@ai-dossier/core 1.2.0 → 1.3.1

package/dist/coherence/checks.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Individual coherence checks for dossier execution outputs.
+ *
+ * Each check is a pure function: (context) => diagnostics[].
+ * Checks are lightweight and fast -- they catch messy failures,
+ * not enforce strict contracts.
+ */
+import type { CoherenceContext, CoherenceDiagnostic } from './types';
+export declare function checkSchemaCompliance(context: CoherenceContext): CoherenceDiagnostic[];
+export declare function checkAnomalies(context: CoherenceContext): CoherenceDiagnostic[];
+export declare function checkCrossStepCoherence(context: CoherenceContext): CoherenceDiagnostic[];
+export declare function checkInternalConsistency(context: CoherenceContext): CoherenceDiagnostic[];
+//# sourceMappingURL=checks.d.ts.map

package/dist/coherence/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../src/coherence/checks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAMrE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CA+CtF;AASD,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAmE/E;AAoBD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAsCxF;AAMD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAwDzF"}

package/dist/coherence/checks.js

@@ -0,0 +1,239 @@
+"use strict";
+/**
+ * Individual coherence checks for dossier execution outputs.
+ *
+ * Each check is a pure function: (context) => diagnostics[].
+ * Checks are lightweight and fast -- they catch messy failures,
+ * not enforce strict contracts.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkSchemaCompliance = checkSchemaCompliance;
+exports.checkAnomalies = checkAnomalies;
+exports.checkCrossStepCoherence = checkCrossStepCoherence;
+exports.checkInternalConsistency = checkInternalConsistency;
+// ---------------------------------------------------------------------------
+// 1. Schema compliance — do outputs match declared output schemas?
+// ---------------------------------------------------------------------------
+function checkSchemaCompliance(context) {
+    const diagnostics = [];
+    if (!context.declaredSchemas)
+        return diagnostics;
+    for (const step of context.steps) {
+        const schema = context.declaredSchemas.get(step.stepName);
+        if (!schema)
+            continue;
+        // Check that declared configuration keys are present in outputs
+        if (schema.configuration) {
+            for (const declared of schema.configuration) {
+                if (!(declared.key in step.outputs)) {
+                    diagnostics.push({
+                        checkId: 'schema-compliance',
+                        severity: 'warning',
+                        message: `Step "${step.stepName}" declares output "${declared.key}" but it was not reported`,
+                        stepName: step.stepName,
+                        field: declared.key,
+                    });
+                }
+            }
+        }
+        // Check for undeclared outputs (outputs not in any declared category)
+        const declaredKeys = new Set();
+        if (schema.configuration) {
+            for (const c of schema.configuration) {
+                declaredKeys.add(c.key);
+            }
+        }
+        if (declaredKeys.size > 0) {
+            for (const key of Object.keys(step.outputs)) {
+                if (!declaredKeys.has(key)) {
+                    diagnostics.push({
+                        checkId: 'schema-compliance',
+                        severity: 'info',
+                        message: `Step "${step.stepName}" reported undeclared output "${key}" — not in outputs.configuration`,
+                        stepName: step.stepName,
+                        field: key,
+                    });
+                }
+            }
+        }
+    }
+    return diagnostics;
+}
+// ---------------------------------------------------------------------------
+// 2. Anomaly detection — unexpected empty outputs, size outliers
+// ---------------------------------------------------------------------------
+/** Ratio threshold: a step's output count differs from the mean by more than this factor */
+const SIZE_OUTLIER_FACTOR = 3;
+function checkAnomalies(context) {
+    const diagnostics = [];
+    for (const step of context.steps) {
+        // Empty output check
+        if (Object.keys(step.outputs).length === 0) {
+            diagnostics.push({
+                checkId: 'anomaly-empty-output',
+                severity: 'warning',
+                message: `Step "${step.stepName}" completed with no outputs — expected at least one key`,
+                stepName: step.stepName,
+            });
+            continue;
+        }
+        // Null / undefined value check
+        for (const [key, value] of Object.entries(step.outputs)) {
+            if (value === null || value === undefined) {
+                diagnostics.push({
+                    checkId: 'anomaly-null-value',
+                    severity: 'warning',
+                    message: `Step "${step.stepName}" output "${key}" is ${value === null ? 'null' : 'undefined'}`,
+                    stepName: step.stepName,
+                    field: key,
+                });
+            }
+            if (value === '') {
+                diagnostics.push({
+                    checkId: 'anomaly-empty-value',
+                    severity: 'info',
+                    message: `Step "${step.stepName}" output "${key}" is an empty string`,
+                    stepName: step.stepName,
+                    field: key,
+                });
+            }
+        }
+    }
+    // Size outlier detection: flag steps whose key count is drastically larger than
+    // the median of all other steps. Using median (not mean) prevents a single outlier
+    // from skewing the baseline.
