avorelo 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +56 -0
  3. package/bin/avorelo +9 -0
  4. package/package.json +135 -0
  5. package/scripts/README.md +40 -0
  6. package/scripts/cco-dashboard.js +252 -0
  7. package/scripts/cco-status.js +430 -0
  8. package/scripts/lib/activation/account-state.js +37 -0
  9. package/scripts/lib/activation/activation-runner.js +546 -0
  10. package/scripts/lib/activation/activation-self-healing.js +480 -0
  11. package/scripts/lib/activation/activation-state.js +83 -0
  12. package/scripts/lib/activation/activation-summary.js +191 -0
  13. package/scripts/lib/activation/adapters/claude-code.js +77 -0
  14. package/scripts/lib/activation/adapters/codex-cli.js +52 -0
  15. package/scripts/lib/activation/adapters/cursor.js +37 -0
  16. package/scripts/lib/activation/adapters/github-agent.js +39 -0
  17. package/scripts/lib/activation/adapters/terminal.js +42 -0
  18. package/scripts/lib/activation/adapters/vscode.js +39 -0
  19. package/scripts/lib/activation/adapters/windsurf.js +37 -0
  20. package/scripts/lib/activation/ai-surface-detector.js +151 -0
  21. package/scripts/lib/activation/connect-account.js +145 -0
  22. package/scripts/lib/activation/detect-environment.js +75 -0
  23. package/scripts/lib/activation/detect-hosts.js +62 -0
  24. package/scripts/lib/activation/format-activation-output.js +109 -0
  25. package/scripts/lib/activation/next-action.js +43 -0
  26. package/scripts/lib/activation/repair-engine.js +219 -0
  27. package/scripts/lib/activation-distribution-readiness.js +507 -0
  28. package/scripts/lib/adapter-conformance.js +176 -0
  29. package/scripts/lib/adapter-readiness.js +417 -0
  30. package/scripts/lib/adapter-safety-boundaries.js +335 -0
  31. package/scripts/lib/adapter-technical-readiness-gate.js +205 -0
  32. package/scripts/lib/agent-access-governance.js +455 -0
  33. package/scripts/lib/agent-enforcement.js +765 -0
  34. package/scripts/lib/agent-policy-profile.js +210 -0
  35. package/scripts/lib/agent-security/action-evaluator.js +507 -0
  36. package/scripts/lib/agent-security/adapter-registry.js +98 -0
  37. package/scripts/lib/agent-security/auto-policy.js +139 -0
  38. package/scripts/lib/agent-security/bounded-scan.js +93 -0
  39. package/scripts/lib/agent-security/enforcement-adapter.js +174 -0
  40. package/scripts/lib/agent-security/enforcement-engine.js +1129 -0
  41. package/scripts/lib/agent-security/file-write-adapter.js +183 -0
  42. package/scripts/lib/agent-security/file-write-rules.js +178 -0
  43. package/scripts/lib/agent-security/index.js +3342 -0
  44. package/scripts/lib/agent-security/instruction-risk.js +181 -0
  45. package/scripts/lib/agent-security/mcp-action-adapter.js +185 -0
  46. package/scripts/lib/agent-security/mcp-action-rules.js +184 -0
  47. package/scripts/lib/agent-security/package-action-adapter.js +175 -0
  48. package/scripts/lib/agent-security/package-action-rules.js +233 -0
  49. package/scripts/lib/agent-security/performance.js +148 -0
  50. package/scripts/lib/agent-security/permission-minimizer.js +403 -0
  51. package/scripts/lib/agent-security/scan-cache.js +74 -0
  52. package/scripts/lib/agent-security/source-trust.js +146 -0
  53. package/scripts/lib/ai-install-prompt.js +288 -0
  54. package/scripts/lib/ai-workspace-hygiene.js +1499 -0
  55. package/scripts/lib/alpha-activation.js +520 -0
  56. package/scripts/lib/alpha-feedback.js +263 -0
