agent-nuvira 2.7.0 → 2.7.1

package/dist/nlu/intent.js

@@ -85,7 +85,11 @@ export function matchConfigureRule(text) {
  * (test is not a writing artifact) still resolves to create.
  */
 export function matchWriteRule(text) {
-    const writingObject = /\b(?:essay|poem|poetry|story|short story|letter|article|blog(?: post)?|paragraph|composition|novel|dialogue|speech|caption|advertisement|review|summary|note|message|email|homework|assignment)\b/i;
+    // Songs/hymns/bha_jans/shayari were missing (observed live: "Write a song in
+    // hindi … for my daughter" routed to the DEVELOPER pipeline). Keep the
+    // explicit list (fast, precise) but treat it as an allowlist WITH a
+    // fallback, not the only path.
+    const writingObject = /\b(?:essay|poem|poetry|song|lyrics|hymn|anthem|shayari|ghazal|jingle|story|short story|letter|article|blog(?: post)?|paragraph|composition|novel|dialogue|screenplay|speech|caption|advertisement|review|summary|note|message|email|homework|assignment)\b/i;
     // Verb + article + writing object: "write an essay on elephants for class 4".
     if (/^(?:please\s+)?(?:write|build|make|create|draft|compose|prepare)\s+(?:a|an|the|new|my|our)\s+/i.test(text) &&
         writingObject.test(text)) {
@@ -111,8 +115,21 @@ export function matchCreateRule(text) {
     // here (and in the object-noun branch below) — NOT in the verb-initial list
     // — so the common developer phrasing "add auth to the app" routes to dev
     // mode while "add 2 + 2" (no article, no project noun) never false-positives.
-    if (/^(?:please\s+)?(?:build|write|make|add)\s+(?:a|an|the|new)\s+/i.test(text)) {
-        return { intent: 'create', confidence: 0.85, modeHint: 'dev' };
+    // GUARD (observed live: "Write a song in hindi … for my daughter" hit this
+    // branch and spun up the developer pipeline): when the OBJECT is explicitly
+    // creative (a person-centric/creative frame — "for my daughter", "about
+    // love", a language of expression), the ask is content, not code. The
+    // pipeline must never run for it — matchWriteRule's artifact list can never
+    // cover every creative noun (song, lullaby, rap, …).
+    const articleMatch = /^(?:please\s+)?(?:build|write|make|add)\s+(?:a|an|the|new)\s+/i.exec(text);
+    if (articleMatch) {
+        const creativeFrame = /\bfor (?:my|his|her|our)\b/i.test(text) ||
+            /\babout (?:love|life|friendship|family|her|him|them|us|my|his)\b/i.test(text) ||
+            /\bin (?:hindi|english|spanish|french|tamil|telugu|bengali|marathi|urdu|punjabi|gujarati|kannada|malayalam)\b/i.test(text);
+        if (!creativeFrame) {
+            return { intent: 'create', confidence: 0.85, modeHint: 'dev' };
+        }
+        return { intent: 'write', confidence: 0.8, modeHint: 'chat' };
     }
     // Verb + project-object noun anywhere: "I want to create a new module".
     const objectNoun = /\b(?:file|program|script|app(?:lication)?|function|class|module|component|page|route|api|endpoint|service|cli|tool|package|library|project|plugin|addon|extension|website|server|client|database|schema|feature|daemon|worker)\b/i;

