@coderifts/agent-guard 1.3.0 → 1.5.0

package/dist/cjs/deploy-gate.d.ts

@@ -0,0 +1,103 @@
+/**
+ * deploy-gate (#8) — the PURE deploy authorization decision (deploy-gate-SPEC §1). The DEPLOY sibling
+ * of the merge gate: it answers "may THIS artifact deploy to THIS environment, given the finished
+ * receipt and the observed pipeline-enforcement state?"
+ *
+ * Same shape as the merge gate, different operation. It is a PURE function — NO I/O, NO CD-API call
+ * (pipeline enforcement is an INPUT, observed by the host and passed in). It does NOT re-decide: it
+ * reads only the finished receipt fields — the deterministic verdict stays the server's (D7). Same
+ * inputs → same output (D9).
+ *
+ * The three deploy-specific binds are the whole point: T7 (a MERGE — or operation-less — receipt can
+ * never deploy), environment binding (a staging ALLOW never authorizes production), and artifact
+ * binding (an old artifact's ALLOW never deploys a newer one). Scope honesty mirrors the merge gate:
+ * `inescapable_deploy` is true ONLY in the fully-enforcing, non-bypassable case; otherwise the check
+ * may be `success` for visibility but the claim is false with the residual named.
+ *
+ * Public source (ships in the npm package): references only receipt/target/enforcement fields and
+ * generic deploy-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or
+ * secrets.
+ */
+import type { GateStatusState, EnforcementState } from './merge-gate.js';
+export type { GateStatusState, EnforcementState } from './merge-gate.js';
+/** The 13 deploy-gate reason codes (§1.1). Success uses allow_current_deploy; enforcement_not_configured
+ *  and bypass_open name the honesty residual on an otherwise-green check. */
+export type DeployGateReason = 'allow_current_deploy' | 'no_receipt' | 'receipt_not_authorized' | 'operation_mismatch' | 'env_mismatch' | 'stale_artifact' | 'fingerprint_mismatch' | 'body_hash_mismatch' | 'target_mismatch' | 'decision_not_allow' | 'inputs_incomplete' | 'enforcement_not_configured' | 'bypass_open';
+/** What is being deployed — all fields are INPUTS (the pure function performs no discovery). */
+export type DeployTarget = {
+    environment: string;
+    /** Immutable artifact identity: content digest, or a commit SHA when that is the deploy unit. */
+    artifact_id: string;
+    service?: string;
+    pipeline_run_id?: string;
+};
+/** A view of the finished receipt. Reuses the shipped field names + the deploy analogs of bound_head_sha. */
+export type DeployReceiptView = {
+    currently_authorized: boolean;
+    authz_reason?: string;
+    decision: 'ALLOW' | 'WARN' | 'REQUIRE_APPROVAL' | 'BLOCK' | string;
+    execution_action?: 'CONTINUE' | 'CONTINUE_WITH_MONITORING' | 'REQUEST_APPROVAL' | 'STOP' | string;
+    /** MUST be 'deploy' for success (T7). */
+    operation?: 'merge' | 'deploy' | 'tool_call' | 'publish' | string;
+    /** The environment this receipt authorizes (deploy analog of bound_head_sha). */
+    bound_environment?: string | null;
+    /** The artifact/commit this receipt was issued for (deploy analog of bound_head_sha). */
+    bound_artifact_id?: string | null;
+    verdict_fingerprint?: string;
+    body_hash?: string;
+    target_id?: string;
+    signature_valid?: boolean;
+};
+/** Pipeline-enforcement observation (from the host's CD-config read — the pure gate consumes it). */
+export type DeployEnforcementState = {
+    enforcement: EnforcementState;
+    bypass_possible: boolean;
+    required_step_name?: string;
+};
+export type DeployRequiredContext = {
+    operation?: 'deploy' | string;
+    repository?: string;
+    service?: string;
+    expected_fingerprint?: string;
+    expected_body_hash?: string;
+    enforcement: DeployEnforcementState;
+    /** Default true: a missing bound_environment on the receipt → env_mismatch. */
+    require_bound_environment?: boolean;
+    /** Default true: a missing bound_artifact_id → stale_artifact. */
+    require_bound_artifact?: boolean;
+    allowWarnDeploy?: boolean;
+    allowPrefixCompare?: boolean;
+    allowPending?: boolean;
+};
+export type DeployGateInput = {
+    deployTarget: DeployTarget;
+    receipt: DeployReceiptView | null;
+    requiredContext: DeployRequiredContext;
+    /** Incomplete/no-receipt → pending when true, else failure (default false). */
+    allowPending?: boolean;
+    /** Green the gate on WARN as well as ALLOW (default false; stricter for prod-shaped envs). */
+    allowWarnDeploy?: boolean;
+    /** Compare env/artifact by prefix instead of full equality (default false). */
+    allowPrefixCompare?: boolean;
+};
+export type DeployGateDecision = {
+    deploy_allowed: boolean;
+    state: GateStatusState;
+    reason: DeployGateReason;
+    enforcement_state: EnforcementState;
+    inescapable_deploy: boolean;
+    /** Named residual when the check is green but NOT inescapable (honesty channel, §3.2). */
+    residual?: DeployGateReason;
+    detail: {
+        environment: string;
+        artifact_id: string;
+        bound_environment: string | null;
+        bound_artifact_id: string | null;
+        operation: string | null;
+    };
+};
+/**
+ * §1.4 — the normative, first-match-wins deploy decision. Pure; no I/O; deterministic.
+ */
+export declare function deployGate(input: DeployGateInput): DeployGateDecision;
+//# sourceMappingURL=deploy-gate.d.ts.map

package/dist/cjs/deploy-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-gate.d.ts","sourceRoot":"","sources":["../../src/deploy-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEzE;6EAC6E;AAC7E,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,YAAY,GACZ,wBAAwB,GACxB,oBAAoB,GACpB,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,mBAAmB,GACnB,4BAA4B,GAC5B,aAAa,CAAC;AAElB,gGAAgG;AAChG,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,6GAA6G;AAC7G,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;IACnE,gBAAgB,CAAC,EAAE,UAAU,GAAG,0BAA0B,GAAG,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;IAClG,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;IAClE,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,yFAAyF;IACzF,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,qGAAqG;AACrG,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,sBAAsB,CAAC;IACpC,+EAA+E;IAC/E,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,kEAAkE;IAClE,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAEjC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,qBAAqB,CAAC;IACvC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;CACH,CAAC;AAkCF;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,CAiGrE"}

