werkmeister 0.17.1 → 0.19.0

package/dist/lib/gate.js

@@ -1,278 +1,5 @@
 import { createRequire as __sandboxCreateRequire } from "node:module";
 const require = __sandboxCreateRequire(import.meta.url);
-
-// ../../packages/sandbox-core/dist/gate.js
-import * as fs2 from "node:fs";
-import * as path2 from "node:path";
-
-// ../../packages/sandbox-core/dist/dot_dir.js
-import * as fs from "node:fs";
-import * as path from "node:path";
-var DOT_DIRS = [".werkmeister", ".sandbox"];
-function dotDir(parent) {
-  const found = DOT_DIRS.find((d) => fs.existsSync(path.join(parent, d)));
-  return path.join(parent, found ?? DOT_DIRS[0]);
-}
-
-// ../../packages/sandbox-core/dist/gate.js
-var _PRECEDENCE_TEXT = "Precedence: these standards' rules win over conflicting task framing \u2014 if a rule and the task clash, follow the rule and say so (invariant: apply it and write a `decision` note; rule: surface the conflict in one line, then apply). This gate fires once; your retry will proceed.";
-var _PHASE_ENTRY_TEXT = "Standards gate: invoke `sb-implement` before coding \u2014 it loads the universal base (ponytail + comments + engineering) and the workspace notes. Then retry this edit.";
-function _translate(pat) {
-  let res = "";
-  let i = 0;
-  const n = pat.length;
-  while (i < n) {
-    const c = pat[i];
-    i += 1;
-    if (c === "*") {
-      res += ".*";
-    } else if (c === "?") {
-      res += ".";
-    } else if (c === "[") {
-      let j = i;
-      if (j < n && pat[j] === "!")
-        j += 1;
-      if (j < n && pat[j] === "]")
-        j += 1;
-      while (j < n && pat[j] !== "]")
-        j += 1;
-      if (j >= n) {
-        res += "\\[";
-      } else {
-        let stuff = pat.slice(i, j).replace(/\\/g, "\\\\");
-        i = j + 1;
-        if (stuff.startsWith("!"))
-          stuff = "^" + stuff.slice(1);
-        else if (stuff.startsWith("^"))
-          stuff = "\\" + stuff;
-        res += `[${stuff}]`;
-      }
-    } else {
-      res += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-    }
-  }
-  return `^(?:${res})$`;
-}
-function fnmatch(name, pat) {
-  return new RegExp(_translate(pat), "s").test(name);
-}
-function findWorkspaceRoot(start) {
-  let directory = path2.resolve(start);
-  while (true) {
-    if (_isDir(dotDir(directory))) {
-      return directory;
-    }
-    const parent = path2.dirname(directory);
-    if (parent === directory) {
-      return null;
-    }
-    directory = parent;
-  }
-}
-function _isDir(p) {
-  try {
-    return fs2.statSync(p).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function _isFile(p) {
-  try {
-    return fs2.statSync(p).isFile();
-  } catch {
-    return false;
-  }
-}
-function _isDict(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function loadManifest(workspace) {
-  const manifestPath = path2.join(dotDir(workspace), "standards.json");
-  if (!_isFile(manifestPath)) {
-    return null;
-  }
-  let data;
-  try {
-    data = JSON.parse(fs2.readFileSync(manifestPath, "utf8"));
-  } catch {
-    return null;
-  }
-  return _isDict(data) ? data : null;
-}
-function _statePath(workspace, sessionId) {
-  return path2.join(dotDir(workspace), ".gate", `${sessionId}.json`);
-}
-function _loadState(workspace, sessionId) {
-  const statePath = _statePath(workspace, sessionId);
-  if (!_isFile(statePath)) {
-    return {};
-  }
-  let data;
-  try {
-    data = JSON.parse(fs2.readFileSync(statePath, "utf8"));
-  } catch {
-    return null;
-  }
-  return _isDict(data) ? data : null;
-}
-function _saveState(workspace, sessionId, state) {
-  try {
-    const statePath = _statePath(workspace, sessionId);
-    fs2.mkdirSync(path2.dirname(statePath), { recursive: true });
