mewkit 1.11.1 → 1.12.0

package/dist/wiki/domain/invariants.js

@@ -0,0 +1,84 @@
+// Pure domain invariants. No IO. These are the security-bearing guards that
+// every upper layer inherits: path-traversal rejection, provenance completeness,
+// claim sourcing, and the state-transition machine.
+/** Reject any path segment that could escape the wiki root. Pure string check —
+ * the caller passes a repo-relative path, never an absolute one. */
+export function assertNoTraversal(path) {
+    if (path.length === 0) {
+        throw new Error("path must be non-empty");
+    }
+    if (path.includes("\0")) {
+        throw new Error(`path contains a null byte: ${JSON.stringify(path)}`);
+    }
+    if (path.startsWith("/") || /^[a-zA-Z]:[\\/]/.test(path)) {
+        throw new Error(`path must be repo-relative, got absolute: ${JSON.stringify(path)}`);
+    }
+    if (path.includes("\\")) {
+        throw new Error(`path must use forward slashes: ${JSON.stringify(path)}`);
+    }
+    const segments = path.split("/");
+    if (segments.some((segment) => segment === ".." || segment === ".")) {
+        throw new Error(`path contains a traversal segment: ${JSON.stringify(path)}`);
+    }
+}
+/** A canonical page must carry title, slug, created_at, updated_at, and a
+ * provenance with a named origin (invariant). */
+export function assertCanonicalComplete(page) {
+    const missing = [];
+    if (!page.title)
+        missing.push("title");
+    if (!page.slug)
+        missing.push("slug");
+    if (!page.createdAt)
+        missing.push("createdAt");
+    if (!page.updatedAt)
+        missing.push("updatedAt");
+    if (!page.provenance || !page.provenance.origin)
+        missing.push("provenance.origin");
+    if (missing.length > 0) {
+        throw new Error(`canonical page is missing required fields: ${missing.join(", ")}`);
+    }
+    assertNoTraversal(page.path);
+}
+/** A claim drawn from an external source must name that source. */
+export function assertClaimHasSource(claim) {
+    if (claim.external && !claim.sourceId) {
+        throw new Error(`external claim ${JSON.stringify(claim.id)} requires a sourceId`);
+    }
+}
+// --- State-transition machine ----------------------------------------------
+const ALLOWED_TRANSITIONS = {
+    proposed: ["scanned", "quarantined", "rejected"],
+    scanned: ["approved", "quarantined", "rejected"],
+    approved: ["committed", "rejected"],
+    committed: [],
+    quarantined: [],
+    rejected: [],
+};
+/**
+ * Decide whether a lifecycle transition is permitted. Two security invariants
+ * are enforced structurally:
+ *  - Only `scanned` content can reach `approved` (unscanned content is barred).
+ *  - Agent-origin content can never reach `committed` (no self-commit).
+ */
+export function canTransition(from, to, ctx) {
+    if (from === to) {
+        return { ok: false, reason: `no-op transition: ${from} → ${to}` };
+    }
+    if (!ALLOWED_TRANSITIONS[from].includes(to)) {
+        return { ok: false, reason: `illegal transition: ${from} → ${to}` };
+    }
+    if (to === "committed" && ctx.origin === "agent") {
+        return { ok: false, reason: "agent-origin content cannot transition to committed" };
+    }
+    return { ok: true };
+}
+/** Throwing wrapper around `canTransition` for call sites that treat an illegal
+ * transition as a programming error. */
+export function assertTransition(from, to, ctx) {
+    const result = canTransition(from, to, ctx);
+    if (!result.ok) {
+        throw new Error(result.reason);
+    }
+}
+//# sourceMappingURL=invariants.js.map

