@getripple/core 1.0.4

package/dist/agent-workflow.js

@@ -0,0 +1,404 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAgentWorkflowSummary = void 0;
+function getAgentWorkflowSummary() {
+    return {
+        protocol: "ripple-agent-workflow",
+        version: 1,
+        purpose: "Give AI coding agents a human-selected trust boundary before editing, then check staged changes for intent drift and boundary drift before handoff.",
+        loop: [
+            "choose_boundary",
+            "plan",
+            "approve_if_required",
+            "edit",
+            "stage",
+            "check",
+            "repair_if_needed",
+        ],
+        controlModes: {
+            brainstorm: "Agent can plan, explain, and suggest, but no file edits are allowed.",
+            function: "Agent can edit only the approved symbol or function inside the target file.",
+            file: "Agent can edit only the selected target file.",
+            task: "Agent can edit the files saved in the task intent.",
+            pr: "Agent can prepare a low-risk PR, but human review remains the merge gate.",
+        },
+        auditGates: {
+            beforeRiskyEdit: "Human approval is required before editing human-gated sensitive or dangerous targets.",
+            afterStaging: "Ripple checks staged changes against saved intent and selected control boundary.",
+            beforeMerge: "Human reviews the diff plus Ripple drift and boundary verdict before merge.",
+        },
+        policyWorkflow: {
+            defaultAgentPath: "Use ripple_plan_context first in MCP; it includes policyExplanation. In CLI, use planBeforeEditing with --json when automation needs the same policyExplanation shape.",
+            policyOnlyPath: "Use explainPolicy / ripple_explain_policy only when you need the repo trust boundary without a plan.",
+            policyDriftPath: "If checkAfterStaging or repairIntentDrift reports policyDrift.status=changed, stop and ask the human to review the current policy before continuing.",
+        },
+        commands: {
+            guide: "ripple agent",
+            initializeRepo: "ripple init",
+            checkReadiness: "ripple doctor --agent --strict",
+            installCi: "ripple init-ci",
+            explainPolicy: "ripple policy explain --file <file> --agent",
+            planBeforeEditing: "ripple plan --file <file> --task \"<task>\" --mode file --agent --save",
+            checkAfterStaging: "ripple check --staged --agent --intent latest",
+            checkChangedAgainstBase: "ripple check --changed --base <ref> --agent --intent latest",
+            auditCurrentChange: "ripple audit --agent --intent latest",
+            gateCurrentChange: "ripple gate --agent --intent latest",
+            checkApproval: "ripple approval --intent latest --agent",
+            approveHumanGate: "ripple approve --intent latest --gate before-risky-edit",
+            ciGate: "ripple ci --base <ref> --intent latest --github-annotations",
+            repairIntentDrift: "ripple repair --agent --intent latest",
+        },
+        mcpTools: {
+            workflow: "ripple_get_agent_workflow",
+            checkReadiness: "ripple_doctor",
+            explainPolicy: "ripple_explain_policy",
+            planBeforeEditing: "ripple_plan_context",
+            checkAfterStaging: "ripple_check_staged",
+            checkChangedAgainstBase: "ripple_check_changed",
+            auditCurrentChange: "ripple_audit_change",
+            gateCurrentChange: "ripple_gate",
+            checkApproval: "ripple_get_approval_status",
+            repairIntentDrift: "ripple_repair_intent_drift",