+    const completedSteps = context.steps.filter((s) => Object.keys(s.outputs).length > 0);
+    if (completedSteps.length >= 3) {
+        for (const step of completedSteps) {
+            const size = Object.keys(step.outputs).length;
+            const otherSizes = completedSteps
+                .filter((s) => s !== step)
+                .map((s) => Object.keys(s.outputs).length)
+                .sort((a, b) => a - b);
+            const median = otherSizes.length % 2 === 0
+                ? (otherSizes[otherSizes.length / 2 - 1] + otherSizes[otherSizes.length / 2]) / 2
+                : otherSizes[Math.floor(otherSizes.length / 2)];
+            if (median > 0 && size / median > SIZE_OUTLIER_FACTOR) {
+                diagnostics.push({
+                    checkId: 'anomaly-size-outlier',
+                    severity: 'info',
+                    message: `Step "${step.stepName}" has ${size} output keys — ${(size / median).toFixed(1)}x the median of ${median}`,
+                    stepName: step.stepName,
+                });
+            }
+        }
+    }
+    return diagnostics;
+}
+// ---------------------------------------------------------------------------
+// 3. Cross-step coherence — does step N's output make sense given step N-1?
+// ---------------------------------------------------------------------------
+/**
+ * Extracts "entity-like" string values from an output record.
+ * Looks for values that resemble paths, URLs, identifiers, etc.
+ */
+function extractEntityValues(outputs) {
+    const entities = new Map();
+    for (const [key, value] of Object.entries(outputs)) {
+        if (typeof value === 'string' && value.length > 0) {
+            entities.set(key, value);
+        }
+    }
+    return entities;
+}
+function checkCrossStepCoherence(context) {
+    const diagnostics = [];
+    if (context.steps.length < 2)
+        return diagnostics;
+    // Build a map of all outputs from prior steps
+    const priorOutputs = new Map();
+    for (let i = 0; i < context.steps.length; i++) {
+        const step = context.steps[i];
+        if (i > 0) {
+            // Check if this step references keys from prior steps with different values
+            const currentEntities = extractEntityValues(step.outputs);
+            for (const [key, currentValue] of currentEntities) {
+                const prior = priorOutputs.get(key);
+                if (prior && prior.value !== currentValue) {
+                    diagnostics.push({
+                        checkId: 'cross-step-value-drift',
+                        severity: 'warning',
+                        message: `Output key "${key}" changed from "${truncate(prior.value)}" (step "${prior.fromStep}") ` +
+                            `to "${truncate(currentValue)}" (step "${step.stepName}") — verify this is intentional`,
+                        stepName: step.stepName,
+                        field: key,
+                    });
+                }
+            }
+        }
+        // Add this step's outputs to the prior map
+        const entities = extractEntityValues(step.outputs);
+        for (const [key, value] of entities) {
+            priorOutputs.set(key, { value, fromStep: step.stepName });
+        }
+    }
+    return diagnostics;
+}
+// ---------------------------------------------------------------------------
+// 4. Internal consistency — within a single step's outputs
+// ---------------------------------------------------------------------------
+function checkInternalConsistency(context) {
+    const diagnostics = [];
+    for (const step of context.steps) {
+        const entries = Object.entries(step.outputs);
+        if (entries.length === 0)
+            continue;
+        // Check for duplicate values under different keys (potential copy-paste / hallucination)
+        // Only meaningful when there are at least 2 entries
+        if (entries.length >= 2) {
+            const valueMap = new Map();
+            for (const [key, value] of entries) {
+                if (typeof value === 'string' && value.length > 0) {
+                    const existing = valueMap.get(value) || [];
+                    existing.push(key);
+                    valueMap.set(value, existing);
+                }
+            }
+            const trivialValues = new Set(['true', 'false', 'yes', 'no', 'ok', 'none', 'null']);
+            for (const [value, keys] of valueMap) {
+                if (keys.length > 1 && value.length > 3) {
+                    if (!trivialValues.has(value.toLowerCase())) {
+                        diagnostics.push({
+                            checkId: 'internal-duplicate-values',
+                            severity: 'info',
+                            message: `Step "${step.stepName}" has identical value "${truncate(value)}" ` +
+                                `for keys: ${keys.join(', ')} — possible copy-paste error`,
+                            stepName: step.stepName,
+                        });
+                    }
+                }
+            }
+        }
+        // Check for boolean-like string inconsistencies (e.g., "true" vs true)
+        for (const [key, value] of entries) {
+            if (typeof value === 'string') {
+                const lower = value.toLowerCase();
+                if (lower === 'true' || lower === 'false') {
+                    diagnostics.push({
+                        checkId: 'internal-boolean-string',
+                        severity: 'info',
+                        message: `Step "${step.stepName}" output "${key}" is "${value}" (string) ` +
+                            `instead of ${lower === 'true'} (boolean) — may cause type mismatches downstream`,
+                        stepName: step.stepName,
+                        field: key,
+                    });
+                }
+            }
+        }
