wicked-crew 0.5.0 → 0.7.0

package/dist/projects/activity.js

@@ -0,0 +1,172 @@
+/**
+ * The project activity feed (DES-PROJECT-001 §5.2) — a READ-SIDE MERGE, not a new store.
+ *
+ * Two sources, one normalized shape:
+ * - CREW: the durable core-event log of the project's `crew.run`/`crew.chat` members
+ *   (`adapter.runEvents` — the same log `/runs/:id/events` serves), entry id `crew:<run>:<seq>`.
+ * - INTERACTIVE: `wicked.interactive.*` bus events carrying this `project_id`, read directly
+ *   from the bus SQLite READ-ONLY (`node:sqlite`, the `requirements.ts` precedent — wicked-bus
+ *   exposes subscribe-cursors, not ad-hoc history queries, and a durable cursor per feed-read
+ *   would turn a GET into a write), entry id `bus:<event_id>`.
+ *
+ * Newest-first, cursor on `(ts, id)` — an opaque `<ts>:<id>` token, base64url. The merge is
+ * recomputed per read; members are few and the log excludes high-volume frames, so the simple
+ * full-merge is the honest v1 (the ADR explicitly rejects a new store here).
+ */
+let sqliteMod;
+async function sqlite() {
+    if (sqliteMod === undefined) {
+        try {
+            const name = 'node:sqlite';
+            sqliteMod = (await import(name));
+        }
+        catch {
+            sqliteMod = null;
+        }
+    }
+    return sqliteMod;
+}
+/** One-line human summary of a core frame (best-effort; `raw` carries the whole frame). */
+function summarizeCoreEvent(frame, runId) {
+    const type = typeof frame['type'] === 'string' ? frame['type'] : 'event';
+    switch (type) {
+        case 'sessionStarted':
+            return `run ${runId} started`;
+        case 'awaitingHuman':
+            return `run ${runId} paused at a human gate${typeof frame['prompt'] === 'string' ? `: ${frame['prompt'].slice(0, 120)}` : ''}`;
+        case 'resumed':
+            return `run ${runId} resumed`;
+        case 'sessionCompleted':
+            return `run ${runId} completed`;
+        case 'sessionFailed':
+            return `run ${runId} failed`;
+        case 'runCancelled':
+            return `run ${runId} cancelled`;
+        case 'gateDecided':
+            return `run ${runId}: gate decided (${String(frame['allow'] ?? '?')})`;
+        default:
+            return `run ${runId}: ${type}`;
+    }
+}
+function summarizeInteractive(eventType, payload) {
+    const doc = payload !== null && typeof payload['document_id'] === 'string' ? payload['document_id'] : '?';
+    const short = eventType.replace(/^wicked\.interactive\./, '');
+    return `doc ${doc}: ${short}`;
+}
+/** Opaque cursor: base64url of `<ts>:<id>`. */
+export function encodeCursor(ts, id) {
+    return Buffer.from(`${ts}:${id}`, 'utf8').toString('base64url');
+}
+export function decodeCursor(cursor) {
+    try {
+        const raw = Buffer.from(cursor, 'base64url').toString('utf8');
+        const sep = raw.indexOf(':');
+        if (sep < 1)
+            return null;
+        const ts = Number(raw.slice(0, sep));
+        if (!Number.isFinite(ts))
+            return null;
+        return { ts, id: raw.slice(sep + 1) };
+    }
+    catch {
+        return null;
+    }
+}
+/** Newest-first ordering on `(ts, id)` — the cursor's total order. */
+function newerFirst(a, b) {
+    return b.ts - a.ts || (a.id < b.id ? 1 : a.id > b.id ? -1 : 0);
+}
+/** Strictly older than the cursor position (the page the caller has not seen). */
+function olderThan(entry, cur) {
+    return entry.ts < cur.ts || (entry.ts === cur.ts && entry.id < cur.id);
+}
+/** The crew half: fold each member run/chat's durable log into entries. */
+async function crewEntries(adapter, refs) {
+    const entries = [];
+    for (const ref of refs) {
+        const events = await adapter.runEvents(ref);
+        if (events === null)
+            break; // no event-log binding on this addon — the crew half is empty
+        for (const event of events) {
+            const frame = event;
+            const ts = typeof frame['ts'] === 'number' ? frame['ts'] : 0;
+            const seq = typeof frame['seq'] === 'number' ? frame['seq'] : 0;
+            entries.push({
+                id: `crew:${ref}:${seq}`,
+                ts,
+                source: 'crew',
+                kind: typeof frame['type'] === 'string' ? frame['type'] : 'event',
+                ref,
+                summary: summarizeCoreEvent(frame, ref),
+                raw: event,
+            });
+        }
+    }
+    return entries;
+}
+/** The interactive half: bus events carrying this `project_id`, read-only. */
+async function interactiveEntries(busDbPath, projectId) {
+    if (busDbPath === null)
+        return [];
+    const mod = await sqlite();
+    if (mod === null)
+        return [];
+    let db = null;
+    const entries = [];
+    try {
+        db = new mod.DatabaseSync(busDbPath, { readOnly: true });
+        const rows = db
+            .prepare(`SELECT event_id, event_type, payload, emitted_at FROM events
+         WHERE event_type LIKE 'wicked.interactive.%'
+           AND json_extract(payload, '$.project_id') = ?