+        },
+        outputContracts: {
+            doctorHeader: "RIPPLE_DOCTOR",
+            planHeader: "RIPPLE_AGENT_CONTEXT",
+            stagedCheckHeader: "RIPPLE_STAGED_CHECK",
+            repairHeader: "RIPPLE_INTENT_DRIFT_REPAIR",
+            auditHeader: "RIPPLE_AUDIT",
+            gateHeader: "RIPPLE_GATE",
+            approvalHeader: "RIPPLE_APPROVAL",
+            approvalStatusHeader: "RIPPLE_APPROVAL_STATUS",
+            doctorSections: [
+                "status",
+                "readiness_decision",
+                "enforcement_level",
+                "can_guide_agents",
+                "can_detect_drift",
+                "can_block_in_ci",
+                "policy_explicit",
+                "graph",
+                "git",
+                "ci_workflow",
+                "latest_intent",
+                "gaps",
+                "next_steps",
+            ],
+            planSections: [
+                "readiness_status",
+                "enforcement_level",
+                "can_detect_drift",
+                "can_block_in_ci",
+                "readiness_gaps",
+                "editable_files",
+                "control_mode",
+                "human_gate",
+                "allowed_files",
+                "allowed_symbols",
+                "context_files",
+                "read_first",
+                "read_if_needed",
+                "symbols_first",
+                "verify",
+                "avoid_first",
+            ],
+            stagedCheckSections: [
+                "handoff",
+                "drift_verdict",
+                "drift_decision",
+                "next_required_phase",
+                "next_required_action",
+                "drift_why",
+                "drift_fix",
+                "boundary_verdict",
+                "boundary_decision",
+                "boundary_why",
+                "boundary_fix",
+                "policy_drift",
+                "readiness_drift",
+                "intent_verdict",
+                "control_mode",
+                "human_required",
+                "planned_scope",
+                "allowed_files",
+                "allowed_symbols",
+                "editable_files",
+                "context_files_changed",
+                "changed_files",
+                "read_first",
+                "symbols_first",
+                "verify",
+            ],
+            repairSections: [
+                "handoff",
+                "drift_verdict",
+                "drift_decision",
+                "drift_why",
+                "drift_fix",
+                "boundary_verdict",
+                "boundary_decision",
+                "boundary_why",
+                "boundary_fix",
+                "policy_drift",
+                "readiness_drift",
+                "verdict",
+                "status",
+                "unstage_files",
+                "review_contracts",
+                "fix_actions",
+                "verify",
+                "next_steps",
+            ],
+            auditSections: [
+                "handoff",
+                "status",
+                "decision",
+                "can_proceed",
+                "next_required_phase",
+                "next_required_action",
+                "approval_status",
+                "approval_decision",
+                "approval_required",
+                "approval_approved",
+                "approval_gate",
+                "intent_id",
+                "control_mode",
+                "drift_verdict",
+                "boundary_verdict",
+                "policy_drift",
+                "readiness_drift",
