melchizedek-agents 0.9.6 → 0.16.0

package/dist/lib/wiki/entities.d.ts

@@ -5,7 +5,7 @@
  *   lib/wiki/graph.ts derives ONE graph: documents joined by markdown
  *   links. That graph answers "what should I read next", but it cannot
  *   answer "which syndicates call web_search", "what breaks without
- *   XAI_API_KEY", or "which decision constrains the export pipeline" —
+ *   XAI_API_KEY", or "which decision constrains the memory schema" —
  *   because the things those questions name (agents, tools, models,
  *   tables, env vars, decisions) are not documents. They are ENTITIES,
  *   and the relations between them are typed, not hyperlinks.
@@ -146,7 +146,7 @@ export declare function lintEntityGraph(graph: EntityGraph): GraphFinding[];
 /**
  * Both stores live in a dot-directory inside the bundle: the vault walker
  * skips dotfiles, so they are invisible to every document operation, they
- * travel with WIKI_ROOT, and the export pipeline (which copies *.md only)
+ * travel with WIKI_ROOT, and publishing the bundle as markdown (*.md only)
  * cannot ship them by accident.
  */
 export declare function graphDir(wikiRoot: string): string;

package/dist/lib/wiki/entities.js

@@ -5,7 +5,7 @@
  *   lib/wiki/graph.ts derives ONE graph: documents joined by markdown
  *   links. That graph answers "what should I read next", but it cannot
  *   answer "which syndicates call web_search", "what breaks without
- *   XAI_API_KEY", or "which decision constrains the export pipeline" —
+ *   XAI_API_KEY", or "which decision constrains the memory schema" —
  *   because the things those questions name (agents, tools, models,
  *   tables, env vars, decisions) are not documents. They are ENTITIES,
  *   and the relations between them are typed, not hyperlinks.
@@ -34,7 +34,7 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { z } from 'zod';
-import { isPrivatePath } from "./format.js";
+import { isPrivatePath } from './format.js';
 // ── Node vocabulary ──────────────────────────────────────────────────────────
 /**
  * What kinds of thing this graph knows about. A document keeps its OKF
@@ -84,7 +84,7 @@ export const RELATIONS = {
     // that is not a table). The generic structural relations below are left
     // open, because what "contains" or "runs" what differs per repo — a
     // syndicate contains agents here, a collection contains entries on a
-    // site, a dyno runs a script on a worker.
+    // site, a worker process runs a script on a host.
     contains: {
         tier: 'extracted',
         phrase: 'contains',
@@ -149,7 +149,7 @@ export const RELATIONS = {
     runs: {
         tier: 'extracted',
         phrase: 'runs',
-        gloss: 'an entrypoint — a script, a process, a dyno — executes this',
+        gloss: 'an entrypoint — a script, a process, a worker — executes this',
     },
     documents: {
         tier: 'extracted',
@@ -509,8 +509,8 @@ export function lintEntityGraph(graph) {
         // The closure rule mirrors the DOCUMENT invariant exactly: what gets
         // published is the bundle, so a public DOCUMENT may never point into
         // private knowledge. Code-to-code edges are out of scope here — a
-        // public module importing a private one is a real fact of this repo,
-        // sanitized by the export pipeline's patches, not by this graph.
+        // public module importing a private one is a real fact of a codebase,
+        // governed by what the codebase publishes, not by this graph.
         if (from.kind === 'doc' && !isPrivateNode(from) && isPrivateNode(to)) {
             findings.push({
                 severity: 'error',
@@ -532,7 +532,7 @@ export function lintEntityGraph(graph) {
 /**
  * Both stores live in a dot-directory inside the bundle: the vault walker
  * skips dotfiles, so they are invisible to every document operation, they
- * travel with WIKI_ROOT, and the export pipeline (which copies *.md only)
+ * travel with WIKI_ROOT, and publishing the bundle as markdown (*.md only)
  * cannot ship them by accident.
  */
 export function graphDir(wikiRoot) {

