intentdna 1.9.1 → 1.9.4

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "intentdna",
       "description": "Declarative policy layer for AI agent behavior with plugin-managed hook runtime for Claude Code.",
-      "version": "1.9.1",
+      "version": "1.9.4",
       "author": {
         "name": "Samuel"
       },
@@ -25,5 +25,5 @@
       ]
     }
   ],
-  "version": "1.9.1"
+  "version": "1.9.4"
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "intentdna",
-  "version": "1.9.1",
+  "version": "1.9.4",
   "description": "Declarative policy layer for AI agent behavior",
   "author": {
     "name": "Samuel"

package/dist/compiler/input-resolver.d.ts

@@ -1,5 +1,7 @@
+import { detectDNAConfigs } from "../project-config.js";
 import type { DNASourceProvenance, IntentDNA } from "../schema/types.js";
 import type { Diagnostic } from "./diagnostics.js";
+export { detectDNAConfigs };
 export interface ResolveDNAInputOptions {
     cwd?: string;
     includeDiagnostics?: boolean;
@@ -11,7 +13,6 @@ export interface ResolvedDNAInputs {
 }
 export declare function parseDNAFile(filePath: string): Promise<IntentDNA>;
 export declare function resolveSpeciesReference(ref: string): string | null;
-export declare function detectDNAConfigs(projectDir?: string): Promise<string[]>;
 export interface ExpandDNAInputOptions {
     cwd?: string;
     enterprisePolicyDirs?: string[];

package/dist/compiler/input-resolver.js

@@ -1,20 +1,14 @@
 import { createHash } from "node:crypto";
 import { homedir } from "node:os";
-import { readdir, readFile, stat } from "node:fs/promises";
+import { readFile, stat } from "node:fs/promises";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { TextDecoder } from "node:util";
+import { detectDNAConfigs } from "../project-config.js";
 import { validateDNA } from "../schema/validate.js";
 import { parseYAML } from "../schema/yaml-parser.js";
 import { DNADiagnosticsError, hasDiagnosticErrors } from "./diagnostics.js";
-const DNA_CONFIG_CANDIDATES = [
-    ".dna/config.yaml",
-    ".dna/config.yml",
-    ".dna/config.json",
-    ".dna.yaml",
-    ".dna.yml",
-    ".dna.json",
-];
+export { detectDNAConfigs };
 async function fileExists(path) {
     try {
         await stat(path);
@@ -39,27 +33,6 @@ export function resolveSpeciesReference(ref) {
     const thisDir = dirname(fileURLToPath(import.meta.url));
     return resolve(thisDir, "..", "species", `${name}.dna.json`);
 }
-export async function detectDNAConfigs(projectDir = process.cwd()) {
-    const configsDir = resolve(projectDir, ".dna", "configs");
-    try {
-        const files = await readdir(configsDir);
-        const configs = files
-            .filter((file) => file.endsWith(".yaml") || file.endsWith(".yml"))
-            .sort()
-            .map((file) => resolve(configsDir, file));
-        if (configs.length > 0)
-            return configs;
-    }
-    catch {
-        // Directory does not exist.
-    }
-    for (const candidate of DNA_CONFIG_CANDIDATES) {
-        const path = resolve(projectDir, candidate);
-        if (await fileExists(path))
-            return [path];
-    }
-    return [];
-}
 function fingerprint(snapshotBytes) {
     return `sha256:${createHash("sha256").update(snapshotBytes).digest("hex")}`;
 }

