avorelo 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +56 -0
  3. package/bin/avorelo +9 -0
  4. package/package.json +135 -0
  5. package/scripts/README.md +40 -0
  6. package/scripts/cco-dashboard.js +252 -0
  7. package/scripts/cco-status.js +430 -0
  8. package/scripts/lib/activation/account-state.js +37 -0
  9. package/scripts/lib/activation/activation-runner.js +546 -0
  10. package/scripts/lib/activation/activation-self-healing.js +480 -0
  11. package/scripts/lib/activation/activation-state.js +83 -0
  12. package/scripts/lib/activation/activation-summary.js +191 -0
  13. package/scripts/lib/activation/adapters/claude-code.js +77 -0
  14. package/scripts/lib/activation/adapters/codex-cli.js +52 -0
  15. package/scripts/lib/activation/adapters/cursor.js +37 -0
  16. package/scripts/lib/activation/adapters/github-agent.js +39 -0
  17. package/scripts/lib/activation/adapters/terminal.js +42 -0
  18. package/scripts/lib/activation/adapters/vscode.js +39 -0
  19. package/scripts/lib/activation/adapters/windsurf.js +37 -0
  20. package/scripts/lib/activation/ai-surface-detector.js +151 -0
  21. package/scripts/lib/activation/connect-account.js +145 -0
  22. package/scripts/lib/activation/detect-environment.js +75 -0
  23. package/scripts/lib/activation/detect-hosts.js +62 -0
  24. package/scripts/lib/activation/format-activation-output.js +109 -0
  25. package/scripts/lib/activation/next-action.js +43 -0
  26. package/scripts/lib/activation/repair-engine.js +219 -0
  27. package/scripts/lib/activation-distribution-readiness.js +507 -0
  28. package/scripts/lib/adapter-conformance.js +176 -0
  29. package/scripts/lib/adapter-readiness.js +417 -0
  30. package/scripts/lib/adapter-safety-boundaries.js +335 -0
  31. package/scripts/lib/adapter-technical-readiness-gate.js +205 -0
  32. package/scripts/lib/agent-access-governance.js +455 -0
  33. package/scripts/lib/agent-enforcement.js +765 -0
  34. package/scripts/lib/agent-policy-profile.js +210 -0
  35. package/scripts/lib/agent-security/action-evaluator.js +507 -0
  36. package/scripts/lib/agent-security/adapter-registry.js +98 -0
  37. package/scripts/lib/agent-security/auto-policy.js +139 -0
  38. package/scripts/lib/agent-security/bounded-scan.js +93 -0
  39. package/scripts/lib/agent-security/enforcement-adapter.js +174 -0
  40. package/scripts/lib/agent-security/enforcement-engine.js +1129 -0
  41. package/scripts/lib/agent-security/file-write-adapter.js +183 -0
  42. package/scripts/lib/agent-security/file-write-rules.js +178 -0
  43. package/scripts/lib/agent-security/index.js +3342 -0
  44. package/scripts/lib/agent-security/instruction-risk.js +181 -0
  45. package/scripts/lib/agent-security/mcp-action-adapter.js +185 -0
  46. package/scripts/lib/agent-security/mcp-action-rules.js +184 -0
  47. package/scripts/lib/agent-security/package-action-adapter.js +175 -0
  48. package/scripts/lib/agent-security/package-action-rules.js +233 -0
  49. package/scripts/lib/agent-security/performance.js +148 -0
  50. package/scripts/lib/agent-security/permission-minimizer.js +403 -0
  51. package/scripts/lib/agent-security/scan-cache.js +74 -0
  52. package/scripts/lib/agent-security/source-trust.js +146 -0
  53. package/scripts/lib/ai-install-prompt.js +288 -0
  54. package/scripts/lib/ai-workspace-hygiene.js +1499 -0
  55. package/scripts/lib/alpha-activation.js +520 -0
  56. package/scripts/lib/alpha-feedback.js +263 -0
  57. package/scripts/lib/alpha-readiness-gate.js +332 -0
  58. package/scripts/lib/anti-gaming.js +169 -0
  59. package/scripts/lib/artifact-health.js +431 -0
  60. package/scripts/lib/attribution.js +180 -0
  61. package/scripts/lib/audit.js +289 -0
  62. package/scripts/lib/avorelo-skill-registry.js +810 -0
  63. package/scripts/lib/batch-jobs.js +71 -0
  64. package/scripts/lib/brain-pack.js +578 -0
  65. package/scripts/lib/brand-boundary.js +424 -0
  66. package/scripts/lib/brand.js +74 -0
  67. package/scripts/lib/browser-capability.js +1048 -0
  68. package/scripts/lib/browser-proof-preflight.js +321 -0
  69. package/scripts/lib/cache-readiness.js +187 -0
  70. package/scripts/lib/canonical-reentry.js +162 -0
  71. package/scripts/lib/capability-packs.js +314 -0
  72. package/scripts/lib/capability-recommender.js +512 -0
  73. package/scripts/lib/capability-registry.js +1059 -0
  74. package/scripts/lib/carry-forward-surfacing.js +194 -0
  75. package/scripts/lib/ccusage-adapter.js +188 -0
  76. package/scripts/lib/company-loop.js +1149 -0
  77. package/scripts/lib/config.js +637 -0
  78. package/scripts/lib/context-acquisition-plan.js +287 -0
  79. package/scripts/lib/context-budget-guard.js +170 -0
  80. package/scripts/lib/context-budget-scanner.js +257 -0
  81. package/scripts/lib/context-optimizer.js +715 -0
  82. package/scripts/lib/context-reduction-plan.js +178 -0
  83. package/scripts/lib/context-safety.js +88 -0
  84. package/scripts/lib/context-savings-engine.js +158 -0
  85. package/scripts/lib/cost-evidence.js +254 -0
  86. package/scripts/lib/cross-host-install-plan.js +308 -0
  87. package/scripts/lib/cross-host-install-readiness.js +237 -0