  57. package/scripts/lib/alpha-readiness-gate.js +332 -0
  58. package/scripts/lib/anti-gaming.js +169 -0
  59. package/scripts/lib/artifact-health.js +431 -0
  60. package/scripts/lib/attribution.js +180 -0
  61. package/scripts/lib/audit.js +289 -0
  62. package/scripts/lib/avorelo-skill-registry.js +810 -0
  63. package/scripts/lib/batch-jobs.js +71 -0
  64. package/scripts/lib/brain-pack.js +578 -0
  65. package/scripts/lib/brand-boundary.js +424 -0
  66. package/scripts/lib/brand.js +74 -0
  67. package/scripts/lib/browser-capability.js +1048 -0
  68. package/scripts/lib/browser-proof-preflight.js +321 -0
  69. package/scripts/lib/cache-readiness.js +187 -0
  70. package/scripts/lib/canonical-reentry.js +162 -0
  71. package/scripts/lib/capability-packs.js +314 -0
  72. package/scripts/lib/capability-recommender.js +512 -0
  73. package/scripts/lib/capability-registry.js +1059 -0
  74. package/scripts/lib/carry-forward-surfacing.js +194 -0
  75. package/scripts/lib/ccusage-adapter.js +188 -0
  76. package/scripts/lib/company-loop.js +1149 -0
  77. package/scripts/lib/config.js +637 -0
  78. package/scripts/lib/context-acquisition-plan.js +287 -0
  79. package/scripts/lib/context-budget-guard.js +170 -0
  80. package/scripts/lib/context-budget-scanner.js +257 -0
  81. package/scripts/lib/context-optimizer.js +715 -0
  82. package/scripts/lib/context-reduction-plan.js +178 -0
  83. package/scripts/lib/context-safety.js +88 -0
  84. package/scripts/lib/context-savings-engine.js +158 -0
  85. package/scripts/lib/cost-evidence.js +254 -0
  86. package/scripts/lib/cross-host-install-plan.js +308 -0
  87. package/scripts/lib/cross-host-install-readiness.js +237 -0
  88. package/scripts/lib/cross-host-value-flow.js +268 -0
  89. package/scripts/lib/dashboard.js +900 -0
  90. package/scripts/lib/design-partner-feedback.js +346 -0
  91. package/scripts/lib/entitlements.js +100 -0
  92. package/scripts/lib/execution-packet.js +559 -0
  93. package/scripts/lib/experimentation-events.js +547 -0
  94. package/scripts/lib/external-capability-compliance.js +107 -0
  95. package/scripts/lib/external-user-simulation.js +166 -0
  96. package/scripts/lib/failure-recovery-readiness.js +81 -0
  97. package/scripts/lib/failure-recovery.js +419 -0
  98. package/scripts/lib/feedback-intelligence.js +537 -0
  99. package/scripts/lib/feedback-signals.js +205 -0
  100. package/scripts/lib/file-integrity.js +68 -0
  101. package/scripts/lib/fsx.js +127 -0
  102. package/scripts/lib/full-readiness-gate.js +451 -0
  103. package/scripts/lib/guidance-builder.js +174 -0
  104. package/scripts/lib/hook-apply.js +1019 -0
  105. package/scripts/lib/hook-baseline.js +310 -0
  106. package/scripts/lib/hook-config-preview.js +275 -0
  107. package/scripts/lib/hook-contracts.js +290 -0
  108. package/scripts/lib/hook-safety-boundary-readiness.js +80 -0
  109. package/scripts/lib/host-capability-matrix.js +351 -0
  110. package/scripts/lib/host-support-context.js +254 -0
  111. package/scripts/lib/http-hook-action.js +538 -0
  112. package/scripts/lib/install-ai-readiness.js +84 -0
  113. package/scripts/lib/install-intake-risk.js +1037 -0
  114. package/scripts/lib/install-journey-intelligence.js +329 -0
  115. package/scripts/lib/intervention-guidance.js +57 -0
  116. package/scripts/lib/known-limitations.js +115 -0
  117. package/scripts/lib/l8-path-truth.js +146 -0
  118. package/scripts/lib/launch-hardening-gate.js +436 -0
