@gate-forge/core 0.4.0 → 0.6.1

package/dist/policy/behavior.js

@@ -0,0 +1,373 @@
+/**
+ * Behavior-policy compiler (plan 2026-09-19 §4.1/§4.7): turns a
+ * validated behavior document plus the current resource graph into a
+ * deterministic catalog, obligations, and blocking entries.
+ *
+ * Core accepts validated data only. YAML loading stays in the CLI.
+ * Duplicate/contradictory documents fail as PolicyEvaluationError
+ * (exit 2). Missing/stale graph references become BlockingEntry values
+ * with ENDPOINT_BEHAVIOR_MISSING / BEHAVIOR_REFERENCE_STALE.
+ */
+import { sha256Canonical } from '../canonical-json.js';
+import { HTTP_ENDPOINT_RESOURCE_KIND } from '../graph/schema.js';
+import { compareStrings } from '../graph/util.js';
+import { BEHAVIOR_CATALOG_DOMAIN, BEHAVIOR_REQUIREMENTS_DOMAIN, BehaviorCatalogSchema, } from '../schemas/behavior-catalog.js';
+import { BEHAVIOR_CASE_DOMAIN, BEHAVIOR_HTTP_METHODS, BehaviorPolicySchema, HTTP_REQUEST_OBSERVED, TRANSPORT_ONLY_CONTRACTS, } from '../schemas/behavior-policy.js';
+import { ObligationSchema } from '../schemas/obligation.js';
+import { CAUSE_NEXT_ACTIONS } from '../schemas/verdict.js';
+import { BlockingEntrySchema, PolicyEvaluationError, } from './evaluate.js';
+/** Policy id stamped on every obligation compiled from a behavior document. */
+export const BEHAVIOR_POLICY_ID = 'behavior-policy';
+/** Canonical empty-catalog digest (never an omitted field). */
+export const EMPTY_BEHAVIOR_CATALOG_DIGEST = sha256Canonical({
+    domain: BEHAVIOR_CATALOG_DOMAIN,
+    schemaVersion: 1,
+    cases: [],
+    requirements: {},
+    dependencies: {},
+});
+/**
+ * Parses unknown input as a behavior policy. Unknown versions, extra
+ * keys, and semantic schema failures are config errors (exit 2).
+ *
+ * Args:
+ *   input (unknown): decoded YAML/JSON document.
+ *
+ * Returns:
+ *   BehaviorPolicy: the validated document.
+ */
+export function parseBehaviorPolicy(input) {
+    const parsed = BehaviorPolicySchema.safeParse(input);
+    if (!parsed.success) {
+        const issue = parsed.error.issues[0];
+        const path = issue?.path.length ? issue.path.join('.') : '<root>';
+        throw new PolicyEvaluationError(`behavior policy is invalid at ${path}: ${issue?.message ?? parsed.error.message}`);
+    }
+    return parsed.data;
+}
+/**
+ * Compiles a validated behavior policy against the current graph.
+ *
+ * Args:
+ *   input (CompileBehaviorPolicyInput): graph plus validated policy.
+ *
+ * Returns:
+ *   CompileBehaviorPolicyResult: catalog, obligations, blocking entries.
+ */
+export function compileBehaviorPolicy(input) {
+    const policy = BehaviorPolicySchema.parse(input.policy);
+    const endpointsById = new Map();
+    const resourcesById = new Map();
+    for (const resource of input.graph.resources) {
+        if (resource.id === null)
+            continue;
+        resourcesById.set(resource.id, resource);
+        if (resource.kind === HTTP_ENDPOINT_RESOURCE_KIND) {
+            endpointsById.set(resource.id, resource);
+        }
+    }
+    const declaredEndpoints = new Map();
+    for (const endpoint of policy.endpoints) {
+        declaredEndpoints.set(endpoint.resourceId, endpoint);
+    }
+    const declaredResources = new Map();
+    for (const resource of policy.resources) {
+        declaredResources.set(resource.resourceId, resource);
+    }
+    const blocking = [];
+    const compiled = [];
+    const obligationCases = new Map();
+    for (const [resourceId, resource] of [...endpointsById.entries()].sort((a, b) => compareStrings(a[0], b[0]))) {
+        const declared = declaredEndpoints.get(resourceId);
+        if (declared === undefined) {
+            blocking.push(block('finding', resourceId, resource.name, `discovered endpoint '${resourceId}' has no approved behavioral declaration`, resource.location, 'ENDPOINT_BEHAVIOR_MISSING'));
+            continue;
+        }
+        const operational = isHealthOperations(resource);
+        if (declared.disposition?.kind === 'operational-only' && !operational) {
+            throw new PolicyEvaluationError(`operational-only disposition on '${resourceId}' is illegal: the route is not positively classified health-operations`);
+        }
+        const staleEffect = declared.effects.find((effect) => !resourcesById.has(effect.resourceId));
+        if (staleEffect !== undefined) {
+            blocking.push(block('stale-reference', resourceId, resource.name, `behavior policy declares effect '${staleEffect.resourceId}' for endpoint '${resourceId}' which is not in the current graph`, resource.location, 'BEHAVIOR_REFERENCE_STALE'));
+            continue;
+        }
+        const linkedError = linkedResourceConflict(resource, declared.effects);
+        if (linkedError !== null) {
+            blocking.push(block('finding', resourceId, resource.name, linkedError, resource.location, 'BEHAVIOR_BINDING_MISMATCH'));
+            continue;
+        }
+        const sourceFiles = sortedUnique([
+            resource.source,
+            ...declared.effects.flatMap((effect) => {