  88. package/scripts/lib/cross-host-value-flow.js +268 -0
  89. package/scripts/lib/dashboard.js +900 -0
  90. package/scripts/lib/design-partner-feedback.js +346 -0
  91. package/scripts/lib/entitlements.js +100 -0
  92. package/scripts/lib/execution-packet.js +559 -0
  93. package/scripts/lib/experimentation-events.js +547 -0
  94. package/scripts/lib/external-capability-compliance.js +107 -0
  95. package/scripts/lib/external-user-simulation.js +166 -0
  96. package/scripts/lib/failure-recovery-readiness.js +81 -0
  97. package/scripts/lib/failure-recovery.js +419 -0
  98. package/scripts/lib/feedback-intelligence.js +537 -0
  99. package/scripts/lib/feedback-signals.js +205 -0
  100. package/scripts/lib/file-integrity.js +68 -0
  101. package/scripts/lib/fsx.js +127 -0
  102. package/scripts/lib/full-readiness-gate.js +451 -0
  103. package/scripts/lib/guidance-builder.js +174 -0
  104. package/scripts/lib/hook-apply.js +1019 -0
  105. package/scripts/lib/hook-baseline.js +310 -0
  106. package/scripts/lib/hook-config-preview.js +275 -0
  107. package/scripts/lib/hook-contracts.js +290 -0
  108. package/scripts/lib/hook-safety-boundary-readiness.js +80 -0
  109. package/scripts/lib/host-capability-matrix.js +351 -0
  110. package/scripts/lib/host-support-context.js +254 -0
  111. package/scripts/lib/http-hook-action.js +538 -0
  112. package/scripts/lib/install-ai-readiness.js +84 -0
  113. package/scripts/lib/install-intake-risk.js +1037 -0
  114. package/scripts/lib/install-journey-intelligence.js +329 -0
  115. package/scripts/lib/intervention-guidance.js +57 -0
  116. package/scripts/lib/known-limitations.js +115 -0
  117. package/scripts/lib/l8-path-truth.js +146 -0
  118. package/scripts/lib/launch-hardening-gate.js +436 -0
  119. package/scripts/lib/launch-readiness.js +628 -0
  120. package/scripts/lib/learning-memory.js +686 -0
  121. package/scripts/lib/lifecycle-hooks.js +802 -0
  122. package/scripts/lib/local-package-smoke.js +423 -0
  123. package/scripts/lib/local-pricing.js +299 -0
  124. package/scripts/lib/mcp-enforcement.js +311 -0
  125. package/scripts/lib/mcp-least-privilege-policy.js +303 -0
  126. package/scripts/lib/mcp-tool-inventory.js +388 -0
  127. package/scripts/lib/mcp-tool-risk.js +0 -0
  128. package/scripts/lib/memory.js +335 -0
  129. package/scripts/lib/metrics.js +699 -0
  130. package/scripts/lib/micro-proof.js +133 -0
  131. package/scripts/lib/next-run-context.js +436 -0
  132. package/scripts/lib/operating-value.js +1648 -0
  133. package/scripts/lib/optimization-v3.js +122 -0
  134. package/scripts/lib/orchestration/adapters/_shared.js +49 -0
  135. package/scripts/lib/orchestration/adapters/aider.js +18 -0
  136. package/scripts/lib/orchestration/adapters/claude-code.js +35 -0
  137. package/scripts/lib/orchestration/adapters/codex.js +35 -0
  138. package/scripts/lib/orchestration/adapters/gemini-cli.js +18 -0
  139. package/scripts/lib/orchestration/adapters/git.js +25 -0
  140. package/scripts/lib/orchestration/adapters/index.js +31 -0
  141. package/scripts/lib/orchestration/adapters/lm-studio.js +18 -0
  142. package/scripts/lib/orchestration/adapters/ollama.js +18 -0
  143. package/scripts/lib/orchestration/adapters/opencode.js +18 -0
  144. package/scripts/lib/orchestration/adapters/openrouter.js +18 -0
  145. package/scripts/lib/orchestration/adapters/test-runner.js +25 -0
  146. package/scripts/lib/orchestration/cli.js +438 -0
  147. package/scripts/lib/orchestration/execution-manager.js +279 -0
  148. package/scripts/lib/orchestration/handoff.js +314 -0
  149. package/scripts/lib/orchestration/index.js +456 -0
  150. package/scripts/lib/orchestration/inventory.js +47 -0
  151. package/scripts/lib/orchestration/model-discovery.js +498 -0
  152. package/scripts/lib/orchestration/model-profiler.js +170 -0
  153. package/scripts/lib/orchestration/model-profiles.js +252 -0
  154. package/scripts/lib/orchestration/model-refresh-policy.js +72 -0
  155. package/scripts/lib/orchestration/proof-writer.js +349 -0
  156. package/scripts/lib/orchestration/provider-discovery/aider.js +49 -0
  157. package/scripts/lib/orchestration/provider-discovery/claude-code.js +56 -0
  158. package/scripts/lib/orchestration/provider-discovery/codex.js +49 -0
  159. package/scripts/lib/orchestration/provider-discovery/common.js +186 -0
  160. package/scripts/lib/orchestration/provider-discovery/gemini.js +106 -0
  161. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +118 -0
  162. package/scripts/lib/orchestration/provider-discovery/models-dev.js +12 -0
  163. package/scripts/lib/orchestration/provider-discovery/ollama.js +100 -0
  164. package/scripts/lib/orchestration/provider-discovery/opencode.js +47 -0
  165. package/scripts/lib/orchestration/provider-discovery/openrouter.js +44 -0
  166. package/scripts/lib/orchestration/risk-classifier.js +130 -0
  167. package/scripts/lib/orchestration/routing-policy.js +486 -0
  168. package/scripts/lib/orchestration/settings.js +112 -0
  169. package/scripts/lib/orchestration/state.js +165 -0
  170. package/scripts/lib/orchestration/verification-manager.js +138 -0
  171. package/scripts/lib/output-profiles.js +146 -0
