agent-coord-mcp 0.26.17 → 0.26.18

package/dist/roles.js

@@ -1,132 +0,0 @@
-// Canonical role identity, server side (Phase 8 Task 4).
-//
-// MIRROR of hooks/roles.mjs — tsconfig's rootDir is `src`, so this cannot
-// import the hook copy, and the hook copy must stay build-free (the pusher
-// loads it from a bare checkout). test/roles.test.mjs asserts the two agree;
-// change one, change the other.
-//
-// See hooks/roles.mjs for the rationale behind `explicit` and the word-match
-// fallback.
-import { z } from "zod";
-export function slugifyRole(role) {
-    return String(role ?? "")
-        .trim()
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-")
-        .replace(/^-+|-+$/g, "");
-}
-export const GATE_RUNNER_ROLE_IDS = new Set(["qa", "quality", "coordinator", "gate"]);
-export const COORDINATOR_ROLE_IDS = new Set(["coordinator"]);
-// CI receives express-lane DONE: wake. Not a gate-runner — must not grant verdict.
-export const CI_ROLE_IDS = new Set(["ci"]);
-// Console / watchers. May send prefixed messages. Not a gate-runner.
-export const AUTOMATION_ROLE_IDS = new Set(["automation"]);
-// A HUMAN READER. The one carve-out in the typed-record rule (Phase 5.1 Task
-// 12.3): canon already rules "David-facing messages may use normal prose", and
-// a blanket requirement would break the single channel whose reader is a
-// person. `david` is here as well as `human` because the registry entry that
-// exists on this bus today declares role "David" — the id derives to `david`,
-// and a rule that only recognised the canonical spelling would have refused
-// the exact traffic it is written to protect.
-export const HUMAN_ROLE_IDS = new Set(["human", "david"]);
-export function resolveRole(role) {
-    if (role === null || role === undefined)
-        return undefined;
-    if (typeof role === "string") {
-        const roleId = slugifyRole(role);
-        return roleId ? { roleId, displayName: role, explicit: false } : undefined;
-    }
-    if (typeof role === "object") {
-        const declared = typeof role.roleId === "string" ? slugifyRole(role.roleId) : "";
-        const name = typeof role.displayName === "string" && role.displayName
-            ? role.displayName
-            : typeof role.role === "string" && role.role
-                ? role.role
-                : undefined;
-        if (declared)
-            return { roleId: declared, displayName: name ?? declared, explicit: true };
-        if (name)
-            return resolveRole(name);
-    }
-    return undefined;
-}
-export function roleMatches(role, allowedIds) {
-    const resolved = resolveRole(role);
-    if (!resolved)
-        return false;
-    if (allowedIds.has(resolved.roleId))
-        return true;
-    // Word-split applies to DECLARED ids too. It used to be derived-only ("frozen
-    // ids match exactly"), which made precision cost authority: {roleId:"coord-qa"}
-    // was refused `verdict` while the vaguer bare string "coord-qa" passed via the
-    // split — a consumer fleet's QA verdicts were never machine-authorized (2026-08-21).
-    // Freezing still governs identity (the id cannot change); it must never grant
-    // LESS than the derived twin of the same spelling.
-    return resolved.roleId.split("-").some((word) => allowedIds.has(word));
-}
-// The canonical role vocabulary — every authority set plus the classes the
-// cards register. Not an allowlist: any roleId may register; a non-canonical
-// one gets a warning naming this set so the next card uses the exact spelling.
-export const CANONICAL_ROLE_IDS = new Set([
-    "coordinator",
-    "worker",
-    "aide",
-    "qa",
-    "quality",
-    "gate",
-    "ci",
-    "audit",
-    "automation",
-    "human",
-]);
-export function isGateRunner(role) {
-    return roleMatches(role, GATE_RUNNER_ROLE_IDS);
-}
-export function isCoordinator(role) {
-    return roleMatches(role, COORDINATOR_ROLE_IDS);
-}
-export function isCi(role) {
-    return roleMatches(role, CI_ROLE_IDS);
-}
-export function isAutomation(role) {
-    return roleMatches(role, AUTOMATION_ROLE_IDS);
-}
-export function isHuman(role) {
-    return roleMatches(role, HUMAN_ROLE_IDS);
-}
-// Which roles may emit which record.type at the send path. Enforcement lives
-// in messaging.ts (checkRecordAuthority); the table lives here so register/join
-// can ECHO the consequence back at onboarding — a role that cannot emit `go`
-// should learn it when it registers, not when it sends its first work order.
-//
-// NOT A TRUST BOUNDARY — roles are self-declared. See checkRecordAuthority.
-export const RECORD_AUTHORITY = {
-    verdict: { roles: GATE_RUNNER_ROLE_IDS, label: "gate-runner" },
-    go: { roles: COORDINATOR_ROLE_IDS, label: "coordinator" },
-    scope: { roles: COORDINATOR_ROLE_IDS, label: "coordinator" },
-};
-// Split the restricted record types into what this role may and may not emit.
-// Unrestricted types are omitted from both lists — they are nobody's business.
-export function recordAuthorityFor(role) {
-    const mayEmit = [];
-    const mayNotEmit = [];
-    for (const [type, rule] of Object.entries(RECORD_AUTHORITY)) {
-        (roleMatches(role, rule.roles) ? mayEmit : mayNotEmit).push(type);
-    }
-    return { mayEmit, mayNotEmit };
-}
-// Wire shape for `role` on register/join. Either free text (v1: `role: "qa
-// lead"`) or a declared identity (`{roleId: "qa", displayName: "QA gate"}`).
-// Both are supported forever — the string form is not deprecated, it just
-// leaves the id derived rather than frozen.
-//
-// Lives here rather than in tools/ because registry.ts and transport.ts import
-// each other; a schema in either would be a temporal-dead-zone hazard.
-export const roleInputSchema = z.union([
-    z.string(),
-    z.object({
-        roleId: z.string().min(1).optional(),
-        displayName: z.string().min(1).optional(),
-    }),
-]);
-//# sourceMappingURL=roles.js.map

