@ai-pip/core 0.1.1 → 0.1.3

package/dist/csl/segment.js

@@ -0,0 +1,90 @@
+import { classifySource } from './classify';
+import { initLineage } from './lineage';
+import { generateId, splitByContextRules } from './utils';
+import { SegmentationError } from './exceptions';
+/**
+ * Segmenta input en segmentos semánticos - función pura principal de CSL
+ *
+ * @remarks
+ * Esta es la función principal de CSL. Segmenta el contenido, clasifica
+ * por origen, e inicializa el linaje. Todo de forma pura y determinista.
+ *
+ * **Invariantes preservados:**
+ * - El contenido original nunca se pierde
+ * - El orden de segmentos es estable
+ * - Todo segmento tiene linaje inicial
+ * - CSL es determinista
+ *
+ * @param input - Input con contenido y source
+ * @returns CSLResult con segmentos clasificados y linaje inicializado
+ *
+ * @throws {SegmentationError} Si la segmentación falla
+ *
+ * @example
+ * ```typescript
+ * const result = segment({
+ *   content: 'Hello\nWorld',
+ *   source: 'UI',
+ *   metadata: {}
+ * })
+ *
+ * // result.segments contiene 2 segmentos, cada uno con:
+ * // - content original
+ * // - trust level clasificado
+ * // - lineage inicializado
+ * ```
+ */
+export function segment(input) {
+    try {
+        // 1. Validar input
+        if (!input.content || typeof input.content !== 'string') {
+            throw new SegmentationError('CSLInput content must be a non-empty string');
+        }
+        if (!input.source) {
+            throw new SegmentationError('CSLInput source is required');
+        }
+        // 2. Dividir contenido en segmentos estructurales (función pura)
+        // CSL solo segmenta por estructura, no por intención semántica
+        const contentSegments = splitByContextRules(input.content);
+        // 3. Si no hay contenido, retornar resultado vacío
+        if (contentSegments.length === 0) {
+            return {
+                segments: Object.freeze([]),
+                lineage: Object.freeze([])
+            };
+        }
+        // 4. Clasificar source una vez (determinista)
+        const trust = classifySource(input.source);
+        // 5. Crear segmentos con clasificación y linaje
+        const segments = contentSegments.map((content) => {
+            // Crear segmento temporal para inicializar linaje
+            const tempSegment = {
+                id: generateId(),
+                content, // ✅ Original preservado
+                source: input.source, // ✅ Origen preservado
+                trust, // ✅ Clasificación determinista
+                lineage: [], // Se inicializa después
+                ...(input.metadata && { metadata: input.metadata })
+            };
+            // Inicializar linaje
+            const lineage = initLineage(tempSegment);
+            // Retornar segmento completo
+            return {
+                ...tempSegment,
+                lineage // ✅ Linaje inicializado
+            };
+        });
+        // 6. Recolectar todo el linaje
+        const allLineage = segments.flatMap(s => s.lineage);
+        // 7. Retornar resultado puro
+        return {
+            segments: Object.freeze(segments),
+            lineage: Object.freeze(allLineage)
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error during segmentation';
+        throw new SegmentationError(`Failed to segment content: ${errorMessage}`, error);
+    }
+}
+//# sourceMappingURL=segment.js.map

package/dist/csl/segment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"segment.js","sourceRoot":"","sources":["../../src/csl/segment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,OAAO,CAAC,KAAe;IACrC,IAAI,CAAC;QACH,mBAAmB;QACnB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,iBAAiB,CAAC,6CAA6C,CAAC,CAAA;QAC5E,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,CAAA;QAC5D,CAAC;QAED,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,eAAe,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAE1D,mDAAmD;QACnD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aAC3B,CAAA;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAE1C,gDAAgD;QAChD,MAAM,QAAQ,GAAiB,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7D,kDAAkD;YAClD,MAAM,WAAW,GAAe;gBAC9B,EAAE,EAAE,UAAU,EAAE;gBAChB,OAAO,EAAqB,wBAAwB;gBACpD,MAAM,EAAE,KAAK,CAAC,MAAM,EAAQ,sBAAsB;gBAClD,KAAK,EAAuB,+BAA+B;gBAC3D,OAAO,EAAE,EAAE,EAAiB,wBAAwB;gBACpD,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aACpD,CAAA;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;YAExC,6BAA6B;YAC7B,OAAO;gBACL,GAAG,WAAW;gBACd,OAAO,CAAsB,wBAAwB;aACtD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,+BAA+B;QAC/B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAEnD,6BAA6B;QAC7B,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;SACnC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAA;QACjG,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,YAAY,EAAE,EAAE,KAAK,CAAC,CAAA;IAClF,CAAC;AACH,CAAC"}

