patchwork-os 0.2.0-beta.0 → 0.2.0-beta.10

package/dist/recipes/installer.js

@@ -1,8 +1,40 @@
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import crypto from "node:crypto";
+import { mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import path from "node:path";
 import { parse as parseYaml } from "yaml";
 import { compileRecipeFull } from "./compiler.js";
 import { parseRecipe } from "./parser.js";
+/**
+ * Atomic temp+rename for the default install write. Audit 2026-05-17:
+ * two concurrent installs of the same recipe (cross-process, e.g.
+ * dashboard + CLI racing) used to interleave bytes within the JSON
+ * payload because the previous `writeFileSync(destPath, ...)` is not
+ * atomic for sub-page writes. A torn JSON file fails to parse and the
+ * recipe becomes invisible to the scheduler.
+ *
+ * `rename` is atomic at the FS layer on every platform we ship on
+ * (apfs / ext4 / ntfs / xfs). With temp+rename, two concurrent writers
+ * each end up with their own intact file → last `rename` wins, but
+ * the file on disk is ALWAYS a valid JSON document.
+ */
+function atomicWriteSync(target, content) {
+    const tmp = `${target}.tmp.${process.pid}.${crypto
+        .randomBytes(6)
+        .toString("hex")}`;
+    try {
+        writeFileSync(tmp, content);
+        renameSync(tmp, target);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmp);
+        }
+        catch {
+            /* already gone or never created */
+        }
+        throw err;
+    }
+}
 export function installRecipeFromFile(sourcePath, opts) {
     const ext = path.extname(sourcePath).toLowerCase();
     if (ext !== ".json" && ext !== ".yaml" && ext !== ".yml") {
@@ -10,7 +42,10 @@ export function installRecipeFromFile(sourcePath, opts) {
     }
     const fs = opts.fs ?? {};
     const readFile = fs.readFile ?? ((p) => readFileSync(p, "utf-8"));
-    const writeFile = fs.writeFile ?? ((p, c) => writeFileSync(p, c));
+    // Default writer is atomic (temp+rename). Callers may inject their
+    // own writeFile (tests, in-memory fs); they are responsible for
+    // their own atomicity guarantees.
+    const writeFile = fs.writeFile ?? atomicWriteSync;
     const mkdir = fs.mkdir ?? ((p) => mkdirSync(p, { recursive: true }));
     const text = readFile(sourcePath);
     const raw = ext === ".json"
@@ -39,6 +74,17 @@ export function installRecipeFromFile(sourcePath, opts) {
         : compileRecipeFull(recipe);
     mkdir(opts.recipesDir);
     const destPath = path.join(opts.recipesDir, `${recipe.name}.json`);
+    // Belt-and-braces: parseRecipe already constrains `name` to the
+    // RECIPE_NAME_RE charset, but assert the resolved path stays inside
+    // recipesDir before writing. Defends against any future parser bypass
+    // and against callers reaching this function with a pre-parsed object
+    // that skipped parseRecipe.
+    const resolvedDir = path.resolve(opts.recipesDir);
+    const resolvedDest = path.resolve(destPath);
+    if (resolvedDest !== resolvedDir &&
+        !resolvedDest.startsWith(resolvedDir + path.sep)) {
+        throw new Error(`installRecipeFromFile: refusing to write outside recipesDir (dest=${resolvedDest} dir=${resolvedDir})`);
+    }
     let action = "created";
     try {
         readFile(destPath);

