github-router 0.3.292 → 0.3.293

package/dist/{gate-discovery-Bjar5dgv.js.map → gate-discovery-C30rfnyo.js.map}

@@ -1 +1 @@
-{"version":3,"file":"gate-discovery-Bjar5dgv.js","names":["fs","nodePath","fs","nodePath"],"sources":["../src/lib/orchestration/harness-parse.ts","../src/lib/orchestration/gate-discovery.ts"],"sourcesContent":["/**\n * Deterministic, language-agnostic harness PARSER for the structural Stop-gate.\n *\n * The gate runs a repo's own checks (typecheck/lint/test/build) when the agent\n * tries to finish. Historically it only auto-enabled for Bun/TS repos via a\n * hard-coded sealed gate. This module generalizes detection by PARSING the\n * project's own authoritative config — `package.json` scripts, CI `run:` steps,\n * Make/just/task targets, and language manifests — and emitting the canonical\n * check commands it finds.\n *\n * Design properties (a cross-lab panel chose a parser over a model for these):\n *   - EVIDENCE-PINNED BY CONSTRUCTION: every emitted command is either lifted\n *     verbatim from a parsed source file (a package.json script, a CI `run:`\n *     line, a Make target invocation) or is a fixed canonical manifest command\n *     for a detected ecosystem (`cargo check`, `go vet ./...`). The parser never\n *     invents a command, so it has no hallucination / prompt-injection surface.\n *   - PURE + DETERMINISTIC: a function of the repo's files + the live PATH. The\n *     runtime Stop hook re-derives it at each stop (no cache), so it always\n *     reflects the current tree and fails open for free when a tool vanished.\n *   - SHELL-SAFE: `liveExec` runs `command.trim().split(/\\s+/)` (naive argv\n *     split, no shell), so every emitted command is validated to be plain\n *     space-separated tokens with no shell operators and no `%` (cmd.exe quoting\n *     throws on `%`). See `isSafeCommand`.\n *\n * This is consumed ONLY by the local Stop hook. The sealed-gate kernel\n * (`run_workflow`) is never fed a parsed command — `GateDescriptor.kind` is\n * `\"parsed\"`, never a sealed id, and `sealedGateIds()` is unchanged.\n */\n\nimport { createHash } from \"node:crypto\"\nimport { existsSync, promises as fs } from \"node:fs\"\nimport nodePath from \"node:path\"\n\nimport { resolveExecutable } from \"~/lib/exec\"\n\nimport { resolveSealedGate } from \"./gate-registry\"\nimport { type CheckSpec } from \"./gate-runner\"\n\n/** Canonical check ids — stable across ecosystems so baseline isolation and the\n *  selector key on the same names regardless of language. `build` is deliberately\n *  NOT a check: build scripts are too variable in cost to auto-run on every stop\n *  (a full bundle/SEA build is the slow-command / false-red footgun the design\n *  avoids). Compile-checking is covered under `typecheck` (`go vet`, `cargo\n *  check`, `tsc`). */\nexport type CheckId = \"typecheck\" | \"lint\" | \"test\"\n\n/** The fast static checks that are always-on; `test` is opt-in (it runs project\n *  code and can be slow on every stop). */\nconst STATIC_IDS: ReadonlySet<CheckId> = new Set([\"typecheck\", \"lint\"])\n\n/**\n * The resolved gate source for a repo.\n *   - `sealed`     — the bun/TS fast-path (a sealed gate id, byte-identical to\n *                    the legacy behavior; the runtime hook resolves it via the\n *                    sealed registry).\n *   - `parsed`     — deterministic parser output (this module).\n *   - `discovered` — the evidence-pinned model fallback (see `gate-discovery`).\n * `workdir` is the directory the checks run in (the repo/package root where the\n * evidence was found), NOT the Stop payload's cwd — so a monorepo stop from a\n * nested dir still runs the root's checks.\n */\nexport type GateDescriptor =\n  | { kind: \"sealed\"; gateId: string; workdir: string }\n  | { kind: \"parsed\"; checks: CheckSpec[]; ecosystem: string; workdir: string; evidence: string[] }\n  | { kind: \"discovered\"; checks: CheckSpec[]; ecosystem: string; workdir: string; evidence: string[] }\n\ninterface Candidate {\n  id: CheckId\n  command: string\n  /** The source file the command was lifted from (for evidence + messages). */\n  source: string\n}\n\n/** Reject anything that is not a plain, shell-free, `%`-free argv line. This is\n *  the load-bearing guard for `liveExec`'s naive whitespace split. */\nexport function isSafeCommand(command: string): boolean {\n  const c = command.trim()\n  if (c.length === 0 || c.length > 200) return false\n  if (/[\\r\\n]/.test(c)) return false\n  // Each token may contain only these chars: letters/digits and a small set of\n  // path/flag punctuation. This rejects shell metacharacters (; & | < > ( ) $\n  // backtick \" ' * ? ! ^ \\ %), env expansion, and quoting in one shot.\n  const tokens = c.split(/\\s+/).filter(Boolean)\n  if (tokens.length === 0) return false\n  return tokens.every((t) => /^[A-Za-z0-9._/:@=+-]+$/.test(t))\n}\n\n/** First token of a command (the executable), for a PATH-presence probe. */\nfunction firstToken(command: string): string {\n  return command.trim().split(/\\s+/)[0] ?? \"\"\n}\n\n/** True when a command would MUTATE the tree and so must never be a gate: a\n *  `--fix`/`--write` flag or a `:fix`/`:write` script-name suffix (e.g.\n *  `npm run lint:fix`, `eslint --fix`). Whitespace is normalized first so a\n *  tab/double-space can't slip a flag past the scan. Exported + shared with the\n *  discovered-command sanitizer. */\nexport function isMutatingCommand(command: string): boolean {\n  const c = command.trim().replace(/\\s+/g, \" \")\n  if (/(^| )(--fix|--write|-w|--watch|--serve|--interactive|-i)( |=|$)/i.test(c)) return true\n  if (/(^| |:|-)(fix|write)\\b/i.test(c)) return true\n  return false\n}\n\n/** True when the command is safe AND its executable resolves on PATH (a missing\n *  tool → drop the check rather than guarantee a false-red). */\nfunction commandRunnable(command: string): boolean {\n  if (!isSafeCommand(command)) return false\n  return resolveExecutable(firstToken(command), { env: process.env }) !== null\n}\n\nasync function readJsonFile(file: string): Promise<unknown | undefined> {\n  try {\n    return JSON.parse(await fs.readFile(file, \"utf8\")) as unknown\n  } catch {\n    return undefined\n  }\n}\n\nasync function readTextFile(file: string): Promise<string | undefined> {\n  try {\n    return await fs.readFile(file, \"utf8\")\n  } catch {\n    return undefined\n  }\n}\n\n/** package.json `scripts` as a plain string→string map (best-effort). */\nasync function readScripts(root: string): Promise<Record<string, string>> {\n  const pkg = await readJsonFile(nodePath.join(root, \"package.json\"))\n  const scripts = pkg && typeof pkg === \"object\" ? (pkg as { scripts?: unknown }).scripts : undefined\n  const out: Record<string, string> = {}\n  if (scripts && typeof scripts === \"object\") {\n    for (const [k, v] of Object.entries(scripts as Record<string, unknown>)) {\n      if (typeof v === \"string\") out[k] = v\n    }\n  }\n  return out\n}\n\n/** Pick the JS package runner from the lockfile present at the root. */\nfunction nodeRunner(root: string): \"bun\" | \"pnpm\" | \"yarn\" | \"npm\" {\n  if (existsSync(nodePath.join(root, \"bun.lockb\")) || existsSync(nodePath.join(root, \"bun.lock\"))) return \"bun\"\n  if (existsSync(nodePath.join(root, \"pnpm-lock.yaml\"))) return \"pnpm\"\n  if (existsSync(nodePath.join(root, \"yarn.lock\"))) return \"yarn\"\n  return \"npm\"\n}\n\n/** Map a package.json script NAME to a canonical id (read-only checks only — a\n *  `:fix`/`:write` variant mutates the tree and is never a gate). */\nfunction scriptNameToId(name: string): CheckId | null {\n  if (/:(fix|write)$/i.test(name)) return null\n  if (/^(typecheck|type-check|check-types|tsc|types)$/i.test(name)) return \"typecheck\"\n  if (/^(lint|lint:check|eslint)$/i.test(name)) return \"lint\"\n  if (/^test$/i.test(name)) return \"test\"\n  return null\n}\n\nasync function collectNodeChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  if (!existsSync(nodePath.join(root, \"package.json\"))) return []\n  const runner = nodeRunner(root)\n  if (resolveExecutable(runner, { env: process.env }) === null) return []\n  const scripts = await readScripts(root)\n  const out: Candidate[] = []\n  for (const [name] of Object.entries(scripts)) {\n    const id = scriptNameToId(name)\n    if (!id) continue\n    if (id === \"test\" && !includeTests) continue\n    const command = `${runner} run ${name}`\n    if (isSafeCommand(command)) out.push({ id, command, source: \"package.json\" })\n  }\n  return out\n}\n\n/**\n * Best-effort CI gap-filler: scan GitHub Actions / GitLab CI YAML for single-line\n * `run:` static checks (typecheck/lint/build) the project actually runs. We do\n * NOT lift `test` from CI — CI test jobs frequently need services/secrets and\n * would false-red on every stop. Multi-line / scripted `run:` blocks are skipped\n * (they can't be a single argv). Any parse failure yields nothing.\n */\nasync function collectCiChecks(root: string): Promise<Candidate[]> {\n  const files: string[] = []\n  const wfDir = nodePath.join(root, \".github\", \"workflows\")\n  try {\n    for (const name of await fs.readdir(wfDir)) {\n      if (/\\.ya?ml$/i.test(name)) files.push(nodePath.join(wfDir, name))\n    }\n  } catch {\n    /* no workflows dir */\n  }\n  const gitlab = nodePath.join(root, \".gitlab-ci.yml\")\n  if (existsSync(gitlab)) files.push(gitlab)\n  if (files.length === 0) return []\n\n  let parseYaml: (s: string) => unknown\n  try {\n    // Lazy import so the parser module has no hard dep when CI files are absent.\n    ;({ parse: parseYaml } = await import(\"yaml\"))\n  } catch {\n    return []\n  }\n\n  const out: Candidate[] = []\n  const seen = new Set<CheckId>()\n  const classify = (cmd: string): CheckId | null => {\n    if (/\\b(typecheck|type-check|tsc|mypy|pyright)\\b/i.test(cmd)) return \"typecheck\"\n    if (/\\b(lint|eslint|ruff|clippy|golangci|vet)\\b/i.test(cmd)) return \"lint\"\n    return null\n  }\n  const consider = (run: unknown, source: string): void => {\n    if (typeof run !== \"string\") return\n    const cmd = run.trim()\n    if (cmd.includes(\"\\n\")) return // multi-line script block — not a single argv.\n    if (!isSafeCommand(cmd) || isMutatingCommand(cmd) || !commandRunnable(cmd)) return\n    const id = classify(cmd)\n    if (!id || seen.has(id)) return\n    seen.add(id)\n    out.push({ id, command: cmd, source })\n  }\n  // Walk the parsed YAML for any `run:` string anywhere (GH `steps[].run`, GitLab\n  // `<job>.script[]`). A generic deep walk tolerates both schemas + future shapes.\n  const walk = (node: unknown, source: string): void => {\n    if (!node || typeof node !== \"object\") return\n    if (Array.isArray(node)) {\n      for (const v of node) walk(v, source)\n      return\n    }\n    for (const [k, v] of Object.entries(node as Record<string, unknown>)) {\n      if (k === \"run\" && typeof v === \"string\") consider(v, source)\n      else if (k === \"script\") {\n        // GitLab `script:` is a string or string[].\n        if (typeof v === \"string\") consider(v, source)\n        else if (Array.isArray(v)) for (const s of v) consider(s, source)\n      } else walk(v, source)\n    }\n  }\n  for (const f of files) {\n    const text = await readTextFile(f)\n    if (text === undefined) continue\n    try {\n      walk(parseYaml(text), nodePath.relative(root, f) || nodePath.basename(f))\n    } catch {\n      /* unparseable workflow → skip */\n    }\n  }\n  return out\n}\n\n/** Make / just / Taskfile targets matching canonical ids → `<tool> <target>`. */\nasync function collectTaskChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  const out: Candidate[] = []\n  const wantId = (target: string): CheckId | null => scriptNameToId(target)\n  // Makefile / justfile: a line `target:` (Make) or `target:` (just recipe head).\n  for (const [file, tool] of [\n    [\"Makefile\", \"make\"],\n    [\"makefile\", \"make\"],\n    [\"justfile\", \"just\"],\n    [\".justfile\", \"just\"],\n  ] as const) {\n    const text = await readTextFile(nodePath.join(root, file))\n    if (text === undefined) continue\n    if (resolveExecutable(tool, { env: process.env }) === null) continue\n    for (const line of text.split(/\\r?\\n/)) {\n      const m = /^([A-Za-z0-9._-]+)\\s*:/.exec(line)\n      if (!m) continue\n      const id = wantId(m[1])\n      if (!id || (id === \"test\" && !includeTests)) continue\n      const command = `${tool} ${m[1]}`\n      if (isSafeCommand(command)) out.push({ id, command, source: file })\n    }\n  }\n  // Taskfile.yml: top-level `tasks:` keys.\n  const taskfile = [\"Taskfile.yml\", \"Taskfile.yaml\"].map((n) => nodePath.join(root, n)).find((p) => existsSync(p))\n  if (taskfile && resolveExecutable(\"task\", { env: process.env }) !== null) {\n    const text = await readTextFile(taskfile)\n    if (text !== undefined) {\n      try {\n        const { parse } = await import(\"yaml\")\n        const doc = parse(text) as { tasks?: Record<string, unknown> } | undefined\n        for (const name of Object.keys(doc?.tasks ?? {})) {\n          const id = wantId(name)\n          if (!id || (id === \"test\" && !includeTests)) continue\n          const command = `task ${name}`\n          if (isSafeCommand(command)) out.push({ id, command, source: nodePath.basename(taskfile) })\n        }\n      } catch {\n        /* skip */\n      }\n    }\n  }\n  return out\n}\n\nasync function collectRustChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  if (!existsSync(nodePath.join(root, \"Cargo.toml\"))) return []\n  if (resolveExecutable(\"cargo\", { env: process.env }) === null) return []\n  const out: Candidate[] = [{ id: \"typecheck\", command: \"cargo check\", source: \"Cargo.toml\" }]\n  // clippy is a separate component; only emit it if `cargo-clippy` resolves.\n  if (resolveExecutable(\"cargo-clippy\", { env: process.env }) !== null) {\n    out.push({ id: \"lint\", command: \"cargo clippy\", source: \"Cargo.toml\" })\n  }\n  if (includeTests) out.push({ id: \"test\", command: \"cargo test\", source: \"Cargo.toml\" })\n  return out\n}\n\nasync function collectGoChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  if (!existsSync(nodePath.join(root, \"go.mod\"))) return []\n  if (resolveExecutable(\"go\", { env: process.env }) === null) return []\n  // `go vet` compiles + reports suspect constructs — the typecheck-equivalent.\n  const out: Candidate[] = [{ id: \"typecheck\", command: \"go vet ./...\", source: \"go.mod\" }]\n  if (includeTests) out.push({ id: \"test\", command: \"go test ./...\", source: \"go.mod\" })\n  return out\n}\n\nasync function collectPythonChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  const configFiles = [\"pyproject.toml\", \"setup.cfg\", \"pytest.ini\", \"tox.ini\", \"ruff.toml\", \"mypy.ini\"]\n  const present = configFiles.filter((f) => existsSync(nodePath.join(root, f)))\n  if (present.length === 0) return []\n  const evidence = present[0]\n  const out: Candidate[] = []\n  const configText = (await readTextFile(nodePath.join(root, present[0]))) ?? \"\"\n  const mentions = (tool: string): boolean => present.some((f) => f.startsWith(tool)) || configText.includes(tool)\n  // Only emit a Python tool when BOTH config evidence AND the tool resolve.\n  if (mentions(\"mypy\") && resolveExecutable(\"mypy\", { env: process.env }) !== null) {\n    out.push({ id: \"typecheck\", command: \"mypy .\", source: evidence })\n  }\n  if (mentions(\"ruff\") && resolveExecutable(\"ruff\", { env: process.env }) !== null) {\n    out.push({ id: \"lint\", command: \"ruff check .\", source: evidence })\n  }\n  if (includeTests && (mentions(\"pytest\") || existsSync(nodePath.join(root, \"pytest.ini\")))) {\n    if (resolveExecutable(\"pytest\", { env: process.env }) !== null) {\n      out.push({ id: \"test\", command: \"pytest -q\", source: evidence })\n    }\n  }\n  return out\n}\n\n/** Pick the first runnable candidate per id, in source-priority order. */\nfunction pickByPriority(candidates: Candidate[]): { checks: CheckSpec[]; evidence: string[] } {\n  const byId = new Map<CheckId, Candidate>()\n  for (const c of candidates) {\n    if (!byId.has(c.id) && commandRunnable(c.command)) byId.set(c.id, c)\n  }\n  const order: CheckId[] = [\"typecheck\", \"lint\", \"test\"]\n  const checks: CheckSpec[] = []\n  const evidence = new Set<string>()\n  for (const id of order) {\n    const c = byId.get(id)\n    if (c) {\n      checks.push({ id: c.id, command: c.command })\n      evidence.add(c.source)\n    }\n  }\n  return { checks, evidence: [...evidence] }\n}\n\n/**\n * Resolve the gate descriptor for an already-resolved repo `root`.\n *   1. bun/TS sealed fast-path — byte-identical to the legacy `detectHarnessGateId`\n *      (bun on PATH + a `typecheck` script → sealed `default-ci`/`typecheck-test`).\n *   2. else the deterministic parser: collect candidates from package.json\n *      scripts (primary, self-contained), Make/just/task, language manifests, and\n *      a CI gap-filler for static checks; pick one per id by priority. A `parsed`\n *      descriptor is returned only when at least one STATIC check survives (a\n *      test-only set would either be off-by-default or risk false-reds).\n *   3. else null (the launcher prints why and the gate stays off).\n */\nexport async function parseGateDescriptor(\n  root: string,\n  opts: { includeTests: boolean },\n): Promise<GateDescriptor | null> {\n  // (1) bun/TS sealed parity.\n  if (resolveExecutable(\"bun\", { env: process.env }) !== null) {\n    const scripts = await readScripts(root)\n    if (typeof scripts.typecheck === \"string\") {\n      const gateId = typeof scripts.lint === \"string\" ? \"default-ci\" : \"typecheck-test\"\n      return { kind: \"sealed\", gateId, workdir: root }\n    }\n  }\n\n  // (2) deterministic parser. package.json scripts first (self-contained), then\n  //     task runners + manifests, then a CI gap-filler for static checks.\n  const groups = await Promise.all([\n    collectNodeChecks(root, opts.includeTests),\n    collectTaskChecks(root, opts.includeTests),\n    collectRustChecks(root, opts.includeTests),\n    collectGoChecks(root, opts.includeTests),\n    collectPythonChecks(root, opts.includeTests),\n    collectCiChecks(root),\n  ])\n  const candidates = groups.flat()\n  if (candidates.length === 0) return null\n\n  const ecosystem =\n    candidates.find((c) => c.source === \"package.json\") ? \"node\"\n    : candidates.find((c) => c.source === \"Cargo.toml\") ? \"rust\"\n    : candidates.find((c) => c.source === \"go.mod\") ? \"go\"\n    : candidates.find((c) => /^(pyproject|setup|pytest|tox|ruff|mypy)/.test(c.source)) ? \"python\"\n    : candidates.find((c) => /^(Makefile|makefile|justfile|\\.justfile|Taskfile)/.test(c.source)) ? \"make\"\n    : \"ci\"\n\n  const { checks, evidence } = pickByPriority(candidates)\n  if (checks.length === 0) return null\n  // Require at least one STATIC check (typecheck/lint/build) unless the caller\n  // opted into running the full test suite — a test-only set is otherwise either\n  // off-by-default or a slow/false-red risk on every stop.