@coderifts/agent-guard 1.0.0 → 1.2.0

package/dist/esm/resolver-yaml.js

@@ -0,0 +1,229 @@
+/**
+ * resolver-yaml — a MINIMAL, deterministic YAML/JSON reader for the artifact resolver's $ref bundler.
+ *
+ * The guard package has no YAML dependency; the resolver only needs to parse the constrained YAML
+ * that appears in OpenAPI/AsyncAPI contract docs (block mappings, flow mappings, quoted keys, scalar
+ * values, and `$ref` strings) to inline external file refs into a deterministic JSON bundle (§4.3).
+ * It is NOT a general YAML engine — anything outside the supported subset throws, and the resolver
+ * turns that into a `parse_error` unresolved entry (never a fabricated document).
+ *
+ * Determinism: plain scalars are kept as raw strings (no lossy type coercion), so parse→serialize is
+ * byte-stable per input.
+ */
+export class YamlLiteError extends Error {
+    constructor(message) { super(message); this.name = 'YamlLiteError'; }
+}
+/** Parse a JSON or (subset) YAML document to a plain JS value. Throws YamlLiteError on unsupported input. */
+export function parseDoc(text) {
+    const trimmed = text.trimStart();
+    if (trimmed.startsWith('{') || trimmed.startsWith('[')) {
+        try {
+            return JSON.parse(text);
+        }
+        catch (e) {
+            throw new YamlLiteError(`invalid JSON: ${e.message}`);
+        }
+    }
+    const lines = [];
+    for (const raw of text.split('\n')) {
+        const trimmedLine = raw.trim();
+        if (trimmedLine === '' || trimmedLine.startsWith('#'))
+            continue;
+        lines.push({ indent: raw.length - raw.trimStart().length, text: trimmedLine });
+    }
+    if (lines.length === 0)
+        return null;
+    const [value] = parseBlock(lines, 0, lines[0].indent);
+    return value;
+}
+function parseBlock(lines, start, indent) {
+    if (start >= lines.length)
+        return [null, start];
+    const first = lines[start];
+    if (first.text === '-' || first.text.startsWith('- '))
+        return parseSequence(lines, start, indent);
+    return parseMapping(lines, start, indent);
+}
+function parseMapping(lines, start, indent) {
+    const obj = {};
+    let i = start;
+    while (i < lines.length && lines[i].indent === indent) {
+        const { key, rest } = splitKeyValue(lines[i].text);
+        i += 1;
+        if (rest === '') {
+            if (i < lines.length && lines[i].indent > indent) {
+                const [child, next] = parseBlock(lines, i, lines[i].indent);
+                obj[key] = child;
+                i = next;
+            }
+            else {
+                obj[key] = null;
+            }
+        }
+        else {
+            obj[key] = parseScalarOrFlow(rest);
+        }
+    }
+    return [obj, i];
+}
+function parseSequence(lines, start, indent) {
+    const arr = [];
+    let i = start;
+    while (i < lines.length && lines[i].indent === indent && (lines[i].text === '-' || lines[i].text.startsWith('- '))) {
+        const itemText = lines[i].text.slice(1).trim();
+        i += 1;
+        if (itemText === '') {
+            if (i < lines.length && lines[i].indent > indent) {
+                const [child, next] = parseBlock(lines, i, lines[i].indent);
+                arr.push(child);
+                i = next;
+            }
+            else {
+                arr.push(null);
+            }
+        }
+        else {
+            arr.push(parseScalarOrFlow(itemText));
+        }
+    }
+    return [arr, i];
+}
+/** Split "key: rest" honoring a quoted key; the separator is the first top-level colon. */
+function splitKeyValue(text) {
+    let key;
+    let idx;
+    if (text[0] === "'" || text[0] === '"') {
+        const q = text[0];
+        let j = 1;
+        while (j < text.length && text[j] !== q)
+            j += 1;
+        key = text.slice(1, j);
+        idx = text.indexOf(':', j);
+    }
+    else {
+        idx = text.indexOf(':');
+        key = idx === -1 ? text : text.slice(0, idx);
+    }
+    if (idx === -1)
+        return { key: key.trim(), rest: '' };
+    return { key: key.trim(), rest: text.slice(idx + 1).trim() };
+}
+function parseScalarOrFlow(s) {
+    const t = s.trim();
+    if (t === '' || t === '~' || t === 'null')
+        return null;
+    if (t[0] === '{' || t[0] === '[')
+        return parseFlow(t).value;
+    if (t[0] === "'" || t[0] === '"')
+        return unquote(t);
+    return t;
+}
+function unquote(t) {
+    const q = t[0];
+    let j = 1;
+    let out = '';
+    while (j < t.length && t[j] !== q) {
+        out += t[j];
+        j += 1;
+    }
+    return out;
+}
+function parseFlow(s) {
+    if (s[0] === '{')
+        return parseFlowMap(s);
+    if (s[0] === '[')