package/dist/cjs/deploy-gate.js

@@ -0,0 +1,159 @@
+"use strict";
+/**
+ * deploy-gate (#8) — the PURE deploy authorization decision (deploy-gate-SPEC §1). The DEPLOY sibling
+ * of the merge gate: it answers "may THIS artifact deploy to THIS environment, given the finished
+ * receipt and the observed pipeline-enforcement state?"
+ *
+ * Same shape as the merge gate, different operation. It is a PURE function — NO I/O, NO CD-API call
+ * (pipeline enforcement is an INPUT, observed by the host and passed in). It does NOT re-decide: it
+ * reads only the finished receipt fields — the deterministic verdict stays the server's (D7). Same
+ * inputs → same output (D9).
+ *
+ * The three deploy-specific binds are the whole point: T7 (a MERGE — or operation-less — receipt can
+ * never deploy), environment binding (a staging ALLOW never authorizes production), and artifact
+ * binding (an old artifact's ALLOW never deploys a newer one). Scope honesty mirrors the merge gate:
+ * `inescapable_deploy` is true ONLY in the fully-enforcing, non-bypassable case; otherwise the check
+ * may be `success` for visibility but the claim is false with the residual named.
+ *
+ * Public source (ships in the npm package): references only receipt/target/enforcement fields and
+ * generic deploy-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or
+ * secrets.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deployGate = deployGate;
+// ── helpers (pure) ────────────────────────────────────────────────────────────────────────────────
+function norm(s) {
+    return String(s == null ? '' : s).trim().toLowerCase();
+}
+/** §1.2 — full lowercase equality by default (env exact; artifact digest/sha); prefix opt-in. */
+function sameNorm(a, b, allowPrefix) {
+    const na = norm(a);
+    const nb = norm(b);
+    if (!na || !nb)
+        return false;
+    if (na === nb)
+        return true;
+    if (allowPrefix && na.length >= 7 && nb.length >= 7 && (na.startsWith(nb) || nb.startsWith(na)))
+        return true;
+    return false;
+}
+/** §1.3 — allow-class for deploy: ALLOW (or WARN only when opted in) + a continue-class action. */
+function isAllowClass(receipt, allowWarnDeploy) {
+    const dec = receipt.decision;
+    const decisionOk = dec === 'ALLOW' || (dec === 'WARN' && allowWarnDeploy === true);
+    if (!decisionOk)
+        return false;
+    const ea = receipt.execution_action;
+    if (ea === undefined || ea === null || ea === '')
+        return true;
+    return ea === 'CONTINUE' || ea === 'CONTINUE_WITH_MONITORING';
+}
+/** target_id must name this service/repository (exact or `svc:`/`repo:`/path/colon suffix). */
+function idMatchesName(targetId, name) {
+    const t = norm(targetId);
+    const r = norm(name);
+    return t === r || t === `svc:${r}` || t === `repo:${r}` || t.endsWith(`:${r}`) || t.endsWith(`/${r}`);
+}
+/**
+ * §1.4 — the normative, first-match-wins deploy decision. Pure; no I/O; deterministic.
+ */
+function deployGate(input) {
+    const target = input.deployTarget || {};
+    const rc = input.requiredContext || {};
+    const enf = rc.enforcement || { enforcement: 'UNKNOWN', bypass_possible: true };
+    const enforcement_state = enf.enforcement;
+    const opRequired = rc.operation ?? 'deploy';
+    const requireEnv = rc.require_bound_environment !== false; // default true
+    const requireArt = rc.require_bound_artifact !== false; // default true
+    const allowPending = input.allowPending ?? rc.allowPending ?? false;
+    const allowWarnDeploy = input.allowWarnDeploy ?? rc.allowWarnDeploy ?? false;
+    const allowPrefix = input.allowPrefixCompare ?? rc.allowPrefixCompare ?? false;
+    const receipt = input.receipt;
+    const detail = {
+        environment: norm(target.environment),
+        artifact_id: norm(target.artifact_id),
+        bound_environment: receipt && receipt.bound_environment != null ? norm(receipt.bound_environment) : null,
+        bound_artifact_id: receipt && receipt.bound_artifact_id != null ? norm(receipt.bound_artifact_id) : null,
+        operation: receipt && receipt.operation != null ? String(receipt.operation) : null,
+    };
+    const deny = (state, reason) => ({
+        deploy_allowed: false, state, reason, enforcement_state, inescapable_deploy: false, detail,
+    });
+    // 0) incomplete target → pending/failure (fail-closed on missing evaluation input).
+    if (!target.environment || String(target.environment).trim() === ''
+        || !target.artifact_id || String(target.artifact_id).trim() === '') {
+        return deny(allowPending ? 'pending' : 'failure', 'inputs_incomplete');
+    }
+    // 1) no receipt → fail-closed (D4).
+    if (receipt === null || receipt === undefined) {
+        return deny(allowPending ? 'pending' : 'failure', 'no_receipt');
+    }
+    // 2) lifecycle authorization — a valid signature alone is NOT sufficient (D5).
+    if (receipt.currently_authorized !== true) {
+        return deny('failure', 'receipt_not_authorized');
+    }
+    // 3) T7 — operation MUST be deploy. A merge (or any other) receipt cannot deploy, and a MISSING
+    //    operation also fails closed (stricter than the merge gate — deploy is higher-risk) (D1).
+    if (receipt.operation == null || norm(receipt.operation) !== norm(opRequired)) {
+        return deny('failure', 'operation_mismatch');
+    }
+    // 4) ENVIRONMENT binding — a staging ALLOW never authorizes production (D2).
+    if (requireEnv) {
+        if (!receipt.bound_environment || !sameNorm(receipt.bound_environment, target.environment, allowPrefix)) {
+            return deny('failure', 'env_mismatch');
+        }
+    }
+    else if (receipt.bound_environment && !sameNorm(receipt.bound_environment, target.environment, allowPrefix)) {
+        return deny('failure', 'env_mismatch');
+    }
+    // 5) ARTIFACT binding — an old artifact's ALLOW never deploys a newer one (D3, the stale analog).
+    if (requireArt) {
+        if (!receipt.bound_artifact_id || !sameNorm(receipt.bound_artifact_id, target.artifact_id, allowPrefix)) {
+            return deny('failure', 'stale_artifact');
+        }
+    }
+    else if (receipt.bound_artifact_id && !sameNorm(receipt.bound_artifact_id, target.artifact_id, allowPrefix)) {
+        return deny('failure', 'stale_artifact');
+    }
+    // 6) optional re-bind to the current change set.
+    if (rc.expected_fingerprint != null && receipt.verdict_fingerprint !== rc.expected_fingerprint) {
+        return deny('failure', 'fingerprint_mismatch');
+    }
+    if (rc.expected_body_hash != null && receipt.body_hash !== rc.expected_body_hash) {
+        return deny('failure', 'body_hash_mismatch');
+    }
+    // 7) optional service / repository target binding.
+    if (rc.service && receipt.target_id) {
+        if (!idMatchesName(receipt.target_id, rc.service))
+            return deny('failure', 'target_mismatch');
+    }
+    else if (rc.repository && receipt.target_id) {
+        if (!idMatchesName(receipt.target_id, rc.repository))
+            return deny('failure', 'target_mismatch');
+    }
+    // 8) decision class — only an allow-class verdict greens the deploy gate (D6).
+    if (!isAllowClass(receipt, allowWarnDeploy)) {
+        return deny('failure', 'decision_not_allow');
+    }
+    // 9) success for the CHECK / pipeline step — green for visibility regardless of enforcement strength.
+    // 10) inescapable_deploy claim (STRICT, §1.4 step 10 / D8): only when the pipeline actually enforces
+    //     the step AND no bypass is possible. Never true otherwise.
+    const inescapable_deploy = enforcement_state === 'ENFORCING' && enf.bypass_possible === false;
+    let residual;
+    if (!inescapable_deploy) {
+        if (enforcement_state === 'ENFORCING')
+            residual = 'bypass_open'; // enforced, but a bypass exists
+        else
+            residual = 'enforcement_not_configured'; // ADVISORY / ABSENT / UNKNOWN
+    }
+    return {
+        deploy_allowed: true,
+        state: 'success',
+        reason: 'allow_current_deploy',
+        enforcement_state,
+        inescapable_deploy,
+        ...(residual ? { residual } : {}),
+        detail,
+    };
+}
+//# sourceMappingURL=deploy-gate.js.map

package/dist/cjs/deploy-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-gate.js","sourceRoot":"","sources":["../../src/deploy-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;AA0IH,gCAiGC;AApID,qGAAqG;AACrG,SAAS,IAAI,CAAC,CAA4B;IACxC,OAAO,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,iGAAiG;AACjG,SAAS,QAAQ,CAAC,CAA4B,EAAE,CAA4B,EAAE,WAAoB;IAChG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,WAAW,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,OAA0B,EAAE,eAAwB;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7B,MAAM,UAAU,GAAG,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC;IACnF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACpC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,KAAK,0BAA0B,CAAC;AAChE,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAY;IACnD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,KAAsB;IAC/C,MAAM,MAAM,GAAiB,KAAK,CAAC,YAAY,IAAK,EAAmB,CAAC;IACxE,MAAM,EAAE,GAA0B,KAAK,CAAC,eAAe,IAAK,EAA4B,CAAC;IACzF,MAAM,GAAG,GAA2B,EAAE,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACxG,MAAM,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC;IAE1C,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC5C,MAAM,UAAU,GAAG,EAAE,CAAC,yBAAyB,KAAK,KAAK,CAAC,CAAC,eAAe;IAC1E,MAAM,UAAU,GAAG,EAAE,CAAC,sBAAsB,KAAK,KAAK,CAAC,CAAI,eAAe;IAC1E,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,IAAI,KAAK,CAAC;IACpE,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,eAAe,IAAI,KAAK,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB,IAAI,KAAK,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACrC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACrC,iBAAiB,EAAE,OAAO,IAAI,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;QACxG,iBAAiB,EAAE,OAAO,IAAI,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;QACxG,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;KACnF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,MAAwB,EAAsB,EAAE,CAAC,CAAC;QACtF,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM;KAC3F,CAAC,CAAC;IAEH,oFAAoF;IACpF,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;WAC9D,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzE,CAAC;IACD,oCAAoC;IACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,+EAA+E;IAC/E,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACnD,CAAC;IACD,gGAAgG;IAChG,8FAA8F;IAC9F,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,6EAA6E;IAC7E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YACxG,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9G,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACzC,CAAC;IACD,kGAAkG;IAClG,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YACxG,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9G,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IACD,iDAAiD;IACjD,IAAI,EAAE,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,oBAAoB,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,EAAE,CAAC,kBAAkB,IAAI,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,mDAAmD;IACnD,IAAI,EAAE,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAClG,CAAC;IACD,+EAA+E;IAC/E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAED,sGAAsG;IACtG,qGAAqG;IACrG,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,iBAAiB,KAAK,WAAW,IAAI,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC;IAE9F,IAAI,QAAsC,CAAC;IAC3C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,IAAI,iBAAiB,KAAK,WAAW;YAAE,QAAQ,GAAG,aAAa,CAAC,CAAQ,gCAAgC;;YACnG,QAAQ,GAAG,4BAA4B,CAAC,CAA0B,8BAA8B;IACvG,CAAC;IAED,OAAO;QACL,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,sBAAsB;QAC9B,iBAAiB;QACjB,kBAAkB;QAClB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/cjs/index.d.ts

@@ -32,4 +32,8 @@ export type { ResolveInput, ResolveConfig, ResolveResult, ResolvedArtifact, Reso
 export { matchGlob, globToRegExp } from './resolver-glob.js';
 export { guardToolRegistry, RegistryConstructionError } from './tool-registry.js';
 export type { RawTool, ProtectedTool, ToolMutationClass, EnforcementCoverage, RegistryCoverageReport, GuardToolRegistryConfig, RegistryResult, ToolBinder, RegistryConstructionErrorCode, } from './tool-registry.js';
+export { gateDecision } from './merge-gate.js';
+export type { GateDecisionInput, GateDecision, ReceiptView, RequiredContext, ProtectionState, GateReason, GateStatusState, EnforcementState, } from './merge-gate.js';
+export { deployGate } from './deploy-gate.js';
+export type { DeployGateInput, DeployGateDecision, DeployReceiptView, DeployRequiredContext, DeployEnforcementState, DeployTarget, DeployGateReason, } from './deploy-gate.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAGxG,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1G,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACL,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EACnF,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAC7E,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,GAC3G,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,QAAQ,GACT,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EACV,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAC7E,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,IAAI,oBAAoB,GAClG,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAClF,YAAY,EACV,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAGxG,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1G,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACL,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EACnF,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAC7E,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,GAC3G,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,QAAQ,GACT,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EACV,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAC7E,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,IAAI,oBAAoB,GAClG,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAClF,YAAY,EACV,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EACV,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAC9E,UAAU,EAAE,eAAe,EAAE,gBAAgB,GAC9C,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EACV,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAC7E,sBAAsB,EAAE,YAAY,EAAE,gBAAgB,GACvD,MAAM,kBAAkB,CAAC"}