+         ORDER BY emitted_at DESC LIMIT 1000`)
+            .all(projectId);
+        for (const row of rows) {
+            let payload = null;
+            try {
+                payload = JSON.parse(row.payload);
+            }
+            catch {
+                /* raw stays the string */
+            }
+            entries.push({
+                id: `bus:${row.event_id}`,
+                ts: row.emitted_at,
+                source: 'interactive',
+                kind: row.event_type,
+                ref: payload !== null && typeof payload['document_id'] === 'string'
+                    ? payload['document_id']
+                    : '',
+                summary: summarizeInteractive(row.event_type, payload),
+                raw: { event_type: row.event_type, payload: payload ?? row.payload, emitted_at: row.emitted_at },
+            });
+        }
+    }
+    catch {
+        // No bus db / schema mismatch — the interactive half is empty, never an error:
+        // a project with no bound docs must not 500 its activity feed.
+        return entries;
+    }
+    finally {
+        db?.close();
+    }
+    return entries;
+}
+/** Build one page of the merged feed. `refs` = the project's run/chat member refs. */
+export async function buildActivityPage(adapter, projectId, refs, busDbPath, cursor, limit) {
+    const merged = [...(await crewEntries(adapter, refs)), ...(await interactiveEntries(busDbPath, projectId))];
+    merged.sort(newerFirst);
+    let page = merged;
+    if (cursor !== undefined) {
+        const decoded = decodeCursor(cursor);
+        if (decoded !== null)
+            page = merged.filter((e) => olderThan(e, decoded));
+    }
+    const entries = page.slice(0, limit);
+    const last = entries[entries.length - 1];
+    const nextCursor = entries.length === limit && page.length > limit && last !== undefined
+        ? encodeCursor(last.ts, last.id)
+        : null;
+    return { entries, nextCursor };
+}
+//# sourceMappingURL=activity.js.map

package/dist/projects/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../src/projects/activity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAcH,IAAI,SAA0C,CAAC;AAC/C,KAAK,UAAU,MAAM;IACnB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,aAAa,CAAC;YAC3B,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAiB,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CAAC,KAA8B,EAAE,KAAa;IACvE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IACrF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB;YACnB,OAAO,OAAO,KAAK,UAAU,CAAC;QAChC,KAAK,eAAe;YAClB,OAAO,OAAO,KAAK,0BACjB,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAM,KAAK,CAAC,QAAQ,CAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAC3F,EAAE,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,UAAU,CAAC;QAChC,KAAK,kBAAkB;YACrB,OAAO,OAAO,KAAK,YAAY,CAAC;QAClC,KAAK,eAAe;YAClB,OAAO,OAAO,KAAK,SAAS,CAAC;QAC/B,KAAK,cAAc;YACjB,OAAO,OAAO,KAAK,YAAY,CAAC;QAClC,KAAK,aAAa;YAChB,OAAO,OAAO,KAAK,mBAAmB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;QACzE;YACE,OAAO,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB,EAAE,OAAuC;IACtF,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAO,CAAC,aAAa,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC;IACtH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,OAAO,GAAG,KAAK,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,EAAU;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,CAAgB,EAAE,CAAgB;IACpD,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,KAAoB,EAAE,GAA+B;IACtE,OAAO,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,WAAW,CAAC,OAAoB,EAAE,IAAc;IAC7D,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,CAAC,8DAA8D;QAC1F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,KAA2C,CAAC;YAC1D,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,QAAQ,GAAG,IAAI,GAAG,EAAE;gBACxB,EAAE;gBACF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,OAAO;gBAC7E,GAAG;gBACH,OAAO,EAAE,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC;gBACvC,GAAG,EAAE,KAAK;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,kBAAkB,CAC/B,SAAwB,EACxB,SAAiB;IAEjB,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IAC3B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,EAAE,GAA0B,IAAI,CAAC;IACrC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN;;;6CAGqC,CACtC;aACA,GAAG,CAAC,SAAS,CAAoF,CAAC;QACrG