create-agdf 0.4.9 → 0.6.0

package/lib/delivery-path-search/state-adapter.js

@@ -1,16 +1,34 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-import { CONTRACT_VERSION } from "./contracts.js";
+import {
+  CONTRACT_VERSION,
+  GENERATOR_CONTRACT_VERSION,
+  validateGeneratorRequest,
+} from "./contracts.js";
+import { resolveRuns, verifyLegacyProjection } from "../control-state/index.js";
 
 function section(content, heading) {
-  return content.match(new RegExp(`## ${heading}\\r?\\n([\\s\\S]*?)(?=\\r?\\n## |$)`))?.[1] ?? "";
+  return (
+    content.match(
+      new RegExp(`## ${heading}\\r?\\n([\\s\\S]*?)(?=\\r?\\n## |$)`),
+    )?.[1] ?? ""
+  );
 }
 
 function tableAnswers(content) {
   const answers = {};
   for (const line of section(content, "Current Control State").split(/\r?\n/)) {
-    const cells = line.split("|").slice(1, -1).map((cell) => cell.trim());
-    if (cells.length >= 2 && cells[0] && !cells[0].startsWith("---") && cells[0] !== "Question") answers[cells[0]] = cells[1];
+    const cells = line
+      .split("|")
+      .slice(1, -1)
+      .map((cell) => cell.trim());
+    if (
+      cells.length >= 2 &&
+      cells[0] &&
+      !cells[0].startsWith("---") &&
+      cells[0] !== "Question"
+    )
+      answers[cells[0]] = cells[1];
   }
   return answers;
 }
@@ -18,34 +36,83 @@ function tableAnswers(content) {
 function statusCard(content) {
   const card = {};
   for (const line of section(content, "Run Status Card").split(/\r?\n/)) {
-    const cells = line.split("|").slice(1, -1).map((cell) => cell.trim().replace(/^`|`$/g, ""));
-    if (cells.length >= 2 && cells[0] && !cells[0].startsWith("---") && cells[0] !== "Run status") card[cells[0]] = cells[1];
+    const cells = line
+      .split("|")
+      .slice(1, -1)
+      .map((cell) => cell.trim().replace(/^`|`$/g, ""));
+    if (
+      cells.length >= 2 &&
+      cells[0] &&
+      !cells[0].startsWith("---") &&
+      cells[0] !== "Run status"
+    )
+      card[cells[0]] = cells[1];
   }
   return card;
 }
 
 function listCell(value) {
-  return String(value ?? "").split(/\s*;\s*/).map((item) => item.trim()).filter(Boolean);
+  return String(value ?? "")
+    .split(/\s*;\s*/)
+    .map((item) => item.trim())
+    .filter(Boolean);
 }
 
 export function searchInputFromControl(targetDir, options = {}) {
-  const runPath = join(targetDir, ".agdf", "control", "AGDF_RUN.md");
-  if (!existsSync(runPath)) throw new Error("missing .agdf/control/AGDF_RUN.md");
+  const canonicalRoot = join(targetDir, ".agdf", "control", "runs");
+  if (existsSync(canonicalRoot)) {
+    const projection = verifyLegacyProjection(targetDir);
+    if (!["absent", "valid"].includes(projection.status)) {
+      throw new Error(`AGDF_LEGACY_PROJECTION_DRIFT:${projection.status}`);
+    }
+  }
+  const resolved = existsSync(canonicalRoot)
+    ? resolveRuns(targetDir, {
+        runIdArg: options.scopeKey,
+        runIdEnv: process.env.AGDF_RUN_ID,
+      })
+    : null;
+  const runPath =
+    resolved?.run.path ?? join(targetDir, ".agdf", "control", "AGDF_RUN.md");
+  if (!existsSync(runPath)) throw new Error("missing AGDF run state");
   const content = readFileSync(runPath, "utf8");
-  const meta = Object.fromEntries([...content.matchAll(/^- ([a-z_]+):\s*(.+)$/gm)].map((match) => [match[1], match[2].replace(/^`|`$/g, "").trim()]));
+  const meta = Object.fromEntries(
+    [...content.matchAll(/^- ([a-z_]+):\s*(.+)$/gm)].map((match) => [
+      match[1],
+      match[2].replace(/^`|`$/g, "").trim(),
+    ]),
+  );
   const answers = tableAnswers(content);
   const card = statusCard(content);
-  return {
+  const result = {
     contract_version: CONTRACT_VERSION,
     scope_key: options.scopeKey ?? meta.run_id ?? "unknown-scope",
     objective: section(content, "Objective").trim(),
     current_gate: card["Current gate"] ?? meta.current_gate ?? "unknown",
     allowed_actions: options.allowedActions ?? listCell(card["Allowed now"]),
-    forbidden_actions: options.forbiddenActions ?? listCell(answers["What is explicitly forbidden right now?"]),
-    evidence_refs: [...content.matchAll(/\|\s*([^|]+)\s*\|\s*([^|]+)\s*\|\s*([^|]+)\s*\|\s*(direct|indirect)\s*\|/g)]
-      .slice(1).map((match) => `${match[1].trim()}: ${match[2].trim()}`),
-    risks: section(content, "Risks").split(/\r?\n/).filter((line) => line.startsWith("|") && !line.includes("---") && !line.includes("| Risk |")).map((line) => line.split("|")[1].trim()),
-    enforcement: options.enforcement ?? { level: "instruction_only", evidence: ["surface instruction prohibits implementation during search"] },
+    forbidden_actions:
+      options.forbiddenActions ??
+      listCell(answers["What is explicitly forbidden right now?"]),
+    evidence_refs: [
+      ...content.matchAll(
+        /\|\s*([^|]+)\s*\|\s*([^|]+)\s*\|\s*([^|]+)\s*\|\s*(direct|indirect)\s*\|/g,
+      ),
+    ]
+      .slice(1)
+      .map((match) => `${match[1].trim()}: ${match[2].trim()}`),
+    risks: section(content, "Risks")
+      .split(/\r?\n/)
+      .filter(
+        (line) =>
+          line.startsWith("|") &&
+          !line.includes("---") &&
+          !line.includes("| Risk |"),
+      )
+      .map((line) => line.split("|")[1].trim()),
+    enforcement: options.enforcement ?? {
+      level: "instruction_only",
+      evidence: ["surface instruction prohibits implementation during search"],
+    },
     budgets: {
       max_candidates: options.maxCandidates ?? 5,
       max_depth: options.maxDepth ?? 2,
@@ -55,4 +122,40 @@ export function searchInputFromControl(targetDir, options = {}) {
       stability_window: options.stabilityWindow ?? 3,
     },
   };
+  if (options.generation?.enabled)
+    result.generation = {
+      enabled: true,
+      max_calls: 1,
+      max_proposals: options.generation.maxProposals ?? 5,
+      max_duration_ms: options.generation.maxDurationMs ?? 30000,
+      max_cost_units: options.generation.maxCostUnits ?? 5,
+    };
+  return result;
+}
+
+export function generatorRequestFromInput(input) {
+  return validateGeneratorRequest({
+    contract_version: GENERATOR_CONTRACT_VERSION,
+    scope_key: input.scope_key,
+    objective: input.objective,
+    scope_summary: input.objective,
+    current_gate: input.current_gate,
+    allowed_actions: input.allowed_actions,
+    forbidden_actions: input.forbidden_actions,
+    artefact_refs: [],
+    evidence: input.evidence_refs ?? [],
+    missing_evidence: [],
+    risks: input.risks ?? [],
+    constraints: [
+      "advisory only",
+      "canonical gate-check remains authoritative",
+    ],
+    enforcement: input.enforcement,
+    budgets: {
+      max_calls: input.generation.max_calls,
+      max_proposals: input.generation.max_proposals,
+      max_duration_ms: input.generation.max_duration_ms,
+      max_cost_units: input.generation.max_cost_units,
+    },
+  });
 }

