opensquid 0.5.395

package/dist/functions/check_chat_connection.d.ts

@@ -0,0 +1,49 @@
+/**
+ * `check_chat_connection` primitive (T-HANDOFF-HARDENING HH6.2; re-keyed to
+ * UMBRELLA in T-CHAT-AS-TERMINAL CAT.1c).
+ *
+ * The first consumer of the SessionStart hook mechanism (HH6.1). On a
+ * `session_start` event it reports the session's chat-connection state as a
+ * `RuleResult.inject_context` payload (the SessionStart hook bin surfaces it
+ * via `hookSpecificOutput.additionalContext`):
+ *
+ *   - the cwd resolves to an umbrella with a telegram binding (+ bot token) →
+ *     report the topic + whether a `chat watch` live-session lease is held;
+ *   - else another configured platform (slack/discord) → report that;
+ *   - else → nudge to run `opensquid setup` (or set the opt-out).
+ *
+ * CAT.1c collapsed the legacy per-project drift check: the umbrella is now
+ * STRUCTURAL (one row in `channels.json` owns every member cwd + the single
+ * `(chat_id, topic_id)`), so routing drift between members is impossible by
+ * construction — `detectUmbrellaDrift` is DELETED. Routing is read from the
+ * single authoritative `channels.json` via `loadChannelsConfig`, never from
+ * per-project `chat-routing.json` (which CAT.1d retires).
+ *
+ * REPORT-ONLY, per [[project_opensquid_no_agent_loop]]: this primitive reads
+ * state and composes a message; it never starts `chat watch`, spawns a daemon,
+ * or repairs routing. The agent reads the surfaced report and acts.
+ *
+ * Opt-out (HH6.2 L7): `chat.session_start_check: "off"` in
+ * `~/.opensquid/config.json` → returns `ok(null)` (no injection).
+ *
+ * v1 deliberately does NOT make a live Telegram `getChat` reachability call:
+ * a network hang must never delay session start, so "configured" is read from
+ * routing + token presence (fail-fast, config-only).
+ *
+ * Fail-quiet: every fs read is ENOENT-tolerant and any unexpected error
+ * returns `ok(null)` — a connection check must never break session start.
+ * `channels.json` may not exist yet (synthesized at the CAT.1d cutover); an
+ * absent config / unresolved umbrella degrades to the "no chat wired" nudge.
+ *
+ * Special evaluator integration (same as `recall_pre_inject`): returning
+ * `{ kind: 'inject_context', content }` makes the evaluator treat it as a
+ * TERMINAL RuleResult; `null` is the empty/no-verdict branch.
+ *
+ * Imports from: zod, node:fs/promises, node:path, ../channels/routing.js,
+ *   ../runtime/result.js, ../runtime/paths.js,
+ *   ../runtime/chat/live_session_lease.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import type { FunctionRegistry } from './registry.js';
+export declare function registerCheckChatConnectionFunction(registry: FunctionRegistry): void;
+//# sourceMappingURL=check_chat_connection.d.ts.map

package/dist/functions/check_chat_connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check_chat_connection.d.ts","sourceRoot":"","sources":["../../src/functions/check_chat_connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAYH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAwBtD,wBAAgB,mCAAmC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAsEpF"}