+                const target = resourcesById.get(effect.resourceId);
+                return target === undefined ? [] : [target.source];
+            }),
+        ]);
+        if (declared.disposition?.kind === 'out-of-scope') {
+            continue;
+        }
+        const effects = sortEffects(declared.effects);
+        if (declared.disposition?.kind === 'operational-only') {
+            const hasTransport = declared.cases.some((item) => TRANSPORT_ONLY_CONTRACTS.has(item.contract));
+            collectSubject({
+                resourceId,
+                endpointResourceId: resourceId,
+                resource,
+                effects,
+                cases: hasTransport ? declared.cases : [...declared.cases, operationalTransportCase(resource)],
+                sourceFiles,
+                compiled,
+                obligationCases,
+            });
+            continue;
+        }
+        collectSubject({
+            resourceId,
+            endpointResourceId: resourceId,
+            resource,
+            effects,
+            cases: declared.cases,
+            sourceFiles,
+            compiled,
+            obligationCases,
+        });
+    }
+    for (const declared of policy.endpoints) {
+        if (endpointsById.has(declared.resourceId))
+            continue;
+        blocking.push(block('stale-reference', declared.resourceId, declared.resourceId, `behavior policy references endpoint '${declared.resourceId}' which is not in the current graph`, null, 'BEHAVIOR_REFERENCE_STALE'));
+    }
+    for (const declared of policy.resources) {
+        const resource = resourcesById.get(declared.resourceId);
+        if (resource === undefined) {
+            blocking.push(block('stale-reference', declared.resourceId, declared.resourceId, `behavior policy references resource '${declared.resourceId}' which is not in the current graph`, null, 'BEHAVIOR_REFERENCE_STALE'));
+            continue;
+        }
+        const staleEffect = declared.effects.find((effect) => !resourcesById.has(effect.resourceId));
+        if (staleEffect !== undefined) {
+            blocking.push(block('stale-reference', declared.resourceId, declared.resourceId, `behavior policy declares effect '${staleEffect.resourceId}' for resource '${declared.resourceId}' which is not in the current graph`, resource.location, 'BEHAVIOR_REFERENCE_STALE'));
+            continue;
+        }
+        collectSubject({
+            resourceId: declared.resourceId,
+            endpointResourceId: null,
+            resource,
+            effects: sortEffects(declared.effects),
+            cases: declared.cases,
+            sourceFiles: sortedUnique([resource.source]),
+            compiled,
+            obligationCases,
+        });
+    }
+    compiled.sort((a, b) => compareStrings(a.caseId, b.caseId));
+    const requirements = {};
+    const obligations = [];
+    for (const [obligationId, entry] of [...obligationCases.entries()].sort((a, b) => compareStrings(a[0], b[0]))) {
+        const caseIds = compiled
+            .filter((item) => item.obligationIds.includes(obligationId))
+            .map((item) => item.caseId)
+            .sort(compareStrings);
+        requirements[obligationId] = caseIds;
+        const requirementsDigest = sha256Canonical({
+            domain: BEHAVIOR_REQUIREMENTS_DOMAIN,
+            obligationId,
+            specifications: [...entry.specs].sort((a, b) => compareStrings(canonicalKey(a), canonicalKey(b))),
+        });
+        obligations.push(ObligationSchema.parse({
+            ...entry.obligation,
+            requirementsDigest,
+        }));
+    }
+    const dependencies = {};
+    for (const item of compiled) {
+        const ids = sortedUnique(item.effects.map((effect) => effect.resourceId));
+        dependencies[item.resourceId] = ids;
+    }
+    const catalogBody = {
+        schemaVersion: 1,
+        cases: compiled,
+        requirements,
+        dependencies,
+    };
+    const catalogDigest = compiled.length === 0
+        ? EMPTY_BEHAVIOR_CATALOG_DIGEST
+        : sha256Canonical({ domain: BEHAVIOR_CATALOG_DOMAIN, ...catalogBody });
+    const catalog = BehaviorCatalogSchema.parse({ ...catalogBody, catalogDigest });
+    return {
+        catalog,
+        obligations: obligations.sort((a, b) => compareStrings(a.id, b.id)),
+        blocking: blocking.sort((a, b) => {
+            const byKind = compareStrings(a.kind, b.kind);
+            if (byKind !== 0)
+                return byKind;
+            return compareStrings(a.resourceId ?? '', b.resourceId ?? '');
+        }),
+    };
+}
+/**
+ * Compiles every case of one subject into catalog entries and obligation drafts.
+ *
+ * Args:
+ *   input (CollectInput): subject, cases, and accumulators.
+ */
+function collectSubject(input) {
+    const lifecycle = input.resource.classification?.lifecycle ?? {
+        create: true,
+        read: true,
+        update: true,
+        delete: true,
+        deleteSemantics: 'hard',
+    };
+    for (const definition of input.cases) {
+        const spec = canonicalizeCase(definition);
+        const specDigest = sha256Canonical(spec);