package/dist/wiki/domain/invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.js","sourceRoot":"","sources":["../../../src/wiki/domain/invariants.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,iFAAiF;AACjF,oDAAoD;AAIpD;oEACoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACF,CAAC;AAED;iDACiD;AACjD,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACpD,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC;IACnF,CAAC;AACF,CAAC;AAED,8EAA8E;AAE9E,MAAM,mBAAmB,GAA4C;IACpE,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC;IAChD,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC;IAChD,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACnC,SAAS,EAAE,EAAE;IACb,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE;CACZ,CAAC;AAYF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC5B,IAAe,EACf,EAAa,EACb,GAAsB;IAEtB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,EAAE,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACrB,CAAC;AAED;wCACwC;AACxC,MAAM,UAAU,gBAAgB,CAC/B,IAAe,EACf,EAAa,EACb,GAAsB;IAEtB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;AACF,CAAC"}

package/dist/wiki/domain/salience.d.ts

@@ -0,0 +1,11 @@
+import type { SalienceComponents, SalienceScore } from "./types.js";
+/** Inclusive [min, max] bound for every salience component. */
+export declare const SALIENCE_BOUNDS: Record<keyof SalienceComponents, readonly [number, number]>;
+/**
+ * Score a set of salience components. Each component is clamped to its declared
+ * bound before summing, so `total` is always within the rubric's range
+ * (max +16 from the seven positive components, min −8 from the two penalties).
+ * The returned `components` are the clamped values actually used.
+ */
+export declare function scoreSalience(input: SalienceComponents): SalienceScore;
+//# sourceMappingURL=salience.d.ts.map

package/dist/wiki/domain/salience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"salience.d.ts","sourceRoot":"","sources":["../../../src/wiki/domain/salience.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpE,+DAA+D;AAC/D,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,kBAAkB,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAUvF,CAAC;AAWF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAUtE"}

package/dist/wiki/domain/salience.js

@@ -0,0 +1,40 @@
+// Salience rubric. Salience is an evaluated heuristic, NOT truth —
+// it is an explicit, testable scoring function with named, bounded components.
+// All weights and bounds live in one constant so they can be tuned in one place.
+/** Inclusive [min, max] bound for every salience component. */
+export const SALIENCE_BOUNDS = {
+    explicit_user_intent: [0, 3],
+    verified_outcome: [0, 3],
+    recurrence_or_friction: [0, 2],
+    novelty_vs_existing_wiki: [0, 2],
+    future_reuse_likelihood: [0, 2],
+    source_quality: [0, 2],
+    blast_radius: [0, 2],
+    security_risk_penalty: [-5, 0],
+    staleness_penalty: [-3, 0],
+};
+const COMPONENT_KEYS = Object.keys(SALIENCE_BOUNDS);
+function clamp(value, min, max) {
+    if (Number.isNaN(value)) {
+        return min;
+    }
+    return Math.min(max, Math.max(min, value));
+}
+/**
+ * Score a set of salience components. Each component is clamped to its declared
+ * bound before summing, so `total` is always within the rubric's range
+ * (max +16 from the seven positive components, min −8 from the two penalties).
+ * The returned `components` are the clamped values actually used.
+ */
+export function scoreSalience(input) {
+    const components = {};
+    let total = 0;
+    for (const key of COMPONENT_KEYS) {
+        const [min, max] = SALIENCE_BOUNDS[key];
+        const clamped = clamp(input[key], min, max);
+        components[key] = clamped;
+        total += clamped;
+    }
+    return { total, components };
+}
+//# sourceMappingURL=salience.js.map

package/dist/wiki/domain/salience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"salience.js","sourceRoot":"","sources":["../../../src/wiki/domain/salience.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,+EAA+E;AAC/E,iFAAiF;AAIjF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAgE;IAC3F,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5B,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,sBAAsB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B,wBAAwB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAChC,uBAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACpB,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAiC,CAAC;AAEpF,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACrD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACtD,MAAM,UAAU,GAAG,EAAwB,CAAC;IAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QAC1B,KAAK,IAAI,OAAO,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC"}

