opensquid 0.5.395

package/dist/setup/migrate/memory_store_handle.d.ts

@@ -0,0 +1,31 @@
+/** Fold the engine's separate description + body into the libSQL content-only field. */
+export declare const folded: (description: string, body: string) => string;
+export interface MemoryStore {
+    create(input: {
+        name: string;
+        description: string;
+        body: string;
+        scope: string;
+        /** Resolved umbrella namespace for a `project`-scoped memory (T-memory-scope-isolation). */
+        namespace?: string | null;
+    }): Promise<{
+        id: string;
+    }>;
+    get(id: string): Promise<{
+        content: string;
+    } | null>;
+    update(id: string, input: {
+        description: string;
+        body: string;
+        scope: string;
+    }): Promise<void>;
+    /** name → {id} for every imported memory (the `origin:import:` tag), via paged listMemories. */
+    listImportIndex(): Promise<Map<string, {
+        id: string;
+    }>>;
+    delete(id: string): Promise<void>;
+    close(): Promise<void>;
+}
+/** Build a MemoryStore over the live backend + a libSQL client. The caller `close()`s it. */
+export declare function makeMemoryStore(): Promise<MemoryStore>;
+//# sourceMappingURL=memory_store_handle.d.ts.map

package/dist/setup/migrate/memory_store_handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory_store_handle.d.ts","sourceRoot":"","sources":["../../../src/setup/migrate/memory_store_handle.ts"],"names":[],"mappings":"AAiCA,wFAAwF;AACxF,eAAO,MAAM,MAAM,GAAI,aAAa,MAAM,EAAE,MAAM,MAAM,KAAG,MAAqC,CAAC;AAEjG,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,KAAK,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,4FAA4F;QAC5F,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,gGAAgG;IAChG,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,6FAA6F;AAC7F,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,CAqE5D"}

package/dist/setup/migrate/memory_store_handle.js

@@ -0,0 +1,93 @@
+/**
+ * MemoryStore handle for the auto-memory sync (retire-Rust RES-5b). The auto-memory consumers
+ * (importer / drift / reconcile / CLI / doctor) drove `EngineClient.memory*`; this handle re-points
+ * those ops onto the libSQL memory store (RES-5a `src/rag/memory/store.ts`). It abstracts exactly the
+ * five ops the importer + drift need, so those functions stay store-agnostic and the consumers just
+ * build + close the handle.
+ *
+ * libSQL memory is content-only: the engine's separate `description` + `content` fold into one
+ * content field (`description\n\nbody`, per migrate_memories) — `folded` is the single helper used by
+ * BOTH the importer's refresh-compare AND drift's disk-side comparison (re-pointing only the read op
+ * would leave drift comparing folded-vs-bare → every import reports STALE). The import marker is the
+ * `origin:import:<name>` tag (libSQL has no `origin` column).
+ *
+ * Imports from: @libsql/client, node:crypto, ../../rag/backend_factory.js, ../../rag/config.js,
+ *   ../../rag/memory/store.js.
+ * Imported by: auto_memory_importer / memory_drift / auto_memory_snapshot / memory_reconcile /
+ *   cli/memory / cli/doctor.
+ */
+import { createHash } from 'node:crypto';
+import { createClient } from '@libsql/client';
+import { createBackend } from '../../rag/backend_factory.js';
+import { resolveBackendConfig } from '../../rag/config.js';
+import { ensureCompressionColumns, getMemoryById, insertMemory, listMemories, updateMemory, IMPORT_TAG_PREFIX, } from '../../rag/memory/store.js';
+/** Fold the engine's separate description + body into the libSQL content-only field. */
+export const folded = (description, body) => `${description}\n\n${body}`;
+/** Build a MemoryStore over the live backend + a libSQL client. The caller `close()`s it. */
+export async function makeMemoryStore() {
+    const cfg = await resolveBackendConfig();
+    if (!('dbUrl' in cfg))
+        throw new Error(`auto-memory: backend "${cfg.kind}" has no dbUrl`);
+    const dbUrl = cfg.dbUrl;
+    // File-first source-of-truth (fastembed variant only) so imported memories are durable across a
+    // rebuildLibsqlIndex — see T-fix-compression-durability.
+    const sourceDir = 'sourceDir' in cfg ? cfg.sourceDir : undefined;
+    const backend = createBackend(cfg);
+    await backend.init();
+    const client = createClient({ url: dbUrl });
+    await ensureCompressionColumns(client);
+    const nowIso = () => new Date().toISOString();
+    return {
+        async create({ name, description, body, scope, namespace }) {
+            const content = folded(description, body);
+            const id = `mem-${createHash('sha256').update(`${name}\n${content}`).digest('hex').slice(0, 16)}`;
+            const embedding = await backend.embed(content);
+            // Scope tier (T-memory-scope-isolation): a `project`/`team` scope is namespaced; everything else
+            // is `shared`. The resolved umbrella namespace is set only for the project tier.
+            const tier = scope === 'project' || scope === 'team' ? 'project' : 'shared';
+            await insertMemory(client, {
+                id,
+                content,
+                tags: [`scope:${scope}`, `${IMPORT_TAG_PREFIX}${name}`],
+                source: 'memory',
+                author: 'user',
+                createdAt: nowIso(),
+                derivedFrom: [],
+                consumedByUserLessons: 0,
+                tier,
+                namespace: tier === 'project' ? (namespace ?? null) : null,
+                embedding,
+            }, sourceDir);
+            return { id };
+        },
+        get: (id) => getMemoryById(client, id).then((m) => (m === null ? null : { content: m.content })),
+        update: (id, { description, body, scope }) => updateMemory(client, (t) => backend.embed(t), {
+            id,
+            content: folded(description, body),
+            scope,
+        }),
+        async listImportIndex() {
+            const index = new Map();
+            const pageSize = 200;
+            let offset = 0;
+            for (let i = 0; i < 1000; i++) {
+                const page = await listMemories(client, { limit: pageSize, offset });
+                for (const row of page.results) {
+                    const tag = row.tags.find((t) => t.startsWith(IMPORT_TAG_PREFIX));
+                    if (tag !== undefined)
+                        index.set(tag.slice(IMPORT_TAG_PREFIX.length), { id: row.id });
+                }
+                if (page.returned < pageSize)
+                    break;
+                offset += page.returned;
+            }
+            return index;
+        },
+        delete: (id) => backend.deleteLesson(id, { force: true }).then(() => undefined),
+        close: () => {
+            client.close();
+            return Promise.resolve();
+        },
+    };
+}
+//# sourceMappingURL=memory_store_handle.js.map

