agent-nuvira 3.3.0 → 3.3.3

package/dist/agents/checkpoint-store.js

@@ -19,6 +19,7 @@ import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from
 import { envBuff, resolveNuviraHome } from '../config/paths.js';
 import { join } from 'node:path';
 import { createHash } from 'node:crypto';
+import { verifyArtifacts } from './artifact-verification.js';
 // ─── Storage ────────────────────────────────────────────────────────────────
 const DEFAULT_MEMORY_DIR = join(resolveNuviraHome(), 'memory');
 function checkpointsDir() {
@@ -86,6 +87,166 @@ export function loadCheckpoint(id) {
         return null;
     }
 }
+/**
+ * The newest checkpoint for this project whose goal is the SAME ASK, possibly
+ * worded differently.
+ *
+ * `checkpointIdFor` hashes `workingDirectory + goal`, so a reworded ask hashes
+ * to a different id and finds nothing — which is why "do that addon thing"
+ * re-planned from zero while the previous attempt's plan sat on disk.
+ *
+ * The goal test is deliberately REQUIRED rather than taking the newest
+ * checkpoint in the directory. A bare "newest for this project" lookup would
+ * hand run B the plan of a completely unrelated run A that merely happened to
+ * use the same folder — and it would do so silently, which is worse than the
+ * re-plan it replaces. The caller reconciles whatever this returns against the
+ * filesystem before trusting a word of it (see `reconcileTaskPlan`).
+ *
+ * Newest-first among the matching goals, so the most recent attempt wins.
+ */
+export function findRelatedCheckpointFor(workingDirectory, goal, options = {}) {
+    const wanted = normalizeDir(workingDirectory);
+    const candidates = listCheckpoints()
+        .filter((c) => normalizeDir(c.workingDirectory) === wanted && c.id !== options.excludeId)
+        .sort((a, b) => b.savedAt - a.savedAt);
+    for (const meta of candidates) {
+        if (!goalsLookSame(meta.goal, goal))
+            continue;
+        const file = loadCheckpoint(meta.id);
+        if (file)
+            return file;
+    }
+    return null;
+}
+/** Compare working directories without caring about a trailing slash. */
+function normalizeDir(dir) {
+    return (dir || '').replace(/[\\/]+$/, '');
+}
+/** Words that carry no subject — dropped before comparing two goals. */
+const GOAL_STOPWORDS = new Set([
+    'the', 'a', 'an', 'and', 'or', 'but', 'to', 'of', 'in', 'on', 'at', 'for', 'with', 'from',
+    'can', 'could', 'would', 'should', 'please', 'you', 'your', 'me', 'my', 'i', 'we', 'it', 'its',
+    'is', 'are', 'was', 'be', 'been', 'do', 'does', 'did', 'make', 'made', 'need', 'want', 'get',
+    'this', 'that', 'these', 'those', 'there', 'here', 'then', 'than', 'so', 'as', 'by', 'use',
+    'using', 'into', 'out', 'up', 'down', 'again', 'also', 'just', 'new', 'now', 'save',
+    'folder', 'file', 'path', 'directory', 'dir', 'create', 'build', 'develop', 'write',
+]);
+/**
+ * Subject tokens of a goal. Hyphens and underscores are JOINED, not split, so
+ * "add-on" and "addon" are the same token — the exact pair a user is most
+ * likely to vary when re-asking.
+ */
+function goalTokens(text) {
+    const flat = (text || '')
+        .toLowerCase()
+        .replace(/[-_]+/g, '')
+        .replace(/[^a-z0-9]+/g, ' ');
+    const tokens = new Set();
+    for (const raw of flat.split(' ')) {
+        const t = raw.trim();
+        if (!t || t.length < 3)
+            continue;
+        if (GOAL_STOPWORDS.has(t))
+            continue;
+        tokens.add(t);
+    }
+    return tokens;
+}
+/** Shared subject tokens needed before two goals are treated as the same ask. */
+const MIN_SHARED_TOKENS = 3;
+/** Fraction of the SHORTER goal's tokens that must be shared. */
+const MIN_SHARED_RATIO = 0.6;
+/**
+ * Are these two the same ask, worded differently?
+ *
+ * Both a floor and a ratio are required. The ratio alone passes two long goals
+ * that share a boilerplate opening; the floor alone passes two short goals that
+ * share one incidental noun. Together they mean "most of the shorter ask's
+ * subject matter appears in the other", which is what rewording looks like and
+ * what two unrelated asks in one folder do not.
+ *
+ * The floor is capped at the shorter goal's own token count, so a SHORT ask
+ * still matches its own rewording: "Package the add-on" and "package the addon
+ * for me" are two tokens each, and demanding three shared tokens would refuse
+ * the pair the rule exists for. At two tokens that means both must match — which
+ * is still enough to keep "update the readme" and "update the dockerfile"
+ * apart.
