agent-merge-broker 0.14.2 → 0.15.1

package/README.md

@@ -18,22 +18,26 @@ protection, or forge merge queue.
 
 ## Release status
 
-Version **0.14.2** includes the complete Coordinate workflow and trusted local-ref Gate validation,
+Version **0.15.1** includes the complete Coordinate workflow and trusted local-ref Gate validation,
 with Gate diagnostics, abandonment and archival, detached signed validation evidence, offline
-verification, stricter state diagnostics, and release safeguards. The documentation tracks source;
+verification, stricter state diagnostics, leaner packaging, storage maintenance, and release safeguards.
+It is a security release: upgrade from 0.15.0, and see the
+[changelog](https://github.com/WeSpitfire/agent-merge-broker/blob/main/CHANGELOG.md) for upgrade notes.
+The documentation tracks source;
 check the [npm version history](https://www.npmjs.com/package/agent-merge-broker?activeTab=versions)
 for published availability.
 
 The `v0.14.0` and `v0.14.1` GitHub tags remain available, but neither version was published to npm.
-Version 0.14.2 is the corrected npm release target for these features; the registry confirms when it
-is available.
+The companion core package is published separately; confirm its version in
+[npm's core package history](https://www.npmjs.com/package/agent-merge-broker-core?activeTab=versions).
 
-Version 0.14.2 requires **Node.js 22 or newer**; version 0.13.0 supported Node.js 20.12 or newer.
+Version 0.15.1 requires **Node.js 22 or newer**; version 0.13.0 supported Node.js 20.12 or newer.
 Git 2.31+ is required for Coordinate; Gate requires Git 2.46+. Linux, macOS, and Windows are
 supported. GitHub CLI is required only for GitHub pull-request publication.
 
-See [Compatibility](docs/COMPATIBILITY.md), [Changelog](CHANGELOG.md), and
-[Roadmap](ROADMAP.md) for the exact boundaries. Gate approval, publication, and merge authorization
+See [Compatibility](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/COMPATIBILITY.md),
+[Changelog](https://github.com/WeSpitfire/agent-merge-broker/blob/main/CHANGELOG.md), and
+[Roadmap](https://github.com/WeSpitfire/agent-merge-broker/blob/main/ROADMAP.md) for the exact boundaries. Gate approval, publication, and merge authorization
 remain planned.
 
 ## Try both routes locally
@@ -53,16 +57,31 @@ The Coordinate example combines four commits from two workers and rejects an ove
 The Gate example validates one candidate, rejects another, signs the accepted result, verifies it
 offline, and previews archival.
 
-## Install and review repository policy
+## Install once, use across projects
+
+Keep the tool outside your project's dependencies with a version-pinned global installation:
 
 ```bash
-npm install --save-dev agent-merge-broker
-npx merge-broker init --base main --base-ref origin/main --remote origin
+npm install --global agent-merge-broker@0.15.1
+# From the repository you want to coordinate:
+merge-broker init --base main --base-ref origin/main --remote origin
 git add .merge-broker AGENTS.md
 git commit -m 'Configure Agent Merge Broker'
-npx merge-broker doctor
+merge-broker doctor
 ```
 
+This does not add the broker to your project's `package.json` or `node_modules`. Prefer a
+project-local, lockfile-pinned dev dependency when a team or CI needs to reproduce the entire
+dependency tree. For pinned execution through npm's cache, or local installation instructions, see
+[Getting started](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/GETTING_STARTED.md#2-install-and-initialize).
+
+`agent-merge-broker-core` offers the same Coordinate/Gate CLI and core Node API
+without the MCP server or SDK dependency. Keep `agent-merge-broker` for MCP support and existing
+imports. Choose one package per installation because they share CLI aliases, and confirm the
+desired version is published for that package. Since 0.15.0, tarballs omit debug maps and long guides/examples while keeping
+runtime code, TypeScript definitions, schemas, templates, README, and license. Full source and
+guides remain on GitHub.
+
 Initialization detects validation commands the repository already declares. Review
 `.merge-broker/config.json` before using it: configuration is executable policy, and validators run
 with the broker user's permissions. The public signing key belongs in committed policy; the private
@@ -76,18 +95,18 @@ protected-branch provenance verification load their applicable policy from the e
 In each worker's linked worktree:
 
 ```bash
-npx merge-broker task claim SEARCH-1 --holder worker/search --path 'src/search/**'
+merge-broker task claim SEARCH-1 --holder worker/search --path 'src/search/**'
 # Edit and commit the change.
-npx merge-broker task candidate SEARCH-1 --since-base
+merge-broker task candidate SEARCH-1 --since-base
 ```
 
 The integration owner then runs:
 
 ```bash
-npx merge-broker plan
-npx merge-broker integrate --dry-run
-npx merge-broker integrate
-npx merge-broker status
+merge-broker plan
+merge-broker integrate --dry-run
+merge-broker integrate
+merge-broker status
 ```
 
 Expiring leases reduce predictable collisions; commit receipts identify immutable work. The broker
@@ -97,8 +116,8 @@ branch, or GitHub pull request. Optional approval binds evidence and permission
 candidate, base, and policy revision. Durable intents allow interrupted publication and merge
 decisions to be reconciled.
 
