@ai-agent-forge/plugin-decision-escalation 0.0.0-stage → 0.88.15

package/dist/engine.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Pure decision state machine (`docs/design/决策升级插件设计.md` §3/§4/§6) —
+ * no host API access, no I/O, no clocks (time is always a caller-supplied
+ * `now`). Every function takes JSON-safe state and returns the next state
+ * plus the audit transitions to persist; index.ts owns persistence (entries +
+ * events), timers and injection; http-server.ts owns transport;
+ * adjudication.ts owns the subagent chain.
+ */
+import { type AdjudicationVerdict, type DecisionLevel, type DecisionRecord, type DecisionReversibility, type DecisionRiskClass, type DecisionState, type DecisionTransitionEntry } from "./types.ts";
+export interface EngineRun {
+    state: DecisionState;
+    transitions: DecisionTransitionEntry[];
+}
+export declare function validDecisionId(id: string): boolean;
+/** Model-facing option input; reversibility may be absent (missing = redline, §3). */
+export interface DecisionOptionInput {
+    label: string;
+    description: string;
+    consequences: string;
+    reversibility?: DecisionReversibility;
+}
+/**
+ * Escalation classification (§3): redline when ANY option is irreversible or
+ * carries no reversibility field (conservative default); otherwise the
+ * model's risk_class picks routine (L1) vs significant (L2). The redline is
+ * never the model's risk self-assessment.
+ */
+export declare function classifyDecision(options: readonly DecisionOptionInput[], riskClass: DecisionRiskClass): DecisionLevel;
+export interface DecisionAskInput {
+    id: string;
+    question: string;
+    options: DecisionOptionInput[];
+    contextDigest: string;
+    riskClass: DecisionRiskClass;
+}
+/** Validates the ask input and returns the normalized record (status asked, redLine derived). */
+export declare function buildDecisionRecord(input: DecisionAskInput, now: number): DecisionRecord;
+export declare function findDecision(state: DecisionState, id: string): DecisionRecord | undefined;
+/** "Active" per §4.2/§4.3: waiting for the user, or timed out into adjudication. */
+export declare function isDecisionActive(record: DecisionRecord): boolean;
+/**
+ * decision_ask: create the record and land the `asked` transition.
+ * Single-active discipline: at most one decision may sit in
+ * `asked` — a second ask is a structured rejection pointing at
+ * resolve/cancel. The rolling retention (§ 有界性) never evicts an active
+ * record: the oldest terminal record goes first, and only when none exists
+ * is the new ask rejected.
+ */
+export declare function applyDecisionAsk(state: DecisionState, input: DecisionAskInput, now: number): EngineRun;
+export interface DecisionAnswerInput {
+    decisionId: string;
+    choice: number;
+    source: "user" | "adjudication";
+    note?: string;
+}
+/**
+ * decision_resolve (§4.2): close the decision with the chosen option index.
+ * `source: "adjudication"` requires the injected verdict to already exist in
+ * the record AND the choice to match it — the model must not fabricate or
+ * override an adjudication.
+ */
+export declare function applyDecisionAnswer(state: DecisionState, input: DecisionAnswerInput, now: number): EngineRun;
+export type TimeoutMode = "halt" | "adjudicate";
+/**
+ * Timeout fire (§5.1/§5.2): redline lands `timed-out.halted` (never
+ * adjudicated); reversible levels land `timed-out.adjudicating` before the
+ * chain runs.
+ */
+export declare function applyDecisionTimeout(state: DecisionState, input: {
+    decisionId: string;
+    mode: TimeoutMode;
+}, now: number): EngineRun;
+export type AdjudicationFailureCode = "unavailable" | "unparseable";
+/**
+ * Adjudication failed (§5.4): capability missing, submit/drain error, or an
+ * output that violates the JSON protocol. Terminal halted-like state — no
+ * retry, no silent downgrade.
+ */
+export declare function applyAdjudicationFailure(state: DecisionState, input: {
+    decisionId: string;
+    code: AdjudicationFailureCode;
+    detail: string;
+}, now: number): EngineRun;
+/**
+ * Stores a successful adjudication verdict (§5 留痕: 裁决书全文同步写入
+ * decision.state) without a transition event — the vocabulary has none for
+ * success; the audit trail closes when the model resolves
+ * (`answered.adjudication`).
+ */
+export declare function recordVerdict(state: DecisionState, input: {
+    decisionId: string;
+    verdict: AdjudicationVerdict;
+}, now: number): EngineRun;
+/** /decision cancel (§4.3): the user decides "do nothing". Clears active status. */
+export declare function applyDecisionCancel(state: DecisionState, input: {
+    decisionId: string;
+}, now: number): EngineRun;
+export interface StateEntryView {
+    customType?: string;
+    data?: unknown;
+}
+/**
+ * Rebuilds the decision state from the session's append-only entries: the
+ * most recent `decision.state` snapshot is authoritative; a malformed one
+ * reads as an empty state instead of crashing re-entry (goal/alignment
+ * precedent). Both the versioned shape (`{ version: 1, decisions }`, §6)
+ * and a legacy bare container are accepted — a missing version reads as 1,
+ * a foreign version reads as empty (conservative default).
+ */
+export declare function rebuildDecisionState(entries: readonly StateEntryView[]): DecisionState;
+//# sourceMappingURL=engine.d.ts.map

package/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,KAAK,mBAAmB,EAGxB,KAAK,aAAa,EAElB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,SAAS;IACzB,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,uBAAuB,EAAE,CAAC;CACvC;AAQD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAInD;AAYD,uFAAsF;AACtF,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACtC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,GAAG,aAAa,CAMrH;AAsCD,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,iBAAiB,CAAC;CAC7B;AAED,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,CAkCxF;AAMD,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEzF;AAED,sFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAEhE;AAmBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAqCtG;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAwD5G;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,CAAC;AAEhD;;;;GAIG;AACH,wBAAgB,oBAAoB,CACnC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,EAChD,GAAG,EAAE,MAAM,GACT,SAAS,CAkCX;AAED,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG,aAAa,CAAC;AAEpE;;;;GAIG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC5E,GAAG,EAAE,MAAM,GACT,SAAS,CAsBX;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC5B,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,EAC3D,GAAG,EAAE,MAAM,GACT,SAAS,CAQX;AAED,qFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAe/G;AAMD,MAAM,WAAW,cAAc;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,aAAa,CAYtF","sourcesContent":["/**\n * Pure decision state machine (`docs/design/决策升级插件设计.md` §3/§4/§6) —\n * no host API access, no I/O, no clocks (time is always a caller-supplied\n * `now`). Every function takes JSON-safe state and returns the next state\n * plus the audit transitions to persist; index.ts owns persistence (entries +\n * events), timers and injection; http-server.ts owns transport;\n * adjudication.ts owns the subagent chain.\n */\n\nimport {\n\ttype AdjudicationVerdict,\n\tDECISION_LIMITS,\n\tDecisionError,\n\ttype DecisionLevel,\n\ttype DecisionOption,\n\ttype DecisionRecord,\n\ttype DecisionReversibility,\n\ttype DecisionRiskClass,\n\ttype DecisionState,\n\ttype DecisionTransitionEntry,\n} from \"./types.ts\";\n\nexport interface EngineRun {\n\tstate: DecisionState;\n\ttransitions: DecisionTransitionEntry[];\n}\n\n// ---------------------------------------------------------------------------\n// Validation & classification (§3)\n// ---------------------------------------------------------------------------\n\nconst ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;\n\nexport function validDecisionId(id: string): boolean {\n\t// 入参可能来自未校验的工具输入（空对象 → undefined）：test() 会把实参\n\t// 字符串化为 \"undefined\" 而\"通过\"模式匹配，必须先做类型守卫。