agent-coord-mcp 0.26.16 → 0.26.18

package/dist/capabilities.js

@@ -1,158 +0,0 @@
-/*
- * Phase 5.1 Task 11 — CLOSE THE LOOP: answer a capability question by
- * EXERCISING the capability, in the process that would serve it.
- *
- * 11.1: NO TIMESTAMP ON THIS BOX CAN ANSWER A CAPABILITY QUESTION. Every
- * artefact people reach for is a proxy that fails differently:
- *
- *   an mtime          tracks WRITES. A reinstall of byte-identical code moves
- *                     it, and an edit that never got built does not.
- *   serverBuildMtime  is stamped at ATTACH, so it tells you when a transport
- *                     started, not what the running process contains.
- *   a version string  is a LABEL someone typed into package.json. Measured
- *                     today: a tarball published as 0.5.23 contained a change
- *                     the version numbering said it could not, and the number
- *                     was believed over the artefact for an hour.
- *   `npm view`        answers from a cache, and told this fleet the wrong
- *                     published version twice in one morning.
- *
- * Each is honest about something and dishonest about capability, and the
- * failure is always the same shape: an ANSWER ABOUT A LABEL read as an answer
- * about behaviour.
- *
- * 11.2: A RELEASE IS NOT DELIVERED UNTIL A SERVER THAT RESTARTED ANSWERS.
- * `merged · published · installed · restarted · observed` — five states, and
- * the last two are the ones that keep being skipped. A probe run INSIDE the
- * server process is the only artefact that speaks for the loaded code: it
- * cannot be satisfied by a file that exists, a version that matches, or a
- * package that installed, because it calls the code and reports what happened.
- *
- * WHY A PROBE MAY NEVER READ A VERSION: if a probe branched on a version
- * string it would inherit that string's dishonesty, and a fleet would then
- * have a capability check that passes on a restarted-but-not-upgraded server.
- * Probes call behaviour. The version travels beside the answer as CONTEXT and
- * is labelled as such.
- */
-import { prRefsIn } from "./tools/record-events.js";
-import { EVENT_KIND_IDS } from "./tools/event-kinds.js";
-import { suggestRecordType, typedRecordMode } from "./typed-records.js";
-import { LEAD_REFUSED, PARKED_CATEGORIES } from "./tools/away.js";
-import { recordAuthorityFor } from "./roles.js";
-import { subscriptionHealth } from "./tools/events.js";
-/**
- * Each probe calls a behaviour that did not exist before its release and
- * reports what it observed. A probe that could pass without the code being
- * loaded is not a probe — it is a restatement of the version.
- */
-const PROBES = [
-    {
-        id: "typed-records-obligatory",
-        since: "0.26.10",
-        run: () => {
-            const s = suggestRecordType("DONE: shipped it", []);
-            const mode = typedRecordMode();
-            return {
-                present: s.type === "done" && (mode === "warn" || mode === "refuse"),
-                evidence: `suggestRecordType("DONE: …") -> '${s.type}', policy mode '${mode}'`,
-            };
-        },
-    },
-    {
-        id: "record-events-all-kinds",
-        since: "0.26.12",
-        run: () => {
-            const kinds = [...EVENT_KIND_IDS].sort();
-            const present = ["item", "phase", "pr", "task"].every((k) => kinds.includes(k));
-            return { present, evidence: `subscribable kinds: ${kinds.join(", ")}` };
-        },
-    },
-    {
-        id: "multi-pr-citation",
-        since: "0.26.14",
-        run: () => {
-            const refs = prRefsIn("owner/repo#170, #173");
-            return {
-                present: refs.length === 2 && refs[1] === "owner/repo#173",
-                evidence: `prRefsIn("owner/repo#170, #173") -> [${refs.join(", ")}]`,
-            };
-        },
-    },
-    {
-        id: "away-means-david-away",
-        since: "0.26.13",
-        run: () => {
-            const present = "merge" in LEAD_REFUSED && PARKED_CATEGORIES.includes("licence");
-            return {
-                present,
-                evidence: `coord_away refuses [${Object.keys(LEAD_REFUSED).join(", ")}] for the lead; parks ${PARKED_CATEGORIES.length} categories`,
-            };
-        },
-    },
-    {
-        id: "subscription-scanned-vs-evaluated",
-        since: "0.26.15",
-        run: () => {
-            // The capability is that "the machinery ran" and "your kind fired" are
-            // separable. Probed by asking for the state that used to be reported as
-            // broken: scanned, never evaluated — a healthy idle watch.