package/dist/recipes/installer.js.map

@@ -1 +1 @@
-{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/recipes/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4B1C,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,IAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,IAAI,QAAQ,SAAS,UAAU,mCAAmC,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,GACb,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,GAAG,GACP,GAAG,KAAK,OAAO;QACb,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa;QAC/B,CAAC,CAAE,SAAS,CAAC,IAAI,CAAa,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,uDAAuD;IACvD,yEAAyE;IACzE,qEAAqE;IACrE,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,aAAa,GACjB,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAmB,aAAa;QAC5C,CAAC,CAAC;YACE,OAAO,EAAE;gBACP,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,EAAE;aAC8B;YACzC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;SACvD;QACH,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC;IACnE,IAAI,MAAM,GAA2B,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAErD,+FAA+F;IAC/F,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CACpC,EAAE,WAAW,EAAE,QAAQ,CAAC,oBAAoB,EAAE,EAC9C,IAAI,EACJ,CAAC,CACF,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,QAAQ;QACvB,MAAM;QACN,eAAe;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/recipes/installer.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,MAAM;SAC/C,WAAW,CAAC,CAAC,CAAC;SACd,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5B,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AA4BD,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,IAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,IAAI,QAAQ,SAAS,UAAU,mCAAmC,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,mEAAmE;IACnE,gEAAgE;IAChE,kCAAkC;IAClC,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,IAAI,eAAe,CAAC;IAClD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,GAAG,GACP,GAAG,KAAK,OAAO;QACb,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa;QAC/B,CAAC,CAAE,SAAS,CAAC,IAAI,CAAa,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,uDAAuD;IACvD,yEAAyE;IACzE,qEAAqE;IACrE,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,aAAa,GACjB,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAmB,aAAa;QAC5C,CAAC,CAAC;YACE,OAAO,EAAE;gBACP,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,EAAE;aAC8B;YACzC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;SACvD;QACH,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE9B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC;IACnE,gEAAgE;IAChE,oEAAoE;IACpE,sEAAsE;IACtE,sEAAsE;IACtE,4BAA4B;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,IACE,YAAY,KAAK,WAAW;QAC5B,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAChD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qEAAqE,YAAY,QAAQ,WAAW,GAAG,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAA2B,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAErD,+FAA+F;IAC/F,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CACpC,EAAE,WAAW,EAAE,QAAQ,CAAC,oBAAoB,EAAE,EAC9C,IAAI,EACJ,CAAC,CACF,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,QAAQ;QACvB,MAAM;QACN,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/recipes/judgeSummary.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Judge-verdict aggregation — PR3b.
+ *
+ * Parallel to haltCategory.summariseHalts: walks a window of runs and
+ * counts judge-step verdicts (`approve` / `request_changes` /
+ * `unparseable`). Surfaces through:
+ *
+ *  - `/metrics` as `bridge_recipe_judgments{verdict="..."}` gauge
+ *  - (later) dashboard panel + session-start digest in PR3c
+ *
+ * Augment-only invariant (see judgeVerdict.ts): a `request_changes`
+ * verdict never appears as a HaltCategory and never causes
+ * `status: "error"`. This module is the *separate* channel that makes
+ * cold-eyes review visible without re-introducing gate semantics.
+ */
+import type { JudgeVerdict, JudgeVerdictKind } from "./judgeVerdict.js";
+export interface JudgeSummary {
+    /** Total step results scanned that carry a `judgeVerdict`. */
+    total: number;
+    /** Per-verdict counts; verdicts with zero hits are omitted. */
+    byVerdict: Partial<Record<JudgeVerdictKind, number>>;
+    /** Most recent 5 verdicts (with first reason) for UI surfacing. */
+    recent: Array<{
+        verdict: JudgeVerdictKind;
+        firstReason?: string;
+        runSeq: number;
+        stepId: string;
+    }>;
+}
+interface JudgeSummaryInputRun {
+    seq: number;
+    stepResults?: Array<{
+        id: string;
+        judgeVerdict?: JudgeVerdict;
+    }>;
+}
+/**
+ * Aggregate judge verdicts across a set of runs. Runs are expected to
+ * be sorted newest-first so `recent` reflects the most recent
+ * verdicts.
+ */
+export declare function summariseJudgments(runs: JudgeSummaryInputRun[]): JudgeSummary;
+/**
+ * Format a `JudgeSummary` as Prometheus text-exposition lines for the
+ * `bridge_recipe_judgments{verdict="..."} N` gauge. Returns an empty
+ * array when the summary is empty (no HELP/TYPE block so Prom scrapers
+ * don't see an orphan declaration).
+ */
+export declare function judgeSummaryToPrometheus(summary: JudgeSummary): string[];
+export {};

