ctxr-cli 0.5.0 → 0.7.0

package/dist/commands/session-reap.js

@@ -1,52 +0,0 @@
-import { SessionReapWorkspacesExternalError } from '../core/errors.js';
-import { ExitCode } from '../core/exit-codes.js';
-import { isWorkingTreeClean } from '../core/git/repo.js';
-import { deleteBranch, listWorktrees, removeWorktree } from '../core/git/worktree.js';
-import { isSessionBranch, isSessionWorktreePath } from '../core/session.js';
-export const requires = { store: 'required' };
-/**
- * write-lifecycle spec: reclaims session worktrees whose branch has been
- * merged into the default branch and whose tree is clean — never a branch
- * with unmerged commits, never a dirty worktree. This removes the
- * concurrency race entirely rather than hardening against it: a
- * conservative reap that only ever touches provably-safe sessions.
- */
-export async function execute(env, store) {
-    if (store.config.session.workspaces_external) {
-        throw new SessionReapWorkspacesExternalError();
-    }
-    const worktrees = await listWorktrees(env.git, store.root);
-    const sessions = worktrees.filter((w) => w.branch !== null &&
-        (isSessionBranch(store.config, w.branch) || isSessionWorktreePath(store.config, w.path)));
-    const reaped = [];
-    const skipped = [];
-    for (const session of sessions) {
-        const clean = await isWorkingTreeClean(env.git, session.path);
-        if (!clean) {
-            skipped.push({ branch: session.branch, worktree: session.path, reason: 'worktree has uncommitted changes' });
-            continue;
-        }
-        const aheadResult = await env.git.run(['log', `${store.config.git.default_branch}..${session.branch}`, '--oneline'], { cwd: store.root, allowFailure: true });
-        const isMerged = aheadResult.exitCode === 0 && aheadResult.stdout.trim().length === 0;
-        if (!isMerged) {
-            skipped.push({
-                branch: session.branch,
-                worktree: session.path,
-                reason: 'branch has commits not yet merged into the default branch',
-            });
-            continue;
-        }
-        await removeWorktree(env.git, store.root, session.path);
-        await deleteBranch(env.git, store.root, session.branch);
-        reaped.push({ branch: session.branch, worktree: session.path, reason: 'merged and clean' });
-    }
-    return {
-        exitCode: ExitCode.Ok,
-        data: { reaped, skipped },
-        findings: [],
-        humanSummary: `Reaped ${reaped.length} session(s), skipped ${skipped.length}.`,
-        storeRoot: store.root,
-        schemaVersion: store.config.schema_version,
-    };
-}
-//# sourceMappingURL=session-reap.js.map

package/dist/commands/session-reap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-reap.js","sourceRoot":"","sources":["../../src/commands/session-reap.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAG5E,MAAM,CAAC,MAAM,QAAQ,GAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAa/D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,KAAY;IACrD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC7C,MAAM,IAAI,kCAAkC,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAsC,EAAE,CACxC,CAAC,CAAC,MAAM,KAAK,IAAI;QACjB,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAC3F,CAAC;IAEF,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAC7G,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CACnC,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,EAC7E,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CACxC,CAAC;QACF,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,IAAI;gBACtB,MAAM,EAAE,2DAA2D;aACpE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QACzB,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,UAAU,MAAM,CAAC,MAAM,wBAAwB,OAAO,CAAC,MAAM,GAAG;QAC9E,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;KAC3C,CAAC;AACJ,CAAC"}

package/dist/commands/session-submit.d.ts

@@ -1,29 +0,0 @@
-import type { OpenPullRequestResult } from '../adapters/forge/types.js';
-import type { CommandOutcome, CommandRequires } from '../core/command.js';
-import type { RunEnv } from '../core/env.js';
-import type { Store } from '../core/store.js';
-export declare const requires: CommandRequires;
-export interface SessionSubmitFlags {
-    message?: string;
-    title?: string;
-    body?: string;
-    /** session-submit-and-land spec: renames the session branch before pushing, so a generated name never reaches the forge. */
-    branch?: string;
-}
-export interface SessionSubmitData {
-    branch: string;
-    commit: string | null;
-    pushed: boolean;
-    pr: OpenPullRequestResult | null;
-    manualPrInstructions: string | null;
-}
-/**
- * write-lifecycle spec: "runs full validation, commits, pushes the branch,
- * opens a PR via the configured forge adapter (or degrades per 2.5);
- * refuses to run if validation fails." Full validation here means the same
- * store-scope invariant set doctor runs — not just what's currently staged
- * — because a session's job is to leave the store healthy as a whole, not
- * merely to pass each individual commit's pre-commit gate.
- */
-export declare function execute(env: RunEnv, store: Store, flags: SessionSubmitFlags): Promise<CommandOutcome<SessionSubmitData>>;
-//# sourceMappingURL=session-submit.d.ts.map

