@gate-forge/core 0.10.3 → 0.11.0

package/dist/schemas/business-rules.js

@@ -0,0 +1,227 @@
+/**
+ * Owner-declared BUSINESS RULES (plan 2026-10-05 §4 D1/D2) and the test
+ * type table that decides what proof each rule's declared test type
+ * requires.
+ *
+ * Two deliberate separations:
+ * - A RULE is a DECLARATION, never an obligation. It has no detector
+ *   resource, no contract namespace and no verifier; it is graded by a
+ *   pure evaluator over the run's SEALED facts (see `policy/business-rules.ts`).
+ *   Nothing here mints an obligation id.
+ * - The TYPE TABLE is DATA, one row per supported `test:` value. Proof
+ *   strength follows the type, and a weaker kind never satisfies a
+ *   stronger one. Adding a type later is one row plus its honest proof
+ *   level, never a change to the evaluator.
+ *
+ * The claim id per case is `business-rule:<ruleId>/<caseId>`, which
+ * satisfies the existing `<resourceId>:<contract>` shape so the sidecar
+ * schema is unchanged — the sidecar stores it under the SAME `claims`
+ * list it already uses for obligations.
+ *
+ * YAML parsing stays in the CLI (the existing core/CLI split); this
+ * module speaks validated plain data only.
+ */
+import { z } from 'zod';
+import { SchemaVersionField } from './common.js';
+/** The claim namespace every business-rule case id lives in. */
+export const BUSINESS_RULE_NAMESPACE = 'business-rule';
+/**
+ * The claim id one case is mapped by: `business-rule:<ruleId>/<caseId>`.
+ * Deterministic and stable, so a sidecar entry survives a re-order of
+ * `cases:` and the evaluator can join bindings to cases by string.
+ */
+export function businessRuleClaimId(ruleId, caseId) {
+    return `${BUSINESS_RULE_NAMESPACE}:${ruleId}/${caseId}`;
+}
+/** Whether one claim id belongs to the business-rule namespace. */
+export function isBusinessRuleClaimId(claimId) {
+    return claimId.startsWith(`${BUSINESS_RULE_NAMESPACE}:`);
+}
+/**
+ * The `<ruleId>/<caseId>` pair a business-rule claim id carries, or null
+ * when the id is not a business-rule claim or carries no case part.
+ */
+export function parseBusinessRuleClaimId(claimId) {
+    if (!isBusinessRuleClaimId(claimId))
+        return null;
+    const rest = claimId.slice(`${BUSINESS_RULE_NAMESPACE}:`.length);
+    const slash = rest.lastIndexOf('/');
+    if (slash <= 0 || slash === rest.length - 1)
+        return null;
+    return { ruleId: rest.slice(0, slash), caseId: rest.slice(slash + 1) };
+}
+/** Rule ids are stable, filesystem- and URL-safe slugs. */
+const RULE_ID = /^[a-z0-9][a-z0-9._-]*$/;
+/** Case ids follow the same rule inside their rule. */
+const CASE_ID = /^[a-z0-9][a-z0-9._-]*$/;
+/** The test types this release ships. More are one table row each. */
+export const BUSINESS_RULE_TEST_TYPES = ['e2e', 'pytest'];
+/** One declared observable consequence of a rule (typically both sides). */
+export const BusinessRuleCaseSchema = z
+    .object({
+    /** Case id, unique inside its rule; joined as `<ruleId>/<caseId>`. */
+    id: z.string().regex(CASE_ID, 'case id must match [a-z0-9][a-z0-9._-]*'),
+    /** What the case says must be observed; required (a case with no words cannot be reviewed). */
+    describe: z.string().trim().min(1),
+})
+    .strict();
+/**
+ * Ranking-only hints for `tests suggest`. They NEVER grade: a hint can
+ * promote a candidate, never prove anything, and a rule with no hints
+ * behaves exactly like a rule with them.
+ */
+export const BusinessRuleHintsSchema = z
+    .object({
+    /** URL path globs the proving test is expected to send. */
+    routes: z.array(z.string().min(1)).optional(),
+    /** Repo-relative file globs the proving test is expected to live in. */
+    globs: z.array(z.string().min(1)).optional(),
+})
+    .strict();
+/**
+ * One owner-declared business rule. Every field is a DECLARATION: it
+ * changes the trusted policy digest (the rule lives in the owner-answers
+ * document) and therefore can never be self-approved by an agent.
