opensquid 0.5.441 → 0.5.447

package/dist/anti-drift/rules.test.js

@@ -1,213 +0,0 @@
-/**
- * Tests for anti-drift/rules.ts (0.7.33 unified-evaluator track).
- *
- * Validates:
- *   1. Catalog shape — every rule has the required fields
- *   2. rulesForEvent filtering — by event + bypass env var
- *   3. evaluateRules behavior — PreToolUse short-circuits on block
- *   4. Specific rule when() predicates fire correctly
- *
- * Deep behavioral coverage of each rule's check() lives in the
- * existing src/hooks/*.test.ts suites (since the rules delegate
- * there). The 0.7.35 cutover migrates those tests alongside.
- */
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { RULES, evaluateRules, rulesForEvent, } from "./rules.js";
-describe("RULES catalog shape", () => {
-    it("has at least 16 rules (matches the design doc's 18, allowing 1-2 implementation merges)", () => {
-        expect(RULES.length).toBeGreaterThanOrEqual(16);
-    });
-    it("every rule has all required fields populated", () => {
-        for (const r of RULES) {
-            expect(r.id).toBeTruthy();
-            expect(r.catches).toBeTruthy();
-            expect(["PreToolUse", "Stop", "UserPromptSubmit", "SessionEnd"]).toContain(r.hook);
-            expect(typeof r.when).toBe("function");
-            expect(typeof r.check).toBe("function");
-            expect(r.rationale).toBeTruthy();
-        }
-    });
-    it("rule ids are unique", () => {
-        const ids = RULES.map((r) => r.id);
-        expect(new Set(ids).size).toBe(ids.length);
-    });
-    it("covers all 10 drift D-entries (by `catches` field)", () => {
-        const covered = new Set(RULES.map((r) => r.catches).flatMap((c) => c.split("+").map((s) => s.trim())));
-        for (const drift of ["D1", "D2", "D3", "D4", "D5", "D6", "D7", "D8", "D9", "D10"]) {
-            expect([...covered].some((c) => c === drift || c.startsWith(drift)), `expected catches to include ${drift}`).toBe(true);
-        }
-    });
-});
-describe("rulesForEvent", () => {
-    it("filters by hook event", () => {
-        const preRules = rulesForEvent("PreToolUse");
-        expect(preRules.every((r) => r.hook === "PreToolUse")).toBe(true);
-        expect(preRules.length).toBeGreaterThan(0);
-    });
-    it("excludes bypassed rules", () => {
-        const target = RULES.find((r) => r.id === "active-task-required");
-        expect(target).toBeDefined();
-        expect(target.bypass).toBe("OPENSQUID_SKIP_ACTIVE_TASK_GATE");
-        process.env.OPENSQUID_SKIP_ACTIVE_TASK_GATE = "1";
-        try {
-            const ids = rulesForEvent("PreToolUse").map((r) => r.id);
-            expect(ids).not.toContain("active-task-required");
-        }
-        finally {
-            delete process.env.OPENSQUID_SKIP_ACTIVE_TASK_GATE;
-        }
-    });
-    it("bypass env var must be exactly '1' (other values do NOT bypass)", () => {
-        process.env.OPENSQUID_SKIP_ACTIVE_TASK_GATE = "true";
-        try {
-            const ids = rulesForEvent("PreToolUse").map((r) => r.id);
-            expect(ids).toContain("active-task-required");
-        }
-        finally {
-            delete process.env.OPENSQUID_SKIP_ACTIVE_TASK_GATE;
-        }
-    });
-});
-describe("rule when() predicates", () => {
-    const preCtx = (toolName, command) => ({
-        hookEvent: "PreToolUse",
-        toolName,
-        toolInput: command !== undefined ? { command } : {},
-    });
-    it("active-task-required fires only on log_phase / chat_send", () => {
-        const rule = RULES.find((r) => r.id === "active-task-required");
-        expect(rule.when(preCtx("mcp__opensquid__log_phase"))).toBe(true);
-        expect(rule.when(preCtx("mcp__opensquid__chat_send"))).toBe(true);
-        expect(rule.when(preCtx("Bash", "ls"))).toBe(false);
-        expect(rule.when(preCtx("Read"))).toBe(false);
-    });
-    it("never-amend.when fires on Bash tool", () => {
-        const rule = RULES.find((r) => r.id === "never-amend");
-        expect(rule.when(preCtx("Bash", "git commit --amend"))).toBe(true);
-        // Filter happens inside check via drift-patterns; when() just gates by tool name.