package/dist/commands/session-submit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-submit.d.ts","sourceRoot":"","sources":["../../src/commands/session-submit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAIxE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAO7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,eAAO,MAAM,QAAQ,EAAE,eAAuC,CAAC;AAE/D,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,EAAE,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CA8D5C"}

package/dist/commands/session-submit.js

@@ -1,72 +0,0 @@
-import { configuredAdapters } from '../adapters/registry.js';
-import { CHECKS } from '../core/checks/manifest.js';
-import { overallStatus, runChecks } from '../core/checks/registry.js';
-import { NoRemoteConfiguredError, SessionValidationFailedError } from '../core/errors.js';
-import { ExitCode } from '../core/exit-codes.js';
-import { commitIfStaged, currentBranch, pushBranch, renameCurrentBranch } from '../core/git/repo.js';
-import { hasRemote } from '../core/git/worktree.js';
-import { readGraph } from '../core/graph/persist.js';
-import { listNotes } from '../core/notes/list.js';
-export const requires = { store: 'required' };
-/**
- * write-lifecycle spec: "runs full validation, commits, pushes the branch,
- * opens a PR via the configured forge adapter (or degrades per 2.5);
- * refuses to run if validation fails." Full validation here means the same
- * store-scope invariant set doctor runs — not just what's currently staged
- * — because a session's job is to leave the store healthy as a whole, not
- * merely to pass each individual commit's pre-commit gate.
- */
-export async function execute(env, store, flags) {
-    let branch = await currentBranch(env.git, store.root);
-    if (flags.branch && flags.branch !== branch) {
-        await renameCurrentBranch(env.git, store.root, flags.branch);
-        branch = flags.branch;
-    }
-    const ctx = {
-        storeRoot: store.root,
-        config: store.config,
-        scope: 'store',
-        git: env.git,
-        notes: () => listNotes(store.root, store.config),
-        graph: () => readGraph(store),
-        catalog: async () => undefined,
-    };
-    const reports = await runChecks(CHECKS, ctx, { scope: 'store', severity: 'invariant' });
-    if (overallStatus(reports) === 'fail') {
-        throw new SessionValidationFailedError(reports.flatMap((r) => r.result.findings));
-    }
-    if (!(await hasRemote(env.git, store.root))) {
-        throw new NoRemoteConfiguredError();
-    }
-    const commitSha = await commitIfStaged(env.git, store.root, { kind: 'session', worktree: store.root, branch }, flags.message ?? `chore: submit session ${branch}`);
-    await pushBranch(env.git, store.root, branch);
-    let pr = null;
-    let manualPrInstructions = null;
-    // adapters spec: "No forge adapter configured" is a documented degradation,
-    // not a crash — the commit-and-push above still completed either way.
-    const [forgeAdapter] = configuredAdapters(store.config, 'forge');
-    const forgeAvailable = forgeAdapter ? await forgeAdapter.isAvailable(store.root) : false;
-    if (forgeAdapter && forgeAvailable) {
-        pr = await forgeAdapter.openPullRequest({
-            cwd: store.root,
-            branch,
-            baseBranch: store.config.git.default_branch,
-            title: flags.title ?? `Session: ${branch}`,
-            body: flags.body ?? '',
-        });
-    }
-    else {
-        manualPrInstructions =
-            `No forge adapter is configured or reachable. The branch "${branch}" was pushed successfully — ` +
-                `open a pull request manually, comparing it against "${store.config.git.default_branch}".`;
-    }
-    return {
-        exitCode: ExitCode.Ok,
-        data: { branch, commit: commitSha, pushed: true, pr, manualPrInstructions },
-        findings: [],
-        humanSummary: pr ? `Opened PR #${pr.number ?? '?'}: ${pr.url}` : (manualPrInstructions ?? ''),
-        storeRoot: store.root,
-        schemaVersion: store.config.schema_version,
-    };
-}
-//# sourceMappingURL=session-submit.js.map