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,OAAO,GAAmC,IAAI,CAAC;YACnD,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAA4B,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,OAAO,GAAG,CAAC,QAAQ,EAAE;gBACzB,EAAE,EAAE,GAAG,CAAC,UAAU;gBAClB,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,GAAG,CAAC,UAAU;gBACpB,GAAG,EACD,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,QAAQ;oBAC5D,CAAC,CAAE,OAAO,CAAC,aAAa,CAAY;oBACpC,CAAC,CAAC,EAAE;gBACR,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;gBACtD,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;aACjG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,+DAA+D;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,EAAE,EAAE,KAAK,EAAE,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAoB,EACpB,SAAiB,EACjB,IAAc,EACd,SAAwB,EACxB,MAA0B,EAC1B,KAAa;IAEb,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAExB,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,IAAI;YAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,KAAK,SAAS;QACnE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC"}

package/dist/projects/charter.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The foundation record of a project (DES-PROJECT-001 §3.2) — thin crew glue, deliberately.
+ *
+ * On create/update/archive the daemon writes the PROJECT CHARTER (name, description, lifecycle
+ * note) into the engine's knowledge store under the project's stored scope, and a memory at that
+ * scope. On a project-bound run's completion it writes the EVIDENCE POINTER (run id → the
+ * conventional in-repo verdict path). Estate needs no schema change: `project:` is pure
+ * convention over the kind:id scope grammar.
+ *
+ * Everything here is BEST-EFFORT with retry-free logging: the record is eventually consistent
+ * with the state by design ("no cross-plane transactionality", ADR §10) — a knowledge-store
+ * hiccup must never fail the API call that already committed control state. And the plane rule
+ * holds in both directions: delete core.db and the charter + memories still say what this
+ * project was; delete the record and the project still operates, with amnesia.
+ */
+import type { CoreAdapter } from '../core/adapter.js';
+import type { Project } from '../core/types.js';
+type Log = (msg: string) => void;
+/** Write/refresh the charter after a committed create/update/archive. Fire-and-forget. */
+export declare function writeCharter(adapter: CoreAdapter, project: Project, action: 'created' | 'updated' | 'archived' | 'restored', log: Log): Promise<void>;
+/**
+ * Write the evidence pointer for a completed project-bound run (§3.2 row 3): the run id plus the
+ * conventional in-repo verdict path. The evidence FILES stay in-repo (QE convention) — the
+ * foundation holds pointers, never copies.
+ */
+export declare function writeRunEvidencePointer(adapter: CoreAdapter, projectScope: string, runId: string, repoRoot: string | null, log: Log): Promise<void>;
+export {};
+//# sourceMappingURL=charter.d.ts.map

package/dist/projects/charter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"charter.d.ts","sourceRoot":"","sources":["../../src/projects/charter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;AAEjC,0FAA0F;AAC1F,wBAAsB,YAAY,CAChC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,EACvD,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/projects/charter.js

@@ -0,0 +1,53 @@
+/**
+ * The foundation record of a project (DES-PROJECT-001 §3.2) — thin crew glue, deliberately.
+ *
+ * On create/update/archive the daemon writes the PROJECT CHARTER (name, description, lifecycle
+ * note) into the engine's knowledge store under the project's stored scope, and a memory at that
+ * scope. On a project-bound run's completion it writes the EVIDENCE POINTER (run id → the
+ * conventional in-repo verdict path). Estate needs no schema change: `project:` is pure
+ * convention over the kind:id scope grammar.
+ *
+ * Everything here is BEST-EFFORT with retry-free logging: the record is eventually consistent
+ * with the state by design ("no cross-plane transactionality", ADR §10) — a knowledge-store
+ * hiccup must never fail the API call that already committed control state. And the plane rule
+ * holds in both directions: delete core.db and the charter + memories still say what this
+ * project was; delete the record and the project still operates, with amnesia.