-        expect(rule.when(preCtx("Edit"))).toBe(false);
-    });
-    it("engine-vocab-leak fires only on git commit Bash commands", () => {
-        const rule = RULES.find((r) => r.id === "engine-vocab-leak");
-        expect(rule.when(preCtx("Bash", "git commit -m 'foo'"))).toBe(true);
-        expect(rule.when(preCtx("Bash", "git status"))).toBe(false);
-        expect(rule.when(preCtx("Bash"))).toBe(false);
-    });
-    it("heartbeat-recall-required fires on any mcp__opensquid__* tool", () => {
-        const rule = RULES.find((r) => r.id === "heartbeat-recall-required");
-        expect(rule.when(preCtx("mcp__opensquid__recall"))).toBe(true);
-        expect(rule.when(preCtx("mcp__opensquid__log_phase"))).toBe(true);
-        expect(rule.when(preCtx("mcp__opensquid__chat_send"))).toBe(true);
-        expect(rule.when(preCtx("mcp__plugin_telegram_telegram__reply"))).toBe(false);
-        expect(rule.when(preCtx("Bash"))).toBe(false);
-    });
-    it("telegram-redirect-report fires only on plugin:telegram reply", () => {
-        const rule = RULES.find((r) => r.id === "telegram-redirect-report");
-        expect(rule.when(preCtx("mcp__plugin_telegram_telegram__reply"))).toBe(true);
-        expect(rule.when(preCtx("mcp__opensquid__chat_send"))).toBe(false);
-    });
-    it("inline-report-missing-phases fires on Stop with assistantText", () => {
-        const rule = RULES.find((r) => r.id === "inline-report-missing-phases");
-        expect(rule.when({ hookEvent: "Stop", assistantText: "hi" })).toBe(true);
-        expect(rule.when({ hookEvent: "Stop" })).toBe(false);
-    });
-    it("multi-task-plan-injection fires on UPS with userPrompt", () => {
-        const rule = RULES.find((r) => r.id === "multi-task-plan-injection");
-        expect(rule.when({ hookEvent: "UserPromptSubmit", userPrompt: "166 then 168" })).toBe(true);
-        expect(rule.when({ hookEvent: "UserPromptSubmit" })).toBe(false);
-    });
-});
-describe("evaluateRules — short-circuit on PreToolUse block", () => {
-    let originalRules;
-    beforeEach(() => {
-        originalRules = [...RULES];
-    });
-    afterEach(() => {
-        RULES.length = 0;
-        RULES.push(...originalRules);
-    });
-    it("PreToolUse: stops at the first block verdict (most-restrictive-wins)", async () => {
-        // Replace catalog with two fakes that both apply; the first blocks.