-Use [Getting started](docs/GETTING_STARTED.md) for validation, publication, approval, service, and
-recovery recipes. The [worker protocol](docs/PROTOCOL.md) documents CLI/JSON, Node, and permission-
+Use [Getting started](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/GETTING_STARTED.md) for validation, publication, approval, service, and
+recovery recipes. The [worker protocol](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/PROTOCOL.md) documents CLI/JSON, Node, and permission-
 separated stdio MCP integration.
 
 ## Route 2: validate a trusted existing branch
@@ -106,9 +125,9 @@ separated stdio MCP integration.
 From a reviewed checkout whose protected base contains the committed broker policy:
 
 ```bash
-npx merge-broker candidate authority setup
-npx merge-broker candidate adopt --ref refs/heads/producer/candidate
-npx merge-broker candidate show <submission-id>
+merge-broker candidate authority setup
+merge-broker candidate adopt --ref refs/heads/producer/candidate
+merge-broker candidate show <submission-id>
 ```
 
 The candidate must already exist locally and be a nonempty linear descendant of the registered
@@ -116,7 +135,7 @@ base. Gate derives its history and paths, materializes its raw Git bytes, and ru
 broker-authoritative validators. A `SubmissionRecord` reports `validated`, `rejected`, or `failed`
 without inventing tasks or leases. A rejected candidate exits nonzero.
 
