avorelo 0.3.8 → 0.4.0-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (394) hide show
  1. package/LICENSE +16 -23
  2. package/README.md +62 -72
  3. package/bin/avorelo +9 -0
  4. package/package.json +147 -139
  5. package/scripts/README.md +40 -0
  6. package/scripts/avorelo-session-collision-guard.js +540 -0
  7. package/scripts/avorelo-workstream-preflight.js +918 -0
  8. package/scripts/cco-dashboard.js +346 -0
  9. package/scripts/cco-posttooluse.js +504 -0
  10. package/scripts/cco-pretooluse.js +381 -0
  11. package/scripts/cco-status.js +540 -0
  12. package/scripts/cco-stop.js +77 -0
  13. package/scripts/cco-userprompt-submit.js +83 -0
  14. package/scripts/lib/activation/account-state.js +37 -0
  15. package/scripts/lib/activation/activate-command.js +114 -0
  16. package/scripts/lib/activation/activation-runner.js +607 -0
  17. package/scripts/lib/activation/activation-self-healing.js +481 -0
  18. package/scripts/lib/activation/activation-state.js +96 -0
  19. package/scripts/lib/activation/activation-summary.js +241 -0
  20. package/scripts/lib/activation/adapters/claude-code.js +77 -0
  21. package/scripts/lib/activation/adapters/codex-cli.js +52 -0
  22. package/scripts/lib/activation/adapters/cursor.js +37 -0
  23. package/scripts/lib/activation/adapters/github-agent.js +39 -0
  24. package/scripts/lib/activation/adapters/terminal.js +42 -0
  25. package/scripts/lib/activation/adapters/vscode.js +39 -0
  26. package/scripts/lib/activation/adapters/windsurf.js +37 -0
  27. package/scripts/lib/activation/ai-surface-detector.js +151 -0
  28. package/scripts/lib/activation/connect-account.js +145 -0
  29. package/scripts/lib/activation/detect-environment.js +75 -0
  30. package/scripts/lib/activation/detect-hosts.js +62 -0
  31. package/scripts/lib/activation/format-activation-output.js +109 -0
  32. package/scripts/lib/activation/next-action.js +43 -0
  33. package/scripts/lib/activation/repair-engine.js +219 -0
  34. package/scripts/lib/activation/run-entry.js +346 -0
  35. package/scripts/lib/activation-distribution-readiness.js +507 -0
  36. package/scripts/lib/adapter-conformance.js +176 -0
  37. package/scripts/lib/adapter-readiness.js +428 -0
  38. package/scripts/lib/adapter-safety-boundaries.js +335 -0
  39. package/scripts/lib/adapter-technical-readiness-gate.js +205 -0
  40. package/scripts/lib/agent-access-governance.js +455 -0
  41. package/scripts/lib/agent-activation-readiness.js +878 -0
  42. package/scripts/lib/agent-enforcement.js +765 -0
  43. package/scripts/lib/agent-evolution-loop.js +479 -0
  44. package/scripts/lib/agent-policy-profile.js +210 -0
  45. package/scripts/lib/agent-security/action-evaluator.js +507 -0
  46. package/scripts/lib/agent-security/adapter-registry.js +98 -0
  47. package/scripts/lib/agent-security/auto-policy.js +139 -0
  48. package/scripts/lib/agent-security/bounded-scan.js +93 -0
  49. package/scripts/lib/agent-security/enforcement-adapter.js +174 -0
  50. package/scripts/lib/agent-security/enforcement-engine.js +1129 -0
  51. package/scripts/lib/agent-security/file-write-adapter.js +183 -0
  52. package/scripts/lib/agent-security/file-write-rules.js +178 -0
  53. package/scripts/lib/agent-security/index.js +3342 -0
  54. package/scripts/lib/agent-security/instruction-risk.js +181 -0
  55. package/scripts/lib/agent-security/mcp-action-adapter.js +185 -0
  56. package/scripts/lib/agent-security/mcp-action-rules.js +184 -0
  57. package/scripts/lib/agent-security/package-action-adapter.js +175 -0
  58. package/scripts/lib/agent-security/package-action-rules.js +233 -0
  59. package/scripts/lib/agent-security/performance.js +148 -0
  60. package/scripts/lib/agent-security/permission-minimizer.js +403 -0
  61. package/scripts/lib/agent-security/scan-cache.js +74 -0
  62. package/scripts/lib/agent-security/source-trust.js +146 -0
  63. package/scripts/lib/ai-efficiency-dogfood-pack.js +437 -0
  64. package/scripts/lib/ai-efficiency-eval.js +207 -0
  65. package/scripts/lib/ai-efficiency-guard-contract.js +209 -0
  66. package/scripts/lib/ai-efficiency-measured-value.js +106 -0
  67. package/scripts/lib/ai-install-prompt.js +293 -0
  68. package/scripts/lib/ai-task-inference.js +155 -0
  69. package/scripts/lib/ai-value-ledger.js +121 -0
  70. package/scripts/lib/ai-value-proof-table.js +151 -0
  71. package/scripts/lib/ai-work-efficiency-routing.js +623 -0
  72. package/scripts/lib/ai-workspace-hygiene.js +1499 -0
  73. package/scripts/lib/alpha-activation.js +520 -0
  74. package/scripts/lib/alpha-feedback.js +263 -0
  75. package/scripts/lib/alpha-readiness-gate.js +332 -0
  76. package/scripts/lib/anti-gaming.js +169 -0
  77. package/scripts/lib/artifact-health.js +431 -0
  78. package/scripts/lib/artifact-receipt-hygiene.js +619 -0
  79. package/scripts/lib/attribution.js +180 -0
  80. package/scripts/lib/audit.js +289 -0
  81. package/scripts/lib/avorelo-skill-registry.js +810 -0
  82. package/scripts/lib/batch-jobs.js +71 -0
  83. package/scripts/lib/brain-pack.js +578 -0
  84. package/scripts/lib/brand-boundary.js +424 -0
  85. package/scripts/lib/brand.js +74 -0
  86. package/scripts/lib/browser-capability.js +1048 -0
  87. package/scripts/lib/browser-proof-governed-workflow.js +1020 -0
  88. package/scripts/lib/browser-proof-preflight.js +321 -0
  89. package/scripts/lib/cache-readiness.js +296 -0
  90. package/scripts/lib/canonical-reentry.js +162 -0
  91. package/scripts/lib/capability-contract-validator.js +177 -0
  92. package/scripts/lib/capability-hygiene.js +504 -0
  93. package/scripts/lib/capability-intake-quarantine.js +789 -0
  94. package/scripts/lib/capability-kernel-registry.js +566 -0
  95. package/scripts/lib/capability-kernel.js +202 -0
  96. package/scripts/lib/capability-manifest.js +255 -0
  97. package/scripts/lib/capability-outcome-normalizer.js +104 -0
  98. package/scripts/lib/capability-packs.js +314 -0
  99. package/scripts/lib/capability-recommender.js +513 -0
  100. package/scripts/lib/capability-registry.js +1062 -0
  101. package/scripts/lib/carry-forward-surfacing.js +194 -0
  102. package/scripts/lib/ccusage-adapter.js +188 -0
