opensquid 0.5.395

package/dist/functions/scope_dwell.d.ts

@@ -0,0 +1,33 @@
+/**
+ * scope_dwell_tick (T-FLOW-UNSKIPPABLE FU.2 / D2) — scope-sprawl escalation.
+ *
+ * Closes the last flow-gate gap: the SCOPE phase is otherwise ungated, so a
+ * sprawling, oscillating scope (many prompts of investigation, no pre-research
+ * converging) is invisible — the failure mode of this very session. On each
+ * `prompt_submit` while the coding-flow FSM is in `scoping`/`researching`, this
+ * increments a per-session dwell counter; once it reaches the threshold (3 — the
+ * same `depth.count >= 3` "one full research turn" bar the scope-advance uses)
+ * with the scope still un-converged, it returns `nudge: true` so the rule surfaces
+ * a "converge: write ONE pre-research now" directive. It RESETS the moment the FSM
+ * leaves the scope region (a pre-research write advances `scoping → researched`),
+ * so an honest converging scope sees the nudge at most once.
+ *
+ * SOFT by design: the rule emits a `directive` (surface), never a block — research
+ * legitimately needs multiple turns; this nudges convergence, it does not forbid
+ * investigation. Fail-open: any error → `{ nudge: false }` (a nudge must never
+ * break a prompt).
+ *
+ * Imports from: node:fs/promises, zod, ../runtime/result.js, ../runtime/paths.js,
+ *   ../runtime/fsm_state.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import type { FunctionDef } from './registry.js';
+declare const NoArgs: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+interface DwellResult {
+    nudge: boolean;
+    count: number;
+}
+export declare const ScopeDwellTick: FunctionDef<z.input<typeof NoArgs>, DwellResult>;
+export {};
+//# sourceMappingURL=scope_dwell.d.ts.map

package/dist/functions/scope_dwell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope_dwell.d.ts","sourceRoot":"","sources":["../../src/functions/scope_dwell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,QAAA,MAAM,MAAM,iDAAwB,CAAC;AAQrC,UAAU,WAAW;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,WAAW,CAoC3E,CAAC"}

package/dist/functions/scope_dwell.js

@@ -0,0 +1,76 @@
+/**
+ * scope_dwell_tick (T-FLOW-UNSKIPPABLE FU.2 / D2) — scope-sprawl escalation.
+ *
+ * Closes the last flow-gate gap: the SCOPE phase is otherwise ungated, so a
+ * sprawling, oscillating scope (many prompts of investigation, no pre-research
+ * converging) is invisible — the failure mode of this very session. On each
+ * `prompt_submit` while the coding-flow FSM is in `scoping`/`researching`, this
+ * increments a per-session dwell counter; once it reaches the threshold (3 — the
+ * same `depth.count >= 3` "one full research turn" bar the scope-advance uses)
+ * with the scope still un-converged, it returns `nudge: true` so the rule surfaces
+ * a "converge: write ONE pre-research now" directive. It RESETS the moment the FSM
+ * leaves the scope region (a pre-research write advances `scoping → researched`),
+ * so an honest converging scope sees the nudge at most once.
+ *
+ * SOFT by design: the rule emits a `directive` (surface), never a block — research
+ * legitimately needs multiple turns; this nudges convergence, it does not forbid
+ * investigation. Fail-open: any error → `{ nudge: false }` (a nudge must never
+ * break a prompt).
+ *
+ * Imports from: node:fs/promises, zod, ../runtime/result.js, ../runtime/paths.js,
+ *   ../runtime/fsm_state.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { z } from 'zod';
+import { readFsmStateRaw } from '../runtime/fsm_state.js';
+import { sessionStateFile } from '../runtime/paths.js';
+import { ok } from '../runtime/result.js';
+const NoArgs = z.object({}).strict();
+/** Gate pack whose FSM defines the scope region. */
+const GATE_PACK = 'coding-flow';
+/** Dwell turns in scope before nudging — matches the scope-advance depth bar. */
+const DWELL_THRESHOLD = 3;
+const DWELL_KEY = 'coding-flow-scope-dwell';
+export const ScopeDwellTick = {
+    name: 'scope_dwell_tick',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 3,
+    execute: async (_args, ctx) => {
+        const path = sessionStateFile(ctx.sessionId, DWELL_KEY);
+        const write = async (n) => {
+            try {
+                await mkdir(dirname(path), { recursive: true });
+                await writeFile(path, JSON.stringify(n), 'utf8');
+            }
+            catch {
+                /* best-effort */
+            }
+        };
+        try {
+            const st = await readFsmStateRaw(ctx.sessionId, GATE_PACK);
+            const inScope = st === 'scoping' || st === 'researching';
+            if (!inScope) {
+                await write(0); // left the scope region (e.g. a pre-research advanced it) → reset
+                return ok({ nudge: false, count: 0 });
+            }
+            let cur = 0;
+            try {
+                cur = Number(JSON.parse(await readFile(path, 'utf8'))) || 0;
+            }
+            catch {
+                cur = 0;
+            }
+            const next = cur + 1;
+            await write(next);
+            return ok({ nudge: next >= DWELL_THRESHOLD, count: next });
+        }
+        catch {
+            return ok({ nudge: false, count: 0 });
+        }
+    },
+};
+//# sourceMappingURL=scope_dwell.js.map