-            const base = { id: "p", agentId: "p", kind: "item", target: "t", createdAt: 0, lastEvaluatedAt: null, lastEventAt: null, delivered: [] };
-            const quiet = subscriptionHealth({ ...base, lastScannedAt: Date.now() });
-            const unscanned = subscriptionHealth({ ...base, lastScannedAt: null });
-            return {
-                present: quiet.level === "ok" && unscanned.level === "error",
-                evidence: `scanned+quiet -> '${quiet.level}', never-scanned -> '${unscanned.level}'`,
-            };
-        },
-    },
-    {
-        id: "record-authority",
-        since: "0.24.0",
-        run: () => {
-            const worker = recordAuthorityFor({ roleId: "worker" });
-            return {
-                present: worker.mayNotEmit.includes("verdict"),
-                evidence: `a worker mayNotEmit: [${worker.mayNotEmit.join(", ")}]`,
-            };
-        },
-    },
-];
-export function probeCapabilities(context) {
-    const probes = PROBES.map((p) => {
-        try {
-            const r = p.run();
-            return { id: p.id, since: p.since, present: r.present, evidence: r.evidence };
-        }
-        catch (e) {
-            // A THROWN PROBE IS AN ABSENT CAPABILITY, NOT A BROKEN CHECK. Older code
-            // that lacks the symbol throws exactly here, and reporting that as an
-            // error rather than an absence would make the common case look like a
-            // malfunction.
-            return { id: p.id, since: p.since, present: false, evidence: `probe threw: ${e.message}` };
-        }
-    });
-    const missing = probes.filter((p) => !p.present).map((p) => p.id);
-    return {
-        answeredBy: {
-            pid: process.pid,
-            startedAtIso: new Date(Date.now() - Math.round(process.uptime() * 1000)).toISOString(),
-            module: context.module,
-            versionLabel: context.versionLabel,
-        },
-        probes,
-        missing,
-        ok: missing.length === 0,
-        note: "Every line above was produced by CALLING the code in this process. `versionLabel` is a label someone typed " +
-            "into package.json and is context, never evidence — a published tarball has already been observed carrying a " +
-            "change its version said it could not. THIS ANSWER IS ABOUT ONE PROCESS: a release is delivered when every " +
-            "live agent's OWN server answers, which is the fifth state (merged · published · installed · restarted · observed). " +
-            "A server that has not restarted answers honestly about the old code it is still running.",
-    };
-}
-/* ── the verb ──────────────────────────────────────────────────────────────── */
-import { resolveServerIdentity } from "./server-identity.js";
-export const capabilitiesSchema = {};
-export async function capabilitiesTool() {
-    const id = resolveServerIdentity();
-    return probeCapabilities({ module: id.path, versionLabel: id.version });
-}
-//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAavD;;;;GAIG;AACH,MAAM,MAAM,GAAY;IACtB;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,CAAC,GAAG,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,CAAC;gBACpE,QAAQ,EAAE,oCAAoC,CAAC,CAAC,IAAI,mBAAmB,IAAI,GAAG;aAC/E,CAAC;QACJ,CAAC;KACF;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAU,CAAC,CAAC,CAAC;YACzF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,IAAI,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,gBAAgB;gBAC1D,QAAQ,EAAE,wCAAwC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACrE,CAAC;QACJ,CAAC;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,OAAO,GAAG,OAAO,IAAI,YAAY,IAAI,iBAAiB,CAAC,QAAQ,CAAC,SAAkB,CAAC,CAAC;YAC1F,OAAO;gBACL,OAAO;gBACP,QAAQ,EAAE,uBAAuB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,iBAAiB,CAAC,MAAM,aAAa;aACpI,CAAC;QACJ,CAAC;KACF;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,uEAAuE;YACvE,wEAAwE;YACxE,2DAA2D;YAC3D,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAW,CAAC;YAClJ,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