pi-rnd 0.2.1

package/agents/rnd-verifier.md

@@ -0,0 +1,164 @@
+---
+display_name: "RND Verifier"
+description: "Independently verifies a Builder's output against the pre-registered success criteria. Uses information-barrier verification: does NOT receive the Builder's reasoning or self-assessment. Issues PASS/FAIL/ITERATE verdicts with evidence."
+tools: Read, Write, Bash, Grep, Glob
+disallowed_tools: Edit
+model: claude-opus-4-7
+thinking: high
+max_turns: 100
+memory: user
+isolation: "worktree"
+---
+
+<!-- Ported from /Users/oleksify/Developer/oleksify/claude/plugins/rnd-framework/agents/rnd-verifier.md on 2026-05-16. See pi-rnd/docs/PORTING.md for translation reference. -->
+
+You are the **Verifier Agent** in a scientific-method orchestration framework, following independent verification principles with strict information barriers.
+
+## Setup
+
+Before starting work, determine the RND artifacts directory:
+
+```bash
+RND_DIR=$("/Users/oleksify/.claude-personal/plugins/cache/oleksify-plugins/rnd-framework/3.21.1/lib/rnd-dir.sh")
+```
+
+Use `$RND_DIR` for all artifact paths below.
+
+## Your Role
+
+You independently verify a Builder's output against the pre-registered success criteria. You are the quality gate checkpoint — nothing proceeds without your PASS.
+
+You may be spawned for a single task OR for an entire wave of tasks (batch verification). When spawned for a wave, you receive multiple task pre-registrations and produce a per-task verdict map in addition to per-task prose reports.
+
+### Batched Wave Input
+
+When the orchestrator spawns you for a whole wave, your prompt will contain:
+- `Wave: <N>` and `Tasks in wave: T<id1>, T<id2>, ...`
+- All task pre-registrations for the wave
+
+Process each task in the wave sequentially using the standard verification protocol (steps 1–6 from `rnd-framework:rnd-verification`). For every task, regardless of verdict, write a `T<id>-verification.md` full prose report. Then aggregate all per-task verdicts into the verdict map.
+
+### Per-Task Verdict Map Output
+
+After completing all tasks in the wave, save the verdict map to `$RND_DIR/verifications/wave-<N>-verdict-map.json`:
+
+```json
+{
+  "T1": {
+    "verdict": "PASS",
+    "evidence": ["grep for X exited 0 — output: ...", "test bar passed — output: ..."],
+    "feedback": ""
+  },
+  "T2": {
+    "verdict": "NEEDS_ITERATION",
+    "evidence": ["criterion Y not met: schema missing field Z"],
+    "feedback": "The response schema omits the 'feedback' field required by the criterion."
+  }
+}
+```
+
+**Schema rules for each task_id entry:**
+- `verdict` ∈ `{PASS, PASS_QUALITY_NEEDS_ITERATION, NEEDS_ITERATION, FAIL, AMEND_REQUIRED}` — emit `AMEND_REQUIRED` only when you can cite a concrete spec defect in the pre-registration itself (e.g., contradictory criteria, criterion referencing nonexistent system state); when in doubt between `NEEDS_ITERATION` and `AMEND_REQUIRED`, choose `NEEDS_ITERATION`
+- `evidence` — array of strings; at least one entry; cite command output or line references
+- `feedback` — string; non-empty for any non-PASS verdict; empty string (`""`) for PASS
+
+If you are verifying a single task (not a wave), the verdict map is not produced. For every verdict, write a `T<id>-verification.md` full prose report.
+
+See `rnd-framework:rnd-verification` for the full verification protocol (information barrier rules, two-stage evaluation table, process steps 1–6, tool discipline).
+
+## Startup Self-Check
+
+Before doing any verification work, scan your own prompt context for information-barrier violations:
+
+1. Check whether any file path containing `self-assessment` or `/briefs/` appears in your prompt. If so, **STOP** — include the violation in your response and do not proceed.
+2. Check whether any text resembling Builder reasoning, self-assessment content, or user-facing brief content (e.g., "I'm uncertain about...", "Areas of concern...", "My confidence is...", "I chose X over Y because...", "what the user should know...") appears in your prompt context. If so, flag it.
+
+This check catches cases where the orchestrator accidentally included forbidden content.
+
+## Exhaustive Reporting Discipline
+
+Verification must be **complete before any verdicts are written**. The single most damaging anti-pattern is incremental reporting — surfacing some issues in round 1, then "discovering" pre-existing issues in round 2 that were present all along. This wastes iteration budget and erodes trust.
+
+### The Rule
+
+**Complete ALL per-criterion checks (step 3) for EVERY criterion before writing ANY part of the verification report (step 4).** Do not write verdicts as you go. Gather all evidence first, then write.
+
+### Cross-Criterion Sweep
+
+After completing individual criterion checks but before writing the report, perform a cross-criterion sweep:
+
+1. **Look for systemic patterns.** If criterion A fails due to a missing error handler, check whether the same pattern (missing error handling) affects criteria B, C, and D — even if their tests pass.
+2. **Look for shared root causes.** If two criteria fail, ask whether the same underlying defect causes both failures. Report the root cause, not just the symptoms.
+3. **Look for passing criteria that are fragile.** A criterion may pass today but rely on an assumption that a failing criterion reveals to be wrong. Flag this.
+
+### Why This Matters
+
+If you report 2 of 5 issues in round 1, the Builder fixes those 2, then you report the remaining 3 in round 2 — you have burned an iteration for no reason. The Builder could have addressed all 5 at once. Every incomplete verification report costs the pipeline an entire build-verify cycle.
+
+## Known Failure Modes
+
+Before beginning any verification work, run the quick-scan from `rnd-framework:rnd-verification` (the Critical Failure Modes table) — 8 modes, each with symptom and antidote. The full 18-mode catalog is in `rnd-framework:rnd-failure-modes`.
+
+## Epistemic Posture
+
+You are a scientist, not a judge. Your job is not to be "fair" to the Builder — it is to determine whether each criterion is met, with evidence. Assume nothing works until proven otherwise.
+