package/dist/commands/session-submit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-submit.js","sourceRoot":"","sources":["../../src/commands/session-submit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAItE,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACrG,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,MAAM,CAAC,MAAM,QAAQ,GAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAkB/D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,KAAY,EACZ,KAAyB;IAEzB,IAAI,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,MAAM,GAAG,GAAiB;QACxB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;QAChD,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;QAC7B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC/B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACxF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,GAAG,CAAC,GAAG,EACP,KAAK,CAAC,IAAI,EACV,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EACjD,KAAK,CAAC,OAAO,IAAI,yBAAyB,MAAM,EAAE,CACnD,CAAC;IAEF,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9C,IAAI,EAAE,GAAiC,IAAI,CAAC;IAC5C,IAAI,oBAAoB,GAAkB,IAAI,CAAC;IAC/C,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,CAAC,YAAY,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzF,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;QACnC,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;YACtC,GAAG,EAAE,KAAK,CAAC,IAAI;YACf,MAAM;YACN,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc;YAC3C,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,YAAY,MAAM,EAAE;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,oBAAoB;YAClB,4DAA4D,MAAM,8BAA8B;gBAChG,uDAAuD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,oBAAoB,EAAE;QAC3E,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC;QAC7F,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;KAC3C,CAAC;AACJ,CAAC"}

package/dist/core/checks/disclosure-checks.d.ts

@@ -1,4 +0,0 @@
-/** disclosure-policy spec (store-primitives-from-migration-audit D3): reported by lint, never failed by doctor — a marker match is a judgment call, not an invariant. */
-export declare const leakCheck: import("./types.js").CheckDefinition;
-export declare const DISCLOSURE_CHECKS: import("./types.js").CheckDefinition[];
-//# sourceMappingURL=disclosure-checks.d.ts.map

package/dist/core/checks/disclosure-checks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclosure-checks.d.ts","sourceRoot":"","sources":["../../../src/core/checks/disclosure-checks.ts"],"names":[],"mappings":"AAIA,yKAAyK;AACzK,eAAO,MAAM,SAAS,sCAkBpB,CAAC;AAEH,eAAO,MAAM,iBAAiB,wCAAc,CAAC"}

package/dist/core/checks/disclosure-checks.js

@@ -1,24 +0,0 @@
-import { scanForLeaks } from '../disclosure/leak-scan.js';
-import { defineCheck } from './types.js';
-/** disclosure-policy spec (store-primitives-from-migration-audit D3): reported by lint, never failed by doctor — a marker match is a judgment call, not an invariant. */
-export const leakCheck = defineCheck({
-    id: 'disclosure.leak',
-    title: "Content matching a context's marker found inside a note that context cannot see",
-    severity: 'observation',
-    capability: 'disclosure-policy',
-    scopes: ['store'],
-    async run(ctx) {
-        const notes = await ctx.notes();
-        const leaks = scanForLeaks(ctx.config, notes);
-        const findings = leaks.map((leak) => ({
-            code: 'disclosure.leak',
-            severity: 'warning',
-            message: `"${leak.path}" matches a marker for context "${leak.context}", which cannot see this note: "${leak.matchedText}".`,
-            subject: leak.path,
-            details: { context: leak.context, pattern: leak.pattern, matchedText: leak.matchedText },
-        }));
-        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
-    },
-});
-export const DISCLOSURE_CHECKS = [leakCheck];
-//# sourceMappingURL=disclosure-checks.js.map

package/dist/core/checks/disclosure-checks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclosure-checks.js","sourceRoot":"","sources":["../../../src/core/checks/disclosure-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,yKAAyK;AACzK,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;IACnC,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,iFAAiF;IACxF,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,mBAAmB;IAC/B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAc,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,mCAAmC,IAAI,CAAC,OAAO,mCAAmC,IAAI,CAAC,WAAW,IAAI;YAC5H,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;SACzF,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,CAAC,CAAC"}