\n  const hasStatic = checks.some((c) => STATIC_IDS.has(c.id as CheckId))\n  if (!hasStatic && !opts.includeTests) return null\n  return { kind: \"parsed\", checks, ecosystem, workdir: root, evidence }\n}\n\n/** The checks a descriptor runs: a sealed descriptor resolves its sealed command\n *  set from the registry; parsed/discovered carry their own. Fresh array. */\nexport function checksForDescriptor(d: GateDescriptor): CheckSpec[] {\n  if (d.kind === \"sealed\") {\n    const sealed = resolveSealedGate(d.gateId)\n    return sealed ? sealed.checks.map((c) => ({ id: c.id, command: c.command })) : []\n  }\n  return d.checks.map((c) => ({ id: c.id, command: c.command }))\n}\n\n/** A stable key over a descriptor's effective check set, for baseline isolation.\n *  Sealed descriptors key on their gate id (preserving legacy baseline keys);\n *  parsed/discovered key on the canonicalized (id,command) set, so a changed\n *  command set yields a fresh baseline instead of masking/inventing regressions. */\nexport function descriptorHash(d: GateDescriptor): string {\n  if (d.kind === \"sealed\") return `sealed:${d.gateId}`\n  const canon = [...d.checks]\n    .map((c) => `${c.id}\u0000${c.command.trim().replace(/\\s+/g, \" \")}`)\n    .sort()\n    .join(\"\u0001\")\n  return `${d.kind}:${createHash(\"sha256\").update(canon).digest(\"hex\").slice(0, 32)}`\n}\n","/**\n * Evidence-pinned model FALLBACK for the structural Stop-gate — the last resort\n * when the deterministic parser (`harness-parse`) finds no runnable checks.\n *\n * A read-only worker reads the repo's own config/docs and proposes the canonical\n * check commands. Two guards keep this safe despite being model-authored:\n *   1. SANITIZE — `sanitizeDiscoveredCheck` rejects shell metacharacters (so a\n *      command can never chain/redirect/expand), destructive/stateful verbs,\n *      interactive/watch shapes, and an executable that isn't on PATH. What\n *      survives is a single plain argv line, safe for `liveExec`'s naive split.\n *   2. EVIDENCE-PIN — a surviving command must appear (whitespace-normalized)\n *      VERBATIM in one of the collected source files. The model cannot invent a\n *      command or be prompt-injected into emitting one that isn't already a real\n *      command in the repo (and a real command in a user-trusted repo is the\n *      same authority the existing gate already runs).\n *\n * Discovery runs ONCE at launch and the result is cached per (repoFingerprint,\n * sourcesHash) in a human-readable record. The runtime Stop hook only READS the\n * cached record (no model call at stop). This is consumed ONLY by the local Stop\n * hook; the sealed-gate kernel never sees a discovered command.\n */\n\nimport { createHash } from \"node:crypto\"\nimport { existsSync, promises as fs } from \"node:fs\"\nimport nodePath from \"node:path\"\n\nimport { resolveExecutable } from \"~/lib/exec\"\nimport { PATHS } from \"~/lib/paths\"\n\nimport { type CheckSpec } from \"./gate-runner\"\nimport { isMutatingCommand, isSafeCommand, type CheckId } from \"./harness-parse\"\nimport { repoFingerprint, repoRoot } from \"./stop-gate-policy\"\n\n/** The allowlist of files the discovery worker is steered to read — config +\n *  docs that legitimately describe how to check a project. Secret files are\n *  additionally blocked at the worker IO layer (`.env*`/`*.pem`/`id_*`/…). */\nconst SIGNAL_FILES: ReadonlyArray<string> = [\n  \"package.json\",\n  \"Makefile\",\n  \"makefile\",\n  \"justfile\",\n  \".justfile\",\n  \"Taskfile.yml\",\n  \"Taskfile.yaml\",\n  \"Cargo.toml\",\n  \"go.mod\",\n  \"pyproject.toml\",\n  \"setup.cfg\",\n  \"tox.ini\",\n  \"pytest.ini\",\n  \"CONTRIBUTING.md\",\n  \"CONTRIBUTING\",\n  \"README.md\",\n  \"README\",\n  \"DEVELOPING.md\",\n  \"mix.exs\",\n  \"build.gradle\",\n  \"pom.xml\",\n  \"composer.json\",\n]\nconst SIGNAL_DIRS: ReadonlyArray<string> = [\".github/workflows\"]\n\n/** A discovered check command after sanitization + evidence-pinning. */\nexport interface DiscoveredRecord {\n  root: string\n  fingerprint: string\n  sourcesHash: string\n  discoveredAt: string\n  model: string\n  ecosystem: string\n  checks: CheckSpec[]\n  confidence: string\n  evidence: string[]\n}\n\nconst MAX_SIGNAL_BYTES = 64 * 1024\n/** Global caps so a repo with many workflow files can't inflate discovery /\n *  hashing cost: at most this many files and this much total text. */\nconst MAX_SIGNAL_FILES = 40\nconst MAX_TOTAL_SIGNAL_BYTES = 512 * 1024\n\n/** Words that mark a command as destructive, stateful, or non-terminating — a\n *  \"check\" must never do any of these. (Shell operators are already rejected by\n *  `isSafeCommand`, so chaining can't smuggle them past this word scan.) */\nconst DENY_WORD =\n  /\\b(rm|rmdir|mv|dd|mkfs|sudo|chmod|chown|publish|push|deploy|migrate|kubectl|terraform|docker|curl|wget|ssh|scp|rsync|nc|eval|npm i|npm install|yarn add|pip install|apt|brew|watch|serve|repl|dev|start)\\b/i\n\n/**\n * True when `command` is safe to auto-run as a check: a plain argv line (no\n * shell metacharacters), no destructive/stateful verb, no mutating/interactive\n * shape, and its executable resolves on PATH. The deny-word scan runs on a\n * whitespace-NORMALIZED copy so a tab / double-space can't split `npm  install`\n * past the literal-space patterns.\n */\nexport function sanitizeDiscoveredCheck(command: string): boolean {\n  if (!isSafeCommand(command)) return false\n  const norm = normalizeWs(command)\n  if (DENY_WORD.test(norm)) return false\n  if (isMutatingCommand(norm)) return false // --fix/--write/--watch + :fix/:write scripts\n  const first = norm.split(\" \")[0] ?? \"\"\n  return resolveExecutable(first, { env: process.env }) !== null\n}\n\nfunction normalizeWs(s: string): string {\n  return s.replace(/\\s+/g, \" \").trim()\n}\n\n/** Collect the text of the allowlisted signal files (capped), for evidence-pin +\n *  the sources hash. Returns the concatenated text and the relative file list. */\nasync function collectSignals(root: string): Promise<{ text: string; files: string[] }> {\n  const parts: string[] = []\n  const files: string[] = []\n  let total = 0\n  const readCapped = async (abs: string, rel: string): Promise<void> => {\n    if (files.length >= MAX_SIGNAL_FILES || total >= MAX_TOTAL_SIGNAL_BYTES) return\n    try {\n      const raw = await fs.readFile(abs, \"utf8\")\n      const slice = raw.length > MAX_SIGNAL_BYTES ? raw.slice(0, MAX_SIGNAL_BYTES) : raw\n      parts.push(slice)\n      files.push(rel)\n      total += slice.length\n    } catch {\n      /* unreadable → skip */\n    }\n  }\n  for (const f of SIGNAL_FILES) {\n    const abs = nodePath.join(root, f)\n    if (existsSync(abs)) await readCapped(abs, f)\n  }\n  for (const d of SIGNAL_DIRS) {\n    const dir = nodePath.join(root, d)\n    try {\n      for (const name of await fs.readdir(dir)) {\n        if (/\\.(ya?ml)$/i.test(name)) await readCapped(nodePath.join(dir, name), nodePath.join(d, name))\n      }\n    } catch {\n      /* no dir */\n    }\n  }\n  return { text: parts.join(\"\\n\"), files }\n}\n\n/** A freshness hash over the signal files' contents + relative paths. A change\n *  to how the project checks itself flips this → re-discovery on next launch. */\nexport async function sourcesHash(root: string): Promise<string> {\n  const { text, files } = await collectSignals(root)\n  return createHash(\"sha256\")\n    .update(files.sort().join(\"\\n\"))\n    .update(\"\\0\")\n    .update(text)\n    .digest(\"hex\")\n}\n\nfunction discoveredDir(): string {\n  return nodePath.join(PATHS.APP_DIR, \"stop-gate\", \"discovered\")\n}\nfunction recordPathFor(root: string): string {\n  return nodePath.join(discoveredDir(), createHash(\"sha256\").update(nodePath.resolve(root)).digest(\"hex\").slice(0, 32))\n}\n\n/** Read the cached discovered record for `root`, verifying it still matches the\n *  live repo identity AND the live sources hash. Any mismatch / unreadable /\n *  empty-checks record → null (re-discover or stay off; never run a stale set). */\nexport async function readDiscoveredGate(root: string): Promise<DiscoveredRecord | null> {\n  let rec: DiscoveredRecord\n  try {\n    rec = JSON.parse(await fs.readFile(recordPathFor(root), \"utf8\")) as DiscoveredRecord\n  } catch {\n    return null\n  }\n  if (!rec || !Array.isArray(rec.checks) || rec.checks.length === 0) return null\n  const fp = await repoFingerprint(root).catch(() => \"\")\n  if (fp.length === 0 || fp !== rec.fingerprint) return null // identity drift → deny.\n  const sh = await sourcesHash(root).catch(() => \"\")\n  if (sh.length === 0 || sh !== rec.sourcesHash) return null // config changed → stale.\n  // Re-validate id AND re-sanitize the command at read time (defense-in-depth\n  // against a tampered/corrupt record).\n  const checks = rec.checks.filter(\n    (c) => c && typeof c.id === \"string\" && VALID_IDS.has(c.id) && typeof c.command === \"string\" && sanitizeDiscoveredCheck(c.command),\n  )\n  if (checks.length === 0) return null\n  return { ...rec, checks }\n}\n\nexport async function writeDiscoveredGate(rec: DiscoveredRecord): Promise<void> {\n  await fs.mkdir(discoveredDir(), { recursive: true })\n  const tmp = `${recordPathFor(rec.root)}.${process.pid}.tmp`\n  await fs.writeFile(tmp, `${JSON.stringify(rec, null, 2)}\\n`, { mode: 0o600 })\n  await fs.rename(tmp, recordPathFor(rec.root))\n}\n\nconst DISCOVERY_PROMPT = (files: string[]): string =>\n  `You are configuring an automated pre-finish CHECK gate for this repository. Read ONLY these `\n  + `already-present config/doc files to learn how the project checks itself: ${files.join(\", \")}. `\n  + `Identify the canonical FAST static check command (typecheck and/or lint) and, if obvious, the test `\n  + `command. Rules: (1) return a command ONLY if it appears VERBATIM in one of those files — never invent `\n  + `one; (2) commands must be non-interactive, self-terminating, read-only verification (NO install / `\n  + `publish / push / deploy / migrate / format-in-place / watch / serve / dev-server / delete); (3) at most `\n  + `3 commands; (4) if unsure, return an empty list. Respond with ONLY a fenced \\`\\`\\`json block of the shape `\n  + `{\"ecosystem\":\"<label>\",\"checks\":[{\"id\":\"typecheck|lint|test\",\"command\":\"<single-line command>\"}],`\n  + `\"confidence\":\"high|low\"} and NOTHING else.`\n\ninterface DiscoverResult {\n  ecosystem: string\n  checks: CheckSpec[]\n  confidence: string\n  evidence: string[]\n}\n\n/** Extract the first fenced/bare JSON object from the worker's text. */\nfunction extractJson(text: string): unknown {\n  const fenced = /```(?:json)?\\s*([\\s\\S]*?)```/i.exec(text)\n  const body = fenced ? fenced[1] : text\n  const start = body.indexOf(\"{\")\n  const end = body.lastIndexOf(\"}\")\n  if (start < 0 || end <= start) return undefined\n  try {\n    return JSON.parse(body.slice(start, end + 1)) as unknown\n  } catch {\n    return undefined\n  }\n}\n\nconst VALID_IDS: ReadonlySet<string> = new Set<CheckId>([\"typecheck\", \"lint\", \"test\"])\n\n/**\n * Sanitize + EVIDENCE-PIN the model's raw checks against the collected source\n * text. Pure (no IO) so it is unit-testable without the worker. A check survives\n * only if: its id is canonical, it isn't a `test` while tests are off, its id\n * hasn't already been taken, it passes `sanitizeDiscoveredCheck`, AND its command\n * appears (whitespace-normalized) VERBATIM in `evidenceText`. The evidence-pin is\n * the load-bearing guard: the model cannot invent a command or be prompt-injected\n * into one that isn't already a real command in the (user-trusted) repo.\n */\nexport function filterDiscoveredChecks(\n  rawChecks: unknown,\n  evidenceText: string,\n  includeTests: boolean,\n): CheckSpec[] {\n  const evidenceNorm = normalizeWs(evidenceText)\n  const seen = new Set<string>()\n  const checks: CheckSpec[] = []\n  for (const c of Array.isArray(rawChecks) ? rawChecks : []) {\n    if (!c || typeof c !== \"object\") continue\n    const id = (c as { id?: unknown }).id\n    const command = (c as { command?: unknown }).command\n    if (typeof id !== \"string\" || !VALID_IDS.has(id)) continue\n    if (typeof command !== \"string\") continue\n    if (id === \"test\" && !includeTests) continue\n    if (seen.has(id)) continue\n    if (!sanitizeDiscoveredCheck(command)) continue\n    if (!evidenceNorm.includes(normalizeWs(command))) continue\n    seen.add(id)\n    checks.push({ id, command: command.trim() })\n  }\n  return checks\n}\n\n/**\n * Run the read-only worker to discover check commands for `cwd`. Returns the\n * sanitized + evidence-pinned result, or null (worker unavailable / errored /\n * nothing survived). NEVER throws.\n */\nexport async function discoverGateCommands(\n  cwd: string,\n  opts: { signal?: AbortSignal; includeTests: boolean },\n): Promise<DiscoverResult | null> {\n  const root = await repoRoot(cwd).catch(() => cwd)\n  const { text: evidenceText, files } = await collectSignals(root)\n  if (files.length === 0) return null\n\n  let result: { text: string; isError?: boolean }\n  try {\n    // Lazy-import the heavy worker-agent engine ONLY when discovery actually\n    // runs — keeping it out of the module-load graph of `claude.ts` (which\n    // imports this module), so the mock.module-isolated CLI tests don't deadlock\n    // pulling the Pi runtime at load time.\n    const { runWorkerAgent } = await import(\"~/lib/worker-agent/engine\")\n    // Discovery is advisory setup, not a verified workflow producer/checker,\n    // so honoring the operator's explore default here is intentional.\n    result = await runWorkerAgent({\n      mode: \"explore\",\n      workspace: root,\n      prompt: DISCOVERY_PROMPT(files),\n      signal: opts.signal,\n    })\n  } catch {\n    return null\n  }\n  if (result.isError) return null\n  const parsed = extractJson(result.text)\n  if (!parsed || typeof parsed !== \"object\") return null\n  const obj = parsed as { ecosystem?: unknown; checks?: unknown; confidence?: unknown }\n  const checks = filterDiscoveredChecks(obj.checks, evidenceText, opts.includeTests)\n  if (checks.length === 0) return null\n  const ecosystem = typeof obj.ecosystem === \"string\" && obj.ecosystem.length > 0 ? obj.ecosystem : \"discovered\"\n  const confidence = typeof obj.confidence === \"string\" ? obj.confidence : \"low\"\n  return { ecosystem, checks, confidence, evidence: files }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDA,MAAM,6BAAmC,IAAI,IAAI,CAAC,aAAa,MAAM,CAAC;;;AA2BtE,SAAgB,cAAc,SAA0B;CACtD,MAAM,IAAI,QAAQ,KAAK;CACvB,IAAI,EAAE,WAAW,KAAK,EAAE,SAAS,KAAK,OAAO;CAC7C,IAAI,SAAS,KAAK,CAAC,GAAG,OAAO;CAI7B,MAAM,SAAS,EAAE,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO;CAC5C,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,OAAO,OAAO,OAAO,MAAM,yBAAyB,KAAK,CAAC,CAAC;AAC7D;;AAGA,SAAS,WAAW,SAAyB;CAC3C,OAAO,QAAQ,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;AAC3C;;;;;;AAOA,SAAgB,kBAAkB,SAA0B;CAC1D,MAAM,IAAI,QAAQ,KAAK,CAAC,CAAC,QAAQ,QAAQ,GAAG;CAC5C,IAAI,mEAAmE,KAAK,CAAC,GAAG,OAAO;CACvF,IAAI,0BAA0B,KAAK,CAAC,GAAG,OAAO;CAC9C,OAAO;AACT;;;AAIA,SAAS,gBAAgB,SAA0B;CACjD,IAAI,CAAC,cAAc,OAAO,GAAG,OAAO;CACpC,OAAO,kBAAkB,WAAW,OAAO,GAAG,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM;AAC1E;AAEA,eAAe,aAAa,MAA4C;CACtE,IAAI;EACF,OAAO,KAAK,MAAM,MAAMA,SAAG,SAAS,MAAM,MAAM,CAAC;CACnD,QAAQ;EACN;CACF;AACF;AAEA,eAAe,aAAa,MAA2C;CACrE,IAAI;EACF,OAAO,MAAMA,SAAG,SAAS,MAAM,MAAM;CACvC,QAAQ;EACN;CACF;AACF;;AAGA,eAAe,YAAY,MAA+C;CACxE,MAAM,MAAM,MAAM,aAAaC,KAAS,KAAK,MAAM,cAAc,CAAC;CAClE,MAAM,UAAU,OAAO,OAAO,QAAQ,WAAY,IAA8B,UAAU,KAAA;CAC1F,MAAM,MAA8B,CAAC;CACrC,IAAI,WAAW,OAAO,YAAY,UAC3B;OAAA,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,OAAkC,GACpE,IAAI,OAAO,MAAM,UAAU,IAAI,KAAK;CAAA;CAGxC,OAAO;AACT;;AAGA,SAAS,WAAW,MAA+C;CACjE,IAAI,WAAWA,KAAS,KAAK,MAAM,WAAW,CAAC,KAAK,WAAWA,KAAS,KAAK,MAAM,UAAU,CAAC,GAAG,OAAO;CACxG,IAAI,WAAWA,KAAS,KAAK,MAAM,gBAAgB,CAAC,GAAG,OAAO;CAC9D,IAAI,WAAWA,KAAS,KAAK,MAAM,WAAW,CAAC,GAAG,OAAO;CACzD,OAAO;AACT;;;AAIA,SAAS,eAAe,MAA8B;CACpD,IAAI,iBAAiB,KAAK,IAAI,GAAG,OAAO;CACxC,IAAI,kDAAkD,KAAK,IAAI,GAAG,OAAO;CACzE,IAAI,8BAA8B,KAAK,IAAI,GAAG,OAAO;CACrD,IAAI,UAAU,KAAK,IAAI,GAAG,OAAO;CACjC,OAAO;AACT;AAEA,eAAe,kBAAkB,MAAc,cAA6C;CAC1F,IAAI,CAAC,WAAWA,KAAS,KAAK,MAAM,cAAc,CAAC,GAAG,OAAO,CAAC;CAC9D,MAAM,SAAS,WAAW,IAAI;CAC9B,IAAI,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC;CACtE,MAAM,UAAU,MAAM,YAAY,IAAI;CACtC,MAAM,MAAmB,CAAC;CAC1B,KAAK,MAAM,CAAC,SAAS,OAAO,QAAQ,OAAO,GAAG;EAC5C,MAAM,KAAK,eAAe,IAAI;EAC9B,IAAI,CAAC,IAAI;EACT,IAAI,OAAO,UAAU,CAAC,cAAc;EACpC,MAAM,UAAU,GAAG,OAAO,OAAO;EACjC,IAAI,cAAc,OAAO,GAAG,IAAI,KAAK;GAAE;GAAI;GAAS,QAAQ;EAAe,CAAC;CAC9E;CACA,OAAO;AACT;;;;;;;;AASA,eAAe,gBAAgB,MAAoC;CACjE,MAAM,QAAkB,CAAC;CACzB,MAAM,QAAQA,KAAS,KAAK,MAAM,WAAW,WAAW;CACxD,IAAI;EACF,KAAK,MAAM,QAAQ,MAAMD,SAAG,QAAQ,KAAK,GACvC,IAAI,YAAY,KAAK,IAAI,GAAG,MAAM,KAAKC,KAAS,KAAK,OAAO,IAAI,CAAC;CAErE,QAAQ,CAER;CACA,MAAM,SAASA,KAAS,KAAK,MAAM,gBAAgB;CACnD,IAAI,WAAW,MAAM,GAAG,MAAM,KAAK,MAAM;CACzC,IAAI,MAAM,WAAW,GAAG,OAAO,CAAC;CAEhC,IAAI;CACJ,IAAI;EAED,CAAC,CAAE,OAAO,aAAc,MAAM,OAAO;CACxC,QAAQ;EACN,OAAO,CAAC;CACV;CAEA,MAAM,MAAmB,CAAC;CAC1B,MAAM,uBAAO,IAAI,IAAa;CAC9B,MAAM,YAAY,QAAgC;EAChD,IAAI,+CAA+C,KAAK,GAAG,GAAG,OAAO;EACrE,IAAI,8CAA8C,KAAK,GAAG,GAAG,OAAO;EACpE,OAAO;CACT;CACA,MAAM,YAAY,KAAc,WAAyB;EACvD,IAAI,OAAO,QAAQ,UAAU;EAC7B,MAAM,MAAM,IAAI,KAAK;EACrB,IAAI,IAAI,SAAS,IAAI,GAAG;EACxB,IAAI,CAAC,cAAc,GAAG,KAAK,kBAAkB,GAAG,KAAK,CAAC,gBAAgB,GAAG,GAAG;EAC5E,MAAM,KAAK,SAAS,GAAG;EACvB,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,GAAG;EACzB,KAAK,IAAI,EAAE;EACX,IAAI,KAAK;GAAE;GAAI,SAAS;GAAK;EAAO,CAAC;CACvC;CAGA,MAAM,QAAQ,MAAe,WAAyB;EACpD,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;EACvC,IAAI,MAAM,QAAQ,IAAI,GAAG;GACvB,KAAK,MAAM,KAAK,MAAM,KAAK,GAAG,MAAM;GACpC;EACF;EACA,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,IAA+B,GACjE,IAAI,MAAM,SAAS,OAAO,MAAM,UAAU,SAAS,GAAG,MAAM;OACvD,IAAI,MAAM,UAET;OAAA,OAAO,MAAM,UAAU,SAAS,GAAG,MAAM;QACxC,IAAI,MAAM,QAAQ,CAAC,GAAG,KAAK,MAAM,KAAK,GAAG,SAAS,GAAG,MAAM;EAAA,OAC3D,KAAK,GAAG,MAAM;CAEzB;CACA,KAAK,MAAM,KAAK,OAAO;EACrB,MAAM,OAAO,MAAM,aAAa,CAAC;EACjC,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI;GACF,KAAK,UAAU,IAAI,GAAGA,KAAS,SAAS,MAAM,CAAC,KAAKA,KAAS,SAAS,CAAC,CAAC;EAC1E,QAAQ,CAER;CACF;CACA,OAAO;AACT;;AAGA,eAAe,kBAAkB,MAAc,cAA6C;CAC1F,MAAM,MAAmB,CAAC;CAC1B,MAAM,UAAU,WAAmC,eAAe,MAAM;CAExE,KAAK,MAAM,CAAC,MAAM,SAAS;EACzB,CAAC,YAAY,MAAM;EACnB,CAAC,YAAY,MAAM;EACnB,CAAC,YAAY,MAAM;EACnB,CAAC,aAAa,MAAM;CACtB,GAAY;EACV,MAAM,OAAO,MAAM,aAAaA,KAAS,KAAK,MAAM,IAAI,CAAC;EACzD,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,kBAAkB,MAAM,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM;EAC5D,KAAK,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG;GACtC,MAAM,IAAI,yBAAyB,KAAK,IAAI;GAC5C,IAAI,CAAC,GAAG;GACR,MAAM,KAAK,OAAO,EAAE,EAAE;GACtB,IAAI,CAAC,MAAO,OAAO,UAAU,CAAC,cAAe;GAC7C,MAAM,UAAU,GAAG,KAAK,GAAG,EAAE;GAC7B,IAAI,cAAc,OAAO,GAAG,IAAI,KAAK;IAAE;IAAI;IAAS,QAAQ;GAAK,CAAC;EACpE;CACF;CAEA,MAAM,WAAW,CAAC,gBAAgB,eAAe,CAAC,CAAC,KAAK,MAAMA,KAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,WAAW,CAAC,CAAC;CAC/G,IAAI,YAAY,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM;EACxE,MAAM,OAAO,MAAM,aAAa,QAAQ;EACxC,IAAI,SAAS,KAAA,GACX,IAAI;GACF,MAAM,EAAE,UAAU,MAAM,OAAO;GAC/B,MAAM,MAAM,MAAM,IAAI;GACtB,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG;IAChD,MAAM,KAAK,OAAO,IAAI;IACtB,IAAI,CAAC,MAAO,OAAO,UAAU,CAAC,cAAe;IAC7C,MAAM,UAAU,QAAQ;IACxB,IAAI,cAAc,OAAO,GAAG,IAAI,KAAK;KAAE;KAAI;KAAS,QAAQA,KAAS,SAAS,QAAQ;IAAE,CAAC;GAC3F;EACF,QAAQ,CAER;CAEJ;CACA,OAAO;AACT;AAEA,eAAe,kBAAkB,MAAc,cAA6C;CAC1F,IAAI,CAAC,WAAWA,KAAS,KAAK,MAAM,YAAY,CAAC,GAAG,OAAO,CAAC;CAC5D,IAAI,kBAAkB,SAAS,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC;CACvE,MAAM,MAAmB,CAAC;EAAE,IAAI;EAAa,SAAS;EAAe,QAAQ;CAAa,CAAC;CAE3F,IAAI,kBAAkB,gBAAgB,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAC9D,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAgB,QAAQ;CAAa,CAAC;CAExE,IAAI,cAAc,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAc,QAAQ;CAAa,CAAC;CACtF,OAAO;AACT;AAEA,eAAe,gBAAgB,MAAc,cAA6C;CACxF,IAAI,CAAC,WAAWA,KAAS,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,CAAC;CACxD,IAAI,kBAAkB,MAAM,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC;CAEpE,MAAM,MAAmB,CAAC;EAAE,IAAI;EAAa,SAAS;EAAgB,QAAQ;CAAS,CAAC;CACxF,IAAI,cAAc,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAiB,QAAQ;CAAS,CAAC;CACrF,OAAO;AACT;AAEA,eAAe,oBAAoB,MAAc,cAA6C;CAE5F,MAAM,UAAU;EADK;EAAkB;EAAa;EAAc;EAAW;EAAa;CAChE,CAAC,CAAC,QAAQ,MAAM,WAAWA,KAAS,KAAK,MAAM,CAAC,CAAC,CAAC;CAC5E,IAAI,QAAQ,WAAW,GAAG,OAAO,CAAC;CAClC,MAAM,WAAW,QAAQ;CACzB,MAAM,MAAmB,CAAC;CAC1B,MAAM,aAAc,MAAM,aAAaA,KAAS,KAAK,MAAM,QAAQ,EAAE,CAAC,KAAM;CAC5E,MAAM,YAAY,SAA0B,QAAQ,MAAM,MAAM,EAAE,WAAW,IAAI,CAAC,KAAK,WAAW,SAAS,IAAI;CAE/G,IAAI,SAAS,MAAM,KAAK,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAC1E,IAAI,KAAK;EAAE,IAAI;EAAa,SAAS;EAAU,QAAQ;CAAS,CAAC;CAEnE,IAAI,SAAS,MAAM,KAAK,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAC1E,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAgB,QAAQ;CAAS,CAAC;CAEpE,IAAI,iBAAiB,SAAS,QAAQ,KAAK,WAAWA,KAAS,KAAK,MAAM,YAAY,CAAC,IACjF;MAAA,kBAAkB,UAAU,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MACxD,IAAI,KAAK;GAAE,IAAI;GAAQ,SAAS;GAAa,QAAQ;EAAS,CAAC;CAAA;CAGnE,OAAO;AACT;;AAGA,SAAS,eAAe,YAAsE;CAC5F,MAAM,uBAAO,IAAI,IAAwB;CACzC,KAAK,MAAM,KAAK,YACd,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,gBAAgB,EAAE,OAAO,GAAG,KAAK,IAAI,EAAE,IAAI,CAAC;CAErE,MAAM,QAAmB;EAAC;EAAa;EAAQ;CAAM;CACrD,MAAM,SAAsB,CAAC;CAC7B,MAAM,2BAAW,IAAI,IAAY;CACjC,KAAK,MAAM,MAAM,OAAO;EACtB,MAAM,IAAI,KAAK,IAAI,EAAE;EACrB,IAAI,GAAG;GACL,OAAO,KAAK;IAAE,IAAI,EAAE;IAAI,SAAS,EAAE;GAAQ,CAAC;GAC5C,SAAS,IAAI,EAAE,MAAM;EACvB;CACF;CACA,OAAO;EAAE;EAAQ,UAAU,CAAC,GAAG,QAAQ;CAAE;AAC3C;;;;;;;;;;;;AAaA,eAAsB,oBACpB,MACA,MACgC;CAEhC,IAAI,kBAAkB,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM;EAC3D,MAAM,UAAU,MAAM,YAAY,IAAI;EACtC,IAAI,OAAO,QAAQ,cAAc,UAE/B,OAAO;GAAE,MAAM;GAAU,QADV,OAAO,QAAQ,SAAS,WAAW,eAAe;GAChC,SAAS;EAAK;CAEnD;CAYA,MAAM,cAAa,MARE,QAAQ,IAAI;EAC/B,kBAAkB,MAAM,KAAK,YAAY;EACzC,kBAAkB,MAAM,KAAK,YAAY;EACzC,kBAAkB,MAAM,KAAK,YAAY;EACzC,gBAAgB,MAAM,KAAK,YAAY;EACvC,oBAAoB,MAAM,KAAK,YAAY;EAC3C,gBAAgB,IAAI;CACtB,CAAC,EAAA,CACyB,KAAK;CAC/B,IAAI,WAAW,WAAW,GAAG,OAAO;CAEpC,MAAM,YACJ,WAAW,MAAM,MAAM,EAAE,WAAW,cAAc,IAAI,SACpD,WAAW,MAAM,MAAM,EAAE,WAAW,YAAY,IAAI,SACpD,WAAW,MAAM,MAAM,EAAE,WAAW,QAAQ,IAAI,OAChD,WAAW,MAAM,MAAM,0CAA0C,KAAK,EAAE,MAAM,CAAC,IAAI,WACnF,WAAW,MAAM,MAAM,oDAAoD,KAAK,EAAE,MAAM,CAAC,IAAI,SAC7F;CAEJ,MAAM,EAAE,QAAQ,aAAa,eAAe,UAAU;CACtD,IAAI,OAAO,WAAW,GAAG,OAAO;CAKhC,IAAI,CADc,OAAO,MAAM,MAAM,WAAW,IAAI,EAAE,EAAa,CACtD,KAAK,CAAC,KAAK,cAAc,OAAO;CAC7C,OAAO;EAAE,MAAM;EAAU;EAAQ;EAAW,SAAS;EAAM;CAAS;AACtE;;;AAIA,SAAgB,oBAAoB,GAAgC;CAClE,IAAI,EAAE,SAAS,UAAU;EACvB,MAAM,SAAS,kBAAkB,EAAE,MAAM;EACzC,OAAO,SAAS,OAAO,OAAO,KAAK,OAAO;GAAE,IAAI,EAAE;GAAI,SAAS,EAAE;EAAQ,EAAE,IAAI,CAAC;CAClF;CACA,OAAO,EAAE,OAAO,KAAK,OAAO;EAAE,IAAI,EAAE;EAAI,SAAS,EAAE;CAAQ,EAAE;AAC/D;;;;;AAMA,SAAgB,eAAe,GAA2B;CACxD,IAAI,EAAE,SAAS,UAAU,OAAO,UAAU,EAAE;CAC5C,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CACxB,KAAK,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC,QAAQ,QAAQ,GAAG,GAAG,CAAC,CAC9D,KAAK,CAAC,CACN,KAAK,GAAG;CACX,OAAO,GAAG,EAAE,KAAK,GAAG,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAClF;;;;;;;;;;;;;;;;;;;;;;;;;;;AC7YA,MAAM,eAAsC;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AACA,MAAM,cAAqC,CAAC,mBAAmB;AAe/D,MAAM,mBAAmB;;;AAGzB,MAAM,mBAAmB;AACzB,MAAM,yBAAyB;;;;AAK/B,MAAM,YACJ;;;;;;;;AASF,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,CAAC,cAAc,OAAO,GAAG,OAAO;CACpC,MAAM,OAAO,YAAY,OAAO;CAChC,IAAI,UAAU,KAAK,IAAI,GAAG,OAAO;CACjC,IAAI,kBAAkB,IAAI,GAAG,OAAO;CACpC,MAAM,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM;CACpC,OAAO,kBAAkB,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM;AAC5D;AAEA,SAAS,YAAY,GAAmB;CACtC,OAAO,EAAE,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;AACrC;;;AAIA,eAAe,eAAe,MAA0D;CACtF,MAAM,QAAkB,CAAC;CACzB,MAAM,QAAkB,CAAC;CACzB,IAAI,QAAQ;CACZ,MAAM,aAAa,OAAO,KAAa,QAA+B;EACpE,IAAI,MAAM,UAAU,oBAAoB,SAAS,wBAAwB;EACzE,IAAI;GACF,MAAM,MAAM,MAAMC,SAAG,SAAS,KAAK,MAAM;GACzC,MAAM,QAAQ,IAAI,SAAS,mBAAmB,IAAI,MAAM,GAAG,gBAAgB,IAAI;GAC/E,MAAM,KAAK,KAAK;GAChB,MAAM,KAAK,GAAG;GACd,SAAS,MAAM;EACjB,QAAQ,CAER;CACF;CACA,KAAK,MAAM,KAAK,cAAc;EAC5B,MAAM,MAAMC,KAAS,KAAK,MAAM,CAAC;EACjC,IAAI,WAAW,GAAG,GAAG,MAAM,WAAW,KAAK,CAAC;CAC9C;CACA,KAAK,MAAM,KAAK,aAAa;EAC3B,MAAM,MAAMA,KAAS,KAAK,MAAM,CAAC;EACjC,IAAI;GACF,KAAK,MAAM,QAAQ,MAAMD,SAAG,QAAQ,GAAG,GACrC,IAAI,cAAc,KAAK,IAAI,GAAG,MAAM,WAAWC,KAAS,KAAK,KAAK,IAAI,GAAGA,KAAS,KAAK,GAAG,IAAI,CAAC;EAEnG,QAAQ,CAER;CACF;CACA,OAAO;EAAE,MAAM,MAAM,KAAK,IAAI;EAAG;CAAM;AACzC;;;AAIA,eAAsB,YAAY,MAA+B;CAC/D,MAAM,EAAE,MAAM,UAAU,MAAM,eAAe,IAAI;CACjD,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAC/B,OAAO,IAAI,CAAC,CACZ,OAAO,IAAI,CAAC,CACZ,OAAO,KAAK;AACjB;AAEA,SAAS,gBAAwB;CAC/B,OAAOA,KAAS,KAAK,MAAM,SAAS,aAAa,YAAY;AAC/D;AACA,SAAS,cAAc,MAAsB;CAC3C,OAAOA,KAAS,KAAK,cAAc,GAAG,WAAW,QAAQ,CAAC,CAAC,OAAOA,KAAS,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;AACtH;;;;AAKA,eAAsB,mBAAmB,MAAgD;CACvF,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,MAAM,MAAMD,SAAG,SAAS,cAAc,IAAI,GAAG,MAAM,CAAC;CACjE,QAAQ;EACN,OAAO;CACT;CACA,IAAI,CAAC,OAAO,CAAC,MAAM,QAAQ,IAAI,MAAM,KAAK,IAAI,OAAO,WAAW,GAAG,OAAO;CAC1E,MAAM,KAAK,MAAM,gBAAgB,IAAI,CAAC,CAAC,YAAY,EAAE;CACrD,IAAI,GAAG,WAAW,KAAK,OAAO,IAAI,aAAa,OAAO;CACtD,MAAM,KAAK,MAAM,YAAY,IAAI,CAAC,CAAC,YAAY,EAAE;CACjD,IAAI,GAAG,WAAW,KAAK,OAAO,IAAI,aAAa,OAAO;CAGtD,MAAM,SAAS,IAAI,OAAO,QACvB,MAAM,KAAK,OAAO,EAAE,OAAO,YAAY,UAAU,IAAI,EAAE,EAAE,KAAK,OAAO,EAAE,YAAY,YAAY,wBAAwB,EAAE,OAAO,CACnI;CACA,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,OAAO;EAAE,GAAG;EAAK;CAAO;AAC1B;AAEA,eAAsB,oBAAoB,KAAsC;CAC9E,MAAMA,SAAG,MAAM,cAAc,GAAG,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,MAAM,GAAG,cAAc,IAAI,IAAI,EAAE,GAAG,QAAQ,IAAI;CACtD,MAAMA,SAAG,UAAU,KAAK,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;CAC5E,MAAMA,SAAG,OAAO,KAAK,cAAc,IAAI,IAAI,CAAC;AAC9C;AAEA,MAAM,oBAAoB,UACxB,wKAC8E,MAAM,KAAK,IAAI,EAAE;;AAiBjG,SAAS,YAAY,MAAuB;CAC1C,MAAM,SAAS,gCAAgC,KAAK,IAAI;CACxD,MAAM,OAAO,SAAS,OAAO,KAAK;CAClC,MAAM,QAAQ,KAAK,QAAQ,GAAG;CAC9B,MAAM,MAAM,KAAK,YAAY,GAAG;CAChC,IAAI,QAAQ,KAAK,OAAO,OAAO,OAAO,KAAA;CACtC,IAAI;EACF,OAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,CAAC,CAAC;CAC9C,QAAQ;EACN;CACF;AACF;AAEA,MAAM,4BAAiC,IAAI,IAAa;CAAC;CAAa;CAAQ;AAAM,CAAC;;;;;;;;;;AAWrF,SAAgB,uBACd,WACA,cACA,cACa;CACb,MAAM,eAAe,YAAY,YAAY;CAC7C,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,KAAK,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,GAAG;EACzD,IAAI,CAAC,KAAK,OAAO,MAAM,UAAU;EACjC,MAAM,KAAM,EAAuB;EACnC,MAAM,UAAW,EAA4B;EAC7C,IAAI,OAAO,OAAO,YAAY,CAAC,UAAU,IAAI,EAAE,GAAG;EAClD,IAAI,OAAO,YAAY,UAAU;EACjC,IAAI,OAAO,UAAU,CAAC,cAAc;EACpC,IAAI,KAAK,IAAI,EAAE,GAAG;EAClB,IAAI,CAAC,wBAAwB,OAAO,GAAG;EACvC,IAAI,CAAC,aAAa,SAAS,YAAY,OAAO,CAAC,GAAG;EAClD,KAAK,IAAI,EAAE;EACX,OAAO,KAAK;GAAE;GAAI,SAAS,QAAQ,KAAK;EAAE,CAAC;CAC7C;CACA,OAAO;AACT;;;;;;AAOA,eAAsB,qBACpB,KACA,MACgC;CAChC,MAAM,OAAO,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,GAAG;CAChD,MAAM,EAAE,MAAM,cAAc,UAAU,MAAM,eAAe,IAAI;CAC/D,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,IAAI;CACJ,IAAI;EAKF,MAAM,EAAE,mBAAmB,MAAM,OAAO;EAGxC,SAAS,MAAM,eAAe;GAC5B,MAAM;GACN,WAAW;GACX,QAAQ,iBAAiB,KAAK;GAC9B,QAAQ,KAAK;EACf,CAAC;CACH,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,SAAS,OAAO;CAC3B,MAAM,SAAS,YAAY,OAAO,IAAI;CACtC,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO;CAClD,MAAM,MAAM;CACZ,MAAM,SAAS,uBAAuB,IAAI,QAAQ,cAAc,KAAK,YAAY;CACjF,IAAI,OAAO,WAAW,GAAG,OAAO;CAGhC,OAAO;EAAE,WAFS,OAAO,IAAI,cAAc,YAAY,IAAI,UAAU,SAAS,IAAI,IAAI,YAAY;EAE9E;EAAQ,YADT,OAAO,IAAI,eAAe,WAAW,IAAI,aAAa;EACjC,UAAU;CAAM;AAC1D"}
+{"version":3,"file":"gate-discovery-C30rfnyo.js","names":["fs","nodePath","fs","nodePath"],"sources":["../src/lib/orchestration/harness-parse.ts","../src/lib/orchestration/gate-discovery.ts"],"sourcesContent":["/**\n * Deterministic, language-agnostic harness PARSER for the structural Stop-gate.\n *\n * The gate runs a repo's own checks (typecheck/lint/test/build) when the agent\n * tries to finish. Historically it only auto-enabled for Bun/TS repos via a\n * hard-coded sealed gate. This module generalizes detection by PARSING the\n * project's own authoritative config — `package.json` scripts, CI `run:` steps,\n * Make/just/task targets, and language manifests — and emitting the canonical\n * check commands it finds.\n *\n * Design properties (a cross-lab panel chose a parser over a model for these):\n *   - EVIDENCE-PINNED BY CONSTRUCTION: every emitted command is either lifted\n *     verbatim from a parsed source file (a package.json script, a CI `run:`\n *     line, a Make target invocation) or is a fixed canonical manifest command\n *     for a detected ecosystem (`cargo check`, `go vet ./...`). The parser never\n *     invents a command, so it has no hallucination / prompt-injection surface.\n *   - PURE + DETERMINISTIC: a function of the repo's files + the live PATH. The\n *     runtime Stop hook re-derives it at each stop (no cache), so it always\n *     reflects the current tree and fails open for free when a tool vanished.\n *   - SHELL-SAFE: `liveExec` runs `command.trim().split(/\\s+/)` (naive argv\n *     split, no shell), so every emitted command is validated to be plain\n *     space-separated tokens with no shell operators and no `%` (cmd.exe quoting\n *     throws on `%`). See `isSafeCommand`.\n *\n * This is consumed ONLY by the local Stop hook. The sealed-gate kernel\n * (`run_workflow`) is never fed a parsed command — `GateDescriptor.kind` is\n * `\"parsed\"`, never a sealed id, and `sealedGateIds()` is unchanged.\n */\n\nimport { createHash } from \"node:crypto\"\nimport { existsSync, promises as fs } from \"node:fs\"\nimport nodePath from \"node:path\"\n\nimport { resolveExecutable } from \"~/lib/exec\"\n\nimport { resolveSealedGate } from \"./gate-registry\"\nimport { type CheckSpec } from \"./gate-runner\"\n\n/** Canonical check ids — stable across ecosystems so baseline isolation and the\n *  selector key on the same names regardless of language. `build` is deliberately\n *  NOT a check: build scripts are too variable in cost to auto-run on every stop\n *  (a full bundle/SEA build is the slow-command / false-red footgun the design\n *  avoids). Compile-checking is covered under `typecheck` (`go vet`, `cargo\n *  check`, `tsc`). */\nexport type CheckId = \"typecheck\" | \"lint\" | \"test\"\n\n/** The fast static checks that are always-on; `test` is opt-in (it runs project\n *  code and can be slow on every stop). */\nconst STATIC_IDS: ReadonlySet<CheckId> = new Set([\"typecheck\", \"lint\"])\n\n/**\n * The resolved gate source for a repo.\n *   - `sealed`     — the bun/TS fast-path (a sealed gate id, byte-identical to\n *                    the legacy behavior; the runtime hook resolves it via the\n *                    sealed registry).\n *   - `parsed`     — deterministic parser output (this module).\n *   - `discovered` — the evidence-pinned model fallback (see `gate-discovery`).\n * `workdir` is the directory the checks run in (the repo/package root where the\n * evidence was found), NOT the Stop payload's cwd — so a monorepo stop from a\n * nested dir still runs the root's checks.\n */\nexport type GateDescriptor =\n  | { kind: \"sealed\"; gateId: string; workdir: string }\n  | { kind: \"parsed\"; checks: CheckSpec[]; ecosystem: string; workdir: string; evidence: string[] }\n  | { kind: \"discovered\"; checks: CheckSpec[]; ecosystem: string; workdir: string; evidence: string[] }\n\ninterface Candidate {\n  id: CheckId\n  command: string\n  /** The source file the command was lifted from (for evidence + messages). */\n  source: string\n}\n\n/** Reject anything that is not a plain, shell-free, `%`-free argv line. This is\n *  the load-bearing guard for `liveExec`'s naive whitespace split. */\nexport function isSafeCommand(command: string): boolean {\n  const c = command.trim()\n  if (c.length === 0 || c.length > 200) return false\n  if (/[\\r\\n]/.test(c)) return false\n  // Each token may contain only these chars: letters/digits and a small set of\n  // path/flag punctuation. This rejects shell metacharacters (; & | < > ( ) $\n  // backtick \" ' * ? ! ^ \\ %), env expansion, and quoting in one shot.\n  const tokens = c.split(/\\s+/).filter(Boolean)\n  if (tokens.length === 0) return false\n  return tokens.every((t) => /^[A-Za-z0-9._/:@=+-]+$/.test(t))\n}\n\n/** First token of a command (the executable), for a PATH-presence probe. */\nfunction firstToken(command: string): string {\n  return command.trim().split(/\\s+/)[0] ?? \"\"\n}\n\n/** True when a command would MUTATE the tree and so must never be a gate: a\n *  `--fix`/`--write` flag or a `:fix`/`:write` script-name suffix (e.g.\n *  `npm run lint:fix`, `eslint --fix`). Whitespace is normalized first so a\n *  tab/double-space can't slip a flag past the scan. Exported + shared with the\n *  discovered-command sanitizer. */\nexport function isMutatingCommand(command: string): boolean {\n  const c = command.trim().replace(/\\s+/g, \" \")\n  if (/(^| )(--fix|--write|-w|--watch|--serve|--interactive|-i)( |=|$)/i.test(c)) return true\n  if (/(^| |:|-)(fix|write)\\b/i.test(c)) return true\n  return false\n}\n\n/** True when the command is safe AND its executable resolves on PATH (a missing\n *  tool → drop the check rather than guarantee a false-red). */\nfunction commandRunnable(command: string): boolean {\n  if (!isSafeCommand(command)) return false\n  return resolveExecutable(firstToken(command), { env: process.env }) !== null\n}\n\nasync function readJsonFile(file: string): Promise<unknown | undefined> {\n  try {\n    return JSON.parse(await fs.readFile(file, \"utf8\")) as unknown\n  } catch {\n    return undefined\n  }\n}\n\nasync function readTextFile(file: string): Promise<string | undefined> {\n  try {\n    return await fs.readFile(file, \"utf8\")\n  } catch {\n    return undefined\n  }\n}\n\n/** package.json `scripts` as a plain string→string map (best-effort). */\nasync function readScripts(root: string): Promise<Record<string, string>> {\n  const pkg = await readJsonFile(nodePath.join(root, \"package.json\"))\n  const scripts = pkg && typeof pkg === \"object\" ? (pkg as { scripts?: unknown }).scripts : undefined\n  const out: Record<string, string> = {}\n  if (scripts && typeof scripts === \"object\") {\n    for (const [k, v] of Object.entries(scripts as Record<string, unknown>)) {\n      if (typeof v === \"string\") out[k] = v\n    }\n  }\n  return out\n}\n\n/** Pick the JS package runner from the lockfile present at the root. */\nfunction nodeRunner(root: string): \"bun\" | \"pnpm\" | \"yarn\" | \"npm\" {\n  if (existsSync(nodePath.join(root, \"bun.lockb\")) || existsSync(nodePath.join(root, \"bun.lock\"))) return \"bun\"\n  if (existsSync(nodePath.join(root, \"pnpm-lock.yaml\"))) return \"pnpm\"\n  if (existsSync(nodePath.join(root, \"yarn.lock\"))) return \"yarn\"\n  return \"npm\"\n}\n\n/** Map a package.json script NAME to a canonical id (read-only checks only — a\n *  `:fix`/`:write` variant mutates the tree and is never a gate). */\nfunction scriptNameToId(name: string): CheckId | null {\n  if (/:(fix|write)$/i.test(name)) return null\n  if (/^(typecheck|type-check|check-types|tsc|types)$/i.test(name)) return \"typecheck\"\n  if (/^(lint|lint:check|eslint)$/i.test(name)) return \"lint\"\n  if (/^test$/i.test(name)) return \"test\"\n  return null\n}\n\nasync function collectNodeChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  if (!existsSync(nodePath.join(root, \"package.json\"))) return []\n  const runner = nodeRunner(root)\n  if (resolveExecutable(runner, { env: process.env }) === null) return []\n  const scripts = await readScripts(root)\n  const out: Candidate[] = []\n  for (const [name] of Object.entries(scripts)) {\n    const id = scriptNameToId(name)\n    if (!id) continue\n    if (id === \"test\" && !includeTests) continue\n    const command = `${runner} run ${name}`\n    if (isSafeCommand(command)) out.push({ id, command, source: \"package.json\" })\n  }\n  return out\n}\n\n/**\n * Best-effort CI gap-filler: scan GitHub Actions / GitLab CI YAML for single-line\n * `run:` static checks (typecheck/lint/build) the project actually runs. We do\n * NOT lift `test` from CI — CI test jobs frequently need services/secrets and\n * would false-red on every stop. Multi-line / scripted `run:` blocks are skipped\n * (they can't be a single argv). Any parse failure yields nothing.\n */\nasync function collectCiChecks(root: string): Promise<Candidate[]> {\n  const files: string[] = []\n  const wfDir = nodePath.join(root, \".github\", \"workflows\")\n  try {\n    for (const name of await fs.readdir(wfDir)) {\n      if (/\\.ya?ml$/i.test(name)) files.push(nodePath.join(wfDir, name))\n    }\n  } catch {\n    /* no workflows dir */\n  }\n  const gitlab = nodePath.join(root, \".gitlab-ci.yml\")\n  if (existsSync(gitlab)) files.push(gitlab)\n  if (files.length === 0) return []\n\n  let parseYaml: (s: string) => unknown\n  try {\n    // Lazy import so the parser module has no hard dep when CI files are absent.\n    ;({ parse: parseYaml } = await import(\"yaml\"))\n  } catch {\n    return []\n  }\n\n  const out: Candidate[] = []\n  const seen = new Set<CheckId>()\n  const classify = (cmd: string): CheckId | null => {\n    if (/\\b(typecheck|type-check|tsc|mypy|pyright)\\b/i.test(cmd)) return \"typecheck\"\n    if (/\\b(lint|eslint|ruff|clippy|golangci|vet)\\b/i.test(cmd)) return \"lint\"\n    return null\n  }\n  const consider = (run: unknown, source: string): void => {\n    if (typeof run !== \"string\") return\n    const cmd = run.trim()\n    if (cmd.includes(\"\\n\")) return // multi-line script block — not a single argv.\n    if (!isSafeCommand(cmd) || isMutatingCommand(cmd) || !commandRunnable(cmd)) return\n    const id = classify(cmd)\n    if (!id || seen.has(id)) return\n    seen.add(id)\n    out.push({ id, command: cmd, source })\n  }\n  // Walk the parsed YAML for any `run:` string anywhere (GH `steps[].run`, GitLab\n  // `<job>.script[]`). A generic deep walk tolerates both schemas + future shapes.\n  const walk = (node: unknown, source: string): void => {\n    if (!node || typeof node !== \"object\") return\n    if (Array.isArray(node)) {\n      for (const v of node) walk(v, source)\n      return\n    }\n    for (const [k, v] of Object.entries(node as Record<string, unknown>)) {\n      if (k === \"run\" && typeof v === \"string\") consider(v, source)\n      else if (k === \"script\") {\n        // GitLab `script:` is a string or string[].\n        if (typeof v === \"string\") consider(v, source)\n        else if (Array.isArray(v)) for (const s of v) consider(s, source)\n      } else walk(v, source)\n    }\n  }\n  for (const f of files) {\n    const text = await readTextFile(f)\n    if (text === undefined) continue\n    try {\n      walk(parseYaml(text), nodePath.relative(root, f) || nodePath.basename(f))\n    } catch {\n      /* unparseable workflow → skip */\n    }\n  }\n  return out\n}\n\n/** Make / just / Taskfile targets matching canonical ids → `<tool> <target>`. */\nasync function collectTaskChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  const out: Candidate[] = []\n  const wantId = (target: string): CheckId | null => scriptNameToId(target)\n  // Makefile / justfile: a line `target:` (Make) or `target:` (just recipe head).\n  for (const [file, tool] of [\n    [\"Makefile\", \"make\"],\n    [\"makefile\", \"make\"],\n    [\"justfile\", \"just\"],\n    [\".justfile\", \"just\"],\n  ] as const) {\n    const text = await readTextFile(nodePath.join(root, file))\n    if (text === undefined) continue\n    if (resolveExecutable(tool, { env: process.env }) === null) continue\n    for (const line of text.split(/\\r?\\n/)) {\n      const m = /^([A-Za-z0-9._-]+)\\s*:/.exec(line)\n      if (!m) continue\n      const id = wantId(m[1])\n      if (!id || (id === \"test\" && !includeTests)) continue\n      const command = `${tool} ${m[1]}`\n      if (isSafeCommand(command)) out.push({ id, command, source: file })\n    }\n  }\n  // Taskfile.yml: top-level `tasks:` keys.\n  const taskfile = [\"Taskfile.yml\", \"Taskfile.yaml\"].map((n) => nodePath.join(root, n)).find((p) => existsSync(p))\n  if (taskfile && resolveExecutable(\"task\", { env: process.env }) !== null) {\n    const text = await readTextFile(taskfile)\n    if (text !== undefined) {\n      try {\n        const { parse } = await import(\"yaml\")\n        const doc = parse(text) as { tasks?: Record<string, unknown> } | undefined\n        for (const name of Object.keys(doc?.tasks ?? {})) {\n          const id = wantId(name)\n          if (!id || (id === \"test\" && !includeTests)) continue\n          const command = `task ${name}`\n          if (isSafeCommand(command)) out.push({ id, command, source: nodePath.basename(taskfile) })\n        }\n      } catch {\n        /* skip */\n      }\n    }\n  }\n  return out\n}\n\nasync function collectRustChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  if (!existsSync(nodePath.join(root, \"Cargo.toml\"))) return []\n  if (resolveExecutable(\"cargo\", { env: process.env }) === null) return []\n  const out: Candidate[] = [{ id: \"typecheck\", command: \"cargo check\", source: \"Cargo.toml\" }]\n  // clippy is a separate component; only emit it if `cargo-clippy` resolves.\n  if (resolveExecutable(\"cargo-clippy\", { env: process.env }) !== null) {\n    out.push({ id: \"lint\", command: \"cargo clippy\", source: \"Cargo.toml\" })\n  }\n  if (includeTests) out.push({ id: \"test\", command: \"cargo test\", source: \"Cargo.toml\" })\n  return out\n}\n\nasync function collectGoChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  if (!existsSync(nodePath.join(root, \"go.mod\"))) return []\n  if (resolveExecutable(\"go\", { env: process.env }) === null) return []\n  // `go vet` compiles + reports suspect constructs — the typecheck-equivalent.\n  const out: Candidate[] = [{ id: \"typecheck\", command: \"go vet ./...\", source: \"go.mod\" }]\n  if (includeTests) out.push({ id: \"test\", command: \"go test ./...\", source: \"go.mod\" })\n  return out\n}\n\nasync function collectPythonChecks(root: string, includeTests: boolean): Promise<Candidate[]> {\n  const configFiles = [\"pyproject.toml\", \"setup.cfg\", \"pytest.ini\", \"tox.ini\", \"ruff.toml\", \"mypy.ini\"]\n  const present = configFiles.filter((f) => existsSync(nodePath.join(root, f)))\n  if (present.length === 0) return []\n  const evidence = present[0]\n  const out: Candidate[] = []\n  const configText = (await readTextFile(nodePath.join(root, present[0]))) ?? \"\"\n  const mentions = (tool: string): boolean => present.some((f) => f.startsWith(tool)) || configText.includes(tool)\n  // Only emit a Python tool when BOTH config evidence AND the tool resolve.\n  if (mentions(\"mypy\") && resolveExecutable(\"mypy\", { env: process.env }) !== null) {\n    out.push({ id: \"typecheck\", command: \"mypy .\", source: evidence })\n  }\n  if (mentions(\"ruff\") && resolveExecutable(\"ruff\", { env: process.env }) !== null) {\n    out.push({ id: \"lint\", command: \"ruff check .\", source: evidence })\n  }\n  if (includeTests && (mentions(\"pytest\") || existsSync(nodePath.join(root, \"pytest.ini\")))) {\n    if (resolveExecutable(\"pytest\", { env: process.env }) !== null) {\n      out.push({ id: \"test\", command: \"pytest -q\", source: evidence })\n    }\n  }\n  return out\n}\n\n/** Pick the first runnable candidate per id, in source-priority order. */\nfunction pickByPriority(candidates: Candidate[]): { checks: CheckSpec[]; evidence: string[] } {\n  const byId = new Map<CheckId, Candidate>()\n  for (const c of candidates) {\n    if (!byId.has(c.id) && commandRunnable(c.command)) byId.set(c.id, c)\n  }\n  const order: CheckId[] = [\"typecheck\", \"lint\", \"test\"]\n  const checks: CheckSpec[] = []\n  const evidence = new Set<string>()\n  for (const id of order) {\n    const c = byId.get(id)\n    if (c) {\n      checks.push({ id: c.id, command: c.command })\n      evidence.add(c.source)\n    }\n  }\n  return { checks, evidence: [...evidence] }\n}\n\n/**\n * Resolve the gate descriptor for an already-resolved repo `root`.\n *   1. bun/TS sealed fast-path — byte-identical to the legacy `detectHarnessGateId`\n *      (bun on PATH + a `typecheck` script → sealed `default-ci`/`typecheck-test`).\n *   2. else the deterministic parser: collect candidates from package.json\n *      scripts (primary, self-contained), Make/just/task, language manifests, and\n *      a CI gap-filler for static checks; pick one per id by priority. A `parsed`\n *      descriptor is returned only when at least one STATIC check survives (a\n *      test-only set would either be off-by-default or risk false-reds).\n *   3. else null (the launcher prints why and the gate stays off).\n */\nexport async function parseGateDescriptor(\n  root: string,\n  opts: { includeTests: boolean },\n): Promise<GateDescriptor | null> {\n  // (1) bun/TS sealed parity.\n  if (resolveExecutable(\"bun\", { env: process.env }) !== null) {\n    const scripts = await readScripts(root)\n    if (typeof scripts.typecheck === \"string\") {\n      const gateId = typeof scripts.lint === \"string\" ? \"default-ci\" : \"typecheck-test\"\n      return { kind: \"sealed\", gateId, workdir: root }\n    }\n  }\n\n  // (2) deterministic parser. package.json scripts first (self-contained), then\n  //     task runners + manifests, then a CI gap-filler for static checks.\n  const groups = await Promise.all([\n    collectNodeChecks(root, opts.includeTests),\n    collectTaskChecks(root, opts.includeTests),\n    collectRustChecks(root, opts.includeTests),\n    collectGoChecks(root, opts.includeTests),\n    collectPythonChecks(root, opts.includeTests),\n    collectCiChecks(root),\n  ])\n  const candidates = groups.flat()\n  if (candidates.length === 0) return null\n\n  const ecosystem =\n    candidates.find((c) => c.source === \"package.json\") ? \"node\"\n    : candidates.find((c) => c.source === \"Cargo.toml\") ? \"rust\"\n    : candidates.find((c) => c.source === \"go.mod\") ? \"go\"\n    : candidates.find((c) => /^(pyproject|setup|pytest|tox|ruff|mypy)/.test(c.source)) ? \"python\"\n    : candidates.find((c) => /^(Makefile|makefile|justfile|\\.justfile|Taskfile)/.test(c.source)) ? \"make\"\n    : \"ci\"\n\n  const { checks, evidence } = pickByPriority(candidates)\n  if (checks.length === 0) return null\n  // Require at least one STATIC check (typecheck/lint/build) unless the caller\n  // opted into running the full test suite — a test-only set is otherwise either\n  // off-by-default or a slow/false-red risk on every stop.\n  const hasStatic = checks.some((c) => STATIC_IDS.has(c.id as CheckId))\n  if (!hasStatic && !opts.includeTests) return null\n  return { kind: \"parsed\", checks, ecosystem, workdir: root, evidence }\n}\n\n/** The checks a descriptor runs: a sealed descriptor resolves its sealed command\n *  set from the registry; parsed/discovered carry their own. Fresh array. */\nexport function checksForDescriptor(d: GateDescriptor): CheckSpec[] {\n  if (d.kind === \"sealed\") {\n    const sealed = resolveSealedGate(d.gateId)\n    return sealed ? sealed.checks.map((c) => ({ id: c.id, command: c.command })) : []\n  }\n  return d.checks.map((c) => ({ id: c.id, command: c.command }))\n}\n\n/** A stable key over a descriptor's effective check set, for baseline isolation.\n *  Sealed descriptors key on their gate id (preserving legacy baseline keys);\n *  parsed/discovered key on the canonicalized (id,command) set, so a changed\n *  command set yields a fresh baseline instead of masking/inventing regressions. */\nexport function descriptorHash(d: GateDescriptor): string {\n  if (d.kind === \"sealed\") return `sealed:${d.gateId}`\n  const canon = [...d.checks]\n    .map((c) => `${c.id}\u0000${c.command.trim().replace(/\\s+/g, \" \")}`)\n    .sort()\n    .join(\"\u0001\")\n  return `${d.kind}:${createHash(\"sha256\").update(canon).digest(\"hex\").slice(0, 32)}`\n}\n","/**\n * Evidence-pinned model FALLBACK for the structural Stop-gate — the last resort\n * when the deterministic parser (`harness-parse`) finds no runnable checks.\n *\n * A read-only worker reads the repo's own config/docs and proposes the canonical\n * check commands. Two guards keep this safe despite being model-authored:\n *   1. SANITIZE — `sanitizeDiscoveredCheck` rejects shell metacharacters (so a\n *      command can never chain/redirect/expand), destructive/stateful verbs,\n *      interactive/watch shapes, and an executable that isn't on PATH. What\n *      survives is a single plain argv line, safe for `liveExec`'s naive split.\n *   2. EVIDENCE-PIN — a surviving command must appear (whitespace-normalized)\n *      VERBATIM in one of the collected source files. The model cannot invent a\n *      command or be prompt-injected into emitting one that isn't already a real\n *      command in the repo (and a real command in a user-trusted repo is the\n *      same authority the existing gate already runs).\n *\n * Discovery runs ONCE at launch and the result is cached per (repoFingerprint,\n * sourcesHash) in a human-readable record. The runtime Stop hook only READS the\n * cached record (no model call at stop). This is consumed ONLY by the local Stop\n * hook; the sealed-gate kernel never sees a discovered command.\n */\n\nimport { createHash } from \"node:crypto\"\nimport { existsSync, promises as fs } from \"node:fs\"\nimport nodePath from \"node:path\"\n\nimport { resolveExecutable } from \"~/lib/exec\"\nimport { PATHS } from \"~/lib/paths\"\n\nimport { type CheckSpec } from \"./gate-runner\"\nimport { isMutatingCommand, isSafeCommand, type CheckId } from \"./harness-parse\"\nimport { repoFingerprint, repoRoot } from \"./stop-gate-policy\"\n\n/** The allowlist of files the discovery worker is steered to read — config +\n *  docs that legitimately describe how to check a project. Secret files are\n *  additionally blocked at the worker IO layer (`.env*`/`*.pem`/`id_*`/…). */\nconst SIGNAL_FILES: ReadonlyArray<string> = [\n  \"package.json\",\n  \"Makefile\",\n  \"makefile\",\n  \"justfile\",\n  \".justfile\",\n  \"Taskfile.yml\",\n  \"Taskfile.yaml\",\n  \"Cargo.toml\",\n  \"go.mod\",\n  \"pyproject.toml\",\n  \"setup.cfg\",\n  \"tox.ini\",\n  \"pytest.ini\",\n  \"CONTRIBUTING.md\",\n  \"CONTRIBUTING\",\n  \"README.md\",\n  \"README\",\n  \"DEVELOPING.md\",\n  \"mix.exs\",\n  \"build.gradle\",\n  \"pom.xml\",\n  \"composer.json\",\n]\nconst SIGNAL_DIRS: ReadonlyArray<string> = [\".github/workflows\"]\n\n/** A discovered check command after sanitization + evidence-pinning. */\nexport interface DiscoveredRecord {\n  root: string\n  fingerprint: string\n  sourcesHash: string\n  discoveredAt: string\n  model: string\n  ecosystem: string\n  checks: CheckSpec[]\n  confidence: string\n  evidence: string[]\n}\n\nconst MAX_SIGNAL_BYTES = 64 * 1024\n/** Global caps so a repo with many workflow files can't inflate discovery /\n *  hashing cost: at most this many files and this much total text. */\nconst MAX_SIGNAL_FILES = 40\nconst MAX_TOTAL_SIGNAL_BYTES = 512 * 1024\n\n/** Words that mark a command as destructive, stateful, or non-terminating — a\n *  \"check\" must never do any of these. (Shell operators are already rejected by\n *  `isSafeCommand`, so chaining can't smuggle them past this word scan.) */\nconst DENY_WORD =\n  /\\b(rm|rmdir|mv|dd|mkfs|sudo|chmod|chown|publish|push|deploy|migrate|kubectl|terraform|docker|curl|wget|ssh|scp|rsync|nc|eval|npm i|npm install|yarn add|pip install|apt|brew|watch|serve|repl|dev|start)\\b/i\n\n/**\n * True when `command` is safe to auto-run as a check: a plain argv line (no\n * shell metacharacters), no destructive/stateful verb, no mutating/interactive\n * shape, and its executable resolves on PATH. The deny-word scan runs on a\n * whitespace-NORMALIZED copy so a tab / double-space can't split `npm  install`\n * past the literal-space patterns.\n */\nexport function sanitizeDiscoveredCheck(command: string): boolean {\n  if (!isSafeCommand(command)) return false\n  const norm = normalizeWs(command)\n  if (DENY_WORD.test(norm)) return false\n  if (isMutatingCommand(norm)) return false // --fix/--write/--watch + :fix/:write scripts\n  const first = norm.split(\" \")[0] ?? \"\"\n  return resolveExecutable(first, { env: process.env }) !== null\n}\n\nfunction normalizeWs(s: string): string {\n  return s.replace(/\\s+/g, \" \").trim()\n}\n\n/** Collect the text of the allowlisted signal files (capped), for evidence-pin +\n *  the sources hash. Returns the concatenated text and the relative file list. */\nasync function collectSignals(root: string): Promise<{ text: string; files: string[] }> {\n  const parts: string[] = []\n  const files: string[] = []\n  let total = 0\n  const readCapped = async (abs: string, rel: string): Promise<void> => {\n    if (files.length >= MAX_SIGNAL_FILES || total >= MAX_TOTAL_SIGNAL_BYTES) return\n    try {\n      const raw = await fs.readFile(abs, \"utf8\")\n      const slice = raw.length > MAX_SIGNAL_BYTES ? raw.slice(0, MAX_SIGNAL_BYTES) : raw\n      parts.push(slice)\n      files.push(rel)\n      total += slice.length\n    } catch {\n      /* unreadable → skip */\n    }\n  }\n  for (const f of SIGNAL_FILES) {\n    const abs = nodePath.join(root, f)\n    if (existsSync(abs)) await readCapped(abs, f)\n  }\n  for (const d of SIGNAL_DIRS) {\n    const dir = nodePath.join(root, d)\n    try {\n      for (const name of await fs.readdir(dir)) {\n        if (/\\.(ya?ml)$/i.test(name)) await readCapped(nodePath.join(dir, name), nodePath.join(d, name))\n      }\n    } catch {\n      /* no dir */\n    }\n  }\n  return { text: parts.join(\"\\n\"), files }\n}\n\n/** A freshness hash over the signal files' contents + relative paths. A change\n *  to how the project checks itself flips this → re-discovery on next launch. */\nexport async function sourcesHash(root: string): Promise<string> {\n  const { text, files } = await collectSignals(root)\n  return createHash(\"sha256\")\n    .update(files.sort().join(\"\\n\"))\n    .update(\"\\0\")\n    .update(text)\n    .digest(\"hex\")\n}\n\nfunction discoveredDir(): string {\n  return nodePath.join(PATHS.APP_DIR, \"stop-gate\", \"discovered\")\n}\nfunction recordPathFor(root: string): string {\n  return nodePath.join(discoveredDir(), createHash(\"sha256\").update(nodePath.resolve(root)).digest(\"hex\").slice(0, 32))\n}\n\n/** Read the cached discovered record for `root`, verifying it still matches the\n *  live repo identity AND the live sources hash. Any mismatch / unreadable /\n *  empty-checks record → null (re-discover or stay off; never run a stale set). */\nexport async function readDiscoveredGate(root: string): Promise<DiscoveredRecord | null> {\n  let rec: DiscoveredRecord\n  try {\n    rec = JSON.parse(await fs.readFile(recordPathFor(root), \"utf8\")) as DiscoveredRecord\n  } catch {\n    return null\n  }\n  if (!rec || !Array.isArray(rec.checks) || rec.checks.length === 0) return null\n  const fp = await repoFingerprint(root).catch(() => \"\")\n  if (fp.length === 0 || fp !== rec.fingerprint) return null // identity drift → deny.\n  const sh = await sourcesHash(root).catch(() => \"\")\n  if (sh.length === 0 || sh !== rec.sourcesHash) return null // config changed → stale.\n  // Re-validate id AND re-sanitize the command at read time (defense-in-depth\n  // against a tampered/corrupt record).\n  const checks = rec.checks.filter(\n    (c) => c && typeof c.id === \"string\" && VALID_IDS.has(c.id) && typeof c.command === \"string\" && sanitizeDiscoveredCheck(c.command),\n  )\n  if (checks.length === 0) return null\n  return { ...rec, checks }\n}\n\nexport async function writeDiscoveredGate(rec: DiscoveredRecord): Promise<void> {\n  await fs.mkdir(discoveredDir(), { recursive: true })\n  const tmp = `${recordPathFor(rec.root)}.${process.pid}.tmp`\n  await fs.writeFile(tmp, `${JSON.stringify(rec, null, 2)}\\n`, { mode: 0o600 })\n  await fs.rename(tmp, recordPathFor(rec.root))\n}\n\nconst DISCOVERY_PROMPT = (files: string[]): string =>\n  `You are configuring an automated pre-finish CHECK gate for this repository. Read ONLY these `\n  + `already-present config/doc files to learn how the project checks itself: ${files.join(\", \")}. `\n  + `Identify the canonical FAST static check command (typecheck and/or lint) and, if obvious, the test `\n  + `command. Rules: (1) return a command ONLY if it appears VERBATIM in one of those files — never invent `\n  + `one; (2) commands must be non-interactive, self-terminating, read-only verification (NO install / `\n  + `publish / push / deploy / migrate / format-in-place / watch / serve / dev-server / delete); (3) at most `\n  + `3 commands; (4) if unsure, return an empty list. Respond with ONLY a fenced \\`\\`\\`json block of the shape `\n  + `{\"ecosystem\":\"<label>\",\"checks\":[{\"id\":\"typecheck|lint|test\",\"command\":\"<single-line command>\"}],`\n  + `\"confidence\":\"high|low\"} and NOTHING else.`\n\ninterface DiscoverResult {\n  ecosystem: string\n  checks: CheckSpec[]\n  confidence: string\n  evidence: string[]\n}\n\n/** Extract the first fenced/bare JSON object from the worker's text. */\nfunction extractJson(text: string): unknown {\n  const fenced = /```(?:json)?\\s*([\\s\\S]*?)```/i.exec(text)\n  const body = fenced ? fenced[1] : text\n  const start = body.indexOf(\"{\")\n  const end = body.lastIndexOf(\"}\")\n  if (start < 0 || end <= start) return undefined\n  try {\n    return JSON.parse(body.slice(start, end + 1)) as unknown\n  } catch {\n    return undefined\n  }\n}\n\nconst VALID_IDS: ReadonlySet<string> = new Set<CheckId>([\"typecheck\", \"lint\", \"test\"])\n\n/**\n * Sanitize + EVIDENCE-PIN the model's raw checks against the collected source\n * text. Pure (no IO) so it is unit-testable without the worker. A check survives\n * only if: its id is canonical, it isn't a `test` while tests are off, its id\n * hasn't already been taken, it passes `sanitizeDiscoveredCheck`, AND its command\n * appears (whitespace-normalized) VERBATIM in `evidenceText`. The evidence-pin is\n * the load-bearing guard: the model cannot invent a command or be prompt-injected\n * into one that isn't already a real command in the (user-trusted) repo.