package/dist/functions/scope_dwell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope_dwell.js","sourceRoot":"","sources":["../../src/functions/scope_dwell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAI1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAErC,oDAAoD;AACpD,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,iFAAiF;AACjF,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAO5C,MAAM,CAAC,MAAM,cAAc,GAAqD;IAC9E,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,EAAE,CAAS,EAAiB,EAAE;YAC/C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,aAAa,CAAC;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,kEAAkE;gBAClF,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,GAAG,CAAC,CAAC;YACV,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;YACrB,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/functions/session_status_manifest.d.ts

@@ -0,0 +1,47 @@
+/**
+ * session_status_manifest (T-SESSION-STATUS-MANIFEST) — ONE consolidated
+ * "what is opensquid connected to" report, surfaced on every session begin
+ * (startup + resume) via the SessionStart hook's
+ * `hookSpecificOutput.additionalContext` (the user-visible channel).
+ *
+ * Supersedes the fragmented per-subsystem session-start injects: instead of
+ * `check_chat_connection` (chat only) + `check_flow_health` (flow only, and
+ * silent when healthy) reporting separately, this primitive emits a single,
+ * ALWAYS-shown block with five sections so the user sees the full connection
+ * picture every start/resume:
+ *
+ *   📋 opensquid — session connections
+ *   • Chat:    telegram topic N (umbrella X) — receiver attached ✅ / no receiver 🔌
+ *   • Flow:    gates active ✅ / INACTIVE ⛔ — <problems> (preserves the F3 signal)
+ *   • Packs:   loaded names + count
+ *   • Daemon:  always-on chat-daemon reachable ✅ / down 🔌
+ *   • Engine:  loop-engine memory up ✅ / down 🔌
+ *
+ * DRY: the Flow section reuses `flowEnforcementProblems` (the exact detection
+ * behind `check_flow_health`). Chat/Packs/Daemon/Engine are composed from the
+ * shared library functions. (Track-2 cleanup: when the session attaches to the
+ * daemon as the live receiver, `check_chat_connection`/`check_flow_health` — now
+ * registered-but-unwired — retire in favor of this manifest.)
+ *
+ * Fail-quiet, NEVER throws (a SessionStart hook must exit 0): each section is
+ * independently guarded — one probe failing degrades to "<section>: unknown"
+ * and never blanks the others. Engine/daemon probes NEVER spawn (daemon = ping
+ * an existing UDS; engine = sock-exists + pid-alive), so a status read cannot
+ * start a subsystem.
+ *
+ * Imports from: node:fs, node:fs/promises, node:path, zod, ../channels/routing.js,
+ *   ../chat_daemon/client.js, ../runtime/chat/live_session_lease.js,
+ *   ../runtime/paths.js, ../runtime/result.js, ../runtime/bootstrap.js,
+ *   ./check_flow_health.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import type { FunctionDef } from './registry.js';
+declare const NoArgs: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+interface ManifestResult {
+    kind: 'inject_context';
+    content: string;
+}
+export declare const SessionStatusManifest: FunctionDef<z.input<typeof NoArgs>, ManifestResult | null>;
+export {};
+//# sourceMappingURL=session_status_manifest.d.ts.map

package/dist/functions/session_status_manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_status_manifest.d.ts","sourceRoot":"","sources":["../../src/functions/session_status_manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,QAAA,MAAM,MAAM,iDAAwB,CAAC;AAErC,UAAU,cAAc;IACtB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAmGD,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAsB5F,CAAC"}