+        const caseId = sha256Canonical({
+            domain: BEHAVIOR_CASE_DOMAIN,
+            resourceId: input.resourceId,
+            id: definition.id,
+        });
+        const obligationId = `${input.resourceId}:${definition.contract}`;
+        const compiled = {
+            caseId,
+            specDigest,
+            resourceId: input.resourceId,
+            endpointResourceId: input.endpointResourceId,
+            obligationIds: [obligationId],
+            definition,
+            effects: input.effects,
+            sourceFiles: input.sourceFiles,
+        };
+        input.compiled.push(compiled);
+        const existing = input.obligationCases.get(obligationId);
+        if (existing === undefined) {
+            input.obligationCases.set(obligationId, {
+                obligation: ObligationSchema.parse({
+                    schemaVersion: 1,
+                    id: obligationId,
+                    resourceId: input.resourceId,
+                    contract: definition.contract,
+                    policyId: BEHAVIOR_POLICY_ID,
+                    lifecycle,
+                }),
+                specs: [spec],
+            });
+        }
+        else {
+            existing.specs.push(spec);
+        }
+    }
+}
+/**
+ * Builds the synthetic transport-only case for an operational-only route
+ * from the endpoint's own method and canonical path.
+ *
+ * Args:
+ *   resource (GraphResource): classified health-operations endpoint.
+ *
+ * Returns:
+ *   BehaviorCase: request-observed case with empty state.
+ */
+function operationalTransportCase(resource) {
+    const methodRaw = resource.attributes['method'];
+    const method = typeof methodRaw === 'string' && BEHAVIOR_HTTP_METHODS.includes(methodRaw)
+        ? methodRaw
+        : 'GET';
+    const pathRaw = resource.attributes['canonicalPath'];
+    const pathTemplate = typeof pathRaw === 'string' && pathRaw.startsWith('/') ? pathRaw : '/';
+    return {
+        id: 'operational-transport',
+        contract: HTTP_REQUEST_OBSERVED,
+        channel: 'engine-http',
+        fixture: 'operational',
+        actor: 'anonymous',
+        action: {
+            kind: 'request',
+            method,
+            pathTemplate,
+            path: {},
+            query: {},
+            body: { encoding: 'json', fields: {} },
+            credentialVariant: 'valid',
+        },
+        expect: {
+            statuses: [200],
+            response: [],
+            state: [],
+        },
+    };
+}
+/**
+ * True when detector attributes positively classify health-operations only.
+ *
+ * Args:
+ *   resource (GraphResource): discovered endpoint.
+ *
+ * Returns:
+ *   boolean: true only for a single health-operations capability and no business link.
+ */
+function isHealthOperations(resource) {
+    const linked = resource.attributes['linkedResourceName'];
+    if (typeof linked === 'string' && linked.length > 0)
+        return false;
+    const capabilities = resource.attributes['capabilities'];
+    return Array.isArray(capabilities) && capabilities.length === 1 && capabilities[0] === 'health-operations';
+}
+/**
+ * Detects a conflict between source-derived linkedResourceName and declared effects.
+ *
+ * Args:
+ *   resource (GraphResource): discovered endpoint.
+ *   effects (EffectScope[]): owner-declared effects.
+ *
+ * Returns:
+ *   string | null: blocking detail, or null when consistent.
+ */
+function linkedResourceConflict(resource, effects) {
+    const linked = resource.attributes['linkedResourceName'];
+    if (typeof linked !== 'string' || linked.length === 0)
+        return null;
+    const matches = effects.some((effect) => {
+        const name = effect.resourceId.includes('.')
+            ? effect.resourceId.slice(effect.resourceId.indexOf('.') + 1)
+            : effect.resourceId;
+        return name === linked || effect.resourceId === linked;
+    });
+    if (matches)
+        return null;
+    return (`endpoint '${resource.id ?? resource.name}' source link '${linked}' conflicts with declared ` +
+        'effect resource ids (source facts cannot be overridden silently)');
+}
+function sortEffects(effects) {
+    return [...effects].sort((a, b) => compareStrings(a.id, b.id));
+}
+function sortedUnique(values) {
+    return [...new Set(values)].sort(compareStrings);
+}
+function canonicalizeCase(definition) {
+    return {
+        id: definition.id,
+        contract: definition.contract,
+        channel: definition.channel,
+        fixture: definition.fixture,
+        actor: definition.actor,
+        action: definition.action,
+        expect: definition.expect,
+        controlCase: definition.controlCase ?? null,
+    };
+}
+function canonicalKey(value) {
+    return JSON.stringify(value);
+}
+function block(kind, resourceId, name, detail, location, cause) {
+    return BlockingEntrySchema.parse({
+        kind,
+        resourceId,
+        name,
+        detail,
+        location,
+        cause,
+        nextAction: CAUSE_NEXT_ACTIONS[cause],
+    });
+}
+//# sourceMappingURL=behavior.js.map

