wicked-crew 0.3.1 → 0.4.0

package/dist/api/gate-cache.js

@@ -1,46 +1,92 @@
 /**
- * Self-healing gate-prompt cache (DES-STUDIO-001 §3.3).
+ * When a gate was observed, ISO-8601.
  *
- * Core does NOT persist the gate prompt — it exists only on the transient
- * `awaitingHuman` CoreEvent (`AgentSession` has no prompt field). So the daemon
- * event-sources it here, keyed by runId (a paused run has exactly one open gate,
- * before `unit_ix`). Entries are pruned on any resumed/terminal event for the
- * run, and re-checked against `sessionsDetail()` on every list reconcile so the
- * cache can neither leak nor go stale ("re-merged on reconcile, pruned to
- * still-paused — can't leak or blank").
+ * A replayed log entry carries the engine's own capture-time `ts`; a live frame does not, and for
+ * one of those "now" IS the observation time. Using `ts` when it is there is not a nicety: studio
+ * sorts the open-gate list newest-first on this field, so stamping a replay with `Date.now()` would
+ * collapse every rebuilt gate to the restart instant and scramble their order.
+ */
+function observedAt(event) {
+    return new Date(typeof event.ts === 'number' ? event.ts : Date.now()).toISOString();
+}
+/**
+ * The one rule that turns an event into a cache mutation.
+ *
+ * Shared verbatim by the live stream and by durable replay so a rebuilt gate cannot disagree with
+ * what the live stream would have produced from the same events. Two hand-written folds would be
+ * free to drift, and the drift would only ever show up after a restart — the exact condition nobody
+ * exercises.
+ */
+function fold(entries, event) {
+    const session = typeof event.session === 'string' ? event.session : undefined;
+    if (session === undefined)
+        return;
+    switch (event.type) {
+        case 'awaitingHuman':
+            if (typeof event.ord === 'number' && typeof event.prompt === 'string') {
+                entries.set(session, {
+                    ord: event.ord,
+                    prompt: event.prompt,
+                    lifecycle: 'open',
+                    receivedAt: observedAt(event),
+                });
+            }
+            break;
+        case 'resumed':
+        case 'sessionCompleted':
+        case 'runCancelled':
+        case 'sessionFailed':
+            entries.delete(session);
+            break;
+        default:
+            break;
+    }
+}
+/**
+ * Gate-prompt cache over a durable log (DES-STUDIO-001 §3.3).
+ *
+ * The prompt is keyed by runId — a paused run has exactly one open gate, before `unit_ix`. Entries
+ * are pruned on any resumed/terminal event for the run, and re-checked against `sessionsDetail()`
+ * on every list reconcile, so the cache can neither leak nor go stale.
  *
- * NOTE: the full HITL lifecycle from §3.3 (advisory / hard-expiry timers,
- * append-only message log, auto-cancel-on-expiry, synthesized `gateLifecycle`
- * frames) is a deliberate follow-on. This increment caches only the prompt so a
- * late-joining browser can render the gate; `lifecycle` is always `open`.
+ * That self-healing claim was true and beside the point until FINDING-051: every path here was
+ * prune-only, so a daemon restart dropped the map and **nothing could put an entry back**. A parked
+ * run then kept holding the operator without being able to say what it was asking. The prompt was
+ * never actually lost — core records `awaitingHuman` to the event log (core#139) — it was simply
+ * never read. `rebuild` is that read, which demotes this map to what it was always meant to be: a
+ * latency optimisation, not the system of record.
+ *
+ * NOTE: the full HITL lifecycle from §3.3 (advisory / hard-expiry timers, append-only message log,
+ * auto-cancel-on-expiry, synthesized `gateLifecycle` frames) is a deliberate follow-on. This
+ * increment caches only the prompt so a late-joining browser can render the gate; `lifecycle` is
+ * always `open`.
  */
 export class GateCache {
     entries = new Map();
-    /** Fold one CoreEvent into the cache. */
+    /** Fold one live CoreEvent into the cache. */
     ingest(event) {
-        const session = typeof event.session === 'string' ? event.session : undefined;
-        if (session === undefined)
-            return;
-        switch (event.type) {
-            case 'awaitingHuman':
-                if (typeof event.ord === 'number' && typeof event.prompt === 'string') {
-                    this.entries.set(session, {
-                        ord: event.ord,
-                        prompt: event.prompt,
-                        lifecycle: 'open',
-                        receivedAt: new Date().toISOString(),
-                    });
-                }
-                break;
-            case 'resumed':
-            case 'sessionCompleted':
-            case 'runCancelled':
-            case 'sessionFailed':
-                this.entries.delete(session);
-                break;
-            default:
-                break;
-        }
+        fold(this.entries, event);
+    }
+    /**
+     * Rebuild one run's gate from its durable event history and adopt the result (FINDING-051).
