autonomous-sdlc-harness 0.1.0

package/dist/generators/repoRoot.js

@@ -0,0 +1,417 @@
+/**
+ * Generator: the files `init` writes at the adopting repository's own root — the ignore rules for
+ * the machine-local files the harness configures by path, the line-ending attributes that keep its
+ * shell assets runnable, and the browser wiring the interactive test phase needs.
+ *
+ * **The rule this module exists to enforce: nothing here may take a file the adopter already owns
+ * away from them.** All three targets are files a repository is likely to have before the harness
+ * arrives, and two of them are shared with tooling the harness knows nothing about. So the two
+ * shared ones are merged rather than written: `.gitignore` gains a managed block holding only the
+ * lines that are not already somewhere in the file, and `.mcp.json` gains only the servers it does
+ * not already declare. `.gitattributes` is the one create-if-absent target, because a repository
+ * that has one has already made every decision this template would otherwise make for it.
+ *
+ * ## Four non-obvious choices, and where each comes from
+ *
+ * 1. **What is ignored is the *file*, never the *path*.** `pushEnvPath`, `qa.credentialsPath` and
+ *    the client env file at `<appDir>/.env` name machine-local files whose location is repo-scoped
+ *    configuration — the same for everyone who clones — which is why the path is in
+ *    `harness.config.json` and only the contents stay local (`schemas/harness.config.schema.json`).
+ *    Each is ignored under the path the config actually holds, so an adopter who moves one moves its
+ *    ignore rule with it, and the committed `.example` sibling a fresh clone copies from is
+ *    deliberately *not* matched by any of the three. The third differs from the other two only in how
+ *    the config names it — its **directory** is the configured value and its basename is fixed — and
+ *    it is here because `scripts/setup-worktree.sh` symlinks it into every working copy it
+ *    bootstraps, so without the rule every fresh worktree opens with an untracked entry.
+ * 2. **A directory the tree generator gives a README is ignored by its contents, never as a
+ *    directory.** That README is the committed contract for what belongs in the directory
+ *    (`generators/stateDir.ts`), while what the run daemon writes beside it — the transcripts in
+ *    `autonomous_logs`, the dropped prompts in `autonomous_inbox` — is machine-local. An ignore rule
+ *    on the directory would take the README with it and could not be undone by a negation: git
+ *    cannot re-include a file whose parent directory is excluded. Hence `…/autonomous_logs/*` plus
+ *    `!…/autonomous_logs/README.md`, and the same pair for `autonomous_inbox` and for
+ *    `clarifications`, rather than one directory rule each. The browser group
+ *    ({@link TEMPLATES.gitignoreQa}) is the converse case and is spelled the converse way: none of
+ *    its directories carries a committed contract file, so each is a whole-directory rule and none
+ *    goes through {@link treeDirectory} — {@link QA_ARTIFACTS_DIR} deliberately has no
+ *    `STATE_DIR_ENTRIES` row.
+ * 3. **`.mcp.json` is written when `phases.qa` is on *and* `qa.driver` is `web-playwright`, and in
+ *    no other case** ({@link browserWiringApplies}), so an adopter who never drives a browser pays
+ *    neither the browser tool schemas in every session's context nor a launched browser process
+ *    (`cli/templates/repo/README.md`). A **mobile** driver gets a note and no file: the two mobile
+ *    variants of the interactive test agent ship declared-not-implemented with built-ins-only tool
+ *    allowlists, so a block written for them would declare servers nothing can ever start. The
+ *    permission profile gates the same wiring from the other side, and
+ *    {@link assertServersMatchProfile} checks the two agree: the profile's interactive-test fragment
+ *    names the servers it starts, and a server it starts that this file does not declare never
+ *    starts at all — an un-loaded tool stalls an unattended run rather than failing it, which is the
+ *    one failure mode both files exist to prevent.