package/dist/csl/types.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Types for CSL (Context Segmentation Layer) - Core Semántico
+ *
+ * Solo tipos esenciales para CSL. Tipos relacionados con detección,
+ * anomalías y políticas van a ISL.
+ */
+/**
+ * OriginType represents the deterministic source of a content segment.
+ */
+export declare enum OriginType {
+    /**
+     * Direct user input from UI controls
+     * Always classified as UC (Untrusted Content) for security.
+     */
+    USER = "USER",
+    /**
+     * Content from visible DOM elements
+     * Classified as STC (Semi-Trusted Content) because user can verify it.
+     */
+    DOM_VISIBLE = "DOM_VISIBLE",
+    /**
+     * Content from hidden DOM elements
+     * Classified as UC (Untrusted Content) - potential attack vector.
+     */
+    DOM_HIDDEN = "DOM_HIDDEN",
+    /**
+     * Content from DOM attributes (data-*, aria-*, etc.)
+     * Classified as STC (Semi-Trusted Content) - visible in source.
+     */
+    DOM_ATTRIBUTE = "DOM_ATTRIBUTE",
+    /**
+     * Content injected by scripts (dynamically generated)
+     * Classified as UC (Untrusted Content) - can be manipulated.
+     */
+    SCRIPT_INJECTED = "SCRIPT_INJECTED",
+    /**
+     * Content fetched from network (API calls, external resources)
+     * Classified as UC (Untrusted Content) - external source, not verified.
+     */
+    NETWORK_FETCHED = "NETWORK_FETCHED",
+    /**
+     * System-generated content (instructions, system prompts, etc.)
+     * Classified as TC (Trusted Content) - system controls this content.
+     */
+    SYSTEM_GENERATED = "SYSTEM_GENERATED",
+    /**
+     * Origin cannot be determined
+     * Classified as UC (Untrusted Content) - unknown is untrusted by default.
+     */
+    UNKNOWN = "UNKNOWN"
+}
+/**
+ * TrustLevelType represents the trust level of content
+ */
+export declare enum TrustLevelType {
+    TC = "TC",// Trusted Content
+    STC = "STC",// Semi-Trusted Content
+    UC = "UC"
+}
+/**
+ * HashAlgorithm for ContentHash (opcional, para trazabilidad)
+ */
+export type HashAlgorithm = 'sha256' | 'sha512';
+/**
+ * Source type for CSL input
+ */
+export type Source = 'DOM' | 'UI' | 'SYSTEM' | 'API';
+/**
+ * CSLInput - Input para la función segment()
+ */
+export interface CSLInput {
+    readonly content: string;
+    readonly source: Source;
+    readonly metadata?: Record<string, unknown>;
+}
+import type { ContentHash, LineageEntry, TrustLevel } from './value-objects';
+/**
+ * CSLSegment - Segmento puro, solo datos semánticos
+ */
+export interface CSLSegment {
+    readonly id: string;
+    readonly content: string;
+    readonly source: Source;
+    readonly trust: TrustLevel;
+    readonly lineage: LineageEntry[];
+    readonly hash?: ContentHash;
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * CSLResult - Resultado puro, solo datos
+ */
+export interface CSLResult {
+    readonly segments: readonly CSLSegment[];
+    readonly lineage: readonly LineageEntry[];
+    readonly processingTimeMs?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/csl/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/csl/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,oBAAY,UAAU;IACpB;;;OAGG;IACH,IAAI,SAAS;IAEb;;;OAGG;IACH,WAAW,gBAAgB;IAE3B;;;OAGG;IACH,UAAU,eAAe;IAEzB;;;OAGG;IACH,aAAa,kBAAkB;IAE/B;;;OAGG;IACH,eAAe,oBAAoB;IAEnC;;;OAGG;IACH,eAAe,oBAAoB;IAEnC;;;OAGG;IACH,gBAAgB,qBAAqB;IAErC;;;OAGG;IACH,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,oBAAY,cAAc;IACxB,EAAE,OAAO,CAAI,kBAAkB;IAC/B,GAAG,QAAQ,CAAE,uBAAuB;IACpC,EAAE,OAAO;CACV;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE/C;;GAEG;AACH,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEpD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5C;AAGD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5E;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAA;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAA;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC"}