package/dist/recipes/judgeSummary.js

@@ -0,0 +1,47 @@
+/**
+ * Aggregate judge verdicts across a set of runs. Runs are expected to
+ * be sorted newest-first so `recent` reflects the most recent
+ * verdicts.
+ */
+export function summariseJudgments(runs) {
+    const byVerdict = {};
+    const recent = [];
+    let total = 0;
+    for (const run of runs) {
+        for (const step of run.stepResults ?? []) {
+            const v = step.judgeVerdict;
+            if (!v)
+                continue;
+            total++;
+            byVerdict[v.verdict] = (byVerdict[v.verdict] ?? 0) + 1;
+            if (recent.length < 5) {
+                recent.push({
+                    verdict: v.verdict,
+                    ...(v.reasons[0] !== undefined && { firstReason: v.reasons[0] }),
+                    runSeq: run.seq,
+                    stepId: step.id,
+                });
+            }
+        }
+    }
+    return { total, byVerdict, recent };
+}
+/**
+ * Format a `JudgeSummary` as Prometheus text-exposition lines for the
+ * `bridge_recipe_judgments{verdict="..."} N` gauge. Returns an empty
+ * array when the summary is empty (no HELP/TYPE block so Prom scrapers
+ * don't see an orphan declaration).
+ */
+export function judgeSummaryToPrometheus(summary) {
+    if (summary.total === 0)
+        return [];
+    const lines = [
+        "# HELP bridge_recipe_judgments Recipe judge-step verdicts in the in-memory run-log window, by verdict",
+        "# TYPE bridge_recipe_judgments gauge",
+    ];
+    for (const [verdict, count] of Object.entries(summary.byVerdict)) {
+        lines.push(`bridge_recipe_judgments{verdict="${verdict}"} ${count}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=judgeSummary.js.map

package/dist/recipes/judgeSummary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judgeSummary.js","sourceRoot":"","sources":["../../src/recipes/judgeSummary.ts"],"names":[],"mappings":"AAuCA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,MAAM,SAAS,GAA8C,EAAE,CAAC;IAChE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YAC5B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,KAAK,EAAE,CAAC;YACR,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,MAAM,EAAE,GAAG,CAAC,GAAG;oBACf,MAAM,EAAE,IAAI,CAAC,EAAE;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAqB;IAC5D,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,KAAK,GAAa;QACtB,uGAAuG;QACvG,sCAAsC;KACvC,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,oCAAoC,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/recipes/judgeVerdict.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Judge verdict — PR3a.
+ *
+ * Parses a free-form agent response into a structured `JudgeVerdict`.
+ * The judge prompt convention asks the model to end its response with
+ * a JSON object of the form:
+ *
+ *   {"verdict": "approve" | "request_changes",
+ *    "reasons": ["..."],
+ *    "fixList": ["..."]}
+ *
+ * The parser walks back from the end of the string, finds the last
+ * JSON object, and validates its shape. On any failure we record the
+ * verdict as `unparseable` and keep the raw text — the runner *never*
+ * throws on a malformed judge response.
+ *
+ * **Augment-only invariant** — see the file-level comment in
+ * yamlRunner.ts. The verdict shape is intentionally separate from
+ * `StepResult.status`: a `request_changes` verdict produces
+ * `status: "ok"` with a stashed verdict, never `status: "error"`.
+ * That separation is what prevents the judge step from quietly
+ * becoming a gate.
+ */
+export type JudgeVerdictKind = "approve" | "request_changes" | "unparseable";
+export interface JudgeVerdict {
+    verdict: JudgeVerdictKind;
+    /** Short bullet points; empty when unparseable. */
+    reasons: string[];
+    /** Optional fix-list when `verdict: "request_changes"`. */
+    fixList?: string[];
+    /** Original model text when parsing failed (or for audit). */
+    raw?: string;
+}
+/**
+ * Append to the judge prompt to elicit the structured tail. Kept short
+ * so it doesn't crowd out the user-provided prompt body.
+ */
+export declare const JUDGE_PROMPT_SUFFIX = "\n\nYou are a cold-eyes reviewer. Respond with a brief assessment, then end\nwith a single JSON object on its own line:\n\n{\"verdict\": \"approve\" | \"request_changes\", \"reasons\": [\"...\"], \"fixList\": [\"...\"]}\n\nThe \"fixList\" is optional and only relevant when requesting changes.\nOutput only the JSON object as the final line.";
+/**
+ * Build the artefact-injection block for a judge step that has a
+ * `reviews: <stepId>` reference. Returns an empty string when no
+ * artefact is available; the judge then sees the prompt as-is.
+ */
+export declare function buildJudgeArtefactBlock(artefact: unknown): string;
+/**
+ * Parse an agent response into a `JudgeVerdict`. Never throws.
+ */
+export declare function parseJudgeVerdict(text: string): JudgeVerdict;

