agent-bober 0.12.0 → 0.15.0

package/dist/graph/prompts.d.ts

@@ -0,0 +1,42 @@
+/**
+ * AgentGraphPrompts — ADR-5.
+ *
+ * Per-role system-prompt fragments that teach agents when to prefer graph_* tools.
+ * All fragments are static top-level const strings (no interpolation, no I/O).
+ *
+ * Invariants (ADR-5):
+ * - RESEARCHER-PHASE2 fragment is a literal const with ZERO template interpolation.
+ *   The snapshot test in tests/researcher-phase2-prompt-isolation.test.ts pins
+ *   the exact bytes. Any edit forces an explicit snapshot update + reviewer ack.
+ * - All fragments are <100 words and contain no feature/task/sprint references.
+ * - 'disabled' mode returns "" for every role.
+ * - decorate() is pure and synchronous — no I/O, no async.
+ */
+import type { BoberAgentRole } from "./preflight-injector.js";
+export type AgentPromptMode = "gated" | "dual" | "disabled";
+export declare class AgentGraphPrompts {
+    /**
+     * Return the prompt fragment for a (role, mode) pair. Returns "" when no
+     * fragment exists (e.g. planner, or 'disabled' mode). Callers MUST treat
+     * the empty string as "no decoration".
+     */
+    static fragmentFor(role: BoberAgentRole, mode: AgentPromptMode): string;
+    /**
+     * Append the role's graph-prompt fragment to baseSystemPrompt.
+     *
+     * Returns baseSystemPrompt UNCHANGED when:
+     *  - graph is not enabled, OR
+     *  - engine health is not 'ready', OR
+     *  - the fragment for (role, modeForRole(role)) is empty.
+     *
+     * Otherwise returns `baseSystemPrompt + "\n\n---\n\n" + fragment`.
+     *
+     * Gating predicate mirrors src/orchestrator/tools/index.ts:204-211 exactly
+     * so the prompt surface and tool surface flip atomically.
+     */
+    static decorate(role: BoberAgentRole, baseSystemPrompt: string, ctx: {
+        graphEnabled: boolean;
+        engineHealth: string;
+    }): string;
+}
+//# sourceMappingURL=prompts.d.ts.map

package/dist/graph/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/graph/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAI9D,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;AA4B5D,qBAAa,iBAAiB;IAC5B;;;;OAIG;IACH,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM;IAIvE;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,QAAQ,CACb,IAAI,EAAE,cAAc,EACpB,gBAAgB,EAAE,MAAM,EACxB,GAAG,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GACnD,MAAM;CAOV"}