-Version 0.14.2 includes these operational commands:
+Version 0.15.0 includes these operational commands:
 
 ```bash
 merge-broker doctor --gate
@@ -130,11 +149,11 @@ merge-broker candidate list --all
 Detached attestations use Ed25519 DSSE and a versioned in-toto validation statement. Offline
 verification requires an independently trusted key and expected commit, tree, base, policy digest,
 and authority digest. A valid signature can describe a rejection; validation evidence never grants
-merge authorization. [Protocol](docs/PROTOCOL.md) includes the full verifier command, abandonment,
-retention options, and immutable [schema identities](schemas/identities.json).
+merge authorization. [Protocol](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/PROTOCOL.md) includes the full verifier command, abandonment,
+retention options, and immutable [schema identities](https://github.com/WeSpitfire/agent-merge-broker/blob/main/schemas/identities.json).
 
 Gate accepts trusted local code. A disposable worktree is not an execution sandbox. Read the
-[security model](docs/SECURITY.md) before choosing the broker host and credentials.
+[security model](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/SECURITY.md) before choosing the broker host and credentials.
 
 ## Operate and contribute
 
@@ -143,14 +162,22 @@ replays local interrupted operations. Coordinate publication uses `batch publish
 and `batch refresh` to observe the forge before proceeding. Gate archival preserves audit records,
 and releasing a retained Git ref requires an explicit option.
 
+`storage show` reports broker-managed file sizes without reading file contents.
+`storage compact --older-than 30` previews lossless compression of closed audit-log rotations;
+add `--apply` to perform it. It does not prune evidence, recovery state, keys, worktrees, or Git refs.
+Upgrade all audit readers first: versions before 0.15.0 cannot read compressed rotations.
+See the [storage recipe](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/GETTING_STARTED.md#inspect-and-compact-storage).
+
 For protected-branch enforcement of Coordinate provenance, pin the composite action to the matching
-release tag: `WeSpitfire/agent-merge-broker/verify@v0.14.2`. Configuration examples are in
-[Getting started](docs/GETTING_STARTED.md) and the [release guide](docs/RELEASING.md).
+release tag: `WeSpitfire/agent-merge-broker/verify@v0.15.1`. Configuration examples are in
+[Getting started](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/GETTING_STARTED.md) and the [release guide](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/RELEASING.md).
 
 Source verification includes the full test suite, both examples, and installation of the actual npm
 tarball. Publication waits for the same immutable commit to pass Linux, macOS, and Windows checks
 and publishes the tested tarball through npm trusted publishing.
 
-See [Architecture](docs/ARCHITECTURE.md), [Vision](VISION.md), [Contributing](CONTRIBUTING.md), and
-[Support](SUPPORT.md). The project is licensed under [Apache-2.0](LICENSE). Pre-1.0 persisted formats
+See [Architecture](https://github.com/WeSpitfire/agent-merge-broker/blob/main/docs/ARCHITECTURE.md),
+[Vision](https://github.com/WeSpitfire/agent-merge-broker/blob/main/VISION.md),
+[Contributing](https://github.com/WeSpitfire/agent-merge-broker/blob/main/CONTRIBUTING.md), and
+[Support](https://github.com/WeSpitfire/agent-merge-broker/blob/main/SUPPORT.md). The project is licensed under [Apache-2.0](LICENSE). Pre-1.0 persisted formats
 are versioned, but compatibility changes may still require a documented migration.

package/dist/bootstrap.d.ts

@@ -14,4 +14,3 @@ export declare function detectBootstrapPlan(root: string): Promise<BootstrapPlan
 export declare function applyBootstrapPlan(config: BrokerConfig, plan: BootstrapPlan): boolean;
 export declare function installAgentContract(root: string): Promise<AgentContractResult>;
 export declare function hasAgentContract(root: string): Promise<boolean>;
-//# sourceMappingURL=bootstrap.d.ts.map

package/dist/bootstrap.js

@@ -359,4 +359,3 @@ export async function hasAgentContract(root) {
     const contents = await readFile(target, "utf8");
     return contents.includes(AGENT_BLOCK_START) && contents.includes(AGENT_BLOCK_END);
 }
-//# sourceMappingURL=bootstrap.js.map

package/dist/broker.d.ts

@@ -307,4 +307,3 @@ export declare class MergeBroker {
         gate?: boolean;
     }): Promise<Record<string, unknown>>;
 }
-//# sourceMappingURL=broker.d.ts.map

package/dist/broker.js

@@ -853,6 +853,8 @@ export class MergeBroker {
      * claim on anything.
      */
     async validateWorkingTree(options = {}) {
+        if (options.taskId !== undefined)
+            assertTaskId(options.taskId);
         const scope = options.scope ?? "all";
         const cwd = options.cwd ? path.resolve(options.cwd) : this.repo.root;