+ */
+export const BusinessRuleSchema = z
+    .object({
+    /** Stable rule id; unique in the document. */
+    id: z.string().regex(RULE_ID, 'rule id must match [a-z0-9][a-z0-9._-]*'),
+    /** The rule in the owner's own words (required: a rule with no title cannot be reviewed). */
+    title: z.string().trim().min(1),
+    /** Optional longer prose; the title stays the one-line statement. */
+    describe: z.string().trim().min(1).optional(),
+    /** Optional resource name; validated against the run's inventory (never proof). */
+    subject: z.string().trim().min(1).optional(),
+    /** Which kind of test must prove it. `e2e` is the default. */
+    test: z.enum(BUSINESS_RULE_TEST_TYPES).default('e2e'),
+    /** `block` (default) or `advisory`; advisory findings never reach the exit code. */
+    enforcement: z.enum(['block', 'advisory']).default('block'),
+    /** REQUIRED iff `enforcement: advisory` — an advisory with no reason hides itself. */
+    advisoryReason: z.string().trim().min(1).optional(),
+    /** Observable cases; absent means the single implicit case `default`. */
+    cases: z.array(BusinessRuleCaseSchema).min(1).optional(),
+    /** Ranking-only hints for `tests suggest`. */
+    hints: BusinessRuleHintsSchema.optional(),
+})
+    .strict()
+    .superRefine((rule, ctx) => {
+    if (rule.enforcement === 'advisory' && rule.advisoryReason === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['advisoryReason'],
+            message: "rule '" + rule.id + "' is advisory but declares no advisoryReason: an advisory rule must say why it does not block",
+        });
+    }
+    if (rule.enforcement === 'block' && rule.advisoryReason !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['advisoryReason'],
+            message: "rule '" + rule.id + "' blocks but declares advisoryReason: the reason belongs on an advisory rule only",
+        });
+    }
+    const seen = new Set();
+    for (let index = 0; index < (rule.cases ?? []).length; index += 1) {
+        const id = rule.cases?.[index]?.id;
+        if (id === undefined)
+            continue;
+        if (seen.has(id)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['cases', index, 'id'],
+                message: `duplicate case id '${id}' in rule '${rule.id}'`,
+            });
+        }
+        seen.add(id);
+    }
+});
+/**
+ * The `rules:` section. Duplicate rule ids are an ambiguity, not a
+ * last-one-wins: two rules with one id cannot be graded deterministically.
+ */
+export const BusinessRulesSchema = z
+    .array(BusinessRuleSchema)
+    .superRefine((rules, ctx) => {
+    const seen = new Set();
+    for (let index = 0; index < rules.length; index += 1) {
+        const id = rules[index]?.id;
+        if (id === undefined)
+            continue;
+        if (seen.has(id)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: [index, 'id'],
+                message: `duplicate business rule id '${id}' — every rule must be separately addressable`,
+            });
+        }
+        seen.add(id);
+    }
+});
+/** The case id a rule without `cases:` uses. */
+export const IMPLICIT_CASE_ID = 'default';
+/**
+ * The rule's cases with the implicit `default` case materialized. Pure:
+ * a rule that declares cases returns exactly those, in order.
+ */
+export function casesOf(rule) {
+    if (rule.cases !== undefined && rule.cases.length > 0)
+        return [...rule.cases];
+    return [{ id: IMPLICIT_CASE_ID, describe: rule.title }];
+}
+/**
+ * The owners-answers document's RULE section: `rules:` is optional and
+ * an ABSENT section means the feature is off — byte-identical findings,
+ * report and digests to a release without it (plan invariant 1).
+ */
+export const BusinessRulePolicySchema = z
+    .object({
+    /** Owner-declared business rules. */
+    rules: z.array(BusinessRuleSchema),
+})
+    .strict();
+/**
+ * THE type table: one row per supported `test:` value. Proof strength
+ * follows the type, and a weaker kind is never accepted by a stronger
+ * row — `e2e` is never satisfied by `api-e2e`, `server-e2e`, `unit`, a
+ * mocked spec, or a test that did not run.
+ */
+export const BUSINESS_RULE_TYPE_TABLE = Object.freeze({
+    e2e: Object.freeze({
+        id: 'e2e',
+        label: 'e2e',
+        runner: 'playwright',
+        acceptedKinds: Object.freeze(['browser-e2e', 'observed-e2e']),
+        kindChannels: Object.freeze({ 'browser-e2e': 'engine', 'observed-e2e': 'observe' }),
+        defaultChannel: 'observe',
+        requiresWitnessedSuite: false,
+        starter: 'playwright',
+    }),
+    pytest: Object.freeze({
+        id: 'pytest',
+        label: 'pytest',
+        runner: 'pytest',
+        acceptedKinds: Object.freeze(['unit', 'integration', 'server-e2e']),
+        kindChannels: Object.freeze({ unit: 'execution', integration: 'execution', 'server-e2e': 'execution' }),
+        defaultChannel: 'execution',
+        requiresWitnessedSuite: true,
+        starter: 'pytest',
+    }),
+});
+/** The type table as a deterministic list (sorted by type id). */
+export function businessRuleTypeRows() {
+    return [...BUSINESS_RULE_TEST_TYPES].sort().map((id) => BUSINESS_RULE_TYPE_TABLE[id]);
+}
+/**
+ * The per-case status the evaluator reports. `satisfied` carries the
+ * proof channel in its label (`satisfied (observe)`), because "satisfied"
+ * read as "the rule holds" is exactly the overclaim invariant 6 forbids.
