@avi770/testteam 2.0.0 → 3.2.0

package/dist/core/finding-correlation.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Cross-agent finding correlation.
+ *
+ * With 100+ agents — several deliberately overlapping (e.g. #112/#115 taint,
+ * #113/#116 contract drift, #8/#67/#114/#117 accessibility) — the same
+ * underlying defect can be reported by multiple agents. A flat findings list
+ * then shows one bug as three or four independent rows.
+ *
+ * `correlateFindings` folds findings that point at the same place/cause into
+ * groups, losslessly: every original finding is preserved under its group's
+ * `findings[]`. Grouping is conservative:
+ *
+ *   - findings with a `file` + `line` are grouped by `file:line:type` — the
+ *     same code location and the same defect category;
+ *   - findings with only a `file` are grouped by `file:type:description`;
+ *   - location-less findings are grouped by `type:module:description`
+ *     (so genuine duplicates collapse, but distinct notices stay separate).
+ *
+ * The category (`type`) is part of every key, so a security finding and an
+ * accessibility finding that happen to share a line are NOT merged.
+ */
+import type { Finding, FindingSeverity, FindingType } from './types.js';
+export interface FindingGroup {
+    /** Stable grouping key. */
+    key: string;
+    file?: string;
+    line?: number;
+    /** Shared defect category for the group. */
+    type: FindingType;
+    /** Highest severity among the group's findings. */
+    severity: FindingSeverity;
+    /** Representative finding (highest severity, then lowest agent id). */
+    primary: Finding;
+    /** Every finding in the group (incl. `primary`), sorted. */
+    findings: Finding[];
+    /** Distinct agent ids that contributed, ascending. */
+    agentIds: number[];
+    /** Number of findings folded into this group. */
+    count: number;
+    /** True when more than one finding folded into this group. */
+    correlated: boolean;
+    /** True when more than one distinct agent flagged this group. */
+    crossAgent: boolean;
+}
+export interface CorrelationResult {
+    groups: FindingGroup[];
+    totalFindings: number;
+    totalGroups: number;
+    /** `totalFindings - totalGroups` — how many rows co-location/dup folding removed. */
+    foldedCount: number;
+    /** Groups flagged by more than one distinct agent — the true cross-agent overlaps. */
+    crossAgentGroups: number;
+}
+export declare function correlateFindings(findings: Finding[]): CorrelationResult;
+//# sourceMappingURL=finding-correlation.d.ts.map

package/dist/core/finding-correlation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-correlation.d.ts","sourceRoot":"","sources":["../../core/finding-correlation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAUrE,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,IAAI,EAAE,WAAW,CAAC;IAClB,mDAAmD;IACnD,QAAQ,EAAE,eAAe,CAAC;IAC1B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,UAAU,EAAE,OAAO,CAAC;IACpB,iEAAiE;IACjE,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAgBD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAgDxE"}

