAK,EAAE;gBACpC,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,gBAAgB,KAAK,CAAC,OAAO,IAAI,CAAC;YACxC,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACnC,IAAI,KAAK,CAAC,GAAG,iBAAiB,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAED,oGAAoG;IACpG,kDAAkD;IAC1C,WAAW,CAAC,GAA4B,EAAE,MAAc;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5F,8FAA8F;QAC9F,OAAQ,OAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,OAA0B,EAAE,MAAc;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACK,eAAe,CAAC,KAAe,EAAE,OAA0B,EAAE,MAAc;QAC/E,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE;gBACrB,CAAC,CAAC,kBAAkB,MAAM,GAAG,IAAI,IAAI;gBACrC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;uBACpC,wHAAwH,CAAC;YAClI,IAAI,CAAC,IAAI,CACL,IAAI,MAAM,GAAG,GAAG,wEAAwE;gBACxF,qBAAqB,KAAK,qBAAqB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,eAAe,CAAC,SAAiB;QACrC,KAAK,MAAM,KAAK,IAAI,gCAAwB,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC;gBAAE,SAAS;YACtF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,KAAK,EAAE;gBACpC,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,gBAAgB,KAAK,CAAC,OAAO,GAAG,CAAC;YACvC,OAAO,kCAAkC,KAAK,CAAC,GAAG,aAAa,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACvG,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,qGAAqG;IACrG,+DAA+D;IACvD,IAAI,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,OAAO,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;;;OASG;IACK,eAAe,CAAC,GAAW,EAAE,OAA0B;QAC3D,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/E,IAAI,QAAQ,IAAI,YAAY;gBAAE,SAAS;YACvC,YAAY,GAAG,QAAQ,CAAC;YACxB,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,qGAAqG;IAC7F,YAAY,CAAC,CAAS,EAAE,CAAS;QACrC,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,OAAO,GAAa,CAAC,CAAC,CAAC,CAAC;YAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC;QACvB,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,sGAAsG;IACtG,+FAA+F;IACvF,KAAK,CAAC,IAAY,EAAE,MAAc;QACtC,OAAO,8BAA8B,MAAM,MAAM;YAC7C,SAAS,IAAI,IAAI;YACjB,wFAAwF;YACxF,8FAA8F;YAC9F,qEAAqE,CAAC;IAC9E,CAAC;CACJ,CAAA;AA3UY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;GAC5B,iBAAiB,CA2U7B","sourcesContent":["import * as fs from 'fs';\nimport * as os from 'os';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { InformAiError } from './inform-ai-error';\nimport { toError } from './to-error';\n\n/**\n * `~/.webpieces/config.json` — the MACHINE-GLOBAL preference file, and a different thing from the repo's\n * tracked `webpieces.config.json`. It is EXPERIMENTAL and entirely OPTIONAL.\n *\n * ─── ABSENT IS THE NORMAL STATE, AND IT IS NEVER AN ERROR ─────────────────────────────────────────────\n * Essentially every consumer of these packages has no such file, and for them every `wp-*` command must\n * behave byte-for-byte as it did before this file was ever read: no error, no warning, no log line, no\n * extra file, nothing. `load()` therefore treats EVERY failure to READ the bytes — the file missing, the\n * `~/.webpieces` directory missing, a permission error, a path component that is not a directory — as\n * \"not opted in\", and returns all-defaults silently. That is not a fallback for a wrong shape; it is the\n * definition of \"the user did not create this file\".\n *\n * ─── THE STANDING RULE, FOR WHOEVER EDITS THIS FILE NEXT ──────────────────────────────────────────────\n * This file is MACHINE-GLOBAL: ONE document on the disk, read by EVERY repo on the machine, and those\n * repos are pinned to DIFFERENT webpieces releases. Two rules follow, and they are not negotiable:\n *\n *   (a) NO KEY MAY EVER BE REQUIRED.  `readOptionalBoolean` and `readOptionalPositiveInteger` are the\n *       ONLY readers, and BOTH are optional-by-construction. There is no `readRequiredBoolean`, no\n *       `RequiredHomeFlag`, no `REQUIRED_HOME_FLAGS` — those existed once and were deleted; do not\n *       reintroduce them under any name, in any type.\n *   (b) AN UNKNOWN KEY IS IGNORED, never rejected.  `warnUnknownKeys` warns; nothing throws.\n *\n * Both halves are needed, and either one alone still leaves a file that some installed release rejects:\n *\n *   (a) covers the OLD FILE on a NEW release — a document written before a key existed, missing it.\n *   (b) covers the NEW FILE on an OLD release — a document carrying a key that release never heard of.\n *\n * Break either one and every repo on the machine that is not on the newest release hard-blocks: a\n * rejection here fails config load, and that denies every tool call in that repo until somebody upgrades\n * all of them in lockstep. That is the outage this design exists to make impossible, and it is not\n * hypothetical — it is the shape of the incident recorded at the bottom of this docblock.\n *\n * `home-config.spec.ts` pins both halves, and pins them by ENUMERATING `ALLOWED_EXPERIMENTAL` rather\n * than by a hand-written list, so a key added later is covered by the invariant automatically instead of\n * silently escaping it.\n *\n * ─── PRESENT IS STRICT ABOUT WHAT IT UNDERSTANDS, AND FORWARD-COMPATIBLE ABOUT WHAT IT DOES NOT ───────\n * Once the bytes are readable, someone DELIBERATELY created this file, and three of the four failure\n * modes are REJECTED exactly as webpieces.config.json rejects them (see `retired-config-keys.ts`), with\n * an error naming the exact fix and no `??` fallback anywhere:\n *\n *   UNPARSEABLE   not JSON, or not a single JSON object          → REJECT\n *   RETIRED KEY   listed in RETIRED_HOME_CONFIG_KEYS             → REJECT, carrying the migration\n *   WRONG TYPE    a KNOWN key holding a value of the wrong type  → REJECT\n *                 (a non-boolean for a boolean key; anything but a positive whole number for a\n *                  numeric one — see `readOptionalPositiveInteger`)\n *   UNKNOWN KEY   a key no version of this validator has heard of → IGNORED, with a warning\n *\n * ─── WHY THE LAST ROW DIFFERS FROM webpieces.config.json, WHICH STAYS STRICT ──────────────────────────\n * The difference is not a softening of policy; it is that the two files have different CARDINALITY.\n *\n *   webpieces.config.json is REPO-TRACKED. One repo, one file, one pinned @webpieces release, and the\n *   file moves through git in lockstep with the code that reads it. \"One version reads this document\" is\n *   true by construction, so an unknown key there can only be a typo or a dead key — and rejecting it is\n *   right, because it is the delivery mechanism for the migration.\n *\n *   THIS file is MACHINE-GLOBAL. ONE document, read by EVERY repo on the machine, and those repos pin\n *   DIFFERENT releases — deliberately, since a repo's pin is tracked and moves when its own PR lands.\n *   So \"an unknown key\" here has a second, entirely legitimate cause that cannot occur in the repo file:\n *   a key a NEWER release added, being read by an OLDER one. Rejecting it means adding any key to this\n *   file hard-blocks every repo on the machine that has not yet been upgraded — an outage produced by\n *   opting IN to an experimental flag, which is the same shape of failure that moved these flags out of\n *   webpieces.config.json in the first place (see the section below).\n *\n * This is the exact mirror of the already-settled rule that no key here may be REQUIRED. Both halves fall\n * out of one fact: the set of valid documents must be non-empty for EVERY release on the machine at once.\n *   • omit a new key → an old release must not demand it   (already true: every key is optional)\n *   • add a new key  → an old release must not reject it   (this change)\n * With only the first half, the set of valid files was still empty the moment a key was added.\n *\n * ─── WHAT THAT COSTS, AND WHAT PAYS FOR IT ────────────────────────────────────────────────────────────\n * The cost is real and worth stating plainly: a TYPO now silently does nothing. `\"whole-repo-build-gaurd\"`\n * used to be a loud rejection; it is now a key nothing reads, so the flag keeps its default and nothing\n * about the machine's behaviour reveals the mistake.\n *\n * Every key here is an OPT-IN that defaults OFF, so a typo costs the author the feature they meant to\n * switch on: misspell `whole-repo-build-guard` and the guard stays inert while they believe they armed\n * it. That is the milder of the two failures — nothing they were doing stops working — but it is still\n * invisible without a signal, which is why the warning below is not optional decoration, and why\n * `nearestKnownKey` had to get fuzzier than the case-insensitive match it replaced: `gaurd` is a\n * transposition, exactly the class of typo an equality test cannot see.\n *\n * That is mitigated, not eliminated, by making the ignore VISIBLE: every unknown key is printed once per\n * load as a `[webpieces]` warning on stderr, and `nearestKnownKey` upgrades that line with a \"did you\n * mean\" whenever the key is within a two-character edit of a known one — which is what a typo is, and\n * what a key from a newer release is not. A warning naming a close match is the strongest signal\n * available that does not also block a colleague on an older pin.\n *\n * The trade was taken this way round because the two mistakes are not symmetric. A typo costs its author\n * one flag that did not turn on, discoverable the moment they check whether the feature is doing\n * anything, on their own machine. A rejection costs every repo on the machine every tool call, and the\n * person it blocks is usually not the person who edited the file.\n *\n * An unknown TOP-LEVEL key is ignored on the identical argument, and it is the more important half: a\n * future release adding a second section (`preferences`, say) beside `experimental` would otherwise be\n * unreadable by every older release on the machine, which is precisely the sequencing being deleted here.\n *\n * ─── REJECTING IS STILL SELF-RECOVERABLE, FOR THE THREE ROWS THAT STILL REJECT ────────────────────────\n * A Write/Edit targeting THIS path is an unconditional PASS in the hook guards (see `isHomeConfigPath`,\n * wired into ai-hook-rules' runner beside the webpieces.config.json pass), so an agent can always repair\n * the file the loader just rejected.\n *\n * ─── WHY A MACHINE-LOCAL SWITCH LIVES HERE AND NOT IN webpieces.config.json ───────────────────────────\n * `whole-repo-build-guard` first shipped as an ordinary validated guard: `mode: 'ON'` by default AND an\n * entry required under `hookGuards`. The consequence on upgrade was an outage — a consumer repo that had\n * not yet added the entry hit fault Y, which blocks EVERY Bash call, for a feature nobody had opted into.\n *\n * The rule that buys back: a switch that lives HERE needs no file, no key and no edit to be in its\n * default state. A repo-tracked config key cannot express that — an entry there is something every\n * consumer must add, on a schedule set by whoever bumps the release.\n *\n * Note which half of that was the outage. It was the REQUIRED KEY: the failure was at config LOAD,\n * before any command was judged. That is why every key here stays OPTIONAL and why an absent file\n * returns all-defaults silently.\n *\n * The DEFAULT is settled separately, by a standing policy this file does not get to re-litigate: EVERY\n * `experimental.*` flag ships OFF and stays OFF for two years. `whole-repo-build-guard` is one of them,\n * so it is OFF unless a machine writes `{\"experimental\": {\"whole-repo-build-guard\": true}}`. A flag that\n * defaults ON is not an experiment — it is a shipped behaviour that skipped its soak period, and it\n * changes what every agent on every machine can do the moment they upgrade. Low uptake of an opt-in\n * experiment is information ABOUT the experiment; it is not a licence to force it on everybody.\n */\nexport const HOME_CONFIG_DIR = '.webpieces';\nexport const HOME_CONFIG_FILE = 'config.json';\n\n// The `experimental` section and its keys. Named as constants because both the validator and its error\n// text must spell them identically — a validator whose message names a different key than the one it\n// checks is worse than no message.\nexport const HOME_EXPERIMENTAL_SECTION = 'experimental';\n// The on/off switch for `whole-repo-build-guard`. Spelled with the GUARD's own name, hyphens and all,\n// so `grep -rn whole-repo-build-guard` finds the switch beside the guard — and so nobody has to learn a\n// second name for one thing.\n//\n// `buildGateLogCapture` used to sit beside it and is GONE: capturing the build's output to a file is now\n// what the gate always does (see BuildAffected.runBuildGate), so the flag had nothing left to switch. It\n// is deliberately NOT in RETIRED_HOME_CONFIG_KEYS — a retired key here is a HARD FAILURE on exact match,\n// and this file is machine-global and hand-authored, so a machine that opted INTO a behaviour it now\n// gets unconditionally must not have its shell broken for saying yes early. It falls through to the\n// unknown-key WARNING instead, which says the key had no effect and names what is understood.\nexport const HOME_KEY_WHOLE_REPO_BUILD_GUARD = 'whole-repo-build-guard';\n// The on/off switch for the orphan-directory sweep `wp-checkout-clean-main` runs. Named for the thing\n// it switches, exactly as the guard key above is — one name, greppable from either end.\nexport const HOME_KEY_ORPHAN_DIR_SWEEP = 'orphan-dir-sweep';\n/**\n * How many builds may be live on this machine before `pnpm wp-build` refuses to start another. The FIRST\n * NUMERIC key in this file — see `readOptionalPositiveInteger` for why \"known key, wrong type → REJECT\"\n * applies to it exactly as it applies to the booleans.\n */\nexport const HOME_KEY_MAX_CONCURRENT_BUILDS = 'maxConcurrentBuilds';\n\n/**\n * EVERY key's value when it is not named — including on the machine with no such file at all, which is\n * essentially every machine. False, for all of them, with no exceptions and no per-key table.\n *\n * That uniformity is the policy, not a coincidence: every `experimental.*` flag ships OFF and stays OFF\n * for two years, so \"this machine never opted in\" is byte-for-byte the behaviour of having no file. ON\n * requires an explicit `true`; absent, and an explicit `false`, are the same state.\n *\n * Named rather than written as a bare `false` at each call site so the reason travels with the value —\n * and there is deliberately exactly ONE such constant, because a second one would be a second place a\n * default is stated, free to disagree with this one.\n */\nconst GUARD_OFF_WHEN_ABSENT = false;\n\n/**\n * The one NON-boolean default, and the one key whose absent value is not `GUARD_OFF_WHEN_ABSENT`.\n *\n * Three, because contention between agents running full sweeps at once was measured at ~3.2x total test\n * time (CLAUDE.md § \"What actually makes builds slow\"), and a fourth simultaneous build is well past the\n * point where anybody gains anything. It is a NUMBER rather than an on/off flag because the useful\n * machine-to-machine difference here is core count, not opinion — which is also why it is the one key in\n * this file with a non-false default: \"0 builds allowed\" would be a machine that cannot build at all.\n */\nexport const DEFAULT_MAX_CONCURRENT_BUILDS = 3;\n\n/**\n * The complete UNDERSTOOD shape. A key not on these lists is ignored with a warning rather than\n * rejected (see the class docblock: this document is machine-global and older releases must survive\n * meeting a newer release's key), so adding a key still means adding it here — a key absent from these\n * lists is never read at all, and the flag it was meant to set keeps the default above.\n *\n * EXPORTED so `home-config.spec.ts` can ENUMERATE them rather than restate them. The cross-version\n * invariant (\"every key is independently omittable\") is only as good as the list the test walks, and a\n * hand-written copy of that list means a NEW key silently escapes the invariant on the day it is added —\n * which is the one failure mode nobody would notice until an older release started rejecting files.\n * Walking the real constant makes the test cover a new key the moment it appears here.\n */\nexport const ALLOWED_TOP_LEVEL: readonly string[] = [HOME_EXPERIMENTAL_SECTION];\n/**\n * The understood `experimental.*` keys, SPLIT BY VALUE TYPE — because the spec walks these lists to build\n * a sample document, and a sample that wrote `false` into a numeric key would be rejected by the very\n * loader it is testing. Splitting them means a key added to either list is covered by the cross-version\n * invariants automatically, with the right sample value, which is the whole reason the lists are exported.\n *\n * `ALLOWED_EXPERIMENTAL` stays the ONE list the validator warns against — derived from the two, never\n * hand-maintained beside them, so it cannot fall out of step.\n */\nexport const ALLOWED_EXPERIMENTAL_BOOLEANS: readonly string[] = [\n    HOME_KEY_WHOLE_REPO_BUILD_GUARD, HOME_KEY_ORPHAN_DIR_SWEEP,\n];\nexport const ALLOWED_EXPERIMENTAL_NUMBERS: readonly string[] = [HOME_KEY_MAX_CONCURRENT_BUILDS];\nexport const ALLOWED_EXPERIMENTAL: readonly string[] = [\n    ...ALLOWED_EXPERIMENTAL_BOOLEANS, ...ALLOWED_EXPERIMENTAL_NUMBERS,\n];\n\n/**\n * ─── EVERY KEY IS OPTIONAL, AND THAT IS A HARD REQUIREMENT OF WHERE THIS FILE LIVES ───────────────────\n * This file is MACHINE-GLOBAL: one document, read by every repo on the machine, and those repos pin\n * DIFFERENT webpieces releases. A REQUIRED key cannot survive that, because it makes the set of valid\n * files EMPTY:\n *\n *   • omit the new key  → the NEW release rejects the file (\"REQUIRED and not set\")\n *   • add the new key   → every OLDER release rejects the file (\"not a known key\")\n *\n * There is no third option, and both rejections block. `whole-repo-build-guard` was required for the\n * reason recorded in #627 — a flag that decides whether a command RUNS should not be inferred — and that\n * reasoning was sound for a single version and wrong for a shared file. It is optional now, along with\n * every other key.\n *\n * Absent then reads as the ONE declared default, `GUARD_OFF_WHEN_ABSENT`: false, for every key without\n * exception, which is byte-for-byte the behaviour of having no file at all.\n *\n * The other half of cross-version safety — an OLD release IGNORING a key a NEW one added, rather than\n * rejecting it — is solved by `warnUnknownKeys` below. The two halves are one invariant: for the set of\n * valid documents to be non-empty across every release installed on the machine, neither omitting a key\n * nor adding one may be an error.\n */\n\n// Read errors that mean \"the file is not there / not reachable\" rather than \"the file is wrong\". Every\n// one of these resolves to the all-defaults config, silently. Widened deliberately past ENOENT: the\n// parent `~/.webpieces` may not exist (ENOENT), may be a file (ENOTDIR), may be unreadable (EACCES /\n// EPERM), and the path itself may be a directory (EISDIR). None of those is a user who opted in.\nconst ABSENT_ERROR_CODES: readonly string[] = ['ENOENT', 'ENOTDIR', 'EACCES', 'EPERM', 'EISDIR', 'ELOOP', 'ENAMETOOLONG'];\n\n/** The parsed `~/.webpieces/config.json`. Data-only (per CLAUDE.md — classes, not interfaces, for data). */\nexport class HomeConfig {\n    /**\n     * EXPERIMENTAL, and OFF unless this machine opts IN with an explicit `true`. When true,\n     * `whole-repo-build-guard` BLOCKS a Bash command that would build the WHOLE monorepo and hands back\n     * the repo's own scoped build command (`pnpm wp-build`). False — and absent, and no file at all —\n     * makes the guard completely inert: no block, no log, no message.\n     *\n     * This is the guard's ONLY switch, and it is an OPT-IN. There is deliberately no\n     * webpieces.config.json entry for it (see RETIRED_CONFIG_KEYS): a guard that every consumer must\n     * ADD A KEY to avoid being blocked by is a guard that ships an outage on upgrade, which is exactly\n     * what happened once. Living here means the default state needs no file, no key and no edit.\n     */\n    wholeRepoBuildGuard: boolean;\n\n    /**\n     * EXPERIMENTAL. When true, `wp-checkout-clean-main` ARCHIVES the orphan directories it finds — the\n     * package directories left behind on every clone by an `nx g move`, which git cannot remove because\n     * an ignored `dist/` or `node_modules/` survives the deletion of every tracked file under them.\n     *\n     * False — and the all-defaults value for a machine with no such file — means the sweep only REPORTS\n     * what it found and moves nothing. That asymmetry is the point of shipping this behind the home\n     * config at all: the author can run it live across their own clones for a release while every\n     * colleague's repo is untouched, and neither state depends on a tracked key anybody must add.\n     *\n     * The sweep itself never deletes (see OrphanDirArchiver): directories move under `.webpieces/trash/`\n     * with a printed `recover=`, so the worst case for a false positive is a `mv` somebody undoes. The\n     * ARCHIVE is reaped after 30 days, which is a real deletion — of the second copy, on a timer long\n     * enough that anything still wanted has been noticed.\n     */\n    orphanDirSweep: boolean;\n\n    /**\n     * How many builds may be live on this MACHINE before `pnpm wp-build` refuses to start another. Live\n     * is counted from `~/.webpieces/builds.log` — see `builds-log.ts`, and\n     * `decisions/0006-the-build-ledger-is-machine-global.md` for why that file lives outside any repo.\n     *\n     * `DEFAULT_MAX_CONCURRENT_BUILDS` when absent. The gate stages (`wp-review-upsert-pr`,\n     * `wp-finish-upsert-pr`) are NEVER refused whatever this says — blocking the sanctioned path is how\n     * you wedge a PR — though their builds do count toward what refuses an ad-hoc `wp-build`.