+     *
+     * `events` is the run's log oldest-first. Folding all of it yields the last `awaitingHuman` not
+     * followed by a resumed/terminal event — i.e. an open gate, or nothing.
+     *
+     * Deliberately does NOT cross-check the run's live status first: that costs a `sessionsDetail()`
+     * on a read path, and the write side is already guarded — approving a run that has moved on is
+     * refused by the `status === 'awaiting_human'` check on `POST /runs/:id/gate`. So the worst a
+     * stale replay can do is show a prompt that then declines to be approved, and `reconcile` drops
+     * it on the next list. The failure mode is a confusing read, never a bad write.
+     */
+    rebuild(runId, events) {
+        const replayed = new Map();
+        for (const event of events)
+            fold(replayed, event);
+        const entry = replayed.get(runId);
+        if (entry)
+            this.entries.set(runId, entry);
+        return entry;
     }
     /** The cached open gate for a run, if any. */
     get(runId) {

package/dist/api/gate-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-cache.js","sourceRoot":"","sources":["../../src/api/gate-cache.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,SAAS;IACH,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE7D,yCAAyC;IACzC,MAAM,CAAC,KAAgB;QACrB,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,eAAe;gBAClB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACtE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;wBACxB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,MAAM;wBACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACrC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,KAAK,SAAS,CAAC;YACf,KAAK,kBAAkB,CAAC;YACxB,KAAK,cAAc,CAAC;YACpB,KAAK,eAAe;gBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7B,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,8FAA8F;IAC9F,SAAS,CAAC,KAAoB;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CACpF,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"gate-cache.js","sourceRoot":"","sources":["../../src/api/gate-cache.ts"],"names":[],"mappings":"AAcA;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,KAAgB;IAClC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,IAAI,CAAC,OAAoC,EAAE,KAAgB;IAClE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,eAAe;YAClB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACtE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;oBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,MAAM;oBACjB,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;iBAC9B,CAAC,CAAC;YACL,CAAC;YACD,MAAM;QACR,KAAK,SAAS,CAAC;QACf,KAAK,kBAAkB,CAAC;QACxB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM;QACR;YACE,MAAM;IACV,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,SAAS;IACH,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE7D,8CAA8C;IAC9C,MAAM,CAAC,KAAgB;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,KAAa,EAAE,MAAmB;QACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8CAA8C;IAC9C,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,8FAA8F;IAC9F,SAAS,CAAC,KAAoB;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CACpF,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;CACF"}

package/dist/api/requirements.d.ts

@@ -0,0 +1,66 @@
+import type { RepoEntry } from '../core/types.js';
+export interface RequirementOverride {
+    title?: string | undefined;
+    notes?: string | undefined;
+    status?: string | undefined;
+    risk?: boolean | undefined;
+}
+export type RequirementCategory = 'functional' | 'config-data';
+/** Product-functional requirements come from CODE; statements extracted from
+ * lockfiles, manifests, data fixtures, and docs are honest observations about
+ * those assets but are NOT product behavior — they class as config-data so the
+ * default view can focus on the product. */
+export declare function categoryOf(file: string): RequirementCategory;
+export interface RequirementSummary {
+    key: string;
+    domain: string;
+    reqId: string;
+    title: string;
+    category: RequirementCategory;
+    /** First business-rule statement — the requirement's actual content (empty when none). */
+    statement: string;
+    status: string;
+    risk: boolean;
+    riskSource: 'operator' | 'data' | null;
+    edited: boolean;
+}
+export interface RequirementDetail extends RequirementSummary {
+    description: string;
+    notes: string;
+    sourceTitle: string;
+    ruleCount: number;
+    componentCount: number;
+    validationCount: number;
+    errorPathCount: number;
+    businessRules: unknown[];
+    legacyComponents: unknown[];
+}
+export interface RequirementsQuery {
+    q?: string | undefined;
+    risk?: 'risk' | 'no-risk' | undefined;
+    domain?: string | undefined;
+    category?: RequirementCategory | undefined;
+    offset: number;
+    limit: number;
+}
+export interface RequirementsPage {
+    total: number;
+    corpus: number;
+    offset: number;
+    limit: number;
+    items: RequirementSummary[];
+    /**
+     * Which of the two sources served this corpus. The module header explains why that