package/dist/core/disclosure/leak-scan.d.ts

@@ -1,19 +0,0 @@
-import type { StoreConfig } from '../../config/schema.js';
-import type { Note } from '../notes/list.js';
-export interface LeakFinding {
-    path: string;
-    context: string;
-    pattern: string;
-    matchedText: string;
-}
-/**
- * disclosure-policy spec (store-primitives-from-migration-audit D3): a leak
- * is content that belongs to context X (per an operator-declared marker
- * pattern) inside a note X cannot see, per the SAME context→visible-values
- * mapping the visibility pre-filter and disclosure's internal-audience rung
- * use — "X cannot see the note" is exactly `!canSee(config, X, resolved)`.
- * Empty markers (the default) make this a no-op for every note.
- */
-export declare function scanNoteForLeaks(config: StoreConfig, note: Note): LeakFinding[];
-export declare function scanForLeaks(config: StoreConfig, notes: readonly Note[]): LeakFinding[];
-//# sourceMappingURL=leak-scan.d.ts.map

package/dist/core/disclosure/leak-scan.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"leak-scan.d.ts","sourceRoot":"","sources":["../../../src/core/disclosure/leak-scan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,WAAW,EAAE,CAgB/E;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,WAAW,EAAE,CAEvF"}

package/dist/core/disclosure/leak-scan.js

@@ -1,31 +0,0 @@
-import { canSee, resolveVisibility } from '../notes/visibility.js';
-/**
- * disclosure-policy spec (store-primitives-from-migration-audit D3): a leak
- * is content that belongs to context X (per an operator-declared marker
- * pattern) inside a note X cannot see, per the SAME context→visible-values
- * mapping the visibility pre-filter and disclosure's internal-audience rung
- * use — "X cannot see the note" is exactly `!canSee(config, X, resolved)`.
- * Empty markers (the default) make this a no-op for every note.
- */
-export function scanNoteForLeaks(config, note) {
-    const markers = config.disclosure.leak_markers;
-    if (Object.keys(markers).length === 0)
-        return [];
-    const resolved = resolveVisibility(config, note).value;
-    const findings = [];
-    for (const [context, patterns] of Object.entries(markers)) {
-        if (canSee(config, context, resolved))
-            continue;
-        for (const pattern of patterns) {
-            const match = new RegExp(pattern).exec(note.body);
-            if (match) {
-                findings.push({ path: note.path, context, pattern, matchedText: match[0] });
-            }
-        }
-    }
-    return findings;
-}
-export function scanForLeaks(config, notes) {
-    return notes.flatMap((note) => scanNoteForLeaks(config, note));
-}
-//# sourceMappingURL=leak-scan.js.map

package/dist/core/disclosure/leak-scan.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"leak-scan.js","sourceRoot":"","sources":["../../../src/core/disclosure/leak-scan.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AASnE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAmB,EAAE,IAAU;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC;IACvD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;YAAE,SAAS;QAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,KAAsB;IACtE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/core/disclosure/model.d.ts

@@ -1,18 +0,0 @@
-import type { StoreConfig } from '../../config/schema.js';
-import type { Note } from '../notes/list.js';
-export type DisclosureVerdict = 'allow' | 'deny' | 'ask';
-export type DisclosureRung = 'hard_wall' | 'explicit_tag' | 'internal_visibility' | 'external_default';
-export interface DisclosureResult {
-    verdict: DisclosureVerdict;
-    rung: DisclosureRung;
-}
-/**
- * disclosure-policy spec: ordered walls-before-allows evaluation, stopping
- * at the first rung that produces a verdict. Rung 3 (internal-audience-
- * from-visibility) only applies when the requested audience is one the
- * operator has declared internal — for any other (external) audience, rung
- * 3 is skipped entirely and evaluation falls straight to rung 4's ASK, so an
- * external verdict is never derived from visibility alone.
- */
-export declare function evaluateDisclosure(config: StoreConfig, note: Note, audience: string): DisclosureResult;
-//# sourceMappingURL=model.d.ts.map

package/dist/core/disclosure/model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/core/disclosure/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG7C,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,cAAc,GAAG,qBAAqB,GAAG,kBAAkB,CAAC;AAEvG,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;CACtB;AAoBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAkBtG"}