-        RULES.length = 0;
-        let secondRan = false;
-        RULES.push({
-            id: "fake-block",
-            catches: "test",
-            hook: "PreToolUse",
-            when: () => true,
-            check: async () => ({ kind: "block", message: "first" }),
-            rationale: "test",
-        }, {
-            id: "fake-second",
-            catches: "test",
-            hook: "PreToolUse",
-            when: () => true,
-            check: async () => {
-                secondRan = true;
-                return { kind: "pass" };
-            },
-            rationale: "test",
-        });
-        const verdicts = await evaluateRules({ hookEvent: "PreToolUse", toolName: "Bash" });
-        expect(verdicts.length).toBe(1);
-        expect(verdicts[0]).toEqual({ kind: "block", message: "first" });
-        expect(secondRan).toBe(false);
-    });
-    it("Stop: accumulates all verdicts (no short-circuit on first surface)", async () => {
-        RULES.length = 0;
-        RULES.push({
-            id: "fake-surface-a",
-            catches: "test",
-            hook: "Stop",
-            when: () => true,
-            check: async () => ({ kind: "surface", message: "a" }),
-            rationale: "test",
-        }, {
-            id: "fake-surface-b",
-            catches: "test",
-            hook: "Stop",
-            when: () => true,
-            check: async () => ({ kind: "surface", message: "b" }),
-            rationale: "test",
-        });
-        const verdicts = await evaluateRules({ hookEvent: "Stop", assistantText: "test" });
-        expect(verdicts.length).toBe(2);
-        expect(verdicts.map((v) => v.kind === "surface" && v.message)).toEqual(["a", "b"]);
-    });
-    it("skips rules whose when() returns false", async () => {
-        RULES.length = 0;
-        RULES.push({
-            id: "fake-not-applicable",
-            catches: "test",
-            hook: "PreToolUse",
-            when: () => false,
-            check: async () => ({ kind: "block", message: "should not fire" }),
-            rationale: "test",
-        });
-        const verdicts = await evaluateRules({ hookEvent: "PreToolUse", toolName: "Bash" });
-        expect(verdicts).toEqual([]);
-    });
-});
-describe("Verdict shape — pass / block / warn / surface", () => {
-    it("PASS verdicts have no message field", () => {
-        const v = { kind: "pass" };
-        expect(v.kind).toBe("pass");
-        expect("message" in v).toBe(false);
-    });
-    it("non-pass verdicts carry a message", () => {
-        const block = { kind: "block", message: "x" };
-        const warn = { kind: "warn", message: "y" };
-        const surface = { kind: "surface", message: "z" };
-        expect(block.message).toBe("x");
-        expect(warn.message).toBe("y");
-        expect(surface.message).toBe("z");
-    });
-});
-describe("hook-event coverage", () => {
-    it("each of the 4 hook events has at least one rule", () => {
-        for (const event of ["PreToolUse", "Stop", "UserPromptSubmit", "SessionEnd"]) {
-            const rules = RULES.filter((r) => r.hook === event);
-            expect(rules.length, `expected at least one rule for ${event}`).toBeGreaterThan(0);
-        }
-    });
-});

package/dist/anti-drift/state.d.ts

@@ -1,107 +0,0 @@
-/**
- * Anti-drift state primitives (0.8 unified-evaluator track).
- *
- * Per loop/docs/opensquid-anti-drift-unified-evaluator-design.md C-section
- * "state primitives": one filesystem-backed source of truth for the
- * active-task signal + violations log + drift catalog.
- *
- * This module is the foundation of the unified evaluator. Today it
- * lives alongside src/hooks/ (no cutover yet). Subsequent patches
- * port rules from src/hooks/* into src/anti-drift/rules.ts which
- * reads from this state module, replacing per-rule transcript
- * parsing.
- *
- * Three state primitives:
- *   1. active-task.json — current in_progress task id + subject + started_at
- *   2. violations.log   — append-only ring buffer (last N violations)
- *   3. drift-catalog.jsonl — append-only audit trail
- *
- * Layout (sessions are short-lived; project scope is durable):
- *   ~/.opensquid/sessions/<session-id>/active-task.json
- *   ~/.opensquid/sessions/<session-id>/violations.log
- *   ~/.opensquid/projects/<project-uuid>/drift-catalog.jsonl
- *
- * Design choice: writes are best-effort. State corruption is recoverable
- * (worst case: rule fails-open, which is what the existing hooks already
- * do). The new architecture's win is making "no active task" a positive
- * signal (file absent) rather than a parse failure (transcript
- * unreadable) — different shape, easier to reason about.