\n\treturn typeof id === \"string\" && ID_PATTERN.test(id) && id.length <= 128;\n}\n\nfunction nonEmptyString(value: unknown, name: string, max: number): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\") {\n\t\tthrow new DecisionError(\"invalid-input\", `${name} must be a non-empty string`);\n\t}\n\tif (value.length > max) {\n\t\tthrow new DecisionError(\"invalid-input\", `${name} exceeds ${max} characters`);\n\t}\n\treturn value;\n}\n\n/** Model-facing option input; reversibility may be absent (missing = redline, §3). */\nexport interface DecisionOptionInput {\n\tlabel: string;\n\tdescription: string;\n\tconsequences: string;\n\treversibility?: DecisionReversibility;\n}\n\n/**\n * Escalation classification (§3): redline when ANY option is irreversible or\n * carries no reversibility field (conservative default); otherwise the\n * model's risk_class picks routine (L1) vs significant (L2). The redline is\n * never the model's risk self-assessment.\n */\nexport function classifyDecision(options: readonly DecisionOptionInput[], riskClass: DecisionRiskClass): DecisionLevel {\n\tfor (const option of options) {\n\t\tif (option.reversibility === undefined) return \"redline\";\n\t\tif (option.reversibility === \"irreversible\") return \"redline\";\n\t}\n\treturn riskClass;\n}\n\n/**\n * Validates one option shape. An explicit `reversibility` outside the\n * two-value vocabulary is invalid input (the schema enforces literals; this\n * guards unvalidated callers). A MISSING field is accepted here — the\n * classifier turns it into a redline.\n */\nfunction validateOption(input: DecisionOptionInput, index: number): DecisionOption {\n\tif (input === null || typeof input !== \"object\") {\n\t\tthrow new DecisionError(\"invalid-option\", `option ${index} must be an object`);\n\t}\n\tif (\n\t\tinput.reversibility !== undefined &&\n\t\tinput.reversibility !== \"reversible\" &&\n\t\tinput.reversibility !== \"irreversible\"\n\t) {\n\t\tthrow new DecisionError(\n\t\t\t\"invalid-option\",\n\t\t\t`option ${index} reversibility must be \"reversible\" or \"irreversible\": ${String(input.reversibility)}`,\n\t\t);\n\t}\n\treturn {\n\t\tlabel: nonEmptyString(input.label, `option ${index} label`, DECISION_LIMITS.labelMaxLength),\n\t\tdescription: nonEmptyString(\n\t\t\tinput.description,\n\t\t\t`option ${index} description`,\n\t\t\tDECISION_LIMITS.descriptionMaxLength,\n\t\t),\n\t\tconsequences: nonEmptyString(\n\t\t\tinput.consequences,\n\t\t\t`option ${index} consequences`,\n\t\t\tDECISION_LIMITS.consequencesMaxLength,\n\t\t),\n\t\t...(input.reversibility === undefined ? {} : { reversibility: input.reversibility }),\n\t};\n}\n\nexport interface DecisionAskInput {\n\tid: string;\n\tquestion: string;\n\toptions: DecisionOptionInput[];\n\tcontextDigest: string;\n\triskClass: DecisionRiskClass;\n}\n\n/** Validates the ask input and returns the normalized record (status asked, redLine derived). */\nexport function buildDecisionRecord(input: DecisionAskInput, now: number): DecisionRecord {\n\tif (!validDecisionId(input.id)) {\n\t\tthrow new DecisionError(\n\t\t\t\"invalid-id\",\n\t\t\t`decision id must match [A-Za-z0-9][A-Za-z0-9._-]* (no leading dot): ${input.id}`,\n\t\t);\n\t}\n\tif (!Array.isArray(input.options)) {\n\t\tthrow new DecisionError(\"invalid-input\", \"options must be an array\");\n\t}\n\tif (input.options.length < DECISION_LIMITS.optionsMin || input.options.length > DECISION_LIMITS.optionsMax) {\n\t\tthrow new DecisionError(\n\t\t\t\"invalid-input\",\n\t\t\t`options must carry ${DECISION_LIMITS.optionsMin}..${DECISION_LIMITS.optionsMax} items, got ${input.options.length}`,\n\t\t);\n\t}\n\tconst riskClass = input.riskClass;\n\tif (riskClass !== \"routine\" && riskClass !== \"significant\") {\n\t\tthrow new DecisionError(\"invalid-input\", `risk_class must be \"routine\" or \"significant\": ${String(riskClass)}`);\n\t}\n\tconst options = input.options.map((option, index) => validateOption(option, index));\n\tconst question = nonEmptyString(input.question, \"question\", DECISION_LIMITS.questionMaxLength);\n\tconst contextDigest = nonEmptyString(input.contextDigest, \"context_digest\", DECISION_LIMITS.contextDigestMaxLength);\n\treturn {\n\t\tid: input.id,\n\t\tquestion,\n\t\toptions,\n\t\tcontextDigest,\n\t\triskClass,\n\t\tredLine: classifyDecision(options, riskClass) === \"redline\",\n\t\tstatus: \"asked\",\n\t\trevision: 0,\n\t\tcreatedAt: now,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// State helpers\n// ---------------------------------------------------------------------------\n\nexport function findDecision(state: DecisionState, id: string): DecisionRecord | undefined {\n\treturn state.decisions.find((record) => record.id === id);\n}\n\n/** \"Active\" per §4.2/§4.3: waiting for the user, or timed out into adjudication. */\nexport function isDecisionActive(record: DecisionRecord): boolean {\n\treturn record.status === \"asked\" || record.status === \"adjudicating\";\n}\n\nfunction requireActive(state: DecisionState, id: string): DecisionRecord {\n\tconst record = findDecision(state, id);\n\tif (!record) throw new DecisionError(\"not-found\", `unknown decision: ${id}`);\n\tif (!isDecisionActive(record)) {\n\t\tthrow new DecisionError(\"not-active\", `decision is not active (status ${record.status}): ${id}`);\n\t}\n\treturn record;\n}\n\nfunction replaceDecision(state: DecisionState, updated: DecisionRecord): DecisionState {\n\treturn { version: 1, decisions: state.decisions.map((record) => (record.id === updated.id ? updated : record)) };\n}\n\n// ---------------------------------------------------------------------------\n// Transitions (§4, §5, §6)\n// ---------------------------------------------------------------------------\n\n/**\n * decision_ask: create the record and land the `asked` transition.\n * Single-active discipline: at most one decision may sit in\n * `asked` — a second ask is a structured rejection pointing at\n * resolve/cancel. The rolling retention (§ 有界性) never evicts an active\n * record: the oldest terminal record goes first, and only when none exists\n * is the new ask rejected.\n */\nexport function applyDecisionAsk(state: DecisionState, input: DecisionAskInput, now: number): EngineRun {\n\tif (findDecision(state, input.id)) {\n\t\tthrow new DecisionError(\"invalid-input\", `decision id already exists: ${input.id}`);\n\t}\n\tconst active = state.decisions.find((record) => record.status === \"asked\");\n\tif (active !== undefined) {\n\t\tthrow new DecisionError(\n\t\t\t\"decision-active-exists\",\n\t\t\t`decision ${active.id} is still awaiting an answer; resolve it or cancel it first (/decision cancel ${active.id})`,\n\t\t);\n\t}\n\tconst record = buildDecisionRecord(input, now);\n\tconst decisions = [...state.decisions, record];\n\tif (decisions.length > DECISION_LIMITS.decisionsMax) {\n\t\tconst oldestTerminal = decisions.findIndex((candidate) => !isDecisionActive(candidate));\n\t\tif (oldestTerminal < 0) {\n\t\t\tthrow new DecisionError(\n\t\t\t\t\"state-limit-reached\",\n\t\t\t\t`decision state reached its ${DECISION_LIMITS.decisionsMax}-record limit with no terminal record to evict`,\n\t\t\t);\n\t\t}\n\t\tdecisions.splice(oldestTerminal, 1);\n\t}\n\treturn {\n\t\tstate: { version: 1, decisions },\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: \"asked\",\n\t\t\t\treason: {\n\t\t\t\t\tcode: \"decision-asked\",\n\t\t\t\t\tdetail: `level=${record.redLine ? \"redline\" : record.riskClass} options=${record.options.length}`,\n\t\t\t\t},\n\t\t\t\trevision: record.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\nexport interface DecisionAnswerInput {\n\tdecisionId: string;\n\tchoice: number;\n\tsource: \"user\" | \"adjudication\";\n\tnote?: string;\n}\n\n/**\n * decision_resolve (§4.2): close the decision with the chosen option index.\n * `source: \"adjudication\"` requires the injected verdict to already exist in\n * the record AND the choice to match it — the model must not fabricate or\n * override an adjudication.\n */\nexport function applyDecisionAnswer(state: DecisionState, input: DecisionAnswerInput, now: number): EngineRun {\n\tvoid now; // the answer itself carries no timestamp field; kept for call-shape symmetry\n\tconst record = requireActive(state, input.decisionId);\n\tif (\n\t\t!Number.isInteger(input.choice) ||\n\t\t(input.choice as number) < 0 ||\n\t\t(input.choice as number) >= record.options.length\n\t) {\n\t\tthrow new DecisionError(\n\t\t\t\"choice-out-of-range\",\n\t\t\t`choice must be an option index within 0..${record.options.length - 1}: ${String(input.choice)}`,\n\t\t);\n\t}\n\tif (input.source === \"adjudication\") {\n\t\tif (record.status !