package/dist/nlu/intent.js.map

@@ -1 +1 @@
-{"version":3,"file":"intent.js","sourceRoot":"","sources":["../../src/nlu/intent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAiCnF,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AAEvE,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IACE,yFAAyF,CAAC,IAAI,CAC5F,IAAI,CACL;QACD,mEAAmE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC9E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,gBAAsB,IAAI,IAAI,EAAE;IAC9E,IACE,4FAA4F,CAAC,IAAI,CAC/F,IAAI,CACL,EACD,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;YAClC,QAAQ,EAAE,QAAQ;YAClB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,2EAA2E;IAC3E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IACE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,EACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,aAAa,GACjB,oMAAoM,CAAC;IACvM,8EAA8E;IAC9E,IACE,gGAAgG,CAAC,IAAI,CACnG,IAAI,CACL;QACD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EACxB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,iFAAiF;IACjF,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,iFAAiF;IACjF,IACE,mFAAmF,CAAC,IAAI,CACtF,IAAI,CACL,EACD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChE,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,IAAI,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,wEAAwE;IACxE,MAAM,UAAU,GACd,mOAAmO,CAAC;IACtO,IACE,CAAC,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EACrB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,gBAAsB,IAAI,IAAI,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAc,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK,EAAE,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5C,IAAI,KAAK,EAAE,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5D,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,CAAC;aAAM,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,gBAAsB,IAAI,IAAI,EAAE;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1E,OAAO,CACL,gBAAgB,CAAC,OAAO,CAAC;QACzB,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QACzC,YAAY,CAAC,OAAO,CAAC;QACrB,kBAAkB,CAAC,OAAO,CAAC;QAC3B,cAAc,CAAC,OAAO,CAAC;QACvB,eAAe,CAAC,OAAO,CAAC;QACxB,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CACrD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"intent.js","sourceRoot":"","sources":["../../src/nlu/intent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAiCnF,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AAEvE,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IACE,yFAAyF,CAAC,IAAI,CAC5F,IAAI,CACL;QACD,mEAAmE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC9E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,gBAAsB,IAAI,IAAI,EAAE;IAC9E,IACE,4FAA4F,CAAC,IAAI,CAC/F,IAAI,CACL,EACD,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;YAClC,QAAQ,EAAE,QAAQ;YAClB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,2EAA2E;IAC3E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IACE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,EACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,6EAA6E;IAC7E,uEAAuE;IACvE,oEAAoE;IACpE,+BAA+B;IAC/B,MAAM,aAAa,GACjB,6PAA6P,CAAC;IAChQ,8EAA8E;IAC9E,IACE,gGAAgG,CAAC,IAAI,CACnG,IAAI,CACL;QACD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EACxB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,iFAAiF;IACjF,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,iFAAiF;IACjF,IACE,mFAAmF,CAAC,IAAI,CACtF,IAAI,CACL,EACD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChE,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtE,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,YAAY,GAAG,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,GACjB,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,mEAAmE,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9E,+GAA+G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,wEAAwE;IACxE,MAAM,UAAU,GACd,mOAAmO,CAAC;IACtO,IACE,CAAC,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC;QACnE,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EACrB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,gBAAsB,IAAI,IAAI,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAc,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK,EAAE,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5C,IAAI,KAAK,EAAE,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5D,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,CAAC;aAAM,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,gBAAsB,IAAI,IAAI,EAAE;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1E,OAAO,CACL,gBAAgB,CAAC,OAAO,CAAC;QACzB,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QACzC,YAAY,CAAC,OAAO,CAAC;QACrB,kBAAkB,CAAC,OAAO,CAAC;QAC3B,cAAc,CAAC,OAAO,CAAC;QACvB,eAAe,CAAC,OAAO,CAAC;QACxB,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CACrD,CAAC;AACJ,CAAC"}

package/dist/passport.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const passport_1 = __importDefault(require("passport"));
+const passport_jwt_1 = require("passport-jwt");
+const userService_1 = require("./services/userService"); // Adjust the import path as needed
+// JWT options – these should be configured via environment variables.
+const jwtOptions = {
+    jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
+    secretOrKey: process.env.JWT_SECRET || 'default_secret', // Replace with a strong secret in production
+    passReqToCallback: true,
+};
+/**
+ * Verify callback for the JWT strategy.
+ * It receives the JWT payload and should return the corresponding user object.
+ */
+const verifyJwt = async (req, payload, done) => {
+    try {
+        // Assuming the payload contains a `sub` (subject) field with the user ID.
+        const user = await (0, userService_1.getUserById)(payload.sub);
+        if (!user) {
+            return done(null, false);
+        }
+        return done(null, user);
+    }
+    catch (error) {
+        return done(error, false);
+    }
+};
+// Register the JWT strategy with Passport.
+passport_1.default.use(new passport_jwt_1.Strategy(jwtOptions, verifyJwt));
+exports.default = passport_1.default;

package/dist/routes/auth.js

@@ -0,0 +1,42 @@
+"use strict";
+/**
+ * Authentication Routes
+ *
+ * Exposes endpoints for user login and token issuance.  This
+ * example uses a hard‑coded user for demonstration purposes.
+ *
+ * @module routes/auth
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const jwt_1 = require("../config/jwt");
+const router = (0, express_1.Router)();
+/**
+ * POST /auth/login
+ *
+ * Accepts a JSON body with `username` and `password`.  In a real
+ * application this would validate against a database.  Here we
+ * simply issue a token for a single demo user.
+ */
+router.post('/login', (req, res) => {
+    const { username, password } = req.body;
+    // Basic validation
+    if (typeof username !== 'string' || typeof password !== 'string') {
+        return res.status(400).json({ error: 'Username and password required' });
+    }
+    // Demo credentials check
+    if (username !== 'admin' || password !== 'password') {
+        return res.status(401).json({ error: 'Invalid credentials' });
+    }
+    const payload = { sub: username, role: 'admin' };
+    const token = jsonwebtoken_1.default.sign(payload, jwt_1.jwtConfig.secret, {
+        expiresIn: jwt_1.jwtConfig.expiresIn,
+        algorithm: jwt_1.jwtConfig.algorithm,
+    });
+    res.json({ token });
+});
+exports.default = router;