-    fs2.writeFileSync(statePath, JSON.stringify(state));
-    return true;
-  } catch {
-    return false;
-  }
-}
-function _sorted(values) {
-  return [...values].sort();
-}
-function _noteStatus(text) {
-  const block = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
-  if (!block) {
-    return void 0;
-  }
-  const status = /^status:\s*["']?([^\s"'#]+)/m.exec(block[1]);
-  return status ? status[1].toLowerCase() : null;
-}
-function _phaseGateSatisfied(workspace, gate) {
-  const note = String(gate["note"] ?? "");
-  if (!/^[a-z]+$/.test(note)) {
-    return true;
-  }
-  const want = gate["status"] ? String(gate["status"]).toLowerCase() : null;
-  const dir = path2.join(dotDir(workspace), "notes");
-  let names;
-  try {
-    names = fs2.readdirSync(dir);
-  } catch (exc) {
-    return exc.code !== "ENOENT";
-  }
-  const pattern = new RegExp(`^\\d{3}-${note}-.+\\.md$`);
-  for (const name of names) {
-    if (!pattern.test(name)) {
-      continue;
-    }
-    let text;
-    try {
-      text = fs2.readFileSync(path2.join(dir, name), "utf8");
-    } catch {
-      return true;
-    }
-    const status = _noteStatus(text);
-    if (status === void 0) {
-      return true;
-    }
-    if (status === "superseded" || status === "graduated") {
-      continue;
-    }
-    if (want === null || status === want) {
-      return true;
-    }
-  }
-  return false;
-}
-function _phaseGateText(gate) {
-  const note = String(gate["note"]);
-  if (gate["status"]) {
-    const status = String(gate["status"]);
-    return `Phase gate: no \`${note}\` note in \`.sandbox/notes/\` has \`status: ${status}\`, so source edits wait for an approved design. Invoke \`sb-research\`, present the design to the user, and when they approve write \`NNN-${note}-<slug>.md\` with \`status: ${status}\` recording what was approved. Then retry this edit. Edits under \`.sandbox/\` are not gated.`;
-  }
-  return `Phase gate: no \`${note}\` note in \`.sandbox/notes/\` names the root cause yet. Invoke \`sb-research\`, reproduce the problem, and write \`NNN-${note}-<slug>.md\` stating the root cause. Then retry this edit. Edits under \`.sandbox/\` are not gated.`;
-}
-function decide(workspaceStart, sessionId, filePath) {
-  if (!sessionId || sessionId.includes("/") || sessionId.includes("..")) {
-    return null;
-  }
-  const workspace = findWorkspaceRoot(workspaceStart);
-  if (workspace === null) {
-    return null;
-  }
-  const manifest = loadManifest(workspace);
-  if (manifest === null) {
-    return null;
-  }
-  const state = _loadState(workspace, sessionId);
-  if (state === null) {
-    return null;
-  }
-  const relPath = filePath ? path2.relative(workspace, filePath) : "";
-  const phaseGate = manifest["phase_gate"];
-  if (_isDict(phaseGate) && relPath && relPath !== ".." && !relPath.startsWith(".." + path2.sep) && !path2.isAbsolute(relPath) && !DOT_DIRS.some((d) => relPath.startsWith(d + path2.sep)) && !_phaseGateSatisfied(workspace, phaseGate)) {
-    return _phaseGateText(phaseGate);
-  }
-  const delivered = new Set(Array.isArray(state["delivered"]) ? state["delivered"] : []);
-  const needsPhaseEntry = !state["phase_entry_delivered"];
-  let domain = null;
-  const domains = _isDict(manifest["domains"]) ? manifest["domains"] : {};
-  for (const name of _sorted(Object.keys(domains))) {
-    const meta = domains[name];
-    if (delivered.has(name) || !_isDict(meta)) {
-      continue;
-    }
-    const globs = Array.isArray(meta["applies_to"]) ? meta["applies_to"] : [];
-    if (globs.some((glob) => fnmatch(relPath, String(glob)))) {
-      domain = name;
-      break;
-    }
-  }
-  if (!needsPhaseEntry && domain === null) {
-    return null;
-  }
-  const parts = [];
-  if (needsPhaseEntry) {