  103. package/scripts/lib/claude-session-evidence/index.js +1027 -0
  104. package/scripts/lib/cli-output-sanitizer.js +118 -0
  105. package/scripts/lib/company-loop.js +1149 -0
  106. package/scripts/lib/config.js +641 -0
  107. package/scripts/lib/context-acquisition-plan.js +359 -0
  108. package/scripts/lib/context-authority-rules.js +138 -0
  109. package/scripts/lib/context-budget-guard.js +170 -0
  110. package/scripts/lib/context-budget-scanner.js +257 -0
  111. package/scripts/lib/context-budget.js +167 -0
  112. package/scripts/lib/context-claim-safety.js +116 -0
  113. package/scripts/lib/context-compiler.js +236 -0
  114. package/scripts/lib/context-optimizer.js +715 -0
  115. package/scripts/lib/context-packet.js +121 -0
  116. package/scripts/lib/context-receipt.js +57 -0
  117. package/scripts/lib/context-reduction-plan.js +179 -0
  118. package/scripts/lib/context-safety.js +88 -0
  119. package/scripts/lib/context-savings-engine.js +158 -0
  120. package/scripts/lib/context-source-registry.js +393 -0
  121. package/scripts/lib/context-task-profiles.js +147 -0
  122. package/scripts/lib/cost-abuse-guard.js +975 -0
  123. package/scripts/lib/cost-evidence.js +287 -0
  124. package/scripts/lib/cost-to-outcome-signals.js +639 -0
  125. package/scripts/lib/cross-host-install-plan.js +308 -0
  126. package/scripts/lib/cross-host-install-readiness.js +242 -0
  127. package/scripts/lib/cross-host-value-flow.js +268 -0
  128. package/scripts/lib/dashboard.js +1056 -0
  129. package/scripts/lib/data-permissions-guard.js +1187 -0
  130. package/scripts/lib/deployment-environment-guard.js +1236 -0
  131. package/scripts/lib/design-partner-feedback.js +346 -0
  132. package/scripts/lib/dogfood-evidence-freshness.js +567 -0
  133. package/scripts/lib/efficiency-receipt.js +354 -0
  134. package/scripts/lib/entitlements.js +100 -0
  135. package/scripts/lib/execution-packet.js +559 -0
  136. package/scripts/lib/execution-route-governor.js +179 -0
  137. package/scripts/lib/experimentation-events.js +547 -0
  138. package/scripts/lib/external-capability-compliance.js +107 -0
  139. package/scripts/lib/external-readiness/ai-visibility/ai-visibility-runner.js +322 -0
  140. package/scripts/lib/external-readiness/calibration/benchmark-site-catalog.js +121 -0
  141. package/scripts/lib/external-readiness/calibration/completion-gate.js +112 -0
  142. package/scripts/lib/external-readiness/calibration/real-site-benchmark-runner.js +284 -0
  143. package/scripts/lib/external-readiness/drift-detector.js +100 -0
  144. package/scripts/lib/external-readiness/endpoint-prober.js +332 -0
  145. package/scripts/lib/external-readiness/external-readiness-runner.js +112 -0
  146. package/scripts/lib/external-readiness/full-agent-readiness-scorer.js +220 -0
  147. package/scripts/lib/external-readiness/golden-path-runner.js +333 -0
  148. package/scripts/lib/external-readiness/inside-out-runner.js +118 -0
  149. package/scripts/lib/external-readiness/proof-receipt-writer.js +112 -0
  150. package/scripts/lib/external-readiness/safe-fix-executor.js +117 -0
  151. package/scripts/lib/external-readiness/skills/category-boundary-guard.js +30 -0
  152. package/scripts/lib/external-readiness/skills/pmm-positioning-guard.js +69 -0
  153. package/scripts/lib/external-readiness/skills/safe-fix-policy.js +35 -0
  154. package/scripts/lib/external-user-simulation.js +166 -0
  155. package/scripts/lib/failure-recovery-readiness.js +81 -0
  156. package/scripts/lib/failure-recovery.js +419 -0
  157. package/scripts/lib/feedback-intelligence.js +537 -0
  158. package/scripts/lib/feedback-signals.js +205 -0
  159. package/scripts/lib/file-integrity.js +68 -0
  160. package/scripts/lib/fsx.js +129 -0
  161. package/scripts/lib/full-readiness-gate.js +451 -0
  162. package/scripts/lib/governed-action-exposure-primitives.js +1514 -0
  163. package/scripts/lib/governed-exposure-planner.js +186 -0
  164. package/scripts/lib/governed-workspace-hygiene.js +946 -0
  165. package/scripts/lib/guard-suite-common.js +412 -0
  166. package/scripts/lib/guidance-builder.js +174 -0
  167. package/scripts/lib/hook-apply.js +1075 -0
  168. package/scripts/lib/hook-baseline.js +310 -0
  169. package/scripts/lib/hook-config-preview.js +275 -0
  170. package/scripts/lib/hook-contracts.js +290 -0
  171. package/scripts/lib/hook-safety-boundary-readiness.js +80 -0
  172. package/scripts/lib/host-capability-matrix.js +351 -0
  173. package/scripts/lib/host-support-context.js +254 -0
  174. package/scripts/lib/http-hook-action.js +538 -0
  175. package/scripts/lib/install-ai-readiness.js +84 -0
  176. package/scripts/lib/install-intake-risk.js +1051 -0
  177. package/scripts/lib/install-journey-intelligence.js +329 -0
  178. package/scripts/lib/intervention-guidance.js +57 -0
  179. package/scripts/lib/known-limitations.js +115 -0
  180. package/scripts/lib/l8-path-truth.js +146 -0
  181. package/scripts/lib/launch-hardening-gate.js +436 -0
  182. package/scripts/lib/launch-readiness.js +635 -0
  183. package/scripts/lib/learning-experimentation-foundation.js +1484 -0
  184. package/scripts/lib/learning-memory.js +686 -0
  185. package/scripts/lib/lifecycle-hooks.js +982 -0
  186. package/scripts/lib/local-package-smoke.js +436 -0
  187. package/scripts/lib/local-pricing.js +299 -0
  188. package/scripts/lib/mcp-enforcement.js +311 -0
  189. package/scripts/lib/mcp-least-privilege-policy.js +303 -0
  190. package/scripts/lib/mcp-tool-inventory.js +388 -0
  191. package/scripts/lib/mcp-tool-risk.js +0 -0
  192. package/scripts/lib/memory.js +335 -0
  193. package/scripts/lib/metrics.js +699 -0
  194. package/scripts/lib/micro-proof.js +133 -0
  195. package/scripts/lib/model-work-class-routing.js +79 -0
  196. package/scripts/lib/next-run-context.js +436 -0
  197. package/scripts/lib/next-run-continuity.js +1207 -0
  198. package/scripts/lib/observability-recovery-guard.js +1030 -0
  199. package/scripts/lib/operating-value.js +1662 -0
  200. package/scripts/lib/optimization-v3.js +122 -0
  201. package/scripts/lib/orchestration/adapters/_shared.js +49 -0
  202. package/scripts/lib/orchestration/adapters/aider.js +18 -0