package/dist/cjs/index.js

@@ -19,7 +19,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RegistryConstructionError = exports.guardToolRegistry = exports.globToRegExp = exports.matchGlob = exports.resolveArtifacts = exports.deriveKeySignal = exports.pathClass = exports.classifyCommand = exports.projectState = exports.emptySessionState = exports.computeTainted = exports.evaluate = exports.updateSession = exports.SESSION_TAINT_VERSION = exports.SessionTaintTracker = exports.readDecision = exports.computeBundleFingerprint = exports.computeArtifactDigest = exports.evaluateEnvelope = exports.canonicalJson = exports.computeBodyHash = exports.bindReceiptToEnvelope = exports.DETECTOR_VERSION = exports.builtinDetector = exports.guardToolCall = void 0;
+exports.deployGate = exports.gateDecision = exports.RegistryConstructionError = exports.guardToolRegistry = exports.globToRegExp = exports.matchGlob = exports.resolveArtifacts = exports.deriveKeySignal = exports.pathClass = exports.classifyCommand = exports.projectState = exports.emptySessionState = exports.computeTainted = exports.evaluate = exports.updateSession = exports.SESSION_TAINT_VERSION = exports.SessionTaintTracker = exports.readDecision = exports.computeBundleFingerprint = exports.computeArtifactDigest = exports.evaluateEnvelope = exports.canonicalJson = exports.computeBodyHash = exports.bindReceiptToEnvelope = exports.DETECTOR_VERSION = exports.builtinDetector = exports.guardToolCall = void 0;
 var guard_js_1 = require("./guard.js");
 Object.defineProperty(exports, "guardToolCall", { enumerable: true, get: function () { return guard_js_1.guardToolCall; } });
 var detector_js_1 = require("./detector.js");
@@ -61,4 +61,10 @@ Object.defineProperty(exports, "globToRegExp", { enumerable: true, get: function
 var tool_registry_js_1 = require("./tool-registry.js");
 Object.defineProperty(exports, "guardToolRegistry", { enumerable: true, get: function () { return tool_registry_js_1.guardToolRegistry; } });
 Object.defineProperty(exports, "RegistryConstructionError", { enumerable: true, get: function () { return tool_registry_js_1.RegistryConstructionError; } });
+// repo-merge-gate (#7) — the PURE repo-side merge decision (Placement B). No I/O; protection is input.
+var merge_gate_js_1 = require("./merge-gate.js");
+Object.defineProperty(exports, "gateDecision", { enumerable: true, get: function () { return merge_gate_js_1.gateDecision; } });
+// deploy-gate (#8) — the PURE deploy authorization decision. No I/O; pipeline enforcement is input.
+var deploy_gate_js_1 = require("./deploy-gate.js");
+Object.defineProperty(exports, "deployGate", { enumerable: true, get: function () { return deploy_gate_js_1.deployGate; } });
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH,uCAA2C;AAAlC,yGAAA,aAAa,OAAA;AACtB,6CAAkE;AAAzD,8GAAA,eAAe,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAC1C,2FAA2F;AAC3F,2DAA6F;AAApF,2HAAA,qBAAqB,OAAA;AAAE,qHAAA,eAAe,OAAA;AAAE,mHAAA,aAAa,OAAA;AAE9D,sGAAsG;AACtG,+DAA+D;AAC/D,6DAA0G;AAAjG,uHAAA,gBAAgB,OAAA;AAAE,4HAAA,qBAAqB,OAAA;AAAE,+HAAA,wBAAwB,OAAA;AAE1E,sCAA8C;AAArC,mGAAA,YAAY,OAAA;AACrB,+FAA+F;AAC/F,uDAG4B;AAF1B,uHAAA,mBAAmB,OAAA;AAAE,yHAAA,qBAAqB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,4GAAA,QAAQ,OAAA;AAAE,kHAAA,cAAc,OAAA;AACnF,qHAAA,iBAAiB,OAAA;AAAE,gHAAA,YAAY,OAAA;AAAE,mHAAA,eAAe,OAAA;AAAE,6GAAA,SAAS,OAAA;AAAE,mHAAA,eAAe,OAAA;AA2B9E,kGAAkG;AAClG,wFAAwF;AACxF,+DAAqE;AAA5D,wHAAA,OAAO,OAAoB;AAKpC,uDAA6D;AAApD,6GAAA,SAAS,OAAA;AAAE,gHAAA,YAAY,OAAA;AAEhC,qGAAqG;AACrG,uDAAkF;AAAzE,qHAAA,iBAAiB,OAAA;AAAE,6HAAA,yBAAyB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH,uCAA2C;AAAlC,yGAAA,aAAa,OAAA;AACtB,6CAAkE;AAAzD,8GAAA,eAAe,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAC1C,2FAA2F;AAC3F,2DAA6F;AAApF,2HAAA,qBAAqB,OAAA;AAAE,qHAAA,eAAe,OAAA;AAAE,mHAAA,aAAa,OAAA;AAE9D,sGAAsG;AACtG,+DAA+D;AAC/D,6DAA0G;AAAjG,uHAAA,gBAAgB,OAAA;AAAE,4HAAA,qBAAqB,OAAA;AAAE,+HAAA,wBAAwB,OAAA;AAE1E,sCAA8C;AAArC,mGAAA,YAAY,OAAA;AACrB,+FAA+F;AAC/F,uDAG4B;AAF1B,uHAAA,mBAAmB,OAAA;AAAE,yHAAA,qBAAqB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,4GAAA,QAAQ,OAAA;AAAE,kHAAA,cAAc,OAAA;AACnF,qHAAA,iBAAiB,OAAA;AAAE,gHAAA,YAAY,OAAA;AAAE,mHAAA,eAAe,OAAA;AAAE,6GAAA,SAAS,OAAA;AAAE,mHAAA,eAAe,OAAA;AA2B9E,kGAAkG;AAClG,wFAAwF;AACxF,+DAAqE;AAA5D,wHAAA,OAAO,OAAoB;AAKpC,uDAA6D;AAApD,6GAAA,SAAS,OAAA;AAAE,gHAAA,YAAY,OAAA;AAEhC,qGAAqG;AACrG,uDAAkF;AAAzE,qHAAA,iBAAiB,OAAA;AAAE,6HAAA,yBAAyB,OAAA;AAarD,uGAAuG;AACvG,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AAMrB,oGAAoG;AACpG,mDAA8C;AAArC,4GAAA,UAAU,OAAA"}

package/dist/cjs/merge-gate.d.ts

@@ -0,0 +1,87 @@
+/**
+ * repo-merge-gate (#7) — the PURE gate decision (repo-merge-gate-SPEC §1). Placement B: the repo-side
+ * required-status-check logic that answers "may THIS PR head merge, given the finished receipt and the
+ * observed branch-protection state?"
+ *
+ * This is a PURE function — it performs NO I/O and makes NO GitHub call (branch protection is an
+ * INPUT, observed by the host and passed in). It does NOT re-decide: it reads only the finished
+ * receipt fields (decision / lifecycle authz / binding) — the deterministic verdict stays the
+ * server's (M5). Same inputs → same output (M8).
+ *
+ * Scope honesty is the whole point (§4): `inescapable_merge` is true ONLY in the fully-enforcing,
+ * non-bypassable case. For absent / advisory / unknown protection, or when an admin can bypass the
+ * required check, the check may still be `success` for visibility but `inescapable_merge` is FALSE
+ * with the residual named. It never claims more than the platform actually enforces.
+ *
+ * Public source (ships in the npm package): it references only receipt/protection fields and generic
+ * merge-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or secrets.
+ */
+export type GateStatusState = 'success' | 'failure' | 'pending';
+/** The 14 gate reason codes (§1.1). Success uses allow_current_head; the protection_* / admin_bypass_open
+ *  codes name the honesty residual; server_unreachable is a host-supplied fail-closed policy input. */
+export type GateReason = 'allow_current_head' | 'no_receipt' | 'receipt_not_authorized' | 'stale_head' | 'fingerprint_mismatch' | 'operation_mismatch' | 'target_mismatch' | 'decision_not_allow' | 'body_hash_mismatch' | 'protection_not_configured' | 'protection_advisory_only' | 'admin_bypass_open' | 'inputs_incomplete' | 'server_unreachable';
+export type EnforcementState = 'ENFORCING' | 'ADVISORY' | 'UNKNOWN' | 'ABSENT';
+/** A view of the finished receipt (fields already produced by the server + lifecycle evaluation).
+ *  Reuses the shipped field names — the gate never re-derives any of them. */
+export type ReceiptView = {
+    /** Lifecycle authorization result (NOT signature validity alone). */
+    currently_authorized: boolean;
+    authz_reason?: string;
+    decision: 'ALLOW' | 'WARN' | 'REQUIRE_APPROVAL' | 'BLOCK' | string;
+    execution_action?: 'CONTINUE' | 'CONTINUE_WITH_MONITORING' | 'REQUEST_APPROVAL' | 'STOP' | string;
+    /** The PR head commit this receipt was issued for (required for a non-null receipt). */
+    bound_head_sha: string;
+    verdict_fingerprint?: string;
+    body_hash?: string;
+    operation?: 'merge' | 'deploy' | 'tool_call' | 'publish' | string;
+    target_id?: string;
+    environment?: string;
+    /** Structural signature ok — NOT sufficient alone (currently_authorized is the gate). */
+    signature_valid?: boolean;
+};
+/** Branch-protection observation (from the host's GitHub read — the pure gate consumes it as input). */
+export type ProtectionState = {
+    enforcement: EnforcementState;
+    admin_bypass_possible: boolean;
+    required_context_name?: string;
+};
+export type RequiredContext = {
+    operation?: string;
+    repository?: string;
+    expected_fingerprint?: string;
+    expected_body_hash?: string;
+    protection: ProtectionState;
+    allowWarnMerge?: boolean;
+    allowPrefixCompare?: boolean;
+    allowPending?: boolean;
+};
+export type GateDecisionInput = {
+    prHeadSha: string;
+    receipt: ReceiptView | null;
+    requiredContext: RequiredContext;
+    /** Incomplete/no-receipt → pending when true, else failure (default false). */
+    allowPending?: boolean;
+    /** Green the gate on WARN as well as ALLOW (default false). */
+    allowWarnMerge?: boolean;
+    /** Compare head SHAs by prefix instead of full 40-char equality (default false). */
+    allowPrefixCompare?: boolean;
+};
+export type GateDecision = {
+    merge_allowed: boolean;
+    state: GateStatusState;
+    reason: GateReason;
+    enforcement_state: EnforcementState;
+    inescapable_merge: boolean;
+    /** Named residual when the check is green but NOT inescapable (honesty channel, §4.2). */
+    residual?: GateReason;
+    detail: {
+        prHeadSha: string;
+        bound_head_sha: string | null;
+        decision: string | null;
+    };
+};
+/**
+ * §1.4 — the normative, first-match-wins gate decision. Pure; no I/O; deterministic.
+ */
+export declare function gateDecision(input: GateDecisionInput): GateDecision;
+//# sourceMappingURL=merge-gate.d.ts.map