- */
-export interface ActiveTaskState {
-    /** Numeric task id from Claude Code's TodoWrite / TaskCreate. */
-    id: string;
-    /** Human-readable subject (helps with grep + debugging). */
-    subject?: string;
-    /** ISO 8601 timestamp when this task was marked in_progress. */
-    started_at: string;
-}
-/**
- * Write the active-task state. Idempotent — overwrites any existing
- * file. Caller is responsible for choosing the right semantic (e.g.
- * a fresh TaskCreate vs. a TaskUpdate(in_progress) on an existing
- * task id).
- *
- * Exported for direct testing + use by the PreToolUse sync helper.
- */
-export declare function writeActiveTask(sessionId: string, state: ActiveTaskState, options?: {
-    dataRoot?: string;
-}): Promise<void>;
-/**
- * Read the active-task state. Returns null when the file is absent
- * (the canonical "no in_progress task" signal) OR when the file is
- * malformed (fail-safe: treat corruption as "no task" rather than
- * crashing the gate).
- */
-export declare function readActiveTask(sessionId: string, options?: {
-    dataRoot?: string;
-}): Promise<ActiveTaskState | null>;
-/**
- * Delete the active-task state. Idempotent — silent no-op when the
- * file is already absent. Called on TaskUpdate(completed).
- */
-export declare function clearActiveTask(sessionId: string, options?: {
-    dataRoot?: string;
-}): Promise<void>;
-export interface ViolationEntry {
-    /** ISO 8601 timestamp the rule fired. */
-    ts: string;
-    /** Rule id from rules.ts. */
-    rule_id: string;
-    /** "block" | "warn" | "surface" | "auto". */
-    verdict: string;
-    /** Free-text reason (becomes the agent-facing surface text). */
-    reason: string;
-    /** Optional matched-text snippet (≤200 chars). */
-    evidence?: string;
-}
-/**
- * Append a violation entry. Each call writes exactly one JSON line.
- * Best-effort: silent on write failure (the rule has already fired
- * in-process — losing the log entry is non-load-bearing).
- */
-export declare function appendViolation(sessionId: string, entry: ViolationEntry, options?: {
-    dataRoot?: string;
-}): Promise<void>;
-/**
- * Atomically claim all pending violations for surfacing at next UPS.
- * Returns the parsed entries; the on-disk file is renamed-then-deleted
- * so concurrent writers land in a fresh file the next consumer picks up.
- */
-export declare function consumeViolations(sessionId: string, options?: {
-    dataRoot?: string;
-}): Promise<ViolationEntry[]>;
-/**
- * Path helper for the per-project drift catalog. The catalog is
- * project-scoped (not session-scoped) so a project's drift history
- * accumulates across sessions.
- *
- * Falls back to a session-scoped path when projectUuid is null —
- * matches the existing drift-catalog.ts fallback shape.
- */
-export declare function driftCatalogPath(projectUuid: string | null, sessionId: string, dataRoot?: string): string;
-/**
- * Per-session file paths that SessionEnd should clean up. Project-scoped
- * files (drift-catalog.jsonl) are durable across sessions and excluded.
- */
-export declare function sessionStateFiles(sessionId: string, dataRoot?: string): string[];
-//# sourceMappingURL=state.d.ts.map

package/dist/anti-drift/state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src.legacy/anti-drift/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAWH,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAiBjC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,IAAI,CAAC,CAOf;AAMD,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,cAAc,EAAE,CAAC,CA+B3B;AAMD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAMR;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhF"}

package/dist/anti-drift/state.js

@@ -1,177 +0,0 @@
-/**
- * Anti-drift state primitives (0.8 unified-evaluator track).
- *
- * Per loop/docs/opensquid-anti-drift-unified-evaluator-design.md C-section
- * "state primitives": one filesystem-backed source of truth for the
- * active-task signal + violations log + drift catalog.