== \"adjudicating\" || record.verdict === undefined) {\n\t\t\tthrow new DecisionError(\n\t\t\t\t\"adjudication-not-recorded\",\n\t\t\t\t`no injected adjudication exists for decision ${record.id}; the model must not claim an adjudicated answer`,\n\t\t\t);\n\t\t}\n\t\tif (record.verdict.choice !== input.choice) {\n\t\t\tthrow new DecisionError(\n\t\t\t\t\"adjudication-choice-mismatch\",\n\t\t\t\t`choice ${input.choice} does not match the injected adjudication (choice ${record.verdict.choice})`,\n\t\t\t);\n\t\t}\n\t} else if (record.status !== \"asked\") {\n\t\tthrow new DecisionError(\n\t\t\t\"not-active\",\n\t\t\t`decision ${record.id} already timed out (status ${record.status}); a user answer can no longer land through decision_resolve`,\n\t\t);\n\t}\n\tconst note =\n\t\tinput.note === undefined ? undefined : nonEmptyString(input.note, \"note\", DECISION_LIMITS.noteMaxLength);\n\tconst updated: DecisionRecord = {\n\t\t...record,\n\t\tstatus: \"answered\",\n\t\trevision: record.revision + 1,\n\t\tresolvedBy: input.source,\n\t\tchoice: input.choice,\n\t\t...(note === undefined ? {} : { note }),\n\t};\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: input.source === \"user\" ? \"answered.user\" : \"answered.adjudication\",\n\t\t\t\treason: {\n\t\t\t\t\tcode: input.source === \"user\" ? \"user-answered\" : \"adjudication-resolved\",\n\t\t\t\t\tdetail: `choice=${input.choice}${note === undefined ? \"\" : ` note=${note}`}`,\n\t\t\t\t},\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\nexport type TimeoutMode = \"halt\" | \"adjudicate\";\n\n/**\n * Timeout fire (§5.1/§5.2): redline lands `timed-out.halted` (never\n * adjudicated); reversible levels land `timed-out.adjudicating` before the\n * chain runs.\n */\nexport function applyDecisionTimeout(\n\tstate: DecisionState,\n\tinput: { decisionId: string; mode: TimeoutMode },\n\tnow: number,\n): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tif (record.status !== \"asked\") {\n\t\tthrow new DecisionError(\"not-active\", `timeout fires on a non-asked decision: ${record.id}`);\n\t}\n\tif (input.mode === \"halt\" && !record.redLine) {\n\t\tthrow new DecisionError(\"invalid-input\", `decision ${record.id} is not a redline; use adjudicate`);\n\t}\n\tif (input.mode === \"adjudicate\" && record.redLine) {\n\t\tthrow new DecisionError(\"invalid-input\", `decision ${record.id} is a redline; it must halt, not adjudicate`);\n\t}\n\tconst updated: DecisionRecord = {\n\t\t...record,\n\t\tstatus: input.mode === \"halt\" ? \"halted\" : \"adjudicating\",\n\t\trevision: record.revision + 1,\n\t};\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: input.mode === \"halt\" ? \"timed-out.halted\" : \"timed-out.adjudicating\",\n\t\t\t\treason: {\n\t\t\t\t\tcode: input.mode === \"halt\" ? \"redline-kept-stopped\" : \"adjudication-dispatched\",\n\t\t\t\t\tdetail:\n\t\t\t\t\t\tinput.mode === \"halt\"\n\t\t\t\t\t\t\t? \"irreversible fork stays stopped for the user\"\n\t\t\t\t\t\t\t: \"reversible fork handed to the adjudication chain\",\n\t\t\t\t},\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\nexport type AdjudicationFailureCode = \"unavailable\" | \"unparseable\";\n\n/**\n * Adjudication failed (§5.4): capability missing, submit/drain error, or an\n * output that violates the JSON protocol. Terminal halted-like state — no\n * retry, no silent downgrade.\n */\nexport function applyAdjudicationFailure(\n\tstate: DecisionState,\n\tinput: { decisionId: string; code: AdjudicationFailureCode; detail: string },\n\tnow: number,\n): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tif (record.status !== \"adjudicating\") {\n\t\tthrow new DecisionError(\"not-active\", `adjudication failure lands on an adjudicating decision: ${record.id}`);\n\t}\n\tconst updated: DecisionRecord = {\n\t\t...record,\n\t\tstatus: input.code === \"unavailable\" ? \"unavailable\" : \"unparseable\",\n\t\trevision: record.revision + 1,\n\t};\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: input.code === \"unavailable\" ? \"adjudication.unavailable\" : \"adjudication.unparseable\",\n\t\t\t\treason: { code: `adjudication-${input.code}`, detail: input.detail },\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\n/**\n * Stores a successful adjudication verdict (§5 留痕: 裁决书全文同步写入\n * decision.state) without a transition event — the vocabulary has none for\n * success; the audit trail closes when the model resolves\n * (`answered.adjudication`).\n */\nexport function recordVerdict(\n\tstate: DecisionState,\n\tinput: { decisionId: string; verdict: AdjudicationVerdict },\n\tnow: number,\n): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tif (record.status !== \"adjudicating\") {\n\t\tthrow new DecisionError(\"not-active\", `a verdict lands on an adjudicating decision: ${record.id}`);\n\t}\n\tconst updated: DecisionRecord = { ...record, verdict: input.verdict };\n\treturn { state: replaceDecision(state, updated), transitions: [] };\n}\n\n/** /decision cancel (§4.3): the user decides \"do nothing\". Clears active status. */\nexport function applyDecisionCancel(state: DecisionState, input: { decisionId: string }, now: number): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tconst updated: DecisionRecord = { ...record, status: \"cancelled\", revision: record.revision + 1 };\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: \"cancelled\",\n\t\t\t\treason: { code: \"decision-cancelled\", detail: \"user cancelled the fork (do nothing)\" },\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Snapshot rebuild (§6): reverse scan, malformed snapshot reads as empty\n// ---------------------------------------------------------------------------\n\nexport interface StateEntryView {\n\tcustomType?: string;\n\tdata?: unknown;\n}\n\n/**\n * Rebuilds the decision state from the session's append-only entries: the\n * most recent `decision.state` snapshot is authoritative; a malformed one\n * reads as an empty state instead of crashing re-entry (goal/alignment\n * precedent). Both the versioned shape (`{ version: 1, decisions }`, §6)\n * and a legacy bare container are accepted — a missing version reads as 1,\n * a foreign version reads as empty (conservative default).\n */\nexport function rebuildDecisionState(entries: readonly StateEntryView[]): DecisionState {\n\tfor (let index = entries.length - 1; index >= 0; index -= 1) {\n\t\tconst entry = entries[index];\n\t\tif (entry?.customType !== \"decision.state\") continue;\n\t\tconst data = entry.data;\n\t\tif (data === null || typeof data !== \"object\" || Array.isArray(data)) return { version: 1, decisions: [] };\n\t\tconst record = data as { version?: unknown; decisions?: unknown };\n\t\tif (record.version !== undefined && record.version !== 1) return { version: 1, decisions: [] };\n\t\tif (!Array.isArray(record.decisions)) return { version: 1, decisions: [] };\n\t\treturn { version: 1, decisions: [...record.decisions] };\n\t}\n\treturn { version: 1, decisions: [] };\n}\n"]}

package/dist/engine.js

@@ -0,0 +1,333 @@
+/**
+ * Pure decision state machine (`docs/design/决策升级插件设计.md` §3/§4/§6) —
+ * no host API access, no I/O, no clocks (time is always a caller-supplied
+ * `now`). Every function takes JSON-safe state and returns the next state
+ * plus the audit transitions to persist; index.ts owns persistence (entries +
+ * events), timers and injection; http-server.ts owns transport;
+ * adjudication.ts owns the subagent chain.
+ */
+import { DECISION_LIMITS, DecisionError, } from "./types.js";
+// ---------------------------------------------------------------------------
+// Validation & classification (§3)
+// ---------------------------------------------------------------------------
+const ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+export function validDecisionId(id) {
+    // 入参可能来自未校验的工具输入（空对象 → undefined）：test() 会把实参
+    // 字符串化为 "undefined" 而"通过"模式匹配，必须先做类型守卫。
+    return typeof id === "string" && ID_PATTERN.test(id) && id.length <= 128;
+}
+function nonEmptyString(value, name, max) {
+    if (typeof value !== "string" || value.trim() === "") {
+        throw new DecisionError("invalid-input", `${name} must be a non-empty string`);
+    }
+    if (value.length > max) {
+        throw new DecisionError("invalid-input", `${name} exceeds ${max} characters`);
+    }
+    return value;
+}
+/**
+ * Escalation classification (§3): redline when ANY option is irreversible or
+ * carries no reversibility field (conservative default); otherwise the
+ * model's risk_class picks routine (L1) vs significant (L2). The redline is
+ * never the model's risk self-assessment.