\n */\nexport function filterDiscoveredChecks(\n  rawChecks: unknown,\n  evidenceText: string,\n  includeTests: boolean,\n): CheckSpec[] {\n  const evidenceNorm = normalizeWs(evidenceText)\n  const seen = new Set<string>()\n  const checks: CheckSpec[] = []\n  for (const c of Array.isArray(rawChecks) ? rawChecks : []) {\n    if (!c || typeof c !== \"object\") continue\n    const id = (c as { id?: unknown }).id\n    const command = (c as { command?: unknown }).command\n    if (typeof id !== \"string\" || !VALID_IDS.has(id)) continue\n    if (typeof command !== \"string\") continue\n    if (id === \"test\" && !includeTests) continue\n    if (seen.has(id)) continue\n    if (!sanitizeDiscoveredCheck(command)) continue\n    if (!evidenceNorm.includes(normalizeWs(command))) continue\n    seen.add(id)\n    checks.push({ id, command: command.trim() })\n  }\n  return checks\n}\n\n/**\n * Run the read-only worker to discover check commands for `cwd`. Returns the\n * sanitized + evidence-pinned result, or null (worker unavailable / errored /\n * nothing survived). NEVER throws.\n */\nexport async function discoverGateCommands(\n  cwd: string,\n  opts: { signal?: AbortSignal; includeTests: boolean },\n): Promise<DiscoverResult | null> {\n  const root = await repoRoot(cwd).catch(() => cwd)\n  const { text: evidenceText, files } = await collectSignals(root)\n  if (files.length === 0) return null\n\n  let result: { text: string; isError?: boolean }\n  try {\n    // Lazy-import the heavy worker-agent engine ONLY when discovery actually\n    // runs — keeping it out of the module-load graph of `claude.ts` (which\n    // imports this module), so the mock.module-isolated CLI tests don't deadlock\n    // pulling the Pi runtime at load time.\n    const { runWorkerAgent } = await import(\"~/lib/worker-agent/engine\")\n    // Discovery is advisory setup, not a verified workflow producer/checker,\n    // so honoring the operator's explore default here is intentional.\n    result = await runWorkerAgent({\n      mode: \"explore\",\n      workspace: root,\n      prompt: DISCOVERY_PROMPT(files),\n      signal: opts.signal,\n    })\n  } catch {\n    return null\n  }\n  if (result.isError) return null\n  const parsed = extractJson(result.text)\n  if (!parsed || typeof parsed !== \"object\") return null\n  const obj = parsed as { ecosystem?: unknown; checks?: unknown; confidence?: unknown }\n  const checks = filterDiscoveredChecks(obj.checks, evidenceText, opts.includeTests)\n  if (checks.length === 0) return null\n  const ecosystem = typeof obj.ecosystem === \"string\" && obj.ecosystem.length > 0 ? obj.ecosystem : \"discovered\"\n  const confidence = typeof obj.confidence === \"string\" ? obj.confidence : \"low\"\n  return { ecosystem, checks, confidence, evidence: files }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDA,MAAM,6BAAmC,IAAI,IAAI,CAAC,aAAa,MAAM,CAAC;;;AA2BtE,SAAgB,cAAc,SAA0B;CACtD,MAAM,IAAI,QAAQ,KAAK;CACvB,IAAI,EAAE,WAAW,KAAK,EAAE,SAAS,KAAK,OAAO;CAC7C,IAAI,SAAS,KAAK,CAAC,GAAG,OAAO;CAI7B,MAAM,SAAS,EAAE,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO;CAC5C,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,OAAO,OAAO,OAAO,MAAM,yBAAyB,KAAK,CAAC,CAAC;AAC7D;;AAGA,SAAS,WAAW,SAAyB;CAC3C,OAAO,QAAQ,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;AAC3C;;;;;;AAOA,SAAgB,kBAAkB,SAA0B;CAC1D,MAAM,IAAI,QAAQ,KAAK,CAAC,CAAC,QAAQ,QAAQ,GAAG;CAC5C,IAAI,mEAAmE,KAAK,CAAC,GAAG,OAAO;CACvF,IAAI,0BAA0B,KAAK,CAAC,GAAG,OAAO;CAC9C,OAAO;AACT;;;AAIA,SAAS,gBAAgB,SAA0B;CACjD,IAAI,CAAC,cAAc,OAAO,GAAG,OAAO;CACpC,OAAO,kBAAkB,WAAW,OAAO,GAAG,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM;AAC1E;AAEA,eAAe,aAAa,MAA4C;CACtE,IAAI;EACF,OAAO,KAAK,MAAM,MAAMA,SAAG,SAAS,MAAM,MAAM,CAAC;CACnD,QAAQ;EACN;CACF;AACF;AAEA,eAAe,aAAa,MAA2C;CACrE,IAAI;EACF,OAAO,MAAMA,SAAG,SAAS,MAAM,MAAM;CACvC,QAAQ;EACN;CACF;AACF;;AAGA,eAAe,YAAY,MAA+C;CACxE,MAAM,MAAM,MAAM,aAAaC,KAAS,KAAK,MAAM,cAAc,CAAC;CAClE,MAAM,UAAU,OAAO,OAAO,QAAQ,WAAY,IAA8B,UAAU,KAAA;CAC1F,MAAM,MAA8B,CAAC;CACrC,IAAI,WAAW,OAAO,YAAY,UAC3B;OAAA,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,OAAkC,GACpE,IAAI,OAAO,MAAM,UAAU,IAAI,KAAK;CAAA;CAGxC,OAAO;AACT;;AAGA,SAAS,WAAW,MAA+C;CACjE,IAAI,WAAWA,KAAS,KAAK,MAAM,WAAW,CAAC,KAAK,WAAWA,KAAS,KAAK,MAAM,UAAU,CAAC,GAAG,OAAO;CACxG,IAAI,WAAWA,KAAS,KAAK,MAAM,gBAAgB,CAAC,GAAG,OAAO;CAC9D,IAAI,WAAWA,KAAS,KAAK,MAAM,WAAW,CAAC,GAAG,OAAO;CACzD,OAAO;AACT;;;AAIA,SAAS,eAAe,MAA8B;CACpD,IAAI,iBAAiB,KAAK,IAAI,GAAG,OAAO;CACxC,IAAI,kDAAkD,KAAK,IAAI,GAAG,OAAO;CACzE,IAAI,8BAA8B,KAAK,IAAI,GAAG,OAAO;CACrD,IAAI,UAAU,KAAK,IAAI,GAAG,OAAO;CACjC,OAAO;AACT;AAEA,eAAe,kBAAkB,MAAc,cAA6C;CAC1F,IAAI,CAAC,WAAWA,KAAS,KAAK,MAAM,cAAc,CAAC,GAAG,OAAO,CAAC;CAC9D,MAAM,SAAS,WAAW,IAAI;CAC9B,IAAI,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC;CACtE,MAAM,UAAU,MAAM,YAAY,IAAI;CACtC,MAAM,MAAmB,CAAC;CAC1B,KAAK,MAAM,CAAC,SAAS,OAAO,QAAQ,OAAO,GAAG;EAC5C,MAAM,KAAK,eAAe,IAAI;EAC9B,IAAI,CAAC,IAAI;EACT,IAAI,OAAO,UAAU,CAAC,cAAc;EACpC,MAAM,UAAU,GAAG,OAAO,OAAO;EACjC,IAAI,cAAc,OAAO,GAAG,IAAI,KAAK;GAAE;GAAI;GAAS,QAAQ;EAAe,CAAC;CAC9E;CACA,OAAO;AACT;;;;;;;;AASA,eAAe,gBAAgB,MAAoC;CACjE,MAAM,QAAkB,CAAC;CACzB,MAAM,QAAQA,KAAS,KAAK,MAAM,WAAW,WAAW;CACxD,IAAI;EACF,KAAK,MAAM,QAAQ,MAAMD,SAAG,QAAQ,KAAK,GACvC,IAAI,YAAY,KAAK,IAAI,GAAG,MAAM,KAAKC,KAAS,KAAK,OAAO,IAAI,CAAC;CAErE,QAAQ,CAER;CACA,MAAM,SAASA,KAAS,KAAK,MAAM,gBAAgB;CACnD,IAAI,WAAW,MAAM,GAAG,MAAM,KAAK,MAAM;CACzC,IAAI,MAAM,WAAW,GAAG,OAAO,CAAC;CAEhC,IAAI;CACJ,IAAI;EAED,CAAC,CAAE,OAAO,aAAc,MAAM,OAAO;CACxC,QAAQ;EACN,OAAO,CAAC;CACV;CAEA,MAAM,MAAmB,CAAC;CAC1B,MAAM,uBAAO,IAAI,IAAa;CAC9B,MAAM,YAAY,QAAgC;EAChD,IAAI,+CAA+C,KAAK,GAAG,GAAG,OAAO;EACrE,IAAI,8CAA8C,KAAK,GAAG,GAAG,OAAO;EACpE,OAAO;CACT;CACA,MAAM,YAAY,KAAc,WAAyB;EACvD,IAAI,OAAO,QAAQ,UAAU;EAC7B,MAAM,MAAM,IAAI,KAAK;EACrB,IAAI,IAAI,SAAS,IAAI,GAAG;EACxB,IAAI,CAAC,cAAc,GAAG,KAAK,kBAAkB,GAAG,KAAK,CAAC,gBAAgB,GAAG,GAAG;EAC5E,MAAM,KAAK,SAAS,GAAG;EACvB,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,GAAG;EACzB,KAAK,IAAI,EAAE;EACX,IAAI,KAAK;GAAE;GAAI,SAAS;GAAK;EAAO,CAAC;CACvC;CAGA,MAAM,QAAQ,MAAe,WAAyB;EACpD,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;EACvC,IAAI,MAAM,QAAQ,IAAI,GAAG;GACvB,KAAK,MAAM,KAAK,MAAM,KAAK,GAAG,MAAM;GACpC;EACF;EACA,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,IAA+B,GACjE,IAAI,MAAM,SAAS,OAAO,MAAM,UAAU,SAAS,GAAG,MAAM;OACvD,IAAI,MAAM,UAET;OAAA,OAAO,MAAM,UAAU,SAAS,GAAG,MAAM;QACxC,IAAI,MAAM,QAAQ,CAAC,GAAG,KAAK,MAAM,KAAK,GAAG,SAAS,GAAG,MAAM;EAAA,OAC3D,KAAK,GAAG,MAAM;CAEzB;CACA,KAAK,MAAM,KAAK,OAAO;EACrB,MAAM,OAAO,MAAM,aAAa,CAAC;EACjC,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI;GACF,KAAK,UAAU,IAAI,GAAGA,KAAS,SAAS,MAAM,CAAC,KAAKA,KAAS,SAAS,CAAC,CAAC;EAC1E,QAAQ,CAER;CACF;CACA,OAAO;AACT;;AAGA,eAAe,kBAAkB,MAAc,cAA6C;CAC1F,MAAM,MAAmB,CAAC;CAC1B,MAAM,UAAU,WAAmC,eAAe,MAAM;CAExE,KAAK,MAAM,CAAC,MAAM,SAAS;EACzB,CAAC,YAAY,MAAM;EACnB,CAAC,YAAY,MAAM;EACnB,CAAC,YAAY,MAAM;EACnB,CAAC,aAAa,MAAM;CACtB,GAAY;EACV,MAAM,OAAO,MAAM,aAAaA,KAAS,KAAK,MAAM,IAAI,CAAC;EACzD,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,kBAAkB,MAAM,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM;EAC5D,KAAK,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG;GACtC,MAAM,IAAI,yBAAyB,KAAK,IAAI;GAC5C,IAAI,CAAC,GAAG;GACR,MAAM,KAAK,OAAO,EAAE,EAAE;GACtB,IAAI,CAAC,MAAO,OAAO,UAAU,CAAC,cAAe;GAC7C,MAAM,UAAU,GAAG,KAAK,GAAG,EAAE;GAC7B,IAAI,cAAc,OAAO,GAAG,IAAI,KAAK;IAAE;IAAI;IAAS,QAAQ;GAAK,CAAC;EACpE;CACF;CAEA,MAAM,WAAW,CAAC,gBAAgB,eAAe,CAAC,CAAC,KAAK,MAAMA,KAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,WAAW,CAAC,CAAC;CAC/G,IAAI,YAAY,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM;EACxE,MAAM,OAAO,MAAM,aAAa,QAAQ;EACxC,IAAI,SAAS,KAAA,GACX,IAAI;GACF,MAAM,EAAE,UAAU,MAAM,OAAO;GAC/B,MAAM,MAAM,MAAM,IAAI;GACtB,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG;IAChD,MAAM,KAAK,OAAO,IAAI;IACtB,IAAI,CAAC,MAAO,OAAO,UAAU,CAAC,cAAe;IAC7C,MAAM,UAAU,QAAQ;IACxB,IAAI,cAAc,OAAO,GAAG,IAAI,KAAK;KAAE;KAAI;KAAS,QAAQA,KAAS,SAAS,QAAQ;IAAE,CAAC;GAC3F;EACF,QAAQ,CAER;CAEJ;CACA,OAAO;AACT;AAEA,eAAe,kBAAkB,MAAc,cAA6C;CAC1F,IAAI,CAAC,WAAWA,KAAS,KAAK,MAAM,YAAY,CAAC,GAAG,OAAO,CAAC;CAC5D,IAAI,kBAAkB,SAAS,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC;CACvE,MAAM,MAAmB,CAAC;EAAE,IAAI;EAAa,SAAS;EAAe,QAAQ;CAAa,CAAC;CAE3F,IAAI,kBAAkB,gBAAgB,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAC9D,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAgB,QAAQ;CAAa,CAAC;CAExE,IAAI,cAAc,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAc,QAAQ;CAAa,CAAC;CACtF,OAAO;AACT;AAEA,eAAe,gBAAgB,MAAc,cAA6C;CACxF,IAAI,CAAC,WAAWA,KAAS,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,CAAC;CACxD,IAAI,kBAAkB,MAAM,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC;CAEpE,MAAM,MAAmB,CAAC;EAAE,IAAI;EAAa,SAAS;EAAgB,QAAQ;CAAS,CAAC;CACxF,IAAI,cAAc,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAiB,QAAQ;CAAS,CAAC;CACrF,OAAO;AACT;AAEA,eAAe,oBAAoB,MAAc,cAA6C;CAE5F,MAAM,UAAU;EADK;EAAkB;EAAa;EAAc;EAAW;EAAa;CAChE,CAAC,CAAC,QAAQ,MAAM,WAAWA,KAAS,KAAK,MAAM,CAAC,CAAC,CAAC;CAC5E,IAAI,QAAQ,WAAW,GAAG,OAAO,CAAC;CAClC,MAAM,WAAW,QAAQ;CACzB,MAAM,MAAmB,CAAC;CAC1B,MAAM,aAAc,MAAM,aAAaA,KAAS,KAAK,MAAM,QAAQ,EAAE,CAAC,KAAM;CAC5E,MAAM,YAAY,SAA0B,QAAQ,MAAM,MAAM,EAAE,WAAW,IAAI,CAAC,KAAK,WAAW,SAAS,IAAI;CAE/G,IAAI,SAAS,MAAM,KAAK,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAC1E,IAAI,KAAK;EAAE,IAAI;EAAa,SAAS;EAAU,QAAQ;CAAS,CAAC;CAEnE,IAAI,SAAS,MAAM,KAAK,kBAAkB,QAAQ,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAC1E,IAAI,KAAK;EAAE,IAAI;EAAQ,SAAS;EAAgB,QAAQ;CAAS,CAAC;CAEpE,IAAI,iBAAiB,SAAS,QAAQ,KAAK,WAAWA,KAAS,KAAK,MAAM,YAAY,CAAC,IACjF;MAAA,kBAAkB,UAAU,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MACxD,IAAI,KAAK;GAAE,IAAI;GAAQ,SAAS;GAAa,QAAQ;EAAS,CAAC;CAAA;CAGnE,OAAO;AACT;;AAGA,SAAS,eAAe,YAAsE;CAC5F,MAAM,uBAAO,IAAI,IAAwB;CACzC,KAAK,MAAM,KAAK,YACd,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,gBAAgB,EAAE,OAAO,GAAG,KAAK,IAAI,EAAE,IAAI,CAAC;CAErE,MAAM,QAAmB;EAAC;EAAa;EAAQ;CAAM;CACrD,MAAM,SAAsB,CAAC;CAC7B,MAAM,2BAAW,IAAI,IAAY;CACjC,KAAK,MAAM,MAAM,OAAO;EACtB,MAAM,IAAI,KAAK,IAAI,EAAE;EACrB,IAAI,GAAG;GACL,OAAO,KAAK;IAAE,IAAI,EAAE;IAAI,SAAS,EAAE;GAAQ,CAAC;GAC5C,SAAS,IAAI,EAAE,MAAM;EACvB;CACF;CACA,OAAO;EAAE;EAAQ,UAAU,CAAC,GAAG,QAAQ;CAAE;AAC3C;;;;;;;;;;;;AAaA,eAAsB,oBACpB,MACA,MACgC;CAEhC,IAAI,kBAAkB,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,MAAM;EAC3D,MAAM,UAAU,MAAM,YAAY,IAAI;EACtC,IAAI,OAAO,QAAQ,cAAc,UAE/B,OAAO;GAAE,MAAM;GAAU,QADV,OAAO,QAAQ,SAAS,WAAW,eAAe;GAChC,SAAS;EAAK;CAEnD;CAYA,MAAM,cAAa,MARE,QAAQ,IAAI;EAC/B,kBAAkB,MAAM,KAAK,YAAY;EACzC,kBAAkB,MAAM,KAAK,YAAY;EACzC,kBAAkB,MAAM,KAAK,YAAY;EACzC,gBAAgB,MAAM,KAAK,YAAY;EACvC,oBAAoB,MAAM,KAAK,YAAY;EAC3C,gBAAgB,IAAI;CACtB,CAAC,EAAA,CACyB,KAAK;CAC/B,IAAI,WAAW,WAAW,GAAG,OAAO;CAEpC,MAAM,YACJ,WAAW,MAAM,MAAM,EAAE,WAAW,cAAc,IAAI,SACpD,WAAW,MAAM,MAAM,EAAE,WAAW,YAAY,IAAI,SACpD,WAAW,MAAM,MAAM,EAAE,WAAW,QAAQ,IAAI,OAChD,WAAW,MAAM,MAAM,0CAA0C,KAAK,EAAE,MAAM,CAAC,IAAI,WACnF,WAAW,MAAM,MAAM,oDAAoD,KAAK,EAAE,MAAM,CAAC,IAAI,SAC7F;CAEJ,MAAM,EAAE,QAAQ,aAAa,eAAe,UAAU;CACtD,IAAI,OAAO,WAAW,GAAG,OAAO;CAKhC,IAAI,CADc,OAAO,MAAM,MAAM,WAAW,IAAI,EAAE,EAAa,CACtD,KAAK,CAAC,KAAK,cAAc,OAAO;CAC7C,OAAO;EAAE,MAAM;EAAU;EAAQ;EAAW,SAAS;EAAM;CAAS;AACtE;;;AAIA,SAAgB,oBAAoB,GAAgC;CAClE,IAAI,EAAE,SAAS,UAAU;EACvB,MAAM,SAAS,kBAAkB,EAAE,MAAM;EACzC,OAAO,SAAS,OAAO,OAAO,KAAK,OAAO;GAAE,IAAI,EAAE;GAAI,SAAS,EAAE;EAAQ,EAAE,IAAI,CAAC;CAClF;CACA,OAAO,EAAE,OAAO,KAAK,OAAO;EAAE,IAAI,EAAE;EAAI,SAAS,EAAE;CAAQ,EAAE;AAC/D;;;;;AAMA,SAAgB,eAAe,GAA2B;CACxD,IAAI,EAAE,SAAS,UAAU,OAAO,UAAU,EAAE;CAC5C,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CACxB,KAAK,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC,QAAQ,QAAQ,GAAG,GAAG,CAAC,CAC9D,KAAK,CAAC,CACN,KAAK,GAAG;CACX,OAAO,GAAG,EAAE,KAAK,GAAG,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAClF;;;;;;;;;;;;;;;;;;;;;;;;;;;AC7YA,MAAM,eAAsC;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AACA,MAAM,cAAqC,CAAC,mBAAmB;AAe/D,MAAM,mBAAmB;;;AAGzB,MAAM,mBAAmB;AACzB,MAAM,yBAAyB;;;;AAK/B,MAAM,YACJ;;;;;;;;AASF,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,CAAC,cAAc,OAAO,GAAG,OAAO;CACpC,MAAM,OAAO,YAAY,OAAO;CAChC,IAAI,UAAU,KAAK,IAAI,GAAG,OAAO;CACjC,IAAI,kBAAkB,IAAI,GAAG,OAAO;CACpC,MAAM,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM;CACpC,OAAO,kBAAkB,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM;AAC5D;AAEA,SAAS,YAAY,GAAmB;CACtC,OAAO,EAAE,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;AACrC;;;AAIA,eAAe,eAAe,MAA0D;CACtF,MAAM,QAAkB,CAAC;CACzB,MAAM,QAAkB,CAAC;CACzB,IAAI,QAAQ;CACZ,MAAM,aAAa,OAAO,KAAa,QAA+B;EACpE,IAAI,MAAM,UAAU,oBAAoB,SAAS,wBAAwB;EACzE,IAAI;GACF,MAAM,MAAM,MAAMC,SAAG,SAAS,KAAK,MAAM;GACzC,MAAM,QAAQ,IAAI,SAAS,mBAAmB,IAAI,MAAM,GAAG,gBAAgB,IAAI;GAC/E,MAAM,KAAK,KAAK;GAChB,MAAM,KAAK,GAAG;GACd,SAAS,MAAM;EACjB,QAAQ,CAER;CACF;CACA,KAAK,MAAM,KAAK,cAAc;EAC5B,MAAM,MAAMC,KAAS,KAAK,MAAM,CAAC;EACjC,IAAI,WAAW,GAAG,GAAG,MAAM,WAAW,KAAK,CAAC;CAC9C;CACA,KAAK,MAAM,KAAK,aAAa;EAC3B,MAAM,MAAMA,KAAS,KAAK,MAAM,CAAC;EACjC,IAAI;GACF,KAAK,MAAM,QAAQ,MAAMD,SAAG,QAAQ,GAAG,GACrC,IAAI,cAAc,KAAK,IAAI,GAAG,MAAM,WAAWC,KAAS,KAAK,KAAK,IAAI,GAAGA,KAAS,KAAK,GAAG,IAAI,CAAC;EAEnG,QAAQ,CAER;CACF;CACA,OAAO;EAAE,MAAM,MAAM,KAAK,IAAI;EAAG;CAAM;AACzC;;;AAIA,eAAsB,YAAY,MAA+B;CAC/D,MAAM,EAAE,MAAM,UAAU,MAAM,eAAe,IAAI;CACjD,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAC/B,OAAO,IAAI,CAAC,CACZ,OAAO,IAAI,CAAC,CACZ,OAAO,KAAK;AACjB;AAEA,SAAS,gBAAwB;CAC/B,OAAOA,KAAS,KAAK,MAAM,SAAS,aAAa,YAAY;AAC/D;AACA,SAAS,cAAc,MAAsB;CAC3C,OAAOA,KAAS,KAAK,cAAc,GAAG,WAAW,QAAQ,CAAC,CAAC,OAAOA,KAAS,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;AACtH;;;;AAKA,eAAsB,mBAAmB,MAAgD;CACvF,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,MAAM,MAAMD,SAAG,SAAS,cAAc,IAAI,GAAG,MAAM,CAAC;CACjE,QAAQ;EACN,OAAO;CACT;CACA,IAAI,CAAC,OAAO,CAAC,MAAM,QAAQ,IAAI,MAAM,KAAK,IAAI,OAAO,WAAW,GAAG,OAAO;CAC1E,MAAM,KAAK,MAAM,gBAAgB,IAAI,CAAC,CAAC,YAAY,EAAE;CACrD,IAAI,GAAG,WAAW,KAAK,OAAO,IAAI,aAAa,OAAO;CACtD,MAAM,KAAK,MAAM,YAAY,IAAI,CAAC,CAAC,YAAY,EAAE;CACjD,IAAI,GAAG,WAAW,KAAK,OAAO,IAAI,aAAa,OAAO;CAGtD,MAAM,SAAS,IAAI,OAAO,QACvB,MAAM,KAAK,OAAO,EAAE,OAAO,YAAY,UAAU,IAAI,EAAE,EAAE,KAAK,OAAO,EAAE,YAAY,YAAY,wBAAwB,EAAE,OAAO,CACnI;CACA,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,OAAO;EAAE,GAAG;EAAK;CAAO;AAC1B;AAEA,eAAsB,oBAAoB,KAAsC;CAC9E,MAAMA,SAAG,MAAM,cAAc,GAAG,EAAE,WAAW,KAAK,CAAC;CACnD,MAAM,MAAM,GAAG,cAAc,IAAI,IAAI,EAAE,GAAG,QAAQ,IAAI;CACtD,MAAMA,SAAG,UAAU,KAAK,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;CAC5E,MAAMA,SAAG,OAAO,KAAK,cAAc,IAAI,IAAI,CAAC;AAC9C;AAEA,MAAM,oBAAoB,UACxB,wKAC8E,MAAM,KAAK,IAAI,EAAE;;AAiBjG,SAAS,YAAY,MAAuB;CAC1C,MAAM,SAAS,gCAAgC,KAAK,IAAI;CACxD,MAAM,OAAO,SAAS,OAAO,KAAK;CAClC,MAAM,QAAQ,KAAK,QAAQ,GAAG;CAC9B,MAAM,MAAM,KAAK,YAAY,GAAG;CAChC,IAAI,QAAQ,KAAK,OAAO,OAAO,OAAO,KAAA;CACtC,IAAI;EACF,OAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,CAAC,CAAC;CAC9C,QAAQ;EACN;CACF;AACF;AAEA,MAAM,4BAAiC,IAAI,IAAa;CAAC;CAAa;CAAQ;AAAM,CAAC;;;;;;;;;;AAWrF,SAAgB,uBACd,WACA,cACA,cACa;CACb,MAAM,eAAe,YAAY,YAAY;CAC7C,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,KAAK,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,GAAG;EACzD,IAAI,CAAC,KAAK,OAAO,MAAM,UAAU;EACjC,MAAM,KAAM,EAAuB;EACnC,MAAM,UAAW,EAA4B;EAC7C,IAAI,OAAO,OAAO,YAAY,CAAC,UAAU,IAAI,EAAE,GAAG;EAClD,IAAI,OAAO,YAAY,UAAU;EACjC,IAAI,OAAO,UAAU,CAAC,cAAc;EACpC,IAAI,KAAK,IAAI,EAAE,GAAG;EAClB,IAAI,CAAC,wBAAwB,OAAO,GAAG;EACvC,IAAI,CAAC,aAAa,SAAS,YAAY,OAAO,CAAC,GAAG;EAClD,KAAK,IAAI,EAAE;EACX,OAAO,KAAK;GAAE;GAAI,SAAS,QAAQ,KAAK;EAAE,CAAC;CAC7C;CACA,OAAO;AACT;;;;;;AAOA,eAAsB,qBACpB,KACA,MACgC;CAChC,MAAM,OAAO,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,GAAG;CAChD,MAAM,EAAE,MAAM,cAAc,UAAU,MAAM,eAAe,IAAI;CAC/D,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,IAAI;CACJ,IAAI;EAKF,MAAM,EAAE,mBAAmB,MAAM,OAAO;EAGxC,SAAS,MAAM,eAAe;GAC5B,MAAM;GACN,WAAW;GACX,QAAQ,iBAAiB,KAAK;GAC9B,QAAQ,KAAK;EACf,CAAC;CACH,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,SAAS,OAAO;CAC3B,MAAM,SAAS,YAAY,OAAO,IAAI;CACtC,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO;CAClD,MAAM,MAAM;CACZ,MAAM,SAAS,uBAAuB,IAAI,QAAQ,cAAc,KAAK,YAAY;CACjF,IAAI,OAAO,WAAW,GAAG,OAAO;CAGhC,OAAO;EAAE,WAFS,OAAO,IAAI,cAAc,YAAY,IAAI,UAAU,SAAS,IAAI,IAAI,YAAY;EAE9E;EAAQ,YADT,OAAO,IAAI,eAAe,WAAW,IAAI,aAAa;EACjC,UAAU;CAAM;AAC1D"}

package/dist/{internal-stop-hook-DrX2xlj0.js → internal-stop-hook-OnfK3BxE.js}

@@ -4,7 +4,7 @@ import { a as decideStopHook, c as launchBaselineKey, d as stopReviewEnabled, o
 import { t as liveExec } from "./orchestration-pzbrKkgD.js";
 import { c as repoRoot, i as fileReviewDebounce, l as stopGateEnabledForRepo, r as fileLastPromptStore, t as fileBaselineStore, u as stopReviewStateDir } from "./stop-gate-policy-BGd6b5hR.js";
 import { r as hookMcpRuntimeFromEnv } from "./hook-mcp-client-DBvm9608.js";
-import { a as checksForDescriptor, n as readDiscoveredGate, o as descriptorHash, s as parseGateDescriptor } from "./gate-discovery-Bjar5dgv.js";
+import { a as checksForDescriptor, n as readDiscoveredGate, o as descriptorHash, s as parseGateDescriptor } from "./gate-discovery-C30rfnyo.js";
 import { defineCommand } from "citty";
 import { mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import path from "node:path";
@@ -257,4 +257,4 @@ const internalStopHook = defineCommand({
 //#endregion
 export { internalStopHook };
 
-//# sourceMappingURL=internal-stop-hook-DrX2xlj0.js.map
+//# sourceMappingURL=internal-stop-hook-OnfK3BxE.js.map

package/dist/{internal-stop-hook-DrX2xlj0.js.map → internal-stop-hook-OnfK3BxE.js.map}

@@ -1 +1 @@