package/dist/graph/prompts.js

@@ -0,0 +1,80 @@
+/**
+ * AgentGraphPrompts — ADR-5.
+ *
+ * Per-role system-prompt fragments that teach agents when to prefer graph_* tools.
+ * All fragments are static top-level const strings (no interpolation, no I/O).
+ *
+ * Invariants (ADR-5):
+ * - RESEARCHER-PHASE2 fragment is a literal const with ZERO template interpolation.
+ *   The snapshot test in tests/researcher-phase2-prompt-isolation.test.ts pins
+ *   the exact bytes. Any edit forces an explicit snapshot update + reviewer ack.
+ * - All fragments are <100 words and contain no feature/task/sprint references.
+ * - 'disabled' mode returns "" for every role.
+ * - decorate() is pure and synchronous — no I/O, no async.
+ */
+// ── Fragments (top-level const strings — see ADR-5) ───────────────
+const RESEARCHER_PHASE2_GATED = "For codebase exploration use graph_search, graph_query, graph_review_context, and read_file. Bash, grep, and glob are unavailable for this role.";
+const CURATOR_GATED = "You have graph_search, graph_query, graph_review_context. Use them for ALL exploration. read_file is only for reading specific known files. Prefer graph_query(pattern: \"callers_of\", target: <symbol>) over grep when looking for who calls a function.";
+const ARCHITECT_GATED = "You have graph_search, graph_query, graph_review_context. Use them for ALL exploration. Prefer graph_query(pattern: \"imports_of\", target: <symbol>) to map module boundaries and graph_search for high-level structure discovery.";
+const GENERATOR_DUAL = "You have BOTH grep and graph_* tools. Prefer graph_impact(target: <symbol>) before editing any function with callers. Use grep for line-precise edits and known-file inspection.";
+const EVALUATOR_DUAL = "You have BOTH grep and graph_* tools. Prefer graph_changes(since: <baseline>) and graph_impact(target: <symbol>) to triage the diff. Use grep when you need a literal-string search across the working tree.";
+// ── Lookup table ──────────────────────────────────────────────────
+const FRAGMENTS = {
+    "planner": {},
+    "researcher-phase1": {},
+    "researcher-phase2": { gated: RESEARCHER_PHASE2_GATED },
+    "curator": { gated: CURATOR_GATED },
+    "architect": { gated: ARCHITECT_GATED },
+    "generator": { dual: GENERATOR_DUAL },
+    "evaluator": { dual: EVALUATOR_DUAL },
+};
+// ── Public API ────────────────────────────────────────────────────
+export class AgentGraphPrompts {
+    /**
+     * Return the prompt fragment for a (role, mode) pair. Returns "" when no
+     * fragment exists (e.g. planner, or 'disabled' mode). Callers MUST treat
+     * the empty string as "no decoration".
+     */
+    static fragmentFor(role, mode) {
+        return FRAGMENTS[role]?.[mode] ?? "";
+    }
+    /**
+     * Append the role's graph-prompt fragment to baseSystemPrompt.
+     *
+     * Returns baseSystemPrompt UNCHANGED when:
+     *  - graph is not enabled, OR
+     *  - engine health is not 'ready', OR
+     *  - the fragment for (role, modeForRole(role)) is empty.
+     *
+     * Otherwise returns `baseSystemPrompt + "\n\n---\n\n" + fragment`.
+     *
+     * Gating predicate mirrors src/orchestrator/tools/index.ts:204-211 exactly
+     * so the prompt surface and tool surface flip atomically.
+     */
+    static decorate(role, baseSystemPrompt, ctx) {
+        if (!ctx.graphEnabled || ctx.engineHealth !== "ready")
+            return baseSystemPrompt;
+        const mode = modeForRole(role);
+        const fragment = AgentGraphPrompts.fragmentFor(role, mode);
+        if (fragment.length === 0)
+            return baseSystemPrompt;
+        return `${baseSystemPrompt}\n\n---\n\n${fragment}`;
+    }
+}
+// ── Per-role mode selection ───────────────────────────────────────
+function modeForRole(role) {
+    switch (role) {
+        case "researcher-phase2":
+        case "curator":
+        case "architect":
+            return "gated";
+        case "generator":
+        case "evaluator":
+            return "dual";
+        case "planner":
+        case "researcher-phase1":
+        default:
+            return "disabled";
+    }
+}
+//# sourceMappingURL=prompts.js.map