+ */
+export function classifyDecision(options, riskClass) {
+    for (const option of options) {
+        if (option.reversibility === undefined)
+            return "redline";
+        if (option.reversibility === "irreversible")
+            return "redline";
+    }
+    return riskClass;
+}
+/**
+ * Validates one option shape. An explicit `reversibility` outside the
+ * two-value vocabulary is invalid input (the schema enforces literals; this
+ * guards unvalidated callers). A MISSING field is accepted here — the
+ * classifier turns it into a redline.
+ */
+function validateOption(input, index) {
+    if (input === null || typeof input !== "object") {
+        throw new DecisionError("invalid-option", `option ${index} must be an object`);
+    }
+    if (input.reversibility !== undefined &&
+        input.reversibility !== "reversible" &&
+        input.reversibility !== "irreversible") {
+        throw new DecisionError("invalid-option", `option ${index} reversibility must be "reversible" or "irreversible": ${String(input.reversibility)}`);
+    }
+    return {
+        label: nonEmptyString(input.label, `option ${index} label`, DECISION_LIMITS.labelMaxLength),
+        description: nonEmptyString(input.description, `option ${index} description`, DECISION_LIMITS.descriptionMaxLength),
+        consequences: nonEmptyString(input.consequences, `option ${index} consequences`, DECISION_LIMITS.consequencesMaxLength),
+        ...(input.reversibility === undefined ? {} : { reversibility: input.reversibility }),
+    };
+}
+/** Validates the ask input and returns the normalized record (status asked, redLine derived). */
+export function buildDecisionRecord(input, now) {
+    if (!validDecisionId(input.id)) {
+        throw new DecisionError("invalid-id", `decision id must match [A-Za-z0-9][A-Za-z0-9._-]* (no leading dot): ${input.id}`);
+    }
+    if (!Array.isArray(input.options)) {
+        throw new DecisionError("invalid-input", "options must be an array");
+    }
+    if (input.options.length < DECISION_LIMITS.optionsMin || input.options.length > DECISION_LIMITS.optionsMax) {
+        throw new DecisionError("invalid-input", `options must carry ${DECISION_LIMITS.optionsMin}..${DECISION_LIMITS.optionsMax} items, got ${input.options.length}`);
+    }
+    const riskClass = input.riskClass;
+    if (riskClass !== "routine" && riskClass !== "significant") {
+        throw new DecisionError("invalid-input", `risk_class must be "routine" or "significant": ${String(riskClass)}`);
+    }
+    const options = input.options.map((option, index) => validateOption(option, index));
+    const question = nonEmptyString(input.question, "question", DECISION_LIMITS.questionMaxLength);
+    const contextDigest = nonEmptyString(input.contextDigest, "context_digest", DECISION_LIMITS.contextDigestMaxLength);
+    return {
+        id: input.id,
+        question,
+        options,
+        contextDigest,
+        riskClass,
+        redLine: classifyDecision(options, riskClass) === "redline",
+        status: "asked",
+        revision: 0,
+        createdAt: now,
+    };
+}
+// ---------------------------------------------------------------------------
+// State helpers
+// ---------------------------------------------------------------------------
+export function findDecision(state, id) {
+    return state.decisions.find((record) => record.id === id);
+}
+/** "Active" per §4.2/§4.3: waiting for the user, or timed out into adjudication. */
+export function isDecisionActive(record) {
+    return record.status === "asked" || record.status === "adjudicating";
+}
+function requireActive(state, id) {
+    const record = findDecision(state, id);
+    if (!record)
+        throw new DecisionError("not-found", `unknown decision: ${id}`);
+    if (!isDecisionActive(record)) {
+        throw new DecisionError("not-active", `decision is not active (status ${record.status}): ${id}`);
+    }
+    return record;
+}
+function replaceDecision(state, updated) {
+    return { version: 1, decisions: state.decisions.map((record) => (record.id === updated.id ? updated : record)) };
+}
+// ---------------------------------------------------------------------------
+// Transitions (§4, §5, §6)
+// ---------------------------------------------------------------------------
+/**
+ * decision_ask: create the record and land the `asked` transition.
+ * Single-active discipline: at most one decision may sit in
+ * `asked` — a second ask is a structured rejection pointing at
+ * resolve/cancel. The rolling retention (§ 有界性) never evicts an active
+ * record: the oldest terminal record goes first, and only when none exists
+ * is the new ask rejected.
+ */
+export function applyDecisionAsk(state, input, now) {
+    if (findDecision(state, input.id)) {
+        throw new DecisionError("invalid-input", `decision id already exists: ${input.id}`);
+    }
+    const active = state.decisions.find((record) => record.status === "asked");
+    if (active !== undefined) {
+        throw new DecisionError("decision-active-exists", `decision ${active.id} is still awaiting an answer; resolve it or cancel it first (/decision cancel ${active.id})`);
+    }
+    const record = buildDecisionRecord(input, now);
+    const decisions = [...state.decisions, record];
+    if (decisions.length > DECISION_LIMITS.decisionsMax) {
+        const oldestTerminal = decisions.findIndex((candidate) => !isDecisionActive(candidate));
+        if (oldestTerminal < 0) {
+            throw new DecisionError("state-limit-reached", `decision state reached its ${DECISION_LIMITS.decisionsMax}-record limit with no terminal record to evict`);
+        }
+        decisions.splice(oldestTerminal, 1);
+    }
+    return {
+        state: { version: 1, decisions },
+        transitions: [
+            {
+                decisionId: record.id,
+                event: "asked",
+                reason: {
+                    code: "decision-asked",
+                    detail: `level=${record.redLine ? "redline" : record.riskClass} options=${record.options.length}`,
+                },
+                revision: record.revision,
+            },
+        ],
+    };
+}
+/**
+ * decision_resolve (§4.2): close the decision with the chosen option index.
+ * `source: "adjudication"` requires the injected verdict to already exist in
+ * the record AND the choice to match it — the model must not fabricate or
+ * override an adjudication.
+ */
+export function applyDecisionAnswer(state, input, now) {
+    void now; // the answer itself carries no timestamp field; kept for call-shape symmetry
+    const record = requireActive(state, input.decisionId);
+    if (!Number.isInteger(input.choice) ||
+        input.choice < 0 ||
+        input.choice >= record.options.length) {
+        throw new DecisionError("choice-out-of-range", `choice must be an option index within 0..${record.options.length - 1}: ${String(input.choice)}`);
+    }
+    if (input.source === "adjudication") {
+        if (record.status !== "adjudicating" || record.verdict === undefined) {
+            throw new DecisionError("adjudication-not-recorded", `no injected adjudication exists for decision ${record.id}; the model must not claim an adjudicated answer`);
+        }
+        if (record.verdict.choice !== input.choice) {
+            throw new DecisionError("adjudication-choice-mismatch", `choice ${input.choice} does not match the injected adjudication (choice ${record.verdict.choice})`);
+        }
+    }
+    else if (record.status !== "asked") {
+        throw new DecisionError("not-active", `decision ${record.id} already timed out (status ${record.status}); a user answer can no longer land through decision_resolve`);
+    }
+    const note = input.note === undefined ? undefined : nonEmptyString(input.note, "note", DECISION_LIMITS.noteMaxLength);
+    const updated = {
+        ...record,
+        status: "answered",
+        revision: record.revision + 1,
+        resolvedBy: input.source,
+        choice: input.choice,
+        ...(note === undefined ? {} : { note }),
+    };
+    return {
+        state: replaceDecision(state, updated),
+        transitions: [
+            {
+                decisionId: record.id,
+                event: input.source === "user" ? "answered.user" : "answered.adjudication",
+                reason: {
+                    code: input.source === "user" ? "user-answered" : "adjudication-resolved",
+                    detail: `choice=${input.choice}${note === undefined ? "" : ` note=${note}`}`,
+                },
+                revision: updated.revision,
+            },
+        ],
+    };
+}
+/**
+ * Timeout fire (§5.1/§5.2): redline lands `timed-out.halted` (never
+ * adjudicated); reversible levels land `timed-out.adjudicating` before the
+ * chain runs.