+ */
+export const BUSINESS_RULE_CASE_STATUSES = ['unmapped', 'wrong-type', 'unproven', 'failing', 'satisfied'];
+/**
+ * The `rules:` key as it appears in the owner-answers document, named
+ * once so the loader, the migrator and the init template cannot drift.
+ */
+export const BUSINESS_RULES_KEY = 'rules';
+/** The `schemaVersion` every engine document carries. */
+export const BusinessRuleSchemaVersionField = SchemaVersionField;
+//# sourceMappingURL=business-rules.js.map

package/dist/schemas/business-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-rules.js","sourceRoot":"","sources":["../../src/schemas/business-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,gEAAgE;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAAc;IAChE,OAAO,GAAG,uBAAuB,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,uBAAuB,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,uBAAuB,GAAG,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,2DAA2D;AAC3D,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,uDAAuD;AACvD,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAU,CAAC;AAKnE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,sEAAsE;IACtE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,yCAAyC,CAAC;IACxE,+FAA+F;IAC/F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,2DAA2D;IAC3D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,wEAAwE;IACxE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,8CAA8C;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,yCAAyC,CAAC;IACxE,6FAA6F;IAC7F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,mFAAmF;IACnF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,8DAA8D;IAC9D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACrD,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3D,sFAAsF;IACtF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,yEAAyE;IACzE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,8CAA8C;IAC9C,KAAK,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EACL,QAAQ,GAAG,IAAI,CAAC,EAAE,GAAG,+FAA+F;SACvH,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EACL,QAAQ,GAAG,IAAI,CAAC,EAAE,GAAG,mFAAmF;SAC3G,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC5B,OAAO,EAAE,sBAAsB,EAAE,cAAc,IAAI,CAAC,EAAE,GAAG;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,KAAK,CAAC,kBAAkB,CAAC;KACzB,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;gBACnB,OAAO,EAAE,+BAA+B,EAAE,+CAA+C;aAC1F,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,gDAAgD;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAkB;IACxC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,qCAAqC;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAkCZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgE,MAAM,CAAC,MAAM,CAAC;IACjH,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;QACjB,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAC7D,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;QACnF,cAAc,EAAE,SAAS;QACzB,sBAAsB,EAAE,KAAK;QAC7B,OAAO,EAAE,YAAY;KACtB,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;QACnE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACvG,cAAc,EAAE,WAAW;QAC3B,sBAAsB,EAAE,IAAI;QAC5B,OAAO,EAAE,QAAQ;KAClB,CAAC;CACH,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,GAAG,wBAAwB,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AAKnH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,yDAAyD;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,kBAAkB,CAAC"}

package/dist/schemas/classification-policy.d.ts

@@ -124,13 +124,55 @@ export declare const CoverageRuleSchema: z.ZodObject<{
 /** Inferred coverage-rule shape. */
 export type CoverageRule = z.infer<typeof CoverageRuleSchema>;
 /**
- * The classification-policy document: scan roots (complete-scan scope),
- * trusted internal entry-point categories, organization internal rules,
- * the supported source declaration syntax, and volatile fields.
+ * One owner-declared PLANE rule list — the `planes:` section of the
+ * answers document (0.11.0, was `.gateforge/planes.json`). The section
+ * keeps the document shape it always had (`{ rules: [...] }`) so
+ * `gateforge migrate` is a pure text move, but the RULES themselves stay
+ * validated by the pack that applies them (one validation source, the
+ * same fail-closed reader that has always guarded them): this schema
+ * rejects a wrong document SHAPE and the owning reader rejects a wrong
+ * rule. Absent = no plane channel, byte-identical to today.
+ */
+export declare const PlanesSectionSchema: z.ZodObject<{
+    rules: z.ZodArray<z.ZodUnknown>;
+}, z.core.$strict>;
+/** Inferred `planes:` section shape. */
+export type PlanesSection = z.infer<typeof PlanesSectionSchema>;
+/**
+ * One owner-declared ENDPOINT-CAPABILITY rule list — the `endpoints:`
+ * section of the answers document (0.11.0, was `.gateforge/endpoints.json`).
+ * Same posture as {@link PlanesSectionSchema}: shape here, rules validated
+ * by the endpoint compiler that applies them.