package/dist/graph/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/graph/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,qEAAqE;AAErE,MAAM,uBAAuB,GAAG,kJAAkJ,CAAC;AAEnL,MAAM,aAAa,GAAG,4PAA4P,CAAC;AAEnR,MAAM,eAAe,GAAG,qOAAqO,CAAC;AAE9P,MAAM,cAAc,GAAG,kLAAkL,CAAC;AAE1M,MAAM,cAAc,GAAG,8MAA8M,CAAC;AAEtO,qEAAqE;AAErE,MAAM,SAAS,GAAqE;IAClF,SAAS,EAAE,EAAE;IACb,mBAAmB,EAAE,EAAE;IACvB,mBAAmB,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE;IACvD,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;IACnC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;IACvC,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;IACrC,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;CACtC,CAAC;AAEF,qEAAqE;AAErE,MAAM,OAAO,iBAAiB;IAC5B;;;;OAIG;IACH,MAAM,CAAC,WAAW,CAAC,IAAoB,EAAE,IAAqB;QAC5D,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,QAAQ,CACb,IAAoB,EACpB,gBAAwB,EACxB,GAAoD;QAEpD,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,OAAO;YAAE,OAAO,gBAAgB,CAAC;QAC/E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC;QACnD,OAAO,GAAG,gBAAgB,cAAc,QAAQ,EAAE,CAAC;IACrD,CAAC;CACF;AAED,qEAAqE;AAErE,SAAS,WAAW,CAAC,IAAoB;IACvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,mBAAmB,CAAC;QACzB,KAAK,SAAS,CAAC;QACf,KAAK,WAAW;YACd,OAAO,OAAO,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,mBAAmB,CAAC;QACzB;YACE,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/graph/sandbox.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Validate a path lives inside projectRoot.
+ *
+ * Returns `{ok: true, abs}` if `inputPath` resolves to a location
+ * within `projectRoot`. Returns `{ok: false}` for:
+ *   - null/undefined inputs (buggy upstream responses)
+ *   - paths that resolve outside the project root (e.g. "../../etc/passwd")
+ *
+ * Mirrors `sandboxPath` from src/orchestrator/tools/handlers.ts:31-45
+ * but returns a result envelope instead of throwing — graph code drops
+ * out-of-sandbox NodeRefs silently rather than crashing the agent loop.
+ */
+export declare function sandboxNodePath(projectRoot: string, inputPath: string | null | undefined): {
+    ok: true;
+    abs: string;
+} | {
+    ok: false;
+};
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/graph/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/graph/sandbox.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACnC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAW3C"}

package/dist/graph/sandbox.js

@@ -0,0 +1,25 @@
+import { resolve, relative, isAbsolute } from "node:path";
+/**
+ * Validate a path lives inside projectRoot.
+ *
+ * Returns `{ok: true, abs}` if `inputPath` resolves to a location
+ * within `projectRoot`. Returns `{ok: false}` for:
+ *   - null/undefined inputs (buggy upstream responses)
+ *   - paths that resolve outside the project root (e.g. "../../etc/passwd")
+ *
+ * Mirrors `sandboxPath` from src/orchestrator/tools/handlers.ts:31-45
+ * but returns a result envelope instead of throwing — graph code drops
+ * out-of-sandbox NodeRefs silently rather than crashing the agent loop.
+ */
+export function sandboxNodePath(projectRoot, inputPath) {
+    if (!inputPath || typeof inputPath !== "string")
+        return { ok: false };
+    const abs = isAbsolute(inputPath)
+        ? resolve(inputPath)
+        : resolve(projectRoot, inputPath);
+    const rel = relative(projectRoot, abs);
+    if (rel.startsWith("..") || isAbsolute(rel))
+        return { ok: false };
+    return { ok: true, abs };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/graph/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/graph/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,SAAoC;IAEpC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAEtE,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC;QAC/B,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACpB,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAElE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC"}

package/dist/graph/token-usage.d.ts

@@ -0,0 +1,21 @@
+export interface TokenUsageRecord {
+    agent: "generator" | "researcher-phase2" | "curator" | "architect";
+    runId: string;
+    timestamp: string;
+    inputTokens: number;
+    outputTokens: number;
+    graphEnabled: boolean;
+}
+/**
+ * Append-only writer for .bober/graph/token-usage.jsonl.
+ *
+ * Each call writes ONE line (one JSON object) per agent run.
+ * A metrics-write failure must not break the agent — callers should
+ * wrap calls in try/catch and swallow errors.
+ */
+export declare class TokenUsageLog {
+    private readonly path;
+    constructor(projectRoot: string);
+    append(r: TokenUsageRecord): Promise<void>;
+}
+//# sourceMappingURL=token-usage.d.ts.map