  172. package/scripts/lib/package-content-audit.js +368 -0
  173. package/scripts/lib/package-runtime.js +278 -0
  174. package/scripts/lib/plan-surface.js +53 -0
  175. package/scripts/lib/plans.js +2318 -0
  176. package/scripts/lib/policy-provider.js +27 -0
  177. package/scripts/lib/prelaunch-activation-readiness.js +409 -0
  178. package/scripts/lib/prelaunch-evidence-store.js +816 -0
  179. package/scripts/lib/prelaunch-intelligence.js +869 -0
  180. package/scripts/lib/pricing-experiment.js +118 -0
  181. package/scripts/lib/pro-moment-events.js +77 -0
  182. package/scripts/lib/pro-moment-state.js +227 -0
  183. package/scripts/lib/pro-moments.js +1216 -0
  184. package/scripts/lib/product-learning-events.js +629 -0
  185. package/scripts/lib/project-profile.js +555 -0
  186. package/scripts/lib/prompt-compiler.js +280 -0
  187. package/scripts/lib/prompt-lint.js +32 -0
  188. package/scripts/lib/prompt-suggestions.js +52 -0
  189. package/scripts/lib/proof-canonical.js +398 -0
  190. package/scripts/lib/proof-drilldown.js +383 -0
  191. package/scripts/lib/proof-events.js +342 -0
  192. package/scripts/lib/proof-history.js +243 -0
  193. package/scripts/lib/proof-metrics.js +296 -0
  194. package/scripts/lib/proof-outcome-evidence.js +134 -0
  195. package/scripts/lib/proof-receipt.js +335 -0
  196. package/scripts/lib/proof-record.js +461 -0
  197. package/scripts/lib/public-activation-distribution-gate.js +258 -0
  198. package/scripts/lib/public-cli.js +3891 -0
  199. package/scripts/lib/public-distribution-truth.js +211 -0
  200. package/scripts/lib/public-install-claim-checker.js +294 -0
  201. package/scripts/lib/publish-provenance-readiness.js +283 -0
  202. package/scripts/lib/readiness-delta.js +218 -0
  203. package/scripts/lib/readiness-evidence-closure.js +196 -0
  204. package/scripts/lib/reentry-memory-capture.js +241 -0
  205. package/scripts/lib/reentry-memory-retrieval.js +302 -0
  206. package/scripts/lib/reentry-memory-status.js +146 -0
  207. package/scripts/lib/reentry-memory-store.js +178 -0
  208. package/scripts/lib/reentry-state.js +66 -0
  209. package/scripts/lib/release-candidate-bundle.js +166 -0
  210. package/scripts/lib/remediation.js +81 -0
  211. package/scripts/lib/repo-map.js +391 -0
  212. package/scripts/lib/run-improvements-lifecycle.js +330 -0
  213. package/scripts/lib/run-improvements.js +789 -0
  214. package/scripts/lib/runtime-decision-policy.js +387 -0
  215. package/scripts/lib/safe-path-engine.js +705 -0
  216. package/scripts/lib/safe-run-controller.js +887 -0
  217. package/scripts/lib/score.js +262 -0
  218. package/scripts/lib/seamless-enforcement.js +329 -0
  219. package/scripts/lib/seamless-outcome.js +689 -0
  220. package/scripts/lib/seamless-reality-gate.js +5043 -0
  221. package/scripts/lib/security-risk-classifier.js +511 -0
  222. package/scripts/lib/security-scan.js +384 -0
  223. package/scripts/lib/session-context-optimizer.js +1211 -0
  224. package/scripts/lib/session-timing.js +315 -0
  225. package/scripts/lib/skill-hygiene.js +805 -0
  226. package/scripts/lib/skill-packs.js +161 -0
  227. package/scripts/lib/skills-operating-layer.js +580 -0
  228. package/scripts/lib/smart-work-routing.js +768 -0
  229. package/scripts/lib/source-catalog.js +700 -0
  230. package/scripts/lib/status-value-summary.js +32 -0
  231. package/scripts/lib/support-bundle.js +578 -0
  232. package/scripts/lib/task-continuation.js +440 -0
  233. package/scripts/lib/test-helpers.js +15 -0
  234. package/scripts/lib/tier.js +38 -0
  235. package/scripts/lib/token-context-quality-gate.js +370 -0
  236. package/scripts/lib/token-cost-capture.js +187 -0
  237. package/scripts/lib/token-cost-intelligence.js +358 -0
  238. package/scripts/lib/token-efficiency-evidence.js +213 -0
  239. package/scripts/lib/token-evidence.js +699 -0
  240. package/scripts/lib/tokenish.js +17 -0
  241. package/scripts/lib/tool-output-sandbox.js +304 -0
  242. package/scripts/lib/trust-audit.js +136 -0
  243. package/scripts/lib/unified-events.js +396 -0
  244. package/scripts/lib/upgrade-interruption-recovery.js +407 -0
  245. package/scripts/lib/usage-ledger.js +201 -0
  246. package/scripts/lib/value-ledger.js +130 -0
  247. package/scripts/lib/value-proof-calibration.js +531 -0
  248. package/scripts/lib/visual-qa.js +231 -0
  249. package/scripts/lib/voice-alpha.js +29 -0
  250. package/scripts/lib/work-aware-orchestration.js +976 -0
  251. package/scripts/lib/work-control-receipts.js +577 -0
  252. package/scripts/lib/work-ledger.js +1123 -0
  253. package/scripts/lib/work-panel-preview.js +352 -0
  254. package/scripts/lib/workflow-discipline.js +280 -0
  255. package/scripts/lib/workflow-signals.js +419 -0
  256. package/scripts/lib/workspace-map.js +281 -0
  257. package/scripts/lib/workspace-registry.js +1367 -0
  258. package/scripts/lib/workspace-resolver.js +480 -0
@@ -0,0 +1,263 @@
1
+ "use strict";
2
+
3
+ // ── Alpha Feedback ────────────────────────────────────────────────────────────
4
+ //
5
+ // Contract: avorelo.alphaFeedback.v1
6
+ //
7
+ // Local-only feedback capture for dogfood and alpha users.