- *
- * This module is the foundation of the unified evaluator. Today it
- * lives alongside src/hooks/ (no cutover yet). Subsequent patches
- * port rules from src/hooks/* into src/anti-drift/rules.ts which
- * reads from this state module, replacing per-rule transcript
- * parsing.
- *
- * Three state primitives:
- *   1. active-task.json — current in_progress task id + subject + started_at
- *   2. violations.log   — append-only ring buffer (last N violations)
- *   3. drift-catalog.jsonl — append-only audit trail
- *
- * Layout (sessions are short-lived; project scope is durable):
- *   ~/.opensquid/sessions/<session-id>/active-task.json
- *   ~/.opensquid/sessions/<session-id>/violations.log
- *   ~/.opensquid/projects/<project-uuid>/drift-catalog.jsonl
- *
- * Design choice: writes are best-effort. State corruption is recoverable
- * (worst case: rule fails-open, which is what the existing hooks already
- * do). The new architecture's win is making "no active task" a positive
- * signal (file absent) rather than a parse failure (transcript
- * unreadable) — different shape, easier to reason about.
- */
-import { promises as fs } from "node:fs";
-import * as path from "node:path";
-import { resolveDataRoot } from "../codex/store.js";
-function activeTaskPath(sessionId, dataRoot) {
-    return path.join(resolveDataRoot(dataRoot), "sessions", sessionId, "active-task.json");
-}
-/**
- * Write the active-task state. Idempotent — overwrites any existing
- * file. Caller is responsible for choosing the right semantic (e.g.
- * a fresh TaskCreate vs. a TaskUpdate(in_progress) on an existing
- * task id).
- *
- * Exported for direct testing + use by the PreToolUse sync helper.
- */
-export async function writeActiveTask(sessionId, state, options = {}) {
-    const p = activeTaskPath(sessionId, options.dataRoot);
-    await fs.mkdir(path.dirname(p), { recursive: true });
-    await fs.writeFile(p, JSON.stringify(state, null, 2) + "\n", "utf8");
-}
-/**
- * Read the active-task state. Returns null when the file is absent
- * (the canonical "no in_progress task" signal) OR when the file is
- * malformed (fail-safe: treat corruption as "no task" rather than
- * crashing the gate).
- */
-export async function readActiveTask(sessionId, options = {}) {
-    const p = activeTaskPath(sessionId, options.dataRoot);
-    let raw;
-    try {
-        raw = await fs.readFile(p, "utf8");
-    }
-    catch {
-        return null;
-    }
-    try {
-        const parsed = JSON.parse(raw);
-        if (typeof parsed?.id !== "string" || typeof parsed?.started_at !== "string") {
-            return null;
-        }
-        return parsed;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Delete the active-task state. Idempotent — silent no-op when the
- * file is already absent. Called on TaskUpdate(completed).
- */
-export async function clearActiveTask(sessionId, options = {}) {
-    const p = activeTaskPath(sessionId, options.dataRoot);
-    try {
-        await fs.rm(p);
-    }
-    catch {
-        /* already gone — idempotent */
-    }
-}
-function violationsPath(sessionId, dataRoot) {
-    return path.join(resolveDataRoot(dataRoot), "sessions", sessionId, "violations.log");
-}
-/**
- * Append a violation entry. Each call writes exactly one JSON line.
- * Best-effort: silent on write failure (the rule has already fired
- * in-process — losing the log entry is non-load-bearing).
- */
-export async function appendViolation(sessionId, entry, options = {}) {
-    const p = violationsPath(sessionId, options.dataRoot);
-    try {
-        await fs.mkdir(path.dirname(p), { recursive: true });
-        await fs.appendFile(p, JSON.stringify(entry) + "\n", "utf8");
-    }
-    catch {
-        /* best-effort logging — swallow */
-    }
-}
-/**
- * Atomically claim all pending violations for surfacing at next UPS.
- * Returns the parsed entries; the on-disk file is renamed-then-deleted
- * so concurrent writers land in a fresh file the next consumer picks up.