package/dist/csl/types.js

@@ -0,0 +1,62 @@
+/**
+ * Types for CSL (Context Segmentation Layer) - Core Semántico
+ *
+ * Solo tipos esenciales para CSL. Tipos relacionados con detección,
+ * anomalías y políticas van a ISL.
+ */
+/**
+ * OriginType represents the deterministic source of a content segment.
+ */
+export var OriginType;
+(function (OriginType) {
+    /**
+     * Direct user input from UI controls
+     * Always classified as UC (Untrusted Content) for security.
+     */
+    OriginType["USER"] = "USER";
+    /**
+     * Content from visible DOM elements
+     * Classified as STC (Semi-Trusted Content) because user can verify it.
+     */
+    OriginType["DOM_VISIBLE"] = "DOM_VISIBLE";
+    /**
+     * Content from hidden DOM elements
+     * Classified as UC (Untrusted Content) - potential attack vector.
+     */
+    OriginType["DOM_HIDDEN"] = "DOM_HIDDEN";
+    /**
+     * Content from DOM attributes (data-*, aria-*, etc.)
+     * Classified as STC (Semi-Trusted Content) - visible in source.
+     */
+    OriginType["DOM_ATTRIBUTE"] = "DOM_ATTRIBUTE";
+    /**
+     * Content injected by scripts (dynamically generated)
+     * Classified as UC (Untrusted Content) - can be manipulated.
+     */
+    OriginType["SCRIPT_INJECTED"] = "SCRIPT_INJECTED";
+    /**
+     * Content fetched from network (API calls, external resources)
+     * Classified as UC (Untrusted Content) - external source, not verified.
+     */
+    OriginType["NETWORK_FETCHED"] = "NETWORK_FETCHED";
+    /**
+     * System-generated content (instructions, system prompts, etc.)
+     * Classified as TC (Trusted Content) - system controls this content.
+     */
+    OriginType["SYSTEM_GENERATED"] = "SYSTEM_GENERATED";
+    /**
+     * Origin cannot be determined
+     * Classified as UC (Untrusted Content) - unknown is untrusted by default.
+     */
+    OriginType["UNKNOWN"] = "UNKNOWN";
+})(OriginType || (OriginType = {}));
+/**
+ * TrustLevelType represents the trust level of content
+ */
+export var TrustLevelType;
+(function (TrustLevelType) {
+    TrustLevelType["TC"] = "TC";
+    TrustLevelType["STC"] = "STC";
+    TrustLevelType["UC"] = "UC";
+})(TrustLevelType || (TrustLevelType = {}));
+//# sourceMappingURL=types.js.map

package/dist/csl/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/csl/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,CAAN,IAAY,UAgDX;AAhDD,WAAY,UAAU;IACpB;;;OAGG;IACH,2BAAa,CAAA;IAEb;;;OAGG;IACH,yCAA2B,CAAA;IAE3B;;;OAGG;IACH,uCAAyB,CAAA;IAEzB;;;OAGG;IACH,6CAA+B,CAAA;IAE/B;;;OAGG;IACH,iDAAmC,CAAA;IAEnC;;;OAGG;IACH,iDAAmC,CAAA;IAEnC;;;OAGG;IACH,mDAAqC,CAAA;IAErC;;;OAGG;IACH,iCAAmB,CAAA;AACrB,CAAC,EAhDW,UAAU,KAAV,UAAU,QAgDrB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,2BAAS,CAAA;IACT,6BAAW,CAAA;IACX,2BAAS,CAAA;AACX,CAAC,EAJW,cAAc,KAAd,cAAc,QAIzB"}