package/dist/cjs/merge-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-gate.d.ts","sourceRoot":"","sources":["../../src/merge-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhE;uGACuG;AACvG,MAAM,MAAM,UAAU,GAClB,oBAAoB,GACpB,YAAY,GACZ,wBAAwB,GACxB,YAAY,GACZ,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,GAC3B,0BAA0B,GAC1B,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/E;8EAC8E;AAC9E,MAAM,MAAM,WAAW,GAAG;IACxB,qEAAqE;IACrE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;IACnE,gBAAgB,CAAC,EAAE,UAAU,GAAG,0BAA0B,GAAG,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;IAClG,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,wGAAwG;AACxG,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,eAAe,CAAC;IAE5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACvF,CAAC;AAkCF;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CA6EnE"}

package/dist/cjs/merge-gate.js

@@ -0,0 +1,133 @@
+"use strict";
+/**
+ * repo-merge-gate (#7) — the PURE gate decision (repo-merge-gate-SPEC §1). Placement B: the repo-side
+ * required-status-check logic that answers "may THIS PR head merge, given the finished receipt and the
+ * observed branch-protection state?"
+ *
+ * This is a PURE function — it performs NO I/O and makes NO GitHub call (branch protection is an
+ * INPUT, observed by the host and passed in). It does NOT re-decide: it reads only the finished
+ * receipt fields (decision / lifecycle authz / binding) — the deterministic verdict stays the
+ * server's (M5). Same inputs → same output (M8).
+ *
+ * Scope honesty is the whole point (§4): `inescapable_merge` is true ONLY in the fully-enforcing,
+ * non-bypassable case. For absent / advisory / unknown protection, or when an admin can bypass the
+ * required check, the check may still be `success` for visibility but `inescapable_merge` is FALSE
+ * with the residual named. It never claims more than the platform actually enforces.
+ *
+ * Public source (ships in the npm package): it references only receipt/protection fields and generic
+ * merge-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or secrets.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gateDecision = gateDecision;
+// ── helpers (pure) ────────────────────────────────────────────────────────────────────────────────
+function normSha(s) {
+    return String(s == null ? '' : s).trim().toLowerCase();
+}
+/** §1.2 — full lowercase SHA equality by default; prefix comparison is opt-in. */
+function sameHead(a, b, allowPrefix) {
+    const na = normSha(a);
+    const nb = normSha(b);
+    if (!na || !nb)
+        return false;
+    if (na === nb)
+        return true;
+    if (allowPrefix && na.length >= 7 && nb.length >= 7 && (na.startsWith(nb) || nb.startsWith(na)))
+        return true;
+    return false;
+}
+/** §1.3 — allow-class for the merge gate: ALLOW (or WARN only when opted in) + a continue-class action. */
+function isAllowClass(receipt, allowWarnMerge) {
+    const dec = receipt.decision;
+    const decisionOk = dec === 'ALLOW' || (dec === 'WARN' && allowWarnMerge === true);
+    if (!decisionOk)
+        return false;
+    const ea = receipt.execution_action;
+    if (ea === undefined || ea === null || ea === '')
+        return true; // decision already allow-class, no action to contradict it
+    return ea === 'CONTINUE' || ea === 'CONTINUE_WITH_MONITORING';
+}
+/** Target/repo binding: the receipt's target must name this repository (exact or `repo:`/path/colon suffix). */
+function targetMatches(targetId, repository) {
+    const t = String(targetId).toLowerCase();
+    const r = String(repository).toLowerCase();
+    return t === r || t === `repo:${r}` || t.endsWith(`:${r}`) || t.endsWith(`/${r}`);
+}
+/**
+ * §1.4 — the normative, first-match-wins gate decision. Pure; no I/O; deterministic.
+ */
+function gateDecision(input) {
+    const rc = input.requiredContext || {};
+    const protection = rc.protection || { enforcement: 'UNKNOWN', admin_bypass_possible: true };
+    const enforcement_state = protection.enforcement;
+    const allowPending = input.allowPending ?? rc.allowPending ?? false;
+    const allowWarnMerge = input.allowWarnMerge ?? rc.allowWarnMerge ?? false;
+    const allowPrefix = input.allowPrefixCompare ?? rc.allowPrefixCompare ?? false;
+    const receipt = input.receipt;
+    const detail = {
+        prHeadSha: normSha(input.prHeadSha),
+        bound_head_sha: receipt ? normSha(receipt.bound_head_sha) : null,
+        decision: receipt ? String(receipt.decision) : null,
+    };
+    const fail = (state, reason) => ({
+        merge_allowed: false, state, reason, enforcement_state, inescapable_merge: false, detail,
+    });
+    // 1) incomplete head → pending/failure (fail-closed on missing evaluation input).
+    if (!input.prHeadSha || String(input.prHeadSha).trim() === '') {
+        return fail(allowPending ? 'pending' : 'failure', 'inputs_incomplete');
+    }
+    // 2) no receipt → fail-closed (M2).
+    if (receipt === null || receipt === undefined) {
+        return fail(allowPending ? 'pending' : 'failure', 'no_receipt');
+    }
+    // 3) lifecycle authorization — a valid signature alone is NOT sufficient (M3).
+    if (receipt.currently_authorized !== true) {
+        return fail('failure', 'receipt_not_authorized');
+    }
+    // 4) operation binding — a receipt for a different operation does not authorize this gate.
+    const op = rc.operation ?? 'merge';
+    if (receipt.operation != null && receipt.operation !== op) {
+        return fail('failure', 'operation_mismatch');
+    }
+    // 5) STALE HEAD — the central invariant: a receipt bound to an old head never greens a new one (M1).
+    if (!sameHead(receipt.bound_head_sha, input.prHeadSha, allowPrefix)) {
+        return fail('failure', 'stale_head');
+    }
+    // 6) optional re-bind to the current change set.
+    if (rc.expected_fingerprint != null && receipt.verdict_fingerprint !== rc.expected_fingerprint) {
+        return fail('failure', 'fingerprint_mismatch');
+    }
+    if (rc.expected_body_hash != null && receipt.body_hash !== rc.expected_body_hash) {
+        return fail('failure', 'body_hash_mismatch');
+    }
+    // 7) target / repository binding (only when both sides are present).
+    if (rc.repository && receipt.target_id && !targetMatches(receipt.target_id, rc.repository)) {
+        return fail('failure', 'target_mismatch');
+    }
+    // 8) decision class — only an allow-class verdict greens the merge gate (M4).
+    if (!isAllowClass(receipt, allowWarnMerge)) {
+        return fail('failure', 'decision_not_allow');
+    }
+    // 9) success for the CHECK — green for visibility regardless of protection strength.
+    // 10) inescapable_merge claim (STRICT, §1.4 step 10 / M6): only when the platform actually enforces
+    //     the required check AND no admin can bypass it. Never true otherwise.
+    const inescapable_merge = enforcement_state === 'ENFORCING' && protection.admin_bypass_possible === false;
+    let residual;
+    if (!inescapable_merge) {
+        if (enforcement_state === 'ENFORCING')
+            residual = 'admin_bypass_open'; // required, but admins can override
+        else if (enforcement_state === 'ADVISORY')
+            residual = 'protection_advisory_only'; // posted but not required
+        else
+            residual = 'protection_not_configured'; // ABSENT or UNKNOWN — cannot attest
+    }
+    return {
+        merge_allowed: true,
+        state: 'success',
+        reason: 'allow_current_head',
+        enforcement_state,
+        inescapable_merge,
+        ...(residual ? { residual } : {}),
+        detail,
+    };
+}
+//# sourceMappingURL=merge-gate.js.map