package/dist/policy/behavior.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior.js","sourceRoot":"","sources":["../../src/policy/behavior.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,eAAe,EAAkB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAA0C,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,GAGtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GAOzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAmB,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AAEvB,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,eAAe,CAAC;IAC3D,MAAM,EAAE,uBAAuB;IAC/B,aAAa,EAAE,CAAC;IAChB,KAAK,EAAE,EAAE;IACT,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;CACjB,CAAC,CAAC;AAiBH;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAC7B,iCAAiC,IAAI,KAAK,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;IACvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;IACvD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI;YAAE,SAAS;QACnC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAClD,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0D,CAAC;IAE1F,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9E,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3B,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CACX,KAAK,CACH,SAAS,EACT,UAAU,EACV,QAAQ,CAAC,IAAI,EACb,wBAAwB,UAAU,0CAA0C,EAC5E,QAAQ,CAAC,QAAQ,EACjB,2BAA2B,CAC5B,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,kBAAkB,IAAI,CAAC,WAAW,EAAE,CAAC;YACtE,MAAM,IAAI,qBAAqB,CAC7B,oCAAoC,UAAU,wEAAwE,CACvH,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7F,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CACX,KAAK,CACH,iBAAiB,EACjB,UAAU,EACV,QAAQ,CAAC,IAAI,EACb,oCAAoC,WAAW,CAAC,UAAU,mBAAmB,UAAU,qCAAqC,EAC5H,QAAQ,CAAC,QAAQ,EACjB,0BAA0B,CAC3B,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CACzG,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,YAAY,CAAC;YAC/B,QAAQ,CAAC,MAAM;YACf,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACrC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACpD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;YAClD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChG,cAAc,CAAC;gBACb,UAAU;gBACV,kBAAkB,EAAE,UAAU;gBAC9B,QAAQ;gBACR,OAAO;gBACP,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBAC9F,WAAW;gBACX,QAAQ;gBACR,eAAe;aAChB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,cAAc,CAAC;YACb,UAAU;YACV,kBAAkB,EAAE,UAAU;YAC9B,QAAQ;YACR,OAAO;YACP,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW;YACX,QAAQ;YACR,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QACrD,QAAQ,CAAC,IAAI,CACX,KAAK,CACH,iBAAiB,EACjB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,EACnB,wCAAwC,QAAQ,CAAC,UAAU,qCAAqC,EAChG,IAAI,EACJ,0BAA0B,CAC3B,CACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CACX,KAAK,CACH,iBAAiB,EACjB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,EACnB,wCAAwC,QAAQ,CAAC,UAAU,qCAAqC,EAChG,IAAI,EACJ,0BAA0B,CAC3B,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7F,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CACX,KAAK,CACH,iBAAiB,EACjB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,EACnB,oCAAoC,WAAW,CAAC,UAAU,mBAAmB,QAAQ,CAAC,UAAU,qCAAqC,EACrI,QAAQ,CAAC,QAAQ,EACjB,0BAA0B,CAC3B,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,cAAc,CAAC;YACb,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,kBAAkB,EAAE,IAAI;YACxB,QAAQ;YACR,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5C,QAAQ;YACR,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAA6B,EAAE,CAAC;IAClD,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/E,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3B,EAAE,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ;aACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;aAC1B,IAAI,CAAC,cAAc,CAAC,CAAC;QACxB,YAAY,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;QACrC,MAAM,kBAAkB,GAAG,eAAe,CAAC;YACzC,MAAM,EAAE,4BAA4B;YACpC,YAAY;YACZ,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC7C,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CACjD;SACF,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACd,gBAAgB,CAAC,KAAK,CAAC;YACrB,GAAG,KAAK,CAAC,UAAU;YACnB,kBAAkB;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAA6B,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;IACtC,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,aAAa,EAAE,CAAU;QACzB,KAAK,EAAE,QAAQ;QACf,YAAY;QACZ,YAAY;KACb,CAAC;IACF,MAAM,aAAa,GACjB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACnB,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,EAAE,GAAG,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/E,OAAO;QACL,OAAO;QACP,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC;YAChC,OAAO,cAAc,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAaD;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAmB;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,IAAI;QAC5D,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,MAAe;KACjC,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAiB,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC;YAC7B,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,EAAE,EAAE,UAAU,CAAC,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAyB;YACrC,MAAM;YACN,UAAU;YACV,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,aAAa,EAAE,CAAC,YAAY,CAAC;YAC7B,UAAU;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,EAAE;gBACtC,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC;oBACjC,aAAa,EAAE,CAAC;oBAChB,EAAE,EAAE,YAAY;oBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,QAAQ,EAAE,kBAAkB;oBAC5B,SAAS;iBACV,CAAC;gBACF,KAAK,EAAE,CAAC,IAAiB,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAiB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,QAAuB;IACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GACV,OAAO,SAAS,KAAK,QAAQ,IAAK,qBAA2C,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC/F,CAAC,CAAE,SAAgC;QACnC,CAAC,CAAC,KAAK,CAAC;IACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACrD,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,OAAO;QACL,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE;YACN,IAAI,EAAE,SAAS;YACf,MAAM;YACN,YAAY;YACZ,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YACtC,iBAAiB,EAAE,OAAO;SAC3B;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,CAAC,GAAG,CAAC;YACf,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,QAAuB;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,mBAAmB,CAAC;AAC7G,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAAC,QAAuB,EAAE,OAAsB;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACtB,OAAO,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CACL,aAAa,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,kBAAkB,MAAM,4BAA4B;QAC7F,kEAAkE,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IACpC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAwB;IAChD,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAA8B;QACjD,MAAM,EAAE,UAAU,CAAC,MAA8B;QACjD,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAgB;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,KAAK,CACZ,IAA2B,EAC3B,UAAkB,EAClB,IAAY,EACZ,MAAc,EACd,QAA0C,EAC1C,KAA6F;IAE7F,OAAO,mBAAmB,CAAC,KAAK,CAAC;QAC/B,IAAI;QACJ,UAAU;QACV,IAAI;QACJ,MAAM;QACN,QAAQ;QACR,KAAK;QACL,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC;KACtC,CAAC,CAAC;AACL,CAAC"}