package/dist/hooks/cli.js

@@ -20,6 +20,7 @@ import { spawn } from "node:child_process";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { createHash, randomUUID } from "node:crypto";
 import { fileURLToPath } from "node:url";
+import { hasDNAProjectConfigBoundary } from "../project-config.js";
 import { readStdinResult, writeOutput, silentOutput, allowOutput, blockOutput, stopOutput } from "./protocol.js";
 import { isCurrentClaudeSubagentStopInput, validateHookInput } from "./schema.js";
 import { hookFailureOutput } from "./enforcement-boundary.js";
@@ -91,20 +92,19 @@ function isTerminalWorkflowDeactivation(event, rawInput, state) {
     return args.active === false && args.workflow === state.workflow;
 }
 async function hookProjectBoundaryExists(projectDir) {
-    for (const marker of [".dna", ".git"]) {
-        try {
-            await stat(resolve(projectDir, marker));
+    try {
+        await stat(resolve(projectDir, ".git"));
+        return true;
+    }
+    catch (error) {
+        const code = error instanceof Error && "code" in error
+            ? error.code
+            : undefined;
+        if (code !== "ENOENT" && code !== "ENOTDIR")
             return true;
-        }
-        catch (error) {
-            const code = error instanceof Error && "code" in error
-                ? error.code
-                : undefined;
-            if (code !== "ENOENT" && code !== "ENOTDIR")
-                return true;
-        }
     }
-    return false;
+    // Artifact-only directories such as .dna/reviews do not establish policy ownership.
+    return hasDNAProjectConfigBoundary(projectDir);
 }
 async function resolveHookRuntimePaths(cwd, irPath = DEFAULT_IR_PATH, explicitIRPath = false) {
     const initialDir = resolve(cwd);

package/dist/project-config.d.ts

@@ -0,0 +1,2 @@
+export declare function detectDNAConfigs(projectDir?: string): Promise<string[]>;
+export declare function hasDNAProjectConfigBoundary(projectDir: string): Promise<boolean>;

package/dist/project-config.js

@@ -0,0 +1,71 @@
+import { readdir, stat } from "node:fs/promises";
+import { resolve } from "node:path";
+const LEGACY_DNA_CONFIG_CANDIDATES = [
+    ".dna/config.yaml",
+    ".dna/config.yml",
+    ".dna/config.json",
+    ".dna.yaml",
+    ".dna.yml",
+    ".dna.json",
+];
+const DNA_PROJECT_CONFIG_BOUNDARY_MARKERS = [
+    ".dna/config.yaml",
+    ".dna/config.yml",
+    ".dna/config.json",
+    ".dna/configs",
+    ".dna.yaml",
+    ".dna.yml",
+    ".dna.json",
+];
+function filesystemErrorCode(error) {
+    return error instanceof Error && "code" in error
+        ? error.code
+        : undefined;
+}
+function pathIsAbsent(error) {
+    const code = filesystemErrorCode(error);
+    return code === "ENOENT" || code === "ENOTDIR";
+}
+async function fileExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function detectDNAConfigs(projectDir = process.cwd()) {
+    const configsDir = resolve(projectDir, ".dna", "configs");
+    try {
+        const files = await readdir(configsDir);
+        const configs = files
+            .filter((file) => file.endsWith(".yaml") || file.endsWith(".yml"))
+            .sort()
+            .map((file) => resolve(configsDir, file));
+        if (configs.length > 0)
+            return configs;
+    }
+    catch {
+        // Directory does not exist or cannot be read.
+    }
+    for (const candidate of LEGACY_DNA_CONFIG_CANDIDATES) {
+        const path = resolve(projectDir, candidate);
+        if (await fileExists(path))
+            return [path];
+    }
+    return [];
+}
+export async function hasDNAProjectConfigBoundary(projectDir) {
+    for (const marker of DNA_PROJECT_CONFIG_BOUNDARY_MARKERS) {
+        try {
+            await stat(resolve(projectDir, marker));
+            return true;
+        }
+        catch (error) {
+            if (!pathIsAbsent(error))
+                return true;
+        }
+    }
+    return false;
+}