package/dist/cjs/merge-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-gate.js","sourceRoot":"","sources":["../../src/merge-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAwHH,oCA6EC;AAhHD,qGAAqG;AACrG,SAAS,OAAO,CAAC,CAA4B;IAC3C,OAAO,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,kFAAkF;AAClF,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAE,WAAoB;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,WAAW,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2GAA2G;AAC3G,SAAS,YAAY,CAAC,OAAoB,EAAE,cAAuB;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7B,MAAM,UAAU,GAAG,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,cAAc,KAAK,IAAI,CAAC,CAAC;IAClF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACpC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,2DAA2D;IAC1H,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,KAAK,0BAA0B,CAAC;AAChE,CAAC;AAED,gHAAgH;AAChH,SAAS,aAAa,CAAC,QAAgB,EAAE,UAAkB;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,KAAwB;IACnD,MAAM,EAAE,GAAoB,KAAK,CAAC,eAAe,IAAK,EAAsB,CAAC;IAC7E,MAAM,UAAU,GAAoB,EAAE,CAAC,UAAU,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC7G,MAAM,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAC;IAEjD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,IAAI,KAAK,CAAC;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,cAAc,IAAI,KAAK,CAAC;IAC1E,MAAM,WAAW,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB,IAAI,KAAK,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACnC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;QAChE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;KACpD,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,MAAkB,EAAgB,EAAE,CAAC,CAAC;QAC1E,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM;KACzF,CAAC,CAAC;IAEH,kFAAkF;IAClF,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzE,CAAC;IACD,oCAAoC;IACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,+EAA+E;IAC/E,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACnD,CAAC;IACD,2FAA2F;IAC3F,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,IAAI,OAAO,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,qGAAqG;IACrG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC;IACD,iDAAiD;IACjD,IAAI,EAAE,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,oBAAoB,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,EAAE,CAAC,kBAAkB,IAAI,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,qEAAqE;IACrE,IAAI,EAAE,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,8EAA8E;IAC9E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAED,qFAAqF;IACrF,oGAAoG;IACpG,2EAA2E;IAC3E,MAAM,iBAAiB,GAAG,iBAAiB,KAAK,WAAW,IAAI,UAAU,CAAC,qBAAqB,KAAK,KAAK,CAAC;IAE1G,IAAI,QAAgC,CAAC;IACrC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,IAAI,iBAAiB,KAAK,WAAW;YAAE,QAAQ,GAAG,mBAAmB,CAAC,CAAU,oCAAoC;aAC/G,IAAI,iBAAiB,KAAK,UAAU;YAAE,QAAQ,GAAG,0BAA0B,CAAC,CAAC,0BAA0B;;YACvG,QAAQ,GAAG,2BAA2B,CAAC,CAAqC,oCAAoC;IACvH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,oBAAoB;QAC5B,iBAAiB;QACjB,iBAAiB;QACjB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/esm/deploy-gate.d.ts

@@ -0,0 +1,103 @@
+/**
+ * deploy-gate (#8) — the PURE deploy authorization decision (deploy-gate-SPEC §1). The DEPLOY sibling
+ * of the merge gate: it answers "may THIS artifact deploy to THIS environment, given the finished
+ * receipt and the observed pipeline-enforcement state?"
+ *
+ * Same shape as the merge gate, different operation. It is a PURE function — NO I/O, NO CD-API call
+ * (pipeline enforcement is an INPUT, observed by the host and passed in). It does NOT re-decide: it
+ * reads only the finished receipt fields — the deterministic verdict stays the server's (D7). Same
+ * inputs → same output (D9).
+ *
+ * The three deploy-specific binds are the whole point: T7 (a MERGE — or operation-less — receipt can
+ * never deploy), environment binding (a staging ALLOW never authorizes production), and artifact
+ * binding (an old artifact's ALLOW never deploys a newer one). Scope honesty mirrors the merge gate:
+ * `inescapable_deploy` is true ONLY in the fully-enforcing, non-bypassable case; otherwise the check
+ * may be `success` for visibility but the claim is false with the residual named.
+ *
+ * Public source (ships in the npm package): references only receipt/target/enforcement fields and
+ * generic deploy-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or
+ * secrets.
+ */
+import type { GateStatusState, EnforcementState } from './merge-gate.js';
+export type { GateStatusState, EnforcementState } from './merge-gate.js';
+/** The 13 deploy-gate reason codes (§1.1). Success uses allow_current_deploy; enforcement_not_configured
+ *  and bypass_open name the honesty residual on an otherwise-green check. */
+export type DeployGateReason = 'allow_current_deploy' | 'no_receipt' | 'receipt_not_authorized' | 'operation_mismatch' | 'env_mismatch' | 'stale_artifact' | 'fingerprint_mismatch' | 'body_hash_mismatch' | 'target_mismatch' | 'decision_not_allow' | 'inputs_incomplete' | 'enforcement_not_configured' | 'bypass_open';
+/** What is being deployed — all fields are INPUTS (the pure function performs no discovery). */
+export type DeployTarget = {
+    environment: string;
+    /** Immutable artifact identity: content digest, or a commit SHA when that is the deploy unit. */
+    artifact_id: string;
+    service?: string;
+    pipeline_run_id?: string;
+};
+/** A view of the finished receipt. Reuses the shipped field names + the deploy analogs of bound_head_sha. */
+export type DeployReceiptView = {
+    currently_authorized: boolean;
+    authz_reason?: string;
+    decision: 'ALLOW' | 'WARN' | 'REQUIRE_APPROVAL' | 'BLOCK' | string;
+    execution_action?: 'CONTINUE' | 'CONTINUE_WITH_MONITORING' | 'REQUEST_APPROVAL' | 'STOP' | string;
+    /** MUST be 'deploy' for success (T7). */
+    operation?: 'merge' | 'deploy' | 'tool_call' | 'publish' | string;
+    /** The environment this receipt authorizes (deploy analog of bound_head_sha). */
+    bound_environment?: string | null;
+    /** The artifact/commit this receipt was issued for (deploy analog of bound_head_sha). */
+    bound_artifact_id?: string | null;
+    verdict_fingerprint?: string;
+    body_hash?: string;
+    target_id?: string;
+    signature_valid?: boolean;
+};
+/** Pipeline-enforcement observation (from the host's CD-config read — the pure gate consumes it). */
+export type DeployEnforcementState = {
+    enforcement: EnforcementState;
+    bypass_possible: boolean;
+    required_step_name?: string;
+};
+export type DeployRequiredContext = {
+    operation?: 'deploy' | string;
+    repository?: string;
+    service?: string;
+    expected_fingerprint?: string;
+    expected_body_hash?: string;
+    enforcement: DeployEnforcementState;
+    /** Default true: a missing bound_environment on the receipt → env_mismatch. */
+    require_bound_environment?: boolean;
+    /** Default true: a missing bound_artifact_id → stale_artifact. */
+    require_bound_artifact?: boolean;
+    allowWarnDeploy?: boolean;
+    allowPrefixCompare?: boolean;
+    allowPending?: boolean;
+};
+export type DeployGateInput = {
+    deployTarget: DeployTarget;
+    receipt: DeployReceiptView | null;
+    requiredContext: DeployRequiredContext;
+    /** Incomplete/no-receipt → pending when true, else failure (default false). */
+    allowPending?: boolean;
+    /** Green the gate on WARN as well as ALLOW (default false; stricter for prod-shaped envs). */
+    allowWarnDeploy?: boolean;
+    /** Compare env/artifact by prefix instead of full equality (default false). */
+    allowPrefixCompare?: boolean;
+};
+export type DeployGateDecision = {
+    deploy_allowed: boolean;
+    state: GateStatusState;
+    reason: DeployGateReason;
+    enforcement_state: EnforcementState;
+    inescapable_deploy: boolean;
+    /** Named residual when the check is green but NOT inescapable (honesty channel, §3.2). */
+    residual?: DeployGateReason;
+    detail: {
+        environment: string;
+        artifact_id: string;
+        bound_environment: string | null;
+        bound_artifact_id: string | null;
+        operation: string | null;
+    };
+};
+/**
+ * §1.4 — the normative, first-match-wins deploy decision. Pure; no I/O; deterministic.
+ */
+export declare function deployGate(input: DeployGateInput): DeployGateDecision;
+//# sourceMappingURL=deploy-gate.d.ts.map

package/dist/esm/deploy-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-gate.d.ts","sourceRoot":"","sources":["../../src/deploy-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEzE;6EAC6E;AAC7E,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,YAAY,GACZ,wBAAwB,GACxB,oBAAoB,GACpB,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,mBAAmB,GACnB,4BAA4B,GAC5B,aAAa,CAAC;AAElB,gGAAgG;AAChG,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,6GAA6G;AAC7G,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;IACnE,gBAAgB,CAAC,EAAE,UAAU,GAAG,0BAA0B,GAAG,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;IAClG,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;IAClE,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,yFAAyF;IACzF,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,qGAAqG;AACrG,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,sBAAsB,CAAC;IACpC,+EAA+E;IAC/E,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,kEAAkE;IAClE,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAEjC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,qBAAqB,CAAC;IACvC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;CACH,CAAC;AAkCF;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,CAiGrE"}

