agentera 3.0.0-dev.8 → 3.0.0-dev.80

package/dist/validate/selfAudit.js

@@ -2,31 +2,7 @@
  * Self-audit checks for artifact writing conventions. Faithful TS port of
  * `scripts/self_audit.py`. Advisory only — report but do not block writes.
  */
-import { normalizeArtifactProtocolId } from "../registries/artifactProtocolIds.js";
-const FULL_FILE_BUDGETS = {
-    progress: 3000,
-    experiments: 2500,
-    health: 2000,
-    decisions: 5000,
-    todo: 5000,
-    changelog: 5000,
-    plan: 2500,
-    vision: 1500,
-    design: 2000,
-    docs: 2000,
-};
-const PER_ENTRY_BUDGETS = {
-    progress: 500,
-    experiments: 300,
-    health: 150,
-    decisions: 200,
-    todo: 100,
-    changelog: 300,
-    plan: 100,
-};
-function resolveBudgetArtifact(artifact) {
-    return normalizeArtifactProtocolId(artifact) ?? artifact.toLowerCase();
-}
+import { inspectArtifactVerbosityBudget, } from "../registries/verbosityBudgetContract.js";
 const FILE_PATH_RE = /\b(?:[A-Za-z0-9_.-]+\/)+[A-Za-z0-9_.-]+\.[A-Za-z]{1,10}\b/;
 const REPO_PATH_RE = /\b(?:internal|src|lib|pkg|cmd|app|test|tests|doc|docs|script|scripts|skill|skills|hook|hooks|fixture|fixtures|reference|references)(?:\/[A-Za-z0-9_.-]+)+\b/;
 const LINE_NUMBER_RE = /:\d{2,}\b/;
@@ -49,34 +25,56 @@ const BANNED_PATTERNS = [
     ["filler introductions", /After\s+careful\s+consideration\b/i],
     ["summary preambles", /\bIn\s+summary\b/i],
     ["summary preambles", /\bTo\s+recap\b/i],
-    ["summary preambles", /\bOverall\b/i],
+    ["summary preambles", /\bOverall\b(?!\s+acceptance\b)/i],
     ["excessive justification", /I\s+chose\s+this\s+approach\s+because\b/i],
 ];
 /** Count non-whitespace tokens, matching Python's str.split(). */
 function wordCount(text) {
     return (text.match(/\S+/g) ?? []).length;
 }
-export function checkVerbosity(text, artifact, budgets = null) {
-    const count = wordCount(text);
-    const table = budgets ?? PER_ENTRY_BUDGETS;
-    const resolved = resolveBudgetArtifact(artifact);
-    let perEntryBudget = table[resolved];
-    if (perEntryBudget === undefined) {
-        const fullBudget = FULL_FILE_BUDGETS[resolved];
-        perEntryBudget = fullBudget !== undefined ? Math.floor(fullBudget / 5) : 500;
+export function checkVerbosity(text, artifact, contractPath) {
+    return checkAuthoritativeWordBudget(text, artifact, false, contractPath);
+}
+export function checkFullFileVerbosity(text, artifact, contractPath) {
+    return checkAuthoritativeWordBudget(text, artifact, true, contractPath);
+}
+function authorityError(artifact, detail) {
+    return [
+        false,
+        `verbosity authority error for ${JSON.stringify(artifact)}: ${detail}; ` +
+            "repair the declared owner in references/artifacts/verbosity-budget-authority.yaml",
+    ];
+}
+function applicableDimensions(dimensions, fullArtifact) {
+    return dimensions.filter((dimension) => fullArtifact ? dimension.scope === "full_file" : dimension.scope !== "full_file");
+}
+function checkAuthoritativeWordBudget(text, artifact, fullArtifact, contractPath) {