package/dist/functions/session_status_manifest.js

@@ -0,0 +1,148 @@
+/**
+ * session_status_manifest (T-SESSION-STATUS-MANIFEST) — ONE consolidated
+ * "what is opensquid connected to" report, surfaced on every session begin
+ * (startup + resume) via the SessionStart hook's
+ * `hookSpecificOutput.additionalContext` (the user-visible channel).
+ *
+ * Supersedes the fragmented per-subsystem session-start injects: instead of
+ * `check_chat_connection` (chat only) + `check_flow_health` (flow only, and
+ * silent when healthy) reporting separately, this primitive emits a single,
+ * ALWAYS-shown block with five sections so the user sees the full connection
+ * picture every start/resume:
+ *
+ *   📋 opensquid — session connections
+ *   • Chat:    telegram topic N (umbrella X) — receiver attached ✅ / no receiver 🔌
+ *   • Flow:    gates active ✅ / INACTIVE ⛔ — <problems> (preserves the F3 signal)
+ *   • Packs:   loaded names + count
+ *   • Daemon:  always-on chat-daemon reachable ✅ / down 🔌
+ *   • Engine:  loop-engine memory up ✅ / down 🔌
+ *
+ * DRY: the Flow section reuses `flowEnforcementProblems` (the exact detection
+ * behind `check_flow_health`). Chat/Packs/Daemon/Engine are composed from the
+ * shared library functions. (Track-2 cleanup: when the session attaches to the
+ * daemon as the live receiver, `check_chat_connection`/`check_flow_health` — now
+ * registered-but-unwired — retire in favor of this manifest.)
+ *
+ * Fail-quiet, NEVER throws (a SessionStart hook must exit 0): each section is
+ * independently guarded — one probe failing degrades to "<section>: unknown"
+ * and never blanks the others. Engine/daemon probes NEVER spawn (daemon = ping
+ * an existing UDS; engine = sock-exists + pid-alive), so a status read cannot
+ * start a subsystem.
+ *
+ * Imports from: node:fs, node:fs/promises, node:path, zod, ../channels/routing.js,
+ *   ../chat_daemon/client.js, ../runtime/chat/live_session_lease.js,
+ *   ../runtime/paths.js, ../runtime/result.js, ../runtime/bootstrap.js,
+ *   ./check_flow_health.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { loadChannelsConfig, resolveOutbound, resolveUmbrellaForCwd } from '../channels/routing.js';
+import { pingDaemon } from '../chat_daemon/client.js';
+import { loadActivePacks } from '../runtime/bootstrap.js';
+import { isLeaseFresh, readLease } from '../runtime/chat/live_session_lease.js';
+import { OPENSQUID_HOME, umbrellaLiveSessionLease } from '../runtime/paths.js';
+import { resolveBackendConfig } from '../rag/config.js';
+import { ok } from '../runtime/result.js';
+import { flowEnforcementProblems } from './check_flow_health.js';
+const NoArgs = z.object({}).strict();
+async function readJson(path) {
+    try {
+        return JSON.parse(await readFile(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/** Chat section: configured channel + whether a live receiver is attached. */
+async function chatStatusLine(cwd) {
+    const config = (await readJson(join(OPENSQUID_HOME(), 'config.json'))) ?? {};
+    if (config.chat?.session_start_check === 'off')
+        return 'Chat: status checks off (config)';
+    const channels = await loadChannelsConfig();
+    const umbrellaId = channels === null ? null : resolveUmbrellaForCwd(channels, cwd);
+    if (umbrellaId === null || channels === null)
+        return 'Chat: not wired (umbrella unresolved)';
+    const tokenPresent = typeof config.chat_connections?.telegram?.bot_token === 'string' &&
+        config.chat_connections.telegram.bot_token.length > 0;
+    const tg = resolveOutbound(channels, umbrellaId);
+    if (tg !== null && tokenPresent) {
+        const topic = tg.topic_id !== undefined ? ` topic ${String(tg.topic_id)}` : '';
+        const attached = isLeaseFresh(await readLease(umbrellaLiveSessionLease(umbrellaId)));
+        return attached
+            ? `Chat: telegram${topic} (umbrella ${umbrellaId}) — live receiver attached ✅`
+            : `Chat: telegram${topic} (umbrella ${umbrellaId}) — NO live receiver 🔌 (start \`opensquid chat watch\`)`;
+    }
+    if (config.chat_connections?.slack !== undefined ||
+        config.chat_connections?.discord !== undefined)
+        return `Chat: non-telegram platform configured for umbrella ${umbrellaId} (run \`opensquid setup\`)`;
+    return `Chat: not wired for umbrella ${umbrellaId} (run \`opensquid setup\`)`;
+}
+/** Flow section: reuse the exact check_flow_health detection (DRY). */
+async function flowStatusLine(sessionId) {
+    const problems = await flowEnforcementProblems(sessionId);
+    if (problems.length === 0)
+        return 'Flow gates: active ✅';
+    return (`Flow gates: INACTIVE ⛔ — ${problems.join('; ')}. ` +
+        'Run `opensquid setup` then RESTART this session (hooks wire only at session start).');
+}
+/** Packs section: the active pack names + count. */
+async function packsStatusLine(sessionId) {
+    const packs = await loadActivePacks(sessionId);
+    const names = packs.map((p) => p.name);
+    return names.length === 0
+        ? 'Packs: none loaded'
+        : `Packs (${String(names.length)}): ${names.join(', ')}`;
+}
+/** Daemon section: ping the always-on chat-daemon (no spawn). */
+async function daemonStatusLine() {
+    const up = await pingDaemon(500);
+    return up ? 'Daemon: chat-daemon reachable ✅' : 'Daemon: chat-daemon down 🔌';
+}
+/** Memory section: report the resolved libSQL backend (local file — no socket/daemon). */
+async function memoryStatusLine() {
+    try {
+        const cfg = await resolveBackendConfig();
+        return `Memory: ${cfg.kind} ✅`;
+    }
+    catch {
+        return 'Memory: unavailable 🔌';
+    }
+}
+/** Per-section hard ceiling — keeps the whole manifest under ~1s even if a probe
+ *  hangs. The non-daemon probes (chat/flow/packs) do unbounded readFile/loadActivePacks;
+ *  without this a hung fs/engine read would wedge Promise.all and defeat the
+ *  "SessionStart must exit 0" guarantee. */
+const SECTION_TIMEOUT_MS = 800;
+/** Run a section probe with a hard timeout, degrading any throw OR hang to
+ *  "<label>: unknown" — a SessionStart manifest must never block (or hang) session
+ *  begin. (pingDaemon is already bounded to 500ms; this bounds the rest.) */
+function safeSection(label, probe) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(() => resolve(`${label}: unknown (timed out)`), SECTION_TIMEOUT_MS);
+        timer.unref();
+        probe().then(resolve, () => resolve(`${label}: unknown`));
+    });
+}
+export const SessionStatusManifest = {
+    name: 'session_status_manifest',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 30,
+    execute: async (_args, ctx) => {
+        const cwd = ctx.event.kind === 'session_start' ? (ctx.event.cwd ?? process.cwd()) : process.cwd();
+        const sessionId = ctx.sessionId;
+        const sections = await Promise.all([
+            safeSection('Chat', () => chatStatusLine(cwd)),
+            safeSection('Flow gates', () => flowStatusLine(sessionId)),
+            safeSection('Packs', () => packsStatusLine(sessionId)),
+            safeSection('Daemon', () => daemonStatusLine()),
+            safeSection('Memory', () => memoryStatusLine()),
+        ]);
+        const content = ['📋 opensquid — session connections', ...sections.map((s) => `• ${s}`)].join('\n');
+        return ok({ kind: 'inject_context', content });
+    },
+};
+//# sourceMappingURL=session_status_manifest.js.map