+ */
+export function applyDecisionTimeout(state, input, now) {
+    void now;
+    const record = requireActive(state, input.decisionId);
+    if (record.status !== "asked") {
+        throw new DecisionError("not-active", `timeout fires on a non-asked decision: ${record.id}`);
+    }
+    if (input.mode === "halt" && !record.redLine) {
+        throw new DecisionError("invalid-input", `decision ${record.id} is not a redline; use adjudicate`);
+    }
+    if (input.mode === "adjudicate" && record.redLine) {
+        throw new DecisionError("invalid-input", `decision ${record.id} is a redline; it must halt, not adjudicate`);
+    }
+    const updated = {
+        ...record,
+        status: input.mode === "halt" ? "halted" : "adjudicating",
+        revision: record.revision + 1,
+    };
+    return {
+        state: replaceDecision(state, updated),
+        transitions: [
+            {
+                decisionId: record.id,
+                event: input.mode === "halt" ? "timed-out.halted" : "timed-out.adjudicating",
+                reason: {
+                    code: input.mode === "halt" ? "redline-kept-stopped" : "adjudication-dispatched",
+                    detail: input.mode === "halt"
+                        ? "irreversible fork stays stopped for the user"
+                        : "reversible fork handed to the adjudication chain",
+                },
+                revision: updated.revision,
+            },
+        ],
+    };
+}
+/**
+ * Adjudication failed (§5.4): capability missing, submit/drain error, or an
+ * output that violates the JSON protocol. Terminal halted-like state — no
+ * retry, no silent downgrade.
+ */
+export function applyAdjudicationFailure(state, input, now) {
+    void now;
+    const record = requireActive(state, input.decisionId);
+    if (record.status !== "adjudicating") {
+        throw new DecisionError("not-active", `adjudication failure lands on an adjudicating decision: ${record.id}`);
+    }
+    const updated = {
+        ...record,
+        status: input.code === "unavailable" ? "unavailable" : "unparseable",
+        revision: record.revision + 1,
+    };
+    return {
+        state: replaceDecision(state, updated),
+        transitions: [
+            {
+                decisionId: record.id,
+                event: input.code === "unavailable" ? "adjudication.unavailable" : "adjudication.unparseable",
+                reason: { code: `adjudication-${input.code}`, detail: input.detail },
+                revision: updated.revision,
+            },
+        ],
+    };
+}
+/**
+ * Stores a successful adjudication verdict (§5 留痕: 裁决书全文同步写入
+ * decision.state) without a transition event — the vocabulary has none for
+ * success; the audit trail closes when the model resolves
+ * (`answered.adjudication`).
+ */
+export function recordVerdict(state, input, now) {
+    void now;
+    const record = requireActive(state, input.decisionId);
+    if (record.status !== "adjudicating") {
+        throw new DecisionError("not-active", `a verdict lands on an adjudicating decision: ${record.id}`);
+    }
+    const updated = { ...record, verdict: input.verdict };
+    return { state: replaceDecision(state, updated), transitions: [] };
+}
+/** /decision cancel (§4.3): the user decides "do nothing". Clears active status. */
+export function applyDecisionCancel(state, input, now) {
+    void now;
+    const record = requireActive(state, input.decisionId);
+    const updated = { ...record, status: "cancelled", revision: record.revision + 1 };
+    return {
+        state: replaceDecision(state, updated),
+        transitions: [
+            {
+                decisionId: record.id,
+                event: "cancelled",
+                reason: { code: "decision-cancelled", detail: "user cancelled the fork (do nothing)" },
+                revision: updated.revision,
+            },
+        ],
+    };
+}
+/**
+ * Rebuilds the decision state from the session's append-only entries: the
+ * most recent `decision.state` snapshot is authoritative; a malformed one
+ * reads as an empty state instead of crashing re-entry (goal/alignment
+ * precedent). Both the versioned shape (`{ version: 1, decisions }`, §6)
+ * and a legacy bare container are accepted — a missing version reads as 1,
+ * a foreign version reads as empty (conservative default).
+ */
+export function rebuildDecisionState(entries) {
+    for (let index = entries.length - 1; index >= 0; index -= 1) {
+        const entry = entries[index];
+        if (entry?.customType !== "decision.state")
+            continue;
+        const data = entry.data;
+        if (data === null || typeof data !== "object" || Array.isArray(data))
+            return { version: 1, decisions: [] };
+        const record = data;
+        if (record.version !== undefined && record.version !== 1)
+            return { version: 1, decisions: [] };
+        if (!Array.isArray(record.decisions))
+            return { version: 1, decisions: [] };
+        return { version: 1, decisions: [...record.decisions] };
+    }
+    return { version: 1, decisions: [] };
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEN,eAAe,EACf,aAAa,GAQb,MAAM,YAAY,CAAC;AAOpB,8EAA8E;AAC9E,oCAAmC;AACnC,8EAA8E;AAE9E,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAElD,MAAM,UAAU,eAAe,CAAC,EAAU,EAAW;IACpD,gGAA8C;IAC9C,oFAAwC;IACxC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC;AAAA,CACzE;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY,EAAE,GAAW,EAAU;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,GAAG,IAAI,YAAY,GAAG,aAAa,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAUD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAuC,EAAE,SAA4B,EAAiB;IACtH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzD,IAAI,MAAM,CAAC,aAAa,KAAK,cAAc;YAAE,OAAO,SAAS,CAAC;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAA0B,EAAE,KAAa,EAAkB;IAClF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,UAAU,KAAK,oBAAoB,CAAC,CAAC;IAChF,CAAC;IACD,IACC,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,KAAK,CAAC,aAAa,KAAK,YAAY;QACpC,KAAK,CAAC,aAAa,KAAK,cAAc,EACrC,CAAC;QACF,MAAM,IAAI,aAAa,CACtB,gBAAgB,EAChB,UAAU,KAAK,0DAA0D,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CACtG,CAAC;IACH,CAAC;IACD,OAAO;QACN,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,KAAK,QAAQ,EAAE,eAAe,CAAC,cAAc,CAAC;QAC3F,WAAW,EAAE,cAAc,CAC1B,KAAK,CAAC,WAAW,EACjB,UAAU,KAAK,cAAc,EAC7B,eAAe,CAAC,oBAAoB,CACpC;QACD,YAAY,EAAE,cAAc,CAC3B,KAAK,CAAC,YAAY,EAClB,UAAU,KAAK,eAAe,EAC9B,eAAe,CAAC,qBAAqB,CACrC;QACD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;KACpF,CAAC;AAAA,CACF;AAUD,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,KAAuB,EAAE,GAAW,EAAkB;IACzF,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CACtB,YAAY,EACZ,uEAAuE,KAAK,CAAC,EAAE,EAAE,CACjF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,CAAC;QAC5G,MAAM,IAAI,aAAa,CACtB,eAAe,EACf,sBAAsB,eAAe,CAAC,UAAU,KAAK,eAAe,CAAC,UAAU,eAAe,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CACpH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,kDAAkD,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,EAAE,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACpH,OAAO;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ;QACR,OAAO;QACP,aAAa;QACb,SAAS;QACT,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,SAAS;QAC3D,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,GAAG;KACd,CAAC;AAAA,CACF;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,UAAU,YAAY,CAAC,KAAoB,EAAE,EAAU,EAA8B;IAC1F,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAAA,CAC1D;AAED,sFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAW;IACjE,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC;AAAA,CACrE;AAED,SAAS,aAAa,CAAC,KAAoB,EAAE,EAAU,EAAkB;IACxE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,kCAAkC,MAAM,CAAC,MAAM,MAAM,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,eAAe,CAAC,KAAoB,EAAE,OAAuB,EAAiB;IACtF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAAA,CACjH;AAED,8EAA8E;AAC9E,8BAA2B;AAC3B,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,KAAuB,EAAE,GAAW,EAAa;IACvG,IAAI,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,+BAA+B,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAC3E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CACtB,wBAAwB,EACxB,YAAY,MAAM,CAAC,EAAE,iFAAiF,MAAM,CAAC,EAAE,GAAG,CAClH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CACtB,qBAAqB,EACrB,8BAA8B,eAAe,CAAC,YAAY,gDAAgD,CAC1G,CAAC;QACH,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO;QACN,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE;QAChC,WAAW,EAAE;YACZ;gBACC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE;oBACP,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE;iBACjG;gBACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;aACzB;SACD;KACD,CAAC;AAAA,CACF;AASD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAoB,EAAE,KAA0B,EAAE,GAAW,EAAa;IAC7G,KAAK,GAAG,CAAC,CAAC,6EAA6E;IACvF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IACC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,KAAK,CAAC,MAAiB,GAAG,CAAC;QAC3B,KAAK,CAAC,MAAiB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAChD,CAAC;QACF,MAAM,IAAI,aAAa,CACtB,qBAAqB,EACrB,4CAA4C,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAChG,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtE,MAAM,IAAI,aAAa,CACtB,2BAA2B,EAC3B,gDAAgD,MAAM,CAAC,EAAE,kDAAkD,CAC3G,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CACtB,8BAA8B,EAC9B,UAAU,KAAK,CAAC,MAAM,qDAAqD,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CACnG,CAAC;QACH,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CACtB,YAAY,EACZ,YAAY,MAAM,CAAC,EAAE,8BAA8B,MAAM,CAAC,MAAM,8DAA8D,CAC9H,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GACT,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC1G,MAAM,OAAO,GAAmB;QAC/B,GAAG,MAAM;QACT,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACvC,CAAC;IACF,OAAO;QACN,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;QACtC,WAAW,EAAE;YACZ;gBACC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB;gBAC1E,MAAM,EAAE;oBACP,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB;oBACzE,MAAM,EAAE,UAAU,KAAK,CAAC,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE;iBAC5E;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC1B;SACD;KACD,CAAC;AAAA,CACF;AAID;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CACnC,KAAoB,EACpB,KAAgD,EAChD,GAAW,EACC;IACZ,KAAK,GAAG,CAAC;IACT,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,0CAA0C,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,YAAY,MAAM,CAAC,EAAE,mCAAmC,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,YAAY,MAAM,CAAC,EAAE,6CAA6C,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,OAAO,GAAmB;QAC/B,GAAG,MAAM;QACT,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc;QACzD,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC;KAC7B,CAAC;IACF,OAAO;QACN,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;QACtC,WAAW,EAAE;YACZ;gBACC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,wBAAwB;gBAC5E,MAAM,EAAE;oBACP,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,yBAAyB;oBAChF,MAAM,EACL,KAAK,CAAC,IAAI,KAAK,MAAM;wBACpB,CAAC,CAAC,8CAA8C;wBAChD,CAAC,CAAC,kDAAkD;iBACtD;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC1B;SACD;KACD,CAAC;AAAA,CACF;AAID;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACvC,KAAoB,EACpB,KAA4E,EAC5E,GAAW,EACC;IACZ,KAAK,GAAG,CAAC;IACT,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,2DAA2D,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,OAAO,GAAmB;QAC/B,GAAG,MAAM;QACT,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;QACpE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC;KAC7B,CAAC;IACF,OAAO;QACN,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;QACtC,WAAW,EAAE;YACZ;gBACC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,0BAA0B;gBAC7F,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;gBACpE,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC1B;SACD;KACD,CAAC;AAAA,CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC5B,KAAoB,EACpB,KAA2D,EAC3D,GAAW,EACC;IACZ,KAAK,GAAG,CAAC;IACT,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,gDAAgD,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,OAAO,GAAmB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACtE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAAA,CACnE;AAED,qFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,KAAoB,EAAE,KAA6B,EAAE,GAAW,EAAa;IAChH,KAAK,GAAG,CAAC;IACT,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,OAAO,GAAmB,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;IAClG,OAAO;QACN,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;QACtC,WAAW,EAAE;YACZ;gBACC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,sCAAsC,EAAE;gBACtF,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC1B;SACD;KACD,CAAC;AAAA,CACF;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAkC,EAAiB;IACvF,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK,EAAE,UAAU,KAAK,gBAAgB;YAAE,SAAS;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3G,MAAM,MAAM,GAAG,IAAkD,CAAC;QAClE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC/F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAAA,CACrC","sourcesContent":["/**\n * Pure decision state machine (`docs/design/决策升级插件设计.md` §3/§4/§6) —\n * no host API access, no I/O, no clocks (time is always a caller-supplied\n * `now`). Every function takes JSON-safe state and returns the next state\n * plus the audit transitions to persist; index.ts owns persistence (entries +\n * events), timers and injection; http-server.ts owns transport;\n * adjudication.ts owns the subagent chain.\n */\n\nimport {\n\ttype AdjudicationVerdict,\n\tDECISION_LIMITS,\n\tDecisionError,\n\ttype DecisionLevel,\n\ttype DecisionOption,\n\ttype DecisionRecord,\n\ttype DecisionReversibility,\n\ttype DecisionRiskClass,\n\ttype DecisionState,\n\ttype DecisionTransitionEntry,\n} from \"./types.ts\";\n\nexport interface EngineRun {\n\tstate: DecisionState;\n\ttransitions: DecisionTransitionEntry[];\n}\n\n// ---------------------------------------------------------------------------\n// Validation & classification (§3)\n// ---------------------------------------------------------------------------\n\nconst ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;\n\nexport function validDecisionId(id: string): boolean {\n\t// 入参可能来自未校验的工具输入（空对象 → undefined）：test() 会把实参\n\t// 字符串化为 \"undefined\" 而\"通过\"模式匹配，必须先做类型守卫。\n\treturn typeof id === \"string\" && ID_PATTERN.test(id) && id.length <= 128;\n}\n\nfunction nonEmptyString(value: unknown, name: string, max: number): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\") {\n\t\tthrow new DecisionError(\"invalid-input\", `${name} must be a non-empty string`);\n\t}\n\tif (value.length > max) {\n\t\tthrow new DecisionError(\"invalid-input\", `${name} exceeds ${max} characters`);\n\t}\n\treturn value;\n}\n\n/** Model-facing option input; reversibility may be absent (missing = redline, §3). */\nexport interface DecisionOptionInput {\n\tlabel: string;\n\tdescription: string;\n\tconsequences: string;\n\treversibility?: DecisionReversibility;\n}\n\n/**\n * Escalation classification (§3): redline when ANY option is irreversible or\n * carries no reversibility field (conservative default); otherwise the\n * model's risk_class picks routine (L1) vs significant (L2). The redline is\n * never the model's risk self-assessment.\n */\nexport function classifyDecision(options: readonly DecisionOptionInput[], riskClass: DecisionRiskClass): DecisionLevel {\n\tfor (const option of options) {\n\t\tif (option.reversibility === undefined) return \"redline\";\n\t\tif (option.reversibility === \"irreversible\") return \"redline\";\n\t}\n\treturn riskClass;\n}\n\n/**\n * Validates one option shape. An explicit `reversibility` outside the\n * two-value vocabulary is invalid input (the schema enforces literals; this\n * guards unvalidated callers). A MISSING field is accepted here — the\n * classifier turns it into a redline.\n */\nfunction validateOption(input: DecisionOptionInput, index: number): DecisionOption {\n\tif (input === null || typeof input !== \"object\") {\n\t\tthrow new DecisionError(\"invalid-option\", `option ${index} must be an object`);\n\t}\n\tif (\n\t\tinput.reversibility !== undefined &&\n\t\tinput.reversibility !== \"reversible\" &&\n\t\tinput.reversibility !== \"irreversible\"\n\t) {\n\t\tthrow new DecisionError(\n\t\t\t\"invalid-option\",\n\t\t\t`option ${index} reversibility must be \"reversible\" or \"irreversible\": ${String(input.reversibility)}`,\n\t\t);\n\t}\n\treturn {\n\t\tlabel: nonEmptyString(input.label, `option ${index} label`, DECISION_LIMITS.labelMaxLength),\n\t\tdescription: nonEmptyString(\n\t\t\tinput.description,\n\t\t\t`option ${index} description`,\n\t\t\tDECISION_LIMITS.descriptionMaxLength,\n\t\t),\n\t\tconsequences: nonEmptyString(\n\t\t\tinput.consequences,\n\t\t\t`option ${index} consequences`,\n\t\t\tDECISION_LIMITS.consequencesMaxLength,\n\t\t),\n\t\t...