,GAAI,IAAe,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAW,CAAC,CAAC;YAC9F,MAAM,SAAS,GAAG,kBAAkB,CAAC,EAAE,GAAI,IAAe,EAAE,aAAa,EAAE,IAAI,EAAW,CAAC,CAAC;YAC5F,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO;gBAC5D,QAAQ,EAAE,qBAAqB,KAAK,CAAC,KAAK,wBAAwB,SAAS,CAAC,KAAK,GAAG;aACrF,CAAC;QACJ,CAAC;KACF;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC9C,QAAQ,EAAE,yBAAyB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACnE,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAgBF,MAAM,UAAU,iBAAiB,CAAC,OAAiD;IACjF,MAAM,MAAM,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,yEAAyE;YACzE,sEAAsE;YACtE,sEAAsE;YACtE,eAAe;YACf,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAiB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxG,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO;QACL,UAAU,EAAE;YACV,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YACtF,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC;QACD,MAAM;QACN,OAAO;QACP,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QACxB,IAAI,EACF,6GAA6G;YAC7G,8GAA8G;YAC9G,4GAA4G;YAC5G,qHAAqH;YACrH,0FAA0F;KAC7F,CAAC;AACJ,CAAC;AAED,kFAAkF;AAElF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAW,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;IACnC,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/prefix.js

@@ -1,64 +0,0 @@
-/*
- * WHERE WILL A NEW GLOBAL INSTALL LAND, AND IS IT WHERE THE FLEET LOADS FROM?
- *
- * These are two different questions and neither answers the other. The
- * `server-build-drift` check names which copy is RUNNING; this names where the
- * NEXT copy will be written. A run of `npm i -g agent-coord-mcp` that prints
- * "added 1 package" is not evidence it landed anywhere that runs.
- *
- * MEASURED ON THIS BOX, 2026-08-28 — the divergence is not hypothetical:
- *   npm prefix -g          -> .../node/v22.22.2
- *   every live fleet server-> .../node/v22.21.1/lib/node_modules/agent-coord-mcp
- * Three prefixes exist here (two nvm, one /opt/homebrew), `npm prefix -g` is
- * PATH-dependent, and nvm switches it per shell. So the install target and the
- * load target had silently diverged, and a successful install would have
- * updated a copy nothing loads. That gap cost the fleet a day.
- */
-import path from "node:path";
-/**
- * The global root a module path sits under, or null if it is not in one.
- * `/p/lib/node_modules/agent-coord-mcp/dist` -> `/p`
- */
-export function prefixOf(modulePath) {
-    if (!modulePath)
-        return null;
-    // Split on the LAST occurrence: a global prefix can itself live under a path
-    // containing `node_modules`, and taking the first match would name an
-    // ancestor that installs nothing.
-    const marker = `${path.sep}lib${path.sep}node_modules${path.sep}`;
-    const i = modulePath.lastIndexOf(marker);
-    if (i === -1)
-        return null;
-    return modulePath.slice(0, i);
-}
-/**
- * `loadPrefix` is where THIS server was loaded from; `installPrefix` is what
- * `npm prefix -g` answered, and `npmPath` is which npm answered it — because a
- * prefix without the binary that reported it cannot be reproduced by anyone.
- */
-export function prefixVerdict(loadPrefix, installPrefix, npmPath) {
-    const via = npmPath ? ` (asked: ${npmPath})` : "";
-    // NOT DETERMINED IS NOT MATCHING. Both unknown branches are warnings that say
-    // what could not be established, never an "ok" over an unasked question.
-    // NOT APPLICABLE IS NOT THE SAME AS UNCHECKED, and conflating them is how a
-    // check earns its way into being ignored. A dev checkout has no load prefix
-    // BY CONSTRUCTION: this process is not the copy the fleet loads, so there is
-    // no divergence for it to have. Warning on every dev run would fire on every
-    // test run and every local session — noise, which is what a denylist does.
-    //
-    // The question is still ASKED where it can be answered: a session running
-    // from a global install has a load prefix, and that is where the fleet lives.