package/dist/wiki/domain/types.d.ts

@@ -0,0 +1,151 @@
+declare const brand: unique symbol;
+type Brand<T, B extends string> = T & {
+    readonly [brand]: B;
+};
+/** A validated wiki slug: lowercase alphanumerics joined by single hyphens. */
+export type WikiSlug = Brand<string, "WikiSlug">;
+/** A stable wiki page identifier. */
+export type WikiPageId = Brand<string, "WikiPageId">;
+/** Slug grammar. The pattern forbids `.`, `/`, and whitespace, so a valid slug
+ * can never carry a path-traversal sequence. */
+export declare const WIKI_SLUG_PATTERN: RegExp;
+export declare function isWikiSlug(value: string): value is WikiSlug;
+/** Smart constructor for a slug. Throws on invalid input — callers never
+ * fabricate a branded slug by assertion. */
+export declare function makeWikiSlug(value: string): WikiSlug;
+export declare function makeWikiPageId(value: string): WikiPageId;
+/** Who originated a piece of content. Agent-origin content can never self-commit. */
+export type WikiOrigin = "agent" | "human" | "system";
+/** Lifecycle state shared by candidates and pages. */
+export type WikiState = "proposed" | "scanned" | "approved" | "committed" | "quarantined" | "rejected";
+export type WikiSourceKind = "web" | "arxiv" | "github" | "internal";
+export type SeedStatus = "queued" | "fetched" | "done" | "failed";
+export type VerificationState = "unverified" | "verified" | "rejected";
+export type ScanStatus = "clean" | "injection" | "secret";
+/** Result of the multi-pass injection + secret scan. `status` carries the worst
+ * finding; `clean` is the only status that may gate content toward `approved`. */
+export interface InjectionVerdict {
+    status: ScanStatus;
+    /** Number of scan passes performed. */
+    passes: number;
+    findings: string[];
+}
+export declare function isClean(verdict: InjectionVerdict): boolean;
+/** The 9 salience components. Keys are snake_case rubric identifiers
+ * kept verbatim from the report so they map 1:1 to the wiki_salience store. */
+export interface SalienceComponents {
+    explicit_user_intent: number;
+    verified_outcome: number;
+    recurrence_or_friction: number;
+    novelty_vs_existing_wiki: number;
+    future_reuse_likelihood: number;
+    source_quality: number;
+    blast_radius: number;
+    security_risk_penalty: number;
+    staleness_penalty: number;
+}
+export interface SalienceScore {
+    total: number;
+    components: SalienceComponents;
+}
+export interface WikiSource {
+    id: string;
+    kind: WikiSourceKind;
+    url: string;
+    title?: string;
+    fetchedAt: string;
+    contentHash?: string;
+}
+export interface WikiClaim {
+    id: string;
+    text: string;
+    /** True when the claim is drawn from an external source. */
+    external: boolean;
+    /** Required when `external` is true (invariant). */
+    sourceId?: string;
+    pageId?: WikiPageId;
+}
+export interface WikiSeed {
+    id: string;
+    query: string;
+    kind: WikiSourceKind;
+    status: SeedStatus;
+    createdAt: string;
+}
+export interface WikiProvenance {
+    origin: WikiOrigin;
+    sourceIds: string[];
+    /** The candidate this page was approved from, if any. */
+    candidateId?: string;
+    /** The human who approved the canonical write, if any. */
+    approvedBy?: string;
+}
+export interface WikiCandidate {
+    id: string;
+    slug: WikiSlug;
+    origin: WikiOrigin;
+    title: string;
+    content: string;
+    whySave: string;
+    evidence: string;
+    sourceIds: string[];
+    noveltyDelta: number;
+    reuseScope: string;
+    verificationState: VerificationState;
+    riskScore: number;
+    salience: SalienceScore;
+    state: WikiState;
+    createdAt: string;
+    /** Review-after date or TTL marker. */
+    reviewAfter?: string;
+}
+export interface WikiPage {
+    id: WikiPageId;
+    slug: WikiSlug;
+    title: string;
+    /** Repo-relative path under tasks/wikis/<slug>/pages/. */
+    path: string;
+    content: string;
+    state: WikiState;
+    createdAt: string;
+    updatedAt: string;
+    provenance: WikiProvenance;
+    links: WikiPageId[];
+}
+export type InterventionKind = "reject" | "quarantine" | "override" | "link";
+export interface WikiIntervention {
+    id: string;
+    kind: InterventionKind;
+    candidateId?: string;
+    reason: string;
+    verdict?: InjectionVerdict;
+    actor: WikiOrigin;
+    createdAt: string;
+}
+/** Outcome of `decideWrite`. By construction NONE of these writes a canonical
+ * page — the strongest outcome is a candidate. Canonical pages are produced only
+ * by the human-driven approve path in the application layer. */
+export type WikiWriteDecision = {
+    kind: "quarantine";
+    reason: string;
+} | {
+    kind: "link-existing";
+    existingPageId: WikiPageId;
+    reason: string;
+} | {
+    kind: "append-candidate";
+    reason: string;
+} | {
+    kind: "propose-candidate";
+    reason: string;
+} | {
+    kind: "discard";
+    reason: string;
+};
+/** Duplicate-check result fed to `decideWrite`. */
+export interface DupCheck {
+    isHighDuplicate: boolean;
+    existingPageId?: WikiPageId;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/wiki/domain/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/wiki/domain/types.ts"],"names":[],"mappings":"AAMA,OAAO,CAAC,MAAM,KAAK,EAAE,OAAO,MAAM,CAAC;AACnC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAE9D,+EAA+E;AAC/E,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACjD,qCAAqC;AACrC,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAErD;gDACgD;AAChD,eAAO,MAAM,iBAAiB,QAA+B,CAAC;AAE9D,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,QAAQ,CAE3D;AAED;4CAC4C;AAC5C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAKpD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAKxD;AAID,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtD,sDAAsD;AACtD,MAAM,MAAM,SAAS,GAClB,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,aAAa,GACb,UAAU,CAAC;AAEd,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAErE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAElE,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,CAAC;AAIvE,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE1D;kFACkF;AAClF,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,UAAU,CAAC;IACnB,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAE1D;AAID;+EAC+E;AAC/E,MAAM,WAAW,kBAAkB;IAClC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC;CAC/B;AAID,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,UAAU,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7E,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAID;;gEAEgE;AAChE,MAAM,MAAM,iBAAiB,GAC1B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,cAAc,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,mDAAmD;AACnD,MAAM,WAAW,QAAQ;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,UAAU,CAAC;CAC5B"}

