tracegrove 0.0.0-stage → 0.3.0

package/dist/authoring/workspace.d.ts

@@ -0,0 +1,33 @@
+import { type CompiledFlowInfo } from './compile.ts';
+import { type Discovery } from './discover.ts';
+import { type AgentOverrides, type AgentRunResult } from './agent.ts';
+export type CheckIssue = {
+    code: string;
+    detail: string;
+    action: string;
+};
+export type CheckResult = {
+    ok: boolean;
+    flows: Array<Pick<CompiledFlowInfo, 'caseId' | 'file' | 'title'>>;
+    issues: CheckIssue[];
+};
+export declare function checkProject(dir: string): CheckResult;
+export declare function discoverProject(dir: string, branch: string | null): Discovery;
+export type DraftResult = {
+    agent: AgentRunResult;
+    check: CheckResult;
+    discovery: {
+        source: string;
+        routes: number;
+        uncovered: number;
+    };
+};
+export declare function draftWithAgent(input: {
+    dir: string;
+    branch: string | null;
+    intent: string | null;
+    overrides?: AgentOverrides;
+    onOutput?: (chunk: string) => void;
+    onActivity?: (line: string) => void;
+    signal?: AbortSignal;
+}): Promise<DraftResult>;

package/dist/authoring/workspace.js

@@ -0,0 +1,58 @@
+/**
+ * The project-level operations shared by the CLI and `tracegrove ui`: discover routes against
+ * the compiled flows, check authoring files without launching the application, and draft flows with a
+ * coding agent followed by tracegrove's own check.
+ */
+import { join, resolve } from 'node:path';
+import { Blocked } from "../core/errors.js";
+import { CONFIG_FILE, compileProject, configInDirectory, loadAuthoringConfig } from "./compile.js";
+import { discover } from "./discover.js";
+import { buildDraftPrompt, resolveAgentSettings, runAgent } from "./agent.js";
+export function checkProject(dir) {
+    try {
+        const configPath = configInDirectory(resolve(dir));
+        if (!configPath)
+            return { ok: false, flows: [], issues: [{ code: 'config_not_found', detail: join(resolve(dir), CONFIG_FILE), action: 'run tracegrove init' }] };
+        const compiled = compileProject(configPath);
+        return { ok: true, flows: compiled.flows.map((f) => ({ caseId: f.caseId, file: f.file, title: f.title })), issues: [] };
+    }
+    catch (error) {
+        if (error instanceof Blocked)
+            return { ok: false, flows: [], issues: error.reasons.map((r) => ({ code: r.code, detail: r.detail, action: r.action })) };
+        throw error;
+    }
+}
+export function discoverProject(dir, branch) {
+    const root = resolve(dir);
+    let flows = [];
+    try {
+        const configPath = configInDirectory(root);
+        if (configPath) {
+            const compiled = compileProject(configPath);
+            flows = compiled.flows.flatMap((f) => f.steps.map((s) => ({ caseId: f.caseId, method: s.method, path: s.path })));
+            flows.push({ caseId: '(readiness check)', method: 'GET', path: compiled.config.app.health });
+        }
+    }
+    catch { /* uncompilable flows cover nothing; check reports why */ }
+    return discover(root, flows, branch);
+}
+function configOrNull(root) {
+    try {
+        const path = configInDirectory(root);
+        return path ? loadAuthoringConfig(path) : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function draftWithAgent(input) {
+    const root = resolve(input.dir);
+    const config = configOrNull(root);
+    const testDir = resolve(root, config?.testDir ?? 'tracegrove');
+    const settings = resolveAgentSettings(root, config, input.overrides ?? {});
+    const discovery = discoverProject(root, input.branch);
+    const prompt = buildDraftPrompt({ root, testDir, discovery, intent: input.intent, config });
+    const agent = await runAgent({ root, testDir, settings, prompt, ...(input.onOutput ? { onOutput: input.onOutput } : {}), ...(input.onActivity ? { onActivity: input.onActivity } : {}), ...(input.signal ? { signal: input.signal } : {}) });
+    return { agent, check: checkProject(root), discovery: { source: discovery.source, routes: discovery.routes.length, uncovered: discovery.uncovered } };
+}
+//# sourceMappingURL=workspace.js.map