+ */
+export declare const EndpointsSectionSchema: z.ZodObject<{
+    rules: z.ZodArray<z.ZodUnknown>;
+}, z.core.$strict>;
+/** Inferred `endpoints:` section shape. */
+export type EndpointsSection = z.infer<typeof EndpointsSectionSchema>;
+/**
+ * Repo-root-relative location of the ONE owner-answers document. Named
+ * once, in the package that owns the document, so every diagnostic that
+ * has to point the owner at a declaration — the refusals, the migrator,
+ * the packs — names the same path.
+ */
+export declare const OWNER_ANSWERS_PATH = ".gateforge/classification-policy.yml";
+/**
+ * The classification-policy document: the ONE owner-answers file
+ * (`.gateforge/classification-policy.yml`, name kept by owner decision).
+ * Since 0.11.0 it holds every owner answer — trusted internal
+ * entry-point categories, organization internal rules, exact lifecycle
+ * disables, delete semantics, plane rules, endpoint capabilities, and
+ * the owner's business `rules:`.
+ *
+ * The SCANNER settings (`scanRoots`, `coverage`, `declarations`,
+ * `volatileFields`) MOVED OUT to `.gateforge.yml` under `scan:`, next to
+ * the other machine-wide declarations. They are no longer accepted here:
+ * a repository still carrying them fails closed naming `gateforge
+ * migrate` rather than silently running on a setting the engine cannot
+ * see.
  */
 export declare const ClassificationPolicySchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
-    scanRoots: z.ZodArray<z.ZodString>;
     trustedInternalEntryPoints: z.ZodArray<z.ZodObject<{
         category: z.ZodString;
         patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -164,14 +206,35 @@ export declare const ClassificationPolicySchema: z.ZodObject<{
         archiveFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
         reason: z.ZodString;
     }, z.core.$strict>>>;
-    coverage: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        capability: z.ZodString;
-        detector: z.ZodString;
-        appliesTo: z.ZodArray<z.ZodString>;
-        exhaustive: z.ZodOptional<z.ZodBoolean>;
+    planes: z.ZodOptional<z.ZodObject<{
+        rules: z.ZodArray<z.ZodUnknown>;
+    }, z.core.$strict>>;
+    endpoints: z.ZodOptional<z.ZodObject<{
+        rules: z.ZodArray<z.ZodUnknown>;
+    }, z.core.$strict>>;
+    rules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        describe: z.ZodOptional<z.ZodString>;
+        subject: z.ZodOptional<z.ZodString>;
+        test: z.ZodDefault<z.ZodEnum<{
+            e2e: "e2e";
+            pytest: "pytest";
+        }>>;
+        enforcement: z.ZodDefault<z.ZodEnum<{
+            block: "block";
+            advisory: "advisory";
+        }>>;
+        advisoryReason: z.ZodOptional<z.ZodString>;
+        cases: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            describe: z.ZodString;
+        }, z.core.$strict>>>;
+        hints: z.ZodOptional<z.ZodObject<{
+            routes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            globs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>>;
-    declarations: z.ZodRecord<z.ZodString, z.ZodString>;
-    volatileFields: z.ZodArray<z.ZodString>;
 }, z.core.$strict>;
 /** Inferred classification-policy shape. */
 export type ClassificationPolicy = z.infer<typeof ClassificationPolicySchema>;

package/dist/schemas/classification-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classification-policy.d.ts","sourceRoot":"","sources":["../../src/schemas/classification-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,wEAAwE;AACxE,eAAO,MAAM,gCAAgC;;;;kBAmBlC,CAAC;AAEZ,oDAAoD;AACpD,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,oEAAoE;AACpE,eAAO,MAAM,uBAAuB;;;kBAUhC,CAAC;AAEL,0CAA0C;AAC1C,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,qFAAqF;AACrF,eAAO,MAAM,kBAAkB;;;;;;kBAOpB,CAAC;AAEZ,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,iDAAkD,CAAC;AAEpF,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAiBvE,wDAAwD;AACxD,eAAO,MAAM,wBAAwB;;kBAK1B,CAAC;AAEZ,2CAA2C;AAC3C,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,kFAAkF;AAClF,eAAO,MAAM,mBAAmB;;;;;;;;;;;kBAkCrB,CAAC;AAEZ,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB;;;;;;;;;;;mBAoB7B,CAAC;AAEL,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,EAAE,CAQnF;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;EAA8B,CAAC;AAEjE,uCAAuC;AACvC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AA6BpE,mEAAmE;AACnE,eAAO,MAAM,gBAAgB;;;;;;;;kBA4CzB,CAAC;AAEL,kCAAkC;AAClC,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,wEAAwE;AACxE,eAAO,MAAM,iBAAiB;;;;;;;;mBAoB1B,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB;;;;;kBAyBpB,CAAC;AAEZ,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