+                "repair_status",
+                "recommended_action",
+                "saved_policy_explanation",
+                "current_policy_explanation",
+                "blocking_reasons",
+                "changed_files",
+                "verify",
+                "fix_actions",
+            ],
+            gateSections: [
+                "status",
+                "decision",
+                "can_continue",
+                "must_stop",
+                "needs_human",
+                "next_required_phase",
+                "next_required_action",
+                "audit_status",
+                "approval_status",
+                "why",
+                "fix_now",
+                "ask_human",
+                "commands_doctor",
+                "commands_check",
+                "commands_audit",
+                "commands_repair",
+                "commands_approve",
+                "commands_unstage",
+                "commands_verify",
+            ],
+        },
+        runtimeContract: {
+            protocol: "ripple-agent-runtime-contract",
+            version: 1,
+            invariant: "An agent should edit only after a saved Ripple plan defines the trust boundary, and should proceed only when the Ripple audit says the change can proceed.",
+            compatibleRuntimes: [
+                "MCP coding agents",
+                "CLI-driven coding agents",
+                "IDE coding agents",
+                "CI and PR bots",
+            ],
+            sourceOfTruth: [
+                "Before editing, ripple_plan_context / ripple plan is the source of truth.",
+                "During editing, saved change intent allowed_files and allowed_symbols are the source of truth.",
+                "After editing, ripple_audit_change / ripple audit is the full report; ripple gate is the compact continue/stop decision.",
+                "If human approval is required, ripple_get_approval_status / ripple approval is the source of truth.",
+            ],
+            phases: [
+                {
+                    id: "discover_contract",
+                    order: 1,
+                    requiredWhen: "before any autonomous Ripple-controlled task",
+                    agentAction: "Load the current Ripple protocol, commands, tools, output headers, and stop rules.",
+                    mcpTool: "ripple_get_agent_workflow",
+                    cliCommand: "ripple agent --json",
+                    outputContract: "ripple-agent-workflow",
+                    must: [
+                        "Use the returned versioned protocol for the current repo and session.",
+                        "Run initializeRepo before the first saved plan when repo setup is missing.",
+                        "Run checkReadiness before planning or editing when the runtime can execute local commands.",
+                        "Prefer MCP tools when the runtime has MCP access; otherwise use the CLI commands.",
+                    ],
+                    stopIf: [
+                        "protocol is missing, unsupported, or older than the runtime understands.",
+                    ],
+                    continueIf: [
+                        "protocol=ripple-agent-workflow and version=1.",
+                    ],
+                },
+                {
+                    id: "plan_before_edit",
+                    order: 2,
+                    requiredWhen: "before reading broadly or editing a known target file",
+                    agentAction: "Create a saved plan with task, target file, control mode, policy explanation, and context budget.",