+    }
+    return diagnostics;
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function truncate(value, maxLen = 60) {
+    if (value.length <= maxLen)
+        return value;
+    return `${value.slice(0, maxLen - 3)}...`;
+}
+//# sourceMappingURL=checks.js.map

package/dist/coherence/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../src/coherence/checks.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAQH,sDA+CC;AASD,wCAmEC;AAoBD,0DAsCC;AAMD,4DAwDC;AAvPD,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,SAAgB,qBAAqB,CAAC,OAAyB;IAC7D,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,eAAe;QAAE,OAAO,WAAW,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,gEAAgE;QAChE,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,WAAW,CAAC,IAAI,CAAC;wBACf,OAAO,EAAE,mBAAmB;wBAC5B,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,sBAAsB,QAAQ,CAAC,GAAG,2BAA2B;wBAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,KAAK,EAAE,QAAQ,CAAC,GAAG;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACrC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,WAAW,CAAC,IAAI,CAAC;wBACf,OAAO,EAAE,mBAAmB;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,iCAAiC,GAAG,kCAAkC;wBACrG,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,SAAgB,cAAc,CAAC,OAAyB;IACtD,MAAM,WAAW,GAA0B,EAAE,CAAC;IAE9C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,qBAAqB;QACrB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,sBAAsB;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,yDAAyD;gBACxF,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO,EAAE,oBAAoB;oBAC7B,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,aAAa,GAAG,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE;oBAC9F,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO,EAAE,qBAAqB;oBAC9B,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,aAAa,GAAG,sBAAsB;oBACrE,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,mFAAmF;IACnF,6BAA6B;IAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtF,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC9C,MAAM,UAAU,GAAG,cAAc;iBAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;iBACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;iBACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAEzB,MAAM,MAAM,GACV,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;gBACzB,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACjF,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAEpD,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBACtD,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO,EAAE,sBAAsB;oBAC/B,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,SAAS,IAAI,kBAAkB,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,MAAM,EAAE;oBACnH,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAgC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAyB;IAC/D,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IAEjD,8CAA8C;IAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+C,CAAC;IAE5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,4EAA4E;YAC5E,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE1D,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,eAAe,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;oBAC1C,WAAW,CAAC,IAAI,CAAC;wBACf,OAAO,EAAE,wBAAwB;wBACjC,QAAQ,EAAE,SAAS;wBACnB,OAAO,EACL,eAAe,GAAG,mBAAmB,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,QAAQ,KAAK;4BACzF,OAAO,QAAQ,CAAC,YAAY,CAAC,YAAY,IAAI,CAAC,QAAQ,iCAAiC;wBACzF,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACpC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAE9E,SAAgB,wBAAwB,CAAC,OAAyB;IAChE,MAAM,WAAW,GAA0B,EAAE,CAAC;IAE9C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,yFAAyF;QACzF,oDAAoD;QACpD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACnB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACpF,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBAC5C,WAAW,CAAC,IAAI,CAAC;4BACf,OAAO,EAAE,2BAA2B;4BACpC,QAAQ,EAAE,MAAM;4BAChB,OAAO,EACL,SAAS,IAAI,CAAC,QAAQ,0BAA0B,QAAQ,CAAC,KAAK,CAAC,IAAI;gCACnE,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B;4BAC5D,QAAQ,EAAE,IAAI,CAAC,QAAQ;yBACxB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBAClC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC1C,WAAW,CAAC,IAAI,CAAC;wBACf,OAAO,EAAE,yBAAyB;wBAClC,QAAQ,EAAE,MAAM;wBAChB,OAAO,EACL,SAAS,IAAI,CAAC,QAAQ,aAAa,GAAG,SAAS,KAAK,aAAa;4BACjE,cAAc,KAAK,KAAK,MAAM,mDAAmD;wBACnF,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAM,GAAG,EAAE;IAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC;AAC5C,CAAC"}

package/dist/coherence/index.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Output coherence validation for dossier execution results.
+ *
+ * Inspired by Anthropic's ICLR 2026 finding that AI fails incoherently
+ * on complex tasks (not systematically). This module provides lightweight
+ * sanity checks that catch the messy failures:
+ *
+ * - Schema compliance: do outputs match declared output schemas?
+ * - Anomaly detection: unexpected empty outputs, null values, size outliers
+ * - Cross-step coherence: does step N's output make sense given step N-1?
+ * - Internal consistency: duplicate values, type mismatches within a step
+ *
+ * Usage:
+ *   import { validateCoherence } from '@ai-dossier/core';
+ *
+ *   const result = validateCoherence({
+ *     steps: [
+ *       { stepName: 'setup', stepIndex: 0, outputs: { path: '/tmp/app' } },
+ *       { stepName: 'build', stepIndex: 1, outputs: { artifact: '/tmp/app/dist' } },
+ *     ],
+ *   });
+ *
+ *   if (!result.coherent) {
+ *     console.warn('Coherence issues found:', result.diagnostics);
+ *   }
+ */
+import type { CoherenceContext, CoherenceResult } from './types';
+export type { CoherenceContext, CoherenceDiagnostic, CoherenceResult, CoherenceSeverity, DeclaredOutputSchema, StepOutput, } from './types';
+/**
+ * Run all coherence checks against a set of step outputs.