- */
-export async function consumeViolations(sessionId, options = {}) {
-    const p = violationsPath(sessionId, options.dataRoot);
-    const claimed = `${p}.consuming.${Date.now()}.${Math.random().toString(36).slice(2, 8)}`;
-    try {
-        await fs.rename(p, claimed);
-    }
-    catch {
-        return [];
-    }
-    let raw;
-    try {
-        raw = await fs.readFile(claimed, "utf8");
-    }
-    catch {
-        raw = "";
-    }
-    try {
-        await fs.rm(claimed);
-    }
-    catch {
-        /* already gone */
-    }
-    if (!raw.trim())
-        return [];
-    const entries = [];
-    for (const line of raw.split("\n")) {
-        const t = line.trim();
-        if (!t)
-            continue;
-        try {
-            entries.push(JSON.parse(t));
-        }
-        catch {
-            /* skip malformed line */
-        }
-    }
-    return entries;
-}
-// =====================================================================
-// drift-catalog.jsonl — project-scoped audit trail
-// =====================================================================
-/**
- * Path helper for the per-project drift catalog. The catalog is
- * project-scoped (not session-scoped) so a project's drift history
- * accumulates across sessions.
- *
- * Falls back to a session-scoped path when projectUuid is null —
- * matches the existing drift-catalog.ts fallback shape.
- */
-export function driftCatalogPath(projectUuid, sessionId, dataRoot) {
-    const root = resolveDataRoot(dataRoot);
-    if (projectUuid) {
-        return path.join(root, "projects", projectUuid, "drift-catalog.jsonl");
-    }
-    return path.join(root, "sessions", sessionId, "drift-catalog.jsonl");
-}
-// =====================================================================
-// SessionEnd cleanup — paths the cleanup phase removes
-// =====================================================================
-/**
- * Per-session file paths that SessionEnd should clean up. Project-scoped
- * files (drift-catalog.jsonl) are durable across sessions and excluded.
- */
-export function sessionStateFiles(sessionId, dataRoot) {
-    return [activeTaskPath(sessionId, dataRoot), violationsPath(sessionId, dataRoot)];
-}
-//# sourceMappingURL=state.js.map

package/dist/anti-drift/state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src.legacy/anti-drift/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAepD,SAAS,cAAc,CAAC,SAAiB,EAAE,QAAiB;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,KAAsB,EACtB,UAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,UAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,EAAE,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,UAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAmBD,SAAS,cAAc,CAAC,SAAiB,EAAE,QAAiB;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,KAAqB,EACrB,UAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,UAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wEAAwE;AACxE,mDAAmD;AACnD,wEAAwE;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAA0B,EAC1B,SAAiB,EACjB,QAAiB;IAEjB,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;AACvE,CAAC;AAED,wEAAwE;AACxE,uDAAuD;AACvD,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,QAAiB;IACpE,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpF,CAAC"}

package/dist/anti-drift/state.test.js

@@ -1,120 +0,0 @@
-/**
- * Tests for anti-drift/state.ts (0.8 unified-evaluator track foundation).
- *
- * Each test uses a fresh tmpdir as dataRoot to keep tests hermetic.