+ * 4. **The block covers files a harness command creates, and of the `.bak` siblings only the
+ *    configuration's.** OS and editor noise (`.DS_Store`, `*~`) is per-developer and per-OS, so it
+ *    belongs in the adopter's own ignore file or a global `core.excludesFile` and not in a block
+ *    every adopter shares. The `.bak` copies `init --force` takes of every other generated file are
+ *    the adopter's previous copies of files they edit, from a deliberate regeneration whose value is
+ *    that they stay visible — only the {@link CONFIG_FILENAME} `.bak`, which `config set` writes on
+ *    the documented path, is ignored, and it is ignored root-anchored. A bare `*.bak` has no path
+ *    component and so matches at every depth of the adopter's tree; this block is append-only, so a
+ *    too-wide rule can be withdrawn only by hand in every adopter's file.
+ *
+ * Nothing here touches the filesystem beyond reading its templates: the generator plans, and `init`
+ * applies the plan once.
+ */
+import { join } from 'node:path';
+import { browserWiringApplies, CONFIG_FILENAME, DEFAULTS } from '../config/model.js';
+import { internal } from '../core/errors.js';
+import { isJsonObject } from '../core/json.js';
+import { readTemplate } from '../core/paths.js';
+import { normalizeRepoDir } from '../core/repoPaths.js';
+import { renderTemplate } from '../core/templating.js';
+import { PUSH_ENV_PATH, QA_CREDENTIALS_PATH } from './harnessConfig.js';
+import { QA_TEMPLATE_PATH as QA_PROFILE_FRAGMENT } from './permissionProfile.js';
+import { STATE_DIR_ENTRIES } from './stateDir.js';
+/** The templates' subdirectory under `cli/templates/`, addressed as {@link readTemplate} wants it. */
+const TEMPLATE_DIR = 'repo';
+/**
+ * The templates, stored dot-less and given their dot here.
+ *
+ * The naming rule is `cli/templates/README.md`'s and it is load-bearing twice over: a real
+ * `.gitignore` inside the harness repository would be honoured by git and could exclude files that
+ * are meant to ship, and a packaged one is rewritten to `.npmignore` on publish, so a dot-named
+ * template does not survive the wire.
+ *
+ * `gitignoreQa` is a **fragment** of `gitignore` rather than a file of its own, on the pattern
+ * `claude/settings.autonomous.qa.json` already sets: it is rendered into the `qaBrowserArtifacts`
+ * token when — and only when — {@link browserWiringApplies} holds. Its rules and *its comments* are
+ * then both absent from a repository that drives no browser, which one token per rule in the parent
+ * template could not do: the write engine drops a blank line but keeps a comment, so gated rules with
+ * an ungated comment group would leave the file explaining rules it does not carry.
+ */
+const TEMPLATES = Object.freeze({
+    gitignore: 'gitignore',
+    gitignoreQa: 'gitignore.qa',
+    gitattributes: 'gitattributes',
+    mcp: 'mcp.json',
+});
+/** Where each of those lands, relative to the adopting repository's root. */
+export const GITIGNORE_PATH = '.gitignore';
+export const GITATTRIBUTES_PATH = '.gitattributes';
+export const MCP_PATH = '.mcp.json';
+/**
+ * The line introducing the managed block in `.gitignore`, and the whole of how a re-run recognises
+ * its own lines.
+ *
+ * It has to stay byte-stable across releases: the write engine finds the block by matching this
+ * exact line, so changing it would make the next `init` add a second block rather than extend the
+ * first. It names the block's extent — the run of non-blank lines beneath it — because that is what
+ * the engine actually maintains: a later run's additions are inserted at the end of that run.
+ */
+export const GITIGNORE_BLOCK_HEADER = '# >>> autonomous-sdlc-harness (managed block: this line to the next blank line; re-run init to extend it) >>>';
+/**
+ * The run daemon's log directory, whose contents are machine-local.
+ *
+ * This and {@link INBOX_DIR} are named here as strings and checked against {@link STATE_DIR_ENTRIES}
+ * by {@link treeDirectory} rather than imported as rows, because that table has no "is this directory
+ * machine-local" column and inventing one would put the ignore decision in the generator that writes
+ * the tree. The check is what keeps the two in step: rename a directory there and this generator
+ * fails loudly instead of ignoring a path the tree no longer has.