package/dist/setup/migrate/memory_store_handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory_store_handle.js","sourceRoot":"","sources":["../../../src/setup/migrate/memory_store_handle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,wFAAwF;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,WAAW,OAAO,IAAI,EAAE,CAAC;AAmBjG,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,GAAG,GAAG,MAAM,oBAAoB,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,gGAAgG;IAChG,yDAAyD;IACzD,MAAM,SAAS,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEtD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;YACxD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,EAAE,GAAG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAClG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,iGAAiG;YACjG,iFAAiF;YACjF,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5E,MAAM,YAAY,CAChB,MAAM,EACN;gBACE,EAAE;gBACF,OAAO;gBACP,IAAI,EAAE,CAAC,SAAS,KAAK,EAAE,EAAE,GAAG,iBAAiB,GAAG,IAAI,EAAE,CAAC;gBACvD,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,MAAM,EAAE;gBACnB,WAAW,EAAE,EAAE;gBACf,qBAAqB,EAAE,CAAC;gBACxB,IAAI;gBACJ,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1D,SAAS;aACV,EACD,SAAS,CACV,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,CAAC;QAChB,CAAC;QACD,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CACV,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAC3C,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC5C,EAAE;YACF,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;YAClC,KAAK;SACN,CAAC;QACJ,KAAK,CAAC,eAAe;YACnB,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;YAChD,MAAM,QAAQ,GAAG,GAAG,CAAC;YACrB,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBACrE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAClE,IAAI,GAAG,KAAK,SAAS;wBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxF,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,GAAG,QAAQ;oBAAE,MAAM;gBACpC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC;YAC1B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QAC/E,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/setup/migrate/migrate-scope.d.ts