  119. package/scripts/lib/launch-readiness.js +628 -0
  120. package/scripts/lib/learning-memory.js +686 -0
  121. package/scripts/lib/lifecycle-hooks.js +802 -0
  122. package/scripts/lib/local-package-smoke.js +423 -0
  123. package/scripts/lib/local-pricing.js +299 -0
  124. package/scripts/lib/mcp-enforcement.js +311 -0
  125. package/scripts/lib/mcp-least-privilege-policy.js +303 -0
  126. package/scripts/lib/mcp-tool-inventory.js +388 -0
  127. package/scripts/lib/mcp-tool-risk.js +0 -0
  128. package/scripts/lib/memory.js +335 -0
  129. package/scripts/lib/metrics.js +699 -0
  130. package/scripts/lib/micro-proof.js +133 -0
  131. package/scripts/lib/next-run-context.js +436 -0
  132. package/scripts/lib/operating-value.js +1648 -0
  133. package/scripts/lib/optimization-v3.js +122 -0
  134. package/scripts/lib/orchestration/adapters/_shared.js +49 -0
  135. package/scripts/lib/orchestration/adapters/aider.js +18 -0
  136. package/scripts/lib/orchestration/adapters/claude-code.js +35 -0
  137. package/scripts/lib/orchestration/adapters/codex.js +35 -0
  138. package/scripts/lib/orchestration/adapters/gemini-cli.js +18 -0
  139. package/scripts/lib/orchestration/adapters/git.js +25 -0
  140. package/scripts/lib/orchestration/adapters/index.js +31 -0
  141. package/scripts/lib/orchestration/adapters/lm-studio.js +18 -0
  142. package/scripts/lib/orchestration/adapters/ollama.js +18 -0
  143. package/scripts/lib/orchestration/adapters/opencode.js +18 -0
  144. package/scripts/lib/orchestration/adapters/openrouter.js +18 -0
  145. package/scripts/lib/orchestration/adapters/test-runner.js +25 -0
  146. package/scripts/lib/orchestration/cli.js +438 -0
  147. package/scripts/lib/orchestration/execution-manager.js +279 -0
  148. package/scripts/lib/orchestration/handoff.js +314 -0
  149. package/scripts/lib/orchestration/index.js +456 -0
  150. package/scripts/lib/orchestration/inventory.js +47 -0
  151. package/scripts/lib/orchestration/model-discovery.js +498 -0
  152. package/scripts/lib/orchestration/model-profiler.js +170 -0
  153. package/scripts/lib/orchestration/model-profiles.js +252 -0
  154. package/scripts/lib/orchestration/model-refresh-policy.js +72 -0
  155. package/scripts/lib/orchestration/proof-writer.js +349 -0
  156. package/scripts/lib/orchestration/provider-discovery/aider.js +49 -0
  157. package/scripts/lib/orchestration/provider-discovery/claude-code.js +56 -0
  158. package/scripts/lib/orchestration/provider-discovery/codex.js +49 -0
  159. package/scripts/lib/orchestration/provider-discovery/common.js +186 -0
  160. package/scripts/lib/orchestration/provider-discovery/gemini.js +106 -0
  161. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +118 -0
  162. package/scripts/lib/orchestration/provider-discovery/models-dev.js +12 -0
  163. package/scripts/lib/orchestration/provider-discovery/ollama.js +100 -0
  164. package/scripts/lib/orchestration/provider-discovery/opencode.js +47 -0
  165. package/scripts/lib/orchestration/provider-discovery/openrouter.js +44 -0
  166. package/scripts/lib/orchestration/risk-classifier.js +130 -0
  167. package/scripts/lib/orchestration/routing-policy.js +486 -0
  168. package/scripts/lib/orchestration/settings.js +112 -0
  169. package/scripts/lib/orchestration/state.js +165 -0
  170. package/scripts/lib/orchestration/verification-manager.js +138 -0
  171. package/scripts/lib/output-profiles.js +146 -0
  172. package/scripts/lib/package-content-audit.js +368 -0