package/dist/functions/check_chat_connection.js

@@ -0,0 +1,124 @@
+/**
+ * `check_chat_connection` primitive (T-HANDOFF-HARDENING HH6.2; re-keyed to
+ * UMBRELLA in T-CHAT-AS-TERMINAL CAT.1c).
+ *
+ * The first consumer of the SessionStart hook mechanism (HH6.1). On a
+ * `session_start` event it reports the session's chat-connection state as a
+ * `RuleResult.inject_context` payload (the SessionStart hook bin surfaces it
+ * via `hookSpecificOutput.additionalContext`):
+ *
+ *   - the cwd resolves to an umbrella with a telegram binding (+ bot token) →
+ *     report the topic + whether a `chat watch` live-session lease is held;
+ *   - else another configured platform (slack/discord) → report that;
+ *   - else → nudge to run `opensquid setup` (or set the opt-out).
+ *
+ * CAT.1c collapsed the legacy per-project drift check: the umbrella is now
+ * STRUCTURAL (one row in `channels.json` owns every member cwd + the single
+ * `(chat_id, topic_id)`), so routing drift between members is impossible by
+ * construction — `detectUmbrellaDrift` is DELETED. Routing is read from the
+ * single authoritative `channels.json` via `loadChannelsConfig`, never from
+ * per-project `chat-routing.json` (which CAT.1d retires).
+ *
+ * REPORT-ONLY, per [[project_opensquid_no_agent_loop]]: this primitive reads
+ * state and composes a message; it never starts `chat watch`, spawns a daemon,
+ * or repairs routing. The agent reads the surfaced report and acts.
+ *
+ * Opt-out (HH6.2 L7): `chat.session_start_check: "off"` in
+ * `~/.opensquid/config.json` → returns `ok(null)` (no injection).
+ *
+ * v1 deliberately does NOT make a live Telegram `getChat` reachability call:
+ * a network hang must never delay session start, so "configured" is read from
+ * routing + token presence (fail-fast, config-only).
+ *
+ * Fail-quiet: every fs read is ENOENT-tolerant and any unexpected error
+ * returns `ok(null)` — a connection check must never break session start.
+ * `channels.json` may not exist yet (synthesized at the CAT.1d cutover); an
+ * absent config / unresolved umbrella degrades to the "no chat wired" nudge.
+ *
+ * Special evaluator integration (same as `recall_pre_inject`): returning
+ * `{ kind: 'inject_context', content }` makes the evaluator treat it as a
+ * TERMINAL RuleResult; `null` is the empty/no-verdict branch.
+ *
+ * Imports from: zod, node:fs/promises, node:path, ../channels/routing.js,
+ *   ../runtime/result.js, ../runtime/paths.js,
+ *   ../runtime/chat/live_session_lease.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { loadChannelsConfig, resolveOutbound, resolveUmbrellaForCwd } from '../channels/routing.js';
+import { isLeaseFresh, readLease } from '../runtime/chat/live_session_lease.js';
+import { OPENSQUID_HOME, umbrellaLiveSessionLease } from '../runtime/paths.js';
+import { ok } from '../runtime/result.js';
+// `cwd` is an optional override (tests inject it); production reads it from
+// the session_start event payload via ctx.
+const CheckChatConnectionArgs = z.object({ cwd: z.string().optional() }).strict();
+/** ENOENT/parse-tolerant JSON read — absent or malformed ⇒ null. */
+async function readJsonFile(path) {
+    try {
+        return JSON.parse(await readFile(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function registerCheckChatConnectionFunction(registry) {
+    registry.register({
+        name: 'check_chat_connection',
+        argSchema: CheckChatConnectionArgs,
+        durable: false,
+        memoizable: false,
+        costEstimateMs: 30,
+        execute: async (args, ctx) => {
+            try {
+                const config = (await readJsonFile(join(OPENSQUID_HOME(), 'config.json'))) ?? {};
+                // L7 opt-out — explicit field only; declined ≠ never-set-up.
+                if (config.chat?.session_start_check === 'off')
+                    return ok(null);
+                const cwd = args.cwd ??
+                    (ctx.event.kind === 'session_start' ? ctx.event.cwd : undefined) ??
+                    process.cwd();
+                // CAT.1c: resolve the session's umbrella from channels.json (the single
+                // authoritative routing source). Absent config / unresolved cwd → no
+                // umbrella; degrades to the "no chat wired" nudge below.
+                const channels = await loadChannelsConfig();
+                const umbrellaId = channels === null ? null : resolveUmbrellaForCwd(channels, cwd);
+                const parts = [];
+                const tokenPresent = typeof config.chat_connections?.telegram?.bot_token === 'string' &&
+                    config.chat_connections.telegram.bot_token.length > 0;
+                if (umbrellaId !== null && channels !== null) {
+                    const tg = resolveOutbound(channels, umbrellaId);
+                    if (tg !== null && tokenPresent) {
+                        const held = isLeaseFresh(await readLease(umbrellaLiveSessionLease(umbrellaId)));
+                        const topic = tg.topic_id !== undefined ? ` topic ${String(tg.topic_id)}` : '';
+                        parts.push(held
+                            ? `✅ Chat: telegram${topic} configured (umbrella ${umbrellaId}); \`chat watch\` lease held (this session receives inbound).`
+                            : `🔌 Chat: telegram${topic} configured (umbrella ${umbrellaId}), but \`chat watch\` is NOT running — start it (Monitor: \`opensquid chat watch\`) so inbound reaches this session.`);
+                    }
+                    else if (config.chat_connections?.slack !== undefined ||
+                        config.chat_connections?.discord !== undefined) {
+                        parts.push(`🔌 Chat: a non-telegram platform is configured but telegram isn't wired for ` +
+                            `umbrella ${umbrellaId}. Run \`opensquid setup\` to wire it.`);
+                    }
+                    else {
+                        parts.push(`🔌 No chat connection wired for umbrella ${umbrellaId}. Run \`opensquid setup\` to ` +
+                            `connect Telegram/Slack/Discord, or set \`chat.session_start_check: "off"\` in ` +
+                            `~/.opensquid/config.json to silence this.`);
+                    }
+                }
+                else {
+                    parts.push(`🔌 No chat connection wired (umbrella not resolved for this cwd). Run ` +
+                        `\`opensquid setup\`, or set \`chat.session_start_check: "off"\` to silence.`);
+                }
+                const content = parts.join('\n');
+                return ok(content.length > 0 ? { kind: 'inject_context', content } : null);
+            }
+            catch {
+                // Fail-quiet: a connection check must never break session start.
+                return ok(null);
+            }
+        },
+    });
+}
+//# sourceMappingURL=check_chat_connection.js.map