4C5B,CAAC;AAEZ,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"classification-policy.d.ts","sourceRoot":"","sources":["../../src/schemas/classification-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,wEAAwE;AACxE,eAAO,MAAM,gCAAgC;;;;kBAmBlC,CAAC;AAEZ,oDAAoD;AACpD,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,oEAAoE;AACpE,eAAO,MAAM,uBAAuB;;;kBAUhC,CAAC;AAEL,0CAA0C;AAC1C,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,qFAAqF;AACrF,eAAO,MAAM,kBAAkB;;;;;;kBAOpB,CAAC;AAEZ,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,iDAAkD,CAAC;AAEpF,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAiBvE,wDAAwD;AACxD,eAAO,MAAM,wBAAwB;;kBAK1B,CAAC;AAEZ,2CAA2C;AAC3C,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,kFAAkF;AAClF,eAAO,MAAM,mBAAmB;;;;;;;;;;;kBAkCrB,CAAC;AAEZ,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB;;;;;;;;;;;mBAoB7B,CAAC;AAEL,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,EAAE,CAQnF;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;EAA8B,CAAC;AAEjE,uCAAuC;AACvC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AA6BpE,mEAAmE;AACnE,eAAO,MAAM,gBAAgB;;;;;;;;kBA4CzB,CAAC;AAEL,kCAAkC;AAClC,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,wEAAwE;AACxE,eAAO,MAAM,iBAAiB;;;;;;;;mBAoB1B,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB;;;;;kBAyBpB,CAAC;AAEZ,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;kBAKrB,CAAC;AAEZ,wCAAwC;AACxC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;kBAKxB,CAAC;AAEZ,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,yCAAyC,CAAC;AAEzE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgC5B,CAAC;AAEZ,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/schemas/classification-policy.js

@@ -9,6 +9,7 @@
 import { z } from 'zod';
 import { compareStrings } from '../graph/util.js';
 import { SchemaVersionField } from './common.js';
+import { BusinessRulesSchema } from './business-rules.js';
 /** One trusted internal entry-point category (worker, migration, …). */
 export const InternalEntryPointCategorySchema = z
     .object({
@@ -276,20 +277,58 @@ export const CoverageRuleSchema = z
 })
     .strict();
 /**
- * The classification-policy document: scan roots (complete-scan scope),
- * trusted internal entry-point categories, organization internal rules,
- * the supported source declaration syntax, and volatile fields.
+ * One owner-declared PLANE rule list — the `planes:` section of the
+ * answers document (0.11.0, was `.gateforge/planes.json`). The section
+ * keeps the document shape it always had (`{ rules: [...] }`) so
+ * `gateforge migrate` is a pure text move, but the RULES themselves stay
+ * validated by the pack that applies them (one validation source, the
+ * same fail-closed reader that has always guarded them): this schema
+ * rejects a wrong document SHAPE and the owning reader rejects a wrong
+ * rule. Absent = no plane channel, byte-identical to today.
+ */
+export const PlanesSectionSchema = z
+    .object({
+    /** Owner-declared plane rules; validated by the SQLAlchemy pack. */
+    rules: z.array(z.unknown()),
+})
+    .strict();
+/**
+ * One owner-declared ENDPOINT-CAPABILITY rule list — the `endpoints:`
+ * section of the answers document (0.11.0, was `.gateforge/endpoints.json`).
+ * Same posture as {@link PlanesSectionSchema}: shape here, rules validated
+ * by the endpoint compiler that applies them.
+ */
+export const EndpointsSectionSchema = z
+    .object({
+    /** Owner-declared endpoint-capability rules; validated by the compiler. */
+    rules: z.array(z.unknown()),
+})
+    .strict();
+/**
+ * Repo-root-relative location of the ONE owner-answers document. Named
+ * once, in the package that owns the document, so every diagnostic that
+ * has to point the owner at a declaration — the refusals, the migrator,
+ * the packs — names the same path.
+ */
+export const OWNER_ANSWERS_PATH = '.gateforge/classification-policy.yml';
+/**
+ * The classification-policy document: the ONE owner-answers file
+ * (`.gateforge/classification-policy.yml`, name kept by owner decision).
+ * Since 0.11.0 it holds every owner answer — trusted internal
+ * entry-point categories, organization internal rules, exact lifecycle
+ * disables, delete semantics, plane rules, endpoint capabilities, and
+ * the owner's business `rules:`.
+ *
+ * The SCANNER settings (`scanRoots`, `coverage`, `declarations`,
+ * `volatileFields`) MOVED OUT to `.gateforge.yml` under `scan:`, next to
+ * the other machine-wide declarations. They are no longer accepted here:
+ * a repository still carrying them fails closed naming `gateforge
+ * migrate` rather than silently running on a setting the engine cannot
+ * see.