package/dist/wiki/domain/types.js

@@ -0,0 +1,27 @@
+// Wiki domain types. Pure vocabulary — no IO, no fs, no DB, no network.
+// Mirrors the pure-domain shape of repository-harness/crates/harness-cli/src/domain.rs.
+// Type names track the domain model; salience component keys track the salience rubric.
+/** Slug grammar. The pattern forbids `.`, `/`, and whitespace, so a valid slug
+ * can never carry a path-traversal sequence. */
+export const WIKI_SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export function isWikiSlug(value) {
+    return WIKI_SLUG_PATTERN.test(value);
+}
+/** Smart constructor for a slug. Throws on invalid input — callers never
+ * fabricate a branded slug by assertion. */
+export function makeWikiSlug(value) {
+    if (!isWikiSlug(value)) {
+        throw new Error(`invalid wiki slug: ${JSON.stringify(value)}`);
+    }
+    return value;
+}
+export function makeWikiPageId(value) {
+    if (value.length === 0) {
+        throw new Error("wiki page id must be non-empty");
+    }
+    return value;
+}
+export function isClean(verdict) {
+    return verdict.status === "clean";
+}
+//# sourceMappingURL=types.js.map

package/dist/wiki/domain/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/wiki/domain/types.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,wFAAwF;AACxF,wFAAwF;AAYxF;gDACgD;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAE9D,MAAM,UAAU,UAAU,CAAC,KAAa;IACvC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;4CAC4C;AAC5C,MAAM,UAAU,YAAY,CAAC,KAAa;IACzC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAiB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAmB,CAAC;AAC5B,CAAC;AAmCD,MAAM,UAAU,OAAO,CAAC,OAAyB;IAChD,OAAO,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC;AACnC,CAAC"}

