@backendkit-labs/agent-enterprise 0.3.2 → 0.4.0

package/dist/reflection/EnterpriseReflection.js

@@ -0,0 +1,296 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnterpriseReflection = void 0;
+const path = __importStar(require("node:path"));
+const agent_core_1 = require("@backendkit-labs/agent-core");
+const domains_js_1 = require("./domains.js");
+const GateReflectionBridge_js_1 = require("./GateReflectionBridge.js");
+// ── EnterpriseReflection ──────────────────────────────────────────────────────
+/**
+ * Adapter that wires the ReflectionEngine (from agent-core, built for coding
+ * agents) to enterprise business agents — without modifying agent-core.
+ *
+ * Key differences vs the coding-agent usage:
+ *   - Isolated catalog: appName='bk-enterprise', useGlobalDir=false
+ *   - autoPromote=false: every promotion requires human approval
+ *   - Threshold by severity: critical=1, high=2, medium/low=3
+ *   - Source of incidents: ComplianceGate (evaluator≠executor guaranteed)
+ *   - manifest.yaml lives inside the vault (auditable, versionable via git)
+ */
+class EnterpriseReflection {
+    engine;
+    registry;
+    manifestPath;
+    activeDomains;
+    initialized = false;
+    // Pending promotions accumulate here until a human approves or rejects.
+    // Keyed by `${domain}::${failureType}` to deduplicate across detect() calls.
+    pendingMap = new Map();
+    constructor(opts) {
+        const appName = opts.appName ?? 'bk-enterprise';
+        this.manifestPath = opts.manifestPath
+            ?? path.join(opts.vaultPath, 'politicas', '_generated', 'manifest.yaml');
+        this.activeDomains = domains_js_1.ENTERPRISE_DOMAINS.map(d => d.name);
+        this.registry = new agent_core_1.DomainRegistry({ appName });
+        this.engine = new agent_core_1.ReflectionEngine({
+            appName,
+            useGlobalDir: false, // scoped per project — never touches deepseek-code dirs
+            registry: this.registry,
+            config: {
+                enabled: true,
+                autoPromote: false, // gate humano obligatorio
+                promotionThreshold: 3, // overridden per-call in detect()
+                maxAutoGeneratedRules: 100,
+                autoGenerateAdr: false,
+                activeDomains: this.activeDomains,
+                manifestPath: this.manifestPath,
+            },
+        });
+    }
+    // ── Lifecycle ─────────────────────────────────────────────────────────────
+    /**
+     * Must be called once before any other method.
+     * Registers enterprise domains in the DomainRegistry and initializes
+     * the engine catalog from disk.
+     */
+    async initialize() {
+        if (this.initialized)
+            return;
+        // Register enterprise domains (idempotent — updateDomain if already exists)
+        for (const domain of domains_js_1.ENTERPRISE_DOMAINS) {
+            const existing = this.registry.getCustomDomain(domain.name);
+            if (existing) {
+                await this.registry.updateDomain(domain.name, {
+                    description: domain.description,
+                    failureTypes: domain.failureTypes,
+                });
+            }
+            else {
+                await this.registry.registerDomain(domain);
+            }
+            await this.registry.enableDomain(domain.name);
+        }
+        await this.engine.initialize();
+        this.initialized = true;
+    }
+    // ── MONITOR ───────────────────────────────────────────────────────────────
+    /**
+     * Records the outcome of a resolved ComplianceGate.
+     * Only failed criteria and process violations generate incidents.
+     * Passed gates produce no catalog entries.
+     */
+    async recordGateOutcome(record) {
+        this.assertInitialized();
+        const { incidents } = await (0, GateReflectionBridge_js_1.recordGateOutcome)(record, this.engine);
+        return incidents;
+    }
+    // ── ANALYZE ───────────────────────────────────────────────────────────────
+    /**
+     * Scans for patterns using per-severity thresholds.
+     * Does NOT promote — patterns accumulate in pendingPromotions() for human review.
+     */
+    async detect(domain) {
+        this.assertInitialized();
+        const detector = this.engine.getDetector();
+        const domains = domain ? [domain] : this.activeDomains;
+        const out = [];
+        for (const d of domains) {
+            const domainDef = domains_js_1.ENTERPRISE_DOMAINS.find(dd => dd.name === d);
+            if (!domainDef)
+                continue;
+            for (const ft of domainDef.failureTypes) {
+                const threshold = domains_js_1.SEVERITY_THRESHOLD[ft.severity] ?? 3;
+                const patterns = await detector.scanByFailureType(d, ft.name, threshold);
+                for (const p of patterns) {
+                    if (!p.promotedToPolicy) {
+                        // Accumulate in pending map — deduplicate
+                        const key = `${p.domain}::${p.failureType}`;
+                        if (!this.pendingMap.has(key)) {
+                            this.pendingMap.set(key, { pattern: p, detectedAt: new Date().toISOString() });
+                        }
+                    }
+                    out.push(p);
+                }
+            }
+        }
+        return out;
+    }
+    // ── PLAN / EXECUTE (human gate on promotion) ──────────────────────────────
+    /**
+     * Returns patterns that crossed the promotion threshold but haven't been
+     * promoted yet (autoPromote=false). Show these to the human approver.