package/dist/authoring/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/authoring/workspace.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAyB,MAAM,cAAc,CAAC;AAC1H,OAAO,EAAE,QAAQ,EAAkB,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,QAAQ,EAA4C,MAAM,YAAY,CAAC;AAMxH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC;QACjK,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1H,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;QACxJ,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAAqB;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,GAA4D,EAAE,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC5C,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACtH,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA+L;IAClO,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,YAAY,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7O,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;AACxJ,CAAC"}

package/dist/cli/arguments.d.ts

@@ -0,0 +1,288 @@
+import { z } from 'zod';
+export declare const COMMAND_SCHEMAS: {
+    readonly help: z.ZodObject<{
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly init: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        force: z.ZodOptional<z.ZodBoolean>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly test: z.ZodObject<{
+        config: z.ZodOptional<z.ZodString>;
+        grep: z.ZodOptional<z.ZodString>;
+        tag: z.ZodOptional<z.ZodString>;
+        jsonl: z.ZodOptional<z.ZodBoolean>;
+        heal: z.ZodOptional<z.ZodBoolean>;
+        'source-snapshot': z.ZodOptional<z.ZodString>;
+        'source-repository-role': z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly status: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly heal: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        'no-agent': z.ZodOptional<z.ZodBoolean>;
+        'dry-run': z.ZodOptional<z.ZodBoolean>;
+        undo: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly list: z.ZodObject<{
+        config: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly compile: z.ZodObject<{
+        config: z.ZodOptional<z.ZodString>;
+        'source-snapshot': z.ZodOptional<z.ZodString>;
+        'source-repository-role': z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly show: z.ZodObject<{
+        config: z.ZodOptional<z.ZodString>;
+        run: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly ui: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        port: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly discover: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly check: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly draft: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        intent: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly settings: z.ZodObject<{
+        dir: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        'source-snapshot': z.ZodOptional<z.ZodString>;
+        'working-tree': z.ZodOptional<z.ZodBoolean>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'sample-config': z.ZodObject<{
+        sample: z.ZodOptional<z.ZodEnum<{
+            "notes-api": "notes-api";
+            "notes-django": "notes-django";
+            "notes-browser": "notes-browser";
+            "notes-mcp": "notes-mcp";
+            "report-jobs": "report-jobs";
+            "report-native": "report-native";
+        }>>;
+        output: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly validate: z.ZodObject<{
+        config: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly doctor: z.ZodObject<{
+        config: z.ZodOptional<z.ZodString>;
+        dir: z.ZodOptional<z.ZodString>;
+        profile: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly plan: z.ZodObject<{
+        config: z.ZodString;
+        profile: z.ZodOptional<z.ZodString>;
+        output: z.ZodString;
+        purpose: z.ZodOptional<z.ZodEnum<{
+            trial: "trial";
+            work_proof: "work_proof";
+            qualification: "qualification";
+            regression: "regression";
+        }>>;
+        'work-binding': z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly seed: z.ZodObject<{
+        request: z.ZodString;
+        preview: z.ZodOptional<z.ZodBoolean>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly run: z.ZodObject<{
+        request: z.ZodString;
+        'state-dir': z.ZodOptional<z.ZodString>;
+        jsonl: z.ZodOptional<z.ZodBoolean>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly controller: z.ZodObject<{
+        'state-dir': z.ZodString;
+        'project-root': z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly cases: z.ZodObject<{
+        config: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+        workflow: z.ZodOptional<z.ZodString>;
+        surface: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        cursor: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly rerun: z.ZodObject<{
+        request: z.ZodString;
+        output: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly inspect: z.ZodObject<{
+        execution: z.ZodOptional<z.ZodString>;
+        'state-dir': z.ZodOptional<z.ZodString>;
+        request: z.ZodOptional<z.ZodString>;
+        bundle: z.ZodOptional<z.ZodString>;
+        'failed-step': z.ZodOptional<z.ZodBoolean>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly export: z.ZodObject<{
+        execution: z.ZodString;
+        'state-dir': z.ZodString;
+        output: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'verify-bundle': z.ZodObject<{
+        bundle: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'result-ingest': z.ZodObject<{
+        bundle: z.ZodString;
+        sink: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly results: z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+        cursor: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'awr-prepare': z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodString;
+        destination: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'awr-inspect': z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'awr-deliver': z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodString;
+        'credential-env': z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'report-prepare': z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodString;
+        target: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'report-inspect': z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'report-attach': z.ZodObject<{
+        sink: z.ZodString;
+        id: z.ZodString;
+        'credential-env': z.ZodOptional<z.ZodString>;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'verify-cleanup': z.ZodObject<{
+        proof: z.ZodString;
+        expectation: z.ZodString;
+        trust: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'source-resolve': z.ZodObject<{
+        input: z.ZodString;
+        output: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'recovery-status': z.ZodObject<{
+        'state-dir': z.ZodString;
+        execution: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly 'source-materialize': z.ZodObject<{
+        input: z.ZodString;
+        repository: z.ZodString;
+        root: z.ZodString;
+        side: z.ZodEnum<{
+            head: "head";
+            base: "base";
+        }>;
+        output: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly schema: z.ZodObject<{
+        output: z.ZodString;
+        json: z.ZodOptional<z.ZodBoolean>;
+        help: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+};
+export type Args = {
+    [Name in keyof typeof COMMAND_SCHEMAS]: {
+        command: Name;
+        flags: z.infer<typeof COMMAND_SCHEMAS[Name]>;
+    };
+}[keyof typeof COMMAND_SCHEMAS];
+/** Best-effort output selection before parsing can fail. Duplicate flags still fail parsing. */
+export declare function jsonRequested(argv: string[]): boolean;
+/** Validate every option before file access, admission or execution. No ignored arguments. */
+export declare function parseArgs(argv: string[]): Args;