         const baseRef = options.base ?? this.config.baseRef;
@@ -3848,6 +3850,15 @@ export class MergeBroker {
         }
         const validationReady = this.config.validation.authority === "required-ci"
             || this.config.validation.authoritative.length > 0;
+        // Validators run as this OS user. Removing key variables from their environment does not stop
+        // them from reading the key file or this process's memory, so a signature cannot distinguish a
+        // real batch from one forged by code a worker contributed to a test, build script, or dependency.
+        const signingKeyReachableByValidators = Boolean(signingKeyId
+            && (this.config.validation.focused.length > 0
+                || (this.config.validation.authority === "broker" && this.config.validation.authoritative.length > 0)));
+        if (signingKeyReachableByValidators) {
+            warnings.push("Local validators run as the broker's OS user and can read its provenance signing key. If workers can change code those validators execute, a worker can forge signed provenance. Integrate untrusted work only where no local validator runs worker code, for example required-ci authority without focused validators.");
+        }
         if (!validationReady) {
             warnings.push("validation.authority is broker, but no authoritative validators are configured. Add validation.authoritative commands or explicitly delegate the complete decision to required CI.");
         }
@@ -3960,6 +3971,7 @@ export class MergeBroker {
             authoritativeValidators: this.config.validation.authoritative.map((validator) => validator.name),
             provenanceAuthenticated: Boolean(provenance?.enabled && provenance.requireSignature && signingKeyId),
             provenanceKeyId: signingKeyId,
+            signingKeyReachableByValidators,
             runningBatches,
             pendingCandidateRevisions,
             policy: { configCommitted },
@@ -3973,4 +3985,3 @@ export class MergeBroker {
         };
     }
 }
-//# sourceMappingURL=broker.js.map

package/dist/candidate-lifecycle.d.ts

@@ -16,4 +16,3 @@ export declare function assertCandidateBinding(candidate: CandidateRecord, bindi
 }): void;
 export declare function assertCurrentApprovalPolicy(config: BrokerConfig, candidate: CandidateRecord): void;
 export declare function upsertEvidence(candidate: CandidateRecord, evidence: VerificationEvidence): void;
-//# sourceMappingURL=candidate-lifecycle.d.ts.map

package/dist/candidate-lifecycle.js

@@ -169,4 +169,3 @@ export function upsertEvidence(candidate, evidence) {
     candidate.state = candidateState(candidate);
     delete candidate.reason;
 }
-//# sourceMappingURL=candidate-lifecycle.js.map

package/dist/cli.d.ts

@@ -1,3 +1,2 @@
 #!/usr/bin/env node
 export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/cli.js

@@ -9,6 +9,9 @@ import { BrokerError, CommandError } from "./errors.js";
 import { formatServeEvent, isErrorEvent, serveEventJson, shouldReportIdle, } from "./serve-log.js";
 import { MergeBroker } from "./broker.js";
 import { GitRepository } from "./git.js";
+import { loadConfig } from "./config.js";
+import { StateStore } from "./store.js";
+import { compactAuditStorage, inspectStorage } from "./storage.js";
 import { prePushHook } from "./hooks.js";
 import { formatBrokerStatus } from "./status.js";
 import { createSupportBundle } from "./support.js";
@@ -1017,6 +1020,7 @@ program
         provenanceDirectory: options.provenanceDirectory ?? policy.provenanceDirectory ?? ".merge-broker/attestations",
         ...(policy.publicKey ? { publicKey: policy.publicKey } : {}),
         requireSignature: policy.requireSignature ?? false,
+        ...(policy.validationAuthority ? { validationAuthority: policy.validationAuthority } : {}),
     });
     output(result, [
         `${result.authenticated ? "Authenticated" : "Structurally verified"} broker batch ${result.batchId}.`,
@@ -1048,6 +1052,49 @@ program
         ...(result.archivePath ? [`Archive: ${result.archivePath}`] : []),
     ].join("\n"));
 });
+const storage = program.command("storage").description("inspect broker storage and compact closed audit logs without deleting evidence");
+// Inspection/preview must not initialize absent state or create keys and lock directories.
+async function storageContext() {
+    const repo = await GitRepository.discover(globalOptions().cwd);
+    const config = await loadConfig(repo.root);
+    const store = new StateStore(repo.commonGitDir, config.stateDirectory, config.leases.lockTimeoutSeconds);
+    return { repo, config, store };
+}
+storage.command("show")
+    .description("report logical bytes and file counts; never read stored secrets or follow symlinks")
+    .action(async () => {
+    const { repo, config, store } = await storageContext();