+ */
+/** Write/refresh the charter after a committed create/update/archive. Fire-and-forget. */
+export async function writeCharter(adapter, project, action, log) {
+    try {
+        const when = new Date(project.updated_at).toISOString();
+        const chunks = [
+            `Project charter — ${project.name} (${project.id}). Status: ${project.status}. ` +
+                `Scope: ${project.scope}. ${action} at ${when} via crew.`,
+            ...(project.description !== null && project.description !== undefined
+                ? [project.description]
+                : []),
+        ];
+        await adapter.ingestKnowledge(project.scope, chunks);
+        await adapter.captureMemory(`Project '${project.name}' (${project.id}) ${action}. Charter recorded in the knowledge store under ${project.scope}.`, project.scope);
+    }
+    catch (err) {
+        log(`[projects] charter write for ${project.id} failed (state committed; record lags): ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Write the evidence pointer for a completed project-bound run (§3.2 row 3): the run id plus the
+ * conventional in-repo verdict path. The evidence FILES stay in-repo (QE convention) — the
+ * foundation holds pointers, never copies.
+ */
+export async function writeRunEvidencePointer(adapter, projectScope, runId, repoRoot, log) {
+    try {
+        const scope = `${projectScope}/run:${runId}`;
+        const pointer = repoRoot !== null
+            ? `${repoRoot}/.wicked-testing/evidence/${runId}/verdict.json`
+            : `(repo-less run — no evidence tree)`;
+        await adapter.ingestKnowledge(scope, [
+            `Run ${runId} completed under ${projectScope}. Evidence pointer: ${pointer}`,
+        ]);
+    }
+    catch (err) {
+        log(`[projects] evidence-pointer write for ${runId} failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=charter.js.map

package/dist/projects/charter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"charter.js","sourceRoot":"","sources":["../../src/projects/charter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAoB,EACpB,OAAgB,EAChB,MAAuD,EACvD,GAAQ;IAER,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG;YACb,qBAAqB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,cAAc,OAAO,CAAC,MAAM,IAAI;gBAC9E,UAAU,OAAO,CAAC,KAAK,KAAK,MAAM,OAAO,IAAI,YAAY;YAC3D,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBACnE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;gBACvB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,OAAO,CAAC,aAAa,CACzB,YAAY,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,EAAE,KAAK,MAAM,mDAAmD,OAAO,CAAC,KAAK,GAAG,EACtH,OAAO,CAAC,KAAK,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,gCAAgC,OAAO,CAAC,EAAE,2CACxC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAoB,EACpB,YAAoB,EACpB,KAAa,EACb,QAAuB,EACvB,GAAQ;IAER,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,YAAY,QAAQ,KAAK,EAAE,CAAC;QAC7C,MAAM,OAAO,GACX,QAAQ,KAAK,IAAI;YACf,CAAC,CAAC,GAAG,QAAQ,6BAA6B,KAAK,eAAe;YAC9D,CAAC,CAAC,oCAAoC,CAAC;QAC3C,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE;YACnC,OAAO,KAAK,oBAAoB,YAAY,uBAAuB,OAAO,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,yCAAyC,KAAK,YAC5C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/projects/events.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The project bus seam (DES-PROJECT-001 §4) — crew's side of the conversation.
+ *
+ * Two halves, one bus handle:
+ *
+ * 1. EMIT `wicked.crew.project.{created,updated,archived}` and
+ *    `wicked.crew.membership.{attached,detached}` — always POST-COMMIT (the route handlers call
+ *    these only after the engine's reply, so a phantom event for a write that never landed cannot
+ *    exist). Idempotency keys are TYPE-INCLUSIVE (DES-EXEC-001 rev0.2 correction #4a — two event
+ *    types sharing a key silently drop one on the bus's UNIQUE constraint) and occurrence-unique
+ *    (an attach after a detach is a new fact, so the key carries the attach timestamp).
+ *
+ * 2. BRIDGE `wicked.interactive.*` events that carry a `project_id` onto the daemon's `/ws`
+ *    stream as `projectActivity` frames, so an open project view sees creator-skin progress live
+ *    without a reload (ADR §5.2 / §8 step 7). The durable feed read is `activity.ts`; this is
+ *    only the liveness tap.
+ *
+ * Posture mirrors the QE/interactive-draft seams: the bus is OPTIONAL. A machine without
+ * wicked-bus (or with a broken db) gets a loudly-logged null — project CRUD keeps working, the
+ * events simply don't ride, and the daemon boots regardless.