package/dist/routes/user.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const auth_1 = require("../middleware/auth");
+const router = (0, express_1.Router)();
+/**
+ * GET /api/user/profile
+ * Returns the profile of the currently authenticated user.
+ * This route is protected by the `ensureAuthenticated` middleware.
+ */
+router.get('/profile', auth_1.ensureAuthenticated, async (req, res, _next) => {
+    // Assuming the user information is attached to req.user by Passport
+    const user = req.user;
+    if (!user) {
+        return res.status(404).json({ error: 'User not found' });
+    }
+    res.json({
+        id: user.id,
+        username: user.username,
+        email: user.email,
+    });
+});
+/**
+ * GET /api/user/settings
+ * Example of another protected endpoint.
+ */
+router.get('/settings', auth_1.ensureAuthenticated, async (_req, res, _next) => {
+    // Placeholder response – replace with real settings logic
+    res.json({ theme: 'dark', notificationsEnabled: true });
+});
+exports.default = router;

package/dist/server.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Server Bootstrap
+ *
+ * Starts the Express server on the configured port.
+ *
+ * @module server
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const app_1 = __importDefault(require("./app"));
+const PORT = process.env.PORT ?? 3000;
+app_1.default.listen(PORT, () => {
+    console.log(`Server running on port ${PORT}`);
+});

package/dist/tools/pipeline-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline-tool.d.ts","sourceRoot":"","sources":["../../src/tools/pipeline-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOnF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,GAAG,EAClB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAsG7B;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAYxE;AA0BD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,MAAM,CAAC,CAoBjB"}
+{"version":3,"file":"pipeline-tool.d.ts","sourceRoot":"","sources":["../../src/tools/pipeline-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOnF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,GAAG,EAClB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAoH7B;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAYxE;AA0BD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,MAAM,CAAC,CAoBjB"}

package/dist/tools/pipeline-tool.js

@@ -58,6 +58,19 @@ export async function runPipelineTool(goal, configManager, opts) {
             };
         }
     }
+    // When the caller did NOT pin a provider/model, hand the decision to the
+    // AutoModelRouter — the product's core routing USP. Without this, an
+    // unpinned pipeline ran on the single configured default provider, so a
+    // rate-limited provider (Groq's free-tier TPM is shared across ALL its
+    // models — switching models within Groq can never escape it) became a
+    // 429 death spiral instead of failing over to the configured alternatives
+    // (observed live: trace-1788970301803-8302u5 — 14 steps / 112s of 429s on
+    // gpt-oss-120b/gpt-oss-20b while Gemini + OpenRouter sat unused).
+    // Auto-routing scores ALL configured providers per task (bandit + ML +
+    // model-first + quota-parking), sinks away from session-failed providers,
+    // and records real routing snapshots in the reasoning trace. An explicit
+    // provider/model still wins (matches the orchestrator's own rule).
+    const autoRoute = !provider && !model;
     // E3a + Session 20: intent transparency + D1 recall parity — parse ONCE,
     // resolve the REQUEST CONTRACT (understanding-first), seed the 🧠 card +
     // router task-intent hint. The contract's acceptance criteria are passed to
@@ -101,6 +114,7 @@ export async function runPipelineTool(goal, configManager, opts) {
         const result = await orchestrator.execute(goal, {
             provider,
             model,
+            autoRouteModels: autoRoute,
             verbose: false,
             ...(liveBoard ? { spinner: liveBoard } : {}),
             taskIntentHint: opts.taskIntentHint ?? dispatch.taskIntentHint,