+ */
+const LOGS_DIR = 'autonomous_logs';
+/** The unattended loop's drop point for prompts, whose contents are machine-local likewise. */
+const INBOX_DIR = 'autonomous_inbox';
+/**
+ * The park-and-ask channel, whose questions and answers are machine-local.
+ *
+ * It has a row in {@link STATE_DIR_ENTRIES} and therefore a committed README of its own, so it is
+ * ignored **by its contents** with a negation for that README, exactly as {@link LOGS_DIR} and
+ * {@link INBOX_DIR} are — a directory rule here would take the README with it and no negation could
+ * bring it back. Its questions sit one level further down, under a `<branch>` subdirectory, which
+ * the contents glob covers along with everything else beneath the directory.
+ * {@link clarificationsIgnoreRules} builds all three spellings of that decision — including the
+ * whole-directory rule an earlier release wrote — and goes through {@link treeDirectory}, which
+ * checks the row still **exists** for the same reason it checks for the other two.
+ */
+const CLARIFICATIONS_DIR = 'clarifications';
+/**
+ * The throwaway files an agent runs a probe or a mutation check from, which are machine-local and
+ * must never reach a commit — the property the directory's own README states as its contract.
+ *
+ * Named here as a string and checked against {@link STATE_DIR_ENTRIES} by {@link treeDirectory} for
+ * the reason {@link LOGS_DIR} gives, and ignored **by its contents** with a negation for its README
+ * for the reason the three above are.
+ */
+const SCRATCH_DIR = 'scratch';
+/**
+ * Every run-artifact directory ignored **by its contents** with its committed README excepted, in
+ * block order — the declaration of which contract files the managed block owes a negation to.
+ *
+ * {@link contentsIgnoredDirectories} exports it because `doctor` has to answer for each of these
+ * paths whether or not the negation for it is still in the adopter's file. A set read back out of
+ * that file loses the pair whose negation was deleted, which is the one state the check exists to
+ * catch. A directory added here is tested with no edit on the `doctor` side.
+ */
+const CONTENTS_IGNORED_DIRS = Object.freeze([
+    Object.freeze({ dir: LOGS_DIR, role: "the run daemon's log directory" }),
+    Object.freeze({ dir: CLARIFICATIONS_DIR, role: 'the park-and-ask channel' }),
+    Object.freeze({ dir: INBOX_DIR, role: "the unattended loop's drop point for prompts" }),
+    Object.freeze({ dir: SCRATCH_DIR, role: 'the throwaway-probe directory' }),
+]);
+/**
+ * The unattended loop's stop, pause and dispatch-count control files, written **flat** at the root
+ * of the run-artifact tree while a run is in flight.
+ *
+ * They must never be committed, and the tree around them is what makes that easy to get wrong: it is
+ * otherwise a committed tree, so a single `git add <stateDir>/` takes whichever of these happen to
+ * exist at that moment. A committed `STOP` is the worst of them — it halts every run for everyone
+ * who clones, at a step whose own instruction forbids deleting the file.
+ *
+ * There is no run-control *subdirectory* to ignore instead: the flow keeps these flat because on a
+ * case-insensitive filesystem `PAUSE` and a `pause/` directory are the same path and collide. So
+ * each name here becomes its own file rule.
+ */
+const RUN_CONTROL_ARTIFACTS = Object.freeze([
+    '.dispatch_counter',
+    'STOP',
+    'AUTONOMOUS_STOP',
+    'PAUSE',
+    'RESUME',
+    'PAUSE_ACK',
+    'PAUSE_PROGRESS.md',
+]);
+/**
+ * Where the interactive-test agent sends a screenshot, under the run-artifact tree.