+     * matters operationally — the artifact is an evidence-gated snapshot that can lag the
+     * live store by hours, and a UI serving stale placeholder titles while the store held
+     * thousands of validated statements is an observed failure, not a hypothetical. Without
+     * this the caller cannot tell which one it is looking at. (FINDING-065)
+     */
+    source: 'store' | 'artifact';
+}
+/** Tokenized AND-match: every whitespace-separated term must appear in the haystack. */
+export declare function listRequirements(repo: RepoEntry, query: RequirementsQuery): Promise<RequirementsPage | null>;
+export declare function getRequirement(repo: RepoEntry, key: string): Promise<RequirementDetail | null>;
+/** Merge a patch into the overrides sidecar (atomic write) and return the fresh detail. */
+export declare function patchRequirement(repo: RepoEntry, key: string, patch: RequirementOverride): Promise<RequirementDetail | null>;
+//# sourceMappingURL=requirements.d.ts.map

package/dist/api/requirements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirements.d.ts","sourceRoot":"","sources":["../../src/api/requirements.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAmBlD,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,aAAa,CAAC;AAE/D;;;4CAG4C;AAC5C,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAM5D;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0FAA0F;IAC1F,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,OAAO,EAAE,CAAC;IACzB,gBAAgB,EAAE,OAAO,EAAE,CAAC;CAC7B;AAoQD,MAAM,WAAW,iBAAiB;IAChC,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B;;;;;;OAMG;IACH,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;CAC9B;AAED,wFAAwF;AACxF,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,SAAS,EACf,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAyBlC;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,SAAS,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmBnC;AAED,2FAA2F;AAC3F,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,SAAS,EACf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmBnC"}

package/dist/api/requirements.js

@@ -0,0 +1,328 @@
+/**
+ * REQUIREMENTS SERVICE — server-side search + operator overrides over the LIVE
+ * estate store, with the `requirements_graph.json` artifact as fallback.
+ *
+ * Why the store is primary: the artifact is an evidence-gated SNAPSHOT — it only
+ * regenerates when `wicked-core domain-graph` passes its coverage bar, so mid-extraction
+ * it can lag the store by hours (observed: a UI serving day-old placeholder titles while
+ * the store held thousands of validated statements). Requirements content lives in
+ * estate (`nodes.requirement` + RULE-* annotations); the UI reads that truth directly
+ * (read-only `node:sqlite`) and falls back to the artifact for repos without a store
+ * or on runtimes without the sqlite builtin.
+ *
+ * Why server-side: 15k+ requirements — shipping them to the browser for JS-side
+ * filtering is not search. The daemon builds a flat index (cached, invalidated on
+ * store/artifact mtime with a small TTL guard against WAL-churn thrash), and queries
+ * run here: tokenized AND-match over id/domain/title/statements, risk + domain
+ * filters, offset/limit pagination.
+ *
+ * Why an OVERRIDES sidecar: the artifact is DERIVED (regenerated from the estate
+ * store), so operator edits written into it would be clobbered on the next
+ * `domain-graph` run. Edits live in `requirements_overrides.json` beside the artifact,
+ * keyed `domain::reqId`, and are merged at read time — the overlay survives
+ * regeneration and keeps provenance honest (`riskSource: operator` vs `data`).
+ */
+import { readFile, writeFile, rename, mkdir, stat } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { codeGraphDb, requirementsGraph, requirementsOverrides } from '../core/repoPaths.js';
+/** Product-functional requirements come from CODE; statements extracted from
+ * lockfiles, manifests, data fixtures, and docs are honest observations about
+ * those assets but are NOT product behavior — they class as config-data so the
+ * default view can focus on the product. */
+export function categoryOf(file) {
+    const f = file.toLowerCase();
+    const base = f.slice(f.lastIndexOf('/') + 1);
+    if (/\.(json|ya?ml|lock|toml|ini|env|md|mdx|txt|csv)$/.test(base))
+        return 'config-data';
+    if (base.includes('pnpm-lock') || base.includes('package-lock'))
+        return 'config-data';
+    return 'functional';
+}
+const RISK_RE = /risk/i;
+const RISK_PREFIX = '[RISK]';
+/** WAL churn during extraction touches the db every few seconds — don't rebuild a
+ * 15k-row index per keystroke; a fresh-enough index is authoritative for this long. */
+const REBUILD_TTL_MS = 5_000;
+// Paths come from `repoPaths` — this module used to spell the code-graph path itself, which is
+// one of the five copies FINDING-069 was made of. It takes the whole `RepoEntry` rather than a
+// root path for exactly that reason: a bare string is an invitation to re-derive.