package/dist/functions/session_status_manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_status_manifest.js","sourceRoot":"","sources":["../../src/functions/session_status_manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAE1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAgBrC,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAkB,IAAI,CAAC,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,IAAI,MAAM,CAAC,IAAI,EAAE,mBAAmB,KAAK,KAAK;QAAE,OAAO,kCAAkC,CAAC;IAE1F,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnF,IAAI,UAAU,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,uCAAuC,CAAC;IAE7F,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,SAAS,KAAK,QAAQ;QAChE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,EAAE,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,SAAS,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrF,OAAO,QAAQ;YACb,CAAC,CAAC,iBAAiB,KAAK,cAAc,UAAU,8BAA8B;YAC9E,CAAC,CAAC,iBAAiB,KAAK,cAAc,UAAU,0DAA0D,CAAC;IAC/G,CAAC;IACD,IACE,MAAM,CAAC,gBAAgB,EAAE,KAAK,KAAK,SAAS;QAC5C,MAAM,CAAC,gBAAgB,EAAE,OAAO,KAAK,SAAS;QAE9C,OAAO,uDAAuD,UAAU,4BAA4B,CAAC;IACvG,OAAO,gCAAgC,UAAU,4BAA4B,CAAC;AAChF,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,cAAc,CAAC,SAAiB;IAC7C,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACzD,OAAO,CACL,4BAA4B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACnD,qFAAqF,CACtF,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,KAAK,UAAU,eAAe,CAAC,SAAiB;IAC9C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,6BAA6B,CAAC;AAChF,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,oBAAoB,EAAE,CAAC;QACzC,OAAO,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wBAAwB,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;4CAG4C;AAC5C,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;6EAE6E;AAC7E,SAAS,WAAW,CAAC,KAAa,EAAE,KAA4B;IAC9D,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,uBAAuB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC7F,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAA+D;IAC/F,IAAI,EAAE,yBAAyB;IAC/B,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,EAAE;IAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,GAAG,GACP,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACxF,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC9C,WAAW,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YAC1D,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACtD,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC/C,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,oCAAoC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC3F,IAAI,CACL,CAAC;QACF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF,CAAC"}