package/dist/tools/pipeline-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline-tool.js","sourceRoot":"","sources":["../../src/tools/pipeline-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAE,YAAY,EAA4B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAyCzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,aAAkB,EAClB,IAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;IACnC,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,IAAI,CAAC,MAAM,+GAA+G,CAAC;IAClK,CAAC;IACD,qEAAqE;IACrE,2CAA2C;IAC3C,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC7B,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC,OAAO,CACtC,MAAM,EACN,IAAI,EACJ,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EACxC,aAAa,CACd,CAAC;YACF,MAAM,QAAQ,GAAG,eAAe,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnE,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;YACzB,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,6DAA6D;gBACtE,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,mEAAmE;IACnE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,yEAAyE;IACzE,0DAA0D;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;IACxC,MAAM,KAAK,GAAa;QACtB,kBAAkB,QAAQ,CAAC,WAAW,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,4CAA4C;QAC3H,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;KACtB,CAAC;IACF,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACvC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACvF,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7E,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;IACpD,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IAExD,wEAAwE;IACxE,IAAI,SAAS,GAAyB,IAAI,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACV,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE;YAC9C,QAAQ;YACR,KAAK;YACL,OAAO,EAAE,KAAK;YACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;YAC9D,aAAa;YACb,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,wEAAwE;YACxE,wEAAwE;YACxE,oDAAoD;YACpD,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;YACnC,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAA2B;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,YAAY,CAAC,CAAC;IAC/E,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAE/E,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,SAAS;IACjB,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,SAAS;CAChB,CAAC;AACF,MAAM,aAAa,GAA+B;IAChD,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,WAAW;IACnB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAc,EACd,IAAa,EACb,GAAgB;IAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,4BAA4B,MAAM,EAAE,CAAC;IAEvD,MAAM,CAAC,GAAG,IAAqG,CAAC;IAChH,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,MAAM,gBAAgB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC;IAElG,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,EAAE;QAC5D,IAAI;QACJ,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC;QACrC,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QACnD,KAAK,EAAE,CAAC,KAAK,MAAM,4BAA4B,CAAC;KACjD,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK,MAAM,SAAS;QAC/D,MAAM,CAAC,OAAO;QACd,GAAG,MAAM,CAAC,OAAO;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"pipeline-tool.js","sourceRoot":"","sources":["../../src/tools/pipeline-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAE,YAAY,EAA4B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAyCzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,aAAkB,EAClB,IAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;IACnC,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,IAAI,CAAC,MAAM,+GAA+G,CAAC;IAClK,CAAC;IACD,qEAAqE;IACrE,2CAA2C;IAC3C,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC7B,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC,OAAO,CACtC,MAAM,EACN,IAAI,EACJ,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EACxC,aAAa,CACd,CAAC;YACF,MAAM,QAAQ,GAAG,eAAe,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnE,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;YACzB,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,6DAA6D;gBACtE,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,SAAS,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC;IAEtC,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,mEAAmE;IACnE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,yEAAyE;IACzE,0DAA0D;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;IACxC,MAAM,KAAK,GAAa;QACtB,kBAAkB,QAAQ,CAAC,WAAW,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,4CAA4C;QAC3H,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;KACtB,CAAC;IACF,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACvC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACvF,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7E,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;IACpD,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IAExD,wEAAwE;IACxE,IAAI,SAAS,GAAyB,IAAI,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACV,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE;YAC9C,QAAQ;YACR,KAAK;YACL,eAAe,EAAE,SAAS;YAC1B,OAAO,EAAE,KAAK;YACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;YAC9D,aAAa;YACb,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,wEAAwE;YACxE,wEAAwE;YACxE,oDAAoD;YACpD,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;YACnC,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAA2B;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,YAAY,CAAC,CAAC;IAC/E,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAE/E,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,SAAS;IACjB,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,SAAS;CAChB,CAAC;AACF,MAAM,aAAa,GAA+B;IAChD,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,WAAW;IACnB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAc,EACd,IAAa,EACb,GAAgB;IAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,4BAA4B,MAAM,EAAE,CAAC;IAEvD,MAAM,CAAC,GAAG,IAAqG,CAAC;IAChH,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,MAAM,gBAAgB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC;IAElG,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,EAAE;QAC5D,IAAI;QACJ,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC;QACrC,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QACnD,KAAK,EAAE,CAAC,KAAK,MAAM,4BAA4B,CAAC;KACjD,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK,MAAM,SAAS;QAC/D,MAAM,CAAC,OAAO;QACd,GAAG,MAAM,CAAC,OAAO;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/tools/release-sync.d.ts