\n     */\n    maxConcurrentBuilds: number;\n\n    // ALL THREE required, no defaults. A defaulted parameter would leave `new HomeConfig(true)` compiling\n    // after this class grew a second flag, silently meaning \"guard off\" — an old spelling that still\n    // typechecks with a changed meaning is exactly the shim this repo does not ship. The 3-arg arity this\n    // class had before `maxConcurrentBuilds` is DELETED rather than overloaded, per CLAUDE.md § \"NO\n    // webpieces surface is released backwards-compatible\": the compile errors ARE the migration. The\n    // absent-file state is constructed in exactly one place — load()'s absent-file branch.\n    constructor(\n        wholeRepoBuildGuard: boolean, orphanDirSweep: boolean, maxConcurrentBuilds: number,\n    ) {\n        this.wholeRepoBuildGuard = wholeRepoBuildGuard;\n        this.orphanDirSweep = orphanDirSweep;\n        this.maxConcurrentBuilds = maxConcurrentBuilds;\n    }\n}\n\n/**\n * One retired `~/.webpieces/config.json` key and the mechanical edit that replaces it. Data-only.\n *\n * This mirrors `RetiredConfigKey` rather than reusing it: that table's entries carry a `scope`\n * (rule-name vs key-in-section) that describes webpieces.config.json's two-level layout and means\n * nothing here, and its `label` convention names that file's sections. One shared class covering both\n * would be a type with fields that are dead for half its instances.\n */\nexport class RetiredHomeConfigKey {\n    // Dotted path exactly as it appears in the file, e.g. `experimental.captureBuildGateLog`.\n    key: string;\n    // Where the value goes now. Empty when the key is deleted outright.\n    movedTo: string;\n    // The imperative fix, written for the agent that will apply it verbatim.\n    instruction: string;\n\n    constructor(key: string, movedTo: string, instruction: string) {\n        this.key = key;\n        this.movedTo = movedTo;\n        this.instruction = instruction;\n    }\n}\n\n/**\n * Every retired home-config key — the ONE place in the codebase where a dead home-config key may be\n * named, exactly as `RETIRED_CONFIG_KEYS` is for webpieces.config.json. Newest at the bottom.\n *\n * When you retire a key here, DELETE its read path in the same change. `home-config.spec.ts` asserts\n * every entry below actually FAILS the load, so a fallback that quietly accepts one turns it red.\n */\nexport const RETIRED_HOME_CONFIG_KEYS: readonly RetiredHomeConfigKey[] = [\n    // `captureBuildGateLog` was the working name while the build-log feature was being built, and it\n    // appears in the branch history and in in-flight drafts, so it is exactly the spelling an agent\n    // reconstructing the file from memory will type. It never shipped in a release; it is listed so that\n    // typing it produces the DELETION instruction rather than a bare \"unknown key\". It used to point at\n    // `experimental.buildGateLogCapture`; that key is itself gone now (capture is unconditional), so the\n    // destination is \"no replacement, delete it\" and this entry is the only place either name survives.\n    new RetiredHomeConfigKey(\n        'experimental.captureBuildGateLog', '',\n        'Delete the key. Capturing the build gate\\'s output to a log file is no longer optional — every ' +\n        'build the PR gate runs writes its full output to a file and prints a \"FullLog :\" pointer at it.',\n    ),\n];\n\n/**\n * Loads and validates `~/.webpieces/config.json`, and resolves whether a path IS that file (for the\n * guard carve-out that keeps a rejection repairable).\n *\n * Strict about everything it UNDERSTANDS (a retired key, a known key of the wrong type, and a document\n * that is not JSON all throw); forward-compatible about everything it does not (an unknown key is\n * ignored with a warning). The class docblock at the top of this file has the reasoning.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class HomeConfigService {\n    /** Absolute path to the preference file. `homeDir` is a parameter so specs never touch a real HOME. */\n    configPath(homeDir: string = os.homedir()): string {\n        return path.join(homeDir, HOME_CONFIG_DIR, HOME_CONFIG_FILE);\n    }\n\n    /**\n     * The preferences. Returns all-defaults, silently and without touching anything, when the file is not\n     * there. THROWS InformAiError, naming the fix, when a file that IS there is wrong in a way this\n     * release can be sure about — unparseable, a RETIRED key, or a KNOWN key of the wrong type. A key it\n     * simply does not recognise is ignored with a warning, because it may be a newer release's key and\n     * this file is shared by every repo on the machine.\n     */\n    load(homeDir: string = os.homedir()): HomeConfig {\n        const raw = this.readIfPresent(this.configPath(homeDir));\n        // THE ABSENT-FILE STATE, and the ONE place it is constructed. Every flag is off — the same value\n        // a present file that does not name the key gets, so \"no file\" and \"file that ignores this key\"\n        // can never disagree. Spelled out rather than defaulted in the constructor — see the note there\n        // on why a defaulted parameter is a shim.\n        if (raw === null) {\n            return new HomeConfig(\n                GUARD_OFF_WHEN_ABSENT, GUARD_OFF_WHEN_ABSENT, DEFAULT_MAX_CONCURRENT_BUILDS);\n        }\n        return this.validate(this.parse(raw, this.configPath(homeDir)), this.configPath(homeDir));\n    }\n\n    /**\n     * True when `candidate` names `~/.webpieces/config.json`, in any of the forms an agent writes it:\n     * an absolute path, a `~/`-prefixed path, or one still spelled `$HOME/…` / `${HOME}/…`.\n     *\n     * This is what the hook guards call to grant the file an unconditional Write/Edit PASS. Without it a\n     * strict loader could reject the file while the guards blocked the edit that would fix it — the one\n     * wedge webpieces.config.json is already immune to, and the reason its own carve-out exists.\n     */\n    isHomeConfigPath(candidate: string, homeDir: string = os.homedir()): boolean {\n        if (candidate.trim() === '') return false;\n        return path.resolve(this.expandHome(candidate.trim(), homeDir)) === path.resolve(this.configPath(homeDir));\n    }\n\n    // `~`, `$HOME` and `${HOME}` at the FRONT only — a home reference anywhere else is not a home path.\n    private expandHome(candidate: string, homeDir: string): string {\n        if (candidate === '~') return homeDir;\n        for (const prefix of ['~/', '$HOME/', '${HOME}/']) {\n            if (candidate.startsWith(prefix)) return path.join(homeDir, candidate.slice(prefix.length));\n        }\n        return candidate;\n    }\n\n    /**\n     * The file's bytes, or null meaning \"no such file — the user did not opt in\".\n     *\n     * EVERY read failure is null. This is the single most important behaviour in the file: the absent\n     * path is the path every consumer of these packages is on, and it may never reach an error branch.\n     * An error code outside ABSENT_ERROR_CODES is genuinely exceptional (EIO, EBUSY) and is rethrown,\n     * because silently disabling on a failing disk would be its own kind of lie.\n     */\n    private readIfPresent(file: string): string | null {\n        // webpieces-disable no-unmanaged-exceptions -- chokepoint: this catch IS the \"you have no such file\"\n        // decision, and that decision may never surface as a failure to a user who never created the file\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            return fs.readFileSync(file, 'utf8');\n        } catch (err: unknown) {\n            const error = toError(err);\n            if (this.isAbsent(error)) return null;\n            throw error;\n        }\n    }\n\n    private isAbsent(error: Error): boolean {\n        // webpieces-disable no-any-unknown -- node attaches `code` to fs errors without typing it on Error\n        const code = (error as unknown as Record<string, unknown>)['code'];\n        return typeof code === 'string' && ABSENT_ERROR_CODES.includes(code);\n    }\n\n    // A readable file that is not a JSON object is a WRONG file, not an absent one — hence the throw.\n    // webpieces-disable no-any-unknown -- an unvalidated user-authored document; every field is narrowed below\n    private parse(raw: string, file: string): Record<string, unknown> {\n        // webpieces-disable no-unmanaged-exceptions -- chokepoint: JSON.parse's own message is useless to an\n        // agent on its own, so it is re-thrown as the InformAiError that names the file and the fix\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            // webpieces-disable no-any-unknown -- opaque parsed JSON, narrowed immediately below\n            const parsed: unknown = JSON.parse(raw);\n            if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {\n                throw new InformAiError(this.error(file, 'the file must contain a single JSON OBJECT, e.g. {}.'));\n            }\n            // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above\n            return parsed as Record<string, unknown>;\n        } catch (err: unknown) {\n            const error = toError(err);\n            if (error instanceof InformAiError) throw error;\n            throw new InformAiError(this.error(file, `the file is not valid JSON (${error.message}).`), { cause: error });\n        }\n    }\n\n    // webpieces-disable no-any-unknown -- see parse(); the document is user-authored and unvalidated\n    private validate(raw: Record<string, unknown>, file: string): HomeConfig {\n        this.assertNotRetired(raw, file);\n        this.warnUnknownKeys(Object.keys(raw), ALLOWED_TOP_LEVEL, '');\n        const section = raw[HOME_EXPERIMENTAL_SECTION];\n        if (section !== undefined && (typeof section !== 'object' || section === null || Array.isArray(section))) {\n            throw new InformAiError(this.error(file, `\"${HOME_EXPERIMENTAL_SECTION}\" must be a JSON object.`));\n        }\n        // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above\n        const experimental = (section ?? {}) as Record<string, unknown>;\n        this.warnUnknownKeys(Object.keys(experimental), ALLOWED_EXPERIMENTAL, `${HOME_EXPERIMENTAL_SECTION}.`);\n        return new HomeConfig(\n            this.readOptionalBoolean(experimental, HOME_KEY_WHOLE_REPO_BUILD_GUARD, file, GUARD_OFF_WHEN_ABSENT),\n            this.readOptionalBoolean(experimental, HOME_KEY_ORPHAN_DIR_SWEEP, file, GUARD_OFF_WHEN_ABSENT),\n            this.readOptionalPositiveInteger(\n                experimental, HOME_KEY_MAX_CONCURRENT_BUILDS, file, DEFAULT_MAX_CONCURRENT_BUILDS),\n        );\n    }\n\n    /**\n     * The NUMERIC sibling of {@link readOptionalBoolean}, and the same three rules apply unchanged: the\n     * key is OPTIONAL (absent → `whenAbsent`, stated out loud by the caller), a PRESENT value of the\n     * wrong type is an ERROR, and nothing here ever guesses.\n     *\n     * \"Wrong type\" is stricter than `typeof value === 'number'`, because for this key the wrong NUMBERS\n     * are as meaningless as the wrong types: `0` is a machine that may never build, `-1` and `2.5` are\n     * not counts of anything, and `NaN` compares false against every threshold and would silently\n     * disable the check. A positive integer is the only value that means something, so it is the only\n     * value accepted — and the rejection names the offending value, exactly as the boolean one does.\n     *\n     * This does NOT soften the machine-global forward-compatibility rule: an UNKNOWN key is still\n     * ignored with a warning. Only a key THIS release understands is type-checked, and no release of\n     * webpieces has ever given `maxConcurrentBuilds` a non-numeric meaning.\n     */\n    // webpieces-disable no-any-unknown -- see parse()\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private readOptionalPositiveInteger(\n        experimental: Record<string, unknown>, key: string, file: string, whenAbsent: number,\n    ): number {\n        const value = experimental[key];\n        if (value === undefined) return whenAbsent;\n        if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n            throw new InformAiError(this.error(file,\n                `\"${HOME_EXPERIMENTAL_SECTION}.${key}\" must be a POSITIVE WHOLE NUMBER (1 or more), not ` +\n                `${JSON.stringify(value)}. Write it as a bare JSON number, e.g. ` +\n                `\"${key}\": ${String(whenAbsent)} — or delete the key to use the default of ` +\n                `${String(whenAbsent)}.`));\n        }\n        return value;\n    }\n\n    /**\n     * An absent key falls back to `whenAbsent`, which every caller states OUT LOUD by passing\n     * `GUARD_OFF_WHEN_ABSENT` — an implicit \"absent means false\" buried in this method would put the\n     * default and the key that carries it in different places, free to drift apart.\n     *\n     * A PRESENT key of the wrong type is still an ERROR, and that is the line neither the unknown-key change\n     * nor this one moved: `\"whole-repo-build-guard\": \"yes\"` is a file somebody wrote wrongly, not\n     * a file written for a different release. No release of webpieces has ever given this key a string\n     * meaning, so there is no forward-compatibility story to protect and nothing is gained by guessing —\n     * whereas guessing would turn a typed value into a silent fallback to the default, which is the very\n     * cost the unknown-key warning exists to bound.\n     *\n     * This is the ONLY reader; see the every-key-is-optional note above for why there is no required\n     * variant.\n     */\n    // webpieces-disable no-any-unknown -- see parse()\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private readOptionalBoolean(\n        experimental: Record<string, unknown>, key: string, file: string, whenAbsent: boolean,\n    ): boolean {\n        const value = experimental[key];\n        if (value === undefined) return whenAbsent;\n        return this.asBoolean(value, key, file, ' Remove the quotes, or delete the key.');\n    }\n\n    // webpieces-disable no-any-unknown -- see parse()\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private asBoolean(value: unknown, key: string, file: string, fix: string): boolean {\n        if (typeof value !== 'boolean') {\n            throw new InformAiError(this.error(file,\n                `\"${HOME_EXPERIMENTAL_SECTION}.${key}\" must be the boolean ` +\n                `true or false, not ${JSON.stringify(value)}.${fix}`));\n        }\n        return value;\n    }\n\n    // Retired keys are checked BEFORE unknown-key reporting: \"unknown key\" would send an agent deleting a\n    // key whose value it should be MOVING, which is the whole reason the retirement table exists.\n    // webpieces-disable no-any-unknown -- see parse()\n    private assertNotRetired(raw: Record<string, unknown>, file: string): void {\n        for (const entry of RETIRED_HOME_CONFIG_KEYS) {\n            if (!this.isPresentAt(raw, entry.key)) continue;\n            const destination = entry.movedTo === ''\n                ? 'It was removed with no replacement.'\n                : `It moved to \"${entry.movedTo}\".`;\n            throw new InformAiError(this.error(file,\n                `\"${entry.key}\" is RETIRED. ${destination} ${entry.instruction}`));\n        }\n    }\n\n    // Is `dotted` (one or two segments — the file is two levels deep by construction) actually present?\n    // webpieces-disable no-any-unknown -- see parse()\n    private isPresentAt(raw: Record<string, unknown>, dotted: string): boolean {\n        const parts = dotted.split('.');\n        if (parts.length === 1) return raw[parts[0]] !== undefined;\n        const section = raw[parts[0]];\n        if (typeof section !== 'object' || section === null || Array.isArray(section)) return false;\n        // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above\n        return (section as Record<string, unknown>)[parts[1]] !== undefined;\n    }\n\n    /**\n     * The understood keys AT ONE LEVEL, rendered from the allow-list rather than hand-listed — and\n     * rendered at the level the reader's key was actually found, so a mistyped SECTION is answered with\n     * the sections and a mistyped FLAG with the flags. The hand-listed version named two keys and went\n     * stale the moment a third arrived, telling an agent its brand-new key was not accepted while the\n     * validator right above accepted it.\n     */\n    private quotedKeys(allowed: readonly string[], prefix: string): string {\n        return allowed.map((key: string): string => `\"${prefix}${key}\"`).join(', ');\n    }\n\n    /**\n     * An unknown key is IGNORED — see the class docblock for why this one file cannot reject it — but it\n     * is never SILENT. The warning is the entire mitigation for the cost of ignoring, so it says both\n     * things a reader needs: that the key did nothing, and what the understood keys are.\n     *\n     * ─── WHY THIS IS NOT THE \"console side channel\" SHAPE ────────────────────────────────────────────\n     * That shape is a rule or a library reporting a FAILURE — or a cure for one — by printing it instead\n     * of throwing a structured value to the one top-level handler. This is the opposite case, and the\n     * distinction is the entire subject of this change: an unknown key here is NOT a failure. The load\n     * SUCCEEDS, a valid HomeConfig is returned, every caller proceeds normally, and there is no cure the\n     * reader is obliged to apply — a key from a newer release is a CORRECT file being read by an older\n     * validator. There is no throw this could be, because throwing is precisely the behaviour being\n     * deleted here; and returning it would mean inventing a warnings channel through `load()` that no\n     * caller has any reason to render.\n     *\n     * stderr, not stdout, for the usual reason: this runs inside hooks whose stdout is a JSON decision\n     * and inside `wp-*` commands whose stdout is their real output, and neither may be polluted. It is\n     * the same channel, with the same `[webpieces]` prefix, that `state-dir-migration.announce` already\n     * uses in this package for the same category of finding — something a human may want to know about\n     * and is not required to act on.\n     */\n    private warnUnknownKeys(found: string[], allowed: readonly string[], prefix: string): void {\n        for (const key of found) {\n            if (allowed.includes(key)) continue;\n            const near = this.nearestKnownKey(key, allowed);\n            const guess = near !== ''\n                ? ` Did you mean \"${prefix}${near}\"?`\n                : this.nearRetiredHint(`${prefix}${key}`)\n                  || ' If it is a typo, fix the spelling; if it is from a NEWER @webpieces than this repo pins, upgrade this repo to use it.';\n            this.warn(\n                `\"${prefix}${key}\" is not a key this @webpieces release understands, so it was IGNORED ` +\n                `and had NO effect.${guess} Understood here: ${this.quotedKeys(allowed, prefix)}.`);\n        }\n    }\n\n    /**\n     * A near-miss of a RETIRED key, pointed at its migration — or '' when nothing retired is close.\n     *\n     * The gap this closes: `assertNotRetired` matches a retired key EXACTLY, so `captureBuildGateLog`\n     * throws with its migration instruction while `captureBuildGateLogg` — one stray character away, and\n     * a far likelier thing to type — falls through to the generic \"IGNORED, might be from a newer\n     * release\" line. That is the least helpful of the three answers offered to the reader whose intent is the\n     * clearest, so the retired table is consulted here too, at the same distance-2 threshold.\n     *\n     * It only ever produces a WARNING, never a throw: this release cannot know whether the reader meant\n     * the retired key or a newer one, and guessing wrong in the throwing direction is what the whole\n     * change is about. Known keys are matched first, so a typo of a LIVE key is never answered with a\n     * dead one.\n     */\n    private nearRetiredHint(dottedKey: string): string {\n        for (const entry of RETIRED_HOME_CONFIG_KEYS) {\n            if (this.editDistance(dottedKey.toLowerCase(), entry.key.toLowerCase()) > 2) continue;\n            const destination = entry.movedTo === ''\n                ? 'it was removed with no replacement'\n                : `it moved to \"${entry.movedTo}\"`;\n            return ` Did you mean the RETIRED key \"${entry.key}\"? If so, ${destination}. ${entry.instruction}`;\n        }\n        return '';\n    }\n\n    // One shape for every non-fatal finding, matching state-dir-migration's `[webpieces] <what>:` prefix\n    // so a reader can tell at a glance which subsystem is talking.\n    private warn(message: string): void {\n        process.stderr.write(`[webpieces] ~/.webpieces/config.json: ${message}\\n`);\n    }\n\n    /**\n     * The closest understood key within two edits, or '' when nothing is close.\n     *\n     * This used to be a case-insensitive EQUALITY test, which was adequate while an unknown key was a\n     * hard error — the error itself was the signal, and the suggestion only saved a reading. Now the\n     * suggestion IS the signal, so it has to catch the typos an equality test misses: a doubled letter,\n     * a dropped one, a transposition, a stray trailing character (`orphan-dir-sweeped`). Two is the\n     * useful threshold — it covers every one of those and still refuses to guess for a genuinely new\n     * key, which is the case that must NOT be dressed up as a typo.\n     */\n    private nearestKnownKey(key: string, allowed: readonly string[]): string {\n        let best = '';\n        let bestDistance = 3;\n        for (const candidate of allowed) {\n            const distance = this.editDistance(key.toLowerCase(), candidate.toLowerCase());\n            if (distance >= bestDistance) continue;\n            bestDistance = distance;\n            best = candidate;\n        }\n        return best;\n    }\n\n    /** Ordinary Levenshtein distance, one row at a time — the key names are short and this runs once. */\n    private editDistance(a: string, b: string): number {\n        let previous: number[] = [];\n        for (let j = 0; j <= b.length; j += 1) previous.push(j);\n        for (let i = 1; i <= a.length; i += 1) {\n            const current: number[] = [i];\n            for (let j = 1; j <= b.length; j += 1) {\n                const substitution = previous[j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1);\n                current.push(Math.min(substitution, previous[j] + 1, current[j - 1] + 1));\n            }\n            previous = current;\n        }\n        return previous[b.length];\n    }\n\n    // One shape for every rejection: what is wrong, in which file, and the fact that deleting the file is\n    // always a legal fix — because the file is optional, and \"no file\" is a fully supported state.\n    private error(file: string, detail: string): string {\n        return `[~/.webpieces/config.json] ${detail}\\n\\n` +\n            `File: ${file}\\n` +\n            `This machine-local preference file is OPTIONAL and EXPERIMENTAL. Editing it is always ` +\n            `permitted, even while it is invalid, and deleting it outright is a valid fix — with no such ` +\n            `file every webpieces command behaves exactly as it does by default.`;\n    }\n}\n"]}