+async function mtimeMs(path) {
+    try {
+        return (await stat(path)).mtimeMs;
+    }
+    catch {
+        return -1;
+    }
+}
+async function readOverrides(repo) {
+    try {
+        const raw = await readFile(requirementsOverrides(repo), 'utf8');
+        const parsed = JSON.parse(raw);
+        return typeof parsed === 'object' && parsed !== null
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+const cache = new Map();
+let tmpSeq = 0;
+/** Lazily resolved sqlite builtin — absent on older Node runtimes → artifact fallback. */
+let sqliteMod;
+async function sqlite() {
+    if (sqliteMod === undefined) {
+        try {
+            const name = 'node:sqlite';
+            sqliteMod = (await import(name));
+        }
+        catch {
+            sqliteMod = null;
+        }
+    }
+    return sqliteMod;
+}
+/** Build the index from the LIVE estate store (read-only). Returns null when the
+ * store can't serve (no db, no sqlite builtin, schema mismatch) — caller falls back. */
+async function buildStoreIndex(repo, sourceMtime, ovMtime) {
+    const mod = await sqlite();
+    if (mod === null)
+        return null;
+    const overrides = await readOverrides(repo);
+    let db = null;
+    const entries = [];
+    const byKey = new Map();
+    try {
+        db = new mod.DatabaseSync(codeGraphDb(repo), { readOnly: true });
+        const rules = new Map();
+        for (const r of db
+            .prepare("SELECT node_sym, value, confidence FROM annotations WHERE key LIKE 'RULE-%'")
+            .all()) {
+            const list = rules.get(r.node_sym) ?? [];
+            list.push({ statement: r.value ?? '', confidence: r.confidence });
+            rules.set(r.node_sym, list);
+        }
+        const rows = db
+            .prepare(`SELECT n.symbol AS sid, s.sym AS sym, n.name, n.file, n.requirement,
+                n.requirement_validated AS validated
+         FROM nodes n JOIN symbols s ON s.sid = n.symbol
+         WHERE n.requirement IS NOT NULL AND n.requirement != ''`)
+            .all();
+        for (const row of rows) {
+            const key = row.sym;
+            const ov = overrides[key];
+            const file = row.file ?? '';
+            const slash = file.lastIndexOf('/');
+            const domain = slash > 0 ? file.slice(0, slash) : '(root)';
+            const dataRisk = row.requirement.startsWith(RISK_PREFIX);
+            const risk = ov?.risk !== undefined ? ov.risk : dataRisk;
+            const riskSource = ov?.risk !== undefined ? 'operator' : dataRisk ? 'data' : null;
+            const title = ov?.title ?? (row.name !== null && row.name !== '' ? row.name : key);
+            const nodeRules = rules.get(row.sid) ?? [];
+            const summary = {
+                key,
+                domain,
+                reqId: key,
+                title,
+                category: categoryOf(file),
+                statement: row.requirement,
+                status: ov?.status ?? (row.validated === 1 ? 'validated' : 'active'),
+                risk,
+                riskSource,
+                edited: ov !== undefined,
+            };
+            const source = {
+                title,
+                description: file,
+                status: summary.status,
+                legacy_components: file === '' ? [] : [file],
+                business_rules: nodeRules,
+            };
+            const haystack = `${key} ${domain} ${title} ${row.requirement} ${nodeRules.map((r) => r.statement).join(' ')} ${ov?.notes ?? ''}`.toLowerCase();
+            const entry = { summary, haystack, source };
+            entries.push(entry);
+            byKey.set(key, entry);
+        }
+    }
+    catch {
+        return null; // schema drift or unreadable store — artifact fallback
+    }
+    finally {
+        db?.close();
+    }
+    return {
+        entries,
+        byKey,
+        sourceMtimeMs: sourceMtime,
+        fromStore: true,
+        overridesMtimeMs: ovMtime,
+        builtAtMs: Date.now(),
+        total: entries.length,
+    };
+}
+async function buildIndex(repo) {
+    const db = codeGraphDb(repo);
+    const [dbMtime, walMtime, artMtime, ovMtime] = await Promise.all([
+        mtimeMs(db),
+        mtimeMs(`${db}-wal`),
+        mtimeMs(requirementsGraph(repo)),
+        mtimeMs(requirementsOverrides(repo)),
+    ]);
+    const storeMtime = Math.max(dbMtime, walMtime);
+    const cached = cache.get(repo.root_path);
+    // TTL applies ONLY to store-built indexes: extraction WAL churn changes the db
+    // mtime every few seconds and must not trigger a rebuild per request. Artifact
+    // mtime changes only on regen, so artifact-built indexes always mtime-check.
