cohorte 3.0.0-dev.6 → 3.0.0-dev.8

package/dist/chunks/{compose-ckM7eAJ_.mjs → compose-DRKjQcn0.mjs}

@@ -1,20 +1,20 @@
 import { n as sha256Hex, t as canonicalJson } from "./canonical-C8UxeEmB.mjs";
 import { A as toIsoInstant, B as ErrorInfo, I as isErrorCode, N as errorOf, P as toErrorInfo, R as ERROR_CODE_PATTERN, S as IsoInstant, T as Sha256, V as JsonValueSchema, a as createUuidV7IdSource, c as systemClock, j as CohorteError, n as QuotaInfo, o as err, r as TokenUsage, s as ok, z as ErrorClass } from "./src-Cu3TxNob.mjs";
 import { i as computeAnchorMac, n as createKeyStore, r as createTrustStore, t as createCommandAuthenticator } from "./auth-BT5oVp76.mjs";
-import { a as compileSchema, c as AgentOutput, i as canonicalCommandBody, s as compareOrder } from "./src-s7YRvk0t.mjs";
-import { a as literalPrefixOf } from "./schema-hSyIURjN.mjs";
-import { i as resolveConfig, n as loadConfig } from "./src-BnlNkd3S.mjs";
-import { a as RUNTIME_EVENT_TYPE_NAMES, c as toolGrantProblems, g as createRedactor, i as RUNTIME_EVENT_TYPES, l as AgentExit, n as ProviderAuthStatus, o as ToolContent, t as SpawnRequest, v as createExecutor, y as createNoneBackend } from "./src-C7hs8Bjw.mjs";
-import { _ as resolveTable, a as createToolHost, b as createApprovalService, c as createResumer, d as createPipelineGuards, f as createFactCollector, g as createEngine, h as createEventWriter, i as createRunSnapshotter, m as createGrantComputer, n as createAgentSupervisor, o as createTransitionEffectRunner, p as createPhaseContracts, r as createProvisioner, s as createWorktreeService, t as createPhaseExecutor, u as initialRunState, v as createLeaseManager, x as createToolHostReplay, y as createEffectJournal } from "./src-Daa5lIcP.mjs";
+import { a as compileSchema, c as AgentOutput, i as canonicalCommandBody, s as compareOrder } from "./src-yi5whv3n.mjs";
+import { a as literalPrefixOf } from "./schema-Bq9qtgsd.mjs";
+import { i as resolveConfig, n as loadConfig } from "./src-DbS9gkJy.mjs";
+import { a as RUNTIME_EVENT_TYPE_NAMES, c as toolGrantProblems, g as createRedactor, i as RUNTIME_EVENT_TYPES, l as AgentExit, n as ProviderAuthStatus, o as ToolContent, t as SpawnRequest, v as createExecutor, y as createNoneBackend } from "./src-Bfr1yzsn.mjs";
+import { _ as resolveTable, a as createToolHost, b as createApprovalService, c as createResumer, d as createPipelineGuards, f as createFactCollector, g as createEngine, h as createEventWriter, i as createRunSnapshotter, m as createGrantComputer, n as createAgentSupervisor, o as createTransitionEffectRunner, p as createPhaseContracts, r as createProvisioner, s as createWorktreeService, t as createPhaseExecutor, u as initialRunState, v as createLeaseManager, x as createToolHostReplay, y as createEffectJournal } from "./src-CPW2_Ons.mjs";
 import { t as createRenderer } from "./render-DyZr5Lgi.mjs";
-import { a as buildPolicySnapshot, c as createCommandPolicy, i as createGlobMatcher, l as createProgramResolver, n as toolIntrospection, o as createPolicyEngine, r as createPathResolver, t as TOOL_CATALOGUE } from "./catalogue-DzsslCSN.mjs";
+import { a as buildPolicySnapshot, c as createCommandPolicy, i as createGlobMatcher, l as createProgramResolver, n as toolIntrospection, o as createPolicyEngine, r as createPathResolver, t as TOOL_CATALOGUE } from "./catalogue-IaCJdfB8.mjs";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { Type } from "typebox";