package/dist/csl/utils.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Utility functions for CSL - funciones puras
+ */
+/**
+ * Generates a unique ID for a segment
+ */
+export declare function generateId(): string;
+/**
+ * Splits content by context rules - función pura de segmentación
+ *
+ * @remarks
+ * Segmentación básica por líneas. Sin normalización agresiva
+ * (la normalización va a ISL).
+ */
+export declare function splitByContextRules(content: string): string[];
+//# sourceMappingURL=utils.d.ts.map

package/dist/csl/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/csl/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAU7D"}

package/dist/csl/utils.js

@@ -0,0 +1,27 @@
+/**
+ * Utility functions for CSL - funciones puras
+ */
+/**
+ * Generates a unique ID for a segment
+ */
+export function generateId() {
+    return `seg-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+}
+/**
+ * Splits content by context rules - función pura de segmentación
+ *
+ * @remarks
+ * Segmentación básica por líneas. Sin normalización agresiva
+ * (la normalización va a ISL).
+ */
+export function splitByContextRules(content) {
+    if (content.length === 0) {
+        return [];
+    }
+    // Segmentación básica por líneas
+    return content
+        .split(/\n+/)
+        .map(line => line.trim())
+        .filter(line => line.length > 0);
+}
+//# sourceMappingURL=utils.js.map

package/dist/csl/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/csl/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,iCAAiC;IACjC,OAAO,OAAO;SACX,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACpC,CAAC"}

package/dist/csl/value-objects/ContentHash.d.ts

@@ -0,0 +1,18 @@
+import type { HashAlgorithm } from '../types';
+/**
+ * ContentHash - tipo puro
+ */
+export type ContentHash = {
+    readonly value: string;
+    readonly algorithm: HashAlgorithm;
+};
+/**
+ * Crea un ContentHash - función pura
+ */
+export declare function createContentHash(value: string, algorithm?: HashAlgorithm): ContentHash;
+/**
+ * Funciones puras para ContentHash
+ */
+export declare function isSha256(hash: ContentHash): boolean;
+export declare function isSha512(hash: ContentHash): boolean;
+//# sourceMappingURL=ContentHash.d.ts.map

package/dist/csl/value-objects/ContentHash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContentHash.d.ts","sourceRoot":"","sources":["../../../src/csl/value-objects/ContentHash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAE7C;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAClC,CAAA;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,aAAwB,GAAG,WAAW,CAuBjG;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEnD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEnD"}

package/dist/csl/value-objects/ContentHash.js

@@ -0,0 +1,33 @@
+/**
+ * Crea un ContentHash - función pura
+ */
+export function createContentHash(value, algorithm = 'sha256') {
+    if (!value || typeof value !== 'string') {
+        throw new Error('ContentHash value must be a non-empty string');
+    }
+    if (!['sha256', 'sha512'].includes(algorithm)) {
+        throw new Error(`Invalid HashAlgorithm: ${algorithm}. Must be 'sha256' or 'sha512'`);
+    }
+    const hexPattern = /^[a-f0-9]+$/i;
+    if (!hexPattern.test(value)) {
+        throw new Error('ContentHash value must be a valid hexadecimal string');
+    }
+    const expectedLength = algorithm === 'sha256' ? 64 : 128;
+    if (value.length !== expectedLength) {
+        throw new Error(`ContentHash value length must be ${expectedLength} characters for ${algorithm}`);
+    }
+    return {
+        value: value.toLowerCase(),
+        algorithm
+    };
+}
+/**
+ * Funciones puras para ContentHash
+ */
+export function isSha256(hash) {
+    return hash.algorithm === 'sha256';
+}
+export function isSha512(hash) {
+    return hash.algorithm === 'sha512';
+}
+//# sourceMappingURL=ContentHash.js.map