8
+ // No PII, no raw customer data, no secrets. Summaries only.
9
+ // Feeds company-loop and ledger.
10
+
11
+ const fs = require("fs");
12
+ const path = require("path");
13
+ const crypto = require("crypto");
14
+ const { ensureCcoDirs, nowIso } = require("./fsx");
15
+ const { appendProductLearningEvent } = require("./product-learning-events");
16
+ const { redactPayload } = require("./product-learning-events");
17
+
18
+ const CONTRACT = "avorelo.alphaFeedback.v1";
19
+ const SCHEMA_VERSION = 1;
20
+ const FEEDBACK_DIR_REL = ".claude/cco/feedback";
21
+
22
+ const VALID_SOURCES = new Set(["dogfood", "design_partner", "manual_customer", "session_review", "support_note"]);
23
+ const VALID_PERSONAS = new Set(["developer", "pm", "security", "qa", "unknown"]);
24
+ const VALID_FRICTION_TYPES = new Set([
25
+ "first_run_unclear",
26
+ "hook_apply_friction",
27
+ "output_too_noisy",
28
+ "output_too_sparse",
29
+ "command_not_found",
30
+ "proof_missing",
31
+ "value_unclear",
32
+ "safe_run_unclear",
33
+ "ledger_incomplete",
34
+ "doctor_confusing",
35
+ "support_bundle_missing",
36
+ "feedback_path_missing",
37
+ "other",
38
+ ]);
39
+ const VALID_SEVERITIES = new Set(["low", "medium", "high", "blocker"]);
40
+ const VALID_ACTIVATION_STAGES = new Set(["unknown", "first_run", "activation", "first_value", "repeat_use", "handoff", "support"]);
41
+ const MAX_SUMMARY_LENGTH = 500;
42
+ const MAX_DESIRED_BEHAVIOR_LENGTH = 500;
43
+ const MAX_FIELD_LENGTH = 64;
44
+
45
+ // ── Helpers ───────────────────────────────────────────────────────────────────
46
+
47
+ function makeId() {
48
+ return `fb-${Date.now()}-${crypto.randomBytes(3).toString("hex")}`;
49
+ }
50
+
51
+ function sanitizeText(text, maxLen) {
52
+ if (!text || typeof text !== "string") return "";
53
+ return text.replace(/[\x00-\x08\x0b\x0c\x0e-\x1f]/g, "").slice(0, maxLen).trim();
54
+ }
55
+
56
+ function redactFeedbackText(text) {
57
+ return text
58
+ .replace(/sk-[A-Za-z0-9]{16,}/g, "[redacted-key]")
59
+ .replace(/ghp_[A-Za-z0-9]{20,}/g, "[redacted-token]")
60
+ .replace(/AKIA[0-9A-Z]{16}/g, "[redacted-aws-key]")
61
+ .replace(/\b[\w.-]+@[\w.-]+\.\w{2,}\b/g, "[redacted-email]")
62
+ .replace(/(password|secret|token|apikey|api_key)\s*[:=]\s*\S+/gi, "$1=[redacted]");
63
+ }
64
+
65
+ function sanitizeBool(value) {
66
+ return value === true;
67
+ }
68
+
69
+ function redactEvidencePath(value) {
70
+ if (!value) return null;
71
+ const payload = redactPayload({ filePath: String(value) });
72
+ return payload.filePath || "[redacted-path]";
73
+ }
74
+
75
+ function ensureFeedbackDir(cwd) {
76
+ const dirAbs = path.join(cwd, FEEDBACK_DIR_REL);
77
+ if (!fs.existsSync(dirAbs)) fs.mkdirSync(dirAbs, { recursive: true });
78
+ return dirAbs;
79
+ }
80
+
81
+ // ── Add feedback ──────────────────────────────────────────────────────────────
82
+
83
+ function addFeedback(cwd, input = {}) {
84
+ const {
85
+ source = "dogfood",
86
+ persona = "unknown",
87
+ runId = null,
88
+ frictionType = "other",
89
+ severity = "medium",
90
+ summary = "",
91
+ desiredBehavior = "",
92
+ segment = "unknown",
93
+ theme = null,
94
+ issueCategory = null,
95
+ activationStage = "unknown",
96
+ trustConcern = false,
97
+ pricingConcern = false,
98
+ simulated = false,
99
+ evidencePath = null,
100
+ } = input;
101
+
102
+ // Validate
103
+ const errors = [];
104
+ if (!VALID_SOURCES.has(source)) errors.push(`source must be one of: ${[...VALID_SOURCES].join(", ")}`);
105
+ if (!VALID_PERSONAS.has(persona)) errors.push(`persona must be one of: ${[...VALID_PERSONAS].join(", ")}`);
106
+ if (!VALID_FRICTION_TYPES.has(frictionType)) errors.push(`frictionType must be one of: ${[...VALID_FRICTION_TYPES].join(", ")}`);
107
+ if (!VALID_SEVERITIES.has(severity)) errors.push(`severity must be one of: ${[...VALID_SEVERITIES].join(", ")}`);
108
+ if (!VALID_ACTIVATION_STAGES.has(activationStage)) errors.push(`activationStage must be one of: ${[...VALID_ACTIVATION_STAGES].join(", ")}`);
109
+ if (!summary || summary.trim().length === 0) errors.push("summary is required");
110
+ if (errors.length > 0) return { ok: false, errors };
111
+
112
+ // Sanitize and redact
113
+ const cleanSummary = redactFeedbackText(sanitizeText(summary, MAX_SUMMARY_LENGTH));
114
+ const cleanDesiredBehavior = desiredBehavior
115
+ ? redactFeedbackText(sanitizeText(desiredBehavior, MAX_DESIRED_BEHAVIOR_LENGTH))
116
+ : "";
117
+
118
+ const feedback = {
119
+ contract: CONTRACT,
120
+ schemaVersion: SCHEMA_VERSION,
121
+ id: makeId(),
122
+ source,
123
+ persona,
124
+ runId: runId ? String(runId).slice(0, 64) : null,
125
+ frictionType,
126
+ severity,
127
+ segment: sanitizeText(segment, MAX_FIELD_LENGTH) || "unknown",
128
+ theme: sanitizeText(theme || frictionType, MAX_FIELD_LENGTH) || frictionType,
129