 import { Compile } from "typebox/compile";
-import { execFile, spawn } from "node:child_process";
 import { copyFile, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, utimes, writeFile } from "node:fs/promises";
 import { dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { parse } from "yaml";
+import { execFile, spawn } from "node:child_process";
 import { appendFileSync, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { StringDecoder } from "node:string_decoder";
 import { DatabaseSync } from "node:sqlite";
@@ -1647,6 +1647,20 @@ var SqliteStateStore = class {
 	async getArtifact(id, artifact) {
 		return getRow(this.#db(), "artifacts", ["run_id", "artifact_id"], [id, artifact]);
 	}
+	async listFindings(id, q = {}) {
+		const params = [id];
+		let sql = "SELECT * FROM findings WHERE run_id=?";
+		if (q.phaseRunId !== void 0) {
+			sql += " AND phase_run_id=?";
+			params.push(q.phaseRunId);
+		}
+		if (q.status !== void 0) {
+			sql += " AND status=?";
+			params.push(q.status);
+		}
+		sql += " ORDER BY created_at, finding_id";
+		return this.#db().prepare(sql).all(...params).map((row) => fromRow("findings", row));
+	}
 	async verifyChain(id, key) {
 		const db = this.#db();
 		const run = getRow(db, "runs", ["run_id"], [id]);
@@ -5134,7 +5148,7 @@ function createAssetSource() {
 				if (!existsSync(path) || !statSync(path).isFile()) return true;
 				const bytes = readFileSync(path);
 				return bytes.byteLength !== file.size || sha256Hex(bytes) !== file.sha256;
-			}).length > 0 || "8bfd45e8ceecc415af5a42381e8a066ab95e437600b9f4574f5231b81d9c4c18" !== manifest.treeSha256) return err(errorOf("security/asset-hash-mismatch", "embedded assets do not match their manifest"));
+			}).length > 0 || "6c53a3c70941285ec350b879b77d54ebe2f7f50c869c6a9544d615efab4872b0" !== manifest.treeSha256) return err(errorOf("security/asset-hash-mismatch", "embedded assets do not match their manifest"));
 			return ok(true);
 		}
 	};
@@ -5171,21 +5185,23 @@ function createController(options) {
 			}
 		};
 		const store = await options.openStore();
+		const startPayload = type === "start" ? payload : void 0;
+		const specSha256 = startPayload?.spec && "path" in startPayload.spec ? sha256Hex(await readFile(startPayload.spec.path)) : sha256Hex("inline-spec");
 		const result = type === "start" ? await store.transact("project", null, (tx) => {
-			const startPayload = payload;
+			const start = payload;
 			const status = tx.enqueueCommand(signed);
 			if (status === "enqueued") {
-				const specPath = startPayload.spec && "path" in startPayload.spec ? startPayload.spec.path : "inline-spec";
+				const specPath = start.spec && "path" in start.spec ? start.spec.path : "inline-spec";
 				tx.putRun(initialRunState({
 					runId: createdRunId,
-					profile: startPayload.profile,
+					profile: start.profile,
 					tableVersion: 1,
-					specId: startPayload.spec && "id" in startPayload.spec ? startPayload.spec.id : `spec_${sha256Hex(specPath).slice(0, 24)}`,
-					specSha256: sha256Hex(specPath),
-					title: `${startPayload.profile} run`,
+					specId: start.spec && "id" in start.spec ? start.spec.id : `spec_${sha256Hex(specPath).slice(0, 24)}`,
+					specSha256,
+					title: `${start.profile} run`,
 					pinnedInstallDir: options.pinnedInstallDir ?? options.cwd,