+ *
+ * It is **not** a {@link STATE_DIR_ENTRIES} row and does not go through {@link treeDirectory}, and
+ * both are deliberate: the tree generator neither creates it nor commits a contract file into it, so
+ * it is ignored as a whole directory like the two browser-server directories beside it rather than by
+ * its contents. Routing it through that helper would fail the run for a row nothing is meant to add.
+ */
+const QA_ARTIFACTS_DIR = 'qa_artifacts';
+/** The client env file's fixed basename; its directory is `appDir`, which is the configured half. */
+const CLIENT_ENV_FILENAME = '.env';
+/** The per-directory contract file the tree generator writes, which the ignore rule excepts. */
+const README_FILENAME = 'README.md';
+/** The key `.mcp.json` declares its servers under. */
+const SERVERS_KEY = 'mcpServers';
+/** The key the permission profile's interactive-test fragment starts those servers with. */
+const ENABLED_SERVERS_KEY = 'enabledMcpjsonServers';
+/**
+ * Render a repo-root template through {@link renderTemplate}.
+ *
+ * **`assertNoneSurvive` is off**, because every value substituted here is a configured path and a
+ * configured path is the adopter's to write. One carrying `{{…}}` would be a strange thing to put in
+ * `harness.config.json`, but it is not a fault in this CLI, and the post-check reports its findings
+ * as exactly that.
+ *
+ * **The lax {@link normalizeRepoDir} is what feeds it**, not the strict variant: a gitignore pattern
+ * is matched literally, so `./x` and `x` are two different rules and resolving a `..` in one would
+ * change which files it covers.
+ */
+function render(template, values) {
+    return renderTemplate(readTemplate(`${TEMPLATE_DIR}/${template}`), values, {
+        describe: `the repo-root template ${template}`,
+    });
+}
+/** Read one of the CLI's templates and parse it as a JSON object. */
+function parseTemplateObject(path) {
+    const text = readTemplate(path);
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        throw internal(`the template ${path} is not valid JSON (${detail})`);
+    }
+    if (!isJsonObject(parsed))
+        throw internal(`the template ${path} is not a JSON object`);
+    return parsed;
+}
+/** The servers the permission profile's interactive-test fragment starts for a run. */
+function serversStartedByProfile() {
+    const fragment = parseTemplateObject(QA_PROFILE_FRAGMENT);
+    const enabled = fragment[ENABLED_SERVERS_KEY];
+    if (!Array.isArray(enabled)) {
+        throw internal(`the permission profile's interactive-test fragment ${QA_PROFILE_FRAGMENT} has no \`${ENABLED_SERVERS_KEY}\` list, so the servers it starts cannot be checked against the ones ${MCP_PATH} declares`);
+    }
+    return enabled.map((entry) => {
+        if (typeof entry !== 'string') {
+            throw internal(`\`${ENABLED_SERVERS_KEY}\` in ${QA_PROFILE_FRAGMENT} carries an entry that is not a string`);
+        }
+        return entry;
+    });
+}
+/**
+ * The declared servers and the started servers have to be the same set, and the check runs in
+ * **both** directions because the two disagreements fail differently and neither fails loudly:
+ *
+ * - a server the profile starts that this file does not declare never starts, so the tools the
+ *   profile allow-listed do not exist at run time — and an un-loaded tool in print mode stalls
+ *   rather than prompting, which is a run that parks with no diagnostic;
+ * - a server declared here that the profile does not start is wiring nothing enables, so it reads
+ *   as available while no run can ever call it.
+ *
+ * Both are faults in these two shipped templates rather than in the adopting repository, so both
+ * exit {@link EXIT.INTERNAL}. The end-to-end pairing — the generated profile against the generated
+ * `.mcp.json` — is the fixture tests', which can see the files this module only plans.