+ issueCategory: sanitizeText(issueCategory || theme || frictionType || "other", MAX_FIELD_LENGTH) || "other",
130
+ activationStage,
131
+ trustConcern: sanitizeBool(trustConcern),
132
+ pricingConcern: sanitizeBool(pricingConcern),
133
+ simulated: sanitizeBool(simulated),
134
+ summary: cleanSummary,
135
+ desiredBehavior: cleanDesiredBehavior,
136
+ evidencePath: redactEvidencePath(evidencePath),
137
+ createdAt: nowIso(),
138
+ redacted: true,
139
+ };
140
+
141
+ try {
142
+ ensureCcoDirs(cwd);
143
+ const dirAbs = ensureFeedbackDir(cwd);
144
+ const filePath = path.join(dirAbs, `${feedback.id}.json`);
145
+ fs.writeFileSync(filePath, JSON.stringify(feedback, null, 2), "utf8");
146
+
147
+ appendProductLearningEvent(cwd, {
148
+ eventName: "alpha_feedback_added",
149
+ source,
150
+ persona,
151
+ frictionType,
152
+ severity,
153
+ });
154
+
155
+ return { ok: true, feedback, path: `${FEEDBACK_DIR_REL}/${feedback.id}.json` };
156
+ } catch (err) {
157
+ return { ok: false, errors: [`Failed to write feedback: ${err.message}`] };
158
+ }
159
+ }
160
+
161
+ // ── List feedback ─────────────────────────────────────────────────────────────
162
+
163
+ function listFeedback(cwd, options = {}) {
164
+ const { source = null, limit = 50 } = options;
165
+ const dirAbs = path.join(cwd, FEEDBACK_DIR_REL);
166
+
167
+ if (!fs.existsSync(dirAbs)) {
168
+ return { contract: CONTRACT, schemaVersion: SCHEMA_VERSION, items: [], total: 0, redacted: true };
169
+ }
170
+
171
+ let files;
172
+ try {
173
+ files = fs.readdirSync(dirAbs).filter((f) => f.endsWith(".json")).sort().reverse();
174
+ } catch {
175
+ return { contract: CONTRACT, schemaVersion: SCHEMA_VERSION, items: [], total: 0, error: "Cannot read feedback directory", redacted: true };
176
+ }
177
+
178
+ const items = [];
179
+ for (const file of files) {
180
+ if (items.length >= limit) break;
181
+ try {
182
+ const data = JSON.parse(fs.readFileSync(path.join(dirAbs, file), "utf8"));
183
+ if (source && data.source !== source) continue;
184
+ items.push(data);
185
+ } catch {}
186
+ }
187
+
188
+ // Summary counts
189
+ const bySource = {};
190
+ const bySeverity = {};
191
+ for (const item of items) {
192
+ bySource[item.source] = (bySource[item.source] || 0) + 1;
193
+ bySeverity[item.severity] = (bySeverity[item.severity] || 0) + 1;
194
+ }
195
+
196
+ return {
197
+ contract: CONTRACT,
198
+ schemaVersion: SCHEMA_VERSION,
199
+ total: files.length,
200
+ showing: items.length,
201
+ bySource,
202
+ bySeverity,
203
+ items,
204
+ feedbackDir: FEEDBACK_DIR_REL,
205
+ redacted: true,
206
+ };
207
+ }
208
+
209
+ // ── Read feedback summary for ledger/company-loop ─────────────────────────────
210
+
211
+ function readFeedbackSummary(cwd) {
212
+ const list = listFeedback(cwd, { limit: 200 });
213
+ if (list.total === 0) return null;
214
+
215
+ const topFriction = {};
216
+ for (const item of list.items) {
217
+ topFriction[item.frictionType] = (topFriction[item.frictionType] || 0) + 1;
218
+ }
219
+ const topFrictionType = Object.entries(topFriction).sort((a, b) => b[1] - a[1])[0];
220
+
221
+ return {
222
+ total: list.total,
223
+ bySource: list.bySource,
224
+ bySeverity: list.bySeverity,
225
+ topFrictionType: topFrictionType ? topFrictionType[0] : null,
226
+ topFrictionCount: topFrictionType ? topFrictionType[1] : 0,
227
+ feedbackDir: FEEDBACK_DIR_REL,
228
+ };
229
+ }
230
+
231
+ // ── Format text ───────────────────────────────────────────────────────────────
232
+
233
+ function formatFeedbackListText(list) {
234
+ const lines = [];
235
+ lines.push(`Alpha Feedback (${list.total} total, showing ${list.showing})`);
236
+ if (list.total === 0) {
237
+ lines.push(" No feedback captured yet.");
238
+ lines.push(" Run: avorelo feedback add --source dogfood --summary \"...\"");
239
+ return lines.join("\n");
240
+ }
241
+ lines.push(` Sources: ${JSON.stringify(list.bySource)}`);
242
+ lines.push(` Severity: ${JSON.stringify(list.bySeverity)}`);
243
+ lines.push("");
244
+ list.items.slice(0, 10).forEach((item) => {
245
+ lines.push(` [${item.severity}] ${item.frictionType} (${item.source}): ${item.summary}`);
246
+ });
247
+ if (list.total > 10) lines.push(` ... and ${list.total - 10} more.`);
248
+ return lines.join("\n");
249
+ }
250
+
251
+ module.exports = {
252
+ CONTRACT,
253
+ SCHEMA_VERSION,
254
+ FEEDBACK_DIR_REL,
255
+ VALID_SOURCES,
256
+ VALID_PERSONAS,
257
+ VALID_FRICTION_TYPES,
258
+ VALID_SEVERITIES,
259
+ addFeedback,
260
+ listFeedback,
261
+ readFeedbackSummary,
262
+ formatFeedbackListText,
263
+ };
@@ -0,0 +1,332 @@
1
+ "use strict";
2
+
3
+ // ── Alpha Readiness Gate ──────────────────────────────────────────────────────
4
+ //
5
+ // Contract: avorelo.alphaReadinessGate.v1
6
+ //
7
+ // Deterministic gate that checks whether Avorelo is ready for alpha use.