package/dist/functions/check_chat_connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check_chat_connection.js","sourceRoot":"","sources":["../../src/functions/check_chat_connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAI1C,4EAA4E;AAC5E,2CAA2C;AAC3C,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAWlF,oEAAoE;AACpE,KAAK,UAAU,YAAY,CAAI,IAAY;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,QAA0B;IAC5E,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,uBAAuB;QAC7B,SAAS,EAAE,uBAAuB;QAClC,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,EAAE;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GACV,CAAC,MAAM,YAAY,CAAkB,IAAI,CAAC,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrF,6DAA6D;gBAC7D,IAAI,MAAM,CAAC,IAAI,EAAE,mBAAmB,KAAK,KAAK;oBAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;gBAEhE,MAAM,GAAG,GACP,IAAI,CAAC,GAAG;oBACR,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBAChE,OAAO,CAAC,GAAG,EAAE,CAAC;gBAEhB,wEAAwE;gBACxE,qEAAqE;gBACrE,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAEnF,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,SAAS,KAAK,QAAQ;oBAChE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;gBAExD,IAAI,UAAU,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC7C,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;oBACjD,IAAI,EAAE,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;wBAChC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,SAAS,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;wBACjF,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/E,KAAK,CAAC,IAAI,CACR,IAAI;4BACF,CAAC,CAAC,mBAAmB,KAAK,yBAAyB,UAAU,+DAA+D;4BAC5H,CAAC,CAAC,oBAAoB,KAAK,yBAAyB,UAAU,sHAAsH,CACvL,CAAC;oBACJ,CAAC;yBAAM,IACL,MAAM,CAAC,gBAAgB,EAAE,KAAK,KAAK,SAAS;wBAC5C,MAAM,CAAC,gBAAgB,EAAE,OAAO,KAAK,SAAS,EAC9C,CAAC;wBACD,KAAK,CAAC,IAAI,CACR,8EAA8E;4BAC5E,YAAY,UAAU,uCAAuC,CAChE,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CACR,4CAA4C,UAAU,+BAA+B;4BACnF,gFAAgF;4BAChF,2CAA2C,CAC9C,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CACR,wEAAwE;wBACtE,6EAA6E,CAChF,CAAC;gBACJ,CAAC;gBAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/functions/check_flow_health.d.ts

@@ -0,0 +1,43 @@
+/**
+ * check_flow_health (T-FLOW-UNSKIPPABLE FU.3 / D3) — SessionStart health assurance.
+ *
+ * The flow-enforcement gates only fire when (a) the opensquid hooks are actually
+ * wired in `~/.claude/settings.json` and (b) a gate pack (one with an FSM, e.g.
+ * `coding-flow`) is active for this umbrella. A session that started before the
+ * hooks were installed, or in an umbrella with no gate pack, runs FULLY UN-GATED
+ * with no signal — the F3 failure mode (a session predating the install calls NONE
+ * of the hooks). This primitive, dispatched on `session_start`, READS that state
+ * and returns a LOUD `inject_context` directive when enforcement is not active, so
+ * the agent + user see it instead of silently drifting.
+ *
+ * REPORT-ONLY by necessity (sanctioned, unlike the old no_agent_loop posture): a
+ * SessionStart hook cannot retro-fit a session that never loaded it, and Claude
+ * Code reads hook config only at session start — so the only honest remedy is to
+ * INFORM and let the user restart after `opensquid setup`. Fail-open: any read
+ * error degrades to "no injection" (a health check must never block a session).
+ *
+ * Imports from: node:fs/promises, node:os, node:path, zod, ../runtime/result.js,
+ *   ../runtime/bootstrap.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import type { FunctionDef } from './registry.js';
+declare const NoArgs: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+interface CheckFlowHealthResult {
+    kind: 'inject_context';
+    content: string;
+}
+/**
+ * The flow-enforcement problem set for a session: empty ⇒ gates are active.
+ * Extracted (T-SESSION-STATUS-MANIFEST) so the consolidated session-start
+ * manifest can report the same flow status without duplicating the detection.
+ * Never throws — each probe degrades to a descriptive problem string.
+ */
+export declare function flowEnforcementProblems(sessionId: string): Promise<string[]>;
+/**
+ * Returns a LOUD inject_context directive when flow enforcement is NOT active for
+ * this session, else null (silent when healthy). Never throws.
+ */
+export declare const CheckFlowHealth: FunctionDef<z.input<typeof NoArgs>, CheckFlowHealthResult | null>;
+export {};
+//# sourceMappingURL=check_flow_health.d.ts.map