+    const report = await inspectStorage(store, {
+        repositoryRoot: repo.root,
+        ...(config.integration.provenance?.directory ? { provenanceDirectory: config.integration.provenance.directory } : {}),
+    });
+    output(report, [
+        `Broker storage: ${report.logicalBytes.toLocaleString("en-US")} logical bytes in ${report.files} files${report.complete ? "" : " (partial)"}.`,
+        ...report.categories.map((item) => `  ${item.category}: ${item.logicalBytes.toLocaleString("en-US")} bytes, ${item.files} files`),
+        "Excludes npm installations, general repository files, Git object history, and filesystem allocation overhead.",
+        ...report.skipped.map((item) => `Skipped ${item.path}: ${item.reason}`),
+    ].join("\n"));
+});
+storage.command("compact")
+    .description("preview lossless compression of closed audit logs; active and recovery data stay untouched")
+    .option("--older-than <days>", "minimum modification age of closed audit logs", "30")
+    .option("--apply", "write verified gzip copies and remove only their redundant originals")
+    .action(async (options) => {
+    const { store } = await storageContext();
+    const result = await compactAuditStorage(store, {
+        olderThanDays: Number(options.olderThan),
+        apply: options.apply ?? false,
+    });
+    output(result, [
+        result.applied
+            ? `Compressed ${result.compressedFiles} closed audit segments; saved ${result.savedBytes.toLocaleString("en-US")} bytes.`
+            : `Eligible: ${result.eligibleFiles} closed audit segments (${result.eligibleBytes.toLocaleString("en-US")} bytes). Preview only; add --apply to compress.`,
+        "Audit evidence is preserved. No active state, signing keys, worktrees, or retained Git refs are deleted.",
+        "Compacted audit history requires a broker version with gzip archive support.",
+        ...result.entries.map((item) => `${item.status}: ${item.path}${item.reason ? ` — ${item.reason}` : ""}`),
+        ...result.skipped.map((item) => `Skipped ${item.path}: ${item.reason}`),
+    ].join("\n"));
+});
 program
     .command("recover")
     .description("recover interrupted integrations and candidate validation submissions")
@@ -1325,4 +1372,3 @@ program.parseAsync().catch((error) => {
     }
     process.exitCode = 1;
 });
-//# sourceMappingURL=cli.js.map

package/dist/config.d.ts

@@ -19,4 +19,3 @@ export declare function isSafeStateDirectory(value: unknown): value is string;
 export declare function validateConfig(value: unknown): BrokerConfig;
 export declare function loadConfig(repoRoot: string): Promise<BrokerConfig>;
 export declare function writeConfig(repoRoot: string, config: BrokerConfig): Promise<string>;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -524,4 +524,3 @@ export async function writeConfig(repoRoot, config) {
     await writeFile(target, `${JSON.stringify(config, null, 2)}\n`, "utf8");
     return target;
 }
-//# sourceMappingURL=config.js.map

package/dist/core.d.ts

@@ -0,0 +1,19 @@
+export { MergeBroker, type AdoptCandidateInput, type ClaimTaskInput, type RegisterCandidateAuthorityOptions, type RegisterTaskInput, } from "./broker.js";
+export { adoptedRef, GitRepository, type LinearCommitHistory, type PinnedGitCommit, type WorktreeInfo, } from "./git.js";
+export { StateStore, type ArchivedStateSlice, type LockStatus } from "./store.js";
+export { inspectStorage, compactAuditStorage, type StorageCategory, type StorageReport, type StorageCompactionOptions, type StorageCompactionResult, } from "./storage.js";
+export { installHooks, prePushHook, uninstallHooks, type HookInstallation } from "./hooks.js";
+export { describeServeEvent, formatServeEvent, serveEventJson, shouldReportIdle, type ServeEvent, } from "./serve-log.js";
+export { currentServicePlatform, installService, launchdPlist, serviceFilePath, serviceName, systemdUnit, windowsTaskXml, quoteWindowsArgument, uninstallService, type ServiceDefinition, type ServiceInstallation, type ServiceOptions, type ServicePlatform, } from "./service.js";
+export { defaultConfig, initializeConfig, loadConfig, validateConfig, writeConfig } from "./config.js";
+export { applyBootstrapPlan, detectBootstrapPlan, hasAgentContract, installAgentContract, type AgentContractResult, type BootstrapPlan, } from "./bootstrap.js";
+export { scheduleTasks } from "./scheduler.js";
+export { formatBrokerStatus } from "./status.js";
+export { createSupportBundle, sanitizeSupportData, type SupportBundle } from "./support.js";
+export { githubCliPublisher, type ForgePublisher, type PublicationResult, type PullRequestState, } from "./publisher.js";
+export { buildBatchProvenance, generateProvenanceSigningIdentity, provenanceKeyId, provenancePath, publicKeyFromPrivate, signBatchProvenance, validateProvenancePublicKey, verifyBatchProvenanceSignature, type ProvenanceSigningIdentity, } from "./provenance.js";