+ */
+function assertServersMatchProfile(servers) {
+    const declared = Object.keys(servers);
+    const started = serversStartedByProfile();
+    const undeclared = started.filter((name) => !declared.includes(name));
+    if (undeclared.length > 0) {
+        throw internal(`the permission profile's interactive-test fragment starts the MCP server(s) ${undeclared.join(', ')}, which the ${MCP_PATH} template does not declare: the server would never start, so the tools the profile allow-lists would not exist at run time and the phase would stall rather than fail`);
+    }
+    const unstarted = declared.filter((name) => !started.includes(name));
+    if (unstarted.length > 0) {
+        throw internal(`the ${MCP_PATH} template declares the MCP server(s) ${unstarted.join(', ')}, which the permission profile's interactive-test fragment does not start: the wiring would be present and unreachable`);
+    }
+}
+/** The `mcpServers` object of the browser-wiring template, checked against the profile fragment. */
+function browserWiring() {
+    const template = parseTemplateObject(`${TEMPLATE_DIR}/${TEMPLATES.mcp}`);
+    const servers = template[SERVERS_KEY];
+    if (!isJsonObject(servers)) {
+        throw internal(`the ${MCP_PATH} template has no \`${SERVERS_KEY}\` object, so there is nothing to merge`);
+    }
+    assertServersMatchProfile(servers);
+    return template;
+}
+/**
+ * One machine-local run-daemon directory, repo-relative, having checked the tree still has a row for
+ * it. `role` names what the directory is for and what a stale rule would let through, so the two
+ * callers fail with their own diagnosis rather than a shared one.
+ */
+function treeDirectory(stateDir, dir, role) {
+    if (!STATE_DIR_ENTRIES.some((entry) => entry.dir === dir)) {
+        throw internal(`the ignore rules name ${dir} as ${role}, which the run-artifact tree no longer has: the generated rule would ignore a path nothing writes to, and the directory that replaced it would be committed file by file`);
+    }
+    return `${stateDir}/${dir}`;
+}
+/** One row of {@link CONTENTS_IGNORED_DIRS}, spelled for a configured `stateDir`. */
+function contentsIgnoredDirectory(stateDir, dir) {
+    const row = CONTENTS_IGNORED_DIRS.find((entry) => entry.dir === dir);
+    if (row === undefined) {
+        throw internal(`${dir} is not one of the contents-ignored directories this generator declares`);
+    }
+    const directory = treeDirectory(normalizeRepoDir(stateDir), row.dir, row.role);
+    const readmePath = `${directory}/${README_FILENAME}`;
+    return { directory, contents: `${directory}/*`, readmePath, readmeException: `!${readmePath}` };
+}
+/**
+ * All of them, for one configured `stateDir` — the set of committed contract files the managed block
+ * has to leave committable, taken from this generator rather than from any file it wrote.
+ *
+ * Exported for `doctor`, which asks git about each of these paths: derived from the artifact under
+ * audit, the question would go missing along with the negation line that answers it.
+ */
+export function contentsIgnoredDirectories(stateDir) {
+    return CONTENTS_IGNORED_DIRS.map((row) => contentsIgnoredDirectory(stateDir, row.dir));
+}
+/**
+ * Build them for one configured `stateDir`, having checked the tree still has a row for the channel:
+ * a rule spelled for a directory the tree no longer writes is a rule that covers nothing, and the
+ * directory that replaced it would be committed file by file.
+ */
+export function clarificationsIgnoreRules(stateDir) {
+    const channel = contentsIgnoredDirectory(stateDir, CLARIFICATIONS_DIR);
+    return { ...channel, supersededDirectoryRule: `${channel.directory}/` };
+}
+/**
+ * Enqueue the repository-root files: the ignore block (`merge-lines`), the line-ending attributes
+ * (`create-if-absent`), and — only where {@link browserWiringApplies} holds, i.e. the interactive
+ * test phase enabled **and** its driver the browser one — the browser wiring (`merge-json`).
+ *
+ * Each is one action in the run's log, so a re-run reports per file whether it was created, merged
+ * into or left alone rather than reporting "repository root" once.