package/dist/graph/token-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-usage.d.ts","sourceRoot":"","sources":["../../src/graph/token-usage.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,WAAW,GAAG,mBAAmB,GAAG,SAAS,GAAG,WAAW,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;CACvB;AAID;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAElB,WAAW,EAAE,MAAM;IAIzB,MAAM,CAAC,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAIjD"}

package/dist/graph/token-usage.js

@@ -0,0 +1,22 @@
+import { appendFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { ensureDir } from "../utils/fs.js";
+// ── TokenUsageLog ──────────────────────────────────────────────────
+/**
+ * Append-only writer for .bober/graph/token-usage.jsonl.
+ *
+ * Each call writes ONE line (one JSON object) per agent run.
+ * A metrics-write failure must not break the agent — callers should
+ * wrap calls in try/catch and swallow errors.
+ */
+export class TokenUsageLog {
+    path;
+    constructor(projectRoot) {
+        this.path = resolve(projectRoot, ".bober/graph/token-usage.jsonl");
+    }
+    async append(r) {
+        await ensureDir(resolve(this.path, ".."));
+        await appendFile(this.path, JSON.stringify(r) + "\n", "utf-8");
+    }
+}
+//# sourceMappingURL=token-usage.js.map

package/dist/graph/token-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-usage.js","sourceRoot":"","sources":["../../src/graph/token-usage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa3C,sEAAsE;AAEtE;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACP,IAAI,CAAS;IAE9B,YAAY,WAAmB;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAAmB;QAC9B,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/graph/types.d.ts

@@ -0,0 +1,129 @@
+import type { z } from "zod";
+import type { GraphSectionSchema } from "../config/schema.js";
+export type GraphSection = z.infer<typeof GraphSectionSchema>;
+export type PrereqResult = {
+    ok: true;
+    version: string;
+} | {
+    ok: false;
+    reason: "MISSING" | "INCOMPATIBLE";
+    hint: string;
+};
+export type GraphManifest = {
+    schemaVersion: 1;
+    tokensaveVersion: string;
+    createdAt: string;
+    lastSyncAt: string;
+    indexedFileCount: number;
+    languageTier: string;
+    lastSyncedHeadSha: string | null;
+    pendingFiles: string[];
+};
+export type StalenessVerdict = {
+    stale: false;
+} | {
+    stale: true;
+    reason: "HEAD_DIFFERS" | "NEWER_MTIME" | "NO_MANIFEST";
+    detail: string;
+    newerFiles?: string[];
+};
+/** Discriminated union for all GraphClient method returns. ADR-3. */
+export type GraphResult<T> = {
+    ok: true;
+    data: T;
+    backend: "mcp" | "binding";
+    durationMs: number;
+    /** Present only when manifest is stale. Stale data is still data. */
+    stale?: true;
+} | {
+    ok: false;
+    reason: GraphFailureReason;
+    detail: string;
+};
+/** Exhaustive set of graph failure modes. Extending this requires a new
+ *  case in every `switch (reason)` — assertNever enforces this at compile time. */
+export type GraphFailureReason = "GRAPH_DISABLED" | "GRAPH_UNAVAILABLE" | "GRAPH_STALE" | "GRAPH_TIMEOUT" | "GRAPH_ERROR";
+export type NodeRef = {
+    id: string;
+    kind: "function" | "class" | "module" | "symbol";
+    file: string;
+    line: number;
+    symbol: string;
+};
+export type SearchHit = {
+    node: NodeRef;
+    score: number;
+    snippet: string;
+};
+export type ImpactReport = {
+    root: NodeRef;
+    affected: NodeRef[];
+    testsAffected: NodeRef[];
+};
+export type FallbackHint = {
+    message: string;
+    suggestedTools: string[];
+    retryable: boolean;
+};
+export type PrefetchOp = "search" | "query" | "impact" | "reviewContext" | "overview" | "changes";
+export type PrefetchSpec = {
+    key: string;
+    op: PrefetchOp;
+    /** Op-specific args; GraphClient.prefetch dispatches by `op`. */
+    args: unknown;
+};
+export interface OnboardingInputs {
+    status: {
+        tokensaveVersion: string;
+        indexedFileCount: number;
+    };
+    hotspots: Array<{
+        symbol: string;
+        file: string;
+        line: number;
+        score: number;
+        reason?: string;
+    }>;
+    deadCode: Array<{
+        symbol: string;
+        file: string;
+        line: number;
+    }>;
+    circular: Array<{
+        cycle: string[];
+    }>;
+    largest: Array<{
+        symbol: string;
+        file: string;
+        line: number;
+        loc: number;
+    }>;
+    moduleApis: Array<{
+        module: string;
+        community?: string;
+        symbols: Array<{
+            name: string;
+            file: string;
+            line: number;
+            hasInternalCallers: boolean;
+        }>;
+    }>;
+    files: Array<{
+        path: string;
+        symbols: number;
+    }>;
+}
+export interface OnboardingArtifacts {
+    readme: string;
+    architectureOverview: string;
+    hotspots: string;
+    knowledgeGaps: string;
+    communities: string;
+}
+/**
+ * Use as `default: return assertNever(reason);` in switch statements
+ * over discriminated unions. If a new variant is added without a case,
+ * `tsc --noEmit` fails because the discriminator is no longer `never`.
+ */
+export declare function assertNever(x: never): never;
+//# sourceMappingURL=types.d.ts.map