@@ -0,0 +1,25 @@
+import type { MemoryTier } from '../../rag/types.js';
+export interface ScopeAssignment {
+    tier: MemoryTier;
+    namespace: string | null;
+}
+/**
+ * PURE: map a row's tags to (tier, namespace). A `scope:!project <name>` whose name is a KNOWN umbrella
+ * maps to that namespace; anything else (user/global, empty name, bare `scope:project`, unknown name) →
+ * `shared`. Conservative by design: when in doubt, over-share (the never-FORGET axiom) — never isolate
+ * a row to a namespace we can't verify.
+ */
+export declare function classifyScope(tags: string[]): ScopeAssignment;
+export interface MigrateScopeResult {
+    total: number;
+    toProject: number;
+    toShared: number;
+    changed: number;
+    applied: boolean;
+}
+/** Run the migration. `apply:false` (default) is a dry-run that mutates nothing. */
+export declare function migrateScope(opts: {
+    dbUrl: string;
+    apply: boolean;
+}): Promise<MigrateScopeResult>;
+//# sourceMappingURL=migrate-scope.d.ts.map

package/dist/setup/migrate/migrate-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-scope.d.ts","sourceRoot":"","sources":["../../../src/setup/migrate/migrate-scope.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAQrD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAS7D;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,oFAAoF;AACpF,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwC9B"}

package/dist/setup/migrate/migrate-scope.js

@@ -0,0 +1,82 @@
+/**
+ * Migrate legacy-tagged memory rows to the first-class `tier`/`namespace` columns
+ * (T-memory-scope-isolation S4). Pre-scope rows carry the Rust-era tag `scope:!project <name>` or
+ * `scope:user`; this maps them to the new columns so EXISTING memories scope correctly (new writes
+ * already do). Additive, idempotent, DRY-RUN by default — mutate only with `apply:true`, and on a COPY
+ * of `~/.opensquid/rag.sqlite` first. NEVER deletes a row (the never-delete axiom); conserves counts.
+ *
+ * Mapping (verified against the live store): `scope:!project loop` → namespace `loop`;
+ * `scope:!project RaumPilates-FE` → namespace `raumpilates`; everything else (`scope:user`, empty
+ * `!project ''`, bare `scope:project`, unknown project names) → `shared` (safe over-share, never a leak).
+ *
+ * Imports from: @libsql/client, ../../rag/types.js.
+ * Imported by: src/cli.ts (the `migrate-scope` command) + the test.
+ */
+import { createClient } from '@libsql/client';
+/** Old Rust project NAME (from the `scope:!project <name>` tag) → the umbrella namespace id. */
+const NAME_TO_NAMESPACE = {
+    loop: 'loop',
+    'RaumPilates-FE': 'raumpilates',
+};
+/**
+ * PURE: map a row's tags to (tier, namespace). A `scope:!project <name>` whose name is a KNOWN umbrella
+ * maps to that namespace; anything else (user/global, empty name, bare `scope:project`, unknown name) →
+ * `shared`. Conservative by design: when in doubt, over-share (the never-FORGET axiom) — never isolate
+ * a row to a namespace we can't verify.
+ */
+export function classifyScope(tags) {
+    for (const t of tags) {
+        const m = /^scope:!project\s+'?([^']*)'?\s*$/.exec(t);
+        const name = m?.[1]?.trim();
+        if (name !== undefined && name !== '' && NAME_TO_NAMESPACE[name] !== undefined) {
+            return { tier: 'project', namespace: NAME_TO_NAMESPACE[name] };
+        }
+    }
+    return { tier: 'shared', namespace: null };
+}
+/** Run the migration. `apply:false` (default) is a dry-run that mutates nothing. */
+export async function migrateScope(opts) {
+    const client = createClient({ url: opts.dbUrl });
+    // Ensure the columns exist (idempotent) so the script is self-sufficient on an un-migrated DB.
+    for (const ddl of [
+        `ALTER TABLE lessons ADD COLUMN tier TEXT NOT NULL DEFAULT 'shared'`,
+        `ALTER TABLE lessons ADD COLUMN namespace TEXT`,
+    ]) {
+        try {
+            await client.execute(ddl);
+        }
+        catch {
+            /* already migrated */
+        }
+    }
+    const rs = await client.execute(`SELECT id, tags, tier, namespace FROM lessons`);
+    const result = {
+        total: rs.rows.length,
+        toProject: 0,
+        toShared: 0,
+        changed: 0,
+        applied: opts.apply,
+    };
+    for (const row of rs.rows) {
+        const tags = JSON.parse((row.tags ?? '') || '[]');
+        const { tier, namespace } = classifyScope(tags);
+        if (tier === 'project')
+            result.toProject += 1;
+        else
+            result.toShared += 1;
+        const curTier = row.tier ?? 'shared';
+        const curNs = row.namespace ?? null;
+        if (curTier !== tier || curNs !== namespace) {
+            result.changed += 1;
+            if (opts.apply) {
+                await client.execute({
+                    sql: `UPDATE lessons SET tier = ?, namespace = ? WHERE id = ?`,
+                    args: [tier, namespace, row.id],
+                });
+            }
+        }
+    }
+    client.close();
+    return result;
+}
+//# sourceMappingURL=migrate-scope.js.map