+{"version":3,"file":"home-config.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/home-config.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,+CAAyB;AACzB,mDAA6B;AAC7B,yCAA2D;AAE3D,uDAAkD;AAClD,yCAAqC;AACrC,iEAAwG;AAK/F,mGALA,yCAAkB,OAKA;AAAE,6FALA,mCAAY,OAKA;AAAE,gGALA,sCAAe,OAKA;AAAE,4FALA,kCAAW,OAKA;AAJvE,yEAEoC;AAG3B,qGAJL,+CAAoB,OAIK;AAAE,yGAJL,mDAAwB,OAIK;AAAE,gGAJL,0CAAe,OAIK;AAAE,kGAJL,4CAAiB,OAIK;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHG;AACU,QAAA,eAAe,GAAG,YAAY,CAAC;AAC/B,QAAA,gBAAgB,GAAG,aAAa,CAAC;AAE9C,uGAAuG;AACvG,qGAAqG;AACrG,mCAAmC;AACtB,QAAA,yBAAyB,GAAG,cAAc,CAAC;AACxD,sGAAsG;AACtG,wGAAwG;AACxG,6BAA6B;AAC7B,EAAE;AACF,yGAAyG;AACzG,yGAAyG;AACzG,yGAAyG;AACzG,qGAAqG;AACrG,oGAAoG;AACpG,8FAA8F;AACjF,QAAA,+BAA+B,GAAG,wBAAwB,CAAC;AACxE,sGAAsG;AACtG,wFAAwF;AAC3E,QAAA,yBAAyB,GAAG,kBAAkB,CAAC;AAC5D;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,qBAAqB,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;;;;;GAQG;AACU,QAAA,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;;GAWG;AAEH;;;;GAIG;AACU,QAAA,iBAAiB,GAAsB,CAAC,iCAAyB,CAAC,CAAC;AAChF;;;;;;;;GAQG;AACH;;;;;;;;;;;;;;;GAeG;AACU,QAAA,6BAA6B,GAAsB;IAC5D,uCAA+B,EAAE,iCAAyB;CAC7D,CAAC;AACW,QAAA,4BAA4B,GAAsB,CAAC,sCAA8B,CAAC,CAAC;AACnF,QAAA,oBAAoB,GAAsB;IACnD,GAAG,qCAA6B,EAAE,GAAG,oCAA4B;CACpE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,iGAAiG;AACjG,MAAM,kBAAkB,GAAsB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAE1H,4GAA4G;AAC5G,MAAa,UAAU;IACnB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAU;IAE7B;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAU;IAExB;;;;;;;;OAQG;IACH,mBAAmB,CAAS;IAE5B,sGAAsG;IACtG,iGAAiG;IACjG,sGAAsG;IACtG,gGAAgG;IAChG,iGAAiG;IACjG,uFAAuF;IACvF,YACI,mBAA4B,EAAE,cAAuB,EAAE,mBAA2B;QAElF,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IACnD,CAAC;CACJ;AAvDD,gCAuDC;AAGD;;;;;;;GAOG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACG;IAA7B,YAA6B,UAAuB,IAAI,kCAAW,EAAE;QAAxC,YAAO,GAAP,OAAO,CAAiC;IAAG,CAAC;IAEzE,uGAAuG;IACvG,UAAU,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAe,EAAE,wBAAgB,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,iGAAiG;QACjG,gGAAgG;QAChG,gGAAgG;QAChG,0CAA0C;QAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,UAAU,CACjB,qBAAqB,EAAE,qBAAqB,EAAE,qCAA6B,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAiB,EAAE,UAAkB,EAAE,CAAC,OAAO,EAAE;QAC9D,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/G,CAAC;IAED,oGAAoG;IAC5F,UAAU,CAAC,SAAiB,EAAE,OAAe;QACjD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,IAAY;QAC9B,qGAAqG;QACrG,kGAAkG;QAClG,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,KAAY;QACzB,mGAAmG;QACnG,MAAM,IAAI,GAAI,KAA4C,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,kGAAkG;IAClG,2GAA2G;IACnG,KAAK,CAAC,GAAW,EAAE,IAAY;QACnC,qGAAqG;QACrG,4FAA4F;QAC5F,8DAA8D;QAC9D,IAAI,CAAC;YACD,qFAAqF;YACrF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC,CAAC;YACtG,CAAC;YACD,8FAA8F;YAC9F,OAAO,MAAiC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,YAAY,+BAAa;gBAAE,MAAM,KAAK,CAAC;YAChD,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,+BAA+B,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClH,CAAC;IACL,CAAC;IAED,iGAAiG;IACzF,QAAQ,CAAC,GAA4B,EAAE,IAAY;QACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,yBAAiB,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,iCAAyB,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,iCAAyB,0BAA0B,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,8FAA8F;QAC9F,MAAM,YAAY,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,iCAAyB,GAAG,EACvE,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,4BAAoB,EAAE,GAAG,iCAAyB,GAAG,CAAC,CAAC;QACvG,OAAO,IAAI,UAAU,CACjB,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,uCAA+B,EAAE,IAAI,EAAE,qBAAqB,CAAC,EACpG,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,iCAAyB,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAC9F,IAAI,CAAC,2BAA2B,CAC5B,YAAY,EAAE,sCAA8B,EAAE,IAAI,EAAE,qCAA6B,CAAC,CACzF,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,kDAAkD;IAClD,yDAAyD;IACjD,2BAA2B,CAC/B,YAAqC,EAAE,GAAW,EAAE,IAAY,EAAE,UAAkB;QAEpF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACnC,IAAI,iCAAyB,IAAI,GAAG,qDAAqD;gBACzF,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,yCAAyC;gBACjE,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,6CAA6C;gBAC5E,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,kDAAkD;IAClD,yDAAyD;IACjD,mBAAmB,CACvB,YAAqC,EAAE,GAAW,EAAE,IAAY,EAAE,UAAmB;QAErF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;IACtF,CAAC;IAED,kDAAkD;IAClD,yDAAyD;IACjD,SAAS,CAAC,KAAc,EAAE,GAAW,EAAE,IAAY,EAAE,GAAW;QACpE,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACnC,IAAI,iCAAyB,IAAI,GAAG,wBAAwB;gBAC5D,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,sGAAsG;IACtG,8FAA8F;IAC9F,kDAAkD;IAC1C,gBAAgB,CAAC,GAA4B,EAAE,IAAY;QAC/D,KAAK,MAAM,KAAK,IAAI,mDAAwB,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,KAAK,EAAE;gBACpC,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,gBAAgB,KAAK,CAAC,OAAO,IAAI,CAAC;YACxC,MAAM,IAAI,+BAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EACnC,IAAI,KAAK,CAAC,GAAG,iBAAiB,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAED,oGAAoG;IACpG,kDAAkD;IAC1C,WAAW,CAAC,GAA4B,EAAE,MAAc;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5F,8FAA8F;QAC9F,OAAQ,OAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,OAA0B,EAAE,MAAc;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH;;;;;;;OAOG;IACK,mBAAmB,CAAC,MAAc;QACtC,MAAM,KAAK,GAAG,4CAAiB,CAAC,IAAI,CAAC,CAAC,CAAkB,EAAW,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QACxF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,wCAAwC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC;IAEO,eAAe,CAAC,KAAe,EAAE,OAA0B,EAAE,MAAc;QAC/E,0FAA0F;QAC1F,iGAAiG;QACjG,6FAA6F;QAC7F,6FAA6F;QAC7F,yBAAyB;QACzB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE;gBACrB,CAAC,CAAC,kBAAkB,MAAM,GAAG,IAAI,IAAI;gBACrC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;uBACxC,IAAI,CAAC,eAAe,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;uBACvC,wHAAwH,CAAC;YAClI,IAAI,CAAC,IAAI,CACL,IAAI,MAAM,GAAG,GAAG,wEAAwE;gBACxF,qBAAqB,KAAK,qBAAqB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,eAAe,CAAC,SAAiB;QACrC,KAAK,MAAM,KAAK,IAAI,mDAAwB,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC;gBAAE,SAAS;YACtF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,KAAK,EAAE;gBACpC,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,gBAAgB,KAAK,CAAC,OAAO,GAAG,CAAC;YACvC,OAAO,kCAAkC,KAAK,CAAC,GAAG,aAAa,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACvG,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,qGAAqG;IACrG,+DAA+D;IACvD,IAAI,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,OAAO,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;;;OASG;IACK,eAAe,CAAC,GAAW,EAAE,OAA0B;QAC3D,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/E,IAAI,QAAQ,IAAI,YAAY;gBAAE,SAAS;YACvC,YAAY,GAAG,QAAQ,CAAC;YACxB,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,qGAAqG;IAC7F,YAAY,CAAC,CAAS,EAAE,CAAS;QACrC,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,OAAO,GAAa,CAAC,CAAC,CAAC,CAAC;YAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC;QACvB,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,sGAAsG;IACtG,+FAA+F;IACvF,KAAK,CAAC,IAAY,EAAE,MAAc;QACtC,OAAO,8BAA8B,MAAM,MAAM;YAC7C,SAAS,IAAI,IAAI;YACjB,wFAAwF;YACxF,8FAA8F;YAC9F,qEAAqE,CAAC;IAC9E,CAAC;CACJ,CAAA;AApWY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAEC,kCAAW;GADxC,iBAAiB,CAoW7B","sourcesContent":["import * as fs from 'fs';\nimport * as os from 'os';\nimport * as path from 'path';\nimport { injectable, bindingScopeValues } from 'inversify';\n\nimport { InformAiError } from './inform-ai-error';\nimport { toError } from './to-error';\nimport { DOCUMENTATION_KEYS, HOME_KEY_DOC, HOME_KEY_AI_DOC, HomeDocKeys } from './home-config-doc-keys';\nimport {\n    RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS, EndedExperiment, ENDED_EXPERIMENTS,\n} from './home-config-retired-keys';\n\nexport { DOCUMENTATION_KEYS, HOME_KEY_DOC, HOME_KEY_AI_DOC, HomeDocKeys };\nexport { RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS, EndedExperiment, ENDED_EXPERIMENTS };\n\n/**\n * `~/.webpieces/config.json` — the MACHINE-GLOBAL preference file, and a different thing from the repo's\n * tracked `webpieces.config.json`. It is EXPERIMENTAL and entirely OPTIONAL.\n *\n * ─── ABSENT IS THE NORMAL STATE, AND IT IS NEVER AN ERROR ─────────────────────────────────────────────\n * Essentially every consumer of these packages has no such file, and for them every `wp-*` command must\n * behave byte-for-byte as it did before this file was ever read: no error, no warning, no log line, no\n * extra file, nothing. `load()` therefore treats EVERY failure to READ the bytes — the file missing, the\n * `~/.webpieces` directory missing, a permission error, a path component that is not a directory — as\n * \"not opted in\", and returns all-defaults silently. That is not a fallback for a wrong shape; it is the\n * definition of \"the user did not create this file\".\n *\n * ─── THE STANDING RULE, FOR WHOEVER EDITS THIS FILE NEXT ──────────────────────────────────────────────\n * This file is MACHINE-GLOBAL: ONE document on the disk, read by EVERY repo on the machine, and those\n * repos are pinned to DIFFERENT webpieces releases. Two rules follow, and they are not negotiable:\n *\n *   (a) NO KEY MAY EVER BE REQUIRED.  `readOptionalBoolean` and `readOptionalPositiveInteger` are the\n *       ONLY readers, and BOTH are optional-by-construction. There is no `readRequiredBoolean`, no\n *       `RequiredHomeFlag`, no `REQUIRED_HOME_FLAGS` — those existed once and were deleted; do not\n *       reintroduce them under any name, in any type.\n *   (b) AN UNKNOWN KEY IS IGNORED, never rejected.  `warnUnknownKeys` warns; nothing throws.\n *\n * Both halves are needed, and either one alone still leaves a file that some installed release rejects:\n *\n *   (a) covers the OLD FILE on a NEW release — a document written before a key existed, missing it.\n *   (b) covers the NEW FILE on an OLD release — a document carrying a key that release never heard of.\n *\n * Break either one and every repo on the machine that is not on the newest release hard-blocks: a\n * rejection here fails config load, and that denies every tool call in that repo until somebody upgrades\n * all of them in lockstep. That is the outage this design exists to make impossible, and it is not\n * hypothetical — it is the shape of the incident recorded at the bottom of this docblock.\n *\n * `home-config.spec.ts` pins both halves, and pins them by ENUMERATING `ALLOWED_EXPERIMENTAL` rather\n * than by a hand-written list, so a key added later is covered by the invariant automatically instead of\n * silently escaping it.\n *\n * ─── PRESENT IS STRICT ABOUT WHAT IT UNDERSTANDS, AND FORWARD-COMPATIBLE ABOUT WHAT IT DOES NOT ───────\n * Once the bytes are readable, someone DELIBERATELY created this file, and three of the four failure\n * modes are REJECTED exactly as webpieces.config.json rejects them (see `retired-config-keys.ts`), with\n * an error naming the exact fix and no `??` fallback anywhere:\n *\n *   UNPARSEABLE   not JSON, or not a single JSON object          → REJECT\n *   RETIRED KEY   listed in RETIRED_HOME_CONFIG_KEYS             → REJECT, carrying the migration\n *   WRONG TYPE    a KNOWN key holding a value of the wrong type  → REJECT\n *                 (a non-boolean for a boolean key; anything but a positive whole number for a\n *                  numeric one — see `readOptionalPositiveInteger`)\n *   UNKNOWN KEY   a key no version of this validator has heard of → IGNORED, with a warning\n *\n * ─── WHY THE LAST ROW DIFFERS FROM webpieces.config.json, WHICH STAYS STRICT ──────────────────────────\n * The difference is not a softening of policy; it is that the two files have different CARDINALITY.\n *\n *   webpieces.config.json is REPO-TRACKED. One repo, one file, one pinned @webpieces release, and the\n *   file moves through git in lockstep with the code that reads it. \"One version reads this document\" is\n *   true by construction, so an unknown key there can only be a typo or a dead key — and rejecting it is\n *   right, because it is the delivery mechanism for the migration.\n *\n *   THIS file is MACHINE-GLOBAL. ONE document, read by EVERY repo on the machine, and those repos pin\n *   DIFFERENT releases — deliberately, since a repo's pin is tracked and moves when its own PR lands.\n *   So \"an unknown key\" here has a second, entirely legitimate cause that cannot occur in the repo file:\n *   a key a NEWER release added, being read by an OLDER one. Rejecting it means adding any key to this\n *   file hard-blocks every repo on the machine that has not yet been upgraded — an outage produced by\n *   opting IN to an experimental flag, which is the same shape of failure that moved these flags out of\n *   webpieces.config.json in the first place (see the section below).\n *\n * This is the exact mirror of the already-settled rule that no key here may be REQUIRED. Both halves fall\n * out of one fact: the set of valid documents must be non-empty for EVERY release on the machine at once.\n *   • omit a new key → an old release must not demand it   (already true: every key is optional)\n *   • add a new key  → an old release must not reject it   (this change)\n * With only the first half, the set of valid files was still empty the moment a key was added.\n *\n * ─── WHAT THAT COSTS, AND WHAT PAYS FOR IT ────────────────────────────────────────────────────────────\n * The cost is real and worth stating plainly: a TYPO now silently does nothing. `\"whole-repo-build-gaurd\"`\n * used to be a loud rejection; it is now a key nothing reads, so the flag keeps its default and nothing\n * about the machine's behaviour reveals the mistake.\n *\n * Every key here is an OPT-IN that defaults OFF, so a typo costs the author the feature they meant to\n * switch on: misspell `whole-repo-build-guard` and the guard stays inert while they believe they armed\n * it. That is the milder of the two failures — nothing they were doing stops working — but it is still\n * invisible without a signal, which is why the warning below is not optional decoration, and why\n * `nearestKnownKey` had to get fuzzier than the case-insensitive match it replaced: `gaurd` is a\n * transposition, exactly the class of typo an equality test cannot see.\n *\n * That is mitigated, not eliminated, by making the ignore VISIBLE: every unknown key is printed once per\n * load as a `[webpieces]` warning on stderr, and `nearestKnownKey` upgrades that line with a \"did you\n * mean\" whenever the key is within a two-character edit of a known one — which is what a typo is, and\n * what a key from a newer release is not. A warning naming a close match is the strongest signal\n * available that does not also block a colleague on an older pin.\n *\n * The trade was taken this way round because the two mistakes are not symmetric. A typo costs its author\n * one flag that did not turn on, discoverable the moment they check whether the feature is doing\n * anything, on their own machine. A rejection costs every repo on the machine every tool call, and the\n * person it blocks is usually not the person who edited the file.\n *\n * An unknown TOP-LEVEL key is ignored on the identical argument, and it is the more important half: a\n * future release adding a second section (`preferences`, say) beside `experimental` would otherwise be\n * unreadable by every older release on the machine, which is precisely the sequencing being deleted here.\n *\n * ─── REJECTING IS STILL SELF-RECOVERABLE, FOR THE THREE ROWS THAT STILL REJECT ────────────────────────\n * A Write/Edit targeting THIS path is an unconditional PASS in the hook guards (see `isHomeConfigPath`,\n * wired into ai-hook-rules' runner beside the webpieces.config.json pass), so an agent can always repair\n * the file the loader just rejected.\n *\n * ─── WHY A MACHINE-LOCAL SWITCH LIVES HERE AND NOT IN webpieces.config.json ───────────────────────────\n * `whole-repo-build-guard` first shipped as an ordinary validated guard: `mode: 'ON'` by default AND an\n * entry required under `hookGuards`. The consequence on upgrade was an outage — a consumer repo that had\n * not yet added the entry hit fault Y, which blocks EVERY Bash call, for a feature nobody had opted into.\n *\n * The rule that buys back: a switch that lives HERE needs no file, no key and no edit to be in its\n * default state. A repo-tracked config key cannot express that — an entry there is something every\n * consumer must add, on a schedule set by whoever bumps the release.\n *\n * Note which half of that was the outage. It was the REQUIRED KEY: the failure was at config LOAD,\n * before any command was judged. That is why every key here stays OPTIONAL and why an absent file\n * returns all-defaults silently.\n *\n * The DEFAULT is settled separately, by a standing policy this file does not get to re-litigate: EVERY\n * `experimental.*` flag ships OFF and stays OFF for two years. `whole-repo-build-guard` is one of them,\n * so it is OFF unless a machine writes `{\"experimental\": {\"whole-repo-build-guard\": true}}`. A flag that\n * defaults ON is not an experiment — it is a shipped behaviour that skipped its soak period, and it\n * changes what every agent on every machine can do the moment they upgrade. Low uptake of an opt-in\n * experiment is information ABOUT the experiment; it is not a licence to force it on everybody.\n */\nexport const HOME_CONFIG_DIR = '.webpieces';\nexport const HOME_CONFIG_FILE = 'config.json';\n\n// The `experimental` section and its keys. Named as constants because both the validator and its error\n// text must spell them identically — a validator whose message names a different key than the one it\n// checks is worse than no message.\nexport const HOME_EXPERIMENTAL_SECTION = 'experimental';\n// The on/off switch for `whole-repo-build-guard`. Spelled with the GUARD's own name, hyphens and all,\n// so `grep -rn whole-repo-build-guard` finds the switch beside the guard — and so nobody has to learn a\n// second name for one thing.\n//\n// `buildGateLogCapture` used to sit beside it and is GONE: capturing the build's output to a file is now\n// what the gate always does (see BuildAffected.runBuildGate), so the flag had nothing left to switch. It\n// is deliberately NOT in RETIRED_HOME_CONFIG_KEYS — a retired key here is a HARD FAILURE on exact match,\n// and this file is machine-global and hand-authored, so a machine that opted INTO a behaviour it now\n// gets unconditionally must not have its shell broken for saying yes early. It falls through to the\n// unknown-key WARNING instead, which says the key had no effect and names what is understood.\nexport const HOME_KEY_WHOLE_REPO_BUILD_GUARD = 'whole-repo-build-guard';\n// The on/off switch for the orphan-directory sweep `wp-checkout-clean-main` runs. Named for the thing\n// it switches, exactly as the guard key above is — one name, greppable from either end.\nexport const HOME_KEY_ORPHAN_DIR_SWEEP = 'orphan-dir-sweep';\n/**\n * How many builds may be live on this machine before `pnpm wp-build` refuses to start another. The FIRST\n * NUMERIC key in this file — see `readOptionalPositiveInteger` for why \"known key, wrong type → REJECT\"\n * applies to it exactly as it applies to the booleans.\n */\nexport const HOME_KEY_MAX_CONCURRENT_BUILDS = 'maxConcurrentBuilds';\n\n/**\n * EVERY key's value when it is not named — including on the machine with no such file at all, which is\n * essentially every machine. False, for all of them, with no exceptions and no per-key table.\n *\n * That uniformity is the policy, not a coincidence: every `experimental.*` flag ships OFF and stays OFF\n * for two years, so \"this machine never opted in\" is byte-for-byte the behaviour of having no file. ON\n * requires an explicit `true`; absent, and an explicit `false`, are the same state.\n *\n * Named rather than written as a bare `false` at each call site so the reason travels with the value —\n * and there is deliberately exactly ONE such constant, because a second one would be a second place a\n * default is stated, free to disagree with this one.