package/dist/graph/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/graph/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG;IAC1B,aAAa,EAAE,CAAC,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,GAChB;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,cAAc,GAAG,aAAa,GAAG,aAAa,CAAC;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAIN,qEAAqE;AACrE,MAAM,MAAM,WAAW,CAAC,CAAC,IACrB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;IAER,OAAO,EAAE,KAAK,GAAG,SAAS,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,KAAK,CAAC,EAAE,IAAI,CAAC;CACd,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D;mFACmF;AACnF,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,mBAAmB,GACnB,aAAa,GACb,eAAe,GACf,aAAa,CAAC;AAIlB,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,aAAa,EAAE,OAAO,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAIF,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,eAAe,GACf,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,UAAU,CAAC;IACf,iEAAiE;IACjE,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAIF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,QAAQ,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChG,QAAQ,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,QAAQ,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrC,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,UAAU,EAAE,KAAK,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,kBAAkB,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KAC3F,CAAC,CAAC;IACH,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAE3C"}

package/dist/graph/types.js

@@ -0,0 +1,12 @@
+// Source-of-truth graph types for the harness integration.
+// Mirrors arch-20260524-port-code-review-graph-architecture.md §Data Model.
+// ── Exhaustiveness helper ──────────────────────────────────────────
+/**
+ * Use as `default: return assertNever(reason);` in switch statements
+ * over discriminated unions. If a new variant is added without a case,
+ * `tsc --noEmit` fails because the discriminator is no longer `never`.
+ */
+export function assertNever(x) {
+    throw new Error(`Unreachable: ${JSON.stringify(x)}`);
+}
+//# sourceMappingURL=types.js.map

package/dist/graph/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/graph/types.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,4EAA4E;AA4H5E,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,CAAQ;IAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/incident/orchestrator.d.ts