+        return parseFlowSeq(s);
+    throw new YamlLiteError(`not a flow collection: ${s.slice(0, 20)}`);
+}
+function parseFlowMap(s) {
+    const obj = {};
+    let i = 1;
+    while (i < s.length) {
+        while (i < s.length && (s[i] === ' ' || s[i] === ','))
+            i += 1;
+        if (s[i] === '}')
+            return { value: obj, end: i + 1 };
+        let key;
+        if (s[i] === "'" || s[i] === '"') {
+            const q = s[i];
+            let j = i + 1;
+            let k = '';
+            while (j < s.length && s[j] !== q) {
+                k += s[j];
+                j += 1;
+            }
+            key = k;
+            i = j + 1;
+        }
+        else {
+            let k = '';
+            while (i < s.length && s[i] !== ':' && s[i] !== '}' && s[i] !== ',') {
+                k += s[i];
+                i += 1;
+            }
+            key = k.trim();
+        }
+        while (i < s.length && (s[i] === ' ' || s[i] === ':'))
+            i += 1;
+        const [val, next] = readFlowValue(s, i);
+        obj[key] = val;
+        i = next;
+    }
+    throw new YamlLiteError(`unterminated flow map: ${s.slice(0, 40)}`);
+}
+function parseFlowSeq(s) {
+    const arr = [];
+    let i = 1;
+    while (i < s.length) {
+        while (i < s.length && (s[i] === ' ' || s[i] === ','))
+            i += 1;
+        if (s[i] === ']')
+            return { value: arr, end: i + 1 };
+        const [val, next] = readFlowValue(s, i);
+        arr.push(val);
+        i = next;
+    }
+    throw new YamlLiteError(`unterminated flow seq: ${s.slice(0, 40)}`);
+}
+function readFlowValue(s, start) {
+    let i = start;
+    while (i < s.length && s[i] === ' ')
+        i += 1;
+    if (s[i] === '{' || s[i] === '[') {
+        const { value, end } = parseFlow(s.slice(i));
+        return [value, i + end];
+    }
+    if (s[i] === "'" || s[i] === '"') {
+        const q = s[i];
+        let j = i + 1;
+        let out = '';
+        while (j < s.length && s[j] !== q) {
+            out += s[j];
+            j += 1;
+        }
+        return [out, j + 1];
+    }
+    let out = '';
+    while (i < s.length && s[i] !== ',' && s[i] !== '}' && s[i] !== ']') {
+        out += s[i];
+        i += 1;
+    }
+    return [out.trim(), i];
+}
+/** Deterministic JSON serialization with recursively sorted object keys (byte-stable — §4.3, A6). */
+export function stableStringify(value) {
+    return JSON.stringify(sortKeys(value));
+}
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const k of Object.keys(value).sort()) {
+            out[k] = sortKeys(value[k]);
+        }
+        return out;
+    }
+    return value;
+}
+//# sourceMappingURL=resolver-yaml.js.map

package/dist/esm/resolver-yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-yaml.js","sourceRoot":"","sources":["../../src/resolver-yaml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC;CAC9E;AAID,6GAA6G;AAC7G,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,aAAa,CAAC,iBAAkB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;IAClH,CAAC;IACD,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,WAAW,KAAK,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,MAAc;IAC9D,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAClG,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa,EAAE,MAAc;IAChE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACtD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;gBACjD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC5D,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACjB,CAAC,GAAG,IAAI,CAAC;YACX,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,MAAc;IACjE,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;gBACjD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC5D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,GAAG,IAAI,CAAC;YACX,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,2FAA2F;AAC3F,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,GAAW,CAAC;IAChB,IAAI,GAAW,CAAC;IAChB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;QAChD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACrD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YACzD,GAAG,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC3F,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACf,CAAC,GAAG,IAAI,CAAC;IACX,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,GAAG,IAAI,CAAC;IACX,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,KAAa;IAC7C,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,GAAG,GAAG,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/session-taint.d.ts

@@ -0,0 +1,97 @@
+/**
+ * @coderifts/agent-guard — process-local session-taint detector (SEPARATE surface).