  173. package/scripts/lib/package-runtime.js +278 -0
  174. package/scripts/lib/plan-surface.js +53 -0
  175. package/scripts/lib/plans.js +2318 -0
  176. package/scripts/lib/policy-provider.js +27 -0
  177. package/scripts/lib/prelaunch-activation-readiness.js +409 -0
  178. package/scripts/lib/prelaunch-evidence-store.js +816 -0
  179. package/scripts/lib/prelaunch-intelligence.js +869 -0
  180. package/scripts/lib/pricing-experiment.js +118 -0
  181. package/scripts/lib/pro-moment-events.js +77 -0
  182. package/scripts/lib/pro-moment-state.js +227 -0
  183. package/scripts/lib/pro-moments.js +1216 -0
  184. package/scripts/lib/product-learning-events.js +629 -0
  185. package/scripts/lib/project-profile.js +555 -0
  186. package/scripts/lib/prompt-compiler.js +280 -0
  187. package/scripts/lib/prompt-lint.js +32 -0
  188. package/scripts/lib/prompt-suggestions.js +52 -0
  189. package/scripts/lib/proof-canonical.js +398 -0
  190. package/scripts/lib/proof-drilldown.js +383 -0
  191. package/scripts/lib/proof-events.js +342 -0
  192. package/scripts/lib/proof-history.js +243 -0
  193. package/scripts/lib/proof-metrics.js +296 -0
  194. package/scripts/lib/proof-outcome-evidence.js +134 -0
  195. package/scripts/lib/proof-receipt.js +335 -0
  196. package/scripts/lib/proof-record.js +461 -0
  197. package/scripts/lib/public-activation-distribution-gate.js +258 -0
  198. package/scripts/lib/public-cli.js +3891 -0
  199. package/scripts/lib/public-distribution-truth.js +211 -0
  200. package/scripts/lib/public-install-claim-checker.js +294 -0
  201. package/scripts/lib/publish-provenance-readiness.js +283 -0
  202. package/scripts/lib/readiness-delta.js +218 -0
  203. package/scripts/lib/readiness-evidence-closure.js +196 -0
  204. package/scripts/lib/reentry-memory-capture.js +241 -0
  205. package/scripts/lib/reentry-memory-retrieval.js +302 -0
  206. package/scripts/lib/reentry-memory-status.js +146 -0
  207. package/scripts/lib/reentry-memory-store.js +178 -0
  208. package/scripts/lib/reentry-state.js +66 -0
  209. package/scripts/lib/release-candidate-bundle.js +166 -0
  210. package/scripts/lib/remediation.js +81 -0
  211. package/scripts/lib/repo-map.js +391 -0
  212. package/scripts/lib/run-improvements-lifecycle.js +330 -0
  213. package/scripts/lib/run-improvements.js +789 -0
  214. package/scripts/lib/runtime-decision-policy.js +387 -0
  215. package/scripts/lib/safe-path-engine.js +705 -0
  216. package/scripts/lib/safe-run-controller.js +887 -0
  217. package/scripts/lib/score.js +262 -0
  218. package/scripts/lib/seamless-enforcement.js +329 -0
  219. package/scripts/lib/seamless-outcome.js +689 -0
  220. package/scripts/lib/seamless-reality-gate.js +5043 -0
  221. package/scripts/lib/security-risk-classifier.js +511 -0
  222. package/scripts/lib/security-scan.js +384 -0
  223. package/scripts/lib/session-context-optimizer.js +1211 -0
  224. package/scripts/lib/session-timing.js +315 -0
  225. package/scripts/lib/skill-hygiene.js +805 -0
  226. package/scripts/lib/skill-packs.js +161 -0
  227. package/scripts/lib/skills-operating-layer.js +580 -0
  228. package/scripts/lib/smart-work-routing.js +768 -0
  229. package/scripts/lib/source-catalog.js +700 -0
  230. package/scripts/lib/status-value-summary.js +32 -0
  231. package/scripts/lib/support-bundle.js +578 -0
  232. package/scripts/lib/task-continuation.js +440 -0
  233. package/scripts/lib/test-helpers.js +15 -0