package/dist/csl/value-objects/ContentHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContentHash.js","sourceRoot":"","sources":["../../../src/csl/value-objects/ContentHash.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,YAA2B,QAAQ;IAClF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IAED,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,gCAAgC,CAAC,CAAA;IACtF,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAA;IACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oCAAoC,cAAc,mBAAmB,SAAS,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,SAAS;KACV,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAiB;IACxC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAiB;IACxC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAA;AACpC,CAAC"}

package/dist/csl/value-objects/LineageEntry.d.ts

@@ -0,0 +1,20 @@
+/**
+ * LineageEntry - tipo puro
+ *
+ * @remarks
+ * El core semántico solo preserva linaje estructural.
+ * Notes libres son para observabilidad (SDK), no core.
+ */
+export type LineageEntry = {
+    readonly step: string;
+    readonly timestamp: number;
+};
+/**
+ * Crea un LineageEntry - función pura
+ *
+ * @remarks
+ * El core solo registra step y timestamp.
+ * Notes y metadata van en el SDK para observabilidad.
+ */
+export declare function createLineageEntry(step: string, timestamp: number): LineageEntry;
+//# sourceMappingURL=LineageEntry.d.ts.map

package/dist/csl/value-objects/LineageEntry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LineageEntry.d.ts","sourceRoot":"","sources":["../../../src/csl/value-objects/LineageEntry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,CAahF"}

package/dist/csl/value-objects/LineageEntry.js

@@ -0,0 +1,20 @@
+/**
+ * Crea un LineageEntry - función pura
+ *
+ * @remarks
+ * El core solo registra step y timestamp.
+ * Notes y metadata van en el SDK para observabilidad.
+ */
+export function createLineageEntry(step, timestamp) {
+    if (!step || typeof step !== 'string' || step.trim().length === 0) {
+        throw new Error('LineageEntry step must be a non-empty string');
+    }
+    if (typeof timestamp !== 'number' || timestamp < 0 || !Number.isFinite(timestamp)) {
+        throw new Error('LineageEntry timestamp must be a valid positive number');
+    }
+    return {
+        step: step.trim(),
+        timestamp
+    };
+}
+//# sourceMappingURL=LineageEntry.js.map

package/dist/csl/value-objects/LineageEntry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LineageEntry.js","sourceRoot":"","sources":["../../../src/csl/value-objects/LineageEntry.ts"],"names":[],"mappings":"AAYA;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAAiB;IAChE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QACjB,SAAS;KACV,CAAA;AACH,CAAC"}

package/dist/csl/value-objects/Origin-map.d.ts

@@ -0,0 +1,21 @@
+import { OriginType, TrustLevelType } from '../types';
+/**
+ * originMap is the deterministic mapping from OriginType to TrustLevelType.
+ *
+ * @remarks
+ * This map defines the **deterministic classification rules** for content segments.
+ * The mapping is based solely on the origin type, not on content analysis.
+ *
+ * **Key Principles:**
+ * - 100% deterministic: same origin → same trust level, always
+ * - No heuristics or content analysis
+ * - All OriginType values must be present in this map
+ */
+export declare const originMap: Map<OriginType, TrustLevelType>;
+/**
+ * Validates that all OriginType values are mapped in originMap.
+ *
+ * @throws {Error} If any OriginType is not present in originMap
+ */
+export declare function validateOriginMap(): void;
+//# sourceMappingURL=Origin-map.d.ts.map

package/dist/csl/value-objects/Origin-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Origin-map.d.ts","sourceRoot":"","sources":["../../../src/csl/value-objects/Origin-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAErD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS,iCAkBpB,CAAA;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAUxC"}