package/dist/policy/coverage.d.ts

@@ -17,7 +17,7 @@ export interface MappedCoverage {
     table: string;
     /** The covered operation. */
     operation: CoverageOperation;
-    /** Declared test kind; ONLY `browser-e2e` satisfies closed-world coverage. */
+    /** Declared test kind; only real-UI kinds (`browser-e2e`, `observed-e2e`) satisfy closed-world coverage. */
     testKind: string;
 }
 /** Configuration-error finding: the policy names a table the inventory cannot see. */
@@ -63,8 +63,9 @@ export interface CoveragePolicyResult {
  *   silently dropped table is a violation);
  * - dispositioned table → excused (the disposition is a trusted owner
  *   act recorded in config, never an agent self-approval);
- * - otherwise each required operation without a `browser-e2e` mapping →
- *   blocking `CRUD_COVERAGE_MISSING`.
+ * - otherwise each required operation without a real-UI
+ *   (`browser-e2e`/`observed-e2e`) mapping → blocking
+ *   `CRUD_COVERAGE_MISSING`.
  *
  * Args:
  *   tables: the policy's table entries (validated `CoveragePolicySchema`).

package/dist/policy/coverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../../src/policy/coverage.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAsB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEtF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,iGAAiG;IACjG,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,MAAM,WAAW,uBAAuB;IACtC,uDAAuD;IACvD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,8DAA8D;IAC9D,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACnD,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAKD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,aAAa,EAAE,EAChC,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,cAAc,GAAE,SAAS,cAAc,EAAO,GAC7C,oBAAoB,CA4EtB"}
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../../src/policy/coverage.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAsB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEtF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,iGAAiG;IACjG,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,4GAA4G;IAC5G,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,MAAM,WAAW,uBAAuB;IACtC,uDAAuD;IACvD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,8DAA8D;IAC9D,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACnD,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAKD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,aAAa,EAAE,EAChC,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,cAAc,GAAE,SAAS,cAAc,EAAO,GAC7C,oBAAoB,CAgFtB"}

package/dist/policy/coverage.js

@@ -13,7 +13,8 @@
  *   silently dropped table is a violation, never coverage.
  * - Inventory tables the policy does NOT enumerate are violations too
  *   (the policy is closed-world over the inventory).
- * - Only `browser-e2e` mappings satisfy (plan §3.2: api-e2e cannot
+ * - Only real-UI mappings satisfy (`browser-e2e` engine-driven and
+ *   `observed-e2e` suite-driven-over-proxy; plan §3.2: api-e2e cannot
  *   substitute for browser behavior); the mapping subsystem may pass an
  *   empty list for now — the honest result is that enabled, undispositioned
  *   tables block until mappings or dispositions exist.
@@ -34,8 +35,9 @@ const CRUD_COVERAGE_MISSING_CAUSE = CAUSE_NEXT_ACTIONS['CRUD_COVERAGE_MISSING'];
  *   silently dropped table is a violation);
  * - dispositioned table → excused (the disposition is a trusted owner
  *   act recorded in config, never an agent self-approval);
- * - otherwise each required operation without a `browser-e2e` mapping →
- *   blocking `CRUD_COVERAGE_MISSING`.
+ * - otherwise each required operation without a real-UI
+ *   (`browser-e2e`/`observed-e2e`) mapping → blocking
+ *   `CRUD_COVERAGE_MISSING`.
  *
  * Args:
  *   tables: the policy's table entries (validated `CoveragePolicySchema`).
@@ -76,9 +78,13 @@ export function evaluateCoveragePolicy(tables, inventory, mappedCoverage = []) {
         if (table.disposition !== undefined)
             continue;
         for (const operation of table.requiredOperations) {
+            // Real-UI coverage (plan §3.2 + Observe channel): `browser-e2e`
+            // (engine-driven) and `observed-e2e` (suite-driven over the session
+            // proxy with independent adapter reads) are both genuine browser
+            // journeys — either covers. Every other kind contributes nothing.
             const covered = mappedCoverage.some((mapping) => mapping.table === table.name &&
                 mapping.operation === operation &&
-                mapping.testKind === 'browser-e2e');
+                (mapping.testKind === 'browser-e2e' || mapping.testKind === 'observed-e2e'));
             if (covered)
                 continue;
             blocking.push({
@@ -86,8 +92,8 @@ export function evaluateCoveragePolicy(tables, inventory, mappedCoverage = []) {
                 cause: 'CRUD_COVERAGE_MISSING',
                 table: table.name,
                 operation,
-                detail: `coverage policy: table '${table.name}' has no mapped browser-e2e '${operation}' ` +
-                    'coverage and no owner disposition',
+                detail: `coverage policy: table '${table.name}' has no mapped real-UI ` +
+                    `'${operation}' coverage (browser-e2e or observed-e2e) and no owner disposition`,
                 nextAction: CRUD_COVERAGE_MISSING_CAUSE,
             });
         }