+ */
+/** Crew's bus DOMAIN COLUMN value — the product-scoped plugin name, matching the repo precedent
+ *  (`INTERACTIVE_DOMAIN = 'wicked-interactive'`). The EVENT TYPES carry the §4 grammar's bare
+ *  `crew` segment (`wicked.crew.project.created`); the two spellings are different fields. */
+export declare const CREW_BUS_DOMAIN = "wicked-crew";
+export declare const PROJECT_CREATED = "wicked.crew.project.created";
+export declare const PROJECT_UPDATED = "wicked.crew.project.updated";
+export declare const PROJECT_ARCHIVED = "wicked.crew.project.archived";
+export declare const MEMBERSHIP_ATTACHED = "wicked.crew.membership.attached";
+export declare const MEMBERSHIP_DETACHED = "wicked.crew.membership.detached";
+export interface ProjectBus {
+    /** Emit one post-commit project event. Never throws; WB-002 (duplicate key) is success. */
+    emit(type: string, payload: Record<string, unknown>, idempotencyKey: string): boolean;
+    /** The resolved bus db path (the activity feed's read side opens the same file). */
+    dbPath: string | null;
+    stop(): Promise<void>;
+}
+export interface ProjectBusOptions {
+    /** Bus db path; omit for wicked-bus's own resolution (honors WICKED_BUS_DATA_DIR). */
+    dbPath?: string;
+    /** Poll cadence for the /ws bridge subscriber, ms (tests shorten it). */
+    pollIntervalMs?: number;
+    log?: (msg: string) => void;
+}
+/**
+ * Open the bus and arm both halves. Returns `null` (logged) when wicked-bus is not importable
+ * or the db cannot open — the caller degrades to CRUD-without-events.
+ */
+export declare function startProjectBus(opts?: ProjectBusOptions): Promise<ProjectBus | null>;
+export declare function projectCreatedKey(projectId: string): string;
+export declare function projectUpdatedKey(projectId: string, updatedAt: number): string;
+export declare function projectArchivedKey(projectId: string, updatedAt: number): string;
+export declare function membershipAttachedKey(projectId: string, kind: string, ref: string, attachedAt: number): string;
+export declare function membershipDetachedKey(projectId: string, memberId: string, at: number): string;
+//# sourceMappingURL=events.d.ts.map

package/dist/projects/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/projects/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH;;8FAE8F;AAC9F,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAM7C,eAAO,MAAM,eAAe,gCAAgC,CAAC;AAC7D,eAAO,MAAM,eAAe,gCAAgC,CAAC;AAC7D,eAAO,MAAM,gBAAgB,iCAAiC,CAAC;AAC/D,eAAO,MAAM,mBAAmB,oCAAoC,CAAC;AACrE,eAAO,MAAM,mBAAmB,oCAAoC,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,2FAA2F;IAC3F,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IACtF,oFAAoF;IACpF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAgG9F;AAID,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AACD,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9E;AACD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/E;AACD,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,MAAM,CAER;AACD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7F"}

package/dist/projects/events.js

@@ -0,0 +1,141 @@
+/**
+ * The project bus seam (DES-PROJECT-001 §4) — crew's side of the conversation.
+ *
+ * Two halves, one bus handle:
+ *
+ * 1. EMIT `wicked.crew.project.{created,updated,archived}` and
+ *    `wicked.crew.membership.{attached,detached}` — always POST-COMMIT (the route handlers call
+ *    these only after the engine's reply, so a phantom event for a write that never landed cannot
+ *    exist). Idempotency keys are TYPE-INCLUSIVE (DES-EXEC-001 rev0.2 correction #4a — two event
+ *    types sharing a key silently drop one on the bus's UNIQUE constraint) and occurrence-unique
+ *    (an attach after a detach is a new fact, so the key carries the attach timestamp).
+ *
+ * 2. BRIDGE `wicked.interactive.*` events that carry a `project_id` onto the daemon's `/ws`
+ *    stream as `projectActivity` frames, so an open project view sees creator-skin progress live
+ *    without a reload (ADR §5.2 / §8 step 7). The durable feed read is `activity.ts`; this is
+ *    only the liveness tap.
+ *
+ * Posture mirrors the QE/interactive-draft seams: the bus is OPTIONAL. A machine without
+ * wicked-bus (or with a broken db) gets a loudly-logged null — project CRUD keeps working, the
+ * events simply don't ride, and the daemon boots regardless.