package/dist/core/finding-correlation.js

@@ -0,0 +1,96 @@
+/**
+ * Cross-agent finding correlation.
+ *
+ * With 100+ agents — several deliberately overlapping (e.g. #112/#115 taint,
+ * #113/#116 contract drift, #8/#67/#114/#117 accessibility) — the same
+ * underlying defect can be reported by multiple agents. A flat findings list
+ * then shows one bug as three or four independent rows.
+ *
+ * `correlateFindings` folds findings that point at the same place/cause into
+ * groups, losslessly: every original finding is preserved under its group's
+ * `findings[]`. Grouping is conservative:
+ *
+ *   - findings with a `file` + `line` are grouped by `file:line:type` — the
+ *     same code location and the same defect category;
+ *   - findings with only a `file` are grouped by `file:type:description`;
+ *   - location-less findings are grouped by `type:module:description`
+ *     (so genuine duplicates collapse, but distinct notices stay separate).
+ *
+ * The category (`type`) is part of every key, so a security finding and an
+ * accessibility finding that happen to share a line are NOT merged.
+ */
+const SEVERITY_RANK = {
+    critical: 5,
+    high: 4,
+    medium: 3,
+    low: 2,
+    info: 1,
+};
+function groupKey(f) {
+    if (f.file && f.line != null)
+        return `loc:${f.file}:${f.line}:${f.type}`;
+    if (f.file)
+        return `file:${f.file}:${f.type}:${f.description}`;
+    return `sig:${f.type}:${f.module}:${f.description}`;
+}
+/** Sort findings by severity desc, then agent id asc, then id asc. */
+function compareFindings(a, b) {
+    const sev = SEVERITY_RANK[b.severity] - SEVERITY_RANK[a.severity];
+    if (sev !== 0)
+        return sev;
+    if (a.agentId !== b.agentId)
+        return a.agentId - b.agentId;
+    return a.id < b.id ? -1 : a.id > b.id ? 1 : 0;
+}
+export function correlateFindings(findings) {
+    const byKey = new Map();
+    for (const f of findings) {
+        const k = groupKey(f);
+        const existing = byKey.get(k);
+        if (existing)
+            existing.push(f);
+        else
+            byKey.set(k, [f]);
+    }
+    const groups = [];
+    for (const [key, members] of byKey) {
+        const sorted = [...members].sort(compareFindings);
+        const primary = sorted[0];
+        const agentIds = [...new Set(members.map((f) => f.agentId))].sort((a, b) => a - b);
+        groups.push({
+            key,
+            file: primary.file,
+            line: primary.line,
+            type: primary.type,
+            severity: primary.severity, // sorted[0] carries the max severity
+            primary,
+            findings: sorted,
+            agentIds,
+            count: members.length,
+            correlated: members.length > 1,
+            crossAgent: agentIds.length > 1,
+        });
+    }
+    groups.sort((a, b) => {
+        const sev = SEVERITY_RANK[b.severity] - SEVERITY_RANK[a.severity];
+        if (sev !== 0)
+            return sev;
+        const fa = a.file ?? '';
+        const fb = b.file ?? '';
+        if (fa !== fb)
+            return fa < fb ? -1 : 1;
+        const la = a.line ?? 0;
+        const lb = b.line ?? 0;
+        if (la !== lb)
+            return la - lb;
+        return a.key < b.key ? -1 : a.key > b.key ? 1 : 0;
+    });
+    return {
+        groups,
+        totalFindings: findings.length,
+        totalGroups: groups.length,
+        foldedCount: findings.length - groups.length,
+        crossAgentGroups: groups.filter((g) => g.crossAgent).length,
+    };
+}
+//# sourceMappingURL=finding-correlation.js.map

package/dist/core/finding-correlation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-correlation.js","sourceRoot":"","sources":["../../core/finding-correlation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,aAAa,GAAoC;IACrD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAmCF,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,CAAC,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,CAAU,EAAE,CAAU;IAC7C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1B,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1D,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAmB;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC;YACV,GAAG;YACH,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,qCAAqC;YACjE,OAAO;YACP,QAAQ,EAAE,MAAM;YAChB,QAAQ;YACR,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC9B,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,GAAG,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACvB,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM;KAC5D,CAAC;AACJ,CAAC"}

package/dist/core/fix-loop.d.ts

@@ -1,4 +1,5 @@
-import type { Finding, FindingType, Phase } from './types';
+import type { Finding, FindingType, Phase } from './types.js';
+import type { FindingContext } from './escalation/types.js';
 /**
  * Classifies a finding based on its file location and description keywords.
  *
@@ -26,4 +27,22 @@ export declare function shouldAutoCommit(findingType: FindingType, phase: Phase)
  * Cosmetic bugs and test bugs in alpha/beta do not require human review.
  */
 export declare function shouldRequireHumanReview(findingType: FindingType, phase: Phase): boolean;
+/**
+ * Map a classified Finding to the `FindingContext` that `decideHealOrAsk` consumes
+ * (Phase 3.4 track (a) — wiring calibrated heal-vs-ask into the real fix loop).
+ *
+ * First-do-no-harm mapping (deliberately conservative — it should ask MORE, not less):
+ *   - complexity: ONLY a cosmetic code-bug is 'simple'; every other classified type
+ *     (logic, security, infra) is 'complex' — and a complex finding ALWAYS pauses.
+ *   - risky: security findings, critical/high severity, or `untrusted`-sourced findings
+ *     are treated as touching-prod/irreversible → always pause.
+ *   - confidence: the finding's calibrated confidence, defaulting to a middling 0.7
+ *     when the agent reported none, and CLAMPED to [0,1]. An out-of-range or NaN
+ *     value (a buggy/hostile agent emitting confidence: 5 or Infinity) fails SAFE to
+ *     0 — it forces pause-and-ask rather than letting `confidence >= bar` auto-heal.
+ *
+ * `type` is the result of {@link classifyFinding} (not the raw `finding.type`), so the
+ * caller passes the resolved classification used for routing.
+ */
+export declare function findingToContext(finding: Finding, type: FindingType): FindingContext;
 //# sourceMappingURL=fix-loop.d.ts.map