package/dist/policy/coverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/policy/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAkB,MAAM,uBAAuB,CAAC;AA2D3E,kEAAkE;AAClE,MAAM,2BAA2B,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAgC,EAChC,SAA4C,EAC5C,iBAA4C,EAAE;IAE9C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;YAChE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,MAAM,EACJ,gCAAgC,KAAK,CAAC,IAAI,wCAAwC;oBAClF,kFAAkF;oBAClF,mFAAmF;oBACnF,iBAAiB;aACpB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,4DAA4D;QAC5D,gDAAgD;QAChD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,SAAS;QAC9C,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CACjC,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI;gBAC5B,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC/B,OAAO,CAAC,QAAQ,KAAK,aAAa,CACrC,CAAC;YACF,IAAI,OAAO;gBAAE,SAAS;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,uBAAuB;gBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,SAAS;gBACT,MAAM,EACJ,2BAA2B,KAAK,CAAC,IAAI,gCAAgC,SAAS,IAAI;oBAClF,mCAAmC;gBACrC,UAAU,EAAE,2BAA2B;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE,CAAC;QAC9C,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,UAAU,GAAG;YACjB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;SAC9D,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,uBAAuB;YAC9B,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,MAAM,EACJ,uCAAuC,IAAI,yCAAyC;gBACpF,4DAA4D;gBAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,6DAA6D;YACxF,UAAU,EAAE,2BAA2B;SACxC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAChC,cAAc,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CACrD,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/policy/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAkB,MAAM,uBAAuB,CAAC;AA2D3E,kEAAkE;AAClE,MAAM,2BAA2B,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAgC,EAChC,SAA4C,EAC5C,iBAA4C,EAAE;IAE9C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;YAChE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,MAAM,EACJ,gCAAgC,KAAK,CAAC,IAAI,wCAAwC;oBAClF,kFAAkF;oBAClF,mFAAmF;oBACnF,iBAAiB;aACpB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,4DAA4D;QAC5D,gDAAgD;QAChD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,SAAS;QAC9C,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACjD,gEAAgE;YAChE,oEAAoE;YACpE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CACjC,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI;gBAC5B,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,OAAO,CAAC,QAAQ,KAAK,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc,CAAC,CAC9E,CAAC;YACF,IAAI,OAAO;gBAAE,SAAS;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,uBAAuB;gBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,SAAS;gBACT,MAAM,EACJ,2BAA2B,KAAK,CAAC,IAAI,0BAA0B;oBAC/D,IAAI,SAAS,mEAAmE;gBAClF,UAAU,EAAE,2BAA2B;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE,CAAC;QAC9C,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,UAAU,GAAG;YACjB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;SAC9D,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,uBAAuB;YAC9B,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,MAAM,EACJ,uCAAuC,IAAI,yCAAyC;gBACpF,4DAA4D;gBAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,6DAA6D;YACxF,UAAU,EAAE,2BAA2B;SACxC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAChC,cAAc,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CACrD,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC"}