package/dist/cli/arguments.js

@@ -0,0 +1,121 @@
+import { z } from 'zod';
+import { IdString, RunRequest } from "../protocol/index.js";
+import { Blocked } from "../core/errors.js";
+import { SampleName } from "./samples/catalog.js";
+const Text = z.string().min(1).max(8192);
+const Bool = z.boolean().optional();
+const common = { json: Bool, help: Bool };
+const ExecutionId = Text.regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/, 'execution ID must be one local path segment');
+export const COMMAND_SCHEMAS = {
+    help: z.object({ help: Bool }).strict(),
+    init: z.object({ ...common, dir: Text.optional(), force: Bool }).strict(),
+    test: z.object({ ...common, config: Text.optional(), grep: Text.optional(), tag: Text.optional(), jsonl: Bool, heal: Bool, 'source-snapshot': Text.optional(), 'source-repository-role': Text.optional() }).strict(),
+    status: z.object({ ...common, dir: Text.optional() }).strict(),
+    heal: z.object({ ...common, dir: Text.optional(), agent: Text.optional(), model: Text.optional(), 'no-agent': Bool, 'dry-run': Bool, undo: Text.optional() }).strict(),
+    list: z.object({ ...common, config: Text.optional() }).strict(),
+    compile: z.object({ ...common, config: Text.optional(), 'source-snapshot': Text.optional(), 'source-repository-role': Text.optional() }).strict(),
+    show: z.object({ ...common, config: Text.optional(), run: Text.optional() }).strict(),
+    ui: z.object({ ...common, dir: Text.optional(), branch: Text.optional(), port: Text.optional() }).strict(),
+    discover: z.object({ ...common, dir: Text.optional(), branch: Text.optional() }).strict(),
+    check: z.object({ ...common, dir: Text.optional() }).strict(),
+    draft: z.object({ ...common, dir: Text.optional(), branch: Text.optional(), intent: Text.optional(), agent: Text.optional(), model: Text.optional() }).strict(),
+    settings: z.object({ ...common, dir: Text.optional(), agent: Text.optional(), model: Text.optional(), 'source-snapshot': Text.optional(), 'working-tree': Bool }).strict(),
+    'sample-config': z.object({ ...common, sample: SampleName.optional(), output: Text }).strict(),
+    validate: z.object({ ...common, config: Text }).strict(),
+    doctor: z.object({ ...common, config: Text.optional(), dir: Text.optional(), profile: Text.optional() }).strict(),
+    plan: z.object({ ...common, config: Text, profile: Text.optional(), output: Text,
+        purpose: RunRequest.shape.purpose.optional(), 'work-binding': Text.optional() }).strict(),
+    seed: z.object({ ...common, request: Text, preview: Bool }).strict(),
+    run: z.object({ ...common, request: Text, 'state-dir': Text.optional(), jsonl: Bool }).strict(),
+    controller: z.object({ ...common, 'state-dir': Text, 'project-root': Text }).strict(),
+    cases: z.object({ ...common, config: Text, id: Text.optional(), workflow: Text.optional(),
+        surface: Text.optional(), text: Text.optional(), cursor: Text.optional(),
+        limit: Text.regex(/^[1-9][0-9]{0,2}$/).refine(value => Number(value) <= 100, 'limit must be 1..100').optional() }).strict(),
+    rerun: z.object({ ...common, request: Text, output: Text }).strict(),
+    inspect: z.object({ ...common, execution: ExecutionId.optional(), 'state-dir': Text.optional(), request: Text.optional(), bundle: Text.optional(), 'failed-step': Bool }).strict()
+        .refine(flags => flags.request ? !flags.execution && !flags['state-dir'] && !flags.bundle && !flags['failed-step']
+        : flags.bundle ? !flags.execution && !flags['state-dir'] : !!flags.execution && !!flags['state-dir'], 'choose --request, --bundle, or --execution with --state-dir; --failed-step is only for execution evidence'),
+    export: z.object({ ...common, execution: ExecutionId, 'state-dir': Text, output: Text }).strict(),
+    'verify-bundle': z.object({ ...common, bundle: Text }).strict(),
+    'result-ingest': z.object({ ...common, bundle: Text, sink: Text }).strict(),
+    results: z.object({ ...common, sink: Text, id: IdString.optional(), cursor: Text.optional(), limit: Text.regex(/^(?:[1-9][0-9]?|100)$/).optional() }).strict(),
+    'awr-prepare': z.object({ ...common, sink: Text, id: IdString, destination: Text }).strict(),
+    'awr-inspect': z.object({ ...common, sink: Text, id: IdString }).strict(),
+    'awr-deliver': z.object({ ...common, sink: Text, id: IdString, 'credential-env': Text.regex(/^[A-Za-z_][A-Za-z0-9_]*$/).optional() }).strict(),