package/dist/csl/value-objects/Origin-map.js

@@ -0,0 +1,42 @@
+import { OriginType, TrustLevelType } from '../types';
+/**
+ * originMap is the deterministic mapping from OriginType to TrustLevelType.
+ *
+ * @remarks
+ * This map defines the **deterministic classification rules** for content segments.
+ * The mapping is based solely on the origin type, not on content analysis.
+ *
+ * **Key Principles:**
+ * - 100% deterministic: same origin → same trust level, always
+ * - No heuristics or content analysis
+ * - All OriginType values must be present in this map
+ */
+export const originMap = new Map([
+    // User origins - always untrusted (security by default)
+    [OriginType.USER, TrustLevelType.UC],
+    // DOM origins - trust based on visibility
+    [OriginType.DOM_VISIBLE, TrustLevelType.STC],
+    [OriginType.DOM_HIDDEN, TrustLevelType.UC],
+    [OriginType.DOM_ATTRIBUTE, TrustLevelType.STC],
+    // External origins - always untrusted
+    [OriginType.SCRIPT_INJECTED, TrustLevelType.UC],
+    [OriginType.NETWORK_FETCHED, TrustLevelType.UC],
+    // System origins - trusted (system controls)
+    [OriginType.SYSTEM_GENERATED, TrustLevelType.TC],
+    // Unknown - untrusted by default (fail-secure)
+    [OriginType.UNKNOWN, TrustLevelType.UC],
+]);
+/**
+ * Validates that all OriginType values are mapped in originMap.
+ *
+ * @throws {Error} If any OriginType is not present in originMap
+ */
+export function validateOriginMap() {
+    const allOriginTypes = Object.values(OriginType);
+    const missingTypes = allOriginTypes.filter(type => !originMap.has(type));
+    if (missingTypes.length > 0) {
+        throw new Error(`Missing origin mappings: ${missingTypes.join(', ')}. ` +
+            `All OriginType values must be mapped in originMap.`);
+    }
+}
+//# sourceMappingURL=Origin-map.js.map

package/dist/csl/value-objects/Origin-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Origin-map.js","sourceRoot":"","sources":["../../../src/csl/value-objects/Origin-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAA6B;IAC3D,wDAAwD;IACxD,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;IAEpC,0CAA0C;IAC1C,CAAC,UAAU,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC;IAC5C,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;IAC1C,CAAC,UAAU,CAAC,aAAa,EAAE,cAAc,CAAC,GAAG,CAAC;IAE9C,sCAAsC;IACtC,CAAC,UAAU,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;IAC/C,CAAC,UAAU,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;IAE/C,6CAA6C;IAC7C,CAAC,UAAU,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;IAEhD,+CAA+C;IAC/C,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;CACxC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAChD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IAExE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACvD,oDAAoD,CACrD,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/csl/value-objects/Origin.d.ts

@@ -0,0 +1,22 @@
+import { OriginType } from '../types';
+/**
+ * Origin - tipo puro
+ */
+export type Origin = {
+    readonly type: OriginType;
+};
+/**
+ * Crea un Origin - función pura
+ */
+export declare function createOrigin(type: OriginType): Origin;
+/**
+ * Funciones puras para Origin
+ */
+export declare function isDom(origin: Origin): boolean;
+export declare function isUser(origin: Origin): boolean;
+export declare function isSystem(origin: Origin): boolean;
+export declare function isInjected(origin: Origin): boolean;
+export declare function isUnknown(origin: Origin): boolean;
+export declare function isNetworkFetched(origin: Origin): boolean;
+export declare function isExternal(origin: Origin): boolean;
+//# sourceMappingURL=Origin.d.ts.map

package/dist/csl/value-objects/Origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Origin.d.ts","sourceRoot":"","sources":["../../../src/csl/value-objects/Origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAErC;;GAEG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAC1B,CAAA;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAKrD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAI7C;AAED,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGlD"}