\n */\nconst GUARD_OFF_WHEN_ABSENT = false;\n\n/**\n * The one NON-boolean default, and the one key whose absent value is not `GUARD_OFF_WHEN_ABSENT`.\n *\n * Three, because contention between agents running full sweeps at once was measured at ~3.2x total test\n * time (CLAUDE.md § \"What actually makes builds slow\"), and a fourth simultaneous build is well past the\n * point where anybody gains anything. It is a NUMBER rather than an on/off flag because the useful\n * machine-to-machine difference here is core count, not opinion — which is also why it is the one key in\n * this file with a non-false default: \"0 builds allowed\" would be a machine that cannot build at all.\n */\nexport const DEFAULT_MAX_CONCURRENT_BUILDS = 3;\n\n/**\n * The complete UNDERSTOOD shape. A key not on these lists is ignored with a warning rather than\n * rejected (see the class docblock: this document is machine-global and older releases must survive\n * meeting a newer release's key), so adding a key still means adding it here — a key absent from these\n * lists is never read at all, and the flag it was meant to set keeps the default above.\n *\n * EXPORTED so `home-config.spec.ts` can ENUMERATE them rather than restate them. The cross-version\n * invariant (\"every key is independently omittable\") is only as good as the list the test walks, and a\n * hand-written copy of that list means a NEW key silently escapes the invariant on the day it is added —\n * which is the one failure mode nobody would notice until an older release started rejecting files.\n * Walking the real constant makes the test cover a new key the moment it appears here.\n */\n\n/**\n * The SETTINGS only. Documentation keys are deliberately NOT here: these lists are walked to build\n * sample documents and to assert cross-version invariants, and every entry is assumed to be a setting\n * with a typed value. `warnUnknownKeys` accepts the documentation keys separately, everywhere.\n */\nexport const ALLOWED_TOP_LEVEL: readonly string[] = [HOME_EXPERIMENTAL_SECTION];\n/**\n * The understood `experimental.*` keys, SPLIT BY VALUE TYPE — because the spec walks these lists to build\n * a sample document, and a sample that wrote `false` into a numeric key would be rejected by the very\n * loader it is testing. Splitting them means a key added to either list is covered by the cross-version\n * invariants automatically, with the right sample value, which is the whole reason the lists are exported.\n *\n * `ALLOWED_EXPERIMENTAL` stays the ONE list the validator warns against — derived from the two, never\n * hand-maintained beside them, so it cannot fall out of step.\n */\n/**\n * ─── ONLY A HUMAN ENDS AN EXPERIMENT ──────────────────────────────────────────────────────────────\n *\n * An AI agent may ADD a flag to these lists. It may NEVER DELETE one, and may never make a flagged\n * behaviour unconditional — however settled it looks, however old the flag is, however good the\n * reasoning. Ending an experiment judges evidence that lives on someone else's machine.\n *\n * From a live incident: PR #711 deleted `buildGateLogCapture` and made capture unconditional. Its\n * owner's config said `true`, and after that release the opt-in silently meant nothing. Note the\n * shape — that file says \"AI: DO NOT EDIT this file!!\", and the agent never touched it; it deleted\n * the key from the CODE, which has the identical effect from the owner's seat. A rule protecting a\n * FILE does not protect the SETTING it selects.\n *\n * If you believe an experiment should end, SAY SO and leave the flag alone. CLAUDE.md §\"ONLY A HUMAN\n * ENDS AN EXPERIMENT\" carries the full rule and what a human-ended retirement looks like.\n */\nexport const ALLOWED_EXPERIMENTAL_BOOLEANS: readonly string[] = [\n    HOME_KEY_WHOLE_REPO_BUILD_GUARD, HOME_KEY_ORPHAN_DIR_SWEEP,\n];\nexport const ALLOWED_EXPERIMENTAL_NUMBERS: readonly string[] = [HOME_KEY_MAX_CONCURRENT_BUILDS];\nexport const ALLOWED_EXPERIMENTAL: readonly string[] = [\n    ...ALLOWED_EXPERIMENTAL_BOOLEANS, ...ALLOWED_EXPERIMENTAL_NUMBERS,\n];\n\n/**\n * ─── EVERY KEY IS OPTIONAL, AND THAT IS A HARD REQUIREMENT OF WHERE THIS FILE LIVES ───────────────────\n * This file is MACHINE-GLOBAL: one document, read by every repo on the machine, and those repos pin\n * DIFFERENT webpieces releases. A REQUIRED key cannot survive that, because it makes the set of valid\n * files EMPTY:\n *\n *   • omit the new key  → the NEW release rejects the file (\"REQUIRED and not set\")\n *   • add the new key   → every OLDER release rejects the file (\"not a known key\")\n *\n * There is no third option, and both rejections block. `whole-repo-build-guard` was required for the\n * reason recorded in #627 — a flag that decides whether a command RUNS should not be inferred — and that\n * reasoning was sound for a single version and wrong for a shared file. It is optional now, along with\n * every other key.\n *\n * Absent then reads as the ONE declared default, `GUARD_OFF_WHEN_ABSENT`: false, for every key without\n * exception, which is byte-for-byte the behaviour of having no file at all.\n *\n * The other half of cross-version safety — an OLD release IGNORING a key a NEW one added, rather than\n * rejecting it — is solved by `warnUnknownKeys` below. The two halves are one invariant: for the set of\n * valid documents to be non-empty across every release installed on the machine, neither omitting a key\n * nor adding one may be an error.\n */\n\n// Read errors that mean \"the file is not there / not reachable\" rather than \"the file is wrong\". Every\n// one of these resolves to the all-defaults config, silently. Widened deliberately past ENOENT: the\n// parent `~/.webpieces` may not exist (ENOENT), may be a file (ENOTDIR), may be unreadable (EACCES /\n// EPERM), and the path itself may be a directory (EISDIR). None of those is a user who opted in.\nconst ABSENT_ERROR_CODES: readonly string[] = ['ENOENT', 'ENOTDIR', 'EACCES', 'EPERM', 'EISDIR', 'ELOOP', 'ENAMETOOLONG'];\n\n/** The parsed `~/.webpieces/config.json`. Data-only (per CLAUDE.md — classes, not interfaces, for data). */\nexport class HomeConfig {\n    /**\n     * EXPERIMENTAL, and OFF unless this machine opts IN with an explicit `true`. When true,\n     * `whole-repo-build-guard` BLOCKS a Bash command that would build the WHOLE monorepo and hands back\n     * the repo's own scoped build command (`pnpm wp-build`). False — and absent, and no file at all —\n     * makes the guard completely inert: no block, no log, no message.\n     *\n     * This is the guard's ONLY switch, and it is an OPT-IN. There is deliberately no\n     * webpieces.config.json entry for it (see RETIRED_CONFIG_KEYS): a guard that every consumer must\n     * ADD A KEY to avoid being blocked by is a guard that ships an outage on upgrade, which is exactly\n     * what happened once. Living here means the default state needs no file, no key and no edit.\n     */\n    wholeRepoBuildGuard: boolean;\n\n    /**\n     * EXPERIMENTAL. When true, `wp-checkout-clean-main` ARCHIVES the orphan directories it finds — the\n     * package directories left behind on every clone by an `nx g move`, which git cannot remove because\n     * an ignored `dist/` or `node_modules/` survives the deletion of every tracked file under them.\n     *\n     * False — and the all-defaults value for a machine with no such file — means the sweep only REPORTS\n     * what it found and moves nothing. That asymmetry is the point of shipping this behind the home\n     * config at all: the author can run it live across their own clones for a release while every\n     * colleague's repo is untouched, and neither state depends on a tracked key anybody must add.\n     *\n     * The sweep itself never deletes (see OrphanDirArchiver): directories move under `.webpieces/trash/`\n     * with a printed `recover=`, so the worst case for a false positive is a `mv` somebody undoes. The\n     * ARCHIVE is reaped after 30 days, which is a real deletion — of the second copy, on a timer long\n     * enough that anything still wanted has been noticed.\n     */\n    orphanDirSweep: boolean;\n\n    /**\n     * How many builds may be live on this MACHINE before `pnpm wp-build` refuses to start another. Live\n     * is counted from `~/.webpieces/builds.log` — see `builds-log.ts`, and\n     * `decisions/0006-the-build-ledger-is-machine-global.md` for why that file lives outside any repo.\n     *\n     * `DEFAULT_MAX_CONCURRENT_BUILDS` when absent. The gate stages (`wp-review-upsert-pr`,\n     * `wp-finish-upsert-pr`) are NEVER refused whatever this says — blocking the sanctioned path is how\n     * you wedge a PR — though their builds do count toward what refuses an ad-hoc `wp-build`.\n     */\n    maxConcurrentBuilds: number;\n\n    // ALL THREE required, no defaults. A defaulted parameter would leave `new HomeConfig(true)` compiling\n    // after this class grew a second flag, silently meaning \"guard off\" — an old spelling that still\n    // typechecks with a changed meaning is exactly the shim this repo does not ship. The 3-arg arity this\n    // class had before `maxConcurrentBuilds` is DELETED rather than overloaded, per CLAUDE.md § \"NO\n    // webpieces surface is released backwards-compatible\": the compile errors ARE the migration. The\n    // absent-file state is constructed in exactly one place — load()'s absent-file branch.\n    constructor(\n        wholeRepoBuildGuard: boolean, orphanDirSweep: boolean, maxConcurrentBuilds: number,\n    ) {\n        this.wholeRepoBuildGuard = wholeRepoBuildGuard;\n        this.orphanDirSweep = orphanDirSweep;\n        this.maxConcurrentBuilds = maxConcurrentBuilds;\n    }\n}\n\n\n/**\n * Loads and validates `~/.webpieces/config.json`, and resolves whether a path IS that file (for the\n * guard carve-out that keeps a rejection repairable).\n *\n * Strict about everything it UNDERSTANDS (a retired key, a known key of the wrong type, and a document\n * that is not JSON all throw); forward-compatible about everything it does not (an unknown key is\n * ignored with a warning). The class docblock at the top of this file has the reasoning.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class HomeConfigService {\n    constructor(private readonly docKeys: HomeDocKeys = new HomeDocKeys()) {}\n\n    /** Absolute path to the preference file. `homeDir` is a parameter so specs never touch a real HOME. */\n    configPath(homeDir: string = os.homedir()): string {\n        return path.join(homeDir, HOME_CONFIG_DIR, HOME_CONFIG_FILE);\n    }\n\n    /**\n     * The preferences. Returns all-defaults, silently and without touching anything, when the file is not\n     * there. THROWS InformAiError, naming the fix, when a file that IS there is wrong in a way this\n     * release can be sure about — unparseable, a RETIRED key, or a KNOWN key of the wrong type. A key it\n     * simply does not recognise is ignored with a warning, because it may be a newer release's key and\n     * this file is shared by every repo on the machine.\n     */\n    load(homeDir: string = os.homedir()): HomeConfig {\n        const raw = this.readIfPresent(this.configPath(homeDir));\n        // THE ABSENT-FILE STATE, and the ONE place it is constructed. Every flag is off — the same value\n        // a present file that does not name the key gets, so \"no file\" and \"file that ignores this key\"\n        // can never disagree. Spelled out rather than defaulted in the constructor — see the note there\n        // on why a defaulted parameter is a shim.\n        if (raw === null) {\n            return new HomeConfig(\n                GUARD_OFF_WHEN_ABSENT, GUARD_OFF_WHEN_ABSENT, DEFAULT_MAX_CONCURRENT_BUILDS);\n        }\n        return this.validate(this.parse(raw, this.configPath(homeDir)), this.configPath(homeDir));\n    }\n\n    /**\n     * True when `candidate` names `~/.webpieces/config.json`, in any of the forms an agent writes it:\n     * an absolute path, a `~/`-prefixed path, or one still spelled `$HOME/…` / `${HOME}/…`.\n     *\n     * This is what the hook guards call to grant the file an unconditional Write/Edit PASS. Without it a\n     * strict loader could reject the file while the guards blocked the edit that would fix it — the one\n     * wedge webpieces.config.json is already immune to, and the reason its own carve-out exists.\n     */\n    isHomeConfigPath(candidate: string, homeDir: string = os.homedir()): boolean {\n        if (candidate.trim() === '') return false;\n        return path.resolve(this.expandHome(candidate.trim(), homeDir)) === path.resolve(this.configPath(homeDir));\n    }\n\n    // `~`, `$HOME` and `${HOME}` at the FRONT only — a home reference anywhere else is not a home path.\n    private expandHome(candidate: string, homeDir: string): string {\n        if (candidate === '~') return homeDir;\n        for (const prefix of ['~/', '$HOME/', '${HOME}/']) {\n            if (candidate.startsWith(prefix)) return path.join(homeDir, candidate.slice(prefix.length));\n        }\n        return candidate;\n    }\n\n    /**\n     * The file's bytes, or null meaning \"no such file — the user did not opt in\".\n     *\n     * EVERY read failure is null. This is the single most important behaviour in the file: the absent\n     * path is the path every consumer of these packages is on, and it may never reach an error branch.\n     * An error code outside ABSENT_ERROR_CODES is genuinely exceptional (EIO, EBUSY) and is rethrown,\n     * because silently disabling on a failing disk would be its own kind of lie.\n     */\n    private readIfPresent(file: string): string | null {\n        // webpieces-disable no-unmanaged-exceptions -- chokepoint: this catch IS the \"you have no such file\"\n        // decision, and that decision may never surface as a failure to a user who never created the file\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            return fs.readFileSync(file, 'utf8');\n        } catch (err: unknown) {\n            const error = toError(err);\n            if (this.isAbsent(error)) return null;\n            throw error;\n        }\n    }\n\n    private isAbsent(error: Error): boolean {\n        // webpieces-disable no-any-unknown -- node attaches `code` to fs errors without typing it on Error\n        const code = (error as unknown as Record<string, unknown>)['code'];\n        return typeof code === 'string' && ABSENT_ERROR_CODES.includes(code);\n    }\n\n    // A readable file that is not a JSON object is a WRONG file, not an absent one — hence the throw.\n    // webpieces-disable no-any-unknown -- an unvalidated user-authored document; every field is narrowed below\n    private parse(raw: string, file: string): Record<string, unknown> {\n        // webpieces-disable no-unmanaged-exceptions -- chokepoint: JSON.parse's own message is useless to an\n        // agent on its own, so it is re-thrown as the InformAiError that names the file and the fix\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            // webpieces-disable no-any-unknown -- opaque parsed JSON, narrowed immediately below\n            const parsed: unknown = JSON.parse(raw);\n            if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {\n                throw new InformAiError(this.error(file, 'the file must contain a single JSON OBJECT, e.g. {}.'));\n            }\n            // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above\n            return parsed as Record<string, unknown>;\n        } catch (err: unknown) {\n            const error = toError(err);\n            if (error instanceof InformAiError) throw error;\n            throw new InformAiError(this.error(file, `the file is not valid JSON (${error.message}).`), { cause: error });\n        }\n    }\n\n    // webpieces-disable no-any-unknown -- see parse(); the document is user-authored and unvalidated\n    private validate(raw: Record<string, unknown>, file: string): HomeConfig {\n        this.assertNotRetired(raw, file);\n        this.docKeys.assertAreStrings(raw, '', (m: string): string => this.error(file, m));\n        this.warnUnknownKeys(Object.keys(raw), ALLOWED_TOP_LEVEL, '');\n        const section = raw[HOME_EXPERIMENTAL_SECTION];\n        if (section !== undefined && (typeof section !== 'object' || section === null || Array.isArray(section))) {\n            throw new InformAiError(this.error(file, `\"${HOME_EXPERIMENTAL_SECTION}\" must be a JSON object.`));\n        }\n        // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above\n        const experimental = (section ?? {}) as Record<string, unknown>;\n        this.docKeys.assertAreStrings(experimental, `${HOME_EXPERIMENTAL_SECTION}.`,\n            (m: string): string => this.error(file, m));\n        this.warnUnknownKeys(Object.keys(experimental), ALLOWED_EXPERIMENTAL, `${HOME_EXPERIMENTAL_SECTION}.`);\n        return new HomeConfig(\n            this.readOptionalBoolean(experimental, HOME_KEY_WHOLE_REPO_BUILD_GUARD, file, GUARD_OFF_WHEN_ABSENT),\n            this.readOptionalBoolean(experimental, HOME_KEY_ORPHAN_DIR_SWEEP, file, GUARD_OFF_WHEN_ABSENT),\n            this.readOptionalPositiveInteger(\n                experimental, HOME_KEY_MAX_CONCURRENT_BUILDS, file, DEFAULT_MAX_CONCURRENT_BUILDS),\n        );\n    }\n\n    /**\n     * The NUMERIC sibling of {@link readOptionalBoolean}, and the same three rules apply unchanged: the\n     * key is OPTIONAL (absent → `whenAbsent`, stated out loud by the caller), a PRESENT value of the\n     * wrong type is an ERROR, and nothing here ever guesses.\n     *\n     * \"Wrong type\" is stricter than `typeof value === 'number'`, because for this key the wrong NUMBERS\n     * are as meaningless as the wrong types: `0` is a machine that may never build, `-1` and `2.5` are\n     * not counts of anything, and `NaN` compares false against every threshold and would silently\n     * disable the check. A positive integer is the only value that means something, so it is the only\n     * value accepted — and the rejection names the offending value, exactly as the boolean one does.\n     *\n     * This does NOT soften the machine-global forward-compatibility rule: an UNKNOWN key is still\n     * ignored with a warning. Only a key THIS release understands is type-checked, and no release of\n     * webpieces has ever given `maxConcurrentBuilds` a non-numeric meaning.\n     */\n    // webpieces-disable no-any-unknown -- see parse()\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private readOptionalPositiveInteger(\n        experimental: Record<string, unknown>, key: string, file: string, whenAbsent: number,\n    ): number {\n        const value = experimental[key];\n        if (value === undefined) return whenAbsent;\n        if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n            throw new InformAiError(this.error(file,\n                `\"${HOME_EXPERIMENTAL_SECTION}.${key}\" must be a POSITIVE WHOLE NUMBER (1 or more), not ` +\n                `${JSON.stringify(value)}. Write it as a bare JSON number, e.g. ` +\n                `\"${key}\": ${String(whenAbsent)} — or delete the key to use the default of ` +\n                `${String(whenAbsent)}.`));\n        }\n        return value;\n    }\n\n    /**\n     * An absent key falls back to `whenAbsent`, which every caller states OUT LOUD by passing\n     * `GUARD_OFF_WHEN_ABSENT` — an implicit \"absent means false\" buried in this method would put the\n     * default and the key that carries it in different places, free to drift apart.\n     *\n     * A PRESENT key of the wrong type is still an ERROR, and that is the line neither the unknown-key change\n     * nor this one moved: `\"whole-repo-build-guard\": \"yes\"` is a file somebody wrote wrongly, not\n     * a file written for a different release. No release of webpieces has ever given this key a string\n     * meaning, so there is no forward-compatibility story to protect and nothing is gained by guessing —\n     * whereas guessing would turn a typed value into a silent fallback to the default, which is the very\n     * cost the unknown-key warning exists to bound.\n     *\n     * This is the ONLY reader; see the every-key-is-optional note above for why there is no required\n     * variant.\n     */\n    // webpieces-disable no-any-unknown -- see parse()\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private readOptionalBoolean(\n        experimental: Record<string, unknown>, key: string, file: string, whenAbsent: boolean,\n    ): boolean {\n        const value = experimental[key];\n        if (value === undefined) return whenAbsent;\n        return this.asBoolean(value, key, file, ' Remove the quotes, or delete the key.');\n    }\n\n    // webpieces-disable no-any-unknown -- see parse()\n    // eslint-disable-next-line @typescript-eslint/max-params\n    private asBoolean(value: unknown, key: string, file: string, fix: string): boolean {\n        if (typeof value !== 'boolean') {\n            throw new InformAiError(this.error(file,\n                `\"${HOME_EXPERIMENTAL_SECTION}.${key}\" must be the boolean ` +\n                `true or false, not ${JSON.stringify(value)}.${fix}`));\n        }\n        return value;\n    }\n\n    // Retired keys are checked BEFORE unknown-key reporting: \"unknown key\" would send an agent deleting a\n    // key whose value it should be MOVING, which is the whole reason the retirement table exists.\n    // webpieces-disable no-any-unknown -- see parse()\n    private assertNotRetired(raw: Record<string, unknown>, file: string): void {\n        for (const entry of RETIRED_HOME_CONFIG_KEYS) {\n            if (!this.isPresentAt(raw, entry.key)) continue;\n            const destination = entry.movedTo === ''\n                ? 