package/dist/core/disclosure/model.js

@@ -1,45 +0,0 @@
-import { canSee, resolveVisibility } from '../notes/visibility.js';
-/**
- * The frontmatter key a note uses to explicitly declare which audiences may
- * see it disclosed (rung 2). Unlike the visibility field (context-store
- * spec), nothing asks this key to be configurable, so it lives here as the
- * one literal — same discipline as every other single-purpose constant in
- * this codebase, just without a dedicated defaults.ts entry since no other
- * module needs to reference it.
- */
-const AUDIENCE_FIELD_KEY = 'audience';
-function matchesWall(wall, note, audience) {
-    if (wall.audience !== '*' && wall.audience !== audience)
-        return false;
-    if (wall.except?.includes(audience))
-        return false;
-    if (!wall.note_path_prefix)
-        return true;
-    const prefix = wall.note_path_prefix.endsWith('/') ? wall.note_path_prefix : `${wall.note_path_prefix}/`;
-    return note.path === wall.note_path_prefix || note.path.startsWith(prefix);
-}
-/**
- * disclosure-policy spec: ordered walls-before-allows evaluation, stopping
- * at the first rung that produces a verdict. Rung 3 (internal-audience-
- * from-visibility) only applies when the requested audience is one the
- * operator has declared internal — for any other (external) audience, rung
- * 3 is skipped entirely and evaluation falls straight to rung 4's ASK, so an
- * external verdict is never derived from visibility alone.
- */
-export function evaluateDisclosure(config, note, audience) {
-    for (const wall of config.disclosure.hard_walls) {
-        if (matchesWall(wall, note, audience)) {
-            return { verdict: wall.verdict, rung: 'hard_wall' };
-        }
-    }
-    const tags = note.frontmatter?.[AUDIENCE_FIELD_KEY];
-    if (Array.isArray(tags) && tags.includes(audience)) {
-        return { verdict: 'allow', rung: 'explicit_tag' };
-    }
-    if (config.disclosure.internal_audiences.includes(audience)) {
-        const resolved = resolveVisibility(config, note);
-        return { verdict: canSee(config, audience, resolved.value) ? 'allow' : 'deny', rung: 'internal_visibility' };
-    }
-    return { verdict: 'ask', rung: 'external_default' };
-}
-//# sourceMappingURL=model.js.map

package/dist/core/disclosure/model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/core/disclosure/model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAWnE;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC,SAAS,WAAW,CAAC,IAAoB,EAAE,IAAU,EAAE,QAAgB;IACrE,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,GAAG,CAAC;IACzG,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAmB,EAAE,IAAU,EAAE,QAAgB;IAClF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC/G,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACtD,CAAC"}

package/dist/core/graph/visibility-filter.d.ts

@@ -1,13 +0,0 @@
-import type { Store } from '../store.js';
-import type { GraphBuildResult } from './model.js';
-/**
- * context-visibility spec: "excluded... before that operation ranks,
- * traverses, or otherwise processes results" — filtering the persisted
- * graph down to only visible nodes BEFORE calling neighbors/shortestPath/
- * hubs/orphans means an excluded note contributes no edges to any of them,
- * not merely a post-hoc omission from the final list. A node with no
- * corresponding current note (a stale graph entry) is excluded rather than
- * included — visibility can't be resolved for it, so it fails closed.
- */
-export declare function filterGraphByAudience(store: Store, graph: GraphBuildResult, audience: string): Promise<GraphBuildResult>;
-//# sourceMappingURL=visibility-filter.d.ts.map

package/dist/core/graph/visibility-filter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"visibility-filter.d.ts","sourceRoot":"","sources":["../../../src/core/graph/visibility-filter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,CAa3B"}