package/dist/csl/value-objects/Origin.js

@@ -0,0 +1,38 @@
+import { OriginType } from '../types';
+/**
+ * Crea un Origin - función pura
+ */
+export function createOrigin(type) {
+    if (!Object.values(OriginType).includes(type)) {
+        throw new Error(`Invalid Origin type: ${type}`);
+    }
+    return { type };
+}
+/**
+ * Funciones puras para Origin
+ */
+export function isDom(origin) {
+    return origin.type === OriginType.DOM_HIDDEN ||
+        origin.type === OriginType.DOM_VISIBLE ||
+        origin.type === OriginType.DOM_ATTRIBUTE;
+}
+export function isUser(origin) {
+    return origin.type === OriginType.USER;
+}
+export function isSystem(origin) {
+    return origin.type === OriginType.SYSTEM_GENERATED;
+}
+export function isInjected(origin) {
+    return origin.type === OriginType.SCRIPT_INJECTED;
+}
+export function isUnknown(origin) {
+    return origin.type === OriginType.UNKNOWN;
+}
+export function isNetworkFetched(origin) {
+    return origin.type === OriginType.NETWORK_FETCHED;
+}
+export function isExternal(origin) {
+    return origin.type === OriginType.NETWORK_FETCHED ||
+        origin.type === OriginType.SCRIPT_INJECTED;
+}
+//# sourceMappingURL=Origin.js.map

package/dist/csl/value-objects/Origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Origin.js","sourceRoot":"","sources":["../../../src/csl/value-objects/Origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AASrC;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU;QACrC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW;QACtC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,aAAa,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAc;IACnC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,gBAAgB,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,eAAe,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,eAAe,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,eAAe;QAC1C,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,eAAe,CAAA;AACnD,CAAC"}

package/dist/csl/value-objects/TrustLevel.d.ts

@@ -0,0 +1,18 @@
+import { TrustLevelType } from '../types';
+/**
+ * TrustLevel - tipo puro
+ */
+export type TrustLevel = {
+    readonly value: TrustLevelType;
+};
+/**
+ * Crea un TrustLevel - función pura
+ */
+export declare function createTrustLevel(value: TrustLevelType): TrustLevel;
+/**
+ * Funciones puras para TrustLevel
+ */
+export declare function isTrusted(trust: TrustLevel): boolean;
+export declare function isSemiTrusted(trust: TrustLevel): boolean;
+export declare function isUntrusted(trust: TrustLevel): boolean;
+//# sourceMappingURL=TrustLevel.d.ts.map

package/dist/csl/value-objects/TrustLevel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustLevel.d.ts","sourceRoot":"","sources":["../../../src/csl/value-objects/TrustLevel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAEzC;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B,CAAA;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAKlE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAEpD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAExD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAEtD"}

package/dist/csl/value-objects/TrustLevel.js

@@ -0,0 +1,23 @@
+import { TrustLevelType } from '../types';
+/**
+ * Crea un TrustLevel - función pura
+ */
+export function createTrustLevel(value) {
+    if (!Object.values(TrustLevelType).includes(value)) {
+        throw new Error(`Invalid TrustLevel: ${value}`);
+    }
+    return { value };
+}
+/**
+ * Funciones puras para TrustLevel
+ */
+export function isTrusted(trust) {
+    return trust.value === TrustLevelType.TC;
+}
+export function isSemiTrusted(trust) {
+    return trust.value === TrustLevelType.STC;
+}
+export function isUntrusted(trust) {
+    return trust.value === TrustLevelType.UC;
+}
+//# sourceMappingURL=TrustLevel.js.map

package/dist/csl/value-objects/TrustLevel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustLevel.js","sourceRoot":"","sources":["../../../src/csl/value-objects/TrustLevel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AASzC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAA;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,EAAE,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,GAAG,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,EAAE,CAAA;AAC1C,CAAC"}

package/dist/csl/value-objects/index.d.ts

@@ -0,0 +1,10 @@
+export type { TrustLevel } from './TrustLevel';
+export type { Origin } from './Origin';
+export type { LineageEntry } from './LineageEntry';
+export type { ContentHash } from './ContentHash';
+export { createTrustLevel, isTrusted, isSemiTrusted, isUntrusted } from './TrustLevel';
+export { createOrigin, isDom, isUser, isSystem, isInjected, isUnknown, isNetworkFetched, isExternal } from './Origin';
+export { createLineageEntry } from './LineageEntry';
+export { createContentHash, isSha256, isSha512 } from './ContentHash';
+export { originMap, validateOriginMap } from './Origin-map';
+//# sourceMappingURL=index.d.ts.map

package/dist/csl/value-objects/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/csl/value-objects/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAClD,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGhD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAGrE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA"}