'It was removed with no replacement.'\n                : `It moved to \"${entry.movedTo}\".`;\n            throw new InformAiError(this.error(file,\n                `\"${entry.key}\" is RETIRED. ${destination} ${entry.instruction}`));\n        }\n    }\n\n    // Is `dotted` (one or two segments — the file is two levels deep by construction) actually present?\n    // webpieces-disable no-any-unknown -- see parse()\n    private isPresentAt(raw: Record<string, unknown>, dotted: string): boolean {\n        const parts = dotted.split('.');\n        if (parts.length === 1) return raw[parts[0]] !== undefined;\n        const section = raw[parts[0]];\n        if (typeof section !== 'object' || section === null || Array.isArray(section)) return false;\n        // webpieces-disable no-any-unknown -- narrowed to a non-null, non-array object one line above\n        return (section as Record<string, unknown>)[parts[1]] !== undefined;\n    }\n\n    /**\n     * The understood keys AT ONE LEVEL, rendered from the allow-list rather than hand-listed — and\n     * rendered at the level the reader's key was actually found, so a mistyped SECTION is answered with\n     * the sections and a mistyped FLAG with the flags. The hand-listed version named two keys and went\n     * stale the moment a third arrived, telling an agent its brand-new key was not accepted while the\n     * validator right above accepted it.\n     */\n    private quotedKeys(allowed: readonly string[], prefix: string): string {\n        return allowed.map((key: string): string => `\"${prefix}${key}\"`).join(', ');\n    }\n\n    /**\n     * An unknown key is IGNORED — see the class docblock for why this one file cannot reject it — but it\n     * is never SILENT. The warning is the entire mitigation for the cost of ignoring, so it says both\n     * things a reader needs: that the key did nothing, and what the understood keys are.\n     *\n     * ─── WHY THIS IS NOT THE \"console side channel\" SHAPE ────────────────────────────────────────────\n     * That shape is a rule or a library reporting a FAILURE — or a cure for one — by printing it instead\n     * of throwing a structured value to the one top-level handler. This is the opposite case, and the\n     * distinction is the entire subject of this change: an unknown key here is NOT a failure. The load\n     * SUCCEEDS, a valid HomeConfig is returned, every caller proceeds normally, and there is no cure the\n     * reader is obliged to apply — a key from a newer release is a CORRECT file being read by an older\n     * validator. There is no throw this could be, because throwing is precisely the behaviour being\n     * deleted here; and returning it would mean inventing a warnings channel through `load()` that no\n     * caller has any reason to render.\n     *\n     * stderr, not stdout, for the usual reason: this runs inside hooks whose stdout is a JSON decision\n     * and inside `wp-*` commands whose stdout is their real output, and neither may be polluted. It is\n     * the same channel, with the same `[webpieces]` prefix, that `state-dir-migration.announce` already\n     * uses in this package for the same category of finding — something a human may want to know about\n     * and is not required to act on.\n     */\n    /**\n     * The sentence for a flag a HUMAN ended, or '' when this key is not one.\n     *\n     * Consulted BEFORE the retired-near-miss hint and before the generic \"typo or newer release\" line,\n     * because for these keys that generic line is actively misleading: it invites the reader to check\n     * their spelling or upgrade, when the truth is that they spelled it correctly, they are on a new\n     * enough release, and the thing they asked for now happens anyway.\n     */\n    private endedExperimentHint(dotted: string): string {\n        const ended = ENDED_EXPERIMENTS.find((e: EndedExperiment): boolean => e.key === dotted);\n        if (ended === undefined) return '';\n        return ` That experiment ENDED in @webpieces ${ended.endedIn}. ${ended.note}`;\n    }\n\n    private warnUnknownKeys(found: string[], allowed: readonly string[], prefix: string): void {\n        // ACCEPTED everywhere, ADVERTISED nowhere. A documentation key is not a setting, so it is\n        // skipped here rather than added to the allowed lists: those lists are walked elsewhere to build\n        // typed sample documents, and listing `_doc` under \"Understood here\" — or offering it as the\n        // nearest match to a misspelled setting — would send someone hunting for what it configures.\n        // It configures nothing.\n        for (const key of found) {\n            if (allowed.includes(key) || this.docKeys.isDocumentationKey(key)) continue;\n            const near = this.nearestKnownKey(key, allowed);\n            const guess = near !== ''\n                ? ` Did you mean \"${prefix}${near}\"?`\n                : this.endedExperimentHint(`${prefix}${key}`)\n                  || this.nearRetiredHint(`${prefix}${key}`)\n                  || ' If it is a typo, fix the spelling; if it is from a NEWER @webpieces than this repo pins, upgrade this repo to use it.';\n            this.warn(\n                `\"${prefix}${key}\" is not a key this @webpieces release understands, so it was IGNORED ` +\n                `and had NO effect.${guess} Understood here: ${this.quotedKeys(allowed, prefix)}.`);\n        }\n    }\n\n    /**\n     * A near-miss of a RETIRED key, pointed at its migration — or '' when nothing retired is close.\n     *\n     * The gap this closes: `assertNotRetired` matches a retired key EXACTLY, so `captureBuildGateLog`\n     * throws with its migration instruction while `captureBuildGateLogg` — one stray character away, and\n     * a far likelier thing to type — falls through to the generic \"IGNORED, might be from a newer\n     * release\" line. That is the least helpful of the three answers offered to the reader whose intent is the\n     * clearest, so the retired table is consulted here too, at the same distance-2 threshold.\n     *\n     * It only ever produces a WARNING, never a throw: this release cannot know whether the reader meant\n     * the retired key or a newer one, and guessing wrong in the throwing direction is what the whole\n     * change is about. Known keys are matched first, so a typo of a LIVE key is never answered with a\n     * dead one.\n     */\n    private nearRetiredHint(dottedKey: string): string {\n        for (const entry of RETIRED_HOME_CONFIG_KEYS) {\n            if (this.editDistance(dottedKey.toLowerCase(), entry.key.toLowerCase()) > 2) continue;\n            const destination = entry.movedTo === ''\n                ? 'it was removed with no replacement'\n                : `it moved to \"${entry.movedTo}\"`;\n            return ` Did you mean the RETIRED key \"${entry.key}\"? If so, ${destination}. ${entry.instruction}`;\n        }\n        return '';\n    }\n\n    // One shape for every non-fatal finding, matching state-dir-migration's `[webpieces] <what>:` prefix\n    // so a reader can tell at a glance which subsystem is talking.\n    private warn(message: string): void {\n        process.stderr.write(`[webpieces] ~/.webpieces/config.json: ${message}\\n`);\n    }\n\n    /**\n     * The closest understood key within two edits, or '' when nothing is close.\n     *\n     * This used to be a case-insensitive EQUALITY test, which was adequate while an unknown key was a\n     * hard error — the error itself was the signal, and the suggestion only saved a reading. Now the\n     * suggestion IS the signal, so it has to catch the typos an equality test misses: a doubled letter,\n     * a dropped one, a transposition, a stray trailing character (`orphan-dir-sweeped`). Two is the\n     * useful threshold — it covers every one of those and still refuses to guess for a genuinely new\n     * key, which is the case that must NOT be dressed up as a typo.\n     */\n    private nearestKnownKey(key: string, allowed: readonly string[]): string {\n        let best = '';\n        let bestDistance = 3;\n        for (const candidate of allowed) {\n            const distance = this.editDistance(key.toLowerCase(), candidate.toLowerCase());\n            if (distance >= bestDistance) continue;\n            bestDistance = distance;\n            best = candidate;\n        }\n        return best;\n    }\n\n    /** Ordinary Levenshtein distance, one row at a time — the key names are short and this runs once. */\n    private editDistance(a: string, b: string): number {\n        let previous: number[] = [];\n        for (let j = 0; j <= b.length; j += 1) previous.push(j);\n        for (let i = 1; i <= a.length; i += 1) {\n            const current: number[] = [i];\n            for (let j = 1; j <= b.length; j += 1) {\n                const substitution = previous[j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1);\n                current.push(Math.min(substitution, previous[j] + 1, current[j - 1] + 1));\n            }\n            previous = current;\n        }\n        return previous[b.length];\n    }\n\n    // One shape for every rejection: what is wrong, in which file, and the fact that deleting the file is\n    // always a legal fix — because the file is optional, and \"no file\" is a fully supported state.\n    private error(file: string, detail: string): string {\n        return `[~/.webpieces/config.json] ${detail}\\n\\n` +\n            `File: ${file}\\n` +\n            `This machine-local preference file is OPTIONAL and EXPERIMENTAL. Editing it is always ` +\n            `permitted, even while it is invalid, and deleting it outright is a valid fix — with no such ` +\n            `file every webpieces command behaves exactly as it does by default.`;\n    }\n}\n"]}

package/src/index.d.ts

@@ -33,7 +33,7 @@ export { unknownKeyErrors, isCommentKey, validateTopLevelKeys, COMMENT_KEY_SUFFI
 export { RETIRED_CONFIG_KEYS, RETIRED_SCOPE_KEY, RETIRED_SCOPE_RULE, RetiredConfigKey, isRetiredKey, retiredEntry, retiredKeyError, retiredKeyErrorsIn, retiredRuleFor } from './retired-config-keys';
 export { ConfigPruner, PruneResult, PrunedKey } from './config-pruner';
 export { validateChecklistDocs } from './checklist-docs-validator';
-export { HomeConfig, HomeConfigService, RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS, HOME_CONFIG_DIR, HOME_CONFIG_FILE, HOME_EXPERIMENTAL_SECTION, HOME_KEY_ORPHAN_DIR_SWEEP, HOME_KEY_WHOLE_REPO_BUILD_GUARD, HOME_KEY_MAX_CONCURRENT_BUILDS, DEFAULT_MAX_CONCURRENT_BUILDS, } from './home-config';
+export { HomeConfig, HomeConfigService, RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS, HOME_CONFIG_DIR, HOME_CONFIG_FILE, HOME_EXPERIMENTAL_SECTION, HOME_KEY_ORPHAN_DIR_SWEEP, HOME_KEY_WHOLE_REPO_BUILD_GUARD, HOME_KEY_MAX_CONCURRENT_BUILDS, DEFAULT_MAX_CONCURRENT_BUILDS, HOME_KEY_DOC, HOME_KEY_AI_DOC, DOCUMENTATION_KEYS, } from './home-config';
 export { BuildsLog, BuildTicket, RunningBuild, BUILDS_LOG_FILE, BUILDS_LOCK_FILE, BUILD_START, BUILD_DONE_SUCCESS, BUILD_DONE_FAIL, MAX_BUILDS_LOG_BYTES, BUILDS_LOG_GENERATIONS, MAX_ROW_BYTES, } from './builds-log';
 export { OrphanDirScanner, OrphanCandidate } from './orphan-dir-scan';
 export { OrphanDirArchiver, ArchivedOrphan, FailedOrphan, OrphanSweepResult, OrphanSweepManifest, TRASH_STATE_DIR, TRASH_MANIFEST_FILE, TRASH_RETENTION_DAYS, } from './orphan-dir-archive';

package/src/index.js

@@ -2,12 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RulesConfigDesign = exports.atRoot = exports.AtomicFile = exports.CLAUDE_PROJECT_DIR_UNSET = exports.CLAUDE_PROJECT_DIR_ENV = exports.claudeEnv = exports.ClaudeEnv = exports.RETENTION_DAYS = exports.SweepCount = exports.AgedTreeSweeper = exports.StateMigrationReport = exports.StateDirMigrator = exports.LOGS_STATE_DIR = exports.WORKTREE_STATE_DIR = exports.GitDirs = exports.dotWebpieces = exports.DotWebpieces = exports.INSTRUCT_AI_LEAF = exports.INSTRUCT_AI_DIR = exports.RepoRootFinder = exports.CONFIG_PARSE_RETRY_MILLIS = exports.CONFIG_PARSE_ATTEMPTS = exports.ConfigParseAttempt = exports.ConfigFile = exports.CONFIG_FILENAME = exports.findConfigFile = exports.SECTION_PLACEMENT_MARKER = exports.RETIRED_TOP_LEVEL_MARKER = exports.RETIRED_KEY_MARKER = exports.CONFIG_POLICY_DOC = exports.formatConfigErrorsBanner = exports.ConfigLoader = exports.LoadedConfig = exports.loadAndValidate = exports.toError = exports.runMain = exports.CliArgs = exports.CliArgsCheck = exports.CliArgSet = exports.CliFlag = exports.CliUsage = exports.CliExitError = exports.formatFixOptions = exports.Option = exports.renderRuleFailForHuman = exports.renderRuleFailForAi = exports.RuleFailError = exports.InformAiError = exports.ResolvedRuleConfig = exports.ResolvedConfig = void 0;
 exports.PruneResult = exports.ConfigPruner = exports.retiredRuleFor = exports.retiredKeyErrorsIn = exports.retiredKeyError = exports.retiredEntry = exports.isRetiredKey = exports.RetiredConfigKey = exports.RETIRED_SCOPE_RULE = exports.RETIRED_SCOPE_KEY = exports.RETIRED_CONFIG_KEYS = exports.COMMENT_KEY_SUFFIX = exports.validateTopLevelKeys = exports.isCommentKey = exports.unknownKeyErrors = exports.validateCommandsSection = exports.seedEntryForRule = exports.recommendedSeedModeFor = exports.recommendedSeedMode = exports.allRuleNames = exports.validateMatchRulesSection = exports.validateExcludePaths = exports.validateSectionPlacement = exports.validateChecklistsSection = exports.validatePrGateSection = exports.validateWebpiecesConfig = exports.BUILD_LOG_DOC = exports.ReferenceMergeRun = exports.MergeRun = exports.MergeProcessText = exports.MERGE_PROCESS_DOC = exports.MergeProcessDoc = exports.InstructAiDocSet = exports.InstructAiDoc = exports.GitWorkflowDoc = exports.GIT_WORKFLOW_DOC = exports.TemplateWriter = exports.writeTemplate = exports.writeTemplateIfMissing = exports.loadTemplate = exports.defaultRulesDir = exports.defaultRules = exports.NoCustomCssScope = exports.matchesAnyGlob = exports.isPathExcluded = exports.isWebpiecesStateDir = exports.ExcludePaths = exports.DESIGN_METADATA_KEYS = exports.isDocumentDesign = exports.DocumentDesign = void 0;
-exports.FieldDef = exports.sectionForRule = exports.isHookGuard = exports.PR_LIFECYCLE_GUARD_KEY = exports.BRANCH_STATE_GUARD_KEY = exports.HOOK_GUARD_NAMES = exports.schemaFieldNames = exports.DEFAULT_MATCH_RULES = exports.renderMatchRuleMessage = exports.compileMatchRulePatterns = exports.isMatchRuleAllowedPath = exports.findMatchRuleViolations = exports.MatchRuleViolation = exports.MatchRuleConfig = exports.OrphanSweepReport = exports.OrphanDirSweeper = exports.TRASH_RETENTION_DAYS = exports.TRASH_MANIFEST_FILE = exports.TRASH_STATE_DIR = exports.OrphanSweepManifest = exports.OrphanSweepResult = exports.FailedOrphan = exports.ArchivedOrphan = exports.OrphanDirArchiver = exports.OrphanCandidate = exports.OrphanDirScanner = exports.MAX_ROW_BYTES = exports.BUILDS_LOG_GENERATIONS = exports.MAX_BUILDS_LOG_BYTES = exports.BUILD_DONE_FAIL = exports.BUILD_DONE_SUCCESS = exports.BUILD_START = exports.BUILDS_LOCK_FILE = exports.BUILDS_LOG_FILE = exports.RunningBuild = exports.BuildTicket = exports.BuildsLog = exports.DEFAULT_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_WHOLE_REPO_BUILD_GUARD = exports.HOME_KEY_ORPHAN_DIR_SWEEP = exports.HOME_EXPERIMENTAL_SECTION = exports.HOME_CONFIG_FILE = exports.HOME_CONFIG_DIR = exports.RETIRED_HOME_CONFIG_KEYS = exports.RetiredHomeConfigKey = exports.HomeConfigService = exports.HomeConfig = exports.validateChecklistDocs = exports.PrunedKey = void 0;
-exports.NoFunctionOutsideClassConfig = exports.NoProcessExitOutsideMainConfig = exports.NoCustomCssConfig = exports.NoSymbolDiTokensConfig = exports.AngularNoDirectApiInResolverConfig = exports.ThrowCauseRequiredConfig = exports.CatchErrorPatternConfig = exports.NoUnmanagedExceptionsConfig = exports.NoDestructureConfig = exports.PrismaConverterConfig = exports.PrismaValidateDtosConfig = exports.NoImplicitAnyConfig = exports.NoAnyUnknownConfig = exports.NoInlineTypeLiteralsConfig = exports.RequireReturnTypeConfig = exports.MaxFileLinesConfig = exports.MaxMethodLinesConfig = exports.WP_FINISH_PUSH_DEV = exports.WP_PUSH_DEV = exports.WP_FINISH_UPSERT_PR = exports.WP_START_UPSERT_PR = exports.WP_FINISH_UPDATE = exports.WP_START_UPDATE = exports.SyncFlowGuidance = exports.WebpiecesRulesConfig = exports.PRUNE_UNKNOWN_COMMAND = exports.PUSH_DEV_STATE_FILE = exports.MERGE_EXPLANATION_FILE = exports.MERGE_IN_PROGRESS_FILE = exports.PR_REVIEW_DIR = exports.MERGE_INFO_DIR = exports.WEBPIECES_TMP_DIR = exports.hasDisable = exports.RULE_NAMES = exports.WEBPIECES_DISABLE = exports.AbstractRule = exports.ChangedFilesOptions = exports.DiffRange = exports.DiffScope = exports.isNewOrModified = exports.hasChangesInRange = exports.findNewMethodSignaturesInDiff = exports.getChangedLineNumbers = exports.getFileDiff = exports.getChangedFiles = exports.resolveBase = exports.detectBase = exports.SkipRuleResult = exports.getCurrentBranch = exports.shouldSkipRule = void 0;
-exports.buildLandPrConfig = exports.buildPrGateConfig = exports.defaultDevDeployConfig = exports.defaultLandPrConfig = exports.defaultPrGateConfig = exports.defaultGates = exports.ReviewContextEntry = exports.DEFAULT_DEV_BRANCH = exports.DEFAULT_DEV_BRANCH_NAMESPACE = exports.DevDeployConfig = exports.LandPrConfig = exports.DEFAULT_BUILD_COMMAND = exports.PrGateConfig = exports.GateDefinition = exports.BranchStateGuardConfig = exports.DEFAULT_BANNED_STATE_PATH_PREFIXES = exports.DEFAULT_TEMPLATE_DIRS = exports.NoStatePathsInTemplatesConfig = exports.CLIENT_CREATION_SEVERITIES = exports.NoClientCreationOutsideServerOrClientConfig = exports.VALIDATE_TS_MODES = exports.STRUCTURAL_MODES = exports.ON_OFF_MODES = exports.THROW_CAUSE_MODES = exports.DIRECT_API_RESOLVER_MODES = exports.PRISMA_CONVERTER_MODES = exports.PRISMA_DTOS_MODES = exports.PROJECT_MODES = exports.MODIFIED_CODE_MODES = exports.INLINE_TYPE_MODES = exports.RETURN_TYPE_MODES = exports.FILE_LIMIT_MODES = exports.METHOD_LIMIT_MODES = exports.BaseRuleConfig = exports.ValidateEslintSyncConfig = exports.ValidateVersionsLockedConfig = exports.ValidatePackageJsonConfig = exports.ValidateNoArchitectureCyclesConfig = exports.ValidateArchitectureUnchangedConfig = exports.ValidateTsInSrcConfig = exports.NoJsFilesConfig = exports.DiGraphConfig = exports.NxWiringConfig = exports.RuntimeArchitectureConfig = exports.NoFileImportCyclesConfig = exports.PrLifecycleGuardConfig = exports.BranchCreationGuardConfig = exports.RoleTagConfig = exports.FrameworkTagConfig = exports.InjectAnnotationNotNeededForConcreteClassConfig = void 0;
-exports.VERDICT_STATUSES = exports.VERDICT_RED = exports.VERDICT_YELLOW = exports.VERDICT_GREEN = exports.CK_BAD_FORMAT = exports.CK_MISSING = exports.CK_FAIL = exports.CK_OVERRIDDEN = exports.CK_WARN = exports.CK_PASS = exports.ChecklistVerdict = exports.ChecklistResult = exports.PrContext = exports.ReviewJson = exports.DEFAULT_RETENTION_DAYS = exports.ProvenanceWriteRequest = exports.OfferedContext = exports.ReviewerPaths = exports.ReviewerTranscript = exports.ReviewProvenance = exports.ReviewProvenanceService = exports.PROVENANCE_SKIPPED = exports.PROVENANCE_MISSING = exports.PROVENANCE_OK = exports.ProvenanceResult = exports.TranscriptScan = exports.ReviewerContext = exports.ReviewerEvidence = exports.SubagentProvenanceService = exports.verifyGateToken = exports.extractGateToken = exports.gateTokenMarker = exports.computeGateToken = exports.GateTokenService = exports.ALL_DIFF_ONE_READ_LINES = exports.READ_TRUNCATION_LINES = exports.ContextEntry = exports.BriefedFile = exports.ReviewerBriefing = exports.ReviewerInstructionsService = exports.ChecklistInstructionsService = exports.ChecklistValidator = exports.formatFileList = exports.normalizeChecklistDoc = exports.toChecklist = exports.ChecklistDefinition = exports.MERGE_MODES = exports.MERGE_MODE_NONE = exports.MERGE_MODE_AUTO = exports.buildDevDeployConfig = void 0;
-exports.CLASSIFICATION_CURRENT = exports.CLASSIFICATION_LOCKED = exports.CLASSIFICATION_PRUNABLE = exports.CLASSIFICATION_IN_USE = exports.CLASSIFICATION_NEVER_PROPOSED = exports.CLASSIFICATION_CONTENT_IN_MAIN = exports.CLASSIFICATION_SUPERSEDED = exports.CLASSIFICATION_NO_COMMITS = exports.CLASSIFICATION_BACKUP_OF_LIVE = exports.CLASSIFICATION_BACKUP_OF_MERGED = exports.CLASSIFICATION_MERGED_PR = exports.CACHE_STALE_AFTER_MS = exports.CacheFreshness = exports.MergedBranchesService = exports.MergedBranchesCache = exports.DeletableWorktree = exports.DeletableBranch = exports.MergedBranch = exports.squashRecoverySteps = exports.stampCleanMainSyncStatus = exports.computeMainSyncStatus = exports.finishedLock = exports.inProcessLock = exports.tryAcquireMainSyncLock = exports.isRefreshInProgress = exports.isLockStale = exports.writeMainSyncLock = exports.readMainSyncLock = exports.computeAllMainSyncStatuses = exports.writeMainSyncStatusFile = exports.writeMainSyncStatus = exports.readMainSyncStatusFile = exports.readMainSyncStatus = exports.mainSyncLockPath = exports.mainSyncStatusPath = exports.DEFAULT_HANG_TIMEOUT_MINUTES = exports.MainSyncStatusService = exports.MainSyncLock = exports.MAIN_SYNC_STATUS_VERSION = exports.PullRequestIndex = exports.MainSyncFileStore = exports.MainSyncStatusFile = exports.MainSyncStatus = exports.reviewJsonSchemaHint = exports.reviewJsonPath = exports.prDirFor = exports.loadReviewJson = exports.ReviewJsonService = exports.ChecklistReviewContext = exports.RequiredChecklist = void 0;