+     */
+    async pendingPromotions() {
+        this.assertInitialized();
+        // Re-scan to pick up any new patterns since last detect() call
+        await this.detect();
+        return Array.from(this.pendingMap.values());
+    }
+    /**
+     * Promotes a detected pattern to a deterministic policyRule in manifest.yaml.
+     * Requires an explicit approver identity — logged in the manifest metadata.
+     *
+     * After approval the pattern is removed from pendingPromotions().
+     */
+    async approvePromotion(pattern, approver) {
+        this.assertInitialized();
+        const promoter = this.engine.getPromoter();
+        // Check if a rule already exists for this pattern (idempotent)
+        const existing = await promoter.findRule(pattern.domain, pattern.failureType);
+        const rule = await promoter.promote(pattern, existing?.id);
+        // Tag the rule with the approver (manifest.yaml metadata extension)
+        await this.annotateApproval(rule.id, approver, 'approved');
+        // Remove from pending
+        this.pendingMap.delete(`${pattern.domain}::${pattern.failureType}`);
+        return rule;
+    }
+    /**
+     * Rejects a promotion — removes from pending without writing to manifest.
+     * The reason is stored as a resolved-but-not-promoted audit note.
+     */
+    async rejectPromotion(pattern, approver, reason) {
+        this.assertInitialized();
+        this.pendingMap.delete(`${pattern.domain}::${pattern.failureType}`);
+        // Record the rejection as a meta-incident so it appears in stats
+        await this.engine.reportIncident({
+            domain: 'agent',
+            failureType: 'promotion_rejected',
+            severity: 'low',
+            dimension: 'proceso',
+            gate: 'reflection-promotion',
+            agenteResponsable: approver,
+            hallazgo: `Promotion rejected for ${pattern.domain}::${pattern.failureType} — ${reason}`,
+            recomendacion: 'Review pattern manually to decide if a manual policy rule is needed',
+            archivos: [],
+            fecha: new Date().toISOString(),
+        });
+    }
+    // ── KNOWLEDGE (consumed by executor) ──────────────────────────────────────
+    /**
+     * Returns active policyRules from manifest.yaml, optionally filtered by domain.
+     * Call this BEFORE executing a step to inject deterministic constraints.
+     */
+    async activeRules(filter) {
+        this.assertInitialized();
+        const promoter = this.engine.getPromoter();
+        const all = await promoter.getExistingRules();
+        if (!filter?.domain)
+            return all;
+        return all.filter(r => r.trigger.domain === filter.domain);
+    }
+    /**
+     * Records whether applying a rule led to a successful or failed outcome.
+     * Outcomes feed demotionCandidates() — rules with many failures signal
+     * that the rule itself may be wrong.
+     */
+    async recordRuleOutcome(ruleId, outcome) {
+        this.assertInitialized();
+        await this.engine.getPromoter().updateOutcome(ruleId, outcome);
+    }
+    /**
+     * Returns rules whose failure rate exceeds minFailureRatio (default 0.5)
+     * with at least minTotal applications (default 4).
+     *
+     * These are candidates for human-gated demotion — symmetric with promotion:
+     * the rulebook only changes in either direction with human approval.
+     */
+    async demotionCandidates(opts = {}) {
+        this.assertInitialized();
+        const { minFailureRatio = 0.5, minTotal = 4 } = opts;
+        const rules = await this.engine.getPromoter().getExistingRules();
+        return rules.filter(r => {
+            const outcomes = r.outcomes;
+            if (!outcomes)
+                return false;
+            const total = outcomes.success + outcomes.failure;
+            if (total < minTotal)
+                return false;
+            return outcomes.failure / total >= minFailureRatio;
+        });
+    }
+    /**
+     * Removes a rule from manifest.yaml after human approval of demotion.
+     * Symmetric with approvePromotion — requires explicit approver.
+     */
+    async approveDemotion(ruleId, approver, reason) {
+        this.assertInitialized();
+        const removed = await this.engine.getPromoter().removeRule(ruleId);
+        if (removed) {
+            await this.engine.reportIncident({
+                domain: 'agent',
+                failureType: 'rule_demoted',
+                severity: 'low',
+                dimension: 'proceso',
+                gate: 'reflection-demotion',
+                agenteResponsable: approver,
+                hallazgo: `Rule ${ruleId} demoted — ${reason}`,
+                recomendacion: 'Monitor for recurrence of the underlying failure type',
+                archivos: [],
+                fecha: new Date().toISOString(),
+            });
+        }
+        return removed;
+    }
+    // ── Stats ─────────────────────────────────────────────────────────────────
+    async stats() {
+        this.assertInitialized();
+        return this.engine.getStats();
+    }
+    // ── Private ───────────────────────────────────────────────────────────────
+    assertInitialized() {
+        if (!this.initialized) {
+            throw new Error('EnterpriseReflection not initialized — call initialize() first');
+        }
+    }
+    async annotateApproval(ruleId, approver, action) {
+        // The manifest.yaml doesn't have a native approver field in ManifestPolicyRule,
+        // so we write a companion meta-incident that creates an auditable trail.
