ctxr-cli 0.1.0

package/dist/core/checks/organize-checks.js

@@ -0,0 +1,97 @@
+import { checkCatalogCoverage } from '../catalog/build.js';
+import { orphans } from '../graph/query.js';
+import { hasSourceIdentity } from '../ingest/identity.js';
+import { defineCheck } from './types.js';
+const GRAPH_SKIP_REASON = 'graph has not been built yet — run `ctxr graph build`';
+/** context-organize spec: "orphaned notes" — reported by lint, never failed by doctor. */
+export const orphanNotesCheck = defineCheck({
+    id: 'organize.orphan_notes',
+    title: 'Notes with no links in or out',
+    severity: 'observation',
+    capability: 'context-organize',
+    scopes: ['store'],
+    async run(ctx) {
+        const graph = await ctx.graph();
+        if (!graph)
+            return { status: 'skip', skipReason: GRAPH_SKIP_REASON, findings: [] };
+        const findings = orphans(graph).map((id) => ({
+            code: 'organize.orphan_note',
+            severity: 'info',
+            message: `"${id}" has no links in or out.`,
+            subject: id,
+        }));
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+/** context-organize spec: "broken links" — the graph's dangling links (not_found or ambiguous), reported not failed. Shares detection with the doctor-facing invariant checks/integrity-checks.ts:graphDanglingLinksCheck under a different id (task 9.4: two ids, two severity lanes, one condition, never double-counted within a single run). */
+export const brokenLinksCheck = defineCheck({
+    id: 'organize.broken_links',
+    title: 'Notes with dangling wikilinks',
+    severity: 'observation',
+    capability: 'context-organize',
+    scopes: ['store'],
+    async run(ctx) {
+        const graph = await ctx.graph();
+        if (!graph)
+            return { status: 'skip', skipReason: GRAPH_SKIP_REASON, findings: [] };
+        const findings = graph.dangling.map((d) => ({
+            code: 'organize.broken_link',
+            severity: 'info',
+            message: `"${d.from}" links to "${d.target}", which is ${d.reason === 'ambiguous' ? 'ambiguous' : 'not found'}.`,
+            subject: d.from,
+            details: { target: d.target, reason: d.reason },
+        }));
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+/** context-ingest / context-organize: material captured but never stamped with source identity. */
+export const uningestedInboxCheck = defineCheck({
+    id: 'organize.uningested_inbox_material',
+    title: 'Inbox material not yet ingested',
+    severity: 'observation',
+    capability: 'context-organize',
+    scopes: ['store'],
+    async run(ctx) {
+        const notes = await ctx.notes();
+        const prefix = ctx.config.ingest.inbox_path.endsWith('/')
+            ? ctx.config.ingest.inbox_path
+            : `${ctx.config.ingest.inbox_path}/`;
+        const findings = notes
+            .filter((note) => note.path.startsWith(prefix) && !hasSourceIdentity(note))
+            .map((note) => ({
+            code: 'organize.uningested_inbox_material',
+            severity: 'info',
+            message: `"${note.path}" is in the inbox but has not been ingested.`,
+            subject: note.path,
+        }));
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+/**
+ * context-organize spec: "notes with no catalog entry as covered by
+ * context-catalog" — the same underlying condition as `catalogCoverageCheck`
+ * (doctor, invariant), surfaced here too as its own observation-severity
+ * check id so lint can report it without doctor's invariant double-counting
+ * lint's finding or vice versa (same pattern as the fail-closed-visibility
+ * pair in Phase 5). Only `missing` is in scope here — `dangling` catalog
+ * entries are a stricter integrity concern doctor alone owns.
+ */
+export const catalogGapsLintCheck = defineCheck({
+    id: 'organize.catalog_gaps',
+    title: 'Notes with no catalog entry',
+    severity: 'observation',
+    capability: 'context-catalog',
+    scopes: ['store'],
+    async run(ctx) {
+        const { missing } = await checkCatalogCoverage({ root: ctx.storeRoot, config: ctx.config });
+        const findings = missing.map((notePath) => ({
+            code: 'catalog.coverage.missing',
+            severity: 'info',
+            message: `"${notePath}" is retrievable but has no catalog entry.`,
+            subject: notePath,
+        }));
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+export const ORGANIZE_CHECKS = [orphanNotesCheck, brokenLinksCheck, uningestedInboxCheck, catalogGapsLintCheck];
+//# sourceMappingURL=organize-checks.js.map