-    if (!loadPrefix)
-        return { level: "ok", detail: `not applicable: this server runs from a dev checkout, not a global install${via}, so it is not the copy the fleet loads and has no prefix to diverge from. Run \`doctor\` in an installed session to compare install target against load target.` };
-    if (!installPrefix)
-        return { level: "warn", detail: `could not determine the global install prefix${via} — \`npm prefix -g\` gave no answer, so where a new copy would land is UNKNOWN. Running from ${loadPrefix}.` };
-    if (path.resolve(loadPrefix) === path.resolve(installPrefix))
-        return { level: "ok", detail: `a global install would land where this server loads from (${loadPrefix})${via}` };
-    return {
-        level: "error",
-        detail: `INSTALL PREFIX AND LOAD PREFIX DIVERGE. A global install from this shell writes to ${installPrefix}${via}, but this server is running from ${loadPrefix}. ` +
-            `A successful "added 1 package" would update a copy nothing loads, and every check that reads a VERSION would keep reporting the old one truthfully. ` +
-            `Install with an explicit prefix (\`npm i -g --prefix ${loadPrefix} <pkg>\`) or switch node/nvm to the version owning ${loadPrefix} before installing.`,
-    };
-}
-//# sourceMappingURL=prefix.js.map

package/dist/prefix.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prefix.js","sourceRoot":"","sources":["../src/prefix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA8B;IACrD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,6EAA6E;IAC7E,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC;IAClE,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChC,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAyB,EAAE,aAA4B,EAAE,OAAgB;IACrG,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAElD,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,EAAE;IACF,0EAA0E;IAC1E,8EAA8E;IAC9E,IAAI,CAAC,UAAU;QACb,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,6EAA6E,GAAG,kKAAkK,EAAE,CAAC;IACrR,IAAI,CAAC,aAAa;QAChB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gDAAgD,GAAG,gGAAgG,UAAU,GAAG,EAAE,CAAC;IAErM,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,6DAA6D,UAAU,IAAI,GAAG,EAAE,EAAE,CAAC;IAEnH,OAAO;QACL,KAAK,EAAE,OAAO;QACd,MAAM,EACJ,sFAAsF,aAAa,GAAG,GAAG,qCAAqC,UAAU,IAAI;YAC5J,sJAAsJ;YACtJ,wDAAwD,UAAU,sDAAsD,UAAU,qBAAqB;KAC1J,CAAC;AACJ,CAAC"}

package/dist/roles.js

@@ -1,132 +0,0 @@
-// Canonical role identity, server side (Phase 8 Task 4).
-//
-// MIRROR of hooks/roles.mjs — tsconfig's rootDir is `src`, so this cannot
-// import the hook copy, and the hook copy must stay build-free (the pusher
-// loads it from a bare checkout). test/roles.test.mjs asserts the two agree;
-// change one, change the other.
-//
-// See hooks/roles.mjs for the rationale behind `explicit` and the word-match
-// fallback.
-import { z } from "zod";
-export function slugifyRole(role) {
-    return String(role ?? "")
-        .trim()
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-")
-        .replace(/^-+|-+$/g, "");
-}
-export const GATE_RUNNER_ROLE_IDS = new Set(["qa", "quality", "coordinator", "gate"]);
-export const COORDINATOR_ROLE_IDS = new Set(["coordinator"]);
-// CI receives express-lane DONE: wake. Not a gate-runner — must not grant verdict.
-export const CI_ROLE_IDS = new Set(["ci"]);
-// Console / watchers. May send prefixed messages. Not a gate-runner.
-export const AUTOMATION_ROLE_IDS = new Set(["automation"]);
-// A HUMAN READER. The one carve-out in the typed-record rule (Phase 5.1 Task
-// 12.3): canon already rules "David-facing messages may use normal prose", and
-// a blanket requirement would break the single channel whose reader is a
-// person. `david` is here as well as `human` because the registry entry that
-// exists on this bus today declares role "David" — the id derives to `david`,
-// and a rule that only recognised the canonical spelling would have refused
-// the exact traffic it is written to protect.