package/dist/policy/evaluate.d.ts

@@ -86,6 +86,17 @@ export declare const BlockingEntrySchema: z.ZodObject<{
         DIAGNOSTIC_TEST_FAILURE: "DIAGNOSTIC_TEST_FAILURE";
         DIAGNOSTIC_RUN_INCOMPLETE: "DIAGNOSTIC_RUN_INCOMPLETE";
         DIAGNOSTIC_RESULT_STALE: "DIAGNOSTIC_RESULT_STALE";
+        ENDPOINT_BEHAVIOR_MISSING: "ENDPOINT_BEHAVIOR_MISSING";
+        BEHAVIOR_REFERENCE_STALE: "BEHAVIOR_REFERENCE_STALE";
+        BEHAVIOR_CASE_UNMAPPED: "BEHAVIOR_CASE_UNMAPPED";
+        BEHAVIOR_CASE_MISSING: "BEHAVIOR_CASE_MISSING";
+        BEHAVIOR_BINDING_MISMATCH: "BEHAVIOR_BINDING_MISMATCH";
+        BEHAVIOR_EFFECT_MISMATCH: "BEHAVIOR_EFFECT_MISMATCH";
+        OBSERVATION_SCOPE_INCOMPLETE: "OBSERVATION_SCOPE_INCOMPLETE";
+        BEHAVIOR_UNEXPECTED_EFFECT: "BEHAVIOR_UNEXPECTED_EFFECT";
+        ENFORCEMENT_BOUNDARY_UNVERIFIED: "ENFORCEMENT_BOUNDARY_UNVERIFIED";
+        RUNTIME_PREPARATION_FAILED: "RUNTIME_PREPARATION_FAILED";
+        RUNTIME_READINESS_FAILED: "RUNTIME_READINESS_FAILED";
     }>>>;
     nextAction: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strict>;
@@ -158,6 +169,7 @@ export declare const PolicyEvaluationResultSchema: z.ZodObject<{
             archiveFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
             updateableFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>;
+        requirementsDigest: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     blocking: z.ZodArray<z.ZodObject<{
         kind: z.ZodEnum<{
@@ -196,6 +208,17 @@ export declare const PolicyEvaluationResultSchema: z.ZodObject<{
             DIAGNOSTIC_TEST_FAILURE: "DIAGNOSTIC_TEST_FAILURE";
             DIAGNOSTIC_RUN_INCOMPLETE: "DIAGNOSTIC_RUN_INCOMPLETE";
             DIAGNOSTIC_RESULT_STALE: "DIAGNOSTIC_RESULT_STALE";
+            ENDPOINT_BEHAVIOR_MISSING: "ENDPOINT_BEHAVIOR_MISSING";
+            BEHAVIOR_REFERENCE_STALE: "BEHAVIOR_REFERENCE_STALE";
+            BEHAVIOR_CASE_UNMAPPED: "BEHAVIOR_CASE_UNMAPPED";
+            BEHAVIOR_CASE_MISSING: "BEHAVIOR_CASE_MISSING";
+            BEHAVIOR_BINDING_MISMATCH: "BEHAVIOR_BINDING_MISMATCH";
+            BEHAVIOR_EFFECT_MISMATCH: "BEHAVIOR_EFFECT_MISMATCH";
+            OBSERVATION_SCOPE_INCOMPLETE: "OBSERVATION_SCOPE_INCOMPLETE";
+            BEHAVIOR_UNEXPECTED_EFFECT: "BEHAVIOR_UNEXPECTED_EFFECT";
+            ENFORCEMENT_BOUNDARY_UNVERIFIED: "ENFORCEMENT_BOUNDARY_UNVERIFIED";
+            RUNTIME_PREPARATION_FAILED: "RUNTIME_PREPARATION_FAILED";
+            RUNTIME_READINESS_FAILED: "RUNTIME_READINESS_FAILED";
         }>>>;
         nextAction: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strict>>;