-{"version":3,"file":"internal-stop-hook-DrX2xlj0.js","names":[],"sources":["../src/internal-stop-hook.ts"],"sourcesContent":["/**\n * The internal `internal-stop-hook` subcommand: the executable a spawned Claude\n * Code session's Stop hook invokes (registered into the mirrored settings.json by\n * the launcher when `GH_ROUTER_ENABLE_STOP_GATE` is set). It reads Claude Code's\n * hook payload from stdin, runs the SEALED structural gate over the session's\n * working-tree diff, and maps the result to the hook exit contract: exit 2 (with\n * the reason on stderr) blocks the stop so the model fixes the failure; exit 0\n * allows it. The `stop_hook_active` loop guard (in `decideStopHook`) guarantees\n * it can never wedge the session.\n *\n * All decision logic lives in `decideStopHook` (pure, unit-tested); this wrapper\n * only does stdin read + the live `git diff` capture + the exit. The live firing\n * is verified by the gated E2E (it needs a real spawned session).\n */\n\nimport { defineCommand } from \"citty\"\n\nimport { spawn } from \"node:child_process\"\nimport { randomBytes } from \"node:crypto\"\nimport { mkdirSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\"\nimport { tmpdir } from \"node:os\"\nimport path from \"node:path\"\n\nimport { parseBoolEnv, runCommandCapture } from \"./lib/exec\"\nimport { PACKAGE_ROOT_FLAG, explicitPackageRoot } from \"./lib/package-root\"\nimport { liveExec } from \"./lib/orchestration\"\nimport { readDiscoveredGate } from \"./lib/orchestration/gate-discovery\"\nimport { checksForDescriptor, descriptorHash, parseGateDescriptor, type GateDescriptor } from \"./lib/orchestration/harness-parse\"\nimport { hookMcpRuntimeFromEnv } from \"./lib/orchestration/hook-mcp-client\"\nimport {\n  decideStopHook,\n  fileBlockBudget,\n  launchBaselineKey,\n  stopGateId,\n  stopReviewEnabled,\n  type StopReviewContext,\n} from \"./lib/orchestration/stop-gate-hook\"\nimport {\n  fileBaselineStore,\n  fileLastPromptStore,\n  fileReviewDebounce,\n  repoRoot,\n  stopGateEnabledForRepo,\n  stopReviewStateDir,\n} from \"./lib/orchestration/stop-gate-policy\"\nimport { parseIntEnv } from \"./lib/exec\"\n\n/**\n * Read the hook payload from stdin SYNCHRONOUSLY (`readFileSync(0)`). An async\n * stdin read leaves an in-flight libuv FS request that, on Windows, races the\n * process teardown and trips a `uv_async_send` assertion; a synchronous read has\n * no such handle. Hooks always receive piped/redirected stdin, so this never\n * blocks (guarded against an interactive TTY, and any error -> \"\").\n */\nfunction readStdin(): string {\n  try {\n    if (process.stdin.isTTY) return \"\"\n    return readFileSync(0, \"utf8\")\n  } catch {\n    return \"\"\n  }\n}\n\n/** Max diff bytes scanned for gate-weakening: a hard cap so a huge generated diff\n *  (e.g. a lockfile) can never OOM or stall the hook. */\nconst MAX_DIFF_BYTES = 2 * 1024 * 1024\n\n/** Build a tiny synthetic diff for untracked paths so the weakening scan sees\n *  their contents too. No index mutation (`git add -N`) is needed. */\nasync function captureUntrackedDiff(cwd: string, paths: string[]): Promise<string> {\n  const chunks: string[] = []\n  let bytes = 0\n  for (const untrackedPath of paths) {\n    const result = await runCommandCapture(\n      [\"git\", \"diff\", \"--no-index\", \"--\", \"/dev/null\", untrackedPath],\n      { cwd, timeoutMs: 5_000, maxStdoutBytes: MAX_DIFF_BYTES },\n    )\n    // `git diff --no-index` returns 1 when differences exist; anything else is an\n    // actual failure. A truncated untracked diff is unknown, never \"no diff\".\n    if (result.code !== 1 || result.truncated) throw new Error(`git diff for untracked file failed with exit ${result.code}`)\n    bytes += Buffer.byteLength(result.stdout, \"utf8\")\n    if (bytes > MAX_DIFF_BYTES) throw new Error(\"git working-tree capture exceeded its size limit\")\n    chunks.push(result.stdout)\n  }\n  return chunks.join(\"\")\n}\n\n/** Capture every working-tree change WITHOUT mutating the user's index (no\n *  `git add -N`). `git diff HEAD` covers staged + unstaged tracked changes;\n *  `git ls-files --others` catches untracked files and each is diffed against an\n *  empty file so gate-weakening in new tests is visible. Git failures/truncation\n *  reject, so the decision layer runs the full checks instead of mistaking an\n *  unknown tree for a no-diff turn. */\nexport async function captureStopGateDiff(cwd: string): Promise<string> {\n  const [diffResult, untrackedResult] = await Promise.all([\n    runCommandCapture([\"git\", \"diff\", \"HEAD\"], { cwd, timeoutMs: 5_000, maxStdoutBytes: MAX_DIFF_BYTES }),\n    runCommandCapture([\"git\", \"ls-files\", \"--others\", \"--exclude-standard\", \"-z\"], {\n      cwd,\n      timeoutMs: 5_000,\n      maxStdoutBytes: MAX_DIFF_BYTES,\n    }),\n  ])\n  if (diffResult.code !== 0) throw new Error(`git diff failed with exit ${diffResult.code}`)\n  if (untrackedResult.code !== 0) throw new Error(`git ls-files failed with exit ${untrackedResult.code}`)\n  if (diffResult.truncated || untrackedResult.truncated) throw new Error(\"git working-tree capture exceeded its size limit\")\n\n  const untrackedPaths = untrackedResult.stdout.split(\"\\0\").filter(Boolean)\n  if (untrackedPaths.length === 0) return diffResult.stdout\n  const untrackedDiff = await captureUntrackedDiff(cwd, untrackedPaths)\n  if (Buffer.byteLength(diffResult.stdout, \"utf8\") + Buffer.byteLength(untrackedDiff, \"utf8\") > MAX_DIFF_BYTES) {\n    throw new Error(\"git working-tree capture exceeded its size limit\")\n  }\n  return diffResult.stdout + untrackedDiff\n}\n\n/** Flush a message to stderr before exiting (process.exit can drop an unflushed\n *  write; the model reads this stderr on a block). */\nasync function writeStderr(msg: string): Promise<void> {\n  await new Promise<void>((resolve) => {\n    process.stderr.write(msg, () => resolve())\n  })\n}\n\n/**\n * Fire-and-forget spawn of the detached background reviewer. The payload (which\n * includes the up-to-2-MiB diff) is written to a temp file SYNCHRONOUSLY before\n * the spawn — a pipe to the child's stdin would race the parent's `process.exit`\n * and could deliver a truncated diff. The child reads the file (path passed via\n * `GH_ROUTER_STOP_REVIEW_PAYLOAD`), unlinks it, and inherits the proxy URL/nonce\n * env. Everything is swallowed: the advisory layer never affects the stop.\n */\nfunction spawnStopReview(ctx: StopReviewContext, extras: { prompt: string; transcriptPath: string }): void {\n  let payloadPath: string | undefined\n  try {\n    const dir = stopReviewStateDir()\n    mkdirSync(dir, { recursive: true })\n    payloadPath = path.join(dir, `payload-${process.pid}-${randomBytes(4).toString(\"hex\")}.json`)\n    writeFileSync(\n      payloadPath,\n      JSON.stringify({\n        session_id: ctx.sessionId,\n        cwd: ctx.cwd,\n        diff: ctx.diff,\n        prompt: extras.prompt,\n        transcript_path: extras.transcriptPath,\n      }),\n      { mode: 0o600 },\n    )\n    // Invoke the same binary's `internal-stop-review` subcommand. Preserve the\n    // package root when this hook itself runs from the relocated launcher.\n    const scriptArgs = process.argv[1] && process.argv[1] !== process.execPath ? [process.argv[1]] : []\n    const root = explicitPackageRoot()\n    const packageRootArgs = root ? [PACKAGE_ROOT_FLAG, root] : []\n    const child = spawn(process.execPath, [...scriptArgs, ...packageRootArgs, \"internal-stop-review\"], {\n      detached: true,\n      windowsHide: true,\n      stdio: \"ignore\",\n      env: { ...process.env, GH_ROUTER_STOP_REVIEW_PAYLOAD: payloadPath },\n    })\n    // A spawn failure (EAGAIN / EACCES / fork limit) is delivered ASYNCHRONOUSLY\n    // via the child's 'error' event, AFTER this synchronous try block exits. With\n    // no listener Node escalates it to an uncaughtException — which main.ts turns\n    // into process.exit(1), corrupting the Stop hook's exit code. Swallow it here\n    // (and drop the now-orphaned payload the child never read) so the advisory\n    // spawn truly never affects the stop.\n    const orphan = payloadPath\n    child.on(\"error\", () => {\n      if (orphan) {\n        try {\n          unlinkSync(orphan)\n        } catch {\n          /* best-effort */\n        }\n      }\n    })\n    child.unref()\n  } catch {\n    // Advisory spawn is best-effort; never disrupt the stop. If we wrote the\n    // payload file but the spawn failed, drop it so it doesn't orphan (the\n    // child — which would normally unlink it — never started).\n    if (payloadPath) {\n      try {\n        unlinkSync(payloadPath)\n      } catch {\n        /* best-effort */\n      }\n    }\n  }\n}\n\n/** The checks for a resolved descriptor: sealed descriptors resolve their sealed\n *  command set; parsed/discovered carry their own. */\ntype ResolveChecks = NonNullable<Parameters<typeof decideStopHook>[0][\"resolveChecks\"]>\n\n/**\n * Build the dynamic `resolveChecks` for the live Stop hook, per the env the\n * launcher set:\n *   - GH_ROUTER_STOP_GATE_PARSED → re-derive the deterministic parser at the\n *     stop-time tree (stateless, no cache);\n *   - GH_ROUTER_STOP_GATE_DISCOVERED → read the cached evidence-pinned record.\n * Both pin the checks to the descriptor's `workdir` (the repo root) and compute\n * the launch-stable baseline key so the launch-captured (pre-mutation) baseline\n * is read. Any miss → null → the hook fails OPEN.\n */\nfunction buildResolveChecks(mode: \"parsed\" | \"discovered\"): ResolveChecks {\n  const includeTests = parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_RUN_TESTS) === true\n  return async (cwd: string) => {\n    const root = await repoRoot(cwd).catch(() => cwd)\n    let descriptor: GateDescriptor | null = null\n    if (mode === \"parsed\") {\n      descriptor = await parseGateDescriptor(root, { includeTests }).catch(() => null)\n    } else {\n      const rec = await readDiscoveredGate(root).catch(() => null)\n      if (rec) {\n        descriptor = {\n          kind: \"discovered\",\n          checks: rec.checks,\n          ecosystem: rec.ecosystem,\n          workdir: root,\n          evidence: rec.evidence,\n        }\n      }\n    }\n    if (!descriptor) return null\n    const checks = checksForDescriptor(descriptor)\n    if (checks.length === 0) return null\n    const descriptorKey = descriptorHash(descriptor)\n    const workdir = descriptor.workdir || root\n    const token = process.env.GH_ROUTER_STOP_GATE_BASELINE_TOKEN || undefined\n    return { checks, workdir, descriptorKey, baselineKey: launchBaselineKey(workdir, descriptorKey, token) }\n  }\n}\n\n/** Which dynamic gate mode the launcher armed (sealed → undefined). */\nfunction dynamicMode(): \"parsed\" | \"discovered\" | undefined {\n  if (parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_PARSED) === true) return \"parsed\"\n  if (parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_DISCOVERED) === true) return \"discovered\"\n  return undefined\n}\n\nexport const internalStopHook = defineCommand({\n  meta: {\n    name: \"internal-stop-hook\",\n    description:\n      \"Internal: the structural-gate Stop hook. Reads the Claude Code hook payload on stdin, \"\n      + \"runs the sealed gate, exits 2 (blocks the stop) on a red gate or gate-weakening diff.\",\n  },\n  async run() {\n    const stdin = readStdin()\n    // The advisory review (hook V2) is wired only when it's enabled AND the\n    // launcher injected the proxy URL/nonce. It is side-effect-only: the\n    // deterministic gate below is unchanged and remains the only blocker.\n    const reviewEnabled = stopReviewEnabled() && hookMcpRuntimeFromEnv() !== undefined\n    let transcriptPath = \"\"\n    let userPrompt = \"\"\n    if (reviewEnabled) {\n      // Parse the payload once for the transcript pointer + the session id used\n      // to look up the user's last prompt (the Stop payload carries no prompt;\n      // the UserPromptSubmit hook stashed it). Best-effort — a parse miss just\n      // means the reviewer judges against the diff alone.\n      try {\n        const p: unknown = JSON.parse(stdin)\n        if (p && typeof p === \"object\") {\n          const obj = p as { transcript_path?: unknown; session_id?: unknown }\n          transcriptPath = typeof obj.transcript_path === \"string\" ? obj.transcript_path : \"\"\n          const sid = typeof obj.session_id === \"string\" ? obj.session_id : \"\"\n          if (sid) {\n            userPrompt = (await fileLastPromptStore(stopReviewStateDir()).read(sid).catch(() => null)) ?? \"\"\n          }\n        }\n      } catch {\n        /* tolerate a non-JSON stdin */\n      }\n    }\n\n    let decision: { exitCode: 0 | 2; stderr?: string }\n    try {\n      const timeoutEnv = parseIntEnv(process.env.GH_ROUTER_STOP_GATE_TIMEOUT_MS)\n      const mode = dynamicMode()\n      decision = await decideStopHook({\n        stdin,\n        gateId: stopGateId(),\n        exec: liveExec,\n        captureDiff: captureStopGateDiff,\n        fallbackCwd: process.cwd(),\n        budget: fileBlockBudget(path.join(tmpdir(), \"gh-router-stopgate\")),\n        baseline: fileBaselineStore(path.join(tmpdir(), \"gh-router-stopgate-baseline\")),\n        isEnabledForRepo: (cwd) => stopGateEnabledForRepo(cwd),\n        resolveChecks: mode ? buildResolveChecks(mode) : undefined,\n        // parseIntEnv already rejects non-positive / non-integer / truncating\n        // values, so undefined here means \"use the built-in default\".\n        timeoutMs: timeoutEnv,\n        reviewDebounce: reviewEnabled ? fileReviewDebounce(stopReviewStateDir()) : undefined,\n        spawnReview: reviewEnabled\n          ? (ctx) => spawnStopReview(ctx, { prompt: userPrompt, transcriptPath })\n          : undefined,\n      })\n    } catch {\n      // Fail OPEN on ANY unexpected error: a Stop hook must never wedge the\n      // session, so an internal crash allows the stop (exit 0) rather than\n      // surfacing a non-blocking error or a hang.\n      process.exitCode = 0\n      return\n    }\n    // Write any stderr the decision carries — both the exit-2 block reason AND\n    // the LOUD exit-0 stand-down (max-block budget reached). A clean green stop\n    // carries no stderr, so this stays silent on the common path.\n    if (decision.stderr) {\n      await writeStderr(`${decision.stderr}\\n`)\n    }\n    // Natural exit: set the code and return. A hard process.exit() races libuv's\n    // stdio teardown on Windows (uv_async_send assertion) on the fast-return\n    // paths. The detached review child is unref'd and the gate's children are\n    // reaped, so no handle keeps the loop alive — the process exits with this\n    // code. The exit-2 block contract is preserved (stderr is flushed above).\n    process.exitCode = decision.exitCode\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,SAAS,YAAoB;CAC3B,IAAI;EACF,IAAI,QAAQ,MAAM,OAAO,OAAO;EAChC,OAAO,aAAa,GAAG,MAAM;CAC/B,QAAQ;EACN,OAAO;CACT;AACF;;;AAIA,MAAM,iBAAiB;;;AAIvB,eAAe,qBAAqB,KAAa,OAAkC;CACjF,MAAM,SAAmB,CAAC;CAC1B,IAAI,QAAQ;CACZ,KAAK,MAAM,iBAAiB,OAAO;EACjC,MAAM,SAAS,MAAM,kBACnB;GAAC;GAAO;GAAQ;GAAc;GAAM;GAAa;EAAa,GAC9D;GAAE;GAAK,WAAW;GAAO,gBAAgB;EAAe,CAC1D;EAGA,IAAI,OAAO,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,MAAM,gDAAgD,OAAO,MAAM;EACxH,SAAS,OAAO,WAAW,OAAO,QAAQ,MAAM;EAChD,IAAI,QAAQ,gBAAgB,MAAM,IAAI,MAAM,kDAAkD;EAC9F,OAAO,KAAK,OAAO,MAAM;CAC3B;CACA,OAAO,OAAO,KAAK,EAAE;AACvB;;;;;;;AAQA,eAAsB,oBAAoB,KAA8B;CACtE,MAAM,CAAC,YAAY,mBAAmB,MAAM,QAAQ,IAAI,CACtD,kBAAkB;EAAC;EAAO;EAAQ;CAAM,GAAG;EAAE;EAAK,WAAW;EAAO,gBAAgB;CAAe,CAAC,GACpG,kBAAkB;EAAC;EAAO;EAAY;EAAY;EAAsB;CAAI,GAAG;EAC7E;EACA,WAAW;EACX,gBAAgB;CAClB,CAAC,CACH,CAAC;CACD,IAAI,WAAW,SAAS,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,MAAM;CACzF,IAAI,gBAAgB,SAAS,GAAG,MAAM,IAAI,MAAM,iCAAiC,gBAAgB,MAAM;CACvG,IAAI,WAAW,aAAa,gBAAgB,WAAW,MAAM,IAAI,MAAM,kDAAkD;CAEzH,MAAM,iBAAiB,gBAAgB,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,OAAO;CACxE,IAAI,eAAe,WAAW,GAAG,OAAO,WAAW;CACnD,MAAM,gBAAgB,MAAM,qBAAqB,KAAK,cAAc;CACpE,IAAI,OAAO,WAAW,WAAW,QAAQ,MAAM,IAAI,OAAO,WAAW,eAAe,MAAM,IAAI,gBAC5F,MAAM,IAAI,MAAM,kDAAkD;CAEpE,OAAO,WAAW,SAAS;AAC7B;;;AAIA,eAAe,YAAY,KAA4B;CACrD,MAAM,IAAI,SAAe,YAAY;EACnC,QAAQ,OAAO,MAAM,WAAW,QAAQ,CAAC;CAC3C,CAAC;AACH;;;;;;;;;AAUA,SAAS,gBAAgB,KAAwB,QAA0D;CACzG,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,mBAAmB;EAC/B,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,cAAc,KAAK,KAAK,KAAK,WAAW,QAAQ,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,MAAM;EAC5F,cACE,aACA,KAAK,UAAU;GACb,YAAY,IAAI;GAChB,KAAK,IAAI;GACT,MAAM,IAAI;GACV,QAAQ,OAAO;GACf,iBAAiB,OAAO;EAC1B,CAAC,GACD,EAAE,MAAM,IAAM,CAChB;EAGA,MAAM,aAAa,QAAQ,KAAK,MAAM,QAAQ,KAAK,OAAO,QAAQ,WAAW,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC;EAClG,MAAM,OAAO,oBAAoB;EACjC,MAAM,kBAAkB,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;EAC5D,MAAM,QAAQ,MAAM,QAAQ,UAAU;GAAC,GAAG;GAAY,GAAG;GAAiB;EAAsB,GAAG;GACjG,UAAU;GACV,aAAa;GACb,OAAO;GACP,KAAK;IAAE,GAAG,QAAQ;IAAK,+BAA+B;GAAY;EACpE,CAAC;EAOD,MAAM,SAAS;EACf,MAAM,GAAG,eAAe;GACtB,IAAI,QACF,IAAI;IACF,WAAW,MAAM;GACnB,QAAQ,CAER;EAEJ,CAAC;EACD,MAAM,MAAM;CACd,QAAQ;EAIN,IAAI,aACF,IAAI;GACF,WAAW,WAAW;EACxB,QAAQ,CAER;CAEJ;AACF;;;;;;;;;;;AAgBA,SAAS,mBAAmB,MAA8C;CACxE,MAAM,eAAe,aAAa,QAAQ,IAAI,6BAA6B,MAAM;CACjF,OAAO,OAAO,QAAgB;EAC5B,MAAM,OAAO,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,GAAG;EAChD,IAAI,aAAoC;EACxC,IAAI,SAAS,UACX,aAAa,MAAM,oBAAoB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,IAAI;OAC1E;GACL,MAAM,MAAM,MAAM,mBAAmB,IAAI,CAAC,CAAC,YAAY,IAAI;GAC3D,IAAI,KACF,aAAa;IACX,MAAM;IACN,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,SAAS;IACT,UAAU,IAAI;GAChB;EAEJ;EACA,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,SAAS,oBAAoB,UAAU;EAC7C,IAAI,OAAO,WAAW,GAAG,OAAO;EAChC,MAAM,gBAAgB,eAAe,UAAU;EAC/C,MAAM,UAAU,WAAW,WAAW;EACtC,MAAM,QAAQ,QAAQ,IAAI,sCAAsC,KAAA;EAChE,OAAO;GAAE;GAAQ;GAAS;GAAe,aAAa,kBAAkB,SAAS,eAAe,KAAK;EAAE;CACzG;AACF;;AAGA,SAAS,cAAmD;CAC1D,IAAI,aAAa,QAAQ,IAAI,0BAA0B,MAAM,MAAM,OAAO;CAC1E,IAAI,aAAa,QAAQ,IAAI,8BAA8B,MAAM,MAAM,OAAO;AAEhF;AAEA,MAAa,mBAAmB,cAAc;CAC5C,MAAM;EACJ,MAAM;EACN,aACE;CAEJ;CACA,MAAM,MAAM;EACV,MAAM,QAAQ,UAAU;EAIxB,MAAM,gBAAgB,kBAAkB,KAAK,sBAAsB,MAAM,KAAA;EACzE,IAAI,iBAAiB;EACrB,IAAI,aAAa;EACjB,IAAI,eAKF,IAAI;GACF,MAAM,IAAa,KAAK,MAAM,KAAK;GACnC,IAAI,KAAK,OAAO,MAAM,UAAU;IAC9B,MAAM,MAAM;IACZ,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;IACjF,MAAM,MAAM,OAAO,IAAI,eAAe,WAAW,IAAI,aAAa;IAClE,IAAI,KACF,aAAc,MAAM,oBAAoB,mBAAmB,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,KAAM;GAElG;EACF,QAAQ,CAER;EAGF,IAAI;EACJ,IAAI;GACF,MAAM,aAAa,YAAY,QAAQ,IAAI,8BAA8B;GACzE,MAAM,OAAO,YAAY;GACzB,WAAW,MAAM,eAAe;IAC9B;IACA,QAAQ,WAAW;IACnB,MAAM;IACN,aAAa;IACb,aAAa,QAAQ,IAAI;IACzB,QAAQ,gBAAgB,KAAK,KAAK,OAAO,GAAG,oBAAoB,CAAC;IACjE,UAAU,kBAAkB,KAAK,KAAK,OAAO,GAAG,6BAA6B,CAAC;IAC9E,mBAAmB,QAAQ,uBAAuB,GAAG;IACrD,eAAe,OAAO,mBAAmB,IAAI,IAAI,KAAA;IAGjD,WAAW;IACX,gBAAgB,gBAAgB,mBAAmB,mBAAmB,CAAC,IAAI,KAAA;IAC3E,aAAa,iBACR,QAAQ,gBAAgB,KAAK;KAAE,QAAQ;KAAY;IAAe,CAAC,IACpE,KAAA;GACN,CAAC;EACH,QAAQ;GAIN,QAAQ,WAAW;GACnB;EACF;EAIA,IAAI,SAAS,QACX,MAAM,YAAY,GAAG,SAAS,OAAO,GAAG;EAO1C,QAAQ,WAAW,SAAS;CAC9B;AACF,CAAC"}