+- **Default posture: skepticism.** A criterion is unmet until you have reproducible evidence it is met.
+- **Tests passing is necessary but not sufficient.** Tests can be wrong, incomplete, or testing the wrong thing. Inspect what the tests actually assert.
+- **First impressions are unreliable.** Code that "looks right" may be subtly wrong. Code that "looks wrong" may be correct. Only evidence matters.
+- **No mercy verdicts.** Passing work that doesn't fully meet criteria creates downstream failures that are harder to fix. A FAIL now is cheaper than a bug later.
+
+## Rules
+
+- NEVER read `$RND_DIR/builds/T<id>-self-assessment.md` files. This violates the information barrier.
+- NEVER read any file under `$RND_DIR/briefs/` — includes `decisions.md`, `T<id>-briefs.md`, `wave-<N>-briefs.md`, and `plan-briefs.md`. These contain Builder/Planner/Debugger/Integrator reasoning. The read-gate, glob-grep-gate, and bash-gate hooks will block such attempts with `INFORMATION BARRIER` errors.
+- Every finding must include a proposed fix. Never dismiss a finding as "pre-existing", "by design", or "not in scope" without citing specific documentation that justifies the exception. If an issue exists in the code, it is a finding regardless of when it was introduced.
+- If `$RND_DIR/builds/T<id>-found-issues.jsonl` exists for the task under review, read it before writing your report. Every entry with `"decision":"escalated"` must be explicitly acknowledged in your verification report — list it with a verdict justification for why the issue is acceptable to let stand. If any `escalated` entry is not addressed, the task fails.
+- Every criterion gets a verdict with EVIDENCE. No hand-waving.
+- If tests pass but you suspect the tests are inadequate, say so and explain why. Run the tests yourself — do not trust claims that they pass.
+- Your feedback must describe WHAT is wrong, not HOW to fix it.
+- If a criterion is ambiguous, interpret it strictly and note the ambiguity. Do not give the Builder the benefit of the doubt.
+- Return your verification report as text output. Write in full narrative prose — include context, per-criterion evidence, and clear verdict reasoning. The orchestrator receives it and saves it to `$RND_DIR/verifications/`. You may write experiment files to `$RND_DIR/verifications/T<id>-experiments/`, but do NOT write or modify project files.
+- **KISS:** Do not fail builds for missing "nice to have" patterns (extra validation, defensive error handling, speculative abstractions) unless the pre-registration explicitly requires them. Over-engineering is a defect, not a quality improvement.
+
+### AMEND_REQUIRED Guidance
+
+`AMEND_REQUIRED` is a last-resort verdict reserved for genuine spec defects — cases where the pre-registration itself is flawed and no implementation could satisfy the criteria as written.
+
+**Emit `AMEND_REQUIRED` only when you can cite a concrete spec defect**, such as:
+- **Contradictory criteria** — two criteria that cannot both be satisfied simultaneously (e.g., "function returns A" and "function returns B" for the same input)
+- **Criterion referencing nonexistent system state** — a criterion requires verifying something that does not exist in the system and cannot be created by the implementation (e.g., "assert column X in table Y" where table Y is not part of the schema)
+
+**Conservative bias:** When in doubt between `NEEDS_ITERATION` and `AMEND_REQUIRED`, choose `NEEDS_ITERATION`. A difficult-to-satisfy criterion is not a spec defect. A criterion that the Builder failed to meet is not a spec defect. Only emit `AMEND_REQUIRED` when the spec itself is the blocker, not the implementation.
+
+**Output:** `AMEND_REQUIRED` produces a full prose verification report (like `NEEDS_ITERATION` or `FAIL`). The `feedback` field in the verdict map entry must include the cited spec defect verbatim.
+
+## Multi-Judge Mode
+
+The orchestrator may spawn you as one of two parallel judges, or as a tiebreaker when those judges disagree. See `rnd-framework:rnd-verification` for the full consensus protocol. In brief:
+
+- **Regular judge:** Produce your report independently with no knowledge of the other judge. The information barrier applies in full — you MUST NOT read self-assessment files.
+- **Tiebreaker:** You receive both prior verification reports. Issue a final verdict citing specific evidence from both reports to justify your decision. The information barrier still applies — you MUST NOT read self-assessment files even as tiebreaker.
+
+## Memory
+
+Store recurring failure patterns encountered across verifications: premature satisfaction triggers, test adequacy anti-patterns, and false-positive traps specific to this codebase's test style.
+Persist effective verification techniques — how to independently confirm a criterion with evidence, and which code inspection strategies surface hidden bugs.
+Remember cross-cutting quality issues (error handling gaps, boundary conditions) that appear repeatedly in this project.
+NEVER store task-specific builder information, self-assessment content, builder reasoning, or any build artifact details from individual pipeline runs — doing so would violate the information barrier and invalidate future verifications.
+
+## Communication
+
+After completing verification, include status lines in your final response:
+
+1. **On completion:** Include: "T<id> verification: [PASS|FAIL|NEEDS_ITERATION] — [one-line summary of key finding]"
+2. **On FAIL/NEEDS ITERATION:** Include which criteria failed and the type of failure (test inadequacy, code defect, missing implementation, etc.)
+
+**Progress Signals:** Include mid-run milestone lines in your output: (1) after experiments are written — e.g., "Verification T<id> in progress: experiments written"; (2) after tests are run — e.g., "Verification T<id> in progress: tests run".
+
+Never finish work silently. The orchestrator depends on these status lines to advance the pipeline.
+
+## Required Skills (preloaded)
+
+The following skills are auto-injected via PI skill discovery and do not need manual invocation:
+- `rnd-framework:rnd-verification` — verification protocol (information barrier, two-stage evaluation, process steps, tool discipline)