-export const HUMAN_ROLE_IDS = new Set(["human", "david"]);
-export function resolveRole(role) {
-    if (role === null || role === undefined)
-        return undefined;
-    if (typeof role === "string") {
-        const roleId = slugifyRole(role);
-        return roleId ? { roleId, displayName: role, explicit: false } : undefined;
-    }
-    if (typeof role === "object") {
-        const declared = typeof role.roleId === "string" ? slugifyRole(role.roleId) : "";
-        const name = typeof role.displayName === "string" && role.displayName
-            ? role.displayName
-            : typeof role.role === "string" && role.role
-                ? role.role
-                : undefined;
-        if (declared)
-            return { roleId: declared, displayName: name ?? declared, explicit: true };
-        if (name)
-            return resolveRole(name);
-    }
-    return undefined;
-}
-export function roleMatches(role, allowedIds) {
-    const resolved = resolveRole(role);
-    if (!resolved)
-        return false;
-    if (allowedIds.has(resolved.roleId))
-        return true;
-    // Word-split applies to DECLARED ids too. It used to be derived-only ("frozen
-    // ids match exactly"), which made precision cost authority: {roleId:"coord-qa"}
-    // was refused `verdict` while the vaguer bare string "coord-qa" passed via the
-    // split — a consumer fleet's QA verdicts were never machine-authorized (2026-08-21).
-    // Freezing still governs identity (the id cannot change); it must never grant
-    // LESS than the derived twin of the same spelling.
-    return resolved.roleId.split("-").some((word) => allowedIds.has(word));
-}
-// The canonical role vocabulary — every authority set plus the classes the
-// cards register. Not an allowlist: any roleId may register; a non-canonical
-// one gets a warning naming this set so the next card uses the exact spelling.
-export const CANONICAL_ROLE_IDS = new Set([
-    "coordinator",
-    "worker",
-    "aide",
-    "qa",
-    "quality",
-    "gate",
-    "ci",
-    "audit",
-    "automation",
-    "human",
-]);
-export function isGateRunner(role) {
-    return roleMatches(role, GATE_RUNNER_ROLE_IDS);
-}
-export function isCoordinator(role) {
-    return roleMatches(role, COORDINATOR_ROLE_IDS);
-}
-export function isCi(role) {
-    return roleMatches(role, CI_ROLE_IDS);
-}
-export function isAutomation(role) {
-    return roleMatches(role, AUTOMATION_ROLE_IDS);
-}
-export function isHuman(role) {
-    return roleMatches(role, HUMAN_ROLE_IDS);
-}
-// Which roles may emit which record.type at the send path. Enforcement lives
-// in messaging.ts (checkRecordAuthority); the table lives here so register/join
-// can ECHO the consequence back at onboarding — a role that cannot emit `go`
-// should learn it when it registers, not when it sends its first work order.
-//
-// NOT A TRUST BOUNDARY — roles are self-declared. See checkRecordAuthority.
-export const RECORD_AUTHORITY = {
-    verdict: { roles: GATE_RUNNER_ROLE_IDS, label: "gate-runner" },
-    go: { roles: COORDINATOR_ROLE_IDS, label: "coordinator" },
-    scope: { roles: COORDINATOR_ROLE_IDS, label: "coordinator" },
-};
-// Split the restricted record types into what this role may and may not emit.
-// Unrestricted types are omitted from both lists — they are nobody's business.
-export function recordAuthorityFor(role) {
-    const mayEmit = [];
-    const mayNotEmit = [];
-    for (const [type, rule] of Object.entries(RECORD_AUTHORITY)) {
-        (roleMatches(role, rule.roles) ? mayEmit : mayNotEmit).push(type);
-    }
-    return { mayEmit, mayNotEmit };
-}
-// Wire shape for `role` on register/join. Either free text (v1: `role: "qa
-// lead"`) or a declared identity (`{roleId: "qa", displayName: "QA gate"}`).
-// Both are supported forever — the string form is not deprecated, it just
-// leaves the id derived rather than frozen.
-//
-// Lives here rather than in tools/ because registry.ts and transport.ts import
-// each other; a schema in either would be a temporal-dead-zone hazard.