package/dist/core/fix-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fix-loop.d.ts","sourceRoot":"","sources":["../../core/fix-loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAc3D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,WAAW,CAgBrF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAgBhF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAUxF"}
+{"version":3,"file":"fix-loop.d.ts","sourceRoot":"","sources":["../../core/fix-loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAczD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,WAAW,CAgBrF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAgBhF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAUxF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,cAAc,CAoBpF"}

package/dist/core/fix-loop.js

@@ -67,4 +67,38 @@ export function shouldRequireHumanReview(findingType, phase) {
     }
     return false;
 }
+/**
+ * Map a classified Finding to the `FindingContext` that `decideHealOrAsk` consumes
+ * (Phase 3.4 track (a) — wiring calibrated heal-vs-ask into the real fix loop).
+ *
+ * First-do-no-harm mapping (deliberately conservative — it should ask MORE, not less):
+ *   - complexity: ONLY a cosmetic code-bug is 'simple'; every other classified type
+ *     (logic, security, infra) is 'complex' — and a complex finding ALWAYS pauses.
+ *   - risky: security findings, critical/high severity, or `untrusted`-sourced findings
+ *     are treated as touching-prod/irreversible → always pause.
+ *   - confidence: the finding's calibrated confidence, defaulting to a middling 0.7
+ *     when the agent reported none, and CLAMPED to [0,1]. An out-of-range or NaN
+ *     value (a buggy/hostile agent emitting confidence: 5 or Infinity) fails SAFE to
+ *     0 — it forces pause-and-ask rather than letting `confidence >= bar` auto-heal.
+ *
+ * `type` is the result of {@link classifyFinding} (not the raw `finding.type`), so the
+ * caller passes the resolved classification used for routing.
+ */
+export function findingToContext(finding, type) {
+    const risky = type === 'code-bug-security' ||
+        finding.severity === 'critical' ||
+        finding.severity === 'high' ||
+        finding.trustClass === 'untrusted';
+    // Fail-safe to 0 (forces a pause) on a missing/NaN/out-of-range confidence, mirroring the
+    // loop-engine clamp convention; a valid 0..1 value (incl. the 0.7 default) passes through.
+    const rawConfidence = finding.confidence ?? 0.7;
+    const confidence = Number.isFinite(rawConfidence) && rawConfidence >= 0 && rawConfidence <= 1 ? rawConfidence : 0;
+    return {
+        agentId: finding.agentId,
+        title: finding.description,
+        confidence,
+        complexity: type === 'code-bug-cosmetic' ? 'simple' : 'complex',
+        risky,
+    };
+}
 //# sourceMappingURL=fix-loop.js.map