package/dist/wiki/domain/write-decision.d.ts

@@ -0,0 +1,25 @@
+import type { DupCheck, InjectionVerdict, SalienceScore, WikiWriteDecision } from "./types.js";
+/** Salience thresholds, kept in one place for tuning. */
+export declare const SALIENCE_THRESHOLDS: {
+    /** Total ≥ this proposes a candidate for human approval. */
+    readonly proposeCandidate: 8;
+    /** Total ≥ this, with a strong verified signal, may auto-append to
+     * candidates.jsonl (still never a canonical page). */
+    readonly appendCandidate: 10;
+};
+/** Minimum scan passes for a "clean" verdict to be trusted. A clean
+ * verdict with fewer passes is treated as
+ * incompletely scanned and quarantined — `isClean` reports findings only, it
+ * does NOT imply the content was scanned enough to write. */
+export declare const MIN_SCAN_PASSES = 2;
+/**
+ * Decide what to do with a proposed write. Precedence:
+ *  1. Any injection/secret finding → quarantine (security wins over salience).
+ *  2. A clean verdict with too few scan passes → quarantine (incompletely scanned).
+ *  3. High duplication → link to the existing page, never a new one.
+ *  4. Total ≥ 10 with a strong verified signal → append to candidates.jsonl.
+ *  5. Total ≥ 8 and scan clean → propose a candidate for approval.
+ *  6. Otherwise → discard.
+ */
+export declare function decideWrite(score: SalienceScore, verdict: InjectionVerdict, dup: DupCheck): WikiWriteDecision;
+//# sourceMappingURL=write-decision.d.ts.map

package/dist/wiki/domain/write-decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-decision.d.ts","sourceRoot":"","sources":["../../../src/wiki/domain/write-decision.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACX,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,MAAM,YAAY,CAAC;AAGpB,yDAAyD;AACzD,eAAO,MAAM,mBAAmB;IAC/B,4DAA4D;;IAE5D;0DACsD;;CAE7C,CAAC;AAEX;;;6DAG6D;AAC7D,eAAO,MAAM,eAAe,IAAI,CAAC;AASjC;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAC1B,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,QAAQ,GACX,iBAAiB,CAyCnB"}

package/dist/wiki/domain/write-decision.js

@@ -0,0 +1,71 @@
+// Write-decision logic. Maps a salience score + scan verdict + dup
+// check onto a write decision. By construction this NEVER decides to write a
+// canonical page — the strongest outcome is a candidate. Canonical pages come
+// only from the human approve path in the application layer.
+import { isClean } from "./types.js";
+/** Salience thresholds, kept in one place for tuning. */
+export const SALIENCE_THRESHOLDS = {
+    /** Total ≥ this proposes a candidate for human approval. */
+    proposeCandidate: 8,
+    /** Total ≥ this, with a strong verified signal, may auto-append to
+     * candidates.jsonl (still never a canonical page). */
+    appendCandidate: 10,
+};
+/** Minimum scan passes for a "clean" verdict to be trusted. A clean
+ * verdict with fewer passes is treated as
+ * incompletely scanned and quarantined — `isClean` reports findings only, it
+ * does NOT imply the content was scanned enough to write. */
+export const MIN_SCAN_PASSES = 2;
+/** A "strong verified signal" (accepted fix + passing tests +
+ * human-authored note) is encoded as the verified_outcome component at its max.
+ * Callers set verified_outcome to 3 only when that bundle holds. */
+function hasStrongVerifiedSignal(score) {
+    return score.components.verified_outcome >= 3;
+}
+/**
+ * Decide what to do with a proposed write. Precedence:
+ *  1. Any injection/secret finding → quarantine (security wins over salience).
+ *  2. A clean verdict with too few scan passes → quarantine (incompletely scanned).
+ *  3. High duplication → link to the existing page, never a new one.
+ *  4. Total ≥ 10 with a strong verified signal → append to candidates.jsonl.
+ *  5. Total ≥ 8 and scan clean → propose a candidate for approval.
+ *  6. Otherwise → discard.
+ */
+export function decideWrite(score, verdict, dup) {
+    if (!isClean(verdict)) {
+        return {
+            kind: "quarantine",
+            reason: `scan found ${verdict.status}; quarantined`,
+        };
+    }
+    if (verdict.passes < MIN_SCAN_PASSES) {
+        return {
+            kind: "quarantine",
+            reason: `scan incomplete (${verdict.passes} < ${MIN_SCAN_PASSES} passes); quarantined pending full scan`,
+        };
+    }
+    if (dup.isHighDuplicate && dup.existingPageId) {
+        return {
+            kind: "link-existing",
+            existingPageId: dup.existingPageId,
+            reason: "high duplication; linked to existing page",
+        };
+    }
+    if (score.total >= SALIENCE_THRESHOLDS.appendCandidate && hasStrongVerifiedSignal(score)) {
+        return {
+            kind: "append-candidate",
+            reason: `salience ${score.total} ≥ ${SALIENCE_THRESHOLDS.appendCandidate} with verified signal`,
+        };
+    }
+    if (score.total >= SALIENCE_THRESHOLDS.proposeCandidate) {
+        return {
+            kind: "propose-candidate",
+            reason: `salience ${score.total} ≥ ${SALIENCE_THRESHOLDS.proposeCandidate}`,
+        };
+    }
+    return {
+        kind: "discard",
+        reason: `salience ${score.total} below threshold ${SALIENCE_THRESHOLDS.proposeCandidate}`,
+    };
+}
+//# sourceMappingURL=write-decision.js.map