8
+ // This is NOT public launch readiness — it is alpha-readiness only.
9
+ //
10
+ // Checks pass/warn/fail against existing artifacts. Does not modify any files.
11
+
12
+ const fs = require("fs");
13
+ const path = require("path");
14
+ const { ensureCcoDirs, nowIso } = require("./fsx");
15
+ const { appendProductLearningEvent } = require("./product-learning-events");
16
+
17
+ const CONTRACT = "avorelo.alphaReadinessGate.v1";
18
+ const SCHEMA_VERSION = 1;
19
+ const GATE_REL = ".claude/cco/orchestration/alpha-readiness/latest-gate.json";
20
+ const GATE_DIR_REL = ".claude/cco/orchestration/alpha-readiness";
21
+
22
+ // ── Helpers ───────────────────────────────────────────────────────────────────
23
+
24
+ function safeReadJson(absPath) {
25
+ try {
26
+ if (!fs.existsSync(absPath)) return null;
27
+ return JSON.parse(fs.readFileSync(absPath, "utf8").replace(/^/, ""));
28
+ } catch {
29
+ return null;
30
+ }
31
+ }
32
+
33
+ function moduleExists(cwd, rel) {
34
+ return fs.existsSync(path.join(cwd, rel));
35
+ }
36
+
37
+ function artifactExists(cwd, rel) {
38
+ return fs.existsSync(path.join(cwd, rel));
39
+ }
40
+
41
+ function checkPass(id, summary) { return { id, status: "pass", summary }; }
42
+ function checkWarn(id, summary, nextAction) { return { id, status: "warn", summary, nextAction: nextAction || null }; }
43
+ function checkFail(id, summary, nextAction) { return { id, status: "fail", summary, nextAction: nextAction || null }; }
44
+
45
+ // ── Individual checks ─────────────────────────────────────────────────────────
46
+
47
+ function checkInstallOrRepoEntry(cwd) {
48
+ const hasBin = fs.existsSync(path.join(cwd, "bin", "avorelo"));
49
+ const hasPkg = fs.existsSync(path.join(cwd, "package.json"));
50
+ if (!hasBin) return checkFail("install_or_repo_entry_clear", "bin/avorelo not found.", "Run: npm install");
51
+ if (!hasPkg) return checkWarn("install_or_repo_entry_clear", "package.json not found.", "Check repo root.");
52
+ return checkPass("install_or_repo_entry_clear", "Repo entry clear — bin/avorelo and package.json present.");
53
+ }
54
+
55
+ function checkProjectProfileAvailable(cwd) {
56
+ const modPath = path.join(cwd, "scripts/lib/project-profile.js");
57
+ if (!moduleExists(cwd, "scripts/lib/project-profile.js")) {
58
+ return checkFail("project_profile_available", "project-profile.js not found.");
59
+ }
60
+ return checkPass("project_profile_available", "Project profile module available.");
61
+ }
62
+
63
+ function checkSafeRunAvailable(cwd) {
64
+ if (!moduleExists(cwd, "scripts/lib/safe-run-controller.js")) {
65
+ return checkFail("safe_run_available", "safe-run-controller.js not found.");
66
+ }
67
+ return checkPass("safe_run_available", "Safe run controller available.");
68
+ }
69
+
70
+ function checkSmartRouteAvailable(cwd) {
71
+ if (!moduleExists(cwd, "scripts/lib/smart-work-routing.js")) {
72
+ return checkFail("smart_route_available", "smart-work-routing.js not found.");
73
+ }
74
+ return checkPass("smart_route_available", "Smart work routing available.");
75
+ }
76
+
77
+ function checkExecutionPacketAvailable(cwd) {
78
+ if (!moduleExists(cwd, "scripts/lib/execution-packet.js")) {
79
+ return checkFail("execution_packet_available", "execution-packet.js not found.");
80
+ }
81
+ return checkPass("execution_packet_available", "Execution packet available.");
82
+ }
83
+
84
+ function checkHookPreviewAvailable(cwd) {
85
+ if (!moduleExists(cwd, "scripts/lib/hook-config-preview.js")) {
86
+ return checkFail("hook_preview_available", "hook-config-preview.js not found.");
87
+ }
88
+ return checkPass("hook_preview_available", "Hook config preview available.");
89
+ }
90
+
91
+ function checkHookApplyStatusKnown(cwd) {
92
+ if (!moduleExists(cwd, "scripts/lib/hook-apply.js")) {
93
+ return checkFail("hook_apply_status_known", "hook-apply.js not found.");
94
+ }
95
+ const applyArtifact = safeReadJson(path.join(cwd, ".claude/cco/orchestration/hook-apply/latest-apply.json"));
96
+ if (!applyArtifact) {
97
+ return checkWarn("hook_apply_status_known", "Hook apply status unknown — no apply artifact yet.", "Run: avorelo hooks --json");
98
+ }
99
+ return checkPass("hook_apply_status_known", `Hook apply status known (applied: ${applyArtifact.hooksApplied || false}).`);
100
+ }
101
+
102
+ function checkHookDoctorPassOrClear(cwd) {
103
+ const doctorArtifact = safeReadJson(path.join(cwd, ".claude/cco/orchestration/hook-apply/latest-doctor.json"));
104
+ if (!doctorArtifact) {
105
+ return checkWarn("hook_doctor_pass_or_clear_next_action", "No hook doctor artifact. Run `avorelo hooks doctor` to check.", "Run: avorelo hooks doctor --json");
106
+ }
107
+ const failCount = doctorArtifact.summary?.fail || 0;
108
+ if (failCount > 0) {
109