  */
 export const ClassificationPolicySchema = z
     .object({
     schemaVersion: SchemaVersionField,
-    /**
-     * Repo-root-relative globs defining the scope a closed-world proof
-     * must cover. A non-empty list is the prerequisite of every
-     * complete-scan attestation (ADR 0003 D4); findings or unresolved
-     * entries inside these roots invalidate the attestation.
-     */
-    scanRoots: z.array(z.string().min(1)).min(1),
     /** Entry-point categories counted as trusted-internal reachability. */
     trustedInternalEntryPoints: z.array(InternalEntryPointCategorySchema),
     /** Organization internal rules — certificate inputs, never overrides. */
@@ -301,28 +340,23 @@ export const ClassificationPolicySchema = z
      * Declaring semantics ADDS an evidence contract — it can resolve
      * DELETE_SEMANTICS_UNRESOLVED, never remove an obligation: detector
      * evidence that disagrees still blocks as a contradiction.
+     *
+     * This is the hard/archive answer for a RESOURCE: the rule's `match`
+     * glob names a source file, so a DELETE route that links no resource
+     * (a link-row teardown, a draft discard) cannot be answered here —
+     * that case is declared as `crud-delete`/`crud-archive` in `endpoints:`.
      */
     deleteRules: DeleteRulesSchema.optional(),
+    /** Owner-declared data-plane rules (was `.gateforge/planes.json`). */
+    planes: PlanesSectionSchema.optional(),
+    /** Owner-declared endpoint capabilities (was `.gateforge/endpoints.json`). */
+    endpoints: EndpointsSectionSchema.optional(),
     /**
-     * Coverage requirements for COMPLETE-scan proofs (ADR 0003 D4). A
-     * closed-world attestation holds only when every rule's detector is
-     * configured, reports coverage, and covers every applicable requested
-     * file. Declaring none means no scan is provably complete — closed-
-     * world proofs stay unavailable (fail closed).
-     */
-    coverage: z.array(CoverageRuleSchema).optional(),
-    /**
-     * Supported source declaration syntax: the machine-readable keys
-     * detectors may translate into declaration signals (e.g.
-     * `internality: 'gateforge:internal'`). Declarations are assertions
-     * consumed by the classifier — contradictory code signals still block.
-     */
-    declarations: z.record(z.string(), z.string().min(1)),
-    /**
-     * Bookkeeping columns that never satisfy an update by themselves
-     * (mirrors the verdict engine's `updateableFields` fail-closed rule).
+     * The owner's BUSINESS RULES (0.11.0). Each rule names the test type
+ * that must prove it and its observable cases. Absent = the feature is
+     off, byte for byte: no finding, no report row, no digest change.
      */
-    volatileFields: z.array(z.string().min(1)),
+    rules: BusinessRulesSchema.optional(),
 })
     .strict();
 //# sourceMappingURL=classification-policy.js.map

package/dist/schemas/classification-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"classification-policy.js","sourceRoot":"","sources":["../../src/schemas/classification-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,wEAAwE;AACxE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,0DAA0D;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;;;;OAOG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,yFAAyF;IACzF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE;IACvF,OAAO,EAAE,yEAAyE;CACnF,CAAC,CAAC;AAKL,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,6BAA6B;IAC7B,KAAK,EAAE,uBAAuB;IAC9B,qFAAqF;IACrF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAKpF,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;KACtC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;IACzC,OAAO,EAAE,yDAAyD;CACnE,CAAC;KACD,KAAK,CACJ,yCAAyC,EACzC,mGAAmG,CACpG;KACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAC5C,OAAO,EAAE,4DAA4D;CACtE,CAAC,CAAC;AAEL,wDAAwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,yEAAyE;IACzE,UAAU,EAAE,qBAAqB;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,oDAAoD;IACpD,KAAK,EAAE,wBAAwB;IAC/B,6EAA6E;IAC7E,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,EAAE,oDAAoD,CAAC;SAC5D,WAAW,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS;YACtC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,OAAO,EAAE,2CAA2C,SAAS,GAAG;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IACJ,uEAAuE;IACvE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;QACzC,OAAO,EAAE,qDAAqD;KAC/D,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACvD,OAAO,EAAE,4CAA4C;KACtD,CAAC;CACL,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,KAAK,CAAC,mBAAmB,CAAC;KAC1B,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC;gBACpC,OAAO,EACL,iCAAiC,UAAU,gCAAgC,KAAK,KAAK;oBACrF,mDAAmD;aACtD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,KAA+B;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,KAAK,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,GAAG,IAAI;QACP,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KACrF,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAKjE;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;IACzC,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACxC,OAAO,EAAE,qCAAqC;CAC/C,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;IACzC,OAAO,EAAE,6CAA6C;CACvD,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACnD,OAAO,EAAE,sCAAsC;CAChD,CAAC,CAAC;AAEL,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAExG,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,uEAAuE;IACvE,KAAK,EAAE,qBAAqB;IAC5B,kEAAkE;IAClE,SAAS,EAAE,qBAAqB;IAChC;;;;;OAKG;IACH,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