package/dist/core/checks/organize-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organize-checks.js","sourceRoot":"","sources":["../../../src/core/checks/organize-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,iBAAiB,GAAG,uDAAuD,CAAC;AAElF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IAC1C,EAAE,EAAE,uBAAuB;IAC3B,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,kBAAkB;IAC9B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAc,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI,EAAE,2BAA2B;YAC1C,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,oVAAoV;AACpV,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IAC1C,EAAE,EAAE,uBAAuB;IAC3B,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,kBAAkB;IAC9B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAc,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG;YAChH,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;SAChD,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,mGAAmG;AACnG,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAC9C,EAAE,EAAE,oCAAoC;IACxC,KAAK,EAAE,iCAAiC;IACxC,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,kBAAkB;IAC9B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;YAC9B,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC;QACvC,MAAM,QAAQ,GAAc,KAAK;aAC9B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;aAC1E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,IAAI,EAAE,oCAAoC;YAC1C,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,8CAA8C;YACpE,OAAO,EAAE,IAAI,CAAC,IAAI;SACnB,CAAC,CAAC,CAAC;QACN,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAC9C,EAAE,EAAE,uBAAuB;IAC3B,KAAK,EAAE,6BAA6B;IACpC,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAc,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI,QAAQ,4CAA4C;YACjE,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC"}

package/dist/core/checks/registry.d.ts

@@ -0,0 +1,24 @@
+import type { CheckContext, CheckDefinition, CheckResult, CheckScope, CheckSeverity } from './types.js';
+export interface CheckReport {
+    id: string;
+    title: string;
+    capability: string;
+    severity: CheckSeverity;
+    result: CheckResult;
+}
+export interface RunSelection {
+    scope: CheckScope;
+    /** Restrict to these check ids, if given. */
+    only?: readonly string[];
+    severity?: CheckSeverity;
+}
+/**
+ * The dispatch every phase's checks run through, and the one thing that must
+ * never change after Phase 0: extending the system means appending an
+ * import and an array entry to manifest.ts — a data change, not a change to
+ * this function.
+ */
+export declare function runChecks(defs: readonly CheckDefinition[], ctx: CheckContext, selection: RunSelection): Promise<CheckReport[]>;
+/** doctor exits non-zero only when a real invariant failed; skips and passes both succeed. */
+export declare function overallStatus(reports: readonly CheckReport[]): 'pass' | 'fail';
+//# sourceMappingURL=registry.d.ts.map

package/dist/core/checks/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/core/checks/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAExG,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,GAAG,EAAE,YAAY,EACjB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,WAAW,EAAE,CAAC,CAyBxB;AAED,8FAA8F;AAC9F,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,GAAG,MAAM,CAE9E"}

package/dist/core/checks/registry.js

@@ -0,0 +1,33 @@
+/**
+ * The dispatch every phase's checks run through, and the one thing that must
+ * never change after Phase 0: extending the system means appending an
+ * import and an array entry to manifest.ts — a data change, not a change to
+ * this function.
+ */
+export async function runChecks(defs, ctx, selection) {
+    const applicable = defs.filter((d) => d.scopes.includes(selection.scope) &&
+        (!selection.only || selection.only.includes(d.id)) &&
+        (!selection.severity || d.severity === selection.severity));
+    const reports = [];
+    for (const def of applicable) {
+        const gate = def.appliesTo?.(ctx);
+        if (gate && !gate.applicable) {
+            reports.push({
+                id: def.id,
+                title: def.title,
+                capability: def.capability,
+                severity: def.severity,
+                result: { status: 'skip', skipReason: gate.reason, findings: [] },
+            });
+            continue;
+        }
+        const result = await def.run(ctx);
+        reports.push({ id: def.id, title: def.title, capability: def.capability, severity: def.severity, result });
+    }
+    return reports;
+}
+/** doctor exits non-zero only when a real invariant failed; skips and passes both succeed. */
+export function overallStatus(reports) {
+    return reports.some((r) => r.result.status === 'fail') ? 'fail' : 'pass';
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/checks/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/core/checks/registry.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAgC,EAChC,GAAiB,EACjB,SAAuB;IAEvB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QAClC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,CAC7D,CAAC;IAEF,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;aAClE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,OAA+B;IAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC"}