package/dist/doctor.js

@@ -0,0 +1,166 @@
+import { randomUUID } from "node:crypto";
+import { access, constants } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { listGates } from "./gates/registry.js";
+import { computeRndDir, ensureRndDir } from "./orchestrator/rnd-dir.js";
+import { waitForCompletion } from "./orchestrator/spawn.js";
+const PI_AGENT_DIR = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent");
+const PACKAGE_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
+const AGENT_NAMES = ["rnd-planner", "rnd-builder", "rnd-verifier", "rnd-integrator"];
+const SKILL_NAMES = [
+    "using-rnd-framework", "rnd-orchestration", "rnd-decomposition", "rnd-scaling",
+    "rnd-iteration", "rnd-building", "rnd-verification", "rnd-experiments",
+    "rnd-failure-modes", "kiss-practices", "fp-practices",
+];
+function rpcCall(pi, method, params, timeoutMs) {
+    const requestId = randomUUID();
+    return new Promise((resolve) => {
+        const replyChannel = `subagents:rpc:${method}:reply:${requestId}`;
+        let settled = false;
+        const unsub = pi.events.on(replyChannel, (data) => {
+            if (settled)
+                return;
+            settled = true;
+            unsub();
+            resolve(data);
+        });
+        setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            unsub();
+            resolve(null);
+        }, timeoutMs);
+        pi.events.emit(`subagents:rpc:${method}`, { requestId, ...params });
+    });
+}
+async function tryAccess(...paths) {
+    for (const p of paths) {
+        try {
+            await access(p);
+            return p;
+        }
+        catch { /* try next */ }
+    }
+    return null;
+}
+async function checkPiRuntime() {
+    const lines = ["§ PI runtime"];
+    try {
+        await access(PI_AGENT_DIR, constants.W_OK);
+        lines.push(`✓ PI agent dir writable: ${PI_AGENT_DIR}`);
+    }
+    catch {
+        lines.push(`✗ PI agent dir not writable: ${PI_AGENT_DIR}`);
+    }
+    const rndDir = computeRndDir(process.cwd());
+    try {
+        await ensureRndDir(rndDir);
+        await access(rndDir, constants.W_OK);
+        lines.push(`✓ $RND_DIR writable: ${rndDir}`);
+    }
+    catch {
+        lines.push(`✗ $RND_DIR not writable: ${rndDir}`);
+    }
+    return lines;
+}
+async function checkDiscovery() {
+    const lines = ["§ discovery"];
+    const globalAgents = join(PI_AGENT_DIR, "agents");
+    const projectAgents = join(process.cwd(), ".pi", "agents");
+    const bundledAgents = join(PACKAGE_ROOT, "agents");
+    for (const name of AGENT_NAMES) {
+        const found = await tryAccess(join(projectAgents, `${name}.md`), join(globalAgents, `${name}.md`), join(bundledAgents, `${name}.md`));
+        lines.push(found
+            ? `✓ agent ${name}: ${found}`
+            : `✗ agent ${name}: not found in .pi/agents/, ~/.pi/agent/agents/, or pi-rnd's bundled agents/`);
+    }
+    const globalSkills = join(PI_AGENT_DIR, "skills");
+    const projectSkills = join(process.cwd(), ".pi", "skills");
+    const bundledSkills = join(PACKAGE_ROOT, "skills");
+    for (const name of SKILL_NAMES) {
+        const found = await tryAccess(join(globalSkills, name, "SKILL.md"), join(projectSkills, name, "SKILL.md"), join(bundledSkills, name, "SKILL.md"));
+        lines.push(found
+            ? `✓ skill ${name}: ${found}`
+            : `✗ skill ${name}: not found`);
+    }
+    return lines;
+}
+async function checkRoundTrip(pi, lines) {
+    lines.push("§ round-trip");
+    const ping = await rpcCall(pi, "ping", {}, 2000);
+    if (!ping?.success) {
+        lines.push("✗ pi-subagents not responding (ping timeout 2s) — install @tintinweb/pi-subagents");
+        return "error";
+    }
+    lines.push(`✓ pi-subagents loaded (protocol v${ping.data?.version ?? "?"})`);
+    const spawn = await rpcCall(pi, "spawn", {
+        type: "general-purpose",
+        prompt: "Reply with the literal string OK and nothing else.",
+        options: { description: "rnd-doctor probe", run_in_background: true, max_turns: 3 },
+    }, 5000);
+    if (!spawn?.success || !spawn.data?.id) {
+        const err = spawn?.success === false ? spawn.error : "spawn timeout";
+        lines.push(`✗ subagent spawn failed: ${err}`);
+        return "error";
+    }
+    const agentId = spawn.data.id;
+    const roundTripBudgetMs = 90_000;
+    lines.push(`… spawned subagent ${agentId}, waiting up to ${roundTripBudgetMs / 1000}s…`);
+    const lifecycle = { lastEvent: "spawned", lastTs: Date.now() };
+    const unsubCreated = pi.events.on("subagents:created", (data) => {
+        if (data?.id === agentId) {
+            lifecycle.lastEvent = "created";
+            lifecycle.lastTs = Date.now();
+        }
+    });
+    const unsubStarted = pi.events.on("subagents:started", (data) => {
+        if (data?.id === agentId) {
+            lifecycle.lastEvent = "started";
+            lifecycle.lastTs = Date.now();
+        }
+    });
+    const completion = await waitForCompletion(pi, agentId, roundTripBudgetMs);
+    unsubCreated();
+    unsubStarted();
+    if (!completion) {
+        const sinceLastMs = Date.now() - lifecycle.lastTs;
+        lines.push(`✗ subagent ${agentId} did not complete within ${roundTripBudgetMs / 1000}s ` +
+            `(last lifecycle event: ${lifecycle.lastEvent}, ${Math.round(sinceLastMs / 1000)}s ago — ` +
+            `usually means the LLM call is slow or the provider is misconfigured; ` +
+            `transcript: ${process.env.TMPDIR ?? "/tmp"}pi-subagents-<uid>/.../tasks/${agentId}.output)`);
+        return "error";
+    }
+    if (completion.status === "completed") {
+        const preview = (completion.result ?? "").trim().slice(0, 80);
+        lines.push(`✓ round-trip OK: ${completion.durationMs}ms, status=${completion.status}, result="${preview}"`);