+ * Returns a result with diagnostics and summary counts.
+ */
+export declare function validateCoherence(context: CoherenceContext): CoherenceResult;
+/**
+ * Validate coherence for a single step's outputs (e.g., called after each step_complete).
+ * This is a lighter-weight version that only checks the latest step against prior context.
+ */
+export declare function validateStepCoherence(currentStep: {
+    stepName: string;
+    stepIndex: number;
+    outputs: Record<string, unknown>;
+}, priorSteps: Array<{
+    stepName: string;
+    stepIndex: number;
+    outputs: Record<string, unknown>;
+}>, declaredSchema?: Map<string, import('./types').DeclaredOutputSchema>): CoherenceResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/coherence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/coherence/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAQH,OAAO,KAAK,EAAE,gBAAgB,EAAuB,eAAe,EAAE,MAAM,SAAS,CAAC;AAEtF,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,GACX,MAAM,SAAS,CAAC;AAEjB;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAmB5E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACtF,UAAU,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAC5F,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE,oBAAoB,CAAC,GACnE,eAAe,CAiCjB"}

package/dist/coherence/index.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * Output coherence validation for dossier execution results.
+ *
+ * Inspired by Anthropic's ICLR 2026 finding that AI fails incoherently
+ * on complex tasks (not systematically). This module provides lightweight
+ * sanity checks that catch the messy failures:
+ *
+ * - Schema compliance: do outputs match declared output schemas?
+ * - Anomaly detection: unexpected empty outputs, null values, size outliers
+ * - Cross-step coherence: does step N's output make sense given step N-1?
+ * - Internal consistency: duplicate values, type mismatches within a step
+ *
+ * Usage:
+ *   import { validateCoherence } from '@ai-dossier/core';
+ *
+ *   const result = validateCoherence({
+ *     steps: [
+ *       { stepName: 'setup', stepIndex: 0, outputs: { path: '/tmp/app' } },
+ *       { stepName: 'build', stepIndex: 1, outputs: { artifact: '/tmp/app/dist' } },
+ *     ],
+ *   });
+ *
+ *   if (!result.coherent) {
+ *     console.warn('Coherence issues found:', result.diagnostics);
+ *   }
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateCoherence = validateCoherence;
+exports.validateStepCoherence = validateStepCoherence;
+const checks_1 = require("./checks");
+/**
+ * Run all coherence checks against a set of step outputs.
+ * Returns a result with diagnostics and summary counts.
+ */
+function validateCoherence(context) {
+    const diagnostics = [
+        ...(0, checks_1.checkSchemaCompliance)(context),
+        ...(0, checks_1.checkAnomalies)(context),
+        ...(0, checks_1.checkCrossStepCoherence)(context),
+        ...(0, checks_1.checkInternalConsistency)(context),
+    ];
+    const errorCount = diagnostics.filter((d) => d.severity === 'error').length;
+    const warningCount = diagnostics.filter((d) => d.severity === 'warning').length;
+    const infoCount = diagnostics.filter((d) => d.severity === 'info').length;
+    return {
+        diagnostics,
+        errorCount,
+        warningCount,
+        infoCount,
+        coherent: errorCount === 0 && warningCount === 0,
+    };
+}
+/**
+ * Validate coherence for a single step's outputs (e.g., called after each step_complete).
+ * This is a lighter-weight version that only checks the latest step against prior context.