package/dist/setup/migrate/migrate-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-scope.js","sourceRoot":"","sources":["../../../src/setup/migrate/migrate-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI9C,gGAAgG;AAChG,MAAM,iBAAiB,GAA2B;IAChD,IAAI,EAAE,MAAM;IACZ,gBAAgB,EAAE,aAAa;CAChC,CAAC;AAOF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAUD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAGlC;IACC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjD,+FAA+F;IAC/F,KAAK,MAAM,GAAG,IAAI;QAChB,oEAAoE;QACpE,+CAA+C;KAChD,EAAE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACjF,MAAM,MAAM,GAAuB;QACjC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM;QACrB,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,CAAC,KAAK;KACpB,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAE,GAAG,CAAC,IAAsB,IAAI,EAAE,CAAC,IAAI,IAAI,CAAa,CAAC;QACjF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;;YACzC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAI,GAAG,CAAC,IAAsB,IAAI,QAAQ,CAAC;QACxD,MAAM,KAAK,GAAI,GAAG,CAAC,SAA2B,IAAI,IAAI,CAAC;QACvD,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,OAAO,CAAC;oBACnB,GAAG,EAAE,yDAAyD;oBAC9D,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,EAAY,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/setup/schedule_nl.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Natural-language → cron expression translator. (`SCHED.3`)
+ *
+ * Pipeline: bounded NL input → escape into prompt template → dispatch through
+ * the user's `fast_classifier` alias → first-line trim → 6-field-strip →
+ * `node-cron.validate()` → return `{ cron, timezone?, nl_input, confidence }`.
+ *
+ * Model-neutrality contract (per `feedback_stop_haiku_drift` +
+ * `project_opensquid_model_neutral_subagent_primitive`):
+ *
+ *   - NO vendor model id, no provider name, no host binary name appears in
+ *     this file. The user's `models.yaml` maps the abstract alias name
+ *     (default `fast_classifier`) to a concrete strategy.
+ *   - Audit grep `haiku|sonnet|opus|gpt-[0-9]|claude-[0-9]|gemini` against
+ *     this file must return zero hits.
+ *
+ * Prompt-engineering shape (locked per task spec):
+ *
+ *   - 5-field POSIX output ONLY. The prompt explicitly names "5-field POSIX
+ *     cron", and we post-process to defend against models that ignore that.
+ *   - "Output ONLY the cron expression with no other text" suffix —
+ *     constrains chatter even on models that aren't instruction-tuned for
+ *     this shape.
+ *   - 4 worked examples covering minute-level + hourly + day-level + DOW
+ *     filter — empirically the minimum spread that gets mid-size models to
+ *     converge.
+ *   - UTC default — most schedule consumers run in UTC; we add a separate
+ *     `timezone` field if the NL input mentions one.
+ *
+ * Temperature / max_tokens: the spec wanted to set temperature=0.0 +
+ * max_tokens=64 in the dispatch options. The current `ModelStrategy.call`
+ * signature is `(prompt, { timeoutMs? })` — see `src/models/types.ts`. The
+ * provider-specific knobs (`temperature`, `max_tokens`) are not yet plumbed
+ * through. We document the intent in the prompt itself ("Output ONLY the
+ * cron expression") and structurally bound the result via the first-line
+ * trim + cron-validate. A follow-up task should extend `ModelStrategy.call`
+ * opts to forward these and the prompt-level guard becomes redundant.
+ *
+ * Prompt-injection defence (per spec risk callout):
+ *
+ *   - 256-char input cap rejected BEFORE we ever build the prompt.
+ *   - Substitution escapes `"` → `\"` and `\` → `\\` so a hostile NL input
+ *     can't break out of the quoted `"{{nl}}"` slot in the template.
+ *
+ * Imports from: node-cron, ../models/dispatcher.js, ../models/load_config.js,
+ *   ../models/types.js.
+ * Imported by: src/cli.ts (`schedule add` handler) + tests.
+ */
+export declare const MAX_NL_INPUT_LEN = 256;
+export interface NlScheduleResult {
+    cron: string;
+    timezone?: string;
+    nl_input: string;
+    confidence: 'high' | 'medium' | 'low';
+}
+export declare class InvalidScheduleInputError extends Error {
+    constructor(message: string);
+}
+export declare class InvalidCronError extends Error {
+    constructor(message: string);
+}
+export declare const PROMPT_TEMPLATE = "Convert the natural-language schedule into a 5-field POSIX cron expression.\nInput: \"{{nl}}\"\nOutput ONLY the cron expression with no other text. Use UTC unless input specifies a timezone.\nExamples:\n- \"every Monday morning around 9\" -> \"0 9 * * 1\"\n- \"every 5 minutes\" -> \"*/5 * * * *\"\n- \"daily at noon\" -> \"0 12 * * *\"\n- \"every weekday at 6pm\" -> \"0 18 * * 1-5\"";
+/**
+ * Escape backslash + double-quote in NL input before substitution. Order
+ * matters: replace `\` first so the `\"` we emit doesn't get double-escaped.
+ */
+export declare function safeSubstitute(template: string, nl: string): string;
+/**
+ * Detect a timezone token in the ORIGINAL NL input (not in the model output —
+ * the model is instructed to emit cron only). IANA `Region/City` form wins;
+ * abbreviations map via `TZ_TOKEN_MAP`. Returns `undefined` if nothing
+ * matches, in which case the caller defaults to UTC implicitly.
+ */
+export declare function detectTimezone(input: string): string | undefined;
+/**
+ * 5-field POSIX cron validator. Defends against 6-field (seconds-first)
+ * shapes by stripping the leading field IF the trailing 5 fields validate,
+ * else returning `null`.
+ */
+export declare function normalizeCronOutput(raw: string): string | null;
+export interface NlToCronOptions {
+    /** Override the alias the dispatcher resolves. Defaults to `fast_classifier`. */
+    alias?: string;
+    /** Per-call dispatch timeout. Defaults to 10 s — model output is < 64 tokens. */
+    timeoutMs?: number;
+}
+export declare function nlToCron(input: string, options?: NlToCronOptions): Promise<NlScheduleResult>;
+//# sourceMappingURL=schedule_nl.d.ts.map