+ */
+export function goalsLookSame(a, b) {
+    const ta = goalTokens(a);
+    const tb = goalTokens(b);
+    if (ta.size === 0 || tb.size === 0)
+        return false;
+    let shared = 0;
+    for (const t of ta)
+        if (tb.has(t))
+            shared += 1;
+    const smaller = Math.min(ta.size, tb.size);
+    if (shared < Math.min(MIN_SHARED_TOKENS, smaller))
+        return false;
+    return shared / smaller >= MIN_SHARED_RATIO;
+}
+/**
+ * Reconcile a saved task plan against what is actually on disk.
+ *
+ * WHY THIS EXISTS (the live NVDA-addon failure): the checkpoint for that goal
+ * said `5/5 tasks completed`, so "resume unless the user asks" looked correct —
+ * re-entering a finished plan would skip every task. But three of the five
+ * completions were false: the step claimed success, `zip` exited 0 on inputs
+ * that did not exist, and the packaged deliverable was a 22-byte empty archive.
+ * A checkpoint's statuses are therefore CLAIMS, and the only thing that makes
+ * them safe to skip is the artifact behind them.
+ *
+ * The rule, in one line: a completed step whose DECLARED files are not on disk
+ * (or are empty shells) is demoted to `pending`, so a resume re-runs exactly the
+ * work that is missing instead of skipping it.
+ *
+ * Deliberately narrow: only a step's explicit `expectedFiles` is checked. A
+ * description like "Delete legacy.js" would look like an unmet deliverable if we
+ * inferred artifacts from prose, so prose is never used to decide what re-runs —
+ * that stays the planner's declared contract. Steps with nothing declared are
+ * left exactly as they are rather than being demoted on a guess.
+ *
+ * Never throws: reconciliation failure reports, it does not break a resume.
+ */
+export function reconcileTaskPlan(context, workingDirectory) {
+    const demoted = [];
+    let plan;
+    try {
+        plan = structuredClone(context.taskPlan ?? []);
+    }
+    catch {
+        // An unclonable plan is not a verdict — hand it back untouched.
+        return { context, demoted };
+    }
+    const root = workingDirectory || context.workingDirectory || process.cwd();
+    for (const step of plan) {
+        if (step.status !== 'completed')
+            continue;
+        const declared = (step.expectedFiles ?? []).filter((f) => f && f.trim());
+        if (declared.length === 0)
+            continue;
+        try {
+            const check = verifyArtifacts(declared, root);
+            if (check.ok)
+                continue;
+            step.status = 'pending';
+            step.result =
+                `re-opened on resume — the step reported success but its deliverable is not on disk (${check.reason})`;
+            demoted.push({ id: step.id, reason: check.reason ?? 'deliverable missing' });
+        }
+        catch {
+            // Best-effort: a filesystem error must not demote a step on a guess.
+        }
+    }
+    if (demoted.length === 0)
+        return { context, demoted };
+    return { context: { ...context, taskPlan: plan }, demoted };
+}
+/** True when the plan still has work that can be run. */
+export function planHasPendingWork(context) {
+    return (context.taskPlan ?? []).some((s) => s.status === 'pending');
+}
 /** List all saved checkpoints, newest first (for `nuvira execute --checkpoint-list`). */
 export function listCheckpoints() {
     try {

package/dist/agents/checkpoint-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkpoint-store.js","sourceRoot":"","sources":["../../src/agents/checkpoint-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAC,OAAO,EAAE,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,+EAA+E;AAE/E,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,CAAC,CAAC;AAE/D,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC;IACzD,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAmBD,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,gBAAwB;IACpE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,gBAAgB,SAAS,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,OAAqB,EAAE,EAAW;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,EAAE,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAmB;YAC3B,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YACpE,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,yEAAyE;YACzE,OAAO;SACR,CAAC;QACF,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAmB,CAAC;QACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAmB,CAAC;gBAC/E,OAAO;oBACL,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;iBACV,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;aAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"checkpoint-store.js","sourceRoot":"","sources":["../../src/agents/checkpoint-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAC,OAAO,EAAE,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,+EAA+E;AAE/E,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,CAAC,CAAC;AAE/D,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC;IACzD,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACnC,CAAC;AAmBD,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,gBAAwB;IACpE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,gBAAgB,SAAS,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,OAAqB,EAAE,EAAW;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,EAAE,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAmB;YAC3B,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YACpE,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,yEAAyE;YACzE,OAAO;SACR,CAAC;QACF,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAmB,CAAC;QACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CACtC,gBAAwB,EACxB,IAAY,EACZ,UAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,eAAe,EAAE;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC;SACxF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QAC9C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yEAAyE;AACzE,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM;IACzF,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK;IAC9F,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAC5F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK;IAC1F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACnF,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;CACpF,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QACpC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,iEAAiE;AACjE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,MAAM,GAAG,OAAO,IAAI,gBAAgB,CAAC;AAC9C,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAqB,EACrB,gBAAyB;IAEzB,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE3E,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,SAAS;QAC1C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,EAAE;gBAAE,SAAS;YACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,MAAM;gBACT,uFAAuF,KAAK,CAAC,MAAM,GAAG,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAmB,CAAC;gBAC/E,OAAO;oBACL,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;iBACV,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;aAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/agents/credential-store.d.ts

@@ -42,6 +42,32 @@ export interface PublishCredentials {
     git: GitCredentials;
     npm: NpmCredentials;
 }
+/**
+ * Release credentials may be STORED, not merely exported for one session.