+ */
+export function writeRepoRootFiles({ repoRoot, config, plan }) {
+    const files = [];
+    const notes = [];
+    const stateDir = normalizeRepoDir(config.stateDir ?? DEFAULTS.stateDir);
+    const logs = contentsIgnoredDirectory(stateDir, LOGS_DIR);
+    const inbox = contentsIgnoredDirectory(stateDir, INBOX_DIR);
+    const scratch = contentsIgnoredDirectory(stateDir, SCRATCH_DIR);
+    const clarifications = clarificationsIgnoreRules(stateDir);
+    const pushEnv = normalizeRepoDir(config.pushEnvPath ?? PUSH_ENV_PATH);
+    // The phase, not the driver: every driver reads a credentials file, so the ignore rule below is
+    // gated on the phase alone. The browser wiring is the one decision that also reads the driver.
+    const qaEnabled = config.phases?.qa === true;
+    const wiresBrowser = browserWiringApplies(config);
+    // Empty when the phase is off: the write engine drops blank lines from a managed block, so the
+    // rule is simply absent rather than being written as a pattern matching nothing.
+    const credentials = qaEnabled ? normalizeRepoDir(config.qa?.credentialsPath ?? QA_CREDENTIALS_PATH) : '';
+    // The repository root is `.`, and `./.env` and `.env` are two different gitignore patterns: a
+    // pattern is matched literally, so the root case is spelled as the bare filename.
+    const appDir = normalizeRepoDir(config.appDir ?? DEFAULTS.appDir);
+    const clientEnv = appDir === '.' ? CLIENT_ENV_FILENAME : `${appDir}/${CLIENT_ENV_FILENAME}`;
+    // The browser group, gated on the DRIVER rather than the phase: only the browser driver starts an
+    // MCP server, so a mobile-driver repository — whose interactive-test variants ship
+    // declared-not-implemented with built-ins-only allowlists — has nothing that could write any of
+    // these paths. Empty otherwise, and the write engine drops the blank line, so the rules and the
+    // comments explaining them are simply absent rather than present and inert.
+    const qaBrowserArtifacts = wiresBrowser
+        ? render(TEMPLATES.gitignoreQa, { qaArtifactsDir: `${stateDir}/${QA_ARTIFACTS_DIR}/` }).trimEnd()
+        : '';
+    const ignoreBlock = render(TEMPLATES.gitignore, {
+        pushEnvPath: pushEnv,
+        qaCredentialsPath: credentials,
+        clientEnvPath: clientEnv,
+        logsGlob: logs.contents,
+        logsReadmeException: logs.readmeException,
+        // One token carrying seven rules: the names are declared once, above, and the template holds one
+        // comment for the group rather than seven near-identical ones.
+        runControlArtifacts: RUN_CONTROL_ARTIFACTS.map((name) => `${stateDir}/${name}`).join('\n'),
+        clarificationsGlob: clarifications.contents,
+        clarificationsReadmeException: clarifications.readmeException,
+        inboxGlob: inbox.contents,
+        inboxReadmeException: inbox.readmeException,
+        scratchGlob: scratch.contents,
+        scratchReadmeException: scratch.readmeException,
+        // Derived from the configuration's own filename, so a rename moves its ignore rule with it.
+        configBackupFile: `${CONFIG_FILENAME}.bak`,
+        qaBrowserArtifacts,
+    });
+    plan.add({
+        path: join(repoRoot, GITIGNORE_PATH),
+        policy: 'merge-lines',
+        content: ignoreBlock,
+        blockHeader: GITIGNORE_BLOCK_HEADER,
+        label: 'ignore rules for the harness machine-local files',
+    });
+    files.push(GITIGNORE_PATH);
+    plan.add({
+        path: join(repoRoot, GITATTRIBUTES_PATH),
+        policy: 'create-if-absent',
+        content: render(TEMPLATES.gitattributes, {
+            githooksDir: normalizeRepoDir(config.githooksDir ?? DEFAULTS.githooksDir),
+        }),
+        label: 'line-ending attributes',
+    });
+    files.push(GITATTRIBUTES_PATH);
+    if (wiresBrowser) {
+        plan.add({
+            path: join(repoRoot, MCP_PATH),
+            policy: 'merge-json',
+            content: browserWiring(),
+            label: 'browser MCP wiring',
+        });
+        files.push(MCP_PATH);
+    }
+    else if (qaEnabled) {
+        // The phase is on and its driver reaches the application some other way. A distinct note, not
+        // the phase-off one: "turn the phase on" is advice this adopter has already taken, and the thing
+        // they need to know is that the omission is the driver's doing and is not a gap to fill in.