package/dist/setup/schedule_nl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule_nl.d.ts","sourceRoot":"","sources":["../../src/setup/schedule_nl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAOH,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAgCpC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACvC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAKD,eAAO,MAAM,eAAe,qYAOe,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAGnE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUhE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc9D;AAED,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAwC3B"}

package/dist/setup/schedule_nl.js

@@ -0,0 +1,183 @@
+/**
+ * Natural-language → cron expression translator. (`SCHED.3`)
+ *
+ * Pipeline: bounded NL input → escape into prompt template → dispatch through
+ * the user's `fast_classifier` alias → first-line trim → 6-field-strip →
+ * `node-cron.validate()` → return `{ cron, timezone?, nl_input, confidence }`.
+ *
+ * Model-neutrality contract (per `feedback_stop_haiku_drift` +
+ * `project_opensquid_model_neutral_subagent_primitive`):
+ *
+ *   - NO vendor model id, no provider name, no host binary name appears in
+ *     this file. The user's `models.yaml` maps the abstract alias name
+ *     (default `fast_classifier`) to a concrete strategy.
+ *   - Audit grep `haiku|sonnet|opus|gpt-[0-9]|claude-[0-9]|gemini` against
+ *     this file must return zero hits.
+ *
+ * Prompt-engineering shape (locked per task spec):
+ *
+ *   - 5-field POSIX output ONLY. The prompt explicitly names "5-field POSIX
+ *     cron", and we post-process to defend against models that ignore that.
+ *   - "Output ONLY the cron expression with no other text" suffix —
+ *     constrains chatter even on models that aren't instruction-tuned for
+ *     this shape.
+ *   - 4 worked examples covering minute-level + hourly + day-level + DOW
+ *     filter — empirically the minimum spread that gets mid-size models to
+ *     converge.
+ *   - UTC default — most schedule consumers run in UTC; we add a separate
+ *     `timezone` field if the NL input mentions one.
+ *
+ * Temperature / max_tokens: the spec wanted to set temperature=0.0 +
+ * max_tokens=64 in the dispatch options. The current `ModelStrategy.call`
+ * signature is `(prompt, { timeoutMs? })` — see `src/models/types.ts`. The
+ * provider-specific knobs (`temperature`, `max_tokens`) are not yet plumbed
+ * through. We document the intent in the prompt itself ("Output ONLY the
+ * cron expression") and structurally bound the result via the first-line
+ * trim + cron-validate. A follow-up task should extend `ModelStrategy.call`
+ * opts to forward these and the prompt-level guard becomes redundant.
+ *
+ * Prompt-injection defence (per spec risk callout):
+ *
+ *   - 256-char input cap rejected BEFORE we ever build the prompt.
+ *   - Substitution escapes `"` → `\"` and `\` → `\\` so a hostile NL input
+ *     can't break out of the quoted `"{{nl}}"` slot in the template.
+ *
+ * Imports from: node-cron, ../models/dispatcher.js, ../models/load_config.js,
+ *   ../models/types.js.
+ * Imported by: src/cli.ts (`schedule add` handler) + tests.
+ */
+import cron from 'node-cron';
+import { resolveStrategy } from '../models/dispatcher.js';
+import { loadModelsConfig } from '../models/load_config.js';
+export const MAX_NL_INPUT_LEN = 256;
+/**
+ * Common timezone tokens we'll surface as a separate field when present in
+ * the NL input. Conservative list — matching is case-insensitive, word-
+ * boundary anchored. IANA names (slash-form) win when both surface; if only
+ * an abbreviation appears we map it to the IANA equivalent. This is NOT a
+ * complete tz database — packs requiring obscure tz names should pass a tz
+ * field directly rather than rely on NL inference.
+ */
+const TZ_TOKEN_MAP = [
+    // IANA names — match these first so "America/New_York" doesn't get caught
+    // by the `\bEST\b` rule.
+    [/\b([A-Z][a-zA-Z_]+\/[A-Z][a-zA-Z_]+)\b/, ''], // sentinel — handled inline below
+    [/\bUTC\b/i, 'UTC'],
+    [/\bGMT\b/i, 'Etc/GMT'],
+    [/\bEST\b/i, 'America/New_York'],
+    [/\bEDT\b/i, 'America/New_York'],
+    [/\bPST\b/i, 'America/Los_Angeles'],
+    [/\bPDT\b/i, 'America/Los_Angeles'],
+    [/\bCST\b/i, 'America/Chicago'],
+    [/\bCDT\b/i, 'America/Chicago'],