@@ -0,0 +1,168 @@
+/**
+ * Incident state machine + phase routing (Sprint 24).
+ *
+ * Wraps Sprint 19 setIncidentStatus with a GUARDED transition table:
+ * invalid transitions reject with a typed error before any disk write.
+ *
+ * The state machine is deterministic: given (currentPhase, agentOutput),
+ * the next phase is fully determined. No human-in-loop required for
+ * happy-path autopilot (subject to Tier 2 risky-action gates that fire
+ * inside executeAction). This is the integration capstone — no new
+ * primitives, only orchestration.
+ *
+ * Re-open path (resolved → investigating) is the ONLY transition that
+ * requires an explicit `reason` arg. Every other transition is implicit
+ * from the agent's output.
+ *
+ * Phase transition diagram:
+ *
+ *                    ┌──────────────────────────────────────────────────────┐
+ *                    │                                                       │
+ *                    ▼                                                       │
+ *             ┌───────────────┐                                              │
+ *             │ investigating │                                              │
+ *             └───────┬───────┘                                              │
+ *                     │                                                      │
+ *        diagnoser produces                                                  │
+ *        nextActions with                                                    │
+ *        ≥1 risky                                                            │
+ *                     │                                                      │
+ *                     ▼                                                      │
+ *             ┌───────────────┐                                              │
+ *             │  remediating  │                                              │
+ *             └───────┬───────┘                                              │
+ *                     │                                                      │
+ *        all proposed actions executed                                       │
+ *        + postcondition passed                                               │
+ *                     │                                                      │
+ *                     ▼                                                      │
+ *             ┌───────────────┐ ──── verifyResolution fails ─────────────────┤
+ *             │   monitoring  │                                              │
+ *             └───────┬───────┘                                              │
+ *                     │                                                      │
+ *        verifyResolution.verified=true                                      │
+ *        for criteria.windowMinutes                                          │
+ *                     │                                                      │
+ *                     ▼                                                      │
+ *             ┌───────────────┐ ──── user re-opens (reason REQUIRED) ────────┘
+ *             │    resolved   │
+ *             └───────────────┘   (auto-postmortem triggered by setIncidentStatus)
+ *
+ * At any phase: user issues `bober incident abort <id> --reason <text> [--confirm-rollback]`
+ *               ──────────────────────────────────────► aborted (terminal)
+ *
+ * Sprint 24 — src/incident/orchestrator.ts
+ */
+import { type SetStatusOpts } from "./timeline.js";
+import { type IncidentId, type IncidentMetadata, type IncidentPhase } from "./types.js";
+import { type ExecuteRollbackOpts, type RollbackResult } from "./rollback.js";
+import { type ResolutionCriteria, type VerifyResolutionDeps } from "./resolution-verify.js";
+import type { RiskyActionConfig } from "../orchestrator/deploy/resolve.js";
+import type { BoberConfig } from "../config/schema.js";
+export declare class InvalidTransitionError extends Error {
+    from: IncidentPhase;
+    to: IncidentPhase;
+    reasonRequired: boolean;
+    constructor(from: IncidentPhase, to: IncidentPhase, reasonRequired?: boolean);
+}
+export interface TransitionOpts {
+    reason?: string;
+    setStatus?: SetStatusOpts;
+}
+export interface DiagnosisNextAction {
+    blastRadius: "safe" | "risky";
+    action?: string;
+    requiresApproval?: boolean;
+}
+export interface DiagnosisResult {
+    nextActions: DiagnosisNextAction[];
+    summary?: string;
+}
+export interface ApplyDiagnosisOpts {
+    /** Override clock for tests. */
+    now?: () => Date;
+}
+export interface ApplyDeploymentDeployedEntry {
+    status: "executed" | "failed";
+}
+export interface ApplyDeploymentResult {
+    executed: ApplyDeploymentDeployedEntry[];
+}