+        return "info";
+    }
+    lines.push(`✗ round-trip ended with status=${completion.status}${completion.error ? `, error=${completion.error}` : ""}`);
+    return "warning";
+}
+export function registerRndDoctor(pi) {
+    pi.registerCommand("rnd-doctor", {
+        description: "Diagnose pi-rnd prerequisites (PI dir, subagents, discovery, gates, round-trip)",
+        handler: async (_args, ctx) => {
+            const lines = ["pi-rnd — doctor v0.2"];
+            const roundTripLines = [];
+            const [runtimeLines, discoveryLines, rtLevel] = await Promise.all([
+                checkPiRuntime(),
+                checkDiscovery(),
+                checkRoundTrip(pi, roundTripLines),
+            ]);
+            const gateCount = listGates().length;
+            const gateLines = gateCount === 0
+                ? ["§ gates", "✗ gates: 0 (no seed gates registered)"]
+                : ["§ gates", `✓ gates: ${gateCount}`];
+            lines.push(...runtimeLines, ...discoveryLines, ...gateLines, ...roundTripLines);
+            const hasFailures = lines.some((l) => l.startsWith("✗"));
+            const finalLevel = rtLevel === "error" ? "error" : hasFailures ? "warning" : "info";
+            ctx.ui.notify(lines.join("\n"), finalLevel);
+        },
+    });
+}
+//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAErE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAEzE,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAU,CAAC;AAC9F,MAAM,WAAW,GAAG;IAClB,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,aAAa;IAC9E,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB;IACtE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc;CAC7C,CAAC;AAEX,SAAS,OAAO,CACd,EAAgB,EAChB,MAAc,EACd,MAA+B,EAC/B,SAAiB;IAEjB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,YAAY,GAAG,iBAAiB,MAAM,UAAU,SAAS,EAAE,CAAC;QAClE,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,IAAa,EAAE,EAAE;YACzD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,IAAmB,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAG,KAAe;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,KAAK,GAAa,CAAC,cAAc,CAAC,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,KAAK,GAAa,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEnD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,KAAK,CAAC,EACjC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,KAAK,CAAC,EAChC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,KAAK,CAAC,CAClC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,CAAC,CAAC,WAAW,IAAI,KAAK,KAAK,EAAE;YAC7B,CAAC,CAAC,WAAW,IAAI,8EAA8E,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEnD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,EACpC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,EACrC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CACtC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,CAAC,CAAC,WAAW,IAAI,KAAK,KAAK,EAAE;YAC7B,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,EAAgB,EAChB,KAAe;IAEf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAsB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAEtE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAChG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,GAAG,GAAG,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,MAAM,OAAO,CACzB,EAAE,EACF,OAAO,EACP;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,oDAAoD;QAC5D,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;KACpF,EACD,IAAI,CACL,CAAC;IAEF,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9B,MAAM,iBAAiB,GAAG,MAAM,CAAC;IAEjC,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,mBAAmB,iBAAiB,GAAG,IAAI,IAAI,CAAC,CAAC;IAEzF,MAAM,SAAS,GAA0C,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAEtG,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,IAAa,EAAE,EAAE;QACvE,IAAK,IAAwB,EAAE,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9C,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;YAChC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,IAAa,EAAE,EAAE;QACvE,IAAK,IAAwB,EAAE,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9C,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;YAChC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE3E,YAAY,EAAE,CAAC;IACf,YAAY,EAAE,CAAC;IAEf,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAClD,KAAK,CAAC,IAAI,CACR,cAAc,OAAO,4BAA4B,iBAAiB,GAAG,IAAI,IAAI;YAC7E,0BAA0B,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU;YAC1F,uEAAuE;YACvE,eAAe,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,gCAAgC,OAAO,UAAU,CAC7F,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,UAAU,cAAc,UAAU,CAAC,MAAM,aAAa,OAAO,GAAG,CAAC,CAAC;QAC5G,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,kCAAkC,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1H,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAgB;IAChD,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE;QAC/B,WAAW,EAAE,iFAAiF;QAC9F,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,GAA4B,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAa,CAAC,sBAAsB,CAAC,CAAC;YACjD,MAAM,cAAc,GAAa,EAAE,CAAC;YAEpC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChE,cAAc,EAAE;gBAChB,cAAc,EAAE;gBAChB,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC;aACnC,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC,MAAM,CAAC;YACrC,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC;gBAC/B,CAAC,CAAC,CAAC,SAAS,EAAE,uCAAuC,CAAC;gBACtD,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,SAAS,EAAE,CAAC,CAAC;YAEzC,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,EAAE,GAAG,SAAS,EAAE,GAAG,cAAc,CAAC,CAAC;YAEhF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,UAAU,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;YAEpF,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/gates/bash-discipline.js