+    let dimensions;
+    try {
+        dimensions = inspectArtifactVerbosityBudget(artifact, contractPath).dimensions;
     }
-    if (count <= perEntryBudget) {
+    catch (error) {
+        return authorityError(artifact, error.message);
+    }
+    const invalid = dimensions.filter((dimension) => dimension.classification === "invalid_declaration");
+    if (invalid.length > 0) {
+        return authorityError(artifact, invalid.map((dimension) => `${dimension.scope}: ${dimension.error ?? "invalid declaration"}`).join("; "));
+    }
+    const applicable = applicableDimensions(dimensions, fullArtifact);
+    if (applicable.length > 1) {
+        const kind = fullArtifact ? "full-file" : "per-entry";
+        return authorityError(artifact, `multiple ${kind} declarations apply: ${applicable.map((d) => d.scope).join(", ")}`);
+    }
+    const dimension = applicable[0];
+    if (!dimension || dimension.classification !== "numeric_limit") {
         return [true, ""];
     }
-    return [false, `verbosity mismatch: ${count} words exceeds ${perEntryBudget} budget`];
-}
-export function checkFullFileVerbosity(text, artifact) {
     const count = wordCount(text);
-    const budget = FULL_FILE_BUDGETS[resolveBudgetArtifact(artifact)] ?? 2500;
-    if (count <= budget) {
+    if (count <= dimension.limit) {
         return [true, ""];
     }
-    return [false, `verbosity mismatch: ${count} words exceeds ${budget} full-file budget`];
+    const qualifier = fullArtifact ? " full-file" : "";
+    return [false, `verbosity mismatch: ${count} words exceeds ${dimension.limit}${qualifier} budget`];
 }
 export function checkAbstraction(text) {
     for (const re of [
@@ -112,9 +110,6 @@ export function checkFiller(text) {
 /** Smoke-validate that self-audit conventions and budgets are wired. */
 export function validateSelfAuditConventions() {
     const errors = [];
-    if (Object.keys(FULL_FILE_BUDGETS).length === 0 || Object.keys(PER_ENTRY_BUDGETS).length === 0) {
-        errors.push("self-audit: budget tables must be non-empty");
-    }
     const sample = "concrete anchor `scripts/agentera` at line 42 with 12 words total here";
     const [verbosityOk] = checkVerbosity(sample, "progress");
     if (!verbosityOk) {
@@ -146,4 +141,3 @@ export function selfAuditMain(opts = {}) {
     out("self-audit conventions ok");
     return 0;
 }
-//# sourceMappingURL=selfAudit.js.map

package/dist/validate/vocabularyAuthority.js

@@ -4,6 +4,7 @@ import { resolvePath } from "../core/paths.js";
 import { resolveSourceRoot } from "../core/sourceRoot.js";
 import { loadYamlMappingFile } from "../core/yaml.js";
 import { APP_MANUAL_REVIEW_NEEDED, APP_MIGRATION_NEEDED, APP_OUTDATED, APP_REPAIR_NEEDED, APP_UP_TO_DATE, } from "../upgrade/doctor.js";
+import { validateGlossaryEntryContract } from "../registries/glossaryEntryContract.js";
 /**
  * Validate vocabulary authority YAML contracts (Decision 54 lifecycle status
  * vocabulary, Decision 57 first_invocation_read, update channels, index order).