@@ -10,11 +10,21 @@
  * `vX.Y.Z · N tests` badge, `docs/COMMANDS.md` carries a `nuvira vX.Y.x`
  * header), and NO post-publish diff existed.
  *
- * Deterministic and pure at the core (`findReleaseDrift` — fixture-testable):
- * each release-marker pattern is matched and compared against the CURRENT
- * version; a marker that still names an older version is a gap. Historical
- * "Since v1.60.x" notes are deliberately NOT markers — only the three
- * release-marker patterns below are checked, so nothing false-positives.
+ * P5a.2 — AUTO-FIX: detection alone left the fix to a human (or a lucky
+ * agent turn). Since every marker is a NARROW, version-bearing regex, the
+ * fix is deterministic: rewrite the stale version token, keep everything
+ * else byte-identical, then RE-DETECT on the result (a fix that does not
+ * verify is reported as failed, never silently claimed). `runReleaseSync`
+ * now fixes by default; `reportOnly` opts out. File writes are surgical
+ * (target file, matched span only) and failures are best-effort — a sync
+ * failure must never mark the publish failed.
+ *
+ * Deterministic and pure at the core (`findReleaseDrift` / `fixReleaseDrift`
+ * — fixture-testable): each release-marker pattern is matched and compared
+ * against the CURRENT version; a marker that still names an older version is
+ * a gap. Historical "Since v1.60.x" notes are deliberately NOT markers —
+ * only the three release-marker patterns below are checked, so nothing
+ * false-positives.
  *
  * Best-effort by construction: a missing/unreadable sync target, or an
  * emission failure, never throws — a sync check failure must never mark the
@@ -36,23 +46,49 @@ export interface ReleaseDriftGap {
 }
 /** The sync targets scanned after a publish (relative to the workspace root). */
 export declare const SYNC_TARGETS: string[];
+/** One deterministic marker edit applied to a target file. */
+export interface ReleaseSyncFix {
+    file: string;
+    line: number;
+    kind: ReleaseDriftGap['kind'];
+    found: string;
+    expected: string;
+    /** True when the re-detection pass confirmed the marker is now current. */
+    verified: boolean;
+}
+/** The result of one auto-fix pass over the sync targets. */
+export interface ReleaseSyncResult {
+    version: string;
+    /** Gaps that were detected (before any fix ran). */
+    gaps: ReleaseDriftGap[];
+    /** Fixes that were applied (only when auto-fix ran). */
+    fixes: ReleaseSyncFix[];
+    /** True when every detected gap was fixed AND re-detection is clean. */
+    synced: boolean;
+    /** Sync targets that could not be read or written (best-effort notes). */
+    errors: string[];
+}
 /**
  * Pure drift detector — the testable core. Scans one file's text for the
  * release-marker patterns and returns every marker whose version does NOT
  * match the current (published) version. Never throws.
- *
- * Markers (deliberately narrow — historical notes are not markers):
- *   1. `Current release <strong>vX.Y.Z</strong>`        → exact version
- *   2. `vX.Y.Z · N tests` (the arch-tier badge)          → exact version
- *   3. `nuvira vX.Y.x` (COMMANDS.md header)                → major.minor only
  */
 export declare function findReleaseDrift(text: string, file: string, currentVersion: string): ReleaseDriftGap[];
 /**
- * Run the post-publish sync check: scan every sync target under the
- * workspace root for stale release markers vs the published version. Emits a
- * structured `release:sync` event (best-effort) so a future GUI card can
- * render the gaps with an offer-to-fix. Returns a model-feedable summary —
- * never throws.
+ * P5a.2 — pure marker patcher. Rewrites ONLY the stale version tokens of the
+ * release markers in `text` to `currentVersion`; every other byte is kept.
+ * Deterministic: same input + version → same output. Companion to
+ * `findReleaseDrift` (shared marker table), so anything detection would flag,
+ * the patcher fixes — and vice versa.
+ */
+export declare function fixReleaseDrift(text: string, currentVersion: string): string;
+/**
+ * P5a.2 — run the post-publish sync pass with AUTO-FIX. Detects drift,
+ * patches every stale marker, re-reads and RE-DETECTS to verify, and emits a
+ * structured `release:sync` event. `reportOnly: true` restores the old
+ * detect-only behavior. Returns a model-feedable summary — never throws.
  */
-export declare function runReleaseSync(currentVersion: string, ctx: ToolContext): string;
+export declare function runReleaseSync(currentVersion: string, ctx: ToolContext, opts?: {
+    reportOnly?: boolean;
+}): string;
 //# sourceMappingURL=release-sync.d.ts.map