+ *
+ * Implements session-taint-detector-SPEC.md verbatim: a multi-call taint tracker that flags when a
+ * session both accumulates contract taint AND emits an SSOT sink — closing the gap where a sequence
+ * passes single-call DG-1 yet mutates SSOT. Additive: the frozen `builtinDetector.detect()` is NOT
+ * touched. Versioned SEPARATELY (session-taint/1.0.0), monotonic toward caution.
+ *
+ * Normative: flag ⇔ ssot_sink_events ≠ ∅ ∧ tainted. Fixture-faithful classifier order (§1.6: NON_SINK
+ * first, so snapshot/prettier stay under-set — a documented, Peter-accepted quirk; flag unaffected).
+ */
+import type { ToolCallDescriptor } from './types.js';
+export declare const SESSION_TAINT_VERSION = "session-taint/1.0.0";
+export type PathClass = 'prose' | 'scratch' | 'migration' | 'ssot' | 'code_or_config' | 'other';
+export declare function pathClass(p: string): PathClass;
+export type PendingRename = {
+    from: string;
+    to: string;
+} | {
+    drop: string;
+};
+export interface SessionState {
+    scratch_writes: string[];
+    contract_looking_scratch: string[];
+    encoded_fragments: string[];
+    intermediate_artifacts: string[];
+    pending_renames: PendingRename[];
+    optional_fields_added: string[];
+    required_fields_declared: string[];
+    ssot_paths_touched: string[];
+    ssot_sink_events: string[];
+    ssot_invalidated: boolean;
+    reverse_snapshot: boolean;
+    formatter_only_ssot: boolean;
+    store_keys: string[];
+    tainted: boolean;
+}
+export declare function emptySessionState(): SessionState;
+/** Serialize to the fixture's projected form (pending_renames -> "from->to" | "drop:name"). */
+export declare function projectState(s: SessionState): Record<string, unknown>;
+export type CmdClass = 'non_sink' | 'ssot_invalidate' | 'ssot_sink' | 'reverse_snapshot' | 'formatter' | 'unknown_script';
+export declare function classifyCommand(command: string, action: string, cfg?: SessionTaintConfig): CmdClass;
+export declare function updateSession(state: SessionState, call: {
+    toolName?: string;
+    arguments?: unknown;
+}, cfg?: SessionTaintConfig): SessionState;
+export declare function computeTainted(s: SessionState): boolean;
+export interface SessionEval {
+    flag: boolean;
+    trip: boolean;
+    key_signal: string | null;
+}
+export declare function deriveKeySignal(s: SessionState): string;
+/** flag ⇔ (ssot_sink_events ≠ ∅ || sink_seen) ∧ (tainted || overflow). */
+export declare function evaluate(state: SessionState, prevFlagged?: boolean, opts?: {
+    overflow?: boolean;
+    sinkSeen?: boolean;
+}): SessionEval;
+export interface SessionTaintConfig {
+    extraSinkPatterns?: RegExp[];
+    extraNonSinkPatterns?: RegExp[];
+    maxCalls?: number;
+    maxPathsTracked?: number;
+    maxSinkEvents?: number;
+    maxStateBytes?: number;
+    ttlMs?: number;
+    bindCwd?: boolean;
+    sessionId?: string;
+    sessionTaintSeverity?: 'caution' | 'stop';
+}
+export interface SessionTaintObservation {
+    flag: boolean;
+    trip: boolean;