package/dist/recipes/judgeVerdict.js

@@ -0,0 +1,174 @@
+/**
+ * Judge verdict — PR3a.
+ *
+ * Parses a free-form agent response into a structured `JudgeVerdict`.
+ * The judge prompt convention asks the model to end its response with
+ * a JSON object of the form:
+ *
+ *   {"verdict": "approve" | "request_changes",
+ *    "reasons": ["..."],
+ *    "fixList": ["..."]}
+ *
+ * The parser walks back from the end of the string, finds the last
+ * JSON object, and validates its shape. On any failure we record the
+ * verdict as `unparseable` and keep the raw text — the runner *never*
+ * throws on a malformed judge response.
+ *
+ * **Augment-only invariant** — see the file-level comment in
+ * yamlRunner.ts. The verdict shape is intentionally separate from
+ * `StepResult.status`: a `request_changes` verdict produces
+ * `status: "ok"` with a stashed verdict, never `status: "error"`.
+ * That separation is what prevents the judge step from quietly
+ * becoming a gate.
+ */
+/**
+ * Append to the judge prompt to elicit the structured tail. Kept short
+ * so it doesn't crowd out the user-provided prompt body.
+ */
+export const JUDGE_PROMPT_SUFFIX = `
+
+You are a cold-eyes reviewer. Respond with a brief assessment, then end
+with a single JSON object on its own line:
+
+{"verdict": "approve" | "request_changes", "reasons": ["..."], "fixList": ["..."]}
+
+The "fixList" is optional and only relevant when requesting changes.
+Output only the JSON object as the final line.`;
+/**
+ * Build the artefact-injection block for a judge step that has a
+ * `reviews: <stepId>` reference. Returns an empty string when no
+ * artefact is available; the judge then sees the prompt as-is.
+ */
+export function buildJudgeArtefactBlock(artefact) {
+    if (artefact === undefined || artefact === null)
+        return "";
+    let body;
+    if (typeof artefact === "string") {
+        body = artefact;
+    }
+    else {
+        try {
+            body = JSON.stringify(artefact, null, 2);
+            // `JSON.stringify` returns `undefined` for functions / symbols /
+            // top-level BigInt — the artefact block becomes
+            // `<artefact>\nundefined\n</artefact>` which is misleading. Fall
+            // back to a marker so downstream readers can spot the gap.
+            if (body === undefined)
+                body = "[unserialisable artefact]";
+        }
+        catch {
+            // Circular references, BigInt inside the object graph, or any
+            // toJSON throwing. The judge step must never propagate this out
+            // of the prompt builder — augment-only invariant.
+            body = "[unserialisable artefact]";
+        }
+    }
+    return `\n\n<artefact>\n${body}\n</artefact>`;
+}
+/**
+ * Walk `text` forward and emit `[start, endInclusive]` ranges for every
+ * balanced top-level `{...}` block, respecting JSON string syntax so a
+ * `}` inside a string doesn't offset the brace depth.
+ *
+ * The original implementation walked back from `lastIndexOf("}")` and
+ * counted braces literally. A judge response of the shape
+ * `Consider this snippet: { x: "} oops" }` would be miscounted — the
+ * `}` inside the string would close depth too early and the candidate
+ * slice would JSON.parse-fail, returning `unparseable` for an
+ * otherwise-legitimate verdict trailer.
+ */
+function findBalancedObjectRanges(text) {
+    const ranges = [];
+    let depth = 0;
+    let start = -1;
+    let inString = false;
+    let escaped = false;
+    for (let i = 0; i < text.length; i++) {
+        const ch = text[i];
+        if (inString) {
+            if (escaped) {
+                escaped = false;
+            }
+            else if (ch === "\\") {
+                escaped = true;
+            }
+            else if (ch === '"') {
+                inString = false;
+            }
+            continue;
+        }
+        if (ch === '"') {
+            inString = true;
+            continue;
+        }
+        if (ch === "{") {
+            if (depth === 0)
+                start = i;
+            depth++;
+        }
+        else if (ch === "}") {
+            depth--;
+            if (depth === 0 && start !== -1) {
+                ranges.push([start, i]);
+                start = -1;
+            }
+            if (depth < 0) {
+                // Stray closing brace — reset so we don't underflow.
+                depth = 0;
+                start = -1;
+            }
+        }
+    }
+    return ranges;
+}
+/**
+ * Parse an agent response into a `JudgeVerdict`. Never throws.
+ */
+export function parseJudgeVerdict(text) {
+    const trimmed = text.trim();
+    if (trimmed.length === 0) {
+        return {
+            verdict: "unparseable",
+            reasons: [],
+            raw: text,
+        };
+    }
+    // Collect every balanced `{...}` range, then try them last-to-first
+    // so the JSON tail wins over an in-prose snippet earlier in the
+    // response.
+    const ranges = findBalancedObjectRanges(trimmed);
+    for (let i = ranges.length - 1; i >= 0; i--) {
+        const range = ranges[i];
+        if (!range)
+            continue;
+        const [s, e] = range;
+        const candidate = trimmed.slice(s, e + 1);
+        let parsed;
+        try {
+            parsed = JSON.parse(candidate);
+        }
+        catch {
+            continue;
+        }
+        if (!parsed || typeof parsed !== "object")
+            continue;
+        const obj = parsed;
+        const verdictRaw = obj.verdict;
+        if (verdictRaw !== "approve" && verdictRaw !== "request_changes") {
+            continue;
+        }
+        const reasons = Array.isArray(obj.reasons)
+            ? obj.reasons.filter((r) => typeof r === "string")
+            : [];
+        const fixList = Array.isArray(obj.fixList)
+            ? obj.fixList.filter((r) => typeof r === "string")
+            : undefined;
+        return {
+            verdict: verdictRaw,
+            reasons,
+            ...(fixList && fixList.length > 0 && { fixList }),
+        };
+    }
+    return { verdict: "unparseable", reasons: [], raw: text };
+}
+//# sourceMappingURL=judgeVerdict.js.map