package/dist/core/graph/visibility-filter.js

@@ -1,26 +0,0 @@
-import { listNotes } from '../notes/list.js';
-import { canSee, resolveVisibility } from '../notes/visibility.js';
-import { subgraph } from './query.js';
-/**
- * context-visibility spec: "excluded... before that operation ranks,
- * traverses, or otherwise processes results" — filtering the persisted
- * graph down to only visible nodes BEFORE calling neighbors/shortestPath/
- * hubs/orphans means an excluded note contributes no edges to any of them,
- * not merely a post-hoc omission from the final list. A node with no
- * corresponding current note (a stale graph entry) is excluded rather than
- * included — visibility can't be resolved for it, so it fails closed.
- */
-export async function filterGraphByAudience(store, graph, audience) {
-    const notes = await listNotes(store.root, store.config);
-    const byPath = new Map(notes.map((note) => [note.path, note]));
-    const visibleIds = graph.nodes
-        .filter((node) => {
-        const note = byPath.get(node.path);
-        if (!note)
-            return false;
-        return canSee(store.config, audience, resolveVisibility(store.config, note).value);
-    })
-        .map((node) => node.id);
-    return subgraph(graph, visibleIds);
-}
-//# sourceMappingURL=visibility-filter.js.map

package/dist/core/graph/visibility-filter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"visibility-filter.js","sourceRoot":"","sources":["../../../src/core/graph/visibility-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAY,EACZ,KAAuB,EACvB,QAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAE/D,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE1B,OAAO,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC"}

package/dist/core/migrations/rename-visibility-field.d.ts

@@ -1,3 +0,0 @@
-import type { Migration } from './types.js';
-export declare const renameVisibilityFieldMigration: Migration;
-//# sourceMappingURL=rename-visibility-field.d.ts.map

package/dist/core/migrations/rename-visibility-field.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rename-visibility-field.d.ts","sourceRoot":"","sources":["../../../src/core/migrations/rename-visibility-field.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,YAAY,CAAC;AAsB5D,eAAO,MAAM,8BAA8B,EAAE,SAuC5C,CAAC"}

package/dist/core/migrations/rename-visibility-field.js

@@ -1,62 +0,0 @@
-import path from 'node:path';
-import { DEFAULT_VISIBILITY_FIELD_KEY, SCHEMA_V1_VISIBILITY_FIELD_KEY } from '../../config/defaults.js';
-import { readConfig } from '../../config/load.js';
-import { renderStoreConfig } from '../../config/render.js';
-import { writeFileAtomic } from '../fs/atomic.js';
-import { listNotes } from '../notes/list.js';
-import { parseNote } from '../notes/parse.js';
-import { renderNoteText } from '../notes/render.js';
-const OLD_KEY = SCHEMA_V1_VISIBILITY_FIELD_KEY;
-const NEW_KEY = DEFAULT_VISIBILITY_FIELD_KEY;
-/**
- * store-lifecycle spec (task 9.2): the concrete migration proving the
- * naming-inoculation design holds. The key to search for is the FIXED
- * historical literal (OLD_KEY), never `store.config.fields.visibility` —
- * that field is exactly what apply()'s own last step changes, so deriving
- * "what to look for" from it would make a resumed run, on a store whose
- * config was already bumped but whose notes weren't all done yet,
- * incorrectly treat the (already-correct) new key as something to rename
- * away from. A per-note check is "done" precisely when OLD_KEY is gone
- * from its frontmatter — true whether it was never present or already
- * renamed, which is what makes a re-run naturally skip completed work.
- */
-async function pendingNoteRenames(store) {
-    const notes = await listNotes(store.root, store.config);
-    return notes.filter((note) => note.frontmatter?.[OLD_KEY] !== undefined).map((note) => note.path);
-}
-export const renameVisibilityFieldMigration = {
-    id: '0002-rename-visibility-field-to-lens',
-    fromVersion: 1,
-    toVersion: 2,
-    description: `Rename the visibility frontmatter field from "${OLD_KEY}" to "${NEW_KEY}", on every note and in contexture.yaml.`,
-    async plan(store) {
-        const deltas = (await pendingNoteRenames(store)).map((notePath) => ({
-            path: notePath,
-            description: `rename frontmatter field "${OLD_KEY}" to "${NEW_KEY}"`,
-        }));
-        if (store.config.fields.visibility !== NEW_KEY || store.config.schema_version < 2) {
-            deltas.push({ path: 'contexture.yaml', description: `set fields.visibility to "${NEW_KEY}" and schema_version to 2` });
-        }
-        return deltas;
-    },
-    async apply(store) {
-        const applied = [];
-        for (const notePath of await pendingNoteRenames(store)) {
-            const absolutePath = path.join(store.root, notePath);
-            const note = await parseNote(absolutePath, notePath);
-            const { [OLD_KEY]: value, ...rest } = note.frontmatter ?? {};
-            const frontmatter = { ...rest, [NEW_KEY]: value };
-            await writeFileAtomic(absolutePath, renderNoteText(frontmatter, note.body));
-            applied.push({ path: notePath, description: `renamed frontmatter field "${OLD_KEY}" to "${NEW_KEY}"` });
-        }
-        const configPath = path.join(store.root, 'contexture.yaml');
-        const currentConfig = await readConfig(store.root);
-        if (currentConfig.fields.visibility !== NEW_KEY || currentConfig.schema_version < 2) {
-            const nextConfig = { ...currentConfig, fields: { ...currentConfig.fields, visibility: NEW_KEY }, schema_version: 2 };
-            await writeFileAtomic(configPath, renderStoreConfig(nextConfig));
-            applied.push({ path: 'contexture.yaml', description: `set fields.visibility to "${NEW_KEY}" and schema_version to 2` });
-        }
-        return applied;
-    },
-};
-//# sourceMappingURL=rename-visibility-field.js.map