+ */
+import { broadcast } from '../events/bus.js';
+/** Crew's bus DOMAIN COLUMN value — the product-scoped plugin name, matching the repo precedent
+ *  (`INTERACTIVE_DOMAIN = 'wicked-interactive'`). The EVENT TYPES carry the §4 grammar's bare
+ *  `crew` segment (`wicked.crew.project.created`); the two spellings are different fields. */
+export const CREW_BUS_DOMAIN = 'wicked-crew';
+const CREW_PRODUCER = 'wicked-crew';
+/** The subscriber identity of the /ws liveness bridge. */
+const BRIDGE_PLUGIN = 'wicked-crew-projects';
+const INTERACTIVE_FILTER = 'wicked.interactive.**';
+export const PROJECT_CREATED = 'wicked.crew.project.created';
+export const PROJECT_UPDATED = 'wicked.crew.project.updated';
+export const PROJECT_ARCHIVED = 'wicked.crew.project.archived';
+export const MEMBERSHIP_ATTACHED = 'wicked.crew.membership.attached';
+export const MEMBERSHIP_DETACHED = 'wicked.crew.membership.detached';
+/**
+ * Open the bus and arm both halves. Returns `null` (logged) when wicked-bus is not importable
+ * or the db cannot open — the caller degrades to CRUD-without-events.
+ */
+export async function startProjectBus(opts = {}) {
+    const log = opts.log ?? (() => undefined);
+    let bus;
+    try {
+        bus = await import('wicked-bus');
+    }
+    catch (err) {
+        log(`[projects] wicked-bus is not importable — project events disabled: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    let db;
+    let config;
+    try {
+        config = bus.loadConfig(opts.dbPath !== undefined ? { db_path: opts.dbPath } : {});
+        db = bus.openDb(opts.dbPath !== undefined ? { db_path: opts.dbPath } : {});
+    }
+    catch (err) {
+        log(`[projects] could not open the bus db${opts.dbPath !== undefined ? ` at ${opts.dbPath}` : ''} — project events disabled: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    function emit(type, payload, idempotencyKey) {
+        try {
+            bus.emit(db, config, {
+                event_type: type,
+                domain: CREW_BUS_DOMAIN,
+                subdomain: type.startsWith('wicked.crew.membership.') ? 'membership' : 'project',
+                payload: { ts: new Date().toISOString(), ...payload },
+                producer_id: CREW_PRODUCER,
+                idempotency_key: idempotencyKey,
+            });
+            return true;
+        }
+        catch (err) {
+            const code = err.error;
+            if (code === 'WB-002')
+                return true; // duplicate key — the emit already happened
+            log(`[projects] emit ${type} failed: ${err instanceof Error ? err.message : String(err)}`);
+            return false;
+        }
+    }
+    // The /ws liveness bridge: interactive events that name a project become `projectActivity`
+    // frames. Consumers that don't know the frame ignore it (additive CoreEvent contract).
+    let bridge = null;
+    try {
+        bridge = bus.subscribe({
+            db,
+            plugin: BRIDGE_PLUGIN,
+            filter: INTERACTIVE_FILTER,
+            cursor_init: 'latest',
+            pollIntervalMs: opts.pollIntervalMs ?? 2000,
+            // Fold-into-a-socket only; a retry loop / DLQ entry for a lost liveness frame is noise —
+            // the durable read (`/projects/:id/activity`) is the record, this is the tap.