+        await this.engine.reportIncident({
+            domain: 'agent',
+            failureType: `rule_${action}`,
+            severity: 'low',
+            dimension: 'proceso',
+            gate: 'reflection-promotion',
+            agenteResponsable: approver,
+            hallazgo: `Policy rule ${ruleId} ${action} by ${approver}`,
+            recomendacion: '',
+            archivos: [this.manifestPath],
+            fecha: new Date().toISOString(),
+        });
+    }
+}
+exports.EnterpriseReflection = EnterpriseReflection;
+//# sourceMappingURL=EnterpriseReflection.js.map

package/dist/reflection/EnterpriseReflection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnterpriseReflection.js","sourceRoot":"","sources":["../../src/reflection/EnterpriseReflection.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gDAAkC;AAClC,4DAGqC;AAGrC,6CAAsE;AACtE,uEAA8D;AAyB9D,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAa,oBAAoB;IACZ,MAAM,CAA0B;IAChC,QAAQ,CAAsB;IAC9B,YAAY,CAAU;IACtB,aAAa,CAAW;IACxB,WAAW,GAAM,KAAK,CAAC;IAExC,wEAAwE;IACxE,6EAA6E;IAC5D,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IAElE,YAAY,IAAiC;QACzC,MAAM,OAAO,GAAQ,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;QACrD,IAAI,CAAC,YAAY,GAAI,IAAI,CAAC,YAAY;eAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QAC7E,IAAI,CAAC,aAAa,GAAG,+BAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,GAAG,IAAI,6BAAgB,CAAC;YAC/B,OAAO;YACP,YAAY,EAAE,KAAK,EAAI,wDAAwD;YAC/E,QAAQ,EAAM,IAAI,CAAC,QAAQ;YAC3B,MAAM,EAAE;gBACJ,OAAO,EAAe,IAAI;gBAC1B,WAAW,EAAW,KAAK,EAAiB,0BAA0B;gBACtE,kBAAkB,EAAI,CAAC,EAAoB,kCAAkC;gBAC7E,qBAAqB,EAAE,GAAG;gBAC1B,eAAe,EAAO,KAAK;gBAC3B,aAAa,EAAS,IAAI,CAAC,aAAa;gBACxC,YAAY,EAAU,IAAI,CAAC,YAAY;aAC1C;SACJ,CAAC,CAAC;IACP,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACZ,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,4EAA4E;QAC5E,KAAK,MAAM,MAAM,IAAI,+BAAkB,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,QAAQ,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC1C,WAAW,EAAG,MAAM,CAAC,WAAW;oBAChC,YAAY,EAAE,MAAM,CAAC,YAAY;iBACpC,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAA4D,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAkB;QACtC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,2CAAiB,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,MAAe;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QACxD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAElC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,+BAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,+BAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAI,MAAM,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC1E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACvB,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;wBACtB,0CAA0C;wBAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;wBAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;wBACnF,CAAC;oBACL,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,KAAK,CAAC,iBAAiB;QACnB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,+DAA+D;QAC/D,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAwB,EAAE,QAAgB;QAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAE3C,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE3D,oEAAoE;QACpE,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE3D,sBAAsB;QACtB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACjB,OAAyB,EACzB,QAAgB,EAChB,MAAgB;QAEhB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,iEAAiE;QACjE,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC7B,MAAM,EAAa,OAAO;YAC1B,WAAW,EAAQ,oBAAoB;YACvC,QAAQ,EAAW,KAAK;YACxB,SAAS,EAAU,SAAS;YAC5B,IAAI,EAAe,sBAAsB;YACzC,iBAAiB,EAAE,QAAQ;YAC3B,QAAQ,EAAW,0BAA0B,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,MAAM,MAAM,EAAE;YACjG,aAAa,EAAM,qEAAqE;YACxF,QAAQ,EAAW,EAAE;YACrB,KAAK,EAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC9C,CAAC,CAAC;IACP,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,MAA4B;QAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,MAAM;YAAE,OAAO,GAAG,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,OAA8B;QAClE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAwD,EAAE;QAC/E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,EAAE,eAAe,GAAG,GAAG,EAAE,QAAQ,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC5B,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAClD,IAAI,KAAK,GAAG,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACnC,OAAO,QAAQ,CAAC,OAAO,GAAG,KAAK,IAAI,eAAe,CAAC;QACvD,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAc;QAClE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC7B,MAAM,EAAa,OAAO;gBAC1B,WAAW,EAAQ,cAAc;gBACjC,QAAQ,EAAW,KAAK;gBACxB,SAAS,EAAU,SAAS;gBAC5B,IAAI,EAAe,qBAAqB;gBACxC,iBAAiB,EAAE,QAAQ;gBAC3B,QAAQ,EAAW,QAAQ,MAAM,cAAc,MAAM,EAAE;gBACvD,aAAa,EAAM,uDAAuD;gBAC1E,QAAQ,EAAW,EAAE;gBACrB,KAAK,EAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC9C,CAAC,CAAC;QACP,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,KAAK;QACP,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,6EAA6E;IAErE,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACtF,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,QAAgB,EAAE,MAA8B;QAC3F,gFAAgF;QAChF,yEAAyE;QACzE,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC7B,MAAM,EAAa,OAAO;YAC1B,WAAW,EAAQ,QAAQ,MAAM,EAAE;YACnC,QAAQ,EAAW,KAAK;YACxB,SAAS,EAAU,SAAS;YAC5B,IAAI,EAAe,sBAAsB;YACzC,iBAAiB,EAAE,QAAQ;YAC3B,QAAQ,EAAW,eAAe,MAAM,IAAI,MAAM,OAAO,QAAQ,EAAE;YACnE,aAAa,EAAM,EAAE;YACrB,QAAQ,EAAW,CAAC,IAAI,CAAC,YAAY,CAAC;YACtC,KAAK,EAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC9C,CAAC,CAAC;IACP,CAAC;CACJ;AA/QD,oDA+QC"}

package/dist/reflection/GateReflectionBridge.d.ts

@@ -0,0 +1,21 @@
+import type { ReflectionEngine } from '@backendkit-labs/agent-core';
+import type { FailureRecord } from '@backendkit-labs/agent-core/dist/reflection/types';
+import type { GateRecord } from '../flow/ComplianceGate.js';
+export interface GateBridgeResult {
+    incidents: FailureRecord[];
+    threshold: number;
+}
+/**
+ * Translates a resolved GateRecord into FailureRecord incidents in the
+ * ReflectionEngine catalog.
+ *
+ * Provenance safety: every incident is attributed to the gate's EVALUATOR,
+ * not the executor. Since ComplianceGate already enforces evaluator≠executor,
+ * an agent cannot self-report incidents to poison the catalog.
+ *
+ * Self-evaluation and missing-evidence attempts are filed as gate_integrity
+ * violations in the 'agent' domain — they signal process failure, not just
+ * business failure.
+ */
+export declare function recordGateOutcome(record: GateRecord, engine: ReflectionEngine): Promise<GateBridgeResult>;
+//# sourceMappingURL=GateReflectionBridge.d.ts.map

package/dist/reflection/GateReflectionBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateReflectionBridge.d.ts","sourceRoot":"","sources":["../../src/reflection/GateReflectionBridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AA8B5D,MAAM,WAAW,gBAAgB;IAC7B,SAAS,EAAG,aAAa,EAAE,CAAC;IAC5B,SAAS,EAAG,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACnC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAG,gBAAgB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAgE3B"}

package/dist/reflection/GateReflectionBridge.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recordGateOutcome = recordGateOutcome;
+const domains_js_1 = require("./domains.js");
+// ── Helpers ───────────────────────────────────────────────────────────────────
+function evaluatorOf(record) {
+    // Evaluator is stored on the log entries that have one — first non-executor found
+    for (const entry of record.log) {
+        if (entry.evaluatorId && entry.evaluatorId !== record.executor) {
+            return entry.evaluatorId;
+        }
+    }
+    return 'unknown-evaluator';
+}
+function resolveSeverity(domain, failureType) {
+    if (!domain || !failureType)
+        return 'medium';
+    const domainDef = domains_js_1.ENTERPRISE_DOMAINS.find(d => d.name === domain);
+    if (!domainDef)
+        return 'medium';
+    const ftDef = domainDef.failureTypes.find(f => f.name === failureType);
+    return (ftDef?.severity ?? 'medium');
+}
+function thresholdFor(domain, failureType) {
+    const severity = resolveSeverity(domain, failureType);
+    return domains_js_1.SEVERITY_THRESHOLD[severity] ?? 3;
+}
+/**
+ * Translates a resolved GateRecord into FailureRecord incidents in the
+ * ReflectionEngine catalog.
+ *
+ * Provenance safety: every incident is attributed to the gate's EVALUATOR,
+ * not the executor. Since ComplianceGate already enforces evaluator≠executor,
+ * an agent cannot self-report incidents to poison the catalog.
+ *
+ * Self-evaluation and missing-evidence attempts are filed as gate_integrity
+ * violations in the 'agent' domain — they signal process failure, not just
+ * business failure.