package/dist/functions/check_flow_health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check_flow_health.d.ts","sourceRoot":"","sources":["../../src/functions/check_flow_health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,QAAA,MAAM,MAAM,iDAAwB,CAAC;AAKrC,UAAU,qBAAqB;IAC7B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0ClF;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAkB7F,CAAC"}

package/dist/functions/check_flow_health.js

@@ -0,0 +1,93 @@
+/**
+ * check_flow_health (T-FLOW-UNSKIPPABLE FU.3 / D3) — SessionStart health assurance.
+ *
+ * The flow-enforcement gates only fire when (a) the opensquid hooks are actually
+ * wired in `~/.claude/settings.json` and (b) a gate pack (one with an FSM, e.g.
+ * `coding-flow`) is active for this umbrella. A session that started before the
+ * hooks were installed, or in an umbrella with no gate pack, runs FULLY UN-GATED
+ * with no signal — the F3 failure mode (a session predating the install calls NONE
+ * of the hooks). This primitive, dispatched on `session_start`, READS that state
+ * and returns a LOUD `inject_context` directive when enforcement is not active, so
+ * the agent + user see it instead of silently drifting.
+ *
+ * REPORT-ONLY by necessity (sanctioned, unlike the old no_agent_loop posture): a
+ * SessionStart hook cannot retro-fit a session that never loaded it, and Claude
+ * Code reads hook config only at session start — so the only honest remedy is to
+ * INFORM and let the user restart after `opensquid setup`. Fail-open: any read
+ * error degrades to "no injection" (a health check must never block a session).
+ *
+ * Imports from: node:fs/promises, node:os, node:path, zod, ../runtime/result.js,
+ *   ../runtime/bootstrap.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { loadActivePacks } from '../runtime/bootstrap.js';
+import { ok } from '../runtime/result.js';
+import { isOpensquidHookEntry } from '../setup/wizard/settings-writer.js';
+const NoArgs = z.object({}).strict();
+/** The hook events opensquid wires; each must reference an `opensquid-hook-*` command. */
+const REQUIRED_HOOK_EVENTS = ['PreToolUse', 'UserPromptSubmit', 'Stop', 'SessionStart'];
+/**
+ * The flow-enforcement problem set for a session: empty ⇒ gates are active.
+ * Extracted (T-SESSION-STATUS-MANIFEST) so the consolidated session-start
+ * manifest can report the same flow status without duplicating the detection.
+ * Never throws — each probe degrades to a descriptive problem string.
+ */
+export async function flowEnforcementProblems(sessionId) {
+    const problems = [];
+    // (a) opensquid hooks wired in settings.json — the F3 case. Honour
+    // CLAUDE_CONFIG_DIR (Claude Code's config-dir override) so the path is
+    // correct for non-default installs AND testable.
+    try {
+        const configDir = process.env.CLAUDE_CONFIG_DIR ?? join(homedir(), '.claude');
+        const raw = await readFile(join(configDir, 'settings.json'), 'utf8');
+        const settings = JSON.parse(raw);
+        const hooks = settings.hooks ?? {};
+        // T-FIX-WIZARD-HOOK-RECOGNITION: presence decided by the SHARED ownership
+        // predicate (was a substring scan of the serialized groups — missed legacy
+        // shapes and matched lookalikes).
+        const missing = REQUIRED_HOOK_EVENTS.filter((ev) => !(hooks[ev] ?? []).some((group) => (group.hooks ?? []).some((h) => isOpensquidHookEntry(h))));
+        if (missing.length > 0) {
+            problems.push(`opensquid hooks are NOT wired in ~/.claude/settings.json for: ${missing.join(', ')}`);
+        }
+    }
+    catch {
+        problems.push('could not read ~/.claude/settings.json to verify the opensquid hooks');
+    }
+    // (b) a gate pack (one with an FSM) is active for this umbrella.
+    try {
+        const packs = await loadActivePacks(sessionId);
+        if (!packs.some((p) => p.fsm !== undefined)) {
+            problems.push('no flow-gate pack (e.g. `coding-flow`) is active for this umbrella');
+        }
+    }
+    catch {
+        problems.push('could not resolve the active packs for this umbrella');
+    }
+    return problems;
+}
+/**
+ * Returns a LOUD inject_context directive when flow enforcement is NOT active for
+ * this session, else null (silent when healthy). Never throws.
+ */
+export const CheckFlowHealth = {
+    name: 'check_flow_health',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 4,
+    execute: async (_args, ctx) => {
+        const problems = await flowEnforcementProblems(ctx.sessionId);
+        if (problems.length === 0)
+            return ok(null); // healthy → silent
+        const content = '⛔ FLOW ENFORCEMENT IS NOT ACTIVE — ' +
+            problems.join('; ') +
+            '. The SCOPE→AUTHOR→7-phase gates will NOT run this session, so work can be committed un-gated. ' +
+            'Run `opensquid setup` and then RESTART this session (Claude Code wires hooks only at session start — a running session cannot self-heal).';
+        return ok({ kind: 'inject_context', content });
+    },
+};
+//# sourceMappingURL=check_flow_health.js.map