package/dist/core/fix-loop.js.map

@@ -1 +1 @@
-{"version":3,"file":"fix-loop.js","sourceRoot":"","sources":["../../core/fix-loop.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAU,CAAC;AAC3F,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AAE/E,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB,EAAE,QAA2B;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB,EAAE,YAAsB;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAEpC,IAAI,QAAQ,KAAK,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAwB,EAAE,KAAY;IACrE,gFAAgF;IAChF,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACxC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,CAAC;IAC/C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAwB,EAAE,KAAY;IAC7E,IAAI,WAAW,KAAK,mBAAmB,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"fix-loop.js","sourceRoot":"","sources":["../../core/fix-loop.ts"],"names":[],"mappings":"AAGA,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAU,CAAC;AAC3F,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AAE/E,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB,EAAE,QAA2B;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB,EAAE,YAAsB;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAEpC,IAAI,QAAQ,KAAK,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAwB,EAAE,KAAY;IACrE,gFAAgF;IAChF,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACxC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,CAAC;IAC/C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAwB,EAAE,KAAY;IAC7E,IAAI,WAAW,KAAK,mBAAmB,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,IAAiB;IAClE,MAAM,KAAK,GACT,IAAI,KAAK,mBAAmB;QAC5B,OAAO,CAAC,QAAQ,KAAK,UAAU;QAC/B,OAAO,CAAC,QAAQ,KAAK,MAAM;QAC3B,OAAO,CAAC,UAAU,KAAK,WAAW,CAAC;IAErC,0FAA0F;IAC1F,2FAA2F;IAC3F,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;IAChD,MAAM,UAAU,GACd,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjG,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,WAAW;QAC1B,UAAU;QACV,UAAU,EAAE,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/core/governance/calibration.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Calibration loop (loop 14, Phase 1.3) — keep confidence honest. Scores predictions vs outcomes
+ * with the Brier score and flags overconfidence, so confidence-gated escalation fires at the right
+ * boundary. Spec: blueprint/loops/14-calibration.md.
+ */
+export interface CalibrationSample {
+    readonly confidence: number;
+    readonly correct: boolean;
+}
+export declare class Calibrator {
+    private readonly samples;
+    /** Record one (confidence, was-it-correct) observation. */
+    record(confidence: number, correct: boolean): void;
+    get count(): number;
+    /** Fraction of correct predictions (0 when no samples). */
+    accuracy(): number;
+    /** Mean stated confidence (0 when no samples). */
+    meanConfidence(): number;
+    /** Brier score over all samples — lower is better-calibrated (0 when no samples). */
+    brierScore(): number;
+    /** Brier score over the most recent `window` samples (to watch calibration improve over time). */
+    windowedBrier(window: number): number;
+    /** Overconfident when stated confidence exceeds realized accuracy by more than `tolerance`. */
+    isOverconfident(tolerance?: number): boolean;
+    /**
+     * Suggested escalation threshold: raise the base threshold by the overconfidence gap, so a
+     * chronically overconfident agent escalates sooner (escalation fires at the right real boundary).
+     */
+    suggestThreshold(base: number): number;
+}
+//# sourceMappingURL=calibration.d.ts.map

package/dist/core/governance/calibration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calibration.d.ts","sourceRoot":"","sources":["../../../core/governance/calibration.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,2DAA2D;IAC3D,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAIlD,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,2DAA2D;IAC3D,QAAQ,IAAI,MAAM;IASlB,kDAAkD;IAClD,cAAc,IAAI,MAAM;IAOxB,qFAAqF;IACrF,UAAU,IAAI,MAAM;IAIpB,kGAAkG;IAClG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAMrC,+FAA+F;IAC/F,eAAe,CAAC,SAAS,SAAM,GAAG,OAAO;IAIzC;;;OAGG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAIvC"}

package/dist/core/governance/calibration.js

@@ -0,0 +1,78 @@
+/**
+ * Calibration loop (loop 14, Phase 1.3) — keep confidence honest. Scores predictions vs outcomes
+ * with the Brier score and flags overconfidence, so confidence-gated escalation fires at the right
+ * boundary. Spec: blueprint/loops/14-calibration.md.
+ */
+function clamp01(n) {
+    if (Number.isNaN(n))
+        return 0;
+    if (n < 0)
+        return 0;
+    if (n > 1)
+        return 1;
+    return n;
+}
+export class Calibrator {
+    samples = [];
+    /** Record one (confidence, was-it-correct) observation. */
+    record(confidence, correct) {
+        this.samples.push({ confidence: clamp01(confidence), correct });
+    }
+    get count() {
+        return this.samples.length;
+    }
+    /** Fraction of correct predictions (0 when no samples). */
+    accuracy() {
+        if (this.samples.length === 0)
+            return 0;
+        let correct = 0;
+        for (const sample of this.samples) {
+            if (sample.correct)
+                correct += 1;
+        }
+        return correct / this.samples.length;
+    }
+    /** Mean stated confidence (0 when no samples). */
+    meanConfidence() {
+        if (this.samples.length === 0)
+            return 0;
+        let total = 0;
+        for (const sample of this.samples)
+            total += sample.confidence;
+        return total / this.samples.length;
+    }
+    /** Brier score over all samples — lower is better-calibrated (0 when no samples). */
+    brierScore() {
+        return brierOf(this.samples);
+    }
+    /** Brier score over the most recent `window` samples (to watch calibration improve over time). */
+    windowedBrier(window) {
+        if (window <= 0)
+            return 0; // a non-positive window means "no window" — not "the last sample"
+        const size = Math.max(1, Math.floor(window));
+        return brierOf(this.samples.slice(-size));
+    }
+    /** Overconfident when stated confidence exceeds realized accuracy by more than `tolerance`. */
+    isOverconfident(tolerance = 0.1) {
+        return this.count > 0 && this.meanConfidence() - this.accuracy() > tolerance;
+    }
+    /**
+     * Suggested escalation threshold: raise the base threshold by the overconfidence gap, so a
+     * chronically overconfident agent escalates sooner (escalation fires at the right real boundary).
+     */
+    suggestThreshold(base) {
+        const gap = this.meanConfidence() - this.accuracy();
+        return clamp01(base + (gap > 0 ? gap : 0));
+    }
+}
+function brierOf(samples) {
+    if (samples.length === 0)
+        return 0;
+    let total = 0;
+    for (const sample of samples) {
+        const outcome = sample.correct ? 1 : 0;
+        total += (sample.confidence - outcome) ** 2;
+    }
+    return total / samples.length;
+}
+//# sourceMappingURL=calibration.js.map