package/dist/wiki/domain/write-decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-decision.js","sourceRoot":"","sources":["../../../src/wiki/domain/write-decision.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,6EAA6E;AAC7E,8EAA8E;AAC9E,6DAA6D;AAQ7D,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,yDAAyD;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,4DAA4D;IAC5D,gBAAgB,EAAE,CAAC;IACnB;0DACsD;IACtD,eAAe,EAAE,EAAE;CACV,CAAC;AAEX;;;6DAG6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC;;oEAEoE;AACpE,SAAS,uBAAuB,CAAC,KAAoB;IACpD,OAAO,KAAK,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAC1B,KAAoB,EACpB,OAAyB,EACzB,GAAa;IAEb,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO;YACN,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,cAAc,OAAO,CAAC,MAAM,eAAe;SACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACtC,OAAO;YACN,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,oBAAoB,OAAO,CAAC,MAAM,MAAM,eAAe,yCAAyC;SACxG,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QAC/C,OAAO;YACN,IAAI,EAAE,eAAe;YACrB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,MAAM,EAAE,2CAA2C;SACnD,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,eAAe,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO;YACN,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,YAAY,KAAK,CAAC,KAAK,MAAM,mBAAmB,CAAC,eAAe,uBAAuB;SAC/F,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,CAAC;QACzD,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,YAAY,KAAK,CAAC,KAAK,MAAM,mBAAmB,CAAC,gBAAgB,EAAE;SAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACN,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,YAAY,KAAK,CAAC,KAAK,oBAAoB,mBAAmB,CAAC,gBAAgB,EAAE;KACzF,CAAC;AACH,CAAC"}

package/dist/wiki/infrastructure/fetcher-adapter.d.ts

@@ -0,0 +1,45 @@
+import type { WikiSeed } from "../domain/index.js";
+import type { Fetcher, FetchedDoc } from "../application/ports.js";
+interface FetchResponse {
+    status: number;
+    ok: boolean;
+    headers: {
+        get(name: string): string | null;
+    };
+    body: {
+        getReader(): {
+            read(): Promise<{
+                done: boolean;
+                value?: Uint8Array;
+            }>;
+            cancel(): Promise<void>;
+        };
+    } | null;
+    text(): Promise<string>;
+}
+export type FetchImpl = (url: string, init: {
+    redirect: "manual";
+    signal: unknown;
+    headers: Record<string, string>;
+}) => Promise<FetchResponse>;
+export interface FetcherOptions {
+    fetchImpl?: FetchImpl;
+    maxBytes?: number;
+    maxHops?: number;
+    timeoutMs?: number;
+}
+export declare class FetcherAdapter implements Fetcher {
+    private readonly fetchImpl;
+    private readonly maxBytes;
+    private readonly maxHops;
+    private readonly timeoutMs;
+    constructor(opts?: FetcherOptions);
+    /** Map a seed to a fetch URL. Web seeds carry a URL; arXiv/GitHub map to their public APIs. */
+    buildUrl(seed: WikiSeed): string;
+    fetch(seed: WikiSeed): Promise<FetchedDoc>;
+    /** url-guard at EVERY hop; manual redirects; size cap; timeout. */
+    private safeGet;
+    private readCapped;
+}
+export {};
+//# sourceMappingURL=fetcher-adapter.d.ts.map