+ */
+async function recordGateOutcome(record, engine) {
+    const incidents = [];
+    let lowestThreshold = 3;
+    const evaluator = evaluatorOf(record);
+    // ── Business failures: criteria marked as failed ──────────────────────────
+    for (const c of record.criteria) {
+        if (c.passed !== false)
+            continue;
+        const domain = c.domain;
+        const failureType = c.failureType;
+        const severity = resolveSeverity(domain, failureType);
+        const threshold = thresholdFor(domain, failureType);
+        if (threshold < lowestThreshold)
+            lowestThreshold = threshold;
+        const { record: r } = await engine.reportIncident({
+            domain: domain ?? 'agent',
+            failureType: failureType ?? detectFallback(c.description, domain),
+            severity,
+            dimension: 'compliance',
+            gate: record.stepId,
+            agenteResponsable: record.executor,
+            hallazgo: c.description,
+            recomendacion: recommendationFor(domain, failureType),
+            archivos: [],
+            fecha: new Date().toISOString(),
+            contextRaw: JSON.stringify({
+                reportedBy: evaluator,
+                criterionId: c.id,
+                flowId: record.flowId,
+                runId: record.runId,
+            }),
+        });
+        incidents.push(r);
+    }
+    // ── Process failures: integrity violations in the audit log ───────────────
+    for (const entry of record.log) {
+        if (entry.event !== 'self_evaluation_attempt' &&
+            entry.event !== 'missing_evidence_attempt')
+            continue;
+        const { record: r } = await engine.reportIncident({
+            domain: 'agent',
+            failureType: 'gate_integrity_violation',
+            severity: 'high',
+            dimension: 'proceso',
+            gate: record.stepId,
+            agenteResponsable: entry.evaluatorId ?? record.executor,
+            hallazgo: entry.detail ?? `Gate integrity violation: ${entry.event}`,
+            recomendacion: 'Revisar configuración de evaluador — nunca puede coincidir con el ejecutor',
+            archivos: [],
+            fecha: entry.at,
+            contextRaw: JSON.stringify({
+                event: entry.event,
+                flowId: record.flowId,
+                runId: record.runId,
+            }),
+        });
+        incidents.push(r);
+    }
+    return { incidents, threshold: lowestThreshold };
+}
+// ── Private helpers ───────────────────────────────────────────────────────────
+function detectFallback(hallazgo, domain) {
+    if (!domain)
+        return 'unknown_failure';
+    const domainDef = domains_js_1.ENTERPRISE_DOMAINS.find(d => d.name === domain);
+    if (!domainDef)
+        return 'unknown_failure';
+    const lower = hallazgo.toLowerCase();
+    for (const ft of domainDef.failureTypes) {
+        if (ft.keywords.some(kw => lower.includes(kw)))
+            return ft.name;
+    }
+    return 'unknown_failure';
+}
+function recommendationFor(domain, failureType) {
+    if (!domain || !failureType)
+        return '';
+    const domainDef = domains_js_1.ENTERPRISE_DOMAINS.find(d => d.name === domain);
+    return domainDef?.failureTypes.find(f => f.name === failureType)?.recommendation ?? '';
+}
+//# sourceMappingURL=GateReflectionBridge.js.map

package/dist/reflection/GateReflectionBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateReflectionBridge.js","sourceRoot":"","sources":["../../src/reflection/GateReflectionBridge.ts"],"names":[],"mappings":";;AAiDA,8CAmEC;AAjHD,6CAAsE;AAEtE,iFAAiF;AAEjF,SAAS,WAAW,CAAC,MAAkB;IACnC,kFAAkF;IAClF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,WAAW,CAAC;QAC7B,CAAC;IACL,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B,EAAE,WAA+B;IAChF,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAC7C,MAAM,SAAS,GAAG,+BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChC,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAA8B,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B,EAAE,WAA+B;IAC7E,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,+BAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AASD;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,iBAAiB,CACnC,MAAkB,EAClB,MAAyB;IAEzB,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEtC,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK;YAAE,SAAS;QAEjC,MAAM,MAAM,GAAS,CAAS,CAAC,MAAiC,CAAC;QACjE,MAAM,WAAW,GAAI,CAAS,CAAC,WAAiC,CAAC;QACjE,MAAM,QAAQ,GAAM,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,SAAS,GAAK,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,SAAS,GAAG,eAAe;YAAE,eAAe,GAAG,SAAS,CAAC;QAE7D,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;YAC9C,MAAM,EAAa,MAAM,IAAS,OAAO;YACzC,WAAW,EAAQ,WAAW,IAAI,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC;YACvE,QAAQ;YACR,SAAS,EAAU,YAAY;YAC/B,IAAI,EAAe,MAAM,CAAC,MAAM;YAChC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;YAClC,QAAQ,EAAW,CAAC,CAAC,WAAW;YAChC,aAAa,EAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC;YACzD,QAAQ,EAAW,EAAE;YACrB,KAAK,EAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC3C,UAAU,EAAS,IAAI,CAAC,SAAS,CAAC;gBAC9B,UAAU,EAAG,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,EAAE;gBACjB,MAAM,EAAO,MAAM,CAAC,MAAM;gBAC1B,KAAK,EAAQ,MAAM,CAAC,KAAK;aAC5B,CAAC;SACL,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,IACI,KAAK,CAAC,KAAK,KAAK,yBAAyB;YACzC,KAAK,CAAC,KAAK,KAAK,0BAA0B;YAC5C,SAAS;QAEX,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;YAC9C,MAAM,EAAa,OAAO;YAC1B,WAAW,EAAQ,0BAA0B;YAC7C,QAAQ,EAAW,MAAM;YACzB,SAAS,EAAU,SAAS;YAC5B,IAAI,EAAe,MAAM,CAAC,MAAM;YAChC,iBAAiB,EAAE,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ;YACvD,QAAQ,EAAW,KAAK,CAAC,MAAM,IAAI,6BAA6B,KAAK,CAAC,KAAK,EAAE;YAC7E,aAAa,EAAM,4EAA4E;YAC/F,QAAQ,EAAW,EAAE;YACrB,KAAK,EAAc,KAAK,CAAC,EAAE;YAC3B,UAAU,EAAS,IAAI,CAAC,SAAS,CAAC;gBAC9B,KAAK,EAAI,KAAK,CAAC,KAAK;gBACpB,MAAM,EAAG,MAAM,CAAC,MAAM;gBACtB,KAAK,EAAI,MAAM,CAAC,KAAK;aACxB,CAAC;SACL,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;AACrD,CAAC;AAED,iFAAiF;AAEjF,SAAS,cAAc,CAAC,QAAgB,EAAE,MAA0B;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,iBAAiB,CAAC;IACtC,MAAM,SAAS,GAAG,+BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA0B,EAAE,WAA+B;IAClF,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,+BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAClE,OAAO,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,cAAc,IAAI,EAAE,CAAC;AAC3F,CAAC"}

package/dist/reflection/domains.d.ts

@@ -0,0 +1,6 @@
+import type { CustomDomainDefinition } from '@backendkit-labs/agent-core';
+type DomainInput = Omit<CustomDomainDefinition, 'createdAt'>;
+export declare const SEVERITY_THRESHOLD: Record<string, number>;
+export declare const ENTERPRISE_DOMAINS: DomainInput[];
+export {};
+//# sourceMappingURL=domains.d.ts.map

package/dist/reflection/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../src/reflection/domains.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E,KAAK,WAAW,GAAG,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;AAM7D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAKrD,CAAC;AASF,eAAO,MAAM,kBAAkB,EAAE,WAAW,EA4J3C,CAAC"}

package/dist/reflection/domains.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENTERPRISE_DOMAINS = exports.SEVERITY_THRESHOLD = void 0;
+// ── Severity → promotion threshold ───────────────────────────────────────────
+// The core ReflectionEngine uses a fixed threshold of 3.
+// Enterprise overrides per-severity so a critical failure triggers immediately.
+exports.SEVERITY_THRESHOLD = {
+    critical: 1,
+    high: 2,
+    medium: 3,
+    low: 3,
+};
+// ── Enterprise domains ────────────────────────────────────────────────────────
+// Each failureType mirrors a PolicySeeder policy, closing the loop:
+//   policy violated → incident → pattern → deterministic rule
+//
+// Domains must be registered once per project via DomainRegistry.registerDomain()
+// before any incident can be filed against them.
+exports.ENTERPRISE_DOMAINS = [
+    {
+        name: 'legal',
+        description: 'Contratos, cláusulas, compliance normativo y política salarial',
+        failureTypes: [
+            {
+                name: 'non_compliant_clause',
+                severity: 'critical',
+                dimension: 'compliance',
+                keywords: ['normativa', 'ilegal', 'incumple', 'irregular', 'no cumple'],
+                recommendation: 'Revisión legal obligatoria antes de emitir o firmar el contrato',
+            },
+            {
+                name: 'missing_confidentiality',
+                severity: 'high',
+                dimension: 'compliance',
+                keywords: ['confidencialidad', 'nda', 'cláusula faltante', 'sin cláusula'],
+                recommendation: 'Incluir cláusula de confidencialidad antes de continuar',
+            },
+            {
+                name: 'salary_out_of_policy',
+                severity: 'high',
+                dimension: 'finanzas',
+                keywords: ['salario', 'remuneración', 'fuera de banda', 'fuera de política'],
+                recommendation: 'Ajustar remuneración a la banda salarial aprobada',
+            },
+            {
+                name: 'risky_clause',
+                severity: 'high',
+                dimension: 'compliance',
+                keywords: ['riesgosa', 'cláusula peligrosa', 'no estándar', 'atípica'],
+                recommendation: 'Escalar a asesor legal externo para revisión',
+            },