  203. package/scripts/lib/orchestration/adapters/claude-code.js +35 -0
  204. package/scripts/lib/orchestration/adapters/codex.js +35 -0
  205. package/scripts/lib/orchestration/adapters/gemini-cli.js +18 -0
  206. package/scripts/lib/orchestration/adapters/git.js +25 -0
  207. package/scripts/lib/orchestration/adapters/index.js +31 -0
  208. package/scripts/lib/orchestration/adapters/lm-studio.js +18 -0
  209. package/scripts/lib/orchestration/adapters/ollama.js +18 -0
  210. package/scripts/lib/orchestration/adapters/opencode.js +18 -0
  211. package/scripts/lib/orchestration/adapters/openrouter.js +18 -0
  212. package/scripts/lib/orchestration/adapters/test-runner.js +25 -0
  213. package/scripts/lib/orchestration/cli.js +438 -0
  214. package/scripts/lib/orchestration/execution-manager.js +279 -0
  215. package/scripts/lib/orchestration/handoff.js +314 -0
  216. package/scripts/lib/orchestration/index.js +456 -0
  217. package/scripts/lib/orchestration/inventory.js +47 -0
  218. package/scripts/lib/orchestration/model-discovery.js +498 -0
  219. package/scripts/lib/orchestration/model-profiler.js +170 -0
  220. package/scripts/lib/orchestration/model-profiles.js +252 -0
  221. package/scripts/lib/orchestration/model-refresh-policy.js +72 -0
  222. package/scripts/lib/orchestration/proof-writer.js +349 -0
  223. package/scripts/lib/orchestration/provider-discovery/aider.js +49 -0
  224. package/scripts/lib/orchestration/provider-discovery/claude-code.js +56 -0
  225. package/scripts/lib/orchestration/provider-discovery/codex.js +49 -0
  226. package/scripts/lib/orchestration/provider-discovery/common.js +186 -0
  227. package/scripts/lib/orchestration/provider-discovery/gemini.js +106 -0
  228. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +118 -0
  229. package/scripts/lib/orchestration/provider-discovery/models-dev.js +12 -0
  230. package/scripts/lib/orchestration/provider-discovery/ollama.js +100 -0
  231. package/scripts/lib/orchestration/provider-discovery/opencode.js +47 -0
  232. package/scripts/lib/orchestration/provider-discovery/openrouter.js +44 -0
  233. package/scripts/lib/orchestration/risk-classifier.js +130 -0
  234. package/scripts/lib/orchestration/routing-policy.js +486 -0
  235. package/scripts/lib/orchestration/settings.js +95 -0
  236. package/scripts/lib/orchestration/state.js +165 -0
  237. package/scripts/lib/orchestration/verification-manager.js +138 -0
  238. package/scripts/lib/outcome-evidence-stack.js +1083 -0
  239. package/scripts/lib/output-profiles.js +146 -0
  240. package/scripts/lib/package-content-audit.js +368 -0
  241. package/scripts/lib/package-runtime.js +278 -0
  242. package/scripts/lib/plan-surface.js +53 -0
  243. package/scripts/lib/plans.js +2327 -0
  244. package/scripts/lib/policy-provider.js +27 -0
  245. package/scripts/lib/prelaunch-activation-readiness.js +409 -0
  246. package/scripts/lib/prelaunch-evidence-store.js +816 -0
  247. package/scripts/lib/prelaunch-intelligence.js +869 -0
  248. package/scripts/lib/pricing-experiment.js +118 -0
  249. package/scripts/lib/pro-moment-events.js +77 -0
  250. package/scripts/lib/pro-moment-state.js +227 -0
  251. package/scripts/lib/pro-moments.js +1216 -0
  252. package/scripts/lib/product-home-receipt.js +1790 -0
  253. package/scripts/lib/product-learning-events.js +696 -0
  254. package/scripts/lib/production-confidence-control-tower.js +1209 -0
  255. package/scripts/lib/production-confidence.js +1858 -0
  256. package/scripts/lib/project-profile.js +555 -0
  257. package/scripts/lib/prompt-compiler-plan.js +94 -0
  258. package/scripts/lib/prompt-compiler.js +280 -0
  259. package/scripts/lib/prompt-lint.js +32 -0
  260. package/scripts/lib/prompt-suggestions.js +52 -0
  261. package/scripts/lib/proof-canonical.js +398 -0
  262. package/scripts/lib/proof-drilldown.js +383 -0
  263. package/scripts/lib/proof-e2e/promise-completion.js +141 -0
  264. package/scripts/lib/proof-e2e/promise-dashboard-claims.js +135 -0
  265. package/scripts/lib/proof-e2e/promise-local-proof.js +156 -0
  266. package/scripts/lib/proof-e2e/promise-provider-neutral.js +136 -0
  267. package/scripts/lib/proof-e2e/promise-registry.js +219 -0
  268. package/scripts/lib/proof-e2e/promise-security-trust.js +141 -0
  269. package/scripts/lib/proof-e2e/promise-skills-risk.js +163 -0
  270. package/scripts/lib/proof-e2e/promise-token-savings.js +112 -0
  271. package/scripts/lib/proof-e2e/promise-work-management.js +126 -0
  272. package/scripts/lib/proof-events.js +342 -0
  273. package/scripts/lib/proof-history.js +243 -0
  274. package/scripts/lib/proof-metrics.js +296 -0
  275. package/scripts/lib/proof-outcome-evidence.js +134 -0
  276. package/scripts/lib/proof-receipt.js +335 -0
  277. package/scripts/lib/proof-record.js +461 -0
  278. package/scripts/lib/proof-savings-report.js +1549 -0
  279. package/scripts/lib/public-activation-distribution-gate.js +266 -0
  280. package/scripts/lib/public-cli.js +5631 -0
  281. package/scripts/lib/public-distribution-truth.js +211 -0
  282. package/scripts/lib/public-distribution.js +73 -0
  283. package/scripts/lib/public-install-claim-checker.js +300 -0
  284. package/scripts/lib/publish-provenance-readiness.js +287 -0
  285. package/scripts/lib/readiness-delta.js +218 -0
  286. package/scripts/lib/readiness-evidence-closure.js +196 -0
  287. package/scripts/lib/reentry-memory-capture.js +241 -0
  288. package/scripts/lib/reentry-memory-retrieval.js +302 -0
  289. package/scripts/lib/reentry-memory-status.js +147 -0
  290. package/scripts/lib/reentry-memory-store.js +183 -0
  291. package/scripts/lib/reentry-state.js +66 -0
  292. package/scripts/lib/release-candidate-bundle.js +166 -0
  293. package/scripts/lib/remediation.js +81 -0
  294. package/scripts/lib/repo-map.js +391 -0
  295. package/scripts/lib/run-action-policy.js +104 -0
  296. package/scripts/lib/run-contract-receipt.js +48 -0
  297. package/scripts/lib/run-contract.js +288 -0
  298. package/scripts/lib/run-cost-to-verified-outcome.js +87 -0
  299. package/scripts/lib/run-improvements-lifecycle.js +330 -0
  300. package/scripts/lib/run-improvements.js +789 -0