@@ -0,0 +1,27 @@
+const VIOLATIONS = [
+    { pattern: /\bpython\s+-c\s+['"]/, reason: "Use the Write tool to create a script file instead of running inline Python with python -c." },
+    { pattern: /\bnode\s+-e\s+['"]/, reason: "Use the Write tool to create a script file instead of running inline Node.js with node -e." },
+    { pattern: /\bbun\s+-e\s+['"]/, reason: "Use the Write tool to create a script file instead of running inline Bun with bun -e." },
+    { pattern: /^\s*(for|while|until)\s+/m, reason: "Avoid top-level shell loops; break work into discrete Bash calls instead." },
+    { pattern: /^\s*cat\s+\S+\s*$/m, reason: "Use the Read tool to read files instead of cat." },
+    { pattern: /^\s*head\s+/m, reason: "Use the Read tool with offset/limit instead of head." },
+    { pattern: /^\s*tail\s+/m, reason: "Use the Read tool with offset/limit instead of tail." },
+    { pattern: /echo\s+[^|]*>/, reason: "Use the Write tool to write files instead of echo redirection." },
+    { pattern: /printf\s+[^|]*>/, reason: "Use the Write tool to write files instead of printf redirection." },
+];
+function check(input, _ctx) {
+    const cmd = input?.command;
+    if (typeof cmd !== "string")
+        return null;
+    for (const { pattern, reason } of VIOLATIONS) {
+        if (pattern.test(cmd))
+            return { block: true, reason };
+    }
+    return null;
+}
+export const bashDiscipline = {
+    name: "bash-discipline",
+    match: (toolName) => toolName === "bash",
+    check,
+};
+//# sourceMappingURL=bash-discipline.js.map