+                    mcpTool: "ripple_plan_context",
+                    cliCommand: "ripple plan --file <file> --task \"<task>\" --mode file --agent --save",
+                    outputContract: "RIPPLE_AGENT_CONTEXT",
+                    must: [
+                        "Save the change intent when edits may follow.",
+                        "Read read_first and symbols_first before changing code.",
+                        "Treat allowed_files and allowed_symbols as the edit boundary.",
+                        "Treat policyExplanation as the repo trust-boundary snapshot for this intent.",
+                    ],
+                    stopIf: [
+                        "no target file is known for a file/function boundary task.",
+                        "the plan cannot be saved but later drift checking is required.",
+                    ],
+                    continueIf: [
+                        "changeIntent exists and editable_files match the intended scope.",
+                    ],
+                },
+                {
+                    id: "approval_gate",
+                    order: 3,
+                    requiredWhen: "when human_gate=required-before-edit or policy requires approval",
+                    agentAction: "Check whether the human approved the saved risky edit gate before changing files.",
+                    mcpTool: "ripple_get_approval_status",
+                    cliCommand: "ripple approval --intent latest --agent",
+                    outputContract: "RIPPLE_APPROVAL_STATUS",
+                    must: [
+                        "Do not treat context reading as approval to edit.",
+                        "Use the approval status for the same saved intent id and gate.",
+                    ],
+                    stopIf: [
+                        "approval status is missing or stale for a required gate.",
+                        "approval belongs to a different intent, policy snapshot, or gate.",
+                    ],
+                    continueIf: [
+                        "approval is not required, or approvalStatus.approved=true for the saved intent.",
+                    ],
+                },
+                {
+                    id: "edit_inside_boundary",
+                    order: 4,
+                    requiredWhen: "after plan and any required approval pass",
+                    agentAction: "Edit only inside the saved trust boundary and keep context-only files read-only unless replanned.",
+                    must: [
+                        "For brainstorm mode, do not edit files.",
+                        "For function mode, edit only the approved symbols.",
+                        "For file mode, edit only the selected file.",
+                        "For task/pr mode, edit only planned editable files.",
+                    ],
+                    stopIf: [
+                        "the task needs a file or symbol outside the saved boundary.",
+                        "the agent needs to touch a human-gated file that was not approved.",
+                    ],
+                    continueIf: [
+                        "all edits remain inside editable_files and allowed_symbols.",
+                    ],
+                },
+                {
+                    id: "audit_after_change",
+                    order: 5,
+                    requiredWhen: "after files are staged, or before handoff in changed-file workflows",
+                    agentAction: "Run the compact Ripple gate or full audit and treat canContinue/canProceed=false as a hard stop.",
+                    mcpTool: "ripple_gate",