  234. package/scripts/lib/tier.js +38 -0
  235. package/scripts/lib/token-context-quality-gate.js +370 -0
  236. package/scripts/lib/token-cost-capture.js +187 -0
  237. package/scripts/lib/token-cost-intelligence.js +358 -0
  238. package/scripts/lib/token-efficiency-evidence.js +213 -0
  239. package/scripts/lib/token-evidence.js +699 -0
  240. package/scripts/lib/tokenish.js +17 -0
  241. package/scripts/lib/tool-output-sandbox.js +304 -0
  242. package/scripts/lib/trust-audit.js +136 -0
  243. package/scripts/lib/unified-events.js +396 -0
  244. package/scripts/lib/upgrade-interruption-recovery.js +407 -0
  245. package/scripts/lib/usage-ledger.js +201 -0
  246. package/scripts/lib/value-ledger.js +130 -0
  247. package/scripts/lib/value-proof-calibration.js +531 -0
  248. package/scripts/lib/visual-qa.js +231 -0
  249. package/scripts/lib/voice-alpha.js +29 -0
  250. package/scripts/lib/work-aware-orchestration.js +976 -0
  251. package/scripts/lib/work-control-receipts.js +577 -0
  252. package/scripts/lib/work-ledger.js +1123 -0
  253. package/scripts/lib/work-panel-preview.js +352 -0
  254. package/scripts/lib/workflow-discipline.js +280 -0
  255. package/scripts/lib/workflow-signals.js +419 -0
  256. package/scripts/lib/workspace-map.js +281 -0
  257. package/scripts/lib/workspace-registry.js +1367 -0
  258. package/scripts/lib/workspace-resolver.js +480 -0
@@ -0,0 +1,335 @@
1
+ "use strict";
2
+
3
+ /**
4
+ * Completion Receipt (Surface 2).
5
+ */
6
+
7
+ const fs = require("fs");
8
+ const path = require("path");
9
+ const { validateProofRecord } = require("./anti-gaming");
10
+ const { formatNextBoundedAction } = require("./proof-canonical");
11
+
12
+ function isMaterialRun(proofRecord) {
13
+ if (!proofRecord) return false;
14
+ const toolCalls = proofRecord.efficiency?.tools_considered || 0;
15
+ return toolCalls > 0 || proofRecord.completion_status !== "unknown";
16
+ }
17
+
18
+ function buildCompletionReceipt(proofRecord) {
19
+ if (!isMaterialRun(proofRecord)) {
20
+ return {
21
+ version: 1,
22
+ material: false,
23
+ session_id: proofRecord?.session_id || "unknown",
24
+ result: { summary: "No material run detected.", status: "empty" },
25
+ improvements: [],
26
+ trust_control: buildTrustControlSummary(proofRecord),
27
+ metrics: {},
28
+ anti_gaming: { valid: true, warnings: [] },
29
+ };
30
+ }
31
+
32
+ const result = buildResultSection(proofRecord);
33
+ const improvements = buildImprovements(proofRecord);
34
+ const trustControl = buildTrustControlSummary(proofRecord);
35
+ const metrics = buildReceiptMetrics(proofRecord);
36
+ const antiGaming = validateProofRecord(proofRecord);
37
+
38
+ return {
39
+ version: 1,
40
+ material: true,
41
+ session_id: proofRecord.session_id,
42
+ started_at: proofRecord.started_at,
43
+ ended_at: proofRecord.ended_at,
44
+ result,
45
+ improvements,
46
+ trust_control: trustControl,
47
+ metrics,
48
+ anti_gaming: antiGaming,
49
+ };
50
+ }
51
+
52
+ function buildResultSection(proof) {
53
+ const status = proof.completion_status;
54
+ const outcomeType = proof.final_outcome_type;
55
+ const nextBoundedAction = formatNextBoundedAction(proof.outcome?.next_bounded_action);
56
+ const taskContract = proof.task_contract || {};
57
+ const repoTruth = proof.repo_truth || {};
58
+
59
+ const summaryMap = {
60
+ completed: "Task completed.",
61
+ safe_stop: "Safe stop reached with bounded next action.",
62