package/dist/wiki/infrastructure/fetcher-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetcher-adapter.d.ts","sourceRoot":"","sources":["../../../src/wiki/infrastructure/fetcher-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAUnE,UAAU,aAAa;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,EAAE;QAAE,SAAS,IAAI;YAAE,IAAI,IAAI,OAAO,CAAC;gBAAE,IAAI,EAAE,OAAO,CAAC;gBAAC,KAAK,CAAC,EAAE,UAAU,CAAA;aAAE,CAAC,CAAC;YAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAClH,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACxB;AACD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAEhJ,MAAM,WAAW,cAAc;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,cAAe,YAAW,OAAO;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,IAAI,GAAE,cAAmB;IAQrC,+FAA+F;IAC/F,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM;IAa1B,KAAK,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAahD,mEAAmE;YACrD,OAAO;YA2BP,UAAU;CAqBxB"}

package/dist/wiki/infrastructure/fetcher-adapter.js

@@ -0,0 +1,99 @@
+import { createHash } from "node:crypto";
+import { isSafeSourceUrl, MAX_CONTENT_BYTES } from "./scanner-adapter.js";
+function sha16(s) {
+    return createHash("sha256").update(s).digest("hex").slice(0, 16);
+}
+export class FetcherAdapter {
+    fetchImpl;
+    maxBytes;
+    maxHops;
+    timeoutMs;
+    constructor(opts = {}) {
+        // Builtin fetch is structurally compatible with FetchResponse (undici). Cast at the boundary.
+        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+        this.maxBytes = opts.maxBytes ?? MAX_CONTENT_BYTES;
+        this.maxHops = opts.maxHops ?? 3;
+        this.timeoutMs = opts.timeoutMs ?? 15000;
+    }
+    /** Map a seed to a fetch URL. Web seeds carry a URL; arXiv/GitHub map to their public APIs. */
+    buildUrl(seed) {
+        switch (seed.kind) {
+            case "web":
+                return seed.query;
+            case "arxiv":
+                return "http://export.arxiv.org/api/query?search_query=all:" + encodeURIComponent(seed.query) + "&max_results=1";
+            case "github":
+                return "https://api.github.com/search/repositories?q=" + encodeURIComponent(seed.query) + "&per_page=1";
+            default:
+                throw new Error("seed kind is not fetchable: " + seed.kind);
+        }
+    }
+    async fetch(seed) {
+        const url = this.buildUrl(seed);
+        const content = await this.safeGet(url);
+        const source = {
+            id: "src-" + sha16(url),
+            kind: seed.kind,
+            url,
+            fetchedAt: new Date().toISOString(),
+            contentHash: sha16(content),
+        };
+        return { content, sourceUrl: url, source };
+    }
+    /** url-guard at EVERY hop; manual redirects; size cap; timeout. */
+    async safeGet(startUrl) {
+        let url = startUrl;
+        for (let hop = 0; hop <= this.maxHops; hop++) {
+            if (!isSafeSourceUrl(url))
+                throw new Error("blocked unsafe URL: " + url);
+            const ctrl = new AbortController();
+            const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+            let res;
+            try {
+                res = await this.fetchImpl(url, { redirect: "manual", signal: ctrl.signal, headers: { "user-agent": "mewkit-wiki-research" } });
+            }
+            finally {
+                clearTimeout(timer);
+            }
+            if (res.status >= 300 && res.status < 400) {
+                const loc = res.headers.get("location");
+                if (!loc)
+                    throw new Error("redirect without Location header");
+                url = new URL(loc, url).toString(); // resolve relative; re-validated at loop top
+                continue;
+            }
+            if (!res.ok)
+                throw new Error("fetch failed: HTTP " + res.status);
+            const cl = Number(res.headers.get("content-length") ?? "0");
+            // Finite-guard: a non-numeric header coerces to NaN; the streaming cap is the real backstop.
+            if (Number.isFinite(cl) && cl > this.maxBytes)
+                throw new Error("size cap exceeded (content-length)");
+            return await this.readCapped(res);
+        }
+        throw new Error("too many redirects (> " + this.maxHops + ")");
+    }
+    async readCapped(res) {
+        // Fail closed on a body-less response — res.text() would read unbounded into memory with
+        // no streaming cap. A normal GET 200 always exposes a readable body.
+        if (!res.body)
+            throw new Error("response has no readable body");
+        const reader = res.body.getReader();
+        const chunks = [];
+        let total = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (value) {
+                total += value.length;
+                if (total > this.maxBytes) {
+                    await reader.cancel();
+                    throw new Error("size cap exceeded during stream");
+                }
+                chunks.push(value);
+            }
+        }
+        return Buffer.concat(chunks).toString("utf-8");
+    }
+}
+//# sourceMappingURL=fetcher-adapter.js.map