+ */
+function validateStepCoherence(currentStep, priorSteps, declaredSchema) {
+    const context = {
+        steps: [...priorSteps, currentStep],
+        declaredSchemas: declaredSchema,
+    };
+    // Run all checks but filter to only diagnostics about the current step
+    const allDiagnostics = [
+        ...(0, checks_1.checkSchemaCompliance)({
+            steps: [currentStep],
+            declaredSchemas: declaredSchema,
+        }),
+        ...(0, checks_1.checkAnomalies)({
+            steps: [currentStep],
+            declaredSchemas: declaredSchema,
+        }),
+        ...(0, checks_1.checkCrossStepCoherence)(context),
+        ...(0, checks_1.checkInternalConsistency)({
+            steps: [currentStep],
+        }),
+    ];
+    const errorCount = allDiagnostics.filter((d) => d.severity === 'error').length;
+    const warningCount = allDiagnostics.filter((d) => d.severity === 'warning').length;
+    const infoCount = allDiagnostics.filter((d) => d.severity === 'info').length;
+    return {
+        diagnostics: allDiagnostics,
+        errorCount,
+        warningCount,
+        infoCount,
+        coherent: errorCount === 0 && warningCount === 0,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/coherence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coherence/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;AAuBH,8CAmBC;AAMD,sDAqCC;AAnFD,qCAKkB;AAYlB;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,OAAyB;IACzD,MAAM,WAAW,GAA0B;QACzC,GAAG,IAAA,8BAAqB,EAAC,OAAO,CAAC;QACjC,GAAG,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC1B,GAAG,IAAA,gCAAuB,EAAC,OAAO,CAAC;QACnC,GAAG,IAAA,iCAAwB,EAAC,OAAO,CAAC;KACrC,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAE1E,OAAO;QACL,WAAW;QACX,UAAU;QACV,YAAY;QACZ,SAAS;QACT,QAAQ,EAAE,UAAU,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC;KACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,WAAsF,EACtF,UAA4F,EAC5F,cAAoE;IAEpE,MAAM,OAAO,GAAqB;QAChC,KAAK,EAAE,CAAC,GAAG,UAAU,EAAE,WAAW,CAAC;QACnC,eAAe,EAAE,cAAc;KAChC,CAAC;IAEF,uEAAuE;IACvE,MAAM,cAAc,GAA0B;QAC5C,GAAG,IAAA,8BAAqB,EAAC;YACvB,KAAK,EAAE,CAAC,WAAW,CAAC;YACpB,eAAe,EAAE,cAAc;SAChC,CAAC;QACF,GAAG,IAAA,uBAAc,EAAC;YAChB,KAAK,EAAE,CAAC,WAAW,CAAC;YACpB,eAAe,EAAE,cAAc;SAChC,CAAC;QACF,GAAG,IAAA,gCAAuB,EAAC,OAAO,CAAC;QACnC,GAAG,IAAA,iCAAwB,EAAC;YAC1B,KAAK,EAAE,CAAC,WAAW,CAAC;SACrB,CAAC;KACH,CAAC;IAEF,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC/E,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACnF,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAE7E,OAAO;QACL,WAAW,EAAE,cAAc;QAC3B,UAAU;QACV,YAAY;QACZ,SAAS;QACT,QAAQ,EAAE,UAAU,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/coherence/types.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Types for output coherence validation.
+ *
+ * Coherence validation catches the "incoherent failures" described in
+ * Anthropic's ICLR 2026 research: AI doesn't fail systematically on
+ * complex tasks -- it fails *messily*. These types support lightweight
+ * sanity checks on dossier execution outputs.
+ */
+export type CoherenceSeverity = 'error' | 'warning' | 'info';
+export interface CoherenceDiagnostic {
+    checkId: string;
+    severity: CoherenceSeverity;
+    message: string;
+    stepName?: string;
+    field?: string;
+}
+/**
+ * A single step's output record, as reported by the LLM via step_complete.
+ * Maps output key -> value.
+ */
+export interface StepOutput {
+    stepName: string;
+    stepIndex: number;
+    outputs: Record<string, unknown>;
+}
+/**
+ * Declared output schema from a dossier's frontmatter `outputs` field.
+ * Maps step name -> declared output keys and their metadata.
+ */
+export interface DeclaredOutputSchema {
+    files?: Array<{
+        path: string;
+        description: string;
+        required?: boolean;
+        format?: string;
+    }>;
+    configuration?: Array<{
+        key: string;
+        description: string;
+        export_as?: string;
+    }>;
+    state_changes?: Array<{
+        description: string;
+        affects?: string;
+        reversible?: boolean;
+    }>;
+    artifacts?: Array<{
+        path: string;
+        purpose: string;
+        type?: string;
+    }>;
+}
+/**
+ * Full context for coherence validation across a journey.
+ */
+export interface CoherenceContext {
+    /** All step outputs collected so far, in execution order. */
+    steps: StepOutput[];
+    /** Declared output schemas per step name (from frontmatter). */
+    declaredSchemas?: Map<string, DeclaredOutputSchema>;
+}
+export interface CoherenceResult {
+    diagnostics: CoherenceDiagnostic[];
+    errorCount: number;
+    warningCount: number;
+    infoCount: number;
+    /** true when no errors or warnings were found */
+    coherent: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/coherence/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coherence/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChF,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,gEAAgE;IAChE,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAC;CACnB"}

package/dist/coherence/types.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * Types for output coherence validation.