+        notes.push(`no ${MCP_PATH} was written because qa.driver is ${config.qa?.driver ?? DEFAULTS.qa.driver}, which reaches the application through a device runner rather than a browser: the mobile interactive-test variants are declared-not-implemented in this release and carry built-ins-only tool allowlists, so there is no MCP server for them to start. The permission profile omits its browser half for the same reason. To wire a browser instead, change the driver in ${CONFIG_FILENAME} — by hand, or with \`config set qa.driver web-playwright\`, which copies the file to a .bak sibling before replacing it — then re-run \`init --force\`, which moves the half a plain re-run cannot: an ordinary re-run merges ${MCP_PATH} in but keeps the create-if-absent permission profile, leaving the profile starting none of the servers ${MCP_PATH} declares — which stalls the phase rather than failing it — while --force regenerates that profile from the config in effect. --force overwrites generated files but never ${CONFIG_FILENAME}, which init reads on every run, so the driver just set is the one both halves are wired from, and everything --force regenerates is copied to a .bak sibling first`);
+    }
+    else {
+        notes.push(`no ${MCP_PATH} was written, because phases.qa is off and nothing would drive a browser: an adopter who never runs the interactive test phase pays neither the browser tool schemas in every session's context nor a launched browser process. Turn the phase on in ${CONFIG_FILENAME} — by hand, or with \`config set phases.qa true\` (and \`config set qa.driver <driver>\` for a driver other than the default), which copies the file to a .bak sibling before replacing it — then re-run \`init --force\`, which moves the half a plain re-run cannot: an ordinary re-run merges ${MCP_PATH} in but keeps the create-if-absent permission profile, which would then start none of the servers it declares, while --force regenerates that profile from the config in effect. --force overwrites generated files but never ${CONFIG_FILENAME}, which init reads on every run, so the phase just turned on is the one both halves are wired from, and everything --force regenerates is copied to a .bak sibling first`);
+    }
+    // The patterns, in block order and without the comment lines, so a caller can list what is now
+    // ignored without re-deriving it from the rendered text.
+    const ignored = ignoreBlock
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line !== '' && !line.startsWith('#'));
+    return { files, ignored, mcpWritten: wiresBrowser, notes };
+}
+//# sourceMappingURL=repoRoot.js.map

package/dist/generators/repoRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoRoot.js","sourceRoot":"","sources":["../../src/generators/repoRoot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,QAAQ,EAAsB,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAmC,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,sGAAsG;AACtG,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B;;;;;;;;;;;;;;GAcG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,eAAe;IAC9B,GAAG,EAAE,UAAU;CACP,CAAC,CAAC;AAEZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,+GAA+G,CAAC;AAElH;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,+FAA+F;AAC/F,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,SAAS,CAAC;AAQ9B;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAkC,MAAM,CAAC,MAAM,CAAC;IACzE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IAC5E,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;IACvF,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;CAC3E,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7D,mBAAmB;IACnB,MAAM;IACN,iBAAiB;IACjB,OAAO;IACP,QAAQ;IACR,WAAW;IACX,mBAAmB;CACpB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,qGAAqG;AACrG,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,gGAAgG;AAChG,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,sDAAsD;AACtD,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AA4BpD;;;;;;;;;;;GAWG;AACH,SAAS,MAAM,CAAC,QAAgB,EAAE,MAAwC;IACxE,OAAO,cAAc,CAAC,YAAY,CAAC,GAAG,YAAY,IAAI,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE;QACzE,QAAQ,EAAE,0BAA0B,QAAQ,EAAE