package/dist/lib/wiki/extract.js

@@ -69,6 +69,10 @@ const BARE_IMPORT_RE = /(?:^|\n)\s*import\s+['"]([^'"\n]+)['"]/g;
 const DYNAMIC_IMPORT_RE = /\bimport\(\s*['"]([^'"\n]+)['"]\s*\)/g;
 const ENV_DOT_RE = /process\.env\.([A-Za-z_][A-Za-z0-9_]*)/g;
 const ENV_INDEX_RE = /process\.env\[\s*['"]([A-Za-z_][A-Za-z0-9_]*)['"]\s*\]/g;
+// An injected environment (`env: NodeJS.ProcessEnv = process.env`, the
+// testable form) is read as `env.NAME`. Upper-case names only, so an
+// ordinary object property never reads as a variable.
+const ENV_PARAM_RE = /(?<![\w.])env\.([A-Z][A-Z0-9_]{2,})\b/g;
 /** Resolve a relative specifier against the importing file's repo path. */
 export function resolveLocalImport(fromRelPath, specifier) {
     if (!specifier.startsWith('.'))
@@ -93,7 +97,7 @@ export function scanModule(text, relPath) {
             specifiers.add(match[1]);
     }
     const envVars = new Set();
-    for (const re of [ENV_DOT_RE, ENV_INDEX_RE]) {
+    for (const re of [ENV_DOT_RE, ENV_INDEX_RE, ENV_PARAM_RE]) {
         re.lastIndex = 0;
         let match;
         while ((match = re.exec(text)) !== null)

package/dist/lib/wiki/fill.js

@@ -19,11 +19,11 @@
  */
 import { existsSync, readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { runWikiAgent, modelAvailable } from "./agentRun.js";
-import { llmActor } from "./format.js";
-import { buildGraph } from "./graph.js";
-import { emitFrontmatter, parseDoc, setSlotContent, slotIsUnfilled, TODO_SENTINEL, } from "./markdown.js";
-import { loadDoc, writeDocFile } from "./vault.js";
+import { runWikiAgent, modelAvailable } from './agentRun.js';
+import { llmActor } from './format.js';
+import { buildGraph } from './graph.js';
+import { emitFrontmatter, parseDoc, setSlotContent, slotIsUnfilled, TODO_SENTINEL, } from './markdown.js';
+import { loadDoc, writeDocFile } from './vault.js';
 // ── Prompt assembly ──────────────────────────────────────────────────────────
 const WRITER_INSTRUCTION = `You write missing prose for knowledge-base documents about a software system.
 You receive one document, the id of one empty slot in it, a hint describing what belongs there, link candidates, and source excerpts.