+export interface ApplyDeploymentOpts {
+    /** Forwarded to verifyResolution when monitoring transition is attempted. */
+    verifyDeps?: Omit<VerifyResolutionDeps, "projectRoot">;
+    resolutionCriteria?: ResolutionCriteria;
+    /** Skip verifyResolution call (test seam). */
+    skipVerification?: boolean;
+    now?: () => Date;
+}
+export interface AbortOpts {
+    reason: string;
+    confirmRollback?: boolean;
+    config?: RiskyActionConfig;
+    rollbackOpts?: ExecuteRollbackOpts;
+    now?: () => Date;
+    /** Sprint 28 — optional BoberConfig for telemetry emit on incident-aborted. */
+    boberConfig?: BoberConfig;
+}
+export interface AbortResult {
+    rollback?: RollbackResult;
+    abortReportPath: string;
+}
+export declare function readIncidentMetadata(projectRoot: string, incidentId: IncidentId): Promise<IncidentMetadata>;
+export declare function transitionPhase(projectRoot: string, incidentId: IncidentId, toPhase: IncidentPhase, opts?: TransitionOpts): Promise<void>;
+/**
+ * Inspect a diagnosis output and transition the incident phase accordingly.
+ *
+ * If any nextAction has blastRadius='risky' → transition to 'remediating'.
+ * If nextActions is empty (diagnoser found no remediation needed) → leave at
+ * 'investigating'; the operator should call transitionPhase or `bober incident end`.
+ * If nextActions has entries but all are safe → leave at 'investigating' (no
+ * state-mutating actions are needed; diagnose further or end the incident).
+ *
+ * Returns { newPhase } — the phase AFTER the call. Callers can use this to
+ * branch their own logic.
+ */
+export declare function applyDiagnosisOutcome(projectRoot: string, incidentId: IncidentId, diagnosis: DiagnosisResult, _opts?: ApplyDiagnosisOpts): Promise<{
+    newPhase: IncidentPhase;
+}>;
+/**
+ * After deployment actions complete, transition the incident phase.
+ *
+ * If all actions executed successfully AND verifyResolution is available:
+ *   - call verifyResolution
+ *   - if verified=true → transition to 'monitoring'
+ *   - Returns { newPhase: 'monitoring', verified: true }
+ *
+ * Transitioning from monitoring → resolved is the caller's responsibility
+ * (the CLI / orchestration layer drives the second transition after the
+ * criteria window elapses). This function ONLY moves to monitoring.
+ *
+ * If verifyDeps is not provided or skipVerification=true:
+ *   - Transition to monitoring unconditionally (operator is asserting success).
+ *
+ * If any action failed:
+ *   - Stay in remediating (return { newPhase: 'remediating', verified: false }).
+ */
+export declare function applyDeploymentOutcome(projectRoot: string, incidentId: IncidentId, deployResult: ApplyDeploymentResult, opts?: ApplyDeploymentOpts): Promise<{
+    newPhase: IncidentPhase;
+    verified?: boolean;
+}>;
+/**
+ * Abort an incident at any phase.
+ *
+ * Writes .bober/incidents/<id>/aborted.txt with reason.
+ * Writes .bober/incidents/<id>/abort-report.md with reason + rollback plan.
+ * Transitions the incident to status='aborted' (terminal).
+ *
+ * IF confirmRollback=true: plans + executes rollback for executed-not-rolled-back
+ *   changes (each step goes through the deploy gate individually).
+ * IF confirmRollback=false (default): does NOT execute any rollbacks.
+ *
+ * Silent rollback on abort is a footgun — confirmRollback=true is the explicit
+ * opt-in. Without it, the operator is on the hook for manual cleanup.
+ *
+ * @throws Error if the incident is already aborted (abort is terminal).
+ */
+export declare function abort(projectRoot: string, incidentId: IncidentId, opts: AbortOpts): Promise<AbortResult>;
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/incident/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../src/incident/orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAIH,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIvD,qBAAa,sBAAuB,SAAQ,KAAK;IAEtC,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,aAAa;IACjB,cAAc;gBAFd,IAAI,EAAE,aAAa,EACnB,EAAE,EAAE,aAAa,EACjB,cAAc,UAAQ;CAQhC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,4BAA4B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,UAAU,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;IACvD,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;CACzB;AAID,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAI3B;AAID,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,eAAe,EAC1B,KAAK,GAAE,kBAAuB,GAC7B,OAAO,CAAC;IAAE,QAAQ,EAAE,aAAa,CAAA;CAAE,CAAC,CAetC;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,qBAAqB,EACnC,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA8B1D;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,KAAK,CACzB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,WAAW,CAAC,CA4FtB"}