+ *
+ * Coherence validation catches the "incoherent failures" described in
+ * Anthropic's ICLR 2026 research: AI doesn't fail systematically on
+ * complex tasks -- it fails *messily*. These types support lightweight
+ * sanity checks on dossier execution outputs.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/coherence/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/coherence/types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG"}

package/dist/index.d.ts

@@ -5,9 +5,12 @@
  * - Dossier parsing (frontmatter + body extraction)
  * - Checksum verification (SHA256 integrity checks)
  * - Signature verification (Minisign and AWS KMS)
+ * - Output coherence validation
  * - TypeScript type definitions
  */
 export { calculateChecksum, verifyIntegrity } from './checksum';
+export type { CoherenceContext, CoherenceDiagnostic, CoherenceResult, CoherenceSeverity, DeclaredOutputSchema, StepOutput, } from './coherence';
+export { validateCoherence, validateStepCoherence } from './coherence';
 export type { FormatOptions, FormatResult } from './formatter';
 export { formatDossierContent, formatDossierFile } from './formatter';
 export type { LintConfig, LintDiagnostic, LintResult, LintRule, LintRuleContext, LintSeverity, RuleSeverityOverride, } from './linter';
@@ -15,8 +18,12 @@ export { defaultRules, LintRuleRegistry, lintDossier, lintDossierFile, loadLintC
 export { parseDossierContent, parseDossierFile, RECOMMENDED_FIELDS, REQUIRED_FIELDS, VALID_RISK_LEVELS, VALID_STATUSES, validateFrontmatter, } from './parser';
 export type { ChecksumStatus, ContentRiskResult, SignatureStatus, VerificationRiskLevel, VerificationRiskResult, } from './risk-assessment';
 export { assessContentRisk, assessVerificationRisk } from './risk-assessment';
+export type { SecurityCategory, SecurityFinding, SecurityReport, SecurityRule, SecurityRuleContext, SecurityRuleSeverityOverride, SecurityScanConfig, SecuritySeverity, } from './security-scanner';
+export { buildReport, defaultSecurityRules, SecurityRuleRegistry, scanDossier, scanDossierFile, scanMarkdown, } from './security-scanner';
 export { loadTrustedKeys, verifySignature, verifyWithEd25519, verifyWithKms } from './signature';
 export { Ed25519Signer, Ed25519Verifier, getVerifierRegistry, KmsSigner, KmsVerifier, SignatureResult, Signer, Verifier, VerifierRegistry, VerifyResult, } from './signers';
+export type { StepInput as TraceStepInput, TraceInput, TraceRecorder, TraceRecorderOptions, TraceStatus, TraceUpdate, } from './trace-recorder';
+export { createTraceRecorder, VALID_TRACE_STATUSES } from './trace-recorder';
 export * from './types';
 export { sha256Hash, sha256Hex } from './utils/crypto';
 export { getErrorMessage, getErrorStack } from './utils/errors';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACtE,YAAY,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjG,OAAO,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,eAAe,EACf,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACtE,YAAY,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjG,OAAO,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,eAAe,EACf,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,SAAS,IAAI,cAAc,EAC3B,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -6,6 +6,7 @@
  * - Dossier parsing (frontmatter + body extraction)
  * - Checksum verification (SHA256 integrity checks)
  * - Signature verification (Minisign and AWS KMS)
+ * - Output coherence validation
  * - TypeScript type definitions
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
@@ -23,11 +24,14 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createDefaultVerificationResult = exports.scanBodyForUrls = exports.isUrlCoveredByDeclared = exports.isPlaceholderUrl = exports.findUndeclaredUrls = exports.findStaleReferences = exports.collectDeclaredUrls = exports.readFileIfExists = exports.getErrorStack = exports.getErrorMessage = exports.sha256Hex = exports.sha256Hash = exports.VerifierRegistry = exports.KmsVerifier = exports.KmsSigner = exports.getVerifierRegistry = exports.Ed25519Verifier = exports.Ed25519Signer = exports.verifyWithKms = exports.verifyWithEd25519 = exports.verifySignature = exports.loadTrustedKeys = exports.assessVerificationRisk = exports.assessContentRisk = exports.validateFrontmatter = exports.VALID_STATUSES = exports.VALID_RISK_LEVELS = exports.REQUIRED_FIELDS = exports.RECOMMENDED_FIELDS = exports.parseDossierFile = exports.parseDossierContent = exports.loadLintConfig = exports.lintDossierFile = exports.lintDossier = exports.LintRuleRegistry = exports.defaultRules = exports.formatDossierFile = exports.formatDossierContent = exports.verifyIntegrity = exports.calculateChecksum = void 0;