package/dist/policy/evaluate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../src/policy/evaluate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAiB,MAAM,sBAAsB,CAAC;AAG5G,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAmD,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGzG,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,iBAAiB,CAAC;AAK1D;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,yDAAyD;AACzD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsC5B,CAAC;AAEL,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAKjF;AAED,yEAAyE;AACzE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;kBAM9B,CAAC;AAEL,uCAAuC;AACvC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,sEAAsE;AACtE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAcrC,CAAC;AAEL,+CAA+C;AAC/C,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAC3D,GACA,OAAO,CAaT;AAED,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,KAAK,EAAE,aAAa,CAAC;IACrB,iEAAiE;IACjE,QAAQ,EAAE,UAAU,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAmErF"}
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../src/policy/evaluate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAiB,MAAM,sBAAsB,CAAC;AAG5G,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAmD,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGzG,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,iBAAiB,CAAC;AAK1D;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,yDAAyD;AACzD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsC5B,CAAC;AAEL,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAKjF;AAED,yEAAyE;AACzE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;kBAM9B,CAAC;AAEL,uCAAuC;AACvC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,sEAAsE;AACtE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAcrC,CAAC;AAEL,+CAA+C;AAC/C,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAC3D,GACA,OAAO,CAaT;AAED,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,KAAK,EAAE,aAAa,CAAC;IACrB,iEAAiE;IACjE,QAAQ,EAAE,UAAU,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAmErF"}

package/dist/policy/index.d.ts

@@ -12,4 +12,5 @@ export { CRUD_CONTRACT_PREFIX, PERSISTENCE_CONTRACT_PREFIX, BlockingEntrySchema,
 export type { BlockingEntry, ClaimAssessment, PolicyEvaluationInput, PolicyEvaluationResult, } from './evaluate.js';
 export { evaluateCoveragePolicy, type CoverageInventoryTable, type MappedCoverage, type CoverageConfigError, type CoverageBlockingFinding, type CoveragePolicyResult, } from './coverage.js';
 export { TRUSTED_POLICY_DOMAIN, trustedPolicyDigest, policyWeakenedCandidate, type TrustedPolicyInput, type PolicyWeakeningCheck, } from './trusted.js';
+export { BEHAVIOR_POLICY_ID, EMPTY_BEHAVIOR_CATALOG_DIGEST, compileBehaviorPolicy, parseBehaviorPolicy, type CompileBehaviorPolicyInput, type CompileBehaviorPolicyResult, } from './behavior.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/policy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,GACjC,MAAM,eAAe,CAAC"}

package/dist/policy/index.js

@@ -11,4 +11,5 @@
 export { CRUD_CONTRACT_PREFIX, PERSISTENCE_CONTRACT_PREFIX, BlockingEntrySchema, ClaimAssessmentSchema, PolicyEvaluationError, PolicyEvaluationResultSchema, classificationBlockedIdentity, evaluatePolicies, lifecycleAllowsContract, } from './evaluate.js';
 export { evaluateCoveragePolicy, } from './coverage.js';
 export { TRUSTED_POLICY_DOMAIN, trustedPolicyDigest, policyWeakenedCandidate, } from './trusted.js';
+export { BEHAVIOR_POLICY_ID, EMPTY_BEHAVIOR_CATALOG_DIGEST, compileBehaviorPolicy, parseBehaviorPolicy, } from './behavior.js';
 //# sourceMappingURL=index.js.map

package/dist/policy/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAOvB,OAAO,EACL,sBAAsB,GAMvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GAGxB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAOvB,OAAO,EACL,sBAAsB,GAMvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,GAGpB,MAAM,eAAe,CAAC"}