+ partial: "Partially completed with recovery path available.",
63
+ ended_without_completion: "Session ended without explicit completion.",
64
+ unknown: "Session outcome not determined.",
65
+ };
66
+
67
+ return {
68
+ summary: summaryMap[status] || summaryMap.unknown,
69
+ status,
70
+ outcome_type: outcomeType,
71
+ task_type: proof.task_type || "general",
72
+ next_bounded_action: nextBoundedAction,
73
+ output_artifact_reference: proof.outcome?.output_artifact_reference || null,
74
+ claim_boundary: proof.outcome?.claim_boundary || null,
75
+ where_am_i_now: repoTruth.where_am_i_now || null,
76
+ readiness_status: repoTruth.readiness_status || null,
77
+ task_objective: taskContract.objective || null,
78
+ allowed_paths: taskContract.allowed_paths || [],
79
+ };
80
+ }
81
+
82
+ function buildImprovements(proof) {
83
+ const items = [];
84
+
85
+ const eff = proof.efficiency || {};
86
+ const ctrl = proof.control || {};
87
+ const trust = proof.trust || {};
88
+ const outcome = proof.outcome || {};
89
+
90
+ if (eff.large_output_bytes_managed > 0) {
91
+ items.push({
92
+ dimension: "efficiency",
93
+ text: `Stored ${eff.large_output_events || 1} large output${(eff.large_output_events || 1) > 1 ? "s" : ""} out-of-band to reduce context pressure.`,
94
+ evidence: `${eff.large_output_bytes_managed} bytes managed`,
95
+ });
96
+ }
97
+
98
+ if (eff.retries_count > 0) {
99
+ items.push({
100
+ dimension: "efficiency",
101
+ text: `Interrupted ${eff.retries_count} repeated loop${eff.retries_count > 1 ? "s" : ""} to prevent wasted cycles.`,
102
+ evidence: `${eff.retries_count} retries caught`,
103
+ });
104
+ }
105
+
106
+ if (eff.tools_skipped > 0) {
107
+ items.push({
108
+ dimension: "efficiency",
109
+ text: `Skipped ${eff.tools_skipped} unnecessary tool re-scan${eff.tools_skipped > 1 ? "s" : ""}.`,
110
+ evidence: `${eff.tools_skipped} scans avoided`,
111
+ });
112
+ }
113
+
114
+ if (ctrl.risky_actions_blocked > 0 || ctrl.risky_actions_downgraded > 0) {
115
+ const total = ctrl.risky_actions_blocked + ctrl.risky_actions_downgraded;
116
+ items.push({
117
+ dimension: "control",
118
+ text: `Blocked or flagged ${total} risky action${total > 1 ? "s" : ""}.`,
119
+ evidence: `${ctrl.risky_actions_blocked} blocked, ${ctrl.risky_actions_downgraded} flagged`,
120
+ });
121
+ }
122
+
123
+ if (trust.has_related_evidence) {
124
+ items.push({
125
+ dimension: "trust",
126
+ text: "Attached related evidence or runtime artifacts for this session.",
127
+ evidence: trust.evidence_bundle_reference || (outcome.evidence_refs || [])[0] || ".claude/cco/security/",
128
+ });
129
+ }
130
+
131
+ if (trust.progress_preserved) {
132
+ items.push({
133
+ dimension: "trust",
134
+ text: "Preserved progress for safe re-entry.",
135
+ evidence: outcome.progress_ref || "stop snapshot saved",
136
+ });
137
+ }
138
+
139
+ if (trust.uncertainty_annotations_count > 0) {
140
+ items.push({
141
+ dimension: "trust",
142
+ text: `Marked ${trust.uncertainty_annotations_count} unverified claim${trust.uncertainty_annotations_count > 1 ? "s" : ""} clearly.`,
143
+ evidence: `${trust.uncertainty_annotations_count} uncertainty annotations`,
144
+ });
145
+ }
146
+
147
+ return diversifyAndCap(items, 5);
148
+ }
149
+
150
+ function buildTrustControlSummary(proof) {
151
+ const trust = proof?.trust || {};
152
+ const ctrl = proof?.control || {};
153
+ const outcome = proof?.outcome || {};
154
+ const taskContract = proof?.task_contract || {};