 					baseBranch: "main",
-					cohorteVersion: "3.0.0-dev.6",
+					cohorteVersion: "3.0.0-dev.7",
 					schemaVersion: 1,
 					startedAt: options.clock.now()
 				}).run);
@@ -6729,10 +6745,12 @@ async function createProductionEngine(options) {
 	});
 	const assets = createAssetSource();
 	const shippedPromptIds = [
+		"agents/brainstormer",
 		"agents/fixer",
 		"agents/implementer",
 		"agents/reviewer",
-		"agents/security-reviewer"
+		"agents/security-reviewer",
+		"agents/spec-author"
 	];
 	const pinnedPromptPaths = /* @__PURE__ */ new Map();
 	const pinStore = createBlobStore({ dir: join(loaded.projectRoot, ".cohorte", "state", "cas") });
@@ -6744,7 +6762,7 @@ async function createProductionEngine(options) {
 		pinStore,
 		metadata: {
 			app: {
-				version: "3.0.0-dev.6",
+				version: "3.0.0-dev.7",
 				gitHash: null
 			},
 			packages: [],
@@ -6906,6 +6924,7 @@ async function createProductionEngine(options) {
 		integration,
 		events,
 		store: options.store,
+		redactor,
 		checkRunner: { async run(ctx) {
 			const argv = resolved.config.checks.test;
 			if (!argv || argv.length === 0) return [];
@@ -6953,6 +6972,8 @@ async function createProductionEngine(options) {
 		runId: options.runId,
 		clock: systemClock,
 		probes: {
+			...requestedStart?.phases?.includes("BRAINSTORM") ? { "input.is-idea": true } : {},
+			...requestedStart?.phases?.includes("SPEC") ? { "brainstorm.output-valid": true } : {},
 			"config.trust-satisfied": true,
 			"snapshot.captured": true,
 			"runtime.pin-valid": true,
@@ -6971,9 +6992,6 @@ async function createProductionEngine(options) {
 			"tree.digest-recorded": true,
 			"checks.all-passed": true,
 			"checks.digest-equals-integration": true,
-			"review.nothing-to-fix": true,
-			"review.no-unreviewed": true,
-			"review.leftovers-parked-or-waived": true,
 			"reviewref.digest-equals-integration": true,
 			"approval.ship-allowed": true,
 			"tree.digest-equals-approved": true,
@@ -7143,7 +7161,8 @@ async function createProductionEngine(options) {
 				filesystem: sandboxCapabilities.filesystem,
 				network: sandboxCapabilities.network
 			};
-			const zones = Object.entries(loaded.ownership.surfaces).filter(([surfaceId]) => surfaceId !== "shared").flatMap(([, surface]) => surface.paths.map((path) => literalPrefixOf(path).join("/")).filter(Boolean)).filter((path, index, paths) => paths.indexOf(path) === index).sort();
+			const selectedSurfaces = requestedStart?.surfaces ? new Set(requestedStart.surfaces) : void 0;
+			const zones = Object.entries(loaded.ownership.surfaces).filter(([surfaceId]) => selectedSurfaces === void 0 || selectedSurfaces.has(surfaceId)).filter(([surfaceId]) => surfaceId !== "shared").flatMap(([, surface]) => surface.paths.map((path) => literalPrefixOf(path).join("/")).filter(Boolean)).filter((path, index, paths) => paths.indexOf(path) === index).sort();
 			return {
 				snapshotDigest,
 				runtimePin,
@@ -7203,7 +7222,7 @@ async function createProductionHostRunner(options) {
 				hostIdentity
 			}),
 			runId,
-			cohorteVersion: "3.0.0-dev.6",
+			cohorteVersion: "3.0.0-dev.7",
 			cwd: options.cwd,
 			hostId: hostIdentity.hostId
 		}).run();
@@ -7311,4 +7330,4 @@ async function composeCliContext(inputs) {
 //#endregion
 export { composeCliContext };
 
-//# sourceMappingURL=compose-ckM7eAJ_.mjs.map
+//# sourceMappingURL=compose-DRKjQcn0.mjs.map