package/dist/core/checks/types.d.ts

@@ -0,0 +1,72 @@
+import type { StoreConfig } from '../../config/schema.js';
+import type { Finding } from '../envelope.js';
+import type { GitRunner } from '../git/exec.js';
+import type { GraphBuildResult } from '../graph/model.js';
+import type { Note } from '../notes/list.js';
+/**
+ * `doctor` (invariant checks, fails a run) and `lint` (observation checks,
+ * never fails a run — context-organize spec) run off the SAME registry,
+ * distinguished only by `severity`. This is what makes Phase 9.4 ("no
+ * condition double-counted as both a lint finding and a doctor failure") a
+ * type constraint instead of a manual audit six phases later.
+ */
+export type CheckSeverity = 'invariant' | 'observation';
+export type CheckStatus = 'pass' | 'fail' | 'skip';
+/**
+ * `'staged'` exists from Phase 0 even though nothing uses it yet, because
+ * Phase 2.2's pre-commit hook runs `doctor --staged` against a check subset
+ * that store-scope checks (like Phase 3's catalog coverage) don't belong in.
+ * Omitting this now would mean building a second dispatcher in Phase 2.
+ */
+export type CheckScope = 'store' | 'staged';
+export interface CheckResult {
+    status: CheckStatus;
+    /** Required when status === 'skip'. */
+    skipReason?: string;
+    findings: Finding[];
+    summary?: string;
+}
+/**
+ * Memoized accessors shared across every check in one run. Reserved with
+ * this shape from Phase 0 so that by Phase 9 — when catalog coverage,
+ * dangling-link, identity-collision, fail-closed-visibility, and gloss-rot
+ * checks all need the full note set — adding memoization doesn't mean
+ * changing `run()`'s signature across six phases of accumulated checks.
+ */
+export interface StagedFile {
+    path: string;
+    status: 'A' | 'M' | 'D' | 'R' | '?';
+    addedLines: number | null;
+    removedLines: number | null;
+    /** Staged (index) content, for non-deleted text files; undefined for deletions or unread files. */
+    content?: string;
+}
+export interface CheckContext {
+    readonly storeRoot: string;
+    readonly config: StoreConfig;
+    readonly scope: CheckScope;
+    readonly git: GitRunner;
+    /** Populated only when scope === 'staged'. */
+    readonly staged?: readonly StagedFile[];
+    notes(): Promise<readonly Note[]>;
+    graph(): Promise<GraphBuildResult | null>;
+    catalog(): Promise<unknown>;
+}
+export interface CheckDefinition {
+    /** Stable, lowercase-dotted id — part of the --json contract once shipped. */
+    id: string;
+    title: string;
+    severity: CheckSeverity;
+    /** Which capability this check verifies, e.g. "context-catalog" — traceability to the spec. */
+    capability: string;
+    scopes: readonly CheckScope[];
+    appliesTo?(ctx: CheckContext): {
+        applicable: true;
+    } | {
+        applicable: false;
+        reason: string;
+    };
+    run(ctx: CheckContext): Promise<CheckResult>;
+}
+export declare function defineCheck(def: CheckDefinition): CheckDefinition;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/checks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/checks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,aAAa,CAAC;AACxD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACpC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mGAAmG;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,KAAK,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAClC,KAAK,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,CAAC;IACxB,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IAC9B,SAAS,CAAC,CAAC,GAAG,EAAE,YAAY,GAAG;QAAE,UAAU,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,UAAU,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,GAAG,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC9C;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,eAAe,CAEjE"}

package/dist/core/checks/types.js

@@ -0,0 +1,4 @@
+export function defineCheck(def) {
+    return def;
+}
+//# sourceMappingURL=types.js.map

package/dist/core/checks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/checks/types.ts"],"names":[],"mappings":"AAwEA,MAAM,UAAU,WAAW,CAAC,GAAoB;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/checks/write-lifecycle-checks.d.ts