- */
-import { promises as fs } from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { appendViolation, clearActiveTask, consumeViolations, driftCatalogPath, readActiveTask, sessionStateFiles, writeActiveTask, } from "./state.js";
-const SESSION = "test-session-xyz";
-let tmp;
-beforeEach(async () => {
-    tmp = await fs.mkdtemp(path.join(os.tmpdir(), "anti-drift-state-"));
-});
-afterEach(async () => {
-    await fs.rm(tmp, { recursive: true, force: true });
-});
-describe("active-task state", () => {
-    it("readActiveTask returns null when no file exists", async () => {
-        expect(await readActiveTask(SESSION, { dataRoot: tmp })).toBeNull();
-    });
-    it("writeActiveTask + readActiveTask round-trips", async () => {
-        const state = {
-            id: "11",
-            subject: "scaffold anti-drift/state.ts",
-            started_at: "2026-05-18T15:00:00.000Z",
-        };
-        await writeActiveTask(SESSION, state, { dataRoot: tmp });
-        const got = await readActiveTask(SESSION, { dataRoot: tmp });
-        expect(got).toEqual(state);
-    });
-    it("writeActiveTask is overwrite (idempotent for TaskUpdate semantics)", async () => {
-        await writeActiveTask(SESSION, { id: "11", subject: "first", started_at: "2026-05-18T15:00:00.000Z" }, { dataRoot: tmp });
-        await writeActiveTask(SESSION, { id: "11", subject: "updated", started_at: "2026-05-18T15:01:00.000Z" }, { dataRoot: tmp });
-        const got = await readActiveTask(SESSION, { dataRoot: tmp });
-        expect(got?.subject).toBe("updated");
-    });
-    it("clearActiveTask removes the file", async () => {
-        await writeActiveTask(SESSION, { id: "11", started_at: "2026-05-18T15:00:00.000Z" }, { dataRoot: tmp });
-        expect(await readActiveTask(SESSION, { dataRoot: tmp })).not.toBeNull();
-        await clearActiveTask(SESSION, { dataRoot: tmp });
-        expect(await readActiveTask(SESSION, { dataRoot: tmp })).toBeNull();
-    });
-    it("clearActiveTask is idempotent (no error when file absent)", async () => {
-        await expect(clearActiveTask(SESSION, { dataRoot: tmp })).resolves.toBeUndefined();
-    });
-    it("readActiveTask returns null on malformed JSON (fail-safe)", async () => {
-        const dir = path.join(tmp, "sessions", SESSION);
-        await fs.mkdir(dir, { recursive: true });
-        await fs.writeFile(path.join(dir, "active-task.json"), "not valid json {", "utf8");
-        expect(await readActiveTask(SESSION, { dataRoot: tmp })).toBeNull();
-    });
-    it("readActiveTask returns null on missing required fields", async () => {
-        const dir = path.join(tmp, "sessions", SESSION);
-        await fs.mkdir(dir, { recursive: true });
-        await fs.writeFile(path.join(dir, "active-task.json"), '{"subject":"no id field"}', "utf8");
-        expect(await readActiveTask(SESSION, { dataRoot: tmp })).toBeNull();
-    });
-});
-describe("violations.log", () => {
-    it("consumeViolations returns empty array when no file exists", async () => {
-        expect(await consumeViolations(SESSION, { dataRoot: tmp })).toEqual([]);
-    });
-    it("appendViolation + consumeViolations round-trips a single entry", async () => {
-        const entry = {
-            ts: "2026-05-18T15:05:00.000Z",
-            rule_id: "active-task-required",
-            verdict: "block",
-            reason: "log_phase called without an in_progress task",
-        };
-        await appendViolation(SESSION, entry, { dataRoot: tmp });
-        expect(await consumeViolations(SESSION, { dataRoot: tmp })).toEqual([entry]);
-    });
-    it("consumeViolations clears the file (atomic claim)", async () => {
-        await appendViolation(SESSION, { ts: "1", rule_id: "x", verdict: "block", reason: "y" }, { dataRoot: tmp });
-        const first = await consumeViolations(SESSION, { dataRoot: tmp });
-        expect(first.length).toBe(1);
-        // Second consume on now-empty state returns empty.