+    'report-prepare': z.object({ ...common, sink: Text, id: IdString, target: Text }).strict(),
+    'report-inspect': z.object({ ...common, sink: Text, id: IdString }).strict(),
+    'report-attach': z.object({ ...common, sink: Text, id: IdString, 'credential-env': Text.regex(/^[A-Za-z_][A-Za-z0-9_]*$/).optional() }).strict(),
+    'verify-cleanup': z.object({ ...common, proof: Text, expectation: Text, trust: Text }).strict(),
+    'source-resolve': z.object({ ...common, input: Text, output: Text }).strict(),
+    'recovery-status': z.object({ ...common, 'state-dir': Text, execution: Text }).strict(),
+    'source-materialize': z.object({ ...common, input: Text, repository: Text, root: Text, side: z.enum(['base', 'head']), output: Text }).strict(),
+    schema: z.object({ ...common, output: Text }).strict(),
+};
+const deny = (code, detail, command) => {
+    throw new Blocked([{ code, detail, owner: 'operator', action: `workflow-verify ${command} --help` }]);
+};
+/** Best-effort output selection before parsing can fail. Duplicate flags still fail parsing. */
+export function jsonRequested(argv) {
+    const options = argv.slice(1);
+    const index = options.findIndex(option => option === '--json' || option.startsWith('--json='));
+    if (index < 0)
+        return false;
+    const value = options[index] === '--json'
+        ? (['false', 'true'].includes(options[index + 1] ?? '') ? options[index + 1] : 'true')
+        : options[index]?.slice('--json='.length);
+    return value === 'true';
+}
+/** Validate every option before file access, admission or execution. No ignored arguments. */
+export function parseArgs(argv) {
+    const first = argv[0] ?? 'help';
+    const command = ['-h', '--help'].includes(first) ? 'help' : first;
+    if (!Object.hasOwn(COMMAND_SCHEMAS, command))
+        deny('unknown_command', `unknown command ${command}`, 'help');
+    const name = command;
+    const schema = COMMAND_SCHEMAS[name];
+    const flags = Object.create(null);
+    for (let i = 1; i < argv.length; i++) {
+        const token = argv[i] === '-h' ? '--help' : argv[i];
+        if (!token.startsWith('--'))
+            deny('unexpected_argument', `unexpected positional argument ${token}`, command);
+        const equals = token.indexOf('=');
+        const key = token.slice(2, equals < 0 ? undefined : equals);
+        if (!Object.hasOwn(schema.shape, key))
+            deny('unknown_flag', `--${key} is unsupported for ${command}; allowed: ${Object.keys(schema.shape).map(flag => `--${flag}`).join(', ')}`, command);
+        if (Object.hasOwn(flags, key))
+            deny('duplicate_flag', `--${key} was supplied more than once`, command);
+        const option = schema.shape[key];
+        const underlying = option instanceof z.ZodOptional ? option.unwrap() : option;
+        let value = equals < 0 ? undefined : token.slice(equals + 1);
+        if (underlying instanceof z.ZodBoolean) {
+            if (value === undefined && ['true', 'false'].includes(argv[i + 1] ?? ''))
+                value = argv[++i];
+            if (value !== undefined && value !== 'true' && value !== 'false')
+                deny('invalid_boolean', `--${key} accepts true or false`, command);
+            flags[key] = value === undefined || value === 'true';
+        }
+        else {
+            if (value === undefined) {
+                const next = argv[i + 1];
+                if (next === undefined || next.startsWith('--') || next === '-h')
+                    deny('missing_argument', `--${key} requires a value`, command);
+                value = argv[++i];
+            }
+            flags[key] = value;
+        }
+    }
+    if (flags.help === true)
+        return { command: 'help', flags: {} };
+    if (flags.json === true && flags.jsonl === true)
+        deny('conflicting_flags', '--json and --jsonl cannot be combined', command);
+    if (name === 'doctor' && flags.config !== undefined && flags.dir !== undefined)
+        deny('conflicting_flags', '--config and --dir cannot be combined', command);
+    const parsed = schema.safeParse(flags);
+    if (!parsed.success)
+        throw new Blocked(parsed.error.issues.map(issue => ({
+            code: Object.hasOwn(flags, String(issue.path[0])) ? 'invalid_argument' : 'missing_argument',
+            detail: `--${issue.path.join('.')}: ${issue.message}`, owner: 'operator', action: `workflow-verify ${command} --help`,
+        })));
+    return { command: name, flags: parsed.data };
+}
+//# sourceMappingURL=arguments.js.map