+    if (cached?.fromStore === true && Date.now() - cached.builtAtMs < REBUILD_TTL_MS)
+        return cached;
+    if (storeMtime >= 0) {
+        if (cached && cached.sourceMtimeMs === storeMtime && cached.overridesMtimeMs === ovMtime) {
+            cached.builtAtMs = Date.now();
+            return cached;
+        }
+        const fromStore = await buildStoreIndex(repo, storeMtime, ovMtime);
+        if (fromStore !== null) {
+            cache.set(repo.root_path, fromStore);
+            return fromStore;
+        }
+    }
+    if (artMtime < 0)
+        return null; // no store, no artifact — requirements not generated yet
+    if (cached && cached.sourceMtimeMs === artMtime && cached.overridesMtimeMs === ovMtime) {
+        return cached;
+    }
+    const raw = await readFile(requirementsGraph(repo), 'utf8');
+    const graph = JSON.parse(raw);
+    const overrides = await readOverrides(repo);
+    const entries = [];
+    const byKey = new Map();
+    for (const [domain, dom] of Object.entries(graph.domains ?? {})) {
+        for (const [reqId, req] of Object.entries(dom.requirements ?? {})) {
+            const key = `${domain}::${reqId}`;
+            const ov = overrides[key];
+            // Data-derived risk: any business rule whose serialized form names risk (the
+            // extraction harness's RESOLVED-or-RISK floor surfaces here at current fidelity).
+            const dataRisk = (req.business_rules ?? []).some((r) => RISK_RE.test(JSON.stringify(r)));
+            const risk = ov?.risk !== undefined ? ov.risk : dataRisk;
+            const riskSource = ov?.risk !== undefined ? 'operator' : dataRisk ? 'data' : null;
+            const title = ov?.title ?? req.title ?? reqId;
+            const statements = (req.business_rules ?? [])
+                .map((r) => {
+                const st = r.statement;
+                return typeof st === 'string' ? st.trim() : '';
+            })
+                .filter((st) => st !== '');
+            const firstComponent = (req.legacy_components ?? []).find((c) => typeof c === 'string');
+            const summary = {
+                key,
+                domain,
+                reqId,
+                title,
+                category: categoryOf(firstComponent ?? ''),
+                statement: statements[0] ?? '',
+                status: ov?.status ?? req.status ?? 'active',
+                risk,
+                riskSource,
+                edited: ov !== undefined,
+            };
+            // Statements are part of the haystack: searching the requirements means
+            // searching the actual rule text, not just titles and ids.