+                    cliCommand: "ripple gate --agent --intent latest",
+                    outputContract: "RIPPLE_GATE",
+                    must: [
+                        "Use staged audit for local agent work and changed audit for PR/CI work.",
+                        "Use ripple gate when the agent only needs the final continue/stop handoff.",
+                        "Check drift_verdict, boundary_verdict, policy_drift, approval_status, and can_proceed together.",
+                    ],
+                    stopIf: [
+                        "can_continue=false or can_proceed=false.",
+                        "policyDrift.status=changed.",
+                        "drift_verdict or boundary_verdict blocks the change.",
+                        "approval is required but not approved.",
+                    ],
+                    continueIf: [
+                        "can_continue=true or can_proceed=true and audit status is passed.",
+                    ],
+                },
+                {
+                    id: "repair_or_handoff",
+                    order: 6,
+                    requiredWhen: "when audit fails, or when preparing final human handoff",
+                    agentAction: "Ask Ripple for exact repair actions, or hand off the passed audit summary to the human.",
+                    mcpTool: "ripple_repair_intent_drift",
+                    cliCommand: "ripple repair --agent --intent latest",
+                    outputContract: "RIPPLE_INTENT_DRIFT_REPAIR",
+                    must: [
+                        "Follow blocker fix_actions before widening scope.",
+                        "Unstage files Ripple marks as outside intent unless the human explicitly replans or approves wider scope.",
+                        "Run or report the verify targets from the plan/audit.",
+                    ],
+                    stopIf: [
+                        "repair status is human-review-required.",
+                        "the fix requires widening the saved trust boundary.",
+                    ],
+                    continueIf: [
+                        "repair status is no-repair-needed, or repairs are applied and a fresh audit passes.",
+                    ],
+                },
+            ],
+            stopConditions: [
+                "No saved change intent exists for a task that will edit files.",
+                "A required human approval is missing or stale.",
+                "The agent needs to edit outside allowed_files or allowed_symbols.",
+                "policyDrift.status=changed.",
+                "drift_verdict or boundary_verdict is DANGER or blocks the change.",
+                "audit.canProceed is false.",
+                "repair status is human-review-required.",
+            ],
+            proceedConditions: [
+                "A saved intent exists for the current task.",
+                "Human approval is not required, or approvalStatus.approved=true for the current intent and gate.",
+                "Edits remain inside editable_files and allowed_symbols.",
+                "policyDrift.status is unchanged or not-applicable.",
+                "The audit reports canProceed=true.",
+                "The agent has run or clearly handed off the verify targets.",
+            ],
+        },
+        rules: [
+            "Choose the narrowest control mode before editing: brainstorm, function, file, task, or pr.",
+            "Run planBeforeEditing before reading broadly or editing a known target file.",
+            "Treat policyExplanation inside planBeforeEditing as the normal source of truth for effective mode, policy risk, matched rules, and human gate.",