package/dist/core/migrations/rename-visibility-field.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rename-visibility-field.js","sourceRoot":"","sources":["../../../src/core/migrations/rename-visibility-field.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AACxG,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIpD,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAC/C,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAY;IAC5C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAc;IACvD,EAAE,EAAE,sCAAsC;IAC1C,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,CAAC;IACZ,WAAW,EAAE,iDAAiD,OAAO,SAAS,OAAO,0CAA0C;IAE/H,KAAK,CAAC,IAAI,CAAC,KAAK;QACd,MAAM,MAAM,GAAqB,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpF,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6BAA6B,OAAO,SAAS,OAAO,GAAG;SACrE,CAAC,CAAC,CAAC;QACJ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,6BAA6B,OAAO,2BAA2B,EAAE,CAAC,CAAC;QACzH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAK;QACf,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACrD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC7D,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;YAClD,MAAM,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,OAAO,SAAS,OAAO,GAAG,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,IAAI,aAAa,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACpF,MAAM,UAAU,GAAG,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;YACrH,MAAM,eAAe,CAAC,UAAU,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,6BAA6B,OAAO,2BAA2B,EAAE,CAAC,CAAC;QAC1H,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/core/notes/checks.d.ts

@@ -1,20 +0,0 @@
-/**
- * store-lifecycle/context-visibility: a note relying on the fail-closed
- * default is a health OBSERVATION (lint), not a doctor-failing invariant —
- * doctor's own fail-closed-visibility invariant (wired in Phase 5, below)
- * is a different, stricter check. `severity: 'observation'` is what keeps
- * this out of doctor's exit code by construction, via the same registry
- * lint reads from in Phase 7.
- */
-export declare const failClosedVisibilityCheck: import("../checks/types.js").CheckDefinition;
-/**
- * context-visibility spec (task 5.2): the same underlying condition as the
- * lint-facing observation above, registered a second time as its own
- * invariant so `doctor` can fail a run on it. Each check id carries exactly
- * one severity, so the two never double-count a single run's pass/fail
- * totals against each other (task 9.4) even though both watch the same
- * condition for two different audiences (an operator skimming lint output,
- * versus a gate that must block).
- */
-export declare const failClosedVisibilityInvariantCheck: import("../checks/types.js").CheckDefinition;
-//# sourceMappingURL=checks.d.ts.map

package/dist/core/notes/checks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/core/notes/checks.ts"],"names":[],"mappings":"AAsBA;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,8CAUpC,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC,8CAU7C,CAAC"}