  301. package/scripts/lib/run-proof-contract.js +116 -0
  302. package/scripts/lib/run-risk-classifier.js +131 -0
  303. package/scripts/lib/run-task-classifier.js +216 -0
  304. package/scripts/lib/runtime-decision-policy.js +387 -0
  305. package/scripts/lib/safe-path-engine.js +705 -0
  306. package/scripts/lib/safe-repair.js +877 -0
  307. package/scripts/lib/safe-run-controller.js +887 -0
  308. package/scripts/lib/scope-repair-before-approval.js +865 -0
  309. package/scripts/lib/score.js +262 -0
  310. package/scripts/lib/seamless-enforcement.js +329 -0
  311. package/scripts/lib/seamless-outcome.js +689 -0
  312. package/scripts/lib/seamless-reality-gate.js +5053 -0
  313. package/scripts/lib/security-confidence/activation-safety.js +78 -0
  314. package/scripts/lib/security-confidence/adapters/adapter-contract.js +125 -0
  315. package/scripts/lib/security-confidence/adapters/mock-claude-bughunter-adapter.js +36 -0
  316. package/scripts/lib/security-confidence/adapters/mock-decepticon-adapter.js +34 -0
  317. package/scripts/lib/security-confidence/adapters/mock-mcp-scan-adapter.js +35 -0
  318. package/scripts/lib/security-confidence/adapters/mock-snyk-agent-scan-adapter.js +35 -0
  319. package/scripts/lib/security-confidence/adapters/mock-tank-adapter.js +34 -0
  320. package/scripts/lib/security-confidence/adapters/reference-registry.js +63 -0
  321. package/scripts/lib/security-confidence/auth-rbac-plan.js +39 -0
  322. package/scripts/lib/security-confidence/component-inventory.js +151 -0
  323. package/scripts/lib/security-confidence/constants.js +191 -0
  324. package/scripts/lib/security-confidence/dependency-script-risk.js +95 -0
  325. package/scripts/lib/security-confidence/evidence-hygiene.js +127 -0
  326. package/scripts/lib/security-confidence/feature-impact-classifier.js +80 -0
  327. package/scripts/lib/security-confidence/file-utils.js +161 -0
  328. package/scripts/lib/security-confidence/finding-triage.js +90 -0
  329. package/scripts/lib/security-confidence/findings.js +115 -0
  330. package/scripts/lib/security-confidence/index.js +29 -0
  331. package/scripts/lib/security-confidence/permission-budget.js +93 -0
  332. package/scripts/lib/security-confidence/redaction.js +82 -0
  333. package/scripts/lib/security-confidence/redteam-fixtures.js +53 -0
  334. package/scripts/lib/security-confidence/reference-adoption.js +229 -0
  335. package/scripts/lib/security-confidence/reference-taxonomy.js +155 -0
  336. package/scripts/lib/security-confidence/report-quality.js +99 -0
  337. package/scripts/lib/security-confidence/report-writer.js +79 -0
  338. package/scripts/lib/security-confidence/risk-classifier.js +187 -0
  339. package/scripts/lib/security-confidence/runner.js +179 -0
  340. package/scripts/lib/security-confidence/schema.js +188 -0
  341. package/scripts/lib/security-confidence/secret-safety.js +74 -0
  342. package/scripts/lib/security-confidence/security-capability-router.js +98 -0
  343. package/scripts/lib/security-confidence/web-security-smoke-plan.js +46 -0
  344. package/scripts/lib/security-risk-classifier.js +511 -0
  345. package/scripts/lib/security-scan.js +396 -0
  346. package/scripts/lib/session-context-optimizer.js +1211 -0
  347. package/scripts/lib/session-timing.js +322 -0
  348. package/scripts/lib/skill-hygiene.js +805 -0
  349. package/scripts/lib/skill-packs.js +161 -0
  350. package/scripts/lib/skills-operating-layer-v1.js +1023 -0
  351. package/scripts/lib/skills-operating-layer.js +629 -0
  352. package/scripts/lib/smallest-safe-plan.js +214 -0
  353. package/scripts/lib/smart-routing-plan.js +115 -0
  354. package/scripts/lib/smart-work-routing.js +768 -0
  355. package/scripts/lib/source-catalog.js +1022 -0
  356. package/scripts/lib/status-value-summary.js +32 -0
  357. package/scripts/lib/supply-chain-dependency-guard.js +1333 -0
  358. package/scripts/lib/supply-chain-guard.js +219 -0
  359. package/scripts/lib/support-bundle.js +561 -0
  360. package/scripts/lib/support-redaction.js +66 -0
  361. package/scripts/lib/task-continuation.js +440 -0
  362. package/scripts/lib/test-helpers.js +15 -0
  363. package/scripts/lib/tier.js +38 -0
  364. package/scripts/lib/token-context-quality-gate.js +370 -0
  365. package/scripts/lib/token-cost-capture.js +187 -0
  366. package/scripts/lib/token-cost-evidence.js +862 -0
  367. package/scripts/lib/token-cost-intelligence.js +358 -0
  368. package/scripts/lib/token-efficiency-evidence.js +213 -0
  369. package/scripts/lib/token-efficiency-map.js +110 -0
  370. package/scripts/lib/token-evidence.js +703 -0
  371. package/scripts/lib/tokenish.js +17 -0
  372. package/scripts/lib/tool-output-sandbox.js +559 -0
  373. package/scripts/lib/trust-audit.js +136 -0
  374. package/scripts/lib/unified-events.js +396 -0
  375. package/scripts/lib/upgrade-interruption-recovery.js +407 -0
  376. package/scripts/lib/usage-ledger.js +201 -0
  377. package/scripts/lib/value-ledger.js +130 -0
  378. package/scripts/lib/value-proof-calibration.js +531 -0
  379. package/scripts/lib/visual-qa.js +231 -0
  380. package/scripts/lib/voice-alpha.js +29 -0
  381. package/scripts/lib/webhook-idempotency-guard.js +990 -0
  382. package/scripts/lib/work-aware-orchestration.js +976 -0
  383. package/scripts/lib/work-control-receipts.js +577 -0
  384. package/scripts/lib/work-ledger.js +1123 -0
  385. package/scripts/lib/work-panel-preview.js +352 -0
  386. package/scripts/lib/workflow-discipline.js +280 -0
  387. package/scripts/lib/workflow-intelligence-radar.js +804 -0
  388. package/scripts/lib/workflow-signals.js +419 -0
  389. package/scripts/lib/workspace-map.js +281 -0
  390. package/scripts/lib/workspace-registry.js +1367 -0
  391. package/scripts/lib/workspace-resolver.js +542 -0
  392. package/scripts/wuz-doctor.js +315 -0
  393. package/bin/avorelo.mjs +0 -7
  394. package/dist/avorelo.mjs +0 -24678
@@ -0,0 +1,302 @@
1
+ "use strict";
2
+
3
+ const fs = require("fs");
4
+ const path = require("path");
5
+
6
+ const DEFAULT_MAX_CANDIDATES = 5;
7
+ const DEFAULT_MAX_AUTO_PREPARE_TOKENS = 800;
8
+ const DEFAULT_RETENTION_DAYS = 30;
9
+
10