+        ],
+    },
+    {
+        name: 'finanzas',
+        description: 'Aprobaciones de gasto, autoridad financiera, confidencialidad de datos',
+        failureTypes: [
+            {
+                name: 'over_approval_threshold',
+                severity: 'critical',
+                dimension: 'autoridad',
+                keywords: ['excede límite', 'supera autoridad', 'sin aprobación', 'threshold'],
+                recommendation: 'Escalar al nivel de aprobación correspondiente (ver approval-authority.md)',
+            },
+            {
+                name: 'confidential_data_leak',
+                severity: 'critical',
+                dimension: 'confidencialidad',
+                keywords: ['margen', 'ganancia', 'revenue', 'salario', 'bonus', 'forecast'],
+                recommendation: 'No compartir datos financieros sensibles fuera de canales oficiales',
+            },
+            {
+                name: 'split_transaction',
+                severity: 'high',
+                dimension: 'autoridad',
+                keywords: ['fragmentado', 'split', 'dividido', 'evitar umbral'],
+                recommendation: 'Consolidar transacciones y procesar con la autoridad correcta',
+            },
+        ],
+    },
+    {
+        name: 'rrhh',
+        description: 'Datos personales de empleados, onboarding, privacidad, RRHH',
+        failureTypes: [
+            {
+                name: 'pii_exposure',
+                severity: 'critical',
+                dimension: 'privacidad',
+                keywords: ['dni', 'legajo', 'domicilio', 'teléfono personal', 'médico', 'discapacidad'],
+                recommendation: 'No compartir datos personales sin verificar autorización del receptor',
+            },
+            {
+                name: 'salary_disclosure',
+                severity: 'critical',
+                dimension: 'privacidad',
+                keywords: ['salario', 'remuneración', 'compensación', 'bonus'],
+                recommendation: 'Datos salariales solo al empleado, su manager o HR Director',
+            },
+            {
+                name: 'incomplete_checklist',
+                severity: 'medium',
+                dimension: 'proceso',
+                keywords: ['incompleto', 'falta documento', 'pendiente', 'sin firma'],
+                recommendation: 'Completar el checklist antes de continuar el onboarding',
+            },
+            {
+                name: 'unauthorized_data_request',
+                severity: 'high',
+                dimension: 'privacidad',
+                keywords: ['sin autorización', 'solicitud no verificada', 'agrega datos'],
+                recommendation: 'Verificar autorización del solicitante antes de proveer información',
+            },
+        ],
+    },
+    {
+        name: 'ventas',
+        description: 'Descuentos, precios, autoridad comercial',
+        failureTypes: [
+            {
+                name: 'over_discount_authority',
+                severity: 'high',
+                dimension: 'autoridad',
+                keywords: ['descuento excede', 'sin aprobación', 'descuento no autorizado'],
+                recommendation: 'Obtener aprobación del nivel correspondiente (ver discount-authority.md)',
+            },
+            {
+                name: 'retroactive_discount',
+                severity: 'high',
+                dimension: 'proceso',
+                keywords: ['retroactivo', 'post-factura', 'ya facturado'],
+                recommendation: 'Escalar a Finance además de Sales para aprobación retroactiva',
+            },
+        ],
+    },
+    {
+        name: 'operaciones',
+        description: 'Incidentes, severidad, SLAs operacionales',
+        failureTypes: [
+            {
+                name: 'wrong_severity_classification',
+                severity: 'high',
+                dimension: 'proceso',
+                keywords: ['severidad incorrecta', 'subclasificado', 'downgrade silencioso'],
+                recommendation: 'Reclasificar al nivel correcto y notificar escalation path',
+            },
+            {
+                name: 'missed_escalation',
+                severity: 'high',
+                dimension: 'proceso',
+                keywords: ['sin escalar', 'no notificó', 'no escaló', 'omitió escalamiento'],
+                recommendation: 'Activar escalation path inmediatamente y documentar demora',
+            },
+        ],
+    },
+    {
+        name: 'soporte',
+        description: 'Escalamiento de tickets, tier de soporte, atención al cliente',
+        failureTypes: [
+            {
+                name: 'wrong_tier_handling',
+                severity: 'medium',
+                dimension: 'proceso',