-        expect(await consumeViolations(SESSION, { dataRoot: tmp })).toEqual([]);
-    });
-    it("multiple appends accumulate", async () => {
-        await appendViolation(SESSION, { ts: "1", rule_id: "a", verdict: "block", reason: "r1" }, { dataRoot: tmp });
-        await appendViolation(SESSION, { ts: "2", rule_id: "b", verdict: "warn", reason: "r2" }, { dataRoot: tmp });
-        const got = await consumeViolations(SESSION, { dataRoot: tmp });
-        expect(got.length).toBe(2);
-        expect(got.map((e) => e.rule_id)).toEqual(["a", "b"]);
-    });
-    it("consumeViolations skips malformed lines silently", async () => {
-        const dir = path.join(tmp, "sessions", SESSION);
-        await fs.mkdir(dir, { recursive: true });
-        await fs.writeFile(path.join(dir, "violations.log"), `not json\n${JSON.stringify({ ts: "1", rule_id: "ok", verdict: "warn", reason: "real" })}\n`, "utf8");
-        const got = await consumeViolations(SESSION, { dataRoot: tmp });
-        expect(got).toHaveLength(1);
-        expect(got[0].rule_id).toBe("ok");
-    });
-});
-describe("driftCatalogPath", () => {
-    it("uses project-scoped path when projectUuid is provided", () => {
-        const got = driftCatalogPath("abc-uuid", SESSION, tmp);
-        expect(got).toBe(path.join(tmp, "projects", "abc-uuid", "drift-catalog.jsonl"));
-    });
-    it("falls back to session-scoped path when projectUuid is null", () => {
-        const got = driftCatalogPath(null, SESSION, tmp);
-        expect(got).toBe(path.join(tmp, "sessions", SESSION, "drift-catalog.jsonl"));
-    });
-});
-describe("sessionStateFiles", () => {
-    it("returns the per-session state file paths for SessionEnd cleanup", () => {
-        const got = sessionStateFiles(SESSION, tmp);
-        expect(got).toContain(path.join(tmp, "sessions", SESSION, "active-task.json"));
-        expect(got).toContain(path.join(tmp, "sessions", SESSION, "violations.log"));
-        expect(got).toHaveLength(2);
-    });
-    it("does NOT include project-scoped paths (drift-catalog.jsonl is durable across sessions)", () => {
-        const got = sessionStateFiles(SESSION, tmp);
-        expect(got.every((p) => !p.includes("/projects/"))).toBe(true);
-        expect(got.every((p) => !p.endsWith("drift-catalog.jsonl"))).toBe(true);
-    });
-});

package/dist/chat/adapters/discord.d.ts

@@ -1,41 +0,0 @@
-/**
- * Discord adapter — Gateway WebSocket via discord.js (v0.7b).
- *
- * SDK: `discord.js` v14 (npm i discord.js as optionalDependency).
- * Discord's Gateway protocol is non-trivial — heartbeats, resume
- * tokens, sharding, identify backoff, zlib decompression. Rolling our
- * own WebSocket client would be ~500 LOC of fragile protocol code.
- * One big SDK we import a few symbols from is the right tradeoff.
- *
- * Connection: outbound WebSocket via `client.login(token)`. No public
- * webhook URL. Works behind any NAT.
- *
- * Intents: `Guilds`, `GuildMessages`, `MessageContent`, `DirectMessages`
- * — forgetting DirectMessages silently drops DM events, a known
- * newcomer gotcha. MESSAGE CONTENT is a privileged intent that needs
- * to be enabled in the Developer Portal but is exempt for DMs and
- * @-mentions, so personal-bot DM use works regardless.
- *
- * Dynamic import discipline matches [[telegram-adapter]] — non-discord
- * installs pay zero cost.
- */
-import { type ChatAdapter, type MessageHandler, type OutboundMessage, type SendResult } from "../gateway.js";
-import type { DiscordConfig } from "../config.js";
-export declare class DiscordAdapter implements ChatAdapter {
-    private readonly config;
-    readonly platform: "discord";
-    private client;
-    private handlers;
-    private botUsername;
-    private botId;
-    constructor(config: DiscordConfig);
-    start(): Promise<void>;
-    shutdown(): Promise<void>;
-    onMessage(handler: MessageHandler): void;
-    send(message: OutboundMessage): Promise<SendResult>;
-    identity(): Promise<{
-        username: string;
-        nativeId: string;
-    }>;
-}
-//# sourceMappingURL=discord.d.ts.map