-exports.DEFAULT_MERGE_COMPLETE_COMMAND = exports.DEFAULT_UPSERT_PR_COMMAND = exports.buildCommandsConfig = exports.CommandsConfig = exports.logBranchMutation = exports.branchMutationLogPath = exports.BranchMutationLog = exports.BranchMutationEvent = exports.WorktreeReaper = exports.WorktreeReapResult = exports.ReapedWorktree = exports.BranchReaper = exports.ReapResult = exports.ReapedBranch = exports.WorktreeLockVerdicts = exports.AgentWorktreeLockReader = exports.AgentWorktreeLock = exports.WorktreeService = exports.WorktreeWorkInFlight = exports.Worktree = exports.BRANCH_RETENTION_KEEP = exports.BRANCH_RETENTION_ARCHIVE_TAG = exports.BRANCH_RETENTION_DELETE = exports.BRANCH_RETENTIONS = exports.ARCHIVE_TAG_PREFIX = exports.ArchiveResult = exports.BranchArchiver = exports.ADJUDICATED_CLASSIFICATIONS = exports.CLASSIFICATION_DETACHED = void 0;
+exports.PR_LIFECYCLE_GUARD_KEY = exports.BRANCH_STATE_GUARD_KEY = exports.HOOK_GUARD_NAMES = exports.schemaFieldNames = exports.DEFAULT_MATCH_RULES = exports.renderMatchRuleMessage = exports.compileMatchRulePatterns = exports.isMatchRuleAllowedPath = exports.findMatchRuleViolations = exports.MatchRuleViolation = exports.MatchRuleConfig = exports.OrphanSweepReport = exports.OrphanDirSweeper = exports.TRASH_RETENTION_DAYS = exports.TRASH_MANIFEST_FILE = exports.TRASH_STATE_DIR = exports.OrphanSweepManifest = exports.OrphanSweepResult = exports.FailedOrphan = exports.ArchivedOrphan = exports.OrphanDirArchiver = exports.OrphanCandidate = exports.OrphanDirScanner = exports.MAX_ROW_BYTES = exports.BUILDS_LOG_GENERATIONS = exports.MAX_BUILDS_LOG_BYTES = exports.BUILD_DONE_FAIL = exports.BUILD_DONE_SUCCESS = exports.BUILD_START = exports.BUILDS_LOCK_FILE = exports.BUILDS_LOG_FILE = exports.RunningBuild = exports.BuildTicket = exports.BuildsLog = exports.DOCUMENTATION_KEYS = exports.HOME_KEY_AI_DOC = exports.HOME_KEY_DOC = exports.DEFAULT_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_MAX_CONCURRENT_BUILDS = exports.HOME_KEY_WHOLE_REPO_BUILD_GUARD = exports.HOME_KEY_ORPHAN_DIR_SWEEP = exports.HOME_EXPERIMENTAL_SECTION = exports.HOME_CONFIG_FILE = exports.HOME_CONFIG_DIR = exports.RETIRED_HOME_CONFIG_KEYS = exports.RetiredHomeConfigKey = exports.HomeConfigService = exports.HomeConfig = exports.validateChecklistDocs = exports.PrunedKey = void 0;
+exports.NoSymbolDiTokensConfig = exports.AngularNoDirectApiInResolverConfig = exports.ThrowCauseRequiredConfig = exports.CatchErrorPatternConfig = exports.NoUnmanagedExceptionsConfig = exports.NoDestructureConfig = exports.PrismaConverterConfig = exports.PrismaValidateDtosConfig = exports.NoImplicitAnyConfig = exports.NoAnyUnknownConfig = exports.NoInlineTypeLiteralsConfig = exports.RequireReturnTypeConfig = exports.MaxFileLinesConfig = exports.MaxMethodLinesConfig = exports.WP_FINISH_PUSH_DEV = exports.WP_PUSH_DEV = exports.WP_FINISH_UPSERT_PR = exports.WP_START_UPSERT_PR = exports.WP_FINISH_UPDATE = exports.WP_START_UPDATE = exports.SyncFlowGuidance = exports.WebpiecesRulesConfig = exports.PRUNE_UNKNOWN_COMMAND = exports.PUSH_DEV_STATE_FILE = exports.MERGE_EXPLANATION_FILE = exports.MERGE_IN_PROGRESS_FILE = exports.PR_REVIEW_DIR = exports.MERGE_INFO_DIR = exports.WEBPIECES_TMP_DIR = exports.hasDisable = exports.RULE_NAMES = exports.WEBPIECES_DISABLE = exports.AbstractRule = exports.ChangedFilesOptions = exports.DiffRange = exports.DiffScope = exports.isNewOrModified = exports.hasChangesInRange = exports.findNewMethodSignaturesInDiff = exports.getChangedLineNumbers = exports.getFileDiff = exports.getChangedFiles = exports.resolveBase = exports.detectBase = exports.SkipRuleResult = exports.getCurrentBranch = exports.shouldSkipRule = exports.FieldDef = exports.sectionForRule = exports.isHookGuard = void 0;
+exports.defaultLandPrConfig = exports.defaultPrGateConfig = exports.defaultGates = exports.ReviewContextEntry = exports.DEFAULT_DEV_BRANCH = exports.DEFAULT_DEV_BRANCH_NAMESPACE = exports.DevDeployConfig = exports.LandPrConfig = exports.DEFAULT_BUILD_COMMAND = exports.PrGateConfig = exports.GateDefinition = exports.BranchStateGuardConfig = exports.DEFAULT_BANNED_STATE_PATH_PREFIXES = exports.DEFAULT_TEMPLATE_DIRS = exports.NoStatePathsInTemplatesConfig = exports.CLIENT_CREATION_SEVERITIES = exports.NoClientCreationOutsideServerOrClientConfig = exports.VALIDATE_TS_MODES = exports.STRUCTURAL_MODES = exports.ON_OFF_MODES = exports.THROW_CAUSE_MODES = exports.DIRECT_API_RESOLVER_MODES = exports.PRISMA_CONVERTER_MODES = exports.PRISMA_DTOS_MODES = exports.PROJECT_MODES = exports.MODIFIED_CODE_MODES = exports.INLINE_TYPE_MODES = exports.RETURN_TYPE_MODES = exports.FILE_LIMIT_MODES = exports.METHOD_LIMIT_MODES = exports.BaseRuleConfig = exports.ValidateEslintSyncConfig = exports.ValidateVersionsLockedConfig = exports.ValidatePackageJsonConfig = exports.ValidateNoArchitectureCyclesConfig = exports.ValidateArchitectureUnchangedConfig = exports.ValidateTsInSrcConfig = exports.NoJsFilesConfig = exports.DiGraphConfig = exports.NxWiringConfig = exports.RuntimeArchitectureConfig = exports.NoFileImportCyclesConfig = exports.PrLifecycleGuardConfig = exports.BranchCreationGuardConfig = exports.RoleTagConfig = exports.FrameworkTagConfig = exports.InjectAnnotationNotNeededForConcreteClassConfig = exports.NoFunctionOutsideClassConfig = exports.NoProcessExitOutsideMainConfig = exports.NoCustomCssConfig = void 0;
+exports.VERDICT_GREEN = exports.CK_BAD_FORMAT = exports.CK_MISSING = exports.CK_FAIL = exports.CK_OVERRIDDEN = exports.CK_WARN = exports.CK_PASS = exports.ChecklistVerdict = exports.ChecklistResult = exports.PrContext = exports.ReviewJson = exports.DEFAULT_RETENTION_DAYS = exports.ProvenanceWriteRequest = exports.OfferedContext = exports.ReviewerPaths = exports.ReviewerTranscript = exports.ReviewProvenance = exports.ReviewProvenanceService = exports.PROVENANCE_SKIPPED = exports.PROVENANCE_MISSING = exports.PROVENANCE_OK = exports.ProvenanceResult = exports.TranscriptScan = exports.ReviewerContext = exports.ReviewerEvidence = exports.SubagentProvenanceService = exports.verifyGateToken = exports.extractGateToken = exports.gateTokenMarker = exports.computeGateToken = exports.GateTokenService = exports.ALL_DIFF_ONE_READ_LINES = exports.READ_TRUNCATION_LINES = exports.ContextEntry = exports.BriefedFile = exports.ReviewerBriefing = exports.ReviewerInstructionsService = exports.ChecklistInstructionsService = exports.ChecklistValidator = exports.formatFileList = exports.normalizeChecklistDoc = exports.toChecklist = exports.ChecklistDefinition = exports.MERGE_MODES = exports.MERGE_MODE_NONE = exports.MERGE_MODE_AUTO = exports.buildDevDeployConfig = exports.buildLandPrConfig = exports.buildPrGateConfig = exports.defaultDevDeployConfig = void 0;
+exports.CLASSIFICATION_IN_USE = exports.CLASSIFICATION_NEVER_PROPOSED = exports.CLASSIFICATION_CONTENT_IN_MAIN = exports.CLASSIFICATION_SUPERSEDED = exports.CLASSIFICATION_NO_COMMITS = exports.CLASSIFICATION_BACKUP_OF_LIVE = exports.CLASSIFICATION_BACKUP_OF_MERGED = exports.CLASSIFICATION_MERGED_PR = exports.CACHE_STALE_AFTER_MS = exports.CacheFreshness = exports.MergedBranchesService = exports.MergedBranchesCache = exports.DeletableWorktree = exports.DeletableBranch = exports.MergedBranch = exports.squashRecoverySteps = exports.stampCleanMainSyncStatus = exports.computeMainSyncStatus = exports.finishedLock = exports.inProcessLock = exports.tryAcquireMainSyncLock = exports.isRefreshInProgress = exports.isLockStale = exports.writeMainSyncLock = exports.readMainSyncLock = exports.computeAllMainSyncStatuses = exports.writeMainSyncStatusFile = exports.writeMainSyncStatus = exports.readMainSyncStatusFile = exports.readMainSyncStatus = exports.mainSyncLockPath = exports.mainSyncStatusPath = exports.DEFAULT_HANG_TIMEOUT_MINUTES = exports.MainSyncStatusService = exports.MainSyncLock = exports.MAIN_SYNC_STATUS_VERSION = exports.PullRequestIndex = exports.MainSyncFileStore = exports.MainSyncStatusFile = exports.MainSyncStatus = exports.reviewJsonSchemaHint = exports.reviewJsonPath = exports.prDirFor = exports.loadReviewJson = exports.ReviewJsonService = exports.ChecklistReviewContext = exports.RequiredChecklist = exports.VERDICT_STATUSES = exports.VERDICT_RED = exports.VERDICT_YELLOW = void 0;
+exports.DEFAULT_MERGE_COMPLETE_COMMAND = exports.DEFAULT_UPSERT_PR_COMMAND = exports.buildCommandsConfig = exports.CommandsConfig = exports.logBranchMutation = exports.branchMutationLogPath = exports.BranchMutationLog = exports.BranchMutationEvent = exports.WorktreeReaper = exports.WorktreeReapResult = exports.ReapedWorktree = exports.BranchReaper = exports.ReapResult = exports.ReapedBranch = exports.WorktreeLockVerdicts = exports.AgentWorktreeLockReader = exports.AgentWorktreeLock = exports.WorktreeService = exports.WorktreeWorkInFlight = exports.Worktree = exports.BRANCH_RETENTION_KEEP = exports.BRANCH_RETENTION_ARCHIVE_TAG = exports.BRANCH_RETENTION_DELETE = exports.BRANCH_RETENTIONS = exports.ARCHIVE_TAG_PREFIX = exports.ArchiveResult = exports.BranchArchiver = exports.ADJUDICATED_CLASSIFICATIONS = exports.CLASSIFICATION_DETACHED = exports.CLASSIFICATION_CURRENT = exports.CLASSIFICATION_LOCKED = exports.CLASSIFICATION_PRUNABLE = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "ResolvedConfig", { enumerable: true, get: function () { return types_1.ResolvedConfig; } });
 Object.defineProperty(exports, "ResolvedRuleConfig", { enumerable: true, get: function () { return types_1.ResolvedRuleConfig; } });
@@ -187,6 +187,9 @@ Object.defineProperty(exports, "HOME_KEY_ORPHAN_DIR_SWEEP", { enumerable: true,
 Object.defineProperty(exports, "HOME_KEY_WHOLE_REPO_BUILD_GUARD", { enumerable: true, get: function () { return home_config_1.HOME_KEY_WHOLE_REPO_BUILD_GUARD; } });
 Object.defineProperty(exports, "HOME_KEY_MAX_CONCURRENT_BUILDS", { enumerable: true, get: function () { return home_config_1.HOME_KEY_MAX_CONCURRENT_BUILDS; } });
 Object.defineProperty(exports, "DEFAULT_MAX_CONCURRENT_BUILDS", { enumerable: true, get: function () { return home_config_1.DEFAULT_MAX_CONCURRENT_BUILDS; } });
+Object.defineProperty(exports, "HOME_KEY_DOC", { enumerable: true, get: function () { return home_config_1.HOME_KEY_DOC; } });
+Object.defineProperty(exports, "HOME_KEY_AI_DOC", { enumerable: true, get: function () { return home_config_1.HOME_KEY_AI_DOC; } });
+Object.defineProperty(exports, "DOCUMENTATION_KEYS", { enumerable: true, get: function () { return home_config_1.DOCUMENTATION_KEYS; } });
 // The MACHINE-WIDE build ledger, `~/.webpieces/builds.log`. THE one carve-out from
 // `no-machine-global-state.spec.ts`'s rule that webpieces writes only under `{repo}/.webpieces` — the
 // argument is in `decisions/0006-the-build-ledger-is-machine-global.md`, and the short form is that "how

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/index.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,iCAA0E;AAAjE,uGAAA,cAAc,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAC3C,qDAAkD;AAAzC,gHAAA,aAAa,OAAA;AACtB,qDAA+F;AAAtF,gHAAA,aAAa,OAAA;AAAE,sHAAA,mBAAmB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AACnE,uGAAuG;AACvG,sFAAsF;AACtF,2CAAwD;AAA/C,oGAAA,MAAM,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AACjC,mDAAgD;AAAvC,8GAAA,YAAY,OAAA;AACrB,uCAAiF;AAAxE,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAAE,qGAAA,SAAS,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,mGAAA,OAAO,OAAA;AAC5D,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,6CAA4E;AAAnE,8GAAA,eAAe,OAAA;AAAE,2GAAA,YAAY,OAAA;AAAE,2GAAA,YAAY,OAAA;AACpD,iGAAiG;AACjG,sCAAsC;AACtC,6DAM+B;AAL3B,+HAAA,wBAAwB,OAAA;AACxB,wHAAA,iBAAiB,OAAA;AACjB,yHAAA,kBAAkB,OAAA;AAClB,+HAAA,wBAAwB,OAAA;AACxB,+HAAA,wBAAwB,OAAA;AAE5B,6CAAkJ;AAAzI,6GAAA,cAAc,OAAA;AAAE,8GAAA,eAAe,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAAE,oHAAA,qBAAqB,OAAA;AAAE,wHAAA,yBAAyB,OAAA;AAI1H,yCAAgF;AAAvE,2GAAA,cAAc,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAC1D,wGAAwG;AACxG,8FAA8F;AAC9F,yCAAsG;AAA7F,yGAAA,YAAY,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,oGAAA,OAAO,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAAE,2GAAA,cAAc,OAAA;AAChF,6DAA+E;AAAtE,uHAAA,gBAAgB,OAAA;AAAE,2HAAA,oBAAoB,OAAA;AAC/C,uGAAuG;AACvG,yGAAyG;AACzG,mGAAmG;AACnG,2FAA2F;AAC3F,4DAA4D;AAC5D,qDAAgF;AAAvE,kHAAA,eAAe,OAAA;AAAE,6GAAA,UAAU,OAAA;AAAE,iHAAA,cAAc,OAAA;AACpD,2CAAsG;AAA7F,uGAAA,SAAS,OAAA;AAAE,uGAAA,SAAS,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,sHAAA,wBAAwB,OAAA;AAC/E,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,iGAAiG;AACjG,gGAAgG;AAChG,qCAAmC;AAA1B,iGAAA,MAAM,OAAA;AACf,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,2BAA8E;AAArE,oGAAA,cAAc,OAAA;AAAE,sGAAA,gBAAgB,OAAA;AAAE,0GAAA,oBAAoB,OAAA;AAC/D,2DAAyE;AAAhE,kHAAA,YAAY,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AAC1C,iDAAiE;AAAxD,+GAAA,cAAc,OAAA;AAAE,+GAAA,cAAc,OAAA;AACvC,yGAAyG;AACzG,6GAA6G;AAC7G,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AACzB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,iDAAsG;AAA7F,6GAAA,YAAY,OAAA;AAAE,uHAAA,sBAAsB,OAAA;AAAE,8GAAA,aAAa,OAAA;AAAE,+GAAA,cAAc,OAAA;AAC5E,wGAAwG;AACxG,gGAAgG;AAChG,uDAAwH;AAA/G,oHAAA,gBAAgB,OAAA;AAAE,kHAAA,cAAc,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,oHAAA,gBAAgB,OAAA;AAAE,mHAAA,eAAe,OAAA;AAC3F,yDAAuG;AAA9F,sHAAA,iBAAiB,OAAA;AAAE,qHAAA,gBAAgB,OAAA;AAAE,6GAAA,QAAQ,OAAA;AAAE,sHAAA,iBAAiB,OAAA;AACzE,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AACtB,qDAAsQ;AAA7P,0HAAA,uBAAuB,OAAA;AAAE,wHAAA,qBAAqB,OAAA;AAAE,4HAAA,yBAAyB,OAAA;AAAE,2HAAA,wBAAwB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAAE,4HAAA,yBAAyB,OAAA;AAAE,+GAAA,YAAY,OAAA;AAAE,sHAAA,mBAAmB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AAC1O,6EAAwE;AAA/D,sIAAA,uBAAuB,OAAA;AAChC,uDAA8G;AAArG,oHAAA,gBAAgB,OAAA;AAAE,gHAAA,YAAY,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AAAE,sHAAA,kBAAkB,OAAA;AACjF,uGAAuG;AACvG,wEAAwE;AACxE,6DAAsM;AAA7L,0HAAA,mBAAmB,OAAA;AAAE,wHAAA,iBAAiB,OAAA;AAAE,yHAAA,kBAAkB,OAAA;AAAE,uHAAA,gBAAgB,OAAA;AAAE,mHAAA,YAAY,OAAA;AAAE,mHAAA,YAAY,OAAA;AAAE,sHAAA,eAAe,OAAA;AAAE,yHAAA,kBAAkB,OAAA;AAAE,qHAAA,cAAc,OAAA;AACtK,0GAA0G;AAC1G,uGAAuG;AACvG,0FAA0F;AAC1F,iDAAuE;AAA9D,6GAAA,YAAY,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,0GAAA,SAAS,OAAA;AAC7C,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,4GAA4G;AAC5G,+GAA+G;AAC/G,yGAAyG;AACzG,2GAA2G;AAC3G,yGAAyG;AACzG,sGAAsG;AACtG,4GAA4G;AAC5G,0GAA0G;AAC1G,uGAAuG;AACvG,6CAKuB;AAJnB,yGAAA,UAAU,OAAA;AAAE,gHAAA,iBAAiB,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAAE,uHAAA,wBAAwB,OAAA;AAC7E,8GAAA,eAAe,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAAE,wHAAA,yBAAyB,OAAA;AAC5D,wHAAA,yBAAyB,OAAA;AAAE,8HAAA,+BAA+B,OAAA;AAAE,6HAAA,8BAA8B,OAAA;AAC1F,4HAAA,6BAA6B,OAAA;AAEjC,mFAAmF;AACnF,sGAAsG;AACtG,yGAAyG;AACzG,oGAAoG;AACpG,qGAAqG;AACrG,4FAA4F;AAC5F,2CAIsB;AAHlB,uGAAA,SAAS,OAAA;AAAE,yGAAA,WAAW,OAAA;AAAE,0GAAA,YAAY,OAAA;AACpC,6GAAA,eAAe,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAAE,yGAAA,WAAW,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,6GAAA,eAAe,OAAA;AACnF,kHAAA,oBAAoB,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,2GAAA,aAAa,OAAA;AAE/D,uGAAuG;AACvG,yGAAyG;AACzG,gGAAgG;AAChG,qDAAsE;AAA7D,mHAAA,gBAAgB,OAAA;AAAE,kHAAA,eAAe,OAAA;AAC1C,2DAG8B;AAF1B,uHAAA,iBAAiB,OAAA;AAAE,oHAAA,cAAc,OAAA;AAAE,kHAAA,YAAY,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AACvF,qHAAA,eAAe,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AAAE,0HAAA,oBAAoB,OAAA;AAE9D,uDAAyE;AAAhE,oHAAA,gBAAgB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAC5C,2DAQ8B;AAP1B,qHAAA,eAAe,OAAA;AACf,wHAAA,kBAAkB,OAAA;AAClB,6HAAA,uBAAuB,OAAA;AACvB,4HAAA,sBAAsB,OAAA;AACtB,8HAAA,wBAAwB,OAAA;AACxB,4HAAA,sBAAsB,OAAA;AACtB,yHAAA,mBAAmB,OAAA;AAGvB,+CAAkD;AAAzC,gHAAA,gBAAgB,OAAA;AACzB,uCAA2H;AAAlH,4GAAA,gBAAgB,OAAA;AAAE,kHAAA,sBAAsB,OAAA;AAAE,kHAAA,sBAAsB,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,0GAAA,cAAc,OAAA;AACtG,yCAAuC;AAA9B,qGAAA,QAAQ,OAAA;AAEjB,yCAA+D;AAAtD,2GAAA,cAAc,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AACzC,yCAA6C;AAApC,2GAAA,cAAc,OAAA;AACvB,2CAYsB;AAXlB,wGAAA,UAAU,OAAA;AACV,yGAAA,WAAW,OAAA;AACX,6GAAA,eAAe,OAAA;AACf,yGAAA,WAAW,OAAA;AACX,mHAAA,qBAAqB,OAAA;AACrB,2HAAA,6BAA6B,OAAA;AAC7B,+GAAA,iBAAiB,OAAA;AACjB,6GAAA,eAAe,OAAA;AACf,uGAAA,SAAS,OAAA;AACT,uGAAA,SAAS,OAAA;AACT,iHAAA,mBAAmB,OAAA;AAEvB,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,yCAWqB;AAVjB,8GAAA,iBAAiB,OAAA;AACjB,uGAAA,UAAU,OAAA;AACV,uGAAA,UAAU,OAAA;AACV,8GAAA,iBAAiB,OAAA;AACjB,2GAAA,cAAc,OAAA;AACd,0GAAA,aAAa,OAAA;AACb,mHAAA,sBAAsB,OAAA;AACtB,mHAAA,sBAAsB,OAAA;AACtB,gHAAA,mBAAmB,OAAA;AACnB,kHAAA,qBAAqB,OAAA;AAEzB,+DAA8D;AAArD,4HAAA,oBAAoB,OAAA;AAC7B,2DAQ8B;AAP1B,sHAAA,gBAAgB,OAAA;AAChB,qHAAA,eAAe,OAAA;AACf,sHAAA,gBAAgB,OAAA;AAChB,wHAAA,kBAAkB,OAAA;AAClB,yHAAA,mBAAmB,OAAA;AACnB,iHAAA,WAAW,OAAA;AACX,wHAAA,kBAAkB,OAAA;AAEtB,+CAmCwB;AAlCpB,oHAAA,oBAAoB,OAAA;AACpB,kHAAA,kBAAkB,OAAA;AAClB,uHAAA,uBAAuB,OAAA;AACvB,0HAAA,0BAA0B,OAAA;AAC1B,kHAAA,kBAAkB,OAAA;AAClB,mHAAA,mBAAmB,OAAA;AACnB,wHAAA,wBAAwB,OAAA;AACxB,qHAAA,qBAAqB,OAAA;AACrB,mHAAA,mBAAmB,OAAA;AACnB,2HAAA,2BAA2B,OAAA;AAC3B,uHAAA,uBAAuB,OAAA;AACvB,wHAAA,wBAAwB,OAAA;AACxB,kIAAA,kCAAkC,OAAA;AAClC,sHAAA,sBAAsB,OAAA;AACtB,iHAAA,iBAAiB,OAAA;AACjB,8HAAA,8BAA8B,OAAA;AAC9B,4HAAA,4BAA4B,OAAA;AAC5B,+IAAA,+CAA+C,OAAA;AAC/C,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AACb,yHAAA,yBAAyB,OAAA;AACzB,sHAAA,sBAAsB,OAAA;AACtB,wHAAA,wBAAwB,OAAA;AACxB,yHAAA,yBAAyB,OAAA;AACzB,8GAAA,cAAc,OAAA;AACd,6GAAA,aAAa,OAAA;AACb,+GAAA,eAAe,OAAA;AACf,qHAAA,qBAAqB,OAAA;AACrB,mIAAA,mCAAmC,OAAA;AACnC,kIAAA,kCAAkC,OAAA;AAClC,yHAAA,yBAAyB,OAAA;AACzB,4HAAA,4BAA4B,OAAA;AAC5B,wHAAA,wBAAwB,OAAA;AACxB,8GAAA,cAAc,OAAA;AAElB,wFAAwF;AACxF,+CAcwB;AAbpB,kHAAA,kBAAkB,OAAA;AAClB,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,iHAAA,iBAAiB,OAAA;AACjB,mHAAA,mBAAmB,OAAA;AACnB,6GAAA,aAAa,OAAA;AACb,iHAAA,iBAAiB,OAAA;AACjB,sHAAA,sBAAsB,OAAA;AACtB,yHAAA,yBAAyB,OAAA;AACzB,iHAAA,iBAAiB,OAAA;AACjB,4GAAA,YAAY,OAAA;AACZ,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AAErB,yEAGqC;AAFjC,wJAAA,2CAA2C,OAAA;AAC3C,uIAAA,0BAA0B,OAAA;AAG9B,yGAAyG;AACzG,qGAAqG;AACrG,iEAIiC;AAH7B,sIAAA,6BAA6B,OAAA;AAC7B,8HAAA,qBAAqB,OAAA;AACrB,2IAAA,kCAAkC,OAAA;AAiBtC,qEAEmC;AAD/B,iIAAA,sBAAsB,OAAA;AAE1B,mDAmB0B;AAlBtB,gHAAA,cAAc,OAAA;AACd,8GAAA,YAAY,OAAA;AACZ,uHAAA,qBAAqB,OAAA;AACrB,8GAAA,YAAY,OAAA;AACZ,iHAAA,eAAe,OAAA;AACf,8HAAA,4BAA4B,OAAA;AAC5B,oHAAA,kBAAkB,OAAA;AAClB,oHAAA,kBAAkB,OAAA;AAClB,8GAAA,YAAY,OAAA;AACZ,qHAAA,mBAAmB,OAAA;AACnB,qHAAA,mBAAmB,OAAA;AACnB,wHAAA,sBAAsB,OAAA;AACtB,mHAAA,iBAAiB,OAAA;AACjB,mHAAA,iBAAiB,OAAA;AACjB,sHAAA,oBAAoB,OAAA;AACpB,iHAAA,eAAe,OAAA;AACf,iHAAA,eAAe,OAAA;AACf,6GAAA,WAAW,OAAA;AAEf,uDAK4B;AAJxB,uHAAA,mBAAmB,OAAA;AACnB,+GAAA,WAAW,OAAA;AACX,yHAAA,qBAAqB,OAAA;AACrB,kHAAA,cAAc,OAAA;AAGlB,6DAA2D;AAAlD,yHAAA,kBAAkB,OAAA;AAC3B,mEAAwE;AAA/D,sIAAA,4BAA4B,OAAA;AACrC,iEAOiC;AAN7B,oIAAA,2BAA2B,OAAA;AAC3B,yHAAA,gBAAgB,OAAA;AAChB,oHAAA,WAAW,OAAA;AACX,qHAAA,YAAY,OAAA;AACZ,8HAAA,qBAAqB,OAAA;AACrB,gIAAA,uBAAuB,OAAA;AAE3B,2CAMsB;AALlB,8GAAA,gBAAgB,OAAA;AAChB,8GAAA,gBAAgB,OAAA;AAChB,6GAAA,eAAe,OAAA;AACf,8GAAA,gBAAgB,OAAA;AAChB,6GAAA,eAAe,OAAA;AAEnB,6DAS+B;AAR3B,gIAAA,yBAAyB,OAAA;AACzB,uHAAA,gBAAgB,OAAA;AAChB,sHAAA,eAAe,OAAA;AACf,qHAAA,cAAc,OAAA;AACd,uHAAA,gBAAgB,OAAA;AAChB,oHAAA,aAAa,OAAA;AACb,yHAAA,kBAAkB,OAAA;AAClB,yHAAA,kBAAkB,OAAA;AAEtB,yDAQ6B;AAPzB,4HAAA,uBAAuB,OAAA;AACvB,qHAAA,gBAAgB,OAAA;AAChB,uHAAA,kBAAkB,OAAA;AAClB,kHAAA,aAAa,OAAA;AACb,mHAAA,cAAc,OAAA;AACd,2HAAA,sBAAsB,OAAA;AACtB,2HAAA,sBAAsB,OAAA;AAE1B,6CAsBuB;AArBnB,yGAAA,UAAU,OAAA;AACV,wGAAA,SAAS,OAAA;AACT,8GAAA,eAAe,OAAA;AACf,+GAAA,gBAAgB,OAAA;AAChB,sGAAA,OAAO,OAAA;AACP,sGAAA,OAAO,OAAA;AACP,4GAAA,aAAa,OAAA;AACb,sGAAA,OAAO,OAAA;AACP,yGAAA,UAAU,OAAA;AACV,4GAAA,aAAa,OAAA;AACb,4GAAA,aAAa,OAAA;AACb,6GAAA,cAAc,OAAA;AACd,0GAAA,WAAW,OAAA;AACX,+GAAA,gBAAgB,OAAA;AAChB,gHAAA,iBAAiB,OAAA;AACjB,qHAAA,sBAAsB,OAAA;AACtB,gHAAA,iBAAiB,OAAA;AACjB,6GAAA,cAAc,OAAA;AACd,uGAAA,QAAQ,OAAA;AACR,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AAExB,mDAM0B;AALtB,gHAAA,cAAc,OAAA;AACd,oHAAA,kBAAkB,OAAA;AAClB,mHAAA,iBAAiB,OAAA;AACjB,kHAAA,gBAAgB,OAAA;AAChB,0HAAA,wBAAwB,OAAA;AAE5B,uDAqB4B;AApBxB,gHAAA,YAAY,OAAA;AACZ,yHAAA,qBAAqB,OAAA;AACrB,gIAAA,4BAA4B,OAAA;AAC5B,sHAAA,kBAAkB,OAAA;AAClB,oHAAA,gBAAgB,OAAA;AAChB,sHAAA,kBAAkB,OAAA;AAClB,0HAAA,sBAAsB,OAAA;AACtB,uHAAA,mBAAmB,OAAA;AACnB,2HAAA,uBAAuB,OAAA;AACvB,8HAAA,0BAA0B,OAAA;AAC1B,oHAAA,gBAAgB,OAAA;AAChB,qHAAA,iBAAiB,OAAA;AACjB,+GAAA,WAAW,OAAA;AACX,uHAAA,mBAAmB,OAAA;AACnB,0HAAA,sBAAsB,OAAA;AACtB,iHAAA,aAAa,OAAA;AACb,gHAAA,YAAY,OAAA;AACZ,yHAAA,qBAAqB,OAAA;AACrB,4HAAA,wBAAwB,OAAA;AACxB,uHAAA,mBAAmB,OAAA;AAEvB,qDAqB2B;AApBvB,+GAAA,YAAY,OAAA;AACZ,kHAAA,eAAe,OAAA;AACf,oHAAA,iBAAiB,OAAA;AACjB,sHAAA,mBAAmB,OAAA;AACnB,wHAAA,qBAAqB,OAAA;AACrB,iHAAA,cAAc,OAAA;AACd,uHAAA,oBAAoB,OAAA;AACpB,2HAAA,wBAAwB,OAAA;AACxB,kIAAA,+BAA+B,OAAA;AAC/B,gIAAA,6BAA6B,OAAA;AAC7B,4HAAA,yBAAyB,OAAA;AACzB,4HAAA,yBAAyB,OAAA;AACzB,iIAAA,8BAA8B,OAAA;AAC9B,gIAAA,6BAA6B,OAAA;AAC7B,wHAAA,qBAAqB,OAAA;AACrB,0HAAA,uBAAuB,OAAA;AACvB,wHAAA,qBAAqB,OAAA;AACrB,yHAAA,sBAAsB,OAAA;AACtB,0HAAA,uBAAuB,OAAA;AACvB,8HAAA,2BAA2B,OAAA;AAE/B,qDAQ2B;AAPvB,iHAAA,cAAc,OAAA;AACd,gHAAA,aAAa,OAAA;AACb,qHAAA,kBAAkB,OAAA;AAClB,oHAAA,iBAAiB,OAAA;AACjB,0HAAA,uBAAuB,OAAA;AACvB,+HAAA,4BAA4B,OAAA;AAC5B,wHAAA,qBAAqB,OAAA;AAEzB,yCAIqB;AAHjB,qGAAA,QAAQ,OAAA;AACR,iHAAA,oBAAoB,OAAA;AACpB,4GAAA,eAAe,OAAA;AAEnB,6DAG+B;AAF3B,wHAAA,iBAAiB,OAAA;AACjB,8HAAA,uBAAuB,OAAA;AAE3B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,iDAIyB;AAHrB,6GAAA,YAAY,OAAA;AACZ,2GAAA,UAAU,OAAA;AACV,6GAAA,YAAY,OAAA;AAEhB,qDAI2B;AAHvB,iHAAA,cAAc,OAAA;AACd,qHAAA,kBAAkB,OAAA;AAClB,iHAAA,cAAc,OAAA;AAGlB,6DAK+B;AAJ3B,0HAAA,mBAAmB,OAAA;AACnB,wHAAA,iBAAiB,OAAA;AACjB,4HAAA,qBAAqB,OAAA;AACrB,wHAAA,iBAAiB,OAAA;AAErB,qDAK2B;AAJvB,iHAAA,cAAc,OAAA;AACd,sHAAA,mBAAmB,OAAA;AACnB,4HAAA,yBAAyB,OAAA;AACzB,iIAAA,8BAA8B,OAAA","sourcesContent":["export { ResolvedConfig, ResolvedRuleConfig, RuleOptions } from './types';\nexport { InformAiError } from './inform-ai-error';\nexport { RuleFailError, renderRuleFailForAi, renderRuleFailForHuman } from './rule-fail-error';\n// THE one representation of a cure, shared by RuleFailError (build-time) and FixHint (edit-time), plus\n// the one renderer that owns the \"Fix Option N:\" numbering and the \"(preferred)\" tag.