package/dist/lib/wiki/format.d.ts

@@ -30,12 +30,12 @@ import { z } from 'zod';
 /** OKF spec version this profile targets. Written to the root index.md. */
 export declare const OKF_VERSION = "0.2";
 /** Reserved filenames (§3.1) — never concept documents. */
-export declare const RESERVED_FILENAMES: readonly ["index.md", "log.md"];
+export declare const RESERVED_FILENAMES: readonly ['index.md', 'log.md'];
 export declare function isReservedFilename(fileName: string): boolean;
 /**
  * The subtree that never leaves this repo. Path-based visibility: a doc is
- * private iff its bundle path starts with this prefix. The export pipeline
- * copies the bundle WITHOUT this subtree, and lint's closure rule forbids
+ * private iff its bundle path starts with this prefix. Whatever publishes
+ * the bundle copies it WITHOUT this subtree, and lint's closure rule forbids
  * docs outside it from linking into it — so the published bundle is
  * link-closed by construction (see wiki/decisions/0003.)
  */
@@ -46,7 +46,7 @@ export declare function isPrivatePath(bundlePath: string): boolean;
  * tolerate unknown types (§11), so this list steers authors without
  * rejecting anything — lint reports an unknown type as INFO, not an error.
  */
-export declare const CONCEPT_TYPES: readonly ["overview", "subsystem", "syndicate", "tool", "model-provider", "schema", "protocol", "runbook", "guide", "decision", "doctrine", "reference", "meta"];
+export declare const CONCEPT_TYPES: readonly ['overview', 'subsystem', 'syndicate', 'tool', 'model-provider', 'schema', 'protocol', 'runbook', 'guide', 'decision', 'doctrine', 'reference', 'meta'];
 export type ConceptType = (typeof CONCEPT_TYPES)[number];
 /** `human:<id>` | `process:<id>` | `<producer>/<version>` */
 export declare const actorSchema: z.ZodString;
@@ -126,7 +126,9 @@ export declare function effectiveStatus(fm: ConceptFrontmatter): 'draft' | 'stab
 /** Stale when today >= stale_after (§5.5). `today` is YYYY-MM-DD. */
 export declare function isStale(fm: ConceptFrontmatter, today: string): boolean;
 /** Operations recorded in log.md, one `## [date] op | summary` entry each. */
-export declare const LOG_OPS: readonly ["init", "build", "fill", "garden", "ingest", "lint", "relate"];
+export declare const LOG_OPS: readonly ['init', 'build', 'fill', 'garden', 'ingest', 'lint', 
+/** One asserted relation added to the entity graph (lib/wiki/entities.ts). */
+'relate'];
 export type LogOp = (typeof LOG_OPS)[number];
 export declare const LOG_ENTRY_RE: RegExp;
 export declare function formatLogEntry(date: string, op: LogOp, summary: string, detail?: string): string;

package/dist/lib/wiki/format.js

@@ -37,8 +37,8 @@ export function isReservedFilename(fileName) {
 }
 /**
  * The subtree that never leaves this repo. Path-based visibility: a doc is
- * private iff its bundle path starts with this prefix. The export pipeline
- * copies the bundle WITHOUT this subtree, and lint's closure rule forbids
+ * private iff its bundle path starts with this prefix. Whatever publishes
+ * the bundle copies it WITHOUT this subtree, and lint's closure rule forbids
  * docs outside it from linking into it — so the published bundle is
  * link-closed by construction (see wiki/decisions/0003.)
  */

package/dist/lib/wiki/graph.js

@@ -14,8 +14,8 @@
  *   index could. `wiki:build --graph` merely snapshots this derivation for
  *   visualisation.
  */
-import { effectiveStatus, trustTier } from "./format.js";
-import { lookupTarget, resolveLinkTarget, } from "./vault.js";
+import { effectiveStatus, trustTier } from './format.js';
+import { lookupTarget, resolveLinkTarget, } from './vault.js';
 // ── Construction ─────────────────────────────────────────────────────────────
 export function buildGraph(vault) {
     const nodes = new Map();

package/dist/lib/wiki/lint.js

@@ -25,8 +25,8 @@
  *   itself know any private vocabulary.
  */
 import { posix } from 'node:path';
-import { CONCEPT_TYPES, isStale, LOG_ENTRY_RE, } from "./format.js";
-import { docsInDirectory, lookupTarget, resolveLinkTarget, } from "./vault.js";
+import { CONCEPT_TYPES, isStale, LOG_ENTRY_RE, } from './format.js';
+import { docsInDirectory, lookupTarget, resolveLinkTarget, } from './vault.js';
 function report(findings) {
     const errors = findings.filter((f) => f.severity === 'error').length;
     const warnings = findings.filter((f) => f.severity === 'warning').length;

package/dist/lib/wiki/markdown.d.ts

@@ -118,7 +118,7 @@ export declare function generatedBlock(id: string, source: string, content: stri
 /** Splice `content` between a slot's markers. Null when the slot is absent. */
 export declare function setSlotContent(raw: string, slotId: string, content: string): string | null;
 /** Splice `content` between a generated block's markers. Null when absent. */
-export declare function setGeneratedContent(raw: string, blockId: string, content: string): string | null;
+export declare function setGeneratedContent(raw: string, blockId: string, content: string, source?: string): string | null;
 /**
  * Insert a log entry newest-first: after the preamble (everything before the
  * first `## [` entry), before existing entries. log.md stays chronologically