155
+ const repoTruth = proof?.repo_truth || {};
156
+
157
+ return {
158
+ evidence_attached: Boolean(trust.has_related_evidence),
159
+ evidence_refs: outcome.evidence_refs || [],
160
+ unverified_claims_present: (trust.unverified_claim_count || 0) > 0,
161
+ unverified_claim_count: trust.unverified_claim_count || 0,
162
+ risky_actions_handled:
163
+ (ctrl.risky_actions_blocked || 0) + (ctrl.risky_actions_downgraded || 0) > 0,
164
+ risky_actions_blocked: ctrl.risky_actions_blocked || 0,
165
+ risky_actions_downgraded: ctrl.risky_actions_downgraded || 0,
166
+ rollback_available: Boolean(trust.rollback_available),
167
+ policy_violations_status: ctrl.trusted_scope_preserved || "unknown",
168
+ safe_stop_occurred: (ctrl.safe_stop_count || 0) > 0,
169
+ next_bounded_action: formatNextBoundedAction(outcome.next_bounded_action),
170
+ claim_boundary: outcome.claim_boundary || null,
171
+ where_am_i_now: repoTruth.where_am_i_now || null,
172
+ readiness_status: repoTruth.readiness_status || null,
173
+ task_objective: taskContract.objective || null,
174
+ allowed_paths: taskContract.allowed_paths || [],
175
+ expected_evidence_refs: taskContract.evidence_refs || [],
176
+ review_reasons: taskContract.review_reasons || [],
177
+ output_artifact_reference: outcome.output_artifact_reference || null,
178
+ };
179
+ }
180
+
181
+ function buildReceiptMetrics(proof) {
182
+ const eff = proof.efficiency || {};
183
+ const ctrl = proof.control || {};
184
+ const trust = proof.trust || {};
185
+
186
+ const metrics = {};
187
+
188
+ if (eff.time_saved_estimate && eff.time_saved_estimate.minutes > 0) {
189
+ metrics.estimated_time_saved = `~${eff.time_saved_estimate.minutes} min (${eff.time_saved_estimate.confidence} confidence)`;
190
+ }
191
+ if (eff.retries_count > 0) {
192
+ metrics.retries_caught = eff.retries_count;
193
+ }
194
+ if (eff.large_output_bytes_managed > 0) {
195
+ metrics.large_outputs_managed = `${eff.large_output_events || 1} outputs (${eff.large_output_bytes_managed} bytes)`;
196
+ }
197
+ if (eff.tools_skipped > 0) {
198
+ metrics.tool_overhead_reduced = eff.tools_skipped;
199
+ }
200
+ if (trust.has_related_evidence) {
201
+ metrics.evidence_present = "yes";
202
+ }
203
+ if (ctrl.risky_actions_blocked > 0) {
204
+ metrics.risky_actions_blocked = ctrl.risky_actions_blocked;
205
+ }
206
+
207
+ return metrics;
208
+ }
209
+
210
+ function renderReceiptMarkdown(receipt) {
211
+ if (!receipt.material) {
212
+ return "## Wuz Receipt\n\nNo material run detected.\n";
213
+ }
214
+
215
+ const lines = [
216
+ "## Wuz Effectiveness Receipt",
217
+ "",
218
+ `Session: ${receipt.session_id}`,
219
+ receipt.started_at ? `Started: ${receipt.started_at}` : "",
220
+ receipt.ended_at ? `Ended: ${receipt.ended_at}` : "",
221
+ "",
222
+ "### Result",
223
+ `${receipt.result.summary}`,
224
+ receipt.result.task_objective ? `Objective: ${receipt.result.task_objective}` : "",
225
+ receipt.result.allowed_paths?.length > 0 ? `Allowed scope: ${receipt.result.allowed_paths.join(", ")}` : "",
226
+ receipt.result.next_bounded_action ? `Next action: ${receipt.result.next_bounded_action}` : "",
227
+ receipt.result.output_artifact_reference
228
+ ? `Artifact: ${receipt.result.output_artifact_reference}`
229
+ : "",
230
+ receipt.result.claim_boundary ? `Claim boundary: ${receipt.result.claim_boundary}` : "",
231
+ receipt.result.where_am_i_now ? `Current state: ${receipt.result.where_am_i_now}` : "",