+                keywords: ['tier incorrecto', 'debería escalar', 'resolvió sin escalar'],
+                recommendation: 'Seguir matriz de escalamiento (ver escalation-levels.md)',
+            },
+            {
+                name: 'delayed_tier3_escalation',
+                severity: 'critical',
+                dimension: 'proceso',
+                keywords: ['outage', 'pérdida de datos', 'seguridad', 'no escaló p1'],
+                recommendation: 'Escalar Tier 3 dentro de 5 minutos de identificado',
+            },
+        ],
+    },
+];
+//# sourceMappingURL=domains.js.map

package/dist/reflection/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/reflection/domains.ts"],"names":[],"mappings":";;;AAIA,gFAAgF;AAChF,yDAAyD;AACzD,gFAAgF;AAEnE,QAAA,kBAAkB,GAA2B;IACtD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAM,CAAC;IACX,MAAM,EAAI,CAAC;IACX,GAAG,EAAO,CAAC;CACd,CAAC;AAEF,iFAAiF;AACjF,oEAAoE;AACpE,8DAA8D;AAC9D,EAAE;AACF,kFAAkF;AAClF,iDAAiD;AAEpC,QAAA,kBAAkB,GAAkB;IAC7C;QACI,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,gEAAgE;QAC7E,YAAY,EAAE;YACV;gBACI,IAAI,EAAY,sBAAsB;gBACtC,QAAQ,EAAQ,UAAU;gBAC1B,SAAS,EAAO,YAAY;gBAC5B,QAAQ,EAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC;gBAC7E,cAAc,EAAE,iEAAiE;aACpF;YACD;gBACI,IAAI,EAAY,yBAAyB;gBACzC,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,YAAY;gBAC5B,QAAQ,EAAQ,CAAC,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE,cAAc,CAAC;gBAChF,cAAc,EAAE,yDAAyD;aAC5E;YACD;gBACI,IAAI,EAAY,sBAAsB;gBACtC,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,UAAU;gBAC1B,QAAQ,EAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,CAAC;gBAClF,cAAc,EAAE,mDAAmD;aACtE;YACD;gBACI,IAAI,EAAY,cAAc;gBAC9B,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,YAAY;gBAC5B,QAAQ,EAAQ,CAAC,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,SAAS,CAAC;gBAC5E,cAAc,EAAE,8CAA8C;aACjE;SACJ;KACJ;IACD;QACI,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,wEAAwE;QACrF,YAAY,EAAE;YACV;gBACI,IAAI,EAAY,yBAAyB;gBACzC,QAAQ,EAAQ,UAAU;gBAC1B,SAAS,EAAO,WAAW;gBAC3B,QAAQ,EAAQ,CAAC,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,WAAW,CAAC;gBACpF,cAAc,EAAE,4EAA4E;aAC/F;YACD;gBACI,IAAI,EAAY,wBAAwB;gBACxC,QAAQ,EAAQ,UAAU;gBAC1B,SAAS,EAAO,kBAAkB;gBAClC,QAAQ,EAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;gBACjF,cAAc,EAAE,qEAAqE;aACxF;YACD;gBACI,IAAI,EAAY,mBAAmB;gBACnC,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,WAAW;gBAC3B,QAAQ,EAAQ,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC;gBACrE,cAAc,EAAE,+DAA+D;aAClF;SACJ;KACJ;IACD;QACI,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,6DAA6D;QAC1E,YAAY,EAAE;YACV;gBACI,IAAI,EAAY,cAAc;gBAC9B,QAAQ,EAAQ,UAAU;gBAC1B,SAAS,EAAO,YAAY;gBAC5B,QAAQ,EAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,CAAC;gBAC7F,cAAc,EAAE,uEAAuE;aAC1F;YACD;gBACI,IAAI,EAAY,mBAAmB;gBACnC,QAAQ,EAAQ,UAAU;gBAC1B,SAAS,EAAO,YAAY;gBAC5B,QAAQ,EAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC;gBACpE,cAAc,EAAE,6DAA6D;aAChF;YACD;gBACI,IAAI,EAAY,sBAAsB;gBACtC,QAAQ,EAAQ,QAAQ;gBACxB,SAAS,EAAO,SAAS;gBACzB,QAAQ,EAAQ,CAAC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,CAAC;gBAC3E,cAAc,EAAE,yDAAyD;aAC5E;YACD;gBACI,IAAI,EAAY,2BAA2B;gBAC3C,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,YAAY;gBAC5B,QAAQ,EAAQ,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,cAAc,CAAC;gBAC/E,cAAc,EAAE,qEAAqE;aACxF;SACJ;KACJ;IACD;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0CAA0C;QACvD,YAAY,EAAE;YACV;gBACI,IAAI,EAAY,yBAAyB;gBACzC,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,WAAW;gBAC3B,QAAQ,EAAQ,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,yBAAyB,CAAC;gBACjF,cAAc,EAAE,0EAA0E;aAC7F;YACD;gBACI,IAAI,EAAY,sBAAsB;gBACtC,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,SAAS;gBACzB,QAAQ,EAAQ,CAAC,aAAa,EAAE,cAAc,EAAE,cAAc,CAAC;gBAC/D,cAAc,EAAE,+DAA+D;aAClF;SACJ;KACJ;IACD;QACI,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,2CAA2C;QACxD,YAAY,EAAE;YACV;gBACI,IAAI,EAAY,+BAA+B;gBAC/C,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,SAAS;gBACzB,QAAQ,EAAQ,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,sBAAsB,CAAC;gBAClF,cAAc,EAAE,4DAA4D;aAC/E;YACD;gBACI,IAAI,EAAY,mBAAmB;gBACnC,QAAQ,EAAQ,MAAM;gBACtB,SAAS,EAAO,SAAS;gBACzB,QAAQ,EAAQ,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,CAAC;gBAClF,cAAc,EAAE,4DAA4D;aAC/E;SACJ;KACJ;IACD;QACI,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,+DAA+D;QAC5E,YAAY,EAAE;YACV;gBACI,IAAI,EAAY,qBAAqB;gBACrC,QAAQ,EAAQ,QAAQ;gBACxB,SAAS,EAAO,SAAS;gBACzB,QAAQ,EAAQ,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,sBAAsB,CAAC;gBAC9E,cAAc,EAAE,0DAA0D;aAC7E;YACD;gBACI,IAAI,EAAY,0BAA0B;gBAC1C,QAAQ,EAAQ,UAAU;gBAC1B,SAAS,EAAO,SAAS;gBACzB,QAAQ,EAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,CAAC;gBAC3E,cAAc,EAAE,oDAAoD;aACvE;SACJ;KACJ;CACJ,CAAC"}