@@ -218,8 +219,8 @@ function validateInstructionContract(root) {
     }
     else {
         const meaning = String(allowed.prime_context.meaning ?? "");
-        if (!meaning.includes("agentera prime --context")) {
-            errors.push("capability-instruction-contract.yaml: prime_context obligation must reference agentera prime --context");
+        if (!meaning.includes("npx -y agentera@next prime --context")) {
+            errors.push("capability-instruction-contract.yaml: prime_context obligation must reference npx -y agentera@next prime --context");
         }
     }
     if (firstRead.default_rule !== "prime_context") {
@@ -253,12 +254,11 @@ function validateVocabularyIndex(root) {
     }
     const lifecycleIdx = order.indexOf("references/cli/app-lifecycle-vocabulary.yaml");
     const channelsIdx = order.indexOf("references/cli/update-channels.yaml");
-    const bundleIdx = order.indexOf("references/cli/bundle-skill-vocabulary.yaml");
-    if (lifecycleIdx < 0 || channelsIdx < 0 || bundleIdx < 0) {
+    if (lifecycleIdx < 0 || channelsIdx < 0) {
         errors.push("vocabulary-index.yaml: authority_order missing required vocabulary authorities");
     }
-    else if (!(lifecycleIdx < channelsIdx && channelsIdx < bundleIdx)) {
-        errors.push("vocabulary-index.yaml: authority_order must place lifecycle before channels before bundle");
+    else if (!(lifecycleIdx < channelsIdx)) {
+        errors.push("vocabulary-index.yaml: authority_order must place lifecycle before channels");
     }
     const vocabularyMd = authorityPath(root, "references/cli/vocabulary.md");
     if (!fs.existsSync(vocabularyMd)) {
@@ -271,7 +271,7 @@ function validateVocabularyIndex(root) {
         !lifecycleSection.includes("machine-readable authority")) {
         errors.push("references/cli/vocabulary.md: app lifecycle section must delegate to YAML authority");
     }
-    const channelsSection = vocabulary.split("### Update channels")[1]?.split("### Bundle and SKILL.md vocabulary", 1)[0] ?? "";
+    const channelsSection = vocabulary.split("### Update channels")[1]?.split("## Evaluation and evidence grammar", 1)[0] ?? "";
     if (!channelsSection.includes("references/cli/update-channels.yaml") ||
         !channelsSection.includes("machine-readable authority")) {
         errors.push("references/cli/vocabulary.md: update channels section must delegate to YAML authority");
@@ -285,6 +285,7 @@ export function validateVocabularyAuthority(root = rootDefault()) {
         ...validateUpdateChannelsAuthority(resolved),
         ...validateInstructionContract(resolved),
         ...validateVocabularyIndex(resolved),
+        ...validateGlossaryEntryContract(authorityPath(resolved, "references/artifacts/glossary-entry-contract.yaml")),
     ];
 }
 export function vocabularyAuthorityMain(opts = {}) {
@@ -300,4 +301,3 @@ export function vocabularyAuthorityMain(opts = {}) {
     out("vocabulary authority ok");
     return 0;
 }
-//# sourceMappingURL=vocabularyAuthority.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agentera",
-  "version": "3.0.0-dev.8",
-  "description": "Agentera app-home protocol and CLI (TypeScript)",
+  "version": "3.0.0-dev.80",
+  "description": "One CLI, many capabilities: project state, artifact validation, and capability routing for AI coding agents",
   "keywords": [
     "agentera",
     "agents",
@@ -29,31 +29,57 @@
     "tag": "next"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.json",
-    "prepack": "rm -rf dist && tsc -p tsconfig.json && node scripts/copy-bundle.mjs",
-    "test": "vp test run",
-    "test:watch": "vp test watch",
+    "build": "node scripts/build-package.mjs",
+    "prepack": "node scripts/reject-direct-prepack.mjs",
+    "test": "pnpm run test:source",
+    "test:source": "node scripts/verify-lane.mjs source",
+    "test:stress": "node scripts/verify-lane.mjs stress",
+    "test:performance": "node scripts/verify-lane.mjs performance",
+    "test:performance:integration": "node test/integration/performanceOwner.integration.mjs",
+    "test:capacity": "node scripts/verify-lane.mjs capacity",
+    "test:watch": "vp test watch --config vite.config.ts",
+    "verify:package": "node scripts/verify-lane.mjs package",
+    "verify:generated-overlap": "node scripts/verify-generated-overlap.mjs",
+    "generated:cleanup": "node scripts/build-package.mjs --cleanup",
+    "pack:dry-run": "node scripts/pack-package.mjs --dry-run",
+    "release:prepare": "node scripts/publication-transaction.mjs prepare development",
+    "release:qualify:source": "node scripts/release-qualification.mjs source",
+    "release:ready": "node scripts/release-readiness.mjs development",
+    "release:qualify:candidate": "node scripts/release-qualification.mjs candidate --adapter development",
+    "release:approve": "node scripts/release-qualification.mjs approval --adapter development",
+    "release:attest": "node scripts/release-qualification.mjs attest --adapter development",
+    "release:benchmark:qualification": "node scripts/release-benchmark.mjs qualification",
+    "release:publish:qualified": "node scripts/release-benchmark.mjs publication --adapter development",
+    "release:stage": "node scripts/publication-transaction.mjs stage development --approve",
+    "release:promote": "node scripts/publication-transaction.mjs promote development --approve",
+    "verify:targeted": "node scripts/verify-lane.mjs policy targeted",
+    "verify:precommit": "node scripts/verify-lane.mjs policy precommit",
+    "verify:fast": "node scripts/verify-lane.mjs policy fast",
+    "verify:local": "node scripts/verify-lane.mjs policy local",
+    "verify:merge": "node scripts/verify-lane.mjs policy merge",
+    "verify:scheduled": "node scripts/verify-lane.mjs policy scheduled",
+    "verify:release": "node scripts/release-qualification.mjs verify --json",
     "lint": "vp lint",
     "fmt": "vp fmt",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "bundle:data": "node scripts/copy-bundle.mjs",
-    "publish:dev": "set -a; [ -f ../../.env ] && . ../../.env; set +a; npm run build && npm run bundle:data && npm publish --tag next"
+    "bundle:data": "node scripts/build-package.mjs"
   },
   "dependencies": {
-    "smol-toml": "^1.3.1",
+    "smol-toml": "^1.7.1",
     "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",
-    "typescript": "^5.7.2",
-    "vite": "^6.3.5",
-    "vite-plus": "^0.1.22"
+    "@typescript/typescript6": "6.0.2",
+    "typescript": "^7.0.2",
+    "vite": "^8.2.1",
+    "vite-plus": "^0.2.8"
   },
   "engines": {
     "node": ">=22"
   },
   "agentera": {
     "suiteVersion": "3.0.0",
-    "gitRef": "808b34034dd5b956bc8e6f66a5f87f308a30e87a"
+    "gitRef": "296cb7e29c2521b95985f933b08f1a5d7724b4f0"
   }
 }

package/bundle/references/adapters/cursor.md

@@ -1,214 +0,0 @@
-# Cursor adapter reference
-
-Agentera v1 ships Cursor as two registry identities:
-
-| Identity | Host | Support status |
-| -------- | ---- | -------------- |
-| `cursor` | Cursor IDE (Composer / Agent) | supported |
-| `cursor-agent` | Cursor Agent CLI (`cursor-agent`, `agent`) | degraded |
-
-Decision 63 owns v1 scope. Cloud agents are unsupported. Bare text `hej` routing
-stays metadata-only like Claude, Copilot, and Codex.
-
-## Quick install
-
-**Local plugin (no Marketplace listing required)**
-
-```bash
-git clone https://github.com/jgabor/agentera.git ~/.cursor/plugins/local/agentera
-# or: ln -s /path/to/agentera ~/.cursor/plugins/local/agentera
-```
-
-Restart Cursor or run **Developer: Reload Window**. The plugin root must contain
-`.cursor-plugin/plugin.json`. Agentera is not published to the Cursor Marketplace
-yet; use this manual local path or Cursor's local plugin loading UI instead.
-
-The plugin loads skills, managed capability agents, and plugin hooks. When you open
-a project that is not an Agentera install root, `sessionStart` exports
-`AGENTERA_HOME` from the plugin checkout (including a plugin-root fallback when env
-and project walk-up do not resolve a managed root).
-
-**Portable skill plus project upgrade**
-
-```bash
-npx skills add jgabor/agentera -g -a cursor --skill agentera -y
-uvx --from git+https://github.com/jgabor/agentera agentera upgrade --project "$PWD" --runtime cursor --yes
-uvx --from git+https://github.com/jgabor/agentera agentera doctor --runtime cursor
-```
-
-Use the plugin path for a user-global install. Use upgrade when you need
-project-committed `.cursor/hooks.json` and `.cursor/agents/` copies. Both paths can
-be combined.
-
-From a clone, replace `uvx … agentera` with `uv run scripts/agentera`. User-facing
-install steps also live in [`README.md`](../../README.md) and
-[`UPGRADE.md`](../../UPGRADE.md).