package/dist/tools/release-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release-sync.d.ts","sourceRoot":"","sources":["../../src/tools/release-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;CACrE;AAED,iFAAiF;AACjF,eAAO,MAAM,YAAY,UAA6C,CAAC;AAEvE;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,EAAE,CAwDtG;AAqBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,CAyB/E"}
+{"version":3,"file":"release-sync.d.ts","sourceRoot":"","sources":["../../src/tools/release-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;CACrE;AAED,iFAAiF;AACjF,eAAO,MAAM,YAAY,UAA6C,CAAC;AAEvE,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,wEAAwE;IACxE,MAAM,EAAE,OAAO,CAAC;IAChB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AA0CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,EAAE,CA4BtG;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAa5E;AAuBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,WAAW,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,MAAM,CAsER"}

package/dist/tools/release-sync.js

@@ -10,127 +10,191 @@
  * `vX.Y.Z · N tests` badge, `docs/COMMANDS.md` carries a `nuvira vX.Y.x`
  * header), and NO post-publish diff existed.
  *
- * Deterministic and pure at the core (`findReleaseDrift` — fixture-testable):
- * each release-marker pattern is matched and compared against the CURRENT
- * version; a marker that still names an older version is a gap. Historical
- * "Since v1.60.x" notes are deliberately NOT markers — only the three
- * release-marker patterns below are checked, so nothing false-positives.
+ * P5a.2 — AUTO-FIX: detection alone left the fix to a human (or a lucky
+ * agent turn). Since every marker is a NARROW, version-bearing regex, the
+ * fix is deterministic: rewrite the stale version token, keep everything
+ * else byte-identical, then RE-DETECT on the result (a fix that does not
+ * verify is reported as failed, never silently claimed). `runReleaseSync`
+ * now fixes by default; `reportOnly` opts out. File writes are surgical
+ * (target file, matched span only) and failures are best-effort — a sync
+ * failure must never mark the publish failed.
+ *
+ * Deterministic and pure at the core (`findReleaseDrift` / `fixReleaseDrift`
+ * — fixture-testable): each release-marker pattern is matched and compared
+ * against the CURRENT version; a marker that still names an older version is
+ * a gap. Historical "Since v1.60.x" notes are deliberately NOT markers —
+ * only the three release-marker patterns below are checked, so nothing
+ * false-positives.
  *
  * Best-effort by construction: a missing/unreadable sync target, or an
  * emission failure, never throws — a sync check failure must never mark the
  * publish failed (the brief's hard rule).
  */
-import { readFileSync, existsSync } from 'node:fs';
+import { readFileSync, writeFileSync, existsSync } from 'node:fs';
 import { join } from 'node:path';
 /** The sync targets scanned after a publish (relative to the workspace root). */
 export const SYNC_TARGETS = ['website/index.html', 'docs/COMMANDS.md'];
+const RELEASE_MARKERS = [
+    {
+        kind: 'current-release',
+        // Marker 1 — the website's "Current release" callout.
+        pattern: /Current release <strong>v(\d+\.\d+\.\d+)<\/strong>/g,
+        render: (_full, stale, fixed) => _full.replace(`v${stale}`, `v${fixed}`),
+    },
+    {
+        kind: 'test-count-badge',
+        // Marker 2 — the arch-tier "vX.Y.Z · N tests" badge (N is comma-grouped).
+        pattern: /v(\d+\.\d+\.\d+) · [\d,]+ tests/g,
+        render: (_full, stale, fixed) => _full.replace(`v${stale}`, `v${fixed}`),
+    },
+    {
+        kind: 'cli-version-header',
+        // Marker 3 — the docs "`buff` vX.Y.x" / "`nuvira` vX.Y.x" CLI header
+        // (major.minor only). COMMANDS.md has used both binary names.
+        pattern: /`?(?:buff|nuvira)`? v(\d+\.\d+)\.x/g,
+        render: (_full, stale, fixed) => _full.replace(`v${stale}.x`, `v${fixed}.x`),
+    },
+];
+/** 1-based line number of a character offset. */
+function lineNumberAt(text, index) {
+    let line = 1;
+    for (let i = 0; i < index && i < text.length; i++) {
+        if (text[i] === '\n')
+            line++;
+    }
+    return line;
+}
 /**
  * Pure drift detector — the testable core. Scans one file's text for the
  * release-marker patterns and returns every marker whose version does NOT
  * match the current (published) version. Never throws.
- *
- * Markers (deliberately narrow — historical notes are not markers):
- *   1. `Current release <strong>vX.Y.Z</strong>`        → exact version