;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,QAAQ,CAAC,gBAAgB,IAAI,uBAAuB,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,MAAM,QAAQ,CAAC,gBAAgB,IAAI,uBAAuB,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,SAAS,uBAAuB;IAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,CACZ,sDAAsD,mBAAmB,aAAa,mBAAmB,wEAAwE,QAAQ,WAAW,CACrM,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,QAAQ,CAAC,KAAK,mBAAmB,SAAS,mBAAmB,wCAAwC,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,yBAAyB,CAAC,OAAmB;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,CACZ,+EAA+E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,QAAQ,uKAAuK,CACnS,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,CACZ,OAAO,QAAQ,wCAAwC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,wHAAwH,CACpM,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,aAAa;IACpB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,YAAY,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,CAAC,OAAO,QAAQ,sBAAsB,WAAW,yCAAyC,CAAC,CAAC;IAC5G,CAAC;IACD,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAY;IAChE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,CACZ,yBAAyB,GAAG,OAAO,IAAI,2KAA2K,CACnN,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;AAC9B,CAAC;AAiBD,qFAAqF;AACrF,SAAS,wBAAwB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACrE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,QAAQ,CAAC,GAAG,GAAG,yEAAyE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,eAAe,EAAE,CAAC;IACrD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC;AAClG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AAwBD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACvE,OAAO,EAAE,GAAG,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAmB;IAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC;IACtE,gGAAgG;IAChG,+FAA+F;IAC/F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,IAAI,CAAC;IAC7C,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,+FAA+F;IAC/F,iFAAiF;IACjF,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,8FAA8F;IAC9F,kFAAkF;IAClF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,mBAAmB,EAAE,CAAC;IAC5F,kGAAkG;IAClG,mFAAmF;IACnF,gGAAgG;IAChG,gGAAgG;IAChG,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,YAAY;QACrC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,GAAG,QAAQ,IAAI,gBAAgB,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;QACjG,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE;QAC9C,WAAW,EAAE,OAAO;QACpB,iBAAiB,EAAE,WAAW;QAC9B,aAAa,EAAE,SAAS;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,IAAI,CAAC,eAAe;QACzC,iGAAiG;QACjG,+DAA+D;QAC/D,mBAAmB,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1F,kBAAkB,EAAE,cAAc,CAAC,QAAQ;QAC3C,6BAA6B,EAAE,cAAc,CAAC,eAAe;QAC7D,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,oBAAoB,EAAE,KAAK,CAAC,eAAe;QAC3C,WAAW,EAAE,OAAO,CAAC,QAAQ;QAC7B,sBAAsB,EAAE,OAAO,CAAC,eAAe;QAC/C,4FAA4F;QAC5F,gBAAgB,EAAE,GAAG,eAAe,MAAM;QAC1C,kBAAkB;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC;QACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC;QACpC,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,sBAAsB;QACnC,KAAK,EAAE,kDAAkD;KAC1D,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE3B,IAAI,CAAC,GAAG,CAAC;QACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QACxC,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE;YACvC,WAAW,EAAE,gBAAgB,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC;SAC1E,CAAC;QACF,KAAK,EAAE,wBAAwB;KAChC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAE/B,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAC9B,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,aAAa,EAAE;YACxB,KAAK,EAAE,oBAAoB;SAC5B,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,8FAA8F;QAC9F,iGAAiG;QACjG,4FAA4F;QAC5F,KAAK,CAAC,IAAI,CACR,MAAM,QAAQ,qCAAqC,MAAM,CAAC,EAAE,EAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,8WAA8W,eAAe,kOAAkO,QAAQ,2GAA2G,QAAQ,8KAA8K,eAAe,qKAAqK,CACvpC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,MAAM,QAAQ,wPAAwP,eAAe,oSAAoS,QAAQ,iOAAiO,eAAe,0KAA0K,CAC59B,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,yDAAyD;IACzD,MAAM,OAAO,GAAG,WAAW;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC"}