package/dist/functions/check_flow_health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check_flow_health.js","sourceRoot":"","sources":["../../src/functions/check_flow_health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAI1E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAErC,0FAA0F;AAC1F,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,CAAU,CAAC;AAOjG;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,SAAiB;IAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,mEAAmE;IACnE,uEAAuE;IACvE,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAE9B,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,0EAA0E;QAC1E,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CACzC,CAAC,EAAE,EAAE,EAAE,CACL,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAChC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CACzD,CACJ,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CACX,iEAAiE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACxF,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsE;IAChG,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB;QAE/D,MAAM,OAAO,GACX,qCAAqC;YACrC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YACnB,iGAAiG;YACjG,2IAA2I,CAAC;QAC9I,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF,CAAC"}

package/dist/functions/destination_check.d.ts

@@ -0,0 +1,49 @@
+/**
+ * `check_destination` primitive — LLM-judged goal-alignment check.
+ *
+ * The second anti-drift category (per `docs/opensquid-real-design.md`
+ * §"Anti-drift split"): a periodic check that compares the agent's recent
+ * actions to the pack's declared goal and surfaces a `block` verdict when
+ * the agent has drifted off-mission. Distinct from track_check (which is
+ * deterministic regex / state matching) — this one delegates the judgement
+ * to a classifier LLM via the model-aliased subprocess primitive.
+ *
+ * Model neutrality (per the "stop drifting on model names" feedback memory
+ * + the model-neutral subagent-primitive memory): this file names NO
+ * vendor model. The default alias is `'reasoning'` — a task-purpose label
+ * that the user maps to a concrete backend in `models.yaml`. A vendor-name
+ * grep over this file should return zero hits; treat any future addition
+ * as a regression.
+ *
+ * Failure semantics:
+ *
+ *   - `llm_classify` clamps every classifier error to `'UNCERTAIN'` (see
+ *     `src/functions/llm.ts` header). The one exception is `arg_invalid`
+ *     for an unknown alias — that's a config error and surfaces as an `err`
+ *     here so the user fixes their `models.yaml`.
+ *
+ *   - Label policy:
+ *       'DRIFTING'          → block verdict, message names the goal
+ *       'ON_GOAL'           → pass verdict, empty message
+ *       'UNCERTAIN' / other → pass verdict (conservative — never block on
+ *                             classifier confusion; auditors track the
+ *                             'UNCERTAIN' rate as a misconfiguration signal)
+ *
+ * This is registered via `registerDestinationCheckFunction(registry)` and
+ * not auto-bundled into `registerLlmFunctions` because (a) it's a composite
+ * primitive (it calls `llm_classify` underneath) and (b) callers may want
+ * to wire it conditionally once Phase 4.3 ships the scheduler.
+ *
+ * Phase 4.2 imports it into `runtime/bootstrap.ts` so the standard runtime
+ * registry includes `check_destination` alongside the other primitives.
+ *
+ * Imports from: zod, ../runtime/result.js, ./registry.js.
+ * Imported by: src/functions/index.ts, src/runtime/bootstrap.ts.
+ */
+import type { FunctionRegistry } from './registry.js';
+export interface CheckDestinationResult {
+    level: 'pass' | 'block';
+    message: string;
+}
+export declare function registerDestinationCheckFunction(registry: FunctionRegistry): void;
+//# sourceMappingURL=destination_check.d.ts.map

package/dist/functions/destination_check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination_check.d.ts","sourceRoot":"","sources":["../../src/functions/destination_check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAiCtD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AA4BD,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAqDjF"}