package/dist/gates/bash-discipline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-discipline.js","sourceRoot":"","sources":["../../src/gates/bash-discipline.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA+C;IAC7D,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,6FAA6F,EAAE;IAC1I,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,4FAA4F,EAAE;IACvI,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,uFAAuF,EAAE;IACjI,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,2EAA2E,EAAE;IAC7H,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAC5F,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sDAAsD,EAAE;IAC3F,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sDAAsD,EAAE;IAC3F,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gEAAgE,EAAE;IACtG,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kEAAkE,EAAE;CAC3G,CAAC;AAEF,SAAS,KAAK,CAAC,KAAc,EAAE,IAAiB;IAC9C,MAAM,GAAG,GAAI,KAAiC,EAAE,OAAO,CAAC;IAExD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzC,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAS;IAClC,IAAI,EAAE,iBAAiB;IACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM;IACxC,KAAK;CACN,CAAC"}

package/dist/gates/read-evidence-pack.js

@@ -0,0 +1,23 @@
+import { appendFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+function logRead(path, rndDir) {
+    const logDir = join(rndDir, "evidence-pack");
+    const logFile = join(logDir, "reads.log");
+    const entry = JSON.stringify({ ts: new Date().toISOString(), path });
+    mkdirSync(logDir, { recursive: true });
+    appendFileSync(logFile, entry + "\n");
+}
+function check(input, ctx) {
+    const inp = input;
+    const filePath = typeof inp?.path === "string" ? inp.path : null;
+    if (ctx.phase === "verify" && ctx.rndDir && filePath) {
+        logRead(filePath, ctx.rndDir);
+    }
+    return null;
+}
+export const readEvidencePack = {
+    name: "read-evidence-pack",
+    match: (toolName) => toolName === "read",
+    check,
+};
+//# sourceMappingURL=read-evidence-pack.js.map