+    key_signal: string | null;
+    state: Readonly<SessionState>;
+    version: typeof SESSION_TAINT_VERSION;
+    overflow: boolean;
+    severity: 'caution' | 'stop';
+}
+export declare class SessionTaintTracker {
+    readonly version = "session-taint/1.0.0";
+    private state;
+    private prevFlag;
+    private callCount;
+    private overflow;
+    private sinkSeen;
+    private lastObserveAt;
+    private cfg;
+    constructor(config?: SessionTaintConfig);
+    private pathTotal;
+    observe(call: ToolCallDescriptor): SessionTaintObservation;
+    status(): SessionTaintObservation;
+    reset(): void;
+    private snapshot;
+    private now;
+}
+//# sourceMappingURL=session-taint.d.ts.map

package/dist/esm/session-taint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-taint.d.ts","sourceRoot":"","sources":["../../src/session-taint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAiB3D,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAEhG,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAO9C;AAGD,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,iBAAiB,IAAI,YAAY,CAOhD;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBrE;AAyBD,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,iBAAiB,GAAG,WAAW,GAAG,kBAAkB,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAE1H,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,kBAAuB,GAAG,QAAQ,CAUvG;AAKD,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,GAAE,kBAAuB,GAAG,YAAY,CA0E/I;AAGD,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAWvD;AAGD,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAAE;AAEzF,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAQvD;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,UAAQ,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,WAAW,CAKrI;AAGD,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,qBAAqB,CAAC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,MAAM,CAAC;CAC9B;AAID,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,OAAO,yBAAyB;IACzC,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,GAAG,CAAqB;gBAEpB,MAAM,GAAE,kBAAuB;IAE3C,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,IAAI,EAAE,kBAAkB,GAAG,uBAAuB;IAsB1D,MAAM,IAAI,uBAAuB;IAEjC,KAAK,IAAI,IAAI;IAKb,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,GAAG;CACZ"}

package/dist/esm/session-taint.js

@@ -0,0 +1,305 @@
+/**
+ * @coderifts/agent-guard — process-local session-taint detector (SEPARATE surface).
+ *
+ * Implements session-taint-detector-SPEC.md verbatim: a multi-call taint tracker that flags when a
+ * session both accumulates contract taint AND emits an SSOT sink — closing the gap where a sequence
+ * passes single-call DG-1 yet mutates SSOT. Additive: the frozen `builtinDetector.detect()` is NOT
+ * touched. Versioned SEPARATELY (session-taint/1.0.0), monotonic toward caution.
+ *
+ * Normative: flag ⇔ ssot_sink_events ≠ ∅ ∧ tainted. Fixture-faithful classifier order (§1.6: NON_SINK
+ * first, so snapshot/prettier stay under-set — a documented, Peter-accepted quirk; flag unaffected).