package/dist/esm/deploy-gate.js

@@ -0,0 +1,156 @@
+/**
+ * deploy-gate (#8) — the PURE deploy authorization decision (deploy-gate-SPEC §1). The DEPLOY sibling
+ * of the merge gate: it answers "may THIS artifact deploy to THIS environment, given the finished
+ * receipt and the observed pipeline-enforcement state?"
+ *
+ * Same shape as the merge gate, different operation. It is a PURE function — NO I/O, NO CD-API call
+ * (pipeline enforcement is an INPUT, observed by the host and passed in). It does NOT re-decide: it
+ * reads only the finished receipt fields — the deterministic verdict stays the server's (D7). Same
+ * inputs → same output (D9).
+ *
+ * The three deploy-specific binds are the whole point: T7 (a MERGE — or operation-less — receipt can
+ * never deploy), environment binding (a staging ALLOW never authorizes production), and artifact
+ * binding (an old artifact's ALLOW never deploys a newer one). Scope honesty mirrors the merge gate:
+ * `inescapable_deploy` is true ONLY in the fully-enforcing, non-bypassable case; otherwise the check
+ * may be `success` for visibility but the claim is false with the residual named.
+ *
+ * Public source (ships in the npm package): references only receipt/target/enforcement fields and
+ * generic deploy-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or
+ * secrets.
+ */
+// ── helpers (pure) ────────────────────────────────────────────────────────────────────────────────
+function norm(s) {
+    return String(s == null ? '' : s).trim().toLowerCase();
+}
+/** §1.2 — full lowercase equality by default (env exact; artifact digest/sha); prefix opt-in. */
+function sameNorm(a, b, allowPrefix) {
+    const na = norm(a);
+    const nb = norm(b);
+    if (!na || !nb)
+        return false;
+    if (na === nb)
+        return true;
+    if (allowPrefix && na.length >= 7 && nb.length >= 7 && (na.startsWith(nb) || nb.startsWith(na)))
+        return true;
+    return false;
+}
+/** §1.3 — allow-class for deploy: ALLOW (or WARN only when opted in) + a continue-class action. */
+function isAllowClass(receipt, allowWarnDeploy) {
+    const dec = receipt.decision;
+    const decisionOk = dec === 'ALLOW' || (dec === 'WARN' && allowWarnDeploy === true);
+    if (!decisionOk)
+        return false;
+    const ea = receipt.execution_action;
+    if (ea === undefined || ea === null || ea === '')
+        return true;
+    return ea === 'CONTINUE' || ea === 'CONTINUE_WITH_MONITORING';
+}
+/** target_id must name this service/repository (exact or `svc:`/`repo:`/path/colon suffix). */
+function idMatchesName(targetId, name) {
+    const t = norm(targetId);
+    const r = norm(name);
+    return t === r || t === `svc:${r}` || t === `repo:${r}` || t.endsWith(`:${r}`) || t.endsWith(`/${r}`);
+}
+/**
+ * §1.4 — the normative, first-match-wins deploy decision. Pure; no I/O; deterministic.
+ */
+export function deployGate(input) {
+    const target = input.deployTarget || {};
+    const rc = input.requiredContext || {};
+    const enf = rc.enforcement || { enforcement: 'UNKNOWN', bypass_possible: true };
+    const enforcement_state = enf.enforcement;
+    const opRequired = rc.operation ?? 'deploy';
+    const requireEnv = rc.require_bound_environment !== false; // default true
+    const requireArt = rc.require_bound_artifact !== false; // default true
+    const allowPending = input.allowPending ?? rc.allowPending ?? false;
+    const allowWarnDeploy = input.allowWarnDeploy ?? rc.allowWarnDeploy ?? false;
+    const allowPrefix = input.allowPrefixCompare ?? rc.allowPrefixCompare ?? false;
+    const receipt = input.receipt;
+    const detail = {
+        environment: norm(target.environment),
+        artifact_id: norm(target.artifact_id),
+        bound_environment: receipt && receipt.bound_environment != null ? norm(receipt.bound_environment) : null,
+        bound_artifact_id: receipt && receipt.bound_artifact_id != null ? norm(receipt.bound_artifact_id) : null,
+        operation: receipt && receipt.operation != null ? String(receipt.operation) : null,
+    };
+    const deny = (state, reason) => ({
+        deploy_allowed: false, state, reason, enforcement_state, inescapable_deploy: false, detail,
+    });
+    // 0) incomplete target → pending/failure (fail-closed on missing evaluation input).
+    if (!target.environment || String(target.environment).trim() === ''
+        || !target.artifact_id || String(target.artifact_id).trim() === '') {
+        return deny(allowPending ? 'pending' : 'failure', 'inputs_incomplete');
+    }
+    // 1) no receipt → fail-closed (D4).
+    if (receipt === null || receipt === undefined) {
+        return deny(allowPending ? 'pending' : 'failure', 'no_receipt');
+    }
+    // 2) lifecycle authorization — a valid signature alone is NOT sufficient (D5).
+    if (receipt.currently_authorized !== true) {
+        return deny('failure', 'receipt_not_authorized');
+    }
+    // 3) T7 — operation MUST be deploy. A merge (or any other) receipt cannot deploy, and a MISSING
+    //    operation also fails closed (stricter than the merge gate — deploy is higher-risk) (D1).
+    if (receipt.operation == null || norm(receipt.operation) !== norm(opRequired)) {
+        return deny('failure', 'operation_mismatch');
+    }
+    // 4) ENVIRONMENT binding — a staging ALLOW never authorizes production (D2).
+    if (requireEnv) {
+        if (!receipt.bound_environment || !sameNorm(receipt.bound_environment, target.environment, allowPrefix)) {
+            return deny('failure', 'env_mismatch');
+        }
+    }
+    else if (receipt.bound_environment && !sameNorm(receipt.bound_environment, target.environment, allowPrefix)) {
+        return deny('failure', 'env_mismatch');
+    }
+    // 5) ARTIFACT binding — an old artifact's ALLOW never deploys a newer one (D3, the stale analog).
+    if (requireArt) {
+        if (!receipt.bound_artifact_id || !sameNorm(receipt.bound_artifact_id, target.artifact_id, allowPrefix)) {
+            return deny('failure', 'stale_artifact');
+        }
+    }
+    else if (receipt.bound_artifact_id && !sameNorm(receipt.bound_artifact_id, target.artifact_id, allowPrefix)) {
+        return deny('failure', 'stale_artifact');
+    }
+    // 6) optional re-bind to the current change set.
+    if (rc.expected_fingerprint != null && receipt.verdict_fingerprint !== rc.expected_fingerprint) {
+        return deny('failure', 'fingerprint_mismatch');
+    }
+    if (rc.expected_body_hash != null && receipt.body_hash !== rc.expected_body_hash) {
+        return deny('failure', 'body_hash_mismatch');
+    }
+    // 7) optional service / repository target binding.
+    if (rc.service && receipt.target_id) {
+        if (!idMatchesName(receipt.target_id, rc.service))
+            return deny('failure', 'target_mismatch');
+    }
+    else if (rc.repository && receipt.target_id) {
+        if (!idMatchesName(receipt.target_id, rc.repository))
+            return deny('failure', 'target_mismatch');
+    }
+    // 8) decision class — only an allow-class verdict greens the deploy gate (D6).
+    if (!isAllowClass(receipt, allowWarnDeploy)) {
+        return deny('failure', 'decision_not_allow');
+    }
+    // 9) success for the CHECK / pipeline step — green for visibility regardless of enforcement strength.
+    // 10) inescapable_deploy claim (STRICT, §1.4 step 10 / D8): only when the pipeline actually enforces
+    //     the step AND no bypass is possible. Never true otherwise.
+    const inescapable_deploy = enforcement_state === 'ENFORCING' && enf.bypass_possible === false;
+    let residual;
+    if (!inescapable_deploy) {
+        if (enforcement_state === 'ENFORCING')
+            residual = 'bypass_open'; // enforced, but a bypass exists
+        else
+            residual = 'enforcement_not_configured'; // ADVISORY / ABSENT / UNKNOWN
+    }
+    return {
+        deploy_allowed: true,
+        state: 'success',
+        reason: 'allow_current_deploy',
+        enforcement_state,
+        inescapable_deploy,
+        ...(residual ? { residual } : {}),
+        detail,
+    };
+}
+//# sourceMappingURL=deploy-gate.js.map

package/dist/esm/deploy-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-gate.js","sourceRoot":"","sources":["../../src/deploy-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAuGH,qGAAqG;AACrG,SAAS,IAAI,CAAC,CAA4B;IACxC,OAAO,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,iGAAiG;AACjG,SAAS,QAAQ,CAAC,CAA4B,EAAE,CAA4B,EAAE,WAAoB;IAChG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,WAAW,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,OAA0B,EAAE,eAAwB;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7B,MAAM,UAAU,GAAG,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC;IACnF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACpC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,KAAK,0BAA0B,CAAC;AAChE,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAY;IACnD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,MAAM,MAAM,GAAiB,KAAK,CAAC,YAAY,IAAK,EAAmB,CAAC;IACxE,MAAM,EAAE,GAA0B,KAAK,CAAC,eAAe,IAAK,EAA4B,CAAC;IACzF,MAAM,GAAG,GAA2B,EAAE,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACxG,MAAM,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC;IAE1C,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC5C,MAAM,UAAU,GAAG,EAAE,CAAC,yBAAyB,KAAK,KAAK,CAAC,CAAC,eAAe;IAC1E,MAAM,UAAU,GAAG,EAAE,CAAC,sBAAsB,KAAK,KAAK,CAAC,CAAI,eAAe;IAC1E,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,IAAI,KAAK,CAAC;IACpE,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,eAAe,IAAI,KAAK,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB,IAAI,KAAK,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACrC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACrC,iBAAiB,EAAE,OAAO,IAAI,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;QACxG,iBAAiB,EAAE,OAAO,IAAI,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;QACxG,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;KACnF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,MAAwB,EAAsB,EAAE,CAAC,CAAC;QACtF,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM;KAC3F,CAAC,CAAC;IAEH,oFAAoF;IACpF,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;WAC9D,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzE,CAAC;IACD,oCAAoC;IACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,+EAA+E;IAC/E,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACnD,CAAC;IACD,gGAAgG;IAChG,8FAA8F;IAC9F,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,6EAA6E;IAC7E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YACxG,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9G,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACzC,CAAC;IACD,kGAAkG;IAClG,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YACxG,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9G,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IACD,iDAAiD;IACjD,IAAI,EAAE,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,oBAAoB,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,EAAE,CAAC,kBAAkB,IAAI,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,mDAAmD;IACnD,IAAI,EAAE,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAClG,CAAC;IACD,+EAA+E;IAC/E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAED,sGAAsG;IACtG,qGAAqG;IACrG,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,iBAAiB,KAAK,WAAW,IAAI,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC;IAE9F,IAAI,QAAsC,CAAC;IAC3C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,IAAI,iBAAiB,KAAK,WAAW;YAAE,QAAQ,GAAG,aAAa,CAAC,CAAQ,gCAAgC;;YACnG,QAAQ,GAAG,4BAA4B,CAAC,CAA0B,8BAA8B;IACvG,CAAC;IAED,OAAO;QACL,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,sBAAsB;QAC9B,iBAAiB;QACjB,kBAAkB;QAClB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/esm/index.d.ts