package/dist/recipes/judgeVerdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judgeVerdict.js","sourceRoot":"","sources":["../../src/recipes/judgeVerdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAcH;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;+CAQY,CAAC;AAEhD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3D,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACzC,iEAAiE;YACjE,gDAAgD;YAChD,iEAAiE;YACjE,2DAA2D;YAC3D,IAAI,IAAI,KAAK,SAAS;gBAAE,IAAI,GAAG,2BAA2B,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,gEAAgE;YAChE,kDAAkD;YAClD,IAAI,GAAG,2BAA2B,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,IAAI,eAAe,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;iBAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACtB,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,KAAK,KAAK,CAAC;gBAAE,KAAK,GAAG,CAAC,CAAC;YAC3B,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxB,KAAK,GAAG,CAAC,CAAC,CAAC;YACb,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,qDAAqD;gBACrD,KAAK,GAAG,CAAC,CAAC;gBACV,KAAK,GAAG,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,EAAE;YACX,GAAG,EAAE,IAAI;SACV,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,gEAAgE;IAChE,YAAY;IACZ,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACjD,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACrB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACpD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;QAC/B,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;YACjE,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/D,CAAC,CAAC,SAAS,CAAC;QACd,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,OAAO;YACP,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC"}

package/dist/recipes/migrations/index.d.ts

@@ -1,6 +1,14 @@
 import type { WarnFn } from "./types.js";
 export type { RecipeMigration, WarnFn } from "./types.js";
 export { v1Migration } from "./v1.js";
+/**
+ * Default deprecation-warning sink for the runtime/validation/fmt callers.
+ * Forwards to `console.warn` outside of tests so users see migration
+ * prompts in CLI output, but stays silent under vitest so the dozens of
+ * intentional legacy-shape regression fixtures don't flood stderr. Tests
+ * that need to assert warnings still pass their own `vi.fn()` directly.
+ */
+export declare const defaultDeprecationWarn: WarnFn;
 /** apiVersion produced by the most recent migration. */
 export declare const CURRENT_API_VERSION = "patchwork.sh/v1";
 export interface MigrationResult {
@@ -22,3 +30,4 @@ export interface MigrationResult {
  *   through unchanged so downstream schema lint can flag it).
  */
 export declare function migrateRecipeToCurrent(recipe: unknown, warn?: WarnFn): MigrationResult;
+export declare function normalizeRecipeForRuntime(recipe: unknown, warn?: WarnFn): unknown;