+            "Treat policyDrift.status=changed as a human-review stop: current repo trust policy differs from the saved intent snapshot.",
+            "Call explainPolicy only for policy-only checks when no task plan is needed.",
+            "Read read_first files and symbols_first symbols before changing code.",
+            "Do not read avoid_first items in the first pass unless the plan forces it.",
+            "Save the change intent from planBeforeEditing so staged checks can detect drift.",
+            "If the plan reports human_gate=required-before-edit, a human should run approveHumanGate after reviewing the plan and before the agent edits.",
+            "Use checkApproval when you need approval state without running the full audit.",
+            "Stay inside allowed_files and allowed_symbols unless the human approves a wider boundary.",
+            "Run initializeRepo once per repo to create the default trust policy and CI gate.",
+            "Run checkReadiness before enabling or debugging CI automation.",
+            "Run installCi when GitHub Actions setup is missing.",
+            "After editing, stage the intended files and run checkAfterStaging against the saved intent.",
+            "Use auditCurrentChange when a human needs one compact report of intent, boundary, policy drift, repair status, and next action.",
+            "Use gateCurrentChange when an agent needs only the final continue, repair, human-review, or restore-readiness decision.",
+            "In CI or PR review, use checkChangedAgainstBase instead of staging files.",
+            "Use ciGate as the default strict automation command for PR checks.",
+            "If staged changes drift from intent or boundary, call repairIntentDrift before widening scope.",
+            "Use verify targets as the narrowest compile, test, or caller-review surface.",
+        ],
+        example: [
+            "ripple init",
+            "ripple plan --file src/auth.ts --task \"change token refresh behavior\" --mode file --agent --save",
+            "ripple approval --intent latest --agent",
+            "ripple approve --intent latest --gate before-risky-edit",
+            "ripple plan --file src/auth.ts --symbol refreshToken --task \"fix retry behavior\" --mode function --agent --save",
+            "git add src/auth.ts",
+            "ripple check --staged --agent --intent latest",
+            "ripple audit --agent --intent latest",
+            "ripple gate --agent --intent latest",
+            "ripple doctor --agent --strict",
+            "ripple check --changed --base origin/main --agent --intent latest",
+            "ripple ci --base origin/main --intent latest --github-annotations",
+            "ripple repair --agent --intent latest",
+        ],
+    };
+}
+exports.getAgentWorkflowSummary = getAgentWorkflowSummary;
+//# sourceMappingURL=agent-workflow.js.map

package/dist/agent-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-workflow.js","sourceRoot":"","sources":["../src/agent-workflow.ts"],"names":[],"mappings":";;;AA+FA,SAAgB,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,qJAAqJ;QAC9J,IAAI,EAAE;YACJ,iBAAiB;YACjB,MAAM;YACN,qBAAqB;YACrB,MAAM;YACN,OAAO;YACP,OAAO;YACP,kBAAkB;SACnB;QACD,YAAY,EAAE;YACZ,UAAU,EAAE,sEAAsE;YAClF,QAAQ,EAAE,6EAA6E;YACvF,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,oDAAoD;YAC1D,EAAE,EAAE,2EAA2E;SAChF;QACD,UAAU,EAAE;YACV,eAAe,EAAE,uFAAuF;YACxG,YAAY,EAAE,kFAAkF;YAChG,WAAW,EAAE,6EAA6E;SAC3F;QACD,cAAc,EAAE;YACd,gBAAgB,EAAE,wKAAwK;YAC1L,cAAc,EAAE,sGAAsG;YACtH,eAAe,EAAE,sJAAsJ;SACxK;QACD,QAAQ,EAAE;YACR,KAAK,EAAE,cAAc;YACrB,cAAc,EAAE