+ function computeAgeMs(createdAt) {
11
+ if (!createdAt) return Infinity;
12
+ const ts = Date.parse(createdAt);
13
+ if (!Number.isFinite(ts)) return Infinity;
14
+ return Date.now() - ts;
15
+ }
16
+
17
+ function fileExistsAndIsNewer(filePath, createdAt) {
18
+ try {
19
+ const stat = fs.statSync(filePath);
20
+ const itemTs = Date.parse(createdAt || 0);
21
+ return Number.isFinite(itemTs) && stat.mtimeMs > itemTs;
22
+ } catch {
23
+ return false;
24
+ }
25
+ }
26
+
27
+ function fileExists(filePath) {
28
+ try { fs.accessSync(filePath); return true; } catch { return false; }
29
+ }
30
+
31
+ function computeEffectiveStale(item, repoRoot, retentionDays) {
32
+ // Already marked stale — trust it
33
+ if (item.staleStatus === "stale") return "stale";
34
+
35
+ // Retention age check
36
+ const retentionMs = (retentionDays || DEFAULT_RETENTION_DAYS) * 24 * 60 * 60 * 1000;
37
+ const ageMs = computeAgeMs(item.createdAt);
38
+ if (ageMs > retentionMs) return "stale";
39
+ if (ageMs > retentionMs * 0.7) return "possibly_stale";
40
+
41
+ // File-based stale detection
42
+ const files = item.relatedFiles || [];
43
+ for (const rel of files) {
44
+ const abs = repoRoot ? path.join(repoRoot, rel) : rel;
45
+ // If file doesn't exist anymore → stale
46
+ if (!fileExists(abs) && !fileExists(rel)) return "stale";
47
+ // If file was modified after item was created → possibly_stale
48
+ if (fileExistsAndIsNewer(abs, item.createdAt) || fileExistsAndIsNewer(rel, item.createdAt)) {
49
+ return "possibly_stale";
50
+ }
51
+ }
52
+
53
+ return item.staleStatus || "fresh";
54
+ }
55
+
56
+ function scoreItem(item, context = {}) {
57
+ const {
58
+ relatedFiles = [],
59
+ relatedCommands = [],
60
+ errorText = "",
61
+ query = "",
62
+ } = context;
63
+
64
+ let score = 0;
65
+
66
+ // Confidence boost
67
+ if (item.confidence === "high") score += 30;
68
+ else if (item.confidence === "medium") score += 15;
69
+
70
+ // Risk penalty (higher risk → lower score for auto use)
71
+ if (item.riskLevel === "high") score -= 25;
72
+ else if (item.riskLevel === "medium") score -= 5;
73
+
74
+ // Stale penalty
75
+ const effectiveStale = item._effectiveStale || item.staleStatus || "fresh";
76
+ if (effectiveStale === "stale") score -= 50;
77
+ else if (effectiveStale === "possibly_stale") score -= 20;
78
+
79
+ // File match bonus
80
+ const itemFiles = new Set((item.relatedFiles || []).map((f) => f.toLowerCase()));
81
+ for (const f of relatedFiles) {
82
+ if (itemFiles.has(f.toLowerCase())) score += 25;
83
+ // Partial basename match
84
+ const base = path.basename(f).toLowerCase();
85
+ for (const itemFile of itemFiles) {
86
+ if (path.basename(itemFile) === base) score += 10;
87
+ }
88
+ }
89
+
90
+ // Command match bonus
91
+ const itemCmds = new Set((item.relatedCommands || []).map((c) => c.toLowerCase()));
92
+ for (const cmd of relatedCommands) {
93
+ if (itemCmds.has(cmd.toLowerCase())) score += 15;
94
+ }
95
+
96
+ // Error text exact match bonus
97
+ if (errorText && item.evidence) {
98
+ const normError = errorText.slice(0, 200).toLowerCase();
99
+ const normEvidence = (item.evidence || "").toLowerCase();
100
+ if (normEvidence.includes(normError) && normError.length > 10) score += 40;
101
+ }
102
+
103
+ // Keyword match bonus
104
+ if (query) {
105
+ const lower = query.toLowerCase();
106
+ if ((item.title || "").toLowerCase().includes(lower)) score += 20;
107
+ if ((item.summary || "").toLowerCase().includes(lower)) score += 10;
108
+ }
109
+
110
+ // Recency bonus (max 20 for very recent, fades over 7 days)
111
+ const ageMs = computeAgeMs(item.createdAt);
112
+ const sevenDaysMs = 7 * 24 * 60 * 60 * 1000;
113
+ const recencyBonus = Math.max(0, 20 * (1 - ageMs / sevenDaysMs));
114
+ score += recencyBonus;
115
+
116
+ // Type bonuses
117
+ if (item.type === "fix") score += 10;
118
+ if (item.type === "validation") score += 5;
119
+ if (item.type === "next_action") score += 8;
120
+
121
+ // Sensitive penalty
122
+ if (item.sensitive) score -= 15;
123
+
124
+ return score;
125
+ }
126
+
127
+ function buildMatchReason(item, context = {}) {
128
+ const reasons = [];
129
+ const { relatedFiles = [], relatedCommands = [], errorText = "", query = "" } = context;
130
+
131
+ const effectiveStale = item._effectiveStale || item.staleStatus || "fresh";
132
+ if (effectiveStale === "stale") reasons.push("stale memory");
133
+ if (effectiveStale === "possibly_stale") reasons.push("possibly stale");
134
+
135
+ const itemFiles = new Set((item.relatedFiles || []).map((f) => f.toLowerCase()));
136
+ for (const f of relatedFiles) {
137
+ if (itemFiles.has(f.toLowerCase())) {
138
+ reasons.push(`matched file: ${path.basename(f)}`);
139
+ break;
140
+ }
141
+ }
142
+
143
+ const itemCmds = new Set((item.relatedCommands || []).map((c) => c.toLowerCase()));
144
+ for (const cmd of relatedCommands) {
145
+ if (itemCmds.has(cmd.toLowerCase())) {
146
+ reasons.push(`matched command: ${cmd}`);
147
+ break;
148
+ }
149
+ }
150
+
151
+ if (errorText && item.evidence) {
152
+ const normError = errorText.slice(0, 200).toLowerCase();
153
+ if ((item.evidence || "").toLowerCase().includes(normError) && normError.length > 10) {
154
+ reasons.push("matched error text");
155
+ }
156
+ }
157
+
158
+ if (query && (item.title || "").toLowerCase().includes(query.toLowerCase())) {
159
+ reasons.push(`matched keyword: ${query.slice(0, 30)}`);
160
+ }
161
+
162
+ if (item.type === "next_action") reasons.push("previous session end state");
163
+ if (item.type === "fix") reasons.push("previous successful fix");
164
+ if (item.type === "failure") reasons.push("previous failed tool");
165
+ if (item.type === "validation") reasons.push("previous validation result");
166
+
167
+ return reasons.length ? reasons.join(", ") : "recent memory";
168
+ }
169
+
170
+ function rankCandidates(items, context, repoRoot, retentionDays) {
171
+ return items
172
+ .map((item) => {
173
+ const effectiveStale = computeEffectiveStale(item, repoRoot, retentionDays);
174
+ const enriched = { ...item, _effectiveStale: effectiveStale };
175
+ const score = scoreItem(enriched, context);
176
+ const matchReason = buildMatchReason(enriched, context);