+    [/\bMST\b/i, 'America/Denver'],
+    [/\bMDT\b/i, 'America/Denver'],
+    [/\bJST\b/i, 'Asia/Tokyo'],
+    [/\bKST\b/i, 'Asia/Seoul'],
+    [/\bIST\b/i, 'Asia/Kolkata'],
+    [/\bBST\b/i, 'Europe/London'],
+    [/\bCET\b/i, 'Europe/Paris'],
+    [/\bCEST\b/i, 'Europe/Paris'],
+];
+export class InvalidScheduleInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidScheduleInputError';
+    }
+}
+export class InvalidCronError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidCronError';
+    }
+}
+// Prompt template. `{{nl}}` is the single substitution slot, wrapped in
+// double quotes so a single escape pass (see `safeSubstitute`) is enough to
+// neutralise hostile input.
+export const PROMPT_TEMPLATE = `Convert the natural-language schedule into a 5-field POSIX cron expression.
+Input: "{{nl}}"
+Output ONLY the cron expression with no other text. Use UTC unless input specifies a timezone.
+Examples:
+- "every Monday morning around 9" -> "0 9 * * 1"
+- "every 5 minutes" -> "*/5 * * * *"
+- "daily at noon" -> "0 12 * * *"
+- "every weekday at 6pm" -> "0 18 * * 1-5"`;
+/**
+ * Escape backslash + double-quote in NL input before substitution. Order
+ * matters: replace `\` first so the `\"` we emit doesn't get double-escaped.
+ */
+export function safeSubstitute(template, nl) {
+    const escaped = nl.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+    return template.replace('{{nl}}', escaped);
+}
+/**
+ * Detect a timezone token in the ORIGINAL NL input (not in the model output —
+ * the model is instructed to emit cron only). IANA `Region/City` form wins;
+ * abbreviations map via `TZ_TOKEN_MAP`. Returns `undefined` if nothing
+ * matches, in which case the caller defaults to UTC implicitly.
+ */
+export function detectTimezone(input) {
+    // IANA slash-form first — direct return of the match.
+    const ianaMatch = /\b([A-Z][a-zA-Z_]+\/[A-Z][a-zA-Z_]+)\b/.exec(input);
+    if (ianaMatch)
+        return ianaMatch[1];
+    for (const [pattern, iana] of TZ_TOKEN_MAP) {
+        if (iana === '')
+            continue; // skip the IANA sentinel
+        if (pattern.test(input))
+            return iana;
+    }
+    return undefined;
+}
+/**
+ * 5-field POSIX cron validator. Defends against 6-field (seconds-first)
+ * shapes by stripping the leading field IF the trailing 5 fields validate,
+ * else returning `null`.
+ */
+export function normalizeCronOutput(raw) {
+    const firstLine = raw.trim().split('\n')[0]?.trim() ?? '';
+    if (firstLine === '')
+        return null;
+    const fields = firstLine.split(/\s+/);
+    if (fields.length === 5) {
+        return cron.validate(firstLine) ? firstLine : null;
+    }
+    if (fields.length === 6) {
+        // Seconds-first Quartz-style. Strip leading field, re-validate.
+        const fiveField = fields.slice(1).join(' ');
+        return cron.validate(fiveField) ? fiveField : null;
+    }
+    return null;
+}
+export async function nlToCron(input, options = {}) {
+    if (typeof input !== 'string' || input.trim() === '') {
+        throw new InvalidScheduleInputError('NL schedule input is empty');
+    }
+    if (input.length > MAX_NL_INPUT_LEN) {
+        throw new InvalidScheduleInputError(`NL schedule input exceeds ${String(MAX_NL_INPUT_LEN)}-char cap (got ${String(input.length)})`);
+    }
+    const alias = options.alias ?? 'fast_classifier';
+    const cfg = await loadModelsConfig();
+    const aliasCfg = cfg[alias];
+    if (!aliasCfg) {
+        throw new InvalidScheduleInputError(`Unknown model alias "${alias}" — declare it in models.yaml`);
+    }
+    const strategy = resolveStrategy(alias, aliasCfg);
+    const prompt = safeSubstitute(PROMPT_TEMPLATE, input);
+    const timeoutMs = options.timeoutMs ?? 10_000;
+    const raw = await strategy.call(prompt, { timeoutMs });
+    const cronExpr = normalizeCronOutput(raw);
+    if (cronExpr === null) {
+        throw new InvalidCronError(`Model output "${raw.trim().split('\n')[0] ?? ''}" is not a valid 5-field POSIX cron expression`);
+    }
+    const timezone = detectTimezone(input);
+    const result = {
+        cron: cronExpr,
+        nl_input: input,
+        confidence: 'high',
+    };
+    if (timezone !== undefined)
+        result.timezone = timezone;
+    return result;
+}
+//# sourceMappingURL=schedule_nl.js.map