(input.reversibility === undefined ? {} : { reversibility: input.reversibility }),\n\t};\n}\n\nexport interface DecisionAskInput {\n\tid: string;\n\tquestion: string;\n\toptions: DecisionOptionInput[];\n\tcontextDigest: string;\n\triskClass: DecisionRiskClass;\n}\n\n/** Validates the ask input and returns the normalized record (status asked, redLine derived). */\nexport function buildDecisionRecord(input: DecisionAskInput, now: number): DecisionRecord {\n\tif (!validDecisionId(input.id)) {\n\t\tthrow new DecisionError(\n\t\t\t\"invalid-id\",\n\t\t\t`decision id must match [A-Za-z0-9][A-Za-z0-9._-]* (no leading dot): ${input.id}`,\n\t\t);\n\t}\n\tif (!Array.isArray(input.options)) {\n\t\tthrow new DecisionError(\"invalid-input\", \"options must be an array\");\n\t}\n\tif (input.options.length < DECISION_LIMITS.optionsMin || input.options.length > DECISION_LIMITS.optionsMax) {\n\t\tthrow new DecisionError(\n\t\t\t\"invalid-input\",\n\t\t\t`options must carry ${DECISION_LIMITS.optionsMin}..${DECISION_LIMITS.optionsMax} items, got ${input.options.length}`,\n\t\t);\n\t}\n\tconst riskClass = input.riskClass;\n\tif (riskClass !== \"routine\" && riskClass !== \"significant\") {\n\t\tthrow new DecisionError(\"invalid-input\", `risk_class must be \"routine\" or \"significant\": ${String(riskClass)}`);\n\t}\n\tconst options = input.options.map((option, index) => validateOption(option, index));\n\tconst question = nonEmptyString(input.question, \"question\", DECISION_LIMITS.questionMaxLength);\n\tconst contextDigest = nonEmptyString(input.contextDigest, \"context_digest\", DECISION_LIMITS.contextDigestMaxLength);\n\treturn {\n\t\tid: input.id,\n\t\tquestion,\n\t\toptions,\n\t\tcontextDigest,\n\t\triskClass,\n\t\tredLine: classifyDecision(options, riskClass) === \"redline\",\n\t\tstatus: \"asked\",\n\t\trevision: 0,\n\t\tcreatedAt: now,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// State helpers\n// ---------------------------------------------------------------------------\n\nexport function findDecision(state: DecisionState, id: string): DecisionRecord | undefined {\n\treturn state.decisions.find((record) => record.id === id);\n}\n\n/** \"Active\" per §4.2/§4.3: waiting for the user, or timed out into adjudication. */\nexport function isDecisionActive(record: DecisionRecord): boolean {\n\treturn record.status === \"asked\" || record.status === \"adjudicating\";\n}\n\nfunction requireActive(state: DecisionState, id: string): DecisionRecord {\n\tconst record = findDecision(state, id);\n\tif (!record) throw new DecisionError(\"not-found\", `unknown decision: ${id}`);\n\tif (!isDecisionActive(record)) {\n\t\tthrow new DecisionError(\"not-active\", `decision is not active (status ${record.status}): ${id}`);\n\t}\n\treturn record;\n}\n\nfunction replaceDecision(state: DecisionState, updated: DecisionRecord): DecisionState {\n\treturn { version: 1, decisions: state.decisions.map((record) => (record.id === updated.id ? updated : record)) };\n}\n\n// ---------------------------------------------------------------------------\n// Transitions (§4, §5, §6)\n// ---------------------------------------------------------------------------\n\n/**\n * decision_ask: create the record and land the `asked` transition.\n * Single-active discipline: at most one decision may sit in\n * `asked` — a second ask is a structured rejection pointing at\n * resolve/cancel. The rolling retention (§ 有界性) never evicts an active\n * record: the oldest terminal record goes first, and only when none exists\n * is the new ask rejected.\n */\nexport function applyDecisionAsk(state: DecisionState, input: DecisionAskInput, now: number): EngineRun {\n\tif (findDecision(state, input.id)) {\n\t\tthrow new DecisionError(\"invalid-input\", `decision id already exists: ${input.id}`);\n\t}\n\tconst active = state.decisions.find((record) => record.status === \"asked\");\n\tif (active !== undefined) {\n\t\tthrow new DecisionError(\n\t\t\t\"decision-active-exists\",\n\t\t\t`decision ${active.id} is still awaiting an answer; resolve it or cancel it first (/decision cancel ${active.id})`,\n\t\t);\n\t}\n\tconst record = buildDecisionRecord(input, now);\n\tconst decisions = [...state.decisions, record];\n\tif (decisions.length > DECISION_LIMITS.decisionsMax) {\n\t\tconst oldestTerminal = decisions.findIndex((candidate) => !isDecisionActive(candidate));\n\t\tif (oldestTerminal < 0) {\n\t\t\tthrow new DecisionError(\n\t\t\t\t\"state-limit-reached\",\n\t\t\t\t`decision state reached its ${DECISION_LIMITS.decisionsMax}-record limit with no terminal record to evict`,\n\t\t\t);\n\t\t}\n\t\tdecisions.splice(oldestTerminal, 1);\n\t}\n\treturn {\n\t\tstate: { version: 1, decisions },\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: \"asked\",\n\t\t\t\treason: {\n\t\t\t\t\tcode: \"decision-asked\",\n\t\t\t\t\tdetail: `level=${record.redLine ? \"redline\" : record.riskClass} options=${record.options.length}`,\n\t\t\t\t},\n\t\t\t\trevision: record.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\nexport interface DecisionAnswerInput {\n\tdecisionId: string;\n\tchoice: number;\n\tsource: \"user\" | \"adjudication\";\n\tnote?: string;\n}\n\n/**\n * decision_resolve (§4.2): close the decision with the chosen option index.\n * `source: \"adjudication\"` requires the injected verdict to already exist in\n * the record AND the choice to match it — the model must not fabricate or\n * override an adjudication.\n */\nexport function applyDecisionAnswer(state: DecisionState, input: DecisionAnswerInput, now: number): EngineRun {\n\tvoid now; // the answer itself carries no timestamp field; kept for call-shape symmetry\n\tconst record = requireActive(state, input.decisionId);\n\tif (\n\t\t!Number.isInteger(input.choice) ||\n\t\t(input.choice as number) < 0 ||\n\t\t(input.choice as number) >= record.options.length\n\t) {\n\t\tthrow new DecisionError(\n\t\t\t\"choice-out-of-range\",\n\t\t\t`choice must be an option index within 0..${record.options.length - 1}: ${String(input.choice)}`,\n\t\t);\n\t}\n\tif (input.source === \"adjudication\") {\n\t\tif (record.status !== \"adjudicating\" || record.verdict === undefined) {\n\t\t\tthrow new DecisionError(\n\t\t\t\t\"adjudication-not-recorded\",\n\t\t\t\t`no injected adjudication exists for decision ${record.id}; the model must not claim an adjudicated answer`,\n\t\t\t);\n\t\t}\n\t\tif (record.verdict.choice !== input.choice) {\n\t\t\tthrow new DecisionError(\n\t\t\t\t\"adjudication-choice-mismatch\",\n\t\t\t\t`choice ${input.choice} does not match the injected adjudication (choice ${record.verdict.choice})`,\n\t\t\t);\n\t\t}\n\t} else if (record.status !== \"asked\") {\n\t\tthrow new DecisionError(\n\t\t\t\"not-active\",\n\t\t\t`decision ${record.id} already timed out (status ${record.status}); a user answer can no longer land through decision_resolve`,\n\t\t);\n\t}\n\tconst note =\n\t\tinput.note === undefined ? undefined : nonEmptyString(input.note, \"note\", DECISION_LIMITS.noteMaxLength);\n\tconst updated: DecisionRecord = {\n\t\t...record,\n\t\tstatus: \"answered\",\n\t\trevision: record.revision + 1,\n\t\tresolvedBy: input.source,\n\t\tchoice: input.choice,\n\t\t...(note === undefined ? {} : { note }),\n\t};\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: input.source === \"user\" ? \"answered.user\" : \"answered.adjudication\",\n\t\t\t\treason: {\n\t\t\t\t\tcode: input.source === \"user\" ? \"user-answered\" : \"adjudication-resolved\",\n\t\t\t\t\tdetail: `choice=${input.choice}${note === undefined ? \"\" : ` note=${note}`}`,\n\t\t\t\t},\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\nexport type TimeoutMode = \"halt\" | \"adjudicate\";\n\n/**\n * Timeout fire (§5.1/§5.2): redline lands `timed-out.halted` (never\n * adjudicated); reversible levels land `timed-out.adjudicating` before the\n * chain runs.\n */\nexport function applyDecisionTimeout(\n\tstate: DecisionState,\n\tinput: { decisionId: string; mode: TimeoutMode },\n\tnow: number,\n): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tif (record.status !== \"asked\") {\n\t\tthrow new DecisionError(\"not-active\", `timeout fires on a non-asked decision: ${record.id}`);\n\t}\n\tif (input.mode === \"halt\" && !record.redLine) {\n\t\tthrow new DecisionError(\"invalid-input\", `decision ${record.id} is not a redline; use adjudicate`);\n\t}\n\tif (input.mode === \"adjudicate\" && record.redLine) {\n\t\tthrow new DecisionError(\"invalid-input\", `decision ${record.id} is a redline; it must halt, not adjudicate`);\n\t}\n\tconst updated: DecisionRecord = {\n\t\t...record,\n\t\tstatus: input.mode === \"halt\" ? \"halted\" : \"adjudicating\",\n\t\trevision: record.revision + 1,\n\t};\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: input.mode === \"halt\" ? \"timed-out.halted\" : \"timed-out.adjudicating\",\n\t\t\t\treason: {\n\t\t\t\t\tcode: input.mode === \"halt\" ? \"redline-kept-stopped\" : \"adjudication-dispatched\",\n\t\t\t\t\tdetail:\n\t\t\t\t\t\tinput.mode === \"halt\"\n\t\t\t\t\t\t\t? \"irreversible fork stays stopped for the user\"\n\t\t\t\t\t\t\t: \"reversible fork handed to the adjudication chain\",\n\t\t\t\t},\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\nexport type AdjudicationFailureCode = \"unavailable\" | \"unparseable\";\n\n/**\n * Adjudication failed (§5.4): capability missing, submit/drain error, or an\n * output that violates the JSON protocol. Terminal halted-like state — no\n * retry, no silent downgrade.