package/dist/cli/arguments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arguments.js","sourceRoot":"","sources":["../../src/cli/arguments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACzC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,6CAA6C,CAAC,CAAC;AAC9G,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACzE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,wBAAwB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACpN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACtK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/D,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,wBAAwB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACjJ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACrF,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/J,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1K,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACjH,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI;QAC9E,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3F,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACpE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACrF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;QACvF,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;QACxE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7H,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;SAC/K,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAChH,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EACtG,2GAA2G,CAAC;IAC9G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACjG,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9J,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5F,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACzE,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9I,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1F,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5E,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAChJ,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/F,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7E,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IACvF,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/I,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9C,CAAC;AAIX,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,OAAe,EAAS,EAAE;IACpE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC;AACxG,CAAC,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/F,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ;QACvC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,KAAK,KAAK,MAAM,CAAC;AAC1B,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,OAA0B,CAAC;IACxC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAA2C,CAAC;IAC/E,MAAM,KAAK,GAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,qBAAqB,EAAE,kCAAkC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,uBAAuB,OAAO,cAAc,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC1L,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,8BAA8B,EAAE,OAAO,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9E,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,UAAU,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO;gBAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,wBAAwB,EAAE,OAAO,CAAC,CAAC;YACrI,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI;oBAAE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,mBAAmB,EAAE,OAAO,CAAC,CAAC;gBACjI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;YACrB,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;QAAE,IAAI,CAAC,mBAAmB,EAAE,uCAAuC,EAAE,OAAO,CAAC,CAAC;IAC7H,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,mBAAmB,EAAE,uCAAuC,EAAE,OAAO,CAAC,CAAC;IAC5J,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB;YAC3F,MAAM,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,OAAO,SAAS;SACtH,CAAC,CAAC,CAAC,CAAC;IACL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAU,CAAC;AACvD,CAAC"}

package/dist/cli/cleanup.d.ts

@@ -0,0 +1,18 @@
+/** Offline integrity check only. Files supplied here cannot authorize hosted release. */
+export declare function checkCleanupFiles(proofPath: string, expectationPath: string, trustPath: string): {
+    ok: boolean;
+    checkedAt: number;
+    validationScope: string;
+    hostedReleaseAdmitted: boolean;
+    proofDigest: string;
+    resourceCount: number;
+    problems: string[];
+} | {
+    ok: boolean;
+    checkedAt: number;
+    validationScope: string;
+    hostedReleaseAdmitted: boolean;
+    proofDigest: null;
+    resourceCount: null;
+    problems: string[];
+};

