claudecode

func FindModuleRootFrom ¶

func FindModuleRootFrom(start string) (string, error)

FindModuleRootFrom walks upward from start until it finds the directory holding go.mod, returning that module (repository) root. The asset generator and the drift test both run with a working directory inside the module, so they can locate the canonical skills/ and agents/ trees this way without a hardcoded path.

func RenderGeneratedAssets ¶

func RenderGeneratedAssets(repoRoot string) (map[string][]byte, error)

RenderGeneratedAssets renders, in memory, every codegen-driven Claude Code plugin file the embedded assets tree must carry, keyed by its assets-relative path (for example "pasture-skills/skills/worker/SKILL.md" or "pasture-agents/agents/reviewer.md").

It drives the same live pipeline the repository's canonical skills/ and agents/ trees come from — codegen.EmitHarness for the pinned claude-code target — so the returned bytes are exactly what a fresh generation produces. repoRoot is the module root that contains the canonical skills/ and agents/ trees; the claude-code target reads those (its skills are marker-merged) to produce full-file output. The result is the single source of truth shared by the asset generator (tools/claudecode-assets) and the drift test, so they can never disagree about what "correct" means.

func ReviewedNativeCalls ¶

func ReviewedNativeCalls(contract runtime.RuntimeContract) ([]string, error)

ReviewedNativeCalls returns the sorted set of native host call names the pinned contract actually lowers core orchestration operations to. It is derived from the contract's bindings, never hardcoded, so it always reflects exactly what the reviewed runtime profile declares.

func SortedAssetKeys ¶

func SortedAssetKeys(m map[string][]byte) []string

SortedAssetKeys returns the map's keys in lexicographic order, for deterministic iteration in the generator and test.

func StaleGeneratedAssets ¶

func StaleGeneratedAssets(assetsDir string, generated map[string][]byte) ([]string, error)

StaleGeneratedAssets walks the on-disk embedded assets directory and returns the absolute paths of every codegen-managed file the live pipeline no longer emits (its assets-relative path is absent from generated). It enumerates only the codegen-driven surface: generated skills, agents, hooks.json, and the lifecycle adapter, verbatim skill trees and Git discipline payload. Plugin scaffolding is never reported or removed. The retired legacy context payload path is managed so any reintroduced embedded copy is reported and pruned.

func ValidateAgentFidelity ¶

func ValidateAgentFidelity(d TargetDescriptor) error

ValidateAgentFidelity proves the target's agent artifacts grant only native orchestration tools the pinned contract declares. It parses each agent's `tools:` frontmatter and rejects any granted tool that is in the orchestration vocabulary but is not a reviewed native call — in particular a removed team-lifecycle call. General host tools are ignored, so the check operates on the contract's binding vocabulary rather than scanning free-text guidance.