package/dist/core/governance/calibration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calibration.js","sourceRoot":"","sources":["../../../core/governance/calibration.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,SAAS,OAAO,CAAC,CAAS;IACxB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,MAAM,OAAO,UAAU;IACJ,OAAO,GAAwB,EAAE,CAAC;IAEnD,2DAA2D;IAC3D,MAAM,CAAC,UAAkB,EAAE,OAAgB;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,2DAA2D;IAC3D,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,CAAC;IAED,kDAAkD;IAClD,cAAc;QACZ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC;QAC9D,OAAO,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,qFAAqF;IACrF,UAAU;QACR,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,kGAAkG;IAClG,aAAa,CAAC,MAAc;QAC1B,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,kEAAkE;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,+FAA+F;IAC/F,eAAe,CAAC,SAAS,GAAG,GAAG;QAC7B,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC;IAC/E,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,OAAO,CAAC,OAAqC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;AAChC,CAAC"}

package/dist/core/governance/degradation.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Degradation lattice (Phase 1.3) — the ordered fallback when capstones fail, so the system never
+ * fully goes down. Core cognition ALWAYS runs; and the kernel-local invariant — the Ethical-
+ * Constraint veto + the Harness default-deny — must NOT degrade, regardless of capstone health.
+ * Spec: blueprint/loops/00-LOOP-ENGINE.md ("Degradation lattice").
+ */
+export type CapstoneState = 'healthy' | 'down';
+export interface CapstoneHealth {
+    /** #25 Master Knowledge. */
+    readonly knowledge: CapstoneState;
+    /** #26 Orchestrator. */
+    readonly orchestrator: CapstoneState;
+    /** The Blackboard coordination bus. */
+    readonly blackboard: CapstoneState;
+}
+export interface DegradationPosture {
+    /** Observe->Decide->Execute->Reflect always runs (invariant). */
+    readonly coreCognitionRuns: boolean;
+    /** #26 down => agents keep running their own loops, fired by #27 triggers. */
+    readonly orchestratorActive: boolean;
+    /** #25 down => fall back to the cached last-known map. */
+    readonly knowledgeSource: 'live' | 'cached';
+    /** Blackboard down => fall back to direct point-to-point messaging (Coordination 08). */
+    readonly coordination: 'blackboard' | 'direct';
+    /** #25 down => the Harness drops to conservative blast-radius caps. */
+    readonly blastRadiusPosture: 'normal' | 'conservative';
+    /** Kernel-local invariant — ALWAYS true (must-not-degrade). */
+    readonly ethicalVetoActive: boolean;
+    /** Kernel-local invariant — ALWAYS true (must-not-degrade). */
+    readonly harnessDefaultDeny: boolean;
+}
+export declare const ALL_HEALTHY: CapstoneHealth;
+/** Derive the operating posture from capstone health. Invariants hold in every branch. */
+export declare function deriveDegradation(health: CapstoneHealth): DegradationPosture;
+//# sourceMappingURL=degradation.d.ts.map

package/dist/core/governance/degradation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"degradation.d.ts","sourceRoot":"","sources":["../../../core/governance/degradation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,wBAAwB;IACxB,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,uCAAuC;IACvC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5C,yFAAyF;IACzF,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC/C,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,GAAG,cAAc,CAAC;IACvD,+DAA+D;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,+DAA+D;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAED,eAAO,MAAM,WAAW,EAAE,cAIzB,CAAC;AAEF,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAW5E"}