+{"version":3,"file":"internal-stop-hook-OnfK3BxE.js","names":[],"sources":["../src/internal-stop-hook.ts"],"sourcesContent":["/**\n * The internal `internal-stop-hook` subcommand: the executable a spawned Claude\n * Code session's Stop hook invokes (registered into the mirrored settings.json by\n * the launcher when `GH_ROUTER_ENABLE_STOP_GATE` is set). It reads Claude Code's\n * hook payload from stdin, runs the SEALED structural gate over the session's\n * working-tree diff, and maps the result to the hook exit contract: exit 2 (with\n * the reason on stderr) blocks the stop so the model fixes the failure; exit 0\n * allows it. The `stop_hook_active` loop guard (in `decideStopHook`) guarantees\n * it can never wedge the session.\n *\n * All decision logic lives in `decideStopHook` (pure, unit-tested); this wrapper\n * only does stdin read + the live `git diff` capture + the exit. The live firing\n * is verified by the gated E2E (it needs a real spawned session).\n */\n\nimport { defineCommand } from \"citty\"\n\nimport { spawn } from \"node:child_process\"\nimport { randomBytes } from \"node:crypto\"\nimport { mkdirSync, readFileSync, unlinkSync, writeFileSync } from \"node:fs\"\nimport { tmpdir } from \"node:os\"\nimport path from \"node:path\"\n\nimport { parseBoolEnv, runCommandCapture } from \"./lib/exec\"\nimport { PACKAGE_ROOT_FLAG, explicitPackageRoot } from \"./lib/package-root\"\nimport { liveExec } from \"./lib/orchestration\"\nimport { readDiscoveredGate } from \"./lib/orchestration/gate-discovery\"\nimport { checksForDescriptor, descriptorHash, parseGateDescriptor, type GateDescriptor } from \"./lib/orchestration/harness-parse\"\nimport { hookMcpRuntimeFromEnv } from \"./lib/orchestration/hook-mcp-client\"\nimport {\n  decideStopHook,\n  fileBlockBudget,\n  launchBaselineKey,\n  stopGateId,\n  stopReviewEnabled,\n  type StopReviewContext,\n} from \"./lib/orchestration/stop-gate-hook\"\nimport {\n  fileBaselineStore,\n  fileLastPromptStore,\n  fileReviewDebounce,\n  repoRoot,\n  stopGateEnabledForRepo,\n  stopReviewStateDir,\n} from \"./lib/orchestration/stop-gate-policy\"\nimport { parseIntEnv } from \"./lib/exec\"\n\n/**\n * Read the hook payload from stdin SYNCHRONOUSLY (`readFileSync(0)`). An async\n * stdin read leaves an in-flight libuv FS request that, on Windows, races the\n * process teardown and trips a `uv_async_send` assertion; a synchronous read has\n * no such handle. Hooks always receive piped/redirected stdin, so this never\n * blocks (guarded against an interactive TTY, and any error -> \"\").\n */\nfunction readStdin(): string {\n  try {\n    if (process.stdin.isTTY) return \"\"\n    return readFileSync(0, \"utf8\")\n  } catch {\n    return \"\"\n  }\n}\n\n/** Max diff bytes scanned for gate-weakening: a hard cap so a huge generated diff\n *  (e.g. a lockfile) can never OOM or stall the hook. */\nconst MAX_DIFF_BYTES = 2 * 1024 * 1024\n\n/** Build a tiny synthetic diff for untracked paths so the weakening scan sees\n *  their contents too. No index mutation (`git add -N`) is needed. */\nasync function captureUntrackedDiff(cwd: string, paths: string[]): Promise<string> {\n  const chunks: string[] = []\n  let bytes = 0\n  for (const untrackedPath of paths) {\n    const result = await runCommandCapture(\n      [\"git\", \"diff\", \"--no-index\", \"--\", \"/dev/null\", untrackedPath],\n      { cwd, timeoutMs: 5_000, maxStdoutBytes: MAX_DIFF_BYTES },\n    )\n    // `git diff --no-index` returns 1 when differences exist; anything else is an\n    // actual failure. A truncated untracked diff is unknown, never \"no diff\".\n    if (result.code !== 1 || result.truncated) throw new Error(`git diff for untracked file failed with exit ${result.code}`)\n    bytes += Buffer.byteLength(result.stdout, \"utf8\")\n    if (bytes > MAX_DIFF_BYTES) throw new Error(\"git working-tree capture exceeded its size limit\")\n    chunks.push(result.stdout)\n  }\n  return chunks.join(\"\")\n}\n\n/** Capture every working-tree change WITHOUT mutating the user's index (no\n *  `git add -N`). `git diff HEAD` covers staged + unstaged tracked changes;\n *  `git ls-files --others` catches untracked files and each is diffed against an\n *  empty file so gate-weakening in new tests is visible. Git failures/truncation\n *  reject, so the decision layer runs the full checks instead of mistaking an\n *  unknown tree for a no-diff turn. */\nexport async function captureStopGateDiff(cwd: string): Promise<string> {\n  const [diffResult, untrackedResult] = await Promise.all([\n    runCommandCapture([\"git\", \"diff\", \"HEAD\"], { cwd, timeoutMs: 5_000, maxStdoutBytes: MAX_DIFF_BYTES }),\n    runCommandCapture([\"git\", \"ls-files\", \"--others\", \"--exclude-standard\", \"-z\"], {\n      cwd,\n      timeoutMs: 5_000,\n      maxStdoutBytes: MAX_DIFF_BYTES,\n    }),\n  ])\n  if (diffResult.code !== 0) throw new Error(`git diff failed with exit ${diffResult.code}`)\n  if (untrackedResult.code !== 0) throw new Error(`git ls-files failed with exit ${untrackedResult.code}`)\n  if (diffResult.truncated || untrackedResult.truncated) throw new Error(\"git working-tree capture exceeded its size limit\")\n\n  const untrackedPaths = untrackedResult.stdout.split(\"\\0\").filter(Boolean)\n  if (untrackedPaths.length === 0) return diffResult.stdout\n  const untrackedDiff = await captureUntrackedDiff(cwd, untrackedPaths)\n  if (Buffer.byteLength(diffResult.stdout, \"utf8\") + Buffer.byteLength(untrackedDiff, \"utf8\") > MAX_DIFF_BYTES) {\n    throw new Error(\"git working-tree capture exceeded its size limit\")\n  }\n  return diffResult.stdout + untrackedDiff\n}\n\n/** Flush a message to stderr before exiting (process.exit can drop an unflushed\n *  write; the model reads this stderr on a block). */\nasync function writeStderr(msg: string): Promise<void> {\n  await new Promise<void>((resolve) => {\n    process.stderr.write(msg, () => resolve())\n  })\n}\n\n/**\n * Fire-and-forget spawn of the detached background reviewer. The payload (which\n * includes the up-to-2-MiB diff) is written to a temp file SYNCHRONOUSLY before\n * the spawn — a pipe to the child's stdin would race the parent's `process.exit`\n * and could deliver a truncated diff. The child reads the file (path passed via\n * `GH_ROUTER_STOP_REVIEW_PAYLOAD`), unlinks it, and inherits the proxy URL/nonce\n * env. Everything is swallowed: the advisory layer never affects the stop.\n */\nfunction spawnStopReview(ctx: StopReviewContext, extras: { prompt: string; transcriptPath: string }): void {\n  let payloadPath: string | undefined\n  try {\n    const dir = stopReviewStateDir()\n    mkdirSync(dir, { recursive: true })\n    payloadPath = path.join(dir, `payload-${process.pid}-${randomBytes(4).toString(\"hex\")}.json`)\n    writeFileSync(\n      payloadPath,\n      JSON.stringify({\n        session_id: ctx.sessionId,\n        cwd: ctx.cwd,\n        diff: ctx.diff,\n        prompt: extras.prompt,\n        transcript_path: extras.transcriptPath,\n      }),\n      { mode: 0o600 },\n    )\n    // Invoke the same binary's `internal-stop-review` subcommand. Preserve the\n    // package root when this hook itself runs from the relocated launcher.\n    const scriptArgs = process.argv[1] && process.argv[1] !== process.execPath ? [process.argv[1]] : []\n    const root = explicitPackageRoot()\n    const packageRootArgs = root ? [PACKAGE_ROOT_FLAG, root] : []\n    const child = spawn(process.execPath, [...scriptArgs, ...packageRootArgs, \"internal-stop-review\"], {\n      detached: true,\n      windowsHide: true,\n      stdio: \"ignore\",\n      env: { ...process.env, GH_ROUTER_STOP_REVIEW_PAYLOAD: payloadPath },\n    })\n    // A spawn failure (EAGAIN / EACCES / fork limit) is delivered ASYNCHRONOUSLY\n    // via the child's 'error' event, AFTER this synchronous try block exits. With\n    // no listener Node escalates it to an uncaughtException — which main.ts turns\n    // into process.exit(1), corrupting the Stop hook's exit code. Swallow it here\n    // (and drop the now-orphaned payload the child never read) so the advisory\n    // spawn truly never affects the stop.\n    const orphan = payloadPath\n    child.on(\"error\", () => {\n      if (orphan) {\n        try {\n          unlinkSync(orphan)\n        } catch {\n          /* best-effort */\n        }\n      }\n    })\n    child.unref()\n  } catch {\n    // Advisory spawn is best-effort; never disrupt the stop. If we wrote the\n    // payload file but the spawn failed, drop it so it doesn't orphan (the\n    // child — which would normally unlink it — never started).\n    if (payloadPath) {\n      try {\n        unlinkSync(payloadPath)\n      } catch {\n        /* best-effort */\n      }\n    }\n  }\n}\n\n/** The checks for a resolved descriptor: sealed descriptors resolve their sealed\n *  command set; parsed/discovered carry their own. */\ntype ResolveChecks = NonNullable<Parameters<typeof decideStopHook>[0][\"resolveChecks\"]>\n\n/**\n * Build the dynamic `resolveChecks` for the live Stop hook, per the env the\n * launcher set:\n *   - GH_ROUTER_STOP_GATE_PARSED → re-derive the deterministic parser at the\n *     stop-time tree (stateless, no cache);\n *   - GH_ROUTER_STOP_GATE_DISCOVERED → read the cached evidence-pinned record.\n * Both pin the checks to the descriptor's `workdir` (the repo root) and compute\n * the launch-stable baseline key so the launch-captured (pre-mutation) baseline\n * is read. Any miss → null → the hook fails OPEN.\n */\nfunction buildResolveChecks(mode: \"parsed\" | \"discovered\"): ResolveChecks {\n  const includeTests = parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_RUN_TESTS) === true\n  return async (cwd: string) => {\n    const root = await repoRoot(cwd).catch(() => cwd)\n    let descriptor: GateDescriptor | null = null\n    if (mode === \"parsed\") {\n      descriptor = await parseGateDescriptor(root, { includeTests }).catch(() => null)\n    } else {\n      const rec = await readDiscoveredGate(root).catch(() => null)\n      if (rec) {\n        descriptor = {\n          kind: \"discovered\",\n          checks: rec.checks,\n          ecosystem: rec.ecosystem,\n          workdir: root,\n          evidence: rec.evidence,\n        }\n      }\n    }\n    if (!descriptor) return null\n    const checks = checksForDescriptor(descriptor)\n    if (checks.length === 0) return null\n    const descriptorKey = descriptorHash(descriptor)\n    const workdir = descriptor.workdir || root\n    const token = process.env.GH_ROUTER_STOP_GATE_BASELINE_TOKEN || undefined\n    return { checks, workdir, descriptorKey, baselineKey: launchBaselineKey(workdir, descriptorKey, token) }\n  }\n}\n\n/** Which dynamic gate mode the launcher armed (sealed → undefined). */\nfunction dynamicMode(): \"parsed\" | \"discovered\" | undefined {\n  if (parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_PARSED) === true) return \"parsed\"\n  if (parseBoolEnv(process.env.GH_ROUTER_STOP_GATE_DISCOVERED) === true) return \"discovered\"\n  return undefined\n}\n\nexport const internalStopHook = defineCommand({\n  meta: {\n    name: \"internal-stop-hook\",\n    description:\n      \"Internal: the structural-gate Stop hook. Reads the Claude Code hook payload on stdin, \"\n      + \"runs the sealed gate, exits 2 (blocks the stop) on a red gate or gate-weakening diff.\",\n  },\n  async run() {\n    const stdin = readStdin()\n    // The advisory review (hook V2) is wired only when it's enabled AND the\n    // launcher injected the proxy URL/nonce. It is side-effect-only: the\n    // deterministic gate below is unchanged and remains the only blocker.\n    const reviewEnabled = stopReviewEnabled() && hookMcpRuntimeFromEnv() !== undefined\n    let transcriptPath = \"\"\n    let userPrompt = \"\"\n    if (reviewEnabled) {\n      // Parse the payload once for the transcript pointer + the session id used\n      // to look up the user's last prompt (the Stop payload carries no prompt;\n      // the UserPromptSubmit hook stashed it). Best-effort — a parse miss just\n      // means the reviewer judges against the diff alone.\n      try {\n        const p: unknown = JSON.parse(stdin)\n        if (p && typeof p === \"object\") {\n          const obj = p as { transcript_path?: unknown; session_id?: unknown }\n          transcriptPath = typeof obj.transcript_path === \"string\" ? obj.transcript_path : \"\"\n          const sid = typeof obj.session_id === \"string\" ? obj.session_id : \"\"\n          if (sid) {\n            userPrompt = (await fileLastPromptStore(stopReviewStateDir()).read(sid).catch(() => null)) ?? \"\"\n          }\n        }\n      } catch {\n        /* tolerate a non-JSON stdin */\n      }\n    }\n\n    let decision: { exitCode: 0 | 2; stderr?: string }\n    try {\n      const timeoutEnv = parseIntEnv(process.env.GH_ROUTER_STOP_GATE_TIMEOUT_MS)\n      const mode = dynamicMode()\n      decision = await decideStopHook({\n        stdin,\n        gateId: stopGateId(),\n        exec: liveExec,\n        captureDiff: captureStopGateDiff,\n        fallbackCwd: process.cwd(),\n        budget: fileBlockBudget(path.join(tmpdir(), \"gh-router-stopgate\")),\n        baseline: fileBaselineStore(path.join(tmpdir(), \"gh-router-stopgate-baseline\")),\n        isEnabledForRepo: (cwd) => stopGateEnabledForRepo(cwd),\n        resolveChecks: mode ? buildResolveChecks(mode) : undefined,\n        // parseIntEnv already rejects non-positive / non-integer / truncating\n        // values, so undefined here means \"use the built-in default\".\n        timeoutMs: timeoutEnv,\n        reviewDebounce: reviewEnabled ? fileReviewDebounce(stopReviewStateDir()) : undefined,\n        spawnReview: reviewEnabled\n          ? (ctx) => spawnStopReview(ctx, { prompt: userPrompt, transcriptPath })\n          : undefined,\n      })\n    } catch {\n      // Fail OPEN on ANY unexpected error: a Stop hook must never wedge the\n      // session, so an internal crash allows the stop (exit 0) rather than\n      // surfacing a non-blocking error or a hang.\n      process.exitCode = 0\n      return\n    }\n    // Write any stderr the decision carries — both the exit-2 block reason AND\n    // the LOUD exit-0 stand-down (max-block budget reached). A clean green stop\n    // carries no stderr, so this stays silent on the common path.\n    if (decision.stderr) {\n      await writeStderr(`${decision.stderr}\\n`)\n    }\n    // Natural exit: set the code and return. A hard process.exit() races libuv's\n    // stdio teardown on Windows (uv_async_send assertion) on the fast-return\n    // paths. The detached review child is unref'd and the gate's children are\n    // reaped, so no handle keeps the loop alive — the process exits with this\n    // code. The exit-2 block contract is preserved (stderr is flushed above).\n    process.exitCode = decision.exitCode\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,SAAS,YAAoB;CAC3B,IAAI;EACF,IAAI,QAAQ,MAAM,OAAO,OAAO;EAChC,OAAO,aAAa,GAAG,MAAM;CAC/B,QAAQ;EACN,OAAO;CACT;AACF;;;AAIA,MAAM,iBAAiB;;;AAIvB,eAAe,qBAAqB,KAAa,OAAkC;CACjF,MAAM,SAAmB,CAAC;CAC1B,IAAI,QAAQ;CACZ,KAAK,MAAM,iBAAiB,OAAO;EACjC,MAAM,SAAS,MAAM,kBACnB;GAAC;GAAO;GAAQ;GAAc;GAAM;GAAa;EAAa,GAC9D;GAAE;GAAK,WAAW;GAAO,gBAAgB;EAAe,CAC1D;EAGA,IAAI,OAAO,SAAS,KAAK,OAAO,WAAW,MAAM,IAAI,MAAM,gDAAgD,OAAO,MAAM;EACxH,SAAS,OAAO,WAAW,OAAO,QAAQ,MAAM;EAChD,IAAI,QAAQ,gBAAgB,MAAM,IAAI,MAAM,kDAAkD;EAC9F,OAAO,KAAK,OAAO,MAAM;CAC3B;CACA,OAAO,OAAO,KAAK,EAAE;AACvB;;;;;;;AAQA,eAAsB,oBAAoB,KAA8B;CACtE,MAAM,CAAC,YAAY,mBAAmB,MAAM,QAAQ,IAAI,CACtD,kBAAkB;EAAC;EAAO;EAAQ;CAAM,GAAG;EAAE;EAAK,WAAW;EAAO,gBAAgB;CAAe,CAAC,GACpG,kBAAkB;EAAC;EAAO;EAAY;EAAY;EAAsB;CAAI,GAAG;EAC7E;EACA,WAAW;EACX,gBAAgB;CAClB,CAAC,CACH,CAAC;CACD,IAAI,WAAW,SAAS,GAAG,MAAM,IAAI,MAAM,6BAA6B,WAAW,MAAM;CACzF,IAAI,gBAAgB,SAAS,GAAG,MAAM,IAAI,MAAM,iCAAiC,gBAAgB,MAAM;CACvG,IAAI,WAAW,aAAa,gBAAgB,WAAW,MAAM,IAAI,MAAM,kDAAkD;CAEzH,MAAM,iBAAiB,gBAAgB,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,OAAO;CACxE,IAAI,eAAe,WAAW,GAAG,OAAO,WAAW;CACnD,MAAM,gBAAgB,MAAM,qBAAqB,KAAK,cAAc;CACpE,IAAI,OAAO,WAAW,WAAW,QAAQ,MAAM,IAAI,OAAO,WAAW,eAAe,MAAM,IAAI,gBAC5F,MAAM,IAAI,MAAM,kDAAkD;CAEpE,OAAO,WAAW,SAAS;AAC7B;;;AAIA,eAAe,YAAY,KAA4B;CACrD,MAAM,IAAI,SAAe,YAAY;EACnC,QAAQ,OAAO,MAAM,WAAW,QAAQ,CAAC;CAC3C,CAAC;AACH;;;;;;;;;AAUA,SAAS,gBAAgB,KAAwB,QAA0D;CACzG,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,mBAAmB;EAC/B,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,cAAc,KAAK,KAAK,KAAK,WAAW,QAAQ,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,MAAM;EAC5F,cACE,aACA,KAAK,UAAU;GACb,YAAY,IAAI;GAChB,KAAK,IAAI;GACT,MAAM,IAAI;GACV,QAAQ,OAAO;GACf,iBAAiB,OAAO;EAC1B,CAAC,GACD,EAAE,MAAM,IAAM,CAChB;EAGA,MAAM,aAAa,QAAQ,KAAK,MAAM,QAAQ,KAAK,OAAO,QAAQ,WAAW,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC;EAClG,MAAM,OAAO,oBAAoB;EACjC,MAAM,kBAAkB,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;EAC5D,MAAM,QAAQ,MAAM,QAAQ,UAAU;GAAC,GAAG;GAAY,GAAG;GAAiB;EAAsB,GAAG;GACjG,UAAU;GACV,aAAa;GACb,OAAO;GACP,KAAK;IAAE,GAAG,QAAQ;IAAK,+BAA+B;GAAY;EACpE,CAAC;EAOD,MAAM,SAAS;EACf,MAAM,GAAG,eAAe;GACtB,IAAI,QACF,IAAI;IACF,WAAW,MAAM;GACnB,QAAQ,CAER;EAEJ,CAAC;EACD,MAAM,MAAM;CACd,QAAQ;EAIN,IAAI,aACF,IAAI;GACF,WAAW,WAAW;EACxB,QAAQ,CAER;CAEJ;AACF;;;;;;;;;;;AAgBA,SAAS,mBAAmB,MAA8C;CACxE,MAAM,eAAe,aAAa,QAAQ,IAAI,6BAA6B,MAAM;CACjF,OAAO,OAAO,QAAgB;EAC5B,MAAM,OAAO,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,GAAG;EAChD,IAAI,aAAoC;EACxC,IAAI,SAAS,UACX,aAAa,MAAM,oBAAoB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,IAAI;OAC1E;GACL,MAAM,MAAM,MAAM,mBAAmB,IAAI,CAAC,CAAC,YAAY,IAAI;GAC3D,IAAI,KACF,aAAa;IACX,MAAM;IACN,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,SAAS;IACT,UAAU,IAAI;GAChB;EAEJ;EACA,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,SAAS,oBAAoB,UAAU;EAC7C,IAAI,OAAO,WAAW,GAAG,OAAO;EAChC,MAAM,gBAAgB,eAAe,UAAU;EAC/C,MAAM,UAAU,WAAW,WAAW;EACtC,MAAM,QAAQ,QAAQ,IAAI,sCAAsC,KAAA;EAChE,OAAO;GAAE;GAAQ;GAAS;GAAe,aAAa,kBAAkB,SAAS,eAAe,KAAK;EAAE;CACzG;AACF;;AAGA,SAAS,cAAmD;CAC1D,IAAI,aAAa,QAAQ,IAAI,0BAA0B,MAAM,MAAM,OAAO;CAC1E,IAAI,aAAa,QAAQ,IAAI,8BAA8B,MAAM,MAAM,OAAO;AAEhF;AAEA,MAAa,mBAAmB,cAAc;CAC5C,MAAM;EACJ,MAAM;EACN,aACE;CAEJ;CACA,MAAM,MAAM;EACV,MAAM,QAAQ,UAAU;EAIxB,MAAM,gBAAgB,kBAAkB,KAAK,sBAAsB,MAAM,KAAA;EACzE,IAAI,iBAAiB;EACrB,IAAI,aAAa;EACjB,IAAI,eAKF,IAAI;GACF,MAAM,IAAa,KAAK,MAAM,KAAK;GACnC,IAAI,KAAK,OAAO,MAAM,UAAU;IAC9B,MAAM,MAAM;IACZ,iBAAiB,OAAO,IAAI,oBAAoB,WAAW,IAAI,kBAAkB;IACjF,MAAM,MAAM,OAAO,IAAI,eAAe,WAAW,IAAI,aAAa;IAClE,IAAI,KACF,aAAc,MAAM,oBAAoB,mBAAmB,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,KAAM;GAElG;EACF,QAAQ,CAER;EAGF,IAAI;EACJ,IAAI;GACF,MAAM,aAAa,YAAY,QAAQ,IAAI,8BAA8B;GACzE,MAAM,OAAO,YAAY;GACzB,WAAW,MAAM,eAAe;IAC9B;IACA,QAAQ,WAAW;IACnB,MAAM;IACN,aAAa;IACb,aAAa,QAAQ,IAAI;IACzB,QAAQ,gBAAgB,KAAK,KAAK,OAAO,GAAG,oBAAoB,CAAC;IACjE,UAAU,kBAAkB,KAAK,KAAK,OAAO,GAAG,6BAA6B,CAAC;IAC9E,mBAAmB,QAAQ,uBAAuB,GAAG;IACrD,eAAe,OAAO,mBAAmB,IAAI,IAAI,KAAA;IAGjD,WAAW;IACX,gBAAgB,gBAAgB,mBAAmB,mBAAmB,CAAC,IAAI,KAAA;IAC3E,aAAa,iBACR,QAAQ,gBAAgB,KAAK;KAAE,QAAQ;KAAY;IAAe,CAAC,IACpE,KAAA;GACN,CAAC;EACH,QAAQ;GAIN,QAAQ,WAAW;GACnB;EACF;EAIA,IAAI,SAAS,QACX,MAAM,YAAY,GAAG,SAAS,OAAO,GAAG;EAO1C,QAAQ,WAAW,SAAS;CAC9B;AACF,CAAC"}

package/dist/main.js

@@ -47,14 +47,14 @@ const main = defineCommand({
 	},
 	subCommands: {
 		auth: () => import("./auth-BwUHopJz.js").then((m) => m.auth),
-		start: () => import("./start-5MgGT4IF.js").then((m) => m.start),
-		claude: () => import("./claude-_DYGKCw8.js").then((m) => m.claude),
-		codex: () => import("./codex-rTJ8jW5G.js").then((m) => m.codex),
-		serve: () => import("./serve-BWMxDLnD.js").then((m) => m.serve),
+		start: () => import("./start-BNcGsXsY.js").then((m) => m.start),
+		claude: () => import("./claude-BoAd_L2W.js").then((m) => m.claude),
+		codex: () => import("./codex-BdJgGT6Q.js").then((m) => m.codex),
+		serve: () => import("./serve-RxWYzoOl.js").then((m) => m.serve),
 		models: () => import("./models-hhJcrZhr.js").then((m) => m.models),
 		"check-usage": () => import("./check-usage-BTda5753.js").then((m) => m.checkUsage),
 		debug: () => import("./debug-B3UrZTHQ.js").then((m) => m.debug),
-		"internal-stop-hook": () => import("./internal-stop-hook-DrX2xlj0.js").then((m) => m.internalStopHook),
+		"internal-stop-hook": () => import("./internal-stop-hook-OnfK3BxE.js").then((m) => m.internalStopHook),
 		"internal-prompt-submit": () => import("./internal-prompt-submit-Da7pxqua.js").then((m) => m.internalPromptSubmit),
 		"internal-stop-review": () => import("./internal-stop-review-CdouacHL.js").then((m) => m.internalStopReview),
 		"internal-plan-review": () => import("./internal-plan-review-8TKDLco6.js").then((m) => m.internalPlanReview),

package/dist/{peer-mcp-personas-CHbl6MwM.js → peer-mcp-personas-DhI7ZPSx.js}

@@ -29840,6 +29840,18 @@ On tasks longer than a few steps, call advisor at least once before committing t
 Give the advice serious weight. If you follow a step and it fails empirically, or you have primary-source evidence that contradicts a specific claim (the file says X, the code does Y), adapt. A passing self-test is not evidence the advice is wrong -- it's evidence your test doesn't check what the advice is checking.