-    parts.push(_PHASE_ENTRY_TEXT);
-  }
-  if (domain !== null) {
-    const meta = domains[domain];
-    const summary = String(_isDict(meta) && meta["summary"] || "").trim();
-    let domainText = `Standards gate: you are editing a path governed by the \`${domain}\` standard, which has not been loaded this session. Invoke the \`sb-${domain}-standard\` skill, then retry this edit.`;
-    if (summary) {
-      domainText += ` Summary: ${summary}.`;
-    }
-    parts.push(domainText);
-  }
-  parts.push(_PRECEDENCE_TEXT);
-  const newState = {
-    phase_entry_delivered: true,
-    delivered: _sorted(domain ? /* @__PURE__ */ new Set([...delivered, domain]) : delivered)
-  };
-  if (!_saveState(workspace, sessionId, newState)) {
-    return null;
-  }
-  return parts.join("\n");
-}
-function main() {
-  let data;
-  try {
-    const raw = process.stdin.isTTY ? "" : fs2.readFileSync(0, "utf8");
-    const parsed = raw.trim() ? JSON.parse(raw) : {};
-    data = _isDict(parsed) ? parsed : {};
-  } catch {
-    data = {};
-  }
-  const sessionId = String(data["session_id"] || "");
-  const toolInput = data["tool_input"];
-  const filePath = String(_isDict(toolInput) && toolInput["file_path"] || "");
-  const start = String(data["cwd"] || process.cwd());
-  let reason;
-  try {
-    reason = decide(start, sessionId, filePath);
-  } catch {
-    reason = null;
-  }
-  if (reason) {
-    console.log(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "deny",
-        permissionDecisionReason: reason
-      }
-    }));
-  }
-}
-
-// src/lib/gate.ts
-main();
+var P=Object.defineProperty;var o=(t,e)=>P(t,"name",{value:e,configurable:!0});import*as c from"node:fs";import*as a from"node:path";import*as $ from"node:fs";import*as w from"node:path";var _=[".werkmeister",".sandbox"];function S(t){let e=_.find(n=>$.existsSync(w.join(t,n)));return w.join(t,e??_[0])}o(S,"dotDir");var O="Precedence: these standards' rules win over conflicting task framing \u2014 if a rule and the task clash, follow the rule and say so (invariant: apply it and write a `decision` note; rule: surface the conflict in one line, then apply). This gate fires once; your retry will proceed.",A="Standards gate: invoke `sb-implement` before coding \u2014 it loads the universal base (ponytail + comments + engineering) and the workspace notes. Then retry this edit.";function R(t){let e="",n=0,s=t.length;for(;n<s;){let u=t[n];if(n+=1,u==="*")e+=".*";else if(u==="?")e+=".";else if(u==="["){let r=n;for(r<s&&t[r]==="!"&&(r+=1),r<s&&t[r]==="]"&&(r+=1);r<s&&t[r]!=="]";)r+=1;if(r>=s)e+="\\[";else{let i=t.slice(n,r).replace(/\\/g,"\\\\");n=r+1,i.startsWith("!")?i="^"+i.slice(1):i.startsWith("^")&&(i="\\"+i),e+=`[${i}]`}}else e+=u.replace(/[.+^${}()|[\]\\]/g,"\\$&")}return`^(?:${e})$`}o(R,"_translate");function F(t,e){return new RegExp(R(e),"s").test(t)}o(F,"fnmatch");function J(t){let e=a.resolve(t);for(;;){if(W(S(e)))return e;let n=a.dirname(e);if(n===e)return null;e=n}}o(J,"findWorkspaceRoot");function W(t){try{return c.statSync(t).isDirectory()}catch{return!1}}o(W,"_isDir");function T(t){try{return c.statSync(t).isFile()}catch{return!1}}o(T,"_isFile");function h(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}o(h,"_isDict");function C(t){let e=a.join(S(t),"standards.json");if(!T(e))return null;let n;try{n=JSON.parse(c.readFileSync(e,"utf8"))}catch{return null}return h(n)?n:null}o(C,"loadManifest");function E(t,e){return a.join(S(t),".gate",`${e}.json`)}o(E,"_statePath");function G(t,e){let n=E(t,e);if(!T(n))return{};let s;try{s=JSON.parse(c.readFileSync(n,"utf8"))}catch{return null}return h(s)?s:null}o(G,"_loadState");function L(t,e,n){try{let s=E(t,e);return c.mkdirSync(a.dirname(s),{recursive:!0}),c.writeFileSync(s,JSON.stringify(n)),!0}catch{return!1}}o(L,"_saveState");function k(t){return[...t].sort()}o(k,"_sorted");function X(t){let e=/^---\r?