package/dist/core/governance/degradation.js

@@ -0,0 +1,25 @@
+/**
+ * Degradation lattice (Phase 1.3) — the ordered fallback when capstones fail, so the system never
+ * fully goes down. Core cognition ALWAYS runs; and the kernel-local invariant — the Ethical-
+ * Constraint veto + the Harness default-deny — must NOT degrade, regardless of capstone health.
+ * Spec: blueprint/loops/00-LOOP-ENGINE.md ("Degradation lattice").
+ */
+export const ALL_HEALTHY = {
+    knowledge: 'healthy',
+    orchestrator: 'healthy',
+    blackboard: 'healthy',
+};
+/** Derive the operating posture from capstone health. Invariants hold in every branch. */
+export function deriveDegradation(health) {
+    return {
+        coreCognitionRuns: true,
+        orchestratorActive: health.orchestrator === 'healthy',
+        knowledgeSource: health.knowledge === 'healthy' ? 'live' : 'cached',
+        coordination: health.blackboard === 'healthy' ? 'blackboard' : 'direct',
+        blastRadiusPosture: health.knowledge === 'healthy' ? 'normal' : 'conservative',
+        // The kernel-local invariant — never degrades, no matter what is down.
+        ethicalVetoActive: true,
+        harnessDefaultDeny: true,
+    };
+}
+//# sourceMappingURL=degradation.js.map

package/dist/core/governance/degradation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"degradation.js","sourceRoot":"","sources":["../../../core/governance/degradation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8BH,MAAM,CAAC,MAAM,WAAW,GAAmB;IACzC,SAAS,EAAE,SAAS;IACpB,YAAY,EAAE,SAAS;IACvB,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,OAAO;QACL,iBAAiB,EAAE,IAAI;QACvB,kBAAkB,EAAE,MAAM,CAAC,YAAY,KAAK,SAAS;QACrD,eAAe,EAAE,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACnE,YAAY,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;QACvE,kBAAkB,EAAE,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc;QAC9E,uEAAuE;QACvE,iBAAiB,EAAE,IAAI;QACvB,kBAAkB,EAAE,IAAI;KACzB,CAAC;AACJ,CAAC"}

package/dist/core/governance/ethical-constraint.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Ethical-Constraint loop (loop 13, Phase 1.3) — the kernel's conscience. Policy-as-code that can
+ * VETO any proposed action before it executes, defaults to DENY when uncertain, and records every
+ * review so a veto is auditable + human-reviewable (never silent). It is kernel-LOCAL and pure
+ * (no remote dependency), so it must-not-degrade: it keeps vetoing even with #25/#26 down.
+ * Spec: blueprint/loops/13-ethical-constraint.md.
+ */
+export interface ProposedAction {
+    readonly agentId: number;
+    readonly description: string;
+    /** Classification labels (e.g. 'destructive', 'pii-exfil'). */
+    readonly labels?: readonly string[];
+    readonly reversible?: boolean;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export type ConstraintDecision = 'allow' | 'veto' | 'uncertain';
+export interface ConstraintResult {
+    readonly decision: ConstraintDecision;
+    readonly reason: string;
+}
+export interface EthicalConstraint {
+    readonly id: string;
+    evaluate(action: ProposedAction): ConstraintResult;
+}
+export interface VetoVerdict {
+    readonly vetoed: boolean;
+    readonly reason: string;
+    readonly violatedConstraint?: string;
+    readonly action: ProposedAction;
+}
+export interface EthicalGuardOptions {
+    /** Veto on an `uncertain` constraint result (first-do-no-harm). Default true. */
+    readonly defaultDenyOnUncertain?: boolean;
+}
+export declare class EthicalGuard {
+    private readonly constraints;
+    private readonly defaultDenyOnUncertain;
+    private readonly log;
+    constructor(constraints: readonly EthicalConstraint[], options?: EthicalGuardOptions);
+    /**
+     * Review a proposed action: any `veto` wins; a constraint that THROWS is treated as a veto
+     * (fail-closed); an `uncertain` result — or an empty policy set — triggers default-deny. Audited.
+     */
+    review(action: ProposedAction): VetoVerdict;
+    private commit;
+    /** The auditable, human-reviewable review trail (defensive snapshot). */
+    get reviewLog(): readonly VetoVerdict[];
+}
+/** Veto any action carrying one of the forbidden labels (case-insensitive). */
+export declare function forbidLabels(labels: readonly string[], id?: string): EthicalConstraint;
+/** Veto an explicitly irreversible action. */
+export declare function requireReversible(id?: string): EthicalConstraint;
+/** Return `uncertain` for an unclassified action — forces default-deny (deny-when-uncertain). */
+export declare function denyUnclassified(id?: string): EthicalConstraint;
+//# sourceMappingURL=ethical-constraint.d.ts.map