+ *
+ * Why this exists: this store used to read only `process.env` and `.npmrc`,
+ * and `collectAll()` was the only way to mark credentials as collected. So an
+ * agent asked to release needed both tokens re-exported in its environment
+ * every session, and the `publish` TOOL — which may never prompt — could never
+ * set them up at all: it called `setupGitCredentials()` / `setupNpmAuth()`
+ * without `collectAll()`, both threw, and a single `try/catch` swallowed the
+ * pair. A tool-driven release therefore ran with NO credentials while
+ * reporting a clean pipeline.
+ *
+ * Tokens now persist in the nuvira env file (0600, resolved by
+ * `resolveNuviraEnvFile` — outside the repo, never in shell history), the SAME
+ * store the skill-secret path already writes. One place a credential lives.
+ */
+export declare const RELEASE_CREDENTIAL_KEYS: {
+    /** GitHub PAT / OAuth token used for HTTPS push. */
+    readonly gitToken: "GITHUB_TOKEN";
+    /** Git username paired with {@link RELEASE_CREDENTIAL_KEYS.gitToken}. */
+    readonly gitUsername: "GIT_USERNAME";
+    /** npm automation token used for `npm publish`. */
+    readonly npmToken: "NPM_TOKEN";
+    /** Optional non-default npm registry. */
+    readonly npmRegistry: "NPM_REGISTRY";
+};
 export declare class CredentialStore {
     private _git;
     private _npm;
@@ -61,6 +87,24 @@ export declare class CredentialStore {
      * Does NOT prompt — call collectAll() for interactive collection.
      */
     constructor();
+    /**
+     * Non-interactive initialisation.
+     *
+     * Adopts whatever was auto-detected — environment variables, the persisted
+     * store, and the project `.npmrc` — and marks the store collected, so
+     * {@link setupGitCredentials} / {@link setupNpmAuth} can run with NO TTY.
+     *
+     * This is the method the `publish` TOOL must call: a tool call may never
+     * block on a prompt, whereas `nuvira publish` on a terminal still uses
+     * `collectAll()` to ask for anything missing.
+     */
+    initialize(): PublishCredentials;
+    /**
+     * Validate the detected credentials against the live services.
+     * Best-effort and NON-FATAL: a network hiccup reports `unknown`, never a
+     * failure, so a preflight check can advise without blocking a release.
+     */
+    verify(): Promise<PublishVerification>;
     /**
      * Collect missing credentials interactively.
      * Skips prompts for already-detected values.
@@ -99,4 +143,80 @@ export declare function checkNpmCredentials(): boolean;
  * Get a human-readable summary of the current credential status.
  */
 export declare function getCredentialStatus(): string;
+/** Where a credential was found. */
+export type CredentialOrigin = 'env' | 'stored' | 'npmrc' | 'ssh' | 'none';
+/** One row of the release-credential status table. */
+export interface ReleaseCredentialRow {
+    /** Env var name the credential lives under. */
+    key: string;
+    /** What the credential is for. */
+    role: 'git' | 'npm';
+    /** Whether a usable value was found anywhere. */
+    set: boolean;
+    /** Masked value — enough to identify the key, never the key itself. */
+    masked?: string;
+    /** Where the value came from. */
+    origin: CredentialOrigin;
+}
+/** Result of a live credential probe against GitHub / the npm registry. */
+export interface CredentialProbe {
+    /** False when the check could not be completed (offline, timeout). */
+    checked: boolean;
+    /** True only when the service CONFIRMED the credential works. */
+    ok: boolean;
+    /** Human-readable outcome. */
+    detail: string;
+}
+/** Both probes from {@link CredentialStore.verify}. */
+export interface PublishVerification {
+    git: CredentialProbe;
+    npm: CredentialProbe;
+}
+/** The full release-credential picture, for the CLI and the tool. */
+export interface ReleaseCredentialStatus {
+    rows: ReleaseCredentialRow[];
+    git: {
+        canPush: boolean;
+        remoteUrl?: string;
+        repoSlug?: string;
+        origin: CredentialOrigin;
+    };
+    npm: {
+        canPublish: boolean;
+        registry: string;
+        origin: CredentialOrigin;
+    };
+    /** Path of the store the values are persisted to. */
+    storePath: string;
+}
+/**
+ * Describe every release credential, masked, and say whether a release could
+ * run right now. Never returns a raw secret — only {@link maskSecret} shapes.