+            maxRetries: 0,
+            handler: (event) => {
+                const payload = event.payload;
+                const projectId = payload !== null && typeof payload === 'object' ? payload['project_id'] : undefined;
+                if (typeof projectId !== 'string' || projectId === '')
+                    return;
+                broadcast({
+                    type: 'projectActivity',
+                    project_id: projectId,
+                    source: 'interactive',
+                    event_type: event.event_type,
+                    payload,
+                    ts: event.emitted_at,
+                });
+            },
+            onError: (err, event) => {
+                log(`[projects] /ws bridge error on event ${String(event?.event_id ?? '?')}: ${err.message}`);
+            },
+        });
+    }
+    catch (err) {
+        log(`[projects] could not arm the /ws activity bridge (events still emit): ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const dbPath = typeof config['db_path'] === 'string' ? config['db_path'] : null;
+    return {
+        emit,
+        dbPath,
+        stop: async () => {
+            if (bridge !== null)
+                await bridge.stop();
+        },
+    };
+}
+// ── Idempotency keys (type-inclusive + occurrence-unique) ───────────────────────
+export function projectCreatedKey(projectId) {
+    return `crew:project.created:${projectId}:v1`;
+}
+export function projectUpdatedKey(projectId, updatedAt) {
+    return `crew:project.updated:${projectId}:${updatedAt}`;
+}
+export function projectArchivedKey(projectId, updatedAt) {
+    return `crew:project.archived:${projectId}:${updatedAt}`;
+}
+export function membershipAttachedKey(projectId, kind, ref, attachedAt) {
+    return `crew:membership.attached:${projectId}:${kind}:${ref}:${attachedAt}`;
+}
+export function membershipDetachedKey(projectId, memberId, at) {
+    return `crew:membership.detached:${projectId}:${memberId}:${at}`;
+}
+//# sourceMappingURL=events.js.map

package/dist/projects/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/projects/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C;;8FAE8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AAC7C,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,0DAA0D;AAC1D,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAEnD,MAAM,CAAC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAkBrE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA0B,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,GAAgC,CAAC;IACrC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,sEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAA8B,CAAC;IACnC,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,uCACE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EACrD,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,IAAI,CAAC,IAAY,EAAE,OAAgC,EAAE,cAAsB;QAClF,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE;gBACnB,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,eAAe;gBACvB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBAChF,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE;gBACrD,WAAW,EAAE,aAAa;gBAC1B,eAAe,EAAE,cAAc;aAChC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA0B,CAAC,KAAK,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,CAAC,4CAA4C;YAChF,GAAG,CAAC,mBAAmB,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,uFAAuF;IACvF,IAAI,MAAM,GAAgD,IAAI,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;YACrB,EAAE;YACF,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE,QAAQ;YACrB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;YAC3C,yFAAyF;YACzF,8EAA8E;YAC9E,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAyC,CAAC;gBAChE,MAAM,SAAS,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtG,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE;oBAAE,OAAO;gBAC9D,SAAS,CAAC;oBACR,IAAI,EAAE,iBAAiB;oBACvB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,aAAa;oBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO;oBACP,EAAE,EAAE,KAAK,CAAC,UAAU;iBACG,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACtB,GAAG,CACD,wCAAwC,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CACzF,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,yEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,OAAO;QACL,IAAI;QACJ,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AAEnF,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,wBAAwB,SAAS,KAAK,CAAC;AAChD,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;IACpE,OAAO,wBAAwB,SAAS,IAAI,SAAS,EAAE,CAAC;AAC1D,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,SAAiB;IACrE,OAAO,yBAAyB,SAAS,IAAI,SAAS,EAAE,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,IAAY,EACZ,GAAW,EACX,UAAkB;IAElB,OAAO,4BAA4B,SAAS,IAAI,IAAI,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;AAC9E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAU;IACnF,OAAO,4BAA4B,SAAS,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;AACnE,CAAC"}

package/dist/projects/graph-paths.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Where a PROJECT's co-located code graph lives, and what each member repo is called inside it.
+ *
+ * # Why a module instead of a `join()` at each call site
+ *
+ * This is `repoPaths.ts`'s posture applied one level up (see that module's header for the bill:
+ * five spellings of the per-repo graph path against a sixth inside wicked-core, and every graph
+ * query answering "nothing found" about a repo full of code). One producer, one consumer. Nothing
+ * outside this module spells a project-graph path or mints a repo label.
+ *
+ * # Why NOT inside a repo checkout
+ *
+ * The per-repo graph lives at `<repo>/.codegraph/estate.db` — inside the working tree — and we have
+ * just spent the effort removing that directory from six checkouts it had polluted. A PROJECT graph
+ * is worse on that axis, not better: it holds N repos, so there is no one checkout it belongs to,
+ * and writing it into the first member's tree would make repo A's working directory grow with repo
+ * B's symbols. It goes in the daemon's own state directory.
+ *
+ * # Why `~/.wicked-crew/project-graphs/<projectId>/`
+ *
+ * `~/.wicked-crew/` is already where this package keeps crew-side per-project state that the engine
+ * does not own — `project-settings.json` (DES-MERGE-001 §7.1) sits there today. The project graph is
+ * exactly that kind of thing: crew-owned, per-project, derived, and rebuildable. A directory per
+ * project (rather than `<projectId>.db` files in one flat folder) keeps the db and the refresh
+ * manifest that describes it together, so removing a project's graph is one `rm -rf` that cannot
+ * leave a manifest describing a database that is gone.