- *   2. `vX.Y.Z · N tests` (the arch-tier badge)          → exact version
- *   3. `nuvira vX.Y.x` (COMMANDS.md header)                → major.minor only
  */
 export function findReleaseDrift(text, file, currentVersion) {
     const gaps = [];
     const clean = currentVersion.trim().replace(/^v/, '');
     const expectedExact = `v${clean}`;
     const expectedMajorMinor = clean.split('.').slice(0, 2).join('.');
-    // Marker 1 — the website's "Current release" callout.
-    const currentRe = /Current release <strong>v(\d+\.\d+\.\d+)<\/strong>/g;
-    let m;
-    while ((m = currentRe.exec(text)) !== null) {
-        const found = m[1];
-        if (found !== clean) {
-            gaps.push({
-                file,
-                line: lineNumberAt(text, m.index),
-                found: `v${found}`,
-                expected: expectedExact,
-                kind: 'current-release',
-            });
-        }
-    }
-    // Marker 2 — the arch-tier "vX.Y.Z · N tests" badge (N is comma-grouped,
-    // e.g. "4,556 tests").
-    const badgeRe = /v(\d+\.\d+\.\d+) · [\d,]+ tests/g;
-    while ((m = badgeRe.exec(text)) !== null) {
-        const found = m[1];
-        if (found !== clean) {
-            gaps.push({
-                file,
-                line: lineNumberAt(text, m.index),
-                found: `v${found}`,
-                expected: expectedExact,
-                kind: 'test-count-badge',
-            });
-        }
-    }
-    // Marker 3 — the docs "`buff` vX.Y.x" / "`nuvira` vX.Y.x" CLI header
-    // (major.minor only). COMMANDS.md has used both binary names
-    // ("`nuvira` v1.74.x" observed live); tolerate backticked or bare.
-    const cliRe = /`?(buff|nuvira)`? v(\d+\.\d+)\.x/g;
-    while ((m = cliRe.exec(text)) !== null) {
-        const found = m[2];
-        if (found !== expectedMajorMinor) {
-            gaps.push({
-                file,
-                line: lineNumberAt(text, m.index),
-                found: `v${found}.x`,
-                expected: `v${expectedMajorMinor}.x`,
-                kind: 'cli-version-header',
-            });
+    for (const marker of RELEASE_MARKERS) {
+        marker.pattern.lastIndex = 0;
+        let m;
+        while ((m = marker.pattern.exec(text)) !== null) {
+            const found = m[1];
+            const stale = marker.kind === 'cli-version-header'
+                ? found !== expectedMajorMinor
+                : found !== clean;
+            if (stale) {
+                gaps.push({
+                    file,
+                    line: lineNumberAt(text, m.index),
+                    found: marker.kind === 'cli-version-header' ? `v${found}.x` : `v${found}`,
+                    expected: marker.kind === 'cli-version-header' ? `v${expectedMajorMinor}.x` : expectedExact,
+                    kind: marker.kind,
+                });
+            }
         }
     }
     return gaps;
 }
-/** 1-based line number of a character offset. */
-function lineNumberAt(text, index) {
-    let line = 1;
-    for (let i = 0; i < index && i < text.length; i++) {
-        if (text[i] === '\n')
-            line++;
+/**
+ * P5a.2 — pure marker patcher. Rewrites ONLY the stale version tokens of the
+ * release markers in `text` to `currentVersion`; every other byte is kept.
+ * Deterministic: same input + version → same output. Companion to
+ * `findReleaseDrift` (shared marker table), so anything detection would flag,
+ * the patcher fixes — and vice versa.
+ */
+export function fixReleaseDrift(text, currentVersion) {
+    const clean = currentVersion.trim().replace(/^v/, '');
+    const expectedMajorMinor = clean.split('.').slice(0, 2).join('.');
+    let out = text;
+    for (const marker of RELEASE_MARKERS) {
+        marker.pattern.lastIndex = 0;
+        out = out.replace(marker.pattern, (full, stale) => {
+            const fixed = marker.kind === 'cli-version-header' ? expectedMajorMinor : clean;
+            return stale === fixed ? full : marker.render(full, stale, fixed);
+        });
     }
-    return line;
+    return out;
 }
 /** Read a sync target's text (empty string when missing/unreadable). */
 function readTarget(root, target) {
     try {
         const p = join(root, target);
-        return existsSync(p) ? readFileSync(p, 'utf-8') : '';
+        if (!existsSync(p))
+            return { text: '', ok: false };
+        return { text: readFileSync(p, 'utf-8'), ok: true };
     }
     catch {
-        return '';
+        return { text: '', ok: false };
+    }
+}
+/** Write a sync target (false on any failure — reported, never thrown). */