\n([\s\S]*?)\r?\n---/.exec(t);if(!e)return;let n=/^status:\s*["']?([^\s"'#]+)/m.exec(e[1]);return n?n[1].toLowerCase():null}o(X,"_noteStatus");function Y(t,e){let n=String(e.note??"");if(!/^[a-z]+$/.test(n))return!0;let s=e.status?String(e.status).toLowerCase():null,u=a.join(S(t),"notes"),r;try{r=c.readdirSync(u)}catch(l){return l.code!=="ENOENT"}let i=new RegExp(`^\\d{3}-${n}-.+\\.md$`);for(let l of r){if(!i.test(l))continue;let m;try{m=c.readFileSync(a.join(u,l),"utf8")}catch{return!0}let p=X(m);if(p===void 0)return!0;if(!(p==="superseded"||p==="graduated")&&(s===null||p===s))return!0}return!1}o(Y,"_phaseGateSatisfied");function z(t){let e=String(t.note);if(t.status){let n=String(t.status);return`Phase gate: no \`${e}\` note in \`.sandbox/notes/\` has \`status: ${n}\`, so source edits wait for an approved design. Invoke \`sb-research\`, present the design to the user, and when they approve write \`NNN-${e}-<slug>.md\` with \`status: ${n}\` recording what was approved. Then retry this edit. Edits under \`.sandbox/\` are not gated.`}return`Phase gate: no \`${e}\` note in \`.sandbox/notes/\` names the root cause yet. Invoke \`sb-research\`, reproduce the problem, and write \`NNN-${e}-<slug>.md\` stating the root cause. Then retry this edit. Edits under \`.sandbox/\` are not gated.`}o(z,"_phaseGateText");function H(t,e,n){if(!e||e.includes("/")||e.includes(".."))return null;let s=J(t);if(s===null)return null;let u=C(s);if(u===null)return null;let r=G(s,e);if(r===null)return null;let i=n?a.relative(s,n):"",l=u.phase_gate;if(h(l)&&i&&i!==".."&&!i.startsWith(".."+a.sep)&&!a.isAbsolute(i)&&!_.some(f=>i.startsWith(f+a.sep))&&!Y(s,l))return z(l);let m=new Set(Array.isArray(r.delivered)?r.delivered:[]),p=!r.phase_entry_delivered,d=null,b=h(u.domains)?u.domains:{};for(let f of k(Object.keys(b))){let y=b[f];if(m.has(f)||!h(y))continue;if((Array.isArray(y.applies_to)?y.applies_to:[]).some(j=>F(i,String(j)))){d=f;break}}if(!p&&d===null)return null;let g=[];if(p&&g.push(A),d!==null){let f=b[d],y=String(h(f)&&f.summary||"").trim(),x=`Standards gate: you are editing a path governed by the \`${d}\` standard, which has not been loaded this session. Invoke the \`sb-${d}-standard\` skill, then retry this edit.`;y&&(x+=` Summary: ${y}.`),g.push(x)}g.push(O);let D={phase_entry_delivered:!0,delivered:k(d?new Set([...m,d]):m)};return L(s,e,D)?g.join(`
+`):null}o(H,"decide");function N(){let t;try{let i=process.stdin.isTTY?"":c.readFileSync(0,"utf8"),l=i.trim()?JSON.parse(i):{};t=h(l)?l:{}}catch{t={}}let e=String(t.session_id||""),n=t.tool_input,s=String(h(n)&&n.file_path||""),u=String(t.cwd||process.cwd()),r;try{r=H(u,e,s)}catch{r=null}r&&console.log(JSON.stringify({hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:r}}))}o(N,"main");N();
 //# sourceMappingURL=gate.js.map

package/dist/lib/pr_guard.js

@@ -1,75 +1,4 @@
 import { createRequire as __sandboxCreateRequire } from "node:module";
 const require = __sandboxCreateRequire(import.meta.url);
-
-// ../../packages/sandbox-core/dist/pr_guard.js
-import * as fs2 from "node:fs";
-import * as path2 from "node:path";
-
-// ../../packages/sandbox-core/dist/dot_dir.js
-import * as fs from "node:fs";
-import * as path from "node:path";
-var DOT_DIRS = [".werkmeister", ".sandbox"];
-function dotDir(parent) {
-  const found = DOT_DIRS.find((d) => fs.existsSync(path.join(parent, d)));
-  return path.join(parent, found ?? DOT_DIRS[0]);
-}
-
-// ../../packages/sandbox-core/dist/pr_guard.js
-function findRecordRoot(start) {
-  let dir = path2.resolve(start);
-  for (; ; ) {