177
+ return { item: enriched, score, matchReason };
178
+ })
179
+ .sort((a, b) => b.score - a.score);
180
+ }
181
+
182
+ function buildCandidates(store, context = {}, config = {}) {
183
+ const {
184
+ maxCandidates = DEFAULT_MAX_CANDIDATES,
185
+ maxAutoPrepareTokens = DEFAULT_MAX_AUTO_PREPARE_TOKENS,
186
+ mode = "suggest",
187
+ retentionDays = DEFAULT_RETENTION_DAYS,
188
+ } = config;
189
+
190
+ const { relatedFiles = [], relatedCommands = [], errorText = "", query = "" } = context;
191
+
192
+ const allItems = store.loadAll();
193
+ if (!allItems.length) {
194
+ return {
195
+ candidates: [],
196
+ autoPrepared: [],
197
+ suggested: [],
198
+ estimatedTokens: 0,
199
+ totalItemCount: 0,
200
+ };
201
+ }
202
+
203
+ const ranked = rankCandidates(allItems, context, store.repoRoot, retentionDays);
204
+
205
+ // Take top N, filtering out items with very low scores
206
+ const topRanked = ranked
207
+ .filter((r) => r.score > -10)
208
+ .slice(0, Math.max(maxCandidates, 3));
209
+
210
+ const candidates = topRanked.map((r) => ({
211
+ id: r.item.id,
212
+ type: r.item.type,
213
+ title: r.item.title,
214
+ summary: r.item.summary,
215
+ confidence: r.item.confidence,
216
+ riskLevel: r.item.riskLevel,
217
+ staleStatus: r.item._effectiveStale || r.item.staleStatus,
218
+ sensitive: r.item.sensitive,
219
+ safeForAutoPrepare: r.item.safeForAutoPrepare === true || r.item.safeForAutoInject === true,
220
+ tokenEstimate: r.item.tokenEstimate || 0,
221
+ matchReason: r.matchReason,
222
+ score: r.score,
223
+ createdAt: r.item.createdAt,
224
+ relatedFiles: r.item.relatedFiles || [],
225
+ }));
226
+
227
+ // Determine auto-prepare: only in auto_safe mode, low risk, high confidence, fresh, not sensitive
228
+ let autoPrepared = [];
229
+ let suggested = candidates;
230
+ let estimatedTokens = 0;
231
+
232
+ if (mode === "auto_safe") {
233
+ let tokenBudget = maxAutoPrepareTokens;
234
+ const autoEligible = candidates.filter(
235
+ (c) =>
236
+ c.safeForAutoPrepare &&
237
+ !c.sensitive &&
238
+ c.staleStatus === "fresh" &&
239
+ c.riskLevel === "low" &&
240
+ c.confidence === "high"
241
+ );
242
+ for (const c of autoEligible) {
243
+ const cost = c.tokenEstimate || 0;
244
+ if (tokenBudget - cost >= 0) {
245
+ autoPrepared.push(c);
246
+ tokenBudget -= cost;
247
+ estimatedTokens += cost;
248
+ }
249
+ }
250
+ const autoIds = new Set(autoPrepared.map((c) => c.id));
251
+ suggested = candidates.filter((c) => !autoIds.has(c.id));
252
+ } else {
253
+ // suggest mode: estimate tokens for display
254
+ estimatedTokens = candidates.reduce((acc, c) => acc + (c.tokenEstimate || 0), 0);
255
+ }
256
+
257
+ return {
258
+ candidates,
259
+ autoPrepared,
260
+ suggested,
261
+ estimatedTokens,
262
+ totalItemCount: allItems.length,
263
+ };
264
+ }
265
+
266
+ function formatCandidatesText(result, mode) {
267
+ if (!result || !result.candidates.length) return null;
268
+
269
+ const { candidates, autoPrepared, suggested, estimatedTokens } = result;
270
+ const lines = ["Reentry Memory:"];
271
+ lines.push(`- ${candidates.length} relevant prior note${candidates.length !== 1 ? "s" : ""} found.`);
272
+
273
+ const highConf = candidates.filter((c) => c.confidence === "high" && c.type === "fix");
274
+ if (highConf.length > 0) {
275
+ lines.push(`- ${highConf.length} high-confidence fix candidate${highConf.length !== 1 ? "s" : ""}.`);
276
+ }
277
+
278
+ lines.push(`- ${autoPrepared.length} auto-prepared; ${suggested.length} suggested.`);
279
+ lines.push(`- Estimated context cost: ${estimatedTokens} tokens.`);
280
+
281
+ if (candidates.length > 0) {
282
+ const top = candidates[0];
283
+ const staleWarn = top.staleStatus !== "fresh" ? ` [${top.staleStatus}]` : "";
284
+ lines.push(
285
+ `- Top candidate: "${top.title.slice(0, 100)}" — ${top.confidence} confidence, ${top.staleStatus}, ${top.riskLevel} risk${staleWarn}.`
286
+ );
287
+ }
288
+
289
+ return lines.join("\n");
290
+ }
291
+
292
+ module.exports = {
293
+ computeEffectiveStale,
294
+ scoreItem,
295
+ buildMatchReason,
296
+ rankCandidates,
297
+ buildCandidates,
298
+ formatCandidatesText,
299
+ DEFAULT_MAX_CANDIDATES,
300
+ DEFAULT_MAX_AUTO_PREPARE_TOKENS,
301
+ DEFAULT_RETENTION_DAYS,
302
+ };
@@ -0,0 +1,147 @@
1
+ "use strict";
2
+
3
+ const { ReentryMemoryStore } = require("./reentry-memory-store");
4
+ const { buildCandidates, formatCandidatesText } = require("./reentry-memory-retrieval");
5
+
6
+ const DEFAULT_CONFIG = {
7
+ enabled: true,
8
+ mode: "suggest",
9
+ maxCandidates: 5,
10
+ maxAutoPrepareTokens: 800,
11
+ maxItemBytes: 8192,
12
+ retentionDays: 30,
13
+ captureSensitive: false,
14
+ showInStatus: true,
15
+ };
16
+
17
+ function normalizeMemoryConfig(raw) {
18
+ const cfg = { ...DEFAULT_CONFIG, ...(raw || {}) };
19
+ if (!["off", "suggest", "auto_safe"].includes(cfg.mode)) cfg.mode = "suggest";
20
+ cfg.enabled = cfg.enabled !== false;
21
+ cfg.captureSensitive = cfg.captureSensitive === true;
22
+ cfg.showInStatus = cfg.showInStatus !== false;
23
+ cfg.maxCandidates = Number.isFinite(Number(cfg.maxCandidates)) ? Math.max(1, Number(cfg.maxCandidates)) : 5;
24
+ const rawTokens = cfg.maxAutoPrepareTokens ?? cfg.maxAutoInjectTokens;
25
+ cfg.maxAutoPrepareTokens = Number.isFinite(Number(rawTokens)) ? Math.max(100, Number(rawTokens)) : 800;
26
+ cfg.maxItemBytes = Number.isFinite(Number(cfg.maxItemBytes)) ? Math.max(1024, Number(cfg.maxItemBytes)) : 8192;
27
+ cfg.retentionDays = Number.isFinite(Number(cfg.retentionDays)) ? Math.max(1, Number(cfg.retentionDays)) : 30;
28
+ return cfg;
29
+ }
30
+
31
+ function buildReentryMemoryStatus(cwd, rawMemoryConfig, context = {}) {
32
+ const memCfg = normalizeMemoryConfig(rawMemoryConfig);
33
+
34
+ const base = {
35
+ enabled: memCfg.enabled,
36
+ mode: memCfg.mode,
37
+ showInStatus: memCfg.showInStatus,
38
+ candidatesCount: 0,
39
+ autoPreparedCount: 0,
40
+ suggestedCount: 0,
41
+ estimatedTokens: 0,
42
+ topCandidates: [],
43
+ warnings: [],
44
+ storePath: ".claude/cco/state/reentry-memory.jsonl",
45
+ };
46
+
47
+ if (!memCfg.enabled || memCfg.mode === "off") {
48
+ return { ...base, enabled: false };
49
+ }
50
+
51
+ let store;