+export { batchIdFromBranch, policyFromBase, verifyProvenance, type ProvenanceVerification, type VerifyProvenanceOptions, } from "./verify.js";
+export { BrokerError, CommandError, ValidationError } from "./errors.js";
+export { signSubmissionAttestation, verifySubmissionAttestation, submissionAttestationEnvelopeSchema, submissionAttestationStatementSchema, SUBMISSION_ATTESTATION_PAYLOAD_TYPE, SUBMISSION_ATTESTATION_PREDICATE_TYPE, type SubmissionAttestationEnvelope, type SubmissionAttestationStatement, type SubmissionAttestationVerificationOptions, type SubmissionAttestationVerificationResult, } from "./submission-attestation.js";
+export { schemaFingerprint, schemaSnapshotIdentity } from "./schema-identity.js";
+export type * from "./types.js";

package/dist/core.js

@@ -0,0 +1,18 @@
+export { MergeBroker, } from "./broker.js";
+export { adoptedRef, GitRepository, } from "./git.js";
+export { StateStore } from "./store.js";
+export { inspectStorage, compactAuditStorage, } from "./storage.js";
+export { installHooks, prePushHook, uninstallHooks } from "./hooks.js";
+export { describeServeEvent, formatServeEvent, serveEventJson, shouldReportIdle, } from "./serve-log.js";
+export { currentServicePlatform, installService, launchdPlist, serviceFilePath, serviceName, systemdUnit, windowsTaskXml, quoteWindowsArgument, uninstallService, } from "./service.js";
+export { defaultConfig, initializeConfig, loadConfig, validateConfig, writeConfig } from "./config.js";
+export { applyBootstrapPlan, detectBootstrapPlan, hasAgentContract, installAgentContract, } from "./bootstrap.js";
+export { scheduleTasks } from "./scheduler.js";
+export { formatBrokerStatus } from "./status.js";
+export { createSupportBundle, sanitizeSupportData } from "./support.js";
+export { githubCliPublisher, } from "./publisher.js";
+export { buildBatchProvenance, generateProvenanceSigningIdentity, provenanceKeyId, provenancePath, publicKeyFromPrivate, signBatchProvenance, validateProvenancePublicKey, verifyBatchProvenanceSignature, } from "./provenance.js";
+export { batchIdFromBranch, policyFromBase, verifyProvenance, } from "./verify.js";
+export { BrokerError, CommandError, ValidationError } from "./errors.js";
+export { signSubmissionAttestation, verifySubmissionAttestation, submissionAttestationEnvelopeSchema, submissionAttestationStatementSchema, SUBMISSION_ATTESTATION_PAYLOAD_TYPE, SUBMISSION_ATTESTATION_PREDICATE_TYPE, } from "./submission-attestation.js";
+export { schemaFingerprint, schemaSnapshotIdentity } from "./schema-identity.js";

package/dist/errors.d.ts

@@ -13,4 +13,3 @@ export declare class CommandError extends BrokerError {
 export declare class ValidationError extends BrokerError {
     constructor(message: string, details?: Record<string, unknown>);
 }
-//# sourceMappingURL=errors.d.ts.map

package/dist/errors.js

@@ -33,4 +33,3 @@ export class ValidationError extends BrokerError {
         this.name = "ValidationError";
     }
 }
-//# sourceMappingURL=errors.js.map

package/dist/gate-authority.d.ts

@@ -19,4 +19,3 @@ export declare class GateAuthorityStore {
     private atomicReplace;
     private writeTemporary;
 }
-//# sourceMappingURL=gate-authority.d.ts.map

package/dist/gate-authority.js

@@ -285,4 +285,3 @@ export class GateAuthorityStore {
         return temporary;
     }
 }
-//# sourceMappingURL=gate-authority.js.map

package/dist/git-locators.d.ts

@@ -5,4 +5,3 @@ export declare function canonicalRemoteUrl(value: string, repoRoot: string): str
 export declare function localFileRemotePath(value: string, remote: string, purpose: "fetch" | "publication"): string;
 /** Remove one command record terminator without changing legal whitespace in a local pathname. */
 export declare function singleGitOutputRecord(output: string): string | undefined;
-//# sourceMappingURL=git-locators.d.ts.map

package/dist/git-locators.js

@@ -107,4 +107,3 @@ export function singleGitOutputRecord(output) {
     // risk resolving the replacement-character spelling to a different repository on disk.
     return value.length > 0 && !/[\0\r\n\ufffd]/u.test(value) ? value : undefined;
 }
-//# sourceMappingURL=git-locators.js.map

package/dist/git.d.ts

@@ -212,4 +212,3 @@ export declare class GitRepository {
     replaceLocalBranch(branch: string, nextHead: string): Promise<void>;
     listWorktrees(): Promise<WorktreeInfo[]>;
 }
-//# sourceMappingURL=git.d.ts.map

package/dist/git.js

@@ -6,7 +6,7 @@ import { chmod, lchmod, lstat, mkdir, mkdtemp, opendir, readFile, readlink, real
 import { remoteUrlFingerprint, forgeRepositoryFromRemote, canonicalRemoteUrl, localFileRemotePath, singleGitOutputRecord, } from "./git-locators.js";
 export { remoteUrlFingerprint, isHostQualifiedForgeRepository } from "./git-locators.js";
 import { BrokerError } from "./errors.js";