+ *
+ * Overridable with `WICKED_CREW_PROJECT_GRAPH_ROOT` — the same escape hatch
+ * `WICKED_CREW_PROJECT_SETTINGS` gives the settings store, and what lets the tests and the proof
+ * scripts run without touching a developer's real home.
+ */
+/**
+ * The estate label charset, copied from the rule that enforces it
+ * (`wicked-estate/src/repo_scope.rs::validate_label`): 1–64 chars of `[A-Za-z0-9._-]`, and never
+ * `.` or `..`.
+ *
+ * The constraint is not cosmetic and not ours to relax. estate splices the label into `files.path`
+ * AND into every SymbolId derived from it, so a `/` or a `..` in a label would forge paths inside
+ * another repo's namespace — the exact collision the whole labelling mechanism exists to prevent.
+ * A label that fails this test is refused by estate before a single row is written; we mint labels
+ * that pass it instead of discovering that at index time.
+ */
+export declare function isValidRepoLabel(label: string): boolean;
+/**
+ * The label one registered repo carries inside a project graph — its REGISTRY ID when that id is
+ * already a legal estate label, and a deterministic sanitized form when it is not.
+ *
+ * WHY the registry id. The label becomes a path prefix on every row the repo writes and shows up in
+ * every result this surface returns, so it has to be a name an operator can map back to a repo
+ * without a lookup table. It also has to be STABLE: estate binds a label to a repo permanently
+ * (re-indexing under a second label is refused as a duplicate; re-using a label for a different repo
+ * is refused as a collision), so a label derived from anything mutable — the repo's display name,
+ * its root path, its position in the member list — would break the next refresh after a rename or a
+ * move. The registry id is the one identifier that is both stable and already unique per repo.
+ *
+ * Every repo id in the live registry today (`wicked-ledger`, `wicked-vault`, `pageindex-proof`, …)
+ * satisfies estate's rule as-is, so the common path is the identity function and the label IS the
+ * id. That is not guaranteed for ids minted later, so the fallback is real rather than theoretical:
+ * illegal characters collapse to `-`, the stem is capped, and a 12-hex digest of the FULL id is
+ * appended — the digest is what keeps `a/b` and `a:b` (which sanitize identically) apart, and what
+ * keeps a truncated 200-character id distinct from another that shares its first 51 characters.
+ *
+ * The mapping is a pure function of the id, which is what makes it safe against estate's permanent
+ * binding: the same repo resolves to the same label on every refresh, for the life of the graph.
+ */
+export declare function repoLabel(repoId: string): string;
+/**
+ * Project ids are REJECTED, never sanitized.
+ *
+ * A sanitizing map is what would let two distinct project ids land in one directory and share one
+ * database — the same class of silent collision that made a multi-repo graph impossible in the first
+ * place, reintroduced at the project level. It is also the traversal guard: the id is a path
+ * segment, so `../../x` must never be spelled into a path. Engine-minted ids (`proj_1787…`) and the
+ * synthesized `default` both pass; anything that does not is a bug worth hearing about.
+ */
+export declare function assertProjectIdIsPathSafe(projectId: string): void;
+/** The root every project graph directory hangs off. */
+export declare function projectGraphRoot(env?: NodeJS.ProcessEnv): string;
+/** One project's graph directory — holds the database and the manifest that describes it. */
+export declare function projectGraphDir(projectId: string, env?: NodeJS.ProcessEnv): string;
+/** The ONE database holding every member repo of this project, co-located under their labels. */
+export declare function projectGraphDb(projectId: string, env?: NodeJS.ProcessEnv): string;
+/**
+ * What the last refresh put in that database, per repo — the record incremental refresh reads.
+ *
+ * Deliberately a SIDECAR rather than a read of estate's own `repo:<label>:commit` meta: estate
+ * exposes that only through `stats`, whose output is human text with no `--json`, and deciding
+ * whether to re-index a repo by regex-matching a report is the kind of coupling that breaks on a
+ * formatting change with no test to catch it.
+ */
+export declare function projectGraphManifest(projectId: string, env?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=graph-paths.d.ts.map

package/dist/projects/graph-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-paths.d.ts","sourceRoot":"","sources":["../../src/projects/graph-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAMH;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQvD;AAMD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAcjE;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE7E;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG/F;AAED,iGAAiG;AACjG,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAEpG"}