-
-## Repo-native surfaces
-
-This repository dogfoods committed Cursor surfaces:
-
-- `.cursor/hooks.json` — sessionStart env export, preToolUse hard gate, postToolUse advisory validation
-- `.cursor/agents/agentera.md` — single managed agent descriptor (D73)
-- `.cursor-plugin/plugin.json` — marketplace submission-ready manifest
-
-Hooks invoke the TypeScript CLI through `npx -y agentera hook …` (or
-`npx -y agentera@next hook …` on the development channel). `sessionStart` exports
-`AGENTERA_HOME` through Cursor hook JSON (`env`) before subsequent hook executions
-run.
-
-## AGENTERA_HOME wiring
-
-Primary path: `agentera hook cursor-session-start` resolves the install root from
-`AGENTERA_HOME`, project walk-up, the plugin/checkout root, or the platform default
-app home when env and walk-up do not resolve a managed root, then returns
-`{"env": {"AGENTERA_HOME": "<root>"}}` plus optional `additional_context` from
-the shared session digest.
-
-Fallback: `packages/cli/src/setup/cursor.ts` reports persistent shell configuration
-only when live shell-tool smoke proves session env does not propagate to CLI
-subprocesses. Agentera does not write shell rc files by default.
-
-## Artifact validation
-
-| Surface | Behavior | Claim status |
-| ------- | -------- | ------------ |
-| IDE `preToolUse` (Write/Edit) | Deny invalid reconstructable artifact candidates | Verified after live preToolUse Write smoke (2026-05-24) |
-| IDE `postToolUse` (Write/Edit) | Advisory validation through shared `validate_artifact.py` | Active |
-| CLI | Degraded; depends on workspace hook install and env propagation | Follows IDE smoke evidence only |
-
-Live preToolUse Write smoke passed on 2026-05-24 with invalid-block and valid-allow
-cases recorded in `.agentera/smoke-cursor-pretooluse-evidence.txt`. Conditional
-hard-gate claims for reconstructable IDE Write and Edit candidates are verified;
-release tagging and marketplace publication remain blocked pending broader release
-closeout.
-
-## Subagent dispatch
-
-IDE: managed descriptors under `.cursor/agents/` with `<!-- agentera: managed -->`
-ownership markers. Upgrade refreshes Agentera-owned targets and preserves unknown
-collisions.
-
-CLI: host-managed `cursor-agent` print mode; no separate TOML descriptor install.
-Eval coverage targets `cursor-agent` first.
-
-## Upgrade and doctor
-
-```bash
-uv run scripts/agentera upgrade --runtime cursor --dry-run
-uv run scripts/agentera doctor --runtime cursor
-```
-
-Upgrade copies managed hooks, agents, and plugin metadata into target projects
-with the same ownership protections used for OpenCode and Codex.
-
-Doctor reports helper access, hook presence, and managed agent alignment.
-
-## Eval
-
-```bash
-uv run scripts/eval_skills.py --runtime cursor-agent --skill hej --dry-run
-```
-
-Print mode uses `cursor-agent -p --output-format json --force`. Harnesses apply
-bounded timeouts because some CLI builds hang after completion.
-
-## Unsupported in v1
-
-- Cloud agents (no project hook or managed-agent guarantees)
-- Bare `hej` prompt rewrite routing
-- Session compaction injection beyond shared hook helpers
-- Separate cursor-agent hook install distinct from IDE workspace surfaces
-
-## Profilera session corpus (Section 22)
-
-Profilera mines five canonical record types from host session data. This section
-maps each record type to Cursor IDE local storage on disk.
-
-### Probe paths
-
-| Path | Purpose |
-| ---- | ------- |
-| `~/.cursor/projects/` | Root directory for workspace-scoped Cursor state |
-| `~/.cursor/projects/<project-slug>/agent-transcripts/<session-id>/*.jsonl` | Agent session transcripts (Composer / Agent) |
-| `~/.cursor/projects/<project-slug>/repo.json` | Workspace metadata (`id` UUID); slug mapping is primary for project scoping |
-| `~/.config/cursor/chats/<md5(project-path)>/<session-id>/store.db` | Cursor Agent CLI chat store (gap-fill when JSONL absent) |
-
-Override the projects root with `--cursor-projects-dir`, the CLI chats root with
-`--cursor-chats-dir`, or disable both Cursor runtimes with `--no-cursor` on
-`scripts/extract_corpus.py` and `agentera stats refresh`.