package/dist/functions/session_tool_history.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `session_tool_history` primitive — reads the per-session tool-call ledger
+ * maintained by `src/runtime/session_state.ts`.
+ *
+ * Returns the list of tool names observed by the `PreToolUse` hook either
+ * for the current turn (`scope: 'current_turn'`, reset on every
+ * `UserPromptSubmit`) or for the whole session (`scope: 'session'`, capped
+ * at `SESSION_LEDGER_CAP = 200` most-recent entries).
+ *
+ * Used by G.5's `verify-before-citing-memory` skill to verify that a
+ * verification tool (`Bash`, `Read`, `Grep`, `mcp__opensquid__recall`,
+ * `mcp__opensquid__inspect_skill`) was called this turn BEFORE the
+ * assistant cited memory state — a structural anti-drift signal codified
+ * from `feedback_verify_code_before_memory`.
+ *
+ * `filter_names` is an optional allow-list applied AFTER the scope lookup:
+ * empty result is the load-bearing signal "no verification this turn",
+ * which the skill chains into a `warn` verdict via the `if:` field on the
+ * subsequent `verdict` step.
+ *
+ * Error model: relies on `readSessionToolLedger`, which fail-safes to
+ * `{ tools: [] }` on ENOENT / malformed state. Never throws.
+ *
+ * Imports from: zod, ../runtime/session_state.js, ../runtime/result.js,
+ *   ./registry.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import type { FunctionDef } from './registry.js';
+export declare const SessionToolHistoryArgs: z.ZodObject<{
+    scope: z.ZodDefault<z.ZodEnum<["current_turn", "session"]>>;
+    filter_names: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    scope: "session" | "current_turn";
+    filter_names?: string[] | undefined;
+}, {
+    scope?: "session" | "current_turn" | undefined;
+    filter_names?: string[] | undefined;
+}>;
+interface SessionToolHistoryResult {
+    tools: string[];
+    count: number;
+}
+export declare const SessionToolHistory: FunctionDef<z.input<typeof SessionToolHistoryArgs>, SessionToolHistoryResult>;
+export {};
+//# sourceMappingURL=session_tool_history.d.ts.map

package/dist/functions/session_tool_history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_tool_history.d.ts","sourceRoot":"","sources":["../../src/functions/session_tool_history.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,eAAO,MAAM,sBAAsB;;;;;;;;;EAKxB,CAAC;AAEZ,UAAU,wBAAwB;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAC1C,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,EACtC,wBAAwB,CAezB,CAAC"}