package/dist/functions/destination_check.js

@@ -0,0 +1,136 @@
+/**
+ * `check_destination` primitive — LLM-judged goal-alignment check.
+ *
+ * The second anti-drift category (per `docs/opensquid-real-design.md`
+ * §"Anti-drift split"): a periodic check that compares the agent's recent
+ * actions to the pack's declared goal and surfaces a `block` verdict when
+ * the agent has drifted off-mission. Distinct from track_check (which is
+ * deterministic regex / state matching) — this one delegates the judgement
+ * to a classifier LLM via the model-aliased subprocess primitive.
+ *
+ * Model neutrality (per the "stop drifting on model names" feedback memory
+ * + the model-neutral subagent-primitive memory): this file names NO
+ * vendor model. The default alias is `'reasoning'` — a task-purpose label
+ * that the user maps to a concrete backend in `models.yaml`. A vendor-name
+ * grep over this file should return zero hits; treat any future addition
+ * as a regression.
+ *
+ * Failure semantics:
+ *
+ *   - `llm_classify` clamps every classifier error to `'UNCERTAIN'` (see
+ *     `src/functions/llm.ts` header). The one exception is `arg_invalid`
+ *     for an unknown alias — that's a config error and surfaces as an `err`
+ *     here so the user fixes their `models.yaml`.
+ *
+ *   - Label policy:
+ *       'DRIFTING'          → block verdict, message names the goal
+ *       'ON_GOAL'           → pass verdict, empty message
+ *       'UNCERTAIN' / other → pass verdict (conservative — never block on
+ *                             classifier confusion; auditors track the
+ *                             'UNCERTAIN' rate as a misconfiguration signal)
+ *
+ * This is registered via `registerDestinationCheckFunction(registry)` and
+ * not auto-bundled into `registerLlmFunctions` because (a) it's a composite
+ * primitive (it calls `llm_classify` underneath) and (b) callers may want
+ * to wire it conditionally once Phase 4.3 ships the scheduler.
+ *
+ * Phase 4.2 imports it into `runtime/bootstrap.ts` so the standard runtime
+ * registry includes `check_destination` alongside the other primitives.
+ *
+ * Imports from: zod, ../runtime/result.js, ./registry.js.
+ * Imported by: src/functions/index.ts, src/runtime/bootstrap.ts.
+ */
+import { z } from 'zod';
+import { err, ok } from '../runtime/result.js';
+// ---------------------------------------------------------------------------
+// CheckDestinationArgs — Zod schema for `check_destination` args.
+//
+// `goal`           — pack goal string, propagated into the prompt + verdict
+//                    message. Required `min(1)` so a pack with no goal at
+//                    all surfaces as arg_invalid rather than silently
+//                    generating a useless prompt ("Pack goal: \nRecent...").
+// `recent_actions` — list of tool-call summaries from the active session.
+//                    An empty array is valid (first-tick edge case): the
+//                    prompt still goes to the classifier, which can
+//                    reasonably return UNCERTAIN.
+// `model`          — model alias. Defaults to 'reasoning' (task-purpose
+//                    label, not a vendor model id — see file header). Pack
+//                    YAML can override per-rule (e.g. fast_classifier for
+//                    rough triage, reasoning for the careful check).
+// ---------------------------------------------------------------------------
+const CheckDestinationArgs = z.object({
+    goal: z.string().min(1),
+    recent_actions: z.array(z.string()),
+    model: z.string().min(1).default('reasoning'),
+});
+// ---------------------------------------------------------------------------
+// ALLOWED_LABELS — the three responses the classifier must pick from.
+//
+// Constant (not a parameter) because the primitive's policy mapping
+// (DRIFTING → block, ON_GOAL/UNCERTAIN → pass) is hard-coded below. Adding
+// a fourth label requires updating that mapping in lockstep, so the labels
+// stay private to this primitive rather than being pack-author-tunable.
+// ---------------------------------------------------------------------------
+const ALLOWED_LABELS = ['ON_GOAL', 'DRIFTING', 'UNCERTAIN'];
+// ---------------------------------------------------------------------------
+// registerDestinationCheckFunction — register `check_destination` against a
+// registry that ALREADY has `llm_classify` registered (the LLM primitive
+// family is bundled into the runtime via `registerLlmFunctions` upstream).
+//
+// `registry.call('llm_classify', ...)` is dispatched in-process — no IPC,
+// no subprocess from this primitive's perspective. The downstream
+// `llm_classify` primitive then dispatches through the model strategy.
+//
+// If `llm_classify` is not registered (degenerate runtime), `registry.call`
+// returns `err({ kind: 'not_found' })` which propagates back to the caller.
+// This is intentional: it means a misconfigured pack can't silently bypass
+// the classifier.
+// ---------------------------------------------------------------------------
+export function registerDestinationCheckFunction(registry) {
+    // DURABLE.2 — composes `llm_classify` under the hood; same expense profile.
+    // `durable: true` so resume restores the verdict instead of re-paying the
+    // classifier call. `memoizable: true` because the prompt is constructed
+    // deterministically from `(goal, recent_actions, model)` and the
+    // `ALLOWED_LABELS` set is closed — identical inputs give identical labels
+    // within the classifier's temperature, matching `llm_classify`'s memo
+    // policy.
+    registry.register({
+        name: 'check_destination',
+        argSchema: CheckDestinationArgs,
+        durable: true,
+        memoizable: true,
+        costEstimateMs: 5000,
+        execute: async ({ goal, recent_actions, model }, ctx) => {
+            // Prompt construction — kept simple + deterministic. Pack authors who
+            // need a richer prompt should compose their own process via direct
+            // `llm_classify` calls. The point of `check_destination` is the
+            // pre-packaged label policy, not a templating engine.
+            const actionLines = recent_actions.length === 0
+                ? ['(no actions recorded yet)']
+                : recent_actions.map((a, i) => `${String(i + 1)}. ${a}`);
+            const prompt = [
+                `Pack goal: ${goal}`,
+                `Recent actions:`,
+                ...actionLines,
+                ``,
+                `Has the agent drifted from the goal? Answer ON_GOAL or DRIFTING.`,
+            ].join('\n');
+            const result = await registry.call('llm_classify', { model, prompt, allowed_labels: [...ALLOWED_LABELS] }, ctx);
+            if (!result.ok)
+                return err(result.error);
+            // `llm_classify` returns a string label (the matched allowed_label, or
+            // 'UNCERTAIN' on no-match / failure). String() narrows the registry's
+            // `unknown` value back to a string before equality — safer than `as`.
+            const label = String(result.value);
+            if (label === 'DRIFTING') {
+                return ok({
+                    level: 'block',
+                    message: `Drifted from goal: ${goal}`,
+                });
+            }
+            // ON_GOAL or UNCERTAIN (or any unexpected label) → pass.
+            return ok({ level: 'pass', message: '' });
+        },
+    });
+}
+//# sourceMappingURL=destination_check.js.map