+ return checkWarn("hook_doctor_pass_or_clear_next_action", `Hook doctor has ${failCount} failure(s).`, doctorArtifact.nextAction || "Run: avorelo hooks doctor --json");
110
+ }
111
+ return checkPass("hook_doctor_pass_or_clear_next_action", "Hook doctor pass or clear next action.");
112
+ }
113
+
114
+ function checkProofAvailableOrClear(cwd) {
115
+ if (!moduleExists(cwd, "scripts/lib/seamless-reality-gate.js")) {
116
+ return checkFail("proof_available_or_clear_next_action", "seamless-reality-gate.js not found.");
117
+ }
118
+ const proofArtifact = safeReadJson(path.join(cwd, ".claude/cco/orchestration/seamless-outcome/latest-reality-gate.json"));
119
+ if (!proofArtifact) {
120
+ return checkWarn("proof_available_or_clear_next_action", "No proof artifact. Run `avorelo proof` to generate.", "Run: avorelo proof");
121
+ }
122
+ return checkPass("proof_available_or_clear_next_action", "Proof artifact available.");
123
+ }
124
+
125
+ function checkLedgerAvailable(cwd) {
126
+ if (!moduleExists(cwd, "scripts/lib/work-ledger.js")) {
127
+ return checkFail("ledger_available", "work-ledger.js not found.");
128
+ }
129
+ return checkPass("ledger_available", "Work ledger available.");
130
+ }
131
+
132
+ function checkOutcomeAvailable(cwd) {
133
+ if (!moduleExists(cwd, "scripts/lib/seamless-outcome.js")) {
134
+ return checkFail("outcome_available", "seamless-outcome.js not found.");
135
+ }
136
+ return checkPass("outcome_available", "Seamless outcome available.");
137
+ }
138
+
139
+ function checkCompanyLoopAvailable(cwd) {
140
+ if (!moduleExists(cwd, "scripts/lib/company-loop.js")) {
141
+ return checkFail("company_loop_available", "company-loop.js not found.");
142
+ }
143
+ return checkPass("company_loop_available", "Company loop available.");
144
+ }
145
+
146
+ function checkFeedbackCaptureAvailable(cwd) {
147
+ if (!moduleExists(cwd, "scripts/lib/alpha-feedback.js")) {
148
+ return checkWarn("feedback_capture_available", "alpha-feedback.js not found.", "Build alpha-feedback.js");
149
+ }
150
+ return checkPass("feedback_capture_available", "Feedback capture available (local only).");
151
+ }
152
+
153
+ function checkSupportBundleAvailable(cwd) {
154
+ if (!moduleExists(cwd, "scripts/lib/support-bundle.js")) {
155
+ return checkWarn("support_bundle_available", "support-bundle.js not found.", "Build support-bundle.js");
156
+ }
157
+ return checkPass("support_bundle_available", "Support bundle available (redacted).");
158
+ }
159
+
160
+ function checkDefaultOutputCompact(cwd) {
161
+ // Check that proof command output is within size bounds (32KB limit from reality gate)
162
+ const proofArtifact = safeReadJson(path.join(cwd, ".claude/cco/orchestration/seamless-outcome/latest-reality-gate.json"));
163
+ if (!proofArtifact) {
164
+ return checkWarn("default_output_compact", "Cannot verify compact output — no proof artifact.", "Run: avorelo proof");
165
+ }
166
+ // Check activation receipt size if present
167
+ const activationArtifact = safeReadJson(path.join(cwd, ".claude/cco/orchestration/activation/latest-activation.json"));
168
+ if (activationArtifact) {
169
+ const bytes = Buffer.byteLength(JSON.stringify(activationArtifact));
170
+ if (bytes > 32 * 1024) {
171
+ return checkWarn("default_output_compact", `Activation receipt is large (${bytes} bytes). Default output should be compact.`);
172
+ }
173
+ }
174
+ return checkPass("default_output_compact", "Default output appears compact.");
175
+ }
176
+
177
+ function checkTokenEfficiencyHardeningPresent(cwd) {
178
+ const hasModule = moduleExists(cwd, "scripts/lib/token-efficiency-evidence.js");
179
+ if (!hasModule) {
180
+ return checkWarn("token_efficiency_hardening_present", "token-efficiency-evidence.js not found. Token efficiency hardening is recommended for alpha.", "Add token-efficiency-evidence.js");
181
+ }
182
+ const hasSandbox = moduleExists(cwd, "scripts/lib/tool-output-sandbox.js");
183
+ const hasRepoMap = moduleExists(cwd, "scripts/lib/repo-map.js");
184
+ const hasQualityGate = moduleExists(cwd, "scripts/lib/token-context-quality-gate.js");
185
+ if (!hasSandbox || !hasRepoMap || !hasQualityGate) {
186
+ const missing = [!hasSandbox && "tool-output-sandbox", !hasRepoMap && "repo-map", !hasQualityGate && "token-context-quality-gate"].filter(Boolean);
187
+ return checkWarn("token_efficiency_hardening_present", `Token efficiency hardening partial. Missing: ${missing.join(", ")}.`, "Add missing token efficiency modules.");
188
+ }
189
+ return checkPass("token_efficiency_hardening_present", "Token efficiency hardening modules present.");
190
+ }
191
+
192
+ function checkNoLaunchClaimBeforeGate(cwd) {
193
+ // Check docs and README for premature launch claims
194
+ const filesToCheck = [
195
+ "README.md",
196