@@ -0,0 +1,24 @@
+/**
+ * write-lifecycle spec: pre-commit's five staged checks. Each is severity:
+ * invariant, scoped to 'staged' only — none of them run (or affect anything)
+ * during a plain `doctor` (store-scope) invocation.
+ */
+export declare const stagedSchemaConformanceCheck: import("./types.js").CheckDefinition;
+export declare const stagedFenceIntegrityCheck: import("./types.js").CheckDefinition;
+export declare const stagedSecretScanCheck: import("./types.js").CheckDefinition;
+/**
+ * The concrete, testable interpretation of "path allowlist": a declared
+ * derived path must never be committed (context-store spec) — staging one
+ * is refused here rather than merely documented as a convention.
+ */
+export declare const stagedPathAllowlistCheck: import("./types.js").CheckDefinition;
+export declare const stagedDiffSizeCeilingCheck: import("./types.js").CheckDefinition;
+/**
+ * store-scope (not staged): are both hooks present with current content,
+ * and is core.hooksPath actually pointed at them? Self-heals by
+ * reinstalling on drift — a narrow, documented exception to "doctor only
+ * reads" for exactly this git-plumbing self-repair (task 2.4).
+ */
+export declare const hooksHealthCheck: import("./types.js").CheckDefinition;
+export declare const WRITE_LIFECYCLE_CHECKS: import("./types.js").CheckDefinition[];
+//# sourceMappingURL=write-lifecycle-checks.d.ts.map

package/dist/core/checks/write-lifecycle-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-lifecycle-checks.d.ts","sourceRoot":"","sources":["../../../src/core/checks/write-lifecycle-checks.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,sCAyCvC,CAAC;AAEH,eAAO,MAAM,yBAAyB,sCAsBpC,CAAC;AAEH,eAAO,MAAM,qBAAqB,sCAqBhC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,sCAyBnC,CAAC;AAEH,eAAO,MAAM,0BAA0B,sCA2BrC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,sCAiC3B,CAAC;AAEH,eAAO,MAAM,sBAAsB,wCAOlC,CAAC"}