package/dist/functions/destination_check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination_check.js","sourceRoot":"","sources":["../../src/functions/destination_check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAI/C,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,sEAAsE;AACtE,6EAA6E;AAC7E,0EAA0E;AAC1E,yEAAyE;AACzE,oEAAoE;AACpE,kDAAkD;AAClD,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC9C,CAAC,CAAC;AAeH,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,oEAAoE;AACpE,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAErE,8EAA8E;AAC9E,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,kEAAkE;AAClE,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,UAAU,gCAAgC,CAAC,QAA0B;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,iEAAiE;IACjE,0EAA0E;IAC1E,sEAAsE;IACtE,UAAU;IACV,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,oBAAoB;QAC/B,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE;YACtD,sEAAsE;YACtE,mEAAmE;YACnE,gEAAgE;YAChE,sDAAsD;YACtD,MAAM,WAAW,GACf,cAAc,CAAC,MAAM,KAAK,CAAC;gBACzB,CAAC,CAAC,CAAC,2BAA2B,CAAC;gBAC/B,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG;gBACb,cAAc,IAAI,EAAE;gBACpB,iBAAiB;gBACjB,GAAG,WAAW;gBACd,EAAE;gBACF,kEAAkE;aACnE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAChC,cAAc,EACd,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE,EACtD,GAAG,CACJ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEzC,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnC,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAyB;oBAChC,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,sBAAsB,IAAI,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;YACD,yDAAyD;YACzD,OAAO,EAAE,CAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/functions/effective_content.d.ts