\nexport { Option, formatFixOptions } from './fix-option';\nexport { CliExitError } from './cli-exit-error';\nexport { CliUsage, CliFlag, CliArgSet, CliArgsCheck, CliArgs } from './cli-args';\nexport { runMain } from './run-main';\nexport { toError } from './to-error';\nexport { loadAndValidate, LoadedConfig, ConfigLoader } from './load-config';\n// The validation-failure banner: ONE cure (edit the file), plus the marker phrases the validator\n// messages embed rather than re-type.\nexport {\n    formatConfigErrorsBanner,\n    CONFIG_POLICY_DOC,\n    RETIRED_KEY_MARKER,\n    RETIRED_TOP_LEVEL_MARKER,\n    SECTION_PLACEMENT_MARKER,\n} from './config-error-banner';\nexport { findConfigFile, CONFIG_FILENAME, ConfigFile, ConfigParseAttempt, CONFIG_PARSE_ATTEMPTS, CONFIG_PARSE_RETRY_MILLIS } from './config-file';\n// The PARSED-BUT-UNVALIDATED config shape. Exported for readers that walk the file generically rather\n// than through the typed config (the pr-gate active-hatch dashboard section reads every rule's hatches).\nexport type { RawConfigFile } from './config-file';\nexport { RepoRootFinder, INSTRUCT_AI_DIR, INSTRUCT_AI_LEAF } from './repo-root';\n// The scoped `.webpieces` resolver. EVERY reader/writer of `.webpieces/...` goes through one of its two\n// named methods so the call site declares whether the state is repo-wide or worktree-private.\nexport { DotWebpieces, dotWebpieces, GitDirs, WORKTREE_STATE_DIR, LOGS_STATE_DIR } from './state-dir';\nexport { StateDirMigrator, StateMigrationReport } from './state-dir-migration';\n// There is NO machine-global state root. `MachineStateHome`/`StateHome`/`WEBPIECES_STATE_HOME` and the\n// `PrBodyStore` that used them are DELETED: the one artifact that needed a scope above the clone was the\n// gated squash body, and GitHub holds it now (it IS the PR description). Every `.webpieces` path a\n// webpieces tool writes is `{repo}/.webpieces`, resolved through `DotWebpieces` above. See\n// `decisions/0005-the-pr-description-is-the-merge-body.md`.\nexport { AgedTreeSweeper, SweepCount, RETENTION_DAYS } from './aged-tree-sweep';\nexport { ClaudeEnv, claudeEnv, CLAUDE_PROJECT_DIR_ENV, CLAUDE_PROJECT_DIR_UNSET } from './claude-env';\nexport { AtomicFile } from './atomic-file';\n// The ONE formatter for a remedy that must run in a named directory: `cd '<root>' && <command>`.\n// Single-quoted so a repo path containing a space is still runnable (and still un-smuggleable).\nexport { atRoot } from './at-root';\nexport { RulesConfigDesign } from './rules-config-design';\nexport { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './di';\nexport { ExcludePaths, isWebpiecesStateDir } from './exclude-hook-paths';\nexport { isPathExcluded, matchesAnyGlob } from './exclude-paths';\n// THE one `no-custom-css` path exemption. Both engines that enforce the rule (the edit-time hook and the\n// CI validator) consult this class, so `allowGlobs` cannot be honoured by one half and ignored by the other.\nexport { NoCustomCssScope } from './no-custom-css-scope';\nexport { defaultRules, defaultRulesDir } from './default-rules';\nexport { loadTemplate, writeTemplateIfMissing, writeTemplate, TemplateWriter } from './load-template';\n// The instruct-ai docs are delivered as a SET: writing one writes the transitive closure of the docs it\n// links to, so a doc and everything it points at always land together. See instruct-ai-docs.ts.\nexport { GIT_WORKFLOW_DOC, GitWorkflowDoc, InstructAiDoc, InstructAiDocSet, MergeProcessDoc } from './instruct-ai-docs';\nexport { MERGE_PROCESS_DOC, MergeProcessText, MergeRun, ReferenceMergeRun } from './merge-process-doc';\nexport { BUILD_LOG_DOC } from './build-log-doc';\nexport { validateWebpiecesConfig, validatePrGateSection, validateChecklistsSection, validateSectionPlacement, validateExcludePaths, validateMatchRulesSection, allRuleNames, recommendedSeedMode, recommendedSeedModeFor, seedEntryForRule } from './validate-config';\nexport { validateCommandsSection } from './commands-section-validators';\nexport { unknownKeyErrors, isCommentKey, validateTopLevelKeys, COMMENT_KEY_SUFFIX } from './config-key-rules';\n// The retired-key table + the no-back-compat policy it enforces. Exported so the installer can migrate\n// what the errors instruct, and so consumers can enumerate retirements.\nexport { RETIRED_CONFIG_KEYS, RETIRED_SCOPE_KEY, RETIRED_SCOPE_RULE, RetiredConfigKey, isRetiredKey, retiredEntry, retiredKeyError, retiredKeyErrorsIn, retiredRuleFor } from './retired-config-keys';\n// The MECHANICAL cure the unknown-rule error and the banner both name: strip every key no validator has a\n// schema for, so cleanliness is one command rather than a judgement call made while every Bash call is\n// blocked. `PRUNE_UNKNOWN_COMMAND` (constants.ts) is the single spelling of that command.\nexport { ConfigPruner, PruneResult, PrunedKey } from './config-pruner';\nexport { validateChecklistDocs } from './checklist-docs-validator';\n// The OPTIONAL machine-local `~/.webpieces/config.json`: absent (the normal state for every consumer) means\n// each key's declared default, silently; present means STRICT about what it understands and FORWARD-COMPATIBLE\n// about what it does not. A retired key (its own retirement table), a known key of the wrong TYPE and an\n// unparseable document all REJECT; a key this release simply does not recognise is IGNORED with a warning,\n// because the file is machine-global and the repos reading it pin different releases — rejecting a newer\n// release's key would hard-block every repo on the machine that is not yet on it. See home-config.ts.\n// `isHomeConfigPath` is what grants the file its unconditional Write/Edit PASS in the hook guards, which is\n// what keeps a rejection repairable. Every `experimental.*` key is an OPT-IN that defaults OFF, including\n// `whole-repo-build-guard`: ON requires an explicit `true`, and there is no per-key default to export.\nexport {\n    HomeConfig, HomeConfigService, RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS,\n    HOME_CONFIG_DIR, HOME_CONFIG_FILE, HOME_EXPERIMENTAL_SECTION,\n    HOME_KEY_ORPHAN_DIR_SWEEP, HOME_KEY_WHOLE_REPO_BUILD_GUARD, HOME_KEY_MAX_CONCURRENT_BUILDS,\n    DEFAULT_MAX_CONCURRENT_BUILDS,\n} from './home-config';\n// The MACHINE-WIDE build ledger, `~/.webpieces/builds.log`. THE one carve-out from\n// `no-machine-global-state.spec.ts`'s rule that webpieces writes only under `{repo}/.webpieces` — the\n// argument is in `decisions/0006-the-build-ledger-is-machine-global.md`, and the short form is that \"how\n// many builds are burning this box's CPU\" is a fact about the MACHINE, is not a cache of anything a\n// remote owns, and cannot be answered from a per-repo file because every linked worktree has its own\n// `.webpieces/` and would be blind to the sibling it is contending with. See builds-log.ts.\nexport {\n    BuildsLog, BuildTicket, RunningBuild,\n    BUILDS_LOG_FILE, BUILDS_LOCK_FILE, BUILD_START, BUILD_DONE_SUCCESS, BUILD_DONE_FAIL,\n    MAX_BUILDS_LOG_BYTES, BUILDS_LOG_GENERATIONS, MAX_ROW_BYTES,\n} from './builds-log';\n// The orphan-directory sweep: the corpse an `nx g move` leaves on every clone, which git cannot remove\n// because an ignored dist/ or node_modules/ outlives every tracked file under it. See orphan-dir-scan.ts\n// for why the predicate is git's own `clean -Xdn` answer rather than a hand-rolled ignore walk.\nexport { OrphanDirScanner, OrphanCandidate } from './orphan-dir-scan';\nexport {\n    OrphanDirArchiver, ArchivedOrphan, FailedOrphan, OrphanSweepResult, OrphanSweepManifest,\n    TRASH_STATE_DIR, TRASH_MANIFEST_FILE, TRASH_RETENTION_DAYS,\n} from './orphan-dir-archive';\nexport { OrphanDirSweeper, OrphanSweepReport } from './orphan-dir-sweep';\nexport {\n    MatchRuleConfig,\n    MatchRuleViolation,\n    findMatchRuleViolations,\n    isMatchRuleAllowedPath,\n    compileMatchRulePatterns,\n    renderMatchRuleMessage,\n    DEFAULT_MATCH_RULES,\n} from './match-rules-config';\nexport type { ConfigSection } from './sections';\nexport { schemaFieldNames } from './rule-schemas';\nexport { HOOK_GUARD_NAMES, BRANCH_STATE_GUARD_KEY, PR_LIFECYCLE_GUARD_KEY, isHookGuard, sectionForRule } from './sections';\nexport { FieldDef } from './field-def';\nexport type { SchemaShape } from './field-def';\nexport { shouldSkipRule, getCurrentBranch } from './skip-rule';\nexport { SkipRuleResult } from './skip-rule';\nexport {\n    detectBase,\n    resolveBase,\n    getChangedFiles,\n    getFileDiff,\n    getChangedLineNumbers,\n    findNewMethodSignaturesInDiff,\n    hasChangesInRange,\n    isNewOrModified,\n    DiffScope,\n    DiffRange,\n    ChangedFilesOptions,\n} from './diff-scope';\nexport { AbstractRule } from './abstract-rule';\nexport {\n    WEBPIECES_DISABLE,\n    RULE_NAMES,\n    hasDisable,\n    WEBPIECES_TMP_DIR,\n    MERGE_INFO_DIR,\n    PR_REVIEW_DIR,\n    MERGE_IN_PROGRESS_FILE,\n    MERGE_EXPLANATION_FILE,\n    PUSH_DEV_STATE_FILE,\n    PRUNE_UNKNOWN_COMMAND,\n} from './constants';\nexport { WebpiecesRulesConfig } from './WebpiecesRulesConfig';\nexport {\n    SyncFlowGuidance,\n    WP_START_UPDATE,\n    WP_FINISH_UPDATE,\n    WP_START_UPSERT_PR,\n    WP_FINISH_UPSERT_PR,\n    WP_PUSH_DEV,\n    WP_FINISH_PUSH_DEV,\n} from './sync-flow-guidance';\nexport {\n    MaxMethodLinesConfig,\n    MaxFileLinesConfig,\n    RequireReturnTypeConfig,\n    NoInlineTypeLiteralsConfig,\n    NoAnyUnknownConfig,\n    NoImplicitAnyConfig,\n    PrismaValidateDtosConfig,\n    PrismaConverterConfig,\n    NoDestructureConfig,\n    NoUnmanagedExceptionsConfig,\n    CatchErrorPatternConfig,\n    ThrowCauseRequiredConfig,\n    AngularNoDirectApiInResolverConfig,\n    NoSymbolDiTokensConfig,\n    NoCustomCssConfig,\n    NoProcessExitOutsideMainConfig,\n    NoFunctionOutsideClassConfig,\n    InjectAnnotationNotNeededForConcreteClassConfig,\n    FrameworkTagConfig,\n    RoleTagConfig,\n    BranchCreationGuardConfig,\n    PrLifecycleGuardConfig,\n    NoFileImportCyclesConfig,\n    RuntimeArchitectureConfig,\n    NxWiringConfig,\n    DiGraphConfig,\n    NoJsFilesConfig,\n    ValidateTsInSrcConfig,\n    ValidateArchitectureUnchangedConfig,\n    ValidateNoArchitectureCyclesConfig,\n    ValidatePackageJsonConfig,\n    ValidateVersionsLockedConfig,\n    ValidateEslintSyncConfig,\n    BaseRuleConfig,\n} from './rule-configs';\n// Mode unions + their value arrays — the single source of truth shared with code-rules.\nexport {\n    METHOD_LIMIT_MODES,\n    FILE_LIMIT_MODES,\n    RETURN_TYPE_MODES,\n    INLINE_TYPE_MODES,\n    MODIFIED_CODE_MODES,\n    PROJECT_MODES,\n    PRISMA_DTOS_MODES,\n    PRISMA_CONVERTER_MODES,\n    DIRECT_API_RESOLVER_MODES,\n    THROW_CAUSE_MODES,\n    ON_OFF_MODES,\n    STRUCTURAL_MODES,\n    VALIDATE_TS_MODES,\n} from './rule-configs';\nexport {\n    NoClientCreationOutsideServerOrClientConfig,\n    CLIENT_CREATION_SEVERITIES,\n} from './no-client-creation-config';\nexport type { ClientCreationSeverity } from './no-client-creation-config';\n// The `no-state-paths-in-templates` config, in its own module for the same reason no-client-creation is:\n// rule-configs.ts is at its file-size cap and a rule that carries real defaults belongs beside them.\nexport {\n    NoStatePathsInTemplatesConfig,\n    DEFAULT_TEMPLATE_DIRS,\n    DEFAULT_BANNED_STATE_PATH_PREFIXES,\n} from './no-state-paths-config';\nexport type {\n    MethodLimitMode,\n    FileLimitMode,\n    ReturnTypeMode,\n    InlineTypeMode,\n    ModifiedCodeMode,\n    ProjectMode,\n    PrismaValidateDtosMode,\n    PrismaConverterMode,\n    DirectApiResolverMode,\n    ThrowCauseMode,\n    OnOffMode,\n    StructuralMode,\n    ValidateTsMode,\n} from './rule-configs';\nexport {\n    BranchStateGuardConfig,\n} from './main-sync-guard-configs';\nexport {\n    GateDefinition,\n    PrGateConfig,\n    DEFAULT_BUILD_COMMAND,\n    LandPrConfig,\n    DevDeployConfig,\n    DEFAULT_DEV_BRANCH_NAMESPACE,\n    DEFAULT_DEV_BRANCH,\n    ReviewContextEntry,\n    defaultGates,\n    defaultPrGateConfig,\n    defaultLandPrConfig,\n    defaultDevDeployConfig,\n    buildPrGateConfig,\n    buildLandPrConfig,\n    buildDevDeployConfig,\n    MERGE_MODE_AUTO,\n    MERGE_MODE_NONE,\n    MERGE_MODES,\n} from './pr-gate-config';\nexport {\n    ChecklistDefinition,\n    toChecklist,\n    normalizeChecklistDoc,\n    formatFileList,\n} from './checklist-config';\nexport type { RawChecklistItem } from './checklist-config';\nexport { ChecklistValidator } from './checklist-validator';\nexport { ChecklistInstructionsService } from './checklist-instructions';\nexport {\n    ReviewerInstructionsService,\n    ReviewerBriefing,\n    BriefedFile,\n    ContextEntry,\n    READ_TRUNCATION_LINES,\n    ALL_DIFF_ONE_READ_LINES,\n} from './reviewer-instructions';\nexport {\n    GateTokenService,\n    computeGateToken,\n    gateTokenMarker,\n    extractGateToken,\n    verifyGateToken,\n} from './gate-token';\nexport {\n    SubagentProvenanceService,\n    ReviewerEvidence,\n    ReviewerContext,\n    TranscriptScan,\n    ProvenanceResult,\n    PROVENANCE_OK,\n    PROVENANCE_MISSING,\n    PROVENANCE_SKIPPED,\n} from './subagent-provenance';\nexport {\n    ReviewProvenanceService,\n    ReviewProvenance,\n    ReviewerTranscript,\n    ReviewerPaths,\n    OfferedContext,\n    ProvenanceWriteRequest,\n    DEFAULT_RETENTION_DAYS,\n} from './review-provenance';\nexport {\n    ReviewJson,\n    PrContext,\n    ChecklistResult,\n    ChecklistVerdict,\n    CK_PASS,\n    CK_WARN,\n    CK_OVERRIDDEN,\n    CK_FAIL,\n    CK_MISSING,\n    CK_BAD_FORMAT,\n    VERDICT_GREEN,\n    VERDICT_YELLOW,\n    VERDICT_RED,\n    VERDICT_STATUSES,\n    RequiredChecklist,\n    ChecklistReviewContext,\n    ReviewJsonService,\n    loadReviewJson,\n    prDirFor,\n    reviewJsonPath,\n    reviewJsonSchemaHint,\n} from './review-json';\nexport {\n    MainSyncStatus,\n    MainSyncStatusFile,\n    MainSyncFileStore,\n    PullRequestIndex,\n    MAIN_SYNC_STATUS_VERSION,\n} from './main-sync-file';\nexport {\n    MainSyncLock,\n    MainSyncStatusService,\n    DEFAULT_HANG_TIMEOUT_MINUTES,\n    mainSyncStatusPath,\n    mainSyncLockPath,\n    readMainSyncStatus,\n    readMainSyncStatusFile,\n    writeMainSyncStatus,\n    writeMainSyncStatusFile,\n    computeAllMainSyncStatuses,\n    readMainSyncLock,\n    writeMainSyncLock,\n    isLockStale,\n    isRefreshInProgress,\n    tryAcquireMainSyncLock,\n    inProcessLock,\n    finishedLock,\n    computeMainSyncStatus,\n    stampCleanMainSyncStatus,\n    squashRecoverySteps,\n} from './main-sync-status';\nexport {\n    MergedBranch,\n    DeletableBranch,\n    DeletableWorktree,\n    MergedBranchesCache,\n    MergedBranchesService,\n    CacheFreshness,\n    CACHE_STALE_AFTER_MS,\n    CLASSIFICATION_MERGED_PR,\n    CLASSIFICATION_BACKUP_OF_MERGED,\n    CLASSIFICATION_BACKUP_OF_LIVE,\n    CLASSIFICATION_NO_COMMITS,\n    CLASSIFICATION_SUPERSEDED,\n    CLASSIFICATION_CONTENT_IN_MAIN,\n    CLASSIFICATION_NEVER_PROPOSED,\n    CLASSIFICATION_IN_USE,\n    CLASSIFICATION_PRUNABLE,\n    CLASSIFICATION_LOCKED,\n    CLASSIFICATION_CURRENT,\n    CLASSIFICATION_DETACHED,\n    ADJUDICATED_CLASSIFICATIONS,\n} from './merged-branches';\nexport {\n    BranchArchiver,\n    ArchiveResult,\n    ARCHIVE_TAG_PREFIX,\n    BRANCH_RETENTIONS,\n    BRANCH_RETENTION_DELETE,\n    BRANCH_RETENTION_ARCHIVE_TAG,\n    BRANCH_RETENTION_KEEP,\n} from './branch-archiver';\nexport {\n    Worktree,\n    WorktreeWorkInFlight,\n    WorktreeService,\n} from './worktrees';\nexport {\n    AgentWorktreeLock,\n    AgentWorktreeLockReader,\n} from './agent-worktree-lock';\nexport { WorktreeLockVerdicts } from './worktree-lock-verdicts';\nexport {\n    ReapedBranch,\n    ReapResult,\n    BranchReaper,\n} from './branch-reaper';\nexport {\n    ReapedWorktree,\n    WorktreeReapResult,\n    WorktreeReaper,\n} from './worktree-reaper';\nexport type { MutationVerb, MutationPhase } from './branch-mutation-log';\nexport {\n    BranchMutationEvent,\n    BranchMutationLog,\n    branchMutationLogPath,\n    logBranchMutation,\n} from './branch-mutation-log';\nexport {\n    CommandsConfig,\n    buildCommandsConfig,\n    DEFAULT_UPSERT_PR_COMMAND,\n    DEFAULT_MERGE_COMPLETE_COMMAND,\n} from './commands-config';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/tooling/rules-config/src/index.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,iCAA0E;AAAjE,uGAAA,cAAc,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAC3C,qDAAkD;AAAzC,gHAAA,aAAa,OAAA;AACtB,qDAA+F;AAAtF,gHAAA,aAAa,OAAA;AAAE,sHAAA,mBAAmB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AACnE,uGAAuG;AACvG,sFAAsF;AACtF,2CAAwD;AAA/C,oGAAA,MAAM,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AACjC,mDAAgD;AAAvC,8GAAA,YAAY,OAAA;AACrB,uCAAiF;AAAxE,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAAE,qGAAA,SAAS,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,mGAAA,OAAO,OAAA;AAC5D,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,6CAA4E;AAAnE,8GAAA,eAAe,OAAA;AAAE,2GAAA,YAAY,OAAA;AAAE,2GAAA,YAAY,OAAA;AACpD,iGAAiG;AACjG,sCAAsC;AACtC,6DAM+B;AAL3B,+HAAA,wBAAwB,OAAA;AACxB,wHAAA,iBAAiB,OAAA;AACjB,yHAAA,kBAAkB,OAAA;AAClB,+HAAA,wBAAwB,OAAA;AACxB,+HAAA,wBAAwB,OAAA;AAE5B,6CAAkJ;AAAzI,6GAAA,cAAc,OAAA;AAAE,8GAAA,eAAe,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAAE,oHAAA,qBAAqB,OAAA;AAAE,wHAAA,yBAAyB,OAAA;AAI1H,yCAAgF;AAAvE,2GAAA,cAAc,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAC1D,wGAAwG;AACxG,8FAA8F;AAC9F,yCAAsG;AAA7F,yGAAA,YAAY,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,oGAAA,OAAO,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAAE,2GAAA,cAAc,OAAA;AAChF,6DAA+E;AAAtE,uHAAA,gBAAgB,OAAA;AAAE,2HAAA,oBAAoB,OAAA;AAC/C,uGAAuG;AACvG,yGAAyG;AACzG,mGAAmG;AACnG,2FAA2F;AAC3F,4DAA4D;AAC5D,qDAAgF;AAAvE,kHAAA,eAAe,OAAA;AAAE,6GAAA,UAAU,OAAA;AAAE,iHAAA,cAAc,OAAA;AACpD,2CAAsG;AAA7F,uGAAA,SAAS,OAAA;AAAE,uGAAA,SAAS,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,sHAAA,wBAAwB,OAAA;AAC/E,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,iGAAiG;AACjG,gGAAgG;AAChG,qCAAmC;AAA1B,iGAAA,MAAM,OAAA;AACf,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,2BAA8E;AAArE,oGAAA,cAAc,OAAA;AAAE,sGAAA,gBAAgB,OAAA;AAAE,0GAAA,oBAAoB,OAAA;AAC/D,2DAAyE;AAAhE,kHAAA,YAAY,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AAC1C,iDAAiE;AAAxD,+GAAA,cAAc,OAAA;AAAE,+GAAA,cAAc,OAAA;AACvC,yGAAyG;AACzG,6GAA6G;AAC7G,6DAAyD;AAAhD,uHAAA,gBAAgB,OAAA;AACzB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,iDAAsG;AAA7F,6GAAA,YAAY,OAAA;AAAE,uHAAA,sBAAsB,OAAA;AAAE,8GAAA,aAAa,OAAA;AAAE,+GAAA,cAAc,OAAA;AAC5E,wGAAwG;AACxG,gGAAgG;AAChG,uDAAwH;AAA/G,oHAAA,gBAAgB,OAAA;AAAE,kHAAA,cAAc,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,oHAAA,gBAAgB,OAAA;AAAE,mHAAA,eAAe,OAAA;AAC3F,yDAAuG;AAA9F,sHAAA,iBAAiB,OAAA;AAAE,qHAAA,gBAAgB,OAAA;AAAE,6GAAA,QAAQ,OAAA;AAAE,sHAAA,iBAAiB,OAAA;AACzE,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AACtB,qDAAsQ;AAA7P,0HAAA,uBAAuB,OAAA;AAAE,wHAAA,qBAAqB,OAAA;AAAE,4HAAA,yBAAyB,OAAA;AAAE,2HAAA,wBAAwB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAAE,4HAAA,yBAAyB,OAAA;AAAE,+GAAA,YAAY,OAAA;AAAE,sHAAA,mBAAmB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AAC1O,6EAAwE;AAA/D,sIAAA,uBAAuB,OAAA;AAChC,uDAA8G;AAArG,oHAAA,gBAAgB,OAAA;AAAE,gHAAA,YAAY,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AAAE,sHAAA,kBAAkB,OAAA;AACjF,uGAAuG;AACvG,wEAAwE;AACxE,6DAAsM;AAA7L,0HAAA,mBAAmB,OAAA;AAAE,wHAAA,iBAAiB,OAAA;AAAE,yHAAA,kBAAkB,OAAA;AAAE,uHAAA,gBAAgB,OAAA;AAAE,mHAAA,YAAY,OAAA;AAAE,mHAAA,YAAY,OAAA;AAAE,sHAAA,eAAe,OAAA;AAAE,yHAAA,kBAAkB,OAAA;AAAE,qHAAA,cAAc,OAAA;AACtK,0GAA0G;AAC1G,uGAAuG;AACvG,0FAA0F;AAC1F,iDAAuE;AAA9D,6GAAA,YAAY,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,0GAAA,SAAS,OAAA;AAC7C,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,4GAA4G;AAC5G,+GAA+G;AAC/G,yGAAyG;AACzG,2GAA2G;AAC3G,yGAAyG;AACzG,sGAAsG;AACtG,4GAA4G;AAC5G,0GAA0G;AAC1G,uGAAuG;AACvG,6CAMuB;AALnB,yGAAA,UAAU,OAAA;AAAE,gHAAA,iBAAiB,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAAE,uHAAA,wBAAwB,OAAA;AAC7E,8GAAA,eAAe,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAAE,wHAAA,yBAAyB,OAAA;AAC5D,wHAAA,yBAAyB,OAAA;AAAE,8HAAA,+BAA+B,OAAA;AAAE,6HAAA,8BAA8B,OAAA;AAC1F,4HAAA,6BAA6B,OAAA;AAC7B,2GAAA,YAAY,OAAA;AAAE,8GAAA,eAAe,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAErD,mFAAmF;AACnF,sGAAsG;AACtG,yGAAyG;AACzG,oGAAoG;AACpG,qGAAqG;AACrG,4FAA4F;AAC5F,2CAIsB;AAHlB,uGAAA,SAAS,OAAA;AAAE,yGAAA,WAAW,OAAA;AAAE,0GAAA,YAAY,OAAA;AACpC,6GAAA,eAAe,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAAE,yGAAA,WAAW,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,6GAAA,eAAe,OAAA;AACnF,kHAAA,oBAAoB,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,2GAAA,aAAa,OAAA;AAE/D,uGAAuG;AACvG,yGAAyG;AACzG,gGAAgG;AAChG,qDAAsE;AAA7D,mHAAA,gBAAgB,OAAA;AAAE,kHAAA,eAAe,OAAA;AAC1C,2DAG8B;AAF1B,uHAAA,iBAAiB,OAAA;AAAE,oHAAA,cAAc,OAAA;AAAE,kHAAA,YAAY,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AACvF,qHAAA,eAAe,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AAAE,0HAAA,oBAAoB,OAAA;AAE9D,uDAAyE;AAAhE,oHAAA,gBAAgB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAC5C,2DAQ8B;AAP1B,qHAAA,eAAe,OAAA;AACf,wHAAA,kBAAkB,OAAA;AAClB,6HAAA,uBAAuB,OAAA;AACvB,4HAAA,sBAAsB,OAAA;AACtB,8HAAA,wBAAwB,OAAA;AACxB,4HAAA,sBAAsB,OAAA;AACtB,yHAAA,mBAAmB,OAAA;AAGvB,+CAAkD;AAAzC,gHAAA,gBAAgB,OAAA;AACzB,uCAA2H;AAAlH,4GAAA,gBAAgB,OAAA;AAAE,kHAAA,sBAAsB,OAAA;AAAE,kHAAA,sBAAsB,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,0GAAA,cAAc,OAAA;AACtG,yCAAuC;AAA9B,qGAAA,QAAQ,OAAA;AAEjB,yCAA+D;AAAtD,2GAAA,cAAc,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AACzC,yCAA6C;AAApC,2GAAA,cAAc,OAAA;AACvB,2CAYsB;AAXlB,wGAAA,UAAU,OAAA;AACV,yGAAA,WAAW,OAAA;AACX,6GAAA,eAAe,OAAA;AACf,yGAAA,WAAW,OAAA;AACX,mHAAA,qBAAqB,OAAA;AACrB,2HAAA,6BAA6B,OAAA;AAC7B,+GAAA,iBAAiB,OAAA;AACjB,6GAAA,eAAe,OAAA;AACf,uGAAA,SAAS,OAAA;AACT,uGAAA,SAAS,OAAA;AACT,iHAAA,mBAAmB,OAAA;AAEvB,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,yCAWqB;AAVjB,8GAAA,iBAAiB,OAAA;AACjB,uGAAA,UAAU,OAAA;AACV,uGAAA,UAAU,OAAA;AACV,8GAAA,iBAAiB,OAAA;AACjB,2GAAA,cAAc,OAAA;AACd,0GAAA,aAAa,OAAA;AACb,mHAAA,sBAAsB,OAAA;AACtB,mHAAA,sBAAsB,OAAA;AACtB,gHAAA,mBAAmB,OAAA;AACnB,kHAAA,qBAAqB,OAAA;AAEzB,+DAA8D;AAArD,4HAAA,oBAAoB,OAAA;AAC7B,2DAQ8B;AAP1B,sHAAA,gBAAgB,OAAA;AAChB,qHAAA,eAAe,OAAA;AACf,sHAAA,gBAAgB,OAAA;AAChB,wHAAA,kBAAkB,OAAA;AAClB,yHAAA,mBAAmB,OAAA;AACnB,iHAAA,WAAW,OAAA;AACX,wHAAA,kBAAkB,OAAA;AAEtB,+CAmCwB;AAlCpB,oHAAA,oBAAoB,OAAA;AACpB,kHAAA,kBAAkB,OAAA;AAClB,uHAAA,uBAAuB,OAAA;AACvB,0HAAA,0BAA0B,OAAA;AAC1B,kHAAA,kBAAkB,OAAA;AAClB,mHAAA,mBAAmB,OAAA;AACnB,wHAAA,wBAAwB,OAAA;AACxB,qHAAA,qBAAqB,OAAA;AACrB,mHAAA,mBAAmB,OAAA;AACnB,2HAAA,2BAA2B,OAAA;AAC3B,uHAAA,uBAAuB,OAAA;AACvB,wHAAA,wBAAwB,OAAA;AACxB,kIAAA,kCAAkC,OAAA;AAClC,sHAAA,sBAAsB,OAAA;AACtB,iHAAA,iBAAiB,OAAA;AACjB,8HAAA,8BAA8B,OAAA;AAC9B,4HAAA,4BAA4B,OAAA;AAC5B,+IAAA,+CAA+C,OAAA;AAC/C,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AACb,yHAAA,yBAAyB,OAAA;AACzB,sHAAA,sBAAsB,OAAA;AACtB,wHAAA,wBAAwB,OAAA;AACxB,yHAAA,yBAAyB,OAAA;AACzB,8GAAA,cAAc,OAAA;AACd,6GAAA,aAAa,OAAA;AACb,+GAAA,eAAe,OAAA;AACf,qHAAA,qBAAqB,OAAA;AACrB,mIAAA,mCAAmC,OAAA;AACnC,kIAAA,kCAAkC,OAAA;AAClC,yHAAA,yBAAyB,OAAA;AACzB,4HAAA,4BAA4B,OAAA;AAC5B,wHAAA,wBAAwB,OAAA;AACxB,8GAAA,cAAc,OAAA;AAElB,wFAAwF;AACxF,+CAcwB;AAbpB,kHAAA,kBAAkB,OAAA;AAClB,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,iHAAA,iBAAiB,OAAA;AACjB,mHAAA,mBAAmB,OAAA;AACnB,6GAAA,aAAa,OAAA;AACb,iHAAA,iBAAiB,OAAA;AACjB,sHAAA,sBAAsB,OAAA;AACtB,yHAAA,yBAAyB,OAAA;AACzB,iHAAA,iBAAiB,OAAA;AACjB,4GAAA,YAAY,OAAA;AACZ,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AAErB,yEAGqC;AAFjC,wJAAA,2CAA2C,OAAA;AAC3C,uIAAA,0BAA0B,OAAA;AAG9B,yGAAyG;AACzG,qGAAqG;AACrG,iEAIiC;AAH7B,sIAAA,6BAA6B,OAAA;AAC7B,8HAAA,qBAAqB,OAAA;AACrB,2IAAA,kCAAkC,OAAA;AAiBtC,qEAEmC;AAD/B,iIAAA,sBAAsB,OAAA;AAE1B,mDAmB0B;AAlBtB,gHAAA,cAAc,OAAA;AACd,8GAAA,YAAY,OAAA;AACZ,uHAAA,qBAAqB,OAAA;AACrB,8GAAA,YAAY,OAAA;AACZ,iHAAA,eAAe,OAAA;AACf,8HAAA,4BAA4B,OAAA;AAC5B,oHAAA,kBAAkB,OAAA;AAClB,oHAAA,kBAAkB,OAAA;AAClB,8GAAA,YAAY,OAAA;AACZ,qHAAA,mBAAmB,OAAA;AACnB,qHAAA,mBAAmB,OAAA;AACnB,wHAAA,sBAAsB,OAAA;AACtB,mHAAA,iBAAiB,OAAA;AACjB,mHAAA,iBAAiB,OAAA;AACjB,sHAAA,oBAAoB,OAAA;AACpB,iHAAA,eAAe,OAAA;AACf,iHAAA,eAAe,OAAA;AACf,6GAAA,WAAW,OAAA;AAEf,uDAK4B;AAJxB,uHAAA,mBAAmB,OAAA;AACnB,+GAAA,WAAW,OAAA;AACX,yHAAA,qBAAqB,OAAA;AACrB,kHAAA,cAAc,OAAA;AAGlB,6DAA2D;AAAlD,yHAAA,kBAAkB,OAAA;AAC3B,mEAAwE;AAA/D,sIAAA,4BAA4B,OAAA;AACrC,iEAOiC;AAN7B,oIAAA,2BAA2B,OAAA;AAC3B,yHAAA,gBAAgB,OAAA;AAChB,oHAAA,WAAW,OAAA;AACX,qHAAA,YAAY,OAAA;AACZ,8HAAA,qBAAqB,OAAA;AACrB,gIAAA,uBAAuB,OAAA;AAE3B,2CAMsB;AALlB,8GAAA,gBAAgB,OAAA;AAChB,8GAAA,gBAAgB,OAAA;AAChB,6GAAA,eAAe,OAAA;AACf,8GAAA,gBAAgB,OAAA;AAChB,6GAAA,eAAe,OAAA;AAEnB,6DAS+B;AAR3B,gIAAA,yBAAyB,OAAA;AACzB,uHAAA,gBAAgB,OAAA;AAChB,sHAAA,eAAe,OAAA;AACf,qHAAA,cAAc,OAAA;AACd,uHAAA,gBAAgB,OAAA;AAChB,oHAAA,aAAa,OAAA;AACb,yHAAA,kBAAkB,OAAA;AAClB,yHAAA,kBAAkB,OAAA;AAEtB,yDAQ6B;AAPzB,4HAAA,uBAAuB,OAAA;AACvB,qHAAA,gBAAgB,OAAA;AAChB,uHAAA,kBAAkB,OAAA;AAClB,kHAAA,aAAa,OAAA;AACb,mHAAA,cAAc,OAAA;AACd,2HAAA,sBAAsB,OAAA;AACtB,2HAAA,sBAAsB,OAAA;AAE1B,6CAsBuB;AArBnB,yGAAA,UAAU,OAAA;AACV,wGAAA,SAAS,OAAA;AACT,8GAAA,eAAe,OAAA;AACf,+GAAA,gBAAgB,OAAA;AAChB,sGAAA,OAAO,OAAA;AACP,sGAAA,OAAO,OAAA;AACP,4GAAA,aAAa,OAAA;AACb,sGAAA,OAAO,OAAA;AACP,yGAAA,UAAU,OAAA;AACV,4GAAA,aAAa,OAAA;AACb,4GAAA,aAAa,OAAA;AACb,6GAAA,cAAc,OAAA;AACd,0GAAA,WAAW,OAAA;AACX,+GAAA,gBAAgB,OAAA;AAChB,gHAAA,iBAAiB,OAAA;AACjB,qHAAA,sBAAsB,OAAA;AACtB,gHAAA,iBAAiB,OAAA;AACjB,6GAAA,cAAc,OAAA;AACd,uGAAA,QAAQ,OAAA;AACR,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AAExB,mDAM0B;AALtB,gHAAA,cAAc,OAAA;AACd,oHAAA,kBAAkB,OAAA;AAClB,mHAAA,iBAAiB,OAAA;AACjB,kHAAA,gBAAgB,OAAA;AAChB,0HAAA,wBAAwB,OAAA;AAE5B,uDAqB4B;AApBxB,gHAAA,YAAY,OAAA;AACZ,yHAAA,qBAAqB,OAAA;AACrB,gIAAA,4BAA4B,OAAA;AAC5B,sHAAA,kBAAkB,OAAA;AAClB,oHAAA,gBAAgB,OAAA;AAChB,sHAAA,kBAAkB,OAAA;AAClB,0HAAA,sBAAsB,OAAA;AACtB,uHAAA,mBAAmB,OAAA;AACnB,2HAAA,uBAAuB,OAAA;AACvB,8HAAA,0BAA0B,OAAA;AAC1B,oHAAA,gBAAgB,OAAA;AAChB,qHAAA,iBAAiB,OAAA;AACjB,+GAAA,WAAW,OAAA;AACX,uHAAA,mBAAmB,OAAA;AACnB,0HAAA,sBAAsB,OAAA;AACtB,iHAAA,aAAa,OAAA;AACb,gHAAA,YAAY,OAAA;AACZ,yHAAA,qBAAqB,OAAA;AACrB,4HAAA,wBAAwB,OAAA;AACxB,uHAAA,mBAAmB,OAAA;AAEvB,qDAqB2B;AApBvB,+GAAA,YAAY,OAAA;AACZ,kHAAA,eAAe,OAAA;AACf,oHAAA,iBAAiB,OAAA;AACjB,sHAAA,mBAAmB,OAAA;AACnB,wHAAA,qBAAqB,OAAA;AACrB,iHAAA,cAAc,OAAA;AACd,uHAAA,oBAAoB,OAAA;AACpB,2HAAA,wBAAwB,OAAA;AACxB,kIAAA,+BAA+B,OAAA;AAC/B,gIAAA,6BAA6B,OAAA;AAC7B,4HAAA,yBAAyB,OAAA;AACzB,4HAAA,yBAAyB,OAAA;AACzB,iIAAA,8BAA8B,OAAA;AAC9B,gIAAA,6BAA6B,OAAA;AAC7B,wHAAA,qBAAqB,OAAA;AACrB,0HAAA,uBAAuB,OAAA;AACvB,wHAAA,qBAAqB,OAAA;AACrB,yHAAA,sBAAsB,OAAA;AACtB,0HAAA,uBAAuB,OAAA;AACvB,8HAAA,2BAA2B,OAAA;AAE/B,qDAQ2B;AAPvB,iHAAA,cAAc,OAAA;AACd,gHAAA,aAAa,OAAA;AACb,qHAAA,kBAAkB,OAAA;AAClB,oHAAA,iBAAiB,OAAA;AACjB,0HAAA,uBAAuB,OAAA;AACvB,+HAAA,4BAA4B,OAAA;AAC5B,wHAAA,qBAAqB,OAAA;AAEzB,yCAIqB;AAHjB,qGAAA,QAAQ,OAAA;AACR,iHAAA,oBAAoB,OAAA;AACpB,4GAAA,eAAe,OAAA;AAEnB,6DAG+B;AAF3B,wHAAA,iBAAiB,OAAA;AACjB,8HAAA,uBAAuB,OAAA;AAE3B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,iDAIyB;AAHrB,6GAAA,YAAY,OAAA;AACZ,2GAAA,UAAU,OAAA;AACV,6GAAA,YAAY,OAAA;AAEhB,qDAI2B;AAHvB,iHAAA,cAAc,OAAA;AACd,qHAAA,kBAAkB,OAAA;AAClB,iHAAA,cAAc,OAAA;AAGlB,6DAK+B;AAJ3B,0HAAA,mBAAmB,OAAA;AACnB,wHAAA,iBAAiB,OAAA;AACjB,4HAAA,qBAAqB,OAAA;AACrB,wHAAA,iBAAiB,OAAA;AAErB,qDAK2B;AAJvB,iHAAA,cAAc,OAAA;AACd,sHAAA,mBAAmB,OAAA;AACnB,4HAAA,yBAAyB,OAAA;AACzB,iIAAA,8BAA8B,OAAA","sourcesContent":["export { ResolvedConfig, ResolvedRuleConfig, RuleOptions } from './types';\nexport { InformAiError } from './inform-ai-error';\nexport { RuleFailError, renderRuleFailForAi, renderRuleFailForHuman } from './rule-fail-error';\n// THE one representation of a cure, shared by RuleFailError (build-time) and FixHint (edit-time), plus\n// the one renderer that owns the \"Fix Option N:\" numbering and the \"(preferred)\" tag.\nexport { Option, formatFixOptions } from './fix-option';\nexport { CliExitError } from './cli-exit-error';\nexport { CliUsage, CliFlag, CliArgSet, CliArgsCheck, CliArgs } from './cli-args';\nexport { runMain } from './run-main';\nexport { toError } from './to-error';\nexport { loadAndValidate, LoadedConfig, ConfigLoader } from './load-config';\n// The validation-failure banner: ONE cure (edit the file), plus the marker phrases the validator\n// messages embed rather than re-type.\nexport {\n    formatConfigErrorsBanner,\n    CONFIG_POLICY_DOC,\n    RETIRED_KEY_MARKER,\n    RETIRED_TOP_LEVEL_MARKER,\n    SECTION_PLACEMENT_MARKER,\n} from './config-error-banner';\nexport { findConfigFile, CONFIG_FILENAME, ConfigFile, ConfigParseAttempt, CONFIG_PARSE_ATTEMPTS, CONFIG_PARSE_RETRY_MILLIS } from './config-file';\n// The PARSED-BUT-UNVALIDATED config shape. Exported for readers that walk the file generically rather\n// than through the typed config (the pr-gate active-hatch dashboard section reads every rule's hatches).\nexport type { RawConfigFile } from './config-file';\nexport { RepoRootFinder, INSTRUCT_AI_DIR, INSTRUCT_AI_LEAF } from './repo-root';\n// The scoped `.webpieces` resolver. EVERY reader/writer of `.webpieces/...` goes through one of its two\n// named methods so the call site declares whether the state is repo-wide or worktree-private.\nexport { DotWebpieces, dotWebpieces, GitDirs, WORKTREE_STATE_DIR, LOGS_STATE_DIR } from './state-dir';\nexport { StateDirMigrator, StateMigrationReport } from './state-dir-migration';\n// There is NO machine-global state root. `MachineStateHome`/`StateHome`/`WEBPIECES_STATE_HOME` and the\n// `PrBodyStore` that used them are DELETED: the one artifact that needed a scope above the clone was the\n// gated squash body, and GitHub holds it now (it IS the PR description). Every `.webpieces` path a\n// webpieces tool writes is `{repo}/.webpieces`, resolved through `DotWebpieces` above. See\n// `decisions/0005-the-pr-description-is-the-merge-body.md`.\nexport { AgedTreeSweeper, SweepCount, RETENTION_DAYS } from './aged-tree-sweep';\nexport { ClaudeEnv, claudeEnv, CLAUDE_PROJECT_DIR_ENV, CLAUDE_PROJECT_DIR_UNSET } from './claude-env';\nexport { AtomicFile } from './atomic-file';\n// The ONE formatter for a remedy that must run in a named directory: `cd '<root>' && <command>`.\n// Single-quoted so a repo path containing a space is still runnable (and still un-smuggleable).\nexport { atRoot } from './at-root';\nexport { RulesConfigDesign } from './rules-config-design';\nexport { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './di';\nexport { ExcludePaths, isWebpiecesStateDir } from './exclude-hook-paths';\nexport { isPathExcluded, matchesAnyGlob } from './exclude-paths';\n// THE one `no-custom-css` path exemption. Both engines that enforce the rule (the edit-time hook and the\n// CI validator) consult this class, so `allowGlobs` cannot be honoured by one half and ignored by the other.\nexport { NoCustomCssScope } from './no-custom-css-scope';\nexport { defaultRules, defaultRulesDir } from './default-rules';\nexport { loadTemplate, writeTemplateIfMissing, writeTemplate, TemplateWriter } from './load-template';\n// The instruct-ai docs are delivered as a SET: writing one writes the transitive closure of the docs it\n// links to, so a doc and everything it points at always land together. See instruct-ai-docs.ts.\nexport { GIT_WORKFLOW_DOC, GitWorkflowDoc, InstructAiDoc, InstructAiDocSet, MergeProcessDoc } from './instruct-ai-docs';\nexport { MERGE_PROCESS_DOC, MergeProcessText, MergeRun, ReferenceMergeRun } from './merge-process-doc';\nexport { BUILD_LOG_DOC } from './build-log-doc';\nexport { validateWebpiecesConfig, validatePrGateSection, validateChecklistsSection, validateSectionPlacement, validateExcludePaths, validateMatchRulesSection, allRuleNames, recommendedSeedMode, recommendedSeedModeFor, seedEntryForRule } from './validate-config';\nexport { validateCommandsSection } from './commands-section-validators';\nexport { unknownKeyErrors, isCommentKey, validateTopLevelKeys, COMMENT_KEY_SUFFIX } from './config-key-rules';\n// The retired-key table + the no-back-compat policy it enforces. Exported so the installer can migrate\n// what the errors instruct, and so consumers can enumerate retirements.\nexport { RETIRED_CONFIG_KEYS, RETIRED_SCOPE_KEY, RETIRED_SCOPE_RULE, RetiredConfigKey, isRetiredKey, retiredEntry, retiredKeyError, retiredKeyErrorsIn, retiredRuleFor } from './retired-config-keys';\n// The MECHANICAL cure the unknown-rule error and the banner both name: strip every key no validator has a\n// schema for, so cleanliness is one command rather than a judgement call made while every Bash call is\n// blocked. `PRUNE_UNKNOWN_COMMAND` (constants.ts) is the single spelling of that command.\nexport { ConfigPruner, PruneResult, PrunedKey } from './config-pruner';\nexport { validateChecklistDocs } from './checklist-docs-validator';\n// The OPTIONAL machine-local `~/.webpieces/config.json`: absent (the normal state for every consumer) means\n// each key's declared default, silently; present means STRICT about what it understands and FORWARD-COMPATIBLE\n// about what it does not. A retired key (its own retirement table), a known key of the wrong TYPE and an\n// unparseable document all REJECT; a key this release simply does not recognise is IGNORED with a warning,\n// because the file is machine-global and the repos reading it pin different releases — rejecting a newer\n// release's key would hard-block every repo on the machine that is not yet on it. See home-config.ts.\n// `isHomeConfigPath` is what grants the file its unconditional Write/Edit PASS in the hook guards, which is\n// what keeps a rejection repairable. Every `experimental.*` key is an OPT-IN that defaults OFF, including\n// `whole-repo-build-guard`: ON requires an explicit `true`, and there is no per-key default to export.\nexport {\n    HomeConfig, HomeConfigService, RetiredHomeConfigKey, RETIRED_HOME_CONFIG_KEYS,\n    HOME_CONFIG_DIR, HOME_CONFIG_FILE, HOME_EXPERIMENTAL_SECTION,\n    HOME_KEY_ORPHAN_DIR_SWEEP, HOME_KEY_WHOLE_REPO_BUILD_GUARD, HOME_KEY_MAX_CONCURRENT_BUILDS,\n    DEFAULT_MAX_CONCURRENT_BUILDS,\n    HOME_KEY_DOC, HOME_KEY_AI_DOC, DOCUMENTATION_KEYS,\n} from './home-config';\n// The MACHINE-WIDE build ledger, `~/.webpieces/builds.log`. THE one carve-out from\n// `no-machine-global-state.spec.ts`'s rule that webpieces writes only under `{repo}/.webpieces` — the\n// argument is in `decisions/0006-the-build-ledger-is-machine-global.md`, and the short form is that \"how\n// many builds are burning this box's CPU\" is a fact about the MACHINE, is not a cache of anything a\n// remote owns, and cannot be answered from a per-repo file because every linked worktree has its own\n// `.webpieces/` and would be blind to the sibling it is contending with. See builds-log.ts.\nexport {\n    BuildsLog, BuildTicket, RunningBuild,\n    BUILDS_LOG_FILE, BUILDS_LOCK_FILE, BUILD_START, BUILD_DONE_SUCCESS, BUILD_DONE_FAIL,\n    MAX_BUILDS_LOG_BYTES, BUILDS_LOG_GENERATIONS, MAX_ROW_BYTES,\n} from './builds-log';\n// The orphan-directory sweep: the corpse an `nx g move` leaves on every clone, which git cannot remove\n// because an ignored dist/ or node_modules/ outlives every tracked file under it. See orphan-dir-scan.ts\n// for why the predicate is git's own `clean -Xdn` answer rather than a hand-rolled ignore walk.\nexport { OrphanDirScanner, OrphanCandidate } from './orphan-dir-scan';\nexport {\n    OrphanDirArchiver, ArchivedOrphan, FailedOrphan, OrphanSweepResult, OrphanSweepManifest,\n    TRASH_STATE_DIR, TRASH_MANIFEST_FILE, TRASH_RETENTION_DAYS,\n} from './orphan-dir-archive';\nexport { OrphanDirSweeper, OrphanSweepReport } from './orphan-dir-sweep';\nexport {\n    MatchRuleConfig,\n    MatchRuleViolation,\n    findMatchRuleViolations,\n    isMatchRuleAllowedPath,\n    compileMatchRulePatterns,\n    renderMatchRuleMessage,\n    DEFAULT_MATCH_RULES,\n} from './match-rules-config';\nexport type { ConfigSection } from './sections';\nexport { schemaFieldNames } from './rule-schemas';\nexport { HOOK_GUARD_NAMES, BRANCH_STATE_GUARD_KEY, PR_LIFECYCLE_GUARD_KEY, isHookGuard, sectionForRule } from './sections';\nexport { FieldDef } from './field-def';\nexport type { SchemaShape } from './field-def';\nexport { shouldSkipRule, getCurrentBranch } from './skip-rule';\nexport { SkipRuleResult } from './skip-rule';\nexport {\n    detectBase,\n    resolveBase,\n    getChangedFiles,\n    getFileDiff,\n    getChangedLineNumbers,\n    findNewMethodSignaturesInDiff,\n    hasChangesInRange,\n    isNewOrModified,\n    DiffScope,\n    DiffRange,\n    ChangedFilesOptions,\n} from './diff-scope';\nexport { AbstractRule } from './abstract-rule';\nexport {\n    WEBPIECES_DISABLE,\n    RULE_NAMES,\n    hasDisable,\n    WEBPIECES_TMP_DIR,\n    MERGE_INFO_DIR,\n    PR_REVIEW_DIR,\n    MERGE_IN_PROGRESS_FILE,\n    MERGE_EXPLANATION_FILE,\n    PUSH_DEV_STATE_FILE,\n    PRUNE_UNKNOWN_COMMAND,\n} from './constants';\nexport { WebpiecesRulesConfig } from './WebpiecesRulesConfig';\nexport {\n    SyncFlowGuidance,\n    WP_START_UPDATE,\n    WP_FINISH_UPDATE,\n    WP_START_UPSERT_PR,\n    WP_FINISH_UPSERT_PR,\n    WP_PUSH_DEV,\n    WP_FINISH_PUSH_DEV,\n} from './sync-flow-guidance';\nexport {\n    MaxMethodLinesConfig,\n    MaxFileLinesConfig,\n    RequireReturnTypeConfig,\n    NoInlineTypeLiteralsConfig,\n    NoAnyUnknownConfig,\n    NoImplicitAnyConfig,\n    PrismaValidateDtosConfig,\n    PrismaConverterConfig,\n    NoDestructureConfig,\n    NoUnmanagedExceptionsConfig,\n    CatchErrorPatternConfig,\n    ThrowCauseRequiredConfig,\n    AngularNoDirectApiInResolverConfig,\n    NoSymbolDiTokensConfig,\n    NoCustomCssConfig,\n    NoProcessExitOutsideMainConfig,\n    NoFunctionOutsideClassConfig,\n    InjectAnnotationNotNeededForConcreteClassConfig,\n    FrameworkTagConfig,\n    RoleTagConfig,\n    BranchCreationGuardConfig,\n    PrLifecycleGuardConfig,\n    NoFileImportCyclesConfig,\n    RuntimeArchitectureConfig,\n    NxWiringConfig,\n    DiGraphConfig,\n    NoJsFilesConfig,\n    ValidateTsInSrcConfig,\n    ValidateArchitectureUnchangedConfig,\n    ValidateNoArchitectureCyclesConfig,\n    ValidatePackageJsonConfig,\n    ValidateVersionsLockedConfig,\n    ValidateEslintSyncConfig,\n    BaseRuleConfig,\n} from './rule-configs';\n// Mode unions + their value arrays — the single source of truth shared with code-rules.\nexport {\n    METHOD_LIMIT_MODES,\n    FILE_LIMIT_MODES,\n    RETURN_TYPE_MODES,\n    INLINE_TYPE_MODES,\n    MODIFIED_CODE_MODES,\n    PROJECT_MODES,\n    PRISMA_DTOS_MODES,\n    PRISMA_CONVERTER_MODES,\n    DIRECT_API_RESOLVER_MODES,\n    THROW_CAUSE_MODES,\n    ON_OFF_MODES,\n    STRUCTURAL_MODES,\n    VALIDATE_TS_MODES,\n} from './rule-configs';\nexport {\n    NoClientCreationOutsideServerOrClientConfig,\n    CLIENT_CREATION_SEVERITIES,\n} from './no-client-creation-config';\nexport type { ClientCreationSeverity } from './no-client-creation-config';\n// The `no-state-paths-in-templates` config, in its own module for the same reason no-client-creation is:\n// rule-configs.ts is at its file-size cap and a rule that carries real defaults belongs beside them.\nexport {\n    NoStatePathsInTemplatesConfig,\n    DEFAULT_TEMPLATE_DIRS,\n    DEFAULT_BANNED_STATE_PATH_PREFIXES,\n} from './no-state-paths-config';\nexport type {\n    MethodLimitMode,\n    FileLimitMode,\n    ReturnTypeMode,\n    InlineTypeMode,\n    ModifiedCodeMode,\n    ProjectMode,\n    PrismaValidateDtosMode,\n    PrismaConverterMode,\n    DirectApiResolverMode,\n    ThrowCauseMode,\n    OnOffMode,\n    StructuralMode,\n    ValidateTsMode,\n} from './rule-configs';\nexport {\n    BranchStateGuardConfig,\n} from './main-sync-guard-configs';\nexport {\n    GateDefinition,\n    PrGateConfig,\n    DEFAULT_BUILD_COMMAND,\n    LandPrConfig,\n    DevDeployConfig,\n    DEFAULT_DEV_BRANCH_NAMESPACE,\n    DEFAULT_DEV_BRANCH,\n    ReviewContextEntry,\n    defaultGates,\n    defaultPrGateConfig,\n    defaultLandPrConfig,\n    defaultDevDeployConfig,\n    buildPrGateConfig,\n    buildLandPrConfig,\n    buildDevDeployConfig,\n    MERGE_MODE_AUTO,\n    MERGE_MODE_NONE,\n    MERGE_MODES,\n} from './pr-gate-config';\nexport {\n    ChecklistDefinition,\n    toChecklist,\n    normalizeChecklistDoc,\n    formatFileList,\n} from './checklist-config';\nexport type { RawChecklistItem } from './checklist-config';\nexport { ChecklistValidator } from './checklist-validator';\nexport { ChecklistInstructionsService } from './checklist-instructions';\nexport {\n    ReviewerInstructionsService,\n    ReviewerBriefing,\n    BriefedFile,\n    ContextEntry,\n    READ_TRUNCATION_LINES,\n    ALL_DIFF_ONE_READ_LINES,\n} from './reviewer-instructions';\nexport {\n    GateTokenService,\n    computeGateToken,\n    gateTokenMarker,\n    extractGateToken,\n    verifyGateToken,\n} from './gate-token';\nexport {\n    SubagentProvenanceService,\n    ReviewerEvidence,\n    ReviewerContext,\n    TranscriptScan,\n    ProvenanceResult,\n    PROVENANCE_OK,\n    PROVENANCE_MISSING,\n    PROVENANCE_SKIPPED,\n} from './subagent-provenance';\nexport {\n    ReviewProvenanceService,\n    ReviewProvenance,\n    ReviewerTranscript,\n    ReviewerPaths,\n    OfferedContext,\n    ProvenanceWriteRequest,\n    DEFAULT_RETENTION_DAYS,\n} from './review-provenance';\nexport {\n    ReviewJson,\n    PrContext,\n    ChecklistResult,\n    ChecklistVerdict,\n    CK_PASS,\n    CK_WARN,\n    CK_OVERRIDDEN,\n    CK_FAIL,\n    CK_MISSING,\n    CK_BAD_FORMAT,\n    VERDICT_GREEN,\n    VERDICT_YELLOW,\n    VERDICT_RED,\n    VERDICT_STATUSES,\n    RequiredChecklist,\n    ChecklistReviewContext,\n    ReviewJsonService,\n    loadReviewJson,\n    prDirFor,\n    reviewJsonPath,\n    reviewJsonSchemaHint,\n} from './review-json';\nexport {\n    MainSyncStatus,\n    MainSyncStatusFile,\n    MainSyncFileStore,\n    PullRequestIndex,\n    MAIN_SYNC_STATUS_VERSION,\n} from './main-sync-file';\nexport {\n    MainSyncLock,\n    MainSyncStatusService,\n    DEFAULT_HANG_TIMEOUT_MINUTES,\n    mainSyncStatusPath,\n    mainSyncLockPath,\n    readMainSyncStatus,\n    readMainSyncStatusFile,\n    writeMainSyncStatus,\n    writeMainSyncStatusFile,\n    computeAllMainSyncStatuses,\n    readMainSyncLock,\n    writeMainSyncLock,\n    isLockStale,\n    isRefreshInProgress,\n    tryAcquireMainSyncLock,\n    inProcessLock,\n    finishedLock,\n    computeMainSyncStatus,\n    stampCleanMainSyncStatus,\n    squashRecoverySteps,\n} from './main-sync-status';\nexport {\n    MergedBranch,\n    DeletableBranch,\n    DeletableWorktree,\n    MergedBranchesCache,\n    MergedBranchesService,\n    CacheFreshness,\n    CACHE_STALE_AFTER_MS,\n    CLASSIFICATION_MERGED_PR,\n    CLASSIFICATION_BACKUP_OF_MERGED,\n    CLASSIFICATION_BACKUP_OF_LIVE,\n    CLASSIFICATION_NO_COMMITS,\n    CLASSIFICATION_SUPERSEDED,\n    CLASSIFICATION_CONTENT_IN_MAIN,\n    CLASSIFICATION_NEVER_PROPOSED,\n    CLASSIFICATION_IN_USE,\n    CLASSIFICATION_PRUNABLE,\n    CLASSIFICATION_LOCKED,\n    CLASSIFICATION_CURRENT,\n    CLASSIFICATION_DETACHED,\n    ADJUDICATED_CLASSIFICATIONS,\n} from './merged-branches';\nexport {\n    BranchArchiver,\n    ArchiveResult,\n    ARCHIVE_TAG_PREFIX,\n    BRANCH_RETENTIONS,\n    BRANCH_RETENTION_DELETE,\n    BRANCH_RETENTION_ARCHIVE_TAG,\n    BRANCH_RETENTION_KEEP,\n} from './branch-archiver';\nexport {\n    Worktree,\n    WorktreeWorkInFlight,\n    WorktreeService,\n} from './worktrees';\nexport {\n    AgentWorktreeLock,\n    AgentWorktreeLockReader,\n} from './agent-worktree-lock';\nexport { WorktreeLockVerdicts } from './worktree-lock-verdicts';\nexport {\n    ReapedBranch,\n    ReapResult,\n    BranchReaper,\n} from './branch-reaper';\nexport {\n    ReapedWorktree,\n    WorktreeReapResult,\n    WorktreeReaper,\n} from './worktree-reaper';\nexport type { MutationVerb, MutationPhase } from './branch-mutation-log';\nexport {\n    BranchMutationEvent,\n    BranchMutationLog,\n    branchMutationLogPath,\n    logBranchMutation,\n} from './branch-mutation-log';\nexport {\n    CommandsConfig,\n    buildCommandsConfig,\n    DEFAULT_UPSERT_PR_COMMAND,\n    DEFAULT_MERGE_COMPLETE_COMMAND,\n} from './commands-config';\n"]}