package/dist/core/checks/write-lifecycle-checks.js

@@ -0,0 +1,205 @@
+import { StoreConfigSchema } from '../../config/schema.js';
+import { parse as parseYaml } from 'yaml';
+import { configureHooksPath, detectStaleHooks, getConfiguredHooksPath, installHooks } from '../hooks.js';
+import { parseNoteText } from '../notes/parse.js';
+import { scanForSecrets } from '../security/secrets.js';
+import { validateFenceIntegrity } from '../fs/fenced-region.js';
+import { defineCheck } from './types.js';
+const CONFIG_FILE_NAME = 'contexture.yaml';
+/**
+ * write-lifecycle spec: pre-commit's five staged checks. Each is severity:
+ * invariant, scoped to 'staged' only — none of them run (or affect anything)
+ * during a plain `doctor` (store-scope) invocation.
+ */
+export const stagedSchemaConformanceCheck = defineCheck({
+    id: 'staged.schema_conformance',
+    title: 'Staged contexture.yaml and note frontmatter parse and validate',
+    severity: 'invariant',
+    capability: 'write-lifecycle',
+    scopes: ['staged'],
+    async run(ctx) {
+        const findings = [];
+        for (const file of ctx.staged ?? []) {
+            if (file.status === 'D' || file.content === undefined)
+                continue;
+            if (file.path === CONFIG_FILE_NAME) {
+                const result = StoreConfigSchema.safeParse(parseYaml(file.content));
+                if (!result.success) {
+                    findings.push({
+                        code: 'staged.schema_conformance.invalid_config',
+                        severity: 'error',
+                        message: `Staged "${file.path}" fails schema validation: ${result.error.issues
+                            .map((i) => `${i.path.join('.') || '(root)'}: ${i.message}`)
+                            .join('; ')}`,
+                        subject: file.path,
+                    });
+                }
+                continue;
+            }
+            if (file.path.endsWith('.md')) {
+                try {
+                    parseNoteText(file.content, file.path);
+                }
+                catch (err) {
+                    findings.push({
+                        code: 'staged.schema_conformance.invalid_frontmatter',
+                        severity: 'error',
+                        message: err instanceof Error ? err.message : String(err),
+                        subject: file.path,
+                    });
+                }
+            }
+        }
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+export const stagedFenceIntegrityCheck = defineCheck({
+    id: 'staged.fence_integrity',
+    title: 'Staged files have no unpaired or duplicated generated-region markers',
+    severity: 'invariant',
+    capability: 'write-lifecycle',
+    scopes: ['staged'],
+    async run(ctx) {
+        const findings = [];
+        for (const file of ctx.staged ?? []) {
+            if (file.status === 'D' || file.content === undefined)
+                continue;
+            const problems = validateFenceIntegrity(file.content);
+            for (const problem of problems) {
+                findings.push({
+                    code: 'staged.fence_integrity.mismatch',
+                    severity: 'error',
+                    message: `"${file.path}": ${problem}`,
+                    subject: file.path,
+                });
+            }
+        }
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+export const stagedSecretScanCheck = defineCheck({
+    id: 'staged.secret_scan',
+    title: 'Staged content matches no known secret pattern',
+    severity: 'invariant',
+    capability: 'write-lifecycle',
+    scopes: ['staged'],
+    async run(ctx) {
+        const findings = [];
+        for (const file of ctx.staged ?? []) {
+            if (file.status === 'D' || file.content === undefined)
+                continue;
+            for (const match of scanForSecrets(file.content)) {
+                findings.push({
+                    code: 'staged.secret_scan.match',
+                    severity: 'error',
+                    message: `"${file.path}:${match.line}" matches the ${match.patternId} secret pattern.`,
+                    subject: file.path,
+                });
+            }
+        }
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+/**
+ * The concrete, testable interpretation of "path allowlist": a declared
+ * derived path must never be committed (context-store spec) — staging one
+ * is refused here rather than merely documented as a convention.
+ */
+export const stagedPathAllowlistCheck = defineCheck({
+    id: 'staged.path_allowlist',
+    title: 'No staged file is under a declared derived path',
+    severity: 'invariant',
+    capability: 'write-lifecycle',
+    scopes: ['staged'],
+    async run(ctx) {
+        const findings = [];
+        for (const file of ctx.staged ?? []) {
+            if (file.status === 'D')
+                continue;
+            const underDerived = ctx.config.derived.paths.some((derivedPath) => {
+                const normalized = derivedPath.endsWith('/') ? derivedPath : `${derivedPath}/`;
+                return file.path.startsWith(normalized);
+            });
+            if (underDerived) {
+                findings.push({
+                    code: 'staged.path_allowlist.derived_path',
+                    severity: 'error',
+                    message: `"${file.path}" is under a declared derived path and must never be committed.`,
+                    subject: file.path,
+                });
+            }
+        }
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+export const stagedDiffSizeCeilingCheck = defineCheck({
+    id: 'staged.diff_size_ceiling',
+    title: 'Total staged diff size is under the configured ceiling',
+    severity: 'invariant',
+    capability: 'write-lifecycle',
+    scopes: ['staged'],
+    async run(ctx) {
+        const total = (ctx.staged ?? []).reduce((sum, file) => sum + (file.addedLines ?? 0) + (file.removedLines ?? 0), 0);
+        const ceiling = ctx.config.write_lifecycle.diff_size_ceiling_lines;
+        if (total > ceiling) {
+            return {
+                status: 'fail',
+                findings: [
+                    {
+                        code: 'staged.diff_size_ceiling.exceeded',
+                        severity: 'error',
+                        message: `Staged changes total ${total} changed lines, exceeding the configured ceiling of ${ceiling}.`,
+                        details: { total, ceiling },
+                    },
+                ],
+            };
+        }
+        return { status: 'pass', findings: [] };
+    },
+});
+/**
+ * store-scope (not staged): are both hooks present with current content,
+ * and is core.hooksPath actually pointed at them? Self-heals by
+ * reinstalling on drift — a narrow, documented exception to "doctor only
+ * reads" for exactly this git-plumbing self-repair (task 2.4).
+ */
+export const hooksHealthCheck = defineCheck({
+    id: 'git.hooks_health',
+    title: 'Version-controlled hooks are installed, current, and wired via core.hooksPath',
+    severity: 'invariant',
+    capability: 'write-lifecycle',
+    scopes: ['store'],
+    async run(ctx) {
+        const findings = [];
+        const defaultBranch = ctx.config.git.default_branch;
+        const stale = await detectStaleHooks(ctx.storeRoot, defaultBranch);
+        if (stale.length > 0) {
+            await installHooks(ctx.storeRoot, defaultBranch);
+            findings.push({
+                code: 'git.hooks_health.reinstalled',
+                severity: 'warning',
+                message: `Reinstalled stale hook(s): ${stale.join(', ')}.`,
+                details: { stale },
+            });
+        }
+        const hooksPath = await getConfiguredHooksPath(ctx.git, ctx.storeRoot);
+        if (hooksPath !== '.githooks') {
+            await configureHooksPath(ctx.git, ctx.storeRoot);
+            findings.push({
+                code: 'git.hooks_health.path_reconfigured',
+                severity: 'warning',
+                message: `core.hooksPath was "${hooksPath ?? '(unset)'}"; reconfigured to ".githooks".`,
+            });
+        }
+        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
+    },
+});
+export const WRITE_LIFECYCLE_CHECKS = [
+    stagedSchemaConformanceCheck,
+    stagedFenceIntegrityCheck,
+    stagedSecretScanCheck,
+    stagedPathAllowlistCheck,
+    stagedDiffSizeCeilingCheck,
+    hooksHealthCheck,
+];
+//# sourceMappingURL=write-lifecycle-checks.js.map