@@ -0,0 +1,31 @@
+/**
+ * effective_content (T-FLOW-AUDIT-ARTIFACT) — the artifact content that WILL
+ * exist AFTER the pending Write/Edit/MultiEdit, so a content audit reviews the
+ * REAL resulting file regardless of tool shape.
+ *
+ * The flaw it fixes: the SCOPE/AUTHOR content audits read `{{targs.content}}`,
+ * which is populated ONLY for the Write tool. The Edit tool carries
+ * `old_string`/`new_string` (no `content`), so refining a doc via Edit — the
+ * normal authoring loop — fed the audit an EMPTY string. The audit then never
+ * returns GUESS_FREE/SPEC_COMPLETE and the FSM never advances; the flow becomes
+ * un-completable through iterative editing (verified 2026-06-06).
+ *
+ * Resolution: compute the post-change content here. Write → `content` verbatim.
+ * Edit → read the current file and apply `old_string`→`new_string`. MultiEdit →
+ * apply each edit in order. Any other tool / non-tool_call event → ''.
+ *
+ * PreToolUse timing: the hook fires BEFORE the write lands, so the on-disk file
+ * is the PRE-change version — exactly what we need to apply the pending edit to.
+ *
+ * Fail-soft: an unreadable file or malformed args → '' (the audit then sees
+ * empty and fails CLOSED — no false pass). Never throws.
+ *
+ * Imports from: node:fs/promises, zod, ../runtime/result.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import type { FunctionDef } from './registry.js';
+declare const EmptyArgs: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+export declare const EffectiveContent: FunctionDef<z.input<typeof EmptyArgs>, string>;
+export {};
+//# sourceMappingURL=effective_content.d.ts.map

package/dist/functions/effective_content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effective_content.d.ts","sourceRoot":"","sources":["../../src/functions/effective_content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,QAAA,MAAM,SAAS,iDAAwB,CAAC;AAQxC,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,EAAE,MAAM,CAkC3E,CAAC"}

package/dist/functions/effective_content.js

@@ -0,0 +1,74 @@
+/**
+ * effective_content (T-FLOW-AUDIT-ARTIFACT) — the artifact content that WILL
+ * exist AFTER the pending Write/Edit/MultiEdit, so a content audit reviews the
+ * REAL resulting file regardless of tool shape.
+ *
+ * The flaw it fixes: the SCOPE/AUTHOR content audits read `{{targs.content}}`,
+ * which is populated ONLY for the Write tool. The Edit tool carries
+ * `old_string`/`new_string` (no `content`), so refining a doc via Edit — the
+ * normal authoring loop — fed the audit an EMPTY string. The audit then never
+ * returns GUESS_FREE/SPEC_COMPLETE and the FSM never advances; the flow becomes
+ * un-completable through iterative editing (verified 2026-06-06).
+ *
+ * Resolution: compute the post-change content here. Write → `content` verbatim.
+ * Edit → read the current file and apply `old_string`→`new_string`. MultiEdit →
+ * apply each edit in order. Any other tool / non-tool_call event → ''.
+ *
+ * PreToolUse timing: the hook fires BEFORE the write lands, so the on-disk file
+ * is the PRE-change version — exactly what we need to apply the pending edit to.
+ *
+ * Fail-soft: an unreadable file or malformed args → '' (the audit then sees
+ * empty and fails CLOSED — no false pass). Never throws.
+ *
+ * Imports from: node:fs/promises, zod, ../runtime/result.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { readFile } from 'node:fs/promises';
+import { z } from 'zod';
+import { ok } from '../runtime/result.js';
+const EmptyArgs = z.object({}).strict();
+function applyReplace(haystack, oldS, newS) {
+    // Audit-grade reconstruction: replace ALL occurrences (split/join). The audit
+    // only needs to read the resulting prose, so first-vs-all is immaterial here.
+    return oldS === '' ? haystack : haystack.split(oldS).join(newS);
+}
+export const EffectiveContent = {
+    name: 'effective_content',
+    argSchema: EmptyArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 2,
+    execute: async (_args, ctx) => {
+        if (ctx.event.kind !== 'tool_call')
+            return ok('');
+        const tool = ctx.event.tool;
+        const a = ctx.event.args ?? {};
+        try {
+            if (tool === 'Write')
+                return ok(typeof a.content === 'string' ? a.content : '');
+            const filePath = typeof a.file_path === 'string' ? a.file_path : '';
+            if (filePath === '')
+                return ok('');
+            const current = await readFile(filePath, 'utf8').catch(() => '');
+            if (tool === 'Edit') {
+                const oldS = typeof a.old_string === 'string' ? a.old_string : '';
+                const newS = typeof a.new_string === 'string' ? a.new_string : '';
+                return ok(applyReplace(current, oldS, newS));
+            }
+            if (tool === 'MultiEdit' && Array.isArray(a.edits)) {
+                let content = current;
+                for (const e of a.edits) {
+                    const oldS = typeof e.old_string === 'string' ? e.old_string : '';
+                    const newS = typeof e.new_string === 'string' ? e.new_string : '';
+                    content = applyReplace(content, oldS, newS);
+                }
+                return ok(content);
+            }
+            return ok('');
+        }
+        catch {
+            return ok('');
+        }
+    },
+};
+//# sourceMappingURL=effective_content.js.map