 
 If you've already retrieved data pointing one way and the advisor points another: don't silently switch. Surface the conflict in one more advisor call -- "I found X, you suggest Y, which constraint breaks the tie?" The advisor saw your evidence but may have underweighted it; a reconcile call is cheaper than committing to the wrong branch.`;
+/** Fast-profile lead-only policy. Unlike the standard Claude Code instructions
+* above, this makes consultation optional and leaves decision ownership with
+* the Luna lead. Fast Task subagents never receive an advisor tool at all. */
+const FAST_ADVISOR_TOOL_INSTRUCTIONS = `# Advisor Tool
+
+You have access to an optional, transcript-aware \`advisor\` tool. It takes no parameters and returns non-binding consultation. You remain responsible for every decision.
+
+Use advisor only when a focused, consequential uncertainty remains after direct investigation: conflicting evidence, a materially changed assumption, a genuinely non-converging approach, a hard-to-reverse trade-off, or an explicit request for a fresh perspective. State the precise uncertainty in your response immediately before calling it.
+
+Do not call advisor for routine progress, while waiting on a subagent, after ordinary tool output, for a fact that code or a command can verify, to obtain planner approval or reviewer verification, or as a ritual before implementation or completion.
+
+Treat the result as advice, not authority. Weigh it against the user's intent, verified repository evidence, planner output, and reviewer findings. You may consult again when materially new evidence creates a different question or directly conflicts with earlier advice.`;
 const ADVISOR_OPT_OUT_ENV = "CLAUDE_CODE_DISABLE_ADVISOR_TOOL";
 /**
 * Detect whether the request asked for ADVISOR (incoming
@@ -29872,8 +29884,8 @@ function isAdvisorRequested(rawBetaHeader) {
 * client-shape `server_tool_use{name:"advisor"}` + `advisor_tool_result`
 * blocks the client expects.
 */
-function injectAdvisorTool(rawBody) {
-	if (rawBody.includes(`"name":"__anthropic_advisor"`) && !rawBody.includes("\"advisor_")) return rawBody;
+function injectAdvisorTool(rawBody, instructions = ADVISOR_TOOL_INSTRUCTIONS) {
+	if (instructions === ADVISOR_TOOL_INSTRUCTIONS && rawBody.includes(`"name":"__anthropic_advisor"`) && !rawBody.includes("\"advisor_")) return rawBody;
 	let parsed;
 	try {
 		parsed = JSON.parse(rawBody);
@@ -29888,10 +29900,14 @@ function injectAdvisorTool(rawBody) {
 	});
 	const stripped = tools.length !== rawTools.length;
 	const alreadyInjected = tools.some((t) => t?.name === ADVISOR_INTERNAL_TOOL_NAME);
-	if (alreadyInjected && !stripped) return rawBody;
-	parsed.tools = alreadyInjected ? tools : [...tools, {
+	const needsDescriptionUpdate = alreadyInjected && tools.some((t) => t?.name === "__anthropic_advisor" && t.description !== instructions);
+	if (alreadyInjected && !stripped && !needsDescriptionUpdate) return rawBody;
+	parsed.tools = alreadyInjected ? tools.map((tool) => tool?.name === "__anthropic_advisor" ? {
+		...tool,
+		description: instructions
+	} : tool) : [...tools, {
 		name: ADVISOR_INTERNAL_TOOL_NAME,
-		description: ADVISOR_TOOL_INSTRUCTIONS,
+		description: instructions,
 		input_schema: {
 			type: "object",
 			properties: {},
@@ -30032,9 +30048,9 @@ function truncateTailToUnits(text, maxUnits, measure) {
 * Anthropic's own ADVISOR ("see the whole task + every tool call +
 * every result").
 */
-async function runAdvisor(conversation, advisorModel, advisorEffort, signal, advisorEscalated = false) {
+async function runAdvisor(conversation, advisorModel, advisorEffort, signal, advisorEscalated = false, fastProfile = false) {
 	if (signal?.aborted) throw new Error("advisor call aborted before dispatch");
-	const advisorSystem = "You are an expert advisor reviewing an in-progress Claude Code session. The transcript below is the work-in-progress (turns numbered, with tool calls and results inlined). Read carefully and provide concrete, actionable advice on the next step or course-correction. Be specific — cite the parts of the transcript you're responding to. If the assistant is on the right track, say so explicitly. If they're stuck or off-track, name the specific assumption or step to revisit. Aim for 2-5 paragraphs of substantive guidance." + (advisorEscalated ? " The requesting agent is running a lighter, faster model than you. Give a directive recommendation and commit to the decision rather than laying out options for it to weigh." : "");
+	const advisorSystem = "You are an expert advisor reviewing an in-progress Claude Code session. The transcript below is the work-in-progress (turns numbered, with tool calls and results inlined). Read carefully and provide concrete, actionable advice on the next step or course-correction. Be specific — cite the parts of the transcript you're responding to. If the assistant is on the right track, say so explicitly. If they're stuck or off-track, name the specific assumption or step to revisit. Aim for 2-5 paragraphs of substantive guidance." + (fastProfile ? " You are a non-binding consultant to the primary lead. Analyze the focused uncertainty that prompted this call and provide a recommendation, its assumptions, material risks, credible alternatives, confidence, and any evidence gap that should be resolved. Do not approve, veto, dictate, or take ownership of the workflow; the lead will weigh your advice against the user's intent and verified evidence." : "") + (advisorEscalated && !fastProfile ? " The requesting agent is running a lighter, faster model than you. Give a directive recommendation and commit to the decision rather than laying out options for it to weigh." : "");
 	const resolvedAdvisorModel = resolveModel(advisorModel);
 	let measure;
 	let maxUnits;
@@ -30237,6 +30253,7 @@ function buildAdvisorStream(opts) {
 	const advisorModel = opts.advisorModel ?? "gpt-5.6-sol";
 	const advisorEffort = opts.advisorEffort ?? "xhigh";
 	const advisorEscalated = opts.advisorEscalated ?? false;
+	const advisorFastProfile = opts.advisorFastProfile ?? false;
 	const continueTurn = opts.continueTurn ?? ((body, signal) => defaultContinueTurn(body, signal, opts.requestHeaders));
 	const aborter = opts.externalAborter ?? new AbortController();
 	let conversation = [...opts.initialConversation];
@@ -30487,7 +30504,7 @@ function buildAdvisorStream(opts) {
 					const advisorConversation = conversation;
 					const advisorTexts = await Promise.all(advisorToolUses.map(async () => {
 						try {
-							return await runAdvisor(advisorConversation, advisorModel, advisorEffort, aborter.signal, advisorEscalated);
+							return await runAdvisor(advisorConversation, advisorModel, advisorEffort, aborter.signal, advisorEscalated, advisorFastProfile);
 						} catch (err) {
 							if (aborter.signal.aborted) throw err;
 							const msg = err instanceof Error ? err.message : String(err);
@@ -35556,7 +35573,7 @@ function buildPeerAwarenessSnippet(opts) {
 		return [
 			"## Peer review and advisor",
 			"",
-			`This is the fast launch profile. \`mcp__${fastPeersKey}__oracle\` is exact Opus 5 (1M/high), a stateless last-resort consultant after the primary Luna path, Advisor, and reviewer/planner remain stuck. Advisor is the transcript-aware brainstorming, sounding-board, fresh-look, uncertainty, and stuck path.`,
+			`This is the fast launch profile. Advisor is an optional, non-binding, lead-only transcript-aware sounding board for consequential unresolved uncertainty or a genuinely stuck path, not routine progress, waiting, verification, approval, or completion. \`mcp__${fastPeersKey}__oracle\` is exact Opus 5 (1M/high), a stateless last-resort consultant available to the lead, reviewer, and planner.`,
 			"",
 			`\`mcp__${fastSearchKey}__code\` is semantic-first code search and \`mcp__${fastSearchKey}__web\` surfaces citable sources. Native Task roster: \`scout\` (broad discovery), \`implementer\` (mechanical implementation), \`reviewer\` (repo-aware verification/reproduction), and \`planner\` (Sol plan consultant/approver after Luna's draft). Before implementation obtain planner approval; before declaring done run relevant tests and ask reviewer to verify.${opts.browseAvailable ? ` \`mcp__${key("browser")}__*\` is the opt-in browser surface.` : ""}`
 		].join("\n");
@@ -35618,7 +35635,7 @@ function buildPeerAwarenessSummary(opts) {
 		"## Injected capabilities (summary)",
 		"",
 		"Fast launch profile. Task roster: `scout`, `implementer`, `reviewer`, `planner`. Luna investigates and drafts; `planner` must approve before implementation. Before declaring done, run relevant tests and ask `reviewer` to verify.",
-		`Advisor is the transcript-aware brainstorming/sounding-board/fresh-look path. \`mcp__${key("peers")}__oracle\` is exact Opus 5 (1M/high), stateless and last resort. \`mcp__${key("search")}__code\` and \`mcp__${key("search")}__web\` provide search.${opts.browseAvailable ? ` \`mcp__${key("browser")}__*\` provides the opt-in browser.` : ""}`
+		`Advisor is optional, non-binding, transcript-aware, and lead-only; use it for consequential unresolved uncertainty, not routine progress or workflow gates. \`mcp__${key("peers")}__oracle\` is exact Opus 5 (1M/high), stateless and last resort for the lead, reviewer, and planner. \`mcp__${key("search")}__code\` and \`mcp__${key("search")}__web\` provide search.${opts.browseAvailable ? ` \`mcp__${key("browser")}__*\` provides the opt-in browser.` : ""}`
 	].join("\n");
 	const renderNative = (name) => {
 		const modelId = opts.nativeAgentModels?.[name];
@@ -36891,6 +36908,6 @@ function enumerateInjectedMcpToolNames(groupKeys, opts = {}) {
 	return [...new Set(names)];
 }
 //#endregion
-export { bucketEffort as $, CONDENSED_OPERATING_SEQUENCE as $t, assetFor as A, countTokens as At, resolveAdvisorModel as B, createChatCompletions as Bt, buildEnv as C, withOneMSuffixForLead as Cn, reviewerFastModel as Ct, toolbeltSkipSet as D, standInToolEnabled as Dt, toolbeltEnabled as E, scribeModel as Et, buildAdvisorStream as F, unregisterLaunch as Ft, buildAnthropicErrorEvent as G, provisionBrowserAssets as Gt, rememberThinkingHistoryRepair as H, readResponseBodyCapped as Ht, injectAdvisorTool as I, assembleResponsesPayload as It, logStreamError as J, provisionAndIndexColbert as Jt, buildOpenAIErrorEvent as K, hasSupportedBrowserInstalled as Kt, isAdvisorRequested as L, warnOnTokenPriceDrift as Lt, searchWeb as M, getTokenCount as Mt, ADVISOR_INTERNAL_TOOL_NAME as N, findLaunchBySecret as Nt, vscodeRipgrepPath as O, workerToolsEnabled as Ot, ADVISOR_TOOL_INSTRUCTIONS as P, registerLaunch as Pt, UNKNOWN_EFFORT_ANCHOR as Q, provisionTreeSitterAssets as Qt, isFastProfileLead as R, resolveMcpToolTimeoutMs as Rt, runWorkerAgent as S, withOneMSuffix as Sn, resolveGeminiReviewModel as St, buildToolbeltAwareness as T, scoutModel as Tt, repairKnownThinkingHistory as U, parseJsonOrDiagnose as Ut, formatThinkingRepairDecline as V, MAX_RESPONSE_BODY_BYTES as Vt, repairRejectedThinkingHistory as W, normalizeOpenAIUsage as Wt, relayAnthropicStream as X, extractZipMember as Xt, readIteratorWithTimeout as Y, extractTarGzMember as Yt, EFFORT_ORDER as Z, warmTreeSitterPool as Zt, TEST_DEFAULT_MODEL as _, upstreamMaxConnections as _n, fleetToolsEnabled as _t, buildAgentPrompt as a, BUDGET_SMALL_FAST_SLUG as an, FAST_SCOUT_EFFORT as at, resolveModeDefaults as b, catalogAdvertises1M as bn, implementerFastModel as bt, enumerateInjectedMcpToolNames as c, DEFAULT_CODEX_MODEL_FALLBACKS as cn, brainstormModel as ct, DEFAULT_MODEL_CHAIN as d, UPSTREAM_INACTIVITY_TIMEOUT_MS as dn, browserToolsEnabled as dt, DEFINITION_OF_GREATNESS as en, clampEffort as et, EXPLORE_DEFAULT_MODEL as f, generateRandomPort as fn, fastImplementerModel as ft, REVIEW_DEFAULT_MODEL as g, upstreamAllowH2 as gn, fastScoutModel as gt, PLAN_DEFAULT_MODEL as h, resolveLeadSlugArg as hn, fastReviewerModel as ht, assertMcpToolSurfaceConsistent as i, BUDGET_SMALL_FAST_CATALOG_ID as in, FAST_REVIEWER_EFFORT as it, satisfiesMinVersion as j, createMessages as jt, TOOLBELT_TOOLS$1 as k, shimDefaultsToXhigh as kt, personasFor as l, DEFAULT_PORT as ln, browseAgentEnabled as lt, IMPLEMENT_DEFAULT_MODEL as m, pickClaudeDefault as mn, fastPlannerModel as mt, MCP_GROUPS as n, collapsePathKeys as nn, handleMcpPost as nt, buildPeerAwarenessSnippet as o, DEFAULT_CLAUDE_MODEL_FALLBACKS as on, agentToolsEnabled as ot, EXPLORE_DEFAULT_THINKING as p, isBudgetClaudeLead as pn, fastOracleModel as pt, isControllerClosedError as q, colbertDegradedWarning as qt, agentNamesForToolAllowlist as r, toolbeltPathOverride as rn, FAST_PLANNER_EFFORT as rt, buildPeerAwarenessSummary as s, DEFAULT_CODEX_MODEL as sn, artifactToolsEnabled as st, GROUP_META as t, shouldUseInsecureTls as tn, handleMcpDelete as tt, BROWSE_DEFAULT_MODEL as u, UPSTREAM_FETCH_TIMEOUT_MS as un, browserCompoundToolsEnabled as ut, appendPlanReminder as v, classifyMessagesRoute as vn, geminiAvailable as vt, availableToolCommands as w, withInstallLock as wn, reviewerModel as wt, resolveWorkerRunOpts as x, oneMContextDisabled as xn, nativeSubagentModel as xt, resolveDefaultModel as y, pickEndpoint as yn, generalPurposeFastModel as yt, resolveAdvisorEffort as z, createResponses as zt };
+export { UNKNOWN_EFFORT_ANCHOR as $, provisionTreeSitterAssets as $t, assetFor as A, shimDefaultsToXhigh as At, resolveAdvisorEffort as B, createResponses as Bt, buildEnv as C, withOneMSuffix as Cn, resolveGeminiReviewModel as Ct, toolbeltSkipSet as D, scribeModel as Dt, toolbeltEnabled as E, scoutModel as Et, FAST_ADVISOR_TOOL_INSTRUCTIONS as F, registerLaunch as Ft, repairRejectedThinkingHistory as G, normalizeOpenAIUsage as Gt, formatThinkingRepairDecline as H, MAX_RESPONSE_BODY_BYTES as Ht, buildAdvisorStream as I, unregisterLaunch as It, isControllerClosedError as J, colbertDegradedWarning as Jt, buildAnthropicErrorEvent as K, provisionBrowserAssets as Kt, injectAdvisorTool as L, assembleResponsesPayload as Lt, searchWeb as M, createMessages as Mt, ADVISOR_INTERNAL_TOOL_NAME as N, getTokenCount as Nt, vscodeRipgrepPath as O, standInToolEnabled as Ot, ADVISOR_TOOL_INSTRUCTIONS as P, findLaunchBySecret as Pt, EFFORT_ORDER as Q, warmTreeSitterPool as Qt, isAdvisorRequested as R, warnOnTokenPriceDrift as Rt, runWorkerAgent as S, oneMContextDisabled as Sn, nativeSubagentModel as St, buildToolbeltAwareness as T, withInstallLock as Tn, reviewerModel as Tt, rememberThinkingHistoryRepair as U, readResponseBodyCapped as Ut, resolveAdvisorModel as V, createChatCompletions as Vt, repairKnownThinkingHistory as W, parseJsonOrDiagnose as Wt, readIteratorWithTimeout as X, extractTarGzMember as Xt, logStreamError as Y, provisionAndIndexColbert as Yt, relayAnthropicStream as Z, extractZipMember as Zt, TEST_DEFAULT_MODEL as _, upstreamAllowH2 as _n, fastScoutModel as _t, buildAgentPrompt as a, BUDGET_SMALL_FAST_CATALOG_ID as an, FAST_REVIEWER_EFFORT as at, resolveModeDefaults as b, pickEndpoint as bn, generalPurposeFastModel as bt, enumerateInjectedMcpToolNames as c, DEFAULT_CODEX_MODEL as cn, artifactToolsEnabled as ct, DEFAULT_MODEL_CHAIN as d, UPSTREAM_FETCH_TIMEOUT_MS as dn, browserCompoundToolsEnabled as dt, CONDENSED_OPERATING_SEQUENCE as en, bucketEffort as et, EXPLORE_DEFAULT_MODEL as f, UPSTREAM_INACTIVITY_TIMEOUT_MS as fn, browserToolsEnabled as ft, REVIEW_DEFAULT_MODEL as g, resolveLeadSlugArg as gn, fastReviewerModel as gt, PLAN_DEFAULT_MODEL as h, pickClaudeDefault as hn, fastPlannerModel as ht, assertMcpToolSurfaceConsistent as i, toolbeltPathOverride as in, FAST_PLANNER_EFFORT as it, satisfiesMinVersion as j, countTokens as jt, TOOLBELT_TOOLS$1 as k, workerToolsEnabled as kt, personasFor as l, DEFAULT_CODEX_MODEL_FALLBACKS as ln, brainstormModel as lt, IMPLEMENT_DEFAULT_MODEL as m, isBudgetClaudeLead as mn, fastOracleModel as mt, MCP_GROUPS as n, shouldUseInsecureTls as nn, handleMcpDelete as nt, buildPeerAwarenessSnippet as o, BUDGET_SMALL_FAST_SLUG as on, FAST_SCOUT_EFFORT as ot, EXPLORE_DEFAULT_THINKING as p, generateRandomPort as pn, fastImplementerModel as pt, buildOpenAIErrorEvent as q, hasSupportedBrowserInstalled as qt, agentNamesForToolAllowlist as r, collapsePathKeys as rn, handleMcpPost as rt, buildPeerAwarenessSummary as s, DEFAULT_CLAUDE_MODEL_FALLBACKS as sn, agentToolsEnabled as st, GROUP_META as t, DEFINITION_OF_GREATNESS as tn, clampEffort as tt, BROWSE_DEFAULT_MODEL as u, DEFAULT_PORT as un, browseAgentEnabled as ut, appendPlanReminder as v, upstreamMaxConnections as vn, fleetToolsEnabled as vt, availableToolCommands as w, withOneMSuffixForLead as wn, reviewerFastModel as wt, resolveWorkerRunOpts as x, catalogAdvertises1M as xn, implementerFastModel as xt, resolveDefaultModel as y, classifyMessagesRoute as yn, geminiAvailable as yt, isFastProfileLead as z, resolveMcpToolTimeoutMs as zt };
 
-//# sourceMappingURL=peer-mcp-personas-CHbl6MwM.js.map
+//# sourceMappingURL=peer-mcp-personas-DhI7ZPSx.js.map