-    if (fs2.existsSync(path2.join(dotDir(dir), "workspace.yml")))
-      return dir;
-    const parent = path2.dirname(dir);
-    if (parent === dir)
-      return null;
-    dir = parent;
-  }
-}
-function prFileDirName(root) {
-  try {
-    const names = fs2.readdirSync(path2.join(root, "stages")).sort();
-    const dir = names.find((n) => /^\d+_propose$/.test(n)) ?? names.find((n) => /^\d+_ship$/.test(n));
-    return dir ? `stages/${dir}/output/` : "the propose stage's output/";
-  } catch {
-    return `${path2.basename(dotDir(root))}/notes/`;
-  }
-}
-var GH_PR_CREATE = /\bgh\s+pr\s+create\b/;
-var MCP_CREATE_PR = /create_pull_request$/;
-function decide(input) {
-  const root = findRecordRoot(String(input["cwd"] || process.cwd()));
-  if (!root)
-    return null;
-  const tool = String(input["tool_name"] || "");
-  const command = String(input["tool_input"]?.["command"] || "");
-  const opensPr = tool === "Bash" && GH_PR_CREATE.test(command) || MCP_CREATE_PR.test(tool);
-  if (!opensPr)
-    return null;
-  const rules = ["_shared/pr-rules.md", ...DOT_DIRS.map((d) => `${d}/pr-rules.md`)].find((p) => fs2.existsSync(path2.join(root, p))) ?? "docs/workspace-lifecycle.md in the sandbox repo";
-  return `Inside sandbox workspace \`${path2.basename(root)}\`, PRs open only through \`sandbox pr open\`: it runs the pre-PR gate and records the URL. Write the PR file in \`${prFileDirName(root)}\`, have the person set \`status: approved\`, then run \`sandbox pr open\`. Rules: \`${rules}\`.`;
-}
-function main() {
-  let reason = null;
-  try {
-    const raw = process.stdin.isTTY ? "" : fs2.readFileSync(0, "utf8");
-    const parsed = raw.trim() ? JSON.parse(raw) : {};
-    if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed))
-      reason = decide(parsed);
-  } catch {
-    reason = null;
-  }
-  if (reason) {
-    console.log(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "deny",
-        permissionDecisionReason: reason
-      }
-    }));
-  }
-}
-
-// src/lib/pr_guard.ts
-main();
+var h=Object.defineProperty;var n=(e,t)=>h(e,"name",{value:t,configurable:!0});import*as s from"node:fs";import*as r from"node:path";import*as u from"node:fs";import*as a from"node:path";var p=[".werkmeister",".sandbox"];function d(e){let t=p.find(o=>u.existsSync(a.join(e,o)));return a.join(e,t??p[0])}n(d,"dotDir");function x(e){let t=r.resolve(e);for(;;){if(s.existsSync(r.join(d(t),"workspace.yml")))return t;let o=r.dirname(t);if(o===t)return null;t=o}}n(x,"findRecordRoot");function y(e){try{let t=s.readdirSync(r.join(e,"stages")).sort(),o=t.find(i=>/^\d+_propose$/.test(i))??t.find(i=>/^\d+_ship$/.test(i));return o?`stages/${o}/output/`:"the propose stage's output/"}catch{return`${r.basename(d(e))}/notes/`}}n(y,"prFileDirName");var R=/\bgh\s+pr\s+create\b/,b=/create_pull_request$/;function S(e){let t=x(String(e.cwd||process.cwd()));if(!t)return null;let o=String(e.tool_name||""),i=String(e.tool_input?.command||"");if(!(o==="Bash"&&R.test(i)||b.test(o)))return null;let l=["_shared/pr-rules.md",...p.map(c=>`${c}/pr-rules.md`)].find(c=>s.existsSync(r.join(t,c)))??"docs/workspace-lifecycle.md in the sandbox repo";return`Inside sandbox workspace \`${r.basename(t)}\`, PRs open only through \`sandbox pr open\`: it runs the pre-PR gate and records the URL. Write the PR file in \`${y(t)}\`, have the person set \`status: approved\`, then run \`sandbox pr open\`. Rules: \`${l}\`.`}n(S,"decide");function m(){let e=null;try{let t=process.stdin.isTTY?"":s.readFileSync(0,"utf8"),o=t.trim()?JSON.parse(t):{};typeof o=="object"&&o!==null&&!Array.isArray(o)&&(e=S(o))}catch{e=null}e&&console.log(JSON.stringify({hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:e}}))}n(m,"main");m();
 //# sourceMappingURL=pr_guard.js.map