package/dist/roles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,6EAA6E;AAC7E,YAAY;AAEZ,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAC7D,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC3D,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,8CAA8C;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW;YACtD,CAAC,CAAC,IAAI,CAAC,WAAW;YAClB,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI;gBAC1C,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzF,IAAI,IAAI;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,UAAuB;IAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,qFAAqF;IACrF,8EAA8E;IAC9E,mDAAmD;IACnD,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACxC,aAAa;IACb,QAAQ;IACR,MAAM;IACN,IAAI;IACJ,SAAS;IACT,MAAM;IACN,IAAI;IACJ,OAAO;IACP,YAAY;IACZ,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,WAAW,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,WAAW,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAe;IAClC,OAAO,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAe;IACrC,OAAO,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAA0D;IACrF,OAAO,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;IAC9D,EAAE,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;IACzD,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;CAC7D,CAAC;AAEF,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,IAAe;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5D,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC;CACH,CAAC,CAAC"}

package/dist/server-identity.js

@@ -1,82 +0,0 @@
-/*
- * WHICH SERVER PACKAGE IS RUNNING — a LEAF module, importing nothing from
- * `tools/`.
- *
- * It lived in `transport.ts`, and `capabilities.ts` imported it from there. The
- * moment `status` needs to REPORT capabilities, that becomes
- * transport -> capabilities -> transport: a cycle, and the same one Task 9
- * produced when the kind registry sat inside `record-events.ts`. That one only
- * worked because `tools/index.ts` happened to import in the surviving order —
- * a load-ORDER dependency, invisible until something imported a module
- * directly, which is what a consumer or a test does.
- *
- * A cycle that works by luck is not a working cycle, so the shared fact moves
- * out rather than the edge being added on top of it.
- *
- * NOTE WHAT THIS REPORTS AND WHAT IT DOES NOT. `version` is the label in the
- * package.json this process loaded from — CONTEXT for a reader, never evidence
- * of a capability. A published tarball has already been observed carrying a
- * change its version said it could not. Capability questions are answered by
- * `capabilities`, which CALLS the code.
- */
-import { existsSync, readFileSync } from "node:fs";
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { isGitRepo } from "./tools/scopes.js";
-/** Running server package + optional git identity. `fromDir` is a test seam. */
-export function resolveServerIdentity(fromDir) {
-    const start = fromDir ?? path.dirname(fileURLToPath(import.meta.url));
-    let dir = start;
-    let pkgFile;
-    for (let i = 0; i < 8; i++) {
-        const candidate = path.join(dir, "package.json");
-        if (existsSync(candidate)) {
-            pkgFile = candidate;
-            break;
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    const pkgPath = pkgFile ?? path.resolve(start, "..", "..", "package.json");
-    const pkgDir = path.dirname(pkgPath);
-    let version = "unknown";
-    try {
-        const raw = JSON.parse(readFileSync(pkgPath, "utf8"));
-        if (typeof raw.version === "string" && raw.version)
-            version = raw.version;
-    }
-    catch {
-        /* leave unknown — never invent a version */
-    }
-    const out = {
-        path: pkgDir,
-        version,
-    };
-    dir = pkgDir;
-    let gitRoot;
-    for (let i = 0; i < 10; i++) {
-        if (existsSync(path.join(dir, ".git"))) {
-            gitRoot = dir;
-            break;
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    if (gitRoot && isGitRepo(gitRoot)) {
-        const branch = spawnSync("git", ["-C", gitRoot, "rev-parse", "--abbrev-ref", "HEAD"], { encoding: "utf8" });
-        const sha = spawnSync("git", ["-C", gitRoot, "rev-parse", "HEAD"], { encoding: "utf8" });
-        const b = branch.status === 0 ? String(branch.stdout).trim() : "";
-        const s = sha.status === 0 ? String(sha.stdout).trim() : "";
-        if (b)
-            out.branch = b;
-        if (s)
-            out.sha = s;
-    }
-    return out;
-}
-//# sourceMappingURL=server-identity.js.map

package/dist/server-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-identity.js","sourceRoot":"","sources":["../src/server-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IAMpD,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,OAA2B,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,MAAM,GAAG,GAAqE;QAC5E,IAAI,EAAE,MAAM;QACZ,OAAO;KACR,CAAC;IAEF,GAAG,GAAG,MAAM,CAAC;IACb,IAAI,OAA2B,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,GAAG,CAAC;YACd,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,IAAI,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5G,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}