package/dist/recipes/migrations/index.js

@@ -1,5 +1,17 @@
 import { v1Migration } from "./v1.js";
 export { v1Migration } from "./v1.js";
+/**
+ * Default deprecation-warning sink for the runtime/validation/fmt callers.
+ * Forwards to `console.warn` outside of tests so users see migration
+ * prompts in CLI output, but stays silent under vitest so the dozens of
+ * intentional legacy-shape regression fixtures don't flood stderr. Tests
+ * that need to assert warnings still pass their own `vi.fn()` directly.
+ */
+export const defaultDeprecationWarn = (msg) => {
+    if (process.env.VITEST || process.env.NODE_ENV === "test")
+        return;
+    console.warn(msg);
+};
 /** apiVersion produced by the most recent migration. */
 export const CURRENT_API_VERSION = "patchwork.sh/v1";
 /**
@@ -52,4 +64,125 @@ export function migrateRecipeToCurrent(recipe, warn) {
     }
     return { recipe: current, applied };
 }
+// ---------------------------------------------------------------------------
+// Field-level legacy normalisation (formerly legacyRecipeCompat.ts)
+//
+// These functions accept recipes in any historical shape and produce the
+// current canonical shape.  They run alongside the apiVersion migration
+// chain above.
+// ---------------------------------------------------------------------------
+export function normalizeRecipeForRuntime(recipe, warn) {
+    if (!isRecord(recipe)) {
+        return recipe;
+    }
+    // Apply apiVersion migrations first so downstream field-level
+    // legacy compat operates on a recipe stamped with the current
+    // apiVersion (and so the deprecation warning for missing
+    // apiVersion fires once per call).
+    const migrated = migrateRecipeToCurrent(recipe, warn).recipe;
+    const source = isRecord(migrated) ? migrated : recipe;
+    const normalized = {
+        ...source,
+    };
+    if (isRecord(normalized.trigger)) {
+        normalized.trigger = normalizeLegacyTriggerForRuntime(normalized.trigger, warn);
+    }
+    if (Array.isArray(normalized.steps)) {
+        normalized.steps = normalized.steps.map((step) => normalizeLegacyRuntimeStep(step, warn));
+    }
+    return normalized;
+}
+function normalizeLegacyTriggerForRuntime(trigger, warn) {
+    const normalized = { ...trigger };
+    if (normalized.type === "cron" &&
+        typeof normalized.schedule === "string" &&
+        typeof normalized.at !== "string") {
+        warn?.("Deprecated recipe field: trigger.schedule — rename to trigger.at (will be removed in a future major version)");
+        normalized.at = normalized.schedule;
+    }
+    delete normalized.schedule;
+    return normalized;
+}
+function normalizeLegacyRuntimeStep(step, warn) {
+    if (!isRecord(step)) {
+        return step;
+    }
+    const normalized = {};
+    for (const [key, value] of Object.entries(step)) {
+        if (key === "params" || key === "output" || key === "prompt") {
+            continue;
+        }
+        if (key === "agent" && typeof value === "boolean") {
+            continue;
+        }
+        if (key === "parallel" && Array.isArray(value)) {
+            normalized.parallel = value.map((entry) => normalizeLegacyRuntimeStep(entry, warn));
+            continue;
+        }
+        if (key === "branch" && Array.isArray(value)) {
+            normalized.branch = value.map((entry) => normalizeLegacyBranchEntry(entry, warn));
+            continue;
+        }
+        normalized[key] = value;
+    }
+    if (step.agent === true || isRecord(step.agent)) {
+        const agentConfig = isRecord(step.agent)
+            ? { ...step.agent }
+            : {};
+        if (typeof step.prompt === "string" &&
+            typeof agentConfig.prompt !== "string") {
+            warn?.("Deprecated recipe step field: prompt at step level — move to step.agent.prompt (will be removed in a future major version)");
+            agentConfig.prompt = step.prompt;
+        }
+        if (typeof step.output === "string" &&
+            typeof agentConfig.into !== "string") {
+            warn?.("Deprecated recipe step field: output — use step.agent.into instead (will be removed in a future major version)");
+            agentConfig.into = step.output;
+        }
+        if (step.agent === true) {
+            warn?.("Deprecated recipe step field: agent: true — use agent: { prompt, into } object instead (will be removed in a future major version)");
+        }
+        normalized.agent = agentConfig;
+        return normalized;
+    }
+    if (isRecord(step.params)) {
+        warn?.("Deprecated recipe step field: params — inline fields directly on the step (will be removed in a future major version)");
+        Object.assign(normalized, step.params);
+    }
+    if (typeof normalized.recipe !== "string" &&
+        typeof normalized.chain === "string") {
+        warn?.("Deprecated recipe step field: chain — rename to recipe (will be removed in a future major version)");
+        normalized.recipe = normalized.chain;
+    }
+    delete normalized.chain;
+    if (typeof normalized.into !== "string" && typeof step.output === "string") {
+        warn?.("Deprecated recipe step field: output — rename to into (will be removed in a future major version)");
+        normalized.into = step.output;
+    }
+    if (normalized.tool === "file.append" &&
+        typeof normalized.content !== "string" &&
+        typeof normalized.line === "string") {
+        warn?.("Deprecated recipe step field: line (file.append) — rename to content (will be removed in a future major version)");
+        normalized.content = normalized.line;
+        delete normalized.line;
+    }
+    return normalized;
+}
+function normalizeLegacyBranchEntry(entry, warn) {
+    if (!isRecord(entry)) {
+        return entry;
+    }
+    const normalized = {};
+    for (const [key, value] of Object.entries(entry)) {
+        if (key === "otherwise" && isRecord(value)) {
+            normalized.otherwise = normalizeLegacyRuntimeStep(value, warn);
+            continue;
+        }
+        normalized[key] = value;
+    }
+    if (Object.hasOwn(normalized, "otherwise")) {
+        return normalized;
+    }
+    return normalizeLegacyRuntimeStep(entry, warn);
+}
 //# sourceMappingURL=index.js.map