package/dist/core/governance/ethical-constraint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ethical-constraint.d.ts","sourceRoot":"","sources":["../../../core/governance/ethical-constraint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;AAChE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAAC;CACpD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;gBAE7B,WAAW,EAAE,SAAS,iBAAiB,EAAE,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAKpF;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,WAAW;IAqC3C,OAAO,CAAC,MAAM;IAKd,yEAAyE;IACzE,IAAI,SAAS,IAAI,SAAS,WAAW,EAAE,CAEtC;CACF;AAID,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,SAAkB,GAAG,iBAAiB,CAW/F;AAED,8CAA8C;AAC9C,wBAAgB,iBAAiB,CAAC,EAAE,SAAuB,GAAG,iBAAiB,CAQ9E;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,EAAE,SAAsB,GAAG,iBAAiB,CAQ5E"}

package/dist/core/governance/ethical-constraint.js

@@ -0,0 +1,98 @@
+/**
+ * Ethical-Constraint loop (loop 13, Phase 1.3) — the kernel's conscience. Policy-as-code that can
+ * VETO any proposed action before it executes, defaults to DENY when uncertain, and records every
+ * review so a veto is auditable + human-reviewable (never silent). It is kernel-LOCAL and pure
+ * (no remote dependency), so it must-not-degrade: it keeps vetoing even with #25/#26 down.
+ * Spec: blueprint/loops/13-ethical-constraint.md.
+ */
+export class EthicalGuard {
+    constraints;
+    defaultDenyOnUncertain;
+    log = [];
+    constructor(constraints, options) {
+        this.constraints = constraints;
+        this.defaultDenyOnUncertain = options?.defaultDenyOnUncertain ?? true;
+    }
+    /**
+     * Review a proposed action: any `veto` wins; a constraint that THROWS is treated as a veto
+     * (fail-closed); an `uncertain` result — or an empty policy set — triggers default-deny. Audited.
+     */
+    review(action) {
+        let firstUncertain;
+        for (const constraint of this.constraints) {
+            let result;
+            try {
+                result = constraint.evaluate(action);
+            }
+            catch (err) {
+                // A faulty/malicious constraint must never fail open — treat the error as a veto.
+                return this.commit({
+                    vetoed: true,
+                    reason: `constraint error (${constraint.id}): ${err instanceof Error ? err.message : String(err)}`,
+                    violatedConstraint: constraint.id,
+                    action,
+                });
+            }
+            if (result.decision === 'veto') {
+                return this.commit({ vetoed: true, reason: result.reason, violatedConstraint: constraint.id, action });
+            }
+            if (result.decision === 'uncertain' && !firstUncertain) {
+                firstUncertain = { id: constraint.id, reason: result.reason };
+            }
+        }
+        // An empty policy set is itself "uncertain": with no basis to judge, the conscience refuses.
+        if ((firstUncertain || this.constraints.length === 0) && this.defaultDenyOnUncertain) {
+            const reason = firstUncertain
+                ? `default-deny (uncertain): ${firstUncertain.reason}`
+                : 'default-deny: no constraints loaded';
+            return this.commit({
+                vetoed: true,
+                reason,
+                ...(firstUncertain ? { violatedConstraint: firstUncertain.id } : {}),
+                action,
+            });
+        }
+        return this.commit({ vetoed: false, reason: 'no constraint violated', action });
+    }
+    commit(verdict) {
+        this.log.push(verdict);
+        return verdict;
+    }
+    /** The auditable, human-reviewable review trail (defensive snapshot). */
+    get reviewLog() {
+        return this.log.slice();
+    }
+}
+// --- Built-in constraints (composable policy-as-code) ---
+/** Veto any action carrying one of the forbidden labels (case-insensitive). */
+export function forbidLabels(labels, id = 'forbid-labels') {
+    const banned = new Set(labels.map((label) => label.toLowerCase()));
+    return {
+        id,
+        evaluate: (action) => {
+            const hit = (action.labels ?? []).find((label) => banned.has(label.toLowerCase()));
+            return hit
+                ? { decision: 'veto', reason: `forbidden label '${hit}'` }
+                : { decision: 'allow', reason: 'no forbidden label' };
+        },
+    };
+}
+/** Veto an explicitly irreversible action. */
+export function requireReversible(id = 'require-reversible') {
+    return {
+        id,
+        evaluate: (action) => action.reversible === false
+            ? { decision: 'veto', reason: 'action is irreversible' }
+            : { decision: 'allow', reason: 'reversible or unspecified' },
+    };
+}
+/** Return `uncertain` for an unclassified action — forces default-deny (deny-when-uncertain). */
+export function denyUnclassified(id = 'deny-unclassified') {
+    return {
+        id,
+        evaluate: (action) => !action.labels || action.labels.length === 0
+            ? { decision: 'uncertain', reason: 'action has no classification labels' }
+            : { decision: 'allow', reason: 'action is classified' },
+    };
+}
+//# sourceMappingURL=ethical-constraint.js.map