52
+ try {
53
+ store = new ReentryMemoryStore(cwd, {
54
+ maxItemBytes: memCfg.maxItemBytes,
55
+ maxItems: memCfg.maxCandidates * 20,
56
+ });
57
+ } catch {
58
+ return { ...base, warnings: ["memory store initialization failed"] };
59
+ }
60
+
61
+ let result;
62
+ try {
63
+ result = buildCandidates(store, context, {
64
+ maxCandidates: memCfg.maxCandidates,
65
+ maxAutoPrepareTokens: memCfg.maxAutoPrepareTokens,
66
+ mode: memCfg.mode,
67
+ retentionDays: memCfg.retentionDays,
68
+ });
69
+ } catch {
70
+ return { ...base, warnings: ["memory candidate retrieval failed"] };
71
+ }
72
+
73
+ const warnings = [];
74
+ const staleCount = result.candidates.filter((c) => c.staleStatus !== "fresh").length;
75
+ if (staleCount > 0) warnings.push(`${staleCount} candidate${staleCount !== 1 ? "s" : ""} may be stale`);
76
+
77
+ const sensitiveCount = result.candidates.filter((c) => c.sensitive).length;
78
+ if (sensitiveCount > 0) warnings.push(`${sensitiveCount} candidate${sensitiveCount !== 1 ? "s" : ""} marked sensitive (not auto-prepared)`);
79
+
80
+ return {
81
+ enabled: true,
82
+ mode: memCfg.mode,
83
+ showInStatus: memCfg.showInStatus,
84
+ candidatesCount: result.candidates.length,
85
+ autoPreparedCount: result.autoPrepared.length,
86
+ suggestedCount: result.suggested.length,
87
+ estimatedTokens: result.estimatedTokens,
88
+ topCandidates: result.candidates.slice(0, 3).map((c) => ({
89
+ id: c.id,
90
+ type: c.type,
91
+ title: c.title,
92
+ confidence: c.confidence,
93
+ riskLevel: c.riskLevel,
94
+ staleStatus: c.staleStatus,
95
+ sensitive: c.sensitive,
96
+ tokenEstimate: c.tokenEstimate,
97
+ matchReason: c.matchReason,
98
+ })),
99
+ warnings,
100
+ storePath: ".claude/cco/state/reentry-memory.jsonl",
101
+ totalStoredItems: result.totalItemCount,
102
+ };
103
+ }
104
+
105
+ function formatReentryMemoryText(memStatus) {
106
+ if (!memStatus || !memStatus.enabled || !memStatus.showInStatus || memStatus.mode === "off") {
107
+ return null;
108
+ }
109
+
110
+ if (memStatus.candidatesCount === 0) {
111
+ return null;
112
+ }
113
+
114
+ const lines = ["Reentry Memory:"];
115
+ lines.push(`- ${memStatus.candidatesCount} relevant prior note${memStatus.candidatesCount !== 1 ? "s" : ""} found.`);
116
+
117
+ const highConf = (memStatus.topCandidates || []).filter(
118
+ (c) => c.confidence === "high" && c.type === "fix"
119
+ );
120
+ if (highConf.length > 0) {
121
+ lines.push(`- ${highConf.length} high-confidence fix candidate${highConf.length !== 1 ? "s" : ""}.`);
122
+ }
123
+
124
+ lines.push(`- ${memStatus.autoPreparedCount} auto-prepared; ${memStatus.suggestedCount} suggested.`);
125
+ lines.push(`- Estimated context cost: ${memStatus.estimatedTokens} tokens.`);
126
+
127
+ if (memStatus.topCandidates && memStatus.topCandidates.length > 0) {
128
+ const top = memStatus.topCandidates[0];
129
+ const staleWarn = top.staleStatus !== "fresh" ? ` [${top.staleStatus}]` : "";
130
+ lines.push(
131
+ `- Top candidate: "${top.title.slice(0, 100)}" — ${top.confidence} confidence, ${top.staleStatus}, ${top.riskLevel} risk${staleWarn}.`
132
+ );
133
+ }
134
+
135
+ if (memStatus.warnings && memStatus.warnings.length > 0) {
136
+ memStatus.warnings.forEach((w) => lines.push(`- Warning: ${w}`));
137
+ }
138
+
139
+ return lines.join("\n");
140
+ }
141
+
142
+ module.exports = {
143
+ normalizeMemoryConfig,
144
+ buildReentryMemoryStatus,
145
+ formatReentryMemoryText,
146
+ DEFAULT_CONFIG,
147
+ };
@@ -0,0 +1,183 @@
1
+ "use strict";
2
+
3
+ const fs = require("fs");
4
+ const path = require("path");
5
+ const crypto = require("crypto");
6
+
7
+ const MEMORY_REL = ".claude/cco/state/reentry-memory.jsonl";
8
+ const DEFAULT_MAX_ITEM_BYTES = 8 * 1024;
9
+ const DEFAULT_MAX_ITEMS = 500;
10
+
11
+ const VALID_TYPES = new Set([
12
+ "decision", "fix", "failure", "validation",
13
+ "blocker", "file_change", "security_note", "config_note", "next_action",
14
+ "approval_required",
15
+ ]);
16
+ const VALID_CONFIDENCE = new Set(["low", "medium", "high"]);
17
+ const VALID_RISK = new Set(["low", "medium", "high"]);
18
+ const VALID_STALE = new Set(["fresh", "possibly_stale", "stale"]);
19
+
20
+ function generateId() {
21
+ return crypto.randomUUID();
22
+ }
23
+
24
+ function nowIso() {
25
+ return new Date().toISOString();
26
+ }
27
+
28
+ function estimateTokens(texts) {
29
+ const combined = (Array.isArray(texts) ? texts : [texts]).join(" ");
30
+ return Math.ceil(Buffer.byteLength(String(combined || ""), "utf8") / 4);
31
+ }
32
+
33
+ function buildItem(partial) {
34
+ const now = nowIso();
35
+ return {
36
+ schemaVersion: partial.schemaVersion || "reentry-memory.v2",
37
+ id: partial.id || generateId(),
38
+ createdAt: partial.createdAt || now,
39
+ updatedAt: partial.updatedAt || now,
40
+ repoRoot: partial.repoRoot || "",
41
+ sessionId: partial.sessionId || null,
42
+ runId: partial.runId || null,
43
+ sourceEventId: partial.sourceEventId || null,
44
+ sourceFile: partial.sourceFile || null,
45
+ sourceCommand: partial.sourceCommand || null,
46
+ type: partial.type || "failure",
47
+ title: String(partial.title || "").slice(0, 200),
48
+ summary: String(partial.summary || "").slice(0, 1000),
49
+ evidence: String(partial.evidence || "").slice(0, 2000),
50
+ relatedFiles: Array.isArray(partial.relatedFiles) ? partial.relatedFiles.slice(0, 20).map(String) : [],
51
+ relatedCommands: Array.isArray(partial.relatedCommands) ? partial.relatedCommands.slice(0, 10).map(String) : [],
52
+ confidence: VALID_CONFIDENCE.has(partial.confidence) ? partial.confidence : "low",
53
+ riskLevel: VALID_RISK.has(partial.riskLevel) ? partial.riskLevel : "medium",
54
+ staleStatus: VALID_STALE.has(partial.staleStatus) ? partial.staleStatus : "fresh",
55
+ sensitive: partial.sensitive === true,
56
+ safeForAutoPrepare: partial.safeForAutoPrepare === true || partial.safeForAutoInject === true,
57
+ tokenEstimate: Number.isFinite(partial.tokenEstimate)
58
+ ? partial.tokenEstimate
59
+ : estimateTokens([partial.title, partial.summary, partial.evidence]),
60
+ tags: Array.isArray(partial.tags) ? partial.tags.slice(0, 10).map(String) : [],
61