package/dist/setup/schedule_nl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule_nl.js","sourceRoot":"","sources":["../../src/setup/schedule_nl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,YAAY,GAAgC;IAChD,0EAA0E;IAC1E,yBAAyB;IACzB,CAAC,wCAAwC,EAAE,EAAE,CAAC,EAAE,kCAAkC;IAClF,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,UAAU,EAAE,SAAS,CAAC;IACvB,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAChC,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAChC,CAAC,UAAU,EAAE,qBAAqB,CAAC;IACnC,CAAC,UAAU,EAAE,qBAAqB,CAAC;IACnC,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAC/B,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAC/B,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAC9B,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAC9B,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,UAAU,EAAE,cAAc,CAAC;IAC5B,CAAC,UAAU,EAAE,eAAe,CAAC;IAC7B,CAAC,UAAU,EAAE,cAAc,CAAC;IAC5B,CAAC,WAAW,EAAE,cAAc,CAAC;CAC9B,CAAC;AASF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,wEAAwE;AACxE,4EAA4E;AAC5E,4BAA4B;AAC5B,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;2CAOY,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,EAAU;IACzD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,sDAAsD;IACtD,MAAM,SAAS,GAAG,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAEnC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS,CAAC,yBAAyB;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAa,EACb,UAA2B,EAAE;IAE7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CACjC,6BAA6B,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,yBAAyB,CACjC,wBAAwB,KAAK,+BAA+B,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,gDAAgD,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,MAAM,GAAqB;QAC/B,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,MAAM;KACnB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/setup/wizard/codex-hooks-writer.d.ts