package/dist/runtime/local-execution-authority.js

@@ -255,6 +255,26 @@ function syncDirectory(path) {
             closeSync(descriptor);
     }
 }
+function replaceFileSync(temporary, path) {
+    for (let attempt = 0;; attempt += 1) {
+        try {
+            renameSync(temporary, path);
+            return;
+        }
+        catch (error) {
+            const retryable = process.platform === "win32"
+                && ["EACCES", "EBUSY", "EPERM"].some((code) => isErrno(error, code));
+            if (!retryable || attempt >= 9) {
+                try {
+                    unlinkSync(temporary);
+                }
+                catch { }
+                throw error;
+            }
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 25 * (attempt + 1));
+        }
+    }
+}
 function atomicWriteJson(path, value) {
     const directory = dirname(path);
     const temporary = join(directory, `.${basename(path)}.tmp.${process.pid}.${randomUUID()}`);
@@ -266,7 +286,7 @@ function atomicWriteJson(path, value) {
     finally {
         closeSync(descriptor);
     }
-    renameSync(temporary, path);
+    replaceFileSync(temporary, path);
     syncDirectory(directory);
 }
 function readJson(path) {
@@ -1683,7 +1703,7 @@ export class LocalAttemptExecutionAuthority {
             finally {
                 closeSync(descriptor);
             }
-            renameSync(temporary, path);
+            replaceFileSync(temporary, path);
             syncDirectory(this.rootDirectory);
             return next;
         });

package/dist/runtime/local-windows-execution-supervisor-script.js

@@ -19,12 +19,29 @@ if (!recordPath) process.exit(64);
 
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 const isErrno = (error, code) => error && error.code === code;
+const renameWait = new Int32Array(new SharedArrayBuffer(4));
 const canonical = (value) => {
   if (value === null || typeof value !== "object") return JSON.stringify(value);
   if (Array.isArray(value)) return "[" + value.map(canonical).join(",") + "]";
   return "{" + Object.keys(value).sort().map((key) => JSON.stringify(key) + ":" + canonical(value[key])).join(",") + "}";
 };
 
+function replaceFile(temporary, target) {
+  for (let attempt = 0; ; attempt += 1) {
+    try {
+      fs.renameSync(temporary, target);
+      return;
+    } catch (error) {
+      const retryable = ["EACCES", "EBUSY", "EPERM"].some((code) => isErrno(error, code));
+      if (!retryable || attempt >= 9) {
+        try { fs.unlinkSync(temporary); } catch {}
+        throw error;
+      }
+      Atomics.wait(renameWait, 0, 0, 25 * (attempt + 1));
+    }
+  }
+}
+
 function atomicWrite(target, value) {
   const directory = path.dirname(target);
   const temporary = path.join(directory, "." + path.basename(target) + ".tmp." + process.pid + "." + randomUUID());
@@ -35,7 +52,7 @@ function atomicWrite(target, value) {
   } finally {
     fs.closeSync(fd);
   }
-  fs.renameSync(temporary, target);
+  replaceFile(temporary, target);
   try {
     const directoryFd = fs.openSync(directory, "r");
     try { fs.fsyncSync(directoryFd); } finally { fs.closeSync(directoryFd); }

package/dist/runtime/providers/codex.js

@@ -18,9 +18,9 @@ export function createCodexExecutionProvider(options = {}) {
                     "--sandbox",
                     options.sandbox ?? "workspace-write",
                     ...(options.extraArgs ?? []),
-                    packet.standalone_prompt,
+                    "-",
                 ],
-                stdin: null,
+                stdin: packet.standalone_prompt,
                 cwd: packet.workspace.working_directory,
                 ...(options.env ? { env: options.env } : {}),
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "intentdna",
-  "version": "1.9.1",
+  "version": "1.9.4",
   "description": "Intent DNA — Declarative policy layer for AI agent behavior",
   "type": "module",
   "main": "dist/index.js",
@@ -11,7 +11,7 @@
     "dna-mcp": "dist/mcp/index.js"
   },
   "scripts": {
-    "build": "tsc && mkdir -p dist/species dist/templates && cp src/species/*.json dist/species/ && cp src/templates/*.yaml dist/templates/ && node scripts/sync-plugin-version.cjs",
+    "build": "tsc && node scripts/copy-runtime-assets.mjs && node scripts/sync-plugin-version.cjs",
     "dev": "tsc --watch",
     "release:sync-plugin": "node scripts/sync-release-plugin.cjs",
     "verify:windows-job-keeper": "node scripts/verify-windows-job-keeper.mjs",