package/dist/lib/wiki/markdown.js

@@ -304,12 +304,17 @@ export function setSlotContent(raw, slotId, content) {
     ].join('\n');
 }
 /** Splice `content` between a generated block's markers. Null when absent. */
-export function setGeneratedContent(raw, blockId, content) {
+export function setGeneratedContent(raw, blockId, content, source) {
     const doc = parseDoc(raw);
     const block = doc.generated.find((b) => b.id === blockId);
     if (!block)
         return null;
     const lines = raw.split('\n');
+    // A source that moved (a file relocated in the repo) rewrites the opening
+    // marker too, so the attribution never outlives the file it names.
+    if (source !== undefined && block.source !== source) {
+        lines[block.startLine - 1] = generatedBlock(blockId, source, '').split('\n')[0];
+    }
     return [
         ...lines.slice(0, block.startLine),
         content.trim(),

package/dist/lib/wiki/pipeline.js

@@ -15,8 +15,8 @@
  *   caller extracted from its own truth. This module never guesses what a
  *   repo contains.
  */
-import { buildEntityGraph, entityStats, lintEntityGraph, loadRelations, NODE_KINDS, relationEdges, RELATIONS, writeSnapshot, } from "./entities.js";
-import { table } from "./markdown.js";
+import { buildEntityGraph, entityStats, lintEntityGraph, loadRelations, NODE_KINDS, relationEdges, RELATIONS, writeSnapshot, } from './entities.js';
+import { table } from './markdown.js';
 /**
  * Merge the derived layer with the asserted relations and (unless this is a
  * lint-only run) refresh the snapshot the wiki tools read. The snapshot

package/dist/lib/wiki/vault.js

@@ -19,8 +19,8 @@
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, } from 'node:fs';
 import { dirname, join, posix, resolve, sep } from 'node:path';
-import { conceptFrontmatterSchema, isPrivatePath, isReservedFilename, } from "./format.js";
-import { parseDoc } from "./markdown.js";
+import { conceptFrontmatterSchema, isPrivatePath, isReservedFilename, } from './format.js';
+import { parseDoc } from './markdown.js';
 // ── Bundle root ──────────────────────────────────────────────────────────────
 /**
  * WIKI_ROOT env var wins; default is `<cwd>/wiki`. The default used to be

package/dist/scripts/a2a_server.d.ts

@@ -1,12 +1,18 @@
 #!/usr/bin/env node
-/** One human-readable line naming WHY a turn failed, for the failed task's
- *  status message — the text the Discord surface renders verbatim. Provider
- *  errors sometimes arrive as a raw JSON blob (Gemini ApiError:
- *  `{"error":{"code":503,"message":"...","status":"UNAVAILABLE"}}`), so the
- *  inner message is dug out before falling back to the string itself. An
- *  empty message keeps the old pointer at the server logs. */
-export declare function describeTurnError(error: {
-    code: string;
-    message: string;
-}): string;
-export declare function startServer(syndicateName?: string): Promise<void>;
+import type { Server } from 'node:http';
+import { createA2AApp } from '../lib/a2a/app.ts';
+export { describeTurnError } from '../lib/a2a/executor.ts';
+/**
+ * What a deployment adds on top of the environment-driven server: its own
+ * routes and any createA2AApp option. A private deployment imports
+ * `startServer` from `melchizedek-agents/server`, registers its tools with
+ * `registerTool`, and passes its routes here, so it inherits every
+ * environment variable this file reads (ADR 0022).
+ */
+export interface ServerExtensions {
+    /** Mounted after authentication, before the built-in routes. */
+    routes?: (app: import('express').Express) => void;
+    /** Any other createA2AApp option; wins over what the environment sets. */
+    options?: Partial<Parameters<typeof createA2AApp>[0]>;
+}
+export declare function startServer(syndicateName?: string, extensions?: ServerExtensions): Promise<Server>;