package/dist/core/checks/write-lifecycle-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-lifecycle-checks.js","sourceRoot":"","sources":["../../../src/core/checks/write-lifecycle-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAAC;IACtD,EAAE,EAAE,2BAA2B;IAC/B,KAAK,EAAE,gEAAgE;IACvE,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAS;YAEhE,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,0CAA0C;wBAChD,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,8BAA8B,MAAM,CAAC,KAAK,CAAC,MAAM;6BAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;6BAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;wBACf,OAAO,EAAE,IAAI,CAAC,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,+CAA+C;wBACrD,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,OAAO,EAAE,IAAI,CAAC,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAC;IACnD,EAAE,EAAE,wBAAwB;IAC5B,KAAK,EAAE,sEAAsE;IAC7E,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAS;YAChE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iCAAiC;oBACvC,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,MAAM,OAAO,EAAE;oBACrC,OAAO,EAAE,IAAI,CAAC,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;IAC/C,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,gDAAgD;IACvD,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAS;YAChE,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,0BAA0B;oBAChC,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,iBAAiB,KAAK,CAAC,SAAS,kBAAkB;oBACtF,OAAO,EAAE,IAAI,CAAC,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;IAClD,EAAE,EAAE,uBAAuB;IAC3B,KAAK,EAAE,iDAAiD;IACxD,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;gBAAE,SAAS;YAClC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBACjE,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;gBAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,oCAAoC;oBAC1C,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,iEAAiE;oBACvF,OAAO,EAAE,IAAI,CAAC,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAC;IACpD,EAAE,EAAE,0BAA0B;IAC9B,KAAK,EAAE,wDAAwD;IAC/D,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CACrC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,EACtE,CAAC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,uBAAuB,CAAC;QACnE,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,mCAAmC;wBACzC,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,wBAAwB,KAAK,uDAAuD,OAAO,GAAG;wBACvG,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;qBAC5B;iBACF;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IAC1C,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,+EAA+E;IACtF,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,iBAAiB;IAC7B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,8BAA8B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC1D,OAAO,EAAE,EAAE,KAAK,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,MAAM,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oCAAoC;gBAC1C,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,uBAAuB,SAAS,IAAI,SAAS,iCAAiC;aACxF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,4BAA4B;IAC5B,yBAAyB;IACzB,qBAAqB;IACrB,wBAAwB;IACxB,0BAA0B;IAC1B,gBAAgB;CACjB,CAAC"}

package/dist/core/command.d.ts

@@ -0,0 +1,23 @@
+import type { Finding } from './envelope.js';
+import type { ExitCode } from './exit-codes.js';
+/**
+ * Declarative, per-command metadata read uniformly by run.ts's dispatcher —
+ * `init` is the one command that declares `store: 'absent'`; every other
+ * command requires an already-opened store. This is what keeps `init`'s
+ * exception to the usual git-check/schema-gate an enumerated, testable fact
+ * rather than an `if (commandName === 'init')` special case in the
+ * dispatcher.
+ */
+export interface CommandRequires {
+    store: 'required' | 'absent';
+}
+export interface CommandOutcome<TData> {
+    exitCode: ExitCode;
+    data: TData | null;
+    findings: Finding[];
+    /** One-line human-readable summary, used when --json is not passed. */
+    humanSummary: string;
+    storeRoot: string | null;
+    schemaVersion: number | null;
+}
+//# sourceMappingURL=command.d.ts.map

package/dist/core/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/core/command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,GAAG,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc,CAAC,KAAK;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B"}

package/dist/core/command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=command.js.map

package/dist/core/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/core/command.ts"],"names":[],"mappings":""}