package/dist/recipes/migrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/recipes/migrations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD;;;GAGG;AACH,MAAM,QAAQ,GAAmC,CAAC,WAAW,CAAC,CAAC;AAS/D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,OAAO,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAe,EACf,IAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,+DAA+D;IAC/D,6BAA6B;IAC7B,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;YACpC,MAAM;QACR,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,gEAAgE;YAChE,6DAA6D;YAC7D,oCAAoC;YACpC,MAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,eAAe,OAAO,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/recipes/migrations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAW,CAAC,GAAG,EAAE,EAAE;IACpD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO;IAClE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD;;;GAGG;AACH,MAAM,QAAQ,GAAmC,CAAC,WAAW,CAAC,CAAC;AAS/D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,OAAO,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAe,EACf,IAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,+DAA+D;IAC/D,6BAA6B;IAC7B,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;YACpC,MAAM;QACR,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,gEAAgE;YAChE,6DAA6D;YAC7D,oCAAoC;YACpC,MAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,eAAe,OAAO,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,oEAAoE;AACpE,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,eAAe;AACf,8EAA8E;AAE9E,MAAM,UAAU,yBAAyB,CACvC,MAAe,EACf,IAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8DAA8D;IAC9D,8DAA8D;IAC9D,yDAAyD;IACzD,mCAAmC;IACnC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAEtD,MAAM,UAAU,GAA4B;QAC1C,GAAG,MAAM;KACV,CAAC;IAEF,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,UAAU,CAAC,OAAO,GAAG,gCAAgC,CACnD,UAAU,CAAC,OAAO,EAClB,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CACvC,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gCAAgC,CACvC,OAAgC,EAChC,IAAa;IAEb,MAAM,UAAU,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE3D,IACE,UAAU,CAAC,IAAI,KAAK,MAAM;QAC1B,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;QACvC,OAAO,UAAU,CAAC,EAAE,KAAK,QAAQ,EACjC,CAAC;QACD,IAAI,EAAE,CACJ,8GAA8G,CAC/G,CAAC;QACF,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED,OAAO,UAAU,CAAC,QAAQ,CAAC;IAE3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAa,EAAE,IAAa;IAC9D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,CACxC,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,CACxC,CAAC;YACF,SAAS;QACX,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,WAAW,GAA4B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/D,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;YACnB,CAAC,CAAC,EAAE,CAAC;QAEP,IACE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,EACtC,CAAC;YACD,IAAI,EAAE,CACJ,4HAA4H,CAC7H,CAAC;YACF,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,CAAC;QAED,IACE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,EACpC,CAAC;YACD,IAAI,EAAE,CACJ,gHAAgH,CACjH,CAAC;YACF,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACjC,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,EAAE,CACJ,oIAAoI,CACrI,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,KAAK,GAAG,WAAW,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,EAAE,CACJ,uHAAuH,CACxH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,IACE,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ;QACrC,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EACpC,CAAC;QACD,IAAI,EAAE,CACJ,oGAAoG,CACrG,CAAC;QACF,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACvC,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAExB,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3E,IAAI,EAAE,CACJ,mGAAmG,CACpG,CAAC;QACF,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,IACE,UAAU,CAAC,IAAI,KAAK,aAAa;QACjC,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QACtC,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,EACnC,CAAC;QACD,IAAI,EAAE,CACJ,kHAAkH,CACnH,CAAC;QACF,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC;QACrC,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAE,IAAa;IAC/D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,GAAG,KAAK,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,SAAS,GAAG,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/D,SAAS;QACX,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/recipes/names.d.ts