\n */\nexport function applyAdjudicationFailure(\n\tstate: DecisionState,\n\tinput: { decisionId: string; code: AdjudicationFailureCode; detail: string },\n\tnow: number,\n): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tif (record.status !== \"adjudicating\") {\n\t\tthrow new DecisionError(\"not-active\", `adjudication failure lands on an adjudicating decision: ${record.id}`);\n\t}\n\tconst updated: DecisionRecord = {\n\t\t...record,\n\t\tstatus: input.code === \"unavailable\" ? \"unavailable\" : \"unparseable\",\n\t\trevision: record.revision + 1,\n\t};\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: input.code === \"unavailable\" ? \"adjudication.unavailable\" : \"adjudication.unparseable\",\n\t\t\t\treason: { code: `adjudication-${input.code}`, detail: input.detail },\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\n/**\n * Stores a successful adjudication verdict (§5 留痕: 裁决书全文同步写入\n * decision.state) without a transition event — the vocabulary has none for\n * success; the audit trail closes when the model resolves\n * (`answered.adjudication`).\n */\nexport function recordVerdict(\n\tstate: DecisionState,\n\tinput: { decisionId: string; verdict: AdjudicationVerdict },\n\tnow: number,\n): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tif (record.status !== \"adjudicating\") {\n\t\tthrow new DecisionError(\"not-active\", `a verdict lands on an adjudicating decision: ${record.id}`);\n\t}\n\tconst updated: DecisionRecord = { ...record, verdict: input.verdict };\n\treturn { state: replaceDecision(state, updated), transitions: [] };\n}\n\n/** /decision cancel (§4.3): the user decides \"do nothing\". Clears active status. */\nexport function applyDecisionCancel(state: DecisionState, input: { decisionId: string }, now: number): EngineRun {\n\tvoid now;\n\tconst record = requireActive(state, input.decisionId);\n\tconst updated: DecisionRecord = { ...record, status: \"cancelled\", revision: record.revision + 1 };\n\treturn {\n\t\tstate: replaceDecision(state, updated),\n\t\ttransitions: [\n\t\t\t{\n\t\t\t\tdecisionId: record.id,\n\t\t\t\tevent: \"cancelled\",\n\t\t\t\treason: { code: \"decision-cancelled\", detail: \"user cancelled the fork (do nothing)\" },\n\t\t\t\trevision: updated.revision,\n\t\t\t},\n\t\t],\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Snapshot rebuild (§6): reverse scan, malformed snapshot reads as empty\n// ---------------------------------------------------------------------------\n\nexport interface StateEntryView {\n\tcustomType?: string;\n\tdata?: unknown;\n}\n\n/**\n * Rebuilds the decision state from the session's append-only entries: the\n * most recent `decision.state` snapshot is authoritative; a malformed one\n * reads as an empty state instead of crashing re-entry (goal/alignment\n * precedent). Both the versioned shape (`{ version: 1, decisions }`, §6)\n * and a legacy bare container are accepted — a missing version reads as 1,\n * a foreign version reads as empty (conservative default).\n */\nexport function rebuildDecisionState(entries: readonly StateEntryView[]): DecisionState {\n\tfor (let index = entries.length - 1; index >= 0; index -= 1) {\n\t\tconst entry = entries[index];\n\t\tif (entry?.customType !== \"decision.state\") continue;\n\t\tconst data = entry.data;\n\t\tif (data === null || typeof data !== \"object\" || Array.isArray(data)) return { version: 1, decisions: [] };\n\t\tconst record = data as { version?: unknown; decisions?: unknown };\n\t\tif (record.version !== undefined && record.version !== 1) return { version: 1, decisions: [] };\n\t\tif (!Array.isArray(record.decisions)) return { version: 1, decisions: [] };\n\t\treturn { version: 1, decisions: [...record.decisions] };\n\t}\n\treturn { version: 1, decisions: [] };\n}\n"]}

package/dist/entry.d.ts

@@ -0,0 +1,14 @@
+import type { CapabilityAPI } from "@agent-forge/plugin-sdk";
+/**
+ * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.
+ *
+ * The capability factory returns its registrations as an array, while the
+ * manifest loader contract expects `void` or a single `{ dispose() }` instance
+ * (`normalizePluginInstance` does not accept arrays). The wrapper collects the
+ * registrations and disposes them in reverse order on plugin teardown — the
+ * same disposal semantics as the host's embedded `syncRegistrationFactory`.
+ */
+export default function createDecisionEscalationPluginEntry(api: CapabilityAPI): Promise<{
+    dispose: () => void;
+}>;
+//# sourceMappingURL=entry.d.ts.map

package/dist/entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../src/entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D;;;;;;;;GAQG;AACH,wBAA8B,mCAAmC,CAChE,GAAG,EAAE,aAAa,GAChB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC,CAWlC","sourcesContent":["import type { CapabilityAPI } from \"@agent-forge/plugin-sdk\";\nimport { createCapability } from \"./index.ts\";\n\n/**\n * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.\n *\n * The capability factory returns its registrations as an array, while the\n * manifest loader contract expects `void` or a single `{ dispose() }` instance\n * (`normalizePluginInstance` does not accept arrays). The wrapper collects the\n * registrations and disposes them in reverse order on plugin teardown — the\n * same disposal semantics as the host's embedded `syncRegistrationFactory`.\n */\nexport default async function createDecisionEscalationPluginEntry(\n\tapi: CapabilityAPI,\n): Promise<{ dispose: () => void }> {\n\tconst registrations = await createCapability(api);\n\treturn {\n\t\tdispose: () => {\n\t\t\tfor (const registration of [...registrations].reverse()) {\n\t\t\t\t// Registration disposal in the capability runtime is synchronous;\n\t\t\t\t// void consumes the declared Promise possibility of the contract.\n\t\t\t\tvoid registration.dispose();\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/entry.js

@@ -0,0 +1,23 @@
+import { createCapability } from "./index.js";
+/**
+ * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.
+ *
+ * The capability factory returns its registrations as an array, while the
+ * manifest loader contract expects `void` or a single `{ dispose() }` instance
+ * (`normalizePluginInstance` does not accept arrays). The wrapper collects the
+ * registrations and disposes them in reverse order on plugin teardown — the
+ * same disposal semantics as the host's embedded `syncRegistrationFactory`.
+ */
+export default async function createDecisionEscalationPluginEntry(api) {
+    const registrations = await createCapability(api);
+    return {
+        dispose: () => {
+            for (const registration of [...registrations].reverse()) {
+                // Registration disposal in the capability runtime is synchronous;
+                // void consumes the declared Promise possibility of the contract.
+                void registration.dispose();
+            }
+        },
+    };
+}
+//# sourceMappingURL=entry.js.map

package/dist/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../src/entry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,mCAAmC,CAChE,GAAkB,EACiB;IACnC,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO;QACN,OAAO,EAAE,GAAG,EAAE,CAAC;YACd,KAAK,MAAM,YAAY,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACzD,kEAAkE;gBAClE,kEAAkE;gBAClE,KAAK,YAAY,CAAC,OAAO,EAAE,CAAC;YAC7B,CAAC;QAAA,CACD;KACD,CAAC;AAAA,CACF","sourcesContent":["import type { CapabilityAPI } from \"@agent-forge/plugin-sdk\";\nimport { createCapability } from \"./index.ts\";\n\n/**\n * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.\n *\n * The capability factory returns its registrations as an array, while the\n * manifest loader contract expects `void` or a single `{ dispose() }` instance\n * (`normalizePluginInstance` does not accept arrays). The wrapper collects the\n * registrations and disposes them in reverse order on plugin teardown — the\n * same disposal semantics as the host's embedded `syncRegistrationFactory`.\n */\nexport default async function createDecisionEscalationPluginEntry(\n\tapi: CapabilityAPI,\n): Promise<{ dispose: () => void }> {\n\tconst registrations = await createCapability(api);\n\treturn {\n\t\tdispose: () => {\n\t\t\tfor (const registration of [...registrations].reverse()) {\n\t\t\t\t// Registration disposal in the capability runtime is synchronous;\n\t\t\t\t// void consumes the declared Promise possibility of the contract.\n\t\t\t\tvoid registration.dispose();\n\t\t\t}\n\t\t},\n\t};\n}\n"]}