package/dist/core/content/canonicalize.d.ts

@@ -0,0 +1,14 @@
+/**
+ * context-ingest spec: "Canonicalization is a single shared primitive" that
+ * exists in exactly one place — content matching (dedupe, catalog
+ * gloss-rot) never inlines or reimplements this. Pipeline: strip a BOM,
+ * normalize line endings, rstrip each line, collapse trailing blank lines.
+ */
+export declare function canonicalizeText(text: string): string;
+/** Strips frontmatter from raw file text, then canonicalizes the body. */
+export declare function canonicalizeBody(raw: string, notePath?: string): string;
+/** context-ingest spec: a 16-character SHA-256 prefix of the canonicalized body, from raw source text. */
+export declare function contentHash(raw: string, notePath?: string): string;
+/** Same hash, computed from an already-parsed note's body (no frontmatter to strip). */
+export declare function contentHashOfBody(body: string): string;
+//# sourceMappingURL=canonicalize.d.ts.map

package/dist/core/content/canonicalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize.d.ts","sourceRoot":"","sources":["../../../src/core/content/canonicalize.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQrD;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAc,GAAG,MAAM,CAG5E;AAMD,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAc,GAAG,MAAM,CAEvE;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/core/content/canonicalize.js

@@ -0,0 +1,34 @@
+import { createHash } from 'node:crypto';
+import { parseNoteText } from '../notes/parse.js';
+/**
+ * context-ingest spec: "Canonicalization is a single shared primitive" that
+ * exists in exactly one place — content matching (dedupe, catalog
+ * gloss-rot) never inlines or reimplements this. Pipeline: strip a BOM,
+ * normalize line endings, rstrip each line, collapse trailing blank lines.
+ */
+export function canonicalizeText(text) {
+    const withoutBom = text.charCodeAt(0) === 0xfeff ? text.slice(1) : text;
+    const normalizedNewlines = withoutBom.replace(/\r\n/g, '\n').replace(/\r/g, '\n');
+    const lines = normalizedNewlines.split('\n').map((line) => line.replace(/[ \t]+$/, ''));
+    while (lines.length > 0 && lines[lines.length - 1] === '') {
+        lines.pop();
+    }
+    return lines.join('\n');
+}
+/** Strips frontmatter from raw file text, then canonicalizes the body. */
+export function canonicalizeBody(raw, notePath = '(unknown)') {
+    const { body } = parseNoteText(raw, notePath);
+    return canonicalizeText(body);
+}
+function hashText(text) {
+    return createHash('sha256').update(text, 'utf8').digest('hex').slice(0, 16);
+}
+/** context-ingest spec: a 16-character SHA-256 prefix of the canonicalized body, from raw source text. */
+export function contentHash(raw, notePath = '(unknown)') {
+    return hashText(canonicalizeBody(raw, notePath));
+}
+/** Same hash, computed from an already-parsed note's body (no frontmatter to strip). */
+export function contentHashOfBody(body) {
+    return hashText(canonicalizeText(body));
+}
+//# sourceMappingURL=canonicalize.js.map

package/dist/core/content/canonicalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize.js","sourceRoot":"","sources":["../../../src/core/content/canonicalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,QAAQ,GAAG,WAAW;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,QAAQ,GAAG,WAAW;IAC7D,OAAO,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/core/conventions.d.ts

@@ -0,0 +1,21 @@
+import type { StoreConfig } from '../config/schema.js';
+/**
+ * harness-portability spec (entry-doc-generation): operator-authored
+ * convention documents and (via scanProcedures in procedures.ts) procedure
+ * files are indexed from what is actually on disk — adding a file is the
+ * entire integration. Metadata extraction order: frontmatter title →
+ * first `# ` heading → filename stem; description only from frontmatter.
+ */
+export interface ScannedDoc {
+    /** Path relative to the store root, forward-slash separated. */
+    path: string;
+    title: string;
+    description: string | null;
+}
+/** The skill-layout filename: `<slug>/SKILL.md` — what harnesses with skill auto-discovery read. */
+export declare const SKILL_FILE_NAME = "SKILL.md";
+export declare function extractDocMetadata(raw: string, relativePath: string): ScannedDoc;
+export declare function scanDocsDir(root: string, dirRelativePath: string): Promise<ScannedDoc[]>;
+/** Every operator convention doc currently at the configured path. */
+export declare function scanConventions(root: string, config: StoreConfig): Promise<ScannedDoc[]>;
+//# sourceMappingURL=conventions.d.ts.map

package/dist/core/conventions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conventions.d.ts","sourceRoot":"","sources":["../../src/core/conventions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAID,oGAAoG;AACpG,eAAO,MAAM,eAAe,aAAa,CAAC;AAE1C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,CA2BhF;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAgC9F;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAExF"}