+ "docs/Avorelo-Operating-Layer.md",
197
+ ];
198
+ const launchPhrases = [
199
+ "production ready",
200
+ "launch ready",
201
+ "publicly available",
202
+ "GA release",
203
+ "generally available",
204
+ ];
205
+ for (const rel of filesToCheck) {
206
+ const absPath = path.join(cwd, rel);
207
+ if (!fs.existsSync(absPath)) continue;
208
+ const content = fs.readFileSync(absPath, "utf8").toLowerCase();
209
+ for (const phrase of launchPhrases) {
210
+ if (content.includes(phrase)) {
211
+ return checkWarn("no_launch_claim_before_gate", `"${phrase}" found in ${rel}. Alpha-readiness is not public launch.`);
212
+ }
213
+ }
214
+ }
215
+ return checkPass("no_launch_claim_before_gate", "No premature launch claims found.");
216
+ }
217
+
218
+ // ── Build gate ────────────────────────────────────────────────────────────────
219
+
220
+ function buildAlphaReadinessGate(cwd, options = {}) {
221
+ const checks = [
222
+ checkInstallOrRepoEntry(cwd),
223
+ checkProjectProfileAvailable(cwd),
224
+ checkSafeRunAvailable(cwd),
225
+ checkSmartRouteAvailable(cwd),
226
+ checkExecutionPacketAvailable(cwd),
227
+ checkHookPreviewAvailable(cwd),
228
+ checkHookApplyStatusKnown(cwd),
229
+ checkHookDoctorPassOrClear(cwd),
230
+ checkProofAvailableOrClear(cwd),
231
+ checkLedgerAvailable(cwd),
232
+ checkOutcomeAvailable(cwd),
233
+ checkCompanyLoopAvailable(cwd),
234
+ checkFeedbackCaptureAvailable(cwd),
235
+ checkSupportBundleAvailable(cwd),
236
+ checkDefaultOutputCompact(cwd),
237
+ checkNoLaunchClaimBeforeGate(cwd),
238
+ checkTokenEfficiencyHardeningPresent(cwd),
239
+ ];
240
+
241
+ const failCount = checks.filter((c) => c.status === "fail").length;
242
+ const warnCount = checks.filter((c) => c.status === "warn").length;
243
+ const passCount = checks.filter((c) => c.status === "pass").length;
244
+
245
+ let gateStatus;
246
+ if (failCount > 0) gateStatus = "fail";
247
+ else if (warnCount > 0) gateStatus = "warn";
248
+ else gateStatus = "pass";
249
+
250
+ const score = Math.round((passCount / checks.length) * 100);
251
+
252
+ const report = {
253
+ contract: CONTRACT,
254
+ schemaVersion: SCHEMA_VERSION,
255
+ createdAt: nowIso(),
256
+ status: gateStatus,
257
+ score,
258
+ summary: { pass: passCount, warn: warnCount, fail: failCount },
259
+ checks,
260
+ note: "Alpha-readiness is not public launch readiness. This gate confirms Avorelo foundations are in place for internal testing.",
261
+ redacted: true,
262
+ };
263
+
264
+ return report;
265
+ }
266
+
267
+ // ── Write gate artifact ───────────────────────────────────────────────────────
268
+
269
+ function writeAlphaReadinessGate(cwd, report) {
270
+ try {
271
+ ensureCcoDirs(cwd);
272
+ const dirAbs = path.join(cwd, GATE_DIR_REL);
273
+ if (!fs.existsSync(dirAbs)) fs.mkdirSync(dirAbs, { recursive: true });
274
+ const gateAbs = path.join(cwd, GATE_REL);
275
+ fs.writeFileSync(gateAbs, JSON.stringify(report, null, 2), "utf8");
276
+ return gateAbs;
277
+ } catch {
278
+ return null;
279
+ }
280
+ }
281
+
282
+ // ── Run gate ──────────────────────────────────────────────────────────────────
283
+
284
+ function runAlphaReadinessGate(cwd, options = {}) {
285
+ const report = buildAlphaReadinessGate(cwd, options);
286
+ const written = writeAlphaReadinessGate(cwd, report);
287
+
288
+ try {
289
+ appendProductLearningEvent(cwd, {
290
+ eventName: "alpha_readiness_gate_run",
291
+ status: report.status,
292
+ score: report.score,
293
+ passCount: report.summary.pass,
294
+ warnCount: report.summary.warn,
295
+ failCount: report.summary.fail,
296
+ });
297
+ } catch {}
298
+
299
+ return { ...report, artifactPath: written ? GATE_REL : null };
300
+ }
301
+
302
+ // ── Format text ───────────────────────────────────────────────────────────────
303
+
304
+ function formatAlphaReadinessGateText(report, options = {}) {
305
+ const lines = [];
306
+ lines.push(`Alpha Readiness Gate: ${report.status} (score: ${report.score}/100)`);
307
+ lines.push(` pass: ${report.summary.pass} warn: ${report.summary.warn} fail: ${report.summary.fail}`);
308
+ lines.push("");
309
+ lines.push("Note: Alpha-readiness is NOT public launch readiness.");
310
+ if (report.checks) {
311
+ const issues = report.checks.filter((c) => c.status !== "pass");
312
+ if (issues.length > 0) {
313
+ lines.push("");
314
+ lines.push("Issues:");
315
+ issues.forEach((c) => {
316
+ lines.push(` [${c.status}] ${c.id}: ${c.summary}`);
317
+ if (c.nextAction) lines.push(` → ${c.nextAction}`);
318
+ });
319
+ }
320
+ }
321
+ return lines.join("\n");
322
+ }
323
+
324
+ module.exports = {
325
+ CONTRACT,
326
+ SCHEMA_VERSION,
327
+ GATE_REL,
328
+ buildAlphaReadinessGate,
329
+ writeAlphaReadinessGate,
330
+ runAlphaReadinessGate,
331
+ formatAlphaReadinessGateText,
332
+ };