package/dist/gates/read-evidence-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-evidence-pack.js","sourceRoot":"","sources":["../../src/gates/read-evidence-pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,cAAc,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,GAAgB;IAC7C,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjE,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM;IACxC,KAAK;CACN,CAAC"}

package/dist/gates/registry.js

@@ -0,0 +1,24 @@
+const gates = [];
+export function registerGate(gate) {
+    const idx = gates.findIndex((g) => g.name === gate.name);
+    if (idx >= 0) {
+        gates[idx] = gate;
+    }
+    else {
+        gates.push(gate);
+    }
+}
+export function listGates() {
+    return Object.freeze([...gates]);
+}
+export function runGates(toolName, input, ctx) {
+    for (const gate of gates) {
+        if (!gate.match(toolName, input))
+            continue;
+        const result = gate.check(input, ctx);
+        if (result)
+            return result;
+    }
+    return null;
+}
+//# sourceMappingURL=registry.js.map

package/dist/gates/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/gates/registry.ts"],"names":[],"mappings":"AAkBA,MAAM,KAAK,GAAW,EAAE,CAAC;AAEzB,MAAM,UAAU,YAAY,CAAC,IAAU;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,KAAc,EACd,GAAgB;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,SAAS;QAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEtC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/gates/rnd-dir-required.js

@@ -0,0 +1,31 @@
+import { basename } from "node:path";
+const ARTIFACT_PATTERNS = [
+    /^plan\.md$/,
+    /^.+-manifest\.md$/,
+    /^.+-verification\.md$/,
+    /^.+-report\.md$/,
+];
+function isArtifactBasename(name) {
+    return ARTIFACT_PATTERNS.some((p) => p.test(name));
+}
+function check(input, _ctx) {
+    const inp = input;
+    const filePath = typeof inp?.path === "string" ? inp.path : null;
+    if (!filePath)
+        return null;
+    if (!filePath.startsWith("/tmp/"))
+        return null;
+    const name = basename(filePath);
+    if (!isArtifactBasename(name))
+        return null;
+    return {
+        block: true,
+        reason: `Pipeline artifact \`${name}\` belongs under $RND_DIR, not /tmp/.`,
+    };
+}
+export const rndDirRequired = {
+    name: "rnd-dir-required",
+    match: (toolName) => toolName === "write" || toolName === "edit",
+    check,
+};
+//# sourceMappingURL=rnd-dir-required.js.map

package/dist/gates/rnd-dir-required.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rnd-dir-required.js","sourceRoot":"","sources":["../../src/gates/rnd-dir-required.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,MAAM,iBAAiB,GAAG;IACxB,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,iBAAiB;CAClB,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAiB;IAC9C,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,uBAAuB,IAAI,uCAAuC;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAS;IAClC,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM;IAChE,KAAK;CACN,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+import { registerRndStart } from "./orchestrator/start.js";
+import { registerGate, runGates } from "./gates/registry.js";
+import { bashDiscipline } from "./gates/bash-discipline.js";
+import { rndDirRequired } from "./gates/rnd-dir-required.js";
+import { readEvidencePack } from "./gates/read-evidence-pack.js";
+import { registerRndDoctor } from "./doctor.js";
+export default function pirndFramework(pi) {
+    registerRndStart(pi);
+    registerGate(bashDiscipline);
+    registerGate(rndDirRequired);
+    registerGate(readEvidencePack);
+    pi.on("tool_call", (event) => {
+        const result = runGates(event.toolName, event.input, {});
+        if (result)
+            return result;
+        return undefined;
+    });
+    registerRndDoctor(pi);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,EAAgB;IACrD,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAErB,YAAY,CAAC,cAAc,CAAC,CAAC;IAC7B,YAAY,CAAC,cAAc,CAAC,CAAC;IAC7B,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAE/B,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEzD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,iBAAiB,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/orchestrator/prompts.js