-import { runCommand } from "./process.js";
+import { runCommand, withoutCurrentDirectoryExecutableSearch } from "./process.js";
 const ADOPTED_REF_PREFIX = "refs/merge-broker/adopted";
 const GATE_MINIMUM_GIT = [2, 46];
 const GATE_MAX_COMMIT_BYTES = 1 * 1_024 * 1_024;
@@ -192,6 +192,12 @@ export class GitRepository {
         return new GitRepository(root, path.resolve(common.stdout.trim()));
     }
     async git(args, cwd = this.root, allowFailure = false) {
+        if (path.resolve(cwd) !== path.resolve(this.root)) {
+            // A relative core.hooksPath -- written by install-hooks, husky, and similar tools -- resolves
+            // against the worktree Git runs in. In an integration or worker worktree that directory is
+            // submitted content, and even read-mostly commands such as status can fire index hooks.
+            return await this.withIsolatedHooks(async (hooksDirectory) => await runCommand("git", ["-c", `core.hooksPath=${hooksDirectory}`, ...args], { cwd, allowFailure }));
+        }
         return await runCommand("git", args, { cwd, allowFailure });
     }
     /** Run Git without allowing a partial/promisor clone to fetch missing objects implicitly. */
@@ -436,13 +442,14 @@ export class GitRepository {
     /** Capture bounded binary Git output without text decoding or promisor lazy fetch. */
     async localObjectGitBuffer(args, cwd, input, maxOutputBytes) {
         return await new Promise((resolve, reject) => {
-            const child = spawn("git", [...GATE_GIT_CONFIG_ARGUMENTS, ...args], {
+            const env = localGateGitEnvironment();
+            const child = withoutCurrentDirectoryExecutableSearch(() => spawn("git", [...GATE_GIT_CONFIG_ARGUMENTS, ...args], {
                 cwd,
-                env: localGateGitEnvironment(),
+                env,
                 shell: false,
                 stdio: "pipe",
                 windowsHide: true,
-            });
+            }));
             const chunks = [];
             const errors = [];
             let outputBytes = 0;
@@ -2273,10 +2280,27 @@ export class GitRepository {
     async commitGeneratedFile(cwd, relativePath, contents, message) {
         const target = path.resolve(cwd, relativePath);
         const relative = path.relative(cwd, target);
-        if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        if (relative === "" || relative.startsWith("..") || path.isAbsolute(relative)) {
             throw new BrokerError("UNSAFE_PATH", `Generated file escapes the integration worktree: ${relativePath}`);
         }
-        await mkdir(path.dirname(target), { recursive: true });
+        // The containing directories come from submitted content. A committed symlink at any component
+        // would otherwise redirect the write outside the worktree before `git add` refuses the path.
+        let current = cwd;
+        const components = relative.split(path.sep);
+        for (const [index, component] of components.entries()) {
+            current = path.join(current, component);
+            const status = await lstat(current).catch((error) => {
+                if (error.code === "ENOENT")
+                    return undefined;
+                throw error;
+            });
+            const isFinal = index === components.length - 1;
+            if (status?.isSymbolicLink() || (status && !isFinal && !status.isDirectory())) {
+                throw new BrokerError("UNSAFE_PATH", `Generated file path passes through a link or non-directory in the integration worktree: ${relativePath}`);
+            }
+            if (!status && !isFinal)
+                await mkdir(current);
+        }
         await writeFile(target, contents, "utf8");
         await this.git(["add", "--", relativePath], cwd);
         await this.brokerCommitGit(["commit", "-m", message], cwd);
@@ -2366,4 +2390,3 @@ export class GitRepository {
         return records;
     }
 }
-//# sourceMappingURL=git.js.map

package/dist/hooks.d.ts

@@ -19,4 +19,3 @@ export declare function installHooks(options: {
     force?: boolean;
 }): Promise<HookInstallation>;
 export declare function uninstallHooks(repo: GitRepository): Promise<HookInstallation>;
-//# sourceMappingURL=hooks.d.ts.map

package/dist/hooks.js

@@ -123,4 +123,3 @@ export async function uninstallHooks(repo) {
     }
     return { hooksPath, hookFile, installed: false };
 }
-//# sourceMappingURL=hooks.js.map

package/dist/index.d.ts

@@ -1,20 +1,2 @@
-export { MergeBroker, type AdoptCandidateInput, type ClaimTaskInput, type RegisterCandidateAuthorityOptions, type RegisterTaskInput, } from "./broker.js";
-export { adoptedRef, GitRepository, type LinearCommitHistory, type PinnedGitCommit, type WorktreeInfo, } from "./git.js";
-export { StateStore, type ArchivedStateSlice, type LockStatus } from "./store.js";