@@ -32,4 +32,8 @@ export type { ResolveInput, ResolveConfig, ResolveResult, ResolvedArtifact, Reso
 export { matchGlob, globToRegExp } from './resolver-glob.js';
 export { guardToolRegistry, RegistryConstructionError } from './tool-registry.js';
 export type { RawTool, ProtectedTool, ToolMutationClass, EnforcementCoverage, RegistryCoverageReport, GuardToolRegistryConfig, RegistryResult, ToolBinder, RegistryConstructionErrorCode, } from './tool-registry.js';
+export { gateDecision } from './merge-gate.js';
+export type { GateDecisionInput, GateDecision, ReceiptView, RequiredContext, ProtectionState, GateReason, GateStatusState, EnforcementState, } from './merge-gate.js';
+export { deployGate } from './deploy-gate.js';
+export type { DeployGateInput, DeployGateDecision, DeployReceiptView, DeployRequiredContext, DeployEnforcementState, DeployTarget, DeployGateReason, } from './deploy-gate.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAGxG,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1G,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACL,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EACnF,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAC7E,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,GAC3G,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,QAAQ,GACT,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EACV,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAC7E,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,IAAI,oBAAoB,GAClG,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAClF,YAAY,EACV,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAGxG,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1G,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACL,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EACnF,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAC7E,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,GAC3G,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,QAAQ,GACT,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EACV,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAC7E,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,IAAI,oBAAoB,GAClG,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAClF,YAAY,EACV,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EACV,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAC9E,UAAU,EAAE,eAAe,EAAE,gBAAgB,GAC9C,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EACV,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAC7E,sBAAsB,EAAE,YAAY,EAAE,gBAAgB,GACvD,MAAM,kBAAkB,CAAC"}

package/dist/esm/index.js

@@ -33,4 +33,8 @@ export { resolve as resolveArtifacts } from './artifact-resolver.js';
 export { matchGlob, globToRegExp } from './resolver-glob.js';
 // guardToolRegistry — the agent-runtime inescapability layer ABOVE guardToolCall (Placement A only).
 export { guardToolRegistry, RegistryConstructionError } from './tool-registry.js';
+// repo-merge-gate (#7) — the PURE repo-side merge decision (Placement B). No I/O; protection is input.
+export { gateDecision } from './merge-gate.js';
+// deploy-gate (#8) — the PURE deploy authorization decision. No I/O; pipeline enforcement is input.
+export { deployGate } from './deploy-gate.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,2FAA2F;AAC3F,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE7F,sGAAsG;AACtG,+DAA+D;AAC/D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAE1G,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,+FAA+F;AAC/F,OAAO,EACL,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EACnF,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAC7E,MAAM,oBAAoB,CAAC;AA0B5B,kGAAkG;AAClG,wFAAwF;AACxF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAKrE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE7D,qGAAqG;AACrG,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,2FAA2F;AAC3F,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE7F,sGAAsG;AACtG,+DAA+D;AAC/D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAE1G,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,+FAA+F;AAC/F,OAAO,EACL,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EACnF,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAC7E,MAAM,oBAAoB,CAAC;AA0B5B,kGAAkG;AAClG,wFAAwF;AACxF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAKrE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE7D,qGAAqG;AACrG,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAalF,uGAAuG;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAM/C,oGAAoG;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/esm/merge-gate.d.ts

@@ -0,0 +1,87 @@
+/**
+ * repo-merge-gate (#7) — the PURE gate decision (repo-merge-gate-SPEC §1). Placement B: the repo-side
+ * required-status-check logic that answers "may THIS PR head merge, given the finished receipt and the
+ * observed branch-protection state?"
+ *
+ * This is a PURE function — it performs NO I/O and makes NO GitHub call (branch protection is an
+ * INPUT, observed by the host and passed in). It does NOT re-decide: it reads only the finished
+ * receipt fields (decision / lifecycle authz / binding) — the deterministic verdict stays the
+ * server's (M5). Same inputs → same output (M8).
+ *
+ * Scope honesty is the whole point (§4): `inescapable_merge` is true ONLY in the fully-enforcing,
+ * non-bypassable case. For absent / advisory / unknown protection, or when an admin can bypass the
+ * required check, the check may still be `success` for visibility but `inescapable_merge` is FALSE
+ * with the residual named. It never claims more than the platform actually enforces.
+ *
+ * Public source (ships in the npm package): it references only receipt/protection fields and generic
+ * merge-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or secrets.
+ */
+export type GateStatusState = 'success' | 'failure' | 'pending';
+/** The 14 gate reason codes (§1.1). Success uses allow_current_head; the protection_* / admin_bypass_open
+ *  codes name the honesty residual; server_unreachable is a host-supplied fail-closed policy input. */
+export type GateReason = 'allow_current_head' | 'no_receipt' | 'receipt_not_authorized' | 'stale_head' | 'fingerprint_mismatch' | 'operation_mismatch' | 'target_mismatch' | 'decision_not_allow' | 'body_hash_mismatch' | 'protection_not_configured' | 'protection_advisory_only' | 'admin_bypass_open' | 'inputs_incomplete' | 'server_unreachable';
+export type EnforcementState = 'ENFORCING' | 'ADVISORY' | 'UNKNOWN' | 'ABSENT';
+/** A view of the finished receipt (fields already produced by the server + lifecycle evaluation).
+ *  Reuses the shipped field names — the gate never re-derives any of them. */
+export type ReceiptView = {
+    /** Lifecycle authorization result (NOT signature validity alone). */
+    currently_authorized: boolean;
+    authz_reason?: string;
+    decision: 'ALLOW' | 'WARN' | 'REQUIRE_APPROVAL' | 'BLOCK' | string;
+    execution_action?: 'CONTINUE' | 'CONTINUE_WITH_MONITORING' | 'REQUEST_APPROVAL' | 'STOP' | string;
+    /** The PR head commit this receipt was issued for (required for a non-null receipt). */
+    bound_head_sha: string;
+    verdict_fingerprint?: string;
+    body_hash?: string;
+    operation?: 'merge' | 'deploy' | 'tool_call' | 'publish' | string;
+    target_id?: string;
+    environment?: string;
+    /** Structural signature ok — NOT sufficient alone (currently_authorized is the gate). */
+    signature_valid?: boolean;
+};
+/** Branch-protection observation (from the host's GitHub read — the pure gate consumes it as input). */
+export type ProtectionState = {
+    enforcement: EnforcementState;
+    admin_bypass_possible: boolean;
+    required_context_name?: string;
+};
+export type RequiredContext = {
+    operation?: string;
+    repository?: string;
+    expected_fingerprint?: string;
+    expected_body_hash?: string;
+    protection: ProtectionState;
+    allowWarnMerge?: boolean;
+    allowPrefixCompare?: boolean;
+    allowPending?: boolean;
+};
+export type GateDecisionInput = {
+    prHeadSha: string;
+    receipt: ReceiptView | null;
+    requiredContext: RequiredContext;
+    /** Incomplete/no-receipt → pending when true, else failure (default false). */
+    allowPending?: boolean;
+    /** Green the gate on WARN as well as ALLOW (default false). */
+    allowWarnMerge?: boolean;
+    /** Compare head SHAs by prefix instead of full 40-char equality (default false). */
+    allowPrefixCompare?: boolean;
+};
+export type GateDecision = {
+    merge_allowed: boolean;
+    state: GateStatusState;
+    reason: GateReason;
+    enforcement_state: EnforcementState;
+    inescapable_merge: boolean;
+    /** Named residual when the check is green but NOT inescapable (honesty channel, §4.2). */
+    residual?: GateReason;
+    detail: {
+        prHeadSha: string;
+        bound_head_sha: string | null;
+        decision: string | null;
+    };
+};
+/**
+ * §1.4 — the normative, first-match-wins gate decision. Pure; no I/O; deterministic.
+ */
+export declare function gateDecision(input: GateDecisionInput): GateDecision;
+//# sourceMappingURL=merge-gate.d.ts.map

package/dist/esm/merge-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-gate.d.ts","sourceRoot":"","sources":["../../src/merge-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhE;uGACuG;AACvG,MAAM,MAAM,UAAU,GAClB,oBAAoB,GACpB,YAAY,GACZ,wBAAwB,GACxB,YAAY,GACZ,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,GAC3B,0BAA0B,GAC1B,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/E;8EAC8E;AAC9E,MAAM,MAAM,WAAW,GAAG;IACxB,qEAAqE;IACrE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;IACnE,gBAAgB,CAAC,EAAE,UAAU,GAAG,0BAA0B,GAAG,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;IAClG,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,wGAAwG;AACxG,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,eAAe,CAAC;IAE5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACvF,CAAC;AAkCF;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CA6EnE"}