+            const haystack = `${reqId} ${domain} ${title} ${req.description ?? ''} ${statements.join(' ')} ${ov?.notes ?? ''}`.toLowerCase();
+            const entry = { summary, haystack, source: req };
+            entries.push(entry);
+            byKey.set(key, entry);
+        }
+    }
+    const index = {
+        entries,
+        byKey,
+        sourceMtimeMs: artMtime,
+        fromStore: false,
+        overridesMtimeMs: ovMtime,
+        builtAtMs: Date.now(),
+        total: entries.length,
+    };
+    cache.set(repo.root_path, index);
+    return index;
+}
+/** Tokenized AND-match: every whitespace-separated term must appear in the haystack. */
+export async function listRequirements(repo, query) {
+    const index = await buildIndex(repo);
+    if (index === null)
+        return null;
+    const terms = (query.q ?? '')
+        .toLowerCase()
+        .split(/\s+/)
+        .filter((t) => t.length > 0);
+    const domainFilter = query.domain?.toLowerCase();
+    const matched = [];
+    for (const e of index.entries) {
+        if (query.category !== undefined && e.summary.category !== query.category)
+            continue;
+        if (query.risk === 'risk' && !e.summary.risk)
+            continue;
+        if (query.risk === 'no-risk' && e.summary.risk)
+            continue;
+        if (domainFilter !== undefined && !e.summary.domain.toLowerCase().includes(domainFilter))
+            continue;
+        if (terms.length > 0 && !terms.every((t) => e.haystack.includes(t)))
+            continue;
+        matched.push(e.summary);
+    }
+    return {
+        total: matched.length,
+        corpus: index.total,
+        offset: query.offset,
+        limit: query.limit,
+        items: matched.slice(query.offset, query.offset + query.limit),
+        source: index.fromStore ? 'store' : 'artifact',
+    };
+}
+export async function getRequirement(repo, key) {
+    const index = await buildIndex(repo);
+    const entry = index?.byKey.get(key);
+    if (index === null || entry === undefined)
+        return null;
+    const overrides = await readOverrides(repo);
+    const ov = overrides[key];
+    const src = entry.source;
+    return {
+        ...entry.summary,
+        description: src.description ?? '',
+        notes: ov?.notes ?? '',
+        sourceTitle: src.title ?? entry.summary.reqId,
+        ruleCount: (src.business_rules ?? []).length,
+        componentCount: (src.legacy_components ?? []).length,
+        validationCount: (src.validations ?? []).length,
+        errorPathCount: (src.error_paths ?? []).length,
+        businessRules: (src.business_rules ?? []).slice(0, 10),
+        legacyComponents: (src.legacy_components ?? []).slice(0, 10),
+    };
+}
+/** Merge a patch into the overrides sidecar (atomic write) and return the fresh detail. */
+export async function patchRequirement(repo, key, patch) {
+    const index = await buildIndex(repo);
+    if (index === null || !index.byKey.has(key))
+        return null;
+    const overrides = await readOverrides(repo);
+    const next = { ...overrides[key] };
+    if (patch.title !== undefined)
+        next.title = patch.title;
+    if (patch.notes !== undefined)
+        next.notes = patch.notes;
+    if (patch.status !== undefined)
+        next.status = patch.status;
+    if (patch.risk !== undefined)
+        next.risk = patch.risk;
+    overrides[key] = next;
+    const path = requirementsOverrides(repo);
+    await mkdir(dirname(path), { recursive: true });
+    // Collision-proof temp name: pid alone can collide for concurrent in-process
+    // patches; a monotonic per-process counter disambiguates.
+    const tmp = `${path}.tmp-${process.pid}-${++tmpSeq}`;
+    await writeFile(tmp, JSON.stringify(overrides, null, 2), 'utf8');
+    await rename(tmp, path);
+    cache.delete(repo.root_path); // next read rebuilds with the new overrides
+    return getRequirement(repo, key);
+}
+//# sourceMappingURL=requirements.js.map

package/dist/api/requirements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirements.js","sourceRoot":"","sources":["../../src/api/requirements.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AA6B7F;;;4CAG4C;AAC5C,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC;IACxF,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,aAAa,CAAC;IACtF,OAAO,YAAY,CAAC;AACtB,CAAC;AA6CD,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B;uFACuF;AACvF,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,+FAA+F;AAC/F,+FAA+F;AAC/F,kFAAkF;AAElF,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAe;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAA8C;YACjD,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;AAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;AAYf,0FAA0F;AAC1F,IAAI,SAA0C,CAAC;AAC/C,KAAK,UAAU,MAAM;IACnB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,aAAa,CAAC;YAC3B,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAiB,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD;wFACwF;AACxF,KAAK,UAAU,eAAe,CAC5B,IAAe,EACf,WAAmB,EACnB,OAAe;IAEf,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IAC3B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,EAAE,GAA0B,IAAI,CAAC;IACrC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8D,CAAC;QACpF,KAAK,MAAM,CAAC,IAAI,EAAE;aACf,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,EAA6E,EAAE,CAAC;YACpF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YAClE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN;;;iEAGyD,CAC1D;aACA,GAAG,EAAoC,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;YACpB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,EAAE,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,MAAM,UAAU,GACd,EAAE,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,MAAM,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnF,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAuB;gBAClC,GAAG;gBACH,MAAM;gBACN,KAAK,EAAE,GAAG;gBACV,KAAK;gBACL,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC;gBAC1B,SAAS,EAAE,GAAG,CAAC,WAAW;gBAC1B,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACpE,IAAI;gBACJ,UAAU;gBACV,MAAM,EAAE,EAAE,KAAK,SAAS;aACzB,CAAC;YACF,MAAM,MAAM,GAAwB;gBAClC,KAAK;gBACL,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,iBAAiB,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5C,cAAc,EAAE,SAAS;aAC1B,CAAC;YACF,MAAM,QAAQ,GACZ,GAAG,GAAG,IAAI,MAAM,IAAI,KAAK,IAAI,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;YACjI,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,uDAAuD;IACtE,CAAC;YAAS,CAAC;QACT,EAAE,EAAE,KAAK,EAAE,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK;QACL,aAAa,EAAE,WAAW;QAC1B,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,OAAO;QACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAe;IACvC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/D,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;KACrC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,+EAA+E;IAC/E,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAI,MAAM,EAAE,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,cAAc;QAAE,OAAO,MAAM,CAAC;IAEhG,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACpB,IAAI,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,UAAU,IAAI,MAAM,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;YACzF,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACnE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yDAAyD;IACxF,IAAI,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiD,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG,GAAG,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1B,6EAA6E;YAC7E,kFAAkF;YAClF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,IAAI,GAAG,EAAE,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,MAAM,UAAU,GACd,EAAE,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,MAAM,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;YAC9C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;iBAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,EAAE,GAAI,CAA6B,CAAC,SAAS,CAAC;gBACpD,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7B,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAEzE,CAAC;YACd,MAAM,OAAO,GAAuB;gBAClC,GAAG;gBACH,MAAM;gBACN,KAAK;gBACL,KAAK;gBACL,QAAQ,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC1C,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC9B,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ;gBAC5C,IAAI;gBACJ,UAAU;gBACV,MAAM,EAAE,EAAE,KAAK,SAAS;aACzB,CAAC;YACF,wEAAwE;YACxE,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;YACjI,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAc;QACvB,OAAO;QACP,KAAK;QACL,aAAa,EAAE,QAAQ;QACvB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,OAAO;QACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AA2BD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAe,EACf,KAAwB;IAExB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1B,WAAW,EAAE;SACb,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAAE,SAAS;QACpF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;YAAE,SAAS;QACvD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI;YAAE,SAAS;QACzD,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,SAAS;QACnG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,MAAM,EAAE,KAAK,CAAC,KAAK;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9D,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAe,EACf,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACzB,OAAO;QACL,GAAG,KAAK,CAAC,OAAO;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,KAAK,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QACtB,WAAW,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK;QAC7C,SAAS,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM;QAC5C,cAAc,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM;QACpD,eAAe,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM;QAC/C,cAAc,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM;QAC9C,aAAa,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACtD,gBAAgB,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAe,EACf,GAAW,EACX,KAA0B;IAE1B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAwB,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACrD,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;IACrD,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,4CAA4C;IAC1E,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC"}

package/dist/api/routes.d.ts

@@ -1,9 +1,10 @@
 import type { FastifyInstance } from 'fastify';
 import { CoreAdapter } from '../core/adapter.js';
 import type { GateCache } from './gate-cache.js';
+import type { ElicitationCache } from './elicitation-cache.js';
 /**
  * The daemon REST surface. Every endpoint is a thin wrapper over one adapter /
  * core-ts call (DES-STUDIO-001 §2). `session`/`phase` nouns are now `run`/`unit`.
  */
-export declare function registerRoutes(app: FastifyInstance, adapter: CoreAdapter, gateCache: GateCache): void;
+export declare function registerRoutes(app: FastifyInstance, adapter: CoreAdapter, gateCache: GateCache, elicitationCache: ElicitationCache): void;
 //# sourceMappingURL=routes.d.ts.map

package/dist/api/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/api/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAS/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAwGjD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI,CAgjBrG"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/api/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAQ/C,OAAO,EAAwB,WAAW,EAA+B,MAAM,oBAAoB,CAAC;AAEpG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AA6I/D;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,GACjC,IAAI,CAw+BN"}