+ */
+export const SESSION_TAINT_VERSION = 'session-taint/1.0.0';
+// ── §1.3 classifiers ─────────────────────────────────────────────────────────────────────────
+const NON_SSOT_RE = /(^|\/)(tests?|__tests__|fixtures?|__mocks__|src\/internal)\//i;
+const PIPELINE_SCRATCH_RE = /(^|\/)(build|\.cache|codegen|idl)(\/|$)/i;
+const PROSE_RE = /(^|\/)(README|CHANGELOG|LICENSE)(\.\w+)?$|\.md$/i;
+const SSOT_PATH_RE = /(^|\/)(openapi|swagger|asyncapi)[^/]*\.(ya?ml|json)$|(^|\/)mcp\.json$|\.graphql$|\.gql$|(^|\/)idl\/.*\.proto$|(^|\/)specs?\/.*\.(ya?ml|json)$|openapi\.yaml|schema\.graphql|asyncapi\.yaml/i;
+const MIGRATION_RE = /(^|\/)migrations?\//i;
+const CODE_OR_CONFIG_RE = /\.(ts|tsx|js|jsx)$/i;
+const CONTRACT_CONTENT_RE = /\bopenapi\s*[:=]|\bswagger\s*[:=]|\basyncapi\s*[:=]|syntax\s*=\s*["']proto3|["']inputSchema["']|\btype\s+Query\b|(^|\n)\s*paths\s*:/i;
+const STAGING_NAME_RE = /\.b64$|enc\/|field-map|flags\.json|optional_fields|required_fields|service\.idl|frags\/|BREAKING_DROP/i;
+const NON_SINK_RE = /validate-frags|gen-docs|reload-flags|snapshot-spec|prettier|npm test|npm install|npx prettier/i;
+const SSOT_INVALIDATE_RE = /archive-old-spec/i;
+const SSOT_SINK_RE = /dsl-to-openapi|merge-spec|publish-fixture|promote-spec|sync-graphql|b64join-write|decode-promote|apply-field-map|render-openapi|idl\/compile|generate-and-test|compile_spec_bundle|install-proto|install-mcp|promote-asyncapi|repack-extract|codegen\/build\.js|codegen\/apply|codegen\/render/i;
+export function pathClass(p) {
+    if (PROSE_RE.test(p))
+        return 'prose';
+    if (NON_SSOT_RE.test(p) || PIPELINE_SCRATCH_RE.test(p))
+        return 'scratch';
+    if (MIGRATION_RE.test(p))
+        return 'migration';
+    if (SSOT_PATH_RE.test(p))
+        return 'ssot';
+    if (CODE_OR_CONFIG_RE.test(p) || p.startsWith('src/') || p.startsWith('config/') || p === 'package.json')
+        return 'code_or_config';
+    return 'other';
+}
+export function emptySessionState() {
+    return {
+        scratch_writes: [], contract_looking_scratch: [], encoded_fragments: [], intermediate_artifacts: [],
+        pending_renames: [], optional_fields_added: [], required_fields_declared: [], ssot_paths_touched: [],
+        ssot_sink_events: [], ssot_invalidated: false, reverse_snapshot: false, formatter_only_ssot: false,
+        store_keys: [], tainted: false,
+    };
+}
+/** Serialize to the fixture's projected form (pending_renames -> "from->to" | "drop:name"). */
+export function projectState(s) {
+    return {
+        scratch_writes: s.scratch_writes.slice(),
+        encoded_fragments: s.encoded_fragments.slice(),
+        pending_renames: s.pending_renames.map((r) => ('drop' in r ? `drop:${r.drop}` : `${r.from}->${r.to}`)),
+        optional_fields_added: s.optional_fields_added.slice(),
+        required_fields_declared: s.required_fields_declared.slice(),
+        ssot_paths_touched: s.ssot_paths_touched.slice(),
+        contract_looking_scratch: s.contract_looking_scratch.slice(),
+        intermediate_artifacts: s.intermediate_artifacts.slice(),
+        ssot_sink_events: s.ssot_sink_events.slice(),
+        ssot_invalidated: s.ssot_invalidated,
+        reverse_snapshot: s.reverse_snapshot,
+        formatter_only_ssot: s.formatter_only_ssot,
+        store_keys: s.store_keys.slice(),
+        tainted: s.tainted,
+    };
+}
+// ── §2.2 extractors ──────────────────────────────────────────────────────────────────────────
+function asRecord(args) { return args && typeof args === 'object' ? args : {}; }
+function extractPaths(args) {
+    const a = asRecord(args);
+    const out = [];