+ */
+export declare function releaseCredentialStatus(): ReleaseCredentialStatus;
+/**
+ * Persist a release credential so it survives the session.
+ *
+ * Writes to the nuvira env file (created 0600 by {@link saveEnvValue}), which
+ * lives OUTSIDE the repository — a token in a committed file is a leak, and a
+ * token in a shell export is gone at the next login.
+ */
+export declare function storeReleaseCredential(name: string, value: string): {
+    success: boolean;
+    path: string;
+    reason?: string;
+};
+/**
+ * Forget a stored release credential.
+ * A value that was never stored is a SUCCESS — the caller's intent already
+ * holds, and reporting failure would only surface a pointless error.
+ */
+export declare function forgetReleaseCredential(name: string): {
+    success: boolean;
+    path: string;
+    removed: boolean;
+    reason?: string;
+};
+/** Whether `name` is a credential this module is willing to store. */
+export declare function isReleaseCredentialKey(name: string): boolean;
 //# sourceMappingURL=credential-store.d.ts.map

package/dist/agents/credential-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-store.d.ts","sourceRoot":"","sources":["../../src/agents/credential-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,cAAc,CAAC;CACrB;AAwGD,qBAAa,eAAe;IAC1B,OAAO,CAAC,IAAI,CAAsB;IAClC,OAAO,CAAC,IAAI,CAAyC;IACrD,OAAO,CAAC,UAAU,CAAS;IAE3B,kCAAkC;IAClC,IAAI,GAAG,IAAI,cAAc,CAExB;IAED,kCAAkC;IAClC,IAAI,GAAG,IAAI,cAAc,CAExB;IAED,8CAA8C;IAC9C,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,wDAAwD;IACxD,IAAI,OAAO,IAAI,OAAO,CAIrB;IAED,2DAA2D;IAC3D,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;OAGG;;IAcH;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA8H/C;;;;;;OAMG;IACH,mBAAmB,IAAI,IAAI;IA+G3B;;;;;OAKG;IACH,YAAY,IAAI,IAAI;IAyBpB;;;OAGG;IACH,OAAO,IAAI,IAAI;CAqBhB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAiB5C"}
+{"version":3,"file":"credential-store.d.ts","sourceRoot":"","sources":["../../src/agents/credential-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAmBH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,cAAc,CAAC;CACrB;AAID;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,uBAAuB;IAClC,oDAAoD;;IAEpD,yEAAyE;;IAEzE,mDAAmD;;IAEnD,yCAAyC;;CAEjC,CAAC;AAsIX,qBAAa,eAAe;IAC1B,OAAO,CAAC,IAAI,CAAsB;IAClC,OAAO,CAAC,IAAI,CAAyC;IACrD,OAAO,CAAC,UAAU,CAAS;IAE3B,kCAAkC;IAClC,IAAI,GAAG,IAAI,cAAc,CAExB;IAED,kCAAkC;IAClC,IAAI,GAAG,IAAI,cAAc,CAExB;IAED,8CAA8C;IAC9C,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,wDAAwD;IACxD,IAAI,OAAO,IAAI,OAAO,CAIrB;IAED,2DAA2D;IAC3D,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;OAGG;;IA0BH;;;;;;;;;;OAUG;IACH,UAAU,IAAI,kBAAkB;IAKhC;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAoB5C;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAmI/C;;;;;;OAMG;IACH,mBAAmB,IAAI,IAAI;IAsH3B;;;;;OAKG;IACH,YAAY,IAAI,IAAI;IAyBpB;;;OAGG;IACH,OAAO,IAAI,IAAI;CAqBhB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAe5C;AAID,oCAAoC;AACpC,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3E,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,iDAAiD;IACjD,GAAG,EAAE,OAAO,CAAC;IACb,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,EAAE,EAAE,OAAO,CAAC;IACZ,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uDAAuD;AACvD,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,eAAe,CAAC;CACtB;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,GAAG,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC3F,GAAG,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzE,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;CACnB;AAoDD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,uBAAuB,CA8DjE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAkBrD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,GACX;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAIvE;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5D"}