+function writeTarget(root, target, text) {
+    try {
+        writeFileSync(join(root, target), text, 'utf-8');
+        return true;
+    }
+    catch {
+        return false;
     }
 }
 /**
- * Run the post-publish sync check: scan every sync target under the
- * workspace root for stale release markers vs the published version. Emits a
- * structured `release:sync` event (best-effort) so a future GUI card can
- * render the gaps with an offer-to-fix. Returns a model-feedable summary —
- * never throws.
+ * P5a.2 — run the post-publish sync pass with AUTO-FIX. Detects drift,
+ * patches every stale marker, re-reads and RE-DETECTS to verify, and emits a
+ * structured `release:sync` event. `reportOnly: true` restores the old
+ * detect-only behavior. Returns a model-feedable summary — never throws.
  */
-export function runReleaseSync(currentVersion, ctx) {
+export function runReleaseSync(currentVersion, ctx, opts) {
     const root = ctx.cwd || process.cwd();
     const clean = currentVersion.trim().replace(/^v/, '');
+    const reportOnly = opts?.reportOnly === true;
     const gaps = [];
+    const fixes = [];
+    const errors = [];
     for (const target of SYNC_TARGETS) {
-        const text = readTarget(root, target);
-        if (!text)
+        const read = readTarget(root, target);
+        if (!read.ok || !read.text)
             continue; // a missing target is not a gap — best-effort
-        gaps.push(...findReleaseDrift(text, target, clean));
+        const found = findReleaseDrift(read.text, target, clean);
+        gaps.push(...found);
+        if (found.length === 0 || reportOnly)
+            continue;
+        const fixedText = fixReleaseDrift(read.text, clean);
+        if (!writeTarget(root, target, fixedText)) {
+            errors.push(`${target}: write failed (read-only checkout?) — fix manually or commit the version bump first.`);
+            continue;
+        }
+        // Verify: re-read the file we just wrote and re-detect. A fix that does
+        // not verify is reported as failed — never silently claimed as done.
+        const verify = readTarget(root, target);
+        const remaining = verify.ok ? findReleaseDrift(verify.text, target, clean) : found;
+        for (const gap of found) {
+            const stillThere = remaining.some((r) => r.kind === gap.kind && r.line === gap.line);
+            fixes.push({ file: gap.file, line: gap.line, kind: gap.kind, found: gap.found, expected: gap.expected, verified: !stillThere });
+        }
+    }
+    const fixedCount = fixes.filter((f) => f.verified).length;
+    const failedCount = fixes.filter((f) => !f.verified).length;
+    const synced = gaps.length === 0 || (reportOnly === false && failedCount === 0 && errors.length === 0);
+    try {
+        ctx.emit?.('release:sync', { version: clean, gaps, fixes, synced, reportOnly, errors });
+    }
+    catch {
+        /* best-effort — the text summary below still ships */
     }
     if (gaps.length === 0) {
-        ctx.emit?.('release:sync', { version: clean, gaps: [], synced: true });
         return `✅ Release-sync: website/docs already at v${clean} — no version drift.`;
     }
-    const lines = gaps.map((g) => `  • ${g.file}:${g.line} — ${g.kind} shows ${g.found}, should be ${g.expected}`);
-    ctx.emit?.('release:sync', { version: clean, gaps, synced: false });
-    return (`⚠️  Release-sync: ${gaps.length} stale release marker(s) after publishing v${clean}:\n` +
-        lines.join('\n') +
-        `\nOffer to fix them (ask_user → edit_file) so the website/docs stay at the release level.`);
+    if (reportOnly) {
+        const lines = gaps.map((g) => `  • ${g.file}:${g.line} — ${g.kind} shows ${g.found}, should be ${g.expected}`);
+        return (`⚠️  Release-sync: ${gaps.length} stale release marker(s) vs v${clean}:\n` +
+            lines.join('\n') +
+            `\nOffer to fix them (ask_user → edit_file) so the website/docs stay at the release level.`);
+    }
+    const fixLines = fixes.map((f) => `  • ${f.file}:${f.line} — ${f.kind} ${f.found} → ${f.expected}${f.verified ? ' ✅' : ' ❌ verify failed'}`);
+    const errorLines = errors.length > 0 ? `\n⚠️ ${errors.join('\n⚠️ ')}` : '';
+    const status = failedCount === 0 && errors.length === 0
+        ? `✅ Release-sync auto-fixed ${fixedCount} stale marker(s) for v${clean} — verified by re-scan.`
+        : `⚠️  Release-sync: ${fixedCount} fixed, ${failedCount} failed for v${clean}:`;
+    return `${status}\n${fixLines.join('\n')}${errorLines}`;
 }
 //# sourceMappingURL=release-sync.js.map