+    for (const k of ['path', 'target', 'file', 'dest', 'filename', 'destination'])
+        if (typeof a[k] === 'string')
+            out.push(a[k]);
+    return out;
+}
+function extractContent(args) {
+    const a = asRecord(args);
+    const parts = [];
+    for (const k of ['contents', 'content', 'new_string', 'old_string', 'patch', 'value', 'command'])
+        if (typeof a[k] === 'string')
+            parts.push(a[k]);
+    return parts.join('\n');
+}
+// ── §2.3 encoded-fragment heuristic (fixture-faithful — do not "fix" without regenerating) ──────
+function isEncodedFragment(path, content) {
+    if (path && /part\.|enc\/|\.b64$|pkg\.part/i.test(path))
+        return true;
+    const c = content.replace(/\s+/g, '');
+    if (c.length >= 8 && c.length < 80 && /^[A-Za-z0-9+/=]+$/.test(c))
+        return true;
+    return false;
+}
+export function classifyCommand(command, action, cfg = {}) {
+    const s = `${command || ''} ${action || ''}`;
+    const extraNon = cfg.extraNonSinkPatterns || [];
+    const extraSink = cfg.extraSinkPatterns || [];
+    if (NON_SINK_RE.test(s) || extraNon.some((r) => r.test(s)))
+        return 'non_sink';
+    if (SSOT_INVALIDATE_RE.test(s))
+        return 'ssot_invalidate';
+    if (SSOT_SINK_RE.test(s) || action === 'compile_spec_bundle' || extraSink.some((r) => r.test(s)))
+        return 'ssot_sink';
+    if (/snapshot/i.test(s))
+        return 'reverse_snapshot';
+    if (/prettier|format/i.test(s))
+        return 'formatter';
+    return 'unknown_script';
+}
+function pushUniq(arr, v) { if (v != null && !arr.includes(v))
+    arr.push(v); }
+// ── §2.5 transition ────────────────────────────────────────────────────────────────────────────
+export function updateSession(state, call, cfg = {}) {
+    const s = JSON.parse(JSON.stringify(state)); // pure: new state
+    const args = asRecord(call && call.arguments);
+    const paths = extractPaths(args);
+    const content = extractContent(args);
+    const tool = call && call.toolName;
+    // store
+    if (tool === 'store' && typeof args.key === 'string') {
+        pushUniq(s.store_keys, args.key);
+        if (/spec_|api_|openapi|schema/i.test(args.key) || /BREAKING|ROUTE|FIELD|REMOVE|MANDATORY|required|optional/i.test(String(args.value))) {
+            pushUniq(s.intermediate_artifacts, `store:${args.key}`);
+        }
+    }
+    // apply
+    if (tool === 'apply' && typeof args.action === 'string') {
+        if (classifyCommand('', args.action, cfg) === 'ssot_sink')
+            s.ssot_sink_events.push(args.action);
+    }
+    // Bash / command
+    if (tool === 'Bash' || typeof args.command === 'string') {
+        const cmd = typeof args.command === 'string' ? args.command : '';
+        const kind = classifyCommand(cmd, '', cfg);
+        if (kind === 'ssot_sink')
+            s.ssot_sink_events.push(cmd);
+        if (kind === 'ssot_invalidate')
+            s.ssot_invalidated = true;
+        if (kind === 'reverse_snapshot')
+            s.reverse_snapshot = true;
+        if (kind === 'formatter' && (SSOT_PATH_RE.test(cmd) || /openapi|swagger|asyncapi|\.graphql|\.gql|mcp\.json|schema/i.test(cmd)))
+            s.formatter_only_ssot = true;
+    }
+    // path-bearing writes/edits
+    for (const p of paths) {
+        const pc = pathClass(p);
+        const isScratch = pc === 'scratch' || NON_SSOT_RE.test(p) || PIPELINE_SCRATCH_RE.test(p);
+        if (isScratch) {
+            pushUniq(s.scratch_writes, p);
+            if (CONTRACT_CONTENT_RE.test(content) || STAGING_NAME_RE.test(p + content))
+                pushUniq(s.contract_looking_scratch, p);
+            if (PIPELINE_SCRATCH_RE.test(p))