package/dist/core/governance/ethical-constraint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ethical-constraint.js","sourceRoot":"","sources":["../../../core/governance/ethical-constraint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkCH,MAAM,OAAO,YAAY;IACN,WAAW,CAA+B;IAC1C,sBAAsB,CAAU;IAChC,GAAG,GAAkB,EAAE,CAAC;IAEzC,YAAY,WAAyC,EAAE,OAA6B;QAClF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,sBAAsB,GAAG,OAAO,EAAE,sBAAsB,IAAI,IAAI,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,MAAsB;QAC3B,IAAI,cAA4E,CAAC;QACjF,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,MAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kFAAkF;gBAClF,OAAO,IAAI,CAAC,MAAM,CAAC;oBACjB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,qBAAqB,UAAU,CAAC,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAClG,kBAAkB,EAAE,UAAU,CAAC,EAAE;oBACjC,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvD,cAAc,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;QACD,6FAA6F;QAC7F,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACrF,MAAM,MAAM,GAAG,cAAc;gBAC3B,CAAC,CAAC,6BAA6B,cAAc,CAAC,MAAM,EAAE;gBACtD,CAAC,CAAC,qCAAqC,CAAC;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,IAAI;gBACZ,MAAM;gBACN,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,MAAM,CAAC,OAAoB;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,yEAAyE;IACzE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF;AAED,2DAA2D;AAE3D,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,MAAyB,EAAE,EAAE,GAAG,eAAe;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,CAAC,MAAM,EAAoB,EAAE;YACrC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO,GAAG;gBACR,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,GAAG,EAAE;gBAC1D,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,iBAAiB,CAAC,EAAE,GAAG,oBAAoB;IACzD,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,CAAC,MAAM,EAAoB,EAAE,CACrC,MAAM,CAAC,UAAU,KAAK,KAAK;YACzB,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE;YACxD,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,2BAA2B,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,EAAE,GAAG,mBAAmB;IACvD,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,CAAC,MAAM,EAAoB,EAAE,CACrC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1C,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,qCAAqC,EAAE;YAC1E,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE;KAC5D,CAAC;AACJ,CAAC"}

package/dist/core/governance/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Governance loops MVP — public surface (Phase 1.3).
+ * Kernel-local Ethical-Constraint veto + Calibration + the degradation lattice.
+ * Spec: blueprint/loops/13-ethical-constraint.md, 14-calibration.md, 00-LOOP-ENGINE.md.
+ */
+export { EthicalGuard, forbidLabels, requireReversible, denyUnclassified, type ProposedAction, type ConstraintDecision, type ConstraintResult, type EthicalConstraint, type VetoVerdict, type EthicalGuardOptions, } from './ethical-constraint.js';
+export { Calibrator, type CalibrationSample } from './calibration.js';
+export { deriveDegradation, ALL_HEALTHY, type CapstoneState, type CapstoneHealth, type DegradationPosture, } from './degradation.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/governance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/governance/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC"}

package/dist/core/governance/index.js

@@ -0,0 +1,9 @@
+/**
+ * Governance loops MVP — public surface (Phase 1.3).
+ * Kernel-local Ethical-Constraint veto + Calibration + the degradation lattice.
+ * Spec: blueprint/loops/13-ethical-constraint.md, 14-calibration.md, 00-LOOP-ENGINE.md.
+ */
+export { EthicalGuard, forbidLabels, requireReversible, denyUnclassified, } from './ethical-constraint.js';
+export { Calibrator } from './calibration.js';
+export { deriveDegradation, ALL_HEALTHY, } from './degradation.js';
+//# sourceMappingURL=index.js.map

package/dist/core/governance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../core/governance/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,GAOjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAA0B,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,iBAAiB,EACjB,WAAW,GAIZ,MAAM,eAAe,CAAC"}