+exports.createDefaultVerificationResult = exports.scanBodyForUrls = exports.isUrlCoveredByDeclared = exports.isPlaceholderUrl = exports.findUndeclaredUrls = exports.findStaleReferences = exports.collectDeclaredUrls = exports.readFileIfExists = exports.getErrorStack = exports.getErrorMessage = exports.sha256Hex = exports.sha256Hash = exports.VALID_TRACE_STATUSES = exports.createTraceRecorder = exports.VerifierRegistry = exports.KmsVerifier = exports.KmsSigner = exports.getVerifierRegistry = exports.Ed25519Verifier = exports.Ed25519Signer = exports.verifyWithKms = exports.verifyWithEd25519 = exports.verifySignature = exports.loadTrustedKeys = exports.scanMarkdown = exports.scanDossierFile = exports.scanDossier = exports.SecurityRuleRegistry = exports.defaultSecurityRules = exports.buildReport = exports.assessVerificationRisk = exports.assessContentRisk = exports.validateFrontmatter = exports.VALID_STATUSES = exports.VALID_RISK_LEVELS = exports.REQUIRED_FIELDS = exports.RECOMMENDED_FIELDS = exports.parseDossierFile = exports.parseDossierContent = exports.loadLintConfig = exports.lintDossierFile = exports.lintDossier = exports.LintRuleRegistry = exports.defaultRules = exports.formatDossierFile = exports.formatDossierContent = exports.validateStepCoherence = exports.validateCoherence = exports.verifyIntegrity = exports.calculateChecksum = void 0;
 // Checksum exports
 var checksum_1 = require("./checksum");
 Object.defineProperty(exports, "calculateChecksum", { enumerable: true, get: function () { return checksum_1.calculateChecksum; } });
 Object.defineProperty(exports, "verifyIntegrity", { enumerable: true, get: function () { return checksum_1.verifyIntegrity; } });
+var coherence_1 = require("./coherence");
+Object.defineProperty(exports, "validateCoherence", { enumerable: true, get: function () { return coherence_1.validateCoherence; } });
+Object.defineProperty(exports, "validateStepCoherence", { enumerable: true, get: function () { return coherence_1.validateStepCoherence; } });
 // Formatter exports
 var formatter_1 = require("./formatter");
 Object.defineProperty(exports, "formatDossierContent", { enumerable: true, get: function () { return formatter_1.formatDossierContent; } });
@@ -52,6 +56,13 @@ Object.defineProperty(exports, "validateFrontmatter", { enumerable: true, get: f
 var risk_assessment_1 = require("./risk-assessment");
 Object.defineProperty(exports, "assessContentRisk", { enumerable: true, get: function () { return risk_assessment_1.assessContentRisk; } });
 Object.defineProperty(exports, "assessVerificationRisk", { enumerable: true, get: function () { return risk_assessment_1.assessVerificationRisk; } });
+var security_scanner_1 = require("./security-scanner");
+Object.defineProperty(exports, "buildReport", { enumerable: true, get: function () { return security_scanner_1.buildReport; } });
+Object.defineProperty(exports, "defaultSecurityRules", { enumerable: true, get: function () { return security_scanner_1.defaultSecurityRules; } });
+Object.defineProperty(exports, "SecurityRuleRegistry", { enumerable: true, get: function () { return security_scanner_1.SecurityRuleRegistry; } });
+Object.defineProperty(exports, "scanDossier", { enumerable: true, get: function () { return security_scanner_1.scanDossier; } });
+Object.defineProperty(exports, "scanDossierFile", { enumerable: true, get: function () { return security_scanner_1.scanDossierFile; } });
+Object.defineProperty(exports, "scanMarkdown", { enumerable: true, get: function () { return security_scanner_1.scanMarkdown; } });
 // Signature exports
 var signature_1 = require("./signature");
 Object.defineProperty(exports, "loadTrustedKeys", { enumerable: true, get: function () { return signature_1.loadTrustedKeys; } });
@@ -66,6 +77,9 @@ Object.defineProperty(exports, "getVerifierRegistry", { enumerable: true, get: f
 Object.defineProperty(exports, "KmsSigner", { enumerable: true, get: function () { return signers_1.KmsSigner; } });
 Object.defineProperty(exports, "KmsVerifier", { enumerable: true, get: function () { return signers_1.KmsVerifier; } });
 Object.defineProperty(exports, "VerifierRegistry", { enumerable: true, get: function () { return signers_1.VerifierRegistry; } });
+var trace_recorder_1 = require("./trace-recorder");
+Object.defineProperty(exports, "createTraceRecorder", { enumerable: true, get: function () { return trace_recorder_1.createTraceRecorder; } });