+                pushUniq(s.intermediate_artifacts, p);
+            if (isEncodedFragment(p, content) || /\.b64$/i.test(p) || /enc\//i.test(p) || /pkg\.part/i.test(p))
+                pushUniq(s.encoded_fragments, p);
+            if (/field-map|flags\.json|optional_fields|required_fields|\.idl$/i.test(p))
+                pushUniq(s.intermediate_artifacts, p);
+        }
+        if (pc === 'ssot' && !(tool === 'Bash' && /prettier/i.test(typeof args.command === 'string' ? args.command : '')))
+            pushUniq(s.ssot_paths_touched, p);
+        // field-map JSON
+        if (/field-map/i.test(p)) {
+            let obj;
+            try {
+                obj = JSON.parse(content);
+            }
+            catch {
+                obj = null;
+            }
+            if (obj && typeof obj === 'object' && !Array.isArray(obj)) {
+                for (const [k, v] of Object.entries(obj)) {
+                    if (k === '__drop' && Array.isArray(v)) {
+                        for (const d of v)
+                            s.pending_renames.push({ drop: String(d) });
+                    }
+                    else if (typeof v === 'string')
+                        s.pending_renames.push({ from: k, to: v });
+                }
+            }
+        }
+        // flags.json optional/required
+        if (/flags\.json/i.test(p)) {
+            for (const m of content.matchAll(/"(\w+)":\s*"optional"/g))
+                pushUniq(s.optional_fields_added, m[1]);
+            for (const m of content.matchAll(/"(\w+)":\s*"required"/g))
+                pushUniq(s.required_fields_declared, m[1]);
+        }
+        // list files
+        if (/optional_fields/i.test(p))
+            for (const line of content.split('\n'))
+                if (line.trim())
+                    pushUniq(s.optional_fields_added, line.trim());
+        if (/required_fields/i.test(p))
+            for (const line of content.split('\n'))
+                if (line.trim())
+                    pushUniq(s.required_fields_declared, line.trim());
+        // ST-009 yaml heuristics
+        if (NON_SSOT_RE.test(p) && /required:\s*\[[^\]]*owner_id/.test(content))
+            pushUniq(s.required_fields_declared, 'owner_id');
+        if (NON_SSOT_RE.test(p) && /owner_id:\s*\{type: string\}/.test(content))
+            pushUniq(s.optional_fields_added, 'owner_id');
+        if (/\.idl$/i.test(p) || p.startsWith('idl/'))
+            pushUniq(s.intermediate_artifacts, p);
+    }
+    // body flags (with/without path)
+    if (/BREAKING_DROP|FIELD .* REMOVE|MANDATORY/i.test(content))
+        pushUniq(s.intermediate_artifacts, paths[0] || 'inline_flag');
+    s.tainted = computeTainted(s);
+    return s;
+}
+// ── §3.2 taint predicate ─────────────────────────────────────────────────────────────────────
+export function computeTainted(s) {
+    return (s.contract_looking_scratch.length > 0
+        || s.encoded_fragments.length > 0
+        || s.intermediate_artifacts.length > 0
+        || s.store_keys.some((k) => /spec_|api_|schema|openapi/i.test(k))
+        || s.pending_renames.length > 0
+        || s.optional_fields_added.some((f) => s.required_fields_declared.includes(f))
+        || (s.required_fields_declared.length > 0 && s.optional_fields_added.length > 0)
+        || s.ssot_invalidated === true);
+}
+export function deriveKeySignal(s) {
+    if (s.ssot_invalidated)
+        return 'delete_recreate_ssot_via_session';
+    if (s.encoded_fragments.length)
+        return 'encoded_scratch_then_ssot_promotion';