@@ -21,6 +21,26 @@
  * regex (which disagreed with the schema by also allowing `_`).
  */
 export declare const RECIPE_NAME_RE: RegExp;
+/**
+ * Strip a registry scope from a recipe name.
+ *
+ * Marketplace registry recipes carry a *scoped* name in their
+ * `recipe.json` (`@patchworkos/sprint-review-prep`) but the bridge
+ * stores recipes on disk under the bare, unscoped kebab slug. The
+ * recipe YAML `name:` should be the bare slug, but registry data
+ * historically shipped the scoped form there too — which fails the
+ * `RECIPE_NAME_RE` kebab check at install time.
+ *
+ * This normalizes either shape to the last `/`-delimited segment:
+ *   - `@patchworkos/sprint-review-prep` → `sprint-review-prep`
+ *   - `patchworkos/sprint-review-prep`  → `sprint-review-prep`
+ *   - `sprint-review-prep`              → `sprint-review-prep` (unchanged)
+ *
+ * Only the `@scope/` prefix is forgiven — the resulting slug is still
+ * validated by `RECIPE_NAME_RE` downstream, so a genuinely-invalid
+ * name (`@bad/UPPER`, `../escape`, empty) still fails.
+ */
+export declare function stripRecipeScope(name: string): string;
 /**
  * Canonical variable-name regex (for `trigger.vars[].name` and
  * `trigger.inputs[].name`). Mirrors the runtime template-reference

package/dist/recipes/names.js

@@ -21,6 +21,31 @@
  * regex (which disagreed with the schema by also allowing `_`).
  */
 export const RECIPE_NAME_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+/**
+ * Strip a registry scope from a recipe name.
+ *
+ * Marketplace registry recipes carry a *scoped* name in their
+ * `recipe.json` (`@patchworkos/sprint-review-prep`) but the bridge
+ * stores recipes on disk under the bare, unscoped kebab slug. The
+ * recipe YAML `name:` should be the bare slug, but registry data
+ * historically shipped the scoped form there too — which fails the
+ * `RECIPE_NAME_RE` kebab check at install time.
+ *
+ * This normalizes either shape to the last `/`-delimited segment:
+ *   - `@patchworkos/sprint-review-prep` → `sprint-review-prep`
+ *   - `patchworkos/sprint-review-prep`  → `sprint-review-prep`
+ *   - `sprint-review-prep`              → `sprint-review-prep` (unchanged)
+ *
+ * Only the `@scope/` prefix is forgiven — the resulting slug is still
+ * validated by `RECIPE_NAME_RE` downstream, so a genuinely-invalid
+ * name (`@bad/UPPER`, `../escape`, empty) still fails.
+ */
+export function stripRecipeScope(name) {
+    if (typeof name !== "string" || !name.includes("/"))
+        return name;
+    const segments = name.split("/");
+    return segments[segments.length - 1] ?? name;
+}
 /**
  * Canonical variable-name regex (for `trigger.vars[].name` and
  * `trigger.inputs[].name`). Mirrors the runtime template-reference