package/dist/functions/session_tool_history.js

@@ -0,0 +1,52 @@
+/**
+ * `session_tool_history` primitive — reads the per-session tool-call ledger
+ * maintained by `src/runtime/session_state.ts`.
+ *
+ * Returns the list of tool names observed by the `PreToolUse` hook either
+ * for the current turn (`scope: 'current_turn'`, reset on every
+ * `UserPromptSubmit`) or for the whole session (`scope: 'session'`, capped
+ * at `SESSION_LEDGER_CAP = 200` most-recent entries).
+ *
+ * Used by G.5's `verify-before-citing-memory` skill to verify that a
+ * verification tool (`Bash`, `Read`, `Grep`, `mcp__opensquid__recall`,
+ * `mcp__opensquid__inspect_skill`) was called this turn BEFORE the
+ * assistant cited memory state — a structural anti-drift signal codified
+ * from `feedback_verify_code_before_memory`.
+ *
+ * `filter_names` is an optional allow-list applied AFTER the scope lookup:
+ * empty result is the load-bearing signal "no verification this turn",
+ * which the skill chains into a `warn` verdict via the `if:` field on the
+ * subsequent `verdict` step.
+ *
+ * Error model: relies on `readSessionToolLedger`, which fail-safes to
+ * `{ tools: [] }` on ENOENT / malformed state. Never throws.
+ *
+ * Imports from: zod, ../runtime/session_state.js, ../runtime/result.js,
+ *   ./registry.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import { ok } from '../runtime/result.js';
+import { readSessionToolLedger } from '../runtime/session_state.js';
+export const SessionToolHistoryArgs = z
+    .object({
+    scope: z.enum(['current_turn', 'session']).default('current_turn'),
+    filter_names: z.array(z.string()).optional(),
+})
+    .strict();
+export const SessionToolHistory = {
+    name: 'session_tool_history',
+    argSchema: SessionToolHistoryArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 2,
+    execute: async (args, ctx) => {
+        const scope = args.scope ?? 'current_turn';
+        const ledger = await readSessionToolLedger(ctx.sessionId, scope);
+        const tools = args.filter_names
+            ? ledger.tools.filter((t) => args.filter_names.includes(t))
+            : ledger.tools;
+        return ok({ tools, count: tools.length });
+    },
+};
+//# sourceMappingURL=session_tool_history.js.map

package/dist/functions/session_tool_history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_tool_history.js","sourceRoot":"","sources":["../../src/functions/session_tool_history.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAIpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ,MAAM,CAAC,MAAM,kBAAkB,GAG3B;IACF,IAAI,EAAE,sBAAsB;IAC5B,SAAS,EAAE,sBAAsB;IACjC,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY;YAC7B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC"}

package/dist/functions/shell_exec.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `shell_exec` primitive — gated shell-command execution stub (AUTO.3).
+ *
+ * AUTO.3 lands the CAPABILITY GATE only. The actual exec path (spawn/argv
+ * separation, stdout/stderr capture, timeout, signal handling) lands in
+ * AUTO.5 — until then, this primitive performs the gate check, returns a
+ * verdict-routed error on deny, and emits a `not-implemented` error on
+ * allow so that downstream callers can't accidentally bypass the future
+ * exec wiring.
+ *
+ * The "stub but gated" posture is intentional — wiring the gate now means
+ * AUTO.5 inherits the security model and only has to add the spawn layer.
+ *
+ * Imports from: zod, ../runtime/result.js, ../runtime/capability_gate.js,
+ *   ./registry.js.
+ * Imported by: src/functions/index.ts (registry wiring).
+ */
+import type { CapabilityGate } from '../runtime/capability_gate.js';
+import type { FunctionRegistry } from './registry.js';
+export declare function registerShellExecFunction(registry: FunctionRegistry, opts: {
+    gate: CapabilityGate;
+}): void;
+//# sourceMappingURL=shell_exec.d.ts.map

package/dist/functions/shell_exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell_exec.d.ts","sourceRoot":"","sources":["../../src/functions/shell_exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMtD,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GAC7B,IAAI,CAkCN"}