+    if (s.optional_fields_added.some((f) => s.required_fields_declared.includes(f)) || (s.required_fields_declared.length && s.optional_fields_added.length))
+        return 'cumulative_required_flip';
+    if (s.pending_renames.length)
+        return 'cumulative_rename_via_codegen';
+    if (s.contract_looking_scratch.length)
+        return 'scratch_to_ssot_promotion';
+    if (s.intermediate_artifacts.length)
+        return 'cross_call_reassembly_to_ssot';
+    return 'session_ssot_sink_with_taint';
+}
+/** flag ⇔ (ssot_sink_events ≠ ∅ || sink_seen) ∧ (tainted || overflow). */
+export function evaluate(state, prevFlagged = false, opts = {}) {
+    const sink = state.ssot_sink_events.length > 0 || opts.sinkSeen === true;
+    const taint = state.tainted || opts.overflow === true;
+    const flag = sink && taint;
+    return { flag, trip: flag && !prevFlagged, key_signal: flag ? deriveKeySignal(state) : null };
+}
+const DEF = { maxCalls: 256, maxPathsTracked: 512, maxSinkEvents: 64, maxStateBytes: 256_000, ttlMs: 3_600_000 };
+export class SessionTaintTracker {
+    version = SESSION_TAINT_VERSION;
+    state = emptySessionState();
+    prevFlag = false;
+    callCount = 0;
+    overflow = false;
+    sinkSeen = false;
+    lastObserveAt = 0;
+    cfg;
+    constructor(config = {}) { this.cfg = config; }
+    pathTotal() {
+        const s = this.state;
+        return s.scratch_writes.length + s.contract_looking_scratch.length + s.encoded_fragments.length
+            + s.intermediate_artifacts.length + s.ssot_paths_touched.length;
+    }
+    observe(call) {
+        const now = this.now();
+        // §4.3 TTL: soft reset to a fresh session on expiry.
+        if (this.lastObserveAt && now - this.lastObserveAt > (this.cfg.ttlMs ?? DEF.ttlMs))
+            this.reset();
+        this.lastObserveAt = now;
+        const next = updateSession(this.state, call, this.cfg);
+        // §4.3 caps → sticky overflow forces taint (monotonic caution; NOT drop-oldest).
+        this.callCount++;
+        if (this.callCount > (this.cfg.maxCalls ?? DEF.maxCalls))
+            this.overflow = true;
+        if (this.pathTotal() > (this.cfg.maxPathsTracked ?? DEF.maxPathsTracked))
+            this.overflow = true;
+        if (JSON.stringify(next).length > (this.cfg.maxStateBytes ?? DEF.maxStateBytes))
+            this.overflow = true;
+        // maxSinkEvents: stop growing the list but keep sink presence sticky.
+        if (next.ssot_sink_events.length > (this.cfg.maxSinkEvents ?? DEF.maxSinkEvents)) {
+            next.ssot_sink_events = next.ssot_sink_events.slice(0, this.cfg.maxSinkEvents ?? DEF.maxSinkEvents);
+        }
+        this.state = next;
+        if (this.state.ssot_sink_events.length > 0)
+            this.sinkSeen = true;
+        return this.snapshot();
+    }
+    status() { return this.snapshot(); }
+    reset() {
+        this.state = emptySessionState();
+        this.prevFlag = false;
+        this.callCount = 0;
+        this.overflow = false;
+        this.sinkSeen = false;
+        this.lastObserveAt = 0;
+    }
+    snapshot() {
+        const eva = evaluate(this.state, this.prevFlag, { overflow: this.overflow, sinkSeen: this.sinkSeen });
+        if (eva.flag)
+            this.prevFlag = true;
+        return {
+            flag: eva.flag, trip: eva.trip, key_signal: eva.key_signal,
+            state: projectState(this.state),
+            version: SESSION_TAINT_VERSION, overflow: this.overflow,
+            severity: this.cfg.sessionTaintSeverity || 'caution',
+        };
+    }
+    // Date.now is fine at runtime; isolated for testability.
+    now() { return Date.now(); }
+}
+//# sourceMappingURL=session-taint.js.map