package/dist/cli/cleanup.js

@@ -0,0 +1,40 @@
+import { readFileSync, statSync } from 'node:fs';
+import { createPublicKey } from 'node:crypto';
+import { z } from 'zod';
+import { verifyCleanupFollowup } from "../core/cleanupAttestation.js";
+const Trust = z.object({
+    schemaVersion: z.literal('workflow.cleanup-observers/v1'),
+    observers: z.array(z.object({ keyId: z.string().min(1).max(256), scopeId: z.string().min(1).max(256),
+        observerId: z.string().min(1).max(256),
+        publicKeyPem: z.string().max(8192).startsWith('-----BEGIN PUBLIC KEY-----'),
+    }).strict()).min(1).max(100),
+}).strict();
+const read = (path) => {
+    if (statSync(path).size > 4 * 1024 * 1024)
+        throw new Error('cleanup input exceeds 4 MiB');
+    return JSON.parse(readFileSync(path, 'utf8'));
+};
+/** Offline integrity check only. Files supplied here cannot authorize hosted release. */
+export function checkCleanupFiles(proofPath, expectationPath, trustPath) {
+    const checkedAt = Date.now();
+    try {
+        const trust = Trust.parse(read(trustPath));
+        if (new Set(trust.observers.map(item => item.keyId)).size !== trust.observers.length) {
+            throw new Error('cleanup observer key IDs must be unique');
+        }
+        const trustedObservers = new Map(trust.observers.map(item => [item.keyId, {
+                scopeId: item.scopeId, observerId: item.observerId, publicKey: createPublicKey(item.publicKeyPem),
+            }]));
+        const result = verifyCleanupFollowup(read(proofPath), read(expectationPath), { trustedObservers, observedAt: checkedAt });
+        return { ok: true, checkedAt, validationScope: 'signature_and_expectation', hostedReleaseAdmitted: false,
+            proofDigest: result.proofDigest, resourceCount: result.expectation.resources.length, problems: [] };
+    }
+    catch (error) {
+        const problems = error instanceof z.ZodError
+            ? error.issues.map(issue => `${issue.path.join('.') || '<root>'}: ${issue.message}`)
+            : [error instanceof Error ? error.message : 'cleanup validation failed'];
+        return { ok: false, checkedAt, validationScope: 'signature_and_expectation', hostedReleaseAdmitted: false,
+            proofDigest: null, resourceCount: null, problems };
+    }
+}
+//# sourceMappingURL=cleanup.js.map

package/dist/cli/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/cli/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC;KAC5E,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,IAAI,GAAG,CAAC,IAAY,EAAW,EAAE;IACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,eAAuB,EAAE,SAAiB;IAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;gBACxE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;aAClG,CAAC,CAAC,CAAC,CAAC;QACL,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,KAAK;YACtG,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAc,EAAE,CAAC;IACpH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,KAAK,YAAY,CAAC,CAAC,QAAQ;YAC1C,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YACpF,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,KAAK;YACvG,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/cli/doctor.d.ts

@@ -0,0 +1,51 @@
+import { HostPlan, type Ref } from '../protocol/index.ts';
+type Issue = {
+    code: string;
+    detail: string;
+    owner: string;
+    action: string;
+};
+type Check = {
+    check: string;
+    state: 'ok' | 'warn' | 'blocked';
+    detail: string;
+    code: string;
+    action: string;
+};
+export type DoctorReport = {
+    schemaVersion: 'tracegrove.doctor/v1';
+    profile: string | null;
+    blocked: boolean;
+    exitCode: 0 | 2;
+    checks: Check[];
+    errors: Issue[];
+    selection: {
+        inputKind: 'authoring' | 'corpus';
+        configPath: string;
+        workflowConfigPath: string;
+        hostPlanRef: Ref;
+        hostAdapter: HostPlan['adapter'];
+        placement: HostPlan['placement'];
+        requiredCapabilities: string[];
+        corpusRef: Ref;
+        compiledFilesWritten: boolean;
+    } | null;
+    source: {
+        digest: string;
+        files: number;
+    } | null;
+    runtime: {
+        runtime: string;
+        version: string;
+        executableSha256: string;
+    } | null;
+    execution: 'not_started';
+    verificationVerdict: 'not_evaluated';
+};
+export declare function doctorFailure(error: unknown, report?: DoctorReport): DoctorReport;
+export declare function inspectDoctor(options: {
+    config?: string | undefined;
+    dir?: string | undefined;
+    profile?: string | undefined;
+}): Promise<DoctorReport>;
+export {};