@@ -0,0 +1,67 @@
+/**
+ * T-CODEX-HOST-SHELL CHS.1 — pure projection of opensquid's hook entries
+ * into codex's `~/.codex/hooks.json` (the user layer).
+ *
+ * Codex 0.139's hook engine is deliberately Claude Code-compatible
+ * (`ClaudeHooksEngine`, codex-rs/hooks/src/registry.rs): same JSON shape,
+ * same stdin payload family, same permissionDecision outputs — so the shell
+ * is CONFIG, not adapter code. Two codex-specific disciplines live here:
+ *
+ *   1. NO SessionEnd entry EVER: codex has no SessionEnd event and its Stop
+ *      is TURN-scoped ("Stop run at turn scope", developers.openai.com/codex/
+ *      hooks) — wiring opensquid-hook-sessionend to Stop would clear the
+ *      coding-flow FSM every turn.
+ *   2. ABSOLUTE bin paths: Claude Code resolves PATH for bare names
+ *      (settings-writer writes them bare); codex hook spawns carry no PATH
+ *      guarantee, so `resolveHookBinDir()` is a hard deliverable here.
+ *
+ * Idempotency = the 0.5.378 ownership discipline: `isOpensquidHookEntry`
+ * (shared predicate) + per-entry surgery — re-runs replace ours, preserve
+ * foreign groups byte-intact, excise ours from mixed groups keeping foreign
+ * siblings.
+ *
+ * Imports from: node:fs, node:path, ./settings-writer.js.
+ * Imported by: src/setup/cli/codex_hooks.ts, src/setup/cli/doctor.ts.
+ */
+/** The five codex events we wire (NO SessionEnd — see header). */
+export declare const CODEX_EVENTS: readonly ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop", "SessionStart"];
+export type CodexEvent = (typeof CODEX_EVENTS)[number];
+/** One hook command entry — the markable shape (settings-writer's
+ *  HookCommandEntry family); `@opensquid: true` marks ours. */
+export interface CodexHookEntry {
+    type: 'command';
+    command: string;
+    timeout?: number;
+    statusMessage?: string;
+    '@opensquid'?: boolean;
+    [k: string]: unknown;
+}
+export interface CodexMatcherGroup {
+    matcher?: string;
+    hooks: CodexHookEntry[];
+    [k: string]: unknown;
+}
+export interface CodexHooksFile {
+    hooks?: Record<string, CodexMatcherGroup[]>;
+    [k: string]: unknown;
+}
+/** The 0.5.378 per-entry surgery: wholly-ours group → drop; wholly-foreign →
+ *  untouched; mixed → excise ours, keep foreign siblings. */
+export declare function pruneOpensquidFromGroup(group: CodexMatcherGroup): CodexMatcherGroup | null;
+/** The dir holding the opensquid-hook-* shims: npm/pnpm install every bin of
+ *  this package into ONE dir, and process.argv[1] is the running `opensquid`
+ *  shim — its dirname is that dir. Throws (fail-loud; the wizard step turns
+ *  it into a cancel) when the sibling shim is missing — bare names are NOT
+ *  an acceptable fallback for codex (no PATH guarantee at hook spawn). */
+export declare function resolveHookBinDir(): string;
+export interface ProjectCodexHooksResult {
+    next: CodexHooksFile;
+    added: number;
+    replaced: number;
+    preserved: number;
+}
+export declare function projectCodexHooks(input: {
+    current: CodexHooksFile;
+    binDir: string;
+}): ProjectCodexHooksResult;
+//# sourceMappingURL=codex-hooks-writer.d.ts.map

package/dist/setup/wizard/codex-hooks-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hooks-writer.d.ts","sourceRoot":"","sources":["../../../src/setup/wizard/codex-hooks-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,kEAAkE;AAClE,eAAO,MAAM,YAAY,oFAMf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAUvD;+DAC+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AACD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AACD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;6DAC6D;AAC7D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,IAAI,CAK1F;AAED;;;;0EAI0E;AAC1E,wBAAgB,iBAAiB,IAAI,MAAM,CAQ1C;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,uBAAuB,CAsC1B"}