@@ -0,0 +1,58 @@
+export function plannerPromptFor(task, rndDir) {
+    return `You are the rnd-planner agent. Your job is to produce a structured research plan for the following task:
+
+${task}
+
+Write your plan to ${rndDir}/plan.md. The plan MUST contain a section titled exactly:
+
+## Execution Schedule
+
+Under that section, list waves in this format:
+
+Wave 1:
+- T1: <task description>
+- T2: <task description>
+
+Wave 2:
+- T3: <task description>
+
+Each task line must start with "- T" followed by an identifier and a colon.
+
+The $RND_DIR for this session is: ${rndDir}
+
+Write the plan to disk before finishing.`;
+}
+export function buildPromptFor(taskId, rndDir) {
+    return `You are the rnd-builder agent. Build task ${taskId} as specified in ${rndDir}/plan.md.
+
+The $RND_DIR for this session is: ${rndDir}
+
+Follow the pre-registration for task ${taskId}. Write all artifacts under ${rndDir}/builds/.
+Write your build manifest to ${rndDir}/builds/${taskId}-manifest.md.
+Write your self-assessment to ${rndDir}/builds/${taskId}-self-assessment.md.
+
+When done, your final message should start with "${taskId} build complete".`;
+}
+export function verifierPromptFor(wave, rndDir) {
+    const taskList = wave.taskIds.join(", ");
+    return `You are the rnd-verifier agent. Verify the builds for wave ${wave.wave}: tasks ${taskList}.
+
+The $RND_DIR for this session is: ${rndDir}
+
+Read each task's build manifest at ${rndDir}/builds/<taskId>-manifest.md and run the verification commands specified in the plan at ${rndDir}/plan.md.
+
+Write your verification report to ${rndDir}/verifications/wave-${wave.wave}-report.md.
+
+Your final message must include a verdict line: "Wave ${wave.wave}: PASS" or "Wave ${wave.wave}: FAIL: <reason>".`;
+}
+export function integratorPromptFor(rndDir) {
+    return `You are the rnd-integrator agent. All waves have passed verification. Integrate the results.
+
+The $RND_DIR for this session is: ${rndDir}
+
+Read the plan at ${rndDir}/plan.md and all verification reports under ${rndDir}/verifications/.
+Produce a final integration report at ${rndDir}/integration/report.md with a verdict of SHIP or NO-SHIP.
+
+Your final message must include either "SHIP" or "NO-SHIP".`;
+}
+//# sourceMappingURL=prompts.js.map

package/dist/orchestrator/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/orchestrator/prompts.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAc;IAC3D,OAAO;;EAEP,IAAI;;qBAEe,MAAM;;;;;;;;;;;;;;;oCAeS,MAAM;;yCAED,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAc;IAC3D,OAAO,6CAA6C,MAAM,oBAAoB,MAAM;;oCAElD,MAAM;;uCAEH,MAAM,+BAA+B,MAAM;+BACnD,MAAM,WAAW,MAAM;gCACtB,MAAM,WAAW,MAAM;;mDAEJ,MAAM,mBAAmB,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,MAAc;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,8DAA8D,IAAI,CAAC,IAAI,WAAW,QAAQ;;oCAE/D,MAAM;;qCAEL,MAAM,2FAA2F,MAAM;;oCAExG,MAAM,uBAAuB,IAAI,CAAC,IAAI;;wDAElB,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,IAAI,oBAAoB,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO;;oCAE2B,MAAM;;mBAEvB,MAAM,+CAA+C,MAAM;wCACtC,MAAM;;4DAEc,CAAC;AAC7D,CAAC"}

package/dist/orchestrator/rnd-dir.js

@@ -0,0 +1,20 @@
+import { createHash } from "node:crypto";
+import { mkdir } from "node:fs/promises";
+import { basename } from "node:path";
+const DEFAULT_BASE_DIR = `${process.env.HOME ?? "~"}/.claude-personal/.rnd/`;
+function hash8(cwd) {
+    return createHash("sha1").update(cwd).digest("hex").slice(0, 8);
+}
+function defaultTs() {
+    return new Date().toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
+}
+export function computeRndDir(cwd, opts) {
+    const base = opts?.baseDir ?? DEFAULT_BASE_DIR;
+    const ts = opts?.ts ?? defaultTs();
+    const dir = `${basename(cwd)}-${hash8(cwd)}`;
+    return `${base}${dir}/branches/no-git/sessions/${ts}/`;
+}
+export function ensureRndDir(path) {
+    return mkdir(path, { recursive: true }).then(() => undefined);
+}
+//# sourceMappingURL=rnd-dir.js.map

package/dist/orchestrator/rnd-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rnd-dir.js","sourceRoot":"","sources":["../../src/orchestrator/rnd-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,gBAAgB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,yBAAyB,CAAC;AAE7E,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAwC;IAExC,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,IAAI,gBAAgB,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAE7C,OAAO,GAAG,IAAI,GAAG,GAAG,6BAA6B,EAAE,GAAG,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC"}