+ receiptRefs: Array.isArray(partial.receiptRefs) ? partial.receiptRefs.slice(0, 5).map(String) : [],
62
+ reasonCodes: Array.isArray(partial.reasonCodes) ? partial.reasonCodes.slice(0, 10).map(String) : [],
63
+ source: partial.source ? String(partial.source).slice(0, 100) : null,
64
+ };
65
+ }
66
+
67
+ function validateItem(item) {
68
+ if (!item || typeof item !== "object") throw new Error("Memory item must be an object");
69
+ if (!item.title || typeof item.title !== "string" || !item.title.trim()) {
70
+ throw new Error("Memory item must have a non-empty title");
71
+ }
72
+ if (!VALID_TYPES.has(item.type)) throw new Error(`Invalid memory item type: ${item.type}`);
73
+ if (!VALID_CONFIDENCE.has(item.confidence)) throw new Error(`Invalid confidence: ${item.confidence}`);
74
+ if (!VALID_RISK.has(item.riskLevel)) throw new Error(`Invalid riskLevel: ${item.riskLevel}`);
75
+ }
76
+
77
+ class ReentryMemoryStore {
78
+ constructor(repoRoot, opts = {}) {
79
+ this.repoRoot = repoRoot;
80
+ this.filePath = path.join(repoRoot, MEMORY_REL);
81
+ this.maxItemBytes = Number.isFinite(opts.maxItemBytes) ? opts.maxItemBytes : DEFAULT_MAX_ITEM_BYTES;
82
+ this.maxItems = Number.isFinite(opts.maxItems) ? opts.maxItems : DEFAULT_MAX_ITEMS;
83
+ }
84
+
85
+ _ensureDir() {
86
+ fs.mkdirSync(path.dirname(this.filePath), { recursive: true });
87
+ }
88
+
89
+ append(partial) {
90
+ const item = buildItem({ ...partial, repoRoot: this.repoRoot });
91
+ validateItem(item);
92
+
93
+ const line = JSON.stringify(item) + "\n";
94
+ const bytes = Buffer.byteLength(line, "utf8");
95
+
96
+ if (bytes > this.maxItemBytes) {
97
+ const truncated = { ...item, evidence: item.evidence.slice(0, 300) + "...(truncated)" };
98
+ truncated.tokenEstimate = estimateTokens([truncated.title, truncated.summary, truncated.evidence]);
99
+ const tLine = JSON.stringify(truncated) + "\n";
100
+ if (Buffer.byteLength(tLine, "utf8") > this.maxItemBytes) {
101
+ return null;
102
+ }
103
+ this._ensureDir();
104
+ try {
105
+ fs.appendFileSync(this.filePath, tLine, "utf8");
106
+ } catch {
107
+ return null;
108
+ }
109
+ return truncated;
110
+ }
111
+
112
+ this._ensureDir();
113
+ try {
114
+ fs.appendFileSync(this.filePath, line, "utf8");
115
+ } catch {
116
+ return null;
117
+ }
118
+ return item;
119
+ }
120
+
121
+ loadAll() {
122
+ if (!fs.existsSync(this.filePath)) return [];
123
+ try {
124
+ const content = fs.readFileSync(this.filePath, "utf8");
125
+ const items = content
126
+ .split("\n")
127
+ .filter((line) => line.trim().length > 0)
128
+ .map((line) => {
129
+ try { return JSON.parse(line); } catch { return null; }
130
+ })
131
+ .filter(Boolean);
132
+ return items.slice(-this.maxItems);
133
+ } catch {
134
+ return [];
135
+ }
136
+ }
137
+
138
+ clear() {
139
+ if (fs.existsSync(this.filePath)) {
140
+ try { fs.unlinkSync(this.filePath); } catch {}
141
+ }
142
+ }
143
+
144
+ search(query) {
145
+ const items = this.loadAll();
146
+ if (!query || !query.trim()) return items;
147
+ const lower = query.toLowerCase();
148
+ return items.filter((item) =>
149
+ (item.title || "").toLowerCase().includes(lower) ||
150
+ (item.summary || "").toLowerCase().includes(lower) ||
151
+ (item.evidence || "").toLowerCase().includes(lower) ||
152
+ (item.relatedFiles || []).some((f) => f.toLowerCase().includes(lower)) ||
153
+ (item.relatedCommands || []).some((c) => c.toLowerCase().includes(lower)) ||
154
+ (item.tags || []).some((t) => t.toLowerCase().includes(lower))
155
+ );
156
+ }
157
+
158
+ hasDuplicate(sessionId, title, type) {
159
+ const items = this.loadAll();
160
+ return items.some(
161
+ (item) =>
162
+ item.sessionId === sessionId &&
163
+ item.type === type &&
164
+ item.title === title
165
+ );
166
+ }
167
+
168
+ storePath() {
169
+ return MEMORY_REL;
170
+ }
171
+ }
172
+
173
+ module.exports = {
174
+ ReentryMemoryStore,
175
+ buildItem,
176
+ validateItem,
177
+ estimateTokens,
178
+ VALID_TYPES,
179
+ VALID_CONFIDENCE,
180
+ VALID_RISK,
181
+ VALID_STALE,
182
+ MEMORY_REL,
183
+ };
@@ -0,0 +1,66 @@
1
+ "use strict";
2
+
3
+ const { safeReadJson, safeWriteJson } = require("./fsx");
4
+
5
+ const REENTRY_STATE_PATH = ".claude/cco/state/reentry-state.json";
6
+ const UNRESOLVED_RISK_TYPES = new Set([
7
+ "security_recovery",
8
+ "security_prerun_review",
9
+ "trust_review_required",
10
+ "risky_command_intervention",
11
+ "source_policy_intervention",
12
+ "team_policy_block",
13
+ ]);
14
+
15
+ function normalizeText(value, fallback) {
16
+ const text = String(value || "").trim();
17
+ return text || fallback;
18
+ }
19
+
20
+ function normalizePath(value) {
21
+ if (value === null || value === undefined || value === "") return null;
22
+ return String(value);
23
+ }
24
+
25
+ function buildReentryStateV1(input = {}) {
26
+ return {
27
+ reentryStateVersion: 1,
28
+ lastInterventionType: normalizeText(input.lastInterventionType, "none"),
29
+ nextAction: normalizeText(input.nextAction, "Run /cco-status."),
30
+ unresolvedRisk: Boolean(input.unresolvedRisk),
31
+ primaryArtifactPath: normalizePath(input.primaryArtifactPath),
32
+ resumeHint: normalizeText(input.resumeHint, "Run /cco-status to continue."),
33
+ };
34
+ }
35
+
36
+ function unresolvedRiskFor(interventionType) {
37
+ return UNRESOLVED_RISK_TYPES.has(String(interventionType || "none"));
38
+ }
39
+
40
+ function writeReentryState(cwd, input = {}) {
41
+ const state = buildReentryStateV1({
42
+ lastInterventionType: input.lastInterventionType,
43
+ nextAction: input.nextAction,
44
+ unresolvedRisk:
45
+ typeof input.unresolvedRisk === "boolean"
46
+ ? input.unresolvedRisk
47
+ : unresolvedRiskFor(input.lastInterventionType),
48
+ primaryArtifactPath: input.primaryArtifactPath,
49
+ resumeHint: input.resumeHint,
50
+ });
51
+ safeWriteJson(cwd, REENTRY_STATE_PATH, state);
52
+ return { state, path: REENTRY_STATE_PATH };
53
+ }
54
+
55
+ function loadReentryState(cwd) {
56
+ const state = safeReadJson(cwd, REENTRY_STATE_PATH, null);
57
+ if (!state) return null;
58
+ return buildReentryStateV1(state);
59
+ }
60
+
61
+ module.exports = {
62
+ REENTRY_STATE_PATH,
63
+ buildReentryStateV1,
64
+ writeReentryState,
65
+ loadReentryState,
66
+ };