232
+ receipt.result.readiness_status ? `Readiness: ${receipt.result.readiness_status}` : "",
233
+ "",
234
+ ];
235
+
236
+ if (receipt.improvements.length > 0) {
237
+ lines.push("### What Wuz improved");
238
+ for (const imp of receipt.improvements) {
239
+ lines.push(`- ${imp.text}`);
240
+ }
241
+ lines.push("");
242
+ }
243
+
244
+ lines.push("### Trust & control");
245
+ const tc = receipt.trust_control;
246
+ lines.push(`- Evidence attached: ${tc.evidence_attached ? "yes" : "no"}`);
247
+ if (tc.unverified_claims_present) {
248
+ lines.push(`- Unverified claims: ${tc.unverified_claim_count}`);
249
+ }
250
+ if (tc.risky_actions_handled) {
251
+ lines.push(
252
+ `- Risky actions blocked: ${tc.risky_actions_blocked}, flagged: ${tc.risky_actions_downgraded}`
253
+ );
254
+ }
255
+ lines.push(`- Rollback available: ${tc.rollback_available ? "yes" : "no"}`);
256
+ lines.push(`- Policy violations: ${tc.policy_violations_status}`);
257
+ if (tc.safe_stop_occurred) {
258
+ lines.push("- Safe stop occurred: yes");
259
+ }
260
+ if (tc.where_am_i_now) {
261
+ lines.push(`- Current state: ${tc.where_am_i_now}`);
262
+ }
263
+ if (tc.readiness_status) {
264
+ lines.push(`- Readiness: ${tc.readiness_status}`);
265
+ }
266
+ if (tc.next_bounded_action) {
267
+ lines.push(`- Bounded next action: ${tc.next_bounded_action}`);
268
+ }
269
+ if (tc.expected_evidence_refs.length > 0) {
270
+ lines.push(`- Expected evidence: ${tc.expected_evidence_refs.join(", ")}`);
271
+ }
272
+ if (tc.review_reasons.length > 0) {
273
+ lines.push(`- Review triggers: ${tc.review_reasons.join(", ")}`);
274
+ }
275
+ lines.push("");
276
+
277
+ if (Object.keys(receipt.metrics).length > 0) {
278
+ lines.push("### Metrics");
279
+ for (const [key, value] of Object.entries(receipt.metrics)) {
280
+ lines.push(`- ${key.replace(/_/g, " ")}: ${value}`);
281
+ }
282
+ lines.push("");
283
+ }
284
+
285
+ if (receipt.anti_gaming && !receipt.anti_gaming.valid) {
286
+ lines.push("### Warnings");
287
+ for (const warning of receipt.anti_gaming.warnings) {
288
+ lines.push(`- ${warning}`);
289
+ }
290
+ lines.push("");
291
+ }
292
+
293
+ return lines.filter((line) => line !== undefined).join("\n");
294
+ }
295
+
296
+ function saveReceipt(cwd, receipt) {
297
+ const sessionId = receipt.session_id || "unknown";
298
+ const jsonPath = path.join(cwd, ".claude", "cco", "receipts", `${sessionId}.json`);
299
+ const mdPath = path.join(cwd, ".claude", "cco", "receipts", `${sessionId}.md`);
300
+
301
+ fs.mkdirSync(path.dirname(jsonPath), { recursive: true });
302
+ fs.writeFileSync(jsonPath, JSON.stringify(receipt, null, 2), "utf8");
303
+ fs.writeFileSync(mdPath, renderReceiptMarkdown(receipt), "utf8");
304
+
305
+ return { jsonPath, mdPath };
306
+ }
307
+
308
+ function diversifyAndCap(items, maxCount) {
309
+ const result = [];
310
+ const seenDimensions = new Set();
311
+
312
+ for (const item of items) {
313
+ if (result.length >= maxCount) break;
314
+ if (!seenDimensions.has(item.dimension)) {
315
+ result.push(item);
316
+ seenDimensions.add(item.dimension);
317
+ }
318
+ }
319
+
320
+ for (const item of items) {
321
+ if (result.length >= maxCount) break;
322
+ if (!result.includes(item)) {
323
+ result.push(item);
324
+ }
325
+ }
326
+
327
+ return result;
328
+ }
329
+
330
+ module.exports = {
331
+ isMaterialRun,
332
+ buildCompletionReceipt,
333
+ renderReceiptMarkdown,
334
+ saveReceipt,
335
+ };