package/dist/wiki/infrastructure/fetcher-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetcher-adapter.js","sourceRoot":"","sources":["../../../src/wiki/infrastructure/fetcher-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAyB1E,SAAS,KAAK,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,cAAc;IACT,SAAS,CAAY;IACrB,QAAQ,CAAS;IACjB,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,YAAY,OAAuB,EAAE;QACpC,8FAA8F;QAC9F,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;QAC9E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED,+FAA+F;IAC/F,QAAQ,CAAC,IAAc;QACtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,KAAK;gBACT,OAAO,IAAI,CAAC,KAAK,CAAC;YACnB,KAAK,OAAO;gBACX,OAAO,qDAAqD,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC;YAClH,KAAK,QAAQ;gBACZ,OAAO,+CAA+C,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC;YACzG;gBACC,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAc;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,GAAe;YAC1B,EAAE,EAAE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG;YACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;SAC3B,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IAED,mEAAmE;IAC3D,KAAK,CAAC,OAAO,CAAC,QAAgB;QACrC,IAAI,GAAG,GAAG,QAAQ,CAAC;QACnB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,GAAkB,CAAC;YACvB,IAAI,CAAC;gBACJ,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;YACjI,CAAC;oBAAS,CAAC;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAC9D,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,6CAA6C;gBACjF,SAAS;YACV,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;YAC5D,6FAA6F;YAC7F,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACrG,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAkB;QAC1C,yFAAyF;QACzF,qEAAqE;QACrE,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACT,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,EAAE,CAAC;gBACX,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC3B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACD"}

package/dist/wiki/infrastructure/inventory-adapter.d.ts

@@ -0,0 +1,13 @@
+import type { InventoryRegistrar } from "../application/ports.js";
+/** The wiki serves the existing "project-memory" responsibility (see core/substrate.ts TAXONOMY). */
+export declare const WIKI_RESPONSIBILITY = "project-memory";
+export declare class InventoryAdapter implements InventoryRegistrar {
+    private readonly claudeDir;
+    constructor(claudeDir: string);
+    private file;
+    register(artifactPath: string, meta?: {
+        criticality?: string;
+        status?: string;
+    }): void;
+}
+//# sourceMappingURL=inventory-adapter.d.ts.map

package/dist/wiki/infrastructure/inventory-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory-adapter.d.ts","sourceRoot":"","sources":["../../../src/wiki/infrastructure/inventory-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAOlE,qGAAqG;AACrG,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAOpD,qBAAa,gBAAiB,YAAW,kBAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM;IAE9C,OAAO,CAAC,IAAI;IAIZ,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI;CA0B1F"}