-
-Project slug convention: absolute project path segments joined with `-`, lowercased
-(for example `/home/user/git/agentera` → `home-user-git-agentera`). CLI workspace
-hashes use `md5(absolute-project-path)` hex (same string Cursor uses under
-`~/.config/cursor/chats/`). When `--project-root` is supplied, extraction prefers
-matching slugs and workspace hashes over unrelated stores.
-
-### Transcript JSONL shape
-
-Each line is a JSON object:
-
-```json
-{"role": "user", "message": {"content": [{"type": "text", "text": "..."}]}}
-{"role": "assistant", "message": {"content": [{"type": "text", "text": "..."}, {"type": "tool_use", "name": "grep", "input": {"pattern": "..."}}]}}
-```
-
-Roles are `user` or `assistant`. `message.content` is a list of blocks. Text blocks
-use `type: "text"`. Tool blocks use `type: "tool_use"` with `name` and `input`.
-
-### Cursor Agent CLI `store.db` shape
-
-Runtime id `cursor-agent` reads SQLite stores at
-`~/.config/cursor/chats/<workspace-hash>/<session-id>/store.db`. Each store has:
-
-| Table | Purpose |
-| ----- | ------- |
-| `blobs` | JSON message payloads keyed by content hash (`role`, `content`, optional tool blocks) |
-| `meta` | Session metadata (`agentId`, model, mode) |
-
-JSON blobs use `role` values such as `user`, `assistant`, and `tool`. User content is
-often a plain string; assistant content is a list that may include `text` and
-`tool-call` items (`toolName`, `args`). Sessions that already have IDE JSONL under
-`agent-transcripts/<same-session-id>/` are skipped (gap-fill only).
-
-### Portable record families
-
-| Family | Cursor source | Status |
-| ------ | ------------- | ------ |
-| Decision history | `history_prompt` from decision-rich user text blocks | Yes (local JSONL) |
-| Conversation exchanges | `conversation_turn` from user/assistant lines | Yes (local JSONL) |
-| Tool usage | `tool_call` from `tool_use` / `tool-call` blocks | Yes (bounded args) |
-| Instruction documents | Project `AGENTS.md` via shared `--project-root` scan | Yes (filesystem) |
-| Project config signals | Project manifests via shared `--project-root` scan | Yes (filesystem) |
-
-### Degradation and privacy
-
-Extraction is read-only and local-only. Runtime status uses the shared
-`runtime_statuses` vocabulary (`ok`, `missing`, `sparse`, `degraded`, `skipped`).
-Diagnostics report counts and bounded reasons only; raw transcript text must not
-appear in errors, smoke output, or test assertions.
-
-| Condition | Status | Reason |
-| --------- | ------ | ------ |
-| Store path disabled (`--no-cursor`) | `skipped` | `disabled` |
-| `~/.cursor/projects` or `~/.config/cursor/chats` absent | `missing` | `store_absent` |
-| No `*.jsonl` under `agent-transcripts` / no gap-fill `store.db` | `sparse` | `no_candidate_files` / `no_matching_records` |
-| Permission denied | `degraded` | `store_locked` |
-| Invalid JSONL lines | `degraded` | `schema_divergent` |
-| Candidates present but no normalized records | `sparse` | `no_matching_records` |
-
-### Gaps
-
-- Numeric or opaque project directory names (no slug) skip filesystem project-path
-  inference; `--project-root` mapping still scopes extraction when the slug matches.
-- Cloud agent sessions do not write local `agent-transcripts` in v1.
-- `cursor-agent` `store.db` sessions that already have IDE JSONL transcripts are skipped
-  to avoid duplicate corpus records; gap-fill covers chat-only CLI sessions.
-- Binary or non-JSON blobs in `store.db` degrade with bounded diagnostics and do not
-  leak transcript text.
-
-## Source of truth
-
-RuntimeAdapter records live in
-`references/adapters/runtime-adapter-registry.yaml`. Parity comparisons belong in
-`references/adapters/runtime-feature-parity.md`.