package/lib/delivery-path-search/transports/read-only-guard.js

@@ -0,0 +1,43 @@
+import { execFileSync } from "node:child_process";
+
+export function repositoryState(cwd) {
+  try {
+    return execFileSync("git", ["status", "--porcelain=v1", "-z"], {
+      cwd,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+    });
+  } catch {
+    return null;
+  }
+}
+
+export function guardedExecFileSync(file, args, options = {}) {
+  const before = repositoryState(options.cwd);
+  let output;
+  let failure;
+  try {
+    output = execFileSync(file, args, {
+      ...options,
+      encoding: options.encoding ?? "utf8",
+      stdio: options.stdio ?? ["ignore", "pipe", "pipe"],
+      timeout: options.timeout ?? 30000,
+      killSignal: "SIGTERM",
+    });
+  } catch (error) {
+    failure = error;
+  }
+  const after = repositoryState(options.cwd);
+  if (before !== null && after !== before) {
+    const error = new Error("repository mutation detected during read-only run");
+    error.code = "GENERATOR_MUTATION_DETECTED";
+    throw error;
+  }
+  if (failure?.code === "ETIMEDOUT" || failure?.signal === "SIGTERM") {
+    const timeout = new Error("read-only process timed out");
+    timeout.code = "GENERATOR_TIMEOUT";
+    throw timeout;
+  }
+  if (failure) throw failure;
+  return output;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-agdf",
-  "version": "0.4.9",
+  "version": "0.6.0",
   "description": "Bootstrap AGDF repository-local plugin files, Copilot/OpenCode instructions, skills, control files and machine-readable checks.",
   "type": "module",
   "files": [
@@ -23,8 +23,10 @@
     "sync-package-assets": "node ./scripts/sync-package-assets.js",
     "test:delivery-path-search": "node ./scripts/delivery-path-search-test.js",
     "test:delivery-path-search-unit": "node ./scripts/delivery-path-search-unit-test.js",
+    "test:delivery-path-search-generator": "node ./scripts/delivery-path-search-generator-test.js",
+    "test:control-state": "node ./scripts/control-state-test.js",
     "test:routing": "npm run sync-package-assets && node ./scripts/test-routing.js",
-    "smoke-test": "npm run sync-package-assets && npm run test:delivery-path-search && npm run test:delivery-path-search-unit && node ./scripts/smoke-test.js && node ./scripts/test-routing.js",
+    "smoke-test": "npm run sync-package-assets && npm run test:control-state && npm run test:delivery-path-search && npm run test:delivery-path-search-unit && npm run test:delivery-path-search-generator && node ./scripts/smoke-test.js && node ./scripts/test-routing.js",
     "prepack": "npm run sync-package-assets"
   },
   "keywords": [