package/dist/functions/shell_exec.js

@@ -0,0 +1,58 @@
+/**
+ * `shell_exec` primitive — gated shell-command execution stub (AUTO.3).
+ *
+ * AUTO.3 lands the CAPABILITY GATE only. The actual exec path (spawn/argv
+ * separation, stdout/stderr capture, timeout, signal handling) lands in
+ * AUTO.5 — until then, this primitive performs the gate check, returns a
+ * verdict-routed error on deny, and emits a `not-implemented` error on
+ * allow so that downstream callers can't accidentally bypass the future
+ * exec wiring.
+ *
+ * The "stub but gated" posture is intentional — wiring the gate now means
+ * AUTO.5 inherits the security model and only has to add the spawn layer.
+ *
+ * Imports from: zod, ../runtime/result.js, ../runtime/capability_gate.js,
+ *   ./registry.js.
+ * Imported by: src/functions/index.ts (registry wiring).
+ */
+import { z } from 'zod';
+import { err } from '../runtime/result.js';
+const ShellExecArgs = z.object({
+    command: z.string().min(1),
+});
+export function registerShellExecFunction(registry, opts) {
+    // DURABLE.2 — once AUTO.5 wires the real spawn, shell_exec is expensive
+    // + side-effecting (touches the host shell). Marked `durable: true` now
+    // so the contract is fixed before AUTO.5 lands. NOT memoizable: shell
+    // output depends on environment state outside the args (cwd, env vars,
+    // filesystem), and the command may have side effects we'd skip on a
+    // memo hit.
+    registry.register({
+        name: 'shell_exec',
+        argSchema: ShellExecArgs,
+        durable: true,
+        memoizable: false,
+        costEstimateMs: 200,
+        execute: async ({ command }, ctx) => {
+            const verdict = await opts.gate.check({
+                pack: ctx.packId,
+                capability: 'shell_exec',
+                target: command,
+                context: { sessionId: ctx.sessionId },
+            });
+            if (!verdict.allowed) {
+                return err({
+                    kind: 'runtime',
+                    message: `shell_exec denied: ${verdict.message ?? verdict.source}`,
+                });
+            }
+            // AUTO.5 wires the real spawn path. Returning runtime-error on allow
+            // keeps callers from accidentally relying on a stub.
+            return err({
+                kind: 'runtime',
+                message: `shell_exec gate-allowed but exec is deferred to AUTO.5: "${command}"`,
+            });
+        },
+    });
+}
+//# sourceMappingURL=shell_exec.js.map

package/dist/functions/shell_exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell_exec.js","sourceRoot":"","sources":["../../src/functions/shell_exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAI3C,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,UAAU,yBAAyB,CACvC,QAA0B,EAC1B,IAA8B;IAE9B,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,YAAY;IACZ,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,aAAa;QACxB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,GAAG;QACnB,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBACpC,IAAI,EAAE,GAAG,CAAC,MAAM;gBAChB,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE;aACtC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,GAAG,CAAC;oBACT,IAAI,EAAE,SAAkB;oBACxB,OAAO,EAAE,sBAAsB,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,qEAAqE;YACrE,qDAAqD;YACrD,OAAO,GAAG,CAAC;gBACT,IAAI,EAAE,SAAkB;gBACxB,OAAO,EAAE,4DAA4D,OAAO,GAAG;aAChF,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/functions/state.d.ts

@@ -0,0 +1,29 @@
+/**
+ * State I/O primitives: `read_state`, `write_state`, `append_log`.
+ *
+ * Per `docs/opensquid-real-design.md` §"Phase 1 — Runtime skeleton" (state
+ * surface). These three primitives are the only filesystem-touching
+ * primitives in the Phase 1 runtime — skills compose them into rule
+ * processes via YAML.
+ *
+ * Atomicity contract:
+ *   - `write_state` uses tmp-file + rename (atomic on POSIX, near-atomic on
+ *     Windows — rename over an open target fails there; documented risk).
+ *   - `append_log` serializes concurrent writers via `proper-lockfile`
+ *     (5 s stale timeout — minimum allowed by the lib). The file is
+ *     touched before locking because `proper-lockfile` requires the
+ *     target to exist.
+ *
+ * Error model: ENOENT on read returns `ok(null)` (canonical "no state"
+ * signal — the original anti-drift `read_state` pattern).
+ * Every other failure travels as `err({ kind: 'runtime', ... })`. Throws
+ * never escape an `execute` — the evaluator's stray-throw wrapper is for
+ * bugs, not for normal failure modes.
+ *
+ * Imports from: zod, node:fs/promises, node:path, proper-lockfile,
+ *   ../runtime/paths.js, ./registry.js, ../runtime/result.js.
+ * Imported by: src/functions/index.ts (registry wiring).
+ */
+import type { FunctionRegistry } from './registry.js';
+export declare function registerStateFunctions(registry: FunctionRegistry): void;
+//# sourceMappingURL=state.d.ts.map

package/dist/functions/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/functions/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAWH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAmDtD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAqFvE"}