-export { installHooks, prePushHook, uninstallHooks, type HookInstallation } from "./hooks.js";
-export { describeServeEvent, formatServeEvent, serveEventJson, shouldReportIdle, type ServeEvent, } from "./serve-log.js";
-export { currentServicePlatform, installService, launchdPlist, serviceFilePath, serviceName, systemdUnit, windowsTaskXml, quoteWindowsArgument, uninstallService, type ServiceDefinition, type ServiceInstallation, type ServiceOptions, type ServicePlatform, } from "./service.js";
-export { defaultConfig, initializeConfig, loadConfig, validateConfig, writeConfig } from "./config.js";
-export { applyBootstrapPlan, detectBootstrapPlan, hasAgentContract, installAgentContract, type AgentContractResult, type BootstrapPlan, } from "./bootstrap.js";
-export { scheduleTasks } from "./scheduler.js";
-export { formatBrokerStatus } from "./status.js";
-export { createSupportBundle, sanitizeSupportData, type SupportBundle } from "./support.js";
+export * from "./core.js";
 export { createMcpServer, mcpToolNames, type McpProfile } from "./mcp.js";
-export { githubCliPublisher, type ForgePublisher, type PublicationResult, type PullRequestState, } from "./publisher.js";
-export { buildBatchProvenance, generateProvenanceSigningIdentity, provenanceKeyId, provenancePath, publicKeyFromPrivate, signBatchProvenance, validateProvenancePublicKey, verifyBatchProvenanceSignature, type ProvenanceSigningIdentity, } from "./provenance.js";
-export { batchIdFromBranch, policyFromBase, verifyProvenance, type ProvenanceVerification, type VerifyProvenanceOptions, } from "./verify.js";
-export { BrokerError, CommandError, ValidationError } from "./errors.js";
-export { signSubmissionAttestation, verifySubmissionAttestation, submissionAttestationEnvelopeSchema, submissionAttestationStatementSchema, SUBMISSION_ATTESTATION_PAYLOAD_TYPE, SUBMISSION_ATTESTATION_PREDICATE_TYPE, type SubmissionAttestationEnvelope, type SubmissionAttestationStatement, type SubmissionAttestationVerificationOptions, type SubmissionAttestationVerificationResult, } from "./submission-attestation.js";
-export { schemaFingerprint, schemaSnapshotIdentity } from "./schema-identity.js";
-export type * from "./types.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,19 +1,3 @@
-export { MergeBroker, } from "./broker.js";
-export { adoptedRef, GitRepository, } from "./git.js";
-export { StateStore } from "./store.js";
-export { installHooks, prePushHook, uninstallHooks } from "./hooks.js";
-export { describeServeEvent, formatServeEvent, serveEventJson, shouldReportIdle, } from "./serve-log.js";
-export { currentServicePlatform, installService, launchdPlist, serviceFilePath, serviceName, systemdUnit, windowsTaskXml, quoteWindowsArgument, uninstallService, } from "./service.js";
-export { defaultConfig, initializeConfig, loadConfig, validateConfig, writeConfig } from "./config.js";
-export { applyBootstrapPlan, detectBootstrapPlan, hasAgentContract, installAgentContract, } from "./bootstrap.js";
-export { scheduleTasks } from "./scheduler.js";
-export { formatBrokerStatus } from "./status.js";
-export { createSupportBundle, sanitizeSupportData } from "./support.js";
+// Preserve the full package's public API; CLI-only consumers use the shared core entry point.
+export * from "./core.js";
 export { createMcpServer, mcpToolNames } from "./mcp.js";
-export { githubCliPublisher, } from "./publisher.js";
-export { buildBatchProvenance, generateProvenanceSigningIdentity, provenanceKeyId, provenancePath, publicKeyFromPrivate, signBatchProvenance, validateProvenancePublicKey, verifyBatchProvenanceSignature, } from "./provenance.js";
-export { batchIdFromBranch, policyFromBase, verifyProvenance, } from "./verify.js";
-export { BrokerError, CommandError, ValidationError } from "./errors.js";
-export { signSubmissionAttestation, verifySubmissionAttestation, submissionAttestationEnvelopeSchema, submissionAttestationStatementSchema, SUBMISSION_ATTESTATION_PAYLOAD_TYPE, SUBMISSION_ATTESTATION_PREDICATE_TYPE, } from "./submission-attestation.js";
-export { schemaFingerprint, schemaSnapshotIdentity } from "./schema-identity.js";
-//# sourceMappingURL=index.js.map

package/dist/mcp-cli.d.ts

@@ -1,3 +1,2 @@
 #!/usr/bin/env node
 export {};
-//# sourceMappingURL=mcp-cli.d.ts.map

package/dist/mcp-cli.js

@@ -18,4 +18,3 @@ for (const signal of ["SIGINT", "SIGTERM"]) {
         void handle.close().finally(() => process.exit(0));
     });
 }
-//# sourceMappingURL=mcp-cli.js.map

package/dist/mcp.d.ts

@@ -9,5 +9,9 @@ export declare function createMcpServer(options?: {
     cwd?: string;
     profile?: McpProfile;
     version?: string;
+    /**
+     * Stable worker identity for this server. Defaults to MERGE_BROKER_AGENT. When set, a restarted
+     * worker server may resume leases held under exactly this identity.
+     */
+    agent?: string;
 }): McpServer;
-//# sourceMappingURL=mcp.d.ts.map