-export const roleInputSchema = z.union([
-    z.string(),
-    z.object({
-        roleId: z.string().min(1).optional(),
-        displayName: z.string().min(1).optional(),
-    }),
-]);
-//# sourceMappingURL=roles.js.map

package/dist/roles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,6EAA6E;AAC7E,YAAY;AAEZ,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAC7D,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC3D,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,8CAA8C;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW;YACtD,CAAC,CAAC,IAAI,CAAC,WAAW;YAClB,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI;gBAC1C,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzF,IAAI,IAAI;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,UAAuB;IAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,qFAAqF;IACrF,8EAA8E;IAC9E,mDAAmD;IACnD,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACxC,aAAa;IACb,QAAQ;IACR,MAAM;IACN,IAAI;IACJ,SAAS;IACT,MAAM;IACN,IAAI;IACJ,OAAO;IACP,YAAY;IACZ,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,WAAW,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,WAAW,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAe;IAClC,OAAO,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAe;IACrC,OAAO,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAA0D;IACrF,OAAO,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;IAC9D,EAAE,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;IACzD,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;CAC7D,CAAC;AAEF,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,IAAe;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5D,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC;CACH,CAAC,CAAC"}

package/dist/server-identity.js

@@ -1,82 +0,0 @@
-/*
- * WHICH SERVER PACKAGE IS RUNNING — a LEAF module, importing nothing from
- * `tools/`.
- *
- * It lived in `transport.ts`, and `capabilities.ts` imported it from there. The
- * moment `status` needs to REPORT capabilities, that becomes
- * transport -> capabilities -> transport: a cycle, and the same one Task 9
- * produced when the kind registry sat inside `record-events.ts`. That one only
- * worked because `tools/index.ts` happened to import in the surviving order —
- * a load-ORDER dependency, invisible until something imported a module
- * directly, which is what a consumer or a test does.
- *
- * A cycle that works by luck is not a working cycle, so the shared fact moves
- * out rather than the edge being added on top of it.
- *
- * NOTE WHAT THIS REPORTS AND WHAT IT DOES NOT. `version` is the label in the
- * package.json this process loaded from — CONTEXT for a reader, never evidence
- * of a capability. A published tarball has already been observed carrying a
- * change its version said it could not. Capability questions are answered by
- * `capabilities`, which CALLS the code.
- */
-import { existsSync, readFileSync } from "node:fs";
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { isGitRepo } from "./tools/scopes.js";
-/** Running server package + optional git identity. `fromDir` is a test seam. */
-export function resolveServerIdentity(fromDir) {
-    const start = fromDir ?? path.dirname(fileURLToPath(import.meta.url));
-    let dir = start;
-    let pkgFile;
-    for (let i = 0; i < 8; i++) {
-        const candidate = path.join(dir, "package.json");
-        if (existsSync(candidate)) {
-            pkgFile = candidate;
-            break;
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    const pkgPath = pkgFile ?? path.resolve(start, "..", "..", "package.json");
-    const pkgDir = path.dirname(pkgPath);
-    let version = "unknown";
-    try {
-        const raw = JSON.parse(readFileSync(pkgPath, "utf8"));
-        if (typeof raw.version === "string" && raw.version)
-            version = raw.version;
-    }
-    catch {
-        /* leave unknown — never invent a version */
-    }
-    const out = {
-        path: pkgDir,
-        version,
-    };
-    dir = pkgDir;
-    let gitRoot;
-    for (let i = 0; i < 10; i++) {
-        if (existsSync(path.join(dir, ".git"))) {
-            gitRoot = dir;
-            break;
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    if (gitRoot && isGitRepo(gitRoot)) {
-        const branch = spawnSync("git", ["-C", gitRoot, "rev-parse", "--abbrev-ref", "HEAD"], { encoding: "utf8" });
-        const sha = spawnSync("git", ["-C", gitRoot, "rev-parse", "HEAD"], { encoding: "utf8" });
-        const b = branch.status === 0 ? String(branch.stdout).trim() : "";
-        const s = sha.status === 0 ? String(sha.stdout).trim() : "";
-        if (b)
-            out.branch = b;
-        if (s)
-            out.sha = s;
-    }
-    return out;
-}
-//# sourceMappingURL=server-identity.js.map

package/dist/server-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-identity.js","sourceRoot":"","sources":["../src/server-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IAMpD,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,OAA2B,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,MAAM,GAAG,GAAqE;QAC5E,IAAI,EAAE,MAAM;QACZ,OAAO;KACR,CAAC;IAEF,GAAG,GAAG,MAAM,CAAC;IACb,IAAI,OAA2B,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,GAAG,CAAC;YACd,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,IAAI,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5G,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}