,uEAAuE;IACvE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;QACzC,OAAO,EAAE,qDAAqD;KAC/D,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACvD,OAAO,EAAE,4CAA4C;KACtD,CAAC;CACL,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,mFAAmF;gBACnF,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,iFAAiF;gBACjF,gCAAgC;SACnC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,KAAK,CAAC,gBAAgB,CAAC;KACvB,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;gBACtB,OAAO,EACL,8BAA8B,KAAK,gCAAgC,KAAK,KAAK;oBAC7E,wDAAwD;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN;;;;;;;OAOG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,4DAA4D;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,sEAAsE;IACtE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C;;;;;;;OAOG;IACH,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,aAAa,EAAE,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,uEAAuE;IACvE,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC;IACrE,yEAAyE;IACzE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC1C,8EAA8E;IAC9E,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C;;;;;OAKG;IACH,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAChD;;;;;OAKG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"classification-policy.js","sourceRoot":"","sources":["../../src/schemas/classification-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,wEAAwE;AACxE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,0DAA0D;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;;;;OAOG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,yFAAyF;IACzF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE;IACvF,OAAO,EAAE,yEAAyE;CACnF,CAAC,CAAC;AAKL,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,6BAA6B;IAC7B,KAAK,EAAE,uBAAuB;IAC9B,qFAAqF;IACrF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAKpF,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;KACtC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;IACzC,OAAO,EAAE,yDAAyD;CACnE,CAAC;KACD,KAAK,CACJ,yCAAyC,EACzC,mGAAmG,CACpG;KACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAC5C,OAAO,EAAE,4DAA4D;CACtE,CAAC,CAAC;AAEL,wDAAwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,yEAAyE;IACzE,UAAU,EAAE,qBAAqB;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,oDAAoD;IACpD,KAAK,EAAE,wBAAwB;IAC/B,6EAA6E;IAC7E,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,EAAE,oDAAoD,CAAC;SAC5D,WAAW,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS;YACtC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,OAAO,EAAE,2CAA2C,SAAS,GAAG;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IACJ,uEAAuE;IACvE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;QACzC,OAAO,EAAE,qDAAqD;KAC/D,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACvD,OAAO,EAAE,4CAA4C;KACtD,CAAC;CACL,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,KAAK,CAAC,mBAAmB,CAAC;KAC1B,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC;gBACpC,OAAO,EACL,iCAAiC,UAAU,gCAAgC,KAAK,KAAK;oBACrF,mDAAmD;aACtD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,KAA+B;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,KAAK,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,GAAG,IAAI;QACP,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KACrF,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAKjE;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;IACzC,OAAO,EAAE,oDAAoD;CAC9D,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACxC,OAAO,EAAE,qCAAqC;CAC/C,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;IACzC,OAAO,EAAE,6CAA6C;CACvD,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACnD,OAAO,EAAE,sCAAsC;CAChD,CAAC,CAAC;AAEL,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAExG,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,uEAAuE;IACvE,KAAK,EAAE,qBAAqB;IAC5B,kEAAkE;IAClE,SAAS,EAAE,qBAAqB;IAChC;;;;;OAKG;IACH,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,uEAAuE;IACvE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE;QACzC,OAAO,EAAE,qDAAqD;KAC/D,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACvD,OAAO,EAAE,4CAA4C;KACtD,CAAC;CACL,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,mFAAmF;gBACnF,oEAAoE;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,iFAAiF;gBACjF,gCAAgC;SACnC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,KAAK,CAAC,gBAAgB,CAAC;KACvB,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;gBACtB,OAAO,EACL,8BAA8B,KAAK,gCAAgC,KAAK,KAAK;oBAC7E,wDAAwD;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN;;;;;;;OAOG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,4DAA4D;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,sEAAsE;IACtE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C;;;;;;;OAOG;IACH,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,oEAAoE;IACpE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,2EAA2E;IAC3E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AAEzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,aAAa,EAAE,kBAAkB;IACjC,uEAAuE;IACvE,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC;IACrE,yEAAyE;IACzE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC1C,8EAA8E;IAC9E,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C;;;;;;;;;;OAUG;IACH,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,sEAAsE;IACtE,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACtC,8EAA8E;IAC9E,SAAS,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC5C;;;;OAIG;IACH,KAAK,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schemas/scan-config.d.ts

@@ -0,0 +1,94 @@
+/**
+ * `scan:` — the SCANNER settings section of `.gateforge.yml` (0.11.0).