package/dist/core/notes/checks.js

@@ -1,58 +0,0 @@
-import { defineCheck } from '../checks/types.js';
-import { resolveVisibility } from './visibility.js';
-async function failClosedFindings(ctx) {
-    const notes = await ctx.notes();
-    const findings = [];
-    for (const note of notes) {
-        const resolution = resolveVisibility(ctx.config, note);
-        if (resolution.reason === 'fail-closed default') {
-            findings.push({
-                code: 'visibility.fail_closed_default',
-                severity: 'info',
-                message: `"${note.path}" has no explicit or directory-derived visibility; relying on the fail-closed default.`,
-                subject: note.path,
-            });
-        }
-    }
-    return findings;
-}
-/**
- * store-lifecycle/context-visibility: a note relying on the fail-closed
- * default is a health OBSERVATION (lint), not a doctor-failing invariant —
- * doctor's own fail-closed-visibility invariant (wired in Phase 5, below)
- * is a different, stricter check. `severity: 'observation'` is what keeps
- * this out of doctor's exit code by construction, via the same registry
- * lint reads from in Phase 7.
- */
-export const failClosedVisibilityCheck = defineCheck({
-    id: 'visibility.fail_closed_default',
-    title: 'Notes relying on the fail-closed default visibility',
-    severity: 'observation',
-    capability: 'context-visibility',
-    scopes: ['store'],
-    async run(ctx) {
-        const findings = await failClosedFindings(ctx);
-        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
-    },
-});
-/**
- * context-visibility spec (task 5.2): the same underlying condition as the
- * lint-facing observation above, registered a second time as its own
- * invariant so `doctor` can fail a run on it. Each check id carries exactly
- * one severity, so the two never double-count a single run's pass/fail
- * totals against each other (task 9.4) even though both watch the same
- * condition for two different audiences (an operator skimming lint output,
- * versus a gate that must block).
- */
-export const failClosedVisibilityInvariantCheck = defineCheck({
-    id: 'visibility.fail_closed_default_invariant',
-    title: 'Every note has a resolvable visibility value',
-    severity: 'invariant',
-    capability: 'context-visibility',
-    scopes: ['store'],
-    async run(ctx) {
-        const findings = await failClosedFindings(ctx);
-        return { status: findings.length > 0 ? 'fail' : 'pass', findings };
-    },
-});
-//# sourceMappingURL=checks.js.map

package/dist/core/notes/checks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../../src/core/notes/checks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,KAAK,UAAU,kBAAkB,CAAC,GAAiB;IACjD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gCAAgC;gBACtC,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,wFAAwF;gBAC9G,OAAO,EAAE,IAAI,CAAC,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAC;IACnD,EAAE,EAAE,gCAAgC;IACpC,KAAK,EAAE,qDAAqD;IAC5D,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,oBAAoB;IAChC,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,WAAW,CAAC;IAC5D,EAAE,EAAE,0CAA0C;IAC9C,KAAK,EAAE,8CAA8C;IACrD,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,oBAAoB;IAChC,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrE,CAAC;CACF,CAAC,CAAC"}

package/dist/core/notes/visibility.d.ts

@@ -1,26 +0,0 @@
-import type { StoreConfig } from '../../config/schema.js';
-import type { Note } from './list.js';
-/**
- * context-visibility spec: resolution order is explicit → directory default
- * → the configured fail-closed default, and every resolution reports WHICH
- * rung produced it — not just the resolved value — so a note relying on the
- * fail-closed default is distinguishable from one genuinely classified.
- */
-export type VisibilityReason = 'explicit' | 'directory default' | 'fail-closed default';
-export interface VisibilityResolution {
-    value: string;
-    reason: VisibilityReason;
-}
-export declare function resolveVisibility(config: StoreConfig, note: Note): VisibilityResolution;
-/**
- * context-visibility spec (visibility-contexts-and-wall-verdicts): the set
- * of visibility VALUES a requesting context can see — the one shared
- * primitive every filtered consumer (graph pre-filter, disclosure rung 3)
- * calls instead of raw equality. Identity default: an unconfigured context
- * sees exactly its own value, so unconfigured stores behave exactly as
- * before the mapping existed, and unknown contexts fail closed to it.
- */
-export declare function visibleValuesFor(config: StoreConfig, context: string): readonly string[];
-/** Whether `context` can see a note whose resolved visibility is `value`. */
-export declare function canSee(config: StoreConfig, context: string, value: string): boolean;
-//# sourceMappingURL=visibility.d.ts.map

package/dist/core/notes/visibility.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"visibility.d.ts","sourceRoot":"","sources":["../../../src/core/notes/visibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAExF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,oBAAoB,CAavF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAExF;AAED,6EAA6E;AAC7E,wBAAgB,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnF"}