package/dist/esm/merge-gate.js

@@ -0,0 +1,130 @@
+/**
+ * repo-merge-gate (#7) — the PURE gate decision (repo-merge-gate-SPEC §1). Placement B: the repo-side
+ * required-status-check logic that answers "may THIS PR head merge, given the finished receipt and the
+ * observed branch-protection state?"
+ *
+ * This is a PURE function — it performs NO I/O and makes NO GitHub call (branch protection is an
+ * INPUT, observed by the host and passed in). It does NOT re-decide: it reads only the finished
+ * receipt fields (decision / lifecycle authz / binding) — the deterministic verdict stays the
+ * server's (M5). Same inputs → same output (M8).
+ *
+ * Scope honesty is the whole point (§4): `inescapable_merge` is true ONLY in the fully-enforcing,
+ * non-bypassable case. For absent / advisory / unknown protection, or when an admin can bypass the
+ * required check, the check may still be `success` for visibility but `inescapable_merge` is FALSE
+ * with the residual named. It never claims more than the platform actually enforces.
+ *
+ * Public source (ships in the npm package): it references only receipt/protection fields and generic
+ * merge-gate concepts — no scoring logic, weights, thresholds, pattern names, endpoints, or secrets.
+ */
+// ── helpers (pure) ────────────────────────────────────────────────────────────────────────────────
+function normSha(s) {
+    return String(s == null ? '' : s).trim().toLowerCase();
+}
+/** §1.2 — full lowercase SHA equality by default; prefix comparison is opt-in. */
+function sameHead(a, b, allowPrefix) {
+    const na = normSha(a);
+    const nb = normSha(b);
+    if (!na || !nb)
+        return false;
+    if (na === nb)
+        return true;
+    if (allowPrefix && na.length >= 7 && nb.length >= 7 && (na.startsWith(nb) || nb.startsWith(na)))
+        return true;
+    return false;
+}
+/** §1.3 — allow-class for the merge gate: ALLOW (or WARN only when opted in) + a continue-class action. */
+function isAllowClass(receipt, allowWarnMerge) {
+    const dec = receipt.decision;
+    const decisionOk = dec === 'ALLOW' || (dec === 'WARN' && allowWarnMerge === true);
+    if (!decisionOk)
+        return false;
+    const ea = receipt.execution_action;
+    if (ea === undefined || ea === null || ea === '')
+        return true; // decision already allow-class, no action to contradict it
+    return ea === 'CONTINUE' || ea === 'CONTINUE_WITH_MONITORING';
+}
+/** Target/repo binding: the receipt's target must name this repository (exact or `repo:`/path/colon suffix). */
+function targetMatches(targetId, repository) {
+    const t = String(targetId).toLowerCase();
+    const r = String(repository).toLowerCase();
+    return t === r || t === `repo:${r}` || t.endsWith(`:${r}`) || t.endsWith(`/${r}`);
+}
+/**
+ * §1.4 — the normative, first-match-wins gate decision. Pure; no I/O; deterministic.
+ */
+export function gateDecision(input) {
+    const rc = input.requiredContext || {};
+    const protection = rc.protection || { enforcement: 'UNKNOWN', admin_bypass_possible: true };
+    const enforcement_state = protection.enforcement;
+    const allowPending = input.allowPending ?? rc.allowPending ?? false;
+    const allowWarnMerge = input.allowWarnMerge ?? rc.allowWarnMerge ?? false;
+    const allowPrefix = input.allowPrefixCompare ?? rc.allowPrefixCompare ?? false;
+    const receipt = input.receipt;
+    const detail = {
+        prHeadSha: normSha(input.prHeadSha),
+        bound_head_sha: receipt ? normSha(receipt.bound_head_sha) : null,
+        decision: receipt ? String(receipt.decision) : null,
+    };
+    const fail = (state, reason) => ({
+        merge_allowed: false, state, reason, enforcement_state, inescapable_merge: false, detail,
+    });
+    // 1) incomplete head → pending/failure (fail-closed on missing evaluation input).
+    if (!input.prHeadSha || String(input.prHeadSha).trim() === '') {
+        return fail(allowPending ? 'pending' : 'failure', 'inputs_incomplete');
+    }
+    // 2) no receipt → fail-closed (M2).
+    if (receipt === null || receipt === undefined) {
+        return fail(allowPending ? 'pending' : 'failure', 'no_receipt');
+    }
+    // 3) lifecycle authorization — a valid signature alone is NOT sufficient (M3).
+    if (receipt.currently_authorized !== true) {
+        return fail('failure', 'receipt_not_authorized');
+    }
+    // 4) operation binding — a receipt for a different operation does not authorize this gate.
+    const op = rc.operation ?? 'merge';
+    if (receipt.operation != null && receipt.operation !== op) {
+        return fail('failure', 'operation_mismatch');
+    }
+    // 5) STALE HEAD — the central invariant: a receipt bound to an old head never greens a new one (M1).
+    if (!sameHead(receipt.bound_head_sha, input.prHeadSha, allowPrefix)) {
+        return fail('failure', 'stale_head');
+    }
+    // 6) optional re-bind to the current change set.
+    if (rc.expected_fingerprint != null && receipt.verdict_fingerprint !== rc.expected_fingerprint) {
+        return fail('failure', 'fingerprint_mismatch');
+    }
+    if (rc.expected_body_hash != null && receipt.body_hash !== rc.expected_body_hash) {
+        return fail('failure', 'body_hash_mismatch');
+    }
+    // 7) target / repository binding (only when both sides are present).
+    if (rc.repository && receipt.target_id && !targetMatches(receipt.target_id, rc.repository)) {
+        return fail('failure', 'target_mismatch');
+    }
+    // 8) decision class — only an allow-class verdict greens the merge gate (M4).
+    if (!isAllowClass(receipt, allowWarnMerge)) {
+        return fail('failure', 'decision_not_allow');
+    }
+    // 9) success for the CHECK — green for visibility regardless of protection strength.
+    // 10) inescapable_merge claim (STRICT, §1.4 step 10 / M6): only when the platform actually enforces
+    //     the required check AND no admin can bypass it. Never true otherwise.
+    const inescapable_merge = enforcement_state === 'ENFORCING' && protection.admin_bypass_possible === false;
+    let residual;
+    if (!inescapable_merge) {
+        if (enforcement_state === 'ENFORCING')
+            residual = 'admin_bypass_open'; // required, but admins can override
+        else if (enforcement_state === 'ADVISORY')
+            residual = 'protection_advisory_only'; // posted but not required
+        else
+            residual = 'protection_not_configured'; // ABSENT or UNKNOWN — cannot attest
+    }
+    return {
+        merge_allowed: true,
+        state: 'success',
+        reason: 'allow_current_head',
+        enforcement_state,
+        inescapable_merge,
+        ...(residual ? { residual } : {}),
+        detail,
+    };
+}
+//# sourceMappingURL=merge-gate.js.map

package/dist/esm/merge-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-gate.js","sourceRoot":"","sources":["../../src/merge-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAqFH,qGAAqG;AACrG,SAAS,OAAO,CAAC,CAA4B;IAC3C,OAAO,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,kFAAkF;AAClF,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAE,WAAoB;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,WAAW,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2GAA2G;AAC3G,SAAS,YAAY,CAAC,OAAoB,EAAE,cAAuB;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7B,MAAM,UAAU,GAAG,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,cAAc,KAAK,IAAI,CAAC,CAAC;IAClF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACpC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,2DAA2D;IAC1H,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,KAAK,0BAA0B,CAAC;AAChE,CAAC;AAED,gHAAgH;AAChH,SAAS,aAAa,CAAC,QAAgB,EAAE,UAAkB;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,MAAM,EAAE,GAAoB,KAAK,CAAC,eAAe,IAAK,EAAsB,CAAC;IAC7E,MAAM,UAAU,GAAoB,EAAE,CAAC,UAAU,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC7G,MAAM,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAC;IAEjD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,IAAI,KAAK,CAAC;IACpE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,cAAc,IAAI,KAAK,CAAC;IAC1E,MAAM,WAAW,GAAG,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB,IAAI,KAAK,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACnC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;QAChE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;KACpD,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,MAAkB,EAAgB,EAAE,CAAC,CAAC;QAC1E,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM;KACzF,CAAC,CAAC;IAEH,kFAAkF;IAClF,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzE,CAAC;IACD,oCAAoC;IACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,+EAA+E;IAC/E,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACnD,CAAC;IACD,2FAA2F;IAC3F,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,IAAI,OAAO,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,qGAAqG;IACrG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC;IACD,iDAAiD;IACjD,IAAI,EAAE,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,oBAAoB,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,EAAE,CAAC,kBAAkB,IAAI,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,qEAAqE;IACrE,IAAI,EAAE,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,8EAA8E;IAC9E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAED,qFAAqF;IACrF,oGAAoG;IACpG,2EAA2E;IAC3E,MAAM,iBAAiB,GAAG,iBAAiB,KAAK,WAAW,IAAI,UAAU,CAAC,qBAAqB,KAAK,KAAK,CAAC;IAE1G,IAAI,QAAgC,CAAC;IACrC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,IAAI,iBAAiB,KAAK,WAAW;YAAE,QAAQ,GAAG,mBAAmB,CAAC,CAAU,oCAAoC;aAC/G,IAAI,iBAAiB,KAAK,UAAU;YAAE,QAAQ,GAAG,0BAA0B,CAAC,CAAC,0BAA0B;;YACvG,QAAQ,GAAG,2BAA2B,CAAC,CAAqC,oCAAoC;IACvH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,oBAAoB;QAC5B,iBAAiB;QACjB,iBAAiB;QACjB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coderifts/agent-guard",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "Fail-closed guard for AI agent tool calls — preflight contract changes before they execute. Security core frozen (agent-guard-api v1.0); v1.1 adds client-side enforcement: receipt→envelope binding, decision↔action reconciliation, safe_for_agent + degraded fail-closed, and enforced⟺executed (P0 client-enforcement pack).",
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",