,aAAa;YAC7B,cAAc,EAAE,gCAAgC;YAChD,SAAS,EAAE,gBAAgB;YAC3B,aAAa,EAAE,6CAA6C;YAC5D,iBAAiB,EAAE,wEAAwE;YAC3F,iBAAiB,EAAE,+CAA+C;YAClE,uBAAuB,EAAE,6DAA6D;YACtF,kBAAkB,EAAE,sCAAsC;YAC1D,iBAAiB,EAAE,qCAAqC;YACxD,aAAa,EAAE,yCAAyC;YACxD,gBAAgB,EAAE,yDAAyD;YAC3E,MAAM,EAAE,6DAA6D;YACrE,iBAAiB,EAAE,uCAAuC;SAC3D;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE,2BAA2B;YACrC,cAAc,EAAE,eAAe;YAC/B,aAAa,EAAE,uBAAuB;YACtC,iBAAiB,EAAE,qBAAqB;YACxC,iBAAiB,EAAE,qBAAqB;YACxC,uBAAuB,EAAE,sBAAsB;YAC/C,kBAAkB,EAAE,qBAAqB;YACzC,iBAAiB,EAAE,aAAa;YAChC,aAAa,EAAE,4BAA4B;YAC3C,iBAAiB,EAAE,4BAA4B;SAChD;QACD,eAAe,EAAE;YACf,YAAY,EAAE,eAAe;YAC7B,UAAU,EAAE,sBAAsB;YAClC,iBAAiB,EAAE,qBAAqB;YACxC,YAAY,EAAE,4BAA4B;YAC1C,WAAW,EAAE,cAAc;YAC3B,UAAU,EAAE,aAAa;YACzB,cAAc,EAAE,iBAAiB;YACjC,oBAAoB,EAAE,wBAAwB;YAC9C,cAAc,EAAE;gBACd,QAAQ;gBACR,oBAAoB;gBACpB,mBAAmB;gBACnB,kBAAkB;gBAClB,kBAAkB;gBAClB,iBAAiB;gBACjB,iBAAiB;gBACjB,OAAO;gBACP,KAAK;gBACL,aAAa;gBACb,eAAe;gBACf,MAAM;gBACN,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,kBAAkB;gBAClB,mBAAmB;gBACnB,kBAAkB;gBAClB,iBAAiB;gBACjB,gBAAgB;gBAChB,gBAAgB;gBAChB,cAAc;gBACd,YAAY;gBACZ,eAAe;gBACf,iBAAiB;gBACjB,eAAe;gBACf,YAAY;gBACZ,gBAAgB;gBAChB,eAAe;gBACf,QAAQ;gBACR,aAAa;aACd;YACD,mBAAmB,EAAE;gBACnB,SAAS;gBACT,eAAe;gBACf,gBAAgB;gBAChB,qBAAqB;gBACrB,sBAAsB;gBACtB,WAAW;gBACX,WAAW;gBACX,kBAAkB;gBAClB,mBAAmB;gBACnB,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,iBAAiB;gBACjB,gBAAgB;gBAChB,cAAc;gBACd,gBAAgB;gBAChB,eAAe;gBACf,eAAe;gBACf,iBAAiB;gBACjB,gBAAgB;gBAChB,uBAAuB;gBACvB,eAAe;gBACf,YAAY;gBACZ,eAAe;gBACf,QAAQ;aACT;YACD,cAAc,EAAE;gBACd,SAAS;gBACT,eAAe;gBACf,gBAAgB;gBAChB,WAAW;gBACX,WAAW;gBACX,kBAAkB;gBAClB,mBAAmB;gBACnB,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,iBAAiB;gBACjB,SAAS;gBACT,QAAQ;gBACR,eAAe;gBACf,kBAAkB;gBAClB,aAAa;gBACb,QAAQ;gBACR,YAAY;aACb;YACD,aAAa,EAAE;gBACb,SAAS;gBACT,QAAQ;gBACR,UAAU;gBACV,aAAa;gBACb,qBAAqB;gBACrB,sBAAsB;gBACtB,iBAAiB;gBACjB,mBAAmB;gBACnB,mBAAmB;gBACnB,mBAAmB;gBACnB,eAAe;gBACf,WAAW;gBACX,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,cAAc;gBACd,iBAAiB;gBACjB,eAAe;gBACf,oBAAoB;gBACpB,0BAA0B;gBAC1B,4BAA4B;gBAC5B,kBAAkB;gBAClB,eAAe;gBACf,QAAQ;gBACR,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,QAAQ;gBACR,UAAU;gBACV,cAAc;gBACd,WAAW;gBACX,aAAa;gBACb,qBAAqB;gBACrB,sBAAsB;gBACtB,cAAc;gBACd,iBAAiB;gBACjB,KAAK;gBACL,SAAS;gBACT,WAAW;gBACX,iBAAiB;gBACjB,gBAAgB;gBAChB,gBAAgB;gBAChB,iBAAiB;gBACjB,kBAAkB;gBAClB,kBAAkB;gBAClB,iBAAiB;aAClB;SACF;QACD,eAAe,EAAE;YACf,QAAQ,EAAE,+BAA+B;YACzC,OAAO,EAAE,CAAC;YACV,SAAS,EACP,4JAA4J;YAC9J,kBAAkB,EAAE;gBAClB,mBAAmB;gBACnB,0BAA0B;gBAC1B,mBAAmB;gBACnB,gBAAgB;aACjB;YACD,aAAa,EAAE;gBACb,2EAA2E;gBAC3E,gGAAgG;gBAChG,0HAA0H;gBAC1H,qGAAqG;aACtG;YACD,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,8CAA8C;oBAC5D,WAAW,EAAE,oFAAoF;oBACjG,OAAO,EAAE,2BAA2B;oBACpC,UAAU,EAAE,qBAAqB;oBACjC,cAAc,EAAE,uBAAuB;oBACvC,IAAI,EAAE;wBACJ,uEAAuE;wBACvE,4EAA4E;wBAC5E,4FAA4F;wBAC5F,mFAAmF;qBACpF;oBACD,MAAM,EAAE;wBACN,0EAA0E;qBAC3E;oBACD,UAAU,EAAE;wBACV,+CAA+C;qBAChD;iBACF;gBACD;oBACE,EAAE,EAAE,kBAAkB;oBACtB,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,uDAAuD;oBACrE,WAAW,EAAE,mGAAmG;oBAChH,OAAO,EAAE,qBAAqB;oBAC9B,UAAU,EAAE,wEAAwE;oBACpF,cAAc,EAAE,sBAAsB;oBACtC,IAAI,EAAE;wBACJ,+CAA+C;wBAC/C,yDAAyD;wBACzD,+DAA+D;wBAC/D,8EAA8E;qBAC/E;oBACD,MAAM,EAAE;wBACN,4DAA4D;wBAC5D,gEAAgE;qBACjE;oBACD,UAAU,EAAE;wBACV,kEAAkE;qBACnE;iBACF;gBACD;oBACE,EAAE,EAAE,eAAe;oBACnB,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,kEAAkE;oBAChF,WAAW,EAAE,mFAAmF;oBAChG,OAAO,EAAE,4BAA4B;oBACrC,UAAU,EAAE,yCAAyC;oBACrD,cAAc,EAAE,wBAAwB;oBACxC,IAAI,EAAE;wBACJ,mDAAmD;wBACnD,gEAAgE;qBACjE;oBACD,MAAM,EAAE;wBACN,0DAA0D;wBAC1D,mEAAmE;qBACpE;oBACD,UAAU,EAAE;wBACV,iFAAiF;qBAClF;iBACF;gBACD;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,2CAA2C;oBACzD,WAAW,EAAE,mGAAmG;oBAChH,IAAI,EAAE;wBACJ,yCAAyC;wBACzC,oDAAoD;wBACpD,6CAA6C;wBAC7C,qDAAqD;qBACtD;oBACD,MAAM,EAAE;wBACN,6DAA6D;wBAC7D,oEAAoE;qBACrE;oBACD,UAAU,EAAE;wBACV,6DAA6D;qBAC9D;iBACF;gBACD;oBACE,EAAE,EAAE,oBAAoB;oBACxB,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,qEAAqE;oBACnF,WAAW,EAAE,kGAAkG;oBAC/G,OAAO,EAAE,aAAa;oBACtB,UAAU,EAAE,qCAAqC;oBACjD,cAAc,EAAE,aAAa;oBAC7B,IAAI,EAAE;wBACJ,yEAAyE;wBACzE,4EAA4E;wBAC5E,iGAAiG;qBAClG;oBACD,MAAM,EAAE;wBACN,0CAA0C;wBAC1C,6BAA6B;wBAC7B,sDAAsD;wBACtD,wCAAwC;qBACzC;oBACD,UAAU,EAAE;wBACV,mEAAmE;qBACpE;iBACF;gBACD;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,yDAAyD;oBACvE,WAAW,EAAE,yFAAyF;oBACtG,OAAO,EAAE,4BAA4B;oBACrC,UAAU,EAAE,uCAAuC;oBACnD,cAAc,EAAE,4BAA4B;oBAC5C,IAAI,EAAE;wBACJ,mDAAmD;wBACnD,2GAA2G;wBAC3G,uDAAuD;qBACxD;oBACD,MAAM,EAAE;wBACN,yCAAyC;wBACzC,qDAAqD;qBACtD;oBACD,UAAU,EAAE;wBACV,qFAAqF;qBACtF;iBACF;aACF;YACD,cAAc,EAAE;gBACd,gEAAgE;gBAChE,gDAAgD;gBAChD,mEAAmE;gBACnE,6BAA6B;gBAC7B,mEAAmE;gBACnE,4BAA4B;gBAC5B,yCAAyC;aAC1C;YACD,iBAAiB,EAAE;gBACjB,6CAA6C;gBAC7C,kGAAkG;gBAClG,yDAAyD;gBACzD,oDAAoD;gBACpD,oCAAoC;gBACpC,6DAA6D;aAC9D;SACF;QACD,KAAK,EAAE;YACL,4FAA4F;YAC5F,8EAA8E;YAC9E,gJAAgJ;YAChJ,4HAA4H;YAC5H,6EAA6E;YAC7E,uEAAuE;YACvE,4EAA4E;YAC5E,kFAAkF;YAClF,+IAA+I;YAC/I,gFAAgF;YAChF,2FAA2F;YAC3F,kFAAkF;YAClF,gEAAgE;YAChE,qDAAqD;YACrD,6FAA6F;YAC7F,iIAAiI;YACjI,yHAAyH;YACzH,2EAA2E;YAC3E,oEAAoE;YACpE,gGAAgG;YAChG,8EAA8E;SAC/E;QACD,OAAO,EAAE;YACP,aAAa;YACb,oGAAoG;YACpG,yCAAyC;YACzC,yDAAyD;YACzD,mHAAmH;YACnH,qBAAqB;YACrB,+CAA+C;YAC/C,sCAAsC;YACtC,qCAAqC;YACrC,gCAAgC;YAChC,mEAAmE;YACnE,mEAAmE;YACnE,uCAAuC;SACxC;KACF,CAAC;AACJ,CAAC;AA/YD,0DA+YC"}

package/dist/approval.d.ts

@@ -0,0 +1,45 @@
+import type { ChangeIntent, ControlBoundaryRisk, ControlMode, HumanGate } from "./change-intent";
+export type RippleApprovalGate = "before-risky-edit" | "before-merge";
+export type RippleApprovalStatusValue = "not-required" | "missing" | "approved" | "stale";
+export type RippleApprovalDecision = "continue" | "human-review";
+export type RippleApprovalRecord = {
+    protocol: "ripple-approval";
+    version: 1;
+    id: string;
+    intentId: string;
+    gate: RippleApprovalGate;
+    approvedAt: string;
+    approvedBy: string;
+    targetFile: string;
+    task: string;
+    controlMode: ControlMode;
+    humanGate: HumanGate;
+    boundaryRisk: ControlBoundaryRisk;
+    intentFingerprint: string;
+    policyFingerprint: string;
+    reason?: string;
+};
+export type RippleApprovalStatus = {
+    protocol: "ripple-approval-status";
+    version: 1;
+    required: boolean;
+    approved: boolean;
+    status: RippleApprovalStatusValue;
+    decision: RippleApprovalDecision;
+    gate?: RippleApprovalGate;
+    summary: string;
+    approval?: RippleApprovalRecord;
+    approvalPath?: string;
+    why: string[];
+    nextSteps: string[];
+};
+export type RecordRippleApprovalOptions = {
+    gate?: RippleApprovalGate;
+    approvedBy?: string;
+    reason?: string;
+    approvedAt?: string;
+};
+export declare function approvalGateForHumanGate(humanGate: HumanGate): RippleApprovalGate | undefined;
+export declare function recordRippleApproval(workspaceRoot: string, intent: ChangeIntent, options?: RecordRippleApprovalOptions): RippleApprovalRecord;
+export declare function resolveRippleApprovalStatus(workspaceRoot: string, intent: ChangeIntent, gateOverride?: RippleApprovalGate): RippleApprovalStatus;
+export declare function rippleApprovalPath(workspaceRoot: string, intentId: string, gate: RippleApprovalGate): string;