+Object.defineProperty(exports, "VALID_TRACE_STATUSES", { enumerable: true, get: function () { return trace_recorder_1.VALID_TRACE_STATUSES; } });
 // Type exports
 __exportStar(require("./types"), exports);
 // Crypto utilities

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;AAEH,mBAAmB;AACnB,uCAAgE;AAAvD,6GAAA,iBAAiB,OAAA;AAAE,2GAAA,eAAe,OAAA;AAE3C,oBAAoB;AACpB,yCAAsE;AAA7D,iHAAA,oBAAoB,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAUhD,iBAAiB;AACjB,mCAMkB;AALhB,sGAAA,YAAY,OAAA;AACZ,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AAEhB,iBAAiB;AACjB,mCAQkB;AAPhB,6GAAA,mBAAmB,OAAA;AACnB,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,6GAAA,mBAAmB,OAAA;AASrB,0BAA0B;AAC1B,qDAA8E;AAArE,oHAAA,iBAAiB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAClD,oBAAoB;AACpB,yCAAiG;AAAxF,4GAAA,eAAe,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAAE,0GAAA,aAAa,OAAA;AAC3E,iDAAiD;AACjD,qCAWmB;AAVjB,wGAAA,aAAa,OAAA;AACb,0GAAA,eAAe,OAAA;AACf,8GAAA,mBAAmB,OAAA;AACnB,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AAIX,2GAAA,gBAAgB,OAAA;AAGlB,eAAe;AACf,0CAAwB;AACxB,mBAAmB;AACnB,yCAAuD;AAA9C,oGAAA,UAAU,OAAA;AAAE,mGAAA,SAAS,OAAA;AAC9B,kBAAkB;AAClB,yCAAgE;AAAvD,yGAAA,eAAe,OAAA;AAAE,uGAAA,aAAa,OAAA;AACvC,wBAAwB;AACxB,iCAA8C;AAArC,sGAAA,gBAAgB,OAAA;AACzB,yBAAyB;AACzB,mDAO6B;AAN3B,kHAAA,mBAAmB,OAAA;AACnB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAClB,+GAAA,gBAAgB,OAAA;AAChB,qHAAA,sBAAsB,OAAA;AACtB,8GAAA,eAAe,OAAA;AAEjB,yBAAyB;AACzB,qDAAuE;AAA9D,+HAAA,+BAA+B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;AAEH,mBAAmB;AACnB,uCAAgE;AAAvD,6GAAA,iBAAiB,OAAA;AAAE,2GAAA,eAAe,OAAA;AAU3C,yCAAuE;AAA9D,8GAAA,iBAAiB,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAEjD,oBAAoB;AACpB,yCAAsE;AAA7D,iHAAA,oBAAoB,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAUhD,iBAAiB;AACjB,mCAMkB;AALhB,sGAAA,YAAY,OAAA;AACZ,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AAEhB,iBAAiB;AACjB,mCAQkB;AAPhB,6GAAA,mBAAmB,OAAA;AACnB,0GAAA,gBAAgB,OAAA;AAChB,4GAAA,kBAAkB,OAAA;AAClB,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,6GAAA,mBAAmB,OAAA;AASrB,0BAA0B;AAC1B,qDAA8E;AAArE,oHAAA,iBAAiB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAYlD,uDAO4B;AAN1B,+GAAA,WAAW,OAAA;AACX,wHAAA,oBAAoB,OAAA;AACpB,wHAAA,oBAAoB,OAAA;AACpB,+GAAA,WAAW,OAAA;AACX,mHAAA,eAAe,OAAA;AACf,gHAAA,YAAY,OAAA;AAEd,oBAAoB;AACpB,yCAAiG;AAAxF,4GAAA,eAAe,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAAE,0GAAA,aAAa,OAAA;AAC3E,iDAAiD;AACjD,qCAWmB;AAVjB,wGAAA,aAAa,OAAA;AACb,0GAAA,eAAe,OAAA;AACf,8GAAA,mBAAmB,OAAA;AACnB,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AAIX,2GAAA,gBAAgB,OAAA;AAYlB,mDAA6E;AAApE,qHAAA,mBAAmB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAClD,eAAe;AACf,0CAAwB;AACxB,mBAAmB;AACnB,yCAAuD;AAA9C,oGAAA,UAAU,OAAA;AAAE,mGAAA,SAAS,OAAA;AAC9B,kBAAkB;AAClB,yCAAgE;AAAvD,yGAAA,eAAe,OAAA;AAAE,uGAAA,aAAa,OAAA;AACvC,wBAAwB;AACxB,iCAA8C;AAArC,sGAAA,gBAAgB,OAAA;AACzB,yBAAyB;AACzB,mDAO6B;AAN3B,kHAAA,mBAAmB,OAAA;AACnB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAClB,+GAAA,gBAAgB,OAAA;AAChB,qHAAA,sBAAsB,OAAA;AACtB,8GAAA,eAAe,OAAA;AAEjB,yBAAyB;AACzB,qDAAuE;AAA9D,+HAAA,+BAA+B,OAAA"}

package/dist/security-scanner/code-block-context.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Utilities for detecting whether content appears inside fenced code blocks.
+ *
+ * Findings inside code blocks are downgraded in confidence because the content
+ * is illustrative/documentary rather than executable instructions.
+ */
+export interface CodeBlockRange {
+    startLine: number;
+    endLine: number;
+}
+/**
+ * Parse all fenced code block ranges from a markdown body.
+ * Supports ``` and ~~~ fences per CommonMark spec.
+ */
+export declare function parseCodeBlockRanges(body: string): CodeBlockRange[];
+/**
+ * Check whether a given 1-based line number falls inside any fenced code block.
+ */
+export declare function isLineInCodeBlock(line: number, ranges: CodeBlockRange[]): boolean;
+/**
+ * Get the 1-based line number for a character offset in a string.
+ */
+export declare function getLineNumber(text: string, offset: number): number;
+//# sourceMappingURL=code-block-context.d.ts.map

package/dist/security-scanner/code-block-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-block-context.d.ts","sourceRoot":"","sources":["../../src/security-scanner/code-block-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAsCnE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAEjF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQlE"}