+ *
+ * These four settings used to live in `classification-policy.yml`
+ * (`scanRoots`, `coverage`, `declarations`, `volatileFields`). They moved
+ * here for ONE reason: they are not owner ANSWERS, they are machine-wide
+ * scan configuration, and the answers file now holds exactly the answers.
+ * They are still inside the owner-approved policy digest, because
+ * `.gateforge.yml` is a trusted-policy input like every other declaration
+ * there — the move changes which document an agent has to edit, never who
+ * has to approve it.
+ *
+ * The section also carries the two detector configuration documents that
+ * used to be their own files (`scan.httpClients`, was
+ * `.gateforge/http-clients.json`; `scan.fastapi`, was
+ * `.gateforge/fastapi.json`), for the same reason and with the same
+ * rule: the SHAPE is checked here, the RULES by the detector that applies
+ * them (one validation source, unchanged from the readers that have always
+ * guarded them).
+ */
+import { z } from 'zod';
+import type { ClassificationPolicy } from './classification-policy.js';
+/**
+ * One owner-declared HTTP client-scan section (was
+ * `.gateforge/http-clients.json`). Shape here; the client-symbol /
+ * wrapper / URL-builder / same-origin rules are validated by pack-http's
+ * own reader, which is the single source of truth for that document.
+ */
+export declare const HttpClientsScanSectionSchema: z.ZodObject<{
+    clientSymbols: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    wrapperFunctions: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    urlBuilders: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    sameOriginHosts: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    clientScanRoots: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    serverScanRoots: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+}, z.core.$strict>;
+/** Inferred `scan.httpClients` shape. */
+export type HttpClientsScanSection = z.infer<typeof HttpClientsScanSectionSchema>;
+/**
+ * One owner-declared FastAPI scan section (was `.gateforge/fastapi.json`):
+ * repo-root-relative directories acting as Python import roots.
+ */
+export declare const FastapiScanSectionSchema: z.ZodObject<{
+    importRoots: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+}, z.core.$strict>;
+/** Inferred `scan.fastapi` shape. */
+export type FastapiScanSection = z.infer<typeof FastapiScanSectionSchema>;
+/**
+ * The `scan:` section of `.gateforge.yml`. REQUIRED: a repository without
+ * it has not answered "what does a closed-world proof have to cover", and
+ * defaulting that would silently weaken every suppressive decision. The
+ * key lives in `.gateforge.yml`, so it is inside the trusted policy
+ * digest exactly like the settings it replaces.
+ */
+export declare const ScanConfigSchema: z.ZodObject<{
+    scanRoots: z.ZodArray<z.ZodString>;
+    coverage: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        detector: z.ZodString;
+        appliesTo: z.ZodArray<z.ZodString>;
+        exhaustive: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>>;
+    declarations: z.ZodRecord<z.ZodString, z.ZodString>;
+    volatileFields: z.ZodArray<z.ZodString>;
+    httpClients: z.ZodOptional<z.ZodObject<{
+        clientSymbols: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        wrapperFunctions: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        urlBuilders: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        sameOriginHosts: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        clientScanRoots: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        serverScanRoots: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    }, z.core.$strict>>;
+    fastapi: z.ZodOptional<z.ZodObject<{
+        importRoots: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Inferred `scan:` section shape. */
+export type ScanConfig = z.infer<typeof ScanConfigSchema>;
+/** The scanner keys that used to live in `classification-policy.yml`. */
+export declare const MOVED_SCANNER_KEYS: readonly ["scanRoots", "coverage", "declarations", "volatileFields"];
+/** Union of the moved scanner keys. */
+export type MovedScannerKey = (typeof MOVED_SCANNER_KEYS)[number];
+/** Whether `key` is one of the scanner settings that moved to `.gateforge.yml`. */
+export declare function isMovedScannerKey(key: string): key is MovedScannerKey;
+/**
+ * What the classifier ACTUALLY consumes: the owner answers and the
+ * scanner settings, composed by the caller from the two documents they
+ * now live in. The classifier has always needed both (a suppressive
+ * decision needs an owner answer AND the scan scope that makes it
+ * provable), and it still gets exactly one object — so nothing in the
+ * lattice learned that the two documents were split.
+ */
+export type ClassifierPolicy = ClassificationPolicy & ScanConfig;
+//# sourceMappingURL=scan-config.d.ts.map

package/dist/schemas/scan-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-config.d.ts","sourceRoot":"","sources":["../../src/schemas/scan-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;;kBAe9B,CAAC;AAEZ,yCAAyC;AACzC,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;kBAK1B,CAAC;AAEZ,qCAAqC;AACrC,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;kBAgClB,CAAC;AAEZ,sCAAsC;AACtC,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,sEAAuE,CAAC;AAEvG,uCAAuC;AACvC,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,eAAe,CAErE;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,UAAU,CAAC"}